@10x-media/form-builder 0.1.0-beta.0 → 0.1.0-beta.10

package/dist/collections/formsEndpoints.js

@@ -0,0 +1,101 @@
+import { resolveFromAddressesRequest } from "../actions/fromAddresses.js";
+import { resolveFormResultsRequest } from "../aggregation/resolveResultsRequest.js";
+import { resolveConsentSourcesRequest } from "../consent/resolveConsentSourcesRequest.js";
+import { resolveDepartmentsRequest } from "../email/departments.js";
+import { resolvePollCloseRequest } from "../poll/resolvePollCloseRequest.js";
+import { resolvePollOptionsRequest } from "../poll/resolvePollOptionsRequest.js";
+//#region src/collections/formsEndpoints.ts
+/**
+* The forms collection's built-in endpoints: poll results/options/close, plus the optional
+* consent-sources, from-addresses, and departments option endpoints that only exist when the
+* matching plugin option is set. Each delegates to its request helper, which owns the auth check
+* (anonymous callers get a 403 from the helper, not here). Extracted from `buildFormsCollection`
+* so the collection builder stays focused on field and hook composition.
+*/
+const buildFormsEndpoints = ({ resultsAccess, pollResultsTypes, consentSources, fromAddresses, departments }) => [
+	{
+		path: "/:id/results",
+		method: "get",
+		handler: async (req) => {
+			const field = typeof req.query?.field === "string" ? req.query.field : void 0;
+			const { status, body } = await resolveFormResultsRequest({
+				payload: req.payload,
+				formId: req.routeParams?.id,
+				field,
+				isAuthed: Boolean(req.user),
+				req,
+				access: resultsAccess,
+				eligibleTypes: pollResultsTypes
+			});
+			return Response.json(body, { status });
+		}
+	},
+	{
+		path: "/:id/poll-options",
+		method: "get",
+		handler: async (req) => {
+			const { status, body } = await resolvePollOptionsRequest({
+				payload: req.payload,
+				formId: req.routeParams?.id,
+				isAuthed: Boolean(req.user),
+				req
+			});
+			return Response.json(body, { status });
+		}
+	},
+	{
+		path: "/:id/close",
+		method: "post",
+		handler: async (req) => {
+			const { status, body } = await resolvePollCloseRequest({
+				payload: req.payload,
+				formId: req.routeParams?.id,
+				isAuthed: Boolean(req.user),
+				req
+			});
+			return Response.json(body, { status });
+		}
+	},
+	...consentSources ? [{
+		path: "/:id/consent-sources",
+		method: "get",
+		handler: async (req) => {
+			const { status, body } = await resolveConsentSourcesRequest({
+				payload: req.payload,
+				formId: req.routeParams?.id,
+				isAuthed: Boolean(req.user),
+				req,
+				resolver: consentSources
+			});
+			return Response.json(body, { status });
+		}
+	}] : [],
+	...fromAddresses ? [{
+		path: "/:id/from-addresses",
+		method: "get",
+		handler: async (req) => {
+			const { status, body } = await resolveFromAddressesRequest({
+				isAuthed: Boolean(req.user),
+				req,
+				resolver: fromAddresses
+			});
+			return Response.json(body, { status });
+		}
+	}] : [],
+	...departments ? [{
+		path: "/:id/departments",
+		method: "get",
+		handler: async (req) => {
+			const { status, body } = await resolveDepartmentsRequest({
+				isAuthed: Boolean(req.user),
+				req,
+				resolver: departments
+			});
+			return Response.json(body, { status });
+		}
+	}] : []
+];
+//#endregion
+export { buildFormsEndpoints };
+
+//# sourceMappingURL=formsEndpoints.js.map

