@skmtc/core 0.29.0 → 0.30.1

package/esm/oas/securitySchemes/SecurityScheme.js

@@ -18,6 +18,12 @@ export class OasHttpSecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "scheme", {
             enumerable: true,
             configurable: true,
@@ -31,6 +37,7 @@ export class OasHttpSecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
         this.scheme = fields.scheme;
         this.bearerFormat = fields.bearerFormat;
     }
@@ -47,6 +54,7 @@ export class OasHttpSecurityScheme {
         return {
             type: 'http',
             description: this.description,
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
             scheme: this.scheme,
             bearerFormat: this.bearerFormat
         };
@@ -72,6 +80,12 @@ export class OasApiKeySecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "name", {
             enumerable: true,
             configurable: true,
@@ -85,6 +99,7 @@ export class OasApiKeySecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
         this.name = fields.name;
         this.location = fields.in;
     }
@@ -100,6 +115,7 @@ export class OasApiKeySecurityScheme {
     toJsonSchema() {
         return {
             type: 'apiKey',
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
             name: this.name,
             in: this.location
         };
@@ -125,6 +141,18 @@ export class OasOAuth2SecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "oauth2MetadataUrl", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "flows", {
             enumerable: true,
             configurable: true,
@@ -132,6 +160,8 @@ export class OasOAuth2SecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
+        this.oauth2MetadataUrl = fields.oauth2MetadataUrl;
         this.flows = fields.flows;
     }
     isRef() {
@@ -147,11 +177,18 @@ export class OasOAuth2SecurityScheme {
         return {
             type: 'oauth2',
             description: this.description,
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
+            ...(this.oauth2MetadataUrl === undefined
+                ? {}
+                : { oauth2MetadataUrl: this.oauth2MetadataUrl }),
             flows: {
                 authorizationCode: this.flows.authorizationCode,
                 clientCredentials: this.flows.clientCredentials,
                 implicit: this.flows.implicit,
-                password: this.flows.password
+                password: this.flows.password,
+                ...(this.flows.deviceAuthorization === undefined
+                    ? {}
+                    : { deviceAuthorization: this.flows.deviceAuthorization })
             }
         };
     }
@@ -176,6 +213,12 @@ export class OasOpenIdSecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "openIdConnectUrl", {
             enumerable: true,
             configurable: true,
@@ -183,6 +226,7 @@ export class OasOpenIdSecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
         this.openIdConnectUrl = fields.openIdConnectUrl;
     }
     isRef() {
@@ -198,6 +242,7 @@ export class OasOpenIdSecurityScheme {
         return {
             type: 'openIdConnect',
             description: this.description,
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
             openIdConnectUrl: this.openIdConnectUrl
         };
     }

