@jskit-ai/crud-core 0.1.179 → 0.1.180

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/crud-core",
-  "version": "0.1.179",
+  "version": "0.1.180",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -23,9 +23,9 @@
     "./server/routeContracts": "./src/server/routeContracts.js"
   },
   "dependencies": {
-    "@jskit-ai/database-runtime": "0.1.168",
-    "@jskit-ai/json-rest-api-core": "0.1.112",
-    "@jskit-ai/resource-crud-core": "0.1.110",
+    "@jskit-ai/database-runtime": "0.1.169",
+    "@jskit-ai/json-rest-api-core": "0.1.113",
+    "@jskit-ai/resource-crud-core": "0.1.111",
     "json-rest-schema": "^1.0.17"
   },
   "description": "Shared server-side CRUD service, repository, route, and query helpers.",
@@ -45,7 +45,7 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/http-runtime": "0.1.166",
-    "@jskit-ai/kernel": "0.1.168"
+    "@jskit-ai/http-runtime": "0.1.167",
+    "@jskit-ai/kernel": "0.1.169"
   }
 }

package/patterns/json-api-resource-package/example/packages/books/package.json

@@ -8,8 +8,8 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.1.179",
-    "@jskit-ai/resource-crud-core": "0.1.110"
+    "@jskit-ai/crud-core": "0.1.180",
+    "@jskit-ai/resource-crud-core": "0.1.111"
   },
   "jskit": {
     "kind": "runtime",

package/src/server/jsonApiModule/actions.js

@@ -10,8 +10,13 @@ import {
   unwrapJsonApiResult
 } from "@jskit-ai/http-runtime/shared";
 import { resolveCrudRecordChangedEvent } from "@jskit-ai/resource-crud-core/shared/crudNamespaceSupport";
-import { resolveJsonApiRelationshipEntries } from "../routeContracts.js";
 import {
+  resolveJsonApiFieldsetContract,
+  resolveJsonApiRelationshipEntries,
+  resolveSchemaFieldDefinitions
+} from "../jsonApiResourceContract.js";
+import {
+  createJsonApiFieldsetsQueryValidator,
   createStandardCrudListQueryValidators,
   createStandardCrudViewQueryValidators
 } from "../listQueryValidators.js";
@@ -49,11 +54,6 @@ function resolveAssistantResultValue(result) {
   };
 }
 
-function resolveSchemaFieldDefinitions(definition = null) {
-  const definitions = definition?.schema?.getFieldDefinitions?.();
-  return isRecord(definitions) ? definitions : {};
-}
-
 function createProjectionRecordSchema(recordSchema, {
   lookupContainerKey = "",
   relationshipEntries = []
@@ -219,6 +219,45 @@ function transformCrudAssistantResult(operation, result, {
   return resolved.value;
 }
 
