@btst/plugin-form-builder 0.0.0-stage → 1.0.0-beta.0

package/dist/api/operations.mjs

@@ -0,0 +1,1082 @@
+import { OperationHttpError, defineOperation } from '@btst/stack/plugins/api';
+import { formSchemaToZod } from '../ui/src/lib/schema-converter.mjs';
+import { z } from 'zod';
+import { formBuilderPermissions } from '../permissions.mjs';
+import { listFormsQuerySchema, createFormSchema, updateFormSchema, listSubmissionsQuerySchema } from '../schemas.mjs';
+import { slugify, extractUserAgent, extractIpAddress } from '../utils.mjs';
+import { getAllForms, serializeFormSubmission, serializeForm, getFormSubmissions, serializeFormSubmissionSummary, serializeFormSubmissionWithData } from './getters.mjs';
+
+const SubmissionDataSchema = z.record(z.string(), z.unknown()).transform((value) => value);
+const CreateFormHookResultSchema = createFormSchema.extend({
+  createdBy: z.string().min(1).optional()
+});
+const SubmitFormOperationInputSchema = z.object({
+  slug: z.string(),
+  data: SubmissionDataSchema
+});
+const UpdateFormOperationInputSchema = z.object({
+  id: z.string(),
+  data: updateFormSchema
+});
+const DeleteFormOperationInputSchema = z.object({ id: z.string() });
+const GetFormBySlugOperationInputSchema = z.object({ slug: z.string() });
+const GetFormByIdOperationInputSchema = z.object({ id: z.string() });
+const GetFormForUpdateOperationInputSchema = z.object({
+  id: z.string()
+});
+const ListSubmissionsOperationInputSchema = z.object({
+  formId: z.string(),
+  query: listSubmissionsQuerySchema
+});
+const GetSubmissionOperationInputSchema = z.object({
+  formId: z.string(),
+  submissionId: z.string()
+});
+class FormBuilderOperationError extends OperationHttpError {
+  constructor(statusCode, message, code, issues) {
+    super(statusCode, message, code, issues);
+    this.name = "FormBuilderOperationError";
+  }
+}
+function snapshotForm(form) {
+  return {
+    id: form.id,
+    slug: form.slug,
+    ...form.createdBy ? { ownerId: form.createdBy } : {},
+    status: form.status,
+    updatedAt: form.updatedAt
+  };
+}
+function snapshotSubmission(submission) {
+  return {
+    id: submission.id,
+    formId: submission.formId,
+    ...submission.submittedBy ? { submittedBy: submission.submittedBy } : {},
+    submittedAt: submission.submittedAt
+  };
+}
+function sameFormSnapshot(form, expected) {
+  if (!form || !expected) return form === null && expected === null;
+  const current = snapshotForm(form);
+  return current.id === expected.id && current.slug === expected.slug && current.ownerId === expected.ownerId && current.status === expected.status && current.updatedAt.getTime() === expected.updatedAt.getTime();
+}
+function sameSubmissionSnapshot(submission, expected) {
+  if (!submission) return false;
+  const current = snapshotSubmission(submission);
+  return current.id === expected.id && current.formId === expected.formId && current.submittedBy === expected.submittedBy && current.submittedAt.getTime() === expected.submittedAt.getTime();
+}
+const AFFECTED_ROW_KEYS = [
+  "rowCount",
+  "affectedRows",
+  "rowsAffected",
+  "changes",
+  "numUpdatedRows"
+];
+function hasPositiveCount(value) {
+  if (typeof value === "number") return Number.isFinite(value) && value > 0;
+  if (typeof value === "bigint") return value > 0n;
+  return false;
+}
+function didAffectRow(result, expectedId) {
+  if (typeof result === "number" || typeof result === "bigint") {
+    return hasPositiveCount(result);
+  }
+  if (!result || typeof result !== "object") return false;
+  const record = result;
+  if ("count" in record) return hasPositiveCount(record.count);
+  if (Array.isArray(result)) {
+    return result.length > 0 && didAffectRow(result[0], expectedId);
+  }
+  for (const key of AFFECTED_ROW_KEYS) {
+    if (key in record) return hasPositiveCount(record[key]);
+  }
+  if ("meta" in record) {
+    const meta = record.meta;
+    return Boolean(
+      meta && typeof meta === "object" && "changes" in meta && hasPositiveCount(meta.changes)
+    );
+  }
+  return record.id === expectedId;
+}
+function formSnapshotWhere(snapshot) {
+  return [
+    { field: "id", value: snapshot.id, operator: "eq" },
+    { field: "slug", value: snapshot.slug, operator: "eq" },
+    { field: "status", value: snapshot.status, operator: "eq" },
+    {
+      field: "createdBy",
+      value: snapshot.ownerId ?? null,
+      operator: "eq"
+    },
+    {
+      field: "updatedAt",
+      value: snapshot.updatedAt,
+      operator: "eq"
+    }
+  ];
+}
+function submissionSnapshotWhere(snapshot) {
+  return [
+    { field: "id", value: snapshot.id, operator: "eq" },
+    { field: "formId", value: snapshot.formId, operator: "eq" },
+    {
+      field: "submittedBy",
+      value: snapshot.submittedBy ?? null,
