@10x-media/form-builder 0.1.0-beta.1 → 0.1.0-beta.10

package/dist/collections/formSubmissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"formSubmissions.js","names":[],"sources":["../../src/collections/formSubmissions.ts"],"sourcesContent":["import type { CollectionAfterChangeHook, CollectionConfig } from 'payload'\nimport { dispatchActions } from '../actions/dispatch'\nimport type { ActionRegistry } from '../actions/registry'\nimport type { ActionInstance } from '../actions/runActions'\nimport type { ConsentSourceRegistry } from '../consent/registry'\nimport { resolveEventSink } from '../events/resolveEventSink'\nimport type { FormEventSink } from '../events/types'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport { isLoggedIn } from '../plugin/access'\nimport { buildSpamGuard } from '../spam/spamGuard'\nimport type { ResolvedSpamConfig } from '../spam/types'\nimport { validateSubmission } from '../submissions/validateSubmission'\nimport type { ValidationRuleRegistry } from '../validation/registry'\nimport { FORMS_SLUG } from './forms'\n\nexport const FORM_SUBMISSIONS_SLUG = 'form-submissions'\n\ntype BuildSubmissionsCollectionArgs = {\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\tconsentRegistry: ConsentSourceRegistry\n\tactionRegistry?: ActionRegistry\n\tevents?: FormEventSink\n\t/** Whether a job runner is likely present; gates the queued vs bounded-inline dispatch path. */\n\thasRunner?: boolean\n\t/** Upload collection slug for file fields without an explicit `relationTo`. */\n\tuploadSlug?: string\n\t/** Resolved spam config; when active, prepends the spam guard before validation. `false` disables it. */\n\tspam?: ResolvedSpamConfig | false\n}\n\nconst formIdOf = (form: unknown): number | string | undefined => {\n\tif (typeof form === 'number' || typeof form === 'string') {\n\t\treturn form\n\t}\n\tif (form && typeof form === 'object' && 'id' in form) {\n\t\tconst id = (form as { id: unknown }).id\n\t\tif (typeof id === 'number' || typeof id === 'string') {\n\t\t\treturn id\n\t\t}\n\t}\n\treturn undefined\n}\n\n/**\n * On a completed submission create, dispatch the form's post-submit actions and emit `submission.created`.\n * Both are side effects on an already-written row, so the whole body is wrapped: nothing it does can throw\n * past the hook (a failed action or sink must never fail the submission write). Dispatch is itself bounded\n * and non-throwing; the inline fallback is awaited so the bound caps the added latency, while the queued\n * path returns immediately. The form's `actions` are null-guarded for legacy rows created before the field\n * existed.\n */\nconst makeAfterChange =\n\t(args: {\n\t\tactionRegistry: ActionRegistry\n\t\tevents?: FormEventSink\n\t\thasRunner: boolean\n\t}): CollectionAfterChangeHook =>\n\tasync ({ doc, operation, req }) => {\n\t\tif (operation !== 'create' || (doc.status != null && doc.status !== 'complete')) {\n\t\t\treturn doc\n\t\t}\n\t\tconst { payload } = req\n\t\ttry {\n\t\t\tconst formId = formIdOf(doc.form)\n\t\t\tif (formId == null) {\n\t\t\t\treturn doc\n\t\t\t}\n\t\t\tconst form = await payload\n\t\t\t\t.findByID({ collection: FORMS_SLUG, id: formId, depth: 0, overrideAccess: true, req })\n\t\t\t\t.catch(() => null)\n\n\t\t\tawait dispatchActions({\n\t\t\t\tactions: (form?.actions ?? null) as ActionInstance[] | null,\n\t\t\t\tformId,\n\t\t\t\tsubmissionId: doc.id as number | string,\n\t\t\t\tregistry: args.actionRegistry,\n\t\t\t\tpayload,\n\t\t\t\treq,\n\t\t\t\thasRunner: args.hasRunner,\n\t\t\t})\n\n\t\t\ttry {\n\t\t\t\tawait resolveEventSink(args.events).emit({\n\t\t\t\t\ttype: 'submission.created',\n\t\t\t\t\tformId: String(formId),\n\t\t\t\t\tsubmissionId: String(doc.id),\n\t\t\t\t\tat: new Date().toISOString(),\n\t\t\t\t})\n\t\t\t} catch (error) {\n\t\t\t\tpayload.logger?.error(\n\t\t\t\t\t`@10x-media/form-builder: submission.created sink threw: ${\n\t\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t\t}`\n\t\t\t\t)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tpayload.logger?.error(\n\t\t\t\t`@10x-media/form-builder: afterChange dispatch failed for submission ${String(doc.id)}: ${\n\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t}`\n\t\t\t)\n\t\t}\n\t\treturn doc\n\t}\n\nexport const buildSubmissionsCollection = ({\n\tregistry,\n\truleRegistry,\n\tconsentRegistry,\n\tactionRegistry = new Map(),\n\tevents,\n\thasRunner = false,\n\tuploadSlug,\n\tspam,\n}: BuildSubmissionsCollectionArgs): CollectionConfig => ({\n\tslug: FORM_SUBMISSIONS_SLUG,\n\tlabels: { singular: 'Submission', plural: 'Submissions' },\n\tadmin: { group: 'Forms' },\n\taccess: {\n\t\tcreate: () => true,\n\t\tread: isLoggedIn,\n\t\tupdate: () => false,\n\t},\n\thooks: {\n\t\tbeforeValidate: [\n\t\t\t...