@scalar/workspace-store 0.59.0 → 0.61.0

package/dist/plugins/bundler/index.js

@@ -5,6 +5,8 @@
  */
 import { HTTP_METHODS } from '@scalar/helpers/http/http-methods';
 import { isObject } from '@scalar/helpers/object/is-object';
+import { isSchemaPath } from '@scalar/helpers/openapi/is-schema-path';
+import { resolveReferencePath } from '@scalar/json-magic/bundle';
 import { isLocalRef } from '../../helpers/general.js';
 import { syncParametersForPathChange, } from '../../mutators/operation/helpers/sync-path-parameters.js';
 import { getResolvedRef } from '../../plugins/bundler/helpers.js';
@@ -49,15 +51,18 @@ export const externalValueResolver = () => {
             if (typeof externalValue !== 'string') {
                 return;
             }
-            const loader = context.loaders.find((it) => it.validate(externalValue));
+            // `externalValue` may be relative (for example `/examples/pet.json`). Resolve it against the
+            // origin of the document it lives in so it becomes an absolute URL a loader can fetch.
+            const resolvedValue = resolveReferencePath(context.origin, externalValue);
+            const loader = context.loaders.find((it) => it.validate(resolvedValue));
             // We can not process the external value
             if (!loader) {
                 return;
             }
-            if (!cache.has(externalValue)) {
-                cache.set(externalValue, loader.exec(externalValue));
+            if (!cache.has(resolvedValue)) {
+                cache.set(resolvedValue, loader.exec(resolvedValue));
             }
-            const result = await cache.get(externalValue);
+            const result = await cache.get(resolvedValue);
             // If fetch is successful, assign the data to the node's 'value' property
             if (result?.ok) {
                 node['value'] = result.data;
@@ -199,35 +204,28 @@ export const normalizeAuthSchemes = () => {
 };
 /**
  * Lifecycle plugin to normalize $ref nodes:
- * Ensures that for any non-schema object containing a $ref, only $ref,
+ * Ensures that for any OpenAPI Reference Object containing a $ref, only $ref,
  * summary, description, and $status properties are preserved.
  * This keeps $ref references clean and predictable for downstream consumers.
+ *
+ * Schema Objects are deliberately skipped: in JSON Schema 2020-12 a $ref may
+ * carry sibling keywords, so their siblings must not be stripped.
  */
 export const normalizeRefs = () => {
     return {
         type: 'lifecycle',
         onBeforeNodeProcess: (node, context) => {
-            const { path } = context;
-            // If the node is a $ref and we are not on the schema object, we need to normalize the $ref
-            if (typeof node['$ref'] === 'string' && !(path[0] === 'components' && path[1] === 'schemas')) {
-                // Remove any other properties from the node and only keep the '$ref', 'summary', 'description' and '$status'.
-                // The JSON Schema 2020-12 reference keywords are also kept: a schema-position `$ref` may carry a
-                // `$defs`/`$dynamicAnchor` binding as a sibling to specialize a generic template (the `Paginated<T>`
-                // pattern). Such a schema can appear inline anywhere a schema is allowed — for example a response's
-                // `content.<media>.schema` — not only under `components/schemas`. Dropping these siblings here would
-                // discard the item-type binding, leaving `$dynamicRef` to resolve to the template's empty fallback and
-                // rendering an empty array. See https://github.com/scalar/scalar/issues/9414.
-                const keepProperties = new Set([
-                    '$ref',
-                    'summary',
-                    'description',
-                    '$status',
-                    '$id',
-                    '$anchor',
-                    '$dynamicAnchor',
-                    '$dynamicRef',
-                    '$defs',
-                ]);
+            const { path, referencedFromPath } = context;
+            const isSchema = isSchemaPath(path) || isSchemaPath(referencedFromPath);
+            // Normalization only applies to OpenAPI Reference Objects, where a `$ref` may sit next to nothing but
+            // `summary` and `description`. Schema Objects are left untouched: in JSON Schema 2020-12 a `$ref` may
+            // legally carry sibling keywords — for example a `$defs`/`$dynamicAnchor` binding that specializes a
+            // generic template (the `Paginated<T>` pattern) — and such schemas appear inline, in reusable schemas,
+            // and in raw external schema documents. Stripping those siblings would discard the binding and leave
+            // `$dynamicRef` resolving to the template's empty fallback. See https://github.com/scalar/scalar/issues/9414.
+            if (typeof node['$ref'] === 'string' && !isSchema) {
+                // Remove any other properties from the node and only keep the '$ref', 'summary', 'description' and '$status'
+                const keepProperties = new Set(['$ref', 'summary', 'description', '$status']);
                 Object.keys(node).forEach((key) => {
                     if (!keepProperties.has(key)) {
                         delete node[key];

