@skmtc/core 0.29.0 → 0.31.0

package/esm/oas/operation/Operation.d.ts

@@ -60,6 +60,14 @@ export type OperationFields = {
 export type ToRequestBodyMapArgs = {
     schema: OasSchema | OasRef<'schema'>;
     requestBody: OasRequestBody;
+    /** The `content` key the schema was read from. */
+    mediaType: string;
+    /**
+     * The media type to send the body as: the explicit media type when one was
+     * passed, else `contentType` of `OasRequestBody.toJsonContent` (the
+     * JSON-like key, or `application/json` for a body read from `*\/*`).
+     */
+    contentType: string;
 };
 export declare class OasOperation extends OasBase {
     /** Type identifier for OAS operation objects */
@@ -120,7 +128,7 @@ export declare class OasOperation extends OasBase {
      * Maps the request body schema to a custom value using the provided mapping function.
      *
      * @param map - Function to transform the request body schema and metadata
-     * @param mediaType - Media type to extract schema from (default: 'application/json')
+     * @param mediaType - Media type to extract schema from, an exact lookup. Omitted: the media type `OasRequestBody.toJsonContent` picks.
      * @returns Mapped value or undefined if no request body schema found
      */
     toRequestBody<V>(map: ({ schema, requestBody }: ToRequestBodyMapArgs) => V, mediaType?: string): V | undefined;
@@ -133,7 +141,7 @@ export declare class OasOperation extends OasBase {
      * {@link traverseSchema}.
      *
      * @param path - Schema path; `path[0]` must be `'SuccessResponse'` or `'RequestBody'`.
-     * @param mediaType - Media type the body schema is read from (default `application/json`).
+     * @param mediaType - Media type the body schema is read from, an exact lookup. Omitted: the JSON media type (`application/json`, else the first JSON-like type, else `*\/*`).
      * @returns The schema at the path (may be an unresolved `$ref`).
      * @throws Error on an unknown root, a missing response/request body, or a non-navigable segment.
      */

package/esm/oas/operation/Operation.js

@@ -164,13 +164,25 @@ export class OasOperation extends OasBase {
      * Maps the request body schema to a custom value using the provided mapping function.
      *
      * @param map - Function to transform the request body schema and metadata
-     * @param mediaType - Media type to extract schema from (default: 'application/json')
+     * @param mediaType - Media type to extract schema from, an exact lookup. Omitted: the media type `OasRequestBody.toJsonContent` picks.
      * @returns Mapped value or undefined if no request body schema found
      */
-    toRequestBody(map, mediaType = 'application/json') {
+    toRequestBody(map, mediaType) {
         const requestBody = this.requestBody?.resolve();
-        const schema = requestBody?.content[mediaType]?.schema;
-        return schema ? map({ schema, requestBody }) : undefined;
+        if (!requestBody) {
+            return undefined;
+        }
+        const chosen = mediaType === undefined
+            ? requestBody.toJsonContent()
+            : { mediaType, contentType: mediaType, schema: requestBody.toSchema(mediaType) };
+        return chosen?.schema
+            ? map({
+                schema: chosen.schema,
+                requestBody,
+                mediaType: chosen.mediaType,
+                contentType: chosen.contentType
+            })
+            : undefined;
     }
     /**
      * Navigate into this operation's response or request body schema along an
@@ -181,11 +193,11 @@ export class OasOperation extends OasBase {
      * {@link traverseSchema}.
      *
      * @param path - Schema path; `path[0]` must be `'SuccessResponse'` or `'RequestBody'`.
-     * @param mediaType - Media type the body schema is read from (default `application/json`).
+     * @param mediaType - Media type the body schema is read from, an exact lookup. Omitted: the JSON media type (`application/json`, else the first JSON-like type, else `*\/*`).
      * @returns The schema at the path (may be an unresolved `$ref`).
      * @throws Error on an unknown root, a missing response/request body, or a non-navigable segment.
      */
-    traverse(path, mediaType = 'application/json') {
+    traverse(path, mediaType) {
         const [root, ...rest] = path;
         let rootSchema;
         switch (root) {
@@ -200,7 +212,8 @@ export class OasOperation extends OasBase {
         }
         if (!rootSchema) {
             const label = root === 'SuccessResponse' ? 'success response' : 'request body';
-            throw new Error(`Operation "${this.method} ${this.path}" has no ${label} schema for media type "${mediaType}"`);
+            const mediaTypeLabel = mediaType === undefined ? 'a JSON media type' : `media type "${mediaType}"`;
+            throw new Error(`Operation "${this.method} ${this.path}" has no ${label} schema for ${mediaTypeLabel}`);
         }
         return traverseSchema(rootSchema, rest);
     }

