@cqrs-ddd/pipeline-zod 0.5.0

package/dist/helpers/zod-data.helpers.js

@@ -0,0 +1,195 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+export const ZOD_RAW_INPUT_KEY = Symbol.for('@cqrs-ddd/pipeline-zod:raw-input');
+export const ZOD_VALIDATED_DATA_KEY = Symbol.for('@cqrs-ddd/pipeline-zod:validated-data');
+const requestRawInputMap = new WeakMap();
+const requestValidationMap = new WeakMap();
+/** Records constructor input, including explicitly supplied null or undefined. */
+export function setRawInput(request, rawInput) {
+    requestRawInputMap.set(request, rawInput);
+}
+/** Returns original constructor input by reference, or the request when no input was recorded. */
+export function getRawInput(request) {
+    if (request && typeof request === 'object') {
+        if (requestRawInputMap.has(request))
+            return requestRawInputMap.get(request);
+        const raw = request[ZOD_RAW_INPUT_KEY];
+        if (raw !== undefined)
+            return raw;
+    }
+    return request;
+}
+/**
+ * Records the parsed payload a request now carries, detached from the live
+ * instance. The snapshot covers exactly the keys the schema produced, so fields
+ * the request class owns itself are neither tracked nor removed later.
+ */
+export function setValidatedData(request, schema, data) {
+    requestValidationMap.set(request, {
+        schema,
+        snapshot: Object.freeze(cloneData(data)),
+    });
+}
+/** Internal validation provenance; caller-supplied symbol metadata cannot establish it. */
+export function getValidationState(request) {
+    return requestValidationMap.get(request);
+}
+/**
+ * Returns a detached copy of the parsed payload for inspection. Its top level is
+ * frozen and every call returns a fresh copy, so changing it cannot change the
+ * validation state the behavior relies on. Without an internal validation
+ * record, it falls back to a value stored under `ZOD_VALIDATED_DATA_KEY`; that
+ * value is returned as data but never establishes a trusted validation result.
+ */
+export function getValidatedData(request) {
+    if (!request || typeof request !== 'object')
+        return undefined;
+    const snapshot = requestValidationMap.get(request)?.snapshot ??
+        request[ZOD_VALIDATED_DATA_KEY];
+    return snapshot === undefined
+        ? undefined
+        : Object.freeze(cloneData(snapshot));
+}
+/** Clones enumerable data, rich collections and binary values, preserving cycles and shared references. */
+export function cloneData(data) {
+    return cloneValue(data, new WeakMap());
+}
+function isBinary(value) {
+    return value instanceof ArrayBuffer || ArrayBuffer.isView(value);
+}
+function binaryBytes(value) {
+    return value instanceof ArrayBuffer
+        ? new Uint8Array(value)
+        : new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+}
+function enumerableKeys(value) {
+    const keys = Object.keys(value);
+    for (const symbol of Object.getOwnPropertySymbols(value)) {
+        if (Object.getOwnPropertyDescriptor(value, symbol)?.enumerable)
+            keys.push(symbol);
+    }
+    return keys;
+}
+function cloneValue(data, seen) {
+    if (data === null || typeof data !== 'object')
+        return data;
+    if (seen.has(data))
+        return seen.get(data);
+    if (isBinary(data)) {
+        // Contents copy wholesale; walking typed-array indices would be O(bytes).
+        const binary = Buffer.isBuffer(data)
+            ? Buffer.from(data)
+            : structuredClone(data);
+        seen.set(data, binary);
+        return binary;
+    }
+    let copy;
+    if (data instanceof Date)
+        copy = new Date(data.getTime());
+    else if (data instanceof RegExp) {
+        const expression = new RegExp(data.source, data.flags);
+        expression.lastIndex = data.lastIndex;
+        copy = expression;
+    }
+    else if (data instanceof Map)
+        copy = new Map();
+    else if (data instanceof Set)
+        copy = new Set();
+    else if (Array.isArray(data))
+        copy = new Array(data.length);
+    else
+        copy = Object.create(Object.getPrototypeOf(data) === null ? null : Object.prototype);
+    seen.set(data, copy);
+    if (data instanceof Map) {
+        for (const [key, value] of data)
+            copy.set(cloneValue(key, seen), cloneValue(value, seen));
+    }
+    else if (data instanceof Set) {
+        for (const value of data)
+            copy.add(cloneValue(value, seen));
+    }
+    for (const key of enumerableKeys(data)) {
+        Object.defineProperty(copy, key, {
+            value: cloneValue(Reflect.get(data, key), seen),
+            enumerable: true,
+            configurable: true,
+            writable: true,
+        });
+    }
+    return copy;
+}
+/** Structural data equality with one-to-one collection matching and cycle detection. */
+export function deepEqual(a, b) {
+    return equalData(a, b, new Map());
+}
+function equalData(a, b, pairs) {
+    if (Object.is(a, b))
+        return true;
+    if (typeof a !== 'object' ||
+        a === null ||
+        typeof b !== 'object' ||
+        b === null)
+        return false;
+    if (Object.prototype.toString.call(a) !== Object.prototype.toString.call(b))
+        return false;
+    if (isBinary(a) && isBinary(b)) {
+        const left = binaryBytes(a);
+        const right = binaryBytes(b);
+        return (left.length === right.length &&
+            left.every((byte, index) => byte === right[index]));
+    }
+    if (a instanceof Date &&
+        b instanceof Date &&
+        !Object.is(a.getTime(), b.getTime()))
+        return false;
+    if (a instanceof RegExp &&
+        b instanceof RegExp &&
+        (a.source !== b.source ||
+            a.flags !== b.flags ||
+            a.lastIndex !== b.lastIndex))
+        return false;
+    if (Array.isArray(a) && Array.isArray(b) && a.length !== b.length)
+        return false;
+    // Both directions of the current comparison path, so a cycle only matches the
+    // partner it was first paired with.
+    if (pairs.has(a))
+        return pairs.get(a) === b;
+    if (pairs.has(b))
+        return false;
+    pairs.set(a, b);
+    pairs.set(b, a);
+    try {
+        if ((a instanceof Map && b instanceof Map) ||
+            (a instanceof Set && b instanceof Set)) {
+            if (a.size !== b.size)
+                return false;
+            const remaining = [...b];
+            for (const item of a) {
+                const index = remaining.findIndex((other) => equalData(item, other, pairs));
+                if (index < 0)
+                    return false;
+                remaining.splice(index, 1);
+            }
+        }
+        const keysA = enumerableKeys(a);
+        const keysB = enumerableKeys(b);
+        if (keysA.length !== keysB.length)
+            return false;
+        const presentInB = new Set(keysB);
+        return keysA.every((key) => presentInB.has(key) &&
+            equalData(Reflect.get(a, key), Reflect.get(b, key), pairs));
+    }
+    finally {
+        // A rejected collection candidate must not leave path state for the next one.
+        pairs.delete(a);
+        pairs.delete(b);
+    }
+}
+/**
+ * Reports whether the request still carries the payload it was validated with.
+ * Only the schema-produced fields are compared: class-owned fields and
+ * non-enumerable CQRS/session metadata are outside the validated payload.
+ */
+export function hasBeenMutated(request, snapshot) {
+    return Object.keys(snapshot).some((key) => !Object.hasOwn(request, key) || !deepEqual(request[key], snapshot[key]));
+}
+//# sourceMappingURL=zod-data.helpers.js.map

