@fayz-ai/plugin-forms 0.8.0 → 0.9.0-next.0

package/src/locales/pt-BR.ts

@@ -14,6 +14,7 @@ export const ptBR: Record<string, string> = {
   'customForms.noTemplates': 'Nenhum modelo criado',
   'customForms.noTemplatesDescription': 'Crie seu primeiro formulário personalizado para começar a coletar dados estruturados.',
   'customForms.deleteTemplateConfirm': 'Excluir este modelo de formulário? Documentos existentes serão preservados.',
+  'customForms.archiveTemplateConfirm': 'Arquivar este modelo? Ele sai da lista e do seletor de documentos, mas fica guardado e os documentos existentes são preservados.',
 
   // Categories
   'customForms.category.anamnesis': 'Anamnese',
@@ -37,6 +38,22 @@ export const ptBR: Record<string, string> = {
   'customForms.builder.addOption': 'Adicionar opção',
   'customForms.builder.colSpan': 'Largura em colunas',
   'customForms.builder.deleteField': 'Remover campo',
+  'customForms.builder.mapToPerson': 'Preencher com dado da ficha',
+  'customForms.builder.mapNone': 'Não preencher',
+  'customForms.builder.mapHint': 'Ao criar o documento na ficha da pessoa, este campo já vem preenchido com o dado escolhido (editável).',
+  'customForms.preview.editor': 'Editor',
+  'customForms.preview.print': 'Impressão',
+
+  // Person field mappings (auto-fill)
+  'customForms.personField.name': 'Nome',
+  'customForms.personField.documentNumber': 'CPF / Documento',
+  'customForms.personField.email': 'E-mail',
+  'customForms.personField.phone': 'Telefone',
+  'customForms.personField.dateOfBirth': 'Data de Nascimento',
+  'customForms.personField.guardianName': 'Responsável',
+  'customForms.personField.address': 'Endereço',
+  'customForms.personField.city': 'Cidade',
+  'customForms.personField.state': 'Estado',
 
   // Field types
   'customForms.fieldType.title': 'Título',
@@ -62,6 +79,9 @@ export const ptBR: Record<string, string> = {
   'customForms.saveAsDraft': 'Salvar Rascunho',
   'customForms.saveAndComplete': 'Salvar e Finalizar',
   'customForms.deleteDocumentConfirm': 'Excluir este documento?',
+  'customForms.archive': 'Arquivar',
+  'customForms.archiveDocumentConfirm': 'Arquivar este documento? Ele sai da lista ativa mas fica guardado.',
+  'customForms.printPdf': 'Imprimir / PDF',
 
