@cratis/arc 22.87.0 → 22.87.2

package/dist/esm/validation/rules/NotEmptyRule.js

@@ -16,7 +16,7 @@ import { PropertyRule } from '../PropertyRule.js';
         if (value === null || value === undefined) {
             return false;
         }
-        if (typeof value === 'string' && value.trim() === '') {
+        if (typeof value === 'string' && /^\p{White_Space}*$/u.test(value)) {
             return false;
         }
         if (Array.isArray(value) && value.length === 0) {

package/dist/esm/validation/rules/NotEmptyRule.js.map

@@ -1 +1 @@
-{"version":3,"file":"NotEmptyRule.js","sources":["../../../../validation/rules/NotEmptyRule.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { PropertyRule } from '../PropertyRule.js';\n\n/**\n * Validation rule that checks if a value is not null, undefined, or empty.\n * @template T The type being validated.\n */\nexport class NotEmptyRule<T> extends PropertyRule<T, unknown> {\n    /**\n     * Initializes a new instance of the {@link NotEmptyRule} class.\n     * @param propertyAccessor Function to access the property value from the instance.\n     */\n    constructor(propertyAccessor: (instance: T) => unknown) {\n        super(propertyAccessor, \"'{PropertyName}' must not be empty.\");\n    }\n\n    /** @inheritdoc */\n    protected isValid(value: unknown): boolean {\n        if (value === null || value === undefined) {\n            return false;\n        }\n        if (typeof value === 'string' && value.trim() === '') {\n            return false;\n        }\n        if (Array.isArray(value) && value.length === 0) {\n            return false;\n        }\n        return true;\n    }\n}\n\n/**\n * Validation rule that checks if a value is not null or undefined.\n * @template T The type being validated.\n */\nexport class NotNullRule<T> extends PropertyRule<T, unknown> {\n    /**\n     * Initializes a new instance of the {@link NotNullRule} class.\n     * @param propertyAccessor Function to access the property value from the instance.\n     */\n    constructor(propertyAccessor: (instance: T) => unknown) {\n        super(propertyAccessor, \"'{PropertyName}' must not be empty.\");\n    }\n\n    /** @inheritdoc */\n    protected isValid(value: unknown): boolean {\n        return value !== null && value !== undefined;\n    }\n}\n"],"names":["NotEmptyRule","PropertyRule","propertyAccessor","isValid","value","undefined","trim","Array","isArray","length","NotNullRule"],"mappings":";;AAAA;AACA;AAIA;;;IAIO,MAAMA,YAAAA,SAAwBC,YAAAA,CAAAA;AACjC;;;QAIA,WAAA,CAAYC,gBAA0C,CAAE;AACpD,QAAA,KAAK,CAACA,gBAAAA,EAAkB,qCAAA,CAAA;AAC5B,IAAA;AAEA,uBACUC,OAAAA,CAAQC,KAAc,EAAW;QACvC,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW;YACvC,OAAO,KAAA;AACX,QAAA;AACA,QAAA,IAAI,OAAOD,KAAAA,KAAU,QAAA,IAAYA,KAAAA,CAAME,IAAI,OAAO,EAAA,EAAI;YAClD,OAAO,KAAA;AACX,QAAA;AACA,QAAA,IAAIC,MAAMC,OAAO,CAACJ,UAAUA,KAAAA,CAAMK,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO,KAAA;AACX,QAAA;QACA,OAAO,IAAA;AACX,IAAA;AACJ;AAEA;;;IAIO,MAAMC,WAAAA,SAAuBT,YAAAA,CAAAA;AAChC;;;QAIA,WAAA,CAAYC,gBAA0C,CAAE;AACpD,QAAA,KAAK,CAACA,gBAAAA,EAAkB,qCAAA,CAAA;AAC5B,IAAA;AAEA,uBACUC,OAAAA,CAAQC,KAAc,EAAW;QACvC,OAAOA,KAAAA,KAAU,QAAQA,KAAAA,KAAUC,SAAAA;AACvC,IAAA;AACJ;;"}
