@usefillo/core 0.17.0 → 0.19.0

package/dist/index.d.ts

@@ -400,7 +400,7 @@ interface FormSchema {
     settings: FormSettings;
 }
 interface FormTheme {
-    /** Force default renderer colors, or leave unset/"auto" to follow the system. */
+    /** Omit to inherit the host page. Use "auto" to follow the visitor's system directly. */
     colorScheme?: "light" | "dark" | "auto";
     /** Accent for buttons, focus rings, selection. */
     primary?: string;
@@ -1027,7 +1027,7 @@ declare function assembleForm(spec: FormDraftSpec): FormSchema;
 
 interface FilloClientOptions {
     /**
-     * Publishable workspace key (pk_…) — safe to ship in client code. Required
+     * Publishable project key (pk_…) — safe to ship in client code. Required
      * only for syncing code-defined forms into the workspace.
      */
     key?: string;
@@ -1176,7 +1176,7 @@ interface SubmitMeta {
  * webhooks, and integrations can say WHO answered.
  */
 interface FilloRespondent {
-    /** Your stable user/account id — the identity key within your workspace. */
+    /** Your stable user/account id — the identity key within your project. */
     id: string;
     email?: string;
     name?: string;
@@ -1184,8 +1184,8 @@ interface FilloRespondent {
     traits?: Record<string, string | number | boolean>;
     /**
      * Identity verification (optional): hex HMAC-SHA256 of `id`, computed on
-     * YOUR server with the workspace identity secret from Fillo settings. Once
-     * the workspace holds a secret, Fillo records identity only with a valid
+     * YOUR server with the project identity secret from Fillo settings. Once
+     * the project holds a secret, Fillo records identity only with a valid
      * hash — never compute this in the browser or the secret leaks.
      */
     hash?: string;
@@ -1255,6 +1255,10 @@ declare function isFilloError(err: unknown): err is FilloError;
 interface SyncFormResult {
     formId: string;
     slug: string;
+    /** Absolute Fillo dashboard URL for reviewing and publishing this form.
+     *  This is server-owned and intentionally independent of `client.baseUrl`,
+     *  which may point at an app-owned API proxy. */
+    manageUrl?: string;
     branding?: FormBranding;
     /** Human-verification challenge to render before submit, when the LIVE form
      *  requires one (staged changes don't gate until published). Absent = no
@@ -1318,7 +1322,7 @@ declare class FilloClient {
     /** Server origin this client targets, normalized (no trailing slash). */
     readonly baseUrl: string;
     private fetch;
-    /** Publishable workspace key, when configured. */
+    /** Publishable project key, when configured. */
     readonly key?: string;
     constructor(options?: FilloClientOptions);
     private url;
@@ -1327,7 +1331,7 @@ declare class FilloClient {
     getForm(idOrSlug: string): Promise<PublishedForm>;
     /**
      * Resolve a code-defined form through the workspace identified by the
-     * client's publishable key. Depending on workspace policy, changed content
+     * client's publishable key. Depending on project policy, changed content
      * may be staged for review or resolved to the authoritative live snapshot.
      * Returns the canonical form id used for submissions.
      */
@@ -1439,7 +1443,7 @@ declare class FilloClient {
 }
 declare function createClient(options?: FilloClientOptions): FilloClient;
 interface ProvisionWorkspaceResult {
-    /** Publishable key (pk_…) for the new workspace. Pass to createClient({ key }). */
+    /** Publishable key (pk_…) for the new workspace's default project. Pass to createClient({ key }). */
     key: string;
     organizationId: string;
     /** The private workspace link is emailed directly; `url` stays null. */
@@ -1473,6 +1477,181 @@ declare function provisionWorkspace(options: {
     fetch?: typeof fetch;
 }): Promise<ProvisionWorkspaceResult>;
 
+/**
+ * The default English validation message for a required field left empty.
+ * `validateField` returns this exact sentinel (core has no strings context),
+ * and renderer layers swap it for field-aware/localized copy. Keep it
+ * identical to `DEFAULT_FIELD_STRINGS.required`.
+ */
+declare const REQUIRED_FIELD_MESSAGE = "This field is required";
+/**
+ * The form-chrome strings the default renderers emit, overridable as a unit so
+ * a localized site never shows stray English at the submit moment.
+ * Schema-authored text (labels, descriptions, success copy set in settings)
+ * always wins over these defaults.
+ *
+ * Field-level and validation copy (required message, upload field, duplicate/
+ * resume notices) lives in {@link FilloFieldStrings} — split out so this
+ * documented, all-`string` surface stays stable while parametrized field
+ * strings can be functions. The renderers resolve both together
+ * ({@link FilloRendererStrings}); the `strings` prop overrides either.
+ */
+interface FilloStrings {
+    back: string;
+    next: string;
+    submit: string;
+    submitting: string;
+    uploading: string;
+    /** Suffix on non-required field labels. */
+    optional: string;
+    /** The "Other" free-text choice. */
+    other: string;
+    otherPrompt: string;
+    otherPlaceholder: string;
+    /** Dropdown placeholder when the field sets none. */
+    choosePlaceholder: string;
+    /** Success screen defaults — settings.successTitle/successMessage win. */
+    successTitle: string;
+    successMessage: string;
+    closed: string;
+    notLive: string;
+    /** Title of the not-open state for a draft/storage-blocked form in production. */
+    notOpenTitle: string;
+    /** Body of the not-open state. */
+    notOpenBody: string;
+    /** Title of the closed-flavor state (expired/capped workspace);
+     *  the body reuses `closed`. */
+    closedTitle: string;
+    /** Fallback when a submit fails without a server message. */
+    submitFailed: string;
+    loadFailedNotFound: string;
+    loadFailedNetwork: string;
+    loadFailed: string;
+    renderFailed: string;
+    /** Saved-progress notice when a draft restored earlier answers. */
+    resumeNotice: string;
+    /** Upsert-mode notice when the person's previous response was prefilled. */
+    editNotice: string;
+    /** The discard action next to the resume notice. */
+    resumeStartOver: string;
+    /** Shown when the human-verification widget can't load (script blocked). */
+    challengeUnavailable: string;
+}
+interface RespondentErrorStrings {
+    submitFailed: string;
+    loadFailedNotFound: string;
+    loadFailedNetwork: string;
+    formUnavailable: string;
+    formClosed: string;
+    submitRateLimited: string;
+    respondentUnrecognized: string;
+    fileUnavailable: string;
+    scopeMissing: string;
+    challengeIncomplete: string;
+    challengeRetry: string;
+    reviewAnswers: string;
+}
+type RespondentErrorOverrides = Omit<RespondentErrorStrings, "submitFailed" | "loadFailedNotFound" | "loadFailedNetwork" | "formClosed">;
+declare const DEFAULT_STRINGS: FilloStrings;
+declare const DEFAULT_RESPONDENT_ERROR_STRINGS: RespondentErrorStrings;
+/** Translate the renderer's existing top-level fallbacks plus its optional
+ * respondent-only overrides into the controller's complete error contract. */
+declare function respondentErrorStringsFor(strings: Pick<FilloStrings, "submitFailed" | "loadFailedNotFound" | "loadFailedNetwork" | "closed"> & Pick<FilloFieldStrings, "respondentErrors">): RespondentErrorStrings;
+/**
+ * Field-level and validation strings the default renderers emit. Kept apart
+ * from {@link FilloStrings} so parametrized entries can be functions (a
+ * translation places the value where its grammar needs it) without widening
+ * the documented all-`string` chrome surface. Also the growth point for new
+ * strings in general — unlike `FilloStrings`, nothing depends on this being
+ * an exhaustively-enumerated, closed set.
