@redocly/client-generator 0.7.11 → 0.7.13

package/eject-assets/generators/cli/docs.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "cli" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "cli" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator cli --update`.

package/eject-assets/generators/cli/engine-source.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "cli" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "cli" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator cli --update`.

package/eject-assets/generators/cli/index.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "cli" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "cli" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator cli --update`.
@@ -86,5 +86,5 @@ export default {
   docs: cliDocs,
   requires: ["typescript","zod"],
   errorModes: ["throw"],
-  requiresGenerator: '^0.7.11',
+  requiresGenerator: '^0.7.13',
 };

package/eject-assets/generators/cli/render.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "cli" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "cli" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator cli --update`.

package/eject-assets/generators/go/client.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.

package/eject-assets/generators/go/descriptor.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.

package/eject-assets/generators/go/index.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.
@@ -332,5 +332,5 @@ export default {
     "argsStyle": "inputs follow the target language's own idiom",
     "importExt": "the generated file has no relative imports"
   },
-  requiresGenerator: '^0.7.11',
+  requiresGenerator: '^0.7.13',
 };

package/eject-assets/generators/go/models.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.
@@ -26,11 +26,16 @@ function writeStruct(
   dateType: DateType,
   description?: string
 ): void {
+  // A response never carries a `writeOnly` property, and responses decode into this same
+  // struct, so the property is optional even when the description requires it.
+  const fields = properties.map((property) =>
+    property.writeOnly ? { ...property, required: false } : property
+  );
   printer.doc(exported(name), description);
   printer.block(
     `type ${exported(name)} struct {`,
     () => {
-      for (const property of properties) {
+      for (const property of fields) {
         const field = exported(property.name);
         let fieldType = goType(property.schema, dateType);
         let tag = `\`json:"${property.name}"\``;

package/eject-assets/generators/go/naming.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.

package/eject-assets/generators/go/operations.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.

package/eject-assets/generators/go/pagination.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.

package/eject-assets/generators/go/types.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "go" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "go" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator go --update`.

package/eject-assets/generators/mock/faker.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "mock" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "mock" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator mock --update`.
@@ -22,7 +22,7 @@ import {
 } from '@redocly/client-generator';
 import { codeLiteral } from '@redocly/client-generator/printers/typescript';
 
-import { splitIntersection } from './sample.ts';
+import { numericRange, omitsFromResponse, splitIntersection } from './sample.ts';
 import { expr, isObjectValue, type MockEntry, type MockValue, objectValue } from './values.ts';
 
 /** The faker-call value for an IR schema. Refs resolve against `schemas`;
@@ -69,6 +69,7 @@ function walk(
     case 'object':
       return objectValue(
         schema.properties.flatMap((p): MockEntry[] => {
+          if (omitsFromResponse(p)) return [];
           const value = walk(p.schema, byName, visiting, dateType);
           // A cyclic optional property is omitted; a cyclic required property is
           // uninhabitable, so null is the only stand-in.
@@ -142,8 +143,8 @@ function scalarExpr(
 ): string {
   if (meta?.format === 'binary') return 'new Blob([])';
   if (scalar === 'boolean') return 'faker.datatype.boolean()';
-  if (scalar === 'integer') return `faker.number.int(${boundsArg(meta)})`;
-  if (scalar === 'number') return `faker.number.float(${boundsArg(meta)})`;
+  if (scalar === 'integer') return `faker.number.int(${boundsArg(scalar, meta)})`;
+  if (scalar === 'number') return `faker.number.float(${boundsArg(scalar, meta)})`;
   switch (meta?.format) {
     case 'email':
       return 'faker.internet.email()';
@@ -173,13 +174,20 @@ function dateExpr(dateType: DateType, dateOnly: boolean): string {
   return dateOnly ? `${iso}.slice(0, 10)` : iso;
 }
 
