@warlock.js/seal 5.32.0 → 5.34.0

package/CHANGELOG.md

@@ -4,6 +4,34 @@ All notable changes to `@warlock.js/seal` are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `@warlock.js/*` packages are released in lockstep — every package shares the same version number, so a version below may list only the changes that affected this package.
 
+## 5.34.0 - 2026-10-19
+
+### Changed
+
+- **BREAKING** `v.object()` requires a plain or null-prototype object; arrays, built-ins, class instances and custom prototypes fail even with unknown-key options enabled.
+
+### Added
+
+- `v.record(keyValidator, valueValidator, errorMessage?)` validates original property names and values, infers partial literal-key dictionaries, and emits key JSON Schema. Existing value-only and error-message forms remain supported.
+
+### Fixed
+
+- Reject malformed record validator arguments at schema definition with a clear `TypeError`.
+
+### Upgrading
+
+- Convert class instances to explicit plain DTOs before object validation; use array or instance validators for those inputs. No permissive object opt-in is provided because it would recreate accidental array acceptance.
+
+### Removed
+
+- Remove the remaining ESLint, Prettier and typescript-eslint development dependencies; package linting and formatting use Oxlint/Oxfmt.
+
+## 5.33.0 - 2026-10-19
+
+### Changed
+
+- Use root Oxlint/Oxfmt binaries and configuration for package lint/fix and format scripts. Legacy ESLint/Prettier dependencies and configs remain until the 5.34.0 removal.
+
 ## 5.32.0 - 2026-10-18
 
 ### Changed
@@ -74,7 +102,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ### Changed
 
-- Lockstep release; package APIs are unchanged. Skills refer to other topics by name instead of file paths, so cross-references keep working after `agent-kit` copies them into an app.
+- Skills refer to other topics by name instead of file paths, so cross-references keep working after `agent-kit` copies them into an app.
 
 ## 5.28.0 - 2026-10-01
 
@@ -88,12 +116,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 - Dependency: @mongez/supportive-is 3.0 (type-predicate checkers).
 
-## 5.26.0 - 2026-09-30
-
-### Changed
-
-- Lockstep release; package APIs are unchanged.
-
 ## 5.25.0 - 2026-09-28
 
 ### Fixed
@@ -105,24 +127,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 - **Behaviour change:** Empty and whitespace-only form values are treated as missing by non-string validators, so optional fields are omitted, nullable fields resolve to `null`, and required fields report `required`.
 
-## 5.24.0 - 2026-09-27
-
-### Changed
-
-- Lockstep release; package APIs are unchanged.
-
-## 5.23.2 - 2026-09-26
-
-### Changed
-
-- Lockstep patch release; package APIs are unchanged.
-
-## 5.23.1 - 2026-09-26
-
-### Changed
-
-- Lockstep patch release; package APIs are unchanged.
-
 ## 5.23.0 - 2026-09-25
 
 ### Added
@@ -133,24 +137,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 - An omitted optional field skips its mutators, so `v.string().trim().optional()` no longer reports a missing field as required.
 
-## 5.22.1 - 2026-09-25
-
-### Changed
-
-- Lockstep patch release; package APIs are unchanged.
-
-## 5.22.0 - 2026-09-25
-
-### Changed
-
-- Lockstep release maintenance and dependency refresh.
-
-## 5.21.0 - 2026-09-25
-
-### Changed
-
-- Lockstep release maintenance and dependency refresh.
-
 ## 5.20.0 - 2026-09-24
 
 ### Changed
@@ -218,41 +204,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 - Documentation shipped in this package's `skills/` told users to run `pnpm`-specific commands. `pnpm <binary>` has no npm equivalent, so those instructions failed outright for anyone not using pnpm. Commands are now package-manager neutral.
 
-## 5.2.3 - 2026-09-02
-
-### Fixed
-
-- Released in exact lockstep with Core's Web generator repairs so every family dependency remains installable at 5.2.3.
-
 ## 5.2.2
 
 ### Maintenance
 
 - Restored the Warlock family to one exact, installable lockstep version.
 
-## 5.2.0
-
-No changes to `@warlock.js/seal`. Released in lockstep with the v5.2 routing,
-production-build, security, and diagnostics changes in `@warlock.js/core` and
-`@warlock.js/web`; see those packages' changelogs.
-
-## 5.1.0
-
-No changes to `@warlock.js/seal`. Released in lockstep with the `@warlock.js/web`
-React-execution fix and the `@warlock.js/core` CLI additions — see those packages'
-changelogs.
-
-## 5.0.2 - 2026-08-25
-
-No changes to `@warlock.js/seal`. Released in lockstep with the `@warlock.js/web` SSR
-fix (`ssr.noExternal`) — see that package's changelog.
-
-## 5.0.1 - 2026-08-25
-
-No changes to `@warlock.js/seal`. Released in lockstep with the `create-warlock` vite
-resolution pin and the `@warlock.js/web` peer narrowing — see those packages'
-changelogs.
-
 ## 5.0.0 - 2026-08-25
 
