@modyra/angular 0.2.0 → 0.3.0

package/README.md

@@ -9,33 +9,37 @@
 engine with native bindings for Angular, React, Vue and Lit — one shared
 core, one shared headless widget layer, one shared theme package.
 
-- No `FormControl`, `FormGroup` or RxJS — form state is signals and `computed`s
-- Compile-time checked field bindings: `[field]="form.f.email"`, typos don't compile
+- No framework runtime, no RxJS — form state is plain signals and `computed`s
+- Compile-time checked field bindings: `form.f.email` — typos don't compile
 - Sync, async (debounced, cancellable, cross-field) and form-level validation
 - Typed field arrays (`array()`) for repeatable rows — push/insert/remove/move
 - Drafts (autosave/restore), undo/redo, minimal-patch change tracking, devtools
 - Headless core or accessible ready-made controls — your design system or ours
-- Incremental Angular adoption through Reactive Forms interop (`mdyCva`)
+- Incremental adoption paths — e.g. Reactive Forms interop (`mdyCva`) on Angular
 
 [![CI](https://github.com/modyra/modyra/actions/workflows/ci.yml/badge.svg)](https://github.com/modyra/modyra/actions/workflows/ci.yml)
-[![npm](https://img.shields.io/npm/v/@modyra/angular)](https://www.npmjs.com/package/@modyra/angular)
-[![Angular](https://img.shields.io/badge/Angular-21%2B-red)](https://angular.dev)
+[![Release](https://github.com/modyra/modyra/actions/workflows/release.yml/badge.svg?branch=main)](https://github.com/modyra/modyra/actions/workflows/release.yml)
+[![npm](https://img.shields.io/npm/v/@modyra/core)](https://www.npmjs.com/package/@modyra/core)
 [![TypeScript](https://img.shields.io/badge/TypeScript-strict-blue)](https://www.typescriptlang.org)
 [![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 [![GitHub Sponsors](https://img.shields.io/badge/Sponsor-GitHub-ea4aaa?style=flat&logo=github-sponsors)](https://github.com/sponsors/lorenzomusche)
 
 ## Packages
 
-| Package                               | What it is                                                                                               | Peer deps              |
-| :------------------------------------ | :------------------------------------------------------------------------------------------------------- | :--------------------- |
-| [`@modyra/core`](packages/core)       | Framework-agnostic form engine: typed field trees, arrays, validation, drafts, undo/redo, i18n utilities | —                      |
-| [`@modyra/widgets`](packages/widgets) | Headless widget controllers + universal interaction/accessibility contract                               | —                      |
-| [`@modyra/angular`](packages/angular) | Angular binding on native signals — the most complete adapter (UI catalog, devtools, wizard, interop)    | `@angular/*` ≥21       |
-| [`@modyra/react`](packages/react)     | React binding via `useSyncExternalStore`                                                                 | `react` ≥18            |
-| [`@modyra/vue`](packages/vue)         | Vue binding on `@vue/reactivity`                                                                         | `@vue/reactivity` ≥3.4 |
-| [`@modyra/lit`](packages/lit)         | Lit binding — ReactiveController + themable form elements                                                | `lit` ≥3               |
-| [`@modyra/zod`](packages/zod)         | Framework-agnostic Zod adapter — schema-first typed forms                                                | `zod` ≥3.25            |
-| [`@modyra/styles`](packages/styles)   | CSS themes (`default`, `material`, `ios`, `ionic`, `base`) for every adapter                             | —                      |
+| Package                                               | What it is                                                                                               | UI layer                                                 | Peer deps              |
+| :---------------------------------------------------- | :------------------------------------------------------------------------------------------------------- | :------------------------------------------------------- | :--------------------- |
+| [`@modyra/core`](packages/core)                       | Framework-agnostic form engine: typed field trees, arrays, validation, drafts, undo/redo, i18n utilities | headless                                                 | —                      |
+| [`@modyra/widgets`](packages/widgets)                 | Headless widget controllers + universal interaction/accessibility contract                               | headless                                                 | —                      |
+| [`@modyra/angular`](packages/angular)                 | Angular binding on native signals                                                                        | full renderer catalog, themes, devtools, wizard, interop | `@angular/*` ≥21       |
+| [`@modyra/react`](packages/react)                     | React binding via `useSyncExternalStore`                                                                 | headless — bring your own UI                             | `react` ≥18            |
+| [`@modyra/vue`](packages/vue)                         | Vue binding on `@vue/reactivity`                                                                         | headless — bring your own UI                             | `@vue/reactivity` ≥3.4 |
+| [`@modyra/lit`](packages/lit)                         | Lit binding — ReactiveController                                                                         | themable form elements                                   | `lit` ≥3               |
+| [`@modyra/zod`](packages/zod)                         | Framework-agnostic Zod adapter — schema-first typed forms                                                | —                                                        | `zod` ≥3.25            |
+| [`@modyra/standard-schema`](packages/standard-schema) | Standard Schema adapter — one adapter for Zod, Valibot, ArkType and every v1 vendor                      | —                                                        | —                      |
+| [`@modyra/styles`](packages/styles)                   | CSS themes (`default`, `material`, `ios`, `ionic`, `base`) for every adapter                             | themes                                                   | —                      |
+
+Every binding is a first-class citizen over the same engine: pick the one
+for your framework, keep everything else identical.