-/** `{ min, max }` arg for a bounded numeric, or empty when neither bound is set. */
-function boundsArg(meta: SchemaMetadata | undefined): string {
+/**
+ * `{ min, max, multipleOf }` for a bounded numeric, or empty when unbounded. Both ends are
+ * always set, because faker's defaults (`0`, and `1` for floats) can sit on the wrong side
+ * of a single bound: the missing end is 100 steps away from the set one.
+ */
+function boundsArg(scalar: 'integer' | 'number', meta: SchemaMetadata | undefined): string {
+  const { min, max, step = 1 } = numericRange(scalar, meta);
+  if (min === undefined && max === undefined) return '';
   const props = [
-    ...(meta?.minimum !== undefined ? [`min: ${meta.minimum}`] : []),
-    ...(meta?.maximum !== undefined ? [`max: ${meta.maximum}`] : []),
+    `min: ${min ?? (max ?? 0) - 100 * step}`,
+    `max: ${max ?? (min ?? 0) + 100 * step}`,
+    ...(meta?.multipleOf !== undefined ? [`multipleOf: ${meta.multipleOf}`] : []),
   ];
-  return props.length > 0 ? `{ ${props.join(', ')} }` : '';
+  return `{ ${props.join(', ')} }`;
 }
 
 /** `faker.helpers.multiple(() => <item>, { count: 1 })` — one element keeps output small.

package/eject-assets/generators/mock/index.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "mock" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "mock" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator mock --update`.
@@ -13,13 +13,14 @@ import { renderMockModule } from './render.ts';
  * sdk client stays dependency-free. Output-mode-agnostic in v1 — one module beside
  * the client. Emits nothing when there are no operations.
  */
-export const mockGenerator: Generator = ({ model, output, banner, emit }) => {
+export const mockGenerator: Generator = ({ model, output, banner, emit, pagination }) => {
   const header = banner.map((line) => `// ${line}`).join('\n');
   const content = renderMockModule(model, {
     sdkModule: `./${output.stem}.${emit.importExt ?? 'js'}`,
     dateType: emit.dateType,
     mockData: emit.mockData,
     mockSeed: emit.mockSeed,
+    pagination,
   });
   if (content === '') return [];
   return [
@@ -31,5 +32,5 @@ export default {
   name: 'mock',
   run: mockGenerator,
   requires: ["typescript"],
-  requiresGenerator: '^0.7.11',
+  requiresGenerator: '^0.7.13',
 };

package/eject-assets/generators/mock/render.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "mock" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "mock" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator mock --update`.
@@ -13,9 +13,13 @@ import {
   allOperations,
   type ApiModel,
   type DateType,
+  flattenAllOf,
+  isNullable,
+  type ModelPagination,
   type NamedSchemaModel,
   type OperationModel,
   type ResponseBodyModel,
+  schemaAtPointer,
   type SchemaModel,
 } from '@redocly/client-generator';
 import {
@@ -30,6 +34,7 @@ import { sampleValue, SampleExpression } from './sample.ts';
 import {
   expr,
   isObjectValue,
+  type MockEntry,
   type MockValue,
   objectValue,
   renderMockValue,
@@ -54,6 +59,8 @@ export type MockOptions = {
   mockData?: 'static' | 'faker';
   /** When set in `'faker'` mode, emit a top-level `faker.seed(<n>);` so runs reproduce. */
   mockSeed?: number;
+  /** The run's resolved pagination: a paginated handler serves the last page. */
+  pagination?: ModelPagination;
 };
 
 /** The body value for `schema` under the active data mode: a static literal tree
@@ -150,7 +157,7 @@ function codeIdent(value: string): string {
 function handlerFor(op: OperationModel, model: ApiModel, opts: MockOptions): string {
   const override = overrideParam(op, model, opts);
   const params = override ?? '';
-  const call = `http.${codeIdent(op.method)}(${JSON.stringify(mswPath(op.path))}, () => ${responseExpression(op, model, opts)})`;
+  const call = `http.${codeIdent(op.method)}(${JSON.stringify(mswPath(op.path))}, ${resolverFor(op, model, opts)})`;
   return `export const ${codeIdent(op.name)}Handler = (${params}) => ${call};`;
 }
 
