@fougere/schema 0.1.0-alpha.0

package/dist/projections/typescript.js

@@ -0,0 +1,166 @@
+/**
+ * card → TypeScript source — the projection that was missing.
+ *
+ * `describe` turns a schema into a card and `reconstruct` turns it back into a
+ * living judge, so a consumer in another repository validates by the host's rules
+ * without holding its code. What it did NOT get is a type: left to infer, a rebuilt
+ * schema has an index signature for an instance type, so `post.title` was `any` and
+ * `post.titel` compiled. The declaration travelled and the compiler learned nothing.
+ *
+ * So the card gets a third reader, and it writes the shape where `reconstruct` now
+ * accepts it — as the type argument of the class's own base expression, one
+ * declaration for the judge and the rows it judges. Same input as the other two
+ * readers, same rule: the shape IS JSON Schema, and JSON Schema has a type form.
+ *
+ * Deliberately NOT a JSON Schema→TS library: the input is not arbitrary JSON Schema,
+ * it is a Fougère card, whose vocabulary is closed (`describe` writes it). A general
+ * library would carry `$ref`, `allOf`, tuple `items`, `additionalProperties` and the
+ * rest of a spec we never emit, and would still need this file to know that
+ * `format: date-time` means `Date` here — a fact about our boundary, not about JSON.
+ */
+/** What a field's value looks like once `reconstruct` has decoded it. */
+function typeOf(field) {
+    const types = Array.isArray(field.type) ? field.type : field.type ? [field.type] : [];
+    const nullable = types.includes('null');
+    const base = types.find((t) => t !== 'null');
+    const inner = baseTypeOf(base, field);
+    return nullable ? `${inner} | null` : inner;
+}
+function baseTypeOf(base, field) {
+    // A bounded value set IS a type — the enum travels, so the union does too.
+    if (field.enum?.length) {
+        return field.enum.map((v) => (v === null ? 'null' : JSON.stringify(v))).join(' | ');
+    }
+    switch (base) {
+        case 'string':
+            // `date-time` is the wire form of a value the boundary decodes to a Date, and
+            // the façade now hands the decoded value on. The type says what you receive.
+            return field.format === 'date-time' ? 'Date' : 'string';
+        case 'number':
+        case 'integer':
+            return 'number';
+        case 'boolean':
+            return 'boolean';
+        case 'array':
+            // Two distinct things share `array`: a value list carries `items`, a bare `many`
+            // relation carries none — the ids of the other side, which the card names as a
+            // relation rather than a shape.
+            return field.items ? `${typeOf(field.items)}[]` : 'string[]';
+        case 'object':
+            return field.properties ? objectTypeOf(field.properties, field.required ?? []) : 'Record<string, unknown>';
+        default:
+            return 'unknown';
+    }
+}
+function objectTypeOf(properties, required) {
+    const members = Object.entries(properties).map(([name, field]) => {
+        const optional = required.includes(name) ? '' : '?';
+        return `${propertyKey(name)}${optional}: ${typeOf(field)}`;
+    });
+    return `{ ${members.join('; ')} }`;
+}
+/** Quote a key only when it is not a plain identifier — generated source stays readable. */
+function propertyKey(name) {
+    return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
+}
+/**
+ * The anonymous object type one card describes — the members, nothing around them.
+ *
+ * Every property is present: `required` on a Fougère card answers "what must a CALLER
+ * supply at creation", not "what is always there when read" — an `id` the system
+ * generates is absent from `required` and always present on a row. Typing the read
+ * shape from the create rule would make `post.id` possibly-undefined for everyone.
+ */
+export function shapeTypeOf(descriptor, indent = '') {
+    const entries = Object.entries(descriptor.properties ?? {});
+    if (entries.length === 0)
+        return '{}';
+    const lines = entries.map(([key, field]) => {
+        const doc = field.description ? `${indent}  /** ${field.description} */\n` : '';
+        return `${doc}${indent}  ${propertyKey(key)}: ${typeOf(field)};`;
+    });
+    return `{\n${lines.join('\n')}\n${indent}}`;
+}
+/**
+ * Emit the entity a card describes — ONE class, judge and shape together.
+ *
+ * An entity is a class here (`class Post extends entity({…}) {}`), and a class is the
+ * language's own answer to "a name that is both a value and a type". Emitting an
+ * interface next to a const said the same thing twice and relied on declaration
+ * merging to look like a class; this IS one.
+ *
+ * The card travels inline, so the rebuilt judge is exact — the shape written above it
+ * is read off that same card, never a second source to keep in step.
+ *
+ * Requires `reconstruct` in scope: the caller writes the import, since only it knows
+ * whether the consumer says `@fougere/schema` or a path.
+ */
+export function entitySourceOf(descriptor, options = {}) {
+    const name = identifierOf(options.name ?? capitalize(descriptor.title ?? 'Schema'));
+    const exported = options.exported === false ? '' : 'export ';
+    const card = JSON.stringify(descriptor, null, 2)
+        .split('\n')
+        .map((line, i) => (i === 0 ? line : `  ${line}`))
+        .join('\n');
+    return `${exported}class ${name} extends reconstruct<${shapeTypeOf(descriptor)}>(${card}) {}`;
+}
+/**
+ * A card names itself, and a card can come from a stranger. Everything else here emits
+ * data — a string lands inside `JSON.stringify` — but a name lands in a DECLARATION,
+ * so it is the one value that could stop being data. Refuse it here as well as at the
+ * caller: the projection should not depend on who calls it to be safe.
+ */
+function identifierOf(name) {
+    if (!/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name)) {
+        throw new Error(`'${name}' is not a TypeScript identifier — it cannot name a generated declaration`);
+    }
+    return name;
+}
+function capitalize(s) {
+    return s ? s[0].toUpperCase() + s.slice(1) : s;
+}
+/**
+ * What one operation hands back, in TypeScript.
+ *
+ * `output` is the shape of a ROW; `cardinality` is how many rows. Separating them is
+ * what makes this honest — `list` returns a page, not an array, and a generator that
+ * assumed otherwise would have written a signature that compiles and lies.
+ *
+ * A page is spelled as what it IS: `ListResult<T> extends Array<T>`, an array carrying
+ * its own totals. So the type is the array intersected with them, not a wrapper.
+ */
+function returnTypeOf(op, rowType) {
+    switch (op.cardinality) {
+        case 'many': return `${rowType}[]`;
+        case 'page': return `${rowType}[] & { total?: number; endCursor?: string; hasMore?: boolean }`;
+        case 'maybe': return `${rowType} | undefined`;
+        case 'one': return rowType;
+        // `none` says there is no shaped output — a boolean, a void. Saying `unknown` is
+        // the truth; guessing `void` would forbid reading a value that does come back.
+        case 'none': return 'unknown';
+        default: return 'unknown';
+    }
+}
+/**
+ * Emit the type of a façade — every operation an entity serves, as a caller meets it.
+ *
+ * This is what `Facade<T>` needs and what no consumer in another repository could have:
+ * writing `Facade<ArticleHandler>` used to require importing the handler's class, which
+ * `sync` does not carry and should not. The card carries the operations; this reads them.
+ *
+ * Each op takes an optional invocation and returns a promise — the door's signature, not
+ * the handler's. A handler's method takes positional arguments; its door takes the call.
+ */
+export function facadeTypeSourceOf(ops, options = {}) {
+    const name = options.name ?? 'Facade';
+    const exported = options.exported === false ? '' : 'export ';
+    const rowType = options.rowType ?? 'unknown';
+    const members = ops.map((op) => {
+        const doc = op.description ? `  /** ${op.description} */\n` : '';
+        return `${doc}  ${propertyKey(op.name)}(invocation?: Invocation): Promise<${returnTypeOf(op, rowType)}>;`;
+    });
+    if (members.length === 0)
+        return `${exported}interface ${name} {}`;
+    return `${exported}interface ${name} {\n${members.join('\n')}\n}`;
+}
+//# sourceMappingURL=typescript.js.map

