@10x-media/form-builder 0.1.0-beta.25 → 0.1.0-beta.27

package/dist/submissions/createSubmission.js

@@ -1,8 +1,9 @@
-import { FORM_SUBMISSIONS_SLUG } from "../collections/formSubmissions.js";
+import { pluginSlugsOf } from "../plugin/collectionSlugs.js";
+import { SUBMISSION_LOCALE_CONTEXT_KEY } from "./submissionLocale.js";
 //#region src/submissions/createSubmission.ts
 /**
 * Server-side counterpart to the browser `submitForm` helper: a typed wrapper over `payload.create`
-* for the `form-submissions` collection. Submitting this way runs the exact same pipeline a browser
+* for the plugin's submissions collection (whatever slug it is registered under). Submitting this way runs the exact same pipeline a browser
 * or raw REST submit does, server-authoritative validation, spam metadata capture when `req` is
 * threaded through, descriptor snapshotting, consent capture, and post-submit action dispatch, since
 * all of it lives in the collection's own hooks rather than in a route handler. Use it from server
@@ -11,14 +12,18 @@ import { FORM_SUBMISSIONS_SLUG } from "../collections/formSubmissions.js";
 */
 const createSubmission = (payload, args) => {
 	const create = payload.create;
-	return create({
-		collection: FORM_SUBMISSIONS_SLUG,
+	const created = create({
+		collection: pluginSlugsOf(payload).formSubmissions,
 		data: {
 			form: args.form,
 			values: args.values
 		},
-		req: args.req
+		req: args.req,
+		...args.locale ? { context: { [SUBMISSION_LOCALE_CONTEXT_KEY]: args.locale } } : {}
 	});
+	return args.locale && args.req ? created.finally(() => {
+		delete args.req?.context?.[SUBMISSION_LOCALE_CONTEXT_KEY];
+	}) : created;
 };
 //#endregion
 export { createSubmission };

package/dist/submissions/createSubmission.js.map

@@ -1 +1 @@
-{"version":3,"file":"createSubmission.js","names":[],"sources":["../../src/submissions/createSubmission.ts"],"sourcesContent":["import type { Payload, PayloadRequest } from 'payload'\nimport { FORM_SUBMISSIONS_SLUG } from '../collections/formSubmissions'\nimport type { ConsentProofEntry } from './runSubmission'\nimport type { SubmissionDescriptor, SubmissionValue } from './types'\n\nexport type CreateSubmissionArgs = {\n\tform: number | string\n\tvalues: SubmissionValue[]\n\t/** Thread the incoming request when there is one, so spam metadata (IP, user agent) and per-identity rate limiting see it. */\n\treq?: PayloadRequest\n}\n\n/** The stored shape of a `form-submissions` document, as written by the collection's own hooks. */\nexport type CreatedSubmission = {\n\tid: number | string\n\tform: number | string\n\tstatus: 'complete' | 'partial'\n\tlocale?: string\n\tvalues?: SubmissionValue[]\n\tdescriptors?: SubmissionDescriptor[]\n\tconsent?: ConsentProofEntry[]\n\tmeta?: Record<string, unknown>\n\tcreatedAt: string\n\tupdatedAt: string\n}\n\n/**\n * Server-side counterpart to the browser `submitForm` helper: a typed wrapper over `payload.create`\n * for the `form-submissions` collection. Submitting this way runs the exact same pipeline a browser\n * or raw REST submit does, server-authoritative validation, spam metadata capture when `req` is\n * threaded through, descriptor snapshotting, consent capture, and post-submit action dispatch, since\n * all of it lives in the collection's own hooks rather than in a route handler. Use it from server\n * code (a script, a queued job, another collection's hook) instead of hand-rolling the collection\n * slug and body shape.\n */\nexport const createSubmission = (\n\tpayload: Payload,\n\targs: CreateSubmissionArgs\n): Promise<CreatedSubmission> => {\n\t// `form-submissions` is registered by this plugin at runtime, so a host's generated Payload types\n\t// need not describe it, and when they do, pin its `form` relationship to whichever single id type\n\t// (string or number) that host's database uses. `form` here accepts either, so create through a\n\t// slug-agnostic signature instead of the host's own shape (same idiom as `registerReliability`'s\n\t// locks-collection create in the jobs plugin).\n\tconst create = payload.create as unknown as (options: {\n\t\tcollection: string\n\t\tdata: { form: number | string; values: SubmissionValue[] }\n\t\treq?: PayloadRequest\n\t}) => Promise<CreatedSubmission>\n\treturn create({\n\t\tcollection: FORM_SUBMISSIONS_SLUG,\n\t\tdata: { form: args.form, values: args.values },\n\t\treq: args.req,\n\t})\n}\n"],"mappings":";;;;;;;;;;;AAmCA,MAAa,oBACZ,SACA,SACgC;CAMhC,MAAM,SAAS,QAAQ;CAKvB,OAAO,OAAO;EACb,YAAY;EACZ,MAAM;GAAE,MAAM,KAAK;GAAM,QAAQ,KAAK;EAAO;EAC7C,KAAK,KAAK;CACX,CAAC;AACF"}
+{"version":3,"file":"createSubmission.js","names":[],"sources":["../../src/submissions/createSubmission.ts"],"sourcesContent":["import type { Payload, PayloadRequest } from 'payload'\nimport { pluginSlugsOf } from '../plugin/collectionSlugs'\nimport type { ConsentProofEntry } from './runSubmission'\nimport { SUBMISSION_LOCALE_CONTEXT_KEY } from './submissionLocale'\nimport type { SubmissionDescriptor, SubmissionValue } from './types'\n\nexport type CreateSubmissionArgs = {\n\tform: number | string\n\tvalues: SubmissionValue[]\n\t/** Thread the incoming request when there is one, so spam metadata (IP, user agent) and per-identity rate limiting see it. */\n\treq?: PayloadRequest\n\t/**\n\t * The submission's content locale, what `<Form>`'s `submissionLocale` sends as `?locale=`: stored on\n\t * the submission and used to render its post-submit actions. Clamped like the browser's (a\n\t * localized host keeps only its configured codes). Absent, `req.locale` or the default locale applies.\n\t */\n\tlocale?: string\n}\n\n/** The stored shape of a `form-submissions` document, as written by the collection's own hooks. */\nexport type CreatedSubmission = {\n\tid: number | string\n\tform: number | string\n\tstatus: 'complete' | 'partial'\n\tlocale?: string\n\tvalues?: SubmissionValue[]\n\tdescriptors?: SubmissionDescriptor[]\n\tconsent?: ConsentProofEntry[]\n\tmeta?: Record<string, unknown>\n\tcreatedAt: string\n\tupdatedAt: string\n}\n\n/**\n * Server-side counterpart to the browser `submitForm` helper: a typed wrapper over `payload.create`\n * for the plugin's submissions collection (whatever slug it is registered under). Submitting this way runs the exact same pipeline a browser\n * or raw REST submit does, server-authoritative validation, spam metadata capture when `req` is\n * threaded through, descriptor snapshotting, consent capture, and post-submit action dispatch, since\n * all of it lives in the collection's own hooks rather than in a route handler. Use it from server\n * code (a script, a queued job, another collection's hook) instead of hand-rolling the collection\n * slug and body shape.\n */\nexport const createSubmission = (\n\tpayload: Payload,\n\targs: CreateSubmissionArgs\n): Promise<CreatedSubmission> => {\n\t// `form-submissions` is registered by this plugin at runtime, so a host's generated Payload types\n\t// need not describe it, and when they do, pin its `form` relationship to whichever single id type\n\t// (string or number) that host's database uses. `form` here accepts either, so create through a\n\t// slug-agnostic signature instead of the host's own shape (same idiom as `registerReliability`'s\n\t// locks-collection create in the jobs plugin).\n\tconst create = payload.create as unknown as (options: {\n\t\tcollection: string\n\t\tdata: { form: number | string; values: SubmissionValue[] }\n\t\treq?: PayloadRequest\n\t\tcontext?: Record<string, unknown>\n\t}) => Promise<CreatedSubmission>\n\tconst created = create({\n\t\tcollection: pluginSlugsOf(payload).formSubmissions,\n\t\tdata: { form: args.form, values: args.values },\n\t\treq: args.req,\n\t\t...(args.locale ? { context: { [SUBMISSION_LOCALE_CONTEXT_KEY]: args.locale } } : {}),\n\t})\n\t// `validateSubmission` consumes the key, but a create rejected before it runs (the spam guard's\n\t// rate limit) would leave it on the host's `req.context` for its next create.\n\treturn args.locale && args.req\n\t\t? created.finally(() => {\n\t\t\t\tdelete args.req?.context?.[SUBMISSION_LOCALE_CONTEXT_KEY]\n\t\t\t})\n\t\t: created\n}\n"],"mappings":";;;;;;;;;;;;AA0CA,MAAa,oBACZ,SACA,SACgC;CAMhC,MAAM,SAAS,QAAQ;CAMvB,MAAM,UAAU,OAAO;EACtB,YAAY,cAAc,OAAO,EAAE;EACnC,MAAM;GAAE,MAAM,KAAK;GAAM,QAAQ,KAAK;EAAO;EAC7C,KAAK,KAAK;EACV,GAAI,KAAK,SAAS,EAAE,SAAS,GAAG,gCAAgC,KAAK,OAAO,EAAE,IAAI,CAAC;CACpF,CAAC;CAGD,OAAO,KAAK,UAAU,KAAK,MACxB,QAAQ,cAAc;EACtB,OAAO,KAAK,KAAK,UAAU;CAC5B,CAAC,IACA;AACJ"}

package/dist/submissions/resolveVotedSubmission.js

@@ -1,10 +1,9 @@
+import { pluginSlugsOf } from "../plugin/collectionSlugs.js";
 import { pollConfigOf } from "../form/pollState.js";
 import { formIdOf } from "./formIdOf.js";
 import { answerValues } from "../poll/votes/answerValues.js";
 import { votedSubmissionIdFromCookie } from "./votedCookie.js";
 //#region src/submissions/resolveVotedSubmission.ts
-const FORM_SUBMISSIONS_SLUG = "form-submissions";
-const FORMS_SLUG = "forms";
 /**
 * Resolve which submission (and which pick) a browser's voted cookie identifies for a form. The
 * cookie is httpOnly, so this is the server-side read: an SSR host passes the incoming request's
@@ -17,10 +16,11 @@ const FORMS_SLUG = "forms";
 */
 const resolveVotedSubmission = async (args) => {
 	const { payload, cookieHeader, formId } = args;
-	const submissionId = votedSubmissionIdFromCookie(cookieHeader, formId, payload.secret);
+	const submissionId = votedSubmissionIdFromCookie(cookieHeader, formId, payload);
 	if (submissionId == null) return null;
+	const slugs = pluginSlugsOf(payload);
 	const submission = await payload.findByID({
-		collection: FORM_SUBMISSIONS_SLUG,
+		collection: slugs.formSubmissions,
 		id: submissionId,
 		depth: 0,
 		overrideAccess: true
@@ -30,7 +30,7 @@ const resolveVotedSubmission = async (args) => {
 	if (String(formIdOf(stored.form) ?? "") !== String(formId)) return null;
 	if (stored.status != null && stored.status !== "complete") return null;
 	const form = await payload.findByID({
-		collection: FORMS_SLUG,
+		collection: slugs.forms,
 		id: formId,
 		depth: 0,
 		overrideAccess: true