+{"version":3,"file":"NotEmptyRule.js","sources":["../../../../validation/rules/NotEmptyRule.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { PropertyRule } from '../PropertyRule.js';\n\n/**\n * Validation rule that checks if a value is not null, undefined, or empty.\n * @template T The type being validated.\n */\nexport class NotEmptyRule<T> extends PropertyRule<T, unknown> {\n    /**\n     * Initializes a new instance of the {@link NotEmptyRule} class.\n     * @param propertyAccessor Function to access the property value from the instance.\n     */\n    constructor(propertyAccessor: (instance: T) => unknown) {\n        super(propertyAccessor, \"'{PropertyName}' must not be empty.\");\n    }\n\n    /** @inheritdoc */\n    protected isValid(value: unknown): boolean {\n        if (value === null || value === undefined) {\n            return false;\n        }\n        if (typeof value === 'string' && /^\\p{White_Space}*$/u.test(value)) {\n            return false;\n        }\n        if (Array.isArray(value) && value.length === 0) {\n            return false;\n        }\n        return true;\n    }\n}\n\n/**\n * Validation rule that checks if a value is not null or undefined.\n * @template T The type being validated.\n */\nexport class NotNullRule<T> extends PropertyRule<T, unknown> {\n    /**\n     * Initializes a new instance of the {@link NotNullRule} class.\n     * @param propertyAccessor Function to access the property value from the instance.\n     */\n    constructor(propertyAccessor: (instance: T) => unknown) {\n        super(propertyAccessor, \"'{PropertyName}' must not be empty.\");\n    }\n\n    /** @inheritdoc */\n    protected isValid(value: unknown): boolean {\n        return value !== null && value !== undefined;\n    }\n}\n"],"names":["NotEmptyRule","PropertyRule","propertyAccessor","isValid","value","undefined","test","Array","isArray","length","NotNullRule"],"mappings":";;AAAA;AACA;AAIA;;;IAIO,MAAMA,YAAAA,SAAwBC,YAAAA,CAAAA;AACjC;;;QAIA,WAAA,CAAYC,gBAA0C,CAAE;AACpD,QAAA,KAAK,CAACA,gBAAAA,EAAkB,qCAAA,CAAA;AAC5B,IAAA;AAEA,uBACUC,OAAAA,CAAQC,KAAc,EAAW;QACvC,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW;YACvC,OAAO,KAAA;AACX,QAAA;AACA,QAAA,IAAI,OAAOD,KAAAA,KAAU,QAAA,IAAY,qBAAA,CAAsBE,IAAI,CAACF,KAAAA,CAAAA,EAAQ;YAChE,OAAO,KAAA;AACX,QAAA;AACA,QAAA,IAAIG,MAAMC,OAAO,CAACJ,UAAUA,KAAAA,CAAMK,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO,KAAA;AACX,QAAA;QACA,OAAO,IAAA;AACX,IAAA;AACJ;AAEA;;;IAIO,MAAMC,WAAAA,SAAuBT,YAAAA,CAAAA;AAChC;;;QAIA,WAAA,CAAYC,gBAA0C,CAAE;AACpD,QAAA,KAAK,CAACA,gBAAAA,EAAkB,qCAAA,CAAA;AAC5B,IAAA;AAEA,uBACUC,OAAAA,CAAQC,KAAc,EAAW;QACvC,OAAOA,KAAAA,KAAU,QAAQA,KAAAA,KAAUC,SAAAA;AACvC,IAAA;AACJ;;"}

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_a_byte_order_mark.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=with_a_byte_order_mark.d.ts.map

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_a_byte_order_mark.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with_a_byte_order_mark.d.ts","sourceRoot":"","sources":["../../../../../../validation/rules/for_NotEmptyRule/when_validating/with_a_byte_order_mark.ts"],"names":[],"mappings":""}

