@stackwright-pro/openapi 0.2.0 → 0.2.2-alpha.0

package/dist/index.js

@@ -1,4 +1,24 @@
-"use strict";
+'use strict';
+
+var SwaggerParser = require('@apidevtools/swagger-parser');
+var zodToTs = require('zod-to-ts');
+var fs = require('fs');
+var path2 = require('path');
+var crypto = require('crypto');
+var https = require('https');
+var http = require('http');
+var url = require('url');
+var net = require('net');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var SwaggerParser__default = /*#__PURE__*/_interopDefault(SwaggerParser);
+var fs__default = /*#__PURE__*/_interopDefault(fs);
+var path2__default = /*#__PURE__*/_interopDefault(path2);
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+var https__default = /*#__PURE__*/_interopDefault(https);
+var http__default = /*#__PURE__*/_interopDefault(http);
+
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -8,10 +28,6 @@ var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __commonJS = (cb, mod) => function __require() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -25,15 +41,13 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   // file that has been converted to a CommonJS file using a Babel-
   // compatible transform (i.e. "__esModule" has not been set), then set
   // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
   mod
 ));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // ../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/analyzer.js
 var require_analyzer = __commonJS({
-  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/analyzer.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/analyzer.js"(exports$1, module) {
     var AnalyzerOptions = class {
       constructor(heuristic_replimit) {
         this.heuristic_replimit = heuristic_replimit;
@@ -54,7 +68,7 @@ var require_analyzer = __commonJS({
         return null;
       }
     };
-    module2.exports = function(re, replimit) {
+    module.exports = function(re, replimit) {
       let myRegExp = null;
       let ast = null;
       try {
@@ -88,7 +102,7 @@ var require_analyzer = __commonJS({
       });
       return maxObservedStarHeight <= 1 && repetitionCount <= replimit;
     };
-    module2.exports = {
+    module.exports = {
       "AnalyzerOptions": AnalyzerOptions,
       "Analyzer": Analyzer
     };
@@ -97,9 +111,8 @@ var require_analyzer = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-dotall-s-transform.js
 var require_compat_dotall_s_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-dotall-s-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-dotall-s-transform.js"(exports$1, module) {
+    module.exports = {
       // Whether `u` flag present. In which case we transform to
       // \u{10FFFF} instead of \uFFFF.
       _hasUFlag: false,
@@ -149,9 +162,8 @@ var require_compat_dotall_s_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-named-capturing-groups-transform.js
 var require_compat_named_capturing_groups_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-named-capturing-groups-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-named-capturing-groups-transform.js"(exports$1, module) {
+    module.exports = {
       // To track the names of the groups, and return them
       // in the transform result state.
       //
@@ -193,9 +205,8 @@ var require_compat_named_capturing_groups_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-x-flag-transform.js
 var require_compat_x_flag_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-x-flag-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/compat-x-flag-transform.js"(exports$1, module) {
+    module.exports = {
       RegExp: function RegExp2(_ref) {
         var node = _ref.node;
         if (node.flags.includes("x")) {
@@ -208,9 +219,8 @@ var require_compat_x_flag_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/index.js
 var require_transforms = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/index.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/transforms/index.js"(exports$1, module) {
+    module.exports = {
       // "dotAll" `s` flag
       dotAll: require_compat_dotall_s_transform(),
       // Named capturing groups.
@@ -223,8 +233,7 @@ var require_transforms = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/generator/index.js
 var require_generator = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/generator/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/generator/index.js"(exports$1, module) {
     function gen(node) {
       return node ? generator[node.type](node) : "";
     }
@@ -350,7 +359,7 @@ var require_generator = __commonJS({
         return "\\" + escapeChar + "{" + namePart + node.value + "}";
       }
     };
-    module2.exports = {
+    module.exports = {
       /**
        * Generates a regexp string from an AST.
        *
@@ -363,8 +372,7 @@ var require_generator = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/unicode/parser-unicode-properties.js
 var require_parser_unicode_properties = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/unicode/parser-unicode-properties.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/unicode/parser-unicode-properties.js"(exports$1, module) {
     var NON_BINARY_PROP_NAMES_TO_ALIASES = {
       General_Category: "gc",
       Script: "sc",
@@ -687,7 +695,7 @@ var require_parser_unicode_properties = __commonJS({
       }
       return null;
     }
-    module2.exports = {
+    module.exports = {
       isAlias,
       isValidName,
       isValidValue,
@@ -710,8 +718,7 @@ var require_parser_unicode_properties = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/generated/regexp-tree.js
 var require_regexp_tree = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/generated/regexp-tree.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/generated/regexp-tree.js"(exports$1, module) {
     var _slicedToArray = /* @__PURE__ */ (function() {
       function sliceIterator(arr, i) {
         var _arr = [];
@@ -756,7 +763,6 @@ var require_regexp_tree = __commonJS({
       }
     }
     var yytext = void 0;
-    var yyleng = void 0;
     var yy = {};
     var __ = void 0;
     var __loc = void 0;
@@ -811,7 +817,6 @@ var require_regexp_tree = __commonJS({
       if (_2loc) {
         _loc = loc(_1loc || _2loc, _3loc || _2loc);
       }
-      ;
       __ = Node({
         type: "Disjunction",
         left: _1,
@@ -1280,7 +1285,7 @@ var require_regexp_tree = __commonJS({
           }
           if (matched !== null) {
             yytext = matched;
-            yyleng = yytext.length;
+            yytext.length;
             var token = lexRule[1].call(this);
             if (!token) {
               return this.getNextToken();
@@ -1462,7 +1467,7 @@ var require_regexp_tree = __commonJS({
             var reduceStackEntry = { symbol: production[0] };
             if (hasSemanticAction) {
               yytext = shiftedToken ? shiftedToken.value : null;
-              yyleng = shiftedToken ? shiftedToken.value.length : null;
+              shiftedToken ? shiftedToken.value.length : null;
               var semanticActionArgs = locationArgs !== null ? semanticValueArgs.concat(locationArgs) : semanticValueArgs;
               production[2].apply(production, _toConsumableArray(semanticActionArgs));
               reduceStackEntry.semanticValue = __;
@@ -1851,28 +1856,26 @@ var require_regexp_tree = __commonJS({
     function parseError(message) {
       throw new SyntaxError(message);
     }
-    module2.exports = yyparse;
+    module.exports = yyparse;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/index.js
 var require_parser = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/parser/index.js"(exports$1, module) {
     var regexpTreeParser = require_regexp_tree();
     var generatedParseFn = regexpTreeParser.parse.bind(regexpTreeParser);
     regexpTreeParser.parse = function(regexp, options) {
       return generatedParseFn("" + regexp, options);
     };
     regexpTreeParser.setOptions({ captureLocations: false });
-    module2.exports = regexpTreeParser;
+    module.exports = regexpTreeParser;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/traverse/node-path.js
 var require_node_path = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/traverse/node-path.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/traverse/node-path.js"(exports$1, module) {
     var _createClass = /* @__PURE__ */ (function() {
       function defineProperties(target, props) {
         for (var i = 0; i < props.length; i++) {
@@ -2198,14 +2201,13 @@ var require_node_path = __commonJS({
       }
       return value;
     }
-    module2.exports = NodePath;
+    module.exports = NodePath;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/traverse/index.js
 var require_traverse = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/traverse/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/traverse/index.js"(exports$1, module) {
     var NodePath = require_node_path();
     function astTraverse(root) {
       var options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
@@ -2254,7 +2256,7 @@ var require_traverse = __commonJS({
       }
       visit(root, null);
     }
-    module2.exports = {
+    module.exports = {
       /**
        * Traverses an AST.
