bazis 0.96.4 → 0.96.6

package/core/di/module/encapsulation.ts

@@ -170,6 +170,16 @@ export function validateModuleEncapsulation(
     }
   }
 
+  // Why a provided token is not visible: the owner does not export it, or the
+  // consumer module does not import the owner. Both used to read "not exported".
+  const explainHidden = (token: Token<unknown>, consumer: ModuleGraphRecord): string => {
+    const owner = records.find((record) => record !== consumer && record.providedTokens.has(token));
+    if (owner === undefined) return "which is provided by another module but not exported.";
+    return exportedTokens(owner).has(token)
+      ? `which module "${owner.name}" exports, but "${consumer.name}" does not list "${owner.name}" in its imports. Add "${owner.name}" to the imports of "${consumer.name}".`
+      : `which module "${owner.name}" provides but does not export. Add it to the exports of "${owner.name}".`;
+  };
+
   const contexts = new Map<ModuleGraphRecord, DependencyCheckContext>();
   for (let recordIndex = 0; recordIndex < records.length; recordIndex += 1) {
     const record = records[recordIndex] as ModuleGraphRecord;
@@ -183,7 +193,7 @@ export function validateModuleEncapsulation(
     }
 
     const context: DependencyCheckContext = {
-      visible, familiesVisible, tokensByName, allProvidedTokens, allProvidedFamilies, issues,
+      visible, familiesVisible, tokensByName, allProvidedTokens, allProvidedFamilies, issues, explainHidden,
     };
     contexts.set(record, context);
     for (const definition of record.definitions) {
@@ -214,6 +224,7 @@ interface DependencyCheckContext {
   readonly allProvidedTokens: ReadonlySet<Token<unknown>>;
   readonly allProvidedFamilies: ReadonlySet<symbol>;
   readonly issues: string[];
+  readonly explainHidden: (token: Token<unknown>, consumer: ModuleGraphRecord) => string;
 }
 
 function checkDefinition(
@@ -265,8 +276,9 @@ function checkDependency(
         return;
       }
     }
+    const provided = candidates.find((candidate) => context.allProvidedTokens.has(candidate as Token<unknown>)) as Token<unknown> | undefined;
     context.issues.push(
-      `Module "${record.name}": "${consumer}" depends on "${dep.name}", which is provided by another module but not exported.`,
+      `Module "${record.name}": "${consumer}" depends on "${dep.name}", ${provided ? context.explainHidden(provided, record) : "which is provided by another module but not exported."}`,
     );
     return;
   }
@@ -293,7 +305,7 @@ function checkDependency(
     return;
   }
   context.issues.push(
-    `Module "${record.name}": "${consumer}" depends on "${tokenToDebugName(token)}", which is provided by another module but not exported.`,
+    `Module "${record.name}": "${consumer}" depends on "${tokenToDebugName(token)}", ${context.explainHidden(token, record)}`,
   );
 }
 

package/core/http/Binding/ParameterBinder.ts

@@ -3,7 +3,7 @@ import { BadRequestError, UnsupportedMediaTypeError } from "../Errors/HttpError"
 import type { HttpContext } from "../HttpContext/HttpContext";
 import type { ParameterBinding } from "./bindings";
 import { convertOr400 } from "./convert";
-import { bindModel } from "./modelBinder";
+import { bindModelAsync } from "./modelBinder";
 
 /** Per-action constraints affecting binding (from decorators). */
 export interface BindingDefaults {
@@ -67,7 +67,7 @@ export async function bindArguments(
           throw new UnsupportedMediaTypeError("application/json");
         }
         const data = await ctx.json();
-        args[index] = binding.model ? bindModel(binding.model, data, ctx.modelValidator, { primitiveTypes: true }) : data;
+        args[index] = binding.model ? await bindModelAsync(binding.model, data, ctx.modelValidator, { primitiveTypes: true }) : data;
         break;
       }
       case "request":

package/core/http/Binding/modelBinder.ts

@@ -1,6 +1,6 @@
 import type { Class } from "../../di";
 import { BadRequestError, ModelValidationError } from "../Errors/HttpError";
-import { getModelValidator, type ModelValidator } from "./modelValidator";
+import { getModelValidator, type ModelValidationIssue, type ModelValidationResult, type ModelValidator } from "./modelValidator";
 import {
   findRequestModelShape,
   type RequestModelClass,
@@ -17,6 +17,9 @@ const MAX_JSON_NODES = 100_000;
 interface BindingTraversal {
   readonly stack: WeakSet<object>;
   readonly options: ModelBindingOptions;
+  /** Per-field binding problems; a bad field does not stop the other fields. */
+  readonly issues: ModelValidationIssue[];
+  readonly typeMessage?: (property: string, expected: string, actual: string) => string;
   nodes: number;
 }
 
