@scalar/workspace-store 0.19.0 → 0.21.0

package/dist/mutators/auth.d.ts

@@ -1,7 +1,6 @@
 import type { HttpMethod } from '@scalar/helpers/http/http-methods';
+import type { AuthEvents } from '../events/definitions/auth.js';
 import type { WorkspaceDocument } from '../schemas.js';
-import type { SecurityRequirementObject } from '../schemas/v3.1/strict/security-requirement.js';
-import type { SecuritySchemeObject } from '../schemas/v3.1/strict/security-scheme.js';
 /**
  * AuthMeta defines the meta information needed to specify whether the authentication operation
  * is being performed at the document level (entire API), or for a specific operation (specific path and method).
@@ -40,52 +39,7 @@ export type AuthMeta = {
  * })
  * ```
  */
-export declare const updateSelectedSecuritySchemes: ({ document, selectedRequirements, newSchemes, meta, }: {
-    document: WorkspaceDocument | null;
-    selectedRequirements: SecurityRequirementObject[];
-    newSchemes: {
-        name: string;
-        scheme: SecuritySchemeObject;
-    }[];
-    meta: AuthMeta;
-}) => void;
-/**
- * SecuritySchemeUpdate represents the possible updates that can be made
- * to an OpenAPI security scheme object via UI interactions.
- *
- * - `http`: Updates to HTTP type schemes (e.g. basic, bearer), allowing token, username, and password changes.
- * - `apiKey`: Updates to API Key type schemes, allowing the key name and its value to be updated.
- * - `oauth2`: Updates to OAuth2 type schemes for each supported OAuth2 flow.
- *    - Can set various properties such as auth/token URLs, tokens, PKCE method, client credentials, etc.
- */
-export type SecuritySchemeUpdate = {
-    type: 'http';
-    payload: Partial<{
-        token: string;
-        username: string;
-        password: string;
-    }>;
-} | {
-    type: 'apiKey';
-    payload: Partial<{
-        name: string;
-        value: string;
-    }>;
-} | {
-    type: 'oauth2';
-    flow: 'implicit' | 'password' | 'clientCredentials' | 'authorizationCode';
-    payload: Partial<{
-        authUrl: string;
-        tokenUrl: string;
-        token: string;
-        redirectUrl: string;
-        clientId: string;
-        clientSecret: string;
-        usePkce: 'no' | 'SHA-256' | 'plain';
-        username: string;
-        password: string;
-    }>;
-};
+export declare const updateSelectedSecuritySchemes: (document: WorkspaceDocument | null, { selectedRequirements, newSchemes, meta }: AuthEvents["auth:update:selected-security-schemes"]) => Promise<void>;
 /**
  * Updates a security scheme in the OpenAPI document's components object.
  * Handles updates for HTTP, API Key, and OAuth2 types, saving secret information and configuration for UI-auth flows.
@@ -109,15 +63,11 @@ export type SecuritySchemeUpdate = {
  *   name: 'MyHttpAuth',
  * })
  */
-export declare const updateSecurityScheme: ({ document, data, name, }: {
-    document: WorkspaceDocument | null;
-    data: SecuritySchemeUpdate;
-    name: string;
-}) => void;
+export declare const updateSecurityScheme: (document: WorkspaceDocument | null, { payload, name }: AuthEvents["auth:update:security-scheme"]) => import("../schemas/v3.1/strict/security-scheme.js").ApiKeyObject | import("../schemas/v3.1/strict/security-scheme.js").HttpObject | import("../schemas/v3.1/strict/security-scheme.js").OAuth2Object | import("../schemas/v3.1/strict/security-scheme.js").OpenIdConnectObject | undefined;
 /**
  * Sets the selected authentication tab (scheme) index for the given OpenAPI document or operation.
- * - When on the document level, updates the 'x-selected-index' on the document's x-scalar-selected-security extension.
- * - When on an operation (endpoint) level, updates the 'x-selected-index' for that operation's x-scalar-selected-security.
+ * - When on the document level, updates the 'selectedIndex' on the document's x-scalar-selected-security extension.
+ * - When on an operation (endpoint) level, updates the 'selectedIndex' for that operation's x-scalar-selected-security.
  *
  * Also initializes the x-scalar-selected-security extension if it does not exist.
  *
@@ -140,11 +90,7 @@ export declare const updateSecurityScheme: ({ document, data, name, }: {
  *   meta: { type: 'operation', path: '/pets', method: 'get' }
  * });
  */
-export declare const updateSelectedAuthTab: ({ document, index, meta, }: {
-    document: WorkspaceDocument | null;
-    index: number;
-    meta: AuthMeta;
-}) => void;
+export declare const updateSelectedAuthTab: (document: WorkspaceDocument | null, { index, meta }: AuthEvents["auth:update:active-index"]) => void;
 /**
  * Updates the scopes for a specific security requirement in the selected security schemes of
  * a document or operation.
@@ -160,8 +106,8 @@ export declare const updateSelectedAuthTab: ({ document, index, meta, }: {
  * ```ts
  * // Suppose your document (or operation) x-scalar-selected-security looks like:
  * // "x-scalar-selected-security": {
- * //   "x-selected-index": 0,
- * //   "x-schemes": [
+ * //   selectedIndex: 0,
+ * //   selectedSchemes: [
  * //     { "OAuth": ["read:pets"] },
  * //     { "ApiKeyAuth": [] }
  * //   ]
@@ -177,13 +123,7 @@ export declare const updateSelectedAuthTab: ({ document, index, meta, }: {
  * // After, the first scheme becomes: { "OAuth": ["write:pets"] }
  * ```
  */
-export declare const updateSelectedScopes: ({ document, id, name, scopes, meta, }: {
-    document: WorkspaceDocument | null;
-    id: string[];
-    name: string;
-    scopes: string[];
-    meta: AuthMeta;
-}) => void;
+export declare const updateSelectedScopes: (document: WorkspaceDocument | null, { id, name, scopes, meta }: AuthEvents["auth:update:selected-scopes"]) => void;
 /**
  * Deletes one or more security schemes from an OpenAPI WorkspaceDocument,
  * and removes all references to those schemes from selected security, document-level security,
@@ -203,8 +143,5 @@ export declare const updateSelectedScopes: ({ document, id, name, scopes, meta,
  * - All document-level and operation-level security entries referencing those schemes are removed.
  * - Any extended x-scalar-selected-security references to those schemes are also removed.
  */
-export declare const deleteSecurityScheme: ({ document, names }: {
-    document: WorkspaceDocument | null;
-    names: string[];
-}) => void;
+export declare const deleteSecurityScheme: (document: WorkspaceDocument | null, { names }: AuthEvents["auth:delete:security-scheme"]) => void;
 //# sourceMappingURL=auth.d.ts.map

package/dist/mutators/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/mutators/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAA;AAInE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AAEjF;;;;;;GAMG;AACH,MAAM,MAAM,QAAQ,GAChB;IACE,IAAI,EAAE,UAAU,CAAA;CACjB,GACD;IACE,IAAI,EAAE,WAAW,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,UAAU,CAAA;CACnB,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,6BAA6B,GAAI,uDAK3C;IACD,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAClC,oBAAoB,EAAE,yBAAyB,EAAE,CAAA;IACjD,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,EAAE,CAAA;IAC5D,IAAI,EAAE,QAAQ,CAAA;CACf,SA4EA,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IACE,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACH,GACD;IACE,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,OAAO,CAAC;QACf,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;KACd,CAAC,CAAA;CACH,GACD;IACE,IAAI,EAAE,QAAQ,CAAA;IACd,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,mBAAmB,GAAG,mBAAmB,CAAA;IACzE,OAAO,EAAE,OAAO,CAAC;QACf,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,WAAW,EAAE,MAAM,CAAA;QACnB,QAAQ,EAAE,MAAM,CAAA;QAChB,YAAY,EAAE,MAAM,CAAA;QACpB,OAAO,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAAA;QACnC,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACH,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,oBAAoB,GAAI,2BAIlC;IACD,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAClC,IAAI,EAAE,oBAAoB,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;CACb,SAwEA,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,qBAAqB,GAAI,4BAInC;IACD,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,QAAQ,CAAA;CACf,SA8BA,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,oBAAoB,GAAI,uCAMlC;IACD,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAClC,EAAE,EAAE,MAAM,EAAE,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,IAAI,EAAE,QAAQ,CAAA;CACf,SAoCA,CAAA;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,oBAAoB,GAAI,qBAAqB;IAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,SA4DhH,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/mutators/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAA;AAEnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAI3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAGlD;;;;;;GAMG;AACH,MAAM,MAAM,QAAQ,GAChB;IACE,IAAI,EAAE,UAAU,CAAA;CACjB,GACD;IACE,IAAI,EAAE,WAAW,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,UAAU,CAAA;CACnB,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,6BAA6B,GACxC,UAAU,iBAAiB,GAAG,IAAI,EAClC,4CAA4C,UAAU,CAAC,uCAAuC,CAAC,kBA+EhG,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,oBAAoB,GAC/B,UAAU,iBAAiB,GAAG,IAAI,EAClC,mBAAmB,UAAU,CAAC,6BAA6B,CAAC,mRAc7D,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,qBAAqB,GAChC,UAAU,iBAAiB,GAAG,IAAI,EAClC,iBAAiB,UAAU,CAAC,0BAA0B,CAAC,SA+BxD,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,oBAAoB,GAC/B,UAAU,iBAAiB,GAAG,IAAI,EAClC,4BAA4B,UAAU,CAAC,6BAA6B,CAAC,SAqCtE,CAAA;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,oBAAoB,GAC/B,UAAU,iBAAiB,GAAG,IAAI,EAClC,WAAW,UAAU,CAAC,6BAA6B,CAAC,SA6DrD,CAAA"}