package/dist/submissions/resolveVotedSubmission.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveVotedSubmission.js","names":[],"sources":["../../src/submissions/resolveVotedSubmission.ts"],"sourcesContent":["import type { Payload } from 'payload'\nimport { pollConfigOf } from '../form/pollState'\nimport { answerValues } from '../poll/votes/answerValues'\nimport { formIdOf } from './formIdOf'\nimport { votedSubmissionIdFromCookie } from './votedCookie'\n\nconst FORM_SUBMISSIONS_SLUG = 'form-submissions'\nconst FORMS_SLUG = 'forms'\n\n/** The voter's current vote for a poll, resolved server-side from the httpOnly voted cookie. */\nexport type VotedSubmission = {\n\tsubmissionId: string\n\t/** The stored answer of the poll results field exactly as submitted (string, or string[] for a multi-select); use it to prefill the form for a vote change. */\n\tvalue: unknown\n\t/** The same answer normalized to non-empty strings; use it to highlight the voter's pick in results. */\n\tpick: string[]\n}\n\n/**\n * Resolve which submission (and which pick) a browser's voted cookie identifies for a form. The\n * cookie is httpOnly, so this is the server-side read: an SSR host passes the incoming request's\n * `Cookie` header (e.g. Next's `(await headers()).get('cookie')`) and hands the result to\n * `<Poll currentVote hasVoted>`. Returns null whenever the cookie is absent, is the legacy `1`\n * marker, fails signature verification, or names a submission that no longer exists or belongs to\n * a different form, so a null simply means \"treat this visitor as not having voted\". Works for any\n * poll whose cookie carries a signed id (set for `allowChange` polls), even if `allowChange` was\n * later turned off.\n */\nexport const resolveVotedSubmission = async (args: {\n\tpayload: Payload\n\tcookieHeader: string | null | undefined\n\tformId: number | string\n}): Promise<VotedSubmission | null> => {\n\tconst { payload, cookieHeader, formId } = args\n\tconst submissionId = votedSubmissionIdFromCookie(cookieHeader, formId, payload.secret)\n\tif (submissionId == null) {\n\t\treturn null\n\t}\n\tconst submission = await payload\n\t\t.findByID({\n\t\t\tcollection: FORM_SUBMISSIONS_SLUG,\n\t\t\tid: submissionId,\n\t\t\tdepth: 0,\n\t\t\toverrideAccess: true,\n\t\t})\n\t\t.catch(() => null)\n\tif (submission == null) {\n\t\treturn null\n\t}\n\tconst stored = submission as { form?: unknown; status?: unknown; values?: unknown }\n\tif (String(formIdOf(stored.form) ?? '') !== String(formId)) {\n\t\treturn null\n\t}\n\tif (stored.status != null && stored.status !== 'complete') {\n\t\treturn null\n\t}\n\tconst form = await payload\n\t\t.findByID({ collection: FORMS_SLUG, id: formId, depth: 0, overrideAccess: true })\n\t\t.catch(() => null)\n\tconst poll = form?.pollEnabled === true ? pollConfigOf(form.poll) : undefined\n\tconst resultsField =\n\t\ttypeof poll?.resultsField === 'string' && poll.resultsField.length > 0\n\t\t\t? poll.resultsField\n\t\t\t: undefined\n\tif (!resultsField) {\n\t\treturn null\n\t}\n\tconst entry = Array.isArray(stored.values)\n\t\t? (stored.values as { field?: unknown; value?: unknown }[]).find(\n\t\t\t\t(row) => row.field === resultsField\n\t\t\t)\n\t\t: undefined\n\treturn {\n\t\tsubmissionId: String(submission.id),\n\t\tvalue: entry?.value,\n\t\tpick: answerValues(stored.values, resultsField),\n\t}\n}\n"],"mappings":";;;;;AAMA,MAAM,wBAAwB;AAC9B,MAAM,aAAa;;;;;;;;;;;AAqBnB,MAAa,yBAAyB,OAAO,SAIN;CACtC,MAAM,EAAE,SAAS,cAAc,WAAW;CAC1C,MAAM,eAAe,4BAA4B,cAAc,QAAQ,QAAQ,MAAM;CACrF,IAAI,gBAAgB,MACnB,OAAO;CAER,MAAM,aAAa,MAAM,QACvB,SAAS;EACT,YAAY;EACZ,IAAI;EACJ,OAAO;EACP,gBAAgB;CACjB,CAAC,EACA,YAAY,IAAI;CAClB,IAAI,cAAc,MACjB,OAAO;CAER,MAAM,SAAS;CACf,IAAI,OAAO,SAAS,OAAO,IAAI,KAAK,EAAE,MAAM,OAAO,MAAM,GACxD,OAAO;CAER,IAAI,OAAO,UAAU,QAAQ,OAAO,WAAW,YAC9C,OAAO;CAER,MAAM,OAAO,MAAM,QACjB,SAAS;EAAE,YAAY;EAAY,IAAI;EAAQ,OAAO;EAAG,gBAAgB;CAAK,CAAC,EAC/E,YAAY,IAAI;CAClB,MAAM,OAAO,MAAM,gBAAgB,OAAO,aAAa,KAAK,IAAI,IAAI,KAAA;CACpE,MAAM,eACL,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,SAAS,IAClE,KAAK,eACL,KAAA;CACJ,IAAI,CAAC,cACJ,OAAO;CAER,MAAM,QAAQ,MAAM,QAAQ,OAAO,MAAM,IACrC,OAAO,OAAkD,MACzD,QAAQ,IAAI,UAAU,YACxB,IACC,KAAA;CACH,OAAO;EACN,cAAc,OAAO,WAAW,EAAE;EAClC,OAAO,OAAO;EACd,MAAM,aAAa,OAAO,QAAQ,YAAY;CAC/C;AACD"}
+{"version":3,"file":"resolveVotedSubmission.js","names":[],"sources":["../../src/submissions/resolveVotedSubmission.ts"],"sourcesContent":["import type { Payload } from 'payload'\nimport { pollConfigOf } from '../form/pollState'\nimport { pluginSlugsOf } from '../plugin/collectionSlugs'\nimport { answerValues } from '../poll/votes/answerValues'\nimport { formIdOf } from './formIdOf'\nimport { votedSubmissionIdFromCookie } from './votedCookie'\n\n/** The voter's current vote for a poll, resolved server-side from the httpOnly voted cookie. */\nexport type VotedSubmission = {\n\tsubmissionId: string\n\t/** The stored answer of the poll results field exactly as submitted (string, or string[] for a multi-select); use it to prefill the form for a vote change. */\n\tvalue: unknown\n\t/** The same answer normalized to non-empty strings; use it to highlight the voter's pick in results. */\n\tpick: string[]\n}\n\n/**\n * Resolve which submission (and which pick) a browser's voted cookie identifies for a form. The\n * cookie is httpOnly, so this is the server-side read: an SSR host passes the incoming request's\n * `Cookie` header (e.g. Next's `(await headers()).get('cookie')`) and hands the result to\n * `<Poll currentVote hasVoted>`. Returns null whenever the cookie is absent, is the legacy `1`\n * marker, fails signature verification, or names a submission that no longer exists or belongs to\n * a different form, so a null simply means \"treat this visitor as not having voted\". Works for any\n * poll whose cookie carries a signed id (set for `allowChange` polls), even if `allowChange` was\n * later turned off.\n */\nexport const resolveVotedSubmission = async (args: {\n\tpayload: Payload\n\tcookieHeader: string | null | undefined\n\tformId: number | string\n}): Promise<VotedSubmission | null> => {\n\tconst { payload, cookieHeader, formId } = args\n\tconst submissionId = votedSubmissionIdFromCookie(cookieHeader, formId, payload)\n\tif (submissionId == null) {\n\t\treturn null\n\t}\n\tconst slugs = pluginSlugsOf(payload)\n\tconst submission = await payload\n\t\t.findByID({\n\t\t\tcollection: slugs.formSubmissions,\n\t\t\tid: submissionId,\n\t\t\tdepth: 0,\n\t\t\toverrideAccess: true,\n\t\t})\n\t\t.catch(() => null)\n\tif (submission == null) {\n\t\treturn null\n\t}\n\tconst stored = submission as { form?: unknown; status?: unknown; values?: unknown }\n\tif (String(formIdOf(stored.form) ?? '') !== String(formId)) {\n\t\treturn null\n\t}\n\tif (stored.status != null && stored.status !== 'complete') {\n\t\treturn null\n\t}\n\tconst form = await payload\n\t\t.findByID({ collection: slugs.forms, id: formId, depth: 0, overrideAccess: true })\n\t\t.catch(() => null)\n\tconst poll = form?.pollEnabled === true ? pollConfigOf(form.poll) : undefined\n\tconst resultsField =\n\t\ttypeof poll?.resultsField === 'string' && poll.resultsField.length > 0\n\t\t\t? poll.resultsField\n\t\t\t: undefined\n\tif (!resultsField) {\n\t\treturn null\n\t}\n\tconst entry = Array.isArray(stored.values)\n\t\t? (stored.values as { field?: unknown; value?: unknown }[]).find(\n\t\t\t\t(row) => row.field === resultsField\n\t\t\t)\n\t\t: undefined\n\treturn {\n\t\tsubmissionId: String(submission.id),\n\t\tvalue: entry?.value,\n\t\tpick: answerValues(stored.values, resultsField),\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0BA,MAAa,yBAAyB,OAAO,SAIN;CACtC,MAAM,EAAE,SAAS,cAAc,WAAW;CAC1C,MAAM,eAAe,4BAA4B,cAAc,QAAQ,OAAO;CAC9E,IAAI,gBAAgB,MACnB,OAAO;CAER,MAAM,QAAQ,cAAc,OAAO;CACnC,MAAM,aAAa,MAAM,QACvB,SAAS;EACT,YAAY,MAAM;EAClB,IAAI;EACJ,OAAO;EACP,gBAAgB;CACjB,CAAC,EACA,YAAY,IAAI;CAClB,IAAI,cAAc,MACjB,OAAO;CAER,MAAM,SAAS;CACf,IAAI,OAAO,SAAS,OAAO,IAAI,KAAK,EAAE,MAAM,OAAO,MAAM,GACxD,OAAO;CAER,IAAI,OAAO,UAAU,QAAQ,OAAO,WAAW,YAC9C,OAAO;CAER,MAAM,OAAO,MAAM,QACjB,SAAS;EAAE,YAAY,MAAM;EAAO,IAAI;EAAQ,OAAO;EAAG,gBAAgB;CAAK,CAAC,EAChF,YAAY,IAAI;CAClB,MAAM,OAAO,MAAM,gBAAgB,OAAO,aAAa,KAAK,IAAI,IAAI,KAAA;CACpE,MAAM,eACL,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,SAAS,IAClE,KAAK,eACL,KAAA;CACJ,IAAI,CAAC,cACJ,OAAO;CAER,MAAM,QAAQ,MAAM,QAAQ,OAAO,MAAM,IACrC,OAAO,OAAkD,MACzD,QAAQ,IAAI,UAAU,YACxB,IACC,KAAA;CACH,OAAO;EACN,cAAc,OAAO,WAAW,EAAE;EAClC,OAAO,OAAO;EACd,MAAM,aAAa,OAAO,QAAQ,YAAY;CAC/C;AACD"}

