@redocly/cli 1.25.15 → 1.26.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @redocly/cli
 
+## 1.26.0
+
+### Minor Changes
+
+- Introduced the `struct` rule and deprecated the `spec` rule.
+  Added the `spec` ruleset, which enforces compliance with the specifications.
+
+### Patch Changes
+
+- Fixed an issue where the CLI would fail to run on Windows due to a breaking change in the Node.js API.
+- Fixed an issue where `join` would throw an error when a glob pattern was provided.
+- Updated `sourceDescriptions` to enforce a valid type field, ensuring compliance with the Arazzo specification.
+- Updated @redocly/openapi-core to v1.26.0.
+
 ## 1.25.15
 
 ### Patch Changes

package/lib/__tests__/commands/join.test.js

@@ -13,7 +13,29 @@ describe('handleJoin', () => {
     colloreteYellowMock.mockImplementation((string) => string);
     it('should call exitWithError because only one entrypoint', async () => {
         await (0, join_1.handleJoin)({ argv: { apis: ['first.yaml'] }, config: {}, version: 'cli-version' });
-        expect(miscellaneous_1.exitWithError).toHaveBeenCalledWith(`At least 2 apis should be provided.`);
+        expect(miscellaneous_1.exitWithError).toHaveBeenCalledWith(`At least 2 APIs should be provided.`);
+    });
+    it('should call exitWithError if glob expands to less than 2 APIs', async () => {
+        miscellaneous_1.getFallbackApisOrExit.mockResolvedValueOnce([{ path: 'first.yaml' }]);
+        await (0, join_1.handleJoin)({
+            argv: { apis: ['*.yaml'] },
+            config: {},
+            version: 'cli-version',
+        });
+        expect(miscellaneous_1.exitWithError).toHaveBeenCalledWith(`At least 2 APIs should be provided.`);
+    });
+    it('should proceed if glob expands to 2 or more APIs', async () => {
+        openapi_core_1.detectSpec.mockReturnValue('oas3_1');
+        miscellaneous_1.getFallbackApisOrExit.mockResolvedValueOnce([
+            { path: 'first.yaml' },
+            { path: 'second.yaml' },
+        ]);
+        await (0, join_1.handleJoin)({
+            argv: { apis: ['*.yaml'] },
+            config: config_1.ConfigFixture,
+            version: 'cli-version',
+        });
+        expect(miscellaneous_1.exitWithError).not.toHaveBeenCalled();
     });
     it('should call exitWithError because passed all 3 options for tags', async () => {
         await (0, join_1.handleJoin)({
@@ -41,6 +63,7 @@ describe('handleJoin', () => {
         expect(miscellaneous_1.exitWithError).toHaveBeenCalledWith(`You use prefix-tags-with-filename, without-x-tag-groups together.\nPlease choose only one!`);
     });
     it('should call exitWithError because Only OpenAPI 3.0 and OpenAPI 3.1 are supported', async () => {
+        openapi_core_1.detectSpec.mockReturnValueOnce('oas2_0');
         await (0, join_1.handleJoin)({
             argv: {
                 apis: ['first.yaml', 'second.yaml'],

