@scalar/workspace-store 0.55.6 → 0.56.1

package/dist/request-example/builder/body/build-request-body.js

@@ -3,109 +3,11 @@ import { isObject } from '@scalar/helpers/object/is-object';
 import { setValueAtPath } from '@scalar/helpers/object/set-value-at-path';
 import { getResolvedRef, mergeSiblingReferences } from '@scalar/workspace-store/helpers/get-resolved-ref';
 import { unpackProxyObject } from '@scalar/workspace-store/helpers/unpack-proxy';
-import { isObjectSchema } from '@scalar/workspace-store/schemas/v3.1/strict/type-guards';
 import { getExampleFromBody } from './get-request-body-example.js';
 import { getSelectedBodyContentType } from './get-selected-body-content-type.js';
+import { buildDottedNestedRowPredicate, coerceLeafValueToSchemaType, resolveLeafSchema } from './schema-value-coercion.js';
 import { serializeFormPropertyWithEncoding } from './serialize-form-property.js';
 const getMultipartEncodingContentType = (requestBody, bodyContentType, fieldName) => requestBody.content[bodyContentType]?.encoding?.[fieldName]?.contentType;
-/**
- * Build a predicate that recognizes multipart rows whose dotted name encodes a path
- * into a nested object property of the multipart schema. Without a schema (or when
- * the dotted prefix is not declared as a nested object), a row like `user.email`
- * is treated as a literal name and stays flat — only schema-derived leaves emitted
- * by `get-form-body-rows.ts` are folded back via `foldDottedRowsToObject`.
- */
-const buildDottedNestedRowPredicate = (schema) => {
-    const resolved = schema ? getResolvedRef(schema, mergeSiblingReferences) : undefined;
-    if (!resolved || !isObjectSchema(resolved) || !resolved.properties) {
-        return (_name, _value) => false;
-    }
-    const nestedTopKeys = new Set();
-    for (const [key, child] of Object.entries(resolved.properties)) {
-        const childResolved = child
-            ? getResolvedRef(child, mergeSiblingReferences)
-            : undefined;
-        if (childResolved && isObjectSchema(childResolved) && childResolved.properties) {
-            nestedTopKeys.add(key);
-        }
-    }
-    return (name, value) => {
-        if (value instanceof File || !name.includes('.')) {
-            return false;
-        }
-        const head = name.split('.', 1)[0];
-        return !!head && nestedTopKeys.has(head);
-    };
-};
-/** Normalize a schema's `type` (string | string[] | absent) into a plain string array. */
-const normalizeSchemaTypes = (schema) => {
-    const type = 'type' in schema ? schema.type : undefined;
-    return Array.isArray(type) ? [...type] : type == null ? [] : [type];
-};
-/**
- * Walk an object schema along a dotted-row path and return the resolved leaf schema,
- * or undefined when any segment is not a declared object property.
- */
-const resolveLeafSchema = (schema, segments) => {
-    let current = schema;
-    for (const segment of segments) {
-        if (!current || !isObjectSchema(current) || !current.properties) {
-            return undefined;
-        }
-        current = getResolvedRef(current.properties[segment], mergeSiblingReferences);
-    }
-    return current;
-};
-/** True when a JSON-parsed value's runtime type is allowed by the schema's declared types. */
-const parsedValueMatchesSchemaType = (value, types) => {
-    if (value === null) {
-        return types.includes('null');
-    }
-    if (Array.isArray(value)) {
-        return types.includes('array');
-    }
-    if (typeof value === 'object') {
-        return types.includes('object');
-    }
-    if (typeof value === 'boolean') {
-        return types.includes('boolean');
-    }
-    if (typeof value === 'number') {
-        // A fractional value only satisfies `number`; `integer` requires a whole number so a
-        // string like "3.14" against an integer-only leaf stays untouched instead of being coerced.
-        return types.includes('number') || (types.includes('integer') && Number.isInteger(value));
-    }
-    if (typeof value === 'string') {
-        return types.includes('string');
-    }
-    return false;
-};
-/**
- * The form table stringifies every value for display, so an edited nested field comes back
- * as a string (`false` -> "false", `[]` -> "[]"). When the leaf schema declares a non-string
- * type, parse the string back to that type so the regrouped JSON part keeps its original
- * shape instead of becoming string-typed (issue #9416).
- *
- * Coercion is deliberately conservative: schemas that allow `string` keep the raw text, and a
- * value that does not parse as its declared type is left untouched so user input is never lost.
- */
-const coerceLeafValueToSchemaType = (value, schema) => {
-    if (typeof value !== 'string' || !schema) {
-        return value;
-    }
-    const types = normalizeSchemaTypes(schema);
-    // No declared type, or a string is allowed: keep the user's text as-is.
-    if (types.length === 0 || types.includes('string')) {
-        return value;
-    }
-    try {
-        const parsed = JSON.parse(value);
-        return parsedValueMatchesSchemaType(parsed, types) ? parsed : value;
-    }
-    catch {
-        return value;
-    }
-};
 /**
  * Create the fetch request body
  */

package/dist/request-example/builder/body/get-request-body-example.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-request-body-example.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/body/get-request-body-example.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EAElB,MAAM,8DAA8D,CAAA;AAMrE;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAC7B,aAAa,iBAAiB,EAC9B,aAAa,MAAM,EACnB,aAAa,MAAM,EACnB,kCAAkC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KACvD,aAAa,GAAG,IAgClB,CAAA"}
+{"version":3,"file":"get-request-body-example.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/body/get-request-body-example.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EAElB,MAAM,8DAA8D,CAAA;AAMrE;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAC7B,aAAa,iBAAiB,EAC9B,aAAa,MAAM,EACnB,aAAa,MAAM,EACnB,kCAAkC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KACvD,aAAa,GAAG,IAkClB,CAAA"}

