@owlmeans/client-planning 0.1.18-rc.29 → 0.1.18-rc.30

package/README.md

@@ -25,6 +25,38 @@ bun add @owlmeans/client-planning@^0.1.18-rc.29
 - **`head > seq`** — a card with a transition allocated and not yet folded; the mirror's `applyReceipt` marks it
   the moment the server answers.
 
+## Forms under a strict Content Security Policy
+
+Use the exact resolved card or assignee type's field schema:
+
+```typescript
+import { makePlanningFieldValidator } from '@owlmeans/client-planning'
+
+const form = makePlanningFieldValidator(resolvedType.fields)
+const checked = form.validateFields(fields)
+if (checked.valid) {
+  // Submit this same fields object through the stock planning facade.
+}
+```
+
+The runtime interpreter supports dynamic organization and project definitions without `eval` or
+`new Function`. It preserves the schema and payload, nested objects, required fields, enum/const,
+dates, references, compositions and AJV nullable semantics; string formats use native
+`ajv-formats` full-mode predicates. Errors contain field `path`, `keyword`, `schemaPath` and a
+bounded message without submitted values. The server's authoritative AJV validates every write.
+
+The schema contract is Draft 7 plus `$defs` and `nullable`, with native AJV reference-sibling
+semantics. References must resolve within the supplied schema. Malformed schemas, missing
+references, same-instance reference cycles, other drafts/custom validation keywords, unknown or
+numeric formats, format-limit extensions and `multipleOf` throw `SchemaInvalid` at preparation.
+The interpreter's floating tolerance and native AJV's multiple semantics differ, so that keyword
+is explicitly refused. JSON fields cannot contain dot/dollar keys or non-JSON values. Standard
+annotations and `x-` metadata remain annotations. At most 64 validation errors are returned.
+
+Surface preparation errors and keep save disabled. Do not remove constraints, choose another
+schema or relax CSP. Registry `validator` / `assigneeValidator` compile with native AJV and need
+code generation; browser forms under strict CSP use this API instead.
+
 ## Usage
 
 Wire the client into a context with the server's own tree:
@@ -131,6 +163,7 @@ that placeholder to authorize a request, and never send an organization record i
   `.applyReceipt(view)`, `.applyCards(cards)`
 - `makePlanningFeed(context, opts?)`
 - `makePlanningResourceFeed(context, opts?)`, `PlanningResourceFeedOptions`
+- `makePlanningFieldValidator(schema)`, `PlanningFieldValidator`, `PlanningFieldValidation`, `PlanningFieldError`
 - `makePlanningClientLifecycle`, `PlanningClientLifecycle`; service `close()` and `scopeKey`
 - `planningContextOf(context)` (`makePlanningContextHelper`) — `.facade(scope?)`, `.model(card, scope?)`,
   `.stores()`

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/client-planning",
-  "version": "0.1.18-rc.29",
-  "generatedAt": "2026-10-09T20:19:04.322Z",
+  "version": "0.1.18-rc.30",
+  "generatedAt": "2026-10-10T00:34:44.458Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/client-planning/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/client-planning
 
 **Layer:** Client
-**Install:** `"@owlmeans/client-planning": "^0.1.18-rc.29"` in `dependencies`
+**Install:** `"@owlmeans/client-planning": "^0.1.18-rc.30"` in `dependencies`
 
 The client half of OwlMeans planning. It answers the `PlanningFacade` interface of
 `@owlmeans/planning` over the protocol tree a server mounted with `@owlmeans/server-planning`, keeps
@@ -30,6 +30,7 @@ CLI). React hooks over the mirror are `useStoreModel` / `useStoreList` from `@ow
 | `planningMirrorOf(stores).applyCommitEvent(event, facade?)` / `.applyReceipt(view)` / `.applyCards(cards)` | The folds |
 | `makePlanningFeed(context, opts?)` | Subscribe, seed, fold, refresh — `{ connected, seeded, error, ready, refresh, stop }` |
 | `planningContextOf(context).facade(scope?)` / `.model(card, scope?)` | The facade / a model with the schemas loaded |
+| `makePlanningFieldValidator(schema)` | CSP-safe validation of an exact served field schema; `{ validateFields }` |
 | `CARDS`, `LINKS`, `COMMITS` | Store aliases (`planning-card-state`, `planning-link-state`, `planning-commit-state`) |
 | Types | `PlanningClientOptions`, `PlanningClientService`, `WithPlanningClient`, `PlanningSocketOpener`, `RemoteCommitSource`, `RemoteDefinitions`, `RemoteDefinitionsOptions`, `PlanningStores`, `PlanningStoreAliases`, `WithPlanningStores`, `PlanningCommitRecord`, `PlanningFeed`, `PlanningFeedOptions`, `PlanningFeedState`, `SyncOptions`, `PlanningContextHelper`, `PlanningMirror`, `SyncHelper` |
 
@@ -87,6 +88,38 @@ whole cache — an organization-wide write reaches every project's layer — and
 `model(card)` of a card resolves its type in its project's layer (a project's own id, a card's
 nearest primary project ancestor); a specification's type is always code's. A tree without `definitions` has none of this.
 
+## Browser field validation under CSP
+
+Bind `makePlanningFieldValidator(type.fields)` to the exact definition returned by the resolved
+organization or project bundle. Its `validateFields(fields)` returns `{ valid, errors }`; errors
+carry decoded `path`, `keyword`, `schemaPath` and a bounded value-free `message`. Construct one JSON
+fields object, validate it and send that same object. No coercion, defaults or property removal
+occurs, and the schema is left unchanged. Preserve nested money objects and calendar date strings.
+The native server validates every write again.
+
+The validator interprets schemas with `@cfworker/json-schema`, with no `eval`, `new Function` or
+network reference loading. Do not call `makeSchemaRegistry(...).validator()` or
+`.assigneeValidator()` in a browser with strict `script-src`: those remain native AJV compilers.
+Static AJV standalone compilation is suitable only when the schema cannot change after building;
+organization and project definitions require the runtime interpreter.
+
+The supported contract is Draft 7's object/array/scalar, required, enum/const, ranges, string
+length/pattern, dependencies, boolean, composition and conditional keywords; `$defs`, local/nested
+`$id` references and AJV's `nullable` are also supported. `$ref` sibling constraints are enforced as
+by native planning AJV. String formats use the same `ajv-formats` full-mode predicates, including
+real calendar dates and timezone-aware times. `nullable` adds null to the declared type while
+leaving enum and const constraints intact. All references must resolve inside the supplied field
+schema; productive recursive schemas are supported, same-instance reference cycles are refused.
+Plain JSON values and field names without dot or dollar characters are required.
+
+Preparation throws `SchemaInvalid` for malformed schemas, unresolved references, unsupported
+drafts/keywords/formats, numeric formats, `formatMinimum`/`formatMaximum` extensions and
+`multipleOf`. The latter is refused because the interpreter's epsilon and native AJV's quotient
+semantics disagree for fractional and very large numbers. Standard annotation keywords and `x-`
+annotations do not add validation. Never discard a refused constraint, invent a substitute schema,
+enable `unsafe-eval` or proceed with a ready form after preparation fails. Show the error and retain
+disabled save controls. Validation reports at most 64 errors, with paths bounded to 512 characters.
+
 ## Mounting in a target
 
 The web half of the target mount (`planning` → Mounting in a target).
@@ -282,3 +315,10 @@ A schema write from an old generation cannot invalidate a newer generation's cac
 - `server-planning` — the handlers this addresses, the executor, the commit hub
 - `client-job` — the same seed-then-fold shape for safe application-job views
 - `state` — `syncHelper.syncCards` is built on its criteria engine and `purge`
+
+## External docs
+
+- https://ajv.js.org/security.html#content-security-policy — runtime AJV requires unsafe-eval; standalone build compilation preserves strict CSP for static schemas.
+- https://www.npmjs.com/package/@cfworker/json-schema/v/4.1.1 — the interpreter supports dynamic schemas without code generation; select an explicit vocabulary and check its known limitations (4.1.1).
+- https://github.com/ajv-validator/ajv-formats#full-and-fast-validation-modes — full-mode predicates validate formats completely and are reusable through the plugin's `get` API (3.0.1).
+- https://ajv.js.org/json-schema.html#nullable-openapi — nullable expands the declared type without adding null to enum or const.

package/build/index.d.ts

@@ -3,6 +3,7 @@ export type * from './events/types.js';
 export type * from './helper/types.js';
 export type * from './sync/types.js';
 export type * from './lifecycle/types.js';
+export type * from './validation/types.js';
 export * from './consts.js';
 export * from './client.js';
 export * from './facade.js';
@@ -16,4 +17,5 @@ export * from './helper.js';
 export * from './resources.js';
 export * from './resource-feed.js';
 export * from './lifecycle.js';
+export * from './validation.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,mBAAmB,mBAAmB,CAAA;AACtC,mBAAmB,mBAAmB,CAAA;AACtC,mBAAmB,iBAAiB,CAAA;AACpC,mBAAmB,sBAAsB,CAAA;AAEzC,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAE3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,mBAAmB,mBAAmB,CAAA;AACtC,mBAAmB,mBAAmB,CAAA;AACtC,mBAAmB,iBAAiB,CAAA;AACpC,mBAAmB,sBAAsB,CAAA;AACzC,mBAAmB,uBAAuB,CAAA;AAE1C,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAE3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA"}

package/build/index.js

@@ -11,4 +11,5 @@ export * from './helper.js';
 export * from './resources.js';
 export * from './resource-feed.js';
 export * from './lifecycle.js';
+export * from './validation.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAE3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,kBAAkB,CAAA;AAChC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAE3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA"}

package/build/validation/consts.d.ts

@@ -0,0 +1,16 @@
+/** Draft 7 vocabulary, plus AJV's $defs spelling. Other vocabularies fail closed. */
+export declare const FIELD_SCHEMA_KEYWORDS: Set<string>;
+export declare const FIELD_SCHEMA_MAPS: Set<string>;
+export declare const FIELD_SCHEMA_ARRAYS: Set<string>;
+export declare const FIELD_SCHEMA_CHILDREN: Set<string>;
+export declare const FIELD_SCHEMA_ANNOTATIONS: Set<string>;
+export declare const FIELD_SCHEMA_DRAFTS: Set<string>;
+/** Reserved predicates never replace cfworker's own global format definitions. */
+export declare const FIELD_FORMAT_PREFIX = "owlmeans-planning:";
+export declare const MAX_FIELD_ERRORS = 64;
+export declare const MAX_FIELD_ERROR_PATH = 512;
+export declare const REQUIRED_ERROR_PREFIX = "Instance does not have required property \"";
+export declare const REQUIRED_ERROR_SUFFIX = "\".";
+export declare const FIELD_ERROR_WRAPPERS: Set<string>;
+export declare const FIELD_ERROR_MESSAGES: Readonly<Record<string, string>>;
+//# sourceMappingURL=consts.d.ts.map

package/build/validation/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../../src/validation/consts.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,aAQhC,CAAA;AACF,eAAO,MAAM,iBAAiB,aAAuE,CAAA;AACrG,eAAO,MAAM,mBAAmB,aAAuC,CAAA;AACvE,eAAO,MAAM,qBAAqB,aAEhC,CAAA;AACF,eAAO,MAAM,wBAAwB,aAGnC,CAAA;AACF,eAAO,MAAM,mBAAmB,aAG9B,CAAA;AACF,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,uBAAuB,CAAA;AACvD,eAAO,MAAM,gBAAgB,KAAK,CAAA;AAClC,eAAO,MAAM,oBAAoB,MAAM,CAAA;AACvC,eAAO,MAAM,qBAAqB,gDAA+C,CAAA;AACjF,eAAO,MAAM,qBAAqB,QAAO,CAAA;AACzC,eAAO,MAAM,oBAAoB,aAA+E,CAAA;AAChH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUjE,CAAA"}

package/build/validation/consts.js

@@ -0,0 +1,42 @@
+/** Draft 7 vocabulary, plus AJV's $defs spelling. Other vocabularies fail closed. */
+export const FIELD_SCHEMA_KEYWORDS = new Set([
+    '$id', '$schema', '$ref', '$comment', '$defs', 'definitions', 'type', 'nullable', 'const', 'enum',
+    'required', 'properties', 'patternProperties', 'additionalProperties', 'propertyNames',
+    'minProperties', 'maxProperties', 'dependencies', 'items', 'additionalItems', 'contains',
+    'minItems', 'maxItems', 'uniqueItems', 'minimum', 'maximum', 'exclusiveMinimum',
+    'exclusiveMaximum', 'multipleOf', 'minLength', 'maxLength', 'pattern', 'format',
+    'allOf', 'anyOf', 'oneOf', 'not', 'if', 'then', 'else', 'title', 'description', 'default',
+    'examples', 'readOnly', 'writeOnly', 'contentMediaType', 'contentEncoding',
+]);
+export const FIELD_SCHEMA_MAPS = new Set(['properties', 'patternProperties', 'definitions', '$defs']);
+export const FIELD_SCHEMA_ARRAYS = new Set(['allOf', 'anyOf', 'oneOf']);
+export const FIELD_SCHEMA_CHILDREN = new Set([
+    'additionalProperties', 'propertyNames', 'additionalItems', 'contains', 'not', 'if', 'then', 'else',
+]);
+export const FIELD_SCHEMA_ANNOTATIONS = new Set([
+    '$comment', 'title', 'description', 'default', 'examples', 'readOnly', 'writeOnly',
+    'contentMediaType', 'contentEncoding',
+]);
+export const FIELD_SCHEMA_DRAFTS = new Set([
+    'http://json-schema.org/draft-07/schema', 'http://json-schema.org/draft-07/schema#',
+    'https://json-schema.org/draft-07/schema', 'https://json-schema.org/draft-07/schema#',
+]);
+/** Reserved predicates never replace cfworker's own global format definitions. */
+export const FIELD_FORMAT_PREFIX = 'owlmeans-planning:';
+export const MAX_FIELD_ERRORS = 64;
+export const MAX_FIELD_ERROR_PATH = 512;
+export const REQUIRED_ERROR_PREFIX = 'Instance does not have required property "';
+export const REQUIRED_ERROR_SUFFIX = '".';
+export const FIELD_ERROR_WRAPPERS = new Set(['properties', 'patternProperties', 'items', '$ref', 'allOf', 'if']);
+export const FIELD_ERROR_MESSAGES = {
+    required: 'A required field is missing', type: 'The field has an invalid type',
+    enum: 'Choose one of the allowed values', const: 'The field must match its fixed value',
+    format: 'The field has an invalid format', pattern: 'The field does not match its required pattern',
+    additionalProperties: 'This field is not allowed', additionalItems: 'This item is not allowed',
+    minimum: 'The value is below its minimum', maximum: 'The value exceeds its maximum',
+    exclusiveMinimum: 'The value must exceed its minimum', exclusiveMaximum: 'The value must be below its maximum',
+    multipleOf: 'The value is not an allowed multiple', minLength: 'The value is too short',
+    maxLength: 'The value is too long', minItems: 'There are too few items', maxItems: 'There are too many items',
+    uniqueItems: 'Items must be distinct', minProperties: 'There are too few fields', maxProperties: 'There are too many fields',
+};
+//# sourceMappingURL=consts.js.map

package/build/validation/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../src/validation/consts.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAC3C,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM;IACjG,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,eAAe;IACtF,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU;IACxF,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB;IAC/E,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ;IAC/E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS;IACzF,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,iBAAiB;CAC3E,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAA;AACrG,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAC3C,sBAAsB,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;CACpG,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IAC9C,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW;IAClF,kBAAkB,EAAE,iBAAiB;CACtC,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACzC,wCAAwC,EAAE,yCAAyC;IACnF,yCAAyC,EAAE,0CAA0C;CACtF,CAAC,CAAA;AACF,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AACvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAA;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,4CAA4C,CAAA;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAA;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;AAChH,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE,QAAQ,EAAE,6BAA6B,EAAE,IAAI,EAAE,+BAA+B;IAC9E,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,sCAAsC;IACvF,MAAM,EAAE,iCAAiC,EAAE,OAAO,EAAE,+CAA+C;IACnG,oBAAoB,EAAE,2BAA2B,EAAE,eAAe,EAAE,0BAA0B;IAC9F,OAAO,EAAE,gCAAgC,EAAE,OAAO,EAAE,+BAA+B;IACnF,gBAAgB,EAAE,mCAAmC,EAAE,gBAAgB,EAAE,qCAAqC;IAC9G,UAAU,EAAE,sCAAsC,EAAE,SAAS,EAAE,wBAAwB;IACvF,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,yBAAyB,EAAE,QAAQ,EAAE,0BAA0B;IAC7G,WAAW,EAAE,wBAAwB,EAAE,aAAa,EAAE,0BAA0B,EAAE,aAAa,EAAE,2BAA2B;CAC7H,CAAA"}

package/build/validation/types.d.ts

@@ -0,0 +1,17 @@
+export interface PlanningFieldError {
+    /** Decoded field path; a required-property error includes the missing property's name. */
+    path: string;
+    keyword: string;
+    schemaPath: string;
+    /** A bounded explanation which does not include the submitted value. */
+    message: string;
+}
+export interface PlanningFieldValidation {
+    valid: boolean;
+    errors: PlanningFieldError[];
+}
+export interface PlanningFieldValidator {
+    /** Validate without coercion, defaults, removal, code generation or network reference loading. */
+    validateFields: (fields: Record<string, unknown>) => PlanningFieldValidation;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/validation/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/validation/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,kGAAkG;IAClG,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,uBAAuB,CAAA;CAC7E"}

package/build/validation/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/validation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/validation/types.ts"],"names":[],"mappings":""}

package/build/validation.d.ts

@@ -0,0 +1,10 @@
+import type { AnySchema } from 'ajv';
+import type { PlanningFieldValidator } from './validation/types.js';
+/**
+ * Interpret the exact served field schema under a strict script-src policy. The vocabulary is
+ * Draft 7/$defs/nullable with AJV reference-sibling semantics and its full string-format predicates.
+ * Unsupported dialects/extensions, numeric formats and multipleOf schemas refuse
+ * during preparation; the server's AJV remains the authoritative validator.
+ */
+export declare const makePlanningFieldValidator: (fieldsSchema: AnySchema) => PlanningFieldValidator;
+//# sourceMappingURL=validation.d.ts.map

package/build/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAU,MAAM,KAAK,CAAA;AAK5C,OAAO,KAAK,EAA+C,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAOhH;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,iBAAkB,SAAS,KAAG,sBAwHpE,CAAA"}

package/build/validation.js

@@ -0,0 +1,172 @@
+import { dereference, format, validate as interpret, Validator } from '@cfworker/json-schema';
+import formatsPlugin from 'ajv-formats';
+import draft7 from 'ajv/dist/refs/json-schema-draft-07.json';
+import { SchemaInvalid } from '@owlmeans/planning';
+import { FIELD_ERROR_MESSAGES, FIELD_ERROR_WRAPPERS, FIELD_FORMAT_PREFIX, FIELD_SCHEMA_ANNOTATIONS, FIELD_SCHEMA_ARRAYS, FIELD_SCHEMA_CHILDREN, FIELD_SCHEMA_DRAFTS, FIELD_SCHEMA_KEYWORDS, FIELD_SCHEMA_MAPS, MAX_FIELD_ERRORS, MAX_FIELD_ERROR_PATH, REQUIRED_ERROR_PREFIX, REQUIRED_ERROR_SUFFIX, } from './validation/consts.js';
+/**
+ * Interpret the exact served field schema under a strict script-src policy. The vocabulary is
+ * Draft 7/$defs/nullable with AJV reference-sibling semantics and its full string-format predicates.
+ * Unsupported dialects/extensions, numeric formats and multipleOf schemas refuse
+ * during preparation; the server's AJV remains the authoritative validator.
+ */
+export const makePlanningFieldValidator = (fieldsSchema) => {
+    const invalid = (path, keyword) => {
+        throw new SchemaInvalid(`client:fields:${keyword}:${path.slice(0, MAX_FIELD_ERROR_PATH)}`);
+    };
+    const pointer = (part) => part.replaceAll('~', '~0').replaceAll('/', '~1');
+    const nodes = new Map();
+    const meta = new Validator(structuredClone(draft7), '7', false);
+    const prepare = (source, path) => {
+        if (typeof source === 'boolean')
+            return source;
+        if (source == null || typeof source !== 'object' || Array.isArray(source))
+            return invalid(path, 'schema');
+        const checked = meta.validate(source);
+        if (!checked.valid)
+            return invalid(`${path}${checked.errors[0]?.instanceLocation.slice(1) ?? ''}`, 'malformed');
+        const node = {};
+        nodes.set(node, path);
+        for (const [key, value] of Object.entries(source)) {
+            const next = `${path}/${pointer(key)}`;
+            if (!FIELD_SCHEMA_KEYWORDS.has(key) && !key.startsWith('x-'))
+                invalid(next, 'unsupported-keyword');
+            if (FIELD_SCHEMA_ANNOTATIONS.has(key) || key.startsWith('x-'))
+                continue;
+            if (key === 'nullable')
+                continue;
+            if (key === '$schema' && !FIELD_SCHEMA_DRAFTS.has(String(value)))
+                invalid(next, 'unsupported-draft');
+            // The interpreters disagree on floating tolerance and large/scientific-notation quotients.
+            if (key === 'multipleOf')
+                invalid(next, 'unsupported-multipleOf');
+            if (key === 'format') {
+                let definition;
+                try {
+                    definition = formatsPlugin.get(value, 'full');
+                }
+                catch {
+                    return invalid(next, 'unsupported-format');
+                }
+                if (typeof definition === 'object' && !(definition instanceof RegExp) && definition.type === 'number') {
+                    invalid(next, 'unsupported-numeric-format');
+                }
+                if (typeof definition === 'object' && !(definition instanceof RegExp) && 'async' in definition && definition.async === true) {
+                    invalid(next, 'unsupported-async-format');
+                }
+                const guard = typeof definition === 'object' && !(definition instanceof RegExp) ? definition.validate : definition;
+                const predicate = typeof guard === 'string' ? new RegExp(guard, 'u') : guard;
+                const name = `${FIELD_FORMAT_PREFIX}${String(value)}`;
+                format[name] ??= input => predicate === true || (predicate instanceof RegExp ? predicate.test(input)
+                    : predicate(input)) === true;
+                node.format = name;
+            }
+            else if (FIELD_SCHEMA_MAPS.has(key)) {
+                if (value == null || typeof value !== 'object' || Array.isArray(value))
+                    invalid(next, 'malformed');
+                node[key] = Object.fromEntries(Object.entries(value)
+                    .map(([name, child]) => [name, prepare(child, `${next}/${pointer(name)}`)]));
+            }
+            else if (FIELD_SCHEMA_ARRAYS.has(key) || (key === 'items' && Array.isArray(value))) {
+                node[key] = value.map((child, index) => prepare(child, `${next}/${index}`));
+            }
+            else if (FIELD_SCHEMA_CHILDREN.has(key) || key === 'items') {
+                node[key] = prepare(value, next);
+            }
+            else if (key === 'dependencies') {
+                ;
+                node[key] = Object.fromEntries(Object.entries(value)
+                    .map(([name, child]) => [name, Array.isArray(child) ? child : prepare(child, `${next}/${pointer(name)}`)]));
+            }
+            else {
+                node[key] = structuredClone(value);
+            }
+        }
+        if ('nullable' in source) {
+            const nullable = source.nullable;
+            if (typeof nullable !== 'boolean' || node.type == null)
+                invalid(`${path}/nullable`, 'malformed');
+            const kinds = Array.isArray(node.type) ? node.type : [node.type];
+            if (nullable)
+                node.type = [...new Set([...kinds, 'null'])];
+            else if (kinds.includes('null'))
+                invalid(`${path}/nullable`, 'malformed');
+        }
+        return node;
+    };
+    const schema = prepare(fieldsSchema, '#');
+    let lookup;
+    try {
+        lookup = dereference(schema);
+    }
+    catch {
+        return invalid('#', 'invalid-reference');
+    }
+    for (const [node, path] of nodes) {
+        if (node.$ref != null && lookup[node.__absolute_ref__] === undefined)
+            invalid(`${path}/$ref`, 'missing-reference');
+    }
+    const complete = new Set();
+    const visiting = new Set();
+    const checkReferences = (node) => {
+        if (typeof node === 'boolean' || complete.has(node))
+            return;
+        if (visiting.has(node))
+            invalid(nodes.get(node) ?? '#', 'cyclic-reference');
+        visiting.add(node);
+        if (node.$ref != null)
+            checkReferences(lookup[node.__absolute_ref__]);
+        // These evaluate the same instance; properties/items make productive recursive schemas.
+        for (const key of ['allOf', 'anyOf', 'oneOf'])
+            node[key]?.forEach(checkReferences);
+        for (const key of ['not', 'if', 'then', 'else'])
+            if (node[key] != null)
+                checkReferences(node[key]);
+        for (const child of Object.values(node.dependencies ?? {}))
+            if (!Array.isArray(child))
+                checkReferences(child);
+        visiting.delete(node);
+        complete.add(node);
+    };
+    nodes.forEach((_path, node) => checkReferences(node));
+    const fieldError = (error) => {
+        const parts = error.instanceLocation.slice(1).replace(/^\//, '').split('/').filter(Boolean)
+            .map(part => part.replaceAll('~1', '/').replaceAll('~0', '~'));
+        if (error.keyword === 'required' && error.error.startsWith(REQUIRED_ERROR_PREFIX) && error.error.endsWith(REQUIRED_ERROR_SUFFIX)) {
+            parts.push(error.error.slice(REQUIRED_ERROR_PREFIX.length, -REQUIRED_ERROR_SUFFIX.length));
+        }
+        return { path: parts.join('.').slice(0, MAX_FIELD_ERROR_PATH), keyword: error.keyword,
+            schemaPath: error.keywordLocation.slice(0, MAX_FIELD_ERROR_PATH),
+            message: FIELD_ERROR_MESSAGES[error.keyword] ?? 'The field does not match its definition' };
+    };
+    const jsonErrors = (value, path, active) => {
+        if (value === null || typeof value === 'string' || typeof value === 'boolean'
+            || (typeof value === 'number' && Number.isFinite(value)))
+            return [];
+        if (typeof value !== 'object' || active.has(value))
+            return [{ path, keyword: 'json', schemaPath: '#', message: 'Use a JSON value' }];
+        const plain = Array.isArray(value) || Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null;
+        if (!plain)
+            return [{ path, keyword: 'json', schemaPath: '#', message: 'Use a JSON value' }];
+        active.add(value);
+        const errors = Object.entries(value).flatMap(([key, child]) => [
+            ...(!Array.isArray(value) && (key.includes('.') || key.includes('$'))
+                ? [{ path: [path, key].filter(Boolean).join('.'), keyword: 'field-key', schemaPath: '#', message: 'This field name is not allowed' }] : []),
+            ...jsonErrors(child, [path, key].filter(Boolean).join('.'), active),
+        ]);
+        active.delete(value);
+        return errors;
+    };
+    const validateFields = (fields) => {
+        const unsafe = jsonErrors(fields, '', new Set());
+        if (unsafe.length > 0)
+            return { valid: false, errors: unsafe.slice(0, MAX_FIELD_ERRORS)
+                    .map(error => ({ ...error, path: error.path.slice(0, MAX_FIELD_ERROR_PATH) })) };
+        // Only the guarded Draft 7 vocabulary reaches this engine. This mode, unlike its '7' mode,
+        // also enforces sibling keywords beside $ref, as the native planning AJV does.
+        const result = interpret(fields, schema, '2019-09', lookup, false);
+        const errors = result.errors.filter(error => !FIELD_ERROR_WRAPPERS.has(error.keyword));
+        return { valid: result.valid, errors: (errors.length > 0 ? errors : result.errors).slice(0, MAX_FIELD_ERRORS).map(fieldError) };
+    };
+    return { validateFields };
+};
+//# sourceMappingURL=validation.js.map

