@elytracms/forms 0.0.98 → 0.0.99

package/dist/studio/inbox.d.ts

@@ -30,7 +30,7 @@ export interface FormsInboxConfig<V> {
 }
 /** The inbox's capabilities: no "New" (submissions come from the site), delete and bulk delete. */
 export declare const INBOX_CAPABILITIES: CollectionViewCapabilities;
-/** The rail-foot finding: how many submissions' mail did not (fully) go out. */
+/** The issues-tray finding: how many submissions' mail did not (fully) go out. */
 declare function failedDeliveryIssues(count: number): NavIssue[];
 /** The inbox's deep link: `[]` the list, `[submissionId]` one submission. */
 declare function parseInboxPath(segments: string[]): Record<string, string | null> | null;

package/dist/studio/inbox.js

@@ -33,7 +33,13 @@ const DELIVERY_STATE_LABELS = {
     failed: { en: 'Failed', de: 'Fehlgeschlagen' },
     skipped: { en: 'Not sent', de: 'Nicht gesendet' },
 };
-/** The rail-foot finding: how many submissions' mail did not (fully) go out. */
+/**
+ * EC-690 — where the finding is: the inbox, by the record kind it lists (the view declares
+ * `recordKind`), so the studio's issues tray offers "Go to" the inbox and shows the finding to
+ * whoever can open the inbox — not to every role.
+ */
+const INBOX_LOCATION = { kind: 'record', recordKind: submissionRecordKind.kind };
+/** The issues-tray finding: how many submissions' mail did not (fully) go out. */
 function failedDeliveryIssues(count) {
     return count === 0
         ? []
@@ -42,10 +48,11 @@ function failedDeliveryIssues(count) {
                 key: 'forms-delivery-failed',
                 message: `${count} form submission${count === 1 ? '' : 's'}: the mail was not delivered — open the inbox to retry.`,
                 severity: 'error',
+                location: INBOX_LOCATION,
             },
         ];
 }
-/** The always-on rail-foot hook (it reads the inbox's own cached list). */
+/** The always-on findings hook for the issues tray (it reads the inbox's own cached list). */
 function useInboxIssues({ projectId }) {
     const list = useRecordList(submissionRecordKind, projectId);
     const count = inboxIssueCount(list.data ?? []);
@@ -203,6 +210,8 @@ export function formsInbox(config) {
         icon: Inbox,
         parsePath: parseInboxPath,
         useIssues: useInboxIssues,
+        // EC-690: the record kind this view lists — a submission-located finding opens here.
+        recordKind: submissionRecordKind.kind,
         ...(config.visible ? { visible: config.visible } : {}),
         render: (ctx) => _jsx(FormsInbox, { ctx: ctx, config: config, id: id }),
     });

