@microsoft/m365-spec-parser 0.1.1-alpha.f04ac4ba4.0 → 0.1.1-alpha.f2bd7316b.0

package/dist/index.node.cjs.js

@@ -61,7 +61,8 @@ exports.ErrorType = void 0;
     ErrorType["NoExtraAPICanBeAdded"] = "no-extra-api-can-be-added";
     ErrorType["ResolveServerUrlFailed"] = "resolve-server-url-failed";
     ErrorType["SwaggerNotSupported"] = "swagger-not-supported";
-    ErrorType["MultipleAPIKeyNotSupported"] = "multiple-api-key-not-supported";
+    ErrorType["MultipleAuthNotSupported"] = "multiple-auth-not-supported";
+    ErrorType["SpecVersionNotSupported"] = "spec-version-not-supported";
     ErrorType["ListFailed"] = "list-failed";
     ErrorType["listSupportedAPIInfoFailed"] = "list-supported-api-info-failed";
     ErrorType["FilterSpecFailed"] = "filter-spec-failed";
@@ -70,6 +71,21 @@ exports.ErrorType = void 0;
     ErrorType["GenerateFailed"] = "generate-failed";
     ErrorType["ValidateFailed"] = "validate-failed";
     ErrorType["GetSpecFailed"] = "get-spec-failed";
+    ErrorType["AuthTypeIsNotSupported"] = "auth-type-is-not-supported";
+    ErrorType["MissingOperationId"] = "missing-operation-id";
+    ErrorType["PostBodyContainMultipleMediaTypes"] = "post-body-contain-multiple-media-types";
+    ErrorType["ResponseContainMultipleMediaTypes"] = "response-contain-multiple-media-types";
+    ErrorType["ResponseJsonIsEmpty"] = "response-json-is-empty";
+    ErrorType["PostBodySchemaIsNotJson"] = "post-body-schema-is-not-json";
+    ErrorType["PostBodyContainsRequiredUnsupportedSchema"] = "post-body-contains-required-unsupported-schema";
+    ErrorType["ParamsContainRequiredUnsupportedSchema"] = "params-contain-required-unsupported-schema";
+    ErrorType["ParamsContainsNestedObject"] = "params-contains-nested-object";
+    ErrorType["RequestBodyContainsNestedObject"] = "request-body-contains-nested-object";
+    ErrorType["ExceededRequiredParamsLimit"] = "exceeded-required-params-limit";
+    ErrorType["NoParameter"] = "no-parameter";
+    ErrorType["NoAPIInfo"] = "no-api-info";
+    ErrorType["MethodNotAllowed"] = "method-not-allowed";
+    ErrorType["UrlPathNotExist"] = "url-path-not-exist";
     ErrorType["Cancelled"] = "cancelled";
     ErrorType["Unknown"] = "unknown";
 })(exports.ErrorType || (exports.ErrorType = {}));
@@ -109,7 +125,7 @@ ConstantString.RemoteRefNotSupported = "Remote reference is not supported: %s.";
 ConstantString.MissingOperationId = "Missing operationIds: %s.";
 ConstantString.NoSupportedApi = "No supported API is found in the OpenAPI description document: only GET and POST methods are supported, additionally, there can be at most one required parameter, and no auth is allowed.";
 ConstantString.AdditionalPropertiesNotSupported = "'additionalProperties' is not supported, and will be ignored.";
-ConstantString.SchemaNotSupported = "'oneOf', 'anyOf', and 'not' schema are not supported: %s.";
+ConstantString.SchemaNotSupported = "'oneOf', 'allOf', 'anyOf', and 'not' schema are not supported: %s.";
 ConstantString.UnknownSchema = "Unknown schema: %s.";
 ConstantString.UrlProtocolNotSupported = "Server url is not correct: protocol %s is not supported, you should use https protocol instead.";
 ConstantString.RelativeServerUrlNotSupported = "Server url is not correct: relative server url is not supported.";
@@ -117,7 +133,8 @@ ConstantString.ResolveServerUrlFailed = "Unable to resolve the server URL: pleas
 ConstantString.OperationOnlyContainsOptionalParam = "Operation %s contains multiple optional parameters. The first optional parameter is used for this command.";
 ConstantString.ConvertSwaggerToOpenAPI = "The Swagger 2.0 file has been converted to OpenAPI 3.0.";
 ConstantString.SwaggerNotSupported = "Swagger 2.0 is not supported. Please convert to OpenAPI 3.0 manually before proceeding.";
-ConstantString.MultipleAPIKeyNotSupported = "Multiple API keys are not supported. Please make sure that all selected APIs use the same API key.";
+ConstantString.SpecVersionNotSupported = "Unsupported OpenAPI version %s. Please use version 3.0.x.";
+ConstantString.MultipleAuthNotSupported = "Multiple authentication methods are unsupported. Ensure all selected APIs use identical authentication.";
 ConstantString.UnsupportedSchema = "Unsupported schema in %s %s: %s";
 ConstantString.WrappedCardVersion = "devPreview";
 ConstantString.WrappedCardSchema = "https://developer.microsoft.com/json-schemas/teams/vDevPreview/MicrosoftTeams.ResponseRenderingTemplate.schema.json";
@@ -128,8 +145,14 @@ ConstantString.AdaptiveCardVersion = "1.5";
 ConstantString.AdaptiveCardSchema = "http://adaptivecards.io/schemas/adaptive-card.json";
 ConstantString.AdaptiveCardType = "AdaptiveCard";
 ConstantString.TextBlockType = "TextBlock";
+ConstantString.ImageType = "Image";
 ConstantString.ContainerType = "Container";
-ConstantString.RegistrationIdPostfix = "REGISTRATION_ID";
+ConstantString.RegistrationIdPostfix = {
+    apiKey: "REGISTRATION_ID",
+    oauth2: "CONFIGURATION_ID",
+    http: "REGISTRATION_ID",
+    openIdConnect: "REGISTRATION_ID",
+};
 ConstantString.ResponseCodeFor20X = [
     "200",
     "201",
@@ -188,9 +211,11 @@ ConstantString.ShortDescriptionMaxLens = 80;
 ConstantString.FullDescriptionMaxLens = 4000;
 ConstantString.CommandDescriptionMaxLens = 128;
 ConstantString.ParameterDescriptionMaxLens = 128;
+ConstantString.ConversationStarterMaxLens = 50;
 ConstantString.CommandTitleMaxLens = 32;
 ConstantString.ParameterTitleMaxLens = 32;
-ConstantString.SMERequiredParamsMaxNum = 5;
+ConstantString.SMERequiredParamsMaxNum = 5;
+ConstantString.DefaultPluginId = "plugin_1";
 
 // Copyright (c) Microsoft Corporation.
 class SpecParserError extends Error {
@@ -213,242 +238,33 @@ class Utils {
         }
         return false;
     }
-    static checkParameters(paramObject, isCopilot) {
-        const paramResult = {
-            requiredNum: 0,
-            optionalNum: 0,
-            isValid: true,
-        };
-        if (!paramObject) {
-            return paramResult;
-        }
-        for (let i = 0; i < paramObject.length; i++) {
-            const param = paramObject[i];
-            const schema = param.schema;
-            if (isCopilot && this.hasNestedObjectInSchema(schema)) {
-                paramResult.isValid = false;
-                continue;
-            }
-            const isRequiredWithoutDefault = param.required && schema.default === undefined;
-            if (isCopilot) {
-                if (isRequiredWithoutDefault) {
-                    paramResult.requiredNum = paramResult.requiredNum + 1;
-                }
-                else {
-                    paramResult.optionalNum = paramResult.optionalNum + 1;
-                }
-                continue;
-            }
-            if (param.in === "header" || param.in === "cookie") {
-                if (isRequiredWithoutDefault) {
-                    paramResult.isValid = false;
-                }
-                continue;
-            }
-            if (schema.type !== "boolean" &&
-                schema.type !== "string" &&
-                schema.type !== "number" &&
-                schema.type !== "integer") {
-                if (isRequiredWithoutDefault) {
-                    paramResult.isValid = false;
-                }
-                continue;
-            }
-            if (param.in === "query" || param.in === "path") {
-                if (isRequiredWithoutDefault) {
-                    paramResult.requiredNum = paramResult.requiredNum + 1;
-                }
-                else {
-                    paramResult.optionalNum = paramResult.optionalNum + 1;
-                }
-            }
-        }
-        return paramResult;
-    }
-    static checkPostBody(schema, isRequired = false, isCopilot = false) {
-        var _a;
-        const paramResult = {
-            requiredNum: 0,
-            optionalNum: 0,
-            isValid: true,
-        };
-        if (Object.keys(schema).length === 0) {
-            return paramResult;
-        }
-        const isRequiredWithoutDefault = isRequired && schema.default === undefined;
-        if (isCopilot && this.hasNestedObjectInSchema(schema)) {
-            paramResult.isValid = false;
-            return paramResult;
-        }
-        if (schema.type === "string" ||
-            schema.type === "integer" ||
-            schema.type === "boolean" ||
-            schema.type === "number") {
-            if (isRequiredWithoutDefault) {
-                paramResult.requiredNum = paramResult.requiredNum + 1;
-            }
-            else {
-                paramResult.optionalNum = paramResult.optionalNum + 1;
-            }
-        }
-        else if (schema.type === "object") {
-            const { properties } = schema;
-            for (const property in properties) {
-                let isRequired = false;
-                if (schema.required && ((_a = schema.required) === null || _a === void 0 ? void 0 : _a.indexOf(property)) >= 0) {
-                    isRequired = true;
-                }
-                const result = Utils.checkPostBody(properties[property], isRequired, isCopilot);
-                paramResult.requiredNum += result.requiredNum;
-                paramResult.optionalNum += result.optionalNum;
-                paramResult.isValid = paramResult.isValid && result.isValid;
-            }
-        }
-        else {
-            if (isRequiredWithoutDefault && !isCopilot) {
-                paramResult.isValid = false;
-            }
-        }
-        return paramResult;
-    }
-    /**
-     * Checks if the given API is supported.
-     * @param {string} method - The HTTP method of the API.
-     * @param {string} path - The path of the API.
-     * @param {OpenAPIV3.Document} spec - The OpenAPI specification document.
-     * @returns {boolean} - Returns true if the API is supported, false otherwise.
