@stackwright-pro/openapi 0.2.0 → 0.2.1

package/dist/index.js

@@ -5817,8 +5817,9 @@ var OpenAPIParser = class {
    * Detect OpenAPI version from document
    */
   detectVersion(document) {
-    if ("openapi" in document) {
-      return document.openapi;
+    const openapiVersion = "openapi" in document ? document.openapi : void 0;
+    if (openapiVersion !== void 0) {
+      return openapiVersion;
     }
     throw new Error("Invalid OpenAPI document: missing openapi version field");
   }
@@ -5829,7 +5830,9 @@ var OpenAPIParser = class {
     if (error instanceof Error) {
       const message = `Failed to parse OpenAPI spec from "${specPath}": ${error.message}`;
       const enhancedError = new Error(message);
-      enhancedError.stack = error.stack;
+      if (error.stack !== void 0) {
+        enhancedError.stack = error.stack;
+      }
       return enhancedError;
     }
     return new Error(`Failed to parse OpenAPI spec from "${specPath}": ${String(error)}`);
@@ -5902,9 +5905,9 @@ var SchemaResolver = class {
           endpoints.push({
             path: path3,
             method,
-            operationId: operation.operationId,
-            summary: operation.summary,
-            description: operation.description
+            ...operation.operationId !== void 0 && { operationId: operation.operationId },
+            ...operation.summary !== void 0 && { summary: operation.summary },
+            ...operation.description !== void 0 && { description: operation.description }
           });
         }
       }
@@ -6249,18 +6252,21 @@ var CollectionProviderGenerator = class {
     }
     const isArray = schema.type === "array";
     const schemaName = `${this.capitalize(collectionName)}Schema`;
-    return this.generateProviderCode({
+    const params = {
       providerName,
       collectionName,
       endpoint,
       slugField,
       method,
       baseUrl,
-      auth,
       schemaName,
       isArray,
       bare
-    });
+    };
+    if (auth !== void 0) {
+      params.auth = auth;
+    }
+    return this.generateProviderCode(params);
   }
   /**
    * Generate the complete provider code
@@ -6282,12 +6288,12 @@ var CollectionProviderGenerator = class {
     const arraySchemaName = `${schemaName.replace(/Schema$/, "")}ArraySchema`;
     const validationSchema = isArray ? arraySchemaName : schemaName;
     const imports = bare ? "" : `import type { CollectionProvider, CollectionItem } from '@stackwright/collections';
-import { ${isArray ? arraySchemaName : schemaName} } from './schemas';
+import { ${isArray ? arraySchemaName : schemaName}} } from './schemas';
 
 `;
     return `${imports}/**
  * CollectionProvider for ${collectionName}
- * 
+ *
  * Generated from OpenAPI endpoint: ${method.toUpperCase()} ${endpoint}
  */
 export class ${providerName} implements CollectionProvider {
@@ -6433,7 +6439,10 @@ export class ${providerName} implements CollectionProvider {
    */
   getBaseUrl() {
     if ("servers" in this.document && this.document.servers && this.document.servers.length > 0) {
-      return this.document.servers[0].url;
+      const firstServer = this.document.servers[0];
+      if (firstServer !== void 0) {
+        return firstServer.url;
+      }
     }
     return "http://localhost:3000";
   }
@@ -6461,7 +6470,8 @@ export class ${providerName} implements CollectionProvider {
    */
   guessTitle(slugField) {
     const titleFields = ["title", "name", "label", "displayName"];
-    return titleFields[0] + ` || item.${slugField}`;
+    const firstField = titleFields[0];
+    return firstField !== void 0 ? firstField : `item.${slugField}`;
   }
 };
 
@@ -6471,7 +6481,9 @@ var ClientGenerator = class {
   constructor(document, schemaMapping) {
     this.document = document;
     this.resolver = new SchemaResolver(document);
-    this.schemaMapping = schemaMapping;
+    if (schemaMapping !== void 0) {
+      this.schemaMapping = schemaMapping;
+    }
     this.requiredSchemas = /* @__PURE__ */ new Set();
     this.generatedRequestSchemas = /* @__PURE__ */ new Set();
