@scalar/mock-server 0.9.8 → 0.9.10

package/dist/utils/handle-authentication.js

@@ -1,110 +1,115 @@
-import { getCookie } from "hono/cookie";
-function handleAuthentication(schema, operation) {
-  return async (c, next) => {
-    const operationSecuritySchemes = operation?.security || schema?.security;
-    if (operationSecuritySchemes && operationSecuritySchemes.length > 0) {
-      let isAuthenticated = false;
-      let authScheme = "";
-      for (const securityRequirement of operationSecuritySchemes) {
-        let securitySchemeAuthenticated = true;
-        for (const [schemeName] of Object.entries(securityRequirement)) {
-          const scheme = schema?.components?.securitySchemes?.[schemeName];
-          if (scheme && "$ref" in scheme) {
-            continue;
-          }
-          if (scheme && "type" in scheme) {
-            const securityScheme = scheme;
-            switch (securityScheme.type) {
-              case "http":
-                if ("scheme" in securityScheme && securityScheme.scheme === "basic") {
-                  authScheme = "Basic";
-                  const authHeader = c.req.header("Authorization");
-                  if (authHeader?.startsWith("Basic ")) {
-                    isAuthenticated = true;
-                  }
-                } else if ("scheme" in securityScheme && securityScheme.scheme === "bearer") {
-                  authScheme = "Bearer";
-                  const authHeader = c.req.header("Authorization");
-                  if (authHeader?.startsWith("Bearer ")) {
-                    isAuthenticated = true;
-                  }
-                }
-                break;
-              case "apiKey":
-                if ("name" in securityScheme && "in" in securityScheme && securityScheme.name) {
-                  authScheme = `ApiKey ${securityScheme.name}`;
-                  if (securityScheme.in === "header") {
-                    const apiKey = c.req.header(securityScheme.name);
-                    if (apiKey) {
-                      isAuthenticated = true;
+import { getCookie } from 'hono/cookie';
+/**
+ * Handles authentication for incoming requests based on the OpenAPI document.
+ */
+export function handleAuthentication(schema, operation) {
+    return async (c, next) => {
+        const operationSecuritySchemes = operation?.security || schema?.security;
+        if (operationSecuritySchemes && operationSecuritySchemes.length > 0) {
+            let isAuthenticated = false;
+            let authScheme = '';
+            for (const securityRequirement of operationSecuritySchemes) {
+                let securitySchemeAuthenticated = true;
+                for (const [schemeName] of Object.entries(securityRequirement)) {
+                    const scheme = schema?.components?.securitySchemes?.[schemeName];
+                    // Skip if scheme is a reference object (should be dereferenced already, but check to be safe)
+                    if (scheme && '$ref' in scheme) {
+                        continue;
                     }
-                  } else if (securityScheme.in === "query") {
-                    const apiKey = c.req.query(securityScheme.name);
-                    if (apiKey) {
-                      isAuthenticated = true;
+                    if (scheme && 'type' in scheme) {
+                        const securityScheme = scheme;
+                        switch (securityScheme.type) {
+                            case 'http':
+                                if ('scheme' in securityScheme && securityScheme.scheme === 'basic') {
+                                    authScheme = 'Basic';
+                                    const authHeader = c.req.header('Authorization');
+                                    if (authHeader?.startsWith('Basic ')) {
+                                        isAuthenticated = true;
+                                    }
+                                }
+                                else if ('scheme' in securityScheme && securityScheme.scheme === 'bearer') {
+                                    authScheme = 'Bearer';
+                                    const authHeader = c.req.header('Authorization');
+                                    if (authHeader?.startsWith('Bearer ')) {
+                                        isAuthenticated = true;
+                                    }
+                                }
+                                break;
+                            case 'apiKey':
+                                if ('name' in securityScheme && 'in' in securityScheme && securityScheme.name) {
+                                    authScheme = `ApiKey ${securityScheme.name}`;
+                                    if (securityScheme.in === 'header') {
+                                        const apiKey = c.req.header(securityScheme.name);
+                                        if (apiKey) {
+                                            isAuthenticated = true;
+                                        }
+                                    }
+                                    else if (securityScheme.in === 'query') {
