schema-components 1.19.0 → 1.20.0

package/dist/openapi/components.mjs

@@ -53,7 +53,10 @@ function ApiOperation({ schema: doc, path, method, requestBodyValue, onRequestBo
 	return /* @__PURE__ */ jsxs("section", {
 		"data-operation": `${method.toUpperCase()} ${path}`,
 		children: [
-			/* @__PURE__ */ jsx(OperationHeader, { operation: resolved.operation }),
+			/* @__PURE__ */ jsx(OperationHeader, {
+				operation: resolved.operation,
+				pathItem: resolved.pathItem
+			}),
 			/* @__PURE__ */ jsx(ApiSecurity, {
 				requirements: securityReqs,
 				schemes: securitySchemes
@@ -176,8 +179,18 @@ function ApiResponse({ schema: doc, path, method, status, value, meta, fields, w
 		idPrefix: instancePrefix
 	});
 }
-function OperationHeader({ operation }) {
+function OperationHeader({ operation, pathItem }) {
 	return /* @__PURE__ */ jsxs("header", { children: [
+		(pathItem.summary !== void 0 || pathItem.description !== void 0) && /* @__PURE__ */ jsxs("div", {
+			"data-path-info": true,
+			children: [pathItem.summary !== void 0 && /* @__PURE__ */ jsx("p", {
+				"data-path-summary": true,
+				children: pathItem.summary
+			}), pathItem.description !== void 0 && /* @__PURE__ */ jsx("p", {
+				"data-path-description": true,
+				children: pathItem.description
+			})]
+		}),
 		/* @__PURE__ */ jsxs("h3", { children: [
 			operation.method.toUpperCase(),
 			" ",
@@ -224,9 +237,7 @@ function ResponseCard({ response, rootDoc, value, fields, meta, widgets, path, m
 		]
 	});
 	let links = [];
-	if (path !== void 0 && method !== void 0) try {
-		links = getLinks(getParsed(rootDoc), path, method, response.statusCode);
-	} catch {}
+	if (path !== void 0 && method !== void 0) links = getLinks(getParsed(rootDoc), path, method, response.statusCode);
 	return /* @__PURE__ */ jsxs("div", {
 		"data-status": response.statusCode,
 		children: [

package/dist/openapi/parser.d.mts

@@ -1,4 +1,4 @@
-import { m as JsonObject } from "../types-D_5ST7SS.mjs";
+import { m as JsonObject } from "../types-C9zw9wbX.mjs";
 
 //#region src/openapi/parser.d.ts
 interface OpenApiDocument {

package/dist/openapi/parser.mjs

@@ -1,4 +1,5 @@
 import { getProperty, isObject } from "../core/guards.mjs";
+import { isPrototypePollutingKey } from "../core/uri.mjs";
 //#region src/openapi/parser.ts
 function getString(value, key) {
 	const result = isObject(value) ? value[key] : void 0;
@@ -173,6 +174,7 @@ function resolveRefInDoc(doc, ref) {
 	for (const part of parts) {
 		if (!isObject(current)) return void 0;
 		const decoded = part.replace(/~1/g, "/").replace(/~0/g, "~");
+		if (isPrototypePollutingKey(decoded)) return void 0;
 		current = current[decoded];
 	}
 	return isObject(current) ? current : void 0;

package/dist/openapi/resolve.d.mts

@@ -23,8 +23,18 @@ declare function getParsed(doc: Record<string, unknown>): OpenApiDocument;
  * for non-objects.
  */
 declare function toDoc(value: unknown): Record<string, unknown>;
+/**
+ * Path-Item-level metadata. OpenAPI 3.1 added `summary` and `description`
+ * to Path Item Objects alongside the existing operation-level fields.
+ * Both are plain strings (no Markdown rendering at this layer).
+ */
+interface PathItemInfo {
+  summary: string | undefined;
+  description: string | undefined;
+}
 interface ResolvedOperation {
   operation: OperationInfo;
+  pathItem: PathItemInfo;
   parameters: ParameterInfo[];
   requestBody: ReturnType<typeof getRequestBody>;
   responses: ResponseInfo[];
@@ -51,4 +61,4 @@ declare function resolveResponse(doc: Record<string, unknown>, path: string, met
  */
 declare function resolveResponses(doc: Record<string, unknown>, path: string, method: string): ResponseInfo[];
 //#endregion
-export { ResolvedOperation, getParsed, resolveOperation, resolveParameters, resolveRequestBody, resolveResponse, resolveResponses, toDoc };
+export { PathItemInfo, ResolvedOperation, getParsed, resolveOperation, resolveParameters, resolveRequestBody, resolveResponse, resolveResponses, toDoc };

