@plasius/schema 1.4.0 → 1.4.2

package/dist/feedback-diagnostics.js

@@ -1,7 +1,7 @@
 import {
   FeedbackGameDiagnosticsSchema,
   validateFeedbackGameDiagnostics
-} from "./chunk-UQHPDQZX.js";
+} from "./chunk-GNL2RBO5.js";
 import {
   FEEDBACK_BACKEND_BUCKETS,
   FEEDBACK_CONTRACT_VERSION,

package/dist/index.cjs

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  FEEDBACK_ABUSE_BLOCK_BANDS: () => FEEDBACK_ABUSE_BLOCK_BANDS,
   FEEDBACK_ANALYSIS_MODEL_VERSIONS: () => FEEDBACK_ANALYSIS_MODEL_VERSIONS,
   FEEDBACK_BACKEND_BUCKETS: () => FEEDBACK_BACKEND_BUCKETS,
   FEEDBACK_BUG_COOLDOWN_SECONDS: () => FEEDBACK_BUG_COOLDOWN_SECONDS,
@@ -51,8 +52,10 @@ __export(index_exports, {
   FEEDBACK_VIEWPORT_BUCKETS: () => FEEDBACK_VIEWPORT_BUCKETS,
   FeedbackAcceptanceReceiptSchema: () => FeedbackAcceptanceReceiptSchema,
   FeedbackAnalysisReceiptSchema: () => FeedbackAnalysisReceiptSchema,
+  FeedbackBugHealthMetricsProjectionSchema: () => FeedbackBugHealthMetricsProjectionSchema,
   FeedbackBugPacketSchema: () => FeedbackBugPacketSchema,
   FeedbackBugSubmissionRequestSchema: () => FeedbackBugSubmissionRequestSchema,
+  FeedbackCommittedAcceptanceEvidenceSchema: () => FeedbackCommittedAcceptanceEvidenceSchema,
   FeedbackContextSchema: () => FeedbackContextSchema,
   FeedbackDailySatisfactionReportSchema: () => FeedbackDailySatisfactionReportSchema,
   FeedbackDerivedAnalysisSchema: () => FeedbackDerivedAnalysisSchema,
@@ -1782,45 +1785,113 @@ function getShape(def) {
 var MAX_STRICT_VALIDATION_NODES = 1e4;
 var MAX_STRICT_VALIDATION_DEPTH = 256;
 var MAX_STRICT_VALIDATION_OBJECTS = MAX_STRICT_VALIDATION_NODES;
-function strictInputIsWithinComplexityLimit(input) {
-  const pending = [
-    { value: input, depth: 0 }
-  ];
+function snapshotStrictInput(input) {
+  const snapshot = Array.isArray(input) ? [] : {};
+  const pending = [{ source: input, target: snapshot, depth: 0 }];
   const seen = /* @__PURE__ */ new WeakSet();
-  let visitedNodes = 0;
+  let visitedNodes = 1;
   try {
     while (pending.length > 0) {
       const current = pending.pop();
       if (!current) {
         continue;
       }
-      visitedNodes += 1;
       if (visitedNodes > MAX_STRICT_VALIDATION_NODES || current.depth > MAX_STRICT_VALIDATION_DEPTH) {
-        return false;
+        return { valid: false };
       }
-      if (typeof current.value !== "object" || current.value === null) {
-        continue;
+      if (seen.has(current.source)) {
+        return { valid: false };
       }
-      if (seen.has(current.value)) {
-        return false;
+      seen.add(current.source);
+      const isArray = Array.isArray(current.source);
+      const prototype = Object.getPrototypeOf(current.source);
+      if (isArray && prototype !== Array.prototype || !isArray && prototype !== Object.prototype && prototype !== null) {
+        return { valid: false };
       }
-      seen.add(current.value);
-      const keys = Object.keys(current.value);
-      if (visitedNodes + pending.length + keys.length > MAX_STRICT_VALIDATION_NODES) {
-        return false;
+      const ownKeys = Reflect.ownKeys(current.source);
+      if (visitedNodes + ownKeys.length > MAX_STRICT_VALIDATION_NODES) {
+        return { valid: false };
+      }
+      const descriptors = /* @__PURE__ */ new Map();
+      for (const key of ownKeys) {
+        const descriptor = Object.getOwnPropertyDescriptor(
+          current.source,
+          key
+        );
+        if (descriptor === void 0) {
+          return { valid: false };
+        }
+        descriptors.set(key, descriptor);
       }
-      const record = current.value;
+      if (isArray) {
+        const lengthDescriptor = descriptors.get("length");
+        if (lengthDescriptor === void 0 || !("value" in lengthDescriptor) || !Number.isSafeInteger(lengthDescriptor.value) || lengthDescriptor.value < 0 || lengthDescriptor.value > MAX_STRICT_VALIDATION_NODES) {