+                                        const apiKey = c.req.query(securityScheme.name);
+                                        if (apiKey) {
+                                            isAuthenticated = true;
+                                        }
+                                    }
+                                    else if (securityScheme.in === 'cookie') {
+                                        const apiKey = getCookie(c, securityScheme.name);
+                                        if (apiKey) {
+                                            isAuthenticated = true;
+                                        }
+                                    }
+                                }
+                                break;
+                            case 'oauth2':
+                                authScheme = 'Bearer';
+                                // Handle OAuth 2.0 flows, including password grant
+                                if (c.req.header('Authorization')?.startsWith('Bearer ')) {
+                                    isAuthenticated = true;
+                                }
+                                break;
+                            case 'openIdConnect':
+                                authScheme = 'Bearer';
+                                // Handle OpenID Connect similar to OAuth2
+                                if (c.req.header('Authorization')?.startsWith('Bearer ')) {
+                                    isAuthenticated = true;
+                                }
+                                break;
+                        }
                     }
-                  } else if (securityScheme.in === "cookie") {
-                    const apiKey = getCookie(c, securityScheme.name);
-                    if (apiKey) {
-                      isAuthenticated = true;
+                    if (!isAuthenticated) {
+                        securitySchemeAuthenticated = false;
+                        break;
                     }
-                  }
                 }
-                break;
-              case "oauth2":
-                authScheme = "Bearer";
-                if (c.req.header("Authorization")?.startsWith("Bearer ")) {
-                  isAuthenticated = true;
+                if (securitySchemeAuthenticated) {
+                    isAuthenticated = true;
+                    break;
                 }
-                break;
-              case "openIdConnect":
-                authScheme = "Bearer";
-                if (c.req.header("Authorization")?.startsWith("Bearer ")) {
-                  isAuthenticated = true;
+            }
+            if (!isAuthenticated) {
+                let wwwAuthenticateValue = authScheme;
+                if (authScheme.startsWith('ApiKey')) {
+                    wwwAuthenticateValue += ` realm="Scalar Mock Server", error="invalid_token", error_description="Invalid or missing API key"`;
                 }
-                break;
+                else {
+                    switch (authScheme) {
+                        case 'Basic':
+                            wwwAuthenticateValue += ' realm="Scalar Mock Server", charset="UTF-8"';
+                            break;
+                        case 'Bearer':
+                            wwwAuthenticateValue +=
+                                ' realm="Scalar Mock Server", error="invalid_token", error_description="The access token is invalid or has expired"';
+                            break;
+                        default:
+                            wwwAuthenticateValue = 'Bearer realm="Scalar Mock Server"';
+                    }
+                }
+                c.header('WWW-Authenticate', wwwAuthenticateValue);
+                return c.json({
+                    error: 'Unauthorized',
+                    message: 'Authentication is required to access this resource.',
+                }, 401);
             }
-          }
-          if (!isAuthenticated) {
-            securitySchemeAuthenticated = false;
-            break;
-          }
-        }
-        if (securitySchemeAuthenticated) {
-          isAuthenticated = true;
-          break;
-        }
-      }
-      if (!isAuthenticated) {
-        let wwwAuthenticateValue = authScheme;
-        if (authScheme.startsWith("ApiKey")) {
-          wwwAuthenticateValue += ` realm="Scalar Mock Server", error="invalid_token", error_description="Invalid or missing API key"`;
-        } else {
-          switch (authScheme) {
-            case "Basic":
-              wwwAuthenticateValue += ' realm="Scalar Mock Server", charset="UTF-8"';
-              break;
-            case "Bearer":
-              wwwAuthenticateValue += ' realm="Scalar Mock Server", error="invalid_token", error_description="The access token is invalid or has expired"';
-              break;
-            default:
-              wwwAuthenticateValue = 'Bearer realm="Scalar Mock Server"';
-          }
         }
-        c.header("WWW-Authenticate", wwwAuthenticateValue);
-        return c.json(
-          {
-            error: "Unauthorized",
-            message: "Authentication is required to access this resource."
