@skmtc/core 0.29.0 → 0.31.0

package/esm/oas/server/Server.d.ts

@@ -10,6 +10,8 @@ import type { OasServerVariable } from '../serverVariable/ServerVariable.js';
  */
 export type ServerFields = {
     description?: string | undefined;
+    /** Name that identifies the server (OpenAPI 3.2) */
+    name?: string | undefined;
     url: string;
     variables?: Record<string, OasServerVariable> | undefined;
     extensionFields?: Record<string, unknown>;
@@ -54,6 +56,8 @@ export declare class OasServer {
     oasType: 'server';
     /** Human-readable description of the server */
     description: string | undefined;
+    /** Name that identifies the server (OpenAPI 3.2) */
+    name: string | undefined;
     /** Server URL with optional variable templating */
     url: string;
     /** Variable definitions for URL templating */
@@ -88,7 +92,9 @@ export declare class OasServer {
      * Converts this OAS server to an OpenAPI v3 JSON schema representation.
      *
      * @param _options - Conversion options (currently unused for server objects)
-     * @returns OpenAPI v3 server object with URL, description, and variables
+     * @returns OpenAPI v3 server object with URL, description, variables and, when set, name
      */
-    toJsonSchema(_options: ToJsonSchemaOptions): OpenAPIV3.ServerObject;
+    toJsonSchema(_options: ToJsonSchemaOptions): OpenAPIV3.ServerObject & {
+        name?: string;
+    };
 }

package/esm/oas/server/Server.js

@@ -55,6 +55,13 @@ export class OasServer {
             writable: true,
             value: void 0
         });
+        /** Name that identifies the server (OpenAPI 3.2) */
+        Object.defineProperty(this, "name", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         /** Server URL with optional variable templating */
         Object.defineProperty(this, "url", {
             enumerable: true,
@@ -77,6 +84,7 @@ export class OasServer {
             value: void 0
         });
         this.description = fields.description;
+        this.name = fields.name;
         this.url = fields.url;
         this.variables = fields.variables;
         this.extensionFields = fields.extensionFields;
@@ -109,11 +117,12 @@ export class OasServer {
      * Converts this OAS server to an OpenAPI v3 JSON schema representation.
      *
      * @param _options - Conversion options (currently unused for server objects)
-     * @returns OpenAPI v3 server object with URL, description, and variables
+     * @returns OpenAPI v3 server object with URL, description, variables and, when set, name
      */
     toJsonSchema(_options) {
         return {
             description: this.description,
+            ...(this.name !== undefined ? { name: this.name } : {}),
             url: this.url,
             variables: this.variables
         };

package/esm/oas/tag/Tag.d.ts

@@ -3,6 +3,12 @@ import type { OasExternalDocs } from '../externalDocs/ExternalDocs.js';
 export type TagFields = {
     name: string;
     description: string | undefined;
+    /** Short summary of the tag (OpenAPI 3.2) */
+    summary?: string;
+    /** Name of the tag this tag nests under (OpenAPI 3.2) */
+    parent?: string;
+    /** Kind of tag, e.g. `nav`, `badge` or `audience` (OpenAPI 3.2, open registry) */
+    kind?: string;
     externalDocs?: OasExternalDocs;
     extensionFields?: Record<string, unknown>;
 };
@@ -12,6 +18,9 @@ export declare class OasTag {
     constructor(fields: TagFields);
     get name(): string;
     get description(): string | undefined;
+    get summary(): string | undefined;
+    get parent(): string | undefined;
+    get kind(): string | undefined;
     get externalDocs(): OasExternalDocs | undefined;
     /** Specification Extension fields */
     get extensionFields(): Record<string, unknown> | undefined;

package/esm/oas/tag/Tag.js

@@ -28,6 +28,15 @@ export class OasTag {
     get description() {
         return __classPrivateFieldGet(this, _OasTag_fields, "f").description;
     }
+    get summary() {
+        return __classPrivateFieldGet(this, _OasTag_fields, "f").summary;
+    }
+    get parent() {
+        return __classPrivateFieldGet(this, _OasTag_fields, "f").parent;
+    }
+    get kind() {
+        return __classPrivateFieldGet(this, _OasTag_fields, "f").kind;
+    }
     get externalDocs() {
         return __classPrivateFieldGet(this, _OasTag_fields, "f").externalDocs;
     }

