Greptile Summary

This PR introduces a ProjectPath security scheme to replace ProjectQuery across all generated API specs, signalling to the Appwrite SDK generator that the project ID should be injected as a URL path parameter (e.g. /oauth2/{project_id}/...) rather than a query string parameter.

• Specs.php: ProjectQuery is renamed to ProjectPath in all three platform key maps (client, server, console) and gains an x-appwrite extension block with location: 'path' and param: 'project_id'.
• OpenAPI3.php / Swagger2.php: The repetitive individual if-blocks for demo value injection are replaced with a single foreach loop that uses array_merge to preserve existing x-appwrite fields (such as the new location/param keys on ProjectPath) before appending the demo value.

Confidence Score: 5/5

Safe to merge — changes are confined to spec generation metadata and carry no runtime risk to the core API.

The rename from ProjectQuery to ProjectPath is applied consistently across all three platform key maps and both spec format renderers. The array_merge order in OpenAPI3 and Swagger2 correctly places the new demo key after the existing x-appwrite fields, so location and param are never clobbered. No other source files reference ProjectQuery, confirming the removal is complete.

No files require special attention.

Important Files Changed

_{Reviews (2): Last reviewed commit: "Add project path auth scheme to specs" | Re-trigger Greptile}

✨ Benchmark results

Comparing 1.9.x (before) to codex/project-path-security (after).

Before

After

Delta

🔄 PHP-Retry Summary

Flaky tests detected across commits: