@optionfactory/fml 9.0.0-rc1 → 9.0.0-rc10

package/dist/ful.iife.js

@@ -233,6 +233,48 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         }
     }
 
+    /**
+     * The protocol by which content standing inside a field becomes part of the
+     * accessible description of that field's control.
+     *
+     * A field owns its control's `aria-describedby`: it is the only thing that
+     * knows which element the description belongs on, and it already writes the
+     * entry for its own error region. Content the author slotted into the field
+     * cannot write that attribute itself without becoming a second owner of it, and
+     * it cannot be wired by the field either, because a slotted custom element
+     * renders after the field has mounted and has nothing to point at when the
+     * field looks.
+     *
+     * So the content asks, once it has something to offer. `describable(el)`
+     * answers the nearest ancestor that accepts a description, and the caller hands
+     * its element to that ancestor's `describedBy`, which answers whether it was
+     * taken. Nothing here names a field or a tooltip: the relation is expressed as
+     * a capability, so the two ends need not import each other, which matters
+     * because the library's own arrow runs from the forms to the disclosures.
+     *
+     * The lookup lives here rather than at its one call site so the protocol has a
+     * name, a place to be documented and a single definition to change.
+     */
+
+    /**
+     * @typedef {{ describedBy(el: HTMLElement): boolean }} Describable
+     */
+
+    /**
+     * The nearest ancestor of `el` that accepts elements into the description of
+     * whatever it considers its control, or null when nothing in the ancestry does.
+     * @param {Element} el
+     * @returns {(Element & Describable) | null}
+     */
+    const describable = (el) => {
+        for (let at = el.parentElement; at; at = at.parentElement) {
+            if (typeof (/** @type {any} */ (at).describedBy) === 'function') {
+                return /** @type {any} */ (at);
+            }
+        }
+        return null;
+    };
+
     /**
      * Sleeping, debouncing and throttling. Debounce and throttle both return the
      * wrapped function together with a cancel function.
@@ -627,6 +669,9 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         /** the role the element internals carry, 'presentation' unless the control is its own */
         static ROLE = 'presentation';
         #control;
+        #described;
+        #descriptions = [];
+        #errorId = null;
         #fieldError;
         #claims;
         #announces;
@@ -678,15 +723,18 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                     true,
                 );
             }
-            //the error region describes the control, or the host where there is no
+            //the description lands on the control, or on the host where there is no
             //single control to describe (a radio group's legend names its fieldset)
+            this.#described = described ?? control;
             if (error) {
-                (described ?? control).ariaDescribedByElements = [error];
+                //named for what it is, the generic id being for whoever brings no name
+                error.id = error.id || index_mjs.Attributes.uid('ful-field-error');
+                this.#errorId = error.id;
             }
+            //anything handed over before the field had a target lands here
+            this.#describe();
             if (label) {
-                control.ariaLabelledByElements = [label];
-                //a label that does not natively target the control still focuses it
-                label.addEventListener('click', () => this.focus());
+                Field.#name(this, label, control);
             }
             //the platform's implicit submission, stood in for where the field's own
             //protocol took it away: the inner controls carry form="", so Enter in one
@@ -719,6 +767,61 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         static #submitsOnEnter(el) {
             return el instanceof HTMLInputElement && !['file', 'button', 'submit', 'reset', 'image'].includes(el.type);
         }
+        /**
+         * Adds an element to the accessible description of the field's control and
+         * answers whether the field took it.
+         *
+         * A field takes one whenever it is offered, before its own render as
+         * readily as after: content slotted into a field is a custom element of its
+         * own and may upgrade on either side of the field it stands in, which
+         * happens in both directions in practice, a tooltip beating an async select
+         * to its render while losing to a plain input. A description handed over
+         * early waits here and is written the moment the field has somewhere to
+         * write it, so the caller never has to know the order.
+         *
+         * The reference lands on the element handed over rather than on a wrapper
+         * around it: a hidden element is included in a description only where it is
+         * named directly, and content that reaches the description through a
+         * wrapper is skipped while it is hidden. A popover closed until someone
+         * opens it is exactly that, so the caller passes the popover itself.
+         *
+         * An attribute rather than `ariaDescribedByElements`: the property reflects
+         * to nothing, so the description would live in the accessibility tree alone
+         * and vanish entirely on a browser without aria element reflection.
+         *
+         * This is the field's half of the description protocol; `describable` in
+         * `ful/descriptions.mjs` is the half the content uses to find the field.
+         * @param {HTMLElement} el
+         * @returns {boolean}
+         */
+        describedBy(el) {
+            if (!el) {
+                return false;
+            }
+            if (!el.id) {
+                el.id = index_mjs.Attributes.uid('ful-described');
+            }
+            if (!this.#descriptions.includes(el.id)) {
+                this.#descriptions.push(el.id);
+            }
+            this.#describe();
+            return true;
+        }
+        /**
+         * Writes the description the field has collected, the error region last:
+         * the standing explanations are what the field always says, the problem is
+         * the news. The field owns the attribute outright rather than appending to
+         * whatever is there, so the order does not depend on who arrived when.
