@orpc/openapi 2.0.0-beta.40 → 2.0.0-beta.42

package/dist/shared/{openapi.wQKxWEI2.mjs → openapi.BJRea9Uu.mjs}

@@ -1,10 +1,10 @@
 import { COMMON_ERROR_STATUS_MAP } from '@orpc/client';
-import { walkProcedureContractsSync, Procedure, unlazy, getRouter, createContractProcedure, DEFAULT_SUCCESS_STATUS, DEFAULT_ERROR_STATUS } from '@orpc/server';
-import { value, pathToHttpPath, mergeHttpPath, normalizeHttpPath, safeDecodeURIComponent, NullProtoObj, isTypescriptObject, isPlainObject, stringifyJSON, getOwn, parseEmptyableJSON } from '@orpc/shared';
+import { walkProcedureContractsSync, unlazy, getRouter, Procedure, createContractProcedure, DEFAULT_SUCCESS_STATUS, DEFAULT_ERROR_STATUS } from '@orpc/server';
+import { value, pathToHttpPath, mergeHttpPath, normalizeHttpPath, setOwn, safeDecodeURIComponent, NullProtoObj, isTypescriptObject, isPlainObject, stringifyJSON, getOwn, parseEmptyableJSON } from '@orpc/shared';
 import { parseStandardUrl } from '@standard-server/core';
-import { D as DEFAULT_OPENAPI_METHOD, g as getDynamicPathParams, O as OpenAPISerializer, a as DEFAULT_OPENAPI_INPUT_STRUCTURE, i as isBodylessMethod, b as DEFAULT_OPENAPI_OUTPUT_STRUCTURE } from './openapi.B1LWf28E.mjs';
+import { D as DEFAULT_OPENAPI_METHOD, g as getDynamicPathParams, O as OpenAPISerializer, a as DEFAULT_OPENAPI_INPUT_STRUCTURE, i as isBodylessMethod, b as DEFAULT_OPENAPI_OUTPUT_STRUCTURE } from './openapi.Bu_PfTtX.mjs';
 import { g as getOpenAPIMeta } from './openapi.B9PQzqBn.mjs';
-import { createRouter, addRoute, findRoute, routeToRegExp } from 'rou3';
+import { createRouter, addRoute, findRoute, findAllRoutes, routeToRegExp } from 'rou3';
 
