[razor-x]

Summary

 generated route
-  inline at-least-one guard
+  Seam::RequestParameters.require_at_least_one(...)

 required parameter specs
-  mutable production endpoint schemas
+  fixed test request using the production validator and paginator

Extracts the smallest shared validator used by generated routes, then tests generic required-parameter and paginator behavior without depending on access_methods.list continuing to require a filter.

Evidence

• Before: generic validation specs depended on the current access_methods.list schema.
  After: fixed test configuration covers empty and pagination-only rejection, filtered acceptance, rejection before requests, unpaginated validation, and all paginator entrypoints.
• npm run typecheck — passed
• Ruby syntax checks for the helper, spec, and all changed generated routes — passed
• Direct helper smoke test — passed
• bundle exec rspec / full rake — not run: clean dependency installation requires native extension compilation, but the sandbox denied reading /usr/include/stdc-predef.h.
• npm run generate generated the expected route changes; its post-generate Ruby formatter could not run for the same missing bundle. Unrelated generated resource formatting changes were reverted.

Merge Danger

Door: two-way

Blast Radius: request validation

All generated at-least-one guards now delegate to one equivalent helper. Disabling that helper makes the direct validation and paginator specs stop rejecting invalid requests.