openapi-typesafe 0.0.0 → 1.0.0-rc.1

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2020 Drew Powers
+Copyright (c) 2026 Fedor Chishchin and openapi-typesafe contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,73 @@
 # openapi-typesafe
 
-This name is reserved for openapi-typesafe. This version contains no code.
+Generate TypeScript types from [OpenAPI 3.0 and 3.1](https://spec.openapis.org/oas/latest.html) schemas.
+Runs on Node.js; no Java, no running server, no runtime code in the output.
+
+A maintained, drop-in successor to `openapi-typescript` (see the [repository README](../../README.md)).
+
+> **Status: in development; not published to npm yet.**
+
+## Features
+
+- OpenAPI 3.0 and 3.1, including discriminators, `oneOf` / `anyOf` / `allOf`, and `$ref` across files.
+- Runtime-free output: only types.
+- Local or remote schemas, YAML or JSON.
+- Swagger 2.0 is not supported.
+
+## Setup
+
+Requires Node.js 22 or newer.
+
+```sh
+npm i -D openapi-typesafe typescript
+```
+
+Recommended `tsconfig.json` settings:
+
+```jsonc
+{
+  "compilerOptions": {
+    "module": "ESNext", // or "NodeNext"
+    "moduleResolution": "Bundler", // or "NodeNext"
+    "noUncheckedIndexedAccess": true
+  }
+}
+```
+
+## Usage
+
+```sh
+# Local schema
+npx openapi-typesafe ./path/to/schema.yaml -o ./path/to/schema.d.ts
+
+# Remote schema
+npx openapi-typesafe https://example.com/api/v1/openapi.yaml -o ./path/to/schema.d.ts
+```
+
+Then import the types:
+
+```ts
+import type { components, paths } from "./path/to/schema";
+
+type User = components["schemas"]["User"];
+type GetUserResponse = paths["/users/{id}"]["get"]["responses"][200]["content"]["application/json"];
+```
+
+With `"moduleResolution": "NodeNext"`, write the extension: `"./path/to/schema.js"`.
+
+Run `npx openapi-typesafe --help` for all options. Generated examples for real APIs are in [`examples/`](./examples).
+
+## Migrating from openapi-typescript
+
+Replace the package and the binary name; options and output are the same.
+
+```diff
+- npx openapi-typescript ./schema.yaml -o ./schema.d.ts
++ npx openapi-typesafe ./schema.yaml -o ./schema.d.ts
+```
+
+The header of generated files names the new generator, so regenerate and commit the output once.
+
+## License
+
+[MIT](./LICENSE)

package/bin/cli.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+
+// The CLI is built from src/cli/main.ts (ADR-012).
+import "../dist/cli/main.mjs";

package/dist/adapters/node-file-system/node-file-system.cjs

@@ -0,0 +1,46 @@
+'use strict';
+
+const fs = require('node:fs');
+const node_url = require('node:url');
+const errors = require('../../domain/errors.cjs');
+
+function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e.default : e; }
+
+const fs__default = /*#__PURE__*/_interopDefaultCompat(fs);
+
+function causeMessage(cause) {
+  return cause instanceof Error ? cause.message : String(cause);
+}
+class NodeFileSystem {
+  readText(file) {
+    try {
+      return fs__default.readFileSync(file, "utf8");
+    } catch (cause) {
+      throw new errors.OpenAPITypesafeError({
+        code: errors.ERROR_CODES.OUTPUT_READ_FAILED,
+        message: `Cannot read ${node_url.fileURLToPath(file)}: ${causeMessage(cause)}`,
+        details: { file: node_url.fileURLToPath(file) },
+        cause
+      });
+    }
+  }
+  writeText(file, contents) {
+    try {
+      fs__default.mkdirSync(new URL(".", file), { recursive: true });
+      fs__default.writeFileSync(file, contents, "utf8");
+    } catch (cause) {
+      throw new errors.OpenAPITypesafeError({
+        code: errors.ERROR_CODES.OUTPUT_WRITE_FAILED,
+        message: `Cannot write ${node_url.fileURLToPath(file)}: ${causeMessage(cause)}`,
+        details: { file: node_url.fileURLToPath(file) },
+        cause
+      });
+    }
+  }
+}
+function createNodeFileSystem() {
+  return new NodeFileSystem();
+}
+
+exports.createNodeFileSystem = createNodeFileSystem;
+//# sourceMappingURL=node-file-system.cjs.map

package/dist/adapters/node-file-system/node-file-system.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-file-system.cjs","sources":["../../../src/adapters/node-file-system/node-file-system.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport type { FileReader, FileWriter } from \"../../application/ports/file-system.js\";\nimport { ERROR_CODES, OpenAPITypesafeError } from \"../../domain/errors.js\";\n\n/** The file ports on Node's `fs`, with the failures as typed errors (ADR-011). */\n\nfunction causeMessage(cause: unknown): string {\n  return cause instanceof Error ? cause.message : String(cause);\n}\n\nclass NodeFileSystem implements FileReader, FileWriter {\n  readText(file: URL): string {\n    try {\n      return fs.readFileSync(file, \"utf8\");\n    } catch (cause) {\n      throw new OpenAPITypesafeError({\n        code: ERROR_CODES.OUTPUT_READ_FAILED,\n        message: `Cannot read ${fileURLToPath(file)}: ${causeMessage(cause)}`,\n        details: { file: fileURLToPath(file) },\n        cause,\n      });\n    }\n  }\n\n  writeText(file: URL, contents: string): void {\n    try {\n      fs.mkdirSync(new URL(\".\", file), { recursive: true });\n      fs.writeFileSync(file, contents, \"utf8\");\n    } catch (cause) {\n      throw new OpenAPITypesafeError({\n        code: ERROR_CODES.OUTPUT_WRITE_FAILED,\n        message: `Cannot write ${fileURLToPath(file)}: ${causeMessage(cause)}`,\n        details: { file: fileURLToPath(file) },\n        cause,\n      });\n    }\n  }\n}\n\n/** File access for the CLI. */\nexport function createNodeFileSystem(): FileReader & FileWriter {\n  return new NodeFileSystem();\n}\n"],"names":["fs","OpenAPITypesafeError","ERROR_CODES","fileURLToPath"],"mappings":";;;;;;;;;;AAOA,SAAS,aAAa,KAAA,EAAwB;AAC5C,EAAA,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAC9D;AAEA,MAAM,cAAA,CAAiD;AAAA,EACrD,SAAS,IAAA,EAAmB;AAC1B,IAAA,IAAI;AACF,MAAA,OAAOA,WAAA,CAAG,YAAA,CAAa,IAAA,EAAM,MAAM,CAAA;AAAA,IACrC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAIC,2BAAA,CAAqB;AAAA,QAC7B,MAAMC,kBAAA,CAAY,kBAAA;AAAA,QAClB,OAAA,EAAS,eAAeC,sBAAA,CAAc,IAAI,CAAC,CAAA,EAAA,EAAK,YAAA,CAAa,KAAK,CAAC,CAAA,CAAA;AAAA,QACnE,OAAA,EAAS,EAAE,IAAA,EAAMA,sBAAA,CAAc,IAAI,CAAA,EAAE;AAAA,QACrC;AAAA,OACD,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEA,SAAA,CAAU,MAAW,QAAA,EAAwB;AAC3C,IAAA,IAAI;AACF,MAAAH,WAAA,CAAG,SAAA,CAAU,IAAI,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AACpD,MAAAA,WAAA,CAAG,aAAA,CAAc,IAAA,EAAM,QAAA,EAAU,MAAM,CAAA;AAAA,IACzC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAIC,2BAAA,CAAqB;AAAA,QAC7B,MAAMC,kBAAA,CAAY,mBAAA;AAAA,QAClB,OAAA,EAAS,gBAAgBC,sBAAA,CAAc,IAAI,CAAC,CAAA,EAAA,EAAK,YAAA,CAAa,KAAK,CAAC,CAAA,CAAA;AAAA,QACpE,OAAA,EAAS,EAAE,IAAA,EAAMA,sBAAA,CAAc,IAAI,CAAA,EAAE;AAAA,QACrC;AAAA,OACD,CAAA;AAAA,IACH;AAAA,EACF;AACF;AAGO,SAAS,oBAAA,GAAgD;AAC9D,EAAA,OAAO,IAAI,cAAA,EAAe;AAC5B;;"}

