kanun 1.0.4 → 1.0.6

package/dist/index.cjs

@@ -27,6 +27,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 
 //#endregion
 let node_async_hooks = require("node:async_hooks");
+let node_url = require("node:url");
+let node_net = require("node:net");
 let dayjs_plugin_customParseFormat_js = require("dayjs/plugin/customParseFormat.js");
 dayjs_plugin_customParseFormat_js = __toESM(dayjs_plugin_customParseFormat_js);
 let dayjs = require("dayjs");
@@ -103,10 +105,12 @@ var en_default = {
 	declined: "The :attribute must be declined.",
 	declined_if: "The :attribute must be declined when :other is :value.",
 	different: "The :attribute and :other must be different.",
+	distinct: "The :attribute field has a duplicate value.",
 	digits: "The :attribute must be :digits digits.",
 	digits_between: "The :attribute must be between :min and :max digits.",
 	email: "The :attribute must be a valid email address.",
 	ends_with: "The :attribute must end with one of the following: :values.",
+	filled: "The :attribute field must have a value.",
 	exists: "The selected :attribute is invalid.",
 	gt: {
 		number: "The :attribute must be greater than :value.",
@@ -124,6 +128,9 @@ var en_default = {
 	in: "The :attribute must be one of the following :values.",
 	includes: "The :attribute must include one of the following values: :values.",
 	integer: "The :attribute must be an integer.",
+	ip: "The :attribute must be a valid IP address.",
+	ipv4: "The :attribute must be a valid IPv4 address.",
+	ipv6: "The :attribute must be a valid IPv6 address.",
 	json: "The :attribute must be a valid JSON string.",
 	lt: {
 		number: "The :attribute must be less than :value.",
@@ -149,6 +156,7 @@ var en_default = {
 		array: "The :attribute must have at least :min items.",
 		object: "The :attribute must have at least :min items."
 	},
+	mac_address: "The :attribute must be a valid MAC address.",
 	not_in: "The selected :attribute is invalid.",
 	not_regex: "The :attribute format is invalid.",
 	not_includes: "The :attribute must not include any of the following values: :values.",
@@ -167,6 +175,10 @@ var en_default = {
 		upper_cases: "The :attribute must contain at least :amount uppercase letters."
 	},
 	present: "The :attribute field must be present.",
+	presentsame: "The :attribute field must be present.",
+	prohibited: "The :attribute field is prohibited.",
+	prohibited_unless: "The :attribute field is prohibited unless :other is in :values.",
+	prohibits: "The :attribute field prohibits :values from being present.",
 	regex: "The :attribute format is invalid.",
 	required: "The :attribute field is required.",
 	required_if: "The :attribute field is required when :other is :value.",
@@ -184,8 +196,10 @@ var en_default = {
 		object: "The :attribute must contain :size items."
 	},
 	string: "The :attribute must be a string.",
+	timezone: "The :attribute must be a valid timezone.",
 	unique: "The :attribute has already been taken.",
-	url: "The :attribute must have a valid URL format."
+	url: "The :attribute must have a valid URL format.",
+	multiple_of: "The :attribute must be a multiple of :value."
 };
 
 //#endregion
@@ -654,6 +668,12 @@ const replaceAttributes = {
 		};
 		return message.replace(/:other|:value/gi, (matched) => values[matched]);
 	},
+	replaceProhibitedUnless: function(payload) {
+		return this.replaceRequiredUnless(payload);
+	},
+	replaceProhibits: function({ message, parameters, getDisplayableAttribute }) {
+		return message.replace(":values", parameters.map((attribute) => getDisplayableAttribute(attribute)).join(", "));
+	},
 	replaceRequiredUnless: function({ message, parameters, getDisplayableAttribute }) {
 		const [other] = parameters;
 		const values = {
@@ -668,40 +688,14 @@ const replaceAttributes = {
 	replaceSize: function({ message, parameters }) {
 		return message.replace(":size", parameters[0]);
 	},
+	replaceMultipleOf: function({ message, parameters }) {
+		return message.replace(":value", parameters[0]);
+	},
 	replaceUnique: function({ message, parameters, data }) {
 		return message.replace(":value", data[parameters[1]]);
 	}
 };
 
-//#endregion
-//#region src/Rules/closureValidationRule.ts
-var ClosureValidationRule = class extends IRuleContract {
-	/**
-	* The callback that validates the attribute
-	*/
-	callback;
-	/**
-	* Indicates if the validation callback failed.
-	*/
-	failed = false;
-	constructor(callback) {
-		super();
-		this.callback = callback;
-	}
-	/**
-	* Determine if the validation rule passes.
-	*/
-	passes(value, attribute) {
-		this.failed = false;
-		const result = this.callback(value, (message) => {
-			this.failed = true;
-			this.message = message;
-		}, attribute);
-		if (result instanceof Promise) return result.then(() => !this.failed);
-		return !this.failed;
-	}
-};
-
 //#endregion
 //#region src/validators/validationData.ts
 const validationData = {
@@ -742,6 +736,35 @@ const validationData = {
 	}
 };
 