package/lib/__tests__/utils.test.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const miscellaneous_1 = require("../utils/miscellaneous");
+const platform_1 = require("../utils/platform");
 const openapi_core_1 = require("@redocly/openapi-core");
 const colorette_1 = require("colorette");
 const fs_1 = require("fs");
@@ -407,7 +408,7 @@ describe('checkIfRulesetExist', () => {
             oas3_1: {},
             async2: {},
             async3: {},
-            arazzo: {},
+            arazzo1: {},
         };
         expect(() => (0, miscellaneous_1.checkIfRulesetExist)(rules)).toThrowError('⚠️ No rules were configured. Learn how to configure rules: https://redocly.com/docs/cli/rules/');
     });
@@ -530,3 +531,63 @@ describe('writeToFileByExtension', () => {
         expect(process.stderr.write).toHaveBeenCalledWith(`test data`);
     });
 });
+describe('runtime platform', () => {
+    describe('sanitizePath', () => {
+        test.each([
+            ['C:\\Program Files\\App', 'C:\\Program Files\\App'],
+            ['/usr/local/bin/app', '/usr/local/bin/app'],
+            ['invalid|path?name*', 'invalidpathname'],
+            ['', ''],
+            ['<>:"|?*', ':'],
+            ['C:/Program Files\\App', 'C:/Program Files\\App'],
+            ['path\nname\r', 'pathname'],
+            ['/usr/local; rm -rf /', '/usr/local rm -rf /'],
+            ['C:\\data&& dir', 'C:\\data dir'],
+        ])('should sanitize path %s to %s', (input, expected) => {
+            expect((0, platform_1.sanitizePath)(input)).toBe(expected);
+        });
+    });
+    describe('sanitizeLocale', () => {
+        test.each([
+            ['en-US', 'en-US'],
+            ['fr_FR', 'fr_FR'],
+            ['en<>US', 'enUS'],
+            ['fr@FR', 'fr@FR'],
+            ['en_US@#$%', 'en_US@'],
+            [' en-US ', 'en-US'],
+            ['', ''],
+        ])('should sanitize locale %s to %s', (input, expected) => {
+            expect((0, platform_1.sanitizeLocale)(input)).toBe(expected);
+        });
+    });
+    describe('getPlatformSpawnArgs', () => {
+        const originalPlatform = process.platform;
+        afterEach(() => {
+            Object.defineProperty(process, 'platform', {
+                value: originalPlatform,
+            });
+        });
+        it('should return args for Windows platform', () => {
+            Object.defineProperty(process, 'platform', {
+                value: 'win32',
+            });
+            const result = (0, platform_1.getPlatformSpawnArgs)();
+            expect(result).toEqual({
+                npxExecutableName: 'npx.cmd',
+                sanitize: expect.any(Function),
+                shell: true,
+            });
+        });
+        it('should return args for non-Windows platform', () => {
+            Object.defineProperty(process, 'platform', {
+                value: 'linux',
+            });
+            const result = (0, platform_1.getPlatformSpawnArgs)();
+            expect(result).toEqual({
+                npxExecutableName: 'npx',
+                sanitize: expect.any(Function),
+                shell: false,
+            });
+        });
+    });
+});

package/lib/commands/eject.js

@@ -2,17 +2,27 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleEject = void 0;
 const child_process_1 = require("child_process");
+const platform_1 = require("../utils/platform");
 const handleEject = async ({ argv }) => {
     process.stdout.write(`\nLaunching eject using NPX.\n\n`);
-    const npxExecutableName = process.platform === 'win32' ? 'npx.cmd' : 'npx';
-    (0, child_process_1.spawn)(npxExecutableName, [
+    const { npxExecutableName, sanitize, shell } = (0, platform_1.getPlatformSpawnArgs)();
+    const path = sanitize(argv.path, platform_1.sanitizePath);
+    const projectDir = sanitize(argv['project-dir'], platform_1.sanitizePath);
+    const child = (0, child_process_1.spawn)(npxExecutableName, [
         '-y',
         '@redocly/realm',
         'eject',
         `${argv.type}`,
-        `${argv.path ?? ''}`,
-        `-d=${argv['project-dir']}`,
+        path,
+        `-d=${projectDir}`,
         argv.force ? `--force=${argv.force}` : '',
-    ], { stdio: 'inherit' });
+    ], {
+        stdio: 'inherit',
+        shell,
+    });
+    child.on('error', (error) => {
+        process.stderr.write(`Eject launch failed: ${error.message}`);
+        throw new Error('Eject launch failed.');
+    });
 };
 exports.handleEject = handleEject;

