@aglyn/aglyn 1.0.0-beta.143

package/src/lib/app-utils/form-contract.js

@@ -0,0 +1,282 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * What a form's DESIGN must still satisfy for its submissions to arrive.
+ *
+ * A reusable component is only ever drawn: the worst an author can do to one
+ * is make it ugly, and the page still renders. A form is drawn AND it is a
+ * contract — `/api/forms/submit` keys submissions on its id, reads consent out
+ * of a field it names, and creates a lead from an address it expects to find.
+ * Every one of those couplings is resolved by NAME at submit time, so the
+ * design can break them, and breaking them is silent in every case: the form
+ * still renders, the visitor still submits, the row still lands, and the thing
+ * the merchant believed they were collecting is simply not there.
+ *
+ * That asymmetry is the whole reason this module exists. Publishing a form is
+ * not "save the drawing"; it is "promise the server can still read this".
+ *
+ * ## The six silent failures, and why each one is checked here
+ *
+ * Every check below corresponds to something a design can do that produces NO
+ * error at submit time. A design that fails loudly needs no guard — the author
+ * finds out. These are the ones where nobody finds out.
+ *
+ *  1. **The form node stops naming this form.** Submissions carry `formId` and
+ *     the route stamps it only after verifying it against this host's forms;
+ *     the Inbox's per-form list is an equality on it. Clear or rebind it and
+ *     every later submission is unattributable — while still landing in the
+ *     Inbox, so nothing looks broken and the form's own list just stops
+ *     growing.
+ *  2. **A field with no name.** `formFieldDeclsFromNodes` drops it, and the
+ *     runtime falls back to `name = fieldName || 'field'`, so several unnamed
+ *     inputs collapse onto ONE submission key. The visitor types, the value is
+ *     posted, and it is not retrievable under any name the author knows.
+ *  3. **Two fields sharing a name.** `FormData` joins entries under one key,
+ *     so the second input contributes no separate value and the declaration
+ *     keeps only the first. Two questions, one answer.
+ *  4. **Lead routing with nothing to extract an address from.**
+ *     `routing.lead` only ever fires when `extractEmailFromFields` finds one,
+ *     and that prefers a key matching `/email/i` before falling back to any
+ *     email-shaped value. A form with no such field can still route to leads
+ *     on paper and never create one.
+ *  5. **Lead routing with nothing that records consent.** The route files
+ *     the lead either way, and stamps an opt-in on it only from the field the
+ *     form declares or from an undeclared field on the closed name list it
+ *     falls back to. A form with neither files leads nobody may email — the
+ *     send-time consent join refuses every one — so the sales team works a
+ *     list the campaigns cannot reach, and nothing at submit time says so.
+ *  6. **A consent field that no longer exists.** `readFormDeclaredConsent`
+ *     looks up exactly `consentFieldName`. Rename or delete that field and it
+ *     returns `false` forever — the form keeps collecting the tick and the
+ *     opt-in stops being recorded. This is the one with consequences outside
+ *     the product, since an advertising basis that quietly stops is
+ *     indistinguishable downstream from one that was never given.
+ *
+ * ## What is NOT checked
+ *
+ * Anything the author can see. A missing label, an empty select, a field in
+ * the wrong order — those are visible on the canvas and are the author's to
+ * judge. This module is only for couplings that are invisible at design time
+ * and asymptomatic at run time.
+ *
+ * Pure and dependency-free, like `forms.ts` beside it: it reaches client
+ * bundles through `app-utils/index`, so nothing here may import a Node
+ * builtin.
+ */ import { collectFormFieldNodeIds, FORM_COMPONENT_ID, isMarketingConsentFieldName } from "./forms.js";
+/**
+ * `extractEmailFromFields` prefers a key matching this before falling back to
+ * any email-shaped value. Restated rather than imported so this module stays
+ * free of `contacts.ts`; {@link EMAIL_KEY_PATTERN} and that function agreeing
+ * is asserted in the spec rather than assumed.
+ */ const EMAIL_KEY_PATTERN = /email/i;
+/**
+ * Reads the fields a design draws, keeping every one of them.
+ *
+ * Deliberately NOT `formFieldDeclsFromNodes`. That function drops an unnamed
+ * field and the second of a duplicate pair, which is right for adoption — it
+ * describes what a page already submits — and useless here, because the
+ * dropped ones are precisely what this module has to report. Asking it would
+ * be asking a question whose answer has the evidence removed from it.
+ */ function drawnFields(nodes, formNodeId, formFieldComponentId) {
+    return collectFormFieldNodeIds(nodes, formNodeId, formFieldComponentId).map((nodeId)=>{
+        var _ref, _props_fieldName, _props_fieldType;
+        var _nodes_nodeId;
+        const props = (_ref = nodes == null ? void 0 : (_nodes_nodeId = nodes[nodeId]) == null ? void 0 : _nodes_nodeId.props) != null ? _ref : {};
+        return {
+            nodeId,
+            fieldName: String((_props_fieldName = props['fieldName']) != null ? _props_fieldName : '').trim(),
+            fieldType: String((_props_fieldType = props['fieldType']) != null ? _props_fieldType : 'text')
+        };
+    });
+}
+/**
+ * Whether a submission carrying these fields could yield an address to key
+ * a lead on — the one precondition of lead routing (AGL-2612).
+ *
+ * Exported because the check is asked in two places that never see a node
+ * tree: the form's own page decides whether to offer the routing switch, and
+ * the CRM's Leads section offers to turn routing on for a form from the
+ * declared field list alone. Both must agree with the publish check here or
+ * a switch flipped on one surface is refused on the next.
+ */ export function formFieldsCanYieldAnEmail(fields) {
+    return fields.some((field)=>field.fieldType === 'email' || EMAIL_KEY_PATTERN.test(field.fieldName));
+}
+/** The same question, of the fields a design DRAWS. */ function canYieldAnEmail(fields) {
+    return formFieldsCanYieldAnEmail(fields);
+}
+/**
+ * Whether a submission carrying these fields could record an opt-in — the
+ * other precondition of lead routing, and the one that decides whether a
+ * lead is worth filing: a lead nobody consented with is one the campaigns
+ * refuse at send time.
+ *
+ * Consent is recorded from the field the form DECLARES, or, when it declares
+ * none, from an undeclared field the route recognizes by name. Whether a
+ * declared field still exists is `consent-field-missing`'s question, asked
+ * separately so a lost field is reported once, as the loss it is.