package/dist/submissions/runSubmission.js

@@ -1,8 +1,8 @@
 import { keys } from "../translations/keys.js";
 import { isNamedField } from "../fields/fieldKey.js";
 import { calcExpressionOf, computeCalcFields } from "../calc/computeCalcFields.js";
-import { consentDisplayOf } from "../consent/effectiveStatement.js";
 import { evaluateCondition } from "../conditions/evaluate.js";
+import { consentDisplayOf } from "../consent/effectiveStatement.js";
 import { captureConsent } from "../consent/captureConsent.js";
 import { captureFileRef } from "../uploads/captureFileRef.js";
 import { runValidation } from "../validation/runValidation.js";

package/dist/submissions/submissionLocale.js

@@ -1,18 +1,39 @@
 //#region src/submissions/submissionLocale.ts
-/** A plain language tag (`uk`, `pt-BR`, `zh_Hant`), bounded so a stored locale stays a short identifier. */
-const LOCALE_TAG = /^[A-Za-z]{2,8}(?:[-_][A-Za-z0-9]{1,8}){0,4}$/;
+/** A plain language tag (`uk`, `pt-BR`, `zh-Hant`), bounded so a stored locale stays a short identifier. */
+const LOCALE_TAG = /^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8}){0,4}$/;
+/**
+* `locale` as a canonical BCP-47 tag, or `undefined` when it is not one. An underscore separator
+* (`zh_Hant`) is normalized to a hyphen first: the stored value reaches `Intl` consumers (a field
+* type's `format`), and `Intl` throws a `RangeError` on an underscore.
+*/
+const canonicalTag = (locale) => {
+	const tag = locale.replaceAll("_", "-");
+	if (tag === "all" || !LOCALE_TAG.test(tag)) return;
+	try {
+		return Intl.getCanonicalLocales(tag)[0];
+	} catch {
+		return;
+	}
+};
 /**
 * The locale a submission is stored and processed under, from the visitor-controlled `req.locale`.
 * On a localized host only a configured locale code is accepted, anything else (`all`, `*`, a code
 * outside `localeCodes`, which Payload passes through when `localization.fallback` is false) becomes
-* the default locale. Without localization any plain language tag is kept, so a `richText.serialize`
-* wrapper can still localize its own strings, and anything else becomes `'en'`.
+* the default locale. Without localization any valid language tag is kept in its canonical form, so a
+* `richText.serialize` wrapper can still localize its own strings, and anything else becomes `'en'`.
 */
 const resolveSubmissionLocale = (locale, localization) => {
 	if (localization) return typeof locale === "string" && localization.localeCodes.includes(locale) ? locale : localization.defaultLocale;
-	return typeof locale === "string" && locale !== "all" && LOCALE_TAG.test(locale) ? locale : "en";
+	return (typeof locale === "string" ? canonicalTag(locale) : void 0) ?? "en";
 };
+/**
+* `req.context` key carrying `createSubmission`'s explicit `locale` into the create hook. The local
+* API drops its own `locale` arg on a host without localization, so the context is the one channel
+* that reaches `validateSubmission` either way. Read once and removed there, so it cannot leak into
+* a later create on the same request.
+*/
+const SUBMISSION_LOCALE_CONTEXT_KEY = "formBuilderSubmissionLocale";
 //#endregion
-export { resolveSubmissionLocale };
+export { SUBMISSION_LOCALE_CONTEXT_KEY, resolveSubmissionLocale };
 
 //# sourceMappingURL=submissionLocale.js.map

package/dist/submissions/submissionLocale.js.map

@@ -1 +1 @@
-{"version":3,"file":"submissionLocale.js","names":[],"sources":["../../src/submissions/submissionLocale.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\n/** A plain language tag (`uk`, `pt-BR`, `zh_Hant`), bounded so a stored locale stays a short identifier. */\nconst LOCALE_TAG = /^[A-Za-z]{2,8}(?:[-_][A-Za-z0-9]{1,8}){0,4}$/\n\n/**\n * The locale a submission is stored and processed under, from the visitor-controlled `req.locale`.\n * On a localized host only a configured locale code is accepted, anything else (`all`, `*`, a code\n * outside `localeCodes`, which Payload passes through when `localization.fallback` is false) becomes\n * the default locale. Without localization any plain language tag is kept, so a `richText.serialize`\n * wrapper can still localize its own strings, and anything else becomes `'en'`.\n */\nexport const resolveSubmissionLocale = (\n\tlocale: unknown,\n\tlocalization: SanitizedConfig['localization']\n): string => {\n\tif (localization) {\n\t\treturn typeof locale === 'string' && localization.localeCodes.includes(locale)\n\t\t\t? locale\n\t\t\t: localization.defaultLocale\n\t}\n\treturn typeof locale === 'string' && locale !== 'all' && LOCALE_TAG.test(locale) ? locale : 'en'\n}\n"],"mappings":";;AAGA,MAAM,aAAa;;;;;;;;AASnB,MAAa,2BACZ,QACA,iBACY;CACZ,IAAI,cACH,OAAO,OAAO,WAAW,YAAY,aAAa,YAAY,SAAS,MAAM,IAC1E,SACA,aAAa;CAEjB,OAAO,OAAO,WAAW,YAAY,WAAW,SAAS,WAAW,KAAK,MAAM,IAAI,SAAS;AAC7F"}
+{"version":3,"file":"submissionLocale.js","names":[],"sources":["../../src/submissions/submissionLocale.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\n/** A plain language tag (`uk`, `pt-BR`, `zh-Hant`), bounded so a stored locale stays a short identifier. */\nconst LOCALE_TAG = /^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8}){0,4}$/\n\n/**\n * `locale` as a canonical BCP-47 tag, or `undefined` when it is not one. An underscore separator\n * (`zh_Hant`) is normalized to a hyphen first: the stored value reaches `Intl` consumers (a field\n * type's `format`), and `Intl` throws a `RangeError` on an underscore.\n */\nconst canonicalTag = (locale: string): string | undefined => {\n\tconst tag = locale.replaceAll('_', '-')\n\tif (tag === 'all' || !LOCALE_TAG.test(tag)) {\n\t\treturn undefined\n\t}\n\ttry {\n\t\treturn Intl.getCanonicalLocales(tag)[0]\n\t} catch {\n\t\treturn undefined\n\t}\n}\n\n/**\n * The locale a submission is stored and processed under, from the visitor-controlled `req.locale`.\n * On a localized host only a configured locale code is accepted, anything else (`all`, `*`, a code\n * outside `localeCodes`, which Payload passes through when `localization.fallback` is false) becomes\n * the default locale. Without localization any valid language tag is kept in its canonical form, so a\n * `richText.serialize` wrapper can still localize its own strings, and anything else becomes `'en'`.\n */\nexport const resolveSubmissionLocale = (\n\tlocale: unknown,\n\tlocalization: SanitizedConfig['localization']\n): string => {\n\tif (localization) {\n\t\treturn typeof locale === 'string' && localization.localeCodes.includes(locale)\n\t\t\t? locale\n\t\t\t: localization.defaultLocale\n\t}\n\treturn (typeof locale === 'string' ? canonicalTag(locale) : undefined) ?? 'en'\n}\n\n/**\n * `req.context` key carrying `createSubmission`'s explicit `locale` into the create hook. The local\n * API drops its own `locale` arg on a host without localization, so the context is the one channel\n * that reaches `validateSubmission` either way. Read once and removed there, so it cannot leak into\n * a later create on the same request.\n */\nexport const SUBMISSION_LOCALE_CONTEXT_KEY = 'formBuilderSubmissionLocale'\n"],"mappings":";;AAGA,MAAM,aAAa;;;;;;AAOnB,MAAM,gBAAgB,WAAuC;CAC5D,MAAM,MAAM,OAAO,WAAW,KAAK,GAAG;CACtC,IAAI,QAAQ,SAAS,CAAC,WAAW,KAAK,GAAG,GACxC;CAED,IAAI;EACH,OAAO,KAAK,oBAAoB,GAAG,EAAE;CACtC,QAAQ;EACP;CACD;AACD;;;;;;;;AASA,MAAa,2BACZ,QACA,iBACY;CACZ,IAAI,cACH,OAAO,OAAO,WAAW,YAAY,aAAa,YAAY,SAAS,MAAM,IAC1E,SACA,aAAa;CAEjB,QAAQ,OAAO,WAAW,WAAW,aAAa,MAAM,IAAI,KAAA,MAAc;AAC3E;;;;;;;AAQA,MAAa,gCAAgC"}