package/dist/projections/typescript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.js","sourceRoot":"","sources":["../../src/projections/typescript.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,yEAAyE;AACzE,SAAS,MAAM,CAAC,KAAsB;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB,EAAE,KAAsB;IAClE,2EAA2E;IAC3E,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,8EAA8E;YAC9E,6EAA6E;YAC7E,OAAO,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1D,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,OAAO;YACV,iFAAiF;YACjF,+EAA+E;YAC/E,gCAAgC;YAChC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/D,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAC7G;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,UAA2C,EAAE,QAA2B;IAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACpD,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,4FAA4F;AAC5F,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,UAA4B,EAAE,MAAM,GAAG,EAAE;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,SAAS,KAAK,CAAC,WAAW,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,GAAG,GAAG,GAAG,MAAM,KAAK,WAAW,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,GAAG,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,UAA4B,EAAE,OAAO,GAAsB,EAAE;IAC1F,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;SAC7C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;SAChD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,GAAG,QAAQ,SAAS,IAAI,wBAAwB,WAAW,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,2EAA2E,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAWD;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,EAAgB,EAAE,OAAe;IACrD,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,OAAO,GAAG,OAAO,IAAI,CAAC;QACnC,KAAK,MAAM,EAAE,OAAO,GAAG,OAAO,gEAAgE,CAAC;QAC/F,KAAK,OAAO,EAAE,OAAO,GAAG,OAAO,cAAc,CAAC;QAC9C,KAAK,KAAK,EAAE,OAAO,OAAO,CAAC;QAC3B,iFAAiF;QACjF,+EAA+E;QAC/E,KAAK,MAAM,EAAE,OAAO,SAAS,CAAC;QAC9B,SAAS,OAAO,SAAS,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAA4B,EAC5B,OAAO,GAA6C,EAAE;IAEtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IAE7C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,WAAW,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,GAAG,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,sCAAsC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,QAAQ,aAAa,IAAI,KAAK,CAAC;IACnE,OAAO,GAAG,QAAQ,aAAa,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;AACpE,CAAC"}