+         */
+        #describe() {
+            if (!this.#described) {
+                return;
+            }
+            const ids = [...this.#descriptions, this.#errorId].filter((id) => id);
+            if (ids.length) {
+                this.#described.setAttribute('aria-describedby', ids.join(' '));
+            }
+        }
         focus(options) {
             this.#control?.focus(options);
         }
@@ -775,6 +878,49 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                 }),
             );
         }
+        /** The html elements a label's `for` may point at, `input[type=hidden]` excepted. */
+        static #LABELABLE = new Set(['BUTTON', 'INPUT', 'METER', 'OUTPUT', 'PROGRESS', 'SELECT', 'TEXTAREA']);
+        /**
+         * Names the control from the field's label, natively wherever the platform
+         * allows it.
+         *
+         * `for` and `id` are the form the dom itself carries, so the association is
+         * there for anything reading the markup rather than the accessibility tree:
+         * an audit tool, the browser's autofill, a translation pass. It also makes
+         * the label's click reach the control the way it does in a plain form, which
+         * is focus for a text control and activation for a checkbox, so the field
+         * needs no handler of its own.
+         *
+         * A control the platform will not let a label target, a composite carrying
+         * `role="radiogroup"` among them, takes `aria-labelledby` instead. That is an
+         * attribute too, so the association is equally visible; what it does not carry
+         * is the label's click, which is why the handler stays on that path only.
+         *
+         * Neither branch uses `ariaLabelledByElements`. The property reflects to no
+         * attribute, so the name lived in the accessibility tree alone: nothing reading
+         * the dom saw it, and on a browser without aria element reflection the
+         * assignment is a silent expando and the field has no name at all.
+         * @param {any} field
+         * @param {HTMLElement} label
+         * @param {any} control
+         */
+        static #name(field, label, control) {
+            const labelable =
+                Field.#LABELABLE.has(control.tagName) && control.getAttribute('type') !== 'hidden';
+            if (!labelable) {
+                if (!label.id) {
+                    label.id = index_mjs.Attributes.uid('ful-label');
+                }
+                control.setAttribute('aria-labelledby', label.id);
+                //aria-labelledby carries the name but not the label's click
+                label.addEventListener('click', () => field.focus());
+                return;
+            }
+            if (!control.id) {
+                control.id = index_mjs.Attributes.uid('ful-control');
+            }
+            label.setAttribute('for', control.id);
+        }
         /**
          * Whether the field's chrome should answer a gesture. Badges, dropzones,
          * menus and labels are not form controls, so their handlers must ask the
@@ -912,8 +1058,9 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
          *   three claims reach it
          * - `error` is the field's live region
          * - `label`, when given, names the control and focuses it on click
-         * - `described` moves the error's description off the control and onto
-         *   another element, the host where no single control can carry it
+         * - `described` moves the description off the control and onto another
+         *   element, the host where no single control can carry it: the error
+         *   region and anything `describedBy` is later handed both land there
          * - `claims` moves the three claims onto a wrapper the field disables as a
          *   whole, leaving focus and aria on the control
          * - `announces` is the element whose role carries `aria-readonly` and
@@ -1025,6 +1172,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             'response-mapper',
             'clear-invalid-on-change:presence',
             'scroll-on-error:presence',
+            'autocomplete',
         ];
         form;
         render() {
@@ -1035,6 +1183,10 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             //internals messages custom elements have no default UI for
             form.setAttribute('novalidate', '');
             index_mjs.Attributes.forward('form-', this, form);
+            //the fields read it off whichever of the two they reach first, which depends
+            //on whether they upgraded before or after this render: they cannot read it
+            //off their own control, which carries form="" and so has no form owner
+            index_mjs.Attributes.set(form, 'autocomplete', this.declared('autocomplete'));
             form.replaceChildren(...this.childNodes);
             form.addEventListener('submit', async (e) => {
                 e.preventDefault();
@@ -1239,6 +1391,22 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
      * `reject="[^0-9]"` both leave the digits. Keeping is the one worth reaching for,
      * the rejecting spelling of an allowed set being a double negative.
      */
+    /**
+     * The autofill token a field inherits from the form around it.
+     *
+     * A control is rendered with `form=""` so that the host is the only thing that
+     * submits, which also leaves it without a form owner, and the platform resolves
+     * `autocomplete` through the form owner. So a form declaring it reaches nothing
+     * on its own and the field reads the setting off the form element instead.
+     *
+     * The `form` a `ful-form` renders answers here, the host copying its token onto
+     * it, and a plain `form` around ful fields answers too: the platform meant the
+     * same thing by it, and its inheritance is broken here for the same reason. An
+     * ancestor always upgrades before its descendants, so the rendered form is in
+     * place by the time a field of its own builds.
+     */
+    const inheritedAutocomplete = (el) => el.closest('form')?.getAttribute('autocomplete') ?? null;
+
     const warnedBoth = new WeakSet();
     const filterOf = (el) => {
         const keep = el.declared('keep');
@@ -1266,7 +1434,15 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         static observed = ['placeholder'];
         //configuration: the control is built from them and the value getter reads them,
         //but none of them is meant to change once the element is up
-        static attributes = ['type', 'v-type', 'keep', 'reject', 'uppercase:presence', 'trim:presence'];
+        static attributes = [
+            'type',
+            'v-type',
+            'keep',
+            'reject',
+            'uppercase:presence',
+            'trim:presence',
+            'autocomplete',
+        ];
         static slots = true;
         static template = `
         <label>{{{{ slots.default }}}}</label>
@@ -1290,6 +1466,14 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             const fragment = this.template().withOverlay({ type, slots }).render();
             this._input = fragment.querySelector('input,textarea');
 
+            //the browser reads autocomplete off the control it is classifying, so the
+            //field's own token, or the form's where it declares none, is put there.
