feat: add --root-security option to support root-level OpenAPI security in generated schemas

Author: radist2s

packages/cli/src/bin.test.ts

@@ -117,6 +117,7 @@ describe('CLI binary help output', () => {
           --explicit-import-extensions [extension]                      All import statements will contain an explicit file extension. Ideal for projects using ECMAScript modules. (choices: ".js", ".ts", preset: ".js")
           --export-openapi-types [bool]                                 Add an export statement of the generated OpenAPI document types from the \`./index.ts' file. Useful for sharing types within your project. Default: true when --plugin openapi-typescript is used.
           --queryable-write-operations [bool]                           Enable generation of query hooks (useQuery, useSuspenseQuery, etc.) for writable HTTP methods like POST, PUT, PATCH. By default, only mutation hooks are generated for writable operations.
+          --root-security                                               Use root-level OpenAPI security as the default for operations without their own security. Operation-level security overrides it according to OpenAPI semantics.
           --create-api-client-fn <functionName> [options...]            Configure API client creation function. Allows specifying the function name, included services, and callbacks. Can be specified multiple times to generate several different API client functions from a single OpenAPI document. (default: null)
           --override-import-type <pathname overrides...>                Override import paths for specific types in generated files. This allows using custom type implementations instead of the default ones. Expected format: filepath originalModule:importTypeName:customImportPath
           --operation-parameters-type-wrapper <parameters wrappers...>  Configure ParametersWrapper types for specific operation patterns. Expected format: pattern type:TypeName import:ImportPath. Can be specified multiple times for different patterns.
@@ -214,6 +215,7 @@ describe('CLI binary help output', () => {
           --explicit-import-extensions [extension]                      All import statements will contain an explicit file extension. Ideal for projects using ECMAScript modules. (choices: ".js", ".ts", preset: ".js")
           --export-openapi-types [bool]                                 Add an export statement of the generated OpenAPI document types from the \`./index.ts' file. Useful for sharing types within your project. Default: true when --plugin openapi-typescript is used. (default: true)
           --queryable-write-operations [bool]                           Enable generation of query hooks (useQuery, useSuspenseQuery, etc.) for writable HTTP methods like POST, PUT, PATCH. By default, only mutation hooks are generated for writable operations.
+          --root-security                                               Use root-level OpenAPI security as the default for operations without their own security. Operation-level security overrides it according to OpenAPI semantics.
           --create-api-client-fn <functionName> [options...]            Configure API client creation function. Allows specifying the function name, included services, and callbacks. Can be specified multiple times to generate several different API client functions from a single OpenAPI document. (default: null)
           --override-import-type <pathname overrides...>                Override import paths for specific types in generated files. This allows using custom type implementations instead of the default ones. Expected format: filepath originalModule:importTypeName:customImportPath
           --operation-parameters-type-wrapper <parameters wrappers...>  Configure ParametersWrapper types for specific operation patterns. Expected format: pattern type:TypeName import:ImportPath. Can be specified multiple times for different patterns.

packages/openapi-plugin/src/lib/QraftCommand.ts

@@ -71,10 +71,6 @@ export class QraftCommand extends QraftCommandBase<OpenAPIQraftCommandActionOpti
         'Use OpenAPI Operation `endpoint[<index>]` path part (e.g.: "/0/1/2") or `tags` as the base name of the service.',
         'endpoint[0]'
       )
-      .option(
-        '--root-security',
-        'Use root-level OpenAPI security as the default for operations without their own security. Operation-level security overrides it according to OpenAPI semantics.'
-      )
       .addOption(createRedoclyOption());
   }
 

packages/tanstack-query-react-plugin/src/plugin.ts

@@ -39,6 +39,10 @@ export const plugin: QraftCommandPlugin = {
         'Enable generation of query hooks (useQuery, useSuspenseQuery, etc.) for writable HTTP methods like POST, PUT, PATCH. By default, only mutation hooks are generated for writable operations.',
         parseBooleanOption
       )
+      .option(
+        '--root-security',
+        'Use root-level OpenAPI security as the default for operations without their own security. Operation-level security overrides it according to OpenAPI semantics.'
+      )
       .addOption(
         (() => {
           const option = new Option(