package/dist/projections/validation.d.ts

@@ -0,0 +1,49 @@
+import type { AnyField, Fields } from '../field/index.js';
+/**
+ * Validation — the Field metadata IS the source of truth.
+ *
+ * Validation is a projection of one axis: `shape` (the value), a PURE predicate —
+ * it answers "is this value valid?" and never mutates the value. Null included:
+ * the shape's `[T,'null']` union is judged by the engine, there is no hand-rolled
+ * null branch. It never looks at `role` (persistence/domain) — a foreign key is
+ * just a string here. Converting a valid value (e.g. an ISO string → a `Date`)
+ * is a separate step, the `boundary` axis, applied after the predicate passes.
+ * Absence is judged by `lifecycle.create` — any create rule makes it legal and
+ * the field is OMITTED from the result, never filled: realising the rule
+ * (stamp 'now', apply { value }, generate) belongs to the storage adapter at
+ * the point of persistence, whose insert returns the complete row.
+ */
+export interface ValidationError {
+    path: string;
+    message: string;
+}
+export type ValidationResult<T> = {
+    success: true;
+    data: T;
+} | {
+    success: false;
+    errors: ValidationError[];
+};
+export type Checked = {
+    value: unknown;
+} | {
+    error: string;
+};
+/**
+ * Validate a present value (null included) against its field — pure, never mutates.
+ *
+ * Reads `shape` and nothing else, so it answers "is this a legal value?" without ever
+ * asking who is speaking. That is what makes it usable on the way OUT of the domain,
+ * where the client-only axes (`boundary`, `lifecycle`) do not apply.
+ */
+export declare function checkValue(field: AnyField, value: unknown): Checked;
+export interface ValidateOptions {
+    /**
+     * Patch mode (update). An absent field is OMITTED from the result — not filled,
+     * not required — so `validate({ name })` touches only `name`. Set by `partial()`.
+     * Distinguishes "absent → don't touch" (patch) from "absent → null" (create).
+     */
+    patch?: boolean;
+}
+export declare function validateFields(fields: Fields, input: unknown, pathPrefix?: string, opts?: ValidateOptions): ValidationResult<Record<string, unknown>>;
+//# sourceMappingURL=validation.d.ts.map

package/dist/projections/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/projections/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAS,MAAM,mBAAmB,CAAC;AAIjE;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAC1B;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAElD,MAAM,MAAM,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAmB7D;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAgCnE;AAED,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,EACd,UAAU,SAAK,EACf,IAAI,GAAE,eAAoB,GACzB,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA8E3C"}

