@zudojs/constants 0.1.0 → 1.0.0

package/dist/validation/validation.constant.d.ts

@@ -11,9 +11,9 @@ export declare const ValidationLength: Readonly<{
     readonly SHORT: 64;
     /** Standard name field */
     readonly NAME: 128;
-    /** Email address */
-    readonly EMAIL: 255;
-    /** Display name or title */
+    /** Email address (RFC 5321 maximum total length) */
+    readonly EMAIL: 254;
+    /** Display name or title (canonical: {@link Limits.MAX_DISPLAY_LENGTH}) */
     readonly DISPLAY: 255;
     /** Short description */
     readonly DESCRIPTION_SHORT: 500;
@@ -40,7 +40,7 @@ export declare const ValidationRange: Readonly<{
     readonly MAX_PERCENTAGE: 100;
     /** Minimum page number (1-based) */
     readonly MIN_PAGE: 1;
-    /** Maximum page size */
+    /** Maximum page size (canonical: {@link Limits.MAX_PAGE_SIZE}) */
     readonly MAX_PAGE_SIZE: 100;
     /** Minimum pagination offset */
     readonly MIN_OFFSET: 0;
@@ -48,7 +48,14 @@ export declare const ValidationRange: Readonly<{
     readonly MAX_TIMEOUT_SECONDS: 3600;
     /** Minimum retry count */
     readonly MIN_RETRIES: 0;
-    /** Maximum retry count */
+    /**
+     * Maximum retry count a caller may configure (upper validation bound;
+     * canonical: {@link Limits.MAX_RETRY_ATTEMPTS}).
+     *
+     * Note: this is intentionally larger than `DefaultRetry.MAX_ATTEMPTS` (3),
+     * which is the out-of-the-box default — this constant caps what users may
+     * request, the other is what they get if they configure nothing.
+     */
     readonly MAX_RETRIES: 10;
 }>;
 //# sourceMappingURL=validation.constant.d.ts.map

package/dist/validation/validation.constant.js

@@ -3,6 +3,7 @@
  *
  * @module validation/validation
  */
+import { Limits } from "../common/common.constant.js";
 /**
  * Maximum allowed lengths for common fields.
  */
@@ -11,10 +12,10 @@ export const ValidationLength = Object.freeze({
     SHORT: 64,
     /** Standard name field */
     NAME: 128,
-    /** Email address */
-    EMAIL: 255,
-    /** Display name or title */
-    DISPLAY: 255,
+    /** Email address (RFC 5321 maximum total length) */
+    EMAIL: 254,
+    /** Display name or title (canonical: {@link Limits.MAX_DISPLAY_LENGTH}) */
+    DISPLAY: Limits.MAX_DISPLAY_LENGTH,
     /** Short description */
     DESCRIPTION_SHORT: 500,
     /** Long description or text body */
@@ -40,15 +41,22 @@ export const ValidationRange = Object.freeze({
     MAX_PERCENTAGE: 100,
     /** Minimum page number (1-based) */
     MIN_PAGE: 1,
-    /** Maximum page size */
-    MAX_PAGE_SIZE: 100,
+    /** Maximum page size (canonical: {@link Limits.MAX_PAGE_SIZE}) */
+    MAX_PAGE_SIZE: Limits.MAX_PAGE_SIZE,
     /** Minimum pagination offset */
     MIN_OFFSET: 0,
     /** Maximum timeout in seconds */
     MAX_TIMEOUT_SECONDS: 3_600,
     /** Minimum retry count */
     MIN_RETRIES: 0,
-    /** Maximum retry count */
-    MAX_RETRIES: 10,
+    /**
+     * Maximum retry count a caller may configure (upper validation bound;
+     * canonical: {@link Limits.MAX_RETRY_ATTEMPTS}).
+     *
+     * Note: this is intentionally larger than `DefaultRetry.MAX_ATTEMPTS` (3),
+     * which is the out-of-the-box default — this constant caps what users may
+     * request, the other is what they get if they configure nothing.
+     */
+    MAX_RETRIES: Limits.MAX_RETRY_ATTEMPTS,
 });
 //# sourceMappingURL=validation.constant.js.map