+function createCrudAssistantReadDescription({
+  fieldsetContract,
+  lookupContainerKey = "",
+  namespace = "",
+  operation = "list"
+} = {}) {
+  const relationshipEntries = fieldsetContract.relationshipEntries;
+  const firstRelationship = relationshipEntries[0] || null;
+  const includeExample = relationshipEntries.length > 0
+    ? relationshipEntries.slice(0, 2).map((entry) => entry.relationshipName).join(",")
+    : "pet,service";
+  const fieldsExample = firstRelationship
+    ? ` fields can be {\"${namespace}\":[\"${firstRelationship.attributeKey}\"],` +
+      `\"${firstRelationship.relationshipType}\":[\"${firstRelationship.labelKey || "id"}\"]}.`
+    : ` fields can be {\"${namespace}\":[\"id\"]}.`;
+  const aliasGuidance = fieldsetContract.aliasMappings
+    .map((entry) => `use \"${entry.resourceType}\" instead of \"${entry.alias}\"`)
+    .join("; ");
+  const fieldsetKeyGuidance = fieldsetContract.resourceTypes.length > 0
+    ? ` fields keys must be JSON:API resource types: ${fieldsetContract.resourceTypes.map((entry) => `\"${entry}\"`).join(", ")}.` +
+      (aliasGuidance ? ` Relationship aliases are invalid fieldset keys; ${aliasGuidance}.` : "")
+    : "";
+  const primaryFieldGuidance = fieldsetContract.primaryFields.length > 0
+    ? ` Valid \"${namespace}\" fields: ${fieldsetContract.primaryFields.map((entry) => `\"${entry}\"`).join(", ")}.`
+    : "";
+  const relationshipGuidance = relationshipEntries.length > 0
+    ? ` Include relationships: ${relationshipEntries.map((entry) => {
+        const lookupPath = lookupContainerKey
+          ? ` -> ${operation === "list" ? "items[]." : ""}${lookupContainerKey}.${entry.relationshipName}`
+          : "";
+        return `\"${entry.relationshipName}\" -> resource type \"${entry.relationshipType}\"${lookupPath}`;
+      }).join("; ")}.`
+    : "";
+
+  const subject = operation === "list" ? `List ${namespace} records.` : `View a ${namespace} record.`;
+  return `${subject} include must be a comma-separated string such as \"${includeExample}\";` +
+    `${fieldsExample}${fieldsetKeyGuidance}${primaryFieldGuidance}${relationshipGuidance}`;
+}
+
 function createCrudAssistantExtension(resource, namespace, operation) {
   const resourceOperation = CRUD_ASSISTANT_RESOURCE_OPERATION[operation];
   const nativeOutput = resource?.operations?.[resourceOperation]?.output || null;
@@ -236,24 +275,18 @@ function createCrudAssistantExtension(resource, namespace, operation) {
     relationshipEntries,
     lookupContainerKey
   );
-  const firstRelationship = relationshipEntries[0] || null;
-  const fieldsExample = firstRelationship
-    ? ` fields can be {\"${namespace}\":[\"${firstRelationship.attributeKey}\"],` +
-      `\"${firstRelationship.relationshipType}\":[\"${firstRelationship.labelKey || "id"}\"]}.`
-    : ` fields can be {\"${namespace}\":[\"id\"]}.`;
-  const lookupExample = firstRelationship && lookupContainerKey
-    ? ` Included fields are returned under ${operation === "list" ? "items[]." : ""}${lookupContainerKey}.` +
-      `${firstRelationship.relationshipName}.${firstRelationship.labelKey || "<selectedField>"}.`
-    : "";
-  const actionLabel = operation === "list"
-    ? `List ${namespace} records. include must be a comma-separated string such as \"pet,service\";${fieldsExample}${lookupExample}`
-    : operation === "view"
-      ? `View a ${namespace} record. include must be a comma-separated string such as \"pet,service\";${fieldsExample}${lookupExample}`
-      : operation === "create"
-        ? `Create a ${namespace} record.`
-        : operation === "update"
-          ? `Update a ${namespace} record.`
-          : `Delete a ${namespace} record.`;
+  const actionLabel = operation === "list" || operation === "view"
+    ? createCrudAssistantReadDescription({
+        fieldsetContract: resolveJsonApiFieldsetContract(resource),
+        lookupContainerKey,
+        namespace,
+        operation
+      })
+    : operation === "create"
+      ? `Create a ${namespace} record.`
+      : operation === "update"
+        ? `Update a ${namespace} record.`
+        : `Delete a ${namespace} record.`;
 
   return Object.freeze({
     description: actionLabel,
@@ -278,9 +311,15 @@ function createActionInput(
 ) {
   const definitions = scopeInputValidator ? [scopeInputValidator] : [];
   if (operation === "list") {
-    definitions.push(...createStandardCrudListQueryValidators({ resource, listFilterQueryValidator }));
+    definitions.push(...createStandardCrudListQueryValidators({
+      resource,
+      listFilterQueryValidator,
+      fieldsetsQueryValidator: createJsonApiFieldsetsQueryValidator({ resource })
+    }));
   } else if (operation === "view") {
-    definitions.push(recordIdParamsValidator, ...createStandardCrudViewQueryValidators());
+    definitions.push(recordIdParamsValidator, ...createStandardCrudViewQueryValidators({
+      fieldsetsQueryValidator: createJsonApiFieldsetsQueryValidator({ resource })
+    }));
   } else if (operation === "create") {
     definitions.push(operationInputs.create || resource.operations.create.body);
   } else if (operation === "update") {