package/build/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,IAAI,SAAS,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAG7F,OAAO,aAAa,MAAM,aAAa,CAAA;AAEvC,OAAO,MAAM,MAAM,yCAAyC,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EACL,oBAAoB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,mBAAmB,EAC9G,qBAAqB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,iBAAiB,EACpF,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,GACrF,MAAM,wBAAwB,CAAA;AAE/B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,YAAuB,EAA0B,EAAE;IAC5F,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,OAAe,EAAS,EAAE;QACvD,MAAM,IAAI,aAAa,CAAC,iBAAiB,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,CAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAEzE,MAAM,OAAO,GAAG,CAAC,MAAe,EAAE,IAAY,EAAoB,EAAE;QAClE,IAAI,OAAO,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QAC9C,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACzG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;QAC/G,MAAM,IAAI,GAAW,EAAE,CAAA;QACvB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;YACtC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;YAClG,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACvE,IAAI,GAAG,KAAK,UAAU;gBAAE,SAAQ;YAChC,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;YACpG,2FAA2F;YAC3F,IAAI,GAAG,KAAK,YAAY;gBAAE,OAAO,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAA;YACjE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,IAAI,UAAkB,CAAA;gBACtB,IAAI,CAAC;oBAAC,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,KAAmB,EAAE,MAAM,CAAC,CAAA;gBAAC,CAAC;gBACnE,MAAM,CAAC;oBAAC,OAAO,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAA;gBAAC,CAAC;gBACpD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,YAAY,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtG,OAAO,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA;gBAC7C,CAAC;gBACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,YAAY,MAAM,CAAC,IAAI,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC5H,OAAO,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;gBAC3C,CAAC;gBACD,MAAM,KAAK,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,YAAY,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAA;gBAClH,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC5E,MAAM,IAAI,GAAG,GAAG,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;gBACrD,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,YAAY,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;oBAClG,CAAC,CAAE,SAAwC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAA;gBAC9D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;YACpB,CAAC;iBAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;gBAClG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;qBAC5E,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YAChF,CAAC;iBAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrF,IAAI,CAAC,GAAG,CAAC,GAAI,KAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAA;YAC5F,CAAC;iBAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBAC7D,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YAClC,CAAC;iBAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;gBAClC,CAAC;gBAAC,IAAgC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;qBAC1G,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/G,CAAC;iBAAM,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YAAC,CAAC;QAC/C,CAAC;QACD,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAI,MAAiB,CAAC,QAAQ,CAAA;YAC5C,IAAI,OAAO,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI;gBAAE,OAAO,CAAC,GAAG,IAAI,WAAW,EAAE,WAAW,CAAC,CAAA;YAChG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAK,CAAC,CAAA;YACjE,IAAI,QAAQ;gBAAE,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,MAAe,CAAC,CAAC,CAAC,CAAA;iBAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,GAAG,IAAI,WAAW,EAAE,WAAW,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IACzC,IAAI,MAAwC,CAAA;IAC5C,IAAI,CAAC;QAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IACpC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAiB,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,IAAI,OAAO,EAAE,mBAAmB,CAAC,CAAA;IACrH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,MAAM,eAAe,GAAG,CAAC,IAAsB,EAAQ,EAAE;QACvD,IAAI,OAAO,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAM;QAC3D,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC3E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI;YAAE,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAiB,CAAE,CAAC,CAAA;QACvE,wFAAwF;QACxF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;YAAG,IAAI,CAAC,GAAG,CAAyC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QAC3H,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;YAAE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI;gBAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAClG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,eAAe,CAAC,KAAK,CAAC,CAAA;QAC7G,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACrB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC,CAAA;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;IAErD,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAsB,EAAE;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aACxF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QAChE,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACjI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5F,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YACnF,UAAU,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC;YAChE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,yCAAyC,EAAE,CAAA;IAC/F,CAAC,CAAA;IACD,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,IAAY,EAAE,MAAmB,EAAwB,EAAE;QAC7F,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;eACxE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAA;QACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAA;QACpI,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;QAChI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC7D,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACnE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7I,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;SACpE,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,MAAM,cAAc,GAAG,CAAC,MAA+B,EAA2B,EAAE;QAClF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QAChD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;qBACpF,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;QAClF,2FAA2F;QAC3F,+EAA+E;QAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACtF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAA;IACjI,CAAC,CAAA;IACD,OAAO,EAAE,cAAc,EAAE,CAAA;AAC3B,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/client-planning",
-  "version": "0.1.18-rc.29",
+  "version": "0.1.18-rc.30",
   "license": "MIT",
   "description": "The client half of OwlMeans planning — the remote planning facade, the state mirror and its commit fold, and the subscribe-then-poll commit wait. React-free: it runs in a browser and in a Node client alike.",
   "type": "module",
@@ -23,6 +23,7 @@
     }
   },
   "dependencies": {
+    "@cfworker/json-schema": "^4.1.1",
     "@owlmeans/auth": "^0.1.18-rc.41",
     "@owlmeans/client-context": "^0.1.18-rc.50",
     "@owlmeans/client-entrypoint": "^0.1.18-rc.49",

package/src/index.ts

@@ -3,6 +3,7 @@ export type * from './events/types.js'
 export type * from './helper/types.js'
 export type * from './sync/types.js'
 export type * from './lifecycle/types.js'
+export type * from './validation/types.js'
 
 export * from './consts.js'
 export * from './client.js'
@@ -18,3 +19,4 @@ export * from './helper.js'
 export * from './resources.js'
 export * from './resource-feed.js'
 export * from './lifecycle.js'
+export * from './validation.js'

package/src/validation/consts.ts

@@ -0,0 +1,41 @@
+/** Draft 7 vocabulary, plus AJV's $defs spelling. Other vocabularies fail closed. */
+export const FIELD_SCHEMA_KEYWORDS = new Set([
+  '$id', '$schema', '$ref', '$comment', '$defs', 'definitions', 'type', 'nullable', 'const', 'enum',
+  'required', 'properties', 'patternProperties', 'additionalProperties', 'propertyNames',
+  'minProperties', 'maxProperties', 'dependencies', 'items', 'additionalItems', 'contains',
+  'minItems', 'maxItems', 'uniqueItems', 'minimum', 'maximum', 'exclusiveMinimum',
+  'exclusiveMaximum', 'multipleOf', 'minLength', 'maxLength', 'pattern', 'format',
+  'allOf', 'anyOf', 'oneOf', 'not', 'if', 'then', 'else', 'title', 'description', 'default',
+  'examples', 'readOnly', 'writeOnly', 'contentMediaType', 'contentEncoding',
+])
+export const FIELD_SCHEMA_MAPS = new Set(['properties', 'patternProperties', 'definitions', '$defs'])
+export const FIELD_SCHEMA_ARRAYS = new Set(['allOf', 'anyOf', 'oneOf'])
+export const FIELD_SCHEMA_CHILDREN = new Set([
+  'additionalProperties', 'propertyNames', 'additionalItems', 'contains', 'not', 'if', 'then', 'else',
+])
+export const FIELD_SCHEMA_ANNOTATIONS = new Set([
+  '$comment', 'title', 'description', 'default', 'examples', 'readOnly', 'writeOnly',
+  'contentMediaType', 'contentEncoding',
+])
+export const FIELD_SCHEMA_DRAFTS = new Set([
+  'http://json-schema.org/draft-07/schema', 'http://json-schema.org/draft-07/schema#',
+  'https://json-schema.org/draft-07/schema', 'https://json-schema.org/draft-07/schema#',
+])
+/** Reserved predicates never replace cfworker's own global format definitions. */
+export const FIELD_FORMAT_PREFIX = 'owlmeans-planning:'
+export const MAX_FIELD_ERRORS = 64
+export const MAX_FIELD_ERROR_PATH = 512
+export const REQUIRED_ERROR_PREFIX = 'Instance does not have required property "'
+export const REQUIRED_ERROR_SUFFIX = '".'
+export const FIELD_ERROR_WRAPPERS = new Set(['properties', 'patternProperties', 'items', '$ref', 'allOf', 'if'])
+export const FIELD_ERROR_MESSAGES: Readonly<Record<string, string>> = {
+  required: 'A required field is missing', type: 'The field has an invalid type',
+  enum: 'Choose one of the allowed values', const: 'The field must match its fixed value',
+  format: 'The field has an invalid format', pattern: 'The field does not match its required pattern',
+  additionalProperties: 'This field is not allowed', additionalItems: 'This item is not allowed',
+  minimum: 'The value is below its minimum', maximum: 'The value exceeds its maximum',
+  exclusiveMinimum: 'The value must exceed its minimum', exclusiveMaximum: 'The value must be below its maximum',
+  multipleOf: 'The value is not an allowed multiple', minLength: 'The value is too short',
+  maxLength: 'The value is too long', minItems: 'There are too few items', maxItems: 'There are too many items',
+  uniqueItems: 'Items must be distinct', minProperties: 'There are too few fields', maxProperties: 'There are too many fields',
+}

