mt5api 1.0.1__tar.gz → 1.0.3__tar.gz

{mt5api-1.0.1 → mt5api-1.0.3}/.agents/skills/local-qa/scripts/qa.sh

@@ -3,6 +3,11 @@
 set -euox pipefail
 cd "$(git rev-parse --show-toplevel)"
 
+COOLDOWN_DAYS=7
+export UV_EXCLUDE_NEWER="${COOLDOWN_DAYS} days"
+export NPM_CONFIG_MIN_RELEASE_AGE="${COOLDOWN_DAYS}"
+export PNPM_CONFIG_MINIMUM_RELEASE_AGE=$((COOLDOWN_DAYS * 24 * 60))
+
 # Python
 uv run ruff format .
 uv run ruff check --fix .

mt5api-1.0.3/.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Default owner
+* @dceoy

{mt5api-1.0.1 → mt5api-1.0.3}/.github/workflows/ci.yml

@@ -35,7 +35,7 @@ jobs:
       || (github.event_name == 'workflow_dispatch' && inputs.workflow == 'lint-and-test')
     permissions:
       contents: read
-    uses: dceoy/gh-actions-for-devops/.github/workflows/python-package-lint-and-scan.yml@main   # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/python-package-lint-and-scan.yml@main   # zizmor: ignore[unpinned-uses]
     with:
       package-path: .
       runs-on: windows-latest
@@ -46,7 +46,7 @@ jobs:
       || (github.event_name == 'workflow_dispatch' && inputs.workflow == 'lint-and-test')
     permissions:
       contents: read
-    uses: dceoy/gh-actions-for-devops/.github/workflows/python-package-test.yml@main  # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/python-package-test.yml@main  # zizmor: ignore[unpinned-uses]
     with:
       package-path: .
       runs-on: windows-latest
@@ -56,7 +56,7 @@ jobs:
       || (github.event_name == 'workflow_dispatch' && inputs.workflow == 'docs-deploy')
     permissions:
       contents: write
-    uses: dceoy/gh-actions-for-devops/.github/workflows/python-package-mkdocs-gh-deploy.yml@main  # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/python-package-mkdocs-gh-deploy.yml@main  # zizmor: ignore[unpinned-uses]
     with:
       package-path: .
       runs-on: ubuntu-slim
@@ -71,7 +71,7 @@ jobs:
       contents: read
       security-events: write
       actions: read
-    uses: dceoy/gh-actions-for-devops/.github/workflows/github-codeql-analysis.yml@main  # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/github-codeql-analysis.yml@main  # zizmor: ignore[unpinned-uses]
     with:
       language: >
         ["python"]
@@ -81,7 +81,7 @@ jobs:
     needs:
       - python-lint-and-scan
       - python-test
-    uses: dceoy/gh-actions-for-devops/.github/workflows/dependabot-auto-merge.yml@main  # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/dependabot-auto-merge.yml@main  # zizmor: ignore[unpinned-uses]
     permissions:
       contents: write
       pull-requests: write

{mt5api-1.0.1 → mt5api-1.0.3}/.github/workflows/claude.yml

@@ -35,7 +35,7 @@ jobs:
       issues: write
       id-token: write
       actions: read
-    uses: dceoy/gh-actions-for-devops/.github/workflows/claude-code-review.yml@main  # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/claude-code-review.yml@main  # zizmor: ignore[unpinned-uses]
     secrets:
       CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}  # zizmor: ignore[secrets-outside-env]
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -51,7 +51,7 @@ jobs:
       issues: write
       id-token: write
       actions: read
-    uses: dceoy/gh-actions-for-devops/.github/workflows/claude-code-bot.yml@main  # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/claude-code-bot.yml@main  # zizmor: ignore[unpinned-uses]
     secrets:
       CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}  # zizmor: ignore[secrets-outside-env]
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

{mt5api-1.0.1 → mt5api-1.0.3}/.github/workflows/release.yml

@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: write
       id-token: write
-    uses: dceoy/gh-actions-for-devops/.github/workflows/python-package-release-on-pypi-and-github.yml@main  # zizmor: ignore[unpinned-uses]
+    uses: dceoy/gha-for-devops/.github/workflows/python-package-release-on-pypi-and-github.yml@main  # zizmor: ignore[unpinned-uses]
     with:
       package-path: .
       create-github-release: true
@@ -39,6 +39,6 @@ jobs:
           name: ${{ needs.build-and-release.outputs.distribution-artifact-name }}
           path: dist/
       - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # v1.14.0
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
         with:
           verbose: true

mt5api-1.0.3/AGENTS.md

@@ -0,0 +1,38 @@
+# Repository Guidelines
+
+## Build, Test, and Development Commands
+
+- `.agents/skills/local-qa/scripts/qa.sh`: run the repository QA workflow after
+  any file update. This wraps formatting, linting, type checks, tests, Markdown
+  formatting, and workflow/security checks.
+
+The API server runtime requires Windows with MetaTrader 5 installed and logged
+in. Non-Windows systems are suitable for editing docs and most mocked tests.
+
+## Testing Guidelines
+
+Parametrize unit tests with `pytest.mark.parametrize` when the same behavior
+should be verified across multiple input and expected-output cases. Prefer
+mocked MT5/pdmt5 interactions unless a test explicitly requires a Windows MT5
+terminal.
+
+## Design Principles
+
+Apply KISS, DRY, and YAGNI when changing code. Prefer the simplest direct
+implementation that satisfies the current requirement. Remove duplication when
+it improves clarity or prevents drift, but avoid abstractions that do not serve
+an immediate need. Keep changes small, focused, and easy to review.
+
+## Commit & Pull Request Guidelines
+
+Keep commits scoped to one logical change. Before committing or opening a PR,
+run `.agents/skills/local-qa/scripts/qa.sh`. Pull requests should describe the
+behavior change, list verification commands, link related issues when
+applicable, and call out any runtime impact for Windows/MT5 users.
+
+## Security & Configuration Tips
+
+Do not commit credentials, terminal account details, or real API keys. Configure
+runtime values through environment variables such as `MT5API_SECRET_KEY`,
+`MT5API_ROUTER_PREFIX`, `MT5API_HOST`, `MT5API_PORT`, and
+`MT5API_LOG_LEVEL`.

{mt5api-1.0.1 → mt5api-1.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mt5api
-Version: 1.0.1
+Version: 1.0.3
 Summary: MetaTrader 5 REST API
 Project-URL: Repository, https://github.com/dceoy/mt5api.git
 Author-email: dceoy <dceoy@users.noreply.github.com>
@@ -15,11 +15,12 @@ Classifier: Operating System :: Microsoft :: Windows
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
 Classifier: Topic :: Office/Business :: Financial :: Investment
-Requires-Python: <3.14,>=3.11
+Requires-Python: <3.15,>=3.11
 Requires-Dist: fastapi>=0.115.0
-Requires-Dist: httpx>=0.27.0
-Requires-Dist: pdmt5>=1.1.1
+Requires-Dist: pandas>=3.0.3
+Requires-Dist: pdmt5>=1.2.0
 Requires-Dist: pyarrow>=18.0.0
+Requires-Dist: pydantic>=2.13.4
 Requires-Dist: python-multipart>=0.0.31
 Requires-Dist: uvicorn[standard]>=0.32.0
 Description-Content-Type: text/markdown
@@ -85,7 +86,6 @@ graph TB
 
 ## Requirements
 
-- Python 3.11+
 - Windows host with MetaTrader 5 terminal installed and logged in
 - Linux and macOS are not supported for the API server runtime, but they work
   for HTTP clients

{mt5api-1.0.1 → mt5api-1.0.3}/README.md

@@ -59,7 +59,6 @@ graph TB
 
 ## Requirements
 
-- Python 3.11+
 - Windows host with MetaTrader 5 terminal installed and logged in
 - Linux and macOS are not supported for the API server runtime, but they work
   for HTTP clients

{mt5api-1.0.1 → mt5api-1.0.3}/docs/api/deployment.md

@@ -10,7 +10,6 @@ macOS because the `MetaTrader5` Python package is supported only on Windows.
 