+ */
+interface FilloFieldStrings {
+    /** Optional, backward-compatible overrides for respondent error states that
+     * do not already have a top-level renderer string. */
+    respondentErrors?: Partial<RespondentErrorOverrides>;
+    /** Generic/legacy validation copy for a required field left empty. Mirrors
+     *  REQUIRED_FIELD_MESSAGE and remains the fallback for custom/hidden fields. */
+    required: string;
+    /** Optional field-aware required copy. Existing `required` overrides keep
+     *  their legacy generic behavior unless this function is also supplied. */
+    requiredForField?: (field: Field) => string;
+    /** Notice when a spent/expired resume link couldn't restore progress. */
+    resumeLinkExpired: string;
+    /** Success-screen message when a verified identity re-submits and the form
+     *  keeps the first answer (a visible duplicate, not a fresh response). */
+    alreadyAnswered: string;
+    /** Retry control on a failed upload row. */
+    uploadRetry: string;
+    /** Accessible action names for upload rows. The filename is appended by the renderer. */
+    uploadCancel: string;
+    uploadRemove: string;
+    uploadDismiss: string;
+    /** Visible secondary status for an upload in progress. */
+    uploadingFile: (percent: number, size: string) => string;
+    /** Visible secondary status for a completed upload. */
+    uploadedFile: (size: string) => string;
+    /** Dropzone copy when uploads can't run because the form isn't connected. */
+    uploadsDisabled: string;
+    /** Dropzone copy for an explicit render-only preview, which never has transport. */
+    uploadsRenderOnly: string;
+    /** Dropzone copy when the server temporarily refuses new file sessions. */
+    uploadsUnavailable: string;
+    /** An upload request reached the server, but storage could not accept it. */
+    uploadUnavailable: string;
+    /** An upload attempt failed with no actionable server message. */
+    uploadFailed: string;
+    /** Dropzone call to action; `multiple` is true when several files are allowed. */
+    dropzoneTitle: (multiple: boolean) => string;
+    /** Dropzone hint stating the per-file size limit in MB. */
+    dropzoneHint: (maxMb: number) => string;
+    /** A file exceeded the per-file MB limit before upload started. */
+    fileTooLarge: (maxMb: number) => string;
+    /** Screen-reader status: N uploads in progress. */
+    filesUploading: (count: number) => string;
+    /** Screen-reader status: N uploads failed. */
+    uploadsFailed: (count: number) => string;
+    /** Screen-reader status: N uploads completed. */
+    filesUploaded: (count: number) => string;
+    /** Live-region announcement while a submit is in flight — for auto-submit
+     *  forms, which have no footer/button to show `submitting` on. */
+    submittingAnnouncement: string;
+    /** @deprecated Retained for localization compatibility. Default renderers
+     *  now focus the first invalid control and show field-aware inline guidance. */
+    errorSummaryTitle: string;
+    /** Live-region announcement after a ranking move: "«label», position n of m". */
+    rankingPosition: (label: string, position: number, count: number) => string;
+    /** Repeating group: the Add button's default label. */
+    groupAdd: string;
+    /** Repeating group instance heading — "«item» n of m". */
+    groupInstanceLabel: (item: string, position: number, count: number) => string;
+    /** Repeating group per-instance Remove button accessible label. */
+    groupRemoveLabel: (item: string, position: number) => string;
+    /** Live-region announcement after adding an instance. */
+    groupInstanceAdded: (item: string, position: number, count: number) => string;
+    /** Live-region announcement after removing an instance. */
+    groupInstanceRemoved: (item: string, count: number) => string;
+    /** Live-region announcement once a phone country-picker selection commits
+     *  (focus moves straight to the national input, so nothing else announces it). */
+    phoneCountrySelected: (name: string) => string;
+    /** Live-region announcement of the phone country-picker's filtered result
+     *  count as the respondent types in the search box. */
+    phoneResultsCount: (count: number) => string;
+    /** Accessible name/state for an empty signature canvas. */
+    signatureEmpty: string;
+    /** Accessible name/state for a signed signature canvas. */
+    signatureSigned: string;
+}
+declare const DEFAULT_FIELD_STRINGS: FilloFieldStrings;
+/** Everything the default renderers can localize — chrome + field/validation. */
+type FilloRendererStrings = FilloStrings & FilloFieldStrings;
+/** Resolve the renderer copy for core's stable required-field sentinel. */
+declare function requiredFieldMessage(field: Field, strings: Pick<FilloFieldStrings, "required" | "requiredForField">): string;
+/** Merge overrides over the built-in chrome + field defaults. Accepts a partial
+ *  of the full renderer surface so the `strings` prop can override either set.
+ *  A legacy generic `required` override disables the new field-aware default
+ *  unless the caller explicitly supplies `requiredForField` too. */
+declare function resolveStrings(overrides?: Partial<FilloRendererStrings>): FilloRendererStrings;
+
 type FormStatus = "idle" | "submitting" | "submitted" | "error";
 interface FormControllerOptions {
     form: FormSchema;
@@ -1521,6 +1700,10 @@ interface FormControllerOptions {
      * origins, or deployment commands.
