@scalar/workspace-store 0.68.1 → 0.68.2

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @scalar/workspace-store
 
+## 0.68.2
+
+### Patch Changes
+
+- [#10491](https://github.com/scalar/scalar/pull/10491): Use OpenAPI 3.2 tag categories to keep badges and audience labels out of navigation groups and display them on operations.
+- [#10489](https://github.com/scalar/scalar/pull/10489): Report invalid non-exploded structured cookies in OpenAPI 3.2 documents and prevent invalid request and code sample generation. Recommend `style: cookie` with `explode: true`.
+- [#10480](https://github.com/scalar/scalar/pull/10480): Resolve structural allOf object fields and annotation-only wrappers and selected oneOf/anyOf variants in form body fields, preserving descriptions, nested inputs, and multipart value types when switching variants.
+- [#10487](https://github.com/scalar/scalar/pull/10487): Honor OpenAPI 3.2 allowReserved for path parameters while escaping forbidden path characters and preserving the encoded path in Ruby code examples.
+- [#10488](https://github.com/scalar/scalar/pull/10488): Resolve OpenAPI 3.2 security requirements by URI, including relative references based on the document URI, while preserving named schemes and authored exports.
+
 ## 0.68.1
 
 ### Patch Changes

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,2BAA2B,CAAA;AAErE,OAAO,EAAE,KAAK,UAAU,EAAe,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAQ7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAI5C,OAAO,EAAE,KAAK,SAAS,EAAmB,MAAM,iBAAiB,CAAA;AACjE,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,oBAAoB,CAAA;AAM1E,OAAO,EAAE,KAAK,uBAAuB,EAAiC,MAAM,6BAA6B,CAAA;AASzG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AAc5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAKrE,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EACV,sBAAsB,EACtB,SAAS,EACT,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAA6B,MAAM,oBAAoB,CAAA;AAgBpF;;;GAGG;AACH,KAAK,0BAA0B,GAAG;IAChC,wEAAwE;IACxE,IAAI,CAAC,EAAE,qBAAqB,CAAA;IAC5B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,iCAAiC;IACjC,SAAS,CAAC,EAAE,WAAW,CAAC,eAAe,CAAC,CAAA;IACxC,wIAAwI;IACxI,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC5F,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,0BAA0B,CAAA;AAE9B;;;GAGG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,0BAA0B,CAAA;AAE9B,iGAAiG;AACjG,MAAM,MAAM,SAAS,GAAG;IACtB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,GAAG,0BAA0B,CAAA;AAE9B;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAA;AAsEjE;;;GAGG;AACH,KAAK,cAAc,GAAG;IACpB,gFAAgF;IAChF,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAA;IACvC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;IAC3B,8FAA8F;IAC9F,UAAU,CAAC,EAAE,YAAY,CAAA;IACzB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,mFAAmF;IACnF,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,KAAK,uBAAuB,CAAA;IAEpE;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,mBAAmB,EAC9D,GAAG,EAAE,CAAC,EACN,KAAK,EAAE,CAAC,aAAa,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAC9C,IAAI,CAAA;IACP;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACnD,IAAI,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EAC9B,GAAG,EAAE,CAAC,EACN,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAA;IACV;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnG;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C;;;;;;;;;;;;;;;;;;OAkBG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IACnG;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IACnF;;;;;OAKG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAC5E;;;;;;;OAOG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACzE;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC7E;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD;;;;;OAKG;IACH,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAA;IAC/C;;;;;;;;;;;;;;;;;OAiBG;IACH,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,6BAA6B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAA;IAC5D;;;;;;;;;OASG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C;;;;;;;;;;OAUG;IACH,eAAe,IAAI,iBAAiB,CAAA;IACpC;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC7C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gCAAgC,CAAC,aAAa,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3F;;;;;;;;;;;;;;;;;;;OAmBG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