package/src/server/jsonApiResourceContract.js

@@ -0,0 +1,119 @@
+import { normalizeText } from "@jskit-ai/kernel/shared/support/normalize";
+import { resolveCrudResourceScopeName } from "@jskit-ai/resource-crud-core/shared/crudLookup";
+
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+
+function resolveSchemaFieldDefinitions(definition = null) {
+  const schema = definition?.schema;
+  if (!schema || typeof schema.getFieldDefinitions !== "function") {
+    return {};
+  }
+
+  const definitions = schema.getFieldDefinitions();
+  return isRecord(definitions) ? definitions : {};
+}
+
+function resolveJsonApiRelationshipEntries(definition = null) {
+  const entries = [];
+
+  for (const [fieldKey, fieldDefinition] of Object.entries(resolveSchemaFieldDefinitions(definition))) {
+    const normalizedFieldDefinition = isRecord(fieldDefinition) ? fieldDefinition : {};
+    const relationshipType = String(normalizedFieldDefinition.belongsTo || "").trim();
+    if (relationshipType) {
+      const relationshipName = String(normalizedFieldDefinition.as || fieldKey || "").trim();
+      if (!relationshipName) {
+        continue;
+      }
+
+      entries.push(Object.freeze({
+        attributeKey: fieldKey,
+        relationshipName,
+        relationshipType,
+        labelKey: String(normalizedFieldDefinition?.relation?.labelKey || "").trim(),
+        required: normalizedFieldDefinition.required === true,
+        nullable: normalizedFieldDefinition.nullable === true
+      }));
+      continue;
+    }
+
+    const relation = isRecord(normalizedFieldDefinition.relation)
+      ? normalizedFieldDefinition.relation
+      : {};
+    if (String(relation.kind || "").trim().toLowerCase() !== "collection") {
+      continue;
+    }
+
+    const collectionRelationshipType = resolveCrudResourceScopeName(
+      relation.target || relation.targetResource || relation.namespace || relation.apiPath
+    );
+    if (!collectionRelationshipType) {
+      continue;
+    }
+
+    const collectionRelationshipName = String(
+      relation.as || normalizedFieldDefinition.as || fieldKey || ""
+    ).trim();
+    if (!collectionRelationshipName) {
+      continue;
+    }
+
+    entries.push(Object.freeze({
+      attributeKey: fieldKey,
+      relationshipName: collectionRelationshipName,
+      relationshipType: collectionRelationshipType,
+      labelKey: String(relation.labelKey || "").trim(),
+      many: true,
+      required: normalizedFieldDefinition.required === true,
+      nullable: normalizedFieldDefinition.nullable === true
+    }));
+  }
+
+  return Object.freeze(entries);
+}
+
+function resolveJsonApiFieldsetContract(resource = {}) {
+  const primaryType = normalizeText(resource?.namespace);
+  const relationshipEntries = resolveJsonApiRelationshipEntries(resource?.operations?.view?.output);
+  const lookupContainerKey = normalizeText(resource?.contract?.lookup?.containerKey);
+  const primaryFields = Object.freeze(
+    Object.keys(resolveSchemaFieldDefinitions(resource?.operations?.view?.output))
+      .map((entry) => normalizeText(entry))
+      .filter((entry) => entry && entry !== lookupContainerKey)
+  );
+  const aliasMappings = Object.freeze(
+    relationshipEntries
+      .filter((entry) => entry.relationshipName !== entry.relationshipType)
+      .map((entry) => Object.freeze({
+        alias: entry.relationshipName,
+        resourceType: entry.relationshipType
+      }))
+  );
+  const resourceTypes = [];
+  const seenTypes = new Set();
+  for (const resourceType of [
+    primaryType,
+    ...relationshipEntries.map((entry) => normalizeText(entry.relationshipType))
+  ]) {
+    if (!resourceType || seenTypes.has(resourceType)) {
+      continue;
+    }
+    seenTypes.add(resourceType);
+    resourceTypes.push(resourceType);
+  }
+
+  return Object.freeze({
+    aliasMappings,
+    primaryType,
+    primaryFields,
+    relationshipEntries,
+    resourceTypes: Object.freeze(resourceTypes)
+  });
+}
+
+export {
+  resolveJsonApiFieldsetContract,
+  resolveJsonApiRelationshipEntries,
+  resolveSchemaFieldDefinitions
+};