(spam ? [buildSpamGuard(spam)] : []),\n\t\t\tvalidateSubmission({ registry, ruleRegistry, consentRegistry, uploadSlug }),\n\t\t],\n\t\tafterChange: [makeAfterChange({ actionRegistry, events, hasRunner })],\n\t},\n\tfields: [\n\t\t{ name: 'form', type: 'relationship', relationTo: FORMS_SLUG, required: true },\n\t\t{\n\t\t\tname: 'status',\n\t\t\ttype: 'select',\n\t\t\tdefaultValue: 'complete',\n\t\t\toptions: [\n\t\t\t\t{ label: 'Complete', value: 'complete' },\n\t\t\t\t{ label: 'Partial', value: 'partial' },\n\t\t\t],\n\t\t\t// Defense-in-depth at the REST layer: anonymous clients cannot set status via the API.\n\t\t\t// The validateSubmission hook also forces 'complete' server-side, so this covers both paths.\n\t\t\taccess: { create: isLoggedIn, update: isLoggedIn },\n\t\t},\n\t\t{ name: 'locale', type: 'text' },\n\t\t{ name: 'values', type: 'json' },\n\t\t{ name: 'descriptors', type: 'json' },\n\t\t{ name: 'consent', type: 'json' },\n\t\t{ name: 'meta', type: 'json' },\n\t\t{\n\t\t\tname: 'answers',\n\t\t\ttype: 'ui',\n\t\t\tadmin: {\n\t\t\t\tcomponents: { Field: '@10x-media/form-builder/rsc#SubmissionAnswers' },\n\t\t\t},\n\t\t},\n\t],\n})\n"],"mappings":";;;;;;;AAeA,MAAa,wBAAwB;AAgBrC,MAAM,YAAY,SAA+C;CAChE,IAAI,OAAO,SAAS,YAAY,OAAO,SAAS,UAC/C,OAAO;CAER,IAAI,QAAQ,OAAO,SAAS,YAAY,QAAQ,MAAM;EACrD,MAAM,KAAM,KAAyB;EACrC,IAAI,OAAO,OAAO,YAAY,OAAO,OAAO,UAC3C,OAAO;CAET;AAED;;;;;;;;;AAUA,MAAM,mBACJ,SAKD,OAAO,EAAE,KAAK,WAAW,UAAU;CAClC,IAAI,cAAc,YAAa,IAAI,UAAU,QAAQ,IAAI,WAAW,YACnE,OAAO;CAER,MAAM,EAAE,YAAY;CACpB,IAAI;EACH,MAAM,SAAS,SAAS,IAAI,IAAI;EAChC,IAAI,UAAU,MACb,OAAO;EAMR,MAAM,gBAAgB;GACrB,UAAU,MALQ,QACjB,SAAS;IAAE,YAAA;IAAwB,IAAI;IAAQ,OAAO;IAAG,gBAAgB;IAAM;GAAI,CAAC,EACpF,YAAY,IAAI,IAGD,WAAW;GAC3B;GACA,cAAc,IAAI;GAClB,UAAU,KAAK;GACf;GACA;GACA,WAAW,KAAK;EACjB,CAAC;EAED,IAAI;GACH,MAAM,iBAAiB,KAAK,MAAM,EAAE,KAAK;IACxC,MAAM;IACN,QAAQ,OAAO,MAAM;IACrB,cAAc,OAAO,IAAI,EAAE;IAC3B,qBAAI,IAAI,KAAK,GAAE,YAAY;GAC5B,CAAC;EACF,SAAS,OAAO;GACf,QAAQ,QAAQ,MACf,2DACC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;EACD;CACD,SAAS,OAAO;EACf,QAAQ,QAAQ,MACf,uEAAuE,OAAO,IAAI,EAAE,EAAE,IACrF,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;CACD;CACA,OAAO;AACR;AAED,MAAa,8BAA8B,EAC1C,UACA,cACA,iBACA,iCAAiB,IAAI,IAAI,GACzB,QACA,YAAY,OACZ,YACA,YACwD;CACxD,MAAM;CACN,QAAQ;EAAE,UAAU;EAAc,QAAQ;CAAc;CACxD,OAAO,EAAE,OAAO,QAAQ;CACxB,QAAQ;EACP,cAAc;EACd,MAAM;EACN,cAAc;CACf;CACA,OAAO;EACN,gBAAgB,CACf,GAAI,OAAO,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,GACrC,mBAAmB;GAAE;GAAU;GAAc;GAAiB;EAAW,CAAC,CAC3E;EACA,aAAa,CAAC,gBAAgB;GAAE;GAAgB;GAAQ;EAAU,CAAC,CAAC;CACrE;CACA,QAAQ;EACP;GAAE,MAAM;GAAQ,MAAM;GAAgB,YAAY;GAAY,UAAU;EAAK;EAC7E;GACC,MAAM;GACN,MAAM;GACN,cAAc;GACd,SAAS,CACR;IAAE,OAAO;IAAY,OAAO;GAAW,GACvC;IAAE,OAAO;IAAW,OAAO;GAAU,CACtC;GAGA,QAAQ;IAAE,QAAQ;IAAY,QAAQ;GAAW;EAClD;EACA;GAAE,MAAM;GAAU,MAAM;EAAO;EAC/B;GAAE,MAAM;GAAU,MAAM;EAAO;EAC/B;GAAE,MAAM;GAAe,MAAM;EAAO;EACpC;GAAE,MAAM;GAAW,MAAM;EAAO;EAChC;GAAE,MAAM;GAAQ,MAAM;EAAO;EAC7B;GACC,MAAM;GACN,MAAM;GACN,OAAO,EACN,YAAY,EAAE,OAAO,gDAAgD,EACtE;EACD;CACD;AACD"}
+{"version":3,"file":"formSubmissions.js","names":[],"sources":["../../src/collections/formSubmissions.ts"],"sourcesContent":["import type { CollectionAfterChangeHook, CollectionConfig, Field } from 'payload'\nimport type { RichTextBodyOption } from '../actions/body/serializeBody'\nimport { dispatchActions } from '../actions/dispatch'\nimport type { ActionRegistry } from '../actions/registry'\nimport type { ActionInstance } from '../actions/runActions'\nimport type { ConsentSnapshotMode } from '../consent/captureConsent'\nimport type { ConsentSourcesResolver } from '../consent/types'\nimport { resolveEventSink } from '../events/resolveEventSink'\nimport type { FormEventSink } from '../events/types'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport { isLoggedIn } from '../plugin/access'\nimport type { CollectionOverrides } from '../plugin/collectionOverrides'\nimport type { PollOptionSourceRegistry } from '../poll/registry'\nimport { buildSpamGuard } from '../spam/spamGuard'\nimport type { ResolvedSpamConfig } from '../spam/types'\nimport { validateSubmission } from '../submissions/validateSubmission'\nimport { POLL_CONTEXT_KEY, votedCookieName } from '../submissions/votedCookie'\nimport { keys } from '../translations/keys'\nimport { labelForKey } from '../translations/server'\nimport type { ValidationRuleRegistry } from '../validation/registry'\nimport { FORMS_SLUG } from './forms'\n\nexport const FORM_SUBMISSIONS_SLUG = 'form-submissions'\n\ntype BuildSubmissionsCollectionArgs = {\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\t/** The host's consent sources resolver (plugin option `consent.sources`); absent when no sources are configured. */\n\tconsentSources?: ConsentSourcesResolver\n\t/** What each consent proof snapshots of the agreed wording (plugin option `consent.snapshot`). */\n\tconsentSnapshot?: ConsentSnapshotMode\n\tactionRegistry?: ActionRegistry\n\tevents?: FormEventSink\n\t/** Whether