package/dist/request-example/builder/body/get-request-body-example.js

@@ -7,9 +7,11 @@ import { getExampleFromSchema } from '../../../request-example/builder/helpers/g
  */
 export const getExampleFromBody = (requestBody, contentType, exampleName, requestBodyCompositionSelection) => {
     const content = requestBody.content?.[contentType];
-    // Return existing example value if we have one
+    // Return the existing example when it carries a usable value. An example that only has an
+    // `externalValue` (not yet resolved to a `value`) is treated as missing, so we fall back to a
+    // schema-generated example instead of building an empty request body.
     const example = getExample(requestBody, exampleName, contentType);
-    if (example) {
+    if (example && example.value !== undefined) {
         return example;
     }
     const schema = getResolvedRef(content?.schema);

package/dist/request-example/builder/body/schema-value-coercion.d.ts

@@ -0,0 +1,34 @@
+import type { SchemaObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+/**
+ * Walk an object schema along a dotted-row path and return the resolved leaf schema,
+ * or undefined when any segment is not a declared object property.
+ */
+export declare const resolveLeafSchema: (schema: SchemaObject | undefined, segments: string[]) => SchemaObject | undefined;
+/**
+ * The form table stringifies every value for display, so an edited nested field comes back
+ * as a string (`false` -> "false", `[]` -> "[]"). When the leaf schema declares a non-string
+ * type, parse the string back to that type so the regrouped JSON part keeps its original
+ * shape instead of becoming string-typed (issue #9416).
+ *
+ * Coercion is deliberately conservative: schemas that allow `string` keep the raw text, and a
+ * value that does not parse as its declared type is left untouched so user input is never lost.
+ */
+export declare const coerceLeafValueToSchemaType: (value: unknown, schema: SchemaObject | undefined) => unknown;
+/**
+ * Best-effort coercion for row values whose property is not declared in the schema.
+ *
+ * Without a declared type we have no authority to keep `"5"` a string, and leaving it
+ * untouched would string-type every undeclared number/boolean on the first form edit.
+ * So values that parse as non-string JSON (`5`, `true`, `null`, `[1]`, `{"a":1}`) become
+ * that value, and anything else stays the raw text the user typed.
+ */
+export declare const coerceUntypedValue: (value: unknown) => unknown;
+/**
+ * Build a predicate that recognizes rows whose dotted name encodes a path into a nested
+ * object property of the body schema. Without a schema (or when the dotted prefix is not
+ * declared as a nested object), a row like `user.email` is treated as a literal name and
+ * stays flat — only schema-derived leaves emitted by the form-row builders are folded
+ * back into nested objects.
+ */
+export declare const buildDottedNestedRowPredicate: (schema: unknown) => (_name: string, _value: unknown) => boolean;
+//# sourceMappingURL=schema-value-coercion.d.ts.map

package/dist/request-example/builder/body/schema-value-coercion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-value-coercion.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/body/schema-value-coercion.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8DAA8D,CAAA;AAShG;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ,YAAY,GAAG,SAAS,EAAE,UAAU,MAAM,EAAE,KAAG,YAAY,GAAG,SASvG,CAAA;AA2BD;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,GAAI,OAAO,OAAO,EAAE,QAAQ,YAAY,GAAG,SAAS,KAAG,OAe9F,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,GAAI,OAAO,OAAO,KAAG,OAUnD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GAAI,QAAQ,OAAO,aAG1C,MAAM,UAAU,OAAO,YAkBzC,CAAA"}