+//#endregion
+//#region src/Rules/closureValidationRule.ts
+var ClosureValidationRule = class extends IRuleContract {
+	/**
+	* The callback that validates the attribute
+	*/
+	callback;
+	/**
+	* Indicates if the validation callback failed.
+	*/
+	failed = false;
+	constructor(callback) {
+		super();
+		this.callback = callback;
+	}
+	/**
+	* Determine if the validation rule passes.
+	*/
+	passes(value, attribute) {
+		this.failed = false;
+		const result = this.callback(value, (message) => {
+			this.failed = true;
+			this.message = message;
+		}, attribute);
+		if (result instanceof Promise) return result.then(() => !this.failed);
+		return !this.failed;
+	}
+};
+
 //#endregion
 //#region src/validators/validationRuleParser.ts
 const validationRuleParser = {
@@ -989,7 +1012,7 @@ var validateAttributes = class {
 	*/
 	validateDeclinedIf(value, parameters) {
 		this.requireParameterCount(2, parameters, "declined_if");
-		const other = deepFind(this.data, parameters[0]);
+		const other = this.getAttributeValue(parameters[0]);
 		if (!other) return true;
 		if (parameters.slice(1).indexOf(other) !== -1) return this.validateDeclined(value);
 		return true;
@@ -999,7 +1022,7 @@ var validateAttributes = class {
 	*/
 	validateDifferent(value, parameters) {
 		this.requireParameterCount(1, parameters, "different");
-		const other = deepFind(this.data, parameters[0]);
+		const other = this.getAttributeValue(parameters[0]);
 		if (!sameType(value, other)) return true;
 		if (value !== null && typeof value === "object") return !deepEqual(value, other);
 		return value !== other;
@@ -1034,13 +1057,23 @@ var validateAttributes = class {
 	/**
 	* Validate that an attribute is a valid email address.
 	*/
-	validateEmail(value) {
+	validateEmail(value, parameters = []) {
 		if (typeof value !== "string") return false;
-		/**
-		* Max allowed length for a top-level-domain is 24 characters.
-		* reference to list of top-level-domains: https://data.iana.org/TLD/tlds-alpha-by-domain.txt
-		*/
-		return value.toLowerCase().match(/^\w+([.-]?\w+)*@\w+([.-]?\w+)*(\.\w{2,24})+$/) !== null;
+		const normalized = parameters.map((parameter) => parameter.replace(/[{}]/g, "").toLowerCase());
+		if (normalized.length === 0 || normalized.includes("filter") || normalized.includes("rfc")) {
+			if (!this.isEmailByFilter(value)) return false;
+		}
+		if (normalized.includes("strict") && !this.isStrictEmail(value)) return false;
+		if (normalized.includes("dns") && !this.hasResolvableEmailDomain(value)) return false;
+		if (normalized.includes("spoof") && !this.isSpoofSafeEmail(value)) return false;
+		return true;
+	}
+	/**
+	* Validate that a present attribute is not empty.
+	*/
+	validateFilled(value) {
+		if (typeof value === "undefined") return true;
+		return this.validateRequired(value);
 	}
 	/**
 	* Validate the attribute ends with a given substring.
@@ -1100,7 +1133,7 @@ var validateAttributes = class {
 	*/
 	validateRequiredIf(value, parameters) {
 		this.requireParameterCount(2, parameters, "required_if");
-		const other = deepFind(this.data, parameters[0]);
+		const other = this.getAttributeValue(parameters[0]);
 		if (typeof other === "undefined") return true;
 		if (this.parseDependentRuleParameters(other, parameters).indexOf(other) !== -1) return this.validateRequired(value);
 		return true;
@@ -1110,7 +1143,7 @@ var validateAttributes = class {
 	*/
 	validateRequiredUnless(value, parameters) {
 		this.requireParameterCount(2, parameters, "required_unless");
-		let other = deepFind(this.data, parameters[0]);
+		let other = this.getAttributeValue(parameters[0]);
 		other = typeof other === "undefined" ? null : other;
 		if (this.parseDependentRuleParameters(other, parameters).indexOf(other) === -1) return this.validateRequired(value);
 		return true;
@@ -1147,14 +1180,14 @@ var validateAttributes = class {
 	* Determine if any of the given attributes fail the required test.
 	*/
 	anyFailingRequired(attributes) {
-		for (let i = 0; i < attributes.length; i++) if (!this.validateRequired(deepFind(this.data, attributes[i]))) return true;
+		for (let i = 0; i < attributes.length; i++) if (!this.validateRequired(this.getAttributeValue(attributes[i]))) return true;
 		return false;
 	}
 	/**
 	* Determine if all of the given attributes fail the required test.
 	*/
 	allFailingRequired(attributes) {
-		for (let i = 0; i < attributes.length; i++) if (this.validateRequired(deepFind(this.data, attributes[i]))) return false;
+		for (let i = 0; i < attributes.length; i++) if (this.validateRequired(this.getAttributeValue(attributes[i]))) return false;
 		return true;
 	}
 	/**
@@ -1196,7 +1229,13 @@ var validateAttributes = class {
 	* Validate that an attribute exists even if not filled.
 	*/
 	validatePresent(value, parameters, attribute) {
-		return typeof deepFind(this.data, attribute) !== "undefined";
+		return typeof this.getAttributeValue(attribute) !== "undefined";
+	}
+	/**
+	* Alias of the present rule kept for compatibility with requested rule naming.
+	*/
+	validatePresentsame(value, parameters, attribute) {
+		return this.validatePresent(value, parameters, attribute);
 	}
 	/**
 	* Validate that an attribute is an integer.
@@ -1218,12 +1257,103 @@ var validateAttributes = class {
 		return true;
 	}
 	/**
+	* Validate that an attribute is prohibited.
+	*/
+	validateProhibited(value) {
+		return !this.validateRequired(value);
+	}
+	/**
+	* Validate that an attribute is prohibited unless another field matches one of the given values.
+	*/
+	validateProhibitedUnless(value, parameters) {
+		this.requireParameterCount(2, parameters, "prohibited_unless");
+		let other = this.getAttributeValue(parameters[0]);
+		other = typeof other === "undefined" ? null : other;
+		if (this.parseDependentRuleParameters(other, parameters).indexOf(other) !== -1) return true;
+		return this.validateProhibited(value);
+	}
+	/**
+	* Validate that present attributes prohibit other attributes from being present.
+	*/
+	validateProhibits(value, parameters) {
+		this.requireParameterCount(1, parameters, "prohibits");
+		if (!this.validateRequired(value)) return true;
+		return parameters.every((attribute) => this.validateProhibited(this.getAttributeValue(attribute)));
+	}
+	/**
+	* Validate that an attribute is a valid IP address.
+	*/
+	validateIp(value) {
+		return typeof value === "string" && (0, node_net.isIP)(value) !== 0;
+	}
+	/**
+	* Validate that an attribute is a valid IPv4 address.
+	*/
+	validateIpv4(value) {
+		return typeof value === "string" && (0, node_net.isIP)(value) === 4;
+	}
+	/**
+	* Validate that an attribute is a valid IPv6 address.
+	*/
+	validateIpv6(value) {
+		return typeof value === "string" && (0, node_net.isIP)(value) === 6;
+	}
+	/**
+	* Validate that an attribute is a valid MAC address.
+	*/
+	validateMacAddress(value) {
+		return typeof value === "string" && /^([0-9a-f]{2}[:-]){5}[0-9a-f]{2}$/i.test(value);
+	}
+	/**
+	* Validate that an attribute is a valid timezone identifier.
+	*/
+	validateTimezone(value) {
+		if (typeof value !== "string" || value.length === 0) return false;
+		if (typeof Intl.supportedValuesOf === "function" && Intl.supportedValuesOf("timeZone").includes(value)) return true;
+		try {
+			new Intl.DateTimeFormat("en-US", { timeZone: value });
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/**
+	* Validate that an attribute is a multiple of the given value.
+	*/
+	validateMultipleOf(value, parameters) {
+		this.requireParameterCount(1, parameters, "multiple_of");
+		const numericValue = Number(value);
+		const divisor = Number(parameters[0]);
+		if (!Number.isFinite(numericValue) || !Number.isFinite(divisor) || divisor === 0) return false;
+		const scale = 10 ** Math.max(this.getDecimalPlaces(value), this.getDecimalPlaces(parameters[0]));
+		const scaledValue = Math.round(numericValue * scale);
+		const scaledDivisor = Math.round(divisor * scale);
+		return scaledDivisor !== 0 && scaledValue % scaledDivisor === 0;
+	}
+	/**
+	* Validate that values matched by a wildcard attribute are distinct.
+	*/
+	validateDistinct(value, parameters, attribute, primaryAttribute = attribute) {
+		if (Array.isArray(value)) return new Set(value.map((entry) => this.normalizeDistinctValue(entry, parameters))).size === value.length;
+		if (primaryAttribute.indexOf("*") === -1) return true;
+		const strict = parameters.includes("strict");
+		const values = this.getDistinctValues(primaryAttribute);
+		const current = this.normalizeDistinctValue(value, parameters);
+		let matches = 0;
+		for (const candidate of values) {
+			const normalized = this.normalizeDistinctValue(candidate, parameters);
+			if (strict ? normalized === current : normalized == current) matches += 1;
+			if (matches > 1) return false;
+		}
+		return true;
+	}
+	/**
 	* Validate that an attribute is greater than another attribute.
 	*/
 	validateGt(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "gt");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) > compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) > getSize(compartedToValue);
@@ -1234,7 +1364,7 @@ var validateAttributes = class {
 	validateGte(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "gte");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) >= compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) >= getSize(compartedToValue);
@@ -1245,7 +1375,7 @@ var validateAttributes = class {
 	validateLt(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "lt");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) < compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) < getSize(compartedToValue);
@@ -1256,7 +1386,7 @@ var validateAttributes = class {
 	validateLte(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "lte");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) <= compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) <= getSize(compartedToValue);
@@ -1314,7 +1444,7 @@ var validateAttributes = class {
 	compareDates(value, parameter, operator, rule) {
 		value = toDate(value);
 		if (!value) throw `Validation rule ${rule} requires the field under valation to be a date.`;
-		const compartedToValue = toDate(deepFind(this.data, parameter) || parameter);
+		const compartedToValue = toDate(this.getAttributeValue(parameter) || parameter);
 		if (!compartedToValue) throw `Validation rule ${rule} requires the parameter to be a date.`;
 		return compare(value.getTime(), compartedToValue.getTime(), operator);
 	}
@@ -1326,6 +1456,10 @@ var validateAttributes = class {
 	}
 	/**
 	* Prepare the values for validation
+	*
+	* @param other         The value to compare against
+	* @param parameters    The parameters for the validation rule
+	* @returns             The prepared values for validation
 	*/
 	parseDependentRuleParameters(other, parameters) {
 		let values = parameters.slice(1);
@@ -1334,6 +1468,55 @@ var validateAttributes = class {
 		if (typeof other === "boolean") values = convertValuesToBoolean(values);
 		return values;
 	}
+	getAttributeValue(attribute) {
+		const dataValue = deepFind(this.data, attribute);
+		if (typeof dataValue !== "undefined") return dataValue;
+		return deepFind(this.context.requestFiles ?? {}, attribute);
+	}
+	getDistinctValues(primaryAttribute) {
+		const gathered = validationData.initializeAndGatherData(primaryAttribute, this.data);
+		const pattern = new RegExp(`^${primaryAttribute.replace(/\./g, "\\.").replace(/\*/g, "[^.]+")}$`);
+		return Object.keys(gathered).filter((attribute) => pattern.test(attribute)).map((attribute) => deepFind(this.data, attribute)).filter((value) => typeof value !== "undefined");
+	}
+	normalizeDistinctValue(value, parameters) {
+		if (parameters.includes("ignore_case") && typeof value === "string") return value.toLowerCase();
+		return value;
+	}
+	isEmailByFilter(value) {
+		return value.toLowerCase().match(/^[^\s@]+@[^\s@]+\.[^\s@]{2,24}$/) !== null;
+	}
+	isStrictEmail(value) {
+		if (!this.isEmailByFilter(value)) return false;
+		const [localPart, domain] = value.split("@");
+		if (!localPart || !domain || localPart.length > 64 || domain.length > 255) return false;
+		if (localPart.startsWith(".") || localPart.endsWith(".") || localPart.includes("..")) return false;
+		return domain.split(".").every((label) => {
+			return label.length > 0 && label.length <= 63 && /^[a-z0-9-]+$/i.test(label) && !label.startsWith("-") && !label.endsWith("-");
+		});
+	}
+	hasResolvableEmailDomain(value) {
+		if (!this.isStrictEmail(value)) return false;
+		const domain = value.split("@")[1];
+		const asciiDomain = (0, node_url.domainToASCII)(domain);
+		return asciiDomain.length > 0 && asciiDomain.includes(".");
+	}
+	isSpoofSafeEmail(value) {
+		if (!this.isEmailByFilter(value)) return false;
+		const [localPart, domain] = value.split("@");
+		return (0, node_url.domainToASCII)(domain).length > 0 && !this.hasAsciiControlCharacters(value) && localPart.normalize("NFKC") === localPart && domain.normalize("NFKC") === domain;
+	}
+	hasAsciiControlCharacters(value) {
+		for (let index = 0; index < value.length; index++) {
+			const codePoint = value.charCodeAt(index);
+			if (codePoint <= 31 || codePoint === 127) return true;
+		}
+		return false;
+	}
+	getDecimalPlaces(value) {
+		const stringValue = String(value).toLowerCase();
+		if (!stringValue.includes(".")) return 0;
+		return stringValue.split(".")[1]?.length ?? 0;
+	}
 };
 