package/dist/adapters/node-file-system/node-file-system.mjs

@@ -0,0 +1,40 @@
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { OpenAPITypesafeError, ERROR_CODES } from '../../domain/errors.mjs';
+
+function causeMessage(cause) {
+  return cause instanceof Error ? cause.message : String(cause);
+}
+class NodeFileSystem {
+  readText(file) {
+    try {
+      return fs.readFileSync(file, "utf8");
+    } catch (cause) {
+      throw new OpenAPITypesafeError({
+        code: ERROR_CODES.OUTPUT_READ_FAILED,
+        message: `Cannot read ${fileURLToPath(file)}: ${causeMessage(cause)}`,
+        details: { file: fileURLToPath(file) },
+        cause
+      });
+    }
+  }
+  writeText(file, contents) {
+    try {
+      fs.mkdirSync(new URL(".", file), { recursive: true });
+      fs.writeFileSync(file, contents, "utf8");
+    } catch (cause) {
+      throw new OpenAPITypesafeError({
+        code: ERROR_CODES.OUTPUT_WRITE_FAILED,
+        message: `Cannot write ${fileURLToPath(file)}: ${causeMessage(cause)}`,
+        details: { file: fileURLToPath(file) },
+        cause
+      });
+    }
+  }
+}
+function createNodeFileSystem() {
+  return new NodeFileSystem();
+}
+
+export { createNodeFileSystem };
+//# sourceMappingURL=node-file-system.mjs.map

package/dist/adapters/node-file-system/node-file-system.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-file-system.mjs","sources":["../../../src/adapters/node-file-system/node-file-system.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport type { FileReader, FileWriter } from \"../../application/ports/file-system.js\";\nimport { ERROR_CODES, OpenAPITypesafeError } from \"../../domain/errors.js\";\n\n/** The file ports on Node's `fs`, with the failures as typed errors (ADR-011). */\n\nfunction causeMessage(cause: unknown): string {\n  return cause instanceof Error ? cause.message : String(cause);\n}\n\nclass NodeFileSystem implements FileReader, FileWriter {\n  readText(file: URL): string {\n    try {\n      return fs.readFileSync(file, \"utf8\");\n    } catch (cause) {\n      throw new OpenAPITypesafeError({\n        code: ERROR_CODES.OUTPUT_READ_FAILED,\n        message: `Cannot read ${fileURLToPath(file)}: ${causeMessage(cause)}`,\n        details: { file: fileURLToPath(file) },\n        cause,\n      });\n    }\n  }\n\n  writeText(file: URL, contents: string): void {\n    try {\n      fs.mkdirSync(new URL(\".\", file), { recursive: true });\n      fs.writeFileSync(file, contents, \"utf8\");\n    } catch (cause) {\n      throw new OpenAPITypesafeError({\n        code: ERROR_CODES.OUTPUT_WRITE_FAILED,\n        message: `Cannot write ${fileURLToPath(file)}: ${causeMessage(cause)}`,\n        details: { file: fileURLToPath(file) },\n        cause,\n      });\n    }\n  }\n}\n\n/** File access for the CLI. */\nexport function createNodeFileSystem(): FileReader & FileWriter {\n  return new NodeFileSystem();\n}\n"],"names":[],"mappings":";;;;AAOA,SAAS,aAAa,KAAA,EAAwB;AAC5C,EAAA,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAC9D;AAEA,MAAM,cAAA,CAAiD;AAAA,EACrD,SAAS,IAAA,EAAmB;AAC1B,IAAA,IAAI;AACF,MAAA,OAAO,EAAA,CAAG,YAAA,CAAa,IAAA,EAAM,MAAM,CAAA;AAAA,IACrC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,oBAAA,CAAqB;AAAA,QAC7B,MAAM,WAAA,CAAY,kBAAA;AAAA,QAClB,OAAA,EAAS,eAAe,aAAA,CAAc,IAAI,CAAC,CAAA,EAAA,EAAK,YAAA,CAAa,KAAK,CAAC,CAAA,CAAA;AAAA,QACnE,OAAA,EAAS,EAAE,IAAA,EAAM,aAAA,CAAc,IAAI,CAAA,EAAE;AAAA,QACrC;AAAA,OACD,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEA,SAAA,CAAU,MAAW,QAAA,EAAwB;AAC3C,IAAA,IAAI;AACF,MAAA,EAAA,CAAG,SAAA,CAAU,IAAI,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AACpD,MAAA,EAAA,CAAG,aAAA,CAAc,IAAA,EAAM,QAAA,EAAU,MAAM,CAAA;AAAA,IACzC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,oBAAA,CAAqB;AAAA,QAC7B,MAAM,WAAA,CAAY,mBAAA;AAAA,QAClB,OAAA,EAAS,gBAAgB,aAAA,CAAc,IAAI,CAAC,CAAA,EAAA,EAAK,YAAA,CAAa,KAAK,CAAC,CAAA,CAAA;AAAA,QACpE,OAAA,EAAS,EAAE,IAAA,EAAM,aAAA,CAAc,IAAI,CAAA,EAAE;AAAA,QACrC;AAAA,OACD,CAAA;AAAA,IACH;AAAA,EACF;AACF;AAGO,SAAS,oBAAA,GAAgD;AAC9D,EAAA,OAAO,IAAI,cAAA,EAAe;AAC5B;;"}

package/dist/adapters/redocly-loader/alias-limit.cjs

@@ -0,0 +1,16 @@
+'use strict';
+
+const aliasExpansion = require('../../domain/openapi/alias-expansion.cjs');
+
+function aliasExpansionFailure(parsed) {
+  const counts = aliasExpansion.countNodes(parsed);
+  if (!aliasExpansion.isAliasExpansionExcessive(counts)) {
+    return void 0;
+  }
+  return new Error(
+    `YAML aliases expand the document from ${counts.stored} to ${counts.expanded} nodes, more than ${aliasExpansion.ALIAS_EXPANSION_MAX_RATIO} times its size`
+  );
+}
+
+exports.aliasExpansionFailure = aliasExpansionFailure;
+//# sourceMappingURL=alias-limit.cjs.map

package/dist/adapters/redocly-loader/alias-limit.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias-limit.cjs","sources":["../../../src/adapters/redocly-loader/alias-limit.ts"],"sourcesContent":["import {\n  ALIAS_EXPANSION_MAX_RATIO,\n  countNodes,\n  isAliasExpansionExcessive,\n} from \"../../domain/openapi/alias-expansion.js\";\n\n/**\n * The reason a parsed YAML document is refused, if its aliases expand it too far. The check runs\n * right after parsing, before Redocly or the generator walk the document (pre-beta test plan 10.2).\n */\nexport function aliasExpansionFailure(parsed: unknown): Error | undefined {\n  const counts = countNodes(parsed);\n  if (!isAliasExpansionExcessive(counts)) {\n    return undefined;\n  }\n  return new Error(\n    `YAML aliases expand the document from ${counts.stored} to ${counts.expanded} nodes, ` +\n      `more than ${ALIAS_EXPANSION_MAX_RATIO} times its size`,\n  );\n}\n"],"names":["countNodes","isAliasExpansionExcessive","ALIAS_EXPANSION_MAX_RATIO"],"mappings":";;;;AAUO,SAAS,sBAAsB,MAAA,EAAoC;AACxE,EAAA,MAAM,MAAA,GAASA,0BAAW,MAAM,CAAA;AAChC,EAAA,IAAI,CAACC,wCAAA,CAA0B,MAAM,CAAA,EAAG;AACtC,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAI,KAAA;AAAA,IACT,yCAAyC,MAAA,CAAO,MAAM,OAAO,MAAA,CAAO,QAAQ,qBAC7DC,wCAAyB,CAAA,eAAA;AAAA,GAC1C;AACF;;"}