package/dist/submissions/validateSubmission.js

@@ -1,19 +1,19 @@
 import { keys } from "../translations/keys.js";
 import { asFieldTranslate, asTranslate } from "../translations/server.js";
 import { resolveConsentEntries } from "../consent/resolveConsentEntries.js";
+import { pluginSlugsOf } from "../plugin/collectionSlugs.js";
+import { findFormAtLocale } from "../form/findFormAtLocale.js";
+import { SUBMISSION_LOCALE_CONTEXT_KEY, resolveSubmissionLocale } from "./submissionLocale.js";
 import { isPollClosed, pollConfigOf } from "../form/pollState.js";
-import { calcExpressionOf } from "../calc/computeCalcFields.js";
-import { resolveCalcContext } from "../calc/resolveCalcContext.js";
-import { resolveEffectivePollOptions } from "../poll/effectivePollOptions.js";
-import { FORMS_SLUG } from "../collections/forms.js";
 import { formIdOf } from "./formIdOf.js";
 import { voteChangeTargetOf } from "./voteChange.js";
 import { POLL_CONTEXT_KEY } from "./votedCookie.js";
 import { IDENTITY_CONTEXT_KEY } from "../spam/constants.js";
+import { calcExpressionOf } from "../calc/computeCalcFields.js";
+import { resolveCalcContext } from "../calc/resolveCalcContext.js";
 import { applyPollOptions } from "../poll/applyPollOptions.js";
+import { resolveEffectivePollOptions } from "../poll/effectivePollOptions.js";
 import { runSubmission } from "./runSubmission.js";
-import { resolveSubmissionLocale } from "./submissionLocale.js";
-import { FORM_SUBMISSIONS_SLUG } from "../collections/formSubmissions.js";
 import { APIError, ValidationError } from "payload";
 //#region src/submissions/validateSubmission.ts
 /**
@@ -35,112 +35,119 @@ const validateSubmission = ({ registry, ruleRegistry, calcSources, calcFunctions
 		const boundFormId = originalFormId != null ? formIdOf(originalFormId) : null;
 		if (boundFormId == null || String(boundFormId) !== String(formId)) throw new APIError("form-builder: a vote change cannot move a submission across forms", 400);
 	}
-	const locale = resolveSubmissionLocale(req.locale, req.payload.config.localization);
-	req.locale = locale;
-	const form = await req.payload.findByID({
-		collection: FORMS_SLUG,
-		id: formId,
-		depth: 0,
-		locale,
-		req
-	});
-	const poll = pollConfigOf(form.poll);
-	const pollEnabled = form.pollEnabled === true;
-	req.context[POLL_CONTEXT_KEY] = {
-		pollEnabled,
-		allowChange: poll?.allowChange === true
-	};
-	if (pollEnabled && isPollClosed(poll)) throw new APIError(asTranslate(req.i18n.t)(keys.pollClosed), 403);
-	let fields = form.fields ?? [];
-	const incoming = data.values ?? [];
-	const t = asFieldTranslate(req.i18n.t);
-	const resultsField = pollEnabled && typeof poll?.resultsField === "string" && poll.resultsField.length > 0 ? poll.resultsField : void 0;
-	const resultsInstance = resultsField ? fields.find((instance) => instance.name === resultsField) : void 0;
-	const usesResolver = typeof poll?.optionSource === "string" && poll.optionSource.length > 0 || Boolean(resultsInstance && registry.get(resultsInstance.blockType)?.resolveOptions);
-	if (resultsField && usesResolver) {
-		let resolved;
-		try {
-			resolved = await resolveEffectivePollOptions({
+	const { localization } = req.payload.config;
+	const requested = req.context["formBuilderSubmissionLocale"] ?? req.locale;
+	delete req.context[SUBMISSION_LOCALE_CONTEXT_KEY];
+	const locale = resolveSubmissionLocale(requested, localization);
+	const previousLocale = req.locale;
+	if (localization) req.locale = locale;
+	try {
+		const form = await findFormAtLocale({
+			payload: req.payload,
+			id: formId,
+			locale,
+			req
+		});
+		const poll = pollConfigOf(form.poll);
+		const pollEnabled = form.pollEnabled === true;
+		req.context[POLL_CONTEXT_KEY] = {
+			pollEnabled,
+			allowChange: poll?.allowChange === true
+		};
+		if (pollEnabled && isPollClosed(poll)) throw new APIError(asTranslate(req.i18n.t)(keys.pollClosed), 403);
+		let fields = form.fields ?? [];
+		const incoming = data.values ?? [];
+		const t = asFieldTranslate(req.i18n.t);
+		const resultsField = pollEnabled && typeof poll?.resultsField === "string" && poll.resultsField.length > 0 ? poll.resultsField : void 0;
+		const resultsInstance = resultsField ? fields.find((instance) => instance.name === resultsField) : void 0;
+		const usesResolver = typeof poll?.optionSource === "string" && poll.optionSource.length > 0 || Boolean(resultsInstance && registry.get(resultsInstance.blockType)?.resolveOptions);
+		if (resultsField && usesResolver) {
+			let resolved;
+			try {
+				resolved = await resolveEffectivePollOptions({
+					payload: req.payload,
+					req,
+					form,
+					sources: pollSourceRegistry ?? /* @__PURE__ */ new Map(),
+					fieldTypes: registry
+				});
+			} catch {
+				throw new APIError(asTranslate(req.i18n.t)(keys.pollOptionsUnavailable), 503);
+			}
+			fields = applyPollOptions(fields, resultsField, resolved);
+			const answer = incoming.find((entry) => entry.field === resultsField)?.value;
+			if (answer != null && answer !== "" && !resolved.some((option) => option.value === answer)) throw new ValidationError({
+				collection: pluginSlugsOf(req.payload).formSubmissions,
+				errors: [{
+					path: resultsField,
+					message: asTranslate(req.i18n.t)(keys.validationSelect)
+				}]
+			}, req.t);
+		}
+		const expectedOwner = typeof req.context?.["formBuilderSpamIdentity"] === "string" ? req.context[IDENTITY_CONTEXT_KEY] : void 0;
+		let consentEntries = [];
+		if (consentSources && fields.some((field) => field.blockType === "consent")) try {
+			consentEntries = await resolveConsentEntries({
 				payload: req.payload,
 				req,
 				form,
-				sources: pollSourceRegistry ?? /* @__PURE__ */ new Map(),
-				fieldTypes: registry
+				sources: consentSources
 			});
 		} catch {
-			throw new APIError(asTranslate(req.i18n.t)(keys.pollOptionsUnavailable), 503);
+			throw new APIError(asTranslate(req.i18n.t)(keys.consentSourcesUnavailable), 503);
 		}
-		fields = applyPollOptions(fields, resultsField, resolved);
-		const answer = incoming.find((entry) => entry.field === resultsField)?.value;
-		if (answer != null && answer !== "" && !resolved.some((option) => option.value === answer)) throw new ValidationError({
-			collection: FORM_SUBMISSIONS_SLUG,
-			errors: [{
-				path: resultsField,
-				message: asTranslate(req.i18n.t)(keys.validationSelect)
-			}]
-		}, req.t);
-	}
-	const expectedOwner = typeof req.context?.["formBuilderSpamIdentity"] === "string" ? req.context[IDENTITY_CONTEXT_KEY] : void 0;
-	let consentEntries = [];
-	if (consentSources && fields.some((field) => field.blockType === "consent")) try {
-		consentEntries = await resolveConsentEntries({
-			payload: req.payload,
+		let calcResolved;
+		if (fields.some((instance) => calcExpressionOf(instance) !== void 0)) {
+			let resolved;
+			try {
+				resolved = await resolveCalcContext({
+					fields,
+					sources: calcSources ?? {},
+					form,
+					payload: req.payload,
+					req
+				});
+			} catch (error) {
+				req.payload.logger?.error(`@10x-media/form-builder: calc source resolution failed for form ${String(formId)}: ${error instanceof Error ? error.message : String(error)}`);
+				throw new APIError(asTranslate(req.i18n.t)(keys.calcSourcesUnavailable), 503);
+			}
+			const functions = calcFunctions && Object.keys(calcFunctions).length > 0 ? Object.fromEntries(Object.entries(calcFunctions).map(([name, definition]) => [name, definition.apply])) : void 0;
+			calcResolved = {
+				...resolved,
+				...functions ? { functions } : {}
+			};
+		}
+		const result = await runSubmission({
+			fields,
+			values: incoming,
+			calcResolved,
+			registry,
+			ruleRegistry,
+			consentEntries,
+			consentSnapshot,
+			locale,
+			t,
+			operation: "create",
 			req,
-			form,
-			sources: consentSources
+			payload: req.payload,
+			formId,
+			uploadSlug,
+			expectedOwner,
+			strictUploadOwnership
 		});
-	} catch {
-		throw new APIError(asTranslate(req.i18n.t)(keys.consentSourcesUnavailable), 503);
-	}
-	let calcResolved;
-	if (fields.some((instance) => calcExpressionOf(instance) !== void 0)) {
-		let resolved;
-		try {
-			resolved = await resolveCalcContext({
-				fields,
-				sources: calcSources ?? {},
-				form,
-				payload: req.payload,
-				req
-			});
-		} catch (error) {
-			req.payload.logger?.error(`@10x-media/form-builder: calc source resolution failed for form ${String(formId)}: ${error instanceof Error ? error.message : String(error)}`);
-			throw new APIError(asTranslate(req.i18n.t)(keys.calcSourcesUnavailable), 503);
-		}
-		const functions = calcFunctions && Object.keys(calcFunctions).length > 0 ? Object.fromEntries(Object.entries(calcFunctions).map(([name, definition]) => [name, definition.apply])) : void 0;
-		calcResolved = {
-			...resolved,
-			...functions ? { functions } : {}
-		};
+		if (result.errors.length > 0) throw new ValidationError({
+			collection: pluginSlugsOf(req.payload).formSubmissions,
+			errors: result.errors
+		}, req.t);
+		data.values = result.values;
+		data.descriptors = result.descriptors;
+		data.consent = result.consent.length > 0 ? result.consent : void 0;
+		data.locale = locale;
+		if (!req.user) data.status = "complete";
+		return data;
+	} finally {
+		if (localization) req.locale = previousLocale;
 	}
-	const result = await runSubmission({
-		fields,
-		values: incoming,
-		calcResolved,
-		registry,
-		ruleRegistry,
-		consentEntries,
-		consentSnapshot,
-		locale,
-		t,
-		operation: "create",
-		req,
-		payload: req.payload,
-		formId,
-		uploadSlug,
-		expectedOwner,
-		strictUploadOwnership
-	});
-	if (result.errors.length > 0) throw new ValidationError({
-		collection: FORM_SUBMISSIONS_SLUG,
-		errors: result.errors
-	}, req.t);
-	data.values = result.values;
-	data.descriptors = result.descriptors;
-	data.consent = result.consent.length > 0 ? result.consent : void 0;
-	data.locale = locale;
-	if (!req.user) data.status = "complete";
-	return data;
 };
 //#endregion
 export { validateSubmission };