package/dist/studio/inbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../src/studio/inbox.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACpC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,GAAG,EACH,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,iBAAiB,GAClB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAExG,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAEtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE7C,OAAO,EACL,MAAM,EACN,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,QAAQ,CAAA;AAEf,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAgC/C,mGAAmG;AACnG,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;CACjB,CAAA;AAED,MAAM,WAAW,GAAW,IAAI,CAAA;AAChC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AAE9F,MAAM,qBAAqB,GAA8D;IACvF,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE;IAC/C,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE;IACpC,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,0BAA0B,EAAE;IAChE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE;IAC9C,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE;CAClD,CAAA;AAED,gFAAgF;AAChF,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,KAAK,CAAC;QAChB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,GAAG,EAAE,uBAAuB;gBAC5B,OAAO,EAAE,GAAG,KAAK,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yDAAyD;gBACnH,QAAQ,EAAE,OAAO;aAClB;SACF,CAAA;AACP,CAAC;AAED,2EAA2E;AAC3E,SAAS,cAAc,CAAC,EAAE,SAAS,EAAyB;IAC1D,MAAM,IAAI,GAAG,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC9C,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAI,GAAmB,EAAE,MAAqB;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAoB;QAC3D,QAAQ,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;YAC3G,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACrD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAW,EAAE,CAAC,CAAC,CAAA;QACxG,CAAC;KACF,CAAC,CAAA;IACF,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;AAC1G,CAAC;AAED,yFAAyF;AACzF,SAAS,cAAc,CAAC,MAAoC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAA;IACvE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,OAAO;QACL;YACE,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,6BAA6B,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAChH,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,YAAY,EAAE,oBAAoB,CAAC,IAAI;YACvC,UAAU,EAAE,MAAM,CAAC,EAAE;SACtB;KACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAoE;IAC1G,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;IACzB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAA;IACrD,MAAM,IAAI,GAAG,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAA;IAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC/C,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEjE,kCAAkC;IAClC,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACzH,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAA;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAE5F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IACvH,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,OAAO,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACrE,CAAC,EACD,CAAC,IAAI,EAAE,KAAK,CAAC,CACd,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,OAAO,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA;IACzE,CAAC,EACD,CAAC,IAAI,EAAE,KAAK,CAAC,CACd,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,GAAgB,EAAE,EAAE,CAAC;QACpB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;QACxE,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACpC,EACD,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAA;IAED,uFAAuF;IACvF,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,KAA+C,EAAqB,EAAE;QAC3E,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAW,CAAC,CAAA;QACpG,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAyB,CAAA;QAC9C,KAAK,CAAC,KAAK,CAAqB,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;YAC1D,KAAK;SACN,CAAC,CAAA;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,EACD,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CACxB,CAAA;IAED,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,GAAgB,EAAE,IAAkB,EAAqB,EAAE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,GAAG,CAAC,EAAE,kBAAkB,EAAE,CAAA;QACnF,2FAA2F;QAC3F,8EAA8E;QAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QACvD,4FAA4F;QAC5F,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QACzD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CACrB,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,GAAgB,EAAqB,EAAE;QAC5C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAC/F,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACnE,KAAK,CAAC,KAAK,CAAqB,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CACvF,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CACtD,CAAA;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,EACD,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CACxB,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAgB,EAAE;QAC3C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,SAAS;QACT,MAAM;QACN,YAAY,EAAE,kBAAkB;QAChC,YAAY,EAAE,kBAAkB;QAChC,SAAS;QACT,GAAG;QACH,OAAO;QACP,UAAU,EAAE,CAAC,YAAoB,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,YAAY,EAAE;QAC7D,QAAQ,EAAE,EAAE;QACZ,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACnC,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,WAAW,CAAC,IAAI,CAAC,CAAA;QACjB,aAAa,CAAC,IAAI,CAAC,CAAA;QACnB,qFAAqF;QACrF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;QACtE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC7C,WAAW,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;IAErB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAC,YAAY,IAAC,IAAI,EAAC,2BAAsB,GAAG,CAAA;IAClF,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,KAAC,YAAY,IAAC,IAAI,EAAE,oCAAoC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,GAAI,CAAA;IACxI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAC,qBAAqB,IAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAI,CAAA;IAE7F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAClH,OAAO,CACL,KAAC,oBAAoB,IACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,QAAQ,EACpB,YAAY,EACV,MAAM,CAAC,CAAC,CAAC,CACP,8BACE,KAAC,kBAAkB,IACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,EACvD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,EAC3B,QAAQ,EAAE,QAAQ,GAClB,EACD,UAAU,CAAC,CAAC,CAAC,KAAC,YAAY,IAAC,IAAI,EAAE,UAAU,GAAI,CAAC,CAAC,CAAC,IAAI,IACtD,CACJ,CAAC,CAAC,CAAC,IAAI,GAEV,CACH,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,IAAI,EAAoB;IAC9C,OAAO,CACL,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,KAAK,iBAAa,qBAAqB,YACjE,IAAI,GACA,CACR,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,QAAkB;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;IACpF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAI,MAA2B;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,aAAa,CAAA;IACrC,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,EAAE;QACF,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa;QACpC,WAAW,EAAE,2DAA2D;QACxE,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,cAAc;QACzB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAC,UAAU,IAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAI;KAClE,CAAC,CAAA;AACJ,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAA","sourcesContent":["import { useCallback, useMemo, useState } from 'react'\nimport { Inbox } from 'lucide-react'\nimport {\n  PortableDetailEditor,\n  CollectionViewSurface,\n  nav,\n  normalizeOkResult,\n  recordListKey,\n  useRecordList,\n  useRailViewSource,\n} from '@elytracms/studio/addon'\nimport type { AppViewContext, CollectionViewCapabilities, NavIssue, NavPermission, OkResult } from '@elytracms/studio/addon'\nimport { createCollectionRegistry, parseLocaleConfig, validateDocument } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CmsValidationIssue, DocumentRef, Locale, LocalizedString } from '@elytracms/core/cms-core'\nimport { Text } from '@elytracms/studio/ui'\nimport { DELIVERY_STATES, submissionRecordKind } from '../shared/kind'\nimport type { SubmissionRecord } from '../shared/kind'\nimport { deliveryNeedsAttention } from '../shared/delivery'\nimport { labelPayload } from '../shared/mail'\nimport type { FormDocument, FormSource } from '../shared/source'\nimport {\n  formOf,\n  inboxIssueCount,\n  inboxSaveWrite,\n  submissionLens,\n  submissionSender,\n  submissionToLensDocument,\n} from './lens'\nimport type { InboxForms } from './lens'\nimport { SubmissionAppendix } from './appendix'\n\n/**\n * EC-613 — the forms INBOX: the submission kind on the studio's portable list/edit surfaces\n * (AD-19, EC-616's scaffold for a source of one's own), one entry in the project's rail:\n *\n * ```tsx\n * // studio/studio.config.tsx\n * import { formsInbox } from '@elytracms/forms/studio'\n * import { contactForms } from '../cms/forms'\n * export default defineStudio({ sidebar: [ …, formsInbox({ source: contactForms }) ] })\n * ```\n *\n * The list shows every submission, newest first; one opens in the portable edit shell, where\n * the editor sets the status, the assignee and notes (the inbox lifecycle) and reads — below\n * the fields — what was sent, the files and the mail delivery per recipient, with a retry for\n * a failed mail. A failed or partly failed delivery is an issue on the row AND at the rail\n * foot, from any surface. Reads and writes go through the operations client\n * (`operations.records(submissionRecordKind)`) and the one query cache (AD-17).\n */\n\nexport interface FormsInboxConfig<V> {\n  /** How the inbox reads your form documents (labels, titles) — the same declaration the site's delivery route reads. */\n  source: FormSource<V>\n  /** The route segment (default `submissions`). */\n  id?: string\n  /** The rail label (default `Submissions`). */\n  label?: string\n  /** OPTIONAL, default-open nav permission (AD-18). */\n  visible?: NavPermission\n}\n\n/** The inbox's capabilities: no \"New\" (submissions come from the site), delete and bulk delete. */\nexport const INBOX_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false,\n  duplicate: false,\n  remove: true,\n  bulk: true,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false,\n}\n\nconst LENS_LOCALE: Locale = 'en'\nconst LENS_LOCALE_CONFIG = parseLocaleConfig({ default: LENS_LOCALE, locales: [LENS_LOCALE] })\n\nconst DELIVERY_STATE_LABELS: Record<(typeof DELIVERY_STATES)[number], LocalizedString> = {\n  pending: { en: 'Sending', de: 'Wird gesendet' },\n  sent: { en: 'Sent', de: 'Gesendet' },\n  partial: { en: 'Partly failed', de: 'Teilweise fehlgeschlagen' },\n  failed: { en: 'Failed', de: 'Fehlgeschlagen' },\n  skipped: { en: 'Not sent', de: 'Nicht gesendet' },\n}\n\n/** The rail-foot finding: how many submissions' mail did not (fully) go out. */\nfunction failedDeliveryIssues(count: number): NavIssue[] {\n  return count === 0\n    ? []\n    : [\n        {\n          key: 'forms-delivery-failed',\n          message: `${count} form submission${count === 1 ? '' : 's'}: the mail was not delivered — open the inbox to retry.