I just put the API at the centre, everything else hangs off it:

* The server implementation is type-checked against the API

* The OpenAPI spec is generated from the API.

* The client is generated/checked against the API

Any test-suite that operates using the client or server will then by definition be up-to-date with everything else.