@oxog/vld 1.2.0 → 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +122 -0
- package/README.md +61 -43
- package/dist/coercion/bigint.js +1 -1
- package/dist/coercion/boolean.d.ts.map +1 -1
- package/dist/coercion/boolean.js +7 -3
- package/dist/coercion/boolean.js.map +1 -1
- package/dist/coercion/date.js +1 -1
- package/dist/coercion/number.d.ts.map +1 -1
- package/dist/coercion/number.js +20 -4
- package/dist/coercion/number.js.map +1 -1
- package/dist/coercion/string.d.ts.map +1 -1
- package/dist/coercion/string.js +84 -12
- package/dist/coercion/string.js.map +1 -1
- package/dist/index.d.ts +593 -3
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +76 -5
- package/dist/index.js.map +1 -1
- package/dist/locales/af.d.ts.map +1 -1
- package/dist/locales/af.js +21 -4
- package/dist/locales/af.js.map +1 -1
- package/dist/locales/ar.d.ts.map +1 -1
- package/dist/locales/ar.js +21 -4
- package/dist/locales/ar.js.map +1 -1
- package/dist/locales/backup-en.d.ts +3 -0
- package/dist/locales/backup-en.d.ts.map +1 -0
- package/dist/locales/backup-en.js +105 -0
- package/dist/locales/backup-en.js.map +1 -0
- package/dist/locales/bn.d.ts.map +1 -1
- package/dist/locales/bn.js +21 -4
- package/dist/locales/bn.js.map +1 -1
- package/dist/locales/da.d.ts.map +1 -1
- package/dist/locales/da.js +21 -4
- package/dist/locales/da.js.map +1 -1
- package/dist/locales/de.d.ts.map +1 -1
- package/dist/locales/de.js +21 -4
- package/dist/locales/de.js.map +1 -1
- package/dist/locales/en.d.ts.map +1 -1
- package/dist/locales/en.js +21 -4
- package/dist/locales/en.js.map +1 -1
- package/dist/locales/es-MX.d.ts.map +1 -1
- package/dist/locales/es-MX.js +20 -4
- package/dist/locales/es-MX.js.map +1 -1
- package/dist/locales/es.d.ts.map +1 -1
- package/dist/locales/es.js +21 -4
- package/dist/locales/es.js.map +1 -1
- package/dist/locales/fi.d.ts.map +1 -1
- package/dist/locales/fi.js +21 -4
- package/dist/locales/fi.js.map +1 -1
- package/dist/locales/fr.d.ts.map +1 -1
- package/dist/locales/fr.js +21 -4
- package/dist/locales/fr.js.map +1 -1
- package/dist/locales/hi.d.ts.map +1 -1
- package/dist/locales/hi.js +21 -4
- package/dist/locales/hi.js.map +1 -1
- package/dist/locales/id.d.ts.map +1 -1
- package/dist/locales/id.js +21 -4
- package/dist/locales/id.js.map +1 -1
- package/dist/locales/it.d.ts.map +1 -1
- package/dist/locales/it.js +21 -4
- package/dist/locales/it.js.map +1 -1
- package/dist/locales/ja.d.ts.map +1 -1
- package/dist/locales/ja.js +21 -4
- package/dist/locales/ja.js.map +1 -1
- package/dist/locales/ko.d.ts.map +1 -1
- package/dist/locales/ko.js +21 -4
- package/dist/locales/ko.js.map +1 -1
- package/dist/locales/nl.d.ts.map +1 -1
- package/dist/locales/nl.js +21 -4
- package/dist/locales/nl.js.map +1 -1
- package/dist/locales/no.d.ts.map +1 -1
- package/dist/locales/no.js +21 -4
- package/dist/locales/no.js.map +1 -1
- package/dist/locales/pl.d.ts.map +1 -1
- package/dist/locales/pl.js +21 -4
- package/dist/locales/pl.js.map +1 -1
- package/dist/locales/pt-BR.d.ts.map +1 -1
- package/dist/locales/pt-BR.js +21 -4
- package/dist/locales/pt-BR.js.map +1 -1
- package/dist/locales/pt.d.ts.map +1 -1
- package/dist/locales/pt.js +21 -4
- package/dist/locales/pt.js.map +1 -1
- package/dist/locales/ru.d.ts.map +1 -1
- package/dist/locales/ru.js +21 -4
- package/dist/locales/ru.js.map +1 -1
- package/dist/locales/sv.d.ts.map +1 -1
- package/dist/locales/sv.js +21 -4
- package/dist/locales/sv.js.map +1 -1
- package/dist/locales/sw.d.ts.map +1 -1
- package/dist/locales/sw.js +21 -4
- package/dist/locales/sw.js.map +1 -1
- package/dist/locales/th.d.ts.map +1 -1
- package/dist/locales/th.js +21 -4
- package/dist/locales/th.js.map +1 -1
- package/dist/locales/tr.d.ts.map +1 -1
- package/dist/locales/tr.js +21 -4
- package/dist/locales/tr.js.map +1 -1
- package/dist/locales/types.d.ts +16 -3
- package/dist/locales/types.d.ts.map +1 -1
- package/dist/locales/types.js.map +1 -1
- package/dist/locales/vi.d.ts.map +1 -1
- package/dist/locales/vi.js +21 -4
- package/dist/locales/vi.js.map +1 -1
- package/dist/locales/zh.d.ts.map +1 -1
- package/dist/locales/zh.js +21 -4
- package/dist/locales/zh.js.map +1 -1
- package/dist/utils/codec-utils.d.ts +3 -1
- package/dist/utils/codec-utils.d.ts.map +1 -1
- package/dist/utils/codec-utils.js +110 -5
- package/dist/utils/codec-utils.js.map +1 -1
- package/dist/utils/deep-merge.d.ts +3 -0
- package/dist/utils/deep-merge.d.ts.map +1 -1
- package/dist/utils/deep-merge.js +30 -22
- package/dist/utils/deep-merge.js.map +1 -1
- package/dist/utils/ip-validation.d.ts +11 -0
- package/dist/utils/ip-validation.d.ts.map +1 -0
- package/dist/utils/ip-validation.js +78 -0
- package/dist/utils/ip-validation.js.map +1 -0
- package/dist/utils/security.d.ts +12 -0
- package/dist/utils/security.d.ts.map +1 -0
- package/dist/utils/security.js +61 -0
- package/dist/utils/security.js.map +1 -0
- package/dist/validators/array.d.ts +7 -0
- package/dist/validators/array.d.ts.map +1 -1
- package/dist/validators/array.js +57 -2
- package/dist/validators/array.js.map +1 -1
- package/dist/validators/base.d.ts +131 -0
- package/dist/validators/base.d.ts.map +1 -1
- package/dist/validators/base.js +247 -1
- package/dist/validators/base.js.map +1 -1
- package/dist/validators/base64.d.ts.map +1 -1
- package/dist/validators/base64.js +6 -3
- package/dist/validators/base64.js.map +1 -1
- package/dist/validators/bigint.d.ts +20 -0
- package/dist/validators/bigint.d.ts.map +1 -1
- package/dist/validators/bigint.js +39 -1
- package/dist/validators/bigint.js.map +1 -1
- package/dist/validators/boolean.js +29 -1
- package/dist/validators/boolean.js.map +1 -1
- package/dist/validators/codec.js +1 -1
- package/dist/validators/custom.d.ts +47 -0
- package/dist/validators/custom.d.ts.map +1 -0
- package/dist/validators/custom.js +50 -0
- package/dist/validators/custom.js.map +1 -0
- package/dist/validators/date.d.ts +21 -1
- package/dist/validators/date.d.ts.map +1 -1
- package/dist/validators/date.js +109 -30
- package/dist/validators/date.js.map +1 -1
- package/dist/validators/discriminated-union.d.ts +29 -0
- package/dist/validators/discriminated-union.d.ts.map +1 -0
- package/dist/validators/discriminated-union.js +98 -0
- package/dist/validators/discriminated-union.js.map +1 -0
- package/dist/validators/enum.d.ts +10 -0
- package/dist/validators/enum.d.ts.map +1 -1
- package/dist/validators/enum.js +38 -1
- package/dist/validators/enum.js.map +1 -1
- package/dist/validators/file.d.ts +57 -0
- package/dist/validators/file.d.ts.map +1 -0
- package/dist/validators/file.js +114 -0
- package/dist/validators/file.js.map +1 -0
- package/dist/validators/function.d.ts +26 -0
- package/dist/validators/function.d.ts.map +1 -0
- package/dist/validators/function.js +45 -0
- package/dist/validators/function.js.map +1 -0
- package/dist/validators/hex.d.ts.map +1 -1
- package/dist/validators/hex.js +3 -2
- package/dist/validators/hex.js.map +1 -1
- package/dist/validators/index.d.ts +18 -1
- package/dist/validators/index.d.ts.map +1 -1
- package/dist/validators/index.js +16 -1
- package/dist/validators/index.js.map +1 -1
- package/dist/validators/intersection.d.ts.map +1 -1
- package/dist/validators/intersection.js +15 -8
- package/dist/validators/intersection.js.map +1 -1
- package/dist/validators/json.d.ts +26 -0
- package/dist/validators/json.d.ts.map +1 -0
- package/dist/validators/json.js +64 -0
- package/dist/validators/json.js.map +1 -0
- package/dist/validators/lazy.d.ts +28 -0
- package/dist/validators/lazy.d.ts.map +1 -0
- package/dist/validators/lazy.js +42 -0
- package/dist/validators/lazy.js.map +1 -0
- package/dist/validators/literal.js +1 -1
- package/dist/validators/map.js +1 -1
- package/dist/validators/nan.d.ts +17 -0
