vite-plugin-openapi-codegen 3.2.0 → 3.2.1

package/dist/cli.mjs

@@ -268,7 +268,49 @@ function collectOperations(spec, pathPrefix = "/api/", stripPrefix = true) {
 			});
 		}
 	}
-	return entries;
+	return excludeInternalOperations(entries, spec);
+}
+function excludeInternalOperations(entries, spec) {
+	const securitySchemes = spec.components?.securitySchemes;
+	if (!securitySchemes) return entries;
+	return entries.filter((entry) => readSecurityRequirement(entry, securitySchemes, spec.security)?.kind !== "internal");
+}
+function readSecurityRequirement(entry, securitySchemes, topLevelSecurity) {
+	const security = entry.operation.security ?? topLevelSecurity;
+	if (security === void 0) return null;
+	if (!Array.isArray(security)) throw new Error(`Operation "${entry.operationId}" has invalid security`);
+	if (security.length === 0) return { kind: "public" };
+	if (security.length > 1) throw new Error(`Operation "${entry.operationId}" declares ${security.length} security requirements; the backend contract emits at most one`);
+	const requirement = security[0];
+	if (!isRecord(requirement)) throw new Error(`Operation "${entry.operationId}" has an invalid security requirement`);
+	const schemeEntries = Object.entries(requirement);
+	if (schemeEntries.length > 1) throw new Error(`Operation "${entry.operationId}" declares ${schemeEntries.length} schemes in one security requirement; the backend contract emits exactly one`);
+	const schemeEntry = schemeEntries[0];
+	if (schemeEntry) {
+		const [schemeName, scopes] = schemeEntry;
+		const scheme = securitySchemes?.[schemeName];
+		if (scheme?.type === "apiKey" && scheme.in === "header") return { kind: "internal" };
+		if (scheme?.type === "http" || scheme?.type === "apiKey" && scheme.in === "cookie") {
+			const roles = readSecurityScopes(entry, schemeName, scopes);
+			return roles.length === 0 ? { kind: "authenticated" } : {
+				kind: "role",
+				roles
+			};
+		}
+	}
+	throw new Error(`Operation "${entry.operationId}" has an unrecognized security scheme`);
+}
+function readSecurityScopes(entry, schemeName, scopes) {
+	if (!Array.isArray(scopes)) throw new Error(`Operation "${entry.operationId}" has non-array scopes for security scheme "${schemeName}"`);
+	const roles = [];
+	for (const scope of scopes) {
+		if (typeof scope !== "string") throw new Error(`Operation "${entry.operationId}" has a non-string scope for security scheme "${schemeName}"`);
+		roles.push(scope);
+	}
+	return roles;
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function getEffectiveParametersByLocation(entry, location) {
 	return (entry.operation.parameters ?? []).filter((parameter) => getEffectiveParameterLocation(entry.apiPath, parameter) === location);
@@ -662,29 +704,6 @@ function createAccessPolicyEntries(operations, securitySchemes, topLevelSecurity
 		}];
 	});
 }
-function readSecurityRequirement(entry, securitySchemes, topLevelSecurity) {
-	const security = entry.operation.security ?? topLevelSecurity;
-	if (security === void 0) return null;
-	if (!Array.isArray(security)) throw new Error(`Operation "${entry.operationId}" has invalid security`);
-	if (security.length === 0) return { kind: "public" };
-	const requirement = security[0];
-	if (!isRecord(requirement)) throw new Error(`Operation "${entry.operationId}" has an invalid security requirement`);
-	for (const [schemeName, scopes] of Object.entries(requirement)) {
-		const scheme = securitySchemes?.[schemeName];
-		if (scheme?.type === "apiKey" && scheme.in === "header") return { kind: "internal" };
-		if (scheme?.type === "http" || scheme?.type === "apiKey" && scheme.in === "cookie") {
-			const roles = Array.isArray(scopes) ? scopes.filter((scope) => typeof scope === "string") : [];
-			return roles.length === 0 ? { kind: "authenticated" } : {
-				kind: "role",
-				roles
-			};
-		}
-	}
-	throw new Error(`Operation "${entry.operationId}" has an unrecognized security scheme`);
-}
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function resolveChannel(channel, useTypeAliases) {
 	if (!channel.typeRef) return channel;
 	return {