@@ -49,19 +52,48 @@ export interface ModelBindingOptions {
  * runtime fallback.
  */
 export function bindModel<T extends object>(model: Class<T>, data: unknown, validator?: ModelValidator, options: ModelBindingOptions = {}): T {
+  const activeValidator = validator ?? getModelValidator();
+  const { instance, traversal } = hydrate(model, data, activeValidator, options);
+  finish(traversal, activeValidator, activeValidator?.validate(instance));
+  return instance;
+}
+
+/**
+ * `bindModel` for callers that can wait: runs async `custom` rules through
+ * `ModelValidator.validateAsync` when the validator provides it.
+ */
+export async function bindModelAsync<T extends object>(model: Class<T>, data: unknown, validator?: ModelValidator, options: ModelBindingOptions = {}): Promise<T> {
+  const activeValidator = validator ?? getModelValidator();
+  const { instance, traversal } = hydrate(model, data, activeValidator, options);
+  const result = activeValidator?.validateAsync !== undefined
+    ? await activeValidator.validateAsync(instance)
+    : activeValidator?.validate(instance);
+  finish(traversal, activeValidator, result);
+  return instance;
+}
+
+function hydrate<T extends object>(model: Class<T>, data: unknown, validator: ModelValidator | undefined, options: ModelBindingOptions): { instance: T; traversal: BindingTraversal } {
   if (!isPlainJsonObject(data)) {
     throw new BadRequestError("Request body must be a JSON object");
   }
-  const traversal: BindingTraversal = { stack: new WeakSet(), nodes: 0, options };
+  const traversal: BindingTraversal = {
+    stack: new WeakSet(), nodes: 0, options, issues: [],
+    typeMessage: validator?.typeMismatchMessage?.bind(validator),
+  };
   const instance = hydrateModel(model as RequestModelClass, data, "", traversal, 0) as T;
-  const activeValidator = validator ?? getModelValidator();
-  if (activeValidator !== undefined) {
-    const result = activeValidator.validate(instance);
-    if (!result.isValid) {
-      throw new ModelValidationError(result.errors);
-    }
+  return { instance, traversal };
+}
+
+/**
+ * One 400 with every problem: binding issues first, then `@Validator` errors of
+ * the other fields (a field with a wrong JSON type gets only its type error).
+ */
+function finish(traversal: BindingTraversal, validator: ModelValidator | undefined, result: ModelValidationResult | undefined): void {
+  const bound = new Set(traversal.issues.map((issue) => issue.property));
+  const errors = [...traversal.issues, ...(result?.errors ?? []).filter((error) => !bound.has(error.property))];
+  if (errors.length > 0) {
+    throw new ModelValidationError(errors, validator?.failureTitle?.() ?? "Validation failed");
   }
-  return instance;
 }
 