- package/dist/validators/nan.d.ts.map +1 -0
- package/dist/validators/nan.js +32 -0
- package/dist/validators/nan.js.map +1 -0
- package/dist/validators/never.js +1 -1
- package/dist/validators/null.d.ts +16 -0
- package/dist/validators/null.d.ts.map +1 -0
- package/dist/validators/null.js +31 -0
- package/dist/validators/null.js.map +1 -0
- package/dist/validators/number.d.ts +22 -0
- package/dist/validators/number.d.ts.map +1 -1
- package/dist/validators/number.js +56 -4
- package/dist/validators/number.js.map +1 -1
- package/dist/validators/object.d.ts +37 -0
- package/dist/validators/object.d.ts.map +1 -1
- package/dist/validators/object.js +183 -14
- package/dist/validators/object.js.map +1 -1
- package/dist/validators/record.d.ts +15 -2
- package/dist/validators/record.d.ts.map +1 -1
- package/dist/validators/record.js +77 -1
- package/dist/validators/record.js.map +1 -1
- package/dist/validators/set.js +1 -1
- package/dist/validators/string-bool.d.ts +61 -0
- package/dist/validators/string-bool.d.ts.map +1 -0
- package/dist/validators/string-bool.js +127 -0
- package/dist/validators/string-bool.js.map +1 -0
- package/dist/validators/string-formats.d.ts +97 -0
- package/dist/validators/string-formats.d.ts.map +1 -0
- package/dist/validators/string-formats.js +120 -0
- package/dist/validators/string-formats.js.map +1 -0
- package/dist/validators/string.d.ts.map +1 -1
- package/dist/validators/string.js +16 -5
- package/dist/validators/string.js.map +1 -1
- package/dist/validators/symbol.js +1 -1
- package/dist/validators/template-literal.d.ts +32 -0
- package/dist/validators/template-literal.d.ts.map +1 -0
- package/dist/validators/template-literal.js +101 -0
- package/dist/validators/template-literal.js.map +1 -0
- package/dist/validators/tuple.js +1 -1
- package/dist/validators/uint8array.d.ts +21 -4
- package/dist/validators/uint8array.d.ts.map +1 -1
- package/dist/validators/uint8array.js +34 -23
- package/dist/validators/uint8array.js.map +1 -1
- package/dist/validators/undefined.d.ts +16 -0
- package/dist/validators/undefined.d.ts.map +1 -0
- package/dist/validators/undefined.js +31 -0
- package/dist/validators/undefined.js.map +1 -0
- package/dist/validators/union.d.ts +3 -0
- package/dist/validators/union.d.ts.map +1 -1
- package/dist/validators/union.js +46 -41
- package/dist/validators/union.js.map +1 -1
- package/dist/validators/void.js +1 -1
- package/dist/validators/xor.d.ts +23 -0
- package/dist/validators/xor.d.ts.map +1 -0
- package/dist/validators/xor.js +64 -0
- package/dist/validators/xor.js.map +1 -0
- package/package.json +2 -2
- package/dist/index-new.d.ts.map +0 -1
- package/dist/locales.d.ts +0 -54
- package/dist/locales.d.ts.map +0 -1
- package/dist/locales.js +0 -732
- package/dist/locales.js.map +0 -1
- package/dist/validators/object-optimized.d.ts +0 -23
- package/dist/validators/object-optimized.d.ts.map +0 -1
- package/dist/validators/object-optimized.js +0 -179
- package/dist/validators/object-optimized.js.map +0 -1
- package/dist/validators/object-ultra.d.ts +0 -34
- package/dist/validators/object-ultra.d.ts.map +0 -1
- package/dist/validators/object-ultra.js +0 -175
- package/dist/validators/object-ultra.js.map +0 -1
- package/dist/validators/string-ultra.d.ts +0 -49
- package/dist/validators/string-ultra.d.ts.map +0 -1
- package/dist/validators/string-ultra.js +0 -217
- package/dist/validators/string-ultra.js.map +0 -1
- package/dist/validators/union-optimized.d.ts +0 -15
- package/dist/validators/union-optimized.d.ts.map +0 -1
- package/dist/validators/union-optimized.js +0 -92
- package/dist/validators/union-optimized.js.map +0 -1
|
@@ -1,5 +1,14 @@
|
|
|
1
1
|
import { VldBase, VldOptional } from './base.js';
|
|
2
|
-
import { getMessages } from '../locales.js';
|
|
2
|
+
import { getMessages } from '../locales/index.js';
|
|
3
|
+
import { VldString } from './string.js';
|
|
4
|
+
import { VldNumber } from './number.js';
|
|
5
|
+
import { VldBoolean } from './boolean.js';
|
|
6
|
+
import { VldDate } from './date.js';
|
|
7
|
+
import { VldEnum } from './enum.js';
|
|
8
|
+
import { VldCoerceString } from '../coercion/string.js';
|
|
9
|
+
import { VldCoerceNumber } from '../coercion/number.js';
|
|
10
|
+
import { VldCoerceBoolean } from '../coercion/boolean.js';
|
|
11
|
+
import { VldCoerceDate } from '../coercion/date.js';
|
|
3
12
|
/**
|
|
4
13
|
* Optimized immutable object validator with chainable methods
|
|
5
14
|
* Features pre-computed keys and Set-based lookups for better performance
|
|
@@ -37,9 +46,25 @@ export class VldObject extends VldBase {
|
|
|
37
46
|
const key = this.shapeKeys[i];
|
|
38
47
|
const validator = this.config.shape[key];
|
|
39
48
|
const fieldValue = obj[key];
|
|
40
|
-
//
|
|
41
|
-
|
|
42
|
-
|
|
49
|
+
// BUG-NEW-002 FIX: Use instanceof instead of constructor.name
|
|
50
|
+
// constructor.name breaks in minified builds where class names become 'a', 'b', etc.
|
|
51
|
+
// instanceof checks are reliable regardless of minification
|
|
52
|
+
//
|
|
53
|
+
// Note: Coercion validators extend their base validators, so we need to check for
|
|
54
|
+
// coercion types first (more specific) before checking base types
|
|
55
|
+
// Check for coercion validators first - they need full safeParse for type conversion
|
|
56
|
+
if (validator instanceof VldCoerceString ||
|
|
57
|
+
validator instanceof VldCoerceNumber ||
|
|
58
|
+
validator instanceof VldCoerceBoolean ||
|
|
59
|
+
validator instanceof VldCoerceDate) {
|
|
60
|
+
// Coercion validators need safeParse to handle type conversion
|
|
61
|
+
const parseResult = validator.safeParse(fieldValue);
|
|
62
|
+
if (!parseResult.success) {
|
|
63
|
+
throw new Error(getMessages().objectField(key, parseResult.error.message));
|
|
64
|
+
}
|
|
65
|
+
result[key] = parseResult.data;
|
|
66
|
+
}
|
|
67
|
+
else if (validator instanceof VldString) {
|
|
43
68
|
// For string with validations, use safeParse to handle email, regex etc.
|
|
44
69
|
const parseResult = validator.safeParse(fieldValue);
|
|
45
70
|
if (!parseResult.success) {
|
|
@@ -47,19 +72,19 @@ export class VldObject extends VldBase {
|
|
|
47
72
|
}
|
|
48
73
|
result[key] = parseResult.data;
|
|
49
74
|
}
|
|
50
|
-
else if (
|
|
75
|
+
else if (validator instanceof VldNumber) {
|
|
51
76
|
if (typeof fieldValue !== 'number' || isNaN(fieldValue)) {
|
|
52
77
|
throw new Error(getMessages().objectField(key, getMessages().invalidNumber));
|
|
53
78
|
}
|
|
54
79
|
result[key] = fieldValue;
|
|
55
80
|
}
|
|
56
|
-
else if (
|
|
81
|
+
else if (validator instanceof VldBoolean) {
|
|
57
82
|
if (typeof fieldValue !== 'boolean') {
|
|
58
83
|
throw new Error(getMessages().objectField(key, getMessages().invalidBoolean));
|
|
59
84
|
}
|
|
60
85
|
result[key] = fieldValue;
|
|
61
86
|
}
|
|
62
|
-
else if (
|
|
87
|
+
else if (validator instanceof VldDate) {
|
|
63
88
|
// Use the actual validator for Date parsing (handles string conversion)
|
|
64
89
|
const parseResult = validator.safeParse(fieldValue);
|
|
65
90
|
if (!parseResult.success) {
|
|
@@ -89,18 +114,28 @@ export class VldObject extends VldBase {
|
|
|
89
114
|
throw new Error(getMessages().unexpectedKeys(extraKeys));
|
|
90
115
|
}
|
|
91
116
|
}
|
|
92
|
-
// Handle passthrough mode - optimized with prototype pollution protection
|
|
117
|
+
// Handle passthrough mode - optimized with comprehensive prototype pollution protection
|
|
93
118
|
if (this.config.passthrough) {
|
|
94
|
-
const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];
|
|
95
119
|
const objKeys = Object.keys(obj);
|
|
96
120
|
for (let i = 0; i < objKeys.length; i++) {
|
|
97
121
|
const key = objKeys[i];
|
|
98
122
|
// Skip dangerous keys to prevent prototype pollution
|
|
99
|
-
if (!this.shapeKeysSet.has(key) && !
