@oxog/vld 1.2.0 → 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (261) hide show
  1. package/CHANGELOG.md +122 -0
  2. package/README.md +61 -43
  3. package/dist/coercion/bigint.js +1 -1
  4. package/dist/coercion/boolean.d.ts.map +1 -1
  5. package/dist/coercion/boolean.js +7 -3
  6. package/dist/coercion/boolean.js.map +1 -1
  7. package/dist/coercion/date.js +1 -1
  8. package/dist/coercion/number.d.ts.map +1 -1
  9. package/dist/coercion/number.js +20 -4
  10. package/dist/coercion/number.js.map +1 -1
  11. package/dist/coercion/string.d.ts.map +1 -1
  12. package/dist/coercion/string.js +84 -12
  13. package/dist/coercion/string.js.map +1 -1
  14. package/dist/index.d.ts +593 -3
  15. package/dist/index.d.ts.map +1 -1
  16. package/dist/index.js +76 -5
  17. package/dist/index.js.map +1 -1
  18. package/dist/locales/af.d.ts.map +1 -1
  19. package/dist/locales/af.js +21 -4
  20. package/dist/locales/af.js.map +1 -1
  21. package/dist/locales/ar.d.ts.map +1 -1
  22. package/dist/locales/ar.js +21 -4
  23. package/dist/locales/ar.js.map +1 -1
  24. package/dist/locales/backup-en.d.ts +3 -0
  25. package/dist/locales/backup-en.d.ts.map +1 -0
  26. package/dist/locales/backup-en.js +105 -0
  27. package/dist/locales/backup-en.js.map +1 -0
  28. package/dist/locales/bn.d.ts.map +1 -1
  29. package/dist/locales/bn.js +21 -4
  30. package/dist/locales/bn.js.map +1 -1
  31. package/dist/locales/da.d.ts.map +1 -1
  32. package/dist/locales/da.js +21 -4
  33. package/dist/locales/da.js.map +1 -1
  34. package/dist/locales/de.d.ts.map +1 -1
  35. package/dist/locales/de.js +21 -4
  36. package/dist/locales/de.js.map +1 -1
  37. package/dist/locales/en.d.ts.map +1 -1
  38. package/dist/locales/en.js +21 -4
  39. package/dist/locales/en.js.map +1 -1
  40. package/dist/locales/es-MX.d.ts.map +1 -1
  41. package/dist/locales/es-MX.js +20 -4
  42. package/dist/locales/es-MX.js.map +1 -1
  43. package/dist/locales/es.d.ts.map +1 -1
  44. package/dist/locales/es.js +21 -4
  45. package/dist/locales/es.js.map +1 -1
  46. package/dist/locales/fi.d.ts.map +1 -1
  47. package/dist/locales/fi.js +21 -4
  48. package/dist/locales/fi.js.map +1 -1
  49. package/dist/locales/fr.d.ts.map +1 -1
  50. package/dist/locales/fr.js +21 -4
  51. package/dist/locales/fr.js.map +1 -1
  52. package/dist/locales/hi.d.ts.map +1 -1
  53. package/dist/locales/hi.js +21 -4
  54. package/dist/locales/hi.js.map +1 -1
  55. package/dist/locales/id.d.ts.map +1 -1
  56. package/dist/locales/id.js +21 -4
  57. package/dist/locales/id.js.map +1 -1
  58. package/dist/locales/it.d.ts.map +1 -1
  59. package/dist/locales/it.js +21 -4
  60. package/dist/locales/it.js.map +1 -1
  61. package/dist/locales/ja.d.ts.map +1 -1
  62. package/dist/locales/ja.js +21 -4
  63. package/dist/locales/ja.js.map +1 -1
  64. package/dist/locales/ko.d.ts.map +1 -1
  65. package/dist/locales/ko.js +21 -4
  66. package/dist/locales/ko.js.map +1 -1
  67. package/dist/locales/nl.d.ts.map +1 -1
  68. package/dist/locales/nl.js +21 -4
  69. package/dist/locales/nl.js.map +1 -1
  70. package/dist/locales/no.d.ts.map +1 -1
  71. package/dist/locales/no.js +21 -4
  72. package/dist/locales/no.js.map +1 -1
  73. package/dist/locales/pl.d.ts.map +1 -1
  74. package/dist/locales/pl.js +21 -4
  75. package/dist/locales/pl.js.map +1 -1
  76. package/dist/locales/pt-BR.d.ts.map +1 -1
  77. package/dist/locales/pt-BR.js +21 -4
  78. package/dist/locales/pt-BR.js.map +1 -1
  79. package/dist/locales/pt.d.ts.map +1 -1
  80. package/dist/locales/pt.js +21 -4
  81. package/dist/locales/pt.js.map +1 -1
  82. package/dist/locales/ru.d.ts.map +1 -1
  83. package/dist/locales/ru.js +21 -4
  84. package/dist/locales/ru.js.map +1 -1
  85. package/dist/locales/sv.d.ts.map +1 -1
  86. package/dist/locales/sv.js +21 -4
  87. package/dist/locales/sv.js.map +1 -1
  88. package/dist/locales/sw.d.ts.map +1 -1
  89. package/dist/locales/sw.js +21 -4
  90. package/dist/locales/sw.js.map +1 -1
  91. package/dist/locales/th.d.ts.map +1 -1
  92. package/dist/locales/th.js +21 -4
  93. package/dist/locales/th.js.map +1 -1
  94. package/dist/locales/tr.d.ts.map +1 -1
  95. package/dist/locales/tr.js +21 -4
  96. package/dist/locales/tr.js.map +1 -1
  97. package/dist/locales/types.d.ts +16 -3
  98. package/dist/locales/types.d.ts.map +1 -1
  99. package/dist/locales/types.js.map +1 -1
  100. package/dist/locales/vi.d.ts.map +1 -1
  101. package/dist/locales/vi.js +21 -4
  102. package/dist/locales/vi.js.map +1 -1
  103. package/dist/locales/zh.d.ts.map +1 -1
  104. package/dist/locales/zh.js +21 -4
  105. package/dist/locales/zh.js.map +1 -1
  106. package/dist/utils/codec-utils.d.ts +3 -1
  107. package/dist/utils/codec-utils.d.ts.map +1 -1
  108. package/dist/utils/codec-utils.js +110 -5
  109. package/dist/utils/codec-utils.js.map +1 -1
  110. package/dist/utils/deep-merge.d.ts +3 -0
  111. package/dist/utils/deep-merge.d.ts.map +1 -1
  112. package/dist/utils/deep-merge.js +30 -22
  113. package/dist/utils/deep-merge.js.map +1 -1
  114. package/dist/utils/ip-validation.d.ts +11 -0
  115. package/dist/utils/ip-validation.d.ts.map +1 -0
  116. package/dist/utils/ip-validation.js +78 -0
  117. package/dist/utils/ip-validation.js.map +1 -0
  118. package/dist/utils/security.d.ts +12 -0
  119. package/dist/utils/security.d.ts.map +1 -0
  120. package/dist/utils/security.js +61 -0
  121. package/dist/utils/security.js.map +1 -0
  122. package/dist/validators/array.d.ts +7 -0
  123. package/dist/validators/array.d.ts.map +1 -1
  124. package/dist/validators/array.js +57 -2
  125. package/dist/validators/array.js.map +1 -1
  126. package/dist/validators/base.d.ts +131 -0
  127. package/dist/validators/base.d.ts.map +1 -1
  128. package/dist/validators/base.js +247 -1
  129. package/dist/validators/base.js.map +1 -1
  130. package/dist/validators/base64.d.ts.map +1 -1
  131. package/dist/validators/base64.js +6 -3
  132. package/dist/validators/base64.js.map +1 -1
  133. package/dist/validators/bigint.d.ts +20 -0
  134. package/dist/validators/bigint.d.ts.map +1 -1
  135. package/dist/validators/bigint.js +39 -1
  136. package/dist/validators/bigint.js.map +1 -1
  137. package/dist/validators/boolean.js +29 -1
  138. package/dist/validators/boolean.js.map +1 -1
  139. package/dist/validators/codec.js +1 -1
  140. package/dist/validators/custom.d.ts +47 -0
  141. package/dist/validators/custom.d.ts.map +1 -0
  142. package/dist/validators/custom.js +50 -0
  143. package/dist/validators/custom.js.map +1 -0
  144. package/dist/validators/date.d.ts +21 -1
  145. package/dist/validators/date.d.ts.map +1 -1
  146. package/dist/validators/date.js +109 -30
  147. package/dist/validators/date.js.map +1 -1
  148. package/dist/validators/discriminated-union.d.ts +29 -0
  149. package/dist/validators/discriminated-union.d.ts.map +1 -0
  150. package/dist/validators/discriminated-union.js +98 -0
  151. package/dist/validators/discriminated-union.js.map +1 -0
  152. package/dist/validators/enum.d.ts +10 -0
  153. package/dist/validators/enum.d.ts.map +1 -1
  154. package/dist/validators/enum.js +38 -1
  155. package/dist/validators/enum.js.map +1 -1
  156. package/dist/validators/file.d.ts +57 -0
  157. package/dist/validators/file.d.ts.map +1 -0
  158. package/dist/validators/file.js +114 -0
  159. package/dist/validators/file.js.map +1 -0
  160. package/dist/validators/function.d.ts +26 -0
