bank20baht-validator 0.0.4 → 0.0.5

package/dist/index.js

@@ -7,7 +7,7 @@
 // request that bypasses the frontend hits the exact same rules — no codegen,
 // no recompile: swap the stored JSON and validation follows.
 // ---------------------------------------------------------------------------
-import { applyFlags, approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, t, validateField, } from 'bank20baht-ui/engine';
+import { applyFlags, approvalFields, defaultValue, evaluate, resolveViewFields, setLocale, t, validateField, walkPath, } from 'bank20baht-ui/engine';
 export function isWorkflowDefinition(schema) {
     return (isRecord(schema) &&
         typeof schema['workflowId'] === 'string' &&
@@ -73,10 +73,23 @@ export function validateWorkflowData(workflow, input, registry) {
     }
     const derived = evaluate(workflow, input);
     const issues = [...derived.errors];
+    // graph mode (spec 03 §6): only the forms on the path this data takes
+    // validate; off-path branches are as good as skipped, their data dropped
+    const path = workflow.transitions && workflow.transitions.length > 0
+        ? new Set(walkPath(workflow, derived.data))
+        : null;
+    if (path) {
+        for (const name of Object.keys(derived.data)) {
+            if (!path.has(name))
+                delete derived.data[name];
+        }
+    }
     const forms = [...workflow.forms].sort((a, b) => a.order - b.order);
     for (const form of forms) {
         if (derived.forms[form.formName]?.visible === false)
             continue;
+        if (path && !path.has(form.formName))
+            continue;
         if (form.kind === 'approval') {
             issues.push(...approvalIssues(form, derived.data));
             continue;
@@ -158,6 +171,22 @@ export function parseSchema(json) {
         if (new Set(names).size !== names.length) {
             throw new Error('formName must be unique in a workflow');
         }
+        if (parsed.transitions !== undefined) {
+            if (!Array.isArray(parsed.transitions))
+                throw new Error('transitions must be an array');
+            const nameSet = new Set(names);
+            for (const tr of parsed.transitions) {
+                if (!isRecord(tr) || typeof tr.from !== 'string' || typeof tr.to !== 'string') {
+                    throw new Error('invalid transition: expected { from, to }');
+                }
+                if (!nameSet.has(tr.from)) {
+                    throw new Error(`transition from unknown form ${JSON.stringify(tr.from)}`);
+                }
+                if (tr.to !== 'end' && !nameSet.has(tr.to)) {
+                    throw new Error(`transition to unknown form ${JSON.stringify(tr.to)}`);
+                }
+            }
+        }
         return parsed;
     }
     if (isFormDefinition(parsed)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bank20baht-validator",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "type": "module",
   "description": "Runtime validation for bahtui form/workflow JSON — the exact engine rules the client runs, on the server.",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "bank20baht-ui": "^0.0.10"
+    "bank20baht-ui": "^0.0.11"
   },
   "devDependencies": {
     "typescript": "^5.8.3",