 //#endregion
@@ -1402,6 +1585,7 @@ const implicitRues = [
 	"declined_if",
 	"filled",
 	"present",
+	"presentsame",
 	"required",
 	"required_if",
 	"required_unless",
@@ -1883,11 +2067,12 @@ var Password$1 = class Password$1 extends IRuleContract {
 	* Determine if the validation rule passes.
 	*/
 	passes(value, attribute) {
-		const validator = new BaseValidator(this.data, { [attribute]: [
+		const passwordRules = [
 			"string",
 			`min:${this.minLength}`,
 			...this.customRules
-		] }, this.validator.customMessages, this.validator.customAttributes).setLang(this.lang);
+		];
+		const validator = new BaseValidator(this.data, { [attribute]: passwordRules }, this.validator.customMessages, this.validator.customAttributes).setLang(this.lang);
 		if (!validator.validate()) {
 			const errors = validator.errors().addErrorTypes().get(attribute);
 			for (const key in errors) this.validator.errors().add(attribute, errors[key]);
@@ -2030,6 +2215,7 @@ var replaceAttributePayload = class {
 //#endregion
 //#region src/BaseValidator.ts
 var BaseValidator = class BaseValidator {
+	excludedAttributes = /* @__PURE__ */ new Set();
 	/**
 	* The lang used to return error messages
 	*/
@@ -2114,6 +2300,7 @@ var BaseValidator = class BaseValidator {
 	*/
 	withContext(context = {}) {
 		this.context = context;
+		this.addRules(this.initalRules);
 		return this;
 	}
 	/**
@@ -2174,6 +2361,9 @@ var BaseValidator = class BaseValidator {
 	errors() {
 		return this.messages;
 	}
+	getExcludedAttributes() {
+		return [...this.excludedAttributes];
+	}
 	/**
 	* Clear the error messages for the given keys. 
 	* If no keys are provided, all error messages will be cleared.
@@ -2290,6 +2480,7 @@ var BaseValidator = class BaseValidator {
 	runAllValidations() {
 		this.messages = new ErrorBag();
 		this.validateAttributes = new validateAttributes(this.data, this.rules, this.getContext());
+		this.excludedAttributes.clear();
 		for (const property in this.rules) if (this.runValidation(property) === false) break;
 	}
 	/**
@@ -2298,6 +2489,7 @@ var BaseValidator = class BaseValidator {
 	async runAllValidationsAsync() {
 		this.messages = new ErrorBag();
 		this.validateAttributes = new validateAttributes(this.data, this.rules, this.getContext());
+		this.excludedAttributes.clear();
 		for (const property in this.rules) if (await this.runValidationAsync(property) === false) break;
 	}
 	/**
@@ -2320,33 +2512,47 @@ var BaseValidator = class BaseValidator {
 	* Run validation rules for the specified property and stop validation if needed
 	*/
 	runValidation(property) {
-		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) for (let i = 0; i < this.rules[property].length; i++) {
-			this.validateAttribute(property, this.rules[property][i]);
-			if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
-			if (this.shouldStopValidating(property)) break;
+		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) {
+			if (validationRuleParser.hasRule(property, ["exclude"], this.rules)) {
+				this.excludedAttributes.add(property);
+				return;
+			}
+			for (let i = 0; i < this.rules[property].length; i++) {
+				this.validateAttribute(property, this.rules[property][i]);
+				if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
+				if (this.shouldStopValidating(property)) break;
+			}
 		}
 	}
 	/**
 	* Run validation rules for the specified property asynchronously and stop validation if needed
 	*/
 	async runValidationAsync(property) {
-		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) for (let i = 0; i < this.rules[property].length; i++) {
-			await this.validateAttribute(property, this.rules[property][i]);
-			if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
-			if (this.shouldStopValidating(property)) break;
+		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) {
+			if (validationRuleParser.hasRule(property, ["exclude"], this.rules)) {
+				this.excludedAttributes.add(property);
+				return;
+			}
+			for (let i = 0; i < this.rules[property].length; i++) {
+				await this.validateAttribute(property, this.rules[property][i]);
+				if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
+				if (this.shouldStopValidating(property)) break;
+			}
 		}
 	}
 	/**
 	* Check if we should stop further validations on a given attribute.
 	*/
 	shouldStopValidating(attribute) {
+		if (this.excludedAttributes.has(attribute)) return true;
 		return this.messages.has(attribute) && validationRuleParser.hasRule(attribute, ["bail"], this.rules);
 	}
 	/**
 	* Parse the given rules add assign them to the current rules
 	*/
 	addRules(rules) {
-		const response = validationRuleParser.explodeRules(dotify(rules, true), this.data);
+		const availableData = mergeDeep(this.getContext().requestFiles ?? {}, this.data);
+		const response = validationRuleParser.explodeRules(dotify(rules, true), availableData);
 		this.rules = response.rules;
 		this.implicitAttributes = response.implicitAttributes;
 	}
@@ -2364,7 +2570,7 @@ var BaseValidator = class BaseValidator {
 		const method = `validate${buildValidationMethodName(rule)}`;
 		if (rule !== "" && typeof this.validateAttributes[method] === "undefined") throw `Rule ${rule} is not valid`;
 		if (!validatable) return;
-		const validation = this.validateAttributes[method](value, parameters, attribute);
+		const validation = this.validateAttributes[method](value, parameters, attribute, this.getPrimaryAttribute(attribute));
 		if (validation instanceof Promise) return validation.then((result) => {
 			if (!result) this.addFailure(attribute, rule, value, parameters);
 		});
@@ -3129,8 +3335,10 @@ var Validator = class Validator {
 	*/
 	validatedData() {
 		const validKeys = Object.keys(this.rules);
+		const excluded = new Set(this.instance?.getExcludedAttributes() ?? []);
 		const clean = {};
 		for (const key of validKeys) {
+			if (excluded.has(key)) continue;
 			const value = deepFind(this.data, key);
 			const resolvedValue = typeof value !== "undefined" ? value : deepFind(this.getContext().requestFiles ?? {}, key);
 			if (typeof resolvedValue !== "undefined") deepSet(clean, key, resolvedValue);
@@ -3141,7 +3349,8 @@ var Validator = class Validator {
 	* Return all validated input.
 	*/
 	validated() {
-		return Object.fromEntries(Object.entries(this.data).filter(([key]) => key in this.rules));
+		const excluded = new Set(this.instance?.getExcludedAttributes() ?? []);
+		return Object.fromEntries(Object.entries(this.data).filter(([key]) => key in this.rules && !excluded.has(key)));
 	}
 	/**
 	* Return a portion of validated input