 
 ## The engine in 60 seconds (framework-agnostic)
 
@@ -57,7 +61,7 @@ form.getValue().address.city; // "Rome" — fully typed, typos don't compile
 ```
 
 > **Validators are factories, not values:** write `required()`, not
-> `required` (Angular Reactive Forms muscle memory trips here — the
+> `required` (value-style-validator muscle memory trips here — the
 > resulting TS error is easy to misread). Validation errors come back as
 > **arrays of message strings** (`["Name taken"]`), not `{ required: true }`
 > keyed objects. To stop at the first failing validator instead of
@@ -247,20 +251,15 @@ implemented end-to-end, side by side, in:
 Adapter recipes, the four-primitive reactive contract and the Astro note:
 [Multi-framework architecture](docs/guides/multi-framework.md).
 
-## Why not Reactive Forms?
+## Coming from Angular Reactive Forms?
 
-Reactive Forms is official, mature and battle-tested — if that is what your
-team needs, keep it. This library trades ecosystem maturity for:
-compile-checked field paths, signal-based state (zoneless-friendly, no RxJS)
-and built-in async/cross-field validation, typed arrays, drafts, undo/redo
-and devtools.
-
-"No RxJS / no `@angular/forms`" means precisely: no runtime dependency, no
-Observables in the public API, none used internally. The optional `/interop`
-entry point is the single exception — it declares `@angular/forms` as an
-_optional_ peer for CVA-based migration.
-
-Full, honest comparison: [Compared with Reactive Forms](docs/guides/comparison-reactive-forms.md).
+This library trades ecosystem maturity for compile-checked field paths,
+signal-based state (zoneless-friendly, no RxJS — no runtime dependency, no
+Observables in the public API, none used internally) and built-in
+async/cross-field validation, typed arrays, drafts, undo/redo and devtools.
+The `/interop` entry point (`mdyCva`, optional `@angular/forms` peer) covers
+incremental adoption. Full, honest comparison:
+[Compared with Reactive Forms](docs/guides/comparison-reactive-forms.md).
 
 ## Layers
 
@@ -300,8 +299,10 @@ The full index lives in [docs/README.md](docs/README.md). The shortlist:
 
 - [Mental model](docs/guides/mental-model.md) — the state graph, field lifecycle, operation semantics
 - [Typed forms](docs/guides/typed-forms.md) — schema, handles, `patch`/`getChanges`, async validation, field arrays, undo/redo, **drafts (read the security note)**, wizard, Zod
+- [Schema adapters](docs/guides/schemas.md) — Zod vs Standard Schema (Valibot, ArkType, …): which model, which trade-offs
 - [Usage modes](docs/guides/usage-modes.md) — declarative, explicit adapter, headless, validation semantics
 - [UI toolkit](docs/guides/ui-toolkit.md) — renderer catalog, enterprise select, dynamic forms, CSS tokens
+- [AI-generated forms](docs/guides/ai-generated-forms.md) — LLM output → `parseDynamicFields()` → render: the safe pipeline + system prompt template
 - [DevTools](docs/guides/devtools.md) — hotkey overlay, masking, production notes
 - [I18n](docs/guides/i18n.md) — UI strings (en/it/de/fr/es), date/time value models, localized parsing
 - [Reactive Forms interop](docs/guides/interop.md) · [Comparison](docs/guides/comparison-reactive-forms.md) · [Troubleshooting](docs/guides/troubleshooting.md)
@@ -317,15 +318,28 @@ Project policies: [security](SECURITY.md) · [contributing](CONTRIBUTING.md) ·
   own adapter package.
