@usefillo/cli 0.10.0 → 0.12.0

package/dist/index.js

@@ -1298,79 +1298,122 @@ var CONTENT_KINDS = ["heading", "paragraph", "divider"];
 function isField(block) {
   return !CONTENT_KINDS.includes(block.kind);
 }
-var C = (iso2, name, dialCode, lengths = [], groups = [], example = "") => ({ iso2, name, dialCode, lengths, groups, example });
+var regionNames;
+function regionDisplayNames() {
+  if (regionNames !== void 0) return regionNames ?? void 0;
+  if (typeof Intl === "undefined" || typeof Intl.DisplayNames === "undefined") {
+    regionNames = null;
+    return void 0;
+  }
+  try {
+    regionNames = new Intl.DisplayNames(void 0, { type: "region" });
+  } catch {
+    regionNames = null;
+  }
+  return regionNames ?? void 0;
+}
+function regionName(iso2) {
+  try {
+    return regionDisplayNames()?.of(iso2) ?? iso2;
+  } catch {
+    return iso2;
+  }
+}
+var C = (iso2, dialCode, lengths = [], groups = [], example = "") => ({ iso2, name: regionName(iso2), dialCode, lengths, groups, example });
+var CURATED_COUNTRIES = [
+  C("US", "1", [10], [3, 3, 4], "2015550123"),
+  C("CA", "1", [10], [3, 3, 4], "5145550123"),
+  C("GB", "44", [10], [4, 6], "7400123456"),
+  C("AU", "61", [9], [3, 3, 3], "412345678"),
+  C("DE", "49", [10, 11], [4, 7], "15123456789"),
+  C("FR", "33", [9], [1, 2, 2, 2, 2], "612345678"),
+  C("IN", "91", [10], [5, 5], "8123456789"),
+  C("DK", "45", [8], [2, 2, 2, 2], "32123456"),
+  C("SE", "46", [9], [2, 3, 4], "701234567"),
+  C("NO", "47", [8], [3, 2, 3], "40612345"),
+  C("FI", "358", [9, 10], [2, 3, 4], "412345678"),
+  C("NL", "31", [9], [1, 4, 4], "612345678"),
+  C("BE", "32", [9], [3, 2, 2, 2], "470123456"),
+  C("ES", "34", [9], [3, 3, 3], "612345678"),
+  C("IT", "39", [9, 10], [3, 3, 4], "3123456789"),
+  C("PT", "351", [9], [3, 3, 3], "912345678"),
+  C("IE", "353", [9], [2, 3, 4], "851234567"),
+  C("CH", "41", [9], [2, 3, 2, 2], "781234567"),
+  C("AT", "43", [10, 11], [3, 7], "6641234567"),
+  C("PL", "48", [9], [3, 3, 3], "512345678"),
+  C("CZ", "420", [9], [3, 3, 3], "601123456"),
+  C("GR", "30", [10], [3, 3, 4], "6912345678"),
+  C("RO", "40", [9], [3, 3, 3], "712345678"),
+  C("HU", "36", [9], [2, 3, 4], "201234567"),
+  C("UA", "380", [9], [2, 3, 2, 2], "501234567"),
+  C("RU", "7", [10], [3, 3, 2, 2], "9123456789"),
+  C("TR", "90", [10], [3, 3, 2, 2], "5012345678"),
+  C("IL", "972", [9], [2, 3, 4], "501234567"),
+  C("AE", "971", [9], [2, 3, 4], "501234567"),
+  C("SA", "966", [9], [2, 3, 4], "512345678"),
+  C("ZA", "27", [9], [2, 3, 4], "711234567"),
+  C("NG", "234", [10], [3, 3, 4], "8021234567"),
+  C("KE", "254", [9], [3, 3, 3], "712123456"),
+  C("EG", "20", [10], [3, 3, 4], "1001234567"),
+  C("BR", "55", [10, 11], [2, 5, 4], "11961234567"),
+  C("MX", "52", [10], [3, 3, 4], "2221234567"),
+  C("AR", "54", [10], [4, 6], "1123456789"),
+  C("CL", "56", [9], [1, 4, 4], "221234567"),
+  C("CO", "57", [10], [3, 3, 4], "3211234567"),
+  C("PE", "51", [9], [3, 3, 3], "912345678"),
+  C("CN", "86", [11], [3, 4, 4], "13123456789"),
+  C("JP", "81", [10], [2, 4, 4], "9012345678"),
+  C("KR", "82", [9, 10], [2, 4, 4], "1023456789"),
+  C("SG", "65", [8], [4, 4], "81234567"),
+  C("HK", "852", [8], [4, 4], "51234567"),
+  C("TW", "886", [9], [3, 3, 3], "912345678"),
+  C("MY", "60", [9, 10], [2, 3, 4], "123456789"),
+  C("ID", "62", [10, 11], [3, 4, 4], "81234567890"),
+  C("TH", "66", [9], [2, 3, 4], "812345678"),
+  C("PH", "63", [10], [3, 3, 4], "9171234567"),
+  C("VN", "84", [9], [3, 3, 3], "912345678"),
+  C("PK", "92", [10], [3, 3, 4], "3012345678"),
+  C("BD", "880", [10], [2, 4, 4], "1812345678"),
+  C("NZ", "64", [9, 10], [2, 3, 4], "211234567"),
+  C("SK", "421", [9], [3, 3, 3], "912123456"),
+  C("BG", "359", [9], [2, 3, 4], "481234567"),
+  C("HR", "385", [8, 9], [2, 3, 4], "921234567"),
+  C("RS", "381", [8, 9], [2, 3, 4], "601234567"),
+  C("SI", "386", [8], [2, 3, 3], "31234567"),
+  C("LT", "370", [8], [3, 2, 3], "61234567"),
+  C("LV", "371", [8], [2, 3, 3], "21234567"),
+  C("EE", "372", [7, 8], [3, 4], "51234567"),
+  C("IS", "354", [7], [3, 4], "6111234"),
+  C("LU", "352", [9], [3, 3, 3], "628123456"),
+  C("MA", "212", [9], [3, 3, 3], "650123456"),
+  C("CR", "506", [8], [4, 4], "83123456"),
+  C("EC", "593", [9], [2, 3, 4], "991234567"),
+  C("UY", "598", [8], [1, 3, 4], "94231234"),
+  C("QA", "974", [8], [4, 4], "33123456"),
+  C("KW", "965", [8], [4, 4], "50012345")
+];
