oas 36.0.3 → 37.1.0

package/dist/chunk-6HXOZ5GY.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/erunion/code/readme/oas/packages/oas/dist/chunk-6HXOZ5GY.cjs","../src/extensions.ts"],"names":[],"mappings":"AAAA;AC+BO,IAAM,aAAA,EAAe,cAAA;AAoBrB,IAAM,iBAAA,EAAmB,kBAAA;AAwBzB,IAAM,QAAA,EAAU,SAAA;AAmBhB,IAAM,SAAA,EAAW,UAAA;AAmBjB,IAAM,gBAAA,EAAkB,iBAAA;AAkBxB,IAAM,cAAA,EAAgB,eAAA;AAuBtB,IAAM,mBAAA,EAAqB,oBAAA;AAoB3B,IAAM,cAAA,EAAgB,eAAA;AAiBtB,IAAM,kBAAA,EAAoB,mBAAA;AAc1B,IAAM,YAAA,EAAc,aAAA;AAepB,IAAM,oBAAA,EAAsB,qBAAA;AAe5B,IAAM,WAAA,EAAa,YAAA;AAmFnB,IAAM,kBAAA,EAAgC;AAAA,EAC3C,CAAC,YAAY,CAAA,EAAG,KAAA,CAAA;AAAA,EAChB,CAAC,mBAAmB,CAAA,EAAG,KAAA;AAAA,EACvB,CAAC,gBAAgB,CAAA,EAAG,IAAA;AAAA,EACpB,CAAC,OAAO,CAAA,EAAG,KAAA,CAAA;AAAA,EACX,CAAC,QAAQ,CAAA,EAAG,KAAA;AAAA,EACZ,CAAC,eAAe,CAAA,EAAG,IAAA;AAAA,EACnB,CAAC,aAAa,CAAA,EAAG,CAAC,CAAA;AAAA,EAClB,CAAC,kBAAkB,CAAA,EAAG,CAAC,MAAA,EAAQ,OAAA,EAAS,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAC1E,CAAC,aAAa,CAAA,EAAG,IAAA;AAAA,EACjB,CAAC,iBAAiB,CAAA,EAAG,CAAC,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAChF,CAAC,WAAW,CAAA,EAAG,IAAA;AAAA,EACf,CAAC,UAAU,CAAA,EAAG,KAAA;AAChB,CAAA;AAMO,SAAS,gBAAA,CAAiB,SAAA,EAAsC,GAAA,EAA2B;AAChG,EAAA,OAAO,OAAA,CAAQ,IAAA,GAAO,UAAA,GAAa,GAAG,CAAA;AACxC;AAMO,SAAS,YAAA,CAAa,SAAA,EAAsC,GAAA,EAAkB,SAAA,EAA4B;AAC/G,EAAA,GAAA,CAAI,SAAA,EAAW;AACb,IAAA,GAAA,CAAI,SAAA,CAAU,YAAA,CAAa,UAAU,CAAA,EAAG;AACtC,MAAA,MAAM,KAAA,EAAO,SAAA,CAAU,YAAA,CAAa,UAAU,CAAA;AAC9C,MAAA,GAAA,CAAI,KAAA,GAAQ,OAAO,KAAA,IAAS,SAAA,GAAY,UAAA,GAAa,IAAA,EAAM;AACzD,QAAA,OAAO,IAAA,CAAK,SAA6B,CAAA;AAAA,MAC3C;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,SAAA,CAAU,YAAA,CAAa,CAAA,EAAA,EAAK,SAAS,CAAA,CAAA;AACJ,MAAA;AACH,IAAA;AACO,MAAA;AACzC,IAAA;AACF,EAAA;AAIgC,EAAA;AACI,IAAA;AACpC,EAAA;AAEuC,EAAA;AACR,IAAA;AACW,IAAA;AACG,MAAA;AAC3C,IAAA;AACF,EAAA;AAE0C,EAAA;AACX,IAAA;AACW,EAAA;AAClB,IAAA;AACxB,EAAA;AAGoC,EAAA;AACoB,IAAA;AACxD,EAAA;AAEO,EAAA;AACT;AAUE;AAEe,EAAA;AACb,IAAA;AACF,EAAA;AAEuC,EAAA;AACH,EAAA;AACQ,EAAA;AAEJ,EAAA;AACL,IAAA;AACnC,EAAA;AAEqC,EAAA;AACO,EAAA;AACT,IAAA;AACnC,EAAA;AACF;ADhV8C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/erunion/code/readme/oas/packages/oas/dist/chunk-6HXOZ5GY.cjs","sourcesContent":[null,"import type { Operation } from './operation/index.js';\nimport type { OASDocument } from './types.js';\n\n/**\n * Enables custom-written code samples to be set for your operations. Use this if you have specific\n * formatting that may not be followed by the auto-generated code samples. Custom code samples are\n * treated as static content.\n *\n * This extension only be placed at the operation level.\n *\n * @defaultValue []\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#custom-code-samples}\n * @example\n * {\n *  \"x-readme\": {\n *    \"code-samples\": [\n *      {\n *        \"language\": \"curl\",\n *        \"code\": \"curl -X POST https://api.example.com/v2/alert\",\n *        \"name\": \"Custom cURL snippet\",\n *        \"install\": \"brew install curl\"\n *      },\n *      {\n *        \"language\": \"php\",\n *        \"code\": \"<?php echo \\\"This is our custom PHP code snippet.\\\"; ?>\",\n *        \"name\": \"Custom PHP snippet\"\n *      }\n *    ]\n *  }\n * }\n */\nexport const CODE_SAMPLES = 'code-samples';\n\n/**\n * Disables the API Explorer's \"Try It\" button, preventing users from making API requests from\n * within your docs. Users will still be able to fill out any entry fields (path or query\n * parameters, etc.), and code snippets will be auto-generated based on the user's input, however\n * to interact with your API the user will need to copy the code snippet and execute it outside of\n * your docs.