package/dist/helpers/zod-data.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-data.helpers.js","sourceRoot":"","sources":["../../src/helpers/zod-data.helpers.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAItE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAC9C,uCAAuC,CACxC,CAAC;AAQF,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAmB,CAAC;AAC1D,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAA2B,CAAC;AAEpE,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,QAAiB;IAC5D,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAc,OAAgB;IACvD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;YACjC,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAM,CAAC;QAC9C,MAAM,GAAG,GAAI,OAAmC,CAAC,iBAAiB,CAAC,CAAC;QACpE,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,GAAQ,CAAC;IACzC,CAAC;IACD,OAAO,OAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,MAAe,EACf,IAA6B;IAE7B,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE;QAChC,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,kBAAkB,CAChC,OAAe;IAEf,OAAO,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAgB;IAEhB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,QAAQ,GACZ,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ;QAC1C,OAAmC,CAAC,sBAAsB,CAAC,CAAC;IAC/D,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAO,CAAC;AAChD,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,SAAS,CAAI,IAAO;IAClC,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAoC;IACvD,OAAO,KAAK,YAAY,WAAW;QACjC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,IAAI,GAAwB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,UAAU;YAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAI,IAAO,EAAE,IAA8B;IAC5D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAM,CAAC;IAE/C,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvB,OAAO,MAAW,CAAC;IACrB,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,IAAI,YAAY,IAAI;QAAE,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;SACrD,IAAI,IAAI,YAAY,MAAM,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACtC,IAAI,GAAG,UAAU,CAAC;IACpB,CAAC;SAAM,IAAI,IAAI,YAAY,GAAG;QAAE,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;SAC5C,IAAI,IAAI,YAAY,GAAG;QAAE,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;SAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;QAE1D,IAAI,GAAG,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAC/D,CAAC;IAEJ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrB,IAAI,IAAI,YAAY,GAAG,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI;YAC5B,IAA8B,CAAC,GAAG,CACjC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EACrB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CACxB,CAAC;IACN,CAAC;SAAM,IAAI,IAAI,YAAY,GAAG,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI;YACrB,IAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;YAC/B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC;YAC/C,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,SAAS,CAAC,CAAU,EAAE,CAAU;IAC9C,OAAO,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAChB,CAAU,EACV,CAAU,EACV,KAA0B;IAE1B,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IACE,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QAEV,OAAO,KAAK,CAAC;IACf,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CACnD,CAAC;IACJ,CAAC;IACD,IACE,CAAC,YAAY,IAAI;QACjB,CAAC,YAAY,IAAI;QACjB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAEpC,OAAO,KAAK,CAAC;IACf,IACE,CAAC,YAAY,MAAM;QACnB,CAAC,YAAY,MAAM;QACnB,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YACpB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YACnB,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC;QAE9B,OAAO,KAAK,CAAC;IACf,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAC/D,OAAO,KAAK,CAAC;IAEf,8EAA8E;IAC9E,oCAAoC;IACpC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,IACE,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,GAAG,CAAC;YACtC,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,GAAG,CAAC,EACtC,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YACpC,MAAM,SAAS,GAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAC9B,CAAC;gBACF,IAAI,KAAK,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC5B,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,KAAK,CAChB,CAAC,GAAG,EAAE,EAAE,CACN,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAC7D,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,8EAA8E;QAC9E,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAgC,EAChC,QAAiC;IAEjC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC/B,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,19 @@
+import type { ZodValidationError } from './errors/zod-validation.error.js';
+/** An HTTP answer for an error: status, JSON body and headers. */
+export interface HttpResponse {
+    status: number;
+    body: Record<string, unknown>;
+    headers: Record<string, string>;
+}
+/**
+ * The HTTP answer for a {@link ZodValidationError}: `400 Bad Request` with the issue
+ * details.
+ *
+ * @example
+ * ```ts
+ * const { status, body } = toHttpResponse(error);
+ * res.status(status).json(body);
+ * ```
+ */
+export declare function toHttpResponse(error: ZodValidationError): HttpResponse;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,YAAY,CAWtE"}