package/esm/oas/parameter/Parameter.d.ts

@@ -240,9 +240,10 @@ export declare class OasParameter extends OasBase {
      * Extracts the schema for this parameter.
      *
      * Returns the direct schema if available, or extracts schema from content
-     * for the specified media type.
+     * for the specified media type. When `content` has exactly one entry, its
+     * schema is used whatever the media type.
      *
-     * @param mediaType - Media type to extract schema from when using content definitions
+     * @param mediaType - Media type to extract schema from when using content definitions, an exact lookup. Omitted: the JSON media type (`application/json`, else the first JSON-like type, else `*\/*`).
      * @returns The parameter's schema object
      * @throws Error if no schema is found for the specified media type
      */

package/esm/oas/parameter/Parameter.js

@@ -1,5 +1,6 @@
 import "../../_dnt.polyfills.js";
 import { OasBase } from '../../types/OasBase.js';
+import { toContentSchema } from '../mediaType/toContentSchema.js';
 /**
  * Represents a Parameter Object in the OpenAPI Specification.
  *
@@ -292,19 +293,24 @@ export class OasParameter extends OasBase {
      * Extracts the schema for this parameter.
      *
      * Returns the direct schema if available, or extracts schema from content
-     * for the specified media type.
+     * for the specified media type. When `content` has exactly one entry, its
+     * schema is used whatever the media type.
      *
-     * @param mediaType - Media type to extract schema from when using content definitions
+     * @param mediaType - Media type to extract schema from when using content definitions, an exact lookup. Omitted: the JSON media type (`application/json`, else the first JSON-like type, else `*\/*`).
      * @returns The parameter's schema object
      * @throws Error if no schema is found for the specified media type
      */
-    toSchema(mediaType = 'application/json') {
+    toSchema(mediaType) {
         if (this.schema) {
             return this.schema;
         }
-        const schema = this.content?.[mediaType]?.schema;
+        const contentEntries = Object.values(this.content ?? {});
+        const onlyEntry = contentEntries.length === 1 ? contentEntries[0] : undefined;
+        const schema = toContentSchema(this.content, mediaType) ?? onlyEntry?.schema;
         if (!schema) {
-            throw new Error(`Schema not found for media type ${mediaType}`);
+            throw new Error(mediaType === undefined
+                ? 'Schema not found for a JSON media type'
+                : `Schema not found for media type "${mediaType}"`);
         }
         return schema;
     }

package/esm/oas/parameter/parameter-types.d.ts

@@ -1,5 +1,13 @@
 import * as v from 'valibot';
-export type OasParameterLocation = 'query' | 'header' | 'path' | 'cookie';
+/**
+ * Parameter locations across OpenAPI 3.0 to 3.2. `querystring` is new in
+ * 3.2; each parser tree accepts its own subset.
+ */
+export type OasParameterLocation = 'query' | 'querystring' | 'header' | 'path' | 'cookie';
 export declare const oasParameterLocation: v.GenericSchema<OasParameterLocation>;
-export type OasParameterStyle = 'matrix' | 'label' | 'form' | 'simple' | 'spaceDelimited' | 'pipeDelimited' | 'deepObject';
+/**
+ * Parameter styles across OpenAPI 3.0 to 3.2. `cookie` is new in 3.2; each
+ * parser tree accepts its own subset.
+ */
+export type OasParameterStyle = 'matrix' | 'label' | 'form' | 'simple' | 'spaceDelimited' | 'pipeDelimited' | 'deepObject' | 'cookie';
 export declare const oasParameterStyle: v.GenericSchema<OasParameterStyle>;