package/esm/oas/webhook/Webhook.d.ts

@@ -113,10 +113,10 @@ export declare class OasWebhook extends OasBase {
      */
     toPayload(): OasRequestBody | undefined;
     /**
-     * The schema of the received payload for `mediaType` (default
-     * `application/json`) — the inbound body shape a handler generator emits a
-     * type for. `undefined` when there is no body or no schema for that media
-     * type.
+     * The schema of the received payload for `mediaType`, an exact lookup —
+     * the inbound body shape a handler generator writes a type for. Without
+     * `mediaType`, the media type `OasRequestBody.toJsonContent` picks.
+     * `undefined` when there is no body or no schema for that media type.
      */
     toPayloadSchema(mediaType?: string): OasSchema | OasRef<'schema'> | undefined;
     /**

package/esm/oas/webhook/Webhook.js

@@ -157,13 +157,13 @@ export class OasWebhook extends OasBase {
         return this.requestBody?.resolve();
     }
     /**
-     * The schema of the received payload for `mediaType` (default
-     * `application/json`) — the inbound body shape a handler generator emits a
-     * type for. `undefined` when there is no body or no schema for that media
-     * type.
+     * The schema of the received payload for `mediaType`, an exact lookup —
+     * the inbound body shape a handler generator writes a type for. Without
+     * `mediaType`, the media type `OasRequestBody.toJsonContent` picks.
+     * `undefined` when there is no body or no schema for that media type.
      */
-    toPayloadSchema(mediaType = 'application/json') {
-        return this.toPayload()?.content[mediaType]?.schema;
+    toPayloadSchema(mediaType) {
+        return this.toPayload()?.toSchema(mediaType);
     }
     /**
      * Resolve the inbound parameters (e.g. the signature/headers a handler

package/esm/parse/logBodyMediaTypes.d.ts

@@ -0,0 +1,27 @@
+import type { ParseContextType } from '../context/parseTypes.js';
+import type { StackTrail } from '../context/StackTrail.js';
+import type { OasMediaType } from '../oas/mediaType/MediaType.js';
+export type LogBodyMediaTypesArgs = {
+    /** The parsed `content` map of a response or request body. */
+    content: Record<string, OasMediaType> | undefined;
+    /** Trail of the response or request body; the issue is logged at its `content` key. */
+    stackTrail: StackTrail;
+    context: ParseContextType;
+};
+/**
+ * Log at most one issue for a parsed response or request body, from the same
+ * choice the lookups make (`toJsonContent`), so the issue and the lookup
+ * cannot disagree. Called after the body is built, so a body that fails to
+ * parse logs nothing.
+ *
+ * - `WILDCARD_MEDIA_TYPE` (`warning`): the body is read from `*\/*` as JSON,
+ *   though the document does not say its format.
+ * - `NO_JSON_MEDIA_TYPE` (`debug`): no lookup reads the body, and its keys
+ *   include a range (`*\/*` with a scalar schema, `application/*`), so its
+ *   format is unknown.
+ *
+ * A body with only specific non-JSON types (`multipart/form-data`,
+ * `application/octet-stream`, `text/plain`) logs nothing: that is a normal
+ * text, form or binary body.
+ */
+export declare const logBodyMediaTypes: ({ content, stackTrail, context }: LogBodyMediaTypesArgs) => void;