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_a_byte_order_mark.js

@@ -0,0 +1,8 @@
+import { NotEmptyRule } from '../../NotEmptyRule.js';
+describe('with a byte order mark', () => {
+    it('should return no validation errors', () => {
+        const rule = new NotEmptyRule(t => t.value);
+        rule.validate({ value: '\uFEFF' }, 'value').should.have.lengthOf(0);
+    });
+});
+//# sourceMappingURL=with_a_byte_order_mark.js.map

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_a_byte_order_mark.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with_a_byte_order_mark.js","sourceRoot":"","sources":["../../../../../../validation/rules/for_NotEmptyRule/when_validating/with_a_byte_order_mark.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_mixed_unicode_whitespace.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=with_mixed_unicode_whitespace.d.ts.map

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_mixed_unicode_whitespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with_mixed_unicode_whitespace.d.ts","sourceRoot":"","sources":["../../../../../../validation/rules/for_NotEmptyRule/when_validating/with_mixed_unicode_whitespace.ts"],"names":[],"mappings":""}

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_mixed_unicode_whitespace.js

@@ -0,0 +1,8 @@
+import { NotEmptyRule } from '../../NotEmptyRule.js';
+describe('with mixed unicode whitespace', () => {
+    it('should return one validation error', () => {
+        const rule = new NotEmptyRule(t => t.value);
+        rule.validate({ value: '\t \u3000\n' }, 'value').should.have.lengthOf(1);
+    });
+});
+//# sourceMappingURL=with_mixed_unicode_whitespace.js.map

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_mixed_unicode_whitespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with_mixed_unicode_whitespace.js","sourceRoot":"","sources":["../../../../../../validation/rules/for_NotEmptyRule/when_validating/with_mixed_unicode_whitespace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_next_line_whitespace.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=with_next_line_whitespace.d.ts.map

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_next_line_whitespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with_next_line_whitespace.d.ts","sourceRoot":"","sources":["../../../../../../validation/rules/for_NotEmptyRule/when_validating/with_next_line_whitespace.ts"],"names":[],"mappings":""}

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_next_line_whitespace.js

@@ -0,0 +1,8 @@
+import { NotEmptyRule } from '../../NotEmptyRule.js';
+describe('with next line whitespace', () => {
+    it('should return one validation error', () => {
+        const rule = new NotEmptyRule(t => t.value);
+        rule.validate({ value: '\u0085' }, 'value').should.have.lengthOf(1);
+    });
+});
+//# sourceMappingURL=with_next_line_whitespace.js.map

package/dist/esm/validation/rules/for_NotEmptyRule/when_validating/with_next_line_whitespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with_next_line_whitespace.js","sourceRoot":"","sources":["../../../../../../validation/rules/for_NotEmptyRule/when_validating/with_next_line_whitespace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "type": "module",
     "name": "@cratis/arc",
-    "version": "22.87.0",
+    "version": "22.87.2",
     "description": "TypeScript command, query, validation, identity, and messaging runtime for Cratis Arc — the CQRS application framework for ASP.NET Core — used by generated proxies.",
     "keywords": [
         "cratis",

package/queries/ObservableQueryConnection.ts

@@ -173,20 +173,25 @@ export class ObservableQueryConnection<TDataType> implements IObservableQueryCon
                 // For new-style messages (type === 'Data') the query result is wrapped in message.data.
                 // For legacy/backward-compatible messages (no type) the entire message IS the query result.
                 const data = message.type === WebSocketMessageType.Data ? message.data : message;
-                const result = data as QueryResult<TDataType>;
-
-                if (result?.isAuthorized === false) {
-                    this.handleUnauthorized(result, dataReceived);
-                    return;
-                }
-
-                dataReceived(result);
+                this.handleResult(data as QueryResult<TDataType>, dataReceived);
             }
         } catch (error) {
             console.error('Error parsing WebSocket message:', error);
         }
     }
 