   // Registry
   'registry.form-categories': 'Categorias',

package/src/migrations/003_agent_rpcs.sql

@@ -0,0 +1,174 @@
+-- ============================================================================
+-- plugin-forms 003: server-plane agent write RPC.
+--
+-- public.agent_forms_upsert_template — the assistant BUILDS or EDITS a form
+-- template from any surface or channel (in-app FAB, WhatsApp, MCP). Same
+-- contract as every agent_* RPC (agenda 005, financial 009):
+--   (p_tenant_id, p_actor_user_id, p_payload jsonb) → jsonb
+--   {ok:true, id, record:{...}} | {ok:false, denial:{...}} | {ok:false, error}
+--
+-- The grid layout is computed HERE (col 0, sequential rows, full-width span) so
+-- the model only ever sends {type,label,required?,options?} — never positions.
+--
+-- Payload:
+--   template_id?   uuid  — omit to CREATE, provide to EDIT
+--   name?          text  — required on create
+--   category?      text  — anamnesis|evolution|report|contract|general
+--   description?   text
+--   fields?        [{type,label,required?,placeholder?,options?[]}] — REPLACE all
+--   append_fields? [{...}]                                          — APPEND to existing
+--
+-- GRANT authenticated+service_role — NEVER anon (the broker calls with the pool
+-- service key and injects tenant/actor; in-browser the signed-in user calls it
+-- directly and spine RLS/actor guards bind them to their own tenant).
+-- ============================================================================
+
+CREATE OR REPLACE FUNCTION public.agent_forms_upsert_template(
+  p_tenant_id uuid,
+  p_actor_user_id uuid,
+  p_payload jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_denial jsonb;
+  v_used int;
+  v_template_id uuid;
+  v_is_update boolean;
+  v_name text;
+  v_category text;
+  v_description text;
+  v_existing jsonb;
+  v_input jsonb;
+  v_merged jsonb;
+  v_fields jsonb;
+  v_schema jsonb;
+  v_final_id uuid;
+BEGIN
+  -- ── payload ──────────────────────────────────────────────────────────────
+  BEGIN
+    v_template_id := NULLIF(p_payload->>'template_id','')::uuid;
+  EXCEPTION WHEN OTHERS THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'invalid template_id');
+  END;
+  v_is_update   := v_template_id IS NOT NULL;
+  v_name        := btrim(p_payload->>'name');
+  v_category    := lower(COALESCE(NULLIF(p_payload->>'category',''), 'general'));
+  v_description := left(p_payload->>'description', 1000);
+  IF v_category NOT IN ('anamnesis','evolution','report','contract','general') THEN
+    v_category := 'general';
+  END IF;
+
+  IF NOT v_is_update AND (v_name IS NULL OR v_name = '') THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'name is required to create a form');
+  END IF;
+
+  -- ── authorization: role → plan → form_templates cap ──────────────────────
+  SELECT count(*) INTO v_used FROM plg_forms_templates
+   WHERE tenant_id = p_tenant_id AND is_deleted = false;
+  v_denial := agent_guard(p_tenant_id, p_actor_user_id, 'custom_forms',
+                CASE WHEN v_is_update THEN 'update' ELSE 'create' END,
+                'form_templates', v_used, CASE WHEN v_is_update THEN 0 ELSE 1 END);
+  IF v_denial IS NOT NULL THEN
+    RETURN jsonb_build_object('ok', false, 'denial', v_denial);
+  END IF;
+
+  -- ── current fields (for APPEND / to reject an unknown id) ────────────────
+  IF v_is_update THEN
+    SELECT COALESCE(schema->'fields','[]'::jsonb) INTO v_existing
+    FROM plg_forms_templates
+    WHERE id = v_template_id AND tenant_id = p_tenant_id AND is_deleted = false;
+    IF v_existing IS NULL THEN
+      RETURN jsonb_build_object('ok', false, 'error', 'unknown template for this tenant');
+    END IF;
+  ELSE
+    v_existing := '[]'::jsonb;
+  END IF;
+
+  -- ── normalize the incoming fields to the builder's FormFieldDef shape ────