 class OpenAPIMatcher {
   filter;
@@ -17,6 +17,7 @@ class OpenAPIMatcher {
     this.index(router);
   }
   index(router, path = []) {
+    const routes = [];
     const lazyResults = walkProcedureContractsSync(router, (contract, path2) => {
       if (!value(this.filter, contract, path2)) {
         return;
@@ -25,19 +26,30 @@ class OpenAPIMatcher {
       const method = meta?.method ?? DEFAULT_OPENAPI_METHOD;
       const postHttpPath = meta?.path ?? pathToHttpPath(path2);
       const openapiPath = meta?.prefix ? mergeHttpPath(meta.prefix, postHttpPath) : postHttpPath;
-      const rou3Path = toRou3Pattern(openapiPath);
-      addRoute(this.tree, method, rou3Path, {
-        path: path2,
-        contract,
-        procedure: contract instanceof Procedure ? contract : void 0
+      const { pattern, ...route } = toRou3Route(openapiPath);
+      routes.push({
+        method,
+        pattern,
+        entry: {
+          path: path2,
+          contract,
+          procedure: contract instanceof Procedure ? contract : void 0,
+          ...route
+        }
       });
     }, path);
-    for (const result of lazyResults) {
+    const pendingLazyRouters = lazyResults.map((result) => {
       const prefix = getOpenAPIMeta(result.router)?.prefix;
-      this.pendingLazyRouters.add({
+      return {
         ...result,
         matcher: prefix ? toRou3PrefixMatcher(prefix) : void 0
-      });
+      };
+    });
+    for (const { method, pattern, entry } of routes) {
+      addRoute(this.tree, method, pattern, entry);
+    }
+    for (const pending of pendingLazyRouters) {
+      this.pendingLazyRouters.add(pending);
     }
   }
   async match(method, pathname, prefix) {
@@ -60,14 +72,14 @@ class OpenAPIMatcher {
     if (loading !== void 0) {
       await loading;
     }
-    let match = findRoute(this.tree, method, pathname);
+    let match = this.findMatch(method, pathname);
     if (match === void 0 && pathname.includes("%")) {
       const normalizedPathname = normalizeHttpPath(pathname);
       const normalizedLoading = this.resolvePendingLazyRouters(normalizedPathname);
       if (normalizedLoading !== void 0) {
         await normalizedLoading;
       }
-      match = findRoute(this.tree, method, normalizedPathname);
+      match = this.findMatch(method, normalizedPathname);
     }
     if (match === void 0) {
       return void 0;
@@ -76,9 +88,16 @@ class OpenAPIMatcher {
     return {
       path: entry.path,
       procedure: entry.procedure ?? await this.resolveProcedure(entry),
-      params: match.params ? decodeParams(match.params) : void 0
+      params: entry.params && decodeParams(entry.params, match.params)
     };
   }
+  findMatch(method, pathname) {
+    const match = findRoute(this.tree, method, pathname);
+    if (match === void 0 || !hasEmptyCatchAll(match)) {
+      return match;
+    }
+    return findAllRoutes(this.tree, method, pathname).reverse().find((match2) => !hasEmptyCatchAll(match2));
+  }
   resolvePendingLazyRouters(pathname) {
     for (const pending of this.pendingLazyRouters) {
       if (pending.matcher === void 0 || pending.matcher.test(pathname)) {
@@ -118,24 +137,51 @@ class OpenAPIMatcher {
     return entry.procedure;
   }
 }
-function toRou3Pattern(path) {
-  const params = getDynamicPathParams(path);
-  if (!params?.length) {
-    return path;
+function toRou3Route(path) {
+  const dynamicParams = getDynamicPathParams(path);
+  if (!dynamicParams) {
+    return { pattern: escapeRou3Literal(path) };
   }
-  for (let i = params.length - 1; i >= 0; i--) {
-    const param = params[i];
-    const pattern = param.allowsSlash ? `**:${param.parameterName}` : `:${param.parameterName}`;
-    path = path.slice(0, param.startIndex) + pattern + path.slice(param.startIndex + param.segment.length);
+  let pattern = "";
+  let literalStart = 0;
+  let catchAllKey;
+  const params = [];
+  for (const param of dynamicParams) {
+    const key = `p${params.length}`;
+    params.push([key, param.parameterName]);
+    pattern += escapeRou3Literal(path.slice(literalStart, param.startIndex));
+    literalStart = param.startIndex + param.segment.length;
+    if (param.allowsSlash) {
+      if (catchAllKey !== void 0) {
+        throw new TypeError(`OpenAPI path "${path}" has more than one catch-all param ({+name}), but only one is supported per path.`);
+      }
+      catchAllKey = key;
+      pattern += `:${key}(.*)`;
+    } else {
+      pattern += `:${key}`;
+    }
   }
-  return path;
+  pattern += escapeRou3Literal(path.slice(literalStart));
+  return { pattern, params, catchAllKey };
 }
-function toRou3PrefixMatcher(path) {
-  const pattern = toRou3Pattern(path);
-  return routeToRegExp(pattern === "/" ? "/**" : `${pattern}/**`);
+const ROU3_SYNTAX_REGEX = /[\\:*?+(){}]|(?<![^/])\.(?=\.?(?:\/|$))/g;
+function escapeRou3Literal(text) {
+  return text.replace(ROU3_SYNTAX_REGEX, "\\$&");
 }
-function decodeParams(params) {
-  return Object.fromEntries(Object.entries(params).map(([key, val]) => [key, safeDecodeURIComponent(val)]));
+function toRou3PrefixMatcher(prefix) {
+  const catchAll = getDynamicPathParams(prefix)?.find((param) => param.allowsSlash);
+  const head = catchAll ? prefix.slice(0, catchAll.startIndex) : prefix;
+  return routeToRegExp(mergeHttpPath(toRou3Route(head).pattern, "/**"));
+}
+function hasEmptyCatchAll(match) {
+  return match.data.catchAllKey !== void 0 && !match.params?.[match.data.catchAllKey];
+}
+function decodeParams(params, values) {
+  const decoded = {};
+  for (const [rou3Key, name] of params) {
+    setOwn(decoded, name, safeDecodeURIComponent(values[rou3Key]));
+  }
+  return decoded;
 }
 