\n *\n * This **does not** disable your API Reference documentation.\n *\n * @defaultValue true\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#disable-the-api-explorer}\n * @example\n * {\n *  \"x-readme\": {\n *    \"explorer-enabled\": true\n *  }\n * }\n */\nexport const EXPLORER_ENABLED = 'explorer-enabled';\n\n/**\n * Adds static headers to add to each request. Use this when there are specific headers unique to\n * your API.\n *\n * @defaultValue []\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#static-headers}\n * @example\n * {\n *  \"x-readme\": {\n *    \"headers\": [\n *      {\n *        \"key\": \"X-Static-Header-One\",\n *        \"value\": \"owlbert\"\n *      },\n *      {\n *        \"key\": \"X-Static-Header-Two\",\n *        \"value\": \"owlivia\"\n *      }\n *    ]\n *  }\n * }\n */\nexport const HEADERS = 'headers';\n\n/**\n * Allows you to mark an API endpoint, or _every_ API endpoint if defined in the root, as being\n * internal and hidden from your public API reference.\n *\n * @defaultValue false\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#internal}\n * @example\n * {\n *  \"x-internal\": true\n * }\n * @example\n * {\n *  \"x-readme\": {\n *    \"internal\": true\n *  }\n * }\n */\nexport const INTERNAL = 'internal';\n\n/**\n * Disables API requests from the API Explorer's \"Try It\" button from being sent into our [API\n * Metrics](https://readme.com/metrics) for you and your users. Additionally on any API endpoint\n * that this is disabled on your users will not see lists or graphs of previous requests they've\n * made against that API endpoint — either through the API Explorer's interactivity or through one\n * of our [Metrics SDKs](https://docs.readme.com/main/docs/api-metrics-setup) (if you have those\n * installed on your API).\n *\n * @defaultValue true\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#disable-api-metrics}\n * @example\n * {\n *  \"x-readme\": {\n *    \"metrics-defaults\": false\n *  }\n * }\n */\nexport const METRICS_ENABLED = 'metrics-enabled';\n\n/**\n * Configuration options for OAuth flows in the API Explorer.\n *\n * @defaultValue {}\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#oauth-configuration-options}\n * @example\n * {\n *  \"x-readme\": {\n *    \"oauth-options\": {\n *      \"scopeSeparator\": \",\",\n *      \"useInsecureClientAuthentication\": true,\n *      \"usePkce\": false\n *    }\n *  }\n * }\n */\nexport const OAUTH_OPTIONS = 'oauth-options';\n\n/**\n * Controls the order of parameters on your API Reference pages.\n *\n * Your custom ordering **must** contain all of our available parameter types:\n *\n *  - `path`: Path parameters\n *  - `query`: Query parameters\n *  - `body`: Non-`application/x-www-form-urlencoded` request body payloads\n *  - `cookie`: Cookie parameters\n *  - `form`: `application/x-www-form-urlencoded` request body payloads\n *  - `header`: Header parameters\n *\n * @defaultValue ['path', 'query', 'body', 'cookie', 'form', 'header']\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#parameter-ordering}\n * @example\n * {\n *  \"x-readme\": {\n *    \"parameter-ordering\": ['path', 'query', 'header', 'cookie', 'body', 'form']\n *  }\n * }\n */\nexport const PARAMETER_ORDERING = 'parameter-ordering';\n\n/**\n * Toggles the CORS proxy used when making API requests from within your docs (via the \"Try It\"\n * button). If your API is already set up to return CORS headers, you can safely disable this\n * feature.