package/dist/collections/formsEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formsEndpoints.js","names":[],"sources":["../../src/collections/formsEndpoints.ts"],"sourcesContent":["import type { CollectionConfig, PayloadRequest } from 'payload'\nimport { type FromAddressesResolver, resolveFromAddressesRequest } from '../actions/fromAddresses'\nimport {\n\ttype FormResultsAccess,\n\tresolveFormResultsRequest,\n} from '../aggregation/resolveResultsRequest'\nimport { resolveConsentSourcesRequest } from '../consent/resolveConsentSourcesRequest'\nimport type { ConsentSourcesResolver } from '../consent/types'\nimport { type DepartmentEmailsResolver, resolveDepartmentsRequest } from '../email/departments'\nimport { resolvePollCloseRequest } from '../poll/resolvePollCloseRequest'\nimport { resolvePollOptionsRequest } from '../poll/resolvePollOptionsRequest'\n\ntype FormsEndpointDeps = {\n\t/** Host seam gating anonymous results reads (plugin option `results.access`). */\n\tresultsAccess?: FormResultsAccess\n\t/** The poll-eligible field-type names; the `/:id/results` endpoint restricts reads to these. */\n\tpollResultsTypes: string[]\n\t/** The plugin `consent.sources` option; present registers the `/:id/consent-sources` endpoint. */\n\tconsentSources?: ConsentSourcesResolver\n\t/** The plugin `email.fromAddresses` option; present registers the `/:id/from-addresses` endpoint. */\n\tfromAddresses?: FromAddressesResolver\n\t/** The plugin `email.departments` option; present registers the `/:id/departments` endpoint. */\n\tdepartments?: DepartmentEmailsResolver\n}\n\n/**\n * The forms collection's built-in endpoints: poll results/options/close, plus the optional\n * consent-sources, from-addresses, and departments option endpoints that only exist when the\n * matching plugin option is set. Each delegates to its request helper, which owns the auth check\n * (anonymous callers get a 403 from the helper, not here). Extracted from `buildFormsCollection`\n * so the collection builder stays focused on field and hook composition.\n */\nexport const buildFormsEndpoints = ({\n\tresultsAccess,\n\tpollResultsTypes,\n\tconsentSources,\n\tfromAddresses,\n\tdepartments,\n}: FormsEndpointDeps): Exclude<CollectionConfig['endpoints'], false | undefined> => [\n\t{\n\t\tpath: '/:id/results',\n\t\tmethod: 'get',\n\t\thandler: async (req: PayloadRequest) => {\n\t\t\tconst field = typeof req.query?.field === 'string' ? req.query.field : undefined\n\t\t\tconst { status, body } = await resolveFormResultsRequest({\n\t\t\t\tpayload: req.payload,\n\t\t\t\tformId: req.routeParams?.id as number | string | undefined,\n\t\t\t\tfield,\n\t\t\t\tisAuthed: Boolean(req.user),\n\t\t\t\treq,\n\t\t\t\taccess: resultsAccess,\n\t\t\t\teligibleTypes: pollResultsTypes,\n\t\t\t})\n\t\t\treturn Response.json(body, { status })\n\t\t},\n\t},\n\t{\n\t\tpath: '/:id/poll-options',\n\t\tmethod: 'get',\n\t\thandler: async (req: PayloadRequest) => {\n\t\t\tconst { status, body } = await resolvePollOptionsRequest({\n\t\t\t\tpayload: req.payload,\n\t\t\t\tformId: req.routeParams?.id as number | string | undefined,\n\t\t\t\tisAuthed: Boolean(req.user),\n\t\t\t\treq,\n\t\t\t})\n\t\t\treturn Response.json(body, { status })\n\t\t},\n\t},\n\t// Trusted admin action (authenticated only): close a poll now and resolve its outcome. A POST\n\t// because it mutates; auth is `Boolean(req.user)` so an anonymous caller gets 403 from the helper.\n\t{\n\t\tpath: '/:id/close',\n\t\tmethod: 'post',\n\t\thandler: async (req: PayloadRequest) => {\n\t\t\tconst { status, body } = await resolvePollCloseRequest({\n\t\t\t\tpayload: req.payload,\n\t\t\t\tformId: req.routeParams?.id as number | string | undefined,\n\t\t\t\tisAuthed: Boolean(req.user),\n\t\t\t\treq,\n\t\t\t})\n\t\t\treturn Response.json(body, { status })\n\t\t},\n\t},\n\t...(consentSources\n\t\t? [\n\t\t\t\t{\n\t\t\t\t\tpath: '/:id/consent-sources',\n\t\t\t\t\tmethod: 'get' as const,\n\t\t\t\t\thandler: async (req: PayloadRequest) => {\n\t\t\t\t\t\tconst { status, body } = await resolveConsentSourcesRequest({\n\t\t\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\t\t\tformId: req.routeParams?.id as number | string | undefined,\n\t\t\t\t\t\t\tisAuthed: Boolean(req.user),\n\t\t\t\t\t\t\treq,\n\t\t\t\t\t\t\tresolver: consentSources,\n\t\t\t\t\t\t})\n\t\t\t\t\t\treturn Response.json(body, { status })\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t]\n\t\t: []),\n\t// The route id is unused: the from-addresses set is request-scoped (e.g. per tenant), not\n\t// per-form. Registered as a doc-scoped route only so the admin field can reuse\n\t// EndpointOptionsSelect unmodified (see buildFromField).\n\t...(fromAddresses\n\t\t? [\n\t\t\t\t{\n\t\t\t\t\tpath: '/:id/from-addresses',\n\t\t\t\t\tmethod: 'get' as const,\n\t\t\t\t\thandler: async (req: PayloadRequest) => {\n\t\t\t\t\t\tconst { status, body } = await resolveFromAddressesRequest({\n\t\t\t\t\t\t\tisAuthed: Boolean(req.user),\n\t\t\t\t\t\t\treq,\n\t\t\t\t\t\t\tresolver: fromAddresses,\n\t\t\t\t\t\t})\n\t\t\t\t\t\treturn Response.json(body, { status })\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t]\n\t\t: []),\n\t// Same request-scoped, id-unused shape as from-addresses: registered doc-scoped only so the\n\t// recipient selects can fetch it (see RecipientsSelect / buildRecipientField).\n\t...(departments\n\t\t? [\n\t\t\t\t{\n\t\t\t\t\tpath: '/:id/departments',\n\t\t\t\t\tmethod: 'get' as const,\n\t\t\t\t\thandler: async (req: PayloadRequest) => {\n\t\t\t\t\t\tconst { status, body } = await resolveDepartmentsRequest({\n\t\t\t\t\t\t\tisAuthed: Boolean(req.user),\n\t\t\t\t\t\t\treq,\n\t\t\t\t\t\t\tresolver: departments,\n\t\t\t\t\t\t})\n\t\t\t\t\t\treturn Response.json(body, { status })\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t]\n\t\t: []),\n]\n"],"mappings":";;;;;;;;;;;;;;AAgCA,MAAa,uBAAuB,EACnC,eACA,kBACA,gBACA,eACA,kBACmF;CACnF;EACC,MAAM;EACN,QAAQ;EACR,SAAS,OAAO,QAAwB;GACvC,MAAM,QAAQ,OAAO,IAAI,OAAO,UAAU,WAAW,IAAI,MAAM,QAAQ,KAAA;GACvE,MAAM,EAAE,QAAQ,SAAS,MAAM,0BAA0B;IACxD,SAAS,IAAI;IACb,QAAQ,IAAI,aAAa;IACzB;IACA,UAAU,QAAQ,IAAI,IAAI;IAC1B;IACA,QAAQ;IACR,eAAe;GAChB,CAAC;GACD,OAAO,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC;EACtC;CACD;CACA;EACC,MAAM;EACN,QAAQ;EACR,SAAS,OAAO,QAAwB;GACvC,MAAM,EAAE,QAAQ,SAAS,MAAM,0BAA0B;IACxD,SAAS,IAAI;IACb,QAAQ,IAAI,aAAa;IACzB,UAAU,QAAQ,IAAI,IAAI;IAC1B;GACD,CAAC;GACD,OAAO,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC;EACtC;CACD;CAGA;EACC,MAAM;EACN,QAAQ;EACR,SAAS,OAAO,QAAwB;GACvC,MAAM,EAAE,QAAQ,SAAS,MAAM,wBAAwB;IACtD,SAAS,IAAI;IACb,QAAQ,IAAI,aAAa;IACzB,UAAU,QAAQ,IAAI,IAAI;IAC1B;GACD,CAAC;GACD,OAAO,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC;EACtC;CACD;CACA,GAAI,iBACD,CACA;EACC,MAAM;EACN,QAAQ;EACR,SAAS,OAAO,QAAwB;GACvC,MAAM,EAAE,QAAQ,SAAS,MAAM,6BAA6B;IAC3D,SAAS,IAAI;IACb,QAAQ,IAAI,aAAa;IACzB,UAAU,QAAQ,IAAI,IAAI;IAC1B;IACA,UAAU;GACX,CAAC;GACD,OAAO,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC;EACtC;CACD,CACD,IACC,CAAC;CAIJ,GAAI,gBACD,CACA;EACC,MAAM;EACN,QAAQ;EACR,SAAS,OAAO,QAAwB;GACvC,MAAM,EAAE,QAAQ,SAAS,MAAM,4BAA4B;IAC1D,UAAU,QAAQ,IAAI,IAAI;IAC1B;IACA,UAAU;GACX,CAAC;GACD,OAAO,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC;EACtC;CACD,CACD,IACC,CAAC;CAGJ,GAAI,cACD,CACA;EACC,MAAM;EACN,QAAQ;EACR,SAAS,OAAO,QAAwB;GACvC,MAAM,EAAE,QAAQ,SAAS,MAAM,0BAA0B;IACxD,UAAU,QAAQ,IAAI,IAAI;IAC1B;IACA,UAAU;GACX,CAAC;GACD,OAAO,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC;EACtC;CACD,CACD,IACC,CAAC;AACL"}

package/dist/collections/redirectFields.d.ts

@@ -0,0 +1,29 @@
+import { Field } from "payload";
+
+//#region src/collections/redirectFields.d.ts
+/**
+ * Composes the fields inside the forms `response.redirect` group. Receives the default fields (the
+ * `url` text field, plus the polymorphic `reference` relationship when `redirectRelationships` is
+ * set) and returns the group's final field array verbatim, so a host can prepend a custom link
+ * field, swap `url` for their own picker, reorder, or filter. Mirrors `buttons.fields` and
+ * `poll.outcomeFields`.
+ *
+ * The plugin's built-in redirect handling reads `redirect.url` (and `redirect.reference` when
+ * configured); `toFormDocument` passes the whole `response` group through, so a host that replaces
+ * `url` with their own link field owns resolving it to a destination in their frontend, the same as
+ * the internal-reference case.
+ */
+type RedirectFieldsOverride = (args: {
+  defaultFields: Field[];
+}) => Field[];
+/** The forms `response.redirect` group options: its fields composition seam. */
+type RedirectOption = {
+  fields?: RedirectFieldsOverride;
+};
+/** The plugin `response` option: currently the `redirect` group's composition seam. */
+type ResponseOption = {
+  redirect?: RedirectOption;
+};
+//#endregion
+export { RedirectFieldsOverride, RedirectOption, ResponseOption };
+//# sourceMappingURL=redirectFields.d.ts.map

package/dist/conditions/conditionType.js

@@ -0,0 +1,21 @@
+import { defaultConditionType } from "./fieldTypes.js";
+//#region src/conditions/conditionType.ts
+/** The condition input a field type uses in the builder: its declared `conditionType` or the value-kind default. */
+const conditionTypeForDefinition = (definition) => definition.conditionType ?? defaultConditionType(definition.value);
+/**
+* A serializable slug -> condition type map for every conditionable field type, handed to the client
+* builder. Valueless ('none' kind, display-only) types are left out so they never appear as operands;
+* consumers treat a missing entry as "not conditionable". An explicit `conditionType` opts back in.
+*/
+const buildConditionTypeMap = (registry) => {
+	const map = {};
+	for (const definition of registry.values()) {
+		if (definition.value === "none" && definition.conditionType == null) continue;
+		map[definition.type] = conditionTypeForDefinition(definition);
+	}
+	return map;
+};
+//#endregion
+export { buildConditionTypeMap };
+
+//# sourceMappingURL=conditionType.js.map

