@10x-media/form-builder 0.1.0-beta.0 → 0.1.0-beta.2

package/dist/collections/formSubmissions.js

@@ -0,0 +1,157 @@
+import { keys } from "../translations/keys.js";
+import { labelForKey } from "../translations/server.js";
+import { isLoggedIn } from "../plugin/access.js";
+import { dispatchActions } from "../actions/dispatch.js";
+import { resolveEventSink } from "../events/resolveEventSink.js";
+import { buildSpamGuard } from "../spam/spamGuard.js";
+import { FORMS_SLUG } from "./forms.js";
+import { validateSubmission } from "../submissions/validateSubmission.js";
+//#region src/collections/formSubmissions.ts
+const FORM_SUBMISSIONS_SLUG = "form-submissions";
+const formIdOf = (form) => {
+	if (typeof form === "number" || typeof form === "string") return form;
+	if (form && typeof form === "object" && "id" in form) {
+		const id = form.id;
+		if (typeof id === "number" || typeof id === "string") return id;
+	}
+};
+/**
+* On a completed submission create, dispatch the form's post-submit actions and emit `submission.created`.
+* Both are side effects on an already-written row, so the whole body is wrapped: nothing it does can throw
+* past the hook (a failed action or sink must never fail the submission write). Dispatch is itself bounded
+* and non-throwing; the inline fallback is awaited so the bound caps the added latency, while the queued
+* path returns immediately. The form's `actions` are null-guarded for legacy rows created before the field
+* existed.
+*/
+const makeAfterChange = (args) => async ({ doc, operation, req }) => {
+	if (operation !== "create" || doc.status != null && doc.status !== "complete") return doc;
+	const { payload } = req;
+	try {
+		const formId = formIdOf(doc.form);
+		if (formId == null) return doc;
+		await dispatchActions({
+			actions: (await payload.findByID({
+				collection: "forms",
+				id: formId,
+				depth: 0,
+				overrideAccess: true,
+				req
+			}).catch(() => null))?.actions ?? null,
+			formId,
+			submissionId: doc.id,
+			registry: args.actionRegistry,
+			payload,
+			req,
+			hasRunner: args.hasRunner
+		});
+		try {
+			await resolveEventSink(args.events).emit({
+				type: "submission.created",
+				formId: String(formId),
+				submissionId: String(doc.id),
+				at: (/* @__PURE__ */ new Date()).toISOString()
+			});
+		} catch (error) {
+			payload.logger?.error(`@10x-media/form-builder: submission.created sink threw: ${error instanceof Error ? error.message : String(error)}`);
+		}
+	} catch (error) {
+		payload.logger?.error(`@10x-media/form-builder: afterChange dispatch failed for submission ${String(doc.id)}: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	return doc;
+};
+const buildSubmissionsCollection = ({ registry, ruleRegistry, consentRegistry, actionRegistry = /* @__PURE__ */ new Map(), events, hasRunner = false, uploadSlug, spam, showRawFields = false, overrides }) => {
+	const defaultFields = [
+		{
+			name: "form",
+			type: "relationship",
+			relationTo: FORMS_SLUG,
+			required: true
+		},
+		{
+			name: "status",
+			type: "select",
+			defaultValue: "complete",
+			options: [{
+				label: labelForKey(keys.statusComplete),
+				value: "complete"
+			}, {
+				label: labelForKey(keys.statusPartial),
+				value: "partial"
+			}],
+			access: {
+				create: isLoggedIn,
+				update: isLoggedIn
+			}
+		},
+		{
+			name: "answers",
+			type: "ui",
+			admin: { components: { Field: "@10x-media/form-builder/rsc#SubmissionAnswers" } }
+		},
+		{
+			name: "locale",
+			type: "text"
+		},
+		{
+			name: "values",
+			type: "json",
+			admin: { hidden: !showRawFields }
+		},
+		{
+			name: "descriptors",
+			type: "json",
+			admin: { hidden: !showRawFields }
+		},
+		{
+			name: "consent",
+			type: "json",
+			admin: { hidden: !showRawFields }
+		},
+		{
+			name: "meta",
+			type: "json"
+		}
+	];
+	return {
+		...overrides ?? {},
+		slug: FORM_SUBMISSIONS_SLUG,
+		labels: {
+			singular: labelForKey(keys.collectionSubmissionSingular),
+			plural: labelForKey(keys.collectionSubmissionPlural),
+			...overrides?.labels ?? {}
+		},
+		admin: {
+			group: "Forms",
+			...overrides?.admin ?? {}
+		},
+		access: {
+			create: () => true,
+			read: isLoggedIn,
+			update: () => false,
+			...overrides?.access ?? {}
+		},
+		hooks: {
+			...overrides?.hooks ?? {},
+			beforeValidate: [
+				...spam ? [buildSpamGuard(spam)] : [],
+				validateSubmission({
+					registry,
+					ruleRegistry,
+					consentRegistry,
+					uploadSlug
+				}),
+				...overrides?.hooks?.beforeValidate ?? []
+			],
+			afterChange: [makeAfterChange({
+				actionRegistry,
+				events,
+				hasRunner
+			}), ...overrides?.hooks?.afterChange ?? []]
+		},
+		fields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields
+	};
+};
+//#endregion
+export { FORM_SUBMISSIONS_SLUG, buildSubmissionsCollection };
+
+//# sourceMappingURL=formSubmissions.js.map

