fix(validator-speclynx): add support for npm@11 (#213)

Author: char0n

packages/jentic-openapi-validator-speclynx/src/jentic/apitools/openapi/validator/backends/speclynx/__init__.py

@@ -26,7 +26,6 @@
 logger = logging.getLogger(__name__)
 
 _TARBALL_NAME = "jentic-openapi-validator-speclynx-0.1.0.tgz"
-_DEFAULT_SPECLYNX_PATH = f"npx --yes {_TARBALL_NAME}"
 
 resources_dir = files("jentic.apitools.openapi.validator.backends.speclynx.resources")
 tarball_file = resources_dir.joinpath(_TARBALL_NAME)
@@ -35,7 +34,7 @@
 class SpeclynxValidatorBackend(BaseValidatorBackend):
     def __init__(
         self,
-        speclynx_path: str = _DEFAULT_SPECLYNX_PATH,
+        speclynx_path: str | None = None,
         timeout: float = 600.0,
         allowed_base_dir: str | Path | None = None,
         plugins_dir: str | Path | None = None,
@@ -44,9 +43,9 @@ def __init__(
         Initialize the SpeclynxValidatorBackend.
 
         Args:
-            speclynx_path: Path to the speclynx CLI executable (default: uses bundled npm tarball via npx).
-                Can be a custom path like "/usr/local/bin/speclynx" or an npx command.
-                Uses shell-safe parsing to handle quoted arguments properly.
+            speclynx_path: Path to the speclynx CLI executable. If None (default), uses the
+                bundled npm tarball via npx. Can be a custom path like "/usr/local/bin/speclynx"
+                or an npx command. Uses shell-safe parsing to handle quoted arguments properly.
             timeout: Maximum time in seconds to wait for validation execution (default: 600.0)
             allowed_base_dir: Optional base directory for path security validation.
                 When set, all document paths will be validated to ensure they
@@ -147,25 +146,26 @@ def _validate_uri(
                 output_path = tmp_output.name
 
             try:
-                cmd = [
-                    *shlex.split(self.speclynx_path),
+                args = [
                     validated_doc_path,
                     "-o",
                     output_path,
                 ]
                 if base_url:
-                    cmd.extend(["--base-uri", base_url])
+                    args.extend(["--base-uri", base_url])
                 if self.plugins_dir:
-                    cmd.extend(["--plugins", str(self.plugins_dir)])
+                    args.extend(["--plugins", str(self.plugins_dir)])
                 if self.allowed_base_dir:
-                    cmd.extend(["--allowed-base-dir", str(self.allowed_base_dir)])
+                    args.extend(["--allowed-base-dir", str(self.allowed_base_dir)])
 
-                # npx with bundled tarball requires cwd set to resources directory
-                if self.speclynx_path == _DEFAULT_SPECLYNX_PATH:
+                # npx with bundled tarball: pass absolute path so npm doesn't
+                # resolve the bare filename relative to its global prefix.
+                if self.speclynx_path is None:
                     with as_file(tarball_file) as tarball_path:
-                        resources_path = tarball_path.parent
-                        result = run_subprocess(cmd, timeout=self.timeout, cwd=str(resources_path))
+                        cmd = ["npx", "--yes", f"file:{tarball_path.as_posix()}", *args]
+                        result = run_subprocess(cmd, timeout=self.timeout)
                 else:
+                    cmd = [*shlex.split(self.speclynx_path), *args]
                     result = run_subprocess(cmd, timeout=self.timeout)
 
                 if result is None:

packages/jentic-openapi-validator-speclynx/tests/test_speclynx_validate.py

@@ -6,7 +6,6 @@
 )
 from jentic.apitools.openapi.common.subproc import SubprocessExecutionError
 from jentic.apitools.openapi.validator.backends.speclynx import (
-    _DEFAULT_SPECLYNX_PATH,
     SpeclynxValidatorBackend,
 )
 
@@ -197,7 +196,7 @@ class TestSpeclynxValidatorUnit:
     def test_initialization_with_defaults(self):
         """Test SpeclynxValidator initialization with default values."""
         validator = SpeclynxValidatorBackend()
-        assert validator.speclynx_path == _DEFAULT_SPECLYNX_PATH
+        assert validator.speclynx_path is None
         assert validator.timeout == 600.0
 
     def test_initialization_with_custom_speclynx_path(self):