+  -- (id, type, label, required, placeholder, col, colSpan, options) — row is
+  -- assigned last, across the merged list.
+  WITH src AS (
+    SELECT CASE
+             WHEN p_payload ? 'fields'        THEN COALESCE(p_payload->'fields','[]'::jsonb)
+             WHEN p_payload ? 'append_fields' THEN COALESCE(p_payload->'append_fields','[]'::jsonb)
+             ELSE '[]'::jsonb
+           END AS arr
+  ),
+  norm AS (
+    SELECT f.ord, jsonb_strip_nulls(jsonb_build_object(
+      'id',    COALESCE(NULLIF(f.value->>'id',''), gen_random_uuid()::text),
+      'type',  COALESCE(NULLIF(f.value->>'type',''), 'text'),
+      'label', COALESCE(NULLIF(f.value->>'label',''), 'Campo'),
+      'required', COALESCE((f.value->>'required')::boolean, false),
+      'placeholder', NULLIF(f.value->>'placeholder',''),
+      'col', 0,
+      'colSpan', 12,
+      'options', CASE
+        WHEN jsonb_typeof(f.value->'options') = 'array' AND jsonb_array_length(f.value->'options') > 0
+        THEN (SELECT jsonb_agg(jsonb_build_object(
+                'label', opt,
+                'value', lower(regexp_replace(btrim(opt), '\s+', '_', 'g'))))
+              FROM jsonb_array_elements_text(f.value->'options') opt)
+        ELSE NULL END
+    )) AS field
+    FROM src, jsonb_array_elements(src.arr) WITH ORDINALITY AS f(value, ord)
+  )
+  SELECT COALESCE(jsonb_agg(field ORDER BY ord), '[]'::jsonb) INTO v_input FROM norm;
+
+  -- REPLACE with `fields`; otherwise APPEND onto what's already there.
+  IF p_payload ? 'fields' THEN
+    v_merged := v_input;
+  ELSE
+    v_merged := v_existing || v_input;
+  END IF;
+
+  -- sequential rows across the final list
+  SELECT COALESCE(jsonb_agg(jsonb_set(e.value, '{row}', to_jsonb((e.ord - 1))) ORDER BY e.ord), '[]'::jsonb)
+    INTO v_fields
+  FROM jsonb_array_elements(v_merged) WITH ORDINALITY AS e(value, ord);
+
+  v_schema := jsonb_build_object('layout', jsonb_build_object('columns', 12), 'fields', v_fields);
+
+  -- ── write + audit ────────────────────────────────────────────────────────
+  IF v_is_update THEN
+    UPDATE plg_forms_templates SET
+      name        = COALESCE(NULLIF(v_name,''), name),
+      category    = v_category,
+      description = COALESCE(v_description, description),
+      schema      = v_schema,
+      updated_by  = p_actor_user_id,
+      updated_at  = now()
+    WHERE id = v_template_id AND tenant_id = p_tenant_id AND is_deleted = false
+    RETURNING id INTO v_final_id;
+  ELSE
+    INSERT INTO plg_forms_templates (tenant_id, name, category, description, schema, created_by, updated_by)
+    VALUES (p_tenant_id, v_name, v_category, v_description, v_schema, p_actor_user_id, p_actor_user_id)
+    RETURNING id INTO v_final_id;
+  END IF;
+
+  INSERT INTO audit_logs (tenant_id, user_id, action, entity_type, entity_id, metadata)
+  VALUES (p_tenant_id, p_actor_user_id,
+          CASE WHEN v_is_update THEN 'agent.updateFormTemplate' ELSE 'agent.createFormTemplate' END,
+          'form_template', v_final_id::text,
+          jsonb_build_object('payload', p_payload));
+
+  RETURN jsonb_build_object(
+    'ok', true,
+    'id', v_final_id,
+    'record', jsonb_build_object(
+      'ref', jsonb_build_object('id', v_final_id, 'resource', 'plg_forms_templates',
+                                'archetype', 'custom_forms:template'),
+      'name', COALESCE(NULLIF(v_name,''), (SELECT name FROM plg_forms_templates WHERE id = v_final_id)),
+      'category', v_category,
+      'fieldCount', jsonb_array_length(v_fields)
+    )
+  );
+END;
+$$;
+
+REVOKE ALL ON FUNCTION public.agent_forms_upsert_template(uuid, uuid, jsonb) FROM public;
+REVOKE EXECUTE ON FUNCTION public.agent_forms_upsert_template(uuid, uuid, jsonb) FROM anon;
+GRANT EXECUTE ON FUNCTION public.agent_forms_upsert_template(uuid, uuid, jsonb)
+  TO authenticated, service_role;