  161. package/dist/validators/function.d.ts.map +1 -0
  162. package/dist/validators/function.js +45 -0
  163. package/dist/validators/function.js.map +1 -0
  164. package/dist/validators/hex.d.ts.map +1 -1
  165. package/dist/validators/hex.js +3 -2
  166. package/dist/validators/hex.js.map +1 -1
  167. package/dist/validators/index.d.ts +18 -1
  168. package/dist/validators/index.d.ts.map +1 -1
  169. package/dist/validators/index.js +16 -1
  170. package/dist/validators/index.js.map +1 -1
  171. package/dist/validators/intersection.d.ts.map +1 -1
  172. package/dist/validators/intersection.js +15 -8
  173. package/dist/validators/intersection.js.map +1 -1
  174. package/dist/validators/json.d.ts +26 -0
  175. package/dist/validators/json.d.ts.map +1 -0
  176. package/dist/validators/json.js +64 -0
  177. package/dist/validators/json.js.map +1 -0
  178. package/dist/validators/lazy.d.ts +28 -0
  179. package/dist/validators/lazy.d.ts.map +1 -0
  180. package/dist/validators/lazy.js +42 -0
  181. package/dist/validators/lazy.js.map +1 -0
  182. package/dist/validators/literal.js +1 -1
  183. package/dist/validators/map.js +1 -1
  184. package/dist/validators/nan.d.ts +17 -0
  185. package/dist/validators/nan.d.ts.map +1 -0
  186. package/dist/validators/nan.js +32 -0
  187. package/dist/validators/nan.js.map +1 -0
  188. package/dist/validators/never.js +1 -1
  189. package/dist/validators/null.d.ts +16 -0
  190. package/dist/validators/null.d.ts.map +1 -0
  191. package/dist/validators/null.js +31 -0
  192. package/dist/validators/null.js.map +1 -0
  193. package/dist/validators/number.d.ts +22 -0
  194. package/dist/validators/number.d.ts.map +1 -1
  195. package/dist/validators/number.js +56 -4
  196. package/dist/validators/number.js.map +1 -1
  197. package/dist/validators/object.d.ts +37 -0
  198. package/dist/validators/object.d.ts.map +1 -1
  199. package/dist/validators/object.js +183 -14
  200. package/dist/validators/object.js.map +1 -1
  201. package/dist/validators/record.d.ts +15 -2
  202. package/dist/validators/record.d.ts.map +1 -1
  203. package/dist/validators/record.js +77 -1
  204. package/dist/validators/record.js.map +1 -1
  205. package/dist/validators/set.js +1 -1
  206. package/dist/validators/string-bool.d.ts +61 -0
  207. package/dist/validators/string-bool.d.ts.map +1 -0
  208. package/dist/validators/string-bool.js +127 -0
  209. package/dist/validators/string-bool.js.map +1 -0
  210. package/dist/validators/string-formats.d.ts +97 -0
  211. package/dist/validators/string-formats.d.ts.map +1 -0
  212. package/dist/validators/string-formats.js +120 -0
  213. package/dist/validators/string-formats.js.map +1 -0
  214. package/dist/validators/string.d.ts.map +1 -1
  215. package/dist/validators/string.js +16 -5
  216. package/dist/validators/string.js.map +1 -1
  217. package/dist/validators/symbol.js +1 -1
  218. package/dist/validators/template-literal.d.ts +32 -0
  219. package/dist/validators/template-literal.d.ts.map +1 -0
  220. package/dist/validators/template-literal.js +101 -0
  221. package/dist/validators/template-literal.js.map +1 -0
  222. package/dist/validators/tuple.js +1 -1
  223. package/dist/validators/uint8array.d.ts +21 -4
  224. package/dist/validators/uint8array.d.ts.map +1 -1
  225. package/dist/validators/uint8array.js +34 -23
  226. package/dist/validators/uint8array.js.map +1 -1
  227. package/dist/validators/undefined.d.ts +16 -0
  228. package/dist/validators/undefined.d.ts.map +1 -0
  229. package/dist/validators/undefined.js +31 -0
  230. package/dist/validators/undefined.js.map +1 -0
  231. package/dist/validators/union.d.ts +3 -0
  232. package/dist/validators/union.d.ts.map +1 -1
  233. package/dist/validators/union.js +46 -41
  234. package/dist/validators/union.js.map +1 -1
  235. package/dist/validators/void.js +1 -1
  236. package/dist/validators/xor.d.ts +23 -0
  237. package/dist/validators/xor.d.ts.map +1 -0
  238. package/dist/validators/xor.js +64 -0
  239. package/dist/validators/xor.js.map +1 -0
  240. package/package.json +2 -2
  241. package/dist/index-new.d.ts.map +0 -1
  242. package/dist/locales.d.ts +0 -54
  243. package/dist/locales.d.ts.map +0 -1
  244. package/dist/locales.js +0 -732
  245. package/dist/locales.js.map +0 -1
  246. package/dist/validators/object-optimized.d.ts +0 -23
  247. package/dist/validators/object-optimized.d.ts.map +0 -1
  248. package/dist/validators/object-optimized.js +0 -179
  249. package/dist/validators/object-optimized.js.map +0 -1
  250. package/dist/validators/object-ultra.d.ts +0 -34
  251. package/dist/validators/object-ultra.d.ts.map +0 -1
  252. package/dist/validators/object-ultra.js +0 -175
  253. package/dist/validators/object-ultra.js.map +0 -1
  254. package/dist/validators/string-ultra.d.ts +0 -49
  255. package/dist/validators/string-ultra.d.ts.map +0 -1
  256. package/dist/validators/string-ultra.js +0 -217
  257. package/dist/validators/string-ultra.js.map +0 -1
  258. package/dist/validators/union-optimized.d.ts +0 -15
  259. package/dist/validators/union-optimized.d.ts.map +0 -1
  260. package/dist/validators/union-optimized.js +0 -92
  261. package/dist/validators/union-optimized.js.map +0 -1
@@ -1,5 +1,14 @@
1
1
  import { VldBase, VldOptional } from './base.js';
2
- import { getMessages } from '../locales.js';
2
+ import { getMessages } from '../locales/index.js';
3
+ import { VldString } from './string.js';
4
+ import { VldNumber } from './number.js';
5
+ import { VldBoolean } from './boolean.js';
6
+ import { VldDate } from './date.js';
7
+ import { VldEnum } from './enum.js';
8
+ import { VldCoerceString } from '../coercion/string.js';
9
+ import { VldCoerceNumber } from '../coercion/number.js';
10
+ import { VldCoerceBoolean } from '../coercion/boolean.js';
11
+ import { VldCoerceDate } from '../coercion/date.js';
3
12
  /**
4
13
  * Optimized immutable object validator with chainable methods
5
14
  * Features pre-computed keys and Set-based lookups for better performance
@@ -37,9 +46,25 @@ export class VldObject extends VldBase {
37
46
  const key = this.shapeKeys[i];
38
47
  const validator = this.config.shape[key];
39
48
  const fieldValue = obj[key];
40
- // Inline fast-path validation for common types
41
- const validatorType = validator.constructor.name;
42
- if (validatorType === 'VldString') {
49
+ // BUG-NEW-002 FIX: Use instanceof instead of constructor.name
50
+ // constructor.name breaks in minified builds where class names become 'a', 'b', etc.
51
+ // instanceof checks are reliable regardless of minification
52
+ //
53
+ // Note: Coercion validators extend their base validators, so we need to check for
54
+ // coercion types first (more specific) before checking base types
55
+ // Check for coercion validators first - they need full safeParse for type conversion
56
+ if (validator instanceof VldCoerceString ||
57
+ validator instanceof VldCoerceNumber ||
58
+ validator instanceof VldCoerceBoolean ||
59
+ validator instanceof VldCoerceDate) {
60
+ // Coercion validators need safeParse to handle type conversion
61
+ const parseResult = validator.safeParse(fieldValue);
62
+ if (!parseResult.success) {
63
+ throw new Error(getMessages().objectField(key, parseResult.error.message));
64
+ }
65
+ result[key] = parseResult.data;
66
+ }
67
+ else if (validator instanceof VldString) {
43
68
  // For string with validations, use safeParse to handle email, regex etc.