package/dist/conditions/conditionType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionType.js","names":[],"sources":["../../src/conditions/conditionType.ts"],"sourcesContent":["import type { AnyFormFieldDefinition } from '../fields/types'\nimport { type ConditionFieldType, defaultConditionType } from './fieldTypes'\n\n/** The condition input a field type uses in the builder: its declared `conditionType` or the value-kind default. */\nexport const conditionTypeForDefinition = (\n\tdefinition: Pick<AnyFormFieldDefinition, 'value' | 'conditionType'>\n): ConditionFieldType => definition.conditionType ?? defaultConditionType(definition.value)\n\n/**\n * A serializable slug -> condition type map for every conditionable field type, handed to the client\n * builder. Valueless ('none' kind, display-only) types are left out so they never appear as operands;\n * consumers treat a missing entry as \"not conditionable\". An explicit `conditionType` opts back in.\n */\nexport const buildConditionTypeMap = (\n\tregistry: Map<string, AnyFormFieldDefinition>\n): Record<string, ConditionFieldType> => {\n\tconst map: Record<string, ConditionFieldType> = {}\n\tfor (const definition of registry.values()) {\n\t\tif (definition.value === 'none' && definition.conditionType == null) {\n\t\t\tcontinue\n\t\t}\n\t\tmap[definition.type] = conditionTypeForDefinition(definition)\n\t}\n\treturn map\n}\n"],"mappings":";;;AAIA,MAAa,8BACZ,eACwB,WAAW,iBAAiB,qBAAqB,WAAW,KAAK;;;;;;AAO1F,MAAa,yBACZ,aACwC;CACxC,MAAM,MAA0C,CAAC;CACjD,KAAK,MAAM,cAAc,SAAS,OAAO,GAAG;EAC3C,IAAI,WAAW,UAAU,UAAU,WAAW,iBAAiB,MAC9D;EAED,IAAI,WAAW,QAAQ,2BAA2B,UAAU;CAC7D;CACA,OAAO;AACR"}

package/dist/conditions/evaluate.d.ts

@@ -0,0 +1,17 @@
+import { Where } from "payload";
+
+//#region src/conditions/evaluate.d.ts
+/**
+ * Evaluate a serializable `Where`-shaped condition against a flat map of (already coerced) form answers.
+ * An absent or empty condition matches (returns true). Operator semantics mirror Payload's query
+ * adapters: coerce then compare; `not_equals`/`not_in` are null-inclusive; `exists` treats `''`/absent
+ * as not-existing; `like` is case-insensitive and space-splits (every word must be a substring), and
+ * `not_like` is its logical negation (at least one word absent); `contains` is a single case-insensitive
+ * substring; comma-delimited `in`/`not_in` string values are split and trimmed. Geo (`near`/`within`/
+ * `intersects`) and `all` are out of scope and evaluate to false. Isomorphic: no `req`/DB access, so the
+ * renderer reuses it client-side.
+ */
+declare const evaluateCondition: (where: Where | null | undefined, answers: Record<string, unknown>) => boolean;
+//#endregion
+export { evaluateCondition };
+//# sourceMappingURL=evaluate.d.ts.map

package/dist/conditions/evaluate.js

@@ -0,0 +1,94 @@
+import { transformWhereQuery } from "payload/shared";
+//#region src/conditions/evaluate.ts
+const isNil = (value) => value === null || value === void 0;
+const toNumber = (value) => {
+	if (typeof value === "number") return Number.isFinite(value) ? value : void 0;
+	if (typeof value === "string" && value.trim() !== "") {
+		const next = Number(value);
+		return Number.isNaN(next) ? void 0 : next;
+	}
+};
+const toTime = (value) => {
+	if (value instanceof Date) return value.getTime();
+	if (typeof value === "string" && value.trim() !== "") {
+		const time = Date.parse(value);
+		return Number.isNaN(time) ? void 0 : time;
+	}
+};
+/** Strict, then numeric, then string equality, mirroring Payload's coerce-by-type-then-compare. */
+const valuesEqual = (answer, value) => {
+	if (answer === value) return true;
+	if (isNil(answer) || isNil(value)) return false;
+	const a = toNumber(answer);
+	const b = toNumber(value);
+	if (a !== void 0 && b !== void 0) return a === b;
+	return String(answer) === String(value);
+};
+const toList = (value) => {
+	if (Array.isArray(value)) return value;
+	if (typeof value === "string") return value.split(",").map((entry) => entry.trim());
+	return [value];
+};
+const ordered = (answer, value, compare) => {
+	const a = toNumber(answer) ?? toTime(answer);
+	const b = toNumber(value) ?? toTime(value);
+	if (a === void 0 || b === void 0) return false;
+	return compare(a, b);
+};
+/** Case-insensitive: every space-separated word in `value` is a substring of `answer` (Payload `like`). */
+const everyWord = (answer, value) => {
+	const haystack = String(answer).toLowerCase();
+	return String(value).toLowerCase().split(" ").filter((word) => word.length > 0).every((word) => haystack.includes(word));
+};
+const evaluateOperator = (operator, answer, value) => {
+	switch (operator) {
+		case "equals": return isNil(value) ? isNil(answer) : valuesEqual(answer, value);
+		case "not_equals": return isNil(value) ? !isNil(answer) : isNil(answer) || !valuesEqual(answer, value);
+		case "in": return toList(value).some((entry) => valuesEqual(answer, entry));
+		case "not_in": return isNil(answer) || !toList(value).some((entry) => valuesEqual(answer, entry));
+		case "exists": {
+			const present = !isNil(answer) && answer !== "" && !(Array.isArray(answer) && answer.length === 0);
+			return value === true || value === "true" ? present : !present;
+		}
+		case "greater_than": return ordered(answer, value, (a, b) => a > b);
+		case "greater_than_equal": return ordered(answer, value, (a, b) => a >= b);
+		case "less_than": return ordered(answer, value, (a, b) => a < b);
+		case "less_than_equal": return ordered(answer, value, (a, b) => a <= b);
+		case "like": return isNil(answer) ? false : everyWord(answer, value);
+		case "not_like": return isNil(answer) ? true : !everyWord(answer, value);
+		case "contains": return isNil(answer) ? false : String(answer).toLowerCase().includes(String(value).toLowerCase());
+		default: return false;
+	}
+};
+/**
+* Evaluate one `Where` node: every top-level key is ANDed. `or` is a disjunction of sub-conditions
+* (an empty `or` matches), `and` is a conjunction, and any other key is a field path whose
+* `{ operator: value }` constraints are ANDed. Recurses, so nested `or`/`and` groups are supported.
+*/
+const evaluateWhere = (where, answers) => Object.entries(where).every(([key, constraint]) => {
+	if (key === "or") {
+		const groups = Array.isArray(constraint) ? constraint : [];
+		return groups.length === 0 || groups.some((group) => evaluateWhere(group, answers));
+	}
+	if (key === "and") return (Array.isArray(constraint) ? constraint : []).every((group) => evaluateWhere(group, answers));
+	if (constraint == null || typeof constraint !== "object" || Array.isArray(constraint)) return false;
+	return Object.entries(constraint).every(([operator, value]) => evaluateOperator(operator, answers[key], value));
+});
+/**
+* Evaluate a serializable `Where`-shaped condition against a flat map of (already coerced) form answers.
+* An absent or empty condition matches (returns true). Operator semantics mirror Payload's query
+* adapters: coerce then compare; `not_equals`/`not_in` are null-inclusive; `exists` treats `''`/absent
+* as not-existing; `like` is case-insensitive and space-splits (every word must be a substring), and
+* `not_like` is its logical negation (at least one word absent); `contains` is a single case-insensitive
+* substring; comma-delimited `in`/`not_in` string values are split and trimmed. Geo (`near`/`within`/
+* `intersects`) and `all` are out of scope and evaluate to false. Isomorphic: no `req`/DB access, so the
+* renderer reuses it client-side.
+*/
+const evaluateCondition = (where, answers) => {
+	if (!where || Object.keys(where).length === 0) return true;
+	return evaluateWhere(transformWhereQuery(where), answers);
+};
+//#endregion
+export { evaluateCondition };
+
+//# sourceMappingURL=evaluate.js.map