      */
     verboseResolutionErrors?: boolean;
+    /** Safe respondent-facing fallbacks used when an API or transport error is
+     * intentionally hidden. Renderers pass their resolved `strings` overrides so
+     * this boundary never replaces localized copy with the English defaults. */
+    respondentErrorStrings?: Partial<RespondentErrorStrings>;
     /**
      * Host-app account context (identify()): who is filling this form, by your
      * own user id. Sent with the submission and recorded as an unverified
@@ -1631,6 +1814,8 @@ interface FormController {
         client?: FilloClient;
         /** Late-bind identify() context — host sessions often resolve after mount. */
         respondent?: FilloRespondent;
+        /** Replace localized respondent-safe error copy after a locale change. */
+        respondentErrorStrings?: Partial<RespondentErrorStrings>;
     }): void;
     /**
      * Persist any unsaved draft progress right now (settings.saveProgress
@@ -1785,16 +1970,15 @@ declare const FILLO_THEME_VARS: readonly [{
     readonly var: "--fillo-primary-contrast";
 }];
 /**
- * Infer `colorScheme` for a `FormTheme` with `background` AND `text` set
- * but no explicit `colorScheme`, from the background's WCAG relative
- * luminance — fixes the foot-gun where `theme={{background, text}}` alone
- * left the light palette's muted/border/control-bg/error/primary-contrast
- * tokens in place, reading as near-white-on-white (≈1.10:1) on a dark
- * author-chosen background.
+ * Infer `colorScheme` for a `FormTheme` with a fixed hex `background` and no
+ * fixed light/dark scheme. A fixed background cannot safely keep following
+ * the visitor's OS: a light-only host viewed on a dark OS otherwise gets dark
+ * controls on a white form (and the reverse for dark backgrounds).
  *
- * Explicit `colorScheme` always wins (returned unchanged). Only one of
- * `background`/`text` set, neither set, or a non-`#rgb`/`#rrggbb`
- * `background` also pass through unchanged — no inference.
+ * Explicit `light`/`dark` always wins. An absent scheme or `auto` is resolved
+ * from the background's WCAG relative luminance, even when `text` is omitted,
+ * so the remaining muted/border/control/error/contrast tokens stay readable.
+ * A missing or non-`#rgb`/`#rrggbb` background passes through unchanged.
  *
  * Returns a `FormTheme`, not just the scheme, so a renderer can drop this
  * in ahead of its existing code with no other change:
@@ -1805,163 +1989,12 @@ declare const FILLO_THEME_VARS: readonly [{
  */
 declare function resolveThemeAppearance(theme: FormTheme | null): FormTheme | null;
 
-/**
- * The default English validation message for a required field left empty.
- * `validateField` returns this exact sentinel (core has no strings context),
- * and renderer layers swap it for field-aware/localized copy. Keep it
- * identical to `DEFAULT_FIELD_STRINGS.required`.
- */
-declare const REQUIRED_FIELD_MESSAGE = "This field is required";
-/**
- * The form-chrome strings the default renderers emit, overridable as a unit so
- * a localized site never shows stray English at the submit moment.
- * Schema-authored text (labels, descriptions, success copy set in settings)
- * always wins over these defaults.
- *
- * Field-level and validation copy (required message, upload field, duplicate/
- * resume notices) lives in {@link FilloFieldStrings} — split out so this
- * documented, all-`string` surface stays stable while parametrized field
- * strings can be functions. The renderers resolve both together
- * ({@link FilloRendererStrings}); the `strings` prop overrides either.
- */
-interface FilloStrings {
-    back: string;
-    next: string;
-    submit: string;
-    submitting: string;
-    uploading: string;
-    /** Suffix on non-required field labels. */
-    optional: string;
-    /** The "Other" free-text choice. */
-    other: string;
-    otherPrompt: string;
-    otherPlaceholder: string;
-    /** Dropdown placeholder when the field sets none. */
-    choosePlaceholder: string;
-    /** Success screen defaults — settings.successTitle/successMessage win. */
-    successTitle: string;
-    successMessage: string;
-    closed: string;
-    notLive: string;
-    /** Title of the not-open state for a draft/storage-blocked form in production. */
-    notOpenTitle: string;
-    /** Body of the not-open state. */
-    notOpenBody: string;
-    /** Title of the closed-flavor state (expired/capped workspace);
-     *  the body reuses `closed`. */
-    closedTitle: string;
-    /** Fallback when a submit fails without a server message. */
-    submitFailed: string;
-    loadFailedNotFound: string;
-    loadFailedNetwork: string;
-    loadFailed: string;
-    renderFailed: string;
-    /** Saved-progress notice when a draft restored earlier answers. */
-    resumeNotice: string;
-    /** Upsert-mode notice when the person's previous response was prefilled. */
-    editNotice: string;
-    /** The discard action next to the resume notice. */
-    resumeStartOver: string;
-    /** Shown when the human-verification widget can't load (script blocked). */
-    challengeUnavailable: string;
-}
-declare const DEFAULT_STRINGS: FilloStrings;
-/**
- * Field-level and validation strings the default renderers emit. Kept apart
- * from {@link FilloStrings} so parametrized entries can be functions (a
- * translation places the value where its grammar needs it) without widening
- * the documented all-`string` chrome surface. Also the growth point for new
- * strings in general — unlike `FilloStrings`, nothing depends on this being
- * an exhaustively-enumerated, closed set.
