@stndrds/schema 1.0.0-alpha.265 → 1.0.0-alpha.266

package/dist/{chunk-NI3HCSYH.js → chunk-V6Q7HCA7.js}

@@ -1,18 +1,18 @@
 'use strict';
 
-var chunk5WATIVCA_js = require('./chunk-5WATIVCA.js');
-var chunkSI34M4IC_js = require('./chunk-SI34M4IC.js');
-var chunkYIP5FJ5H_js = require('./chunk-YIP5FJ5H.js');
-var chunkQAF3HNKQ_js = require('./chunk-QAF3HNKQ.js');
 var chunkEW5XR2X3_js = require('./chunk-EW5XR2X3.js');
 var chunkQWKLQRBX_js = require('./chunk-QWKLQRBX.js');
 var chunkKNGWHQLR_js = require('./chunk-KNGWHQLR.js');
 var chunkHTSTPTNZ_js = require('./chunk-HTSTPTNZ.js');
 var chunkV2UA2D4E_js = require('./chunk-V2UA2D4E.js');
-var chunkZBQEMIAV_js = require('./chunk-ZBQEMIAV.js');
+var chunk5WATIVCA_js = require('./chunk-5WATIVCA.js');
+var chunkSI34M4IC_js = require('./chunk-SI34M4IC.js');
+var chunkYIP5FJ5H_js = require('./chunk-YIP5FJ5H.js');
+var chunkZPFOKBIN_js = require('./chunk-ZPFOKBIN.js');
+var chunkFDIAOFHS_js = require('./chunk-FDIAOFHS.js');
 var chunkACKMC6FL_js = require('./chunk-ACKMC6FL.js');
 var chunkE6JUYGJX_js = require('./chunk-E6JUYGJX.js');
-var chunkEBGRZUIH_js = require('./chunk-EBGRZUIH.js');
+var chunkQ4SZAMJT_js = require('./chunk-Q4SZAMJT.js');
 var chunkEEH4XQ7W_js = require('./chunk-EEH4XQ7W.js');
 var chunkYKWSHBT5_js = require('./chunk-YKWSHBT5.js');
 var zod = require('zod');
@@ -36,7 +36,7 @@ function withEmptyToNull(validator) {
 function createAttributeValidator(attr, messages = chunkYKWSHBT5_js.DEFAULT_VALIDATION_MESSAGES) {
   switch (attr.type) {
     case "text":
-      return chunkQAF3HNKQ_js.createTextValidator(attr, messages);
+      return chunkZPFOKBIN_js.createTextValidator(attr, messages);
     case "richtext":
       return chunkEW5XR2X3_js.createRichtextValidator(attr, messages);
     case "number":
@@ -46,7 +46,7 @@ function createAttributeValidator(attr, messages = chunkYKWSHBT5_js.DEFAULT_VALI
     case "date":
       return chunkSI34M4IC_js.createDateValidator(attr, messages);
     case "phone":
-      return chunkEBGRZUIH_js.createPhoneValidator(attr, messages);
+      return chunkQ4SZAMJT_js.createPhoneValidator(attr, messages);
     case "currency":
       return chunkACKMC6FL_js.createCurrencyValidator(attr, messages);
     case "status":
@@ -143,7 +143,7 @@ function validateObjectOrThrow(objectDef, data) {
   if (!result.success) {
     const errors = result.errors ?? [];
     const detail = errors.map((err) => `${err.path.join(".")}: ${err.message}`).join("\n") || "Unknown validation error";
-    throw new chunkZBQEMIAV_js.ValidationError(
+    throw new chunkFDIAOFHS_js.ValidationError(
       `Validation failed for ${objectDef.label}:
 ${detail}`,
       errors.map((err) => ({ path: err.path, message: err.message }))
@@ -170,7 +170,7 @@ function validateDraftOrThrow(objectDef, data) {
   if (!result.success) {
     const errors = result.errors ?? [];
     const detail = errors.map((err) => `${err.path.join(".")}: ${err.message}`).join("\n") || "Unknown validation error";
-    throw new chunkZBQEMIAV_js.ValidationError(
+    throw new chunkFDIAOFHS_js.ValidationError(
       `Draft validation failed for ${objectDef.label}:
 ${detail}`,
       errors.map((err) => ({ path: err.path, message: err.message }))
@@ -182,7 +182,7 @@ function rejectUnknownAttributesOrThrow(objectDef, data) {
   const knownNames = new Set(objectDef.attributes.map((a) => a.name));
   const unknownKeys = Object.keys(data).filter((key) => !knownNames.has(key));
   if (unknownKeys.length > 0) {
-    throw new chunkZBQEMIAV_js.ValidationError(
+    throw new chunkFDIAOFHS_js.ValidationError(
       `Unknown attribute${unknownKeys.length > 1 ? "s" : ""} for ${objectDef.label}: ${unknownKeys.join(", ")}`,
       unknownKeys.map((key) => ({ path: [key], message: "Unknown attribute" }))
     );