CACtD;QACE,EAAE,EAAE,KAAK,CAAA;QACT,IAAI,EAAE,iBAAiB,GAAG,cAAc,GAAG,qBAAqB,CAAA;QAChE,OAAO,EAAE,MAAM,CAAA;KAChB,GACD;QACE,EAAE,EAAE,IAAI,CAAA;QACR,OAAO,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAA;QAC1C,SAAS,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,CAAA;QAChD,YAAY,EAAE,CACZ,iBAAiB,EACb;YACE,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAA;SACzC,GACD;YACE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAC1C,KACF,OAAO,CAAC,IAAI,CAAC,CAAA;KACnB,CACJ,CAAA;CACF,CAAA;AAyDD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAAI,iBAAiB,cAAc,KAAG,cAmvCtE,CAAA;AAGD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,2BAA2B,CAAA;AAErE,OAAO,EAAE,KAAK,UAAU,EAAe,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAQ7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAI5C,OAAO,EAAE,KAAK,SAAS,EAAmB,MAAM,iBAAiB,CAAA;AACjE,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,oBAAoB,CAAA;AAM1E,OAAO,EAAE,KAAK,uBAAuB,EAAiC,MAAM,6BAA6B,CAAA;AAUzG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AAc5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAKrE,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EACV,sBAAsB,EACtB,SAAS,EACT,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAA6B,MAAM,oBAAoB,CAAA;AAgBpF;;;GAGG;AACH,KAAK,0BAA0B,GAAG;IAChC,wEAAwE;IACxE,IAAI,CAAC,EAAE,qBAAqB,CAAA;IAC5B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,iCAAiC;IACjC,SAAS,CAAC,EAAE,WAAW,CAAC,eAAe,CAAC,CAAA;IACxC,wIAAwI;IACxI,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC5F,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,0BAA0B,CAAA;AAE9B;;;GAGG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,0BAA0B,CAAA;AAE9B,iGAAiG;AACjG,MAAM,MAAM,SAAS,GAAG;IACtB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,GAAG,0BAA0B,CAAA;AAE9B;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAA;AAsEjE;;;GAGG;AACH,KAAK,cAAc,GAAG;IACpB,gFAAgF;IAChF,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAA;IACvC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;IAC3B,8FAA8F;IAC9F,UAAU,CAAC,EAAE,YAAY,CAAA;IACzB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,mFAAmF;IACnF,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,KAAK,uBAAuB,CAAA;IAEpE;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,mBAAmB,EAC9D,GAAG,EAAE,CAAC,EACN,KAAK,EAAE,CAAC,aAAa,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAC9C,IAAI,CAAA;IACP;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACnD,IAAI,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EAC9B,GAAG,EAAE,CAAC,EACN,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAA;IACV;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnG;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C;;;;;;;;;;;;;;;;;;OAkBG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IACnG;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IACnF;;;;;OAKG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAC5E;;;;;;;OAOG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACzE;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC7E;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD;;;;;OAKG;IACH,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAA;IAC/C;;;;;;;;;;;;;;;;;OAiBG;IACH,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,6BAA6B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAA;IAC5D;;;;;;;;;OASG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C;;;;;;;;;;OAUG;IACH,eAAe,IAAI,iBAAiB,CAAA;IACpC;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC7C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gCAAgC,CAAC,aAAa,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3F;;;;;;;;;;;;;;;;;;;OAmBG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CACtD;QACE,EAAE,EAAE,KAAK,CAAA;QACT,IAAI,EAAE,iBAAiB,GAAG,cAAc,GAAG,qBAAqB,CAAA;QAChE,OAAO,EAAE,MAAM,CAAA;KAChB,GACD;QACE,EAAE,EAAE,IAAI,CAAA;QACR,OAAO,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAA;QAC1C,SAAS,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,CAAA;QAChD,YAAY,EAAE,CACZ,iBAAiB,EACb;YACE,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAA;SACzC,GACD;YACE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAC1C,KACF,OAAO,CAAC,IAAI,CAAC,CAAA;KACnB,CACJ,CAAA;CACF,CAAA;AAyDD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAAI,iBAAiB,cAAc,KAAG,cA0vCtE,CAAA;AAGD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA"}