 - Windows 10/11
 - MetaTrader 5 installed and logged in
-- Python 3.11+
 - `mt5api` installed
 - PowerShell access with permission to install and manage services
 

{mt5api-1.0.1 → mt5api-1.0.3}/docs/api/rest-api.md

@@ -10,7 +10,6 @@ system.
 
 ## Runtime Requirements
 
-- Python 3.11+
 - Windows host with MetaTrader 5 terminal installed and logged in
 - Linux and macOS are not supported for the API server runtime, but they work
   for HTTP clients

{mt5api-1.0.1 → mt5api-1.0.3}/docs/index.md

@@ -26,7 +26,6 @@ system.
 
 ## Requirements
 
-- Python 3.11+
 - Windows OS with MetaTrader 5 terminal installed and logged in
 - Linux and macOS are not supported for the API server runtime, but they work
   for HTTP clients

{mt5api-1.0.1 → mt5api-1.0.3}/mt5api/constants.py

@@ -1,12 +1,14 @@
 """Application-wide constants."""
 
+from importlib.metadata import version
+
 API_TITLE = "MT5 REST API"
 API_DESCRIPTION = (
     "REST API for MetaTrader 5 data access and non-executing terminal utilities. "
     "Provides market data, account information, trading history, calculations, "
     "and safe operational endpoints via HTTP."
 )
-API_VERSION = "1.0.1"
+API_VERSION = version("mt5api")
 API_DOCS_URL = "/docs"
 API_REDOC_URL = "/redoc"
 API_OPENAPI_URL = "/openapi.json"

{mt5api-1.0.1 → mt5api-1.0.3}/mt5api/main.py

@@ -81,17 +81,13 @@ def _strip_auth_from_openapi(openapi_schema: dict[str, Any]) -> None:
     """Remove API key requirements from OpenAPI when auth is disabled."""
     openapi_schema.pop("security", None)
 
-    components = openapi_schema.get("components")
-    if isinstance(components, dict):
-        security_schemes = components.get("securitySchemes")
-        if isinstance(security_schemes, dict):
-            security_schemes.pop(API_KEY_SECURITY_SCHEME_NAME, None)
-            if not security_schemes:
-                components.pop("securitySchemes", None)
+    components = openapi_schema.get("components", {})
+    security_schemes = components.get("securitySchemes", {})
+    security_schemes.pop(API_KEY_SECURITY_SCHEME_NAME, None)
+    if not security_schemes:
+        components.pop("securitySchemes", None)
 
     for methods in openapi_schema.get("paths", {}).values():
-        if not isinstance(methods, dict):
-            continue
         for operation in methods.values():
             if isinstance(operation, dict):
                 operation.pop("security", None)
@@ -100,16 +96,12 @@ def _strip_auth_from_openapi(openapi_schema: dict[str, Any]) -> None:
 def _patch_validation_error_responses(openapi_schema: dict[str, Any]) -> None:
     """Advertise RFC 7807 Problem Details for request validation failures."""
     components = openapi_schema.setdefault("components", {})
-    if not isinstance(components, dict):
-        return
-
     schemas = components.setdefault("schemas", {})
-    if isinstance(schemas, dict):
-        schemas["ErrorResponse"] = ErrorResponse.model_json_schema(
-            ref_template="#/components/schemas/{model}",
-        )
-        schemas.pop("HTTPValidationError", None)
-        schemas.pop("ValidationError", None)
+    schemas["ErrorResponse"] = ErrorResponse.model_json_schema(
+        ref_template="#/components/schemas/{model}",
+    )
+    schemas.pop("HTTPValidationError", None)
+    schemas.pop("ValidationError", None)
 