package/dist/adapters/redocly-loader/alias-limit.mjs

@@ -0,0 +1,14 @@
+import { countNodes, isAliasExpansionExcessive, ALIAS_EXPANSION_MAX_RATIO } from '../../domain/openapi/alias-expansion.mjs';
+
+function aliasExpansionFailure(parsed) {
+  const counts = countNodes(parsed);
+  if (!isAliasExpansionExcessive(counts)) {
+    return void 0;
+  }
+  return new Error(
+    `YAML aliases expand the document from ${counts.stored} to ${counts.expanded} nodes, more than ${ALIAS_EXPANSION_MAX_RATIO} times its size`
+  );
+}
+
+export { aliasExpansionFailure };
+//# sourceMappingURL=alias-limit.mjs.map

package/dist/adapters/redocly-loader/alias-limit.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias-limit.mjs","sources":["../../../src/adapters/redocly-loader/alias-limit.ts"],"sourcesContent":["import {\n  ALIAS_EXPANSION_MAX_RATIO,\n  countNodes,\n  isAliasExpansionExcessive,\n} from \"../../domain/openapi/alias-expansion.js\";\n\n/**\n * The reason a parsed YAML document is refused, if its aliases expand it too far. The check runs\n * right after parsing, before Redocly or the generator walk the document (pre-beta test plan 10.2).\n */\nexport function aliasExpansionFailure(parsed: unknown): Error | undefined {\n  const counts = countNodes(parsed);\n  if (!isAliasExpansionExcessive(counts)) {\n    return undefined;\n  }\n  return new Error(\n    `YAML aliases expand the document from ${counts.stored} to ${counts.expanded} nodes, ` +\n      `more than ${ALIAS_EXPANSION_MAX_RATIO} times its size`,\n  );\n}\n"],"names":[],"mappings":";;AAUO,SAAS,sBAAsB,MAAA,EAAoC;AACxE,EAAA,MAAM,MAAA,GAAS,WAAW,MAAM,CAAA;AAChC,EAAA,IAAI,CAAC,yBAAA,CAA0B,MAAM,CAAA,EAAG;AACtC,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAI,KAAA;AAAA,IACT,yCAAyC,MAAA,CAAO,MAAM,OAAO,MAAA,CAAO,QAAQ,qBAC7D,yBAAyB,CAAA,eAAA;AAAA,GAC1C;AACF;;"}

package/dist/adapters/redocly-loader/allowed-hosts.cjs

@@ -0,0 +1,42 @@
+'use strict';
+
+const DEFAULT_PORTS = { "http:": "80", "https:": "443" };
+const FULLY_QUALIFIED_DOT = /\.$/;
+const PORT_SUFFIX = /:(\d+)$/;
+const NOT_A_HOST = /[/?#@\\]/;
+function withBrackets(entry) {
+  const isBareIPv6 = !entry.startsWith("[") && entry.split(":").length > 2;
+  return isBareIPv6 ? `[${entry}]` : entry;
+}
+function hostnameOf(url) {
+  return url.hostname.replace(FULLY_QUALIFIED_DOT, "");
+}
+function portOf(url) {
+  return url.port === "" ? DEFAULT_PORTS[url.protocol] ?? "" : url.port;
+}
+function writtenPort(entry) {
+  const match = PORT_SUFFIX.exec(entry);
+  return match === null ? void 0 : String(Number(match[1]));
+}
+function parseHostEntry(entry) {
+  const written = withBrackets(entry.trim());
+  const candidate = `http://${written}`;
+  if (written === "" || NOT_A_HOST.test(written) || !URL.canParse(candidate)) {
+    return void 0;
+  }
+  return { hostname: hostnameOf(new URL(candidate)), port: writtenPort(written) };
+}
+function isHostAllowed(url, hosts) {
+  const hostname = hostnameOf(url);
+  if (hostname === "") {
+    return false;
+  }
+  const port = portOf(url);
+  return hosts.map(parseHostEntry).some((entry) => {
+    const isAnyPort = entry?.port === void 0;
+    return entry?.hostname === hostname && (isAnyPort || entry.port === port);
+  });
+}
+
+exports.isHostAllowed = isHostAllowed;
+//# sourceMappingURL=allowed-hosts.cjs.map

package/dist/adapters/redocly-loader/allowed-hosts.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-hosts.cjs","sources":["../../../src/adapters/redocly-loader/allowed-hosts.ts"],"sourcesContent":["/**\n * Matching URLs against the `--remote-ref-hosts` list (threat model R2, ADR-017). Both sides are\n * compared as the WHATWG URL parser writes hosts (lower case, Punycode, dotted IPv4, compressed\n * IPv6 in brackets), so `bücher.example`, `::1` and `api.example.com.` match the hosts they name.\n */\n\nconst DEFAULT_PORTS: Readonly<Record<string, string>> = { \"http:\": \"80\", \"https:\": \"443\" };\nconst FULLY_QUALIFIED_DOT = /\\.$/;\nconst PORT_SUFFIX = /:(\\d+)$/;\n/** Characters that end a host in a URL: an entry with them would match a different host. */\nconst NOT_A_HOST = /[/?#@\\\\]/;\n\ninterface HostEntry {\n  readonly hostname: string;\n  /** Undefined when the entry allows any port. */\n  readonly port: string | undefined;\n}\n\n/** A bare IPv6 address has two colons or more and cannot carry a port; brackets add one. */\nfunction withBrackets(entry: string): string {\n  const isBareIPv6 = !entry.startsWith(\"[\") && entry.split(\":\").length > 2;\n  return isBareIPv6 ? `[${entry}]` : entry;\n}\n\nfunction hostnameOf(url: URL): string {\n  return url.hostname.replace(FULLY_QUALIFIED_DOT, \"\");\n}\n\nfunction portOf(url: URL): string {\n  return url.port === \"\" ? (DEFAULT_PORTS[url.protocol] ?? \"\") : url.port;\n}\n\n/** The written port without leading zeros, as the URL parser writes it; undefined when none. */\nfunction writtenPort(entry: string): string | undefined {\n  const match = PORT_SUFFIX.exec(entry);\n  return match === null ? undefined : String(Number(match[1]));\n}\n\n/** The entry as the URL parser reads it, or undefined when it is not a bare host or host:port. */\nfunction parseHostEntry(entry: string): HostEntry | undefined {\n  const written = withBrackets(entry.trim());\n  const candidate = `http://${written}`;\n  if (written === \"\" || NOT_A_HOST.test(written) || !URL.canParse(candidate)) {\n    return undefined;\n  }\n  // The port is read from the text: the parser drops a default port (`:80`), which must still\n  // limit the entry to that port.\n  return { hostname: hostnameOf(new URL(candidate)), port: writtenPort(written) };\n}\n\n/** Whether the URL's host is listed, by host name alone (any port) or with its port. */\nexport function isHostAllowed(url: URL, hosts: readonly string[]): boolean {\n  const hostname = hostnameOf(url);\n  if (hostname === \"\") {\n    return false;\n  }\n  const port = portOf(url);\n  return hosts.map(parseHostEntry).some((entry) => {\n    const isAnyPort = entry?.port === undefined;\n    return entry?.hostname === hostname && (isAnyPort || entry.port === port);\n  });\n}\n"],"names":[],"mappings":";;AAMA,MAAM,aAAA,GAAkD,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,KAAA,EAAM;AACzF,MAAM,mBAAA,GAAsB,KAAA;AAC5B,MAAM,WAAA,GAAc,SAAA;AAEpB,MAAM,UAAA,GAAa,UAAA;AASnB,SAAS,aAAa,KAAA,EAAuB;AAC3C,EAAA,MAAM,UAAA,GAAa,CAAC,KAAA,CAAM,UAAA,CAAW,GAAG,KAAK,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,GAAS,CAAA;AACvE,EAAA,OAAO,UAAA,GAAa,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,CAAA,GAAM,KAAA;AACrC;AAEA,SAAS,WAAW,GAAA,EAAkB;AACpC,EAAA,OAAO,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,mBAAA,EAAqB,EAAE,CAAA;AACrD;AAEA,SAAS,OAAO,GAAA,EAAkB;AAChC,EAAA,OAAO,GAAA,CAAI,SAAS,EAAA,GAAM,aAAA,CAAc,IAAI,QAAQ,CAAA,IAAK,KAAM,GAAA,CAAI,IAAA;AACrE;AAGA,SAAS,YAAY,KAAA,EAAmC;AACtD,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,IAAA,CAAK,KAAK,CAAA;AACpC,EAAA,OAAO,KAAA,KAAU,OAAO,MAAA,GAAY,MAAA,CAAO,OAAO,KAAA,CAAM,CAAC,CAAC,CAAC,CAAA;AAC7D;AAGA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,CAAA;AACzC,EAAA,MAAM,SAAA,GAAY,UAAU,OAAO,CAAA,CAAA;AACnC,EAAA,IAAI,OAAA,KAAY,EAAA,IAAM,UAAA,CAAW,IAAA,CAAK,OAAO,KAAK,CAAC,GAAA,CAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AAC1E,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,OAAO,EAAE,QAAA,EAAU,UAAA,CAAW,IAAI,GAAA,CAAI,SAAS,CAAC,CAAA,EAAG,IAAA,EAAM,WAAA,CAAY,OAAO,CAAA,EAAE;AAChF;AAGO,SAAS,aAAA,CAAc,KAAU,KAAA,EAAmC;AACzE,EAAA,MAAM,QAAA,GAAW,WAAW,GAAG,CAAA;AAC/B,EAAA,IAAI,aAAa,EAAA,EAAI;AACnB,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAA,GAAO,OAAO,GAAG,CAAA;AACvB,EAAA,OAAO,MAAM,GAAA,CAAI,cAAc,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,KAAU;AAC/C,IAAA,MAAM,SAAA,GAAY,OAAO,IAAA,KAAS,MAAA;AAClC,IAAA,OAAO,KAAA,EAAO,QAAA,KAAa,QAAA,KAAa,SAAA,IAAa,MAAM,IAAA,KAAS,IAAA,CAAA;AAAA,EACtE,CAAC,CAAA;AACH;;"}