package/dist/collections/formSubmissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formSubmissions.js","names":[],"sources":["../../src/collections/formSubmissions.ts"],"sourcesContent":["import type { CollectionAfterChangeHook, CollectionConfig, Field } from 'payload'\nimport { dispatchActions } from '../actions/dispatch'\nimport type { ActionRegistry } from '../actions/registry'\nimport type { ActionInstance } from '../actions/runActions'\nimport type { ConsentSourceRegistry } from '../consent/registry'\nimport { resolveEventSink } from '../events/resolveEventSink'\nimport type { FormEventSink } from '../events/types'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport { isLoggedIn } from '../plugin/access'\nimport type { CollectionOverrides } from '../plugin/collectionOverrides'\nimport { buildSpamGuard } from '../spam/spamGuard'\nimport type { ResolvedSpamConfig } from '../spam/types'\nimport { validateSubmission } from '../submissions/validateSubmission'\nimport { keys } from '../translations/keys'\nimport { labelForKey } from '../translations/server'\nimport type { ValidationRuleRegistry } from '../validation/registry'\nimport { FORMS_SLUG } from './forms'\n\nexport const FORM_SUBMISSIONS_SLUG = 'form-submissions'\n\ntype BuildSubmissionsCollectionArgs = {\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\tconsentRegistry: ConsentSourceRegistry\n\tactionRegistry?: ActionRegistry\n\tevents?: FormEventSink\n\t/** Whether a job runner is likely present; gates the queued vs bounded-inline dispatch path. */\n\thasRunner?: boolean\n\t/** Upload collection slug for file fields without an explicit `relationTo`. */\n\tuploadSlug?: string\n\t/** Resolved spam config; when active, prepends the spam guard before validation. `false` disables it. */\n\tspam?: ResolvedSpamConfig | false\n\t/**\n\t * When `true`, shows the raw `values`, `descriptors`, and `consent` JSON fields in the admin UI.\n\t * Default `false` — they are fully represented by the `SubmissionAnswers` UI component.\n\t */\n\tshowRawFields?: boolean\n\toverrides?: CollectionOverrides\n}\n\nconst formIdOf = (form: unknown): number | string | undefined => {\n\tif (typeof form === 'number' || typeof form === 'string') {\n\t\treturn form\n\t}\n\tif (form && typeof form === 'object' && 'id' in form) {\n\t\tconst id = (form as { id: unknown }).id\n\t\tif (typeof id === 'number' || typeof id === 'string') {\n\t\t\treturn id\n\t\t}\n\t}\n\treturn undefined\n}\n\n/**\n * On a completed submission create, dispatch the form's post-submit actions and emit `submission.created`.\n * Both are side effects on an already-written row, so the whole body is wrapped: nothing it does can throw\n * past the hook (a failed action or sink must never fail the submission write). Dispatch is itself bounded\n * and non-throwing; the inline fallback is awaited so the bound caps the added latency, while the queued\n * path returns immediately. The form's `actions` are null-guarded for legacy rows created before the field\n * existed.\n */\nconst makeAfterChange =\n\t(args: {\n\t\tactionRegistry: ActionRegistry\n\t\tevents?: FormEventSink\n\t\thasRunner: boolean\n\t}): CollectionAfterChangeHook =>\n\tasync ({ doc, operation, req }) => {\n\t\tif (operation !== 'create' || (doc.status != null && doc.status !== 'complete')) {\n\t\t\treturn doc\n\t\t}\n\t\tconst { payload } = req\n\t\ttry {\n\t\t\tconst formId = formIdOf(doc.form)\n\t\t\tif (formId == null) {\n\t\t\t\treturn doc\n\t\t\t}\n\t\t\tconst form = await payload\n\t\t\t\t.findByID({ collection: FORMS_SLUG, id: formId, depth: 0, overrideAccess: true, req })\n\t\t\t\t.catch(() => null)\n\n\t\t\tawait dispatchActions({\n\t\t\t\tactions: (form?.actions ?? null) as ActionInstance[] | null,\n\t\t\t\tformId,\n\t\t\t\tsubmissionId: doc.id as number | string,\n\t\t\t\tregistry: args.actionRegistry,\n\t\t\t\tpayload,\n\t\t\t\treq,\n\t\t\t\thasRunner: args.hasRunner,\n\t\t\t})\n\n\t\t\ttry {\n\t\t\t\tawait resolveEventSink(args.events).emit({\n\t\t\t\t\ttype: 'submission.created',\n\t\t\t\t\tformId: String(formId),\n\t\t\t\t\tsubmissionId: String(doc.id),\n\t\t\t\t\tat: new Date().toISOString(),\n\t\t\t\t})\n\t\t\t} catch (error) {\n\t\t\t\tpayload.logger?.error(\n\t\t\t\t\t`@10x-media/form-builder: submission.created sink threw: ${\n\t\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t\t}`\n\t\t\t\t)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tpayload.logger?.error(\n\t\t\t\t`@10x-media/form-builder: afterChange dispatch failed for submission ${String(doc.id)}: ${\n\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t}`\n\t\t\t)\n\t\t}\n\t\treturn doc\n\t}\n\nexport const buildSubmissionsCollection = ({\n\tregistry,\n\truleRegistry,\n\tconsentRegistry,\n\tactionRegistry = new Map(),\n\tevents,\n\thasRunner = false,\n\tuploadSlug,\n\tspam,\n\tshowRawFields = false,\n\toverrides,\n}: BuildSubmissionsCollectionArgs): CollectionConfig => {\n\tconst defaultFields: Field[] = [\n\t\t{ name: 'form', type: 'relationship', relationTo: FORMS_SLUG, required: true },\n\t\t{\n\t\t\tname: 'status',\n\t\t\ttype: 'select',\n\t\t\tdefaultValue: 'complete',\n\t\t\toptions: [\n\t\t\t\t{ label: labelForKey(keys.statusComplete), value: 'complete' },\n\t\t\t\t{ label: labelForKey(keys.statusPartial), value: 'partial' },\n\t\t\t],\n\t\t\t// Defense-in-depth at the REST layer: anonymous clients cannot set status via the API.\n\t\t\t// The validateSubmission hook also forces 'complete' server-side, so this covers both paths.\n\t\t\taccess: { create: isLoggedIn, update: isLoggedIn },\n\t\t},\n\t\t// answers UI appears first so it is the dominant view when opening a submission document.\n\t\t{\n\t\t\tname: 'answers',\n\t\t\ttype: 'ui',\n\t\t\tadmin: {\n\t\t\t\tcomponents: { Field: '@10x-media/form-builder/rsc#SubmissionAnswers' },\n\t\t\t},\n\t\t},\n\t\t{ name: 'locale', type: 'text' },\n\t\t{ name: 'values', type: 'json', admin: { hidden: !showRawFields } },\n\t\t{ name: 'descriptors', type: 'json', admin: { hidden: !showRawFields } },\n\t\t{ name: 'consent', type: 'json', admin: { hidden: !showRawFields } },\n\t\t{ name: 'meta', type: 'json' },\n\t]\n\n\treturn {\n\t\t...(overrides ?? {}),\n\t\tslug: FORM_SUBMISSIONS_SLUG,\n\t\tlabels: {\n\t\t\tsingular: labelForKey(keys.collectionSubmissionSingular),\n\t\t\tplural: labelForKey(keys.collectionSubmissionPlural),\n\t\t\t...(overrides?.labels ?? {}),\n\t\t},\n\t\tadmin: { group: 'Forms', ...(overrides?.admin ?? {}) },\n\t\taccess: {\n\t\t\tcreate: () => true,\n\t\t\tread: isLoggedIn,\n\t\t\tupdate: () => false,\n\t\t\t...(overrides?.access ?? {}),\n\t\t},\n\t\thooks: {\n\t\t\t...(overrides?.hooks ?? {}),\n\t\t\t// Spam guard + validateSubmission must remain first: they enforce the security invariant\n\t\t\t// that anonymous callers cannot bypass post-submit actions or supply a forged status.\n\t\t\t// Consumer beforeValidate hooks are appended after so they run on already-validated data.\n\t\t\tbeforeValidate: [\n\t\t\t\t...(spam ? [buildSpamGuard(spam)] : []),\n\t\t\t\tvalidateSubmission({ registry, ruleRegistry, consentRegistry, uploadSlug }),\n\t\t\t\t...(overrides?.hooks?.beforeValidate ?? []),\n\t\t\t],\n\t\t\tafterChange: [\n\t\t\t\tmakeAfterChange({ actionRegistry, events, hasRunner }),\n\t\t\t\t...(overrides?.hooks?.afterChange ?? []),\n\t\t\t],\n\t\t},\n\t\tfields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields,\n\t}\n}\n"],"mappings":";;;;;;;;;AAkBA,MAAa,wBAAwB;AAsBrC,MAAM,YAAY,SAA+C;CAChE,IAAI,OAAO,SAAS,YAAY,OAAO,SAAS,UAC/C,OAAO;CAER,IAAI,QAAQ,OAAO,SAAS,YAAY,QAAQ,MAAM;EACrD,MAAM,KAAM,KAAyB;EACrC,IAAI,OAAO,OAAO,YAAY,OAAO,OAAO,UAC3C,OAAO;CAET;AAED;;;;;;;;;AAUA,MAAM,mBACJ,SAKD,OAAO,EAAE,KAAK,WAAW,UAAU;CAClC,IAAI,cAAc,YAAa,IAAI,UAAU,QAAQ,IAAI,WAAW,YACnE,OAAO;CAER,MAAM,EAAE,YAAY;CACpB,IAAI;EACH,MAAM,SAAS,SAAS,IAAI,IAAI;EAChC,IAAI,UAAU,MACb,OAAO;EAMR,MAAM,gBAAgB;GACrB,UAAU,MALQ,QACjB,SAAS;IAAE,YAAA;IAAwB,IAAI;IAAQ,OAAO;IAAG,gBAAgB;IAAM;GAAI,CAAC,EACpF,YAAY,IAAI,IAGD,WAAW;GAC3B;GACA,cAAc,IAAI;GAClB,UAAU,KAAK;GACf;GACA;GACA,WAAW,KAAK;EACjB,CAAC;EAED,IAAI;GACH,MAAM,iBAAiB,KAAK,MAAM,EAAE,KAAK;IACxC,MAAM;IACN,QAAQ,OAAO,MAAM;IACrB,cAAc,OAAO,IAAI,EAAE;IAC3B,qBAAI,IAAI,KAAK,GAAE,YAAY;GAC5B,CAAC;EACF,SAAS,OAAO;GACf,QAAQ,QAAQ,MACf,2DACC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;EACD;CACD,SAAS,OAAO;EACf,QAAQ,QAAQ,MACf,uEAAuE,OAAO,IAAI,EAAE,EAAE,IACrF,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;CACD;CACA,OAAO;AACR;AAED,MAAa,8BAA8B,EAC1C,UACA,cACA,iBACA,iCAAiB,IAAI,IAAI,GACzB,QACA,YAAY,OACZ,YACA,MACA,gBAAgB,OAChB,gBACuD;CACvD,MAAM,gBAAyB;EAC9B;GAAE,MAAM;GAAQ,MAAM;GAAgB,YAAY;GAAY,UAAU;EAAK;EAC7E;GACC,MAAM;GACN,MAAM;GACN,cAAc;GACd,SAAS,CACR;IAAE,OAAO,YAAY,KAAK,cAAc;IAAG,OAAO;GAAW,GAC7D;IAAE,OAAO,YAAY,KAAK,aAAa;IAAG,OAAO;GAAU,CAC5D;GAGA,QAAQ;IAAE,QAAQ;IAAY,QAAQ;GAAW;EAClD;EAEA;GACC,MAAM;GACN,MAAM;GACN,OAAO,EACN,YAAY,EAAE,OAAO,gDAAgD,EACtE;EACD;EACA;GAAE,MAAM;GAAU,MAAM;EAAO;EAC/B;GAAE,MAAM;GAAU,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;EAClE;GAAE,MAAM;GAAe,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;EACvE;GAAE,MAAM;GAAW,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;EACnE;GAAE,MAAM;GAAQ,MAAM;EAAO;CAC9B;CAEA,OAAO;EACN,GAAI,aAAa,CAAC;EAClB,MAAM;EACN,QAAQ;GACP,UAAU,YAAY,KAAK,4BAA4B;GACvD,QAAQ,YAAY,KAAK,0BAA0B;GACnD,GAAI,WAAW,UAAU,CAAC;EAC3B;EACA,OAAO;GAAE,OAAO;GAAS,GAAI,WAAW,SAAS,CAAC;EAAG;EACrD,QAAQ;GACP,cAAc;GACd,MAAM;GACN,cAAc;GACd,GAAI,WAAW,UAAU,CAAC;EAC3B;EACA,OAAO;GACN,GAAI,WAAW,SAAS,CAAC;GAIzB,gBAAgB;IACf,GAAI,OAAO,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC;IACrC,mBAAmB;KAAE;KAAU;KAAc;KAAiB;IAAW,CAAC;IAC1E,GAAI,WAAW,OAAO,kBAAkB,CAAC;GAC1C;GACA,aAAa,CACZ,gBAAgB;IAAE;IAAgB;IAAQ;GAAU,CAAC,GACrD,GAAI,WAAW,OAAO,eAAe,CAAC,CACvC;EACD;EACA,QAAQ,WAAW,SAAS,UAAU,OAAO,EAAE,cAAc,CAAC,IAAI;CACnE;AACD"}