        *
@@ -2439,8 +2441,7 @@ var require_traverse = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/transform/index.js
 var require_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/transform/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/transform/index.js"(exports$1, module) {
     var _createClass = /* @__PURE__ */ (function() {
       function defineProperties(target, props) {
         for (var i = 0; i < props.length; i++) {
@@ -2522,7 +2523,7 @@ var require_transform = __commonJS({
       }]);
       return TransformResult2;
     })();
-    module2.exports = {
+    module.exports = {
       /**
        * Expose `TransformResult`.
        */
@@ -2573,11 +2574,10 @@ var require_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/index.js
 var require_compat_transpiler = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/index.js"(exports$1, module) {
     var compatTransforms = require_transforms();
     var _transform = require_transform();
-    module2.exports = {
+    module.exports = {
       /**
        * Translates a regexp in new syntax to equivalent regexp in old syntax.
        *
@@ -2609,9 +2609,8 @@ var require_compat_transpiler = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/utils/clone.js
 var require_clone = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/utils/clone.js"(exports2, module2) {
-    "use strict";
-    module2.exports = function clone(obj) {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/utils/clone.js"(exports$1, module) {
+    module.exports = function clone(obj) {
       if (obj === null || typeof obj !== "object") {
         return obj;
       }
@@ -2631,9 +2630,8 @@ var require_clone = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-surrogate-pair-to-single-unicode-transform.js
 var require_char_surrogate_pair_to_single_unicode_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-surrogate-pair-to-single-unicode-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-surrogate-pair-to-single-unicode-transform.js"(exports$1, module) {
+    module.exports = {
       shouldRun: function shouldRun(ast) {
         return ast.flags.includes("u");
       },
@@ -2651,15 +2649,14 @@ var require_char_surrogate_pair_to_single_unicode_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-code-to-simple-char-transform.js
 var require_char_code_to_simple_char_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-code-to-simple-char-transform.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-code-to-simple-char-transform.js"(exports$1, module) {
     var UPPER_A_CP = "A".codePointAt(0);
     var UPPER_Z_CP = "Z".codePointAt(0);
     var LOWER_A_CP = "a".codePointAt(0);
     var LOWER_Z_CP = "z".codePointAt(0);
     var DIGIT_0_CP = "0".codePointAt(0);
     var DIGIT_9_CP = "9".codePointAt(0);
-    module2.exports = {
+    module.exports = {
       Char: function Char(path3) {
         var node = path3.node, parent = path3.parent;
         if (isNaN(node.codePoint) || node.kind === "simple") {
@@ -2705,11 +2702,10 @@ var require_char_code_to_simple_char_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-case-insensitive-lowercase-transform.js
 var require_char_case_insensitive_lowercase_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-case-insensitive-lowercase-transform.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-case-insensitive-lowercase-transform.js"(exports$1, module) {
     var UPPER_A_CP = "A".codePointAt(0);
     var UPPER_Z_CP = "Z".codePointAt(0);
-    module2.exports = {
+    module.exports = {
       _AZClassRanges: null,
       _hasUFlag: false,
       init: function init(ast) {
@@ -2782,9 +2778,8 @@ var require_char_case_insensitive_lowercase_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-remove-duplicates-transform.js
 var require_char_class_remove_duplicates_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-remove-duplicates-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-remove-duplicates-transform.js"(exports$1, module) {
+    module.exports = {
       CharacterClass: function CharacterClass(path3) {
         var node = path3.node;
         var sources = {};
@@ -2804,8 +2799,7 @@ var require_char_class_remove_duplicates_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/transform/utils.js
 var require_utils = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/transform/utils.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/transform/utils.js"(exports$1, module) {
     function _toConsumableArray(arr) {
       if (Array.isArray(arr)) {
         for (var i = 0, arr2 = Array(arr.length); i < arr.length; i++) {
@@ -2855,7 +2849,7 @@ var require_utils = __commonJS({
         }
       }
     }
-    module2.exports = {
+    module.exports = {
       disjunctionToList,
       listToDisjunction,
       increaseQuantifierByOne
@@ -2865,11 +2859,10 @@ var require_utils = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/quantifiers-merge-transform.js
 var require_quantifiers_merge_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/quantifiers-merge-transform.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/quantifiers-merge-transform.js"(exports$1, module) {
     var _require = require_utils();
     var increaseQuantifierByOne = _require.increaseQuantifierByOne;
-    module2.exports = {
+    module.exports = {
       Repetition: function Repetition(path3) {
         var node = path3.node, parent = path3.parent;
         if (parent.type !== "Alternative" || !path3.index) {
@@ -2933,9 +2926,8 @@ var require_quantifiers_merge_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/quantifier-range-to-symbol-transform.js
 var require_quantifier_range_to_symbol_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/quantifier-range-to-symbol-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/quantifier-range-to-symbol-transform.js"(exports$1, module) {
+    module.exports = {
       Quantifier: function Quantifier(path3) {
         var node = path3.node;
         if (node.kind !== "Range") {
@@ -2974,9 +2966,8 @@ var require_quantifier_range_to_symbol_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-classranges-to-chars-transform.js
 var require_char_class_classranges_to_chars_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-classranges-to-chars-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-classranges-to-chars-transform.js"(exports$1, module) {
+    module.exports = {
       ClassRange: function ClassRange(path3) {
         var node = path3.node;
         if (node.from.codePoint === node.to.codePoint) {
@@ -2992,8 +2983,7 @@ var require_char_class_classranges_to_chars_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-to-meta-transform.js
 var require_char_class_to_meta_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-to-meta-transform.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-to-meta-transform.js"(exports$1, module) {
     function _toConsumableArray(arr) {
       if (Array.isArray(arr)) {
         for (var i = 0, arr2 = Array(arr.length); i < arr.length; i++) {
@@ -3004,7 +2994,7 @@ var require_char_class_to_meta_transform = __commonJS({
         return Array.from(arr);
       }
     }
-    module2.exports = {
+    module.exports = {
       _hasIFlag: false,
       _hasUFlag: false,
       init: function init(ast) {
@@ -3136,9 +3126,8 @@ var require_char_class_to_meta_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-to-single-char-transform.js
 var require_char_class_to_single_char_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-to-single-char-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-to-single-char-transform.js"(exports$1, module) {
+    module.exports = {
       CharacterClass: function CharacterClass(path3) {
         var node = path3.node;
         if (node.expressions.length !== 1 || !hasAppropriateSiblings(path3) || !isAppropriateChar(node.expressions[0])) {
@@ -3195,9 +3184,8 @@ var require_char_class_to_single_char_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-escape-unescape-transform.js
 var require_char_escape_unescape_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-escape-unescape-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-escape-unescape-transform.js"(exports$1, module) {
+    module.exports = {
       _hasXFlag: false,
       init: function init(ast) {
         this._hasXFlag = ast.flags.includes("x");
@@ -3295,9 +3283,8 @@ var require_char_escape_unescape_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-classranges-merge-transform.js
 var require_char_class_classranges_merge_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-classranges-merge-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/char-class-classranges-merge-transform.js"(exports$1, module) {
+    module.exports = {
       _hasIUFlags: false,
       init: function init(ast) {
         this._hasIUFlags = ast.flags.includes("i") && ast.flags.includes("u");
@@ -3514,13 +3501,12 @@ var require_char_class_classranges_merge_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/disjunction-remove-duplicates-transform.js
