@wildo-ai/saas-models 1.1.1 → 1.1.3

package/dist/esm/resources/utils/field-value-disclosure.utils.js

@@ -0,0 +1,53 @@
+import { isBackendOnlyField, isWriteOnlySecretField } from '@wildo-ai/zod-decorators';
+/**
+ * THE ONE RULE for "may this field's VALUE leave the backend?" — the disclosure seam every
+ * outward-facing surface derives from, rather than restating.
+ *
+ * ## What it answers, and what it deliberately does not
+ *
+ * A field's value is non-disclosable when it is `.isBackendOnly()` (the response DTO drops it) or
+ * `.isWriteOnlySecret()` (the response DTO masks it). Those two decorators ARE the disclosure
+ * boundary; nothing else is. In particular:
+ *
+ *  - `.isHidden()` gates CHART AGGREGATES (`field-access-validator`), which is a question about
+ *    which aggregate may expose a value, not about whether the value may be disclosed at all;
+ *  - `.isEphemeral()` gates the audit field-access trail and a one-time frontend display. An
+ *    ephemeral field is RETURNED — once, deliberately — so withholding it here would withhold
+ *    something the response contract promises.
+ *
+ * Adding either to this predicate would silently narrow surfaces that are working as designed, so
+ * they are named here as considered-and-excluded rather than left to the next reader to re-derive.
+ *
+ * ## Why BOTH decorators are tested, rather than one implying the other
+ *
+ * They are independent decorators. A future authoring form — or an application — may set one
+ * without the other, and a predicate that assumed the implication would open a disclosure path the
+ * day that happened. This reasoning is not new: `isFieldWithheldFromSubjectExport` wrote it down
+ * for the subject-export surface first, and this module is that rule extracted so the two surfaces
+ * cannot drift apart.
+ *
+ * ## Why it exists as its own module (issue #95)
+ *
+ * The rule had TWO independent hand-written copies and one surface that carried only half of it:
+ *
+ * | surface | `.isBackendOnly()` | `.isWriteOnlySecret()` |
+ * |---|---|---|
+ * | response DTO / `toResponseSafeToolOutput` (REST, MCP `tools/call`, A2A resource tools) | dropped | masked |
+ * | subject export (`isFieldWithheldFromSubjectExport`) | withheld | withheld |
+ * | RAG retrieval row header (`getSummaryFieldNames`) | excluded | **rendered in full** |
+ *
+ * The third row is the defect this module closes. A resource may declare a field BOTH
+ * `.isSummaryField()` and `.isWriteOnlySecret()` — nothing forbids it — and the retrieval header
+ * would then render, verbatim and into a provider payload, the value the response DTO exists to
+ * mask. No resource declares that pair today, so the hole was latent; the header is assembled from
+ * declarations an application controls, so it stays latent only until one does.
+ *
+ * assurance-control: WILDO.DATA.CONFIDENTIALITY — material a schema declares non-disclosable does
+ * not cross the client boundary. The registered objective names `.isBackendOnly()`; this rule is
+ * where its sibling decorator `.isWriteOnlySecret()` is held to the same boundary, since both
+ * describe a value the response DTO refuses to emit as authored.