- */
-interface FilloFieldStrings {
-    /** Generic/legacy validation copy for a required field left empty. Mirrors
-     *  REQUIRED_FIELD_MESSAGE and remains the fallback for custom/hidden fields. */
-    required: string;
-    /** Optional field-aware required copy. Existing `required` overrides keep
-     *  their legacy generic behavior unless this function is also supplied. */
-    requiredForField?: (field: Field) => string;
-    /** Notice when a spent/expired resume link couldn't restore progress. */
-    resumeLinkExpired: string;
-    /** Success-screen message when a verified identity re-submits and the form
-     *  keeps the first answer (a visible duplicate, not a fresh response). */
-    alreadyAnswered: string;
-    /** Retry control on a failed upload row. */
-    uploadRetry: string;
-    /** Accessible action names for upload rows. The filename is appended by the renderer. */
-    uploadCancel: string;
-    uploadRemove: string;
-    uploadDismiss: string;
-    /** Visible secondary status for an upload in progress. */
-    uploadingFile: (percent: number, size: string) => string;
-    /** Visible secondary status for a completed upload. */
-    uploadedFile: (size: string) => string;
-    /** Dropzone copy when uploads can't run because the form isn't connected. */
-    uploadsDisabled: string;
-    /** Dropzone copy for an explicit render-only preview, which never has transport. */
-    uploadsRenderOnly: string;
-    /** Dropzone copy when the server temporarily refuses new file sessions. */
-    uploadsUnavailable: string;
-    /** An upload request reached the server, but storage could not accept it. */
-    uploadUnavailable: string;
-    /** An upload attempt failed with no actionable server message. */
-    uploadFailed: string;
-    /** Dropzone call to action; `multiple` is true when several files are allowed. */
-    dropzoneTitle: (multiple: boolean) => string;
-    /** Dropzone hint stating the per-file size limit in MB. */
-    dropzoneHint: (maxMb: number) => string;
-    /** A file exceeded the per-file MB limit before upload started. */
-    fileTooLarge: (maxMb: number) => string;
-    /** Screen-reader status: N uploads in progress. */
-    filesUploading: (count: number) => string;
-    /** Screen-reader status: N uploads failed. */
-    uploadsFailed: (count: number) => string;
-    /** Screen-reader status: N uploads completed. */
-    filesUploaded: (count: number) => string;
-    /** Live-region announcement while a submit is in flight — for auto-submit
-     *  forms, which have no footer/button to show `submitting` on. */
-    submittingAnnouncement: string;
-    /** @deprecated Retained for localization compatibility. Default renderers
-     *  now focus the first invalid control and show field-aware inline guidance. */
-    errorSummaryTitle: string;
-    /** Live-region announcement after a ranking move: "«label», position n of m". */
-    rankingPosition: (label: string, position: number, count: number) => string;
-    /** Repeating group: the Add button's default label. */
-    groupAdd: string;
-    /** Repeating group instance heading — "«item» n of m". */
-    groupInstanceLabel: (item: string, position: number, count: number) => string;
-    /** Repeating group per-instance Remove button accessible label. */
-    groupRemoveLabel: (item: string, position: number) => string;
-    /** Live-region announcement after adding an instance. */
-    groupInstanceAdded: (item: string, position: number, count: number) => string;
-    /** Live-region announcement after removing an instance. */
-    groupInstanceRemoved: (item: string, count: number) => string;
-    /** Live-region announcement once a phone country-picker selection commits
-     *  (focus moves straight to the national input, so nothing else announces it). */
-    phoneCountrySelected: (name: string) => string;
-    /** Live-region announcement of the phone country-picker's filtered result
-     *  count as the respondent types in the search box. */
-    phoneResultsCount: (count: number) => string;
-    /** Accessible name/state for an empty signature canvas. */
-    signatureEmpty: string;
-    /** Accessible name/state for a signed signature canvas. */
-    signatureSigned: string;
-}
-declare const DEFAULT_FIELD_STRINGS: FilloFieldStrings;
-/** Everything the default renderers can localize — chrome + field/validation. */
-type FilloRendererStrings = FilloStrings & FilloFieldStrings;
-/** Resolve the renderer copy for core's stable required-field sentinel. */
-declare function requiredFieldMessage(field: Field, strings: Pick<FilloFieldStrings, "required" | "requiredForField">): string;
-/** Merge overrides over the built-in chrome + field defaults. Accepts a partial
- *  of the full renderer surface so the `strings` prop can override either set.
- *  A legacy generic `required` override disables the new field-aware default
- *  unless the caller explicitly supplies `requiredForField` too. */
-declare function resolveStrings(overrides?: Partial<FilloRendererStrings>): FilloRendererStrings;
-
 /** Result of syncing a code-defined form: its canonical id, slug, and branding. */
 interface SyncedForm {
     formId: string;
     slug: string;
+    /** Absolute Fillo dashboard URL for reviewing and publishing this form. */
+    manageUrl?: string;
     branding?: FormBranding;
     /** Human-verification challenge to render before submit, when the LIVE form
      *  requires one (staged changes don't gate until published). Absent = no
@@ -2201,4 +2234,4 @@ declare class Sha1 {
 }
 declare const sha1Base64: (bytes: Uint8Array) => string;
 
-export { type AutoSubmitContext, BLOCK_KIND_META, type BaseField, type Block, type BlockKind, CONTENT_KINDS, type CalcExpr, type CalculatedField, type ChallengeConfig, type ChallengeTheme, type CheckboxField, type ChoiceField, type CodeForm, type Condition, type ConditionOp, type ContentBlock, type ContentKind, type CreatedDraft, type CustomField, DEFAULT_FIELD_STRINGS, DEFAULT_STRINGS, DRAFT_KINDS, type DateField, type DividerBlock, FILLO_CALC_MIN_SDK_VERSION, FILLO_CHALLENGE_MIN_SDK_VERSION, FILLO_DATA_ATTRS, FILLO_GROUP_MIN_SDK_VERSION, FILLO_MIN_SDK_VERSION, FILLO_SCHEMA_VERSION, FILLO_SDK_VERSION, FILLO_SLOTS, FILLO_THEME_VARS, type Field, type FieldKind, type FieldSpec, type FieldValue, type FileUploadField, type FileValue, type FilloAppearance, FilloClient, type FilloClientOptions, FilloError, type FilloFieldStrings, FilloJsxError, type FilloRendererStrings, type FilloRespondent, type FilloSlot, type FilloStrings, type FormBranding, type FormController, type FormControllerOptions, type FormControllerState, type FormDraftSpec, type FormPage, type FormSchema, type FormSettings, type FormStatus, type FormTheme, type GroupInstanceValue, type HeadingBlock, type HiddenField, JSX_BLOCK_COMPONENTS, JSX_BLOCK_SPECS, type JsonValue, type JsxFormMeta, type JumpRule, type LinearScaleField, type MatrixField, type NextPage, type NumberField, PHONE_COUNTRIES, PHONE_PICKER_COUNTRIES, PHONE_POPOVER_VIEWPORT_GAP, type ParagraphBlock, type ParsePhoneOptions, type ParsedPhone, type PhoneCountry, type PhoneField, type