Function schemaPathFor

src/core/structured-output-schema.ts:80–97

(ref: StructuredOutputSchemaRef)

}

function schemaPathFor(ref: StructuredOutputSchemaRef): string {
  const schemasDir = getStructuredOutputSchemasDir();
  const schemaPath = path.join(schemasDir, ref.schema, `${ref.version}.schema.json`);
  const resolvedPath = path.resolve(schemaPath);
  const resolvedSchemasDir = path.resolve(schemasDir);

  // Prevent path traversal attacks by ensuring the resolved path is within the schemas directory
  if (
    !resolvedPath.startsWith(resolvedSchemasDir + path.sep) &&
    resolvedPath !== resolvedSchemasDir
  ) {
    throw new Error(
      `Invalid schema path: attempted path traversal detected for ${ref.schema}@${ref.version}`,
    );
  }

  return schemaPath;
}

function collectAndRewriteCommonRefs(value: unknown, pendingDefs: Set<string>): unknown {
  if (Array.isArray(value)) {