|
|
123
|
+
if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
|
|
100
124
|
result[key] = obj[key];
|
|
101
125
|
}
|
|
102
126
|
}
|
|
103
127
|
}
|
|
128
|
+
// Handle catchall - validate extra keys with catchall validator
|
|
129
|
+
if (this.config.catchall) {
|
|
130
|
+
const objKeys = Object.keys(obj);
|
|
131
|
+
for (let i = 0; i < objKeys.length; i++) {
|
|
132
|
+
const key = objKeys[i];
|
|
133
|
+
// Skip keys already in shape and dangerous keys
|
|
134
|
+
if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
|
|
135
|
+
result[key] = this.config.catchall.parse(obj[key]);
|
|
136
|
+
}
|
|
137
|
+
}
|
|
138
|
+
}
|
|
104
139
|
return result;
|
|
105
140
|
}
|
|
106
141
|
/**
|
|
@@ -149,20 +184,91 @@ export class VldObject extends VldBase {
|
|
|
149
184
|
};
|
|
150
185
|
}
|
|
151
186
|
}
|
|
152
|
-
// Handle passthrough mode with prototype pollution protection
|
|
187
|
+
// Handle passthrough mode with comprehensive prototype pollution protection
|
|
153
188
|
if (this.config.passthrough) {
|
|
154
|
-
const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];
|
|
155
189
|
const objKeys = Object.keys(obj);
|
|
156
190
|
for (let i = 0; i < objKeys.length; i++) {
|
|
157
191
|
const key = objKeys[i];
|
|
158
192
|
// Skip dangerous keys to prevent prototype pollution
|
|
159
|
-
if (!this.shapeKeysSet.has(key) && !
|
|
193
|
+
if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
|
|
160
194
|
result[key] = obj[key];
|
|
161
195
|
}
|
|
162
196
|
}
|
|
163
197
|
}
|
|
198
|
+
// Handle catchall - validate extra keys with catchall validator
|
|
199
|
+
if (this.config.catchall) {
|
|
200
|
+
const objKeys = Object.keys(obj);
|
|
201
|
+
for (let i = 0; i < objKeys.length; i++) {
|
|
202
|
+
const key = objKeys[i];
|
|
203
|
+
// Skip keys already in shape and dangerous keys
|
|
204
|
+
if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {
|
|
205
|
+
const catchallResult = this.config.catchall.safeParse(obj[key]);
|
|
206
|
+
if (!catchallResult.success) {
|
|
207
|
+
return {
|
|
208
|
+
success: false,
|
|
209
|
+
error: new Error(getMessages().objectField(key, catchallResult.error.message))
|
|
210
|
+
};
|
|
211
|
+
}
|
|
212
|
+
result[key] = catchallResult.data;
|
|
213
|
+
}
|
|
214
|
+
}
|
|
215
|
+
}
|
|
164
216
|
return { success: true, data: result };
|
|
165
217
|
}
|
|
218
|
+
/**
|
|
219
|
+
* Comprehensive prototype pollution protection
|
|
220
|
+
* Checks for dangerous keys that could modify Object.prototype
|
|
221
|
+
*/
|
|
222
|
+
isDangerousKey(key) {
|
|
223
|
+
// Direct dangerous keys
|
|
224
|
+
const directDangerousKeys = ['__proto__', 'constructor', 'prototype'];
|
|
225
|
+
if (directDangerousKeys.includes(key)) {
|
|
226
|
+
return true;
|
|
227
|
+
}
|
|
228
|
+
// Nested prototype manipulation vectors
|
|
229
|
+
// These patterns could allow prototype pollution through nested access
|
|
230
|
+
const nestedPatterns = [
|
|
231
|
+
'constructor.prototype',
|
|
232
|
+
'__proto__.toString',
|
|
233
|
+
'prototype.constructor',
|
|
234
|
+
'__defineGetter__',
|
|
235
|
+
'__defineSetter__',
|
|
236
|
+
'__lookupGetter__',
|
|
237
|
+
'__lookupSetter__'
|
|
238
|
+
];
|
|
239
|
+
// Check for nested patterns
|
|
240
|
+
for (const pattern of nestedPatterns) {
|
|
241
|
+
if (key.includes(pattern)) {
|
|
242
|
+
return true;
|
|
243
|
+
}
|
|
244
|
+
}
|
|
245
|
+
// Check for property access chains that could lead to prototype pollution
|
|
246
|
+
// This covers patterns like "x.constructor.prototype.polluted"
|
|
247
|
+
const dangerousChains = [
|
|
248
|
+
'constructor.',
|
|
249
|
+
'__proto__.',
|
|
250
|
+
'prototype.'
|
|
251
|
+
];
|
|
252
|
+
for (const chain of dangerousChains) {
|
|
253
|
+
if (key.includes(chain)) {
|
|
254
|
+
return true;
|
|
255
|
+
}
|
|
256
|
+
}
|
|
257
|
+
// Additional protection: reject keys that could be used for property shadowing
|
|
258
|
+
const shadowingPatterns = [
|
|
259
|
+
'hasOwnProperty',
|
|
260
|
+
'toString',
|
|
261
|
+
'valueOf',
|
|
262
|
+
'isPrototypeOf',
|
|
263
|
+
'propertyIsEnumerable'
|
|
264
|
+
];
|
|
265
|
+
for (const pattern of shadowingPatterns) {
|
|
266
|
+
if (key === pattern || key.includes(`.${pattern}`)) {
|
|
267
|
+
return true;
|
|
268
|
+
}
|
|
269
|
+
}
|
|
270
|
+
return false;
|
|
271
|
+
}
|
|
166
272
|
/**
|
|
167
273
|
* Create a new validator in strict mode (no extra keys allowed)
|
|
168
274
|
*/
|
|
@@ -274,7 +380,12 @@ export class VldObject extends VldBase {
|
|
|
274
380
|
const validator = this.config.shape[key];
|
|
275
381
|
// If it's optional, unwrap it
|
|
276
382
|
if (validator instanceof VldOptional) {
|
|
277
|
-
|
|
383
|
+
// BUG-001 FIX: Add defensive check for baseValidator property
|
|
384
|
+
const unwrapped = validator.baseValidator;
|
|
385
|
+
if (!unwrapped || typeof unwrapped.parse !== 'function') {
|
|
386
|
+
throw new Error(`Invalid VldOptional structure for field "${key}": missing or invalid baseValidator`);
|
|
387
|
+
}
|
|
388
|
+
requiredShape[key] = unwrapped;
|
|
278
389
|
}
|
|
279
390
|
else {
|
|
280
391
|
requiredShape[key] = validator;
|
|
@@ -285,5 +396,63 @@ export class VldObject extends VldBase {
|
|
|
285
396
|
shape: requiredShape
|
|
286
397
|
});
|
|
287
398
|
}
|
|
399
|
+
/**
|
|
400
|
+
* Create a new validator with a catchall validator for extra keys
|
|
401
|
+
* Zod 4 API parity - validates unknown keys with provided schema
|
|
402
|
+
*/
|
|
403
|
+
catchall(schema) {
|
|
404
|
+
return new VldObject({
|
|
405
|
+
...this.config,
|
|
406
|
+
catchall: schema,
|
|
407
|
+
passthrough: false // catchall overrides passthrough
|
|
408
|
+
});
|
|
409
|
+
}
|
|
410
|
+
/**
|
|
411
|
+
* Access the inner shape schemas
|
|
412
|
+
* Zod 4 API parity - returns the shape object
|
|
413
|
+
*/
|
|
414
|
+
get shape() {
|
|
415
|
+
return this.config.shape;
|
|
416
|
+
}
|
|
417
|
+
/**
|
|
418
|
+
* Create an enum validator from object keys
|
|
419
|
+
* Zod 4 API parity - creates literal union of keys
|
|
420
|
+
*/
|
|
421
|
+
keyof() {
|
|
422
|
+
const keys = Object.keys(this.config.shape);
|
|
423
|
+
if (keys.length === 0) {
|
|
424
|
+
throw new Error('Cannot create keyof enum from empty object');
|
|
425
|
+
}
|
|
426
|
+
return VldEnum.create(keys);
|
|
427
|
+
}
|
|
428
|
+
/**
|
|
429
|
+
* Type-safe extend that throws an error if any key already exists
|
|
430
|
+
* Zod 4 API parity - prevents accidental field override
|
|
431
|
+
* @param extension The extension shape to add
|
|
432
|
+
* @returns A new validator with extended shape
|
|
433
|
+
* @throws {Error} If any extension key already exists in the shape
|
|
434
|
+
* @example
|
|
435
|
+
* const base = v.object({ name: v.string() });
|
|
436
|
+
* const extended = base.safeExtend({ age: v.number() }); // OK
|
|
437
|
+
* const invalid = base.safeExtend({ name: v.number() }); // Throws error
|
|
438
|
+
*/
|
|
439
|
+
safeExtend(extension) {
|
|
440
|
+
// Check for overlapping keys
|
|
441
|
+
const existingKeys = new Set(Object.keys(this.config.shape));
|
|
442
|
+
const extensionKeys = Object.keys(extension);
|
|
443
|
+
const overlappingKeys = [];
|
|
444
|
+
for (const key of extensionKeys) {
|
|
445
|
+
if (existingKeys.has(key)) {
|
|
446
|
+
overlappingKeys.push(key);
|
|
447
|
+
}
|
|
448
|
+
}
|
|
449
|
+
if (overlappingKeys.length > 0) {
|
|
450
|
+
throw new Error(`safeExtend: Cannot override existing keys: ${overlappingKeys.join(', ')}. Use extend() if you want to override.`);
|
|
451
|
+
}
|
|
452
|
+
return new VldObject({
|
|
453
|
+
...this.config,
|
|
454
|
+
shape: { ...this.config.shape, ...extension }
|
|
455
|
+
});
|
|
456
|
+
}
|
|
288
457
|
}
|
|
289
458
|