+    private handleResult(result: QueryResult<TDataType>, dataReceived: DataReceived<TDataType>) {
+        if (result?.isAuthorized === false) {
+            this.handleUnauthorized(result, dataReceived);
+            return;
+        }
+
+        if (result?.isValid === false) {
+            this.disconnect();
+        }
+        dataReceived(result);
+    }
+
     /**
      * Handles the terminal result the server sends when the caller is no longer authorized for the query it is
      * subscribed to. The subscription is over for good, so the result is delivered and the automatic reconnect is

package/queries/ServerSentEventHubConnection.ts

@@ -390,24 +390,25 @@ export class ServerSentEventHubConnection implements IObservableQueryHubConnecti
     }
 
     private handleQueryResult(message: HubMessage): void {
-        if (!message.queryId) return;
-
-        const sub = this._subscriptions.get(message.queryId);
-        if (!sub || !this.isMessageForCurrentSubscription(message)) return;
-
         const result = message.payload as QueryResult<any>;
-        sub.callback(result);
+        this.deliverResult(message, result, result?.isValid === false);
     }
 
     private handleUnauthorized(message: HubMessage): void {
+        this.deliverResult(message, QueryResult.unauthorized(), true);
+    }
+
+    private deliverResult(message: HubMessage, result: QueryResult<any>, terminal: boolean): void {
         if (!message.queryId) return;
 
         const sub = this._subscriptions.get(message.queryId);
         if (!sub || !this.isMessageForCurrentSubscription(message)) return;
 
-        this._subscriptions.delete(message.queryId);
-        this._pendingSubscriptions.delete(message.queryId);
-        sub.callback(QueryResult.unauthorized());
+        if (terminal) {
+            this._subscriptions.delete(message.queryId);
+            this._pendingSubscriptions.delete(message.queryId);
+        }
+        sub.callback(result);
     }
 
     private sendSubscribe(

package/queries/ServerSentEventQueryConnection.ts

@@ -61,19 +61,7 @@ export class ServerSentEventQueryConnection<TDataType> implements IObservableQue
 
         this._eventSource = Globals.eventSourceFactory ? Globals.eventSourceFactory(url) : new EventSource(url);
 
-        this._eventSource.onmessage = (event: MessageEvent) => {
-            if (this._disconnected) return;
-            try {
-                const result = JSON.parse(event.data as string) as QueryResult<TDataType>;
-                if ((result as unknown as { isAuthorized?: boolean })?.isAuthorized === false) {
-                    this.handleUnauthorized(url, result, dataReceived);
-                    return;
-                }
-                dataReceived(result);
-            } catch (error) {
-                console.error('SSE: error parsing message', error);
-            }
-        };
+        this._eventSource.onmessage = (event: MessageEvent) => this.handleMessage(event, url, dataReceived);
 
         this._eventSource.onerror = () => {
             if (this._disconnected || this._unauthorized) return;
@@ -89,6 +77,23 @@ export class ServerSentEventQueryConnection<TDataType> implements IObservableQue
         this._eventSource = undefined;
     }
 
+    private handleMessage(event: MessageEvent, url: string, dataReceived: DataReceived<TDataType>): void {
+        if (this._disconnected) return;
+        try {
+            const result = JSON.parse(event.data as string) as QueryResult<TDataType>;
+            if ((result as unknown as { isAuthorized?: boolean })?.isAuthorized === false) {
+                this.handleUnauthorized(url, result, dataReceived);
+                return;
+            }
+            if (result?.isValid === false) {
+                this.disconnect();
+            }
+            dataReceived(result);
+        } catch (error) {
+            console.error('SSE: error parsing message', error);
+        }
+    }
+
     /**
      * Handles the terminal result the server sends when the caller is no longer authorized for the query it is
      * subscribed to.

package/queries/WebSocketHubConnection.ts

@@ -402,6 +402,9 @@ export class WebSocketHubConnection {
         if (!sub || !this.isMessageForCurrentSubscription(message)) return;
 
         const result = message.payload as QueryResult<any>;
+        if (result?.isValid === false) {
+            this._subscriptions.delete(message.queryId);
+        }
         sub.callback(result);
     }
 

package/queries/for_ObservableQueryFor/when_performing/with_server_validation_failing.ts