 function serializeHeaders(headers, serializer) {
@@ -183,13 +229,11 @@ class OpenAPIHandlerCodecCore {
     this.customErrorResponseBodySerializer = options.customErrorResponseBodyEncoder;
   }
   async decodeInput(matched, request) {
-    const [_, search] = parseStandardUrl(request.url);
     const meta = getOpenAPIMeta(matched.procedure);
     const inputStructure = meta?.inputStructure ?? DEFAULT_OPENAPI_INPUT_STRUCTURE;
     const params = this.deserializeParams(matched.params, meta?.paramsStyles);
-    const query = this.deserializeQuery(search, meta?.queryStyles);
     if (inputStructure === "compact") {
-      const data = isBodylessMethod(request.method) ? query : this.serializer.deserialize(await request.resolveBody(meta?.requestBodyHint));
+      const data = isBodylessMethod(request.method) ? this.deserializeQuery(request.url, meta?.queryStyles) : this.serializer.deserialize(await request.resolveBody(meta?.requestBodyHint));
       if (data === void 0) {
         return params;
       }
@@ -206,7 +250,7 @@ class OpenAPIHandlerCodecCore {
     }
     return {
       params,
-      query,
+      query: this.deserializeQuery(request.url, meta?.queryStyles),
       headers: request.headers,
       body: this.serializer.deserialize(await request.resolveBody(meta?.requestBodyHint))
     };
@@ -252,7 +296,8 @@ class OpenAPIHandlerCodecCore {
       body: this.serializer.serialize(this.customErrorResponseBodySerializer?.(error) ?? error.toJSON())
     };
   }
-  deserializeQuery(search, styles) {
+  deserializeQuery(url, styles) {
+    const [, search] = parseStandardUrl(url);
     const searchParams = new URLSearchParams(search);
     const parsed = this.serializer.deserialize(searchParams);
     if (!styles || !isPlainObject(parsed)) {
@@ -298,10 +343,10 @@ class OpenAPIHandlerCodecCore {
     }
     const parsed = { ...params };
     Object.entries(styles).forEach(([key, hint]) => {
-      if (hint === void 0 || hint === "primitive") {
+      const value = getOwn(params, key);
+      if (hint === void 0 || hint === "primitive" || value === void 0) {
         return;
       }
-      const value = params[key];
       if (hint === "comma-delimited-array") {
         parsed[key] = decodeDelimitedArray(value, ",");
       } else {

package/dist/shared/{openapi.DI21x5Yo.d.mts → openapi.BTq9wym2.d.mts}

@@ -1,4 +1,6 @@
-import { OpenAPIV3_0, OpenAPIV3_1, OpenAPIV3_2 } from '@openapi-spec/types';
+import * as OpenAPIV3_0 from '@openapi-spec/types/v3.0';
+import * as OpenAPIV3_1 from '@openapi-spec/types/v3.1';
+import * as OpenAPIV3_2 from '@openapi-spec/types/v3.2';
 import { AnyNestedClient, Client, ORPCError } from '@orpc/client';
 import { AsyncIteratorClass } from '@orpc/shared';
 
