@openapi-flow/core 0.3.3 → 0.3.4

package/README.md

@@ -2,7 +2,7 @@
 
 Zod `^4.6.5` is a required peer, shared with the host rather than installed as a separately pinned runtime copy. Development tests use 4.6.5; the strict installed-consumer check also uses the host's 4.6.7. This preserves the public schema type boundary without casts or dependency overrides.
 
-Version **0.3.3**. Canonical draft, clarification and runtime-input APIs described below are included in this release. Ajv 8.20.0 does not correctly validate a declared `properties.__proto__`; generated validation may reject valid data or omit that property's constraints. This previously accepted limitation remains unchanged, without renaming data or skipping its failing regression. See the [release record](https://github.com/carefreelife98/openapi-flow/blob/main/docs/releases/0.3.3.md).
+Version **0.3.4**. Canonical draft, clarification and runtime-input APIs described below are included in this release. Ajv 8.20.0 does not correctly validate a declared `properties.__proto__`; generated validation may reject valid data or omit that property's constraints. This previously accepted limitation remains unchanged, without renaming data or skipping its failing regression. See the [release record](https://github.com/carefreelife98/openapi-flow/blob/main/docs/releases/0.3.4.md).
 
 Native and fixed-material connection planning accept the optional, existing `WorkflowEntryPointContract` as `entrypoint`. Core validates and snapshots this owner-provided start alongside the other inputs; it does not infer one when absent, add a selectable trigger or let model output modify it.
 

package/dist/schemas/create-workflow-review-suggestions-proposal-schema.js

@@ -9,14 +9,14 @@ export function createWorkflowReviewSuggestionsProposalSchema(description, evide
         text: z
             .string()
             .refine((text) => text.trim().length > 0)
-            .describe('A concrete message the user may explicitly adopt. Not a confirmed instruction, a workflow, a value default or a credential.'),
+            .describe("A concrete optional message in the user's language. Not a confirmed instruction, a workflow, a value default or a credential. Do not expose internal candidate IDs or bookkeeping references here; use structured sources. Do not present unapproved review assumptions as existing user intent."),
         sources: z.array(evidenceSchema).min(1),
         ...(description.options.includeExplanations
             ? {
                 reason: z
                     .string()
                     .min(1)
-                    .describe('Concise user-facing reason and relevance, not private chain-of-thought.'),
+                    .describe("Concise relevance in the user's language, not private chain-of-thought. Distinguish actual message evidence from unapproved review material; do not claim the user requested a candidate's assumptions. Keep internal candidate IDs and source bookkeeping in structured sources only."),
             }
             : {}),
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openapi-flow/core",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "license": "MIT",
   "description": "Engine-independent OpenAPI catalogs, operation contracts and typed request schemas",
   "keywords": [