   }
@@ -6829,7 +6841,8 @@ ${paramSchemas.join(",\n")}
    */
   extractComponentName(ref) {
     const parts = ref.split("/");
-    return parts[parts.length - 1];
+    const lastPart = parts[parts.length - 1];
+    return lastPart ?? ref;
   }
   /**
    * Escape string for use in Zod .describe()
@@ -7576,9 +7589,9 @@ ${paramSchemas.join(",\n")}
           endpoints.push({
             path: path3,
             method,
-            operationId: operation.operationId,
-            summary: operation.summary,
-            description: operation.description,
+            ...operation.operationId !== void 0 && { operationId: operation.operationId },
+            ...operation.summary !== void 0 && { summary: operation.summary },
+            ...operation.description !== void 0 && { description: operation.description },
             operation
           });
         }
@@ -7666,7 +7679,8 @@ ${paramSchemas.join(",\n")}
    */
   getDefaultBaseUrl() {
     if ("servers" in this.document && this.document.servers && this.document.servers.length > 0) {
-      return this.document.servers[0].url;
+      const firstServer = this.document.servers[0];
+      return firstServer ? firstServer.url : "http://localhost:3000";
     }
     return "http://localhost:3000";
   }
@@ -7761,13 +7775,18 @@ var EndpointFilter = class {
         let matches = true;
         for (let i = 0; i < patternSegments.length; i++) {
           const pSeg = patternSegments[i];
+          if (pSeg === void 0) {
+            matches = false;
+            break;
+          }
           if (pSeg === "*" || pSeg === "**") {
             continue;
           }
           if (pSeg.startsWith("{") && pSeg.endsWith("}")) {
             continue;
           }
-          if (pSeg !== pathSegments[i]) {
+          const pathSeg = pathSegments[i];
+          if (pSeg !== pathSeg) {
             matches = false;
             break;
           }
@@ -7925,19 +7944,20 @@ var ApprovedSpecsValidator = class {
         }
       }
       const ipv4Match = redirectUrl.hostname.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
-      if (ipv4Match) {
+      if (ipv4Match && ipv4Match.length >= 5) {
         const octets = ipv4Match.slice(1, 5).map(Number);
-        const [first, second] = octets;
-        if (first === 10) {
+        const first = octets[0];
+        const second = octets[1];
+        if (first !== void 0 && first === 10) {
           return false;
         }
-        if (first === 172 && second >= 16 && second <= 31) {
+        if (first !== void 0 && second !== void 0 && first === 172 && second >= 16 && second <= 31) {
           return false;
         }
-        if (first === 192 && second === 168) {
+        if (first !== void 0 && second !== void 0 && first === 192 && second === 168) {
           return false;
         }
-        if (first === 127) {
+        if (first !== void 0 && first === 127) {
           return false;
         }
       }
@@ -8501,12 +8521,12 @@ import type * as schemas from './schemas';
         slugField: collection.slug_field,
         filters: collection.filters
       };
-      let providerOptions = { bare: true };
+      const providerOptions = { bare: true };
       if (auth) {
         if (auth.type === "bearer" || auth.type === "apiKey") {
           providerOptions.auth = {
             type: auth.type,
-            headerName: auth.type === "apiKey" ? "X-API-Key" : void 0
+            ...auth.type === "apiKey" && { headerName: "X-API-Key" }
           };
         } else if (auth.type === "oauth2") {
           console.warn(
@@ -8567,7 +8587,8 @@ import { ${Array.from(schemaImports).join(", ")} } from './schemas';
   }
   extractComponentName(ref) {
     const parts = ref.split("/");
-    return parts[parts.length - 1];
+    const lastPart = parts[parts.length - 1];
+    return lastPart ?? ref;
   }
   getOperationTypeName(operationId) {
     return operationId.charAt(0).toUpperCase() + operationId.slice(1);
@@ -8645,22 +8666,24 @@ function validateFetchUrl(baseUrl) {
