attaform 0.20.0 → 0.20.2

package/dist/shared/{attaform.EZG6fOFb.mjs → attaform.CnrxbkB6.mjs}

@@ -1,4 +1,4 @@
-import { r as getRegistryFromApp, C as pathKeyToDotted } from './attaform.BKozEdTr.mjs';
+import { s as getRegistryFromApp, E as pathKeyToDotted } from './attaform.QG5TG8lB.mjs';
 
 function renderAttaformState(app) {
   const registry = getRegistryFromApp(app);
@@ -32,4 +32,4 @@ function hydrateAttaformState(app, payload) {
 const DEVTOOLS_WINDOW_KEY = "__attaform_devtools__";
 
 export { DEVTOOLS_WINDOW_KEY as D, hydrateAttaformState as h, renderAttaformState as r };
-//# sourceMappingURL=attaform.EZG6fOFb.mjs.map
+//# sourceMappingURL=attaform.CnrxbkB6.mjs.map

package/dist/shared/{attaform.EZG6fOFb.mjs.map → attaform.CnrxbkB6.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"attaform.EZG6fOFb.mjs","sources":["../../src/runtime/core/serialize.ts","../../src/runtime/core/devtools-shared.ts"],"sourcesContent":["import type { App } from 'vue'\nimport type { FormKey } from '../types/types-api'\nimport { pathKeyToDotted, type PathKey } from './paths'\nimport { getRegistryFromApp, type SerializedFormData } from './registry'\n\n/**\n * Serialised snapshot of every form in a Vue app, produced by\n * `renderAttaformState` and consumed by `hydrateAttaformState`.\n *\n * JSON-safe — pass to `JSON.stringify`, `devalue`, or any other\n * serialiser before embedding in your SSR payload.\n */\nexport type SerializedAttaformState = {\n  /** Tuples of `[formKey, snapshot]` for every form in the app. */\n  readonly forms: ReadonlyArray<readonly [FormKey, SerializedFormData]>\n}\n\n/**\n * Snapshot every form on a Vue app for SSR. Call from your server\n * entry after rendering the app:\n *\n * ```ts\n * import { renderToString } from '@vue/server-renderer'\n * import { renderAttaformState, escapeForInlineScript } from 'attaform'\n *\n * const html = await renderToString(app)\n * const state = renderAttaformState(app)\n * const payload = escapeForInlineScript(JSON.stringify(state))\n *\n * return `\n *   ${html}\n *   <script>window.__ATTAFORM_STATE__ = ${payload}</script>\n * `\n * ```\n *\n * Pair with `hydrateAttaformState` on the client to restore the\n * forms in their server-rendered state. Nuxt users don't need this —\n * `attaform/nuxt` wires SSR automatically.\n */\nexport function renderAttaformState(app: App): SerializedAttaformState {\n  const registry = getRegistryFromApp(app)\n  const forms: Array<readonly [FormKey, SerializedFormData]> = []\n  for (const [key, state] of registry.forms) {\n    // Skip the blank field when the set is empty so the\n    // wire payload stays minimal for forms that don't use it. The\n    // optional shape on the consuming side handles the absence\n    // cleanly (defaults to \"no blank paths\"). PathKey → dotted at\n    // the boundary so the wire shape matches the rest of the\n    // public path notation.\n    const transientList: string[] = []\n    for (const pk of state.blankPaths) {\n      const d = pathKeyToDotted(pk as PathKey)\n      if (d !== null) transientList.push(d)\n    }\n    forms.push([\n      key,\n      {\n        form: state.form.value,\n        schemaErrors: Array.from(state.schemaErrors.entries()),\n        userErrors: Array.from(state.userErrors.entries()),\n        fields: Array.from(state.fields.entries()),\n        ...(transientList.length > 0 ? { blankPaths: transientList } : {}),\n      },\n    ])\n  }\n  return { forms }\n}\n\n/**\n * Restore forms from a server-rendered snapshot on the client. Call\n * from your client entry before mounting:\n *\n * ```ts\n * import { createApp } from 'vue'\n * import { createAttaform, hydrateAttaformState } from 'attaform'\n *\n * const app = createApp(App).use(createAttaform())\n * hydrateAttaformState(app, window.