+ *
+ * Exported for the same two surfaces as {@link formFieldsCanYieldAnEmail}:
+ * the switch on the form's page and the Leads section's offer must refuse
+ * what the publish check would refuse.
+ */ export function formFieldsCaptureConsent(fields, consentFieldName) {
+    if (String(consentFieldName != null ? consentFieldName : '').trim()) return true;
+    return fields.some((field)=>isMarketingConsentFieldName(field.fieldName));
+}
+/**
+ * A site that switched Forms off (AGL-3029) publishes no form — neither a form
+ * design nor a page, layout or component that carries one.
+ *
+ * Not one of the six silent failures above, and checked ahead of all of them:
+ * on such a site the published page does not draw a form and `/api/forms/submit`
+ * refuses every submission, so publishing one would put a hole on a live page
+ * while the author believed they had shipped a form. Refusing it is what makes
+ * the empty space on a page published BEFORE the switch the only kind there is.
+ */ export const FORMS_OFF_FOR_SITE_VIOLATION = {
+    code: 'forms-off-for-site',
+    message: 'Forms is switched off for this site, so a form published here would not ' + 'show on its pages or accept submissions. Switch Forms back on for this ' + 'site in Admin › Plugins to publish it.'
+};
+/**
+ * Whether a node map carries a form: a `form` node anywhere in it, bound to
+ * an entity or drawn inline. Read by `componentId`, which every form node has
+ * carried from the start, rather than by the `pluginId` a node was stamped
+ * with when it was placed.
+ */ export function nodesCarryForm(nodes) {
+    return Object.values(nodes != null ? nodes : {}).some((node)=>(node == null ? void 0 : node.componentId) === FORM_COMPONENT_ID);
+}
+/**
+ * The same refusal, for a page, layout or component that CARRIES a form: the
+ * sentence names the two ways forward, because removing the form publishes
+ * the rest of the page.
+ */ export const FORMS_OFF_FOR_SITE_PAGE_VIOLATION = {
+    code: 'forms-off-for-site',
+    message: 'Forms is switched off for this site, so the form on this page would not ' + 'show or accept submissions. Remove the form, or switch Forms back on for ' + 'this site in Admin › Plugins, to publish it.'
+};
+/**
+ * The refusal for publishing a page, layout or component that carries a form
+ * on a site that switched Forms off, or `null` (AGL-3029). `formsOnForSite`
+ * absent means the caller could not tell, which refuses nothing.
+ */ export function formsOffPublishViolation(nodes, formsOnForSite) {
+    return formsOnForSite === false && nodesCarryForm(nodes) ? FORMS_OFF_FOR_SITE_PAGE_VIOLATION : null;
+}
+/**
+ * Everything this design would break, or an empty array.
+ *
+ * @param options.form      the stored document, for what it ROUTES and what it
+ *                          names as its consent field. `routing` and
+ *                          `consentFieldName` are the only two parts read: the
+ *                          stored `fields` are the previous design's output,
+ *                          not a contract the new one owes anything to.
+ * @param options.formId    the id this design is the design OF.
+ * @param options.nodes     the flat node map, canvas or published.
+ * @param options.formNodeId the `form` node inside it.
+ * @param options.formsOnForSite whether Forms runs on the site the form is
+ *                      published to; `false` refuses the design outright.
+ *                      Absent, the caller could not tell, and nothing is
+ *                      refused for it.
+ */ export function checkFormContract(options) {
+    var _ref, _ref1, _ref2, _ref3;
+    var _options_componentIds, _options_componentIds1, _formNode_props, _form_routing;
+    const { form, formId, nodes, formNodeId } = options;
+    // Nothing about the design matters on a site that will not draw it.
+    if (options.formsOnForSite === false) return [
+        FORMS_OFF_FOR_SITE_VIOLATION
+    ];
+    const formComponentId = (_ref = (_options_componentIds = options.componentIds) == null ? void 0 : _options_componentIds.form) != null ? _ref : 'form';
+    const formFieldComponentId = (_ref1 = (_options_componentIds1 = options.componentIds) == null ? void 0 : _options_componentIds1.formField) != null ? _ref1 : 'formField';
+    const violations = [];
+    const formNode = formNodeId ? nodes == null ? void 0 : nodes[formNodeId] : undefined;
+    if (!formNode || formNode.componentId !== formComponentId) {
+        // Nothing else is answerable without it, and reporting a cascade of
+        // consequences would bury the one thing the author has to do.
+        return [
+            {
+                code: 'form-node-missing',
+                message: 'This design no longer contains a form. Submissions have nowhere ' + 'to come from, so nothing would reach the Inbox.'
+            }
+        ];
+    }
+    const boundId = String((_ref2 = (_formNode_props = formNode.props) == null ? void 0 : _formNode_props['formId']) != null ? _ref2 : '').trim();
+    if (boundId !== formId) {
+        violations.push({
+            code: 'form-id-unbound',
+            nodeId: formNodeId,
+            message: boundId ? `This form's design is bound to a different form (${boundId}). ` + 'Submissions would be filed under that one instead of this one.' : 'This form lost its binding. Submissions would still arrive in the ' + 'Inbox but would not appear in this form’s own list.'
+        });
+    }
+    const fields = drawnFields(nodes, formNodeId, formFieldComponentId);
+    const seen = new Map();
+    for (const field of fields){
+        if (!field.fieldName) {
+            violations.push({
+                code: 'field-unnamed',
+                nodeId: field.nodeId,
+                message: 'This field has no name, so whatever a visitor types into it ' + 'arrives under a shared key and cannot be told apart from any ' + 'other unnamed field.'
+            });
+            continue;
+        }
+        const first = seen.get(field.fieldName);
+        if (first !== undefined) {
+            violations.push({
+                code: 'field-name-duplicated',
+                nodeId: field.nodeId,
+                fieldName: field.fieldName,
+                message: `Another field is already called “${field.fieldName}”. ` + 'Two fields sharing a name arrive as one answer, and this one’s ' + 'value would be lost.'
+            });
+            continue;
+        }
+        seen.set(field.fieldName, field.nodeId);
+    }
+    const consentFieldName = String((_ref3 = form == null ? void 0 : form.consentFieldName) != null ? _ref3 : '').trim();
+    /*
+   * The two gates on a lead, reported one at a time in the order the route
+   * decides them: no address means no lead at all, which makes consent moot
+   * until a field exists to key one on.