package/dist/{chunk-QAF3HNKQ.js → chunk-ZPFOKBIN.js}

@@ -3,6 +3,17 @@
 var chunkYKWSHBT5_js = require('./chunk-YKWSHBT5.js');
 var zod = require('zod');
 
+// src/lib/text-format.ts
+var TEXT_FORMAT_PATTERNS = {
+  email: "^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$",
+  url: "^https?:\\/\\/[\\w\\-]+(\\.[\\w\\-]+)+[/#?]?.*$",
+  slug: "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+};
+function resolveTextPattern(attr) {
+  if (attr.pattern) return attr.pattern;
+  return attr.format ? TEXT_FORMAT_PATTERNS[attr.format] : void 0;
+}
+
 // src/lib/lru-cache.ts
 var LRUCache = class {
   constructor(capacity) {
@@ -66,13 +77,13 @@ function createTextValidator(attr, messages = chunkYKWSHBT5_js.DEFAULT_VALIDATIO
   if (attr.maxLength !== void 0) {
     schema = schema.max(attr.maxLength, messages.maxLength(attr, attr.maxLength));
   }
-  if (attr.pattern) {
-    schema = schema.regex(
-      getCachedRegex(textRegexCache, attr.pattern),
-      messages.invalidPattern(attr)
-    );
+  const pattern = resolveTextPattern(attr);
+  if (pattern) {
+    schema = schema.regex(getCachedRegex(textRegexCache, pattern), messages.invalidPattern(attr));
   }
   return schema;
 }
 
+exports.TEXT_FORMAT_PATTERNS = TEXT_FORMAT_PATTERNS;
 exports.createTextValidator = createTextValidator;
+exports.resolveTextPattern = resolveTextPattern;

package/dist/exceptions.d.mts

@@ -13,6 +13,7 @@ declare const SchemaErrorCode: {
     readonly RECORD_NOT_FOUND: "SCHEMA_RECORD_NOT_FOUND";
     readonly ROLE_NOT_FOUND: "SCHEMA_ROLE_NOT_FOUND";
     readonly MEMORY_NOT_FOUND: "SCHEMA_MEMORY_NOT_FOUND";
+    readonly SCHEMA_PLAN_NOT_FOUND: "SCHEMA_PLAN_NOT_FOUND";
     readonly VALIDATION_FAILED: "SCHEMA_VALIDATION_FAILED";
     readonly INVALID_ATTRIBUTE_NAME: "SCHEMA_INVALID_ATTRIBUTE_NAME";
     readonly INVALID_OBJECT_NAME: "SCHEMA_INVALID_OBJECT_NAME";
@@ -147,6 +148,14 @@ declare class AttributeNotFoundError extends NotFoundError {
 declare class RecordNotFoundError extends NotFoundError {
     constructor(recordId: string);
 }
+/**
+ * Schema plan not found error — raised when a `planId` sent by an approver
+ * (who never receives the plan payload itself, only its id) does not match
+ * any stored plan.
+ */
+declare class SchemaPlanNotFoundError extends NotFoundError {
+    constructor(planId: string);
+}
 /**
  * Validation error with field-level details
  */
@@ -233,15 +242,19 @@ declare class OrphanSystemAttributeError extends SchemaError {
     constructor(objectName: string, attributeName: string);
 }
 /**
- * Thrown at boot when destructive operations (remove_attribute, remove_object)
- * are detected without the explicit STANDARDS_ALLOW_DESTRUCTIVE_SYNC=1 env var.
+ * Thrown when a destructive operation is detected without the explicit
+ * STANDARDS_ALLOW_DESTRUCTIVE_SYNC=1 opt-in.
  * HTTP status: 500 (boot fail, should never surface to HTTP).
  *
- * NOTE — Wiring status (L2 — 2026-05-17): defined but not thrown by the
- * current sync.ts. Sync uses STANDARDS_ALLOW_DESTRUCTIVE_SYNC env var to gate
- * destructive ops; without the flag, attributes/objects are demoted to runtime
- * (L1 default, data preserved), not deleted. This error class is reserved for
- * L3a CLI which will throw it when CI detects unauthorized destructive deployments.
+ * Which operations the opt-in governs is decided in one place —
+ * `requiresDestructiveSyncOptIn` in the runtime's sync classifier. Today that
+ * is object removal only: attribute removal is unconditional at boot, because a
+ * system attribute is code-controlled and its disappearance from the builder is
+ * an unambiguous drop.
+ *
+ * NOTE — Wiring status: defined but not thrown by the current sync.ts, which
+ * demotes instead. Reserved for the `standards diff` CLI gate, which will throw
+ * it when CI detects an unauthorized destructive deployment.
  */
 declare class DestructiveSyncNotAllowedError extends SchemaError {
     readonly operations: SchemaOperation[];
@@ -455,4 +468,4 @@ declare function isAttributeInUseError(error: unknown): error is AttributeInUseE
  */
 declare function isObjectReferencedError(error: unknown): error is ObjectReferencedError;
 
