@10x-media/form-builder 0.1.0-beta.0 → 0.1.0-beta.10

package/dist/validation/runValidation.js

@@ -0,0 +1,90 @@
+import { keys } from "../translations/keys.js";
+import { resolveMessage, withTimeout } from "./message.js";
+//#region src/validation/runValidation.ts
+const RULE_TIMEOUT_MS = 5e3;
+const isEmpty = (value) => value == null || value === "" || Array.isArray(value) && value.length === 0;
+/** Build the per-instance message resolver: custom override (a literal template) or the localized default. */
+const makeMessage = (instance, defaultMessageKey, t) => {
+	const { blockType: _blockType, message: _message, ...params } = instance;
+	const template = typeof instance.message === "string" && instance.message.length > 0 ? instance.message : t(defaultMessageKey);
+	return (vars = {}) => resolveMessage(template, {
+		...params,
+		...vars
+	});
+};
+/**
+* The one validation engine, run per field on client and server. Order: required, the field type's
+* intrinsic validator, then each declarative rule instance. Server-only rules are skipped in client
+* mode; every rule is wrapped in try/catch + a timeout so a bad rule cannot crash or stall the submit
+* path (a thrown or timed-out rule fails open, logged on the server). Every returned message is a
+* blocking error.
+*/
+const runValidation = async (input) => {
+	const { field, fieldDefinition, value, fieldType, ruleRegistry, answers, locale, t, operation, event, mode, req, payload, formId, timeoutMs } = input;
+	const timeout = timeoutMs ?? RULE_TIMEOUT_MS;
+	const errors = [];
+	if (field.required && isEmpty(value)) return { errors: [t(keys.validationRequired)] };
+	if (isEmpty(value) && field.blockType !== "repeater") return { errors: [] };
+	if (fieldDefinition?.validate) try {
+		const ran = fieldDefinition.validate({
+			value,
+			config: field,
+			siblingData: answers,
+			data: answers,
+			locale,
+			t
+		});
+		const result = ran instanceof Promise ? await withTimeout(ran, timeout, true) : ran;
+		if (result !== true) errors.push(result);
+	} catch (error) {
+		req?.payload?.logger?.error?.({
+			err: error,
+			field: field.name
+		}, "form-builder intrinsic field validator threw");
+	}
+	if (fieldDefinition?.schema) try {
+		const outcome = await fieldDefinition.schema["~standard"].validate(value);
+		if (outcome.issues) for (const issue of outcome.issues) errors.push(issue.message);
+	} catch (error) {
+		req?.payload?.logger?.error?.({
+			err: error,
+			field: field.name
+		}, "form-builder field schema threw");
+	}
+	const instances = Array.isArray(field.validations) ? field.validations : [];
+	for (const instance of instances) {
+		const rule = ruleRegistry.get(instance.blockType);
+		if (!rule) continue;
+		if (mode === "client" && rule.client === false) continue;
+		const message = makeMessage(instance, rule.defaultMessage, t);
+		try {
+			const ran = rule.validate({
+				value,
+				params: instance,
+				siblingData: answers,
+				data: answers,
+				field,
+				fieldType,
+				operation,
+				event,
+				locale,
+				message,
+				req: mode === "server" ? req : void 0,
+				payload: mode === "server" ? payload : void 0,
+				formId: mode === "server" ? formId : void 0
+			});
+			const result = ran instanceof Promise ? await withTimeout(ran, timeout, true) : ran;
+			if (result !== true) errors.push(result);
+		} catch (error) {
+			req?.payload?.logger?.error?.({
+				err: error,
+				rule: rule.type
+			}, "form-builder validation rule threw");
+		}
+	}
+	return { errors };
+};
+//#endregion
+export { runValidation };
+
+//# sourceMappingURL=runValidation.js.map