-          },
-          401
-        );
-      }
-    }
-    await next();
-  };
+        // If all checks pass, continue to the next middleware
+        await next();
+    };
 }
-export {
-  handleAuthentication
-};
-//# sourceMappingURL=handle-authentication.js.map

package/dist/utils/hono-route-from-path.js

@@ -1,7 +1,7 @@
-function honoRouteFromPath(path) {
-  return path.replace(/{/g, ":").replace(/}/g, "");
+/**
+ * Convert path to route
+ * Example: /posts/{id} -> /posts/:id
+ */
+export function honoRouteFromPath(path) {
+    return path.replace(/{/g, ':').replace(/}/g, '');
 }
-export {
-  honoRouteFromPath
-};
-//# sourceMappingURL=hono-route-from-path.js.map

package/dist/utils/is-authentication-required.js

@@ -1,16 +1,18 @@
-function isAuthenticationRequired(security) {
-  if (!security) {
-    return false;
-  }
-  if (Array.isArray(security) && !security.length) {
-    return false;
-  }
-  if ((security ?? []).some((securityRequirement) => !Object.keys(securityRequirement).length)) {
-    return false;
-  }
-  return true;
+/**
+ * Check whether the given security scheme key is in the `security` configuration for this operation.
+ */
+export function isAuthenticationRequired(security) {
+    // If security is not defined, auth is not required.
+    if (!security) {
+        return false;
+    }
+    // Don't require auth if security is just an empty array []
+    if (Array.isArray(security) && !security.length) {
+        return false;
+    }
+    // Includes empty object = auth is not required
+    if ((security ?? []).some((securityRequirement) => !Object.keys(securityRequirement).length)) {
+        return false;
+    }
+    return true;
 }
-export {
-  isAuthenticationRequired
-};
-//# sourceMappingURL=is-authentication-required.js.map

package/dist/utils/log-authentication-instructions.js

@@ -1,118 +1,113 @@
-import { getPathFromUrl } from "./get-open-auth-token-urls.js";
-function logAuthenticationInstructions(securitySchemes) {
-  if (!securitySchemes || Object.keys(securitySchemes).length === 0) {
-    return;
-  }
-  console.log("Authentication:");
-  console.log();
-  Object.entries(securitySchemes).forEach(([_, scheme]) => {
-    switch (scheme.type) {
-      case "apiKey":
-        if (scheme.in === "header") {
-          console.log("\u2705 API Key Authentication");
-          console.log(`   Use any API key in the ${scheme.name} header`);
-          console.log();
-          console.log(`   ${scheme.name}: YOUR_API_KEY_HERE`);
-          console.log();
-        } else if (scheme.in === "query") {
-          console.log("\u2705 API Key Authentication");
-          console.log(`   Use any API key in the ${scheme.name} query parameter:`);
-          console.log();
-          console.log(`   ?${scheme.name}=YOUR_API_KEY_HERE`);
-          console.log();
-        } else if (scheme.in === "cookie") {
-          console.log("\u2705 API Key Authentication");
-          console.log(`   Use any API key in the ${scheme.name} cookie:`);
-          console.log();
-          console.log(`   Cookie: ${scheme.name}=YOUR_API_KEY_HERE`);
-          console.log();
-        } else {
-          console.error(`\u274C Unsupported API Key Location: ${scheme.in}`);
-        }
-        break;
-      case "http":
-        if (scheme.scheme === "basic") {
-          console.log("\u2705 HTTP Basic Authentication");
-          console.log('   Use an Authorization header with any credentials ("username:password" in base64):');
-          console.log();
-          console.log("   Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=");
-          console.log();
-        } else if (scheme.scheme === "bearer") {
-          console.log("\u2705 Bearer Token Authentication");
-          console.log("   Use an Authorization header with any bearer token");
-          console.log();
-          console.log("   Authorization: Bearer YOUR_TOKEN_HERE");
-          console.log();
-        } else {
-          console.error("\u274C Unknown Security Scheme:", scheme);
-        }
-        break;
-      case "oauth2":
-        if (scheme.flows) {
-          Object.keys(scheme.flows).forEach((flow) => {
-            switch (flow) {
-              case "implicit":
-                console.log("\u2705 OAuth 2.0 Implicit Flow");
-                console.log("   Use the following URL to initiate the OAuth 2.0 Implicit Flow:");
-                console.log();
-                console.log(
-                  `   GET ${scheme?.flows?.implicit?.authorizationUrl || "/oauth/authorize"}?response_type=token&client_id=YOUR_CLIENT_ID&redirect_uri=YOUR_REDIRECT_URI&scope=YOUR_SCOPES`
-                );
-                console.log();