44
69
  const parseResult = validator.safeParse(fieldValue);
45
70
  if (!parseResult.success) {
@@ -47,19 +72,19 @@ export class VldObject extends VldBase {
47
72
  }
48
73
  result[key] = parseResult.data;
49
74
  }
50
- else if (validatorType === 'VldNumber') {
75
+ else if (validator instanceof VldNumber) {
51
76
  if (typeof fieldValue !== 'number' || isNaN(fieldValue)) {
52
77
  throw new Error(getMessages().objectField(key, getMessages().invalidNumber));
53
78
  }
54
79
  result[key] = fieldValue;
55
80
  }
56
- else if (validatorType === 'VldBoolean') {
81
+ else if (validator instanceof VldBoolean) {
57
82
  if (typeof fieldValue !== 'boolean') {
58
83
  throw new Error(getMessages().objectField(key, getMessages().invalidBoolean));
59
84
  }
60
85
  result[key] = fieldValue;
61
86
  }
62
- else if (validatorType === 'VldDate') {
87
+ else if (validator instanceof VldDate) {
63
88
  // Use the actual validator for Date parsing (handles string conversion)
64
89
  const parseResult = validator.safeParse(fieldValue);
65
90
  if (!parseResult.success) {
@@ -89,18 +114,28 @@ export class VldObject extends VldBase {
89
114
  throw new Error(getMessages().unexpectedKeys(extraKeys));
90
115
  }
91
116
  }
92
- // Handle passthrough mode - optimized with prototype pollution protection
117
+ // Handle passthrough mode - optimized with comprehensive prototype pollution protection
93
118
  if (this.config.passthrough) {
94
- const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];
95
119
  const objKeys = Object.keys(obj);
96
120
  for (let i = 0; i < objKeys.length; i++) {
97
121
  const key = objKeys[i];
98
122
  // Skip dangerous keys to prevent prototype pollution
99
- if (!this.shapeKeysSet.has(key) && !DANGEROUS_KEYS.includes(key)) {
123
+ if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
100
124
  result[key] = obj[key];
101
125
  }
102
126
  }
103
127
  }
128
+ // Handle catchall - validate extra keys with catchall validator
129
+ if (this.config.catchall) {
130
+ const objKeys = Object.keys(obj);
131
+ for (let i = 0; i < objKeys.length; i++) {
132
+ const key = objKeys[i];
133
+ // Skip keys already in shape and dangerous keys
134
+ if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
135
+ result[key] = this.config.catchall.parse(obj[key]);
136
+ }
137
+ }
138
+ }
104
139
  return result;
105
140
  }
106
141
  /**
@@ -149,20 +184,91 @@ export class VldObject extends VldBase {
149
184
  };
150
185
  }
151
186
  }
152
- // Handle passthrough mode with prototype pollution protection
187
+ // Handle passthrough mode with comprehensive prototype pollution protection
153
188
  if (this.config.passthrough) {
154
- const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];
155
189
  const objKeys = Object.keys(obj);
156
190
  for (let i = 0; i < objKeys.length; i++) {
157
191
  const key = objKeys[i];
158
192
  // Skip dangerous keys to prevent prototype pollution
159
- if (!this.shapeKeysSet.has(key) && !DANGEROUS_KEYS.includes(key)) {
193
+ if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
160
194
  result[key] = obj[key];
161
195
  }
162
196
  }
163
197
  }
198
+ // Handle catchall - validate extra keys with catchall validator
199
+ if (this.config.catchall) {
200
+ const objKeys = Object.keys(obj);
201
+ for (let i = 0; i < objKeys.length; i++) {
202
+ const key = objKeys[i];
203
+ // Skip keys already in shape and dangerous keys
204
+ if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
205
+ const catchallResult = this.config.catchall.safeParse(obj[key]);
206
+ if (!catchallResult.success) {
207
+ return {
208
+ success: false,
209
+ error: new Error(getMessages().objectField(key, catchallResult.error.message))
210
+ };
211
+ }
212
+ result[key] = catchallResult.data;
213
+ }
214
+ }
215
+ }
164
216
  return { success: true, data: result };
165
217
  }
218
+ /**
219
+ * Comprehensive prototype pollution protection
220
+ * Checks for dangerous keys that could modify Object.prototype
221
+ */
222
+ isDangerousKey(key) {
223
+ // Direct dangerous keys
224
+ const directDangerousKeys = ['__proto__', 'constructor', 'prototype'];
225
+ if (directDangerousKeys.includes(key)) {
226
+ return true;
227
+ }
228
+ // Nested prototype manipulation vectors
229
+ // These patterns could allow prototype pollution through nested access
230
+ const nestedPatterns = [
231
+ 'constructor.prototype',
232
+ '__proto__.toString',
233
+ 'prototype.constructor',
234
+ '__defineGetter__',
235
+ '__defineSetter__',
236
+ '__lookupGetter__',
237
+ '__lookupSetter__'
238
+ ];
239
+ // Check for nested patterns
240
+ for (const pattern of nestedPatterns) {
241
+ if (key.includes(pattern)) {
242
+ return true;
243
+ }
244
+ }
245
+ // Check for property access chains that could lead to prototype pollution
246
+ // This covers patterns like "x.constructor.prototype.polluted"
247
+ const dangerousChains = [
248
+ 'constructor.',
249
+ '__proto__.',
250
+ 'prototype.'
251
+ ];
252
+ for (const chain of dangerousChains) {
253
+ if (key.includes(chain)) {
254
+ return true;
255
+ }
256
+ }
257
+ // Additional protection: reject keys that could be used for property shadowing
258
+ const shadowingPatterns = [
259
+ 'hasOwnProperty',
260
+ 'toString',
261
+ 'valueOf',
262
+ 'isPrototypeOf',
263
+ 'propertyIsEnumerable'
264
+ ];
265
+ for (const pattern of shadowingPatterns) {
266
+ if (key === pattern || key.includes(`.${pattern}`)) {
267
+ return true;
268
+ }
269
+ }
270
+ return false;
271
+ }
166
272
  /**
167
273
  * Create a new validator in strict mode (no extra keys allowed)
168
274
  */
@@ -274,7 +380,12 @@ export class VldObject extends VldBase {
274
380
  const validator = this.config.shape[key];
275
381
  // If it's optional, unwrap it
276
382
  if (validator instanceof VldOptional) {
277
- requiredShape[key] = validator.baseValidator;
383
+ // BUG-001 FIX: Add defensive check for baseValidator property
384
+ const unwrapped = validator.baseValidator;
385
+ if (!unwrapped || typeof unwrapped.parse !== 'function') {
386
+ throw new Error(`Invalid VldOptional structure for field "${key}": missing or invalid baseValidator`);
387
+ }
388
+ requiredShape[key] = unwrapped;
278
389
  }
279
390
  else {
280
391
  requiredShape[key] = validator;
@@ -285,5 +396,63 @@ export class VldObject extends VldBase {
285
396
  shape: requiredShape
286
397
  });
287
398
  }
399
+ /**
400
+ * Create a new validator with a catchall validator for extra keys
401
+ * Zod 4 API parity - validates unknown keys with provided schema
402
+ */
403
+ catchall(schema) {
404
+ return new VldObject({
405
+ ...this.config,
406
+ catchall: schema,
407
+ passthrough: false // catchall overrides passthrough
408
+ });
409
+ }
410
+ /**
411
+ * Access the inner shape schemas
412
+ * Zod 4 API parity - returns the shape object
413
+ */
414
+ get shape() {
415
+ return this.config.shape;
416
+ }
417
+ /**
418
+ * Create an enum validator from object keys
419
+ * Zod 4 API parity - creates literal union of keys
420
+ */
421
+ keyof() {
422
+ const keys = Object.keys(this.config.shape);
423
+ if (keys.length === 0) {
424
+ throw new Error('Cannot create keyof enum from empty object');
425
+ }
426
+ return VldEnum.create(keys);
427
+ }
428
+ /**
429
+ * Type-safe extend that throws an error if any key already exists
430
+ * Zod 4 API parity - prevents accidental field override
431
+ * @param extension The extension shape to add
432
+ * @returns A new validator with extended shape
433
+ * @throws {Error} If any extension key already exists in the shape
434
+ * @example
435
+ * const base = v.object({ name: v.string() });
436
+ * const extended = base.safeExtend({ age: v.number() }); // OK
437
+ * const invalid = base.safeExtend({ name: v.number() }); // Throws error
438
+ */
439
+ safeExtend(extension) {
440
+ // Check for overlapping keys
441
+ const existingKeys = new Set(Object.keys(this.config.shape));
442
+ const extensionKeys = Object.keys(extension);
443
+ const overlappingKeys = [];
444
+ for (const key of extensionKeys) {
445
+ if (existingKeys.has(key)) {
446
+ overlappingKeys.push(key);
447
+ }
448
+ }
449
+ if (overlappingKeys.length > 0) {
450
+ throw new Error(`safeExtend: Cannot override existing keys: ${overlappingKeys.join(', ')}. Use extend() if you want to override.`);
451
+ }
452
+ return new VldObject({
453
+ ...this.config,
454
+ shape: { ...this.config.shape, ...extension }
455
+ });
456
+ }
288
457
  }
289
458
