mcp-from-openapi 0.0.1

package/src/types.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isReferenceObject = isReferenceObject;
+exports.toJSONSchema7 = toJSONSchema7;
+/**
+ * Helper to check if an object is a ReferenceObject
+ */
+function isReferenceObject(obj) {
+    return obj && typeof obj === 'object' && '$ref' in obj;
+}
+/**
+ * Convert OpenAPI schema to JSONSchema7
+ * Note: OpenAPI 3.0 uses a subset of JSON Schema Draft 4
+ * OpenAPI 3.1 uses JSON Schema Draft 2020-12
+ */
+function toJSONSchema7(schema) {
+    if (isReferenceObject(schema)) {
+        return { $ref: schema.$ref };
+    }
+    // Handle OpenAPI 3.0 boolean exclusiveMaximum/exclusiveMinimum
+    const result = { ...schema };
+    // Convert boolean exclusiveMaximum to number format (JSON Schema Draft 7)
+    if ('exclusiveMaximum' in schema && typeof schema.exclusiveMaximum === 'boolean') {
+        if (schema.exclusiveMaximum && 'maximum' in schema) {
+            result.exclusiveMaximum = schema.maximum;
+            delete result.maximum;
+        }
+    }
+    // Convert boolean exclusiveMinimum to number format (JSON Schema Draft 7)
+    if ('exclusiveMinimum' in schema && typeof schema.exclusiveMinimum === 'boolean') {
+        if (schema.exclusiveMinimum && 'minimum' in schema) {
+            result.exclusiveMinimum = schema.minimum;
+            delete result.minimum;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=types.js.map

package/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";;AAoDA,8CAEC;AAOD,sCAyBC;AArCD;;GAEG;AACH,SAAgB,iBAAiB,CAAC,GAAQ;IACxC,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,MAAsC;IAClE,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAiB,CAAC;IAC9C,CAAC;IAED,+DAA+D;IAC/D,MAAM,MAAM,GAAgB,EAAE,GAAG,MAAM,EAAS,CAAC;IAEjD,0EAA0E;IAC1E,IAAI,kBAAkB,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjF,IAAI,MAAM,CAAC,gBAAgB,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACnD,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,OAAiB,CAAC;YACnD,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,kBAAkB,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjF,IAAI,MAAM,CAAC,gBAAgB,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACnD,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,OAAiB,CAAC;YACnD,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { JSONSchema7 } from 'json-schema';\nimport type { OpenAPIV3, OpenAPIV3_1 } from 'openapi-types';\n\n/**\n * OpenAPI specification version 3.0.x or 3.1.x\n */\nexport type OpenAPIVersion = '3.0.0' | '3.0.1' | '3.0.2' | '3.0.3' | '3.1.0';\n\n/**\n * Unified OpenAPI Document type (supports both 3.0 and 3.1)\n */\nexport type OpenAPIDocument = OpenAPIV3.Document | OpenAPIV3_1.Document;\n\n/**\n * HTTP methods supported by OpenAPI\n */\nexport type HTTPMethod = 'get' | 'post' | 'put' | 'patch' | 'delete' | 'head' | 'options' | 'trace';\n\n/**\n * Parameter location types\n */\nexport type ParameterLocation = 'path' | 'query' | 'header' | 'cookie' | 'body';\n\n/**\n * Authentication types supported\n */\nexport type AuthType = 'apiKey' | 'http' | 'oauth2' | 'openIdConnect';\n\n// Re-export OpenAPI types for convenience\nexport type OperationObject = OpenAPIV3.OperationObject | OpenAPIV3_1.OperationObject;\nexport type ParameterObject = OpenAPIV3.ParameterObject | OpenAPIV3_1.ParameterObject;\nexport type RequestBodyObject = OpenAPIV3.RequestBodyObject | OpenAPIV3_1.RequestBodyObject;\nexport type ResponseObject = OpenAPIV3.ResponseObject | OpenAPIV3_1.ResponseObject;\nexport type ResponsesObject = OpenAPIV3.ResponsesObject | OpenAPIV3_1.ResponsesObject;\nexport type MediaTypeObject = OpenAPIV3.MediaTypeObject | OpenAPIV3_1.MediaTypeObject;\nexport type HeaderObject = OpenAPIV3.HeaderObject | OpenAPIV3_1.HeaderObject;\nexport type ExampleObject = OpenAPIV3.ExampleObject | OpenAPIV3_1.ExampleObject;\nexport type PathItemObject = OpenAPIV3.PathItemObject | OpenAPIV3_1.PathItemObject;\nexport type PathsObject = OpenAPIV3.PathsObject | OpenAPIV3_1.PathsObject;\nexport type ServerObject = OpenAPIV3.ServerObject | OpenAPIV3_1.ServerObject;\nexport