-export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, type AttributeUsage, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, type RecordReference, RecordReferencedError, RepositoryError, type RepositoryOperation, RoleNotFoundError, SchemaError, SchemaErrorCode, SearchBackendError, StorageError, type StorageOperation, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, type ValidationErrorDetail, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError };
+export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, type AttributeUsage, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, type RecordReference, RecordReferencedError, RepositoryError, type RepositoryOperation, RoleNotFoundError, SchemaError, SchemaErrorCode, SchemaPlanNotFoundError, SearchBackendError, StorageError, type StorageOperation, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, type ValidationErrorDetail, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError };

package/dist/exceptions.d.ts

@@ -13,6 +13,7 @@ declare const SchemaErrorCode: {
     readonly RECORD_NOT_FOUND: "SCHEMA_RECORD_NOT_FOUND";
     readonly ROLE_NOT_FOUND: "SCHEMA_ROLE_NOT_FOUND";
     readonly MEMORY_NOT_FOUND: "SCHEMA_MEMORY_NOT_FOUND";
+    readonly SCHEMA_PLAN_NOT_FOUND: "SCHEMA_PLAN_NOT_FOUND";
     readonly VALIDATION_FAILED: "SCHEMA_VALIDATION_FAILED";
     readonly INVALID_ATTRIBUTE_NAME: "SCHEMA_INVALID_ATTRIBUTE_NAME";
     readonly INVALID_OBJECT_NAME: "SCHEMA_INVALID_OBJECT_NAME";
@@ -147,6 +148,14 @@ declare class AttributeNotFoundError extends NotFoundError {
 declare class RecordNotFoundError extends NotFoundError {
     constructor(recordId: string);
 }
+/**
+ * Schema plan not found error — raised when a `planId` sent by an approver
+ * (who never receives the plan payload itself, only its id) does not match
+ * any stored plan.
+ */
+declare class SchemaPlanNotFoundError extends NotFoundError {
+    constructor(planId: string);
+}
 /**
  * Validation error with field-level details
  */
@@ -233,15 +242,19 @@ declare class OrphanSystemAttributeError extends SchemaError {
     constructor(objectName: string, attributeName: string);
 }
 /**
- * Thrown at boot when destructive operations (remove_attribute, remove_object)
- * are detected without the explicit STANDARDS_ALLOW_DESTRUCTIVE_SYNC=1 env var.
+ * Thrown when a destructive operation is detected without the explicit
+ * STANDARDS_ALLOW_DESTRUCTIVE_SYNC=1 opt-in.
  * HTTP status: 500 (boot fail, should never surface to HTTP).
  *
- * NOTE — Wiring status (L2 — 2026-05-17): defined but not thrown by the
- * current sync.ts. Sync uses STANDARDS_ALLOW_DESTRUCTIVE_SYNC env var to gate
- * destructive ops; without the flag, attributes/objects are demoted to runtime
- * (L1 default, data preserved), not deleted. This error class is reserved for
- * L3a CLI which will throw it when CI detects unauthorized destructive deployments.
+ * Which operations the opt-in governs is decided in one place —
+ * `requiresDestructiveSyncOptIn` in the runtime's sync classifier. Today that
+ * is object removal only: attribute removal is unconditional at boot, because a
+ * system attribute is code-controlled and its disappearance from the builder is
+ * an unambiguous drop.
+ *
+ * NOTE — Wiring status: defined but not thrown by the current sync.ts, which
+ * demotes instead. Reserved for the `standards diff` CLI gate, which will throw
+ * it when CI detects an unauthorized destructive deployment.
  */
 declare class DestructiveSyncNotAllowedError extends SchemaError {
     readonly operations: SchemaOperation[];
@@ -455,4 +468,4 @@ declare function isAttributeInUseError(error: unknown): error is AttributeInUseE
  */
 declare function isObjectReferencedError(error: unknown): error is ObjectReferencedError;
 