`,\n          severity: 'error',\n        },\n      ]\n}\n\n/** The always-on rail-foot hook (it reads the inbox's own cached list). */\nfunction useInboxIssues({ projectId }: { projectId: string }): readonly NavIssue[] {\n  const list = useRecordList(submissionRecordKind, projectId)\n  const count = inboxIssueCount(list.data ?? [])\n  return useMemo(() => failedDeliveryIssues(count), [count])\n}\n\n/** The form documents of the source's collection, through the operations client. */\nfunction useInboxForms<V>(ctx: AppViewContext, source: FormSource<V>): InboxForms<V> | undefined {\n  const forms = ctx.query.useOperationQuery<FormDocument<V>[]>({\n    queryKey: ['forms-inbox', 'forms', ctx.projectId, source.collection],\n    loader: async (operations) => {\n      const result = await operations.documents.list({ projectId: ctx.projectId, collection: source.collection })\n      if (!result.ok) throw new Error(result.error.message)\n      return result.value.map((record) => ({ id: record.document.id, values: record.document.values as V }))\n    },\n  })\n  return useMemo(() => (forms.data ? { source, documents: forms.data } : undefined), [forms.data, source])\n}\n\n/** A failed delivery as a warning on the row's own Issues pane (never blocks a save). */\nfunction deliveryIssues(record: SubmissionRecord | undefined): CmsValidationIssue[] {\n  if (!record || !deliveryNeedsAttention(record.deliveryState)) return []\n  const failed = (record.deliveryLog ?? []).filter((entry) => !entry.ok)\n  const last = failed.at(-1)\n  return [\n    {\n      code: 'custom-validation',\n      severity: 'warning',\n      message: `The mail was not delivered${last?.to ? ` to ${last.to}` : ''}${last?.error ? `: ${last.error}` : ''}.`,\n      path: ['deliveryState'],\n      collectionId: submissionRecordKind.kind,\n      documentId: record.id,\n    },\n  ]\n}\n\nfunction FormsInbox<V>({ ctx, config, id }: { ctx: AppViewContext; config: FormsInboxConfig<V>; id: string }) {\n  const { projectId } = ctx\n  const recordId = ctx.deepLink['submissionId'] ?? null\n  const list = useRecordList(submissionRecordKind, projectId)\n  const cache = ctx.query.useOperationCache()\n  const forms = useInboxForms(ctx, config.source)\n  const [retrying, setRetrying] = useState(false)\n  const [retryError, setRetryError] = useState<string | null>(null)\n\n  // Newest first — the inbox order.\n  const records = useMemo(\n    () => [...(list.data ?? [])].sort((a, b) => (a.submittedAt < b.submittedAt ? 1 : a.submittedAt > b.submittedAt ? -1 : 0)),\n    [list.data],\n  )\n  const byId = useMemo(() => new Map(records.map((record) => [record.id, record])), [records])\n\n  const schema = useMemo(() => submissionLens({ detail: recordId !== null }), [recordId])\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(() => records.map((record) => submissionToLensDocument(record, forms)), [records, forms])\n  const get = useCallback(\n    (ref: DocumentRef) => {\n      const record = byId.get(ref.id)\n      return record ? submissionToLensDocument(record, forms) : undefined\n    },\n    [byId, forms],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef) => {\n      const record = byId.get(ref.id)\n      return record ? submissionSender(forms, record) || record.form : ref.id\n    },\n    [byId, forms],\n  )\n  const validate = useCallback(\n    (doc: CmsDocument) => [\n      ...validateDocument(registry, doc, { localeConfig: LENS_LOCALE_CONFIG }),\n      ...deliveryIssues(byId.get(doc.id)),\n    ],\n    [registry, byId],\n  )\n\n  /** Write through the operations client and place the answer in the one cached list. */\n  const write = useCallback(\n    async (input: { id: string } & Record<string, unknown>): Promise<OkResult> => {\n      const operations = await ctx.operations()\n      const result = await operations.records(submissionRecordKind).save({ projectId, ...input } as never)\n      if (!result.ok) return { ok: false, message: result.error.message }\n      const saved = result.value as SubmissionRecord\n      cache.patch<SubmissionRecord[]>(recordListKey(submissionRecordKind, projectId), (prev) => [\n        ...(prev ?? []).filter((record) => record.id !== saved.id),\n        saved,\n      ])\n      return { ok: true }\n    },\n    [ctx, projectId, cache],\n  )\n\n  const save = useCallback(\n    async (doc: CmsDocument, base?: CmsDocument): Promise<OkResult> => {\n      const stored = byId.get(doc.id)\n      if (!stored) return { ok: false, message: `Submission “${doc.id}” is not loaded.` }\n      // Against the record as the editor OPENED it (`base`, EC-616) — never the cache, which may\n      // already hold another editor's change to a column this editor did not touch.\n      const change = inboxSaveWrite(doc, base, stored, forms)\n      // Nothing the editor owns changed: nothing to write (the displayed columns are never sent).\n      if (Object.keys(change).length === 1) return { ok: true }\n      return write(change)\n    },\n    [byId, write, forms],\n  )\n  const remove = useCallback(\n    async (ref: DocumentRef): Promise<OkResult> => {\n      const operations = await ctx.operations()\n      const result = await operations.records(submissionRecordKind).remove({ projectId, id: ref.id })\n      if (!result.ok) return { ok: false, message: result.error.message }\n      cache.patch<SubmissionRecord[]>(recordListKey(submissionRecordKind, projectId), (prev) =>\n        (prev ?? []).filter((record) => record.id !== ref.id),\n      )\n      return { ok: true }\n    },\n    [ctx, projectId, cache],\n  )\n  const create = useCallback((): DocumentRef => {\n    throw new Error('Submissions come from the site — the inbox creates none.')\n  }, [])\n\n  const source = useRailViewSource({\n    projectId,\n    schema,\n    capabilities: INBOX_CAPABILITIES,\n    localeConfig: LENS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    detailPath: (submissionId: string) => `${id}/${submissionId}`,\n    listPath: id,\n    validate,\n    create,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n\n  const retry = useCallback(async () => {\n    if (!recordId) return\n    setRetrying(true)\n    setRetryError(null)\n    // Moving the row INTO `pending` is the retry: the deployment schedules the delivery.\n    const result = await write({ id: recordId, deliveryState: 'pending' })\n    if (!result.ok) setRetryError(result.message)\n    setRetrying(false)\n  }, [recordId, write])\n\n  if (list.status === 'pending') return <InboxMessage text=\"Loading submissions…\" />\n  if (list.status === 'error') return <InboxMessage text={`Submissions could not be loaded: ${list.error?.message ?? 'unknown error'}`} />\n  if (recordId === null) return <CollectionViewSurface source={source} projectId={projectId} />\n\n  const record = byId.get(recordId)\n  const form = record ? formOf(forms, record) : undefined\n  const fields = record ? labelPayload(record.payload, form ? (config.source.fields?.(form.values) ?? []) : []) : []\n  return (\n    <PortableDetailEditor\n      source={source}\n      projectId={projectId}\n      documentId={recordId}\n      formAppendix={\n        record ? (\n          <>\n            <SubmissionAppendix\n              record={record}\n              fields={fields}\n              stateLabel={DELIVERY_STATE_LABELS[record.deliveryState]}\n              onRetry={() => void retry()}\n              retrying={retrying}\n            />\n            {retryError ? <InboxMessage text={retryError} /> : null}\n          </>\n        ) : null\n      }\n    />\n  )\n}\n\nfunction InboxMessage({ text }: { text: string }) {\n  return (\n    <Text tone=\"muted\" className=\"p-6\" data-testid=\"forms-inbox-message\">\n      {text}\n    </Text>\n  )\n}\n\n/** The inbox's deep link: `[]` the list, `[submissionId]` one submission. */\nfunction parseInboxPath(segments: string[]): Record<string, string | null> | null {\n  if (segments.length === 0) return {}\n  if (segments.length === 1) return { submissionId: decodeURIComponent(segments[0]!) }\n  return null\n}\n\n/** The forms inbox as a rail entry (see the module header). */\nexport function formsInbox<V>(config: FormsInboxConfig<V>) {\n  const id = config.id ?? 'submissions'\n  return nav.view({\n    id,\n    label: config.label ?? 'Submissions',\n    description: 'Form submissions from the site, with their mail delivery.',\n    icon: Inbox,\n    parsePath: parseInboxPath,\n    useIssues: useInboxIssues,\n    ...(config.visible ? { visible: config.visible } : {}),\n    render: (ctx) => <FormsInbox ctx={ctx} config={config} id={id} />,\n  })\n}\n\nexport { failedDeliveryIssues, parseInboxPath }\n"]}