package/dist/index.d.ts

@@ -127,8 +127,8 @@ type LiteralUnion<T extends U, U = string> = T | (U & Record<never, never>);
 type PluginValidationRuleNameMap = ValidationRuleAutocompleteMap & CustomValidationRuleNameMap;
 type CustomParamableValidationRuleName = Extract<{ [K in keyof PluginValidationRuleNameMap]: PluginValidationRuleNameMap[K] extends 'paramable' ? K : never }[keyof PluginValidationRuleNameMap], string>;
 type CustomPlainRuleName = Extract<{ [K in keyof PluginValidationRuleNameMap]: PluginValidationRuleNameMap[K] extends 'plain' ? K : never }[keyof PluginValidationRuleNameMap], string>;
-type ParamableValidationRuleName = 'accepted_if' | 'after' | 'after_or_equal' | 'before' | 'before_or_equal' | 'between' | 'date_equals' | 'datetime' | 'declined_if' | 'digits_between' | 'different' | 'exists' | 'ends_with' | 'gt' | 'gte' | 'in' | 'includes' | 'lt' | 'lte' | 'max' | 'min' | 'not_in' | 'not_includes' | 'required_if' | 'required_unless' | 'required_with' | 'required_with_all' | 'required_without' | 'required_without_all' | 'same' | 'size' | 'starts_with' | 'unique' | CustomParamableValidationRuleName;
-type PlainRuleName = 'accepted' | 'alpha' | 'alpha_dash' | 'alpha_num' | 'array' | 'array_unique' | 'bail' | 'boolean' | 'confirmed' | 'date' | 'declined' | 'digits' | 'email' | 'integer' | 'json' | 'not_regex' | 'nullable' | 'numeric' | 'object' | 'present' | 'regex' | 'required' | 'sometimes' | 'string' | 'url' | 'hex' | 'uuid' | CustomPlainRuleName;
+type ParamableValidationRuleName = 'accepted_if' | 'after' | 'after_or_equal' | 'before' | 'before_or_equal' | 'between' | 'date_equals' | 'datetime' | 'declined_if' | 'digits_between' | 'different' | 'email' | 'exists' | 'ends_with' | 'gt' | 'gte' | 'in' | 'includes' | 'lt' | 'lte' | 'max' | 'min' | 'not_in' | 'not_includes' | 'multiple_of' | 'prohibited_unless' | 'prohibits' | 'required_if' | 'required_unless' | 'required_with' | 'required_with_all' | 'required_without' | 'required_without_all' | 'same' | 'size' | 'starts_with' | 'unique' | CustomParamableValidationRuleName;
+type PlainRuleName = 'accepted' | 'alpha' | 'alpha_dash' | 'alpha_num' | 'array' | 'array_unique' | 'bail' | 'boolean' | 'confirmed' | 'date' | 'declined' | 'distinct' | 'digits' | 'email' | 'exclude' | 'filled' | 'ip' | 'ipv4' | 'ipv6' | 'integer' | 'json' | 'mac_address' | 'not_regex' | 'nullable' | 'numeric' | 'object' | 'present' | 'presentsame' | 'prohibited' | 'regex' | 'required' | 'sometimes' | 'string' | 'timezone' | 'url' | 'hex' | 'uuid' | CustomPlainRuleName;
 type ValidationRuleName = ParamableValidationRuleName | PlainRuleName;
 type MethodRules = Regex | In | NotIn | RequiredIf;
 type ParamableRuleString = `${ParamableValidationRuleName}:${string}`;
@@ -308,10 +308,13 @@ interface ReplaceAttributeInterface {
   replaceGte: (payload: replaceAttributePayload) => string;
   replaceLte: (payload: replaceAttributePayload) => string;
   replaceRequiredIf: (payload: replaceAttributePayload) => string;
+  replaceProhibitedUnless: (payload: replaceAttributePayload) => string;
+  replaceProhibits: (payload: replaceAttributePayload) => string;
   replaceStartsWith: (payload: replaceAttributePayload) => string;
   replaceRequiredUnless: (payload: replaceAttributePayload) => string;
   replaceSame: (payload: replaceAttributePayload) => string;
   replaceSize: (payload: replaceAttributePayload) => string;
+  replaceMultipleOf: (payload: replaceAttributePayload) => string;
   replaceUnique: (payload: replaceAttributePayload) => string;
 }
 type ValidationCallback = (value: any, fail: (message: string) => void, attribute: string) => void;
@@ -402,6 +405,7 @@ declare function getValidationSize(value: any, hasNumericRule?: boolean): number
 //#endregion
 //#region src/BaseValidator.d.ts
 declare class BaseValidator<D extends GenericObject = GenericObject> {
+  private excludedAttributes;
   /**
    * The lang used to return error messages
    */
@@ -497,6 +501,7 @@ declare class BaseValidator<D extends GenericObject = GenericObject> {
    * @returns
    */
   errors(): ErrorBag;
+  getExcludedAttributes(): string[];
   /**
    * Clear the error messages for the given keys.
    * If no keys are provided, all error messages will be cleared.