PhonePopoverPlacement, type ProvisionWorkspaceResult, type PublishedForm, REQUIRED_FIELD_MESSAGE, type RankingField, type RatingField, type RepeatingGroupField, type ResponseData, type ResponseDraft, type ResponseLimit, type SchemaValidationResult, type SelectOption, Sha1, type SignatureField, type SlotClass, type SlotState, type SubmitMeta, type SubmitResult, type SyncFormResult, type SyncedForm, type TextField, type TrustPolicy, type UploadFileOptions, type UploadProgress, type UploadSession, type UploadStatus, type UploadTransport, type ValidationResult, type WhenBuilder, allFields, assembleForm, codeFormFromJsx, computeCalculated, conditionsMet, contentHash, countryByDialCode, countryByIso, countryByTimeZone, createBlock, createClient, createEmptyForm, createFormController, createId, defineForm, digitsOnly, evaluateCalc, flagEmoji, formSchemasEqual, formatAnswer, formatGroupedNumber, formatNational, isAutoSubmitBlock, isBlockVisible, isBuildTimeDevEnv, isCodeForm, isField, isFilloError, isLikelyDevEnv, isPossiblePhone, isTerminalPage, isValidPartialNumberText, localeForNotation, needsExplicitSubmit, normalizeFormSchema, normalizeFormTheme, normalizeSettings, parseGroupedNumber, parsePhone, pipeBlock, positionPhonePopover, prefillFromParams, provisionWorkspace, radioGroupStep, reachableFieldIds, reachableFields, reachablePageIds, reachablePageSequence, requiredFieldMessage, resolveNextPage, resolveSlotClass, resolveStrings, resolveText, resolveThemeAppearance, responseScopeValue, schemaFromJsx, sha1Base64, shouldAutoSubmit, slotClass, syncCodeForm, toE164, validateField, validateFormSchema, validateResponse, visibleBlocks, visibleFields, visibleGroupChildren, visiblePageBlocks, when };
+export { type AutoSubmitContext, BLOCK_KIND_META, type BaseField, type Block, type BlockKind, CONTENT_KINDS, type CalcExpr, type CalculatedField, type ChallengeConfig, type ChallengeTheme, type CheckboxField, type ChoiceField, type CodeForm, type Condition, type ConditionOp, type ContentBlock, type ContentKind, type CreatedDraft, type CustomField, DEFAULT_FIELD_STRINGS, DEFAULT_RESPONDENT_ERROR_STRINGS, DEFAULT_STRINGS, DRAFT_KINDS, type DateField, type DividerBlock, FILLO_CALC_MIN_SDK_VERSION, FILLO_CHALLENGE_MIN_SDK_VERSION, FILLO_DATA_ATTRS, FILLO_GROUP_MIN_SDK_VERSION, FILLO_MIN_SDK_VERSION, FILLO_SCHEMA_VERSION, FILLO_SDK_VERSION, FILLO_SLOTS, FILLO_THEME_VARS, type Field, type FieldKind, type FieldSpec, type FieldValue, type FileUploadField, type FileValue, type FilloAppearance, FilloClient, type FilloClientOptions, FilloError, type FilloFieldStrings, FilloJsxError, type FilloRendererStrings, type FilloRespondent, type FilloSlot, type FilloStrings, type FormBranding, type FormController, type FormControllerOptions, type FormControllerState, type FormDraftSpec, type FormPage, type FormSchema, type FormSettings, type FormStatus, type FormTheme, type GroupInstanceValue, type HeadingBlock, type HiddenField, JSX_BLOCK_COMPONENTS, JSX_BLOCK_SPECS, type JsonValue, type JsxFormMeta, type JumpRule, type LinearScaleField, type MatrixField, type NextPage, type NumberField, PHONE_COUNTRIES, PHONE_PICKER_COUNTRIES, PHONE_POPOVER_VIEWPORT_GAP, type ParagraphBlock, type ParsePhoneOptions, type ParsedPhone, type PhoneCountry, type PhoneField, type PhonePopoverPlacement, type ProvisionWorkspaceResult, type PublishedForm, REQUIRED_FIELD_MESSAGE, type RankingField, type RatingField, type RepeatingGroupField, type RespondentErrorOverrides, type RespondentErrorStrings, type ResponseData, type ResponseDraft, type ResponseLimit, type SchemaValidationResult, type SelectOption, Sha1, type SignatureField, type SlotClass, type SlotState, type SubmitMeta, type SubmitResult, type SyncFormResult, type SyncedForm, type TextField, type TrustPolicy, type UploadFileOptions, type UploadProgress, type UploadSession, type UploadStatus, type UploadTransport, type ValidationResult, type WhenBuilder, allFields, assembleForm, codeFormFromJsx, computeCalculated, conditionsMet, contentHash, countryByDialCode, countryByIso, countryByTimeZone, createBlock, createClient, createEmptyForm, createFormController, createId, defineForm, digitsOnly, evaluateCalc, flagEmoji, formSchemasEqual, formatAnswer, formatGroupedNumber, formatNational, isAutoSubmitBlock, isBlockVisible, isBuildTimeDevEnv, isCodeForm, isField, isFilloError, isLikelyDevEnv, isPossiblePhone, isTerminalPage, isValidPartialNumberText, localeForNotation, needsExplicitSubmit, normalizeFormSchema, normalizeFormTheme, normalizeSettings, parseGroupedNumber, parsePhone, pipeBlock, positionPhonePopover, prefillFromParams, provisionWorkspace, radioGroupStep, reachableFieldIds, reachableFields, reachablePageIds, reachablePageSequence, requiredFieldMessage, resolveNextPage, resolveSlotClass, resolveStrings, resolveText, resolveThemeAppearance, respondentErrorStringsFor, responseScopeValue, schemaFromJsx, sha1Base64, shouldAutoSubmit, slotClass, syncCodeForm, toE164, validateField, validateFormSchema, validateResponse, visibleBlocks, visibleFields, visibleGroupChildren, visiblePageBlocks, when };

package/dist/index.js

@@ -737,15 +737,39 @@ var DEFAULT_STRINGS = {
   notOpenBody: "The form owner is still setting things up. Please check back soon.",
   closedTitle: "Responses are closed",
   submitFailed: "This form can't submit right now. Please try again in a moment.",
-  loadFailedNotFound: "Form not found \u2014 check the form id and that it's published.",
-  loadFailedNetwork: "Couldn't reach the server \u2014 check your connection or CORS.",
+  loadFailedNotFound: "Form not found. Check the link or ask the form owner for help.",
+  loadFailedNetwork: "Couldn't reach the server \u2014 check your connection and try again.",
   loadFailed: "This form could not be loaded.",
   renderFailed: "This form could not be rendered.",
   resumeNotice: "Picked up where you left off.",
   editNotice: "You're updating your earlier response.",
   resumeStartOver: "Start over",
-  challengeUnavailable: "The verification check couldn't load. Refresh the page, or check that challenges.cloudflare.com isn't blocked."
+  challengeUnavailable: "The verification check couldn't load. Refresh the page and try again."
 };
+var DEFAULT_RESPONDENT_ERROR_STRINGS = {
+  submitFailed: DEFAULT_STRINGS.submitFailed,
+  loadFailedNotFound: DEFAULT_STRINGS.loadFailedNotFound,
+  loadFailedNetwork: DEFAULT_STRINGS.loadFailedNetwork,
+  formUnavailable: "This form is unavailable.",
+  formClosed: DEFAULT_STRINGS.closed,
+  submitRateLimited: "Too many responses are being submitted right now. Wait a moment, then try again.",
+  respondentUnrecognized: "This form couldn't verify who is responding. Ask the form owner for help.",
+  fileUnavailable: "One of the uploaded files is no longer available. Remove it and upload it again.",
+  scopeMissing: "We couldn't tell which entry this response belongs to. Answer the required field and try again.",
+  challengeIncomplete: "Please complete the verification check, then submit.",
+  challengeRetry: "That verification didn't go through. Please complete the check again and resubmit.",
+  reviewAnswers: "We couldn't submit \u2014 please review your answers."