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../src/studio/inbox.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACpC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,GAAG,EACH,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,iBAAiB,GAClB,MAAM,yBAAyB,CAAA;AAShC,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAExG,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAEtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE7C,OAAO,EACL,MAAM,EACN,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,QAAQ,CAAA;AAEf,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAgC/C,mGAAmG;AACnG,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;CACjB,CAAA;AAED,MAAM,WAAW,GAAW,IAAI,CAAA;AAChC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AAE9F,MAAM,qBAAqB,GAA8D;IACvF,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE;IAC/C,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE;IACpC,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,0BAA0B,EAAE;IAChE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE;IAC9C,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE;CAClD,CAAA;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,oBAAoB,CAAC,IAAI,EAAE,CAAA;AAEhG,kFAAkF;AAClF,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,KAAK,CAAC;QAChB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,GAAG,EAAE,uBAAuB;gBAC5B,OAAO,EAAE,GAAG,KAAK,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yDAAyD;gBACnH,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,cAAc;aACzB;SACF,CAAA;AACP,CAAC;AAED,8FAA8F;AAC9F,SAAS,cAAc,CAAC,EAAE,SAAS,EAAyB;IAC1D,MAAM,IAAI,GAAG,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC9C,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAI,GAAmB,EAAE,MAAqB;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAoB;QAC3D,QAAQ,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;YAC3G,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACrD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAW,EAAE,CAAC,CAAC,CAAA;QACxG,CAAC;KACF,CAAC,CAAA;IACF,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;AAC1G,CAAC;AAED,yFAAyF;AACzF,SAAS,cAAc,CAAC,MAAoC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAA;IACvE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,OAAO;QACL;YACE,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,6BAA6B,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAChH,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,YAAY,EAAE,oBAAoB,CAAC,IAAI;YACvC,UAAU,EAAE,MAAM,CAAC,EAAE;SACtB;KACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAoE;IAC1G,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;IACzB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAA;IACrD,MAAM,IAAI,GAAG,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAA;IAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC/C,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEjE,kCAAkC;IAClC,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACzH,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAA;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAE5F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IACvH,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,OAAO,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACrE,CAAC,EACD,CAAC,IAAI,EAAE,KAAK,CAAC,CACd,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,OAAO,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA;IACzE,CAAC,EACD,CAAC,IAAI,EAAE,KAAK,CAAC,CACd,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,GAAgB,EAAE,EAAE,CAAC;QACpB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;QACxE,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACpC,EACD,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAA;IAED,uFAAuF;IACvF,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,KAA+C,EAAqB,EAAE;QAC3E,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAW,CAAC,CAAA;QACpG,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAyB,CAAA;QAC9C,KAAK,CAAC,KAAK,CAAqB,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;YAC1D,KAAK;SACN,CAAC,CAAA;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,EACD,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CACxB,CAAA;IAED,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,GAAgB,EAAE,IAAkB,EAAqB,EAAE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,GAAG,CAAC,EAAE,kBAAkB,EAAE,CAAA;QACnF,2FAA2F;QAC3F,8EAA8E;QAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QACvD,4FAA4F;QAC5F,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QACzD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CACrB,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,GAAgB,EAAqB,EAAE;QAC5C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAC/F,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;QACnE,KAAK,CAAC,KAAK,CAAqB,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CACvF,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CACtD,CAAA;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,EACD,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CACxB,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAgB,EAAE;QAC3C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,SAAS;QACT,MAAM;QACN,YAAY,EAAE,kBAAkB;QAChC,YAAY,EAAE,kBAAkB;QAChC,SAAS;QACT,GAAG;QACH,OAAO;QACP,UAAU,EAAE,CAAC,YAAoB,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,YAAY,EAAE;QAC7D,QAAQ,EAAE,EAAE;QACZ,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACnC,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,WAAW,CAAC,IAAI,CAAC,CAAA;QACjB,aAAa,CAAC,IAAI,CAAC,CAAA;QACnB,qFAAqF;QACrF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;QACtE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC7C,WAAW,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;IAErB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAC,YAAY,IAAC,IAAI,EAAC,2BAAsB,GAAG,CAAA;IAClF,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,KAAC,YAAY,IAAC,IAAI,EAAE,oCAAoC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,GAAI,CAAA;IACxI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAC,qBAAqB,IAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAI,CAAA;IAE7F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAClH,OAAO,CACL,KAAC,oBAAoB,IACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,QAAQ,EACpB,YAAY,EACV,MAAM,CAAC,CAAC,CAAC,CACP,8BACE,KAAC,kBAAkB,IACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,EACvD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,EAC3B,QAAQ,EAAE,QAAQ,GAClB,EACD,UAAU,CAAC,CAAC,CAAC,KAAC,YAAY,IAAC,IAAI,EAAE,UAAU,GAAI,CAAC,CAAC,CAAC,IAAI,IACtD,CACJ,CAAC,CAAC,CAAC,IAAI,GAEV,CACH,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,IAAI,EAAoB;IAC9C,OAAO,CACL,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,KAAK,iBAAa,qBAAqB,YACjE,IAAI,GACA,CACR,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,QAAkB;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;IACpF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAI,MAA2B;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,aAAa,CAAA;IACrC,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,EAAE;QACF,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa;QACpC,WAAW,EAAE,2DAA2D;QACxE,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,cAAc;QACzB,qFAAqF;QACrF,UAAU,EAAE,oBAAoB,CAAC,IAAI;QACrC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAC,UAAU,IAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAI;KAClE,CAAC,CAAA;AACJ,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAA","sourcesContent":["import { useCallback, useMemo, useState } from 'react'\nimport { Inbox } from 'lucide-react'\nimport {\n  PortableDetailEditor,\n  CollectionViewSurface,\n  nav,\n  normalizeOkResult,\n  recordListKey,\n  useRecordList,\n  useRailViewSource,\n} from '@elytracms/studio/addon'\nimport type {\n  AppViewContext,\n  CollectionViewCapabilities,\n  NavIssue,\n  NavPermission,\n  NoticeLocation,\n  OkResult,\n} from '@elytracms/studio/addon'\nimport { createCollectionRegistry, parseLocaleConfig, validateDocument } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CmsValidationIssue, DocumentRef, Locale, LocalizedString } from '@elytracms/core/cms-core'\nimport { Text } from '@elytracms/studio/ui'\nimport { DELIVERY_STATES, submissionRecordKind } from '../shared/kind'\nimport type { SubmissionRecord } from '../shared/kind'\nimport { deliveryNeedsAttention } from '../shared/delivery'\nimport { labelPayload } from '../shared/mail'\nimport type { FormDocument, FormSource } from '../shared/source'\nimport {\n  formOf,\n  inboxIssueCount,\n  inboxSaveWrite,\n  submissionLens,\n  submissionSender,\n  submissionToLensDocument,\n} from './lens'\nimport type { InboxForms } from './lens'\nimport { SubmissionAppendix } from './appendix'\n\n/**\n * EC-613 — the forms INBOX: the submission kind on the studio's portable list/edit surfaces\n * (AD-19, EC-616's scaffold for a source of one's own), one entry in the project's rail:\n *\n * ```tsx\n * // studio/studio.config.tsx\n * import { formsInbox } from '@elytracms/forms/studio'\n * import { contactForms } from '../cms/forms'\n * export default defineStudio({ sidebar: [ …, formsInbox({ source: contactForms }) ] })\n * ```\n *\n * The list shows every submission, newest first; one opens in the portable edit shell, where\n * the editor sets the status, the assignee and notes (the inbox lifecycle) and reads — below\n * the fields — what was sent, the files and the mail delivery per recipient, with a retry for\n * a failed mail. A failed or partly failed delivery is an issue on the row AND at the rail\n * foot, from any surface. Reads and writes go through the operations client\n * (`operations.records(submissionRecordKind)`) and the one query cache (AD-17).\n */\n\nexport interface FormsInboxConfig<V> {\n  /** How the inbox reads your form documents (labels, titles) — the same declaration the site's delivery route reads. */\n  source: FormSource<V>\n  /** The route segment (default `submissions`). */\n  id?: string\n  /** The rail label (default `Submissions`). */\n  label?: string\n  /** OPTIONAL, default-open nav permission (AD-18). */\n  visible?: NavPermission\n}\n\n/** The inbox's capabilities: no \"New\" (submissions come from the site), delete and bulk delete. */\nexport const INBOX_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false,\n  duplicate: false,\n  remove: true,\n  bulk: true,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false,\n}\n\nconst LENS_LOCALE: Locale = 'en'\nconst LENS_LOCALE_CONFIG = parseLocaleConfig({ default: LENS_LOCALE, locales: [LENS_LOCALE] })\n\nconst DELIVERY_STATE_LABELS: Record<(typeof DELIVERY_STATES)[number], LocalizedString> = {\n  pending: { en: 'Sending', de: 'Wird gesendet' },\n  sent: { en: 'Sent', de: 'Gesendet' },\n  partial: { en: 'Partly failed', de: 'Teilweise fehlgeschlagen' },\n  failed: { en: 'Failed', de: 'Fehlgeschlagen' },\n  skipped: { en: 'Not sent', de: 'Nicht gesendet' },\n}\n\n/**\n * EC-690 — where the finding is: the inbox, by the record kind it lists (the view declares\n * `recordKind`), so the studio's issues tray offers \"Go to\" the inbox and shows the finding to\n * whoever can open the inbox — not to every role.