@oxog/vld 1.2.0 → 1.4.0

package/CHANGELOG.md

@@ -5,6 +5,128 @@ All notable changes to VLD will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.4.0] - 2026-01-02
+
+### 🚀 **Zod 4 Full API Parity Achieved**
+- **Complete Feature Set**: 100% Zod 4 API compatibility
+- **1142 Tests Passing**: Comprehensive test coverage across all features
+- **Production Ready**: All validators, codecs, and utilities fully tested
+
+### ✨ New Features
+
+#### **v.cidrv6() - IPv6 CIDR Block Validator**
+New validator for IPv6 CIDR notation validation:
+- Supports full IPv6 addresses with prefix lengths (0-128)
+- Validates compressed IPv6 notation (`::`, `::1`, etc.)
+- Rejects IPv4 CIDR blocks
+
+#### **.apply() - External Function Chaining**
+Apply external functions to validators for advanced composition:
+- Enables functional composition patterns
+- Supports custom validation pipelines
+- Full TypeScript type inference
+
+#### **.safeExtend() - Type-Safe Object Extension**
+Safely extend object schemas without accidentally overriding existing fields:
+- Prevents accidental field overrides in object schemas
+- Clear error messages listing all conflicting keys
+- Supports chaining multiple safeExtend calls
+
+### 🌍 Internationalization Updates
+- Added i18n messages for all new features in **27+ languages**
+- New messages: `stringCidrv6`, `safeExtendOverlap`
+- Updated all locale files with translations
+
+### 🔧 Build System Improvements
+- **Fixed ESM module resolution**: Directory imports now correctly resolve to `/index.js`
+- **Updated fix-imports script**: Now handles directory-based imports properly
+- **Renamed to CommonJS**: `scripts/fix-imports.cjs` for ESM package compatibility
+
+### 📊 Performance
+VLD continues to outperform Zod across all benchmarks:
+- **2.52x faster** average performance
+- **9/10 benchmark wins** vs Zod
+- **2.41x less memory** usage overall
+- **83x faster** schema creation
+
+### 🧪 Testing
+- **49 test suites** - All passing
+- **1142 tests** - Comprehensive coverage
+- **TypeScript strict mode** - Full type safety verified
+
+## [1.3.1] - 2025-11-12
+
+### 🎯 **100% Test Success Rate Achieved**
+- **Perfect Test Coverage**: All 695 tests now passing (0 failures)
+- **IPv6 Validation Fix**: Resolved final failing test for IPv6-mapped addresses
+- **Security Validation**: All 4 critical security fixes thoroughly tested
+
+### 🔧 Bug Fixes
+- **IPv6 Validation**: Fixed validation for IPv4-mapped IPv6 addresses (`::ffff:192.0.2.1`)
+- **Test Coverage**: Updated documentation to reflect 695 passing tests (up from 694)
+
+### ✅ Quality Assurance
+- **100% Test Success**: Achieved perfect test success rate across all test suites
+- **Security Hardening**: All security vulnerabilities validated with comprehensive tests
+- **Performance Maintained**: No performance impact from security improvements
+
+## [1.3.0] - 2025-11-12
+
+### 🔒 **Critical Security Update**
+- **SECURITY**: Fixed 4 critical security vulnerabilities identified in comprehensive bug analysis
+- **Enhanced Security**: Comprehensive protection against prototype pollution, ReDoS attacks, and type safety issues
+- **Security-First**: All validators now include security controls while maintaining backwards compatibility
+
+### 🛡️ Security Fixes Implemented
+
+#### **BUG-001: Union Validator Type Safety** ✅ FIXED
+- **Issue**: Constructor name spoofing vulnerability in union validators
+- **Solution**: Replaced constructor name checking with secure feature detection
+- **Impact**: Prevents malicious validator objects from bypassing type checks
+- **Location**: `src/validators/union.ts`
+
+#### **BUG-002: Prototype Pollution Prevention** ✅ FIXED
+- **Issue**: Prototype pollution vulnerability in codec utilities
+- **Solution**: Added comprehensive input validation and suspicious content detection
+- **Impact**: Prevents `__proto__`, `constructor`, and `prototype` pollution attacks
+- **Location**: `src/utils/codec-utils.ts`
+
+#### **BUG-004: IPv6 ReDoS Prevention** ✅ FIXED
+- **Issue**: Regular Expression Denial of Service (ReDoS) vulnerability in IPv6 validation
+- **Solution**: Replaced complex regex with multi-step validation approach
+- **Impact**: Prevents catastrophic backtracking attacks while maintaining IPv6 support
+- **Location**: `src/validators/string.ts`, `src/coercion/string.ts`
+
+#### **BUG-005: Safe String Coercion** ✅ FIXED
+- **Issue**: Unsafe type coercion without length limits or sanitization
+- **Solution**: Added length limits (1M characters) and control character sanitization
+- **Impact**: Prevents DoS attacks and information disclosure through malicious strings
+- **Location**: `src/coercion/string.ts`
+
+### 📊 Quality Improvements
+- **Test Coverage**: Maintained excellent coverage at **96.55%** with **695 passing tests**
+- **Performance**: All security improvements maintain VLD's performance advantages
+- **Backwards Compatibility**: All changes are fully backwards compatible
+- **Security Testing**: Comprehensive security test suite added with 18 dedicated tests
+
+### 🧪 Testing & Validation
+- **Security Test Suite**: Added comprehensive security validation tests
+- **Performance Tests**: Verified security fixes don't impact performance
+- **Integration Tests**: Validated compatibility with existing codebases
+- **Memory Tests**: Confirmed no memory leaks with security enhancements
+
+### 📝 Documentation Updates
+- **Security Documentation**: Detailed security analysis reports created
+- **Bug Fix Reports**: Comprehensive documentation of all fixes implemented
+- **Test Coverage**: Updated coverage metrics to reflect new security tests
+- **README**: Updated to reflect latest test coverage and security improvements
+
+### 🔧 Technical Details
+- **Zero Breaking Changes**: All security improvements are backwards compatible
+- **Immutable Architecture**: Security hardening maintains VLD's immutable validator pattern
+- **Type Safety**: Enhanced type checking without compromising TypeScript inference
+- **Error Handling**: Improved error messages for security-related validation failures
+
 ## [1.2.0] - 2025-08-24 
 
 ### 🎯 **100% Test Success Rate Achieved** 

package/README.md

@@ -1,13 +1,26 @@
 # VLD - Fast & Lightweight TypeScript Validation Library
 
-[![NPM Version](https://img.shields.io/npm/v/@oxog/vld.svg)](https://www.npmjs.com/package/@oxog/vld)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![TypeScript](https://img.shields.io/badge/TypeScript-5.0+-blue.svg)](https://www.typescriptlang.org/)
-[![Zero Dependencies](https://img.shields.io/badge/Dependencies-0-green.svg)](package.json)
-[![Test Coverage](https://img.shields.io/badge/Coverage-97.3%25-brightgreen.svg)](package.json)
+[![NPM Version](https://img.shields.io/npm/v/@oxog/vld.svg)](https://www.npmjs.com/package/@oxog/vld) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![TypeScript](https://img.shields.io/badge/TypeScript-5.0+-blue.svg)](https://www.typescriptlang.org/) [![Zero Dependencies](https://img.shields.io/badge/Dependencies-0-green.svg)](package.json) [![Test Coverage](https://img.shields.io/badge/Coverage-96.55%25-brightgreen.svg)](package.json)
 
 VLD is a blazing-fast, type-safe validation library for TypeScript and JavaScript with **full Zod feature parity**. Built with performance in mind, it provides a simple and intuitive API while maintaining excellent type inference and 27+ language internationalization support.
 
+## 📚 Table of Contents
+
+- [🚀 Features](#-features)
+- [📊 Performance](#-performance)
+- [📦 Installation](#-installation)
+- [🎯 Quick Start](#-quick-start)
+- [📖 API Reference](#-api-reference)
+- [🌍 Internationalization (i18n)](#-internationalization-i18n)
+- [⚠️ Error Handling & Formatting](#️-error-handling--formatting)
+- [🔥 Advanced Examples](#-advanced-examples)
+- [🎯 Why VLD?](#-why-vld)
+- [🔄 Codecs - Bidirectional Transformations](#-codecs---bidirectional-transformations)
+- [🔄 Migrating from Zod](#-migrating-from-zod)
+- [📈 Benchmarks](#-benchmarks)
+- [🤝 Contributing](#-contributing)
+- [🔗 Links](#-links)
+
 ## 🚀 Features
 
 ### Core Features
@@ -18,8 +31,8 @@ VLD is a blazing-fast, type-safe validation library for TypeScript and JavaScrip
 - **🔧 Composable**: Chain validations for complex schemas
 - **⚠️ Advanced Error Formatting**: Tree, pretty, and flatten error utilities
 - **🌍 Multi-language**: Built-in support for 27+ languages
-- **✅ 97.3% Test Coverage**: Rigorously tested with 569 passing tests
-- **🏆 Industry Leading Performance**: 2.07x faster than Zod on average
+- **✅ 96.55% Test Coverage**: Rigorously tested with 1142 passing tests
+- **🏆 Industry Leading Performance**: 2.52x faster than Zod on average
 
 ### Advanced Zod-Compatible Features  
 - **🔄 Type Coercion**: `v.coerce.string()`, `v.coerce.number()`, `v.coerce.boolean()`, etc.
@@ -31,7 +44,12 @@ VLD is a blazing-fast, type-safe validation library for TypeScript and JavaScrip
 - **🛡️ Fallback Handling**: `catch()` for graceful error recovery
 - **🎯 Object Utilities**: `pick()`, `omit()`, `extend()` for flexible object schemas
 
-### 🚀 **NEW** Codec System - Beyond Zod
+### 🚀 **NEW in v1.4.0** - Zod 4 Full API Parity
+- **🌐 `v.cidrv6()`**: IPv6 CIDR block validation
+- **🔗 `.apply()`**: External function chaining for advanced composition
+- **🛡️ `.safeExtend()`**: Type-safe object extension without accidental overrides
+
+### 🚀 Codec System - Beyond Zod
 - **↔️ Bidirectional Transformations**: Full encode/decode support for data conversion
 - **📦 19 Built-in Codecs**: String conversions, date parsing, JSON, URL, binary data
 - **🔗 Zod-Compatible**: All `stringToNumber`, `jsonCodec`, `base64ToBytes`, etc.
@@ -65,9 +83,9 @@ VLD is designed for speed and efficiency with recent optimizations delivering ex
 - **86% less memory** for error handling
 - **78% less memory** overall average
 
-### 🎭 The Truth About Zod's Benchmarks
+### A Note on Real-World Benchmarking
 
-Many validation library benchmarks are misleading because they test with **reused schema instances**:
+Many validation library benchmarks can be misleading because they often test with **reused schema instances**:
 
 ```javascript
 // What benchmarks typically test (unrealistic):
@@ -109,6 +127,9 @@ pnpm add @oxog/vld
 ```typescript
 import { v } from '@oxog/vld';
 
+// It is recommended to import as `v` for consistency with Zod's `z`
+// and for a more concise syntax.
+
 // Define a schema
 const userSchema = v.object({
   name: v.string().min(2),
@@ -148,8 +169,9 @@ v.boolean()   // Boolean validation
 v.bigint()    // BigInt validation
 v.symbol()    // Symbol validation
 v.date()      // Date validation
+v.uint8array()// Uint8Array validation
 v.literal()   // Literal values
-v.enum()      // Enum values
+v.enum()      // Enum values (supports TypeScript enums)
 v.any()       // Any type
 v.unknown()   // Unknown type  
 v.void()      // Void type
@@ -422,6 +444,9 @@ VLD provides advanced error formatting utilities similar to Zod's error handling
 ```typescript
 import { v, VldError, treeifyError, prettifyError, flattenError } from '@oxog/vld';
 
+// Note: Error formatting utilities like `treeifyError` are separate named exports
+// and are not part of the main `v` object.
+
 const userSchema = v.object({
   username: v.string().min(3),
   favoriteNumbers: v.array(v.number()),
@@ -737,43 +762,36 @@ function handleLogin(data: unknown) {
 }
 ```
 
-## 🎯 Why VLD?
+## 🆚 VLD vs. Zod
 
-### 🚀 Full Zod Feature Parity + More
-VLD provides **complete Zod compatibility** with all advanced features including coercion, intersections, transformations, and object utilities - plus unique features like 27+ language internationalization.
+VLD is designed as a compelling alternative to Zod, offering full feature parity while delivering significant improvements in performance, bundle size, and internationalization.
 
-### ⚡ Performance First
-VLD is built from the ground up with performance in mind. Every line of code is optimized for the V8 engine, resulting in validation that doesn't slow down your application.
+### Feature Comparison
 
-### 🌍 Internationalization Leader
-The **only** major validation library with built-in support for 27+ languages. Perfect for global applications requiring localized error messages.
+| Feature                 | VLD                                | Zod                                  |
+| ----------------------- | ---------------------------------- | ------------------------------------ |
+| **Performance**         | **~2.07x faster** (average)        | Baseline                             |
+| **Memory Usage**        | **~78% less** overall              | Baseline                             |
+| **Internationalization**| ✅ **Built-in (27+ languages)**    | ❌ Requires third-party library      |
+| **Dependencies**        | **Zero**                           | `zod-i18n` for locales               |
+| **Bundle Size**         | Smaller                            | Larger                               |
+| **API**                 | 100% Zod-compatible                | Standard Zod API                     |
+| **Codecs**              | ✅ Built-in, bidirectional         | ✅ Via external `zod-codecs`         |
+| **Error Formatting**    | ✅ Advanced (tree, pretty, flatten)| ✅ Advanced (tree, pretty, flatten)|
+| **Type Inference**      | ✅ Excellent                       | ✅ Excellent                         |
 
-### 🎯 Real-World Testing  
-Our benchmarks test real-world scenarios, not just synthetic loops. VLD excels where it matters: in actual applications where schemas are created dynamically.
+### 🔄 Seamless Migration from Zod
 
-### 👨‍💻 Exceptional Developer Experience
-- **Full TypeScript integration** with perfect type inference
-- **Intuitive Zod-compatible API** for easy migration
-- **Advanced error formatting** with tree, pretty, and flatten utilities  
-- **95% test coverage** ensuring reliability
-- **Comprehensive documentation** with real-world examples
+Migration is straightforward due to 100% API compatibility. You can typically just swap the import statement.
 
-### 📦 Zero Dependencies  
-No dependencies means smaller bundle size, fewer security concerns, and better maintainability.
-
-### 🔄 Migration Ready
-Drop-in replacement for Zod with enhanced features:
-```typescript
-// Zod syntax works perfectly
-const schema = v.object({
-  name: v.string(),
-  age: v.number()
-}).refine(data => data.age > 0);
+```javascript
+// Before (Zod)
+import { z } from 'zod';
+const schema = z.string().email();
 
-// Plus VLD enhancements
-schema.extend({ email: v.string().email() })
-      .pick('name', 'email')  
-      .catch({ name: 'Unknown', email: 'no-email@example.com' });
+// After (VLD) - Exact same syntax!
+import { v } from '@oxog/vld';
+const schema = v.string().email();
 ```
 
 ## 🔄 Codecs - Bidirectional Transformations
@@ -1060,7 +1078,7 @@ const schema = v.string().email();
 - **🌍 Internationalization**: Built-in 27+ language support
 - **📦 Bundle Size**: Smaller with zero dependencies
 - **🔒 Security**: Immutable validators prevent memory leaks
-- **✅ Testing**: 97.3% test coverage with 569 tests
+- **✅ Testing**: 96.55% test coverage with 1142 tests
 
 ## 📈 Benchmarks
 
@@ -1079,7 +1097,7 @@ Latest benchmark results show VLD consistently outperforming Zod:
 | Optional Values | 32.7M ops/sec | **4.52x faster** |
 | Type Coercion | 18.4M ops/sec | **1.46x faster** |
 
-**Average: 2.07x faster than Zod**
+**Average: 2.52x faster than Zod**
 
 ### Run Benchmarks
 

package/dist/coercion/bigint.js

@@ -1,5 +1,5 @@
 import { VldBigInt } from '../validators/bigint.js';
-import { getMessages } from '../locales.js';
+import { getMessages } from '../locales/index.js';
 /**
  * BigInt coercion validator that attempts to convert values to bigint
  */

package/dist/coercion/boolean.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boolean.d.ts","sourceRoot":"","sources":["../../src/coercion/boolean.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,gBAAgB;IAIjC;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAoC9B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;CAOhD"}
+{"version":3,"file":"boolean.d.ts","sourceRoot":"","sources":["../../src/coercion/boolean.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,gBAAgB;IAIjC;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAyC9B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;CAOhD"}

package/dist/coercion/boolean.js

@@ -1,5 +1,5 @@
 import { VldBoolean } from '../validators/boolean.js';
-import { getMessages } from '../locales.js';
+import { getMessages } from '../locales/index.js';
 /**
  * Boolean coercion validator that attempts to convert values to booleans
  */
@@ -38,8 +38,12 @@ export class VldCoerceBoolean extends VldBoolean {
             if (value === null || value === undefined) {
                 throw new Error(getMessages().coercionFailed('boolean', value));
             }
-            // Use parent validation for actual booleans
-            return super.parse(Boolean(value));
+            // Handle actual boolean values
+            if (typeof value === 'boolean') {
+                return super.parse(value);
+            }
+            // Reject all other unsupported types (objects, arrays, etc.)
+            throw new Error(getMessages().coercionFailed('boolean', value));
         }
         catch (error) {
             if (error.message.includes('coercionFailed')) {

package/dist/coercion/boolean.js.map

@@ -1 +1 @@
-{"version":3,"file":"boolean.js","sourceRoot":"","sources":["../../src/coercion/boolean.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IAC9C;;OAEG;IACH,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,CAAC;YACH,uBAAuB;YACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC3E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC5E,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC;YAED,uBAAuB;YACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC7B,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC;YAED,4BAA4B;YAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC;YAED,4CAA4C;YAC5C,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACxD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { VldBoolean } from '../validators/boolean';\nimport { ParseResult } from '../validators/base';\nimport { getMessages } from '../locales';\n\n/**\n * Boolean coercion validator that attempts to convert values to booleans\n */\nexport class VldCoerceBoolean extends VldBoolean {\n  /**\n   * Create a new coerce boolean validator\n   */\n  static create(): VldCoerceBoolean {\n    return new VldCoerceBoolean();\n  }\n  \n  /**\n   * Parse and coerce a value to boolean\n   */\n  parse(value: unknown): boolean {\n    try {\n      // Handle string values\n      if (typeof value === 'string') {\n        const lower = value.toLowerCase().trim();\n        if (lower === 'true' || lower === '1' || lower === 'yes' || lower === 'on') {\n          return true;\n        }\n        if (lower === 'false' || lower === '0' || lower === 'no' || lower === 'off') {\n          return false;\n        }\n        throw new Error(getMessages().coercionFailed('boolean', value));\n      }\n      \n      // Handle number values\n      if (typeof value === 'number') {\n        if (value === 1) return true;\n        if (value === 0) return false;\n        throw new Error(getMessages().coercionFailed('boolean', value));\n      }\n      \n      // Handle null and undefined\n      if (value === null || value === undefined) {\n        throw new Error(getMessages().coercionFailed('boolean', value));\n      }\n      \n      // Use parent validation for actual booleans\n      return super.parse(Boolean(value));\n    } catch (error) {\n      if ((error as Error).message.includes('coercionFailed')) {\n        throw error;\n      }\n      throw new Error(getMessages().coercionFailed('boolean', value));\n    }\n  }\n  \n  /**\n   * Safely parse and coerce a value to boolean\n   */\n  safeParse(value: unknown): ParseResult<boolean> {\n    try {\n      return { success: true, data: this.parse(value) };\n    } catch (error) {\n      return { success: false, error: error as Error };\n    }\n  }\n}"]}
+{"version":3,"file":"boolean.js","sourceRoot":"","sources":["../../src/coercion/boolean.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IAC9C;;OAEG;IACH,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,CAAC;YACH,uBAAuB;YACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC3E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC5E,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC;YAED,uBAAuB;YACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC7B,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC;YAED,4BAA4B;YAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC;YAED,+BAA+B;YAC/B,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YAED,6DAA6D;YAC7D,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACxD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { VldBoolean } from '../validators/boolean';\r\nimport { ParseResult } from '../validators/base';\r\nimport { getMessages } from '../locales';\r\n\r\n/**\r\n * Boolean coercion validator that attempts to convert values to booleans\r\n */\r\nexport class VldCoerceBoolean extends VldBoolean {\r\n  /**\r\n   * Create a new coerce boolean validator\r\n   */\r\n  static create(): VldCoerceBoolean {\r\n    return new VldCoerceBoolean();\r\n  }\r\n  \r\n  /**\r\n   * Parse and coerce a value to boolean\r\n   */\r\n  parse(value: unknown): boolean {\r\n    try {\r\n      // Handle string values\r\n      if (typeof value === 'string') {\r\n        const lower = value.toLowerCase().trim();\r\n        if (lower === 'true' || lower === '1' || lower === 'yes' || lower === 'on') {\r\n          return true;\r\n        }\r\n        if (lower === 'false' || lower === '0' || lower === 'no' || lower === 'off') {\r\n          return false;\r\n        }\r\n        throw new Error(getMessages().coercionFailed('boolean', value));\r\n      }\r\n      \r\n      // Handle number values\r\n      if (typeof value === 'number') {\r\n        if (value === 1) return true;\r\n        if (value === 0) return false;\r\n        throw new Error(getMessages().coercionFailed('boolean', value));\r\n      }\r\n      \r\n      // Handle null and undefined\r\n      if (value === null || value === undefined) {\r\n        throw new Error(getMessages().coercionFailed('boolean', value));\r\n      }\r\n\r\n      // Handle actual boolean values\r\n      if (typeof value === 'boolean') {\r\n        return super.parse(value);\r\n      }\r\n\r\n      // Reject all other unsupported types (objects, arrays, etc.)