 var require_disjunction_remove_duplicates_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/disjunction-remove-duplicates-transform.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/disjunction-remove-duplicates-transform.js"(exports$1, module) {
     var NodePath = require_node_path();
     var _require = require_utils();
     var disjunctionToList = _require.disjunctionToList;
     var listToDisjunction = _require.listToDisjunction;
-    module2.exports = {
+    module.exports = {
       Disjunction: function Disjunction(path3) {
         var node = path3.node;
         var uniqueNodesMap = {};
@@ -3540,9 +3526,8 @@ var require_disjunction_remove_duplicates_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/group-single-chars-to-char-class.js
 var require_group_single_chars_to_char_class = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/group-single-chars-to-char-class.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/group-single-chars-to-char-class.js"(exports$1, module) {
+    module.exports = {
       Disjunction: function Disjunction(path3) {
         var node = path3.node, parent = path3.parent;
         if (!handlers[parent.type]) {
@@ -3602,9 +3587,8 @@ var require_group_single_chars_to_char_class = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/remove-empty-group-transform.js
 var require_remove_empty_group_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/remove-empty-group-transform.js"(exports2, module2) {
-    "use strict";
-    module2.exports = {
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/remove-empty-group-transform.js"(exports$1, module) {
+    module.exports = {
       Group: function Group(path3) {
         var node = path3.node, parent = path3.parent;
         var childPath = path3.getChild();
@@ -3623,8 +3607,7 @@ var require_remove_empty_group_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/ungroup-transform.js
 var require_ungroup_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/ungroup-transform.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/ungroup-transform.js"(exports$1, module) {
     function _toConsumableArray(arr) {
       if (Array.isArray(arr)) {
         for (var i = 0, arr2 = Array(arr.length); i < arr.length; i++) {
@@ -3635,7 +3618,7 @@ var require_ungroup_transform = __commonJS({
         return Array.from(arr);
       }
     }
-    module2.exports = {
+    module.exports = {
       Group: function Group(path3) {
         var node = path3.node, parent = path3.parent;
         var childPath = path3.getChild();
@@ -3686,8 +3669,7 @@ var require_ungroup_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/combine-repeating-patterns-transform.js
 var require_combine_repeating_patterns_transform = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/combine-repeating-patterns-transform.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/combine-repeating-patterns-transform.js"(exports$1, module) {
     function _toConsumableArray(arr) {
       if (Array.isArray(arr)) {
         for (var i = 0, arr2 = Array(arr.length); i < arr.length; i++) {
@@ -3701,7 +3683,7 @@ var require_combine_repeating_patterns_transform = __commonJS({
     var NodePath = require_node_path();
     var _require = require_utils();
     var increaseQuantifierByOne = _require.increaseQuantifierByOne;
-    module2.exports = {
+    module.exports = {
       Alternative: function Alternative(path3) {
         var node = path3.node;
         var index = 1;
@@ -3838,9 +3820,8 @@ var require_combine_repeating_patterns_transform = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/index.js
 var require_transforms2 = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/index.js"(exports2, module2) {
-    "use strict";
-    module2.exports = /* @__PURE__ */ new Map([
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/transforms/index.js"(exports$1, module) {
+    module.exports = /* @__PURE__ */ new Map([
       // \ud83d\ude80 -> \u{1f680}
       ["charSurrogatePairToSingleUnicode", require_char_surrogate_pair_to_single_unicode_transform()],
       // \u0061 -> a
@@ -3879,13 +3860,12 @@ var require_transforms2 = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/index.js
 var require_optimizer = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/optimizer/index.js"(exports$1, module) {
     var clone = require_clone();
     var parser = require_parser();
     var transform = require_transform();
     var optimizationTransforms = require_transforms2();
-    module2.exports = {
+    module.exports = {
       /**
        * Optimizer transforms a regular expression into an optimized version,
        * replacing some sub-expressions with their idiomatic patterns.
@@ -3943,11 +3923,10 @@ var require_optimizer = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/special-symbols.js
 var require_special_symbols = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/special-symbols.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/special-symbols.js"(exports$1, module) {
     var EPSILON = "\u03B5";
     var EPSILON_CLOSURE = EPSILON + "*";
-    module2.exports = {
+    module.exports = {
       EPSILON,
       EPSILON_CLOSURE
     };
@@ -3956,8 +3935,7 @@ var require_special_symbols = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa.js
 var require_nfa = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa.js"(exports$1, module) {
     var _slicedToArray = /* @__PURE__ */ (function() {
       function sliceIterator(arr, i) {
         var _arr = [];
@@ -4187,14 +4165,13 @@ var require_nfa = __commonJS({
       }]);
       return NFA2;
     })();
-    module2.exports = NFA;
+    module.exports = NFA;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/dfa/dfa-minimizer.js
 var require_dfa_minimizer = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/dfa/dfa-minimizer.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/dfa/dfa-minimizer.js"(exports$1, module) {
     var _slicedToArray = /* @__PURE__ */ (function() {
       function sliceIterator(arr, i) {
         var _arr = [];
@@ -4525,7 +4502,7 @@ var require_dfa_minimizer = __commonJS({
       }
       return currentTransitionMap[s1].has(originalTransitionS1) && currentTransitionMap[s2].has(originalTransitionS2);
     }
-    module2.exports = {
+    module.exports = {
       minimize
     };
   }
@@ -4533,8 +4510,7 @@ var require_dfa_minimizer = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/dfa/dfa.js
 var require_dfa = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/dfa/dfa.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/dfa/dfa.js"(exports$1, module) {
     var _createClass = /* @__PURE__ */ (function() {
       function defineProperties(target, props) {
         for (var i = 0; i < props.length; i++) {
@@ -4844,14 +4820,13 @@ var require_dfa = __commonJS({
       }]);
       return DFA2;
     })();
-    module2.exports = DFA;
+    module.exports = DFA;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/state.js
 var require_state = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/state.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/state.js"(exports$1, module) {
     var _createClass = /* @__PURE__ */ (function() {
       function defineProperties(target, props) {
         for (var i = 0; i < props.length; i++) {
@@ -4910,14 +4885,13 @@ var require_state = __commonJS({
       }]);
       return State2;
     })();
-    module2.exports = State;
+    module.exports = State;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa-state.js
 var require_nfa_state = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa-state.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa-state.js"(exports$1, module) {
     var _createClass = /* @__PURE__ */ (function() {
       function defineProperties(target, props) {
         for (var i = 0; i < props.length; i++) {
@@ -5109,14 +5083,13 @@ var require_nfa_state = __commonJS({
       }]);
       return NFAState2;
     })(State);
-    module2.exports = NFAState;
+    module.exports = NFAState;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/builders.js
 var require_builders = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/builders.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/builders.js"(exports$1, module) {
     var NFA = require_nfa();
     var NFAState = require_nfa_state();
     var _require = require_special_symbols();
@@ -5230,7 +5203,7 @@ var require_builders = __commonJS({
       fragment.in.addTransition(EPSILON, fragment.out);
       return fragment;
     }
-    module2.exports = {
+    module.exports = {
       alt,
       char,
       e,
@@ -5245,8 +5218,7 @@ var require_builders = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa-from-regexp.js
 var require_nfa_from_regexp = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa-from-regexp.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/nfa/nfa-from-regexp.js"(exports$1, module) {
     function _toConsumableArray(arr) {
       if (Array.isArray(arr)) {
         for (var i = 0, arr2 = Array(arr.length); i < arr.length; i++) {
@@ -5307,7 +5279,7 @@ var require_nfa_from_regexp = __commonJS({
         return gen(node.expression);
       }
     };
-    module2.exports = {
+    module.exports = {
       /**
        * Builds an NFA from the passed regexp.