package/esm/oas/securitySchemes/security-scheme-types.d.ts

@@ -10,6 +10,8 @@ export type OasHttpSecuritySchemeData = {
     type: 'http';
     /** Human-readable description of the security scheme */
     description?: string;
+    /** Whether the scheme is deprecated (OpenAPI 3.2) */
+    deprecated?: boolean;
     /** HTTP authorization scheme (e.g., 'basic', 'bearer') */
     scheme: string;
     /** Format hint for bearer tokens (e.g., 'JWT') */
@@ -35,6 +37,8 @@ export type OasApiKeySecuritySchemeData = {
     type: 'apiKey';
     /** Human-readable description of the security scheme */
     description?: string;
+    /** Whether the scheme is deprecated (OpenAPI 3.2) */
+    deprecated?: boolean;
     /** Name of the header, query parameter, or cookie */
     name: string;
     /** Location where the API key should be sent */
@@ -128,11 +132,25 @@ export declare const oasPasswordOAuth2FlowData: v.ObjectSchema<{
     readonly refreshUrl: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
     readonly scopes: v.RecordSchema<v.StringSchema<undefined>, v.StringSchema<undefined>, undefined>;
 }, undefined>;
+/**
+ * Data type for the OAuth2 device authorization flow (OpenAPI 3.2).
+ */
+export type OasDeviceAuthorizationOAuth2FlowData = {
+    /** URL for the OAuth2 device authorization endpoint */
+    deviceAuthorizationUrl: string;
+    /** URL for the OAuth2 token endpoint */
+    tokenUrl: string;
+    /** Optional URL for token refresh */
+    refreshUrl?: string | undefined;
+    /** Available scopes mapped to their descriptions */
+    scopes?: Record<string, string> | undefined;
+};
 export type OasOAuth2FlowsData = {
     authorizationCode?: OasAuthorizationCodeOAuth2FlowData;
     clientCredentials?: OasClientCredentialsOAuth2FlowData;
     implicit?: OasImplicitOAuth2FlowData;
     password?: OasPasswordOAuth2FlowData;
+    deviceAuthorization?: OasDeviceAuthorizationOAuth2FlowData;
 };
 export declare const oasOAuth2FlowsData: v.ObjectSchema<{
     readonly authorizationCode: v.OptionalSchema<v.ObjectSchema<{
@@ -160,6 +178,8 @@ export declare const oasOAuth2FlowsData: v.ObjectSchema<{
 export type OasOAuth2SecuritySchemeData = {
     type: 'oauth2';
     description?: string;
+    deprecated?: boolean;
+    oauth2MetadataUrl?: string;
     flows: OasOAuth2FlowsData;
 };
 export declare const oasOAuth2SecuritySchemeData: v.ObjectSchema<{
@@ -192,6 +212,7 @@ export declare const oasOAuth2SecuritySchemeData: v.ObjectSchema<{
 export type OasOpenIdSecuritySchemeData = {
     type: 'openIdConnect';
     description?: string;
+    deprecated?: boolean;
     openIdConnectUrl: string;
 };
 export declare const oasOpenIdSecuritySchemeData: v.ObjectSchema<{

package/esm/oas/server/Server.d.ts

@@ -10,6 +10,8 @@ import type { OasServerVariable } from '../serverVariable/ServerVariable.js';
  */
 export type ServerFields = {
     description?: string | undefined;
+    /** Name that identifies the server (OpenAPI 3.2) */
+    name?: string | undefined;
     url: string;
     variables?: Record<string, OasServerVariable> | undefined;
     extensionFields?: Record<string, unknown>;
@@ -54,6 +56,8 @@ export declare class OasServer {
     oasType: 'server';
     /** Human-readable description of the server */
     description: string | undefined;
+    /** Name that identifies the server (OpenAPI 3.2) */
+    name: string | undefined;
     /** Server URL with optional variable templating */
     url: string;
     /** Variable definitions for URL templating */
@@ -88,7 +92,9 @@ export declare class OasServer {
      * Converts this OAS server to an OpenAPI v3 JSON schema representation.
      *
      * @param _options - Conversion options (currently unused for server objects)
-     * @returns OpenAPI v3 server object with URL, description, and variables
+     * @returns OpenAPI v3 server object with URL, description, variables and, when set, name
      */
-    toJsonSchema(_options: ToJsonSchemaOptions): OpenAPIV3.ServerObject;
+    toJsonSchema(_options: ToJsonSchemaOptions): OpenAPIV3.ServerObject & {
+        name?: string;
+    };
 }

package/esm/oas/server/Server.js

@@ -55,6 +55,13 @@ export class OasServer {
             writable: true,
             value: void 0
         });
+        /** Name that identifies the server (OpenAPI 3.2) */
+        Object.defineProperty(this, "name", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         /** Server URL with optional variable templating */
         Object.defineProperty(this, "url", {
             enumerable: true,
@@ -77,6 +84,7 @@ export class OasServer {
             value: void 0
         });
         this.description = fields.description;
+        this.name = fields.name;
         this.url = fields.url;
         this.variables = fields.variables;
         this.extensionFields = fields.extensionFields;
@@ -109,11 +117,12 @@ export class OasServer {
      * Converts this OAS server to an OpenAPI v3 JSON schema representation.
      *
      * @param _options - Conversion options (currently unused for server objects)
-     * @returns OpenAPI v3 server object with URL, description, and variables
+     * @returns OpenAPI v3 server object with URL, description, variables and, when set, name
      */
     toJsonSchema(_options) {
         return {
             description: this.description,
+            ...(this.name !== undefined ? { name: this.name } : {}),
             url: this.url,
             variables: this.variables
         };