package/src/validation/types.ts

@@ -0,0 +1,19 @@
+export interface PlanningFieldError {
+  /** Decoded field path; a required-property error includes the missing property's name. */
+  path: string
+  keyword: string
+  schemaPath: string
+  /** A bounded explanation which does not include the submitted value. */
+  message: string
+}
+
+export interface PlanningFieldValidation {
+  valid: boolean
+  errors: PlanningFieldError[]
+}
+
+export interface PlanningFieldValidator {
+  /** Validate without coercion, defaults, removal, code generation or network reference loading. */
+  validateFields: (fields: Record<string, unknown>) => PlanningFieldValidation
+}
+

package/src/validation.ts

@@ -0,0 +1,141 @@
+import { dereference, format, validate as interpret, Validator } from '@cfworker/json-schema'
+import type { OutputUnit, Schema } from '@cfworker/json-schema'
+import type { AnySchema, Format } from 'ajv'
+import formatsPlugin from 'ajv-formats'
+import type { FormatName } from 'ajv-formats'
+import draft7 from 'ajv/dist/refs/json-schema-draft-07.json'
+import { SchemaInvalid } from '@owlmeans/planning'
+import type { PlanningFieldError, PlanningFieldValidation, PlanningFieldValidator } from './validation/types.js'
+import {
+  FIELD_ERROR_MESSAGES, FIELD_ERROR_WRAPPERS, FIELD_FORMAT_PREFIX, FIELD_SCHEMA_ANNOTATIONS, FIELD_SCHEMA_ARRAYS,
+  FIELD_SCHEMA_CHILDREN, FIELD_SCHEMA_DRAFTS, FIELD_SCHEMA_KEYWORDS, FIELD_SCHEMA_MAPS,
+  MAX_FIELD_ERRORS, MAX_FIELD_ERROR_PATH, REQUIRED_ERROR_PREFIX, REQUIRED_ERROR_SUFFIX,
+} from './validation/consts.js'
+
+/**
+ * Interpret the exact served field schema under a strict script-src policy. The vocabulary is
+ * Draft 7/$defs/nullable with AJV reference-sibling semantics and its full string-format predicates.
+ * Unsupported dialects/extensions, numeric formats and multipleOf schemas refuse
+ * during preparation; the server's AJV remains the authoritative validator.
+ */
+export const makePlanningFieldValidator = (fieldsSchema: AnySchema): PlanningFieldValidator => {
+  const invalid = (path: string, keyword: string): never => {
+    throw new SchemaInvalid(`client:fields:${keyword}:${path.slice(0, MAX_FIELD_ERROR_PATH)}`)
+  }
+  const pointer = (part: string): string => part.replaceAll('~', '~0').replaceAll('/', '~1')
+  const nodes = new Map<Schema, string>()
+  const meta = new Validator(structuredClone(draft7) as Schema, '7', false)
+
+  const prepare = (source: unknown, path: string): Schema | boolean => {
+    if (typeof source === 'boolean') return source
+    if (source == null || typeof source !== 'object' || Array.isArray(source)) return invalid(path, 'schema')
+    const checked = meta.validate(source)
+    if (!checked.valid) return invalid(`${path}${checked.errors[0]?.instanceLocation.slice(1) ?? ''}`, 'malformed')
+    const node: Schema = {}
+    nodes.set(node, path)
+    for (const [key, value] of Object.entries(source)) {
+      const next = `${path}/${pointer(key)}`
+      if (!FIELD_SCHEMA_KEYWORDS.has(key) && !key.startsWith('x-')) invalid(next, 'unsupported-keyword')
+      if (FIELD_SCHEMA_ANNOTATIONS.has(key) || key.startsWith('x-')) continue
+      if (key === 'nullable') continue
+      if (key === '$schema' && !FIELD_SCHEMA_DRAFTS.has(String(value))) invalid(next, 'unsupported-draft')
+      // The interpreters disagree on floating tolerance and large/scientific-notation quotients.
+      if (key === 'multipleOf') invalid(next, 'unsupported-multipleOf')
+      if (key === 'format') {
+        let definition: Format
+        try { definition = formatsPlugin.get(value as FormatName, 'full') }
+        catch { return invalid(next, 'unsupported-format') }
+        if (typeof definition === 'object' && !(definition instanceof RegExp) && definition.type === 'number') {
+          invalid(next, 'unsupported-numeric-format')
+        }
+        if (typeof definition === 'object' && !(definition instanceof RegExp) && 'async' in definition && definition.async === true) {
+          invalid(next, 'unsupported-async-format')
+        }
+        const guard = typeof definition === 'object' && !(definition instanceof RegExp) ? definition.validate : definition
+        const predicate = typeof guard === 'string' ? new RegExp(guard, 'u') : guard
+        const name = `${FIELD_FORMAT_PREFIX}${String(value)}`
+        format[name] ??= input => predicate === true || (predicate instanceof RegExp ? predicate.test(input)
+          : (predicate as (value: string) => boolean)(input)) === true
+        node.format = name
+      } else if (FIELD_SCHEMA_MAPS.has(key)) {
+        if (value == null || typeof value !== 'object' || Array.isArray(value)) invalid(next, 'malformed')
+        node[key] = Object.fromEntries(Object.entries(value as Record<string, unknown>)
+          .map(([name, child]) => [name, prepare(child, `${next}/${pointer(name)}`)]))
+      } else if (FIELD_SCHEMA_ARRAYS.has(key) || (key === 'items' && Array.isArray(value))) {
+        node[key] = (value as unknown[]).map((child, index) => prepare(child, `${next}/${index}`))
+      } else if (FIELD_SCHEMA_CHILDREN.has(key) || key === 'items') {
+        node[key] = prepare(value, next)
+      } else if (key === 'dependencies') {
+        ;(node as Record<string, unknown>)[key] = Object.fromEntries(Object.entries(value as Record<string, unknown>)
+          .map(([name, child]) => [name, Array.isArray(child) ? child : prepare(child, `${next}/${pointer(name)}`)]))
+      } else { node[key] = structuredClone(value) }
+    }
+    if ('nullable' in source) {
+      const nullable = (source as Schema).nullable
+      if (typeof nullable !== 'boolean' || node.type == null) invalid(`${path}/nullable`, 'malformed')
+      const kinds = Array.isArray(node.type) ? node.type : [node.type!]
+      if (nullable) node.type = [...new Set([...kinds, 'null' as const])]
+      else if (kinds.includes('null')) invalid(`${path}/nullable`, 'malformed')
+    }
+    return node
+  }
+  const schema = prepare(fieldsSchema, '#')
+  let lookup: Record<string, Schema | boolean>
+  try { lookup = dereference(schema) }
+  catch { return invalid('#', 'invalid-reference') }
+  for (const [node, path] of nodes) {
+    if (node.$ref != null && lookup[node.__absolute_ref__!] === undefined) invalid(`${path}/$ref`, 'missing-reference')
+  }
+  const complete = new Set<Schema>()
+  const visiting = new Set<Schema>()
+  const checkReferences = (node: Schema | boolean): void => {
+    if (typeof node === 'boolean' || complete.has(node)) return
+    if (visiting.has(node)) invalid(nodes.get(node) ?? '#', 'cyclic-reference')
+    visiting.add(node)
+    if (node.$ref != null) checkReferences(lookup[node.__absolute_ref__!]!)
+    // These evaluate the same instance; properties/items make productive recursive schemas.
+    for (const key of ['allOf', 'anyOf', 'oneOf']) (node[key] as Array<Schema | boolean> | undefined)?.forEach(checkReferences)
+    for (const key of ['not', 'if', 'then', 'else']) if (node[key] != null) checkReferences(node[key])
+    for (const child of Object.values(node.dependencies ?? {})) if (!Array.isArray(child)) checkReferences(child)
+    visiting.delete(node)
+    complete.add(node)
+  }
+  nodes.forEach((_path, node) => checkReferences(node))
+
+  const fieldError = (error: OutputUnit): PlanningFieldError => {
+    const parts = error.instanceLocation.slice(1).replace(/^\//, '').split('/').filter(Boolean)
+      .map(part => part.replaceAll('~1', '/').replaceAll('~0', '~'))
+    if (error.keyword === 'required' && error.error.startsWith(REQUIRED_ERROR_PREFIX) && error.error.endsWith(REQUIRED_ERROR_SUFFIX)) {
+      parts.push(error.error.slice(REQUIRED_ERROR_PREFIX.length, -REQUIRED_ERROR_SUFFIX.length))
+    }
+    return { path: parts.join('.').slice(0, MAX_FIELD_ERROR_PATH), keyword: error.keyword,
+      schemaPath: error.keywordLocation.slice(0, MAX_FIELD_ERROR_PATH),
+      message: FIELD_ERROR_MESSAGES[error.keyword] ?? 'The field does not match its definition' }
+  }
+  const jsonErrors = (value: unknown, path: string, active: Set<object>): PlanningFieldError[] => {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean'
+      || (typeof value === 'number' && Number.isFinite(value))) return []
+    if (typeof value !== 'object' || active.has(value)) return [{ path, keyword: 'json', schemaPath: '#', message: 'Use a JSON value' }]
+    const plain = Array.isArray(value) || Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null
+    if (!plain) return [{ path, keyword: 'json', schemaPath: '#', message: 'Use a JSON value' }]
+    active.add(value)
+    const errors = Object.entries(value).flatMap(([key, child]) => [
+      ...(!Array.isArray(value) && (key.includes('.') || key.includes('$'))
+        ? [{ path: [path, key].filter(Boolean).join('.'), keyword: 'field-key', schemaPath: '#', message: 'This field name is not allowed' }] : []),
+      ...jsonErrors(child, [path, key].filter(Boolean).join('.'), active),
+    ])
+    active.delete(value)
+    return errors
+  }
+  const validateFields = (fields: Record<string, unknown>): PlanningFieldValidation => {
+    const unsafe = jsonErrors(fields, '', new Set())
+    if (unsafe.length > 0) return { valid: false, errors: unsafe.slice(0, MAX_FIELD_ERRORS)
+      .map(error => ({ ...error, path: error.path.slice(0, MAX_FIELD_ERROR_PATH) })) }
+    // Only the guarded Draft 7 vocabulary reaches this engine. This mode, unlike its '7' mode,
+    // also enforces sibling keywords beside $ref, as the native planning AJV does.
+    const result = interpret(fields, schema, '2019-09', lookup, false)
+    const errors = result.errors.filter(error => !FIELD_ERROR_WRAPPERS.has(error.keyword))
+    return { valid: result.valid, errors: (errors.length > 0 ? errors : result.errors).slice(0, MAX_FIELD_ERRORS).map(fieldError) }
+  }
+  return { validateFields }
+}