package/src/server/listQueryValidators.js

@@ -4,6 +4,7 @@ import {
 } from "@jskit-ai/kernel/shared/validators";
 import { normalizeText } from "@jskit-ai/kernel/shared/support/normalize";
 import { resolveCrudParentFilterKeys as resolveSharedCrudParentFilterKeys } from "@jskit-ai/resource-crud-core/shared/crudLookup";
+import { resolveJsonApiFieldsetContract } from "./jsonApiResourceContract.js";
 
 const listSearchQueryValidator = Object.freeze({
   schema: createSchema({
@@ -28,6 +29,28 @@ const lookupIncludeQueryValidator = Object.freeze({
   mode: "patch"
 });
 
+function createJsonApiFieldsetValueDefinition({ allowedFields = [] } = {}) {
+  const normalizedAllowedFields = [...new Set(
+    (Array.isArray(allowedFields) ? allowedFields : [])
+      .map((entry) => normalizeText(entry))
+      .filter(Boolean)
+  )];
+
+  return Object.freeze({
+    type: "array",
+    required: false,
+    items: {
+      type: "string",
+      minLength: 1,
+      ...(normalizedAllowedFields.length > 0
+        ? { enum: Object.freeze(normalizedAllowedFields) }
+        : {})
+    }
+  });
+}
+
+const jsonApiFieldsetValueDefinition = createJsonApiFieldsetValueDefinition();
+
 const jsonApiFieldsetsQueryValidator = Object.freeze({
   schema: createSchema({
     fields: {
@@ -36,18 +59,57 @@ const jsonApiFieldsetsQueryValidator = Object.freeze({
       messages: {
         default: "fields expects an object such as {\"bookings\":[\"petId\"],\"pets\":[\"name\"]}."
       },
-      values: {
-        type: "array",
-        items: {
-          type: "string",
-          minLength: 1
-        }
-      }
+      values: jsonApiFieldsetValueDefinition
     }
   }),
   mode: "patch"
 });
 
+function createJsonApiFieldsetsQueryValidator({ resource = {} } = {}) {
+  const contract = resolveJsonApiFieldsetContract(resource);
+  if (!contract.primaryType || contract.resourceTypes.length < 1) {
+    return jsonApiFieldsetsQueryValidator;
+  }
+
+  const firstRelationship = contract.relationshipEntries[0] || null;
+  const example = firstRelationship
+    ? `{"${contract.primaryType}":["${firstRelationship.attributeKey}"],` +
+      `"${firstRelationship.relationshipType}":["${firstRelationship.labelKey || "id"}"]}`
+    : `{"${contract.primaryType}":["id"]}`;
+  const allowedTypes = contract.resourceTypes.map((entry) => `"${entry}"`).join(", ");
+  const aliasGuidance = contract.aliasMappings
+    .map((entry) => `use "${entry.resourceType}" instead of "${entry.alias}"`)
+    .join("; ");
+  const additionalPropertiesMessage =
+    `fields keys must be JSON:API resource types. Allowed keys: ${allowedTypes}.` +
+    (aliasGuidance ? ` Relationship aliases are invalid keys; ${aliasGuidance}.` : "");
+  const fieldsetSchema = createSchema(
+    Object.fromEntries(
+      contract.resourceTypes.map((resourceType) => [
+        resourceType,
+        createJsonApiFieldsetValueDefinition({
+          allowedFields: resourceType === contract.primaryType ? contract.primaryFields : []
+        })
+      ])
+    )
+  );
+
+  return Object.freeze({
+    schema: createSchema({
+      fields: {
+        type: "object",
+        required: false,
+        schema: fieldsetSchema,
+        messages: {
+          default: `fields expects an object keyed by JSON:API resource type, such as ${example}.`,
+          additionalProperties: additionalPropertiesMessage
+        }
+      }
+    }),
+    mode: "patch"
+  });
+}
+
 function resolveCrudListUsesOrderedCursor(list = {}) {
   const entries = Array.isArray(list?.orderBy)
     ? list.orderBy
@@ -115,7 +177,8 @@ function createStandardCrudListQueryValidators({
   resource = {},
   listFilterQueryValidator = null,
   searchQueryValidator = listSearchQueryValidator,
-  includeQueryValidator = lookupIncludeQueryValidator
+  includeQueryValidator = lookupIncludeQueryValidator,
+  fieldsetsQueryValidator = jsonApiFieldsetsQueryValidator
 } = {}) {
   const resolvedListFilterQueryValidator =
     listFilterQueryValidator
@@ -132,21 +195,23 @@ function createStandardCrudListQueryValidators({
       ? [resolvedListFilterQueryValidator]
       : []),
     includeQueryValidator,
-    jsonApiFieldsetsQueryValidator
+    fieldsetsQueryValidator
   ];
 }
 