package/esm/oas/tag/Tag.d.ts

@@ -3,6 +3,12 @@ import type { OasExternalDocs } from '../externalDocs/ExternalDocs.js';
 export type TagFields = {
     name: string;
     description: string | undefined;
+    /** Short summary of the tag (OpenAPI 3.2) */
+    summary?: string;
+    /** Name of the tag this tag nests under (OpenAPI 3.2) */
+    parent?: string;
+    /** Kind of tag, e.g. `nav`, `badge` or `audience` (OpenAPI 3.2, open registry) */
+    kind?: string;
     externalDocs?: OasExternalDocs;
     extensionFields?: Record<string, unknown>;
 };
@@ -12,6 +18,9 @@ export declare class OasTag {
     constructor(fields: TagFields);
     get name(): string;
     get description(): string | undefined;
+    get summary(): string | undefined;
+    get parent(): string | undefined;
+    get kind(): string | undefined;
     get externalDocs(): OasExternalDocs | undefined;
     /** Specification Extension fields */
     get extensionFields(): Record<string, unknown> | undefined;

package/esm/oas/tag/Tag.js

@@ -28,6 +28,15 @@ export class OasTag {
     get description() {
         return __classPrivateFieldGet(this, _OasTag_fields, "f").description;
     }
+    get summary() {
+        return __classPrivateFieldGet(this, _OasTag_fields, "f").summary;
+    }
+    get parent() {
+        return __classPrivateFieldGet(this, _OasTag_fields, "f").parent;
+    }
+    get kind() {
+        return __classPrivateFieldGet(this, _OasTag_fields, "f").kind;
+    }
     get externalDocs() {
         return __classPrivateFieldGet(this, _OasTag_fields, "f").externalDocs;
     }

package/esm/parse/toOasDialect.d.ts

@@ -1,12 +1,13 @@
 /**
  * The OpenAPI dialects SKMTC parses natively. Each has its own complete
- * parser tree (`core/parse/v3-0`, `core/parse/v3-1`); this module is the
- * ONLY place a document's version is examined. Once a dialect is chosen
- * the matching parser runs top-to-bottom and never re-checks the version,
- * so a 3.0 document can never reach a line of 3.1 logic (or vice versa) —
- * there is no downstream version branch to get wrong.
+ * parser tree (`core/parse/v3-0`, `core/parse/v3-1`, `core/parse/v3-2`);
+ * this module is the ONLY place a document's version is examined. Once a
+ * dialect is chosen the matching parser runs top-to-bottom and never
+ * re-checks the version, so a 3.0 document can never reach a line of 3.1
+ * logic (or vice versa) — there is no downstream version branch to get
+ * wrong.
  */
-export type OasDialect = '3.0' | '3.1';
+export type OasDialect = '3.0' | '3.1' | '3.2';
 /**
  * Map an OpenAPI document's `openapi` version string to its parser
  * dialect.
@@ -15,7 +16,7 @@ export type OasDialect = '3.0' | '3.1';
  * precondition failure — there is no sensible parser to pick — so it throws
  * rather than silently defaulting to one dialect and masking the error. A
  * loose `openapi.startsWith('3.1') ? '3.1' : '3.0'` would route every
- * non-3.1 value (a typo, `3.2`, `4.0`, a missing field) into 3.0 unnoticed;
+ * non-3.1 value (a typo, `4.0`, a missing field) into 3.0 unnoticed;
  * that is the footgun this avoids. Mirrors `@skmtc/convert`'s
  * `toV3Document`, which likewise throws on an unrecognized version.
  *

package/esm/parse/toOasDialect.js

@@ -6,7 +6,7 @@
  * precondition failure — there is no sensible parser to pick — so it throws
  * rather than silently defaulting to one dialect and masking the error. A
  * loose `openapi.startsWith('3.1') ? '3.1' : '3.0'` would route every
- * non-3.1 value (a typo, `3.2`, `4.0`, a missing field) into 3.0 unnoticed;
+ * non-3.1 value (a typo, `4.0`, a missing field) into 3.0 unnoticed;
  * that is the footgun this avoids. Mirrors `@skmtc/convert`'s
  * `toV3Document`, which likewise throws on an unrecognized version.
  *
@@ -18,5 +18,7 @@ export const toOasDialect = (openapi) => {
         return '3.0';
     if (openapi?.startsWith('3.1'))
         return '3.1';
-    throw new Error(`Unsupported OpenAPI version: ${openapi ?? '(missing)'} — expected 3.0.x or 3.1.x`);
+    if (openapi?.startsWith('3.2'))
+        return '3.2';
+    throw new Error(`Unsupported OpenAPI version: ${openapi ?? '(missing)'} — expected 3.0.x, 3.1.x or 3.2.x`);
 };