  //# sourceMappingURL=object.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"object.js","sourceRoot":"","sources":["../../src/validators/object.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYzC;;;GAGG;AACH,MAAM,OAAO,SAAyC,SAAQ,OAAmB;IAK/E;;OAEG;IACH,YAAoB,MAAgC;QAClD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,2CAA2C;QAC3C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CACX,KAAiD;QAEjD,OAAO,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,0DAA0D;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,+CAA+C;YAC/C,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC;YAEjD,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;gBAClC,yEAAyE;gBACzE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;gBACzC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,aAAa,KAAK,YAAY,EAAE,CAAC;gBAC1C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACvC,wEAAwE;gBACxE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,+CAA+C;gBAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAAc;QACtB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC;aAC1E,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,sBAAsB;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAEpD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;iBAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAW,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAgB;QACrB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAQ,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,gBAAgB,GAAQ,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBACnC,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,WAAW,GAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAU,CAAC,EAAE,CAAC;gBAChC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,SAAqD;QAErD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAS;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CACH,KAAmB;QAEnB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAS;SAC9D,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,aAAa,GAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,8BAA8B;YAC9B,IAAI,SAAS,YAAY,WAAW,EAAE,CAAC;gBACrC,aAAa,CAAC,GAAG,CAAC,GAAI,SAAiB,CAAC,aAAa,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,aAAa;SACrB,CAAQ,CAAC;IACZ,CAAC;CACF","sourcesContent":["import { VldBase, ParseResult, VldOptional } from './base';\nimport { getMessages } from '../locales';\n\n/**\n * Configuration for object validator\n */\ninterface ObjectValidatorConfig<T extends Record<string, any>> {\n readonly shape: { readonly [K in keyof T]: VldBase<unknown, T[K]> };\n readonly strict?: boolean;\n readonly passthrough?: boolean;\n readonly errorMessage?: string;\n}\n\n/**\n * Optimized immutable object validator with chainable methods\n * Features pre-computed keys and Set-based lookups for better performance\n */\nexport class VldObject<T extends Record<string, any>> extends VldBase<unknown, T> {\n private readonly config: ObjectValidatorConfig<T>;\n private readonly shapeKeys: string[];\n private readonly shapeKeysSet: Set<string>;\n \n /**\n * Private constructor to enforce immutability\n */\n private constructor(config: ObjectValidatorConfig<T>) {\n super();\n this.config = config;\n // Pre-compute shape keys for faster access\n this.shapeKeys = Object.keys(config.shape);\n this.shapeKeysSet = new Set(this.shapeKeys);\n }\n \n /**\n * Create a new object validator\n */\n static create<T extends Record<string, any>>(\n shape: { [K in keyof T]: VldBase<unknown, T[K]> }\n ): VldObject<T> {\n return new VldObject({ shape });\n }\n \n /**\n * Parse and validate an object value\n * Ultra-optimized with inline type checks and minimal overhead\n */\n parse(value: unknown): T {\n // Fast type check\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n throw new Error(this.config.errorMessage || getMessages().invalidObject);\n }\n \n const obj = value as Record<string, unknown>;\n const result: any = {};\n \n // Ultra-optimized field validation with inline fast paths\n for (let i = 0; i < this.shapeKeys.length; i++) {\n const key = this.shapeKeys[i];\n const validator = this.config.shape[key];\n const fieldValue = obj[key];\n \n // Inline fast-path validation for common types\n const validatorType = validator.constructor.name;\n \n if (validatorType === 'VldString') {\n // For string with validations, use safeParse to handle email, regex etc.\n const parseResult = validator.safeParse(fieldValue);\n if (!parseResult.success) {\n throw new Error(getMessages().objectField(key, parseResult.error.message));\n }\n result[key] = parseResult.data;\n } else if (validatorType === 'VldNumber') {\n if (typeof fieldValue !== 'number' || isNaN(fieldValue)) {\n throw new Error(getMessages().objectField(key, getMessages().invalidNumber));\n }\n result[key] = fieldValue;\n } else if (validatorType === 'VldBoolean') {\n if (typeof fieldValue !== 'boolean') {\n throw new Error(getMessages().objectField(key, getMessages().invalidBoolean));\n }\n result[key] = fieldValue;\n } else if (validatorType === 'VldDate') {\n // Use the actual validator for Date parsing (handles string conversion)\n const parseResult = validator.safeParse(fieldValue);\n if (!parseResult.success) {\n throw new Error(getMessages().objectField(key, parseResult.error.message));\n }\n result[key] = parseResult.data;\n } else {\n // Fallback to safeParse for complex validators\n const parseResult = validator.safeParse(fieldValue);\n if (!parseResult.success) {\n throw new Error(getMessages().objectField(key, parseResult.error.message));\n }\n result[key] = parseResult.data;\n }\n }\n \n // Handle strict mode - optimized with Set\n if (this.config.strict) {\n const objKeys = Object.keys(obj);\n const extraKeys: string[] = [];\n \n for (let i = 0; i < objKeys.length; i++) {\n if (!this.shapeKeysSet.has(objKeys[i])) {\n extraKeys.push(objKeys[i]);\n }\n }\n \n if (extraKeys.length > 0) {\n throw new Error(getMessages().unexpectedKeys(extraKeys));\n }\n }\n \n // Handle passthrough mode - optimized with prototype pollution protection\n if (this.config.passthrough) {\n const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];\n const objKeys = Object.keys(obj);\n for (let i = 0; i < objKeys.length; i++) {\n const key = objKeys[i];\n // Skip dangerous keys to prevent prototype pollution\n if (!this.shapeKeysSet.has(key) && !DANGEROUS_KEYS.includes(key)) {\n result[key] = obj[key];\n }\n }\n }\n \n return result as T;\n }\n \n /**\n * Safely parse and validate an object value\n * Optimized version using pre-computed keys\n */\n safeParse(value: unknown): ParseResult<T> {\n // Fast type check\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n return {\n success: false,\n error: new Error(this.config.errorMessage || getMessages().invalidObject)\n };\n }\n \n const obj = value as Record<string, unknown>;\n const result: any = {};\n \n // Validate all fields\n for (let i = 0; i < this.shapeKeys.length; i++) {\n const key = this.shapeKeys[i];\n const validator = this.config.shape[key];\n const fieldValue = obj[key];\n \n const parseResult = validator.safeParse(fieldValue);\n \n if (parseResult.success) {\n result[key] = parseResult.data;\n } else {\n return {\n success: false,\n error: new Error(getMessages().objectField(key, parseResult.error.message))\n };\n }\n }\n \n // Handle strict mode\n if (this.config.strict) {\n const objKeys = Object.keys(obj);\n const extraKeys: string[] = [];\n \n for (let i = 0; i < objKeys.length; i++) {\n if (!this.shapeKeysSet.has(objKeys[i])) {\n extraKeys.push(objKeys[i]);\n }\n }\n \n if (extraKeys.length > 0) {\n return {\n success: false,\n error: new Error(getMessages().unexpectedKeys(extraKeys))\n };\n }\n }\n \n // Handle passthrough mode with prototype pollution protection\n if (this.config.passthrough) {\n const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];\n const objKeys = Object.keys(obj);\n for (let i = 0; i < objKeys.length; i++) {\n const key = objKeys[i];\n // Skip dangerous keys to prevent prototype pollution\n if (!this.shapeKeysSet.has(key) && !DANGEROUS_KEYS.includes(key)) {\n result[key] = obj[key];\n }\n }\n }\n \n return { success: true, data: result as T };\n }\n \n /**\n * Create a new validator in strict mode (no extra keys allowed)\n */\n strict(message?: string): VldObject<T> {\n return new VldObject({\n ...this.config,\n strict: true,\n passthrough: false,\n errorMessage: message\n });\n }\n \n /**\n * Create a new validator in passthrough mode (extra keys are preserved)\n */\n passthrough(): VldObject<T> {\n return new VldObject({\n ...this.config,\n strict: false,\n passthrough: true\n });\n }\n \n /**\n * Create a new validator with all fields optional\n */\n partial(): VldObject<{ [K in keyof T]?: T[K] }> {\n const partialShape: any = {};\n for (const key in this.config.shape) {\n partialShape[key] = new VldOptional(this.config.shape[key]);\n }\n return new VldObject({ \n ...this.config, \n shape: partialShape \n }) as any;\n }\n \n /**\n * Create a new validator with deep partial (nested objects also partial)\n */\n deepPartial(): VldObject<any> {\n const deepPartialShape: any = {};\n for (const key in this.config.shape) {\n const validator = this.config.shape[key];\n if (validator instanceof VldObject) {\n deepPartialShape[key] = new VldOptional(validator.deepPartial());\n } else {\n deepPartialShape[key] = new VldOptional(validator);\n }\n }\n return new VldObject({ \n ...this.config, \n shape: deepPartialShape \n });\n }\n \n /**\n * Create a new validator with only specified keys\n */\n pick<K extends keyof T>(...keys: K[]): VldObject<Pick<T, K>> {\n const pickedShape: any = {};\n for (const key of keys) {\n if (key in this.config.shape) {\n pickedShape[key] = this.config.shape[key];\n }\n }\n return new VldObject({ \n ...this.config, \n shape: pickedShape \n });\n }\n \n /**\n * Create a new validator without specified keys\n */\n omit<K extends keyof T>(...keys: K[]): VldObject<Omit<T, K>> {\n const omittedShape: any = {};\n const keysToOmit = new Set(keys);\n for (const key in this.config.shape) {\n if (!keysToOmit.has(key as any)) {\n omittedShape[key] = this.config.shape[key];\n }\n }\n return new VldObject({ \n ...this.config, \n shape: omittedShape \n });\n }\n \n /**\n * Create a new validator with additional fields\n */\n extend<U extends Record<string, any>>(\n extension: { [K in keyof U]: VldBase<unknown, U[K]> }\n ): VldObject<T & U> {\n return new VldObject({\n ...this.config,\n shape: { ...this.config.shape, ...extension } as any\n });\n }\n \n /**\n * Create a new validator by merging with another object validator\n */\n merge<U extends Record<string, any>>(\n other: VldObject<U>\n ): VldObject<T & U> {\n return new VldObject({\n ...this.config,\n shape: { ...this.config.shape, ...other.config.shape } as any\n });\n }\n \n /**\n * Create a new validator with all fields required (removes optional)\n */\n required(): VldObject<{ [K in keyof T]-?: T[K] }> {\n const requiredShape: any = {};\n for (const key in this.config.shape) {\n const validator = this.config.shape[key];\n // If it's optional, unwrap it\n if (validator instanceof VldOptional) {\n requiredShape[key] = (validator as any).baseValidator;\n } else {\n requiredShape[key] = validator;\n }\n }\n return new VldObject({ \n ...this.config, \n shape: requiredShape \n }) as any;\n }\n}"]}
1
+ {"version":3,"file":"object.js","sourceRoot":"","sources":["../../src/validators/object.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAajD;;;GAGG;AACH,MAAM,OAAO,SAAyC,SAAQ,OAAmB;IAK/E;;OAEG;IACH,YAAoB,MAAgC;QAClD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,2CAA2C;QAC3C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CACX,KAAiD;QAEjD,OAAO,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,0DAA0D;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,8DAA8D;YAC9D,qFAAqF;YACrF,4DAA4D;YAC5D,EAAE;YACF,kFAAkF;YAClF,kEAAkE;YAElE,qFAAqF;YACrF,IAAI,SAAS,YAAY,eAAe;gBACpC,SAAS,YAAY,eAAe;gBACpC,SAAS,YAAY,gBAAgB;gBACrC,SAAS,YAAY,aAAa,EAAE,CAAC;gBACvC,+DAA+D;gBAC/D,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBAC1C,yEAAyE;gBACzE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,SAAS,YAAY,UAAU,EAAE,CAAC;gBAC3C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,SAAS,YAAY,OAAO,EAAE,CAAC;gBACxC,wEAAwE;gBACxE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,+CAA+C;gBAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,gDAAgD;gBAChD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAAc;QACtB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC;aAC1E,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,sBAAsB;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAEpD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;iBAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,gDAAgD;gBAChD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;oBAChE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;wBAC5B,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;yBAC/E,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAW,EAAE,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,GAAW;QAChC,wBAAwB;QACxB,MAAM,mBAAmB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wCAAwC;QACxC,uEAAuE;QACvE,MAAM,cAAc,GAAG;YACrB,uBAAuB;YACvB,oBAAoB;YACpB,uBAAuB;YACvB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;SACnB,CAAC;QAEF,4BAA4B;QAC5B,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,eAAe,GAAG;YACtB,cAAc;YACd,YAAY;YACZ,YAAY;SACb,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,iBAAiB,GAAG;YACxB,gBAAgB;YAChB,UAAU;YACV,SAAS;YACT,eAAe;YACf,sBAAsB;SACvB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAgB;QACrB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAQ,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,gBAAgB,GAAQ,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBACnC,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,WAAW,GAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAU,CAAC,EAAE,CAAC;gBAChC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,SAAqD;QAErD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAS;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CACH,KAAmB;QAEnB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAS;SAC9D,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,aAAa,GAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,8BAA8B;YAC9B,IAAI,SAAS,YAAY,WAAW,EAAE,CAAC;gBACrC,8DAA8D;gBAC9D,MAAM,SAAS,GAAI,SAAiB,CAAC,aAAa,CAAC;gBACnD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,qCAAqC,CAAC,CAAC;gBACxG,CAAC;gBACD,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,aAAa;SACrB,CAAQ,CAAC;IACZ,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAI,MAA2B;QACrC,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,KAAK,CAAC,iCAAiC;SACrD,CAAQ,CAAC;IACZ,CAAC;IAED;;;OAGG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAA6B,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;OAUG;IACH,UAAU,CACR,SAAqD;QAErD,6BAA6B;QAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,8CAA8C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAClH,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAS;SACrD,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { VldBase, ParseResult, VldOptional } from './base';\r\nimport { getMessages } from '../locales';\r\nimport { VldString } from './string';\r\nimport { VldNumber } from './number';\r\nimport { VldBoolean } from './boolean';\r\nimport { VldDate } from './date';\r\nimport { VldEnum } from './enum';\r\nimport { VldCoerceString } from '../coercion/string';\r\nimport { VldCoerceNumber } from '../coercion/number';\r\nimport { VldCoerceBoolean } from '../coercion/boolean';\r\nimport { VldCoerceDate } from '../coercion/date';\r\n\r\n/**\r\n * Configuration for object validator\r\n */\r\ninterface ObjectValidatorConfig<T extends Record<string, any>> {\r\n readonly shape: { readonly [K in keyof T]: VldBase<unknown, T[K]> };\r\n readonly strict?: boolean;\r\n readonly passthrough?: boolean;\r\n readonly catchall?: VldBase<unknown, any>;\r\n readonly errorMessage?: string;\r\n}\r\n\r\n/**\r\n * Optimized immutable object validator with chainable methods\r\n * Features pre-computed keys and Set-based lookups for better performance\r\n */\r\nexport class VldObject<T extends Record<string, any>> extends VldBase<unknown, T> {\r\n private readonly config: ObjectValidatorConfig<T>;\r\n private readonly shapeKeys: string[];\r\n private readonly shapeKeysSet: Set<string>;\r\n \r\n /**\r\n * Private constructor to enforce immutability\r\n */\r\n private constructor(config: ObjectValidatorConfig<T>) {\r\n super();\r\n this.config = config;\r\n // Pre-compute shape keys for faster access\r\n this.shapeKeys = Object.keys(config.shape);\r\n this.shapeKeysSet = new Set(this.shapeKeys);\r\n }\r\n \r\n /**\r\n * Create a new object validator\r\n */\r\n static create<T extends Record<string, any>>(\r\n shape: { [K in keyof T]: VldBase<unknown, T[K]> }\r\n ): VldObject<T> {\r\n return new VldObject({ shape });\r\n }\r\n \r\n /**\r\n * Parse and validate an object value\r\n * Ultra-optimized with inline type checks and minimal overhead\r\n */\r\n parse(value: unknown): T {\r\n // Fast type check\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n throw new Error(this.config.errorMessage || getMessages().invalidObject);\r\n }\r\n \r\n const obj = value as Record<string, unknown>;\r\n const result: any = {};\r\n \r\n // Ultra-optimized field validation with inline fast paths\r\n for (let i = 0; i < this.shapeKeys.length; i++) {\r\n const key = this.shapeKeys[i];\r\n const validator = this.config.shape[key];\r\n const fieldValue = obj[key];\r\n\r\n // BUG-NEW-002 FIX: Use instanceof instead of constructor.name\r\n // constructor.name breaks in minified builds where class names become 'a', 'b', etc.\r\n // instanceof checks are reliable regardless of minification\r\n //\r\n // Note: Coercion validators extend their base validators, so we need to check for\r\n // coercion types first (more specific) before checking base types\r\n\r\n // Check for coercion validators first - they need full safeParse for type conversion\r\n if (validator instanceof VldCoerceString ||\r\n validator instanceof VldCoerceNumber ||\r\n validator instanceof VldCoerceBoolean ||\r\n validator instanceof VldCoerceDate) {\r\n // Coercion validators need safeParse to handle type conversion\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n } else if (validator instanceof VldString) {\r\n // For string with validations, use safeParse to handle email, regex etc.\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n } else if (validator instanceof VldNumber) {\r\n if (typeof fieldValue !== 'number' || isNaN(fieldValue)) {\r\n throw new Error(getMessages().objectField(key, getMessages().invalidNumber));\r\n }\r\n result[key] = fieldValue;\r\n } else if (validator instanceof VldBoolean) {\r\n if (typeof fieldValue !