package/lib/commands/join.js

@@ -15,11 +15,7 @@ const xTagGroups = 'x-tagGroups';
 let potentialConflictsTotal = 0;
 async function handleJoin({ argv, config, version: packageVersion, }) {
     const startedAt = perf_hooks_1.performance.now();
-    if (argv.apis.length < 2) {
-        return (0, miscellaneous_1.exitWithError)(`At least 2 apis should be provided.`);
-    }
-    const fileExtension = (0, miscellaneous_1.getAndValidateFileExtension)(argv.output || argv.apis[0]);
-    const { 'prefix-components-with-info-prop': prefixComponentsWithInfoProp, 'prefix-tags-with-filename': prefixTagsWithFilename, 'prefix-tags-with-info-prop': prefixTagsWithInfoProp, 'without-x-tag-groups': withoutXTagGroups, output: specFilename = `openapi.${fileExtension}`, } = argv;
+    const { 'prefix-components-with-info-prop': prefixComponentsWithInfoProp, 'prefix-tags-with-filename': prefixTagsWithFilename, 'prefix-tags-with-info-prop': prefixTagsWithInfoProp, 'without-x-tag-groups': withoutXTagGroups, output, } = argv;
     const usedTagsOptions = [
         prefixTagsWithFilename && 'prefix-tags-with-filename',
         prefixTagsWithInfoProp && 'prefix-tags-with-info-prop',
@@ -29,6 +25,11 @@ async function handleJoin({ argv, config, version: packageVersion, }) {
         return (0, miscellaneous_1.exitWithError)(`You use ${(0, colorette_1.yellow)(usedTagsOptions.join(', '))} together.\nPlease choose only one!`);
     }
     const apis = await (0, miscellaneous_1.getFallbackApisOrExit)(argv.apis, config);
+    if (apis.length < 2) {
+        return (0, miscellaneous_1.exitWithError)(`At least 2 APIs should be provided.`);
+    }
+    const fileExtension = (0, miscellaneous_1.getAndValidateFileExtension)(output || apis[0].path);
+    const specFilename = output || `openapi.${fileExtension}`;
     const externalRefResolver = new openapi_core_1.BaseResolver(config.resolve);
     const documents = await Promise.all(apis.map(({ path }) => externalRefResolver.resolveDocument(null, path, true)));
     const decorators = new Set([

package/lib/commands/preview-project/index.js

@@ -5,6 +5,7 @@ const path = require("path");
 const fs_1 = require("fs");
 const child_process_1 = require("child_process");
 const constants_1 = require("./constants");
+const platform_1 = require("../../utils/platform");
 const previewProject = async ({ argv }) => {
     const { plan, port } = argv;
     const projectDir = argv['project-dir'];
@@ -16,10 +17,15 @@ const previewProject = async ({ argv }) => {
     const productName = constants_1.PRODUCT_NAMES[product];
     const packageName = constants_1.PRODUCT_PACKAGES[product];
     process.stdout.write(`\nLaunching preview of ${productName} ${plan} using NPX.\n\n`);
-    const npxExecutableName = process.platform === 'win32' ? 'npx.cmd' : 'npx';
-    (0, child_process_1.spawn)(npxExecutableName, ['-y', packageName, 'preview', `--plan=${plan}`, `--port=${port || 4000}`], {
+    const { npxExecutableName, shell } = (0, platform_1.getPlatformSpawnArgs)();
+    const child = (0, child_process_1.spawn)(npxExecutableName, ['-y', packageName, 'preview', `--plan=${plan}`, `--port=${port || 4000}`], {
         stdio: 'inherit',
         cwd: projectDir,
+        shell,
+    });
+    child.on('error', (error) => {
+        process.stderr.write(`Project preview launch failed: ${error.message}`);
+        throw new Error(`Project preview launch failed.`);
     });
 };
 exports.previewProject = previewProject;

package/lib/commands/translations.js

@@ -2,9 +2,19 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleTranslations = void 0;
 const child_process_1 = require("child_process");
+const platform_1 = require("../utils/platform");
 const handleTranslations = async ({ argv }) => {
     process.stdout.write(`\nLaunching translate using NPX.\n\n`);
-    const npxExecutableName = process.platform === 'win32' ? 'npx.cmd' : 'npx';
-    (0, child_process_1.spawn)(npxExecutableName, ['-y', '@redocly/realm', 'translate', argv.locale, `-d=${argv['project-dir']}`], { stdio: 'inherit' });
+    const { npxExecutableName, sanitize, shell } = (0, platform_1.getPlatformSpawnArgs)();
+    const projectDir = sanitize(argv['project-dir'], platform_1.sanitizePath);
+    const locale = sanitize(argv.locale, platform_1.sanitizeLocale);
+    const child = (0, child_process_1.spawn)(npxExecutableName, ['-y', '@redocly/realm', 'translate', locale, `-d=${projectDir}`], {
+        stdio: 'inherit',
+        shell,
+    });
+    child.on('error', (error) => {
+        process.stderr.write(`Translate launch failed: ${error.message}`);
+        throw new Error(`Translate launch failed.`);
+    });
 };
 exports.handleTranslations = handleTranslations;