package/esm/parse/v3-0/methods.d.ts

@@ -0,0 +1,11 @@
+import type { Method } from '../../types/Method.js';
+/**
+ * A path item field that holds an Operation Object in OpenAPI 3.0. A
+ * `query` key is not one of them: it stays a skipped field.
+ */
+export type PathItemMethod = Exclude<Method, 'query'>;
+export declare const pathItemMethods: readonly PathItemMethod[];
+/**
+ * Returns `key` as a {@link PathItemMethod} when it is one of {@link pathItemMethods}.
+ */
+export declare const toPathItemMethod: (key: string) => PathItemMethod | undefined;

package/esm/parse/v3-0/methods.js

@@ -0,0 +1,16 @@
+export const pathItemMethods = [
+    'get',
+    'put',
+    'post',
+    'delete',
+    'options',
+    'head',
+    'patch',
+    'trace'
+];
+/**
+ * Returns `key` as a {@link PathItemMethod} when it is one of {@link pathItemMethods}.
+ */
+export const toPathItemMethod = (key) => {
+    return pathItemMethods.find(method => method === key);
+};

package/esm/parse/v3-0/operation/toOperationsV3.js

@@ -3,7 +3,7 @@ import { toResponsesV3 } from '../response/toResponseV3.js';
 import { toParameterListV3 } from '../parameter/toParameterV3.js';
 import { OasOperation } from '../../../oas/operation/Operation.js';
 import { toPathItemV3 } from '../pathItem/toPathItemV3.js';
-import { methodValues } from '../../../types/Method.js';
+import { toPathItemMethod } from '../methods.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 import { toSecurityRequirementsV3 } from '../securityRequirement/toSecurityRequirement.js';
 import { isEmpty } from '../../../helpers/isEmpty.js';
@@ -54,14 +54,14 @@ export const toOperationsV3 = ({ paths, stackTrail, context }) => {
                 return [];
             }
             const cleaned = Object.entries(pathItem).reduce(({ rest, methodObject }, [key, operation]) => {
-                const isMethod = methodValues.includes(key);
-                if (isMethod) {
-                    const { [key]: _deleted, ...remaining } = rest;
+                const method = toPathItemMethod(key);
+                if (method) {
+                    const { [method]: _deleted, ...remaining } = rest;
                     return {
                         rest: remaining,
                         methodObject: {
                             ...methodObject,
-                            [key]: operation
+                            [method]: operation
                         }
                     };
                 }

package/esm/parse/v3-0/parameter/toParameterV3.d.ts

@@ -1,9 +1,10 @@
 import type { ParseContextType } from '../../../context/parseTypes.js';
-import { type OasParameterLocation } from '../../../oas/parameter/parameter-types.js';
+import type { OasParameterLocation } from '../../../oas/parameter/parameter-types.js';
 import type { OpenAPIV3 } from 'openapi-types';
 import { OasParameter } from '../../../oas/parameter/Parameter.js';
 import type { OasRef } from '../../../oas/ref/Ref.js';
 import type { StackTrail } from '../../../context/StackTrail.js';
+type ParameterLocation = Exclude<OasParameterLocation, 'querystring'>;
 export type ToParameterListV3Args = {
     parameters: (OpenAPIV3.ParameterObject | OpenAPIV3.ReferenceObject)[] | undefined;
     stackTrail: StackTrail;
@@ -29,7 +30,7 @@ export type ToParameterV3Args = {
 };
 export type ToStyleArgs = {
     style: string | undefined;
-    location: OasParameterLocation;
+    location: ParameterLocation;
     stackTrail: StackTrail;
 };
 export type ToExplodeArgs = {
@@ -37,3 +38,4 @@ export type ToExplodeArgs = {
     style: string | undefined;
     stackTrail: StackTrail;
 };
+export {};

