oneentry 1.0.169 → 1.0.171

package/changelog.md

@@ -1,5 +1,31 @@
 # SDK Change Log
 
+## v.1.0.171
+
+### What's Fixed
+
+- **`postFormsData` threw `fd.value.map is not a function` on the value its own uploader returns.** For a `file`, `image` or `groupOfImages` field the method converted the value — an array was uploaded file by file, a lone `File`/`Blob` into a single object — and then called `fd.value.map(...)` **unconditionally**, to strip `contentType`. A value the package had not converted reached `.map` as a non-array and the call died inside the library, before any request was made. That value is not an exotic one: it is exactly what `FileUploading.upload` returns, the natural thing to pass when the file is already in storage. The other plausible reading — an array of those descriptors — was re-uploaded as if the descriptors were files, and the platform refused the result with `formData's marker 'resume' value[0].filename is required`, naming the field the SDK itself had replaced. It cost a shipped pilot its application form: every visitor who attached a document got a generic refusal while the submission counter stayed at 0, and the only trace was the `TypeError` in the site log. Now only a `File` or a `Blob` is uploaded, an entry already in storage is passed through untouched — the two may be mixed in one array — and `contentType` is stripped from an array of values and from a lone value object alike. A value of any other shape is sent as it came, so the endpoint names the field it cannot read instead of the library throwing (CMS-990).
+
+- **The accepted shapes of a file value were not declared.** `IBodyTypeFile.value` and `IBodyTypeImageGroupOfImages.value` described a hand-built `IFileValue` / `IImageValue` only — neither a raw `File`/`Blob`, which the SDK has always uploaded on the caller's behalf, nor the descriptor the uploader returns for a file already in storage. Both are in the types now, mixable in one array, and the JSDoc states what the endpoint does with them: a submission wants an **array**, so a lone descriptor or `IFileValue` answers `400 formData's marker '<marker>' value must be an array` while a lone `File`/`Blob` works because the upload result is already one. `fileQuery` is also declared where the SDK actually reads it — on the field; `IBodyPostFormData.fileQuery` is kept for compatibility, but setting it there changes nothing. Measured on js-sdk-tests.oneentry.cloud, 2026-10-08.
+
+### Tests
+
+- **`formsdata` pins the file already in storage.** The new case uploads a probe with `FileUploading.upload`, submits the descriptor it returns as a one-element array — which used to be re-uploaded and refused — and then submits the same descriptor alone, which must come back as the endpoint's own `400 … value must be an array`, not as a `TypeError` from inside the package.
+
+## v.1.0.170
+
+### What's Changed
+
+- **`IAttributeValidators` named four validators of the eighteen the platform accepts.** The interface gave a shape to `requiredValidator`, `stringInspectionValidator`, `emailInspectionValidator` and `defaultValueValidator`, and closed with `[key: string]: unknown`; its JSDoc said only that the set is extensible. A developer reading the types learned that a required flag, a length constraint, an e-mail toggle and a default value exist, and did not learn that a **regular expression**, an **input mask**, a **whitespace trim** and **date bounds** exist — fourteen capabilities absent from the model of the platform, which on one pilot reached three client-facing documents as the sentence "a field has exactly four validators; there are no regular expressions and no phone check". All eighteen names are now declared with the shape the platform stores: `requiredValidator`, `trimValidator`, `stringInspectionValidator`, `urlInspectionValidator`, `emailInspectionValidator`, `checkForNumberValidator`, `roundingNumberValidator`, `booleanValidator`, `comparisonValidator`, `regExpValidator`, `fieldMaskValidator`, `checkForAGivenList`, `defaultValueValidator`, `sizeInPixelsValidator`, `checkingFilesValidator`, `minMaxDateValidator`, `valueValidator`, `checkForLettersValidator` (CMS-983).
+
+- **A misspelt validator name is a compile error instead of a `400`.** The index signature `[key: string]: unknown` made the gap silent in the other direction too: `emailValidator` typechecked and the platform refused the write at run time with `schema contains unknown validator name(s)`. The signature is gone, so an unknown name is caught where it is written. Code that still needs a name the SDK does not know can cast at that one place.
+
+- **Shapes follow what the platform executes, not what reads well.** `regExpValidator` takes `{ patternValue, invert, flags }` and not `{ regExp }`, `fieldMaskValidator` takes `{ maskValue }`, `checkForAGivenList` carries no `Validator` suffix, and `minMaxDateValidator` stores `minDateTimeValue` / `maxDateTimeValue`. The toggles — `requiredValidator`, `trimValidator`, `urlInspectionValidator`, `emailInspectionValidator` — are typed `object | boolean`, because both forms are in live data: an e-mail check is stored as the boolean `true` on seven fields of the stands checked and as an object on one. Every validator may also carry `customErrorText`, which is now in the type. `valueValidator` is kept with the same shape as `defaultValueValidator`: it is the panel's own name for that control, and the API stores it.
+
+- **The attribute JSDoc in `base/utils.ts` named `regexValidator`,** which does not exist. It points at `IAttributeValidators` for the full list instead.
+
+Types and documentation only; the wire format did not change.
+
 ## v.1.0.169
 