package/dist/index.js

@@ -1,4 +1,6 @@
 import { AsyncLocalStorage } from "node:async_hooks";
+import { domainToASCII } from "node:url";
+import { isIP } from "node:net";
 import customParseFormat from "dayjs/plugin/customParseFormat.js";
 import dayjs from "dayjs";
 
@@ -73,10 +75,12 @@ var en_default = {
 	declined: "The :attribute must be declined.",
 	declined_if: "The :attribute must be declined when :other is :value.",
 	different: "The :attribute and :other must be different.",
+	distinct: "The :attribute field has a duplicate value.",
 	digits: "The :attribute must be :digits digits.",
 	digits_between: "The :attribute must be between :min and :max digits.",
 	email: "The :attribute must be a valid email address.",
 	ends_with: "The :attribute must end with one of the following: :values.",
+	filled: "The :attribute field must have a value.",
 	exists: "The selected :attribute is invalid.",
 	gt: {
 		number: "The :attribute must be greater than :value.",
@@ -94,6 +98,9 @@ var en_default = {
 	in: "The :attribute must be one of the following :values.",
 	includes: "The :attribute must include one of the following values: :values.",
 	integer: "The :attribute must be an integer.",
+	ip: "The :attribute must be a valid IP address.",
+	ipv4: "The :attribute must be a valid IPv4 address.",
+	ipv6: "The :attribute must be a valid IPv6 address.",
 	json: "The :attribute must be a valid JSON string.",
 	lt: {
 		number: "The :attribute must be less than :value.",
@@ -119,6 +126,7 @@ var en_default = {
 		array: "The :attribute must have at least :min items.",
 		object: "The :attribute must have at least :min items."
 	},
+	mac_address: "The :attribute must be a valid MAC address.",
 	not_in: "The selected :attribute is invalid.",
 	not_regex: "The :attribute format is invalid.",
 	not_includes: "The :attribute must not include any of the following values: :values.",
@@ -137,6 +145,10 @@ var en_default = {
 		upper_cases: "The :attribute must contain at least :amount uppercase letters."
 	},
 	present: "The :attribute field must be present.",
+	presentsame: "The :attribute field must be present.",
+	prohibited: "The :attribute field is prohibited.",
+	prohibited_unless: "The :attribute field is prohibited unless :other is in :values.",
+	prohibits: "The :attribute field prohibits :values from being present.",
 	regex: "The :attribute format is invalid.",
 	required: "The :attribute field is required.",
 	required_if: "The :attribute field is required when :other is :value.",
@@ -154,8 +166,10 @@ var en_default = {
 		object: "The :attribute must contain :size items."
 	},
 	string: "The :attribute must be a string.",
+	timezone: "The :attribute must be a valid timezone.",
 	unique: "The :attribute has already been taken.",
-	url: "The :attribute must have a valid URL format."
+	url: "The :attribute must have a valid URL format.",
+	multiple_of: "The :attribute must be a multiple of :value."
 };
 
 //#endregion
@@ -624,6 +638,12 @@ const replaceAttributes = {
 		};
 		return message.replace(/:other|:value/gi, (matched) => values[matched]);
 	},
+	replaceProhibitedUnless: function(payload) {
+		return this.replaceRequiredUnless(payload);
+	},
+	replaceProhibits: function({ message, parameters, getDisplayableAttribute }) {
+		return message.replace(":values", parameters.map((attribute) => getDisplayableAttribute(attribute)).join(", "));
+	},
 	replaceRequiredUnless: function({ message, parameters, getDisplayableAttribute }) {
 		const [other] = parameters;
 		const values = {
@@ -638,40 +658,14 @@ const replaceAttributes = {
 	replaceSize: function({ message, parameters }) {
 		return message.replace(":size", parameters[0]);
 	},
+	replaceMultipleOf: function({ message, parameters }) {
+		return message.replace(":value", parameters[0]);
+	},
 	replaceUnique: function({ message, parameters, data }) {
 		return message.replace(":value", data[parameters[1]]);
 	}
 };
 
-//#endregion
-//#region src/Rules/closureValidationRule.ts
-var ClosureValidationRule = class extends IRuleContract {
-	/**
-	* The callback that validates the attribute
-	*/
-	callback;
-	/**
-	* Indicates if the validation callback failed.
-	*/
-	failed = false;
-	constructor(callback) {
-		super();
-		this.callback = callback;
-	}
-	/**
-	* Determine if the validation rule passes.
-	*/
-	passes(value, attribute) {
-		this.failed = false;
-		const result = this.callback(value, (message) => {
-			this.failed = true;
-			this.message = message;
-		}, attribute);
-		if (result instanceof Promise) return result.then(() => !this.failed);
-		return !this.failed;
-	}
-};
-
 //#endregion
 //#region src/validators/validationData.ts
 const validationData = {
@@ -712,6 +706,35 @@ const validationData = {
 	}
 };
 