package/dist/request-example/builder/body/build-request-body.d.ts

@@ -1,10 +1,11 @@
-import type { RequestBodyObject } from '@scalar/workspace-store/schemas/v3.1/strict/request-body';
+import type { RequestBodyObject } from '@scalar/workspace-store/schemas/v3.2/strict/request-body';
 type FormData = {
     mode: 'formdata';
     value: ({
         type: 'text';
         key: string;
         value: string;
+        contentType?: string;
     } | {
         type: 'file';
         key: string;

package/dist/request-example/builder/body/build-request-body.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-request-body.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/body/build-request-body.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAA;AAOjG,KAAK,QAAQ,GAAG;IACd,IAAI,EAAE,UAAU,CAAA;IAChB,KAAK,EAAE,CACH;QACE,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,MAAM,CAAA;KACd,GACD;QACE,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;QACX,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,GACD;QACE,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;QACX,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,CACJ,EAAE,CAAA;CACJ,CAAA;AAED,KAAK,UAAU,GAAG;IAChB,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,MAAM,CAAA;KACd,EAAE,CAAA;CACJ,CAAA;AAED,KAAK,GAAG,GAAG;IACT,IAAI,EAAE,KAAK,CAAA;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,GAAG,CAAA;AAKrD;;GAEG;AACH,eAAO,MAAM,gBAAgB,GAC3B,aAAa,iBAAiB,GAAG,SAAS;AAC1C,qCAAqC;AACrC,oBAAuB;AACvB,sEAAsE;AACtE,kCAAkC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KACvD,WAAW,GAAG,IA2RhB,CAAA"}
+{"version":3,"file":"build-request-body.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/body/build-request-body.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAA;AASjG,KAAK,QAAQ,GAAG;IACd,IAAI,EAAE,UAAU,CAAA;IAChB,KAAK,EAAE,CACH;QACE,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,MAAM,CAAA;QACb,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,GACD;QACE,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;QACX,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,GACD;QACE,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;QACX,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,CACJ,EAAE,CAAA;CACJ,CAAA;AAwBD,KAAK,UAAU,GAAG;IAChB,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,MAAM,CAAA;KACd,EAAE,CAAA;CACJ,CAAA;AAED,KAAK,GAAG,GAAG;IACT,IAAI,EAAE,KAAK,CAAA;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,GAAG,CAAA;AAKrD;;GAEG;AACH,eAAO,MAAM,gBAAgB,GAC3B,aAAa,iBAAiB,GAAG,SAAS;AAC1C,qCAAqC;AACrC,oBAAuB;AACvB,sEAAsE;AACtE,kCAAkC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KACvD,WAAW,GAAG,IAuUhB,CAAA"}