package/dist/request-example/builder/body/schema-value-coercion.js

@@ -0,0 +1,120 @@
+import { getResolvedRef, mergeSiblingReferences } from '@scalar/workspace-store/helpers/get-resolved-ref';
+import { isObjectSchema } from '@scalar/workspace-store/schemas/v3.1/strict/type-guards';
+/** Normalize a schema's `type` (string | string[] | absent) into a plain string array. */
+const normalizeSchemaTypes = (schema) => {
+    const type = 'type' in schema ? schema.type : undefined;
+    return Array.isArray(type) ? [...type] : type == null ? [] : [type];
+};
+/**
+ * Walk an object schema along a dotted-row path and return the resolved leaf schema,
+ * or undefined when any segment is not a declared object property.
+ */
+export const resolveLeafSchema = (schema, segments) => {
+    let current = schema;
+    for (const segment of segments) {
+        if (!current || !isObjectSchema(current) || !current.properties) {
+            return undefined;
+        }
+        current = getResolvedRef(current.properties[segment], mergeSiblingReferences);
+    }
+    return current;
+};
+/** True when a JSON-parsed value's runtime type is allowed by the schema's declared types. */
+const parsedValueMatchesSchemaType = (value, types) => {
+    if (value === null) {
+        return types.includes('null');
+    }
+    if (Array.isArray(value)) {
+        return types.includes('array');
+    }
+    if (typeof value === 'object') {
+        return types.includes('object');
+    }
+    if (typeof value === 'boolean') {
+        return types.includes('boolean');
+    }
+    if (typeof value === 'number') {
+        // A fractional value only satisfies `number`; `integer` requires a whole number so a
+        // string like "3.14" against an integer-only leaf stays untouched instead of being coerced.
+        return types.includes('number') || (types.includes('integer') && Number.isInteger(value));
+    }
+    if (typeof value === 'string') {
+        return types.includes('string');
+    }
+    return false;
+};
+/**
+ * The form table stringifies every value for display, so an edited nested field comes back
+ * as a string (`false` -> "false", `[]` -> "[]"). When the leaf schema declares a non-string
+ * type, parse the string back to that type so the regrouped JSON part keeps its original
+ * shape instead of becoming string-typed (issue #9416).
+ *
+ * Coercion is deliberately conservative: schemas that allow `string` keep the raw text, and a
+ * value that does not parse as its declared type is left untouched so user input is never lost.
+ */
+export const coerceLeafValueToSchemaType = (value, schema) => {
+    if (typeof value !== 'string' || !schema) {
+        return value;
+    }
+    const types = normalizeSchemaTypes(schema);
+    // No declared type, or a string is allowed: keep the user's text as-is.
+    if (types.length === 0 || types.includes('string')) {
+        return value;
+    }
+    try {
+        const parsed = JSON.parse(value);
+        return parsedValueMatchesSchemaType(parsed, types) ? parsed : value;
+    }
+    catch {
+        return value;
+    }
+};
+/**
+ * Best-effort coercion for row values whose property is not declared in the schema.
+ *
+ * Without a declared type we have no authority to keep `"5"` a string, and leaving it
+ * untouched would string-type every undeclared number/boolean on the first form edit.
+ * So values that parse as non-string JSON (`5`, `true`, `null`, `[1]`, `{"a":1}`) become
+ * that value, and anything else stays the raw text the user typed.
+ */
+export const coerceUntypedValue = (value) => {
+    if (typeof value !== 'string') {
+        return value;
+    }
+    try {
+        const parsed = JSON.parse(value);
+        return typeof parsed === 'string' ? value : parsed;
+    }
+    catch {
+        return value;
+    }
+};
+/**
+ * Build a predicate that recognizes rows whose dotted name encodes a path into a nested
+ * object property of the body schema. Without a schema (or when the dotted prefix is not
+ * declared as a nested object), a row like `user.email` is treated as a literal name and
+ * stays flat — only schema-derived leaves emitted by the form-row builders are folded
+ * back into nested objects.
+ */
+export const buildDottedNestedRowPredicate = (schema) => {
+    const resolved = schema ? getResolvedRef(schema, mergeSiblingReferences) : undefined;
+    if (!resolved || !isObjectSchema(resolved) || !resolved.properties) {
+        return (_name, _value) => false;
+    }
+    const nestedTopKeys = new Set();
+    for (const [key, child] of Object.entries(resolved.properties)) {
+        const childResolved = child
+            ? getResolvedRef(child, mergeSiblingReferences)
+            : undefined;
+        if (childResolved && isObjectSchema(childResolved) && childResolved.properties) {
+            nestedTopKeys.add(key);
+        }
+    }
+    return (name, value) => {
+        if (value instanceof File || !name.includes('.')) {
+            return false;
+        }
+        const head = name.split('.', 1)[0];
+        return !!head && nestedTopKeys.has(head);
+    };
+};

package/dist/request-example/builder/helpers/get-example-from-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-example-from-schema.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/helpers/get-example-from-schema.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,YAAY,EAAqD,MAAM,uBAAuB,CAAA;AAG5G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAisB1E,KAAK,2BAA2B,GAAG;IACjC,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACvB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,qDAAqD;IACrD,8BAA8B,CAAC,EAAE,OAAO,CAAA;IACxC,0DAA0D;IAC1D,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9C,CAAA;AAeD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,YAAY,EACpB,UAAU,2BAA2B,EACrC,iEAOG,OAAO,CAAC;IACT,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,YAAY,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACrB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,qGAAqG;IACrG,YAAY,EAAE,YAAY,CAAA;CAC3B,CAAM,KACN,OAmMF,CAAA"}
+{"version":3,"file":"get-example-from-schema.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/helpers/get-example-from-schema.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,YAAY,EAAqD,MAAM,uBAAuB,CAAA;AAG5G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAitB1E,KAAK,2BAA2B,GAAG;IACjC,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACvB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,qDAAqD;IACrD,8BAA8B,CAAC,EAAE,OAAO,CAAA;IACxC,0DAA0D;IAC1D,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9C,CAAA;AAeD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,YAAY,EACpB,UAAU,2BAA2B,EACrC,iEAOG,OAAO,CAAC;IACT,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,YAAY,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACrB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,qGAAqG;IACrG,YAAY,EAAE,YAAY,CAAA;CAC3B,CAAM,KACN,OAwMF,CAAA"}

package/dist/request-example/builder/helpers/get-example-from-schema.js

@@ -169,6 +169,14 @@ const shouldOmitProperty = (schema, parentSchema, propertyName, options) => {
  * Arrays are concatenated, objects are merged, otherwise the new value wins.
  */
 const mergeExamples = (baseValue, newValue) => {
+    // A null/undefined contribution (e.g. a constraint-only allOf member such as
+    // `not` or `if/then/else`, which produce no example) must not wipe what we have.
+    if (newValue === undefined || newValue === null) {
+        return baseValue;
+    }
+    if (baseValue === undefined || baseValue === null) {
+        return newValue;
+    }
     if (Array.isArray(baseValue) && Array.isArray(newValue)) {
         return [...baseValue, ...newValue];
     }
@@ -411,15 +419,23 @@ const handleObjectSchema = (schema, options, level, seen, cacheKey, schemaPath,
             }));
         }
     }
-    // allOf
+    // allOf — thread a choice-ordinal into schemaPath for each direct oneOf/anyOf
+    // member so multiple mutually-exclusive groups get distinct composition-selection
+    // keys that match the per-group pickers. Object members keep the parent path so
+    // their property-nested compositions still resolve by property name.
     else if (Array.isArray(schema.allOf) && schema.allOf.length > 0) {
         let merged = response;
+        let choiceIndex = 0;
         for (const item of schema.allOf) {
-            const ex = getExampleFromSchema(resolve.schema(item), options, {
+            const resolvedItem = resolve.schema(item);
+            const isChoiceMember = !!resolvedItem && (Array.isArray(resolvedItem.oneOf) || Array.isArray(resolvedItem.anyOf));
+            const memberSchemaPath = isChoiceMember ? [...schemaPath, String(choiceIndex++)] : schemaPath;
+            const ex = getExampleFromSchema(resolvedItem, options, {
                 level: level + 1,
                 parentSchema: schema,
                 seen,
                 dynamicScope: childScope,
+                schemaPath: memberSchemaPath,
             });
             merged = mergeExamples(merged, ex);
         }
@@ -726,11 +742,15 @@ export const getExampleFromSchema = (schema, options, { level = 0, parentSchema,
     if (Array.isArray(_schema.allOf) && _schema.allOf.length > 0) {
         let merged = undefined;
         const items = _schema.allOf;
+        let choiceIndex = 0;
         for (const item of items) {
+            const resolvedItem = resolve.schema(item);
+            const isChoiceMember = !!resolvedItem && (Array.isArray(resolvedItem.oneOf) || Array.isArray(resolvedItem.anyOf));
+            const memberSchemaPath = isChoiceMember ? [...schemaPath, String(choiceIndex++)] : schemaPath;
             const ex = getExampleFromSchema(item, options, {
                 level: level + 1,
                 parentSchema: _schema,
-                schemaPath,
+                schemaPath: memberSchemaPath,
                 seen,
                 dynamicScope: childScope,
             });
@@ -740,8 +760,9 @@ export const getExampleFromSchema = (schema, options, { level = 0, parentSchema,
             else if (merged && typeof merged === 'object' && ex && typeof ex === 'object') {
                 merged = mergeExamples(merged, ex);
             }
-            else if (ex !== undefined) {
-                // Prefer the latest defined primitive value
+            else if (ex !== undefined && ex !== null) {
+                // Prefer the latest defined primitive value (but a null contribution —
+                // e.g. a constraint-only `not`/`if-then-else` member — must not clobber).
                 merged = ex;
             }
         }