+      operator: "eq"
+    },
+    {
+      field: "submittedAt",
+      value: snapshot.submittedAt,
+      operator: "eq"
+    }
+  ];
+}
+function nextSnapshotDate(previous) {
+  return new Date(Math.max(Date.now(), previous.getTime() + 1));
+}
+function requireAtomicTransactions(adapter) {
+  if (adapter.id === "memory" || typeof adapter.options?.adapterConfig.transaction !== "function") {
+    throw new FormBuilderOperationError(
+      500,
+      "Form Builder owner-sensitive writes require an adapter with isolated transaction support.",
+      "ATOMIC_TRANSACTION_REQUIRED"
+    );
+  }
+}
+async function claimFormSnapshot(adapter, snapshot, stale) {
+  const claimedAt = nextSnapshotDate(snapshot.updatedAt);
+  const matched = await adapter.updateMany({
+    model: "form",
+    where: formSnapshotWhere(snapshot),
+    update: { updatedAt: claimedAt }
+  });
+  if (!didAffectRow(matched, snapshot.id)) throw stale();
+  return claimedAt;
+}
+async function restoreFormSnapshot(adapter, snapshot, claimedAt, stale) {
+  const restored = await adapter.updateMany({
+    model: "form",
+    where: formSnapshotWhere({ ...snapshot, updatedAt: claimedAt }),
+    update: { updatedAt: snapshot.updatedAt }
+  });
+  if (!didAffectRow(restored, snapshot.id)) throw stale();
+}
+async function claimSubmissionSnapshot(adapter, snapshot) {
+  const claimedAt = nextSnapshotDate(snapshot.submittedAt);
+  const matched = await adapter.updateMany({
+    model: "formSubmission",
+    where: submissionSnapshotWhere(snapshot),
+    update: { submittedAt: claimedAt }
+  });
+  if (!didAffectRow(matched, snapshot.id)) throw staleSubmissionError();
+  return claimedAt;
+}
+function staleFormError() {
+  return new FormBuilderOperationError(
+    409,
+    "Form changed while authorization was being evaluated. Retry the operation.",
+    "FORM_STATE_CHANGED"
+  );
+}
+function staleSubmissionError() {
+  return new FormBuilderOperationError(
+    409,
+    "Submission changed while authorization was being evaluated. Retry the operation.",
+    "SUBMISSION_STATE_CHANGED"
+  );
+}
+function formNotFoundError() {
+  return new FormBuilderOperationError(404, "Form not found", "FORM_NOT_FOUND");
+}
+function submissionNotFoundError() {
+  return new FormBuilderOperationError(
+    404,
+    "Submission not found",
+    "SUBMISSION_NOT_FOUND"
+  );
+}
+async function findFormById(adapter, id) {
+  return await adapter.findOne({
+    model: "form",
+    where: [{ field: "id", value: id, operator: "eq" }]
+  }) ?? null;
+}
+async function findFormBySlug(adapter, slug) {
+  return await adapter.findOne({
+    model: "form",
+    where: [{ field: "slug", value: slug, operator: "eq" }]
+  }) ?? null;
+}
+async function findSubmission(adapter, submissionId) {
+  return await adapter.findOne({
+    model: "formSubmission",
+    where: [{ field: "id", value: submissionId, operator: "eq" }]
+  }) ?? null;
+}
+function requestFields(request) {
+  if (!request) return {};
+  return {
+    request,
+    headers: request.headers,
+    ...extractIpAddress(request.headers) ? { ipAddress: extractIpAddress(request.headers) } : {},
+    ...extractUserAgent(request.headers) ? { userAgent: extractUserAgent(request.headers) } : {}
+  };
+}
+function hookContext(context) {
+  return Object.freeze({
+    ...context,
+    ...context.identity ? { userId: context.identity.id } : {},
+    ...requestFields(context.request)
+  });
+}
+function submissionHookContext(context, formSlug, formId) {
+  return Object.freeze({
+    ...hookContext(context),
+    formSlug,
+    formId
+  });
+}
+function normalizeError(error, fallback) {
+  if (error instanceof Error) return error;
+  return new Error(typeof error === "string" ? error : fallback, {
+    cause: error
+  });
+}
+async function notifyError(hooks, error, operation, context) {
+  try {
+    await hooks?.onError?.(
+      normalizeError(error, "Form Builder operation failed."),
+      operation,
+      context
+    );
+  } catch {
+  }
+}
+async function runDomainHook(run, statusCode, code) {
+  try {
+    return await run();
+  } catch (error) {
+    throw new FormBuilderOperationError(
+      statusCode,
+      normalizeError(error, "Operation rejected").message,
+      code
+    );
+  }
+}
+function publicReadFacts(slug, form) {
+  return {
+    slug,
+    exists: form !== null,
+    ...form ? {
+      formId: form.id,
+      ...form.createdBy ? { ownerId: form.createdBy } : {},
+      status: form.status
+    } : {}
+  };
+}
+function recordReadFacts(id, form) {
+  return {
+    scope: "record",
+    formId: id,
+    exists: form !== null,
+    ...form ? {
+      ...form.createdBy ? { ownerId: form.createdBy } : {},
+      status: form.status
+    } : {}
+  };