package/dist/collections/forms.js

@@ -0,0 +1,198 @@
+import { keys } from "../translations/keys.js";
+import { labelFor, labelForKey } from "../translations/server.js";
+import { isLoggedIn } from "../plugin/access.js";
+import { buildActionBlocks } from "../actions/buildActionBlocks.js";
+import { resolveFormResultsRequest } from "../aggregation/resolveResultsRequest.js";
+import { normalizeCalc } from "../calc/normalizeCalc.js";
+import { buildConditionTypeMap } from "../conditions/conditionType.js";
+import { normalizeFormConditions } from "../conditions/normalizeConditions.js";
+import { buildFieldBlocks } from "../fields/buildFieldBlocks.js";
+import { normalizeFlow } from "../flow/normalizeFlow.js";
+import { DEFAULT_PRESENTATION_NAME, defaultPresentationDescriptors } from "../presentations/defaults.js";
+import { ValidationError } from "payload";
+//#region src/collections/forms.ts
+const FORMS_SLUG = "forms";
+const validateFlow = (raw) => {
+	if (raw === null || raw === void 0) return true;
+	const r = raw;
+	if (!Array.isArray(r.steps)) return true;
+	const steps = r.steps;
+	if (steps.find((s) => typeof s?.id !== "string" || s.id.length === 0)) return "Flow: every step must have a non-empty ID";
+	const ids = steps.map((s) => s.id);
+	if (new Set(ids).size !== ids.length) return "Flow: duplicate step IDs found";
+	const idSet = new Set(ids);
+	for (const step of steps) {
+		const id = step.id;
+		if (typeof step.next === "string" && step.next.length > 0 && !idSet.has(step.next)) return `Flow: step "${id}" references unknown next step "${step.next}"`;
+		if (Array.isArray(step.transitions)) {
+			for (const t of step.transitions) if (typeof t?.to === "string" && t.to.length > 0 && !idSet.has(t.to)) return `Flow: step "${id}" has a transition to unknown step "${t.to}"`;
+		}
+	}
+	return true;
+};
+/** How many steps the caller actually submitted, before normalization strips/collapses the flow. */
+const providedFlowStepCount = (raw) => {
+	if (raw === null || typeof raw !== "object") return 0;
+	const steps = raw.steps;
+	return Array.isArray(steps) ? steps.length : 0;
+};
+const buildFormsCollection = ({ overrides, registry, ruleRegistry, consentRegistry, presentationRegistry = new Map(Object.entries(defaultPresentationDescriptors)), actionRegistry = /* @__PURE__ */ new Map() }) => {
+	const conditionTypes = buildConditionTypeMap(registry);
+	const FLOW_BUILDER_REF = "@10x-media/form-builder/client#FlowBuilder";
+	const beforeValidate = ({ data, req }) => {
+		if (data && typeof data.defaultPresentation === "string" && !presentationRegistry.has(data.defaultPresentation)) data.defaultPresentation = DEFAULT_PRESENTATION_NAME;
+		if (data && Array.isArray(data.fields)) {
+			const normalized = normalizeFormConditions(data.fields, conditionTypes);
+			for (const field of normalized) if ("expression" in field) field.expression = normalizeCalc(field.expression);
+			data.fields = normalized;
+			const fieldNames = normalized.map((field) => typeof field.name === "string" ? field.name : void 0).filter((name) => name !== void 0);
+			const normalizedFlow = normalizeFlow(data.flow, fieldNames);
+			if (providedFlowStepCount(data.flow) > 0 && normalizedFlow === void 0) throw new ValidationError({
+				collection: FORMS_SLUG,
+				errors: [{
+					path: "flow",
+					message: "A flow needs at least two steps with unique, non-empty IDs. Add another step or remove the flow."
+				}]
+			}, req.t);
+			data.flow = normalizedFlow;
+		}
+		return data;
+	};
+	const defaultFields = [
+		{
+			name: "title",
+			type: "text",
+			required: true,
+			label: labelForKey(keys.fieldTitle)
+		},
+		{
+			name: "fields",
+			type: "blocks",
+			blocks: buildFieldBlocks(registry, ruleRegistry, consentRegistry)
+		},
+		{
+			name: "flow",
+			type: "json",
+			validate: validateFlow,
+			admin: { components: { Field: {
+				path: FLOW_BUILDER_REF,
+				clientProps: { conditionTypes }
+			} } },
+			typescriptSchema: [() => ({
+				type: "object",
+				required: ["steps"],
+				additionalProperties: false,
+				properties: { steps: {
+					type: "array",
+					items: {
+						type: "object",
+						required: ["id"],
+						additionalProperties: true,
+						properties: {
+							id: { type: "string" },
+							title: { type: "string" },
+							fields: {
+								type: "array",
+								items: { type: "string" }
+							},
+							next: { type: "string" },
+							transitions: {
+								type: "array",
+								items: {
+									type: "object",
+									required: ["to"],
+									additionalProperties: true,
+									properties: {
+										to: { type: "string" },
+										when: {
+											type: "object",
+											additionalProperties: true
+										}
+									}
+								}
+							}
+						}
+					}
+				} }
+			})]
+		},
+		{
+			name: "actions",
+			type: "blocks",
+			blocks: buildActionBlocks(actionRegistry),
+			label: labelForKey(keys.configActions),
+			access: { read: isLoggedIn }
+		},
+		{
+			name: "defaultPresentation",
+			type: "select",
+			defaultValue: DEFAULT_PRESENTATION_NAME,
+			options: [...presentationRegistry.values()].map((descriptor) => ({
+				label: labelFor(descriptor.label),
+				value: descriptor.name
+			})),
+			label: labelForKey(keys.configDefaultPresentation),
+			admin: { position: "sidebar" }
+		},
+		{
+			name: "showResults",
+			type: "checkbox",
+			defaultValue: false,
+			label: labelForKey(keys.configShowResults),
+			admin: { position: "sidebar" }
+		},
+		{
+			name: "resultsField",
+			type: "text",
+			label: labelForKey(keys.configResultsField),
+			admin: {
+				position: "sidebar",
+				description: "Field whose aggregate results are public when \"Show results publicly\" is on. Use a choice field, never a free-text or PII field.",
+				condition: (data) => Boolean(data?.showResults)
+			}
+		}
+	];
+	const defaultEndpoints = [{
+		path: "/:id/results",
+		method: "get",
+		handler: async (req) => {
+			const field = typeof req.query?.field === "string" ? req.query.field : void 0;
+			const { status, body } = await resolveFormResultsRequest({
+				payload: req.payload,
+				formId: req.routeParams?.id,
+				field,
+				isAuthed: Boolean(req.user),
+				req
+			});
+			return Response.json(body, { status });
+		}
+	}];
+	return {
+		...overrides ?? {},
+		slug: FORMS_SLUG,
+		labels: {
+			singular: labelForKey(keys.collectionFormSingular),
+			plural: labelForKey(keys.collectionFormPlural),
+			...overrides?.labels ?? {}
+		},
+		admin: {
+			group: "Forms",
+			useAsTitle: "title",
+			...overrides?.admin ?? {}
+		},
+		access: {
+			read: () => true,
+			...overrides?.access ?? {}
+		},
+		hooks: {
+			...overrides?.hooks ?? {},
+			beforeValidate: [beforeValidate, ...overrides?.hooks?.beforeValidate ?? []]
+		},
+		endpoints: [...defaultEndpoints, ...Array.isArray(overrides?.endpoints) ? overrides.endpoints : []],
+		fields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields
+	};
+};
+//#endregion
+export { FORMS_SLUG, buildFormsCollection };
+
+//# sourceMappingURL=forms.js.map