package/src/migrations/index.ts

@@ -1,4 +1,4 @@
-// AUTO-GENERATED from 000_plg_rename.sql, 001_frm_base.sql, 002_document_archetype.sql — regenerate with scripts/embed-migrations.mjs
+// AUTO-GENERATED from 000_plg_rename.sql, 001_frm_base.sql, 002_document_archetype.sql, 003_agent_rpcs.sql — regenerate with scripts/embed-migrations.mjs
 // SQL files are the source of truth; this inline copy lets the manifest declare
 // migrations as data. Do not edit by hand — run the embed script instead.
 
@@ -426,8 +426,185 @@ LEFT JOIN public.plg_forms_templates t ON t.id = f.template_id
 LEFT JOIN public.people p ON p.id = d.person_id;
 `
 
+export const MIGRATION_003_AGENT_RPCS = `-- ============================================================================
+-- plugin-forms 003: server-plane agent write RPC.
+--
+-- public.agent_forms_upsert_template — the assistant BUILDS or EDITS a form
+-- template from any surface or channel (in-app FAB, WhatsApp, MCP). Same
+-- contract as every agent_* RPC (agenda 005, financial 009):
+--   (p_tenant_id, p_actor_user_id, p_payload jsonb) → jsonb
+--   {ok:true, id, record:{...}} | {ok:false, denial:{...}} | {ok:false, error}
+--
+-- The grid layout is computed HERE (col 0, sequential rows, full-width span) so
+-- the model only ever sends {type,label,required?,options?} — never positions.
+--
+-- Payload:
+--   template_id?   uuid  — omit to CREATE, provide to EDIT
+--   name?          text  — required on create
+--   category?      text  — anamnesis|evolution|report|contract|general
+--   description?   text
+--   fields?        [{type,label,required?,placeholder?,options?[]}] — REPLACE all
+--   append_fields? [{...}]                                          — APPEND to existing
+--
+-- GRANT authenticated+service_role — NEVER anon (the broker calls with the pool
+-- service key and injects tenant/actor; in-browser the signed-in user calls it
+-- directly and spine RLS/actor guards bind them to their own tenant).
+-- ============================================================================
+
+CREATE OR REPLACE FUNCTION public.agent_forms_upsert_template(
+  p_tenant_id uuid,
+  p_actor_user_id uuid,
+  p_payload jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER
+SET search_path = public
+AS $$
+DECLARE
+  v_denial jsonb;
+  v_used int;
+  v_template_id uuid;
+  v_is_update boolean;
+  v_name text;
+  v_category text;
+  v_description text;
+  v_existing jsonb;
+  v_input jsonb;
+  v_merged jsonb;
+  v_fields jsonb;
+  v_schema jsonb;
+  v_final_id uuid;
+BEGIN
+  -- ── payload ──────────────────────────────────────────────────────────────
+  BEGIN
+    v_template_id := NULLIF(p_payload->>'template_id','')::uuid;
+  EXCEPTION WHEN OTHERS THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'invalid template_id');
+  END;
+  v_is_update   := v_template_id IS NOT NULL;
+  v_name        := btrim(p_payload->>'name');
+  v_category    := lower(COALESCE(NULLIF(p_payload->>'category',''), 'general'));
+  v_description := left(p_payload->>'description', 1000);
+  IF v_category NOT IN ('anamnesis','evolution','report','contract','general') THEN
+    v_category := 'general';
+  END IF;
+
+  IF NOT v_is_update AND (v_name IS NULL OR v_name = '') THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'name is required to create a form');
+  END IF;
+
+  -- ── authorization: role → plan → form_templates cap ──────────────────────
+  SELECT count(*) INTO v_used FROM plg_forms_templates
+   WHERE tenant_id = p_tenant_id AND is_deleted = false;
+  v_denial := agent_guard(p_tenant_id, p_actor_user_id, 'custom_forms',
+                CASE WHEN v_is_update THEN 'update' ELSE 'create' END,
+                'form_templates', v_used, CASE WHEN v_is_update THEN 0 ELSE 1 END);
+  IF v_denial IS NOT NULL THEN
+    RETURN jsonb_build_object('ok', false, 'denial', v_denial);
+  END IF;
+
+  -- ── current fields (for APPEND / to reject an unknown id) ────────────────
+  IF v_is_update THEN
+    SELECT COALESCE(schema->'fields','[]'::jsonb) INTO v_existing
+    FROM plg_forms_templates
+    WHERE id = v_template_id AND tenant_id = p_tenant_id AND is_deleted = false;
+    IF v_existing IS NULL THEN
+      RETURN jsonb_build_object('ok', false, 'error', 'unknown template for this tenant');
+    END IF;
+  ELSE