 ### What's Fixed

package/dist/attribute-sets/attributeSetsInterfaces.d.ts

@@ -189,28 +189,130 @@ interface IAttributeSchemaItem {
 }
 /**
  * @interface IAttributeValidators
- * @property {object} [requiredValidator] - Marks the field as required. Shape: `{ strict: boolean }`. Example: `{ strict: true }`.
- * @property {object} [stringInspectionValidator] - Length constraints for string fields. Shape: `{ stringMin: number; stringMax: number; stringLength: number }`.
- * @property {boolean} [emailInspectionValidator] - Toggle for email-format validation.
- * @property {object} [defaultValueValidator] - Default value configuration with optional custom error text. Shape: `{ customErrorText?: string; fieldDefaultValue?: unknown; fieldDefaultValue2?: unknown }`.
- * @description Map of validators applied to an attribute or form field. Set is extensible — additional validator types may be added by the API.
+ * @property {object | boolean} [requiredValidator] - Field must be filled in. Shape: `{ strict: boolean }`. Example: `{ strict: true }`.
+ * @property {object | boolean} [trimValidator] - Leading and trailing whitespace is stripped from the value. Stored as an empty object when the toggle is on. Example: `{}`.
+ * @property {object} [stringInspectionValidator] - Length constraints for string fields. Example: `{ stringLength: 0, stringMin: 2, stringMax: 60 }`.
+ * @property {object | boolean} [urlInspectionValidator] - Value must look like a URL. Stored either as `true` or as an object. Example: `true`.
+ * @property {object | boolean} [emailInspectionValidator] - Value must look like an e-mail address. Stored either as `true` or as an object. Example: `true`.
+ * @property {object} [checkForNumberValidator] - Value must be a number, optionally an integer within bounds. `0` disables a bound. Example: `{ integerOnly: true, minValue: 1, maxValue: 10 }`.
+ * @property {object} [roundingNumberValidator] - Rounds the number before storing it. Example: `{ integerOnly: false, numberOfDecimals: 2, direction: 'round' }`.
+ * @property {object} [booleanValidator] - Value must equal one of the two declared values. Example: `{ trueValue: 1, falseValue: 0 }`.
+ * @property {object} [comparisonValidator] - Compares the value with another attribute or with a constant. Example: `{ compareAttribute: 'notChoosed', compareValue: '10', type: 'number', operator: 'equality' }`.
+ * @property {object} [regExpValidator] - Value must match a regular expression; `invert` refuses matches instead. Example: `{ patternValue: '^[0-9]{5}$', invert: false, flags: ['i'] }`.
+ * @property {object} [fieldMaskValidator] - Value must match an input mask (`9` digit, `A` upper letter, `a` lower letter, `*` any, `$` one of `()+-`). Example: `{ maskValue: '+9 (999) 999-99-99' }`.
+ * @property {object} [checkForAGivenList] - Value must be in the list, or outside it when `notValue` is true. Example: `{ rangeValue: ['red', 'green'], notValue: false }`.
+ * @property {object} [defaultValueValidator] - Value substituted when the field is left empty. Example: `{ fieldDefaultValue: 'USD' }`.
+ * @property {object} [sizeInPixelsValidator] - Image bounds in pixels; executed by the admin panel. Example: `{ maxX: 1920, maxY: 1080 }`.
+ * @property {object} [checkingFilesValidator] - File size bounds and allowed extensions; executed by the admin panel. Example: `{ minValue: 0, maxValue: 5, minUnits: 'kb', maxUnits: 'mb', extensions: ['pdf'] }`.
+ * @property {object} [minMaxDateValidator] - Date bounds; executed by the admin panel. Example: `{ minDateTimeValue: '2026-01-01', maxDateTimeValue: '2026-12-31' }`.
+ * @property {object} [valueValidator] - The panel's "default value" control; it writes `defaultValueValidator`, and this name is kept because the API accepts and stores it. Example: `{ fieldDefaultValue: 'USD' }`.
+ * @property {object} [checkForLettersValidator] - Letters-only check by pattern; executed by the admin panel. Example: `{ patternValue: '^[A-Za-z ]+$' }`.
+ * @description Map of validators applied to an attribute or form field, keyed by validator name.
+ *
+ * These eighteen names are the full set the API accepts in
+ * `attributes_sets.schema.<attribute>.validators.<langCode>`; any other name is refused
+ * with `400`. The first thirteen are executed by the platform on write, the last five are
+ * stored as given and executed by the admin panel.
+ *
+ * Every validator may also carry `customErrorText` — the message shown instead of the
+ * default one when the value is refused.
  */
 interface IAttributeValidators {
     requiredValidator?: {
-        strict: boolean;
-    };
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
+    trimValidator?: {
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
     stringInspectionValidator?: {
-        stringMin: number;
-        stringMax: number;
-        stringLength: number;
+        stringMin?: number;
+        stringMax?: number;
+        stringLength?: number;
+        customErrorText?: string;
+    };
+    urlInspectionValidator?: {
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
+    emailInspectionValidator?: {
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
+    checkForNumberValidator?: {
+        integerOnly?: boolean;
+        minValue?: number;
+        maxValue?: number;
+        customErrorText?: string;
+    };
+    roundingNumberValidator?: {
+        integerOnly?: boolean;
+        numberOfDecimals?: number;
+        direction?: 'round' | 'up' | 'down' | 'truncate';
+        customErrorText?: string;
+    };
+    booleanValidator?: {
+        trueValue?: unknown;
+        falseValue?: unknown;
+        customErrorText?: string;
+    };
+    comparisonValidator?: {
+        compareAttribute?: string;
+        compareValue?: string;
+        compareValue2?: string;
+        type?: string;
+        operator?: string;
+        customErrorText?: string;
+    };
+    regExpValidator?: {
+        patternValue?: string;
+        invert?: boolean;
+        flags?: string[];
+        customErrorText?: string;
+    };
+    fieldMaskValidator?: {
+        maskValue?: string;
+        customErrorText?: string;
+    };
+    checkForAGivenList?: {
+        rangeValue?: unknown[];
+        rangeValue2?: unknown[];
+        notValue?: boolean;
+        customErrorText?: string;
     };
-    emailInspectionValidator?: boolean;
     defaultValueValidator?: {
+        fieldDefaultValue?: unknown;
+        fieldDefaultValue2?: unknown;
+        customErrorText?: string;
+    };
+    sizeInPixelsValidator?: {
+        maxX?: number;
+        maxY?: number;
         customErrorText?: string;
+    };
+    checkingFilesValidator?: {
+        minValue?: number;
+        maxValue?: number;
+        minUnits?: 'kb' | 'mb';
+        maxUnits?: 'kb' | 'mb';
+        extensions?: string[];
+        customErrorText?: string;
+    };
+    minMaxDateValidator?: {
+        minDateTimeValue?: string;
+        maxDateTimeValue?: string;
+        customErrorText?: string;
+    };
+    valueValidator?: {
         fieldDefaultValue?: unknown;
         fieldDefaultValue2?: unknown;
+        customErrorText?: string;
+    };
+    checkForLettersValidator?: {
+        patternValue?: string;
+        customErrorText?: string;
     };
-    [key: string]: unknown;
 }
 /**
  * Represents an attribute set entity.

