@cxpinsight/survey-spec 0.5.1 → 0.7.0

package/dist/expressionEval.js

@@ -198,8 +198,10 @@ function tokenize(src) {
                 tokens.push({ kind: 'op', value: '&&' });
             else if (lower === 'or')
                 tokens.push({ kind: 'op', value: '||' });
+            // Kept DISTINCT from `!` on purpose — the two do not bind the same way.
+            // See parseUnary: the word binds below comparison, the symbol above it.
             else if (lower === 'not')
-                tokens.push({ kind: 'op', value: '!' });
+                tokens.push({ kind: 'op', value: 'not' });
             else if (lower === 'contains')
                 tokens.push({ kind: 'op', value: 'contains' });
             else
@@ -243,10 +245,36 @@ function parseExpression(tokens, pos, ctx, minPrec = 1) {
     }
     return [lhs, next];
 }
+/**
+ * Precedence of the WORD `not`, which is deliberately not the precedence of `!`.
+ *
+ * `not {a} = 2` used to parse as `(not {a}) = 2` — false for every value of `a`,
+ * so an author writing "a is not 2" got a condition that could never be true and
+ * a question that never appeared. Conventional precedence, and SurveyJS whose
+ * dialect this emulates, put `not` BELOW comparison.
+ *
+ * It became urgent rather than latent when the server started shipping compiled
+ * trees: the compiler's `notExpr` already wrapped the whole comparison, so with
+ * a = 1 the same condition returned false here and true from the tree. One
+ * survey, two answers, decided by which path happened to run.
+ *
+ * 3 is the comparison tier in PREC, so `not` swallows a comparison and its
+ * arithmetic and stops at `and`/`or` — matching the compiler exactly:
+ *   not {a} = 2 and {b} = 1   →   (not ({a} = 2)) and ({b} = 1)
+ *
+ * `!` is left alone. The compiler rejects it outright, so no tree exists to
+ * disagree with, and it binds tightly in every C-family language including the
+ * JavaScript authors are borrowing from.
+ */
+const NOT_WORD_PREC = 3;
 function parseUnary(tokens, pos, ctx) {
     const t = tokens[pos];
     if (!t)
         throw new Error('unexpected end of expression');
+    if (t.kind === 'op' && t.value === 'not') {
+        const [inner, after] = parseExpression(tokens, pos + 1, ctx, NOT_WORD_PREC);
+        return [!truthy(inner), after];
+    }
     if (t.kind === 'op' && t.value === '!') {
         const [inner, after] = parseUnary(tokens, pos + 1, ctx);
         return [!truthy(inner), after];