+//#endregion
+//#region src/Rules/closureValidationRule.ts
+var ClosureValidationRule = class extends IRuleContract {
+	/**
+	* The callback that validates the attribute
+	*/
+	callback;
+	/**
+	* Indicates if the validation callback failed.
+	*/
+	failed = false;
+	constructor(callback) {
+		super();
+		this.callback = callback;
+	}
+	/**
+	* Determine if the validation rule passes.
+	*/
+	passes(value, attribute) {
+		this.failed = false;
+		const result = this.callback(value, (message) => {
+			this.failed = true;
+			this.message = message;
+		}, attribute);
+		if (result instanceof Promise) return result.then(() => !this.failed);
+		return !this.failed;
+	}
+};
+
 //#endregion
 //#region src/validators/validationRuleParser.ts
 const validationRuleParser = {
@@ -959,7 +982,7 @@ var validateAttributes = class {
 	*/
 	validateDeclinedIf(value, parameters) {
 		this.requireParameterCount(2, parameters, "declined_if");
-		const other = deepFind(this.data, parameters[0]);
+		const other = this.getAttributeValue(parameters[0]);
 		if (!other) return true;
 		if (parameters.slice(1).indexOf(other) !== -1) return this.validateDeclined(value);
 		return true;
@@ -969,7 +992,7 @@ var validateAttributes = class {
 	*/
 	validateDifferent(value, parameters) {
 		this.requireParameterCount(1, parameters, "different");
-		const other = deepFind(this.data, parameters[0]);
+		const other = this.getAttributeValue(parameters[0]);
 		if (!sameType(value, other)) return true;
 		if (value !== null && typeof value === "object") return !deepEqual(value, other);
 		return value !== other;
@@ -1004,13 +1027,23 @@ var validateAttributes = class {
 	/**
 	* Validate that an attribute is a valid email address.
 	*/
-	validateEmail(value) {
+	validateEmail(value, parameters = []) {
 		if (typeof value !== "string") return false;
-		/**
-		* Max allowed length for a top-level-domain is 24 characters.
-		* reference to list of top-level-domains: https://data.iana.org/TLD/tlds-alpha-by-domain.txt
-		*/
-		return value.toLowerCase().match(/^\w+([.-]?\w+)*@\w+([.-]?\w+)*(\.\w{2,24})+$/) !== null;
+		const normalized = parameters.map((parameter) => parameter.replace(/[{}]/g, "").toLowerCase());
+		if (normalized.length === 0 || normalized.includes("filter") || normalized.includes("rfc")) {
+			if (!this.isEmailByFilter(value)) return false;
+		}
+		if (normalized.includes("strict") && !this.isStrictEmail(value)) return false;
+		if (normalized.includes("dns") && !this.hasResolvableEmailDomain(value)) return false;
+		if (normalized.includes("spoof") && !this.isSpoofSafeEmail(value)) return false;
+		return true;
+	}
+	/**
+	* Validate that a present attribute is not empty.
+	*/
+	validateFilled(value) {
+		if (typeof value === "undefined") return true;
+		return this.validateRequired(value);
 	}
 	/**
 	* Validate the attribute ends with a given substring.
@@ -1070,7 +1103,7 @@ var validateAttributes = class {
 	*/
 	validateRequiredIf(value, parameters) {
 		this.requireParameterCount(2, parameters, "required_if");
-		const other = deepFind(this.data, parameters[0]);
+		const other = this.getAttributeValue(parameters[0]);
 		if (typeof other === "undefined") return true;
 		if (this.parseDependentRuleParameters(other, parameters).indexOf(other) !== -1) return this.validateRequired(value);
 		return true;
@@ -1080,7 +1113,7 @@ var validateAttributes = class {
 	*/
 	validateRequiredUnless(value, parameters) {
 		this.requireParameterCount(2, parameters, "required_unless");
-		let other = deepFind(this.data, parameters[0]);
+		let other = this.getAttributeValue(parameters[0]);
 		other = typeof other === "undefined" ? null : other;
 		if (this.parseDependentRuleParameters(other, parameters).indexOf(other) === -1) return this.validateRequired(value);
 		return true;
@@ -1117,14 +1150,14 @@ var validateAttributes = class {
 	* Determine if any of the given attributes fail the required test.
 	*/
 	anyFailingRequired(attributes) {
-		for (let i = 0; i < attributes.length; i++) if (!this.validateRequired(deepFind(this.data, attributes[i]))) return true;
+		for (let i = 0; i < attributes.length; i++) if (!this.validateRequired(this.getAttributeValue(attributes[i]))) return true;
 		return false;
 	}
 	/**
 	* Determine if all of the given attributes fail the required test.
 	*/
 	allFailingRequired(attributes) {
-		for (let i = 0; i < attributes.length; i++) if (this.validateRequired(deepFind(this.data, attributes[i]))) return false;
+		for (let i = 0; i < attributes.length; i++) if (this.validateRequired(this.getAttributeValue(attributes[i]))) return false;
 		return true;
 	}
 	/**
@@ -1166,7 +1199,13 @@ var validateAttributes = class {
 	* Validate that an attribute exists even if not filled.
 	*/
 	validatePresent(value, parameters, attribute) {
-		return typeof deepFind(this.data, attribute) !== "undefined";
+		return typeof this.getAttributeValue(attribute) !== "undefined";
+	}
+	/**
+	* Alias of the present rule kept for compatibility with requested rule naming.
+	*/
+	validatePresentsame(value, parameters, attribute) {
+		return this.validatePresent(value, parameters, attribute);
 	}
 	/**
 	* Validate that an attribute is an integer.
@@ -1188,12 +1227,103 @@ var validateAttributes = class {
 		return true;
 	}
 	/**
+	* Validate that an attribute is prohibited.
+	*/
+	validateProhibited(value) {
+		return !this.validateRequired(value);
+	}
+	/**
+	* Validate that an attribute is prohibited unless another field matches one of the given values.
+	*/
+	validateProhibitedUnless(value, parameters) {
+		this.requireParameterCount(2, parameters, "prohibited_unless");
+		let other = this.getAttributeValue(parameters[0]);
+		other = typeof other === "undefined" ? null : other;
+		if (this.parseDependentRuleParameters(other, parameters).indexOf(other) !== -1) return true;
+		return this.validateProhibited(value);
+	}
+	/**
+	* Validate that present attributes prohibit other attributes from being present.
+	*/
+	validateProhibits(value, parameters) {
+		this.requireParameterCount(1, parameters, "prohibits");
+		if (!this.validateRequired(value)) return true;
+		return parameters.every((attribute) => this.validateProhibited(this.getAttributeValue(attribute)));
+	}
+	/**
+	* Validate that an attribute is a valid IP address.
+	*/
+	validateIp(value) {
+		return typeof value === "string" && isIP(value) !== 0;
+	}
+	/**
+	* Validate that an attribute is a valid IPv4 address.
+	*/
+	validateIpv4(value) {
+		return typeof value === "string" && isIP(value) === 4;
+	}
+	/**
+	* Validate that an attribute is a valid IPv6 address.
+	*/
+	validateIpv6(value) {
+		return typeof value === "string" && isIP(value) === 6;
+	}
+	/**
+	* Validate that an attribute is a valid MAC address.
+	*/
+	validateMacAddress(value) {
+		return typeof value === "string" && /^([0-9a-f]{2}[:-]){5}[0-9a-f]{2}$/i.test(value);
+	}
+	/**
+	* Validate that an attribute is a valid timezone identifier.
