@10x-media/form-builder 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/options.d.ts

@@ -0,0 +1,281 @@
+import { TranslationsOption } from "./translations/index.js";
+import { RichTextBodyOption } from "./actions/body/serializeBody.js";
+import { ConsentSourcesResolver } from "./consent/types.js";
+import { FieldTypesConfig } from "./fields/registry.js";
+import { FormEventSink } from "./events/types.js";
+import { PollOptionSourcesConfig } from "./poll/registry.js";
+import { RecipientSourceRegistry } from "./actions/recipientSources.js";
+import { FromAddressSourceRegistry, FromAddressesResolver } from "./actions/fromAddresses.js";
+import { ActionsConfig } from "./actions/registry.js";
+import { FormResultsAccess } from "./aggregation/resolveResultsRequest.js";
+import { ButtonsOption } from "./collections/buttonFields.js";
+import { ConsentSnapshotMode } from "./consent/captureConsent.js";
+import { DepartmentEmailsResolver } from "./email/departments.js";
+import { RecipientsConfig } from "./actions/emailRecipients.js";
+import { CalcFunction, CalcSource } from "./calc/registry.js";
+import { ResponseOption } from "./collections/redirectFields.js";
+import { SettingsOption } from "./collections/settingsFields.js";
+import { CollectionOverrides } from "./plugin/collectionOverrides.js";
+import { SpamOption } from "./spam/types.js";
+import { UploadsOption } from "./plugin/uploadsCollection.js";
+import { OutcomeFieldsOverride } from "./poll/outcomeFields.js";
+import { PollTypesConfig } from "./poll/pollTypeRegistry.js";
+import { ValidationRulesConfig } from "./validation/registry.js";
+import { CollectionSlug } from "payload";
+
+//#region src/options.d.ts
+type FormBuilderPluginOptions = {
+  disabled?: boolean;
+  /**
+   * Per-locale overrides for this plugin's UI strings, keyed by the typed
+   * translation keys exported from `@10x-media/form-builder/i18n`. Values win
+   * over the built-in locales key-by-key; locales the plugin does not ship are
+   * added whole. App-level `i18n.translations` still wins over both.
+   */
+  translations?: TranslationsOption; /** Pluggable sink for form lifecycle events. Defaults to a no-op; analytics adapters or a future analytics plugin subscribe here. */
+  events?: FormEventSink;
+  /**
+   * Content-bearing author fields (labels, placeholders, option labels, action subjects and
+   * bodies) are localized by default. Payload strips the `localized` flag on hosts without
+   * `localization` configured, so the default is safe everywhere. Set `false` to keep form
+   * content single-locale even on localized hosts. Spread-overrides of the prebuilt default
+   * exports (`defaultFieldDefinitionsByType`, `defaultActionDefinitions`) carry `localized`
+   * flags from the default-true set; when opting out, derive overrides from
+   * `buildDefaultFieldDefinitions(false)` / `buildDefaultActionDefinitions({ localize: false })` instead.
+   * Consent statements are unaffected either way: they live on the host's own
+   * `consentSourcesField()`, which carries its own `localized` option.
+   */
+  localizeContent?: boolean; /** Add, override, or remove field types. `false` removes a built-in, `true` keeps it, an object adds or replaces one. */
+  fields?: FieldTypesConfig; /** Add, override, or remove validation rule types. `false` removes a built-in, `true` keeps it, an object adds or replaces one. */
+  rules?: ValidationRulesConfig; /** Add, override, or remove post-submit action types. `false` removes a built-in, `true` keeps it, an object adds or replaces one. */
+  actions?: ActionsConfig;
+  /**
+   * Calculation extensions. `sources` registers named value resolvers the calculation field can
+   * reference: `resolve` supplies one number per render/submission (a tax rate, a member
+   * discount), `resolveWeights` supplies per-option numbers for a chosen field (a product's
+   * price per selectable product). Values resolve server-side, ride the form document for the
+   * client's live preview, and re-resolve at submit, so the client never supplies them.
+   * `functions` registers extra calculation functions; client-side live preview additionally
+   * needs the same map passed to the Form component.
+   *
+   * Resolvers receive an unauthenticated visitor `req` on public reads and submits: never feed
+   * data derived from it into access-escalated queries, and gate per-user-sensitive numbers on
+   * `req.user`, because resolved values are embedded on every readable form document.
+   */
+  calc?: {
+    sources?: Record<string, CalcSource>;
+    functions?: Record<string, CalcFunction>;
+  };
+  /**
+   * Customize how the plugin's rich text is authored and rendered. `editor` is the default
+   * Lexical/richText editor for every plugin richText field (message content, consent
+   * statement, response message, action bodies); `bodyEditor` overrides the action body
+   * fields and `responseEditor` overrides the success response message field, each falling
+   * back to `editor`. `converters` spread over the default
+   * Lexical node converters; `serialize` replaces the whole action-body pipeline (e.g. to
+   * target chat or plain-text channels instead of email HTML). A custom `serialize` receives
+   * the submitted `form` (id/title) and `req`, enabling per-tenant lookups or handing the raw
+   * body off to a renderer like react-email.
+   */
+  richText?: RichTextBodyOption;
+  /**
+   * Email routing for the `emailTeam` and `confirmation` actions. Both sub-options are opt-in by the
+   * presence of a resolver (not a `false`/`true`/object flag) and share a shape: a `req`-scoped
+   * resolver, evaluated per request via an endpoint, whose choice is validated at save time only and
+   * never re-checked when the action sends (the config is admin-authored, not visitor-controlled).
+   *
+   * `fromAddresses` gives both actions a `from` select whose options come from the resolver; absent,
+   * neither action has a `from` field and every send uses the email adapter's default sender. The
+   * intended use is multi-tenant hosts where each tenant may only send from particular addresses
+   * (derive the tenant from `req`, return its allowed senders). Values are the literal string
+   * `payload.sendEmail` accepts as `from` (e.g. `'Name <addr@x.com>'` or a plain address).
+   *
+   * `departments` turns the `emailTeam` `to` into a select whose options come from the resolver
+   * (a `/:id/departments` endpoint); the intended use is to place `departmentsField()` on a document
+   * you own and read it back with `resolveDepartmentOptions`, which resolves each department's address
+   * for the requesting locale. Because `to` is localized, each admin locale stores its own resolved
+   * address and a submission's locale selects the address it routes to (Payload-native, no per-send
+   * lookup). Storing the resolved address, rather than a department id resolved live at send (consent's
+   * model), is deliberate: the routing target a form was saved with stays audit-stable even if the
+   * resolver's data later changes, so do not "fix" it into a live lookup. Multi-tenant hosts scope
+   * which document they read by the tenant derived from `req`; absent, the recipient fields simply
+   * offer no preset department options (still free-typed emails and field tokens).
+   */
+  email?: {
+    fromAddresses?: FromAddressesResolver;
+    /**
+     * Senders resolved at send time, offered in the `from` select alongside (and ahead of) the
+     * `fromAddresses` literals. Where a literal freezes the address an action was saved with, a
+     * source stores its namespaced `value` (e.g. `tenant:default`) and re-resolves the address on
+     * every send, so sender identity follows the host: a tenant that changes its from-address
+     * changes it for every existing form at once. `resolve` receives the same run-time args as a
+     * recipient source (the form, the submission, the request); the form document is the stable
+     * tenant handle on the queued path. See {@link FromAddressSource}.
+     */
+    fromSources?: FromAddressSourceRegistry;
+    departments?: DepartmentEmailsResolver; /** Narrows the recipient fields' behavior (free-typed emails, field tokens). See {@link RecipientsConfig}. */
+    recipients?: RecipientsConfig;
+    /**
+     * Server-resolved recipients, offered in every recipient field as their own option group and
+     * resolved to addresses at send time. Each source's `value` is a namespaced string (so it cannot
+     * collide with an address); its `resolve` receives the verified form context. See {@link RecipientSource}.
+     */
+    recipientSources?: RecipientSourceRegistry;
+  };
+  /**
+   * Where the consent statements a form can reference come from. Absent (the default): no sources,
+   * so the built-in `consent` field type is not registered at all and authors cannot add a consent
+   * field with nothing to reference (a developer-registered custom `consent` type via `fields`
+   * still wins).
+   *
+   * `sources` is an async `req`-scoped resolver returning the sources available to this request.