 ### Changed

package/cjs/index.cjs

@@ -26,9 +26,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 }) : target, mod));
 
 //#endregion
-const require_required_methods = require("./required-methods-BJlnLnwa.cjs");
-const require_object = require("./object-BoVGJ68E.cjs");
-const require_string = require("./string-CM8x0u2w.cjs");
+const require_required_methods = require("./required-methods-Bh481cKm.cjs");
+const require_object = require("./object-Um5Ds4ch.cjs");
+const require_string = require("./string-BOKt6UtS.cjs");
 let _mongez_reinforcements = require("@mongez/reinforcements");
 let _mongez_supportive_is = require("@mongez/supportive-is");
 let dayjs = require("dayjs");
@@ -2257,10 +2257,17 @@ var NumericValidator = class extends NumberValidator {
 * ```
 */
 var RecordValidator = class extends require_required_methods.BaseValidator {
-	constructor(valueValidator, errorMessage) {
+	constructor(first, second, errorMessage) {
 		super();
-		this.valueValidator = valueValidator;
-		this.addMutableRule(require_required_methods.objectRule, errorMessage);
+		if (!(first instanceof require_required_methods.BaseValidator)) throw new TypeError("v.record(): expected a value validator or a key validator followed by a value validator");
+		if (second !== void 0 && typeof second !== "string" && !(second instanceof require_required_methods.BaseValidator)) throw new TypeError("v.record(): second argument must be a value validator or an error message");
+		if (errorMessage !== void 0 && typeof errorMessage !== "string") throw new TypeError("v.record(): error message must be a string");
+		this.keyValidator = second instanceof require_required_methods.BaseValidator ? first : void 0;
+		this.valueValidator = second instanceof require_required_methods.BaseValidator ? second : first;
+		this.addMutableRule(this.keyValidator ? {
+			...require_required_methods.plainObjectRule,
+			name: "object"
+		} : require_required_methods.objectRule, typeof second === "string" ? second : errorMessage);
 	}
 	/**
 	* Validate it as plain object
@@ -2280,6 +2287,7 @@ var RecordValidator = class extends require_required_methods.BaseValidator {
 	clone() {
 		const cloned = super.clone();
 		cloned.valueValidator = this.valueValidator.clone();
+		cloned.keyValidator = this.keyValidator?.clone();
 		return cloned;
 	}
 	/**
@@ -2289,7 +2297,15 @@ var RecordValidator = class extends require_required_methods.BaseValidator {
 	* so the parent ObjectValidator can omit the key. Without this, optional record
 	* fields would silently materialise as `{}` in the validated output.
 	*/
-	async validate(data, context) {
+	async validate(data, context = {
+		allValues: data,
+		parent: null,
+		value: data,
+		key: "",
+		path: "",
+		translateRule: () => "",
+		translateAttribute: ({ attribute }) => attribute
+	}) {
 		const valueForRules = data ?? this.getDefaultValue();
 		const mutatedData = await this.mutate(valueForRules, context);
 		const result = await this.validateRules(data, context);
@@ -2305,6 +2321,13 @@ var RecordValidator = class extends require_required_methods.BaseValidator {
 				key,
 				path: require_object.setKeyPath(context.path, key)
 			};
+			if (this.keyValidator) {
+				const keyResult = await this.keyValidator.validate(key, {
+					...childContext,
+					value: key
+				});
+				if (!keyResult.isValid) errors.push(...keyResult.errors);
+			}
 			const childResult = await this.valueValidator.validate(mutatedData[key], childContext);
 			mutatedData[key] = childResult.data;
 			if (childResult.isValid === false) errors.push(...childResult.errors);
@@ -2336,6 +2359,7 @@ var RecordValidator = class extends require_required_methods.BaseValidator {
 			type: "object",
 			additionalProperties: this.valueValidator.toJsonSchema(target)
 		};
+		if (this.keyValidator) schema.propertyNames = this.keyValidator.toJsonSchema(target);
 		if (this.isNullable) require_required_methods.applyNullable(schema, target);
 		return schema;
 	}
@@ -2688,6 +2712,13 @@ var UnionValidator = class extends require_required_methods.BaseValidator {
 
 //#endregion
 //#region ../../packages/seal/src/factory/validators.ts
+function record(first, second, errorMessage) {
+	if (second instanceof require_required_methods.BaseValidator) {
+		if (first === void 0) throw new TypeError("v.record(): a key validator is required before the value validator");
+		return new RecordValidator(first, second, errorMessage);
+	}
+	return new RecordValidator(first === void 0 ? new AnyValidator() : first, second);
+}
 /**
 * Seal factory object - creates instances of validators
 *
@@ -2701,7 +2732,7 @@ const v = {
 	/** Create an array validator */
 	array: (validator, errorMessage) => new ArrayValidator(validator, errorMessage),
 	/** Create a record validator - object with dynamic keys and consistent value types */
-	record: (validator, errorMessage) => new RecordValidator(validator || v.any(), errorMessage),
+	record,
 	/**
 	* Create a tuple validator - fixed-length array with position-specific types.
 	*