package/dist/mutators/auth.js

@@ -1,11 +1,7 @@
 import { generateUniqueValue } from "../helpers/generate-unique-value.js";
 import { getResolvedRef } from "../helpers/get-resolved-ref.js";
-const updateSelectedSecuritySchemes = ({
-  document,
-  selectedRequirements,
-  newSchemes,
-  meta
-}) => {
+import { mergeObjects } from "../helpers/merge-object.js";
+const updateSelectedSecuritySchemes = async (document, { selectedRequirements, newSchemes, meta }) => {
   if (!document) {
     return;
   }
@@ -15,26 +11,29 @@ const updateSelectedSecuritySchemes = ({
     }
     return getResolvedRef(document.paths?.[meta.path]?.[meta.method]);
   };
-  const createdSchemes = newSchemes.map((scheme) => {
-    const name = generateUniqueValue({
-      defaultValue: scheme.name,
-      validation: (value) => !document.components?.securitySchemes?.[value],
-      maxRetries: 100
-    });
-    if (!name) {
-      return;
-    }
-    if (!document.components) {
-      document.components = {};
-    }
-    if (!document.components.securitySchemes) {
-      document.components.securitySchemes = {};
-    }
-    document.components.securitySchemes[name] = scheme.scheme;
-    return {
-      [name]: []
-    };
-  }).filter(Boolean);
+  const createdSecurityRequirements = await Promise.all(
+    newSchemes.map(async (newScheme) => {
+      const uniqueSchemeName = await generateUniqueValue({
+        defaultValue: newScheme.name,
+        validation: (value) => !document.components?.securitySchemes?.[value],
+        maxRetries: 100
+      });
+      if (!uniqueSchemeName) {
+        return;
+      }
+      if (!document.components) {
+        document.components = {};
+      }
+      if (!document.components.securitySchemes) {
+        document.components.securitySchemes = {};
+      }
+      document.components.securitySchemes[uniqueSchemeName] = newScheme.scheme;
+      return {
+        [uniqueSchemeName]: []
+      };
+    })
+  );
+  const createdSchemes = createdSecurityRequirements.filter(Boolean);
   const target = getTarget();
   const newSelectedSecuritySchemes = [...selectedRequirements, ...createdSchemes];
   if (!target) {
@@ -42,88 +41,31 @@ const updateSelectedSecuritySchemes = ({
   }
   if (!target["x-scalar-selected-security"]) {
     target["x-scalar-selected-security"] = {
-      "x-selected-index": -1,
-      "x-schemes": []
+      selectedIndex: -1,
+      selectedSchemes: []
     };
   }
-  const selectedIndex = target["x-scalar-selected-security"]["x-selected-index"];
-  target["x-scalar-selected-security"]["x-schemes"] = newSelectedSecuritySchemes;
+  const selectedIndex = target["x-scalar-selected-security"].selectedIndex;
+  target["x-scalar-selected-security"].selectedSchemes = newSelectedSecuritySchemes;
   if (newSelectedSecuritySchemes.length > 0 && selectedIndex < 0) {
-    target["x-scalar-selected-security"]["x-selected-index"] = 0;
+    target["x-scalar-selected-security"].selectedIndex = 0;
   }
   if (selectedIndex >= newSelectedSecuritySchemes.length) {
-    target["x-scalar-selected-security"]["x-selected-index"] = newSelectedSecuritySchemes.length - 1;
+    target["x-scalar-selected-security"].selectedIndex = newSelectedSecuritySchemes.length - 1;
   }
 };
-const updateSecurityScheme = ({
-  document,
-  data,
-  name
-}) => {
-  if (!document) {
-    return;
-  }
-  const target = getResolvedRef(document.components?.securitySchemes?.[name]);
+const updateSecurityScheme = (document, { payload, name }) => {
+  const target = getResolvedRef(document?.components?.securitySchemes?.[name]);
   if (!target) {
+    console.error(`Security scheme ${name} not found`);
     return;
   }
-  if (target.type === "http" && data.type === "http") {
-    if (data.payload.username) {
-      target["x-scalar-secret-username"] = data.payload.username;
-    }
-    if (data.payload.password) {
-      target["x-scalar-secret-password"] = data.payload.password;
-    }
-    if (data.payload.token) {
-      target["x-scalar-secret-token"] = data.payload.token;
-    }
-  } else if (target.type === "apiKey" && data.type === "apiKey") {
-    if (data.payload.name) {
-      target.name = data.payload.name;
-    }
-    if (data.payload.value) {
-      target["x-scalar-secret-token"] = data.payload.value;
-    }
-  } else if (target.type === "oauth2" && data.type === "oauth2") {
-    const flow = target.flows[data.flow];
-    if (!flow) {
-      return;
-    }
-    if (data.payload.authUrl && "authorizationUrl" in flow) {
-      flow.authorizationUrl = data.payload.authUrl;
-    }
-    if (data.payload.tokenUrl && "tokenUrl" in flow) {
-      flow.tokenUrl = data.payload.tokenUrl;
-    }
-    if (data.payload.token && "x-scalar-secret-token" in flow) {
-      flow["x-scalar-secret-token"] = data.payload.token;
-    }
-    if (data.payload.redirectUrl && "x-scalar-secret-redirect-uri" in flow) {
-      flow["x-scalar-secret-redirect-uri"] = data.payload.redirectUrl;
-    }
-    if (data.payload.clientId && "x-scalar-secret-client-id" in flow) {
-      flow["x-scalar-secret-client-id"] = data.payload.clientId;
-    }
-    if (data.payload.clientSecret && "x-scalar-secret-client-secret" in flow) {
-      flow["x-scalar-secret-client-secret"] = data.payload.clientSecret;
-    }
-    if (data.payload.usePkce && "x-usePkce" in flow) {
-      flow["x-usePkce"] = data.payload.usePkce;
-    }
-    if (data.payload.username && "x-scalar-secret-username" in flow) {
-      flow["x-scalar-secret-username"] = data.payload.username;
-    }
-    if (data.payload.password && "x-scalar-secret-password" in flow) {
-      flow["x-scalar-secret-password"] = data.payload.password;
-    }
+  if (target.type === payload.type) {
+    mergeObjects(target, payload);
   }
-  return;
+  return target;
 };
-const updateSelectedAuthTab = ({
-  document,
-  index,
-  meta
-}) => {
+const updateSelectedAuthTab = (document, { index, meta }) => {
   if (!document) {
     return;
   }
@@ -139,19 +81,13 @@ const updateSelectedAuthTab = ({
   }
   if (!target["x-scalar-selected-security"]) {
     target["x-scalar-selected-security"] = {
-      "x-selected-index": 0,
-      "x-schemes": []
+      selectedIndex: 0,
+      selectedSchemes: []
     };
   }
-  target["x-scalar-selected-security"]["x-selected-index"] = index;
+  target["x-scalar-selected-security"].selectedIndex = index;
 };
-const updateSelectedScopes = ({
-  document,
-  id,
-  name,
-  scopes,
-  meta
-}) => {
+const updateSelectedScopes = (document, { id, name, scopes, meta }) => {
   if (!document) {
     return;
   }
@@ -165,7 +101,7 @@ const updateSelectedScopes = ({
   if (!target) {
     return;
   }
-  const selectedSchemes = target["x-scalar-selected-security"]?.["x-schemes"];
+  const selectedSchemes = target["x-scalar-selected-security"]?.selectedSchemes;
   if (!selectedSchemes) {
     return;
   }
@@ -175,7 +111,7 @@ const updateSelectedScopes = ({
   }
   scheme[name] = scopes;
 };
-const deleteSecurityScheme = ({ document, names }) => {
+const deleteSecurityScheme = (document, { names }) => {
   if (!document) {
     return;
   }
@@ -191,7 +127,7 @@ const deleteSecurityScheme = ({ document, names }) => {
   };
   if (document["x-scalar-selected-security"]) {
     const selectedSecurity = document["x-scalar-selected-security"];
-    selectedSecurity["x-schemes"] = filterSecuritySchemes(selectedSecurity["x-schemes"]);
+    selectedSecurity.selectedSchemes = filterSecuritySchemes(selectedSecurity.selectedSchemes);
   }
   if (document["security"]) {