\n *\n * Disabling the CORS proxy will make the request directly from the user's browser and will prevent\n * [Metrics](https://docs.readme.com/main/docs/getting-started-with-metrics) data from being logged\n * by us unless [Metrics have already set up on your backend](https://docs.readme.com/main/docs/api-metrics-setup).\n *\n * @defaultValue true\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#cors-proxy-enabled}\n * @example\n * {\n *  \"x-readme\": {\n *    \"proxy-enabled\": true\n *  }\n * }\n */\nexport const PROXY_ENABLED = 'proxy-enabled';\n\n/**\n * Toggles what languages are shown by default for code samples in the API Explorer. This only\n * affects what languages are initially shown to the user; if the user picks another language from\n * the three-dot menu, that language and the respective auto-generated code snippet will also appear\n * as an option in the API Explorer.\n *\n * @defaultValue ['shell', 'node', 'ruby', 'php', 'python', 'java', 'csharp']\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#code-sample-languages}\n * @example\n * {\n *  \"x-readme\": {\n *    \"samples-languages\": [\"shell\", \"node\", \"ruby\", \"javascript\", \"python\"]\n *  }\n * }\n */\nexport const SAMPLES_LANGUAGES = 'samples-languages';\n\n/**\n * Toggles if you will see code snippets for ReadMe's SDK code generator tool `api`.\n *\n * @defaultValue true\n * @see {@link https://api.readme.dev}\n * @example\n * {\n *  \"x-readme\": {\n *    \"simple-mode\": false\n *  }\n * }\n */\nexport const SIMPLE_MODE = 'simple-mode';\n\n/**\n * If `true`, tags are generated from the file top-down. If `false`, we sort the tags\n * based off the `tags` array in the OAS file.\n *\n * @defaultValue false\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions#disable-tag-sorting}\n * @example\n * {\n *  \"x-readme\": {\n *    \"disable-tag-sorting\": true\n *  }\n * }\n */\nexport const DISABLE_TAG_SORTING = 'disable-tag-sorting';\n\n/**\n * A customer-declared health/status URL for the API. When present, it's surfaced to AI agents as\n * the RFC 9727 `status` link relation in the project's `/.well-known/api-catalog`.\n *\n * @see {@link https://docs.readme.com/main/docs/openapi-extensions}\n * @see {@link https://www.rfc-editor.org/rfc/rfc9727}\n * @example\n * {\n *  \"x-readme\": {\n *    \"status-url\": \"https://status.example.com\"\n *  }\n * }\n */\nexport const STATUS_URL = 'status-url';\n\nexport interface Extensions {\n  [CODE_SAMPLES]:\n    | {\n        /**\n         * Custom code snippet\n         * @example \"curl -X POST https://api.example.com/v2/alert\"\n         */\n        code: string;\n        /**\n         * Corresponding response example\n         * @see {@link https://docs.readme.com/main/docs/openapi-extensions#corresponding-response-examples}\n         */\n        correspondingExample?: string;\n        /**\n         * Library installation instructions\n         * @example \"brew install httpie\"\n         * @example \"npm install node-fetch@2 --save\"\n         */\n        install?: string;\n        /**\n         * Language for syntax highlighting\n         * @example shell\n         */\n        language: string;\n        /**\n         * Optional title for code sample\n         * @example \"Custom cURL snippet\"\n         */\n        name?: string;\n      }[]\n    | undefined;\n  [DISABLE_TAG_SORTING]: boolean;\n  [EXPLORER_ENABLED]: boolean;\n  [HEADERS]: Record<string, number | string>[] | undefined;\n  [INTERNAL]: boolean;\n  [METRICS_ENABLED]: boolean;\n  [OAUTH_OPTIONS]: {\n    /**\n     * Scope separator for passing scopes. This value will be URL-encoded.