package/dist/client.js

@@ -28,6 +28,7 @@ import { getResolvedRef } from './helpers/get-resolved-ref.js';
 import { mergeObjects } from './helpers/merge-object.js';
 import { normalizeBooleanSchemas } from './helpers/normalize-boolean-schemas.js';
 import { createOverridesProxy } from './helpers/overrides-proxy.js';
+import { resolveSecurityRequirements, restoreSecurityRequirements } from './helpers/resolve-security-requirements.js';
 import { unpackProxyObject } from './helpers/unpack-proxy.js';
 import { createNavigation, traverseAsyncApiDocument } from './navigation/index.js';
 import { externalValueResolver, loadingStatus, normalizeAuthSchemes, normalizeRefs, openApiDocument, refsEverywhere, removeExtraScalarKeys, resolveOpenApiDocument, restoreOriginalRefs, syncPathParameters, } from './plugins/bundler/index.js';
@@ -579,6 +580,7 @@ export const createWorkspaceStore = (workspaceProps) => {
                 urlMap: true,
                 origin: input.documentSource, // use the document origin (if provided) as the base URL for resolution
             }));
+            await resolveSecurityRequirements(getRaw(strictDocument), { origin: input.documentSource, loaders });
             // We coerce the values only when the document is not preprocessed by the server-side-store
             const coerced = withMeasurementSync('coerceValue', () => coerce(openapiSchema, normalizeBooleanSchemas(deepClone(strictDocument))));
             withMeasurementSync('mergeObjects', () => mergeObjects(strictDocument, coerced));
@@ -696,6 +698,9 @@ export const createWorkspaceStore = (workspaceProps) => {
      * @returns The editable document object, or null if not found.
      */
     const getEditableDocument = async (documentName) => {
+        if (!Object.hasOwn(workspace.documents, documentName))
+            return null;
+        preventPollution(documentName, 'workspace document name');
         const rawDocument = unpackProxyObject(workspace.documents[documentName], { depth: 1 });
         if (!rawDocument) {
             // If the document does not exist, return null
@@ -704,7 +709,9 @@ export const createWorkspaceStore = (workspaceProps) => {
         // This is the shared cleanup boundary for editing and saving. Both JSON and YAML
         // exports read the cleaned saved baseline, so serializers need no marker filtering.
         // Reverse all external references and restore original $refs.
-        const original = (await bundle(deepClone(rawDocument), {
+        const authoredDocument = deepClone(rawDocument);
+        restoreSecurityRequirements(authoredDocument);
+        const original = (await bundle(authoredDocument, {
             plugins: [openApiDocument(), restoreOriginalRefs(), removeExtraScalarKeys()],
             treeShake: false,
             urlMap: true,

package/dist/helpers/chunk-index.d.ts

@@ -54,6 +54,8 @@ export type ChunkIndex = {
  * to the wrong chunk.
  */
 export declare const fillChunkRef: (template: string, values?: Record<string, string>) => string;
+/** Encodes a component name as a URI-safe JSON Pointer segment for SSR asset references. */
+export declare const encodeSsrComponentName: (value: string) => string;
 /**
  * Builds the reference templates for one document.
  *

package/dist/helpers/chunk-index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chunk-index.d.ts","sourceRoot":"","sources":["../../src/helpers/chunk-index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,yBAAyB,CAAA;AAKrD,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAA;AAExC,wFAAwF;AACxF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB;IAChB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,SAAS,CAAA;IACf;;;;;;OAMG;IACH,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAA;IAC3C,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC/C,CAAA;AAKD;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAAG,MAGlF,CAAA;AAwBH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAC5B,MAAM;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KACtF,iBAkBF,CAAA;AAED,8DAA8D;AAC9D,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAsC,CAAA;AAEhH;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAAI,oCAAoC,iBAAiB,KAAG,iBAGvF,CAAA;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,oCAK7B;IACD,IAAI,EAAE,SAAS,CAAA;IACf,IAAI,EAAE,iBAAiB,CAAA;IACvB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACnD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC/C,KAAG,UAYF,CAAA;AAUF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAU,OAAO,KAAG,OAqDpD,CAAA"}
+{"version":3,"file":"chunk-index.d.ts","sourceRoot":"","sources":["../../src/helpers/chunk-index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,yBAAyB,CAAA;AAKrD,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAA;AAExC,wFAAwF;AACxF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB;IAChB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,SAAS,CAAA;IACf;;;;;;OAMG;IACH,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAA;IAC3C,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC/C,CAAA;AAKD;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAAG,MAGlF,CAAA;AAKH,4FAA4F;AAC5F,eAAO,MAAM,sBAAsB,GAAI,OAAO,MAAM,KAAG,MAAsD,CAAA;AA0B7G;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAC5B,MAAM;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KACtF,iBAkBF,CAAA;AAED,8DAA8D;AAC9D,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAsC,CAAA;AAEhH;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAAI,oCAAoC,iBAAiB,KAAG,iBAGvF,CAAA;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,oCAK7B;IACD,IAAI,EAAE,SAAS,CAAA;IACf,IAAI,EAAE,iBAAiB,CAAA;IACvB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACnD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC/C,KAAG,UAYF,CAAA;AAUF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAU,OAAO,KAAG,OAqDpD,CAAA"}