+          return { valid: false };
+        }
+        let elementCount = 0;
+        for (const key of ownKeys) {
+          if (key === "length") {
+            continue;
+          }
+          if (typeof key !== "string" || !/^(?:0|[1-9]\d*)$/.test(key)) {
+            return { valid: false };
+          }
+          const descriptor = descriptors.get(key);
+          if (descriptor === void 0 || descriptor.enumerable !== true || Number(key) >= lengthDescriptor.value) {
+            return { valid: false };
+          }
+          elementCount += 1;
+        }
+        if (elementCount !== lengthDescriptor.value) {
+          return { valid: false };
+        }
+      }
+      visitedNodes += ownKeys.length;
+      const keys = ownKeys.filter(
+        (key) => descriptors.get(key)?.enumerable
+      );
       for (const key of keys) {
-        pending.push({
-          value: record[key],
-          depth: current.depth + 1
+        if (typeof key !== "string") {
+          return { valid: false };
+        }
+        if (isArray && !/^(?:0|[1-9]\d*)$/.test(key)) {
+          return { valid: false };
+        }
+        const descriptor = descriptors.get(key);
+        if (descriptor === void 0 || !("value" in descriptor) || descriptor.get !== void 0 || descriptor.set !== void 0) {
+          return { valid: false };
+        }
+        const child = descriptor.value;
+        if (typeof child === "function") {
+          return { valid: false };
+        }
+        if (typeof child === "object" && child !== null) {
+          const childSnapshot = Array.isArray(child) ? [] : {};
+          Object.defineProperty(current.target, key, {
+            value: childSnapshot,
+            enumerable: true,
+            configurable: true,
+            writable: true
+          });
+          pending.push({
+            source: child,
+            target: childSnapshot,
+            depth: current.depth + 1
+          });
+          continue;
+        }
+        Object.defineProperty(current.target, key, {
+          value: child,
+          enumerable: true,
+          configurable: true,
+          writable: true
         });
       }
     }
   } catch {
-    return false;
+    return { valid: false };
   }
-  return true;
+  return { valid: true, value: snapshot };
 }
 function strictReferenceShape(def) {
   return {
@@ -2387,8 +2458,10 @@ function createSchema(_shape, entityType, options = {
       if (typeof input !== "object" || input === null) {
         return { valid: false, errors: ["Input must be an object"] };
       }
+      let strictInputSnapshot;
       if (options.unknownFields === "reject") {
-        if (!strictInputIsWithinComplexityLimit(input)) {
+        const snapshot = snapshotStrictInput(input);
+        if (!snapshot.valid) {
           return {
             valid: false,
             errors: ["Strict validation complexity limit exceeded."],
@@ -2401,16 +2474,32 @@ function createSchema(_shape, entityType, options = {
             ]
           };
         }
+        strictInputSnapshot = snapshot.value;
         const scanState = {
           remainingObjects: MAX_STRICT_VALIDATION_OBJECTS,
           limitExceeded: false
         };
-        const locations = unknownFieldLocations(
-          input,
-          schema._shape,
-          "root",
-          scanState
-        );
+        let locations;
+        try {
+          locations = unknownFieldLocations(
+            strictInputSnapshot,
+            schema._shape,
+            "root",
+            scanState
+          );
+        } catch {
+          return {
+            valid: false,
+            errors: ["Strict validation complexity limit exceeded."],
+            issues: [
+              {
+                path: "root",
+                code: "validation_complexity_limit",
+                message: "Strict validation complexity limit exceeded."