package/dist/index.d.ts

@@ -15,8 +15,8 @@ export { evaluateTree, compareValues, MAX_TREE_DEPTH } from './evaluateTree';
 export type { ConditionNode, Operand, TreeContext } from './evaluateTree';
 export { resolveVariable } from './resolveVariable';
 export { splitIntoPages } from './pageFlow';
-export { validateAnswer, impliedChoices, impliedActions, impliedStepActions, impliedEqualProminence, safeActionHref, safeImageSrc, isDeferChoice, canSwipeToDismiss, autoDismissMs, deadlineCountdown, formatCountdown, outcomeFor, voiceUsable, rewardToShow, cardClickTarget, cardHoverEffect, resolveAction } from './validate';
-export type { ValidatableQuestion, OutcomeKind, OutcomeInput, ActionKind, RawAction, ResolvedAction } from './validate';
+export { complianceGate, questionForValidation, validateAnswer, impliedChoices, impliedActions, impliedStepActions, impliedEqualProminence, safeActionHref, safeImageSrc, isDeferChoice, canSwipeToDismiss, autoDismissMs, deadlineCountdown, formatCountdown, outcomeFor, voiceUsable, rewardToShow, cardClickTarget, cardHoverEffect, resolveAction } from './validate';
+export type { ComplianceState, EscapeHatch, ComplianceInput, ComplianceVerdict, ValidatableQuestion, OutcomeKind, OutcomeInput, ActionKind, RawAction, ResolvedAction } from './validate';
 export { validateAnswerCode } from './validate';
 export { wordMessage, EN_MESSAGES, MESSAGE_CODES } from './messages';
 export type { ValidationMessage } from './messages';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7E,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACnU,YAAY,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxH,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC7F,OAAO,EACL,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EACzE,kBAAkB,EAAE,SAAS,EAAE,iBAAiB,EAChD,YAAY,EAAE,cAAc,EAAE,mBAAmB,EACjD,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EACtE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,GAC7D,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7E,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1W,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC1L,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC7F,OAAO,EACL,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EACzE,kBAAkB,EAAE,SAAS,EAAE,iBAAiB,EAChD,YAAY,EAAE,cAAc,EAAE,mBAAmB,EACjD,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EACtE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,GAC7D,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.optionLabelsOf = exports.voiceOptionsOf = exports.optionValueOf = exports.optionLabelOf = exports.shortCode = exports.buildPromptText = exports.scaffoldFor = exports.skipNoteText = exports.voiceDisclaimer = exports.auditVoiceQuestions = exports.voiceCanHandle = exports.voiceSupport = exports.distinctiveLabels = exports.matchDate = exports.matchNumberInRange = exports.rankOptions = exports.matchOptions = exports.matchOption = exports.matchBoolean = exports.normalizeTranscript = exports.MESSAGE_CODES = exports.EN_MESSAGES = exports.wordMessage = exports.validateAnswerCode = exports.resolveAction = exports.cardHoverEffect = exports.cardClickTarget = exports.rewardToShow = exports.voiceUsable = exports.outcomeFor = exports.formatCountdown = exports.deadlineCountdown = exports.autoDismissMs = exports.canSwipeToDismiss = exports.isDeferChoice = exports.safeImageSrc = exports.safeActionHref = exports.impliedEqualProminence = exports.impliedStepActions = exports.impliedActions = exports.impliedChoices = exports.validateAnswer = exports.splitIntoPages = exports.resolveVariable = exports.MAX_TREE_DEPTH = exports.compareValues = exports.evaluateTree = exports.isParseable = exports.evaluateCondition = exports.evaluateExpression = void 0;
+exports.optionValueOf = exports.optionLabelOf = exports.shortCode = exports.buildPromptText = exports.scaffoldFor = exports.skipNoteText = exports.voiceDisclaimer = exports.auditVoiceQuestions = exports.voiceCanHandle = exports.voiceSupport = exports.distinctiveLabels = exports.matchDate = exports.matchNumberInRange = exports.rankOptions = exports.matchOptions = exports.matchOption = exports.matchBoolean = exports.normalizeTranscript = exports.MESSAGE_CODES = exports.EN_MESSAGES = exports.wordMessage = exports.validateAnswerCode = exports.resolveAction = exports.cardHoverEffect = exports.cardClickTarget = exports.rewardToShow = exports.voiceUsable = exports.outcomeFor = exports.formatCountdown = exports.deadlineCountdown = exports.autoDismissMs = exports.canSwipeToDismiss = exports.isDeferChoice = exports.safeImageSrc = exports.safeActionHref = exports.impliedEqualProminence = exports.impliedStepActions = exports.impliedActions = exports.impliedChoices = exports.validateAnswer = exports.questionForValidation = exports.complianceGate = exports.splitIntoPages = exports.resolveVariable = exports.MAX_TREE_DEPTH = exports.compareValues = exports.evaluateTree = exports.isParseable = exports.evaluateCondition = exports.evaluateExpression = void 0;
+exports.optionLabelsOf = exports.voiceOptionsOf = void 0;
 /**
  * @cxpinsight/survey-spec
  *
@@ -26,6 +27,8 @@ Object.defineProperty(exports, "resolveVariable", { enumerable: true, get: funct
 var pageFlow_1 = require("./pageFlow");
 Object.defineProperty(exports, "splitIntoPages", { enumerable: true, get: function () { return pageFlow_1.splitIntoPages; } });
 var validate_1 = require("./validate");
+Object.defineProperty(exports, "complianceGate", { enumerable: true, get: function () { return validate_1.complianceGate; } });
+Object.defineProperty(exports, "questionForValidation", { enumerable: true, get: function () { return validate_1.questionForValidation; } });
 Object.defineProperty(exports, "validateAnswer", { enumerable: true, get: function () { return validate_1.validateAnswer; } });
 Object.defineProperty(exports, "impliedChoices", { enumerable: true, get: function () { return validate_1.impliedChoices; } });
 Object.defineProperty(exports, "impliedActions", { enumerable: true, get: function () { return validate_1.impliedActions; } });

package/dist/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CA4B9E,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAI5E;AAED,0EAA0E;AAC1E,eAAO,MAAM,aAAa,UAA2B,CAAC"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAiC9E,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAI5E;AAED,0EAA0E;AAC1E,eAAO,MAAM,aAAa,UAA2B,CAAC"}