__ATTAFORM_STATE__)\n * app.mount('#app')\n * ```\n *\n * The next `useForm({ key })` call for each serialised form picks up\n * the snapshot transparently — no further action is required.\n */\nexport function hydrateAttaformState(app: App, payload: SerializedAttaformState): void {\n  const registry = getRegistryFromApp(app)\n  for (const [key, data] of payload.forms) {\n    registry.pendingHydration.set(key, data)\n  }\n}\n","/**\n * Shared building blocks for Attaform's two devtools surfaces — the Vue\n * DevTools (Chrome-extension) inspector wired up in `./devtools.ts`, and\n * the Nuxt DevTools (overlay) panel wired up via `../../nuxt.ts` +\n * `../pages/_attaform_devtools.vue`.\n *\n * Houses the window-bridge contract both surfaces consume so a new\n * bridge field lands in one file. Both surfaces render RAW form values\n * by design — DevTools is a dev-only surface, and redaction across every\n * place a value surfaces is impractical security theater rather than a\n * real safeguard.\n */\nimport type { AttaformRegistry } from './registry'\n\n/**\n * Property key on `window` that the Nuxt-side dev plugin attaches the\n * bridge object to. The iframe-mounted overlay panel reads\n * `window.parent[DEVTOOLS_WINDOW_KEY]` to reach the host app's registry.\n *\n * Underscored + namespaced to make accidental collision with consumer\n * globals vanishingly unlikely. Stable across versions — bumping it\n * would silently disconnect older library builds from newer overlay\n * panels in the same browser tab during a library upgrade.\n */\nexport const DEVTOOLS_WINDOW_KEY = '__attaform_devtools__'\n\n/**\n * Shape of the object the host plugin attaches to `window` in dev mode.\n * The iframe overlay panel reads this to discover the live registry and\n * render its forms.\n *\n * Single-registry assumption: the latest `createAttaform()` install\n * wins. Multi-app pages (rare; typically only seen in micro-frontend\n * setups) will only see one app's forms in the panel. Documented but\n * not actively supported — the alternative (a Set of registries with\n * union-rendering) is a future call if a real consumer hits it.\n */\nexport interface AttaformDevtoolsBridge {\n  registry: AttaformRegistry\n  /**\n   * The library version, surfaced in the panel's footer for support /\n   * bug-report context. Read from `package.json` at host-plugin init.\n   */\n  version: string\n}\n\ndeclare global {\n  interface Window {\n    [DEVTOOLS_WINDOW_KEY]?: AttaformDevtoolsBridge\n  }\n}\n"],"names":[],"mappings":";;AAuCO,SAAS,oBAAoB,GAAA,EAAmC;AACrE,EAAA,MAAM,QAAA,GAAW,mBAAmB,GAAG,CAAA;AACvC,EAAA,MAAM,QAAuD,EAAC;AAC9D,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,SAAS,KAAA,EAAO;AAOzC,IAAA,MAAM,gBAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,MAAM,UAAA,EAAY;AACjC,MAAA,MAAM,CAAA,GAAI,gBAAgB,EAAa,CAAA;AACvC,MAAA,IAAI,CAAA,KAAM,IAAA,EAAM,aAAA,CAAc,IAAA,CAAK,CAAC,CAAA;AAAA,IACtC;AACA,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,GAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,MAAM,IAAA,CAAK,KAAA;AAAA,QACjB,cAAc,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,SAAS,CAAA;AAAA,QACrD,YAAY,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,SAAS,CAAA;AAAA,QACjD,QAAQ,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,SAAS,CAAA;AAAA,QACzC,GAAI,cAAc,MAAA,GAAS,CAAA,GAAI,EAAE,UAAA,EAAY,aAAA,KAAkB;AAAC;AAClE,KACD,CAAA;AAAA,EACH;AACA,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAkBO,SAAS,oBAAA,CAAqB,KAAU,OAAA,EAAwC;AACrF,EAAA,MAAM,QAAA,GAAW,mBAAmB,GAAG,CAAA;AACvC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,CAAA,IAAK,QAAQ,KAAA,EAAO;AACvC,IAAA,QAAA,CAAS,gBAAA,CAAiB,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAAA,EACzC;AACF;;ACjEO,MAAM,mBAAA,GAAsB;;;;"}
