@pikku/openapi-parser 0.12.8 → 0.12.10

package/dist/parse-openapi.js

@@ -93,13 +93,17 @@ export async function parseOpenAPISpec(filePath) {
         tagDescriptions,
     };
 }
-/** Recursively resolve $ref pointers in-place */
-function resolveRefs(node, root) {
+/** Recursively resolve $ref pointers in-place, with cycle detection */
+function resolveRefs(node, root, visited) {
     if (node === null || typeof node !== 'object')
         return node;
+    const seen = visited ?? new Set();
+    if (seen.has(node))
+        return node;
+    seen.add(node);
     if (Array.isArray(node)) {
         for (let i = 0; i < node.length; i++) {
-            node[i] = resolveRefs(node[i], root);
+            node[i] = resolveRefs(node[i], root, seen);
         }
         return node;
     }
@@ -109,13 +113,14 @@ function resolveRefs(node, root) {
             // Merge any sibling properties (like description overrides)
             const { $ref, ...siblings } = node;
             const result = { ...resolved, ...siblings };
-            // Don't recurse infinitely — mark as resolved
+            // Don't recurse into the merged result — it shares structure with
+            // the original resolved object and may be circular
             return result;
         }
         return node;
     }
     for (const key of Object.keys(node)) {
-        node[key] = resolveRefs(node[key], root);
+        node[key] = resolveRefs(node[key], root, seen);
     }
     return node;
 }
@@ -342,10 +347,18 @@ export function computeContractHash(spec) {
         securitySchemes: spec.securitySchemes,
         serverUrls: spec.serverUrls,
     };
-    return createHash('sha256')
-        .update(JSON.stringify(contract))
-        .digest('hex')
-        .slice(0, 16);
+    // Use a cycle-safe JSON serializer since resolved $ref schemas
+    // can contain circular object references
+    const seen = new WeakSet();
+    const json = JSON.stringify(contract, (_key, value) => {
+        if (typeof value === 'object' && value !== null) {
+            if (seen.has(value))
+                return '[Circular]';
+            seen.add(value);
+        }
+        return value;
+    });
+    return createHash('sha256').update(json).digest('hex').slice(0, 16);
 }
 function extractTagDescriptions(doc) {
     const result = {};

package/dist/zod-codegen.d.ts

@@ -1 +1 @@
-export { type OpenAPISchema, type ZodCodegenContext, createContext, schemaToZod, schemaVarName, sanitizeTypeName, } from './openapi-to-zod-schema.js';
+export { type OpenAPISchema, type ZodCodegenContext, createContext, schemaToZod, schemaVarName, sanitizeTypeName, snakeToCamel, } from './openapi-to-zod-schema.js';

package/dist/zod-codegen.js

@@ -1 +1 @@
-export { createContext, schemaToZod, schemaVarName, sanitizeTypeName, } from './openapi-to-zod-schema.js';
+export { createContext, schemaToZod, schemaVarName, sanitizeTypeName, snakeToCamel, } from './openapi-to-zod-schema.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/openapi-parser",
-  "version": "0.12.8",
+  "version": "0.12.10",
   "description": "OpenAPI spec parser and code generator for Pikku",
   "author": "yasser.fadl@gmail.com",
   "license": "MIT",