package/dist/validation/runValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runValidation.js","names":[],"sources":["../../src/validation/runValidation.ts"],"sourcesContent":["import type { Payload, PayloadRequest } from 'payload'\nimport type { AnyFormFieldDefinition, Translate } from '../fields/types'\nimport type { FormFieldInstance } from '../submissions/types'\nimport { keys } from '../translations/keys'\nimport { resolveMessage, withTimeout } from './message'\nimport type { ValidationRuleRegistry } from './registry'\nimport type { MessageFn } from './types'\n\nconst RULE_TIMEOUT_MS = 5000\n\nexport type RunValidationInput = {\n\tfield: FormFieldInstance\n\tfieldDefinition?: AnyFormFieldDefinition\n\tvalue: unknown\n\tfieldType: string\n\truleRegistry: ValidationRuleRegistry\n\tanswers: Record<string, unknown>\n\tlocale: string\n\tt: Translate\n\toperation: 'create' | 'update'\n\tevent: 'onChange' | 'submit'\n\tmode: 'client' | 'server'\n\treq?: PayloadRequest\n\tpayload?: Payload\n\tformId?: number | string\n\t/** Override the per-rule timeout in ms. Defaults to RULE_TIMEOUT_MS; primarily for tests. */\n\ttimeoutMs?: number\n}\n\nexport type RunValidationResult = { errors: string[] }\n\nconst isEmpty = (value: unknown): boolean =>\n\tvalue == null || value === '' || (Array.isArray(value) && value.length === 0)\n\ntype RuleInstance = { blockType: string; message?: string } & Record<string, unknown>\n\n/** Build the per-instance message resolver: custom override (a literal template) or the localized default. */\nconst makeMessage = (\n\tinstance: RuleInstance,\n\tdefaultMessageKey: string,\n\tt: Translate\n): MessageFn => {\n\tconst { blockType: _blockType, message: _message, ...params } = instance\n\tconst template =\n\t\ttypeof instance.message === 'string' && instance.message.length > 0\n\t\t\t? instance.message\n\t\t\t: t(defaultMessageKey)\n\treturn (vars = {}) => resolveMessage(template, { ...params, ...vars })\n}\n\n/**\n * The one validation engine, run per field on client and server. Order: required, the field type's\n * intrinsic validator, then each declarative rule instance. Server-only rules are skipped in client\n * mode; every rule is wrapped in try/catch + a timeout so a bad rule cannot crash or stall the submit\n * path (a thrown or timed-out rule fails open, logged on the server). Every returned message is a\n * blocking error.\n */\nexport const runValidation = async (input: RunValidationInput): Promise<RunValidationResult> => {\n\tconst {\n\t\tfield,\n\t\tfieldDefinition,\n\t\tvalue,\n\t\tfieldType,\n\t\truleRegistry,\n\t\tanswers,\n\t\tlocale,\n\t\tt,\n\t\toperation,\n\t\tevent,\n\t\tmode,\n\t\treq,\n\t\tpayload,\n\t\tformId,\n\t\ttimeoutMs,\n\t} = input\n\tconst timeout = timeoutMs ?? RULE_TIMEOUT_MS\n\tconst errors: string[] = []\n\n\tif (field.required && isEmpty(value)) {\n\t\treturn { errors: [t(keys.validationRequired)] }\n\t}\n\t// Repeaters coerced to [] must reach fieldDefinition.validate so minRows is enforced;\n\t// all other empty fields have no intrinsic rules to run.\n\tif (isEmpty(value) && field.blockType !== 'repeater') {\n\t\treturn { errors: [] }\n\t}\n\n\tif (fieldDefinition?.validate) {\n\t\ttry {\n\t\t\tconst ran = fieldDefinition.validate({\n\t\t\t\tvalue,\n\t\t\t\tconfig: field,\n\t\t\t\tsiblingData: answers,\n\t\t\t\tdata: answers,\n\t\t\t\tlocale,\n\t\t\t\tt,\n\t\t\t})\n\t\t\tconst result = ran instanceof Promise ? await withTimeout(ran, timeout, true) : ran\n\t\t\tif (result !== true) {\n\t\t\t\terrors.push(result)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\treq?.payload?.logger?.error?.