+   */ if ((form == null ? void 0 : (_form_routing = form.routing) == null ? void 0 : _form_routing.lead) === true) {
+        if (!canYieldAnEmail(fields)) {
+            violations.push({
+                code: 'lead-routing-has-no-email-field',
+                nodeId: formNodeId,
+                message: 'This form creates a lead from the address someone gives it, and the ' + 'design has no email field. It would collect submissions and never ' + 'create a lead.'
+            });
+        } else if (!formFieldsCaptureConsent(fields, consentFieldName)) {
+            violations.push({
+                code: 'lead-routing-has-no-consent-field',
+                nodeId: formNodeId,
+                message: 'This form creates a lead from the address someone gives it, and ' + 'nothing on it records their consent. Every lead it filed would be ' + 'one the team cannot email — name a marketing consent field on the ' + 'form’s page.'
+            });
+        }
+    }
+    if (consentFieldName && !seen.has(consentFieldName)) {
+        violations.push({
+            code: 'consent-field-missing',
+            fieldName: consentFieldName,
+            message: `This form records marketing consent from a field called ` + `“${consentFieldName}”, which the design no longer has. ` + 'Opt-ins would stop being recorded without any other sign.'
+        });
+    }
+    return violations;
+}
+/**
+ * Whether this design may be published.
+ *
+ * Every violation is blocking. There is no advisory tier because there is no
+ * violation here an author would be right to ship: each one names data that
+ * silently fails to arrive, and a warning that can be clicked past is how a
+ * silent failure ships anyway.
+ */ export function formContractIsSatisfied(violations) {
+    return violations.length === 0;
+}
+
+//# sourceMappingURL=form-contract.js.map

package/src/lib/app-utils/form-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/form-contract.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * What a form's DESIGN must still satisfy for its submissions to arrive.\n *\n * A reusable component is only ever drawn: the worst an author can do to one\n * is make it ugly, and the page still renders. A form is drawn AND it is a\n * contract — `/api/forms/submit` keys submissions on its id, reads consent out\n * of a field it names, and creates a lead from an address it expects to find.\n * Every one of those couplings is resolved by NAME at submit time, so the\n * design can break them, and breaking them is silent in every case: the form\n * still renders, the visitor still submits, the row still lands, and the thing\n * the merchant believed they were collecting is simply not there.\n *\n * That asymmetry is the whole reason this module exists. Publishing a form is\n * not \"save the drawing\"; it is \"promise the server can still read this\".\n *\n * ## The six silent failures, and why each one is checked here\n *\n * Every check below corresponds to something a design can do that produces NO\n * error at submit time. A design that fails loudly needs no guard — the author\n * finds out. These are the ones where nobody finds out.\n *\n *  1. **The form node stops naming this form.** Submissions carry `formId` and\n *     the route stamps it only after verifying it against this host's forms;\n *     the Inbox's per-form list is an equality on it. Clear or rebind it and\n *     every later submission is unattributable — while still landing in the\n *     Inbox, so nothing looks broken and the form's own list just stops\n *     growing.\n *  2. **A field with no name.** `formFieldDeclsFromNodes` drops it, and the\n *     runtime falls back to `name = fieldName || 'field'`, so several unnamed\n *     inputs collapse onto ONE submission key. The visitor types, the value is\n *     posted, and it is not retrievable under any name the author knows.\n *  3. **Two fields sharing a name.** `FormData` joins entries under one key,\n *     so the second input contributes no separate value and the declaration\n *     keeps only the first. Two questions, one answer.\n *  4. **Lead routing with nothing to extract an address from.**\n *     `routing.lead` only ever fires when `extractEmailFromFields` finds one,\n *     and that prefers a key matching `/email/i` before falling back to any\n *     email-shaped value. A form with no such field can still route to leads\n *     on paper and never create one.\n *  5. **Lead routing with nothing that records consent.** The route files\n *     the lead either way, and stamps an opt-in on it only from the field the\n *     form declares or from an undeclared field on the closed name list it\n *     falls back to. A form with neither files leads nobody may email — the\n *     send-time consent join refuses every one — so the sales team works a\n *     list the campaigns cannot reach, and nothing at submit time says so.\n *  6. **A consent field that no longer exists.** `readFormDeclaredConsent`\n *     looks up exactly `consentFieldName`. Rename or delete that field and it\n *     returns `false` forever — the form keeps collecting the tick and the\n *     opt-in stops being recorded. This is the one with consequences outside\n *     the product, since an advertising basis that quietly stops is\n *     indistinguishable downstream from one that was never given.\n *\n * ## What is NOT checked\n *\n * Anything the author can see. A missing label, an empty select, a field in\n * the wrong order — those are visible on the canvas and are the author's to\n * judge. This module is only for couplings that are invisible at design time\n * and asymptomatic at run time.\n *\n * Pure and dependency-free, like `forms.ts` beside it: it reaches client\n * bundles through `app-utils/index`, so nothing here may import a Node\n * builtin.