package/dist/helpers/chunk-index.js

@@ -24,6 +24,8 @@ const TEMPLATE_SLOT = /\{\{|\}\}|\{(\w+)\}/g;
 export const fillChunkRef = (template, values = {}) => template.replace(TEMPLATE_SLOT, (match, slot) => slot === undefined ? match.charAt(0) : (values[slot] ?? match));
 /** Escapes text inlined into a template verbatim, so its braces are not read back as slots. */
 const escapeTemplateLiteral = (text) => text.replaceAll('{', '{{').replaceAll('}', '}}');
+/** Encodes a component name as a URI-safe JSON Pointer segment for SSR asset references. */
+export const encodeSsrComponentName = (value) => encodeURIComponent(escapeJsonPointer(value));
 const identity = (value) => value;
 /**
  * How each template slot is spelled, per mode.
@@ -39,7 +41,12 @@ const identity = (value) => value;
  */
 const SLOT_ENCODERS = {
     static: { type: encodeChunkName, name: encodeChunkName, path: encodeChunkName, method: identity },
-    ssr: { type: identity, name: identity, path: escapeJsonPointer, method: identity },
+    ssr: {
+        type: identity,
+        name: encodeSsrComponentName,
+        path: escapeJsonPointer,
+        method: identity,
+    },
 };
 /**
  * Builds the reference templates for one document.

package/dist/helpers/encode-path-parameter.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Encodes a path parameter, preserving only path-safe reserved characters and
+ * existing percent-encoded triples when OpenAPI reserved expansion is enabled.
+ * Slashes, query/fragment delimiters, and brackets must remain escaped.
+ */
+export declare const encodePathParameter: (value: string, allowReserved?: boolean) => string;
+/** Style metadata retained until environment substitution and path encoding. */
+export type ReservedPathParameter = {
+    /** Structured input retains array items and object entries for style delimiters. */
+    value: unknown;
+    /** Original preview value lets request hooks override path.variables. */
+    originalValue: string;
+    style: string;
+    explode: boolean;
+};
+/** Serializes OpenAPI reserved path expansion without exposing forbidden delimiters. */
+export declare const serializeReservedPathParameter: (name: string, parameter: Pick<ReservedPathParameter, "value" | "style" | "explode">, replace?: (value: string) => string) => string;
+/** Rejects dot segments that browser URL parsing would silently remove. */
+export declare const assertReservedPathUrl: (url: string) => void;
+//# sourceMappingURL=encode-path-parameter.d.ts.map

package/dist/helpers/encode-path-parameter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode-path-parameter.d.ts","sourceRoot":"","sources":["../../src/helpers/encode-path-parameter.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,EAAE,uBAAqB,KAAG,MAS1E,CAAA;AAED,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAAG;IAClC,oFAAoF;IACpF,KAAK,EAAE,OAAO,CAAA;IACd,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,wFAAwF;AACxF,eAAO,MAAM,8BAA8B,GACzC,MAAM,MAAM,EACZ,WAAW,IAAI,CAAC,qBAAqB,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC,EACrE,UAAS,CAAC,KAAK,EAAE,MAAM,KAAK,MAAyB,KACpD,MAgCF,CAAA;AAED,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,GAAI,KAAK,MAAM,KAAG,IAKnD,CAAA"}

