@researchdatabox/sails-ng-common 5.0.3 → 5.0.4-beta.12498

package/dist/src/record-save.model.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Contracts shared by the browser and server for record-save operations.
+ *
+ * These are deliberately data-only contracts.  The server and Angular
+ * packages provide their own runtime response classes while this package
+ * remains safe to consume from either side of the application.
+ */
+import { LineagePathsOptional, LineagePathsPartial } from './config/names/naming-helpers';
+import type { RecordConcurrencyMetadata } from './record-concurrency.model';
+export interface ActionResult {
+    /** True when the requested primary action was completed. */
+    success: boolean;
+    /** The record identifier, when one is known. */
+    oid: string;
+    /** Compatibility summary for legacy callers. */
+    message: string;
+    /** Action-specific response data. */
+    data?: unknown;
+    /** Authoritative server-projected metadata, or null when unavailable. */
+    metadata: Record<string, unknown> | null;
+}
+export type RecordSaveOutcome = 'saved' | 'saved-with-warnings' | 'not-saved' | 'unknown';
+export declare const RECORD_SAVE_PROBLEM_KINDS: readonly ["validation", "processing", "authorization", "conflict", "system", "network"];
+export type RecordSaveProblemKind = (typeof RECORD_SAVE_PROBLEM_KINDS)[number];
+export type RecordSaveProblemSource = 'schema';
+export type RecordSaveLifecyclePhase = 'pre-save' | 'persistence' | 'attachments' | 'post-save' | 'response' | 'transport';
+export type RecordSavePhase = 'schema' | RecordSaveLifecyclePhase;
+export type RecordSaveValidatorParameterPrimitive = string | number | boolean | null;
+export type RecordSaveValidatorParameterValue = RecordSaveValidatorParameterPrimitive | RecordSaveValidatorParameterPrimitive[];
+export type RecordSaveValidatorParameters = Record<string, RecordSaveValidatorParameterValue>;
+export declare const RECORD_SAVE_VALIDATOR_PARAMETER_LIMITS: {
+    readonly maxEntries: 16;
+    readonly maxKeyLength: 64;
+    readonly maxStringLength: 256;
+    readonly maxArrayLength: 16;
+    readonly maxSerializedLength: 4096;
+};
+export declare const RECORD_SAVE_VALIDATOR_CLASS_MAX_LENGTH = 128;
+export declare const RECORD_SAVE_MESSAGE_MAX_LENGTH = 1024;
+export declare const RECORD_SAVE_VALIDATOR_PARAMETER_KEY_PATTERN: RegExp;
+export declare const RECORD_SAVE_PUBLIC_FIELD_LIMITS: {
+    readonly maxCodeLength: 128;
+    readonly maxFieldLength: 128;
+    readonly maxPointerLength: 2048;
+    readonly maxAttachmentIdLength: 128;
+};
+export declare const RECORD_SAVE_PUBLIC_IDENTIFIER_PATTERN: RegExp;
+export declare const RECORD_SAVE_EXPECTED_JSON_TYPES: readonly ["array", "boolean", "integer", "null", "number", "object", "string"];
+export type RecordSaveExpectedJsonType = (typeof RECORD_SAVE_EXPECTED_JSON_TYPES)[number];
+export interface RecordSaveIssueExpectedShape {
+    type: RecordSaveExpectedJsonType;
+}
+export declare const RECORD_SAVE_LINEAGE_LIMITS: {
+    readonly maxSegments: 64;
+    readonly maxSegmentLength: 128;
+    readonly maxPointerLength: 2048;
+};
+export interface RecordSaveIssue {
+    /** A safe, stable identifier suitable for translation or support lookup. */
+    code?: string;
+    /** Safe user-facing text. Raw provider/exception text must not be placed here. */
+    message: string;
+    /** Configured form field name, when the issue maps unambiguously. */
+    field?: string;
+    /** JSON pointer into Angular or record metadata, when available. */
+    pointer?: string;
+    /** Narrow structural expectation safe to expose for schema type failures. */
+    expected?: RecordSaveIssueExpectedShape;
+    /** Logical attachment identity, never a storage key or path. */
+    attachmentId?: string;
+    /** Validator implementation class, when this is a validator failure. */
+    class?: string;
+    /** Bounded scalar parameters used to render a configured validator message. */
+    params?: RecordSaveValidatorParameters;
+    /** Validator-configured field ownership override. */
+    targetField?: LineagePathsPartial;
+    /** Lineage of the field or form control that produced the issue. */
+    lineagePaths?: LineagePathsOptional;
+}
+/** True only for root or syntactically valid RFC 6901 JSON pointers. */
+export declare function isRecordSaveJsonPointer(value: unknown): value is string;
+/** Remove non-allowlisted, executable, excessive, and otherwise unsafe validator parameters. */
+export declare function sanitizeRecordSaveValidatorParameters(value: unknown, validatorClass?: unknown): RecordSaveValidatorParameters | undefined;
+/**
+ * Copy only the public issue allowlist and normalize bounded validator/lineage
+ * metadata. This is suitable for a response serialization boundary.