package/dist/collections/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.js","names":[],"sources":["../../src/collections/forms.ts"],"sourcesContent":["import {\n\ttype CollectionBeforeValidateHook,\n\ttype CollectionConfig,\n\ttype Field,\n\ttype PayloadRequest,\n\tValidationError,\n} from 'payload'\nimport { buildActionBlocks } from '../actions/buildActionBlocks'\nimport type { ActionRegistry } from '../actions/registry'\nimport { resolveFormResultsRequest } from '../aggregation/resolveResultsRequest'\nimport { normalizeCalc } from '../calc/normalizeCalc'\nimport { buildConditionTypeMap } from '../conditions/conditionType'\nimport { type FieldRow, normalizeFormConditions } from '../conditions/normalizeConditions'\nimport type { ConsentSourceRegistry } from '../consent/registry'\nimport { buildFieldBlocks } from '../fields/buildFieldBlocks'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport { normalizeFlow } from '../flow/normalizeFlow'\nimport { isLoggedIn } from '../plugin/access'\nimport type { CollectionOverrides } from '../plugin/collectionOverrides'\nimport {\n\tDEFAULT_PRESENTATION_NAME,\n\tdefaultPresentationDescriptors,\n} from '../presentations/defaults'\nimport type { PresentationDescriptorRegistry } from '../presentations/registry'\nimport { keys } from '../translations/keys'\nimport { labelFor, labelForKey } from '../translations/server'\nimport type { ValidationRuleRegistry } from '../validation/registry'\n\nexport const FORMS_SLUG = 'forms'\n\nconst validateFlow = (raw: unknown): string | true => {\n\tif (raw === null || raw === undefined) return true\n\tconst r = raw as Record<string, unknown>\n\tif (!Array.isArray(r.steps)) return true\n\tconst steps = r.steps as Array<Record<string, unknown>>\n\tconst emptyIdStep = steps.find((s) => typeof s?.id !== 'string' || s.id.length === 0)\n\tif (emptyIdStep) return 'Flow: every step must have a non-empty ID'\n\tconst ids = steps.map((s) => s.id as string)\n\tif (new Set(ids).size !== ids.length) {\n\t\treturn 'Flow: duplicate step IDs found'\n\t}\n\tconst idSet = new Set(ids)\n\tfor (const step of steps) {\n\t\tconst id = step.id as string\n\t\tif (typeof step.next === 'string' && step.next.length > 0 && !idSet.has(step.next)) {\n\t\t\treturn `Flow: step \"${id}\" references unknown next step \"${step.next}\"`\n\t\t}\n\t\tif (Array.isArray(step.transitions)) {\n\t\t\tfor (const t of step.transitions as Array<Record<string, unknown>>) {\n\t\t\t\tif (typeof t?.to === 'string' && t.to.length > 0 && !idSet.has(t.to)) {\n\t\t\t\t\treturn `Flow: step \"${id}\" has a transition to unknown step \"${t.to}\"`\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn true\n}\n\n/** How many steps the caller actually submitted, before normalization strips/collapses the flow. */\nconst providedFlowStepCount = (raw: unknown): number => {\n\tif (raw === null || typeof raw !== 'object') return 0\n\tconst steps = (raw as { steps?: unknown }).steps\n\treturn Array.isArray(steps) ? steps.length : 0\n}\n\ntype BuildFormsCollectionArgs = {\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\tconsentRegistry?: ConsentSourceRegistry\n\tpresentationRegistry?: PresentationDescriptorRegistry\n\tactionRegistry?: ActionRegistry\n\toverrides?: CollectionOverrides\n}\n\nexport const buildFormsCollection = ({\n\toverrides,\n\tregistry,\n\truleRegistry,\n\tconsentRegistry,\n\tpresentationRegistry = new Map(Object.entries(defaultPresentationDescriptors)),\n\tactionRegistry = new Map(),\n}: BuildFormsCollectionArgs): CollectionConfig => {\n\tconst conditionTypes = buildConditionTypeMap(registry)\n\tconst FLOW_BUILDER_REF = '@10x-media/form-builder/client#FlowBuilder'\n\n\tconst beforeValidate: CollectionBeforeValidateHook = ({ data, req }) => {\n\t\tif (\n\t\t\tdata &&\n\t\t\ttypeof data.defaultPresentation === 'string' &&\n\t\t\t!presentationRegistry.has(data.defaultPresentation)\n\t\t) {\n\t\t\tdata.defaultPresentation = DEFAULT_PRESENTATION_NAME\n\t\t}\n\t\tif (data && Array.isArray(data.fields)) {\n\t\t\tconst normalized: FieldRow[] = normalizeFormConditions(\n\t\t\t\tdata.fields as FieldRow[],\n\t\t\t\tconditionTypes\n\t\t\t)\n\t\t\tfor (const field of normalized) {\n\t\t\t\tif ('expression' in field) {\n\t\t\t\t\tfield.expression = normalizeCalc(field.expression)\n\t\t\t\t}\n\t\t\t}\n\t\t\tdata.fields = normalized\n\t\t\tconst fieldNames = normalized\n\t\t\t\t.map((field: FieldRow) => (typeof field.name === 'string' ? field.name : undefined))\n\t\t\t\t.filter((name): name is string => name !== undefined)\n\t\t\tconst normalizedFlow = normalizeFlow(data.flow, fieldNames)\n\t\t\t// A flow the author built but that collapses to fewer than two valid steps would\n\t\t\t// otherwise vanish silently. Surface it instead of discarding their work.\n\t\t\tif (providedFlowStepCount(data.flow) > 0 && normalizedFlow === undefined) {\n\t\t\t\tthrow new ValidationError(\n\t\t\t\t\t{\n\t\t\t\t\t\tcollection: FORMS_SLUG,\n\t\t\t\t\t\terrors: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tpath: 'flow',\n\t\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\t'A flow needs at least two steps with unique, non-empty IDs. Add another step or remove the flow.',\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t},\n\t\t\t\t\treq.t\n\t\t\t\t)\n\t\t\t}\n\t\t\tdata.flow = normalizedFlow\n\t\t}\n\t\treturn data\n\t}\n\n\tconst defaultFields: Field[] = [\n\t\t{ name: 'title', type: 'text', required: true, label: labelForKey(keys.fieldTitle) },\n\t\t{\n\t\t\tname: 'fields',\n\t\t\ttype: 'blocks',\n\t\t\tblocks: buildFieldBlocks(registry, ruleRegistry, consentRegistry),\n\t\t},\n\t\t{\n\t\t\tname: 'flow',\n\t\t\ttype: 'json',\n\t\t\tvalidate: validateFlow,\n\t\t\tadmin: {\n\t\t\t\tcomponents: {\n\t\t\t\t\tField: { path: FLOW_BUILDER_REF, clientProps: { conditionTypes } },\n\t\t\t\t},\n\t\t\t},\n\t\t\t// Narrows the generated TypeScript type from opaque JSON to FormFlow so callers\n\t\t\t// don't need a cast. Keep this in sync with src/flow/types.ts.\n\t\t\ttypescriptSchema: [\n\t\t\t\t() => ({\n\t\t\t\t\ttype: 'object' as const,\n\t\t\t\t\trequired: ['steps'],\n\t\t\t\t\tadditionalProperties: false,\n\t\t\t\t\tproperties: {\n\t\t\t\t\t\tsteps: {\n\t\t\t\t\t\t\ttype: 'array' as const,\n\t\t\t\t\t\t\titems: {\n\t\t\t\t\t\t\t\ttype: 'object' as const,\n\t\t\t\t\t\t\t\trequired: ['id'],\n\t\t\t\t\t\t\t\tadditionalProperties: true,\n\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\tid: { type: 'string' as const },\n\t\t\t\t\t\t\t\t\ttitle: { type: 'string' as const },\n\t\t\t\t\t\t\t\t\tfields: { type: 'array' as const, items: { type: 'string' as const } },\n\t\t\t\t\t\t\t\t\tnext: { type: 'string' as const },\n\t\t\t\t\t\t\t\t\ttransitions: {\n\t\t\t\t\t\t\t\t\t\ttype: 'array' as const,\n\t\t\t\t\t\t\t\t\t\titems: {\n\t\t\t\t\t\t\t\t\t\t\ttype: 'object' as const,\n\t\t\t\t\t\t\t\t\t\t\trequired: ['to'],\n\t\t\t\t\t\t\t\t\t\t\tadditionalProperties: true,\n\t\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\t\tto: { type: 'string' as const },\n\t\t\t\t\t\t\t\t\t\t\t\twhen: { type: 'object' as const, additionalProperties: true },\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t],\n\t\t},\n\t\t{\n\t\t\tname: 'actions',\n\t\t\ttype: 'blocks',\n\t\t\tblocks: buildActionBlocks(actionRegistry),\n\t\t\tlabel: labelForKey(keys.configActions),\n\t\t\t// Action config can contain secrets (e.g. signedWebhook.secret). The collection\n\t\t\t// itself is publicly readable so forms can be rendered by anonymous clients, but\n\t\t\t// action config must never be exposed to anonymous callers.