package/dist/conditions/evaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.js","names":[],"sources":["../../src/conditions/evaluate.ts"],"sourcesContent":["import type { Operator, Where } from 'payload'\nimport { transformWhereQuery } from 'payload/shared'\n\nconst isNil = (value: unknown): boolean => value === null || value === undefined\n\nconst toNumber = (value: unknown): number | undefined => {\n\tif (typeof value === 'number') {\n\t\treturn Number.isFinite(value) ? value : undefined\n\t}\n\tif (typeof value === 'string' && value.trim() !== '') {\n\t\tconst next = Number(value)\n\t\treturn Number.isNaN(next) ? undefined : next\n\t}\n\treturn undefined\n}\n\nconst toTime = (value: unknown): number | undefined => {\n\tif (value instanceof Date) {\n\t\treturn value.getTime()\n\t}\n\tif (typeof value === 'string' && value.trim() !== '') {\n\t\tconst time = Date.parse(value)\n\t\treturn Number.isNaN(time) ? undefined : time\n\t}\n\treturn undefined\n}\n\n/** Strict, then numeric, then string equality, mirroring Payload's coerce-by-type-then-compare. */\nconst valuesEqual = (answer: unknown, value: unknown): boolean => {\n\tif (answer === value) {\n\t\treturn true\n\t}\n\tif (isNil(answer) || isNil(value)) {\n\t\treturn false\n\t}\n\tconst a = toNumber(answer)\n\tconst b = toNumber(value)\n\tif (a !== undefined && b !== undefined) {\n\t\treturn a === b\n\t}\n\treturn String(answer) === String(value)\n}\n\nconst toList = (value: unknown): unknown[] => {\n\tif (Array.isArray(value)) {\n\t\treturn value\n\t}\n\tif (typeof value === 'string') {\n\t\treturn value.split(',').map((entry) => entry.trim())\n\t}\n\treturn [value]\n}\n\nconst ordered = (\n\tanswer: unknown,\n\tvalue: unknown,\n\tcompare: (a: number, b: number) => boolean\n): boolean => {\n\tconst a = toNumber(answer) ?? toTime(answer)\n\tconst b = toNumber(value) ?? toTime(value)\n\tif (a === undefined || b === undefined) {\n\t\treturn false\n\t}\n\treturn compare(a, b)\n}\n\n/** Case-insensitive: every space-separated word in `value` is a substring of `answer` (Payload `like`). */\nconst everyWord = (answer: unknown, value: unknown): boolean => {\n\tconst haystack = String(answer).toLowerCase()\n\treturn String(value)\n\t\t.toLowerCase()\n\t\t.split(' ')\n\t\t.filter((word) => word.length > 0)\n\t\t.every((word) => haystack.includes(word))\n}\n\nconst evaluateOperator = (operator: Operator, answer: unknown, value: unknown): boolean => {\n\tswitch (operator) {\n\t\tcase 'equals':\n\t\t\treturn isNil(value) ? isNil(answer) : valuesEqual(answer, value)\n\t\tcase 'not_equals':\n\t\t\treturn isNil(value) ? !isNil(answer) : isNil(answer) || !valuesEqual(answer, value)\n\t\tcase 'in':\n\t\t\treturn toList(value).some((entry) => valuesEqual(answer, entry))\n\t\tcase 'not_in':\n\t\t\treturn isNil(answer) || !toList(value).some((entry) => valuesEqual(answer, entry))\n\t\tcase 'exists': {\n\t\t\t// Empty string and empty array both count as absent, so a repeater with no rows and an\n\t\t\t// unfilled text field are treated the same by a presence check.\n\t\t\tconst present =\n\t\t\t\t!isNil(answer) && answer !== '' && !(Array.isArray(answer) && answer.length === 0)\n\t\t\treturn value === true || value === 'true' ? present : !present\n\t\t}\n\t\tcase 'greater_than':\n\t\t\treturn ordered(answer, value, (a, b) => a > b)\n\t\tcase 'greater_than_equal':\n\t\t\treturn ordered(answer, value, (a, b) => a >= b)\n\t\tcase 'less_than':\n\t\t\treturn ordered(answer, value, (a, b) => a < b)\n\t\tcase 'less_than_equal':\n\t\t\treturn ordered(answer, value, (a, b) => a <= b)\n\t\tcase 'like':\n\t\t\treturn isNil(answer) ? false : everyWord(answer, value)\n\t\tcase 'not_like':\n\t\t\treturn isNil(answer) ? true : !everyWord(answer, value)\n\t\tcase 'contains':\n\t\t\treturn isNil(answer)\n\t\t\t\t? false\n\t\t\t\t: String(answer).toLowerCase().includes(String(value).toLowerCase())\n\t\tdefault:\n\t\t\treturn false\n\t}\n}\n\n/**\n * Evaluate one `Where` node: every top-level key is ANDed. `or` is a disjunction of sub-conditions\n * (an empty `or` matches), `and` is a conjunction, and any other key is a field path whose\n * `{ operator: value }` constraints are ANDed. Recurses, so nested `or`/`and` groups are supported.\n */\nconst evaluateWhere = (where: Where, answers: Record<string, unknown>): boolean =>\n\tObject.entries(where).every(([key, constraint]) => {\n\t\tif (key === 'or') {\n\t\t\tconst groups = (Array.isArray(constraint) ? constraint : []) as Where[]\n\t\t\treturn groups.length === 0 || groups.some((group) => evaluateWhere(group, answers))\n\t\t}\n\t\tif (key === 'and') {\n\t\t\tconst groups = (Array.isArray(constraint) ? constraint : []) as Where[]\n\t\t\treturn groups.every((group) => evaluateWhere(group, answers))\n\t\t}\n\t\tif (constraint == null || typeof constraint !== 'object' || Array.isArray(constraint)) {\n\t\t\treturn false\n\t\t}\n\t\treturn Object.entries(constraint as Record<string, unknown>).every(([operator, value]) =>\n\t\t\tevaluateOperator(operator as Operator, answers[key], value)\n\t\t)\n\t})\n\n/**\n * Evaluate a serializable `Where`-shaped condition against a flat map of (already coerced) form answers.\n * An absent or empty condition matches (returns true). Operator semantics mirror Payload's query\n * adapters: coerce then compare; `not_equals`/`not_in` are null-inclusive; `exists` treats `''`/absent\n * as not-existing; `like` is case-insensitive and space-splits (every word must be a substring), and\n * `not_like` is its logical negation (at least one word absent); `contains` is a single case-insensitive\n * substring; comma-delimited `in`/`not_in` string values are split and trimmed. Geo (`near`/`within`/\n * `intersects`) and `all` are out of scope and evaluate to false. Isomorphic: no `req`/DB access, so the\n * renderer reuses it client-side.\n */\nexport const evaluateCondition = (\n\twhere: Where | null | undefined,\n\tanswers: Record<string, unknown>\n): boolean => {\n\tif (!where || Object.keys(where).length === 0) {\n\t\treturn true\n\t}\n\treturn evaluateWhere(transformWhereQuery(where), answers)\n}\n"],"mappings":";;AAGA,MAAM,SAAS,UAA4B,UAAU,QAAQ,UAAU,KAAA;AAEvE,MAAM,YAAY,UAAuC;CACxD,IAAI,OAAO,UAAU,UACpB,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;CAEzC,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;EACrD,MAAM,OAAO,OAAO,KAAK;EACzB,OAAO,OAAO,MAAM,IAAI,IAAI,KAAA,IAAY;CACzC;AAED;AAEA,MAAM,UAAU,UAAuC;CACtD,IAAI,iBAAiB,MACpB,OAAO,MAAM,QAAQ;CAEtB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;EACrD,MAAM,OAAO,KAAK,MAAM,KAAK;EAC7B,OAAO,OAAO,MAAM,IAAI,IAAI,KAAA,IAAY;CACzC;AAED;;AAGA,MAAM,eAAe,QAAiB,UAA4B;CACjE,IAAI,WAAW,OACd,OAAO;CAER,IAAI,MAAM,MAAM,KAAK,MAAM,KAAK,GAC/B,OAAO;CAER,MAAM,IAAI,SAAS,MAAM;CACzB,MAAM,IAAI,SAAS,KAAK;CACxB,IAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAC5B,OAAO,MAAM;CAEd,OAAO,OAAO,MAAM,MAAM,OAAO,KAAK;AACvC;AAEA,MAAM,UAAU,UAA8B;CAC7C,IAAI,MAAM,QAAQ,KAAK,GACtB,OAAO;CAER,IAAI,OAAO,UAAU,UACpB,OAAO,MAAM,MAAM,GAAG,EAAE,KAAK,UAAU,MAAM,KAAK,CAAC;CAEpD,OAAO,CAAC,KAAK;AACd;AAEA,MAAM,WACL,QACA,OACA,YACa;CACb,MAAM,IAAI,SAAS,MAAM,KAAK,OAAO,MAAM;CAC3C,MAAM,IAAI,SAAS,KAAK,KAAK,OAAO,KAAK;CACzC,IAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAC5B,OAAO;CAER,OAAO,QAAQ,GAAG,CAAC;AACpB;;AAGA,MAAM,aAAa,QAAiB,UAA4B;CAC/D,MAAM,WAAW,OAAO,MAAM,EAAE,YAAY;CAC5C,OAAO,OAAO,KAAK,EACjB,YAAY,EACZ,MAAM,GAAG,EACT,QAAQ,SAAS,KAAK,SAAS,CAAC,EAChC,OAAO,SAAS,SAAS,SAAS,IAAI,CAAC;AAC1C;AAEA,MAAM,oBAAoB,UAAoB,QAAiB,UAA4B;CAC1F,QAAQ,UAAR;EACC,KAAK,UACJ,OAAO,MAAM,KAAK,IAAI,MAAM,MAAM,IAAI,YAAY,QAAQ,KAAK;EAChE,KAAK,cACJ,OAAO,MAAM,KAAK,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,MAAM,KAAK,CAAC,YAAY,QAAQ,KAAK;EACnF,KAAK,MACJ,OAAO,OAAO,KAAK,EAAE,MAAM,UAAU,YAAY,QAAQ,KAAK,CAAC;EAChE,KAAK,UACJ,OAAO,MAAM,MAAM,KAAK,CAAC,OAAO,KAAK,EAAE,MAAM,UAAU,YAAY,QAAQ,KAAK,CAAC;EAClF,KAAK,UAAU;GAGd,MAAM,UACL,CAAC,MAAM,MAAM,KAAK,WAAW,MAAM,EAAE,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW;GACjF,OAAO,UAAU,QAAQ,UAAU,SAAS,UAAU,CAAC;EACxD;EACA,KAAK,gBACJ,OAAO,QAAQ,QAAQ,QAAQ,GAAG,MAAM,IAAI,CAAC;EAC9C,KAAK,sBACJ,OAAO,QAAQ,QAAQ,QAAQ,GAAG,MAAM,KAAK,CAAC;EAC/C,KAAK,aACJ,OAAO,QAAQ,QAAQ,QAAQ,GAAG,MAAM,IAAI,CAAC;EAC9C,KAAK,mBACJ,OAAO,QAAQ,QAAQ,QAAQ,GAAG,MAAM,KAAK,CAAC;EAC/C,KAAK,QACJ,OAAO,MAAM,MAAM,IAAI,QAAQ,UAAU,QAAQ,KAAK;EACvD,KAAK,YACJ,OAAO,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,QAAQ,KAAK;EACvD,KAAK,YACJ,OAAO,MAAM,MAAM,IAChB,QACA,OAAO,MAAM,EAAE,YAAY,EAAE,SAAS,OAAO,KAAK,EAAE,YAAY,CAAC;EACrE,SACC,OAAO;CACT;AACD;;;;;;AAOA,MAAM,iBAAiB,OAAc,YACpC,OAAO,QAAQ,KAAK,EAAE,OAAO,CAAC,KAAK,gBAAgB;CAClD,IAAI,QAAQ,MAAM;EACjB,MAAM,SAAU,MAAM,QAAQ,UAAU,IAAI,aAAa,CAAC;EAC1D,OAAO,OAAO,WAAW,KAAK,OAAO,MAAM,UAAU,cAAc,OAAO,OAAO,CAAC;CACnF;CACA,IAAI,QAAQ,OAEX,QADgB,MAAM,QAAQ,UAAU,IAAI,aAAa,CAAC,GAC5C,OAAO,UAAU,cAAc,OAAO,OAAO,CAAC;CAE7D,IAAI,cAAc,QAAQ,OAAO,eAAe,YAAY,MAAM,QAAQ,UAAU,GACnF,OAAO;CAER,OAAO,OAAO,QAAQ,UAAqC,EAAE,OAAO,CAAC,UAAU,WAC9E,iBAAiB,UAAsB,QAAQ,MAAM,KAAK,CAC3D;AACD,CAAC;;;;;;;;;;;AAYF,MAAa,qBACZ,OACA,YACa;CACb,IAAI,CAAC,SAAS,OAAO,KAAK,KAAK,EAAE,WAAW,GAC3C,OAAO;CAER,OAAO,cAAc,oBAAoB,KAAK,GAAG,OAAO;AACzD"}