 - TypeScript strict mode; the library compiles with `strict` and
   `strictTemplates`.
-- Status: young library, actively developed, single maintainer. Unit and
-  type tests cover the core engine, every adapter and the widget layer
-  (`npm test`, `npm run test:core`, `npm run test:adapters`,
-  `npm run test:widgets`), plus a tree-shaking bundle check
-  (`npm run test:bundle`); browser, axe and visual tests are planned.
-  Pin your version and read release notes.
+- Status: young library, actively developed, single maintainer. `npm test`
+  runs the whole matrix — core engine, every adapter, the widget layer and
+  the Angular package (`test:core`, `test:adapters`, `test:widgets`,
+  `test:angular` individually) — plus a tree-shaking bundle check
+  (`npm run test:bundle`), axe-core accessibility tests over the main
+  Angular renderers (jest + jsdom, inside `test:angular`) and a Playwright
+  browser smoke test over the packaged Angular demo (`npm run test:e2e`,
+  currently non-blocking in CI while it stabilizes); visual regression
+  tests are still planned. Pin your version and read release notes.
 
 ## Examples
 
+[![Open in StackBlitz](https://developer.stackblitz.com/img/open_in_stackblitz.svg)](https://stackblitz.com/github/modyra/modyra/tree/main/examples/stackblitz)
+
+`examples/stackblitz` is a minimal Angular signup form that runs against the
+**published** `@modyra/angular` package — the fastest way to try the library
+without cloning anything.
+
+`examples/angular` is the full Angular demo app (typed, declarative, dynamic
+and Zod sections over the whole renderer catalog) — one demo app per
+framework, same engine.
+
 `examples/{react,vue,lit}` implement the **same signup form** (name +
 email, shared validators, agnostic devtools panel) so the adapters can be
 compared side by side, with a runtime switcher across the shipped themes
@@ -344,11 +358,10 @@ npm run demo:lit       # http://localhost:4303
 
 ```bash
 pnpm install             # workspace deps use the workspace: protocol — use pnpm
-npm run build:lib        # core + widgets + zod + Angular library build
-npm run build:packages   # core + widgets + zod/vue/react/lit + styles
-npm start                # Angular demo app
-npm test                 # Angular unit + type tests
-npm run test:adapters    # zod/vue/react/lit node tests
+npm run build:packages   # core + widgets + schema adapters + react/vue/lit + styles
+npm run build:angular    # the Angular package (kept as build:lib alias)
+npm test                 # the whole matrix: core, adapters, widgets, Angular
+npm run demo:angular     # one demo per framework: demo:react / demo:vue / demo:lit
 ```
 
 ## Brand

package/fesm2022/modyra-angular.mjs

@@ -1,8 +1,10 @@
 import * as i0 from '@angular/core';
 import { InjectionToken, untracked, effect, computed, signal, inject, Injector, DestroyRef, input, output, forwardRef, ChangeDetectionStrategy, Component, linkedSignal, contentChildren, booleanAttribute, ApplicationRef, EnvironmentInjector, createComponent, Injectable, ElementRef, Directive, TemplateRef, contentChild, viewChild, viewChildren, afterNextRender, Renderer2, numberAttribute, HostAttributeToken } from '@angular/core';
-import { MDY_I18N_MESSAGES_DEFAULT, buildDateLocale, MDY_I18N_PRESETS, MDY_I18N_DEFAULT_TAGS, MdyFormEngine, field as field$1, group as group$1, array as array$1, MdyTypedFormBase, email, maxLength, max, minLength, min, pattern, required } from '@modyra/core';
+import { MDY_I18N_MESSAGES_DEFAULT, MDY_I18N_PRESETS, MDY_I18N_DEFAULT_TAGS } from '@modyra/core/localization';