\n\t\t\taccess: { read: isLoggedIn },\n\t\t},\n\t\t{\n\t\t\tname: 'defaultPresentation',\n\t\t\ttype: 'select',\n\t\t\tdefaultValue: DEFAULT_PRESENTATION_NAME,\n\t\t\toptions: [...presentationRegistry.values()].map((descriptor) => ({\n\t\t\t\tlabel: labelFor(descriptor.label),\n\t\t\t\tvalue: descriptor.name,\n\t\t\t})),\n\t\t\tlabel: labelForKey(keys.configDefaultPresentation),\n\t\t\tadmin: { position: 'sidebar' },\n\t\t},\n\t\t{\n\t\t\tname: 'showResults',\n\t\t\ttype: 'checkbox',\n\t\t\tdefaultValue: false,\n\t\t\tlabel: labelForKey(keys.configShowResults),\n\t\t\tadmin: { position: 'sidebar' },\n\t\t},\n\t\t{\n\t\t\tname: 'resultsField',\n\t\t\ttype: 'text',\n\t\t\tlabel: labelForKey(keys.configResultsField),\n\t\t\tadmin: {\n\t\t\t\tposition: 'sidebar',\n\t\t\t\tdescription:\n\t\t\t\t\t'Field whose aggregate results are public when \"Show results publicly\" is on. Use a choice field, never a free-text or PII field.',\n\t\t\t\tcondition: (data) => Boolean(data?.showResults),\n\t\t\t},\n\t\t},\n\t]\n\n\tconst defaultEndpoints: CollectionConfig['endpoints'] = [\n\t\t{\n\t\t\tpath: '/:id/results',\n\t\t\tmethod: 'get',\n\t\t\thandler: async (req: PayloadRequest) => {\n\t\t\t\tconst field = typeof req.query?.field === 'string' ? req.query.field : undefined\n\t\t\t\tconst { status, body } = await resolveFormResultsRequest({\n\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\tformId: req.routeParams?.id as number | string | undefined,\n\t\t\t\t\tfield,\n\t\t\t\t\tisAuthed: Boolean(req.user),\n\t\t\t\t\treq,\n\t\t\t\t})\n\t\t\t\treturn Response.json(body, { status })\n\t\t\t},\n\t\t},\n\t]\n\n\treturn {\n\t\t...(overrides ?? {}),\n\t\tslug: FORMS_SLUG,\n\t\tlabels: {\n\t\t\tsingular: labelForKey(keys.collectionFormSingular),\n\t\t\tplural: labelForKey(keys.collectionFormPlural),\n\t\t\t...(overrides?.labels ?? {}),\n\t\t},\n\t\tadmin: { group: 'Forms', useAsTitle: 'title', ...(overrides?.admin ?? {}) },\n\t\taccess: { read: () => true, ...(overrides?.access ?? {}) },\n\t\thooks: {\n\t\t\t...(overrides?.hooks ?? {}),\n\t\t\t// beforeValidate normalizes conditions and flow; consumer hooks run after\n\t\t\tbeforeValidate: [beforeValidate, ...(overrides?.hooks?.beforeValidate ?? [])],\n\t\t},\n\t\tendpoints: [\n\t\t\t...defaultEndpoints,\n\t\t\t...(Array.isArray(overrides?.endpoints) ? overrides.endpoints : []),\n\t\t],\n\t\tfields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields,\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;AA4BA,MAAa,aAAa;AAE1B,MAAM,gBAAgB,QAAgC;CACrD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GAAW,OAAO;CAC9C,MAAM,IAAI;CACV,IAAI,CAAC,MAAM,QAAQ,EAAE,KAAK,GAAG,OAAO;CACpC,MAAM,QAAQ,EAAE;CAEhB,IADoB,MAAM,MAAM,MAAM,OAAO,GAAG,OAAO,YAAY,EAAE,GAAG,WAAW,CACrE,GAAG,OAAO;CACxB,MAAM,MAAM,MAAM,KAAK,MAAM,EAAE,EAAY;CAC3C,IAAI,IAAI,IAAI,GAAG,EAAE,SAAS,IAAI,QAC7B,OAAO;CAER,MAAM,QAAQ,IAAI,IAAI,GAAG;CACzB,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,KAAK,KAAK;EAChB,IAAI,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,GAChF,OAAO,eAAe,GAAG,kCAAkC,KAAK,KAAK;EAEtE,IAAI,MAAM,QAAQ,KAAK,WAAW;QAC5B,MAAM,KAAK,KAAK,aACpB,IAAI,OAAO,GAAG,OAAO,YAAY,EAAE,GAAG,SAAS,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,GAClE,OAAO,eAAe,GAAG,sCAAsC,EAAE,GAAG;EAAA;CAIxE;CACA,OAAO;AACR;;AAGA,MAAM,yBAAyB,QAAyB;CACvD,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO;CACpD,MAAM,QAAS,IAA4B;CAC3C,OAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,SAAS;AAC9C;AAWA,MAAa,wBAAwB,EACpC,WACA,UACA,cACA,iBACA,uBAAuB,IAAI,IAAI,OAAO,QAAQ,8BAA8B,CAAC,GAC7E,iCAAiB,IAAI,IAAI,QACwB;CACjD,MAAM,iBAAiB,sBAAsB,QAAQ;CACrD,MAAM,mBAAmB;CAEzB,MAAM,kBAAgD,EAAE,MAAM,UAAU;EACvE,IACC,QACA,OAAO,KAAK,wBAAwB,YACpC,CAAC,qBAAqB,IAAI,KAAK,mBAAmB,GAElD,KAAK,sBAAsB;EAE5B,IAAI,QAAQ,MAAM,QAAQ,KAAK,MAAM,GAAG;GACvC,MAAM,aAAyB,wBAC9B,KAAK,QACL,cACD;GACA,KAAK,MAAM,SAAS,YACnB,IAAI,gBAAgB,OACnB,MAAM,aAAa,cAAc,MAAM,UAAU;GAGnD,KAAK,SAAS;GACd,MAAM,aAAa,WACjB,KAAK,UAAqB,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAA,CAAU,EAClF,QAAQ,SAAyB,SAAS,KAAA,CAAS;GACrD,MAAM,iBAAiB,cAAc,KAAK,MAAM,UAAU;GAG1D,IAAI,sBAAsB,KAAK,IAAI,IAAI,KAAK,mBAAmB,KAAA,GAC9D,MAAM,IAAI,gBACT;IACC,YAAY;IACZ,QAAQ,CACP;KACC,MAAM;KACN,SACC;IACF,CACD;GACD,GACA,IAAI,CACL;GAED,KAAK,OAAO;EACb;EACA,OAAO;CACR;CAEA,MAAM,gBAAyB;EAC9B;GAAE,MAAM;GAAS,MAAM;GAAQ,UAAU;GAAM,OAAO,YAAY,KAAK,UAAU;EAAE;EACnF;GACC,MAAM;GACN,MAAM;GACN,QAAQ,iBAAiB,UAAU,cAAc,eAAe;EACjE;EACA;GACC,MAAM;GACN,MAAM;GACN,UAAU;GACV,OAAO,EACN,YAAY,EACX,OAAO;IAAE,MAAM;IAAkB,aAAa,EAAE,eAAe;GAAE,EAClE,EACD;GAGA,kBAAkB,QACV;IACN,MAAM;IACN,UAAU,CAAC,OAAO;IAClB,sBAAsB;IACtB,YAAY,EACX,OAAO;KACN,MAAM;KACN,OAAO;MACN,MAAM;MACN,UAAU,CAAC,IAAI;MACf,sBAAsB;MACtB,YAAY;OACX,IAAI,EAAE,MAAM,SAAkB;OAC9B,OAAO,EAAE,MAAM,SAAkB;OACjC,QAAQ;QAAE,MAAM;QAAkB,OAAO,EAAE,MAAM,SAAkB;OAAE;OACrE,MAAM,EAAE,MAAM,SAAkB;OAChC,aAAa;QACZ,MAAM;QACN,OAAO;SACN,MAAM;SACN,UAAU,CAAC,IAAI;SACf,sBAAsB;SACtB,YAAY;UACX,IAAI,EAAE,MAAM,SAAkB;UAC9B,MAAM;WAAE,MAAM;WAAmB,sBAAsB;UAAK;SAC7D;QACD;OACD;MACD;KACD;IACD,EACD;GACD,EACD;EACD;EACA;GACC,MAAM;GACN,MAAM;GACN,QAAQ,kBAAkB,cAAc;GACxC,OAAO,YAAY,KAAK,aAAa;GAIrC,QAAQ,EAAE,MAAM,WAAW;EAC5B;EACA;GACC,MAAM;GACN,MAAM;GACN,cAAc;GACd,SAAS,CAAC,GAAG,qBAAqB,OAAO,CAAC,EAAE,KAAK,gBAAgB;IAChE,OAAO,SAAS,WAAW,KAAK;IAChC,OAAO,WAAW;GACnB,EAAE;GACF,OAAO,YAAY,KAAK,yBAAyB;GACjD,OAAO,EAAE,UAAU,UAAU;EAC9B;EACA;GACC,MAAM;GACN,MAAM;GACN,cAAc;GACd,OAAO,YAAY,KAAK,iBAAiB;GACzC,OAAO,EAAE,UAAU,UAAU;EAC9B;EACA;GACC,MAAM;GACN,MAAM;GACN,OAAO,YAAY,KAAK,kBAAkB;GAC1C,OAAO;IACN,UAAU;IACV,aACC;IACD,YAAY,SAAS,QAAQ,MAAM,WAAW;GAC/C;EACD;CACD;CAEA,MAAM,mBAAkD,CACvD;EACC,MAAM;EACN,QAAQ;EACR,SAAS,OAAO,QAAwB;GACvC,MAAM,QAAQ,OAAO,IAAI,OAAO,UAAU,WAAW,IAAI,MAAM,QAAQ,KAAA;GACvE,MAAM,EAAE,QAAQ,SAAS,MAAM,0BAA0B;IACxD,SAAS,IAAI;IACb,QAAQ,IAAI,aAAa;IACzB;IACA,UAAU,QAAQ,IAAI,IAAI;IAC1B;GACD,CAAC;GACD,OAAO,SAAS,KAAK,MAAM,EAAE,OAAO,CAAC;EACtC;CACD,CACD;CAEA,OAAO;EACN,GAAI,aAAa,CAAC;EAClB,MAAM;EACN,QAAQ;GACP,UAAU,YAAY,KAAK,sBAAsB;GACjD,QAAQ,YAAY,KAAK,oBAAoB;GAC7C,GAAI,WAAW,UAAU,CAAC;EAC3B;EACA,OAAO;GAAE,OAAO;GAAS,YAAY;GAAS,GAAI,WAAW,SAAS,CAAC;EAAG;EAC1E,QAAQ;GAAE,YAAY;GAAM,GAAI,WAAW,UAAU,CAAC;EAAG;EACzD,OAAO;GACN,GAAI,WAAW,SAAS,CAAC;GAEzB,gBAAgB,CAAC,gBAAgB,GAAI,WAAW,OAAO,kBAAkB,CAAC,CAAE;EAC7E;EACA,WAAW,CACV,GAAG,kBACH,GAAI,MAAM,QAAQ,WAAW,SAAS,IAAI,UAAU,YAAY,CAAC,CAClE;EACA,QAAQ,WAAW,SAAS,UAAU,OAAO,EAAE,cAAc,CAAC,IAAI;CACnE;AACD"}