+}
+function resolvedFormFacts(form) {
+  return {
+    formId: form.id,
+    ...form.createdBy ? { ownerId: form.createdBy } : {},
+    status: form.status
+  };
+}
+function submissionRecordFacts(formId, submissionId, form, submission) {
+  const exists = submission?.formId === formId && form?.id === formId;
+  return {
+    scope: "record",
+    formId,
+    submissionId,
+    exists,
+    ...form?.createdBy ? { ownerId: form.createdBy } : {},
+    ...exists && submission?.submittedBy ? { submittedBy: submission.submittedBy } : {}
+  };
+}
+function assertValidJsonSchema(schema) {
+  try {
+    JSON.parse(schema);
+  } catch {
+    throw new FormBuilderOperationError(
+      400,
+      "Invalid JSON Schema",
+      "INVALID_FORM_SCHEMA"
+    );
+  }
+}
+function sanitizeSlug(rawSlug) {
+  const slug = slugify(rawSlug);
+  if (!slug) {
+    throw new FormBuilderOperationError(
+      400,
+      "Invalid slug: must contain at least one alphanumeric character",
+      "INVALID_SLUG"
+    );
+  }
+  return slug;
+}
+function duplicateSlugError() {
+  return new FormBuilderOperationError(
+    409,
+    "Form with this slug already exists",
+    "DUPLICATE_FORM_SLUG"
+  );
+}
+function operationForm(form) {
+  const serialized = serializeForm(form);
+  return {
+    id: serialized.id,
+    name: serialized.name,
+    slug: serialized.slug,
+    description: serialized.description,
+    schema: serialized.schema,
+    successMessage: serialized.successMessage,
+    redirectUrl: serialized.redirectUrl,
+    status: serialized.status,
+    createdBy: serialized.createdBy,
+    createdAt: serialized.createdAt,
+    updatedAt: serialized.updatedAt
+  };
+}
+function operationFormsResult(result) {
+  return {
+    items: result.items.map((form) => ({ ...form })),
+    total: result.total,
+    ...result.limit !== void 0 ? { limit: result.limit } : {},
+    ...result.offset !== void 0 ? { offset: result.offset } : {}
+  };
+}
+function operationJson(value) {
+  if (value === null) return null;
+  return JSON.parse(JSON.stringify(value));
+}
+function operationSubmissionWithData(submission) {
+  const serialized = serializeFormSubmissionWithData(submission);
+  return {
+    id: serialized.id,
+    formId: serialized.formId,
+    data: serialized.data,
+    submittedAt: serialized.submittedAt,
+    submittedBy: serialized.submittedBy,
+    ipAddress: serialized.ipAddress,
+    userAgent: serialized.userAgent,
+    parsedData: operationJson(serialized.parsedData)
+  };
+}
+function operationSubmissionsResult(result) {
+  return {
+    items: result.items.map(serializeFormSubmissionSummary),
+    total: result.total,
+    ...result.limit !== void 0 ? { limit: result.limit } : {},
+    ...result.offset !== void 0 ? { offset: result.offset } : {}
+  };
+}
+function operationSubmissionFormContext(form) {
+  return {
+    id: form.id,
+    name: form.name,
+    ...form.createdBy ? { createdBy: form.createdBy } : {}
+  };
+}
+function createFormBuilderOperations(adapter, hooks) {
+  const formSnapshots = /* @__PURE__ */ new WeakMap();
+  const submissionSnapshots = /* @__PURE__ */ new WeakMap();
+  const submittedFormSnapshots = /* @__PURE__ */ new WeakMap();
+  const listForms = defineOperation({
+    input: listFormsQuerySchema,
+    permission: formBuilderPermissions.form.read,
+    facts: () => ({ scope: "collection" }),
+    before: async (context) => {
+      await runDomainHook(
+        () => hooks?.onBeforeListForms?.(hookContext(context)),
+        403,
+        "LIST_FORMS_REJECTED"
+      );
+    },
+    execute: async ({ input }) => operationFormsResult(await getAllForms(adapter, input)),
+    onError: ({ error, ...context }) => notifyError(hooks, error, "list", hookContext(context))
+  });
+  const getFormBySlug = defineOperation({
+    input: GetFormBySlugOperationInputSchema,
+    permission: formBuilderPermissions.form.render,
+    facts: async ({ input }) => {
+      const form = await findFormBySlug(adapter, input.slug);
+      formSnapshots.set(input, form ? snapshotForm(form) : null);
+      return publicReadFacts(input.slug, form);
+    },
+    before: async (context) => {
+      const current = await findFormBySlug(adapter, context.input.slug);
+      if (!sameFormSnapshot(
+        current,
+        formSnapshots.get(context.input) ?? null
+      )) {
+        throw staleFormError();
+      }
+      await runDomainHook(
+        () => hooks?.onBeforeGetForm?.(context.input.slug, hookContext(context)),
+        403,
+        "GET_FORM_REJECTED"
+      );
+    },
+    execute: async (context) => {
+      const form = await findFormBySlug(adapter, context.input.slug);
+      if (!sameFormSnapshot(
+        form,
+        formSnapshots.get(context.input) ?? null
+      )) {