-     * @description The following APIs are supported:
-     * 1. only support Get/Post operation without auth property
-     * 2. parameter inside query or path only support string, number, boolean and integer
-     * 3. parameter inside post body only support string, number, boolean, integer and object
-     * 4. request body + required parameters <= 1
-     * 5. response body should be “application/json” and not empty, and response code should be 20X
-     * 6. only support request body with “application/json” content type
-     */
-    static isSupportedApi(method, path, spec, options) {
-        var _a;
-        const pathObj = spec.paths[path];
-        method = method.toLocaleLowerCase();
-        if (pathObj) {
-            if (((_a = options.allowMethods) === null || _a === void 0 ? void 0 : _a.includes(method)) && pathObj[method]) {
-                const securities = pathObj[method].security;
-                const authArray = Utils.getAuthArray(securities, spec);
-                if (!Utils.isSupportedAuth(authArray, options)) {
-                    return false;
-                }
-                const operationObject = pathObj[method];
-                if (!options.allowMissingId && !operationObject.operationId) {
-                    return false;
-                }
-                const paramObject = operationObject.parameters;
-                const requestBody = operationObject.requestBody;
-                const requestJsonBody = requestBody === null || requestBody === void 0 ? void 0 : requestBody.content["application/json"];
-                const mediaTypesCount = Object.keys((requestBody === null || requestBody === void 0 ? void 0 : requestBody.content) || {}).length;
-                if (mediaTypesCount > 1) {
-                    return false;
-                }
-                const responseJson = Utils.getResponseJson(operationObject);
-                if (Object.keys(responseJson).length === 0) {
-                    return false;
-                }
-                let requestBodyParamResult = {
-                    requiredNum: 0,
-                    optionalNum: 0,
-                    isValid: true,
-                };
-                const isCopilot = options.projectType === exports.ProjectType.Copilot;
-                if (requestJsonBody) {
-                    const requestBodySchema = requestJsonBody.schema;
-                    if (isCopilot && requestBodySchema.type !== "object") {
-                        return false;
-                    }
-                    requestBodyParamResult = Utils.checkPostBody(requestBodySchema, requestBody.required, isCopilot);
-                }
-                if (!requestBodyParamResult.isValid) {
-                    return false;
-                }
-                const paramResult = Utils.checkParameters(paramObject, isCopilot);
-                if (!paramResult.isValid) {
-                    return false;
-                }
-                // Copilot support arbitrary parameters
-                if (isCopilot) {
-                    return true;
-                }
-                if (requestBodyParamResult.requiredNum + paramResult.requiredNum > 1) {
-                    if (options.allowMultipleParameters &&
-                        requestBodyParamResult.requiredNum + paramResult.requiredNum <=
-                            ConstantString.SMERequiredParamsMaxNum) {
-                        return true;
-                    }
-                    return false;
-                }
-                else if (requestBodyParamResult.requiredNum +
-                    requestBodyParamResult.optionalNum +
-                    paramResult.requiredNum +
-                    paramResult.optionalNum ===
-                    0) {
-                    return false;
-                }
-                else {
-                    return true;
-                }
-            }
-        }
-        return false;
+    static containMultipleMediaTypes(bodyObject) {
+        return Object.keys((bodyObject === null || bodyObject === void 0 ? void 0 : bodyObject.content) || {}).length > 1;
     }
-    static isSupportedAuth(authSchemaArray, options) {
-        if (authSchemaArray.length === 0) {
-            return true;
-        }
-        if (options.allowAPIKeyAuth || options.allowOauth2) {
-            // Currently we don't support multiple auth in one operation
-            if (authSchemaArray.length > 0 && authSchemaArray.every((auths) => auths.length > 1)) {
-                return false;
-            }
-            for (const auths of authSchemaArray) {
-                if (auths.length === 1) {
-                    if (!options.allowOauth2 &&
-                        options.allowAPIKeyAuth &&
-                        Utils.isAPIKeyAuth(auths[0].authSchema)) {
-                        return true;
-                    }
-                    else if (!options.allowAPIKeyAuth &&
-                        options.allowOauth2 &&
-                        Utils.isBearerTokenAuth(auths[0].authSchema)) {
-                        return true;
-                    }
-                    else if (options.allowAPIKeyAuth &&
-                        options.allowOauth2 &&
-                        (Utils.isAPIKeyAuth(auths[0].authSchema) ||
-                            Utils.isBearerTokenAuth(auths[0].authSchema))) {
-                        return true;
-                    }
-                }
-            }
-        }
-        return false;
+    static isBearerTokenAuth(authScheme) {
+        return authScheme.type === "http" && authScheme.scheme === "bearer";
     }
-    static isAPIKeyAuth(authSchema) {
-        return authSchema.type === "apiKey";
+    static isAPIKeyAuth(authScheme) {
+        return authScheme.type === "apiKey";
     }
-    static isBearerTokenAuth(authSchema) {
-        return (authSchema.type === "oauth2" ||
-            authSchema.type === "openIdConnect" ||
-            (authSchema.type === "http" && authSchema.scheme === "bearer"));
+    static isOAuthWithAuthCodeFlow(authScheme) {
+        return !!(authScheme.type === "oauth2" &&
+            authScheme.flows &&
+            authScheme.flows.authorizationCode);
     }
     static getAuthArray(securities, spec) {
         var _a;
         const result = [];
         const securitySchemas = (_a = spec.components) === null || _a === void 0 ? void 0 : _a.securitySchemes;
-        if (securities && securitySchemas) {
-            for (let i = 0; i < securities.length; i++) {
-                const security = securities[i];
+        const securitiesArr = securities !== null && securities !== void 0 ? securities : spec.security;
+        if (securitiesArr && securitySchemas) {
+            for (let i = 0; i < securitiesArr.length; i++) {
+                const security = securitiesArr[i];
                 const authArray = [];
                 for (const name in security) {
                     const auth = securitySchemas[name];
                     authArray.push({
-                        authSchema: auth,
+                        authScheme: auth,
                         name: name,
                     });
                 }
@@ -460,24 +276,47 @@ class Utils {
         result.sort((a, b) => a[0].name.localeCompare(b[0].name));
         return result;
     }
+    static getAuthInfo(spec) {
+        let authInfo = undefined;
+        for (const url in spec.paths) {
+            for (const method in spec.paths[url]) {
+                const operation = spec.paths[url][method];
+                const authArray = Utils.getAuthArray(operation.security, spec);
+                if (authArray && authArray.length > 0) {
+                    const currentAuth = authArray[0][0];
+                    if (!authInfo) {
+                        authInfo = authArray[0][0];
+                    }
+                    else if (authInfo.name !== currentAuth.name) {
+                        throw new SpecParserError(ConstantString.MultipleAuthNotSupported, exports.ErrorType.MultipleAuthNotSupported);
+                    }
+                }
+            }
+        }
+        return authInfo;
+    }
     static updateFirstLetter(str) {
         return str.charAt(0).toUpperCase() + str.slice(1);
     }
     static getResponseJson(operationObject) {
         var _a, _b;
         let json = {};
+        let multipleMediaType = false;
         for (const code of ConstantString.ResponseCodeFor20X) {
             const responseObject = (_a = operationObject === null || operationObject === void 0 ? void 0 : operationObject.responses) === null || _a === void 0 ? void 0 : _a[code];
-            const mediaTypesCount = Object.keys((responseObject === null || responseObject === void 0 ? void 0 : responseObject.content) || {}).length;
-            if (mediaTypesCount > 1) {
-                return {};
-            }
             if ((_b = responseObject === null || responseObject === void 0 ? void 0 : responseObject.content) === null || _b === void 0 ? void 0 : _b["application/json"]) {
+                multipleMediaType = false;
                 json = responseObject.content["application/json"];
-                break;
+                if (Utils.containMultipleMediaTypes(responseObject)) {
+                    multipleMediaType = true;
+                    json = {};
+                }
+                else {
+                    break;
+                }
             }
         }
-        return json;
+        return { json, multipleMediaType };
     }
     static convertPathToCamelCase(path) {
         const pathSegments = path.split(/[./{]/);
@@ -497,10 +336,10 @@ class Utils {
             return undefined;
         }
     }
-    static resolveServerUrl(url) {
+    static resolveEnv(str) {
         const placeHolderReg = /\${{\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*}}/g;
-        let matches = placeHolderReg.exec(url);
-        let newUrl = url;
+        let matches = placeHolderReg.exec(str);
+        let newStr = str;
         while (matches != null) {
             const envVar = matches[1];
             const envVal = process.env[envVar];
@@ -508,17 +347,17 @@ class Utils {
                 throw new Error(Utils.format(ConstantString.ResolveServerUrlFailed, envVar));
             }
             else {
-                newUrl = newUrl.replace(matches[0], envVal);
+                newStr = newStr.replace(matches[0], envVal);
             }
-            matches = placeHolderReg.exec(url);
+            matches = placeHolderReg.exec(str);
         }
-        return newUrl;
+        return newStr;
     }
     static checkServerUrl(servers) {
         const errors = [];
         let serverUrl;
         try {
-            serverUrl = Utils.resolveServerUrl(servers[0].url);
+            serverUrl = Utils.resolveEnv(servers[0].url);
         }
         catch (err) {
             errors.push({
@@ -549,6 +388,7 @@ class Utils {
         return errors;
     }
     static validateServer(spec, options) {
+        var _a;
         const errors = [];
         let hasTopLevelServers = false;
         let hasPathLevelServers = false;
@@ -569,7 +409,7 @@ class Utils {
             }
             for (const method in methods) {
                 const operationObject = methods[method];
-                if (Utils.isSupportedApi(method, path, spec, options)) {
+                if (((_a = options.allowMethods) === null || _a === void 0 ? void 0 : _a.includes(method)) && operationObject) {
                     if ((operationObject === null || operationObject === void 0 ? void 0 : operationObject.servers) && operationObject.servers.length >= 1) {
                         hasOperationLevelServers = true;
                         const serverErrors = Utils.checkServerUrl(operationObject.servers);
@@ -612,6 +452,7 @@ class Utils {
                 Utils.updateParameterWithInputType(schema, parameter);
             }
             if (isRequired && schema.default === undefined) {
+                parameter.isRequired = true;
                 requiredParams.push(parameter);
             }
             else {
@@ -675,6 +516,7 @@ class Utils {
                 }
                 if (param.in !== "header" && param.in !== "cookie") {
                     if (param.required && (schema === null || schema === void 0 ? void 0 : schema.default) === undefined) {
+                        parameter.isRequired = true;
                         requiredParams.push(parameter);
                     }
                     else {
@@ -694,13 +536,7 @@ class Utils {
             }
         }
         const operationId = operationItem.operationId;
-        const parameters = [];
-        if (requiredParams.length !== 0) {
-            parameters.push(...requiredParams);
-        }
-        else {
-            parameters.push(optionalParams[0]);
-        }
+        const parameters = [...requiredParams, ...optionalParams];
         const command = {
             context: ["compose"],
             type: "query",
@@ -709,353 +545,575 @@ class Utils {
             parameters: parameters,
             description: ((_b = operationItem.description) !== null && _b !== void 0 ? _b : "").slice(0, ConstantString.CommandDescriptionMaxLens),
         };
-        let warning = undefined;
-        if (requiredParams.length === 0 && optionalParams.length > 1) {
-            warning = {
-                type: exports.WarningType.OperationOnlyContainsOptionalParam,
-                content: Utils.format(ConstantString.OperationOnlyContainsOptionalParam, operationId),
-                data: operationId,
-            };
+        return command;
+    }
+    static format(str, ...args) {
+        let index = 0;
+        return str.replace(/%s/g, () => {
+            const arg = args[index++];
+            return arg !== undefined ? arg : "";
+        });
+    }
+    static getSafeRegistrationIdEnvName(authName) {
+        if (!authName) {
+            return "";
         }
-        return [command, warning];
+        let safeRegistrationIdEnvName = authName.toUpperCase().replace(/[^A-Z0-9_]/g, "_");
+        if (!safeRegistrationIdEnvName.match(/^[A-Z]/)) {
+            safeRegistrationIdEnvName = "PREFIX_" + safeRegistrationIdEnvName;
+        }
+        return safeRegistrationIdEnvName;
     }
-    static listSupportedAPIs(spec, options) {
-        const paths = spec.paths;
+    static getServerObject(spec, method, path) {
+        const pathObj = spec.paths[path];
+        const operationObject = pathObj[method];
+        const rootServer = spec.servers && spec.servers[0];
+        const methodServer = spec.paths[path].servers && spec.paths[path].servers[0];
+        const operationServer = operationObject.servers && operationObject.servers[0];
+        const serverUrl = operationServer || methodServer || rootServer;
+        return serverUrl;
+    }
+}
+
+// Copyright (c) Microsoft Corporation.