-export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, type AttributeUsage, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, type RecordReference, RecordReferencedError, RepositoryError, type RepositoryOperation, RoleNotFoundError, SchemaError, SchemaErrorCode, SearchBackendError, StorageError, type StorageOperation, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, type ValidationErrorDetail, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError };
+export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, type AttributeUsage, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, type RecordReference, RecordReferencedError, RepositoryError, type RepositoryOperation, RoleNotFoundError, SchemaError, SchemaErrorCode, SchemaPlanNotFoundError, SearchBackendError, StorageError, type StorageOperation, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, type ValidationErrorDetail, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError };

package/dist/exceptions.js

@@ -1,154 +1,158 @@
 'use strict';
 
-var chunkZBQEMIAV_js = require('./chunk-ZBQEMIAV.js');
+var chunkFDIAOFHS_js = require('./chunk-FDIAOFHS.js');
 
 
 
 Object.defineProperty(exports, "AccessDeniedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.AccessDeniedError; }
+  get: function () { return chunkFDIAOFHS_js.AccessDeniedError; }
 });
 Object.defineProperty(exports, "AttributeInUseError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.AttributeInUseError; }
+  get: function () { return chunkFDIAOFHS_js.AttributeInUseError; }
 });
 Object.defineProperty(exports, "AttributeNotFoundError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.AttributeNotFoundError; }
+  get: function () { return chunkFDIAOFHS_js.AttributeNotFoundError; }
 });
 Object.defineProperty(exports, "ChangeTypeNotSupportedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ChangeTypeNotSupportedError; }
+  get: function () { return chunkFDIAOFHS_js.ChangeTypeNotSupportedError; }
 });
 Object.defineProperty(exports, "ConcurrentModificationError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ConcurrentModificationError; }
+  get: function () { return chunkFDIAOFHS_js.ConcurrentModificationError; }
 });
 Object.defineProperty(exports, "DestructiveSyncNotAllowedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.DestructiveSyncNotAllowedError; }
+  get: function () { return chunkFDIAOFHS_js.DestructiveSyncNotAllowedError; }
 });
 Object.defineProperty(exports, "DuplicateError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.DuplicateError; }
+  get: function () { return chunkFDIAOFHS_js.DuplicateError; }
 });
 Object.defineProperty(exports, "ForbiddenError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ForbiddenError; }
+  get: function () { return chunkFDIAOFHS_js.ForbiddenError; }
 });
 Object.defineProperty(exports, "MemoryNotFoundError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.MemoryNotFoundError; }
+  get: function () { return chunkFDIAOFHS_js.MemoryNotFoundError; }
 });
 Object.defineProperty(exports, "MigrationTimeoutError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.MigrationTimeoutError; }
+  get: function () { return chunkFDIAOFHS_js.MigrationTimeoutError; }
 });
 Object.defineProperty(exports, "NotFoundError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.NotFoundError; }
+  get: function () { return chunkFDIAOFHS_js.NotFoundError; }
 });
 Object.defineProperty(exports, "NotImplementedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.NotImplementedError; }
+  get: function () { return chunkFDIAOFHS_js.NotImplementedError; }
 });
 Object.defineProperty(exports, "ObjectNotFoundError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ObjectNotFoundError; }
+  get: function () { return chunkFDIAOFHS_js.ObjectNotFoundError; }
 });
 Object.defineProperty(exports, "ObjectReferencedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ObjectReferencedError; }
+  get: function () { return chunkFDIAOFHS_js.ObjectReferencedError; }
 });
 Object.defineProperty(exports, "OrphanSystemAttributeError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.OrphanSystemAttributeError; }
+  get: function () { return chunkFDIAOFHS_js.OrphanSystemAttributeError; }
 });
 Object.defineProperty(exports, "ProtectedResourceError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ProtectedResourceError; }