 function hydrateModel(
@@ -84,7 +116,12 @@ function hydrateModel(
       }
       const target = instance as Record<string, unknown>;
       const fieldPath = path === "" ? key : `${path}.${key}`;
-      target[key] = bindField(model, key, target[key], source[key], fieldPath, traversal, depth + 1);
+      try {
+        target[key] = bindField(model, key, target[key], source[key], fieldPath, traversal, depth + 1);
+      } catch (error) {
+        if (!(error instanceof BindingTypeError) && !(error instanceof ModelValidationError && error.errors.every((issue) => issue.code === "unknownField"))) throw error;
+        traversal.issues.push(...(error instanceof BindingTypeError ? [error.issue(traversal.typeMessage)] : error.errors));
+      }
     }
     return instance;
   } finally {
@@ -117,13 +154,13 @@ function checkPrimitive(shape: RequestModelPrimitiveFieldShape, incoming: unknow
     return;
   }
   if (shape.array !== true) {
-    if (typeof incoming !== shape.primitive) throw bindingTypeError(path, shape.primitive);
+    if (typeof incoming !== shape.primitive) throw bindingTypeError(path, shape.primitive, incoming);
     return;
   }
-  if (!Array.isArray(incoming)) throw bindingTypeError(path, "array");
+  if (!Array.isArray(incoming)) throw bindingTypeError(path, "array", incoming);
   incoming.forEach((item, index) => {
     if (!(item === null && shape.elementNullable === true) && typeof item !== shape.primitive) {
-      throw bindingTypeError(`${path}[${index}]`, shape.primitive);
+      throw bindingTypeError(`${path}[${index}]`, shape.primitive, item);
     }
   });
 }
@@ -142,11 +179,11 @@ function hydrateField(
     if (shape.nullable === true) {
       return null;
     }
-    throw bindingTypeError(path, shape.array === true ? "array" : "object");
+    throw bindingTypeError(path, shape.array === true ? "array" : "object", incoming);
   }
   if (shape.array === true) {
     if (!Array.isArray(incoming)) {
-      throw bindingTypeError(path, "array");
+      throw bindingTypeError(path, "array", incoming);
     }
     enterContainer(incoming, path, traversal, depth);
     try {
@@ -156,7 +193,7 @@ function hydrateField(
           return null;
         }
         if (!isPlainJsonObject(item)) {
-          throw bindingTypeError(itemPath, "object");
+          throw bindingTypeError(itemPath, "object", item);
         }
         return hydrateModel(shape.model, item, itemPath, traversal, depth + 1);
       });
@@ -165,17 +202,25 @@ function hydrateField(
     }
   }
   if (!isPlainJsonObject(incoming)) {
-    throw bindingTypeError(path, "object");
+    throw bindingTypeError(path, "object", incoming);
   }
   return hydrateModel(shape.model, incoming, path, traversal, depth);
 }
 
-function bindingTypeError(property: string, expected: string): ModelValidationError {
-  return new ModelValidationError([{
-    property: property || "$",
-    message: `Field "${property || "$"}" must be a ${expected}`,
-    code: "type",
-  }]);
+/** A JSON value of the wrong type; the field is skipped and the binding goes on. */
+class BindingTypeError extends ModelValidationError {
+  constructor(readonly property: string, readonly expected: string, readonly actual: string) {
+    super([{ property, message: `Field "${property}" must be a ${expected}`, code: "type" }]);
+  }
+
+  issue(format?: (property: string, expected: string, actual: string) => string): ModelValidationIssue {
+    return { property: this.property, message: format?.(this.property, this.expected, this.actual) ?? this.errors[0]!.message, code: "type" };
+  }
+}
+
+function bindingTypeError(property: string, expected: string, value: unknown): BindingTypeError {
+  const actual = value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
+  return new BindingTypeError(property || "$", expected, actual);
 }
 
 function isPlainJsonObject(value: unknown): value is Record<string, unknown> {
@@ -215,7 +260,7 @@ function sanitizeBoundValue(
 
   if (Array.isArray(incoming)) {
     if (isNestedModel(template) || isPlainJsonObject(template)) {
-      throw bindingTypeError(path, "object");
+      throw bindingTypeError(path, "object", incoming);
     }
     enterContainer(incoming, path, traversal, depth);
     try {
@@ -228,10 +273,10 @@ function sanitizeBoundValue(
   }
 
   if (!isPlainJsonObject(incoming)) {
-    throw bindingTypeError(path, "JSON object or array");
+    throw bindingTypeError(path, "JSON object or array", incoming);
   }
   if (Array.isArray(template)) {
-    throw bindingTypeError(path, "array");
+    throw bindingTypeError(path, "array", incoming);
   }
 
   enterContainer(incoming, path, traversal, depth);

package/core/http/Binding/modelValidator.ts

@@ -13,8 +13,19 @@ export interface ModelValidationIssue {
   readonly code?: string;
 }
 