+class Validator {
+    listAPIs() {
+        var _a;
+        if (this.apiMap) {
+            return this.apiMap;
+        }
+        const paths = this.spec.paths;
         const result = {};
         for (const path in paths) {
             const methods = paths[path];
             for (const method in methods) {
-                // For developer preview, only support GET operation with only 1 parameter without auth
-                if (Utils.isSupportedApi(method, path, spec, options)) {
-                    const operationObject = methods[method];
-                    result[`${method.toUpperCase()} ${path}`] = operationObject;
+                const operationObject = methods[method];
+                if (((_a = this.options.allowMethods) === null || _a === void 0 ? void 0 : _a.includes(method)) && operationObject) {
+                    const validateResult = this.validateAPI(method, path);
+                    result[`${method.toUpperCase()} ${path}`] = {
+                        operation: operationObject,
+                        isValid: validateResult.isValid,
+                        reason: validateResult.reason,
+                    };
                 }
             }
         }
+        this.apiMap = result;
         return result;
     }
-    static validateSpec(spec, parser, isSwaggerFile, options) {
-        const errors = [];
-        const warnings = [];
-        if (isSwaggerFile) {
-            warnings.push({
-                type: exports.WarningType.ConvertSwaggerToOpenAPI,
-                content: ConstantString.ConvertSwaggerToOpenAPI,
+    validateSpecVersion() {
+        const result = { errors: [], warnings: [] };
+        if (this.spec.openapi >= "3.1.0") {
+            result.errors.push({
+                type: exports.ErrorType.SpecVersionNotSupported,
+                content: Utils.format(ConstantString.SpecVersionNotSupported, this.spec.openapi),
+                data: this.spec.openapi,
             });
         }
-        // Server validation
-        const serverErrors = Utils.validateServer(spec, options);
-        errors.push(...serverErrors);
-        // Remote reference not supported
-        const refPaths = parser.$refs.paths();
-        // refPaths [0] is the current spec file path
-        if (refPaths.length > 1) {
-            errors.push({
-                type: exports.ErrorType.RemoteRefNotSupported,
-                content: Utils.format(ConstantString.RemoteRefNotSupported, refPaths.join(", ")),
-                data: refPaths,
-            });
-        }
-        // No supported API
-        const apiMap = Utils.listSupportedAPIs(spec, options);
-        if (Object.keys(apiMap).length === 0) {
-            errors.push({
+        return result;
+    }
+    validateSpecServer() {
+        const result = { errors: [], warnings: [] };
+        const serverErrors = Utils.validateServer(this.spec, this.options);
+        result.errors.push(...serverErrors);
+        return result;
+    }
+    validateSpecNoSupportAPI() {
+        const result = { errors: [], warnings: [] };
+        const apiMap = this.listAPIs();
+        const validAPIs = Object.entries(apiMap).filter(([, value]) => value.isValid);
+        if (validAPIs.length === 0) {
+            const data = [];
+            for (const key in apiMap) {
+                const { reason } = apiMap[key];
+                const apiInvalidReason = { api: key, reason: reason };
+                data.push(apiInvalidReason);
+            }
+            result.errors.push({
                 type: exports.ErrorType.NoSupportedApi,
                 content: ConstantString.NoSupportedApi,
+                data,
             });
         }
+        return result;
+    }
+    validateSpecOperationId() {
+        const result = { errors: [], warnings: [] };
+        const apiMap = this.listAPIs();
         // OperationId missing
         const apisMissingOperationId = [];
         for (const key in apiMap) {
-            const pathObjectItem = apiMap[key];
-            if (!pathObjectItem.operationId) {
+            const { operation } = apiMap[key];
+            if (!operation.operationId) {
                 apisMissingOperationId.push(key);
             }
         }
         if (apisMissingOperationId.length > 0) {
-            warnings.push({
+            result.warnings.push({
                 type: exports.WarningType.OperationIdMissing,
                 content: Utils.format(ConstantString.MissingOperationId, apisMissingOperationId.join(", ")),
                 data: apisMissingOperationId,
             });
         }
-        let status = exports.ValidationStatus.Valid;
-        if (warnings.length > 0 && errors.length === 0) {
-            status = exports.ValidationStatus.Warning;
+        return result;
+    }
+    validateMethodAndPath(method, path) {
+        const result = { isValid: true, reason: [] };
+        if (this.options.allowMethods && !this.options.allowMethods.includes(method)) {
+            result.isValid = false;
+            result.reason.push(exports.ErrorType.MethodNotAllowed);
+            return result;
         }
-        else if (errors.length > 0) {
-            status = exports.ValidationStatus.Error;
+        const pathObj = this.spec.paths[path];
+        if (!pathObj || !pathObj[method]) {
+            result.isValid = false;
+            result.reason.push(exports.ErrorType.UrlPathNotExist);
+            return result;
         }
-        return {
-            status,
-            warnings,
-            errors,
-        };
+        return result;
     }
-    static format(str, ...args) {
-        let index = 0;
-        return str.replace(/%s/g, () => {
-            const arg = args[index++];
-            return arg !== undefined ? arg : "";
-        });
+    validateResponse(method, path) {
+        const result = { isValid: true, reason: [] };
+        const operationObject = this.spec.paths[path][method];
+        const { json, multipleMediaType } = Utils.getResponseJson(operationObject);
+        if (this.options.projectType === exports.ProjectType.SME) {
+            // only support response body only contains “application/json” content type
+            if (multipleMediaType) {
+                result.reason.push(exports.ErrorType.ResponseContainMultipleMediaTypes);
+            }
+            else if (Object.keys(json).length === 0) {
+                // response body should not be empty
+                result.reason.push(exports.ErrorType.ResponseJsonIsEmpty);
+            }
+        }
+        return result;
     }
-    static getSafeRegistrationIdEnvName(authName) {
-        if (!authName) {
-            return "";
+    validateServer(method, path) {
+        const result = { isValid: true, reason: [] };
+        const serverObj = Utils.getServerObject(this.spec, method, path);
+        if (!serverObj) {
+            // should contain server URL
+            result.reason.push(exports.ErrorType.NoServerInformation);
         }
-        let safeRegistrationIdEnvName = authName.toUpperCase().replace(/[^A-Z0-9_]/g, "_");
-        if (!safeRegistrationIdEnvName.match(/^[A-Z]/)) {
-            safeRegistrationIdEnvName = "PREFIX_" + safeRegistrationIdEnvName;
+        else {
+            // server url should be absolute url with https protocol
+            const serverValidateResult = Utils.checkServerUrl([serverObj]);
+            result.reason.push(...serverValidateResult.map((item) => item.type));
         }
-        return safeRegistrationIdEnvName;
+        return result;
     }
-}
-
-// Copyright (c) Microsoft Corporation.
-class SpecFilter {
-    static specFilter(filter, unResolveSpec, resolvedSpec, options) {
-        try {
-            const newSpec = Object.assign({}, unResolveSpec);
-            const newPaths = {};
-            for (const filterItem of filter) {
-                const [method, path] = filterItem.split(" ");
-                const methodName = method.toLowerCase();
-                if (!Utils.isSupportedApi(methodName, path, resolvedSpec, options)) {
-                    continue;
-                }
-                if (!newPaths[path]) {
-                    newPaths[path] = Object.assign({}, unResolveSpec.paths[path]);
-                    for (const m of ConstantString.AllOperationMethods) {
-                        delete newPaths[path][m];
+    validateAuth(method, path) {
+        const pathObj = this.spec.paths[path];
+        const operationObject = pathObj[method];
+        const securities = operationObject.security;
+        const authSchemeArray = Utils.getAuthArray(securities, this.spec);
+        if (authSchemeArray.length === 0) {
+            return { isValid: true, reason: [] };
+        }
+        if (this.options.allowAPIKeyAuth ||
+            this.options.allowOauth2 ||
+            this.options.allowBearerTokenAuth) {
+            // Currently we don't support multiple auth in one operation
+            if (authSchemeArray.length > 0 && authSchemeArray.every((auths) => auths.length > 1)) {
+                return {
+                    isValid: false,
+                    reason: [exports.ErrorType.MultipleAuthNotSupported],
+                };
+            }
+            for (const auths of authSchemeArray) {
+                if (auths.length === 1) {
+                    if ((this.options.allowAPIKeyAuth && Utils.isAPIKeyAuth(auths[0].authScheme)) ||
+                        (this.options.allowOauth2 && Utils.isOAuthWithAuthCodeFlow(auths[0].authScheme)) ||
+                        (this.options.allowBearerTokenAuth && Utils.isBearerTokenAuth(auths[0].authScheme))) {
+                        return { isValid: true, reason: [] };
                     }
                 }
-                newPaths[path][methodName] = unResolveSpec.paths[path][methodName];
-                // Add the operationId if missing
-                if (!newPaths[path][methodName].operationId) {
-                    newPaths[path][methodName].operationId = `${methodName}${Utils.convertPathToCamelCase(path)}`;
-                }
             }
-            newSpec.paths = newPaths;
-            return newSpec;
         }
-        catch (err) {
-            throw new SpecParserError(err.toString(), exports.ErrorType.FilterSpecFailed);
-        }
-    }
-}
-
-// Copyright (c) Microsoft Corporation.