package/dist/messages.js

@@ -25,6 +25,11 @@ exports.wordMessage = wordMessage;
 /** English wording, one entry per code. The only prose in the validator. */
 exports.EN_MESSAGES = {
     required: () => 'This field is required',
+    // Compliance. Written for someone who is being held, not for a developer:
+    // say what is happening and what happens next, never just "blocked".
+    compliance_under_review: () => 'Thanks — someone is reviewing this now. '
+        + 'You do not need to do anything else, and this will update when the review is done.',
+    compliance_blocked: () => 'This needs to be accepted before you can continue.',
     choose_option: () => 'Please choose an option',
     format_email: () => 'Please enter a valid email address (e.g., you@example.com)',
     format_url: () => 'Please enter a full URL, including https://',

package/dist/validate.d.ts

@@ -8,6 +8,8 @@ export interface ValidatableQuestion {
     maxLength?: number;
     minValue?: number;
     maxValue?: number;
+    /** spec §8's other spelling of a pattern rule — see validateRules. */
+    regex?: string;
     minCount?: number;
     maxCount?: number;
     rules?: unknown;
@@ -257,6 +259,101 @@ export interface OutcomeInput {
  * surface you get past by saying no is not a compliance surface.
  */
 export declare function outcomeFor(input: OutcomeInput): OutcomeKind;
+/**
+ * The question as it should be validated RIGHT NOW.
+ *
+ * `requiredWhen` — "required only if they said yes earlier" — was compiled by
+ * the server and read by no renderer at all. An author who set it got a question
+ * that was never required, on every channel, with nothing reporting it. The last
+ * of the four conditions to be inert everywhere rather than somewhere.
+ *
+ * ADDITIVE, deliberately: a question already marked required stays required. The
+ * alternative reading — that requiredWhen REPLACES required — would let a
+ * condition make an existing question optional, so a survey that collects an
+ * answer today could quietly stop collecting it. This direction can only ever
+ * ask for more, never less, which is the safe way to turn on a rule that has
+ * never run.
+ *
+ * The caller supplies the evaluator because each renderer has its own, already
+ * wired to its answers and its compiled trees. What lives here is the decision,
+ * which is the part that must not differ between them.
+ *
+ * @param evaluate must FAIL OPEN by returning false for a condition it cannot
+ *   read — an unreadable requiredWhen leaves the question optional rather than
+ *   blocking a respondent behind a rule nobody can see.
+ */
+export declare function questionForValidation<T extends {
+    required?: unknown;
+    isRequired?: unknown;
+    requiredWhen?: unknown;
+}>(question: T, evaluate: (expr: string) => boolean): T;
+/** Where a compliance interaction has got to. */
+export type ComplianceState = 'open' | 'blocked' | 'under_review' | 'cleared';
+/** What a respondent is offered when they cannot simply proceed. */
+export type EscapeHatch = 'none' | 'contact' | 'defer';
+export interface ComplianceInput {
+    interactionType?: string | null;
+    /** The implied choice taken, or null before they have answered. */
+    action?: string | null;
+    /** True when the chosen action is the affirmative one. */
+    affirmative?: boolean;
+    compliance?: {
+        reviewRequired?: unknown;
+        onDecline?: unknown;
+        blockedMessage?: unknown;
+        reviewMessage?: unknown;
+        escapeHatch?: unknown;
+        contactHref?: unknown;
+    } | null;
+}
+export interface ComplianceVerdict {
+    state: ComplianceState;
+    /** May the respondent close the surface? */
+    dismissible: boolean;
+    escape: EscapeHatch;
+    /** Where `escape: 'contact'` sends them. Null when there is nowhere. */
+    contactHref: string | null;
+    /** A wording code, or null when there is nothing to say. */
+    messageCode: 'compliance_blocked' | 'compliance_under_review' | null;
+    /** The author's own prose, which travels verbatim and is never translated. */
+    authorMessage: string | null;
+    /** True when this state is worth recording — see the monitoring note. */
+    reportable: boolean;
+}
+/**
+ * Decide whether a compliance interaction lets the respondent go.
+ *
+ * This is the half of compliance that was never built. `outcomeFor` already
+ * returns `hold`, meaning "do not let them through yet", and all three renderers
+ * read it — to choose a closing message. Nothing anywhere connected it to
+ * whether the surface could be CLOSED, so a compliance check was dismissed
+ * exactly like a rating prompt. A compliance surface you get past by ignoring it
+ * is not a compliance surface.
+ *
+ * Three states hold, and they are not the same thing to the person looking at
+ * them:
+ *
+ *   open          they have not answered yet
+ *   blocked       they declined, and the author chose to hold them
+ *   under_review  they accepted, and a person has to look at it
+ *
+ * `under_review` matters most and is the easiest to get wrong. Letting someone
+ * through on submit tells them they are finished when they are not, and defeats
+ * the check; saying nothing leaves them staring at a surface that looks stuck.
+ * So it holds AND it says so.
+ *
+ * ── The escape hatch ──
+ * A surface that cannot be closed can trap someone whose answer will never be
+ * accepted — a failed document check at 2am with nobody to ask. The author
+ * chooses which way out exists, and the default is `contact` rather than `none`,
+ * because a route to a human costs the check nothing while a dead end costs a
+ * customer everything. `defer` is the only one that actually releases them; it
+ * is a postponement, and the interaction comes back.
+ *
+ * Anything unrecognised falls back to `contact` rather than to `none`: a
+ * mis-typed setting must not silently become a trap.
+ */
+export declare function complianceGate(input: ComplianceInput): ComplianceVerdict;
 /**
  * Can voice mode do anything on this step?
  *