   const ip = url.hostname;
   if (/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(ip)) {
     const octets = ip.split(".").map(Number);
-    if (octets[0] === 127) {
+    const first = octets[0];
+    const second = octets[1];
+    if (first !== void 0 && first === 127) {
       throw new Error("SSRF Prevention: Blocked loopback address: " + ip);
     }
-    if (octets[0] === 10) {
+    if (first !== void 0 && first === 10) {
       throw new Error("SSRF Prevention: Blocked private address: " + ip);
     }
-    if (octets[0] === 172 && octets[1] >= 16 && octets[1] <= 31) {
+    if (first !== void 0 && second !== void 0 && first === 172 && second >= 16 && second <= 31) {
       throw new Error("SSRF Prevention: Blocked private address: " + ip);
     }
-    if (octets[0] === 192 && octets[1] === 168) {
+    if (first !== void 0 && second !== void 0 && first === 192 && second === 168) {
       throw new Error("SSRF Prevention: Blocked private address: " + ip);
     }
-    if (octets[0] === 169 && octets[1] === 254) {
+    if (first !== void 0 && second !== void 0 && first === 169 && second === 254) {
       throw new Error("SSRF Prevention: Blocked link-local address: " + ip);
     }
-    if (octets[0] === 0) {
+    if (first !== void 0 && first === 0) {
       throw new Error("SSRF Prevention: Blocked current network address: " + ip);
     }
   }
@@ -8701,7 +8724,7 @@ function createOpenAPIFetcher(config) {
     const response = await fetch(url.toString(), {
       method: method.toUpperCase(),
       headers: requestHeaders,
-      body: supportsBody && body ? JSON.stringify(body) : void 0
+      body: supportsBody && body ? JSON.stringify(body) : null
     });
     if (!response.ok) {
       const safeStatus = response.status;

package/dist/index.mjs

@@ -5793,8 +5793,9 @@ var OpenAPIParser = class {
    * Detect OpenAPI version from document
    */
   detectVersion(document) {
-    if ("openapi" in document) {
-      return document.openapi;
+    const openapiVersion = "openapi" in document ? document.openapi : void 0;
+    if (openapiVersion !== void 0) {
+      return openapiVersion;
     }
     throw new Error("Invalid OpenAPI document: missing openapi version field");
   }
@@ -5805,7 +5806,9 @@ var OpenAPIParser = class {
     if (error instanceof Error) {
       const message = `Failed to parse OpenAPI spec from "${specPath}": ${error.message}`;
       const enhancedError = new Error(message);
-      enhancedError.stack = error.stack;
+      if (error.stack !== void 0) {
+        enhancedError.stack = error.stack;
+      }
       return enhancedError;
     }
     return new Error(`Failed to parse OpenAPI spec from "${specPath}": ${String(error)}`);
@@ -5878,9 +5881,9 @@ var SchemaResolver = class {
           endpoints.push({
             path: path3,
             method,
-            operationId: operation.operationId,
-            summary: operation.summary,
-            description: operation.description
+            ...operation.operationId !== void 0 && { operationId: operation.operationId },
+            ...operation.summary !== void 0 && { summary: operation.summary },
+            ...operation.description !== void 0 && { description: operation.description }
           });
         }
       }
@@ -6225,18 +6228,21 @@ var CollectionProviderGenerator = class {
     }
     const isArray = schema.type === "array";
     const schemaName = `${this.capitalize(collectionName)}Schema`;
-    return this.generateProviderCode({
+    const params = {
       providerName,
       collectionName,
       endpoint,
       slugField,
       method,
       baseUrl,
-      auth,
       schemaName,
       isArray,
       bare
-    });
+    };
+    if (auth !== void 0) {
+      params.auth = auth;
+    }
+    return this.generateProviderCode(params);
   }
   /**
    * Generate the complete provider code
@@ -6258,12 +6264,12 @@ var CollectionProviderGenerator = class {
     const arraySchemaName = `${schemaName.replace(/Schema$/, "")}ArraySchema`;