(\n\t\t\t\t{ err: error, field: field.name },\n\t\t\t\t'form-builder intrinsic field validator threw'\n\t\t\t)\n\t\t}\n\t}\n\n\tif (fieldDefinition?.schema) {\n\t\ttry {\n\t\t\tconst outcome = await fieldDefinition.schema['~standard'].validate(value)\n\t\t\tif (outcome.issues) {\n\t\t\t\tfor (const issue of outcome.issues) {\n\t\t\t\t\terrors.push(issue.message)\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (error) {\n\t\t\treq?.payload?.logger?.error?.(\n\t\t\t\t{ err: error, field: field.name },\n\t\t\t\t'form-builder field schema threw'\n\t\t\t)\n\t\t}\n\t}\n\n\tconst instances = (Array.isArray(field.validations) ? field.validations : []) as RuleInstance[]\n\tfor (const instance of instances) {\n\t\tconst rule = ruleRegistry.get(instance.blockType)\n\t\tif (!rule) {\n\t\t\tcontinue\n\t\t}\n\t\tif (mode === 'client' && rule.client === false) {\n\t\t\tcontinue\n\t\t}\n\t\tconst message = makeMessage(instance, rule.defaultMessage, t)\n\t\ttry {\n\t\t\tconst ran = rule.validate({\n\t\t\t\tvalue,\n\t\t\t\tparams: instance,\n\t\t\t\tsiblingData: answers,\n\t\t\t\tdata: answers,\n\t\t\t\tfield,\n\t\t\t\tfieldType,\n\t\t\t\toperation,\n\t\t\t\tevent,\n\t\t\t\tlocale,\n\t\t\t\tmessage,\n\t\t\t\treq: mode === 'server' ? req : undefined,\n\t\t\t\tpayload: mode === 'server' ? payload : undefined,\n\t\t\t\tformId: mode === 'server' ? formId : undefined,\n\t\t\t})\n\t\t\tconst result = ran instanceof Promise ? await withTimeout(ran, timeout, true) : ran\n\t\t\tif (result !== true) {\n\t\t\t\terrors.push(result)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\treq?.payload?.logger?.error?.(\n\t\t\t\t{ err: error, rule: rule.type },\n\t\t\t\t'form-builder validation rule threw'\n\t\t\t)\n\t\t}\n\t}\n\n\treturn { errors }\n}\n"],"mappings":";;;AAQA,MAAM,kBAAkB;AAuBxB,MAAM,WAAW,UAChB,SAAS,QAAQ,UAAU,MAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW;;AAK5E,MAAM,eACL,UACA,mBACA,MACe;CACf,MAAM,EAAE,WAAW,YAAY,SAAS,UAAU,GAAG,WAAW;CAChE,MAAM,WACL,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,SAAS,IAC/D,SAAS,UACT,EAAE,iBAAiB;CACvB,QAAQ,OAAO,CAAC,MAAM,eAAe,UAAU;EAAE,GAAG;EAAQ,GAAG;CAAK,CAAC;AACtE;;;;;;;;AASA,MAAa,gBAAgB,OAAO,UAA4D;CAC/F,MAAM,EACL,OACA,iBACA,OACA,WACA,cACA,SACA,QACA,GACA,WACA,OACA,MACA,KACA,SACA,QACA,cACG;CACJ,MAAM,UAAU,aAAa;CAC7B,MAAM,SAAmB,CAAC;CAE1B,IAAI,MAAM,YAAY,QAAQ,KAAK,GAClC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,kBAAkB,CAAC,EAAE;CAI/C,IAAI,QAAQ,KAAK,KAAK,MAAM,cAAc,YACzC,OAAO,EAAE,QAAQ,CAAC,EAAE;CAGrB,IAAI,iBAAiB,UACpB,IAAI;EACH,MAAM,MAAM,gBAAgB,SAAS;GACpC;GACA,QAAQ;GACR,aAAa;GACb,MAAM;GACN;GACA;EACD,CAAC;EACD,MAAM,SAAS,eAAe,UAAU,MAAM,YAAY,KAAK,SAAS,IAAI,IAAI;EAChF,IAAI,WAAW,MACd,OAAO,KAAK,MAAM;CAEpB,SAAS,OAAO;EACf,KAAK,SAAS,QAAQ,QACrB;GAAE,KAAK;GAAO,OAAO,MAAM;EAAK,GAChC,8CACD;CACD;CAGD,IAAI,iBAAiB,QACpB,IAAI;EACH,MAAM,UAAU,MAAM,gBAAgB,OAAO,aAAa,SAAS,KAAK;EACxE,IAAI,QAAQ,QACX,KAAK,MAAM,SAAS,QAAQ,QAC3B,OAAO,KAAK,MAAM,OAAO;CAG5B,SAAS,OAAO;EACf,KAAK,SAAS,QAAQ,QACrB;GAAE,KAAK;GAAO,OAAO,MAAM;EAAK,GAChC,iCACD;CACD;CAGD,MAAM,YAAa,MAAM,QAAQ,MAAM,WAAW,IAAI,MAAM,cAAc,CAAC;CAC3E,KAAK,MAAM,YAAY,WAAW;EACjC,MAAM,OAAO,aAAa,IAAI,SAAS,SAAS;EAChD,IAAI,CAAC,MACJ;EAED,IAAI,SAAS,YAAY,KAAK,WAAW,OACxC;EAED,MAAM,UAAU,YAAY,UAAU,KAAK,gBAAgB,CAAC;EAC5D,IAAI;GACH,MAAM,MAAM,KAAK,SAAS;IACzB;IACA,QAAQ;IACR,aAAa;IACb,MAAM;IACN;IACA;IACA;IACA;IACA;IACA;IACA,KAAK,SAAS,WAAW,MAAM,KAAA;IAC/B,SAAS,SAAS,WAAW,UAAU,KAAA;IACvC,QAAQ,SAAS,WAAW,SAAS,KAAA;GACtC,CAAC;GACD,MAAM,SAAS,eAAe,UAAU,MAAM,YAAY,KAAK,SAAS,IAAI,IAAI;GAChF,IAAI,WAAW,MACd,OAAO,KAAK,MAAM;EAEpB,SAAS,OAAO;GACf,KAAK,SAAS,QAAQ,QACrB;IAAE,KAAK;IAAO,MAAM,KAAK;GAAK,GAC9B,oCACD;EACD;CACD;CAEA,OAAO,EAAE,OAAO;AACjB"}