a job runner is likely present; gates the queued vs bounded-inline dispatch path. */\n\thasRunner?: boolean\n\t/** Body serialization customization forwarded to the inline action dispatch path. */\n\trichText?: RichTextBodyOption\n\t/** The plugin-configured uploads collection slug; absent when uploads are disabled. */\n\tuploadSlug?: string\n\t/** Resolved spam config; when active, prepends the spam guard before validation. `false` disables it. */\n\tspam?: ResolvedSpamConfig | false\n\t/** Opt-in (`poll.votedCookie`): set an httpOnly `fb-voted-{formId}` cookie on poll submission creates. */\n\tvotedCookie?: boolean\n\t/** Registered poll option sources; submission validation resolves allowed values through them. */\n\tpollSourceRegistry?: PollOptionSourceRegistry\n\t/**\n\t * When `true`, reveals the standalone `locale`, `values`, `descriptors`, `consent`, and `meta`\n\t * fields in the admin UI. Default `false`, because the `SubmissionAnswers` UI component already\n\t * represents them fully (locale and meta are folded into its Submission-details section).\n\t */\n\tshowRawFields?: boolean\n\toverrides?: CollectionOverrides\n}\n\nconst formIdOf = (form: unknown): number | string | undefined => {\n\tif (typeof form === 'number' || typeof form === 'string') {\n\t\treturn form\n\t}\n\tif (form && typeof form === 'object' && 'id' in form) {\n\t\tconst id = (form as { id: unknown }).id\n\t\tif (typeof id === 'number' || typeof id === 'string') {\n\t\t\treturn id\n\t\t}\n\t}\n\treturn undefined\n}\n\n/**\n * On a completed submission create, dispatch the form's post-submit actions and emit `submission.created`.\n * Both are side effects on an already-written row, so the whole body is wrapped: nothing it does can throw\n * past the hook (a failed action or sink must never fail the submission write). Dispatch is itself bounded\n * and non-throwing; the inline fallback is awaited so the bound caps the added latency, while the queued\n * path returns immediately. The form's `actions` are null-guarded for legacy rows created before the field\n * existed.\n */\nconst makeAfterChange =\n\t(args: {\n\t\tactionRegistry: ActionRegistry\n\t\tevents?: FormEventSink\n\t\thasRunner: boolean\n\t\trichText?: RichTextBodyOption\n\t}): CollectionAfterChangeHook =>\n\tasync ({ doc, operation, req }) => {\n\t\tif (operation !== 'create' || (doc.status != null && doc.status !== 'complete')) {\n\t\t\treturn doc\n\t\t}\n\t\tconst { payload } = req\n\t\ttry {\n\t\t\tconst formId = formIdOf(doc.form)\n\t\t\tif (formId == null) {\n\t\t\t\treturn doc\n\t\t\t}\n\t\t\tconst form = await payload\n\t\t\t\t.findByID({ collection: FORMS_SLUG, id: formId, depth: 0, overrideAccess: true, req })\n\t\t\t\t.catch(() => null)\n\n\t\t\tawait dispatchActions({\n\t\t\t\tactions: (form?.actions ?? null) as ActionInstance[] | null,\n\t\t\t\tformId,\n\t\t\t\tsubmissionId: doc.id as number | string,\n\t\t\t\tregistry: args.actionRegistry,\n\t\t\t\tpayload,\n\t\t\t\treq,\n\t\t\t\thasRunner: args.hasRunner,\n\t\t\t\trichText: args.richText,\n\t\t\t})\n\n\t\t\ttry {\n\t\t\t\tawait resolveEventSink(args.events).emit({\n\t\t\t\t\ttype: 'submission.created',\n\t\t\t\t\tformId: String(formId),\n\t\t\t\t\tsubmissionId: String(doc.id),\n\t\t\t\t\tat: new Date().toISOString(),\n\t\t\t\t})\n\t\t\t} catch (error) {\n\t\t\t\tpayload.logger?.error(\n\t\t\t\t\t`@10x-media/form-builder: submission.created sink threw: ${\n\t\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t\t}`\n\t\t\t\t)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tpayload.logger?.error(\n\t\t\t\t`@10x-media/form-builder: afterChange dispatch failed for submission ${String(doc.id)}: ${\n\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t}`\n\t\t\t)\n\t\t}\n\t\treturn doc\n\t}\n\n/**\n * Opt-in (`poll.votedCookie`) hook: after a submission to a poll-enabled form is created, appends\n * an httpOnly `fb-voted-{formId}=1` cookie via `req.responseHeaders`, Payload's supported channel\n * for hook-set response headers (its own auth strategies use it; `handleEndpoints` merges it into\n * every REST response). Reads the poll config `validateSubmission` stashed on `req.context`,\n * falling back to a form fetch when absent. httpOnly keeps the marker readable only server-side\n * (`hasVotedCookie`); the client `<Poll>` keeps its localStorage guard.\n */\nconst makeVotedCookieHook = (): CollectionAfterChangeHook => {\n\treturn async ({ doc, operation, req }) => {\n\t\tif (operation !== 'create') {\n\t\t\treturn doc\n\t\t}\n\t\tconst formId = formIdOf(doc.form)\n\t\tif (formId == null) {\n\t\t\treturn doc\n\t\t}\n\t\tconst stashed = req.context?.