        */
@@ -5329,13 +5301,12 @@ var require_nfa_from_regexp = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/index.js
 var require_finite_automaton = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/interpreter/finite-automaton/index.js"(exports$1, module) {
     var NFA = require_nfa();
     var DFA = require_dfa();
     var nfaFromRegExp = require_nfa_from_regexp();
     var builders = require_builders();
-    module2.exports = {
+    module.exports = {
       /**
        * Export NFA and DFA classes.
        */
@@ -5379,8 +5350,7 @@ var require_finite_automaton = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/runtime/index.js
 var require_runtime = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/runtime/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/compat-transpiler/runtime/index.js"(exports$1, module) {
     var _createClass = /* @__PURE__ */ (function() {
       function defineProperties(target, props) {
         for (var i = 0; i < props.length; i++) {
@@ -5461,7 +5431,7 @@ var require_runtime = __commonJS({
       }]);
       return RegExpTree2;
     })();
-    module2.exports = {
+    module.exports = {
       RegExpTree
     };
   }
@@ -5469,8 +5439,7 @@ var require_runtime = __commonJS({
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/regexp-tree.js
 var require_regexp_tree2 = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/regexp-tree.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/dist/regexp-tree.js"(exports$1, module) {
     var compatTranspiler = require_compat_transpiler();
     var generator = require_generator();
     var optimizer = require_optimizer();
@@ -5615,22 +5584,20 @@ var require_regexp_tree2 = __commonJS({
         return re.exec(string);
       }
     };
-    module2.exports = regexpTree2;
+    module.exports = regexpTree2;
   }
 });
 
 // ../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/index.js
 var require_regexp_tree3 = __commonJS({
-  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/index.js"(exports2, module2) {
-    "use strict";
-    module2.exports = require_regexp_tree2();
+  "../../node_modules/.pnpm/regexp-tree@0.1.27/node_modules/regexp-tree/index.js"(exports$1, module) {
+    module.exports = require_regexp_tree2();
   }
 });
 
 // ../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/heuristic-analyzer.js
 var require_heuristic_analyzer = __commonJS({
-  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/heuristic-analyzer.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/heuristic-analyzer.js"(exports$1, module) {
     var regexpTree2 = require_regexp_tree3();
     var analyzer = require_analyzer();
     var HeuristicAnalyzer = class extends analyzer.Analyzer {
@@ -5683,23 +5650,21 @@ var require_heuristic_analyzer = __commonJS({
         return nRepetitions;
       }
     };
-    module2.exports = HeuristicAnalyzer;
+    module.exports = HeuristicAnalyzer;
   }
 });
 
 // ../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/analyzer-family.js
 var require_analyzer_family = __commonJS({
-  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/analyzer-family.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/lib/analyzer-family.js"(exports$1, module) {
     var heuristicAnalyzer = require_heuristic_analyzer();
-    module2.exports = [heuristicAnalyzer];
+    module.exports = [heuristicAnalyzer];
   }
 });
 
 // ../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/index.js
 var require_safe_regex = __commonJS({
-  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/index.js"(exports2, module2) {
-    "use strict";
+  "../../node_modules/.pnpm/safe-regex@2.1.1/node_modules/safe-regex/index.js"(exports$1, module) {
     var analyzer = require_analyzer();
     var analyzerFamily = require_analyzer_family();
     var DEFAULT_SAFE_REP_LIMIT = 25;
@@ -5751,30 +5716,9 @@ var require_safe_regex = __commonJS({
       }
       return analyzerSaysVulnerable;
     }
-    module2.exports = safeRegex;
+    module.exports = safeRegex;
   }
 });
-
-// src/index.ts
-var index_exports = {};
-__export(index_exports, {
-  ApprovedSpecsValidator: () => ApprovedSpecsValidator,
-  ClientGenerator: () => ClientGenerator,
-  CollectionProviderGenerator: () => CollectionProviderGenerator,
-  EndpointFilter: () => EndpointFilter,
-  OpenAPICollectionProvider: () => OpenAPICollectionProvider,
-  OpenAPIParser: () => OpenAPIParser,
-  OpenAPIPlugin: () => OpenAPIPlugin,
-  SchemaResolver: () => SchemaResolver,
-  TypeGenerator: () => TypeGenerator,
-  ZodSchemaGenerator: () => ZodSchemaGenerator,
-  createOpenAPIFetcher: () => createOpenAPIFetcher,
-  createOpenAPIPlugin: () => createOpenAPIPlugin
-});
-module.exports = __toCommonJS(index_exports);
-
-// src/parser/OpenAPIParser.ts
-var import_swagger_parser = __toESM(require("@apidevtools/swagger-parser"));
 var OpenAPIParser = class {
   /**
    * Parse an OpenAPI specification from URL or file path
@@ -5793,13 +5737,13 @@ var OpenAPIParser = class {
   async parse(specPath, options = {}) {
     const { dereference = true, validate = true } = options;
     try {
-      const api = await import_swagger_parser.default.parse(specPath);
+      const api = await SwaggerParser__default.default.parse(specPath);
       if (validate) {
-        await import_swagger_parser.default.validate(api);
+        await SwaggerParser__default.default.validate(api);
       }
       let document;
       if (dereference) {
-        document = await import_swagger_parser.default.dereference(api);
+        document = await SwaggerParser__default.default.dereference(api);
       } else {
         document = api;
       }
@@ -5817,8 +5761,9 @@ var OpenAPIParser = class {
    * Detect OpenAPI version from document
    */
   detectVersion(document) {
-    if ("openapi" in document) {
-      return document.openapi;
+    const openapiVersion = "openapi" in document ? document.openapi : void 0;
+    if (openapiVersion !== void 0) {
+      return openapiVersion;
     }
     throw new Error("Invalid OpenAPI document: missing openapi version field");
   }
@@ -5829,7 +5774,9 @@ var OpenAPIParser = class {
     if (error instanceof Error) {
       const message = `Failed to parse OpenAPI spec from "${specPath}": ${error.message}`;
       const enhancedError = new Error(message);
-      enhancedError.stack = error.stack;