+            //Set before the passthrough, which stays the last word
+            index_mjs.Attributes.set(
+                this._input,
+                'autocomplete',
+                this.declared('autocomplete') ?? inheritedAutocomplete(this),
+            );
             index_mjs.Attributes.forward('input-', this, this._input);
             this._input.addEventListener('input', (evt) => {
                 const strip = filterOf(this);
@@ -1927,8 +2111,14 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         const box = invoker.getBoundingClientRect();
         const here = popover.getBoundingClientRect();
         //against the padding box, which is what a percentage inset resolves against
-        popover.style.setProperty('--ful-note-callout-inline', `${box.left + box.width / 2 - here.left - popover.clientLeft}px`);
-        popover.style.setProperty('--ful-note-callout-block', `${box.top + box.height / 2 - here.top - popover.clientTop}px`);
+        popover.style.setProperty(
+            '--ful-note-callout-inline',
+            `${box.left + box.width / 2 - here.left - popover.clientLeft}px`,
+        );
+        popover.style.setProperty(
+            '--ful-note-callout-block',
+            `${box.top + box.height / 2 - here.top - popover.clientTop}px`,
+        );
     };
 
     const place = (popover, anchored) => {
@@ -2032,67 +2222,93 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
     };
 
     /**
-     * Wires an invoker/popover pair ful anchors through css: where the
-     * platform lacks anchor positioning the popover is placed beside its
-     * invoker whenever it opens, stretched to the invoker's width when
-     * asked, and cleaned up when it closes. Where the css works the call
-     * is a no-op.
-     *
-     * `handPlace` takes the placement here on every platform, which a popover
-     * asks for when it needs to know where its invoker ended up: the note's
-     * callout points at the invoker, and a pseudo-element cannot read an anchor
-     * that is not inside its own containing block, so the note is measured rather
-     * than placed by the css. Its stylesheet declares no position-area to match.
+     * CSS anchor positioning for a popover and the invoker it belongs to, with the
+     * hand-placed fallback for the platforms that do not have it.
      */
-    const wireAnchoredPopover = (
-        invoker,
-        popover,
-        { prefix = 'ful-anchor', invoke = false, expanded = false, stretch = false, handPlace = false } = {},
-    ) => {
-        const uid = index_mjs.Attributes.uid(prefix);
-        if (invoke) {
-            //popovertarget needs a target that can be named
-            popover.id = popover.id || uid;
-            invoker.setAttribute('popovertarget', popover.id);
-        }
-        const anchor = `--${uid}`;
-        invoker.style.anchorName = anchor;
-        popover.style.positionAnchor = anchor;
-        if (expanded) {
-            invoker.setAttribute('aria-expanded', 'false');
+    class Anchors {
+        /**
+         * Anchors a popover to its invoker.
+         *
+         * The invoker is given an `anchor-name` and the popover a `position-anchor`
+         * pointing at it, which is what a stylesheet needs to place the popover
+         * itself: the library's own menus say `top: anchor(bottom); left:
+         * anchor(left)`. **Writing that css is the caller's half of this.** Without
+         * it the popover lands wherever the user agent puts a popover, which is not
+         * beside the invoker.
+         *
+         * Where the platform has no anchor positioning the popover is placed here
+         * instead, beside the invoker whenever it opens, clamped into the viewport,
+         * following it on scroll and resize, and cleaned up on close. That placement
+         * draws the geometry the css above describes, so the two agree.
+         *
+         * @param {HTMLElement} invoker the element the popover belongs to
+         * @param {HTMLElement} popover the `[popover]` element to place
+         * @param {object} [options]
+         * @param {string} [options.prefix] prefixes the generated anchor name and id,
+         *   so the dom says which component a name belongs to
+         * @param {boolean} [options.invoke] points the invoker's `popovertarget` at
+         *   the popover, giving toggle and light dismiss with no script of your own
+         * @param {boolean} [options.expanded] keeps the invoker's `aria-expanded` in
+         *   step with the popover
+         * @param {boolean} [options.stretch] widens the popover to its invoker, which
+         *   is what a combobox dropdown wants
+         * @param {boolean} [options.handPlace] places here on every platform rather
+         *   than only as a fallback, which a popover asks for when it needs to know
+         *   where its invoker ended up: the tooltip's note points a callout at it, and
+         *   a pseudo-element cannot read an anchor outside its own containing block.