package/tests/validation.spec.ts

@@ -0,0 +1,127 @@
+import { describe, expect, test } from 'bun:test'
+import type { AnySchema } from 'ajv'
+import { makeAjv, SchemaInvalid } from '@owlmeans/planning'
+import { makePlanningFieldValidator } from '../src/index.js'
+
+describe('@owlmeans/client-planning — CSP field validation', () => {
+  test('the exact nested fields validate without modifying, coercing, flattening or defaulting them', () => {
+    const schema = { type: 'object', properties: {
+      estimatedValue: { type: 'object', properties: { amount: { type: 'number', minimum: 0 }, currency: { type: 'string', enum: ['USD', 'EUR'] } },
+        required: ['amount', 'currency'], additionalProperties: false },
+      nextContactDate: { type: 'string', format: 'date' }, priority: { type: 'string', enum: ['low', 'normal', 'high'] },
+    }, required: ['estimatedValue', 'nextContactDate'], additionalProperties: false }
+    const copy = structuredClone(schema)
+    const validator = makePlanningFieldValidator(schema)
+    const valid = { estimatedValue: { amount: 12345, currency: 'USD' }, nextContactDate: '2027-03-15', priority: 'normal' }
+    const payload = structuredClone(valid)
+    expect(validator.validateFields(valid)).toEqual({ valid: true, errors: [] })
+    expect(validator.validateFields({ estimatedValue: valid.estimatedValue, nextContactDate: valid.nextContactDate }).valid).toBe(true)
+    const invalid = [ {}, { ...valid, estimatedValue: 12345 }, { ...valid, estimatedValue: { amount: 2 } },
+      { ...valid, estimatedValue: { amount: '12345', currency: 'USD' } }, { ...valid, estimatedValue: { amount: -1, currency: 'USD' } },
+      { ...valid, priority: 'urgent' }, { ...valid, nextContactDate: '2027-02-30' },
+      { ...valid, nextContactDate: '2027-03-15T00:00:00Z' }, { ...valid, extra: true } ]
+    const native = makeAjv().compile(schema)
+    for (const fields of invalid) {
+      const checked = validator.validateFields(fields)
+      expect(checked.valid).toBe(native(fields) === true)
+      expect(checked.valid).toBe(false)
+      expect(checked.errors.length).toBeGreaterThan(0)
+      expect(checked.errors.every(error => error.message.length < 100)).toBe(true)
+    }
+    expect(validator.validateFields({ ...valid, estimatedValue: { amount: 2 } }).errors).toContainEqual({
+      path: 'estimatedValue.currency', keyword: 'required', schemaPath: '#/properties/estimatedValue/required', message: 'A required field is missing',
+    })
+    expect(schema).toEqual(copy)
+    expect(valid).toEqual(payload)
+  })
+
+  test('supported Draft 7 predicates agree with native planning AJV, including references, compositions and full formats', () => {
+    const cases: Array<{ schema: AnySchema, values: unknown[] }> = [
+      { schema: { type: ['number', 'null'], minimum: 0, maximum: 7, exclusiveMinimum: -1, exclusiveMaximum: 8 }, values: [null, 0, 7, -1, 8, '3'] },
+      { schema: { type: 'integer', minimum: -3, maximum: 3 }, values: [-3, 0, 3, 1.99999999, 6.00000001, 4] },
+      { schema: { type: 'string', minLength: 2, maxLength: 3, pattern: '^.+' }, values: ['ab', 'a😀', '😀', 'abcd', '', 2] },
+      { schema: { type: 'array', items: [{ type: 'string' }, { type: 'integer' }], additionalItems: false }, values: [[], ['a'], ['a', 2], ['a', '2'], ['a', 2, 3]] },
+      { schema: { type: 'array', items: { type: 'number' }, minItems: 1, maxItems: 3, uniqueItems: true, contains: { const: 2 } }, values: [[1, 2], [2], [], [1], [2, 2], [1, 2, 3, 4], ['2']] },
+      { schema: { type: 'object', patternProperties: { '^a': { type: 'number' } }, additionalProperties: false, minProperties: 1, maxProperties: 2 },
+        values: [{ abc: 1 }, { abc: '1' }, {}, { abc: 1, other: 2 }, { a: 1, ab: 2, abc: 3 }] },
+      { schema: { type: 'object', propertyNames: { pattern: '^[a-z]+$' }, dependencies: { a: ['b'], c: { required: ['d'] } } },
+        values: [{}, { a: 1, b: 2 }, { a: 1 }, { c: 1 }, { c: 1, d: 2 }, { A: 1 }] },
+      { schema: { allOf: [{ type: 'number' }, { minimum: 2 }], not: { const: 3 } }, values: [2, 4, 1, 3, '2'] },
+      { schema: { anyOf: [{ type: 'string', pattern: '^a' }, { type: 'integer' }] }, values: ['abc', 2, 'xyz', 1.5, null] },
+      { schema: { oneOf: [{ type: 'number', minimum: 1 }, { type: 'number', maximum: 3 }] }, values: [0, 4, 2, '2'] },
+      { schema: { if: { type: 'string' }, then: { minLength: 2 }, else: { type: 'integer' } }, values: ['ab', 2, 'a', 1.5, null] },
+      { schema: { $defs: { n: { type: 'number' } }, $ref: '#/$defs/n', minimum: 5 }, values: [7, 3, '7'] },
+      { schema: { $id: 'https://planning.test/fields', definitions: { n: { $id: 'number', type: 'number' } }, properties: { a: { $ref: 'number' } } },
+        values: [{ a: 2 }, { a: '2' }, {}] },
+      { schema: { definitions: { blocked: false }, properties: { a: { $ref: '#/definitions/blocked' } } }, values: [{}, { a: 1 }] },
+      { schema: { type: 'object', properties: { value: { type: 'number' }, next: { $ref: '#' } }, required: ['value'] },