+      if (error.stack !== void 0) {
+        enhancedError.stack = error.stack;
+      }
       return enhancedError;
     }
     return new Error(`Failed to parse OpenAPI spec from "${specPath}": ${String(error)}`);
@@ -5902,9 +5849,9 @@ var SchemaResolver = class {
           endpoints.push({
             path: path3,
             method,
-            operationId: operation.operationId,
-            summary: operation.summary,
-            description: operation.description
+            ...operation.operationId !== void 0 && { operationId: operation.operationId },
+            ...operation.summary !== void 0 && { summary: operation.summary },
+            ...operation.description !== void 0 && { description: operation.description }
           });
         }
       }
@@ -6136,9 +6083,6 @@ ${fields}
     }
   }
 };
-
-// src/compiler/TypeGenerator.ts
-var import_zod_to_ts = require("zod-to-ts");
 var TypeGenerator = class {
   /**
    * Generate TypeScript type definition from a Zod schema
@@ -6158,9 +6102,9 @@ var TypeGenerator = class {
   generate(zodSchema, options = {}) {
     const { typeName = "GeneratedType", includeJsDoc = true } = options;
     try {
-      const auxiliaryTypeStore = (0, import_zod_to_ts.createAuxiliaryTypeStore)();
-      const { node } = (0, import_zod_to_ts.zodToTs)(zodSchema, { auxiliaryTypeStore });
-      const typeCode = (0, import_zod_to_ts.printNode)(node);
+      const auxiliaryTypeStore = zodToTs.createAuxiliaryTypeStore();
+      const { node } = zodToTs.zodToTs(zodSchema, { auxiliaryTypeStore });
+      const typeCode = zodToTs.printNode(node);
       let result = "";
       if (includeJsDoc && zodSchema.description) {
         result += `/**
@@ -6212,12 +6156,12 @@ var TypeGenerator = class {
    * @returns Complete TypeScript module code
    */
   createModule(types, imports = []) {
-    let module2 = "";
+    let module = "";
     if (imports.length > 0) {
-      module2 += imports.join("\n") + "\n\n";
+      module += imports.join("\n") + "\n\n";
     }
-    module2 += Object.values(types).join("\n");
-    return module2;
+    module += Object.values(types).join("\n");
+    return module;
   }
 };
 
@@ -6249,18 +6193,21 @@ var CollectionProviderGenerator = class {
     }
     const isArray = schema.type === "array";
     const schemaName = `${this.capitalize(collectionName)}Schema`;
-    return this.generateProviderCode({
+    const params = {
       providerName,
       collectionName,
       endpoint,
       slugField,
       method,
       baseUrl,
-      auth,
       schemaName,
       isArray,
       bare
-    });
+    };
+    if (auth !== void 0) {
+      params.auth = auth;
+    }
+    return this.generateProviderCode(params);
   }
   /**
    * Generate the complete provider code
@@ -6282,12 +6229,12 @@ var CollectionProviderGenerator = class {
     const arraySchemaName = `${schemaName.replace(/Schema$/, "")}ArraySchema`;
     const validationSchema = isArray ? arraySchemaName : schemaName;
     const imports = bare ? "" : `import type { CollectionProvider, CollectionItem } from '@stackwright/collections';
-import { ${isArray ? arraySchemaName : schemaName} } from './schemas';
+import { ${isArray ? arraySchemaName : schemaName}} } from './schemas';
 
 `;
     return `${imports}/**
  * CollectionProvider for ${collectionName}
- * 
+ *
  * Generated from OpenAPI endpoint: ${method.toUpperCase()} ${endpoint}
  */
 export class ${providerName} implements CollectionProvider {
@@ -6433,7 +6380,10 @@ export class ${providerName} implements CollectionProvider {
    */
   getBaseUrl() {
     if ("servers" in this.document && this.document.servers && this.document.servers.length > 0) {
-      return this.document.servers[0].url;
+      const firstServer = this.document.servers[0];
+      if (firstServer !== void 0) {
+        return firstServer.url;
+      }
     }
     return "http://localhost:3000";
   }
@@ -6461,7 +6411,8 @@ export class ${providerName} implements CollectionProvider {
    */
   guessTitle(slugField) {
     const titleFields = ["title", "name", "label", "displayName"];
-    return titleFields[0] + ` || item.${slugField}`;
+    const firstField = titleFields[0];
+    return firstField !== void 0 ? firstField : `item.${slugField}`;
   }
 };
 
@@ -6471,7 +6422,9 @@ var ClientGenerator = class {
   constructor(document, schemaMapping) {
     this.document = document;
     this.resolver = new SchemaResolver(document);
-    this.schemaMapping = schemaMapping;
+    if (schemaMapping !== void 0) {
+      this.schemaMapping = schemaMapping;
+    }
     this.requiredSchemas = /* @__PURE__ */ new Set();
     this.generatedRequestSchemas = /* @__PURE__ */ new Set();
   }
@@ -6563,7 +6516,7 @@ var ClientGenerator = class {
     code += "// Request Schemas (Zod Validation)\n";
     code += "// ============================================================================\n\n";
     for (const endpoint of endpoints) {
-      const operationId = endpoint.operationId || this.getMethodName(endpoint);
+      endpoint.operationId || this.getMethodName(endpoint);
       const typeName = this.getOperationTypeName(endpoint);
       const schemaName = `${typeName}RequestSchema`;
       const schemaCode = this.generateRequestSchemaForEndpoint(endpoint);
@@ -6829,7 +6782,8 @@ ${paramSchemas.join(",\n")}
    */
   extractComponentName(ref) {
     const parts = ref.split("/");
-    return parts[parts.length - 1];
+    const lastPart = parts[parts.length - 1];
+    return lastPart ?? ref;
   }
   /**
    * Escape string for use in Zod .describe()
@@ -7576,9 +7530,9 @@ ${paramSchemas.join(",\n")}
           endpoints.push({
             path: path3,
             method,
-            operationId: operation.operationId,
-            summary: operation.summary,
-            description: operation.description,
+            ...operation.operationId !== void 0 && { operationId: operation.operationId },
+            ...operation.summary !== void 0 && { summary: operation.summary },
+            ...operation.description !== void 0 && { description: operation.description },
             operation
           });
         }
@@ -7666,7 +7620,8 @@ ${paramSchemas.join(",\n")}
    */
   getDefaultBaseUrl() {
     if ("servers" in this.document && this.document.servers && this.document.servers.length > 0) {