package/dist/base/utils.d.ts

@@ -96,7 +96,7 @@ interface IConfig {
  * @property {boolean} isVisible - Whether the attribute is exposed in the public API/UI. Example: true.
  * @property {string} type - Attribute data type (e.g. "string", "integer", "list", "file", "image").
  * @property {Record<string, unknown>} [settings] - Type-specific configuration (e.g. min/max for numbers, accepted MIME types for files). Optional.
- * @property {Record<string, unknown>} validators - Validation rules applied to the attribute value (e.g. `requiredValidator`, `regexValidator`). Example: { "requiredValidator": { "strict": true } }.
+ * @property {Record<string, unknown>} validators - Validation rules applied to the attribute value, keyed by validator name (e.g. `requiredValidator`, `regExpValidator`); the full set of names is listed on `IAttributeValidators`. Example: { "requiredValidator": { "strict": true } }.
  * @property {Record<string, IAttributes>} [additionalFields] - Nested sub-attributes attached to this attribute, keyed by marker. Optional.
  * @property {boolean} [isIcon] - Block/preview attribute flag — whether the field is treated as an icon. Optional.
  * @property {boolean} [isProductPreview] - Block/preview attribute flag — whether the field is shown in product preview. Optional.

package/dist/forms-data/formsDataApi.d.ts

@@ -56,10 +56,34 @@ export default class FormsDataApi extends AsyncModules implements IFormsData {
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<IPostFormResponse | IError>} Returns an object containing the created form data entry and message.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects. Passing a `File`/`FileList` as the value is also supported — the SDK uploads it first, then strips `contentType` from the resulting value.
+     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects.
+     *
+     * A file value may be a `File`/`Blob` (a `FileList` too), which the SDK uploads first; the descriptor `FileUploading.upload` returns for a file **already in storage**, which the SDK passes through untouched; or a hand-built {@link IFileValue} / {@link IImageValue}. The three may be mixed in one array. `contentType` is stripped from all of them, and a value of none of these shapes is sent as it came — the endpoint then names the field it cannot read, instead of the SDK throwing before the request.
+     *
+     * The endpoint wants file values in an **array**: a lone descriptor or `IFileValue` answers `400 formData's marker '<marker>' value must be an array`, while a lone `File`/`Blob` works because the upload result is already one.
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/postFormsData postFormsData} documentation.
      */
     postFormsData(body: IBodyPostFormData, langCode?: string): Promise<IPostFormResponse | IError>;
+    /**
+     * Tells a file the SDK still has to upload from one already in storage.
+     * @param {unknown} value - One value of a `file` / `image` / `groupOfImages` field.
+     * @returns {boolean} True when the value is a `File` or a `Blob`, which has to be uploaded first.
+     * @description Only a `File` or a `Blob` is uploaded. Anything else — above all the
+     * descriptor `FileUploading.upload` returns for a file already in storage — is sent
+     * as it came: re-uploading it would send the descriptor as the file itself.
+     */
+    private _isUploadable;
+    /**
+     * Removes `contentType` from a file value, which the endpoint does not accept.
+     * @param {T} value - Value of a `file` / `image` / `groupOfImages` field, after the uploads.
+     * @returns {T} The same value, without `contentType`.
+     * @description `FileUploading.upload` returns `contentType` and form data rejects it,
+     * so it is stripped from an array of values and from a lone value object alike. A value
+     * of any other shape is returned untouched and the endpoint names the field it cannot
+     * read — instead of the library dying on `value.map is not a function` before the
+     * request is made (CMS-990).
+     */
+    private _stripContentType;
     /**
      * Drops the date bounds the endpoint refuses to parse.
      *