package/lib/utils/miscellaneous.js

@@ -427,7 +427,7 @@ function checkIfRulesetExist(rules) {
         ...rules.oas3_1,
         ...rules.async2,
         ...rules.async3,
-        ...rules.arazzo,
+        ...rules.arazzo1,
     };
     if ((0, utils_1.isEmptyObject)(ruleset)) {
         exitWithError('⚠️ No rules were configured. Learn how to configure rules: https://redocly.com/docs/cli/rules/');

package/lib/utils/platform.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Sanitizes the input path by removing invalid characters.
+ */
+export declare const sanitizePath: (input: string) => string;
+/**
+ * Sanitizes the input locale (ex. en-US) by removing invalid characters.
+ */
+export declare const sanitizeLocale: (input: string) => string;
+/**
+ * Retrieves platform-specific arguments and utilities.
+ */
+export declare function getPlatformSpawnArgs(): {
+    npxExecutableName: string;
+    sanitize: (input: string | undefined, sanitizer: (input: string) => string) => string;
+    shell: boolean;
+};

package/lib/utils/platform.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeLocale = exports.sanitizePath = void 0;
+exports.getPlatformSpawnArgs = getPlatformSpawnArgs;
+/**
+ * Sanitizes the input path by removing invalid characters.
+ */
+const sanitizePath = (input) => {
+    return input.replace(/[^a-zA-Z0-9 ._\-:\\/@]/g, '');
+};
+exports.sanitizePath = sanitizePath;
+/**
+ * Sanitizes the input locale (ex. en-US) by removing invalid characters.
+ */
+const sanitizeLocale = (input) => {
+    return input.replace(/[^a-zA-Z0-9@._-]/g, '');
+};
+exports.sanitizeLocale = sanitizeLocale;
+/**
+ * Retrieves platform-specific arguments and utilities.
+ */
+function getPlatformSpawnArgs() {
+    const isWindowsPlatform = process.platform === 'win32';
+    const npxExecutableName = isWindowsPlatform ? 'npx.cmd' : 'npx';
+    const sanitizeIfWindows = (input, sanitizer) => {
+        if (isWindowsPlatform && input) {
+            return sanitizer(input);
+        }
+        else {
+            return input || '';
+        }
+    };
+    return { npxExecutableName, sanitize: sanitizeIfWindows, shell: isWindowsPlatform };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redocly/cli",
-  "version": "1.25.15",
+  "version": "1.26.0",
   "description": "",
   "license": "MIT",
   "bin": {
@@ -36,7 +36,7 @@
     "Roman Hotsiy <roman@redocly.com> (https://redocly.com/)"
   ],
   "dependencies": {
-    "@redocly/openapi-core": "1.25.15",
+    "@redocly/openapi-core": "1.26.0",
     "abort-controller": "^3.0.0",
     "chokidar": "^3.5.1",
     "colorette": "^1.2.0",

package/src/__tests__/commands/join.test.ts

@@ -1,7 +1,11 @@
 import { yellow } from 'colorette';
 import { detectSpec } from '@redocly/openapi-core';
 import { handleJoin } from '../../commands/join';
-import { exitWithError, writeToFileByExtension } from '../../utils/miscellaneous';
+import {
+  exitWithError,
+  getFallbackApisOrExit,
+  writeToFileByExtension,
+} from '../../utils/miscellaneous';
 import { loadConfig } from '../../__mocks__/@redocly/openapi-core';
 import { ConfigFixture } from '../fixtures/config';
 