package/esm/parse/v3-0/parameter/toParameterV3.js

@@ -1,6 +1,5 @@
 import { tryParseAt } from '../../../context/tryParseAt.js';
 import { isRef } from '../../../helpers/refFns.js';
-import { oasParameterLocation, oasParameterStyle } from '../../../oas/parameter/parameter-types.js';
 import { toExamplesV3 } from '../example/toExamplesV3.js';
 import { toRefV31 } from '../ref/toRefV31.js';
 import { toOptionalSchemaV3 } from '../schema/toSchemasV3.js';
@@ -8,6 +7,21 @@ import { toOptionalMediaTypeItemsV3 } from '../mediaType/toMediaTypeItemV3.js';
 import { OasParameter } from '../../../oas/parameter/Parameter.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 import * as v from 'valibot';
+const parameterLocation = v.enum({
+    query: 'query',
+    header: 'header',
+    path: 'path',
+    cookie: 'cookie'
+});
+const parameterStyle = v.enum({
+    matrix: 'matrix',
+    label: 'label',
+    form: 'form',
+    simple: 'simple',
+    spaceDelimited: 'spaceDelimited',
+    pipeDelimited: 'pipeDelimited',
+    deepObject: 'deepObject'
+});
 export const toParameterListV3 = ({ parameters, stackTrail, context }) => {
     if (!parameters) {
         return undefined;
@@ -52,7 +66,7 @@ const toParameterV3 = ({ parameter, stackTrail, context }) => {
         stackTrail,
         parentType: 'parameter'
     });
-    const parsedLocation = v.parse(oasParameterLocation, location);
+    const parsedLocation = v.parse(parameterLocation, location);
     if (parsedLocation === 'path' && !required) {
         console.warn(`Path parameters must be required`);
     }
@@ -82,7 +96,7 @@ const toParameterV3 = ({ parameter, stackTrail, context }) => {
     return context.withStackTrail(stackTrail, () => new OasParameter(fields, context));
 };
 const toStyle = ({ style, location, stackTrail }) => {
-    const parsed = v.parse(v.optional(oasParameterStyle), style);
+    const parsed = v.parse(v.optional(parameterStyle), style);
     if (parsed !== undefined) {
         return parsed;
     }