+{"version":3,"file":"attaform.CnrxbkB6.mjs","sources":["../../src/runtime/core/serialize.ts","../../src/runtime/core/devtools-shared.ts"],"sourcesContent":["import type { App } from 'vue'\nimport type { FormKey } from '../types/types-api'\nimport { pathKeyToDotted, type PathKey } from './paths'\nimport { getRegistryFromApp, type SerializedFormData } from './registry'\n\n/**\n * Serialised snapshot of every form in a Vue app, produced by\n * `renderAttaformState` and consumed by `hydrateAttaformState`.\n *\n * JSON-safe — pass to `JSON.stringify`, `devalue`, or any other\n * serialiser before embedding in your SSR payload.\n */\nexport type SerializedAttaformState = {\n  /** Tuples of `[formKey, snapshot]` for every form in the app. */\n  readonly forms: ReadonlyArray<readonly [FormKey, SerializedFormData]>\n}\n\n/**\n * Snapshot every form on a Vue app for SSR. Call from your server\n * entry after rendering the app:\n *\n * ```ts\n * import { renderToString } from '@vue/server-renderer'\n * import { renderAttaformState, escapeForInlineScript } from 'attaform'\n *\n * const html = await renderToString(app)\n * const state = renderAttaformState(app)\n * const payload = escapeForInlineScript(JSON.stringify(state))\n *\n * return `\n *   ${html}\n *   <script>window.__ATTAFORM_STATE__ = ${payload}</script>\n * `\n * ```\n *\n * Pair with `hydrateAttaformState` on the client to restore the\n * forms in their server-rendered state. Nuxt users don't need this —\n * `attaform/nuxt` wires SSR automatically.\n */\nexport function renderAttaformState(app: App): SerializedAttaformState {\n  const registry = getRegistryFromApp(app)\n  const forms: Array<readonly [FormKey, SerializedFormData]> = []\n  for (const [key, state] of registry.forms) {\n    // Skip the blank field when the set is empty so the\n    // wire payload stays minimal for forms that don't use it. The\n    // optional shape on the consuming side handles the absence\n    // cleanly (defaults to \"no blank paths\"). PathKey → dotted at\n    // the boundary so the wire shape matches the rest of the\n    // public path notation.\n    const transientList: string[] = []\n    for (const pk of state.blankPaths) {\n      const d = pathKeyToDotted(pk as PathKey)\n      if (d !== null) transientList.push(d)\n    }\n    forms.push([\n      key,\n      {\n        form: state.form.value,\n        schemaErrors: Array.from(state.schemaErrors.entries()),\n        userErrors: Array.from(state.userErrors.entries()),\n        fields: Array.from(state.fields.entries()),\n        ...(transientList.length > 0 ? { blankPaths: transientList } : {}),\n      },\n    ])\n  }\n  return { forms }\n}\n\n/**\n * Restore forms from a server-rendered snapshot on the client. Call\n * from your client entry before mounting:\n *\n * ```ts\n * import { createApp } from 'vue'\n * import { createAttaform, hydrateAttaformState } from 'attaform'\n *\n * const app = createApp(App).use(createAttaform())\n * hydrateAttaformState(app, window.__ATTAFORM_STATE__)\n * app.mount('#app')\n * ```\n *\n * The next `useForm({ key })` call for each serialised form picks up\n * the snapshot transparently — no further action is required.