-class ManifestUpdater {
-    static updateManifestWithAiPlugin(manifestPath, outputSpecPath, apiPluginFilePath, spec, options) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const manifest = yield fs__default['default'].readJSON(manifestPath);
-            const apiPluginRelativePath = ManifestUpdater.getRelativePath(manifestPath, apiPluginFilePath);
-            manifest.plugins = [
-                {
-                    pluginFile: apiPluginRelativePath,
-                },
-            ];
-            ManifestUpdater.updateManifestDescription(manifest, spec);
-            const specRelativePath = ManifestUpdater.getRelativePath(manifestPath, outputSpecPath);
-            const apiPlugin = ManifestUpdater.generatePluginManifestSchema(spec, specRelativePath, options);
-            return [manifest, apiPlugin];
-        });
+        return { isValid: false, reason: [exports.ErrorType.AuthTypeIsNotSupported] };
     }
-    static updateManifestDescription(manifest, spec) {
-        var _a, _b;
-        manifest.description = {
-            short: spec.info.title.slice(0, ConstantString.ShortDescriptionMaxLens),
-            full: (_b = ((_a = spec.info.description) !== null && _a !== void 0 ? _a : manifest.description.full)) === null || _b === void 0 ? void 0 : _b.slice(0, ConstantString.FullDescriptionMaxLens),
+    checkPostBodySchema(schema, isRequired = false) {
+        var _a;
+        const paramResult = {
+            requiredNum: 0,
+            optionalNum: 0,
+            isValid: true,
+            reason: [],
         };
-    }
-    static mapOpenAPISchemaToFuncParam(schema, method, pathUrl) {
-        let parameter;
+        if (Object.keys(schema).length === 0) {
+            return paramResult;
+        }
+        const isRequiredWithoutDefault = isRequired && schema.default === undefined;
+        const isCopilot = this.projectType === exports.ProjectType.Copilot;
+        if (isCopilot && this.hasNestedObjectInSchema(schema)) {
+            paramResult.isValid = false;
+            paramResult.reason = [exports.ErrorType.RequestBodyContainsNestedObject];
+            return paramResult;
+        }
         if (schema.type === "string" ||
-            schema.type === "boolean" ||
             schema.type === "integer" ||
-            schema.type === "number" ||
-            schema.type === "array") {
-            parameter = schema;
+            schema.type === "boolean" ||
+            schema.type === "number") {
+            if (isRequiredWithoutDefault) {
+                paramResult.requiredNum = paramResult.requiredNum + 1;
+            }
+            else {
+                paramResult.optionalNum = paramResult.optionalNum + 1;
+            }
+        }
+        else if (schema.type === "object") {
+            const { properties } = schema;
+            for (const property in properties) {
+                let isRequired = false;
+                if (schema.required && ((_a = schema.required) === null || _a === void 0 ? void 0 : _a.indexOf(property)) >= 0) {
+                    isRequired = true;
+                }
+                const result = this.checkPostBodySchema(properties[property], isRequired);
+                paramResult.requiredNum += result.requiredNum;
+                paramResult.optionalNum += result.optionalNum;
+                paramResult.isValid = paramResult.isValid && result.isValid;
+                paramResult.reason.push(...result.reason);
+            }
         }
         else {
-            throw new SpecParserError(Utils.format(ConstantString.UnsupportedSchema, method, pathUrl, JSON.stringify(schema)), exports.ErrorType.UpdateManifestFailed);
+            if (isRequiredWithoutDefault && !isCopilot) {
+                paramResult.isValid = false;
+                paramResult.reason.push(exports.ErrorType.PostBodyContainsRequiredUnsupportedSchema);
+            }
         }
-        return parameter;
+        return paramResult;
     }
-    static generatePluginManifestSchema(spec, specRelativePath, options) {
-        var _a, _b, _c;
-        const functions = [];
-        const functionNames = [];
-        const paths = spec.paths;
-        for (const pathUrl in paths) {
-            const pathItem = paths[pathUrl];
-            if (pathItem) {
-                const operations = pathItem;
-                for (const method in operations) {
-                    if (options.allowMethods.includes(method)) {
-                        const operationItem = operations[method];
-                        if (operationItem) {
-                            const operationId = operationItem.operationId;
-                            const description = (_a = operationItem.description) !== null && _a !== void 0 ? _a : "";
-                            const paramObject = operationItem.parameters;
-                            const requestBody = operationItem.requestBody;
-                            const parameters = {
-                                type: "object",
-                                properties: {},
-                                required: [],
-                            };
-                            if (paramObject) {
-                                for (let i = 0; i < paramObject.length; i++) {
-                                    const param = paramObject[i];
-                                    const schema = param.schema;
-                                    parameters.properties[param.name] = ManifestUpdater.mapOpenAPISchemaToFuncParam(schema, method, pathUrl);
-                                    if (param.required) {
-                                        parameters.required.push(param.name);
-                                    }
-                                    if (!parameters.properties[param.name].description) {
-                                        parameters.properties[param.name].description = (_b = param.description) !== null && _b !== void 0 ? _b : "";
-                                    }
-                                }
-                            }
-                            if (requestBody) {
-                                const requestJsonBody = requestBody.content["application/json"];
-                                const requestBodySchema = requestJsonBody.schema;
-                                if (requestBodySchema.type === "object") {
-                                    if (requestBodySchema.required) {
-                                        parameters.required.push(...requestBodySchema.required);
-                                    }
-                                    for (const property in requestBodySchema.properties) {
-                                        const schema = requestBodySchema.properties[property];
-                                        parameters.properties[property] = ManifestUpdater.mapOpenAPISchemaToFuncParam(schema, method, pathUrl);
-                                    }
-                                }
-                                else {
-                                    throw new SpecParserError(Utils.format(ConstantString.UnsupportedSchema, method, pathUrl, JSON.stringify(requestBodySchema)), exports.ErrorType.UpdateManifestFailed);
-                                }
-                            }
-                            const funcObj = {
-                                name: operationId,
-                                description: description,
-                                parameters: parameters,
-                            };
-                            functions.push(funcObj);
-                            functionNames.push(operationId);
-                        }
-                    }
+    checkParamSchema(paramObject) {
+        const paramResult = {
+            requiredNum: 0,
+            optionalNum: 0,
+            isValid: true,
+            reason: [],
+        };
+        if (!paramObject) {
+            return paramResult;
+        }
+        const isCopilot = this.projectType === exports.ProjectType.Copilot;
+        for (let i = 0; i < paramObject.length; i++) {
+            const param = paramObject[i];
+            const schema = param.schema;
+            if (isCopilot && this.hasNestedObjectInSchema(schema)) {
+                paramResult.isValid = false;
+                paramResult.reason.push(exports.ErrorType.ParamsContainsNestedObject);
+                continue;
+            }
+            const isRequiredWithoutDefault = param.required && schema.default === undefined;
+            if (isCopilot) {
+                if (isRequiredWithoutDefault) {
+                    paramResult.requiredNum = paramResult.requiredNum + 1;
+                }
+                else {
+                    paramResult.optionalNum = paramResult.optionalNum + 1;
+                }
+                continue;
+            }
+            if (param.in === "header" || param.in === "cookie") {
+                if (isRequiredWithoutDefault) {
+                    paramResult.isValid = false;
+                    paramResult.reason.push(exports.ErrorType.ParamsContainRequiredUnsupportedSchema);
+                }
+                continue;
+            }
+            if (schema.type !== "boolean" &&
+                schema.type !== "string" &&
+                schema.type !== "number" &&
+                schema.type !== "integer") {
+                if (isRequiredWithoutDefault) {
+                    paramResult.isValid = false;
+                    paramResult.reason.push(exports.ErrorType.ParamsContainRequiredUnsupportedSchema);
+                }
+                continue;
+            }
+            if (param.in === "query" || param.in === "path") {
+                if (isRequiredWithoutDefault) {
+                    paramResult.requiredNum = paramResult.requiredNum + 1;
+                }
+                else {
+                    paramResult.optionalNum = paramResult.optionalNum + 1;
                 }
             }
         }
-        const apiPlugin = {
-            schema_version: "v2",
-            name_for_human: spec.info.title,
-            description_for_human: (_c = spec.info.description) !== null && _c !== void 0 ? _c : "<Please add description of the plugin>",
-            functions: functions,
-            runtimes: [
-                {
-                    type: "OpenApi",
-                    auth: {
-                        type: "none", // TODO, support auth in the future
-                    },
-                    spec: {
-                        url: specRelativePath,
-                    },
-                    run_for_functions: functionNames,
-                },
-            ],
-        };
-        return apiPlugin;
+        return paramResult;
     }
-    static updateManifest(manifestPath, outputSpecPath, spec, options, adaptiveCardFolder, auth) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const originalManifest = yield fs__default['default'].readJSON(manifestPath);
-                const updatedPart = {};
-                updatedPart.composeExtensions = [];
-                let warnings = [];
-                if (options.projectType === exports.ProjectType.SME) {
-                    const updateResult = yield ManifestUpdater.generateCommands(spec, manifestPath, options, adaptiveCardFolder);
-                    const commands = updateResult[0];
-                    warnings = updateResult[1];
-                    const composeExtension = {
-                        composeExtensionType: "apiBased",
-                        apiSpecificationFile: ManifestUpdater.getRelativePath(manifestPath, outputSpecPath),
-                        commands: commands,
-                    };
-                    if (auth) {
-                        if (Utils.isAPIKeyAuth(auth)) {
-                            auth = auth;
-                            const safeApiSecretRegistrationId = Utils.getSafeRegistrationIdEnvName(`${auth.name}_${ConstantString.RegistrationIdPostfix}`);
-                            composeExtension.authorization = {
-                                authType: "apiSecretServiceAuth",
-                                apiSecretServiceAuthConfiguration: {
-                                    apiSecretRegistrationId: `\${{${safeApiSecretRegistrationId}}}`,
-                                },
-                            };
-                        }
-                        else if (Utils.isBearerTokenAuth(auth)) {
-                            composeExtension.authorization = {
-                                authType: "microsoftEntra",
-                                microsoftEntraConfiguration: {
-                                    supportsSingleSignOn: true,
-                                },
-                            };
-                            updatedPart.webApplicationInfo = {
-                                id: "${{AAD_APP_CLIENT_ID}}",
-                                resource: "api://${{DOMAIN}}/${{AAD_APP_CLIENT_ID}}",
-                            };
-                        }
-                    }
-                    updatedPart.composeExtensions = [composeExtension];
+    hasNestedObjectInSchema(schema) {
+        if (schema.type === "object") {
+            for (const property in schema.properties) {
+                const nestedSchema = schema.properties[property];
+                if (nestedSchema.type === "object") {
+                    return true;
                 }
-                updatedPart.description = originalManifest.description;
-                ManifestUpdater.updateManifestDescription(updatedPart, spec);
-                const updatedManifest = Object.assign(Object.assign({}, originalManifest), updatedPart);
-                return [updatedManifest, warnings];
             }
-            catch (err) {
-                throw new SpecParserError(err.toString(), exports.ErrorType.UpdateManifestFailed);
+        }
+        return false;
+    }
+}
+
+// Copyright (c) Microsoft Corporation.