package/dist/helpers/encode-path-parameter.js

@@ -0,0 +1,51 @@
+import { isObjectLike } from '@scalar/helpers/object/is-object';
+/**
+ * Encodes a path parameter, preserving only path-safe reserved characters and
+ * existing percent-encoded triples when OpenAPI reserved expansion is enabled.
+ * Slashes, query/fragment delimiters, and brackets must remain escaped.
+ */
+export const encodePathParameter = (value, allowReserved = false) => {
+    if (!allowReserved) {
+        return encodeURIComponent(value);
+    }
+    return value.replace(/%[0-9a-f]{2}|[\s\S]/giu, (character) => /^%[0-9a-f]{2}$/i.test(character) || /^[!$&'()*+,;=:@]$/.test(character)
+        ? character
+        : encodeURIComponent(character));
+};
+/** Serializes OpenAPI reserved path expansion without exposing forbidden delimiters. */
+export const serializeReservedPathParameter = (name, parameter, replace = (value) => value) => {
+    const { value, style, explode } = parameter;
+    const encode = (item) => encodePathParameter(replace(String(item)), true);
+    const entries = isObjectLike(value) && !Array.isArray(value) ? Object.entries(value) : undefined;
+    const array = Array.isArray(value) ? value : undefined;
+    if (style === 'matrix') {
+        if (entries && explode) {
+            return entries.map(([key, item]) => `;${encode(key)}=${encode(item)}`).join('');
+        }
+        if (array && explode) {
+            return array.map((item) => `;${encode(name)}=${encode(item)}`).join('');
+        }
+        const data = entries
+            ? entries.flatMap(([key, item]) => [encode(key), encode(item)]).join(',')
+            : array
+                ? array.map(encode).join(',')
+                : encode(value);
+        return `;${encode(name)}=${data}`;
+    }
+    const delimiter = style === 'label' && explode ? '.' : ',';
+    const data = entries
+        ? entries
+            .map(([key, item]) => explode ? `${encode(key)}=${encode(item)}` : `${encode(key)}${delimiter}${encode(item)}`)
+            .join(delimiter)
+        : array
+            ? array.map(encode).join(delimiter)
+            : encode(value);
+    return style === 'label' ? `.${data}` : data;
+};
+/** Rejects dot segments that browser URL parsing would silently remove. */
+export const assertReservedPathUrl = (url) => {
+    const path = url.split(/[?#]/, 1)[0] ?? '';
+    if (path.split('/').some((segment) => /^(?:\.|%2e){1,2}$/i.test(segment))) {
+        throw new URIError('Reserved path parameters cannot form dot segments because browsers normalize them.');
+    }
+};

package/dist/helpers/get-tag-kind.d.ts

@@ -0,0 +1,6 @@
+import type { OpenApiDocument, TagObject } from '../schemas/v3.2/strict/openapi-document.js';
+/** Categories with presentation behavior in Scalar. Custom kinds retain legacy navigation. */
+export type TagKind = 'nav' | 'badge' | 'audience';
+/** Only OpenAPI 3.2 gives tag kinds meaning; earlier documents keep their existing groups. */
+export declare const getTagKind: (document: Pick<OpenApiDocument, "openapi">, tag?: TagObject) => TagKind;
+//# sourceMappingURL=get-tag-kind.d.ts.map

package/dist/helpers/get-tag-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-tag-kind.d.ts","sourceRoot":"","sources":["../../src/helpers/get-tag-kind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAA;AAExF,8FAA8F;AAC9F,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,UAAU,CAAA;AAElD,8FAA8F;AAC9F,eAAO,MAAM,UAAU,GAAI,UAAU,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAAE,MAAM,SAAS,KAAG,OAKxF,CAAA"}

package/dist/helpers/get-tag-kind.js

@@ -0,0 +1,7 @@
+/** Only OpenAPI 3.2 gives tag kinds meaning; earlier documents keep their existing groups. */
+export const getTagKind = (document, tag) => {
+    if (document.openapi.startsWith('3.2.') && (tag?.kind === 'badge' || tag?.kind === 'audience')) {
+        return tag.kind;
+    }
+    return 'nav';
+};

