bank20baht-validator 0.0.3 → 0.0.5

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, validateField, type FormDefinition, type NestedData, type Registry, type WorkflowDefinition, type WorkflowForm } from 'bank20baht-ui/engine';
+import { applyFlags, approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, validateField, type FormDefinition, type NestedData, type Registry, type WorkflowDefinition, type WorkflowForm } from 'bank20baht-ui/engine';
 export type SchemaDefinition = FormDefinition | WorkflowDefinition;
 /** One violation. `ref` is the field key for forms, `formName.key` for workflows. */
 export interface ValidationIssue {
@@ -46,6 +46,6 @@ export declare function validateSubmission(schema: SchemaDefinition, data: unkno
  * render. Throws with a human-readable message on bad input.
  */
 export declare function parseSchema(json: unknown): SchemaDefinition;
-export { approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, validateField };
+export { applyFlags, approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, validateField, };
 export type { FormDefinition, NestedData, Registry, WorkflowDefinition, WorkflowForm };
-export type { FormViewSpec, Locale, MessageCatalog } from 'bank20baht-ui/engine';
+export type { FeatureFlags, FormViewSpec, Locale, MessageCatalog } from 'bank20baht-ui/engine';

package/dist/index.js

@@ -7,7 +7,7 @@
 // request that bypasses the frontend hits the exact same rules — no codegen,
 // no recompile: swap the stored JSON and validation follows.
 // ---------------------------------------------------------------------------
-import { approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, t, validateField, } from 'bank20baht-ui/engine';
+import { applyFlags, approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, t, validateField, walkPath, } from 'bank20baht-ui/engine';
 export function isWorkflowDefinition(schema) {
     return (isRecord(schema) &&
         typeof schema['workflowId'] === 'string' &&
@@ -73,10 +73,23 @@ export function validateWorkflowData(workflow, input, registry) {
     }
     const derived = evaluate(workflow, input);
     const issues = [...derived.errors];
+    // graph mode (spec 03 §6): only the forms on the path this data takes
+    // validate; off-path branches are as good as skipped, their data dropped
+    const path = workflow.transitions && workflow.transitions.length > 0
+        ? new Set(walkPath(workflow, derived.data))
+        : null;
+    if (path) {
+        for (const name of Object.keys(derived.data)) {
+            if (!path.has(name))
+                delete derived.data[name];
+        }
+    }
     const forms = [...workflow.forms].sort((a, b) => a.order - b.order);
     for (const form of forms) {
         if (derived.forms[form.formName]?.visible === false)
             continue;
+        if (path && !path.has(form.formName))
+            continue;
         if (form.kind === 'approval') {
             issues.push(...approvalIssues(form, derived.data));
             continue;
@@ -158,6 +171,22 @@ export function parseSchema(json) {
         if (new Set(names).size !== names.length) {
             throw new Error('formName must be unique in a workflow');
         }
+        if (parsed.transitions !== undefined) {
+            if (!Array.isArray(parsed.transitions))
+                throw new Error('transitions must be an array');
+            const nameSet = new Set(names);
+            for (const tr of parsed.transitions) {
+                if (!isRecord(tr) || typeof tr.from !== 'string' || typeof tr.to !== 'string') {
+                    throw new Error('invalid transition: expected { from, to }');
+                }
+                if (!nameSet.has(tr.from)) {
+                    throw new Error(`transition from unknown form ${JSON.stringify(tr.from)}`);
+                }
+                if (tr.to !== 'end' && !nameSet.has(tr.to)) {
+                    throw new Error(`transition to unknown form ${JSON.stringify(tr.to)}`);
+                }
+            }
+        }
         return parsed;
     }
     if (isFormDefinition(parsed)) {
@@ -217,5 +246,7 @@ function assertValidViews(form) {
 }
 // Re-exported so servers can type stores and registries without a direct
 // dependency on bank20baht-ui. `setLocale` localizes the issues this package
-// emits (same catalog the client renders).
-export { approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, validateField };
+// emits (same catalog the client renders). `applyFlags` resolves feature
+// flags server-side — validate flag-gated schemas as
+// `validateSubmission(applyFlags(schema, flags), data)`.
+export { applyFlags, approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, validateField, };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bank20baht-validator",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "type": "module",
   "description": "Runtime validation for bahtui form/workflow JSON — the exact engine rules the client runs, on the server.",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "bank20baht-ui": "^0.0.8"
+    "bank20baht-ui": "^0.0.11"
   },
   "devDependencies": {
     "typescript": "^5.8.3",