+};
+function respondentErrorStringsFor(strings) {
+  return {
+    ...DEFAULT_RESPONDENT_ERROR_STRINGS,
+    ...strings.respondentErrors,
+    submitFailed: strings.submitFailed,
+    loadFailedNotFound: strings.loadFailedNotFound,
+    loadFailedNetwork: strings.loadFailedNetwork,
+    formClosed: strings.closed
+  };
+}
 var REQUIRED_BY_KIND = {
   short_text: "Enter your answer",
   long_text: "Enter your answer",
@@ -1088,7 +1112,7 @@ var schemaShape = z2.object({
 });
 var MAX_SCHEMA_VERSION = 1;
 var FILLO_SCHEMA_VERSION = 1;
-var FILLO_SDK_VERSION = true ? "0.17.0" : "0.0.0-dev";
+var FILLO_SDK_VERSION = true ? "0.19.0" : "0.0.0-dev";
 var FILLO_MIN_SDK_VERSION = "0.4.0";
 var FILLO_CHALLENGE_MIN_SDK_VERSION = "0.9.0";
 var FILLO_CALC_MIN_SDK_VERSION = "0.11.0";
@@ -2520,7 +2544,7 @@ var FilloClient = class {
   /** Server origin this client targets, normalized (no trailing slash). */
   baseUrl;
   fetch;
-  /** Publishable workspace key, when configured. */
+  /** Publishable project key, when configured. */
   key;
   constructor(options2 = {}) {
     this.baseUrl = options2.baseUrl ? options2.baseUrl.replace(/\/$/, "") : options2.sameOrigin ? "" : DEFAULT_BASE_URL;
@@ -2556,7 +2580,7 @@ var FilloClient = class {
   }
   /**
    * Resolve a code-defined form through the workspace identified by the
-   * client's publishable key. Depending on workspace policy, changed content
+   * client's publishable key. Depending on project policy, changed content
    * may be staged for review or resolved to the authoritative live snapshot.
    * Returns the canonical form id used for submissions.
    */
@@ -2594,8 +2618,16 @@ var FilloClient = class {
       throw asRequestError(err);
     }
     if (res.status === 422) {
-      const body2 = await res.json();
-      return { ok: false, errors: body2.errors };
+      const body2 = await res.json().catch(() => null);
+      if (body2?.errors && typeof body2.errors === "object" && !Array.isArray(body2.errors)) {
+        return { ok: false, errors: body2.errors };
+      }
+      throw new FilloError(
+        typeof body2?.error === "string" && body2.error ? body2.error : "Submit failed: 422",
+        422,
+        retryAfterSec(res),
+        typeof body2?.code === "string" && body2.code ? body2.code : void 0
+      );
     }
     if (!res.ok) {
       const { message, code } = await errorDetails(res, `Submit failed: ${res.status}`);
@@ -2701,13 +2733,10 @@ var FilloClient = class {
   }
   /** Current state of an upload session — used to resume after interruption. */
   getUploadSession(sessionId, token, signal = AbortSignal.timeout(UPLOAD_CONTROL_TIMEOUT_MS)) {
-    return this.json(
-      `/uploads/${encodeURIComponent(sessionId)}`,
-      {
-        ...token ? { headers: { "X-Fillo-Upload-Token": token } } : {},
-        signal
-      }
-    );
+    return this.json(`/uploads/${encodeURIComponent(sessionId)}`, {
+      ...token ? { headers: { "X-Fillo-Upload-Token": token } } : {},
+      signal
+    });
   }
   /**
    * Provider-aware browser-direct upload. Creates a session, uses the storage
@@ -2738,21 +2767,18 @@ var FilloClient = class {
     } else {
       const requestId = createId(24);
       const requestToken = createId(32);
-      const createSession = () => this.json(
-        `/forms/${encodeURIComponent(formId)}/uploads`,
-        {
-          method: "POST",
-          body: JSON.stringify({
-            requestId,
-            uploadToken: requestToken,
-            fieldId: options2.fieldId,
-            fileName: name,
-            size: file.size,
-            mime
-          }),
-          signal: this.uploadSignal(options2, UPLOAD_CONTROL_TIMEOUT_MS)
-        }
-      );
+      const createSession = () => this.json(`/forms/${encodeURIComponent(formId)}/uploads`, {
+        method: "POST",
+        body: JSON.stringify({
+          requestId,
+          uploadToken: requestToken,
+          fieldId: options2.fieldId,
+          fileName: name,
+          size: file.size,
+          mime
+        }),
+        signal: this.uploadSignal(options2, UPLOAD_CONTROL_TIMEOUT_MS)
+      });
       const deadline = Date.now() + UPLOAD_CONTROL_TIMEOUT_MS;
       let backoffMs = 250;
       for (; ; ) {
@@ -2764,10 +2790,7 @@ var FilloClient = class {
           if (!isControlRetryable(error, true)) throw error;
           const remaining = deadline - Date.now();
           if (remaining <= 0) throw error;
-          await waitForRetry(
-            Math.min(backoffMs, remaining),
-            options2.signal
-          );
+          await waitForRetry(Math.min(backoffMs, remaining), options2.signal);
           backoffMs = Math.min(backoffMs * 2, 5e3);
         }
       }
@@ -2777,7 +2800,8 @@ var FilloClient = class {
       uploadToken: session.token
     });
     if (session.status === "complete" && session.file) return session.file;
-    if (session.status === "aborted") throw new FilloError("This upload session was cancelled", 409);
+    if (session.status === "aborted")
+      throw new FilloError("This upload session was cancelled", 409);
     let completeBody;
     if (session.transport?.type === "gdrive") {
       await this.driveUploadLoop(session, session.transport.uploadUrl, file, options2);
@@ -2788,17 +2812,16 @@ var FilloClient = class {
     } else if (session.transport?.type === "box") {
       completeBody = await this.boxUpload(session.transport, file, options2);
     } else {
-      throw new FilloError("This form's storage doesn't support uploads \u2014 connect Drive, S3, or Box.");
+      throw new FilloError(
+        "This form's storage doesn't support uploads \u2014 connect Drive, S3, or Box."