     document["security"] = filterSecuritySchemes(document["security"]);
@@ -206,8 +142,8 @@ const deleteSecurityScheme = ({ document, names }) => {
         resolvedOperation["security"] = filterSecuritySchemes(resolvedOperation["security"]);
       }
       if ("x-scalar-selected-security" in resolvedOperation && resolvedOperation["x-scalar-selected-security"]) {
-        resolvedOperation["x-scalar-selected-security"]["x-schemes"] = filterSecuritySchemes(
-          resolvedOperation["x-scalar-selected-security"]["x-schemes"]
+        resolvedOperation["x-scalar-selected-security"].selectedSchemes = filterSecuritySchemes(
+          resolvedOperation["x-scalar-selected-security"].selectedSchemes
         );
       }
     });

package/dist/mutators/auth.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/mutators/auth.ts"],
-  "sourcesContent": ["import type { HttpMethod } from '@scalar/helpers/http/http-methods'\n\nimport { generateUniqueValue } from '@/helpers/generate-unique-value'\nimport { getResolvedRef } from '@/helpers/get-resolved-ref'\nimport type { WorkspaceDocument } from '@/schemas'\nimport type { SecurityRequirementObject } from '@/schemas/v3.1/strict/security-requirement'\nimport type { SecuritySchemeObject } from '@/schemas/v3.1/strict/security-scheme'\n\n/**\n * AuthMeta defines the meta information needed to specify whether the authentication operation\n * is being performed at the document level (entire API), or for a specific operation (specific path and method).\n *\n * - If type is 'document', the operation applies to the whole OpenAPI document.\n * - If type is 'operation', it targets a specific operation, identified by its path and method.\n */\nexport type AuthMeta =\n  | {\n      type: 'document'\n    }\n  | {\n      type: 'operation'\n      path: string\n      method: HttpMethod\n    }\n\n/**\n * Updates the selected security schemes for either the entire document or a specific operation.\n * - Adds newly created security schemes (if any) to the workspace document's components.\n * - Ensures that each new scheme name is unique within the document by using `generateUniqueValue`.\n * - Updates the `x-scalar-selected-security` property on the target (document or operation) to reflect the new set of selected security schemes.\n * - Corrects and maintains the selected index so it points to a valid security scheme.\n *\n * @param document - The workspace OpenAPI document to mutate (can be null, in which case nothing happens)\n * @param selectedSecuritySchemes - The current list of selected security scheme objects\n * @param create - Array of new schemes to create, each with a name and a scheme definition\n * @param meta - Location to update: whole document or a specific operation (`{ type: 'document' }` or `{ type: 'operation', path, method }`)\n *\n * Example usage:\n * ```\n * updateSelectedSecuritySchemes({\n *   document,\n *   selectedSecuritySchemes: [{ bearerAuth: [] }],\n *   create: [\n *     { name: 'ApiKeyAuth', scheme: { type: 'apiKey', in: 'header', name: 'X-API-Key' } }\n *   ],\n *   meta: { type: 'document' }\n * })\n * ```\n */\nexport const updateSelectedSecuritySchemes = ({\n  document,\n  selectedRequirements,\n  newSchemes,\n  meta,\n}: {\n  document: WorkspaceDocument | null\n  selectedRequirements: SecurityRequirementObject[]\n  newSchemes: { name: string; scheme: SecuritySchemeObject }[]\n  meta: AuthMeta\n}) => {\n  if (!document) {\n    return\n  }\n\n  // Helper to get the target (whole document or a specific operation)\n  const getTarget = () => {\n    if (meta.type === 'document') {\n      return document\n    }\n\n    return getResolvedRef(document.paths?.[meta.path]?.[meta.method])\n  }\n\n  // Create any new security schemes required, ensuring unique names for the components\n  const createdSchemes = newSchemes\n    .map((scheme) => {\n      const name = generateUniqueValue({\n        defaultValue: scheme.name,\n        validation: (value) => !document.components?.securitySchemes?.[value],\n        maxRetries: 100,\n      })\n\n      if (!name) {\n        return\n      }\n\n      // Ensure components and securitySchemes exist\n      if (!document.components) {\n        document.components = {}\n      }\n      if (!document.components.securitySchemes) {\n        document.components.securitySchemes = {}\n      }\n\n      // Add the new security scheme definition\n      document.components.securitySchemes[name] = scheme.scheme\n\n      // Return an OpenAPI Security Requirement Object for this new scheme (empty scope array)\n      return {\n        [name]: [],\n      }\n    })\n    .filter(Boolean) as SecurityRequirementObject[]\n\n  const target = getTarget()\n\n  const newSelectedSecuritySchemes = [...selectedRequirements, ...createdSchemes]\n\n  // If the target (document/operation) doesn't exist, do nothing\n  if (!target) {\n    return\n  }\n\n  // Ensure the x-scalar-selected-security structure exists on the target\n  if (!target['x-scalar-selected-security']) {\n    target['x-scalar-selected-security'] = {\n      'x-selected-index': -1,\n      'x-schemes': [],\n    }\n  }\n\n  const selectedIndex = target['x-scalar-selected-security']['x-selected-index']\n\n  // Update the schemes array\n  target['x-scalar-selected-security']['x-schemes'] = newSelectedSecuritySchemes\n\n  // Adjust selected index if there are schemes and the index is unset/invalid\n  if (newSelectedSecuritySchemes.length > 0 && selectedIndex < 0) {\n    target['x-scalar-selected-security']['x-selected-index'] = 0\n  }\n\n  // If the selected index is now out of bounds, select the last available\n  if (selectedIndex >= newSelectedSecuritySchemes.length) {\n    target['x-scalar-selected-security']['x-selected-index'] = newSelectedSecuritySchemes.length - 1\n  }\n}\n\n/**\n * SecuritySchemeUpdate represents the possible updates that can be made\n * to an OpenAPI security scheme object via UI interactions.\n *\n * - `http`: Updates to HTTP type schemes (e.g. basic, bearer), allowing token, username, and password changes.\n * - `apiKey`: Updates to API Key type schemes, allowing the key name and its value to be updated.\n * - `oauth2`: Updates to OAuth2 type schemes for each supported OAuth2 flow.\n *    - Can set various properties such as auth/token URLs, tokens, PKCE method, client credentials, etc.\n */\nexport type SecuritySchemeUpdate =\n  | {\n      type: 'http'\n      payload: Partial<{\n        token: string\n        username: string\n        password: string\n      }>\n    }\n  | {\n      type: 'apiKey'\n      payload: Partial<{\n        name: string\n        value: string\n      }>\n    }\n  | {\n      type: 'oauth2'\n      flow: 'implicit' | 'password' | 'clientCredentials' | 'authorizationCode'\n      payload: Partial<{\n        authUrl: string\n        tokenUrl: string\n        token: string\n        redirectUrl: string\n        clientId: string\n        clientSecret: string\n        usePkce: 'no' | 'SHA-256' | 'plain'\n        username: string\n        password: string\n      }>\n    }\n\n/**\n * Updates a security scheme in the OpenAPI document's components object.\n * Handles updates for HTTP, API Key, and OAuth2 types, saving secret information and configuration for UI-auth flows.\n *\n * @param document - The OpenAPI workspace document (can be null)\n * @param data - The update information, including type and payload\n * @param name - The name of the security scheme in document.components.securitySchemes\n *\n * Example usage:\n *\n * updateSecurityScheme({\n *   document,\n *   data: {\n *     type: 'http',\n *     payload: {\n *       username: 'user123',\n *       password: 'pw123',\n *       token: 'tokenval'\n *     }\n *   },\n *   name: 'MyHttpAuth',\n * })\n */\nexport const updateSecurityScheme = ({\n  document,\n  data,\n  name,\n}: {\n  document: WorkspaceDocument | null\n  data: SecuritySchemeUpdate\n  name: string\n}) => {\n  if (!document) {\n    return\n  }\n\n  const target = getResolvedRef(document.components?.securitySchemes?.[name])\n\n  if (!target) {\n    return\n  }\n\n  // Handle HTTP (basic, bearer, etc.)