+         *   Such a popover declares no anchor placement in css, there being none to
+         *   agree with
+         */
+        static wire(
+            invoker,
+            popover,
+            { prefix = 'ful-anchor', invoke = false, expanded = false, stretch = false, handPlace = false } = {},
+        ) {
+            const uid = index_mjs.Attributes.uid(prefix);
+            if (invoke) {
+                //popovertarget needs a target that can be named
+                popover.id = popover.id || uid;
+                invoker.setAttribute('popovertarget', popover.id);
+            }
+            const anchor = `--${uid}`;
+            invoker.style.anchorName = anchor;
+            popover.style.positionAnchor = anchor;
+            if (expanded) {
+                invoker.setAttribute('aria-expanded', 'false');
+                popover.addEventListener('toggle', (/** @type any */ evt) => {
+                    invoker.setAttribute('aria-expanded', evt.newState === 'open' ? 'true' : 'false');
+                });
+            }
+            //the naming above is what the stylesheet reads, so it happens either way:
+            //only the hand placement below is the fallback, and only for a popover that
+            //did not ask to be placed here whatever the platform offers
+            if (!handPlace && platformAnchors()) {
+                return;
+            }
+            const anchored = { invoker, stretch };
+            popover.addEventListener('beforetoggle', (/** @type any */ evt) => {
+                //placed before the showing, refined once laid out: the platform's
+                //centered or corner spot never paints
+                if (evt.newState === 'open') {
+                    place(popover, anchored);
+                }
+            });
             popover.addEventListener('toggle', (/** @type any */ evt) => {
-                invoker.setAttribute('aria-expanded', evt.newState === 'open' ? 'true' : 'false');
+                if (evt.newState === 'open') {
+                    open.set(popover, anchored);
+                    place(popover, anchored);
+                } else {
+                    open.delete(popover);
+                    unplace(popover);
+                }
             });
-        }
-        //the naming above is what the stylesheet reads, so it happens either way:
-        //only the hand placement below is the fallback, and only for a popover that
-        //did not ask to be placed here whatever the platform offers
-        if (!handPlace && platformAnchors()) {
-            return;
-        }
-        const anchored = { invoker, stretch };
-        popover.addEventListener('beforetoggle', (/** @type any */ evt) => {
-            //placed before the showing, refined once laid out: the platform's
-            //centered or corner spot never paints
-            if (evt.newState === 'open') {
-                place(popover, anchored);
+            if (!reflowWired) {
+                reflowWired = true;
+                document.addEventListener('scroll', schedule, true);
+                window.addEventListener('resize', schedule);
             }
-        });
-        popover.addEventListener('toggle', (/** @type any */ evt) => {
-            if (evt.newState === 'open') {
-                open.set(popover, anchored);
-                place(popover, anchored);
-            } else {
-                open.delete(popover);
-                unplace(popover);
-            }
-        });
-        if (!reflowWired) {
-            reflowWired = true;
-            document.addEventListener('scroll', schedule, true);
-            window.addEventListener('resize', schedule);
         }
-    };
+    }
 
     /**
      * Fetches a select's whole vocabulary from a url and serves every later read
@@ -2621,7 +2837,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             });
             //each pair carries its own anchor: two selects on a page must not share one
             const group = fragment.querySelector('ful-control-group');
-            wireAnchoredPopover(group, this.#ddmenu, { prefix: 'ful-select', stretch: true });
+            Anchors.wire(group, this.#ddmenu, { prefix: 'ful-select', stretch: true });
             [this.#dload, this.#abortdload] = Timing.throttle(400, () => this.#open());
             this.#wireChrome();
             this.#wireChips();
@@ -2643,6 +2859,14 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                 if (!this._interactive()) {
                     return;
                 }
+                //a click on another control inside the select is that control's, not
+                //the select's: a tooltip marker slotted into `info`, a button a page
+                //put in an affix. Without this, reading the note beside a select
+                //also stole the focus and dropped the dropdown over the note
+                const elsewhere = e.target.closest('button, a[href], input, select, textarea');
+                if (elsewhere && elsewhere !== this.#input) {
+                    return;
+                }
                 if (this.#ddmenu.shown) {
                     this.#close();
                     return;
@@ -3211,16 +3435,10 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                 evt.stopPropagation();
                 this._notifyChange();
             });
+            //the base points the label at the input with for/id, so the click toggles
+            //the way it does in a plain form: the input's own change listener above
+            //carries the notification, and readonly is refused by the freeze below
             const label = fragment.querySelector('label');
-            //the label neither wraps the input nor targets it, so the toggle is the
-            //field's; the base adds the focus
-            label.addEventListener('click', () => {
-                if (!this._interactive()) {
-                    return;
-                }
-                this.value = !this.value;
-                this._notifyChange();
-            });
             //a checkbox has no editable text to preserve, so readonly freezes the
             //whole choice, label click included: the container is the frozen piece
             return {
@@ -3784,8 +4002,13 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             //started is stale, and neither renders nor updates the request a later
             //reload replays, whichever order the responses arrive in
             const claim = this.#loads.take();
-            this.#body.replaceChildren();
-            this.#loading.removeAttribute('hidden');
+            //the rows stay while the table revalidates. Emptying the body and raising
+            //the spinner row in its place collapsed the table to one tall row and
+            //expanded it again on every sort, page and reload: two layout jumps for
+            //what is the same table with newer rows in it. The spinner is for the load
+            //with nothing to show yet, the first one and the one after a failure; the
+            //rest announce themselves through aria-busy, which the stylesheet reads
+            this.#loading.toggleAttribute('hidden', this.#body.childElementCount > 0);
             this.#feedback.setAttribute('hidden', '');
             this.#noAutoload.setAttribute('hidden', '');
             this.setAttribute('aria-busy', 'true');
@@ -3803,6 +4026,10 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                     return;
                 }
                 this.#loading.setAttribute('hidden', '');
+                //the rows the failed load was replacing go with it: what the table
+                //holds is no longer what the request asked for, and leaving them
+                //under the error would say the opposite
+                this.#body.replaceChildren();
                 this.#feedback.removeAttribute('hidden');
                 this.#feedback.querySelector('[data-ref=feedback-error]').textContent = index_mjs$1.Failure.problemsText(
                     error,
@@ -3949,6 +4176,20 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             //menu is where the localized words live
             this.#button.textContent = this.#display(choice);
             index_mjs.Attributes.set(this.#button, 'aria-label', this.#labelFor(choice));
+            this.#mark();
+        }
+        /**
+         * Marks the item the button currently holds, which is what a menu of one
+         * choice among several owes the reader: the glyph on the button says which
+         * one it is only to somebody who already knows the glyphs. The items are
+         * `menuitemradio`, so the state is `aria-checked` rather than the
+         * `aria-selected` a listbox would use, and the stylesheet draws it off that.