+   * The intended shape: place `consentSourcesField()` on a collection or global you own and read it
+   * back here. Multi-tenant hosts scope that read by the tenant derived from `req`, so a tenant's
+   * authors only ever see, and their visitors only ever agree to, their own statements. A form
+   * stores only a source's row `id`; the statement is resolved live per request (see
+   * `resolveConsentStatements`) and the proof is rebuilt from the source at submit, so neither is
+   * ever a copy the client could stale or forge.
+   */
+  consent?: {
+    sources: ConsentSourcesResolver;
+    /**
+     * What each submission snapshots of the agreed consent wording, for a versioned audit trail.
+     * `'both'` (default) stores a `statementHash`, the plain `statementText`, and the source name;
+     * `'hash'` keeps only the tamper-evident hash; `'text'` only the readable text; `false` keeps the
+     * lean id-only proof. The proof stays id-based regardless; this only adds the wording snapshot.
+     */
+    snapshot?: ConsentSnapshotMode;
+    /**
+     * Whether to resolve each form's consent statements on every read via an afterRead hook (the
+     * default, `true`). It attaches `consentStatements` to the form doc so a host can render the
+     * wording without a second call, at the cost of one source lookup per form read (N on a list).
+     * Set `false` to skip that hook and resolve statements yourself with the exported
+     * `resolveConsentStatements` when you render a form; submit-time proof capture is unaffected either
+     * way (it always re-resolves from the source).
+     */
+    resolveOnRead?: boolean;
+  };
+  /**
+   * Form-level button labels: `submitLabel` at the bottom of the Fields tab, `prevLabel` and
+   * `nextLabel` in a row at the bottom of the Flow tab (shown once the flow has a step). The
+   * rendered chrome resolves each label as `<Form>` prop, then the stored value, then the
+   * translated default. `fields` composes them: it receives the three default fields as a
+   * `{ submit, prev, next }` map with the content localization flag already applied and returns
+   * the map, so wrapping a default in a row with a host field (e.g. an icon select) or replacing
+   * one is explicit. `FormDocument.buttons` reassembles only those three known labels, so a
+   * host-added sibling field is still stored but is read off the raw document, not `doc.buttons`.
+   */
+  buttons?: ButtonsOption;
+  /**
+   * Form-level flag fields (`multistep`, `pollEnabled`, `persistSubmissions`), sidebar
+   * checkboxes by default. `fields` composes them from the defaults so a host can
+   * relocate, wrap, extend, or drop them.
+   */
+  settings?: SettingsOption;
+  /**
+   * The success-response group. `redirect.fields` composes the fields inside the `response.redirect`
+   * group, mirroring `buttons.fields`: it receives the default fields (the `url` text field, plus the
+   * polymorphic `reference` relationship when `redirectRelationships` is set) and returns the group's
+   * final field array, so a host can prepend a custom link field (the pattern most projects already
+   * have), swap `url` for their own picker, reorder, or filter. Omit it and the group stays the
+   * built-in `url` (+ optional `reference`), unchanged.
+   *
+   * The plugin's built-in redirect handling reads `redirect.url` (and `redirect.reference` when
+   * configured); `toFormDocument` passes the whole `response` group through, so a host that replaces
+   * `url` with their own link field owns resolving it to a destination in their frontend, the same as
+   * the internal-reference case.
+   */
+  response?: ResponseOption;
+  /**
+   * Collections whose documents `response.redirect` can reference (`response.redirect.reference`),
+   * letting an author redirect a visitor to an internal document instead of a URL after a
+   * successful submit. Absent (the default): no `reference` field exists at all, matching today's
+   * URL-only redirect. Always polymorphic, even for a single slug (a `CollectionSlug[]` array, not
+   * a bare `CollectionSlug`), so a host adding a second collection later never changes the stored
+   * shape, the same precedent as `consentSourcesField()`'s `page` picker. The plugin never resolves
+   * the reference to a URL itself (it has no notion of the host's routing); `toFormDocument` passes
+   * the raw `{ relationTo, value }` pair through on `FormDocument.response.redirect.reference` for
+   * the host to resolve. Mirrors the `redirectRelationships` option of Payload's native
+   * `plugin-form-builder`.
+   */
+  redirectRelationships?: CollectionSlug[];
+  /**
+   * File uploads are bring-your-own. Default `false`: no upload collection is involved and the
+   * built-in `file` field type is removed from the registry, so form authors cannot add a field
+   * with nowhere to land (a developer-registered custom `file` type via `fields` still wins).
+   * `{ collection: 'slug' }` points at a host-owned upload collection (created by the app with
+   * its storage adapter); the plugin validates it at boot, appends its hidden `owner` field when
+   * absent, and prepends the spam upload hooks.
+   */
+  uploads?: UploadsOption; /** Honeypot + rate-limiting (on by default) + a captcha adapter seam + upload-ownership scoping. `false` disables the whole subsystem. */
+  spam?: SpamOption;
+  /**
+   * Aggregate-results endpoint options. `access` gates anonymous reads after the form is loaded
+   * and before anything is served; absent keeps the plugin-default gating (poll opt-in +
+   * visibility + enumerable-field guard). Multi-tenant hosts should compare `form.tenant` against
+   * the tenant derived from `req` so one tenant's poll counts are never readable under another
+   * tenant's id. Authenticated callers bypass this seam.
+   */
+  results?: {
+    access?: FormResultsAccess;
+  };
+  /**
+   * Poll behavior. `votedCookie: true` sets an httpOnly `fb-voted-{formId}=1` cookie on each
+   * successful submission to a poll-enabled form, letting SSR hosts read the voted state via
+   * `hasVotedCookie` and pass it to `<Poll hasVoted>`. Default `false`.
+   * `sources` registers poll option sources (`definePollOptionSource`), letting authors populate
+   * a poll's choices from host domain data with stable values; there are no built-ins. With at
+   * least one source registered, the forms poll group gains an `optionSource` select plus its
+   * per-source `sourceConfig`, and submissions to a sourced poll only accept resolved values.
+   * `outcomeFields` composes the poll `outcome` group: it receives the two default fields
+   * (`winningValues`, `resolvedAt`) and returns the group's final field array verbatim, so a host
+   * can swap `winningValues` for its own component (e.g. a relationship picker over the voteable
+   * records). Membership validation runs server-side regardless, so a swap cannot bypass it.
+   * `types` registers outcome strategies (`definePollType`) shown in the poll `type` select. The
+   * built-ins `manual` (default, hand-picked), `mostVoted` (auto-resolves to the top choice(s) on
+   * close), and `source` (delegates to the option source) are always registered; a host entry keyed
+   * by (or carrying) a built-in slug replaces it. A closed poll whose strategy is not `manual`
+   * auto-resolves via a scheduled job when a runner is present, or on the next results read otherwise.
+   */
+  poll?: {
+    votedCookie?: boolean;
+    sources?: PollOptionSourcesConfig;
+    types?: PollTypesConfig;
+    outcomeFields?: OutcomeFieldsOverride;
+    /**
+     * Poll vote tally store (default on). Votes are counted into an append-only hidden
+     * collection of aggregate rows at submit time, so results reads are O(options), never
+     * truncate, and survive `persistSubmissions: false`. `false` restores scan-based results
+     * (and then a persist-off poll is rejected at save). `overrides` opens the tally
+     * collection (slug stays `form-poll-votes`).
+     */
+    votes?: false | {
+      overrides?: CollectionOverrides;
+    };
+  };
+  /**
+   * When `true`, the raw `values`, `descriptors`, and `consent` JSON fields are visible in the
+   * submission admin view. Default `false`, because the `SubmissionAnswers` UI component already
+   * represents those fields fully and they are noisy shown alongside it.
+   */
+  showSubmissionRawFields?: boolean;
+  /**
+   * Override individual plugin-managed collections using explicit spreads. Each key accepts a
+   * `CollectionOverrides` object: top-level keys are spread with the plugin's defaults (spread
+   * order per key determines who wins), hooks are appended after the plugin's own hooks, and
+   * `fields` is a function that receives the default fields and returns the final array so
+   * additions/removals are always intentional.
+   */
+  overrides?: {
+    forms?: CollectionOverrides;
+    formSubmissions?: CollectionOverrides;
+  };
+};
+declare module 'payload' {
+  interface RegisteredPlugins {
+    '@10x-media/form-builder': FormBuilderPluginOptions;
+  }
+}
+//#endregion
+export { FormBuilderPluginOptions };
+//# sourceMappingURL=options.d.ts.map