\n  if (target.type === 'http' && data.type === 'http') {\n    if (data.payload.username) {\n      target['x-scalar-secret-username'] = data.payload.username\n    }\n    if (data.payload.password) {\n      target['x-scalar-secret-password'] = data.payload.password\n    }\n    if (data.payload.token) {\n      target['x-scalar-secret-token'] = data.payload.token\n    }\n\n    // Handle API Key\n  } else if (target.type === 'apiKey' && data.type === 'apiKey') {\n    if (data.payload.name) {\n      target.name = data.payload.name\n    }\n    if (data.payload.value) {\n      target['x-scalar-secret-token'] = data.payload.value\n    }\n\n    // Handle OAuth2 (various flows)\n  } else if (target.type === 'oauth2' && data.type === 'oauth2') {\n    const flow = target.flows[data.flow]\n    if (!flow) {\n      // If the flow is not found, do nothing\n      return\n    }\n\n    if (data.payload.authUrl && 'authorizationUrl' in flow) {\n      flow.authorizationUrl = data.payload.authUrl\n    }\n    if (data.payload.tokenUrl && 'tokenUrl' in flow) {\n      flow.tokenUrl = data.payload.tokenUrl\n    }\n    if (data.payload.token && 'x-scalar-secret-token' in flow) {\n      flow['x-scalar-secret-token'] = data.payload.token\n    }\n    if (data.payload.redirectUrl && 'x-scalar-secret-redirect-uri' in flow) {\n      flow['x-scalar-secret-redirect-uri'] = data.payload.redirectUrl\n    }\n    if (data.payload.clientId && 'x-scalar-secret-client-id' in flow) {\n      flow['x-scalar-secret-client-id'] = data.payload.clientId\n    }\n    if (data.payload.clientSecret && 'x-scalar-secret-client-secret' in flow) {\n      flow['x-scalar-secret-client-secret'] = data.payload.clientSecret\n    }\n    if (data.payload.usePkce && 'x-usePkce' in flow) {\n      flow['x-usePkce'] = data.payload.usePkce\n    }\n    if (data.payload.username && 'x-scalar-secret-username' in flow) {\n      flow['x-scalar-secret-username'] = data.payload.username\n    }\n    if (data.payload.password && 'x-scalar-secret-password' in flow) {\n      flow['x-scalar-secret-password'] = data.payload.password\n    }\n  }\n\n  // TODO: handle openid connect type in the future\n\n  return\n}\n\n/**\n * Sets the selected authentication tab (scheme) index for the given OpenAPI document or operation.\n * - When on the document level, updates the 'x-selected-index' on the document's x-scalar-selected-security extension.\n * - When on an operation (endpoint) level, updates the 'x-selected-index' for that operation's x-scalar-selected-security.\n *\n * Also initializes the x-scalar-selected-security extension if it does not exist.\n *\n * @param document The OpenAPI document object (may be null)\n * @param index The index to set as selected\n * @param meta Context where the selection applies ('document' or specific operation)\n *\n * @example\n * // Document-level tab selection\n * updateSelectedAuthTab({\n *   document,\n *   index: 1,\n *   meta: { type: 'document' }\n * });\n *\n * // Operation-level tab selection (e.g., GET /pets)\n * updateSelectedAuthTab({\n *   document,\n *   index: 0,\n *   meta: { type: 'operation', path: '/pets', method: 'get' }\n * });\n */\nexport const updateSelectedAuthTab = ({\n  document,\n  index,\n  meta,\n}: {\n  document: WorkspaceDocument | null\n  index: number\n  meta: AuthMeta\n}) => {\n  if (!document) {\n    return\n  }\n\n  // Determine the target object for setting the auth tab index:\n  // - Document/root level\n  // - Operation/endpoint level (if meta specifies operation)\n  const getTarget = () => {\n    if (meta.type === 'document') {\n      return document\n    }\n    return getResolvedRef(document.paths?.[meta.path]?.[meta.method])\n  }\n\n  const target = getTarget()\n  if (!target) {\n    return\n  }\n\n  // Ensure the 'x-scalar-selected-security' extension exists\n  if (!target['x-scalar-selected-security']) {\n    target['x-scalar-selected-security'] = {\n      'x-selected-index': 0,\n      'x-schemes': [],\n    }\n  }\n\n  // Set the selected auth tab index\n  target['x-scalar-selected-security']['x-selected-index'] = index\n}\n\n/**\n * Updates the scopes for a specific security requirement in the selected security schemes of\n * a document or operation.\n *\n * @param document - The OpenAPI WorkspaceDocument to update.\n * @param id - An array of scheme names that uniquely identifies the target security requirement.\n *             For example: ['OAuth', 'ApiKeyAuth']\n * @param name - The security scheme name to update scopes for (e.g., 'OAuth').\n * @param scopes - The new list of scopes to set. For example: ['read:pets', 'write:pets']\n * @param meta - The context specifying whether the update is at the document-level or operation-level.\n *\n * Example usage:\n * ```ts\n * // Suppose your document (or operation) x-scalar-selected-security looks like:\n * // \"x-scalar-selected-security\": {\n * //   \"x-selected-index\": 0,\n * //   \"x-schemes\": [\n * //     { \"OAuth\": [\"read:pets\"] },\n * //     { \"ApiKeyAuth\": [] }\n * //   ]\n * // }\n *\n * updateSelectedScopes({\n *   document,\n *   id: [\"OAuth\"],     // identifies the scheme object: { \"OAuth\": [...] }\n *   name: \"OAuth\",     // scheme name to update within this security requirement\n *   scopes: [\"write:pets\"], // new scopes array\n *   meta: { type: \"document\" }\n * })\n * // After, the first scheme becomes: { \"OAuth\": [\"write:pets\"] }\n * ```\n */\nexport const updateSelectedScopes = ({\n  document,\n  id,\n  name,\n  scopes,\n  meta,\n}: {\n  document: WorkspaceDocument | null\n  id: string[]\n  name: string\n  scopes: string[]\n  meta: AuthMeta\n}) => {\n  if (!document) {\n    return\n  }\n\n  // Determine the target object (document or the operation)\n  const getTarget = () => {\n    if (meta.type === 'document') {\n      return document\n    }\n    return getResolvedRef(document.paths?.[meta.path]?.[meta.method])\n  }\n\n  const target = getTarget()\n\n  if (!target) {\n    return\n  }\n\n  // Array of security requirement objects under x-scalar-selected-security\n  const selectedSchemes = target['x-scalar-selected-security']?.['x-schemes']\n\n  if (!selectedSchemes) {\n    return\n  }\n\n  // Find the security requirement that matches the given id (scheme key names)\n  // For example: if id = [\"OAuth\"], matches { OAuth: [...] }\n  const scheme = selectedSchemes.find((scheme) => JSON.stringify(Object.keys(scheme)) === JSON.stringify(id))\n\n  if (!scheme) {\n    return\n  }\n\n  // Set the scopes array for the named security scheme within the found security requirement\n  scheme[name] = scopes\n}\n\n/**\n * Deletes one or more security schemes from an OpenAPI WorkspaceDocument,\n * and removes all references to those schemes from selected security, document-level security,\n * and operation-level security/selected security (e.g., on paths).\n *\n * Example usage:\n *\n * ```ts\n * deleteSecurityScheme({\n *   document,                                // The OpenAPI document to update\n *   names: ['ApiKeyAuth', 'BearerAuth'],     // The names of security schemes you want to delete\n * });\n * ```\n *\n * After running this function:\n * - The named security schemes are removed from the components.securitySchemes section.\n * - All document-level and operation-level security entries referencing those schemes are removed.\n * - Any extended x-scalar-selected-security references to those schemes are also removed.\n */\nexport const deleteSecurityScheme = ({ document, names }: { document: WorkspaceDocument | null; names: string[] }) => {\n  if (!document) {\n    // Early exit if there is no document to modify\n    return\n  }\n\n  // Get the mutable reference to securitySchemes in components (may be a proxy/resolved reference)\n  const target = getResolvedRef(document.components?.securitySchemes)\n\n  if (!target) {\n    // If there are no security schemes to delete from, return early\n    return\n  }\n\n  // Remove each named security scheme from the components.securitySchemes object\n  names.forEach((name) => {\n    delete target[name]\n  })\n\n  // Function to remove any security requirement objects that reference given scheme names.\n  const filterSecuritySchemes = (schemes: SecurityRequirementObject[]) => {\n    // Remove schemes whose key is included in the `names` to be deleted.\n    return schemes.filter((scheme) => !names.some((name) => Object.keys(scheme).includes(name)))\n  }\n\n  // -- Remove from document-level `x-scalar-selected-security` extension, if present\n  if (document['x-scalar-selected-security']) {\n    const selectedSecurity = document['x-scalar-selected-security']\n    selectedSecurity['x-schemes'] = filterSecuritySchemes(selectedSecurity['x-schemes'])\n  }\n\n  // -- Remove from document-level `security` property, if present\n  if (document['security']) {\n    document['security'] = filterSecuritySchemes(document['security'])\n  }\n\n  // -- For each path and operation, remove deleted security schemes from operation-level security and custom extension\n  Object.values(document.paths ?? {}).forEach((path) => {\n    Object.values(path).forEach((operation) => {\n      if (typeof operation !== 'object') {\n        // Ignore operations that are not objects (could be undefined)\n        return\n      }\n\n      // Get mutable reference for the operation (could resolve $ref proxies)\n      const resolvedOperation = getResolvedRef(operation)\n\n      // Remove from operation-level security array\n      if ('security' in resolvedOperation && resolvedOperation['security']) {\n        resolvedOperation['security'] = filterSecuritySchemes(resolvedOperation['security'])\n      }\n\n      // Remove from operation-level x-scalar-selected-security array\n      if ('x-scalar-selected-security' in resolvedOperation && resolvedOperation['x-scalar-selected-security']) {\n        resolvedOperation['x-scalar-selected-security']['x-schemes'] = filterSecuritySchemes(\n          resolvedOperation['x-scalar-selected-security']['x-schemes'],\n        )\n      }\n    })\n  })\n}\n"],