-      return this.document.servers[0].url;
+      const firstServer = this.document.servers[0];
+      return firstServer ? firstServer.url : "http://localhost:3000";
     }
     return "http://localhost:3000";
   }
@@ -7704,10 +7659,6 @@ var OpenAPICollectionProvider = class {
   }
 };
 
-// src/prebuild/OpenAPIPlugin.ts
-var import_fs3 = __toESM(require("fs"));
-var import_path2 = __toESM(require("path"));
-
 // src/utils/EndpointFilter.ts
 var EndpointFilter = class {
   include;
@@ -7761,13 +7712,18 @@ var EndpointFilter = class {
         let matches = true;
         for (let i = 0; i < patternSegments.length; i++) {
           const pSeg = patternSegments[i];
+          if (pSeg === void 0) {
+            matches = false;
+            break;
+          }
           if (pSeg === "*" || pSeg === "**") {
             continue;
           }
           if (pSeg.startsWith("{") && pSeg.endsWith("}")) {
             continue;
           }
-          if (pSeg !== pathSegments[i]) {
+          const pathSeg = pathSegments[i];
+          if (pSeg !== pathSeg) {
             matches = false;
             break;
           }
@@ -7804,16 +7760,6 @@ var EndpointFilter = class {
     return new RegExp(`^${result}$`);
   }
 };
-
-// src/utils/ApprovedSpecsValidator.ts
-var import_crypto = __toESM(require("crypto"));
-var import_fs = __toESM(require("fs"));
-var import_https = __toESM(require("https"));
-var import_http = __toESM(require("http"));
-var import_url = require("url");
-var import_path = __toESM(require("path"));
-var import_fs2 = require("fs");
-var import_net = require("net");
 var ApprovedSpecsValidator = class {
   allowlist;
   cache = /* @__PURE__ */ new Map();
@@ -7838,7 +7784,7 @@ var ApprovedSpecsValidator = class {
    */
   buildAllowedDirs() {
     const cwd = process.cwd();
-    return [cwd, import_path.default.join(cwd, "specs"), import_path.default.join(cwd, ".stackwright")];
+    return [cwd, path2__default.default.join(cwd, "specs"), path2__default.default.join(cwd, ".stackwright")];
   }
   /**
    * Validate that a file path is within allowed directories (path traversal prevention).
@@ -7849,10 +7795,10 @@ var ApprovedSpecsValidator = class {
    */
   isPathAllowed(filePath) {
     try {
-      const realPath = (0, import_fs2.realpathSync)(filePath);
+      const realPath = fs.realpathSync(filePath);
       return this.ALLOWED_DIRS.some((dir) => {
-        const realDir = (0, import_fs2.realpathSync)(dir);
-        return realPath.startsWith(realDir + import_path.default.sep) || realPath === realDir;
+        const realDir = fs.realpathSync(dir);
+        return realPath.startsWith(realDir + path2__default.default.sep) || realPath === realDir;
       });
     } catch {
       return false;
@@ -7869,7 +7815,7 @@ var ApprovedSpecsValidator = class {
     if (specUrl.startsWith("file://")) {
       return true;
     }
-    if (import_fs.default.existsSync(specUrl)) {
+    if (fs__default.default.existsSync(specUrl)) {
       return !this.isPathAllowed(specUrl);
     }
     if (!specUrl.startsWith("http://") && !specUrl.startsWith("https://")) {
@@ -7903,7 +7849,7 @@ var ApprovedSpecsValidator = class {
    */
   isRedirectSafe(location, originalProtocol) {
     try {
-      const redirectUrl = new import_url.URL(location);
+      const redirectUrl = new url.URL(location);
       if (redirectUrl.protocol === "http:" && originalProtocol === "https:") {
         return false;
       }
@@ -7925,23 +7871,24 @@ var ApprovedSpecsValidator = class {
         }
       }
       const ipv4Match = redirectUrl.hostname.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
-      if (ipv4Match) {
+      if (ipv4Match && ipv4Match.length >= 5) {
         const octets = ipv4Match.slice(1, 5).map(Number);
-        const [first, second] = octets;
-        if (first === 10) {
+        const first = octets[0];
+        const second = octets[1];
+        if (first !== void 0 && first === 10) {
           return false;
         }
-        if (first === 172 && second >= 16 && second <= 31) {
+        if (first !== void 0 && second !== void 0 && first === 172 && second >= 16 && second <= 31) {
           return false;
         }
-        if (first === 192 && second === 168) {
+        if (first !== void 0 && second !== void 0 && first === 192 && second === 168) {
           return false;
         }
-        if (first === 127) {
+        if (first !== void 0 && first === 127) {
           return false;
         }
       }
-      const ipVersion = (0, import_net.isIP)(redirectUrl.hostname);
+      const ipVersion = net.isIP(redirectUrl.hostname);
       if (ipVersion === 6) {
         const blockedPrefixes = [
           "::1",
@@ -7974,12 +7921,12 @@ var ApprovedSpecsValidator = class {
    */
   readAllowedFile(filePath) {
     try {
-      import_fs.default.lstatSync(filePath);
-      const realPath = import_fs.default.realpathSync(filePath);
+      fs__default.default.lstatSync(filePath);
+      const realPath = fs__default.default.realpathSync(filePath);
       if (!this.isPathAllowed(realPath)) {
         return { error: "File path outside allowed directories (path traversal blocked)" };
       }
-      return { content: import_fs.default.readFileSync(filePath, "utf8") };
+      return { content: fs__default.default.readFileSync(filePath, "utf8") };
     } catch (e) {
       const err = e;
       if (err.code === "ENOENT") {
@@ -8052,7 +7999,7 @@ var ApprovedSpecsValidator = class {
         error: "Invalid hash format in approved spec configuration"
       };
     }
-    if (!import_crypto.default.timingSafeEqual(
+    if (!crypto__default.default.timingSafeEqual(
       Buffer.from(hashResult.hash, "hex"),
       Buffer.from(approved.sha256, "hex")
     )) {
@@ -8110,7 +8057,7 @@ var ApprovedSpecsValidator = class {
       return { error: contentResult.error };
     }
     const content = contentResult.content;
-    const hash = import_crypto.default.createHash("sha256").update(content).digest("hex");
+    const hash = crypto__default.default.createHash("sha256").update(content).digest("hex");
     this.cache.set(url, { content, hash });
     return { hash };
   }
@@ -8118,18 +8065,18 @@ var ApprovedSpecsValidator = class {
    * Download content from URL or file.
    * Includes path traversal and SSRF protection.