+import { buildDateLocale } from '@modyra/core/datetime';
+import { MdyFormEngine, field as field$1, group as group$1, array as array$1, MdyTypedFormBase, email, maxLength, max, minLength, min, pattern, required } from '@modyra/core';
 import { mdyFormSerialize } from '@modyra/core/serialize';
-import { buildDynamicValidators } from '@modyra/core/dynamic-config';
+import { buildDynamicFieldValidators } from '@modyra/core/dynamic-config';
 import { NgTemplateOutlet, NgClass, NgStyle } from '@angular/common';
 import { today, buildMonthGrid, isSameDay, isDateInRange, daysInMonth, addMonths, parseIsoDate, formatIsoDate, parseLocalizedDate, orderDates, isDateBetween, compareDates } from '@modyra/core/date-utils';
 import { DomSanitizer } from '@angular/platform-browser';
@@ -148,9 +150,12 @@ function angularReactivity(injector) {
 class MdyDeclarativeAdapter extends MdyFormEngine {
     constructor(formValue, submitMode = signal("valid-only"), 
     /** Needed to run async validators, drafts and history. */
-    injector) {
+    injector, 
+    /** Injection-prevention policy for field values (see `@modyra/core` security). */
+    security) {
         super(angularReactivity(injector), formValue, submitMode, {
             devWarnings: typeof ngDevMode !== "undefined" && !!ngDevMode,
+            ...(security !== undefined && { security }),
         });
     }
     getField(name) {
@@ -209,6 +214,7 @@ function mdyForm(schema, options) {
         ...(options?.validators !== undefined && { validators: options.validators }),
         ...(options?.history !== undefined && { history: options.history }),
         ...(options?.draft !== undefined && { draft: options.draft }),
+        ...(options?.security !== undefined && { security: options.security }),
         ...(injector !== undefined && { injector }),
     });
     // Tie the form's resources (async runners, draft/history timers) to the
@@ -226,7 +232,7 @@ function mdyForm(schema, options) {
  */
 class MdyTypedForm extends MdyTypedFormBase {
     constructor(schema, options) {
-        const adapter = new MdyDeclarativeAdapter(signal(undefined), signal(options?.submitMode ?? "valid-only"), options?.injector);
+        const adapter = new MdyDeclarativeAdapter(signal(undefined), signal(options?.submitMode ?? "valid-only"), options?.injector, options?.security);
         super(schema, adapter, options);
         this.state = adapter.state;
         this.value = computed(() => this._flatToValue(this._adapter.value()));
@@ -445,6 +451,9 @@ class MdyFormComponent {
     setInitialValue(name, value) {
         this._registry.setInitialValue(name, value);
     }
+    setSanitizer(name, sanitizer) {
+        this._registry.setSanitizer(name, sanitizer);
+    }
     setDisabled(name, disabled) {
         this._registry.setDisabled(name, disabled);
     }
@@ -3193,7 +3202,6 @@ class MdyDatePickerComponent extends MdyOverlayControl {
           [disabled]="isDisabled()"
           (change)="onInputChange($event)"
           (blur)="onInputBlur($event)"
-          [attr.aria-expanded]="open()"
           [attr.aria-haspopup]="'dialog'"
           [attr.aria-invalid]="hasErrors()"
           [attr.aria-describedby]="hasErrors() ? fieldId + '-errors' : null"
@@ -3211,6 +3219,8 @@ class MdyDatePickerComponent extends MdyOverlayControl {
                 [disabled]="isDisabled()"
                 (click)="toggleOverlay($event)"
                 [attr.aria-label]="i18n.datepickerToggleLabel"
+                [attr.aria-expanded]="open()"
+                [attr.aria-haspopup]="'dialog'"
               >
