TODO.md · part 1

OpenAPI Follow-ups The initial adapter intentionally skips operations it canno

Source: packages/codemode/src/openapi/TODO.md, characters 0–1213, SHA-256 fd764b43f04fb013.

Jev judged not model-facing (confidence 0.04; role documentation). This is a classifier judgment, not proof of delivery.

Readable text: # OpenAPI Follow-ups The initial adapter intentionally skips operations it cannot execute correctly. Future work may add: - Cookie parameters, authentication, and cookie-header merging. - Matrix, label, space-delimited, pipe-delimited, 'a…

# OpenAPI Follow-ups

The initial adapter intentionally skips operations it cannot execute correctly. Future work may add:

- Cookie parameters, authentication, and cookie-header merging.
- Matrix, label, space-delimited, pipe-delimited, `allowReserved`, and parameter `content` serialization.
- External references and complete nested `$defs` support.
- Relative or templated server URLs and server variables.
- Base URLs containing query strings or fragments.
- Runtime response-schema validation and full content negotiation.
- Binary response values and explicit byte-oriented return types.
- Request/response projection for `readOnly` and `writeOnly` properties.
- SSE, WebSocket, and other streaming transports.
- Recovery of responses rejected by a status-filtering `HttpClient`.
- Configurable request and response size limits.
- Adapter-enforced redirect policy independent of the supplied `HttpClient`.
- Strict UTF-8 and empty-body validation for JSON responses.
- Compile-time rejection of parameter schemas with nested values unsupported by their serialization style; runtime rejects them before auth resolution.
- Complete malformed-security-scheme validation and broader auth-combination coverage.