+var PACKED_DIAL_CODES = "AD376 AF93 AG1 AI1 AL355 AM374 AO244 AS1 AW297 AX358 AZ994 BA387 BB1 BF226 BH973 BI257 BJ229 BL590 BM1 BN673 BO591 BQ599 BS1 BT975 BV47 BW267 BY375 BZ501 CC61 CD243 CF236 CG242 CI225 CK682 CM237 CU53 CV238 CW599 CX61 CY357 DJ253 DM1 DO1 DZ213 EH212 ER291 ET251 FJ679 FK500 FM691 FO298 GA241 GD1 GE995 GF594 GG44 GH233 GI350 GL299 GM220 GN224 GP590 GQ240 GS500 GT502 GU1 GW245 GY592 HN504 HT509 IM44 IO246 IQ964 IR98 JE44 JM1 JO962 KG996 KH855 KI686 KM269 KN1 KP850 KY1 KZ7 LA856 LB961 LC1 LI423 LK94 LR231 LS266 LY218 MC377 MD373 ME382 MF590 MG261 MH692 MK389 ML223 MM95 MN976 MO853 MP1 MQ596 MR222 MS1 MT356 MU230 MV960 MW265 MZ258 NA264 NC687 NE227 NF672 NI505 NP977 NR674 NU683 OM968 PA507 PF689 PG675 PM508 PN64 PR1 PS970 PW680 PY595 RE262 RW250 SB677 SC248 SD249 SH290 SJ47 SL232 SM378 SN221 SO252 SR597 SS211 ST239 SV503 SX1 SY963 SZ268 TC1 TD235 TF262 TG228 TJ992 TK690 TL670 TM993 TN216 TO676 TT1 TV688 TZ255 UG256 UZ998 VA379 VC1 VE58 VG1 VI1 VU678 WF681 WS685 XK383 YE967 YT262 ZM260 ZW263";
+function parsePackedCountries(packed) {
+  const out = [];
+  for (const token of packed.trim().split(/\s+/)) {
+    const iso2 = token.slice(0, 2);
+    const dialCode = token.slice(2);
+    out.push({ iso2, name: regionName(iso2), dialCode, lengths: [], groups: [], example: "" });
+  }
+  return out;
+}
 var PHONE_COUNTRIES = [
-  C("US", "United States", "1", [10], [3, 3, 4], "2015550123"),
-  C("CA", "Canada", "1", [10], [3, 3, 4], "5145550123"),
-  C("GB", "United Kingdom", "44", [10], [4, 6], "7400123456"),
-  C("AU", "Australia", "61", [9], [3, 3, 3], "412345678"),
-  C("DE", "Germany", "49", [10, 11], [4, 7], "15123456789"),
-  C("FR", "France", "33", [9], [1, 2, 2, 2, 2], "612345678"),
-  C("IN", "India", "91", [10], [5, 5], "8123456789"),
-  C("DK", "Denmark", "45", [8], [2, 2, 2, 2], "32123456"),
-  C("SE", "Sweden", "46", [9], [2, 3, 4], "701234567"),
-  C("NO", "Norway", "47", [8], [3, 2, 3], "40612345"),
-  C("FI", "Finland", "358", [9, 10], [2, 3, 4], "412345678"),
-  C("NL", "Netherlands", "31", [9], [1, 4, 4], "612345678"),
-  C("BE", "Belgium", "32", [9], [3, 2, 2, 2], "470123456"),
-  C("ES", "Spain", "34", [9], [3, 3, 3], "612345678"),
-  C("IT", "Italy", "39", [9, 10], [3, 3, 4], "3123456789"),
-  C("PT", "Portugal", "351", [9], [3, 3, 3], "912345678"),
-  C("IE", "Ireland", "353", [9], [2, 3, 4], "851234567"),
-  C("CH", "Switzerland", "41", [9], [2, 3, 2, 2], "781234567"),
-  C("AT", "Austria", "43", [10, 11], [3, 7], "6641234567"),
-  C("PL", "Poland", "48", [9], [3, 3, 3], "512345678"),
-  C("CZ", "Czechia", "420", [9], [3, 3, 3], "601123456"),
-  C("GR", "Greece", "30", [10], [3, 3, 4], "6912345678"),
-  C("RO", "Romania", "40", [9], [3, 3, 3], "712345678"),
-  C("HU", "Hungary", "36", [9], [2, 3, 4], "201234567"),
-  C("UA", "Ukraine", "380", [9], [2, 3, 2, 2], "501234567"),
-  C("RU", "Russia", "7", [10], [3, 3, 2, 2], "9123456789"),
-  C("TR", "Turkey", "90", [10], [3, 3, 2, 2], "5012345678"),
-  C("IL", "Israel", "972", [9], [2, 3, 4], "501234567"),
-  C("AE", "United Arab Emirates", "971", [9], [2, 3, 4], "501234567"),
-  C("SA", "Saudi Arabia", "966", [9], [2, 3, 4], "512345678"),
-  C("ZA", "South Africa", "27", [9], [2, 3, 4], "711234567"),
-  C("NG", "Nigeria", "234", [10], [3, 3, 4], "8021234567"),
-  C("KE", "Kenya", "254", [9], [3, 3, 3], "712123456"),
-  C("EG", "Egypt", "20", [10], [3, 3, 4], "1001234567"),
-  C("BR", "Brazil", "55", [10, 11], [2, 5, 4], "11961234567"),
-  C("MX", "Mexico", "52", [10], [3, 3, 4], "2221234567"),
-  C("AR", "Argentina", "54", [10], [4, 6], "1123456789"),
-  C("CL", "Chile", "56", [9], [1, 4, 4], "221234567"),
-  C("CO", "Colombia", "57", [10], [3, 3, 4], "3211234567"),
-  C("PE", "Peru", "51", [9], [3, 3, 3], "912345678"),
-  C("CN", "China", "86", [11], [3, 4, 4], "13123456789"),
-  C("JP", "Japan", "81", [10], [2, 4, 4], "9012345678"),
-  C("KR", "South Korea", "82", [9, 10], [2, 4, 4], "1023456789"),
-  C("SG", "Singapore", "65", [8], [4, 4], "81234567"),
-  C("HK", "Hong Kong", "852", [8], [4, 4], "51234567"),
-  C("TW", "Taiwan", "886", [9], [3, 3, 3], "912345678"),
-  C("MY", "Malaysia", "60", [9, 10], [2, 3, 4], "123456789"),
-  C("ID", "Indonesia", "62", [10, 11], [3, 4, 4], "81234567890"),
-  C("TH", "Thailand", "66", [9], [2, 3, 4], "812345678"),
-  C("PH", "Philippines", "63", [10], [3, 3, 4], "9171234567"),
-  C("VN", "Vietnam", "84", [9], [3, 3, 3], "912345678"),
-  C("PK", "Pakistan", "92", [10], [3, 3, 4], "3012345678"),
-  C("BD", "Bangladesh", "880", [10], [2, 4, 4], "1812345678"),
-  C("NZ", "New Zealand", "64", [9, 10], [2, 3, 4], "211234567"),
-  C("SK", "Slovakia", "421", [9], [3, 3, 3], "912123456"),
-  C("BG", "Bulgaria", "359", [9], [2, 3, 4], "481234567"),
-  C("HR", "Croatia", "385", [8, 9], [2, 3, 4], "921234567"),
-  C("RS", "Serbia", "381", [8, 9], [2, 3, 4], "601234567"),
-  C("SI", "Slovenia", "386", [8], [2, 3, 3], "31234567"),
-  C("LT", "Lithuania", "370", [8], [3, 2, 3], "61234567"),
-  C("LV", "Latvia", "371", [8], [2, 3, 3], "21234567"),
-  C("EE", "Estonia", "372", [7, 8], [3, 4], "51234567"),
-  C("IS", "Iceland", "354", [7], [3, 4], "6111234"),
-  C("LU", "Luxembourg", "352", [9], [3, 3, 3], "628123456"),
-  C("MA", "Morocco", "212", [9], [3, 3, 3], "650123456"),
-  C("CR", "Costa Rica", "506", [8], [4, 4], "83123456"),
-  C("EC", "Ecuador", "593", [9], [2, 3, 4], "991234567"),