+ */
+export declare function sanitizeRecordSaveIssue(value: unknown): RecordSaveIssue;
+export interface RecordSaveSchemaProblem {
+    kind: RecordSaveProblemKind;
+    source: RecordSaveProblemSource;
+    phase: 'schema';
+    issues: RecordSaveIssue[];
+}
+export interface RecordSaveLifecycleProblem {
+    kind: RecordSaveProblemKind;
+    source?: never;
+    phase: RecordSaveLifecyclePhase;
+    issues: RecordSaveIssue[];
+}
+/** A nonblocking form suggestion, distinct from incomplete save work. */
+export interface RecordSaveAdvisoryProblem {
+    kind: 'validation';
+    source: 'advisory';
+    phase: 'pre-save' | 'post-save';
+    issues: RecordSaveIssue[];
+}
+/** Provenance and phase form one discriminated contract. */
+export type RecordSaveProblem = RecordSaveSchemaProblem | RecordSaveLifecycleProblem | RecordSaveAdvisoryProblem;
+export type RecordAttachmentOperation = 'add' | 'finalize' | 'delete';
+export type RecordAttachmentItemStatus = 'completed' | 'incomplete' | 'unknown';
+export type RecordAttachmentCompletionStatus = 'not-required' | 'completed' | 'incomplete' | 'unknown';
+export interface RecordAttachmentCompletionItem {
+    field: string;
+    attachmentId: string;
+    fileId?: string;
+    operation: RecordAttachmentOperation;
+    status: RecordAttachmentItemStatus;
+    /** A safe, bounded code such as attachment-reupload-required. */
+    code?: string;
+}
+export interface RecordAttachmentCompletion {
+    status: RecordAttachmentCompletionStatus;
+    items: RecordAttachmentCompletionItem[];
+}
+export interface RecordSaveCompletion {
+    attachments: RecordAttachmentCompletion;
+}
+export interface RecordSaveResult extends ActionResult {
+    outcome: RecordSaveOutcome;
+    problems: RecordSaveProblem[];
+    completion: RecordSaveCompletion;
+    requestId: string;
+    concurrency?: RecordConcurrencyMetadata;
+}
+/** A schema warning can coexist with a complete save; unfinished work cannot. */
+export declare function isRecordSaveComplete(result: Pick<RecordSaveResult, 'outcome' | 'problems' | 'completion'>): boolean;
+export type StorageMutationApplicationState = 'applied' | 'not-applied' | 'unknown';
+export declare function emptyRecordSaveCompletion(): RecordSaveCompletion;
+/**
+ * Reduce item-level attachment facts into the public aggregate status.
+ * Unknown takes precedence over incomplete because it represents less
+ * certainty about the physical operation.
+ */
+export declare function reduceAttachmentStatus(items: readonly RecordAttachmentCompletionItem[]): RecordAttachmentCompletionStatus;
+export declare function isRecordSaveOutcome(value: unknown): value is RecordSaveOutcome;
+export declare function isRecordSaveProblemKind(value: unknown): value is RecordSaveProblemKind;
+/**
+ * Canonical save request-correlation identifier: one RFC 4122 UUID. It is
+ * correlation only and is never treated as an idempotency key.
+ */
+export declare const RECORD_SAVE_REQUEST_ID_PATTERN: RegExp;
+export declare const RECORD_SAVE_REQUEST_ID_MAX_LENGTH = 36;
+export declare function isRecordSaveRequestId(value: unknown): value is string;

package/dist/src/record-save.model.js

@@ -0,0 +1,289 @@
+"use strict";
+/**
+ * Contracts shared by the browser and server for record-save operations.