package/dist/conditions/fieldTypes.d.ts

@@ -0,0 +1,11 @@
+//#region src/conditions/fieldTypes.d.ts
+/**
+ * The condition input families the builder supports. A deliberate subset of Payload's field-condition
+ * types, restricted to the operators `evaluateCondition` implements (no geo/relationship in v1).
+ * `presence` is for values that only support an existence check (a file upload, a repeater), never a
+ * scalar comparison.
+ */
+type ConditionFieldType = 'text' | 'number' | 'select' | 'checkbox' | 'date' | 'presence';
+//#endregion
+export { ConditionFieldType };
+//# sourceMappingURL=fieldTypes.d.ts.map

package/dist/{fieldTypes-CzhhJXjg.js → conditions/fieldTypes.js}

@@ -37,7 +37,8 @@ const conditionOperators = {
 		...EQUALITY,
 		...ORDER,
 		...EXISTS
-	]
+	],
+	presence: [...EXISTS]
 };
 /** Default condition input for a stored value kind; a field type may override via its `conditionType`. */
 const defaultConditionType = (value) => {
@@ -46,6 +47,8 @@ const defaultConditionType = (value) => {
 		case "boolean": return "checkbox";
 		case "date": return "date";
 		case "text[]": return "select";
+		case "file":
+		case "repeater": return "presence";
 		default: return "text";
 	}
 };
@@ -83,6 +86,6 @@ const operatorValueShape = (operator) => {
 	return "scalar";
 };
 //#endregion
-export { operatorValueShape as a, operatorLabelKey as i, defaultConditionType as n, firstOperatorFor as r, conditionOperators as t };
+export { conditionOperators, defaultConditionType, firstOperatorFor, operatorLabelKey, operatorValueShape };
 
-//# sourceMappingURL=fieldTypes-CzhhJXjg.js.map
+//# sourceMappingURL=fieldTypes.js.map

