@sdk-it/spec 0.46.2 → 0.46.4

package/dist/index.d.ts

@@ -16,7 +16,6 @@ export * from './lib/processing-plugins/index.js';
 export * from './lib/processing.js';
 export * from './lib/overview-docs/overview-errors.js';
 export * from './lib/reserved-keywords.js';
-export * from './lib/security.js';
 export * from './lib/sidebar.js';
 export * from './lib/tag.js';
 export * from './lib/types.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,aAAa,CAAC;AAC5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mCAAmC,CAAC;AAClD,cAAc,qBAAqB,CAAC;AACpC,cAAc,wCAAwC,CAAC;AACvD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,aAAa,CAAC;AAC5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mCAAmC,CAAC;AAClD,cAAc,qBAAqB,CAAC;AACpC,cAAc,wCAAwC,CAAC;AACvD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}

package/dist/index.js

@@ -16,7 +16,6 @@ export * from "./lib/processing-plugins/index.js";
 export * from "./lib/processing.js";
 export * from "./lib/overview-docs/overview-errors.js";
 export * from "./lib/reserved-keywords.js";
-export * from "./lib/security.js";
 export * from "./lib/sidebar.js";
 export * from "./lib/tag.js";
 export * from "./lib/types.js";

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["export * from './lib/create-operation.js';\nexport * from './lib/find-polymorphic-varients.js';\nexport * from './lib/find-unique-schema-name.js';\nexport * from './lib/for-each-operation.js';\nexport * from './lib/format-name.js';\nexport * from './lib/get-ref-usage.js';\nexport * from './lib/ir.js';\nexport * from './lib/is-primitive-schema.js';\nexport * from './lib/is.js';\nexport * from './lib/loaders/load-spec.js';\nexport * from './lib/loaders/local-loader.js';\nexport * from './lib/loaders/remote-loader.js';\nexport * from './lib/metadata.js';\nexport * from './lib/options.js';\nexport * from './lib/processing-plugins/index.js';\nexport * from './lib/processing.js';\nexport * from './lib/overview-docs/overview-errors.js';\nexport * from './lib/reserved-keywords.js';\nexport * from './lib/security.js';\nexport * from './lib/sidebar.js';\nexport * from './lib/tag.js';\nexport * from './lib/types.js';\nexport * from './lib/walk-schemas.js';\n"],
-  "mappings": "AAAA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;",
+  "sourcesContent": ["export * from './lib/create-operation.js';\nexport * from './lib/find-polymorphic-varients.js';\nexport * from './lib/find-unique-schema-name.js';\nexport * from './lib/for-each-operation.js';\nexport * from './lib/format-name.js';\nexport * from './lib/get-ref-usage.js';\nexport * from './lib/ir.js';\nexport * from './lib/is-primitive-schema.js';\nexport * from './lib/is.js';\nexport * from './lib/loaders/load-spec.js';\nexport * from './lib/loaders/local-loader.js';\nexport * from './lib/loaders/remote-loader.js';\nexport * from './lib/metadata.js';\nexport * from './lib/options.js';\nexport * from './lib/processing-plugins/index.js';\nexport * from './lib/processing.js';\nexport * from './lib/overview-docs/overview-errors.js';\nexport * from './lib/reserved-keywords.js';\nexport * from './lib/sidebar.js';\nexport * from './lib/tag.js';\nexport * from './lib/types.js';\nexport * from './lib/walk-schemas.js';\n"],
+  "mappings": "AAAA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;",
   "names": []
 }

package/dist/lib/find-unique-schema-name.d.ts

@@ -1,3 +1,3 @@
-import type { OpenAPIObject } from 'openapi3-ts/oas31';
-export declare function findUniqueSchemaName(spec: OpenAPIObject, initialName: string, potentialSuffixList: string[], fallback?: string): string;
+import { type OpenAPIDocument } from '@sdk-it/core';
+export declare function findUniqueSchemaName(spec: OpenAPIDocument, initialName: string, potentialSuffixList: string[], fallback?: string): string;
 //# sourceMappingURL=find-unique-schema-name.d.ts.map

package/dist/lib/find-unique-schema-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"find-unique-schema-name.d.ts","sourceRoot":"","sources":["../../src/lib/find-unique-schema-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAMvD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,mBAAmB,EAAE,MAAM,EAAE,EAC7B,QAAQ,CAAC,EAAE,MAAM,UAUlB"}
+{"version":3,"file":"find-unique-schema-name.d.ts","sourceRoot":"","sources":["../../src/lib/find-unique-schema-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAA8B,MAAM,cAAc,CAAC;AAIhF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,eAAe,EACrB,WAAW,EAAE,MAAM,EACnB,mBAAmB,EAAE,MAAM,EAAE,EAC7B,QAAQ,CAAC,EAAE,MAAM,UAUlB"}

package/dist/lib/find-unique-schema-name.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/find-unique-schema-name.ts"],
-  "sourcesContent": ["import type { OpenAPIObject } from 'openapi3-ts/oas31';\n\nimport { joinSkipDigits, pascalcase } from '@sdk-it/core';\n\nconst reservedNames = new Set(['Function', 'Error']);\n\nexport function findUniqueSchemaName(\n  spec: OpenAPIObject,\n  initialName: string,\n  potentialSuffixList: string[],\n  fallback?: string,\n) {\n  spec.components ??= {};\n  spec.components.schemas ??= {};\n  let name = pascalcase(initialName);\n  while (spec.components.schemas[name] || reservedNames.has(name)) {\n    const suffix = potentialSuffixList.shift();\n    name = pascalcase(joinSkipDigits([name, suffix || ''], ' '));\n  }\n  return initialName === name ? (fallback ?? name) : name;\n}\n"],
-  "mappings": "AAEA,SAAS,gBAAgB,kBAAkB;AAE3C,MAAM,gBAAgB,oBAAI,IAAI,CAAC,YAAY,OAAO,CAAC;AAE5C,SAAS,qBACd,MACA,aACA,qBACA,UACA;AACA,OAAK,eAAe,CAAC;AACrB,OAAK,WAAW,YAAY,CAAC;AAC7B,MAAI,OAAO,WAAW,WAAW;AACjC,SAAO,KAAK,WAAW,QAAQ,IAAI,KAAK,cAAc,IAAI,IAAI,GAAG;AAC/D,UAAM,SAAS,oBAAoB,MAAM;AACzC,WAAO,WAAW,eAAe,CAAC,MAAM,UAAU,EAAE,GAAG,GAAG,CAAC;AAAA,EAC7D;AACA,SAAO,gBAAgB,OAAQ,YAAY,OAAQ;AACrD;",
+  "sourcesContent": ["import { type OpenAPIDocument, joinSkipDigits, pascalcase } from '@sdk-it/core';\n\nconst reservedNames = new Set(['Function', 'Error']);\n\nexport function findUniqueSchemaName(\n  spec: OpenAPIDocument,\n  initialName: string,\n  potentialSuffixList: string[],\n  fallback?: string,\n) {\n  spec.components ??= {};\n  spec.components.schemas ??= {};\n  let name = pascalcase(initialName);\n  while (spec.components.schemas[name] || reservedNames.has(name)) {\n    const suffix = potentialSuffixList.shift();\n    name = pascalcase(joinSkipDigits([name, suffix || ''], ' '));\n  }\n  return initialName === name ? (fallback ?? name) : name;\n}\n"],
+  "mappings": "AAAA,SAA+B,gBAAgB,kBAAkB;AAEjE,MAAM,gBAAgB,oBAAI,IAAI,CAAC,YAAY,OAAO,CAAC;AAE5C,SAAS,qBACd,MACA,aACA,qBACA,UACA;AACA,OAAK,eAAe,CAAC;AACrB,OAAK,WAAW,YAAY,CAAC;AAC7B,MAAI,OAAO,WAAW,WAAW;AACjC,SAAO,KAAK,WAAW,QAAQ,IAAI,KAAK,cAAc,IAAI,IAAI,GAAG;AAC/D,UAAM,SAAS,oBAAoB,MAAM;AACzC,WAAO,WAAW,eAAe,CAAC,MAAM,UAAU,EAAE,GAAG,GAAG,CAAC;AAAA,EAC7D;AACA,SAAO,gBAAgB,OAAQ,YAAY,OAAQ;AACrD;",
   "names": []
 }

package/dist/lib/loaders/load-spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-spec.d.ts","sourceRoot":"","sources":["../../../src/lib/loaders/load-spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAqBvD,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAMvE;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAMxD"}
+{"version":3,"file":"load-spec.d.ts","sourceRoot":"","sources":["../../../src/lib/loaders/load-spec.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAuBvD,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CASvE;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAKxD"}

package/dist/lib/loaders/load-spec.js

@@ -1,3 +1,5 @@
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
 import { loadLocal } from "./local-loader.js";
 import { convertPostmanToOpenAPI } from "./postman/postman-converter.js";
 import { loadRemote } from "./remote-loader.js";
@@ -9,15 +11,23 @@ async function loadSpec(location) {
   if (isPostman(content)) {
     content = convertPostmanToOpenAPI(content);
   }
-  return content;
+  const spec = content;
+  spec.$self ??= documentUri(location);
+  return spec;
 }
 function loadFile(location) {
-  const [protocol] = location.split(":");
-  if (protocol === "http" || protocol === "https") {
+  if (isRemote(location)) {
     return loadRemote(location);
   }
   return loadLocal(location);
 }
+function documentUri(location) {
+  return isRemote(location) || location.startsWith("file:") ? location : pathToFileURL(resolve(location)).href;
+}
+function isRemote(location) {
+  const [protocol] = location.split(":");
+  return protocol === "http" || protocol === "https";
+}
 export {
   loadFile,
   loadSpec

package/dist/lib/loaders/load-spec.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/loaders/load-spec.ts"],
-  "sourcesContent": ["import type { OpenAPIObject } from 'openapi3-ts/oas31';\n\nimport { loadLocal } from './local-loader.js';\nimport { convertPostmanToOpenAPI } from './postman/postman-converter.js';\nimport type { PostmanCollection } from './postman/spec-types.js';\nimport { loadRemote } from './remote-loader.js';\n\nfunction isPostman(content: unknown): content is PostmanCollection {\n  return (\n    typeof content === 'object' &&\n    content !== null &&\n    'info' in content &&\n    typeof content.info === 'object' &&\n    content.info !== null &&\n    'item' in content &&\n    Array.isArray(content.item) &&\n    'schema' in content.info &&\n    typeof content.info.schema === 'string' &&\n    content.info.schema.includes('//schema.getpostman.com/')\n  );\n}\nexport async function loadSpec(location: string): Promise<OpenAPIObject> {\n  let content = await loadFile(location);\n  if (isPostman(content)) {\n    content = convertPostmanToOpenAPI(content);\n  }\n  return content as OpenAPIObject;\n}\n\nexport function loadFile<T>(location: string): Promise<T> {\n  const [protocol] = location.split(':');\n  if (protocol === 'http' || protocol === 'https') {\n    return loadRemote(location);\n  }\n  return loadLocal(location);\n}\n"],
-  "mappings": "AAEA,SAAS,iBAAiB;AAC1B,SAAS,+BAA+B;AAExC,SAAS,kBAAkB;AAE3B,SAAS,UAAU,SAAgD;AACjE,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,UAAU,WACV,OAAO,QAAQ,SAAS,YACxB,QAAQ,SAAS,QACjB,UAAU,WACV,MAAM,QAAQ,QAAQ,IAAI,KAC1B,YAAY,QAAQ,QACpB,OAAO,QAAQ,KAAK,WAAW,YAC/B,QAAQ,KAAK,OAAO,SAAS,0BAA0B;AAE3D;AACA,eAAsB,SAAS,UAA0C;AACvE,MAAI,UAAU,MAAM,SAAS,QAAQ;AACrC,MAAI,UAAU,OAAO,GAAG;AACtB,cAAU,wBAAwB,OAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEO,SAAS,SAAY,UAA8B;AACxD,QAAM,CAAC,QAAQ,IAAI,SAAS,MAAM,GAAG;AACrC,MAAI,aAAa,UAAU,aAAa,SAAS;AAC/C,WAAO,WAAW,QAAQ;AAAA,EAC5B;AACA,SAAO,UAAU,QAAQ;AAC3B;",
+  "sourcesContent": ["import { resolve } from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport type { OpenAPIObject } from 'openapi3-ts/oas31';\n\nimport type { OpenAPIDocument } from '@sdk-it/core';\n\nimport { loadLocal } from './local-loader.js';\nimport { convertPostmanToOpenAPI } from './postman/postman-converter.js';\nimport type { PostmanCollection } from './postman/spec-types.js';\nimport { loadRemote } from './remote-loader.js';\n\nfunction isPostman(content: unknown): content is PostmanCollection {\n  return (\n    typeof content === 'object' &&\n    content !== null &&\n    'info' in content &&\n    typeof content.info === 'object' &&\n    content.info !== null &&\n    'item' in content &&\n    Array.isArray(content.item) &&\n    'schema' in content.info &&\n    typeof content.info.schema === 'string' &&\n    content.info.schema.includes('//schema.getpostman.com/')\n  );\n}\nexport async function loadSpec(location: string): Promise<OpenAPIObject> {\n  let content = await loadFile(location);\n  if (isPostman(content)) {\n    content = convertPostmanToOpenAPI(content);\n  }\n  const spec = content as OpenAPIDocument;\n  // Relative references inside the document resolve against where it came from.\n  spec.$self ??= documentUri(location);\n  return spec as OpenAPIObject;\n}\n\nexport function loadFile<T>(location: string): Promise<T> {\n  if (isRemote(location)) {\n    return loadRemote(location);\n  }\n  return loadLocal(location);\n}\n\nfunction documentUri(location: string) {\n  return isRemote(location) || location.startsWith('file:')\n    ? location\n    : pathToFileURL(resolve(location)).href;\n}\n\nfunction isRemote(location: string) {\n  const [protocol] = location.split(':');\n  return protocol === 'http' || protocol === 'https';\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe;AACxB,SAAS,qBAAqB;AAK9B,SAAS,iBAAiB;AAC1B,SAAS,+BAA+B;AAExC,SAAS,kBAAkB;AAE3B,SAAS,UAAU,SAAgD;AACjE,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,UAAU,WACV,OAAO,QAAQ,SAAS,YACxB,QAAQ,SAAS,QACjB,UAAU,WACV,MAAM,QAAQ,QAAQ,IAAI,KAC1B,YAAY,QAAQ,QACpB,OAAO,QAAQ,KAAK,WAAW,YAC/B,QAAQ,KAAK,OAAO,SAAS,0BAA0B;AAE3D;AACA,eAAsB,SAAS,UAA0C;AACvE,MAAI,UAAU,MAAM,SAAS,QAAQ;AACrC,MAAI,UAAU,OAAO,GAAG;AACtB,cAAU,wBAAwB,OAAO;AAAA,EAC3C;AACA,QAAM,OAAO;AAEb,OAAK,UAAU,YAAY,QAAQ;AACnC,SAAO;AACT;AAEO,SAAS,SAAY,UAA8B;AACxD,MAAI,SAAS,QAAQ,GAAG;AACtB,WAAO,WAAW,QAAQ;AAAA,EAC5B;AACA,SAAO,UAAU,QAAQ;AAC3B;AAEA,SAAS,YAAY,UAAkB;AACrC,SAAO,SAAS,QAAQ,KAAK,SAAS,WAAW,OAAO,IACpD,WACA,cAAc,QAAQ,QAAQ,CAAC,EAAE;AACvC;AAEA,SAAS,SAAS,UAAkB;AAClC,QAAM,CAAC,QAAQ,IAAI,SAAS,MAAM,GAAG;AACrC,SAAO,aAAa,UAAU,aAAa;AAC7C;",
   "names": []
 }