\n     *\n     * @example \",\"\n     * @example \"+\"\n     * @default \" \"\n     * @see {@link https://datatracker.ietf.org/doc/html/rfc6749#section-3.3} Scope separators information from OAuth 2.0 specification\n     */\n    scopeSeparator?: string;\n\n    /**\n     * When enabled, the client credentials (i.e., `client_id` and `client_secret`) are sent in the request body (NOT recommended).\n     * When disabled (the default), client credentials are sent using the HTTP Basic Authentication scheme.\n     *\n     * This is applicable for all requests to the token endpoint.\n     *\n     * @see {@link https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1}\n     * @see {@link https://datatracker.ietf.org/doc/html/rfc6749#section-3.2}\n     *\n     * @example true\n     * @default false\n     */\n    useInsecureClientAuthentication?: boolean;\n\n    /**\n     * When enabled, uses PKCE (Proof Key for Code Exchange) for the authorization code flow.\n     * The client secret is replaced with an auto-generated code verifier and code challenge.\n     * When disabled, uses the standard OAuth 2.0 authorization code flow with client credentials.\n     *\n     * @see {@link https://datatracker.ietf.org/doc/html/rfc7636#section-4.1}\n     * @see {@link https://datatracker.ietf.org/doc/html/rfc7636#section-4.2}\n     *\n     * @example true\n     * @default false\n     */\n    usePkce?: boolean;\n  };\n  [PARAMETER_ORDERING]: ('body' | 'cookie' | 'form' | 'header' | 'path' | 'query')[];\n  [PROXY_ENABLED]: boolean;\n  [SAMPLES_LANGUAGES]: string[];\n  [SIMPLE_MODE]: boolean;\n  [STATUS_URL]: string | undefined;\n}\n\nexport const extensionDefaults: Extensions = {\n  [CODE_SAMPLES]: undefined,\n  [DISABLE_TAG_SORTING]: false,\n  [EXPLORER_ENABLED]: true,\n  [HEADERS]: undefined,\n  [INTERNAL]: false,\n  [METRICS_ENABLED]: true,\n  [OAUTH_OPTIONS]: {},\n  [PARAMETER_ORDERING]: ['path', 'query', 'body', 'cookie', 'form', 'header'],\n  [PROXY_ENABLED]: true,\n  [SAMPLES_LANGUAGES]: ['shell', 'node', 'ruby', 'php', 'python', 'java', 'csharp'],\n  [SIMPLE_MODE]: true,\n  [STATUS_URL]: undefined,\n};\n\n/**\n * Determing if an OpenAPI definition has an extension set in its root schema.\n *\n */\nexport function hasRootExtension(extension: string | keyof Extensions, api: OASDocument): boolean {\n  return Boolean(api && extension in api);\n}\n\n/**\n * Retrieve a custom specification extension off of the API definition.\n *\n */\nexport function getExtension(extension: string | keyof Extensions, api: OASDocument, operation?: Operation): any {\n  if (operation) {\n    if (operation.hasExtension('x-readme')) {\n      const data = operation.getExtension('x-readme') as Extensions;\n      if (data && typeof data === 'object' && extension in data) {\n        return data[extension as keyof Extensions];\n      }\n    }\n\n    if (operation.hasExtension(`x-${extension}`)) {\n      return operation.getExtension(`x-${extension}`);\n    } else if (operation.hasExtension(extension)) {\n      return operation.getExtension(extension);\n    }\n  }\n\n  // Because our `code-samples` extension is intended for operation-level use, if it's instead\n  // placed at the API definition root level then we should ignore it and return our set defaults.\n  if (extension === CODE_SAMPLES) {\n    return extensionDefaults[extension];\n  }\n\n  if (hasRootExtension('x-readme', api)) {\n    const data = api?.['x-readme'] as Extensions;\n    if (data && typeof data === 'object' && extension in data) {\n      return data[extension as keyof Extensions];\n    }\n  }\n\n  if (hasRootExtension(`x-${extension}`, api)) {\n    return api?.[`x-${extension}`];\n  } else if (hasRootExtension(extension, api)) {\n    return api?.