[POLL_CONTEXT_KEY]\n\t\tlet pollEnabled = typeof stashed === 'boolean' ? stashed : undefined\n\t\tif (pollEnabled === undefined) {\n\t\t\tconst form = await req.payload\n\t\t\t\t.findByID({ collection: FORMS_SLUG, id: formId, depth: 0, overrideAccess: true, req })\n\t\t\t\t.catch(() => null)\n\t\t\tpollEnabled = form?.pollEnabled === true\n\t\t}\n\t\tif (!pollEnabled) {\n\t\t\treturn doc\n\t\t}\n\t\treq.responseHeaders ??= new Headers()\n\t\treq.responseHeaders.append(\n\t\t\t'Set-Cookie',\n\t\t\t`${votedCookieName(formId)}=1; Path=/; Max-Age=31536000; HttpOnly; SameSite=Lax`\n\t\t)\n\t\treturn doc\n\t}\n}\n\nexport const buildSubmissionsCollection = ({\n\tregistry,\n\truleRegistry,\n\tconsentSources,\n\tconsentSnapshot,\n\tactionRegistry = new Map(),\n\tevents,\n\thasRunner = false,\n\trichText,\n\tuploadSlug,\n\tspam,\n\tvotedCookie = false,\n\tpollSourceRegistry,\n\tshowRawFields = false,\n\toverrides,\n}: BuildSubmissionsCollectionArgs): CollectionConfig => {\n\tconst defaultFields: Field[] = [\n\t\t{ name: 'form', type: 'relationship', relationTo: FORMS_SLUG, required: true },\n\t\t{\n\t\t\tname: 'status',\n\t\t\ttype: 'select',\n\t\t\tdefaultValue: 'complete',\n\t\t\toptions: [\n\t\t\t\t{ label: labelForKey(keys.statusComplete), value: 'complete' },\n\t\t\t\t{ label: labelForKey(keys.statusPartial), value: 'partial' },\n\t\t\t],\n\t\t\t// Not clearable: aggregation counts `status: complete` submissions, so a cleared status\n\t\t\t// would drop the submission out of every poll result with nothing in the UI saying so.\n\t\t\tadmin: { isClearable: false },\n\t\t\t// Defense-in-depth at the REST layer: anonymous clients cannot set status via the API.\n\t\t\t// The validateSubmission hook also forces 'complete' server-side, so this covers both paths.\n\t\t\taccess: { create: isLoggedIn, update: isLoggedIn },\n\t\t},\n\t\t// answers UI appears first so it is the dominant view when opening a submission document.\n\t\t{\n\t\t\tname: 'answers',\n\t\t\ttype: 'ui',\n\t\t\tadmin: {\n\t\t\t\tcomponents: { Field: '@10x-media/form-builder/rsc#SubmissionAnswers' },\n\t\t\t},\n\t\t},\n\t\t{ name: 'locale', type: 'text', admin: { hidden: !showRawFields } },\n\t\t{ name: 'values', type: 'json', admin: { hidden: !showRawFields } },\n\t\t{ name: 'descriptors', type: 'json', admin: { hidden: !showRawFields } },\n\t\t{ name: 'consent', type: 'json', admin: { hidden: !showRawFields } },\n\t\t{ name: 'meta', type: 'json', admin: { hidden: !showRawFields } },\n\t]\n\n\treturn {\n\t\t...(overrides ?? {}),\n\t\tslug: FORM_SUBMISSIONS_SLUG,\n\t\tlabels: {\n\t\t\tsingular: labelForKey(keys.collectionSubmissionSingular),\n\t\t\tplural: labelForKey(keys.collectionSubmissionPlural),\n\t\t\t...(overrides?.labels ?? {}),\n\t\t},\n\t\tadmin: {\n\t\t\tgroup: 'Forms',\n\t\t\tdefaultColumns: ['form', 'status', 'locale', 'createdAt'],\n\t\t\t...(overrides?.admin ?? {}),\n\t\t},\n\t\taccess: {\n\t\t\tcreate: () => true,\n\t\t\tread: isLoggedIn,\n\t\t\tupdate: () => false,\n\t\t\t...(overrides?.access ?? {}),\n\t\t},\n\t\thooks: {\n\t\t\t...(overrides?.hooks ?? {}),\n\t\t\t// Spam guard + validateSubmission must remain first: they enforce the security invariant\n\t\t\t// that anonymous callers cannot bypass post-submit actions or supply a forged status.\n\t\t\t// Consumer beforeValidate hooks are appended after so they run on already-validated data.\n\t\t\tbeforeValidate: [\n\t\t\t\t...(spam ? [buildSpamGuard(spam)] : []),\n\t\t\t\tvalidateSubmission({\n\t\t\t\t\tregistry,\n\t\t\t\t\truleRegistry,\n\t\t\t\t\tconsentSources,\n\t\t\t\t\tconsentSnapshot,\n\t\t\t\t\tuploadSlug,\n\t\t\t\t\tpollSourceRegistry,\n\t\t\t\t\tstrictUploadOwnership: spam ? spam.uploadOwnership === 'strict' : false,\n\t\t\t\t}),\n\t\t\t\t...(overrides?.hooks?.beforeValidate ?? []),\n\t\t\t],\n\t\t\tafterChange: [\n\t\t\t\tmakeAfterChange({ actionRegistry, events, hasRunner, richText }),\n\t\t\t\t...(votedCookie ? [makeVotedCookieHook()] : []),\n\t\t\t\t...(overrides?.hooks?.afterChange ?? []),\n\t\t\t],\n\t\t},\n\t\tfields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields,\n\t}\n}\n"],"mappings":";;;;;;;;;;AAsBA,MAAa,wBAAwB;AAgCrC,MAAM,YAAY,SAA+C;CAChE,IAAI,OAAO,SAAS,YAAY,OAAO,SAAS,UAC/C,OAAO;CAER,IAAI,QAAQ,OAAO,SAAS,YAAY,QAAQ,MAAM;EACrD,MAAM,KAAM,KAAyB;EACrC,IAAI,OAAO,OAAO,YAAY,OAAO,OAAO,UAC3C,OAAO;CAET;AAED;;;;;;;;;AAUA,MAAM,mBACJ,SAMD,OAAO,EAAE,KAAK,WAAW,UAAU;CAClC,IAAI,cAAc,YAAa,IAAI,UAAU,QAAQ,IAAI,WAAW,YACnE,OAAO;CAER,MAAM,EAAE,YAAY;CACpB,IAAI;EACH,MAAM,SAAS,SAAS,IAAI,IAAI;EAChC,IAAI,UAAU,MACb,OAAO;EAMR,MAAM,gBAAgB;GACrB,UAAU,MALQ,QACjB,SAAS;IAAE,YAAA;IAAwB,IAAI;IAAQ,OAAO;IAAG,gBAAgB;IAAM;GAAI,CAAC,EACpF,YAAY,IAAI,IAGD,WAAW;GAC3B;GACA,cAAc,IAAI;GAClB,UAAU,KAAK;GACf;GACA;GACA,WAAW,KAAK;GAChB,UAAU,KAAK;EAChB,CAAC;EAED,IAAI;GACH,MAAM,iBAAiB,KAAK,MAAM,EAAE,KAAK;IACxC,MAAM;IACN,QAAQ,OAAO,MAAM;IACrB,cAAc,OAAO,IAAI,EAAE;IAC3B,qBAAI,IAAI,KAAK,GAAE,YAAY;GAC5B,CAAC;EACF,SAAS,OAAO;GACf,QAAQ,QAAQ,MACf,2DACC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;EACD;CACD,SAAS,OAAO;EACf,QAAQ,QAAQ,MACf,uEAAuE,OAAO,IAAI,EAAE,EAAE,IACrF,