package/dist/forms-data/formsDataApi.js

@@ -96,7 +96,11 @@ class FormsDataApi extends asyncModules_1.default {
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<IPostFormResponse | IError>} Returns an object containing the created form data entry and message.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects. Passing a `File`/`FileList` as the value is also supported — the SDK uploads it first, then strips `contentType` from the resulting value.
+     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects.
+     *
+     * A file value may be a `File`/`Blob` (a `FileList` too), which the SDK uploads first; the descriptor `FileUploading.upload` returns for a file **already in storage**, which the SDK passes through untouched; or a hand-built {@link IFileValue} / {@link IImageValue}. The three may be mixed in one array. `contentType` is stripped from all of them, and a value of none of these shapes is sent as it came — the endpoint then names the field it cannot read, instead of the SDK throwing before the request.
+     *
+     * The endpoint wants file values in an **array**: a lone descriptor or `IFileValue` answers `400 formData's marker '<marker>' value must be an array`, while a lone `File`/`Blob` works because the upload result is already one.
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/postFormsData postFormsData} documentation.
      */
     async postFormsData(body, langCode = this.state.lang) {
@@ -132,23 +136,27 @@ class FormsDataApi extends asyncModules_1.default {
                     const filesArray = typeof FileList !== 'undefined' && fd.value instanceof FileList
                         ? Array.from(fd.value)
                         : fd.value;
-                    // If filesArray is an array, upload each file asynchronously
+                    // If filesArray is an array, upload the files it holds asynchronously
                     if (Array.isArray(filesArray)) {
-                        const uploadPromises = filesArray.map((file) => fileUploader.upload(file, fd.fileQuery).catch((e) => e));
+                        const uploadPromises = filesArray.map((file) => 
+                        // An entry that is already in storage is passed through: a
+                        // second upload would send the descriptor itself as the file
+                        // and the endpoint answers `value[0].filename is required`.
+                        this._isUploadable(file)
+                            ? fileUploader.upload(file, fd.fileQuery).catch((e) => e)
+                            : file);
                         fd.value = (await Promise.all(uploadPromises)).flat();
                     }
                     // If fd.value is a single File or Blob, upload it
-                    else if (fd.value instanceof File || fd.value instanceof Blob) {
+                    else if (this._isUploadable(fd.value)) {
                         fd.value = await fileUploader
                             .upload(fd.value, fd.fileQuery)
                             .catch((e) => e); // Catch any errors during upload
                     }
                     // Remove the 'fileQuery' property from the object after processing
                     delete fd.fileQuery;
-                    // Remove  the 'contentType' property from the file object because it is not needed and not valid
-                    fd.value.map((file) => {
-                        delete file.contentType;
-                    });
+                    // Remove the 'contentType' property from the file object because it is not needed and not valid
+                    fd.value = this._stripContentType(fd.value);
                 }
                 // Return the processed form data element
                 return fd;
@@ -160,6 +168,42 @@ class FormsDataApi extends asyncModules_1.default {
         const validated = await this._validateResponse(result, schema('PostFormResponseSchema'));
         return this._normalizeData(validated);
     }
+    /**
+     * Tells a file the SDK still has to upload from one already in storage.
+     * @param {unknown} value - One value of a `file` / `image` / `groupOfImages` field.
+     * @returns {boolean} True when the value is a `File` or a `Blob`, which has to be uploaded first.
+     * @description Only a `File` or a `Blob` is uploaded. Anything else — above all the
+     * descriptor `FileUploading.upload` returns for a file already in storage — is sent
+     * as it came: re-uploading it would send the descriptor as the file itself.
+     */
+    _isUploadable(value) {
+        return ((typeof File !== 'undefined' && value instanceof File) ||
+            (typeof Blob !== 'undefined' && value instanceof Blob));
+    }
+    /**
+     * Removes `contentType` from a file value, which the endpoint does not accept.
+     * @param {T} value - Value of a `file` / `image` / `groupOfImages` field, after the uploads.
+     * @returns {T} The same value, without `contentType`.
+     * @description `FileUploading.upload` returns `contentType` and form data rejects it,
+     * so it is stripped from an array of values and from a lone value object alike. A value
+     * of any other shape is returned untouched and the endpoint names the field it cannot
+     * read — instead of the library dying on `value.map is not a function` before the