-  "mappings": "AAEA,SAAS,2BAA2B;AACpC,SAAS,sBAAsB;AA8CxB,MAAM,gCAAgC,CAAC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAKM;AACJ,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AAGA,QAAM,YAAY,MAAM;AACtB,QAAI,KAAK,SAAS,YAAY;AAC5B,aAAO;AAAA,IACT;AAEA,WAAO,eAAe,SAAS,QAAQ,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;AAAA,EAClE;AAGA,QAAM,iBAAiB,WACpB,IAAI,CAAC,WAAW;AACf,UAAM,OAAO,oBAAoB;AAAA,MAC/B,cAAc,OAAO;AAAA,MACrB,YAAY,CAAC,UAAU,CAAC,SAAS,YAAY,kBAAkB,KAAK;AAAA,MACpE,YAAY;AAAA,IACd,CAAC;AAED,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AAGA,QAAI,CAAC,SAAS,YAAY;AACxB,eAAS,aAAa,CAAC;AAAA,IACzB;AACA,QAAI,CAAC,SAAS,WAAW,iBAAiB;AACxC,eAAS,WAAW,kBAAkB,CAAC;AAAA,IACzC;AAGA,aAAS,WAAW,gBAAgB,IAAI,IAAI,OAAO;AAGnD,WAAO;AAAA,MACL,CAAC,IAAI,GAAG,CAAC;AAAA,IACX;AAAA,EACF,CAAC,EACA,OAAO,OAAO;AAEjB,QAAM,SAAS,UAAU;AAEzB,QAAM,6BAA6B,CAAC,GAAG,sBAAsB,GAAG,cAAc;AAG9E,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,MAAI,CAAC,OAAO,4BAA4B,GAAG;AACzC,WAAO,4BAA4B,IAAI;AAAA,MACrC,oBAAoB;AAAA,MACpB,aAAa,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,gBAAgB,OAAO,4BAA4B,EAAE,kBAAkB;AAG7E,SAAO,4BAA4B,EAAE,WAAW,IAAI;AAGpD,MAAI,2BAA2B,SAAS,KAAK,gBAAgB,GAAG;AAC9D,WAAO,4BAA4B,EAAE,kBAAkB,IAAI;AAAA,EAC7D;AAGA,MAAI,iBAAiB,2BAA2B,QAAQ;AACtD,WAAO,4BAA4B,EAAE,kBAAkB,IAAI,2BAA2B,SAAS;AAAA,EACjG;AACF;AAkEO,MAAM,uBAAuB,CAAC;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AACF,MAIM;AACJ,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AAEA,QAAM,SAAS,eAAe,SAAS,YAAY,kBAAkB,IAAI,CAAC;AAE1E,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,MAAI,OAAO,SAAS,UAAU,KAAK,SAAS,QAAQ;AAClD,QAAI,KAAK,QAAQ,UAAU;AACzB,aAAO,0BAA0B,IAAI,KAAK,QAAQ;AAAA,IACpD;AACA,QAAI,KAAK,QAAQ,UAAU;AACzB,aAAO,0BAA0B,IAAI,KAAK,QAAQ;AAAA,IACpD;AACA,QAAI,KAAK,QAAQ,OAAO;AACtB,aAAO,uBAAuB,IAAI,KAAK,QAAQ;AAAA,IACjD;AAAA,EAGF,WAAW,OAAO,SAAS,YAAY,KAAK,SAAS,UAAU;AAC7D,QAAI,KAAK,QAAQ,MAAM;AACrB,aAAO,OAAO,KAAK,QAAQ;AAAA,IAC7B;AACA,QAAI,KAAK,QAAQ,OAAO;AACtB,aAAO,uBAAuB,IAAI,KAAK,QAAQ;AAAA,IACjD;AAAA,EAGF,WAAW,OAAO,SAAS,YAAY,KAAK,SAAS,UAAU;AAC7D,UAAM,OAAO,OAAO,MAAM,KAAK,IAAI;AACnC,QAAI,CAAC,MAAM;AAET;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ,WAAW,sBAAsB,MAAM;AACtD,WAAK,mBAAmB,KAAK,QAAQ;AAAA,IACvC;AACA,QAAI,KAAK,QAAQ,YAAY,cAAc,MAAM;AAC/C,WAAK,WAAW,KAAK,QAAQ;AAAA,IAC/B;AACA,QAAI,KAAK,QAAQ,SAAS,2BAA2B,MAAM;AACzD,WAAK,uBAAuB,IAAI,KAAK,QAAQ;AAAA,IAC/C;AACA,QAAI,KAAK,QAAQ,eAAe,kCAAkC,MAAM;AACtE,WAAK,8BAA8B,IAAI,KAAK,QAAQ;AAAA,IACtD;AACA,QAAI,KAAK,QAAQ,YAAY,+BAA+B,MAAM;AAChE,WAAK,2BAA2B,IAAI,KAAK,QAAQ;AAAA,IACnD;AACA,QAAI,KAAK,QAAQ,gBAAgB,mCAAmC,MAAM;AACxE,WAAK,+BAA+B,IAAI,KAAK,QAAQ;AAAA,IACvD;AACA,QAAI,KAAK,QAAQ,WAAW,eAAe,MAAM;AAC/C,WAAK,WAAW,IAAI,KAAK,QAAQ;AAAA,IACnC;AACA,QAAI,KAAK,QAAQ,YAAY,8BAA8B,MAAM;AAC/D,WAAK,0BAA0B,IAAI,KAAK,QAAQ;AAAA,IAClD;AACA,QAAI,KAAK,QAAQ,YAAY,8BAA8B,MAAM;AAC/D,WAAK,0BAA0B,IAAI,KAAK,QAAQ;AAAA,IAClD;AAAA,EACF;AAIA;AACF;AA4BO,MAAM,wBAAwB,CAAC;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AACF,MAIM;AACJ,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AAKA,QAAM,YAAY,MAAM;AACtB,QAAI,KAAK,SAAS,YAAY;AAC5B,aAAO;AAAA,IACT;AACA,WAAO,eAAe,SAAS,QAAQ,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;AAAA,EAClE;AAEA,QAAM,SAAS,UAAU;AACzB,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,MAAI,CAAC,OAAO,4BAA4B,GAAG;AACzC,WAAO,4BAA4B,IAAI;AAAA,MACrC,oBAAoB;AAAA,MACpB,aAAa,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,SAAO,4BAA4B,EAAE,kBAAkB,IAAI;AAC7D;AAkCO,MAAM,uBAAuB,CAAC;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAMM;AACJ,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AAGA,QAAM,YAAY,MAAM;AACtB,QAAI,KAAK,SAAS,YAAY;AAC5B,aAAO;AAAA,IACT;AACA,WAAO,eAAe,SAAS,QAAQ,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;AAAA,EAClE;AAEA,QAAM,SAAS,UAAU;AAEzB,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,QAAM,kBAAkB,OAAO,4BAA4B,IAAI,WAAW;AAE1E,MAAI,CAAC,iBAAiB;AACpB;AAAA,EACF;AAIA,QAAM,SAAS,gBAAgB,KAAK,CAACA,YAAW,KAAK,UAAU,OAAO,KAAKA,OAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;AAE1G,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,SAAO,IAAI,IAAI;AACjB;AAqBO,MAAM,uBAAuB,CAAC,EAAE,UAAU,MAAM,MAA+D;AACpH,MAAI,CAAC,UAAU;AAEb;AAAA,EACF;AAGA,QAAM,SAAS,eAAe,SAAS,YAAY,eAAe;AAElE,MAAI,CAAC,QAAQ;AAEX;AAAA,EACF;AAGA,QAAM,QAAQ,CAAC,SAAS;AACtB,WAAO,OAAO,IAAI;AAAA,EACpB,CAAC;AAGD,QAAM,wBAAwB,CAAC,YAAyC;AAEtE,WAAO,QAAQ,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,SAAS,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC;AAAA,EAC7F;AAGA,MAAI,SAAS,4BAA4B,GAAG;AAC1C,UAAM,mBAAmB,SAAS,4BAA4B;AAC9D,qBAAiB,WAAW,IAAI,sBAAsB,iBAAiB,WAAW,CAAC;AAAA,EACrF;AAGA,MAAI,SAAS,UAAU,GAAG;AACxB,aAAS,UAAU,IAAI,sBAAsB,SAAS,UAAU,CAAC;AAAA,EACnE;AAGA,SAAO,OAAO,SAAS,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS;AACpD,WAAO,OAAO,IAAI,EAAE,QAAQ,CAAC,cAAc;AACzC,UAAI,OAAO,cAAc,UAAU;AAEjC;AAAA,MACF;AAGA,YAAM,oBAAoB,eAAe,SAAS;AAGlD,UAAI,cAAc,qBAAqB,kBAAkB,UAAU,GAAG;AACpE,0BAAkB,UAAU,IAAI,sBAAsB,kBAAkB,UAAU,CAAC;AAAA,MACrF;AAGA,UAAI,gCAAgC,qBAAqB,kBAAkB,4BAA4B,GAAG;AACxG,0BAAkB,4BAA4B,EAAE,WAAW,IAAI;AAAA,UAC7D,kBAAkB,4BAA4B,EAAE,WAAW;AAAA,QAC7D;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;",
+  "sourcesContent": ["import type { HttpMethod } from '@scalar/helpers/http/http-methods'\n\nimport type { AuthEvents } from '@/events/definitions/auth'\nimport { generateUniqueValue } from '@/helpers/generate-unique-value'\nimport { getResolvedRef } from '@/helpers/get-resolved-ref'\nimport { mergeObjects } from '@/helpers/merge-object'\nimport type { WorkspaceDocument } from '@/schemas'\nimport type { SecurityRequirementObject } from '@/schemas/v3.1/strict/security-requirement'\n\n/**\n * AuthMeta defines the meta information needed to specify whether the authentication operation\n * is being performed at the document level (entire API), or for a specific operation (specific path and method).\n *\n * - If type is 'document', the operation applies to the whole OpenAPI document.\n * - If type is 'operation', it targets a specific operation, identified by its path and method.\n */\nexport type AuthMeta =\n  | {\n      type: 'document'\n    }\n  | {\n      type: 'operation'\n      path: string\n      method: HttpMethod\n    }\n\n/**\n * Updates the selected security schemes for either the entire document or a specific operation.\n * - Adds newly created security schemes (if any) to the workspace document's components.\n * - Ensures that each new scheme name is unique within the document by using `generateUniqueValue`.\n * - Updates the `x-scalar-selected-security` property on the target (document or operation) to reflect the new set of selected security schemes.\n * - Corrects and maintains the selected index so it points to a valid security scheme.\n *\n * @param document - The workspace OpenAPI document to mutate (can be null, in which case nothing happens)\n * @param selectedSecuritySchemes - The current list of selected security scheme objects\n * @param create - Array of new schemes to create, each with a name and a scheme definition\n * @param meta - Location to update: whole document or a specific operation (`{ type: 'document' }` or `{ type: 'operation', path, method }`)\n *\n * Example usage:\n * ```\n * updateSelectedSecuritySchemes({\n *   document,\n *   selectedSecuritySchemes: [{ bearerAuth: [] }],\n *   create: [\n *     { name: 'ApiKeyAuth', scheme: { type: 'apiKey', in: 'header', name: 'X-API-Key' } }\n *   ],\n *   meta: { type: 'document' }\n * })\n * ```\n */\nexport const updateSelectedSecuritySchemes = async (\n  document: WorkspaceDocument | null,\n  { selectedRequirements, newSchemes, meta }: AuthEvents['auth:update:selected-security-schemes'],\n) => {\n  if (!document) {\n    return\n  }\n\n  // Helper to get the target (whole document or a specific operation)\n  const getTarget = () => {\n    if (meta.type === 'document') {\n      return document\n    }\n\n    return getResolvedRef(document.paths?.