package/dist/plugin/applyRegistryConfig.d.ts

@@ -0,0 +1,11 @@
+//#region src/plugin/applyRegistryConfig.d.ts
+/** Any registry entry: an object carrying a string `type` discriminator, keyed by that type. */
+type TypedDefinition = {
+  type: string;
+};
+/** Per-type opt-in: `false` removes a type, `true` keeps the seeded default, a definition adds or replaces one. */
+type RegistryOption<T extends TypedDefinition> = boolean | T;
+type RegistryConfig<T extends TypedDefinition> = Record<string, RegistryOption<T>>;
+//#endregion
+export { RegistryConfig };
+//# sourceMappingURL=applyRegistryConfig.d.ts.map

package/dist/plugin/applyRegistryConfig.js

@@ -0,0 +1,20 @@
+//#region src/plugin/applyRegistryConfig.ts
+/**
+* Apply a per-type opt-in override map onto a seeded registry, in place. `false` removes the type,
+* `true` keeps whatever default is already seeded (a no-op when none exists), and a definition adds
+* or replaces one with its `type` forced to the config key, so the authored slug (derived from
+* `type`) and the lookup key can never drift apart and silently orphan the entry. Shared by the
+* field-type, validation-rule, action, poll-source, and poll-type registries.
+*/
+const applyRegistryConfig = (registry, config) => {
+	for (const [type, option] of Object.entries(config)) if (option === false) registry.delete(type);
+	else if (option !== true) registry.set(type, {
+		...option,
+		type
+	});
+	return registry;
+};
+//#endregion
+export { applyRegistryConfig };
+
+//# sourceMappingURL=applyRegistryConfig.js.map

package/dist/plugin/applyRegistryConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyRegistryConfig.js","names":[],"sources":["../../src/plugin/applyRegistryConfig.ts"],"sourcesContent":["/** Any registry entry: an object carrying a string `type` discriminator, keyed by that type. */\nexport type TypedDefinition = { type: string }\n\n/** Per-type opt-in: `false` removes a type, `true` keeps the seeded default, a definition adds or replaces one. */\nexport type RegistryOption<T extends TypedDefinition> = boolean | T\n\nexport type RegistryConfig<T extends TypedDefinition> = Record<string, RegistryOption<T>>\n\n/**\n * Apply a per-type opt-in override map onto a seeded registry, in place. `false` removes the type,\n * `true` keeps whatever default is already seeded (a no-op when none exists), and a definition adds\n * or replaces one with its `type` forced to the config key, so the authored slug (derived from\n * `type`) and the lookup key can never drift apart and silently orphan the entry. Shared by the\n * field-type, validation-rule, action, poll-source, and poll-type registries.\n */\nexport const applyRegistryConfig = <T extends TypedDefinition>(\n\tregistry: Map<string, T>,\n\tconfig: RegistryConfig<T>\n): Map<string, T> => {\n\tfor (const [type, option] of Object.entries(config)) {\n\t\tif (option === false) {\n\t\t\tregistry.delete(type)\n\t\t} else if (option !== true) {\n\t\t\tregistry.set(type, { ...option, type })\n\t\t}\n\t}\n\treturn registry\n}\n"],"mappings":";;;;;;;;AAeA,MAAa,uBACZ,UACA,WACoB;CACpB,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,MAAM,GACjD,IAAI,WAAW,OACd,SAAS,OAAO,IAAI;MACd,IAAI,WAAW,MACrB,SAAS,IAAI,MAAM;EAAE,GAAG;EAAQ;CAAK,CAAC;CAGxC,OAAO;AACR"}

package/dist/plugin/customState.js

@@ -0,0 +1,26 @@
+//#region src/plugin/customState.ts
+/** Root key under `config.custom` where the plugin stashes runtime state for root-level helpers. */
+const CUSTOM_KEY = "@10x-media/form-builder";
+/**
+* Merge `patch` into the plugin's slice of `config.custom`, leaving every other key untouched.
+* Root-level helpers (`resolvePollOptions`, `resolveConsentStatements`) are called by hosts with a
+* `payload` instance and no plugin state, so the plugin parks what they need on the config at boot
+* and they read it back through `payload.config`. Both readers share one key, so the plugin's slice
+* is patched rather than replaced.
+*/
+const stashCustomState = (custom, patch) => {
+	const existing = custom?.[CUSTOM_KEY] != null && typeof custom[CUSTOM_KEY] === "object" ? custom[CUSTOM_KEY] : {};
+	return {
+		...custom ?? {},
+		[CUSTOM_KEY]: {
+			...existing,
+			...patch
+		}
+	};
+};
+/** The plugin's slice of `payload.config.custom`, or an empty object when the plugin never booted. */
+const customStateOf = (payload) => payload.config.custom?.[CUSTOM_KEY] ?? {};
+//#endregion
+export { customStateOf, stashCustomState };
+
+//# sourceMappingURL=customState.js.map