package/dist/http.js

@@ -0,0 +1,24 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+/**
+ * The HTTP answer for a {@link ZodValidationError}: `400 Bad Request` with the issue
+ * details.
+ *
+ * @example
+ * ```ts
+ * const { status, body } = toHttpResponse(error);
+ * res.status(status).json(body);
+ * ```
+ */
+export function toHttpResponse(error) {
+    return {
+        status: 400,
+        body: {
+            statusCode: 400,
+            error: 'Bad Request',
+            message: error.message,
+            details: error.details,
+        },
+        headers: {},
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAWtE;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB;QACD,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Zod validation: `validated()`, the behavior, request classes that carry their schema, and `createZodMapper()` for the HTTP edge. The HTTP mapping of its errors is the `@cqrs-ddd/pipeline-zod/http` entry point.
+ *
+ * @module main
+ */
+export { createZodMapper, type ZodMapper } from './create-zod-mapper.js';
+export { type AbstractConstructor, createCommand, createQuery, createZodRequest, type InferInput, type InferOutput, type ZodCommandClass, type ZodQueryClass, type ZodRequestClass, } from './create-zod-request.js';
+export { ZodValidationError } from './errors/zod-validation.error.js';
+export { validated } from './helpers/validated.intent.js';
+export { updatable, updatableFieldsOf } from './updatable.js';
+export { getRawInput, getValidatedData, ZOD_RAW_INPUT_KEY, ZOD_SCHEMA_KEY, ZOD_VALIDATED_DATA_KEY, ZodValidationBehavior, type ZodValidationOptions, } from './zod-validation.behavior.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EACL,KAAK,mBAAmB,EACxB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,eAAe,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,8BAA8B,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+/**
+ * Zod validation: `validated()`, the behavior, request classes that carry their schema, and `createZodMapper()` for the HTTP edge. The HTTP mapping of its errors is the `@cqrs-ddd/pipeline-zod/http` entry point.
+ *
+ * @module main
+ */
+export { createZodMapper } from './create-zod-mapper.js';
+export { createCommand, createQuery, createZodRequest, } from './create-zod-request.js';
+export { ZodValidationError } from './errors/zod-validation.error.js';
+export { validated } from './helpers/validated.intent.js';
+export { updatable, updatableFieldsOf } from './updatable.js';
+export { getRawInput, getValidatedData, ZOD_RAW_INPUT_KEY, ZOD_SCHEMA_KEY, ZOD_VALIDATED_DATA_KEY, ZodValidationBehavior, } from './zod-validation.behavior.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAkB,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAEL,aAAa,EACb,WAAW,EACX,gBAAgB,GAMjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,8BAA8B,CAAC"}