package/dist/request-example/builder/index.d.ts

@@ -1,5 +1,6 @@
 export { getExampleFromBody } from './body/get-request-body-example.js';
 export { getSelectedBodyContentType } from './body/get-selected-body-content-type.js';
+export { buildDottedNestedRowPredicate, coerceLeafValueToSchemaType, coerceUntypedValue, resolveLeafSchema, } from './body/schema-value-coercion.js';
 export { type SerializedFormProperty, serializeFormPropertyWithEncoding } from './body/serialize-form-property.js';
 export { BUILD_REQUEST_FAILED, type BuildRequestData, type BuildRequestFailureCode, type BuildRequestResult, type RequestPayload, buildRequest, resolveExecutableRequestUrl, } from './build-request.js';
 export { deSerializeParameter, deSerializeSchemaValue } from './header/de-serialize-parameter.js';
@@ -14,6 +15,7 @@ export { getServerVariables } from './helpers/get-server-variables.js';
 export type { RequestFactory } from './request-factory.js';
 export { requestFactory } from './request-factory.js';
 export { INVALID_REQUEST_FACTORY_URL, MISSING_REQUEST_SERVER_BASE, type ResolveRequestFactoryUrlError, type ResolveRequestFactoryUrlResult, resolveRequestFactoryUrl, } from './resolve-request-factory-url.js';
+export { isEncryptionSchemeType, isSaslSchemeType } from './security/broker-scheme-types.js';
 export { buildRequestSecurity } from './security/build-request-security.js';
-export type { ApiKeyObjectSecret, HttpObjectSecret, OAuth2ObjectSecret, OAuthFlowAuthorizationCodeSecret, OAuthFlowClientCredentialsSecret, OAuthFlowImplicitSecret, OAuthFlowPasswordSecret, OAuthFlowsObjectSecret, OpenIdConnectObjectSecret, SecuritySchemeObjectSecret, } from './security/secret-types.js';
+export type { ApiKeyObjectSecret, EncryptionObjectSecret, GssapiObjectSecret, HttpObjectSecret, OAuth2ObjectSecret, OAuthFlowAuthorizationCodeSecret, OAuthFlowClientCredentialsSecret, OAuthFlowImplicitSecret, OAuthFlowPasswordSecret, OAuthFlowsObjectSecret, OpenIdConnectObjectSecret, SaslObjectSecret, SecuritySchemeObjectSecret, X509ObjectSecret, } from './security/secret-types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/request-example/builder/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/request-example/builder/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAA;AAClF,OAAO,EAAE,KAAK,sBAAsB,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAA;AAC/G,OAAO,EACL,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AAC9F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,wBAAwB,GACzB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAA;AACxE,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,EAChC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/request-example/builder/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAA;AAClF,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,KAAK,sBAAsB,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAA;AAC/G,OAAO,EACL,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AAC9F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,wBAAwB,GACzB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAA;AACxE,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,EAChC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,yBAAyB,CAAA"}

package/dist/request-example/builder/index.js

@@ -1,5 +1,6 @@
 export { getExampleFromBody } from './body/get-request-body-example.js';
 export { getSelectedBodyContentType } from './body/get-selected-body-content-type.js';
+export { buildDottedNestedRowPredicate, coerceLeafValueToSchemaType, coerceUntypedValue, resolveLeafSchema, } from './body/schema-value-coercion.js';
 export { serializeFormPropertyWithEncoding } from './body/serialize-form-property.js';
 export { BUILD_REQUEST_FAILED, buildRequest, resolveExecutableRequestUrl, } from './build-request.js';
 export { deSerializeParameter, deSerializeSchemaValue } from './header/de-serialize-parameter.js';
@@ -13,4 +14,5 @@ export { getResolvedUrl } from './helpers/get-resolved-url.js';
 export { getServerVariables } from './helpers/get-server-variables.js';
 export { requestFactory } from './request-factory.js';
 export { INVALID_REQUEST_FACTORY_URL, MISSING_REQUEST_SERVER_BASE, resolveRequestFactoryUrl, } from './resolve-request-factory-url.js';
+export { isEncryptionSchemeType, isSaslSchemeType } from './security/broker-scheme-types.js';
 export { buildRequestSecurity } from './security/build-request-security.js';