[extension];\n  }\n\n  // If this is otherwise an extension of our own then we should return the default value for it.\n  if (extension in extensionDefaults) {\n    return extensionDefaults[extension as keyof Extensions];\n  }\n\n  return undefined;\n}\n\n/**\n * Validate that the data for an instanceof our `PARAMETER_ORDERING` extension is properly\n * configured.\n *\n * @private\n */\nexport function validateParameterOrdering(\n  ordering: (typeof extensionDefaults)[typeof PARAMETER_ORDERING] | undefined,\n  extension: string,\n): void {\n  if (!ordering) {\n    return;\n  }\n\n  const defaultValue = extensionDefaults[PARAMETER_ORDERING];\n  const requiredLength = defaultValue.length;\n  const defaultsHuman = `${defaultValue.slice(0, -1).join(', ')}, and ${defaultValue.slice(-1)}`;\n\n  if (ordering.length !== requiredLength) {\n    throw new TypeError(`\"${extension}\" must contain ${requiredLength} items comprised of: ${defaultsHuman}`);\n  }\n\n  const intersection = ordering.filter(value => defaultValue.includes(value.toLowerCase() as any));\n  if (intersection.length !== requiredLength) {\n    throw new TypeError(`\"${extension}\" must contain ${requiredLength} items comprised of: ${defaultsHuman}`);\n  }\n}\n"]}

package/dist/{chunk-RQZ2BPMU.js → chunk-I7R3WTTN.js}

@@ -1,4 +1,5 @@
 import {
+  SERVER_VARIABLE_REGEX,
   applyDiscriminatorOneOfToUsedSchemas,
   cloneObject,
   collectRefsInSchema,
@@ -6,7 +7,6 @@ import {
   dereferenceRef,
   dereferenceRefDeep,
   filterRequiredRefsToReferenced,
-  getDereferencingOptions,
   getParametersAsJSONSchema,
   getSchemaVersionString,
   isObject,
@@ -15,16 +15,167 @@ import {
   mergeReferencedSchemasIntoRoot,
   supportedMethods,
   toJSONSchema
-} from "./chunk-6MDVLJ3A.js";
+} from "./chunk-6APWNY54.js";
 import {
   getExtension
-} from "./chunk-S27IGTVG.js";
+} from "./chunk-LZNTJ4ZR.js";
 import {
   isRef
 } from "./chunk-XG4HGNCN.js";
 
-// src/operation/index.ts
-import { $RefParser } from "@apidevtools/json-schema-ref-parser";
+// src/lib/urls.ts
+import { match, pathToRegexp } from "path-to-regexp";
+
+// src/lib/get-user-variable.ts
+function getUserVariable(user, property, selectedApp) {
+  let key = user;
+  if ("keys" in user && Array.isArray(user.keys) && user.keys.length) {
+    if (selectedApp) {
+      key = user.keys.find((k) => k.name === selectedApp);
+    } else {
+      key = user.keys[0];
+    }
+  }
+  return key?.[property] || user[property] || null;
+}
+
+// src/lib/urls.ts
+function stripTrailingSlash(url) {
+  if (url[url.length - 1] === "/") {
+    return url.slice(0, -1);
+  }
+  return url;
+}
+function ensureProtocol(url) {
+  if (url.match(/^\/\//)) {
+    return `https:${url}`;
+  }
+  if (!url.match(/\/\//)) {
+    return `https://${url}`;
+  }
+  return url;
+}
+function normalizedURLFromServers(servers, selected) {
+  const exampleDotCom = "https://example.com";
+  let url;
+  try {
+    url = servers?.[selected]?.url;
+    if (!url) throw new Error("no url");
+    url = stripTrailingSlash(url);
+    if (url.startsWith("/") && !url.startsWith("//")) {
+      const urlWithOrigin = new URL(exampleDotCom);
+      urlWithOrigin.pathname = url;
+      url = urlWithOrigin.href;
+    }
+  } catch {
+    url = exampleDotCom;
+  }
+  return ensureProtocol(url);
+}
+function variablesFromServers(servers, selected = 0) {
+  return servers?.[selected]?.variables || {};
+}
+function defaultVariablesFromServers(servers, selected = 0, user = {}) {
+  const variables = variablesFromServers(servers, selected);
+  const defaults = {};
+  Object.keys(variables).forEach((key) => {
+    defaults[key] = getUserVariable(user, key) || variables[key].default || "";