@@ -14,10 +16,10 @@ type OpenAPIVersion = `3.0.${number}` | `3.1.${number}` | `3.2.${number}`;
  * @see {@link https://orpc.dev/docs/openapi/specification#openapi-version | OpenAPI Specification - OpenAPI Version}
  */
 type OpenAPIDocument<TVersion extends OpenAPIVersion> = TVersion extends `3.0.${string}` ? OpenAPIV3_0.OpenAPIObject : TVersion extends `3.1.${string}` ? OpenAPIV3_1.OpenAPIObject : OpenAPIV3_2.OpenAPIObject;
-type JsonifiedValue<T> = T extends string ? T : T extends number ? T : T extends boolean ? T : T extends null ? T : T extends undefined ? T : T extends Array<unknown> ? JsonifiedArray<T> : T extends Record<string, unknown> ? {
+type JsonifiedValue<T> = T extends string | number | boolean | null | undefined ? T : T extends Date | bigint | URL ? string : T extends ReadonlyArray<unknown> ? JsonifiedArray<T> : T extends Blob | ReadonlyMap<any, any> | ReadonlySet<any> | AsyncIteratorObject<any, any, any> | Function ? T extends File ? File : T extends Blob ? Blob : T extends ReadonlyMap<infer K, infer V> ? JsonifiedArray<[K, V][]> : T extends ReadonlySet<infer U> ? JsonifiedArray<U[]> : T extends AsyncIteratorClass<infer U, infer V> ? AsyncIteratorClass<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncGenerator<infer U, infer V> ? AsyncGenerator<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncIteratorObject<infer U, infer V> ? AsyncIteratorObject<JsonifiedValue<U>, JsonifiedValue<V>> : unknown : T extends object ? {
     [K in keyof T]: JsonifiedValue<T[K]>;
-} : T extends Date ? string : T extends bigint ? string : T extends File ? File : T extends Blob ? Blob : T extends URL ? string : T extends Map<infer K, infer V> ? JsonifiedArray<[K, V][]> : T extends Set<infer U> ? JsonifiedArray<U[]> : T extends AsyncIteratorClass<infer U, infer V> ? AsyncIteratorClass<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncGenerator<infer U, infer V> ? AsyncGenerator<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncIteratorObject<infer U, infer V> ? AsyncIteratorObject<JsonifiedValue<U>, JsonifiedValue<V>> : unknown;
-type JsonifiedArray<T extends Array<unknown>> = T extends readonly [] ? [] : T extends readonly [infer U, ...infer V] ? [U extends undefined ? null : JsonifiedValue<U>, ...JsonifiedArray<V>] : T extends Array<infer U> ? Array<JsonifiedValue<U>> : unknown;
+} : unknown;
+type JsonifiedArray<T extends ReadonlyArray<unknown>> = T extends readonly [] ? [] : T extends readonly [infer U, ...infer V] ? [U extends undefined ? null : JsonifiedValue<U>, ...JsonifiedArray<V>] : T extends ReadonlyArray<infer U> ? Array<JsonifiedValue<U>> : unknown;
 type JsonifiedClientError<T> = T extends ORPCError<infer UCode, infer UData> ? ORPCError<UCode, JsonifiedValue<UData>> : T;
 /**
  * Client type whose outputs and error data replace types JSON cannot represent with their JSON equivalents.

package/dist/shared/{openapi.DI21x5Yo.d.ts → openapi.BTq9wym2.d.ts}

@@ -1,4 +1,6 @@
-import { OpenAPIV3_0, OpenAPIV3_1, OpenAPIV3_2 } from '@openapi-spec/types';
+import * as OpenAPIV3_0 from '@openapi-spec/types/v3.0';
+import * as OpenAPIV3_1 from '@openapi-spec/types/v3.1';
+import * as OpenAPIV3_2 from '@openapi-spec/types/v3.2';
 import { AnyNestedClient, Client, ORPCError } from '@orpc/client';
 import { AsyncIteratorClass } from '@orpc/shared';
 