package/dist/request-example/builder/security/broker-scheme-types.d.ts

@@ -0,0 +1,16 @@
+/**
+ * AsyncAPI broker security scheme type names, grouped by the credential shape they share.
+ *
+ * These sets are the single source of truth for the runtime type guards used both when extracting
+ * stored secrets and when rendering the credential inputs, so the two stay in sync.
+ */
+/** SASL-style broker schemes: all of them authenticate with a username + password pair. */
+declare const SASL_SCHEME_TYPES: readonly ["userPassword", "plain", "scramSha256", "scramSha512"];
+export type SaslSchemeType = (typeof SASL_SCHEME_TYPES)[number];
+export declare const isSaslSchemeType: (type: string | undefined) => type is SaslSchemeType;
+/** Encryption broker schemes: a single key value. */
+declare const ENCRYPTION_SCHEME_TYPES: readonly ["symmetricEncryption", "asymmetricEncryption"];
+export type EncryptionSchemeType = (typeof ENCRYPTION_SCHEME_TYPES)[number];
+export declare const isEncryptionSchemeType: (type: string | undefined) => type is EncryptionSchemeType;
+export {};
+//# sourceMappingURL=broker-scheme-types.d.ts.map

package/dist/request-example/builder/security/broker-scheme-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-scheme-types.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/security/broker-scheme-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2FAA2F;AAC3F,QAAA,MAAM,iBAAiB,kEAAmE,CAAA;AAE1F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,GAAG,SAAS,KAAG,IAAI,IAAI,cACO,CAAA;AAE3E,qDAAqD;AACrD,QAAA,MAAM,uBAAuB,0DAA2D,CAAA;AAExF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E,eAAO,MAAM,sBAAsB,GAAI,MAAM,MAAM,GAAG,SAAS,KAAG,IAAI,IAAI,oBACO,CAAA"}

package/dist/request-example/builder/security/broker-scheme-types.js

@@ -0,0 +1,12 @@
+/**
+ * AsyncAPI broker security scheme type names, grouped by the credential shape they share.
+ *
+ * These sets are the single source of truth for the runtime type guards used both when extracting
+ * stored secrets and when rendering the credential inputs, so the two stay in sync.
+ */
+/** SASL-style broker schemes: all of them authenticate with a username + password pair. */
+const SASL_SCHEME_TYPES = ['userPassword', 'plain', 'scramSha256', 'scramSha512'];
+export const isSaslSchemeType = (type) => Boolean(type) && SASL_SCHEME_TYPES.includes(type);
+/** Encryption broker schemes: a single key value. */
+const ENCRYPTION_SCHEME_TYPES = ['symmetricEncryption', 'asymmetricEncryption'];
+export const isEncryptionSchemeType = (type) => Boolean(type) && ENCRYPTION_SCHEME_TYPES.includes(type);

package/dist/request-example/builder/security/secret-types.d.ts

@@ -1,4 +1,5 @@
-import type { XScalarAuthUrl, XScalarCredentialsLocation, XScalarSecretClientId, XScalarSecretClientSecret, XScalarSecretHTTP, XScalarSecretRedirectUri, XScalarSecretRefreshToken, XScalarSecretToken, XScalarTokenUrl } from '../../../schemas/extensions/security/index.js';
+import type { EncryptionSchemeType, SaslSchemeType } from '../../../request-example/builder/security/broker-scheme-types.js';
+import type { XScalarAuthUrl, XScalarCredentialsLocation, XScalarSecretClientCertificate, XScalarSecretClientId, XScalarSecretClientSecret, XScalarSecretHTTP, XScalarSecretPrivateKey, XScalarSecretRedirectUri, XScalarSecretRefreshToken, XScalarSecretServiceName, XScalarSecretToken, XScalarTokenUrl } from '../../../schemas/extensions/security/index.js';
 import type { OAuthFlowAuthorizationCode, OAuthFlowClientCredentials, OAuthFlowImplicit, OAuthFlowPassword } from '../../../schemas/v3.1/strict/oauth-flow.js';
 import type { ApiKeyObject, HttpObject, OAuth2Object, OpenIdConnectObject } from '../../../schemas/v3.1/strict/security-scheme.js';
 type OAuthFlowCommonSecret = XScalarSecretClientId & XScalarSecretToken & XScalarSecretRefreshToken & XScalarAuthUrl & XScalarTokenUrl;
@@ -20,6 +21,22 @@ export type OAuth2ObjectSecret = Omit<OAuth2Object, 'flows'> & {
 export type OpenIdConnectObjectSecret = OpenIdConnectObject & {
     flows?: OAuthFlowsObjectSecret;
 };
-export type SecuritySchemeObjectSecret = ApiKeyObjectSecret | HttpObjectSecret | OpenIdConnectObjectSecret | OAuth2ObjectSecret;
+/**
+ * Base shape for AsyncAPI broker-only security schemes. These types live outside the strict
+ * OpenAPI `SecuritySchemeObject` union (they are AsyncAPI-only), so only the shared fields are modeled.
+ */
+type AsyncApiBrokerScheme<T extends string> = {
+    type: T;
+    description?: string;
+};
+/** SASL-style AsyncAPI broker schemes: authenticate with a username + password pair. */
+export type SaslObjectSecret = AsyncApiBrokerScheme<SaslSchemeType> & XScalarSecretHTTP;
+/** AsyncAPI X509 scheme: a client certificate + private key pair (PEM). */
+export type X509ObjectSecret = AsyncApiBrokerScheme<'X509'> & XScalarSecretClientCertificate & XScalarSecretPrivateKey;
+/** AsyncAPI encryption schemes: a single key value, stored in the shared token slot. */
+export type EncryptionObjectSecret = AsyncApiBrokerScheme<EncryptionSchemeType> & XScalarSecretToken;
+/** AsyncAPI GSSAPI (Kerberos) scheme: the service name the client authenticates against. */
+export type GssapiObjectSecret = AsyncApiBrokerScheme<'gssapi'> & XScalarSecretServiceName;
+export type SecuritySchemeObjectSecret = ApiKeyObjectSecret | HttpObjectSecret | OpenIdConnectObjectSecret | OAuth2ObjectSecret | SaslObjectSecret | X509ObjectSecret | EncryptionObjectSecret | GssapiObjectSecret;
 export {};
 //# sourceMappingURL=secret-types.d.ts.map

