fix(inbound-api): resolve InboundAPI-009,010,011,013 — cache failed compiles, reject unknown body fields, close enumeration oracle, drop misnamed factory; InboundAPI-007,012 flagged

tests/ScadaLink.InboundAPI.Tests/ParameterValidatorTests.cs

@@ -134,4 +134,40 @@ public class ParameterValidatorTests
         Assert.False(result.IsValid);
         Assert.Contains("Unknown parameter type", result.ErrorMessage);
     }
+
+    // --- InboundAPI-010: unexpected top-level body fields must be reported so
+    // callers get feedback on typo'd parameter names instead of silent ignore. ---
+
+    [Fact]
+    public void UnexpectedBodyField_ReturnsInvalid()
+    {
+        var definitions = JsonSerializer.Serialize(new[]
+        {
+            new { Name = "value", Type = "Integer", Required = true }
+        });
+
+        // "valeu" is a typo for "value"; the caller must be told, not ignored.
+        using var doc = JsonDocument.Parse("{\"value\": 1, \"valeu\": 2}");
+        var result = ParameterValidator.Validate(doc.RootElement.Clone(), definitions);
+
+        Assert.False(result.IsValid);
+        Assert.Contains("valeu", result.ErrorMessage);
+    }
+
+    [Fact]
+    public void OnlyDefinedFields_StillValid()
+    {
+        // Regression guard: a body containing exactly the defined parameters
+        // must continue to validate.
+        var definitions = JsonSerializer.Serialize(new[]
+        {
+            new { Name = "value", Type = "Integer", Required = true }
+        });
+
+        using var doc = JsonDocument.Parse("{\"value\": 1}");
+        var result = ParameterValidator.Validate(doc.RootElement.Clone(), definitions);
+
+        Assert.True(result.IsValid);
+        Assert.Equal((long)1, result.Parameters["value"]);
+    }
 }