@@ -212,8 +219,8 @@ function errorBodyType(op: OperationModel): string {
  * A `ref` success body forwards `override` to `create<Schema>(override)`, so its type
  * mirrors the factory's parameter (`Partial<Schema>`, or the full type when the factory
  * replaces wholesale — see `factoryFor`). An inline object body spreads `override`, typed
- * `Record<string, unknown>`. A body-less or non-object inline response has nothing to
- * override, so the handler takes no parameter.
+ * `Record<string, unknown>`, or `Partial<Omit<Schema, …>>` for an `omit` body. A body-less
+ * or non-object inline response has nothing to override, so the handler takes no parameter.
  */
 function overrideParam(op: OperationModel, model: ApiModel, opts: MockOptions): string | undefined {
   const success = op.successResponses[0];
@@ -226,16 +233,128 @@ function overrideParam(op: OperationModel, model: ApiModel, opts: MockOptions):
     return `override?: ${type}`;
   }
   if (!isObjectValue(bodyValue(success.schema, model, opts))) return undefined;
+  if (success.schema.kind === 'omit') {
+    const keys = success.schema.keys.map((key) => JSON.stringify(key)).join(' | ');
+    return `override?: Partial<Omit<${success.schema.base}, ${keys}>>`;
+  }
   return 'override?: Record<string, unknown>';
 }
 
+/**
+ * The handler's resolver. A paginated operation serves the LAST page, so `.pages()` over
+ * the default handlers ends after one page: a cursor page carries no next cursor (and a
+ * `false` "has more" flag), and a `body-link` page no next link; an offset or page-number
+ * page answers any position past the first with an empty item list, because those styles
+ * stop only on an empty page.
+ */
+function resolverFor(op: OperationModel, model: ApiModel, opts: MockOptions): string {
+  const spec = opts.pagination?.get(op.name)?.spec;
+  const success = op.successResponses[0];
+  if (!spec || spec.style === 'link' || !success)
+    return `() => ${responseExpression(op, model, opts)}`;
+  const page = bodyValue(success.schema, model, opts);
+  const status = statusCode(success.status);
+  // An object page spreads `override` in; a page that is the item array is replaced by it.
+  const takesOverride = overrideParam(op, model, opts) !== undefined;
+  const withOverride = (value: MockValue): MockValue => {
+    if (isObjectValue(value)) return spreadInto(value, 'override');
+    return takesOverride ? { kind: 'wrap', before: 'override ?? ', value, after: '' } : value;
+  };
+  const json = (value: MockValue): string => {
+    const data = renderMockValue(value, '');
+    return status === 200
+      ? `HttpResponse.json(${data})`
+      : `HttpResponse.json(${data}, { status: ${status} })`;
+  };
+  if (spec.style === 'cursor' || spec.style === 'body-link') {
+    const next = spec.style === 'cursor' ? spec.nextCursor : spec.nextLink;
+    let last = withPointer(page, pointerKeys(next), cursorStop(success.schema, next, model));
+    if (spec.style === 'cursor' && spec.hasMore !== undefined)
+      last = withPointer(last, pointerKeys(spec.hasMore), expr('false'));
+    return `() => ${json(withOverride(last))}`;
+  }
+  const first = spec.style === 'page' ? 1 : 0;
+  const position = `Number(new URL(request.url).searchParams.get(${codeLiteral(spec.param)}) ?? ${first})`;
+  const empty = emptyPage(page, pointerKeys(spec.items));
+  return `({ request }) => ${position} > ${first} ? ${json(empty)} : ${json(withOverride(page))}`;
+}
+
+/**
+ * The page past the last one: the page with `override` spread in, and the items at `keys`
+ * set AFTER the spread, so an override that sets the items cannot refill the empty page.
+ * The top-level property that holds the items is written out from the sample.
+ */
+function emptyPage(page: MockValue, keys: string[]): MockValue {