-  C("UY", "Uruguay", "598", [8], [1, 3, 4], "94231234"),
-  C("QA", "Qatar", "974", [8], [4, 4], "33123456"),
-  C("KW", "Kuwait", "965", [8], [4, 4], "50012345")
+  ...CURATED_COUNTRIES,
+  ...parsePackedCountries(PACKED_DIAL_CODES)
 ];
+var PHONE_PICKER_COUNTRIES = sortForPicker(PHONE_COUNTRIES);
+function sortForPicker(countries) {
+  if (typeof Intl === "undefined" || typeof Intl.Collator === "undefined") {
+    return [...countries].sort((a, b) => a.iso2 < b.iso2 ? -1 : a.iso2 > b.iso2 ? 1 : 0);
+  }
+  const collator = new Intl.Collator(void 0, { sensitivity: "base" });
+  return [...countries].sort((a, b) => collator.compare(a.name, b.name));
+}
 var byIso = new Map(PHONE_COUNTRIES.map((c) => [c.iso2, c]));
 var fileValueSchema = object({
   fileId: string2().check(_minLength(1)),
@@ -1398,6 +1441,7 @@ var FIELD_KINDS = [
   "date",
   "file_upload",
   "hidden",
+  "calculated",
   "custom"
 ];
 var CONTENT_KINDS2 = ["heading", "paragraph", "divider"];
@@ -1434,7 +1478,7 @@ var schemaShape = object({
 });
 var MAX_SCHEMA_VERSION = 1;
 var FILLO_SCHEMA_VERSION = 1;
-var FILLO_SDK_VERSION = true ? "0.10.0" : "0.0.0-dev";
+var FILLO_SDK_VERSION = true ? "0.12.0" : "0.0.0-dev";
 function str(value, max, fallback = "") {
   return typeof value === "string" ? value.trim().slice(0, max) : fallback;
 }
@@ -1442,6 +1486,11 @@ function optionalStr(value, max) {
   const s = str(value, max);
   return s === "" ? void 0 : s;
 }
+function optionalAffix(value, max) {
+  if (typeof value !== "string") return void 0;
+  const s = value.slice(0, max);
+  return s.trim() === "" ? void 0 : s;
+}
 function bool(value) {
   return typeof value === "boolean" ? value : void 0;
 }
@@ -1489,7 +1538,17 @@ function conditions(value) {
   });
   return normalized.length ? normalized : void 0;
 }
-function jumpRules(value, pageIds, sourceId, allowedFieldIds) {
+function jumpDepsAllowed(fieldId, calcRefs, allowed, seen) {
+  const refs = calcRefs.get(fieldId);
+  if (refs === void 0) return allowed.has(fieldId);
+  if (seen.has(fieldId)) return true;
+  seen.add(fieldId);
+  for (const ref of refs) {
+    if (!jumpDepsAllowed(ref, calcRefs, allowed, seen)) return false;
+  }
+  return true;
+}
+function jumpRules(value, pageIds, sourceId, allowedFieldIds, calcRefs) {
   if (!Array.isArray(value)) return void 0;
   const rules = value.slice(0, 50).flatMap((item) => {
     if (!item || typeof item !== "object") return [];
@@ -1501,11 +1560,187 @@ function jumpRules(value, pageIds, sourceId, allowedFieldIds) {
     if (rawWhen !== void 0 && !Array.isArray(rawWhen)) return [];
     const when2 = conditions(rawWhen);
     if (Array.isArray(rawWhen) && rawWhen.length > 0 && when2 === void 0) return [];
-    if (when2 && when2.some((c) => !allowedFieldIds.has(c.fieldId))) return [];
+    if (when2 && when2.some((c) => !jumpDepsAllowed(c.fieldId, calcRefs, allowedFieldIds, /* @__PURE__ */ new Set())))
+      return [];
     return [{ when: when2 ?? [], to }];
   });
   return rules.length ? rules : void 0;
 }
+var CALC_OPERAND_KINDS = ["number", "rating", "linear_scale", "calculated"];
+function normalizeCalc(value, depth = 0) {
+  if (depth > 32) return null;
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const rec = value;
+  switch (rec.op) {
+    case "value": {
+      const fieldId = str(rec.fieldId, 128);
+      return fieldId ? { op: "value", fieldId } : null;
+    }
+    case "const": {
+      const n = finite(rec.value);
+      return n === void 0 ? null : { op: "const", value: n };
+    }
+    case "add":
+    case "mul":
+    case "min":
+    case "max": {
+      if (!Array.isArray(rec.args) || rec.args.length < 1 || rec.args.length > 50) return null;
+      const args = [];
+      for (const raw of rec.args) {
+        const arg = normalizeCalc(raw, depth + 1);
+        if (!arg) return null;
+        args.push(arg);
+      }
+      return { op: rec.op, args };
+    }
+    case "sub":
+    case "div": {
+      const left = normalizeCalc(rec.left, depth + 1);
+      const right = normalizeCalc(rec.right, depth + 1);
+      return left && right ? { op: rec.op, left, right } : null;
+    }
+    case "round": {
+      const arg = normalizeCalc(rec.arg, depth + 1);
+      if (!arg) return null;
+      return cleanObject({
+        op: "round",
+        arg,
+        decimals: finite(rec.decimals) === void 0 ? void 0 : int(rec.decimals, 0, 6, 0)
+      });
+    }
+    case "if": {
+      if (!Array.isArray(rec.when)) return null;
+      const when2 = conditions(rec.when) ?? [];
+      if (when2.length !== rec.when.length) return null;
+      const then = normalizeCalc(rec.then, depth + 1);
+      const els = normalizeCalc(rec.else, depth + 1);
+      return then && els ? { op: "if", when: when2, then, else: els } : null;
+    }
+    default:
+      return null;
+  }
+}
+function collectCalcRefs(expr, valueRefs, whenRefs) {