package/dist/validation/types.d.ts

@@ -0,0 +1,70 @@
+import { FormFieldInstance } from "../submissions/types.js";
+import { Field, Payload, PayloadRequest } from "payload";
+
+//#region src/validation/types.d.ts
+/** A rule outcome: pass (`true`) or a blocking error message. */
+type ValidationRuleResult = true | string;
+/** Resolves this rule instance's message (custom override or localized default) with `{var}` interpolation. */
+type MessageFn = (vars?: Record<string, unknown>) => string;
+/** Resolved per-instance rule params (loose at the DB boundary, narrowed by the author's generic). */
+type ValidationParams = Record<string, unknown>;
+type ValidationRuleValidateArgs<TParams extends ValidationParams, TValue, TData extends Record<string, unknown> = Record<string, unknown>> = {
+  value: TValue | null | undefined;
+  params: TParams;
+  siblingData: TData;
+  data: TData;
+  field: FormFieldInstance;
+  fieldType: string;
+  operation: 'create' | 'update';
+  event: 'onChange' | 'submit';
+  locale: string;
+  message: MessageFn; /** Server only. Absent in the client (req-less) context, so a server-only rule cannot run there. */
+  req?: PayloadRequest;
+  payload?: Payload; /** Server only. The form being submitted, for form-scoped lookups (e.g. notAlreadySubmitted). */
+  formId?: number | string;
+};
+type ValidationRuleValidate<TParams extends ValidationParams, TValue, TData extends Record<string, unknown> = Record<string, unknown>> = (args: ValidationRuleValidateArgs<TParams, TValue, TData>) => Promise<ValidationRuleResult> | ValidationRuleResult;
+/**
+ * A validation rule type, authored once. `params` is a Payload `Field[]` rendered in the per-field
+ * constraint list; `validate` returns `true | string`. `client` defaults from
+ * whether the rule is pure (a rule that is async or uses `req`/`payload` must set `client: false`).
+ */
+type ValidationRuleDefinition<TParams extends ValidationParams = ValidationParams, TValue = unknown, TData extends Record<string, unknown> = Record<string, unknown>> = {
+  type: string;
+  label: string;
+  description?: string; /** Field type slugs this rule may be added to. Omit for all field types. */
+  appliesTo?: string[];
+  params?: Field[];
+  defaultMessage: string; /** Runs client-side too. Defaults to `true`; set `false` for async or `req`/`payload`-using rules. */
+  client?: boolean;
+  validate: ValidationRuleValidate<TParams, TValue, TData>;
+};
+/** Erased shape stored in the heterogeneous registry; params re-narrow per matched rule at execution. */
+type AnyValidationRuleValidate = (args: {
+  value: unknown;
+  params: ValidationParams;
+  siblingData: Record<string, unknown>;
+  data: Record<string, unknown>;
+  field: FormFieldInstance;
+  fieldType: string;
+  operation: 'create' | 'update';
+  event: 'onChange' | 'submit';
+  locale: string;
+  message: MessageFn;
+  req?: PayloadRequest;
+  payload?: Payload;
+  formId?: number | string;
+}) => Promise<ValidationRuleResult> | ValidationRuleResult;
+type AnyValidationRuleDefinition = {
+  type: string;
+  label: string;
+  description?: string;
+  appliesTo?: string[];
+  params?: Field[];
+  defaultMessage: string;
+  client?: boolean;
+  validate: AnyValidationRuleValidate;
+};
+//#endregion
+export { AnyValidationRuleDefinition, ValidationParams, ValidationRuleDefinition, ValidationRuleResult };
+//# sourceMappingURL=types.d.ts.map

package/dist/validation/validateUrl.js

@@ -0,0 +1,22 @@
+import { keys } from "../translations/keys.js";
+import { asTranslate } from "../translations/server.js";
+//#region src/validation/validateUrl.ts
+/**
+* Payload field validator for URL config fields (signed-webhook `url`, response redirect `url`):
+* unset is fine (the consumer enforces presence where it matters), otherwise the value must parse
+* as an absolute http(s) URL.
+*/
+const validateUrl = (value, { req }) => {
+	if (typeof value !== "string" || value.length === 0) return true;
+	let parsed;
+	try {
+		parsed = new URL(value);
+	} catch {
+		return asTranslate(req.t)(keys.validationUrlInvalid);
+	}
+	return parsed.protocol === "http:" || parsed.protocol === "https:" ? true : asTranslate(req.t)(keys.validationUrlInvalid);
+};
+//#endregion
+export { validateUrl };
+
+//# sourceMappingURL=validateUrl.js.map