+  if (keys.length === 0 || !isObjectValue(page)) return withPointer(page, keys, expr('[]'));
+  const [key, ...rest] = keys;
+  const isKey = (entry: MockEntry) => !('spread' in entry) && entry.key === key;
+  const holder = page.entries.find(isKey);
+  const inner = holder && !('spread' in holder) ? holder.value : objectValue([]);
+  return objectValue([
+    ...page.entries.filter((entry) => !isKey(entry)),
+    { spread: 'override' },
+    { key, value: withPointer(inner, rest, expr('[]')) },
+  ]);
+}
+
+/**
+ * What ends a cursor or `body-link` walk at `pointer`: `null` when the value is nullable,
+ * nothing (the property is left out) when it is optional, and an empty string otherwise.
+ */
+function cursorStop(schema: SchemaModel, pointer: string, model: ApiModel): MockValue | undefined {
+  const cursor = schemaAtPointer(schema, pointer, model);
+  if (cursor?.kind === 'null' || (cursor && isNullable(cursor))) return expr('null');
+  const keys = pointerKeys(pointer);
+  const parent = schemaAtPointer(schema, pointer.slice(0, pointer.lastIndexOf('/')), model);
+  const property =
+    parent &&
+    flattenAllOf(parent, model)?.properties.find((candidate) => candidate.name === keys.at(-1));
+  return property?.required === false ? undefined : expr('""');
+}
+
+/** RFC 6901 pointer tokens (`~1` → `/`, `~0` → `~`); none for `''`, the whole value. */
+function pointerKeys(pointer: string): string[] {
+  if (pointer === '') return [];
+  return pointer
+    .slice(1)
+    .split('/')
+    .map((token) => token.replaceAll('~1', '/').replaceAll('~0', '~'));
+}
+
+/**
+ * `value` with the property at the `keys` path replaced (added when missing), or removed
+ * when `replacement` is `undefined`. An empty path replaces the whole value (a page that
+ * is the item array itself). Steps only through objects: a path that reaches into
+ * anything else leaves the value unchanged.
+ */
+function withPointer(
+  value: MockValue,
+  keys: string[],
+  replacement: MockValue | undefined
+): MockValue {
+  if (keys.length === 0) return replacement ?? value;
+  if (!isObjectValue(value)) return value;
+  const [key, ...rest] = keys;
+  const found = value.entries.some((entry) => !('spread' in entry) && entry.key === key);
+  const entries = value.entries.flatMap((entry) => {
+    if ('spread' in entry || entry.key !== key) return [entry];
+    if (rest.length > 0) return [{ key, value: withPointer(entry.value, rest, replacement) }];
+    return replacement === undefined ? [] : [{ key, value: replacement }];
+  });
+  if (!found && rest.length === 0 && replacement !== undefined) {
+    entries.push({ key, value: replacement });
+  }
+  return objectValue(entries);
+}
+
 /**
  * The handler's response. A primary success body becomes `HttpResponse.json(…)`:
- * a `ref` body calls its named `create<Schema>(override)` factory; an inline body
- * is sampled and printed in place with `...override` spread in. A success with no
- * usable body (an `unknown` schema, or no success response at all) becomes a
- * body-less `new HttpResponse(null, { status })`. The status is the success
- * response's declared code, or 200 when it's `default`/absent.
+ * a `ref` body calls its named `create<Schema>(override)` factory; an inline body is
+ * sampled and printed in place with `...override` spread in. An `omit` body (a named
+ * schema without its `writeOnly` keys) is inline too, because the factory keeps the
+ * required ones. A success with no usable body (an `unknown` schema, or no success
+ * response at all) becomes a body-less `new HttpResponse(null, { status })`. The status
+ * is the success response's declared code, or 200 when it's `default`/absent.
  */
 function responseExpression(op: OperationModel, model: ApiModel, opts: MockOptions): string {
   const success = op.successResponses[0];