package/dist/projections/validation.js

@@ -0,0 +1,140 @@
+import { anatomy, boundaryOf, resolveBoundary } from '../field/index.js';
+import { Validator } from '@cfworker/json-schema';
+/**
+ * One validator per shape — the shape object IS the source JSON Schema (the closed
+ * grammar the helpers emit), handed straight to the engine. Keyed by the shape
+ * reference (stable: derivations copy field refs, `partial()` spreads the field but
+ * keeps the same `shape`), built once and reused so the parse cost is amortised.
+ */
+const validators = new WeakMap();
+function validatorFor(shape) {
+    let v = validators.get(shape);
+    if (!v) {
+        v = new Validator(shape, '2020-12', true);
+        validators.set(shape, v);
+    }
+    return v;
+}
+/**
+ * Validate a present value (null included) against its field — pure, never mutates.
+ *
+ * Reads `shape` and nothing else, so it answers "is this a legal value?" without ever
+ * asking who is speaking. That is what makes it usable on the way OUT of the domain,
+ * where the client-only axes (`boundary`, `lifecycle`) do not apply.
+ */
+export function checkValue(field, value) {
+    const shape = field.shape;
+    // Relation-only field (`many`): no value shape, just an array of related rows.
+    if (!shape) {
+        if (field.role?.relation?.kind === 'many') {
+            return Array.isArray(value) ? { value } : { error: 'Expected an array' };
+        }
+        return { value };
+    }
+    // The pre-engine guards dispatch on the BASE type — `shape.type` itself may be
+    // the nullable union. They only short-circuit NON-null values: null always goes
+    // to the engine, whose union judges it (that is the whole nullability model).
+    const base = anatomy(shape).base;
+    if (value !== null) {
+        // Opaque JSON (`json()`): no nested shape → passes through unchecked.
+        // `json(Entity)` carries `properties` and falls through to the engine,
+        // which validates the nesting natively (it's plain JSON Schema).
+        if (base?.type === 'object' && !base.properties)
+            return { value };
+        // A date-time field also accepts a live Date — the domain value, not its JSON wire
+        // string — which the boundary then passes through. The engine validates JSON, so a
+        // Date (a non-JSON value) skips the schema check here; a date STRING is validated below.
+        if (base?.type === 'string' && base.format === 'date-time' && value instanceof Date) {
+            return Number.isNaN(value.getTime()) ? { error: 'Invalid date' } : { value };
+        }
+        // NaN is `typeof number` yet has no JSON form, so the JSON-centric engine accepts it —
+        // guard it here (same nature as the Date case: a JS value JSON can't represent).
+        if ((base?.type === 'number' || base?.type === 'integer') && typeof value === 'number' && Number.isNaN(value)) {
+            return { error: 'Expected a number' };
+        }
+    }
+    const result = validatorFor(shape).validate(value);
+    return result.valid ? { value } : { error: result.errors[0]?.error ?? 'Invalid value' };
+}
+export function validateFields(fields, input, pathPrefix = '', opts = {}) {
+    if (typeof input !== 'object' || input === null) {
+        return { success: false, errors: [{ path: pathPrefix || '.', message: 'Expected an object' }] };
+    }
+    const data = input;
+    const errors = [];
+    const out = {};
+    // Refuse, never strip: a key outside the contract is an error, not a silent
+    // drop. The client derives from the same contract (a form cannot emit a
+    // foreign key), so a stranger is a bug or an attack — both deserve the 400.
+    // Stripping would also let the envelope diverge from GraphQL, which refuses
+    // unknown input keys by construction.
+    //
+    // A FACT is judged by this same rule, deliberately — the one place it was tempting to
+    // relax it. A subscriber's copy of a fact can be older than the sender's, so tolerating
+    // a stranger key would let a rolling deployment through; it would also mean a reader
+    // silently ignoring a field it was supposed to handle. If the judge refuses, that is
+    // the end of it: the sender re-syncs its readers before it ships.
+    for (const key of Object.keys(data)) {
+        if (!(key in fields)) {
+            errors.push({ path: pathPrefix ? `${pathPrefix}.${key}` : key, message: 'Unknown field' });
+        }
+    }
+    for (const [key, field] of Object.entries(fields)) {
+        const path = pathPrefix ? `${pathPrefix}.${key}` : key;
+        const value = data[key];
+        if (value === undefined) {
+            if (opts.patch)
+                continue; // patch: an unsent field is left untouched
+            // A read-only field is server-owned: its absence from a client input is
+            // never "Required" (same stance as OpenAPI readOnly+required).
+            if (boundaryOf(field).in === 'closed')
+                continue;
+            // Absence is answered by `lifecycle.create` — a key access on the normal
+            // form. The judge only asks "is there a rule?": any rule ('now',
+            // 'optional', { value }, { generate }) makes absence legal, and the field
+            // is omitted from the result. Realisation is the storage adapter's role.
+            if (field.lifecycle?.create !== undefined)
+                continue;
+            // No create rule: a `many` relation defaults to the empty collection
+            // (graph semantics, read on `role` — never a shared `{ value: [] }`).
+            if (field.role?.relation?.kind === 'many') {
+                out[key] = [];
+                continue;
+            }
+            errors.push({ path, message: 'Required' });
+            continue;
+        }
+        // A PRESENT value can be illegal by an axis other than shape:
+        // boundary `in: 'closed'` — a read-only field never crosses inbound;
+        // lifecycle `update: 'forbidden'` — re-supplying an immutable field in a patch.
+        if (boundaryOf(field).in === 'closed') {
+            errors.push({ path, message: 'Read-only' });
+            continue;
+        }
+        if (opts.patch && field.lifecycle?.update === 'forbidden') {
+            errors.push({ path, message: 'Immutable' });
+            continue;
+        }
+        // The shape predicate judges the value — null included, via the `[T,'null']`
+        // union. Then the boundary's decode converts wire→domain; null skips decode
+        // (a legal null is already the domain value, there is nothing to convert).
+        const checked = checkValue(field, value);
+        if ('error' in checked) {
+            errors.push({ path, message: checked.error });
+            continue;
+        }
+        if (checked.value === null) {
+            out[key] = null;
+            continue;
+        }
+        const decoded = resolveBoundary(field).decode(checked.value);
+        if ('error' in decoded)
+            errors.push({ path, message: decoded.error });
+        else
+            out[key] = decoded.value;
+    }
+    if (errors.length > 0)
+        return { success: false, errors };
+    return { success: true, data: out };
+}
+//# sourceMappingURL=validation.js.map