\r\n      throw new Error(getMessages().coercionFailed('boolean', value));\r\n    } catch (error) {\r\n      if ((error as Error).message.includes('coercionFailed')) {\r\n        throw error;\r\n      }\r\n      throw new Error(getMessages().coercionFailed('boolean', value));\r\n    }\r\n  }\r\n  \r\n  /**\r\n   * Safely parse and coerce a value to boolean\r\n   */\r\n  safeParse(value: unknown): ParseResult<boolean> {\r\n    try {\r\n      return { success: true, data: this.parse(value) };\r\n    } catch (error) {\r\n      return { success: false, error: error as Error };\r\n    }\r\n  }\r\n}"]}

package/dist/coercion/date.js

@@ -1,5 +1,5 @@
 import { VldDate } from '../validators/date.js';
-import { getMessages } from '../locales.js';
+import { getMessages } from '../locales/index.js';
 /**
  * Date coercion validator that attempts to convert values to dates
  */

package/dist/coercion/number.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"number.d.ts","sourceRoot":"","sources":["../../src/coercion/number.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,SAAS,aAAa,MAAM,CAAC,EAAE,GAAG;IAIlC;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,eAAe;IAKhC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOrD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOrD,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO3C,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO9C,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO9C,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOzC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOvC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO5D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAItD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOpE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOvC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOtC;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAgC7B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;CAO/C"}
+{"version":3,"file":"number.d.ts","sourceRoot":"","sources":["../../src/coercion/number.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,SAAS,aAAa,MAAM,CAAC,EAAE,GAAG;IAIlC;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,eAAe;IAKhC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOrD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOrD,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO3C,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO9C,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAO9C,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOzC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOvC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAW5D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAItD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAOpE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAavC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAatC;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAgC7B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;CAO/C"}

package/dist/coercion/number.js

@@ -1,5 +1,5 @@
 import { VldNumber } from '../validators/number.js';
-import { getMessages } from '../locales.js';
+import { getMessages } from '../locales/index.js';
 /**
  * Number coercion validator that attempts to convert values to numbers
  */
@@ -70,7 +70,11 @@ export class VldCoerceNumber extends VldNumber {
     }
     multipleOf(value, message) {
         return new VldCoerceNumber({
-            checks: [...this.config.checks, (v) => v % value === 0],
+            checks: [...this.config.checks, (v) => {
+                    // BUG-004 FIX: Use epsilon comparison for floating point precision (consistent with VldNumber)
+                    const remainder = Math.abs(v % value);
+                    return remainder < Number.EPSILON || Math.abs(remainder - Math.abs(value)) < Number.EPSILON;
+                }],
             errorMessage: message || getMessages().numberMultipleOf(value)
         });
     }
@@ -84,14 +88,26 @@ export class VldCoerceNumber extends VldNumber {
         });
     }
     even(message) {
+        // BUG-NEW-007 FIX: Add integer check before even/odd validation
         return new VldCoerceNumber({
-            checks: [...this.config.checks, (v) => v % 2 === 0],
+            checks: [...this.config.checks, (v) => {
+                    if (!Number.isInteger(v)) {
+                        return false;
+                    }
+                    return v % 2 === 0;
+                }],
             errorMessage: message || 'Number must be even'
         });
     }
     odd(message) {
+        // BUG-NEW-007 FIX: Add integer check before even/odd validation
         return new VldCoerceNumber({
-            checks: [...this.config.checks, (v) => v % 2 !== 0],
+            checks: [...this.config.checks, (v) => {
+                    if (!Number.isInteger(v)) {
+                        return false;
+                    }
+                    return v % 2 !== 0;
+                }],
             errorMessage: message || 'Number must be odd'
         });
     }

package/dist/coercion/number.js.map

@@ -1 +1 @@
-{"version":3,"file":"number.js","sourceRoot":"","sources":["../../src/coercion/number.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C,YAAsB,MAAY;QAChC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,eAAe,EAAE,CAAC;IAC/B,CAAC;IAED,iEAAiE;IACjE,GAAG,CAAC,KAAa,EAAE,OAAgB;QACjC,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;YAC1D,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,KAAa,EAAE,OAAgB;QACjC,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;YAC1D,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,OAAgB;QAClB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACnE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,SAAS;SACjD,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,OAAgB;QACvB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACrD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,cAAc;SACtD,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,OAAgB;QACvB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACrD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,cAAc;SACtD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAgB;QAC1B,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,iBAAiB;SACzD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAgB;QAC1B,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,iBAAiB;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAgB;QACrB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAClE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,YAAY;SACpD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAgB;QACnB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACvE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,UAAU;SAClD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,OAAgB;QACxC,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;YAC/D,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAgB;QAClC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,GAAW,EAAE,OAAgB;QAChD,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;YACpE,YAAY,EAAE,OAAO,IAAI,0BAA0B,GAAG,QAAQ,GAAG,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAgB;QACnB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3D,YAAY,EAAE,OAAO,IAAI,qBAAqB;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,OAAgB;QAClB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3D,YAAY,EAAE,OAAO,IAAI,oBAAoB;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAc;QAClB,iEAAiE;QACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,OAAe,CAAC;QAEpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { VldNumber } from '../validators/number';\nimport { ParseResult } from '../validators/base';\nimport { getMessages } from '../locales';\n\n/**\n * Number coercion validator that attempts to convert values to numbers\n */\nexport class VldCoerceNumber extends VldNumber {\n  protected constructor(config?: any) {\n    super(config);\n  }\n  \n  /**\n   * Create a new coerce number validator\n   */\n  static create(): VldCoerceNumber {\n    return new VldCoerceNumber();\n  }\n  \n  // Override all chain methods to return VldCoerceNumber instances\n  min(value: number, message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v >= value],\n      errorMessage: message || getMessages().numberMin(value)\n    });\n  }\n  \n  max(value: number, message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v <= value],\n      errorMessage: message || getMessages().numberMax(value)\n    });\n  }\n  \n  int(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => Number.isInteger(v)],\n      errorMessage: message || getMessages().numberInt\n    });\n  }\n  \n  positive(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v > 0],\n      errorMessage: message || getMessages().numberPositive\n    });\n  }\n  \n  negative(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v < 0],\n      errorMessage: message || getMessages().numberNegative\n    });\n  }\n  \n  nonnegative(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v >= 0],\n      errorMessage: message || getMessages().numberNonnegative\n    });\n  }\n  \n  nonpositive(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v <= 0],\n      errorMessage: message || getMessages().numberNonpositive\n    });\n  }\n  \n  finite(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => Number.isFinite(v)],\n      errorMessage: message || getMessages().numberFinite\n    });\n  }\n  \n  safe(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => Number.isSafeInteger(v)],\n      errorMessage: message || getMessages().numberSafe\n    });\n  }\n  \n  multipleOf(value: number, message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v % value === 0],\n      errorMessage: message || getMessages().numberMultipleOf(value)\n    });\n  }\n  \n  step(value: number, message?: string): VldCoerceNumber {\n    return this.multipleOf(value, message);\n  }\n  \n  between(min: number, max: number, message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v >= min && v <= max],\n      errorMessage: message || `Number must be between ${min} and ${max}`\n    });\n  }\n  \n  even(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v % 2 === 0],\n      errorMessage: message || 'Number must be even'\n    });\n  }\n  \n  odd(message?: string): VldCoerceNumber {\n    return new VldCoerceNumber({\n      checks: [...this.config.checks, (v: number) => v % 2 !== 0],\n      errorMessage: message || 'Number must be odd'\n    });\n  }\n  \n  /**\n   * Parse and coerce a value to number\n   */\n  parse(value: unknown): number {\n    // If it's already a valid number, use parent validation directly\n    if (typeof value === 'number' && !isNaN(value)) {\n      return super.parse(value);\n    }\n    \n    let coerced: number;\n    \n    if (typeof value === 'string') {\n      const trimmed = value.trim();\n      if (trimmed === '') {\n        throw new Error(getMessages().coercionFailed('number', value));\n      }\n      coerced = Number(trimmed);\n      if (isNaN(coerced)) {\n        throw new Error(getMessages().coercionFailed('number', value));\n      }\n    } else if (typeof value === 'boolean') {\n      coerced = value ? 1 : 0;\n    } else if (value === null || value === undefined) {\n      throw new Error(getMessages().coercionFailed('number', value));\n    } else {\n      coerced = Number(value);\n      if (isNaN(coerced)) {\n        throw new Error(getMessages().coercionFailed('number', value));\n      }\n    }\n    \n    // Use parent validation with coerced value\n    return super.parse(coerced);\n  }\n  \n  /**\n   * Safely parse and coerce a value to number\n   */\n  safeParse(value: unknown): ParseResult<number> {\n    try {\n      return { success: true, data: this.parse(value) };\n    } catch (error) {\n      return { success: false, error: error as Error };\n    }\n  }\n}"]}
+{"version":3,"file":"number.js","sourceRoot":"","sources":["../../src/coercion/number.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C,YAAsB,MAAY;QAChC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,eAAe,EAAE,CAAC;IAC/B,CAAC;IAED,iEAAiE;IACjE,GAAG,CAAC,KAAa,EAAE,OAAgB;QACjC,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;YAC1D,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,KAAa,EAAE,OAAgB;QACjC,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;YAC1D,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,OAAgB;QAClB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACnE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,SAAS;SACjD,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,OAAgB;QACvB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACrD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,cAAc;SACtD,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,OAAgB;QACvB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACrD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,cAAc;SACtD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAgB;QAC1B,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,iBAAiB;SACzD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAgB;QAC1B,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,iBAAiB;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAgB;QACrB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAClE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,YAAY;SACpD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAgB;QACnB,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACvE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,UAAU;SAClD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,OAAgB;QACxC,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBAC5C,+FAA+F;oBAC/F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;oBACtC,OAAO,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBAC9F,CAAC,CAAC;YACF,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAgB;QAClC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,GAAW,EAAE,OAAgB;QAChD,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;YACpE,YAAY,EAAE,OAAO,IAAI,0BAA0B,GAAG,QAAQ,GAAG,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAgB;QACnB,gEAAgE;QAChE,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzB,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC;YACF,YAAY,EAAE,OAAO,IAAI,qBAAqB;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,OAAgB;QAClB,gEAAgE;QAChE,OAAO,IAAI,eAAe,CAAC;YACzB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzB,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC;YACF,YAAY,EAAE,OAAO,IAAI,oBAAoB;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAc;QAClB,iEAAiE;QACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,OAAe,CAAC;QAEpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { VldNumber } from '../validators/number';\r\nimport { ParseResult } from '../validators/base';\r\nimport { getMessages } from '../locales';\r\n\r\n/**\r\n * Number coercion validator that attempts to convert values to numbers\r\n */\r\nexport class VldCoerceNumber extends VldNumber {\r\n  protected constructor(config?: any) {\r\n    super(config);\r\n  }\r\n  \r\n  /**\r\n   * Create a new coerce number validator\r\n   */\r\n  static create(): VldCoerceNumber {\r\n    return new VldCoerceNumber();\r\n  }\r\n  \r\n  // Override all chain methods to return VldCoerceNumber instances\r\n  min(value: number, message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => v >= value],\r\n      errorMessage: message || getMessages().numberMin(value)\r\n    });\r\n  }\r\n  \r\n  max(value: number, message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => v <= value],\r\n      errorMessage: message || getMessages().numberMax(value)\r\n    });\r\n  }\r\n  \r\n  int(message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => Number.isInteger(v)],\r\n      errorMessage: message || getMessages().numberInt\r\n    });\r\n  }\r\n  \r\n  positive(message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => v > 0],\r\n      errorMessage: message || getMessages().numberPositive\r\n    });\r\n  }\r\n  \r\n  negative(message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => v < 0],\r\n      errorMessage: message || getMessages().numberNegative\r\n    });\r\n  }\r\n  \r\n  nonnegative(message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => v >= 0],\r\n      errorMessage: message || getMessages().numberNonnegative\r\n    });\r\n  }\r\n  \r\n  nonpositive(message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => v <= 0],\r\n      errorMessage: message || getMessages().numberNonpositive\r\n    });\r\n  }\r\n  \r\n  finite(message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => Number.isFinite(v)],\r\n      errorMessage: message || getMessages().numberFinite\r\n    });\r\n  }\r\n  \r\n  safe(message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => Number.isSafeInteger(v)],\r\n      errorMessage: message || getMessages().numberSafe\r\n    });\r\n  }\r\n  \r\n  multipleOf(value: number, message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => {\r\n        // BUG-004 FIX: Use epsilon comparison for floating point precision (consistent with VldNumber)\r\n        const remainder = Math.abs(v % value);\r\n        return remainder < Number.EPSILON || Math.abs(remainder - Math.abs(value)) < Number.EPSILON;\r\n      }],\r\n      errorMessage: message || getMessages().numberMultipleOf(value)\r\n    });\r\n  }\r\n  \r\n  step(value: number, message?: string): VldCoerceNumber {\r\n    return this.multipleOf(value, message);\r\n  }\r\n  \r\n  between(min: number, max: number, message?: string): VldCoerceNumber {\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => v >= min && v <= max],\r\n      errorMessage: message || `Number must be between ${min} and ${max}`\r\n    });\r\n  }\r\n  \r\n  even(message?: string): VldCoerceNumber {\r\n    // BUG-NEW-007 FIX: Add integer check before even/odd validation\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => {\r\n        if (!Number.isInteger(v)) {\r\n          return false;\r\n        }\r\n        return v % 2 === 0;\r\n      }],\r\n      errorMessage: message || 'Number must be even'\r\n    });\r\n  }\r\n  \r\n  odd(message?: string): VldCoerceNumber {\r\n    // BUG-NEW-007 FIX: Add integer check before even/odd validation\r\n    return new VldCoerceNumber({\r\n      checks: [...this.config.checks, (v: number) => {\r\n        if (!Number.isInteger(v)) {\r\n          return false;\r\n        }\r\n        return v % 2 !== 0;\r\n      }],\r\n      errorMessage: message || 'Number must be odd'\r\n    });\r\n  }\r\n  \r\n  /**\r\n   * Parse and coerce a value to number\r\n   */\r\n  parse(value: unknown): number {\r\n    // If it's already a valid number, use parent validation directly\r\n    if (typeof value === 'number' && !isNaN(value)) {\r\n      return super.parse(value);\r\n    }\r\n    \r\n    let coerced: number;\r\n    \r\n    if (typeof value === 'string') {\r\n      const trimmed = value.trim();\r\n      if (trimmed === '') {\r\n        throw new Error(getMessages().coercionFailed('number', value));\r\n      }\r\n      coerced = Number(trimmed);\r\n      if (isNaN(coerced)) {\r\n        throw new Error(getMessages().coercionFailed('number', value));\r\n      }\r\n    } else if (typeof value === 'boolean') {\r\n      coerced = value ? 1 : 0;\r\n    } else if (value === null || value === undefined) {\r\n      throw new Error(getMessages().coercionFailed('number', value));\r\n    } else {\r\n      coerced = Number(value);\r\n      if (isNaN(coerced)) {\r\n        throw new Error(getMessages().coercionFailed('number', value));\r\n      }\r\n    }\r\n    \r\n    // Use parent validation with coerced value\r\n    return super.parse(coerced);\r\n  }\r\n  \r\n  /**\r\n   * Safely parse and coerce a value to number\r\n   */\r\n  safeParse(value: unknown): ParseResult<number> {\r\n    try {\r\n      return { success: true, data: this.parse(value) };\r\n    } catch (error) {\r\n      return { success: false, error: error as Error };\r\n    }\r\n  }\r\n}"]}

package/dist/coercion/string.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"string.d.ts","sourceRoot":"","sources":["../../src/coercion/string.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,SAAS,aAAa,MAAM,CAAC,EAAE,GAAG;IAIlC;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,eAAe;IAKhC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQtD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQtD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQzD,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQxC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQtC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQvC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQzD,IAAI,IAAI,eAAe;IAQvB,WAAW,IAAI,eAAe;IAQ9B,WAAW,IAAI,eAAe;IAQ9B,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQ1D,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQxD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQxD,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAUrC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQvC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IASvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQ3C;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAkB7B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;CAO/C"}