package/dist/validation/validateUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateUrl.js","names":[],"sources":["../../src/validation/validateUrl.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\nimport { keys } from '../translations/keys'\nimport { asTranslate } from '../translations/server'\n\n/**\n * Payload field validator for URL config fields (signed-webhook `url`, response redirect `url`):\n * unset is fine (the consumer enforces presence where it matters), otherwise the value must parse\n * as an absolute http(s) URL.\n */\nexport const validateUrl = (\n\tvalue: unknown,\n\t{ req }: { data?: unknown; req: PayloadRequest }\n): string | true => {\n\tif (typeof value !== 'string' || value.length === 0) {\n\t\treturn true\n\t}\n\tlet parsed: URL\n\ttry {\n\t\tparsed = new URL(value)\n\t} catch {\n\t\treturn asTranslate(req.t)(keys.validationUrlInvalid)\n\t}\n\treturn parsed.protocol === 'http:' || parsed.protocol === 'https:'\n\t\t? true\n\t\t: asTranslate(req.t)(keys.validationUrlInvalid)\n}\n"],"mappings":";;;;;;;;AASA,MAAa,eACZ,OACA,EAAE,UACiB;CACnB,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GACjD,OAAO;CAER,IAAI;CACJ,IAAI;EACH,SAAS,IAAI,IAAI,KAAK;CACvB,QAAQ;EACP,OAAO,YAAY,IAAI,CAAC,EAAE,KAAK,oBAAoB;CACpD;CACA,OAAO,OAAO,aAAa,WAAW,OAAO,aAAa,WACvD,OACA,YAAY,IAAI,CAAC,EAAE,KAAK,oBAAoB;AAChD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@10x-media/form-builder",
-  "version": "0.1.0-beta.0",
+  "version": "0.1.0-beta.10",
   "description": "End-to-end forms platform for Payload: author, validate, render, collect, aggregate, and act.",
   "license": "MIT",
   "repository": {
@@ -62,19 +62,21 @@
     "LICENSE"
   ],
   "peerDependencies": {
-    "@payloadcms/ui": "^3.82.0",
-    "payload": "^3.82.0",
+    "@payloadcms/ui": "^3.83.0",
+    "payload": "^3.83.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
+  "dependencies": {
+    "@standard-schema/spec": "^1.0.0"
+  },
   "devDependencies": {
-    "shadcn": "^2.4.0",
     "@axe-core/playwright": "^4.11.3",
     "@payloadcms/db-mongodb": "3.85.0",
     "@payloadcms/db-postgres": "3.85.0",
+    "@payloadcms/richtext-lexical": "3.85.0",
     "@payloadcms/ui": "3.85.0",
     "@playwright/test": "1.60.0",
-    "@standard-schema/spec": "^1.0.0",
     "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/react": "^16.1.0",
     "@types/node": "22.19.19",
@@ -82,16 +84,19 @@
     "@types/react-dom": "19.2.3",
     "axe-core": "^4.12.1",
     "jsdom": "^25.0.1",
+    "msw": "^2.14.6",
     "payload": "3.85.0",
     "playwright": "1.60.0",
     "react": "19.2.6",
     "react-dom": "19.2.6",
+    "shadcn": "^2.4.0",
     "tsdown": "0.22.1",
     "typescript": "5.9.3",
     "vitest": "4.1.7",
     "@10x-media/payload-test-harness": "0.0.0",
+    "@10x-media/vitest-config": "0.0.0",
     "@10x-media/tsconfig": "0.0.0",
-    "@10x-media/vitest-config": "0.0.0"
+    "@10x-media/tsdown-config": "0.0.0"
   },
   "publishConfig": {
     "access": "public"
@@ -105,7 +110,7 @@
     "test": "vitest run",
     "test:unit": "vitest run src",
     "test:int": "vitest run tests/int",
-    "test:matrix": "DB_MATRIX=mongo vitest run tests/int/matrix.int.spec.ts && DB_MATRIX=postgres vitest run tests/int/matrix.int.spec.ts",
+    "test:matrix": "DB_MATRIX=mongo vitest run tests/int/matrix.int.spec.ts tests/int/messageResponse.int.spec.ts tests/int/pollAutoClose.int.spec.ts && DB_MATRIX=postgres vitest run tests/int/matrix.int.spec.ts tests/int/messageResponse.int.spec.ts tests/int/pollAutoClose.int.spec.ts",
     "test:container": "TEST_DB=container DB_MATRIX=mongo vitest run tests/int/matrix.int.spec.ts && TEST_DB=container DB_MATRIX=postgres vitest run tests/int/matrix.int.spec.ts",
     "test:e2e": "bash scripts/e2e.sh",
     "dev": "pnpm --filter @10x-media/form-builder-dev dev",

package/styles/form-builder.css

@@ -7,37 +7,37 @@
 	gap: 1rem;
 }
 
-.fb-form--grid > [data-width='full'] {
+.fb-form--grid > [data-width="full"] {
 	grid-column: span 6;
 }
-.fb-form--grid > [data-width='half'] {
+.fb-form--grid > [data-width="half"] {
 	grid-column: span 6;
 }
-.fb-form--grid > [data-width='third'] {
+.fb-form--grid > [data-width="third"] {
 	grid-column: span 6;
 }
-.fb-form--grid > [data-width='twoThirds'] {
+.fb-form--grid > [data-width="twoThirds"] {
 	grid-column: span 6;
 }
 
 @container (min-width: 30rem) {
-	.fb-form--grid > [data-width='half'] {
+	.fb-form--grid > [data-width="half"] {
 		grid-column: span 3;
 	}
-	.fb-form--grid > [data-width='third'] {
+	.fb-form--grid > [data-width="third"] {
 		grid-column: span 2;
 	}
-	.fb-form--grid > [data-width='twoThirds'] {
+	.fb-form--grid > [data-width="twoThirds"] {
 		grid-column: span 4;
 	}
 }
 