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;CACD;CACA,OAAO;AACR;;;;;;;;;AAUD,MAAM,4BAAuD;CAC5D,OAAO,OAAO,EAAE,KAAK,WAAW,UAAU;EACzC,IAAI,cAAc,UACjB,OAAO;EAER,MAAM,SAAS,SAAS,IAAI,IAAI;EAChC,IAAI,UAAU,MACb,OAAO;EAER,MAAM,UAAU,IAAI,UAAU;EAC9B,IAAI,cAAc,OAAO,YAAY,YAAY,UAAU,KAAA;EAC3D,IAAI,gBAAgB,KAAA,GAInB,eAAc,MAHK,IAAI,QACrB,SAAS;GAAE,YAAY;GAAY,IAAI;GAAQ,OAAO;GAAG,gBAAgB;GAAM;EAAI,CAAC,EACpF,YAAY,IAAI,IACE,gBAAgB;EAErC,IAAI,CAAC,aACJ,OAAO;EAER,IAAI,oBAAoB,IAAI,QAAQ;EACpC,IAAI,gBAAgB,OACnB,cACA,GAAG,gBAAgB,MAAM,EAAE,qDAC5B;EACA,OAAO;CACR;AACD;AAEA,MAAa,8BAA8B,EAC1C,UACA,cACA,gBACA,iBACA,iCAAiB,IAAI,IAAI,GACzB,QACA,YAAY,OACZ,UACA,YACA,MACA,cAAc,OACd,oBACA,gBAAgB,OAChB,gBACuD;CACvD,MAAM,gBAAyB;EAC9B;GAAE,MAAM;GAAQ,MAAM;GAAgB,YAAY;GAAY,UAAU;EAAK;EAC7E;GACC,MAAM;GACN,MAAM;GACN,cAAc;GACd,SAAS,CACR;IAAE,OAAO,YAAY,KAAK,cAAc;IAAG,OAAO;GAAW,GAC7D;IAAE,OAAO,YAAY,KAAK,aAAa;IAAG,OAAO;GAAU,CAC5D;GAGA,OAAO,EAAE,aAAa,MAAM;GAG5B,QAAQ;IAAE,QAAQ;IAAY,QAAQ;GAAW;EAClD;EAEA;GACC,MAAM;GACN,MAAM;GACN,OAAO,EACN,YAAY,EAAE,OAAO,gDAAgD,EACtE;EACD;EACA;GAAE,MAAM;GAAU,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;EAClE;GAAE,MAAM;GAAU,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;EAClE;GAAE,MAAM;GAAe,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;EACvE;GAAE,MAAM;GAAW,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;EACnE;GAAE,MAAM;GAAQ,MAAM;GAAQ,OAAO,EAAE,QAAQ,CAAC,cAAc;EAAE;CACjE;CAEA,OAAO;EACN,GAAI,aAAa,CAAC;EAClB,MAAM;EACN,QAAQ;GACP,UAAU,YAAY,KAAK,4BAA4B;GACvD,QAAQ,YAAY,KAAK,0BAA0B;GACnD,GAAI,WAAW,UAAU,CAAC;EAC3B;EACA,OAAO;GACN,OAAO;GACP,gBAAgB;IAAC;IAAQ;IAAU;IAAU;GAAW;GACxD,GAAI,WAAW,SAAS,CAAC;EAC1B;EACA,QAAQ;GACP,cAAc;GACd,MAAM;GACN,cAAc;GACd,GAAI,WAAW,UAAU,CAAC;EAC3B;EACA,OAAO;GACN,GAAI,WAAW,SAAS,CAAC;GAIzB,gBAAgB;IACf,GAAI,OAAO,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC;IACrC,mBAAmB;KAClB;KACA;KACA;KACA;KACA;KACA;KACA,uBAAuB,OAAO,KAAK,oBAAoB,WAAW;IACnE,CAAC;IACD,GAAI,WAAW,OAAO,kBAAkB,CAAC;GAC1C;GACA,aAAa;IACZ,gBAAgB;KAAE;KAAgB;KAAQ;KAAW;IAAS,CAAC;IAC/D,GAAI,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC;IAC7C,GAAI,WAAW,OAAO,eAAe,CAAC;GACvC;EACD;EACA,QAAQ,WAAW,SAAS,UAAU,OAAO,EAAE,cAAc,CAAC,IAAI;CACnE;AACD"}

package/dist/collections/forms.js

@@ -1,23 +1,58 @@
+import { fieldNamesOfType } from "../fields/fieldNamesOfType.js";
 import { keys } from "../translations/keys.js";
-import { labelFor, labelForKey } from "../translations/server.js";
+import { asTranslate, labelForKey, resolveDefinitionLabel } from "../translations/server.js";
+import { localizedIf } from "../fields/localizedIf.js";
+import { validateUrl } from "../validation/validateUrl.js";
+import { normalizeCalc } from "../calc/normalizeCalc.js";
 import { isLoggedIn } from "../plugin/access.js";
 import { buildActionBlocks } from "../actions/buildActionBlocks.js";
-import { resolveFormResultsRequest } from "../aggregation/resolveResultsRequest.js";
-import { normalizeCalc } from "../calc/normalizeCalc.js";
 import { buildConditionTypeMap } from "../conditions/conditionType.js";
-import { normalizeFormConditions } from "../conditions/normalizeConditions.js";
+import { buildOperandTypes, normalizeFormConditions, normalizeWhere } from "../conditions/normalizeConditions.js";
+import { resolveConsentStatements } from "../consent/resolveConsentStatements.js";
 import { buildFieldBlocks } from "../fields/buildFieldBlocks.js";
 import { normalizeFlow } from "../flow/normalizeFlow.js";
-import { DEFAULT_PRESENTATION_NAME, defaultPresentationDescriptors } from "../presentations/defaults.js";
+import { END_OF_FORM } from "../flow/types.js";
+import { buildPollOptionSourceFields } from "../poll/buildPollOptionSourceFields.js";
+import { resolvePollTypes } from "../poll/pollTypeRegistry.js";
+import { enqueuePollClose } from "../poll/closeJob.js";
+import { pollOutcomeBeforeChange } from "../poll/outcomeBeforeChange.js";
+import { buildDefaultOutcomeFields } from "../poll/outcomeFields.js";
+import { buildValidateResultsField, pollEligibleTypes } from "../poll/resultsField.js";
+import { buildDefaultButtonFields } from "./buttonFields.js";
+import { buildFormsEndpoints } from "./formsEndpoints.js";
 import { ValidationError } from "payload";
 //#region src/collections/forms.ts
 const FORMS_SLUG = "forms";
+/** `req.context` key under which `consentAfterRead` tracks the form ids it is currently resolving, to break re-entrant reads. */
+const CONSENT_AFTER_READ_GUARD = "formBuilderConsentAfterReadInFlight";
+/**
+* Require the title in the default locale (and on hosts without localization), but let it be empty in
+* other locales so a localized form falls back to the default-locale title rather than forcing a
+* translation for every locale. Payload's field-level `required` cannot express this: it enforces per
+* write-locale, which would make a title mandatory in every locale and break the documented fallback.