//# sourceMappingURL=object.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"object.js","sourceRoot":"","sources":["../../src/validators/object.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYzC;;;GAGG;AACH,MAAM,OAAO,SAAyC,SAAQ,OAAmB;IAK/E;;OAEG;IACH,YAAoB,MAAgC;QAClD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,2CAA2C;QAC3C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CACX,KAAiD;QAEjD,OAAO,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,0DAA0D;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,+CAA+C;YAC/C,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC;YAEjD,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;gBAClC,yEAAyE;gBACzE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;gBACzC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,aAAa,KAAK,YAAY,EAAE,CAAC;gBAC1C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACvC,wEAAwE;gBACxE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,+CAA+C;gBAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAAc;QACtB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC;aAC1E,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,sBAAsB;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAEpD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;iBAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAW,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAgB;QACrB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAQ,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,gBAAgB,GAAQ,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBACnC,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,WAAW,GAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAU,CAAC,EAAE,CAAC;gBAChC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,SAAqD;QAErD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAS;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CACH,KAAmB;QAEnB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAS;SAC9D,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,aAAa,GAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,8BAA8B;YAC9B,IAAI,SAAS,YAAY,WAAW,EAAE,CAAC;gBACrC,aAAa,CAAC,GAAG,CAAC,GAAI,SAAiB,CAAC,aAAa,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,aAAa;SACrB,CAAQ,CAAC;IACZ,CAAC;CACF","sourcesContent":["import { VldBase, ParseResult, VldOptional } from './base';\nimport { getMessages } from '../locales';\n\n/**\n * Configuration for object validator\n */\ninterface ObjectValidatorConfig<T extends Record<string, any>> {\n readonly shape: { readonly [K in keyof T]: VldBase<unknown, T[K]> };\n readonly strict?: boolean;\n readonly passthrough?: boolean;\n readonly errorMessage?: string;\n}\n\n/**\n * Optimized immutable object validator with chainable methods\n * Features pre-computed keys and Set-based lookups for better performance\n */\nexport class VldObject<T extends Record<string, any>> extends VldBase<unknown, T> {\n private readonly config: ObjectValidatorConfig<T>;\n private readonly shapeKeys: string[];\n private readonly shapeKeysSet: Set<string>;\n \n /**\n * Private constructor to enforce immutability\n */\n private constructor(config: ObjectValidatorConfig<T>) {\n super();\n this.config = config;\n // Pre-compute shape keys for faster access\n this.shapeKeys = Object.keys(config.shape);\n this.shapeKeysSet = new Set(this.shapeKeys);\n }\n \n /**\n * Create a new object validator\n */\n static create<T extends Record<string, any>>(\n shape: { [K in keyof T]: VldBase<unknown, T[K]> }\n ): VldObject<T> {\n return new VldObject({ shape });\n }\n \n /**\n * Parse and validate an object value\n * Ultra-optimized with inline type checks and minimal overhead\n */\n parse(value: unknown): T {\n // Fast type check\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n throw new Error(this.config.errorMessage || getMessages().invalidObject);\n }\n \n const obj = value as Record<string, unknown>;\n const result: any = {};\n \n // Ultra-optimized field validation with inline fast paths\n for (let i = 0; i < this.shapeKeys.length; i++) {\n const key = this.shapeKeys[i];\n const validator = this.config.shape[key];\n const fieldValue = obj[key];\n \n // Inline fast-path validation for common types\n const validatorType = validator.constructor.name;\n \n if (validatorType === 'VldString') {\n // For string with validations, use safeParse to handle email, regex etc.\n const parseResult = validator.safeParse(fieldValue);\n if (!parseResult.success) {\n throw new Error(getMessages().objectField(key, parseResult.error.message));\n }\n result[key] = parseResult.data;\n } else if (validatorType === 'VldNumber') {\n if (typeof fieldValue !== 'number' || isNaN(fieldValue)) {\n throw new Error(getMessages().objectField(key, getMessages().invalidNumber));\n }\n result[key] = fieldValue;\n } else if (validatorType === 'VldBoolean') {\n if (typeof fieldValue !== 'boolean') {\n throw new Error(getMessages().objectField(key, getMessages().invalidBoolean));\n }\n result[key] = fieldValue;\n } else if (validatorType === 'VldDate') {\n // Use the actual validator for Date parsing (handles string conversion)\n const parseResult = validator.safeParse(fieldValue);\n if (!parseResult.success) {\n throw new Error(getMessages().objectField(key, parseResult.error.message));\n }\n result[key] = parseResult.data;\n } else {\n // Fallback to safeParse for complex validators\n const parseResult = validator.safeParse(fieldValue);\n if (!parseResult.success) {\n throw new Error(getMessages().objectField(key, parseResult.error.message));\n }\n result[key] = parseResult.data;\n }\n }\n \n // Handle strict mode - optimized with Set\n if (this.config.strict) {\n const objKeys = Object.keys(obj);\n const extraKeys: string[] = [];\n \n for (let i = 0; i < objKeys.length; i++) {\n if (!this.shapeKeysSet.has(objKeys[i])) {\n extraKeys.push(objKeys[i]);\n }\n }\n \n if (extraKeys.length > 0) {\n throw new Error(getMessages().unexpectedKeys(extraKeys));\n }\n }\n \n // Handle passthrough mode - optimized with prototype pollution protection\n if (this.config.passthrough) {\n const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];\n const objKeys = Object.keys(obj);\n for (let i = 0; i < objKeys.length; i++) {\n const key = objKeys[i];\n // Skip dangerous keys to prevent prototype pollution\n if (!this.shapeKeysSet.has(key) && !DANGEROUS_KEYS.includes(key)) {\n result[key] = obj[key];\n }\n }\n }\n \n return result as T;\n }\n \n /**\n * Safely parse and validate an object value\n * Optimized version using pre-computed keys\n */\n safeParse(value: unknown): ParseResult<T> {\n // Fast type check\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n return {\n success: false,\n error: new Error(this.config.errorMessage || getMessages().invalidObject)\n };\n }\n \n const obj = value as Record<string, unknown>;\n const result: any = {};\n \n // Validate all fields\n for (let i = 0; i < this.shapeKeys.length; i++) {\n const key = this.shapeKeys[i];\n const validator = this.config.shape[key];\n const fieldValue = obj[key];\n \n const parseResult = validator.safeParse(fieldValue);\n \n if (parseResult.success) {\n result[key] = parseResult.data;\n } else {\n return {\n success: false,\n error: new Error(getMessages().objectField(key, parseResult.error.message))\n };\n }\n }\n \n // Handle strict mode\n if (this.config.strict) {\n const objKeys = Object.keys(obj);\n const extraKeys: string[] = [];\n \n for (let i = 0; i < objKeys.length; i++) {\n if (!this.shapeKeysSet.has(objKeys[i])) {\n extraKeys.push(objKeys[i]);\n }\n }\n \n if (extraKeys.length > 0) {\n return {\n success: false,\n error: new Error(getMessages().unexpectedKeys(extraKeys))\n };\n }\n }\n \n // Handle passthrough mode with prototype pollution protection\n if (this.config.passthrough) {\n const DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype'];\n const objKeys = Object.keys(obj);\n for (let i = 0; i < objKeys.length; i++) {\n const key = objKeys[i];\n // Skip dangerous keys to prevent prototype pollution\n if (!this.shapeKeysSet.has(key) && !DANGEROUS_KEYS.includes(key)) {\n result[key] = obj[key];\n }\n }\n }\n \n return { success: true, data: result as T };\n }\n \n /**\n * Create a new validator in strict mode (no extra keys allowed)\n */\n strict(message?: string): VldObject<T> {\n return new VldObject({\n ...this.config,\n strict: true,\n passthrough: false,\n errorMessage: message\n });\n }\n \n /**\n * Create a new validator in passthrough mode (extra keys are preserved)\n */\n passthrough(): VldObject<T> {\n return new VldObject({\n ...this.config,\n strict: false,\n passthrough: true\n });\n }\n \n /**\n * Create a new validator with all fields optional\n */\n partial(): VldObject<{ [K in keyof T]?: T[K] }> {\n const partialShape: any = {};\n for (const key in this.config.shape) {\n partialShape[key] = new VldOptional(this.config.shape[key]);\n }\n return new VldObject({ \n ...this.config, \n shape: partialShape \n }) as any;\n }\n \n /**\n * Create a new validator with deep partial (nested objects also partial)\n */\n deepPartial(): VldObject<any> {\n const deepPartialShape: any = {};\n for (const key in this.config.shape) {\n const validator = this.config.shape[key];\n if (validator instanceof VldObject) {\n deepPartialShape[key] = new VldOptional(validator.deepPartial());\n } else {\n deepPartialShape[key] = new VldOptional(validator);\n }\n }\n return new VldObject({ \n ...this.config, \n shape: deepPartialShape \n });\n }\n \n /**\n * Create a new validator with only specified keys\n */\n pick<K extends keyof T>(...keys: K[]): VldObject<Pick<T, K>> {\n const pickedShape: any = {};\n for (const key of keys) {\n if (key in this.config.shape) {\n pickedShape[key] = this.config.shape[key];\n }\n }\n return new VldObject({ \n ...this.config, \n shape: pickedShape \n });\n }\n \n /**\n * Create a new validator without specified keys\n */\n omit<K extends keyof T>(...keys: K[]): VldObject<Omit<T, K>> {\n const omittedShape: any = {};\n const keysToOmit = new Set(keys);\n for (const key in this.config.shape) {\n if (!keysToOmit.has(key as any)) {\n omittedShape[key] = this.config.shape[key];\n }\n }\n return new VldObject({ \n ...this.config, \n shape: omittedShape \n });\n }\n \n /**\n * Create a new validator with additional fields\n */\n extend<U extends Record<string, any>>(\n extension: { [K in keyof U]: VldBase<unknown, U[K]> }\n ): VldObject<T & U> {\n return new VldObject({\n ...this.config,\n shape: { ...this.config.shape, ...extension } as any\n });\n }\n \n /**\n * Create a new validator by merging with another object validator\n */\n merge<U extends Record<string, any>>(\n other: VldObject<U>\n ): VldObject<T & U> {\n return new VldObject({\n ...this.config,\n shape: { ...this.config.shape, ...other.config.shape } as any\n });\n }\n \n /**\n * Create a new validator with all fields required (removes optional)\n */\n required(): VldObject<{ [K in keyof T]-?: T[K] }> {\n const requiredShape: any = {};\n for (const key in this.config.shape) {\n const validator = this.config.shape[key];\n // If it's optional, unwrap it\n if (validator instanceof VldOptional) {\n requiredShape[key] = (validator as any).baseValidator;\n } else {\n requiredShape[key] = validator;\n }\n }\n return new VldObject({ \n ...this.config, \n shape: requiredShape \n }) as any;\n }\n}"]}