package/dist/projections/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/projections/validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AA4BlD;;;;;GAKG;AACH,MAAM,UAAU,GAAG,IAAI,OAAO,EAAqB,CAAC;AAEpD,SAAS,YAAY,CAAC,KAAY;IAChC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,IAAI,SAAS,CAAC,KAAe,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACpD,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAe,EAAE,KAAc;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,+EAA+E;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,+EAA+E;IAC/E,gFAAgF;IAChF,8EAA8E;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAClE,mFAAmF;QACnF,mFAAmF;QACnF,yFAAyF;QACzF,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YACpF,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QAC/E,CAAC;QACD,uFAAuF;QACvF,iFAAiF;QACjF,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9G,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,eAAe,EAAE,CAAC;AAC1F,CAAC;AAWD,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,KAAc,EACd,UAAU,GAAG,EAAE,EACf,IAAI,GAAoB,EAAE;IAE1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,IAAI,GAAG,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,sCAAsC;IACtC,EAAE;IACF,sFAAsF;IACtF,wFAAwF;IACxF,qFAAqF;IACrF,qFAAqF;IACrF,kEAAkE;IAClE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAExB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,KAAK;gBAAE,SAAS,CAAC,2CAA2C;YACrE,wEAAwE;YACxE,+DAA+D;YAC/D,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,QAAQ;gBAAE,SAAS;YAChD,yEAAyE;YACzE,iEAAiE;YACjE,0EAA0E;YAC1E,yEAAyE;YACzE,IAAI,KAAK,CAAC,SAAS,EAAE,MAAM,KAAK,SAAS;gBAAE,SAAS;YACpD,qEAAqE;YACrE,sEAAsE;YACtE,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QAED,8DAA8D;QAC9D,qEAAqE;QACrE,gFAAgF;QAChF,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,OAAO,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;;YACjE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACtC,CAAC"}