+        values: [{ value: 1 }, { value: 1, next: { value: 2 } }, { value: 1, next: {} }] },
+      { schema: { type: 'object', properties: { a: { type: 'number', default: 7 } }, required: ['a'] }, values: [{}, { a: 3 }, { a: '3' }] },
+      { schema: { type: 'object', properties: { a: { type: 'string', nullable: true, minLength: 2, format: 'email' } } },
+        values: [{}, { a: null }, { a: 'a@example.test' }, { a: 'a' }, { a: 3 }] },
+      { schema: { type: 'string', nullable: true, enum: ['a'] }, values: ['a', null, 'b'] },
+      { schema: { type: 'string', nullable: true, const: 'a' }, values: ['a', null, 'b'] },
+      { schema: { type: ['string', 'null'], nullable: true }, values: ['a', null, 3] },
+      { schema: { type: 'string', nullable: false }, values: ['a', null, 3] },
+      { schema: true, values: [1, 'a', null] }, { schema: false, values: [1, 'a', null] },
+    ]
+    const formats = [
+      ['date', ['2024-02-29', '2027-03-15', '2027-02-29', '2027-04-31', '2027-03-15T00:00:00Z']],
+      ['time', ['12:00:00Z', '23:59:60Z', '12:00:00', '12:00:00+99:00', '25:00:00Z']],
+      ['date-time', ['2027-03-15T12:00:00Z', '2027-03-15 12:00:00Z', '2027-02-30T12:00:00Z', '2027-03-15T12:00:00+99:00']],
+      ['email', ['a@example.test', 'a@localhost', '.a@example.test', 'a..b@example.test']],
+      ['ipv4', ['127.0.0.1', '01.2.3.4', '256.0.0.1']], ['uuid', ['123e4567-e89b-12d3-a456-426614174000', 'bad']],
+      ['uri', ['https://planning.test/a', 'urn:planning:test', '/relative']],
+      ['iso-time', ['12:00:00', '12:00:00Z', '25:00:00']], ['duration', ['P1D', 'P1W', 'P', 'P1.5D']],
+    ] as const
+    for (const [name, values] of formats) cases.push({ schema: { type: 'string', format: name }, values: [...values] })
+    for (const { schema, values } of cases) {
+      const native = makeAjv().compile(schema)
+      const client = makePlanningFieldValidator(schema)
+      for (const value of values) {
+        // Untyped JSON can reach a validator with the wrong root kind; it must still refuse it.
+        expect(client.validateFields(value as Record<string, unknown>).valid).toBe(native(value) === true)
+      }
+    }
+  })
+
+  test('malformed, unresolved and unsupported schemas fail closed at preparation, including dormant branches', () => {
+    const schemas: AnySchema[] = [
+      { properties: { optional: { $ref: 'https://missing.test/private?credential=never-print' } } },
+      { if: false, then: { $ref: '#/definitions/missing' } }, { $ref: '#' },
+      { $schema: 'https://json-schema.org/draft/2020-12/schema' }, { type: 'number', multipleOf: 0.1 },
+      { type: 'integer', multipleOf: 2 }, { type: 'integer', multipleOf: 1 },
+      { nullable: true }, { type: 'string', nullable: 'true' }, { type: ['string', 'null'], nullable: false },
+      { type: 'string', format: 'made-up' }, { type: 'number', format: 'int32' },
+      { type: 'string', format: 'date', formatMinimum: '2027-01-01' }, { unevaluatedProperties: false },
+      { required: 'field' }, { type: 'object', properties: { a: { minLength: -1 } } },
+      { $defs: { invalid: { type: 'invented' } } }, { $defs: null }, { $defs: [] }, { pattern: '[' }, { enum: [] },
+    ]
+    for (const schema of schemas) expect(() => makePlanningFieldValidator(schema)).toThrow(SchemaInvalid)
+    try { makePlanningFieldValidator(schemas[0]!) } catch (error) {
+      expect(String(error)).toContain('missing-reference:#/properties/optional/$ref')
+      expect(String(error)).not.toContain('credential')
+      expect(String(error)).not.toContain('https://missing')
+    }
+    const schema = { type: 'object', properties: { a: { type: 'number' } }, 'x-nativekit': { source: 'preserved' } }
+    expect(makePlanningFieldValidator(schema).validateFields({ a: 3 }).valid).toBe(true)
+    expect(schema['x-nativekit']).toEqual({ source: 'preserved' })
+  })
+
+  test('unsafe keys and non-JSON values refuse with bounded field errors, while required names decode correctly', () => {
+    const validate = makePlanningFieldValidator({ type: 'object', properties: { nested: { type: 'object', required: ['a/b~c'] } } }).validateFields
+    expect(validate({ nested: {} }).errors[0]?.path).toBe('nested.a/b~c')
+    for (const value of [NaN, Infinity, undefined, 2n, new Date(), () => 3]) expect(validate({ nested: { value } }).valid).toBe(false)
+    expect(validate({ nested: { 'unsafe.key': 3 } }).errors.some(error => error.keyword === 'field-key')).toBe(true)
+    const cycle: Record<string, unknown> = {}; cycle.self = cycle
+    expect(validate(cycle).valid).toBe(false)
+    const longKey = 'field'.repeat(200)
+    const unsafe = validate({ [longKey]: undefined, [`${longKey}.nested`]: 3 })
+    expect(unsafe.valid).toBe(false)
+    expect(unsafe.errors).toHaveLength(2)
+    expect(unsafe.errors.every(error => error.path.length <= 512)).toBe(true)
+    const errors = makePlanningFieldValidator({ type: 'object', required: Array.from({ length: 100 }, (_, index) => `field${index}`) }).validateFields({})
+    expect(errors.valid).toBe(false)
+    expect(errors.errors).toHaveLength(64)
+  })
+})