+  switch (expr.op) {
+    case "value":
+      valueRefs.add(expr.fieldId);
+      return;
+    case "const":
+      return;
+    case "add":
+    case "mul":
+    case "min":
+    case "max":
+      for (const arg of expr.args) collectCalcRefs(arg, valueRefs, whenRefs);
+      return;
+    case "sub":
+    case "div":
+      collectCalcRefs(expr.left, valueRefs, whenRefs);
+      collectCalcRefs(expr.right, valueRefs, whenRefs);
+      return;
+    case "round":
+      collectCalcRefs(expr.arg, valueRefs, whenRefs);
+      return;
+    case "if":
+      for (const cond of expr.when) whenRefs.add(cond.fieldId);
+      collectCalcRefs(expr.then, valueRefs, whenRefs);
+      collectCalcRefs(expr.else, valueRefs, whenRefs);
+      return;
+  }
+}
+function validateCalculatedFields(pages) {
+  const kinds = /* @__PURE__ */ new Map();
+  for (const page of pages) {
+    for (const block of page.blocks) if (isField(block)) kinds.set(block.id, block.kind);
+  }
+  const deps = /* @__PURE__ */ new Map();
+  for (const page of pages) {
+    for (const block of page.blocks) {
+      if (block.kind !== "calculated") continue;
+      const calc = normalizeCalc(block.calc);
+      if (!calc) {
+        return `Field ${block.id} has a malformed calc expression \u2014 build it from value/const/add/sub/mul/div/min/max/round/if nodes`;
+      }
+      block.calc = calc;
+      const valueRefs = /* @__PURE__ */ new Set();
+      const whenRefs = /* @__PURE__ */ new Set();
+      collectCalcRefs(calc, valueRefs, whenRefs);
+      for (const ref of valueRefs) {
+        const kind = kinds.get(ref);
+        if (kind === void 0) {
+          return `Calculated field ${block.id} references a missing field: ${ref} \u2014 remove the reference or restore that field`;
+        }
+        if (!CALC_OPERAND_KINDS.includes(kind)) {
+          return `Calculated field ${block.id} references non-numeric field ${ref} (${kind}) \u2014 calculations can read number, rating, linear_scale, and calculated fields only`;
+        }
+      }
+      deps.set(
+        block.id,
+        [...valueRefs, ...whenRefs].filter((ref) => kinds.get(ref) === "calculated")
+      );
+    }
+  }
+  const state = /* @__PURE__ */ new Map();
+  const visit = (id, path) => {
+    const mark = state.get(id);
+    if (mark === "done") return null;
+    if (mark === "visiting") {
+      const chain = [...path.slice(path.indexOf(id)), id].join(" \u2192 ");
+      return `Calculated field ${id} depends on its own result (${chain}) \u2014 break the cycle so the value can be computed`;
+    }
+    state.set(id, "visiting");
+    for (const dep of deps.get(id) ?? []) {
+      const error = visit(dep, [...path, id]);
+      if (error) return error;
+    }
+    state.set(id, "done");
+    return null;
+  };
+  for (const id of deps.keys()) {
+    const error = visit(id, []);
+    if (error) return error;
+  }
+  return null;
+}
+var MAX_CALC_FIELDS = 100;
+var MAX_CALC_TOTAL_NODES = 5e3;
+function countCalcNodes(expr) {
+  switch (expr.op) {
+    case "value":
+    case "const":
+      return 1;
+    case "add":
+    case "mul":
+    case "min":
+    case "max":
+      return 1 + expr.args.reduce((n, arg) => n + countCalcNodes(arg), 0);
+    case "sub":
+    case "div":
+      return 1 + countCalcNodes(expr.left) + countCalcNodes(expr.right);
+    case "round":
+      return 1 + countCalcNodes(expr.arg);
+    case "if":
+      return 1 + countCalcNodes(expr.then) + countCalcNodes(expr.else);
+  }
+}
+function calcComplexityError(pages) {
+  let calcFields = 0;
+  let totalNodes = 0;
+  for (const page of pages) {
+    for (const block of page.blocks) {
+      if (block.kind !== "calculated") continue;
+      calcFields += 1;
+      totalNodes += countCalcNodes(block.calc);
+    }
+  }
+  if (calcFields > MAX_CALC_FIELDS) {
+    return `Form has ${calcFields} calculated fields \u2014 the maximum is ${MAX_CALC_FIELDS}; remove some or consolidate them into fewer expressions`;
+  }
+  if (totalNodes > MAX_CALC_TOTAL_NODES) {
+    return `Calculated expressions total ${totalNodes} operations \u2014 the maximum is ${MAX_CALC_TOTAL_NODES} across the form; simplify or split up the calculations`;
+  }
+  return null;
+}
 function baseBlock(rec) {
   return {
     id: str(rec.id, 128),
@@ -1617,7 +1852,20 @@ function normalizeBlock(input) {
         maxLength: finite(rec.maxLength) === void 0 ? void 0 : int(rec.maxLength, 1, 2e4, 2e4)
       });
     case "number":
-      return cleanObject({ ...baseField(rec, kind), min: finite(rec.min), max: finite(rec.max) });
+      return cleanObject({
+        ...baseField(rec, kind),
+        min: finite(rec.min),
+        max: finite(rec.max),
+        // Display-only (decision 1 in the number-formatting contract) —
+        // mirrors the calculated field's decimals/prefix/suffix carry-through
+        // exactly, plus notation which calculated doesn't have.