+  get: function () { return chunkFDIAOFHS_js.ProtectedResourceError; }
 });
 Object.defineProperty(exports, "ProtectedRoleError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ProtectedRoleError; }
+  get: function () { return chunkFDIAOFHS_js.ProtectedRoleError; }
 });
 Object.defineProperty(exports, "RecordNotFoundError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.RecordNotFoundError; }
+  get: function () { return chunkFDIAOFHS_js.RecordNotFoundError; }
 });
 Object.defineProperty(exports, "RecordReferencedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.RecordReferencedError; }
+  get: function () { return chunkFDIAOFHS_js.RecordReferencedError; }
 });
 Object.defineProperty(exports, "RepositoryError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.RepositoryError; }
+  get: function () { return chunkFDIAOFHS_js.RepositoryError; }
 });
 Object.defineProperty(exports, "RoleNotFoundError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.RoleNotFoundError; }
+  get: function () { return chunkFDIAOFHS_js.RoleNotFoundError; }
 });
 Object.defineProperty(exports, "SchemaError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.SchemaError; }
+  get: function () { return chunkFDIAOFHS_js.SchemaError; }
 });
 Object.defineProperty(exports, "SchemaErrorCode", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.SchemaErrorCode; }
+  get: function () { return chunkFDIAOFHS_js.SchemaErrorCode; }
+});
+Object.defineProperty(exports, "SchemaPlanNotFoundError", {
+  enumerable: true,
+  get: function () { return chunkFDIAOFHS_js.SchemaPlanNotFoundError; }
 });
 Object.defineProperty(exports, "SearchBackendError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.SearchBackendError; }
+  get: function () { return chunkFDIAOFHS_js.SearchBackendError; }
 });
 Object.defineProperty(exports, "StorageError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.StorageError; }
+  get: function () { return chunkFDIAOFHS_js.StorageError; }
 });
 Object.defineProperty(exports, "SyncCascadeError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.SyncCascadeError; }
+  get: function () { return chunkFDIAOFHS_js.SyncCascadeError; }
 });
 Object.defineProperty(exports, "SyncConflictError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.SyncConflictError; }
+  get: function () { return chunkFDIAOFHS_js.SyncConflictError; }
 });
 Object.defineProperty(exports, "SyncError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.SyncError; }
+  get: function () { return chunkFDIAOFHS_js.SyncError; }
 });
 Object.defineProperty(exports, "SystemEntityImmutableError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.SystemEntityImmutableError; }
+  get: function () { return chunkFDIAOFHS_js.SystemEntityImmutableError; }
 });
 Object.defineProperty(exports, "ValidationError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.ValidationError; }
+  get: function () { return chunkFDIAOFHS_js.ValidationError; }
 });
 Object.defineProperty(exports, "isAttributeInUseError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.isAttributeInUseError; }
+  get: function () { return chunkFDIAOFHS_js.isAttributeInUseError; }
 });
 Object.defineProperty(exports, "isNotFoundError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.isNotFoundError; }
+  get: function () { return chunkFDIAOFHS_js.isNotFoundError; }
 });
 Object.defineProperty(exports, "isObjectReferencedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.isObjectReferencedError; }
+  get: function () { return chunkFDIAOFHS_js.isObjectReferencedError; }
 });
 Object.defineProperty(exports, "isProtectedResourceError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.isProtectedResourceError; }
+  get: function () { return chunkFDIAOFHS_js.isProtectedResourceError; }
 });
 Object.defineProperty(exports, "isRecordReferencedError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.isRecordReferencedError; }
+  get: function () { return chunkFDIAOFHS_js.isRecordReferencedError; }
 });
 Object.defineProperty(exports, "isSchemaError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.isSchemaError; }
+  get: function () { return chunkFDIAOFHS_js.isSchemaError; }
 });
 Object.defineProperty(exports, "isValidationError", {
   enumerable: true,
-  get: function () { return chunkZBQEMIAV_js.isValidationError; }
+  get: function () { return chunkFDIAOFHS_js.isValidationError; }
 });

