@stackwright-pro/openapi 0.2.1 → 0.2.2-alpha.1

package/dist/index.d.mts

@@ -629,30 +629,6 @@ declare class ClientGenerator {
     private getAPIDescription;
 }
 
-/**
- * OpenAPICollectionProvider
- *
- * Runtime implementation of CollectionProvider for OpenAPI endpoints.
- * This is the runtime component that actually fetches data.
- */
-declare class OpenAPICollectionProvider {
-    private baseUrl;
-    private auth?;
-    constructor(baseUrl: string, auth?: {
-        type: string;
-        token?: string;
-        apiKey?: string;
-    } | undefined);
-    /**
-     * Fetch items from an API endpoint
-     */
-    fetchItems(endpoint: string): Promise<unknown[]>;
-    /**
-     * Fetch a single item by slug
-     */
-    fetchItem(endpoint: string, slug: string): Promise<unknown>;
-}
-
 /**
  * Prebuild plugin types
  * TODO: Move to @stackwright/types package when created
@@ -728,6 +704,24 @@ declare class OpenAPIPlugin implements PrebuildPlugin {
  */
 declare function createOpenAPIPlugin(): PrebuildPlugin;
 
+/**
+ * NOTE: Validates the URL structure and hostname at call time.
+ * Does NOT re-validate after DNS resolution (DNS rebinding).
+ * This is acceptable for build-time prebuild use.
+ * DO NOT reuse this function for runtime server-side request proxying
+ * without adding post-resolution IP validation.
+ */
+/**
+ * Validates that a URL is safe to fetch (SSRF prevention).
+ * Exported for use by external consumers and tests.
+ *
+ * @throws Error if URL targets internal networks or disallowed protocols
+ */
+declare function validateUrlSafe(baseUrl: string): URL;
+/**
+ * Alias for validateUrlSafe — backward compatibility export
+ */
+declare const isUrlSafe: typeof validateUrlSafe;
 /**
  * Configuration for OpenAPI source adapter
  */
@@ -960,4 +954,4 @@ declare class ApprovedSpecsValidator {
     clearCache(): void;
 }
 
-export { type ApprovedSpec, ApprovedSpecsValidator, type ClientGenerationOptions, ClientGenerator, type CollectionConfig, CollectionProviderGenerator, EndpointFilter, OpenAPICollectionProvider, type OpenAPICompilationResult, type OpenAPIConfig, type OpenAPIDocument, OpenAPIParser, OpenAPIPlugin, type OpenAPISourceConfig, type ParseOptions, type ParseResult, type PrebuildSecurityConfig, type ProviderGenerationOptions, type SchemaMapping, SchemaResolver, type SiteConfig, type TypeGenerationOptions, TypeGenerator, type ValidationResult, type ZodGenerationOptions, ZodSchemaGenerator, createOpenAPIFetcher, createOpenAPIPlugin };
+export { type ApprovedSpec, ApprovedSpecsValidator, type ClientGenerationOptions, ClientGenerator, type CollectionConfig, CollectionProviderGenerator, EndpointFilter, type OpenAPICompilationResult, type OpenAPIConfig, type OpenAPIDocument, OpenAPIParser, OpenAPIPlugin, type OpenAPISourceConfig, type ParseOptions, type ParseResult, type PrebuildSecurityConfig, type ProviderGenerationOptions, type SchemaMapping, SchemaResolver, type SiteConfig, type TypeGenerationOptions, TypeGenerator, type ValidationResult, type ZodGenerationOptions, ZodSchemaGenerator, createOpenAPIFetcher, createOpenAPIPlugin, isUrlSafe, validateUrlSafe };

package/dist/index.d.ts

@@ -629,30 +629,6 @@ declare class ClientGenerator {
     private getAPIDescription;
 }
 
-/**
- * OpenAPICollectionProvider
- *
- * Runtime implementation of CollectionProvider for OpenAPI endpoints.
- * This is the runtime component that actually fetches data.
- */
-declare class OpenAPICollectionProvider {
-    private baseUrl;
-    private auth?;
-    constructor(baseUrl: string, auth?: {
-        type: string;
-        token?: string;
-        apiKey?: string;
-    } | undefined);
-    /**
-     * Fetch items from an API endpoint
-     */
-    fetchItems(endpoint: string): Promise<unknown[]>;
-    /**
-     * Fetch a single item by slug
-     */
-    fetchItem(endpoint: string, slug: string): Promise<unknown>;
-}
-
 /**
  * Prebuild plugin types
  * TODO: Move to @stackwright/types package when created
@@ -728,6 +704,24 @@ declare class OpenAPIPlugin implements PrebuildPlugin {
  */
 declare function createOpenAPIPlugin(): PrebuildPlugin;
 
+/**
+ * NOTE: Validates the URL structure and hostname at call time.
+ * Does NOT re-validate after DNS resolution (DNS rebinding).
+ * This is acceptable for build-time prebuild use.
+ * DO NOT reuse this function for runtime server-side request proxying
+ * without adding post-resolution IP validation.
+ */
+/**
+ * Validates that a URL is safe to fetch (SSRF prevention).
+ * Exported for use by external consumers and tests.
+ *
+ * @throws Error if URL targets internal networks or disallowed protocols
+ */
+declare function validateUrlSafe(baseUrl: string): URL;
+/**
+ * Alias for validateUrlSafe — backward compatibility export
+ */
+declare const isUrlSafe: typeof validateUrlSafe;
 /**
  * Configuration for OpenAPI source adapter
  */
@@ -960,4 +954,4 @@ declare class ApprovedSpecsValidator {
     clearCache(): void;
 }
 
-export { type ApprovedSpec, ApprovedSpecsValidator, type ClientGenerationOptions, ClientGenerator, type CollectionConfig, CollectionProviderGenerator, EndpointFilter, OpenAPICollectionProvider, type OpenAPICompilationResult, type OpenAPIConfig, type OpenAPIDocument, OpenAPIParser, OpenAPIPlugin, type OpenAPISourceConfig, type ParseOptions, type ParseResult, type PrebuildSecurityConfig, type ProviderGenerationOptions, type SchemaMapping, SchemaResolver, type SiteConfig, type TypeGenerationOptions, TypeGenerator, type ValidationResult, type ZodGenerationOptions, ZodSchemaGenerator, createOpenAPIFetcher, createOpenAPIPlugin };
+export { type ApprovedSpec, ApprovedSpecsValidator, type ClientGenerationOptions, ClientGenerator, type CollectionConfig, CollectionProviderGenerator, EndpointFilter, type OpenAPICompilationResult, type OpenAPIConfig, type OpenAPIDocument, OpenAPIParser, OpenAPIPlugin, type OpenAPISourceConfig, type ParseOptions, type ParseResult, type PrebuildSecurityConfig, type ProviderGenerationOptions, type SchemaMapping, SchemaResolver, type SiteConfig, type TypeGenerationOptions, TypeGenerator, type ValidationResult, type ZodGenerationOptions, ZodSchemaGenerator, createOpenAPIFetcher, createOpenAPIPlugin, isUrlSafe, validateUrlSafe };