 /* Presentations: density + overlay surfaces (page/inline carry no chrome). */
 
-.fb-form-root[data-fb-density='compact'] .fb-form--grid {
+.fb-form-root[data-fb-density="compact"] .fb-form--grid {
 	gap: 0.5rem;
 }
-.fb-form-root[data-fb-presentation='page'] {
+.fb-form-root[data-fb-presentation="page"] {
 	max-width: 40rem;
 	margin-inline: auto;
 }
@@ -52,7 +52,7 @@
 	background: var(--fb-surface, #fff);
 	overflow: auto;
 }
-[data-fb-dialog='modal'] {
+[data-fb-dialog="modal"] {
 	inset: 50% auto auto 50%;
 	transform: translate(-50%, -50%);
 	width: min(32rem, calc(100vw - 2rem));
@@ -60,7 +60,7 @@
 	border-radius: 0.5rem;
 	padding: 1.5rem;
 }
-[data-fb-dialog='drawer'] {
+[data-fb-dialog="drawer"] {
 	inset: 0 0 0 auto;
 	width: min(28rem, 100vw);
 	max-height: 100dvh;
@@ -101,6 +101,16 @@
 	height: 100%;
 	background: var(--fb-results-fill, currentColor);
 }
+.fb-results__bucket--winner {
+	font-weight: 600;
+}
+.fb-results__winner-badge {
+	margin-inline-start: 0.375rem;
+	font-size: 0.75em;
+	text-transform: uppercase;
+	letter-spacing: 0.05em;
+	opacity: 0.7;
+}
 .fb-results__total {
 	margin-block-start: 0.5rem;
 	opacity: 0.7;