     const validationSchema = isArray ? arraySchemaName : schemaName;
     const imports = bare ? "" : `import type { CollectionProvider, CollectionItem } from '@stackwright/collections';
-import { ${isArray ? arraySchemaName : schemaName} } from './schemas';
+import { ${isArray ? arraySchemaName : schemaName}} } from './schemas';
 
 `;
     return `${imports}/**
  * CollectionProvider for ${collectionName}
- * 
+ *
  * Generated from OpenAPI endpoint: ${method.toUpperCase()} ${endpoint}
  */
 export class ${providerName} implements CollectionProvider {
@@ -6409,7 +6415,10 @@ export class ${providerName} implements CollectionProvider {
    */
   getBaseUrl() {
     if ("servers" in this.document && this.document.servers && this.document.servers.length > 0) {
-      return this.document.servers[0].url;
+      const firstServer = this.document.servers[0];
+      if (firstServer !== void 0) {
+        return firstServer.url;
+      }
     }
     return "http://localhost:3000";
   }
@@ -6437,7 +6446,8 @@ export class ${providerName} implements CollectionProvider {
    */
   guessTitle(slugField) {
     const titleFields = ["title", "name", "label", "displayName"];
-    return titleFields[0] + ` || item.${slugField}`;
+    const firstField = titleFields[0];
+    return firstField !== void 0 ? firstField : `item.${slugField}`;
   }
 };
 
@@ -6447,7 +6457,9 @@ var ClientGenerator = class {
   constructor(document, schemaMapping) {
     this.document = document;
     this.resolver = new SchemaResolver(document);
-    this.schemaMapping = schemaMapping;
+    if (schemaMapping !== void 0) {
+      this.schemaMapping = schemaMapping;
+    }
     this.requiredSchemas = /* @__PURE__ */ new Set();
     this.generatedRequestSchemas = /* @__PURE__ */ new Set();
   }
@@ -6805,7 +6817,8 @@ ${paramSchemas.join(",\n")}
    */
   extractComponentName(ref) {
     const parts = ref.split("/");
-    return parts[parts.length - 1];
+    const lastPart = parts[parts.length - 1];
+    return lastPart ?? ref;
   }
   /**
    * Escape string for use in Zod .describe()
@@ -7552,9 +7565,9 @@ ${paramSchemas.join(",\n")}
           endpoints.push({
             path: path3,
             method,
-            operationId: operation.operationId,
-            summary: operation.summary,
-            description: operation.description,
+            ...operation.operationId !== void 0 && { operationId: operation.operationId },
+            ...operation.summary !== void 0 && { summary: operation.summary },
+            ...operation.description !== void 0 && { description: operation.description },
             operation
           });
         }
@@ -7642,7 +7655,8 @@ ${paramSchemas.join(",\n")}
    */
   getDefaultBaseUrl() {
     if ("servers" in this.document && this.document.servers && this.document.servers.length > 0) {
-      return this.document.servers[0].url;
+      const firstServer = this.document.servers[0];
+      return firstServer ? firstServer.url : "http://localhost:3000";
     }
     return "http://localhost:3000";
   }
@@ -7737,13 +7751,18 @@ var EndpointFilter = class {
         let matches = true;
         for (let i = 0; i < patternSegments.length; i++) {
           const pSeg = patternSegments[i];
+          if (pSeg === void 0) {
+            matches = false;
+            break;
+          }
           if (pSeg === "*" || pSeg === "**") {
             continue;
           }
           if (pSeg.startsWith("{") && pSeg.endsWith("}")) {
             continue;
           }
-          if (pSeg !== pathSegments[i]) {
+          const pathSeg = pathSegments[i];
+          if (pSeg !== pathSeg) {
             matches = false;
             break;
           }
@@ -7901,19 +7920,20 @@ var ApprovedSpecsValidator = class {
         }
       }
       const ipv4Match = redirectUrl.hostname.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
-      if (ipv4Match) {
+      if (ipv4Match && ipv4Match.length >= 5) {
         const octets = ipv4Match.slice(1, 5).map(Number);
-        const [first, second] = octets;