package/esm/parse/logBodyMediaTypes.js

@@ -0,0 +1,50 @@
+import { isAnyMediaType, toJsonContent, toMediaTypeEssence } from '../oas/mediaType/jsonMediaType.js';
+/**
+ * Log at most one issue for a parsed response or request body, from the same
+ * choice the lookups make (`toJsonContent`), so the issue and the lookup
+ * cannot disagree. Called after the body is built, so a body that fails to
+ * parse logs nothing.
+ *
+ * - `WILDCARD_MEDIA_TYPE` (`warning`): the body is read from `*\/*` as JSON,
+ *   though the document does not say its format.
+ * - `NO_JSON_MEDIA_TYPE` (`debug`): no lookup reads the body, and its keys
+ *   include a range (`*\/*` with a scalar schema, `application/*`), so its
+ *   format is unknown.
+ *
+ * A body with only specific non-JSON types (`multipart/form-data`,
+ * `application/octet-stream`, `text/plain`) logs nothing: that is a normal
+ * text, form or binary body.
+ */
+export const logBodyMediaTypes = ({ content, stackTrail, context }) => {
+    const mediaTypes = Object.keys(content ?? {});
+    if (mediaTypes.length === 0) {
+        return;
+    }
+    const listed = mediaTypes.map(mediaType => `"${mediaType}"`).join(', ');
+    // `parent` is only the keys: the issue log serializes it on every issue.
+    const parent = { mediaTypes };
+    const chosen = toJsonContent(content);
+    if (chosen !== undefined) {
+        if (isAnyMediaType(chosen.mediaType)) {
+            context.logIssue({
+                key: 'content',
+                level: 'warning',
+                type: 'WILDCARD_MEDIA_TYPE',
+                message: `Content has no JSON media type (${listed}), so the body is read from "*/*" as JSON although the document does not say its format`,
+                parent,
+                stackTrail
+            });
+        }
+        return;
+    }
+    if (mediaTypes.some(mediaType => toMediaTypeEssence(mediaType).includes('*'))) {
+        context.logIssue({
+            key: 'content',
+            level: 'debug',
+            type: 'NO_JSON_MEDIA_TYPE',
+            message: `Content names only a media type range or non-JSON types (${listed}), so no lookup without a media type reads its schema`,
+            parent,
+            stackTrail
+        });
+    }
+};

package/esm/parse/toOasDialect.d.ts

@@ -1,12 +1,13 @@
 /**
  * The OpenAPI dialects SKMTC parses natively. Each has its own complete
- * parser tree (`core/parse/v3-0`, `core/parse/v3-1`); this module is the
- * ONLY place a document's version is examined. Once a dialect is chosen
- * the matching parser runs top-to-bottom and never re-checks the version,
- * so a 3.0 document can never reach a line of 3.1 logic (or vice versa) —
- * there is no downstream version branch to get wrong.
+ * parser tree (`core/parse/v3-0`, `core/parse/v3-1`, `core/parse/v3-2`);
+ * this module is the ONLY place a document's version is examined. Once a
+ * dialect is chosen the matching parser runs top-to-bottom and never
+ * re-checks the version, so a 3.0 document can never reach a line of 3.1
+ * logic (or vice versa) — there is no downstream version branch to get
+ * wrong.
  */
-export type OasDialect = '3.0' | '3.1';
+export type OasDialect = '3.0' | '3.1' | '3.2';
 /**
  * Map an OpenAPI document's `openapi` version string to its parser
  * dialect.
@@ -15,7 +16,7 @@ export type OasDialect = '3.0' | '3.1';
  * precondition failure — there is no sensible parser to pick — so it throws
  * rather than silently defaulting to one dialect and masking the error. A
  * loose `openapi.startsWith('3.1') ? '3.1' : '3.0'` would route every
- * non-3.1 value (a typo, `3.2`, `4.0`, a missing field) into 3.0 unnoticed;
+ * non-3.1 value (a typo, `4.0`, a missing field) into 3.0 unnoticed;
  * that is the footgun this avoids. Mirrors `@skmtc/convert`'s
  * `toV3Document`, which likewise throws on an unrecognized version.
  *

package/esm/parse/toOasDialect.js

@@ -6,7 +6,7 @@
  * precondition failure — there is no sensible parser to pick — so it throws
  * rather than silently defaulting to one dialect and masking the error. A
  * loose `openapi.startsWith('3.1') ? '3.1' : '3.0'` would route every
- * non-3.1 value (a typo, `3.2`, `4.0`, a missing field) into 3.0 unnoticed;
+ * non-3.1 value (a typo, `4.0`, a missing field) into 3.0 unnoticed;
  * that is the footgun this avoids. Mirrors `@skmtc/convert`'s
  * `toV3Document`, which likewise throws on an unrecognized version.
  *
@@ -18,5 +18,7 @@ export const toOasDialect = (openapi) => {
         return '3.0';
     if (openapi?.startsWith('3.1'))
         return '3.1';
-    throw new Error(`Unsupported OpenAPI version: ${openapi ?? '(missing)'} — expected 3.0.x or 3.1.x`);
+    if (openapi?.startsWith('3.2'))
+        return '3.2';
+    throw new Error(`Unsupported OpenAPI version: ${openapi ?? '(missing)'} — expected 3.0.x, 3.1.x or 3.2.x`);
 };