+import { getPathFromUrl } from './get-open-auth-token-urls.js';
+/**
+ * Log authentication instructions for different security schemes
+ */
+export function logAuthenticationInstructions(securitySchemes) {
+    if (!securitySchemes || Object.keys(securitySchemes).length === 0) {
+        return;
+    }
+    console.log('Authentication:');
+    console.log();
+    Object.entries(securitySchemes).forEach(([_, scheme]) => {
+        switch (scheme.type) {
+            case 'apiKey':
+                if (scheme.in === 'header') {
+                    console.log('✅ API Key Authentication');
+                    console.log(`   Use any API key in the ${scheme.name} header`);
+                    console.log();
+                    console.log(`   ${scheme.name}: YOUR_API_KEY_HERE`);
+                    console.log();
+                }
+                else if (scheme.in === 'query') {
+                    console.log('✅ API Key Authentication');
+                    console.log(`   Use any API key in the ${scheme.name} query parameter:`);
+                    console.log();
+                    console.log(`   ?${scheme.name}=YOUR_API_KEY_HERE`);
+                    console.log();
+                }
+                else if (scheme.in === 'cookie') {
+                    console.log('✅ API Key Authentication');
+                    console.log(`   Use any API key in the ${scheme.name} cookie:`);
+                    console.log();
+                    console.log(`   Cookie: ${scheme.name}=YOUR_API_KEY_HERE`);
+                    console.log();
+                }
+                else {
+                    console.error(`❌ Unsupported API Key Location: ${scheme.in}`);
+                }
                 break;
-              case "password":
-                console.log("\u2705 OAuth 2.0 Password Flow");
-                console.log("   Use the following URL to obtain an access token:");
-                console.log();
-                console.log(`   POST ${getPathFromUrl(scheme?.flows?.password?.tokenUrl || "/oauth/token")}`);
-                console.log("   Content-Type: application/x-www-form-urlencoded");
-                console.log();
-                console.log(
-                  "   grant_type=password&username=YOUR_USERNAME&password=YOUR_PASSWORD&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET"
-                );
-                console.log();
+            case 'http':
+                if (scheme.scheme === 'basic') {
+                    console.log('✅ HTTP Basic Authentication');
+                    console.log('   Use an Authorization header with any credentials ("username:password" in base64):');
+                    console.log();
+                    console.log('   Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=');
+                    console.log();
+                }
+                else if (scheme.scheme === 'bearer') {
+                    console.log('✅ Bearer Token Authentication');
+                    console.log('   Use an Authorization header with any bearer token');
+                    console.log();
+                    console.log('   Authorization: Bearer YOUR_TOKEN_HERE');
+                    console.log();
+                }
+                else {
+                    console.error('❌ Unknown Security Scheme:', scheme);
+                }
                 break;
-              case "clientCredentials":
-                console.log("\u2705 OAuth 2.0 Client Credentials Flow");
-                console.log("   Use the following URL to obtain an access token:");
-                console.log();
-                console.log(`   POST ${getPathFromUrl(scheme?.flows?.clientCredentials?.tokenUrl || "/oauth/token")}`);
-                console.log("   Content-Type: application/x-www-form-urlencoded");
-                console.log();
-                console.log(
-                  "   grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET"
-                );
-                console.log();
+            case 'oauth2':
+                if (scheme.flows) {
+                    Object.keys(scheme.flows).forEach((flow) => {
+                        switch (flow) {
+                            case 'implicit':
+                                console.log('✅ OAuth 2.0 Implicit Flow');
+                                console.log('   Use the following URL to initiate the OAuth 2.0 Implicit Flow:');
+                                console.log();
+                                console.log(`   GET ${scheme?.flows?.implicit?.authorizationUrl || '/oauth/authorize'}?response_type=token&client_id=YOUR_CLIENT_ID&redirect_uri=YOUR_REDIRECT_URI&scope=YOUR_SCOPES`);