package/dist/constants-B-BUfetP.d.ts

@@ -1,288 +0,0 @@
-import { n as AnyFormFieldDefinition } from "./fieldTypes-B8jkNRob.js";
-import { Field, Payload, PayloadRequest, Where } from "payload";
-
-//#region src/submissions/types.d.ts
-/** A single answered field: the field's machine name and its typed value. */
-type SubmissionValue = {
-  field: string;
-  value: unknown;
-};
-/** A localized, self-describing snapshot of an answered field, taken at submit time. */
-type SubmissionDescriptor = {
-  field: string;
-  label: string;
-  fieldType: string;
-  optionLabels?: Record<string, string>;
-};
-/** A per-field validation failure (`path` is the field name, for renderer error mapping). */
-type SubmissionFieldError = {
-  path: string;
-  message: string;
-};
-/** A field instance as stored in a form's `fields` blocks array (shared config plus type-specific keys). */
-type FormFieldInstance = {
-  blockType: string;
-  name: string;
-  label?: string;
-  required?: boolean;
-  visibleWhen?: Where;
-  validateWhen?: Where;
-  [key: string]: unknown;
-};
-//#endregion
-//#region src/aggregation/types.d.ts
-/** Which submission statuses to count. `complete` (default) excludes partials; `all` counts everything. */
-type SubmissionStatusFilter = 'complete' | 'partial' | 'all';
-/** One answer option (or distinct value) with its tally. */
-type AggregationBucket = {
-  /** The answer value, stringified (the grouping key). */value: string; /** Display label: current option label, else the submitted snapshot label, else the raw value. */
-  label: string;
-  count: number; /** Share of respondents, 0-100, rounded to one decimal. Can sum past 100 for multi-value fields. */
-  percentage: number;
-};
-/** Aggregated responses for one field across a form's submissions. */
-type FieldAggregation = {
-  field: string;
-  label?: string;
-  fieldType?: string; /** Respondents: submissions with a non-empty answer for this field. The percentage denominator. */
-  total: number;
-  buckets: AggregationBucket[]; /** True when the `maxSubmissions` cap was hit, so the tallies are a (large) sample, not the full set. */
-  truncated: boolean;
-};
-/** The slice of a submission the reducer reads. */
-type AggregationRow = {
-  values?: SubmissionValue[];
-  descriptors?: SubmissionDescriptor[];
-};
-/** Field metadata the reducer needs to label and order buckets, derived from the live form definition. */
-type FieldMeta = {
-  field: string;
-  label?: string;
-  fieldType?: string; /** Ordered known options with current labels; drives bucket order and label resolution. */
-  options?: {
-    value: string;
-    label: string;
-  }[];
-};
-//#endregion
-//#region src/calc/types.d.ts
-/** A serializable, safe-by-construction calculation expression. No strings are parsed; the evaluator tree-walks this closed node set (never `eval`). */
-type CalcExpression = {
-  type: 'lit';
-  value: number;
-} | {
-  type: 'ref';
-  field: string;
-} | {
-  type: 'op';
-  op: '+' | '-' | '*' | '/' | '%';
-  left: CalcExpression;
-  right: CalcExpression;
-} | {
-  type: 'neg';
-  operand: CalcExpression;
-} | {
-  type: 'fn';
-  fn: 'min' | 'max' | 'round' | 'abs' | 'ceil' | 'floor';
-  args: CalcExpression[];
-} | {
-  type: 'weight';
-  field: string;
-  weights: Record<string, number>;
-};
-//#endregion
-//#region src/calc/computeCalcFields.d.ts
-/** Returns the calc expression if the field carries one (non-null object), otherwise undefined. */
-declare const calcExpressionOf: (field: FormFieldInstance) => CalcExpression | undefined;
-/**
- * Returns answers with every calc field's value derived from its expression,
- * folded in declaration order so a calc may reference an earlier calc's result.
- * Identity when no field carries an expression.
- */
-declare const computeCalcFields: (fields: FormFieldInstance[], answers: Record<string, unknown>) => Record<string, unknown>;
-//#endregion
-//#region src/calc/evaluate.d.ts
-/** Evaluate a calc expression against form answers. Total + safe: no `eval`, always finite, div/mod by zero -> 0, missing ref -> 0, depth-guarded. Isomorphic (client + server). */
-declare const evaluateCalc: (expr: CalcExpression | null | undefined, answers: Record<string, unknown>) => number;
-//#endregion
-//#region src/conditions/evaluate.d.ts
-/**
- * Evaluate a serializable `Where`-shaped condition against a flat map of (already coerced) form answers.
- * An absent or empty condition matches (returns true). Operator semantics mirror Payload's query
- * adapters: coerce then compare; `not_equals`/`not_in` are null-inclusive; `exists` treats `''`/absent
- * as not-existing; `like` is case-insensitive and space-splits (every word must be a substring), and
- * `not_like` is its logical negation (at least one word absent); `contains` is a single case-insensitive
- * substring; comma-delimited `in`/`not_in` string values are split and trimmed. Geo (`near`/`within`/
- * `intersects`) and `all` are out of scope and evaluate to false. Isomorphic: no `req`/DB access, so the
- * renderer reuses it client-side.
- */
-declare const evaluateCondition: (where: Where | null | undefined, answers: Record<string, unknown>) => boolean;
-//#endregion
-//#region src/fields/registry.d.ts
-type FieldTypeRegistry = Map<string, AnyFormFieldDefinition>;
-/** Per-type opt-in: `false` removes a built-in, `true` keeps it, an object adds a new type or replaces one. */
-type FieldTypeOption = boolean | AnyFormFieldDefinition;
-type FieldTypesConfig = Record<string, FieldTypeOption>;
-//#endregion
-//#region src/prefill/valuesFromSearchParams.d.ts
-type PrefillOptions = {
-  /** Map a query-param name to a field name. Unmapped params use their own name. */map?: Record<string, string>; /** If set, only these field names may be prefilled. */
-  allow?: string[]; /** These field names may never be prefilled. */
-  deny?: string[];
-};
-/**
- * Map URL/query params to typed initial values for KNOWN fields only, coerced by each field's value
- * kind. Unknown, denied, or un-allowed params are ignored; invalid numbers are dropped. Prefilled
- * values are never trusted -- they still validate on submit. Pass the result to `<Form initialValues>`.
- */
-declare const valuesFromSearchParams: (params: URLSearchParams | Record<string, string>, fields: FormFieldInstance[], registry: FieldTypeRegistry, options?: PrefillOptions) => Record<string, unknown>;
-//#endregion
-//#region src/events/types.d.ts
-type FormEventBase = {
-  formId: string;
-  at: string;
-};
-type FormEvent = (FormEventBase & {
-  type: 'form.viewed';
-}) | (FormEventBase & {
-  type: 'form.started';
-}) | (FormEventBase & {
-  type: 'step.viewed';
-  stepId: string;
-}) | (FormEventBase & {
-  type: 'step.completed';
-  stepId: string;
-}) | (FormEventBase & {
-  type: 'field.errored';
-  field: string;