package/dist/request-example/builder/security/secret-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-types.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/security/secret-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,0BAA0B,EAC1B,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,eAAe,EAChB,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAExH,KAAK,qBAAqB,GAAG,qBAAqB,GAChD,kBAAkB,GAClB,yBAAyB,GACzB,cAAc,GACd,eAAe,CAAA;AAEjB,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,wBAAwB,CAAA;AAE1G,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GACrD,qBAAqB,GACrB,iBAAiB,GACjB,yBAAyB,GACzB,0BAA0B,CAAA;AAE5B,MAAM,MAAM,gCAAgC,GAAG,0BAA0B,GACvE,qBAAqB,GACrB,yBAAyB,GACzB,0BAA0B,CAAA;AAE5B,MAAM,MAAM,gCAAgC,GAAG,0BAA0B,GACvE,qBAAqB,GACrB,yBAAyB,GACzB,wBAAwB,GACxB,0BAA0B,CAAA;AAE5B,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,EAAE,uBAAuB,CAAA;IAClC,QAAQ,CAAC,EAAE,uBAAuB,CAAA;IAClC,iBAAiB,CAAC,EAAE,gCAAgC,CAAA;IACpD,iBAAiB,CAAC,EAAE,gCAAgC,CAAA;CACrD,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,kBAAkB,CAAA;AAClE,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;AAClF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,EAAE,sBAAsB,CAAA;CAAE,CAAA;AAChG,MAAM,MAAM,yBAAyB,GAAG,mBAAmB,GAAG;IAAE,KAAK,CAAC,EAAE,sBAAsB,CAAA;CAAE,CAAA;AAEhG,MAAM,MAAM,0BAA0B,GAClC,kBAAkB,GAClB,gBAAgB,GAChB,yBAAyB,GACzB,kBAAkB,CAAA"}
+{"version":3,"file":"secret-types.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/security/secret-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAA;AAClH,OAAO,KAAK,EACV,cAAc,EACd,0BAA0B,EAC1B,8BAA8B,EAC9B,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EAChB,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAExH,KAAK,qBAAqB,GAAG,qBAAqB,GAChD,kBAAkB,GAClB,yBAAyB,GACzB,cAAc,GACd,eAAe,CAAA;AAEjB,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,wBAAwB,CAAA;AAE1G,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GACrD,qBAAqB,GACrB,iBAAiB,GACjB,yBAAyB,GACzB,0BAA0B,CAAA;AAE5B,MAAM,MAAM,gCAAgC,GAAG,0BAA0B,GACvE,qBAAqB,GACrB,yBAAyB,GACzB,0BAA0B,CAAA;AAE5B,MAAM,MAAM,gCAAgC,GAAG,0BAA0B,GACvE,qBAAqB,GACrB,yBAAyB,GACzB,wBAAwB,GACxB,0BAA0B,CAAA;AAE5B,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,EAAE,uBAAuB,CAAA;IAClC,QAAQ,CAAC,EAAE,uBAAuB,CAAA;IAClC,iBAAiB,CAAC,EAAE,gCAAgC,CAAA;IACpD,iBAAiB,CAAC,EAAE,gCAAgC,CAAA;CACrD,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,kBAAkB,CAAA;AAClE,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;AAClF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,EAAE,sBAAsB,CAAA;CAAE,CAAA;AAChG,MAAM,MAAM,yBAAyB,GAAG,mBAAmB,GAAG;IAAE,KAAK,CAAC,EAAE,sBAAsB,CAAA;CAAE,CAAA;AAEhG;;;GAGG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,MAAM,IAAI;IAC5C,IAAI,EAAE,CAAC,CAAA;IACP,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,cAAc,CAAC,GAAG,iBAAiB,CAAA;AAEvF,2EAA2E;AAC3E,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,8BAA8B,GAAG,uBAAuB,CAAA;AAEtH,wFAAwF;AACxF,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,GAAG,kBAAkB,CAAA;AAEpG,4FAA4F;AAC5F,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,GAAG,wBAAwB,CAAA;AAE1F,MAAM,MAAM,0BAA0B,GAClC,kBAAkB,GAClB,gBAAgB,GAChB,yBAAyB,GACzB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,kBAAkB,CAAA"}

package/dist/request-example/context/security/extract-security-scheme-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extract-security-scheme-secrets.d.ts","sourceRoot":"","sources":["../../../../src/request-example/context/security/extract-security-scheme-secrets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,SAAS,EAA2C,MAAM,uCAAuC,CAAA;AAC/G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iDAAiD,CAAA;AAQlF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAA;AAExG,OAAO,KAAK,EAUV,0BAA0B,EAC3B,MAAM,iDAAiD,CAAA;AAExD,wGAAwG;AACxG,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,WAAW,CAAC,cAAc,CAAC,CAAA;AAyLjF,6DAA6D;AAC7D,eAAO,MAAM,4BAA4B,GAEvC,QAAQ,oBAAoB,GAAG,WAAW,CAAC,cAAc,CAAC,EAC1D,WAAW,SAAS,EACpB,MAAM,MAAM,EACZ,cAAc,MAAM,EACpB,oBAAoB,MAAM,KACzB,0BA4DF,CAAA"}
+{"version":3,"file":"extract-security-scheme-secrets.d.ts","sourceRoot":"","sources":["../../../../src/request-example/context/security/extract-security-scheme-secrets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EACV,SAAS,EAOV,MAAM,uCAAuC,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iDAAiD,CAAA;AAQlF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAA;AAGxG,OAAO,KAAK,EAaV,0BAA0B,EAE3B,MAAM,iDAAiD,CAAA;AAExD,wGAAwG;AACxG,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,WAAW,CAAC,cAAc,CAAC,CAAA;AAgMjF,6DAA6D;AAC7D,eAAO,MAAM,4BAA4B,GAEvC,QAAQ,oBAAoB,GAAG,WAAW,CAAC,cAAc,CAAC,EAC1D,WAAW,SAAS,EACpB,MAAM,MAAM,EACZ,cAAc,MAAM,EACpB,oBAAoB,MAAM,KACzB,0BA6HF,CAAA"}