+        decimals: finite(rec.decimals) === void 0 ? void 0 : int(rec.decimals, 0, 6, 0),
+        prefix: optionalAffix(rec.prefix, 100),
+        suffix: optionalAffix(rec.suffix, 100),
+        // The only supported values; anything else drops silently rather than
+        // erroring (an old/garbage value is just "no grouping").
+        notation: rec.notation === "grouped" ? "grouped" : rec.notation === "grouped-comma" ? "grouped-comma" : rec.notation === "grouped-dot" ? "grouped-dot" : void 0
+      });
     case "select":
     case "multi_select":
     case "dropdown": {
@@ -1681,6 +1929,21 @@ function normalizeBlock(input) {
         paramName: optionalStr(rec.paramName, 128),
         defaultValue: optionalStr(rec.defaultValue, 1e3)
       });
+    case "calculated":
+      return cleanObject({
+        ...baseField(rec, kind),
+        // A derived value isn't answerable, so it can't be required (the
+        // hidden-field precedent) — a required one could never be satisfied.
+        required: false,
+        // Kept raw here on purpose: the calc AST is normalized and structurally
+        // validated in normalizeFormSchema once the full field universe is
+        // known (missing refs, operand kinds, cycles are HARD errors there — a
+        // calculated field must never be silently dropped or degraded).
+        calc: rec.calc,
+        decimals: finite(rec.decimals) === void 0 ? void 0 : int(rec.decimals, 0, 6, 0),
+        prefix: optionalAffix(rec.prefix, 100),
+        suffix: optionalAffix(rec.suffix, 100)
+      });
     case "file_upload":
       return cleanObject({
         ...baseField(rec, kind),
@@ -1719,6 +1982,22 @@ function normalizeFormSchema(input) {
     return { id: str(page.id, 128), title: optionalStr(page.title, 500), blocks, next: page.next };
   });
   const targetIds = new Set(rebuilt.map((p) => p.id));
+  const calcRefs = /* @__PURE__ */ new Map();
+  for (const page of rebuilt) {
+    for (const block of page.blocks) {
+      if (block.kind !== "calculated") continue;
+      const refs = /* @__PURE__ */ new Set();
+      const calc = normalizeCalc(block.calc);
+      if (calc) {
+        const valueRefs = /* @__PURE__ */ new Set();
+        const whenRefs = /* @__PURE__ */ new Set();
+        collectCalcRefs(calc, valueRefs, whenRefs);
+        for (const ref of valueRefs) refs.add(ref);
+        for (const ref of whenRefs) refs.add(ref);
+      }
+      calcRefs.set(block.id, refs);
+    }
+  }
   const priorFieldIds = /* @__PURE__ */ new Set();
   const pages = rebuilt.map((page) => {
     for (const block of page.blocks) {
@@ -1728,7 +2007,7 @@ function normalizeFormSchema(input) {
       id: page.id,
       title: page.title,
       blocks: page.blocks,
-      next: jumpRules(page.next, targetIds, page.id, new Set(priorFieldIds))
+      next: jumpRules(page.next, targetIds, page.id, new Set(priorFieldIds), calcRefs)
     });
   });
   const pageIds = /* @__PURE__ */ new Set();
@@ -1763,6 +2042,10 @@ function normalizeFormSchema(input) {
       }
     }
   }
+  const calcError = validateCalculatedFields(pages);
+  if (calcError) return { ok: false, error: calcError };
+  const calcComplexity = calcComplexityError(pages);
+  if (calcComplexity) return { ok: false, error: calcComplexity };
   if (pages.every((page) => page.blocks.length === 0)) {
     return { ok: false, error: "Schema must contain at least one valid block" };
   }
@@ -1788,6 +2071,7 @@ var MASK = 256 - 256 % ALPHABET.length;
 var S3_PART_TIMEOUT_MS = 5 * 6e4;
 var UPLOAD_CONTROL_TIMEOUT_MS = 10 * 6e4;
 var CLIENT_HEADER = { "X-Fillo-Client": `@usefillo/core@${FILLO_SDK_VERSION}` };
+var DARK_LUMINANCE_THRESHOLD = Math.sqrt(1.05 * 0.05) - 0.05;
 var FilloJsxError = class extends Error {
   constructor(code, message) {
     super(`[fillo] ${message} \u2014 https://fillo.so/docs/troubleshooting#jsx-${code.toLowerCase()}`);
@@ -1818,7 +2102,7 @@ var JSX_BLOCK_SPECS = [
   field("Email", "email", ["maxLength"]),
   field("Url", "url", ["maxLength"]),
   field("Phone", "phone", ["defaultCountry"]),
-  field("Number", "number", ["min", "max"]),
+  field("Number", "number", ["min", "max", "decimals", "prefix", "suffix", "notation"]),
   field("Select", "select", CHOICE_EXTRA, { optionChildren: true }),
   field("MultiSelect", "multi_select", CHOICE_EXTRA, { optionChildren: true }),