+ */
+export function isNonDisclosableFieldValue(fieldSchema) {
+    return isBackendOnlyField(fieldSchema) || isWriteOnlySecretField(fieldSchema);
+}
+//# sourceMappingURL=field-value-disclosure.utils.js.map

package/dist/esm/resources/utils/field-value-disclosure.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-value-disclosure.utils.js","sourceRoot":"","sources":["../../../../../src/resources/utils/field-value-disclosure.utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEtF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAyB;IAClE,OAAO,kBAAkB,CAAC,WAAW,CAAC,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAC;AAChF,CAAC","sourcesContent":["import type { z } from 'zod';\nimport { isBackendOnlyField, isWriteOnlySecretField } from '@wildo-ai/zod-decorators';\n\n/**\n * THE ONE RULE for \"may this field's VALUE leave the backend?\" — the disclosure seam every\n * outward-facing surface derives from, rather than restating.\n *\n * ## What it answers, and what it deliberately does not\n *\n * A field's value is non-disclosable when it is `.isBackendOnly()` (the response DTO drops it) or\n * `.isWriteOnlySecret()` (the response DTO masks it). Those two decorators ARE the disclosure\n * boundary; nothing else is. In particular:\n *\n *  - `.isHidden()` gates CHART AGGREGATES (`field-access-validator`), which is a question about\n *    which aggregate may expose a value, not about whether the value may be disclosed at all;\n *  - `.isEphemeral()` gates the audit field-access trail and a one-time frontend display. An\n *    ephemeral field is RETURNED — once, deliberately — so withholding it here would withhold\n *    something the response contract promises.\n *\n * Adding either to this predicate would silently narrow surfaces that are working as designed, so\n * they are named here as considered-and-excluded rather than left to the next reader to re-derive.\n *\n * ## Why BOTH decorators are tested, rather than one implying the other\n *\n * They are independent decorators. A future authoring form — or an application — may set one\n * without the other, and a predicate that assumed the implication would open a disclosure path the\n * day that happened. This reasoning is not new: `isFieldWithheldFromSubjectExport` wrote it down\n * for the subject-export surface first, and this module is that rule extracted so the two surfaces\n * cannot drift apart.\n *\n * ## Why it exists as its own module (issue #95)\n *\n * The rule had TWO independent hand-written copies and one surface that carried only half of it:\n *\n * | surface | `.isBackendOnly()` | `.isWriteOnlySecret()` |\n * |---|---|---|\n * | response DTO / `toResponseSafeToolOutput` (REST, MCP `tools/call`, A2A resource tools) | dropped | masked |\n * | subject export (`isFieldWithheldFromSubjectExport`) | withheld | withheld |\n * | RAG retrieval row header (`getSummaryFieldNames`) | excluded | **rendered in full** |\n *\n * The third row is the defect this module closes. A resource may declare a field BOTH\n * `.isSummaryField()` and `.isWriteOnlySecret()` — nothing forbids it — and the retrieval header\n * would then render, verbatim and into a provider payload, the value the response DTO exists to\n * mask. No resource declares that pair today, so the hole was latent; the header is assembled from\n * declarations an application controls, so it stays latent only until one does.\n *\n * assurance-control: WILDO.DATA.CONFIDENTIALITY — material a schema declares non-disclosable does\n * not cross the client boundary. The registered objective names `.isBackendOnly()`; this rule is\n * where its sibling decorator `.isWriteOnlySecret()` is held to the same boundary, since both\n * describe a value the response DTO refuses to emit as authored.\n */\nexport function isNonDisclosableFieldValue(fieldSchema: z.ZodTypeAny): boolean {\n  return isBackendOnlyField(fieldSchema) || isWriteOnlySecretField(fieldSchema);\n}\n"]}

package/dist/esm/resources/utils/resources-config-operations.dtos-builder.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources-config-operations.dtos-builder.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/resources-config-operations.dtos-builder.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAkG,+BAA+B,EAAE,qBAAqB,EAAoC,QAAQ,EAA6K,wBAAwB,EAAkC,MAAM,oCAAoC,CAAC;AAC7d,OAAO,EAQL,oBAAoB,EAGrB,MAAM,6BAA6B,CAAC;AAQrC,OAAO,EAIL,YAAY,EA6Bb,MAAM,0BAA0B,CAAC;AAQlC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,qDAAa,CAAC;AAUjD,qBAAa,yCAAyC;IACpD;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAWrC,MAAM,CAAC,0BAA0B,CAAC,WAAW,SAAS,CAAC,CAAC,UAAU,EAChE,UAAU,EAAE,WAAW,EACvB,qBAAqB,EAAE,GAAG,GACzB,WAAW;IAQd;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IA6ClC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;IA8B/B,OAAO,CAAC,MAAM,CAAC,qCAAqC;IAOpD;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,GAAG,IAAI;IAahG;;;;;;OAMG;IACH,MAAM,CAAC,0CAA0C,CAC/C,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