Validation

One rule set, every path

The same validator runs on the API, the dashboard forms, CSV and XLSX import, and the Google Sheets sync. Anything valid in one path is valid in all of them, and client-side checks cannot be bypassed by calling the API directly.

Phone numbers

Numbers must be Moroccan and are canonicalized to +212XXXXXXXXX before storage, so the same customer is never dialed twice under two spellings. The subscriber part is 9 digits starting with 5 (landline), 6, or 7 (mobile). Spaces, dashes, dots, and parentheses are stripped, and the 0, 212, +212, and 00212 prefixes are all accepted. Anything else fails validation rather than being stored as-is.

Normalization examples

Field rules

Validation error shape

{
  "error": "Invalid order fields",
  "code": "VALIDATION_ERROR",
  "fields": {
    "phone": "orders.form.errors.phoneInvalid",
    "clientName": "orders.form.errors.required"
  }
}

Field error keys