   field("Dropdown", "dropdown", CHOICE_EXTRA, { optionChildren: true }),
@@ -1831,6 +2115,7 @@ var JSX_BLOCK_SPECS = [
   field("Date", "date", []),
   field("FileUpload", "file_upload", ["maxFiles", "maxFileSizeMb", "accept"]),
   field("Hidden", "hidden", ["paramName", "defaultValue"]),
+  field("Calculated", "calculated", ["calc", "decimals", "prefix", "suffix"]),
   field("Custom", "custom", ["component", "config"]),
   content("Heading", "heading", true),
   content("Paragraph", "paragraph", true),
@@ -2024,7 +2309,8 @@ Login failed (${r.status}).`);
       return;
     }
     if (body.error === "slow_down") interval += 2e3;
-    else if (body.error && body.error !== "authorization_pending") die(`
+    else if (body.error && body.error !== "authorization_pending")
+      die(`
 Login failed: ${body.error}`);
   }
   die("\nLogin timed out \u2014 run `fillo login` again.");
@@ -2087,9 +2373,7 @@ async function publish(handle, flags) {
   const res = await api(`/cli/forms/${encodeURIComponent(handle)}/publish`, {
     method: "POST",
     token: requireToken(),
-    body: JSON.stringify(
-      flags["allow-breaking"] === true ? { allowBreaking: true } : {}
-    )
+    body: JSON.stringify(flags["allow-breaking"] === true ? { allowBreaking: true } : {})
   });
   if (res.status === 401) die("Token invalid \u2014 run `fillo login` again.");
   if (res.status === 404) {
@@ -2116,7 +2400,9 @@ async function publish(handle, flags) {
     process.exit(1);
   }
   if (res.status === 409 && typeof body.warningUrl === "string" && body.warningUrl) {
-    console.error(`\x1B[31m\u2717\x1B[0m ${terminalText(body.error ?? `publish failed (${res.status}).`)}`);
+    console.error(
+      `\x1B[31m\u2717\x1B[0m ${terminalText(body.error ?? `publish failed (${res.status}).`)}`
+    );
     console.error(`  Storage settings: ${terminalText(body.warningUrl)}`);
     process.exit(1);
   }
@@ -2284,6 +2570,8 @@ function printPushed(formId, url, updated, draft = false) {
   if (draft) console.log(`  ${dim("Review and publish it from the Fillo dashboard.")}`);
   else if (url) console.log(`  Live at ${terminalText(url)}`);
   console.log(`  Embed:  <FilloForm formId="${terminalText(formId)}" />
+`);
+  console.log(`  Verify: [data-fillo-form-id="${terminalText(formId)}"] on the actual app route
 `);
 }
 function syncError(response, body, credential) {
@@ -2329,6 +2617,8 @@ function printSynced(body, requestedStage) {
   if (body.warning) console.log(`  ${dim(`Before publishing: ${body.warning}`)}`);
   if (body.warningUrl) console.log(`  Storage settings: ${terminalText(body.warningUrl)}`);
   console.log(`  Embed:  <FilloForm formId="${terminalText(formId)}" />
+`);
+  console.log(`  Verify: [data-fillo-form-id="${terminalText(formId)}"] on the actual app route
 `);
 }
 async function pushWithSync(items, credential, requestedStage) {
@@ -2374,7 +2664,9 @@ async function push(file, flags) {
     );
   }
   if (!syncToken && !accountToken && stage) {
-    die(`To stage changes, run \`fillo login\` or set ${SYNC_TOKEN_ENV} from Settings > Developers.`);
+    die(
+      `To stage changes, run \`fillo login\` or set ${SYNC_TOKEN_ENV} from Settings > Developers.`
+    );
   }
   const handle = typeof flags.handle === "string" ? flags.handle : void 0;
   const items = toPushItems(await loadSchema(file, flags["allow-code"] === true), handle);
@@ -2419,7 +2711,9 @@ async function push(file, flags) {
       const body = await readJson(res);
       if (!res.ok || !body.formId) {
         if (res.status === 409 && typeof body.warningUrl === "string" && body.warningUrl) {
-          console.error(`\x1B[31m\u2717\x1B[0m ${terminalText(body.error ?? `push failed (${res.status}).`)}`);
+          console.error(
+            `\x1B[31m\u2717\x1B[0m ${terminalText(body.error ?? `push failed (${res.status}).`)}`
+          );
           console.error(`  Storage settings: ${terminalText(body.warningUrl)}`);
           process.exit(1);
         }
@@ -2438,7 +2732,9 @@ async function push(file, flags) {
 async function init(flags) {
   const email3 = typeof flags.email === "string" ? flags.email.trim() : "";
   if (!email3) {
-    die("Usage: fillo init --email you@company.com (or run `fillo login` for an existing account).");
+    die(
+      "Usage: fillo init --email you@company.com (or run `fillo login` for an existing account)."