@@ -15,7 +19,35 @@ describe('handleJoin', () => {
 
   it('should call exitWithError because only one entrypoint', async () => {
     await handleJoin({ argv: { apis: ['first.yaml'] }, config: {} as any, version: 'cli-version' });
-    expect(exitWithError).toHaveBeenCalledWith(`At least 2 apis should be provided.`);
+    expect(exitWithError).toHaveBeenCalledWith(`At least 2 APIs should be provided.`);
+  });
+
+  it('should call exitWithError if glob expands to less than 2 APIs', async () => {
+    (getFallbackApisOrExit as jest.Mock).mockResolvedValueOnce([{ path: 'first.yaml' }]);
+
+    await handleJoin({
+      argv: { apis: ['*.yaml'] },
+      config: {} as any,
+      version: 'cli-version',
+    });
+
+    expect(exitWithError).toHaveBeenCalledWith(`At least 2 APIs should be provided.`);
+  });
+
+  it('should proceed if glob expands to 2 or more APIs', async () => {
+    (detectSpec as jest.Mock).mockReturnValue('oas3_1');
+    (getFallbackApisOrExit as jest.Mock).mockResolvedValueOnce([
+      { path: 'first.yaml' },
+      { path: 'second.yaml' },
+    ]);
+
+    await handleJoin({
+      argv: { apis: ['*.yaml'] },
+      config: ConfigFixture as any,
+      version: 'cli-version',
+    });
+
+    expect(exitWithError).not.toHaveBeenCalled();
   });
 
   it('should call exitWithError because passed all 3 options for tags', async () => {
@@ -52,6 +84,7 @@ describe('handleJoin', () => {
   });
 
   it('should call exitWithError because Only OpenAPI 3.0 and OpenAPI 3.1 are supported', async () => {
+    (detectSpec as jest.Mock).mockReturnValueOnce('oas2_0');
     await handleJoin({
       argv: {
         apis: ['first.yaml', 'second.yaml'],

package/src/__tests__/utils.test.ts

@@ -15,6 +15,7 @@ import {
   getAndValidateFileExtension,
   writeToFileByExtension,
 } from '../utils/miscellaneous';
+import { sanitizeLocale, sanitizePath, getPlatformSpawnArgs } from '../utils/platform';
 import {
   ResolvedApi,
   Totals,
@@ -500,7 +501,7 @@ describe('checkIfRulesetExist', () => {
       oas3_1: {},
       async2: {},
       async3: {},
-      arazzo: {},
+      arazzo1: {},
     };
     expect(() => checkIfRulesetExist(rules)).toThrowError(
       '⚠️ No rules were configured. Learn how to configure rules: https://redocly.com/docs/cli/rules/'
@@ -641,3 +642,73 @@ describe('writeToFileByExtension', () => {
     expect(process.stderr.write).toHaveBeenCalledWith(`test data`);
   });
 });
+
+describe('runtime platform', () => {
+  describe('sanitizePath', () => {
+    test.each([
+      ['C:\\Program Files\\App', 'C:\\Program Files\\App'],
+      ['/usr/local/bin/app', '/usr/local/bin/app'],
+      ['invalid|path?name*', 'invalidpathname'],
+      ['', ''],
+      ['<>:"|?*', ':'],
+      ['C:/Program Files\\App', 'C:/Program Files\\App'],
+      ['path\nname\r', 'pathname'],
+      ['/usr/local; rm -rf /', '/usr/local rm -rf /'],
+      ['C:\\data&& dir', 'C:\\data dir'],
+    ])('should sanitize path %s to %s', (input, expected) => {
+      expect(sanitizePath(input)).toBe(expected);
+    });
+  });
+
+  describe('sanitizeLocale', () => {
+    test.each([
+      ['en-US', 'en-US'],
+      ['fr_FR', 'fr_FR'],
+      ['en<>US', 'enUS'],
+      ['fr@FR', 'fr@FR'],
+      ['en_US@#$%', 'en_US@'],
+      [' en-US ', 'en-US'],
+      ['', ''],
+    ])('should sanitize locale %s to %s', (input, expected) => {
+      expect(sanitizeLocale(input)).toBe(expected);
+    });
+  });
+
+  describe('getPlatformSpawnArgs', () => {
+    const originalPlatform = process.platform;
+
+    afterEach(() => {
+      Object.defineProperty(process, 'platform', {
+        value: originalPlatform,
+      });
+    });
+
+    it('should return args for Windows platform', () => {
+      Object.defineProperty(process, 'platform', {
+        value: 'win32',
+      });
+
+      const result = getPlatformSpawnArgs();
+
+      expect(result).toEqual({
+        npxExecutableName: 'npx.cmd',
+        sanitize: expect.any(Function),
+        shell: true,
+      });
+    });
+
+    it('should return args for non-Windows platform', () => {
+      Object.defineProperty(process, 'platform', {
+        value: 'linux',
+      });
+
+      const result = getPlatformSpawnArgs();
+
+      expect(result).toEqual({
+        npxExecutableName: 'npx',
+        sanitize: expect.any(Function),
+        shell: false,
+      });
+    });
+  });
+});