@@ -0,0 +1,43 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+import sinon from 'sinon';
+import { an_observable_query_for } from '../given/an_observable_query_for.js';
+import { given } from '../../../given.js';
+import { createFetchHelper } from '../../../helpers/fetchHelper.js';
+import { QueryResult } from '../../QueryResult.js';
+import { ValidationResult } from '../../../validation/ValidationResult.js';
+
+describe('with server validation failing', given(an_observable_query_for, context => {
+    let result: QueryResult<string>;
+    let fetchHelper: ReturnType<typeof createFetchHelper>;
+
+    beforeEach(async () => {
+        fetchHelper = createFetchHelper();
+        fetchHelper.stubFetch().resolves({
+            ok: false,
+            status: 400,
+            json: sinon.stub().resolves({
+                data: null,
+                isSuccess: false,
+                isAuthorized: true,
+                isValid: false,
+                hasExceptions: false,
+                validationResults: [{ severity: 2, message: 'Id is invalid.', members: ['id'], state: {} }],
+                exceptionMessages: [],
+                exceptionStackTrace: '',
+                paging: { page: 0, size: 0, totalItems: 0, totalPages: 0 }
+            })
+        } as unknown as Response);
+        context.query.setOrigin('https://example.com');
+        result = await context.query.perform({ id: 'invalid' });
+    });
+
+    afterEach(() => fetchHelper.restore());
+
+    it('should be invalid', () => result.isValid.should.be.false);
+    it('should not be successful', () => result.isSuccess.should.be.false);
+    it('should map the validation result', () => result.validationResults[0].should.be.instanceOf(ValidationResult));
+    it('should preserve the message', () => result.validationResults[0].message.should.equal('Id is invalid.'));
+    it('should preserve the members', () => result.validationResults[0].members.should.deep.equal(['id']));
+}));

package/queries/for_ObservableQueryFor/when_subscribing/with_server_validation_failing.ts