\n */\n\nimport type {\n  AglynNodeSchema,\n  NodeId,\n} from '../foundation/definitions/components.types'\nimport {\n  collectFormFieldNodeIds,\n  FORM_COMPONENT_ID,\n  type FormDocument,\n  isMarketingConsentFieldName,\n} from './forms'\n\n/**\n * Which coupling a violation is about.\n *\n * A code rather than a message so a caller can decide presentation — the\n * besigner shows these beside the offending node, the API route puts them in\n * a 422 body — without either one parsing prose.\n */\nexport type FormContractViolationCode =\n  | 'forms-off-for-site'\n  | 'form-node-missing'\n  | 'form-id-unbound'\n  | 'field-unnamed'\n  | 'field-name-duplicated'\n  | 'lead-routing-has-no-email-field'\n  | 'lead-routing-has-no-consent-field'\n  | 'consent-field-missing'\n\n/** One way this design would fail to keep the server's side of the bargain. */\nexport interface FormContractViolation {\n  code: FormContractViolationCode\n  /** The node the author has to fix, when a single node is at fault. */\n  nodeId?: NodeId\n  /** The name at issue, for the two checks that are about names. */\n  fieldName?: string\n  /** Author-facing, and stated as the CONSEQUENCE rather than the rule. */\n  message: string\n}\n\n/** A field as the design declares it, before any de-duplication. */\ninterface DrawnField {\n  nodeId: NodeId\n  fieldName: string\n  fieldType: string\n}\n\n/**\n * `extractEmailFromFields` prefers a key matching this before falling back to\n * any email-shaped value. Restated rather than imported so this module stays\n * free of `contacts.ts`; {@link EMAIL_KEY_PATTERN} and that function agreeing\n * is asserted in the spec rather than assumed.\n */\nconst EMAIL_KEY_PATTERN = /email/i\n\n/**\n * Reads the fields a design draws, keeping every one of them.\n *\n * Deliberately NOT `formFieldDeclsFromNodes`. That function drops an unnamed\n * field and the second of a duplicate pair, which is right for adoption — it\n * describes what a page already submits — and useless here, because the\n * dropped ones are precisely what this module has to report. Asking it would\n * be asking a question whose answer has the evidence removed from it.\n */\nfunction drawnFields(\n  nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null,\n  formNodeId: NodeId,\n  formFieldComponentId: string,\n): DrawnField[] {\n  return collectFormFieldNodeIds(nodes, formNodeId, formFieldComponentId).map(\n    (nodeId) => {\n      const props = (nodes?.[nodeId]?.props ?? {}) as Record<string, unknown>\n      return {\n        nodeId,\n        fieldName: String(props['fieldName'] ?? '').trim(),\n        fieldType: String(props['fieldType'] ?? 'text'),\n      }\n    },\n  )\n}\n\n/**\n * Whether a submission carrying these fields could yield an address to key\n * a lead on — the one precondition of lead routing (AGL-2612).\n *\n * Exported because the check is asked in two places that never see a node\n * tree: the form's own page decides whether to offer the routing switch, and\n * the CRM's Leads section offers to turn routing on for a form from the\n * declared field list alone. Both must agree with the publish check here or\n * a switch flipped on one surface is refused on the next.\n */\nexport function formFieldsCanYieldAnEmail(\n  fields: ReadonlyArray<{ fieldName: string; fieldType: string }>,\n): boolean {\n  return fields.some(\n    (field) =>\n      field.fieldType === 'email' || EMAIL_KEY_PATTERN.test(field.fieldName),\n  )\n}\n\n/** The same question, of the fields a design DRAWS. */\nfunction canYieldAnEmail(fields: DrawnField[]): boolean {\n  return formFieldsCanYieldAnEmail(fields)\n}\n\n/**\n * Whether a submission carrying these fields could record an opt-in — the\n * other precondition of lead routing, and the one that decides whether a\n * lead is worth filing: a lead nobody consented with is one the campaigns\n * refuse at send time.\n *\n * Consent is recorded from the field the form DECLARES, or, when it declares\n * none, from an undeclared field the route recognizes by name. Whether a\n * declared field still exists is `consent-field-missing`'s question, asked\n * separately so a lost field is reported once, as the loss it is.\n *\n * Exported for the same two surfaces as {@link formFieldsCanYieldAnEmail}:\n * the switch on the form's page and the Leads section's offer must refuse\n * what the publish check would refuse.\n */\nexport function formFieldsCaptureConsent(\n  fields: ReadonlyArray<{ fieldName: string }>,\n  consentFieldName: string | null | undefined,\n): boolean {\n  if (String(consentFieldName ?? '').trim()) return true\n  return fields.some((field) => isMarketingConsentFieldName(field.fieldName))\n}\n\n/**\n * A site that switched Forms off (AGL-3029) publishes no form — neither a form\n * design nor a page, layout or component that carries one.\n *\n * Not one of the six silent failures above, and checked ahead of all of them:\n * on such a site the published page does not draw a form and `/api/forms/submit`\n * refuses every submission, so publishing one would put a hole on a live page\n * while the author believed they had shipped a form. Refusing it is what makes\n * the empty space on a page published BEFORE the switch the only kind there is.\n */\nexport const FORMS_OFF_FOR_SITE_VIOLATION: FormContractViolation = {\n  code: 'forms-off-for-site',\n  message:\n    'Forms is switched off for this site, so a form published here would not ' +\n    'show on its pages or accept submissions. Switch Forms back on for this ' +\n    'site in Admin › Plugins to publish it.',\n}\n\n/**\n * Whether a node map carries a form: a `form` node anywhere in it, bound to\n * an entity or drawn inline. Read by `componentId`, which every form node has\n * carried from the start, rather than by the `pluginId` a node was stamped\n * with when it was placed.