== 'boolean') {\r\n throw new Error(getMessages().objectField(key, getMessages().invalidBoolean));\r\n }\r\n result[key] = fieldValue;\r\n } else if (validator instanceof VldDate) {\r\n // Use the actual validator for Date parsing (handles string conversion)\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n } else {\r\n // Fallback to safeParse for complex validators\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n }\r\n }\r\n \r\n // Handle strict mode - optimized with Set\r\n if (this.config.strict) {\r\n const objKeys = Object.keys(obj);\r\n const extraKeys: string[] = [];\r\n\r\n for (let i = 0; i < objKeys.length; i++) {\r\n if (!this.shapeKeysSet.has(objKeys[i])) {\r\n extraKeys.push(objKeys[i]);\r\n }\r\n }\r\n\r\n if (extraKeys.length > 0) {\r\n throw new Error(getMessages().unexpectedKeys(extraKeys));\r\n }\r\n }\r\n\r\n // Handle passthrough mode - optimized with comprehensive prototype pollution protection\r\n if (this.config.passthrough) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip dangerous keys to prevent prototype pollution\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n result[key] = obj[key];\r\n }\r\n }\r\n }\r\n\r\n // Handle catchall - validate extra keys with catchall validator\r\n if (this.config.catchall) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip keys already in shape and dangerous keys\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n result[key] = this.config.catchall.parse(obj[key]);\r\n }\r\n }\r\n }\r\n\r\n return result as T;\r\n }\r\n \r\n /**\r\n * Safely parse and validate an object value\r\n * Optimized version using pre-computed keys\r\n */\r\n safeParse(value: unknown): ParseResult<T> {\r\n // Fast type check\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n return {\r\n success: false,\r\n error: new Error(this.config.errorMessage || getMessages().invalidObject)\r\n };\r\n }\r\n \r\n const obj = value as Record<string, unknown>;\r\n const result: any = {};\r\n \r\n // Validate all fields\r\n for (let i = 0; i < this.shapeKeys.length; i++) {\r\n const key = this.shapeKeys[i];\r\n const validator = this.config.shape[key];\r\n const fieldValue = obj[key];\r\n \r\n const parseResult = validator.safeParse(fieldValue);\r\n \r\n if (parseResult.success) {\r\n result[key] = parseResult.data;\r\n } else {\r\n return {\r\n success: false,\r\n error: new Error(getMessages().objectField(key, parseResult.error.message))\r\n };\r\n }\r\n }\r\n \r\n // Handle strict mode\r\n if (this.config.strict) {\r\n const objKeys = Object.keys(obj);\r\n const extraKeys: string[] = [];\r\n\r\n for (let i = 0; i < objKeys.length; i++) {\r\n if (!this.shapeKeysSet.has(objKeys[i])) {\r\n extraKeys.push(objKeys[i]);\r\n }\r\n }\r\n\r\n if (extraKeys.length > 0) {\r\n return {\r\n success: false,\r\n error: new Error(getMessages().unexpectedKeys(extraKeys))\r\n };\r\n }\r\n }\r\n\r\n // Handle passthrough mode with comprehensive prototype pollution protection\r\n if (this.config.passthrough) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip dangerous keys to prevent prototype pollution\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n result[key] = obj[key];\r\n }\r\n }\r\n }\r\n\r\n // Handle catchall - validate extra keys with catchall validator\r\n if (this.config.catchall) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip keys already in shape and dangerous keys\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n const catchallResult = this.config.catchall.safeParse(obj[key]);\r\n if (!catchallResult.success) {\r\n return {\r\n success: false,\r\n error: new Error(getMessages().objectField(key, catchallResult.error.message))\r\n };\r\n }\r\n result[key] = catchallResult.data;\r\n }\r\n }\r\n }\r\n\r\n return { success: true, data: result as T };\r\n }\r\n\r\n /**\r\n * Comprehensive prototype pollution protection\r\n * Checks for dangerous keys that could modify Object.prototype\r\n */\r\n private isDangerousKey(key: string): boolean {\r\n // Direct dangerous keys\r\n const directDangerousKeys = ['__proto__', 'constructor', 'prototype'];\r\n if (directDangerousKeys.includes(key)) {\r\n return true;\r\n }\r\n\r\n // Nested prototype manipulation vectors\r\n // These patterns could allow prototype pollution through nested access\r\n const nestedPatterns = [\r\n 'constructor.prototype',\r\n '__proto__.toString',\r\n 'prototype.constructor',\r\n '__defineGetter__',\r\n '__defineSetter__',\r\n '__lookupGetter__',\r\n '__lookupSetter__'\r\n ];\r\n\r\n // Check for nested patterns\r\n for (const pattern of nestedPatterns) {\r\n if (key.includes(pattern)) {\r\n return true;\r\n }\r\n }\r\n\r\n // Check for property access chains that could lead to prototype pollution\r\n // This covers patterns like \"x.constructor.prototype.polluted\"\r\n const dangerousChains = [\r\n 'constructor.',\r\n '__proto__.',\r\n 'prototype.'\r\n ];\r\n\r\n for (const chain of dangerousChains) {\r\n if (key.includes(chain)) {\r\n return true;\r\n }\r\n }\r\n\r\n // Additional protection: reject keys that could be used for property shadowing\r\n const shadowingPatterns = [\r\n 'hasOwnProperty',\r\n 'toString',\r\n 'valueOf',\r\n 'isPrototypeOf',\r\n 'propertyIsEnumerable'\r\n ];\r\n\r\n for (const pattern of shadowingPatterns) {\r\n if (key === pattern || key.includes(`.${pattern}`)) {\r\n return true;\r\n }\r\n }\r\n\r\n return false;\r\n }\r\n \r\n /**\r\n * Create a new validator in strict mode (no extra keys allowed)\r\n */\r\n strict(message?: string): VldObject<T> {\r\n return new VldObject({\r\n ...this.config,\r\n strict: true,\r\n passthrough: false,\r\n errorMessage: message\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator in passthrough mode (extra keys are preserved)\r\n */\r\n passthrough(): VldObject<T> {\r\n return new VldObject({\r\n ...this.config,\r\n strict: false,\r\n passthrough: true\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with all fields optional\r\n */\r\n partial(): VldObject<{ [K in keyof T]?: T[K] }> {\r\n const partialShape: any = {};\r\n for (const key in this.config.shape) {\r\n partialShape[key] = new VldOptional(this.config.shape[key]);\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: partialShape \r\n }) as any;\r\n }\r\n \r\n /**\r\n * Create a new validator with deep partial (nested objects also partial)\r\n */\r\n deepPartial(): VldObject<any> {\r\n const deepPartialShape: any = {};\r\n for (const key in this.config.shape) {\r\n const validator = this.config.shape[key];\r\n if (validator instanceof VldObject) {\r\n deepPartialShape[key] = new VldOptional(validator.deepPartial());\r\n } else {\r\n deepPartialShape[key] = new VldOptional(validator);\r\n }\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: deepPartialShape \r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with only specified keys\r\n */\r\n pick<K extends keyof T>(...keys: K[]): VldObject<Pick<T, K>> {\r\n const pickedShape: any = {};\r\n for (const key of keys) {\r\n if (key in this.config.shape) {\r\n pickedShape[key] = this.config.shape[key];\r\n }\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: pickedShape \r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator without specified keys\r\n */\r\n omit<K extends keyof T>(...keys: K[]): VldObject<Omit<T, K>> {\r\n const omittedShape: any = {};\r\n const keysToOmit = new Set(keys);\r\n for (const key in this.config.shape) {\r\n if (!keysToOmit.has(key as any)) {\r\n omittedShape[key] = this.config.shape[key];\r\n }\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: omittedShape \r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with additional fields\r\n */\r\n extend<U extends Record<string, any>>(\r\n extension: { [K in keyof U]: VldBase<unknown, U[K]> }\r\n ): VldObject<T & U> {\r\n return new VldObject({\r\n ...this.config,\r\n shape: { ...this.config.shape, ...extension } as any\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator by merging with another object validator\r\n */\r\n merge<U extends Record<string, any>>(\r\n other: VldObject<U>\r\n ): VldObject<T & U> {\r\n return new VldObject({\r\n ...this.config,\r\n shape: { ...this.config.shape, ...other.config.shape } as any\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with all fields required (removes optional)\r\n */\r\n required(): VldObject<{ [K in keyof T]-?: T[K] }> {\r\n const requiredShape: any = {};\r\n for (const key in this.config.shape) {\r\n const validator = this.config.shape[key];\r\n // If it's optional, unwrap it\r\n if (validator instanceof VldOptional) {\r\n // BUG-001 FIX: Add defensive check for baseValidator property\r\n const unwrapped = (validator as any).baseValidator;\r\n if (!unwrapped || typeof unwrapped.parse !