+         */
+        #mark() {
+            const current = this.value;
+            for (const item of this.#items()) {
+                item.setAttribute('aria-checked', String(item.getAttribute('value') === current));
+            }
         }
         /** The host's disabled claim, composed with the pin: lifting one cannot lift the other. */
         set claimed(claimed) {
@@ -3961,7 +4202,9 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                     const li = document.createElement('li');
                     li.setAttribute('role', 'none');
                     const a = document.createElement('a');
-                    a.setAttribute('role', 'menuitem');
+                    //one choice among several, which is what a radio item is: the
+                    //state belongs on the item, not on the button alone
+                    a.setAttribute('role', 'menuitemradio');
                     a.setAttribute('tabindex', '-1');
                     a.setAttribute('value', choice);
                     const word = this.#labelFor(choice);
@@ -3979,6 +4222,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                     return li;
                 }),
             );
+            this.#mark();
         }
         #sync() {
             const pinned = this.pinned;
@@ -3999,7 +4243,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         #wire() {
             const button = this.#button;
             const menu = this.#menu;
-            wireAnchoredPopover(button, menu, { prefix: 'ful-filter-menu', invoke: true, expanded: true });
+            Anchors.wire(button, menu, { prefix: 'ful-filter-menu', invoke: true, expanded: true });
             menu.addEventListener('toggle', (/** @type any */ evt) => {
                 if (evt.newState !== 'open') {
                     //give the invoker back the focus the menu had borrowed, without
@@ -4580,64 +4824,137 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         });
     };
 
-    /** An info icon button toggling a popover with a short explanation. */
+    /**
+     * An info icon button toggling a popover with a short explanation.
+     *
+     * The marker is the page's `config.icon`, and the `icon` attribute names a
+     * `ful-icon` for the tooltip that means something other than plain information:
+     * a caveat, a warning, a setting. A name the library does not paint is the
+     * page's own, declared as `ful-icon[name='...'] { mask-image: ... }`.
+     *
+     * `describes` is for the tooltip standing in a field: the note becomes part of
+     * the accessible description of that field's control, so it is announced on
+     * reaching the field rather than only on opening the marker, and the marker
+     * leaves the tab order, so a form of hinted fields costs no extra keystrokes to
+     * walk. The marker stays clickable, and stays a tab stop wherever the note was
+     * not taken, a tooltip claiming `describes` outside a field among them: the
+     * stop only goes where something else delivers the content.
+     */
     class Tooltip extends index_mjs.ParsedElement {
         static slots = true;
-        static attributes = ['placement'];
+        static attributes = ['placement', 'icon', 'describes:presence'];
         static config = {
             icon: 'info-circle-fill',
         };
         static template = `
-        <button type="button" class="ful-tip" data-ref="trigger" data-tpl-aria-label="#l10n:t('info.tooltip')"><ful-icon data-tpl-name="config.icon" aria-hidden="true"></ful-icon></button>
+        <button type="button" class="ful-tip" data-ref="trigger" data-tpl-aria-label="#l10n:t('info.tooltip')"><ful-icon data-tpl-name="icon ?? config.icon" aria-hidden="true"></ful-icon></button>
         <ful-note popover data-ref="content">{{{{ slots.default }}}}</ful-note>
     `;
         render({ slots }) {
-            const fragment = this.template().withOverlay({ slots }).render();
+            const fragment = this.template().withOverlay({ slots, icon: this.declared('icon') }).render();
             const trigger = fragment.querySelector('[data-ref=trigger]');
             const content = fragment.querySelector('[data-ref=content]');
             //placed here rather than by the anchor css: the note draws a callout that
             //has to point at the trigger wherever the viewport left room for the note,
             //which is a measurement the stylesheet cannot make for a pseudo-element
-            wireAnchoredPopover(trigger, content, { prefix: 'ful-tooltip', invoke: true, expanded: true, handPlace: true });
-            const placement = this.declared('placement');
-            if (placement) {
-                content.setAttribute('placement', placement);
-            }
+            Anchors.wire(trigger, content, { prefix: 'ful-tooltip', invoke: true, expanded: true, handPlace: true });
+            //above the marker by default: a note opening downwards covers the control
+            //the marker explains, the marker riding the field's label
+            content.setAttribute('placement', this.declared('placement') ?? 'top');
             this.replaceChildren(fragment);
+            if (this.declared('describes')) {
+                Tooltip.#describe(this, trigger, content);
+            }
+        }
+        /**
+         * Offers the note to the field the tooltip stands in, and takes the trigger
+         * out of the tab order only where the offer was accepted: a note nothing
+         * carries is reachable by the keyboard through the marker alone, so
+         * dropping the stop there would leave it reachable by nothing at all.
+         *
+         * The offer goes through the description protocol rather than naming a
+         * field, the library's own arrow running from the forms to the disclosures.