package/esm/parse/v3-0/methods.d.ts

@@ -0,0 +1,11 @@
+import type { Method } from '../../types/Method.js';
+/**
+ * A path item field that holds an Operation Object in OpenAPI 3.0. A
+ * `query` key is not one of them: it stays a skipped field.
+ */
+export type PathItemMethod = Exclude<Method, 'query'>;
+export declare const pathItemMethods: readonly PathItemMethod[];
+/**
+ * Returns `key` as a {@link PathItemMethod} when it is one of {@link pathItemMethods}.
+ */
+export declare const toPathItemMethod: (key: string) => PathItemMethod | undefined;

package/esm/parse/v3-0/methods.js

@@ -0,0 +1,16 @@
+export const pathItemMethods = [
+    'get',
+    'put',
+    'post',
+    'delete',
+    'options',
+    'head',
+    'patch',
+    'trace'
+];
+/**
+ * Returns `key` as a {@link PathItemMethod} when it is one of {@link pathItemMethods}.
+ */
+export const toPathItemMethod = (key) => {
+    return pathItemMethods.find(method => method === key);
+};

package/esm/parse/v3-0/operation/toOperationsV3.js

@@ -3,7 +3,7 @@ import { toResponsesV3 } from '../response/toResponseV3.js';
 import { toParameterListV3 } from '../parameter/toParameterV3.js';
 import { OasOperation } from '../../../oas/operation/Operation.js';
 import { toPathItemV3 } from '../pathItem/toPathItemV3.js';
-import { methodValues } from '../../../types/Method.js';
+import { toPathItemMethod } from '../methods.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 import { toSecurityRequirementsV3 } from '../securityRequirement/toSecurityRequirement.js';
 import { isEmpty } from '../../../helpers/isEmpty.js';
@@ -54,14 +54,14 @@ export const toOperationsV3 = ({ paths, stackTrail, context }) => {
                 return [];
             }
             const cleaned = Object.entries(pathItem).reduce(({ rest, methodObject }, [key, operation]) => {
-                const isMethod = methodValues.includes(key);
-                if (isMethod) {
-                    const { [key]: _deleted, ...remaining } = rest;
+                const method = toPathItemMethod(key);
+                if (method) {
+                    const { [method]: _deleted, ...remaining } = rest;
                     return {
                         rest: remaining,
                         methodObject: {
                             ...methodObject,
-                            [key]: operation
+                            [method]: operation
                         }
                     };
                 }

package/esm/parse/v3-0/parameter/toParameterV3.d.ts

@@ -1,9 +1,10 @@
 import type { ParseContextType } from '../../../context/parseTypes.js';
-import { type OasParameterLocation } from '../../../oas/parameter/parameter-types.js';
+import type { OasParameterLocation } from '../../../oas/parameter/parameter-types.js';
 import type { OpenAPIV3 } from 'openapi-types';
 import { OasParameter } from '../../../oas/parameter/Parameter.js';
 import type { OasRef } from '../../../oas/ref/Ref.js';
 import type { StackTrail } from '../../../context/StackTrail.js';
+type ParameterLocation = Exclude<OasParameterLocation, 'querystring'>;
 export type ToParameterListV3Args = {
     parameters: (OpenAPIV3.ParameterObject | OpenAPIV3.ReferenceObject)[] | undefined;
     stackTrail: StackTrail;
@@ -29,7 +30,7 @@ export type ToParameterV3Args = {
 };
 export type ToStyleArgs = {
     style: string | undefined;
-    location: OasParameterLocation;
+    location: ParameterLocation;
     stackTrail: StackTrail;
 };
 export type ToExplodeArgs = {
@@ -37,3 +38,4 @@ export type ToExplodeArgs = {
     style: string | undefined;
     stackTrail: StackTrail;
 };
+export {};