+ *
+ * These are deliberately data-only contracts.  The server and Angular
+ * packages provide their own runtime response classes while this package
+ * remains safe to consume from either side of the application.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RECORD_SAVE_REQUEST_ID_MAX_LENGTH = exports.RECORD_SAVE_REQUEST_ID_PATTERN = exports.RECORD_SAVE_LINEAGE_LIMITS = exports.RECORD_SAVE_EXPECTED_JSON_TYPES = exports.RECORD_SAVE_PUBLIC_IDENTIFIER_PATTERN = exports.RECORD_SAVE_PUBLIC_FIELD_LIMITS = exports.RECORD_SAVE_VALIDATOR_PARAMETER_KEY_PATTERN = exports.RECORD_SAVE_MESSAGE_MAX_LENGTH = exports.RECORD_SAVE_VALIDATOR_CLASS_MAX_LENGTH = exports.RECORD_SAVE_VALIDATOR_PARAMETER_LIMITS = exports.RECORD_SAVE_PROBLEM_KINDS = void 0;
+exports.isRecordSaveJsonPointer = isRecordSaveJsonPointer;
+exports.sanitizeRecordSaveValidatorParameters = sanitizeRecordSaveValidatorParameters;
+exports.sanitizeRecordSaveIssue = sanitizeRecordSaveIssue;
+exports.isRecordSaveComplete = isRecordSaveComplete;
+exports.emptyRecordSaveCompletion = emptyRecordSaveCompletion;
+exports.reduceAttachmentStatus = reduceAttachmentStatus;
+exports.isRecordSaveOutcome = isRecordSaveOutcome;
+exports.isRecordSaveProblemKind = isRecordSaveProblemKind;
+exports.isRecordSaveRequestId = isRecordSaveRequestId;
+const plain_record_1 = require("./internal/plain-record");
+exports.RECORD_SAVE_PROBLEM_KINDS = [
+    'validation',
+    'processing',
+    'authorization',
+    'conflict',
+    'system',
+    'network',
+];
+exports.RECORD_SAVE_VALIDATOR_PARAMETER_LIMITS = {
+    maxEntries: 16,
+    maxKeyLength: 64,
+    maxStringLength: 256,
+    maxArrayLength: 16,
+    maxSerializedLength: 4_096,
+};
+exports.RECORD_SAVE_VALIDATOR_CLASS_MAX_LENGTH = 128;
+exports.RECORD_SAVE_MESSAGE_MAX_LENGTH = 1_024;
+exports.RECORD_SAVE_VALIDATOR_PARAMETER_KEY_PATTERN = /^[A-Za-z][A-Za-z0-9_.-]*$/;
+exports.RECORD_SAVE_PUBLIC_FIELD_LIMITS = {
+    maxCodeLength: 128,
+    maxFieldLength: 128,
+    maxPointerLength: 2_048,
+    maxAttachmentIdLength: 128,
+};
+exports.RECORD_SAVE_PUBLIC_IDENTIFIER_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]*$/;
+exports.RECORD_SAVE_EXPECTED_JSON_TYPES = [
+    'array',
+    'boolean',
+    'integer',
+    'null',
+    'number',
+    'object',
+    'string',
+];
+exports.RECORD_SAVE_LINEAGE_LIMITS = {
+    maxSegments: 64,
+    maxSegmentLength: 128,
+    maxPointerLength: 2_048,
+};
+/** True only for root or syntactically valid RFC 6901 JSON pointers. */
+function isRecordSaveJsonPointer(value) {
+    if (typeof value !== 'string' || (value !== '' && !value.startsWith('/'))) {
+        return false;
+    }
+    for (let index = 0; index < value.length; index += 1) {
+        if (value[index] !== '~')
+            continue;
+        const escaped = value[index + 1];
+        if (escaped !== '0' && escaped !== '1')
+            return false;
+        index += 1;
+    }
+    return true;
+}
+function sanitizeRecordSaveIssueExpected(value) {
+    if (!(0, plain_record_1.isPlainRecord)(value))
+        return undefined;
+    const type = value.type;
+    return typeof type === 'string' && exports.RECORD_SAVE_EXPECTED_JSON_TYPES.includes(type)
+        ? { type: type }
+        : undefined;
+}
+/**
+ * Validator parameters are not a generic public bag. This allowlist contains
+ * only bounded derived facts needed by shipped translations; submitted values,
+ * configured patterns/expressions/descriptions, and provider details stay
+ * server-side.