package/dist/helpers/resolve-form-schema.d.ts

@@ -0,0 +1,9 @@
+import type { SchemaObject } from '../schemas/v3.2/strict/openapi-document.js';
+import type { MaybeRefSchemaObject } from '../schemas/v3.2/strict/schema.js';
+/**
+ * Expose the selected request-body shape to form editors and serializers without changing the
+ * API description. Use the example generator's branch selection so field types match its values.
+ * Unselected alternatives remain on the view for validation, but do not contribute form fields.
+ */
+export declare const resolveFormSchema: (schema: MaybeRefSchemaObject | undefined, compositionSelection?: Record<string, number>) => SchemaObject | undefined;
+//# sourceMappingURL=resolve-form-schema.d.ts.map

package/dist/helpers/resolve-form-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-form-schema.d.ts","sourceRoot":"","sources":["../../src/helpers/resolve-form-schema.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AAMxE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAC5B,QAAQ,oBAAoB,GAAG,SAAS,EACxC,uBAAuB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC5C,YAAY,GAAG,SAyJjB,CAAA"}

package/dist/helpers/resolve-form-schema.js

@@ -0,0 +1,143 @@
+import { objectEntries } from '@scalar/helpers/object/object-entries';
+import { selectExampleComposition } from '../request-example/builder/helpers/get-example-from-schema.js';
+import { resolve } from '../resolve.js';
+import { isNumberSchema, isObjectSchema } from '../schemas/v3.2/strict/type-guards.js';
+import { getSchemaAnnotations, resolveSchemaWithAnnotations } from './resolve-schema-with-annotations.js';
+import { unpackProxyShallow } from './unpack-proxy.js';
+/**
+ * Expose the selected request-body shape to form editors and serializers without changing the
+ * API description. Use the example generator's branch selection so field types match its values.
+ * Unselected alternatives remain on the view for validation, but do not contribute form fields.
+ */
+export const resolveFormSchema = (schema, compositionSelection) => {
+    const ancestors = new Set();
+    const visit = (input, path, selection) => {
+        const source = resolve.schema(input);
+        const resolved = resolveSchemaWithAnnotations(input);
+        if (!source || !resolved || !input) {
+            return resolved;
+        }
+        const identity = unpackProxyShallow(input);
+        // Recursive properties remain opaque leaves instead of expanding an infinite form.
+        if (ancestors.has(identity)) {
+            return isObjectSchema(resolved) ? { ...resolved, properties: undefined } : resolved;
+        }
+        ancestors.add(identity);
+        try {
+            if (source.allOf?.length) {
+                let choiceIndex = 0;
+                const members = source.allOf.map((member) => {
+                    const memberSchema = resolve.schema(member);
+                    const isChoice = Boolean(memberSchema?.oneOf || memberSchema?.anyOf);
+                    return visit(member, isChoice ? [...path, String(choiceIndex++)] : path, selection) ?? member;
+                });
+                if (!resolved.allOf) {
+                    return resolveSchemaWithAnnotations({ ...source, allOf: members });
+                }
+                const { allOf: _allOf, ...siblings } = source;
+                const parts = [visit(siblings, path, selection), ...members].filter((member) => member !== undefined);
+                const typed = parts.filter((member) => 'type' in member && member.type !== undefined);
+                const first = typed[0];
+                if (!first || !('type' in first) || Array.isArray(first.type)) {
+                    return resolved;
+                }
+                const type = typed.some((member) => 'type' in member && member.type === 'integer') &&
+                    (first.type === 'integer' || first.type === 'number')
+                    ? 'integer'
+                    : first.type;
+                // Incompatible intersections have no single input type. Keep them as opaque leaves.
+                if (typed.some((member) => 'type' in member && member.type !== type && !(type === 'integer' && member.type === 'number'))) {
+                    return resolved;
+                }
+                const annotations = Object.assign({}, ...parts.map(getSchemaAnnotations));
+                const result = { ...first, ...annotations, ...siblings, type, allOf: source.allOf };
+                Reflect.deleteProperty(result, '__scalar_');
+                if (isObjectSchema(result)) {
+                    const properties = {};
+                    const required = new Set();
+                    for (const part of parts) {
+                        if ('required' in part) {
+                            for (const name of part.required ?? []) {
+                                required.add(name);
+                            }
+                        }
+                        if ('properties' in part) {
+                            for (const [name, child] of objectEntries(part.properties ?? {})) {
+                                const previous = properties[name];
+                                properties[name] = previous
+                                    ? (visit({ __scalar_: '', allOf: [previous, child] }, [...path, name], selection) ?? child)
+                                    : child;
+                            }
+                        }
+                    }
+                    result.properties = properties;
+                    result.required = [...required];
+                }
+                if (isNumberSchema(result)) {
+                    const minima = parts.flatMap((part) => 'minimum' in part && part.minimum !== undefined ? [part.minimum] : []);
+                    const maxima = parts.flatMap((part) => 'maximum' in part && part.maximum !== undefined ? [part.maximum] : []);
+                    if (minima.length) {
+                        result.minimum = Math.max(...minima);
+                    }
+                    if (maxima.length) {
+                        result.maximum = Math.min(...maxima);
+                    }
+                }
+                return result;
+            }
+            const properties = isObjectSchema(resolved) && resolved.properties
+                ? Object.fromEntries(objectEntries(resolved.properties).map(([key, child]) => [
+                    key,
+                    visit(child, [...path, key], selection) ?? child,
+                ]))
+                : undefined;
+            const base = properties ? { ...resolved, properties } : resolved;
+            const keyword = resolved.oneOf ? 'oneOf' : 'anyOf';
+            const candidate = selectExampleComposition(resolved, path, { compositionSelection: selection });
+            if (!candidate) {
+                return base;
+            }
+            const selectionKey = [...path, keyword].join('.');
+            const { [selectionKey]: _selection, ...remainingSelection } = selection ?? {};
+            const selected = visit(candidate, path, remainingSelection);
+            if (!selected) {
+                return base;
+            }
+            const result = { ...base, ...selected, [keyword]: resolved[keyword] };
+            if ('type' in result) {
+                Reflect.deleteProperty(result, '__scalar_');
+            }
+            if (isNumberSchema(result)) {
+                // Parent and branch bounds both apply; selecting a variant must not weaken validation.
+                if ('minimum' in base &&
+                    'minimum' in selected &&
+                    base.minimum !== undefined &&
+                    selected.minimum !== undefined) {
+                    result.minimum = Math.max(base.minimum, selected.minimum);
+                }
+                if ('maximum' in base &&
+                    'maximum' in selected &&
+                    base.maximum !== undefined &&
+                    selected.maximum !== undefined) {
+                    result.maximum = Math.min(base.maximum, selected.maximum);
+                }
+            }
+            if (resolved.description !== undefined) {
+                result.description = resolved.description;
+            }
+            if (isObjectSchema(result)) {
+                const baseProperties = 'properties' in base ? base.properties : undefined;
+                const selectedProperties = 'properties' in selected ? selected.properties : undefined;
+                const baseRequired = 'required' in base ? base.required : undefined;
+                const selectedRequired = 'required' in selected ? selected.required : undefined;
+                result.properties = { ...baseProperties, ...selectedProperties };
+                result.required = [...new Set([...(baseRequired ?? []), ...(selectedRequired ?? [])])];
+            }
+            return result;
+        }
+        finally {
+            ancestors.delete(identity);
+        }
+    };
+    return visit(schema, ['requestBody'], compositionSelection);
+};