+                                console.log();
+                                break;
+                            case 'password':
+                                console.log('✅ OAuth 2.0 Password Flow');
+                                console.log('   Use the following URL to obtain an access token:');
+                                console.log();
+                                console.log(`   POST ${getPathFromUrl(scheme?.flows?.password?.tokenUrl || '/oauth/token')}`);
+                                console.log('   Content-Type: application/x-www-form-urlencoded');
+                                console.log();
+                                console.log('   grant_type=password&username=YOUR_USERNAME&password=YOUR_PASSWORD&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET');
+                                console.log();
+                                break;
+                            case 'clientCredentials':
+                                console.log('✅ OAuth 2.0 Client Credentials Flow');
+                                console.log('   Use the following URL to obtain an access token:');
+                                console.log();
+                                console.log(`   POST ${getPathFromUrl(scheme?.flows?.clientCredentials?.tokenUrl || '/oauth/token')}`);
+                                console.log('   Content-Type: application/x-www-form-urlencoded');
+                                console.log();
+                                console.log('   grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET');
+                                console.log();
+                                break;
+                            case 'authorizationCode':
+                                console.log('✅ OAuth 2.0 Authorization Code Flow');
+                                console.log('   Use the following URL to initiate the OAuth 2.0 Authorization Code Flow:');
+                                console.log();
+                                console.log('   GET', `${getPathFromUrl(scheme?.flows?.authorizationCode?.authorizationUrl || '/oauth/authorize')}?redirect_uri=https://YOUR_REDIRECT_URI_HERE`);
+                                console.log();
+                                break;
+                            default:
+                                console.warn(`Unsupported OAuth 2.0 flow: ${flow}`);
+                        }
+                    });
+                }
                 break;
-              case "authorizationCode":
-                console.log("\u2705 OAuth 2.0 Authorization Code Flow");
-                console.log("   Use the following URL to initiate the OAuth 2.0 Authorization Code Flow:");
+            case 'openIdConnect':
+                console.log('✅ OpenID Connect Authentication');
+                console.log('   Use the following OpenID Connect discovery URL:');
                 console.log();
-                console.log(
-                  "   GET",
-                  `${getPathFromUrl(scheme?.flows?.authorizationCode?.authorizationUrl || "/oauth/authorize")}?redirect_uri=https://YOUR_REDIRECT_URI_HERE`
-                );
+                console.log(`   ${getPathFromUrl(scheme.openIdConnectUrl || '/.well-known/openid-configuration')}`);
                 console.log();
                 break;
-              default:
-                console.warn(`Unsupported OAuth 2.0 flow: ${flow}`);
-            }
-          });
+            default:
+                console.warn(`Unsupported security scheme type: ${scheme.type}`);
         }
-        break;
-      case "openIdConnect":
-        console.log("\u2705 OpenID Connect Authentication");
-        console.log("   Use the following OpenID Connect discovery URL:");
-        console.log();
-        console.log(`   ${getPathFromUrl(scheme.openIdConnectUrl || "/.well-known/openid-configuration")}`);
-        console.log();
-        break;
-      default:
-        console.warn(`Unsupported security scheme type: ${scheme.type}`);
-    }
-  });
+    });
 }
-export {
-  logAuthenticationInstructions
-};
-//# sourceMappingURL=log-authentication-instructions.js.map

package/dist/utils/process-openapi-document.js

@@ -1,59 +1,72 @@
-import { bundle } from "@scalar/json-magic/bundle";
-import { parseJson } from "@scalar/json-magic/bundle/plugins/node";
-import { parseYaml } from "@scalar/json-magic/bundle/plugins/node";
-import { readFiles } from "@scalar/json-magic/bundle/plugins/node";
-import { fetchUrls } from "@scalar/json-magic/bundle/plugins/node";
-import { dereference } from "@scalar/openapi-parser";
-import { upgrade } from "@scalar/openapi-upgrader";
-async function processOpenApiDocument(document) {