type SecuritySchemeObject = OpenAPIV3.SecuritySchemeObject | OpenAPIV3_1.SecuritySchemeObject;\nexport type ReferenceObject = OpenAPIV3.ReferenceObject | OpenAPIV3_1.ReferenceObject;\nexport type TagObject = OpenAPIV3.TagObject | OpenAPIV3_1.TagObject;\nexport type ExternalDocumentationObject = OpenAPIV3.ExternalDocumentationObject | OpenAPIV3_1.ExternalDocumentationObject;\nexport type ServerVariableObject = OpenAPIV3.ServerVariableObject | OpenAPIV3_1.ServerVariableObject;\nexport type EncodingObject = OpenAPIV3.EncodingObject | OpenAPIV3_1.EncodingObject;\nexport type SecurityRequirementObject = OpenAPIV3.SecurityRequirementObject | OpenAPIV3_1.SecurityRequirementObject;\nexport type SchemaObject = OpenAPIV3.SchemaObject | OpenAPIV3_1.SchemaObject;\n\n/**\n * Helper to check if an object is a ReferenceObject\n */\nexport function isReferenceObject(obj: any): obj is ReferenceObject {\n  return obj && typeof obj === 'object' && '$ref' in obj;\n}\n\n/**\n * Convert OpenAPI schema to JSONSchema7\n * Note: OpenAPI 3.0 uses a subset of JSON Schema Draft 4\n * OpenAPI 3.1 uses JSON Schema Draft 2020-12\n */\nexport function toJSONSchema7(schema: SchemaObject | ReferenceObject): JSONSchema7 {\n  if (isReferenceObject(schema)) {\n    return { $ref: schema.$ref } as JSONSchema7;\n  }\n\n  // Handle OpenAPI 3.0 boolean exclusiveMaximum/exclusiveMinimum\n  const result: JSONSchema7 = { ...schema } as any;\n\n  // Convert boolean exclusiveMaximum to number format (JSON Schema Draft 7)\n  if ('exclusiveMaximum' in schema && typeof schema.exclusiveMaximum === 'boolean') {\n    if (schema.exclusiveMaximum && 'maximum' in schema) {\n      result.exclusiveMaximum = schema.maximum as number;\n      delete result.maximum;\n    }\n  }\n\n  // Convert boolean exclusiveMinimum to number format (JSON Schema Draft 7)\n  if ('exclusiveMinimum' in schema && typeof schema.exclusiveMinimum === 'boolean') {\n    if (schema.exclusiveMinimum && 'minimum' in schema) {\n      result.exclusiveMinimum = schema.minimum as number;\n      delete result.minimum;\n    }\n  }\n\n  return result;\n}\n\n/**\n * Main MCP Tool definition generated from OpenAPI\n */\nexport interface McpOpenAPITool {\n  /**\n   * Unique tool name (from operationId or generated)\n   */\n  name: string;\n\n  /**\n   * Tool description (from operation summary/description)\n   */\n  description: string;\n\n  /**\n   * Combined input schema including all parameters\n   * (path, query, header, cookie, body)\n   */\n  inputSchema: JSONSchema7;\n\n  /**\n   * Output schema based on response definitions\n   * Can be a union of multiple status codes\n   */\n  outputSchema?: JSONSchema7;\n\n  /**\n   * Mapping from input schema properties to actual request parameters\n   */\n  mapper: ParameterMapper[];\n\n  /**\n   * Additional metadata about the tool\n   */\n  metadata: ToolMetadata;\n}\n\n/**\n * Maps input schema properties to their actual request locations\n */\nexport interface ParameterMapper {\n  /**\n   * Property name in the input schema\n   */\n  inputKey: string;\n\n  /**\n   * Where this parameter should be placed in the request\n   */\n  type: ParameterLocation;\n\n  /**\n   * Original parameter name (before conflict resolution)\n   */\n  key: string;\n\n  /**\n   * Whether this parameter is required\n   */\n  required?: boolean;\n\n  /**\n   * Parameter style (for path/query parameters)\n   */\n  style?: string;\n\n  /**\n   * Whether to explode arrays/objects\n   */\n  explode?: boolean;\n\n  /**\n   * Custom serialization info\n   */\n  serialization?: SerializationInfo;\n}\n\n/**\n * Serialization information for complex parameters\n */\nexport interface SerializationInfo {\n  /**\n   * Content type for body parameters\n   */\n  contentType?: string;\n\n  /**\n   * Encoding rules\n   */\n  encoding?: Record<string, EncodingObject>;\n}\n\n/**\n * Additional metadata about the generated tool\n */\nexport interface ToolMetadata {\n  /**\n   * Original OpenAPI path\n   */\n  path: string;\n\n  /**\n   * HTTP method\n   */\n  method: HTTPMethod;\n\n  /**\n   * Operation ID from OpenAPI\n   */\n  operationId?: string;\n\n  /**\n   * Tags from OpenAPI\n   */\n  tags?: string[];\n\n  /**\n   * Whether operation is deprecated\n   */\n  deprecated?: boolean;\n\n  /**\n   * Security requirements\n   */\n  security?: SecurityRequirement[];\n\n  /**\n   * Server information\n   */\n  servers?: ServerInfo[];\n\n  /**\n   * Response status codes included in output schema\n   */\n  responseStatusCodes?: number[];\n\n  /**\n   * External documentation\n   */\n  externalDocs?: ExternalDocumentationObject;\n}\n\n/**\n * Security requirement definition\n */\nexport interface SecurityRequirement {\n  /**\n   * Security scheme name\n   */\n  scheme: string;\n\n  /**\n   * Security type\n   */\n  type: AuthType;\n\n  /**\n   * Scopes required (for OAuth2/OpenID Connect)\n   */\n  scopes?: string[];\n\n  /**\n   * Parameter name (for API key)\n   */\n  name?: string;\n\n  /**\n   * Parameter location (for API key)\n   */\n  in?: 'query' | 'header' | 'cookie';\n}\n\n/**\n * Server information\n */\nexport interface ServerInfo {\n  /**\n   * Server URL\n   */\n  url: string;\n\n  /**\n   * Server description\n   */\n  description?: string;\n\n  /**\n   * Server variables\n   */\n  variables?: Record<string, ServerVariableObject>;\n}\n\n/**\n * Options for loading OpenAPI specifications\n */\nexport interface LoadOptions {\n  /**\n   * Whether to dereference $refs in schemas\n   * @default true\n   */\n  dereference?: boolean;\n\n  /**\n   * Base URL for API requests\n   * Overrides servers in OpenAPI spec\n   */\n  baseUrl?: string;\n\n  /**\n   * Custom HTTP headers for loading from URL\n   */\n  headers?: Record<string, string>;\n\n  /**\n   * Request timeout in milliseconds\n   * @default 30000\n   */\n  timeout?: number;\n\n  /**\n   * Whether to validate the OpenAPI document\n   * @default true\n   */\n  validate?: boolean;\n\n  /**\n   * Whether to follow HTTP redirects\n   * @default true\n   */\n  followRedirects?: boolean;\n}\n\n/**\n * Operation object with additional context for filtering\n */\nexport type OperationWithContext = OperationObject & {\n  path: string;\n  method: string;\n};\n\n/**\n * Options for generating tools\n */\nexport interface GenerateOptions {\n  /**\n   * Include only these operation IDs\n   */\n  includeOperations?: string[];\n\n  /**\n   * Exclude these operation IDs\n   */\n  excludeOperations?: string[];\n\n  /**\n   * Custom filter function\n   */\n  filterFn?: (operation: OperationWithContext) => boolean;\n\n  /**\n   * Naming strategy for resolving conflicts\n   */\n  namingStrategy?: NamingStrategy;\n\n  /**\n   * Preferred response status codes (in order of preference)\n   * @default [200, 201, 204, 202, 203, 206]\n   */\n  preferredStatusCodes?: number[];\n\n  /**\n   * Whether to include deprecated operations\n   * @default false\n   */\n  includeDeprecated?: boolean;\n\n  /**\n   * Whether to include all response codes in output schema\n   * If false, only preferred status code is used\n   * @default true\n   */\n  includeAllResponses?: boolean;\n\n  /**\n   * Maximum depth for dereferencing schemas\n   * @default 10\n   */\n  maxSchemaDepth?: number;\n\n  /**\n   * Whether to include examples in schemas\n   * @default false\n   */\n  includeExamples?: boolean;\n}\n\n/**\n * Naming strategy for resolving parameter conflicts\n */\nexport interface NamingStrategy {\n  /**\n   * Resolver function for parameter name conflicts\n   * @param paramName - Original parameter name\n   * @param location - Parameter location\n   * @param index - Index of conflicting parameter (0-based)\n   * @returns New parameter name\n   */\n  conflictResolver: (\n    paramName: string,\n    location: ParameterLocation,\n    index: number\n  ) => string;\n\n  /**\n   * Function to generate tool names\n   * @param path - OpenAPI path\n   * @param method - HTTP method\n   * @param operationId - Operation ID if available\n   * @returns Tool name\n   */\n  toolNameGenerator?: (\n    path: string,\n    method: HTTPMethod,\n    operationId?: string\n  ) => string;\n}\n\n/**\n * Validation result\n */\nexport interface ValidationResult {\n  /**\n   * Whether the document is valid\n   */\n  valid: boolean;\n\n  /**\n   * Validation errors\n   */\n  errors?: ValidationErrorDetail[];\n\n  /**\n   * Validation warnings\n   */\n  warnings?: ValidationWarning[];\n}\n\n/**\n * Validation error detail\n */\nexport interface ValidationErrorDetail {\n  /**\n   * Error message\n   */\n  message: string;\n\n  /**\n   * Error path (JSON pointer)\n   */\n  path?: string;\n\n  /**\n   * Error code\n   */\n  code?: string;\n}\n\n/**\n * Validation warning\n */\nexport interface ValidationWarning {\n  /**\n   * Warning message\n   */\n  message: string;\n\n  /**\n   * Warning path (JSON pointer)\n   */\n  path?: string;\n\n  /**\n   * Warning code\n   */\n  code?: string;\n}\n"]}

package/src/validator.d.ts

@@ -0,0 +1,26 @@
+import type { OpenAPIDocument, ValidationResult } from './types';
+/**
+ * Validates OpenAPI documents
+ */
+export declare class Validator {
+    /**
+     * Validate an OpenAPI document
+     */
+    validate(document: OpenAPIDocument): Promise<ValidationResult>;
+    /**
+     * Check if OpenAPI version is valid
+     */
+    private isValidOpenAPIVersion;
+    /**
+     * Validate paths
+     */
+    private validatePaths;
+    /**
+     * Validate an operation
+     */
+    private validateOperation;
+    /**
+     * Validate parameters
+     */
+    private validateParameters;
+}

package/src/validator.js

@@ -0,0 +1,211 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Validator = void 0;
+/**
+ * Validates OpenAPI documents
+ */
+class Validator {
+    /**
+     * Validate an OpenAPI document
+     */
+    async validate(document) {
+        const errors = [];
+        const warnings = [];
+        // Check OpenAPI version
+        if (!document.openapi) {
+            errors.push({
+                message: 'Missing required field: openapi',
+                path: '/openapi',
+                code: 'MISSING_OPENAPI_VERSION',
+            });
+        }
+        else if (!this.isValidOpenAPIVersion(document.openapi)) {
+            errors.push({
+                message: `Unsupported OpenAPI version: ${document.openapi}. Expected 3.0.x or 3.1.x`,
+                path: '/openapi',
+                code: 'INVALID_OPENAPI_VERSION',
+            });
+        }
+        // Check info
+        if (!document.info) {
+            errors.push({
+                message: 'Missing required field: info',
+                path: '/info',
+                code: 'MISSING_INFO',
+            });
+        }
+        else {
+            if (!document.info.title) {
+                errors.push({
+                    message: 'Missing required field: info.title',
+                    path: '/info/title',
+                    code: 'MISSING_TITLE',
+                });
+            }
+            if (!document.info.version) {
+                errors.push({
+                    message: 'Missing required field: info.version',
+                    path: '/info/version',
+                    code: 'MISSING_VERSION',
+                });
+            }
+        }
+        // Check paths
+        if (!document.paths || Object.keys(document.paths).length === 0) {
+            warnings.push({
+                message: 'No paths defined in OpenAPI document',
+                path: '/paths',
+                code: 'NO_PATHS',
+            });
+        }
+        else {
+            this.validatePaths(document.paths, errors, warnings);
+        }
+        // Check servers
+        if (!document.servers || document.servers.length === 0) {
+            warnings.push({
+                message: 'No servers defined. You may need to provide a baseUrl option.',
+                path: '/servers',
+                code: 'NO_SERVERS',
+            });
+        }
+        // Check security schemes
+        if (document.security && !document.components?.securitySchemes) {
+            warnings.push({
+                message: 'Security requirements defined but no security schemes found',
+                path: '/security',