package/dist/helpers/resolve-schema-with-annotations.d.ts

@@ -0,0 +1,11 @@
+import type { SchemaObject } from '../schemas/v3.2/strict/openapi-document.js';
+import type { MaybeRefSchemaObject } from '../schemas/v3.2/strict/schema.js';
+/** Extract annotation keywords without copying validation constraints into a form projection. */
+export declare const getSchemaAnnotations: (schema: SchemaObject) => Record<string, unknown>;
+/**
+ * Expose the value schema inside an annotation-only allOf wrapper for form editors and serializers.
+ * Multiple value schemas retain their composition, since combining their constraints requires more
+ * than spreading their keywords. The returned view does not mutate the API description.
+ */
+export declare const resolveSchemaWithAnnotations: (schema: MaybeRefSchemaObject | undefined) => SchemaObject | undefined;
+//# sourceMappingURL=resolve-schema-with-annotations.d.ts.map

package/dist/helpers/resolve-schema-with-annotations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-schema-with-annotations.d.ts","sourceRoot":"","sources":["../../src/helpers/resolve-schema-with-annotations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AAmBxE,iGAAiG;AACjG,eAAO,MAAM,oBAAoB,GAAI,QAAQ,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CACK,CAAA;AAEvF;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,GAAI,QAAQ,oBAAoB,GAAG,SAAS,KAAG,YAAY,GAAG,SAuCtG,CAAA"}