package/dist/openapi/resolve.mjs

@@ -1,6 +1,6 @@
-import { isObject } from "../core/guards.mjs";
+import { getProperty, isObject } from "../core/guards.mjs";
 import { detectOpenApiVersion } from "../core/version.mjs";
-import { a as normaliseOpenApiSchemas } from "../normalise-C0ofw3W6.mjs";
+import { a as normaliseOpenApiSchemas } from "../normalise-CMMEl4cd.mjs";
 import { getParameters, getRequestBody, getResponses, listOperations, parseOpenApiDocument } from "./parser.mjs";
 //#region src/openapi/resolve.ts
 /**
@@ -45,6 +45,40 @@ function toDoc(value) {
 	return isObject(value) ? value : {};
 }
 /**
+* Look up a Path Item Object on the (already-normalised) parsed document,
+* following a single `$ref` hop into `components/pathItems` (OpenAPI 3.1)
+* if present. Returns `undefined` when the path is not present or the
+* value is not an object.
+*
+* Implemented inside `resolve.ts` to avoid touching `parser.ts` while
+* still surfacing path-item-level metadata to the React layer.
+*/
+function lookupPathItemNode(parsed, path) {
+	return resolvePathItemNode(parsed, getProperty(getProperty(parsed.doc, "paths"), path));
+}
+function resolvePathItemNode(parsed, pathItem) {
+	if (!isObject(pathItem)) return void 0;
+	const ref = getProperty(pathItem, "$ref");
+	if (typeof ref !== "string") return pathItem;
+	if (!ref.startsWith("#/")) return pathItem;
+	const parts = ref.slice(2).split("/");
+	let current = parsed.doc;
+	for (const part of parts) {
+		if (!isObject(current)) return void 0;
+		const decoded = part.replace(/~1/g, "/").replace(/~0/g, "~");
+		current = current[decoded];
+	}
+	return isObject(current) ? current : pathItem;
+}
+function extractPathItemInfo(pathItem) {
+	const summary = pathItem.summary;
+	const description = pathItem.description;
+	return {
+		summary: typeof summary === "string" ? summary : void 0,
+		description: typeof description === "string" ? description : void 0
+	};
+}
+/**
 * Resolve an operation from an OpenAPI document by path and method.
 * Throws if the operation is not found.
 */
@@ -52,8 +86,11 @@ function resolveOperation(doc, path, method) {
 	const parsed = getParsed(doc);
 	const operation = listOperations(parsed).find((op) => op.path === path && op.method === method);
 	if (operation === void 0) throw new Error(`Operation not found: ${method.toUpperCase()} ${path}`);
+	const pathItemNode = lookupPathItemNode(parsed, path);
+	if (pathItemNode === void 0) throw new Error(`Path item missing for ${method.toUpperCase()} ${path}`);
 	return {
 		operation,
+		pathItem: extractPathItemInfo(pathItemNode),
 		parameters: getParameters(parsed, path, method),
 		requestBody: getRequestBody(parsed, path, method),
 		responses: getResponses(parsed, path, method)