package/dist/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAkDjE,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAE3F;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,GAAG,iBAAiB,GAAG,IAAI,CAgB1G;AA4ND,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAetE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,mBAAmB;AAC7B;;;;;;;;;;GAUG;AACH,WAAW,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAiB,GAC5C,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAgDzE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAIvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAalE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAajD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,mBAAmB,EAAE,GAAG,IAAI,GAAG,SAAS,GAClD,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAUzC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,mBAAmB,EAAE,GAAG,IAAI,GAAG,SAAS,GAClD,OAAO,CAKT;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACnE,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GACvC,OAAO,CAMT;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACrE,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GACvC,MAAM,CAUR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAChD,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,EAC3C,GAAG,CAAC,EAAE,MAAM,GACX;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASrC;AAED,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAUlD;AAcD,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,UAAU,GACV,SAAS,GACT,QAAQ,GACR,SAAS,GACT,MAAM,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,UAAU,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACjG;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW,CAuB3D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,mBAAmB,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAQxF;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAC1B,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAC1H;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAiBtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC3E,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACnD,MAAM,GAAG,IAAI,CASf;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,OAAO,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GACpD,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAGnC;AAeD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;AAErD,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACpC,WAAW,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAiB,GAC5C,cAAc,GAAG,IAAI,CAqCvB"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAkDjE,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAE3F;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,GAAG,iBAAiB,GAAG,IAAI,CAgB1G;AAsQD,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAetE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,mBAAmB;AAC7B;;;;;;;;;;GAUG;AACH,WAAW,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAiB,GAC5C,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAgDzE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAIvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAalE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAajD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,mBAAmB,EAAE,GAAG,IAAI,GAAG,SAAS,GAClD,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAUzC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,mBAAmB,EAAE,GAAG,IAAI,GAAG,SAAS,GAClD,OAAO,CAKT;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACnE,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GACvC,OAAO,CAMT;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACrE,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GACvC,MAAM,CAUR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAChD,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,EAC3C,GAAG,CAAC,EAAE,MAAM,GACX;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASrC;AAED,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAUlD;AAcD,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,UAAU,GACV,SAAS,GACT,QAAQ,GACR,SAAS,GACT,MAAM,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,UAAU,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACjG;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW,CAuB3D;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS;IAC9C,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CAClE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,CAAC,CAQtD;AAID,iDAAiD;AACjD,MAAM,MAAM,eAAe,GACvB,MAAM,GACN,SAAS,GACT,cAAc,GACd,SAAS,CAAC;AAEd,oEAAoE;AACpE,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,SAAS,GACT,OAAO,CAAC;AAEZ,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE;QACX,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,4CAA4C;IAC5C,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,wEAAwE;IACxE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,4DAA4D;IAC5D,WAAW,EAAE,oBAAoB,GAAG,yBAAyB,GAAG,IAAI,CAAC;IACrE,8EAA8E;IAC9E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,UAAU,EAAE,OAAO,CAAC;CACrB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,iBAAiB,CAmDxE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,mBAAmB,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAQxF;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAC1B,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAC1H;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAiBtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC3E,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACnD,MAAM,GAAG,IAAI,CASf;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,OAAO,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GACpD,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAGnC;AAeD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;AAErD,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACpC,WAAW,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAiB,GAC5C,cAAc,GAAG,IAAI,CAqCvB"}