 function createStandardCrudViewQueryValidators({
-  includeQueryValidator = lookupIncludeQueryValidator
+  includeQueryValidator = lookupIncludeQueryValidator,
+  fieldsetsQueryValidator = jsonApiFieldsetsQueryValidator
 } = {}) {
   return [
     includeQueryValidator,
-    jsonApiFieldsetsQueryValidator
+    fieldsetsQueryValidator
   ];
 }
 
 export {
   createCrudCursorPaginationQueryValidator,
+  createJsonApiFieldsetsQueryValidator,
   listSearchQueryValidator,
   lookupIncludeQueryValidator,
   jsonApiFieldsetsQueryValidator,

package/src/server/routeContracts.js

@@ -6,86 +6,18 @@ import {
   composeSchemaDefinitions,
   recordIdParamsValidator
 } from "@jskit-ai/kernel/shared/validators";
-import { resolveCrudResourceScopeName } from "@jskit-ai/resource-crud-core/shared/crudLookup";
 import {
   createStandardCrudListQueryValidators,
   createStandardCrudViewQueryValidators,
   listSearchQueryValidator as defaultListSearchQueryValidator,
   lookupIncludeQueryValidator as defaultLookupIncludeQueryValidator
 } from "./listQueryValidators.js";
+import { resolveJsonApiRelationshipEntries } from "./jsonApiResourceContract.js";
 
 function isRecord(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 
-function resolveSchemaFieldDefinitions(definition = null) {
-  const schema = definition?.schema;
-  if (!schema || typeof schema.getFieldDefinitions !== "function") {
-    return {};
-  }
-
-  const definitions = schema.getFieldDefinitions();
-  return isRecord(definitions) ? definitions : {};
-}
-
-function resolveJsonApiRelationshipEntries(definition = null) {
-  const entries = [];
-
-  for (const [fieldKey, fieldDefinition] of Object.entries(resolveSchemaFieldDefinitions(definition))) {
-    const normalizedFieldDefinition = isRecord(fieldDefinition) ? fieldDefinition : {};
-    const relationshipType = String(normalizedFieldDefinition.belongsTo || "").trim();
-    if (relationshipType) {
-      const relationshipName = String(normalizedFieldDefinition.as || fieldKey || "").trim();
-      if (!relationshipName) {
-        continue;
-      }
-
-      entries.push(Object.freeze({
-        attributeKey: fieldKey,
-        relationshipName,
-        relationshipType,
-        labelKey: String(normalizedFieldDefinition?.relation?.labelKey || "").trim(),
-        required: normalizedFieldDefinition.required === true,
-        nullable: normalizedFieldDefinition.nullable === true
-      }));
-      continue;
-    }
-
-    const relation = isRecord(normalizedFieldDefinition.relation)
-      ? normalizedFieldDefinition.relation
-      : {};
-    if (String(relation.kind || "").trim().toLowerCase() !== "collection") {
-      continue;
-    }
-
-    const collectionRelationshipType = resolveCrudResourceScopeName(
-      relation.target || relation.targetResource || relation.namespace || relation.apiPath
-    );
-    if (!collectionRelationshipType) {
-      continue;
-    }
-
-    const collectionRelationshipName = String(
-      relation.as || normalizedFieldDefinition.as || fieldKey || ""
-    ).trim();
-    if (!collectionRelationshipName) {
-      continue;
-    }
-
-    entries.push(Object.freeze({
-      attributeKey: fieldKey,
-      relationshipName: collectionRelationshipName,
-      relationshipType: collectionRelationshipType,
-      labelKey: String(relation.labelKey || "").trim(),
-      many: true,
-      required: normalizedFieldDefinition.required === true,
-      nullable: normalizedFieldDefinition.nullable === true
-    }));
-  }
-
-  return Object.freeze(entries);
-}
-
 function readOwnValue(source = {}, key = "") {
   if (isRecord(source) && Object.hasOwn(source, key)) {
     return {