package/dist/submissions/validateSubmission.js.map

@@ -1 +1 @@
-{"version":3,"file":"validateSubmission.js","names":[],"sources":["../../src/submissions/validateSubmission.ts"],"sourcesContent":["import {\n\tAPIError,\n\ttype CollectionBeforeValidateHook,\n\ttype TypedLocale,\n\tValidationError,\n} from 'payload'\nimport { calcExpressionOf } from '../calc/computeCalcFields'\nimport type { CalcResolved } from '../calc/evaluate'\nimport type { CalcFunction, CalcSource } from '../calc/registry'\nimport { resolveCalcContext } from '../calc/resolveCalcContext'\nimport { FORM_SUBMISSIONS_SLUG } from '../collections/formSubmissions'\nimport { FORMS_SLUG } from '../collections/forms'\nimport type { ConsentSnapshotMode } from '../consent/captureConsent'\nimport { resolveConsentEntries } from '../consent/resolveConsentEntries'\nimport type { ConsentSourceEntry, ConsentSourcesResolver } from '../consent/types'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport { isPollClosed, pollConfigOf } from '../form/pollState'\nimport { applyPollOptions } from '../poll/applyPollOptions'\nimport type { PollOption } from '../poll/definePollOptionSource'\nimport { resolveEffectivePollOptions } from '../poll/effectivePollOptions'\nimport type { PollOptionSourceRegistry } from '../poll/registry'\nimport { IDENTITY_CONTEXT_KEY } from '../spam/constants'\nimport { keys } from '../translations/keys'\nimport { asFieldTranslate, asTranslate } from '../translations/server'\nimport type { ValidationRuleRegistry } from '../validation/registry'\nimport { formIdOf } from './formIdOf'\nimport { runSubmission } from './runSubmission'\nimport { resolveSubmissionLocale } from './submissionLocale'\nimport type { FormFieldInstance, SubmissionValue } from './types'\nimport { POLL_CONTEXT_KEY, type PollContextState, voteChangeTargetOf } from './votedCookie'\n\nexport type ValidateSubmissionArgs = {\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\t/** Registered calc sources (plugin option `calc.sources`); re-resolved fresh per submission. */\n\tcalcSources?: Record<string, CalcSource>\n\t/** Registered calc functions (plugin option `calc.functions`); threaded into calc evaluation. */\n\tcalcFunctions?: Record<string, CalcFunction>\n\t/** The host's consent sources resolver (plugin option `consent.sources`); absent when no sources are configured. */\n\tconsentSources?: ConsentSourcesResolver\n\t/** What each consent proof snapshots of the agreed wording (plugin option `consent.snapshot`). */\n\tconsentSnapshot?: ConsentSnapshotMode\n\t/** The plugin-configured uploads collection slug; absent when uploads are disabled. */\n\tuploadSlug?: string\n\t/** Registered poll option sources; a form's configured `optionSource` resolves through this at validation time. */\n\tpollSourceRegistry?: PollOptionSourceRegistry\n\t/** Plugin `spam.uploadOwnership: 'strict'`: reject an owned upload when the submitter is unidentifiable. */\n\tstrictUploadOwnership?: boolean\n}\n\n/**\n * Server-authoritative submission validation. On create (and on a vote-change update flagged by the\n * vote-submit endpoint) it loads the referenced form, re-runs every\n * field's required check, intrinsic validator, and declarative rules through `runSubmission`, threading\n * `req`/`payload` so server-only async rules can hit the DB, and throws a Payload `ValidationError` with\n * per-field paths on any failure. The client is never trusted.\n * Consent fields are captured into `result.consent` (array of proofs, one per visible consent field),\n * built from the host's sources re-resolved here rather than from anything the form or client carries.\n */\nexport const validateSubmission =\n\t({\n\t\tregistry,\n\t\truleRegistry,\n\t\tcalcSources,\n\t\tcalcFunctions,\n\t\tconsentSources,\n\t\tconsentSnapshot,\n\t\tuploadSlug,\n\t\tpollSourceRegistry,\n\t\tstrictUploadOwnership,\n\t}: ValidateSubmissionArgs): CollectionBeforeValidateHook =>\n\tasync ({ data, operation, originalDoc, req }) => {\n\t\t// Updates run the same create-grade pipeline only when the vote-change endpoint flagged the\n\t\t// request; every other update (host server code with overrideAccess) keeps today's behavior.\n\t\tconst changeTarget = operation === 'update' ? voteChangeTargetOf(req) : undefined\n\t\tif ((operation !== 'create' && changeTarget === undefined) || !data) {\n\t\t\treturn data\n\t\t}\n\t\tconst formId = data.form\n\t\tif (formId == null) {\n\t\t\treturn data\n\t\t}\n\t\tif (changeTarget !== undefined) {\n\t\t\t// Fail closed: an unresolvable stored form binding is as disqualifying as a mismatched one.\n\t\t\tconst originalFormId = (originalDoc as { form?: unknown } | undefined)?.form\n\t\t\tconst boundFormId = originalFormId != null ? formIdOf(originalFormId) : null\n\t\t\tif (boundFormId == null || String(boundFormId) !== String(formId)) {\n\t\t\t\tthrow new APIError('form-builder: a vote change cannot move a submission across forms', 400)\n\t\t\t}\n\t\t}\n\n\t\t// `req.locale` comes from the visitor's `?locale=`. Clamp it before anything reads it (the form\n\t\t// load below, the host's consent and calc resolvers, the inline action dispatch) so a visitor\n\t\t// cannot run the pipeline under `all` or an unconfigured code. Cast where Payload takes it: the\n\t\t// clamped value is one of the host's own codes, but its concrete `TypedLocale` union is unknowable here.\n\t\tconst locale = resolveSubmissionLocale(req.locale, req.payload.config.localization)\n\t\treq.locale = locale as TypedLocale\n\n\t\tconst form = await req.payload.findByID({\n\t\t\tcollection: FORMS_SLUG,\n\t\t\tid: formId as string | number,\n\t\t\tdepth: 0,\n\t\t\tlocale: locale as TypedLocale,\n\t\t\treq,\n\t\t})\n\n\t\t// Stash the form's poll state so the voted-cookie afterChange hook can skip a second form\n\t\t// fetch on the same request.\n\t\tconst poll = pollConfigOf(form.poll)\n\t\tconst pollEnabled = form.pollEnabled === true\n\t\treq.context[POLL_CONTEXT_KEY] = {\n\t\t\tpollEnabled,\n\t\t\tallowChange: poll?.allowChange === true,\n\t\t} satisfies PollContextState\n\n\t\t// Form-level lifecycle guard, before any field work: a closed poll accepts no submissions,\n\t\t// regardless of what the client rendered.\n\t\tif (pollEnabled && isPollClosed(poll)) {\n\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.pollClosed), 403)\n\t\t}\n\n\t\tlet fields = ((form.fields as FormFieldInstance[] | undefined) ?? []) as FormFieldInstance[]\n\t\tconst incoming = ((data.values as SubmissionValue[] | undefined) ?? []) as SubmissionValue[]\n\t\tconst t = asFieldTranslate(req.i18n.t)\n\n\t\t// With a resolved choice set for the results field (a poll `optionSource`, or the field type's\n\t\t// own `resolveOptions`) the resolved values are the only accepted answers: options are injected\n\t\t// into the field instance (so the select's membership check and the stored option labels use\n\t\t// them) and membership is also enforced directly, so an empty resolution or a non-select results\n\t\t// field still fails closed. A resolve failure rejects the whole submission rather than skipping\n\t\t// the check. Static authored polls are unaffected: their field validates against its own options\n\t\t// through the normal field pipeline.\n\t\tconst resultsField =\n\t\t\tpollEnabled && typeof poll?.resultsField === 'string' && poll.resultsField.length > 0\n\t\t\t\t? poll.resultsField\n\t\t\t\t: undefined\n\t\tconst resultsInstance = resultsField\n\t\t\t? fields.find((instance) => instance.name === resultsField)\n\t\t\t: undefined\n\t\tconst usesResolver =\n\t\t\t(typeof poll?.optionSource === 'string' && poll.optionSource.length > 0) ||\n\t\t\tBoolean(resultsInstance && registry.get(resultsInstance.blockType)?.resolveOptions)\n\t\tif (resultsField && usesResolver) {\n\t\t\tlet resolved: PollOption[]\n\t\t\ttry {\n\t\t\t\tresolved = await resolveEffectivePollOptions({\n\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\treq,\n\t\t\t\t\tform,\n\t\t\t\t\tsources: pollSourceRegistry ?? new Map(),\n\t\t\t\t\tfieldTypes: registry,\n\t\t\t\t})\n\t\t\t} catch {\n\t\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.pollOptionsUnavailable), 503)\n\t\t\t}\n\t\t\tfields = applyPollOptions(fields, resultsField, resolved)\n\t\t\tconst answer = incoming.find((entry) => entry.field === resultsField)?.value\n\t\t\tconst isAnswered = answer != null && answer !== ''\n\t\t\tif (isAnswered && !resolved.some((option) => option.value === answer)) {\n\t\t\t\tthrow new ValidationError(\n\t\t\t\t\t{\n\t\t\t\t\t\tcollection: FORM_SUBMISSIONS_SLUG,\n\t\t\t\t\t\terrors: [\n\t\t\t\t\t\t\t{ path: resultsField, message: asTranslate(req.i18n.t)(keys.validationSelect) },\n\t\t\t\t\t\t],\n\t\t\t\t\t},\n\t\t\t\t\treq.t\n\t\t\t\t)\n\t\t\t}\n\t\t}\n\t\tconst expectedOwner =\n\t\t\ttypeof req.context?.[IDENTITY_CONTEXT_KEY] === 'string'\n\t\t\t\t? (req.context[IDENTITY_CONTEXT_KEY] as string)\n\t\t\t\t: undefined\n\n\t\t// Every consent proof is built from the source as it reads right now, not from anything the\n\t\t// form or the client carries, so a resolver failure rejects the submission rather than\n\t\t// recording an agreement to a statement the server cannot vouch for.\n\t\tlet consentEntries: ConsentSourceEntry[] = []\n\t\tif (consentSources && fields.some((field) => field.blockType === 'consent')) {\n\t\t\ttry {\n\t\t\t\tconsentEntries = await resolveConsentEntries({\n\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\treq,\n\t\t\t\t\tform,\n\t\t\t\t\tsources: consentSources,\n\t\t\t\t})\n\t\t\t} catch {\n\t\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.consentSourcesUnavailable), 503)\n\t\t\t}\n\t\t}\n\n\t\t// Calc extension values re-resolve fresh here, never trusting the render-time embedding, and a\n\t\t// resolver failure rejects the submission: a calc total is money math, so an outage must not\n\t\t// silently evaluate to 0 (the render path fails open instead; see `calcAfterRead`). Surfaced as\n\t\t// a translated 503 (the consent-sources precedent above), with the cause logged server-side\n\t\t// rather than leaked to the anonymous caller.\n\t\tlet calcResolved: CalcResolved | undefined\n\t\tif (fields.some((instance) => calcExpressionOf(instance) !== undefined)) {\n\t\t\tlet resolved: CalcResolved\n\t\t\ttry {\n\t\t\t\tresolved = await resolveCalcContext({\n\t\t\t\t\tfields,\n\t\t\t\t\tsources: calcSources ?? {},\n\t\t\t\t\t// Double cast: a host's generated Form interface has no index signature, so the direct\n\t\t\t\t\t// cast fails under a consumer tsconfig even though the shape is a plain document.