@sayren/store-sdk 0.41.0 → 0.42.0

package/dist/server.mjs

@@ -1,4 +1,4 @@
-import { a as WEBHOOK_HEADERS, i as WEBHOOK_EVENT_TYPE_HEADER, n as WEBHOOK_DELIVERY_ID_HEADER, o as WEBHOOK_SIGNATURE_HEADER, r as WEBHOOK_EVENT_ID_HEADER, s as WEBHOOK_USER_AGENT, t as WEBHOOK_DEFAULT_TOLERANCE_SEC } from "./webhook-headers-D974dE4T.mjs";
+import { a as WEBHOOK_HEADERS, i as WEBHOOK_EVENT_TYPE_HEADER, n as WEBHOOK_DELIVERY_ID_HEADER, o as WEBHOOK_SIGNATURE_HEADER, r as WEBHOOK_EVENT_ID_HEADER, s as WEBHOOK_USER_AGENT, t as WEBHOOK_DEFAULT_TOLERANCE_SEC } from "./webhook-headers-D0E3wPpS.mjs";
 //#region src/member-delegation.ts
 /** 위임 실패 — `error`는 api 오류 코드(엔벨로프 `error.code`, 없으면 `http_{status}`) */
 var MemberDelegationError = class extends Error {

package/dist/{webhook-headers-D974dE4T.mjs → webhook-headers-D0E3wPpS.mjs}

@@ -1,4 +1,82 @@
 import { z } from "zod";
+//#region src/schemas/strict.ts
+/**
+* 관리 API 요청 본문을 모르는 키까지 거르는 스키마로 바꾼다(이슈 #193, 2026-10-24). `z.object`는 모르는 키를 조용히 버려서
+* 오타·잘못된 자리의 필드(예: 옵션 값에 둔 추가금)가 400 없이 사라지고 기본값으로 저장됐다. 원본은 응답 스키마와 하위 스키마를
+* 공유하므로 고치지 않고, 안쪽 객체까지 `catchall: never`로 복제한다. `z.looseObject`처럼 catchall을 정한 객체는 그대로 둔다.
+* 설명·예시(전역 등록부의 메타)는 복제본에 옮겨 OpenAPI 문서가 같다
+*/
+function strictRequest(schema) {
+	return strictOf(schema, /* @__PURE__ */ new Map());
+}
+function strictOf(schema, seen) {
+	const done = seen.get(schema);
+	if (done) return done;
+	const def = schema._zod.def;
+	const clone = (patch) => {
+		const next = schema.clone({
+			...def,
+			...patch
+		});
+		const meta = z.globalRegistry.get(schema);
+		if (meta) z.globalRegistry.add(next, meta);
+		return next;
+	};
+	let next;
+	switch (def.type) {
+		case "object":
+			next = clone({
+				shape: Object.fromEntries(Object.entries(def.shape).map(([key, value]) => [key, strictOf(value, seen)])),
+				catchall: def.catchall ?? z.never()
+			});
+			break;
+		case "array":
+			next = clone({ element: strictOf(def.element, seen) });
+			break;
+		case "optional":
+		case "nullable":
+		case "default":
+		case "prefault":
+		case "nonoptional":
+		case "readonly":
+		case "catch":
+			next = clone({ innerType: strictOf(def.innerType, seen) });
+			break;
+		case "union":
+			next = clone({ options: def.options.map((option) => strictOf(option, seen)) });
+			break;
+		case "intersection":
+			next = clone({
+				left: strictOf(def.left, seen),
+				right: strictOf(def.right, seen)
+			});
+			break;
+		case "pipe":
+			next = clone({ in: strictOf(def.in, seen) });
+			break;
+		case "record":
+			next = clone({ valueType: strictOf(def.valueType, seen) });
+			break;
+		case "tuple":
+			next = clone({
+				items: def.items.map((item) => strictOf(item, seen)),
+				rest: def.rest ? strictOf(def.rest, seen) : def.rest
+			});
+			break;
+		case "lazy": {
+			let inner;
+			next = clone({ getter: () => {
+				inner ??= strictOf(def.getter(), seen);
+				return inner;
+			} });
+			break;
+		}
+		default: next = schema;
+	}
+	seen.set(schema, next);
+	return next;
+}
+//#endregion
 //#region src/schemas/audit.ts
 /**
 * 감사 로그와 승인 요청 — `/v1/audit-logs`, `/v1/approval-requests` (이슈 #36).
@@ -155,7 +233,7 @@ const approvalPageSchema = z.object({
 	items: z.array(approvalRequestSchema),
 	nextCursor: z.string().nullable().describe("다음 페이지 커서. 마지막 페이지면 null")
 });
-const approvalDecisionRequestSchema = z.object({ note: z.string().trim().max(500).optional().describe("승인·거절 메모 (최대 500자)") });
+const approvalDecisionRequestSchema = strictRequest(z.object({ note: z.string().trim().max(500).optional().describe("승인·거절 메모 (최대 500자)") }));
 //#endregion
 //#region src/http.ts
 /** 표준 엔벨로프의 $.error 상세 */
@@ -356,4 +434,4 @@ const WEBHOOK_HEADERS = {
 	deliveryId: WEBHOOK_DELIVERY_ID_HEADER
 };
 //#endregion
-export { auditLogPageSchema as A, approvalPageSchema as C, auditActorTypeSchema as D, auditActorSchema as E, auditLogSourceSchema as M, writeDryRunResultSchema as N, auditLogListQuerySchema as O, writePreviewSchema as P, approvalListQuerySchema as S, approvalStatusSchema as T, resolveToken as _, WEBHOOK_HEADERS as a, agentPolicyDecisionSchema as b, APPROVAL_ALREADY_DECIDED_CODE as c, ApprovalPendingError as d, SAYREN_API_BASE_URL as f, path as g, createHttp as h, WEBHOOK_EVENT_TYPE_HEADER as i, auditLogSchema as j, auditLogOutcomeSchema as k, APPROVAL_REQUIRED_CODE as l, buildQuery as m, WEBHOOK_DELIVERY_ID_HEADER as n, WEBHOOK_SIGNATURE_HEADER as o, SAYREN_API_ORIGIN as p, WEBHOOK_EVENT_ID_HEADER as r, WEBHOOK_USER_AGENT as s, WEBHOOK_DEFAULT_TOLERANCE_SEC as t, ApiError as u, toApiError as v, approvalRequestSchema as w, approvalDecisionRequestSchema as x, unwrapData as y };
+export { auditLogPageSchema as A, approvalPageSchema as C, auditActorTypeSchema as D, auditActorSchema as E, strictRequest as F, auditLogSourceSchema as M, writeDryRunResultSchema as N, auditLogListQuerySchema as O, writePreviewSchema as P, approvalListQuerySchema as S, approvalStatusSchema as T, resolveToken as _, WEBHOOK_HEADERS as a, agentPolicyDecisionSchema as b, APPROVAL_ALREADY_DECIDED_CODE as c, ApprovalPendingError as d, SAYREN_API_BASE_URL as f, path as g, createHttp as h, WEBHOOK_EVENT_TYPE_HEADER as i, auditLogSchema as j, auditLogOutcomeSchema as k, APPROVAL_REQUIRED_CODE as l, buildQuery as m, WEBHOOK_DELIVERY_ID_HEADER as n, WEBHOOK_SIGNATURE_HEADER as o, SAYREN_API_ORIGIN as p, WEBHOOK_EVENT_ID_HEADER as r, WEBHOOK_USER_AGENT as s, WEBHOOK_DEFAULT_TOLERANCE_SEC as t, ApiError as u, toApiError as v, approvalRequestSchema as w, approvalDecisionRequestSchema as x, unwrapData as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sayren/store-sdk",
-  "version": "0.41.0",
+  "version": "0.42.0",
   "main": "./dist/index.mjs",
   "types": "./dist/index.d.mts",
   "exports": {

package/src/schemas/ai.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import { storefrontSlugSchema } from "./storefront-hosting";
+import { strictRequest } from "./strict";
 
 /**
  * 상점 플랫폼 AI 채팅(이슈 #124) — 대화·메시지·실행과 실행 이벤트 스트림의 계약.
@@ -388,12 +389,14 @@ export const storeSetupBriefSchema = z.object({
 });
 export type StoreSetupBrief = z.infer<typeof storeSetupBriefSchema>;
 
-export const createAiConversationRequestSchema = z.object({
-  /** 웹사이트에서 남긴 초안(#124 M2) — 연결한 사용자만 쓴다. 주면 첫 메시지로 실행을 시작한다 */
-  draftId: z.string().max(64).optional(),
-  /** 질문 화면의 답 — `draftId`와 함께만 쓴다. 초안 앞에 붙어 첫 메시지가 된다 */
-  brief: storeSetupBriefSchema.optional(),
-});
+export const createAiConversationRequestSchema = strictRequest(
+  z.object({
+    /** 웹사이트에서 남긴 초안(#124 M2) — 연결한 사용자만 쓴다. 주면 첫 메시지로 실행을 시작한다 */
+    draftId: z.string().max(64).optional(),
+    /** 질문 화면의 답 — `draftId`와 함께만 쓴다. 초안 앞에 붙어 첫 메시지가 된다 */
+    brief: storeSetupBriefSchema.optional(),
+  }),
+);
 export type CreateAiConversationRequest = z.infer<typeof createAiConversationRequestSchema>;
 
 export const createAiConversationResponseSchema = z.object({
@@ -403,20 +406,22 @@ export const createAiConversationResponseSchema = z.object({
 });
 export type CreateAiConversationResponse = z.infer<typeof createAiConversationResponseSchema>;
 
-export const sendAiMessageRequestSchema = z
-  .object({
-    text: z.string().trim().max(AI_MESSAGE_MAX_CHARS),
-    attachments: z.array(aiAttachmentSchema).max(AI_MESSAGE_MAX_ATTACHMENTS).default([]),
-    /** 선택지 버튼으로 보낸 답이면 그 값(화면 표시는 `text`) */
-    choice: z.string().max(200).optional(),
-    /** 편집 미리보기에서 고른 요소(#65) — 모델은 이 요소를 기준으로 고친다 */
-    selection: aiPreviewSelectionSchema.optional(),
-    /** 디자인 탭에서 고른 아트보드(2026-10-14) — 모델은 그 아트보드를 기준으로 고친다 */
-    designSelection: aiDesignSelectionSchema.optional(),
-  })
-  .refine((body) => body.text.length > 0 || body.attachments.length > 0, {
-    message: "내용이나 첨부가 있어야 합니다",
-  });
+export const sendAiMessageRequestSchema = strictRequest(
+  z
+    .object({
+      text: z.string().trim().max(AI_MESSAGE_MAX_CHARS),
+      attachments: z.array(aiAttachmentSchema).max(AI_MESSAGE_MAX_ATTACHMENTS).default([]),
+      /** 선택지 버튼으로 보낸 답이면 그 값(화면 표시는 `text`) */
+      choice: z.string().max(200).optional(),
+      /** 편집 미리보기에서 고른 요소(#65) — 모델은 이 요소를 기준으로 고친다 */
+      selection: aiPreviewSelectionSchema.optional(),
+      /** 디자인 탭에서 고른 아트보드(2026-10-14) — 모델은 그 아트보드를 기준으로 고친다 */
+      designSelection: aiDesignSelectionSchema.optional(),
+    })
+    .refine((body) => body.text.length > 0 || body.attachments.length > 0, {
+      message: "내용이나 첨부가 있어야 합니다",
+    }),
+);
 export type SendAiMessageRequest = z.input<typeof sendAiMessageRequestSchema>;
 
 export const sendAiMessageResponseSchema = aiStreamAccessSchema.extend({
@@ -622,18 +627,20 @@ export const STORE_DRAFT_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
 /** 연결하지 않은 초안을 지우기까지 */
 export const STORE_DRAFT_RETENTION_DAYS = 7;
 
-export const createStoreDraftRequestSchema = z.object({
-  text: z.string().trim().min(1).max(AI_MESSAGE_MAX_CHARS),
-  attachments: z
-    .array(
-      z.object({
-        filename: z.string().trim().min(1).max(200),
-        size: z.number().int().positive().max(STORE_DRAFT_ATTACHMENT_MAX_BYTES),
-      }),
-    )
-    .max(STORE_DRAFT_MAX_ATTACHMENTS)
-    .default([]),
-});
+export const createStoreDraftRequestSchema = strictRequest(
+  z.object({
+    text: z.string().trim().min(1).max(AI_MESSAGE_MAX_CHARS),
+    attachments: z
+      .array(
+        z.object({
+          filename: z.string().trim().min(1).max(200),
+          size: z.number().int().positive().max(STORE_DRAFT_ATTACHMENT_MAX_BYTES),
+        }),
+      )
+      .max(STORE_DRAFT_MAX_ATTACHMENTS)
+      .default([]),
+  }),
+);
 export type CreateStoreDraftRequest = z.input<typeof createStoreDraftRequestSchema>;
 
 export const createStoreDraftResponseSchema = z.object({

package/src/schemas/apps.ts

@@ -8,6 +8,7 @@ import {
   appSettingFieldSchema,
 } from "./app-manifest";
 import { webhookDeliveryErrorCodeSchema, webhookDeliveryStatusSchema } from "./misc";
+import { strictRequest } from "./strict";
 
 /**
  * 설치 앱 관리 API 계약 (이슈 #22) — `/v1/apps/installations/**`(상점이 설치한 앱), `/v1/app/installation`(설치 토큰 자기 조회).
@@ -183,21 +184,23 @@ export type AppInstallationActivity = z.infer<typeof appInstallationActivitySche
  * - `{ result }`: accounts 설치 동의 결과(1회용 JWT). 개발자 포털 [내 상점에 설치]가 이 길로 온다
  * - `{ appId, settings }`: 상점 플랫폼 앱 목록 › 설치 화면에서 동의하고 설정까지 채워 바로 설치한다
  */
-export const appInstallRequestSchema = z.union([
-  z.object({
-    result: z
-      .string()
-      .min(1)
-      .describe("accounts가 발급한 설치 결과 JWT(`typ: sayren-install+jwt`)"),
-  }),
-  z.object({
-    appId: z.string().min(1),
-    settings: z
-      .record(z.string(), settingsValueSchema)
-      .default({})
-      .describe("설치와 함께 저장할 설정. 비밀 필드도 여기서 넣는다"),
-  }),
-]);
+export const appInstallRequestSchema = strictRequest(
+  z.union([
+    z.object({
+      result: z
+        .string()
+        .min(1)
+        .describe("accounts가 발급한 설치 결과 JWT(`typ: sayren-install+jwt`)"),
+    }),
+    z.object({
+      appId: z.string().min(1),
+      settings: z
+        .record(z.string(), settingsValueSchema)
+        .default({})
+        .describe("설치와 함께 저장할 설정. 비밀 필드도 여기서 넣는다"),
+    }),
+  ]),
+);
 export type AppInstallRequest = z.infer<typeof appInstallRequestSchema>;
 
 /** 앱 목록 정보 — 현재 버전이 올린 아이콘·README(없으면 매니페스트 `iconUrl`) */

package/src/schemas/audit.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { strictRequest } from "./strict";
 
 /**
  * 감사 로그와 승인 요청 — `/v1/audit-logs`, `/v1/approval-requests` (이슈 #36).
@@ -261,7 +262,9 @@ export const approvalPageSchema = z.object({
 });
 export type ApprovalPage = z.infer<typeof approvalPageSchema>;
 
-export const approvalDecisionRequestSchema = z.object({
-  note: z.string().trim().max(500).optional().describe("승인·거절 메모 (최대 500자)"),
-});
+export const approvalDecisionRequestSchema = strictRequest(
+  z.object({
+    note: z.string().trim().max(500).optional().describe("승인·거절 메모 (최대 500자)"),
+  }),
+);
 export type ApprovalDecisionRequest = z.infer<typeof approvalDecisionRequestSchema>;

package/src/schemas/category.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { strictRequest } from "./strict";
 
 export const categoryProductSortSchema = z.enum([
   "RECENT",
@@ -70,40 +71,44 @@ export const categoryAttributeSchema = z.object({
 
 export type CategoryAttribute = z.infer<typeof categoryAttributeSchema>;
 
-export const categoryCreateRequestSchema = z.object({
-  name: z.string().min(1).max(100),
-  parentId: z.string().nullable().optional(),
-  sortOrder: z.number().int().optional(),
-  visible: z.boolean().optional(),
-  showPc: z.boolean().optional(),
-  showMobile: z.boolean().optional(),
-  productSort: categoryProductSortSchema.optional(),
-  metaTitle: z.string().max(100).nullable().optional(),
-  metaDescription: z.string().max(300).nullable().optional(),
-  metaKeywords: z.string().max(200).nullable().optional(),
-});
+export const categoryCreateRequestSchema = strictRequest(
+  z.object({
+    name: z.string().min(1).max(100),
+    parentId: z.string().nullable().optional(),
+    sortOrder: z.number().int().optional(),
+    visible: z.boolean().optional(),
+    showPc: z.boolean().optional(),
+    showMobile: z.boolean().optional(),
+    productSort: categoryProductSortSchema.optional(),
+    metaTitle: z.string().max(100).nullable().optional(),
+    metaDescription: z.string().max(300).nullable().optional(),
+    metaKeywords: z.string().max(200).nullable().optional(),
+  }),
+);
 
 export type CategoryCreateRequest = z.infer<typeof categoryCreateRequestSchema>;
 
-export const categoryPatchRequestSchema = z.object({
-  name: z.string().min(1).max(100).optional(),
-  parentId: z.string().nullable().optional(),
-  sortOrder: z.number().int().optional(),
-  visible: z.boolean().optional(),
-  showPc: z.boolean().optional(),
-  showMobile: z.boolean().optional(),
-  productSort: categoryProductSortSchema.optional(),
-  metaTitle: z.string().max(100).nullable().optional(),
-  metaDescription: z.string().max(300).nullable().optional(),
-  metaKeywords: z.string().max(200).nullable().optional(),
-  flowId: z
-    .string()
-    .nullable()
-    .optional()
-    .describe(
-      "주문 흐름(이슈 #115) — 게시한 흐름 id, null이면 기본 흐름. 맨 아래 카테고리에만 지정한다(400 `CATEGORY_NOT_LEAF`). 게시하지 않은 흐름은 409 `FLOW_NOT_PUBLISHED`",
-    ),
-});
+export const categoryPatchRequestSchema = strictRequest(
+  z.object({
+    name: z.string().min(1).max(100).optional(),
+    parentId: z.string().nullable().optional(),
+    sortOrder: z.number().int().optional(),
+    visible: z.boolean().optional(),
+    showPc: z.boolean().optional(),
+    showMobile: z.boolean().optional(),
+    productSort: categoryProductSortSchema.optional(),
+    metaTitle: z.string().max(100).nullable().optional(),
+    metaDescription: z.string().max(300).nullable().optional(),
+    metaKeywords: z.string().max(200).nullable().optional(),
+    flowId: z
+      .string()
+      .nullable()
+      .optional()
+      .describe(
+        "주문 흐름(이슈 #115) — 게시한 흐름 id, null이면 기본 흐름. 맨 아래 카테고리에만 지정한다(400 `CATEGORY_NOT_LEAF`). 게시하지 않은 흐름은 409 `FLOW_NOT_PUBLISHED`",
+      ),
+  }),
+);
 
 export type CategoryPatchRequest = z.infer<typeof categoryPatchRequestSchema>;
 

package/src/schemas/claim.ts

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { commerceNumberField } from "./commerce-number";
 import { type PageParams, pageQueryShape } from "./common";
+import { strictRequest } from "./strict";
 
 export const claimTypeSchema = z.enum(["CANCEL", "RETURN", "EXCHANGE"]);
 
@@ -164,17 +165,19 @@ export const claimHoldResultSchema = z.object({ claimId: z.string(), holdExpires
 
 export type ClaimHoldResult = z.infer<typeof claimHoldResultSchema>;
 
-export const rejectClaimRequestSchema = z.object({
-  reason: z.enum([
-    "USED_PRODUCT",
-    "MISSING_COMPONENT",
-    "PERIOD_EXPIRED",
-    "BUYER_FAULT_DAMAGE",
-    "ETC",
-  ]),
-  detail: z.string().min(10).max(1000),
-  evidenceImages: z.array(z.url()).max(5).optional(),
-});
+export const rejectClaimRequestSchema = strictRequest(
+  z.object({
+    reason: z.enum([
+      "USED_PRODUCT",
+      "MISSING_COMPONENT",
+      "PERIOD_EXPIRED",
+      "BUYER_FAULT_DAMAGE",
+      "ETC",
+    ]),
+    detail: z.string().min(10).max(1000),
+    evidenceImages: z.array(z.url()).max(5).optional(),
+  }),
+);
 
 export type RejectClaimRequest = z.infer<typeof rejectClaimRequestSchema>;
 

package/src/schemas/collection.ts

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { type PageParams, pageQueryShape, pageSchema } from "./common";
 import { productImageUrlSchema } from "./product";
+import { strictRequest } from "./strict";
 
 /**
  * 컬렉션 (이슈 #83) — 상품을 어디에 보여 줄지 정하는 묶음이다. 카테고리는 상품이 무엇인지를 정하고 상품당 하나지만, 컬렉션은
@@ -432,33 +433,35 @@ const periodRefine = (
  * 직접 선택(`MANUAL`)은 `productIds`가 처음 담을 상품과 순서다. 조건 자동(`AUTOMATIC`)은 `rules`가 있어야 하고 `productIds`를 받지 않는다.
  * `productSort`를 생략하면 직접 선택은 `MANUAL`, 조건 자동은 `LATEST`(판매량 상위 조건이 있으면 `BEST_SELLING`)다. 조건 자동은 `MANUAL`을 쓸 수 없다.
  */
-export const collectionCreateRequestSchema = z
-  .object({
-    title: z.string().trim().min(1).max(MAX_COLLECTION_TITLE).describe("제목"),
-    slug: slugField.optional(),
-    type: z
-      .enum(COLLECTION_TYPES)
-      .default("MANUAL")
-      .describe("유형. `MANUAL`(직접 선택)·`AUTOMATIC`(조건 자동). 만든 뒤 바꿀 수 없다"),
-    rules: collectionRulesSchema
-      .optional()
-      .describe("조건 자동 컬렉션의 조건(AND). 조건 자동이면 필수, 직접 선택이면 줄 수 없다"),
-    description: commonFields.description.default(""),
-    imageUrl: commonFields.imageUrl.optional(),
-    productSort: commonFields.productSort
-      .optional()
-      .describe(
-        "스토어프론트 상품 기본 정렬. 생략하면 직접 선택은 `MANUAL`, 조건 자동은 `LATEST`(판매량 상위 조건이 있으면 `BEST_SELLING`)다. 조건 자동은 `MANUAL`을 쓸 수 없다",
-      ),
-    visible: commonFields.visible.default(true),
-    startsAt: commonFields.startsAt,
-    endsAt: commonFields.endsAt,
-    sortOrder: commonFields.sortOrder.optional().describe("목록 순서. 생략하면 맨 뒤"),
-    metaTitle: commonFields.metaTitle.optional(),
-    metaDescription: commonFields.metaDescription.optional(),
-    productIds: productIdsField.optional(),
-  })
-  .superRefine(periodRefine);
+export const collectionCreateRequestSchema = strictRequest(
+  z
+    .object({
+      title: z.string().trim().min(1).max(MAX_COLLECTION_TITLE).describe("제목"),
+      slug: slugField.optional(),
+      type: z
+        .enum(COLLECTION_TYPES)
+        .default("MANUAL")
+        .describe("유형. `MANUAL`(직접 선택)·`AUTOMATIC`(조건 자동). 만든 뒤 바꿀 수 없다"),
+      rules: collectionRulesSchema
+        .optional()
+        .describe("조건 자동 컬렉션의 조건(AND). 조건 자동이면 필수, 직접 선택이면 줄 수 없다"),
+      description: commonFields.description.default(""),
+      imageUrl: commonFields.imageUrl.optional(),
+      productSort: commonFields.productSort
+        .optional()
+        .describe(
+          "스토어프론트 상품 기본 정렬. 생략하면 직접 선택은 `MANUAL`, 조건 자동은 `LATEST`(판매량 상위 조건이 있으면 `BEST_SELLING`)다. 조건 자동은 `MANUAL`을 쓸 수 없다",
+        ),
+      visible: commonFields.visible.default(true),
+      startsAt: commonFields.startsAt,
+      endsAt: commonFields.endsAt,
+      sortOrder: commonFields.sortOrder.optional().describe("목록 순서. 생략하면 맨 뒤"),
+      metaTitle: commonFields.metaTitle.optional(),
+      metaDescription: commonFields.metaDescription.optional(),
+      productIds: productIdsField.optional(),
+    })
+    .superRefine(periodRefine),
+);
 
 export type CollectionCreateRequest = z.infer<typeof collectionCreateRequestSchema>;
 export type CollectionCreateRequestInput = z.input<typeof collectionCreateRequestSchema>;
@@ -467,45 +470,51 @@ export type CollectionCreateRequestInput = z.input<typeof collectionCreateReques
  * `PATCH /v1/collections/{collectionId}` — 준 항목만 바뀐다. `type`을 주면 400 `COLLECTION_TYPE_IMMUTABLE`이다.
  * `revision`을 주면 그 번호일 때만 바뀌고, 그 사이 다른 수정이 있었으면 409 `COLLECTION_CHANGED`다.
  */
-export const collectionPatchRequestSchema = z
-  .object({
-    title: z.string().trim().min(1).max(MAX_COLLECTION_TITLE).optional(),
-    slug: slugField.optional(),
-    type: z.string().optional().describe("바꿀 수 없다. 주면 400 `COLLECTION_TYPE_IMMUTABLE`"),
-    rules: collectionRulesSchema
-      .optional()
-      .describe(
-        "조건 자동 컬렉션의 조건을 통째로 바꾼다. 직접 선택 컬렉션에 주면 400 `COLLECTION_RULES_NOT_ALLOWED`",
-      ),
-    description: commonFields.description.optional(),
-    imageUrl: commonFields.imageUrl.optional(),
-    productSort: commonFields.productSort.optional(),
-    visible: commonFields.visible.optional(),
-    startsAt: commonFields.startsAt,
-    endsAt: commonFields.endsAt,
-    sortOrder: commonFields.sortOrder.optional(),
-    metaTitle: commonFields.metaTitle.optional(),
-    metaDescription: commonFields.metaDescription.optional(),
-    revision: z.number().int().min(0).optional().describe("읽은 수정 번호"),
-  })
-  .superRefine(periodRefine);
+export const collectionPatchRequestSchema = strictRequest(
+  z
+    .object({
+      title: z.string().trim().min(1).max(MAX_COLLECTION_TITLE).optional(),
+      slug: slugField.optional(),
+      type: z.string().optional().describe("바꿀 수 없다. 주면 400 `COLLECTION_TYPE_IMMUTABLE`"),
+      rules: collectionRulesSchema
+        .optional()
+        .describe(
+          "조건 자동 컬렉션의 조건을 통째로 바꾼다. 직접 선택 컬렉션에 주면 400 `COLLECTION_RULES_NOT_ALLOWED`",
+        ),
+      description: commonFields.description.optional(),
+      imageUrl: commonFields.imageUrl.optional(),
+      productSort: commonFields.productSort.optional(),
+      visible: commonFields.visible.optional(),
+      startsAt: commonFields.startsAt,
+      endsAt: commonFields.endsAt,
+      sortOrder: commonFields.sortOrder.optional(),
+      metaTitle: commonFields.metaTitle.optional(),
+      metaDescription: commonFields.metaDescription.optional(),
+      revision: z.number().int().min(0).optional().describe("읽은 수정 번호"),
+    })
+    .superRefine(periodRefine),
+);
 