     error_response = {
         "description": "Validation Error",
@@ -121,8 +113,6 @@ def _patch_validation_error_responses(openapi_schema: dict[str, Any]) -> None:
     }
 
     for methods in openapi_schema.get("paths", {}).values():
-        if not isinstance(methods, dict):
-            continue
         for operation in methods.values():
             if isinstance(operation, dict) and "422" in operation.get("responses", {}):
                 operation["responses"]["422"] = error_response

{mt5api-1.0.1 → mt5api-1.0.3}/mt5api/models.py

@@ -6,7 +6,22 @@ from datetime import datetime  # noqa: TC003
 from enum import StrEnum
 from typing import Annotated, Any, Self, TypeAlias
 
-import pdmt5
+from pdmt5 import (
+    COPY_TICKS_MAP,
+    ORDER_TYPE_MAP,
+    TIMEFRAME_MAP,
+    parse_copy_ticks,
+    parse_order_type,
+    parse_timeframe,
+)
+from pdmt5.constants import (
+    list_copy_ticks_names,
+    list_copy_ticks_values,
+    list_order_type_names,
+    list_order_type_values,
+    list_timeframe_names,
+    list_timeframe_values,
+)
 from pydantic import (
     BaseModel,
     BeforeValidator,
@@ -76,17 +91,17 @@ def _build_mt5_constant_json_schema(
 
 def get_mt5_timeframe_values() -> tuple[int, ...]:
     """Return all available MT5 timeframe values from pdmt5."""
-    return tuple(pdmt5.list_timeframe_values())
+    return tuple(list_timeframe_values())
 
 
 def get_mt5_timeframe_names() -> tuple[str, ...]:
     """Return all available MT5 timeframe names from pdmt5."""
-    return tuple(pdmt5.list_timeframe_names())
+    return tuple(list_timeframe_names())
 
 
 def get_mt5_timeframe_examples() -> list[int]:
     """Return common MT5 timeframe examples from pdmt5."""
-    return [pdmt5.TIMEFRAME_MAP[name] for name in _TIMEFRAME_EXAMPLE_NAMES]
+    return [TIMEFRAME_MAP[name] for name in _TIMEFRAME_EXAMPLE_NAMES]
 
 
 def get_mt5_timeframe_example_names() -> list[str]:
@@ -96,17 +111,17 @@ def get_mt5_timeframe_example_names() -> list[str]:
 
 def get_mt5_copy_ticks_values() -> tuple[int, ...]:
     """Return all MT5 COPY_TICKS values from pdmt5."""
-    return tuple(pdmt5.list_copy_ticks_values())
+    return tuple(list_copy_ticks_values())
 
 
 def get_mt5_copy_ticks_names() -> tuple[str, ...]:
     """Return all MT5 COPY_TICKS names from pdmt5."""
-    return tuple(pdmt5.list_copy_ticks_names())
+    return tuple(list_copy_ticks_names())
 
 
 def get_mt5_copy_ticks_examples() -> list[int]:
     """Return common MT5 COPY_TICKS integer examples."""
-    return [pdmt5.COPY_TICKS_MAP[name] for name in _COPY_TICKS_EXAMPLE_NAMES]
+    return [COPY_TICKS_MAP[name] for name in _COPY_TICKS_EXAMPLE_NAMES]
 
 
 def get_mt5_copy_ticks_example_names() -> list[str]:
@@ -120,7 +135,7 @@ def _validate_mt5_timeframe(value: object) -> int:
     Returns:
         The validated integer timeframe value.
     """
-    return pdmt5.parse_timeframe(value)
+    return parse_timeframe(value)
 