+              }
+            ]
+          };
+        }
         if (scanState.limitExceeded) {
           return {
             valid: false,
@@ -2438,7 +2527,23 @@ function createSchema(_shape, entityType, options = {
           };
         }
       }
-      const working = typeof input === "object" && input !== null ? deepClone(input) : { ...input };
+      let working;
+      try {
+        working = strictInputSnapshot ?? (typeof input === "object" && input !== null ? deepClone(input) : { ...input });
+      } catch {
+        return {
+          valid: false,
+          errors: ["Input could not be safely cloned."],
+          issues: [
+            {
+              path: "root",
+              code: "unsafe_input",
+              message: "Input could not be safely cloned."
+            }
+          ]
+        };
+      }
+      const providedFieldNames = new Set(Object.keys(working));
       if (working.type == null) working.type = entityType;
       if (working.version == null) working.version = version;
       const fromVersion = String(working.version ?? "0.0.0");
@@ -2555,9 +2660,8 @@ function createSchema(_shape, entityType, options = {
       }
       if (errors.length === 0 && options.schemaValidator) {
         const castValue = result;
-        const source = input;
         const validationContext = Object.freeze({
-          wasProvided: (fieldName) => Object.prototype.hasOwnProperty.call(source, fieldName)
+          wasProvided: (fieldName) => providedFieldNames.has(fieldName)
         });
         if (!options.schemaValidator(castValue, validationContext)) {
           errors.push("Schema-level validation failed.");
@@ -3397,6 +3501,15 @@ var FEEDBACK_BUG_COOLDOWN_SECONDS = Object.freeze([
   24 * 60 * 60
 ]);
 var FEEDBACK_REVIEW_COOLDOWN_SECONDS = 30 * 24 * 60 * 60;
+var FEEDBACK_ABUSE_BLOCK_BANDS = Object.freeze([
+  "five-minutes",
+  "fifteen-minutes",
+  "one-hour",
+  "six-hours",
+  "twenty-four-hours",
+  "fail-closed",
+  "edge-blocked"
+]);
 var FEEDBACK_ISSUE_TYPES = [
   "visual-layout",
   "functionality",
@@ -3614,6 +3727,7 @@ var BASE64URL_ALPHABET2 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0
 var BUG_HOUR_WINDOW_PATTERN = /^\d{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01])T(?:[01]\d|2[0-3])$/;
 var REVIEW_DAY_WINDOW_PATTERN = /^\d{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01])$/;
 var RECONCILIATION_WINDOW_PATTERN = /^\d{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01])T(?:[01]\d|2[0-3]):(?:[0-5]\d)$/;
+var CANONICAL_SERVER_UTC_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
 var strictOptions = {
   version: FEEDBACK_CONTRACT_VERSION,
   piiEnforcement: "strict",
@@ -3621,6 +3735,16 @@ var strictOptions = {
   identity: "exact"
 };
 var uuidField = () => field.string().validator((value) => OPAQUE_UUID_V4_PATTERN.test(value)).description("Opaque UUID generated for the feedback workflow");
+var isCanonicalServerUtc = (value) => {
+  if (typeof value !== "string" || !CANONICAL_SERVER_UTC_PATTERN.test(value)) {
+    return false;
+  }
+  const timestamp = Date.parse(value);
+  return Number.isFinite(timestamp) && new Date(timestamp).toISOString() === value;
+};
+var canonicalServerUtcField = () => field.dateTimeISO().validator(isCanonicalServerUtc).description(
+  "Canonical millisecond-precision UTC timestamp supplied by the trusted server"
+);