+	*/
+	validateTimezone(value) {
+		if (typeof value !== "string" || value.length === 0) return false;
+		if (typeof Intl.supportedValuesOf === "function" && Intl.supportedValuesOf("timeZone").includes(value)) return true;
+		try {
+			new Intl.DateTimeFormat("en-US", { timeZone: value });
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/**
+	* Validate that an attribute is a multiple of the given value.
+	*/
+	validateMultipleOf(value, parameters) {
+		this.requireParameterCount(1, parameters, "multiple_of");
+		const numericValue = Number(value);
+		const divisor = Number(parameters[0]);
+		if (!Number.isFinite(numericValue) || !Number.isFinite(divisor) || divisor === 0) return false;
+		const scale = 10 ** Math.max(this.getDecimalPlaces(value), this.getDecimalPlaces(parameters[0]));
+		const scaledValue = Math.round(numericValue * scale);
+		const scaledDivisor = Math.round(divisor * scale);
+		return scaledDivisor !== 0 && scaledValue % scaledDivisor === 0;
+	}
+	/**
+	* Validate that values matched by a wildcard attribute are distinct.
+	*/
+	validateDistinct(value, parameters, attribute, primaryAttribute = attribute) {
+		if (Array.isArray(value)) return new Set(value.map((entry) => this.normalizeDistinctValue(entry, parameters))).size === value.length;
+		if (primaryAttribute.indexOf("*") === -1) return true;
+		const strict = parameters.includes("strict");
+		const values = this.getDistinctValues(primaryAttribute);
+		const current = this.normalizeDistinctValue(value, parameters);
+		let matches = 0;
+		for (const candidate of values) {
+			const normalized = this.normalizeDistinctValue(candidate, parameters);
+			if (strict ? normalized === current : normalized == current) matches += 1;
+			if (matches > 1) return false;
+		}
+		return true;
+	}
+	/**
 	* Validate that an attribute is greater than another attribute.
 	*/
 	validateGt(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "gt");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) > compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) > getSize(compartedToValue);
@@ -1204,7 +1334,7 @@ var validateAttributes = class {
 	validateGte(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "gte");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) >= compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) >= getSize(compartedToValue);
@@ -1215,7 +1345,7 @@ var validateAttributes = class {
 	validateLt(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "lt");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) < compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) < getSize(compartedToValue);
@@ -1226,7 +1356,7 @@ var validateAttributes = class {
 	validateLte(value, parameters, attribute) {
 		this.requireParameterCount(1, parameters, "lte");
 		if (typeof value !== "number" && typeof value !== "string" && typeof value !== "object") throw "The field under validation must be a number, string, array or object";
-		const compartedToValue = deepFind(this.data, parameters[0]) || parameters[0];
+		const compartedToValue = this.getAttributeValue(parameters[0]) || parameters[0];
 		if (!Array.isArray(compartedToValue) && isNaN(compartedToValue) === false) return getSize(value, validationRuleParser.hasRule(attribute, getNumericRules(), this.rules)) <= compartedToValue;
 		if (sameType(value, compartedToValue) === false) throw "The fields under validation must be of the same type";
 		return getSize(value) <= getSize(compartedToValue);
@@ -1284,7 +1414,7 @@ var validateAttributes = class {
 	compareDates(value, parameter, operator, rule) {
 		value = toDate(value);
 		if (!value) throw `Validation rule ${rule} requires the field under valation to be a date.`;
-		const compartedToValue = toDate(deepFind(this.data, parameter) || parameter);
+		const compartedToValue = toDate(this.getAttributeValue(parameter) || parameter);
 		if (!compartedToValue) throw `Validation rule ${rule} requires the parameter to be a date.`;
 		return compare(value.getTime(), compartedToValue.getTime(), operator);
 	}
@@ -1296,6 +1426,10 @@ var validateAttributes = class {
 	}
 	/**
 	* Prepare the values for validation
+	*
+	* @param other         The value to compare against
+	* @param parameters    The parameters for the validation rule
+	* @returns             The prepared values for validation
 	*/
 	parseDependentRuleParameters(other, parameters) {
 		let values = parameters.slice(1);
@@ -1304,6 +1438,55 @@ var validateAttributes = class {
 		if (typeof other === "boolean") values = convertValuesToBoolean(values);
 		return values;
 	}
+	getAttributeValue(attribute) {
+		const dataValue = deepFind(this.data, attribute);
+		if (typeof dataValue !== "undefined") return dataValue;
+		return deepFind(this.context.requestFiles ?? {}, attribute);
+	}
+	getDistinctValues(primaryAttribute) {
+		const gathered = validationData.initializeAndGatherData(primaryAttribute, this.data);
+		const pattern = new RegExp(`^${primaryAttribute.replace(/\./g, "\\.").replace(/\*/g, "[^.]+")}$`);
+		return Object.keys(gathered).filter((attribute) => pattern.test(attribute)).map((attribute) => deepFind(this.data, attribute)).filter((value) => typeof value !== "undefined");
+	}
+	normalizeDistinctValue(value, parameters) {
+		if (parameters.includes("ignore_case") && typeof value === "string") return value.toLowerCase();
+		return value;
+	}
+	isEmailByFilter(value) {
+		return value.toLowerCase().match(/^[^\s@]+@[^\s@]+\.[^\s@]{2,24}$/) !== null;
+	}
+	isStrictEmail(value) {
+		if (!this.isEmailByFilter(value)) return false;
+		const [localPart, domain] = value.split("@");
+		if (!localPart || !domain || localPart.length > 64 || domain.length > 255) return false;
+		if (localPart.startsWith(".") || localPart.endsWith(".") || localPart.includes("..")) return false;
+		return domain.split(".").every((label) => {
+			return label.length > 0 && label.length <= 63 && /^[a-z0-9-]+$/i.test(label) && !label.startsWith("-") && !label.endsWith("-");
+		});
+	}
+	hasResolvableEmailDomain(value) {
+		if (!this.isStrictEmail(value)) return false;
+		const domain = value.split("@")[1];
+		const asciiDomain = domainToASCII(domain);
+		return asciiDomain.length > 0 && asciiDomain.includes(".");
+	}
+	isSpoofSafeEmail(value) {
+		if (!this.isEmailByFilter(value)) return false;
+		const [localPart, domain] = value.split("@");
+		return domainToASCII(domain).length > 0 && !this.hasAsciiControlCharacters(value) && localPart.normalize("NFKC") === localPart && domain.normalize("NFKC") === domain;
+	}
+	hasAsciiControlCharacters(value) {
+		for (let index = 0; index < value.length; index++) {
+			const codePoint = value.charCodeAt(index);
+			if (codePoint <= 31 || codePoint === 127) return true;
+		}
+		return false;
+	}
+	getDecimalPlaces(value) {
+		const stringValue = String(value).toLowerCase();
+		if (!stringValue.includes(".")) return 0;
+		return stringValue.split(".")[1]?.length ?? 0;
+	}
 };
 