,GAC/D,IAAI;IAYP;;;;;;;;OAQG;IACH,MAAM,CAAC,qBAAqB,CAC1B,oBAAoB,SAAS,YAAY,GAAG,SAAS,EACrD,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,EACrE,WAAW,SAAS,CAAC,CAAC,UAAU,EAEhC,SAAS,EAAE,+BAA+B,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EACjG,cAAc,EAAE,qBAAqB,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAC5F,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,GAC/B,+BAA+B,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC;IAsbzF;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IA8EtC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA2DvC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,iCAAiC;IA4BhD;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA6BxC;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IASxC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;IA8D3C;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA4CxC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,MAAM,CAAC,yCAAyC;IAuDxD;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAiBzC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;IAiG3C;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,8BAA8B;IA6B7C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kCAAkC;IAgCjD;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,6BAA6B;IAc5C;;;OAGG;IACH,MAAM,CAAC,sBAAsB,CAC3B,MAAM,EAAE,GAAG,EACX,QAAQ,GAAE,MAAU,GACnB,MAAM;IAIT;;;OAGG;IACH,MAAM,CAAC,wBAAwB,CAC7B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,GAAG,EACX,QAAQ,GAAE,MAAU,GACnB,IAAI;IAOP;;;OAGG;IACH,MAAM,CAAC,wCAAwC,CAC7C,sBAAsB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,EAC9C,cAAc,GAAE,YAAY,EAAO,EACnC,QAAQ,GAAE,MAAU,GACnB,IAAI;IAUP;;;;;;OAMG;IACH,MAAM,CAAC,yBAAyB,CAC9B,sBAAsB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,EAC9C,cAAc,GAAE,YAAY,EAAO,EACnC,oBAAoB,GAAE,OAAc,EACpC,iBAAiB,GAAE,MAAU,GAC5B,IAAI;IAwFP;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAejC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAmI/B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA+LxC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAqQpC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAU9B;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA6GvC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,6BAA6B;IAqB5C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAoCnC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAc7C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAYjC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAc7C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAIjC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IA6DrC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA4BxC;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IA2ClC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,yBAAyB,CAC9B,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,CAAC,CAAC,UAAU,EACrB,kBAAkB,EAAE,oBAAoB,EAAE,EAC1C,gBAAgB,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,GACvC,CAAC,CAAC,UAAU;IA6Df;;;;;;;;;;OAUG;IACH,MAAM,CAAC,0BAA0B,CAC/B,OAAO,EAAE,CAAC,CAAC,UAAU,EACrB,kBAAkB,EAAE,oBAAoB,EAAE,EAC1C,gBAAgB,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,GACvC,CAAC,CAAC,UAAU;IA8Bf;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAsDxC;;;;;;;OAOG;IACH,MAAM,CAAC,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IAUtE;;;;;;;OAOG;IACH,MAAM,CAAC,4BAA4B,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IASzE;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IA0HrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,MAAM,CAAC,sBAAsB,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC;IAInE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;IAmI3C;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IA6FnC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,2BAA2B;IAsF1C;;;;;;;OAOG;IACH;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAUzC,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC;IAoD1E;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC;IAkD3E;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,iBAAiB,CACtB,SAAS,EAAE,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzD,QAAQ,CAAC,EAAE,QAAQ,GAClB,CAAC,CAAC,UAAU,GAAG,IAAI,GAAG,SAAS;IAiClC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;CASzC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,wBAAgB,uCAAuC,CACrD,UAAU,EAAE,CAAC,CAAC,UAAU,EACxB,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,IAAI,EAAE,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,WAAW,GACpG,MAAM,EAAE,CAiCV"}
+{"version":3,"file":"resources-config-operations.dtos-builder.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/resources-config-operations.dtos-builder.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAkG,+BAA+B,EAAE,qBAAqB,EAAqC,QAAQ,EAA8K,wBAAwB,EAAkC,MAAM,oCAAoC,CAAC;AAC/d,OAAO,EAQL,oBAAoB,EAGrB,MAAM,6BAA6B,CAAC;AAQrC,OAAO,EAIL,YAAY,EA6Bb,MAAM,0BAA0B,CAAC;AAQlC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,qDAAa,CAAC;AAUjD,qBAAa,yCAAyC;IACpD;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAWrC,MAAM,CAAC,0BAA0B,CAAC,WAAW,SAAS,CAAC,CAAC,UAAU,EAChE,UAAU,EAAE,WAAW,EACvB,qBAAqB,EAAE,GAAG,GACzB,WAAW;IAQd;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IA4DlC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;IA8B/B,OAAO,CAAC,MAAM,CAAC,qCAAqC;IAOpD;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,GAAG,IAAI;IAahG;;;;;;OAMG;IACH,MAAM,CAAC,0CAA0C,CAC/C,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,GAC/D,IAAI;IAYP;;;;;;;;OAQG;IACH,MAAM,CAAC,qBAAqB,CAC1B,oBAAoB,SAAS,YAAY,GAAG,SAAS,EACrD,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,EACrE,WAAW,SAAS,CAAC,CAAC,UAAU,EAEhC,SAAS,EAAE,+BAA+B,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EACjG,cAAc,EAAE,qBAAqB,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAC5F,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,GAC/B,+BAA+B,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC;IAsbzF;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IA8EtC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA2DvC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,iCAAiC;IA4BhD;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA6BxC;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IASxC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;IA8D3C;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA4CxC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,MAAM,CAAC,yCAAyC;IAuDxD;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAiBzC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;IAiG3C;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,8BAA8B;IA6B7C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kCAAkC;IAgCjD;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,6BAA6B;IAc5C;;;OAGG;IACH,MAAM,CAAC,sBAAsB,CAC3B,MAAM,EAAE,GAAG,EACX,QAAQ,GAAE,MAAU,GACnB,MAAM;IAIT;;;OAGG;IACH,MAAM,CAAC,wBAAwB,CAC7B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,GAAG,EACX,QAAQ,GAAE,MAAU,GACnB,IAAI;IAOP;;;OAGG;IACH,MAAM,CAAC,wCAAwC,CAC7C,sBAAsB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,EAC9C,cAAc,GAAE,YAAY,EAAO,EACnC,QAAQ,GAAE,MAAU,GACnB,IAAI;IAUP;;;;;;OAMG;IACH,MAAM,CAAC,yBAAyB,CAC9B,sBAAsB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,EAC9C,cAAc,GAAE,YAAY,EAAO,EACnC,oBAAoB,GAAE,OAAc,EACpC,iBAAiB,GAAE,MAAU,GAC5B,IAAI;IAwFP;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAejC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAmI/B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA+LxC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAqQpC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAU9B;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA6GvC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,6BAA6B;IAqB5C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAoCnC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAc7C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAYjC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAc7C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAIjC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IA6DrC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IA4BxC;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IA2ClC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,yBAAyB,CAC9B,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,CAAC,CAAC,UAAU,EACrB,kBAAkB,EAAE,oBAAoB,EAAE,EAC1C,gBAAgB,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,GACvC,CAAC,CAAC,UAAU;IA6Df;;;;;;;;;;OAUG;IACH,MAAM,CAAC,0BAA0B,CAC/B,OAAO,EAAE,CAAC,CAAC,UAAU,EACrB,kBAAkB,EAAE,oBAAoB,EAAE,EAC1C,gBAAgB,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,GACvC,CAAC,CAAC,UAAU;IA8Bf;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAsDxC;;;;;;;OAOG;IACH,MAAM,CAAC,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IAUtE;;;;;;;OAOG;IACH,MAAM,CAAC,4BAA4B,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IASzE;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IA0HrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,MAAM,CAAC,sBAAsB,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC;IAInE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;IAmI3C;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IA6FnC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,2BAA2B;IAsF1C;;;;;;;OAOG;IACH;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAUzC,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC;IAoD1E;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC;IAkD3E;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,iBAAiB,CACtB,SAAS,EAAE,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzD,QAAQ,CAAC,EAAE,QAAQ,GAClB,CAAC,CAAC,UAAU,GAAG,IAAI,GAAG,SAAS;IAiClC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,yBAAyB;CASzC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,wBAAgB,uCAAuC,CACrD,UAAU,EAAE,CAAC,CAAC,UAAU,EACxB,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,IAAI,EAAE,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,WAAW,GACpG,MAAM,EAAE,CAiCV"}