package/eject-assets/generators/mock/sample.ts

@@ -1,10 +1,11 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "mock" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "mock" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator mock --update`.
 import {
   type DateType,
   type NamedSchemaModel,
+  type PropertyModel,
   type ScalarKind,
   type SchemaMetadata,
   type SchemaModel,
@@ -97,7 +98,10 @@ export function splitIntersection(
   members: SchemaModel[],
   byName: Map<string, SchemaModel>
 ): { merged: SchemaModel | undefined; rest: SchemaModel[] } {
-  const properties = new Map<string, { schema: SchemaModel; required: boolean; rank: number }>();
+  const properties = new Map<
+    string,
+    { schema: SchemaModel; required: boolean; writeOnly: boolean; rank: number }
+  >();
   const rest: SchemaModel[] = [];
   let sawObject = false;
   for (const member of members) {
@@ -116,6 +120,7 @@ export function splitIntersection(
         properties.set(property.name, {
           schema: property.schema,
           required: property.required || (existing?.required ?? false),
+          writeOnly: property.writeOnly === true || (existing?.writeOnly ?? false),
           rank,
         });
       }
@@ -129,6 +134,7 @@ export function splitIntersection(
         name,
         schema: p.schema,
         required: p.required,
+        ...(p.writeOnly ? { writeOnly: true } : {}),
       })),
     },
     rest,
@@ -195,7 +201,9 @@ function walk(
   const meta = schema.metadata;
   // An example/default is honored only when it inhabits the generated type — real specs
   // carry `example: null` on non-nullable fields and defaults outside a narrowed enum
-  // (`enum: [cram-md5], default: none`); baking those would not type-check.
+  // (`enum: [cram-md5], default: none`); baking those would not type-check. A number
+  // outside its bounds or off its `multipleOf` step would fail the zod schema, so it is
+  // skipped too.
   const inhabits = (value: unknown): boolean => {
     if (value === null) {
       return (
@@ -205,6 +213,16 @@ function walk(
     }
     if (schema.kind === 'enum') return (schema.values as unknown[]).includes(value);
     if (schema.kind === 'literal') return value === schema.value;
+    if (
+      schema.kind === 'scalar' &&
+      (schema.scalar === 'integer' || schema.scalar === 'number') &&
+      typeof value === 'number'
+    ) {
+      const { min, max, step } = numericRange(schema.scalar, meta);
+      // `toPrecision` drops float noise, so `0.3` counts as a multiple of `0.1`.
+      const onStep = step === undefined || Number.isInteger(Number((value / step).toPrecision(12)));
+      return onStep && (min === undefined || value >= min) && (max === undefined || value <= max);
+    }
     return true;
   };
   if (meta?.example !== undefined && inhabits(meta.example)) return meta.example;
@@ -221,6 +239,7 @@ function walk(
     case 'object':
       return Object.fromEntries(
         schema.properties.flatMap((p) => {
+          if (omitsFromResponse(p)) return [];
           const value = walk(p.schema, byName, visiting, dateType);
           // A cyclic optional property is omitted (a null would not satisfy `T | undefined`);
           // a cyclic required property is uninhabitable, so null is the only stand-in.
@@ -292,9 +311,73 @@ function walk(
   }
 }
 
+/**
+ * Whether a mock leaves a property out. Mocks are response data, and a response never
+ * carries a `writeOnly` property. A required one stays, because the named type still
+ * demands it; a handler whose response omits it samples that `omit` shape instead.
+ */
+export function omitsFromResponse(property: PropertyModel): boolean {
+  return property.writeOnly === true && !property.required;
+}
+
+/**
+ * The inclusive range a numeric schema allows. `minimum`/`maximum` and the exclusive
+ * bounds narrow it, aligned to `multipleOf` (an integer steps by 1 without one). An
+ * exclusive bound on a number without a step moves in by 1, or to the middle of the
+ * range when the range is narrower than that. An unbounded side is `undefined`.
+ */
+export function numericRange(
+  scalar: 'integer' | 'number',
+  meta: SchemaMetadata | undefined
+): { min?: number; max?: number; step?: number } {
+  const step = meta?.multipleOf ?? (scalar === 'integer' ? 1 : undefined);
+  // The multiple of `step` that `round` picks for `bound`; `toPrecision` drops float noise.
+  const onStep = (bound: number, size: number, round: (steps: number) => number): number =>
+    Number((round(bound / size) * size).toPrecision(15));
+  const lows: number[] = [];
+  const highs: number[] = [];
+  if (meta?.minimum !== undefined) {
+    const bound = meta.minimum;
+    lows.push(step === undefined ? bound : onStep(bound, step, Math.ceil));
+  }
+  if (meta?.exclusiveMinimum !== undefined) {
+    const bound = meta.exclusiveMinimum;
+    lows.push(
+      step === undefined ? bound + 1 : onStep(bound, step, (steps) => Math.floor(steps) + 1)
+    );
+  }
+  if (meta?.maximum !== undefined) {
+    const bound = meta.maximum;
+    highs.push(step === undefined ? bound : onStep(bound, step, Math.floor));
+  }
+  if (meta?.exclusiveMaximum !== undefined) {
+    const bound = meta.exclusiveMaximum;
+    highs.push(
+      step === undefined ? bound - 1 : onStep(bound, step, (steps) => Math.ceil(steps) - 1)
+    );
+  }
+  const min = lows.length > 0 ? Math.max(...lows) : undefined;
+  const max = highs.length > 0 ? Math.min(...highs) : undefined;
+  if (step === undefined && min !== undefined && max !== undefined && min > max) {
+    const low = Math.max(meta?.minimum ?? -Infinity, meta?.exclusiveMinimum ?? -Infinity);
+    const high = Math.min(meta?.maximum ?? Infinity, meta?.exclusiveMaximum ?? Infinity);
+    const middle = (low + high) / 2;
+    return { min: middle, max: middle };
+  }
+  return { min, max, step };
+}
+
+/** `0` when the range allows it, else the end of the range nearest to `0`. */
+function numberSample(scalar: 'integer' | 'number', meta: SchemaMetadata | undefined): number {
+  const { min, max } = numericRange(scalar, meta);
+  if (min !== undefined && min > 0) return min;
+  if (max !== undefined && max < 0) return max;
+  return 0;
+}
+
 function scalarSample(scalar: ScalarKind, meta: SchemaMetadata | undefined): unknown {
   if (scalar === 'boolean') return true;
-  if (scalar === 'integer' || scalar === 'number') return 0;
+  if (scalar === 'integer' || scalar === 'number') return numberSample(scalar, meta);
   // Type-demanding formats (binary, and date/date-time under `dateType: 'Date'`) are
   // handled earlier in `walk` via `typeDemandedExpression`; here the date formats fall
   // through to the ISO-string path (the `dateType: 'string'` types them as `string`).