package/dist/validate.js

@@ -14,6 +14,8 @@ exports.autoDismissMs = autoDismissMs;
 exports.deadlineCountdown = deadlineCountdown;
 exports.formatCountdown = formatCountdown;
 exports.outcomeFor = outcomeFor;
+exports.questionForValidation = questionForValidation;
+exports.complianceGate = complianceGate;
 exports.voiceUsable = voiceUsable;
 exports.rewardToShow = rewardToShow;
 exports.cardClickTarget = cardClickTarget;
@@ -194,6 +196,34 @@ function validateTextish(question, value) {
     if (typeof question.minLength === 'number' && trimmed.length < question.minLength) {
         return { code: 'min_length', params: { min: question.minLength } };
     }
+    // minValue / maxValue on a NUMERIC text input.
+    //
+    // These used to do nothing here. validateNumericRange is reached only from
+    // rating/csat/ces/nps, which carry real numbers; a question with
+    // inputType 'number' submits the STRING '5' and arrived at this function
+    // instead, which checked lengths and formats and never a range. An author
+    // setting "between 1 and 10" on a number question got a control that read as
+    // configured and enforced nothing, on every channel at once.
+    //
+    // The coercion is not new behaviour invented here: applyRule already does
+    // exactly this for a rules[] entry of type min/max. So the same author intent
+    // was enforced when written one way and ignored when written the other. This
+    // makes the two agree.
+    //
+    // Guarded on inputType rather than applied to all text, because a range on a
+    // free-text comment is meaningless and coercing it would reject prose for
+    // being NaN.
+    if (inputType === 'number' && trimmed !== '') {
+        const n = Number(trimmed);
+        if (!Number.isNaN(n)) {
+            if (typeof question.minValue === 'number' && n < question.minValue) {
+                return { code: 'min_value', params: { min: question.minValue } };
+            }
+            if (typeof question.maxValue === 'number' && n > question.maxValue) {
+                return { code: 'max_value', params: { max: question.maxValue } };
+            }
+        }
+    }
     return null;
 }
 function validateCheckbox(question, value) {
@@ -224,7 +254,20 @@ function validateNumericRange(question, value) {
     return null;
 }
 function validateRules(question, value) {
-    const rules = Array.isArray(question.rules) ? question.rules : [];
+    const declared = Array.isArray(question.rules) ? question.rules : [];
+    // A top-level `regex` is the other spelling of a pattern rule, and it was read
+    // by nothing: `rules: [{ type: 'pattern' }]` rejected a bad value while
+    // `regex: '…'` accepted it, from the same author meaning the same thing. The
+    // setting did not fail — it disappeared, on every channel, with no warning.
+    //
+    // Treated as a pattern rule so one intent has one behaviour. This is the same
+    // client-side exposure the existing spelling already carries: a catastrophic
+    // pattern costs the respondent their own tab, which is why the SERVER still
+    // refuses to evaluate either spelling — there the cost is shared, and
+    // `^(a+)+$` against 24 characters takes 116ms and doubles every two.
+    const rules = typeof question.regex === 'string' && question.regex !== ''
+        ? declared.concat([{ type: 'pattern', value: question.regex }])
+        : declared;
     if (rules.length === 0)
         return null;
     const str = typeof value === 'string' ? value : String(value ?? '');
@@ -697,6 +740,126 @@ function outcomeFor(input) {
     // for something we do not recognise: it acknowledges without promising.
     return 'thanks';
 }
+/**
+ * The question as it should be validated RIGHT NOW.
+ *
+ * `requiredWhen` — "required only if they said yes earlier" — was compiled by
+ * the server and read by no renderer at all. An author who set it got a question
+ * that was never required, on every channel, with nothing reporting it. The last
+ * of the four conditions to be inert everywhere rather than somewhere.
+ *
+ * ADDITIVE, deliberately: a question already marked required stays required. The
+ * alternative reading — that requiredWhen REPLACES required — would let a
+ * condition make an existing question optional, so a survey that collects an
+ * answer today could quietly stop collecting it. This direction can only ever
+ * ask for more, never less, which is the safe way to turn on a rule that has
+ * never run.
+ *
+ * The caller supplies the evaluator because each renderer has its own, already
+ * wired to its answers and its compiled trees. What lives here is the decision,
+ * which is the part that must not differ between them.
+ *
+ * @param evaluate must FAIL OPEN by returning false for a condition it cannot
+ *   read — an unreadable requiredWhen leaves the question optional rather than