package/esm/oas/parameter/parameter-types.js

@@ -1,6 +1,7 @@
 import * as v from 'valibot';
 export const oasParameterLocation = v.enum({
     query: 'query',
+    querystring: 'querystring',
     header: 'header',
     path: 'path',
     cookie: 'cookie'
@@ -12,5 +13,6 @@ export const oasParameterStyle = v.enum({
     simple: 'simple',
     spaceDelimited: 'spaceDelimited',
     pipeDelimited: 'pipeDelimited',
-    deepObject: 'deepObject'
+    deepObject: 'deepObject',
+    cookie: 'cookie'
 });

package/esm/oas/requestBody/RequestBody.d.ts

@@ -6,6 +6,7 @@ import type { ToJsonSchemaOptions } from '../schema/Schema.js';
 import type { OpenAPIV3 } from 'openapi-types';
 import { OasBase } from '../../types/OasBase.js';
 import type { ParseContextType } from '../../context/parseTypes.js';
+import type { JsonContent } from '../mediaType/jsonMediaType.js';
 /**
  * Constructor fields for {@link OasRequestBody}.
  */
@@ -286,6 +287,16 @@ export declare class OasRequestBody extends OasBase {
     isRef(): this is OasRef<'requestBody'>;
     resolve(): OasRequestBody;
     resolveOnce(): OasRequestBody;
+    /**
+     * The body schema for `mediaType`, an exact key lookup. Without
+     * `mediaType`, the schema of the JSON media type that {@link toJsonContent}
+     * picks: `application/json`, else the first JSON-like type such as
+     * `application/json;v=1.0` or `application/vnd.api+json`, else `*\/*`
+     * when its schema is an object, array, union or `$ref`.
+     * `undefined` when there is no such media type or it has no schema.
+     */
     toSchema(mediaType?: string): OasSchema | OasRef<'schema'> | undefined;
+    /** The media type this body is read from (JSON-like, or `*\/*`), and its schema. See {@link toJsonContent}. */
+    toJsonContent(): JsonContent | undefined;
     toJsonSchema(options: ToJsonSchemaOptions): OpenAPIV3.RequestBodyObject;
 }

package/esm/oas/requestBody/RequestBody.js

@@ -1,5 +1,7 @@
 import "../../_dnt.polyfills.js";
 import { OasBase } from '../../types/OasBase.js';
+import { toJsonContent } from '../mediaType/jsonMediaType.js';
+import { toContentSchema } from '../mediaType/toContentSchema.js';
 /**
  * Represents a Request Body Object in the OpenAPI Specification.
  *
@@ -304,8 +306,20 @@ export class OasRequestBody extends OasBase {
     resolveOnce() {
         return this;
     }
-    toSchema(mediaType = 'application/json') {
-        return this.content?.[mediaType]?.schema;
+    /**
+     * The body schema for `mediaType`, an exact key lookup. Without
+     * `mediaType`, the schema of the JSON media type that {@link toJsonContent}
+     * picks: `application/json`, else the first JSON-like type such as
+     * `application/json;v=1.0` or `application/vnd.api+json`, else `*\/*`
+     * when its schema is an object, array, union or `$ref`.
+     * `undefined` when there is no such media type or it has no schema.
+     */
+    toSchema(mediaType) {
+        return toContentSchema(this.content, mediaType);
+    }
+    /** The media type this body is read from (JSON-like, or `*\/*`), and its schema. See {@link toJsonContent}. */
+    toJsonContent() {
+        return toJsonContent(this.content);
     }
     toJsonSchema(options) {
         return {