+         */
+        static #describe(tooltip, trigger, content) {
+            if (!describable(tooltip)?.describedBy(content)) {
+                console.warn('a ful-tooltip declares describes but stands in nothing that takes a description', tooltip);
+                return;
+            }
+            trigger.tabIndex = -1;
         }
     }
 
-    /** A modal dialog on the native platform, open()/ask() resolving with the closer's data-result. */
+    /**
+     * A modal dialog on the native platform, open()/ask() resolving with the
+     * closer's data-result.
+     *
+     * The header carries a close button, as the drawer's does: Escape dismisses a
+     * modal on its own, but nothing says so, and a dialog whose only exit is a key
+     * you have to know about leaves a pointer with nowhere to go. It answers the way
+     * Escape does, with null.
+     *
+     * `requires-answer` is for the dialog that must be answered: the close button is not
+     * rendered and Escape is refused, so the only way out is a button that carries a
+     * result. It has to be both, a close button withheld while Escape still worked
+     * being decoration rather than a rule.
+     *
+     * The chrome is reachable by class as well as by tag, so a plain `<dialog
+     * class="ful-dialog">` written by a page gets the same look whatever its
+     * structure: the tag form matches a direct child, and `ful-dialog-header`,
+     * `ful-dialog-body` and `ful-dialog-footer` match at any depth, which is what a
+     * dialog whose content is wrapped in a form needs.
+     */
+    /**
+     * How a dialog ended: `dismissed` tells a cancel from an answer, `result` carries
+     * the `data-result` of the button that closed it and `response` what a submit
+     * answered with, the one that did not happen being null.
+     * @typedef {{ dismissed: boolean, result: string|null, response: any }} DialogOutcome
+     */
+
     class Dialog extends index_mjs.ParsedElement {
-        static attributes = ['header'];
+        static attributes = ['header', 'requires-answer:presence', 'close-on-submit:presence'];
         static slots = true;
         static template = `
         <dialog data-ref="dialog" class="ful-dialog">
-            <header data-tpl-if="header"><h2>{{ header }}</h2></header>
-            <div data-ref="body">{{{{ slots.default }}}}</div>
-            <footer>
-                <button type="button" data-ref="acknowledge" data-result="acknowledged" data-tpl-if="!slots.buttons" data-tpl-aria-label="#l10n:t('dialog.acknowledge')">{{ #l10n:t('dialog.acknowledge') }}</button>
+            <header data-tpl-if="header || slots.header || !requiresAnswer" class="ful-dialog-header">
+                {{{{ slots.header }}}}
+                <h2 data-tpl-if="header">{{ header }}</h2>
+                <button data-tpl-if="!requiresAnswer" type="button" data-ref="close" data-tpl-aria-label="#l10n:t('dialog.close')"><ful-icon name="x-lg" aria-hidden="true"></ful-icon></button>
+            </header>
+            <section data-ref="loading" hidden><ful-spinner class="centered" role="status"><span class="ful-sr-only">{{ #l10n:t('spinner.loading') }}</span></ful-spinner></section>
+            <section data-ref="error" role="alert" hidden></section>
+            <div data-ref="body" class="ful-dialog-body">{{{{ slots.default }}}}</div>
+            <footer class="ful-dialog-footer">
+                <button type="button" data-ref="acknowledge" data-result="acknowledged" data-tpl-if="!slots.buttons && !closeOnSubmit" data-tpl-aria-label="#l10n:t('dialog.acknowledge')">{{ #l10n:t('dialog.acknowledge') }}</button>
                 {{{{ slots.buttons }}}}
             </footer>
         </dialog>
     `;
         #dialog;
         #body;
+        #loading;
+        #error;
         #requests = new SectionRequests();
+        #updates = new Claims();
         #resolvers = [];
+        //the answer a submit closed the dialog with, which the return value cannot
+        //carry: it is a string, and a response is whatever the server sent
+        /** @type {DialogOutcome|null} */
+        #answer = null;
         render({ slots }) {
+            const requiresAnswer = this.declared('requires-answer');
+            const closeOnSubmit = this.declared('close-on-submit');
             const fragment = this.template()
-                .withOverlay({ slots, header: this.declared('header') ?? '' })
+                .withOverlay({ slots, header: this.declared('header') ?? '', requiresAnswer, closeOnSubmit })
                 .render();
             this.#dialog = fragment.querySelector('[data-ref=dialog]');
             this.#body = fragment.querySelector('[data-ref=body]');
+            this.#loading = fragment.querySelector('[data-ref=loading]');
+            this.#error = fragment.querySelector('[data-ref=error]');
             this.#dialog.addEventListener('close', () => {
-                this.dispatchEvent(
-                    new CustomEvent('close', {
-                        detail: { result: this.#dialog.returnValue === '' ? null : this.#dialog.returnValue },
-                    }),
-                );
-                this.#settle();
+                const outcome = this.#outcome();
+                this.dispatchEvent(new CustomEvent('close', { detail: outcome }));
+                this.#settle(outcome);
             });
             this.#dialog.addEventListener('click', (/** @type any */ e) => {
                 const result = e.target.closest('button[data-result]')?.dataset.result;
@@ -4645,42 +4962,128 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
                     this.#dialog.close(result);
                 }
             });
+            //dismissal, not an answer: the waiters are settled with a dismissal, as
+            //Escape does. Optional because a subclass overriding the template owns
+            //what it renders
+            fragment
+                .querySelector('[data-ref=close]')
+                ?.addEventListener('click', () => this.#dialog.close(''));
+            if (closeOnSubmit) {
+                //delegated on the body rather than bound to the form, so a body