+class CopilotValidator extends Validator {
+    constructor(spec, options) {
+        super();
+        this.projectType = exports.ProjectType.Copilot;
+        this.options = options;
+        this.spec = spec;
+    }
+    validateSpec() {
+        const result = { errors: [], warnings: [] };
+        // validate spec version
+        let validationResult = this.validateSpecVersion();
+        result.errors.push(...validationResult.errors);
+        // validate spec server
+        validationResult = this.validateSpecServer();
+        result.errors.push(...validationResult.errors);
+        // validate no supported API
+        validationResult = this.validateSpecNoSupportAPI();
+        result.errors.push(...validationResult.errors);
+        // validate operationId missing
+        validationResult = this.validateSpecOperationId();
+        result.warnings.push(...validationResult.warnings);
+        return result;
+    }
+    validateAPI(method, path) {
+        const result = { isValid: true, reason: [] };
+        method = method.toLocaleLowerCase();
+        // validate method and path
+        const methodAndPathResult = this.validateMethodAndPath(method, path);
+        if (!methodAndPathResult.isValid) {
+            return methodAndPathResult;
+        }
+        const operationObject = this.spec.paths[path][method];
+        // validate auth
+        const authCheckResult = this.validateAuth(method, path);
+        result.reason.push(...authCheckResult.reason);
+        // validate operationId
+        if (!this.options.allowMissingId && !operationObject.operationId) {
+            result.reason.push(exports.ErrorType.MissingOperationId);
+        }
+        // validate server
+        const validateServerResult = this.validateServer(method, path);
+        result.reason.push(...validateServerResult.reason);
+        // validate response
+        const validateResponseResult = this.validateResponse(method, path);
+        result.reason.push(...validateResponseResult.reason);
+        // validate requestBody
+        const requestBody = operationObject.requestBody;
+        const requestJsonBody = requestBody === null || requestBody === void 0 ? void 0 : requestBody.content["application/json"];
+        if (requestJsonBody) {
+            const requestBodySchema = requestJsonBody.schema;
+            if (requestBodySchema.type !== "object") {
+                result.reason.push(exports.ErrorType.PostBodySchemaIsNotJson);
             }
-        });
+            const requestBodyParamResult = this.checkPostBodySchema(requestBodySchema, requestBody.required);
+            result.reason.push(...requestBodyParamResult.reason);
+        }
+        // validate parameters
+        const paramObject = operationObject.parameters;
+        const paramResult = this.checkParamSchema(paramObject);
+        result.reason.push(...paramResult.reason);
+        if (result.reason.length > 0) {
+            result.isValid = false;
+        }
+        return result;
     }
-    static generateCommands(spec, manifestPath, options, adaptiveCardFolder) {
-        var _a;
-        return __awaiter(this, void 0, void 0, function* () {
-            const paths = spec.paths;
-            const commands = [];
-            const warnings = [];
-            if (paths) {
-                for (const pathUrl in paths) {
-                    const pathItem = paths[pathUrl];
-                    if (pathItem) {
-                        const operations = pathItem;
-                        // Currently only support GET and POST method
-                        for (const method in operations) {
-                            if ((_a = options.allowMethods) === null || _a === void 0 ? void 0 : _a.includes(method)) {
-                                const operationItem = operations[method];
-                                if (operationItem) {
-                                    const [command, warning] = Utils.parseApiInfo(operationItem, options);
-                                    if (adaptiveCardFolder) {
-                                        const adaptiveCardPath = path__default['default'].join(adaptiveCardFolder, command.id + ".json");
-                                        command.apiResponseRenderingTemplateFile = (yield fs__default['default'].pathExists(adaptiveCardPath))
-                                            ? ManifestUpdater.getRelativePath(manifestPath, adaptiveCardPath)
-                                            : "";
-                                    }
-                                    if (warning) {
-                                        warnings.push(warning);
-                                    }
-                                    commands.push(command);
-                                }
-                            }
+}
+
+// Copyright (c) Microsoft Corporation.
+class SMEValidator extends Validator {
+    constructor(spec, options) {
+        super();
+        this.projectType = exports.ProjectType.SME;
+        this.options = options;
+        this.spec = spec;
+    }
+    validateSpec() {
+        const result = { errors: [], warnings: [] };
+        // validate spec version
+        let validationResult = this.validateSpecVersion();
+        result.errors.push(...validationResult.errors);
+        // validate spec server
+        validationResult = this.validateSpecServer();
+        result.errors.push(...validationResult.errors);
+        // validate no supported API
+        validationResult = this.validateSpecNoSupportAPI();
+        result.errors.push(...validationResult.errors);
+        // validate operationId missing
+        if (this.options.allowMissingId) {
+            validationResult = this.validateSpecOperationId();
+            result.warnings.push(...validationResult.warnings);
+        }
+        return result;
+    }
+    validateAPI(method, path) {
+        const result = { isValid: true, reason: [] };
+        method = method.toLocaleLowerCase();
+        // validate method and path
+        const methodAndPathResult = this.validateMethodAndPath(method, path);
+        if (!methodAndPathResult.isValid) {
+            return methodAndPathResult;
+        }
+        const operationObject = this.spec.paths[path][method];
+        // validate auth
+        const authCheckResult = this.validateAuth(method, path);
+        result.reason.push(...authCheckResult.reason);
+        // validate operationId
+        if (!this.options.allowMissingId && !operationObject.operationId) {
+            result.reason.push(exports.ErrorType.MissingOperationId);
+        }
+        // validate server
+        const validateServerResult = this.validateServer(method, path);
+        result.reason.push(...validateServerResult.reason);
+        // validate response
+        const validateResponseResult = this.validateResponse(method, path);
+        result.reason.push(...validateResponseResult.reason);
+        let postBodyResult = {
+            requiredNum: 0,
+            optionalNum: 0,
+            isValid: true,
+            reason: [],
+        };
+        // validate requestBody
+        const requestBody = operationObject.requestBody;
+        const requestJsonBody = requestBody === null || requestBody === void 0 ? void 0 : requestBody.content["application/json"];
+        if (Utils.containMultipleMediaTypes(requestBody)) {
+            result.reason.push(exports.ErrorType.PostBodyContainMultipleMediaTypes);
+        }
+        if (requestJsonBody) {
+            const requestBodySchema = requestJsonBody.schema;
+            postBodyResult = this.checkPostBodySchema(requestBodySchema, requestBody.required);
+            result.reason.push(...postBodyResult.reason);
+        }
+        // validate parameters
+        const paramObject = operationObject.parameters;
+        const paramResult = this.checkParamSchema(paramObject);
+        result.reason.push(...paramResult.reason);
+        // validate total parameters count
+        if (paramResult.isValid && postBodyResult.isValid) {
+            const paramCountResult = this.validateParamCount(postBodyResult, paramResult);
+            result.reason.push(...paramCountResult.reason);
+        }
+        if (result.reason.length > 0) {
+            result.isValid = false;
+        }
+        return result;
+    }
+    validateParamCount(postBodyResult, paramResult) {
+        const result = { isValid: true, reason: [] };
+        const totalRequiredParams = postBodyResult.requiredNum + paramResult.requiredNum;
+        const totalParams = totalRequiredParams + postBodyResult.optionalNum + paramResult.optionalNum;
+        if (totalRequiredParams > 1) {
+            if (!this.options.allowMultipleParameters ||
+                totalRequiredParams > SMEValidator.SMERequiredParamsMaxNum) {
+                result.reason.push(exports.ErrorType.ExceededRequiredParamsLimit);
+            }
+        }
+        else if (totalParams === 0) {
+            result.reason.push(exports.ErrorType.NoParameter);
+        }
+        return result;
+    }
+}
+SMEValidator.SMERequiredParamsMaxNum = 5;
+
+// Copyright (c) Microsoft Corporation.
+class TeamsAIValidator extends Validator {
+    constructor(spec, options) {
+        super();
+        this.projectType = exports.ProjectType.TeamsAi;
+        this.options = options;
+        this.spec = spec;
+    }
+    validateSpec() {
+        const result = { errors: [], warnings: [] };
+        // validate spec server
+        let validationResult = this.validateSpecServer();
+        result.errors.push(...validationResult.errors);
+        // validate no supported API
+        validationResult = this.validateSpecNoSupportAPI();
+        result.errors.push(...validationResult.errors);
+        return result;
+    }
+    validateAPI(method, path) {
+        const result = { isValid: true, reason: [] };
+        method = method.toLocaleLowerCase();
+        // validate method and path
+        const methodAndPathResult = this.validateMethodAndPath(method, path);
+        if (!methodAndPathResult.isValid) {
+            return methodAndPathResult;
+        }
+        const operationObject = this.spec.paths[path][method];
+        // validate operationId
+        if (!this.options.allowMissingId && !operationObject.operationId) {
+            result.reason.push(exports.ErrorType.MissingOperationId);
+        }
+        // validate server
+        const validateServerResult = this.validateServer(method, path);
+        result.reason.push(...validateServerResult.reason);
+        if (result.reason.length > 0) {
+            result.isValid = false;
+        }
+        return result;
+    }
+}
+
+class ValidatorFactory {
+    static create(spec, options) {
+        var _a;
+        const type = (_a = options.projectType) !== null && _a !== void 0 ? _a : exports.ProjectType.SME;
+        switch (type) {
+            case exports.ProjectType.SME:
+                return new SMEValidator(spec, options);
+            case exports.ProjectType.Copilot:
+                return new CopilotValidator(spec, options);
+            case exports.ProjectType.TeamsAi:
+                return new TeamsAIValidator(spec, options);
+            default:
+                throw new Error(`Invalid project type: ${type}`);
+        }
+    }
+}
+
+// Copyright (c) Microsoft Corporation.