+        throw staleFormError();
+      }
+      if (!form) throw formNotFoundError();
+      return operationForm(form);
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "get", hookContext(context))
+  });
+  const getFormById = defineOperation({
+    input: GetFormByIdOperationInputSchema,
+    permission: formBuilderPermissions.form.read,
+    facts: async ({ input }) => {
+      const form = await findFormById(adapter, input.id);
+      formSnapshots.set(input, form ? snapshotForm(form) : null);
+      return recordReadFacts(input.id, form);
+    },
+    before: async (context) => {
+      const current = await findFormById(adapter, context.input.id);
+      if (!sameFormSnapshot(
+        current,
+        formSnapshots.get(context.input) ?? null
+      )) {
+        throw staleFormError();
+      }
+      await runDomainHook(
+        () => hooks?.onBeforeGetForm?.(context.input.id, hookContext(context)),
+        403,
+        "GET_FORM_REJECTED"
+      );
+    },
+    execute: async (context) => {
+      const form = await findFormById(adapter, context.input.id);
+      if (!sameFormSnapshot(
+        form,
+        formSnapshots.get(context.input) ?? null
+      )) {
+        throw staleFormError();
+      }
+      if (!form) throw formNotFoundError();
+      return operationForm(form);
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "get", hookContext(context))
+  });
+  const getFormForUpdate = defineOperation({
+    input: GetFormForUpdateOperationInputSchema,
+    permission: formBuilderPermissions.form.update,
+    facts: async ({ input }) => {
+      const form = await findFormById(adapter, input.id);
+      if (!form) throw formNotFoundError();
+      formSnapshots.set(input, snapshotForm(form));
+      return resolvedFormFacts(form);
+    },
+    before: async (context) => {
+      const current = await findFormById(adapter, context.input.id);
+      if (!sameFormSnapshot(
+        current,
+        formSnapshots.get(context.input) ?? null
+      )) {
+        throw staleFormError();
+      }
+      await runDomainHook(
+        () => hooks?.onBeforeGetFormForUpdate?.(
+          context.input.id,
+          hookContext(context)
+        ),
+        403,
+        "GET_FORM_REJECTED"
+      );
+    },
+    execute: async (context) => {
+      const form = await findFormById(adapter, context.input.id);
+      if (!sameFormSnapshot(
+        form,
+        formSnapshots.get(context.input) ?? null
+      )) {
+        throw staleFormError();
+      }
+      if (!form) throw formNotFoundError();
+      return operationForm(form);
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "get", hookContext(context))
+  });
+  const createForm = defineOperation({
+    input: createFormSchema,
+    permission: formBuilderPermissions.form.create,
+    facts: () => void 0,
+    execute: async (context) => {
+      const initial = {
+        ...context.input,
+        slug: sanitizeSlug(context.input.slug),
+        redirectUrl: context.input.redirectUrl || void 0,
+        ...context.identity ? { createdBy: context.identity.id } : {}
+      };
+      assertValidJsonSchema(initial.schema);
+      const modified = await runDomainHook(
+        async () => await hooks?.onBeforeCreateForm?.(initial, hookContext(context)) ?? initial,
+        403,
+        "CREATE_FORM_REJECTED"
+      );
+      const validation = CreateFormHookResultSchema.safeParse(modified);
+      if (!validation.success) {
+        throw new FormBuilderOperationError(
+          400,
+          "Invalid form data",
+          "FORM_VALIDATION_FAILED",
+          validation.error.issues
+        );
+      }
+      const formInput = {
+        ...validation.data,
+        slug: sanitizeSlug(validation.data.slug),
+        ...context.identity ? { createdBy: context.identity.id } : {}
+      };
+      assertValidJsonSchema(formInput.schema);
+      return adapter.transaction(async (tx) => {
+        const duplicate = await findFormBySlug(tx, formInput.slug);
+        if (duplicate) throw duplicateSlugError();
+        const now = /* @__PURE__ */ new Date();
+        return operationForm(
+          await tx.create({
+            model: "form",
+            data: {
+              name: formInput.name,
+              slug: formInput.slug,
+              description: formInput.description,
+              schema: formInput.schema,
+              successMessage: formInput.successMessage,
+              redirectUrl: formInput.redirectUrl,
+              status: formInput.status ?? "active",
+              createdBy: formInput.createdBy,
+              createdAt: now,
+              updatedAt: now
+            }
+          })
+        );
+      });
+    },
+    after: async (context) => {