+     * request is made (CMS-990).
+     */
+    _stripContentType(value) {
+        const strip = (item) => {
+            if (item && typeof item === 'object' && !Array.isArray(item)) {
+                delete item.contentType;
+            }
+        };
+        if (Array.isArray(value)) {
+            value.forEach(strip);
+        }
+        else {
+            strip(value);
+        }
+        return value;
+    }
     /**
      * Drops the date bounds the endpoint refuses to parse.
      *

package/dist/forms-data/formsDataInterfaces.d.ts

@@ -1,5 +1,5 @@
 import type { IError } from '../base/utils';
-import type { IUploadingQuery } from '../file-uploading/fileUploadingInterfaces';
+import type { IUploadingQuery, IUploadingReturn } from '../file-uploading/fileUploadingInterfaces';
 /**
  * Interface for retrieving and posting form data in the system.
  * @interface IFormsData
@@ -567,7 +567,7 @@ interface ICaptchaValue {
  * @property {string} formData[].marker - The marker identifying the form field. Example: "name".
  * @property {string} formData[].type - The type of the form field. Example: "string".
  * @property {string} formData[].value - The value of the form field. Example: "name".
- * @property {IUploadingQuery} [fileQuery] - Optional file query for uploading files.
+ * @property {IUploadingQuery} [fileQuery] - Optional file query for uploading files. Kept for compatibility: the SDK reads `fileQuery` from the **file field itself** (see IBodyTypeFile), not from the body, so one set here does not change where a file is uploaded.
  * @example
     {
       "type": "page",
@@ -715,7 +715,7 @@ interface ITextWithHeaderValue {
  * @interface IBodyTypeImageGroupOfImages
  * @property {string} marker - marker name. Example: "avatar".
  * @property {'image' | 'groupOfImages'} type - Type value — must match the attribute type in the set, note the plural in "groupOfImages". Example: "image".
- * @property {object} value - Image Object. Contains image information.
+ * @property {object} value - The attached image. The same three shapes as a `file` field accepts, mixable in one array: a `File`/`Blob` (also a `FileList`), which the SDK uploads first; the descriptor `FileUploading.upload` returns for an image **already in storage**, passed through as it is; or a hand-built {@link IImageValue}. In a SUBMISSION the value must be an **array**, as for `file` — a lone object answers `400 formData's marker '<marker>' value must be an array`. Measured on js-sdk-tests.oneentry.cloud, 2026-10-08 (CMS-990).
  * @example
     [
       {
@@ -728,12 +728,14 @@ interface ITextWithHeaderValue {
         }
       }
     ]
+ * @property {IUploadingQuery} [fileQuery] - Where the SDK uploads a `File`/`Blob` value to. Read **per field**, not from the body; omitted, the SDK uploads to `page`/`editor` under a random id. Ignored for an image already in storage. Example: `{ "type": "page", "entity": "editor", "id": 3787 }`.
  * @description Represents an image or a group of images with their details, including filename, download link, size, preview link, and parameters for image compression.
  */
 interface IBodyTypeImageGroupOfImages {
     marker: string;
     type: 'image' | 'groupOfImages';
-    value: IImageValue | IImageValue[];
+    value: IImageValue | IUploadingReturn | File | Blob | (IImageValue | IUploadingReturn | File | Blob)[];
+    fileQuery?: IUploadingQuery;
 }
 /**
  * @interface IImageValueParams
@@ -764,7 +766,7 @@ interface IImageValue {
  * @interface IBodyTypeFile
  * @property {string} marker - marker name. Example: "picture".
  * @property {'file'} type - Type value. Example: "file".
- * @property {object} value - File Object. Contains file information. A single attached file is returned as the object itself, several files as an array.
+ * @property {object} value - The attached file. Three shapes are accepted and may be mixed in one array: a `File`/`Blob` (also a `FileList`), which the SDK uploads first; the descriptor `FileUploading.upload` returns for a file **already in storage**, which is passed through as it is; or a hand-built {@link IFileValue}. In a SUBMISSION the value must be an **array** — a lone descriptor or {@link IFileValue} answers `400 formData's marker '<marker>' value must be an array`, while a lone `File`/`Blob` is fine because the SDK wraps the upload result. A READ returns a single attached file as the object itself. Measured on js-sdk-tests.oneentry.cloud, 2026-10-08 (CMS-990).
  * @example
     [
       {
@@ -773,12 +775,14 @@ interface IImageValue {
         "size": 392585
       }
     ]
+ * @property {IUploadingQuery} [fileQuery] - Where the SDK uploads a `File`/`Blob` value to. Read **per field**, not from the body; omitted, the SDK uploads to `page`/`editor` under a random id. Ignored for a file already in storage. Example: `{ "type": "page", "entity": "editor", "id": 3787 }`.
  * @description Represents a file with its details, including filename, download link, and size.
  */
 interface IBodyTypeFile {
     marker: string;
     type: 'file';
-    value: IFileValue | IFileValue[];
+    value: IFileValue | IUploadingReturn | File | Blob | (IFileValue | IUploadingReturn | File | Blob)[];
+    fileQuery?: IUploadingQuery;
 }
 /**
  * @interface IFileValue

