feat(orm): implement field omission

package.json

@@ -2,7 +2,7 @@
     "name": "zenstack-v3",
     "version": "3.0.0-beta.25",
     "description": "ZenStack",
-    "packageManager": "pnpm@10.20.0",
+    "packageManager": "pnpm@10.23.0",
     "scripts": {
         "build": "turbo run build",
         "watch": "turbo run watch build",
@@ -25,14 +25,14 @@
         "eslint": "~9.29.0",
         "glob": "^11.0.2",
         "prettier": "^3.5.3",
+        "prisma": "catalog:",
         "tsup": "^8.5.0",
         "tsx": "^4.20.3",
         "turbo": "^2.5.4",
         "typescript": "catalog:",
         "typescript-eslint": "^8.34.1",
         "vitest": "^3.2.4",
-        "yaml": "^2.8.0",
-        "prisma": "catalog:"
+        "yaml": "^2.8.0"
     },
     "pnpm": {
         "onlyBuiltDependencies": [

packages/language/res/stdlib.zmodel

@@ -393,6 +393,13 @@ attribute @ignore() @@@prisma
  */
 attribute @@ignore() @@@prisma
 
+/**
+ * Indicates that the field should be omitted by default when read with an ORM client. The omission can be 
+ * overridden in options passed to create `ZenStackClient`, or at query time by explicitly passing in an
+ * `omit` clause. The attribute is only effective for ORM query APIs, not for query-builder APIs.
+ */
+attribute @omit()
+
 /**
  * Automatically stores the time when a record was last updated.
  */