package/dist/exceptions.mjs

@@ -1 +1 @@
-export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, RecordReferencedError, RepositoryError, RoleNotFoundError, SchemaError, SchemaErrorCode, SearchBackendError, StorageError, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError } from './chunk-QIWADKYA.mjs';
+export { AccessDeniedError, AttributeInUseError, AttributeNotFoundError, ChangeTypeNotSupportedError, ConcurrentModificationError, DestructiveSyncNotAllowedError, DuplicateError, ForbiddenError, MemoryNotFoundError, MigrationTimeoutError, NotFoundError, NotImplementedError, ObjectNotFoundError, ObjectReferencedError, OrphanSystemAttributeError, ProtectedResourceError, ProtectedRoleError, RecordNotFoundError, RecordReferencedError, RepositoryError, RoleNotFoundError, SchemaError, SchemaErrorCode, SchemaPlanNotFoundError, SearchBackendError, StorageError, SyncCascadeError, SyncConflictError, SyncError, SystemEntityImmutableError, ValidationError, isAttributeInUseError, isNotFoundError, isObjectReferencedError, isProtectedResourceError, isRecordReferencedError, isSchemaError, isValidationError } from './chunk-POULKEJM.mjs';

package/dist/helpers-C1VVEAOO.d.mts

@@ -0,0 +1,76 @@
+import { z } from 'zod';
+import { A as Attribute } from './attributes-lBLiOIY3.mjs';
+import { V as ValidationMessages, a as ValidationResult } from './types-DNz3ITS-.mjs';
+import { O as ObjectDefinition } from './objects-BCaBw2ef.mjs';
+
+/**
+ * Create a Zod schema for any attribute type.
+ * Returns a strict validator that does NOT handle optional fields.
+ * Use createFormAttributeValidator for form validation with optional support.
+ *
+ * @param attr - The attribute to create a validator for
+ * @param messages - Custom validation messages for i18n support
+ */
+declare function createAttributeValidator(attr: Attribute, messages?: ValidationMessages): z.ZodTypeAny;
+/**
+ * Create a Zod schema for form validation.
+ * - Normalizes empty values (empty strings, empty objects) to null for optional fields
+ * - Accepts custom messages for i18n support
+ *
+ * Use this in UI forms where optional fields may have null/undefined values.
+ *
+ * @param attr - The attribute to create a validator for
+ * @param messages - Custom validation messages for i18n support
+ */
+declare function createFormAttributeValidator(attr: Attribute, messages?: ValidationMessages): z.ZodTypeAny;
+
+/**
+ * Validate data against an attribute schema
+ */
+declare function validateAttribute(attr: Attribute, value: unknown): ValidationResult;
+/**
+ * Validate data against an object schema
+ */
+declare function validateObject(objectDef: ObjectDefinition, data: Record<string, unknown>): ValidationResult;
+/**
+ * Validate and throw if invalid.
+ *
+ * Throws `ValidationError` (code `SCHEMA_VALIDATION_FAILED`) on failure so HTTP
+ * adapters can map it to 400. Generic `Error` would bubble up to a 500.
+ */
+declare function validateObjectOrThrow(objectDef: ObjectDefinition, data: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Validate data in draft mode.
+ * - All attributes are treated as optional (no required validation)
+ * - Provided values are still validated for format/type correctness
+ */
+declare function validateDraft(objectDef: ObjectDefinition, data: Record<string, unknown>): ValidationResult;
+/**
+ * Validate draft data and throw if format validation fails.
+ *
+ * Same contract as `validateObjectOrThrow` but skips `required()` checks.
+ * Throws `ValidationError` so HTTP adapters map it to 400.
+ */
+declare function validateDraftOrThrow(objectDef: ObjectDefinition, data: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Throw a `ValidationError` when `data` contains keys that do not correspond
+ * to any attribute declared on `objectDef`.
+ *
+ * Call this on **client-supplied input** before Zod validation so the error
+ * message clearly names every offending key.  Do NOT call on merged data that
+ * includes existing record values — older records may legitimately carry stale
+ * keys that predate this guard (see issue #658).
+ *
+ * Maps to HTTP 400 via `SchemaExceptionFilter` (code SCHEMA_VALIDATION_FAILED).
+ */
+declare function rejectUnknownAttributesOrThrow(objectDef: ObjectDefinition, data: Record<string, unknown>): void;
+/**
+ * Get the list of required attributes that are missing values.
+ */
+declare function getMissingRequiredAttributes(objectDef: ObjectDefinition, data: Record<string, unknown>): Attribute[];
+/**
+ * Check if a record is complete (all required attributes have valid values).
+ */
+declare function isRecordComplete(objectDef: ObjectDefinition, data: Record<string, unknown>): boolean;
+
+export { createFormAttributeValidator as a, validateDraft as b, createAttributeValidator as c, validateDraftOrThrow as d, validateObject as e, validateObjectOrThrow as f, getMissingRequiredAttributes as g, isRecordComplete as i, rejectUnknownAttributesOrThrow as r, validateAttribute as v };