+                //delivered later by update() is covered by the same listener. The
+                //form must be the body's own: a ful-table wraps its filters in a
+                //ful-form of its own, and a search in a table the dialog holds is
+                //not the dialog being answered
+                this.#body.addEventListener('submit:success', (/** @type any */ e) => {
+                    if (e.target !== index_mjs.Nodes.queryChildren(this.#body, 'ful-form')) {
+                        return;
+                    }
+                    this.#answer = { dismissed: false, result: null, response: e.detail.response };
+                    this.#dialog.close('submitted');
+                });
+            }
+            if (requiresAnswer) {
+                //the platform's own dismissal, refused where the dialog must be
+                //answered: cancel fires for Escape and for a close request the
+                //browser makes on its own, and preventing it leaves the dialog open
+                this.#dialog.addEventListener('cancel', (/** @type any */ e) => e.preventDefault());
+            }
             this.replaceChildren(fragment);
             wireTargets();
         }
-        //answers every waiter with the dialog's own answer: null while still open
-        //or closed without a result, which is also the unanswered answer a dialog
-        //leaving the document owes its waiters instead of hanging them
-        #settle() {
+        /**
+         * How the dialog ended, in one shape for every way it can end: `dismissed`
+         * alone tells a cancel from an answer, so a submit answering with no body at
+         * all (a 204) is still an answer, where a bare `null` could not say which it
+         * was. `result` carries the `data-result` of the button that closed it and
+         * `response` what a submit answered with; the one that did not happen is null.
+         */
+        #outcome() {
+            if (this.#answer) {
+                return this.#answer;
+            }
+            //a render that threw adopted no dialog, and a removal still owes its
+            //waiters an answer: reading through it would raise a second, unrelated
+            //failure over the one already reported
+            const result = this.#dialog?.returnValue ?? '';
+            return result === ''
+                ? { dismissed: true, result: null, response: null }
+                : { dismissed: false, result, response: null };
+        }
+        //answers every waiter with the dialog's own answer: a dismissal while still
+        //open or closed without a result, which is also the unanswered answer a
+        //dialog leaving the document owes its waiters instead of hanging them
+        #settle(outcome) {
             const resolvers = this.#resolvers;
             this.#resolvers = [];
             for (const resolve of resolvers) {
-                resolve(this.#dialog.returnValue === '' ? null : this.#dialog.returnValue);
+                resolve(outcome);
             }
         }
         disconnectedCallback() {
-            this.#settle();
+            this.#settle(this.#outcome());
         }
         open() {
             return this.ask();
         }
         ask() {
-            if (!this.#dialog.open) {
-                this.#dialog.returnValue = '';
-                this.#dialog.showModal();
+            if (this.#show()) {
+                this.#restChrome();
                 this.#request();
             }
             return new Promise((resolve) => {
                 this.#resolvers.push(resolve);
             });
         }
+        /**
+         * Opens the dialog and waits for the callback, as `ful-drawer`'s does: a
+         * resolved value paints the body (which is returned), a rejection paints the
+         * problems and travels to the caller, and an update superseded by a newer one
+         * paints nothing. The title is the `header` attribute, configuration like the
+         * rest of the dialog's chrome, so what update() owns is the body alone.
+         */
+        async update(cb) {
+            //the claim detaches any update still in flight: its outcome belongs to
+            //an abandoned opening and must neither be painted nor own the dialog
+            const claim = this.#updates.take();
+            this.#body.replaceChildren();
+            this.#restChrome();
+            this.#loading?.removeAttribute('hidden');
+            this.#body.setAttribute('hidden', '');
+            //update owns its own open-answer-deliver cycle, so it shows the dialog
+            //without going through ask(): a user reopen during the wait is a real
+            //open and goes through ask()
+            this.#show();
+            try {
+                const delivered = await cb();
+                if (claim.stale) {
+                    return this.#body;
+                }
+                this.#body.replaceChildren(delivered);
+                this.#loading?.setAttribute('hidden', '');
+                this.#body.removeAttribute('hidden');
+                return this.#body;
+            } catch (/** @type any */ e) {
+                if (!claim.stale) {
+                    //revealed before it is filled, so the live region announces the
+                    //change rather than being revealed already holding it
+                    this.#error?.removeAttribute('hidden');
+                    if (this.#error) {
+                        this.#error.textContent = index_mjs$1.Failure.problemsText(e);
+                    }
+                    this.#loading?.setAttribute('hidden', '');
+                    this.#body.setAttribute('hidden', '');
+                }
+                throw e;
+            }
+        }
         #request() {
             this.#requests.request(this, this.#body, null, null)?.catch(() => undefined);
         }
         /**
          * Re-fires section:requested on the body, open or closed: the explicit
          * request for a body that wants refreshing. A failed refresh paints its
-         * problems, nothing rejects: there is no caller to reject towards.
+         * problems, nothing rejects: update() stays the rejecting call.