 
 def _validate_mt5_copy_ticks(value: object) -> int:
@@ -129,22 +144,22 @@ def _validate_mt5_copy_ticks(value: object) -> int:
     Returns:
         The validated integer COPY_TICKS value.
     """
-    return pdmt5.parse_copy_ticks(value)
+    return parse_copy_ticks(value)
 
 
 def get_mt5_order_type_values() -> tuple[int, ...]:
     """Return all available MT5 ORDER_TYPE values from pdmt5."""
-    return tuple(pdmt5.list_order_type_values())
+    return tuple(list_order_type_values())
 
 
 def get_mt5_order_type_names() -> tuple[str, ...]:
     """Return all available MT5 ORDER_TYPE names from pdmt5."""
-    return tuple(pdmt5.list_order_type_names())
+    return tuple(list_order_type_names())
 
 
 def get_mt5_order_type_examples() -> list[int]:
     """Return common MT5 ORDER_TYPE integer examples."""
-    return [pdmt5.ORDER_TYPE_MAP[name] for name in _ORDER_TYPE_EXAMPLE_NAMES]
+    return [ORDER_TYPE_MAP[name] for name in _ORDER_TYPE_EXAMPLE_NAMES]
 
 
 def get_mt5_order_type_example_names() -> list[str]:
@@ -158,7 +173,7 @@ def _validate_mt5_order_type(value: object) -> int:
     Returns:
         The validated integer ORDER_TYPE value.
     """
-    return pdmt5.parse_order_type(value)
+    return parse_order_type(value)
 
 
 Mt5Timeframe: TypeAlias = Annotated[
@@ -404,7 +419,7 @@ class TicksFromRequest(BaseModel):
         le=100000,
     )
     flags: Mt5CopyTicks = Field(
-        default=pdmt5.COPY_TICKS_MAP["COPY_TICKS_ALL"],
+        default=COPY_TICKS_MAP["COPY_TICKS_ALL"],
         description=_COPY_TICKS_DESCRIPTION,
     )
     format: ResponseFormat | None = Field(default=None)
@@ -417,7 +432,7 @@ class TicksRangeRequest(BaseModel):
     date_from: datetime = Field(..., description="Start date (ISO 8601)")
     date_to: datetime = Field(..., description="End date (ISO 8601)")
     flags: Mt5CopyTicks = Field(
-        default=pdmt5.COPY_TICKS_MAP["COPY_TICKS_ALL"],
+        default=COPY_TICKS_MAP["COPY_TICKS_ALL"],
         description=_COPY_TICKS_DESCRIPTION,
     )
     format: ResponseFormat | None = Field(default=None)

{mt5api-1.0.1 → mt5api-1.0.3}/pyproject.toml

@@ -1,20 +1,21 @@
 [project]
 name = "mt5api"
-version = "1.0.1"
+version = "1.0.3"
 description = "MetaTrader 5 REST API"
 authors = [{name = "dceoy", email = "dceoy@users.noreply.github.com"}]
 maintainers = [{name = "dceoy", email = "dceoy@users.noreply.github.com"}]
 license = "MIT"
 license-files = ["LICENSE"]
 readme = "README.md"
-requires-python = ">= 3.11, < 3.14"
+requires-python = ">= 3.11, < 3.15"
 dependencies = [
-  "pdmt5 >= 1.1.1",
+  "pdmt5 >= 1.2.0",
   "fastapi >= 0.115.0",
   "uvicorn[standard] >= 0.32.0",
+  "pandas >= 3.0.3",
+  "pydantic >= 2.13.4",
   "pyarrow >= 18.0.0",
   "python-multipart >= 0.0.31",
-  "httpx >= 0.27.0",
 ]
 classifiers = [
   "Development Status :: 4 - Beta",
@@ -32,9 +33,12 @@ Repository = "https://github.com/dceoy/mt5api.git"
 