package/esm/attribute-sets/attributeSetsInterfaces.d.ts

@@ -189,28 +189,130 @@ interface IAttributeSchemaItem {
 }
 /**
  * @interface IAttributeValidators
- * @property {object} [requiredValidator] - Marks the field as required. Shape: `{ strict: boolean }`. Example: `{ strict: true }`.
- * @property {object} [stringInspectionValidator] - Length constraints for string fields. Shape: `{ stringMin: number; stringMax: number; stringLength: number }`.
- * @property {boolean} [emailInspectionValidator] - Toggle for email-format validation.
- * @property {object} [defaultValueValidator] - Default value configuration with optional custom error text. Shape: `{ customErrorText?: string; fieldDefaultValue?: unknown; fieldDefaultValue2?: unknown }`.
- * @description Map of validators applied to an attribute or form field. Set is extensible — additional validator types may be added by the API.
+ * @property {object | boolean} [requiredValidator] - Field must be filled in. Shape: `{ strict: boolean }`. Example: `{ strict: true }`.
+ * @property {object | boolean} [trimValidator] - Leading and trailing whitespace is stripped from the value. Stored as an empty object when the toggle is on. Example: `{}`.
+ * @property {object} [stringInspectionValidator] - Length constraints for string fields. Example: `{ stringLength: 0, stringMin: 2, stringMax: 60 }`.
+ * @property {object | boolean} [urlInspectionValidator] - Value must look like a URL. Stored either as `true` or as an object. Example: `true`.
+ * @property {object | boolean} [emailInspectionValidator] - Value must look like an e-mail address. Stored either as `true` or as an object. Example: `true`.
+ * @property {object} [checkForNumberValidator] - Value must be a number, optionally an integer within bounds. `0` disables a bound. Example: `{ integerOnly: true, minValue: 1, maxValue: 10 }`.
+ * @property {object} [roundingNumberValidator] - Rounds the number before storing it. Example: `{ integerOnly: false, numberOfDecimals: 2, direction: 'round' }`.
+ * @property {object} [booleanValidator] - Value must equal one of the two declared values. Example: `{ trueValue: 1, falseValue: 0 }`.
+ * @property {object} [comparisonValidator] - Compares the value with another attribute or with a constant. Example: `{ compareAttribute: 'notChoosed', compareValue: '10', type: 'number', operator: 'equality' }`.
+ * @property {object} [regExpValidator] - Value must match a regular expression; `invert` refuses matches instead. Example: `{ patternValue: '^[0-9]{5}$', invert: false, flags: ['i'] }`.
+ * @property {object} [fieldMaskValidator] - Value must match an input mask (`9` digit, `A` upper letter, `a` lower letter, `*` any, `$` one of `()+-`). Example: `{ maskValue: '+9 (999) 999-99-99' }`.
+ * @property {object} [checkForAGivenList] - Value must be in the list, or outside it when `notValue` is true. Example: `{ rangeValue: ['red', 'green'], notValue: false }`.
+ * @property {object} [defaultValueValidator] - Value substituted when the field is left empty. Example: `{ fieldDefaultValue: 'USD' }`.
+ * @property {object} [sizeInPixelsValidator] - Image bounds in pixels; executed by the admin panel. Example: `{ maxX: 1920, maxY: 1080 }`.
+ * @property {object} [checkingFilesValidator] - File size bounds and allowed extensions; executed by the admin panel. Example: `{ minValue: 0, maxValue: 5, minUnits: 'kb', maxUnits: 'mb', extensions: ['pdf'] }`.
+ * @property {object} [minMaxDateValidator] - Date bounds; executed by the admin panel. Example: `{ minDateTimeValue: '2026-01-01', maxDateTimeValue: '2026-12-31' }`.
+ * @property {object} [valueValidator] - The panel's "default value" control; it writes `defaultValueValidator`, and this name is kept because the API accepts and stores it. Example: `{ fieldDefaultValue: 'USD' }`.
+ * @property {object} [checkForLettersValidator] - Letters-only check by pattern; executed by the admin panel. Example: `{ patternValue: '^[A-Za-z ]+$' }`.
+ * @description Map of validators applied to an attribute or form field, keyed by validator name.
+ *
+ * These eighteen names are the full set the API accepts in
+ * `attributes_sets.schema.<attribute>.validators.<langCode>`; any other name is refused
+ * with `400`. The first thirteen are executed by the platform on write, the last five are
+ * stored as given and executed by the admin panel.
+ *
+ * Every validator may also carry `customErrorText` — the message shown instead of the
+ * default one when the value is refused.
  */
 interface IAttributeValidators {
     requiredValidator?: {
-        strict: boolean;
-    };
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
+    trimValidator?: {
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
     stringInspectionValidator?: {
-        stringMin: number;
-        stringMax: number;
-        stringLength: number;
+        stringMin?: number;
+        stringMax?: number;
+        stringLength?: number;
+        customErrorText?: string;
+    };
+    urlInspectionValidator?: {
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
+    emailInspectionValidator?: {
+        strict?: boolean;
+        customErrorText?: string;
+    } | boolean;
+    checkForNumberValidator?: {
+        integerOnly?: boolean;
+        minValue?: number;
+        maxValue?: number;
+        customErrorText?: string;
+    };
+    roundingNumberValidator?: {
+        integerOnly?: boolean;
+        numberOfDecimals?: number;
+        direction?: 'round' | 'up' | 'down' | 'truncate';
+        customErrorText?: string;
+    };
+    booleanValidator?: {
+        trueValue?: unknown;
+        falseValue?: unknown;
+        customErrorText?: string;
+    };
+    comparisonValidator?: {
+        compareAttribute?: string;
+        compareValue?: string;
+        compareValue2?: string;
+        type?: string;
+        operator?: string;
+        customErrorText?: string;
+    };
+    regExpValidator?: {
+        patternValue?: string;
+        invert?: boolean;
+        flags?: string[];
+        customErrorText?: string;
+    };
+    fieldMaskValidator?: {
+        maskValue?: string;
+        customErrorText?: string;
+    };
+    checkForAGivenList?: {
+        rangeValue?: unknown[];
+        rangeValue2?: unknown[];
+        notValue?: boolean;
+        customErrorText?: string;
     };
-    emailInspectionValidator?: boolean;
     defaultValueValidator?: {
+        fieldDefaultValue?: unknown;
+        fieldDefaultValue2?: unknown;
+        customErrorText?: string;
+    };
+    sizeInPixelsValidator?: {
+        maxX?: number;
+        maxY?: number;
         customErrorText?: string;
+    };
+    checkingFilesValidator?: {
+        minValue?: number;
+        maxValue?: number;
+        minUnits?: 'kb' | 'mb';
+        maxUnits?: 'kb' | 'mb';
+        extensions?: string[];
+        customErrorText?: string;
+    };
+    minMaxDateValidator?: {
+        minDateTimeValue?: string;
+        maxDateTimeValue?: string;
+        customErrorText?: string;
+    };
+    valueValidator?: {
         fieldDefaultValue?: unknown;
         fieldDefaultValue2?: unknown;
+        customErrorText?: string;
+    };
+    checkForLettersValidator?: {
+        patternValue?: string;
+        customErrorText?: string;
     };
-    [key: string]: unknown;
 }
 /**
  * Represents an attribute set entity.