+ *   blocking a respondent behind a rule nobody can see.
+ */
+function questionForValidation(question, evaluate) {
+    if (!question)
+        return question;
+    if (question.required === true || question.isRequired === true)
+        return question;
+    const expr = question.requiredWhen;
+    if (typeof expr !== 'string' || !expr.trim())
+        return question;
+    let now = false;
+    try {
+        now = evaluate(expr) === true;
+    }
+    catch {
+        now = false;
+    }
+    return now ? { ...question, required: true } : question;
+}
+const ESCAPES = ['none', 'contact', 'defer'];
+/**
+ * Decide whether a compliance interaction lets the respondent go.
+ *
+ * This is the half of compliance that was never built. `outcomeFor` already
+ * returns `hold`, meaning "do not let them through yet", and all three renderers
+ * read it — to choose a closing message. Nothing anywhere connected it to
+ * whether the surface could be CLOSED, so a compliance check was dismissed
+ * exactly like a rating prompt. A compliance surface you get past by ignoring it
+ * is not a compliance surface.
+ *
+ * Three states hold, and they are not the same thing to the person looking at
+ * them:
+ *
+ *   open          they have not answered yet
+ *   blocked       they declined, and the author chose to hold them
+ *   under_review  they accepted, and a person has to look at it
+ *
+ * `under_review` matters most and is the easiest to get wrong. Letting someone
+ * through on submit tells them they are finished when they are not, and defeats
+ * the check; saying nothing leaves them staring at a surface that looks stuck.
+ * So it holds AND it says so.
+ *
+ * ── The escape hatch ──
+ * A surface that cannot be closed can trap someone whose answer will never be
+ * accepted — a failed document check at 2am with nobody to ask. The author
+ * chooses which way out exists, and the default is `contact` rather than `none`,
+ * because a route to a human costs the check nothing while a dead end costs a
+ * customer everything. `defer` is the only one that actually releases them; it
+ * is a postponement, and the interaction comes back.
+ *
+ * Anything unrecognised falls back to `contact` rather than to `none`: a
+ * mis-typed setting must not silently become a trap.
+ */
+function complianceGate(input) {
+    const free = {
+        state: 'cleared', dismissible: true, escape: 'none',
+        contactHref: null, messageCode: null, authorMessage: null, reportable: false,
+    };
+    if (String(input?.interactionType || '').toLowerCase() !== 'comply')
+        return free;
+    const c = input.compliance || {};
+    const raw = String(c.escapeHatch ?? '').toLowerCase();
+    const escape = ESCAPES.includes(raw) ? raw : 'contact';
+    // Through safeActionHref, not raw: this is a destination the host page is told
+    // to follow, so `javascript:` and friends are refused the same way an action
+    // button's destination is. `mailto:` passes, which is the common case for a
+    // route to a human.
+    const contactHref = (escape === 'contact' ? safeActionHref({ type: 'url', value: c.contactHref }) : null) ?? null;
+    const authorPose = (v) => (typeof v === 'string' && v.trim() ? v : null);
+    // `defer` is the only hatch that releases them — closing IS the postponement.
+    const canLeave = escape === 'defer';
+    const answered = input.action !== null && input.action !== undefined && input.action !== '';
+    if (!answered) {
+        return {
+            state: 'open', dismissible: canLeave, escape, contactHref,
+            messageCode: null, authorMessage: null, reportable: false,
+        };
+    }
+    if (input.affirmative === false) {
+        // A decline the author chose to accept is simply the end of it.
+        if (String(c.onDecline || 'block') !== 'block')
+            return free;
+        return {
+            state: 'blocked', dismissible: canLeave, escape, contactHref,
+            messageCode: 'compliance_blocked',
+            authorMessage: authorPose(c.blockedMessage),
+            reportable: true,
+        };
+    }
+    if (c.reviewRequired === true) {
+        return {
+            state: 'under_review', dismissible: canLeave, escape, contactHref,
+            messageCode: 'compliance_under_review',
+            authorMessage: authorPose(c.reviewMessage),
+            reportable: true,
+        };
+    }
+    return free;
+}
 /**
  * Can voice mode do anything on this step?
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cxpinsight/survey-spec",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "description": "The survey specification the renderers share — expression evaluation first. Source of truth for behaviour that must be identical on web, links and mobile.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",