package/dist/request-example/context/security/extract-security-scheme-secrets.js

@@ -1,5 +1,6 @@
 import { isObject } from '@scalar/helpers/object/is-object';
 import { objectEntries } from '@scalar/helpers/object/object-entries';
+import { isEncryptionSchemeType, isSaslSchemeType } from '../../../request-example/builder/security/broker-scheme-types.js';
 /**
  * Maps x-scalar-secret fields to their corresponding input field names.
  * This allows us to fall back to config values when auth store secrets are not available.
@@ -32,6 +33,11 @@ const mergeFlowSecrets = (properties, configSecrets, authStoreSecrets = {}, oaut
         : authStoreValue || configValue || configInputValue || '';
     return [property, value];
 }));
+/** Secret extensions are not part of the strict scheme types, so they are read the same way the OAuth flows read theirs */
+const documentSecret = (scheme, property) => {
+    const value = scheme[property];
+    return typeof value === 'string' ? value : '';
+};
 const extractRefreshTokenSecret = (authStoreSecrets = {}) => {
     const refreshToken = authStoreSecrets['x-scalar-secret-refresh-token'];
     if (typeof refreshToken === 'string') {
@@ -127,12 +133,19 @@ export const extractSecuritySchemeSecrets = (
 // Include the config fields
 scheme, authStore, name, documentSlug, oauth2RedirectUri) => {
     const secrets = authStore.getAuthSecrets(documentSlug, name);
+    // AsyncAPI broker schemes live outside the OpenAPI `SecuritySchemeObject` union, so their type
+    // (and any config credential fields) are read through this alias. Captured before the OpenAPI
+    // branches below, where `scheme` gets narrowed to `never` once all four OpenAPI types are handled.
+    const brokerScheme = scheme;
     // Handle API Key security schemes
     if (scheme.type === 'apiKey') {
         const storeSecrets = secrets?.type === 'apiKey' ? secrets : undefined;
         return {
             ...scheme,
-            'x-scalar-secret-token': storeSecrets?.['x-scalar-secret-token'] || scheme.value || '',
+            'x-scalar-secret-token': storeSecrets?.['x-scalar-secret-token'] ||
+                documentSecret(scheme, 'x-scalar-secret-token') ||
+                scheme.value ||
+                '',
         };
     }
     // Handle HTTP Auth security schemes (e.g., Basic, Bearer)
@@ -140,9 +153,18 @@ scheme, authStore, name, documentSlug, oauth2RedirectUri) => {
         const storeSecrets = secrets?.type === 'http' ? secrets : undefined;
         return {
             ...scheme,
-            'x-scalar-secret-token': storeSecrets?.['x-scalar-secret-token'] || scheme.token || '',
-            'x-scalar-secret-username': storeSecrets?.['x-scalar-secret-username'] || scheme.username || '',
-            'x-scalar-secret-password': storeSecrets?.['x-scalar-secret-password'] || scheme.password || '',
+            'x-scalar-secret-token': storeSecrets?.['x-scalar-secret-token'] ||
+                documentSecret(scheme, 'x-scalar-secret-token') ||
+                scheme.token ||
+                '',
+            'x-scalar-secret-username': storeSecrets?.['x-scalar-secret-username'] ||
+                documentSecret(scheme, 'x-scalar-secret-username') ||
+                scheme.username ||
+                '',
+            'x-scalar-secret-password': storeSecrets?.['x-scalar-secret-password'] ||
+                documentSecret(scheme, 'x-scalar-secret-password') ||
+                scheme.password ||
+                '',
         };
     }
     // Handle OAuth2 security schemes and all supported flows
@@ -173,5 +195,40 @@ scheme, authStore, name, documentSlug, oauth2RedirectUri) => {
             ...(objectEntries(extracted.flows).length ? { flows: extracted.flows } : {}),
         };
     }
+    // SASL-style schemes (userPassword, plain, scramSha256, scramSha512): username + password,
+    // with the same config fallbacks as HTTP basic.
+    if (isSaslSchemeType(brokerScheme.type)) {
+        const storeSecrets = secrets?.type === brokerScheme.type ? secrets : undefined;
+        return {
+            ...brokerScheme,
+            'x-scalar-secret-username': storeSecrets?.['x-scalar-secret-username'] || brokerScheme.username || '',
+            'x-scalar-secret-password': storeSecrets?.['x-scalar-secret-password'] || brokerScheme.password || '',
+        };
+    }
+    // X509: a client certificate + private key pair (PEM), stored in the auth store only.
+    if (brokerScheme.type === 'X509') {
+        const storeSecrets = secrets?.type === 'X509' ? secrets : undefined;
+        return {
+            ...brokerScheme,
+            'x-scalar-secret-client-certificate': storeSecrets?.['x-scalar-secret-client-certificate'] || '',
+            'x-scalar-secret-private-key': storeSecrets?.['x-scalar-secret-private-key'] || '',
+        };
+    }
+    // Encryption schemes (symmetricEncryption, asymmetricEncryption): a single key value in the token slot.
+    if (isEncryptionSchemeType(brokerScheme.type)) {
+        const storeSecrets = secrets?.type === brokerScheme.type ? secrets : undefined;
+        return {
+            ...brokerScheme,
+            'x-scalar-secret-token': storeSecrets?.['x-scalar-secret-token'] || brokerScheme.token || '',
+        };
+    }
+    // GSSAPI (Kerberos): the service name the client authenticates against.
+    if (brokerScheme.type === 'gssapi') {
+        const storeSecrets = secrets?.type === 'gssapi' ? secrets : undefined;
+        return {
+            ...brokerScheme,
+            'x-scalar-secret-service-name': storeSecrets?.['x-scalar-secret-service-name'] || '',
+        };
+    }
     return scheme;
 };