package/dist/plugin/customState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customState.js","names":[],"sources":["../../src/plugin/customState.ts"],"sourcesContent":["import type { Payload } from 'payload'\n\n/** Root key under `config.custom` where the plugin stashes runtime state for root-level helpers. */\nconst CUSTOM_KEY = '@10x-media/form-builder'\n\n/**\n * Merge `patch` into the plugin's slice of `config.custom`, leaving every other key untouched.\n * Root-level helpers (`resolvePollOptions`, `resolveConsentStatements`) are called by hosts with a\n * `payload` instance and no plugin state, so the plugin parks what they need on the config at boot\n * and they read it back through `payload.config`. Both readers share one key, so the plugin's slice\n * is patched rather than replaced.\n */\nexport const stashCustomState = <TState extends Record<string, unknown>>(\n\tcustom: Record<string, unknown> | undefined,\n\tpatch: TState\n): Record<string, unknown> => {\n\tconst existing =\n\t\tcustom?.[CUSTOM_KEY] != null && typeof custom[CUSTOM_KEY] === 'object'\n\t\t\t? (custom[CUSTOM_KEY] as Record<string, unknown>)\n\t\t\t: {}\n\treturn { ...(custom ?? {}), [CUSTOM_KEY]: { ...existing, ...patch } }\n}\n\n/** The plugin's slice of `payload.config.custom`, or an empty object when the plugin never booted. */\nexport const customStateOf = <TState extends Record<string, unknown>>(\n\tpayload: Payload\n): Partial<TState> => (payload.config.custom?.[CUSTOM_KEY] as Partial<TState> | undefined) ?? {}\n"],"mappings":";;AAGA,MAAM,aAAa;;;;;;;;AASnB,MAAa,oBACZ,QACA,UAC6B;CAC7B,MAAM,WACL,SAAS,eAAe,QAAQ,OAAO,OAAO,gBAAgB,WAC1D,OAAO,cACR,CAAC;CACL,OAAO;EAAE,GAAI,UAAU,CAAC;GAAK,aAAa;GAAE,GAAG;GAAU,GAAG;EAAM;CAAE;AACrE;;AAGA,MAAa,iBACZ,YACsB,QAAQ,OAAO,SAAS,eAA+C,CAAC"}

package/dist/plugin/registerCollections.js

@@ -1,65 +1,68 @@
+import { buildPollVotesCollection } from "../poll/votes/votesCollection.js";
+import { registerPollCloseTask } from "../poll/closeJob.js";
 import { buildFormsCollection } from "../collections/forms.js";
 import { buildSubmissionsCollection } from "../collections/formSubmissions.js";
 import { registerActionsTask } from "../actions/task.js";
-import { buildUploadOwnerStamp, buildUploadRateLimit } from "../spam/uploadHooks.js";
+import { attachUploadsCollection } from "./uploadsCollection.js";
 //#region src/plugin/registerCollections.ts
-const registerCollections = ({ config, registry, ruleRegistry, consentRegistry, presentationRegistry, actionRegistry, hasJobsPlugin, events, uploads, spam, showSubmissionRawFields, overrides }) => {
-	registerActionsTask(config, actionRegistry);
+const registerCollections = ({ config, registry, ruleRegistry, calcAllowed, calcSources, calcFunctions, consentSources, consentSnapshot, consentResolveOnRead, actionRegistry, richText, hasJobsPlugin, events, uploads, spam, showSubmissionRawFields, localizeContent, resultsAccess, votedCookie, pollSourceRegistry, pollTypeRegistry, outcomeFields, pollVotes, buttons, settings, response, fromAddresses, fromSources, departments, redirectRelationships, overrides }) => {
+	const pollVotesEnabled = pollVotes !== false;
+	registerActionsTask(config, actionRegistry, richText);
+	registerPollCloseTask(config, pollVotesEnabled);
 	const hasRunner = Boolean(config.jobs?.autoRun) || hasJobsPlugin;
-	let uploadsCollection = null;
-	if (uploads.enabled && uploads.collection) {
-		const col = uploads.collection;
-		if (spam) {
-			col.hooks = col.hooks ?? {};
-			col.hooks.beforeOperation = [...col.hooks.beforeOperation ?? [], buildUploadRateLimit(spam)];
-			col.hooks.beforeValidate = [...col.hooks.beforeValidate ?? [], buildUploadOwnerStamp(spam)];
-		}
-		const ov = overrides?.uploads;
-		if (ov) {
-			const defaultFields = col.fields ?? [];
-			uploadsCollection = {
-				...col,
-				...ov ?? {},
-				access: {
-					...col.access ?? {},
-					...ov.access ?? {}
-				},
-				admin: {
-					...col.admin ?? {},
-					...ov.admin ?? {}
-				},
-				hooks: {
-					...ov.hooks ?? {},
-					beforeOperation: [...col.hooks?.beforeOperation ?? [], ...ov.hooks?.beforeOperation ?? []],
-					beforeValidate: [...col.hooks?.beforeValidate ?? [], ...ov.hooks?.beforeValidate ?? []]
-				},
-				fields: ov.fields ? ov.fields({ defaultFields }) : defaultFields
-			};
-		} else uploadsCollection = col;
-	}
+	const uploadSlug = uploads === false ? void 0 : uploads.collection;
+	if (uploads !== false) attachUploadsCollection({
+		config,
+		slug: uploads.collection,
+		spam
+	});
 	config.collections = [
 		...config.collections ?? [],
-		...uploadsCollection ? [uploadsCollection] : [],
 		buildFormsCollection({
 			registry,
 			ruleRegistry,
-			consentRegistry,
-			presentationRegistry,
+			calcAllowed,
+			calcSources,
+			consentSources,
+			consentResolveOnRead,
 			actionRegistry,
+			localizeContent,
+			richText,
+			uploadsCollectionSlug: uploadSlug,
+			resultsAccess,
+			pollVotesEnabled,
+			pollSourceRegistry,
+			pollTypeRegistry,
+			outcomeFields,
+			buttons,
+			settings,
+			response,
+			fromAddresses,
+			fromSources,
+			departments,
+			redirectRelationships,
 			overrides: overrides?.forms
 		}),
 		buildSubmissionsCollection({
 			registry,
 			ruleRegistry,
-			consentRegistry,
+			calcSources,
+			calcFunctions,
+			consentSources,
+			consentSnapshot,
 			actionRegistry,
+			richText,
 			events,
 			hasRunner,
-			uploadSlug: uploads.slug,
+			uploadSlug,
 			spam,
+			votedCookie,
+			pollSourceRegistry,
+			pollVotes,
 			showRawFields: showSubmissionRawFields,
 			overrides: overrides?.formSubmissions
-		})
+		}),
+		...pollVotes === false ? [] : [buildPollVotesCollection({ overrides: pollVotes.overrides })]
 	];
 };
 //#endregion