+      );
     }
-    const finalize = () => this.json(
-      `/uploads/${encodeURIComponent(session.id)}/complete`,
-      {
-        method: "POST",
-        headers: session.token ? { "X-Fillo-Upload-Token": session.token } : void 0,
-        ...completeBody ? { body: JSON.stringify(completeBody) } : {},
-        signal: this.uploadSignal(options2, UPLOAD_CONTROL_TIMEOUT_MS)
-      }
-    );
+    const finalize = () => this.json(`/uploads/${encodeURIComponent(session.id)}/complete`, {
+      method: "POST",
+      headers: session.token ? { "X-Fillo-Upload-Token": session.token } : void 0,
+      ...completeBody ? { body: JSON.stringify(completeBody) } : {},
+      signal: this.uploadSignal(options2, UPLOAD_CONTROL_TIMEOUT_MS)
+    });
     let done;
     try {
       done = await finalize();
@@ -2811,10 +2834,7 @@ var FilloClient = class {
         const reconciled = await this.getUploadSession(
           session.id,
           session.token,
-          this.uploadSignal(
-            options2,
-            Math.max(1, deadline - Date.now())
-          )
+          this.uploadSignal(options2, Math.max(1, deadline - Date.now()))
         );
         if (reconciled.status === "complete" && reconciled.file) {
           return reconciled.file;
@@ -2829,10 +2849,7 @@ var FilloClient = class {
         }
         const remaining = deadline - Date.now();
         if (remaining <= 0) throw error;
-        await waitForRetry(
-          Math.min(backoffMs, remaining),
-          options2.signal
-        );
+        await waitForRetry(Math.min(backoffMs, remaining), options2.signal);
         backoffMs = Math.min(backoffMs * 2, 5e3);
       }
     }
@@ -2894,7 +2911,8 @@ var FilloClient = class {
         throw new FilloError(`Box session failed: ${r.status}`, r.status);
       return r;
     });
-    if (!sessionRes.ok) throw new FilloError(`Box session failed: ${sessionRes.status}`, sessionRes.status);
+    if (!sessionRes.ok)
+      throw new FilloError(`Box session failed: ${sessionRes.status}`, sessionRes.status);
     const session = await sessionRes.json();
     const whole = new Sha1();
     const parts = [];
@@ -2929,7 +2947,11 @@ var FilloClient = class {
     const commitRes = await this.retry(options2, async () => {
       const r = await this.fetch(session.session_endpoints.commit, {
         method: "POST",
-        headers: { ...auth, "Content-Type": "application/json", Digest: `sha=${bytesToBase64(whole.digest())}` },
+        headers: {
+          ...auth,
+          "Content-Type": "application/json",
+          Digest: `sha=${bytesToBase64(whole.digest())}`
+        },
         body: JSON.stringify({ parts }),
         signal: this.uploadSignal(options2)
       });
@@ -2937,7 +2959,8 @@ var FilloClient = class {
         throw new FilloError(`Box commit failed: ${r.status}`, r.status);
       return r;
     });
-    if (!commitRes.ok) throw new FilloError(`Box commit failed: ${commitRes.status}`, commitRes.status);
+    if (!commitRes.ok)
+      throw new FilloError(`Box commit failed: ${commitRes.status}`, commitRes.status);
     const committed = await commitRes.json();
     return { providerFileId: committed.entries?.[0]?.id };
   }
@@ -3029,7 +3052,10 @@ var FilloClient = class {
       report(offset);
       if (offset <= startedAt) {
         if (++stalls >= MAX_CHUNK_RETRIES) {
-          throw new FilloError("Drive upload stalled \u2014 the storage endpoint stopped accepting progress", 0);
+          throw new FilloError(
+            "Drive upload stalled \u2014 the storage endpoint stopped accepting progress",
+            0
+          );
         }
       } else {
         stalls = 0;
@@ -3247,7 +3273,7 @@ function warnNoFormId() {
   if (warnedNoFormId) return;
   warnedNoFormId = true;
   console.warn(
-    "[fillo] This form has a client but no submission target \u2014 a bare schema can't sync. Wrap it in defineForm({ id, pages }) (or author it with <Fillo.Form id=\u2026>) so it gets a workspace handle, or pass formId for a dashboard-built form: https://fillo.so/docs"
+    "[fillo] This form has a client but no submission target \u2014 a bare schema can't sync. Wrap it in defineForm({ id, pages }) (or author it with <Fillo.Form id=\u2026>) so it gets a project handle, or pass formId for a dashboard-built form: https://fillo.so/docs"
   );
 }
 function warnNoClient() {
@@ -3357,25 +3383,45 @@ function isDraftGone(err) {
   return isFilloError(err) && (err.status === 401 || err.status === 403 || err.status === 404);
 }
 var DRAFT_DEBOUNCE_MS = 1500;
-var CHALLENGE_INCOMPLETE_MESSAGE = "Please complete the verification check, then submit.";
-var CHALLENGE_RETRY_MESSAGE = "That verification didn't go through. Please complete the check again and resubmit.";
-function submitFailureMessage(err) {
-  if (isFilloError(err) && err.status && err.status > 0 && err.message) return err.message;
-  return "Couldn't reach the server \u2014 check your connection and try again. If this keeps happening, a browser extension, firewall, or the site's Content-Security-Policy may be blocking the request.";
-}
-function syncResolutionFailureMessage(err, verbose) {
+function submitFailureMessage(err, strings) {
+  if (isFilloError(err)) {
+    const status = err.status ?? 0;
+    if (status === 404) return strings.loadFailedNotFound;
+    switch (err.code) {
+      case "submit_rate_limited":
+        return strings.submitRateLimited;
+      case "workspace_unavailable":
+      case "provision_closed":
+        return strings.formClosed;
+      case "respondent_unrecognized":
+        return strings.respondentUnrecognized;
+      case "invalid_file_reference":
+        return strings.fileUnavailable;
+      case "response_scope_missing":
+        return strings.scopeMissing;
+    }
+    if (status > 0) return strings.submitFailed;
+  }
+  return strings.loadFailedNetwork;
+}
+function syncResolutionFailureMessage(err, verbose, strings) {
   if (isFilloError(err)) {
     const status = err.status ?? 0;
     if (verbose && status > 0 && err.message) {
       return err.code ? `${err.message} (${err.code})` : err.message;
     }
     const definitive = status > 0 && status < 500 && status !== 408 && status !== 429;
-    if (definitive) return "This form is unavailable.";
+    if (definitive) return strings.formUnavailable;
+    if (status > 0) return strings.submitFailed;
   }
-  return submitFailureMessage(err);
+  return submitFailureMessage(err, strings);
 }
 function createFormController(options2) {
   const { onChange, onSubmitted } = options2;
+  let respondentErrorStrings = {
+    ...DEFAULT_RESPONDENT_ERROR_STRINGS,
+    ...options2.respondentErrorStrings
+  };
   const initial = normalizeFormSchema(options2.form);
