@dmitryvim/form-builder 0.5.3 → 0.5.4

package/dist/types/components/container.d.ts

@@ -1,7 +1,7 @@
 import type { ContainerElement, RenderContext, ComponentContext, ValidationResult, Element } from "../types/index.js";
 export declare function setRenderElement(fn: (element: any, ctx: RenderContext) => HTMLElement): void;
 export declare function renderSingleContainerElement(element: ContainerElement, ctx: RenderContext, wrapper: HTMLElement, pathKey: string): void;
-export declare function renderMultipleContainerElement(element: ContainerElement, ctx: RenderContext, wrapper: HTMLElement, _pathKey: string): void;
+export declare function renderMultipleContainerElement(element: ContainerElement, ctx: RenderContext, wrapper: HTMLElement, pathKey: string): void;
 export declare function setValidateElement(fn: (element: Element, ctx: {
     path: string;
 }, customScopeRoot?: HTMLElement | null) => {

package/dist/types/instance/FormBuilderInstance.d.ts

@@ -50,9 +50,26 @@ export declare class FormBuilderInstance {
     /**
      * Trigger onChange callbacks with debouncing
      * @param fieldPath - Optional field path for field-specific change events
-     * @param fieldValue - Optional field value for field-specific change events
+     * @param fieldValue - Optional field value for field-specific change events.
+     *   When omitted while fieldPath is given, the value is read from the
+     *   freshly extracted form data at debounce time — used by structural
+     *   changes (multi-item add/remove), where the handler has no cheap
+     *   current value but the array is trivially derivable after the fact.
      */
     triggerOnChange(fieldPath?: string, fieldValue?: any): void;
+    /**
+     * Resolve a DOM field path against the extracted form data.
+     *
+     * A plain getValueByPath is wrong for paths inside a multiple container:
+     * row markers keep gaps after a deletion (`s[2]` may be the first surviving
+     * row) while the extracted array is re-packed contiguously — the naive
+     * lookup would read a different row, or nothing. Each `[N]` segment is
+     * mapped from its marker to the row's position among the container's
+     * rendered rows, the same DOM order extraction used to build the array.
+     * A bracketed segment that is not a container marker (a multi-value leaf
+     * like `tags[1]`, whose indices are contiguous) falls back to the index.
+     */
+    private resolveDomPathValue;
     /**
      * Register an external action that will be displayed as a button
      * External actions can be form-level (no related_field) or field-level (with related_field)
@@ -174,4 +191,5 @@ export declare class FormBuilderInstance {
      */
     destroy(): void;
     private disconnectEnableIfObservers;
+    private removeTooltipElements;
 }

package/dist/types/types/state.d.ts

@@ -23,4 +23,11 @@ export interface State {
      * with a torn-down ctx. Reproducible under React StrictMode (double mount).
      */
     enableIfObservers: Set<MutationObserver>;
+    /**
+     * Info-button tooltip nodes created by this instance. They live on
+     * document.body (position: fixed, moved there so tile overflow can't clip
+     * them), so clearing formRoot does not remove them — destroy() and every
+     * renderForm() must, or each render cycle leaks its tooltips.
+     */
+    tooltipElements: Set<HTMLElement>;
 }

package/dist/types/utils/helpers.d.ts

@@ -7,8 +7,13 @@ export declare function isElementReadonly(element: {
 }): boolean;
 export declare function isPlainObject(obj: any): obj is Record<string, any>;
 /**
- * Escape HTML special characters to prevent XSS
- * Use when inserting user-controlled or translated content via innerHTML
+ * Escape HTML special characters to prevent XSS.
+ * Use when inserting user-controlled or translated content via innerHTML.
+ *
+ * Escapes quotes as well as `&<>` because several call sites interpolate
+ * into attribute position (e.g. `alt="${escapeHtml(fileName)}"`) — the
+ * previous textContent/innerHTML trick left quotes intact, letting a file
+ * named `x" onerror="…` break out of the attribute.
  */
 export declare function escapeHtml(text: string): string;
 /**
@@ -42,12 +47,19 @@ export declare function clear(node: HTMLElement): void;
 export declare function formatFileSize(bytes: number): string;
 /**
  * Serialize a value for storage in a hidden input's value attribute.
- * Objects/arrays → JSON string, null/undefined → "", primitives → String().
+ * null/undefined → "", everything else → JSON.
+ *
+ * JSON for every type — including strings — so deserialization is exact.
+ * The previous String() form was lossy: a hidden text field prefilled with
+ * "true" or "123" came back from getFormData() as a boolean/number.
  */
 export declare function serializeHiddenValue(value: any): string;
 /**
  * Deserialize a hidden input's value attribute back to its original type.
- * Empty string → null, JSON-parseable → parsed value, otherwise → raw string.
+ * Empty string → null, JSON → parsed value.
+ *
+ * The raw-string fallback covers values written into the DOM directly
+ * (not through serializeHiddenValue) — hosts poking the input by hand.
  */
 export declare function deserializeHiddenValue(raw: string): any;
 /**

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "A reusable JSON schema form builder library",
   "main": "./dist/cjs/index.cjs",
   "module": "./dist/esm/index.js",