package/dist/lib/options.d.ts

@@ -1,8 +1,9 @@
-import type { OpenAPIObject, OperationObject } from 'openapi3-ts/oas31';
+import type { OperationObject } from 'openapi3-ts/oas31';
+import { type OpenAPIDocument } from '@sdk-it/core';
 import type { ProcessingDiagnostic, ProcessingPlugin } from './processing.js';
 import type { IR } from './types.js';
 export interface GenerateSdkConfig {
-    spec: OpenAPIObject;
+    spec: OpenAPIDocument;
     responses?: ResponsesConfig;
     pagination?: PaginationConfig | false;
     operationId?: (operation: OperationObject, path: string, method: string) => string;

package/dist/lib/options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/lib/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EAEhB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,UAAU,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACtC,WAAW,CAAC,EAAE,CACZ,SAAS,EAAE,eAAe,EAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,KACX,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3D,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC3D;AACD,MAAM,WAAW,eAAe;IAC9B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AACF,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,UAEnD;AAED,eAAO,MAAM,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAC/C,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,KAAK,CAAC,CAkBxD,CAAC;AAEF,wBAAgB,aAAa,CAAC,MAAM,EAAE,iBAAiB;;;;;;;6BAzCxC,eAAe,QACpB,MAAM,UACJ,MAAM,KACX,MAAM;qBACO,eAAe,QAAQ,MAAM,KAAK,MAAM;EAuE3D;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,KAAK;;;EAmB9C"}
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/lib/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EACL,KAAK,eAAe,EAIrB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,UAAU,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACtC,WAAW,CAAC,EAAE,CACZ,SAAS,EAAE,eAAe,EAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,KACX,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3D,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC3D;AACD,MAAM,WAAW,eAAe;IAC9B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AACF,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,UAEnD;AAED,eAAO,MAAM,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAC/C,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,KAAK,CAAC,CAkBxD,CAAC;AAEF,wBAAgB,aAAa,CAAC,MAAM,EAAE,iBAAiB;;;;;;;6BAzCxC,eAAe,QACpB,MAAM,UACJ,MAAM,KACX,MAAM;qBACO,eAAe,QAAQ,MAAM,KAAK,MAAM;EAuE3D;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,KAAK;;;EAmB9C"}

package/dist/lib/options.js

@@ -1,4 +1,7 @@
-import { camelcase, resolveRef } from "@sdk-it/core";
+import {
+  camelcase,
+  resolveRef
+} from "@sdk-it/core";
 import { determineGenericTag, sanitizeTag } from "./tag.js";
 function cleanOperationId(operationId) {
   return camelcase(operationId.split("#").pop());

package/dist/lib/options.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/options.ts"],
-  "sourcesContent": ["import type {\n  OpenAPIObject,\n  OperationObject,\n  SecuritySchemeObject,\n} from 'openapi3-ts/oas31';\n\nimport { camelcase, resolveRef } from '@sdk-it/core';\n\nimport type { ProcessingDiagnostic, ProcessingPlugin } from './processing.js';\nimport { determineGenericTag, sanitizeTag } from './tag.js';\nimport type { IR } from './types.js';\n\nexport interface GenerateSdkConfig {\n  spec: OpenAPIObject;\n  responses?: ResponsesConfig;\n  pagination?: PaginationConfig | false;\n  operationId?: (\n    operation: OperationObject,\n    path: string,\n    method: string,\n  ) => string;\n  tag?: (operation: OperationObject, path: string) => string;\n  plugins?: readonly ProcessingPlugin[];\n  signal?: AbortSignal;\n  onDiagnostic?: (diagnostic: ProcessingDiagnostic) => void;\n}\nexport interface ResponsesConfig {\n  flattenErrorResponses?: boolean;\n}\n\nexport type PaginationConfig = {\n  guess?: boolean;\n};\nexport function cleanOperationId(operationId: string) {\n  return camelcase(operationId.split('#').pop()!);\n}\n\nexport const defaults: Partial<GenerateSdkConfig> &\n  Required<Pick<GenerateSdkConfig, 'operationId' | 'tag'>> = {\n  operationId: (operation, path, method) => {\n    if (operation.operationId) {\n      return cleanOperationId(operation.operationId);\n    }\n\n    return camelcase(\n      [method, ...path.replace(/[\\\\/\\\\{\\\\}]/g, ' ').split(' ')]\n        .filter(Boolean)\n        .join(' ')\n        .trim(),\n    );\n  },\n  tag: (operation, path) => {\n    return operation.tags?.[0]\n      ? sanitizeTag(operation.tags?.[0])\n      : determineGenericTag(path, operation);\n  },\n};\n\nexport function coeraceConfig(config: GenerateSdkConfig) {\n  const spec: IR = {\n    ...config.spec,\n    components: {\n      ...config.spec.components,\n      schemas: config.spec.components?.schemas ?? {},\n      securitySchemes: Object.fromEntries(\n        Object.entries(config.spec.components?.securitySchemes ?? {}).map(\n          ([name, schema]) => [\n            name,\n            resolveRef<SecuritySchemeObject>(config.spec, schema),\n          ],\n        ),\n      ),\n    },\n    paths: config.spec.paths ?? {},\n    'x-docs': [],\n    'x-tagGroups': config.spec['x-tagGroups'] ?? [\n      {\n        name: 'API',\n        tags: config.spec.tags?.map((tag) => tag.name) ?? [],\n      },\n    ],\n    servers: config.spec.servers ?? [],\n    tags: config.spec.tags ?? [],\n  };\n\n  return {\n    pagination: coercePaginationConfig(config.pagination),\n    responses: config.responses ?? {},\n    spec,\n    operationId: config.operationId ?? defaults.operationId,\n    tag: config.tag ?? defaults.tag,\n  };\n}\n\nexport function coercePaginationConfig(\n  options: PaginationConfig | undefined | false,\n) {\n  if (options === undefined) {\n    return {\n      guess: true,\n      enabled: true,\n    };\n  }\n  if (options === false) {\n    return {\n      enabled: false,\n      guess: false,\n    };\n  }\n  // If options is true, we assume pagination is enabled with guessing\n  return {\n    guess: options.guess ?? true,\n    enabled: true,\n  };\n}\n"],
-  "mappings": "AAMA,SAAS,WAAW,kBAAkB;AAGtC,SAAS,qBAAqB,mBAAmB;AAwB1C,SAAS,iBAAiB,aAAqB;AACpD,SAAO,UAAU,YAAY,MAAM,GAAG,EAAE,IAAI,CAAE;AAChD;AAEO,MAAM,WACgD;AAAA,EAC3D,aAAa,CAAC,WAAW,MAAM,WAAW;AACxC,QAAI,UAAU,aAAa;AACzB,aAAO,iBAAiB,UAAU,WAAW;AAAA,IAC/C;AAEA,WAAO;AAAA,MACL,CAAC,QAAQ,GAAG,KAAK,QAAQ,gBAAgB,GAAG,EAAE,MAAM,GAAG,CAAC,EACrD,OAAO,OAAO,EACd,KAAK,GAAG,EACR,KAAK;AAAA,IACV;AAAA,EACF;AAAA,EACA,KAAK,CAAC,WAAW,SAAS;AACxB,WAAO,UAAU,OAAO,CAAC,IACrB,YAAY,UAAU,OAAO,CAAC,CAAC,IAC/B,oBAAoB,MAAM,SAAS;AAAA,EACzC;AACF;AAEO,SAAS,cAAc,QAA2B;AACvD,QAAM,OAAW;AAAA,IACf,GAAG,OAAO;AAAA,IACV,YAAY;AAAA,MACV,GAAG,OAAO,KAAK;AAAA,MACf,SAAS,OAAO,KAAK,YAAY,WAAW,CAAC;AAAA,MAC7C,iBAAiB,OAAO;AAAA,QACtB,OAAO,QAAQ,OAAO,KAAK,YAAY,mBAAmB,CAAC,CAAC,EAAE;AAAA,UAC5D,CAAC,CAAC,MAAM,MAAM,MAAM;AAAA,YAClB;AAAA,YACA,WAAiC,OAAO,MAAM,MAAM;AAAA,UACtD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,OAAO,OAAO,KAAK,SAAS,CAAC;AAAA,IAC7B,UAAU,CAAC;AAAA,IACX,eAAe,OAAO,KAAK,aAAa,KAAK;AAAA,MAC3C;AAAA,QACE,MAAM;AAAA,QACN,MAAM,OAAO,KAAK,MAAM,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,CAAC;AAAA,MACrD;AAAA,IACF;AAAA,IACA,SAAS,OAAO,KAAK,WAAW,CAAC;AAAA,IACjC,MAAM,OAAO,KAAK,QAAQ,CAAC;AAAA,EAC7B;AAEA,SAAO;AAAA,IACL,YAAY,uBAAuB,OAAO,UAAU;AAAA,IACpD,WAAW,OAAO,aAAa,CAAC;AAAA,IAChC;AAAA,IACA,aAAa,OAAO,eAAe,SAAS;AAAA,IAC5C,KAAK,OAAO,OAAO,SAAS;AAAA,EAC9B;AACF;AAEO,SAAS,uBACd,SACA;AACA,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,EACF;AACA,MAAI,YAAY,OAAO;AACrB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,QAAQ,SAAS;AAAA,IACxB,SAAS;AAAA,EACX;AACF;",
+  "sourcesContent": ["import type { OperationObject } from 'openapi3-ts/oas31';\n\nimport {\n  type OpenAPIDocument,\n  type OpenAPISecuritySchemeObject,\n  camelcase,\n  resolveRef,\n} from '@sdk-it/core';\n\nimport type { ProcessingDiagnostic, ProcessingPlugin } from './processing.js';\nimport { determineGenericTag, sanitizeTag } from './tag.js';\nimport type { IR } from './types.js';\n\nexport interface GenerateSdkConfig {\n  spec: OpenAPIDocument;\n  responses?: ResponsesConfig;\n  pagination?: PaginationConfig | false;\n  operationId?: (\n    operation: OperationObject,\n    path: string,\n    method: string,\n  ) => string;\n  tag?: (operation: OperationObject, path: string) => string;\n  plugins?: readonly ProcessingPlugin[];\n  signal?: AbortSignal;\n  onDiagnostic?: (diagnostic: ProcessingDiagnostic) => void;\n}\nexport interface ResponsesConfig {\n  flattenErrorResponses?: boolean;\n}\n\nexport type PaginationConfig = {\n  guess?: boolean;\n};\nexport function cleanOperationId(operationId: string) {\n  return camelcase(operationId.split('#').pop()!);\n}\n\nexport const defaults: Partial<GenerateSdkConfig> &\n  Required<Pick<GenerateSdkConfig, 'operationId' | 'tag'>> = {\n  operationId: (operation, path, method) => {\n    if (operation.operationId) {\n      return cleanOperationId(operation.operationId);\n    }\n\n    return camelcase(\n      [method, ...path.replace(/[\\\\/\\\\{\\\\}]/g, ' ').split(' ')]\n        .filter(Boolean)\n        .join(' ')\n        .trim(),\n    );\n  },\n  tag: (operation, path) => {\n    return operation.tags?.[0]\n      ? sanitizeTag(operation.tags?.[0])\n      : determineGenericTag(path, operation);\n  },\n};\n\nexport function coeraceConfig(config: GenerateSdkConfig) {\n  const spec: IR = {\n    ...config.spec,\n    components: {\n      ...config.spec.components,\n      schemas: config.spec.components?.schemas ?? {},\n      securitySchemes: Object.fromEntries(\n        Object.entries(config.spec.components?.securitySchemes ?? {}).map(\n          ([name, schema]) => [\n            name,\n            resolveRef<OpenAPISecuritySchemeObject>(config.spec, schema),\n          ],\n        ),\n      ),\n    },\n    paths: config.spec.paths ?? {},\n    'x-docs': [],\n    'x-tagGroups': config.spec['x-tagGroups'] ?? [\n      {\n        name: 'API',\n        tags: config.spec.tags?.map((tag) => tag.name) ?? [],\n      },\n    ],\n    servers: config.spec.servers ?? [],\n    tags: config.spec.tags ?? [],\n  };\n\n  return {\n    pagination: coercePaginationConfig(config.pagination),\n    responses: config.responses ?? {},\n    spec,\n    operationId: config.operationId ?? defaults.operationId,\n    tag: config.tag ?? defaults.tag,\n  };\n}\n\nexport function coercePaginationConfig(\n  options: PaginationConfig | undefined | false,\n) {\n  if (options === undefined) {\n    return {\n      guess: true,\n      enabled: true,\n    };\n  }\n  if (options === false) {\n    return {\n      enabled: false,\n      guess: false,\n    };\n  }\n  // If options is true, we assume pagination is enabled with guessing\n  return {\n    guess: options.guess ?? true,\n    enabled: true,\n  };\n}\n"],
+  "mappings": "AAEA;AAAA,EAGE;AAAA,EACA;AAAA,OACK;AAGP,SAAS,qBAAqB,mBAAmB;AAwB1C,SAAS,iBAAiB,aAAqB;AACpD,SAAO,UAAU,YAAY,MAAM,GAAG,EAAE,IAAI,CAAE;AAChD;AAEO,MAAM,WACgD;AAAA,EAC3D,aAAa,CAAC,WAAW,MAAM,WAAW;AACxC,QAAI,UAAU,aAAa;AACzB,aAAO,iBAAiB,UAAU,WAAW;AAAA,IAC/C;AAEA,WAAO;AAAA,MACL,CAAC,QAAQ,GAAG,KAAK,QAAQ,gBAAgB,GAAG,EAAE,MAAM,GAAG,CAAC,EACrD,OAAO,OAAO,EACd,KAAK,GAAG,EACR,KAAK;AAAA,IACV;AAAA,EACF;AAAA,EACA,KAAK,CAAC,WAAW,SAAS;AACxB,WAAO,UAAU,OAAO,CAAC,IACrB,YAAY,UAAU,OAAO,CAAC,CAAC,IAC/B,oBAAoB,MAAM,SAAS;AAAA,EACzC;AACF;AAEO,SAAS,cAAc,QAA2B;AACvD,QAAM,OAAW;AAAA,IACf,GAAG,OAAO;AAAA,IACV,YAAY;AAAA,MACV,GAAG,OAAO,KAAK;AAAA,MACf,SAAS,OAAO,KAAK,YAAY,WAAW,CAAC;AAAA,MAC7C,iBAAiB,OAAO;AAAA,QACtB,OAAO,QAAQ,OAAO,KAAK,YAAY,mBAAmB,CAAC,CAAC,EAAE;AAAA,UAC5D,CAAC,CAAC,MAAM,MAAM,MAAM;AAAA,YAClB;AAAA,YACA,WAAwC,OAAO,MAAM,MAAM;AAAA,UAC7D;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,OAAO,OAAO,KAAK,SAAS,CAAC;AAAA,IAC7B,UAAU,CAAC;AAAA,IACX,eAAe,OAAO,KAAK,aAAa,KAAK;AAAA,MAC3C;AAAA,QACE,MAAM;AAAA,QACN,MAAM,OAAO,KAAK,MAAM,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,CAAC;AAAA,MACrD;AAAA,IACF;AAAA,IACA,SAAS,OAAO,KAAK,WAAW,CAAC;AAAA,IACjC,MAAM,OAAO,KAAK,QAAQ,CAAC;AAAA,EAC7B;AAEA,SAAO;AAAA,IACL,YAAY,uBAAuB,OAAO,UAAU;AAAA,IACpD,WAAW,OAAO,aAAa,CAAC;AAAA,IAChC;AAAA,IACA,aAAa,OAAO,eAAe,SAAS;AAAA,IAC5C,KAAK,OAAO,OAAO,SAAS;AAAA,EAC9B;AACF;AAEO,SAAS,uBACd,SACA;AACA,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,EACF;AACA,MAAI,YAAY,OAAO;AACrB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,QAAQ,SAAS;AAAA,IACxB,SAAS;AAAA,EACX;AACF;",
   "names": []
 }