package/esm/base/utils.d.ts

@@ -96,7 +96,7 @@ interface IConfig {
  * @property {boolean} isVisible - Whether the attribute is exposed in the public API/UI. Example: true.
  * @property {string} type - Attribute data type (e.g. "string", "integer", "list", "file", "image").
  * @property {Record<string, unknown>} [settings] - Type-specific configuration (e.g. min/max for numbers, accepted MIME types for files). Optional.
- * @property {Record<string, unknown>} validators - Validation rules applied to the attribute value (e.g. `requiredValidator`, `regexValidator`). Example: { "requiredValidator": { "strict": true } }.
+ * @property {Record<string, unknown>} validators - Validation rules applied to the attribute value, keyed by validator name (e.g. `requiredValidator`, `regExpValidator`); the full set of names is listed on `IAttributeValidators`. Example: { "requiredValidator": { "strict": true } }.
  * @property {Record<string, IAttributes>} [additionalFields] - Nested sub-attributes attached to this attribute, keyed by marker. Optional.
  * @property {boolean} [isIcon] - Block/preview attribute flag — whether the field is treated as an icon. Optional.
  * @property {boolean} [isProductPreview] - Block/preview attribute flag — whether the field is shown in product preview. Optional.

package/esm/forms-data/formsDataApi.d.ts

@@ -56,10 +56,34 @@ export default class FormsDataApi extends AsyncModules implements IFormsData {
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<IPostFormResponse | IError>} Returns an object containing the created form data entry and message.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects. Passing a `File`/`FileList` as the value is also supported — the SDK uploads it first, then strips `contentType` from the resulting value.
+     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects.
+     *
+     * A file value may be a `File`/`Blob` (a `FileList` too), which the SDK uploads first; the descriptor `FileUploading.upload` returns for a file **already in storage**, which the SDK passes through untouched; or a hand-built {@link IFileValue} / {@link IImageValue}. The three may be mixed in one array. `contentType` is stripped from all of them, and a value of none of these shapes is sent as it came — the endpoint then names the field it cannot read, instead of the SDK throwing before the request.
+     *
+     * The endpoint wants file values in an **array**: a lone descriptor or `IFileValue` answers `400 formData's marker '<marker>' value must be an array`, while a lone `File`/`Blob` works because the upload result is already one.
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/postFormsData postFormsData} documentation.
      */
     postFormsData(body: IBodyPostFormData, langCode?: string): Promise<IPostFormResponse | IError>;
+    /**
+     * Tells a file the SDK still has to upload from one already in storage.
+     * @param {unknown} value - One value of a `file` / `image` / `groupOfImages` field.
+     * @returns {boolean} True when the value is a `File` or a `Blob`, which has to be uploaded first.
+     * @description Only a `File` or a `Blob` is uploaded. Anything else — above all the
+     * descriptor `FileUploading.upload` returns for a file already in storage — is sent
+     * as it came: re-uploading it would send the descriptor as the file itself.
+     */
+    private _isUploadable;
+    /**
+     * Removes `contentType` from a file value, which the endpoint does not accept.
+     * @param {T} value - Value of a `file` / `image` / `groupOfImages` field, after the uploads.
+     * @returns {T} The same value, without `contentType`.
+     * @description `FileUploading.upload` returns `contentType` and form data rejects it,
+     * so it is stripped from an array of values and from a lone value object alike. A value
+     * of any other shape is returned untouched and the endpoint names the field it cannot
+     * read — instead of the library dying on `value.map is not a function` before the
+     * request is made (CMS-990).
+     */
+    private _stripContentType;
     /**
      * Drops the date bounds the endpoint refuses to parse.
      *

package/esm/forms-data/formsDataApi.js

@@ -58,7 +58,11 @@ export default class FormsDataApi extends AsyncModules {
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<IPostFormResponse | IError>} Returns an object containing the created form data entry and message.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects. Passing a `File`/`FileList` as the value is also supported — the SDK uploads it first, then strips `contentType` from the resulting value.
+     * @description Field values are typed per field type by {@link FormDataType}. For attached files see {@link IImageValue} (`image`, `groupOfImages`) and {@link IFileValue} (`file`) — the shape the endpoint expects, which is **not** what `FileUploading.upload` returns: that object carries `contentType`, which form data rejects.
+     *
+     * A file value may be a `File`/`Blob` (a `FileList` too), which the SDK uploads first; the descriptor `FileUploading.upload` returns for a file **already in storage**, which the SDK passes through untouched; or a hand-built {@link IFileValue} / {@link IImageValue}. The three may be mixed in one array. `contentType` is stripped from all of them, and a value of none of these shapes is sent as it came — the endpoint then names the field it cannot read, instead of the SDK throwing before the request.
+     *
+     * The endpoint wants file values in an **array**: a lone descriptor or `IFileValue` answers `400 formData's marker '<marker>' value must be an array`, while a lone `File`/`Blob` works because the upload result is already one.
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/postFormsData postFormsData} documentation.
      */
     async postFormsData(body, langCode = this.state.lang) {
@@ -94,23 +98,27 @@ export default class FormsDataApi extends AsyncModules {
                     const filesArray = typeof FileList !== 'undefined' && fd.value instanceof FileList
                         ? Array.from(fd.value)
                         : fd.value;
-                    // If filesArray is an array, upload each file asynchronously
+                    // If filesArray is an array, upload the files it holds asynchronously
                     if (Array.isArray(filesArray)) {
-                        const uploadPromises = filesArray.map((file) => fileUploader.upload(file, fd.fileQuery).catch((e) => e));
+                        const uploadPromises = filesArray.map((file) => 
+                        // An entry that is already in storage is passed through: a
+                        // second upload would send the descriptor itself as the file
+                        // and the endpoint answers `value[0].filename is required`.
+                        this._isUploadable(file)
+                            ? fileUploader.upload(file, fd.fileQuery).catch((e) => e)
+                            : file);
                         fd.value = (await Promise.all(uploadPromises)).flat();
                     }
                     // If fd.value is a single File or Blob, upload it
-                    else if (fd.value instanceof File || fd.value instanceof Blob) {
+                    else if (this._isUploadable(fd.value)) {
                         fd.value = await fileUploader
                             .upload(fd.value, fd.fileQuery)
                             .catch((e) => e); // Catch any errors during upload
                     }
                     // Remove the 'fileQuery' property from the object after processing
                     delete fd.fileQuery;
-                    // Remove  the 'contentType' property from the file object because it is not needed and not valid
-                    fd.value.map((file) => {
-                        delete file.contentType;
-                    });
+                    // Remove the 'contentType' property from the file object because it is not needed and not valid
+                    fd.value = this._stripContentType(fd.value);
                 }
                 // Return the processed form data element
                 return fd;
@@ -122,6 +130,42 @@ export default class FormsDataApi extends AsyncModules {
         const validated = await this._validateResponse(result, schema('PostFormResponseSchema'));
         return this._normalizeData(validated);
     }
+    /**
+     * Tells a file the SDK still has to upload from one already in storage.
+     * @param {unknown} value - One value of a `file` / `image` / `groupOfImages` field.
+     * @returns {boolean} True when the value is a `File` or a `Blob`, which has to be uploaded first.
+     * @description Only a `File` or a `Blob` is uploaded. Anything else — above all the
+     * descriptor `FileUploading.upload` returns for a file already in storage — is sent
+     * as it came: re-uploading it would send the descriptor as the file itself.
+     */
+    _isUploadable(value) {
+        return ((typeof File !== 'undefined' && value instanceof File) ||
+            (typeof Blob !== 'undefined' && value instanceof Blob));
+    }
+    /**
+     * Removes `contentType` from a file value, which the endpoint does not accept.
+     * @param {T} value - Value of a `file` / `image` / `groupOfImages` field, after the uploads.
+     * @returns {T} The same value, without `contentType`.
+     * @description `FileUploading.upload` returns `contentType` and form data rejects it,
+     * so it is stripped from an array of values and from a lone value object alike. A value
+     * of any other shape is returned untouched and the endpoint names the field it cannot
+     * read — instead of the library dying on `value.map is not a function` before the
+     * request is made (CMS-990).
+     */
+    _stripContentType(value) {
+        const strip = (item) => {
+            if (item && typeof item === 'object' && !Array.isArray(item)) {
+                delete item.contentType;
+            }
+        };
+        if (Array.isArray(value)) {
+            value.forEach(strip);
+        }
+        else {
+            strip(value);
+        }
+        return value;
+    }
     /**
      * Drops the date bounds the endpoint refuses to parse.
      *