\n */\nconst INBOX_LOCATION: NoticeLocation = { kind: 'record', recordKind: submissionRecordKind.kind }\n\n/** The issues-tray finding: how many submissions' mail did not (fully) go out. */\nfunction failedDeliveryIssues(count: number): NavIssue[] {\n  return count === 0\n    ? []\n    : [\n        {\n          key: 'forms-delivery-failed',\n          message: `${count} form submission${count === 1 ? '' : 's'}: the mail was not delivered — open the inbox to retry.`,\n          severity: 'error',\n          location: INBOX_LOCATION,\n        },\n      ]\n}\n\n/** The always-on findings hook for the issues tray (it reads the inbox's own cached list). */\nfunction useInboxIssues({ projectId }: { projectId: string }): readonly NavIssue[] {\n  const list = useRecordList(submissionRecordKind, projectId)\n  const count = inboxIssueCount(list.data ?? [])\n  return useMemo(() => failedDeliveryIssues(count), [count])\n}\n\n/** The form documents of the source's collection, through the operations client. */\nfunction useInboxForms<V>(ctx: AppViewContext, source: FormSource<V>): InboxForms<V> | undefined {\n  const forms = ctx.query.useOperationQuery<FormDocument<V>[]>({\n    queryKey: ['forms-inbox', 'forms', ctx.projectId, source.collection],\n    loader: async (operations) => {\n      const result = await operations.documents.list({ projectId: ctx.projectId, collection: source.collection })\n      if (!result.ok) throw new Error(result.error.message)\n      return result.value.map((record) => ({ id: record.document.id, values: record.document.values as V }))\n    },\n  })\n  return useMemo(() => (forms.data ? { source, documents: forms.data } : undefined), [forms.data, source])\n}\n\n/** A failed delivery as a warning on the row's own Issues pane (never blocks a save). */\nfunction deliveryIssues(record: SubmissionRecord | undefined): CmsValidationIssue[] {\n  if (!record || !deliveryNeedsAttention(record.deliveryState)) return []\n  const failed = (record.deliveryLog ?? []).filter((entry) => !entry.ok)\n  const last = failed.at(-1)\n  return [\n    {\n      code: 'custom-validation',\n      severity: 'warning',\n      message: `The mail was not delivered${last?.to ? ` to ${last.to}` : ''}${last?.error ? `: ${last.error}` : ''}.`,\n      path: ['deliveryState'],\n      collectionId: submissionRecordKind.kind,\n      documentId: record.id,\n    },\n  ]\n}\n\nfunction FormsInbox<V>({ ctx, config, id }: { ctx: AppViewContext; config: FormsInboxConfig<V>; id: string }) {\n  const { projectId } = ctx\n  const recordId = ctx.deepLink['submissionId'] ?? null\n  const list = useRecordList(submissionRecordKind, projectId)\n  const cache = ctx.query.useOperationCache()\n  const forms = useInboxForms(ctx, config.source)\n  const [retrying, setRetrying] = useState(false)\n  const [retryError, setRetryError] = useState<string | null>(null)\n\n  // Newest first — the inbox order.\n  const records = useMemo(\n    () => [...(list.data ?? [])].sort((a, b) => (a.submittedAt < b.submittedAt ? 1 : a.submittedAt > b.submittedAt ? -1 : 0)),\n    [list.data],\n  )\n  const byId = useMemo(() => new Map(records.map((record) => [record.id, record])), [records])\n\n  const schema = useMemo(() => submissionLens({ detail: recordId !== null }), [recordId])\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(() => records.map((record) => submissionToLensDocument(record, forms)), [records, forms])\n  const get = useCallback(\n    (ref: DocumentRef) => {\n      const record = byId.get(ref.id)\n      return record ? submissionToLensDocument(record, forms) : undefined\n    },\n    [byId, forms],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef) => {\n      const record = byId.get(ref.id)\n      return record ? submissionSender(forms, record) || record.form : ref.id\n    },\n    [byId, forms],\n  )\n  const validate = useCallback(\n    (doc: CmsDocument) => [\n      ...validateDocument(registry, doc, { localeConfig: LENS_LOCALE_CONFIG }),\n      ...deliveryIssues(byId.get(doc.id)),\n    ],\n    [registry, byId],\n  )\n\n  /** Write through the operations client and place the answer in the one cached list. */\n  const write = useCallback(\n    async (input: { id: string } & Record<string, unknown>): Promise<OkResult> => {\n      const operations = await ctx.operations()\n      const result = await operations.records(submissionRecordKind).save({ projectId, ...input } as never)\n      if (!result.ok) return { ok: false, message: result.error.message }\n      const saved = result.value as SubmissionRecord\n      cache.patch<SubmissionRecord[]>(recordListKey(submissionRecordKind, projectId), (prev) => [\n        ...(prev ?? []).filter((record) => record.id !== saved.id),\n        saved,\n      ])\n      return { ok: true }\n    },\n    [ctx, projectId, cache],\n  )\n\n  const save = useCallback(\n    async (doc: CmsDocument, base?: CmsDocument): Promise<OkResult> => {\n      const stored = byId.get(doc.id)\n      if (!stored) return { ok: false, message: `Submission “${doc.id}” is not loaded.` }\n      // Against the record as the editor OPENED it (`base`, EC-616) — never the cache, which may\n      // already hold another editor's change to a column this editor did not touch.\n      const change = inboxSaveWrite(doc, base, stored, forms)\n      // Nothing the editor owns changed: nothing to write (the displayed columns are never sent).\n      if (Object.keys(change).length === 1) return { ok: true }\n      return write(change)\n    },\n    [byId, write, forms],\n  )\n  const remove = useCallback(\n    async (ref: DocumentRef): Promise<OkResult> => {\n      const operations = await ctx.operations()\n      const result = await operations.records(submissionRecordKind).remove({ projectId, id: ref.id })\n      if (!result.ok) return { ok: false, message: result.error.message }\n      cache.patch<SubmissionRecord[]>(recordListKey(submissionRecordKind, projectId), (prev) =>\n        (prev ?? []).filter((record) => record.id !== ref.id),\n      )\n      return { ok: true }\n    },\n    [ctx, projectId, cache],\n  )\n  const create = useCallback((): DocumentRef => {\n    throw new Error('Submissions come from the site — the inbox creates none.')\n  }, [])\n\n  const source = useRailViewSource({\n    projectId,\n    schema,\n    capabilities: INBOX_CAPABILITIES,\n    localeConfig: LENS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    detailPath: (submissionId: string) => `${id}/${submissionId}`,\n    listPath: id,\n    validate,\n    create,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n\n  const retry = useCallback(async () => {\n    if (!recordId) return\n    setRetrying(true)\n    setRetryError(null)\n    // Moving the row INTO `pending` is the retry: the deployment schedules the delivery.\n    const result = await write({ id: recordId, deliveryState: 'pending' })\n    if (!result.ok) setRetryError(result.message)\n    setRetrying(false)\n  }, [recordId, write])\n\n  if (list.status === 'pending') return <InboxMessage text=\"Loading submissions…\" />\n  if (list.status === 'error') return <InboxMessage text={`Submissions could not be loaded: ${list.error?.message ?? 'unknown error'}`} />\n  if (recordId === null) return <CollectionViewSurface source={source} projectId={projectId} />\n\n  const record = byId.get(recordId)\n  const form = record ? formOf(forms, record) : undefined\n  const fields = record ? labelPayload(record.payload, form ? (config.source.fields?.(form.values) ?? []) : []) : []\n  return (\n    <PortableDetailEditor\n      source={source}\n      projectId={projectId}\n      documentId={recordId}\n      formAppendix={\n        record ? (\n          <>\n            <SubmissionAppendix\n              record={record}\n              fields={fields}\n              stateLabel={DELIVERY_STATE_LABELS[record.deliveryState]}\n              onRetry={() => void retry()}\n              retrying={retrying}\n            />\n            {retryError ? <InboxMessage text={retryError} /> : null}\n          </>\n        ) : null\n      }\n    />\n  )\n}\n\nfunction InboxMessage({ text }: { text: string }) {\n  return (\n    <Text tone=\"muted\" className=\"p-6\" data-testid=\"forms-inbox-message\">\n      {text}\n    </Text>\n  )\n}\n\n/** The inbox's deep link: `[]` the list, `[submissionId]` one submission. */\nfunction parseInboxPath(segments: string[]): Record<string, string | null> | null {\n  if (segments.length === 0) return {}\n  if (segments.length === 1) return { submissionId: decodeURIComponent(segments[0]!) }\n  return null\n}\n\n/** The forms inbox as a rail entry (see the module header). */\nexport function formsInbox<V>(config: FormsInboxConfig<V>) {\n  const id = config.id ?? 'submissions'\n  return nav.view({\n    id,\n    label: config.label ?? 'Submissions',\n    description: 'Form submissions from the site, with their mail delivery.',\n    icon: Inbox,\n    parsePath: parseInboxPath,\n    useIssues: useInboxIssues,\n    // EC-690: the record kind this view lists — a submission-located finding opens here.\n    recordKind: submissionRecordKind.kind,\n    ...(config.visible ? { visible: config.visible } : {}),\n    render: (ctx) => <FormsInbox ctx={ctx} config={config} id={id} />,\n  })\n}\n\nexport { failedDeliveryIssues, parseInboxPath }\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@elytracms/forms",
   "author": "finaldream <hi@finaldream.de>",
-  "version": "0.0.98",
+  "version": "0.0.99",
   "engines": {
     "node": ">=22.18.0"
   },
@@ -28,13 +28,13 @@
   "dependencies": {
     "lucide-react": "^1.23.0",
     "zod": "^4.4.3",
-    "@elytracms/core": "^0.0.98"
+    "@elytracms/core": "^0.0.99"
   },
   "peerDependencies": {
     "convex": "^1.42.1",
     "react": "^19.0.0",
-    "@elytracms/next": "^0.0.98",
-    "@elytracms/studio": "^0.0.98"
+    "@elytracms/next": "^0.0.99",
+    "@elytracms/studio": "^0.0.99"
   },
   "peerDependenciesMeta": {
     "@elytracms/next": {
@@ -59,8 +59,8 @@
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
     "typescript": "^6.0.3",
-    "@elytracms/next": "^0.0.98",
-    "@elytracms/studio": "^0.0.98"
+    "@elytracms/studio": "^0.0.99",
+    "@elytracms/next": "^0.0.99"
   },
   "files": [
     "dist",