+                code: 'NO_SECURITY_SCHEMES',
+            });
+        }
+        return {
+            valid: errors.length === 0,
+            errors: errors.length > 0 ? errors : undefined,
+            warnings: warnings.length > 0 ? warnings : undefined,
+        };
+    }
+    /**
+     * Check if OpenAPI version is valid
+     */
+    isValidOpenAPIVersion(version) {
+        return /^3\.[01]\.\d+$/.test(version);
+    }
+    /**
+     * Validate paths
+     */
+    validatePaths(paths, errors, warnings) {
+        for (const [path, pathItem] of Object.entries(paths)) {
+            if (!pathItem)
+                continue;
+            // Check path format
+            if (!path.startsWith('/')) {
+                errors.push({
+                    message: `Path must start with '/': ${path}`,
+                    path: `/paths/${path}`,
+                    code: 'INVALID_PATH_FORMAT',
+                });
+            }
+            // Validate operations
+            const methods = ['get', 'post', 'put', 'patch', 'delete', 'head', 'options', 'trace'];
+            let hasOperations = false;
+            for (const method of methods) {
+                const operation = pathItem[method];
+                if (operation) {
+                    hasOperations = true;
+                    this.validateOperation(operation, path, method, errors, warnings);
+                }
+            }
+            if (!hasOperations && !pathItem.$ref) {
+                warnings.push({
+                    message: `Path has no operations: ${path}`,
+                    path: `/paths/${path}`,
+                    code: 'NO_OPERATIONS',
+                });
+            }
+        }
+    }
+    /**
+     * Validate an operation
+     */
+    validateOperation(operation, path, method, errors, warnings) {
+        const basePath = `/paths/${path}/${method}`;
+        // Check for operationId
+        if (!operation.operationId) {
+            warnings.push({
+                message: `Operation missing operationId: ${method.toUpperCase()} ${path}`,
+                path: `${basePath}/operationId`,
+                code: 'NO_OPERATION_ID',
+            });
+        }
+        // Check for responses
+        if (!operation.responses || Object.keys(operation.responses).length === 0) {
+            errors.push({
+                message: `Operation missing responses: ${method.toUpperCase()} ${path}`,
+                path: `${basePath}/responses`,
+                code: 'NO_RESPONSES',
+            });
+        }
+        // Validate parameters
+        if (operation.parameters) {
+            this.validateParameters(operation.parameters, path, method, errors, warnings);
+        }
+        // Check for path parameters in path string
+        const pathParams = path.match(/\{([^}]+)\}/g)?.map((p) => p.slice(1, -1)) ?? [];
+        const definedPathParams = new Set(operation.parameters?.filter((p) => p.in === 'path').map((p) => p.name) ?? []);
+        for (const param of pathParams) {
+            if (!definedPathParams.has(param)) {
+                errors.push({
+                    message: `Path parameter '${param}' not defined in parameters: ${method.toUpperCase()} ${path}`,
+                    path: `${basePath}/parameters`,
+                    code: 'MISSING_PATH_PARAMETER',
+                });
+            }
+        }
+    }
+    /**
+     * Validate parameters
+     */
+    validateParameters(parameters, path, method, errors, warnings) {
+        const basePath = `/paths/${path}/${method}/parameters`;
+        for (let i = 0; i < parameters.length; i++) {
+            const param = parameters[i];
+            const paramPath = `${basePath}/${i}`;
+            if (!param.name) {
+                errors.push({
+                    message: 'Parameter missing name',
+                    path: `${paramPath}/name`,
+                    code: 'MISSING_PARAMETER_NAME',
+                });
+            }
+            if (!param.in) {
+                errors.push({
+                    message: 'Parameter missing "in" field',