package/dist/esm/resources/utils/resources-config-operations.dtos-builder.utils.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import { CoreResourceOperation } from '../resources.shared.core.definitions.js';
-import { Resouces_BulkOperationBaseSchema, DataMode, OPERATION_VARIANT_KEY, createPaginationResponseMetadataSchema, getChildDirectionRelationships, getParentDirectionRelationships, ResourceGeneratedOperationKind } from '../resources-config.shared.schemas.js';
+import { Resources_BulkOperationBaseSchema, DataMode, OPERATION_VARIANT_KEY, createPaginationResponseMetadataSchema, getChildDirectionRelationships, getParentDirectionRelationships, ResourceGeneratedOperationKind } from '../resources-config.shared.schemas.js';
 import { ResourceRelationshipCardinality, isOneToOneCardinality, isArrayCardinality, getDefaultResponseSchemaForOperation, isOutputEnvelopeOperation, operationShouldHaveRequestDto, DefaultBulkDeleteResponseSchema, CONTEXT_AUTO_POPULATED_FIELD_IDENTIFIERS, createOrUpdateMandatoryDiscardFields } from '../resources.shared.schemas.js';
 import { Resources_SharedUtils } from '../resources.shared.utils.js';
 import { addDiscriminator, getCustomFieldMetadata, ZodDecorator, getZodType, hasZodType, isZodObject, isZodArray, isZodOptional, isZodNullable, isZodDefault, toPatchOptionalField, getZodObjectShape, getZodDefSchemaProperty, getZodDefArrayProperty, getZodDefStringProperty, getZodDefProperty, isZodTypeAny, getEnumValues, isExcludedFromCreate, isExcludedFromUpdate, isVirtualField, isTemplatableFileField, isPrimaryKey, isBackendOnlyField, getBackendOnlyParams, isWriteOnlySecretField, isDiscriminatorField, unwrapSchema, getMergedObjectOrUnionShape, withArrayElement, SCHEMA_METADATA } from '@wildo-ai/zod-decorators';
@@ -54,7 +54,22 @@ export class ResourcesConfigOperationsDtosBuilderUtils {
      * omitted because the original cross-field logic may no longer be valid.
      */
     static rebuildObjectSchema(schema, rebuiltShape, options) {
-        let rebuiltSchema = z.object(rebuiltShape);
+        /*
+         * Preserve the source object's CATCHALL (fixed 2026-09-01). `z.looseObject` is
+         * `catchall(z.unknown())` and `z.strictObject` is `catchall(z.never())`; a bare
+         * `z.object(rebuiltShape)` silently rebuilds BOTH as the default strip-unknown object. For a
+         * loose schema that strip is a data-loss bug with no error anywhere: every DTO parse quietly
+         * deletes the undeclared keys the schema's author explicitly declared passthrough for.
+         * Measured live on the creation board's `customResponseDto` (a deliberately loose dispatch
+         * outcome): a completed playbook run answered HTTP 200 with a literal `{}` — every field of a
+         * rich result stripped, because the outcome's named fields were optional and everything else
+         * was passthrough. Applied on the omit path too: removing declared fields does not change what
+         * the author said about UNDECLARED ones.
+         */
+        const sourceCatchall = schema.def?.catchall;
+        let rebuiltSchema = sourceCatchall !== undefined
+            ? z.object(rebuiltShape).catchall(sourceCatchall)
+            : z.object(rebuiltShape);
         if (options?.preserveChecks === false) {
             return rebuiltSchema;
         }
@@ -582,7 +597,7 @@ export class ResourcesConfigOperationsDtosBuilderUtils {
         }
         // Apply bulk operation decorator for URL-bearing bulk companion operations.
         // For bulk operations, we need to wrap the underlying operation's requestDto
-        // with Resouces_BulkOperationBaseSchema
+        // with Resources_BulkOperationBaseSchema
         if ('isBulkOperation' in operation && operation.isBulkOperation) {
             // Rebuild the underlying (non-bulk) requestDto by temporarily treating as non-bulk
             const underlyingOperation = {
@@ -601,16 +616,16 @@ export class ResourcesConfigOperationsDtosBuilderUtils {
                         });
                     }
                     if (isZodObject(underlyingRequestDto)) {
-                        return Resouces_BulkOperationBaseSchema.extend(getZodObjectShape(underlyingRequestDto));
+                        return Resources_BulkOperationBaseSchema.extend(getZodObjectShape(underlyingRequestDto));
                     }
-                    return Resouces_BulkOperationBaseSchema.and(underlyingRequestDto);
+                    return Resources_BulkOperationBaseSchema.and(underlyingRequestDto);
                 }
             }
             return effectiveOperation === CoreResourceOperation.CREATE_MANY
                 ? z.object({
                     data: z.array(z.object({})),
                 })
-                : Resouces_BulkOperationBaseSchema;
+                : Resources_BulkOperationBaseSchema;
         }
         // For create operations, use decorator-aware DTO building
         if (effectiveOperation === CoreResourceOperation.CREATE || effectiveOperation === CoreResourceOperation.CREATE_MANY) {