|
|
1
|
+
{"version":3,"file":"object.js","sourceRoot":"","sources":["../../src/validators/object.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAajD;;;GAGG;AACH,MAAM,OAAO,SAAyC,SAAQ,OAAmB;IAK/E;;OAEG;IACH,YAAoB,MAAgC;QAClD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,2CAA2C;QAC3C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CACX,KAAiD;QAEjD,OAAO,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,0DAA0D;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,8DAA8D;YAC9D,qFAAqF;YACrF,4DAA4D;YAC5D,EAAE;YACF,kFAAkF;YAClF,kEAAkE;YAElE,qFAAqF;YACrF,IAAI,SAAS,YAAY,eAAe;gBACpC,SAAS,YAAY,eAAe;gBACpC,SAAS,YAAY,gBAAgB;gBACrC,SAAS,YAAY,aAAa,EAAE,CAAC;gBACvC,+DAA+D;gBAC/D,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBAC1C,yEAAyE;gBACzE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,SAAS,YAAY,UAAU,EAAE,CAAC;gBAC3C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC3B,CAAC;iBAAM,IAAI,SAAS,YAAY,OAAO,EAAE,CAAC;gBACxC,wEAAwE;gBACxE,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,+CAA+C;gBAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,gDAAgD;gBAChD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAAc;QACtB,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC;aAC1E,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAQ,EAAE,CAAC;QAEvB,sBAAsB;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE5B,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAEpD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;iBAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvB,gDAAgD;gBAChD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;oBAChE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;wBAC5B,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;yBAC/E,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAW,EAAE,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,GAAW;QAChC,wBAAwB;QACxB,MAAM,mBAAmB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wCAAwC;QACxC,uEAAuE;QACvE,MAAM,cAAc,GAAG;YACrB,uBAAuB;YACvB,oBAAoB;YACpB,uBAAuB;YACvB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;SACnB,CAAC;QAEF,4BAA4B;QAC5B,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,eAAe,GAAG;YACtB,cAAc;YACd,YAAY;YACZ,YAAY;SACb,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,iBAAiB,GAAG;YACxB,gBAAgB;YAChB,UAAU;YACV,SAAS;YACT,eAAe;YACf,sBAAsB;SACvB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAgB;QACrB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAQ,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,gBAAgB,GAAQ,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,SAAS,YAAY,SAAS,EAAE,CAAC;gBACnC,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,WAAW,GAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAoB,GAAG,IAAS;QAClC,MAAM,YAAY,GAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAU,CAAC,EAAE,CAAC;gBAChC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,SAAqD;QAErD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAS;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CACH,KAAmB;QAEnB,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAS;SAC9D,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,aAAa,GAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,8BAA8B;YAC9B,IAAI,SAAS,YAAY,WAAW,EAAE,CAAC;gBACrC,8DAA8D;gBAC9D,MAAM,SAAS,GAAI,SAAiB,CAAC,aAAa,CAAC;gBACnD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,qCAAqC,CAAC,CAAC;gBACxG,CAAC;gBACD,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,aAAa;SACrB,CAAQ,CAAC;IACZ,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAI,MAA2B;QACrC,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,KAAK,CAAC,iCAAiC;SACrD,CAAQ,CAAC;IACZ,CAAC;IAED;;;OAGG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAA6B,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;OAUG;IACH,UAAU,CACR,SAAqD;QAErD,6BAA6B;QAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,8CAA8C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAClH,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,IAAI,CAAC,MAAM;YACd,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAS;SACrD,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { VldBase, ParseResult, VldOptional } from './base';\r\nimport { getMessages } from '../locales';\r\nimport { VldString } from './string';\r\nimport { VldNumber } from './number';\r\nimport { VldBoolean } from './boolean';\r\nimport { VldDate } from './date';\r\nimport { VldEnum } from './enum';\r\nimport { VldCoerceString } from '../coercion/string';\r\nimport { VldCoerceNumber } from '../coercion/number';\r\nimport { VldCoerceBoolean } from '../coercion/boolean';\r\nimport { VldCoerceDate } from '../coercion/date';\r\n\r\n/**\r\n * Configuration for object validator\r\n */\r\ninterface ObjectValidatorConfig<T extends Record<string, any>> {\r\n readonly shape: { readonly [K in keyof T]: VldBase<unknown, T[K]> };\r\n readonly strict?: boolean;\r\n readonly passthrough?: boolean;\r\n readonly catchall?: VldBase<unknown, any>;\r\n readonly errorMessage?: string;\r\n}\r\n\r\n/**\r\n * Optimized immutable object validator with chainable methods\r\n * Features pre-computed keys and Set-based lookups for better performance\r\n */\r\nexport class VldObject<T extends Record<string, any>> extends VldBase<unknown, T> {\r\n private readonly config: ObjectValidatorConfig<T>;\r\n private readonly shapeKeys: string[];\r\n private readonly shapeKeysSet: Set<string>;\r\n \r\n /**\r\n * Private constructor to enforce immutability\r\n */\r\n private constructor(config: ObjectValidatorConfig<T>) {\r\n super();\r\n this.config = config;\r\n // Pre-compute shape keys for faster access\r\n this.shapeKeys = Object.keys(config.shape);\r\n this.shapeKeysSet = new Set(this.shapeKeys);\r\n }\r\n \r\n /**\r\n * Create a new object validator\r\n */\r\n static create<T extends Record<string, any>>(\r\n shape: { [K in keyof T]: VldBase<unknown, T[K]> }\r\n ): VldObject<T> {\r\n return new VldObject({ shape });\r\n }\r\n \r\n /**\r\n * Parse and validate an object value\r\n * Ultra-optimized with inline type checks and minimal overhead\r\n */\r\n parse(value: unknown): T {\r\n // Fast type check\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n throw new Error(this.config.errorMessage || getMessages().invalidObject);\r\n }\r\n \r\n const obj = value as Record<string, unknown>;\r\n const result: any = {};\r\n \r\n // Ultra-optimized field validation with inline fast paths\r\n for (let i = 0; i < this.shapeKeys.length; i++) {\r\n const key = this.shapeKeys[i];\r\n const validator = this.config.shape[key];\r\n const fieldValue = obj[key];\r\n\r\n // BUG-NEW-002 FIX: Use instanceof instead of constructor.name\r\n // constructor.name breaks in minified builds where class names become 'a', 'b', etc.\r\n // instanceof checks are reliable regardless of minification\r\n //\r\n // Note: Coercion validators extend their base validators, so we need to check for\r\n // coercion types first (more specific) before checking base types\r\n\r\n // Check for coercion validators first - they need full safeParse for type conversion\r\n if (validator instanceof VldCoerceString ||\r\n validator instanceof VldCoerceNumber ||\r\n validator instanceof VldCoerceBoolean ||\r\n validator instanceof VldCoerceDate) {\r\n // Coercion validators need safeParse to handle type conversion\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n } else if (validator instanceof VldString) {\r\n // For string with validations, use safeParse to handle email, regex etc.\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n } else if (validator instanceof VldNumber) {\r\n if (typeof fieldValue !