@@ -14,10 +16,10 @@ type OpenAPIVersion = `3.0.${number}` | `3.1.${number}` | `3.2.${number}`;
  * @see {@link https://orpc.dev/docs/openapi/specification#openapi-version | OpenAPI Specification - OpenAPI Version}
  */
 type OpenAPIDocument<TVersion extends OpenAPIVersion> = TVersion extends `3.0.${string}` ? OpenAPIV3_0.OpenAPIObject : TVersion extends `3.1.${string}` ? OpenAPIV3_1.OpenAPIObject : OpenAPIV3_2.OpenAPIObject;
-type JsonifiedValue<T> = T extends string ? T : T extends number ? T : T extends boolean ? T : T extends null ? T : T extends undefined ? T : T extends Array<unknown> ? JsonifiedArray<T> : T extends Record<string, unknown> ? {
+type JsonifiedValue<T> = T extends string | number | boolean | null | undefined ? T : T extends Date | bigint | URL ? string : T extends ReadonlyArray<unknown> ? JsonifiedArray<T> : T extends Blob | ReadonlyMap<any, any> | ReadonlySet<any> | AsyncIteratorObject<any, any, any> | Function ? T extends File ? File : T extends Blob ? Blob : T extends ReadonlyMap<infer K, infer V> ? JsonifiedArray<[K, V][]> : T extends ReadonlySet<infer U> ? JsonifiedArray<U[]> : T extends AsyncIteratorClass<infer U, infer V> ? AsyncIteratorClass<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncGenerator<infer U, infer V> ? AsyncGenerator<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncIteratorObject<infer U, infer V> ? AsyncIteratorObject<JsonifiedValue<U>, JsonifiedValue<V>> : unknown : T extends object ? {
     [K in keyof T]: JsonifiedValue<T[K]>;
-} : T extends Date ? string : T extends bigint ? string : T extends File ? File : T extends Blob ? Blob : T extends URL ? string : T extends Map<infer K, infer V> ? JsonifiedArray<[K, V][]> : T extends Set<infer U> ? JsonifiedArray<U[]> : T extends AsyncIteratorClass<infer U, infer V> ? AsyncIteratorClass<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncGenerator<infer U, infer V> ? AsyncGenerator<JsonifiedValue<U>, JsonifiedValue<V>> : T extends AsyncIteratorObject<infer U, infer V> ? AsyncIteratorObject<JsonifiedValue<U>, JsonifiedValue<V>> : unknown;
-type JsonifiedArray<T extends Array<unknown>> = T extends readonly [] ? [] : T extends readonly [infer U, ...infer V] ? [U extends undefined ? null : JsonifiedValue<U>, ...JsonifiedArray<V>] : T extends Array<infer U> ? Array<JsonifiedValue<U>> : unknown;
+} : unknown;
+type JsonifiedArray<T extends ReadonlyArray<unknown>> = T extends readonly [] ? [] : T extends readonly [infer U, ...infer V] ? [U extends undefined ? null : JsonifiedValue<U>, ...JsonifiedArray<V>] : T extends ReadonlyArray<infer U> ? Array<JsonifiedValue<U>> : unknown;
 type JsonifiedClientError<T> = T extends ORPCError<infer UCode, infer UData> ? ORPCError<UCode, JsonifiedValue<UData>> : T;
 /**
  * Client type whose outputs and error data replace types JSON cannot represent with their JSON equivalents.

package/dist/shared/{openapi.B1LWf28E.mjs → openapi.Bu_PfTtX.mjs}

@@ -48,6 +48,15 @@ const DEFAULT_OPEN_API_JSON_SERIALIZER_HANDLERS = {
     },
     isTerminal: true
   },
+  infinity: {
+    condition(data) {
+      return data === Number.POSITIVE_INFINITY || data === Number.NEGATIVE_INFINITY;
+    },
+    serialize() {
+      return null;
+    },
+    isTerminal: true
+  },
   url: {
     condition(data) {
       return data instanceof URL;
@@ -125,7 +134,7 @@ class OpenAPIJsonSerializer {
         case "boolean":
           return data;
         case "number":
-          return Number.isNaN(data) ? null : data;
+          return Number.isFinite(data) ? data : null;
         case "undefined":
           return null;
         case "bigint":

package/dist/shared/{openapi.Dl3gew1x.d.mts → openapi.C2LayTNZ.d.mts}

@@ -84,7 +84,7 @@ interface OpenAPIJsonSerializerOptions {
      * handlers: { url: undefined }
      * ```
      *
-     * Built-in type keys: `undefined`, `bigint`, `date`, `nan`, `url`, `set`, `map`.
+     * Built-in type keys: `undefined`, `bigint`, `date`, `nan`, `infinity`, `url`, `set`, `map`.
      */
     handlers?: Record<string, undefined | OpenAPIJsonSerializerHandler> | undefined;
     /**

package/dist/shared/{openapi.Dl3gew1x.d.ts → openapi.C2LayTNZ.d.ts}

@@ -84,7 +84,7 @@ interface OpenAPIJsonSerializerOptions {
      * handlers: { url: undefined }
      * ```
      *
-     * Built-in type keys: `undefined`, `bigint`, `date`, `nan`, `url`, `set`, `map`.
+     * Built-in type keys: `undefined`, `bigint`, `date`, `nan`, `infinity`, `url`, `set`, `map`.
      */
     handlers?: Record<string, undefined | OpenAPIJsonSerializerHandler> | undefined;
     /**