package/esm/parse/v3-0/parameter/toParameterV3.js

@@ -1,6 +1,5 @@
 import { tryParseAt } from '../../../context/tryParseAt.js';
 import { isRef } from '../../../helpers/refFns.js';
-import { oasParameterLocation, oasParameterStyle } from '../../../oas/parameter/parameter-types.js';
 import { toExamplesV3 } from '../example/toExamplesV3.js';
 import { toRefV31 } from '../ref/toRefV31.js';
 import { toOptionalSchemaV3 } from '../schema/toSchemasV3.js';
@@ -8,6 +7,21 @@ import { toOptionalMediaTypeItemsV3 } from '../mediaType/toMediaTypeItemV3.js';
 import { OasParameter } from '../../../oas/parameter/Parameter.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 import * as v from 'valibot';
+const parameterLocation = v.enum({
+    query: 'query',
+    header: 'header',
+    path: 'path',
+    cookie: 'cookie'
+});
+const parameterStyle = v.enum({
+    matrix: 'matrix',
+    label: 'label',
+    form: 'form',
+    simple: 'simple',
+    spaceDelimited: 'spaceDelimited',
+    pipeDelimited: 'pipeDelimited',
+    deepObject: 'deepObject'
+});
 export const toParameterListV3 = ({ parameters, stackTrail, context }) => {
     if (!parameters) {
         return undefined;
@@ -52,7 +66,7 @@ const toParameterV3 = ({ parameter, stackTrail, context }) => {
         stackTrail,
         parentType: 'parameter'
     });
-    const parsedLocation = v.parse(oasParameterLocation, location);
+    const parsedLocation = v.parse(parameterLocation, location);
     if (parsedLocation === 'path' && !required) {
         console.warn(`Path parameters must be required`);
     }
@@ -82,7 +96,7 @@ const toParameterV3 = ({ parameter, stackTrail, context }) => {
     return context.withStackTrail(stackTrail, () => new OasParameter(fields, context));
 };
 const toStyle = ({ style, location, stackTrail }) => {
-    const parsed = v.parse(v.optional(oasParameterStyle), style);
+    const parsed = v.parse(v.optional(parameterStyle), style);
     if (parsed !== undefined) {
         return parsed;
     }

package/esm/parse/v3-0/requestBody/toRequestBodiesV3.js

@@ -3,6 +3,7 @@ import { toRefV31 } from '../ref/toRefV31.js';
 import { toMediaTypeItemsV3 } from '../mediaType/toMediaTypeItemV3.js';
 import { OasRequestBody } from '../../../oas/requestBody/RequestBody.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
+import { logBodyMediaTypes } from '../../logBodyMediaTypes.js';
 export const toRequestBodyV3 = ({ requestBody, stackTrail, context }) => {
     if (!requestBody) {
         return undefined;
@@ -26,7 +27,9 @@ export const toRequestBodyV3 = ({ requestBody, stackTrail, context }) => {
         required,
         extensionFields
     };
-    return context.withStackTrail(stackTrail, () => new OasRequestBody(fields, context));
+    const parsed = context.withStackTrail(stackTrail, () => new OasRequestBody(fields, context));
+    logBodyMediaTypes({ content: fields.content, stackTrail, context });
+    return parsed;
 };
 export const toRequestBodiesV3 = ({ requestBodies, stackTrail, context }) => {
     if (!requestBodies) {