+export interface ModelValidationResult {
+  readonly isValid: boolean;
+  readonly errors: readonly ModelValidationIssue[];
+}
+
 export interface ModelValidator {
-  validate(instance: object): { readonly isValid: boolean; readonly errors: readonly ModelValidationIssue[] };
+  validate(instance: object): ModelValidationResult;
+  /** Async rules (custom checks returning a Promise). HTTP binding prefers it when present. */
+  validateAsync?(instance: object): Promise<ModelValidationResult>;
+  /** Text for a JSON value of the wrong type; without it the binder uses its English default. */
+  typeMismatchMessage?(property: string, expected: string, actual: string): string;
+  /** Title of a 400 validation response; without it "Validation failed". */
+  failureTitle?(): string;
 }
 
 let activeValidator: ModelValidator | undefined;

package/core/http/Errors/HttpError.ts

@@ -72,9 +72,9 @@ export class TooManyRequestsError extends HttpError {
  * of validation problems.
  */
 export class ModelValidationError extends BadRequestError {
-  constructor(readonly errors: readonly ModelValidationIssue[]) {
+  constructor(readonly errors: readonly ModelValidationIssue[], title = "Validation failed") {
     super(
-      "Validation failed",
+      title,
       errors.map((error) => ({ property: error.property, message: error.message, code: error.code })),
     );
   }

package/core/infra/connectors/codex/CodexAppServerClient.ts

@@ -232,7 +232,7 @@ export class CodexAppServerClient implements CodexClient {
         if (method === "account/updated") this.modelCache = undefined;
       }, () => { this.clearLogin(); this.modelCache = undefined; });
       const initialized = await client.request("initialize", {
-        clientInfo: { name: "bazis", title: "Bazis", version: "0.96.4" }, capabilities: { experimentalApi: true },
+        clientInfo: { name: "bazis", title: "Bazis", version: "0.96.6" }, capabilities: { experimentalApi: true },
       }, 15_000, signal);
       if (resolve(text(initialized.codexHome, 4096)) !== this.paths.home) throw new CodexError("PROTOCOL_ERROR");
       client.notify("initialized");

package/core/kernel/config/README.md

@@ -29,8 +29,10 @@ empty or whitespace value. TypeScript forbids unsupported object types.
 
 A declaration stores no chosen environment, values or cache. `get/has/ensureValid`
 stay for standalone reading of the process env, but `ensureValid` no longer
-switches later reads. Host code gets `resolve`, a service injects
-`definition.token`, a connector gets `ConfigRegistry` as the create argument.
+switches later reads. Host code gets `resolve`, a service declares
+`ConfigView<T>` in its constructor (codegen binds it to the token of the one
+`defineConfig<T>(...)` declaration; the type argument is required) or injects
+`definition.token` explicitly, a connector gets `ConfigRegistry` as the create argument.
 All built-in connectors use this argument; a custom connector reads
 `configs?.get(config) ?? config`. A direct global get inside a service does not
 read the settings of its kernel.