 [tool.uv]
 required-environments = ["platform_system == 'Windows'"]
+exclude-newer = "1 week"
+exclude-newer-package = { pdmt5 = false }
 
 [dependency-groups]
 dev = [
+  "httpx >= 0.27.0",
   "ruff >= 0.11.0",
   "pyright >= 1.1.407",
   "pytest >= 8.0.0",
@@ -50,10 +54,6 @@ dev = [
   "mkdocstrings[python] >= 0.29.1",
 ]
 
-[tool.uv.build-backend]
-source-include = ["mt5api/**", "LICENSE"]
-source-exclude = ["tests/**"]
-
 [tool.hatch.build.targets.wheel]
 packages = ["mt5api"]
 

{mt5api-1.0.1 → mt5api-1.0.3}/tests/test_auth.py

@@ -41,16 +41,6 @@ def test_version_endpoint_rejects_invalid_api_key(client: TestClient) -> None:
     assert "Invalid API key" in data["detail"]
 
 
-def test_version_endpoint_accepts_valid_api_key(
-    client: TestClient,
-    api_headers: dict[str, str],
-) -> None:
-    """Test version endpoint accepts valid API key."""
-    response = client.get("/version", headers=api_headers)
-
-    assert response.status_code == 200
-
-
 def test_symbols_endpoint_requires_authentication(
     client: TestClient,
     mock_mt5_client: Mock,

{mt5api-1.0.1 → mt5api-1.0.3}/tests/test_health.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+from importlib.metadata import version
 from typing import TYPE_CHECKING
 
 import pytest
@@ -14,6 +15,11 @@ if TYPE_CHECKING:
     from fastapi.testclient import TestClient
 
 
+def test_api_version_uses_package_metadata() -> None:
+    """Test API version has one authoritative package-metadata source."""
+    assert version("mt5api") == API_VERSION
+
+
 def test_health_endpoint_returns_healthy_status(client: TestClient) -> None:
     """Test health endpoint returns healthy status when MT5 is connected."""
     response = client.get("/health")
@@ -27,14 +33,6 @@ def test_health_endpoint_returns_healthy_status(client: TestClient) -> None:
     assert data["api_version"] == API_VERSION
 
 
-def test_health_endpoint_no_authentication_required(client: TestClient) -> None:
-    """Test health endpoint works without authentication."""
-    # No X-API-Key header
-    response = client.get("/health")
-
-    assert response.status_code == 200
-
-
 def test_version_endpoint_returns_mt5_version(
     client: TestClient,
     api_headers: dict[str, str],

{mt5api-1.0.1 → mt5api-1.0.3}/tests/test_main.py

@@ -14,42 +14,6 @@ if TYPE_CHECKING:
     from pytest_mock import MockerFixture
 
 
-def test_strip_auth_from_openapi_handles_non_dict_components() -> None:
-    """OpenAPI auth stripping should tolerate missing component mappings."""
-    from mt5api import main  # noqa: PLC0415
-
-    openapi_schema: dict[str, Any] = {
-        "security": [{API_KEY_SECURITY_SCHEME_NAME: []}],
-        "components": None,
-        "paths": {
-            "/bad": [],
-            "/version": {
-                "summary": "Version endpoint",
-                "get": {"security": [{API_KEY_SECURITY_SCHEME_NAME: []}]},
-            },
-        },
-    }
-
-    main._strip_auth_from_openapi(openapi_schema)  # pyright: ignore[reportPrivateUsage]
-
-    assert "security" not in openapi_schema
-    assert "security" not in openapi_schema["paths"]["/version"]["get"]
-
-
-def test_strip_auth_from_openapi_handles_non_dict_security_schemes() -> None:
-    """OpenAPI auth stripping should tolerate non-dict security schemes."""
-    from mt5api import main  # noqa: PLC0415
-
-    openapi_schema: dict[str, Any] = {
-        "components": {"securitySchemes": []},
-        "paths": {},
-    }
-
-    main._strip_auth_from_openapi(openapi_schema)  # pyright: ignore[reportPrivateUsage]
-
-    assert openapi_schema["components"]["securitySchemes"] == []
-
-
 def test_strip_auth_from_openapi_preserves_other_security_schemes() -> None:
     """OpenAPI auth stripping should keep unrelated security schemes."""
     from mt5api import main  # noqa: PLC0415
@@ -58,12 +22,21 @@ def test_strip_auth_from_openapi_preserves_other_security_schemes() -> None:
         "components": {
             "securitySchemes": {API_KEY_SECURITY_SCHEME_NAME: {}, "Other": {}}
         },
-        "paths": {},
+        "paths": {
+            "/rates/from": {
+                "parameters": [{"name": "symbol", "in": "query"}],
+                "get": {"security": [{API_KEY_SECURITY_SCHEME_NAME: []}]},
+            },
+        },
     }
 