\n */\nexport function hydrateAttaformState(app: App, payload: SerializedAttaformState): void {\n  const registry = getRegistryFromApp(app)\n  for (const [key, data] of payload.forms) {\n    registry.pendingHydration.set(key, data)\n  }\n}\n","/**\n * Shared building blocks for Attaform's two devtools surfaces — the Vue\n * DevTools (Chrome-extension) inspector wired up in `./devtools.ts`, and\n * the Nuxt DevTools (overlay) panel wired up via `../../nuxt.ts` +\n * `../pages/_attaform_devtools.vue`.\n *\n * Houses the window-bridge contract both surfaces consume so a new\n * bridge field lands in one file. Both surfaces render RAW form values\n * by design — DevTools is a dev-only surface, and redaction across every\n * place a value surfaces is impractical security theater rather than a\n * real safeguard.\n */\nimport type { AttaformRegistry } from './registry'\n\n/**\n * Property key on `window` that the Nuxt-side dev plugin attaches the\n * bridge object to. The iframe-mounted overlay panel reads\n * `window.parent[DEVTOOLS_WINDOW_KEY]` to reach the host app's registry.\n *\n * Underscored + namespaced to make accidental collision with consumer\n * globals vanishingly unlikely. Stable across versions — bumping it\n * would silently disconnect older library builds from newer overlay\n * panels in the same browser tab during a library upgrade.\n */\nexport const DEVTOOLS_WINDOW_KEY = '__attaform_devtools__'\n\n/**\n * Shape of the object the host plugin attaches to `window` in dev mode.\n * The iframe overlay panel reads this to discover the live registry and\n * render its forms.\n *\n * Single-registry assumption: the latest `createAttaform()` install\n * wins. Multi-app pages (rare; typically only seen in micro-frontend\n * setups) will only see one app's forms in the panel. Documented but\n * not actively supported — the alternative (a Set of registries with\n * union-rendering) is a future call if a real consumer hits it.\n */\nexport interface AttaformDevtoolsBridge {\n  registry: AttaformRegistry\n  /**\n   * The library version, surfaced in the panel's footer for support /\n   * bug-report context. Read from `package.json` at host-plugin init.\n   */\n  version: string\n}\n\ndeclare global {\n  interface Window {\n    [DEVTOOLS_WINDOW_KEY]?: AttaformDevtoolsBridge\n  }\n}\n"],"names":[],"mappings":";;AAuCO,SAAS,oBAAoB,GAAA,EAAmC;AACrE,EAAA,MAAM,QAAA,GAAW,mBAAmB,GAAG,CAAA;AACvC,EAAA,MAAM,QAAuD,EAAC;AAC9D,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,SAAS,KAAA,EAAO;AAOzC,IAAA,MAAM,gBAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,MAAM,UAAA,EAAY;AACjC,MAAA,MAAM,CAAA,GAAI,gBAAgB,EAAa,CAAA;AACvC,MAAA,IAAI,CAAA,KAAM,IAAA,EAAM,aAAA,CAAc,IAAA,CAAK,CAAC,CAAA;AAAA,IACtC;AACA,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,GAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,MAAM,IAAA,CAAK,KAAA;AAAA,QACjB,cAAc,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,SAAS,CAAA;AAAA,QACrD,YAAY,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,SAAS,CAAA;AAAA,QACjD,QAAQ,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,SAAS,CAAA;AAAA,QACzC,GAAI,cAAc,MAAA,GAAS,CAAA,GAAI,EAAE,UAAA,EAAY,aAAA,KAAkB;AAAC;AAClE,KACD,CAAA;AAAA,EACH;AACA,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAkBO,SAAS,oBAAA,CAAqB,KAAU,OAAA,EAAwC;AACrF,EAAA,MAAM,QAAA,GAAW,mBAAmB,GAAG,CAAA;AACvC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,CAAA,IAAK,QAAQ,KAAA,EAAO;AACvC,IAAA,QAAA,CAAS,gBAAA,CAAiB,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAAA,EACzC;AACF;;ACjEO,MAAM,mBAAA,GAAsB;;;;"}

package/dist/shared/{attaform.DL4CQ-oW.cjs → attaform.CwLjUqmQ.cjs}

@@ -1,7 +1,30 @@
 'use strict';
 
 const vue = require('vue');
-const paths = require('./attaform.BPy-4qRx.cjs');