package/dist/adapters/redocly-loader/allowed-hosts.mjs

@@ -0,0 +1,40 @@
+const DEFAULT_PORTS = { "http:": "80", "https:": "443" };
+const FULLY_QUALIFIED_DOT = /\.$/;
+const PORT_SUFFIX = /:(\d+)$/;
+const NOT_A_HOST = /[/?#@\\]/;
+function withBrackets(entry) {
+  const isBareIPv6 = !entry.startsWith("[") && entry.split(":").length > 2;
+  return isBareIPv6 ? `[${entry}]` : entry;
+}
+function hostnameOf(url) {
+  return url.hostname.replace(FULLY_QUALIFIED_DOT, "");
+}
+function portOf(url) {
+  return url.port === "" ? DEFAULT_PORTS[url.protocol] ?? "" : url.port;
+}
+function writtenPort(entry) {
+  const match = PORT_SUFFIX.exec(entry);
+  return match === null ? void 0 : String(Number(match[1]));
+}
+function parseHostEntry(entry) {
+  const written = withBrackets(entry.trim());
+  const candidate = `http://${written}`;
+  if (written === "" || NOT_A_HOST.test(written) || !URL.canParse(candidate)) {
+    return void 0;
+  }
+  return { hostname: hostnameOf(new URL(candidate)), port: writtenPort(written) };
+}
+function isHostAllowed(url, hosts) {
+  const hostname = hostnameOf(url);
+  if (hostname === "") {
+    return false;
+  }
+  const port = portOf(url);
+  return hosts.map(parseHostEntry).some((entry) => {
+    const isAnyPort = entry?.port === void 0;
+    return entry?.hostname === hostname && (isAnyPort || entry.port === port);
+  });
+}
+
+export { isHostAllowed };
+//# sourceMappingURL=allowed-hosts.mjs.map

package/dist/adapters/redocly-loader/allowed-hosts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-hosts.mjs","sources":["../../../src/adapters/redocly-loader/allowed-hosts.ts"],"sourcesContent":["/**\n * Matching URLs against the `--remote-ref-hosts` list (threat model R2, ADR-017). Both sides are\n * compared as the WHATWG URL parser writes hosts (lower case, Punycode, dotted IPv4, compressed\n * IPv6 in brackets), so `bücher.example`, `::1` and `api.example.com.` match the hosts they name.\n */\n\nconst DEFAULT_PORTS: Readonly<Record<string, string>> = { \"http:\": \"80\", \"https:\": \"443\" };\nconst FULLY_QUALIFIED_DOT = /\\.$/;\nconst PORT_SUFFIX = /:(\\d+)$/;\n/** Characters that end a host in a URL: an entry with them would match a different host. */\nconst NOT_A_HOST = /[/?#@\\\\]/;\n\ninterface HostEntry {\n  readonly hostname: string;\n  /** Undefined when the entry allows any port. */\n  readonly port: string | undefined;\n}\n\n/** A bare IPv6 address has two colons or more and cannot carry a port; brackets add one. */\nfunction withBrackets(entry: string): string {\n  const isBareIPv6 = !entry.startsWith(\"[\") && entry.split(\":\").length > 2;\n  return isBareIPv6 ? `[${entry}]` : entry;\n}\n\nfunction hostnameOf(url: URL): string {\n  return url.hostname.replace(FULLY_QUALIFIED_DOT, \"\");\n}\n\nfunction portOf(url: URL): string {\n  return url.port === \"\" ? (DEFAULT_PORTS[url.protocol] ?? \"\") : url.port;\n}\n\n/** The written port without leading zeros, as the URL parser writes it; undefined when none. */\nfunction writtenPort(entry: string): string | undefined {\n  const match = PORT_SUFFIX.exec(entry);\n  return match === null ? undefined : String(Number(match[1]));\n}\n\n/** The entry as the URL parser reads it, or undefined when it is not a bare host or host:port. */\nfunction parseHostEntry(entry: string): HostEntry | undefined {\n  const written = withBrackets(entry.trim());\n  const candidate = `http://${written}`;\n  if (written === \"\" || NOT_A_HOST.test(written) || !URL.canParse(candidate)) {\n    return undefined;\n  }\n  // The port is read from the text: the parser drops a default port (`:80`), which must still\n  // limit the entry to that port.\n  return { hostname: hostnameOf(new URL(candidate)), port: writtenPort(written) };\n}\n\n/** Whether the URL's host is listed, by host name alone (any port) or with its port. */\nexport function isHostAllowed(url: URL, hosts: readonly string[]): boolean {\n  const hostname = hostnameOf(url);\n  if (hostname === \"\") {\n    return false;\n  }\n  const port = portOf(url);\n  return hosts.map(parseHostEntry).some((entry) => {\n    const isAnyPort = entry?.port === undefined;\n    return entry?.hostname === hostname && (isAnyPort || entry.port === port);\n  });\n}\n"],"names":[],"mappings":"AAMA,MAAM,aAAA,GAAkD,EAAE,OAAA,EAAS,IAAA,EAAM,UAAU,KAAA,EAAM;AACzF,MAAM,mBAAA,GAAsB,KAAA;AAC5B,MAAM,WAAA,GAAc,SAAA;AAEpB,MAAM,UAAA,GAAa,UAAA;AASnB,SAAS,aAAa,KAAA,EAAuB;AAC3C,EAAA,MAAM,UAAA,GAAa,CAAC,KAAA,CAAM,UAAA,CAAW,GAAG,KAAK,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,GAAS,CAAA;AACvE,EAAA,OAAO,UAAA,GAAa,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,CAAA,GAAM,KAAA;AACrC;AAEA,SAAS,WAAW,GAAA,EAAkB;AACpC,EAAA,OAAO,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,mBAAA,EAAqB,EAAE,CAAA;AACrD;AAEA,SAAS,OAAO,GAAA,EAAkB;AAChC,EAAA,OAAO,GAAA,CAAI,SAAS,EAAA,GAAM,aAAA,CAAc,IAAI,QAAQ,CAAA,IAAK,KAAM,GAAA,CAAI,IAAA;AACrE;AAGA,SAAS,YAAY,KAAA,EAAmC;AACtD,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,IAAA,CAAK,KAAK,CAAA;AACpC,EAAA,OAAO,KAAA,KAAU,OAAO,MAAA,GAAY,MAAA,CAAO,OAAO,KAAA,CAAM,CAAC,CAAC,CAAC,CAAA;AAC7D;AAGA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,CAAA;AACzC,EAAA,MAAM,SAAA,GAAY,UAAU,OAAO,CAAA,CAAA;AACnC,EAAA,IAAI,OAAA,KAAY,EAAA,IAAM,UAAA,CAAW,IAAA,CAAK,OAAO,KAAK,CAAC,GAAA,CAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AAC1E,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,OAAO,EAAE,QAAA,EAAU,UAAA,CAAW,IAAI,GAAA,CAAI,SAAS,CAAC,CAAA,EAAG,IAAA,EAAM,WAAA,CAAY,OAAO,CAAA,EAAE;AAChF;AAGO,SAAS,aAAA,CAAc,KAAU,KAAA,EAAmC;AACzE,EAAA,MAAM,QAAA,GAAW,WAAW,GAAG,CAAA;AAC/B,EAAA,IAAI,aAAa,EAAA,EAAI;AACnB,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAA,GAAO,OAAO,GAAG,CAAA;AACvB,EAAA,OAAO,MAAM,GAAA,CAAI,cAAc,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,KAAU;AAC/C,IAAA,MAAM,SAAA,GAAY,OAAO,IAAA,KAAS,MAAA;AAClC,IAAA,OAAO,KAAA,EAAO,QAAA,KAAa,QAAA,KAAa,SAAA,IAAa,MAAM,IAAA,KAAS,IAAA,CAAA;AAAA,EACtE,CAAC,CAAA;AACH;;"}