package/src/convex/claim-ownership.convex.test.ts

@@ -258,13 +258,16 @@ describe('EC-671 probe — a visitor names an asset’s storage id in an upload
     expect(await survives(t, own)).toBe(false)
   })
 
-  it('control: a genuine mismatch is refused (no row); a genuine claim before it is released by the rollback', async () => {
+  it('control: a genuine mismatch is refused (no row); the genuine claim before it is never bound, so it survives (EC-695)', async () => {
+    // Before EC-695 the forms rollback released (deleted) this file — the shape (2a) and (3)
+    // guarded against. Now every claim is judged before any is bound: a refused submission binds
+    // nothing and nothing is released. The instrument's deletion control is the removal above.
     const t = await backend()
     const good = await declare(t, 'image/png', 500, 400)
     const goodFile = await storeFile(t, 400, 'image/png')
     const answer = await postWithRefusedSecondClaim(t, { uploadId: good, storageId: goodFile })
     expect(answer.status).toBe(415)
     expect(await rows(t)).toEqual([])
-    expect(await survives(t, goodFile)).toBe(false)
+    expect(await survives(t, goodFile)).toBe(true)
   })
 })

package/src/convex/dev-ingest-runner.convex.test.ts

@@ -145,7 +145,7 @@ async function leftovers(t: Backend) {
 describe('pnpm dev:ingest — every scenario against the real engine (convex-test)', () => {
   it('each scenario’s expectations hold; nothing printed holds the secret; no runner row is left', async () => {
     const core = await runner()
-    expect(core.INGEST_SCENARIOS.map((scenario) => scenario.name)).toEqual(['ec671', 'ec685-causal', 'ec685-release', 'storage-sha256', 'ec618-burst'])
+    expect(core.INGEST_SCENARIOS.map((scenario) => scenario.name)).toEqual(['ec671', 'ec685-causal', 'ec685-release', 'storage-sha256', 'ec618-burst', 'ec695'])
     for (const scenario of core.INGEST_SCENARIOS) {
       const t = await backend()
       const lines: string[] = []
@@ -173,6 +173,28 @@ describe('pnpm dev:ingest — every scenario against the real engine (convex-tes
     expect(lines).toContain('  · _storage.sha256 length: 44')
   })
 
+  it('the EC-695 scenario: 23/23 — the substitution binds and deletes nothing, B binds after, the repeat is refused (the close’s expected lines)', async () => {
+    const core = await runner()
+    const t = await backend()
+    const lines: string[] = []
+    const scenario = core.INGEST_SCENARIOS.find((entry) => entry.name === 'ec695')!
+    const result = await core.runIngestScenario(scenario, port(core, t), { say: (line) => lines.push(line), wire, runId: 'r', now: () => T0 })
+    expect(result).toEqual({ ok: true, passed: 23, failed: [] })
+    expect(lines).toEqual(
+      expect.arrayContaining([
+        '  ✓ (a) A’s submission (first claim: B’s file; second: a mismatch) is refused: 422',
+        '  ✓ (a) …it deletes nothing: B’s file is still stored: true',
+        '  ✓ (a) A’s first intent was never spent: issued',
+        '  ✓ (a) B’s claim then binds B’s file: 200',
+        '  ✓ (b) a submission claiming one upload twice is refused before it is sent: refused',
+        '✓ ec695: 23/23 expectation(s) held',
+      ]),
+    )
+    expect(await leftovers(t)).toEqual({ submissions: 0, bindings: 0, assets: 0 })
+    // Every stored byte the scenario made is gone (bound files with their rows, the orphan with its asset).
+    expect(await t.run(async (ctx) => (await ctx.db.system.query('_storage').collect()).length)).toBe(0)
+  })
+
   it('negative control: signed under ANOTHER secret, every scenario fails visibly (the receiver refuses it)', async () => {
     const core = await runner()
     for (const scenario of core.INGEST_SCENARIOS) {

package/src/convex/forms.convex.test.ts

@@ -409,7 +409,7 @@ describe('uploads, claimed by the submission', () => {
     expect(await t.run((ctx) => ctx.storage.get(storageId as never))).toBeNull()
   })
 