package/dist/shared/{openapi.DE5kXinS.d.mts → openapi.Cg9h6jpm.d.mts}

@@ -3,7 +3,7 @@ import { StandardLinkCodec, StandardLinkCodecDecodedResponse } from '@orpc/clien
 import { RouterContract } from '@orpc/contract';
 import { Value, Promisable, Public } from '@orpc/shared';
 import { StandardUrl, StandardHeaders, StandardLazyResponse, StandardRequest } from '@standard-server/core';
-import { O as OpenAPISerializer } from './openapi.Dl3gew1x.mjs';
+import { O as OpenAPISerializer } from './openapi.C2LayTNZ.mjs';
 
 interface OpenAPILinkCodecOptions<T extends ClientContext> {
     /**

package/dist/shared/{openapi.EM8eC1Xn.d.ts → openapi.CkzUS83v.d.ts}

@@ -4,7 +4,7 @@ import { StandardHandlerCodec, ResolvedStandardHandlerHandleOptions, StandardHan
 import { Value, Public, Promisable } from '@orpc/shared';
 import { StandardLazyRequest, StandardResponse } from '@standard-server/core';
 import { AnyProcedureContract } from '@orpc/contract';
-import { O as OpenAPISerializer } from './openapi.Dl3gew1x.js';
+import { O as OpenAPISerializer } from './openapi.C2LayTNZ.js';
 
 interface OpenAPIMatcherOptions {
     /**
@@ -26,6 +26,7 @@ declare class OpenAPIMatcher {
         procedure: AnyProcedure;
         params?: Record<string, string> | undefined;
     } | undefined>;
+    private findMatch;
     private resolvePendingLazyRouters;
     private loadPendingLazyRouters;
     private loadPendingLazyRouter;

package/dist/shared/{openapi.BwNINoeN.d.ts → openapi.D0yWs-uW.d.ts}

@@ -3,7 +3,7 @@ import { StandardLinkCodec, StandardLinkCodecDecodedResponse } from '@orpc/clien
 import { RouterContract } from '@orpc/contract';
 import { Value, Promisable, Public } from '@orpc/shared';
 import { StandardUrl, StandardHeaders, StandardLazyResponse, StandardRequest } from '@standard-server/core';
-import { O as OpenAPISerializer } from './openapi.Dl3gew1x.js';
+import { O as OpenAPISerializer } from './openapi.C2LayTNZ.js';
 
 interface OpenAPILinkCodecOptions<T extends ClientContext> {
     /**

package/dist/shared/{openapi.BdClbrwk.mjs → openapi.D326pNzT.mjs}

@@ -4,11 +4,12 @@ import { unlazy } from '@orpc/server';
 import { value, pathToHttpPath, mergeHttpPath, isTypescriptObject, stringifyJSON, safeEncodeURIComponent } from '@orpc/shared';
 import { mergeStandardHeaders, parseStandardUrl } from '@standard-server/core';
 import { toStandardHeaders } from '@standard-server/fetch';
-import { O as OpenAPISerializer, D as DEFAULT_OPENAPI_METHOD, a as DEFAULT_OPENAPI_INPUT_STRUCTURE, g as getDynamicPathParams, i as isBodylessMethod, b as DEFAULT_OPENAPI_OUTPUT_STRUCTURE } from './openapi.B1LWf28E.mjs';
+import { O as OpenAPISerializer, D as DEFAULT_OPENAPI_METHOD, a as DEFAULT_OPENAPI_INPUT_STRUCTURE, g as getDynamicPathParams, i as isBodylessMethod, b as DEFAULT_OPENAPI_OUTPUT_STRUCTURE } from './openapi.Bu_PfTtX.mjs';
 import { g as getOpenAPIMeta } from './openapi.B9PQzqBn.mjs';
-import { s as serializeHeaders } from './openapi.wQKxWEI2.mjs';
+import { s as serializeHeaders } from './openapi.BJRea9Uu.mjs';
 