+*/
+const validateFormTitle = (value, { req }) => {
+	const localization = req.payload.config.localization;
+	const defaultLocale = localization ? localization.defaultLocale : void 0;
+	if ((defaultLocale === void 0 || req.locale === void 0 || req.locale === defaultLocale) && (typeof value !== "string" || value.trim().length === 0)) return req.t("validation:required");
+	return true;
+};
+/**
+* Field-level validation for the raw flow JSON: step ids must be non-empty, unique, and not the
+* reserved `END_OF_FORM` sentinel, and every explicit step-id reference (a string `next`, a
+* transition `to`) must resolve to a known step. `next: null` (explicit end of form) and an
+* absent `next` (fall through to the next step in array order) are always valid. On full-document
+* saves the beforeValidate pass has already run `normalizeFlow` and laundered dangling
+* references, so the unknown-target checks mainly protect partial API updates that send `flow`
+* without `fields`.
+*/
 const validateFlow = (raw) => {
 	if (raw === null || raw === void 0) return true;
 	const r = raw;
 	if (!Array.isArray(r.steps)) return true;
 	const steps = r.steps;
 	if (steps.find((s) => typeof s?.id !== "string" || s.id.length === 0)) return "Flow: every step must have a non-empty ID";
+	if (steps.some((s) => s.id === "__end__")) return `Flow: step ID "${END_OF_FORM}" is reserved`;
 	const ids = steps.map((s) => s.id);
 	if (new Set(ids).size !== ids.length) return "Flow: duplicate step IDs found";
 	const idSet = new Set(ids);
@@ -36,149 +71,409 @@ const providedFlowStepCount = (raw) => {
 	const steps = raw.steps;
 	return Array.isArray(steps) ? steps.length : 0;
 };
-const buildFormsCollection = ({ registry, ruleRegistry, consentRegistry, presentationRegistry = new Map(Object.entries(defaultPresentationDescriptors)), actionRegistry = /* @__PURE__ */ new Map() }) => {
+/**
+* Stamp the configured uploads collection slug onto every `file` block (including repeater
+* sub-fields) on each save. The block carries a hidden `uploadsCollection` field so the slug
+* reaches the client renderer through the form document; the server always overwrites it from
+* plugin config, so the stored value is never author- or client-controlled.
+*/
+const stampFileCollections = (rows, slug) => {
+	for (const row of rows) {
+		if (row.blockType === "file") row.uploadsCollection = slug;
+		const subFields = row.subFields;
+		if (Array.isArray(subFields)) stampFileCollections(subFields, slug);
+	}
+};
+const buildFormsCollection = ({ overrides, registry, ruleRegistry, consentSources, consentResolveOnRead, actionRegistry = /* @__PURE__ */ new Map(), localizeContent = true, richText, uploadsCollectionSlug, resultsAccess, pollSourceRegistry, pollTypeRegistry, outcomeFields, buttons, response, fromAddresses, departments, redirectRelationships }) => {
 	const conditionTypes = buildConditionTypeMap(registry);
+	const pollTypes = pollTypeRegistry ?? resolvePollTypes();
+	const pollResultsTypes = pollEligibleTypes(registry);
+	const bareTypes = new Set([...registry.values()].filter((d) => d.bare === true).map((d) => d.type));
+	const bareTypeLabels = Object.fromEntries([...registry.values()].filter((d) => d.bare === true).map((d) => [d.type, d.label]));
+	const responseEditor = richText?.responseEditor ?? richText?.editor;
 	const FLOW_BUILDER_REF = "@10x-media/form-builder/client#FlowBuilder";
+	const FIELD_NAME_SELECT_REF = "@10x-media/form-builder/client#FieldNameSelect";
+	const FLOW_STEPS_CELL_REF = "@10x-media/form-builder/client#FlowStepsCell";
+	const FIELD_COUNT_CELL_REF = "@10x-media/form-builder/client#FieldCountCell";
+	const CLOSE_POLL_BUTTON_REF = "@10x-media/form-builder/client#ClosePollButton";
+	const hasOptionSources = (pollSourceRegistry?.size ?? 0) > 0;
+	const orderedPollTypes = [...[...pollTypes.values()].filter((strategy) => strategy.type === "mostVoted"), ...[...pollTypes.values()].filter((strategy) => strategy.type !== "mostVoted")];
 	const beforeValidate = ({ data, req }) => {
-		if (data && typeof data.defaultPresentation === "string" && !presentationRegistry.has(data.defaultPresentation)) data.defaultPresentation = DEFAULT_PRESENTATION_NAME;
 		if (data && Array.isArray(data.fields)) {
 			const normalized = normalizeFormConditions(data.fields, conditionTypes);
 			for (const field of normalized) if ("expression" in field) field.expression = normalizeCalc(field.expression);
+			if (uploadsCollectionSlug) stampFileCollections(normalized, uploadsCollectionSlug);
 			data.fields = normalized;
-			const fieldNames = normalized.map((field) => typeof field.name === "string" ? field.name : void 0).filter((name) => name !== void 0);
-			const normalizedFlow = normalizeFlow(data.flow, fieldNames);
+			const fieldKeys = normalized.map((field) => {
+				if (typeof field.name === "string" && field.name.length > 0) return field.name;
+				return bareTypes.has(field.blockType) && field.id != null ? String(field.id) : void 0;
+			}).filter((key) => key !== void 0);
+			const operandTypes = buildOperandTypes(normalized, conditionTypes);
+			const normalizedFlow = normalizeFlow(data.flow, fieldKeys, (w) => normalizeWhere(w, operandTypes));
 			if (providedFlowStepCount(data.flow) > 0 && normalizedFlow === void 0) throw new ValidationError({
 				collection: FORMS_SLUG,
 				errors: [{
 					path: "flow",
-					message: "A flow needs at least two steps with unique, non-empty IDs. Add another step or remove the flow."
+					message: "A flow needs at least two steps. Add another step or remove the flow."