\n\t\t\t\t\tform: form as unknown as { id: number | string } & Record<string, unknown>,\n\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\treq,\n\t\t\t\t})\n\t\t\t} catch (error) {\n\t\t\t\treq.payload.logger?.error(\n\t\t\t\t\t`@10x-media/form-builder: calc source resolution failed for form ${String(formId)}: ${\n\t\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t\t}`\n\t\t\t\t)\n\t\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.calcSourcesUnavailable), 503)\n\t\t\t}\n\t\t\tconst functions =\n\t\t\t\tcalcFunctions && Object.keys(calcFunctions).length > 0\n\t\t\t\t\t? Object.fromEntries(\n\t\t\t\t\t\t\tObject.entries(calcFunctions).map(([name, definition]) => [name, definition.apply])\n\t\t\t\t\t\t)\n\t\t\t\t\t: undefined\n\t\t\tcalcResolved = { ...resolved, ...(functions ? { functions } : {}) }\n\t\t}\n\n\t\tconst result = await runSubmission({\n\t\t\tfields,\n\t\t\tvalues: incoming,\n\t\t\tcalcResolved,\n\t\t\tregistry,\n\t\t\truleRegistry,\n\t\t\tconsentEntries,\n\t\t\tconsentSnapshot,\n\t\t\tlocale,\n\t\t\tt,\n\t\t\toperation: 'create',\n\t\t\treq,\n\t\t\tpayload: req.payload,\n\t\t\tformId: formId as number | string,\n\t\t\tuploadSlug,\n\t\t\texpectedOwner,\n\t\t\tstrictUploadOwnership,\n\t\t})\n\n\t\tif (result.errors.length > 0) {\n\t\t\tthrow new ValidationError({ collection: FORM_SUBMISSIONS_SLUG, errors: result.errors }, req.t)\n\t\t}\n\n\t\tdata.values = result.values\n\t\tdata.descriptors = result.descriptors\n\t\tdata.consent = result.consent.length > 0 ? result.consent : undefined\n\t\tdata.locale = locale\n\t\t// Unauthenticated submits are always 'complete'. A client-supplied 'partial' would\n\t\t// silently skip all post-submit actions and events. Authenticated callers (e.g. an\n\t\t// admin draft-save flow) may set status themselves.\n\t\tif (!req.user) {\n\t\t\tdata.status = 'complete'\n\t\t}\n\t\treturn data\n\t}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,MAAa,sBACX,EACA,UACA,cACA,aACA,eACA,gBACA,iBACA,YACA,oBACA,4BAED,OAAO,EAAE,MAAM,WAAW,aAAa,UAAU;CAGhD,MAAM,eAAe,cAAc,WAAW,mBAAmB,GAAG,IAAI,KAAA;CACxE,IAAK,cAAc,YAAY,iBAAiB,KAAA,KAAc,CAAC,MAC9D,OAAO;CAER,MAAM,SAAS,KAAK;CACpB,IAAI,UAAU,MACb,OAAO;CAER,IAAI,iBAAiB,KAAA,GAAW;EAE/B,MAAM,iBAAkB,aAAgD;EACxE,MAAM,cAAc,kBAAkB,OAAO,SAAS,cAAc,IAAI;EACxE,IAAI,eAAe,QAAQ,OAAO,WAAW,MAAM,OAAO,MAAM,GAC/D,MAAM,IAAI,SAAS,qEAAqE,GAAG;CAE7F;CAMA,MAAM,SAAS,wBAAwB,IAAI,QAAQ,IAAI,QAAQ,OAAO,YAAY;CAClF,IAAI,SAAS;CAEb,MAAM,OAAO,MAAM,IAAI,QAAQ,SAAS;EACvC,YAAY;EACZ,IAAI;EACJ,OAAO;EACC;EACR;CACD,CAAC;CAID,MAAM,OAAO,aAAa,KAAK,IAAI;CACnC,MAAM,cAAc,KAAK,gBAAgB;CACzC,IAAI,QAAQ,oBAAoB;EAC/B;EACA,aAAa,MAAM,gBAAgB;CACpC;CAIA,IAAI,eAAe,aAAa,IAAI,GACnC,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,GAAG,GAAG;CAGjE,IAAI,SAAW,KAAK,UAA8C,CAAC;CACnE,MAAM,WAAa,KAAK,UAA4C,CAAC;CACrE,MAAM,IAAI,iBAAiB,IAAI,KAAK,CAAC;CASrC,MAAM,eACL,eAAe,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,SAAS,IACjF,KAAK,eACL,KAAA;CACJ,MAAM,kBAAkB,eACrB,OAAO,MAAM,aAAa,SAAS,SAAS,YAAY,IACxD,KAAA;CACH,MAAM,eACJ,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,SAAS,KACtE,QAAQ,mBAAmB,SAAS,IAAI,gBAAgB,SAAS,GAAG,cAAc;CACnF,IAAI,gBAAgB,cAAc;EACjC,IAAI;EACJ,IAAI;GACH,WAAW,MAAM,4BAA4B;IAC5C,SAAS,IAAI;IACb;IACA;IACA,SAAS,sCAAsB,IAAI,IAAI;IACvC,YAAY;GACb,CAAC;EACF,QAAQ;GACP,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,sBAAsB,GAAG,GAAG;EAC7E;EACA,SAAS,iBAAiB,QAAQ,cAAc,QAAQ;EACxD,MAAM,SAAS,SAAS,MAAM,UAAU,MAAM,UAAU,YAAY,GAAG;EAEvE,IADmB,UAAU,QAAQ,WAAW,MAC9B,CAAC,SAAS,MAAM,WAAW,OAAO,UAAU,MAAM,GACnE,MAAM,IAAI,gBACT;GACC,YAAY;GACZ,QAAQ,CACP;IAAE,MAAM;IAAc,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,gBAAgB;GAAE,CAC/E;EACD,GACA,IAAI,CACL;CAEF;CACA,MAAM,gBACL,OAAO,IAAI,UAAA,+BAAoC,WAC3C,IAAI,QAAQ,wBACb,KAAA;CAKJ,IAAI,iBAAuC,CAAC;CAC5C,IAAI,kBAAkB,OAAO,MAAM,UAAU,MAAM,cAAc,SAAS,GACzE,IAAI;EACH,iBAAiB,MAAM,sBAAsB;GAC5C,SAAS,IAAI;GACb;GACA;GACA,SAAS;EACV,CAAC;CACF,QAAQ;EACP,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,yBAAyB,GAAG,GAAG;CAChF;CAQD,IAAI;CACJ,IAAI,OAAO,MAAM,aAAa,iBAAiB,QAAQ,MAAM,KAAA,CAAS,GAAG;EACxE,IAAI;EACJ,IAAI;GACH,WAAW,MAAM,mBAAmB;IACnC;IACA,SAAS,eAAe,CAAC;IAGnB;IACN,SAAS,IAAI;IACb;GACD,CAAC;EACF,SAAS,OAAO;GACf,IAAI,QAAQ,QAAQ,MACnB,mEAAmE,OAAO,MAAM,EAAE,IACjF,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;GACA,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,sBAAsB,GAAG,GAAG;EAC7E;EACA,MAAM,YACL,iBAAiB,OAAO,KAAK,aAAa,EAAE,SAAS,IAClD,OAAO,YACP,OAAO,QAAQ,aAAa,EAAE,KAAK,CAAC,MAAM,gBAAgB,CAAC,MAAM,WAAW,KAAK,CAAC,CACnF,IACC,KAAA;EACJ,eAAe;GAAE,GAAG;GAAU,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EAAG;CACnE;CAEA,MAAM,SAAS,MAAM,cAAc;EAClC;EACA,QAAQ;EACR;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;EACA,SAAS,IAAI;EACL;EACR;EACA;EACA;CACD,CAAC;CAED,IAAI,OAAO,OAAO,SAAS,GAC1B,MAAM,IAAI,gBAAgB;EAAE,YAAY;EAAuB,QAAQ,OAAO;CAAO,GAAG,IAAI,CAAC;CAG9F,KAAK,SAAS,OAAO;CACrB,KAAK,cAAc,OAAO;CAC1B,KAAK,UAAU,OAAO,QAAQ,SAAS,IAAI,OAAO,UAAU,KAAA;CAC5D,KAAK,SAAS;CAId,IAAI,CAAC,IAAI,MACR,KAAK,SAAS;CAEf,OAAO;AACR"}
+{"version":3,"file":"validateSubmission.js","names":[],"sources":["../../src/submissions/validateSubmission.ts"],"sourcesContent":["import {\n\tAPIError,\n\ttype CollectionBeforeValidateHook,\n\ttype TypedLocale,\n\tValidationError,\n} from 'payload'\nimport { calcExpressionOf } from '../calc/computeCalcFields'\nimport type { CalcResolved } from '../calc/evaluate'\nimport type { CalcFunction, CalcSource } from '../calc/registry'\nimport { resolveCalcContext } from '../calc/resolveCalcContext'\nimport type { ConsentSnapshotMode } from '../consent/captureConsent'\nimport { resolveConsentEntries } from '../consent/resolveConsentEntries'\nimport type { ConsentSourceEntry, ConsentSourcesResolver } from '../consent/types'\nimport type { FieldTypeRegistry } from '../fields/registry'\nimport { findFormAtLocale } from '../form/findFormAtLocale'\nimport { isPollClosed, pollConfigOf } from '../form/pollState'\nimport { pluginSlugsOf } from '../plugin/collectionSlugs'\nimport { applyPollOptions } from '../poll/applyPollOptions'\nimport type { PollOption } from '../poll/definePollOptionSource'\nimport { resolveEffectivePollOptions } from '../poll/effectivePollOptions'\nimport type { PollOptionSourceRegistry } from '../poll/registry'\nimport { IDENTITY_CONTEXT_KEY } from '../spam/constants'\nimport { keys } from '../translations/keys'\nimport { asFieldTranslate, asTranslate } from '../translations/server'\nimport type { ValidationRuleRegistry } from '../validation/registry'\nimport { formIdOf } from './formIdOf'\nimport { runSubmission } from './runSubmission'\nimport { resolveSubmissionLocale, SUBMISSION_LOCALE_CONTEXT_KEY } from './submissionLocale'\nimport type { FormFieldInstance, SubmissionValue } from './types'\nimport { POLL_CONTEXT_KEY, type PollContextState, voteChangeTargetOf } from './votedCookie'\n\nexport type ValidateSubmissionArgs = {\n\tregistry: FieldTypeRegistry\n\truleRegistry: ValidationRuleRegistry\n\t/** Registered calc sources (plugin option `calc.sources`); re-resolved fresh per submission. */\n\tcalcSources?: Record<string, CalcSource>\n\t/** Registered calc functions (plugin option `calc.functions`); threaded into calc evaluation. */\n\tcalcFunctions?: Record<string, CalcFunction>\n\t/** The host's consent sources resolver (plugin option `consent.sources`); absent when no sources are configured. */\n\tconsentSources?: ConsentSourcesResolver\n\t/** What each consent proof snapshots of the agreed wording (plugin option `consent.snapshot`). */\n\tconsentSnapshot?: ConsentSnapshotMode\n\t/** The plugin-configured uploads collection slug; absent when uploads are disabled. */\n\tuploadSlug?: string\n\t/** Registered poll option sources; a form's configured `optionSource` resolves through this at validation time. */\n\tpollSourceRegistry?: PollOptionSourceRegistry\n\t/** Plugin `spam.uploadOwnership: 'strict'`: reject an owned upload when the submitter is unidentifiable. */\n\tstrictUploadOwnership?: boolean\n}\n\n/**\n * Server-authoritative submission validation. On create (and on a vote-change update flagged by the\n * vote-submit endpoint) it loads the referenced form, re-runs every\n * field's required check, intrinsic validator, and declarative rules through `runSubmission`, threading\n * `req`/`payload` so server-only async rules can hit the DB, and throws a Payload `ValidationError` with\n * per-field paths on any failure. The client is never trusted.\n * Consent fields are captured into `result.consent` (array of proofs, one per visible consent field),\n * built from the host's sources re-resolved here rather than from anything the form or client carries.\n */\nexport const validateSubmission =\n\t({\n\t\tregistry,\n\t\truleRegistry,\n\t\tcalcSources,\n\t\tcalcFunctions,\n\t\tconsentSources,\n\t\tconsentSnapshot,\n\t\tuploadSlug,\n\t\tpollSourceRegistry,\n\t\tstrictUploadOwnership,\n\t}: ValidateSubmissionArgs): CollectionBeforeValidateHook =>\n\tasync ({ data, operation, originalDoc, req }) => {\n\t\t// Updates run the same create-grade pipeline only when the vote-change endpoint flagged the\n\t\t// request; every other update (host server code with overrideAccess) keeps today's behavior.\n\t\tconst changeTarget = operation === 'update' ? voteChangeTargetOf(req) : undefined\n\t\tif ((operation !== 'create' && changeTarget === undefined) || !data) {\n\t\t\treturn data\n\t\t}\n\t\tconst formId = data.form\n\t\tif (formId == null) {\n\t\t\treturn data\n\t\t}\n\t\tif (changeTarget !== undefined) {\n\t\t\t// Fail closed: an unresolvable stored form binding is as disqualifying as a mismatched one.\n\t\t\tconst originalFormId = (originalDoc as { form?: unknown } | undefined)?.form\n\t\t\tconst boundFormId = originalFormId != null ? formIdOf(originalFormId) : null\n\t\t\tif (boundFormId == null || String(boundFormId) !== String(formId)) {\n\t\t\t\tthrow new APIError('form-builder: a vote change cannot move a submission across forms', 400)\n\t\t\t}\n\t\t}\n\n\t\t// `req.locale` comes from the visitor's `?locale=` (or `createSubmission`'s `locale`). Clamp it\n\t\t// before anything reads it (the form load below, the host's consent and calc resolvers) so a\n\t\t// visitor cannot run the pipeline under `all` or an unconfigured code. On a localized host the\n\t\t// clamped value is set on `req` only while this hook runs and restored after, because `req` may\n\t\t// be the host's own request; without localization Payload leaves its `locale` unset, and so do we.\n\t\tconst { localization } = req.payload.config\n\t\tconst requested = req.context[SUBMISSION_LOCALE_CONTEXT_KEY] ?? req.locale\n\t\tdelete req.context[SUBMISSION_LOCALE_CONTEXT_KEY]\n\t\tconst locale = resolveSubmissionLocale(requested, localization)\n\t\tconst previousLocale = req.locale\n\t\tif (localization) {\n\t\t\treq.locale = locale as TypedLocale\n\t\t}\n\t\ttry {\n\t\t\tconst form = await findFormAtLocale({\n\t\t\t\tpayload: req.payload,\n\t\t\t\tid: formId as string | number,\n\t\t\t\tlocale,\n\t\t\t\treq,\n\t\t\t})\n\n\t\t\t// Stash the form's poll state so the voted-cookie afterChange hook can skip a second form\n\t\t\t// fetch on the same request.