package/test/assistantActionConformance.test.js

@@ -206,11 +206,23 @@ test("generated CRUD list contracts conform through native assistant discovery a
   assert.deepEqual(search.result.items.map((entry) => entry.actionId), ["crud.bookings.list"]);
   assert.equal(contract.ok, true);
   assert.equal(contract.result.inputSchema.properties.include.type, "string");
-  assert.equal(contract.result.inputSchema.properties.fields.type, "object");
+  const fieldsetInputSchema = resolveLocalSchemaReference(
+    contract.result.inputSchema,
+    contract.result.inputSchema.properties.fields
+  );
+  assert.deepEqual(Object.keys(fieldsetInputSchema.properties), ["bookings", "pets"]);
+  assert.equal(fieldsetInputSchema.additionalProperties, false);
+  assert.deepEqual(fieldsetInputSchema.properties.bookings.items.enum, ["id", "petId", "summary"]);
+  assert.equal(Object.hasOwn(fieldsetInputSchema.properties.pets.items, "enum"), false);
   assert.equal(Object.hasOwn(contract.result.inputSchema.properties, "workspaceSlug"), false);
   assert.match(contract.result.description, /include must be a comma-separated string/u);
   assert.match(contract.result.description, /\{"bookings":\["petId"\],"pets":\["name"\]\}/u);
-  assert.match(contract.result.description, /items\[\]\.lookups\.pet\.name/u);
+  assert.match(contract.result.description, /fields keys must be JSON:API resource types: "bookings", "pets"/u);
+  assert.match(contract.result.description, /use "pets" instead of "pet"/u);
+  assert.match(
+    contract.result.description,
+    /"pet" -> resource type "pets" -> items\[\]\.lookups\.pet/u
+  );
   const primaryOutputSchema = resolveLocalSchemaReference(
     contract.result.outputSchema,
     contract.result.outputSchema.properties.items.items
@@ -317,10 +329,26 @@ test("generated CRUD list contracts conform through native assistant discovery a
     assert.equal(response.error.status, 400);
     assert.match(
       response.error.message,
-      /fields expects an object such as \{"bookings":\["petId"\],"pets":\["name"\]\}/u
+      /fields expects an object keyed by JSON:API resource type, such as \{"bookings":\["petId"\],"pets":\["name"\]\}/u
     );
   });
 
+  await t.test("relationship aliases are rejected as sparse-fieldset resource keys", async () => {
+    const callCount = fixture.calls.length;
+    const response = await executeList(fixture, toolSet, {
+      include: "pet",
+      fields: { pet: ["name"] },
+      limit: 3
+    });
+    assert.equal(response.ok, false);
+    assert.equal(response.error.code, "ACTION_VALIDATION_FAILED");
+    assert.equal(response.error.status, 400);
+    assert.match(response.error.message, /fields\.pet: fields keys must be JSON:API resource types/u);
+    assert.match(response.error.message, /Allowed keys: "bookings", "pets"/u);
+    assert.match(response.error.message, /use "pets" instead of "pet"/u);
+    assert.equal(fixture.calls.length, callCount);
+  });
+
   await t.test("permission denial removes the generated action from native discovery", async () => {
     const deniedContext = {
       ...fixture.context,