package/dist/adapters/redocly-loader/bundled-ref-repair.cjs

@@ -0,0 +1,53 @@
+'use strict';
+
+const jsonPointer = require('../../domain/openapi/json-pointer.cjs');
+const refHolders = require('./ref-holders.cjs');
+
+const LOCAL_REF_PREFIX = "#/";
+function isContainer(value) {
+  return typeof value === "object" && value !== null;
+}
+function childAt(node, segment) {
+  if (!isContainer(node) || !Object.hasOwn(node, segment)) {
+    return void 0;
+  }
+  return node[segment];
+}
+function resolves(document, segments) {
+  return segments.reduce(childAt, document) !== void 0;
+}
+function decodedSegments(ref) {
+  try {
+    return jsonPointer.parseRefPointer(ref);
+  } catch (error) {
+    if (error instanceof URIError) {
+      return null;
+    }
+    throw error;
+  }
+}
+function repairedRef(document, ref) {
+  const decoded = decodedSegments(ref);
+  if (decoded && resolves(document, decoded)) {
+    return null;
+  }
+  const raw = ref.slice(LOCAL_REF_PREFIX.length).split("/").filter(Boolean);
+  if (!resolves(document, raw)) {
+    return null;
+  }
+  return `${LOCAL_REF_PREFIX}${raw.map(jsonPointer.escapePointerSegment).join("/")}`;
+}
+function repairBundledRefs(document) {
+  for (const { node } of refHolders.findRefHolders(document)) {
+    if (!node.$ref.startsWith(LOCAL_REF_PREFIX)) {
+      continue;
+    }
+    const repaired = repairedRef(document, node.$ref);
+    if (repaired !== null) {
+      node.$ref = repaired;
+    }
+  }
+}
+
+exports.repairBundledRefs = repairBundledRefs;
+//# sourceMappingURL=bundled-ref-repair.cjs.map

package/dist/adapters/redocly-loader/bundled-ref-repair.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundled-ref-repair.cjs","sources":["../../../src/adapters/redocly-loader/bundled-ref-repair.ts"],"sourcesContent":["import { escapePointerSegment, parseRefPointer } from \"../../domain/openapi/json-pointer.js\";\nimport { findRefHolders } from \"./ref-holders.js\";\n\n/**\n * Redocly 1.x bundles an external `$ref` into a component named after the raw segment of the\n * original pointer (`a~0b`, `50%`), and writes the new local `$ref` without escaping it. Read as a\n * JSON Pointer, `#/components/schemas/a~0b` names the key `a~b`, which does not exist, and\n * `#/components/schemas/50%` is malformed, so the generator failed on it. This rewrites every\n * local `$ref` that does not resolve as a pointer but does resolve segment by segment as written.\n */\n\nconst LOCAL_REF_PREFIX = \"#/\";\n\nfunction isContainer(value: unknown): value is object {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction childAt(node: unknown, segment: string): unknown {\n  if (!isContainer(node) || !Object.hasOwn(node, segment)) {\n    return undefined;\n  }\n  return (node as Record<string, unknown>)[segment];\n}\n\nfunction resolves(document: unknown, segments: readonly string[]): boolean {\n  return segments.reduce<unknown>(childAt, document) !== undefined;\n}\n\n/** The pointer's segments, or null when the pointer has a malformed percent escape. */\nfunction decodedSegments(ref: string): string[] | null {\n  try {\n    return parseRefPointer(ref);\n  } catch (error) {\n    if (error instanceof URIError) {\n      return null;\n    }\n    throw error;\n  }\n}\n\n/** The repaired `$ref`, or null when the ref resolves already or cannot be repaired. */\nfunction repairedRef(document: unknown, ref: string): string | null {\n  const decoded = decodedSegments(ref);\n  if (decoded && resolves(document, decoded)) {\n    return null;\n  }\n  const raw = ref.slice(LOCAL_REF_PREFIX.length).split(\"/\").filter(Boolean);\n  if (!resolves(document, raw)) {\n    return null;\n  }\n  return `${LOCAL_REF_PREFIX}${raw.map(escapePointerSegment).join(\"/\")}`;\n}\n\n/** Repair the local `$ref`s of a bundled document in place, as Redocly's bundle edits it. */\nexport function repairBundledRefs(document: unknown): void {\n  for (const { node } of findRefHolders(document)) {\n    if (!node.$ref.startsWith(LOCAL_REF_PREFIX)) {\n      continue;\n    }\n    const repaired = repairedRef(document, node.$ref);\n    if (repaired !== null) {\n      node.$ref = repaired;\n    }\n  }\n}\n"],"names":["parseRefPointer","escapePointerSegment","findRefHolders"],"mappings":";;;;;AAWA,MAAM,gBAAA,GAAmB,IAAA;AAEzB,SAAS,YAAY,KAAA,EAAiC;AACpD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA;AAChD;AAEA,SAAS,OAAA,CAAQ,MAAe,OAAA,EAA0B;AACxD,EAAA,IAAI,CAAC,YAAY,IAAI,CAAA,IAAK,CAAC,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA,EAAG;AACvD,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAQ,KAAiC,OAAO,CAAA;AAClD;AAEA,SAAS,QAAA,CAAS,UAAmB,QAAA,EAAsC;AACzE,EAAA,OAAO,QAAA,CAAS,MAAA,CAAgB,OAAA,EAAS,QAAQ,CAAA,KAAM,MAAA;AACzD;AAGA,SAAS,gBAAgB,GAAA,EAA8B;AACrD,EAAA,IAAI;AACF,IAAA,OAAOA,4BAAgB,GAAG,CAAA;AAAA,EAC5B,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAGA,SAAS,WAAA,CAAY,UAAmB,GAAA,EAA4B;AAClE,EAAA,MAAM,OAAA,GAAU,gBAAgB,GAAG,CAAA;AACnC,EAAA,IAAI,OAAA,IAAW,QAAA,CAAS,QAAA,EAAU,OAAO,CAAA,EAAG;AAC1C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,gBAAA,CAAiB,MAAM,EAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA;AACxE,EAAA,IAAI,CAAC,QAAA,CAAS,QAAA,EAAU,GAAG,CAAA,EAAG;AAC5B,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,CAAA,EAAG,gBAAgB,CAAA,EAAG,GAAA,CAAI,IAAIC,gCAAoB,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AACtE;AAGO,SAAS,kBAAkB,QAAA,EAAyB;AACzD,EAAA,KAAA,MAAW,EAAE,IAAA,EAAK,IAAKC,yBAAA,CAAe,QAAQ,CAAA,EAAG;AAC/C,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,UAAA,CAAW,gBAAgB,CAAA,EAAG;AAC3C,MAAA;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,QAAA,EAAU,IAAA,CAAK,IAAI,CAAA;AAChD,IAAA,IAAI,aAAa,IAAA,EAAM;AACrB,MAAA,IAAA,CAAK,IAAA,GAAO,QAAA;AAAA,IACd;AAAA,EACF;AACF;;"}