package/dist/request-example/builder/body/build-request-body.js

@@ -3,10 +3,32 @@ import { isObject } from '@scalar/helpers/object/is-object';
 import { setValueAtPath } from '@scalar/helpers/object/set-value-at-path';
 import { getResolvedRef, mergeSiblingReferences } from '@scalar/workspace-store/helpers/get-resolved-ref';
 import { unpackProxyObject } from '@scalar/workspace-store/helpers/unpack-proxy';
+import { isObjectSchema } from '@scalar/workspace-store/schemas/v3.2/strict/type-guards';
 import { getExampleFromBody } from './get-request-body-example.js';
 import { getSelectedBodyContentType } from './get-selected-body-content-type.js';
 import { buildDottedNestedRowPredicate, coerceLeafValueToSchemaType, resolveLeafSchema } from './schema-value-coercion.js';
 import { serializeFormPropertyWithEncoding } from './serialize-form-property.js';
+import { serializeMultipartArray } from './serialize-multipart-array.js';
+/** Preserve per-item media types while keeping uploaded file bytes and names intact. */
+const toMultipartPart = (part) => {
+    if (part.value instanceof File) {
+        const file = part.value;
+        return {
+            type: 'file',
+            key: part.key,
+            value: part.contentType && part.contentType !== file.type
+                ? new File([file], file.name, { type: part.contentType, lastModified: file.lastModified })
+                : file,
+            contentType: part.contentType,
+        };
+    }
+    return {
+        type: 'text',
+        key: part.key,
+        value: part.value,
+        ...(part.contentType ? { contentType: part.contentType } : {}),
+    };
+};
 const getMultipartEncodingContentType = (requestBody, bodyContentType, fieldName) => requestBody.content[bodyContentType]?.encoding?.[fieldName]?.contentType;
 /**
  * Create the fetch request body
@@ -29,6 +51,22 @@ requestBodyCompositionSelection) => {
     if (!example) {
         return null;
     }
+    // Optional body properties default to "not sent", matching how optional parameters are
+    // dropped by `isParamDisabled`. We only know a property is optional when the body has an
+    // object schema that declares it outside `required`, so undeclared and required keys are
+    // always kept. This mirrors the unchecked-by-default checkbox in the Test Request panel.
+    // The array (edited) form path is unaffected: it carries its own per-row `isDisabled`.
+    const resolvedBodySchema = getResolvedRef(requestBody.content[bodyContentType]?.schema, mergeSiblingReferences);
+    const objectBodySchema = resolvedBodySchema && isObjectSchema(resolvedBodySchema) ? resolvedBodySchema : undefined;
+    // Composition (allOf/oneOf/anyOf) can mark a property required inside a subschema we do not
+    // merge here, so skip dropping entirely for composed schemas rather than risk removing an
+    // effectively-required field.
+    const isComposed = Boolean(objectBodySchema?.allOf || objectBodySchema?.oneOf || objectBodySchema?.anyOf);
+    const bodyProperties = objectBodySchema && !isComposed ? objectBodySchema.properties : undefined;
+    const requiredBodyProperties = new Set(objectBodySchema && !isComposed ? (objectBodySchema.required ?? []) : []);
+    // `Object.hasOwn` (not `in`) so an undeclared key named like an `Object.prototype` member
+    // (`toString`, `constructor`, …) is not misread as declared-and-optional and dropped.
+    const isOptionalBodyProperty = (key) => Boolean(bodyProperties && Object.hasOwn(bodyProperties, key) && !requiredBodyProperties.has(key));
     // Form data - array format (from UI editor)
     if ((bodyContentType === 'multipart/form-data' || bodyContentType === 'application/x-www-form-urlencoded') &&
         Array.isArray(example.value)) {
@@ -86,6 +124,16 @@ requestBodyCompositionSelection) => {
                 return;
             }
             const partEncoding = requestBody.content[bodyContentType]?.encoding?.[name];
+            if (result.mode === 'formdata') {
+                // Older saved form rows store JSON text. Only restore arrays declared by the schema.
+                const schema = resolveLeafSchema(multipartSchema, [name]);
+                const restored = coerceLeafValueToSchemaType(value, schema);
+                const arrayParts = serializeMultipartArray(name, Array.isArray(restored) ? restored : value, partEncoding);
+                if (arrayParts) {
+                    result.value.push(...arrayParts.map(toMultipartPart));
+                    return;
+                }
+            }
             // When the encoding sets style/explode, serialize objects/arrays RFC6570-style
             // (bracket or exploded notation) instead of JSON, so the wire request matches the
             // generated code snippet.
@@ -122,9 +170,9 @@ requestBodyCompositionSelection) => {
                 const serializedValue = typeof value === 'object' && value !== null ? JSON.stringify(unpackProxyObject(value)) : String(value);
                 if (result.mode === 'formdata' && partContentType) {
                     return result.value.push({
-                        type: 'blob',
+                        type: 'text',
                         key: name,
-                        value: new Blob([serializedValue], { type: partContentType }),
+                        value: serializedValue,
                         contentType: partContentType,
                     });
                 }
@@ -148,6 +196,10 @@ requestBodyCompositionSelection) => {
         };
         // Convert object properties to form fields
         for (const [key, value] of Object.entries(example.value)) {
+            // Optional properties are left out unless the user enabled them (edited form path).
+            if (isOptionalBodyProperty(key)) {
+                continue;
+            }
             if (key && value !== undefined && value !== null) {
                 const partEncoding = requestBody.content[bodyContentType]?.encoding?.[key];
                 // Encoding style/explode turns objects into bracket or exploded notation.
@@ -177,7 +229,16 @@ requestBodyCompositionSelection) => {
             if (!key || value === undefined || value === null) {
                 continue;
             }
+            // Optional properties are left out unless the user enabled them (edited form path).
+            if (isOptionalBodyProperty(key)) {
+                continue;
+            }
             const partEncoding = requestBody.content[bodyContentType]?.encoding?.[key];
+            const arrayParts = serializeMultipartArray(key, value, partEncoding);
+            if (arrayParts) {
+                result.value.push(...arrayParts.map(toMultipartPart));
+                continue;
+            }
             // Encoding style/explode turns objects into bracket or exploded notation instead of
             // the default single JSON part.
             const styleParts = serializeFormPropertyWithEncoding(key, value, partEncoding);
@@ -207,9 +268,9 @@ requestBodyCompositionSelection) => {
             const serializedValue = typeof value === 'object' && value !== null ? JSON.stringify(unpackProxyObject(value)) : String(value);
             if (partContentType) {
                 result.value.push({
-                    type: 'blob',
+                    type: 'text',
                     key,
-                    value: new Blob([serializedValue], { type: partContentType }),
+                    value: serializedValue,
                     contentType: partContentType,
                 });
                 continue;