+      await hooks?.onAfterCreateForm?.(context.result, hookContext(context));
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "create", hookContext(context))
+  });
+  const updateForm = defineOperation({
+    input: UpdateFormOperationInputSchema,
+    permission: formBuilderPermissions.form.update,
+    facts: async ({ input }) => {
+      const form = await findFormById(adapter, input.id);
+      if (!form) throw formNotFoundError();
+      formSnapshots.set(input, snapshotForm(form));
+      return resolvedFormFacts(form);
+    },
+    execute: async (context) => {
+      const authorized = formSnapshots.get(context.input);
+      if (!authorized) throw staleFormError();
+      requireAtomicTransactions(adapter);
+      const initial = {
+        ...context.input.data,
+        ...context.input.data.slug !== void 0 ? { slug: sanitizeSlug(context.input.data.slug) } : {}
+      };
+      if (initial.schema !== void 0) assertValidJsonSchema(initial.schema);
+      return adapter.transaction(async (tx) => {
+        const latest = await findFormById(tx, context.input.id);
+        if (!sameFormSnapshot(latest, authorized)) throw staleFormError();
+        const claimedAt = await claimFormSnapshot(
+          tx,
+          authorized,
+          staleFormError
+        );
+        const modified = await runDomainHook(
+          async () => await hooks?.onBeforeUpdateForm?.(
+            context.input.id,
+            initial,
+            hookContext(context)
+          ) ?? initial,
+          403,
+          "UPDATE_FORM_REJECTED"
+        );
+        const validation = updateFormSchema.safeParse(modified);
+        if (!validation.success) {
+          throw new FormBuilderOperationError(
+            400,
+            "Invalid form data",
+            "FORM_VALIDATION_FAILED",
+            validation.error.issues
+          );
+        }
+        const update = {
+          ...validation.data,
+          ...validation.data.slug !== void 0 ? { slug: sanitizeSlug(validation.data.slug) } : {}
+        };
+        if (update.schema !== void 0) assertValidJsonSchema(update.schema);
+        const claimed = await findFormById(tx, authorized.id);
+        if (!sameFormSnapshot(claimed, { ...authorized, updatedAt: claimedAt })) {
+          throw staleFormError();
+        }
+        if (update.slug && update.slug !== latest?.slug) {
+          const duplicate = await findFormBySlug(tx, update.slug);
+          if (duplicate) throw duplicateSlugError();
+        }
+        const updateData = {
+          updatedAt: nextSnapshotDate(claimedAt)
+        };
+        if (update.name !== void 0) updateData.name = update.name;
+        if (update.slug !== void 0) updateData.slug = update.slug;
+        if (update.description !== void 0)
+          updateData.description = update.description;
+        if (update.schema !== void 0) updateData.schema = update.schema;
+        if (update.successMessage !== void 0)
+          updateData.successMessage = update.successMessage;
+        if (update.redirectUrl !== void 0)
+          updateData.redirectUrl = update.redirectUrl;
+        if (update.status !== void 0) updateData.status = update.status;
+        const matched = await tx.updateMany({
+          model: "form",
+          where: formSnapshotWhere({ ...authorized, updatedAt: claimedAt }),
+          update: updateData
+        });
+        if (!didAffectRow(matched, authorized.id)) throw staleFormError();
+        const updated = await findFormById(tx, context.input.id);
+        if (!updated) throw formNotFoundError();
+        return operationForm(updated);
+      });
+    },
+    after: async (context) => {
+      await hooks?.onAfterUpdateForm?.(context.result, hookContext(context));
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "update", hookContext(context))
+  });
+  const deleteForm = defineOperation({
+    input: DeleteFormOperationInputSchema,
+    permission: formBuilderPermissions.form.delete,
+    facts: async ({ input }) => {
+      const form = await findFormById(adapter, input.id);
+      if (!form) throw formNotFoundError();
+      formSnapshots.set(input, snapshotForm(form));
+      return resolvedFormFacts(form);
+    },
+    execute: async (context) => {
+      const authorized = formSnapshots.get(context.input);
+      if (!authorized) throw staleFormError();
+      requireAtomicTransactions(adapter);
+      return adapter.transaction(async (tx) => {
+        const current = await findFormById(tx, context.input.id);
+        if (!sameFormSnapshot(current, authorized)) throw staleFormError();
+        const claimedAt = await claimFormSnapshot(
+          tx,
+          authorized,
+          staleFormError
+        );
+        await runDomainHook(