 				}]
 			}, req.t);
 			data.flow = normalizedFlow;
+			if (data.pollEnabled === true) {
+				const poll = data.poll != null && typeof data.poll === "object" ? data.poll : {};
+				const resultsField = typeof poll.resultsField === "string" ? poll.resultsField.trim() : "";
+				const sourceDriven = (typeof poll.optionSource === "string" ? poll.optionSource.trim() : "").length > 0 || poll.type === "source";
+				if (resultsField.length === 0 && !sourceDriven) {
+					const eligible = fieldNamesOfType(data.fields, pollResultsTypes);
+					if (eligible.length === 1) data.poll = {
+						...poll,
+						resultsField: eligible[0]
+					};
+					else {
+						const messageKey = eligible.length > 1 ? keys.pollVoteFieldChoose : keys.pollVoteFieldMissing;
+						throw new ValidationError({
+							collection: FORMS_SLUG,
+							errors: [{
+								path: "poll.resultsField",
+								message: asTranslate(req.t)(messageKey)
+							}]
+						}, req.t);
+					}
+				}
+			}
 		}
 		return data;
 	};
-	return {
-		slug: FORMS_SLUG,
-		labels: {
-			singular: "Form",
-			plural: "Forms"
-		},
-		admin: {
-			group: "Forms",
-			useAsTitle: "title"
-		},
-		access: { read: () => true },
-		hooks: { beforeValidate: [beforeValidate] },
+	const pollCloseAfterChange = async ({ doc, req }) => {
+		await enqueuePollClose({
+			payload: req.payload,
+			form: doc,
+			req
+		});
+		return doc;
+	};
+	const fieldsField = {
+		name: "fields",
+		type: "blocks",
+		blocks: buildFieldBlocks({
+			registry,
+			ruleRegistry,
+			localize: localizeContent
+		}),
+		admin: { components: { Cell: FIELD_COUNT_CELL_REF } }
+	};
+	const flowField = {
+		name: "flow",
+		type: "json",
+		validate: validateFlow,
+		admin: { components: {
+			Cell: FLOW_STEPS_CELL_REF,
+			Field: {
+				path: FLOW_BUILDER_REF,
+				clientProps: {
+					conditionTypes,
+					bareTypeLabels
+				}
+			}
+		} },
+		typescriptSchema: [() => ({
+			type: "object",
+			required: ["steps"],
+			additionalProperties: false,
+			properties: { steps: {
+				type: "array",
+				items: {
+					type: "object",
+					required: ["id"],
+					additionalProperties: true,
+					properties: {
+						id: { type: "string" },
+						title: { type: "string" },
+						fields: {
+							type: "array",
+							items: { type: "string" }
+						},
+						next: { type: ["string", "null"] },
+						transitions: {
+							type: "array",
+							items: {
+								type: "object",
+								required: ["to"],
+								additionalProperties: true,
+								properties: {
+									to: { type: "string" },
+									when: {
+										type: "object",
+										additionalProperties: true
+									}
+								}
+							}
+						}
+					}
+				}
+			} }
+		})]
+	};
+	const actionsField = {
+		name: "actions",
+		type: "blocks",
+		blocks: buildActionBlocks(actionRegistry),
+		label: labelForKey(keys.configActions),
+		access: { read: isLoggedIn }
+	};
+	const redirectReferenceField = redirectRelationships && redirectRelationships.length > 0 ? [{
+		name: "reference",
+		type: "relationship",
+		relationTo: redirectRelationships,
+		label: labelForKey(keys.responseRedirectReference),
+		admin: { description: labelForKey(keys.responseRedirectReferenceDescription) }
+	}] : [];
+	const defaultRedirectFields = [{
+		name: "url",
+		type: "text",
+		label: labelForKey(keys.responseUrl),
+		validate: validateUrl
+	}, ...redirectReferenceField];
+	const redirectFields = response?.redirect?.fields ? response.redirect.fields({ defaultFields: defaultRedirectFields }) : defaultRedirectFields;
+	const responseField = {
+		name: "response",
+		type: "group",
 		fields: [
 			{
-				name: "title",
-				type: "text",
-				required: true,
-				label: labelForKey(keys.fieldTitle)
+				name: "type",
+				type: "select",
+				defaultValue: "message",
+				label: labelForKey(keys.responseType),
+				admin: { isClearable: false },
+				options: [{
+					label: labelForKey(keys.responseTypeMessage),
+					value: "message"
+				}, {
+					label: labelForKey(keys.responseTypeRedirect),
+					value: "redirect"
+				}]
 			},
 			{
-				name: "fields",
-				type: "blocks",
-				blocks: buildFieldBlocks(registry, ruleRegistry, consentRegistry)
+				name: "message",
+				type: "richText",
+				label: labelForKey(keys.responseMessage),
+				admin: { condition: (_data, siblingData) => siblingData?.type !== "redirect" },
+				...responseEditor ? { editor: responseEditor } : {},
+				...localizedIf(localizeContent)
 			},
 			{
-				name: "flow",
-				type: "json",
-				validate: validateFlow,
+				name: "redirect",
+				type: "group",
+				label: labelForKey(keys.responseRedirect),
+				admin: {
+					condition: (_data, siblingData) => siblingData?.type === "redirect",
+					hideGutter: true
+				},
+				fields: redirectFields
+			}
+		]
+	};
+	const defaultOutcomeFields = buildDefaultOutcomeFields();
+	const defaultButtonFields = buildDefaultButtonFields(localizeContent);
+	const halfWidth = (field) => ({
+		...field,
+		admin: {
+			...field.admin,
+			width: "50%"
+		}
+	});
+	const composedButtons = buttons?.fields ? buttons.fields({ defaultFields: defaultButtonFields }) : defaultButtonFields;
+	const submitField = composedButtons.submit;
+	const prevNextRow = {
+		type: "row",
+		admin: { condition: (data) => {
+			const steps = data?.flow?.steps;
+			return Array.isArray(steps) && steps.length >= 1;
+		} },
+		fields: [halfWidth(composedButtons.prev), halfWidth(composedButtons.next)]
+	};
+	const pollGroupField = {
+		name: "poll",
+		type: "group",
+		label: false,
+		fields: [
+			{
+				name: "resultsField",
+				type: "text",
+				label: labelForKey(keys.pollResultsField),
+				validate: buildValidateResultsField(pollResultsTypes),
 				admin: { components: { Field: {
-					path: FLOW_BUILDER_REF,
-					clientProps: { conditionTypes }
-				} } },
-				typescriptSchema: [() => ({
-					type: "object",
-					required: ["steps"],
-					additionalProperties: false,
-					properties: { steps: {
-						type: "array",
-						items: {
-							type: "object",
-							required: ["id"],
-							additionalProperties: true,
-							properties: {
-								id: { type: "string" },
-								title: { type: "string" },
-								fields: {
-									type: "array",
-									items: { type: "string" }
-								},
-								next: { type: "string" },
-								transitions: {
-									type: "array",
-									items: {
-										type: "object",
-										required: ["to"],
-										additionalProperties: true,
-										properties: {
-											to: { type: "string" },
-											when: {
-												type: "object",