package/core/scripts/di-generate.ts

@@ -162,6 +162,9 @@ let inferredDiClasses = new Set<ts.ClassDeclaration>();
 let explicitlyBoundDiClasses = new Set<ts.ClassDeclaration>();
 // Known runtime token names: createToken descriptions + class names usable as class-tokens.
 let tokenDescriptions = new Set<string>();
+// defineConfig<T>("prefix") declarations by the name of T: a ConfigView<T>
+// constructor parameter binds to the token of that declaration.
+let configPrefixesByType = new Map<string, Set<string>>();
 let knownClassNames = new Set<string>();
 let warnings: string[] = [];
 let fatalErrors: string[] = [];
@@ -446,7 +449,7 @@ function collectDynamicImportDiagnostics(source: ts.SourceFile, target: string,
 function resetTargetAnalysis(files: Set<string>, generatedDir: string): void {
   activeGeneratedDir = generatedDir;
   classDeps = new Map(); inferredDiClasses = new Set(); explicitlyBoundDiClasses = new Set();
-  tokenDescriptions = new Set(); knownClassNames = new Set(); warnings = []; fatalErrors = [];
+  tokenDescriptions = new Set(); configPrefixesByType = new Map(); knownClassNames = new Set(); warnings = []; fatalErrors = [];
   httpBindings = {}; httpControllerFiles = {}; openApiSchemas = {}; openApiOperations = {};
   grpcBindings = new Map();
   uiProfileResponseModels = new Map(); openApiSchemaModels = new Map(); requestModelClassNames = new Set(); listRequestClassNames = new Set();
@@ -476,6 +479,7 @@ async function generateTarget(name: string, reachable: Set<string>, production:
     }
     collectHttpBindings(source); collectOpenApiSchemas(source); collectUiProfileResponseModels(source);
   }
+  resolveConfigViewDeps();
   validateDepsAgainstKnownTokens();
   const requestModelImports = resolveRequestModelImports();
   const requestModelHydration = resolveRequestModelHydration(requestModelImports);
@@ -711,6 +715,13 @@ function collectTokenDescriptions(source: ts.SourceFile): void {
         if (node.expression.text === "createToken" || node.expression.text === "createOpenGenericTokenFamily") {
           tokenDescriptions.add(firstArg.text);
         }
+        if (node.expression.text === "defineConfig") {
+          // The same description defineConfig gives its token.
+          const prefix = firstArg.text || "default";
+          tokenDescriptions.add(`Config:${prefix}`);
+          const typeName = node.typeArguments?.[0] && getDependencyTypeName(node.typeArguments[0]);
+          if (typeName) configPrefixesByType.set(typeName, (configPrefixesByType.get(typeName) ?? new Set()).add(prefix));
+        }
       }
     }
     if (ts.isClassDeclaration(node) && node.name) {
@@ -722,6 +733,39 @@ function collectTokenDescriptions(source: ts.SourceFile): void {
   ts.forEachChild(source, visit);
 }
 
+/**
+ * Replaces each `ConfigView<T>` placeholder with the token of the one
+ * `defineConfig<T>(...)` declaration. Runs after every source was read, because
+ * a service may come before the file that declares its configuration.
+ */
+function resolveConfigViewDeps(): void {
+  for (const [declaration, deps] of classDeps) {
+    let changed = false;
+    const resolved: CollectedDependency[] = [];
+    for (const [index, dep] of deps.entries()) {
+      const typeName = /^ConfigView<(.+)>$/.exec(dep.name)?.[1];
+      if (typeName === undefined) {
+        resolved.push(dep);
+        continue;
+      }
+      const prefixes = [...(configPrefixesByType.get(typeName) ?? [])];
+      if (prefixes.length !== 1) {
+        classDeps.delete(declaration);
+        if (needsInferredDiDeps(declaration)) {
+          fatalErrors.push(prefixes.length === 0
+            ? `BAZIS_DI_CONFIG_UNKNOWN: ${sourceLocation(declaration)}: constructor parameter ${index + 1} of "${declaration.name?.text}" has type "ConfigView<${typeName}>", but no defineConfig<${typeName}>(...) declaration was found. Declare the configuration with an explicit type argument, for example defineConfig<${typeName}>("name", { default: {...} }).`
+            : `BAZIS_DI_CONFIG_AMBIGUOUS: ${sourceLocation(declaration)}: constructor parameter ${index + 1} of "${declaration.name?.text}" has type "ConfigView<${typeName}>", which matches several declarations: ${prefixes.map((prefix) => `"${prefix}"`).join(", ")}. Give each declaration its own type, or pass the token explicitly: scoped(Service, Service, [config.token]).`);
+        }
+        changed = false;
+        break;
+      }
+      resolved.push({ name: `Config:${prefixes[0]}` });
+      changed = true;
+    }
+    if (changed && classDeps.has(declaration)) classDeps.set(declaration, resolved);
+  }
+}
+
 function validateDepsAgainstKnownTokens(): void {
   for (const [declaration, deps] of classDeps) {
     for (let index = 0; index < deps.length; index += 1) {
@@ -910,6 +954,11 @@ function dependencyFromType(type: ts.Type): CollectedDependency | undefined {
   const name = declaration?.name?.text ?? type.aliasSymbol?.name ?? symbol?.name;
   if (!name || BUILTIN_DEPENDENCY_NAMES.has(name)) return undefined;
   const arguments_ = type.flags & ts.TypeFlags.Object ? checker.getTypeArguments(type as ts.TypeReference) : [];
+  if (name === "ConfigView") {
+    const configType = arguments_[0];
+    const configTypeName = configType && (configType.aliasSymbol?.name ?? configType.getSymbol()?.name);
+    return configTypeName ? { name: `ConfigView<${configTypeName}>` } : undefined;
+  }
   if (name === "Lazy" || name === "IRepository") {
     const inner = arguments_[0] && dependencyFromType(arguments_[0]);
     if (!inner) return undefined;
@@ -950,6 +999,15 @@ function readConstructorTypeNames(node: ts.ClassDeclaration): ConstructorDepende
       continue;
     }
 