[meta.path]?.[meta.method])\n  }\n\n  const createdSecurityRequirements = await Promise.all(\n    newSchemes.map(async (newScheme) => {\n      const uniqueSchemeName = await generateUniqueValue({\n        defaultValue: newScheme.name,\n        validation: (value) => !document.components?.securitySchemes?.[value],\n        maxRetries: 100,\n      })\n\n      if (!uniqueSchemeName) {\n        return\n      }\n\n      // Ensure components and securitySchemes exist\n      if (!document.components) {\n        document.components = {}\n      }\n      if (!document.components.securitySchemes) {\n        document.components.securitySchemes = {}\n      }\n\n      // Add the new security scheme definition\n      document.components.securitySchemes[uniqueSchemeName] = newScheme.scheme\n\n      // Return an OpenAPI Security Requirement Object for this new scheme (empty scope array)\n      return {\n        [uniqueSchemeName]: [],\n      }\n    }),\n  )\n\n  // Create any new security schemes required, ensuring unique names for the components\n  const createdSchemes = createdSecurityRequirements.filter(Boolean) as SecurityRequirementObject[]\n\n  const target = getTarget()\n\n  const newSelectedSecuritySchemes = [...selectedRequirements, ...createdSchemes]\n\n  // If the target (document/operation) doesn't exist, do nothing\n  if (!target) {\n    return\n  }\n\n  // Ensure the x-scalar-selected-security structure exists on the target\n  if (!target['x-scalar-selected-security']) {\n    target['x-scalar-selected-security'] = {\n      selectedIndex: -1,\n      selectedSchemes: [],\n    }\n  }\n\n  const selectedIndex = target['x-scalar-selected-security'].selectedIndex\n\n  // Update the schemes array\n  target['x-scalar-selected-security'].selectedSchemes = newSelectedSecuritySchemes\n\n  // Adjust selected index if there are schemes and the index is unset/invalid\n  if (newSelectedSecuritySchemes.length > 0 && selectedIndex < 0) {\n    target['x-scalar-selected-security'].selectedIndex = 0\n  }\n\n  // If the selected index is now out of bounds, select the last available\n  if (selectedIndex >= newSelectedSecuritySchemes.length) {\n    target['x-scalar-selected-security'].selectedIndex = newSelectedSecuritySchemes.length - 1\n  }\n}\n\n/**\n * Updates a security scheme in the OpenAPI document's components object.\n * Handles updates for HTTP, API Key, and OAuth2 types, saving secret information and configuration for UI-auth flows.\n *\n * @param document - The OpenAPI workspace document (can be null)\n * @param data - The update information, including type and payload\n * @param name - The name of the security scheme in document.components.securitySchemes\n *\n * Example usage:\n *\n * updateSecurityScheme({\n *   document,\n *   data: {\n *     type: 'http',\n *     payload: {\n *       username: 'user123',\n *       password: 'pw123',\n *       token: 'tokenval'\n *     }\n *   },\n *   name: 'MyHttpAuth',\n * })\n */\nexport const updateSecurityScheme = (\n  document: WorkspaceDocument | null,\n  { payload, name }: AuthEvents['auth:update:security-scheme'],\n) => {\n  const target = getResolvedRef(document?.components?.securitySchemes?.[name])\n  if (!target) {\n    console.error(`Security scheme ${name} not found`)\n    return\n  }\n\n  // Handle HTTP (basic, bearer, etc.)\n  if (target.type === payload.type) {\n    mergeObjects(target, payload)\n  }\n\n  return target\n}\n\n/**\n * Sets the selected authentication tab (scheme) index for the given OpenAPI document or operation.\n * - When on the document level, updates the 'selectedIndex' on the document's x-scalar-selected-security extension.\n * - When on an operation (endpoint) level, updates the 'selectedIndex' for that operation's x-scalar-selected-security.\n *\n * Also initializes the x-scalar-selected-security extension if it does not exist.\n *\n * @param document The OpenAPI document object (may be null)\n * @param index The index to set as selected\n * @param meta Context where the selection applies ('document' or specific operation)\n *\n * @example\n * // Document-level tab selection\n * updateSelectedAuthTab({\n *   document,\n *   index: 1,\n *   meta: { type: 'document' }\n * });\n *\n * // Operation-level tab selection (e.g., GET /pets)\n * updateSelectedAuthTab({\n *   document,\n *   index: 0,\n *   meta: { type: 'operation', path: '/pets', method: 'get' }\n * });\n */\nexport const updateSelectedAuthTab = (\n  document: WorkspaceDocument | null,\n  { index, meta }: AuthEvents['auth:update:active-index'],\n) => {\n  if (!document) {\n    return\n  }\n\n  // Determine the target object for setting the auth tab index:\n  // - Document/root level\n  // - Operation/endpoint level (if meta specifies operation)\n  const getTarget = () => {\n    if (meta.type === 'document') {\n      return document\n    }\n    return getResolvedRef(document.paths?.[meta.path]?.[meta.method])\n  }\n\n  const target = getTarget()\n  if (!target) {\n    return\n  }\n\n  // Ensure the 'x-scalar-selected-security' extension exists\n  if (!target['x-scalar-selected-security']) {\n    target['x-scalar-selected-security'] = {\n      selectedIndex: 0,\n      selectedSchemes: [],\n    }\n  }\n\n  // Set the selected auth tab index\n  target['x-scalar-selected-security'].selectedIndex = index\n}\n\n/**\n * Updates the scopes for a specific security requirement in the selected security schemes of\n * a document or operation.\n *\n * @param document - The OpenAPI WorkspaceDocument to update.\n * @param id - An array of scheme names that uniquely identifies the target security requirement.\n *             For example: ['OAuth', 'ApiKeyAuth']\n * @param name - The security scheme name to update scopes for (e.g., 'OAuth').\n * @param scopes - The new list of scopes to set. For example: ['read:pets', 'write:pets']\n * @param meta - The context specifying whether the update is at the document-level or operation-level.\n *\n * Example usage:\n * ```ts\n * // Suppose your document (or operation) x-scalar-selected-security looks like:\n * // \"x-scalar-selected-security\": {\n * //   selectedIndex: 0,\n * //   selectedSchemes: [\n * //     { \"OAuth\": [\"read:pets\"] },\n * //     { \"ApiKeyAuth\": [] }\n * //   ]\n * // }\n *\n * updateSelectedScopes({\n *   document,\n *   id: [\"OAuth\"],     // identifies the scheme object: { \"OAuth\": [...] }\n *   name: \"OAuth\",     // scheme name to update within this security requirement\n *   scopes: [\"write:pets\"], // new scopes array\n *   meta: { type: \"document\" }\n * })\n * // After, the first scheme becomes: { \"OAuth\": [\"write:pets\"] }\n * ```\n */\nexport const updateSelectedScopes = (\n  document: WorkspaceDocument | null,\n  { id, name, scopes, meta }: AuthEvents['auth:update:selected-scopes'],\n) => {\n  if (!document) {\n    return\n  }\n\n  // Determine the target object (document or the operation)\n  const getTarget = () => {\n    if (meta.type === 'document') {\n      return document\n    }\n    return getResolvedRef(document.paths?.[meta.path]?.[meta.method])\n  }\n\n  const target = getTarget()\n\n  if (!target) {\n    return\n  }\n\n  // Array of security requirement objects under x-scalar-selected-security\n  const selectedSchemes = target['x-scalar-selected-security']?.selectedSchemes\n\n  if (!selectedSchemes) {\n    return\n  }\n\n  // Find the security requirement that matches the given id (scheme key names)\n  // For example: if id = [\"OAuth\"], matches { OAuth: [...] }\n  const scheme = selectedSchemes.find((scheme) => JSON.stringify(Object.keys(scheme)) === JSON.stringify(id))\n\n  if (!scheme) {\n    return\n  }\n\n  // Set the scopes array for the named security scheme within the found security requirement\n  scheme[name] = scopes\n}\n\n/**\n * Deletes one or more security schemes from an OpenAPI WorkspaceDocument,\n * and removes all references to those schemes from selected security, document-level security,\n * and operation-level security/selected security (e.g., on paths).\n *\n * Example usage:\n *\n * ```ts\n * deleteSecurityScheme({\n *   document,                                // The OpenAPI document to update\n *   names: ['ApiKeyAuth', 'BearerAuth'],     // The names of security schemes you want to delete\n * });\n * ```\n *\n * After running this function:\n * - The named security schemes are removed from the components.securitySchemes section.