package/dist/lib/processing-plugins/create-default-processing-plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-default-processing-plugins.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/create-default-processing-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAazD,wBAAgB,8BAA8B,CAC5C,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,gBAAgB,EAAE,CAcpB"}
+{"version":3,"file":"create-default-processing-plugins.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/create-default-processing-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAezD,wBAAgB,8BAA8B,CAC5C,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,gBAAgB,EAAE,CAgBpB"}

package/dist/lib/processing-plugins/create-default-processing-plugins.js

@@ -8,7 +8,9 @@ import { normalizePaths } from "./normalize-paths.js";
 import { normalizeRequestBodies } from "./normalize-request-bodies.js";
 import { normalizeResponses } from "./normalize-responses.js";
 import { normalizeSchemas } from "./normalize-schemas.js";
+import { normalizeSecurity } from "./normalize-security.js";
 import { normalizeTags } from "./normalize-tags.js";
+import { resolveSecuritySchemeUris } from "./resolve-security-scheme-uris.js";
 function createDefaultProcessingPlugins(options = {}) {
   return [
     normalizePaths(),
@@ -16,6 +18,8 @@ function createDefaultProcessingPlugins(options = {}) {
     normalizeTags(),
     normalizeParameters(),
     normalizeResponses(),
+    resolveSecuritySchemeUris(),
+    normalizeSecurity(),
     normalizeRequestBodies(),
     inferPagination(),
     normalizeSchemas(),

package/dist/lib/processing-plugins/create-default-processing-plugins.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/processing-plugins/create-default-processing-plugins.ts"],
-  "sourcesContent": ["import type { ProcessingPlugin } from '../processing.js';\nimport { canonicalizeSpec } from './canonicalize-spec.js';\nimport { extractInlineSchemas } from './extract-inline-schemas.js';\nimport { extractOverviewDocsPlugin } from './extract-overview-docs.js';\nimport { inferPagination } from './infer-pagination.js';\nimport { normalizeOperationIds } from './normalize-operation-ids.js';\nimport { normalizeParameters } from './normalize-parameters.js';\nimport { normalizePaths } from './normalize-paths.js';\nimport { normalizeRequestBodies } from './normalize-request-bodies.js';\nimport { normalizeResponses } from './normalize-responses.js';\nimport { normalizeSchemas } from './normalize-schemas.js';\nimport { normalizeTags } from './normalize-tags.js';\n\nexport function createDefaultProcessingPlugins(\n  options: { verbose?: boolean } = {},\n): ProcessingPlugin[] {\n  return [\n    normalizePaths(),\n    normalizeOperationIds(),\n    normalizeTags(),\n    normalizeParameters(),\n    normalizeResponses(),\n    normalizeRequestBodies(),\n    inferPagination(),\n    normalizeSchemas(),\n    ...(options.verbose ? [extractInlineSchemas()] : []),\n    extractOverviewDocsPlugin(),\n    canonicalizeSpec(),\n  ];\n}\n"],
-  "mappings": "AACA,SAAS,wBAAwB;AACjC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,sBAAsB;AAC/B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAEvB,SAAS,+BACd,UAAiC,CAAC,GACd;AACpB,SAAO;AAAA,IACL,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,cAAc;AAAA,IACd,oBAAoB;AAAA,IACpB,mBAAmB;AAAA,IACnB,uBAAuB;AAAA,IACvB,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,IACjB,GAAI,QAAQ,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC;AAAA,IAClD,0BAA0B;AAAA,IAC1B,iBAAiB;AAAA,EACnB;AACF;",
+  "sourcesContent": ["import type { ProcessingPlugin } from '../processing.js';\nimport { canonicalizeSpec } from './canonicalize-spec.js';\nimport { extractInlineSchemas } from './extract-inline-schemas.js';\nimport { extractOverviewDocsPlugin } from './extract-overview-docs.js';\nimport { inferPagination } from './infer-pagination.js';\nimport { normalizeOperationIds } from './normalize-operation-ids.js';\nimport { normalizeParameters } from './normalize-parameters.js';\nimport { normalizePaths } from './normalize-paths.js';\nimport { normalizeRequestBodies } from './normalize-request-bodies.js';\nimport { normalizeResponses } from './normalize-responses.js';\nimport { normalizeSchemas } from './normalize-schemas.js';\nimport { normalizeSecurity } from './normalize-security.js';\nimport { normalizeTags } from './normalize-tags.js';\nimport { resolveSecuritySchemeUris } from './resolve-security-scheme-uris.js';\n\nexport function createDefaultProcessingPlugins(\n  options: { verbose?: boolean } = {},\n): ProcessingPlugin[] {\n  return [\n    normalizePaths(),\n    normalizeOperationIds(),\n    normalizeTags(),\n    normalizeParameters(),\n    normalizeResponses(),\n    resolveSecuritySchemeUris(),\n    normalizeSecurity(),\n    normalizeRequestBodies(),\n    inferPagination(),\n    normalizeSchemas(),\n    ...(options.verbose ? [extractInlineSchemas()] : []),\n    extractOverviewDocsPlugin(),\n    canonicalizeSpec(),\n  ];\n}\n"],
+  "mappings": "AACA,SAAS,wBAAwB;AACjC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,sBAAsB;AAC/B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAC9B,SAAS,iCAAiC;AAEnC,SAAS,+BACd,UAAiC,CAAC,GACd;AACpB,SAAO;AAAA,IACL,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,cAAc;AAAA,IACd,oBAAoB;AAAA,IACpB,mBAAmB;AAAA,IACnB,0BAA0B;AAAA,IAC1B,kBAAkB;AAAA,IAClB,uBAAuB;AAAA,IACvB,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,IACjB,GAAI,QAAQ,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC;AAAA,IAClD,0BAA0B;AAAA,IAC1B,iBAAiB;AAAA,EACnB;AACF;",
   "names": []
 }

package/dist/lib/processing-plugins/index.d.ts

@@ -9,6 +9,8 @@ export * from './normalize-parameters.js';
 export * from './normalize-paths.js';
 export * from './normalize-request-bodies.js';
 export * from './normalize-responses.js';
+export * from './normalize-security.js';
 export * from './normalize-schemas.js';
 export * from './normalize-tags.js';
+export * from './resolve-security-scheme-uris.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/processing-plugins/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wCAAwC,CAAC;AACvD,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wCAAwC,CAAC;AACvD,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mCAAmC,CAAC"}

package/dist/lib/processing-plugins/index.js

@@ -9,6 +9,8 @@ export * from "./normalize-parameters.js";
 export * from "./normalize-paths.js";
 export * from "./normalize-request-bodies.js";
 export * from "./normalize-responses.js";
+export * from "./normalize-security.js";
 export * from "./normalize-schemas.js";
 export * from "./normalize-tags.js";
+export * from "./resolve-security-scheme-uris.js";
 //# sourceMappingURL=index.js.map

package/dist/lib/processing-plugins/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/processing-plugins/index.ts"],
-  "sourcesContent": ["export * from './canonicalize-spec.js';\nexport * from './create-default-processing-plugins.js';\nexport * from './enrich-examples.js';\nexport * from './extract-inline-schemas.js';\nexport * from './extract-overview-docs.js';\nexport * from './infer-pagination.js';\nexport * from './normalize-operation-ids.js';\nexport * from './normalize-parameters.js';\nexport * from './normalize-paths.js';\nexport * from './normalize-request-bodies.js';\nexport * from './normalize-responses.js';\nexport * from './normalize-schemas.js';\nexport * from './normalize-tags.js';\n"],
-  "mappings": "AAAA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;",
+  "sourcesContent": ["export * from './canonicalize-spec.js';\nexport * from './create-default-processing-plugins.js';\nexport * from './enrich-examples.js';\nexport * from './extract-inline-schemas.js';\nexport * from './extract-overview-docs.js';\nexport * from './infer-pagination.js';\nexport * from './normalize-operation-ids.js';\nexport * from './normalize-parameters.js';\nexport * from './normalize-paths.js';\nexport * from './normalize-request-bodies.js';\nexport * from './normalize-responses.js';\nexport * from './normalize-security.js';\nexport * from './normalize-schemas.js';\nexport * from './normalize-tags.js';\nexport * from './resolve-security-scheme-uris.js';\n"],
+  "mappings": "AAAA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;",
   "names": []
 }

package/dist/lib/processing-plugins/normalize-request-bodies.d.ts

@@ -1,6 +1,6 @@
-import type { ParameterObject, SchemaObject, SecurityRequirementObject } from 'openapi3-ts/oas31';
+import type { ParameterObject, SchemaObject } from 'openapi3-ts/oas31';
 import type { ProcessingPlugin } from '../processing.js';
 import type { IR } from '../types.js';
-export declare function patchParameters(spec: IR, schema: SchemaObject, parameters: ParameterObject[], security: SecurityRequirementObject[]): void;
+export declare function patchParameters(spec: IR, schema: SchemaObject, parameters: ParameterObject[]): void;
 export declare function normalizeRequestBodies(): ProcessingPlugin;
 //# sourceMappingURL=normalize-request-bodies.d.ts.map

package/dist/lib/processing-plugins/normalize-request-bodies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-request-bodies.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/normalize-request-bodies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEf,YAAY,EACZ,yBAAyB,EAC1B,MAAM,mBAAmB,CAAC;AAO3B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,OAAO,KAAK,EACV,EAAE,EAGH,MAAM,aAAa,CAAC;AAErB,wBAAgB,eAAe,CAC7B,IAAI,EAAE,EAAE,EACR,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,eAAe,EAAE,EAC7B,QAAQ,EAAE,yBAAyB,EAAE,QAiCtC;AA+ED,wBAAgB,sBAAsB,IAAI,gBAAgB,CAwCzD"}
+{"version":3,"file":"normalize-request-bodies.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/normalize-request-bodies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEf,YAAY,EACb,MAAM,mBAAmB,CAAC;AAO3B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EACV,EAAE,EAGH,MAAM,aAAa,CAAC;AAErB,wBAAgB,eAAe,CAC7B,IAAI,EAAE,EAAE,EACR,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,eAAe,EAAE,QAkB9B;AA8ED,wBAAgB,sBAAsB,IAAI,gBAAgB,CAsCzD"}

package/dist/lib/processing-plugins/normalize-request-bodies.js

@@ -2,13 +2,7 @@ import { followRef, isRef, resolveRef } from "@sdk-it/core/ref.js";
 import { isEmpty } from "@sdk-it/core/utils.js";
 import { findUniqueSchemaName } from "../find-unique-schema-name.js";
 import { iterateOperations } from "../for-each-operation.js";
-import { securityToOptions } from "../security.js";
-function patchParameters(spec, schema, parameters, security) {
-  const securityOptions = securityToOptions(
-    spec,
-    security,
-    spec.components.securitySchemes
-  );
+function patchParameters(spec, schema, parameters) {
   const required = new Set(
     Array.isArray(schema.required) ? schema.required : []
   );
@@ -22,16 +16,9 @@ function patchParameters(spec, schema, parameters, security) {
       ...isRef(param.schema) ? followRef(spec, param.schema.$ref) : param.schema ?? { type: "string" }
     };
   }
-  for (const param of securityOptions) {
-    required.delete(param.name);
-    schema["x-properties"][param.name] = {
-      "x-in": "header",
-      ...isRef(param.schema) ? followRef(spec, param.schema.$ref) : param.schema ?? { type: "string" }
-    };
-  }
   schema["x-required"] = [...required];
 }
-function normalizeRequestBody(spec, operationId, operation, parameters, security) {
+function normalizeRequestBody(spec, operationId, operation, parameters) {
   const requestBodySource = isRef(operation.requestBody) ? followRef(spec, operation.requestBody.$ref) : operation.requestBody ?? {
     content: {},
     required: false
@@ -47,7 +34,7 @@ function normalizeRequestBody(spec, operationId, operation, parameters, security
       "x-inputname": inputName,
       "x-requestbody": true
     };
-    patchParameters(spec, schema, parameters, security);
+    patchParameters(spec, schema, parameters);
     const normalized = {
       ...requestBody,
       content: {
@@ -83,7 +70,7 @@ function normalizeRequestBody(spec, operationId, operation, parameters, security
         schema = structuredClone(mediaType.schema);
         break;
     }
-    patchParameters(spec, schema, parameters, security);
+    patchParameters(spec, schema, parameters);
     spec.components.schemas[inputName] = {
       ...schema,
       "x-requestbody": true,
@@ -114,8 +101,7 @@ function normalizeRequestBodies() {
               patchParameters(
                 spec,
                 schema,
-                tunedOperation.parameters,
-                operation.security ?? []
+                tunedOperation.parameters
               );
             }
             continue;
@@ -125,8 +111,7 @@ function normalizeRequestBodies() {
           spec,
           tunedOperation.operationId,
           operation,
-          tunedOperation.parameters,
-          operation.security ?? []
+          tunedOperation.parameters
         );
       }
     }