package/dist/react/SchemaComponent.d.mts

@@ -1,8 +1,8 @@
-import { M as WalkedField, T as SchemaMeta, d as FieldOverrides, u as FieldOverride } from "../types-D_5ST7SS.mjs";
-import { t as Diagnostic } from "../diagnostics-VgEKI_Ct.mjs";
-import { t as SchemaError } from "../errors-CnGjT1cg.mjs";
-import { l as RenderProps, r as ComponentResolver } from "../renderer-BQqiXUYP.mjs";
-import { c as PathOfType, l as ResolveOpenAPIRef, n as FromJSONSchema } from "../typeInference-5JiqIZ8t.mjs";
+import { M as WalkedField, T as SchemaMeta, d as FieldOverrides, u as FieldOverride } from "../types-C9zw9wbX.mjs";
+import { t as Diagnostic } from "../diagnostics-CbBPsxSt.mjs";
+import { t as SchemaError } from "../errors-C2iABcn9.mjs";
+import { l as RenderProps, r as ComponentResolver } from "../renderer-SOIbJBtk.mjs";
+import { c as PathOfType, l as RejectUnrepresentableZod, n as FromJSONSchema, u as ResolveOpenAPIRef } from "../typeInference-CDoD_LZ_.mjs";
 import { z } from "zod";
 import * as _$react_jsx_runtime0 from "react/jsx-runtime";
 import { ReactNode } from "react";
@@ -40,8 +40,17 @@ type InferFields<T, Ref extends string | undefined> = T extends z.ZodType ? Fiel
   openapi: unknown;
 } ? Ref extends string ? FieldOverrides<ResolveOpenAPIRef<T & Record<string, unknown>, Ref>> : Record<string, FieldOverride> : T extends object ? unknown extends FromJSONSchema<T> ? Record<string, FieldOverride> : FieldOverrides<FromJSONSchema<T>> : Record<string, FieldOverride>;
 interface SchemaComponentProps<T = unknown, Ref extends string | undefined = undefined> {
-  /** Zod schema, JSON Schema object, or OpenAPI document. */
-  schema: T;
+  /**
+   * Zod schema, JSON Schema object, or OpenAPI document.
+   *
+   * Zod 4 types that cannot round-trip through `z.toJSONSchema()`
+   * (bigint, date, map, set, symbol, function, undefined, void, nan,
+   * codec) are rejected at the type level via
+   * {@link RejectUnrepresentableZod}. Runtime conversion would throw
+   * `SchemaNormalisationError` with kind `zod-type-unrepresentable`
+   * — the static rejection surfaces the same failure at compile time.
+   */
+  schema: RejectUnrepresentableZod<T>;
   /** For OpenAPI: a ref string like "#/components/schemas/User" or "/users/post". */
   ref?: Ref;
   /** Current value to render. */
@@ -128,8 +137,11 @@ interface SchemaFieldProps<T = unknown, Ref extends string | undefined = undefin
    * paths are accepted. Falls back to `string` for runtime schemas.
    */
   path: P;
-  /** The schema to extract the field from. */
-  schema: T;
+  /**
+   * The schema to extract the field from. Subject to the same
+   * unrepresentable-Zod rejection as {@link SchemaComponentProps.schema}.
+   */
+  schema: RejectUnrepresentableZod<T>;
   /** For OpenAPI: a ref string. */
   ref?: Ref;
   /** Current value of the field at the given path. */

package/dist/react/SchemaView.d.mts

@@ -1,6 +1,6 @@
-import { T as SchemaMeta } from "../types-D_5ST7SS.mjs";
-import { t as Diagnostic } from "../diagnostics-VgEKI_Ct.mjs";
-import { r as ComponentResolver } from "../renderer-BQqiXUYP.mjs";
+import { T as SchemaMeta } from "../types-C9zw9wbX.mjs";
+import { t as Diagnostic } from "../diagnostics-CbBPsxSt.mjs";
+import { r as ComponentResolver } from "../renderer-SOIbJBtk.mjs";
 import { WidgetMap } from "./SchemaComponent.mjs";
 import { ReactNode } from "react";
 

package/dist/react/fieldPath.d.mts

@@ -1,4 +1,4 @@
-import { M as WalkedField } from "../types-D_5ST7SS.mjs";
+import { M as WalkedField } from "../types-C9zw9wbX.mjs";
 
 //#region src/react/fieldPath.d.ts
 /**

package/dist/react/headless.d.mts

@@ -1,4 +1,4 @@
-import { r as ComponentResolver } from "../renderer-BQqiXUYP.mjs";
+import { r as ComponentResolver } from "../renderer-SOIbJBtk.mjs";
 
 //#region src/react/headless.d.ts
 /**

package/dist/react/headlessRenderers.d.mts

@@ -1,5 +1,5 @@
-import { M as WalkedField } from "../types-D_5ST7SS.mjs";
-import { l as RenderProps } from "../renderer-BQqiXUYP.mjs";
+import { M as WalkedField } from "../types-C9zw9wbX.mjs";
+import { l as RenderProps } from "../renderer-SOIbJBtk.mjs";
 import { ReactNode } from "react";
 