package/dist/conditions/fieldTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldTypes.js","names":[],"sources":["../../src/conditions/fieldTypes.ts"],"sourcesContent":["import type { Operator } from 'payload'\nimport type { FormFieldValueKind } from '../fields/types'\n\n/**\n * The condition input families the builder supports. A deliberate subset of Payload's field-condition\n * types, restricted to the operators `evaluateCondition` implements (no geo/relationship in v1).\n * `presence` is for values that only support an existence check (a file upload, a repeater), never a\n * scalar comparison.\n */\nexport type ConditionFieldType = 'text' | 'number' | 'select' | 'checkbox' | 'date' | 'presence'\n\nconst EQUALITY: Operator[] = ['equals', 'not_equals']\nconst MEMBERSHIP: Operator[] = ['in', 'not_in']\nconst ORDER: Operator[] = ['greater_than', 'greater_than_equal', 'less_than', 'less_than_equal']\nconst TEXT_MATCH: Operator[] = ['like', 'not_like', 'contains']\nconst EXISTS: Operator[] = ['exists']\n\n/** Operators offered per condition type. Each is implemented by `evaluateCondition`. */\nexport const conditionOperators: Record<ConditionFieldType, Operator[]> = {\n\ttext: [...EQUALITY, ...MEMBERSHIP, ...TEXT_MATCH, ...EXISTS],\n\tnumber: [...EQUALITY, ...MEMBERSHIP, ...ORDER, ...EXISTS],\n\tselect: [...EQUALITY, ...MEMBERSHIP, ...EXISTS],\n\tcheckbox: [...EQUALITY, ...EXISTS],\n\tdate: [...EQUALITY, ...ORDER, ...EXISTS],\n\tpresence: [...EXISTS],\n}\n\n/** Default condition input for a stored value kind; a field type may override via its `conditionType`. */\nexport const defaultConditionType = (value: FormFieldValueKind): ConditionFieldType => {\n\tswitch (value) {\n\t\tcase 'number':\n\t\t\treturn 'number'\n\t\tcase 'boolean':\n\t\t\treturn 'checkbox'\n\t\tcase 'date':\n\t\t\treturn 'date'\n\t\tcase 'text[]':\n\t\t\treturn 'select'\n\t\tcase 'file':\n\t\tcase 'repeater':\n\t\t\t// Non-scalar values: a FileRef object or a row array cannot be compared with text/select\n\t\t\t// operators (they only stringify), so offer presence-only checks.\n\t\t\treturn 'presence'\n\t\tdefault:\n\t\t\treturn 'text'\n\t}\n}\n\n/**\n * The Payload `operators:*` i18n keys the builder uses for operator labels. A local literal union (not\n * imported from `@payloadcms/translations`, which this package never depends on); each member is a real\n * client translation key, so a value of this type is accepted by Payload's `i18n.t`.\n */\nexport type OperatorLabelKey =\n\t| 'operators:contains'\n\t| 'operators:equals'\n\t| 'operators:exists'\n\t| 'operators:isGreaterThan'\n\t| 'operators:isGreaterThanOrEqualTo'\n\t| 'operators:isIn'\n\t| 'operators:isLessThan'\n\t| 'operators:isLessThanOrEqualTo'\n\t| 'operators:isLike'\n\t| 'operators:isNotEqualTo'\n\t| 'operators:isNotIn'\n\t| 'operators:isNotLike'\n\nconst OPERATOR_LABEL_KEYS: Partial<Record<Operator, OperatorLabelKey>> = {\n\tequals: 'operators:equals',\n\tnot_equals: 'operators:isNotEqualTo',\n\tin: 'operators:isIn',\n\tnot_in: 'operators:isNotIn',\n\texists: 'operators:exists',\n\tgreater_than: 'operators:isGreaterThan',\n\tgreater_than_equal: 'operators:isGreaterThanOrEqualTo',\n\tless_than: 'operators:isLessThan',\n\tless_than_equal: 'operators:isLessThanOrEqualTo',\n\tlike: 'operators:isLike',\n\tnot_like: 'operators:isNotLike',\n\tcontains: 'operators:contains',\n}\n\n/**\n * The i18n key for an operator's label, in Payload's own `operators:*` namespace (always present in the\n * admin), so the builder reads native, localized operator labels without duplicating them in our i18n.\n * Keys mirror Payload's `WhereBuilder/field-types.tsx` operator labels. Every operator surfaced by\n * `conditionOperators` is mapped; the `operators:equals` fallback is unreachable for the offered\n * catalogs (no geo/`all` operator is ever presented) and exists only to keep the return type total.\n */\nexport const operatorLabelKey = (operator: Operator): OperatorLabelKey =>\n\tOPERATOR_LABEL_KEYS[operator] ?? 'operators:equals'\n\n/**\n * The first (default) operator a condition type offers. Every catalog leads with `equals`, so the\n * fallback is unreachable; it exists only to keep the return non-optional under `noUncheckedIndexedAccess`.\n */\nexport const firstOperatorFor = (type: ConditionFieldType): Operator =>\n\tconditionOperators[type][0] ?? 'equals'\n\n/** The value control an operator needs: a boolean toggle (`exists`), a list (`in`/`not_in`), or a scalar. */\nexport const operatorValueShape = (operator: Operator): 'boolean' | 'array' | 'scalar' => {\n\tif (operator === 'exists') {\n\t\treturn 'boolean'\n\t}\n\tif (operator === 'in' || operator === 'not_in') {\n\t\treturn 'array'\n\t}\n\treturn 'scalar'\n}\n"],"mappings":";AAWA,MAAM,WAAuB,CAAC,UAAU,YAAY;AACpD,MAAM,aAAyB,CAAC,MAAM,QAAQ;AAC9C,MAAM,QAAoB;CAAC;CAAgB;CAAsB;CAAa;AAAiB;AAC/F,MAAM,aAAyB;CAAC;CAAQ;CAAY;AAAU;AAC9D,MAAM,SAAqB,CAAC,QAAQ;;AAGpC,MAAa,qBAA6D;CACzE,MAAM;EAAC,GAAG;EAAU,GAAG;EAAY,GAAG;EAAY,GAAG;CAAM;CAC3D,QAAQ;EAAC,GAAG;EAAU,GAAG;EAAY,GAAG;EAAO,GAAG;CAAM;CACxD,QAAQ;EAAC,GAAG;EAAU,GAAG;EAAY,GAAG;CAAM;CAC9C,UAAU,CAAC,GAAG,UAAU,GAAG,MAAM;CACjC,MAAM;EAAC,GAAG;EAAU,GAAG;EAAO,GAAG;CAAM;CACvC,UAAU,CAAC,GAAG,MAAM;AACrB;;AAGA,MAAa,wBAAwB,UAAkD;CACtF,QAAQ,OAAR;EACC,KAAK,UACJ,OAAO;EACR,KAAK,WACJ,OAAO;EACR,KAAK,QACJ,OAAO;EACR,KAAK,UACJ,OAAO;EACR,KAAK;EACL,KAAK,YAGJ,OAAO;EACR,SACC,OAAO;CACT;AACD;AAqBA,MAAM,sBAAmE;CACxE,QAAQ;CACR,YAAY;CACZ,IAAI;CACJ,QAAQ;CACR,QAAQ;CACR,cAAc;CACd,oBAAoB;CACpB,WAAW;CACX,iBAAiB;CACjB,MAAM;CACN,UAAU;CACV,UAAU;AACX;;;;;;;;AASA,MAAa,oBAAoB,aAChC,oBAAoB,aAAa;;;;;AAMlC,MAAa,oBAAoB,SAChC,mBAAmB,MAAM,MAAM;;AAGhC,MAAa,sBAAsB,aAAuD;CACzF,IAAI,aAAa,UAChB,OAAO;CAER,IAAI,aAAa,QAAQ,aAAa,UACrC,OAAO;CAER,OAAO;AACR"}

package/dist/conditions/normalizeConditions.js

@@ -0,0 +1,61 @@
+import { conditionOperators } from "./fieldTypes.js";
+import { transformWhereQuery } from "payload/shared";
+//#region src/conditions/normalizeConditions.ts
+const isValidConstraint = (constraint, operandTypes) => {
+	if (constraint == null || typeof constraint !== "object") return false;
+	const field = Object.keys(constraint)[0];
+	if (!field) return false;
+	const type = operandTypes.get(field);
+	if (!type) return false;
+	const ops = constraint[field];
+	if (ops == null || typeof ops !== "object") return false;
+	const operator = Object.keys(ops)[0];
+	return Boolean(operator && conditionOperators[type].includes(operator));
+};
+/**
+* Canonicalize a `Where` to OR-of-ANDs and strip constraints whose operand field is unknown or whose
+* operator is invalid for that field's condition type. Returns undefined when nothing valid remains.
+*/
+const normalizeWhere = (raw, operandTypes) => {
+	if (raw == null || typeof raw !== "object" || Object.keys(raw).length === 0) return;
+	const canonical = transformWhereQuery(raw);
+	const groups = (Array.isArray(canonical.or) ? canonical.or : Array.isArray(canonical.and) ? [{ and: canonical.and }] : []).map((group) => {
+		return (Array.isArray(group.and) ? group.and : []).filter((constraint) => isValidConstraint(constraint, operandTypes));
+	}).filter((group) => group.length > 0);
+	return groups.length > 0 ? { or: groups.map((and) => ({ and })) } : void 0;
+};
+/**
+* Normalize every field's `visibleWhen`/`validateWhen` against the form's own field list. Canonicalizes
+* to OR-of-ANDs and strips constraints whose operand field is missing or whose operator is invalid for
+* that field's condition type, so stored conditions always match what `evaluateCondition` can run.
+*/
+/**
+* The operand-name -> condition-type map for a form's fields. A field is a valid condition operand
+* only when it has a name and its block type has a condition type (display-only types are excluded),
+* so a constraint referencing anything else is stripped, matching the client operand list.
+*/
+const buildOperandTypes = (fields, conditionTypes) => {
+	const operandTypes = /* @__PURE__ */ new Map();
+	for (const row of fields) {
+		const name = typeof row.name === "string" ? row.name.trim() : "";
+		const conditionType = conditionTypes[row.blockType];
+		if (name.length > 0 && conditionType) operandTypes.set(name, conditionType);
+	}
+	return operandTypes;
+};
+const normalizeFormConditions = (fields, conditionTypes) => {
+	const operandTypes = buildOperandTypes(fields, conditionTypes);
+	return fields.map((row) => {
+		const visibleWhen = normalizeWhere(row.visibleWhen, operandTypes);
+		const validateWhen = normalizeWhere(row.validateWhen, operandTypes);
+		return {
+			...row,
+			visibleWhen,
+			validateWhen
+		};
+	});
+};
+//#endregion
+export { buildOperandTypes, normalizeFormConditions, normalizeWhere };
+
+//# sourceMappingURL=normalizeConditions.js.map