+  });
+  return defaults;
+}
+function splitUrlFromServers(servers, selected = 0) {
+  const url = normalizedURLFromServers(servers, selected);
+  const variables = variablesFromServers(servers, selected);
+  return url.split(/({.+?})/).filter(Boolean).map((part, i) => {
+    const isVariable = part.match(/[{}]/);
+    const value = part.replace(/[{}]/g, "");
+    const key = `${value}-${i}`;
+    if (!isVariable) {
+      return {
+        type: "text",
+        value,
+        key
+      };
+    }
+    const variable = variables?.[value];
+    return {
+      type: "variable",
+      value,
+      key,
+      description: variable?.description,
+      enum: variable?.enum
+    };
+  });
+}
+function transformURLIntoRegex(url) {
+  return stripTrailingSlash(url.replace(SERVER_VARIABLE_REGEX, "([-_a-zA-Z0-9:.[\\]]+)"));
+}
+function normalizePath(path) {
+  return path.replace(/({?){(.*?)}(}?)/g, (str, ...args) => {
+    return `:${args[1].replace("-", "")}`;
+  }).replace(/::/, "\\::").split("?")[0];
+}
+function generatePathMatches(paths, pathName, origin) {
+  const prunedPathName = pathName.split("?")[0];
+  const matches = Object.keys(paths).map((path) => {
+    const cleanedPath = normalizePath(path);
+    let matchResult;
+    try {
+      const matchStatement = match(cleanedPath, { decode: decodeURIComponent });
+      matchResult = matchStatement(prunedPathName);
+    } catch {
+      return false;
+    }
+    const slugs = {};
+    if (matchResult && Object.keys(matchResult.params).length) {
+      Object.keys(matchResult.params).forEach((param) => {
+        slugs[`:${param}`] = matchResult.params[param];
+      });
+    }
+    return {
+      url: {
+        origin,
+        path: cleanedPath.replace(/\\::/, "::"),
+        nonNormalizedPath: path,
+        slugs
+      },
+      operation: paths[path],
+      match: matchResult
+    };
+  }).filter((item) => item !== false);
+  return matches.filter((p) => p.match);
+}
+function filterPathMethods(pathMatches, targetMethod) {
+  const regExp = pathToRegexp(targetMethod);
+  return pathMatches.map((p) => {
+    const captures = Object.keys(p.operation).filter((r) => regExp.regexp.exec(r));
+    if (captures.length) {
+      const method = captures[0];
+      p.url.method = method.toUpperCase();
+      return {
+        url: p.url,
+        operation: p.operation[method]
+      };
+    }
+    return false;
+  }).filter((item) => Boolean(item));
+}
+function findTargetPath(pathMatches) {
+  if (!pathMatches.length) {
+    return void 0;
+  }
+  let minCount = Object.keys(pathMatches[0].url.slugs).length;
+  let found;
+  for (let m = 0; m < pathMatches.length; m += 1) {
+    const selection = pathMatches[m];
+    const paramCount = Object.keys(selection.url.slugs).length;
+    if (paramCount <= minCount) {
+      minCount = paramCount;
+      found = selection;
+    }
+  }
+  return found;
+}
 
 // src/operation/lib/dedupe-common-parameters.ts
 function dedupeCommonParameters(parameters, commonParameters) {
@@ -552,7 +703,7 @@ function getOperationId(path, method, operation, opts = {}) {
     if (operationIdExists) {
       operationId = sanitize(operationId);
     }
-    operationId = operationId.replace(/^[0-9]/g, (match) => `_${match}`);
+    operationId = operationId.replace(/^[0-9]/g, (match2) => `_${match2}`);
     operationId = operationId.charAt(0).toLowerCase() + operationId.slice(1);
     if (operationId.startsWith(currMethod)) {
       return operationId;
@@ -790,24 +941,6 @@ var Operation = class {
    * Flattened out arrays of both request and response headers that are utilized on this operation.