\n * - All document-level and operation-level security entries referencing those schemes are removed.\n * - Any extended x-scalar-selected-security references to those schemes are also removed.\n */\nexport const deleteSecurityScheme = (\n  document: WorkspaceDocument | null,\n  { names }: AuthEvents['auth:delete:security-scheme'],\n) => {\n  if (!document) {\n    // Early exit if there is no document to modify\n    return\n  }\n\n  // Get the mutable reference to securitySchemes in components (may be a proxy/resolved reference)\n  const target = getResolvedRef(document.components?.securitySchemes)\n\n  if (!target) {\n    // If there are no security schemes to delete from, return early\n    return\n  }\n\n  // Remove each named security scheme from the components.securitySchemes object\n  names.forEach((name) => {\n    delete target[name]\n  })\n\n  // Function to remove any security requirement objects that reference given scheme names.\n  const filterSecuritySchemes = (schemes: SecurityRequirementObject[]) => {\n    // Remove schemes whose key is included in the `names` to be deleted.\n    return schemes.filter((scheme) => !names.some((name) => Object.keys(scheme).includes(name)))\n  }\n\n  // -- Remove from document-level `x-scalar-selected-security` extension, if present\n  if (document['x-scalar-selected-security']) {\n    const selectedSecurity = document['x-scalar-selected-security']\n    selectedSecurity.selectedSchemes = filterSecuritySchemes(selectedSecurity.selectedSchemes)\n  }\n\n  // -- Remove from document-level `security` property, if present\n  if (document['security']) {\n    document['security'] = filterSecuritySchemes(document['security'])\n  }\n\n  // -- For each path and operation, remove deleted security schemes from operation-level security and custom extension\n  Object.values(document.paths ?? {}).forEach((path) => {\n    Object.values(path).forEach((operation) => {\n      if (typeof operation !== 'object') {\n        // Ignore operations that are not objects (could be undefined)\n        return\n      }\n\n      // Get mutable reference for the operation (could resolve $ref proxies)\n      const resolvedOperation = getResolvedRef(operation)\n\n      // Remove from operation-level security array\n      if ('security' in resolvedOperation && resolvedOperation['security']) {\n        resolvedOperation['security'] = filterSecuritySchemes(resolvedOperation['security'])\n      }\n\n      // Remove from operation-level x-scalar-selected-security array\n      if ('x-scalar-selected-security' in resolvedOperation && resolvedOperation['x-scalar-selected-security']) {\n        resolvedOperation['x-scalar-selected-security'].selectedSchemes = filterSecuritySchemes(\n          resolvedOperation['x-scalar-selected-security'].selectedSchemes,\n        )\n      }\n    })\n  })\n}\n"],
+  "mappings": "AAGA,SAAS,2BAA2B;AACpC,SAAS,sBAAsB;AAC/B,SAAS,oBAAoB;AA6CtB,MAAM,gCAAgC,OAC3C,UACA,EAAE,sBAAsB,YAAY,KAAK,MACtC;AACH,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AAGA,QAAM,YAAY,MAAM;AACtB,QAAI,KAAK,SAAS,YAAY;AAC5B,aAAO;AAAA,IACT;AAEA,WAAO,eAAe,SAAS,QAAQ,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;AAAA,EAClE;AAEA,QAAM,8BAA8B,MAAM,QAAQ;AAAA,IAChD,WAAW,IAAI,OAAO,cAAc;AAClC,YAAM,mBAAmB,MAAM,oBAAoB;AAAA,QACjD,cAAc,UAAU;AAAA,QACxB,YAAY,CAAC,UAAU,CAAC,SAAS,YAAY,kBAAkB,KAAK;AAAA,QACpE,YAAY;AAAA,MACd,CAAC;AAED,UAAI,CAAC,kBAAkB;AACrB;AAAA,MACF;AAGA,UAAI,CAAC,SAAS,YAAY;AACxB,iBAAS,aAAa,CAAC;AAAA,MACzB;AACA,UAAI,CAAC,SAAS,WAAW,iBAAiB;AACxC,iBAAS,WAAW,kBAAkB,CAAC;AAAA,MACzC;AAGA,eAAS,WAAW,gBAAgB,gBAAgB,IAAI,UAAU;AAGlE,aAAO;AAAA,QACL,CAAC,gBAAgB,GAAG,CAAC;AAAA,MACvB;AAAA,IACF,CAAC;AAAA,EACH;AAGA,QAAM,iBAAiB,4BAA4B,OAAO,OAAO;AAEjE,QAAM,SAAS,UAAU;AAEzB,QAAM,6BAA6B,CAAC,GAAG,sBAAsB,GAAG,cAAc;AAG9E,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,MAAI,CAAC,OAAO,4BAA4B,GAAG;AACzC,WAAO,4BAA4B,IAAI;AAAA,MACrC,eAAe;AAAA,MACf,iBAAiB,CAAC;AAAA,IACpB;AAAA,EACF;AAEA,QAAM,gBAAgB,OAAO,4BAA4B,EAAE;AAG3D,SAAO,4BAA4B,EAAE,kBAAkB;AAGvD,MAAI,2BAA2B,SAAS,KAAK,gBAAgB,GAAG;AAC9D,WAAO,4BAA4B,EAAE,gBAAgB;AAAA,EACvD;AAGA,MAAI,iBAAiB,2BAA2B,QAAQ;AACtD,WAAO,4BAA4B,EAAE,gBAAgB,2BAA2B,SAAS;AAAA,EAC3F;AACF;AAyBO,MAAM,uBAAuB,CAClC,UACA,EAAE,SAAS,KAAK,MACb;AACH,QAAM,SAAS,eAAe,UAAU,YAAY,kBAAkB,IAAI,CAAC;AAC3E,MAAI,CAAC,QAAQ;AACX,YAAQ,MAAM,mBAAmB,IAAI,YAAY;AACjD;AAAA,EACF;AAGA,MAAI,OAAO,SAAS,QAAQ,MAAM;AAChC,iBAAa,QAAQ,OAAO;AAAA,EAC9B;AAEA,SAAO;AACT;AA4BO,MAAM,wBAAwB,CACnC,UACA,EAAE,OAAO,KAAK,MACX;AACH,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AAKA,QAAM,YAAY,MAAM;AACtB,QAAI,KAAK,SAAS,YAAY;AAC5B,aAAO;AAAA,IACT;AACA,WAAO,eAAe,SAAS,QAAQ,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;AAAA,EAClE;AAEA,QAAM,SAAS,UAAU;AACzB,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,MAAI,CAAC,OAAO,4BAA4B,GAAG;AACzC,WAAO,4BAA4B,IAAI;AAAA,MACrC,eAAe;AAAA,MACf,iBAAiB,CAAC;AAAA,IACpB;AAAA,EACF;AAGA,SAAO,4BAA4B,EAAE,gBAAgB;AACvD;AAkCO,MAAM,uBAAuB,CAClC,UACA,EAAE,IAAI,MAAM,QAAQ,KAAK,MACtB;AACH,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AAGA,QAAM,YAAY,MAAM;AACtB,QAAI,KAAK,SAAS,YAAY;AAC5B,aAAO;AAAA,IACT;AACA,WAAO,eAAe,SAAS,QAAQ,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;AAAA,EAClE;AAEA,QAAM,SAAS,UAAU;AAEzB,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,QAAM,kBAAkB,OAAO,4BAA4B,GAAG;AAE9D,MAAI,CAAC,iBAAiB;AACpB;AAAA,EACF;AAIA,QAAM,SAAS,gBAAgB,KAAK,CAACA,YAAW,KAAK,UAAU,OAAO,KAAKA,OAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;AAE1G,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAGA,SAAO,IAAI,IAAI;AACjB;AAqBO,MAAM,uBAAuB,CAClC,UACA,EAAE,MAAM,MACL;AACH,MAAI,CAAC,UAAU;AAEb;AAAA,EACF;AAGA,QAAM,SAAS,eAAe,SAAS,YAAY,eAAe;AAElE,MAAI,CAAC,QAAQ;AAEX;AAAA,EACF;AAGA,QAAM,QAAQ,CAAC,SAAS;AACtB,WAAO,OAAO,IAAI;AAAA,EACpB,CAAC;AAGD,QAAM,wBAAwB,CAAC,YAAyC;AAEtE,WAAO,QAAQ,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,SAAS,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC;AAAA,EAC7F;AAGA,MAAI,SAAS,4BAA4B,GAAG;AAC1C,UAAM,mBAAmB,SAAS,4BAA4B;AAC9D,qBAAiB,kBAAkB,sBAAsB,iBAAiB,eAAe;AAAA,EAC3F;AAGA,MAAI,SAAS,UAAU,GAAG;AACxB,aAAS,UAAU,IAAI,sBAAsB,SAAS,UAAU,CAAC;AAAA,EACnE;AAGA,SAAO,OAAO,SAAS,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS;AACpD,WAAO,OAAO,IAAI,EAAE,QAAQ,CAAC,cAAc;AACzC,UAAI,OAAO,cAAc,UAAU;AAEjC;AAAA,MACF;AAGA,YAAM,oBAAoB,eAAe,SAAS;AAGlD,UAAI,cAAc,qBAAqB,kBAAkB,UAAU,GAAG;AACpE,0BAAkB,UAAU,IAAI,sBAAsB,kBAAkB,UAAU,CAAC;AAAA,MACrF;AAGA,UAAI,gCAAgC,qBAAqB,kBAAkB,4BAA4B,GAAG;AACxG,0BAAkB,4BAA4B,EAAE,kBAAkB;AAAA,UAChE,kBAAkB,4BAA4B,EAAE;AAAA,QAClD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;",
   "names": ["scheme"]
 }

package/dist/mutators/cookie.d.ts

@@ -1,17 +1,25 @@
-import type { UnknownObject } from '../helpers/general.js';
-import type { XScalarClientConfigCookie, XScalarClientConfigCookies } from '../schemas/v3.1/strict/client-config-extensions/x-scalar-client-config-cookies.js';
+import type { CookieEvents } from '../events/definitions/cookie.js';
+import type { Workspace, WorkspaceDocument } from '../schemas.js';
+import { type XScalarCookie } from '../schemas/extensions/general/x-scalar-cookies.js';
 /**
- * Cookie mutators for managing client configuration cookies in OpenAPI documents.
- * Provides functions to add and delete cookies from the document's x-scalar-client-config-cookies extension.
+ * Adds OR updates a cookie to the document or workspace.
  *
- * @param store - The workspace store containing the documents
- * @param documentName - The name of the document to operate on
- * @returns Object containing addCookie and deleteCookie functions
+ * @param document - current document if available
+ * @param workspace - current workspace if available
+ * @param payload - The cookie configuration to add or update
+ * @param index - Optional index for updating an existing cookie
+ * @param collectionType - Whether this is for a document or workspace
+ * @returns the parsed cookie that was added or updated or undefined if the collection is not found
  */
-export declare const cookieMutators: (document?: UnknownObject & {
-    "x-scalar-client-config-cookies"?: XScalarClientConfigCookies;
-}) => {
-    addCookie: (cookie: XScalarClientConfigCookie) => boolean;
-    deleteCookie: (cookieName: string) => boolean;
-};
+export declare const upsertCookie: (collection: WorkspaceDocument | Workspace | null, { payload, index }: CookieEvents["cookie:upsert:cookie"]) => XScalarCookie | undefined;
+/**
+ * Deletes a cookie from the document or workspace by index.