package/dist/conditions/normalizeConditions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeConditions.js","names":[],"sources":["../../src/conditions/normalizeConditions.ts"],"sourcesContent":["import type { Where } from 'payload'\nimport { transformWhereQuery } from 'payload/shared'\nimport type { ConditionFieldType } from './fieldTypes'\nimport { conditionOperators } from './fieldTypes'\n\nexport type FieldRow = {\n\tblockType: string\n\tname?: string\n\tvisibleWhen?: unknown\n\tvalidateWhen?: unknown\n\t[key: string]: unknown\n}\n\nconst isValidConstraint = (\n\tconstraint: unknown,\n\toperandTypes: Map<string, ConditionFieldType>\n): boolean => {\n\tif (constraint == null || typeof constraint !== 'object') {\n\t\treturn false\n\t}\n\tconst field = Object.keys(constraint as object)[0]\n\tif (!field) {\n\t\treturn false\n\t}\n\tconst type = operandTypes.get(field)\n\tif (!type) {\n\t\treturn false\n\t}\n\tconst ops = (constraint as Record<string, unknown>)[field]\n\tif (ops == null || typeof ops !== 'object') {\n\t\treturn false\n\t}\n\tconst operator = Object.keys(ops as object)[0]\n\treturn Boolean(operator && (conditionOperators[type] as readonly string[]).includes(operator))\n}\n\n/**\n * Canonicalize a `Where` to OR-of-ANDs and strip constraints whose operand field is unknown or whose\n * operator is invalid for that field's condition type. Returns undefined when nothing valid remains.\n */\nexport const normalizeWhere = (\n\traw: unknown,\n\toperandTypes: Map<string, ConditionFieldType>\n): Where | undefined => {\n\tif (raw == null || typeof raw !== 'object' || Object.keys(raw as object).length === 0) {\n\t\treturn undefined\n\t}\n\tconst canonical = transformWhereQuery(raw as Where)\n\tconst or = Array.isArray(canonical.or)\n\t\t? canonical.or\n\t\t: Array.isArray(canonical.and)\n\t\t\t? [{ and: canonical.and }]\n\t\t\t: []\n\tconst groups = or\n\t\t.map((group) => {\n\t\t\tconst and = Array.isArray((group as Where).and) ? ((group as Where).and as unknown[]) : []\n\t\t\treturn and.filter((constraint) => isValidConstraint(constraint, operandTypes))\n\t\t})\n\t\t.filter((group) => group.length > 0)\n\treturn groups.length > 0 ? ({ or: groups.map((and) => ({ and })) } as Where) : undefined\n}\n\n/**\n * Normalize every field's `visibleWhen`/`validateWhen` against the form's own field list. Canonicalizes\n * to OR-of-ANDs and strips constraints whose operand field is missing or whose operator is invalid for\n * that field's condition type, so stored conditions always match what `evaluateCondition` can run.\n */\n/**\n * The operand-name -> condition-type map for a form's fields. A field is a valid condition operand\n * only when it has a name and its block type has a condition type (display-only types are excluded),\n * so a constraint referencing anything else is stripped, matching the client operand list.\n */\nexport const buildOperandTypes = (\n\tfields: FieldRow[],\n\tconditionTypes: Record<string, ConditionFieldType>\n): Map<string, ConditionFieldType> => {\n\tconst operandTypes = new Map<string, ConditionFieldType>()\n\tfor (const row of fields) {\n\t\tconst name = typeof row.name === 'string' ? row.name.trim() : ''\n\t\tconst conditionType = conditionTypes[row.blockType]\n\t\tif (name.length > 0 && conditionType) {\n\t\t\toperandTypes.set(name, conditionType)\n\t\t}\n\t}\n\treturn operandTypes\n}\n\nexport const normalizeFormConditions = (\n\tfields: FieldRow[],\n\tconditionTypes: Record<string, ConditionFieldType>\n): FieldRow[] => {\n\tconst operandTypes = buildOperandTypes(fields, conditionTypes)\n\treturn fields.map((row) => {\n\t\tconst visibleWhen = normalizeWhere(row.visibleWhen, operandTypes)\n\t\tconst validateWhen = normalizeWhere(row.validateWhen, operandTypes)\n\t\treturn { ...row, visibleWhen, validateWhen }\n\t})\n}\n"],"mappings":";;;AAaA,MAAM,qBACL,YACA,iBACa;CACb,IAAI,cAAc,QAAQ,OAAO,eAAe,UAC/C,OAAO;CAER,MAAM,QAAQ,OAAO,KAAK,UAAoB,EAAE;CAChD,IAAI,CAAC,OACJ,OAAO;CAER,MAAM,OAAO,aAAa,IAAI,KAAK;CACnC,IAAI,CAAC,MACJ,OAAO;CAER,MAAM,MAAO,WAAuC;CACpD,IAAI,OAAO,QAAQ,OAAO,QAAQ,UACjC,OAAO;CAER,MAAM,WAAW,OAAO,KAAK,GAAa,EAAE;CAC5C,OAAO,QAAQ,YAAa,mBAAmB,MAA4B,SAAS,QAAQ,CAAC;AAC9F;;;;;AAMA,MAAa,kBACZ,KACA,iBACuB;CACvB,IAAI,OAAO,QAAQ,OAAO,QAAQ,YAAY,OAAO,KAAK,GAAa,EAAE,WAAW,GACnF;CAED,MAAM,YAAY,oBAAoB,GAAY;CAMlD,MAAM,UALK,MAAM,QAAQ,UAAU,EAAE,IAClC,UAAU,KACV,MAAM,QAAQ,UAAU,GAAG,IAC1B,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,IACvB,CAAC,GAEH,KAAK,UAAU;EAEf,QADY,MAAM,QAAS,MAAgB,GAAG,IAAM,MAAgB,MAAoB,CAAC,GAC9E,QAAQ,eAAe,kBAAkB,YAAY,YAAY,CAAC;CAC9E,CAAC,EACA,QAAQ,UAAU,MAAM,SAAS,CAAC;CACpC,OAAO,OAAO,SAAS,IAAK,EAAE,IAAI,OAAO,KAAK,SAAS,EAAE,IAAI,EAAE,EAAE,IAAc,KAAA;AAChF;;;;;;;;;;;AAYA,MAAa,qBACZ,QACA,mBACqC;CACrC,MAAM,+BAAe,IAAI,IAAgC;CACzD,KAAK,MAAM,OAAO,QAAQ;EACzB,MAAM,OAAO,OAAO,IAAI,SAAS,WAAW,IAAI,KAAK,KAAK,IAAI;EAC9D,MAAM,gBAAgB,eAAe,IAAI;EACzC,IAAI,KAAK,SAAS,KAAK,eACtB,aAAa,IAAI,MAAM,aAAa;CAEtC;CACA,OAAO;AACR;AAEA,MAAa,2BACZ,QACA,mBACgB;CAChB,MAAM,eAAe,kBAAkB,QAAQ,cAAc;CAC7D,OAAO,OAAO,KAAK,QAAQ;EAC1B,MAAM,cAAc,eAAe,IAAI,aAAa,YAAY;EAChE,MAAM,eAAe,eAAe,IAAI,cAAc,YAAY;EAClE,OAAO;GAAE,GAAG;GAAK;GAAa;EAAa;CAC5C,CAAC;AACF"}

package/dist/conditions/types.d.ts

@@ -0,0 +1,8 @@
+import { Where as Where$1 } from "payload";
+
+//#region src/conditions/types.d.ts
+/** A serializable field-visibility/validation condition, stored in Payload's canonical `Where` shape. */
+type FieldCondition = Where$1;
+//#endregion
+export { FieldCondition };
+//# sourceMappingURL=types.d.ts.map

package/dist/consent/applyConsentStatements.d.ts

@@ -0,0 +1,14 @@
+import { ConsentStatements } from "./resolveConsentStatements.js";
+
+//#region src/consent/applyConsentStatements.d.ts
+/**
+ * Merge server-resolved statements onto the consent field instances they belong to, keyed by field
+ * name, without mutating the input. A field with no resolved statement (no source picked, or a key
+ * the host's sources no longer carry) is left untouched and renders without one.
+ */
+declare const applyConsentStatements: <T extends {
+  name?: string;
+}>(fields: T[], statements: ConsentStatements) => T[];
+//#endregion
+export { applyConsentStatements };
+//# sourceMappingURL=applyConsentStatements.d.ts.map