    */
   headers;
-  /**
-   * Internal storage array that the library utilizes to keep track of the times the
-   * {@see Operation.dereference} has been called so that if you initiate multiple promises they'll
-   * all end up returning the same data set once the initial dereference call completed.
-   */
-  promises;
-  /**
-   * Internal storage array that the library utilizes to keep track of its `dereferencing` state so
-   * it doesn't initiate multiple dereferencing processes.
-   */
-  dereferencing;
-  /**
-   * Have the component schemas within this API definition been decorated with our
-   * `x-readme-ref-name` extension?
-   *
-   * @see {@link decorateComponentSchemas}
-   */
-  schemasDecorated = false;
   constructor(oas, path, method, operation) {
     this.oas = oas;
     this.schema = operation;
@@ -823,12 +956,6 @@ var Operation = class {
       request: [],
       response: []
     };
-    this.promises = [];
-    this.dereferencing = {
-      processing: false,
-      complete: false,
-      circularRefs: []
-    };
   }
   /**
    * Retrieve the `summary` for this operation.
@@ -862,6 +989,35 @@ var Operation = class {
     }
     return void 0;
   }
+  /**
+   * Retrieve the server objects that apply to this operation, using OpenAPI server precedence:
+   * operation-level servers, then path-item servers, then root-level servers.
+   */
+  getServers() {
+    if (this.schema.servers?.length) {
+      return this.schema.servers;
+    }
+    if (this.api.paths?.[this.path]) {
+      const pathItem = dereferenceRef(this.api.paths[this.path], this.api);
+      if (pathItem && !isRef(pathItem) && pathItem.servers?.length) {
+        return pathItem.servers;
+      }
+    }
+    return this.api.servers || [];
+  }
+  url(selected = 0, variables) {
+    const url = normalizedURLFromServers(this.getServers(), selected);
+    return this.oas.replaceUrl(url, variables || this.defaultVariables(selected)).trim();
+  }
+  variables(selected = 0) {
+    return variablesFromServers(this.getServers(), selected);
+  }
+  defaultVariables(selected = 0) {
+    return defaultVariablesFromServers(this.getServers(), selected, this.oas.user);
+  }
+  splitUrl(selected = 0) {
+    return splitUrlFromServers(this.getServers(), selected);
+  }
   /**
    * Retrieve the primary content type for this operation. If multiple exist, the first JSON-like
    * type will be returned.
@@ -1245,15 +1401,7 @@ var Operation = class {
    *
    */
   getParametersAsJSONSchema(opts = {}) {
-    if (this.isDereferenced()) {
-      throw new Error(
-        "`.getParametersAsJSONSchema()` is not compatible with an operation or OpenAPI definition that has been run through `.dereference().`"
-      );
-    }
-    if (!this.schemasDecorated) {
-      decorateComponentSchemasWithRefName(this.api);
-      this.schemasDecorated = true;
-    }
+    decorateComponentSchemasWithRefName(this.api);
     return getParametersAsJSONSchema(this, this.api, {
       includeDiscriminatorMappingRefs: true,
       ...opts
@@ -1273,15 +1421,7 @@ var Operation = class {
    *   this content-type, the function will return null.
    */
   getResponseAsJSONSchema(statusCode, opts = {}) {
-    if (this.isDereferenced()) {
-      throw new Error(
-        "`.getResponseAsJSONSchema()` is not compatible with an operation or OpenAPI definition that has been run through `.dereference().`"
-      );
-    }
-    if (!this.schemasDecorated) {
-      decorateComponentSchemasWithRefName(this.api);
-      this.schemasDecorated = true;
-    }
+    decorateComponentSchemasWithRefName(this.api);
     return getResponseAsJSONSchema(this, this.api, statusCode, {
       includeDiscriminatorMappingRefs: true,
       ...opts
@@ -1627,107 +1767,6 @@ var Operation = class {
     this.exampleGroups = groups;
     return groups;
   }
-  /**
-   * Dereference the current operation schema so it can be parsed free of worries of `$ref` schemas
-   * and circular structures.
