validate.js

export function validate(schema, data) {
  const errors = {}
  const clean = {}

  for (const key in schema) {
    const rules = schema[key]
    const value = data[key]

    if (
      rules.required &&
      (value === undefined || value === null || value === "")
    ) {
      errors[key] = `${key} is required`
      continue
    }

    const customError = rules.validate(value)
    if (customError) {
      errors[key] = customError
      continue
    }

    // Store validated value (trimmed if string)
    clean[key] = typeof value === "string" ? value.trim() : value
  }

  return {
    isValid: Object.keys(errors).length === 0,
    errors,
    clean
  }
}

export function escapeHtml(str) {
  if (typeof str !== "string") return ""
  return str
    .replace(/&/g, "&")
    .replace(/</g, "&lt;")
    .replace(/>/g, "&gt;")
    .replace(/"/g, "&quot;")
    .replace(/'/g, "&#39;")
}