+class SpecFilter {
+    static specFilter(filter, unResolveSpec, resolvedSpec, options) {
+        var _a;
+        try {
+            const newSpec = Object.assign({}, unResolveSpec);
+            const newPaths = {};
+            for (const filterItem of filter) {
+                const [method, path] = filterItem.split(" ");
+                const methodName = method.toLowerCase();
+                const pathObj = (_a = resolvedSpec.paths) === null || _a === void 0 ? void 0 : _a[path];
+                if (ConstantString.AllOperationMethods.includes(methodName) &&
+                    pathObj &&
+                    pathObj[methodName]) {
+                    const validator = ValidatorFactory.create(resolvedSpec, options);
+                    const validateResult = validator.validateAPI(methodName, path);
+                    if (!validateResult.isValid) {
+                        continue;
+                    }
+                    if (!newPaths[path]) {
+                        newPaths[path] = Object.assign({}, unResolveSpec.paths[path]);
+                        for (const m of ConstantString.AllOperationMethods) {
+                            delete newPaths[path][m];
                         }
                     }
+                    newPaths[path][methodName] = unResolveSpec.paths[path][methodName];
+                    // Add the operationId if missing
+                    if (!newPaths[path][methodName].operationId) {
+                        newPaths[path][methodName].operationId = `${methodName}${Utils.convertPathToCamelCase(path)}`;
+                    }
                 }
             }
-            return [commands, warnings];
-        });
-    }
-    static getRelativePath(from, to) {
-        const relativePath = path__default['default'].relative(path__default['default'].dirname(from), to);
-        return path__default['default'].normalize(relativePath).replace(/\\/g, "/");
+            newSpec.paths = newPaths;
+            return newSpec;
+        }
+        catch (err) {
+            throw new SpecParserError(err.toString(), exports.ErrorType.FilterSpecFailed);
+        }
     }
 }
 
@@ -1063,7 +1121,7 @@ class ManifestUpdater {
 class AdaptiveCardGenerator {
     static generateAdaptiveCard(operationItem) {
         try {
-            const json = Utils.getResponseJson(operationItem);
+            const { json } = Utils.getResponseJson(operationItem);
             let cardBody = [];
             let schema = json.schema;
             let jsonPath = "$";
@@ -1229,6 +1287,27 @@ function wrapAdaptiveCard(card, jsonPath) {
     };
     return result;
 }
+function wrapResponseSemantics(card, jsonPath) {
+    const props = inferProperties(card);
+    const dataPath = jsonPath === "$" ? "$" : "$." + jsonPath;
+    const result = {
+        data_path: dataPath,
+    };
+    if (props.title || props.subtitle || props.imageUrl) {
+        result.properties = {};
+        if (props.title) {
+            result.properties.title = "$." + props.title;
+        }
+        if (props.subtitle) {
+            result.properties.subtitle = "$." + props.subtitle;
+        }
+        if (props.imageUrl) {
+            result.properties.url = "$." + props.imageUrl;
+        }
+    }
+    result.static_template = card;
+    return result;
+}
 /**
  * Infers the preview card template from an Adaptive Card and a JSON path.
  * The preview card template includes a title and an optional subtitle and image.
@@ -1241,11 +1320,29 @@ function wrapAdaptiveCard(card, jsonPath) {
  * @returns The inferred preview card template.
  */
 function inferPreviewCardTemplate(card) {
-    var _a;
     const result = {
-        title: "",
+        title: "result",
     };
-    const textBlockElements = new Set();
+    const inferredProperties = inferProperties(card);
+    if (inferredProperties.title) {
+        result.title = `\${if(${inferredProperties.title}, ${inferredProperties.title}, 'N/A')}`;
+    }
+    if (inferredProperties.subtitle) {
+        result.subtitle = `\${if(${inferredProperties.subtitle}, ${inferredProperties.subtitle}, 'N/A')}`;
+    }
+    if (inferredProperties.imageUrl) {
+        result.image = {
+            url: `\${${inferredProperties.imageUrl}}`,
+            alt: `\${if(${inferredProperties.imageUrl}, ${inferredProperties.imageUrl}, 'N/A')}`,
+            $when: `\${${inferredProperties.imageUrl} != null}`,
+        };
+    }
+    return result;
+}
+function inferProperties(card) {
+    var _a;
+    const result = {};
+    const nameSet = new Set();
     let rootObject;
     if (((_a = card.body[0]) === null || _a === void 0 ? void 0 : _a.type) === ConstantString.ContainerType) {
         rootObject = card.body[0].items;
@@ -1258,56 +1355,380 @@ function inferPreviewCardTemplate(card) {
             const textElement = element;
             const index = textElement.text.indexOf("${if(");
             if (index > 0) {
-                textElement.text = textElement.text.substring(index);
-                textBlockElements.add(textElement);
+                const text = textElement.text.substring(index);
+                const match = text.match(/\${if\(([^,]+),/);
+                const property = match ? match[1] : "";
+                if (property) {
+                    nameSet.add(property);
+                }
+            }
+        }
+        else if (element.type === ConstantString.ImageType) {
+            const imageElement = element;
+            const match = imageElement.url.match(/\${([^,]+)}/);
+            const property = match ? match[1] : "";
+            if (property) {
+                nameSet.add(property);
             }
         }
     }
-    for (const element of textBlockElements) {
-        const text = element.text;
-        if (!result.title && Utils.isWellKnownName(text, ConstantString.WellknownTitleName)) {
-            result.title = text;
-            textBlockElements.delete(element);
+    for (const name of nameSet) {
+        if (!result.title && Utils.isWellKnownName(name, ConstantString.WellknownTitleName)) {
+            result.title = name;
+            nameSet.delete(name);
         }
         else if (!result.subtitle &&
-            Utils.isWellKnownName(text, ConstantString.WellknownSubtitleName)) {
-            result.subtitle = text;
-            textBlockElements.delete(element);
+            Utils.isWellKnownName(name, ConstantString.WellknownSubtitleName)) {
+            result.subtitle = name;
+            nameSet.delete(name);
         }
-        else if (!result.image && Utils.isWellKnownName(text, ConstantString.WellknownImageName)) {
-            const match = text.match(/\${if\(([^,]+),/);
-            const property = match ? match[1] : "";
-            if (property) {
-                result.image = {
-                    url: `\${${property}}`,
-                    alt: text,
-                    $when: `\${${property} != null}`,
-                };
-            }
-            textBlockElements.delete(element);
+        else if (!result.imageUrl && Utils.isWellKnownName(name, ConstantString.WellknownImageName)) {
+            result.imageUrl = name;
+            nameSet.delete(name);
         }
     }
-    for (const element of textBlockElements) {
-        const text = element.text;
+    for (const name of nameSet) {
         if (!result.title) {
-            result.title = text;
-            textBlockElements.delete(element);
+            result.title = name;
+            nameSet.delete(name);
         }
         else if (!result.subtitle) {
-            result.subtitle = text;
-            textBlockElements.delete(element);
+            result.subtitle = name;
+            nameSet.delete(name);
         }
     }
     if (!result.title && result.subtitle) {
         result.title = result.subtitle;
         delete result.subtitle;
     }
-    if (!result.title) {
-        result.title = "result";
-    }
     return result;
 }
 
+// Copyright (c) Microsoft Corporation.
+class ManifestUpdater {
+    static updateManifestWithAiPlugin(manifestPath, outputSpecPath, apiPluginFilePath, spec, options, authInfo) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const manifest = yield fs__default['default'].readJSON(manifestPath);
+            const apiPluginRelativePath = ManifestUpdater.getRelativePath(manifestPath, apiPluginFilePath);
+            // Insert plugins in manifest.json if it is plugin for Copilot.