package/dist/validation/validation.pattern.type.d.ts

@@ -1,21 +1,39 @@
 /**
  * Common regex patterns for validation.
  *
+ * This module is the single source of truth for validation regexes in
+ * `@zudojs/constants`. Other modules (e.g. `SCHEMA_STRING_FORMATS`) reference
+ * these patterns rather than redefining them.
+ *
  * @module validation/validationPattern
  */
 /**
  * Pre-compiled regular expressions for common validation patterns.
  */
 export declare const ValidationPattern: Readonly<{
-    /** RFC 5322 simplified email pattern */
+    /**
+     * Simplified email pattern (pragmatic subset of RFC 5322).
+     *
+     * The domain part rejects consecutive dots, leading/trailing dots, and
+     * labels that start or end with a hyphen. Combine with
+     * `ValidationLength.EMAIL` (254) for a length bound.
+     */
     readonly EMAIL: RegExp;
-    /** UUID v4 */
+    /** UUID — any version/variant nibble (use UUID_V4 for strict v4). */
     readonly UUID: RegExp;
+    /** UUID v4 (strict: version nibble 4, RFC 4122 variant). */
+    readonly UUID_V4: RegExp;
     /** IPv4 address */
     readonly IPV4: RegExp;
-    /** IPv6 address (simplified) */
+    /**
+     * IPv6 address — full form, compressed forms (`::1`, `fe80::1`), and
+     * IPv4-mapped/embedded forms (`::ffff:192.0.2.1`).
+     */
     readonly IPV6: RegExp;
-    /** ISO 8601 date-time */
+    /**
+     * ISO 8601 date-time, anchored: `YYYY-MM-DDTHH:mm:ss` with optional
+     * fractional seconds and an optional `Z` or `±hh:mm` offset.
+     */
     readonly ISO_DATE_TIME: RegExp;
     /** ISO 8601 date only */
     readonly ISO_DATE: RegExp;
@@ -23,17 +41,28 @@ export declare const ValidationPattern: Readonly<{
     readonly ALPHANUMERIC: RegExp;
     /** Alphanumeric with hyphens and underscores */
     readonly SLUG: RegExp;
-    /** Strong password: 8+ chars, uppercase, lowercase, digit, special */
+    /**
+     * Strong password: 8+ chars, uppercase, lowercase, digit, special
+     * (specials include space, backtick, and tilde).
+     */
     readonly STRONG_PASSWORD: RegExp;
     /** Hex colour code (3 or 6 digits) */
     readonly HEX_COLOR: RegExp;
     /** URL pattern (http/https) */
     readonly URL: RegExp;
-    /** Semantic version (v1.2.3) */
+    /**
+     * Semantic version per semver.org (e.g. `1.2.3`, `1.0.0-alpha-1`,
+     * `2.0.0-rc.1+build.5`). No leading `v` prefix; leading zeros are rejected.
+     */
     readonly SEMVER: RegExp;
-    /** Phone number (international format with optional + prefix) */
+    /** Phone number (E.164 international format with optional + prefix) */
     readonly PHONE: RegExp;
-    /** File name (no path separators) */
+    /**
+     * File name (no path separators). Rejects `.` and `..` (path traversal),
+     * names ending with a dot or space, and Windows reserved device names
+     * (`CON`, `PRN`, `AUX`, `NUL`, `COM1`-`COM9`, `LPT1`-`LPT9`, with or
+     * without an extension, case-insensitively).
+     */
     readonly FILE_NAME: RegExp;
 }>;
 //# sourceMappingURL=validation.pattern.type.d.ts.map