+{"version":3,"file":"string.d.ts","sourceRoot":"","sources":["../../src/coercion/string.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAOjD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,SAAS,aAAa,MAAM,CAAC,EAAE,GAAG;IAIlC;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,eAAe;IAKhC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQtD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQtD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQzD,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAUxC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQtC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQvC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQzD,IAAI,IAAI,eAAe;IAQvB,WAAW,IAAI,eAAe;IAQ9B,WAAW,IAAI,eAAe;IAQ9B,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQ1D,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQxD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQxD,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAarC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQvC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAWvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAQ3C;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IA2E7B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;CAO/C"}

package/dist/coercion/string.js

@@ -1,5 +1,8 @@
 import { VldString } from '../validators/string.js';
-import { getMessages } from '../locales.js';
+import { getMessages } from '../locales/index.js';
+import { isValidIPv6 } from '../utils/ip-validation.js';
+// BUG-NEW-001 FIX: IPv6 validation moved to shared utility (src/utils/ip-validation.ts)
+// to eliminate code duplication between string.ts and coercion/string.ts
 /**
  * String coercion validator that attempts to convert values to strings
  */
@@ -36,8 +39,10 @@ export class VldCoerceString extends VldString {
         });
     }
     email(message) {
+        // BUG-007 FIX: Use simpler, ReDoS-safe regex (consistent with VldString)
+        const FAST_EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
         return new VldCoerceString({
-            checks: [...this.config.checks, (v) => /^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)+$/.test(v)],
+            checks: [...this.config.checks, (v) => FAST_EMAIL_REGEX.test(v)],
             transforms: this.config.transforms,
             errorMessage: message || getMessages().stringEmail
         });
@@ -107,9 +112,13 @@ export class VldCoerceString extends VldString {
     }
     ip(message) {
         const ipv4 = /^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/;
-        const ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))$/;
         return new VldCoerceString({
-            checks: [...this.config.checks, (v) => ipv4.test(v) || ipv6.test(v)],
+            checks: [...this.config.checks, (v) => {
+                    // Prevent ReDoS: Check length before validation
+                    if (v.length > 100)
+                        return false;
+                    return ipv4.test(v) || isValidIPv6(v);
+                }],
             transforms: this.config.transforms,
             errorMessage: message || getMessages().stringIp
         });
@@ -122,9 +131,11 @@ export class VldCoerceString extends VldString {
         });
     }
     ipv6(message) {
-        const ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))$/;
         return new VldCoerceString({
-            checks: [...this.config.checks, (v) => ipv6.test(v)],
+            checks: [...this.config.checks, (v) => {
+                    // Use safe IPv6 validation to prevent ReDoS attacks
+                    return isValidIPv6(v);
+                }],
             transforms: this.config.transforms,
             errorMessage: message || getMessages().stringIpv6
         });
@@ -140,18 +151,79 @@ export class VldCoerceString extends VldString {
      * Parse and coerce a value to string
      */
     parse(value) {
-        // If it's already a string, use parent validation directly
+        // If it's already a string, apply security controls first
         if (typeof value === 'string') {
-            return super.parse(value);
+            // Enforce length limits to prevent DoS
+            if (value.length > 1000000) {
+                throw new Error(getMessages().coercionFailed('string', value));
+            }
+            // Sanitize control characters for security
+            // Remove characters that could cause issues in logs, databases, or UI
+            // eslint-disable-next-line no-control-regex -- Intentional removal of control characters for security
+            const sanitized = value.replace(/[\x00-\x1F\x7F]/g, '');
+            // Use parent validation with sanitized string
+            return super.parse(sanitized);
         }
         // Handle null and undefined explicitly
         if (value === null || value === undefined) {
             throw new Error(getMessages().coercionFailed('string', value));
         }
-        // Coerce to string
-        const coerced = String(value);
-        // Use parent validation with coerced value
-        return super.parse(coerced);
+        // Safe type coercion with security measures
+        let coerced;
+        if (typeof value === 'number') {
+            // Numbers: safe conversion
+            coerced = String(value);
+        }
+        else if (typeof value === 'boolean') {
+            // Booleans: safe conversion
+            coerced = value ? 'true' : 'false';
+        }
+        else if (typeof value === 'bigint') {
+            // BigInt: safe conversion
+            coerced = value.toString();
+        }
+        else if (typeof value === 'symbol') {
+            // Symbols: explicit error to prevent potential issues
+            throw new Error(getMessages().coercionFailed('string', value));
+        }
+        else if (typeof value === 'object') {
+            // Objects: only allow specific safe object types
+            if (value instanceof Date) {
+                // Dates: convert to ISO string
+                coerced = value.toISOString();
+            }
+            else if (Array.isArray(value)) {
+                // Arrays: convert to comma-separated string (original behavior)
+                coerced = value.join(',');
+            }
+            else if (value instanceof RegExp) {
+                // RegExp: convert to string representation
+                coerced = value.toString();
+            }
+            else if (value instanceof Error) {
+                // Errors: use message property (safe)
+                coerced = value.message || value.toString();
+            }
+            else {
+                // For plain objects, use the original String() behavior for backwards compatibility
+                coerced = String(value);
+            }
+        }
+        else {
+            // Fallback for other types
+            coerced = String(value);
+        }
+        // Apply security controls
+        // Enforce length limits to prevent DoS
+        if (coerced.length > 1000000) {
+            throw new Error(getMessages().coercionFailed('string', value));
+        }
+        // Sanitize control characters for security
+        // Remove characters that could cause issues in logs, databases, or UI
+        // eslint-disable-next-line no-control-regex -- Intentional removal of control characters for security
+        const sanitized = coerced.replace(/[\x00-\x1F\x7F]/g, '');
+        // Use parent validation with sanitized value
+        return super.parse(sanitized);
     }
     /**
      * Safely parse and coerce a value to string