 //#endregion
@@ -1372,6 +1555,7 @@ const implicitRues = [
 	"declined_if",
 	"filled",
 	"present",
+	"presentsame",
 	"required",
 	"required_if",
 	"required_unless",
@@ -1853,11 +2037,12 @@ var Password$1 = class Password$1 extends IRuleContract {
 	* Determine if the validation rule passes.
 	*/
 	passes(value, attribute) {
-		const validator = new BaseValidator(this.data, { [attribute]: [
+		const passwordRules = [
 			"string",
 			`min:${this.minLength}`,
 			...this.customRules
-		] }, this.validator.customMessages, this.validator.customAttributes).setLang(this.lang);
+		];
+		const validator = new BaseValidator(this.data, { [attribute]: passwordRules }, this.validator.customMessages, this.validator.customAttributes).setLang(this.lang);
 		if (!validator.validate()) {
 			const errors = validator.errors().addErrorTypes().get(attribute);
 			for (const key in errors) this.validator.errors().add(attribute, errors[key]);
@@ -2000,6 +2185,7 @@ var replaceAttributePayload = class {
 //#endregion
 //#region src/BaseValidator.ts
 var BaseValidator = class BaseValidator {
+	excludedAttributes = /* @__PURE__ */ new Set();
 	/**
 	* The lang used to return error messages
 	*/
@@ -2084,6 +2270,7 @@ var BaseValidator = class BaseValidator {
 	*/
 	withContext(context = {}) {
 		this.context = context;
+		this.addRules(this.initalRules);
 		return this;
 	}
 	/**
@@ -2144,6 +2331,9 @@ var BaseValidator = class BaseValidator {
 	errors() {
 		return this.messages;
 	}
+	getExcludedAttributes() {
+		return [...this.excludedAttributes];
+	}
 	/**
 	* Clear the error messages for the given keys. 
 	* If no keys are provided, all error messages will be cleared.
@@ -2260,6 +2450,7 @@ var BaseValidator = class BaseValidator {
 	runAllValidations() {
 		this.messages = new ErrorBag();
 		this.validateAttributes = new validateAttributes(this.data, this.rules, this.getContext());
+		this.excludedAttributes.clear();
 		for (const property in this.rules) if (this.runValidation(property) === false) break;
 	}
 	/**
@@ -2268,6 +2459,7 @@ var BaseValidator = class BaseValidator {
 	async runAllValidationsAsync() {
 		this.messages = new ErrorBag();
 		this.validateAttributes = new validateAttributes(this.data, this.rules, this.getContext());
+		this.excludedAttributes.clear();
 		for (const property in this.rules) if (await this.runValidationAsync(property) === false) break;
 	}
 	/**
@@ -2290,33 +2482,47 @@ var BaseValidator = class BaseValidator {
 	* Run validation rules for the specified property and stop validation if needed
 	*/
 	runValidation(property) {
-		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) for (let i = 0; i < this.rules[property].length; i++) {
-			this.validateAttribute(property, this.rules[property][i]);
-			if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
-			if (this.shouldStopValidating(property)) break;
+		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) {
+			if (validationRuleParser.hasRule(property, ["exclude"], this.rules)) {
+				this.excludedAttributes.add(property);
+				return;
+			}
+			for (let i = 0; i < this.rules[property].length; i++) {
+				this.validateAttribute(property, this.rules[property][i]);
+				if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
+				if (this.shouldStopValidating(property)) break;
+			}
 		}
 	}
 	/**
 	* Run validation rules for the specified property asynchronously and stop validation if needed
 	*/
 	async runValidationAsync(property) {
-		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) for (let i = 0; i < this.rules[property].length; i++) {
-			await this.validateAttribute(property, this.rules[property][i]);
-			if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
-			if (this.shouldStopValidating(property)) break;
+		if (Object.prototype.hasOwnProperty.call(this.rules, property) && Array.isArray(this.rules[property])) {
+			if (validationRuleParser.hasRule(property, ["exclude"], this.rules)) {
+				this.excludedAttributes.add(property);
+				return;
+			}
+			for (let i = 0; i < this.rules[property].length; i++) {
+				await this.validateAttribute(property, this.rules[property][i]);
+				if (this.messages.keys().length > 0 && this.stopOnFirstFailureFlag === true) return false;
+				if (this.shouldStopValidating(property)) break;
+			}
 		}
 	}
 	/**
 	* Check if we should stop further validations on a given attribute.
 	*/
 	shouldStopValidating(attribute) {
+		if (this.excludedAttributes.has(attribute)) return true;
 		return this.messages.has(attribute) && validationRuleParser.hasRule(attribute, ["bail"], this.rules);
 	}
 	/**
 	* Parse the given rules add assign them to the current rules
 	*/
 	addRules(rules) {
-		const response = validationRuleParser.explodeRules(dotify(rules, true), this.data);
+		const availableData = mergeDeep(this.getContext().requestFiles ?? {}, this.data);
+		const response = validationRuleParser.explodeRules(dotify(rules, true), availableData);
 		this.rules = response.rules;
 		this.implicitAttributes = response.implicitAttributes;
 	}
@@ -2334,7 +2540,7 @@ var BaseValidator = class BaseValidator {
 		const method = `validate${buildValidationMethodName(rule)}`;
 		if (rule !== "" && typeof this.validateAttributes[method] === "undefined") throw `Rule ${rule} is not valid`;
 		if (!validatable) return;
-		const validation = this.validateAttributes[method](value, parameters, attribute);
+		const validation = this.validateAttributes[method](value, parameters, attribute, this.getPrimaryAttribute(attribute));
 		if (validation instanceof Promise) return validation.then((result) => {
 			if (!result) this.addFailure(attribute, rule, value, parameters);
 		});
@@ -3099,8 +3305,10 @@ var Validator = class Validator {
 	*/
 	validatedData() {
 		const validKeys = Object.keys(this.rules);
+		const excluded = new Set(this.instance?.getExcludedAttributes() ?? []);
 		const clean = {};
 		for (const key of validKeys) {
+			if (excluded.has(key)) continue;
 			const value = deepFind(this.data, key);
 			const resolvedValue = typeof value !== "undefined" ? value : deepFind(this.getContext().requestFiles ?? {}, key);
 			if (typeof resolvedValue !== "undefined") deepSet(clean, key, resolvedValue);
@@ -3111,7 +3319,8 @@ var Validator = class Validator {
 	* Return all validated input.
 	*/
 	validated() {
-		return Object.fromEntries(Object.entries(this.data).filter(([key]) => key in this.rules));
+		const excluded = new Set(this.instance?.getExcludedAttributes() ?? []);
+		return Object.fromEntries(Object.entries(this.data).filter(([key]) => key in this.rules && !excluded.has(key)));
 	}
 	/**
 	* Return a portion of validated input

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kanun",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "Framework-agnostic TypeScript-first validation library.",
   "type": "module",
   "files": [