package/dist/updatable.d.ts

@@ -0,0 +1,44 @@
+import { type ZodType } from 'zod';
+/**
+ * Marks a command field as updatable: a change the command requests, which
+ * field-level authorization must check.
+ *
+ * {@link createCommand} lists the marked fields of the top-level object as
+ * the class's static `updatableFields`, the list of fields to pass to
+ * field-level authorization. A field without the mark is never in that list,
+ * so mark every field the handler writes.
+ *
+ * The mark survives the checks and wrappers chained after it (`.min()`,
+ * `.optional()`, `.nullable()`, `.default()`, `.transform()`) and
+ * `.partial()` on the object. It is set on a copy, so a schema shared with
+ * other commands stays unmarked.
+ *
+ * @param schema - The field schema to mark.
+ * @returns A marked copy of `schema`, with the same type.
+ *
+ * @example
+ * ```ts
+ * export class UpdateRoleCommand extends createCommand(
+ *   z.object({
+ *     id: z.uuid(),
+ *     name: z.string().trim().apply(updatable).min(3),
+ *   }),
+ * ) {}
+ *
+ * UpdateRoleCommand.updatableFields; // ['name']
+ * ```
+ */
+export declare function updatable<TSchema extends ZodType>(schema: TSchema): TSchema;
+/**
+ * Lists the fields of an object schema marked with {@link updatable}, in
+ * shape order.
+ *
+ * Only the top-level object is read, also through a top-level `.transform()`
+ * or `.pipe()`: a mark inside a nested object, an array or a union is not
+ * listed. Any other schema has no updatable fields.
+ *
+ * @param schema - A command schema, usually a `z.object()`.
+ * @returns The marked field names, frozen.
+ */
+export declare function updatableFieldsOf(schema: ZodType): readonly string[];
+//# sourceMappingURL=updatable.d.ts.map

package/dist/updatable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updatable.d.ts","sourceRoot":"","sources":["../src/updatable.ts"],"names":[],"mappings":"AAEA,OAAO,EAAY,KAAK,OAAO,EAAE,MAAM,KAAK,CAAC;AAmB7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,SAAS,CAAC,OAAO,SAAS,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAI3E;AAkBD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAKpE"}