@@ -0,0 +1,130 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+import sinon from 'sinon';
+import { Globals } from '../../../Globals.js';
+import { createFetchHelper } from '../../../helpers/fetchHelper.js';
+import { QueryTransportMethod } from '../../QueryTransportMethod.js';
+import { QueryResult } from '../../QueryResult.js';
+import { ObservableQuerySubscription } from '../../ObservableQuerySubscription.js';
+import { getSharedMultiplexer, resetSharedMultiplexer } from '../../ObservableQueryMultiplexer.js';
+import { an_observable_query_for } from '../given/an_observable_query_for.js';
+
+for (const direct of [true, false]) {
+    for (const transport of [QueryTransportMethod.WebSocket, QueryTransportMethod.ServerSentEvents]) {
+        describe(`with server validation failing over ${direct ? 'direct' : 'hub'} ${transport}`, () => {
+            let received: QueryResult<string>[];
+            let subscription: ObservableQuerySubscription<string>;
+            let originalDirect: boolean;
+            let originalTransport: QueryTransportMethod;
+            let originalWebSocket: typeof WebSocket;
+            let originalEventSource: typeof EventSource;
+            let originalEventSourceFactory: typeof Globals.eventSourceFactory;
+            let fetchHelper: ReturnType<typeof createFetchHelper>;
+            let stream: {
+                readyState: number;
+                onopen: (() => void) | null;
+                onclose: (() => void) | null;
+                onerror: (() => void) | null;
+                onmessage: ((event: { data: string }) => void) | null;
+                send: sinon.SinonStub;
+                close: sinon.SinonStub;
+            };
+            const rejection = {
+                data: null,
+                isSuccess: false,
+                isAuthorized: true,
+                isValid: false,
+                hasExceptions: false,
+                validationResults: [{ severity: 2, message: 'Id is invalid.', members: ['id'], state: {} }],
+                exceptionMessages: [],
+                exceptionStackTrace: '',
+                paging: { page: 0, size: 0, totalItems: 0, totalPages: 0 }
+            };
+
+            const sendDirectRejection = () => {
+                stream.onmessage?.({ data: JSON.stringify(rejection) });
+                // A server closes the direct transport after the one rejection frame.
+                stream.onclose?.();
+                stream.onmessage?.({ data: JSON.stringify(rejection) });
+            };
+
+            const hubQueryId = (fetchStub: sinon.SinonStub): string => {
+                if (transport === QueryTransportMethod.ServerSentEvents) {
+                    stream.onmessage?.({ data: JSON.stringify({ type: 'Connected', payload: 'connection-1' }) });
+                    return JSON.parse(fetchStub.firstCall.args[1].body).queryId;
+                }
+                return JSON.parse(stream.send.firstCall.args[0]).queryId;
+            };
+
+            const sendHubRejection = (fetchStub: sinon.SinonStub) => {
+                const queryId = hubQueryId(fetchStub);
+                stream.onmessage?.({ data: JSON.stringify({ type: 'QueryResult', queryId, payload: rejection }) });
+                // A terminal subscription must not receive a stale duplicate frame.
+                stream.onmessage?.({ data: JSON.stringify({ type: 'QueryResult', queryId, payload: rejection }) });
+            };
+
+            beforeEach(() => {
+                originalDirect = Globals.queryDirectMode;
+                originalTransport = Globals.queryTransportMethod;
+                originalWebSocket = globalThis.WebSocket;
+                originalEventSource = globalThis.EventSource;
+                originalEventSourceFactory = Globals.eventSourceFactory;
+                resetSharedMultiplexer();
+                Globals.queryDirectMode = direct;
+                Globals.queryTransportMethod = transport;
+                received = [];
+                stream = {
+                    readyState: 0,
+                    onopen: null,
+                    onclose: null,
+                    onerror: null,
+                    onmessage: null,
+                    send: sinon.stub(),
+                    close: sinon.stub()
+                };
+                const socketStub = sinon.stub().returns(stream);
+                Object.assign(socketStub, { CONNECTING: 0, OPEN: 1, CLOSING: 2, CLOSED: 3 });
+                (globalThis as Record<string, unknown>)['WebSocket'] = socketStub;
+                (globalThis as Record<string, unknown>)['EventSource'] = Object.assign(sinon.stub().returns(stream), { OPEN: 1 });
+                Globals.eventSourceFactory = () => stream as unknown as EventSource;
+                fetchHelper = createFetchHelper();
+                const fetchStub = fetchHelper.stubFetch().resolves({ ok: true } as Response);
+                const query = new an_observable_query_for().query;
+                query.setOrigin('https://example.com');
+                subscription = query.subscribe(result => received.push(result), { id: 'invalid' });
+                stream.readyState = 1;
+                stream.onopen?.();
+
+                if (direct) {
+                    sendDirectRejection();
+                } else {
+                    sendHubRejection(fetchStub);
+                }
+            });
+
+            afterEach(() => {
+                subscription?.unsubscribe();
+                resetSharedMultiplexer();
+                Globals.queryDirectMode = originalDirect;
+                Globals.queryTransportMethod = originalTransport;
+                Globals.eventSourceFactory = originalEventSourceFactory;
+                globalThis.WebSocket = originalWebSocket;
+                globalThis.EventSource = originalEventSource;
+                fetchHelper.restore();
+            });
+
+            it('should deliver one result to the subscriber', () => received.should.have.lengthOf(1));
+            it('should be invalid', () => received[0].isValid.should.be.false);
+            it('should not be successful', () => received[0].isSuccess.should.be.false);
+            it('should preserve the validation results', () => received[0].validationResults.should.deep.equal(rejection.validationResults));
+            it('should settle the rejected subscription', () => {
+                if (direct) {
+                    stream.close.should.have.been.calledOnce;
+                } else {
+                    getSharedMultiplexer()!.getConnectionsSnapshot().every(connection => connection.queryCount === 0).should.be.true;
+                }
+            });
+        });
+    }
+}