== 'function') {\r\n throw new Error(`Invalid VldOptional structure for field \"${key}\": missing or invalid baseValidator`);\r\n }\r\n requiredShape[key] = unwrapped;\r\n } else {\r\n requiredShape[key] = validator;\r\n }\r\n }\r\n return new VldObject({\r\n ...this.config,\r\n shape: requiredShape\r\n }) as any;\r\n }\r\n\r\n /**\r\n * Create a new validator with a catchall validator for extra keys\r\n * Zod 4 API parity - validates unknown keys with provided schema\r\n */\r\n catchall<U>(schema: VldBase<unknown, U>): VldObject<any> {\r\n return new VldObject({\r\n ...this.config,\r\n catchall: schema,\r\n passthrough: false // catchall overrides passthrough\r\n }) as any;\r\n }\r\n\r\n /**\r\n * Access the inner shape schemas\r\n * Zod 4 API parity - returns the shape object\r\n */\r\n get shape(): { readonly [K in keyof T]: VldBase<unknown, T[K]> } {\r\n return this.config.shape;\r\n }\r\n\r\n /**\r\n * Create an enum validator from object keys\r\n * Zod 4 API parity - creates literal union of keys\r\n */\r\n keyof(): VldEnum<[string, ...string[]]> {\r\n const keys = Object.keys(this.config.shape);\r\n if (keys.length === 0) {\r\n throw new Error('Cannot create keyof enum from empty object');\r\n }\r\n return VldEnum.create(keys as [string, ...string[]]);\r\n }\r\n\r\n /**\r\n * Type-safe extend that throws an error if any key already exists\r\n * Zod 4 API parity - prevents accidental field override\r\n * @param extension The extension shape to add\r\n * @returns A new validator with extended shape\r\n * @throws {Error} If any extension key already exists in the shape\r\n * @example\r\n * const base = v.object({ name: v.string() });\r\n * const extended = base.safeExtend({ age: v.number() }); // OK\r\n * const invalid = base.safeExtend({ name: v.number() }); // Throws error\r\n */\r\n safeExtend<U extends Record<string, any>>(\r\n extension: { [K in keyof U]: VldBase<unknown, U[K]> }\r\n ): VldObject<T & U> {\r\n // Check for overlapping keys\r\n const existingKeys = new Set(Object.keys(this.config.shape));\r\n const extensionKeys = Object.keys(extension);\r\n const overlappingKeys: string[] = [];\r\n\r\n for (const key of extensionKeys) {\r\n if (existingKeys.has(key)) {\r\n overlappingKeys.push(key);\r\n }\r\n }\r\n\r\n if (overlappingKeys.length > 0) {\r\n throw new Error(\r\n `safeExtend: Cannot override existing keys: ${overlappingKeys.join(', ')}. Use extend() if you want to override.`\r\n );\r\n }\r\n\r\n return new VldObject({\r\n ...this.config,\r\n shape: { ...this.config.shape, ...extension } as any\r\n });\r\n }\r\n}"]}
@@ -1,25 +1,38 @@
1
1
  import { VldBase, ParseResult } from './base';
2
2
  /**
3
3
  * Immutable record validator for key-value pairs
4
+ * BUG-NEW-018 FIX: Uses comprehensive dangerous key protection
4
5
  */
5
6
  export declare class VldRecord<T> extends VldBase<unknown, Record<string, T>> {
6
- private readonly valueValidator;
7
+ protected readonly valueValidator: VldBase<unknown, T>;
7
8
  private readonly errorMessage?;
8
9
  /**
9
10
  * Private constructor to enforce immutability
10
11
  */
11
- private constructor();
12
+ protected constructor(valueValidator: VldBase<unknown, T>, errorMessage?: string | undefined);
12
13
  /**
13
14
  * Create a new record validator
14
15
  */
15
16
  static create<T>(valueValidator: VldBase<unknown, T>): VldRecord<T>;
16
17
  /**
17
18
  * Parse and validate a record value
19
+ * BUG-NEW-018 FIX: Use comprehensive dangerous key protection
18
20
  */
19
21
  parse(value: unknown): Record<string, T>;
20
22
  /**
21
23
  * Safely parse and validate a record value
22
24
  */
23
25
  safeParse(value: unknown): ParseResult<Record<string, T>>;
26
+ /**
27
+ * Create a partial record variant (all keys optional)
28
+ * Similar to v.object().partial() but for records
29
+ */
30
+ partial(): VldRecord<T | undefined>;
31
+ /**
32
+ * Create a loose record variant (allows extra keys)
33
+ * Similar to v.object().passthrough() but for records
34
+ * Note: Records already allow any keys, so this mainly affects error handling
35
+ */
36
+ loose(): VldBase<unknown, Record<string, T>>;
24
37
  }
25
38
  //# sourceMappingURL=record.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG9C;;GAEG;AACH,qBAAa,SAAS,CAAC,CAAC,CAAE,SAAQ,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAKjE,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IALhC;;OAEG;IACH,OAAO;IAOP;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAInE;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAmBxC;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CAO1D"}
1
+ {"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAI9C;;;GAGG;AACH,qBAAa,SAAS,CAAC,CAAC,CAAE,SAAQ,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAKjE,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IALhC;;OAEG;IACH,SAAS,aACY,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EACrC,YAAY,CAAC,EAAE,MAAM,YAAA;IAKxC;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAInE;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAyBxC;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAQzD;;;OAGG;IACH,OAAO,IAAI,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IAKnC;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CAK7C"}
@@ -1,7 +1,9 @@
1
1
  import { VldBase } from './base.js';
2
- import { getMessages } from '../locales.js';
2
+ import { getMessages } from '../locales/index.js';
3
+ import { isDangerousKey } from '../utils/security.js';
3
4
  /**
4
5
  * Immutable record validator for key-value pairs
6
+ * BUG-NEW-018 FIX: Uses comprehensive dangerous key protection
5
7
  */
6
8
  export class VldRecord extends VldBase {
7
9
  /**
@@ -20,6 +22,7 @@ export class VldRecord extends VldBase {
20
22
  }
21
23
  /**
22
24
  * Parse and validate a record value
25
+ * BUG-NEW-018 FIX: Use comprehensive dangerous key protection
23
26
  */
24
27
  parse(value) {
25
28
  if (typeof value !== 'object' || value === null || Array.isArray(value)) {
@@ -28,6 +31,11 @@ export class VldRecord extends VldBase {
28
31
  const result = {};
29
32
  const obj = value;
30
33
  for (const [key, val] of Object.entries(obj)) {
34
+ // Skip dangerous keys to prevent prototype pollution
35
+ // Now using comprehensive protection from shared utility
36
+ if (isDangerousKey(key)) {
37
+ continue;
38
+ }
31
39
  try {
32
40
  result[key] = this.valueValidator.parse(val);
33
41
  }
@@ -48,5 +56,73 @@ export class VldRecord extends VldBase {
48
56
  return { success: false, error: error };
49
57
  }
50
58
  }
59
+ /**
60
+ * Create a partial record variant (all keys optional)
61
+ * Similar to v.object().partial() but for records
62
+ */
63
+ partial() {
64
+ const optionalValidator = this.valueValidator.optional();
65
+ return new VldRecord(optionalValidator);
66
+ }
67
+ /**
68
+ * Create a loose record variant (allows extra keys)
69
+ * Similar to v.object().passthrough() but for records
70
+ * Note: Records already allow any keys, so this mainly affects error handling
71
+ */
72
+ loose() {
73
+ // For records, "loose" means we don't throw errors for validation failures
74
+ // We return a modified version that catches validation errors
75
+ return new VldLooseRecord(this.valueValidator);
76
+ }
77
+ }
78
+ /**
79
+ * Loose record variant that allows validation failures
80
+ * Used internally by .loose() method
81
+ */
82
+ class VldLooseRecord extends VldBase {
83
+ constructor(valueValidator) {
84
+ super();
85
+ this.valueValidator = valueValidator;
86
+ }
87
+ parse(value) {
88
+ if (typeof value !== 'object' || value === null || Array.isArray(value)) {
89
+ throw new Error(getMessages().invalidRecord);
90
+ }
91
+ const result = {};
92
+ const obj = value;
93
+ for (const [key, val] of Object.entries(obj)) {
94
+ // Skip dangerous keys
95
+ if (isDangerousKey(key)) {
96
+ continue;
97
+ }
98
+ // For loose records, skip invalid values instead of throwing
99
+ const parseResult = this.valueValidator.safeParse(val);
100
+ if (parseResult.success) {
101
+ result[key] = parseResult.data;
102
+ }
103
+ }
104
+ return result;
105
+ }
106
+ safeParse(value) {
107
+ try {
108
+ return { success: true, data: this.parse(value) };
109
+ }
110
+ catch (error) {
111
+ return { success: false, error: error };
112
+ }
113
+ }
114
+ /**
115
+ * Create a partial variant (all keys optional)
116
+ */
117
+ partial() {
118
+ const optionalValidator = this.valueValidator.optional();
119
+ return new VldLooseRecord(optionalValidator);
120
+ }
121
+ /**
122
+ * Return self (already loose)
123
+ */
124
+ loose() {
125
+ return this;
126
+ }
51
127
  }
52
128