-        if (first === 10) {
+        const first = octets[0];
+        const second = octets[1];
+        if (first !== void 0 && first === 10) {
           return false;
         }
-        if (first === 172 && second >= 16 && second <= 31) {
+        if (first !== void 0 && second !== void 0 && first === 172 && second >= 16 && second <= 31) {
           return false;
         }
-        if (first === 192 && second === 168) {
+        if (first !== void 0 && second !== void 0 && first === 192 && second === 168) {
           return false;
         }
-        if (first === 127) {
+        if (first !== void 0 && first === 127) {
           return false;
         }
       }
@@ -8477,12 +8497,12 @@ import type * as schemas from './schemas';
         slugField: collection.slug_field,
         filters: collection.filters
       };
-      let providerOptions = { bare: true };
+      const providerOptions = { bare: true };
       if (auth) {
         if (auth.type === "bearer" || auth.type === "apiKey") {
           providerOptions.auth = {
             type: auth.type,
-            headerName: auth.type === "apiKey" ? "X-API-Key" : void 0
+            ...auth.type === "apiKey" && { headerName: "X-API-Key" }
           };
         } else if (auth.type === "oauth2") {
           console.warn(
@@ -8543,7 +8563,8 @@ import { ${Array.from(schemaImports).join(", ")} } from './schemas';
   }
   extractComponentName(ref) {
     const parts = ref.split("/");
-    return parts[parts.length - 1];
+    const lastPart = parts[parts.length - 1];
+    return lastPart ?? ref;
   }
   getOperationTypeName(operationId) {
     return operationId.charAt(0).toUpperCase() + operationId.slice(1);
@@ -8621,22 +8642,24 @@ function validateFetchUrl(baseUrl) {
   const ip = url.hostname;
   if (/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(ip)) {
     const octets = ip.split(".").map(Number);
-    if (octets[0] === 127) {
+    const first = octets[0];
+    const second = octets[1];
+    if (first !== void 0 && first === 127) {
       throw new Error("SSRF Prevention: Blocked loopback address: " + ip);
     }
-    if (octets[0] === 10) {
+    if (first !== void 0 && first === 10) {
       throw new Error("SSRF Prevention: Blocked private address: " + ip);
     }
-    if (octets[0] === 172 && octets[1] >= 16 && octets[1] <= 31) {
+    if (first !== void 0 && second !== void 0 && first === 172 && second >= 16 && second <= 31) {
       throw new Error("SSRF Prevention: Blocked private address: " + ip);
     }
-    if (octets[0] === 192 && octets[1] === 168) {
+    if (first !== void 0 && second !== void 0 && first === 192 && second === 168) {
       throw new Error("SSRF Prevention: Blocked private address: " + ip);
     }
-    if (octets[0] === 169 && octets[1] === 254) {
+    if (first !== void 0 && second !== void 0 && first === 169 && second === 254) {
       throw new Error("SSRF Prevention: Blocked link-local address: " + ip);
     }
-    if (octets[0] === 0) {
+    if (first !== void 0 && first === 0) {
       throw new Error("SSRF Prevention: Blocked current network address: " + ip);
     }
   }
@@ -8677,7 +8700,7 @@ function createOpenAPIFetcher(config) {
     const response = await fetch(url.toString(), {
       method: method.toUpperCase(),
       headers: requestHeaders,
-      body: supportsBody && body ? JSON.stringify(body) : void 0
+      body: supportsBody && body ? JSON.stringify(body) : null
     });
     if (!response.ok) {
       const safeStatus = response.status;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackwright-pro/openapi",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "OpenAPI spec to typed Stackwright application compiler",
   "license": "PROPRIETARY",
   "main": "./dist/index.js",
@@ -34,6 +34,7 @@
   "scripts": {
     "build": "tsup src/index.ts --format cjs,esm --dts --clean",
     "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
-    "test": "vitest"
+    "test": "vitest",
+    "test:coverage": "vitest run --coverage"
   }
 }