 //#region src/react/headlessRenderers.d.ts

package/dist/react/headlessRenderers.mjs

@@ -1,5 +1,6 @@
 import { isObject } from "../core/guards.mjs";
 import { sortFieldsByOrder } from "../core/fieldOrder.mjs";
+import { isSafeHyperlink, isSafeMailtoAddress } from "../core/uri.mjs";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { isValidElement, useCallback, useEffect, useRef } from "react";
 //#region src/react/headlessRenderers.tsx
@@ -83,13 +84,13 @@ function renderString(props) {
 			children: "—"
 		});
 		const format = props.constraints.format;
-		if (format === "email") return /* @__PURE__ */ jsx("a", {
+		if (format === "email" && isSafeMailtoAddress(strValue)) return /* @__PURE__ */ jsx("a", {
 			href: `mailto:${strValue}`,
 			id,
 			"aria-readonly": "true",
 			children: strValue
 		});
-		if (format === "uri" || format === "url") return /* @__PURE__ */ jsx("a", {
+		if ((format === "uri" || format === "url") && isSafeHyperlink(strValue)) return /* @__PURE__ */ jsx("a", {
 			href: strValue,
 			id,
 			"aria-readonly": "true",
@@ -658,12 +659,14 @@ function renderNever(props) {
 function renderTuple(props) {
 	if (props.tree.type !== "tuple") return null;
 	const prefixItems = props.tree.prefixItems;
-	if (prefixItems.length === 0) return null;
+	const restItems = props.tree.restItems;
 	const arr = Array.isArray(props.value) ? props.value : [];
-	return /* @__PURE__ */ jsx("div", {
+	if (prefixItems.length === 0 && restItems === void 0 && arr.length === 0) return null;
+	const restCount = restItems !== void 0 ? Math.max(arr.length - prefixItems.length, 0) : 0;
+	return /* @__PURE__ */ jsxs("div", {
 		role: "group",
 		"aria-label": props.meta.description ?? void 0,
-		children: prefixItems.map((element, i) => {
+		children: [prefixItems.map((element, i) => {
 			const itemValue = arr[i];
 			const childOnChange = (v) => {
 				const next = arr.slice();
@@ -671,7 +674,16 @@ function renderTuple(props) {
 				props.onChange(next);
 			};
 			return /* @__PURE__ */ jsx("div", { children: toReactNode(props.renderChild(element, itemValue, childOnChange, `[${String(i)}]`)) }, String(i));
-		})
+		}), restItems !== void 0 && Array.from({ length: restCount }, (_, j) => {
+			const i = prefixItems.length + j;
+			const itemValue = arr[i];
+			const childOnChange = (v) => {
+				const next = arr.slice();
+				next[i] = v;
+				props.onChange(next);
+			};
+			return /* @__PURE__ */ jsx("div", { children: toReactNode(props.renderChild(restItems, itemValue, childOnChange, `[${String(i)}]`)) }, `rest-${String(i)}`);
+		})]
 	});
 }
 /**

package/dist/{ref-Bb43ZURY.d.mts → ref-C8JbwfiS.d.mts}

@@ -1,4 +1,4 @@
-import { i as DiagnosticsOptions } from "./diagnostics-VgEKI_Ct.mjs";
+import { i as DiagnosticsOptions } from "./diagnostics-CbBPsxSt.mjs";
 
 //#region src/core/ref.d.ts
 /**

package/dist/{renderer-BQqiXUYP.d.mts → renderer-SOIbJBtk.d.mts}

@@ -1,4 +1,4 @@
-import { D as StringConstraints, M as WalkedField, T as SchemaMeta, f as FileConstraints, t as ArrayConstraints, x as ObjectConstraints, y as NumberConstraints } from "./types-D_5ST7SS.mjs";
+import { D as StringConstraints, M as WalkedField, T as SchemaMeta, f as FileConstraints, t as ArrayConstraints, x as ObjectConstraints, y as NumberConstraints } from "./types-C9zw9wbX.mjs";
 
 //#region src/core/renderer.d.ts
 /**

package/dist/themes/mantine.d.mts

@@ -1,4 +1,4 @@
-import { r as ComponentResolver } from "../renderer-BQqiXUYP.mjs";
+import { r as ComponentResolver } from "../renderer-SOIbJBtk.mjs";
 
 //#region src/themes/mantine.d.ts
 /**

package/dist/themes/mui.d.mts

@@ -1,4 +1,4 @@
-import { r as ComponentResolver } from "../renderer-BQqiXUYP.mjs";
+import { r as ComponentResolver } from "../renderer-SOIbJBtk.mjs";
 
 //#region src/themes/mui.d.ts
 /**

package/dist/themes/radix.d.mts

@@ -1,4 +1,4 @@
-import { r as ComponentResolver } from "../renderer-BQqiXUYP.mjs";
+import { r as ComponentResolver } from "../renderer-SOIbJBtk.mjs";
 
 //#region src/themes/radix.d.ts
 /**

package/dist/themes/shadcn.d.mts

@@ -1,4 +1,4 @@
-import { r as ComponentResolver } from "../renderer-BQqiXUYP.mjs";
+import { r as ComponentResolver } from "../renderer-SOIbJBtk.mjs";
 
 //#region src/themes/shadcn.d.ts
 declare const shadcnResolver: ComponentResolver;