package/esm/forms-data/formsDataInterfaces.d.ts

@@ -1,5 +1,5 @@
 import type { IError } from '../base/utils.js';
-import type { IUploadingQuery } from '../file-uploading/fileUploadingInterfaces.js';
+import type { IUploadingQuery, IUploadingReturn } from '../file-uploading/fileUploadingInterfaces.js';
 /**
  * Interface for retrieving and posting form data in the system.
  * @interface IFormsData
@@ -567,7 +567,7 @@ interface ICaptchaValue {
  * @property {string} formData[].marker - The marker identifying the form field. Example: "name".
  * @property {string} formData[].type - The type of the form field. Example: "string".
  * @property {string} formData[].value - The value of the form field. Example: "name".
- * @property {IUploadingQuery} [fileQuery] - Optional file query for uploading files.
+ * @property {IUploadingQuery} [fileQuery] - Optional file query for uploading files. Kept for compatibility: the SDK reads `fileQuery` from the **file field itself** (see IBodyTypeFile), not from the body, so one set here does not change where a file is uploaded.
  * @example
     {
       "type": "page",
@@ -715,7 +715,7 @@ interface ITextWithHeaderValue {
  * @interface IBodyTypeImageGroupOfImages
  * @property {string} marker - marker name. Example: "avatar".
  * @property {'image' | 'groupOfImages'} type - Type value — must match the attribute type in the set, note the plural in "groupOfImages". Example: "image".
- * @property {object} value - Image Object. Contains image information.
+ * @property {object} value - The attached image. The same three shapes as a `file` field accepts, mixable in one array: a `File`/`Blob` (also a `FileList`), which the SDK uploads first; the descriptor `FileUploading.upload` returns for an image **already in storage**, passed through as it is; or a hand-built {@link IImageValue}. In a SUBMISSION the value must be an **array**, as for `file` — a lone object answers `400 formData's marker '<marker>' value must be an array`. Measured on js-sdk-tests.oneentry.cloud, 2026-10-08 (CMS-990).
  * @example
     [
       {
@@ -728,12 +728,14 @@ interface ITextWithHeaderValue {
         }
       }
     ]
+ * @property {IUploadingQuery} [fileQuery] - Where the SDK uploads a `File`/`Blob` value to. Read **per field**, not from the body; omitted, the SDK uploads to `page`/`editor` under a random id. Ignored for an image already in storage. Example: `{ "type": "page", "entity": "editor", "id": 3787 }`.
  * @description Represents an image or a group of images with their details, including filename, download link, size, preview link, and parameters for image compression.
  */
 interface IBodyTypeImageGroupOfImages {
     marker: string;
     type: 'image' | 'groupOfImages';
-    value: IImageValue | IImageValue[];
+    value: IImageValue | IUploadingReturn | File | Blob | (IImageValue | IUploadingReturn | File | Blob)[];
+    fileQuery?: IUploadingQuery;
 }
 /**
  * @interface IImageValueParams
@@ -764,7 +766,7 @@ interface IImageValue {
  * @interface IBodyTypeFile
  * @property {string} marker - marker name. Example: "picture".
  * @property {'file'} type - Type value. Example: "file".
- * @property {object} value - File Object. Contains file information. A single attached file is returned as the object itself, several files as an array.
+ * @property {object} value - The attached file. Three shapes are accepted and may be mixed in one array: a `File`/`Blob` (also a `FileList`), which the SDK uploads first; the descriptor `FileUploading.upload` returns for a file **already in storage**, which is passed through as it is; or a hand-built {@link IFileValue}. In a SUBMISSION the value must be an **array** — a lone descriptor or {@link IFileValue} answers `400 formData's marker '<marker>' value must be an array`, while a lone `File`/`Blob` is fine because the SDK wraps the upload result. A READ returns a single attached file as the object itself. Measured on js-sdk-tests.oneentry.cloud, 2026-10-08 (CMS-990).
  * @example
     [
       {
@@ -773,12 +775,14 @@ interface IImageValue {
         "size": 392585
       }
     ]
+ * @property {IUploadingQuery} [fileQuery] - Where the SDK uploads a `File`/`Blob` value to. Read **per field**, not from the body; omitted, the SDK uploads to `page`/`editor` under a random id. Ignored for a file already in storage. Example: `{ "type": "page", "entity": "editor", "id": 3787 }`.
  * @description Represents a file with its details, including filename, download link, and size.
  */
 interface IBodyTypeFile {
     marker: string;
     type: 'file';
-    value: IFileValue | IFileValue[];
+    value: IFileValue | IUploadingReturn | File | Blob | (IFileValue | IUploadingReturn | File | Blob)[];
+    fileQuery?: IUploadingQuery;
 }
 /**
  * @interface IFileValue

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oneentry",
-  "version": "1.0.169",
+  "version": "1.0.171",
   "description": "OneEntry NPM package",
   "main": "dist/index.js",
   "module": "esm/index.js",
@@ -48,7 +48,7 @@
   },
   "scripts": {
     "prepublishOnly": "node ../scripts/smoke-pack.js --files-only",
-    "postpublish": "node ../scripts/verify-published.js --named defineOneEntry --expect 1.0.169"
+    "postpublish": "node ../scripts/verify-published.js --named defineOneEntry --expect 1.0.171"
   },
   "sideEffects": false,
   "files": [