package/dist/collections/uploads.d.ts

@@ -0,0 +1,30 @@
+import { CollectionOverrides } from "../plugin/collectionOverrides.js";
+import { CollectionConfig } from "payload";
+
+//#region src/collections/uploads.d.ts
+declare const FORM_UPLOADS_SLUG = "form-uploads";
+/** Override surface for the built-in upload collection. */
+type UploadsCollectionConfig = {
+  slug?: string; /** Merged onto the collection's `upload` config (e.g. `staticDir`, `mimeTypes`). `true` uses Payload defaults. */
+  upload?: NonNullable<CollectionConfig['upload']> | true; /** Replace access (defaults: anonymous create, authed read/update/delete). */
+  access?: CollectionConfig['access']; /** Append extra fields. */
+  fields?: CollectionConfig['fields'];
+};
+type UploadsOption = boolean | UploadsCollectionConfig;
+/**
+ * The built-in upload collection backing the `file` field. Anonymous create (public forms upload here),
+ * authed read/update/delete (only admins read stored files; submitters cannot enumerate others' uploads).
+ * Per-field MIME/size is re-enforced at submit, so the collection stays permissive by default. No
+ * `imageSizes`, so it needs no `sharp`. Projects with their own upload collection set `uploads: false` and
+ * point the file field's `relationTo` at theirs.
+ */
+declare const buildUploadsCollection: (config?: UploadsCollectionConfig, overrides?: CollectionOverrides) => CollectionConfig;
+/** Resolve the `uploads` plugin option: `false` disables, `true`/object enables the built-in collection. */
+declare const resolveUploads: (option: UploadsOption | undefined) => {
+  enabled: boolean;
+  slug: string;
+  collection?: CollectionConfig;
+};
+//#endregion
+export { FORM_UPLOADS_SLUG, UploadsCollectionConfig, UploadsOption, buildUploadsCollection, resolveUploads };
+//# sourceMappingURL=uploads.d.ts.map