  //# sourceMappingURL=record.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,SAAa,SAAQ,OAAmC;IACnE;;OAEG;IACH,YACmB,cAAmC,EACnC,YAAqB;QAEtC,KAAK,EAAE,CAAC;QAHS,mBAAc,GAAd,cAAc,CAAqB;QACnC,iBAAY,GAAZ,YAAY,CAAS;IAGxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CAAI,cAAmC;QAClD,OAAO,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { VldBase, ParseResult } from './base';\nimport { getMessages } from '../locales';\n\n/**\n * Immutable record validator for key-value pairs\n */\nexport class VldRecord<T> extends VldBase<unknown, Record<string, T>> {\n /**\n * Private constructor to enforce immutability\n */\n private constructor(\n private readonly valueValidator: VldBase<unknown, T>,\n private readonly errorMessage?: string\n ) {\n super();\n }\n \n /**\n * Create a new record validator\n */\n static create<T>(valueValidator: VldBase<unknown, T>): VldRecord<T> {\n return new VldRecord(valueValidator);\n }\n \n /**\n * Parse and validate a record value\n */\n parse(value: unknown): Record<string, T> {\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n throw new Error(this.errorMessage || getMessages().invalidRecord);\n }\n \n const result: Record<string, T> = {};\n const obj = value as Record<string, unknown>;\n \n for (const [key, val] of Object.entries(obj)) {\n try {\n result[key] = this.valueValidator.parse(val);\n } catch (error) {\n throw new Error(getMessages().objectField(key, (error as Error).message));\n }\n }\n \n return result;\n }\n \n /**\n * Safely parse and validate a record value\n */\n safeParse(value: unknown): ParseResult<Record<string, T>> {\n try {\n return { success: true, data: this.parse(value) };\n } catch (error) {\n return { success: false, error: error as Error };\n }\n }\n}"]}
1
+ {"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;GAGG;AACH,MAAM,OAAO,SAAa,SAAQ,OAAmC;IACnE;;OAEG;IACH,YACqB,cAAmC,EACrC,YAAqB;QAEtC,KAAK,EAAE,CAAC;QAHW,mBAAc,GAAd,cAAc,CAAqB;QACrC,iBAAY,GAAZ,YAAY,CAAS;IAGxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CAAI,cAAmC;QAClD,OAAO,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,qDAAqD;YACrD,yDAAyD;YACzD,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,2EAA2E;QAC3E,8DAA8D;QAC9D,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,cAAkB,SAAQ,OAAmC;IACjE,YAA6B,cAAmC;QAC9D,KAAK,EAAE,CAAC;QADmB,mBAAc,GAAd,cAAc,CAAqB;IAEhE,CAAC;IAED,KAAK,CAAC,KAAc;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAsB,EAAuB,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,sBAAsB;YACtB,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,6DAA6D;YAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,IAAI,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF","sourcesContent":["import { VldBase, ParseResult } from './base';\r\nimport { getMessages } from '../locales';\r\nimport { isDangerousKey } from '../utils/security';\r\n\r\n/**\r\n * Immutable record validator for key-value pairs\r\n * BUG-NEW-018 FIX: Uses comprehensive dangerous key protection\r\n */\r\nexport class VldRecord<T> extends VldBase<unknown, Record<string, T>> {\r\n /**\r\n * Private constructor to enforce immutability\r\n */\r\n protected constructor(\r\n protected readonly valueValidator: VldBase<unknown, T>,\r\n private readonly errorMessage?: string\r\n ) {\r\n super();\r\n }\r\n \r\n /**\r\n * Create a new record validator\r\n */\r\n static create<T>(valueValidator: VldBase<unknown, T>): VldRecord<T> {\r\n return new VldRecord(valueValidator);\r\n }\r\n \r\n /**\r\n * Parse and validate a record value\r\n * BUG-NEW-018 FIX: Use comprehensive dangerous key protection\r\n */\r\n parse(value: unknown): Record<string, T> {\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n throw new Error(this.errorMessage || getMessages().invalidRecord);\r\n }\r\n\r\n const result: Record<string, T> = {};\r\n const obj = value as Record<string, unknown>;\r\n\r\n for (const [key, val] of Object.entries(obj)) {\r\n // Skip dangerous keys to prevent prototype pollution\r\n // Now using comprehensive protection from shared utility\r\n if (isDangerousKey(key)) {\r\n continue;\r\n }\r\n\r\n try {\r\n result[key] = this.valueValidator.parse(val);\r\n } catch (error) {\r\n throw new Error(getMessages().objectField(key, (error as Error).message));\r\n }\r\n }\r\n\r\n return result;\r\n }\r\n \r\n /**\r\n * Safely parse and validate a record value\r\n */\r\n safeParse(value: unknown): ParseResult<Record<string, T>> {\r\n try {\r\n return { success: true, data: this.parse(value) };\r\n } catch (error) {\r\n return { success: false, error: error as Error };\r\n }\r\n }\r\n\r\n /**\r\n * Create a partial record variant (all keys optional)\r\n * Similar to v.object().partial() but for records\r\n */\r\n partial(): VldRecord<T | undefined> {\r\n const optionalValidator = this.valueValidator.optional();\r\n return new VldRecord(optionalValidator);\r\n }\r\n\r\n /**\r\n * Create a loose record variant (allows extra keys)\r\n * Similar to v.object().passthrough() but for records\r\n * Note: Records already allow any keys, so this mainly affects error handling\r\n */\r\n loose(): VldBase<unknown, Record<string, T>> {\r\n // For records, \"loose\" means we don't throw errors for validation failures\r\n // We return a modified version that catches validation errors\r\n return new VldLooseRecord(this.valueValidator);\r\n }\r\n}\r\n\r\n/**\r\n * Loose record variant that allows validation failures\r\n * Used internally by .loose() method\r\n */\r\nclass VldLooseRecord<T> extends VldBase<unknown, Record<string, T>> {\r\n constructor(private readonly valueValidator: VldBase<unknown, T>) {\r\n super();\r\n }\r\n\r\n parse(value: unknown): Record<string, T> {\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n throw new Error(getMessages().invalidRecord);\r\n }\r\n\r\n const result: Record<string, T> = {} as Record<string, T>;\r\n const obj = value as Record<string, unknown>;\r\n\r\n for (const [key, val] of Object.entries(obj)) {\r\n // Skip dangerous keys\r\n if (isDangerousKey(key)) {\r\n continue;\r\n }\r\n\r\n // For loose records, skip invalid values instead of throwing\r\n const parseResult = this.valueValidator.safeParse(val);\r\n if (parseResult.success) {\r\n result[key] = parseResult.data;\r\n }\r\n }\r\n\r\n return result;\r\n }\r\n\r\n safeParse(value: unknown): ParseResult<Record<string, T>> {\r\n try {\r\n return { success: true, data: this.parse(value) };\r\n } catch (error) {\r\n return { success: false, error: error as Error };\r\n }\r\n }\r\n\r\n /**\r\n * Create a partial variant (all keys optional)\r\n */\r\n partial(): VldLooseRecord<T | undefined> {\r\n const optionalValidator = this.valueValidator.optional();\r\n return new VldLooseRecord(optionalValidator);\r\n }\r\n\r\n /**\r\n * Return self (already loose)\r\n */\r\n loose(): VldLooseRecord<T> {\r\n return this;\r\n }\r\n}"]}
@@ -1,5 +1,5 @@
1
1
  import { VldBase } from './base.js';
2
- import { getMessages } from '../locales.js';
2
+ import { getMessages } from '../locales/index.js';
3
3
  /**
4
4
  * Immutable Set validator
5
5
  */
@@ -0,0 +1,61 @@
1
+ import { VldBase, ParseResult } from './base';
2
+ /**
3
+ * Configuration for string boolean validation
4
+ */
5
+ export interface StringBoolOptions {
6
+ /** Custom truthy values (default: ['true', '1', 'yes', 'on', 'y', 'enabled']) */
7
+ truthy?: readonly string[];
8
+ /** Custom falsy values (default: ['false', '0', 'no', 'off', 'n', 'disabled']) */
9
+ falsy?: readonly string[];
10
+ /** Whether matching should be case-sensitive (default: false) */
11
+ caseSensitive?: boolean;
12
+ }
13
+ /**
14
+ * Immutable string boolean validator for flexible boolean parsing
15
+ * Supports string representations like "true", "yes", "on", "1", etc.
16
+ */
17
+ export declare class VldStringBool extends VldBase<unknown, boolean> {
18
+ private readonly options;
19
+ private constructor();
20
+ /**
21
+ * Create a new string boolean validator
22
+ */
23
+ static create(options?: StringBoolOptions): VldStringBool;
24
+ /**
25
+ * Normalize a string value based on case sensitivity setting
26
+ */
27
+ private normalizeValue;
28
+ /**
29
+ * Get the effective truthy values (custom or default)
30
+ */
31
+ private getTruthyValues;
32
+ /**
33
+ * Get the effective falsy values (custom or default)
34
+ */
35
+ private getFalsyValues;
36
+ /**
37
+ * Parse and validate a string boolean value
38
+ */
39
+ parse(value: unknown): boolean;
40
+ /**
41
+ * Safely parse and validate a string boolean value
42
+ */
43
+ safeParse(value: unknown): ParseResult<boolean>;
44
+ /**
45
+ * Create a new validator with custom truthy values
46
+ */
47
+ withTruthy(values: readonly string[]): VldStringBool;
48
+ /**
49
+ * Create a new validator with custom falsy values
50
+ */
51
+ withFalsy(values: readonly string[]): VldStringBool;
52
+ /**
53
+ * Create a new validator with case-sensitive matching
54
+ */
55
+ caseSensitive(): VldStringBool;
56
+ /**
57
+ * Create a new validator with case-insensitive matching (default)
58
+ */
59
+ caseInsensitive(): VldStringBool;
60
+ }
61
+ //# sourceMappingURL=string-bool.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"string-bool.d.ts","sourceRoot":"","sources":["../../src/validators/string-bool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG9C;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAQD;;;GAGG;AACH,qBAAa,aAAc,SAAQ,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;IAExD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAD1B,OAAO;IAMP;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,OAAO,GAAE,iBAAsB,GAAG,aAAa;IAI7D;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,eAAe;IAIvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IA6C9B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IAY/C;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa;IAOpD;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa;IAOnD;;OAEG;IACH,aAAa,IAAI,aAAa;IAO9B;;OAEG;IACH,eAAe,IAAI,aAAa;CAMjC"}