package/dist/unique.d.ts

@@ -0,0 +1,65 @@
+import type { Fields } from './field/index.js';
+import type { Hints } from './hints.js';
+/**
+ * Field names that identify at most one row when taken together.
+ *
+ * `unique(field)` states a fact about one column; some facts are about a pair.
+ * "A book appears once in a list" is true of `(listId, docId)` and of neither
+ * alone, and there is no shape that can express it — judging one value never
+ * sees the other rows. So it is declared on the entity and realized by storage.
+ *
+ * Held here rather than in a handler because a handler cannot hold it: a check
+ * followed by a write is two round trips, and a concurrent request fits between
+ * them. The database is the only place where the promise is keepable.
+ */
+export type CompositeUnique<TFields extends Fields> = ReadonlyArray<ReadonlyArray<Extract<keyof TFields, string>>>;
+/**
+ * What an entity declares about itself, beyond its fields — the 2nd argument of
+ * `entity()`.
+ *
+ * One object rather than a growing parameter list: a second fact about an entity
+ * adds a key here, never a positional argument.
+ */
+export interface EntityDeclarations<TFields extends Fields> {
+    /** Field groups that must be unique together. */
+    unique?: CompositeUnique<TFields>;
+    /** Per-consumer hints, keyed by registered adapter. See {@link Hints}. */
+    hints?: Hints<TFields>;
+}
+/**
+ * Carry composite groups across a field-key transform — the entity-level twin of
+ * `deriveHints`.
+ *
+ * A group whose members did not all survive is dropped rather than narrowed: the
+ * pair `(listId, docId)` says nothing about `listId` alone, and keeping the
+ * remnant would silently state a stronger fact than the author ever wrote.
+ */
+export declare function deriveUnique(groups: CompositeUnique<Fields> | undefined, mapKey: (key: string) => string | undefined): CompositeUnique<Fields> | undefined;
+/**
+ * Carry the projected groups across the same key transform — the field-level twin of
+ * {@link deriveUnique}, and it has to run with it: the group lives in TWO places once
+ * projected (the declaration and each member's role), so remapping one alone left
+ * `pick('id','listId')` with a role still claiming a pair whose other member was gone.
+ *
+ * Same rule as the declaration — a group that lost a member is dropped, not narrowed.
+ * The empty self-reference needs no remapping: it names no key, which is exactly why it
+ * survives a `rename()` for free.
+ */
+export declare function deriveUniqueRoles<TFields extends Fields>(fields: TFields, mapKey: (key: string) => string | undefined): TFields;
+/**
+ * Project the entity's composite groups onto the role of every member — the single
+ * place the two ways of stating uniqueness meet.
+ *
+ * The author writes each fact where it lives: `unique(slug)` on the field it is about,
+ * `entity(fields, { unique: [['listId','docId']] })` on the entity, because a fact about
+ * a pair is held by neither field alone. Both then read as ONE normal form on the role
+ * axis, so every consumer — the DDL, the card, a foreign adapter — has a single shape to
+ * handle, and a field belonging to two constraints simply carries two member lists.
+ *
+ * The entity declaration stays the source (`getUnique()` keeps answering it); this is a
+ * projection of it, never a second place to edit. A named member group is spelled out
+ * here, while a lone `unique()` keeps its `[]` self-reference — resolved by whoever reads
+ * it, which is what makes `rename()` free.
+ */
+export declare function projectUniqueOntoFields<TFields extends Fields>(fields: TFields, groups: CompositeUnique<TFields> | undefined): TFields;
+//# sourceMappingURL=unique.d.ts.map

package/dist/unique.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unique.d.ts","sourceRoot":"","sources":["../src/unique.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,CAAC,OAAO,SAAS,MAAM,IAAI,aAAa,CACjE,aAAa,CAAC,OAAO,CAAC,MAAM,OAAO,EAAE,MAAM,CAAC,CAAC,CAC9C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB,CAAC,OAAO,SAAS,MAAM;IACxD,iDAAiD;IACjD,MAAM,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,SAAS,EAC3C,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC1C,eAAe,CAAC,MAAM,CAAC,GAAG,SAAS,CAQrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,SAAS,MAAM,EACtD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC1C,OAAO,CAkBT;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,SAAS,MAAM,EAC5D,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,SAAS,GAC3C,OAAO,CAiBT"}