+          () => hooks?.onBeforeDeleteForm?.(context.input.id, hookContext(context)),
+          403,
+          "DELETE_FORM_REJECTED"
+        );
+        const claimed = await findFormById(tx, authorized.id);
+        if (!sameFormSnapshot(claimed, { ...authorized, updatedAt: claimedAt })) {
+          throw staleFormError();
+        }
+        await tx.deleteMany({
+          model: "formSubmission",
+          where: [
+            {
+              field: "formId",
+              value: context.input.id,
+              operator: "eq"
+            }
+          ]
+        });
+        const deleted = await tx.deleteMany({
+          model: "form",
+          where: [
+            { field: "id", value: authorized.id, operator: "eq" },
+            { field: "updatedAt", value: claimedAt, operator: "eq" }
+          ]
+        });
+        if (deleted !== 1) throw staleFormError();
+        return { success: true };
+      });
+    },
+    after: async (context) => {
+      await hooks?.onAfterDeleteForm?.(context.input.id, hookContext(context));
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "delete", hookContext(context))
+  });
+  const submitForm = defineOperation({
+    input: SubmitFormOperationInputSchema,
+    permission: formBuilderPermissions.submission.create,
+    facts: async ({ input }) => {
+      const form = await findFormBySlug(adapter, input.slug);
+      formSnapshots.set(input, form ? snapshotForm(form) : null);
+      return {
+        slug: input.slug,
+        exists: form !== null,
+        ...form ? {
+          formId: form.id,
+          ...form.createdBy ? { ownerId: form.createdBy } : {},
+          status: form.status
+        } : {}
+      };
+    },
+    execute: async (context) => {
+      const authorized = formSnapshots.get(context.input) ?? null;
+      const form = await findFormBySlug(adapter, context.input.slug);
+      if (!sameFormSnapshot(form, authorized)) throw staleFormError();
+      if (!form) throw formNotFoundError();
+      if (!authorized) throw staleFormError();
+      requireAtomicTransactions(adapter);
+      if (form.status !== "active") {
+        throw new FormBuilderOperationError(
+          400,
+          "Form is not accepting submissions",
+          "FORM_NOT_ACTIVE"
+        );
+      }
+      try {
+        const jsonSchema = JSON.parse(form.schema);
+        const validation = formSchemaToZod(jsonSchema).safeParse(
+          context.input.data
+        );
+        if (!validation.success) {
+          throw new FormBuilderOperationError(
+            400,
+            "Validation failed",
+            "SUBMISSION_VALIDATION_FAILED",
+            validation.error.issues
+          );
+        }
+      } catch (error) {
+        if (error instanceof FormBuilderOperationError) throw error;
+        throw new FormBuilderOperationError(
+          400,
+          "Invalid form data",
+          "INVALID_FORM_DATA"
+        );
+      }
+      const lifecycleContext = submissionHookContext(
+        context,
+        form.slug,
+        form.id
+      );
+      const submittedData = JSON.parse(
+        JSON.stringify(context.input.data)
+      );
+      return adapter.transaction(async (tx) => {
+        const current = await findFormBySlug(tx, context.input.slug);
+        if (!sameFormSnapshot(current, authorized)) throw staleFormError();
+        if (!current || current.status !== "active") throw staleFormError();
+        const claimedAt = await claimFormSnapshot(
+          tx,
+          authorized,
+          staleFormError
+        );
+        const hookResult = await runDomainHook(
+          () => hooks?.onBeforeSubmission?.(
+            form.slug,
+            submittedData,
+            lifecycleContext
+          ),
+          400,
+          "SUBMISSION_REJECTED"
+        );
+        const finalData = hookResult ?? submittedData;
+        const claimed = await findFormById(tx, authorized.id);
+        if (!sameFormSnapshot(claimed, { ...authorized, updatedAt: claimedAt }) || claimed?.status !== "active") {
+          throw staleFormError();
+        }
+        const submission = await tx.create({
+          model: "formSubmission",
+          data: {
+            formId: current.id,
+            data: JSON.stringify(finalData),
+            submittedAt: /* @__PURE__ */ new Date(),
+            ...context.identity ? { submittedBy: context.identity.id } : {},
+            ...lifecycleContext.ipAddress ? { ipAddress: lifecycleContext.ipAddress } : {},
+            ...lifecycleContext.userAgent ? { userAgent: lifecycleContext.userAgent } : {}
+          }
+        });
+        await restoreFormSnapshot(tx, authorized, claimedAt, staleFormError);
+        const serialized = serializeFormSubmission(submission);
+        const result = {