   if (!initial.ok) throw new Error(`Invalid form schema: ${initial.error}`);
   let form = initial.schema;
@@ -3604,7 +3650,12 @@ function createFormController(options2) {
       try {
         if (ref) {
           try {
-            await c.saveDraft(ref.id, ref.token, payload, keepalive ? { keepalive: true } : void 0);
+            await c.saveDraft(
+              ref.id,
+              ref.token,
+              payload,
+              keepalive ? { keepalive: true } : void 0
+            );
             draftRef = ref;
             return;
           } catch (err) {
@@ -3772,7 +3823,8 @@ function createFormController(options2) {
         status = "idle";
         submitError = syncResolutionFailureMessage(
           err,
-          options2.verboseResolutionErrors === true
+          options2.verboseResolutionErrors === true,
+          respondentErrorStrings
         );
         notify();
         throw err;
@@ -3785,7 +3837,7 @@ function createFormController(options2) {
       const challengeToken = options2.challengeRequired ? options2.getChallengeToken?.() : void 0;
       if (options2.challengeRequired && !challengeToken) {
         status = "idle";
-        submitError = CHALLENGE_INCOMPLETE_MESSAGE;
+        submitError = respondentErrorStrings.challengeIncomplete;
         notify();
         return;
       }
@@ -3807,12 +3859,12 @@ function createFormController(options2) {
       } catch (err) {
         status = "idle";
         if (isFilloError(err) && err.code === "challenge_failed") {
-          submitError = CHALLENGE_RETRY_MESSAGE;
+          submitError = respondentErrorStrings.challengeRetry;
           options2.onChallengeFailed?.();
           notify();
           return;
         }
-        submitError = submitFailureMessage(err);
+        submitError = submitFailureMessage(err, respondentErrorStrings);
         notify();
         throw err;
       }
@@ -3822,14 +3874,15 @@ function createFormController(options2) {
           (p) => visiblePageBlocks(form, p, data).some((b) => b.id in errors)
         );
         if (firstBad >= 0) pageIndex = firstBad;
-        else submitError = "We couldn't submit \u2014 please review your answers.";
+        else submitError = respondentErrorStrings.reviewAnswers;
         status = "idle";
         notify();
         return;
       }
       submissionKind = res.duplicate ? "duplicate" : res.updated ? "updated" : "created";
       if (sessionId) client.reportProgress(sessionId, { completed: true });
-      if (visitorKey) markSubmitted(visitorSubmissionKeyId(form, formId, result.data), res.responseId);
+      if (visitorKey)
+        markSubmitted(visitorSubmissionKeyId(form, formId, result.data), res.responseId);
       discardDraftState();
       status = "submitted";
       notify();
@@ -3864,6 +3917,12 @@ function createFormController(options2) {
       if ("formId" in ctx) formId = ctx.formId;
       if ("client" in ctx) client = ctx.client;
       if ("respondent" in ctx) respondent = ctx.respondent;
+      if (ctx.respondentErrorStrings) {
+        respondentErrorStrings = {
+          ...DEFAULT_RESPONDENT_ERROR_STRINGS,
+          ...ctx.respondentErrorStrings
+        };
+      }
       if (ctx.form && ctx.form !== form) {
         const next2 = normalizeFormSchema(ctx.form);
         if (!next2.ok) throw new Error(`Invalid form schema: ${next2.error}`);
@@ -4073,7 +4132,9 @@ function relativeLuminance(token) {
   return 0.2126 * srgbToLinear(r) + 0.7152 * srgbToLinear(g) + 0.0722 * srgbToLinear(b);
 }
 function resolveThemeAppearance(theme) {
-  if (!theme || theme.colorScheme || !theme.background || !theme.text) return theme;
+  if (!theme || theme.colorScheme === "light" || theme.colorScheme === "dark" || !theme.background) {
+    return theme;
+  }
   const luminance = relativeLuminance(theme.background);
   if (luminance == null) return theme;
   return { ...theme, colorScheme: luminance > DARK_LUMINANCE_THRESHOLD ? "light" : "dark" };
@@ -4140,14 +4201,14 @@ var isVolatileSync = (result) => Boolean(
   result.staged || result.resolvedSchema || result.syncError || result.accepting === false || result.uploadsAvailable === false
 );
 function storageKey(client, handle) {
-  return `fillo:sync:v4:${client.baseUrl}|${client.key}|${handle}`;
+  return `fillo:sync:v5:${client.baseUrl}|${client.key}|${handle}`;
 }
 function readStoredSync(client, handle, hash) {
   try {
     const raw = globalThis.localStorage?.getItem(storageKey(client, handle));
     if (!raw) return null;
     const parsed = JSON.parse(raw);
-    if (typeof parsed.formId !== "string" || typeof parsed.slug !== "string" || parsed.hash !== hash || typeof parsed.ts !== "number" || parsed.uploadFileSizeLimitMb !== void 0 && (typeof parsed.uploadFileSizeLimitMb !== "number" || !Number.isFinite(parsed.uploadFileSizeLimitMb) || parsed.uploadFileSizeLimitMb <= 0) || parsed.status !== void 0 && parsed.status !== "draft" && parsed.status !== "published")
+    if (typeof parsed.formId !== "string" || typeof parsed.slug !== "string" || parsed.hash !== hash || typeof parsed.ts !== "number" || parsed.uploadFileSizeLimitMb !== void 0 && (typeof parsed.uploadFileSizeLimitMb !== "number" || !Number.isFinite(parsed.uploadFileSizeLimitMb) || parsed.uploadFileSizeLimitMb <= 0) || parsed.manageUrl !== void 0 && typeof parsed.manageUrl !== "string" || parsed.status !== void 0 && parsed.status !== "draft" && parsed.status !== "published")
       return null;
     const ttl = syncTtlMs(parsed.status);
     if (Date.now() - parsed.ts > ttl) return null;
@@ -4165,6 +4226,7 @@ function writeStoredSync(client, handle, hash, r) {
       JSON.stringify({
         formId: r.formId,
         slug: r.slug,
+        manageUrl: r.manageUrl,
         status: r.status,
         uploadFileSizeLimitMb: r.uploadFileSizeLimitMb,
         hash,
@@ -4193,6 +4255,7 @@ function syncCodeForm(client, form, opts) {
       const promise2 = Promise.resolve({
         formId: stored.formId,
         slug: stored.slug,
+        manageUrl: stored.manageUrl,
         status: stored.status,
         uploadFileSizeLimitMb: stored.uploadFileSizeLimitMb
       });
@@ -4634,6 +4697,7 @@ export {
   BLOCK_KIND_META,
   CONTENT_KINDS,
   DEFAULT_FIELD_STRINGS,
+  DEFAULT_RESPONDENT_ERROR_STRINGS,
   DEFAULT_STRINGS,
   DRAFT_KINDS,
   FILLO_CALC_MIN_SDK_VERSION,
@@ -4709,6 +4773,7 @@ export {
   resolveStrings,
   resolveText,
   resolveThemeAppearance,
+  respondentErrorStringsFor,
   responseScopeValue,
   schemaFromJsx,
   sha1Base64,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usefillo/core",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Form schema, validation, logic engine and JS client for Fillo. Framework-agnostic.",
   "license": "MIT",
   "keywords": [