package/dist/unique.js

@@ -0,0 +1,80 @@
+/**
+ * Carry composite groups across a field-key transform — the entity-level twin of
+ * `deriveHints`.
+ *
+ * A group whose members did not all survive is dropped rather than narrowed: the
+ * pair `(listId, docId)` says nothing about `listId` alone, and keeping the
+ * remnant would silently state a stronger fact than the author ever wrote.
+ */
+export function deriveUnique(groups, mapKey) {
+    if (!groups)
+        return undefined;
+    const carried = groups
+        .map((group) => group.map(mapKey))
+        .filter((group) => group.every((key) => key !== undefined));
+    return carried.length > 0 ? carried : undefined;
+}
+/**
+ * Carry the projected groups across the same key transform — the field-level twin of
+ * {@link deriveUnique}, and it has to run with it: the group lives in TWO places once
+ * projected (the declaration and each member's role), so remapping one alone left
+ * `pick('id','listId')` with a role still claiming a pair whose other member was gone.
+ *
+ * Same rule as the declaration — a group that lost a member is dropped, not narrowed.
+ * The empty self-reference needs no remapping: it names no key, which is exactly why it
+ * survives a `rename()` for free.
+ */
+export function deriveUniqueRoles(fields, mapKey) {
+    const out = { ...fields };
+    for (const [key, field] of Object.entries(out)) {
+        const groups = field.role?.unique;
+        if (!groups?.length)
+            continue;
+        const carried = groups
+            .map((group) => (group.length === 0 ? [] : group.map(mapKey)))
+            .filter((group) => group.every((member) => member !== undefined));
+        if (carried.length === groups.length)
+            continue; // nothing lost, keep the field as is
+        const { unique: _dropped, ...rest } = field.role;
+        out[key] = {
+            ...field,
+            role: carried.length ? { ...rest, unique: carried } : rest,
+        };
+    }
+    return out;
+}
+/**
+ * Project the entity's composite groups onto the role of every member — the single
+ * place the two ways of stating uniqueness meet.
+ *
+ * The author writes each fact where it lives: `unique(slug)` on the field it is about,
+ * `entity(fields, { unique: [['listId','docId']] })` on the entity, because a fact about
+ * a pair is held by neither field alone. Both then read as ONE normal form on the role
+ * axis, so every consumer — the DDL, the card, a foreign adapter — has a single shape to
+ * handle, and a field belonging to two constraints simply carries two member lists.
+ *
+ * The entity declaration stays the source (`getUnique()` keeps answering it); this is a
+ * projection of it, never a second place to edit. A named member group is spelled out
+ * here, while a lone `unique()` keeps its `[]` self-reference — resolved by whoever reads
+ * it, which is what makes `rename()` free.
+ */
+export function projectUniqueOntoFields(fields, groups) {
+    if (!groups || groups.length === 0)
+        return fields;
+    const projected = { ...fields };
+    for (const group of groups) {
+        const members = [...group];
+        for (const key of members) {
+            const field = projected[key];
+            if (!field)
+                continue; // a group naming an absent field states nothing here
+            const already = field.role?.unique ?? [];
+            projected[key] = {
+                ...field,
+                role: { ...field.role, unique: [...already, members] },
+            };
+        }
+    }
+    return projected;
+}
+//# sourceMappingURL=unique.js.map

package/dist/unique.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unique.js","sourceRoot":"","sources":["../src/unique.ts"],"names":[],"mappings":"AAiCA;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,MAA2C,EAC3C,MAA2C;IAE3C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,OAAO,GAAG,MAAM;SACnB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;SACjC,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC;IAEjF,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAe,EACf,MAA2C;IAE3C,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,EAAY,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,MAAM;YAAE,SAAS;QAE9B,MAAM,OAAO,GAAG,MAAM;aACnB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;aAC7D,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC;QAEvF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,SAAS,CAAG,qCAAqC;QACvF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,IAAK,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,GAAG;YACT,GAAG,KAAK;YACR,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;SAC3D,CAAC;IACJ,CAAC;IACD,OAAO,GAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAe,EACf,MAA4C;IAE5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAElD,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,EAAY,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK;gBAAE,SAAS,CAAG,qDAAqD;YAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;YACzC,SAAS,CAAC,GAAG,CAAC,GAAG;gBACf,GAAG,KAAK;gBACR,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,EAAE;aACvD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAoB,CAAC;AAC9B,CAAC"}

package/dist/vocabulary/auto.d.ts

@@ -0,0 +1,8 @@
+import { type Field } from '../field/index.js';
+/**
+ * Auto-managed timestamp, stamped at creation — optional in `new X(input)`.
+ * Immutable by default: a creation timestamp re-supplied in a patch is an
+ * error (decided 2026-07-15).
+ */
+export declare function auto(): Field<Date, true>;
+//# sourceMappingURL=auto.d.ts.map

