fix: pre-fetch URL spec then bundle+dereference to handle self-referencing $ref

packages/server/src/services/openapi-parser.ts

@@ -115,8 +115,19 @@ function parseOpenApi3Endpoints(api: OpenApiDoc): { endpoints: ParsedEndpoint[];
 }
 
 export async function parseOpenApiDocument(input: string | object): Promise<ParseResult> {
-  // Parse and dereference all $refs inline
-  const api = await SwaggerParser.dereference(input as any, {
+  let specInput: string | object = input;
+
+  // If input is a URL, fetch the content first so that swagger-parser
+  // works on a plain object and doesn't need network access for $ref resolution
+  if (typeof input === 'string' && input.startsWith('http')) {
+    const res = await fetch(input);
+    if (!res.ok) throw new Error(`Failed to fetch spec from URL: ${res.status} ${res.statusText}`);
+    specInput = await res.json();
+  }
+
+  // Bundle resolves all $refs into a single document, then dereference inlines them
+  const bundled = await SwaggerParser.bundle(specInput as any) as OpenAPI.Document;
+  const api = await SwaggerParser.dereference(bundled, {
     dereference: { circular: 'ignore' },
   }) as OpenAPI.Document;