 export type CollectionPatchRequest = z.infer<typeof collectionPatchRequestSchema>;
 
 /** `PUT /v1/collections/{collectionId}/products` — 담긴 상품을 통째로 바꾼다(순서 포함) */
-export const collectionProductsReplaceRequestSchema = z.object({
-  productIds: productIdsField,
-  revision: z.number().int().min(0).optional().describe("읽은 수정 번호"),
-});
+export const collectionProductsReplaceRequestSchema = strictRequest(
+  z.object({
+    productIds: productIdsField,
+    revision: z.number().int().min(0).optional().describe("읽은 수정 번호"),
+  }),
+);
 
 export type CollectionProductsReplaceRequest = z.infer<
   typeof collectionProductsReplaceRequestSchema
 >;
 
 /** `POST /v1/collections/{collectionId}/products` — 뒤에 붙인다. 이미 담긴 상품은 그 자리에 둔다 */
-export const collectionProductsAddRequestSchema = z.object({
-  productIds: z.array(z.string().min(1)).min(1).max(MAX_COLLECTION_PRODUCTS_PER_ADD),
-});
+export const collectionProductsAddRequestSchema = strictRequest(
+  z.object({
+    productIds: z.array(z.string().min(1)).min(1).max(MAX_COLLECTION_PRODUCTS_PER_ADD),
+  }),
+);
 
 export type CollectionProductsAddRequest = z.infer<typeof collectionProductsAddRequestSchema>;
 
@@ -562,14 +571,16 @@ export const collectionProductListQuerySchema = z.object({
 });
 
 /** `POST /v1/collections/preview` — 저장하지 않고 조건으로 나오는 상품을 본다 */
-export const collectionPreviewRequestSchema = z.object({
-  rules: collectionRulesSchema,
-  productSort: collectionProductSortRequestSchema
-    .optional()
-    .describe(
-      "미리보기 순서. 생략하면 `LATEST`(판매량 상위 조건이 있으면 `BEST_SELLING`)이고, `MANUAL`이면 `LATEST`다",
-    ),
-});
+export const collectionPreviewRequestSchema = strictRequest(
+  z.object({
+    rules: collectionRulesSchema,
+    productSort: collectionProductSortRequestSchema
+      .optional()
+      .describe(
+        "미리보기 순서. 생략하면 `LATEST`(판매량 상위 조건이 있으면 `BEST_SELLING`)이고, `MANUAL`이면 `LATEST`다",
+      ),
+  }),
+);
 
 export type CollectionPreviewRequest = z.infer<typeof collectionPreviewRequestSchema>;