package/dist/vocabulary/auto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto.d.ts","sourceRoot":"","sources":["../../src/vocabulary/auto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAKxC"}

package/dist/vocabulary/auto.js

@@ -0,0 +1,13 @@
+import { createField } from '../field/index.js';
+/**
+ * Auto-managed timestamp, stamped at creation — optional in `new X(input)`.
+ * Immutable by default: a creation timestamp re-supplied in a patch is an
+ * error (decided 2026-07-15).
+ */
+export function auto() {
+    return createField({
+        shape: { type: 'string', format: 'date-time' },
+        lifecycle: { create: 'now', update: 'forbidden' },
+    });
+}
+//# sourceMappingURL=auto.js.map

package/dist/vocabulary/auto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto.js","sourceRoot":"","sources":["../../src/vocabulary/auto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,mBAAmB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,UAAU,IAAI;IAClB,OAAO,WAAW,CAAa;QAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;QAC9C,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;KAClD,CAAC,CAAC;AACL,CAAC"}

package/dist/vocabulary/bool.d.ts

@@ -0,0 +1,6 @@
+import { type Field } from '../field/index.js';
+export declare function bool(opts?: {
+    default?: boolean;
+    description?: string;
+}): Field<boolean>;
+//# sourceMappingURL=bool.d.ts.map

package/dist/vocabulary/bool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bool.d.ts","sourceRoot":"","sources":["../../src/vocabulary/bool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE5D,wBAAgB,IAAI,CAAC,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAMvF"}

package/dist/vocabulary/bool.js

@@ -0,0 +1,9 @@
+import { createField } from '../field/index.js';
+export function bool(opts) {
+    return createField({
+        shape: { type: 'boolean' },
+        lifecycle: opts?.default !== undefined ? { create: { value: opts.default } } : undefined,
+        meta: opts?.description !== undefined ? { description: opts.description } : undefined,
+    });
+}
+//# sourceMappingURL=bool.js.map

package/dist/vocabulary/bool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bool.js","sourceRoot":"","sources":["../../src/vocabulary/bool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,mBAAmB,CAAC;AAE5D,MAAM,UAAU,IAAI,CAAC,IAAkD;IACrE,OAAO,WAAW,CAAU;QAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC1B,SAAS,EAAE,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;QACxF,IAAI,EAAE,IAAI,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;KACtF,CAAC,CAAC;AACL,CAAC"}

package/dist/vocabulary/date.d.ts

@@ -0,0 +1,3 @@
+import { type Field } from '../field/index.js';
+export declare function date(): Field<Date>;
+//# sourceMappingURL=date.d.ts.map

package/dist/vocabulary/date.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"date.d.ts","sourceRoot":"","sources":["../../src/vocabulary/date.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE5D,wBAAgB,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAElC"}

package/dist/vocabulary/date.js

@@ -0,0 +1,5 @@
+import { createField } from '../field/index.js';
+export function date() {
+    return createField({ shape: { type: 'string', format: 'date-time' } });
+}
+//# sourceMappingURL=date.js.map

package/dist/vocabulary/date.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"date.js","sourceRoot":"","sources":["../../src/vocabulary/date.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,mBAAmB,CAAC;AAE5D,MAAM,UAAU,IAAI;IAClB,OAAO,WAAW,CAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC"}

package/dist/vocabulary/email.d.ts

@@ -0,0 +1,5 @@
+import { type TextOptions } from './text.js';
+import type { Field } from '../field/index.js';
+/** A string holding an email address — `text({ format: 'email' })`, named. */
+export declare function email(opts?: Omit<TextOptions, 'format'>): Field<string>;
+//# sourceMappingURL=email.d.ts.map

package/dist/vocabulary/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../src/vocabulary/email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE/C,8EAA8E;AAC9E,wBAAgB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAEvE"}

package/dist/vocabulary/email.js

@@ -0,0 +1,6 @@
+import { text } from './text.js';
+/** A string holding an email address — `text({ format: 'email' })`, named. */
+export function email(opts) {
+    return text({ ...opts, format: 'email' });
+}
+//# sourceMappingURL=email.js.map

package/dist/vocabulary/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../src/vocabulary/email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAoB,MAAM,WAAW,CAAC;AAGnD,8EAA8E;AAC9E,MAAM,UAAU,KAAK,CAAC,IAAkC;IACtD,OAAO,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC"}