+ */
+const PUBLIC_VALIDATOR_PARAMETER_RULES = {
+    min: { requiredThreshold: 'number' },
+    max: { requiredThreshold: 'number' },
+    minLength: { actualLength: 'number', requiredLength: 'number' },
+    maxLength: { actualLength: 'number', requiredLength: 'number' },
+    required: { required: 'boolean' },
+    requiredTrue: { required: 'boolean' },
+    'different-values': { controlCount: 'number', valueCount: 'number' },
+    'typeahead-source': { multiSelect: 'boolean', sourceType: 'source-type' },
+};
+function safeValidatorParameterForRule(value, rule) {
+    if (rule === 'number')
+        return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+    if (rule === 'boolean')
+        return typeof value === 'boolean' ? value : undefined;
+    return value === 'static' || value === 'vocabulary' || value === 'query' || value === 'service' ? value : undefined;
+}
+/** Remove non-allowlisted, executable, excessive, and otherwise unsafe validator parameters. */
+function sanitizeRecordSaveValidatorParameters(value, validatorClass) {
+    if (!(0, plain_record_1.isPlainRecord)(value)) {
+        return undefined;
+    }
+    const rules = typeof validatorClass === 'string' ? PUBLIC_VALIDATOR_PARAMETER_RULES[validatorClass] : undefined;
+    if (!rules)
+        return undefined;
+    const result = {};
+    let acceptedEntries = 0;
+    for (const [key, rawValue] of Object.entries(value)) {
+        if (acceptedEntries >= exports.RECORD_SAVE_VALIDATOR_PARAMETER_LIMITS.maxEntries) {
+            break;
+        }
+        if (!exports.RECORD_SAVE_VALIDATOR_PARAMETER_KEY_PATTERN.test(key) ||
+            key.length > exports.RECORD_SAVE_VALIDATOR_PARAMETER_LIMITS.maxKeyLength) {
+            continue;
+        }
+        const rule = rules[key];
+        const safeValue = rule ? safeValidatorParameterForRule(rawValue, rule) : undefined;
+        if (safeValue === undefined) {
+            continue;
+        }
+        const candidate = { ...result, [key]: safeValue };
+        if (JSON.stringify(candidate).length <= exports.RECORD_SAVE_VALIDATOR_PARAMETER_LIMITS.maxSerializedLength) {
+            result[key] = safeValue;
+            acceptedEntries += 1;
+        }
+    }
+    return acceptedEntries > 0 ? result : undefined;
+}
+function sanitizeLineagePath(value) {
+    if (!Array.isArray(value) || value.length > exports.RECORD_SAVE_LINEAGE_LIMITS.maxSegments) {
+        return undefined;
+    }
+    const result = [];
+    for (const segment of value) {
+        if (typeof segment === 'string') {
+            if (segment.length > exports.RECORD_SAVE_LINEAGE_LIMITS.maxSegmentLength) {
+                return undefined;
+            }
+            result.push(segment);
+        }
+        else if (typeof segment === 'number' && Number.isSafeInteger(segment) && segment >= 0) {
+            result.push(segment);
+        }
+        else {
+            return undefined;
+        }
+    }
+    return result;
+}
+function sanitizeLineagePathProperties(value) {
+    if (!(0, plain_record_1.isPlainRecord)(value)) {
+        return undefined;
+    }
+    const result = {};
+    for (const key of ['formConfig', 'dataModel', 'angularComponents', 'layout']) {
+        if (value[key] !== undefined) {
+            const path = sanitizeLineagePath(value[key]);
+            if (path !== undefined) {
+                result[key] = path;
+            }
+        }
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+}
+function sanitizeLineagePaths(value) {
+    if (!(0, plain_record_1.isPlainRecord)(value)) {
+        return undefined;
+    }
+    const result = sanitizeLineagePathProperties(value) ?? {};
+    for (const key of ['angularComponentsJsonPointer', 'layoutJsonPointer']) {
+        const pointer = value[key];
+        if (typeof pointer === 'string' && pointer.length <= exports.RECORD_SAVE_LINEAGE_LIMITS.maxPointerLength) {
+            result[key] = pointer;
+        }
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+}
+/**
+ * Copy only the public issue allowlist and normalize bounded validator/lineage
+ * metadata. This is suitable for a response serialization boundary.