                  <mdy-icon name="CALENDAR" class="mdy-datepicker__icon" />
               </button>
@@ -3311,7 +3321,6 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.18", ngImpo
           [disabled]="isDisabled()"
           (change)="onInputChange($event)"
           (blur)="onInputBlur($event)"
-          [attr.aria-expanded]="open()"
           [attr.aria-haspopup]="'dialog'"
           [attr.aria-invalid]="hasErrors()"
           [attr.aria-describedby]="hasErrors() ? fieldId + '-errors' : null"
@@ -3329,6 +3338,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.18", ngImpo
                 [disabled]="isDisabled()"
                 (click)="toggleOverlay($event)"
                 [attr.aria-label]="i18n.datepickerToggleLabel"
+                [attr.aria-expanded]="open()"
+                [attr.aria-haspopup]="'dialog'"
               >
                  <mdy-icon name="CALENDAR" class="mdy-datepicker__icon" />
               </button>
@@ -6493,7 +6504,6 @@ class MdyTimepickerComponent extends MdyOverlayControl {
           [attr.aria-required]="ariaRequired() || isRequired()"
           [attr.aria-disabled]="effectiveAriaDisabled()"
           [attr.aria-label]="label() || null"
-          [attr.aria-expanded]="open()"
           [attr.aria-haspopup]="'dialog'"
           autocomplete="off"
         />
@@ -6506,6 +6516,8 @@ class MdyTimepickerComponent extends MdyOverlayControl {
               class="mdy-timepicker__toggle"
               [disabled]="isDisabled()"
               [attr.aria-label]="i18n.timepickerOpenLabel"
+              [attr.aria-expanded]="open()"
+              [attr.aria-haspopup]="'dialog'"
               tabindex="-1"
               (click)="toggleOverlay($event)"
             >
@@ -6595,7 +6607,6 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.18", ngImpo
           [attr.aria-required]="ariaRequired() || isRequired()"
           [attr.aria-disabled]="effectiveAriaDisabled()"
           [attr.aria-label]="label() || null"
-          [attr.aria-expanded]="open()"
           [attr.aria-haspopup]="'dialog'"
           autocomplete="off"
         />
@@ -6608,6 +6619,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.18", ngImpo
               class="mdy-timepicker__toggle"
               [disabled]="isDisabled()"
               [attr.aria-label]="i18n.timepickerOpenLabel"
+              [attr.aria-expanded]="open()"
+              [attr.aria-haspopup]="'dialog'"
               tabindex="-1"
               (click)="toggleOverlay($event)"
             >
@@ -6791,7 +6804,9 @@ class MdyDynamicFormComponent {
             const form = this.form();
             untracked(() => {
                 for (const f of fields) {
-                    const { validators, marksRequired } = buildDynamicValidators(f.validators ?? {});
+                    // buildDynamicFieldValidators includes the automatic option
+                    // whitelist (anti-tampering) for select/radio/segmented/multiselect.
+                    const { validators, marksRequired } = buildDynamicFieldValidators(f);
                     form.upsertValidators(f.name, "mdy-dynamic", validators, marksRequired);
                 }
             });
@@ -8718,7 +8733,6 @@ class MdyDateRangePickerComponent extends MdyOverlayControl {
             [attr.aria-required]="ariaRequired() || isRequired()"
             [attr.aria-disabled]="effectiveAriaDisabled()"
             [attr.aria-label]="(label() ? label() + ' — ' : '') + i18n.daterangeStartLabel"
-            [attr.aria-expanded]="open()"
             [attr.aria-haspopup]="'dialog'"
             autocomplete="off"
           />