+            if (!options.isGptPlugin) {
+                manifest.plugins = [
+                    {
+                        file: apiPluginRelativePath,
+                        id: ConstantString.DefaultPluginId,
+                    },
+                ];
+                ManifestUpdater.updateManifestDescription(manifest, spec);
+            }
+            const appName = this.removeEnvs(manifest.name.short);
+            const specRelativePath = ManifestUpdater.getRelativePath(manifestPath, outputSpecPath);
+            const apiPlugin = yield ManifestUpdater.generatePluginManifestSchema(spec, specRelativePath, apiPluginFilePath, appName, authInfo, options);
+            return [manifest, apiPlugin];
+        });
+    }
+    static updateManifestDescription(manifest, spec) {
+        var _a, _b;
+        manifest.description = {
+            short: spec.info.title.slice(0, ConstantString.ShortDescriptionMaxLens),
+            full: (_b = ((_a = spec.info.description) !== null && _a !== void 0 ? _a : manifest.description.full)) === null || _b === void 0 ? void 0 : _b.slice(0, ConstantString.FullDescriptionMaxLens),
+        };
+    }
+    static checkSchema(schema, method, pathUrl) {
+        if (schema.type === "array") {
+            const items = schema.items;
+            ManifestUpdater.checkSchema(items, method, pathUrl);
+        }
+        else if (schema.type !== "string" &&
+            schema.type !== "boolean" &&
+            schema.type !== "integer" &&
+            schema.type !== "number") {
+            throw new SpecParserError(Utils.format(ConstantString.UnsupportedSchema, method, pathUrl, JSON.stringify(schema)), exports.ErrorType.UpdateManifestFailed);
+        }
+    }
+    static generatePluginManifestSchema(spec, specRelativePath, apiPluginFilePath, appName, authInfo, options) {
+        var _a, _b, _c, _d;
+        return __awaiter(this, void 0, void 0, function* () {
+            const functions = [];
+            const functionNames = [];
+            const conversationStarters = [];
+            const paths = spec.paths;
+            const pluginAuthObj = {
+                type: "None",
+            };
+            if (authInfo) {
+                if (Utils.isOAuthWithAuthCodeFlow(authInfo.authScheme)) {
+                    pluginAuthObj.type = "OAuthPluginVault";
+                }
+                else if (Utils.isBearerTokenAuth(authInfo.authScheme)) {
+                    pluginAuthObj.type = "ApiKeyPluginVault";
+                }
+                if (pluginAuthObj.type !== "None") {
+                    const safeRegistrationIdName = Utils.getSafeRegistrationIdEnvName(`${authInfo.name}_${ConstantString.RegistrationIdPostfix[authInfo.authScheme.type]}`);
+                    pluginAuthObj.reference_id = `\${{${safeRegistrationIdName}}}`;
+                }
+            }
+            for (const pathUrl in paths) {
+                const pathItem = paths[pathUrl];
+                if (pathItem) {
+                    const operations = pathItem;
+                    for (const method in operations) {
+                        if (options.allowMethods.includes(method)) {
+                            const operationItem = operations[method];
+                            const confirmationBodies = [];
+                            if (operationItem) {
+                                const operationId = operationItem.operationId;
+                                const description = (_a = operationItem.description) !== null && _a !== void 0 ? _a : "";
+                                const summary = operationItem.summary;
+                                const paramObject = operationItem.parameters;
+                                const requestBody = operationItem.requestBody;
+                                if (paramObject) {
+                                    for (let i = 0; i < paramObject.length; i++) {
+                                        const param = paramObject[i];
+                                        const schema = param.schema;
+                                        ManifestUpdater.checkSchema(schema, method, pathUrl);
+                                        confirmationBodies.push(ManifestUpdater.getConfirmationBodyItem(param.name));
+                                    }
+                                }
+                                if (requestBody) {
+                                    const requestJsonBody = requestBody.content["application/json"];
+                                    const requestBodySchema = requestJsonBody.schema;
+                                    if (requestBodySchema.type === "object") {
+                                        for (const property in requestBodySchema.properties) {
+                                            const schema = requestBodySchema.properties[property];
+                                            ManifestUpdater.checkSchema(schema, method, pathUrl);
+                                            confirmationBodies.push(ManifestUpdater.getConfirmationBodyItem(property));
+                                        }
+                                    }
+                                    else {
+                                        throw new SpecParserError(Utils.format(ConstantString.UnsupportedSchema, method, pathUrl, JSON.stringify(requestBodySchema)), exports.ErrorType.UpdateManifestFailed);
+                                    }
+                                }
+                                const funcObj = {
+                                    name: operationId,
+                                    description: description,
+                                };
+                                if (options.allowResponseSemantics) {
+                                    const { json } = Utils.getResponseJson(operationItem);
+                                    if (json.schema) {
+                                        const [card, jsonPath] = AdaptiveCardGenerator.generateAdaptiveCard(operationItem);
+                                        const responseSemantic = wrapResponseSemantics(card, jsonPath);
+                                        funcObj.capabilities = {
+                                            response_semantics: responseSemantic,
+                                        };
+                                    }
+                                }
+                                if (options.allowConfirmation && method !== ConstantString.GetMethod) {
+                                    if (!funcObj.capabilities) {
+                                        funcObj.capabilities = {};
+                                    }
+                                    funcObj.capabilities.confirmation = {
+                                        type: "AdaptiveCard",
+                                        title: (_b = operationItem.summary) !== null && _b !== void 0 ? _b : description,
+                                    };
+                                    if (confirmationBodies.length > 0) {
+                                        funcObj.capabilities.confirmation.body = confirmationBodies.join("\n");
+                                    }
+                                }
+                                functions.push(funcObj);
+                                functionNames.push(operationId);
+                                const conversationStarterStr = (summary !== null && summary !== void 0 ? summary : description).slice(0, ConstantString.ConversationStarterMaxLens);
+                                if (conversationStarterStr) {
+                                    conversationStarters.push(conversationStarterStr);
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+            let apiPlugin;
+            if (yield fs__default['default'].pathExists(apiPluginFilePath)) {
+                apiPlugin = yield fs__default['default'].readJSON(apiPluginFilePath);
+            }
+            else {
+                apiPlugin = {
+                    schema_version: "v2.1",
+                    name_for_human: "",
+                    description_for_human: "",
+                    namespace: "",
+                    functions: [],
+                    runtimes: [],
+                };
+            }
+            apiPlugin.functions = apiPlugin.functions || [];
+            for (const func of functions) {
+                const index = (_c = apiPlugin.functions) === null || _c === void 0 ? void 0 : _c.findIndex((f) => f.name === func.name);
+                if (index === -1) {
+                    apiPlugin.functions.push(func);
+                }
+                else {
+                    apiPlugin.functions[index] = func;
+                }
+            }
+            apiPlugin.runtimes = apiPlugin.runtimes || [];
+            const index = apiPlugin.runtimes.findIndex((runtime) => {
+                var _a, _b;
+                return runtime.spec.url === specRelativePath &&
+                    runtime.type === "OpenApi" &&
+                    ((_b = (_a = runtime.auth) === null || _a === void 0 ? void 0 : _a.type) !== null && _b !== void 0 ? _b : "None") === pluginAuthObj.type;
+            });
+            if (index === -1) {
+                apiPlugin.runtimes.push({
+                    type: "OpenApi",
+                    auth: pluginAuthObj,
+                    spec: {
+                        url: specRelativePath,
+                    },
+                    run_for_functions: functionNames,
+                });
+            }
+            else {
+                apiPlugin.runtimes[index].run_for_functions = functionNames;
+            }
+            if (!apiPlugin.name_for_human) {
+                apiPlugin.name_for_human = appName;
+            }
+            if (!apiPlugin.namespace) {
+                apiPlugin.namespace = ManifestUpdater.removeAllSpecialCharacters(appName);
+            }
+            if (!apiPlugin.description_for_human) {
+                apiPlugin.description_for_human =
+                    (_d = spec.info.description) !== null && _d !== void 0 ? _d : "<Please add description of the plugin>";
+            }
+            if (options.allowConversationStarters && conversationStarters.length > 0) {
+                if (!apiPlugin.capabilities) {
+                    apiPlugin.capabilities = {
+                        localization: {},
+                    };
+                }
+                if (!apiPlugin.capabilities.conversation_starters) {
+                    apiPlugin.capabilities.conversation_starters = conversationStarters
+                        .slice(0, 5)
+                        .map((text) => ({ text }));
+                }
+            }
+            return apiPlugin;
+        });
+    }
+    static updateManifest(manifestPath, outputSpecPath, spec, options, adaptiveCardFolder, authInfo) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const originalManifest = yield fs__default['default'].readJSON(manifestPath);
+                const updatedPart = {};
+                updatedPart.composeExtensions = [];
+                let warnings = [];
+                if (options.projectType === exports.ProjectType.SME) {
+                    const updateResult = yield ManifestUpdater.generateCommands(spec, manifestPath, options, adaptiveCardFolder);
+                    const commands = updateResult[0];
+                    warnings = updateResult[1];
+                    const composeExtension = {
+                        composeExtensionType: "apiBased",
+                        apiSpecificationFile: ManifestUpdater.getRelativePath(manifestPath, outputSpecPath),
+                        commands: commands,
+                    };
+                    if (authInfo) {
+                        const auth = authInfo.authScheme;
+                        const safeRegistrationIdName = Utils.getSafeRegistrationIdEnvName(`${authInfo.name}_${ConstantString.RegistrationIdPostfix[authInfo.authScheme.type]}`);
+                        if (Utils.isAPIKeyAuth(auth) || Utils.isBearerTokenAuth(auth)) {
+                            const safeApiSecretRegistrationId = Utils.getSafeRegistrationIdEnvName(`${authInfo.name}_${ConstantString.RegistrationIdPostfix[authInfo.authScheme.type]}`);
+                            composeExtension.authorization = {
+                                authType: "apiSecretServiceAuth",
+                                apiSecretServiceAuthConfiguration: {
+                                    apiSecretRegistrationId: `\${{${safeRegistrationIdName}}}`,
+                                },
+                            };
+                        }
+                        else if (Utils.isOAuthWithAuthCodeFlow(auth)) {
+                            composeExtension.authorization = {
+                                authType: "oAuth2.0",
+                                oAuthConfiguration: {
+                                    oauthConfigurationId: `\${{${safeRegistrationIdName}}}`,
+                                },
+                            };
+                            updatedPart.webApplicationInfo = {
+                                id: "${{AAD_APP_CLIENT_ID}}",
+                                resource: "api://${{DOMAIN}}/${{AAD_APP_CLIENT_ID}}",
+                            };
+                        }
+                    }
+                    updatedPart.composeExtensions = [composeExtension];
+                }
+                updatedPart.description = originalManifest.description;
+                ManifestUpdater.updateManifestDescription(updatedPart, spec);
+                const updatedManifest = Object.assign(Object.assign({}, originalManifest), updatedPart);
+                return [updatedManifest, warnings];
+            }
+            catch (err) {
+                throw new SpecParserError(err.toString(), exports.ErrorType.UpdateManifestFailed);
+            }
+        });
+    }
+    static generateCommands(spec, manifestPath, options, adaptiveCardFolder) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function* () {
+            const paths = spec.paths;
+            const commands = [];
+            const warnings = [];
+            if (paths) {
+                for (const pathUrl in paths) {
+                    const pathItem = paths[pathUrl];
+                    if (pathItem) {
+                        const operations = pathItem;
+                        // Currently only support GET and POST method
+                        for (const method in operations) {
+                            if ((_a = options.allowMethods) === null || _a === void 0 ? void 0 : _a.includes(method)) {
+                                const operationItem = operations[method];
+                                if (operationItem) {
+                                    const command = Utils.parseApiInfo(operationItem, options);
+                                    if (command.parameters &&
+                                        command.parameters.length >= 1 &&
+                                        command.parameters.some((param) => param.isRequired)) {
+                                        command.parameters = command.parameters.filter((param) => param.isRequired);
+                                    }
+                                    else if (command.parameters && command.parameters.length > 0) {
+                                        command.parameters = [command.parameters[0]];
+                                        warnings.push({
+                                            type: exports.WarningType.OperationOnlyContainsOptionalParam,
+                                            content: Utils.format(ConstantString.OperationOnlyContainsOptionalParam, command.id),
+                                            data: command.id,
+                                        });
+                                    }
+                                    if (adaptiveCardFolder) {
+                                        const adaptiveCardPath = path__default['default'].join(adaptiveCardFolder, command.id + ".json");
+                                        command.apiResponseRenderingTemplateFile = (yield fs__default['default'].pathExists(adaptiveCardPath))
+                                            ? ManifestUpdater.getRelativePath(manifestPath, adaptiveCardPath)
+                                            : "";
+                                    }
+                                    commands.push(command);
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+            return [commands, warnings];
+        });
+    }
+    static getRelativePath(from, to) {
+        const relativePath = path__default['default'].relative(path__default['default'].dirname(from), to);
+        return path__default['default'].normalize(relativePath).replace(/\\/g, "/");
+    }
+    static removeEnvs(str) {
+        const placeHolderReg = /\${{\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*}}/g;
+        const matches = placeHolderReg.exec(str);
+        let newStr = str;
+        if (matches != null) {
+            newStr = newStr.replace(matches[0], "");
+        }
+        return newStr;
+    }
+    static removeAllSpecialCharacters(str) {
+        return str.toLowerCase().replace(/[^a-z0-9]/g, "");
+    }
+    static getConfirmationBodyItem(paramName) {
+        return `* **${Utils.updateFirstLetter(paramName)}**: {{function.parameters.${paramName}}}`;
+    }
+}
+
 // Copyright (c) Microsoft Corporation.
 /**
  * A class that parses an OpenAPI specification file and provides methods to validate, list, and generate artifacts.