package/dist/helpers/resolve-schema-with-annotations.js

@@ -0,0 +1,57 @@
+import { resolve } from '../resolve.js';
+import { unpackProxyShallow } from './unpack-proxy.js';
+const annotationKeys = new Set([
+    'title',
+    'description',
+    'default',
+    'examples',
+    'example',
+    'deprecated',
+    'readOnly',
+    'writeOnly',
+    '$comment',
+    'externalDocs',
+    // TypeBox marks schemas without an explicit type; this does not constrain their value.
+    '__scalar_',
+]);
+/** Extract annotation keywords without copying validation constraints into a form projection. */
+export const getSchemaAnnotations = (schema) => Object.fromEntries(Object.entries(schema).filter(([key]) => annotationKeys.has(key)));
+/**
+ * Expose the value schema inside an annotation-only allOf wrapper for form editors and serializers.
+ * Multiple value schemas retain their composition, since combining their constraints requires more
+ * than spreading their keywords. The returned view does not mutate the API description.
+ */
+export const resolveSchemaWithAnnotations = (schema) => {
+    const seen = new Set();
+    const visit = (input) => {
+        const resolved = resolve.schema(input);
+        if (!resolved?.allOf?.length || !input) {
+            return resolved;
+        }
+        if (Object.keys(resolved).some((key) => key !== 'allOf' && key !== '$ref' && !annotationKeys.has(key))) {
+            return resolved;
+        }
+        const identity = unpackProxyShallow(input);
+        if (seen.has(identity)) {
+            return resolved;
+        }
+        seen.add(identity);
+        const members = resolved.allOf.map((member) => resolve.schema(member));
+        if (members.some((member) => !member)) {
+            return resolved;
+        }
+        const valueMembers = members.filter((member) => member && Object.keys(member).some((key) => !annotationKeys.has(key)));
+        const valueMember = valueMembers[0];
+        if (valueMembers.length !== 1 || !valueMember) {
+            return resolved;
+        }
+        const valueIndex = members.indexOf(valueMember);
+        const valueSchema = visit(resolved.allOf[valueIndex]);
+        const annotations = Object.assign({}, ...members.filter((member) => member !== valueMember && member !== undefined).map(getSchemaAnnotations));
+        const { allOf: _allOf, ...siblings } = resolved;
+        const result = { ...valueSchema, ...annotations, ...siblings };
+        Reflect.deleteProperty(result, '__scalar_');
+        return result;
+    };
+    return visit(schema);
+};

package/dist/helpers/resolve-security-requirements.d.ts

@@ -0,0 +1,15 @@
+import { type LoaderPlugin } from '@scalar/json-magic/bundle';
+type SecurityUriOptions = {
+    origin?: string;
+    loaders: LoaderPlugin[];
+};
+/**
+ * Makes URI requirements available to the existing name-based auth consumers.
+ * Aliases live only in the working document; export removes them and restores authored keys.
+ * Relative keys in referenced documents become absolute to keep distinct document bases apart.
+ */
+export declare const resolveSecurityRequirements: (document: Record<string, unknown>, { origin, loaders }: SecurityUriOptions) => Promise<void>;
+/** Remove runtime URI aliases while keeping edited scopes and authored requirement spellings. */
+export declare const restoreSecurityRequirements: (document: Record<string, unknown>) => void;
+export {};
+//# sourceMappingURL=resolve-security-requirements.d.ts.map

package/dist/helpers/resolve-security-requirements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-security-requirements.d.ts","sourceRoot":"","sources":["../../src/helpers/resolve-security-requirements.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,YAAY,EAAgC,MAAM,2BAA2B,CAAA;AAa3F,KAAK,kBAAkB,GAAG;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,YAAY,EAAE,CAAA;CACxB,CAAA;AAUD;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GACtC,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,qBAA2B,kBAAkB,KAC5C,OAAO,CAAC,IAAI,CA4Id,CAAA;AAED,iGAAiG;AACjG,eAAO,MAAM,2BAA2B,GAAI,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,IAsD/E,CAAA"}