package/esm/oas/response/Response.d.ts

@@ -8,10 +8,13 @@ import type { ToJsonSchemaOptions } from '../schema/Schema.js';
 import type { OpenAPIV3 } from 'openapi-types';
 import { OasBase } from '../../types/OasBase.js';
 import type { ParseContextType } from '../../context/parseTypes.js';
+import type { JsonContent } from '../mediaType/jsonMediaType.js';
 /**
  * Constructor fields for {@link OasResponse}.
  */
 export type ResponseFields = {
+    /** A short summary of the response (OpenAPI 3.2) */
+    summary?: string | undefined;
     /** A description of the response */
     description?: string | undefined;
     /** Response headers that can be sent */
@@ -208,6 +211,7 @@ export type ResponseFields = {
  */
 export declare class OasResponse extends OasBase {
     oasType: 'response';
+    summary: string | undefined;
     description: string | undefined;
     headers: Record<string, OasHeader | OasRef<'header'>> | undefined;
     links: Record<string, OasLink | OasRef<'link'>> | undefined;
@@ -217,6 +221,18 @@ export declare class OasResponse extends OasBase {
     isRef(): this is OasRef<'response'>;
     resolve(): OasResponse;
     resolveOnce(): OasResponse;
+    /**
+     * The body schema for `mediaType`, an exact key lookup. Without
+     * `mediaType`, the schema of the JSON media type that {@link toJsonContent}
+     * picks: `application/json`, else the first JSON-like type such as
+     * `application/json;v=1.0` or `application/vnd.api+json`, else `*\/*`
+     * when its schema is an object, array, union or `$ref`.
+     * `undefined` when there is no such media type or it has no schema.
+     */
     toSchema(mediaType?: string): OasSchema | OasRef<'schema'> | undefined;
-    toJsonSchema(options: ToJsonSchemaOptions): OpenAPIV3.ResponseObject;
+    /** The media type this response is read from (JSON-like, or `*\/*`), and its schema. See {@link toJsonContent}. */
+    toJsonContent(): JsonContent | undefined;
+    toJsonSchema(options: ToJsonSchemaOptions): OpenAPIV3.ResponseObject & {
+        summary?: string;
+    };
 }

package/esm/oas/response/Response.js

@@ -1,5 +1,7 @@
 import "../../_dnt.polyfills.js";
 import { OasBase } from '../../types/OasBase.js';
+import { toJsonContent } from '../mediaType/jsonMediaType.js';
+import { toContentSchema } from '../mediaType/toContentSchema.js';
 /**
  * Represents a Response Object in the OpenAPI Specification.
  *
@@ -192,6 +194,12 @@ export class OasResponse extends OasBase {
             writable: true,
             value: 'response'
         });
+        Object.defineProperty(this, "summary", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "description", {
             enumerable: true,
             configurable: true,
@@ -222,6 +230,7 @@ export class OasResponse extends OasBase {
             writable: true,
             value: void 0
         });
+        this.summary = fields.summary;
         this.description = fields.description;
         this.headers = fields.headers;
         this.links = fields.links;
@@ -237,11 +246,24 @@ export class OasResponse extends OasBase {
     resolveOnce() {
         return this;
     }
-    toSchema(mediaType = 'application/json') {
-        return this.content?.[mediaType]?.schema;
+    /**
+     * The body schema for `mediaType`, an exact key lookup. Without
+     * `mediaType`, the schema of the JSON media type that {@link toJsonContent}
+     * picks: `application/json`, else the first JSON-like type such as
+     * `application/json;v=1.0` or `application/vnd.api+json`, else `*\/*`
+     * when its schema is an object, array, union or `$ref`.
+     * `undefined` when there is no such media type or it has no schema.
+     */
+    toSchema(mediaType) {
+        return toContentSchema(this.content, mediaType);
+    }
+    /** The media type this response is read from (JSON-like, or `*\/*`), and its schema. See {@link toJsonContent}. */
+    toJsonContent() {
+        return toJsonContent(this.content);
     }
     toJsonSchema(options) {
         return {
+            ...(this.summary !== undefined ? { summary: this.summary } : {}),
             description: this.description ?? '',
             headers: this.headers
                 ? Object.fromEntries(Object.entries(this.headers).map(([header, headerObject]) => [