+ */
+function sanitizeRecordSaveIssue(value) {
+    const item = (0, plain_record_1.isPlainRecord)(value) ? value : {};
+    const issue = {
+        message: typeof item.message === 'string' ? item.message.slice(0, exports.RECORD_SAVE_MESSAGE_MAX_LENGTH) : '',
+    };
+    const code = item.code;
+    if (typeof code === 'string' &&
+        code.length <= exports.RECORD_SAVE_PUBLIC_FIELD_LIMITS.maxCodeLength &&
+        exports.RECORD_SAVE_PUBLIC_IDENTIFIER_PATTERN.test(code))
+        issue.code = code;
+    const field = item.field;
+    if (typeof field === 'string' &&
+        field.length <= exports.RECORD_SAVE_PUBLIC_FIELD_LIMITS.maxFieldLength &&
+        exports.RECORD_SAVE_PUBLIC_IDENTIFIER_PATTERN.test(field))
+        issue.field = field;
+    const pointer = item.pointer;
+    if (isRecordSaveJsonPointer(pointer) && pointer.length <= exports.RECORD_SAVE_PUBLIC_FIELD_LIMITS.maxPointerLength)
+        issue.pointer = pointer;
+    const expected = sanitizeRecordSaveIssueExpected(item.expected);
+    if (expected !== undefined) {
+        issue.expected = expected;
+    }
+    const attachmentId = item.attachmentId;
+    if (typeof attachmentId === 'string' &&
+        attachmentId.length <= exports.RECORD_SAVE_PUBLIC_FIELD_LIMITS.maxAttachmentIdLength &&
+        exports.RECORD_SAVE_PUBLIC_IDENTIFIER_PATTERN.test(attachmentId))
+        issue.attachmentId = attachmentId;
+    if (typeof item.class === 'string' &&
+        item.class.length <= exports.RECORD_SAVE_VALIDATOR_CLASS_MAX_LENGTH &&
+        exports.RECORD_SAVE_PUBLIC_IDENTIFIER_PATTERN.test(item.class)) {
+        issue.class = item.class;
+    }
+    const params = sanitizeRecordSaveValidatorParameters(item.params, issue.class);
+    if (params !== undefined) {
+        issue.params = params;
+    }
+    const targetField = sanitizeLineagePathProperties(item.targetField);
+    if (targetField !== undefined) {
+        issue.targetField = targetField;
+    }
+    const lineagePaths = sanitizeLineagePaths(item.lineagePaths);
+    if (lineagePaths !== undefined) {
+        issue.lineagePaths = lineagePaths;
+    }
+    return issue;
+}
+/** A schema warning can coexist with a complete save; unfinished work cannot. */
+function isRecordSaveComplete(result) {
+    const attachmentStatus = result.completion?.attachments?.status;
+    if (attachmentStatus !== 'not-required' && attachmentStatus !== 'completed') {
+        return false;
+    }
+    if (result.outcome === 'saved')
+        return true;
+    if (result.outcome !== 'saved-with-warnings')
+        return false;
+    return result.problems.length > 0 &&
+        result.problems.every(problem => problem.source === 'schema' || problem.source === 'advisory');
+}
+function emptyRecordSaveCompletion() {
+    return {
+        attachments: {
+            status: 'not-required',
+            items: [],
+        },
+    };
+}
+/**
+ * Reduce item-level attachment facts into the public aggregate status.
+ * Unknown takes precedence over incomplete because it represents less
+ * certainty about the physical operation.
+ */
+function reduceAttachmentStatus(items) {
+    if (items.length === 0) {
+        return 'not-required';
+    }
+    if (items.some(item => item.status === 'unknown')) {
+        return 'unknown';
+    }
+    if (items.some(item => item.status === 'incomplete')) {
+        return 'incomplete';
+    }
+    return 'completed';
+}
+function isRecordSaveOutcome(value) {
+    return value === 'saved' || value === 'saved-with-warnings' || value === 'not-saved' || value === 'unknown';
+}
+function isRecordSaveProblemKind(value) {
+    return typeof value === 'string' && exports.RECORD_SAVE_PROBLEM_KINDS.includes(value);
+}
+/**
+ * Canonical save request-correlation identifier: one RFC 4122 UUID. It is
+ * correlation only and is never treated as an idempotency key.
+ */
+exports.RECORD_SAVE_REQUEST_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+exports.RECORD_SAVE_REQUEST_ID_MAX_LENGTH = 36;
+function isRecordSaveRequestId(value) {
+    return typeof value === 'string' && exports.RECORD_SAVE_REQUEST_ID_PATTERN.test(value);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/testing.d.ts

@@ -0,0 +1,3 @@
+/** Testing-only shared fixtures. This module is intentionally outside the production root barrel. */
+export * from './jsonata-parity.fixtures';
+export * from './validation/validation-groups.fixtures';

package/dist/src/testing.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/** Testing-only shared fixtures. This module is intentionally outside the production root barrel. */
+__exportStar(require("./jsonata-parity.fixtures"), exports);
+__exportStar(require("./validation/validation-groups.fixtures"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidGVzdGluZy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy90ZXN0aW5nLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxxR0FBcUc7QUFDckcsNERBQTBDO0FBQzFDLDBFQUF3RCJ9

package/dist/src/validation/record-validation.model.d.ts

@@ -0,0 +1,84 @@
+/** Public operation names are small, case-sensitive identifiers. */
+export declare const VALIDATION_OPERATION_NAME_MAX_LENGTH = 64;
+export declare const VALIDATION_OPERATION_NAME_PATTERN: RegExp;
+/** Bounded display metadata limits used at the public discovery boundary. */
+export declare const VALIDATION_OPERATION_LABEL_MAX_LENGTH = 256;
+export declare const VALIDATION_OPERATION_DESCRIPTION_MAX_LENGTH = 1024;
+/** Safe server-owned references used by validation workflow/form discovery. */
+export declare const RECORD_VALIDATION_REFERENCE_PATTERN: RegExp;
+/** Deterministic ordering for public validation identifiers. */
+export declare function compareRecordValidationIdentifiers(left: string, right: string): number;
+/** Normalize bounded public display text without coercing hostile values. */
+export declare function safeValidationDiscoveryText(value: unknown, maxLength: number): string | undefined;
+/**
+ * A server-owned validation intent and its form-level defaults.