+    );
   }
   const res = await api("/workspaces/provision", {
     method: "POST",
@@ -2448,13 +2744,17 @@ async function init(flags) {
   if (!res.ok || !body.key) die(body.error ?? `init failed (${res.status}).`);
   const { claimUrl: _legacyWorkspaceLink, ...current } = readConfig();
   writeConfig({ ...current, pk: body.key });
-  console.log(`
-  \x1B[32m\u2713\x1B[0m Workspace ready. A workspace link was sent to ${bold(terminalText(email3))}.`);
+  console.log(
+    `
+  \x1B[32m\u2713\x1B[0m Workspace ready. A workspace link was sent to ${bold(terminalText(email3))}.`
+  );
   if (body.limits) {
     const expiry = Date.parse(body.limits.expiresAt);
     if (Number.isFinite(expiry)) {
       const days = Math.max(1, Math.round((expiry - Date.now()) / 864e5));
-      console.log(`  ${dim(`Preview: up to ${body.limits.responses} responses for ~${days} days.`)}`);
+      console.log(
+        `  ${dim(`Preview: up to ${body.limits.responses} responses for ~${days} days.`)}`
+      );
     }
   }
   console.log(`
@@ -2519,7 +2819,8 @@ async function agent(subcommand, flags) {
   if (subcommand === "event") {
     const status2 = enumFlag(flags, "status", AGENT_EVENT_STATUSES);
     const message = flagString(flags, "message");
-    if (!status2) die('Usage: fillo agent event --status <status> --message "<what the human does next>"');
+    if (!status2)
+      die('Usage: fillo agent event --status <status> --message "<what the human does next>"');
     const action = enumFlag(flags, "action", AGENT_ACTIONS);
     const formStatus = enumFlag(flags, "form-status", FORM_STATUSES);
     const formId = optionalStringFlag(flags, "form-id");
@@ -2645,9 +2946,7 @@ function pathEntryExists(path) {
 var MANAGED_SKILL_MARKER = ".fillo-managed.json";
 function isCliManagedFilloSkill(target) {
   try {
-    const marker = JSON.parse(
-      readFileSync(join(target, MANAGED_SKILL_MARKER), "utf8")
-    );
+    const marker = JSON.parse(readFileSync(join(target, MANAGED_SKILL_MARKER), "utf8"));
     return marker.managedBy === "@usefillo/cli" && marker.skill === "build-with-fillo" && marker.format === 1 && marker.allowAutomaticUpdates === true;
   } catch {
     return false;
@@ -2702,19 +3001,14 @@ function installSkill(flags) {
   if (!existsSync(BUNDLED_SKILL_DIR)) {
     die("This CLI package is missing its bundled Fillo skill. Reinstall @usefillo/cli@latest.");
   }
-  const destinations = Array.from(
-    new Set(skillDirectories)
-  ).map((skillDirectory) => {
+  const destinations = Array.from(new Set(skillDirectories)).map((skillDirectory) => {
     const skillsRoot = resolve(scopeRoot, skillDirectory);
     const target = join(skillsRoot, "build-with-fillo");
     const relativeSkillsRoot = relative(scopeRoot, skillsRoot);
     if (relativeSkillsRoot === ".." || relativeSkillsRoot.startsWith(`..${sep}`) || isAbsolute(relativeSkillsRoot)) {
       die("The skill destination must stay inside the selected project or home scope.");
     }
-    const destinationParts = [
-      ...relativeSkillsRoot.split(sep).filter(Boolean),
-      "build-with-fillo"
-    ];
+    const destinationParts = [...relativeSkillsRoot.split(sep).filter(Boolean), "build-with-fillo"];
     assertSafeSkillDestination(scopeRoot, destinationParts);
     const targetExists = pathEntryExists(target);
     const current = targetExists && sameSkillBundle(BUNDLED_SKILL_DIR, target);
@@ -2735,10 +3029,7 @@ function installSkill(flags) {
     if (destination.current) continue;
     mkdirSync(destination.skillsRoot, { recursive: true });
     assertSafeSkillDestination(scopeRoot, destination.destinationParts.slice(0, 2));
-    const staging = join(
-      destination.skillsRoot,
-      `.build-with-fillo.install-${randomUUID()}`
-    );
+    const staging = join(destination.skillsRoot, `.build-with-fillo.install-${randomUUID()}`);
     try {
       cpSync(BUNDLED_SKILL_DIR, staging, { recursive: true, errorOnExist: true });
       assertSafeSkillDestination(scopeRoot, destination.destinationParts);
@@ -2784,18 +3075,15 @@ async function postAgentEvent(apiBase, run, token, body) {
 }
 async function attachAgentAccount(apiBase, run, progressToken) {
   const accountToken = requireTokenFor(apiBase);
-  const res = await fetch(
-    `${apiBase}/api/v1/agent-runs/${encodeURIComponent(run)}/account`,
-    {
-      method: "POST",
-      redirect: "error",
-      headers: {
-        Authorization: `Bearer ${accountToken}`,
-        "X-Fillo-Agent-Run-Token": progressToken
-      },
-      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
-    }
-  );
+  const res = await fetch(`${apiBase}/api/v1/agent-runs/${encodeURIComponent(run)}/account`, {
+    method: "POST",
+    redirect: "error",
+    headers: {
+      Authorization: `Bearer ${accountToken}`,
+      "X-Fillo-Agent-Run-Token": progressToken
+    },
+    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+  });
   const payload = await res.json().catch(() => ({}));
   if (!res.ok) {
     const hint = res.status === 401 ? " Run `fillo login` and try again." : "";
@@ -2925,10 +3213,7 @@ var FLAGS_BY_COMMAND = {
   version: []
 };
 function validateFlags(command, flags) {
-  const allowed = /* @__PURE__ */ new Set([
-    ...GLOBAL_FLAGS,
-    ...command ? FLAGS_BY_COMMAND[command] ?? [] : []
-  ]);
+  const allowed = /* @__PURE__ */ new Set([...GLOBAL_FLAGS, ...command ? FLAGS_BY_COMMAND[command] ?? [] : []]);
   for (const [key, value] of Object.entries(flags)) {
     if (!allowed.has(key)) die(`Unknown flag for ${command ?? "fillo"}: --${key}`);
     if (BOOLEAN_FLAGS.has(key)) {

package/dist/skill/build-with-fillo/SKILL.md

@@ -27,6 +27,11 @@ Never require a provider-specific agent command.
      `formId`.
    - Fully custom UI: use `FilloProvider` and hooks in React, or
      `createFormController()` elsewhere.
+   Every interactive embed must have exactly one submission identity: a
+   published `formId`, or a `defineForm()` / `<Fillo.Form>` value plus a
+   client. A plain `FormSchema` plus a client is not a code-defined form and
+   cannot resolve a target. Use explicit `renderOnly` only for a deliberately
+   non-submitting UI preview.
 3. Ask only for missing product decisions that change the result: purpose,
    placement, required questions or files, conditional behavior, and what
    happens after submit. Infer routine implementation details from the repo.
@@ -76,7 +81,9 @@ could not be verified.
 - Keep conditional questions in schema data with `visibleIf`; never vary the
   schema structure per visitor.
 - Pass a client to code-defined forms that must sync or collect responses.
-  Without a client they are local render-only forms.
+  Never render a plain schema with only a client: add the actual returned
+  `formId`, convert the schema to `defineForm()`, or opt into `renderOnly` for
+  a deliberately transportless preview.
 - Import the default stylesheet unless the app deliberately owns every form
   style. Keep overrides local and preserve accessible labels, errors, focus,
   disabled states, and keyboard behavior.