-  message: string;
-}) | (FormEventBase & {
-  type: 'form.abandoned';
-}) | (FormEventBase & {
-  type: 'submission.created';
-  submissionId?: string;
-});
-type FormEventSink = {
-  emit: (event: FormEvent) => Promise<void> | void;
-};
-//#endregion
-//#region src/validation/types.d.ts
-type ValidationSeverity = 'error' | 'warning';
-/** A rule outcome: pass, a plain error string, or an explicit message + severity. */
-type ValidationRuleResult = true | string | {
-  message: string;
-  severity?: ValidationSeverity;
-};
-/** Resolves this rule instance's message (custom override or localized default) with `{var}` interpolation. */
-type MessageFn = (vars?: Record<string, unknown>) => string;
-/** Resolved per-instance rule params (loose at the DB boundary, narrowed by the author's generic). */
-type ValidationParams = Record<string, unknown>;
-type ValidationRuleValidateArgs<TParams extends ValidationParams, TValue, TData extends Record<string, unknown> = Record<string, unknown>> = {
-  value: TValue | null | undefined;
-  params: TParams;
-  siblingData: TData;
-  data: TData;
-  field: FormFieldInstance;
-  fieldType: string;
-  operation: 'create' | 'update';
-  event: 'onChange' | 'submit';
-  locale: string;
-  message: MessageFn; /** Server only. Absent in the client (req-less) context, so a server-only rule cannot run there. */
-  req?: PayloadRequest;
-  payload?: Payload; /** Server only. The form being submitted, for form-scoped lookups (e.g. notAlreadySubmitted). */
-  formId?: number | string;
-};
-type ValidationRuleValidate<TParams extends ValidationParams, TValue, TData extends Record<string, unknown> = Record<string, unknown>> = (args: ValidationRuleValidateArgs<TParams, TValue, TData>) => Promise<ValidationRuleResult> | ValidationRuleResult;
-/**
- * A validation rule type, authored once. `params` is a Payload `Field[]` rendered in the per-field
- * constraint list; `validate` returns `true | string | { message, severity }`. `client` defaults from
- * whether the rule is pure (a rule that is async or uses `req`/`payload` must set `client: false`).
- */
-type ValidationRuleDefinition<TParams extends ValidationParams = ValidationParams, TValue = unknown, TData extends Record<string, unknown> = Record<string, unknown>> = {
-  type: string;
-  label: string;
-  description?: string; /** Field type slugs this rule may be added to. Omit for all field types. */
-  appliesTo?: string[];
-  params?: Field[];
-  defaultMessage: string; /** Runs client-side too. Defaults to `true`; set `false` for async or `req`/`payload`-using rules. */
-  client?: boolean; /** Default severity when `validate` returns a bare string. Defaults to `error`. */
-  severity?: ValidationSeverity;
-  validate: ValidationRuleValidate<TParams, TValue, TData>;
-};
-/** Erased shape stored in the heterogeneous registry; params re-narrow per matched rule at execution. */
-type AnyValidationRuleValidate = (args: {
-  value: unknown;
-  params: ValidationParams;
-  siblingData: Record<string, unknown>;
-  data: Record<string, unknown>;
-  field: FormFieldInstance;
-  fieldType: string;
-  operation: 'create' | 'update';
-  event: 'onChange' | 'submit';
-  locale: string;
-  message: MessageFn;
-  req?: PayloadRequest;
-  payload?: Payload;
-  formId?: number | string;
-}) => Promise<ValidationRuleResult> | ValidationRuleResult;
-type AnyValidationRuleDefinition = {
-  type: string;
-  label: string;
-  description?: string;
-  appliesTo?: string[];
-  params?: Field[];
-  defaultMessage: string;
-  client?: boolean;
-  severity?: ValidationSeverity;
-  validate: AnyValidationRuleValidate;
-};
-//#endregion
-//#region src/presentations/types.d.ts
-/** How a presentation surfaces the form. Drives wrapper selection and CSS. */
-type PresentationSurface = 'inline' | 'page' | 'overlay';
-type PresentationDensity = 'comfortable' | 'compact';
-/**
- * Serializable, framework-agnostic description of a presentation. The admin select and the
- * stored `defaultPresentation` use only this; the React `Wrapper` is added in `./react`. No React here.
- */
-type PresentationDescriptor = {
-  name: string; /** i18n key or literal shown in the admin select. */
-  label: string;
-  surface: PresentationSurface;
-  density: PresentationDensity; /** Overlay surfaces request dismissal after a successful submit. */
-  dismissOnSuccess?: boolean;
-};
-//#endregion
-//#region src/recall/interpolate.d.ts
-/**
- * Replace `{{ name }}` and `{{ name|fallback }}` tokens. `resolve` returns the recalled value (''
- * when absent); the fallback (or '') is substituted when `resolve` yields ''. Token-free input is
- * returned unchanged, so this is a no-op for ordinary text.
- */
-declare const interpolate: (template: string, resolve: (name: string) => string) => string;
-//#endregion
-//#region src/recall/resolver.d.ts
-type RecallResolver = (name: string) => string;
-/** Derive a value->label map from a select-like field instance's `options`. */
-declare const optionLabelsFor: (field: FormFieldInstance) => Record<string, string> | undefined;
-/**
- * Build a recall resolver: `{{name}}` -> the field's current value, formatted via its type's `format`
- * (so a select shows its option label, a checkbox Yes/No, a date localized). Missing field or empty
- * value -> ''. Pure and isomorphic; the renderer and server templates share it.
- */
-declare const buildRecallResolver: (args: {
-  fields: FormFieldInstance[];
-  values: Record<string, unknown>;
-  registry: Map<string, AnyFormFieldDefinition>;
-  locale: string;
-  t: (key: string) => string;
-}) => RecallResolver;
-//#endregion
-//#region src/spam/constants.d.ts
-/** Default honeypot decoy field name. Plausible to bots, unlikely to collide with a real field name. */
-declare const DEFAULT_HONEYPOT_FIELD = "confirm_email";
-/** Reserved `values` entry carrying a captcha token from the client. */
-declare const CAPTCHA_TOKEN_KEY = "__fb_captcha";
-//#endregion
-export { FieldMeta as A, evaluateCalc as C, AggregationBucket as D, CalcExpression as E, SubmissionValue as F, FormFieldInstance as M, SubmissionDescriptor as N, AggregationRow as O, SubmissionFieldError as P, evaluateCondition as S, computeCalcFields as T, PrefillOptions as _, optionLabelsFor as a, FieldTypeRegistry as b, PresentationDescriptor as c, ValidationParams as d, ValidationRuleDefinition as f, FormEventSink as g, FormEvent as h, buildRecallResolver as i, SubmissionStatusFilter as j, FieldAggregation as k, PresentationSurface as l, ValidationSeverity as m, DEFAULT_HONEYPOT_FIELD as n, interpolate as o, ValidationRuleResult as p, RecallResolver as r, PresentationDensity as s, CAPTCHA_TOKEN_KEY as t, AnyValidationRuleDefinition as u, valuesFromSearchParams as v, calcExpressionOf as w, FieldTypesConfig as x, FieldTypeOption as y };
-//# sourceMappingURL=constants-B-BUfetP.d.ts.map