-   *
-   */
-  async dereference(opts) {
-    if (this.dereferencing.complete) {
-      return Promise.resolve(true);
-    }
-    if (this.dereferencing.processing) {
-      return new Promise((resolve, reject) => {
-        this.promises.push({ resolve, reject });
-      });
-    }
-    this.dereferencing.processing = true;
-    if (!this.schemasDecorated) {
-      decorateComponentSchemasWithRefName(this.api);
-      this.schemasDecorated = true;
-    }
-    const { api, schema, promises } = this;
-    const circularRefs = /* @__PURE__ */ new Set();
-    const dereferencingOptions = getDereferencingOptions(circularRefs);
-    const parser = new $RefParser();
-    return parser.dereference(
-      "#/__INTERNAL__",
-      {
-        // Because `json-schema-ref-parser` will dereference this entire object as we only want
-        // to dereference this operation schema we're attaching it to the `__INTERNAL__` key, and
-        // later using that to extract our dereferenced schema. If we didn't do this then we run
-        // the risk of any keyword in `schema` being overriden by `paths` and `components`.
-        //
-        // This solution isn't the best and still requires us to send `json-schema-ref-parser`
-        // basically the entire API defintiion but because we don't know what `$ref` pointers in
-        // `schema` reference, we can't know which parts of full API definition we could safely
-        // exclude from this process.
-        __INTERNAL__: structuredClone(schema),
-        paths: api.paths ?? void 0,
-        components: api.components ?? void 0
-      },
-      {
-        ...dereferencingOptions,
-        dereference: {
-          ...dereferencingOptions.dereference,
-          /**
-           * Because we only want to dereference our `__INTERNAL__` schema, not the **entire**
-           * API definition if the parser attemps to dereference anything but that then we
-           * should bail out of that crawler.
-           *
-           * @fixme this may cause issues where a path references a schema within itself to be ignored.
-           */
-          excludedPathMatcher: (path) => {
-            if (path === "#/paths" || path.startsWith("#/paths/")) {
-              return true;
-            }
-            return path === "#/components" || path.startsWith("#/components/");
-          }
-        }
-      }
-    ).then((res) => {
-      const dereferenced = res;
-      this.schema = dereferenced.__INTERNAL__;
-      this.promises = promises;
-      this.dereferencing = {
-        processing: false,
-        complete: true,
-        // We need to convert our `Set` to an array in order to match the typings.
-        circularRefs: [...circularRefs]
-      };
-      if (opts?.cb) {
-        opts.cb();
-      }
-    }).then(() => {
-      return this.promises.map((deferred) => deferred.resolve());
-    }).catch((err) => {
-      this.dereferencing.processing = false;
-      this.promises.map((deferred) => deferred.reject(err));
-      throw err;
-    });
-  }
-  /**
-   * Determine if the current operation schema, or the OpenAPI definition it's part of, has been
-   * dereferenced or not with `.dereference()`.
-   *
-   * @see Operation.dereference
-   */
-  isDereferenced() {
-    return this.oas.isDereferenced() || this.dereferencing.processing || this.dereferencing.complete;
-  }
-  /**
-   * Retrieve any circular `$ref` pointers that maybe present within operation schema.
-   *
-   * This method requires that you first dereference the definition.
-   *
-   * @see Operation.dereference
-   */
-  getCircularReferences() {
-    if (!this.dereferencing.complete) {
-      throw new Error(".dereference() must be called first in order for this method to obtain circular references.");
-    }
-    return this.dereferencing.circularRefs;
-  }
 };
 var Callback = class extends Operation {
   /**
@@ -1851,6 +1890,16 @@ var Webhook = class extends Operation {
 };
 
 export {
+  getUserVariable,
+  stripTrailingSlash,
+  normalizedURLFromServers,
+  variablesFromServers,
+  defaultVariablesFromServers,
+  splitUrlFromServers,
+  transformURLIntoRegex,
+  generatePathMatches,
+  filterPathMethods,
+  findTargetPath,
   Operation,
   Callback,
   Webhook
@@ -1867,4 +1916,4 @@ export {
  * @license Apache-2.0
  * @see {@link https://github.com/swagger-api/swagger-ui/blob/master/src/core/plugins/samples/fn.js}
  */
-//# sourceMappingURL=chunk-RQZ2BPMU.js.map
+//# sourceMappingURL=chunk-I7R3WTTN.js.map