 var draftIdField = () => field.string().validator((value) => OPAQUE_UUID_V4_PATTERN.test(value)).description("Opaque identifier for one short-lived structured draft").PID({
   classification: "low",
   action: "none",
@@ -4284,6 +4408,52 @@ var FeedbackReviewPacketSchema = createSchema(
     schemaValidator: (value) => value.analysis === void 0 || isAnalysisProjectionConsistent(value.analysis)
   }
 );
+var FeedbackCommittedAcceptanceEvidenceSchema = createSchema(
+  {
+    packetId: uuidField(),
+    packetKind: field.string().enum(["bug", "review"]),
+    acceptedAt: canonicalServerUtcField()
+  },
+  "feedback-committed-acceptance-evidence",
+  strictOptions
+);
+var FeedbackBugHealthMetricsProjectionSchema = createSchema(
+  {
+    projectionId: uuidField(),
+    windowStart: canonicalServerUtcField(),
+    windowEnd: canonicalServerUtcField(),
+    observedAt: canonicalServerUtcField(),
+    finalized: field.boolean().validator((value) => value === true),
+    rejectedCount: countField(),
+    trafficDenominator: countField(),
+    abuseBlockBands: field.array(
+      field.object({
+        id: field.string().enum(FEEDBACK_ABUSE_BLOCK_BANDS),
+        count: positiveCountField2()
+      })
+    ).max(FEEDBACK_ABUSE_BLOCK_BANDS.length)
+  },
+  "feedback-bug-health-metrics-projection",
+  {
+    ...strictOptions,
+    schemaValidator: (value) => {
+      const blockBands = value.abuseBlockBands;
+      let previousIndex = -1;
+      const canonicalBands = blockBands.every((bucket) => {
+        const index = FEEDBACK_ABUSE_BLOCK_BANDS.indexOf(bucket.id);
+        if (index <= previousIndex) {
+          return false;
+        }
+        previousIndex = index;
+        return true;
+      });
+      return orderedWindow(
+        { ...value, generatedAt: value.observedAt },
+        60 * 60 * 1e3
+      ) && Date.parse(String(value.observedAt)) >= Date.parse(String(value.windowEnd)) && canonicalBands;
+    }
+  }
+);
 var FeedbackGameReconstructionManifestSchema = createSchema(
   {
     reconstructionId: uuidField(),
@@ -4408,20 +4578,10 @@ var FeedbackHourlyBugReportSchema = createSchema(
     abuseBlockBands: field.array(
       field.object(
         distributionShape(
-          () => field.string().enum(
-            [
-              "five-minutes",
-              "fifteen-minutes",
-              "one-hour",
-              "six-hours",
-              "twenty-four-hours",
-              "fail-closed",
-              "edge-blocked"
-            ]
-          )
+          () => field.string().enum(FEEDBACK_ABUSE_BLOCK_BANDS)
         )
       )
-    ).max(16),
+    ).max(FEEDBACK_ABUSE_BLOCK_BANDS.length),
     comparison: field.object({
       previousHourRatio: field.number().min(0).max(1e3),
       sevenDaySameHourRatio: field.number().min(0).max(1e3)
@@ -4742,6 +4902,7 @@ var FeedbackMaterializationManifestSchema = createSchema(
 );
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  FEEDBACK_ABUSE_BLOCK_BANDS,
   FEEDBACK_ANALYSIS_MODEL_VERSIONS,
   FEEDBACK_BACKEND_BUCKETS,
   FEEDBACK_BUG_COOLDOWN_SECONDS,
@@ -4773,8 +4934,10 @@ var FeedbackMaterializationManifestSchema = createSchema(
   FEEDBACK_VIEWPORT_BUCKETS,
   FeedbackAcceptanceReceiptSchema,
   FeedbackAnalysisReceiptSchema,
+  FeedbackBugHealthMetricsProjectionSchema,
   FeedbackBugPacketSchema,
   FeedbackBugSubmissionRequestSchema,
+  FeedbackCommittedAcceptanceEvidenceSchema,
   FeedbackContextSchema,
   FeedbackDailySatisfactionReportSchema,
   FeedbackDerivedAnalysisSchema,