+    if (refName === "ConfigView" && paramType && ts.isTypeReferenceNode(paramType)) {
+      const configType = paramType.typeArguments?.[0];
+      const configTypeName = configType ? getDependencyTypeName(configType) : undefined;
+      if (configTypeName) {
+        deps.push({ name: `ConfigView<${configTypeName}>` });
+        continue;
+      }
+    }
+
     if (refName === "IRepository" && paramType && ts.isTypeReferenceNode(paramType)) {
       const entityType = paramType.typeArguments?.[0];
       const entityName = entityType ? getDependencyTypeName(entityType) : undefined;

package/library/validation/MessageRegistry.ts

@@ -6,11 +6,16 @@ export type MessageParams = Readonly<Record<string, unknown>>;
 
 /** Built-in default messages (English). */
 const BUILT_IN: Readonly<Record<string, string>> = {
+  validationFailed: "Validation failed",
+  invalid: 'Field "{property}" is invalid ({code})',
   required: 'Field "{property}" is required',
   notEmpty: 'Field "{property}" must not be empty',
   minLength: 'Field "{property}" must be at least {min} characters long',
   maxLength: 'Field "{property}" must be at most {max} characters long',
   length: 'Field "{property}" must be {min} to {max} characters long',
+  minItems: 'Field "{property}" must contain at least {min} items',
+  maxItems: 'Field "{property}" must contain at most {max} items',
+  itemCount: 'Field "{property}" must contain {min} to {max} items',
   contains: 'Field "{property}" must contain "{contains}"',
   notContains: 'Field "{property}" must not contain "{contains}"',
   pattern: 'Field "{property}" does not match the format {pattern}',
@@ -41,11 +46,16 @@ const BUILT_IN: Readonly<Record<string, string>> = {
  * `MessageRegistry.setDefaults(RU_VALIDATION_MESSAGES)`.
  */
 export const RU_VALIDATION_MESSAGES: Readonly<Record<string, string>> = Object.freeze({
+  validationFailed: "Проверка данных не пройдена",
+  invalid: 'Поле "{property}" не прошло проверку ({code})',
   required: 'Поле "{property}" обязательно для заполнения',
   notEmpty: 'Поле "{property}" не должно быть пустым',
   minLength: 'Поле "{property}" должно содержать не менее {min} символов',
   maxLength: 'Поле "{property}" должно содержать не более {max} символов',
   length: 'Поле "{property}" должно содержать от {min} до {max} символов',
+  minItems: 'Поле "{property}" должно содержать не менее {min} элементов',
+  maxItems: 'Поле "{property}" должно содержать не более {max} элементов',
+  itemCount: 'Поле "{property}" должно содержать от {min} до {max} элементов',
   contains: 'Поле "{property}" должно содержать "{contains}"',
   notContains: 'Поле "{property}" не должно содержать "{contains}"',
   pattern: 'Поле "{property}" не соответствует формату {pattern}',
@@ -118,7 +128,7 @@ export class MessageRegistry {
       localMessage ??
       (Object.prototype.hasOwnProperty.call(MessageRegistry.defaults, code)
         ? MessageRegistry.defaults[code]!
-        : 'Поле "{property}" не прошло проверку ({code})');
+        : MessageRegistry.defaults.invalid ?? BUILT_IN.invalid!);
     return MessageRegistry.interpolate(template, params);
   }
 

package/library/validation/RuleEngine.ts

@@ -115,11 +115,14 @@ export class RuleEngine {
 
     // 3. String rules: first one type check, then the rules themselves.
     if (rule.needsString) {
-      if (typeof value !== "string") {
+      if (Array.isArray(value) && RuleEngine.onlyLengthRules(o)) {
+        RuleEngine.applyArrayLengthRules(o, value, path, errors);
+      } else if (typeof value !== "string") {
         RuleEngine.failType(errors, path, value, o, "string");
         return;
+      } else {
+        RuleEngine.applyStringRules(rule, value, path, errors);
       }
-      RuleEngine.applyStringRules(rule, value, path, errors);
     }
 