package/dist/lib/processing-plugins/normalize-request-bodies.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/processing-plugins/normalize-request-bodies.ts"],
-  "sourcesContent": ["import type {\n  OperationObject,\n  ParameterObject,\n  RequestBodyObject,\n  SchemaObject,\n  SecurityRequirementObject,\n} from 'openapi3-ts/oas31';\n\nimport { followRef, isRef, resolveRef } from '@sdk-it/core/ref.js';\nimport { isEmpty } from '@sdk-it/core/utils.js';\n\nimport { findUniqueSchemaName } from '../find-unique-schema-name.js';\nimport { iterateOperations } from '../for-each-operation.js';\nimport type { ProcessingPlugin } from '../processing.js';\nimport { securityToOptions } from '../security.js';\nimport type {\n  IR,\n  OurRequestBodyObject,\n  TunedOperationObject,\n} from '../types.js';\n\nexport function patchParameters(\n  spec: IR,\n  schema: SchemaObject,\n  parameters: ParameterObject[],\n  security: SecurityRequirementObject[],\n) {\n  const securityOptions = securityToOptions(\n    spec,\n    security,\n    spec.components.securitySchemes,\n  );\n\n  const required = new Set(\n    Array.isArray(schema.required) ? schema.required : [],\n  );\n  schema['x-properties'] ??= {};\n  for (const param of parameters) {\n    if (param.required) {\n      required.add(param.name);\n    }\n    schema['x-properties'][param.name] = {\n      'x-in': param.in,\n      ...(isRef(param.schema)\n        ? followRef<SchemaObject>(spec, param.schema.$ref)\n        : (param.schema ?? { type: 'string' })),\n    };\n  }\n  for (const param of securityOptions) {\n    required.delete(param.name);\n    schema['x-properties'][param.name] = {\n      'x-in': 'header',\n      ...(isRef(param.schema)\n        ? followRef<SchemaObject>(spec, param.schema.$ref)\n        : (param.schema ?? { type: 'string' })),\n    };\n  }\n  schema['x-required'] = [...required];\n}\n\nfunction normalizeRequestBody(\n  spec: IR,\n  operationId: string,\n  operation: OperationObject,\n  parameters: ParameterObject[],\n  security: SecurityRequirementObject[],\n): OurRequestBodyObject {\n  const requestBodySource = isRef(operation.requestBody)\n    ? followRef<RequestBodyObject>(spec, operation.requestBody.$ref)\n    : (operation.requestBody ?? {\n        content: {},\n        required: false,\n      });\n  const requestBody = structuredClone(requestBodySource);\n  if (isEmpty(requestBody.content)) {\n    const inputName = findUniqueSchemaName(spec, operationId, [\n      'input',\n      'payload',\n      'request',\n    ]);\n    const schema: SchemaObject = {\n      'x-inputname': inputName,\n      'x-requestbody': true,\n    };\n    patchParameters(spec, schema, parameters, security);\n    const normalized: OurRequestBodyObject = {\n      ...requestBody,\n      content: {\n        'application/empty': {\n          schema: { $ref: `#/components/schemas/${inputName}` },\n        },\n      },\n    };\n\n    spec.components.schemas[inputName] = schema;\n    return normalized;\n  }\n  for (const contentType in requestBody.content) {\n    const mediaType = requestBody.content[contentType];\n    const inputName = findUniqueSchemaName(spec, operationId, [\n      'input',\n      'payload',\n      'request',\n    ]);\n    let schema: SchemaObject | undefined;\n\n    switch (true) {\n      case isRef(mediaType.schema):\n        schema = structuredClone(\n          followRef<SchemaObject>(spec, mediaType.schema.$ref),\n        );\n        break;\n      case isEmpty(mediaType.schema):\n        schema ??= {};\n        console.warn(\n          `Request body schema for content type \"${contentType}\" is empty.`,\n        );\n        break;\n      default:\n        schema = structuredClone(mediaType.schema);\n        break;\n    }\n\n    patchParameters(spec, schema, parameters, security);\n    spec.components.schemas[inputName] = {\n      ...schema,\n      'x-requestbody': true,\n      'x-inputname': inputName,\n    };\n\n    requestBody.content[contentType].schema = {\n      $ref: `#/components/schemas/${inputName}`,\n    };\n  }\n  return requestBody as OurRequestBodyObject;\n}\n\nexport function normalizeRequestBodies(): ProcessingPlugin {\n  return {\n    name: 'normalize-request-bodies',\n    process({ spec }) {\n      for (const { operation } of iterateOperations(spec)) {\n        const tunedOperation = operation as TunedOperationObject;\n        if (operation.requestBody) {\n          const requestBody = resolveRef<RequestBodyObject>(\n            spec,\n            operation.requestBody,\n          );\n          const schemas = Object.values(requestBody.content).map(\n            ({ schema }) =>\n              schema ? resolveRef<SchemaObject>(spec, schema) : undefined,\n          );\n          if (\n            schemas.length > 0 &&\n            schemas.every((schema) => schema?.['x-requestbody'])\n          ) {\n            for (const schema of new Set(schemas)) {\n              patchParameters(\n                spec,\n                schema as SchemaObject,\n                tunedOperation.parameters,\n                operation.security ?? [],\n              );\n            }\n            continue;\n          }\n        }\n        tunedOperation.requestBody = normalizeRequestBody(\n          spec,\n          tunedOperation.operationId,\n          operation,\n          tunedOperation.parameters,\n          operation.security ?? [],\n        );\n      }\n    },\n  };\n}\n"],
-  "mappings": "AAQA,SAAS,WAAW,OAAO,kBAAkB;AAC7C,SAAS,eAAe;AAExB,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAElC,SAAS,yBAAyB;AAO3B,SAAS,gBACd,MACA,QACA,YACA,UACA;AACA,QAAM,kBAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA,KAAK,WAAW;AAAA,EAClB;AAEA,QAAM,WAAW,IAAI;AAAA,IACnB,MAAM,QAAQ,OAAO,QAAQ,IAAI,OAAO,WAAW,CAAC;AAAA,EACtD;AACA,SAAO,cAAc,MAAM,CAAC;AAC5B,aAAW,SAAS,YAAY;AAC9B,QAAI,MAAM,UAAU;AAClB,eAAS,IAAI,MAAM,IAAI;AAAA,IACzB;AACA,WAAO,cAAc,EAAE,MAAM,IAAI,IAAI;AAAA,MACnC,QAAQ,MAAM;AAAA,MACd,GAAI,MAAM,MAAM,MAAM,IAClB,UAAwB,MAAM,MAAM,OAAO,IAAI,IAC9C,MAAM,UAAU,EAAE,MAAM,SAAS;AAAA,IACxC;AAAA,EACF;AACA,aAAW,SAAS,iBAAiB;AACnC,aAAS,OAAO,MAAM,IAAI;AAC1B,WAAO,cAAc,EAAE,MAAM,IAAI,IAAI;AAAA,MACnC,QAAQ;AAAA,MACR,GAAI,MAAM,MAAM,MAAM,IAClB,UAAwB,MAAM,MAAM,OAAO,IAAI,IAC9C,MAAM,UAAU,EAAE,MAAM,SAAS;AAAA,IACxC;AAAA,EACF;AACA,SAAO,YAAY,IAAI,CAAC,GAAG,QAAQ;AACrC;AAEA,SAAS,qBACP,MACA,aACA,WACA,YACA,UACsB;AACtB,QAAM,oBAAoB,MAAM,UAAU,WAAW,IACjD,UAA6B,MAAM,UAAU,YAAY,IAAI,IAC5D,UAAU,eAAe;AAAA,IACxB,SAAS,CAAC;AAAA,IACV,UAAU;AAAA,EACZ;AACJ,QAAM,cAAc,gBAAgB,iBAAiB;AACrD,MAAI,QAAQ,YAAY,OAAO,GAAG;AAChC,UAAM,YAAY,qBAAqB,MAAM,aAAa;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,SAAuB;AAAA,MAC3B,eAAe;AAAA,MACf,iBAAiB;AAAA,IACnB;AACA,oBAAgB,MAAM,QAAQ,YAAY,QAAQ;AAClD,UAAM,aAAmC;AAAA,MACvC,GAAG;AAAA,MACH,SAAS;AAAA,QACP,qBAAqB;AAAA,UACnB,QAAQ,EAAE,MAAM,wBAAwB,SAAS,GAAG;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAEA,SAAK,WAAW,QAAQ,SAAS,IAAI;AACrC,WAAO;AAAA,EACT;AACA,aAAW,eAAe,YAAY,SAAS;AAC7C,UAAM,YAAY,YAAY,QAAQ,WAAW;AACjD,UAAM,YAAY,qBAAqB,MAAM,aAAa;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI;AAEJ,YAAQ,MAAM;AAAA,MACZ,KAAK,MAAM,UAAU,MAAM;AACzB,iBAAS;AAAA,UACP,UAAwB,MAAM,UAAU,OAAO,IAAI;AAAA,QACrD;AACA;AAAA,MACF,KAAK,QAAQ,UAAU,MAAM;AAC3B,mBAAW,CAAC;AACZ,gBAAQ;AAAA,UACN,yCAAyC,WAAW;AAAA,QACtD;AACA;AAAA,MACF;AACE,iBAAS,gBAAgB,UAAU,MAAM;AACzC;AAAA,IACJ;AAEA,oBAAgB,MAAM,QAAQ,YAAY,QAAQ;AAClD,SAAK,WAAW,QAAQ,SAAS,IAAI;AAAA,MACnC,GAAG;AAAA,MACH,iBAAiB;AAAA,MACjB,eAAe;AAAA,IACjB;AAEA,gBAAY,QAAQ,WAAW,EAAE,SAAS;AAAA,MACxC,MAAM,wBAAwB,SAAS;AAAA,IACzC;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBAA2C;AACzD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,EAAE,KAAK,GAAG;AAChB,iBAAW,EAAE,UAAU,KAAK,kBAAkB,IAAI,GAAG;AACnD,cAAM,iBAAiB;AACvB,YAAI,UAAU,aAAa;AACzB,gBAAM,cAAc;AAAA,YAClB;AAAA,YACA,UAAU;AAAA,UACZ;AACA,gBAAM,UAAU,OAAO,OAAO,YAAY,OAAO,EAAE;AAAA,YACjD,CAAC,EAAE,OAAO,MACR,SAAS,WAAyB,MAAM,MAAM,IAAI;AAAA,UACtD;AACA,cACE,QAAQ,SAAS,KACjB,QAAQ,MAAM,CAAC,WAAW,SAAS,eAAe,CAAC,GACnD;AACA,uBAAW,UAAU,IAAI,IAAI,OAAO,GAAG;AACrC;AAAA,gBACE;AAAA,gBACA;AAAA,gBACA,eAAe;AAAA,gBACf,UAAU,YAAY,CAAC;AAAA,cACzB;AAAA,YACF;AACA;AAAA,UACF;AAAA,QACF;AACA,uBAAe,cAAc;AAAA,UAC3B;AAAA,UACA,eAAe;AAAA,UACf;AAAA,UACA,eAAe;AAAA,UACf,UAAU,YAAY,CAAC;AAAA,QACzB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type {\n  OperationObject,\n  ParameterObject,\n  RequestBodyObject,\n  SchemaObject,\n} from 'openapi3-ts/oas31';\n\nimport { followRef, isRef, resolveRef } from '@sdk-it/core/ref.js';\nimport { isEmpty } from '@sdk-it/core/utils.js';\n\nimport { findUniqueSchemaName } from '../find-unique-schema-name.js';\nimport { iterateOperations } from '../for-each-operation.js';\nimport type { ProcessingPlugin } from '../processing.js';\nimport type {\n  IR,\n  OurRequestBodyObject,\n  TunedOperationObject,\n} from '../types.js';\n\nexport function patchParameters(\n  spec: IR,\n  schema: SchemaObject,\n  parameters: ParameterObject[],\n) {\n  const required = new Set(\n    Array.isArray(schema.required) ? schema.required : [],\n  );\n  schema['x-properties'] ??= {};\n  for (const param of parameters) {\n    if (param.required) {\n      required.add(param.name);\n    }\n    schema['x-properties'][param.name] = {\n      'x-in': param.in,\n      ...(isRef(param.schema)\n        ? followRef<SchemaObject>(spec, param.schema.$ref)\n        : (param.schema ?? { type: 'string' })),\n    };\n  }\n  schema['x-required'] = [...required];\n}\n\nfunction normalizeRequestBody(\n  spec: IR,\n  operationId: string,\n  operation: OperationObject,\n  parameters: ParameterObject[],\n): OurRequestBodyObject {\n  const requestBodySource = isRef(operation.requestBody)\n    ? followRef<RequestBodyObject>(spec, operation.requestBody.$ref)\n    : (operation.requestBody ?? {\n        content: {},\n        required: false,\n      });\n  const requestBody = structuredClone(requestBodySource);\n  if (isEmpty(requestBody.content)) {\n    const inputName = findUniqueSchemaName(spec, operationId, [\n      'input',\n      'payload',\n      'request',\n    ]);\n    const schema: SchemaObject = {\n      'x-inputname': inputName,\n      'x-requestbody': true,\n    };\n    patchParameters(spec, schema, parameters);\n    const normalized: OurRequestBodyObject = {\n      ...requestBody,\n      content: {\n        'application/empty': {\n          schema: { $ref: `#/components/schemas/${inputName}` },\n        },\n      },\n    };\n\n    spec.components.schemas[inputName] = schema;\n    return normalized;\n  }\n  for (const contentType in requestBody.content) {\n    const mediaType = requestBody.content[contentType];\n    const inputName = findUniqueSchemaName(spec, operationId, [\n      'input',\n      'payload',\n      'request',\n    ]);\n    let schema: SchemaObject | undefined;\n\n    switch (true) {\n      case isRef(mediaType.schema):\n        schema = structuredClone(\n          followRef<SchemaObject>(spec, mediaType.schema.$ref),\n        );\n        break;\n      case isEmpty(mediaType.schema):\n        schema ??= {};\n        console.warn(\n          `Request body schema for content type \"${contentType}\" is empty.`,\n        );\n        break;\n      default:\n        schema = structuredClone(mediaType.schema);\n        break;\n    }\n\n    patchParameters(spec, schema, parameters);\n    spec.components.schemas[inputName] = {\n      ...schema,\n      'x-requestbody': true,\n      'x-inputname': inputName,\n    };\n\n    requestBody.content[contentType].schema = {\n      $ref: `#/components/schemas/${inputName}`,\n    };\n  }\n  return requestBody as OurRequestBodyObject;\n}\n\nexport function normalizeRequestBodies(): ProcessingPlugin {\n  return {\n    name: 'normalize-request-bodies',\n    process({ spec }) {\n      for (const { operation } of iterateOperations(spec)) {\n        const tunedOperation = operation as TunedOperationObject;\n        if (operation.requestBody) {\n          const requestBody = resolveRef<RequestBodyObject>(\n            spec,\n            operation.requestBody,\n          );\n          const schemas = Object.values(requestBody.content).map(\n            ({ schema }) =>\n              schema ? resolveRef<SchemaObject>(spec, schema) : undefined,\n          );\n          if (\n            schemas.length > 0 &&\n            schemas.every((schema) => schema?.['x-requestbody'])\n          ) {\n            for (const schema of new Set(schemas)) {\n              patchParameters(\n                spec,\n                schema as SchemaObject,\n                tunedOperation.parameters,\n              );\n            }\n            continue;\n          }\n        }\n        tunedOperation.requestBody = normalizeRequestBody(\n          spec,\n          tunedOperation.operationId,\n          operation,\n          tunedOperation.parameters,\n        );\n      }\n    },\n  };\n}\n"],
+  "mappings": "AAOA,SAAS,WAAW,OAAO,kBAAkB;AAC7C,SAAS,eAAe;AAExB,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAQ3B,SAAS,gBACd,MACA,QACA,YACA;AACA,QAAM,WAAW,IAAI;AAAA,IACnB,MAAM,QAAQ,OAAO,QAAQ,IAAI,OAAO,WAAW,CAAC;AAAA,EACtD;AACA,SAAO,cAAc,MAAM,CAAC;AAC5B,aAAW,SAAS,YAAY;AAC9B,QAAI,MAAM,UAAU;AAClB,eAAS,IAAI,MAAM,IAAI;AAAA,IACzB;AACA,WAAO,cAAc,EAAE,MAAM,IAAI,IAAI;AAAA,MACnC,QAAQ,MAAM;AAAA,MACd,GAAI,MAAM,MAAM,MAAM,IAClB,UAAwB,MAAM,MAAM,OAAO,IAAI,IAC9C,MAAM,UAAU,EAAE,MAAM,SAAS;AAAA,IACxC;AAAA,EACF;AACA,SAAO,YAAY,IAAI,CAAC,GAAG,QAAQ;AACrC;AAEA,SAAS,qBACP,MACA,aACA,WACA,YACsB;AACtB,QAAM,oBAAoB,MAAM,UAAU,WAAW,IACjD,UAA6B,MAAM,UAAU,YAAY,IAAI,IAC5D,UAAU,eAAe;AAAA,IACxB,SAAS,CAAC;AAAA,IACV,UAAU;AAAA,EACZ;AACJ,QAAM,cAAc,gBAAgB,iBAAiB;AACrD,MAAI,QAAQ,YAAY,OAAO,GAAG;AAChC,UAAM,YAAY,qBAAqB,MAAM,aAAa;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,SAAuB;AAAA,MAC3B,eAAe;AAAA,MACf,iBAAiB;AAAA,IACnB;AACA,oBAAgB,MAAM,QAAQ,UAAU;AACxC,UAAM,aAAmC;AAAA,MACvC,GAAG;AAAA,MACH,SAAS;AAAA,QACP,qBAAqB;AAAA,UACnB,QAAQ,EAAE,MAAM,wBAAwB,SAAS,GAAG;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAEA,SAAK,WAAW,QAAQ,SAAS,IAAI;AACrC,WAAO;AAAA,EACT;AACA,aAAW,eAAe,YAAY,SAAS;AAC7C,UAAM,YAAY,YAAY,QAAQ,WAAW;AACjD,UAAM,YAAY,qBAAqB,MAAM,aAAa;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI;AAEJ,YAAQ,MAAM;AAAA,MACZ,KAAK,MAAM,UAAU,MAAM;AACzB,iBAAS;AAAA,UACP,UAAwB,MAAM,UAAU,OAAO,IAAI;AAAA,QACrD;AACA;AAAA,MACF,KAAK,QAAQ,UAAU,MAAM;AAC3B,mBAAW,CAAC;AACZ,gBAAQ;AAAA,UACN,yCAAyC,WAAW;AAAA,QACtD;AACA;AAAA,MACF;AACE,iBAAS,gBAAgB,UAAU,MAAM;AACzC;AAAA,IACJ;AAEA,oBAAgB,MAAM,QAAQ,UAAU;AACxC,SAAK,WAAW,QAAQ,SAAS,IAAI;AAAA,MACnC,GAAG;AAAA,MACH,iBAAiB;AAAA,MACjB,eAAe;AAAA,IACjB;AAEA,gBAAY,QAAQ,WAAW,EAAE,SAAS;AAAA,MACxC,MAAM,wBAAwB,SAAS;AAAA,IACzC;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBAA2C;AACzD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,EAAE,KAAK,GAAG;AAChB,iBAAW,EAAE,UAAU,KAAK,kBAAkB,IAAI,GAAG;AACnD,cAAM,iBAAiB;AACvB,YAAI,UAAU,aAAa;AACzB,gBAAM,cAAc;AAAA,YAClB;AAAA,YACA,UAAU;AAAA,UACZ;AACA,gBAAM,UAAU,OAAO,OAAO,YAAY,OAAO,EAAE;AAAA,YACjD,CAAC,EAAE,OAAO,MACR,SAAS,WAAyB,MAAM,MAAM,IAAI;AAAA,UACtD;AACA,cACE,QAAQ,SAAS,KACjB,QAAQ,MAAM,CAAC,WAAW,SAAS,eAAe,CAAC,GACnD;AACA,uBAAW,UAAU,IAAI,IAAI,OAAO,GAAG;AACrC;AAAA,gBACE;AAAA,gBACA;AAAA,gBACA,eAAe;AAAA,cACjB;AAAA,YACF;AACA;AAAA,UACF;AAAA,QACF;AACA,uBAAe,cAAc;AAAA,UAC3B;AAAA,UACA,eAAe;AAAA,UACf;AAAA,UACA,eAAe;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/lib/processing-plugins/normalize-security.d.ts