@@ -8742,7 +8756,6 @@ class MdyDateRangePickerComponent extends MdyOverlayControl {
             [attr.aria-required]="ariaRequired() || isRequired()"
             [attr.aria-disabled]="effectiveAriaDisabled()"
             [attr.aria-label]="(label() ? label() + ' — ' : '') + i18n.daterangeEndLabel"
-            [attr.aria-expanded]="open()"
             [attr.aria-haspopup]="'dialog'"
             autocomplete="off"
           />
@@ -8753,6 +8766,8 @@ class MdyDateRangePickerComponent extends MdyOverlayControl {
             class="mdy-datepicker__toggle"
             [disabled]="isDisabled()"
             [attr.aria-label]="i18n.datepickerToggleLabel"
+            [attr.aria-expanded]="open()"
+            [attr.aria-haspopup]="'dialog'"
             tabindex="-1"
             (click)="toggleOverlay($event)"
           >
@@ -8862,7 +8877,6 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.18", ngImpo
             [attr.aria-required]="ariaRequired() || isRequired()"
             [attr.aria-disabled]="effectiveAriaDisabled()"
             [attr.aria-label]="(label() ? label() + ' — ' : '') + i18n.daterangeStartLabel"
-            [attr.aria-expanded]="open()"
             [attr.aria-haspopup]="'dialog'"
             autocomplete="off"
           />
@@ -8886,7 +8900,6 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.18", ngImpo
             [attr.aria-required]="ariaRequired() || isRequired()"
             [attr.aria-disabled]="effectiveAriaDisabled()"
             [attr.aria-label]="(label() ? label() + ' — ' : '') + i18n.daterangeEndLabel"
-            [attr.aria-expanded]="open()"
             [attr.aria-haspopup]="'dialog'"
             autocomplete="off"
           />
@@ -8897,6 +8910,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.18", ngImpo
             class="mdy-datepicker__toggle"
             [disabled]="isDisabled()"
             [attr.aria-label]="i18n.datepickerToggleLabel"
+            [attr.aria-expanded]="open()"
+            [attr.aria-haspopup]="'dialog'"
             tabindex="-1"
             (click)="toggleOverlay($event)"
           >

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modyra/angular",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Type-safe Angular forms built entirely on native Signals.",
   "funding": {
     "type": "github",
@@ -50,8 +50,8 @@
   ],
   "dependencies": {
     "tslib": ">=2.3.0",
-    "@modyra/core": "^0.2.0",
-    "@modyra/widgets": "^0.2.0"
+    "@modyra/core": "^0.3.0",
+    "@modyra/widgets": "^0.3.0"
   },
   "exports": {
     ".": {

package/types/modyra-angular.d.ts

@@ -1,11 +1,13 @@
 import * as _angular_core from '@angular/core';
 import { Signal, WritableSignal, Injector, InjectionToken, Provider, TemplateRef, OnInit, ElementRef, InputSignal, OnDestroy, InputSignalWithTransform } from '@angular/core';
 import * as _modyra_core from '@modyra/core';
-import { MdyFormError, MdyFieldError, MdyFormSubmitEvent, MdyControlOption, ValidatorFn, MdySelectOption, MdyFormRegistry, MdyFormEngine, MdySubmitMode, MdyI18nMessages, MdyBuiltInLocale, MdyDateLocale, MdyAnyArrayDescriptor as MdyAnyArrayDescriptor$1, MdyAnyFieldDescriptor as MdyAnyFieldDescriptor$1, MdyAnyGroupDescriptor as MdyAnyGroupDescriptor$1, MdyArrayDescriptor as MdyArrayDescriptor$1, MdyArrayItemValue as MdyArrayItemValue$1, MdyFieldDescriptor as MdyFieldDescriptor$1, MdyFormSchema as MdyFormSchema$1, MdyGroupDescriptor as MdyGroupDescriptor$1, MdyFieldOptions as MdyFieldOptions$1, MdyTypedFormBaseOptions, MdyFormPatch as MdyFormPatch$1, MdyFormValue as MdyFormValue$1, MdyTypedFormBase, MdyWiden as MdyWiden$1, MdyFormValidatorFn, MdyAsyncValidatorFn, MdyAsyncValidatorOptions, MdyDateRange, MdyReactivity } from '@modyra/core';