     // 4. Number rules.
@@ -167,6 +170,27 @@ export class RuleEngine {
     }
   }
 
+  /** notEmpty/minLength/maxLength/length also apply to arrays; any other string rule needs a string. */
+  private static onlyLengthRules(o: ValidatorOptions): boolean {
+    return o.type === undefined && o.contains === undefined && o.notContains === undefined && o.pattern === undefined
+      && o.email !== true && o.url !== true && o.uuid !== true && o.json !== true && o.phone !== true;
+  }
+
+  private static applyArrayLengthRules(o: ValidatorOptions, value: readonly unknown[], path: string, errors: ValidationError[]): void {
+    if (o.notEmpty === true && value.length === 0) {
+      RuleEngine.fail(errors, ValidationCodes.notEmpty, path, value, o, undefined);
+    }
+    if (o.minLength !== undefined && value.length < o.minLength) {
+      RuleEngine.fail(errors, ValidationCodes.minItems, path, value, o, { min: o.minLength });
+    }
+    if (o.maxLength !== undefined && value.length > o.maxLength) {
+      RuleEngine.fail(errors, ValidationCodes.maxItems, path, value, o, { max: o.maxLength });
+    }
+    if (o.length !== undefined && (value.length < o.length[0] || value.length > o.length[1])) {
+      RuleEngine.fail(errors, ValidationCodes.itemCount, path, value, o, { min: o.length[0], max: o.length[1] });
+    }
+  }
+
   private static applyStringRules(rule: CompiledRule, value: string, path: string, errors: ValidationError[]): void {
     const o = rule.options;
     if (o.notEmpty === true && value.length === 0) {
@@ -361,7 +385,7 @@ export class RuleEngine {
   }
 
   private static failType(errors: ValidationError[], path: string, value: unknown, o: ValidatorOptions, expected: string): void {
-    const actual = typeof value === "number" && Number.isNaN(value) ? "NaN" : value === null ? "null" : typeof value;
+    const actual = typeof value === "number" && Number.isNaN(value) ? "NaN" : value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
     RuleEngine.fail(errors, ValidationCodes.type, path, value, o, { expected, actual });
   }
 

package/library/validation/SPEC.md

@@ -114,6 +114,11 @@ Any of these rules requires the value to be a string (otherwise one `type` error
 `maxLength` and the upper bound of `length` limit the input of the later content checks
 **of the same decorator**: `contains`, `notContains`, `pattern`, `email`, `url`, `uuid`,
 `json`, `phone`. When exceeded, the length errors stay and the listed checks do not run.
+
+On an **array** value, `notEmpty`, `minLength`, `maxLength` and `length` count its
+items (codes `notEmpty`, `minItems`, `maxItems`, `itemCount`), as long as the decorator
+has no other string rule and no `type` hint. Any other string rule on an array is a
+`type` error (`got: array`).
 The lower length bound, the other fields/decorators and `custom` keep their behavior.
 For an untrusted `pattern`, set the upper bound in the same decorator; a separate
 limiting decorator does not change the neighboring rules.
@@ -480,7 +485,8 @@ from your own `ValidationError`.
 | Code | When |
 |---|---|
 | `required` | the value is `undefined`/`null` with `required: true` |
-| `notEmpty`, `minLength`, `maxLength`, `length` | the string length |
+| `notEmpty`, `minLength`, `maxLength`, `length` | the string length (`notEmpty` also an empty array) |
+| `minItems`, `maxItems`, `itemCount` | the array item count (`minLength`, `maxLength`, `length` on an array) |
 | `contains`, `notContains`, `pattern` | the string content |
 | `email`, `url`, `uuid`, `json`, `phone`, `date` | the format |
 | `type` | the value has the wrong type (including `NaN` for number rules) |

package/library/validation/modelValidatorAdapter.ts

@@ -1,5 +1,7 @@
 import { Validator } from "./Validator";
 import { rulesOf } from "./metadata";
+import { MessageRegistry } from "./MessageRegistry";
+import type { ValidationResult } from "./ValidationResult";
 