@@ -0,0 +1,3 @@
+import type { ProcessingPlugin } from '../processing.js';
+export declare function normalizeSecurity(): ProcessingPlugin;
+//# sourceMappingURL=normalize-security.d.ts.map

package/dist/lib/processing-plugins/normalize-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-security.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/normalize-security.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,wBAAgB,iBAAiB,IAAI,gBAAgB,CAuEpD"}

package/dist/lib/processing-plugins/normalize-security.js

@@ -0,0 +1,142 @@
+import { iterateOperations } from "../for-each-operation.js";
+function normalizeSecurity() {
+  return {
+    name: "normalize-security",
+    process({ spec, report }) {
+      for (const [name, scheme] of Object.entries(
+        spec.components.securitySchemes
+      )) {
+        const message = invalidSecurityScheme(scheme);
+        if (message) {
+          report({
+            code: "invalid-security-scheme",
+            severity: "error",
+            path: `components.securitySchemes.${name}`,
+            message
+          });
+        }
+      }
+      for (const { entry, operation } of iterateOperations(spec)) {
+        operation.security = structuredClone(
+          operation.security ?? spec.security ?? []
+        );
+        const path = `${entry.method.toUpperCase()} ${entry.path}`;
+        for (const requirement of operation.security) {
+          const targets = /* @__PURE__ */ new Map();
+          for (const [name, values] of Object.entries(requirement)) {
+            const scheme = spec.components.securitySchemes[name];
+            if (!scheme) {
+              report({
+                code: "unresolved-security-scheme",
+                severity: "error",
+                path,
+                message: `Security scheme ${name} must be resolved in components.securitySchemes`
+              });
+              continue;
+            }
+            if (scheme.type === "oauth2") {
+              const availableScopes = new Set(
+                Object.values(scheme.flows ?? {}).flatMap(
+                  (flow) => Object.keys(flow?.scopes ?? {})
+                )
+              );
+              for (const scope of values) {
+                if (!availableScopes.has(scope)) {
+                  report({
+                    code: "unknown-oauth-scope",
+                    severity: "error",
+                    path,
+                    message: `OAuth2 scheme ${name} does not declare scope ${scope}`
+                  });
+                }
+              }
+            }
+            const target = credentialTarget(scheme);
+            const existing = target ? targets.get(target) : void 0;
+            if (target && existing) {
+              report({
+                code: "conflicting-security-target",
+                severity: "error",
+                path,
+                message: `Security schemes ${existing} and ${name} both use ${target}`
+              });
+            } else if (target) {
+              targets.set(target, name);
+            }
+          }
+        }
+      }
+    }
+  };
+}
+function invalidSecurityScheme(scheme) {
+  const value = scheme;
+  switch (value.type) {
+    case "apiKey":
+      if (typeof value.name !== "string" || value.name.length === 0) {
+        return "apiKey security schemes require a name";
+      }
+      if (!["header", "query", "cookie"].includes(value.in)) {
+        return "apiKey security schemes require header, query, or cookie in";
+      }
+      return void 0;
+    case "http":
+      return typeof value.scheme === "string" && value.scheme.length > 0 ? void 0 : "HTTP security schemes require a scheme";
+    case "mutualTLS":
+      return void 0;
+    case "openIdConnect":
+      return typeof value.openIdConnectUrl === "string" && value.openIdConnectUrl.length > 0 ? void 0 : "OpenID Connect security schemes require openIdConnectUrl";
+    case "oauth2": {
+      if (!value.flows || typeof value.flows !== "object") {
+        return "OAuth2 security schemes require flows";
+      }
+      const flows = value.flows;
+      const requiredUrls = {
+        implicit: ["authorizationUrl"],
+        password: ["tokenUrl"],
+        clientCredentials: ["tokenUrl"],
+        authorizationCode: ["authorizationUrl", "tokenUrl"],
+        deviceAuthorization: ["deviceAuthorizationUrl", "tokenUrl"]
+      };
+      const configured = Object.entries(requiredUrls).filter(
+        ([flow]) => flows[flow] !== void 0
+      );
+      if (configured.length === 0) {
+        return "OAuth2 security schemes require at least one flow";
+      }
+      for (const [flowName, fields] of configured) {
+        const flow = flows[flowName];
+        if (!flow.scopes || typeof flow.scopes !== "object") {
+          return `OAuth2 ${flowName} flow requires scopes`;
+        }
+        for (const field of fields) {
+          if (typeof flow[field] !== "string" || flow[field].length === 0) {
+            return `OAuth2 ${flowName} flow requires ${field}`;
+          }
+        }
+      }
+      return void 0;
+    }
+    default:
+      return `Unsupported security scheme type ${String(value.type)}`;
+  }
+}
+function credentialTarget(scheme) {
+  switch (scheme.type) {
+    case "apiKey": {
+      if (!scheme.in || !scheme.name) return void 0;
+      const name = scheme.in === "header" ? scheme.name.toLowerCase() : scheme.name;
+      return `${scheme.in}:${name}`;
+    }
+    case "http":
+    case "oauth2":
+    case "openIdConnect":
+      return "header:authorization";
+    case "mutualTLS":
+      return "transport:client-certificate";
+  }
+}
+export {
+  normalizeSecurity
+};
+//# sourceMappingURL=normalize-security.js.map

package/dist/lib/processing-plugins/normalize-security.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/processing-plugins/normalize-security.ts"],
+  "sourcesContent": ["import type { OpenAPISecuritySchemeObject } from '@sdk-it/core';\n\nimport { iterateOperations } from '../for-each-operation.js';\nimport type { ProcessingPlugin } from '../processing.js';\n\nexport function normalizeSecurity(): ProcessingPlugin {\n  return {\n    name: 'normalize-security',\n    process({ spec, report }) {\n      for (const [name, scheme] of Object.entries(\n        spec.components.securitySchemes,\n      )) {\n        const message = invalidSecurityScheme(scheme);\n        if (message) {\n          report({\n            code: 'invalid-security-scheme',\n            severity: 'error',\n            path: `components.securitySchemes.${name}`,\n            message,\n          });\n        }\n      }\n      for (const { entry, operation } of iterateOperations(spec)) {\n        operation.security = structuredClone(\n          operation.security ?? spec.security ?? [],\n        );\n        const path = `${entry.method.toUpperCase()} ${entry.path}`;\n        for (const requirement of operation.security) {\n          const targets = new Map<string, string>();\n          for (const [name, values] of Object.entries(requirement)) {\n            const scheme = spec.components.securitySchemes[name];\n            if (!scheme) {\n              // OpenAPI 3.2 allows external URI references here, but no\n              // generator can emit a credential for one.\n              report({\n                code: 'unresolved-security-scheme',\n                severity: 'error',\n                path,\n                message: `Security scheme ${name} must be resolved in components.securitySchemes`,\n              });\n              continue;\n            }\n            if (scheme.type === 'oauth2') {\n              const availableScopes = new Set(\n                Object.values(scheme.flows ?? {}).flatMap((flow) =>\n                  Object.keys(flow?.scopes ?? {}),\n                ),\n              );\n              for (const scope of values) {\n                if (!availableScopes.has(scope)) {\n                  report({\n                    code: 'unknown-oauth-scope',\n                    severity: 'error',\n                    path,\n                    message: `OAuth2 scheme ${name} does not declare scope ${scope}`,\n                  });\n                }\n              }\n            }\n            const target = credentialTarget(scheme);\n            const existing = target ? targets.get(target) : undefined;\n            if (target && existing) {\n              report({\n                code: 'conflicting-security-target',\n                severity: 'error',\n                path,\n                message: `Security schemes ${existing} and ${name} both use ${target}`,\n              });\n            } else if (target) {\n              targets.set(target, name);\n            }\n          }\n        }\n      }\n    },\n  };\n}\n\nfunction invalidSecurityScheme(\n  scheme: OpenAPISecuritySchemeObject,\n): string | undefined {\n  const value = scheme as OpenAPISecuritySchemeObject & Record<string, unknown>;\n  switch (value.type as string) {\n    case 'apiKey':\n      if (typeof value.name !== 'string' || value.name.length === 0) {\n        return 'apiKey security schemes require a name';\n      }\n      if (!['header', 'query', 'cookie'].includes(value.in as string)) {\n        return 'apiKey security schemes require header, query, or cookie in';\n      }\n      return undefined;\n    case 'http':\n      return typeof value.scheme === 'string' && value.scheme.length > 0\n        ? undefined\n        : 'HTTP security schemes require a scheme';\n    case 'mutualTLS':\n      return undefined;\n    case 'openIdConnect':\n      return typeof value.openIdConnectUrl === 'string' &&\n        value.openIdConnectUrl.length > 0\n        ? undefined\n        : 'OpenID Connect security schemes require openIdConnectUrl';\n    case 'oauth2': {\n      if (!value.flows || typeof value.flows !== 'object') {\n        return 'OAuth2 security schemes require flows';\n      }\n      const flows = value.flows as Record<\n        string,\n        Record<string, unknown> | undefined\n      >;\n      const requiredUrls: Record<string, string[]> = {\n        implicit: ['authorizationUrl'],\n        password: ['tokenUrl'],\n        clientCredentials: ['tokenUrl'],\n        authorizationCode: ['authorizationUrl', 'tokenUrl'],\n        deviceAuthorization: ['deviceAuthorizationUrl', 'tokenUrl'],\n      };\n      const configured = Object.entries(requiredUrls).filter(\n        ([flow]) => flows[flow] !== undefined,\n      );\n      if (configured.length === 0) {\n        return 'OAuth2 security schemes require at least one flow';\n      }\n      for (const [flowName, fields] of configured) {\n        const flow = flows[flowName]!;\n        if (!flow.scopes || typeof flow.scopes !== 'object') {\n          return `OAuth2 ${flowName} flow requires scopes`;\n        }\n        for (const field of fields) {\n          if (typeof flow[field] !== 'string' || flow[field].length === 0) {\n            return `OAuth2 ${flowName} flow requires ${field}`;\n          }\n        }\n      }\n      return undefined;\n    }\n    default:\n      return `Unsupported security scheme type ${String(value.type)}`;\n  }\n}\n\nfunction credentialTarget(\n  scheme: OpenAPISecuritySchemeObject,\n): string | undefined {\n  switch (scheme.type) {\n    case 'apiKey': {\n      if (!scheme.in || !scheme.name) return undefined;\n      const name =\n        scheme.in === 'header' ? scheme.name.toLowerCase() : scheme.name;\n      return `${scheme.in}:${name}`;\n    }\n    case 'http':\n    case 'oauth2':\n    case 'openIdConnect':\n      return 'header:authorization';\n    case 'mutualTLS':\n      return 'transport:client-certificate';\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,yBAAyB;AAG3B,SAAS,oBAAsC;AACpD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,EAAE,MAAM,OAAO,GAAG;AACxB,iBAAW,CAAC,MAAM,MAAM,KAAK,OAAO;AAAA,QAClC,KAAK,WAAW;AAAA,MAClB,GAAG;AACD,cAAM,UAAU,sBAAsB,MAAM;AAC5C,YAAI,SAAS;AACX,iBAAO;AAAA,YACL,MAAM;AAAA,YACN,UAAU;AAAA,YACV,MAAM,8BAA8B,IAAI;AAAA,YACxC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,iBAAW,EAAE,OAAO,UAAU,KAAK,kBAAkB,IAAI,GAAG;AAC1D,kBAAU,WAAW;AAAA,UACnB,UAAU,YAAY,KAAK,YAAY,CAAC;AAAA,QAC1C;AACA,cAAM,OAAO,GAAG,MAAM,OAAO,YAAY,CAAC,IAAI,MAAM,IAAI;AACxD,mBAAW,eAAe,UAAU,UAAU;AAC5C,gBAAM,UAAU,oBAAI,IAAoB;AACxC,qBAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,WAAW,GAAG;AACxD,kBAAM,SAAS,KAAK,WAAW,gBAAgB,IAAI;AACnD,gBAAI,CAAC,QAAQ;AAGX,qBAAO;AAAA,gBACL,MAAM;AAAA,gBACN,UAAU;AAAA,gBACV;AAAA,gBACA,SAAS,mBAAmB,IAAI;AAAA,cAClC,CAAC;AACD;AAAA,YACF;AACA,gBAAI,OAAO,SAAS,UAAU;AAC5B,oBAAM,kBAAkB,IAAI;AAAA,gBAC1B,OAAO,OAAO,OAAO,SAAS,CAAC,CAAC,EAAE;AAAA,kBAAQ,CAAC,SACzC,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC;AAAA,gBAChC;AAAA,cACF;AACA,yBAAW,SAAS,QAAQ;AAC1B,oBAAI,CAAC,gBAAgB,IAAI,KAAK,GAAG;AAC/B,yBAAO;AAAA,oBACL,MAAM;AAAA,oBACN,UAAU;AAAA,oBACV;AAAA,oBACA,SAAS,iBAAiB,IAAI,2BAA2B,KAAK;AAAA,kBAChE,CAAC;AAAA,gBACH;AAAA,cACF;AAAA,YACF;AACA,kBAAM,SAAS,iBAAiB,MAAM;AACtC,kBAAM,WAAW,SAAS,QAAQ,IAAI,MAAM,IAAI;AAChD,gBAAI,UAAU,UAAU;AACtB,qBAAO;AAAA,gBACL,MAAM;AAAA,gBACN,UAAU;AAAA,gBACV;AAAA,gBACA,SAAS,oBAAoB,QAAQ,QAAQ,IAAI,aAAa,MAAM;AAAA,cACtE,CAAC;AAAA,YACH,WAAW,QAAQ;AACjB,sBAAQ,IAAI,QAAQ,IAAI;AAAA,YAC1B;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,sBACP,QACoB;AACpB,QAAM,QAAQ;AACd,UAAQ,MAAM,MAAgB;AAAA,IAC5B,KAAK;AACH,UAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,WAAW,GAAG;AAC7D,eAAO;AAAA,MACT;AACA,UAAI,CAAC,CAAC,UAAU,SAAS,QAAQ,EAAE,SAAS,MAAM,EAAY,GAAG;AAC/D,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,KAAK;AACH,aAAO,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,SAAS,IAC7D,SACA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,OAAO,MAAM,qBAAqB,YACvC,MAAM,iBAAiB,SAAS,IAC9B,SACA;AAAA,IACN,KAAK,UAAU;AACb,UAAI,CAAC,MAAM,SAAS,OAAO,MAAM,UAAU,UAAU;AACnD,eAAO;AAAA,MACT;AACA,YAAM,QAAQ,MAAM;AAIpB,YAAM,eAAyC;AAAA,QAC7C,UAAU,CAAC,kBAAkB;AAAA,QAC7B,UAAU,CAAC,UAAU;AAAA,QACrB,mBAAmB,CAAC,UAAU;AAAA,QAC9B,mBAAmB,CAAC,oBAAoB,UAAU;AAAA,QAClD,qBAAqB,CAAC,0BAA0B,UAAU;AAAA,MAC5D;AACA,YAAM,aAAa,OAAO,QAAQ,YAAY,EAAE;AAAA,QAC9C,CAAC,CAAC,IAAI,MAAM,MAAM,IAAI,MAAM;AAAA,MAC9B;AACA,UAAI,WAAW,WAAW,GAAG;AAC3B,eAAO;AAAA,MACT;AACA,iBAAW,CAAC,UAAU,MAAM,KAAK,YAAY;AAC3C,cAAM,OAAO,MAAM,QAAQ;AAC3B,YAAI,CAAC,KAAK,UAAU,OAAO,KAAK,WAAW,UAAU;AACnD,iBAAO,UAAU,QAAQ;AAAA,QAC3B;AACA,mBAAW,SAAS,QAAQ;AAC1B,cAAI,OAAO,KAAK,KAAK,MAAM,YAAY,KAAK,KAAK,EAAE,WAAW,GAAG;AAC/D,mBAAO,UAAU,QAAQ,kBAAkB,KAAK;AAAA,UAClD;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA;AACE,aAAO,oCAAoC,OAAO,MAAM,IAAI,CAAC;AAAA,EACjE;AACF;AAEA,SAAS,iBACP,QACoB;AACpB,UAAQ,OAAO,MAAM;AAAA,IACnB,KAAK,UAAU;AACb,UAAI,CAAC,OAAO,MAAM,CAAC,OAAO,KAAM,QAAO;AACvC,YAAM,OACJ,OAAO,OAAO,WAAW,OAAO,KAAK,YAAY,IAAI,OAAO;AAC9D,aAAO,GAAG,OAAO,EAAE,IAAI,IAAI;AAAA,IAC7B;AAAA,IACA,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;",
+  "names": []
+}