    */
-  async download(url, originalProtocol = "") {
-    if (import_fs.default.existsSync(url)) {
-      return this.readAllowedFile(url);
+  async download(url$1, originalProtocol = "") {
+    if (fs__default.default.existsSync(url$1)) {
+      return this.readAllowedFile(url$1);
     }
-    if (!url.startsWith("http://") && !url.startsWith("https://")) {
-      return { error: `Invalid URL protocol. Expected http:// or https://, got: ${url}` };
+    if (!url$1.startsWith("http://") && !url$1.startsWith("https://")) {
+      return { error: `Invalid URL protocol. Expected http:// or https://, got: ${url$1}` };
     }
-    const parsed = new import_url.URL(url);
+    const parsed = new url.URL(url$1);
     const requestProtocol = originalProtocol || parsed.protocol;
     return new Promise((resolve) => {
-      const client = url.startsWith("https") ? import_https.default : import_http.default;
-      const req = client.get(url, { timeout: 3e4 }, (res) => {
+      const client = url$1.startsWith("https") ? https__default.default : http__default.default;
+      const req = client.get(url$1, { timeout: 3e4 }, (res) => {
         if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
           const location = res.headers.location;
           if (!this.isRedirectSafe(location, requestProtocol)) {
@@ -8171,7 +8118,7 @@ var ApprovedSpecsValidator = class {
   urlsMatch(url1, url2) {
     const normalize = (u) => {
       try {
-        const parsed = new import_url.URL(u);
+        const parsed = new url.URL(u);
         const normalized = `${parsed.protocol}//${parsed.hostname}${parsed.pathname}`;
         return normalized.replace(/\/$/, "").toLowerCase();
       } catch {
@@ -8322,7 +8269,7 @@ var OpenAPIPlugin = class {
   async processIntegration(config, projectRoot) {
     const { name, spec, auth, mockUrl, collections, endpoints } = config;
     console.log(`  - Processing integration: ${name}`);
-    const specPath = spec.startsWith("http") ? spec : import_path2.default.resolve(projectRoot, spec);
+    const specPath = spec.startsWith("http") ? spec : path2__default.default.resolve(projectRoot, spec);
     const parser = new OpenAPIParser();
     const { document } = await parser.parse(specPath);
     if (mockUrl) {
@@ -8336,8 +8283,8 @@ var OpenAPIPlugin = class {
       const excludeStr = endpoints.exclude?.length ? ` (exclude: ${endpoints.exclude.join(", ")})` : "";
       console.log(`    > Filter: include [${includeStr}]${excludeStr}`);
     }
-    const outputDir = import_path2.default.join(projectRoot, "src", "generated", name);
-    import_fs3.default.mkdirSync(outputDir, { recursive: true });
+    const outputDir = path2__default.default.join(projectRoot, "src", "generated", name);
+    fs__default.default.mkdirSync(outputDir, { recursive: true });
     const schemaMapping = await this.generateSchemas(
       document,
       collections || [],
@@ -8460,7 +8407,7 @@ import { z } from 'zod';
         };
       }
     }
-    import_fs3.default.writeFileSync(import_path2.default.join(outputDir, "schemas.ts"), schemasCode);
+    fs__default.default.writeFileSync(path2__default.default.join(outputDir, "schemas.ts"), schemasCode);
     return schemaMapping;
   }
   async generateTypes(document, collections, outputDir, integrationName) {
@@ -8485,7 +8432,7 @@ import type * as schemas from './schemas';
 `;
       }
     }
-    import_fs3.default.writeFileSync(import_path2.default.join(outputDir, "types.ts"), typesCode);
+    fs__default.default.writeFileSync(path2__default.default.join(outputDir, "types.ts"), typesCode);
   }
   async generateProvider(document, config, outputDir, integrationName) {
     const generator = new CollectionProviderGenerator(document);
@@ -8501,12 +8448,12 @@ import type * as schemas from './schemas';
         slugField: collection.slug_field,
         filters: collection.filters
       };
-      let providerOptions = { bare: true };
+      const providerOptions = { bare: true };
       if (auth) {
         if (auth.type === "bearer" || auth.type === "apiKey") {
           providerOptions.auth = {
             type: auth.type,
-            headerName: auth.type === "apiKey" ? "X-API-Key" : void 0
+            ...auth.type === "apiKey" && { headerName: "X-API-Key" }
           };
         } else if (auth.type === "oauth2") {
           console.warn(
@@ -8539,7 +8486,7 @@ import { ${Array.from(schemaImports).join(", ")} } from './schemas';
 
 `;
     providerCode += classBlocks.join("\n");
-    import_fs3.default.writeFileSync(import_path2.default.join(outputDir, "provider.ts"), providerCode);
+    fs__default.default.writeFileSync(path2__default.default.join(outputDir, "provider.ts"), providerCode);
   }
   async generateClient(document, outputDir, integrationName, schemaMapping, endpointFilter) {
     const paths = document.paths || {};
@@ -8563,11 +8510,12 @@ import { ${Array.from(schemaImports).join(", ")} } from './schemas';
       validateResponses: true,
       strictValidation: false
     });
-    import_fs3.default.writeFileSync(import_path2.default.join(outputDir, "client.ts"), clientCode);
+    fs__default.default.writeFileSync(path2__default.default.join(outputDir, "client.ts"), clientCode);
   }
   extractComponentName(ref) {
     const parts = ref.split("/");
-    return parts[parts.length - 1];
+    const lastPart = parts[parts.length - 1];
+    return lastPart ?? ref;
   }
   getOperationTypeName(operationId) {
     return operationId.charAt(0).toUpperCase() + operationId.slice(1);
@@ -8594,8 +8542,6 @@ import { ${Array.from(schemaImports).join(", ")} } from './schemas';
 function createOpenAPIPlugin() {
   return new OpenAPIPlugin();
 }
-
-// src/sources/openapi.ts
 var BLOCKED_HOST_PATTERNS = [
   /^localhost$/i,
   /^127\./,
@@ -8620,63 +8566,115 @@ var BLOCKED_HOST_PATTERNS = [
   // AWS metadata endpoint
   /^metadata\.googleapis\.com$/i,
   // GCP metadata endpoint
+  /^metadata\.azure\.com$/i,
+  // Azure metadata endpoint
+  /^imds\.azure\.com$/i,
+  // Azure IMDS endpoint
   /^100\.100\.100\.200$/
   // Alibaba Cloud metadata
 ];
+var BLOCKED_IPV6_PREFIXES = [
+  "::1",
+  // Loopback
+  "fe80:",
+  // Link-local
+  "fc",
+  // Unique local (fc00::/7 — covers fc00:: through fcff::)
+  "fd"
+  // Unique local (short form)
+];
 var ALLOWED_PROTOCOLS = ["http:", "https:"];
-function validateFetchUrl(baseUrl) {
+function validateUrlSafe(baseUrl) {
   let url;
   try {
     url = new URL(baseUrl);
   } catch {
-    throw new Error("SSRF Prevention: baseUrl must be a valid absolute URL");