package/dist/request-example/builder/body/encode-multipart-body.d.ts

@@ -0,0 +1,9 @@
+import type { RequestBody } from './build-request-body.js';
+/**
+ * Encode typed text fields without turning them into file uploads.
+ * Blob parts retain binary bytes and keep request construction synchronous.
+ */
+export declare const encodeMultipartBody: (parts: Extract<RequestBody, {
+    mode: "formdata";
+}>["value"]) => Blob;
+//# sourceMappingURL=encode-multipart-body.d.ts.map

package/dist/request-example/builder/body/encode-multipart-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode-multipart-body.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/body/encode-multipart-body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAUvD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC,OAAO,CAAC,KAAG,IAqBhG,CAAA"}

package/dist/request-example/builder/body/encode-multipart-body.js

@@ -0,0 +1,29 @@
+/** Escape disposition parameters using the same percent escapes as browser form submissions. */
+const escapeParameter = (value) => value
+    .replace(/\r\n|\r|\n/g, '\r\n')
+    .replace(/\r/g, '%0D')
+    .replace(/\n/g, '%0A')
+    .replace(/"/g, '%22');
+/**
+ * Encode typed text fields without turning them into file uploads.
+ * Blob parts retain binary bytes and keep request construction synchronous.
+ */
+export const encodeMultipartBody = (parts) => {
+    // getRandomValues also works on HTTP playgrounds, where randomUUID is unavailable.
+    const random = crypto.getRandomValues(new Uint8Array(24));
+    const boundary = `----scalar-${Array.from(random, (byte) => byte.toString(16).padStart(2, '0')).join('')}`;
+    const chunks = parts.flatMap((part) => {
+        const filename = part.type === 'file' ? part.value.name : part.type === 'blob' ? 'blob' : undefined;
+        const contentType = part.contentType ?? (part.type === 'text' ? undefined : part.value.type || 'application/octet-stream');
+        // A media type comes from the API description and must never inject part headers.
+        if (contentType && /[\r\n\0]/.test(contentType)) {
+            throw new Error('Invalid multipart content type');
+        }
+        const disposition = `Content-Disposition: form-data; name="${escapeParameter(part.key)}"${filename === undefined ? '' : `; filename="${escapeParameter(filename)}"`}`;
+        const headers = `--${boundary}\r\n${disposition}\r\n${contentType ? `Content-Type: ${contentType}\r\n` : ''}\r\n`;
+        // Match native FormData line endings for ordinary text; explicitly typed data keeps its bytes.
+        const value = part.type === 'text' && !part.contentType ? part.value.replace(/\r\n|\r|\n/g, '\r\n') : part.value;
+        return [headers, value, '\r\n'];
+    });
+    return new Blob([...chunks, `--${boundary}--\r\n`], { type: `multipart/form-data; boundary=${boundary}` });
+};

package/dist/request-example/builder/body/get-request-body-example.d.ts

@@ -1,4 +1,4 @@
-import type { ExampleObject, RequestBodyObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+import type { ExampleObject, RequestBodyObject } from '@scalar/workspace-store/schemas/v3.2/strict/openapi-document';
 /**
  * Generate a write-mode example directly from a request body's schema, ignoring any stored example.
  *