 interface AdapterValidationIssue {
   readonly property: string;
@@ -27,11 +29,31 @@ interface AdapterValidationIssue {
  * kernel unaware of the concrete validation engine (dependency inversion).
  */
 export const modelValidatorAdapter = {
-  validate(instance: object): {
-    readonly isValid: boolean;
-    readonly errors: readonly { readonly property: string; readonly message: string; readonly code?: string }[];
-  } {
-    const result = Validator.validate(instance);
+  validate(instance: object): AdapterValidationResult {
+    return toAdapterResult(instance, Validator.validate(instance));
+  },
+
+  /** Runs async `custom` rules too; HTTP request binding uses this. */
+  async validateAsync(instance: object): Promise<AdapterValidationResult> {
+    return toAdapterResult(instance, await Validator.validateAsync(instance));
+  },
+
+  /** A JSON value of the wrong type, in the current `MessageRegistry` language. */
+  typeMismatchMessage(property: string, expected: string, actual: string): string {
+    return MessageRegistry.format("type", undefined, { property, expected, actual });
+  },
+
+  failureTitle(): string {
+    return MessageRegistry.format("validationFailed", undefined, {});
+  },
+};
+
+interface AdapterValidationResult {
+  readonly isValid: boolean;
+  readonly errors: readonly AdapterValidationIssue[];
+}
+
+function toAdapterResult(instance: object, result: ValidationResult): AdapterValidationResult {
     const nestedInstanceErrors = validateExplicitNestedInstances(instance);
     const errors: AdapterValidationIssue[] = result.errors.map((error) => ({
       property: error.property,
@@ -43,8 +65,7 @@ export const modelValidatorAdapter = {
       isValid: errors.length === 0,
       errors,
     };
-  },
-};
+}
 
 /**
  * `nested: true` must never silently validate a plain object with no class

package/library/validation/types/ValidationCode.ts

@@ -8,7 +8,7 @@
 export const ValidationCodes = {
   /** The value is missing (`undefined` or `null`) but the field is required. */
   required: "required",
-  /** The string is empty but the rule requires a non-empty one. */
+  /** The string or array is empty but the rule requires a non-empty one. */
   notEmpty: "notEmpty",
   /** The string is shorter than the minimum. */
   minLength: "minLength",
@@ -16,6 +16,12 @@ export const ValidationCodes = {
   maxLength: "maxLength",
   /** The string length is outside `length: [min, max]`. */
   length: "length",
+  /** The array has fewer items than `minLength`. */
+  minItems: "minItems",
+  /** The array has more items than `maxLength`. */
+  maxItems: "maxItems",
+  /** The array item count is outside `length: [min, max]`. */
+  itemCount: "itemCount",
   /** The string does not contain the required substring. */
   contains: "contains",
   /** The string contains a forbidden substring. */

package/library/validation/types/ValidatorOptions.ts

@@ -88,13 +88,13 @@ export interface ValidatorOptions {
 
   // ── Strings ──────────────────────────────────────────────────────────────
 
-  /** The string must not be empty (`""`). */
+  /** The string (`""`) or array (`[]`) must not be empty. */
   notEmpty?: boolean;
-  /** Minimum string length (inclusive). */
+  /** Minimum string length or array item count (inclusive). */
   minLength?: number;
-  /** Maximum string length (inclusive); exceeding it skips this decorator's content checks. */
+  /** Maximum string length or array item count (inclusive); for a string, exceeding it skips this decorator's content checks. */
   maxLength?: number;
-  /** String length range `[min, max]` (inclusive); exceeding max skips this decorator's content checks. */
+  /** String length or array item count range `[min, max]` (inclusive); for a string, exceeding max skips this decorator's content checks. */
   length?: readonly [number, number];
   /** The string must contain the substring. */
   contains?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bazis",
-  "version": "0.96.4",
+  "version": "0.96.6",
   "description": "Modular backend framework for Bun in TypeScript: DI wired by codegen, HTTP, a PostgreSQL ORM, JWT, WebSocket, agents and a CLI.",
   "license": "MIT",
   "author": "Alexander Alenin",