\n\t\t\tconst poll = pollConfigOf(form.poll)\n\t\t\tconst pollEnabled = form.pollEnabled === true\n\t\t\treq.context[POLL_CONTEXT_KEY] = {\n\t\t\t\tpollEnabled,\n\t\t\t\tallowChange: poll?.allowChange === true,\n\t\t\t} satisfies PollContextState\n\n\t\t\t// Form-level lifecycle guard, before any field work: a closed poll accepts no submissions,\n\t\t\t// regardless of what the client rendered.\n\t\t\tif (pollEnabled && isPollClosed(poll)) {\n\t\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.pollClosed), 403)\n\t\t\t}\n\n\t\t\tlet fields = ((form.fields as FormFieldInstance[] | undefined) ?? []) as FormFieldInstance[]\n\t\t\tconst incoming = ((data.values as SubmissionValue[] | undefined) ?? []) as SubmissionValue[]\n\t\t\tconst t = asFieldTranslate(req.i18n.t)\n\n\t\t\t// With a resolved choice set for the results field (a poll `optionSource`, or the field type's\n\t\t\t// own `resolveOptions`) the resolved values are the only accepted answers: options are injected\n\t\t\t// into the field instance (so the select's membership check and the stored option labels use\n\t\t\t// them) and membership is also enforced directly, so an empty resolution or a non-select results\n\t\t\t// field still fails closed. A resolve failure rejects the whole submission rather than skipping\n\t\t\t// the check. Static authored polls are unaffected: their field validates against its own options\n\t\t\t// through the normal field pipeline.\n\t\t\tconst resultsField =\n\t\t\t\tpollEnabled && typeof poll?.resultsField === 'string' && poll.resultsField.length > 0\n\t\t\t\t\t? poll.resultsField\n\t\t\t\t\t: undefined\n\t\t\tconst resultsInstance = resultsField\n\t\t\t\t? fields.find((instance) => instance.name === resultsField)\n\t\t\t\t: undefined\n\t\t\tconst usesResolver =\n\t\t\t\t(typeof poll?.optionSource === 'string' && poll.optionSource.length > 0) ||\n\t\t\t\tBoolean(resultsInstance && registry.get(resultsInstance.blockType)?.resolveOptions)\n\t\t\tif (resultsField && usesResolver) {\n\t\t\t\tlet resolved: PollOption[]\n\t\t\t\ttry {\n\t\t\t\t\tresolved = await resolveEffectivePollOptions({\n\t\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\t\treq,\n\t\t\t\t\t\tform,\n\t\t\t\t\t\tsources: pollSourceRegistry ?? new Map(),\n\t\t\t\t\t\tfieldTypes: registry,\n\t\t\t\t\t})\n\t\t\t\t} catch {\n\t\t\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.pollOptionsUnavailable), 503)\n\t\t\t\t}\n\t\t\t\tfields = applyPollOptions(fields, resultsField, resolved)\n\t\t\t\tconst answer = incoming.find((entry) => entry.field === resultsField)?.value\n\t\t\t\tconst isAnswered = answer != null && answer !== ''\n\t\t\t\tif (isAnswered && !resolved.some((option) => option.value === answer)) {\n\t\t\t\t\tthrow new ValidationError(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tcollection: pluginSlugsOf(req.payload).formSubmissions,\n\t\t\t\t\t\t\terrors: [\n\t\t\t\t\t\t\t\t{ path: resultsField, message: asTranslate(req.i18n.t)(keys.validationSelect) },\n\t\t\t\t\t\t\t],\n\t\t\t\t\t\t},\n\t\t\t\t\t\treq.t\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst expectedOwner =\n\t\t\t\ttypeof req.context?.[IDENTITY_CONTEXT_KEY] === 'string'\n\t\t\t\t\t? (req.context[IDENTITY_CONTEXT_KEY] as string)\n\t\t\t\t\t: undefined\n\n\t\t\t// Every consent proof is built from the source as it reads right now, not from anything the\n\t\t\t// form or the client carries, so a resolver failure rejects the submission rather than\n\t\t\t// recording an agreement to a statement the server cannot vouch for.\n\t\t\tlet consentEntries: ConsentSourceEntry[] = []\n\t\t\tif (consentSources && fields.some((field) => field.blockType === 'consent')) {\n\t\t\t\ttry {\n\t\t\t\t\tconsentEntries = await resolveConsentEntries({\n\t\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\t\treq,\n\t\t\t\t\t\tform,\n\t\t\t\t\t\tsources: consentSources,\n\t\t\t\t\t})\n\t\t\t\t} catch {\n\t\t\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.consentSourcesUnavailable), 503)\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Calc extension values re-resolve fresh here, never trusting the render-time embedding, and a\n\t\t\t// resolver failure rejects the submission: a calc total is money math, so an outage must not\n\t\t\t// silently evaluate to 0 (the render path fails open instead; see `calcAfterRead`). Surfaced as\n\t\t\t// a translated 503 (the consent-sources precedent above), with the cause logged server-side\n\t\t\t// rather than leaked to the anonymous caller.\n\t\t\tlet calcResolved: CalcResolved | undefined\n\t\t\tif (fields.some((instance) => calcExpressionOf(instance) !== undefined)) {\n\t\t\t\tlet resolved: CalcResolved\n\t\t\t\ttry {\n\t\t\t\t\tresolved = await resolveCalcContext({\n\t\t\t\t\t\tfields,\n\t\t\t\t\t\tsources: calcSources ?? {},\n\t\t\t\t\t\t// Double cast: a host's generated Form interface has no index signature, so the direct\n\t\t\t\t\t\t// cast fails under a consumer tsconfig even though the shape is a plain document.\n\t\t\t\t\t\tform: form as unknown as { id: number | string } & Record<string, unknown>,\n\t\t\t\t\t\tpayload: req.payload,\n\t\t\t\t\t\treq,\n\t\t\t\t\t})\n\t\t\t\t} catch (error) {\n\t\t\t\t\treq.payload.logger?.error(\n\t\t\t\t\t\t`@10x-media/form-builder: calc source resolution failed for form ${String(formId)}: ${\n\t\t\t\t\t\t\terror instanceof Error ? error.message : String(error)\n\t\t\t\t\t\t}`\n\t\t\t\t\t)\n\t\t\t\t\tthrow new APIError(asTranslate(req.i18n.t)(keys.calcSourcesUnavailable), 503)\n\t\t\t\t}\n\t\t\t\tconst functions =\n\t\t\t\t\tcalcFunctions && Object.keys(calcFunctions).length > 0\n\t\t\t\t\t\t? Object.fromEntries(\n\t\t\t\t\t\t\t\tObject.entries(calcFunctions).map(([name, definition]) => [name, definition.apply])\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: undefined\n\t\t\t\tcalcResolved = { ...resolved, ...(functions ? { functions } : {}) }\n\t\t\t}\n\n\t\t\tconst result = await runSubmission({\n\t\t\t\tfields,\n\t\t\t\tvalues: incoming,\n\t\t\t\tcalcResolved,\n\t\t\t\tregistry,\n\t\t\t\truleRegistry,\n\t\t\t\tconsentEntries,\n\t\t\t\tconsentSnapshot,\n\t\t\t\tlocale,\n\t\t\t\tt,\n\t\t\t\toperation: 'create',\n\t\t\t\treq,\n\t\t\t\tpayload: req.payload,\n\t\t\t\tformId: formId as number | string,\n\t\t\t\tuploadSlug,\n\t\t\t\texpectedOwner,\n\t\t\t\tstrictUploadOwnership,\n\t\t\t})\n\n\t\t\tif (result.errors.length > 0) {\n\t\t\t\tthrow new ValidationError(\n\t\t\t\t\t{ collection: pluginSlugsOf(req.payload).formSubmissions, errors: result.errors },\n\t\t\t\t\treq.t\n\t\t\t\t)\n\t\t\t}\n\n\t\t\tdata.values = result.values\n\t\t\tdata.descriptors = result.descriptors\n\t\t\tdata.consent = result.consent.length > 0 ? result.consent : undefined\n\t\t\tdata.locale = locale\n\t\t\t// Unauthenticated submits are always 'complete'. A client-supplied 'partial' would\n\t\t\t// silently skip all post-submit actions and events. Authenticated callers (e.g. an\n\t\t\t// admin draft-save flow) may set status themselves.\n\t\t\tif (!req.user) {\n\t\t\t\tdata.status = 'complete'\n\t\t\t}\n\t\t\treturn data\n\t\t} finally {\n\t\t\tif (localization) {\n\t\t\t\treq.locale = previousLocale\n\t\t\t}\n\t\t}\n\t}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,MAAa,sBACX,EACA,UACA,cACA,aACA,eACA,gBACA,iBACA,YACA,oBACA,4BAED,OAAO,EAAE,MAAM,WAAW,aAAa,UAAU;CAGhD,MAAM,eAAe,cAAc,WAAW,mBAAmB,GAAG,IAAI,KAAA;CACxE,IAAK,cAAc,YAAY,iBAAiB,KAAA,KAAc,CAAC,MAC9D,OAAO;CAER,MAAM,SAAS,KAAK;CACpB,IAAI,UAAU,MACb,OAAO;CAER,IAAI,iBAAiB,KAAA,GAAW;EAE/B,MAAM,iBAAkB,aAAgD;EACxE,MAAM,cAAc,kBAAkB,OAAO,SAAS,cAAc,IAAI;EACxE,IAAI,eAAe,QAAQ,OAAO,WAAW,MAAM,OAAO,MAAM,GAC/D,MAAM,IAAI,SAAS,qEAAqE,GAAG;CAE7F;CAOA,MAAM,EAAE,iBAAiB,IAAI,QAAQ;CACrC,MAAM,YAAY,IAAI,QAAA,kCAA0C,IAAI;CACpE,OAAO,IAAI,QAAQ;CACnB,MAAM,SAAS,wBAAwB,WAAW,YAAY;CAC9D,MAAM,iBAAiB,IAAI;CAC3B,IAAI,cACH,IAAI,SAAS;CAEd,IAAI;EACH,MAAM,OAAO,MAAM,iBAAiB;GACnC,SAAS,IAAI;GACb,IAAI;GACJ;GACA;EACD,CAAC;EAID,MAAM,OAAO,aAAa,KAAK,IAAI;EACnC,MAAM,cAAc,KAAK,gBAAgB;EACzC,IAAI,QAAQ,oBAAoB;GAC/B;GACA,aAAa,MAAM,gBAAgB;EACpC;EAIA,IAAI,eAAe,aAAa,IAAI,GACnC,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,GAAG,GAAG;EAGjE,IAAI,SAAW,KAAK,UAA8C,CAAC;EACnE,MAAM,WAAa,KAAK,UAA4C,CAAC;EACrE,MAAM,IAAI,iBAAiB,IAAI,KAAK,CAAC;EASrC,MAAM,eACL,eAAe,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,SAAS,IACjF,KAAK,eACL,KAAA;EACJ,MAAM,kBAAkB,eACrB,OAAO,MAAM,aAAa,SAAS,SAAS,YAAY,IACxD,KAAA;EACH,MAAM,eACJ,OAAO,MAAM,iBAAiB,YAAY,KAAK,aAAa,SAAS,KACtE,QAAQ,mBAAmB,SAAS,IAAI,gBAAgB,SAAS,GAAG,cAAc;EACnF,IAAI,gBAAgB,cAAc;GACjC,IAAI;GACJ,IAAI;IACH,WAAW,MAAM,4BAA4B;KAC5C,SAAS,IAAI;KACb;KACA;KACA,SAAS,sCAAsB,IAAI,IAAI;KACvC,YAAY;IACb,CAAC;GACF,QAAQ;IACP,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,sBAAsB,GAAG,GAAG;GAC7E;GACA,SAAS,iBAAiB,QAAQ,cAAc,QAAQ;GACxD,MAAM,SAAS,SAAS,MAAM,UAAU,MAAM,UAAU,YAAY,GAAG;GAEvE,IADmB,UAAU,QAAQ,WAAW,MAC9B,CAAC,SAAS,MAAM,WAAW,OAAO,UAAU,MAAM,GACnE,MAAM,IAAI,gBACT;IACC,YAAY,cAAc,IAAI,OAAO,EAAE;IACvC,QAAQ,CACP;KAAE,MAAM;KAAc,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,gBAAgB;IAAE,CAC/E;GACD,GACA,IAAI,CACL;EAEF;EACA,MAAM,gBACL,OAAO,IAAI,UAAA,+BAAoC,WAC3C,IAAI,QAAQ,wBACb,KAAA;EAKJ,IAAI,iBAAuC,CAAC;EAC5C,IAAI,kBAAkB,OAAO,MAAM,UAAU,MAAM,cAAc,SAAS,GACzE,IAAI;GACH,iBAAiB,MAAM,sBAAsB;IAC5C,SAAS,IAAI;IACb;IACA;IACA,SAAS;GACV,CAAC;EACF,QAAQ;GACP,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,yBAAyB,GAAG,GAAG;EAChF;EAQD,IAAI;EACJ,IAAI,OAAO,MAAM,aAAa,iBAAiB,QAAQ,MAAM,KAAA,CAAS,GAAG;GACxE,IAAI;GACJ,IAAI;IACH,WAAW,MAAM,mBAAmB;KACnC;KACA,SAAS,eAAe,CAAC;KAGnB;KACN,SAAS,IAAI;KACb;IACD,CAAC;GACF,SAAS,OAAO;IACf,IAAI,QAAQ,QAAQ,MACnB,mEAAmE,OAAO,MAAM,EAAE,IACjF,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEvD;IACA,MAAM,IAAI,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,sBAAsB,GAAG,GAAG;GAC7E;GACA,MAAM,YACL,iBAAiB,OAAO,KAAK,aAAa,EAAE,SAAS,IAClD,OAAO,YACP,OAAO,QAAQ,aAAa,EAAE,KAAK,CAAC,MAAM,gBAAgB,CAAC,MAAM,WAAW,KAAK,CAAC,CACnF,IACC,KAAA;GACJ,eAAe;IAAE,GAAG;IAAU,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;GAAG;EACnE;EAEA,MAAM,SAAS,MAAM,cAAc;GAClC;GACA,QAAQ;GACR;GACA;GACA;GACA;GACA;GACA;GACA;GACA,WAAW;GACX;GACA,SAAS,IAAI;GACL;GACR;GACA;GACA;EACD,CAAC;EAED,IAAI,OAAO,OAAO,SAAS,GAC1B,MAAM,IAAI,gBACT;GAAE,YAAY,cAAc,IAAI,OAAO,EAAE;GAAiB,QAAQ,OAAO;EAAO,GAChF,IAAI,CACL;EAGD,KAAK,SAAS,OAAO;EACrB,KAAK,cAAc,OAAO;EAC1B,KAAK,UAAU,OAAO,QAAQ,SAAS,IAAI,OAAO,UAAU,KAAA;EAC5D,KAAK,SAAS;EAId,IAAI,CAAC,IAAI,MACR,KAAK,SAAS;EAEf,OAAO;CACR,UAAU;EACT,IAAI,cACH,IAAI,SAAS;CAEf;AACD"}