package/esm/parse/v3-0/securitySchemes/toSecuritySchemes.js

@@ -1,10 +1,10 @@
 import { OasHttpSecurityScheme, OasApiKeySecurityScheme, OasOAuth2SecurityScheme, OasOpenIdSecurityScheme } from '../../../oas/securitySchemes/SecurityScheme.js';
 import * as v from 'valibot';
-import { oasApiKeySecuritySchemeData, oasHttpSecuritySchemeData, oasOAuth2SecuritySchemeData, oasOpenIdSecuritySchemeData } from '../../../oas/securitySchemes/security-scheme-types.js';
+import { oasApiKeySecuritySchemeData, oasHttpSecuritySchemeData, oasOAuth2FlowsData, oasOAuth2SecuritySchemeData, oasOpenIdSecuritySchemeData } from '../../../oas/securitySchemes/security-scheme-types.js';
 import { toRefV31 } from '../ref/toRefV31.js';
 import { isRef } from '../../../helpers/refFns.js';
-import { isEmpty } from '../../../helpers/isEmpty.js';
 import { tryParseAt } from '../../../context/tryParseAt.js';
+import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 export const toSecuritySchemesV3 = ({ securitySchemes, stackTrail, context }) => {
     if (!securitySchemes) {
         return undefined;
@@ -27,21 +27,29 @@ export const toSecuritySchemesV3 = ({ securitySchemes, stackTrail, context }) =>
     }
     return output;
 };
+/**
+ * Log the keys of `value` that `known` does not name as skipped fields.
+ * `v.parse` on a `v.object` schema strips unknown keys, so they are read
+ * off the raw object. `x-` extensions are not logged.
+ */
+const logSkippedKeys = ({ value, known, parentType, stackTrail, context }) => {
+    const skipped = Object.fromEntries(Object.entries(value).filter(([key]) => !Object.hasOwn(known, key)));
+    toSpecificationExtensionsV3({ skipped, parent: value, parentType, stackTrail, context });
+};
 const toSecuritySchemeV3 = ({ securityScheme, stackTrail, context }) => {
     if (isRef(securityScheme)) {
         return toRefV31({ ref: securityScheme, refType: 'securityScheme', stackTrail, context });
     }
     switch (securityScheme.type) {
         case 'http': {
-            const { type: _type, description, scheme, bearerFormat, ...skipped } = v.parse(oasHttpSecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:http'
-                });
-            }
+            const { description, scheme, bearerFormat } = v.parse(oasHttpSecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasHttpSecuritySchemeData.entries,
+                parentType: 'securityScheme:http',
+                stackTrail,
+                context
+            });
             return new OasHttpSecurityScheme({
                 description,
                 scheme,
@@ -49,15 +57,14 @@ const toSecuritySchemeV3 = ({ securityScheme, stackTrail, context }) => {
             });
         }
         case 'apiKey': {
-            const { type: _type, in: location, description, name, ...skipped } = v.parse(oasApiKeySecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:apiKey'
-                });
-            }
+            const { in: location, description, name } = v.parse(oasApiKeySecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasApiKeySecuritySchemeData.entries,
+                parentType: 'securityScheme:apiKey',
+                stackTrail,
+                context
+            });
             return new OasApiKeySecurityScheme({
                 description,
                 name,
@@ -65,30 +72,35 @@ const toSecuritySchemeV3 = ({ securityScheme, stackTrail, context }) => {
             });
         }
         case 'oauth2': {
-            const { type: _type, flows, description, ...skipped } = v.parse(oasOAuth2SecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:oauth2'
-                });
-            }
+            const { flows, description } = v.parse(oasOAuth2SecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasOAuth2SecuritySchemeData.entries,
+                parentType: 'securityScheme:oauth2',
+                stackTrail,
+                context
+            });
+            stackTrail.trace('flows', st => logSkippedKeys({
+                value: securityScheme.flows,
+                known: oasOAuth2FlowsData.entries,
+                parentType: 'oauthFlows',
+                stackTrail: st,
+                context
+            }));
             return new OasOAuth2SecurityScheme({
                 description,
                 flows
             });
         }
         case 'openIdConnect': {
-            const { type: _type, description, openIdConnectUrl, ...skipped } = v.parse(oasOpenIdSecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:openIdConnect'
-                });
-            }
+            const { description, openIdConnectUrl } = v.parse(oasOpenIdSecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasOpenIdSecuritySchemeData.entries,
+                parentType: 'securityScheme:openIdConnect',
+                stackTrail,
+                context
+            });
             return new OasOpenIdSecurityScheme({
                 description,
                 openIdConnectUrl

package/esm/parse/v3-0/webhook/toWebhooksV3.js

@@ -3,7 +3,7 @@ import { toResponsesV3 } from '../response/toResponseV3.js';
 import { toParameterListV3 } from '../parameter/toParameterV3.js';
 import { OasWebhook } from '../../../oas/webhook/Webhook.js';
 import { toPathItemV3 } from '../pathItem/toPathItemV3.js';
-import { methodValues } from '../../../types/Method.js';
+import { toPathItemMethod } from '../methods.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 import { toSecurityRequirementsV3 } from '../securityRequirement/toSecurityRequirement.js';
 import { isEmpty } from '../../../helpers/isEmpty.js';
@@ -69,14 +69,14 @@ export const toWebhooksV3 = ({ webhooks, stackTrail, context }) => {
                 return [];
             }
             const cleaned = Object.entries(pathItem).reduce(({ rest, methodObject }, [key, operation]) => {
-                const isMethod = methodValues.includes(key);
-                if (isMethod) {
-                    const { [key]: _deleted, ...remaining } = rest;
+                const method = toPathItemMethod(key);
+                if (method) {
+                    const { [method]: _deleted, ...remaining } = rest;
                     return {
                         rest: remaining,
                         methodObject: {
                             ...methodObject,
-                            [key]: operation
+                            [method]: operation
                         }
                     };
                 }

package/esm/parse/v3-1/methods.d.ts

@@ -0,0 +1,11 @@
+import type { Method } from '../../types/Method.js';
+/**
+ * A path item field that holds an Operation Object in OpenAPI 3.1. A
+ * `query` key is not one of them: it stays a skipped field.
+ */
+export type PathItemMethod = Exclude<Method, 'query'>;
+export declare const pathItemMethods: readonly PathItemMethod[];
+/**
+ * Returns `key` as a {@link PathItemMethod} when it is one of {@link pathItemMethods}.
+ */
+export declare const toPathItemMethod: (key: string) => PathItemMethod | undefined;