+const paths = require('./attaform.z5j3LwJz.cjs');
+
+function safeAssign(target, key, value) {
+  if (key === "__proto__") {
+    Object.defineProperty(target, key, {
+      value,
+      writable: true,
+      enumerable: true,
+      configurable: true
+    });
+    return;
+  }
+  target[key] = value;
+}
+function safeOwnRead(target, key) {
+  if (key === "__proto__") {
+    const desc = Object.getOwnPropertyDescriptor(target, "__proto__");
+    return desc?.value;
+  }
+  return target[key];
+}
+function safeOwnHas(target, key) {
+  return Object.prototype.hasOwnProperty.call(target, key);
+}
 
 const NOT_FOUND = Symbol("NOT_FOUND");
 function descendStep(value, segment) {
@@ -64,8 +87,8 @@ function setAtPathOffset(root, path, value, offset) {
     arr[head] = setAtPathOffset(arr[head], path, value, nextOffset);
     return arr;
   }
-  const rec = isPlainRecord(root) ? Object.assign(/* @__PURE__ */ Object.create(null), root) : /* @__PURE__ */ Object.create(null);
-  rec[head] = setAtPathOffset(rec[head], path, value, nextOffset);
+  const rec = isPlainRecord(root) ? { ...root } : {};
+  safeAssign(rec, head, setAtPathOffset(safeOwnRead(rec, head), path, value, nextOffset));
   return rec;
 }
 function deleteAtPath(root, path) {
@@ -94,9 +117,9 @@ function deleteAtPathOffset(root, path, offset) {
     delete rec2[head];
     return rec2;
   }
-  if (!(head in root)) return root;
+  if (!safeOwnHas(root, head)) return root;
   const rec = { ...root };
-  rec[head] = deleteAtPathOffset(rec[head], path, nextOffset);
+  safeAssign(rec, head, deleteAtPathOffset(safeOwnRead(rec, head), path, nextOffset));
   return rec;
 }
 function resolveArrayShape(schema, scratch) {
@@ -165,27 +188,27 @@ function mergeStructuralImpl(schema, scratch, consumer, defaultValue) {
       return consumer;
     }
     let mutated = false;
-    const out = Object.assign(/* @__PURE__ */ Object.create(null), consumer);
+    const out = { ...consumer };
     for (const key of Object.keys(defaultValue)) {
-      if (!(key in consumer)) {
-        const defAtKey = defaultValue[key];
+      if (!safeOwnHas(consumer, key)) {
+        const defAtKey = safeOwnRead(defaultValue, key);
         scratch.push(key);
         const filled = mergeStructuralImpl(schema, scratch, void 0, defAtKey);
         scratch.pop();
         if (filled !== void 0) {
-          out[key] = filled;
+          safeAssign(out, key, filled);
           mutated = true;
         }
       }
     }
     for (const key of Object.keys(consumer)) {
-      const cVal = consumer[key];
+      const cVal = safeOwnRead(consumer, key);
       if (cVal === void 0) continue;
       scratch.push(key);
-      const merged = mergeStructuralImpl(schema, scratch, cVal, defaultValue[key]);
+      const merged = mergeStructuralImpl(schema, scratch, cVal, safeOwnRead(defaultValue, key));
       scratch.pop();
       if (merged !== cVal) {
-        out[key] = merged;
+        safeAssign(out, key, merged);
         mutated = true;
       }
     }
@@ -379,7 +402,8 @@ function applyChangedKeys(target, source) {
     }
     for (const k of changedFirstSegments) {
       if (typeof k === "symbol") continue;
-      t[String(k)] = s[String(k)];
+      const key = String(k);
+      safeAssign(t, key, safeOwnRead(s, key));
     }
   }
   return true;
@@ -429,9 +453,9 @@ function structuralSnapshot(value) {
     return out2;
   }
   const src = value;
-  const out = /* @__PURE__ */ Object.create(null);
+  const out = {};
   for (const k of Object.keys(src)) {
-    out[k] = structuralSnapshot(src[k]);