 const END_SLASH_REGEX = /\/$/;
+const DOT_SEGMENT_REGEX = /(?:^|\/)\.{1,2}(?:\/|$)/;
 class OpenAPILinkCodec {
   constructor(router, options = {}) {
     this.router = router;
@@ -145,6 +146,9 @@ class OpenAPILinkCodec {
     if (!encoded) {
       throw new TypeError(`Path param "${param.parameterName}" cannot be empty in call to procedure (${path.join(".")}).`);
     }
+    if (DOT_SEGMENT_REGEX.test(encoded)) {
+      throw new TypeError(`Path param "${param.parameterName}" cannot contain "." or ".." segments in call to procedure (${path.join(".")}).`);
+    }
     return encoded;
   }
   serializeQueryString(data, queryStyles) {
@@ -339,7 +343,7 @@ function encodeDelimitedArray(serializedValues, encodedDelimiter) {
   return strings.map(encodeURLSearchParamComponent).join(encodedDelimiter);
 }
 function encodeDelimitedObject(entries, encodedDelimiter) {
-  const strings = entries.filter(([v]) => v !== null && v !== void 0).map(([k, v]) => [k, String(v)]);
+  const strings = entries.filter(([, v]) => v !== null && v !== void 0).map(([k, v]) => [k, String(v)]);
   if (!strings.length) {
     return void 0;
   }

package/dist/shared/{openapi.Cem81Zhm.d.ts → openapi.r98bZ3Ig.d.mts}

@@ -2,7 +2,7 @@ import { AnySchema, ErrorMap, MetaPlugin, AnyProcedureContract } from '@orpc/con
 import { Lazy } from '@orpc/server';
 import { Value } from '@orpc/shared';
 import { StandardBodyHint } from '@standard-server/core';
-import { OpenAPIV3_2 } from '@openapi-spec/types';
+import * as OpenAPIV3_2 from '@openapi-spec/types/v3.2';
 
 interface OpenAPIMeta {
     /**

package/dist/shared/{openapi.Cem81Zhm.d.mts → openapi.r98bZ3Ig.d.ts}

@@ -2,7 +2,7 @@ import { AnySchema, ErrorMap, MetaPlugin, AnyProcedureContract } from '@orpc/con
 import { Lazy } from '@orpc/server';
 import { Value } from '@orpc/shared';
 import { StandardBodyHint } from '@standard-server/core';
-import { OpenAPIV3_2 } from '@openapi-spec/types';
+import * as OpenAPIV3_2 from '@openapi-spec/types/v3.2';
 
 interface OpenAPIMeta {
     /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@orpc/openapi",
   "type": "module",
-  "version": "2.0.0-beta.40",
+  "version": "2.0.0-beta.42",
   "description": "Generate OpenAPI specs from oRPC routers and serve OpenAPI-compliant APIs with end-to-end type safety",
   "license": "MIT",
   "funding": [
@@ -97,20 +97,20 @@
     }
   },
   "dependencies": {
-    "@openapi-spec/downgrader": "~0.1.0",
-    "@openapi-spec/types": "~0.1.0",
-    "@orpc/client": "2.0.0-beta.40",
-    "@orpc/contract": "2.0.0-beta.40",
-    "@orpc/json-schema": "2.0.0-beta.40",
-    "@orpc/server": "2.0.0-beta.40",
-    "@orpc/shared": "2.0.0-beta.40",
-    "@standard-server/core": "~0.9.2",
-    "@standard-server/fetch": "~0.9.2",
-    "rou3": "^0.9.1"
+    "@openapi-spec/downgrader": "~0.3.0",
+    "@openapi-spec/types": "~0.3.0",
+    "@orpc/client": "2.0.0-beta.42",
+    "@orpc/contract": "2.0.0-beta.42",
+    "@orpc/json-schema": "2.0.0-beta.42",
+    "@orpc/server": "2.0.0-beta.42",
+    "@orpc/shared": "2.0.0-beta.42",
+    "@standard-server/core": "~0.10.1",
+    "@standard-server/fetch": "~0.10.1",
+    "rou3": "^1.0.0"
   },
   "devDependencies": {
     "@scalar/api-reference": "^1.65.1",
-    "@standard-server/aws-lambda": "~0.9.2",
+    "@standard-server/aws-lambda": "~0.10.1",
     "@types/swagger-ui": "^5.32.0",
     "fastify": "^5.12.1",
     "swagger-ui": "^5.32.14",