-export { MdyAsyncValidatorFn, MdyAsyncValidatorOptions, MdyControlOption, MdyDateRange, MdyDraftOptions, MdyDraftStorage, MdyFieldError, MdyFormError, MdyFormSubmitEvent, MdyFormValidatorFn, MdySelectOption, MdySubmitMode, ValidatorFn } from '@modyra/core';
+import { MdyFormError, MdyFieldError, MdyFormSubmitEvent, MdyControlOption, ValidatorFn, MdySelectOption, MdyFormRegistry, MdyFormEngine, MdySubmitMode, MdySecurityPolicy, MdyAnyArrayDescriptor as MdyAnyArrayDescriptor$1, MdyAnyFieldDescriptor as MdyAnyFieldDescriptor$1, MdyAnyGroupDescriptor as MdyAnyGroupDescriptor$1, MdyArrayDescriptor as MdyArrayDescriptor$1, MdyArrayItemValue as MdyArrayItemValue$1, MdyFieldDescriptor as MdyFieldDescriptor$1, MdyFormSchema as MdyFormSchema$1, MdyGroupDescriptor as MdyGroupDescriptor$1, MdyFieldOptions as MdyFieldOptions$1, MdyTypedFormBaseOptions, MdyFormPatch as MdyFormPatch$1, MdyFormValue as MdyFormValue$1, MdyTypedFormBase, MdyWiden as MdyWiden$1, MdyFormValidatorFn, MdyAsyncValidatorFn, MdyAsyncValidatorOptions, MdySanitizer, MdyDateRange, MdyReactivity } from '@modyra/core';
+export { MdyAsyncValidatorFn, MdyAsyncValidatorOptions, MdyControlOption, MdyDateRange, MdyDraftOptions, MdyDraftStorage, MdyFieldError, MdyFormError, MdyFormSubmitEvent, MdyFormValidatorFn, MdySanitizeProfile, MdySanitizer, MdySecurityPolicy, MdySecurityViolation, MdySecurityViolationKind, MdySelectOption, MdySubmitMode, ValidatorFn } from '@modyra/core';
 import * as _modyra_angular from '@modyra/angular';
+import { MdyI18nMessages, MdyBuiltInLocale } from '@modyra/core/localization';
+import { MdyDateLocale } from '@modyra/core/datetime';
 import { MdyDynamicField } from '@modyra/core/dynamic-config';
-import * as packages_core_dist from 'packages/core/dist';
+import * as packages_core_dist_i18n from 'packages/core/dist/i18n';
 import { OverlayPosition, OverlayAlignment, OverlayAnchor } from '@modyra/core/overlay-position';
 import { CalendarCell, CalendarDate } from '@modyra/core/date-utils';
 import * as _modyra_widgets from '@modyra/widgets';
@@ -122,7 +124,9 @@ type MdyDeclarativeRegistry = MdyFormRegistry<Signal<boolean>>;
 declare class MdyDeclarativeAdapter extends MdyFormEngine implements MdyFormAdapter<Record<string, unknown>>, MdyDeclarativeRegistry {
     constructor(formValue: Signal<Record<string, unknown> | undefined>, submitMode?: Signal<MdySubmitMode>, 
     /** Needed to run async validators, drafts and history. */
-    injector?: Injector);
+    injector?: Injector, 
+    /** Injection-prevention policy for field values (see `@modyra/core` security). */
+    security?: MdySecurityPolicy);
     readonly state: MdyFormState;
     readonly value: Signal<Record<string, unknown>>;
     readonly fieldNames: Signal<readonly string[]>;
@@ -467,6 +471,7 @@ declare class MdyFormComponent<T extends Record<string, unknown>> implements Mdy
     removeValidators(name: string, key: string): void;
     upsertAsyncValidators<V>(name: string, key: string, validators: ReadonlyArray<MdyAsyncValidatorFn<V>>, options?: MdyAsyncValidatorOptions): void;
     setInitialValue(name: string, value: unknown): void;
+    setSanitizer(name: string, sanitizer: MdySanitizer): void;
     setDisabled(name: string, disabled: Signal<boolean>): void;
     setReadonly(name: string, readonly: Signal<boolean>): void;
     get state(): MdyFormState;
@@ -723,7 +728,7 @@ declare class MdyWizardStepComponent {
  * `form.submit(...)` or submit the surrounding form there.