package/dist/plugin/registerCollections.js.map

@@ -1 +1 @@
-{"version":3,"file":"registerCollections.js","names":[],"sources":["../../src/plugin/registerCollections.ts"],"sourcesContent":["import type { CollectionConfig, Config, Field } from 'payload'\nimport type { ActionRegistry } from '../actions/registry'\nimport { registerActionsTask } from '../actions/task'\nimport { buildSubmissionsCollection } from '../collections/formSubmissions'\nimport { buildFormsCollection } from '../collections/forms'\nimport type { ConsentSourceRegistry } from '../consent/registry'\nimport type { FormEventSink } from '../events/types'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport type { PresentationDescriptorRegistry } from '../presentations/registry'\nimport type { ResolvedSpamConfig } from '../spam/types'\nimport { buildUploadOwnerStamp, buildUploadRateLimit } from '../spam/uploadHooks'\nimport type { ValidationRuleRegistry } from '../validation/registry'\nimport type { CollectionOverrides } from './collectionOverrides'\n\ntype RegisterCollectionsArgs = {\n\tconfig: Config\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\tconsentRegistry: ConsentSourceRegistry\n\tpresentationRegistry: PresentationDescriptorRegistry\n\tactionRegistry: ActionRegistry\n\thasJobsPlugin: boolean\n\tevents?: FormEventSink\n\tuploads: { enabled: boolean; slug: string; collection?: CollectionConfig }\n\tspam: ResolvedSpamConfig | false\n\tshowSubmissionRawFields: boolean\n\toverrides?: {\n\t\tforms?: CollectionOverrides\n\t\tformSubmissions?: CollectionOverrides\n\t\tuploads?: CollectionOverrides\n\t}\n}\n\nexport const registerCollections = ({\n\tconfig,\n\tregistry,\n\truleRegistry,\n\tconsentRegistry,\n\tpresentationRegistry,\n\tactionRegistry,\n\thasJobsPlugin,\n\tevents,\n\tuploads,\n\tspam,\n\tshowSubmissionRawFields,\n\toverrides,\n}: RegisterCollectionsArgs): void => {\n\tregisterActionsTask(config, actionRegistry)\n\tconst hasRunner = Boolean(config.jobs?.autoRun) || hasJobsPlugin\n\n\tlet uploadsCollection: CollectionConfig | null = null\n\tif (uploads.enabled && uploads.collection) {\n\t\tconst col = uploads.collection\n\n\t\t// Spam hooks are added first (plugin-owned invariant)\n\t\tif (spam) {\n\t\t\tcol.hooks = col.hooks ?? {}\n\t\t\tcol.hooks.beforeOperation = [...(col.hooks.beforeOperation ?? []), buildUploadRateLimit(spam)]\n\t\t\tcol.hooks.beforeValidate = [...(col.hooks.beforeValidate ?? []), buildUploadOwnerStamp(spam)]\n\t\t}\n\n\t\t// Apply CollectionOverrides using explicit spreads after spam hooks are in place.\n\t\t// ...col first so the plugin defaults are the base, ...(ov ?? {}) second so the consumer\n\t\t// wins for any top-level key not explicitly re-set below (consistent with forms/formSubmissions).\n\t\t// The locked keys (hooks array ordering, fields function) are spread last.\n\t\tconst ov = overrides?.uploads\n\t\tif (ov) {\n\t\t\tconst defaultFields = (col.fields ?? []) as Field[]\n\t\t\tuploadsCollection = {\n\t\t\t\t...col,\n\t\t\t\t...(ov ?? {}),\n\t\t\t\taccess: { ...(col.access ?? {}), ...(ov.access ?? {}) },\n\t\t\t\tadmin: { ...(col.admin ?? {}), ...(ov.admin ?? {}) },\n\t\t\t\thooks: {\n\t\t\t\t\t...(ov.hooks ?? {}),\n\t\t\t\t\t// Spam hooks stay first in each array; consumer hooks appended\n\t\t\t\t\tbeforeOperation: [\n\t\t\t\t\t\t...(col.hooks?.beforeOperation ?? []),\n\t\t\t\t\t\t...(ov.hooks?.beforeOperation ?? []),\n\t\t\t\t\t],\n\t\t\t\t\tbeforeValidate: [\n\t\t\t\t\t\t...(col.hooks?.beforeValidate ?? []),\n\t\t\t\t\t\t...(ov.hooks?.beforeValidate ?? []),\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t\tfields: ov.fields ? ov.fields({ defaultFields }) : defaultFields,\n\t\t\t}\n\t\t} else {\n\t\t\tuploadsCollection = col\n\t\t}\n\t}\n\n\tconfig.collections = [\n\t\t...(config.collections ?? []),\n\t\t...(uploadsCollection ? [uploadsCollection] : []),\n\t\tbuildFormsCollection({\n\t\t\tregistry,\n\t\t\truleRegistry,\n\t\t\tconsentRegistry,\n\t\t\tpresentationRegistry,\n\t\t\tactionRegistry,\n\t\t\toverrides: overrides?.forms,\n\t\t}),\n\t\tbuildSubmissionsCollection({\n\t\t\tregistry,\n\t\t\truleRegistry,\n\t\t\tconsentRegistry,\n\t\t\tactionRegistry,\n\t\t\tevents,\n\t\t\thasRunner,\n\t\t\tuploadSlug: uploads.slug,\n\t\t\tspam,\n\t\t\tshowRawFields: showSubmissionRawFields,\n\t\t\toverrides: overrides?.formSubmissions,\n\t\t}),\n\t]\n}\n"],"mappings":";;;;;AAiCA,MAAa,uBAAuB,EACnC,QACA,UACA,cACA,iBACA,sBACA,gBACA,eACA,QACA,SACA,MACA,yBACA,gBACoC;CACpC,oBAAoB,QAAQ,cAAc;CAC1C,MAAM,YAAY,QAAQ,OAAO,MAAM,OAAO,KAAK;CAEnD,IAAI,oBAA6C;CACjD,IAAI,QAAQ,WAAW,QAAQ,YAAY;EAC1C,MAAM,MAAM,QAAQ;EAGpB,IAAI,MAAM;GACT,IAAI,QAAQ,IAAI,SAAS,CAAC;GAC1B,IAAI,MAAM,kBAAkB,CAAC,GAAI,IAAI,MAAM,mBAAmB,CAAC,GAAI,qBAAqB,IAAI,CAAC;GAC7F,IAAI,MAAM,iBAAiB,CAAC,GAAI,IAAI,MAAM,kBAAkB,CAAC,GAAI,sBAAsB,IAAI,CAAC;EAC7F;EAMA,MAAM,KAAK,WAAW;EACtB,IAAI,IAAI;GACP,MAAM,gBAAiB,IAAI,UAAU,CAAC;GACtC,oBAAoB;IACnB,GAAG;IACH,GAAI,MAAM,CAAC;IACX,QAAQ;KAAE,GAAI,IAAI,UAAU,CAAC;KAAI,GAAI,GAAG,UAAU,CAAC;IAAG;IACtD,OAAO;KAAE,GAAI,IAAI,SAAS,CAAC;KAAI,GAAI,GAAG,SAAS,CAAC;IAAG;IACnD,OAAO;KACN,GAAI,GAAG,SAAS,CAAC;KAEjB,iBAAiB,CAChB,GAAI,IAAI,OAAO,mBAAmB,CAAC,GACnC,GAAI,GAAG,OAAO,mBAAmB,CAAC,CACnC;KACA,gBAAgB,CACf,GAAI,IAAI,OAAO,kBAAkB,CAAC,GAClC,GAAI,GAAG,OAAO,kBAAkB,CAAC,CAClC;IACD;IACA,QAAQ,GAAG,SAAS,GAAG,OAAO,EAAE,cAAc,CAAC,IAAI;GACpD;EACD,OACC,oBAAoB;CAEtB;CAEA,OAAO,cAAc;EACpB,GAAI,OAAO,eAAe,CAAC;EAC3B,GAAI,oBAAoB,CAAC,iBAAiB,IAAI,CAAC;EAC/C,qBAAqB;GACpB;GACA;GACA;GACA;GACA;GACA,WAAW,WAAW;EACvB,CAAC;EACD,2BAA2B;GAC1B;GACA;GACA;GACA;GACA;GACA;GACA,YAAY,QAAQ;GACpB;GACA,eAAe;GACf,WAAW,WAAW;EACvB,CAAC;CACF;AACD"}