+                    path: `${paramPath}/in`,
+                    code: 'MISSING_PARAMETER_IN',
+                });
+            }
+            else if (!['path', 'query', 'header', 'cookie'].includes(param.in)) {
+                errors.push({
+                    message: `Invalid parameter location: ${param.in}`,
+                    path: `${paramPath}/in`,
+                    code: 'INVALID_PARAMETER_IN',
+                });
+            }
+            if (param.in === 'path' && !param.required) {
+                errors.push({
+                    message: `Path parameter '${param.name}' must be required`,
+                    path: `${paramPath}/required`,
+                    code: 'PATH_PARAMETER_NOT_REQUIRED',
+                });
+            }
+            if (!param.schema && !param.content) {
+                errors.push({
+                    message: `Parameter '${param.name}' missing schema or content`,
+                    path: `${paramPath}`,
+                    code: 'MISSING_PARAMETER_SCHEMA',
+                });
+            }
+        }
+    }
+}
+exports.Validator = Validator;
+//# sourceMappingURL=validator.js.map

package/src/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/validator.ts"],"names":[],"mappings":";;;AAGA;;GAEG;AACH,MAAa,SAAS;IACpB;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAyB;QACtC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAwB,EAAE,CAAC;QAEzC,wBAAwB;QACxB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,iCAAiC;gBAC1C,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,gCAAgC,QAAQ,CAAC,OAAO,2BAA2B;gBACpF,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,aAAa;QACb,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,8BAA8B;gBACvC,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,cAAc;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,oCAAoC;oBAC7C,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,eAAe;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,sCAAsC;oBAC/C,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,iBAAiB;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,sCAAsC;gBAC/C,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,+DAA+D;gBACxE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;QACL,CAAC;QAED,yBAAyB;QACzB,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,6DAA6D;gBACtE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,qBAAqB;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC9C,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,OAAe;QAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,KAA0B,EAC1B,MAA+B,EAC/B,QAA6B;QAE7B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,oBAAoB;YACpB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,6BAA6B,IAAI,EAAE;oBAC5C,IAAI,EAAE,UAAU,IAAI,EAAE;oBACtB,IAAI,EAAE,qBAAqB;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,sBAAsB;YACtB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACtF,IAAI,aAAa,GAAG,KAAK,CAAC;YAE1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,SAAS,EAAE,CAAC;oBACd,aAAa,GAAG,IAAI,CAAC;oBACrB,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YAED,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,2BAA2B,IAAI,EAAE;oBAC1C,IAAI,EAAE,UAAU,IAAI,EAAE;oBACtB,IAAI,EAAE,eAAe;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,SAAc,EACd,IAAY,EACZ,MAAc,EACd,MAA+B,EAC/B,QAA6B;QAE7B,MAAM,QAAQ,GAAG,UAAU,IAAI,IAAI,MAAM,EAAE,CAAC;QAE5C,wBAAwB;QACxB,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,kCAAkC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE;gBACzE,IAAI,EAAE,GAAG,QAAQ,cAAc;gBAC/B,IAAI,EAAE,iBAAiB;aACxB,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,gCAAgC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvE,IAAI,EAAE,GAAG,QAAQ,YAAY;gBAC7B,IAAI,EAAE,cAAc;aACrB,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB;QACtB,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChF,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CACxF,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,mBAAmB,KAAK,gCAAgC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE;oBAC/F,IAAI,EAAE,GAAG