  */
 declare class MdyFormWizardComponent {
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     private readonly adapter;
     protected readonly steps: Signal<readonly MdyWizardStepComponent[]>;
     private readonly _activeIndex;
@@ -1080,7 +1085,7 @@ declare class MdyGlassDirective {
     /** Optional override for the blur amount (e.g., '10px' or 'blur(10px)') */
     readonly blur: _angular_core.InputSignal<string | undefined>;
     /** Intensity of the glass effect. Themes can use this to adjust blur/opacity. */
-    readonly intensity: _angular_core.InputSignal<"low" | "medium" | "high">;
+    readonly intensity: _angular_core.InputSignal<"high" | "low" | "medium">;
     /** Optional background color override to tint the glass. */
     readonly glassColor: _angular_core.InputSignal<string | undefined>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<MdyGlassDirective, never>;
@@ -1341,7 +1346,7 @@ declare class MdyCheckboxComponent extends MdyBaseControl<boolean> {
  * ```
  */
 declare class MdyColorsComponent extends MdyOverlayControl<string> {
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     readonly placeholder: _angular_core.InputSignal<string>;
     readonly presets: _angular_core.InputSignal<readonly string[]>;
     protected readonly fieldId: string;
@@ -1463,7 +1468,7 @@ declare class MdyCalendarHeaderComponent {
     readonly nextMonth: _angular_core.OutputEmitterRef<void>;
     readonly toggleView: _angular_core.OutputEmitterRef<void>;
     private readonly locale;
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     /** Localized month name (e.g. "March", "Marzo"). */
     protected readonly monthLabel: _angular_core.Signal<string>;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<MdyCalendarHeaderComponent, never>;
@@ -1547,7 +1552,7 @@ declare class MdyDatePickerComponent extends MdyOverlayControl<string | null> {
     readonly displayFormat: _angular_core.InputSignal<"iso" | "localized">;
     protected readonly minSpace = 450;
     protected readonly fieldId: string;
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     private readonly calendarRef;
     private readonly locale;
     private readonly injector;
@@ -1586,7 +1591,7 @@ declare class MdyDateRangePickerComponent extends MdyOverlayControl<MdyDateRange
     private readonly calendarRef;
     private readonly locale;
     private readonly injector;
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     protected readonly tempStart: _angular_core.WritableSignal<CalendarDate | null>;
     protected readonly tempEnd: _angular_core.WritableSignal<CalendarDate | null>;
     protected readonly displayStart: _angular_core.Signal<string>;
@@ -1751,7 +1756,7 @@ declare class MdyFileComponent extends MdyBaseControl<File | File[] | null> {
     readonly fileSelected: _angular_core.OutputEmitterRef<File | File[] | null>;
     /** Emits the files rejected by accept/maxFileSize/maxFiles filtering. */
     readonly filesRejected: _angular_core.OutputEmitterRef<readonly File[]>;
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     protected readonly fieldId: string;
     protected readonly dragOver: _angular_core.WritableSignal<boolean>;
     private readonly fileInput;
@@ -1779,7 +1784,7 @@ declare class MdyFileComponent extends MdyBaseControl<File | File[] | null> {
  */
 declare abstract class MdyDropdownBase<TValue, TOptionValue = unknown> extends MdyOptionsOverlayControl<TValue, TOptionValue> implements MdyOptionsControl<TOptionValue> {
     /** Internationalized strings used by dropdown UI. */
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     /** Injector for Angular effects and `afterNextRender` calls. */
     protected readonly injector: Injector;
     /** Minimum viewport space required to anchor the dropdown. */
@@ -1803,7 +1808,7 @@ declare abstract class MdyDropdownBase<TValue, TOptionValue = unknown> extends M
  * Renders selectable filter chips and delivers ReadonlyArray<TValue>.
  */
 declare class MdyMultiselectComponent<TValue = string> extends MdyDropdownBase<ReadonlyArray<TValue>, TValue> implements MdyOptionsControl<TValue> {
-    readonly mode: _angular_core.InputSignal<"single" | "multi">;
+    readonly mode: _angular_core.InputSignal<"multi" | "single">;
     /**
      * Optional filter predicate applied to options before display.
      * Receives the option *value* and returns `true` to show the option.
@@ -2013,7 +2018,7 @@ declare class MdyToggleComponent extends MdyBaseControl<boolean> {
  * Timepicker renderer — M3-style input with clock overlay.
  */
 declare class MdyTimepickerComponent extends MdyOverlayControl<string | null> {
-    protected readonly i18n: packages_core_dist.MdyI18nMessages;
+    protected readonly i18n: packages_core_dist_i18n.MdyI18nMessages;
     readonly placeholder: _angular_core.InputSignal<string>;
     /**
      * Value and display format: `"12h"` uses `"hh:mm AM/PM"` strings,