package/dist/consent/applyConsentStatements.js

@@ -0,0 +1,17 @@
+//#region src/consent/applyConsentStatements.ts
+/**
+* Merge server-resolved statements onto the consent field instances they belong to, keyed by field
+* name, without mutating the input. A field with no resolved statement (no source picked, or a key
+* the host's sources no longer carry) is left untouched and renders without one.
+*/
+const applyConsentStatements = (fields, statements) => fields.map((instance) => {
+	const resolved = instance.name ? statements[instance.name] : void 0;
+	return resolved ? {
+		...instance,
+		...resolved
+	} : instance;
+});
+//#endregion
+export { applyConsentStatements };
+
+//# sourceMappingURL=applyConsentStatements.js.map

package/dist/consent/applyConsentStatements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyConsentStatements.js","names":[],"sources":["../../src/consent/applyConsentStatements.ts"],"sourcesContent":["import type { ConsentStatements } from './resolveConsentStatements'\n\n/**\n * Merge server-resolved statements onto the consent field instances they belong to, keyed by field\n * name, without mutating the input. A field with no resolved statement (no source picked, or a key\n * the host's sources no longer carry) is left untouched and renders without one.\n */\nexport const applyConsentStatements = <T extends { name?: string }>(\n\tfields: T[],\n\tstatements: ConsentStatements\n): T[] =>\n\tfields.map((instance) => {\n\t\tconst resolved = instance.name ? statements[instance.name] : undefined\n\t\treturn resolved ? { ...instance, ...resolved } : instance\n\t})\n"],"mappings":";;;;;;AAOA,MAAa,0BACZ,QACA,eAEA,OAAO,KAAK,aAAa;CACxB,MAAM,WAAW,SAAS,OAAO,WAAW,SAAS,QAAQ,KAAA;CAC7D,OAAO,WAAW;EAAE,GAAG;EAAU,GAAG;CAAS,IAAI;AAClD,CAAC"}

package/dist/consent/captureConsent.d.ts

@@ -0,0 +1,55 @@
+import { FormFieldInstance } from "../submissions/types.js";
+import { ConsentSourceEntry, ConsentSourcePage } from "./types.js";
+import { Payload, PayloadRequest } from "payload";
+
+//#region src/consent/captureConsent.d.ts
+/** What a submission snapshots of the agreed wording. `'hash'` and `'text'` combine as `'both'`. */
+type ConsentSnapshotMode = 'hash' | 'text' | 'both' | false;
+type ConsentProof = {
+  agreed: boolean; /** The source `id` the field referenced; empty when the author never picked one. */
+  source: string;
+  page?: ConsentSourcePage;
+  versionRef?: string; /** The source label at submit time, so an audit names the statement even after a rename or delete. */
+  name?: string; /** sha256 of the statement plain text agreed to: tamper-evident and PII-free. */
+  statementHash?: string; /** Plain-text snapshot of the statement agreed to, for a human-readable audit. */
+  statementText?: string;
+  at: string;
+};
+/**
+ * The authoritative consent proof, built at submit time from the server's own view of the source
+ * (the field carries an id, never a statement, so there is nothing here the client could forge).
+ *
+ * Proof is id-based on purpose: it records which document was agreed to, so renaming, re-slugging,
+ * or re-routing the policy leaves every past proof intact and resolvable. `snapshot` additionally
+ * captures the agreed wording (a `statementHash`, the plain `statementText`, or both) plus the source
+ * `name`, so an audit shows exactly what was agreed to independent of later edits; `false` keeps the
+ * lean id-only proof. The snapshot is captured in every branch, including a refusal and a page-less
+ * source.
+ *
+ * Time-of-check/time-of-use: a visitor reads the wording resolved when the form loaded, but the
+ * snapshot here is re-resolved from the source at submit. If the source text changed in that window,
+ * the proof records the submit-time wording, not the exact bytes rendered earlier. This is
+ * deliberate, the server's live view is authoritative and the window is one visitor session; a form
+ * that must freeze the exact wording agreed to should version the source (drafts give a `versionRef`
+ * pinning the published version, below).
+ *
+ * `versionRef` is recorded only when the page's collection has drafts enabled, and then it is the
+ * published version document's own id. Versions without drafts get no `versionRef`, because there
+ * is no published/draft distinction to pin to: `_status` only exists under drafts, so a
+ * published-version lookup there matches nothing, and recording that as a version reference would
+ * be inventing one. Absent means absent, in both cases.
+ *
+ * `now` is injected by the caller (`new Date().toISOString()`) for testability.
+ */
+declare const captureConsent: (args: {
+  field: FormFieldInstance;
+  agreed: boolean; /** The host's resolved sources for this request (see `resolveConsentEntries`). */
+  entries: ConsentSourceEntry[];
+  payload: Payload;
+  req?: PayloadRequest;
+  now: string; /** What to snapshot of the agreed wording (plugin option `consent.snapshot`); defaults to `'both'`. */
+  snapshot?: ConsentSnapshotMode;
+}) => Promise<ConsentProof>;
+//#endregion
+export { ConsentProof, ConsentSnapshotMode, captureConsent };
+//# sourceMappingURL=captureConsent.d.ts.map

package/dist/consent/captureConsent.js

@@ -0,0 +1,73 @@
+import { textOfBody } from "../actions/body/textOfBody.js";
+import { resolvePublishedVersionRef } from "./resolvePublishedVersionRef.js";
+import { createHash } from "node:crypto";
+import { hasDraftsEnabled } from "payload/shared";
+//#region src/consent/captureConsent.ts
+/**
+* The authoritative consent proof, built at submit time from the server's own view of the source
+* (the field carries an id, never a statement, so there is nothing here the client could forge).
+*
+* Proof is id-based on purpose: it records which document was agreed to, so renaming, re-slugging,
+* or re-routing the policy leaves every past proof intact and resolvable. `snapshot` additionally
+* captures the agreed wording (a `statementHash`, the plain `statementText`, or both) plus the source
+* `name`, so an audit shows exactly what was agreed to independent of later edits; `false` keeps the
+* lean id-only proof. The snapshot is captured in every branch, including a refusal and a page-less
+* source.
+*
+* Time-of-check/time-of-use: a visitor reads the wording resolved when the form loaded, but the
+* snapshot here is re-resolved from the source at submit. If the source text changed in that window,
+* the proof records the submit-time wording, not the exact bytes rendered earlier. This is
+* deliberate, the server's live view is authoritative and the window is one visitor session; a form
+* that must freeze the exact wording agreed to should version the source (drafts give a `versionRef`
+* pinning the published version, below).
+*
+* `versionRef` is recorded only when the page's collection has drafts enabled, and then it is the
+* published version document's own id. Versions without drafts get no `versionRef`, because there
+* is no published/draft distinction to pin to: `_status` only exists under drafts, so a
+* published-version lookup there matches nothing, and recording that as a version reference would
+* be inventing one. Absent means absent, in both cases.
+*
+* `now` is injected by the caller (`new Date().toISOString()`) for testability.
+*/
+const captureConsent = async (args) => {
+	const source = typeof args.field.source === "string" ? args.field.source : "";
+	const entry = source ? args.entries.find((candidate) => candidate.id === source) : void 0;
+	const snapshot = args.snapshot ?? "both";
+	const withSnapshot = (proof) => {
+		if (!entry || snapshot === false) return proof;
+		if (typeof entry.name === "string" && entry.name.trim().length > 0) proof.name = entry.name.trim();
+		const text = textOfBody(entry.statement);
+		if (text.length > 0) {
+			if (snapshot === "hash" || snapshot === "both") proof.statementHash = createHash("sha256").update(text).digest("hex");
+			if (snapshot === "text" || snapshot === "both") proof.statementText = text;
+		}
+		return proof;
+	};
+	const page = entry?.page;
+	if (!page) return withSnapshot({
+		agreed: args.agreed,
+		source,
+		at: args.now
+	});
+	const collection = args.payload.collections[page.relationTo];
+	const versionRef = collection && hasDraftsEnabled(collection.config) ? await resolvePublishedVersionRef({
+		payload: args.payload,
+		collection: page.relationTo,
+		id: page.id,
+		req: args.req
+	}) : null;
+	return withSnapshot({
+		agreed: args.agreed,
+		source,
+		page: {
+			relationTo: page.relationTo,
+			id: page.id
+		},
+		...versionRef ? { versionRef } : {},
+		at: args.now
+	});
+};
+//#endregion
+export { captureConsent };
+
+//# sourceMappingURL=captureConsent.js.map