package/dist/helpers-vQ6kp8ET.d.ts

@@ -0,0 +1,76 @@
+import { z } from 'zod';
+import { A as Attribute } from './attributes-_b3Db8vT.js';
+import { V as ValidationMessages, a as ValidationResult } from './types-DqLi1tx1.js';
+import { O as ObjectDefinition } from './objects-A1ED9af-.js';
+
+/**
+ * Create a Zod schema for any attribute type.
+ * Returns a strict validator that does NOT handle optional fields.
+ * Use createFormAttributeValidator for form validation with optional support.
+ *
+ * @param attr - The attribute to create a validator for
+ * @param messages - Custom validation messages for i18n support
+ */
+declare function createAttributeValidator(attr: Attribute, messages?: ValidationMessages): z.ZodTypeAny;
+/**
+ * Create a Zod schema for form validation.
+ * - Normalizes empty values (empty strings, empty objects) to null for optional fields
+ * - Accepts custom messages for i18n support
+ *
+ * Use this in UI forms where optional fields may have null/undefined values.
+ *
+ * @param attr - The attribute to create a validator for
+ * @param messages - Custom validation messages for i18n support
+ */
+declare function createFormAttributeValidator(attr: Attribute, messages?: ValidationMessages): z.ZodTypeAny;
+
+/**
+ * Validate data against an attribute schema
+ */
+declare function validateAttribute(attr: Attribute, value: unknown): ValidationResult;
+/**
+ * Validate data against an object schema
+ */
+declare function validateObject(objectDef: ObjectDefinition, data: Record<string, unknown>): ValidationResult;
+/**
+ * Validate and throw if invalid.
+ *
+ * Throws `ValidationError` (code `SCHEMA_VALIDATION_FAILED`) on failure so HTTP
+ * adapters can map it to 400. Generic `Error` would bubble up to a 500.
+ */
+declare function validateObjectOrThrow(objectDef: ObjectDefinition, data: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Validate data in draft mode.
+ * - All attributes are treated as optional (no required validation)
+ * - Provided values are still validated for format/type correctness
+ */
+declare function validateDraft(objectDef: ObjectDefinition, data: Record<string, unknown>): ValidationResult;
+/**
+ * Validate draft data and throw if format validation fails.
+ *
+ * Same contract as `validateObjectOrThrow` but skips `required()` checks.
+ * Throws `ValidationError` so HTTP adapters map it to 400.
+ */
+declare function validateDraftOrThrow(objectDef: ObjectDefinition, data: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Throw a `ValidationError` when `data` contains keys that do not correspond
+ * to any attribute declared on `objectDef`.
+ *
+ * Call this on **client-supplied input** before Zod validation so the error
+ * message clearly names every offending key.  Do NOT call on merged data that
+ * includes existing record values — older records may legitimately carry stale
+ * keys that predate this guard (see issue #658).
+ *
+ * Maps to HTTP 400 via `SchemaExceptionFilter` (code SCHEMA_VALIDATION_FAILED).
+ */
+declare function rejectUnknownAttributesOrThrow(objectDef: ObjectDefinition, data: Record<string, unknown>): void;
+/**
+ * Get the list of required attributes that are missing values.
+ */
+declare function getMissingRequiredAttributes(objectDef: ObjectDefinition, data: Record<string, unknown>): Attribute[];
+/**
+ * Check if a record is complete (all required attributes have valid values).
+ */
+declare function isRecordComplete(objectDef: ObjectDefinition, data: Record<string, unknown>): boolean;
+
+export { createFormAttributeValidator as a, validateDraft as b, createAttributeValidator as c, validateDraftOrThrow as d, validateObject as e, validateObjectOrThrow as f, getMissingRequiredAttributes as g, isRecordComplete as i, rejectUnknownAttributesOrThrow as r, validateAttribute as v };