package/eject-assets/generators/mock/values.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "mock" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "mock" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator mock --update`.

package/eject-assets/generators/php/client.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "php" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "php" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator php --update`.

package/eject-assets/generators/php/descriptor.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "php" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "php" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator php --update`.
@@ -30,6 +30,15 @@ export function phpSecurityLiteral(op: OperationModel, model: ApiModel): string
   return `[${alternatives.join(', ')}]`;
 }
 
+/**
+ * The `resolveAuth` argument: the table's `security` entry, or `[]` for an operation the
+ * table gives none. Reading an absent key with `?? []` reads as dead code to PHPStan,
+ * which knows the table's exact shape.
+ */
+export function phpSecurityArg(op: OperationModel, model: ApiModel): string {
+  return phpSecurityLiteral(op, model) === undefined ? '[]' : "$op['security']";
+}
+
 export function phpPaginationLiteral(rule: NeutralPaginationRule): string {
   const fields = [
     `'style' => ${phpString(rule.style)}`,

package/eject-assets/generators/php/index.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "php" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "php" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator php --update`.
@@ -234,5 +234,5 @@ export default {
     "argsStyle": "inputs follow the target language's own idiom",
     "importExt": "the generated file has no relative imports"
   },
-  requiresGenerator: '^0.7.11',
+  requiresGenerator: '^0.7.13',
 };

package/eject-assets/generators/php/models.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "php" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "php" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator php --update`.
@@ -111,10 +111,15 @@ function writeClass(
   dateType: DateType,
   description?: string
 ): void {
+  // A response never carries a `writeOnly` property, and responses decode into this same
+  // class, so the property is optional even when the description requires it.
+  const fields = properties.map((property) =>
+    property.writeOnly ? { ...property, required: false } : property
+  );
   // PHP requires defaulted parameters after required ones.
   const ordered = [
-    ...properties.filter((property) => property.required),
-    ...properties.filter((property) => !property.required),
+    ...fields.filter((property) => property.required),
+    ...fields.filter((property) => !property.required),
   ];
   printer.doc(className(name), description);
   printer.line(`final class ${className(name)}`);

package/eject-assets/generators/php/naming.ts

@@ -1,4 +1,4 @@
-// Ejected from @redocly/client-generator@0.7.11 — the built-in "php" generator.
+// Ejected from @redocly/client-generator@0.7.13 — the built-in "php" generator.
 // This file is yours: edit freely; the generated client stays machine-owned and is
 // rebuilt by `redocly generate-client`. Newer generator versions merge in with
 // `redocly eject-generator php --update`.