Zluri API Rules

extends:
  - spectral:oas
rules:
  zluri-summary-prefix:
    description: All operation summaries must start with "Zluri"
    severity: warn
    given: "$.paths.*[get,post,put,delete,patch].summary"
    then:
      function: pattern
      functionOptions:
        match: "^Zluri "
  zluri-operation-id:
    description: Every operation must have an operationId
    severity: error
    given: "$.paths.*[get,post,put,delete,patch]"
    then:
      field: operationId
      function: truthy
  zluri-operation-tags:
    description: Every operation must have at least one tag
    severity: warn
    given: "$.paths.*[get,post,put,delete,patch]"
    then:
      field: tags
      function: truthy
  zluri-operation-description:
    description: Every operation must have a description
    severity: warn
    given: "$.paths.*[get,post,put,delete,patch]"
    then:
      field: description
      function: truthy
  zluri-bearer-auth:
    description: Bearer auth security scheme must be defined
    severity: error
    given: "$.components.securitySchemes.bearerAuth"
    then:
      function: truthy
  zluri-rate-limit-response:
    description: List operations should declare 429 rate limit responses
    severity: warn
    given: "$.paths.*[get].responses"
    then:
      field: "429"
      function: truthy
  zluri-server-defined:
    description: Servers must be defined
    severity: error
    given: "$.servers"
    then:
      function: truthy