package/dist/updatable.js

@@ -0,0 +1,76 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+import { registry } from 'zod';
+/**
+ * The fields marked with {@link updatable}. A private registry rather than
+ * `.meta()`, so the mark never appears in `z.toJSONSchema()` output and no
+ * other library can set or clear it.
+ */
+const updatableFields = registry();
+const defOf = (schema) => schema._zod.def;
+/**
+ * Marks a command field as updatable: a change the command requests, which
+ * field-level authorization must check.
+ *
+ * {@link createCommand} lists the marked fields of the top-level object as
+ * the class's static `updatableFields`, the list of fields to pass to
+ * field-level authorization. A field without the mark is never in that list,
+ * so mark every field the handler writes.
+ *
+ * The mark survives the checks and wrappers chained after it (`.min()`,
+ * `.optional()`, `.nullable()`, `.default()`, `.transform()`) and
+ * `.partial()` on the object. It is set on a copy, so a schema shared with
+ * other commands stays unmarked.
+ *
+ * @param schema - The field schema to mark.
+ * @returns A marked copy of `schema`, with the same type.
+ *
+ * @example
+ * ```ts
+ * export class UpdateRoleCommand extends createCommand(
+ *   z.object({
+ *     id: z.uuid(),
+ *     name: z.string().trim().apply(updatable).min(3),
+ *   }),
+ * ) {}
+ *
+ * UpdateRoleCommand.updatableFields; // ['name']
+ * ```
+ */
+export function updatable(schema) {
+    const marked = schema.clone();
+    updatableFields.add(marked, { updatable: true });
+    return marked;
+}
+function isMarked(schema) {
+    if (updatableFields.get(schema)?.updatable)
+        return true;
+    const def = defOf(schema);
+    if (def.type === 'pipe') {
+        return isMarked(def.in) || isMarked(def.out);
+    }
+    return def.innerType !== undefined && isMarked(def.innerType);
+}
+function objectShape(schema) {
+    const def = defOf(schema);
+    if (def.type === 'object')
+        return def.shape;
+    if (def.type === 'pipe')
+        return objectShape(def.in);
+    return undefined;
+}
+/**
+ * Lists the fields of an object schema marked with {@link updatable}, in
+ * shape order.
+ *
+ * Only the top-level object is read, also through a top-level `.transform()`
+ * or `.pipe()`: a mark inside a nested object, an array or a union is not
+ * listed. Any other schema has no updatable fields.
+ *
+ * @param schema - A command schema, usually a `z.object()`.
+ * @returns The marked field names, frozen.
+ */
+export function updatableFieldsOf(schema) {
+    const shape = objectShape(schema) ?? {};
+    return Object.freeze(Object.keys(shape).filter((key) => isMarked(shape[key])));
+}
+//# sourceMappingURL=updatable.js.map

package/dist/updatable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updatable.js","sourceRoot":"","sources":["../src/updatable.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,EAAE,QAAQ,EAAgB,MAAM,KAAK,CAAC;AAE7C;;;;GAIG;AACH,MAAM,eAAe,GAAG,QAAQ,EAAgC,CAAC;AAUjE,MAAM,KAAK,GAAG,CAAC,MAAe,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAA4B,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,SAAS,CAA0B,MAAe;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC9B,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAe;IAC/B,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAa,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAc,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,MAAe;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC;IAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,EAAa,CAAC,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC"}