+ *
+ * Operation names are configuration keys (for example `draft` or `publish`),
+ * rather than values from a fixed framework enum.
+ */
+export interface ValidationOperationDefinition {
+    /** The exact validation-group set to use for this operation. */
+    enabledValidationGroups: string[];
+    /** Optional safe display label. */
+    label?: string;
+    /** Optional safe display description. */
+    description?: string;
+    /** Roles allowed to use the operation. Omission adds no role restriction. */
+    roles?: string[];
+    /** Workflow targets allowed for the operation. Omission adds no target restriction. */
+    allowedTargetSteps?: string[];
+}
+/**
+ * A more-specific operation layer. Defined properties replace or restrict the
+ * corresponding form-level defaults; omitted properties inherit them.
+ */
+export interface ValidationOperationOverride extends Partial<ValidationOperationDefinition> {
+    /** Optional rollout-mode override for this operation. */
+    mode?: ValidationMode;
+}
+/**
+ * Workflow stages may refine operation policy, but rollout mode is deliberately
+ * not stage-scoped. Enforcement remains a `(record type, operation)` decision.
+ */
+export type ValidationOperationPolicyOverride = Omit<ValidationOperationOverride, 'mode'> & {
+    mode?: never;
+};
+/** Safe operation metadata suitable for discovery responses. */
+export interface ValidationOperationDiscovery {
+    name: string;
+    label?: string;
+    description?: string;
+    /**
+     * Actor-authorized transition targets applicable to this operation. An
+     * unrestricted operation receives every actor-authorized target.
+     */
+    allowedTargetSteps?: string[];
+}
+/**
+ * Project an untrusted service result onto the complete public discovery
+ * contract. Optional target authorization can only narrow reported targets.
+ */
+export declare function sanitizeValidationOperationDiscovery(value: unknown, authorizedTargetSteps?: ReadonlySet<string>): ValidationOperationDiscovery | undefined;
+/** Whether authoritative validation observes or rejects a failed save. */
+export type ValidationMode = 'shadow' | 'enforce';
+/** Safe diagnostic severity shared by group resolution and server validation. */
+export type RecordValidationDiagnosticSeverity = 'info' | 'warning' | 'error';
+/**
+ * A safe diagnostic from validation configuration or execution.
+ *
+ * This contract intentionally has no arbitrary details bag: raw records,
+ * requests, users, parameters, and exceptions must not enter diagnostics.
+ */
+export interface RecordValidationDiagnostic {
+    code: string;
+    severity: RecordValidationDiagnosticSeverity;
+    message: string;
+    formName?: string;
+    operation?: string;
+    group?: string;
+    field?: string;
+    pointer?: string;
+    /** Safe configured expression name; never an expression source or value. */
+    expressionName?: string;
+    validatorClass?: string;
+}

package/dist/src/validation/record-validation.model.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RECORD_VALIDATION_REFERENCE_PATTERN = exports.VALIDATION_OPERATION_DESCRIPTION_MAX_LENGTH = exports.VALIDATION_OPERATION_LABEL_MAX_LENGTH = exports.VALIDATION_OPERATION_NAME_PATTERN = exports.VALIDATION_OPERATION_NAME_MAX_LENGTH = void 0;
+exports.compareRecordValidationIdentifiers = compareRecordValidationIdentifiers;
+exports.safeValidationDiscoveryText = safeValidationDiscoveryText;
+exports.sanitizeValidationOperationDiscovery = sanitizeValidationOperationDiscovery;
+/** Public operation names are small, case-sensitive identifiers. */
+exports.VALIDATION_OPERATION_NAME_MAX_LENGTH = 64;
+exports.VALIDATION_OPERATION_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
+/** Bounded display metadata limits used at the public discovery boundary. */
+exports.VALIDATION_OPERATION_LABEL_MAX_LENGTH = 256;
+exports.VALIDATION_OPERATION_DESCRIPTION_MAX_LENGTH = 1024;
+/** Safe server-owned references used by validation workflow/form discovery. */
+exports.RECORD_VALIDATION_REFERENCE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+/** Deterministic ordering for public validation identifiers. */
+function compareRecordValidationIdentifiers(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+/** Normalize bounded public display text without coercing hostile values. */
+function safeValidationDiscoveryText(value, maxLength) {
+    if (typeof value !== 'string')
+        return undefined;
+    const normalized = value.trim();
+    return normalized && normalized.length <= maxLength ? normalized : undefined;
+}
+/**
+ * Project an untrusted service result onto the complete public discovery
+ * contract. Optional target authorization can only narrow reported targets.