package/dist/lib/processing-plugins/resolve-security-scheme-uris.d.ts

@@ -0,0 +1,9 @@
+import type { ProcessingPlugin } from '../processing.js';
+/**
+ * OpenAPI 3.2 lets a security requirement key be a URI of a Security Scheme
+ * Object instead of a `components.securitySchemes` name. Generators key
+ * credentials by scheme name, so each URI is fetched, registered locally, and
+ * the requirement rewritten to point at the registered name.
+ */
+export declare function resolveSecuritySchemeUris(): ProcessingPlugin;
+//# sourceMappingURL=resolve-security-scheme-uris.d.ts.map

package/dist/lib/processing-plugins/resolve-security-scheme-uris.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-security-scheme-uris.d.ts","sourceRoot":"","sources":["../../../src/lib/processing-plugins/resolve-security-scheme-uris.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGzD;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,gBAAgB,CAkD5D"}

package/dist/lib/processing-plugins/resolve-security-scheme-uris.js

@@ -0,0 +1,139 @@
+import { fileURLToPath } from "node:url";
+import {
+  followRef,
+  isRef
+} from "@sdk-it/core";
+import { iterateOperations } from "../for-each-operation.js";
+import { loadFile } from "../loaders/load-spec.js";
+function resolveSecuritySchemeUris() {
+  return {
+    name: "resolve-security-scheme-uris",
+    async process({ spec, report }) {
+      const requirements = collectRequirements(spec);
+      const uris = new Set(
+        requirements.flatMap((requirement) => Object.keys(requirement)).filter(
+          (key) => !spec.components.securitySchemes[key] && isUriKey(key)
+        )
+      );
+      if (!uris.size) {
+        return;
+      }
+      const documents = /* @__PURE__ */ new Map();
+      const registered = /* @__PURE__ */ new Map();
+      for (const uri of uris) {
+        try {
+          const scheme = await resolveScheme(uri, spec, documents);
+          const [alias] = Object.entries(spec.components.securitySchemes).find(
+            ([, registeredScheme]) => registeredScheme === scheme
+          ) ?? [];
+          const name = alias ?? availableName(spec, schemeName(uri));
+          spec.components.securitySchemes[name] = scheme;
+          registered.set(uri, name);
+        } catch (error) {
+          report({
+            code: "unresolvable-security-scheme-uri",
+            severity: "error",
+            path: uri,
+            message: `Could not resolve security scheme URI ${uri}: ${error instanceof Error ? error.message : String(error)}`
+          });
+        }
+      }
+      for (const requirement of requirements) {
+        for (const [uri, name] of registered) {
+          if (Object.hasOwn(requirement, uri)) {
+            requirement[name] = requirement[uri];
+            delete requirement[uri];
+          }
+        }
+      }
+    }
+  };
+}
+function collectRequirements(spec) {
+  const requirements = [...spec.security ?? []];
+  for (const { operation } of iterateOperations(spec)) {
+    requirements.push(...operation.security ?? []);
+  }
+  return requirements;
+}
+function isUriKey(key) {
+  return !/^[a-zA-Z0-9._-]+$/.test(key);
+}
+async function resolveScheme(uri, spec, documents) {
+  const [location, fragment] = splitFragment(uri);
+  const document = location ? await loadDocument(location, spec, documents) : spec;
+  let scheme = fragment ? readPointer(document, fragment) : document;
+  if (isRef(scheme)) {
+    scheme = followRef(document, scheme.$ref);
+  }
+  if (scheme === null || typeof scheme !== "object" || typeof scheme.type !== "string") {
+    return Promise.reject(
+      new Error("the target is not a Security Scheme Object")
+    );
+  }
+  return scheme;
+}
+function loadDocument(location, spec, documents) {
+  const base = spec.$self;
+  if (!base && !isAbsolute(location)) {
+    return Promise.reject(
+      new Error(
+        "the document declares no $self, so a relative URI has no base to resolve against"
+      )
+    );
+  }
+  const url = new URL(location, base);
+  if (url.href === base) {
+    return Promise.resolve(spec);
+  }
+  let pending = documents.get(url.href);
+  if (!pending) {
+    pending = loadFile(
+      url.protocol === "file:" ? fileURLToPath(url) : url.href
+    );
+    documents.set(url.href, pending);
+  }
+  return pending;
+}
+function isAbsolute(location) {
+  return URL.canParse(location);
+}
+function splitFragment(uri) {
+  const index = uri.indexOf("#");
+  return index === -1 ? [uri, void 0] : [uri.slice(0, index), uri.slice(index + 1)];
+}
+function readPointer(document, fragment) {
+  let current = document;
+  for (const segment of fragment.split("/")) {
+    if (!segment) {
+      continue;
+    }
+    const key = decodeURIComponent(segment).replaceAll("~1", "/").replaceAll("~0", "~");
+    if (current === null || typeof current !== "object" || !(key in current)) {
+      throw new Error(`no value at pointer #${fragment}`);
+    }
+    current = current[key];
+  }
+  return current;
+}
+function schemeName(uri) {
+  const [location, fragment] = splitFragment(uri);
+  const candidate = lastSegment(fragment ?? "") ?? lastSegment(location.split("?")[0])?.replace(/\.(json|ya?ml)$/i, "");
+  const sanitized = (candidate ?? "").replace(/[^a-zA-Z0-9._-]/g, "");
+  return sanitized || "externalSecurityScheme";
+}
+function lastSegment(value) {
+  return value.split("/").filter(Boolean).at(-1);
+}
+function availableName(spec, candidate) {
+  let name = candidate;
+  let suffix = 2;
+  while (spec.components.securitySchemes[name]) {
+    name = `${candidate}${suffix++}`;
+  }
+  return name;
+}
+export {
+  resolveSecuritySchemeUris
+};
+//# sourceMappingURL=resolve-security-scheme-uris.js.map