== 'number' || isNaN(fieldValue)) {\r\n throw new Error(getMessages().objectField(key, getMessages().invalidNumber));\r\n }\r\n result[key] = fieldValue;\r\n } else if (validator instanceof VldBoolean) {\r\n if (typeof fieldValue !== 'boolean') {\r\n throw new Error(getMessages().objectField(key, getMessages().invalidBoolean));\r\n }\r\n result[key] = fieldValue;\r\n } else if (validator instanceof VldDate) {\r\n // Use the actual validator for Date parsing (handles string conversion)\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n } else {\r\n // Fallback to safeParse for complex validators\r\n const parseResult = validator.safeParse(fieldValue);\r\n if (!parseResult.success) {\r\n throw new Error(getMessages().objectField(key, parseResult.error.message));\r\n }\r\n result[key] = parseResult.data;\r\n }\r\n }\r\n \r\n // Handle strict mode - optimized with Set\r\n if (this.config.strict) {\r\n const objKeys = Object.keys(obj);\r\n const extraKeys: string[] = [];\r\n\r\n for (let i = 0; i < objKeys.length; i++) {\r\n if (!this.shapeKeysSet.has(objKeys[i])) {\r\n extraKeys.push(objKeys[i]);\r\n }\r\n }\r\n\r\n if (extraKeys.length > 0) {\r\n throw new Error(getMessages().unexpectedKeys(extraKeys));\r\n }\r\n }\r\n\r\n // Handle passthrough mode - optimized with comprehensive prototype pollution protection\r\n if (this.config.passthrough) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip dangerous keys to prevent prototype pollution\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n result[key] = obj[key];\r\n }\r\n }\r\n }\r\n\r\n // Handle catchall - validate extra keys with catchall validator\r\n if (this.config.catchall) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip keys already in shape and dangerous keys\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n result[key] = this.config.catchall.parse(obj[key]);\r\n }\r\n }\r\n }\r\n\r\n return result as T;\r\n }\r\n \r\n /**\r\n * Safely parse and validate an object value\r\n * Optimized version using pre-computed keys\r\n */\r\n safeParse(value: unknown): ParseResult<T> {\r\n // Fast type check\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n return {\r\n success: false,\r\n error: new Error(this.config.errorMessage || getMessages().invalidObject)\r\n };\r\n }\r\n \r\n const obj = value as Record<string, unknown>;\r\n const result: any = {};\r\n \r\n // Validate all fields\r\n for (let i = 0; i < this.shapeKeys.length; i++) {\r\n const key = this.shapeKeys[i];\r\n const validator = this.config.shape[key];\r\n const fieldValue = obj[key];\r\n \r\n const parseResult = validator.safeParse(fieldValue);\r\n \r\n if (parseResult.success) {\r\n result[key] = parseResult.data;\r\n } else {\r\n return {\r\n success: false,\r\n error: new Error(getMessages().objectField(key, parseResult.error.message))\r\n };\r\n }\r\n }\r\n \r\n // Handle strict mode\r\n if (this.config.strict) {\r\n const objKeys = Object.keys(obj);\r\n const extraKeys: string[] = [];\r\n\r\n for (let i = 0; i < objKeys.length; i++) {\r\n if (!this.shapeKeysSet.has(objKeys[i])) {\r\n extraKeys.push(objKeys[i]);\r\n }\r\n }\r\n\r\n if (extraKeys.length > 0) {\r\n return {\r\n success: false,\r\n error: new Error(getMessages().unexpectedKeys(extraKeys))\r\n };\r\n }\r\n }\r\n\r\n // Handle passthrough mode with comprehensive prototype pollution protection\r\n if (this.config.passthrough) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip dangerous keys to prevent prototype pollution\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n result[key] = obj[key];\r\n }\r\n }\r\n }\r\n\r\n // Handle catchall - validate extra keys with catchall validator\r\n if (this.config.catchall) {\r\n const objKeys = Object.keys(obj);\r\n for (let i = 0; i < objKeys.length; i++) {\r\n const key = objKeys[i];\r\n // Skip keys already in shape and dangerous keys\r\n if (!this.shapeKeysSet.has(key) && !this.isDangerousKey(key)) {\r\n const catchallResult = this.config.catchall.safeParse(obj[key]);\r\n if (!catchallResult.success) {\r\n return {\r\n success: false,\r\n error: new Error(getMessages().objectField(key, catchallResult.error.message))\r\n };\r\n }\r\n result[key] = catchallResult.data;\r\n }\r\n }\r\n }\r\n\r\n return { success: true, data: result as T };\r\n }\r\n\r\n /**\r\n * Comprehensive prototype pollution protection\r\n * Checks for dangerous keys that could modify Object.prototype\r\n */\r\n private isDangerousKey(key: string): boolean {\r\n // Direct dangerous keys\r\n const directDangerousKeys = ['__proto__', 'constructor', 'prototype'];\r\n if (directDangerousKeys.includes(key)) {\r\n return true;\r\n }\r\n\r\n // Nested prototype manipulation vectors\r\n // These patterns could allow prototype pollution through nested access\r\n const nestedPatterns = [\r\n 'constructor.prototype',\r\n '__proto__.toString',\r\n 'prototype.constructor',\r\n '__defineGetter__',\r\n '__defineSetter__',\r\n '__lookupGetter__',\r\n '__lookupSetter__'\r\n ];\r\n\r\n // Check for nested patterns\r\n for (const pattern of nestedPatterns) {\r\n if (key.includes(pattern)) {\r\n return true;\r\n }\r\n }\r\n\r\n // Check for property access chains that could lead to prototype pollution\r\n // This covers patterns like \"x.constructor.prototype.polluted\"\r\n const dangerousChains = [\r\n 'constructor.',\r\n '__proto__.',\r\n 'prototype.'\r\n ];\r\n\r\n for (const chain of dangerousChains) {\r\n if (key.includes(chain)) {\r\n return true;\r\n }\r\n }\r\n\r\n // Additional protection: reject keys that could be used for property shadowing\r\n const shadowingPatterns = [\r\n 'hasOwnProperty',\r\n 'toString',\r\n 'valueOf',\r\n 'isPrototypeOf',\r\n 'propertyIsEnumerable'\r\n ];\r\n\r\n for (const pattern of shadowingPatterns) {\r\n if (key === pattern || key.includes(`.${pattern}`)) {\r\n return true;\r\n }\r\n }\r\n\r\n return false;\r\n }\r\n \r\n /**\r\n * Create a new validator in strict mode (no extra keys allowed)\r\n */\r\n strict(message?: string): VldObject<T> {\r\n return new VldObject({\r\n ...this.config,\r\n strict: true,\r\n passthrough: false,\r\n errorMessage: message\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator in passthrough mode (extra keys are preserved)\r\n */\r\n passthrough(): VldObject<T> {\r\n return new VldObject({\r\n ...this.config,\r\n strict: false,\r\n passthrough: true\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with all fields optional\r\n */\r\n partial(): VldObject<{ [K in keyof T]?: T[K] }> {\r\n const partialShape: any = {};\r\n for (const key in this.config.shape) {\r\n partialShape[key] = new VldOptional(this.config.shape[key]);\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: partialShape \r\n }) as any;\r\n }\r\n \r\n /**\r\n * Create a new validator with deep partial (nested objects also partial)\r\n */\r\n deepPartial(): VldObject<any> {\r\n const deepPartialShape: any = {};\r\n for (const key in this.config.shape) {\r\n const validator = this.config.shape[key];\r\n if (validator instanceof VldObject) {\r\n deepPartialShape[key] = new VldOptional(validator.deepPartial());\r\n } else {\r\n deepPartialShape[key] = new VldOptional(validator);\r\n }\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: deepPartialShape \r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with only specified keys\r\n */\r\n pick<K extends keyof T>(...keys: K[]): VldObject<Pick<T, K>> {\r\n const pickedShape: any = {};\r\n for (const key of keys) {\r\n if (key in this.config.shape) {\r\n pickedShape[key] = this.config.shape[key];\r\n }\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: pickedShape \r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator without specified keys\r\n */\r\n omit<K extends keyof T>(...keys: K[]): VldObject<Omit<T, K>> {\r\n const omittedShape: any = {};\r\n const keysToOmit = new Set(keys);\r\n for (const key in this.config.shape) {\r\n if (!keysToOmit.has(key as any)) {\r\n omittedShape[key] = this.config.shape[key];\r\n }\r\n }\r\n return new VldObject({ \r\n ...this.config, \r\n shape: omittedShape \r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with additional fields\r\n */\r\n extend<U extends Record<string, any>>(\r\n extension: { [K in keyof U]: VldBase<unknown, U[K]> }\r\n ): VldObject<T & U> {\r\n return new VldObject({\r\n ...this.config,\r\n shape: { ...this.config.shape, ...extension } as any\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator by merging with another object validator\r\n */\r\n merge<U extends Record<string, any>>(\r\n other: VldObject<U>\r\n ): VldObject<T & U> {\r\n return new VldObject({\r\n ...this.config,\r\n shape: { ...this.config.shape, ...other.config.shape } as any\r\n });\r\n }\r\n \r\n /**\r\n * Create a new validator with all fields required (removes optional)\r\n */\r\n required(): VldObject<{ [K in keyof T]-?: T[K] }> {\r\n const requiredShape: any = {};\r\n for (const key in this.config.shape) {\r\n const validator = this.config.shape[key];\r\n // If it's optional, unwrap it\r\n if (validator instanceof VldOptional) {\r\n // BUG-001 FIX: Add defensive check for baseValidator property\r\n const unwrapped = (validator as any).baseValidator;\r\n if (!unwrapped || typeof unwrapped.parse !