\n */\nexport function nodesCarryForm(\n  nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null,\n): boolean {\n  return Object.values(nodes ?? {}).some(\n    (node) => node?.componentId === FORM_COMPONENT_ID,\n  )\n}\n\n/**\n * The same refusal, for a page, layout or component that CARRIES a form: the\n * sentence names the two ways forward, because removing the form publishes\n * the rest of the page.\n */\nexport const FORMS_OFF_FOR_SITE_PAGE_VIOLATION: FormContractViolation = {\n  code: 'forms-off-for-site',\n  message:\n    'Forms is switched off for this site, so the form on this page would not ' +\n    'show or accept submissions. Remove the form, or switch Forms back on for ' +\n    'this site in Admin › Plugins, to publish it.',\n}\n\n/**\n * The refusal for publishing a page, layout or component that carries a form\n * on a site that switched Forms off, or `null` (AGL-3029). `formsOnForSite`\n * absent means the caller could not tell, which refuses nothing.\n */\nexport function formsOffPublishViolation(\n  nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null,\n  formsOnForSite: boolean | undefined,\n): FormContractViolation | null {\n  return formsOnForSite === false && nodesCarryForm(nodes)\n    ? FORMS_OFF_FOR_SITE_PAGE_VIOLATION\n    : null\n}\n\n/**\n * Everything this design would break, or an empty array.\n *\n * @param options.form      the stored document, for what it ROUTES and what it\n *                          names as its consent field. `routing` and\n *                          `consentFieldName` are the only two parts read: the\n *                          stored `fields` are the previous design's output,\n *                          not a contract the new one owes anything to.\n * @param options.formId    the id this design is the design OF.\n * @param options.nodes     the flat node map, canvas or published.\n * @param options.formNodeId the `form` node inside it.\n * @param options.formsOnForSite whether Forms runs on the site the form is\n *                      published to; `false` refuses the design outright.\n *                      Absent, the caller could not tell, and nothing is\n *                      refused for it.\n */\nexport function checkFormContract(options: {\n  form: Pick<FormDocument, 'routing' | 'consentFieldName'> | null | undefined\n  formId: string\n  nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null\n  formNodeId: NodeId | undefined | null\n  /** Overridable for a host whose plugin registers these under other ids. */\n  componentIds?: { form?: string; formField?: string }\n  formsOnForSite?: boolean\n}): FormContractViolation[] {\n  const { form, formId, nodes, formNodeId } = options\n  // Nothing about the design matters on a site that will not draw it.\n  if (options.formsOnForSite === false) return [FORMS_OFF_FOR_SITE_VIOLATION]\n  const formComponentId = options.componentIds?.form ?? 'form'\n  const formFieldComponentId = options.componentIds?.formField ?? 'formField'\n  const violations: FormContractViolation[] = []\n\n  const formNode = formNodeId ? nodes?.[formNodeId] : undefined\n  if (!formNode || formNode.componentId !== formComponentId) {\n    // Nothing else is answerable without it, and reporting a cascade of\n    // consequences would bury the one thing the author has to do.\n    return [\n      {\n        code: 'form-node-missing',\n        message:\n          'This design no longer contains a form. Submissions have nowhere ' +\n          'to come from, so nothing would reach the Inbox.',\n      },\n    ]\n  }\n\n  const boundId = String(\n    (formNode.props as Record<string, unknown> | undefined)?.['formId'] ?? '',\n  ).trim()\n  if (boundId !== formId) {\n    violations.push({\n      code: 'form-id-unbound',\n      nodeId: formNodeId as NodeId,\n      message: boundId\n        ? `This form's design is bound to a different form (${boundId}). ` +\n          'Submissions would be filed under that one instead of this one.'\n        : 'This form lost its binding. Submissions would still arrive in the ' +\n          'Inbox but would not appear in this form’s own list.',\n    })\n  }\n\n  const fields = drawnFields(nodes, formNodeId as NodeId, formFieldComponentId)\n\n  const seen = new Map<string, NodeId>()\n  for (const field of fields) {\n    if (!field.fieldName) {\n      violations.push({\n        code: 'field-unnamed',\n        nodeId: field.nodeId,\n        message:\n          'This field has no name, so whatever a visitor types into it ' +\n          'arrives under a shared key and cannot be told apart from any ' +\n          'other unnamed field.',\n      })\n      continue\n    }\n    const first = seen.get(field.fieldName)\n    if (first !== undefined) {\n      violations.push({\n        code: 'field-name-duplicated',\n        nodeId: field.nodeId,\n        fieldName: field.fieldName,\n        message:\n          `Another field is already called “${field.fieldName}”. ` +\n          'Two fields sharing a name arrive as one answer, and this one’s ' +\n          'value would be lost.',\n      })\n      continue\n    }\n    seen.set(field.fieldName, field.nodeId)\n  }\n\n  const consentFieldName = String(form?.consentFieldName ?? '').trim()\n\n  /*\n   * The two gates on a lead, reported one at a time in the order the route\n   * decides them: no address means no lead at all, which makes consent moot\n   * until a field exists to key one on.