package/dist/adapters/redocly-loader/bundled-ref-repair.mjs

@@ -0,0 +1,51 @@
+import { escapePointerSegment, parseRefPointer } from '../../domain/openapi/json-pointer.mjs';
+import { findRefHolders } from './ref-holders.mjs';
+
+const LOCAL_REF_PREFIX = "#/";
+function isContainer(value) {
+  return typeof value === "object" && value !== null;
+}
+function childAt(node, segment) {
+  if (!isContainer(node) || !Object.hasOwn(node, segment)) {
+    return void 0;
+  }
+  return node[segment];
+}
+function resolves(document, segments) {
+  return segments.reduce(childAt, document) !== void 0;
+}
+function decodedSegments(ref) {
+  try {
+    return parseRefPointer(ref);
+  } catch (error) {
+    if (error instanceof URIError) {
+      return null;
+    }
+    throw error;
+  }
+}
+function repairedRef(document, ref) {
+  const decoded = decodedSegments(ref);
+  if (decoded && resolves(document, decoded)) {
+    return null;
+  }
+  const raw = ref.slice(LOCAL_REF_PREFIX.length).split("/").filter(Boolean);
+  if (!resolves(document, raw)) {
+    return null;
+  }
+  return `${LOCAL_REF_PREFIX}${raw.map(escapePointerSegment).join("/")}`;
+}
+function repairBundledRefs(document) {
+  for (const { node } of findRefHolders(document)) {
+    if (!node.$ref.startsWith(LOCAL_REF_PREFIX)) {
+      continue;
+    }
+    const repaired = repairedRef(document, node.$ref);
+    if (repaired !== null) {
+      node.$ref = repaired;
+    }
+  }
+}
+
+export { repairBundledRefs };
+//# sourceMappingURL=bundled-ref-repair.mjs.map

package/dist/adapters/redocly-loader/bundled-ref-repair.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundled-ref-repair.mjs","sources":["../../../src/adapters/redocly-loader/bundled-ref-repair.ts"],"sourcesContent":["import { escapePointerSegment, parseRefPointer } from \"../../domain/openapi/json-pointer.js\";\nimport { findRefHolders } from \"./ref-holders.js\";\n\n/**\n * Redocly 1.x bundles an external `$ref` into a component named after the raw segment of the\n * original pointer (`a~0b`, `50%`), and writes the new local `$ref` without escaping it. Read as a\n * JSON Pointer, `#/components/schemas/a~0b` names the key `a~b`, which does not exist, and\n * `#/components/schemas/50%` is malformed, so the generator failed on it. This rewrites every\n * local `$ref` that does not resolve as a pointer but does resolve segment by segment as written.\n */\n\nconst LOCAL_REF_PREFIX = \"#/\";\n\nfunction isContainer(value: unknown): value is object {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction childAt(node: unknown, segment: string): unknown {\n  if (!isContainer(node) || !Object.hasOwn(node, segment)) {\n    return undefined;\n  }\n  return (node as Record<string, unknown>)[segment];\n}\n\nfunction resolves(document: unknown, segments: readonly string[]): boolean {\n  return segments.reduce<unknown>(childAt, document) !== undefined;\n}\n\n/** The pointer's segments, or null when the pointer has a malformed percent escape. */\nfunction decodedSegments(ref: string): string[] | null {\n  try {\n    return parseRefPointer(ref);\n  } catch (error) {\n    if (error instanceof URIError) {\n      return null;\n    }\n    throw error;\n  }\n}\n\n/** The repaired `$ref`, or null when the ref resolves already or cannot be repaired. */\nfunction repairedRef(document: unknown, ref: string): string | null {\n  const decoded = decodedSegments(ref);\n  if (decoded && resolves(document, decoded)) {\n    return null;\n  }\n  const raw = ref.slice(LOCAL_REF_PREFIX.length).split(\"/\").filter(Boolean);\n  if (!resolves(document, raw)) {\n    return null;\n  }\n  return `${LOCAL_REF_PREFIX}${raw.map(escapePointerSegment).join(\"/\")}`;\n}\n\n/** Repair the local `$ref`s of a bundled document in place, as Redocly's bundle edits it. */\nexport function repairBundledRefs(document: unknown): void {\n  for (const { node } of findRefHolders(document)) {\n    if (!node.$ref.startsWith(LOCAL_REF_PREFIX)) {\n      continue;\n    }\n    const repaired = repairedRef(document, node.$ref);\n    if (repaired !== null) {\n      node.$ref = repaired;\n    }\n  }\n}\n"],"names":[],"mappings":";;;AAWA,MAAM,gBAAA,GAAmB,IAAA;AAEzB,SAAS,YAAY,KAAA,EAAiC;AACpD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA;AAChD;AAEA,SAAS,OAAA,CAAQ,MAAe,OAAA,EAA0B;AACxD,EAAA,IAAI,CAAC,YAAY,IAAI,CAAA,IAAK,CAAC,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA,EAAG;AACvD,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAQ,KAAiC,OAAO,CAAA;AAClD;AAEA,SAAS,QAAA,CAAS,UAAmB,QAAA,EAAsC;AACzE,EAAA,OAAO,QAAA,CAAS,MAAA,CAAgB,OAAA,EAAS,QAAQ,CAAA,KAAM,MAAA;AACzD;AAGA,SAAS,gBAAgB,GAAA,EAA8B;AACrD,EAAA,IAAI;AACF,IAAA,OAAO,gBAAgB,GAAG,CAAA;AAAA,EAC5B,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAGA,SAAS,WAAA,CAAY,UAAmB,GAAA,EAA4B;AAClE,EAAA,MAAM,OAAA,GAAU,gBAAgB,GAAG,CAAA;AACnC,EAAA,IAAI,OAAA,IAAW,QAAA,CAAS,QAAA,EAAU,OAAO,CAAA,EAAG;AAC1C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,gBAAA,CAAiB,MAAM,EAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA;AACxE,EAAA,IAAI,CAAC,QAAA,CAAS,QAAA,EAAU,GAAG,CAAA,EAAG;AAC5B,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,CAAA,EAAG,gBAAgB,CAAA,EAAG,GAAA,CAAI,IAAI,oBAAoB,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AACtE;AAGO,SAAS,kBAAkB,QAAA,EAAyB;AACzD,EAAA,KAAA,MAAW,EAAE,IAAA,EAAK,IAAK,cAAA,CAAe,QAAQ,CAAA,EAAG;AAC/C,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,UAAA,CAAW,gBAAgB,CAAA,EAAG;AAC3C,MAAA;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,QAAA,EAAU,IAAA,CAAK,IAAI,CAAA;AAChD,IAAA,IAAI,aAAa,IAAA,EAAM;AACrB,MAAA,IAAA,CAAK,IAAA,GAAO,QAAA;AAAA,IACd;AAAA,EACF;AACF;;"}