@@ -93,7 +100,14 @@ identity secrets, workspace capability links, or short-lived run tokens.
 ## Verify and hand off
 
 1. Run the host repository's typecheck and proportionate build or tests.
-2. Inspect desktop and mobile states: loading, validation, conditional paths,
+   A successful build, public API check, or hosted Fillo page does not prove
+   that the host app embedded the correct form.
+2. Open the actual host-app route in a browser. Confirm its active root has
+   `data-fillo-form-id="<actual returned formId>"`; do not accept a schema
+   handle, a hosted `/f/...` page, or a different form id as evidence. If the
+   form includes files, confirm the embedded picker is enabled and shows its
+   browse/drop affordance. Then inspect desktop and mobile states: loading,
+   validation, conditional paths,
    keyboard focus, error, success, and narrow text. Off localhost (tunnel,
    staging), the cosmetic-only `preview` prop/attribute shows the same
    developer chrome — see

package/dist/skill/build-with-fillo/references/frameworks.md

@@ -42,6 +42,27 @@ Keep Fillo JSX schema authoring in a `"use client"` module. `onSubmitted` is
 for navigation, analytics, or another host-side follow-up after storage; it is
 not the response transport.
 
+The identity combinations are intentional and exhaustive:
+
+```tsx
+// Published/dashboard/CLI-owned schema.
+<FilloForm formId={actualReturnedFormId} />
+
+// Inline snapshot of that same published form.
+<FilloForm form={schema} formId={actualReturnedFormId} />
+
+// App-owned schema with a stable defineForm() identity.
+<FilloForm form={codeForm} client={client} />
+
+// Deliberately local UI preview: cannot submit, upload, or save progress.
+<FilloForm form={schema} renderOnly />
+```
+
+Never use `<FilloForm form={plainSchema} client={client} />`. A plain schema
+has no stable Fillo identity, so the client cannot know which form owns its
+responses or uploads. Current SDK types reject this combination and the
+runtime reports `form_target_required` for JavaScript callers.
+
 ## Vite apps
 
 Vite exposes only `VITE_`-prefixed env vars to browser code, through
@@ -110,11 +131,11 @@ unconnected. On a tunnel, staging deploy, or local production build that
 chrome stays quiet; opt in with the cosmetic-only `preview` flag:
 
 ```tsx
-<FilloForm form={feedback} client={client}
+<FilloForm form={feedbackCodeForm} client={client}
   preview={process.env.NEXT_PUBLIC_STAGE !== "production"} />
 ```
 
-DOM equivalents: `renderForm(el, { form, client, preview: true })` or
+DOM equivalents: `renderForm(el, { form: feedbackCodeForm, client, preview: true })` or
 `<fillo-form data-preview>`. `data-preview="false"` and `data-preview="0"`
 count as off (frameworks stringify booleans onto data-* attributes); any other
 presence is on. `preview` renders a visible "Preview" badge and
@@ -123,6 +144,10 @@ submissions authenticate with a credential, never a prop. Remove it before
 respondents see the page. Pass `devNotices={false}` (`devNotices: false` in
 DOM) when the page provides its own context; the badge stays.
 
+`preview` is only developer chrome; it does not make a transportless form
+valid. Use `renderOnly` (or `<fillo-form data-render-only>`) when the surface is
+intentionally local and must not submit or upload.
+
 ## Styling and custom UI
 
 Use the lowest-control surface that satisfies the request:

package/dist/skill/build-with-fillo/references/troubleshooting.md

@@ -6,6 +6,7 @@ Confirm the exact error and installed package version before changing code.
 | --- | --- |
 | Published-id embed returns 404 | Confirm the id or slug and that the form is published. Do not reveal whether an inaccessible draft exists. |
 | Code-defined form renders but cannot save | Pass a client, keep a stable id, verify the key belongs to the intended workspace, and check expected-origin restrictions. |
+| `form_target_required` or the embed renders unavailable while the hosted page works | The host app rendered a plain schema without a submission identity. Pass the actual returned `formId`, or use `defineForm()` plus a client. Use `renderOnly` only for a deliberate non-submitting preview. Verify the app route exposes the same id in `data-fillo-form-id`. |
 | Publishable key is `undefined` in a Vite app | Read `import.meta.env.VITE_FILLO_KEY`, not `process.env`; declare it in `src/vite-env.d.ts` under strict TypeScript and restart the dev server after `.env` changes. |
 | Schema write reports `trusted_sync_required` | Log in and use `fillo push --stage`, or use a server-held `FILLO_SYNC_TOKEN`. Do not weaken the workspace policy. |
 | `fillo push --stage` has nothing to stage | The published schema already matches; do not create another form. |
@@ -13,6 +14,7 @@ Confirm the exact error and installed package version before changing code.
 | File form cannot publish | Connect supported storage and verify the provider before retrying publish. |
 | Test submit only says "This form is unavailable." | Run on localhost, or set the cosmetic-only `preview` prop / `data-preview` attribute: dev chrome shows the real failure with its machine code (for example `form_not_published`) and the connect-storage link. |
 | Upload field says "Connect file storage to enable uploads" | Expected dev-chrome pre-emption: sync reported `storage_required`. Open the linked storage settings, connect a destination, then publish. |
+| Upload field says uploads are unavailable in a render-only preview | The embed explicitly disabled transport. Remove `renderOnly` and provide a real identity path before testing uploads. |
 | DOM form duplicates after navigation | Mount after the target exists and call `destroy()` in cleanup. |
 | React context or hook error | Keep hooks inside `FilloForm` or `FilloProvider` and check for two installed copies of `@usefillo/react`. |
 | Fillo JSX fails in Next.js | Move schema JSX to a `"use client"` module; use object-form `defineForm()` for framework-neutral schema. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usefillo/cli",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Create and publish Fillo forms, and install the Fillo Agent Skill.",
   "license": "MIT",
   "keywords": [
@@ -26,7 +26,7 @@
     "@types/node": "^22.10.0",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "@usefillo/core": "0.10.0"
+    "@usefillo/core": "0.12.0"
   },
   "scripts": {
     "build": "tsup && node scripts/copy-skill.mjs",