package/queries/for_QueryFor/when_performing/with_server_validation_failing.ts

@@ -0,0 +1,43 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+import sinon from 'sinon';
+import { a_query_for } from '../given/a_query_for.js';
+import { given } from '../../../given.js';
+import { createFetchHelper } from '../../../helpers/fetchHelper.js';
+import { QueryResult } from '../../QueryResult.js';
+import { ValidationResult } from '../../../validation/ValidationResult.js';
+
+describe('with server validation failing', given(a_query_for, context => {
+    let result: QueryResult<string>;
+    let fetchHelper: ReturnType<typeof createFetchHelper>;
+
+    beforeEach(async () => {
+        fetchHelper = createFetchHelper();
+        fetchHelper.stubFetch().resolves({
+            ok: false,
+            status: 400,
+            json: sinon.stub().resolves({
+                data: null,
+                isSuccess: false,
+                isAuthorized: true,
+                isValid: false,
+                hasExceptions: false,
+                validationResults: [{ severity: 2, message: 'Id is invalid.', members: ['id'], state: {} }],
+                exceptionMessages: [],
+                exceptionStackTrace: '',
+                paging: { page: 0, size: 0, totalItems: 0, totalPages: 0 }
+            })
+        } as unknown as Response);
+        context.query.setOrigin('https://example.com');
+        result = await context.query.perform({ id: 'invalid' });
+    });
+
+    afterEach(() => fetchHelper.restore());
+
+    it('should be invalid', () => result.isValid.should.be.false);
+    it('should not be successful', () => result.isSuccess.should.be.false);
+    it('should map the validation result', () => result.validationResults[0].should.be.instanceOf(ValidationResult));
+    it('should preserve the message', () => result.validationResults[0].message.should.equal('Id is invalid.'));
+    it('should preserve the members', () => result.validationResults[0].members.should.deep.equal(['id']));
+}));

package/validation/rules/NotEmptyRule.ts

@@ -21,7 +21,7 @@ export class NotEmptyRule<T> extends PropertyRule<T, unknown> {
         if (value === null || value === undefined) {
             return false;
         }
-        if (typeof value === 'string' && value.trim() === '') {
+        if (typeof value === 'string' && /^\p{White_Space}*$/u.test(value)) {
             return false;
         }
         if (Array.isArray(value) && value.length === 0) {

package/validation/rules/for_NotEmptyRule/when_validating/with_a_byte_order_mark.ts

@@ -0,0 +1,11 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+import { NotEmptyRule } from '../../NotEmptyRule.js';
+
+describe('with a byte order mark', () => {
+    it('should return no validation errors', () => {
+        const rule = new NotEmptyRule<{ value: string }>(t => t.value);
+        rule.validate({ value: '\uFEFF' }, 'value').should.have.lengthOf(0);
+    });
+});

package/validation/rules/for_NotEmptyRule/when_validating/with_mixed_unicode_whitespace.ts

@@ -0,0 +1,11 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+import { NotEmptyRule } from '../../NotEmptyRule.js';
+
+describe('with mixed unicode whitespace', () => {
+    it('should return one validation error', () => {
+        const rule = new NotEmptyRule<{ value: string }>(t => t.value);
+        rule.validate({ value: '\t \u3000\n' }, 'value').should.have.lengthOf(1);
+    });
+});

package/validation/rules/for_NotEmptyRule/when_validating/with_next_line_whitespace.ts

@@ -0,0 +1,11 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+import { NotEmptyRule } from '../../NotEmptyRule.js';
+
+describe('with next line whitespace', () => {
+    it('should return one validation error', () => {
+        const rule = new NotEmptyRule<{ value: string }>(t => t.value);
+        rule.validate({ value: '\u0085' }, 'value').should.have.lengthOf(1);
+    });
+});