package/dist/adapters/redocly-loader/malformed-refs.cjs

@@ -0,0 +1,41 @@
+'use strict';
+
+const errors = require('../../domain/errors.cjs');
+const jsonPointer = require('../../domain/openapi/json-pointer.cjs');
+const refHolders = require('./ref-holders.cjs');
+
+const REFS_IN_MESSAGE = 5;
+function isMalformed(ref) {
+  try {
+    jsonPointer.parseRefPointer(ref);
+    return false;
+  } catch (error) {
+    if (error instanceof URIError) {
+      return true;
+    }
+    throw error;
+  }
+}
+function findMalformedRefs(documents) {
+  return documents.flatMap(
+    (document) => refHolders.findRefHolders(document.parsed).filter(({ node }) => isMalformed(node.$ref)).map(({ node, pointer }) => ({ ref: node.$ref, pointer, source: document.source }))
+  );
+}
+function describeRef(found) {
+  return `"${found.ref}" at ${found.pointer} in ${found.source}`;
+}
+function malformedRefsError(refs, cause) {
+  const listed = refs.slice(0, REFS_IN_MESSAGE).map(describeRef);
+  const more = refs.length > REFS_IN_MESSAGE ? ` and ${refs.length - REFS_IN_MESSAGE} more` : "";
+  const where = listed.length === 0 ? "" : `: ${listed.join(", ")}${more}`;
+  return new errors.OpenAPITypesafeError({
+    code: errors.ERROR_CODES.SCHEMA_REF_INVALID,
+    message: `A $ref has a malformed percent escape; write "%" as "%25" in a JSON Pointer${where}.`,
+    details: { reason: "malformed", refs: refs.map((found) => ({ ...found })) },
+    cause
+  });
+}
+
+exports.findMalformedRefs = findMalformedRefs;
+exports.malformedRefsError = malformedRefsError;
+//# sourceMappingURL=malformed-refs.cjs.map

package/dist/adapters/redocly-loader/malformed-refs.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"malformed-refs.cjs","sources":["../../../src/adapters/redocly-loader/malformed-refs.ts"],"sourcesContent":["import { ERROR_CODES, OpenAPITypesafeError } from \"../../domain/errors.js\";\nimport { parseRefPointer } from \"../../domain/openapi/json-pointer.js\";\nimport { findRefHolders } from \"./ref-holders.js\";\nimport type { LoadedDocument } from \"./unsupported-keys.js\";\n\n/**\n * Redocly percent-decodes every JSON Pointer in a `$ref` and throws a bare `URIError` for a\n * malformed escape such as `#/components/schemas/50%` (`%` must be written `%25`). The loader\n * looks for these refs only after Redocly threw, and names them.\n */\n\n/** Enough refs in the message to act on; `details.refs` has all of them. */\nconst REFS_IN_MESSAGE = 5;\n\n/** A `$ref` whose pointer has a malformed percent escape, and where it is. */\nexport interface MalformedRef {\n  readonly ref: string;\n  readonly pointer: string;\n  readonly source: string;\n}\n\nfunction isMalformed(ref: string): boolean {\n  try {\n    parseRefPointer(ref);\n    return false;\n  } catch (error) {\n    if (error instanceof URIError) {\n      return true;\n    }\n    throw error;\n  }\n}\n\n/** Every malformed `$ref` of the given documents. */\nexport function findMalformedRefs(documents: readonly LoadedDocument[]): MalformedRef[] {\n  return documents.flatMap((document) =>\n    findRefHolders(document.parsed)\n      .filter(({ node }) => isMalformed(node.$ref))\n      .map(({ node, pointer }) => ({ ref: node.$ref, pointer, source: document.source })),\n  );\n}\n\nfunction describeRef(found: MalformedRef): string {\n  return `\"${found.ref}\" at ${found.pointer} in ${found.source}`;\n}\n\n/** The typed error for Redocly's `URIError`; `cause` is that error. */\nexport function malformedRefsError(\n  refs: readonly MalformedRef[],\n  cause: unknown,\n): OpenAPITypesafeError {\n  const listed = refs.slice(0, REFS_IN_MESSAGE).map(describeRef);\n  const more = refs.length > REFS_IN_MESSAGE ? ` and ${refs.length - REFS_IN_MESSAGE} more` : \"\";\n  const where = listed.length === 0 ? \"\" : `: ${listed.join(\", \")}${more}`;\n  return new OpenAPITypesafeError({\n    code: ERROR_CODES.SCHEMA_REF_INVALID,\n    message: `A $ref has a malformed percent escape; write \"%\" as \"%25\" in a JSON Pointer${where}.`,\n    details: { reason: \"malformed\", refs: refs.map((found) => ({ ...found })) },\n    cause,\n  });\n}\n"],"names":["parseRefPointer","findRefHolders","OpenAPITypesafeError","ERROR_CODES"],"mappings":";;;;;;AAYA,MAAM,eAAA,GAAkB,CAAA;AASxB,SAAS,YAAY,GAAA,EAAsB;AACzC,EAAA,IAAI;AACF,IAAAA,2BAAA,CAAgB,GAAG,CAAA;AACnB,IAAA,OAAO,KAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAGO,SAAS,kBAAkB,SAAA,EAAsD;AACtF,EAAA,OAAO,SAAA,CAAU,OAAA;AAAA,IAAQ,CAAC,QAAA,KACxBC,yBAAA,CAAe,QAAA,CAAS,MAAM,CAAA,CAC3B,MAAA,CAAO,CAAC,EAAE,IAAA,EAAK,KAAM,WAAA,CAAY,KAAK,IAAI,CAAC,CAAA,CAC3C,GAAA,CAAI,CAAC,EAAE,IAAA,EAAM,OAAA,EAAQ,MAAO,EAAE,GAAA,EAAK,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,MAAA,EAAQ,QAAA,CAAS,QAAO,CAAE;AAAA,GACtF;AACF;AAEA,SAAS,YAAY,KAAA,EAA6B;AAChD,EAAA,OAAO,CAAA,CAAA,EAAI,MAAM,GAAG,CAAA,KAAA,EAAQ,MAAM,OAAO,CAAA,IAAA,EAAO,MAAM,MAAM,CAAA,CAAA;AAC9D;AAGO,SAAS,kBAAA,CACd,MACA,KAAA,EACsB;AACtB,EAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,GAAG,eAAe,CAAA,CAAE,IAAI,WAAW,CAAA;AAC7D,EAAA,MAAM,IAAA,GAAO,KAAK,MAAA,GAAS,eAAA,GAAkB,QAAQ,IAAA,CAAK,MAAA,GAAS,eAAe,CAAA,KAAA,CAAA,GAAU,EAAA;AAC5F,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,KAAW,CAAA,GAAI,EAAA,GAAK,CAAA,EAAA,EAAK,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG,IAAI,CAAA,CAAA;AACtE,EAAA,OAAO,IAAIC,2BAAA,CAAqB;AAAA,IAC9B,MAAMC,kBAAA,CAAY,kBAAA;AAAA,IAClB,OAAA,EAAS,8EAA8E,KAAK,CAAA,CAAA,CAAA;AAAA,IAC5F,OAAA,EAAS,EAAE,MAAA,EAAQ,WAAA,EAAa,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,KAAA,MAAW,EAAE,GAAG,KAAA,GAAQ,CAAA,EAAE;AAAA,IAC1E;AAAA,GACD,CAAA;AACH;;;"}