\n   */\n  if (form?.routing?.lead === true) {\n    if (!canYieldAnEmail(fields)) {\n      violations.push({\n        code: 'lead-routing-has-no-email-field',\n        nodeId: formNodeId as NodeId,\n        message:\n          'This form creates a lead from the address someone gives it, and the ' +\n          'design has no email field. It would collect submissions and never ' +\n          'create a lead.',\n      })\n    } else if (!formFieldsCaptureConsent(fields, consentFieldName)) {\n      violations.push({\n        code: 'lead-routing-has-no-consent-field',\n        nodeId: formNodeId as NodeId,\n        message:\n          'This form creates a lead from the address someone gives it, and ' +\n          'nothing on it records their consent. Every lead it filed would be ' +\n          'one the team cannot email — name a marketing consent field on the ' +\n          'form’s page.',\n      })\n    }\n  }\n\n  if (consentFieldName && !seen.has(consentFieldName)) {\n    violations.push({\n      code: 'consent-field-missing',\n      fieldName: consentFieldName,\n      message:\n        `This form records marketing consent from a field called ` +\n        `“${consentFieldName}”, which the design no longer has. ` +\n        'Opt-ins would stop being recorded without any other sign.',\n    })\n  }\n\n  return violations\n}\n\n/**\n * Whether this design may be published.\n *\n * Every violation is blocking. There is no advisory tier because there is no\n * violation here an author would be right to ship: each one names data that\n * silently fails to arrive, and a warning that can be clicked past is how a\n * silent failure ships anyway.\n */\nexport function formContractIsSatisfied(\n  violations: FormContractViolation[],\n): boolean {\n  return violations.length === 0\n}\n"],"names":["collectFormFieldNodeIds","FORM_COMPONENT_ID","isMarketingConsentFieldName","EMAIL_KEY_PATTERN","drawnFields","nodes","formNodeId","formFieldComponentId","map","nodeId","props","fieldName","String","trim","fieldType","formFieldsCanYieldAnEmail","fields","some","field","test","canYieldAnEmail","formFieldsCaptureConsent","consentFieldName","FORMS_OFF_FOR_SITE_VIOLATION","code","message","nodesCarryForm","Object","values","node","componentId","FORMS_OFF_FOR_SITE_PAGE_VIOLATION","formsOffPublishViolation","formsOnForSite","checkFormContract","options","formNode","form","formId","formComponentId","componentIds","formField","violations","undefined","boundId","push","seen","Map","first","get","set","routing","lead","has","formContractIsSatisfied","length"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DC,GAMD,SACEA,uBAAuB,EACvBC,iBAAiB,EAEjBC,2BAA2B,QACtB,aAAS;AAqChB;;;;;CAKC,GACD,MAAMC,oBAAoB;AAE1B;;;;;;;;CAQC,GACD,SAASC,YACPC,KAAqE,EACrEC,UAAkB,EAClBC,oBAA4B;IAE5B,OAAOP,wBAAwBK,OAAOC,YAAYC,sBAAsBC,GAAG,CACzE,CAACC;kBAIqBC,kBACAA;YAJLL;QAAf,MAAMK,gBAASL,0BAAAA,gBAAAA,KAAO,CAACI,OAAO,qBAAfJ,cAAiBK,KAAK,mBAAI,CAAC;QAC1C,OAAO;YACLD;YACAE,WAAWC,QAAOF,mBAAAA,KAAK,CAAC,YAAY,YAAlBA,mBAAsB,IAAIG,IAAI;YAChDC,WAAWF,QAAOF,mBAAAA,KAAK,CAAC,YAAY,YAAlBA,mBAAsB;QAC1C;IACF;AAEJ;AAEA;;;;;;;;;CASC,GACD,OAAO,SAASK,0BACdC,MAA+D;IAE/D,OAAOA,OAAOC,IAAI,CAChB,CAACC,QACCA,MAAMJ,SAAS,KAAK,WAAWX,kBAAkBgB,IAAI,CAACD,MAAMP,SAAS;AAE3E;AAEA,qDAAqD,GACrD,SAASS,gBAAgBJ,MAAoB;IAC3C,OAAOD,0BAA0BC;AACnC;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASK,yBACdL,MAA4C,EAC5CM,gBAA2C;IAE3C,IAAIV,OAAOU,2BAAAA,mBAAoB,IAAIT,IAAI,IAAI,OAAO;IAClD,OAAOG,OAAOC,IAAI,CAAC,CAACC,QAAUhB,4BAA4BgB,MAAMP,SAAS;AAC3E;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMY,+BAAsD;IACjEC,MAAM;IACNC,SACE,6EACA,4EACA;AACJ,EAAC;AAED;;;;;CAKC,GACD,OAAO,SAASC,eACdrB,KAAqE;IAErE,OAAOsB,OAAOC,MAAM,CAACvB,gBAAAA,QAAS,CAAC,GAAGY,IAAI,CACpC,CAACY,OAASA,CAAAA,wBAAAA,KAAMC,WAAW,MAAK7B;AAEpC;AAEA;;;;CAIC,GACD,OAAO,MAAM8B,oCAA2D;IACtEP,MAAM;IACNC,SACE,6EACA,8EACA;AACJ,EAAC;AAED;;;;CAIC,GACD,OAAO,SAASO,yBACd3B,KAAqE,EACrE4B,cAAmC;IAEnC,OAAOA,mBAAmB,SAASP,eAAerB,SAC9C0B,oCACA;AACN;AAEA;;;;;;;;;;;;;;;CAeC,GACD,OAAO,SAASG,kBAAkBC,OAQjC;;QAIyBA,uBACKA,wBAkB1BC,iBAoDCC;IA1EJ,MAAM,EAAEA,IAAI,EAAEC,MAAM,EAAEjC,KAAK,EAAEC,UAAU,EAAE,GAAG6B;IAC5C,oEAAoE;IACpE,IAAIA,QAAQF,cAAc,KAAK,OAAO,OAAO;QAACV;KAA6B;IAC3E,MAAMgB,2BAAkBJ,wBAAAA,QAAQK,YAAY,qBAApBL,sBAAsBE,IAAI,mBAAI;IACtD,MAAM9B,iCAAuB4B,yBAAAA,QAAQK,YAAY,qBAApBL,uBAAsBM,SAAS,oBAAI;IAChE,MAAMC,aAAsC,EAAE;IAE9C,MAAMN,WAAW9B,aAAaD,yBAAAA,KAAO,CAACC,WAAW,GAAGqC;IACpD,IAAI,CAACP,YAAYA,SAASN,WAAW,KAAKS,iBAAiB;QACzD,oEAAoE;QACpE,8DAA8D;QAC9D,OAAO;YACL;gBACEf,MAAM;gBACNC,SACE,qEACA;YACJ;SACD;IACH;IAEA,MAAMmB,UAAUhC,iBACbwB,kBAAAA,SAAS1B,KAAK,qBAAf,AAAC0B,eAAwD,CAAC,SAAS,oBAAI,IACvEvB,IAAI;IACN,IAAI+B,YAAYN,QAAQ;QACtBI,WAAWG,IAAI,CAAC;YACdrB,MAAM;YACNf,QAAQH;YACRmB,SAASmB,UACL,CAAC,iDAAiD,EAAEA,QAAQ,GAAG,CAAC,GAChE,mEACA,uEACA;QACN;IACF;IAEA,MAAM5B,SAASZ,YAAYC,OAAOC,YAAsBC;IAExD,MAAMuC,OAAO,IAAIC;IACjB,KAAK,MAAM7B,SAASF,OAAQ;QAC1B,IAAI,CAACE,MAAMP,SAAS,EAAE;YACpB+B,WAAWG,IAAI,CAAC;gBACdrB,MAAM;gBACNf,QAAQS,MAAMT,MAAM;gBACpBgB,SACE,iEACA,kEACA;YACJ;YACA;QACF;QACA,MAAMuB,QAAQF,KAAKG,GAAG,CAAC/B,MAAMP,SAAS;QACtC,IAAIqC,UAAUL,WAAW;YACvBD,WAAWG,IAAI,CAAC;gBACdrB,MAAM;gBACNf,QAAQS,MAAMT,MAAM;gBACpBE,WAAWO,MAAMP,SAAS;gBAC1Bc,SACE,CAAC,iCAAiC,EAAEP,MAAMP,SAAS,CAAC,GAAG,CAAC,GACxD,oEACA;YACJ;YACA;QACF;QACAmC,KAAKI,GAAG,CAAChC,MAAMP,SAAS,EAAEO,MAAMT,MAAM;IACxC;IAEA,MAAMa,mBAAmBV,gBAAOyB,wBAAAA,KAAMf,gBAAgB,oBAAI,IAAIT,IAAI;IAElE;;;;GAIC,GACD,IAAIwB,CAAAA,yBAAAA,gBAAAA,KAAMc,OAAO,qBAAbd,cAAee,IAAI,MAAK,MAAM;QAChC,IAAI,CAAChC,gBAAgBJ,SAAS;YAC5B0B,WAAWG,IAAI,CAAC;gBACdrB,MAAM;gBACNf,QAAQH;gBACRmB,SACE,yEACA,uEACA;YACJ;QACF,OAAO,IAAI,CAACJ,yBAAyBL,QAAQM,mBAAmB;YAC9DoB,WAAWG,IAAI,CAAC;gBACdrB,MAAM;gBACNf,QAAQH;gBACRmB,SACE,qEACA,uEACA,uEACA;YACJ;QACF;IACF;IAEA,IAAIH,oBAAoB,CAACwB,KAAKO,GAAG,CAAC/B,mBAAmB;QACnDoB,WAAWG,IAAI,CAAC;YACdrB,MAAM;YACNb,WAAWW;YACXG,SACE,CAAC,wDAAwD,CAAC,GAC1D,CAAC,CAAC,EAAEH,iBAAiB,mCAAmC,CAAC,GACzD;QACJ;IACF;IAEA,OAAOoB;AACT;AAEA;;;;;;;CAOC,GACD,OAAO,SAASY,wBACdZ,UAAmC;IAEnC,OAAOA,WAAWa,MAAM,KAAK;AAC/B"}

package/src/lib/app-utils/form-dataset-binding.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { AglynNodeSchema, NodeId } from '../foundation';
+/**
+ * Where a form's submissions are also written as dataset records, read off
+ * the form as a page renders it.