+    safeAssign(out, k, structuralSnapshot(safeOwnRead(src, k)));
   }
   return out;
 }
@@ -1095,7 +1119,7 @@ function errorAwareContainerKeys(state, segments) {
 }
 function materializeErrors(state, containerSegments) {
   const liveContainer = getAtPath(state.form.value, containerSegments);
-  const tree = Array.isArray(liveContainer) ? [] : /* @__PURE__ */ Object.create(null);
+  const tree = Array.isArray(liveContainer) ? [] : {};
   const collect = (store, applyActivePathFilter) => {
     entries: for (const [pathKey, errors] of store) {
       if (errors.length === 0) continue;
@@ -1143,18 +1167,18 @@ function placeAt(tree, path, errors) {
     const nextSeg = path[i + 1];
     const key = typeof seg === "number" ? String(seg) : seg;
     const cursorRecord2 = cursor;
-    let child = cursorRecord2[key];
+    let child = safeOwnRead(cursorRecord2, key);
     if (child === null || child === void 0 || typeof child !== "object") {
-      child = typeof nextSeg === "number" ? [] : /* @__PURE__ */ Object.create(null);
-      cursorRecord2[key] = child;
+      child = typeof nextSeg === "number" ? [] : {};
+      safeAssign(cursorRecord2, key, child);
     }
     cursor = child;
   }
   const lastSeg = path[path.length - 1];
   const lastKey = typeof lastSeg === "number" ? String(lastSeg) : lastSeg;
   const cursorRecord = cursor;
-  const existing = cursorRecord[lastKey];
-  cursorRecord[lastKey] = Array.isArray(existing) ? [...existing, ...errors] : errors;
+  const existing = safeOwnRead(cursorRecord, lastKey);
+  safeAssign(cursorRecord, lastKey, Array.isArray(existing) ? [...existing, ...errors] : errors);
 }
 
 function buildFieldArrayApi(state) {
@@ -1550,10 +1574,10 @@ function stripUnacknowledgedSensitiveLeaves(form, optedInPaths, isSensitivePath)
     if (value === null || typeof value !== "object") return value;
     if (Array.isArray(value)) return value.map((item, i) => walk([...path, i], item));
     if (!isPlainRecord(value)) return value;
-    const out = /* @__PURE__ */ Object.create(null);
+    const out = {};
     for (const key of Object.keys(value)) {
       const walked = walk([...path, key], value[key]);
-      if (walked !== void 0) out[key] = walked;
+      if (walked !== void 0) safeAssign(out, key, walked);
     }
     return out;
   };
@@ -1585,10 +1609,19 @@ function mergeDeep(target, source, path, schema) {
       if (sourceDisc !== void 0) {
         const variantDefault = du.getVariantDefault(sourceDisc);
         if (isPlainRecord(variantDefault)) {
-          const out2 = Object.assign(/* @__PURE__ */ Object.create(null), variantDefault);
+          const out2 = { ...variantDefault };
           for (const key of Object.keys(sourceRecord)) {
-            if (!(key in variantDefault) && key !== du.discriminatorKey) continue;
-            out2[key] = mergeDeep(out2[key], sourceRecord[key], [...path, key], schema);
+            if (!safeOwnHas(variantDefault, key) && key !== du.discriminatorKey) continue;
+            safeAssign(
+              out2,
+              key,
+              mergeDeep(
+                safeOwnRead(out2, key),
+                safeOwnRead(sourceRecord, key),
+                [...path, key],
+                schema
+              )
+            );
           }
           return out2;
         }
@@ -1597,9 +1630,18 @@ function mergeDeep(target, source, path, schema) {
     }
   }
   const mergeTarget = target;
-  const out = isPlainRecord(mergeTarget) ? Object.assign(/* @__PURE__ */ Object.create(null), mergeTarget) : /* @__PURE__ */ Object.create(null);
+  const out = isPlainRecord(mergeTarget) ? { ...mergeTarget } : {};