package/dist/validation/validation.pattern.type.js

@@ -1,39 +1,68 @@
 /**
  * Common regex patterns for validation.
  *
+ * This module is the single source of truth for validation regexes in
+ * `@zudojs/constants`. Other modules (e.g. `SCHEMA_STRING_FORMATS`) reference
+ * these patterns rather than redefining them.
+ *
  * @module validation/validationPattern
  */
 /**
  * Pre-compiled regular expressions for common validation patterns.
  */
 export const ValidationPattern = Object.freeze({
-    /** RFC 5322 simplified email pattern */
-    EMAIL: /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/,
-    /** UUID v4 */
-    UUID: /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,
+    /**
+     * Simplified email pattern (pragmatic subset of RFC 5322).
+     *
+     * The domain part rejects consecutive dots, leading/trailing dots, and
+     * labels that start or end with a hyphen. Combine with
+     * `ValidationLength.EMAIL` (254) for a length bound.
+     */
+    EMAIL: /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?)*\.[a-zA-Z]{2,}$/,
+    /** UUID — any version/variant nibble (use UUID_V4 for strict v4). */
+    UUID: /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,
+    /** UUID v4 (strict: version nibble 4, RFC 4122 variant). */
+    UUID_V4: /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,
     /** IPv4 address */
     IPV4: /^(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)$/,
-    /** IPv6 address (simplified) */
-    IPV6: /^([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}$/,
-    /** ISO 8601 date-time */
-    ISO_DATE_TIME: /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{3})?Z?$/,
+    /**
+     * IPv6 address — full form, compressed forms (`::1`, `fe80::1`), and
+     * IPv4-mapped/embedded forms (`::ffff:192.0.2.1`).
+     */
+    IPV6: /^(?:(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,7}:|(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,5}(?::[0-9a-fA-F]{1,4}){1,2}|(?:[0-9a-fA-F]{1,4}:){1,4}(?::[0-9a-fA-F]{1,4}){1,3}|(?:[0-9a-fA-F]{1,4}:){1,3}(?::[0-9a-fA-F]{1,4}){1,4}|(?:[0-9a-fA-F]{1,4}:){1,2}(?::[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:(?::[0-9a-fA-F]{1,4}){1,6}|:(?:(?::[0-9a-fA-F]{1,4}){1,7}|:)|::(?:[fF]{4}(?::0{1,4})?:)?(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[0-9a-fA-F]{1,4}:){1,4}:(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))$/,
+    /**
+     * ISO 8601 date-time, anchored: `YYYY-MM-DDTHH:mm:ss` with optional
+     * fractional seconds and an optional `Z` or `±hh:mm` offset.
+     */
+    ISO_DATE_TIME: /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})?$/,
     /** ISO 8601 date only */
     ISO_DATE: /^\d{4}-\d{2}-\d{2}$/,
     /** Alphanumeric string (no special chars) */
     ALPHANUMERIC: /^[a-zA-Z0-9]+$/,
     /** Alphanumeric with hyphens and underscores */
     SLUG: /^[a-z0-9]+(?:-[a-z0-9]+)*$/,
-    /** Strong password: 8+ chars, uppercase, lowercase, digit, special */
-    STRONG_PASSWORD: /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]).{8,}$/,
+    /**
+     * Strong password: 8+ chars, uppercase, lowercase, digit, special
+     * (specials include space, backtick, and tilde).
+     */
+    STRONG_PASSWORD: /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[ !@#$%^&*()_+\-=[\]{};':"\\|,.<>/?`~]).{8,}$/,
     /** Hex colour code (3 or 6 digits) */
     HEX_COLOR: /^#(?:[0-9a-fA-F]{3}){1,2}$/,
     /** URL pattern (http/https) */
     URL: /^https?:\/\/[^\s/$.?#].[^\s]*$/i,
-    /** Semantic version (v1.2.3) */
-    SEMVER: /^\d+\.\d+\.\d+(?:-[a-zA-Z0-9]+(?:\.[a-zA-Z0-9]+)*)?(?:\+[a-zA-Z0-9]+(?:\.[a-zA-Z0-9]+)*)?$/,
-    /** Phone number (international format with optional + prefix) */
+    /**
+     * Semantic version per semver.org (e.g. `1.2.3`, `1.0.0-alpha-1`,
+     * `2.0.0-rc.1+build.5`). No leading `v` prefix; leading zeros are rejected.
+     */
+    SEMVER: /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,
+    /** Phone number (E.164 international format with optional + prefix) */
     PHONE: /^\+?[1-9]\d{6,14}$/,
-    /** File name (no path separators) */
-    FILE_NAME: /^[^<>:"/\\|?*\x00-\x1f]+$/,
+    /**
+     * File name (no path separators). Rejects `.` and `..` (path traversal),
+     * names ending with a dot or space, and Windows reserved device names
+     * (`CON`, `PRN`, `AUX`, `NUL`, `COM1`-`COM9`, `LPT1`-`LPT9`, with or
+     * without an extension, case-insensitively).
+     */
+    FILE_NAME: /^(?!\.{1,2}$)(?!(?:CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(?:\.|$))(?!.*[. ]$)[^<>:"/\\|?*\x00-\x1f]+$/i,
 });
 //# sourceMappingURL=validation.pattern.type.js.map

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "@zudojs/constants",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "description": "Shared constants, enums, and type-safe literals for the Zudojs framework.",
   "license": "MIT",
   "type": "module",
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -15,23 +16,19 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "!dist/**/*.map",
+    "!dist/**/*.tsbuildinfo",
+    "!dist/.tsbuildinfo"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "clean": "rm -rf dist",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  },
   "dependencies": {
-    "@zudojs/errors": "0.1.0"
+    "@zudojs/errors": "1.0.0"
   },
   "engines": {
     "node": ">=24.0.0"
   },
   "devDependencies": {
-    "typescript": "^7.0.2",
+    "typescript": "7.0.2",
     "vitest": "^4.1.11"
   },
   "publishConfig": {
@@ -44,8 +41,19 @@
     "types"
   ],
   "homepage": "https://github.com/oyinlola-tech/zudo#readme",
+  "bugs": {
+    "url": "https://github.com/oyinlola-tech/zudo/issues"
+  },
   "repository": {
     "type": "git",
-    "url": "https://github.com/oyinlola-tech/zudo"
+    "url": "https://github.com/oyinlola-tech/zudo",
+    "directory": "packages/constants"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest"
   }
-}
+}