rules: # INFO / METADATA info-title-aap-prefix: description: API title must start with "Advance Auto Parts" severity: warn given: $.info.title then: function: pattern functionOptions: match: "^Advance Auto Parts" info-description-required: description: API must have a description severity: error given: $.info then: field: description function: truthy info-version-required: description: API must declare a version severity: error given: $.info then: field: version function: truthy info-contact-required: description: API should include contact information severity: warn given: $.info then: field: contact function: truthy # OPENAPI VERSION openapi-version-3: description: Must use OpenAPI 3.x severity: error given: $ then: field: openapi function: pattern functionOptions: match: "^3\\." # SERVERS servers-defined: description: API must define servers severity: error given: $ then: field: servers function: truthy servers-https: description: Server URLs must use HTTPS severity: error given: $.servers[*].url then: function: pattern functionOptions: match: "^https://" servers-description: description: Servers should have descriptions severity: warn given: $.servers[*] then: field: description function: truthy # PATHS paths-no-trailing-slash: description: Paths must not have trailing slashes severity: warn given: $.paths[*]~ then: function: pattern functionOptions: notMatch: "/$" paths-lowercase-kebab: description: Path segments should use lowercase and hyphens severity: info given: $.paths[*]~ then: function: pattern functionOptions: match: "^/[a-z0-9{}/_-]+$" # OPERATIONS operation-summary-required: description: Operations must have summaries severity: error given: $.paths[*][get,post,put,patch,delete] then: field: summary function: truthy operation-summary-aap-prefix: description: Summaries should start with "Advance Auto Parts" severity: warn given: $.paths[*][get,post,put,patch,delete].summary then: function: pattern functionOptions: match: "^Advance Auto Parts" operation-description-required: description: Operations must have descriptions severity: error given: $.paths[*][get,post,put,patch,delete] then: field: description function: truthy operation-id-required: description: Operations must have operationIds severity: error given: $.paths[*][get,post,put,patch,delete] then: field: operationId function: truthy operation-id-camelcase: description: operationId should use camelCase severity: warn given: $.paths[*][get,post,put,patch,delete].operationId then: function: pattern functionOptions: match: "^[a-z][a-zA-Z0-9]+$" operation-tags-required: description: Operations must have tags severity: error given: $.paths[*][get,post,put,patch,delete] then: field: tags function: truthy # PARAMETERS parameter-description-required: description: Parameters must have descriptions severity: error given: $.paths[*][*].parameters[*] then: field: description function: truthy parameter-schema-required: description: Parameters must have schemas severity: error given: $.paths[*][*].parameters[*] then: field: schema function: truthy # REQUEST BODIES request-body-description: description: Request bodies should have descriptions severity: warn given: $.paths[*][post,put,patch].requestBody then: field: description function: truthy # RESPONSES response-success-required: description: Operations must define 2xx responses severity: error given: $.paths[*][get,post,put,patch,delete] then: field: responses function: schema functionOptions: schema: anyOf: - required: ["200"] - required: ["201"] - required: ["204"] response-auth-defined: description: Operations should define 401 Unauthorized response severity: warn given: $.paths[*][get,post,put,patch,delete].responses then: function: schema functionOptions: schema: anyOf: - required: ["401"] - required: ["400"] response-description-required: description: Responses must have descriptions severity: error given: $.paths[*][*].responses[*] then: field: description function: truthy # SCHEMAS schema-description: description: Component schemas should have descriptions severity: warn given: $.components.schemas[*] then: field: description function: truthy schema-type-defined: description: Schemas should define a type severity: warn given: $.components.schemas[*] then: field: type function: truthy schema-properties-camelcase: description: Schema property names should use camelCase severity: info given: $.components.schemas[*].properties[*]~ then: function: pattern functionOptions: match: "^[a-z][a-zA-Z0-9]+$" # SECURITY security-schemes-defined: description: API must define security schemes severity: error given: $.components then: field: securitySchemes function: truthy security-global-defined: description: API should define global security severity: warn given: $ then: field: security function: truthy # HTTP METHOD CONVENTIONS get-no-request-body: description: GET operations must not have request bodies severity: error given: $.paths[*].get then: field: requestBody function: falsy delete-returns-204: description: DELETE operations should return 204 No Content severity: info given: $.paths[*].delete.responses then: function: schema functionOptions: schema: required: ["204"] # GENERAL QUALITY no-empty-descriptions: description: Descriptions must not be empty severity: error given: $..description then: function: truthy examples-encouraged: description: Responses should include examples severity: info given: $.paths[*][get,post,put,patch,delete].responses[*].content[*] then: function: schema functionOptions: schema: anyOf: - required: ["example"] - required: ["examples"] # AUTOMOTIVE DOMAIN vehicle-fitment-documented: description: Fitment endpoints should document year/make/model parameters severity: info given: $.paths[/vehicles*][get].parameters[*].name then: function: enumeration functionOptions: values: [year, makeId, modelId, engineId, trim]