+ */
+export interface FormDatasetBinding {
+    /** The dataset, by id, so renaming it never breaks the binding (AGL-556). */
+    datasetId?: string;
+    /** The legacy by-name binding, honored when no id is set (AGL-141). */
+    datasetName?: string;
+    /** Submitted field name → the dataset field id the value is stored under. */
+    fieldMap: Record<string, string>;
+}
+/** The most fields a submission may carry, and so the most a map can name. */
+export declare const FORM_DATASET_BINDING_MAX_FIELDS = 20;
+/**
+ * The dataset binding a `form` node declares, or null when it declares none.
+ *
+ * The map is built the way the browser builds the submission: every
+ * `formField` under the form, in reading order, keyed by the name the field
+ * submits under (`fieldName`, or `field` when it has none), and a later field
+ * under the same name replaces an earlier one. A field with no
+ * `datasetFieldId` maps nothing and its value falls back to matching dataset
+ * fields by name.
+ *
+ * Read from the COMPOSED tree, so a form grafted from a layout, a reusable
+ * component or a form entity is read exactly as the page renders it.
+ */
+export declare function formDatasetBindingOf(nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null, formNodeId: NodeId): FormDatasetBinding | null;
+/** Every `form` node in a composed tree that declares a dataset binding. */
+export declare function formDatasetBindingsOf(nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null): Array<{
+    nodeId: NodeId;
+    binding: FormDatasetBinding;
+}>;

package/src/lib/app-utils/form-dataset-binding.js

@@ -0,0 +1,74 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { collectFormFieldNodeIds, FORM_COMPONENT_ID } from "./forms.js";
+/** The most fields a submission may carry, and so the most a map can name. */ export const FORM_DATASET_BINDING_MAX_FIELDS = 20;
+const text = (value, max)=>typeof value === 'string' ? value.trim().slice(0, max) : '';
+/**
+ * The dataset binding a `form` node declares, or null when it declares none.
+ *
+ * The map is built the way the browser builds the submission: every
+ * `formField` under the form, in reading order, keyed by the name the field
+ * submits under (`fieldName`, or `field` when it has none), and a later field
+ * under the same name replaces an earlier one. A field with no
+ * `datasetFieldId` maps nothing and its value falls back to matching dataset
+ * fields by name.
+ *
+ * Read from the COMPOSED tree, so a form grafted from a layout, a reusable
+ * component or a form entity is read exactly as the page renders it.
+ */ export function formDatasetBindingOf(nodes, formNodeId) {
+    var _node_props;
+    const node = nodes == null ? void 0 : nodes[formNodeId];
+    if ((node == null ? void 0 : node.componentId) !== FORM_COMPONENT_ID) return null;
+    const props = (_node_props = node.props) != null ? _node_props : {};
+    const datasetId = text(props['datasetId'], 128);
+    const datasetName = text(props['datasetName'], 60);
+    if (!datasetId && !datasetName) return null;
+    const fieldMap = {};
+    for (const fieldNodeId of collectFormFieldNodeIds(nodes, formNodeId)){
+        var _ref;
+        var _nodes_fieldNodeId;
+        const fieldProps = (_ref = nodes == null ? void 0 : (_nodes_fieldNodeId = nodes[fieldNodeId]) == null ? void 0 : _nodes_fieldNodeId.props) != null ? _ref : {};
+        const datasetFieldId = text(fieldProps['datasetFieldId'], 64);
+        if (!datasetFieldId) continue;
+        const submittedKey = text(fieldProps['fieldName'], 64) || 'field';
+        if (!(submittedKey in fieldMap) && Object.keys(fieldMap).length >= FORM_DATASET_BINDING_MAX_FIELDS) {
+            continue;
+        }
+        fieldMap[submittedKey] = datasetFieldId;
+    }
+    return _extends({}, datasetId ? {
+        datasetId
+    } : {}, datasetName ? {
+        datasetName
+    } : {}, {
+        fieldMap
+    });
+}
+/** Every `form` node in a composed tree that declares a dataset binding. */ export function formDatasetBindingsOf(nodes) {
+    const found = [];
+    for (const [nodeId, node] of Object.entries(nodes != null ? nodes : {})){
+        if ((node == null ? void 0 : node.componentId) !== FORM_COMPONENT_ID) continue;
+        const binding = formDatasetBindingOf(nodes, nodeId);
+        if (binding) found.push({
+            nodeId: nodeId,
+            binding
+        });
+    }
+    return found;
+}
+
+//# sourceMappingURL=form-dataset-binding.js.map

