fix: relax response-DTO schemas from .strict() to .passthrough()

scripts/generate-zod.mjs

@@ -12,7 +12,7 @@
 import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { preprocessSpec, rewriteUnionsAsDiscriminated } from './lib/preprocess.mjs';
+import { preprocessSpec, rewriteUnionsAsDiscriminated, relaxResponseStrict } from './lib/preprocess.mjs';
 import { generateZodClientFromOpenAPI } from 'openapi-zod-client';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -192,6 +192,9 @@ async function main() {
   // Post-process: convert `z.union([...])` → `z.discriminatedUnion("type", [...])`
   // for hierarchies the preprocessor inlined.
   clean = rewriteUnionsAsDiscriminated(clean, inlinedDiscriminators);
+  // Post-process: relax `.strict()` → `.passthrough()` on response-shape DTOs
+  // so new API fields don't break surfaces built against an older spec.
+  clean = relaxResponseStrict(clean);
   writeFileSync(OUTPUT_PATH, clean, 'utf8');
 
   const schemaCount = (clean.match(/^const /gm) || []).length;

scripts/lib/preprocess.mjs

@@ -436,3 +436,43 @@ export function rewriteUnionsAsDiscriminated(source, unions) {
     return `z.discriminatedUnion("${disc}", [${memberList.join(', ')}])`;
   });
 }
+
+/**
+ * Rewrite `.strict()` → `.passthrough()` on response-shape DTO declarations
+ * so surfaces tolerate new fields added to the API after the surface was built.
+ * Request schemas keep `.strict()` to catch typos in user input.
+ */
+export function relaxResponseStrict(source) {
+  const declRe = /^const\s+(\w+)\b/gm;
+  const strictRe = /\.strict\(\)/g;
+
+  function isResponseShape(name) {
+    if (/^[a-z]/.test(name)) return false;
+    if (/(Request|Params)$/.test(name)) return false;
+    return (
+      /(Dto|Response)$/.test(name) ||
+      /^(SingleValueResponse|TableValueResult|CursorPage)/.test(name)
+    );
+  }
+
+  const declarations = [];
+  let match;
+  while ((match = declRe.exec(source)) !== null) {
+    declarations.push({ start: match.index, name: match[1] });
+  }
+  if (declarations.length === 0) return source;
+
+  let out = source.slice(0, declarations[0].start);
+  for (let i = 0; i < declarations.length; i++) {
+    const { start, name } = declarations[i];
+    const end =
+      i + 1 < declarations.length ? declarations[i + 1].start : source.length;
+    const body = source.slice(start, end);
+    if (isResponseShape(name)) {
+      out += body.replace(strictRe, '.passthrough()');
+    } else {
+      out += body;
+    }
+  }
+  return out;
+}