package/dist/lib/processing-plugins/resolve-security-scheme-uris.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/processing-plugins/resolve-security-scheme-uris.ts"],
+  "sourcesContent": ["import { fileURLToPath } from 'node:url';\nimport type { SecurityRequirementObject } from 'openapi3-ts/oas31';\n\nimport {\n  type OpenAPISecuritySchemeObject,\n  followRef,\n  isRef,\n} from '@sdk-it/core';\n\nimport { iterateOperations } from '../for-each-operation.js';\nimport { loadFile } from '../loaders/load-spec.js';\nimport type { ProcessingPlugin } from '../processing.js';\nimport type { IR } from '../types.js';\n\n/**\n * OpenAPI 3.2 lets a security requirement key be a URI of a Security Scheme\n * Object instead of a `components.securitySchemes` name. Generators key\n * credentials by scheme name, so each URI is fetched, registered locally, and\n * the requirement rewritten to point at the registered name.\n */\nexport function resolveSecuritySchemeUris(): ProcessingPlugin {\n  return {\n    name: 'resolve-security-scheme-uris',\n    async process({ spec, report }) {\n      const requirements = collectRequirements(spec);\n      const uris = new Set(\n        requirements\n          .flatMap((requirement) => Object.keys(requirement))\n          .filter(\n            (key) => !spec.components.securitySchemes[key] && isUriKey(key),\n          ),\n      );\n      if (!uris.size) {\n        return;\n      }\n\n      const documents = new Map<string, Promise<unknown>>();\n      const registered = new Map<string, string>();\n      for (const uri of uris) {\n        try {\n          const scheme = await resolveScheme(uri, spec, documents);\n          // A same-document pointer lands on an already registered object;\n          // reuse its name instead of registering a second copy.\n          const [alias] =\n            Object.entries(spec.components.securitySchemes).find(\n              ([, registeredScheme]) => registeredScheme === scheme,\n            ) ?? [];\n          const name = alias ?? availableName(spec, schemeName(uri));\n          spec.components.securitySchemes[name] = scheme;\n          registered.set(uri, name);\n        } catch (error) {\n          report({\n            code: 'unresolvable-security-scheme-uri',\n            severity: 'error',\n            path: uri,\n            message: `Could not resolve security scheme URI ${uri}: ${error instanceof Error ? error.message : String(error)}`,\n          });\n        }\n      }\n\n      for (const requirement of requirements) {\n        for (const [uri, name] of registered) {\n          if (Object.hasOwn(requirement, uri)) {\n            requirement[name] = requirement[uri];\n            delete requirement[uri];\n          }\n        }\n      }\n    },\n  };\n}\n\nfunction collectRequirements(spec: IR) {\n  const requirements: SecurityRequirementObject[] = [...(spec.security ?? [])];\n  for (const { operation } of iterateOperations(spec)) {\n    requirements.push(...(operation.security ?? []));\n  }\n  return requirements;\n}\n\n/**\n * Component keys are limited to `^[a-zA-Z0-9._-]+$`, so anything else can only\n * be a URI. A bare `auth.yaml` stays a name \u2014 treating it as a document would\n * turn a typo into a file read.\n */\nfunction isUriKey(key: string) {\n  return !/^[a-zA-Z0-9._-]+$/.test(key);\n}\n\nasync function resolveScheme(\n  uri: string,\n  spec: IR,\n  documents: Map<string, Promise<unknown>>,\n): Promise<OpenAPISecuritySchemeObject> {\n  const [location, fragment] = splitFragment(uri);\n  const document = location\n    ? await loadDocument(location, spec, documents)\n    : spec;\n  let scheme = fragment ? readPointer(document, fragment) : document;\n  if (isRef(scheme)) {\n    scheme = followRef(document as never, scheme.$ref);\n  }\n  if (\n    scheme === null ||\n    typeof scheme !== 'object' ||\n    typeof (scheme as { type?: unknown }).type !== 'string'\n  ) {\n    return Promise.reject(\n      new Error('the target is not a Security Scheme Object'),\n    );\n  }\n  return scheme as OpenAPISecuritySchemeObject;\n}\n\nfunction loadDocument(\n  location: string,\n  spec: IR,\n  documents: Map<string, Promise<unknown>>,\n) {\n  const base = spec.$self;\n  if (!base && !isAbsolute(location)) {\n    return Promise.reject(\n      new Error(\n        'the document declares no $self, so a relative URI has no base to resolve against',\n      ),\n    );\n  }\n  const url = new URL(location, base);\n  if (url.href === base) {\n    return Promise.resolve(spec);\n  }\n  let pending = documents.get(url.href);\n  if (!pending) {\n    pending = loadFile(\n      url.protocol === 'file:' ? fileURLToPath(url) : url.href,\n    );\n    documents.set(url.href, pending);\n  }\n  return pending;\n}\n\nfunction isAbsolute(location: string) {\n  return URL.canParse(location);\n}\n\nfunction splitFragment(uri: string): [string, string | undefined] {\n  const index = uri.indexOf('#');\n  return index === -1\n    ? [uri, undefined]\n    : [uri.slice(0, index), uri.slice(index + 1)];\n}\n\nfunction readPointer(document: unknown, fragment: string) {\n  let current: unknown = document;\n  for (const segment of fragment.split('/')) {\n    if (!segment) {\n      continue;\n    }\n    const key = decodeURIComponent(segment)\n      .replaceAll('~1', '/')\n      .replaceAll('~0', '~');\n    if (\n      current === null ||\n      typeof current !== 'object' ||\n      !(key in (current as object))\n    ) {\n      throw new Error(`no value at pointer #${fragment}`);\n    }\n    current = (current as Record<string, unknown>)[key];\n  }\n  return current;\n}\n\nfunction schemeName(uri: string) {\n  const [location, fragment] = splitFragment(uri);\n  const candidate =\n    lastSegment(fragment ?? '') ??\n    lastSegment(location.split('?')[0])?.replace(/\\.(json|ya?ml)$/i, '');\n  const sanitized = (candidate ?? '').replace(/[^a-zA-Z0-9._-]/g, '');\n  return sanitized || 'externalSecurityScheme';\n}\n\nfunction lastSegment(value: string) {\n  return value.split('/').filter(Boolean).at(-1);\n}\n\nfunction availableName(spec: IR, candidate: string) {\n  let name = candidate;\n  let suffix = 2;\n  while (spec.components.securitySchemes[name]) {\n    name = `${candidate}${suffix++}`;\n  }\n  return name;\n}\n"],
+  "mappings": "AAAA,SAAS,qBAAqB;AAG9B;AAAA,EAEE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,yBAAyB;AAClC,SAAS,gBAAgB;AAUlB,SAAS,4BAA8C;AAC5D,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,QAAQ,EAAE,MAAM,OAAO,GAAG;AAC9B,YAAM,eAAe,oBAAoB,IAAI;AAC7C,YAAM,OAAO,IAAI;AAAA,QACf,aACG,QAAQ,CAAC,gBAAgB,OAAO,KAAK,WAAW,CAAC,EACjD;AAAA,UACC,CAAC,QAAQ,CAAC,KAAK,WAAW,gBAAgB,GAAG,KAAK,SAAS,GAAG;AAAA,QAChE;AAAA,MACJ;AACA,UAAI,CAAC,KAAK,MAAM;AACd;AAAA,MACF;AAEA,YAAM,YAAY,oBAAI,IAA8B;AACpD,YAAM,aAAa,oBAAI,IAAoB;AAC3C,iBAAW,OAAO,MAAM;AACtB,YAAI;AACF,gBAAM,SAAS,MAAM,cAAc,KAAK,MAAM,SAAS;AAGvD,gBAAM,CAAC,KAAK,IACV,OAAO,QAAQ,KAAK,WAAW,eAAe,EAAE;AAAA,YAC9C,CAAC,CAAC,EAAE,gBAAgB,MAAM,qBAAqB;AAAA,UACjD,KAAK,CAAC;AACR,gBAAM,OAAO,SAAS,cAAc,MAAM,WAAW,GAAG,CAAC;AACzD,eAAK,WAAW,gBAAgB,IAAI,IAAI;AACxC,qBAAW,IAAI,KAAK,IAAI;AAAA,QAC1B,SAAS,OAAO;AACd,iBAAO;AAAA,YACL,MAAM;AAAA,YACN,UAAU;AAAA,YACV,MAAM;AAAA,YACN,SAAS,yCAAyC,GAAG,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,UAClH,CAAC;AAAA,QACH;AAAA,MACF;AAEA,iBAAW,eAAe,cAAc;AACtC,mBAAW,CAAC,KAAK,IAAI,KAAK,YAAY;AACpC,cAAI,OAAO,OAAO,aAAa,GAAG,GAAG;AACnC,wBAAY,IAAI,IAAI,YAAY,GAAG;AACnC,mBAAO,YAAY,GAAG;AAAA,UACxB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,MAAU;AACrC,QAAM,eAA4C,CAAC,GAAI,KAAK,YAAY,CAAC,CAAE;AAC3E,aAAW,EAAE,UAAU,KAAK,kBAAkB,IAAI,GAAG;AACnD,iBAAa,KAAK,GAAI,UAAU,YAAY,CAAC,CAAE;AAAA,EACjD;AACA,SAAO;AACT;AAOA,SAAS,SAAS,KAAa;AAC7B,SAAO,CAAC,oBAAoB,KAAK,GAAG;AACtC;AAEA,eAAe,cACb,KACA,MACA,WACsC;AACtC,QAAM,CAAC,UAAU,QAAQ,IAAI,cAAc,GAAG;AAC9C,QAAM,WAAW,WACb,MAAM,aAAa,UAAU,MAAM,SAAS,IAC5C;AACJ,MAAI,SAAS,WAAW,YAAY,UAAU,QAAQ,IAAI;AAC1D,MAAI,MAAM,MAAM,GAAG;AACjB,aAAS,UAAU,UAAmB,OAAO,IAAI;AAAA,EACnD;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,OAAQ,OAA8B,SAAS,UAC/C;AACA,WAAO,QAAQ;AAAA,MACb,IAAI,MAAM,4CAA4C;AAAA,IACxD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aACP,UACA,MACA,WACA;AACA,QAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,CAAC,WAAW,QAAQ,GAAG;AAClC,WAAO,QAAQ;AAAA,MACb,IAAI;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,IAAI,IAAI,UAAU,IAAI;AAClC,MAAI,IAAI,SAAS,MAAM;AACrB,WAAO,QAAQ,QAAQ,IAAI;AAAA,EAC7B;AACA,MAAI,UAAU,UAAU,IAAI,IAAI,IAAI;AACpC,MAAI,CAAC,SAAS;AACZ,cAAU;AAAA,MACR,IAAI,aAAa,UAAU,cAAc,GAAG,IAAI,IAAI;AAAA,IACtD;AACA,cAAU,IAAI,IAAI,MAAM,OAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,WAAW,UAAkB;AACpC,SAAO,IAAI,SAAS,QAAQ;AAC9B;AAEA,SAAS,cAAc,KAA2C;AAChE,QAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,SAAO,UAAU,KACb,CAAC,KAAK,MAAS,IACf,CAAC,IAAI,MAAM,GAAG,KAAK,GAAG,IAAI,MAAM,QAAQ,CAAC,CAAC;AAChD;AAEA,SAAS,YAAY,UAAmB,UAAkB;AACxD,MAAI,UAAmB;AACvB,aAAW,WAAW,SAAS,MAAM,GAAG,GAAG;AACzC,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AACA,UAAM,MAAM,mBAAmB,OAAO,EACnC,WAAW,MAAM,GAAG,EACpB,WAAW,MAAM,GAAG;AACvB,QACE,YAAY,QACZ,OAAO,YAAY,YACnB,EAAE,OAAQ,UACV;AACA,YAAM,IAAI,MAAM,wBAAwB,QAAQ,EAAE;AAAA,IACpD;AACA,cAAW,QAAoC,GAAG;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,WAAW,KAAa;AAC/B,QAAM,CAAC,UAAU,QAAQ,IAAI,cAAc,GAAG;AAC9C,QAAM,YACJ,YAAY,YAAY,EAAE,KAC1B,YAAY,SAAS,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG,QAAQ,oBAAoB,EAAE;AACrE,QAAM,aAAa,aAAa,IAAI,QAAQ,oBAAoB,EAAE;AAClE,SAAO,aAAa;AACtB;AAEA,SAAS,YAAY,OAAe;AAClC,SAAO,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,EAAE,GAAG,EAAE;AAC/C;AAEA,SAAS,cAAc,MAAU,WAAmB;AAClD,MAAI,OAAO;AACX,MAAI,SAAS;AACb,SAAO,KAAK,WAAW,gBAAgB,IAAI,GAAG;AAC5C,WAAO,GAAG,SAAS,GAAG,QAAQ;AAAA,EAChC;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/lib/processing.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/processing.ts"],
-  "sourcesContent": ["import type { OpenAPIObject } from 'openapi3-ts/oas31';\n\nimport {\n  type GenerateSdkConfig,\n  coeraceConfig as coerceConfig,\n} from './options.js';\nimport type { IR } from './types.js';\n\nexport type ProcessingDiagnosticSeverity = 'info' | 'warning' | 'error';\n\nexport interface ProcessingDiagnostic {\n  plugin: string;\n  severity: ProcessingDiagnosticSeverity;\n  code: string;\n  message: string;\n  path?: string;\n}\n\nexport type ProcessingOptions = Omit<ReturnType<typeof coerceConfig>, 'spec'>;\n\nexport interface ProcessingContext {\n  spec: IR;\n  options: ProcessingOptions;\n  diagnostics: ProcessingDiagnostic[];\n  signal?: AbortSignal;\n  report(\n    diagnostic: Omit<ProcessingDiagnostic, 'plugin'>,\n  ): ProcessingDiagnostic;\n}\n\nexport interface ProcessingPlugin {\n  name: string;\n  process(context: ProcessingContext): void | Promise<void>;\n}\n\nexport interface ProcessSpecConfig extends GenerateSdkConfig {\n  plugins: readonly ProcessingPlugin[];\n  signal?: AbortSignal;\n  onDiagnostic?: (diagnostic: ProcessingDiagnostic) => void;\n}\n\nexport interface ProcessingResult {\n  spec: IR;\n  diagnostics: ProcessingDiagnostic[];\n}\n\nexport async function processSpec(\n  config: ProcessSpecConfig,\n): Promise<ProcessingResult> {\n  const { plugins, signal, onDiagnostic, ...generateConfig } = config;\n  signal?.throwIfAborted();\n  const coerced = coerceConfig({\n    ...generateConfig,\n    spec: structuredClone(generateConfig.spec) as OpenAPIObject,\n  });\n  const { spec, ...options } = coerced;\n  const diagnostics: ProcessingDiagnostic[] = [];\n  const pluginNames = plugins.map((plugin) => plugin.name);\n  const configuration = JSON.stringify({\n    pagination: options.pagination,\n    responses: options.responses,\n  });\n\n  for (const plugin of plugins) {\n    signal?.throwIfAborted();\n    const context: ProcessingContext = {\n      spec,\n      options,\n      diagnostics,\n      signal,\n      report(diagnostic) {\n        const reported = { ...diagnostic, plugin: plugin.name };\n        diagnostics.push(reported);\n        onDiagnostic?.(reported);\n        return reported;\n      },\n    };\n    await plugin.process(context);\n    signal?.throwIfAborted();\n  }\n\n  spec['x-sdk-processing'] = { plugins: pluginNames, configuration };\n\n  return { spec, diagnostics };\n}\n"],
+  "sourcesContent": ["import type { OpenAPIDocument } from '@sdk-it/core';\n\nimport {\n  type GenerateSdkConfig,\n  coeraceConfig as coerceConfig,\n} from './options.js';\nimport type { IR } from './types.js';\n\nexport type ProcessingDiagnosticSeverity = 'info' | 'warning' | 'error';\n\nexport interface ProcessingDiagnostic {\n  plugin: string;\n  severity: ProcessingDiagnosticSeverity;\n  code: string;\n  message: string;\n  path?: string;\n}\n\nexport type ProcessingOptions = Omit<ReturnType<typeof coerceConfig>, 'spec'>;\n\nexport interface ProcessingContext {\n  spec: IR;\n  options: ProcessingOptions;\n  diagnostics: ProcessingDiagnostic[];\n  signal?: AbortSignal;\n  report(\n    diagnostic: Omit<ProcessingDiagnostic, 'plugin'>,\n  ): ProcessingDiagnostic;\n}\n\nexport interface ProcessingPlugin {\n  name: string;\n  process(context: ProcessingContext): void | Promise<void>;\n}\n\nexport interface ProcessSpecConfig extends GenerateSdkConfig {\n  plugins: readonly ProcessingPlugin[];\n  signal?: AbortSignal;\n  onDiagnostic?: (diagnostic: ProcessingDiagnostic) => void;\n}\n\nexport interface ProcessingResult {\n  spec: IR;\n  diagnostics: ProcessingDiagnostic[];\n}\n\nexport async function processSpec(\n  config: ProcessSpecConfig,\n): Promise<ProcessingResult> {\n  const { plugins, signal, onDiagnostic, ...generateConfig } = config;\n  signal?.throwIfAborted();\n  const coerced = coerceConfig({\n    ...generateConfig,\n    spec: structuredClone(generateConfig.spec) as OpenAPIDocument,\n  });\n  const { spec, ...options } = coerced;\n  const diagnostics: ProcessingDiagnostic[] = [];\n  const pluginNames = plugins.map((plugin) => plugin.name);\n  const configuration = JSON.stringify({\n    pagination: options.pagination,\n    responses: options.responses,\n  });\n\n  for (const plugin of plugins) {\n    signal?.throwIfAborted();\n    const context: ProcessingContext = {\n      spec,\n      options,\n      diagnostics,\n      signal,\n      report(diagnostic) {\n        const reported = { ...diagnostic, plugin: plugin.name };\n        diagnostics.push(reported);\n        onDiagnostic?.(reported);\n        return reported;\n      },\n    };\n    await plugin.process(context);\n    signal?.throwIfAborted();\n  }\n\n  spec['x-sdk-processing'] = { plugins: pluginNames, configuration };\n\n  return { spec, diagnostics };\n}\n"],
   "mappings": "AAEA;AAAA,EAEE,iBAAiB;AAAA,OACZ;AAyCP,eAAsB,YACpB,QAC2B;AAC3B,QAAM,EAAE,SAAS,QAAQ,cAAc,GAAG,eAAe,IAAI;AAC7D,UAAQ,eAAe;AACvB,QAAM,UAAU,aAAa;AAAA,IAC3B,GAAG;AAAA,IACH,MAAM,gBAAgB,eAAe,IAAI;AAAA,EAC3C,CAAC;AACD,QAAM,EAAE,MAAM,GAAG,QAAQ,IAAI;AAC7B,QAAM,cAAsC,CAAC;AAC7C,QAAM,cAAc,QAAQ,IAAI,CAAC,WAAW,OAAO,IAAI;AACvD,QAAM,gBAAgB,KAAK,UAAU;AAAA,IACnC,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,EACrB,CAAC;AAED,aAAW,UAAU,SAAS;AAC5B,YAAQ,eAAe;AACvB,UAAM,UAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,YAAY;AACjB,cAAM,WAAW,EAAE,GAAG,YAAY,QAAQ,OAAO,KAAK;AACtD,oBAAY,KAAK,QAAQ;AACzB,uBAAe,QAAQ;AACvB,eAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,OAAO,QAAQ,OAAO;AAC5B,YAAQ,eAAe;AAAA,EACzB;AAEA,OAAK,kBAAkB,IAAI,EAAE,SAAS,aAAa,cAAc;AAEjE,SAAO,EAAE,MAAM,YAAY;AAC7B;",
   "names": []
 }