package/dist/request-example/builder/body/get-selected-body-content-type.d.ts

@@ -1,4 +1,4 @@
-import type { RequestBodyObject } from '@scalar/workspace-store/schemas/v3.1/strict/request-body';
+import type { RequestBodyObject } from '@scalar/workspace-store/schemas/v3.2/strict/request-body';
 /**
  * Returns the selected body content type for the given request body and exampleKey.
  * Priority:

package/dist/request-example/builder/body/schema-value-coercion.d.ts

@@ -1,4 +1,4 @@
-import type { SchemaObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+import type { SchemaObject } from '@scalar/workspace-store/schemas/v3.2/strict/openapi-document';
 /**
  * Walk an object schema along a dotted-row path and return the resolved leaf schema,
  * or undefined when any segment is not a declared object property.

package/dist/request-example/builder/body/schema-value-coercion.js

@@ -1,5 +1,5 @@
 import { getResolvedRef, mergeSiblingReferences } from '@scalar/workspace-store/helpers/get-resolved-ref';
-import { isObjectSchema } from '@scalar/workspace-store/schemas/v3.1/strict/type-guards';
+import { isObjectSchema } from '@scalar/workspace-store/schemas/v3.2/strict/type-guards';
 /** Normalize a schema's `type` (string | string[] | absent) into a plain string array. */
 const normalizeSchemaTypes = (schema) => {
     const type = 'type' in schema ? schema.type : undefined;

package/dist/request-example/builder/body/serialize-form-property.d.ts

@@ -1,4 +1,4 @@
-import type { EncodingObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+import type { EncodingObject } from '@scalar/workspace-store/schemas/v3.2/strict/openapi-document';
 /** A single serialized form field, ready to become a multipart part or a urlencoded pair. */
 export type SerializedFormProperty = {
     key: string;

package/dist/request-example/builder/body/serialize-multipart-array.d.ts

@@ -0,0 +1,16 @@
+import type { EncodingObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+/** A multipart array item shared by the request builder and code snippets. */
+export type MultipartArrayPart = {
+    key: string;
+    value: string | File;
+    contentType?: string;
+};
+/**
+ * Named multipart arrays produce one part per item, using the same property name.
+ * Encoding applies to each item, including its content type. Without an explicit
+ * style, nested arrays remain individual JSON values instead of expanding again.
+ *
+ * @see https://spec.openapis.org/oas/v3.2.0.html#encoding-by-name
+ */
+export declare const serializeMultipartArray: (key: string, value: unknown, encoding?: EncodingObject) => MultipartArrayPart[] | null;
+//# sourceMappingURL=serialize-multipart-array.d.ts.map

package/dist/request-example/builder/body/serialize-multipart-array.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize-multipart-array.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/body/serialize-multipart-array.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAA;AAIlG,8EAA8E;AAC9E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,GAClC,KAAK,MAAM,EACX,OAAO,OAAO,EACd,WAAW,cAAc,KACxB,kBAAkB,EAAE,GAAG,IA+BzB,CAAA"}

package/dist/request-example/builder/body/serialize-multipart-array.js

@@ -0,0 +1,37 @@
+import { parseMimeType } from '@scalar/helpers/http/mime-type';
+import { unpackProxyObject } from '@scalar/workspace-store/helpers/unpack-proxy';
+import { serializeFormPropertyWithEncoding } from './serialize-form-property.js';
+/**
+ * Named multipart arrays produce one part per item, using the same property name.
+ * Encoding applies to each item, including its content type. Without an explicit
+ * style, nested arrays remain individual JSON values instead of expanding again.
+ *
+ * @see https://spec.openapis.org/oas/v3.2.0.html#encoding-by-name
+ */
+export const serializeMultipartArray = (key, value, encoding) => {
+    if (!Array.isArray(value)) {
+        return null;
+    }
+    const hasStyle = encoding?.style !== undefined || encoding?.explode !== undefined || encoding?.allowReserved !== undefined;
+    const contentType = hasStyle ? undefined : encoding?.contentType;
+    return value.flatMap((item) => {
+        const parts = serializeFormPropertyWithEncoding(key, item, encoding);
+        if (parts) {
+            return parts;
+        }
+        if (item instanceof File) {
+            return [{ key, value: unpackProxyObject(item), ...(contentType ? { contentType } : {}) }];
+        }
+        const structured = typeof item === 'object' && item !== null;
+        const itemContentType = contentType ?? (!hasStyle && structured ? 'application/json' : undefined);
+        const subtype = itemContentType ? parseMimeType(itemContentType).subtype : undefined;
+        const isJson = subtype === 'json' || subtype?.endsWith('+json');
+        return [
+            {
+                key,
+                value: structured || isJson ? JSON.stringify(unpackProxyObject(item)) : String(item),
+                ...(itemContentType ? { contentType: itemContentType } : {}),
+            },
+        ];
+    });
+};