,QAAQ,aAAa;oBAC9B,IAAI,EAAE,wBAAwB;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAAiB,EACjB,IAAY,EACZ,MAAc,EACd,MAA+B,EAC/B,QAA6B;QAE7B,MAAM,QAAQ,GAAG,UAAU,IAAI,IAAI,MAAM,aAAa,CAAC;QAEvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC;YAErC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,wBAAwB;oBACjC,IAAI,EAAE,GAAG,SAAS,OAAO;oBACzB,IAAI,EAAE,wBAAwB;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,GAAG,SAAS,KAAK;oBACvB,IAAI,EAAE,sBAAsB;iBAC7B,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,+BAA+B,KAAK,CAAC,EAAE,EAAE;oBAClD,IAAI,EAAE,GAAG,SAAS,KAAK;oBACvB,IAAI,EAAE,sBAAsB;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,KAAK,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,mBAAmB,KAAK,CAAC,IAAI,oBAAoB;oBAC1D,IAAI,EAAE,GAAG,SAAS,WAAW;oBAC7B,IAAI,EAAE,6BAA6B;iBACpC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,cAAc,KAAK,CAAC,IAAI,6BAA6B;oBAC9D,IAAI,EAAE,GAAG,SAAS,EAAE;oBACpB,IAAI,EAAE,0BAA0B;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA/OD,8BA+OC","sourcesContent":["import type { OpenAPIDocument, ValidationResult, ValidationErrorDetail, ValidationWarning } from './types';\nimport { ValidationError } from './errors';\n\n/**\n * Validates OpenAPI documents\n */\nexport class Validator {\n  /**\n   * Validate an OpenAPI document\n   */\n  async validate(document: OpenAPIDocument): Promise<ValidationResult> {\n    const errors: ValidationErrorDetail[] = [];\n    const warnings: ValidationWarning[] = [];\n\n    // Check OpenAPI version\n    if (!document.openapi) {\n      errors.push({\n        message: 'Missing required field: openapi',\n        path: '/openapi',\n        code: 'MISSING_OPENAPI_VERSION',\n      });\n    } else if (!this.isValidOpenAPIVersion(document.openapi)) {\n      errors.push({\n        message: `Unsupported OpenAPI version: ${document.openapi}. Expected 3.0.x or 3.1.x`,\n        path: '/openapi',\n        code: 'INVALID_OPENAPI_VERSION',\n      });\n    }\n\n    // Check info\n    if (!document.info) {\n      errors.push({\n        message: 'Missing required field: info',\n        path: '/info',\n        code: 'MISSING_INFO',\n      });\n    } else {\n      if (!document.info.title) {\n        errors.push({\n          message: 'Missing required field: info.title',\n          path: '/info/title',\n          code: 'MISSING_TITLE',\n        });\n      }\n      if (!document.info.version) {\n        errors.push({\n          message: 'Missing required field: info.version',\n          path: '/info/version',\n          code: 'MISSING_VERSION',\n        });\n      }\n    }\n\n    // Check paths\n    if (!document.paths || Object.keys(document.paths).length === 0) {\n      warnings.push({\n        message: 'No paths defined in OpenAPI document',\n        path: '/paths',\n        code: 'NO_PATHS',\n      });\n    } else {\n      this.validatePaths(document.paths, errors, warnings);\n    }\n\n    // Check servers\n    if (!document.servers || document.servers.length === 0) {\n      warnings.push({\n        message: 'No servers defined. You may need to provide a baseUrl option.',\n        path: '/servers',\n        code: 'NO_SERVERS',\n      });\n    }\n\n    // Check security schemes\n    if (document.security && !document.components?.securitySchemes) {\n      warnings.push({\n        message: 'Security requirements defined but no security schemes found',\n        path: '/security',\n        code: 'NO_SECURITY_SCHEMES',\n      });\n    }\n\n    return {\n      valid: errors.length === 0,\n      errors: errors.length > 0 ? errors : undefined,\n      warnings: warnings.length > 0 ? warnings : undefined,\n    };\n  }\n\n  /**\n   * Check if OpenAPI version is valid\n   */\n  private isValidOpenAPIVersion(version: string): boolean {\n    return /^3\\.[01]\\.