package/dist/index.mjs

@@ -266,7 +266,49 @@ function collectOperations(spec, pathPrefix = "/api/", stripPrefix = true) {
 			});
 		}
 	}
-	return entries;
+	return excludeInternalOperations(entries, spec);
+}
+function excludeInternalOperations(entries, spec) {
+	const securitySchemes = spec.components?.securitySchemes;
+	if (!securitySchemes) return entries;
+	return entries.filter((entry) => readSecurityRequirement(entry, securitySchemes, spec.security)?.kind !== "internal");
+}
+function readSecurityRequirement(entry, securitySchemes, topLevelSecurity) {
+	const security = entry.operation.security ?? topLevelSecurity;
+	if (security === void 0) return null;
+	if (!Array.isArray(security)) throw new Error(`Operation "${entry.operationId}" has invalid security`);
+	if (security.length === 0) return { kind: "public" };
+	if (security.length > 1) throw new Error(`Operation "${entry.operationId}" declares ${security.length} security requirements; the backend contract emits at most one`);
+	const requirement = security[0];
+	if (!isRecord(requirement)) throw new Error(`Operation "${entry.operationId}" has an invalid security requirement`);
+	const schemeEntries = Object.entries(requirement);
+	if (schemeEntries.length > 1) throw new Error(`Operation "${entry.operationId}" declares ${schemeEntries.length} schemes in one security requirement; the backend contract emits exactly one`);
+	const schemeEntry = schemeEntries[0];
+	if (schemeEntry) {
+		const [schemeName, scopes] = schemeEntry;
+		const scheme = securitySchemes?.[schemeName];
+		if (scheme?.type === "apiKey" && scheme.in === "header") return { kind: "internal" };
+		if (scheme?.type === "http" || scheme?.type === "apiKey" && scheme.in === "cookie") {
+			const roles = readSecurityScopes(entry, schemeName, scopes);
+			return roles.length === 0 ? { kind: "authenticated" } : {
+				kind: "role",
+				roles
+			};
+		}
+	}
+	throw new Error(`Operation "${entry.operationId}" has an unrecognized security scheme`);
+}
+function readSecurityScopes(entry, schemeName, scopes) {
+	if (!Array.isArray(scopes)) throw new Error(`Operation "${entry.operationId}" has non-array scopes for security scheme "${schemeName}"`);
+	const roles = [];
+	for (const scope of scopes) {
+		if (typeof scope !== "string") throw new Error(`Operation "${entry.operationId}" has a non-string scope for security scheme "${schemeName}"`);
+		roles.push(scope);
+	}
+	return roles;
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function getEffectiveParametersByLocation(entry, location) {
 	return (entry.operation.parameters ?? []).filter((parameter) => getEffectiveParameterLocation(entry.apiPath, parameter) === location);
@@ -660,29 +702,6 @@ function createAccessPolicyEntries(operations, securitySchemes, topLevelSecurity
 		}];
 	});
 }
-function readSecurityRequirement(entry, securitySchemes, topLevelSecurity) {
-	const security = entry.operation.security ?? topLevelSecurity;
-	if (security === void 0) return null;
-	if (!Array.isArray(security)) throw new Error(`Operation "${entry.operationId}" has invalid security`);
-	if (security.length === 0) return { kind: "public" };
-	const requirement = security[0];
-	if (!isRecord(requirement)) throw new Error(`Operation "${entry.operationId}" has an invalid security requirement`);
-	for (const [schemeName, scopes] of Object.entries(requirement)) {
-		const scheme = securitySchemes?.[schemeName];
-		if (scheme?.type === "apiKey" && scheme.in === "header") return { kind: "internal" };
-		if (scheme?.type === "http" || scheme?.type === "apiKey" && scheme.in === "cookie") {
-			const roles = Array.isArray(scopes) ? scopes.filter((scope) => typeof scope === "string") : [];
-			return roles.length === 0 ? { kind: "authenticated" } : {
-				kind: "role",
-				roles
-			};
-		}
-	}
-	throw new Error(`Operation "${entry.operationId}" has an unrecognized security scheme`);
-}
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function resolveChannel(channel, useTypeAliases) {
 	if (!channel.typeRef) return channel;
 	return {
@@ -771,7 +790,7 @@ function openapiCodegen(options) {
 		},
 		async buildStart() {
 			if (command === "serve" && options.generateOnDev !== false) {
-				runDevelopmentGeneration(root, options);
+				runDevelopmentGeneration(root, options, { onError: resolvePluginErrorRaiser(this) });
 				return;
 			}
 		},
@@ -781,9 +800,12 @@ function openapiCodegen(options) {
 			const inputPath = resolve(root, options.input);
 			if (resolve(ctx.file) !== inputPath) return;
 			console.log("[openapi-codegen] openapi.json changed, regenerating...");
-			await runDevelopmentGeneration(root, options, { onSuccess: () => {
-				console.log("[openapi-codegen] regeneration complete.");
-			} });
+			await runDevelopmentGeneration(root, options, {
+				onError: resolvePluginErrorRaiser(this),
+				onSuccess: () => {
+					console.log("[openapi-codegen] regeneration complete.");
+				}
+			});
 		}
 	};
 }
@@ -792,8 +814,15 @@ async function runDevelopmentGeneration(root, options, handlers) {
 		await generateOpenAPIArtifacts(root, options);
 		handlers?.onSuccess?.();
 	} catch (error) {
-		console.error("[openapi-codegen] generation failed during dev mode.", error);
+		const failure = error instanceof Error ? error : new Error(String(error));
+		console.error("[openapi-codegen] generation failed during dev mode.", failure);
+		handlers?.onError?.(failure);
 	}
 }
+function resolvePluginErrorRaiser(context) {
+	if (typeof context !== "object" || context === null || typeof context.error !== "function") return;
+	const pluginContext = context;
+	return (error) => pluginContext.error(error);
+}
 //#endregion
 export { openapiCodegen, renderGeneratedArtifacts };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vite-plugin-openapi-codegen",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "description": "Vite plugin that generates typed API clients and route builders from OpenAPI specs",
   "keywords": [
     "api-client",