package/dist/collections/uploads.js

@@ -0,0 +1,55 @@
+import { isLoggedIn } from "../plugin/access.js";
+//#region src/collections/uploads.ts
+const FORM_UPLOADS_SLUG = "form-uploads";
+/**
+* The built-in upload collection backing the `file` field. Anonymous create (public forms upload here),
+* authed read/update/delete (only admins read stored files; submitters cannot enumerate others' uploads).
+* Per-field MIME/size is re-enforced at submit, so the collection stays permissive by default. No
+* `imageSizes`, so it needs no `sharp`. Projects with their own upload collection set `uploads: false` and
+* point the file field's `relationTo` at theirs.
+*/
+const buildUploadsCollection = (config = {}, overrides) => {
+	const defaultFields = [{
+		name: "owner",
+		type: "text",
+		admin: {
+			readOnly: true,
+			hidden: true
+		}
+	}, ...config.fields ?? []];
+	return {
+		...overrides ?? {},
+		slug: config.slug ?? "form-uploads",
+		access: {
+			create: () => true,
+			read: isLoggedIn,
+			update: isLoggedIn,
+			delete: isLoggedIn,
+			...config.access ?? {},
+			...overrides?.access ?? {}
+		},
+		admin: {
+			group: "Forms",
+			...overrides?.admin ?? {}
+		},
+		upload: config.upload && config.upload !== true ? config.upload : true,
+		fields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields
+	};
+};
+/** Resolve the `uploads` plugin option: `false` disables, `true`/object enables the built-in collection. */
+const resolveUploads = (option) => {
+	if (option === false) return {
+		enabled: false,
+		slug: FORM_UPLOADS_SLUG
+	};
+	const collection = buildUploadsCollection(option && option !== true ? option : {});
+	return {
+		enabled: true,
+		slug: collection.slug,
+		collection
+	};
+};
+//#endregion
+export { FORM_UPLOADS_SLUG, buildUploadsCollection, resolveUploads };
+
+//# sourceMappingURL=uploads.js.map

package/dist/collections/uploads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.js","names":[],"sources":["../../src/collections/uploads.ts"],"sourcesContent":["import type { CollectionConfig, Field } from 'payload'\nimport { isLoggedIn } from '../plugin/access'\nimport type { CollectionOverrides } from '../plugin/collectionOverrides'\n\nexport const FORM_UPLOADS_SLUG = 'form-uploads'\n\n/** Override surface for the built-in upload collection. */\nexport type UploadsCollectionConfig = {\n\tslug?: string\n\t/** Merged onto the collection's `upload` config (e.g. `staticDir`, `mimeTypes`). `true` uses Payload defaults. */\n\tupload?: NonNullable<CollectionConfig['upload']> | true\n\t/** Replace access (defaults: anonymous create, authed read/update/delete). */\n\taccess?: CollectionConfig['access']\n\t/** Append extra fields. */\n\tfields?: CollectionConfig['fields']\n}\n\nexport type UploadsOption = boolean | UploadsCollectionConfig\n\n/**\n * The built-in upload collection backing the `file` field. Anonymous create (public forms upload here),\n * authed read/update/delete (only admins read stored files; submitters cannot enumerate others' uploads).\n * Per-field MIME/size is re-enforced at submit, so the collection stays permissive by default. No\n * `imageSizes`, so it needs no `sharp`. Projects with their own upload collection set `uploads: false` and\n * point the file field's `relationTo` at theirs.\n */\nexport const buildUploadsCollection = (\n\tconfig: UploadsCollectionConfig = {},\n\toverrides?: CollectionOverrides\n): CollectionConfig => {\n\tconst defaultFields: Field[] = [\n\t\t{ name: 'owner', type: 'text', admin: { readOnly: true, hidden: true } },\n\t\t...(config.fields ?? []),\n\t]\n\n\treturn {\n\t\t...(overrides ?? {}),\n\t\tslug: config.slug ?? FORM_UPLOADS_SLUG,\n\t\taccess: {\n\t\t\tcreate: () => true,\n\t\t\tread: isLoggedIn,\n\t\t\tupdate: isLoggedIn,\n\t\t\tdelete: isLoggedIn,\n\t\t\t...(config.access ?? {}),\n\t\t\t...(overrides?.access ?? {}),\n\t\t},\n\t\tadmin: { group: 'Forms', ...(overrides?.admin ?? {}) },\n\t\tupload: config.upload && config.upload !== true ? config.upload : true,\n\t\tfields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields,\n\t}\n}\n\n/** Resolve the `uploads` plugin option: `false` disables, `true`/object enables the built-in collection. */\nexport const resolveUploads = (\n\toption: UploadsOption | undefined\n): { enabled: boolean; slug: string; collection?: CollectionConfig } => {\n\tif (option === false) {\n\t\treturn { enabled: false, slug: FORM_UPLOADS_SLUG }\n\t}\n\tconst config = option && option !== true ? option : {}\n\tconst collection = buildUploadsCollection(config)\n\treturn { enabled: true, slug: collection.slug as string, collection }\n}\n"],"mappings":";;AAIA,MAAa,oBAAoB;;;;;;;;AAsBjC,MAAa,0BACZ,SAAkC,CAAC,GACnC,cACsB;CACtB,MAAM,gBAAyB,CAC9B;EAAE,MAAM;EAAS,MAAM;EAAQ,OAAO;GAAE,UAAU;GAAM,QAAQ;EAAK;CAAE,GACvE,GAAI,OAAO,UAAU,CAAC,CACvB;CAEA,OAAO;EACN,GAAI,aAAa,CAAC;EAClB,MAAM,OAAO,QAAA;EACb,QAAQ;GACP,cAAc;GACd,MAAM;GACN,QAAQ;GACR,QAAQ;GACR,GAAI,OAAO,UAAU,CAAC;GACtB,GAAI,WAAW,UAAU,CAAC;EAC3B;EACA,OAAO;GAAE,OAAO;GAAS,GAAI,WAAW,SAAS,CAAC;EAAG;EACrD,QAAQ,OAAO,UAAU,OAAO,WAAW,OAAO,OAAO,SAAS;EAClE,QAAQ,WAAW,SAAS,UAAU,OAAO,EAAE,cAAc,CAAC,IAAI;CACnE;AACD;;AAGA,MAAa,kBACZ,WACuE;CACvE,IAAI,WAAW,OACd,OAAO;EAAE,SAAS;EAAO,MAAM;CAAkB;CAGlD,MAAM,aAAa,uBADJ,UAAU,WAAW,OAAO,SAAS,CAAC,CACL;CAChD,OAAO;EAAE,SAAS;EAAM,MAAM,WAAW;EAAgB;CAAW;AACrE"}

package/dist/conditions/conditionType.js

@@ -0,0 +1,14 @@
+import { defaultConditionType } from "./fieldTypes.js";
+//#region src/conditions/conditionType.ts
+/** The condition input a field type uses in the builder: its declared `conditionType` or the value-kind default. */
+const conditionTypeForDefinition = (definition) => definition.conditionType ?? defaultConditionType(definition.value);
+/** A serializable slug -> condition type map for every registered field type, handed to the client builder. */
+const buildConditionTypeMap = (registry) => {
+	const map = {};
+	for (const definition of registry.values()) map[definition.type] = conditionTypeForDefinition(definition);
+	return map;
+};
+//#endregion
+export { buildConditionTypeMap };
+
+//# sourceMappingURL=conditionType.js.map