@@ -1323,10 +1744,15 @@ class SpecParser {
             allowMissingId: true,
             allowSwagger: true,
             allowAPIKeyAuth: false,
+            allowBearerTokenAuth: false,
             allowMultipleParameters: false,
             allowOauth2: false,
             allowMethods: ["get", "post"],
+            allowConversationStarters: false,
+            allowResponseSemantics: false,
+            allowConfirmation: false,
             projectType: exports.ProjectType.SME,
+            isGptPlugin: false,
         };
         this.pathOrSpec = pathOrDoc;
         this.parser = new SwaggerParser__default['default']();
@@ -1351,6 +1777,8 @@ class SpecParser {
                         errors: [{ type: exports.ErrorType.SpecNotValid, content: e.toString() }],
                     };
                 }
+                const errors = [];
+                const warnings = [];
                 if (!this.options.allowSwagger && this.isSwaggerFile) {
                     return {
                         status: exports.ValidationStatus.Error,
@@ -1360,7 +1788,38 @@ class SpecParser {
                         ],
                     };
                 }
-                return Utils.validateSpec(this.spec, this.parser, !!this.isSwaggerFile, this.options);
+                // Remote reference not supported
+                const refPaths = this.parser.$refs.paths();
+                // refPaths [0] is the current spec file path
+                if (refPaths.length > 1) {
+                    errors.push({
+                        type: exports.ErrorType.RemoteRefNotSupported,
+                        content: Utils.format(ConstantString.RemoteRefNotSupported, refPaths.join(", ")),
+                        data: refPaths,
+                    });
+                }
+                if (!!this.isSwaggerFile && this.options.allowSwagger) {
+                    warnings.push({
+                        type: exports.WarningType.ConvertSwaggerToOpenAPI,
+                        content: ConstantString.ConvertSwaggerToOpenAPI,
+                    });
+                }
+                const validator = this.getValidator(this.spec);
+                const validationResult = validator.validateSpec();
+                warnings.push(...validationResult.warnings);
+                errors.push(...validationResult.errors);
+                let status = exports.ValidationStatus.Valid;
+                if (warnings.length > 0 && errors.length === 0) {
+                    status = exports.ValidationStatus.Warning;
+                }
+                else if (errors.length > 0) {
+                    status = exports.ValidationStatus.Error;
+                }
+                return {
+                    status: status,
+                    warnings: warnings,
+                    errors: errors,
+                };
             }
             catch (err) {
                 throw new SpecParserError(err.toString(), exports.ErrorType.ValidateFailed);
@@ -1384,39 +1843,40 @@ class SpecParser {
             try {
                 yield this.loadSpec();
                 const spec = this.spec;
-                const apiMap = this.getAllSupportedAPIs(spec);
-                const result = [];
+                const apiMap = this.getAPIs(spec);
+                const result = {
+                    APIs: [],
+                    allAPICount: 0,
+                    validAPICount: 0,
+                };
                 for (const apiKey in apiMap) {
+                    const { operation, isValid, reason } = apiMap[apiKey];
+                    const [method, path] = apiKey.split(" ");
+                    const operationId = (_a = operation.operationId) !== null && _a !== void 0 ? _a : `${method.toLowerCase()}${Utils.convertPathToCamelCase(path)}`;
                     const apiResult = {
-                        api: "",
+                        api: apiKey,
                         server: "",
-                        operationId: "",
+                        operationId: operationId,
+                        isValid: isValid,
+                        reason: reason,
                     };
-                    const [method, path] = apiKey.split(" ");
-                    const operation = apiMap[apiKey];
-                    const rootServer = spec.servers && spec.servers[0];
-                    const methodServer = spec.paths[path].servers && ((_a = spec.paths[path]) === null || _a === void 0 ? void 0 : _a.servers[0]);
-                    const operationServer = operation.servers && operation.servers[0];
-                    const serverUrl = operationServer || methodServer || rootServer;
-                    if (!serverUrl) {
-                        throw new SpecParserError(ConstantString.NoServerInformation, exports.ErrorType.NoServerInformation);
-                    }
-                    apiResult.server = Utils.resolveServerUrl(serverUrl.url);
-                    let operationId = operation.operationId;
-                    if (!operationId) {
-                        operationId = `${method.toLowerCase()}${Utils.convertPathToCamelCase(path)}`;
-                    }
-                    apiResult.operationId = operationId;
-                    const authArray = Utils.getAuthArray(operation.security, spec);
-                    for (const auths of authArray) {
-                        if (auths.length === 1) {
-                            apiResult.auth = auths[0].authSchema;
-                            break;
+                    if (isValid) {
+                        const serverObj = Utils.getServerObject(spec, method.toLocaleLowerCase(), path);
+                        if (serverObj) {
+                            apiResult.server = Utils.resolveEnv(serverObj.url);
+                        }
+                        const authArray = Utils.getAuthArray(operation.security, spec);
+                        for (const auths of authArray) {
+                            if (auths.length === 1) {
+                                apiResult.auth = auths[0];
+                                break;
+                            }
                         }
                     }
-                    apiResult.api = apiKey;
-                    result.push(apiResult);
+                    result.APIs.push(apiResult);
                 }
+                result.allAPICount = result.APIs.length;
+                result.validAPICount = result.APIs.filter((api) => api.isValid).length;
                 return result;
             }
             catch (err) {
@@ -1473,18 +1933,12 @@ class SpecParser {
                 const newSpecs = yield this.getFilteredSpecs(filter, signal);
                 const newUnResolvedSpec = newSpecs[0];
                 const newSpec = newSpecs[1];
-                let resultStr;
-                if (outputSpecPath.endsWith(".yaml") || outputSpecPath.endsWith(".yml")) {
-                    resultStr = jsyaml__default['default'].dump(newUnResolvedSpec);
-                }
-                else {
-                    resultStr = JSON.stringify(newUnResolvedSpec, null, 2);
-                }
-                yield fs__default['default'].outputFile(outputSpecPath, resultStr);
+                const authInfo = Utils.getAuthInfo(newSpec);
+                yield this.saveFilterSpec(outputSpecPath, newUnResolvedSpec);
                 if (signal === null || signal === void 0 ? void 0 : signal.aborted) {
                     throw new SpecParserError(ConstantString.CancelledMessage, exports.ErrorType.Cancelled);
                 }
-                const [updatedManifest, apiPlugin] = yield ManifestUpdater.updateManifestWithAiPlugin(manifestPath, outputSpecPath, pluginFilePath, newSpec, this.options);
+                const [updatedManifest, apiPlugin] = yield ManifestUpdater.updateManifestWithAiPlugin(manifestPath, outputSpecPath, pluginFilePath, newSpec, this.options, authInfo);
                 yield fs__default['default'].outputJSON(manifestPath, updatedManifest, { spaces: 2 });
                 yield fs__default['default'].outputJSON(pluginFilePath, apiPlugin, { spaces: 2 });
             }
@@ -1514,32 +1968,11 @@ class SpecParser {
                 const newSpecs = yield this.getFilteredSpecs(filter, signal);
                 const newUnResolvedSpec = newSpecs[0];
                 const newSpec = newSpecs[1];
-                const AuthSet = new Set();
-                let hasMultipleAPIKeyAuth = false;
-                for (const url in newSpec.paths) {
-                    for (const method in newSpec.paths[url]) {
-                        const operation = newSpec.paths[url][method];
-                        const authArray = Utils.getAuthArray(operation.security, newSpec);
-                        if (authArray && authArray.length > 0) {
-                            AuthSet.add(authArray[0][0].authSchema);
-                            if (AuthSet.size > 1) {
-                                hasMultipleAPIKeyAuth = true;
-                                break;
-                            }
-                        }
-                    }
-                }
-                if (hasMultipleAPIKeyAuth) {
-                    throw new SpecParserError(ConstantString.MultipleAPIKeyNotSupported, exports.ErrorType.MultipleAPIKeyNotSupported);
-                }
-                let resultStr;
-                if (outputSpecPath.endsWith(".yaml") || outputSpecPath.endsWith(".yml")) {
-                    resultStr = jsyaml__default['default'].dump(newUnResolvedSpec);
+                let authInfo = undefined;
+                if (this.options.projectType === exports.ProjectType.SME) {
+                    authInfo = Utils.getAuthInfo(newSpec);
                 }
-                else {
-                    resultStr = JSON.stringify(newUnResolvedSpec, null, 2);
-                }
-                yield fs__default['default'].outputFile(outputSpecPath, resultStr);
+                yield this.saveFilterSpec(outputSpecPath, newUnResolvedSpec);
                 if (adaptiveCardFolder) {
                     for (const url in newSpec.paths) {
                         for (const method in newSpec.paths[url]) {
@@ -1569,8 +2002,7 @@ class SpecParser {
                 if (signal === null || signal === void 0 ? void 0 : signal.aborted) {
                     throw new SpecParserError(ConstantString.CancelledMessage, exports.ErrorType.Cancelled);
                 }
-                const auth = Array.from(AuthSet)[0];
-                const [updatedManifest, warnings] = yield ManifestUpdater.updateManifest(manifestPath, outputSpecPath, newSpec, this.options, adaptiveCardFolder, auth);
+                const [updatedManifest, warnings] = yield ManifestUpdater.updateManifest(manifestPath, outputSpecPath, newSpec, this.options, adaptiveCardFolder, authInfo);
                 yield fs__default['default'].outputJSON(manifestPath, updatedManifest, { spaces: 2 });
                 result.warnings.push(...warnings);
             }
@@ -1598,13 +2030,30 @@ class SpecParser {
             }
         });
     }
-    getAllSupportedAPIs(spec) {
-        if (this.apiMap !== undefined) {
-            return this.apiMap;
+    getAPIs(spec) {
+        const validator = this.getValidator(spec);
+        const apiMap = validator.listAPIs();
+        return apiMap;
+    }
+    getValidator(spec) {
+        if (this.validator) {
+            return this.validator;
         }
-        const result = Utils.listSupportedAPIs(spec, this.options);
-        this.apiMap = result;
-        return result;
+        const validator = ValidatorFactory.create(spec, this.options);
+        this.validator = validator;
+        return validator;
+    }
+    saveFilterSpec(outputSpecPath, unResolvedSpec) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let resultStr;
+            if (outputSpecPath.endsWith(".yaml") || outputSpecPath.endsWith(".yml")) {
+                resultStr = jsyaml__default['default'].dump(unResolvedSpec);
+            }
+            else {
+                resultStr = JSON.stringify(unResolvedSpec, null, 2);
+            }
+            yield fs__default['default'].outputFile(outputSpecPath, resultStr);
+        });
     }
 }