+{"version":3,"file":"registerCollections.js","names":[],"sources":["../../src/plugin/registerCollections.ts"],"sourcesContent":["import type { CollectionSlug, Config } from 'payload'\nimport type { RichTextBodyOption } from '../actions/body/serializeBody'\nimport type { FromAddressesResolver, FromAddressSourceRegistry } from '../actions/fromAddresses'\nimport type { ActionRegistry } from '../actions/registry'\nimport { registerActionsTask } from '../actions/task'\nimport type { FormResultsAccess } from '../aggregation/resolveResultsRequest'\nimport type { CalcAllowed } from '../calc/normalizeCalc'\nimport type { CalcFunction, CalcSource } from '../calc/registry'\nimport type { ButtonsOption } from '../collections/buttonFields'\nimport { buildSubmissionsCollection } from '../collections/formSubmissions'\nimport { buildFormsCollection } from '../collections/forms'\nimport type { ResponseOption } from '../collections/redirectFields'\nimport type { SettingsOption } from '../collections/settingsFields'\nimport type { ConsentSnapshotMode } from '../consent/captureConsent'\nimport type { ConsentSourcesResolver } from '../consent/types'\nimport type { DepartmentEmailsResolver } from '../email/departments'\nimport type { FormEventSink } from '../events/types'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport { registerPollCloseTask } from '../poll/closeJob'\nimport type { OutcomeFieldsOverride } from '../poll/outcomeFields'\nimport type { PollTypeRegistry } from '../poll/pollTypeRegistry'\nimport type { PollOptionSourceRegistry } from '../poll/registry'\nimport { buildPollVotesCollection } from '../poll/votes/votesCollection'\nimport type { ResolvedSpamConfig } from '../spam/types'\nimport type { ValidationRuleRegistry } from '../validation/registry'\nimport type { CollectionOverrides } from './collectionOverrides'\nimport { attachUploadsCollection, type UploadsOption } from './uploadsCollection'\n\ntype RegisterCollectionsArgs = {\n\tconfig: Config\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\t/** Registered calc extension names; gates which expressions the forms beforeValidate accepts. */\n\tcalcAllowed?: CalcAllowed\n\t/** Registered calc sources (plugin option `calc.sources`); resolved on form reads and at submit. */\n\tcalcSources?: Record<string, CalcSource>\n\t/** Registered calc functions (plugin option `calc.functions`); threaded into submit-time evaluation. */\n\tcalcFunctions?: Record<string, CalcFunction>\n\tconsentSources?: ConsentSourcesResolver\n\tconsentSnapshot?: ConsentSnapshotMode\n\t/** Plugin `consent.resolveOnRead` (default true); false skips the per-read consent afterRead hook. */\n\tconsentResolveOnRead?: boolean\n\tactionRegistry: ActionRegistry\n\trichText?: RichTextBodyOption\n\thasJobsPlugin: boolean\n\tevents?: FormEventSink\n\tuploads: UploadsOption\n\tspam: ResolvedSpamConfig | false\n\tshowSubmissionRawFields: boolean\n\tlocalizeContent: boolean\n\tresultsAccess?: FormResultsAccess\n\tvotedCookie: boolean\n\tpollSourceRegistry: PollOptionSourceRegistry\n\tpollTypeRegistry: PollTypeRegistry\n\toutcomeFields?: OutcomeFieldsOverride\n\t/** Resolved `poll.votes` option; `false` skips registering the hidden tally collection. */\n\tpollVotes: false | { overrides?: CollectionOverrides }\n\tbuttons?: ButtonsOption\n\tsettings?: SettingsOption\n\tresponse?: ResponseOption\n\tfromAddresses?: FromAddressesResolver\n\tfromSources?: FromAddressSourceRegistry\n\tdepartments?: DepartmentEmailsResolver\n\tredirectRelationships?: CollectionSlug[]\n\toverrides?: {\n\t\tforms?: CollectionOverrides\n\t\tformSubmissions?: CollectionOverrides\n\t}\n}\n\nexport const registerCollections = ({\n\tconfig,\n\tregistry,\n\truleRegistry,\n\tcalcAllowed,\n\tcalcSources,\n\tcalcFunctions,\n\tconsentSources,\n\tconsentSnapshot,\n\tconsentResolveOnRead,\n\tactionRegistry,\n\trichText,\n\thasJobsPlugin,\n\tevents,\n\tuploads,\n\tspam,\n\tshowSubmissionRawFields,\n\tlocalizeContent,\n\tresultsAccess,\n\tvotedCookie,\n\tpollSourceRegistry,\n\tpollTypeRegistry,\n\toutcomeFields,\n\tpollVotes,\n\tbuttons,\n\tsettings,\n\tresponse,\n\tfromAddresses,\n\tfromSources,\n\tdepartments,\n\tredirectRelationships,\n\toverrides,\n}: RegisterCollectionsArgs): void => {\n\tconst pollVotesEnabled = pollVotes !== false\n\tregisterActionsTask(config, actionRegistry, richText)\n\tregisterPollCloseTask(config, pollVotesEnabled)\n\tconst hasRunner = Boolean(config.jobs?.autoRun) || hasJobsPlugin\n\n\tconst uploadSlug = uploads === false ? undefined : uploads.collection\n\tif (uploads !== false) {\n\t\tattachUploadsCollection({ config, slug: uploads.collection, spam })\n\t}\n\n\t// Payload lists nav entries in registration order (no nav-sort option). The primary\n\t// collection leads: forms, then form-submissions. Ordering the plugin's nav group against\n\t// host collections (including a BYO uploads collection) stays a host concern.\n\tconfig.collections = [\n\t\t...(config.collections ?? []),\n\t\tbuildFormsCollection({\n\t\t\tregistry,\n\t\t\truleRegistry,\n\t\t\tcalcAllowed,\n\t\t\tcalcSources,\n\t\t\tconsentSources,\n\t\t\tconsentResolveOnRead,\n\t\t\tactionRegistry,\n\t\t\tlocalizeContent,\n\t\t\trichText,\n\t\t\tuploadsCollectionSlug: uploadSlug,\n\t\t\tresultsAccess,\n\t\t\tpollVotesEnabled,\n\t\t\tpollSourceRegistry,\n\t\t\tpollTypeRegistry,\n\t\t\toutcomeFields,\n\t\t\tbuttons,\n\t\t\tsettings,\n\t\t\tresponse,\n\t\t\tfromAddresses,\n\t\t\tfromSources,\n\t\t\tdepartments,\n\t\t\tredirectRelationships,\n\t\t\toverrides: overrides?.forms,\n\t\t}),\n\t\tbuildSubmissionsCollection({\n\t\t\tregistry,\n\t\t\truleRegistry,\n\t\t\tcalcSources,\n\t\t\tcalcFunctions,\n\t\t\tconsentSources,\n\t\t\tconsentSnapshot,\n\t\t\tactionRegistry,\n\t\t\trichText,\n\t\t\tevents,\n\t\t\thasRunner,\n\t\t\tuploadSlug,\n\t\t\tspam,\n\t\t\tvotedCookie,\n\t\t\tpollSourceRegistry,\n\t\t\tpollVotes,\n\t\t\tshowRawFields: showSubmissionRawFields,\n\t\t\toverrides: overrides?.formSubmissions,\n\t\t}),\n\t\t...(pollVotes === false ? [] : [buildPollVotesCollection({ overrides: pollVotes.overrides })]),\n\t]\n}\n"],"mappings":";;;;;;;AAsEA,MAAa,uBAAuB,EACnC,QACA,UACA,cACA,aACA,aACA,eACA,gBACA,iBACA,sBACA,gBACA,UACA,eACA,QACA,SACA,MACA,yBACA,iBACA,eACA,aACA,oBACA,kBACA,eACA,WACA,SACA,UACA,UACA,eACA,aACA,aACA,uBACA,gBACoC;CACpC,MAAM,mBAAmB,cAAc;CACvC,oBAAoB,QAAQ,gBAAgB,QAAQ;CACpD,sBAAsB,QAAQ,gBAAgB;CAC9C,MAAM,YAAY,QAAQ,OAAO,MAAM,OAAO,KAAK;CAEnD,MAAM,aAAa,YAAY,QAAQ,KAAA,IAAY,QAAQ;CAC3D,IAAI,YAAY,OACf,wBAAwB;EAAE;EAAQ,MAAM,QAAQ;EAAY;CAAK,CAAC;CAMnE,OAAO,cAAc;EACpB,GAAI,OAAO,eAAe,CAAC;EAC3B,qBAAqB;GACpB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,uBAAuB;GACvB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,WAAW,WAAW;EACvB,CAAC;EACD,2BAA2B;GAC1B;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,eAAe;GACf,WAAW,WAAW;EACvB,CAAC;EACD,GAAI,cAAc,QAAQ,CAAC,IAAI,CAAC,yBAAyB,EAAE,WAAW,UAAU,UAAU,CAAC,CAAC;CAC7F;AACD"}