     main._strip_auth_from_openapi(openapi_schema)  # pyright: ignore[reportPrivateUsage]
 
     assert openapi_schema["components"]["securitySchemes"] == {"Other": {}}
+    assert "security" not in openapi_schema["paths"]["/rates/from"]["get"]
+    assert openapi_schema["paths"]["/rates/from"]["parameters"] == [
+        {"name": "symbol", "in": "query"}
+    ]
 
 
 def test_patch_validation_error_responses_updates_422_schema() -> None:
@@ -78,8 +51,8 @@ def test_patch_validation_error_responses_updates_422_schema() -> None:
             },
         },
         "paths": {
-            "/bad": [],
             "/rates/from": {
+                "parameters": [{"name": "symbol", "in": "query"}],
                 "get": {
                     "responses": {
                         "422": {
@@ -106,58 +79,9 @@ def test_patch_validation_error_responses_updates_422_schema() -> None:
     assert "ErrorResponse" in schemas
     assert "HTTPValidationError" not in schemas
     assert "ValidationError" not in schemas
-    assert openapi_schema["paths"]["/rates/from"]["get"]["responses"]["422"] == {
-        "description": "Validation Error",
-        "content": {
-            "application/json": {
-                "schema": {"$ref": "#/components/schemas/ErrorResponse"},
-            },
-        },
-    }
-
-
-def test_patch_validation_error_responses_handles_non_dict_components() -> None:
-    """OpenAPI validation patching should tolerate missing component mappings."""
-    from mt5api import main  # noqa: PLC0415
-
-    openapi_schema: dict[str, Any] = {"components": None, "paths": {}}
-
-    main._patch_validation_error_responses(openapi_schema)  # pyright: ignore[reportPrivateUsage]
-
-    assert openapi_schema["components"] is None
-
-
-def test_patch_validation_error_responses_handles_non_dict_schemas() -> None:
-    """OpenAPI validation patching should still update 422 responses."""
-    from mt5api import main  # noqa: PLC0415
-
-    openapi_schema: dict[str, Any] = {
-        "components": {"schemas": []},
-        "paths": {
-            "/rates/from": {
-                "get": {
-                    "responses": {
-                        "422": {
-                            "description": "Validation Error",
-                            "content": {
-                                "application/json": {
-                                    "schema": {
-                                        "$ref": (
-                                            "#/components/schemas/HTTPValidationError"
-                                        ),
-                                    },
-                                },
-                            },
-                        },
-                    },
-                },
-            },
-        },
-    }
-
-    main._patch_validation_error_responses(openapi_schema)  # pyright: ignore[reportPrivateUsage]
-
-    assert openapi_schema["components"]["schemas"] == []
+    assert openapi_schema["paths"]["/rates/from"]["parameters"] == [
+        {"name": "symbol", "in": "query"}
+    ]
     assert openapi_schema["paths"]["/rates/from"]["get"]["responses"]["422"] == {
         "description": "Validation Error",
         "content": {