package/dist/request-example/builder/build-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-request.d.ts","sourceRoot":"","sources":["../../../src/request-example/builder/build-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,MAAM,EAAW,MAAM,8BAA8B,CAAA;AAOnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAA;AAC/E,OAAO,EACL,KAAK,6BAA6B,EAEnC,MAAM,uDAAuD,CAAA;AAK9D;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAuClD;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,GACtC,SAAS,cAAc,EACvB,cAAc,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACpC,iBAAiB;IAAE,6BAA6B,CAAC,EAAE,OAAO,CAAA;CAAE,KAC3D,MAyBF,CAAA;AAED;;;;;KAKK;AACL,MAAM,MAAM,gBAAgB,GAAG;IAC7B,kGAAkG;IAClG,cAAc,EAAE,cAAc,CAAA;IAC9B,2BAA2B;IAC3B,UAAU,EAAE,eAAe,CAAA;IAC3B,0DAA0D;IAC1D,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,wGAAwG;AACxG,eAAO,MAAM,oBAAoB,EAAG,sBAA+B,CAAA;AAEnE,MAAM,MAAM,uBAAuB,GAAG,6BAA6B,GAAG,OAAO,oBAAoB,CAAA;AAEjG,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAA;AAElF,eAAO,MAAM,YAAY,GACvB,SAAS,cAAc,EACvB,SAAS;IACP,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC;;;OAGG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAA;CACxC,KACA,kBAMF,CAAA"}
+{"version":3,"file":"build-request.d.ts","sourceRoot":"","sources":["../../../src/request-example/builder/build-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,MAAM,EAAW,MAAM,8BAA8B,CAAA;AAQnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAA;AAC/E,OAAO,EACL,KAAK,6BAA6B,EAEnC,MAAM,uDAAuD,CAAA;AAK9D;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAuClD;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,GACtC,SAAS,cAAc,EACvB,cAAc,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACpC,iBAAiB;IAAE,6BAA6B,CAAC,EAAE,OAAO,CAAA;CAAE,KAC3D,MAyBF,CAAA;AAED;;;;;KAKK;AACL,MAAM,MAAM,gBAAgB,GAAG;IAC7B,kGAAkG;IAClG,cAAc,EAAE,cAAc,CAAA;IAC9B,2BAA2B;IAC3B,UAAU,EAAE,eAAe,CAAA;IAC3B,0DAA0D;IAC1D,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,wGAAwG;AACxG,eAAO,MAAM,oBAAoB,EAAG,sBAA+B,CAAA;AAEnE,MAAM,MAAM,uBAAuB,GAAG,6BAA6B,GAAG,OAAO,oBAAoB,CAAA;AAEjG,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAA;AAElF,eAAO,MAAM,YAAY,GACvB,SAAS,cAAc,EACvB,SAAS;IACP,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC;;;OAGG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAA;CACxC,KACA,kBAMF,CAAA"}