== 'function') {\r\n throw new Error(`Invalid VldOptional structure for field \"${key}\": missing or invalid baseValidator`);\r\n }\r\n requiredShape[key] = unwrapped;\r\n } else {\r\n requiredShape[key] = validator;\r\n }\r\n }\r\n return new VldObject({\r\n ...this.config,\r\n shape: requiredShape\r\n }) as any;\r\n }\r\n\r\n /**\r\n * Create a new validator with a catchall validator for extra keys\r\n * Zod 4 API parity - validates unknown keys with provided schema\r\n */\r\n catchall<U>(schema: VldBase<unknown, U>): VldObject<any> {\r\n return new VldObject({\r\n ...this.config,\r\n catchall: schema,\r\n passthrough: false // catchall overrides passthrough\r\n }) as any;\r\n }\r\n\r\n /**\r\n * Access the inner shape schemas\r\n * Zod 4 API parity - returns the shape object\r\n */\r\n get shape(): { readonly [K in keyof T]: VldBase<unknown, T[K]> } {\r\n return this.config.shape;\r\n }\r\n\r\n /**\r\n * Create an enum validator from object keys\r\n * Zod 4 API parity - creates literal union of keys\r\n */\r\n keyof(): VldEnum<[string, ...string[]]> {\r\n const keys = Object.keys(this.config.shape);\r\n if (keys.length === 0) {\r\n throw new Error('Cannot create keyof enum from empty object');\r\n }\r\n return VldEnum.create(keys as [string, ...string[]]);\r\n }\r\n\r\n /**\r\n * Type-safe extend that throws an error if any key already exists\r\n * Zod 4 API parity - prevents accidental field override\r\n * @param extension The extension shape to add\r\n * @returns A new validator with extended shape\r\n * @throws {Error} If any extension key already exists in the shape\r\n * @example\r\n * const base = v.object({ name: v.string() });\r\n * const extended = base.safeExtend({ age: v.number() }); // OK\r\n * const invalid = base.safeExtend({ name: v.number() }); // Throws error\r\n */\r\n safeExtend<U extends Record<string, any>>(\r\n extension: { [K in keyof U]: VldBase<unknown, U[K]> }\r\n ): VldObject<T & U> {\r\n // Check for overlapping keys\r\n const existingKeys = new Set(Object.keys(this.config.shape));\r\n const extensionKeys = Object.keys(extension);\r\n const overlappingKeys: string[] = [];\r\n\r\n for (const key of extensionKeys) {\r\n if (existingKeys.has(key)) {\r\n overlappingKeys.push(key);\r\n }\r\n }\r\n\r\n if (overlappingKeys.length > 0) {\r\n throw new Error(\r\n `safeExtend: Cannot override existing keys: ${overlappingKeys.join(', ')}. Use extend() if you want to override.`\r\n );\r\n }\r\n\r\n return new VldObject({\r\n ...this.config,\r\n shape: { ...this.config.shape, ...extension } as any\r\n });\r\n }\r\n}"]}
|
|
@@ -1,25 +1,38 @@
|
|
|
1
1
|
import { VldBase, ParseResult } from './base';
|
|
2
2
|
/**
|
|
3
3
|
* Immutable record validator for key-value pairs
|
|
4
|
+
* BUG-NEW-018 FIX: Uses comprehensive dangerous key protection
|
|
4
5
|
*/
|
|
5
6
|
export declare class VldRecord<T> extends VldBase<unknown, Record<string, T>> {
|
|
6
|
-
|
|
7
|
+
protected readonly valueValidator: VldBase<unknown, T>;
|
|
7
8
|
private readonly errorMessage?;
|
|
8
9
|
/**
|
|
9
10
|
* Private constructor to enforce immutability
|
|
10
11
|
*/
|
|
11
|
-
|
|
12
|
+
protected constructor(valueValidator: VldBase<unknown, T>, errorMessage?: string | undefined);
|
|
12
13
|
/**
|
|
13
14
|
* Create a new record validator
|
|
14
15
|
*/
|
|
15
16
|
static create<T>(valueValidator: VldBase<unknown, T>): VldRecord<T>;
|
|
16
17
|
/**
|
|
17
18
|
* Parse and validate a record value
|
|
19
|
+
* BUG-NEW-018 FIX: Use comprehensive dangerous key protection
|
|
18
20
|
*/
|
|
19
21
|
parse(value: unknown): Record<string, T>;
|
|
20
22
|
/**
|
|
21
23
|
* Safely parse and validate a record value
|
|
22
24
|
*/
|
|
23
25
|
safeParse(value: unknown): ParseResult<Record<string, T>>;
|
|
26
|
+
/**
|
|
27
|
+
* Create a partial record variant (all keys optional)
|
|
28
|
+
* Similar to v.object().partial() but for records
|
|
29
|
+
*/
|
|
30
|
+
partial(): VldRecord<T | undefined>;
|
|
31
|
+
/**
|
|
32
|
+
* Create a loose record variant (allows extra keys)
|
|
33
|
+
* Similar to v.object().passthrough() but for records
|
|
34
|
+
* Note: Records already allow any keys, so this mainly affects error handling
|
|
35
|
+
*/
|
|
36
|
+
loose(): VldBase<unknown, Record<string, T>>;
|
|
24
37
|
}
|
|
25
38
|
//# sourceMappingURL=record.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAI9C;;;GAGG;AACH,qBAAa,SAAS,CAAC,CAAC,CAAE,SAAQ,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAKjE,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IALhC;;OAEG;IACH,SAAS,aACY,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EACrC,YAAY,CAAC,EAAE,MAAM,YAAA;IAKxC;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAInE;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAyBxC;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAQzD;;;OAGG;IACH,OAAO,IAAI,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IAKnC;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CAK7C"}
|
|
@@ -1,7 +1,9 @@
|
|
|
1
1
|
import { VldBase } from './base.js';
|
|
2
|
-
import { getMessages } from '../locales.js';
|
|
2
|
+
import { getMessages } from '../locales/index.js';
|
|
3
|
+
import { isDangerousKey } from '../utils/security.js';
|
|
3
4
|
/**
|
|
4
5
|
* Immutable record validator for key-value pairs
|
|
6
|
+
* BUG-NEW-018 FIX: Uses comprehensive dangerous key protection
|
|
5
7
|
*/
|
|
6
8
|
export class VldRecord extends VldBase {
|
|
7
9
|
/**
|
|
@@ -20,6 +22,7 @@ export class VldRecord extends VldBase {
|
|
|
20
22
|
}
|
|
21
23
|
/**
|
|
22
24
|
* Parse and validate a record value
|
|
25
|
+
* BUG-NEW-018 FIX: Use comprehensive dangerous key protection
|
|
23
26
|
*/
|
|
24
27
|
parse(value) {
|
|
25
28
|
if (typeof value !== 'object' || value === null || Array.isArray(value)) {
|
|
@@ -28,6 +31,11 @@ export class VldRecord extends VldBase {
|
|
|
28
31
|
const result = {};
|
|
29
32
|
const obj = value;
|
|
30
33
|
for (const [key, val] of Object.entries(obj)) {
|
|
34
|
+
// Skip dangerous keys to prevent prototype pollution
|
|
35
|
+
// Now using comprehensive protection from shared utility
|
|
36
|
+
if (isDangerousKey(key)) {
|
|
37
|
+
continue;
|
|
38
|
+
}
|
|
31
39
|
try {
|
|
32
40
|
result[key] = this.valueValidator.parse(val);
|
|
33
41
|
}
|
|
@@ -48,5 +56,73 @@ export class VldRecord extends VldBase {
|
|
|
48
56
|
return { success: false, error: error };
|
|
49
57
|
}
|
|
50
58
|
}
|
|
59
|
+
/**
|
|
60
|
+
* Create a partial record variant (all keys optional)
|
|
61
|
+
* Similar to v.object().partial() but for records
|
|
62
|
+
*/
|
|
63
|
+
partial() {
|
|
64
|
+
const optionalValidator = this.valueValidator.optional();
|
|
65
|
+
return new VldRecord(optionalValidator);
|
|
66
|
+
}
|
|
67
|
+
/**
|
|
68
|
+
* Create a loose record variant (allows extra keys)
|
|
69
|
+
* Similar to v.object().passthrough() but for records
|
|
70
|
+
* Note: Records already allow any keys, so this mainly affects error handling
|
|
71
|
+
*/
|
|
72
|
+
loose() {
|
|
73
|
+
// For records, "loose" means we don't throw errors for validation failures
|
|
74
|
+
// We return a modified version that catches validation errors
|
|
75
|
+
return new VldLooseRecord(this.valueValidator);
|
|
76
|
+
}
|
|
77
|
+
}
|
|
78
|
+
/**
|
|
79
|
+
* Loose record variant that allows validation failures
|
|
80
|
+
* Used internally by .loose() method
|
|
81
|
+
*/
|
|
82
|
+
class VldLooseRecord extends VldBase {
|
|
83
|
+
constructor(valueValidator) {
|
|
84
|
+
super();
|
|
85
|
+
this.valueValidator = valueValidator;
|
|
86
|
+
}
|
|
87
|
+
parse(value) {
|
|
88
|
+
if (typeof value !== 'object' || value === null || Array.isArray(value)) {
|
|
89
|
+
throw new Error(getMessages().invalidRecord);
|
|
90
|
+
}
|
|
91
|
+
const result = {};
|
|
92
|
+
const obj = value;
|
|
93
|
+
for (const [key, val] of Object.entries(obj)) {
|
|
94
|
+
// Skip dangerous keys
|
|
95
|
+
if (isDangerousKey(key)) {
|
|
96
|
+
continue;
|
|
97
|
+
}
|
|
98
|
+
// For loose records, skip invalid values instead of throwing
|
|
99
|
+
const parseResult = this.valueValidator.safeParse(val);
|
|
100
|
+
if (parseResult.success) {
|
|
101
|
+
result[key] = parseResult.data;
|
|
102
|
+
}
|
|
103
|
+
}
|
|
104
|
+
return result;
|
|
105
|
+
}
|
|
106
|
+
safeParse(value) {
|
|
107
|
+
try {
|
|
108
|
+
return { success: true, data: this.parse(value) };
|
|
109
|
+
}
|
|
110
|
+
catch (error) {
|
|
111
|
+
return { success: false, error: error };
|
|
112
|
+
}
|
|
113
|
+
}
|
|
114
|
+
/**
|
|
115
|
+
* Create a partial variant (all keys optional)