package/dist/adapters/redocly-loader/malformed-refs.mjs

@@ -0,0 +1,38 @@
+import { OpenAPITypesafeError, ERROR_CODES } from '../../domain/errors.mjs';
+import { parseRefPointer } from '../../domain/openapi/json-pointer.mjs';
+import { findRefHolders } from './ref-holders.mjs';
+
+const REFS_IN_MESSAGE = 5;
+function isMalformed(ref) {
+  try {
+    parseRefPointer(ref);
+    return false;
+  } catch (error) {
+    if (error instanceof URIError) {
+      return true;
+    }
+    throw error;
+  }
+}
+function findMalformedRefs(documents) {
+  return documents.flatMap(
+    (document) => findRefHolders(document.parsed).filter(({ node }) => isMalformed(node.$ref)).map(({ node, pointer }) => ({ ref: node.$ref, pointer, source: document.source }))
+  );
+}
+function describeRef(found) {
+  return `"${found.ref}" at ${found.pointer} in ${found.source}`;
+}
+function malformedRefsError(refs, cause) {
+  const listed = refs.slice(0, REFS_IN_MESSAGE).map(describeRef);
+  const more = refs.length > REFS_IN_MESSAGE ? ` and ${refs.length - REFS_IN_MESSAGE} more` : "";
+  const where = listed.length === 0 ? "" : `: ${listed.join(", ")}${more}`;
+  return new OpenAPITypesafeError({
+    code: ERROR_CODES.SCHEMA_REF_INVALID,
+    message: `A $ref has a malformed percent escape; write "%" as "%25" in a JSON Pointer${where}.`,
+    details: { reason: "malformed", refs: refs.map((found) => ({ ...found })) },
+    cause
+  });
+}
+
+export { findMalformedRefs, malformedRefsError };
+//# sourceMappingURL=malformed-refs.mjs.map

package/dist/adapters/redocly-loader/malformed-refs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"malformed-refs.mjs","sources":["../../../src/adapters/redocly-loader/malformed-refs.ts"],"sourcesContent":["import { ERROR_CODES, OpenAPITypesafeError } from \"../../domain/errors.js\";\nimport { parseRefPointer } from \"../../domain/openapi/json-pointer.js\";\nimport { findRefHolders } from \"./ref-holders.js\";\nimport type { LoadedDocument } from \"./unsupported-keys.js\";\n\n/**\n * Redocly percent-decodes every JSON Pointer in a `$ref` and throws a bare `URIError` for a\n * malformed escape such as `#/components/schemas/50%` (`%` must be written `%25`). The loader\n * looks for these refs only after Redocly threw, and names them.\n */\n\n/** Enough refs in the message to act on; `details.refs` has all of them. */\nconst REFS_IN_MESSAGE = 5;\n\n/** A `$ref` whose pointer has a malformed percent escape, and where it is. */\nexport interface MalformedRef {\n  readonly ref: string;\n  readonly pointer: string;\n  readonly source: string;\n}\n\nfunction isMalformed(ref: string): boolean {\n  try {\n    parseRefPointer(ref);\n    return false;\n  } catch (error) {\n    if (error instanceof URIError) {\n      return true;\n    }\n    throw error;\n  }\n}\n\n/** Every malformed `$ref` of the given documents. */\nexport function findMalformedRefs(documents: readonly LoadedDocument[]): MalformedRef[] {\n  return documents.flatMap((document) =>\n    findRefHolders(document.parsed)\n      .filter(({ node }) => isMalformed(node.$ref))\n      .map(({ node, pointer }) => ({ ref: node.$ref, pointer, source: document.source })),\n  );\n}\n\nfunction describeRef(found: MalformedRef): string {\n  return `\"${found.ref}\" at ${found.pointer} in ${found.source}`;\n}\n\n/** The typed error for Redocly's `URIError`; `cause` is that error. */\nexport function malformedRefsError(\n  refs: readonly MalformedRef[],\n  cause: unknown,\n): OpenAPITypesafeError {\n  const listed = refs.slice(0, REFS_IN_MESSAGE).map(describeRef);\n  const more = refs.length > REFS_IN_MESSAGE ? ` and ${refs.length - REFS_IN_MESSAGE} more` : \"\";\n  const where = listed.length === 0 ? \"\" : `: ${listed.join(\", \")}${more}`;\n  return new OpenAPITypesafeError({\n    code: ERROR_CODES.SCHEMA_REF_INVALID,\n    message: `A $ref has a malformed percent escape; write \"%\" as \"%25\" in a JSON Pointer${where}.`,\n    details: { reason: \"malformed\", refs: refs.map((found) => ({ ...found })) },\n    cause,\n  });\n}\n"],"names":[],"mappings":";;;;AAYA,MAAM,eAAA,GAAkB,CAAA;AASxB,SAAS,YAAY,GAAA,EAAsB;AACzC,EAAA,IAAI;AACF,IAAA,eAAA,CAAgB,GAAG,CAAA;AACnB,IAAA,OAAO,KAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAGO,SAAS,kBAAkB,SAAA,EAAsD;AACtF,EAAA,OAAO,SAAA,CAAU,OAAA;AAAA,IAAQ,CAAC,QAAA,KACxB,cAAA,CAAe,QAAA,CAAS,MAAM,CAAA,CAC3B,MAAA,CAAO,CAAC,EAAE,IAAA,EAAK,KAAM,WAAA,CAAY,KAAK,IAAI,CAAC,CAAA,CAC3C,GAAA,CAAI,CAAC,EAAE,IAAA,EAAM,OAAA,EAAQ,MAAO,EAAE,GAAA,EAAK,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,MAAA,EAAQ,QAAA,CAAS,QAAO,CAAE;AAAA,GACtF;AACF;AAEA,SAAS,YAAY,KAAA,EAA6B;AAChD,EAAA,OAAO,CAAA,CAAA,EAAI,MAAM,GAAG,CAAA,KAAA,EAAQ,MAAM,OAAO,CAAA,IAAA,EAAO,MAAM,MAAM,CAAA,CAAA;AAC9D;AAGO,SAAS,kBAAA,CACd,MACA,KAAA,EACsB;AACtB,EAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,GAAG,eAAe,CAAA,CAAE,IAAI,WAAW,CAAA;AAC7D,EAAA,MAAM,IAAA,GAAO,KAAK,MAAA,GAAS,eAAA,GAAkB,QAAQ,IAAA,CAAK,MAAA,GAAS,eAAe,CAAA,KAAA,CAAA,GAAU,EAAA;AAC5F,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,KAAW,CAAA,GAAI,EAAA,GAAK,CAAA,EAAA,EAAK,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG,IAAI,CAAA,CAAA;AACtE,EAAA,OAAO,IAAI,oBAAA,CAAqB;AAAA,IAC9B,MAAM,WAAA,CAAY,kBAAA;AAAA,IAClB,OAAA,EAAS,8EAA8E,KAAK,CAAA,CAAA,CAAA;AAAA,IAC5F,OAAA,EAAS,EAAE,MAAA,EAAQ,WAAA,EAAa,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,KAAA,MAAW,EAAE,GAAG,KAAA,GAAQ,CAAA,EAAE;AAAA,IAC1E;AAAA,GACD,CAAA;AACH;;"}