   for (const key of Object.keys(source)) {
-    out[key] = mergeDeep(out[key], source[key], [...path, key], schema);
+    safeAssign(
+      out,
+      key,
+      mergeDeep(
+        safeOwnRead(out, key),
+        safeOwnRead(source, key),
+        [...path, key],
+        schema
+      )
+    );
   }
   return out;
 }
@@ -2266,6 +2308,7 @@ function buildRegister(state, formInstanceId, instanceConfig) {
     const isRequired = state.schema.isRequiredAtPath(segments);
     const ariaEnabled = options?.autoAria ?? formAutoAria;
     const ariaDisplayState = getDisplayStateAt !== void 0 ? vue.computed(() => getDisplayStateAt(segments)) : void 0;
+    let boundElement = null;
     const internalRv = {
       innerRef,
       displayValue,
@@ -2284,6 +2327,7 @@ function buildRegister(state, formInstanceId, instanceConfig) {
         state.markInteracted(segments);
       },
       registerElement: (element) => {
+        boundElement = element;
         if (!paths.INTERACTIVE_TAG_NAMES.has(element.tagName)) return;
         const added = state.registerElement(segments, element, formInstanceId);
         if (added) attachFocusListeners(state, segments, element, instanceMeta);
@@ -2291,9 +2335,11 @@ function buildRegister(state, formInstanceId, instanceConfig) {
       deregisterElement: (element) => {
         detachFocusListeners(element);
         state.deregisterElement(segments, element);
+        if (boundElement === element) boundElement = null;
       },
       setValueWithInternalPath: (value, meta) => {
-        return state.setValueAtPath(segments, value, withInstanceMeta(meta));
+        const resolvedMeta = meta === void 0 && boundElement !== null ? { persist: state.persistOptIns.hasOptIn(paths.getOrAssignElementId(boundElement), pathKey) } : meta;
+        return state.setValueAtPath(segments, value, withInstanceMeta(resolvedMeta));
       },
       // Called by the `vRegisterHint` compile-time transform's wrapping
       // IIFE on every server-side render of `<element v-register="…">`.
@@ -2383,17 +2429,17 @@ function walk(input, segments, schema, paths) {
     if (slim !== null && slim !== void 0 && typeof slim === "object" && !Array.isArray(slim) && !(slim instanceof Date) && !(slim instanceof RegExp) && !(slim instanceof Map) && !(slim instanceof Set)) {
       for (const k of Object.keys(slim)) allKeys.add(k);
     }
-    const out = /* @__PURE__ */ Object.create(null);
+    const out = {};
     let mutated = allKeys.size !== inputKeys.length;
     for (const key of allKeys) {
       const orig = input[key];
       if (orig === void 0 && inputKeysSet.has(key)) {
-        out[key] = void 0;
+        safeAssign(out, key, void 0);
         mutated = true;
         continue;
       }
       const walked = walk(orig, [...segments, key], schema, paths);
-      out[key] = walked;
+      safeAssign(out, key, walked);
       if (walked !== orig) mutated = true;
     }
     return mutated ? out : input;
@@ -2412,9 +2458,13 @@ function walkUnspecified(slim, segments, paths$1) {
   }
   if (Array.isArray(slim)) return slim;
   if (slim !== null && typeof slim === "object") {
-    const out = /* @__PURE__ */ Object.create(null);
+    const out = {};
     for (const key of Object.keys(slim)) {
-      out[key] = walkUnspecified(slim[key], [...segments, key], paths$1);
+      safeAssign(
+        out,
+        key,
+        walkUnspecified(slim[key], [...segments, key], paths$1)
+      );
     }
     return out;
   }
@@ -2445,11 +2495,11 @@ function substitute(input, segments, schema, paths) {
   }
   if (typeof input === "object") {
     let mutated = false;
