@scalar/schemas 0.7.0 → 0.7.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @scalar/schemas
 
+## 0.7.1
+
+### Patch Changes
+
+- [#9626](https://github.com/scalar/scalar/pull/9626): Fix AsyncAPI security scheme types being lost on ingestion. When a server referenced a scheme via `$ref`, coercion synthesized a default `$ref-value` (the first `type` literal, `userPassword`) that leaked back over the real definition through the resolved-document proxy, so every scheme rendered as `userPassword`. Reference `$ref-value` is now optional, so unresolved references pass through untouched.
+
 ## 0.7.0
 
 ### Minor Changes

package/dist/asyncapi/3.1/reference.d.ts

@@ -18,6 +18,12 @@ export declare const asyncApiReferenceObject: import("@scalar/validation").Objec
  *
  * Use when the specification allows only a Reference Object (not an inline object), for example
  * `operation.channel` or `channel.servers`.
+ *
+ * `$ref-value` is a resolved-document extension populated by the bundler/proxy at access time, so it
+ * is optional here. If coercion required it, an unresolved `{ $ref }` would be filled with a default
+ * instance of `schema` (for a security scheme, the first `type` literal — `userPassword`). Because the
+ * magic proxy shares one target object between a `$ref-value` and the component it points at, that
+ * synthetic default then leaks back over the real definition, clobbering its `type`.
  */
 export declare const asyncApiResolvedReference: (schema: Schema) => Schema;
 /** Inline object or Reference Object with resolved `$ref-value`. */

package/dist/asyncapi/3.1/reference.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../../../src/asyncapi/3.1/reference.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,MAAM,EAAiD,MAAM,oBAAoB,CAAA;AAI/F;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;AAElD;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;EAKnC,CAAA;AAUD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,GAAI,QAAQ,MAAM,KAAG,MACkD,CAAA;AAE7G,oEAAoE;AACpE,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,KAAG,MAA4D,CAAA"}
+{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../../../src/asyncapi/3.1/reference.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,MAAM,EAA2D,MAAM,oBAAoB,CAAA;AAIzG;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;AAElD;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;EAKnC,CAAA;AAUD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,yBAAyB,GAAI,QAAQ,MAAM,KAAG,MAC4D,CAAA;AAEvH,oEAAoE;AACpE,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,KAAG,MAA4D,CAAA"}

package/dist/asyncapi/3.1/reference.js

@@ -1,5 +1,5 @@
 import { isObject } from '@scalar/helpers/object/is-object';
-import { evaluate, intersection, object, string, union } from '@scalar/validation';
+import { evaluate, intersection, object, optional, string, union } from '@scalar/validation';
 import { referenceExtensions } from '../../general/bundler-extensions.js';
 /**
  * AsyncAPI Reference Object (JSON Reference). Only `$ref` is defined; additional
@@ -19,7 +19,13 @@ const e = (value) => {
  *
  * Use when the specification allows only a Reference Object (not an inline object), for example
  * `operation.channel` or `channel.servers`.
+ *
+ * `$ref-value` is a resolved-document extension populated by the bundler/proxy at access time, so it
+ * is optional here. If coercion required it, an unresolved `{ $ref }` would be filled with a default
+ * instance of `schema` (for a security scheme, the first `type` literal — `userPassword`). Because the
+ * magic proxy shares one target object between a `$ref-value` and the component it points at, that
+ * synthetic default then leaks back over the real definition, clobbering its `type`.
  */
-export const asyncApiResolvedReference = (schema) => intersection([asyncApiReferenceObject, object({ '$ref-value': evaluate(e, schema) }), referenceExtensions]);
+export const asyncApiResolvedReference = (schema) => intersection([asyncApiReferenceObject, object({ '$ref-value': optional(evaluate(e, schema)) }), referenceExtensions]);
 /** Inline object or Reference Object with resolved `$ref-value`. */
 export const recursiveRef = (schema) => union([schema, asyncApiResolvedReference(schema)]);

package/package.json

@@ -14,7 +14,7 @@
     "schemas",
     "scalar"
   ],
-  "version": "0.7.0",
+  "version": "0.7.1",
   "engines": {
     "node": ">=22"
   },
@@ -41,12 +41,12 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@scalar/helpers": "0.9.0",
-    "@scalar/validation": "0.6.0"
+    "@scalar/validation": "0.6.0",
+    "@scalar/helpers": "0.9.0"
   },
   "devDependencies": {
     "vitest": "4.1.0",
-    "@scalar/types": "0.16.0"
+    "@scalar/types": "0.16.1"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json",