package/dist/plugin/uploadsCollection.d.ts

@@ -0,0 +1,16 @@
+import { Config } from "payload";
+
+//#region src/plugin/uploadsCollection.d.ts
+/**
+ * Uploads are bring-your-own: `false` (the default) disables file fields entirely, an object points
+ * at a host-owned upload collection (created by the app with its storage adapter of choice).
+ * `mimeTypes` optionally constrains the file field's MIME picker for hosts that enforce types by other
+ * means than the collection's own `upload.mimeTypes` (which is read automatically when this is absent).
+ */
+type UploadsOption = false | {
+  collection: string;
+  mimeTypes?: string[];
+};
+//#endregion
+export { UploadsOption };
+//# sourceMappingURL=uploadsCollection.d.ts.map

package/dist/plugin/uploadsCollection.js

@@ -0,0 +1,53 @@
+import { buildUploadOwnerStamp, buildUploadRateLimit } from "../spam/uploadHooks.js";
+//#region src/plugin/uploadsCollection.ts
+/**
+* The MIME types the file field's picker should offer: the host upload collection's own
+* `upload.mimeTypes`, or undefined (no constraint, so the picker keeps its full list). Read at
+* plugin-factory time, before the field registry freezes; `attachUploadsCollection` runs too late.
+*/
+const readUploadCollectionMimeTypes = (config, slug) => {
+	const upload = (config.collections?.find((collection) => collection.slug === slug))?.upload;
+	return typeof upload === "object" && Array.isArray(upload.mimeTypes) ? upload.mimeTypes : void 0;
+};
+/** Descends presentational rows only: an `owner` field nested in a group/tabs/collapsible is not detected, so a top-level one gets appended alongside it. */
+const hasFieldNamed = (fields, name) => fields.some((field) => {
+	if ("name" in field && field.name === name) return true;
+	return field.type === "row" && hasFieldNamed(field.fields, name);
+});
+/**
+* Wire the plugin's upload concerns into the host-owned upload collection named by
+* `uploads.collection`. The collection must already exist in `config.collections` and carry an
+* `upload` config; anything else is a plugin misconfiguration and throws at boot. The plugin
+* appends its hidden `owner` text field unless the host already defines a field named `owner`
+* (then that field is reused and must stay a text-compatible identity slot), and prepends the
+* spam upload hooks (rate limit, owner stamp) ahead of the host's own hooks so abuse checks run
+* first. The host entry is replaced with a new object; the host's config is never mutated.
+*/
+const attachUploadsCollection = ({ config, slug, spam }) => {
+	const collections = config.collections ?? [];
+	const target = collections.find((collection) => collection.slug === slug);
+	if (!target) throw new Error(`@10x-media/form-builder: uploads.collection "${slug}" was not found in config.collections. Create an upload-enabled collection (with your storage adapter) and pass its slug, e.g. formBuilder({ uploads: { collection: 'media' } }).`);
+	if (!target.upload) throw new Error(`@10x-media/form-builder: uploads.collection "${slug}" has no \`upload\` config. File fields store Payload uploads, so the collection must be an upload collection (set \`upload: true\` or an upload options object on it).`);
+	const fields = hasFieldNamed(target.fields, "owner") ? target.fields : [...target.fields, {
+		name: "owner",
+		type: "text",
+		admin: {
+			readOnly: true,
+			hidden: true
+		}
+	}];
+	const attached = {
+		...target,
+		fields,
+		...spam ? { hooks: {
+			...target.hooks ?? {},
+			beforeOperation: [buildUploadRateLimit(spam), ...target.hooks?.beforeOperation ?? []],
+			beforeValidate: [buildUploadOwnerStamp(spam), ...target.hooks?.beforeValidate ?? []]
+		} } : {}
+	};
+	config.collections = collections.map((collection) => collection.slug === slug ? attached : collection);
+};
+//#endregion
+export { attachUploadsCollection, readUploadCollectionMimeTypes };
+
+//# sourceMappingURL=uploadsCollection.js.map