package/dist/request-example/builder/build-request.js

@@ -4,6 +4,7 @@ import { err, ok } from '@scalar/helpers/types/result';
 import { safeRun } from '@scalar/helpers/types/safe-run';
 import { redirectToProxy, shouldUseProxy } from '@scalar/helpers/url/redirect-to-proxy';
 import { encode as encodeBase64 } from 'js-base64';
+import { encodeMultipartBody } from '../../request-example/builder/body/encode-multipart-body.js';
 import { buildRequestCookieHeader } from '../../request-example/builder/header/build-request-cookie-header.js';
 import { applyAllowReservedToUrl } from '../../request-example/builder/helpers/apply-allow-reserved-to-url.js';
 import { resolveRequestFactoryUrl, } from '../../request-example/builder/resolve-request-factory-url.js';
@@ -93,14 +94,18 @@ const buildRequestInner = (request, options) => {
             return request.body.value;
         }
         if (request.body?.mode === 'formdata') {
+            const parts = request.body.value.map((item) => ({
+                ...item,
+                key: replaceEnvVariables(item.key, replace),
+            }));
+            const resolvedParts = parts.map((item) => item.type === 'text' ? { ...item, value: replaceEnvVariables(item.value, replace) } : item);
+            if (request.body.value.some((item) => item.type === 'text' && item.contentType)) {
+                const encoded = encodeMultipartBody(resolvedParts);
+                headers.set('content-type', encoded.type);
+                return encoded;
+            }
             const form = new FormData();
-            request.body.value.forEach((item) => {
-                if (item.type === 'text') {
-                    form.append(replaceEnvVariables(item.key, replace), replaceEnvVariables(item.value, replace));
-                    return;
-                }
-                form.append(replaceEnvVariables(item.key, replace), item.value);
-            });
+            resolvedParts.forEach((item) => form.append(item.key, item.value));
             return form;
         }
         if (request.body?.mode === 'urlencoded') {

package/dist/request-example/builder/header/build-request-parameters.d.ts

@@ -1,5 +1,5 @@
 import { type XScalarCookie } from '@scalar/workspace-store/schemas/extensions/general/x-scalar-cookies';
-import type { ParameterObject, ReferenceType } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+import type { ParameterObject, ReferenceType } from '@scalar/workspace-store/schemas/v3.2/strict/openapi-document';
 /**
  * Converts the parameters into a set of headers, cookies and url params while
  * replacing environment variables and extracting example values. Also builds up a record of the path

package/dist/request-example/builder/header/build-request-parameters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-request-parameters.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/header/build-request-parameters.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,qEAAqE,CAAA;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAA;AAoBlH;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB;AACjC,qBAAqB;AACrB,aAAY,aAAa,CAAC,eAAe,CAAC,EAAO;AACjD,qCAAqC;AACrC,cAAa,MAAkB,KAC9B;IACD,OAAO,EAAE,aAAa,EAAE,CAAA;IACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC,4BAA4B,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACzC,SAAS,EAAE,eAAe,CAAA;CAwF3B,CAAA"}
+{"version":3,"file":"build-request-parameters.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/header/build-request-parameters.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,qEAAqE,CAAA;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAA;AAoBlH;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB;AACjC,qBAAqB;AACrB,aAAY,aAAa,CAAC,eAAe,CAAC,EAAO;AACjD,qCAAqC;AACrC,cAAa,MAAkB,KAC9B;IACD,OAAO,EAAE,aAAa,EAAE,CAAA;IACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC,4BAA4B,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACzC,SAAS,EAAE,eAAe,CAAA;CA6F3B,CAAA"}

package/dist/request-example/builder/header/build-request-parameters.js

@@ -38,6 +38,8 @@ exampleName = 'default') => {
     // Second pass: process all parameters
     for (const referencedParam of parameters) {
         const param = getResolvedRef(referencedParam);
+        if (!param)
+            continue;
         const example = getExample(param, exampleName, undefined);
         // Skip disabled examples
         if (!example || isParamDisabled(param, example)) {
@@ -80,7 +82,11 @@ exampleName = 'default') => {
                 result.pathVariables[paramName] = String(serialized);
                 break;
             }
-            case 'query': {
+            // The 3.2 `querystring` location represents the whole query string. Handle it like a
+            // regular query parameter so schema-based values still expand into the query string
+            // instead of being silently dropped.
+            case 'query':
+            case 'querystring': {
                 processQueryParameter(param, paramName, deSerializedValue, result.urlParams, result.allowReservedQueryParameters);
                 break;
             }

package/dist/request-example/builder/header/de-serialize-parameter.d.ts

@@ -1,4 +1,4 @@
-import type { ParameterObject, ParameterWithSchemaObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+import type { ParameterObject, ParameterWithSchemaObject } from '@scalar/workspace-store/schemas/v3.2/strict/openapi-document';
 /**
  * Coerces a parameter example from the UI (always a string from CodeInput) into a value
  * request building can serialize. Only structured types are parsed; primitives stay as strings.