-  if (!document || typeof document === "object" && Object.keys(document).length === 0) {
-    return {
-      openapi: "3.1.0",
-      info: {
-        title: "Mock API",
-        version: "1.0.0"
-      },
-      paths: {}
-    };
-  }
-  let bundled;
-  try {
-    bundled = await bundle(document, {
-      plugins: [parseJson(), parseYaml(), readFiles(), fetchUrls()],
-      treeShake: false
-    });
-  } catch (error) {
-    throw new Error(`Failed to bundle OpenAPI document: ${error instanceof Error ? error.message : String(error)}`);
-  }
-  if (!bundled || typeof bundled !== "object") {
-    throw new Error("Bundled document is invalid: expected an object");
-  }
-  let upgraded;
-  try {
-    upgraded = upgrade(bundled, "3.1");
-  } catch (error) {
-    throw new Error(
-      `Failed to upgrade OpenAPI document to 3.1: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-  if (!upgraded) {
-    throw new Error("Upgraded document is invalid: upgrade returned null or undefined");
-  }
-  const dereferenceResult = dereference(upgraded);
-  if (dereferenceResult.errors && dereferenceResult.errors.length > 0) {
-    const errorMessages = dereferenceResult.errors.map((err) => err.message).join(", ");
-    throw new Error(`Failed to dereference OpenAPI document: ${errorMessages}`);
-  }
-  const schema = dereferenceResult.schema;
-  if (!schema) {
-    throw new Error("Dereference result does not contain a schema");
-  }
-  if (typeof schema !== "object") {
-    throw new Error("Dereferenced schema is invalid: expected an object");
-  }
-  return schema;
+import { bundle } from '@scalar/json-magic/bundle';
+import { parseJson } from '@scalar/json-magic/bundle/plugins/node';
+import { parseYaml } from '@scalar/json-magic/bundle/plugins/node';
+import { readFiles } from '@scalar/json-magic/bundle/plugins/node';
+import { fetchUrls } from '@scalar/json-magic/bundle/plugins/node';
+import { dereference } from '@scalar/openapi-parser';
+import { upgrade } from '@scalar/openapi-upgrader';
+/**
+ * Processes an OpenAPI document by bundling external references, upgrading to OpenAPI 3.1,
+ * and dereferencing the document.
+ *
+ * @param document - The OpenAPI document to process. Can be a string (URL/path) or an object.
+ * @returns A promise that resolves to the dereferenced OpenAPI 3.1 document.
+ * @throws Error if the document cannot be processed or is invalid.
+ */
+export async function processOpenApiDocument(document) {
+    // Handle empty/undefined input gracefully
+    if (!document || (typeof document === 'object' && Object.keys(document).length === 0)) {
+        // Return a minimal valid OpenAPI 3.1 document
+        return {
+            openapi: '3.1.0',
+            info: {
+                title: 'Mock API',
+                version: '1.0.0',
+            },
+            paths: {},
+        };
+    }
+    let bundled;
+    try {
+        // Bundle external references with Node.js plugins
+        // Include parseJson and parseYaml to handle string inputs
+        bundled = await bundle(document, {
+            plugins: [parseJson(), parseYaml(), readFiles(), fetchUrls()],
+            treeShake: false,
+        });
+    }
+    catch (error) {
+        throw new Error(`Failed to bundle OpenAPI document: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!bundled || typeof bundled !== 'object') {
+        throw new Error('Bundled document is invalid: expected an object');
+    }
+    let upgraded;
+    try {
+        // Upgrade to OpenAPI 3.1
+        upgraded = upgrade(bundled, '3.1');
+    }
+    catch (error) {
+        throw new Error(`Failed to upgrade OpenAPI document to 3.1: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!upgraded) {
+        throw new Error('Upgraded document is invalid: upgrade returned null or undefined');
+    }
+    // Dereference the document
+    const dereferenceResult = dereference(upgraded);
+    // Check for dereference errors
+    if (dereferenceResult.errors && dereferenceResult.errors.length > 0) {
+        const errorMessages = dereferenceResult.errors.map((err) => err.message).join(', ');
+        throw new Error(`Failed to dereference OpenAPI document: ${errorMessages}`);
+    }
+    // Extract the schema from the dereference result
+    const schema = dereferenceResult.schema;
+    if (!schema) {
+        throw new Error('Dereference result does not contain a schema');
+    }
+    // Ensure the schema is a valid OpenAPI 3.1 document
+    if (typeof schema !== 'object') {
+        throw new Error('Dereferenced schema is invalid: expected an object');
+    }
+    return schema;
 }
-export {
-  processOpenApiDocument
-};
-//# sourceMappingURL=process-openapi-document.js.map