package/esm/parse/v3-0/response/toResponseV3.js

@@ -6,6 +6,7 @@ import { toOptionalMediaTypeItemsV3 } from '../mediaType/toMediaTypeItemV3.js';
 import { OasResponse } from '../../../oas/response/Response.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 import { tryParseAt } from '../../../context/tryParseAt.js';
+import { logBodyMediaTypes } from '../../logBodyMediaTypes.js';
 export const toResponsesV3 = ({ responses, stackTrail, context }) => {
     const output = {};
     const entries = Object.entries(responses);
@@ -45,11 +46,13 @@ export const toResponseV3 = ({ response, stackTrail, context }) => {
     const parsedHeaders = stackTrail.trace('headers', st => toHeadersV3({ headers, stackTrail: st, context }));
     const parsedLinks = stackTrail.trace('links', st => toLinksV3({ links, stackTrail: st, context }));
     const parsedContent = stackTrail.trace('content', st => toOptionalMediaTypeItemsV3({ content, stackTrail: st, context }));
-    return context.withStackTrail(stackTrail, () => new OasResponse({
+    const parsed = context.withStackTrail(stackTrail, () => new OasResponse({
         description,
         headers: parsedHeaders,
         links: parsedLinks,
         content: parsedContent,
         extensionFields
     }, context));
+    logBodyMediaTypes({ content: parsedContent, stackTrail, context });
+    return parsed;
 };

package/esm/parse/v3-0/securitySchemes/toSecuritySchemes.js

@@ -1,10 +1,10 @@
 import { OasHttpSecurityScheme, OasApiKeySecurityScheme, OasOAuth2SecurityScheme, OasOpenIdSecurityScheme } from '../../../oas/securitySchemes/SecurityScheme.js';
 import * as v from 'valibot';
-import { oasApiKeySecuritySchemeData, oasHttpSecuritySchemeData, oasOAuth2SecuritySchemeData, oasOpenIdSecuritySchemeData } from '../../../oas/securitySchemes/security-scheme-types.js';
+import { oasApiKeySecuritySchemeData, oasHttpSecuritySchemeData, oasOAuth2FlowsData, oasOAuth2SecuritySchemeData, oasOpenIdSecuritySchemeData } from '../../../oas/securitySchemes/security-scheme-types.js';
 import { toRefV31 } from '../ref/toRefV31.js';
 import { isRef } from '../../../helpers/refFns.js';
-import { isEmpty } from '../../../helpers/isEmpty.js';
 import { tryParseAt } from '../../../context/tryParseAt.js';
+import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 export const toSecuritySchemesV3 = ({ securitySchemes, stackTrail, context }) => {
     if (!securitySchemes) {
         return undefined;
@@ -27,21 +27,29 @@ export const toSecuritySchemesV3 = ({ securitySchemes, stackTrail, context }) =>
     }
     return output;
 };
+/**
+ * Log the keys of `value` that `known` does not name as skipped fields.
+ * `v.parse` on a `v.object` schema strips unknown keys, so they are read
+ * off the raw object. `x-` extensions are not logged.
+ */
+const logSkippedKeys = ({ value, known, parentType, stackTrail, context }) => {
+    const skipped = Object.fromEntries(Object.entries(value).filter(([key]) => !Object.hasOwn(known, key)));
+    toSpecificationExtensionsV3({ skipped, parent: value, parentType, stackTrail, context });
+};
 const toSecuritySchemeV3 = ({ securityScheme, stackTrail, context }) => {
     if (isRef(securityScheme)) {
         return toRefV31({ ref: securityScheme, refType: 'securityScheme', stackTrail, context });
     }
     switch (securityScheme.type) {
         case 'http': {
-            const { type: _type, description, scheme, bearerFormat, ...skipped } = v.parse(oasHttpSecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:http'
-                });
-            }
+            const { description, scheme, bearerFormat } = v.parse(oasHttpSecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasHttpSecuritySchemeData.entries,
+                parentType: 'securityScheme:http',
+                stackTrail,
+                context
+            });
             return new OasHttpSecurityScheme({
                 description,
                 scheme,
@@ -49,15 +57,14 @@ const toSecuritySchemeV3 = ({ securityScheme, stackTrail, context }) => {
             });
         }
         case 'apiKey': {
-            const { type: _type, in: location, description, name, ...skipped } = v.parse(oasApiKeySecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:apiKey'
-                });
-            }
+            const { in: location, description, name } = v.parse(oasApiKeySecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasApiKeySecuritySchemeData.entries,
+                parentType: 'securityScheme:apiKey',
+                stackTrail,
+                context
+            });
             return new OasApiKeySecurityScheme({
                 description,
                 name,
@@ -65,30 +72,35 @@ const toSecuritySchemeV3 = ({ securityScheme, stackTrail, context }) => {
             });
         }
         case 'oauth2': {
-            const { type: _type, flows, description, ...skipped } = v.parse(oasOAuth2SecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:oauth2'
-                });
-            }
+            const { flows, description } = v.parse(oasOAuth2SecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasOAuth2SecuritySchemeData.entries,
+                parentType: 'securityScheme:oauth2',
+                stackTrail,
+                context
+            });
+            stackTrail.trace('flows', st => logSkippedKeys({
+                value: securityScheme.flows,
+                known: oasOAuth2FlowsData.entries,
+                parentType: 'oauthFlows',
+                stackTrail: st,
+                context
+            }));
             return new OasOAuth2SecurityScheme({
                 description,
                 flows
             });
         }
         case 'openIdConnect': {
-            const { type: _type, description, openIdConnectUrl, ...skipped } = v.parse(oasOpenIdSecuritySchemeData, securityScheme);
-            if (!isEmpty(skipped)) {
-                context.logSkippedFields({
-                    skipped,
-                    parent: securityScheme,
-                    stackTrail,
-                    parentType: 'securityScheme:openIdConnect'
-                });
-            }
+            const { description, openIdConnectUrl } = v.parse(oasOpenIdSecuritySchemeData, securityScheme);
+            logSkippedKeys({
+                value: securityScheme,
+                known: oasOpenIdSecuritySchemeData.entries,
+                parentType: 'securityScheme:openIdConnect',
+                stackTrail,
+                context
+            });
             return new OasOpenIdSecurityScheme({
                 description,
                 openIdConnectUrl