package/dist/zod-validation.behavior.d.ts

@@ -0,0 +1,85 @@
+import { IPipelineBehavior, IPipelineContext, NextDelegate } from '@cqrs-ddd/pipeline';
+import { ZodType } from 'zod';
+import { getRawInput, getValidatedData, ZOD_RAW_INPUT_KEY, ZOD_VALIDATED_DATA_KEY } from './helpers/zod-data.helpers.js';
+export { getRawInput, getValidatedData, ZOD_RAW_INPUT_KEY, ZOD_VALIDATED_DATA_KEY, };
+/**
+ * Conventional property key used to attach a Zod schema to a command, query, or event class.
+ *
+ * Classes built with `createCommand()`, `createQuery()`, or `createZodRequest()` automatically receive this property, so
+ * {@link ZodValidationBehavior} can introspect and validate without extra wiring.
+ *
+ * For manually-written event classes you can attach the schema yourself:
+ *
+ * @example
+ * ```ts
+ * import { ZOD_SCHEMA_KEY } from '@cqrs-ddd/pipeline-zod';
+ * import { z } from 'zod';
+ *
+ * const userCreatedSchema = z.object({
+ *   userId: z.uuid(),
+ *   username: z.string().min(1),
+ *   email: z.email(),
+ * });
+ *
+ * export class UserCreatedEvent {
+ *   static readonly [ZOD_SCHEMA_KEY] = userCreatedSchema;
+ *
+ *   constructor(
+ *     public readonly userId: string,
+ *     public readonly username: string,
+ *     public readonly email: string,
+ *   ) {}
+ * }
+ * ```
+ */
+export declare const ZOD_SCHEMA_KEY: '_zodSchema';
+/** Options of {@link ZodValidationBehavior}. */
+export interface ZodValidationOptions {
+    /**
+     * The schema of the input. Given, the input is parsed into a copy that the handler
+     * receives, so the caller's value never changes; this is how a wrapped function is
+     * validated (its arguments as a `z.tuple` when it takes several). Absent, the schema
+     * attached to the request class applies, in place.
+     */
+    schema?: ZodType;
+}
+/**
+ * Pipeline behavior that parses the incoming request (command, query, or event)
+ * with a Zod schema when one is attached to the request class via the `_zodSchema`
+ * static property (set automatically by `createCommand()`, `createQuery()`, or `createZodRequest()`).
+ *
+ * **How it works:**
+ * - If `context.requestType._zodSchema` is a `ZodType`, the behavior runs
+ *   `schema.safeParseAsync(context.request)`.
+ * - On failure it throws {@link ZodValidationError}; `toHttpResponse()` from
+ *   `@cqrs-ddd/pipeline-zod/http` maps it to an HTTP 400.
+ * - On success, the parsed result must be a plain object because pipeline
+ *   request identity is preserved in-place. Keys omitted by the schema are
+ *   deleted and parsed/coerced/defaulted values are assigned before the handler
+ *   runs. A top-level transform to an array, primitive, Date, or other
+ *   non-record shape is rejected rather than corrupting the request instance.
+ * - If no schema is attached (e.g. a plain event class), the behavior is a transparent
+ *   no-op and simply calls `next()`.
+ *
+ * **Registration — globally for all request kinds:**
+ * ```ts
+ * createPipeline({
+ *   globalBehaviors: {
+ *     scope: 'all',
+ *     before: [ZodValidationBehavior],
+ *   },
+ * });
+ * ```
+ *
+ * **Registration — per handler only:**
+ * ```ts
+ * class CreateUserHandler {
+ *   @pipeline.wrap({ kind: 'command' }, ZodValidationBehavior)
+ *   async handle(command: CreateUserCommand) {}
+ * }
+ * ```
+ */
+export declare class ZodValidationBehavior implements IPipelineBehavior {
+    handle(context: IPipelineContext, next: NextDelegate): Promise<unknown>;
+}
+//# sourceMappingURL=zod-validation.behavior.d.ts.map

package/dist/zod-validation.behavior.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-validation.behavior.d.ts","sourceRoot":"","sources":["../src/zod-validation.behavior.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EAEb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAM9B,OAAO,EACL,WAAW,EACX,gBAAgB,EAIhB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,cAAc,EAAG,YAAqB,CAAC;AAEpD,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,qBAAa,qBAAsB,YAAW,iBAAiB;IACvD,MAAM,CACV,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,OAAO,CAAC,CA0ClB;CACF"}