package/dist/submissions/voteChangeEndpoint.js

@@ -1,5 +1,6 @@
 import { keys } from "../translations/keys.js";
 import { asTranslate } from "../translations/server.js";
+import { pluginSlugsOf } from "../plugin/collectionSlugs.js";
 import "../actions/dispatchContext.js";
 import { pollConfigOf } from "../form/pollState.js";
 import { formIdOf } from "./formIdOf.js";
@@ -7,8 +8,6 @@ import { VOTE_CHANGE_CONTEXT_KEY } from "./voteChange.js";
 import { votedSubmissionIdFromCookie } from "./votedCookie.js";
 import { APIError, addDataAndFileToRequest, addLocalesToRequestFromData } from "payload";
 //#region src/submissions/voteChangeEndpoint.ts
-const FORM_SUBMISSIONS_SLUG = "form-submissions";
-const FORMS_SLUG = "forms";
 /** Marks the vote-submit endpoint in the sanitized endpoint list (`custom.formBuilder`). */
 const VOTE_SUBMIT_ENDPOINT_TAG = "vote-submit";
 const isComplete = (doc) => doc.status == null || doc.status === "complete";
@@ -23,10 +22,11 @@ const isComplete = (doc) => doc.status == null || doc.status === "complete";
 const resolveVoteChangeTarget = async (args) => {
 	const { req, formId } = args;
 	if (formId == null) return null;
-	const submissionId = votedSubmissionIdFromCookie(req.headers?.get("cookie"), formId, req.payload.secret);
+	const submissionId = votedSubmissionIdFromCookie(req.headers?.get("cookie"), formId, req.payload);
 	if (submissionId == null) return null;
+	const slugs = pluginSlugsOf(req.payload);
 	const form = await req.payload.findByID({
-		collection: FORMS_SLUG,
+		collection: slugs.forms,
 		id: formId,
 		depth: 0,
 		overrideAccess: true,
@@ -34,7 +34,7 @@ const resolveVoteChangeTarget = async (args) => {
 	}).catch(() => null);
 	if (form?.pollEnabled !== true || pollConfigOf(form.poll)?.allowChange !== true) return null;
 	const submission = await req.payload.findByID({
-		collection: FORM_SUBMISSIONS_SLUG,
+		collection: slugs.formSubmissions,
 		id: submissionId,
 		depth: 0,
 		overrideAccess: true,
@@ -46,8 +46,8 @@ const resolveVoteChangeTarget = async (args) => {
 	return { submissionId: submission.id };
 };
 /**
-* Custom root `POST /form-submissions` endpoint. Payload matches a collection's custom endpoints
-* ahead of its built-in REST routes, so this handler sees every REST create first: when the posted
+* Custom root `POST` endpoint on the submissions collection (`/form-submissions` by default).
+* Payload matches a collection's custom endpoints ahead of its built-in REST routes, so this handler sees every REST create first: when the posted
 * form is an `allowChange` poll and the voted cookie identifies the caller's submission, it turns
 * the request into an in-place update (create-grade hooks opt in via the context flag); otherwise
 * it delegates to the stock create handler found in the same sanitized endpoint list, keeping the
@@ -60,12 +60,13 @@ const buildVoteSubmitEndpoint = () => {
 		await addDataAndFileToRequest(req);
 		addLocalesToRequestFromData(req);
 		const data = req.data ?? {};
+		const submissionsSlug = pluginSlugsOf(req.payload).formSubmissions;
 		const target = await resolveVoteChangeTarget({
 			req,
 			formId: data.form
 		});
 		if (!target) {
-			const endpoints = req.payload.collections[FORM_SUBMISSIONS_SLUG]?.config.endpoints;
+			const endpoints = req.payload.collections[submissionsSlug]?.config.endpoints;
 			const stockCreate = (Array.isArray(endpoints) ? endpoints : []).find((endpoint) => endpoint.method === "post" && endpoint.path === "/" && endpoint.custom?.formBuilder !== "vote-submit");
 			if (!stockCreate) throw new APIError("form-builder: stock create endpoint not found", 500);
 			if (req.body) Object.defineProperty(req, "body", {
@@ -81,7 +82,7 @@ const buildVoteSubmitEndpoint = () => {
 		}
 		req.context[VOTE_CHANGE_CONTEXT_KEY] = target.submissionId;
 		const doc = await req.payload.update.bind(req.payload)({
-			collection: FORM_SUBMISSIONS_SLUG,
+			collection: submissionsSlug,
 			id: target.submissionId,
 			data: {
 				form: data.form,