-  it('a claim that fails refuses the submission AND deletes the files it had already claimed (never the refused one)', async () => {
+  it('a claim that fails refuses the submission and binds NOTHING: the passing claim’s file is never bound, so nothing is deleted (EC-695)', async () => {
     const t = await backend()
     site()
     const good = await declareUpload(t, 'image/png', 500, 'photo', 400)
@@ -425,10 +425,15 @@ describe('uploads, claimed by the submission', () => {
     })
     expect(answer.status).toBe(415)
     expect(await rows(t)).toEqual([])
-    expect(await t.run((ctx) => ctx.storage.get(goodFile as never))).toBeNull() // claimed, then released
+    // EC-695: every claim judged before any is bound — the passing one was never bound, so there is
+    // nothing to release (before: claimed, then released and deleted by the forms rollback).
+    expect(await t.run(async (ctx) => (await ctx.storage.get(goodFile as never)) !== null)).toBe(true)
+    expect(await t.run(async (ctx) => (await ctx.db.query('records').collect()).filter((row) => row.kind === 'ingestBinding'))).toEqual([])
     // EC-671: the refused claim never deletes the id it names (the visitor's word, not an ownership fact).
     expect(await t.run(async (ctx) => (await ctx.storage.get(wrongType as never)) !== null)).toBe(true)
     expect(await scheduled(t)).toEqual([])
+    // The passing upload's intent was never spent: the corrected submission claims it.
+    expect((await post(t, { ...SUBMISSION, uploads: [{ uploadId: good.body.uploadId!, storageId: goodFile }] })).status).toBe(200)
   })
 
   it('the forms upload policy refuses what a browser would run (HTML, SVG) and anything over 10 MiB', async () => {

package/src/convex/index.ts

@@ -10,7 +10,7 @@ import { internalMutation, internalQuery, mutation } from '@elytracms/studio/con
 import type { MutationCtx } from '@elytracms/studio/convex/functions'
 import { requireCapability } from '@elytracms/studio/convex/guard'
 import {
-  claimIngestUpload,
+  claimIngestUploads,
   ingestHandler,
   ingestHandlerArgs,
   ingestUploadRecordKind,
@@ -60,10 +60,13 @@ import type { FormDeliveryRequest } from '../shared/delivery'
  * - **`ingest`** — the receiver's `submission` handler (EC-617): an `upload` is accepted
  *   under the forms upload policy and its intent recorded; a `submission` is read
  *   (`readSubmissionPayload`), its uploads claimed, the row written and its delivery
- *   scheduled. A claim that fails refuses the submission and deletes the files already
- *   claimed for it — no claimed bytes ever sit without a row. Every deletion goes through
- *   the engine's `releaseIngestUploads`, which deletes only bytes a claim bound to its
- *   intent (EC-671): an id a visitor or an editor merely NAMES is never deleted;
+ *   scheduled. The uploads are claimed in ONE engine call (`claimIngestUploads`, EC-695),
+ *   which binds them all or none: a claim that fails refuses the submission with nothing
+ *   bound, so no claimed bytes ever sit without a row and a refusal deletes nothing (a
+ *   predictable file another intent stored can never be deleted through a rollback). The
+ *   one deletion, `remove`, goes through the engine's `releaseIngestUploads`, which deletes
+ *   only bytes a claim bound to its intent (EC-671): an id a visitor or an editor merely
+ *   NAMES is never deleted;
  * - **`deliver`** — the scheduled action per row: it asks the site's delivery route to send
  *   (`attemptFormDelivery`) and `recordDelivery` logs the answer per recipient and schedules
  *   the next attempt (`applyDeliveryOutcome`);
@@ -175,16 +178,14 @@ export const ingest = internalMutation({
     const read = readSubmissionPayload(body, { hasFiles: (body.uploads?.length ?? 0) > 0 })
     if (!read.ok) return { ok: false, status: read.status, message: read.message, issues: read.issues }
 
-    // Claim every upload; on the first refusal, release what this submission already claimed
-    // (bound in this transaction — EC-671: nothing else is ever deleted here).
+    // EC-695: every upload claimed in ONE engine call, after every check above that can refuse —
+    // all bound, or none (a refused claim refuses the submission, and nothing was bound, so
+    // nothing is released: this handler never deletes bytes). Nothing after it refuses.
+    const claim = await claimIngestUploads(ctx, body.uploads ?? [], body.target, receivedAt)
+    if (!claim.ok) return claim
     const files: SubmissionFile[] = []
     const namesUsed = new Map<string, number>()
-    for (const claim of body.uploads ?? []) {
-      const claimed = await claimIngestUpload(ctx, claim, body.target, receivedAt)
-      if (!claimed.ok) {
-        await releaseIngestUploads(ctx, storageIds(files))
-        return claimed
-      }
+    for (const claimed of claim.files) {
       const index = namesUsed.get(claimed.field) ?? 0
       namesUsed.set(claimed.field, index + 1)
       const name = fileNames(read.columns.payload, claimed.field)[index]

package/src/convex/ingest-causation.convex.test.ts

@@ -2,8 +2,9 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { convexTest } from 'convex-test'
 import type { ConvexHttpClient } from 'convex/browser'
 import type { FunctionReference } from 'convex/server'
-import { INGEST_RECEIVER_PATH, ingestUploadSha256, signedIngestRequest } from '@elytracms/core/ingest'
+import { INGEST_RECEIVER_PATH, INGEST_SIGNATURE_HEADER, ingestUploadSha256, signedIngestRequest } from '@elytracms/core/ingest'
 import type { IngestReceiverBody } from '@elytracms/core/ingest'
+import { signRevalidationBody } from '@elytracms/core/revalidation'
 import schema from '../../../studio/convex/schema'
 import * as assetsModule from '../../../studio/convex/assets'
 import * as deliveryModule from '../../../studio/convex/delivery'
@@ -173,6 +174,33 @@ function deleteAssetInStudio(t: Backend, assetId: string) {
 
 const assetIds = (t: Backend) => t.run(async (ctx) => (await ctx.db.query('assets').collect()).map((row) => row.assetId))
 
+/** Every upload intent's state, by its id. */
+const intentStates = (t: Backend) =>
+  t.run(async (ctx) =>
+    Object.fromEntries(
+      (await ctx.db.query('records').collect())
+        .filter((row) => row.kind === 'ingestUpload')
+        .map((row) => [row.recordId, (row.data as { state: string }).state]),
+    ),
+  )
+
+/** One submission claiming every upload in `uploads`, in order. */
+const claimAll = (t: Backend, uploads: { uploadId: string; storageId: string }[]) => post(t, { ...SUBMISSION, uploads })
+
+/**
+ * The same, signed as RAW JSON with the deployment's secret — past the one builder
+ * (`signedIngestRequest` parses the body first, and refuses a repeated claim before signing:
+ * EC-695), so the receiver's own parse is what answers.
+ */
+async function claimAllUnchecked(t: Backend, uploads: { uploadId: string; storageId: string }[]) {
+  const raw = JSON.stringify({ ...SUBMISSION, uploads })
+  return t.fetch(INGEST_RECEIVER_PATH, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', [INGEST_SIGNATURE_HEADER]: await signRevalidationBody(raw, SECRET) },
+    body: raw,
+  })
+}
+
 describe('EC-685 probe (1) — causation: a claim binds only bytes its own intent stored', () => {
   it('intents A and B issued; bytes stored through B’s URL: A’s claim naming them is refused, B’s claim binds them', async () => {
     const t = await backend()
@@ -202,6 +230,9 @@ describe('EC-685 probe (1) — causation: a claim binds only bytes its own inten
   it('RESIDUAL (named, not closed): bytes an attacker can PREDICT can be declared — A binds them first', async () => {
     // Causal only for unpredictable bytes: a deterministic file (one an addon generates, a
     // well-known document) is known before it exists, so its digest can be declared by anyone.
+    // EC-695 keeps it named and makes it NON-DESTRUCTIVE: B's claim is refused visibly (its
+    // intent marked rejected) and nothing is deleted. Option 1 (the engine receives the bytes,
+    // EC-304 Phase B) is what would close it.
     const t = await backend()
     const predictable = content('a template every visitor uploads', 800)
     const a = await declare(t, predictable, 'application/pdf')
@@ -210,6 +241,8 @@ describe('EC-685 probe (1) — causation: a claim binds only bytes its own inten
     expect((await claim(t, a, file)).status).toBe(200)
     expect((await claim(t, b, file)).status).toBe(422) // bound already (check 2)
     expect(await bindings(t)).toEqual([{ storageId: file, uploadId: a }])
+    expect(await intentStates(t)).toEqual({ [a]: 'claimed', [b]: 'rejected' }) // B's refusal is on record
+    expect(await survives(t, file)).toBe(true) // the substitution deletes nothing
   })
 