+          ...serialized,
+          form: {
+            successMessage: current.successMessage,
+            redirectUrl: current.redirectUrl
+          }
+        };
+        submittedFormSnapshots.set(result, serializeForm(current));
+        return result;
+      });
+    },
+    after: async (context) => {
+      const form = submittedFormSnapshots.get(context.result);
+      if (!form) {
+        throw new FormBuilderOperationError(
+          500,
+          "Submission lifecycle state is unavailable",
+          "SUBMISSION_LIFECYCLE_STATE_MISSING"
+        );
+      }
+      await hooks?.onAfterSubmission?.(
+        context.result,
+        form,
+        submissionHookContext(context, form.slug, form.id)
+      );
+    },
+    onError: async ({ error, ...context }) => {
+      const facts = context.facts;
+      const formId = facts.formId ?? "";
+      const lifecycleContext = submissionHookContext(context, context.input.slug, formId);
+      try {
+        await hooks?.onErrorSubmission?.(
+          normalizeError(error, "Submission failed."),
+          context.input.slug,
+          JSON.parse(JSON.stringify(context.input.data)),
+          lifecycleContext
+        );
+      } catch {
+      }
+      await notifyError(hooks, error, "submit", lifecycleContext);
+    }
+  });
+  const listSubmissions = defineOperation({
+    input: ListSubmissionsOperationInputSchema,
+    permission: formBuilderPermissions.submission.read,
+    facts: async ({ input }) => {
+      const form = await findFormById(adapter, input.formId);
+      formSnapshots.set(input, form ? snapshotForm(form) : null);
+      return {
+        scope: "collection",
+        formId: input.formId,
+        formExists: form !== null,
+        ...form?.createdBy ? { ownerId: form.createdBy } : {}
+      };
+    },
+    before: async (context) => {
+      const expected = formSnapshots.get(context.input) ?? null;
+      const current = await findFormById(adapter, context.input.formId);
+      if (!sameFormSnapshot(current, expected)) throw staleFormError();
+      if (!current) throw formNotFoundError();
+      await runDomainHook(
+        () => hooks?.onBeforeListSubmissions?.(
+          context.input.formId,
+          hookContext(context)
+        ),
+        403,
+        "LIST_SUBMISSIONS_REJECTED"
+      );
+    },
+    execute: async (context) => {
+      const expected = formSnapshots.get(context.input) ?? null;
+      return adapter.transaction(async (tx) => {
+        const before = await findFormById(tx, context.input.formId);
+        if (!sameFormSnapshot(before, expected)) throw staleFormError();
+        if (!before) throw formNotFoundError();
+        const result = await getFormSubmissions(
+          tx,
+          context.input.formId,
+          context.input.query
+        );
+        const after = await findFormById(tx, context.input.formId);
+        if (!sameFormSnapshot(after, expected)) throw staleFormError();
+        if (!after) throw formNotFoundError();
+        return {
+          form: operationSubmissionFormContext(after),
+          ...operationSubmissionsResult(result)
+        };
+      });
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "listSubmissions", hookContext(context))
+  });
+  const getSubmission = defineOperation({
+    input: GetSubmissionOperationInputSchema,
+    permission: formBuilderPermissions.submission.read,
+    facts: async ({ input }) => {
+      const [form, submission] = await Promise.all([
+        findFormById(adapter, input.formId),
+        findSubmission(adapter, input.submissionId)
+      ]);
+      const matches = form && submission?.formId === form.id;
+      submissionSnapshots.set(
+        input,
+        matches ? {
+          form: snapshotForm(form),
+          submission: snapshotSubmission(submission)
+        } : null
+      );
+      return submissionRecordFacts(
+        input.formId,
+        input.submissionId,
+        form,
+        submission
+      );
+    },
+    before: async (context) => {
+      const snapshot = submissionSnapshots.get(context.input);
+      if (!snapshot) throw submissionNotFoundError();
+      const [form, submission] = await Promise.all([
+        findFormById(adapter, context.input.formId),
+        findSubmission(adapter, context.input.submissionId)
+      ]);
+      if (!sameFormSnapshot(form, snapshot.form) || !sameSubmissionSnapshot(submission, snapshot.submission)) {
+        throw staleSubmissionError();
+      }
+      await runDomainHook(
+        () => hooks?.onBeforeGetSubmission?.(
+          context.input.submissionId,
+          hookContext(context)
+        ),
+        403,
+        "GET_SUBMISSION_REJECTED"
+      );
+    },
+    execute: async (context) => {