+    v_existing := '[]'::jsonb;
+  END IF;
+
+  -- ── normalize the incoming fields to the builder's FormFieldDef shape ────
+  -- (id, type, label, required, placeholder, col, colSpan, options) — row is
+  -- assigned last, across the merged list.
+  WITH src AS (
+    SELECT CASE
+             WHEN p_payload ? 'fields'        THEN COALESCE(p_payload->'fields','[]'::jsonb)
+             WHEN p_payload ? 'append_fields' THEN COALESCE(p_payload->'append_fields','[]'::jsonb)
+             ELSE '[]'::jsonb
+           END AS arr
+  ),
+  norm AS (
+    SELECT f.ord, jsonb_strip_nulls(jsonb_build_object(
+      'id',    COALESCE(NULLIF(f.value->>'id',''), gen_random_uuid()::text),
+      'type',  COALESCE(NULLIF(f.value->>'type',''), 'text'),
+      'label', COALESCE(NULLIF(f.value->>'label',''), 'Campo'),
+      'required', COALESCE((f.value->>'required')::boolean, false),
+      'placeholder', NULLIF(f.value->>'placeholder',''),
+      'col', 0,
+      'colSpan', 12,
+      'options', CASE
+        WHEN jsonb_typeof(f.value->'options') = 'array' AND jsonb_array_length(f.value->'options') > 0
+        THEN (SELECT jsonb_agg(jsonb_build_object(
+                'label', opt,
+                'value', lower(regexp_replace(btrim(opt), '\\s+', '_', 'g'))))
+              FROM jsonb_array_elements_text(f.value->'options') opt)
+        ELSE NULL END
+    )) AS field
+    FROM src, jsonb_array_elements(src.arr) WITH ORDINALITY AS f(value, ord)
+  )
+  SELECT COALESCE(jsonb_agg(field ORDER BY ord), '[]'::jsonb) INTO v_input FROM norm;
+
+  -- REPLACE with \`fields\`; otherwise APPEND onto what's already there.
+  IF p_payload ? 'fields' THEN
+    v_merged := v_input;
+  ELSE
+    v_merged := v_existing || v_input;
+  END IF;
+
+  -- sequential rows across the final list
+  SELECT COALESCE(jsonb_agg(jsonb_set(e.value, '{row}', to_jsonb((e.ord - 1))) ORDER BY e.ord), '[]'::jsonb)
+    INTO v_fields
+  FROM jsonb_array_elements(v_merged) WITH ORDINALITY AS e(value, ord);
+
+  v_schema := jsonb_build_object('layout', jsonb_build_object('columns', 12), 'fields', v_fields);
+
+  -- ── write + audit ────────────────────────────────────────────────────────
+  IF v_is_update THEN
+    UPDATE plg_forms_templates SET
+      name        = COALESCE(NULLIF(v_name,''), name),
+      category    = v_category,
+      description = COALESCE(v_description, description),
+      schema      = v_schema,
+      updated_by  = p_actor_user_id,
+      updated_at  = now()
+    WHERE id = v_template_id AND tenant_id = p_tenant_id AND is_deleted = false
+    RETURNING id INTO v_final_id;
+  ELSE
+    INSERT INTO plg_forms_templates (tenant_id, name, category, description, schema, created_by, updated_by)
+    VALUES (p_tenant_id, v_name, v_category, v_description, v_schema, p_actor_user_id, p_actor_user_id)
+    RETURNING id INTO v_final_id;
+  END IF;
+
+  INSERT INTO audit_logs (tenant_id, user_id, action, entity_type, entity_id, metadata)
+  VALUES (p_tenant_id, p_actor_user_id,
+          CASE WHEN v_is_update THEN 'agent.updateFormTemplate' ELSE 'agent.createFormTemplate' END,
+          'form_template', v_final_id::text,
+          jsonb_build_object('payload', p_payload));
+
+  RETURN jsonb_build_object(
+    'ok', true,
+    'id', v_final_id,
+    'record', jsonb_build_object(
+      'ref', jsonb_build_object('id', v_final_id, 'resource', 'plg_forms_templates',
+                                'archetype', 'custom_forms:template'),
+      'name', COALESCE(NULLIF(v_name,''), (SELECT name FROM plg_forms_templates WHERE id = v_final_id)),
+      'category', v_category,
+      'fieldCount', jsonb_array_length(v_fields)
+    )
+  );
+END;
+$$;
+
+REVOKE ALL ON FUNCTION public.agent_forms_upsert_template(uuid, uuid, jsonb) FROM public;
+REVOKE EXECUTE ON FUNCTION public.agent_forms_upsert_template(uuid, uuid, jsonb) FROM anon;
+GRANT EXECUTE ON FUNCTION public.agent_forms_upsert_template(uuid, uuid, jsonb)
+  TO authenticated, service_role;
+`
+
 export const MIGRATIONS: Array<{ id: string; sql: string }> = [
   { id: "000_plg_rename", sql: MIGRATION_000_PLG_RENAME },
   { id: "001_frm_base", sql: MIGRATION_001_FRM_BASE },
   { id: "002_document_archetype", sql: MIGRATION_002_DOCUMENT_ARCHETYPE },
+  { id: "003_agent_rpcs", sql: MIGRATION_003_AGENT_RPCS },
 ]