+ *
+ * @param document - current document if available
+ * @param workspace - current workspace if available
+ * @param index - Index of the cookie to delete
+ * @param collectionType - Whether this is for a document or workspace
+ * @returns true if the cookie was deleted, false otherwise
+ */
+export declare const deleteCookie: (collection: WorkspaceDocument | Workspace | null, { index }: CookieEvents["cookie:delete:cookie"]) => boolean;
 //# sourceMappingURL=cookie.d.ts.map

package/dist/mutators/cookie.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../src/mutators/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,+EAA+E,CAAA;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GACzB,WAAW,aAAa,GAAG;IAAE,gCAAgC,CAAC,EAAE,0BAA0B,CAAA;CAAE;wBAwBjE,yBAAyB;+BA+BlB,MAAM;CAazC,CAAA"}
+{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../src/mutators/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7D,OAAO,EAAE,KAAK,aAAa,EAAuB,MAAM,+CAA+C,CAAA;AAGvG;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,GACvB,YAAY,iBAAiB,GAAG,SAAS,GAAG,IAAI,EAChD,oBAAoB,YAAY,CAAC,sBAAsB,CAAC,KACvD,aAAa,GAAG,SA8BlB,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GACvB,YAAY,iBAAiB,GAAG,SAAS,GAAG,IAAI,EAChD,WAAW,YAAY,CAAC,sBAAsB,CAAC,KAC9C,OAWF,CAAA"}

package/dist/mutators/cookie.js

@@ -1,31 +1,39 @@
-const cookieMutators = (document) => {
-  const addCookie = (cookie) => {
-    if (!document) {
-      return false;
+import { xScalarCookieSchema } from "../schemas/extensions/general/x-scalar-cookies.js";
+import { coerceValue } from "../schemas/typebox-coerce.js";
+const upsertCookie = (collection, { payload, index }) => {
+  if (!collection) {
+    return;
+  }
+  if (!collection["x-scalar-cookies"]) {
+    collection["x-scalar-cookies"] = [];
+  }
+  if (index !== void 0) {
+    if (index < 0 || index >= collection["x-scalar-cookies"].length) {
+      return;
     }
-    if (!document["x-scalar-client-config-cookies"]) {
-      document["x-scalar-client-config-cookies"] = {};
-    }
-    if (document["x-scalar-client-config-cookies"][cookie.name]) {
-      console.warn(`Cookie with name "${cookie.name}" already exists in the document.`);
-      return false;
-    }
-    document["x-scalar-client-config-cookies"][cookie.name] = cookie;
-    return true;
-  };
-  const deleteCookie = (cookieName) => {
-    if (!document || !document["x-scalar-client-config-cookies"]) {
-      return false;
-    }
-    delete document["x-scalar-client-config-cookies"][cookieName];
-    return true;
-  };
-  return {
-    addCookie,
-    deleteCookie
-  };
+    const parsed2 = coerceValue(xScalarCookieSchema, {
+      ...collection["x-scalar-cookies"][index],
+      ...payload
+    });
+    collection["x-scalar-cookies"][index] = parsed2;
+    return parsed2;
+  }
+  const parsed = coerceValue(xScalarCookieSchema, payload);
+  collection["x-scalar-cookies"].push(parsed);
+  return parsed;
+};
+const deleteCookie = (collection, { index }) => {
+  if (!collection || !collection["x-scalar-cookies"]) {
+    return false;
+  }
+  if (index < 0 || index >= collection["x-scalar-cookies"].length) {
+    return false;
+  }
+  collection["x-scalar-cookies"].splice(index, 1);
+  return true;
 };
 export {
-  cookieMutators
+  deleteCookie,
+  upsertCookie
 };
 //# sourceMappingURL=cookie.js.map

package/dist/mutators/cookie.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/mutators/cookie.ts"],
-  "sourcesContent": ["import type { UnknownObject } from '@/helpers/general'\nimport type {\n  XScalarClientConfigCookie,\n  XScalarClientConfigCookies,\n} from '@/schemas/v3.1/strict/client-config-extensions/x-scalar-client-config-cookies'\n\n/**\n * Cookie mutators for managing client configuration cookies in OpenAPI documents.\n * Provides functions to add and delete cookies from the document's x-scalar-client-config-cookies extension.\n *\n * @param store - The workspace store containing the documents\n * @param documentName - The name of the document to operate on\n * @returns Object containing addCookie and deleteCookie functions\n */\nexport const cookieMutators = (\n  document?: UnknownObject & { 'x-scalar-client-config-cookies'?: XScalarClientConfigCookies },\n) => {\n  /**\n   * Adds a new cookie to the document's client configuration.\n   * If a cookie with the same name already exists, it will log a warning and return false.\n   *\n   * @param cookie - The cookie configuration to add\n   * @returns true if the cookie was added successfully, false if it already exists\n   *\n   * @example\n   * // Add a new authentication cookie\n   * const success = addCookie({\n   *   name: 'auth-token',\n   *   value: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...',\n   *   domain: '.example.com',\n   *   path: '/'\n   * })\n   *\n   * if (success) {\n   *   console.log('Cookie added successfully')\n   * } else {\n   *   console.log('Cookie already exists')\n   * }\n   */\n  const addCookie = (cookie: XScalarClientConfigCookie) => {\n    if (!document) {\n      return false\n    }\n\n    if (!document['x-scalar-client-config-cookies']) {\n      document['x-scalar-client-config-cookies'] = {}\n    }\n\n    if (document['x-scalar-client-config-cookies'][cookie.name]) {\n      console.warn(`Cookie with name \"${cookie.name}\" already exists in the document.`)\n      return false\n    }\n\n    document['x-scalar-client-config-cookies'][cookie.name] = cookie\n    return true\n  }\n\n  /**\n   * Removes a cookie from the document's x-scalar-client-config-cookies extension by its name.\n   * Returns false if the document or cookies object does not exist, otherwise deletes the cookie and returns true.\n   *\n   * @param cookieName - The name of the cookie to remove\n   *\n   * @example\n   * // Remove an authentication cookie\n   * deleteCookie('auth-token')\n   *\n   * // Remove a session cookie\n   * deleteCookie('session-id')\n   */\n  const deleteCookie = (cookieName: string) => {\n    if (!document || !document['x-scalar-client-config-cookies']) {\n      return false\n    }\n\n    delete document['x-scalar-client-config-cookies'][cookieName]\n    return true\n  }\n\n  return {\n    addCookie,\n    deleteCookie,\n  }\n}\n"],
-  "mappings": "AAcO,MAAM,iBAAiB,CAC5B,aACG;AAuBH,QAAM,YAAY,CAAC,WAAsC;AACvD,QAAI,CAAC,UAAU;AACb,aAAO;AAAA,IACT;AAEA,QAAI,CAAC,SAAS,gCAAgC,GAAG;AAC/C,eAAS,gCAAgC,IAAI,CAAC;AAAA,IAChD;AAEA,QAAI,SAAS,gCAAgC,EAAE,OAAO,IAAI,GAAG;AAC3D,cAAQ,KAAK,qBAAqB,OAAO,IAAI,mCAAmC;AAChF,aAAO;AAAA,IACT;AAEA,aAAS,gCAAgC,EAAE,OAAO,IAAI,IAAI;AAC1D,WAAO;AAAA,EACT;AAeA,QAAM,eAAe,CAAC,eAAuB;AAC3C,QAAI,CAAC,YAAY,CAAC,SAAS,gCAAgC,GAAG;AAC5D,aAAO;AAAA,IACT;AAEA,WAAO,SAAS,gCAAgC,EAAE,UAAU;AAC5D,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;",
-  "names": []
+  "sourcesContent": ["import type { CookieEvents } from '@/events/definitions/cookie'\nimport type { Workspace, WorkspaceDocument } from '@/schemas'\nimport { type XScalarCookie, xScalarCookieSchema } from '@/schemas/extensions/general/x-scalar-cookies'\nimport { coerceValue } from '@/schemas/typebox-coerce'\n\n/**\n * Adds OR updates a cookie to the document or workspace.\n *\n * @param document - current document if available\n * @param workspace - current workspace if available\n * @param payload - The cookie configuration to add or update\n * @param index - Optional index for updating an existing cookie\n * @param collectionType - Whether this is for a document or workspace\n * @returns the parsed cookie that was added or updated or undefined if the collection is not found\n */\nexport const upsertCookie = (\n  collection: WorkspaceDocument | Workspace | null,\n  { payload, index }: CookieEvents['cookie:upsert:cookie'],\n): XScalarCookie | undefined => {\n  if (!collection) {\n    return\n  }\n\n  if (!collection['x-scalar-cookies']) {\n    collection['x-scalar-cookies'] = []\n  }\n\n  if (index !== undefined) {\n    // Update existing cookie at index\n    if (index < 0 || index >= collection['x-scalar-cookies'].length) {\n      return\n    }\n\n    // Ensure we parse the payload but keep the existing cookie data\n    const parsed = coerceValue(xScalarCookieSchema, {\n      ...collection['x-scalar-cookies'][index],\n      ...payload,\n    })\n\n    // Update\n    collection['x-scalar-cookies'][index] = parsed\n    return parsed\n  }\n\n  // Add new cookie\n  const parsed = coerceValue(xScalarCookieSchema, payload)\n  collection['x-scalar-cookies'].push(parsed)\n  return parsed\n}\n\n/**\n * Deletes a cookie from the document or workspace by index.\n *\n * @param document - current document if available\n * @param workspace - current workspace if available\n * @param index - Index of the cookie to delete\n * @param collectionType - Whether this is for a document or workspace\n * @returns true if the cookie was deleted, false otherwise\n */\nexport const deleteCookie = (\n  collection: WorkspaceDocument | Workspace | null,\n  { index }: CookieEvents['cookie:delete:cookie'],\n): boolean => {\n  if (!collection || !collection['x-scalar-cookies']) {\n    return false\n  }\n\n  if (index < 0 || index >= collection['x-scalar-cookies'].length) {\n    return false\n  }\n\n  collection['x-scalar-cookies'].splice(index, 1)\n  return true\n}\n"],
+  "mappings": "AAEA,SAA6B,2BAA2B;AACxD,SAAS,mBAAmB;AAYrB,MAAM,eAAe,CAC1B,YACA,EAAE,SAAS,MAAM,MACa;AAC9B,MAAI,CAAC,YAAY;AACf;AAAA,EACF;AAEA,MAAI,CAAC,WAAW,kBAAkB,GAAG;AACnC,eAAW,kBAAkB,IAAI,CAAC;AAAA,EACpC;AAEA,MAAI,UAAU,QAAW;AAEvB,QAAI,QAAQ,KAAK,SAAS,WAAW,kBAAkB,EAAE,QAAQ;AAC/D;AAAA,IACF;AAGA,UAAMA,UAAS,YAAY,qBAAqB;AAAA,MAC9C,GAAG,WAAW,kBAAkB,EAAE,KAAK;AAAA,MACvC,GAAG;AAAA,IACL,CAAC;AAGD,eAAW,kBAAkB,EAAE,KAAK,IAAIA;AACxC,WAAOA;AAAA,EACT;AAGA,QAAM,SAAS,YAAY,qBAAqB,OAAO;AACvD,aAAW,kBAAkB,EAAE,KAAK,MAAM;AAC1C,SAAO;AACT;AAWO,MAAM,eAAe,CAC1B,YACA,EAAE,MAAM,MACI;AACZ,MAAI,CAAC,cAAc,CAAC,WAAW,kBAAkB,GAAG;AAClD,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,KAAK,SAAS,WAAW,kBAAkB,EAAE,QAAQ;AAC/D,WAAO;AAAA,EACT;AAEA,aAAW,kBAAkB,EAAE,OAAO,OAAO,CAAC;AAC9C,SAAO;AACT;",
+  "names": ["parsed"]
 }