          */
         refresh() {
             return this.#requests.request(this, this.#body, null, null)?.then(undefined, () => undefined);
@@ -4688,15 +5091,43 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         close(result) {
             this.#dialog.close(result ?? '');
         }
+        /** Shows the modal, answering whether this call is the one that opened it. */
+        #show() {
+            if (this.#dialog.open) {
+                return false;
+            }
+            //an opening owes nothing to the one before it: the platform keeps
+            //returnValue across a close with no result, and the answer a submit
+            //left is just as stale
+            this.#dialog.returnValue = '';
+            this.#answer = null;
+            this.#dialog.showModal();
+            return true;
+        }
+        #restChrome() {
+            this.#error?.replaceChildren();
+            this.#error?.setAttribute('hidden', '');
+            this.#loading?.setAttribute('hidden', '');
+            this.#body?.removeAttribute('hidden');
+        }
     }
 
-    /** A side panel drawer on the native dialog platform, update() owning its open-deliver cycle. */
+    /**
+     * A side panel drawer on the native dialog platform, update() owning its
+     * open-deliver cycle.
+     *
+     * The `header` slot is content beside the title, before it: an icon, a badge, a
+     * status. It sits outside the heading rather than in it because `update()` sets
+     * the title through `textContent`, which would take anything nested there with
+     * it.
+     */
     class Drawer extends index_mjs.ParsedElement {
-        static attributes = ['title', 'placement'];
+        static attributes = ['title', 'placement', 'close-on-submit:presence'];
         static slots = true;
         static template = `
         <dialog data-ref="dialog" class="ful-drawer">
             <header>
+                {{{{ slots.header }}}}
                 <h2 data-ref="title">{{ title }}</h2>
                 <button type="button" data-ref="close" data-tpl-aria-label="#l10n:t('drawer.close')"><ful-icon name="x-lg" aria-hidden="true"></ful-icon></button>
             </header>
@@ -4712,6 +5143,10 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         #content;
         #requests = new SectionRequests();
         #updates = new Claims();
+        //what a submit closed the drawer with, told from a close of any other kind:
+        //a save answering with no body at all is still a save
+        /** @type {{ dismissed: boolean, response: any }|null} */
+        #answer = null;
         render({ slots }) {
             const fragment = this.template()
                 .withOverlay({ slots, title: this.declared('title') ?? '' })
@@ -4727,8 +5162,25 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             }
             fragment.querySelector('[data-ref=close]').addEventListener('click', () => this.close());
             this.#dialog.addEventListener('close', () => {
-                this.dispatchEvent(new CustomEvent('close'));
+                this.dispatchEvent(
+                    new CustomEvent('close', { detail: this.#answer ?? { dismissed: true, response: null } }),
+                );
             });
+            if (this.declared('close-on-submit')) {
+                //delegated on the content section rather than bound to the form: a
+                //drawer's form usually arrives with an update() rather than with the
+                //page, and the section outlives every delivery. The form must be the
+                //content's own, a ful-table wrapping its filters in a ful-form of its
+                //own and a search in a table the drawer holds not being the drawer
+                //finishing
+                this.#content.addEventListener('submit:success', (/** @type any */ e) => {
+                    if (e.target !== index_mjs.Nodes.queryChildren(this.#content, 'ful-form')) {
+                        return;
+                    }
+                    this.#answer = { dismissed: false, response: e.detail.response };
+                    this.close();
+                });
+            }
             this.replaceChildren(fragment);
             wireTargets();
         }
@@ -4801,6 +5253,9 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
             if (this.#dialog.open) {
                 return false;
             }
+            //an opening owes nothing to the one before it: the answer a submit left
+            //belongs to the drawer that closed on it
+            this.#answer = null;
             this.#dialog.showModal();
             return true;
         }
@@ -5224,6 +5679,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         'filters.boolean.false': 'No',
         'info.tooltip': 'More information',
         'dialog.acknowledge': 'Got it',
+        'dialog.close': 'Close',
         'drawer.close': 'Close',
         'spinner.loading': 'Loading…',
         'toast.region': 'Notifications',
@@ -5265,6 +5721,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         'filters.boolean.false': 'No',
         'info.tooltip': 'Maggiori informazioni',
         'dialog.acknowledge': 'Ho capito',
+        'dialog.close': 'Chiudi',
         'drawer.close': 'Chiudi',
         'spinner.loading': 'Caricamento…',
         'toast.region': 'Notifiche',
@@ -5306,6 +5763,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         'filters.boolean.false': 'No',
         'info.tooltip': 'Más información',
         'dialog.acknowledge': 'Entendido',
+        'dialog.close': 'Cerrar',
         'drawer.close': 'Cerrar',
         'spinner.loading': 'Cargando…',
         'toast.region': 'Notificaciones',
@@ -5350,6 +5808,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
         'filters.boolean.false': 'Non',
         'info.tooltip': 'Plus d’informations',
         'dialog.acknowledge': 'J’ai compris',
+        'dialog.close': 'Fermer',
         'drawer.close': 'Fermer',
         'spinner.loading': 'Chargement…',
         'toast.region': 'Notifications',
@@ -5437,6 +5896,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
     }
 
     exports.Accordion = Accordion;
+    exports.Anchors = Anchors;
     exports.AsyncEvents = AsyncEvents;
     exports.Bindings = Bindings;
     exports.BooleanFilter = BooleanFilter;
@@ -5478,6 +5938,7 @@ var ful = (function (exports, index_mjs, index_mjs$1) {
     exports.VersionedLocalStorage = VersionedLocalStorage;
     exports.VersionedSessionStorage = VersionedSessionStorage;
     exports.Wizard = Wizard;
+    exports.describable = describable;
 
     return exports;