-												additionalProperties: true
-											}
-										}
-									}
-								}
-							}
-						}
-					} }
-				})]
+					path: FIELD_NAME_SELECT_REF,
+					clientProps: {
+						types: pollResultsTypes,
+						descriptionKey: keys.pollResultsFieldDescription
+					}
+				} } }
 			},
 			{
-				name: "actions",
-				type: "blocks",
-				blocks: buildActionBlocks(actionRegistry),
-				label: labelForKey(keys.configActions),
-				access: { read: isLoggedIn }
+				name: "type",
+				type: "select",
+				defaultValue: "mostVoted",
+				label: labelForKey(keys.pollType),
+				admin: {
+					isClearable: false,
+					description: labelForKey(keys.pollTypeDescription)
+				},
+				options: orderedPollTypes.filter((strategy) => strategy.type !== "source" || hasOptionSources).map((strategy) => ({
+					label: resolveDefinitionLabel(strategy.label),
+					value: strategy.type
+				}))
 			},
 			{
-				name: "defaultPresentation",
+				name: "resultsVisibility",
 				type: "select",
-				defaultValue: DEFAULT_PRESENTATION_NAME,
-				options: [...presentationRegistry.values()].map((descriptor) => ({
-					label: labelFor(descriptor.label),
-					value: descriptor.name
-				})),
-				label: labelForKey(keys.configDefaultPresentation),
-				admin: { position: "sidebar" }
+				defaultValue: "afterVote",
+				label: labelForKey(keys.pollResultsVisibility),
+				admin: { isClearable: false },
+				options: [{
+					label: labelForKey(keys.pollVisibilityAfterVote),
+					value: "afterVote"
+				}, {
+					label: labelForKey(keys.pollVisibilityAfterClose),
+					value: "afterClose"
+				}]
 			},
 			{
-				name: "showResults",
-				type: "checkbox",
-				defaultValue: false,
-				label: labelForKey(keys.configShowResults),
-				admin: { position: "sidebar" }
+				name: "closesAt",
+				type: "date",
+				label: labelForKey(keys.pollClosesAt),
+				admin: { date: { pickerAppearance: "dayAndTime" } }
 			},
 			{
-				name: "resultsField",
-				type: "text",
-				label: labelForKey(keys.configResultsField),
-				admin: {
-					position: "sidebar",
-					description: "Field whose aggregate results are public when \"Show results publicly\" is on. Use a choice field, never a free-text or PII field.",
-					condition: (data) => Boolean(data?.showResults)
-				}
-			}
-		],
-		endpoints: [{
-			path: "/:id/results",
-			method: "get",
-			handler: async (req) => {
-				const field = typeof req.query?.field === "string" ? req.query.field : void 0;
-				const { status, body } = await resolveFormResultsRequest({
-					payload: req.payload,
-					formId: req.routeParams?.id,
-					field,
-					isAuthed: Boolean(req.user),
-					req
-				});
-				return Response.json(body, { status });
+				name: "closePoll",
+				type: "ui",
+				admin: { components: { Field: CLOSE_POLL_BUTTON_REF } }
+			},
+			...buildPollOptionSourceFields(pollSourceRegistry ?? /* @__PURE__ */ new Map()),
+			{
+				name: "outcome",
+				type: "group",
+				label: labelForKey(keys.pollOutcome),
+				admin: { hideGutter: true },
+				fields: outcomeFields ? outcomeFields({ defaultFields: defaultOutcomeFields }) : [defaultOutcomeFields.winningValues, defaultOutcomeFields.resolvedAt]
 			}
-		}]
+		]
+	};
+	const defaultFields = [
+		{
+			name: "title",
+			type: "text",
+			label: labelForKey(keys.fieldTitle),
+			...localizedIf(localizeContent),
+			validate: validateFormTitle
+		},
+		{
+			type: "row",
+			fields: [{
+				name: "multistep",
+				type: "checkbox",
+				defaultValue: false,
+				label: labelForKey(keys.formMultistep),
+				admin: { width: "50%" }
+			}, {
+				name: "pollEnabled",
+				type: "checkbox",
+				defaultValue: false,
+				label: labelForKey(keys.formPollEnabled),
+				admin: { width: "50%" }
+			}]
+		},
+		{
+			type: "tabs",
+			tabs: [
+				{
+					label: labelForKey(keys.tabFields),
+					fields: [fieldsField, submitField]
+				},
+				{
+					label: labelForKey(keys.tabFlow),
+					admin: { condition: (_data, siblingData) => siblingData?.multistep === true },
+					fields: [flowField, prevNextRow]
+				},
+				{
+					label: labelForKey(keys.pollGroup),
+					admin: { condition: (_data, siblingData) => siblingData?.pollEnabled === true },
+					fields: [pollGroupField]
+				},
+				{
+					label: labelForKey(keys.tabActions),
+					fields: [actionsField]
+				},
+				{
+					label: labelForKey(keys.tabResponse),
+					fields: [responseField]
+				}
+			]
+		}
+	];
+	const consentAfterRead = consentSources && consentResolveOnRead !== false ? async ({ doc, req }) => {
+		const id = doc.id;
+		const key = id == null ? void 0 : String(id);
+		if (key !== void 0 && req.context) {
+			const inFlight = req.context[CONSENT_AFTER_READ_GUARD] ?? /* @__PURE__ */ new Set();
+			if (inFlight.has(key)) return doc;
+			inFlight.add(key);
+			req.context[CONSENT_AFTER_READ_GUARD] = inFlight;
+		}
+		try {
+			const statements = await resolveConsentStatements({
+				payload: req.payload,
+				req,
+				form: doc,
+				sources: consentSources
+			});
+			if (Object.keys(statements).length > 0) doc.consentStatements = statements;
+		} catch (error) {
+			req.payload.logger?.warn(`form-builder consent afterRead: ${String(error)}`);
+		} finally {
+			if (key !== void 0 && req.context) req.context[CONSENT_AFTER_READ_GUARD]?.delete(key);
+		}
+		return doc;
+	} : void 0;
+	const defaultEndpoints = buildFormsEndpoints({
+		resultsAccess,
+		pollResultsTypes,
+		consentSources,
+		fromAddresses,
+		departments
+	});
+	return {
+		...overrides ?? {},
+		slug: FORMS_SLUG,
+		labels: {
+			singular: labelForKey(keys.collectionFormSingular),
+			plural: labelForKey(keys.collectionFormPlural),
+			...overrides?.labels ?? {}
+		},
+		admin: {
+			group: "Forms",
+			useAsTitle: "title",
+			defaultColumns: [
+				"title",
+				"fields",
+				"flow",
+				"pollEnabled",
+				"updatedAt"
+			],
+			...overrides?.admin ?? {}
+		},
+		access: {
+			read: () => true,
+			...overrides?.access ?? {}
+		},
+		hooks: {
+			...overrides?.hooks ?? {},
+			beforeValidate: [beforeValidate, ...overrides?.hooks?.beforeValidate ?? []],
+			beforeChange: [pollOutcomeBeforeChange, ...overrides?.hooks?.beforeChange ?? []],
+			afterChange: [pollCloseAfterChange, ...overrides?.hooks?.afterChange ?? []],
+			afterRead: [...consentAfterRead ? [consentAfterRead] : [], ...overrides?.hooks?.afterRead ?? []]
+		},
+		endpoints: [...defaultEndpoints, ...Array.isArray(overrides?.endpoints) ? overrides.endpoints : []],
+		fields: overrides?.fields ? overrides.fields({ defaultFields }) : defaultFields
 	};
 };
 //#endregion