package/dist/zod-validation.behavior.js

@@ -0,0 +1,115 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+import { replaceRequest, } from '@cqrs-ddd/pipeline';
+import { untyped } from '@cqrs-ddd/untyped';
+import { ZodValidationError } from './errors/zod-validation.error.js';
+import { assertPlainRequestOutput, defineEnumerableDataProperties, } from './helpers/request-output.js';
+import { getRawInput, getValidatedData, getValidationState, hasBeenMutated, setValidatedData, ZOD_RAW_INPUT_KEY, ZOD_VALIDATED_DATA_KEY, } from './helpers/zod-data.helpers.js';
+export { getRawInput, getValidatedData, ZOD_RAW_INPUT_KEY, ZOD_VALIDATED_DATA_KEY, };
+/**
+ * Conventional property key used to attach a Zod schema to a command, query, or event class.
+ *
+ * Classes built with `createCommand()`, `createQuery()`, or `createZodRequest()` automatically receive this property, so
+ * {@link ZodValidationBehavior} can introspect and validate without extra wiring.
+ *
+ * For manually-written event classes you can attach the schema yourself:
+ *
+ * @example
+ * ```ts
+ * import { ZOD_SCHEMA_KEY } from '@cqrs-ddd/pipeline-zod';
+ * import { z } from 'zod';
+ *
+ * const userCreatedSchema = z.object({
+ *   userId: z.uuid(),
+ *   username: z.string().min(1),
+ *   email: z.email(),
+ * });
+ *
+ * export class UserCreatedEvent {
+ *   static readonly [ZOD_SCHEMA_KEY] = userCreatedSchema;
+ *
+ *   constructor(
+ *     public readonly userId: string,
+ *     public readonly username: string,
+ *     public readonly email: string,
+ *   ) {}
+ * }
+ * ```
+ */
+export const ZOD_SCHEMA_KEY = '_zodSchema';
+/**
+ * Pipeline behavior that parses the incoming request (command, query, or event)
+ * with a Zod schema when one is attached to the request class via the `_zodSchema`
+ * static property (set automatically by `createCommand()`, `createQuery()`, or `createZodRequest()`).
+ *
+ * **How it works:**
+ * - If `context.requestType._zodSchema` is a `ZodType`, the behavior runs
+ *   `schema.safeParseAsync(context.request)`.
+ * - On failure it throws {@link ZodValidationError}; `toHttpResponse()` from
+ *   `@cqrs-ddd/pipeline-zod/http` maps it to an HTTP 400.
+ * - On success, the parsed result must be a plain object because pipeline
+ *   request identity is preserved in-place. Keys omitted by the schema are
+ *   deleted and parsed/coerced/defaulted values are assigned before the handler
+ *   runs. A top-level transform to an array, primitive, Date, or other
+ *   non-record shape is rejected rather than corrupting the request instance.
+ * - If no schema is attached (e.g. a plain event class), the behavior is a transparent
+ *   no-op and simply calls `next()`.
+ *
+ * **Registration — globally for all request kinds:**
+ * ```ts
+ * createPipeline({
+ *   globalBehaviors: {
+ *     scope: 'all',
+ *     before: [ZodValidationBehavior],
+ *   },
+ * });
+ * ```
+ *
+ * **Registration — per handler only:**
+ * ```ts
+ * class CreateUserHandler {
+ *   @pipeline.wrap({ kind: 'command' }, ZodValidationBehavior)
+ *   async handle(command: CreateUserCommand) {}
+ * }
+ * ```
+ */
+export class ZodValidationBehavior {
+    async handle(context, next) {
+        const declared = context.getBehaviorOptions(ZodValidationBehavior)?.schema;
+        if (declared) {
+            const parsed = await declared.safeParseAsync(context.request);
+            if (!parsed.success)
+                throw new ZodValidationError(parsed.error);
+            replaceRequest(context, parsed.data);
+            return next();
+        }
+        const schema = context.requestType
+            ? untyped(context.requestType)[ZOD_SCHEMA_KEY]
+            : undefined;
+        if (!schema)
+            return next();
+        if (!context.request || typeof context.request !== 'object') {
+            throw new TypeError('ZodValidationBehavior requires the pipeline request to be an object when a schema is attached.');
+        }
+        const request = context.request;
+        const state = getValidationState(request);
+        if (state?.schema === schema && !hasBeenMutated(request, state.snapshot))
+            return next();
+        const result = await schema.safeParseAsync(request);
+        if (!result.success)
+            throw new ZodValidationError(result.error);
+        assertPlainRequestOutput(result.data, 'behavior');
+        // A previously parsed request only gives up the fields its schema produced;
+        // an unvalidated one gives up every field the schema does not keep.
+        const removable = state
+            ? Object.keys(state.snapshot)
+            : Object.keys(request);
+        for (const key of removable) {
+            if (!Object.hasOwn(result.data, key))
+                delete request[key];
+        }
+        defineEnumerableDataProperties(request, result.data);
+        setValidatedData(request, schema, result.data);
+        return next();
+    }
+}
+//# sourceMappingURL=zod-validation.behavior.js.map

package/dist/zod-validation.behavior.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-validation.behavior.js","sourceRoot":"","sources":["../src/zod-validation.behavior.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,EAIL,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,YAAqB,CAAC;AAapD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,OAAO,qBAAqB;IAChC,KAAK,CAAC,MAAM,CACV,OAAyB,EACzB,IAAkB;QAElB,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CACzC,qBAAqB,CACtB,EAAE,MAAM,CAAC;QACV,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW;YAChC,CAAC,CAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,cAAc,CAAyB;YACvE,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,SAAS,CACjB,gGAAgG,CACjG,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAkC,CAAC;QAC3D,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC;YACtE,OAAO,IAAI,EAAE,CAAC;QAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAElD,4EAA4E;QAC5E,oEAAoE;QACpE,MAAM,SAAS,GAAG,KAAK;YACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,8BAA8B,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAE/C,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;CACF"}