|
|
116
|
+
*/
|
|
117
|
+
partial() {
|
|
118
|
+
const optionalValidator = this.valueValidator.optional();
|
|
119
|
+
return new VldLooseRecord(optionalValidator);
|
|
120
|
+
}
|
|
121
|
+
/**
|
|
122
|
+
* Return self (already loose)
|
|
123
|
+
*/
|
|
124
|
+
loose() {
|
|
125
|
+
return this;
|
|
126
|
+
}
|
|
51
127
|
}
|
|
52
128
|
//# sourceMappingURL=record.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/validators/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;GAGG;AACH,MAAM,OAAO,SAAa,SAAQ,OAAmC;IACnE;;OAEG;IACH,YACqB,cAAmC,EACrC,YAAqB;QAEtC,KAAK,EAAE,CAAC;QAHW,mBAAc,GAAd,cAAc,CAAqB;QACrC,iBAAY,GAAZ,YAAY,CAAS;IAGxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CAAI,cAAmC;QAClD,OAAO,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,qDAAqD;YACrD,yDAAyD;YACzD,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,2EAA2E;QAC3E,8DAA8D;QAC9D,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,cAAkB,SAAQ,OAAmC;IACjE,YAA6B,cAAmC;QAC9D,KAAK,EAAE,CAAC;QADmB,mBAAc,GAAd,cAAc,CAAqB;IAEhE,CAAC;IAED,KAAK,CAAC,KAAc;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAsB,EAAuB,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,sBAAsB;YACtB,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,6DAA6D;YAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,IAAI,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF","sourcesContent":["import { VldBase, ParseResult } from './base';\r\nimport { getMessages } from '../locales';\r\nimport { isDangerousKey } from '../utils/security';\r\n\r\n/**\r\n * Immutable record validator for key-value pairs\r\n * BUG-NEW-018 FIX: Uses comprehensive dangerous key protection\r\n */\r\nexport class VldRecord<T> extends VldBase<unknown, Record<string, T>> {\r\n /**\r\n * Private constructor to enforce immutability\r\n */\r\n protected constructor(\r\n protected readonly valueValidator: VldBase<unknown, T>,\r\n private readonly errorMessage?: string\r\n ) {\r\n super();\r\n }\r\n \r\n /**\r\n * Create a new record validator\r\n */\r\n static create<T>(valueValidator: VldBase<unknown, T>): VldRecord<T> {\r\n return new VldRecord(valueValidator);\r\n }\r\n \r\n /**\r\n * Parse and validate a record value\r\n * BUG-NEW-018 FIX: Use comprehensive dangerous key protection\r\n */\r\n parse(value: unknown): Record<string, T> {\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n throw new Error(this.errorMessage || getMessages().invalidRecord);\r\n }\r\n\r\n const result: Record<string, T> = {};\r\n const obj = value as Record<string, unknown>;\r\n\r\n for (const [key, val] of Object.entries(obj)) {\r\n // Skip dangerous keys to prevent prototype pollution\r\n // Now using comprehensive protection from shared utility\r\n if (isDangerousKey(key)) {\r\n continue;\r\n }\r\n\r\n try {\r\n result[key] = this.valueValidator.parse(val);\r\n } catch (error) {\r\n throw new Error(getMessages().objectField(key, (error as Error).message));\r\n }\r\n }\r\n\r\n return result;\r\n }\r\n \r\n /**\r\n * Safely parse and validate a record value\r\n */\r\n safeParse(value: unknown): ParseResult<Record<string, T>> {\r\n try {\r\n return { success: true, data: this.parse(value) };\r\n } catch (error) {\r\n return { success: false, error: error as Error };\r\n }\r\n }\r\n\r\n /**\r\n * Create a partial record variant (all keys optional)\r\n * Similar to v.object().partial() but for records\r\n */\r\n partial(): VldRecord<T | undefined> {\r\n const optionalValidator = this.valueValidator.optional();\r\n return new VldRecord(optionalValidator);\r\n }\r\n\r\n /**\r\n * Create a loose record variant (allows extra keys)\r\n * Similar to v.object().passthrough() but for records\r\n * Note: Records already allow any keys, so this mainly affects error handling\r\n */\r\n loose(): VldBase<unknown, Record<string, T>> {\r\n // For records, \"loose\" means we don't throw errors for validation failures\r\n // We return a modified version that catches validation errors\r\n return new VldLooseRecord(this.valueValidator);\r\n }\r\n}\r\n\r\n/**\r\n * Loose record variant that allows validation failures\r\n * Used internally by .loose() method\r\n */\r\nclass VldLooseRecord<T> extends VldBase<unknown, Record<string, T>> {\r\n constructor(private readonly valueValidator: VldBase<unknown, T>) {\r\n super();\r\n }\r\n\r\n parse(value: unknown): Record<string, T> {\r\n if (typeof value !== 'object' || value === null || Array.isArray(value)) {\r\n throw new Error(getMessages().invalidRecord);\r\n }\r\n\r\n const result: Record<string, T> = {} as Record<string, T>;\r\n const obj = value as Record<string, unknown>;\r\n\r\n for (const [key, val] of Object.entries(obj)) {\r\n // Skip dangerous keys\r\n if (isDangerousKey(key)) {\r\n continue;\r\n }\r\n\r\n // For loose records, skip invalid values instead of throwing\r\n const parseResult = this.valueValidator.safeParse(val);\r\n if (parseResult.success) {\r\n result[key] = parseResult.data;\r\n }\r\n }\r\n\r\n return result;\r\n }\r\n\r\n safeParse(value: unknown): ParseResult<Record<string, T>> {\r\n try {\r\n return { success: true, data: this.parse(value) };\r\n } catch (error) {\r\n return { success: false, error: error as Error };\r\n }\r\n }\r\n\r\n /**\r\n * Create a partial variant (all keys optional)\r\n */\r\n partial(): VldLooseRecord<T | undefined> {\r\n const optionalValidator = this.valueValidator.optional();\r\n return new VldLooseRecord(optionalValidator);\r\n }\r\n\r\n /**\r\n * Return self (already loose)\r\n */\r\n loose(): VldLooseRecord<T> {\r\n return this;\r\n }\r\n}"]}
|
package/dist/validators/set.js
CHANGED
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
import { VldBase, ParseResult } from './base';
|
|
2
|
+
/**
|
|
3
|
+
* Configuration for string boolean validation
|
|
4
|
+
*/
|
|
5
|
+
export interface StringBoolOptions {
|
|
6
|
+
/** Custom truthy values (default: ['true', '1', 'yes', 'on', 'y', 'enabled']) */
|
|
7
|
+
truthy?: readonly string[];
|
|
8
|
+
/** Custom falsy values (default: ['false', '0', 'no', 'off', 'n', 'disabled']) */
|
|
9
|
+
falsy?: readonly string[];
|
|
10
|
+
/** Whether matching should be case-sensitive (default: false) */
|
|
11
|
+
caseSensitive?: boolean;
|
|
12
|
+
}
|
|
13
|
+
/**
|
|
14
|
+
* Immutable string boolean validator for flexible boolean parsing
|
|
15
|
+
* Supports string representations like "true", "yes", "on", "1", etc.
|
|
16
|
+
*/
|
|
17
|
+
export declare class VldStringBool extends VldBase<unknown, boolean> {
|
|
18
|
+
private readonly options;
|
|
19
|
+
private constructor();
|
|
20
|
+
/**
|
|
21
|
+
* Create a new string boolean validator
|
|
22
|
+
*/
|
|
23
|
+
static create(options?: StringBoolOptions): VldStringBool;
|
|
24
|
+
/**
|
|
25
|
+
* Normalize a string value based on case sensitivity setting
|
|
26
|
+
*/
|
|
27
|
+
private normalizeValue;
|
|
28
|
+
/**
|
|
29
|
+
* Get the effective truthy values (custom or default)
|
|
30
|
+
*/
|
|
31
|
+
private getTruthyValues;
|
|
32
|
+
/**
|
|
33
|
+
* Get the effective falsy values (custom or default)
|
|
34
|
+
*/
|
|
35
|
+
private getFalsyValues;
|
|
36
|
+
/**
|
|
37
|
+
* Parse and validate a string boolean value
|
|
38
|
+
*/
|
|
39
|
+
parse(value: unknown): boolean;
|
|
40
|
+
/**
|
|
41
|
+
* Safely parse and validate a string boolean value
|
|
42
|
+
*/
|
|
43
|
+
safeParse(value: unknown): ParseResult<boolean>;
|
|
44
|
+
/**
|
|
45
|
+
* Create a new validator with custom truthy values
|
|
46
|
+
*/
|
|
47
|
+
withTruthy(values: readonly string[]): VldStringBool;
|
|
48
|
+
/**
|
|
49
|
+
* Create a new validator with custom falsy values
|
|
50
|
+
*/
|
|
51
|
+
withFalsy(values: readonly string[]): VldStringBool;
|
|
52
|
+
/**
|
|
53
|
+
* Create a new validator with case-sensitive matching
|
|
54
|
+
*/
|
|
55
|
+
caseSensitive(): VldStringBool;
|
|
56
|
+
/**
|
|
57
|
+
* Create a new validator with case-insensitive matching (default)
|
|
58
|
+
*/
|
|
59
|
+
caseInsensitive(): VldStringBool;
|
|
60
|
+
}
|
|
61
|
+
//# sourceMappingURL=string-bool.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"string-bool.d.ts","sourceRoot":"","sources":["../../src/validators/string-bool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG9C;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAQD;;;GAGG;AACH,qBAAa,aAAc,SAAQ,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;IAExD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAD1B,OAAO;IAMP;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,OAAO,GAAE,iBAAsB,GAAG,aAAa;IAI7D;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,eAAe;IAIvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IA6C9B;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IAY/C;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa;IAOpD;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa;IAOnD;;OAEG;IACH,aAAa,IAAI,aAAa;IAO9B;;OAEG;IACH,eAAe,IAAI,aAAa;CAMjC"}
|