\\d+$/.test(version);\n  }\n\n  /**\n   * Validate paths\n   */\n  private validatePaths(\n    paths: Record<string, any>,\n    errors: ValidationErrorDetail[],\n    warnings: ValidationWarning[],\n  ): void {\n    for (const [path, pathItem] of Object.entries(paths)) {\n      if (!pathItem) continue;\n\n      // Check path format\n      if (!path.startsWith('/')) {\n        errors.push({\n          message: `Path must start with '/': ${path}`,\n          path: `/paths/${path}`,\n          code: 'INVALID_PATH_FORMAT',\n        });\n      }\n\n      // Validate operations\n      const methods = ['get', 'post', 'put', 'patch', 'delete', 'head', 'options', 'trace'];\n      let hasOperations = false;\n\n      for (const method of methods) {\n        const operation = pathItem[method];\n        if (operation) {\n          hasOperations = true;\n          this.validateOperation(operation, path, method, errors, warnings);\n        }\n      }\n\n      if (!hasOperations && !pathItem.$ref) {\n        warnings.push({\n          message: `Path has no operations: ${path}`,\n          path: `/paths/${path}`,\n          code: 'NO_OPERATIONS',\n        });\n      }\n    }\n  }\n\n  /**\n   * Validate an operation\n   */\n  private validateOperation(\n    operation: any,\n    path: string,\n    method: string,\n    errors: ValidationErrorDetail[],\n    warnings: ValidationWarning[],\n  ): void {\n    const basePath = `/paths/${path}/${method}`;\n\n    // Check for operationId\n    if (!operation.operationId) {\n      warnings.push({\n        message: `Operation missing operationId: ${method.toUpperCase()} ${path}`,\n        path: `${basePath}/operationId`,\n        code: 'NO_OPERATION_ID',\n      });\n    }\n\n    // Check for responses\n    if (!operation.responses || Object.keys(operation.responses).length === 0) {\n      errors.push({\n        message: `Operation missing responses: ${method.toUpperCase()} ${path}`,\n        path: `${basePath}/responses`,\n        code: 'NO_RESPONSES',\n      });\n    }\n\n    // Validate parameters\n    if (operation.parameters) {\n      this.validateParameters(operation.parameters, path, method, errors, warnings);\n    }\n\n    // Check for path parameters in path string\n    const pathParams = path.match(/\\{([^}]+)\\}/g)?.map((p) => p.slice(1, -1)) ?? [];\n    const definedPathParams = new Set(\n      operation.parameters?.filter((p: any) => p.in === 'path').map((p: any) => p.name) ?? [],\n    );\n\n    for (const param of pathParams) {\n      if (!definedPathParams.has(param)) {\n        errors.push({\n          message: `Path parameter '${param}' not defined in parameters: ${method.toUpperCase()} ${path}`,\n          path: `${basePath}/parameters`,\n          code: 'MISSING_PATH_PARAMETER',\n        });\n      }\n    }\n  }\n\n  /**\n   * Validate parameters\n   */\n  private validateParameters(\n    parameters: any[],\n    path: string,\n    method: string,\n    errors: ValidationErrorDetail[],\n    warnings: ValidationWarning[],\n  ): void {\n    const basePath = `/paths/${path}/${method}/parameters`;\n\n    for (let i = 0; i < parameters.length; i++) {\n      const param = parameters[i];\n      const paramPath = `${basePath}/${i}`;\n\n      if (!param.name) {\n        errors.push({\n          message: 'Parameter missing name',\n          path: `${paramPath}/name`,\n          code: 'MISSING_PARAMETER_NAME',\n        });\n      }\n\n      if (!param.in) {\n        errors.push({\n          message: 'Parameter missing \"in\" field',\n          path: `${paramPath}/in`,\n          code: 'MISSING_PARAMETER_IN',\n        });\n      } else if (!['path', 'query', 'header', 'cookie'].includes(param.in)) {\n        errors.push({\n          message: `Invalid parameter location: ${param.in}`,\n          path: `${paramPath}/in`,\n          code: 'INVALID_PARAMETER_IN',\n        });\n      }\n\n      if (param.in === 'path' && !param.required) {\n        errors.push({\n          message: `Path parameter '${param.name}' must be required`,\n          path: `${paramPath}/required`,\n          code: 'PATH_PARAMETER_NOT_REQUIRED',\n        });\n      }\n\n      if (!param.schema && !param.content) {\n        errors.push({\n          message: `Parameter '${param.name}' missing schema or content`,\n          path: `${paramPath}`,\n          code: 'MISSING_PARAMETER_SCHEMA',\n        });\n      }\n    }\n  }\n}\n"]}