package/esm/parse/v3-0/webhook/toWebhooksV3.js

@@ -3,7 +3,7 @@ import { toResponsesV3 } from '../response/toResponseV3.js';
 import { toParameterListV3 } from '../parameter/toParameterV3.js';
 import { OasWebhook } from '../../../oas/webhook/Webhook.js';
 import { toPathItemV3 } from '../pathItem/toPathItemV3.js';
-import { methodValues } from '../../../types/Method.js';
+import { toPathItemMethod } from '../methods.js';
 import { toSpecificationExtensionsV3 } from '../specificationExtensions/toSpecificationExtensionsV3.js';
 import { toSecurityRequirementsV3 } from '../securityRequirement/toSecurityRequirement.js';
 import { isEmpty } from '../../../helpers/isEmpty.js';
@@ -69,14 +69,14 @@ export const toWebhooksV3 = ({ webhooks, stackTrail, context }) => {
                 return [];
             }
             const cleaned = Object.entries(pathItem).reduce(({ rest, methodObject }, [key, operation]) => {
-                const isMethod = methodValues.includes(key);
-                if (isMethod) {
-                    const { [key]: _deleted, ...remaining } = rest;
+                const method = toPathItemMethod(key);
+                if (method) {
+                    const { [method]: _deleted, ...remaining } = rest;
                     return {
                         rest: remaining,
                         methodObject: {
                             ...methodObject,
-                            [key]: operation
+                            [method]: operation
                         }
                     };
                 }

package/esm/parse/v3-1/methods.d.ts

@@ -0,0 +1,11 @@
+import type { Method } from '../../types/Method.js';
+/**
+ * A path item field that holds an Operation Object in OpenAPI 3.1. A
+ * `query` key is not one of them: it stays a skipped field.
+ */
+export type PathItemMethod = Exclude<Method, 'query'>;
+export declare const pathItemMethods: readonly PathItemMethod[];
+/**
+ * Returns `key` as a {@link PathItemMethod} when it is one of {@link pathItemMethods}.
+ */
+export declare const toPathItemMethod: (key: string) => PathItemMethod | undefined;

package/esm/parse/v3-1/methods.js

@@ -0,0 +1,16 @@
+export const pathItemMethods = [
+    'get',
+    'put',
+    'post',
+    'delete',
+    'options',
+    'head',
+    'patch',
+    'trace'
+];
+/**
+ * Returns `key` as a {@link PathItemMethod} when it is one of {@link pathItemMethods}.
+ */
+export const toPathItemMethod = (key) => {
+    return pathItemMethods.find(method => method === key);
+};