package/dist/request-example/builder/header/de-serialize-parameter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"de-serialize-parameter.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/header/de-serialize-parameter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,eAAe,EACf,yBAAyB,EAC1B,MAAM,8DAA8D,CAAA;AAErE;;;GAGG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,OAAO,EAAE,OAAO,eAAe,QAS5E,CAAA;AA0DD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,GAAI,SAAS,OAAO,EAAE,QAAQ,yBAAyB,CAAC,QAAQ,CAAC,QAiBnG,CAAA"}
+{"version":3,"file":"de-serialize-parameter.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/header/de-serialize-parameter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,eAAe,EACf,yBAAyB,EAC1B,MAAM,8DAA8D,CAAA;AAErE;;;GAGG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,OAAO,EAAE,OAAO,eAAe,QAS5E,CAAA;AA0DD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,GAAI,SAAS,OAAO,EAAE,QAAQ,yBAAyB,CAAC,QAAQ,CAAC,QA6BnG,CAAA"}

package/dist/request-example/builder/header/de-serialize-parameter.js

@@ -1,3 +1,4 @@
+import { isObjectLike } from '@scalar/helpers/object/is-object';
 import { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref';
 /**
  * Coerces a parameter example from the UI (always a string from CodeInput) into a value
@@ -39,7 +40,7 @@ const structuredSchemaTypes = new Set(['array', 'object']);
  */
 const getStructuredType = (schema) => {
     const resolved = getResolvedRef(schema);
-    if (!resolved || typeof resolved !== 'object') {
+    if (!isObjectLike(resolved)) {
         return undefined;
     }
     if ('type' in resolved && resolved.type) {
@@ -80,13 +81,23 @@ export const deSerializeSchemaValue = (example, schema) => {
         const type = getStructuredType(schema);
         if (type) {
             try {
-                return JSON.parse(example);
+                const parsed = JSON.parse(example);
+                if (type !== 'array' || Array.isArray(parsed)) {
+                    return parsed;
+                }
+                // A bare numeric string is valid JSON too (e.g. a 20-digit reference number), but parsing it
+                // would turn it into a precision-losing JS number instead of the array the schema expects. A
+                // quoted string is a deliberate escape hatch, so keep it as a single-item array.
+                if (typeof parsed === 'string') {
+                    return [parsed];
+                }
             }
             catch {
-                // Arrays: users often type `foo,bar` instead of JSON — split to match default form+explode query style.
-                if (type === 'array') {
-                    return example.split(/,\s?/).filter((v) => v !== '');
-                }
+                // Not JSON at all: fall through to the comma-split handling below.
+            }
+            // Arrays: users often type `foo,bar` instead of JSON — split to match default form+explode query style.
+            if (type === 'array') {
+                return example.split(/,\s?/).filter((v) => v !== '');
             }
         }
     }

package/dist/request-example/builder/header/is-param-disabled.d.ts

@@ -1,4 +1,4 @@
-import type { ExampleObject, ParameterObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+import type { ExampleObject, ParameterObject } from '@scalar/workspace-store/schemas/v3.2/strict/openapi-document';
 /**
  * Determines if a parameter is disabled
  *

package/dist/request-example/builder/header/serialize-parameter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serialize-parameter.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/header/serialize-parameter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,EAAE,aAAa,MAAM,KAAG,MAa3E,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,EAAE,SAAS,OAAO,KAAG,OAqBvE,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,OAAO,EACd,SAAS,OAAO,KACf,OAAO,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CA4BjD,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,4BAA4B,GACvC,OAAO,OAAO,EACd,SAAS,OAAO,KACf,OAAO,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CA2CjD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GAAI,OAAO,OAAO,KAAG,MAe7D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,GAAI,OAAO,OAAO,KAAG,MAe5D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,GAAI,WAAW,MAAM,EAAE,OAAO,OAAO,KAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAoChH,CAAA"}
+{"version":3,"file":"serialize-parameter.d.ts","sourceRoot":"","sources":["../../../../src/request-example/builder/header/serialize-parameter.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,EAAE,aAAa,MAAM,KAAG,MAa3E,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,EAAE,SAAS,OAAO,KAAG,OAqBvE,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,OAAO,EACd,SAAS,OAAO,KACf,OAAO,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CA4BjD,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,4BAA4B,GACvC,OAAO,OAAO,EACd,SAAS,OAAO,KACf,OAAO,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CA2CjD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GAAI,OAAO,OAAO,KAAG,MAe7D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,GAAI,OAAO,OAAO,KAAG,MAa5D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,GAAI,WAAW,MAAM,EAAE,OAAO,OAAO,KAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAoChH,CAAA"}