-    const out = /* @__PURE__ */ Object.create(null);
+    const out = {};
     for (const key of Object.keys(input)) {
       const orig = input[key];
       const walked = substitute(orig, [...segments, key], schema, paths);
-      out[key] = walked;
+      safeAssign(out, key, walked);
       if (walked !== orig) mutated = true;
     }
     return mutated ? out : input;
@@ -3059,9 +3109,9 @@ function buildFormApi(state, formInstanceId, options = {}) {
     if (value === null || typeof value !== "object" || Array.isArray(value)) {
       return EMPTY_FIELD_RECORD;
     }
-    const out = /* @__PURE__ */ Object.create(null);
+    const out = {};
     for (const key of Object.keys(value)) {
-      out[key] = callTerminal(`${path}.${key}`);
+      safeAssign(out, key, callTerminal(`${path}.${key}`));
     }
     return Object.freeze(out);
   }
@@ -3183,14 +3233,14 @@ function walkDuStubs(schema, value, path, warned) {
           );
         }
       }
-      const stub = /* @__PURE__ */ Object.create(null);
-      stub[du.discriminatorKey] = discValue;
+      const stub = {};
+      safeAssign(stub, du.discriminatorKey, discValue);
       return stub;
     }
   }
-  const out = /* @__PURE__ */ Object.create(null);
+  const out = {};
   for (const k of Object.keys(rec)) {
-    out[k] = walkDuStubs(schema, rec[k], [...path, k], warned);
+    safeAssign(out, k, walkDuStubs(schema, rec[k], [...path, k], warned));
   }
   return out;
 }
@@ -3273,8 +3323,8 @@ function cloneVariantSnapshot(value) {
     return out2;
   }
   const src = raw;
-  const out = /* @__PURE__ */ Object.create(null);
-  for (const k of Object.keys(src)) out[k] = cloneVariantSnapshot(src[k]);
+  const out = {};
+  for (const k of Object.keys(src)) safeAssign(out, k, cloneVariantSnapshot(src[k]));
   return out;
 }
 
@@ -5197,9 +5247,8 @@ function wirePersistence(state, config) {
     if (isDisposed()) return;
     const raw = await adapter.getItem(key);
     const existing = readPersistedPayload(raw);
-    const baseForm = existing?.data.form ?? /* @__PURE__ */ Object.create(null);
     const value = getAtPath(vue.toRaw(state.form.value), path);
-    const nextForm = setAtPath(baseForm, path, value);
+    const nextForm = setAtPath(existing?.data.form ?? {}, path, value);
     const { key: pathKey } = paths.canonicalizePath(path);
     const transientSet = new Set(
       (existing?.data.blankPaths ?? []).filter(
@@ -5391,15 +5440,15 @@ function stripSensitivePathsDeep(value, pathSoFar, isSensitivePath) {
   }
   const proto = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) return value;
-  const out = /* @__PURE__ */ Object.create(null);
+  const out = {};
   const src = value;
   for (const key of Object.keys(src)) {
     const childPath = [...pathSoFar, key];
     if (isSensitivePath(childPath)) {
-      out[key] = void 0;
+      safeAssign(out, key, void 0);
       continue;
     }
-    out[key] = stripSensitivePathsDeep(src[key], childPath, isSensitivePath);
+    safeAssign(out, key, stripSensitivePathsDeep(src[key], childPath, isSensitivePath));
   }
   return out;
 }
@@ -7171,9 +7220,11 @@ exports.isPlainRecord = isPlainRecord;
 exports.isUnset = isUnset;
 exports.lazy = lazy;
 exports.normalizeNumericOption = normalizeNumericOption;
+exports.safeAssign = safeAssign;
+exports.safeOwnRead = safeOwnRead;
 exports.setAtPath = setAtPath;
 exports.slimKindOf = slimKindOf;
 exports.unset = unset;
 exports.useAbstractForm = useAbstractForm;
 exports.useWizard = useWizard;
-//# sourceMappingURL=attaform.DL4CQ-oW.cjs.map
+//# sourceMappingURL=attaform.CwLjUqmQ.cjs.map