package/src/types.ts

@@ -36,6 +36,20 @@ export interface FormFieldDef {
   rowSpan?: number
   /** Options for select / radio / tags */
   options?: Array<{ label: string; value: string }>
+  /**
+   * Optional binding to a field on the person/contact record. When set, a new
+   * document created from a person's profile is pre-filled with that person's
+   * value (e.g. `map: 'documentNumber'` fills the field with the person's CPF).
+   * Matched tolerantly against camelCase/snake_case record keys. Only prefills
+   * empty fields; the user can still edit the value. See `lib/person-fields`.
+   */
+  map?: string
+  /**
+   * Static default value applied to a NEW document when the field has no mapped
+   * person value and no existing value — e.g. pre-written contract clause text
+   * on a richtext field. Editable by the user.
+   */
+  defaultValue?: unknown
   /** Type-specific configuration */
   config?: Record<string, unknown>
 }

package/src/views/CustomFormsSettingsTab.tsx

@@ -11,35 +11,42 @@ interface CustomFormsSettingsTabProps {
   store: CustomFormsStore
 }
 
+const ROUTE_BASE = '/settings/custom_forms'
+
+/** Read the currently-open template id from the URL hash (the source of truth,
+ *  so deep links and browser back/forward work like any CRUD detail page). */
+function readBuilderIdFromHash(): string | null {
+  const hash = window.location.hash.slice(1) || '/'
+  const m = hash.match(/\/settings\/custom_forms\/templates\/([^/]+)/)
+  if (!m) return null
+  return m[1] === 'new' ? '__new__' : m[1]
+}
+
 export function CustomFormsSettingsTab({ config, provider, store }: CustomFormsSettingsTabProps) {
-  const [builderTemplateId, setBuilderTemplateId] = useState<string | null>(null)
+  // URL is the source of truth — opening/closing a template updates the hash,
+  // so the record id shows in the URL just like opening a CRUD record.
+  const [builderTemplateId, setBuilderTemplateId] = useState<string | null>(readBuilderIdFromHash)
 
   const handleNew = useCallback(() => {
-    setBuilderTemplateId('__new__')
+    window.location.hash = `#${ROUTE_BASE}/templates/new`
   }, [])
 
   const handleEdit = useCallback((template: FormTemplate) => {
-    setBuilderTemplateId(template.id)
+    window.location.hash = `#${ROUTE_BASE}/templates/${template.id}`
   }, [])
 
   const handleBackFromBuilder = useCallback(() => {
-    setBuilderTemplateId(null)
-    // Re-fetch templates to reflect any saves
+    // Return to the list route and re-fetch templates to reflect any saves.
+    window.location.hash = `#${ROUTE_BASE}/forms`
     store.getState().fetchTemplates()
   }, [store])
 
-  // Sync from hash on mount
+  // Keep local state in sync with the URL (deep links, back/forward, and our
+  // own hash writes above all flow through here).
   React.useEffect(() => {
-    function checkHash() {
-      const hash = window.location.hash.slice(1) || '/'
-      const builderMatch = hash.match(/\/settings\/custom_forms\/templates\/(.+)/)
-      if (builderMatch && builderMatch[1] !== 'new') {
-        setBuilderTemplateId(builderMatch[1])
-      } else if (builderMatch && builderMatch[1] === 'new') {
-        setBuilderTemplateId('__new__')
-      }
-    }
-    checkHash()
+    const sync = () => setBuilderTemplateId(readBuilderIdFromHash())
+    window.addEventListener('hashchange', sync)
+    return () => window.removeEventListener('hashchange', sync)
   }, [])
 
   return builderTemplateId ? (

package/src/views/TemplateListView.tsx

@@ -1,9 +1,10 @@
 import React, { useEffect, useState, useCallback } from 'react'
-import { Plus, Pencil, Trash2, FileText, Search } from 'lucide-react'
+import { Plus, Pencil, Archive, FileText, Search } from 'lucide-react'
 import { Button } from '@fayz-ai/ui'
 import { Card, CardContent } from '@fayz-ai/ui'
 import { Badge } from '@fayz-ai/ui'
 import { Input } from '@fayz-ai/ui'
+import { PermissionGate } from '@fayz-ai/saas'
 import { useTranslation } from '@fayz-ai/core'
 import { getFormsTenantId } from '../lib/tenant'
 import type { CustomFormsStore } from '../store'
@@ -44,11 +45,16 @@ export function TemplateListView({ store, config, onEdit, onNew }: TemplateListV
     return () => clearTimeout(timer)
   }, [orgId, search])
 