package/dist/conditions/conditionType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionType.js","names":[],"sources":["../../src/conditions/conditionType.ts"],"sourcesContent":["import type { AnyFormFieldDefinition } from '../fields/types'\nimport { type ConditionFieldType, defaultConditionType } from './fieldTypes'\n\n/** The condition input a field type uses in the builder: its declared `conditionType` or the value-kind default. */\nexport const conditionTypeForDefinition = (\n\tdefinition: Pick<AnyFormFieldDefinition, 'value' | 'conditionType'>\n): ConditionFieldType => definition.conditionType ?? defaultConditionType(definition.value)\n\n/** A serializable slug -> condition type map for every registered field type, handed to the client builder. */\nexport const buildConditionTypeMap = (\n\tregistry: Map<string, AnyFormFieldDefinition>\n): Record<string, ConditionFieldType> => {\n\tconst map: Record<string, ConditionFieldType> = {}\n\tfor (const definition of registry.values()) {\n\t\tmap[definition.type] = conditionTypeForDefinition(definition)\n\t}\n\treturn map\n}\n"],"mappings":";;;AAIA,MAAa,8BACZ,eACwB,WAAW,iBAAiB,qBAAqB,WAAW,KAAK;;AAG1F,MAAa,yBACZ,aACwC;CACxC,MAAM,MAA0C,CAAC;CACjD,KAAK,MAAM,cAAc,SAAS,OAAO,GACxC,IAAI,WAAW,QAAQ,2BAA2B,UAAU;CAE7D,OAAO;AACR"}

package/dist/conditions/evaluate.d.ts

@@ -0,0 +1,17 @@
+import { Where } from "payload";
+
+//#region src/conditions/evaluate.d.ts
+/**
+ * Evaluate a serializable `Where`-shaped condition against a flat map of (already coerced) form answers.
+ * An absent or empty condition matches (returns true). Operator semantics mirror Payload's query
+ * adapters: coerce then compare; `not_equals`/`not_in` are null-inclusive; `exists` treats `''`/absent
+ * as not-existing; `like` is case-insensitive and space-splits (every word must be a substring), and
+ * `not_like` is its logical negation (at least one word absent); `contains` is a single case-insensitive
+ * substring; comma-delimited `in`/`not_in` string values are split and trimmed. Geo (`near`/`within`/
+ * `intersects`) and `all` are out of scope and evaluate to false. Isomorphic: no `req`/DB access, so the
+ * renderer reuses it client-side.
+ */
+declare const evaluateCondition: (where: Where | null | undefined, answers: Record<string, unknown>) => boolean;
+//#endregion
+export { evaluateCondition };
+//# sourceMappingURL=evaluate.d.ts.map

package/dist/conditions/evaluate.js

@@ -0,0 +1,94 @@
+import { transformWhereQuery } from "payload/shared";
+//#region src/conditions/evaluate.ts
+const isNil = (value) => value === null || value === void 0;
+const toNumber = (value) => {
+	if (typeof value === "number") return Number.isFinite(value) ? value : void 0;
+	if (typeof value === "string" && value.trim() !== "") {
+		const next = Number(value);
+		return Number.isNaN(next) ? void 0 : next;
+	}
+};
+const toTime = (value) => {
+	if (value instanceof Date) return value.getTime();
+	if (typeof value === "string" && value.trim() !== "") {
+		const time = Date.parse(value);
+		return Number.isNaN(time) ? void 0 : time;
+	}
+};
+/** Strict, then numeric, then string equality, mirroring Payload's coerce-by-type-then-compare. */
+const valuesEqual = (answer, value) => {
+	if (answer === value) return true;
+	if (isNil(answer) || isNil(value)) return false;
+	const a = toNumber(answer);
+	const b = toNumber(value);
+	if (a !== void 0 && b !== void 0) return a === b;
+	return String(answer) === String(value);
+};
+const toList = (value) => {
+	if (Array.isArray(value)) return value;
+	if (typeof value === "string") return value.split(",").map((entry) => entry.trim());
+	return [value];
+};
+const ordered = (answer, value, compare) => {
+	const a = toNumber(answer) ?? toTime(answer);
+	const b = toNumber(value) ?? toTime(value);
+	if (a === void 0 || b === void 0) return false;
+	return compare(a, b);
+};
+/** Case-insensitive: every space-separated word in `value` is a substring of `answer` (Payload `like`). */
+const everyWord = (answer, value) => {
+	const haystack = String(answer).toLowerCase();
+	return String(value).toLowerCase().split(" ").filter((word) => word.length > 0).every((word) => haystack.includes(word));
+};
+const evaluateOperator = (operator, answer, value) => {
+	switch (operator) {
+		case "equals": return isNil(value) ? isNil(answer) : valuesEqual(answer, value);
+		case "not_equals": return isNil(value) ? !isNil(answer) : isNil(answer) || !valuesEqual(answer, value);
+		case "in": return toList(value).some((entry) => valuesEqual(answer, entry));
+		case "not_in": return isNil(answer) || !toList(value).some((entry) => valuesEqual(answer, entry));
+		case "exists": {
+			const present = !isNil(answer) && answer !== "";
+			return value === true || value === "true" ? present : !present;
+		}
+		case "greater_than": return ordered(answer, value, (a, b) => a > b);
+		case "greater_than_equal": return ordered(answer, value, (a, b) => a >= b);
+		case "less_than": return ordered(answer, value, (a, b) => a < b);
+		case "less_than_equal": return ordered(answer, value, (a, b) => a <= b);
+		case "like": return isNil(answer) ? false : everyWord(answer, value);
+		case "not_like": return isNil(answer) ? true : !everyWord(answer, value);
+		case "contains": return isNil(answer) ? false : String(answer).toLowerCase().includes(String(value).toLowerCase());
+		default: return false;
+	}
+};
+/**
+* Evaluate one `Where` node: every top-level key is ANDed. `or` is a disjunction of sub-conditions
+* (an empty `or` matches), `and` is a conjunction, and any other key is a field path whose
+* `{ operator: value }` constraints are ANDed. Recurses, so nested `or`/`and` groups are supported.
+*/
+const evaluateWhere = (where, answers) => Object.entries(where).every(([key, constraint]) => {
+	if (key === "or") {
+		const groups = Array.isArray(constraint) ? constraint : [];
+		return groups.length === 0 || groups.some((group) => evaluateWhere(group, answers));
+	}
+	if (key === "and") return (Array.isArray(constraint) ? constraint : []).every((group) => evaluateWhere(group, answers));
+	if (constraint == null || typeof constraint !== "object" || Array.isArray(constraint)) return false;
+	return Object.entries(constraint).every(([operator, value]) => evaluateOperator(operator, answers[key], value));
+});
+/**
+* Evaluate a serializable `Where`-shaped condition against a flat map of (already coerced) form answers.
+* An absent or empty condition matches (returns true). Operator semantics mirror Payload's query
+* adapters: coerce then compare; `not_equals`/`not_in` are null-inclusive; `exists` treats `''`/absent
+* as not-existing; `like` is case-insensitive and space-splits (every word must be a substring), and
+* `not_like` is its logical negation (at least one word absent); `contains` is a single case-insensitive
+* substring; comma-delimited `in`/`not_in` string values are split and trimmed. Geo (`near`/`within`/
+* `intersects`) and `all` are out of scope and evaluate to false. Isomorphic: no `req`/DB access, so the
+* renderer reuses it client-side.
+*/
+const evaluateCondition = (where, answers) => {
+	if (!where || Object.keys(where).length === 0) return true;
+	return evaluateWhere(transformWhereQuery(where), answers);
+};
+//#endregion
+export { evaluateCondition };
+
+//# sourceMappingURL=evaluate.js.map