fix(core): omit undefined permission metadata

packages/core/src/permission.ts

@@ -168,7 +168,9 @@ const layer = Layer.effect(
         action: input.action,
         resources: input.resources,
         save: input.save,
-        metadata: input.metadata,
+        metadata: input.metadata
+          ? Object.fromEntries(Object.entries(input.metadata).filter(([, value]) => value !== undefined))
+          : undefined,
         source: input.source,
       }
     }

packages/core/test/permission.test.ts

@@ -118,6 +118,33 @@ describe("PermissionV2", () => {
     }),
   )
 
+  it.effect("omits undefined permission metadata fields", () =>
+    Effect.gen(function* () {
+      yield* setup()
+      const service = yield* PermissionV2.Service
+      yield* service.ask(
+        assertion({
+          metadata: {
+            root: ".",
+            path: undefined,
+            limit: undefined,
+            enabled: false,
+            count: 0,
+            nullable: null,
+          },
+        }),
+      )
+
+      const request = yield* service.get(PermissionV2.ID.create("per_test"))
+      expect(request?.metadata).toEqual({
+        root: ".",
+        enabled: false,
+        count: 0,
+        nullable: null,
+      })
+    }),
+  )
+
   it.effect("evaluates against an explicit provider-turn agent", () =>
     Effect.gen(function* () {
       yield* setup([{ action: "read", resource: "*", effect: "allow" }])