package/src/lib/app-utils/form-dataset-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/form-dataset-binding.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { AglynNodeSchema, NodeId } from '../foundation'\nimport { collectFormFieldNodeIds, FORM_COMPONENT_ID } from './forms'\n\n/**\n * Where a form's submissions are also written as dataset records, read off\n * the form as a page renders it.\n */\nexport interface FormDatasetBinding {\n  /** The dataset, by id, so renaming it never breaks the binding (AGL-556). */\n  datasetId?: string\n  /** The legacy by-name binding, honored when no id is set (AGL-141). */\n  datasetName?: string\n  /** Submitted field name → the dataset field id the value is stored under. */\n  fieldMap: Record<string, string>\n}\n\n/** The most fields a submission may carry, and so the most a map can name. */\nexport const FORM_DATASET_BINDING_MAX_FIELDS = 20\n\nconst text = (value: unknown, max: number): string =>\n  typeof value === 'string' ? value.trim().slice(0, max) : ''\n\n/**\n * The dataset binding a `form` node declares, or null when it declares none.\n *\n * The map is built the way the browser builds the submission: every\n * `formField` under the form, in reading order, keyed by the name the field\n * submits under (`fieldName`, or `field` when it has none), and a later field\n * under the same name replaces an earlier one. A field with no\n * `datasetFieldId` maps nothing and its value falls back to matching dataset\n * fields by name.\n *\n * Read from the COMPOSED tree, so a form grafted from a layout, a reusable\n * component or a form entity is read exactly as the page renders it.\n */\nexport function formDatasetBindingOf(\n  nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null,\n  formNodeId: NodeId,\n): FormDatasetBinding | null {\n  const node = nodes?.[formNodeId]\n  if (node?.componentId !== FORM_COMPONENT_ID) return null\n  const props = (node.props ?? {}) as Record<string, unknown>\n  const datasetId = text(props['datasetId'], 128)\n  const datasetName = text(props['datasetName'], 60)\n  if (!datasetId && !datasetName) return null\n  const fieldMap: Record<string, string> = {}\n  for (const fieldNodeId of collectFormFieldNodeIds(nodes, formNodeId)) {\n    const fieldProps = (nodes?.[fieldNodeId]?.props ?? {}) as Record<\n      string,\n      unknown\n    >\n    const datasetFieldId = text(fieldProps['datasetFieldId'], 64)\n    if (!datasetFieldId) continue\n    const submittedKey = text(fieldProps['fieldName'], 64) || 'field'\n    if (\n      !(submittedKey in fieldMap) &&\n      Object.keys(fieldMap).length >= FORM_DATASET_BINDING_MAX_FIELDS\n    ) {\n      continue\n    }\n    fieldMap[submittedKey] = datasetFieldId\n  }\n  return {\n    ...(datasetId ? { datasetId } : {}),\n    ...(datasetName ? { datasetName } : {}),\n    fieldMap,\n  }\n}\n\n/** Every `form` node in a composed tree that declares a dataset binding. */\nexport function formDatasetBindingsOf(\n  nodes: Record<NodeId, AglynNodeSchema | undefined> | undefined | null,\n): Array<{ nodeId: NodeId; binding: FormDatasetBinding }> {\n  const found: Array<{ nodeId: NodeId; binding: FormDatasetBinding }> = []\n  for (const [nodeId, node] of Object.entries(nodes ?? {})) {\n    if (node?.componentId !== FORM_COMPONENT_ID) continue\n    const binding = formDatasetBindingOf(nodes, nodeId as NodeId)\n    if (binding) found.push({ nodeId: nodeId as NodeId, binding })\n  }\n  return found\n}\n"],"names":["collectFormFieldNodeIds","FORM_COMPONENT_ID","FORM_DATASET_BINDING_MAX_FIELDS","text","value","max","trim","slice","formDatasetBindingOf","nodes","formNodeId","node","componentId","props","datasetId","datasetName","fieldMap","fieldNodeId","fieldProps","datasetFieldId","submittedKey","Object","keys","length","formDatasetBindingsOf","found","nodeId","entries","binding","push"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,uBAAuB,EAAEC,iBAAiB,QAAQ,aAAS;AAepE,4EAA4E,GAC5E,OAAO,MAAMC,kCAAkC,GAAE;AAEjD,MAAMC,OAAO,CAACC,OAAgBC,MAC5B,OAAOD,UAAU,WAAWA,MAAME,IAAI,GAAGC,KAAK,CAAC,GAAGF,OAAO;AAE3D;;;;;;;;;;;;CAYC,GACD,OAAO,SAASG,qBACdC,KAAqE,EACrEC,UAAkB;QAIHC;IAFf,MAAMA,OAAOF,yBAAAA,KAAO,CAACC,WAAW;IAChC,IAAIC,CAAAA,wBAAAA,KAAMC,WAAW,MAAKX,mBAAmB,OAAO;IACpD,MAAMY,SAASF,cAAAA,KAAKE,KAAK,YAAVF,cAAc,CAAC;IAC9B,MAAMG,YAAYX,KAAKU,KAAK,CAAC,YAAY,EAAE;IAC3C,MAAME,cAAcZ,KAAKU,KAAK,CAAC,cAAc,EAAE;IAC/C,IAAI,CAACC,aAAa,CAACC,aAAa,OAAO;IACvC,MAAMC,WAAmC,CAAC;IAC1C,KAAK,MAAMC,eAAejB,wBAAwBS,OAAOC,YAAa;;YAChDD;QAApB,MAAMS,qBAAcT,0BAAAA,qBAAAA,KAAO,CAACQ,YAAY,qBAApBR,mBAAsBI,KAAK,mBAAI,CAAC;QAIpD,MAAMM,iBAAiBhB,KAAKe,UAAU,CAAC,iBAAiB,EAAE;QAC1D,IAAI,CAACC,gBAAgB;QACrB,MAAMC,eAAejB,KAAKe,UAAU,CAAC,YAAY,EAAE,OAAO;QAC1D,IACE,CAAEE,CAAAA,gBAAgBJ,QAAO,KACzBK,OAAOC,IAAI,CAACN,UAAUO,MAAM,IAAIrB,iCAChC;YACA;QACF;QACAc,QAAQ,CAACI,aAAa,GAAGD;IAC3B;IACA,OAAO,aACDL,YAAY;QAAEA;IAAU,IAAI,CAAC,GAC7BC,cAAc;QAAEA;IAAY,IAAI,CAAC;QACrCC;;AAEJ;AAEA,0EAA0E,GAC1E,OAAO,SAASQ,sBACdf,KAAqE;IAErE,MAAMgB,QAAgE,EAAE;IACxE,KAAK,MAAM,CAACC,QAAQf,KAAK,IAAIU,OAAOM,OAAO,CAAClB,gBAAAA,QAAS,CAAC,GAAI;QACxD,IAAIE,CAAAA,wBAAAA,KAAMC,WAAW,MAAKX,mBAAmB;QAC7C,MAAM2B,UAAUpB,qBAAqBC,OAAOiB;QAC5C,IAAIE,SAASH,MAAMI,IAAI,CAAC;YAAEH,QAAQA;YAAkBE;QAAQ;IAC9D;IACA,OAAOH;AACT"}