-  const handleDelete = useCallback(async (template: FormTemplate) => {
-    if (!window.confirm(t('customForms.deleteTemplateConfirm'))) return
-    await store.getState().deleteTemplate(template.id)
+  // Archive, not delete: deactivate the template so it drops out of the list
+  // and the "add document" picker, without destroying it or its documents.
+  const handleArchive = useCallback(async (template: FormTemplate) => {
+    if (!window.confirm(t('customForms.archiveTemplateConfirm'))) return
+    await store.getState().updateTemplate(template.id, { isActive: false })
   }, [store, t])
 
+  // Archived (isActive=false) templates stay in the store but leave the view.
+  const visibleTemplates = templates.filter((tpl) => tpl.isActive !== false)
+
   const categoryLabel = (cat: TemplateCategory) =>
     t(`customForms.category.${cat}`)
 
@@ -65,14 +71,16 @@ export function TemplateListView({ store, config, onEdit, onNew }: TemplateListV
             className="h-9 pl-8 text-sm"
           />
         </div>
-        <Button onClick={onNew} size="sm" className="h-9">
-          <Plus className="h-3.5 w-3.5 mr-1.5" />
-          {t('customForms.newTemplate')}
-        </Button>
+        <PermissionGate feature="custom_forms" action="create">
+          <Button onClick={onNew} size="sm" className="h-9">
+            <Plus className="h-3.5 w-3.5 mr-1.5" />
+            {t('customForms.newTemplate')}
+          </Button>
+        </PermissionGate>
       </div>
 
       {/* Empty state */}
-      {!loading && templates.length === 0 && (
+      {!loading && visibleTemplates.length === 0 && (
         <Card>
           <CardContent className="flex flex-col items-center justify-center py-16 text-center">
             <div className="flex h-12 w-12 items-center justify-center rounded-full bg-muted mb-4">
@@ -82,18 +90,20 @@ export function TemplateListView({ store, config, onEdit, onNew }: TemplateListV
             <p className="text-sm text-muted-foreground mt-1 max-w-sm">
               {t('customForms.noTemplatesDescription')}
             </p>
-            <Button onClick={onNew} size="sm" className="mt-4">
-              <Plus className="h-3.5 w-3.5 mr-1.5" />
-              {t('customForms.newTemplate')}
-            </Button>
+            <PermissionGate feature="custom_forms" action="create">
+              <Button onClick={onNew} size="sm" className="mt-4">
+                <Plus className="h-3.5 w-3.5 mr-1.5" />
+                {t('customForms.newTemplate')}
+              </Button>
+            </PermissionGate>
           </CardContent>
         </Card>
       )}
 
       {/* Template list */}
-      {templates.length > 0 && (
+      {visibleTemplates.length > 0 && (
         <div className="grid gap-3 sm:grid-cols-2 lg:grid-cols-3">
-          {templates.map((template) => (
+          {visibleTemplates.map((template) => (
             <Card
               key={template.id}
               className="group cursor-pointer hover:shadow-md transition-shadow"
@@ -117,10 +127,11 @@ export function TemplateListView({ store, config, onEdit, onNew }: TemplateListV
                       <Pencil className="h-3.5 w-3.5 text-muted-foreground" />
                     </button>
                     <button
-                      onClick={(e) => { e.stopPropagation(); handleDelete(template) }}
-                      className="p-1.5 rounded-md hover:bg-destructive/10"
+                      onClick={(e) => { e.stopPropagation(); handleArchive(template) }}
+                      className="p-1.5 rounded-md hover:bg-muted"
+                      title={t('customForms.archive')}
                     >
-                      <Trash2 className="h-3.5 w-3.5 text-destructive" />
+                      <Archive className="h-3.5 w-3.5 text-muted-foreground" />
                     </button>
                   </div>
                 </div>