package/esm/oas/securitySchemes/SecurityScheme.d.ts

@@ -3,16 +3,20 @@ import type { OpenAPIV3 } from 'openapi-types';
 export type SecuritySchemeFields = HttpSecuritySchemeFields | ApiKeySecuritySchemeFields | OAuth2SecuritySchemeFields | OpenIdSecuritySchemeFields;
 export type HttpSecuritySchemeFields = {
     description?: string;
+    deprecated?: boolean;
     scheme: string;
     bearerFormat?: string;
 };
 export type ApiKeySecuritySchemeFields = {
     description?: string;
+    deprecated?: boolean;
     name: string;
     in: 'header' | 'query' | 'cookie';
 };
 export type OAuth2SecuritySchemeFields = {
     description?: string;
+    deprecated?: boolean;
+    oauth2MetadataUrl?: string;
     flows: {
         authorizationCode?: {
             authorizationUrl: string;
@@ -35,40 +39,72 @@ export type OAuth2SecuritySchemeFields = {
             refreshUrl?: string | undefined;
             scopes: Record<string, string>;
         };
+        deviceAuthorization?: {
+            deviceAuthorizationUrl: string;
+            tokenUrl: string;
+            refreshUrl?: string | undefined;
+            scopes?: Record<string, string> | undefined;
+        };
     };
 };
 export type OpenIdSecuritySchemeFields = {
     description?: string;
+    deprecated?: boolean;
     openIdConnectUrl: string;
 };
+/** `OpenAPIV3.HttpSecurityScheme` with the OpenAPI 3.2 `deprecated` field. */
+export type HttpSecuritySchemeJson = OpenAPIV3.HttpSecurityScheme & {
+    deprecated?: boolean;
+};
+/** `OpenAPIV3.ApiKeySecurityScheme` with the OpenAPI 3.2 `deprecated` field. */
+export type ApiKeySecuritySchemeJson = OpenAPIV3.ApiKeySecurityScheme & {
+    deprecated?: boolean;
+};
+/** `OpenAPIV3.OpenIdSecurityScheme` with the OpenAPI 3.2 `deprecated` field. */
+export type OpenIdSecuritySchemeJson = OpenAPIV3.OpenIdSecurityScheme & {
+    deprecated?: boolean;
+};
 export declare class OasHttpSecurityScheme {
     oasType: 'securityScheme';
     type: 'http';
     description: string | undefined;
+    deprecated: boolean | undefined;
     scheme: string;
     bearerFormat: string | undefined;
     constructor(fields: HttpSecuritySchemeFields);
     isRef(): this is OasRef<'securityScheme'>;
     resolve(): OasHttpSecurityScheme;
     resolveOnce(): OasHttpSecurityScheme;
-    toJsonSchema(): OpenAPIV3.HttpSecurityScheme;
+    toJsonSchema(): HttpSecuritySchemeJson;
 }
 export declare class OasApiKeySecurityScheme {
     oasType: 'securityScheme';
     type: 'apiKey';
     description: string | undefined;
+    deprecated: boolean | undefined;
     name: string;
     location: 'query' | 'header' | 'cookie';
     constructor(fields: ApiKeySecuritySchemeFields);
     isRef(): this is OasRef<'securityScheme'>;
     resolve(): OasApiKeySecurityScheme;
     resolveOnce(): OasApiKeySecurityScheme;
-    toJsonSchema(): OpenAPIV3.ApiKeySecurityScheme;
+    toJsonSchema(): ApiKeySecuritySchemeJson;
 }
+/**
+ * `OpenAPIV3.OAuth2SecurityScheme` with the OpenAPI 3.2 fields:
+ * `deprecated`, `oauth2MetadataUrl` and the `deviceAuthorization` flow.
+ */
+export type OAuth2SecuritySchemeJson = OpenAPIV3.OAuth2SecurityScheme & {
+    deprecated?: boolean;
+    oauth2MetadataUrl?: string;
+    flows: OAuth2SecuritySchemeFields['flows'];
+};
 export declare class OasOAuth2SecurityScheme {
     oasType: 'securityScheme';
     type: 'oauth2';
     description: string | undefined;
+    deprecated: boolean | undefined;
+    oauth2MetadataUrl: string | undefined;
     flows: {
         authorizationCode?: {
             authorizationUrl: string;
@@ -91,22 +127,29 @@ export declare class OasOAuth2SecurityScheme {
             refreshUrl?: string | undefined;
             scopes: Record<string, string>;
         };
+        deviceAuthorization?: {
+            deviceAuthorizationUrl: string;
+            tokenUrl: string;
+            refreshUrl?: string | undefined;
+            scopes?: Record<string, string> | undefined;
+        };
     };
     constructor(fields: OAuth2SecuritySchemeFields);
     isRef(): this is OasRef<'securityScheme'>;
     resolve(): OasOAuth2SecurityScheme;
     resolveOnce(): OasOAuth2SecurityScheme;
-    toJsonSchema(): OpenAPIV3.OAuth2SecurityScheme;
+    toJsonSchema(): OAuth2SecuritySchemeJson;
 }
 export declare class OasOpenIdSecurityScheme {
     oasType: 'securityScheme';
     type: 'openIdConnect';
     description: string | undefined;
+    deprecated: boolean | undefined;
     openIdConnectUrl: string;
     constructor(fields: OpenIdSecuritySchemeFields);
     isRef(): this is OasRef<'securityScheme'>;
     resolve(): OasOpenIdSecurityScheme;
     resolveOnce(): OasOpenIdSecurityScheme;
-    toJsonSchema(): OpenAPIV3.OpenIdSecurityScheme;
+    toJsonSchema(): OpenIdSecuritySchemeJson;
 }
 export type OasSecurityScheme = OasHttpSecurityScheme | OasApiKeySecurityScheme | OasOAuth2SecurityScheme | OasOpenIdSecurityScheme;