package/test/listQueryValidators.test.js

@@ -10,6 +10,7 @@ import {
   listSearchQueryValidator,
   lookupIncludeQueryValidator,
   createCrudCursorPaginationQueryValidator,
+  createJsonApiFieldsetsQueryValidator,
   createCrudParentFilterQueryValidator,
   createStandardCrudListQueryValidators,
   createStandardCrudViewQueryValidators,
@@ -26,11 +27,13 @@ function composeSchemaDefinition(...definitions) {
 }
 
 function createCrudResource({
+  namespace = "",
   viewFields = {},
   createFields = {},
   patchFields = {}
 } = {}) {
   return {
+    ...(namespace ? { namespace } : {}),
     operations: {
       view: {
         output: {
@@ -90,6 +93,62 @@ test("lookupIncludeQueryValidator keeps include optional when merged with pagina
   assert.deepEqual(compiled.schema.querystring.required || [], []);
 });
 
+test("resource-aware sparse fieldsets enumerate JSON:API types and reject relationship aliases", () => {
+  const resource = createCrudResource({
+    namespace: "bookings",
+    viewFields: {
+      petId: {
+        type: "integer",
+        belongsTo: "pets",
+        as: "pet",
+        relation: {
+          labelKey: "name"
+        }
+      },
+      serviceId: {
+        type: "integer",
+        belongsTo: "services",
+        as: "service",
+        relation: {
+          labelKey: "name"
+        }
+      }
+    }
+  });
+  const validator = createJsonApiFieldsetsQueryValidator({ resource });
+  const transportSchema = validator.schema.toJsonSchema({ mode: "patch" });
+  const fieldsetReference = transportSchema.properties.fields.allOf[0].$ref;
+  const fieldsetSchema = transportSchema.definitions[fieldsetReference.slice("#/definitions/".length)];
+
+  assert.deepEqual(Object.keys(fieldsetSchema.properties), ["bookings", "pets", "services"]);
+  assert.equal(fieldsetSchema.additionalProperties, false);
+  assert.deepEqual(fieldsetSchema.properties.bookings.items.enum, ["petId", "serviceId"]);
+  assert.equal(Object.hasOwn(fieldsetSchema.properties.pets.items, "enum"), false);
+  assert.deepEqual(validateSchemaPayload(validator, {
+    fields: {
+      bookings: ["petId"],
+      pets: ["name"]
+    }
+  }, { phase: "input" }), {
+    fields: {
+      bookings: ["petId"],
+      pets: ["name"]
+    }
+  });
+  assert.throws(
+    () => validateSchemaPayload(validator, {
+      fields: {
+        pet: ["name"]
+      }
+    }, { phase: "input" }),
+    (error) => {
+      assert.match(error.fieldErrors?.["fields.pet"] || "", /Allowed keys: "bookings", "pets", "services"/u);
+      assert.match(error.fieldErrors?.["fields.pet"] || "", /use "pets" instead of "pet"/u);
+      return true;
+    }
+  );
+});
+
 test("createCrudCursorPaginationQueryValidator keeps numeric cursor validation for unordered lists", () => {
   const validator = createCrudCursorPaginationQueryValidator({});
 

package/test/routeContracts.test.js

@@ -180,7 +180,8 @@ test("createCrudJsonApiRouteContracts builds default CRUD JSON:API contracts", a
     limit: "25",
     fields: {
       contacts: ["id", "name"],
-      userProfiles: ["id", "name"]
+      userProfiles: ["id", "name"],
+      organizations: ["name"]
     }
   }, { phase: "input" });
 
@@ -192,7 +193,8 @@ test("createCrudJsonApiRouteContracts builds default CRUD JSON:API contracts", a
     limit: 25,
     fields: {
       contacts: ["id", "name"],
-      userProfiles: ["id", "name"]
+      userProfiles: ["id", "name"],
+      organizations: ["name"]
     }
   });