+      const snapshot = submissionSnapshots.get(context.input);
+      if (!snapshot) throw submissionNotFoundError();
+      const submission = await adapter.findOne({
+        model: "formSubmission",
+        where: [
+          {
+            field: "id",
+            value: context.input.submissionId,
+            operator: "eq"
+          }
+        ],
+        join: { form: true }
+      });
+      if (!submission || submission.formId !== context.input.formId || !sameSubmissionSnapshot(submission, snapshot.submission) || !sameFormSnapshot(submission.form ?? null, snapshot.form)) {
+        throw staleSubmissionError();
+      }
+      return operationSubmissionWithData(submission);
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "getSubmission", hookContext(context))
+  });
+  const deleteSubmission = defineOperation({
+    input: GetSubmissionOperationInputSchema,
+    permission: formBuilderPermissions.submission.delete,
+    facts: async ({ input }) => {
+      const [form, submission] = await Promise.all([
+        findFormById(adapter, input.formId),
+        findSubmission(adapter, input.submissionId)
+      ]);
+      if (!form || !submission || submission.formId !== form.id) {
+        throw submissionNotFoundError();
+      }
+      submissionSnapshots.set(input, {
+        form: snapshotForm(form),
+        submission: snapshotSubmission(submission)
+      });
+      return {
+        formId: form.id,
+        submissionId: submission.id,
+        exists: true,
+        ...form.createdBy ? { ownerId: form.createdBy } : {},
+        ...submission.submittedBy ? { submittedBy: submission.submittedBy } : {}
+      };
+    },
+    execute: async (context) => {
+      const snapshot = submissionSnapshots.get(context.input);
+      if (!snapshot) throw staleSubmissionError();
+      requireAtomicTransactions(adapter);
+      return adapter.transaction(async (tx) => {
+        const [form, submission] = await Promise.all([
+          findFormById(tx, context.input.formId),
+          findSubmission(tx, context.input.submissionId)
+        ]);
+        if (!sameFormSnapshot(form, snapshot.form) || !sameSubmissionSnapshot(submission, snapshot.submission)) {
+          throw staleSubmissionError();
+        }
+        const claimedAt = await claimFormSnapshot(
+          tx,
+          snapshot.form,
+          staleSubmissionError
+        );
+        const claimedSubmissionAt = await claimSubmissionSnapshot(
+          tx,
+          snapshot.submission
+        );
+        await runDomainHook(
+          () => hooks?.onBeforeDeleteSubmission?.(
+            context.input.submissionId,
+            hookContext(context)
+          ),
+          403,
+          "DELETE_SUBMISSION_REJECTED"
+        );
+        const [claimedForm, claimedSubmission] = await Promise.all([
+          findFormById(tx, snapshot.form.id),
+          findSubmission(tx, snapshot.submission.id)
+        ]);
+        if (!sameFormSnapshot(claimedForm, {
+          ...snapshot.form,
+          updatedAt: claimedAt
+        }) || !sameSubmissionSnapshot(claimedSubmission, {
+          ...snapshot.submission,
+          submittedAt: claimedSubmissionAt
+        })) {
+          throw staleSubmissionError();
+        }
+        const deleted = await tx.deleteMany({
+          model: "formSubmission",
+          where: [
+            {
+              field: "id",
+              value: context.input.submissionId,
+              operator: "eq"
+            },
+            {
+              field: "submittedAt",
+              value: claimedSubmissionAt,
+              operator: "eq"
+            }
+          ]
+        });
+        if (deleted !== 1) throw staleSubmissionError();
+        await restoreFormSnapshot(
+          tx,
+          snapshot.form,
+          claimedAt,
+          staleSubmissionError
+        );
+        return { success: true };
+      });
+    },
+    after: async (context) => {
+      await hooks?.onAfterDeleteSubmission?.(
+        context.input.submissionId,
+        hookContext(context)
+      );
+    },
+    onError: ({ error, ...context }) => notifyError(hooks, error, "deleteSubmission", hookContext(context))
+  });
+  return {
+    listForms,
+    getFormBySlug,
+    getFormById,
+    getFormForUpdate,
+    createForm,
+    updateForm,
+    deleteForm,
+    submitForm,
+    listSubmissions,
+    getSubmission,
+    deleteSubmission
+  };
+}
+
+export { DeleteFormOperationInputSchema, FormBuilderOperationError, GetFormByIdOperationInputSchema, GetFormBySlugOperationInputSchema, GetFormForUpdateOperationInputSchema, GetSubmissionOperationInputSchema, ListSubmissionsOperationInputSchema, SubmitFormOperationInputSchema, UpdateFormOperationInputSchema, createFormBuilderOperations };