package/dist/plugin/uploadsCollection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploadsCollection.js","names":[],"sources":["../../src/plugin/uploadsCollection.ts"],"sourcesContent":["import type { CollectionConfig, Config, Field } from 'payload'\nimport type { ResolvedSpamConfig } from '../spam/types'\nimport { buildUploadOwnerStamp, buildUploadRateLimit } from '../spam/uploadHooks'\n\n/**\n * Uploads are bring-your-own: `false` (the default) disables file fields entirely, an object points\n * at a host-owned upload collection (created by the app with its storage adapter of choice).\n * `mimeTypes` optionally constrains the file field's MIME picker for hosts that enforce types by other\n * means than the collection's own `upload.mimeTypes` (which is read automatically when this is absent).\n */\nexport type UploadsOption = false | { collection: string; mimeTypes?: string[] }\n\n/**\n * The MIME types the file field's picker should offer: the host upload collection's own\n * `upload.mimeTypes`, or undefined (no constraint, so the picker keeps its full list). Read at\n * plugin-factory time, before the field registry freezes; `attachUploadsCollection` runs too late.\n */\nexport const readUploadCollectionMimeTypes = (\n\tconfig: Config,\n\tslug: string\n): string[] | undefined => {\n\tconst target = config.collections?.find((collection) => collection.slug === slug)\n\tconst upload = target?.upload\n\treturn typeof upload === 'object' && Array.isArray(upload.mimeTypes)\n\t\t? upload.mimeTypes\n\t\t: undefined\n}\n\n/** Descends presentational rows only: an `owner` field nested in a group/tabs/collapsible is not detected, so a top-level one gets appended alongside it. */\nconst hasFieldNamed = (fields: Field[], name: string): boolean =>\n\tfields.some((field) => {\n\t\tif ('name' in field && field.name === name) {\n\t\t\treturn true\n\t\t}\n\t\treturn field.type === 'row' && hasFieldNamed(field.fields, name)\n\t})\n\ntype AttachUploadsCollectionArgs = {\n\tconfig: Config\n\tslug: string\n\tspam: ResolvedSpamConfig | false\n}\n\n/**\n * Wire the plugin's upload concerns into the host-owned upload collection named by\n * `uploads.collection`. The collection must already exist in `config.collections` and carry an\n * `upload` config; anything else is a plugin misconfiguration and throws at boot. The plugin\n * appends its hidden `owner` text field unless the host already defines a field named `owner`\n * (then that field is reused and must stay a text-compatible identity slot), and prepends the\n * spam upload hooks (rate limit, owner stamp) ahead of the host's own hooks so abuse checks run\n * first. The host entry is replaced with a new object; the host's config is never mutated.\n */\nexport const attachUploadsCollection = ({\n\tconfig,\n\tslug,\n\tspam,\n}: AttachUploadsCollectionArgs): void => {\n\tconst collections = config.collections ?? []\n\tconst target = collections.find((collection) => collection.slug === slug)\n\tif (!target) {\n\t\tthrow new Error(\n\t\t\t`@10x-media/form-builder: uploads.collection \"${slug}\" was not found in config.collections. ` +\n\t\t\t\t`Create an upload-enabled collection (with your storage adapter) and pass its slug, ` +\n\t\t\t\t`e.g. formBuilder({ uploads: { collection: 'media' } }).`\n\t\t)\n\t}\n\tif (!target.upload) {\n\t\tthrow new Error(\n\t\t\t`@10x-media/form-builder: uploads.collection \"${slug}\" has no \\`upload\\` config. ` +\n\t\t\t\t`File fields store Payload uploads, so the collection must be an upload collection ` +\n\t\t\t\t`(set \\`upload: true\\` or an upload options object on it).`\n\t\t)\n\t}\n\n\tconst fields = hasFieldNamed(target.fields, 'owner')\n\t\t? target.fields\n\t\t: [\n\t\t\t\t...target.fields,\n\t\t\t\t{ name: 'owner', type: 'text', admin: { readOnly: true, hidden: true } } as Field,\n\t\t\t]\n\n\tconst attached: CollectionConfig = {\n\t\t...target,\n\t\tfields,\n\t\t...(spam\n\t\t\t? {\n\t\t\t\t\thooks: {\n\t\t\t\t\t\t...(target.hooks ?? {}),\n\t\t\t\t\t\tbeforeOperation: [buildUploadRateLimit(spam), ...(target.hooks?.beforeOperation ?? [])],\n\t\t\t\t\t\tbeforeValidate: [buildUploadOwnerStamp(spam), ...(target.hooks?.beforeValidate ?? [])],\n\t\t\t\t\t},\n\t\t\t\t}\n\t\t\t: {}),\n\t}\n\n\tconfig.collections = collections.map((collection) =>\n\t\tcollection.slug === slug ? attached : collection\n\t)\n}\n"],"mappings":";;;;;;;AAiBA,MAAa,iCACZ,QACA,SAC0B;CAE1B,MAAM,UADS,OAAO,aAAa,MAAM,eAAe,WAAW,SAAS,IAAI,IACzD;CACvB,OAAO,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,SAAS,IAChE,OAAO,YACP,KAAA;AACJ;;AAGA,MAAM,iBAAiB,QAAiB,SACvC,OAAO,MAAM,UAAU;CACtB,IAAI,UAAU,SAAS,MAAM,SAAS,MACrC,OAAO;CAER,OAAO,MAAM,SAAS,SAAS,cAAc,MAAM,QAAQ,IAAI;AAChE,CAAC;;;;;;;;;;AAiBF,MAAa,2BAA2B,EACvC,QACA,MACA,WACwC;CACxC,MAAM,cAAc,OAAO,eAAe,CAAC;CAC3C,MAAM,SAAS,YAAY,MAAM,eAAe,WAAW,SAAS,IAAI;CACxE,IAAI,CAAC,QACJ,MAAM,IAAI,MACT,gDAAgD,KAAK,kLAGtD;CAED,IAAI,CAAC,OAAO,QACX,MAAM,IAAI,MACT,gDAAgD,KAAK,wKAGtD;CAGD,MAAM,SAAS,cAAc,OAAO,QAAQ,OAAO,IAChD,OAAO,SACP,CACA,GAAG,OAAO,QACV;EAAE,MAAM;EAAS,MAAM;EAAQ,OAAO;GAAE,UAAU;GAAM,QAAQ;EAAK;CAAE,CACxE;CAEF,MAAM,WAA6B;EAClC,GAAG;EACH;EACA,GAAI,OACD,EACA,OAAO;GACN,GAAI,OAAO,SAAS,CAAC;GACrB,iBAAiB,CAAC,qBAAqB,IAAI,GAAG,GAAI,OAAO,OAAO,mBAAmB,CAAC,CAAE;GACtF,gBAAgB,CAAC,sBAAsB,IAAI,GAAG,GAAI,OAAO,OAAO,kBAAkB,CAAC,CAAE;EACtF,EACD,IACC,CAAC;CACL;CAEA,OAAO,cAAc,YAAY,KAAK,eACrC,WAAW,SAAS,OAAO,WAAW,UACvC;AACD"}

package/dist/poll/applyPollOptions.js

@@ -0,0 +1,18 @@
+//#region src/poll/applyPollOptions.ts
+/**
+* Replace the options of the field instance named `resultsField` with source-resolved options,
+* without mutating the input. No-op when `resultsField` is unset or matches no instance
+* (nameless bare rows never match), so hand-authored options stay untouched on forms without
+* an option source.
+*/
+const applyPollOptions = (fields, resultsField, options) => {
+	if (typeof resultsField !== "string" || resultsField.length === 0) return fields;
+	return fields.map((instance) => instance.name === resultsField ? {
+		...instance,
+		options
+	} : instance);
+};
+//#endregion
+export { applyPollOptions };
+
+//# sourceMappingURL=applyPollOptions.js.map

package/dist/poll/applyPollOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyPollOptions.js","names":[],"sources":["../../src/poll/applyPollOptions.ts"],"sourcesContent":["import type { PollOption } from './definePollOptionSource'\n\n/**\n * Replace the options of the field instance named `resultsField` with source-resolved options,\n * without mutating the input. No-op when `resultsField` is unset or matches no instance\n * (nameless bare rows never match), so hand-authored options stay untouched on forms without\n * an option source.\n */\nexport const applyPollOptions = <T extends { name?: string }>(\n\tfields: T[],\n\tresultsField: string | null | undefined,\n\toptions: PollOption[]\n): T[] => {\n\tif (typeof resultsField !== 'string' || resultsField.length === 0) {\n\t\treturn fields\n\t}\n\treturn fields.map((instance) =>\n\t\tinstance.name === resultsField ? { ...instance, options } : instance\n\t)\n}\n"],"mappings":";;;;;;;AAQA,MAAa,oBACZ,QACA,cACA,YACS;CACT,IAAI,OAAO,iBAAiB,YAAY,aAAa,WAAW,GAC/D,OAAO;CAER,OAAO,OAAO,KAAK,aAClB,SAAS,SAAS,eAAe;EAAE,GAAG;EAAU;CAAQ,IAAI,QAC7D;AACD"}