+ */
+function sanitizeValidationOperationDiscovery(value, authorizedTargetSteps) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const candidate = value;
+    const name = typeof candidate.name === 'string' ? candidate.name.trim() : '';
+    if (!exports.VALIDATION_OPERATION_NAME_PATTERN.test(name))
+        return undefined;
+    const label = safeValidationDiscoveryText(candidate.label, exports.VALIDATION_OPERATION_LABEL_MAX_LENGTH);
+    const description = safeValidationDiscoveryText(candidate.description, exports.VALIDATION_OPERATION_DESCRIPTION_MAX_LENGTH);
+    const allowedTargetSteps = Array.isArray(candidate.allowedTargetSteps)
+        ? [...new Set(candidate.allowedTargetSteps
+                .filter((step) => typeof step === 'string')
+                .map(step => step.trim())
+                .filter(step => exports.RECORD_VALIDATION_REFERENCE_PATTERN.test(step) &&
+                (authorizedTargetSteps === undefined || authorizedTargetSteps.has(step))))].sort(compareRecordValidationIdentifiers)
+        : [];
+    return {
+        name,
+        ...(label ? { label } : {}),
+        ...(description ? { description } : {}),
+        ...(allowedTargetSteps.length > 0 ? { allowedTargetSteps } : {}),
+    };
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVjb3JkLXZhbGlkYXRpb24ubW9kZWwuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvdmFsaWRhdGlvbi9yZWNvcmQtdmFsaWRhdGlvbi5tb2RlbC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFZQSxnRkFFQztBQUdELGtFQUlDO0FBc0RELG9GQTRCQztBQXZHRCxvRUFBb0U7QUFDdkQsUUFBQSxvQ0FBb0MsR0FBRyxFQUFFLENBQUM7QUFDMUMsUUFBQSxpQ0FBaUMsR0FBRyxnQ0FBZ0MsQ0FBQztBQUVsRiw2RUFBNkU7QUFDaEUsUUFBQSxxQ0FBcUMsR0FBRyxHQUFHLENBQUM7QUFDNUMsUUFBQSwyQ0FBMkMsR0FBRyxJQUFJLENBQUM7QUFFaEUsK0VBQStFO0FBQ2xFLFFBQUEsbUNBQW1DLEdBQUcscUNBQXFDLENBQUM7QUFFekYsZ0VBQWdFO0FBQ2hFLFNBQWdCLGtDQUFrQyxDQUFDLElBQVksRUFBRSxLQUFhO0lBQzVFLE9BQU8sSUFBSSxHQUFHLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksR0FBRyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDO0FBQ2xELENBQUM7QUFFRCw2RUFBNkU7QUFDN0UsU0FBZ0IsMkJBQTJCLENBQUMsS0FBYyxFQUFFLFNBQWlCO0lBQzNFLElBQUksT0FBTyxLQUFLLEtBQUssUUFBUTtRQUFFLE9BQU8sU0FBUyxDQUFDO0lBQ2hELE1BQU0sVUFBVSxHQUFHLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQztJQUNoQyxPQUFPLFVBQVUsSUFBSSxVQUFVLENBQUMsTUFBTSxJQUFJLFNBQVMsQ0FBQyxDQUFDLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUM7QUFDL0UsQ0FBQztBQWtERDs7O0dBR0c7QUFDSCxTQUFnQixvQ0FBb0MsQ0FDbEQsS0FBYyxFQUNkLHFCQUEyQztJQUUzQyxJQUFJLENBQUMsS0FBSyxJQUFJLE9BQU8sS0FBSyxLQUFLLFFBQVEsSUFBSSxLQUFLLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQztRQUFFLE9BQU8sU0FBUyxDQUFDO0lBQ2xGLE1BQU0sU0FBUyxHQUFHLEtBQWdDLENBQUM7SUFDbkQsTUFBTSxJQUFJLEdBQUcsT0FBTyxTQUFTLENBQUMsSUFBSSxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsU0FBUyxDQUFDLElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO0lBQzdFLElBQUksQ0FBQyx5Q0FBaUMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDO1FBQUUsT0FBTyxTQUFTLENBQUM7SUFDcEUsTUFBTSxLQUFLLEdBQUcsMkJBQTJCLENBQUMsU0FBUyxDQUFDLEtBQUssRUFBRSw2Q0FBcUMsQ0FBQyxDQUFDO0lBQ2xHLE1BQU0sV0FBVyxHQUFHLDJCQUEyQixDQUM3QyxTQUFTLENBQUMsV0FBVyxFQUNyQixtREFBMkMsQ0FDNUMsQ0FBQztJQUNGLE1BQU0sa0JBQWtCLEdBQUcsS0FBSyxDQUFDLE9BQU8sQ0FBQyxTQUFTLENBQUMsa0JBQWtCLENBQUM7UUFDcEUsQ0FBQyxDQUFDLENBQUMsR0FBRyxJQUFJLEdBQUcsQ0FBQyxTQUFTLENBQUMsa0JBQWtCO2lCQUNyQyxNQUFNLENBQUMsQ0FBQyxJQUFJLEVBQWtCLEVBQUUsQ0FBQyxPQUFPLElBQUksS0FBSyxRQUFRLENBQUM7aUJBQzFELEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztpQkFDeEIsTUFBTSxDQUFDLElBQUksQ0FBQyxFQUFFLENBQ2IsMkNBQW1DLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQztnQkFDOUMsQ0FBQyxxQkFBcUIsS0FBSyxTQUFTLElBQUkscUJBQXFCLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxDQUFDLENBQ3pFLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQyxrQ0FBa0MsQ0FBQztRQUNoRCxDQUFDLENBQUMsRUFBRSxDQUFDO0lBQ1AsT0FBTztRQUNMLElBQUk7UUFDSixHQUFHLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxFQUFFLEtBQUssRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7UUFDM0IsR0FBRyxDQUFDLFdBQVcsQ0FBQyxDQUFDLENBQUMsRUFBRSxXQUFXLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1FBQ3ZDLEdBQUcsQ0FBQyxrQkFBa0IsQ0FBQyxNQUFNLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLGtCQUFrQixFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztLQUNqRSxDQUFDO0FBQ0osQ0FBQyJ9

package/dist/src/validation/validation-groups.d.ts

@@ -0,0 +1,29 @@
+import { FormFieldValidationGroup, FormValidationGroups } from './form.model';
+import { RecordValidationDiagnostic } from './record-validation.model';
+/** Initial source used by a validation-group change. */
+export declare const formValidationGroupsChangeInitial: readonly ["all", "none", "current", "empty"];
+/**
+ * `empty` is retained as a deprecated alias for `none` so stored legacy form
+ * expressions continue to work while producing an observable diagnostic.
+ */
+export type FormValidationGroupsChangeInitial = (typeof formValidationGroupsChangeInitial)[number];
+export interface ValidationGroupCalculationResult {
+    enabledValidationGroups: string[];
+    diagnostics: RecordValidationDiagnostic[];
+}
+export declare const VALIDATION_GROUP_EMPTY_INITIAL_DIAGNOSTIC: "validation-group-initial-empty-deprecated";
+export declare const VALIDATION_GROUP_UNKNOWN_INITIAL_DIAGNOSTIC: "validation-group-initial-unknown";
+/**
+ * Fold one validation-group change using the historical Angular semantics.
+ *
+ * Important compatibility behavior:
+ * - an empty resulting array is preserved (ValidatorsSupport interprets it as
+ *   all validators);
+ * - `none`/legacy `empty` start from an empty array, while the configured
+ *   `none` group is represented by the literal group name `none`;
+ * - includes append only missing names and excludes remove the first present
+ *   occurrence, matching the original client implementation;
+ * - unknown names are retained for the authoritative caller to diagnose;
+ * - an operation group array, when supplied, replaces the folded array last.
+ */
+export declare function calculateValidationGroups(currentValidationGroups: readonly string[], validationGroups: Readonly<FormValidationGroups>, initial?: FormValidationGroupsChangeInitial, groups?: FormFieldValidationGroup, operationEnabledValidationGroups?: readonly string[]): ValidationGroupCalculationResult;