package/esm/oas/securitySchemes/SecurityScheme.js

@@ -18,6 +18,12 @@ export class OasHttpSecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "scheme", {
             enumerable: true,
             configurable: true,
@@ -31,6 +37,7 @@ export class OasHttpSecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
         this.scheme = fields.scheme;
         this.bearerFormat = fields.bearerFormat;
     }
@@ -47,6 +54,7 @@ export class OasHttpSecurityScheme {
         return {
             type: 'http',
             description: this.description,
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
             scheme: this.scheme,
             bearerFormat: this.bearerFormat
         };
@@ -72,6 +80,12 @@ export class OasApiKeySecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "name", {
             enumerable: true,
             configurable: true,
@@ -85,6 +99,7 @@ export class OasApiKeySecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
         this.name = fields.name;
         this.location = fields.in;
     }
@@ -100,6 +115,7 @@ export class OasApiKeySecurityScheme {
     toJsonSchema() {
         return {
             type: 'apiKey',
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
             name: this.name,
             in: this.location
         };
@@ -125,6 +141,18 @@ export class OasOAuth2SecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "oauth2MetadataUrl", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "flows", {
             enumerable: true,
             configurable: true,
@@ -132,6 +160,8 @@ export class OasOAuth2SecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
+        this.oauth2MetadataUrl = fields.oauth2MetadataUrl;
         this.flows = fields.flows;
     }
     isRef() {
@@ -147,11 +177,18 @@ export class OasOAuth2SecurityScheme {
         return {
             type: 'oauth2',
             description: this.description,
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
+            ...(this.oauth2MetadataUrl === undefined
+                ? {}
+                : { oauth2MetadataUrl: this.oauth2MetadataUrl }),
             flows: {
                 authorizationCode: this.flows.authorizationCode,
                 clientCredentials: this.flows.clientCredentials,
                 implicit: this.flows.implicit,
-                password: this.flows.password
+                password: this.flows.password,
+                ...(this.flows.deviceAuthorization === undefined
+                    ? {}
+                    : { deviceAuthorization: this.flows.deviceAuthorization })
             }
         };
     }
@@ -176,6 +213,12 @@ export class OasOpenIdSecurityScheme {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "deprecated", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "openIdConnectUrl", {
             enumerable: true,
             configurable: true,
@@ -183,6 +226,7 @@ export class OasOpenIdSecurityScheme {
             value: void 0
         });
         this.description = fields.description;
+        this.deprecated = fields.deprecated;
         this.openIdConnectUrl = fields.openIdConnectUrl;
     }
     isRef() {
@@ -198,6 +242,7 @@ export class OasOpenIdSecurityScheme {
         return {
             type: 'openIdConnect',
             description: this.description,
+            ...(this.deprecated === undefined ? {} : { deprecated: this.deprecated }),
             openIdConnectUrl: this.openIdConnectUrl
         };
     }