package/src/commands/eject.ts

@@ -1,4 +1,5 @@
 import { spawn } from 'child_process';
+import { getPlatformSpawnArgs, sanitizePath } from '../utils/platform';
 
 import type { CommandArgs } from '../wrapper';
 import type { VerifyConfigOptions } from '../types';
@@ -12,18 +13,30 @@ export type EjectOptions = {
 
 export const handleEject = async ({ argv }: CommandArgs<EjectOptions>) => {
   process.stdout.write(`\nLaunching eject using NPX.\n\n`);
-  const npxExecutableName = process.platform === 'win32' ? 'npx.cmd' : 'npx';
-  spawn(
+  const { npxExecutableName, sanitize, shell } = getPlatformSpawnArgs();
+
+  const path = sanitize(argv.path, sanitizePath);
+  const projectDir = sanitize(argv['project-dir'], sanitizePath);
+
+  const child = spawn(
     npxExecutableName,
     [
       '-y',
       '@redocly/realm',
       'eject',
       `${argv.type}`,
-      `${argv.path ?? ''}`,
-      `-d=${argv['project-dir']}`,
+      path,
+      `-d=${projectDir}`,
       argv.force ? `--force=${argv.force}` : '',
     ],
-    { stdio: 'inherit' }
+    {
+      stdio: 'inherit',
+      shell,
+    }
   );
+
+  child.on('error', (error) => {
+    process.stderr.write(`Eject launch failed: ${error.message}`);
+    throw new Error('Eject launch failed.');
+  });
 };

package/src/commands/join.ts

@@ -64,18 +64,12 @@ export async function handleJoin({
 }: CommandArgs<JoinOptions>) {
   const startedAt = performance.now();
 
-  if (argv.apis.length < 2) {
-    return exitWithError(`At least 2 apis should be provided.`);
-  }
-
-  const fileExtension = getAndValidateFileExtension(argv.output || argv.apis[0]);
-
   const {
     'prefix-components-with-info-prop': prefixComponentsWithInfoProp,
     'prefix-tags-with-filename': prefixTagsWithFilename,
     'prefix-tags-with-info-prop': prefixTagsWithInfoProp,
     'without-x-tag-groups': withoutXTagGroups,
-    output: specFilename = `openapi.${fileExtension}`,
+    output,
   } = argv;
 
   const usedTagsOptions = [
@@ -91,6 +85,13 @@ export async function handleJoin({
   }
 
   const apis = await getFallbackApisOrExit(argv.apis, config);
+  if (apis.length < 2) {
+    return exitWithError(`At least 2 APIs should be provided.`);
+  }
+
+  const fileExtension = getAndValidateFileExtension(output || apis[0].path);
+  const specFilename = output || `openapi.${fileExtension}`;
+
   const externalRefResolver = new BaseResolver(config.resolve);
   const documents = await Promise.all(
     apis.map(

package/src/commands/preview-project/index.ts

@@ -2,6 +2,7 @@ import path = require('path');
 import { existsSync, readFileSync } from 'fs';
 import { spawn } from 'child_process';
 import { PRODUCT_NAMES, PRODUCT_PACKAGES } from './constants';
+import { getPlatformSpawnArgs } from '../../utils/platform';
 
 import type { PreviewProjectOptions, Product } from './types';
 import type { CommandArgs } from '../../wrapper';
@@ -21,17 +22,22 @@ export const previewProject = async ({ argv }: CommandArgs<PreviewProjectOptions
   const packageName = PRODUCT_PACKAGES[product];
 
   process.stdout.write(`\nLaunching preview of ${productName} ${plan} using NPX.\n\n`);
+  const { npxExecutableName, shell } = getPlatformSpawnArgs();
 
