bank20baht-validator 0.1.2 → 0.1.4

package/README.md

@@ -44,9 +44,16 @@ POST /api/submissions {"id":"todo-form","data":{"title":"ab"}}
 → 422 {"errors":[{"ref":"title","message":"Must be at least 3 characters"}]}
 ```
 
+## Compatibility
+
+Peers on `bank20baht-ui` **0.2.x** (the `FieldType` union — including `password` since 0.2.2 —
+comes from there). In a workspace that also builds `bank20baht-ui`, keep the peer range in
+step with the core version or the validator's `tsc` build resolves a stale copy from npm.
+
 ## What it enforces
 
 - Every declarative validator of the field descriptors: `required`, `minLength`, `maxLength`, `min`, `max`, `pattern`, `email`, and `custom` (via a `Registry`).
+- Value **shape** per field type before any validator runs — a `password`/`text` must be a string, a `number` a finite number, a `dropdown` one of its option keys — so `{"$gt":""}` from a raw API call is rejected, not treated as "non-empty".
 - **Workflow rules first** (`evaluate` from `bank20baht-ui/engine`): fields hidden by rules are excluded and smuggled values are cleared; `required` derived from rules is enforced; `setValue` results are computed.
 - Approval steps: a `decision` must be present, and the comment policy (`required` / `requireOnReject`) is honored.
 

package/dist/index.js

@@ -13,7 +13,7 @@
 // every value must have the shape the UI control could actually emit before
 // the authored validators run.
 // ---------------------------------------------------------------------------
-import { applyFlags, approvalFields, defaultValue, evaluate, getCatalog, resolveViewFields, setCatalog, setLocale, t, validateField, walkPath, } from 'bank20baht-ui/engine';
+import { applyFlags, approvalFields, defaultValue, evaluate, getCatalog, parseDisabledEntry, parseIsoDate, resolveViewFields, setCatalog, setLocale, t, validateField, walkPath, } from 'bank20baht-ui/engine';
 /**
  * Run `fn` with the catalog switched to `locale`, restoring the previous
  * catalog after. The engine catalog is module-global; validation is fully
@@ -34,11 +34,13 @@ function withLocale(locale, fn) {
 }
 /** Keys that write through Object.prototype — never valid as field/form names. */
 const UNSAFE_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+const DATE_MODES = new Set(['single', 'range', 'multiple']);
 const FIELD_TYPES = new Set([
     'text',
     'textarea',
     'number',
     'email',
+    'password',
     'dropdown',
     'multiselect',
     'checkbox',
@@ -87,8 +89,22 @@ function typeIssue(field, value) {
         case 'text':
         case 'textarea':
         case 'email':
-        case 'date':
+        case 'password':
             return typeof value === 'string' ? null : t('pattern');
+        case 'date': {
+            // value shape follows dateMode; every day must be a real ISO calendar day
+            const isDay = (v) => parseIsoDate(v) !== null;
+            switch (field.dateMode ?? 'single') {
+                case 'range':
+                    return Array.isArray(value) && value.length === 2 && value.every(isDay)
+                        ? null
+                        : t('pattern');
+                case 'multiple':
+                    return Array.isArray(value) && value.every(isDay) ? null : t('pattern');
+                default:
+                    return isDay(value) ? null : t('pattern');
+            }
+        }
         case 'number':
             return typeof value === 'number' && Number.isFinite(value) ? null : t('pattern');
         case 'checkbox':
@@ -475,6 +491,8 @@ function assertFieldShape(field, formName) {
             throw new Error(`invalid field key ${JSON.stringify(field.key)} on ${formName}`);
         }
     }
+    if (field.type === 'date')
+        assertDateProps(field, formName);
     if (field.options !== undefined) {
         if (!Array.isArray(field.options) ||
             field.options.some((o) => !isRecord(o) || typeof o.key !== 'string')) {
@@ -508,6 +526,32 @@ function assertFieldShape(field, formName) {
         }
     }
 }
+/** Calendar constraints must be well-formed or the picker silently ignores them. */
+function assertDateProps(field, formName) {
+    const where = `${formName}.${field.key}`;
+    if (field.dateMode !== undefined && !DATE_MODES.has(field.dateMode)) {
+        throw new Error(`invalid dateMode ${JSON.stringify(field.dateMode)} on ${where}`);
+    }
+    for (const bound of ['min', 'max']) {
+        const v = field[bound];
+        if (v !== undefined && parseIsoDate(v) === null) {
+            throw new Error(`${bound} on ${where} must be an ISO date (yyyy-mm-dd)`);
+        }
+    }
+    if (field.disabledDates !== undefined) {
+        const bad = !Array.isArray(field.disabledDates) ||
+            field.disabledDates.some((d) => typeof d !== 'string' || parseDisabledEntry(d) === null);
+        if (bad) {
+            throw new Error(`disabledDates on ${where} must be ISO days ("2026-04-13") or intervals ("2026-04-13/2026-04-15")`);
+        }
+    }
+    if (field.disabledWeekdays !== undefined) {
+        const bad = !Array.isArray(field.disabledWeekdays) ||
+            field.disabledWeekdays.some((d) => !Number.isInteger(d) || d < 0 || d > 6);
+        if (bad)
+            throw new Error(`disabledWeekdays on ${where} must be integers 0 (Sun) … 6 (Sat)`);
+    }
+}
 function assertValidRules(wf, formNames, refs) {
     wf.rules.forEach((raw, i) => {
         if (!isRecord(raw))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bank20baht-validator",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "type": "module",
   "description": "Runtime validation for bahtui form/workflow JSON — the exact engine rules the client runs, on the server.",
   "license": "MIT",
@@ -40,12 +40,12 @@
     "test:watch": "vitest"
   },
   "devDependencies": {
-    "bank20baht-ui": "^0.1.0",
+    "bank20baht-ui": "^0.2.2",
     "typescript": "^5.8.3",
     "vitest": "^3.2.4"
   },
   "peerDependencies": {
-    "bank20baht-ui": ">=0.1.0 <0.2.0"
+    "bank20baht-ui": ">=0.2.6 <0.3.0"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",