+    throw new Error("SECURITY: baseUrl must be a valid absolute URL");
   }
   if (!ALLOWED_PROTOCOLS.includes(url.protocol)) {
-    throw new Error(
-      "SSRF Prevention: Only HTTP and HTTPS protocols are allowed, got " + url.protocol
-    );
+    throw new Error("SECURITY: Only HTTP and HTTPS protocols are allowed, got " + url.protocol);
   }
   const hostname = url.hostname.toLowerCase();
   for (const pattern of BLOCKED_HOST_PATTERNS) {
     if (pattern.test(hostname)) {
-      throw new Error("SSRF Prevention: Blocked internal network address: " + hostname);
+      throw new Error("SECURITY: Blocked internal network address: " + hostname);
     }
   }
   const ip = url.hostname;
   if (/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(ip)) {
     const octets = ip.split(".").map(Number);
-    if (octets[0] === 127) {
-      throw new Error("SSRF Prevention: Blocked loopback address: " + ip);
-    }
-    if (octets[0] === 10) {
-      throw new Error("SSRF Prevention: Blocked private address: " + ip);
-    }
-    if (octets[0] === 172 && octets[1] >= 16 && octets[1] <= 31) {
-      throw new Error("SSRF Prevention: Blocked private address: " + ip);
-    }
-    if (octets[0] === 192 && octets[1] === 168) {
-      throw new Error("SSRF Prevention: Blocked private address: " + ip);
-    }
-    if (octets[0] === 169 && octets[1] === 254) {
-      throw new Error("SSRF Prevention: Blocked link-local address: " + ip);
-    }
-    if (octets[0] === 0) {
-      throw new Error("SSRF Prevention: Blocked current network address: " + ip);
+    const first = octets[0];
+    const second = octets[1];
+    if (first !== void 0 && first === 127) {
+      throw new Error("SECURITY: Base URL resolves to private IP");
+    }
+    if (first !== void 0 && first === 10) {
+      throw new Error("SECURITY: Base URL resolves to private IP");
+    }
+    if (first !== void 0 && second !== void 0 && first === 172 && second >= 16 && second <= 31) {
+      throw new Error("SECURITY: Base URL resolves to private IP");
+    }
+    if (first !== void 0 && second !== void 0 && first === 192 && second === 168) {
+      throw new Error("SECURITY: Base URL resolves to private IP");
+    }
+    if (first !== void 0 && second !== void 0 && first === 169 && second === 254) {
+      throw new Error("SECURITY: Base URL resolves to private IP");
+    }
+    if (first !== void 0 && first === 0) {
+      throw new Error("SECURITY: Base URL resolves to private IP");
+    }
+  }
+  const cleanHostname = hostname.replace(/^\[|\]$/g, "");
+  const ipVersion = net.isIP(cleanHostname);
+  if (ipVersion === 6) {
+    for (const prefix of BLOCKED_IPV6_PREFIXES) {
+      if (cleanHostname.startsWith(prefix)) {
+        throw new Error("SECURITY: Base URL resolves to private IP");
+      }
+    }
+    if (cleanHostname.startsWith("::ffff:")) {
+      const mapped = cleanHostname.slice("::ffff:".length);
+      let octets = null;
+      const decMatch = mapped.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+      if (decMatch) {
+        octets = decMatch.slice(1, 5).map(Number);
+      }
+      const hexMatch = mapped.match(/^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);
+      if (!octets && hexMatch && hexMatch[1] !== void 0 && hexMatch[2] !== void 0) {
+        const high = parseInt(hexMatch[1], 16);
+        const low = parseInt(hexMatch[2], 16);
+        octets = [high >> 8 & 255, high & 255, low >> 8 & 255, low & 255];
+      }
+      if (octets !== null) {
+        const o0 = octets[0];
+        const o1 = octets[1];
+        if (o0 === 127 || // 127.0.0.0/8  loopback
+        o0 === 10 || // 10.0.0.0/8   private
+        o0 === 0 || // 0.0.0.0/8    current network
+        o0 === 172 && o1 !== void 0 && o1 >= 16 && o1 <= 31 || // 172.16/12 private
+        o0 === 192 && o1 === 168 || // 192.168/16   private
+        o0 === 169 && o1 === 254) {
+          throw new Error("SECURITY: Base URL resolves to private IP");
+        }
+      } else {
+        throw new Error("SECURITY: Base URL resolves to unrecognisable IPv4-mapped address");
+      }
     }
   }
   return url;
 }
+var isUrlSafe = validateUrlSafe;
 function validateEndpoint(endpoint) {
   if (endpoint.includes("..")) {
-    throw new Error("SSRF Prevention: Path traversal detected in endpoint");
+    throw new Error("SECURITY: Path traversal detected in endpoint");
   }
   if (endpoint.includes("\\")) {
-    throw new Error("SSRF Prevention: Backslash detected in endpoint");
+    throw new Error("SECURITY: Backslash detected in endpoint");
   }
 }
 function createOpenAPIFetcher(config) {
   const { baseUrl, endpoint, method = "get", params, body, headers = {}, auth, schema } = config;
-  const validatedBaseUrl = validateFetchUrl(baseUrl);
+  const validatedBaseUrl = validateUrlSafe(baseUrl);
   validateEndpoint(endpoint);
   return async () => {
     const url = new URL(endpoint, validatedBaseUrl.toString());
@@ -8701,7 +8699,9 @@ function createOpenAPIFetcher(config) {
     const response = await fetch(url.toString(), {
       method: method.toUpperCase(),
       headers: requestHeaders,
-      body: supportsBody && body ? JSON.stringify(body) : void 0
+      body: supportsBody && body ? JSON.stringify(body) : null,
+      redirect: "error"
+      // Prevent SSRF via 301/302 redirect to internal addresses
     });
     if (!response.ok) {
       const safeStatus = response.status;
@@ -8714,18 +8714,20 @@ function createOpenAPIFetcher(config) {
     return result;
   };
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ApprovedSpecsValidator,
-  ClientGenerator,
-  CollectionProviderGenerator,
-  EndpointFilter,
-  OpenAPICollectionProvider,
-  OpenAPIParser,
-  OpenAPIPlugin,
-  SchemaResolver,
-  TypeGenerator,
-  ZodSchemaGenerator,
-  createOpenAPIFetcher,
-  createOpenAPIPlugin
-});
+
+exports.ApprovedSpecsValidator = ApprovedSpecsValidator;
+exports.ClientGenerator = ClientGenerator;
+exports.CollectionProviderGenerator = CollectionProviderGenerator;
+exports.EndpointFilter = EndpointFilter;
+exports.OpenAPICollectionProvider = OpenAPICollectionProvider;
+exports.OpenAPIParser = OpenAPIParser;
+exports.OpenAPIPlugin = OpenAPIPlugin;
+exports.SchemaResolver = SchemaResolver;
+exports.TypeGenerator = TypeGenerator;
+exports.ZodSchemaGenerator = ZodSchemaGenerator;
+exports.createOpenAPIFetcher = createOpenAPIFetcher;
+exports.createOpenAPIPlugin = createOpenAPIPlugin;
+exports.isUrlSafe = isUrlSafe;
+exports.validateUrlSafe = validateUrlSafe;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map