-  const npxExecutableName = process.platform === 'win32' ? 'npx.cmd' : 'npx';
-
-  spawn(
+  const child = spawn(
     npxExecutableName,
     ['-y', packageName, 'preview', `--plan=${plan}`, `--port=${port || 4000}`],
     {
       stdio: 'inherit',
       cwd: projectDir,
+      shell,
     }
   );
+
+  child.on('error', (error) => {
+    process.stderr.write(`Project preview launch failed: ${error.message}`);
+    throw new Error(`Project preview launch failed.`);
+  });
 };
 
 const isValidProduct = (product: string | undefined): product is Product => {

package/src/commands/translations.ts

@@ -1,4 +1,5 @@
 import { spawn } from 'child_process';
+import { getPlatformSpawnArgs, sanitizeLocale, sanitizePath } from '../utils/platform';
 
 import type { CommandArgs } from '../wrapper';
 import type { VerifyConfigOptions } from '../types';
@@ -10,10 +11,22 @@ export type TranslationsOptions = {
 
 export const handleTranslations = async ({ argv }: CommandArgs<TranslationsOptions>) => {
   process.stdout.write(`\nLaunching translate using NPX.\n\n`);
-  const npxExecutableName = process.platform === 'win32' ? 'npx.cmd' : 'npx';
-  spawn(
+  const { npxExecutableName, sanitize, shell } = getPlatformSpawnArgs();
+
+  const projectDir = sanitize(argv['project-dir'], sanitizePath);
+  const locale = sanitize(argv.locale, sanitizeLocale);
+
+  const child = spawn(
     npxExecutableName,
-    ['-y', '@redocly/realm', 'translate', argv.locale, `-d=${argv['project-dir']}`],
-    { stdio: 'inherit' }
+    ['-y', '@redocly/realm', 'translate', locale, `-d=${projectDir}`],
+    {
+      stdio: 'inherit',
+      shell,
+    }
   );
+
+  child.on('error', (error) => {
+    process.stderr.write(`Translate launch failed: ${error.message}`);
+    throw new Error(`Translate launch failed.`);
+  });
 };

package/src/utils/miscellaneous.ts

@@ -529,7 +529,7 @@ export function checkIfRulesetExist(rules: typeof StyleguideConfig.prototype.rul
     ...rules.oas3_1,
     ...rules.async2,
     ...rules.async3,
-    ...rules.arazzo,
+    ...rules.arazzo1,
   };
 
   if (isEmptyObject(ruleset)) {

package/src/utils/platform.ts

@@ -0,0 +1,31 @@
+/**
+ * Sanitizes the input path by removing invalid characters.
+ */
+export const sanitizePath = (input: string): string => {
+  return input.replace(/[^a-zA-Z0-9 ._\-:\\/@]/g, '');
+};
+
+/**
+ * Sanitizes the input locale (ex. en-US) by removing invalid characters.
+ */
+export const sanitizeLocale = (input: string): string => {
+  return input.replace(/[^a-zA-Z0-9@._-]/g, '');
+};
+
+/**
+ * Retrieves platform-specific arguments and utilities.
+ */
+export function getPlatformSpawnArgs() {
+  const isWindowsPlatform = process.platform === 'win32';
+  const npxExecutableName = isWindowsPlatform ? 'npx.cmd' : 'npx';
+
+  const sanitizeIfWindows = (input: string | undefined, sanitizer: (input: string) => string) => {
+    if (isWindowsPlatform && input) {
+      return sanitizer(input);
+    } else {
+      return input || '';
+    }
+  };
+
+  return { npxExecutableName, sanitize: sanitizeIfWindows, shell: isWindowsPlatform };
+}