   it('control: a genuine claim binds (its own intent, its own bytes)', async () => {
@@ -263,3 +296,111 @@ describe('EC-685 probe (2) — ownership stays true when a delete spends it', ()
     expect(await survives(t, file)).toBe(false)
   })
 })
+
+/**
+ * EC-695 (Codex round 5 F20 residual) — a predictable-bytes substitution must not be able to
+ * DELETE another intent's file. The engine judges every claim of a submission before it binds
+ * any (`claimIngestUploads`), so a refused submission binds nothing and the forms rollback's
+ * delete is gone; a duplicate in one submission is refused at the wire. Every defect line says
+ * what the base (`21678336`) did — its counterexample form passed 3/3 there before inversion.
+ */
+describe('EC-695 probe — judge every claim, then bind: a substitution cannot delete another intent’s file', () => {
+  it('worst row: A’s first claim names B’s predictable file, its second mismatches — nothing is bound, nothing deleted; B’s claim binds', async () => {
+    const t = await backend()
+    const predictable = content('a template every visitor uploads', 800)
+    const a = await declare(t, predictable, 'application/pdf') // A declares the bytes it can predict…
+    const b = await declare(t, predictable, 'application/pdf') // …B, the victim, declares them too…
+    const file = await storeFile(t, predictable, 'application/pdf') // …and stores them through B's URL.
+    const a2 = await declare(t, content('what A’s second upload declares', 800), 'application/pdf')
+    const other = await storeFile(t, content('not what a2 declared', 800), 'application/pdf')
+    const answer = await claimAll(t, [
+      { uploadId: a, storageId: file },
+      { uploadId: a2, storageId: other }, // deliberately mismatching: the digest differs
+    ])
+    expect(answer.status).toBe(422)
+    expect(await rows(t)).toEqual([])
+    expect(await bindings(t)).toEqual([])
+    expect(await survives(t, file)).toBe(true) // base: false — the rollback released the file A's first claim had bound
+    expect(await survives(t, other)).toBe(true) // EC-671: a refused claim never deletes the id it names
+    // The claim that passed was never bound, so its intent was never spent; the refused one is on record.
+    expect(await intentStates(t)).toEqual({ [a]: 'issued', [b]: 'issued', [a2]: 'rejected' }) // base: a 'claimed'
+    const byB = await claim(t, b, file)
+    expect(byB.status).toBe(200) // base: 422 — "No stored file": the bytes were gone
+    expect(await bindings(t)).toEqual([{ storageId: file, uploadId: b }])
+  })
+
+  it('a refused submission leaves its passing claims claimable: the visitor’s corrected retry binds the same upload', async () => {
+    const t = await backend()
+    const cv = content('a genuine CV', 800)
+    const good = await declare(t, cv, 'application/pdf')
+    const goodFile = await storeFile(t, cv, 'application/pdf')
+    const liar = await declare(t, content('what the second upload declares', 800), 'application/pdf')
+    const wrong = await storeFile(t, content('a different file', 800), 'application/pdf')
+    expect((await claimAll(t, [{ uploadId: good, storageId: goodFile }, { uploadId: liar, storageId: wrong }])).status).toBe(422)
+    expect(await survives(t, goodFile)).toBe(true) // base: false — claimed, then released by the rollback
+    const retry = await claim(t, good, goodFile)
+    expect(retry.status).toBe(200) // base: 409 — the intent was spent by the claim the rollback undid
+    expect(await bindings(t)).toEqual([{ storageId: goodFile, uploadId: good }])
+  })
+
+  it('a duplicate uploadId in one submission is refused at the wire (400, naming it): nothing bound, the intent intact', async () => {
+    const t = await backend()
+    const bytes = content('a CV', 800)
+    const upload = await declare(t, bytes, 'application/pdf')
+    const file = await storeFile(t, bytes, 'application/pdf')
+    const twice = [
+      { uploadId: upload, storageId: file },
+      { uploadId: upload, storageId: file },
+    ]
+    const answer = await claimAllUnchecked(t, twice)
+    expect(answer.status).toBe(400) // base: 409 — the first claim bound, the second was "already claimed"
+    await expect(claimAll(t, twice)).rejects.toThrow() // …and the site's one builder refuses to sign it
+    expect(((await answer.json()) as { issues: { path: unknown[] }[] }).issues.map((issue) => issue.path)).toEqual([
+      ['uploads', 1, 'uploadId'],
+      ['uploads', 1, 'storageId'],
+    ])
+    expect(await survives(t, file)).toBe(true) // base: false — the rollback deleted it
+    expect(await intentStates(t)).toEqual({ [upload]: 'issued' })
+    expect((await claim(t, upload, file)).status).toBe(200) // control: the same claim, once, binds
+  })
+
+  it('a duplicate stored file across two intents in one submission is refused at the wire: nothing bound, neither intent spent', async () => {
+    const t = await backend()
+    const bytes = content('a CV', 800)
+    const first = await declare(t, bytes, 'application/pdf')
+    const second = await declare(t, bytes, 'application/pdf')
+    const file = await storeFile(t, bytes, 'application/pdf')
+    const answer = await claimAllUnchecked(t, [
+      { uploadId: first, storageId: file },
+      { uploadId: second, storageId: file },
+    ])
+    expect(answer.status).toBe(400) // base: 422 — the second failed check (2) against the first's binding
+    expect(((await answer.json()) as { issues: { path: unknown[] }[] }).issues.map((issue) => issue.path)).toEqual([
+      ['uploads', 1, 'storageId'],
+    ])
+    expect(await survives(t, file)).toBe(true) // base: false — the rollback deleted it
+    expect(await intentStates(t)).toEqual({ [first]: 'issued', [second]: 'issued' }) // base: claimed, rejected
+    expect(await bindings(t)).toEqual([])
+  })
+
+  it('control: a submission whose claims all pass binds every file, in order, on its row', async () => {
+    const t = await backend()
+    const one = content('the first file', 800)
+    const two = content('the second file', 600)
+    const u1 = await declare(t, one, 'application/pdf')
+    const f1 = await storeFile(t, one, 'application/pdf')
+    const u2 = await declare(t, two, 'application/pdf')
+    const f2 = await storeFile(t, two, 'application/pdf')
+    const answer = await claimAll(t, [
+      { uploadId: u1, storageId: f1 },
+      { uploadId: u2, storageId: f2 },
+    ])
+    expect(answer.status).toBe(200)
+    expect((await rows(t))[0]!.files!.map((file) => [file.storageId, file.size])).toEqual([
+      [f1, 800],
+      [f2, 600],
+    ])
+    expect((await bindings(t)).map((binding) => binding.storageId).sort()).toEqual([f1, f2].sort())
+    expect(await intentStates(t)).toEqual({ [u1]: 'claimed', [u2]: 'claimed' })
+  })
+})