@plasius/schema 1.2.17 → 1.2.18

package/README.md

@@ -88,6 +88,21 @@ const UserFields = {
 ```
 
 Common methods (non‑exhaustive): `.required()`, `.optional()`, `.default(v|fn)`, `.description(text)`, and type‑specific helpers like `.email()`, `.uuid()`, `.min()`, `.max()`, `.enum([...])`.
+
+Validation standards notes:
+
+- `languageCode()` checks a documented RFC 5646/BCP 47 subset
+  case-insensitively, including grandfathered and private-use tags;
+  two-letter primaries are checked against the package's ISO 639-1 registry.
+  Registered 4-8 letter primaries remain outside this dependency-free subset.
+- `uuid()` accepts the RFC 9562 versions 1-8, Nil, and Max text forms. Legacy
+  RFC 4122-named module paths remain compatibility aliases.
+- `email()` is a pragmatic dot-domain mailbox subset, not a claim of complete
+  RFC 5322 grammar support.
+
+Runtime rollout inherits `governance.rfc-compliance-remediation.enabled`;
+disabled consumers may retain the prior validators only during a documented
+migration window.
 Defaults are applied during validation when inputs are missing/`undefined`.
 Fields are required by default; call `.optional()` (or provide `.default()`) to allow omission.
 Use `.internal()` or `.exposure("internal")` on fields that the server may validate/store but must not include in client-facing payloads.

package/dist/index.cjs

@@ -284,8 +284,8 @@ var validateUrl = (value) => {
 // src/validation/uuid.RFC4122.ts
 var validateUUID = (value) => {
   if (typeof value !== "string") return false;
-  const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-  return uuidRegex.test(value);
+  const standard = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+  return standard.test(value) || value.toLowerCase() === "00000000-0000-0000-0000-000000000000" || value.toLowerCase() === "ffffffff-ffff-ffff-ffff-ffffffffffff";
 };
 
 // src/validation/dateTime.ISO8601.ts
@@ -1032,10 +1032,10 @@ function isIsoLanguageCode(value) {
   return typeof value === "string" && ISO_LANGUAGE_SET.has(value.toLowerCase());
 }
 function isRegionSubtag(value) {
-  return /^[A-Z]{2}$/.test(value) || /^\d{3}$/.test(value);
+  return /^[A-Za-z]{2}$/.test(value) || /^\d{3}$/.test(value);
 }
 function isScriptSubtag(value) {
-  return /^[A-Z][a-z]{3}$/.test(value);
+  return /^[A-Za-z]{4}$/.test(value);
 }
 function isVariantSubtag(value) {
   return /^([0-9][A-Za-z0-9]{3}|[A-Za-z0-9]{5,8})$/.test(value);
@@ -1055,20 +1055,42 @@ function isPrivateUseSubtag(value) {
 function validateLanguage(value) {
   if (typeof value !== "string" || value.length === 0) return false;
   const parts = value.split("-");
+  if (parts.some((part) => part.length === 0)) return false;
+  const lowerTag = value.toLowerCase();
+  if (GRANDFATHERED_TAGS.has(lowerTag)) return true;
+  if (parts[0]?.toLowerCase() === "x") {
+    return parts.length > 1 && parts.slice(1).every(isPrivateUseSubtag);
+  }
   let i = 0;
   const lang = parts[i];
-  if (!lang || !isIsoLanguageCode(lang)) return false;
+  if (!lang || !/^[A-Za-z]{2,3}$/.test(lang)) return false;
+  if (lang.length === 2 && !isIsoLanguageCode(lang)) return false;
   i += 1;
+  if (lang.length <= 3) {
+    let extlangCount = 0;
+    while (i < parts.length && extlangCount < 3 && /^[A-Za-z]{3}$/.test(parts[i])) {
+      i += 1;
+      extlangCount += 1;
+    }
+  }
   if (i < parts.length && isScriptSubtag(parts[i])) {
     i += 1;
   }
   if (i < parts.length && isRegionSubtag(parts[i].toUpperCase())) {
     i += 1;
   }
+  const variants = /* @__PURE__ */ new Set();
   while (i < parts.length && isVariantSubtag(parts[i])) {
+    const variant = parts[i].toLowerCase();
+    if (variants.has(variant)) return false;
+    variants.add(variant);
     i += 1;
   }
+  const extensionSingletons = /* @__PURE__ */ new Set();
   while (i < parts.length && isExtensionSingleton(parts[i])) {
+    const singleton = parts[i].toLowerCase();
+    if (extensionSingletons.has(singleton)) return false;
+    extensionSingletons.add(singleton);
     i += 1;
     if (!(i < parts.length && isExtensionSubtag(parts[i]))) return false;
     while (i < parts.length && isExtensionSubtag(parts[i])) {
@@ -1084,6 +1106,34 @@ function validateLanguage(value) {
   }
   return i === parts.length;
 }
+var GRANDFATHERED_TAGS = /* @__PURE__ */ new Set([
+  "art-lojban",
+  "cel-gaulish",
+  "en-gb-oed",
+  "i-ami",
+  "i-bnn",
+  "i-default",
+  "i-enochian",
+  "i-hak",
+  "i-klingon",
+  "i-lux",
+  "i-mingo",
+  "i-navajo",
+  "i-pwn",
+  "i-tao",
+  "i-tay",
+  "i-tsu",
+  "no-bok",
+  "no-nyn",
+  "sgn-be-fr",
+  "sgn-be-nl",
+  "sgn-ch-de",
+  "zh-guoyu",
+  "zh-hakka",
+  "zh-min",
+  "zh-min-nan",
+  "zh-xiang"
+]);
 
 // src/field.ts
 var field = {