package/dist/lib/types.d.ts

@@ -1,7 +1,8 @@
-import type { ComponentsObject, MediaTypeObject, OpenAPIObject, OperationObject, ParameterObject, PathsObject, ReferenceObject, RequestBodyObject, ResponseObject, SchemaObject, SecuritySchemeObject, ServerObject, TagObject } from 'openapi3-ts/oas31';
+import type { MediaTypeObject, OperationObject, ParameterObject, PathsObject, ReferenceObject, RequestBodyObject, ResponseObject, SchemaObject, ServerObject, TagObject } from 'openapi3-ts/oas31';
+import type { OpenAPIComponentsObject, OpenAPIDocument, OpenAPISecuritySchemeObject } from '@sdk-it/core';
 import type { PaginationGuess } from './pagination/guess-pagination.js';
 import type { SidebarData, TagGroups } from './sidebar.js';
-export interface IR extends OpenAPIObject {
+export type IR = Omit<OpenAPIDocument, 'components' | 'paths' | 'servers' | 'tags'> & {
     servers: ServerObject[];
     'x-sdk-processing'?: {
         plugins: string[];
@@ -9,13 +10,13 @@ export interface IR extends OpenAPIObject {
     };
     'x-docs': SidebarData;
     'x-tagGroups': TagGroups[];
-    components: Omit<ComponentsObject, 'schemas'> & {
+    components: Omit<OpenAPIComponentsObject, 'schemas' | 'securitySchemes'> & {
         schemas: Record<string, SchemaObject | ReferenceObject>;
-        securitySchemes: Record<string, SecuritySchemeObject>;
+        securitySchemes: Record<string, OpenAPISecuritySchemeObject>;
     };
     paths: PathsObject;
     tags: TagObject[];
-}
+};
 export interface OurRequestBodyObject extends RequestBodyObject {
     content: Record<string, Omit<MediaTypeObject, 'schema'> & {
         schema: ReferenceObject;

package/dist/lib/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EACf,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,SAAS,EACV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,WAAW,EAAG,SAAQ,aAAa;IACvC,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,kBAAkB,CAAC,EAAE;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,EAAE,WAAW,CAAC;IACtB,aAAa,EAAE,SAAS,EAAE,CAAC;IAC3B,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG;QAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,eAAe,CAAC,CAAC;QACxD,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;KACvD,CAAC;IACF,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,SAAS,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,OAAO,EAAE,MAAM,CACb,MAAM,EACN,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,eAAe,CAAA;KAAE,CAC9D,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,eAAe,EACf,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,aAAa,GAAG,MAAM,CAC7E,GAAG;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CACf,MAAM,EACN,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG;QAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC1C,CACF,CAAC;IACF,WAAW,EAAE,oBAAoB,CAAC;CACnC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AACD,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,SAAS,EACV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,2BAA2B,EAC5B,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,MAAM,EAAE,GAAG,IAAI,CACnB,eAAe,EACf,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAC5C,GAAG;IACF,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,kBAAkB,CAAC,EAAE;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,EAAE,WAAW,CAAC;IACtB,aAAa,EAAE,SAAS,EAAE,CAAC;IAC3B,UAAU,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,iBAAiB,CAAC,GAAG;QACzE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,eAAe,CAAC,CAAC;QACxD,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,SAAS,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,OAAO,EAAE,MAAM,CACb,MAAM,EACN,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,eAAe,CAAA;KAAE,CAC9D,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,eAAe,EACf,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,aAAa,GAAG,MAAM,CAC7E,GAAG;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CACf,MAAM,EACN,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG;QAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC1C,CACF,CAAC;IACF,WAAW,EAAE,oBAAoB,CAAC;CACnC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AACD,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdk-it/spec",
-  "version": "0.46.2",
+  "version": "0.46.4",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -27,7 +27,7 @@
     "!**/*.test.*"
   ],
   "dependencies": {
-    "@sdk-it/core": "0.46.2",
+    "@sdk-it/core": "0.46.4",
     "openapi3-ts": "4.5.0",
     "pluralize": "^8.0.0",
     "stringcase": "^4.3.1",

package/dist/lib/security.d.ts

@@ -1,12 +0,0 @@
-import type { ParameterLocation, ParameterObject, ReferenceObject, SchemaObject, SecurityRequirementObject, SecuritySchemeObject } from 'openapi3-ts/oas31';
-import type { IR } from './types.js';
-type OIn = ParameterLocation | 'input';
-export type OurParameter = Omit<ParameterObject, 'in' | 'schema'> & {
-    in: OIn;
-    'x-optionName'?: string;
-    schema: SchemaObject;
-};
-export declare function securityToOptions(spec: IR, security: SecurityRequirementObject[], securitySchemes: Record<string, SecuritySchemeObject | ReferenceObject>, staticIn?: OIn): OurParameter[];
-export declare function security(spec: IR): OurParameter[];
-export {};
-//# sourceMappingURL=security.d.ts.map

package/dist/lib/security.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAErC,KAAK,GAAG,GAAG,iBAAiB,GAAG,OAAO,CAAC;AAEvC,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,QAAQ,CAAC,GAAG;IAClE,EAAE,EAAE,GAAG,CAAC;IACR,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,EAAE,EACR,QAAQ,EAAE,yBAAyB,EAAE,EACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,eAAe,CAAC,EACvE,QAAQ,CAAC,EAAE,GAAG,kBAkDf;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,EAAE,kBAiChC"}

package/dist/lib/security.js

@@ -1,78 +0,0 @@
-import { methods } from "@sdk-it/core/paths.js";
-import { resolveRef } from "@sdk-it/core/ref.js";
-function securityToOptions(spec, security2, securitySchemes, staticIn) {
-  const parameters = /* @__PURE__ */ new Map();
-  for (const it of security2) {
-    const [name] = Object.keys(it);
-    if (!name) {
-      continue;
-    }
-    const schema = resolveRef(
-      spec,
-      securitySchemes[name]
-    );
-    if (schema.type === "http") {
-      parameters.set(`${staticIn ?? "header"}:authorization`, {
-        in: staticIn ?? "header",
-        name: "authorization",
-        required: false,
-        schema: { type: "string", "x-prefix": "Bearer " },
-        "x-optionName": "token",
-        example: schema.scheme === "bearer" ? '"<token>"' : `<${schema.scheme}> <token>`
-      });
-      continue;
-    }
-    if (schema.type === "apiKey") {
-      if (!schema.in) {
-        throw new Error(`apiKey security schema must have an "in" field`);
-      }
-      if (!schema.name) {
-        throw new Error(`apiKey security schema must have a "name" field`);
-      }
-      const paramIn = staticIn ?? schema.in;
-      parameters.set(`${paramIn}:${schema.name}`, {
-        in: paramIn,
-        name: schema.name,
-        required: false,
-        schema: { type: "string" },
-        example: `"proj-${crypto.randomUUID().slice(0, 12)}"`
-      });
-      continue;
-    }
-  }
-  return [...parameters.values()];
-}
-function security(spec) {
-  const security2 = spec.security || [];
-  const paths = Object.values(spec.paths ?? {});
-  const options = /* @__PURE__ */ new Map();
-  for (const option of securityToOptions(
-    spec,
-    security2,
-    spec.components.securitySchemes
-  )) {
-    options.set(`${option.in}:${option.name}`, option);
-  }
-  for (const it of paths) {
-    for (const method of methods) {
-      const operation = it[method];
-      if (!operation) {
-        continue;
-      }
-      for (const option of securityToOptions(
-        spec,
-        operation.security || [],
-        spec.components.securitySchemes,
-        "input"
-      )) {
-        options.set(`${option.in}:${option.name}`, option);
-      }
-    }
-  }
-  return [...options.values()];
-}
-export {
-  security,
-  securityToOptions
-};
-//# sourceMappingURL=security.js.map

package/dist/lib/security.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/lib/security.ts"],
-  "sourcesContent": ["import type {\n  ParameterLocation,\n  ParameterObject,\n  ReferenceObject,\n  SchemaObject,\n  SecurityRequirementObject,\n  SecuritySchemeObject,\n} from 'openapi3-ts/oas31';\n\nimport { methods } from '@sdk-it/core/paths.js';\nimport { resolveRef } from '@sdk-it/core/ref.js';\n\nimport type { IR } from './types.js';\n\ntype OIn = ParameterLocation | 'input';\n\nexport type OurParameter = Omit<ParameterObject, 'in' | 'schema'> & {\n  in: OIn;\n  'x-optionName'?: string;\n  schema: SchemaObject;\n};\n\nexport function securityToOptions(\n  spec: IR,\n  security: SecurityRequirementObject[],\n  securitySchemes: Record<string, SecuritySchemeObject | ReferenceObject>,\n  staticIn?: OIn,\n) {\n  // Distinct schemes can resolve to the same parameter (e.g. Figma's\n  // PersonalAccessToken and PlanAccessToken both use the X-Figma-Token\n  // header), so key by location + name to avoid duplicate options.\n  const parameters = new Map<string, OurParameter>();\n  for (const it of security) {\n    const [name] = Object.keys(it);\n    if (!name) {\n      // this means the operation doesn't necessarily require security\n      continue;\n    }\n\n    const schema = resolveRef<SecuritySchemeObject>(\n      spec,\n      securitySchemes[name],\n    );\n    if (schema.type === 'http') {\n      parameters.set(`${staticIn ?? 'header'}:authorization`, {\n        in: staticIn ?? 'header',\n        name: 'authorization',\n        required: false,\n        schema: { type: 'string', 'x-prefix': 'Bearer ' },\n        'x-optionName': 'token',\n        example:\n          schema.scheme === 'bearer'\n            ? '\"<token>\"'\n            : `<${schema.scheme}> <token>`,\n      });\n      continue;\n    }\n    if (schema.type === 'apiKey') {\n      if (!schema.in) {\n        throw new Error(`apiKey security schema must have an \"in\" field`);\n      }\n      if (!schema.name) {\n        throw new Error(`apiKey security schema must have a \"name\" field`);\n      }\n      const paramIn = staticIn ?? (schema.in as ParameterLocation);\n      parameters.set(`${paramIn}:${schema.name}`, {\n        in: paramIn,\n        name: schema.name,\n        required: false,\n        schema: { type: 'string' },\n        example: `\"proj-${crypto.randomUUID().slice(0, 12)}\"`,\n      });\n      continue;\n    }\n  }\n  return [...parameters.values()];\n}\n\nexport function security(spec: IR) {\n  const security = spec.security || [];\n  const paths = Object.values(spec.paths ?? {});\n\n  // Same keying as securityToOptions: two parameters may share a name but\n  // differ in location (e.g. header vs query api keys), so name alone drops\n  // credentials.\n  const options = new Map<string, OurParameter>();\n  for (const option of securityToOptions(\n    spec,\n    security,\n    spec.components.securitySchemes,\n  )) {\n    options.set(`${option.in}:${option.name}`, option);\n  }\n\n  for (const it of paths) {\n    for (const method of methods) {\n      const operation = it[method];\n      if (!operation) {\n        continue;\n      }\n      for (const option of securityToOptions(\n        spec,\n        operation.security || [],\n        spec.components.securitySchemes,\n        'input',\n      )) {\n        options.set(`${option.in}:${option.name}`, option);\n      }\n    }\n  }\n  return [...options.values()];\n}\n"],
-  "mappings": "AASA,SAAS,eAAe;AACxB,SAAS,kBAAkB;AAYpB,SAAS,kBACd,MACAA,WACA,iBACA,UACA;AAIA,QAAM,aAAa,oBAAI,IAA0B;AACjD,aAAW,MAAMA,WAAU;AACzB,UAAM,CAAC,IAAI,IAAI,OAAO,KAAK,EAAE;AAC7B,QAAI,CAAC,MAAM;AAET;AAAA,IACF;AAEA,UAAM,SAAS;AAAA,MACb;AAAA,MACA,gBAAgB,IAAI;AAAA,IACtB;AACA,QAAI,OAAO,SAAS,QAAQ;AAC1B,iBAAW,IAAI,GAAG,YAAY,QAAQ,kBAAkB;AAAA,QACtD,IAAI,YAAY;AAAA,QAChB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,YAAY,UAAU;AAAA,QAChD,gBAAgB;AAAA,QAChB,SACE,OAAO,WAAW,WACd,cACA,IAAI,OAAO,MAAM;AAAA,MACzB,CAAC;AACD;AAAA,IACF;AACA,QAAI,OAAO,SAAS,UAAU;AAC5B,UAAI,CAAC,OAAO,IAAI;AACd,cAAM,IAAI,MAAM,gDAAgD;AAAA,MAClE;AACA,UAAI,CAAC,OAAO,MAAM;AAChB,cAAM,IAAI,MAAM,iDAAiD;AAAA,MACnE;AACA,YAAM,UAAU,YAAa,OAAO;AACpC,iBAAW,IAAI,GAAG,OAAO,IAAI,OAAO,IAAI,IAAI;AAAA,QAC1C,IAAI;AAAA,QACJ,MAAM,OAAO;AAAA,QACb,UAAU;AAAA,QACV,QAAQ,EAAE,MAAM,SAAS;AAAA,QACzB,SAAS,SAAS,OAAO,WAAW,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,MACpD,CAAC;AACD;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC,GAAG,WAAW,OAAO,CAAC;AAChC;AAEO,SAAS,SAAS,MAAU;AACjC,QAAMA,YAAW,KAAK,YAAY,CAAC;AACnC,QAAM,QAAQ,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC;AAK5C,QAAM,UAAU,oBAAI,IAA0B;AAC9C,aAAW,UAAU;AAAA,IACnB;AAAA,IACAA;AAAA,IACA,KAAK,WAAW;AAAA,EAClB,GAAG;AACD,YAAQ,IAAI,GAAG,OAAO,EAAE,IAAI,OAAO,IAAI,IAAI,MAAM;AAAA,EACnD;AAEA,aAAW,MAAM,OAAO;AACtB,eAAW,UAAU,SAAS;AAC5B,YAAM,YAAY,GAAG,MAAM;AAC3B,UAAI,CAAC,WAAW;AACd;AAAA,MACF;AACA,iBAAW,UAAU;AAAA,QACnB;AAAA,QACA,UAAU,YAAY,CAAC;AAAA,QACvB,KAAK,WAAW;AAAA,QAChB;AAAA,MACF,GAAG;AACD,gBAAQ,IAAI,GAAG,OAAO,EAAE,IAAI,OAAO,IAAI,IAAI,MAAM;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;AAC7B;",
-  "names": ["security"]
-}