package/esm/oas/securitySchemes/security-scheme-types.d.ts

@@ -10,6 +10,8 @@ export type OasHttpSecuritySchemeData = {
     type: 'http';
     /** Human-readable description of the security scheme */
     description?: string;
+    /** Whether the scheme is deprecated (OpenAPI 3.2) */
+    deprecated?: boolean;
     /** HTTP authorization scheme (e.g., 'basic', 'bearer') */
     scheme: string;
     /** Format hint for bearer tokens (e.g., 'JWT') */
@@ -35,6 +37,8 @@ export type OasApiKeySecuritySchemeData = {
     type: 'apiKey';
     /** Human-readable description of the security scheme */
     description?: string;
+    /** Whether the scheme is deprecated (OpenAPI 3.2) */
+    deprecated?: boolean;
     /** Name of the header, query parameter, or cookie */
     name: string;
     /** Location where the API key should be sent */
@@ -128,11 +132,25 @@ export declare const oasPasswordOAuth2FlowData: v.ObjectSchema<{
     readonly refreshUrl: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
     readonly scopes: v.RecordSchema<v.StringSchema<undefined>, v.StringSchema<undefined>, undefined>;
 }, undefined>;
+/**
+ * Data type for the OAuth2 device authorization flow (OpenAPI 3.2).
+ */
+export type OasDeviceAuthorizationOAuth2FlowData = {
+    /** URL for the OAuth2 device authorization endpoint */
+    deviceAuthorizationUrl: string;
+    /** URL for the OAuth2 token endpoint */
+    tokenUrl: string;
+    /** Optional URL for token refresh */
+    refreshUrl?: string | undefined;
+    /** Available scopes mapped to their descriptions */
+    scopes?: Record<string, string> | undefined;
+};
 export type OasOAuth2FlowsData = {
     authorizationCode?: OasAuthorizationCodeOAuth2FlowData;
     clientCredentials?: OasClientCredentialsOAuth2FlowData;
     implicit?: OasImplicitOAuth2FlowData;
     password?: OasPasswordOAuth2FlowData;
+    deviceAuthorization?: OasDeviceAuthorizationOAuth2FlowData;
 };
 export declare const oasOAuth2FlowsData: v.ObjectSchema<{
     readonly authorizationCode: v.OptionalSchema<v.ObjectSchema<{
@@ -160,6 +178,8 @@ export declare const oasOAuth2FlowsData: v.ObjectSchema<{
 export type OasOAuth2SecuritySchemeData = {
     type: 'oauth2';
     description?: string;
+    deprecated?: boolean;
+    oauth2MetadataUrl?: string;
     flows: OasOAuth2FlowsData;
 };
 export declare const oasOAuth2SecuritySchemeData: v.ObjectSchema<{
@@ -192,6 +212,7 @@ export declare const oasOAuth2SecuritySchemeData: v.ObjectSchema<{
 export type OasOpenIdSecuritySchemeData = {
     type: 'openIdConnect';
     description?: string;
+    deprecated?: boolean;
     openIdConnectUrl: string;
 };
 export declare const oasOpenIdSecuritySchemeData: v.ObjectSchema<{