package/dist/request-example/index.d.ts

@@ -1,5 +1,5 @@
-export type { ApiKeyObjectSecret, BuildRequestData, BuildRequestFailureCode, BuildRequestResult, HttpObjectSecret, OAuth2ObjectSecret, OAuthFlowAuthorizationCodeSecret, OAuthFlowClientCredentialsSecret, OAuthFlowImplicitSecret, OAuthFlowPasswordSecret, OAuthFlowsObjectSecret, OpenIdConnectObjectSecret, RequestPayload, ResolveRequestFactoryUrlError, ResolveRequestFactoryUrlResult, SecuritySchemeObjectSecret, } from './builder/index.js';
-export { BUILD_REQUEST_FAILED, INVALID_REQUEST_FACTORY_URL, MISSING_REQUEST_SERVER_BASE, type RequestFactory, type SerializedFormProperty, buildRequest, buildRequestSecurity, deSerializeParameter, deSerializeSchemaValue, filterGlobalCookie, getEnvironmentVariables, getExample, getExampleFromBody, getExampleFromSchema, getResolvedUrl, getSelectedBodyContentType, getServerVariables, isParamDisabled, requestFactory, resolveExecutableRequestUrl, resolveRequestFactoryUrl, serializeContentValue, serializeDeepObjectStyle, serializeFormPropertyWithEncoding, serializeFormStyle, serializeFormStyleForCookies, serializePipeDelimitedStyle, serializeSimpleStyle, serializeSpaceDelimitedStyle, } from './builder/index.js';
+export type { ApiKeyObjectSecret, BuildRequestData, BuildRequestFailureCode, BuildRequestResult, EncryptionObjectSecret, GssapiObjectSecret, HttpObjectSecret, OAuth2ObjectSecret, OAuthFlowAuthorizationCodeSecret, OAuthFlowClientCredentialsSecret, OAuthFlowImplicitSecret, OAuthFlowPasswordSecret, OAuthFlowsObjectSecret, OpenIdConnectObjectSecret, RequestPayload, ResolveRequestFactoryUrlError, ResolveRequestFactoryUrlResult, SaslObjectSecret, SecuritySchemeObjectSecret, X509ObjectSecret, } from './builder/index.js';
+export { BUILD_REQUEST_FAILED, INVALID_REQUEST_FACTORY_URL, MISSING_REQUEST_SERVER_BASE, type RequestFactory, type SerializedFormProperty, buildDottedNestedRowPredicate, buildRequest, buildRequestSecurity, coerceLeafValueToSchemaType, coerceUntypedValue, deSerializeParameter, deSerializeSchemaValue, filterGlobalCookie, getEnvironmentVariables, getExample, getExampleFromBody, getExampleFromSchema, getResolvedUrl, getSelectedBodyContentType, getServerVariables, isEncryptionSchemeType, isParamDisabled, isSaslSchemeType, requestFactory, resolveExecutableRequestUrl, resolveLeafSchema, resolveRequestFactoryUrl, serializeContentValue, serializeDeepObjectStyle, serializeFormPropertyWithEncoding, serializeFormStyle, serializeFormStyleForCookies, serializePipeDelimitedStyle, serializeSimpleStyle, serializeSpaceDelimitedStyle, } from './builder/index.js';
 export type { MergedSecuritySchemes } from './context/index.js';
 export { type BuildRequestExampleContext, combineParams, filterDisabledDefaultHeaders, getActiveEnvironment, getActiveProxyUrl, getDefaultHeaders, getRequestExampleContext, getSecurityRequirements, getSecuritySchemes, getSelectedSecurity, getSelectedServer, getServers, isAuthOptional, mergeSecurity, restoreConventionalDefaultHeaderNames, restoreConventionalHeaderName, } from './context/index.js';
 export { CONTEXT_FUNCTION_NAMES, type ContextFunctionEntry, type ContextFunctionName, POPULAR_CONTEXT_FUNCTION_KEYS, contextFunctions, getContextFunctionComment, isContextFunctionName, } from './functions.js';

package/dist/request-example/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request-example/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,EAChC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,cAAc,EACd,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,2BAA2B,EAC3B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,iCAAiC,EACjC,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,WAAW,CAAA;AAClB,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EACL,KAAK,0BAA0B,EAC/B,aAAa,EACb,4BAA4B,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,aAAa,EACb,qCAAqC,EACrC,6BAA6B,GAC9B,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,6BAA6B,EAC7B,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAA;AACjE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request-example/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,EAChC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,cAAc,EACd,6BAA6B,EAC7B,8BAA8B,EAC9B,gBAAgB,EAChB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,6BAA6B,EAC7B,YAAY,EACZ,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,2BAA2B,EAC3B,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,iCAAiC,EACjC,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,WAAW,CAAA;AAClB,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACtD,OAAO,EACL,KAAK,0BAA0B,EAC/B,aAAa,EACb,4BAA4B,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,aAAa,EACb,qCAAqC,EACrC,6BAA6B,GAC9B,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,6BAA6B,EAC7B,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAA;AACjE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA"}