@flamingo-stack/openframe-frontend-core 0.0.671 → 0.0.672-snapshot.20260928034232

package/dist/utils/form-rescue.cjs

@@ -0,0 +1,123 @@
+'use strict';
+
+// src/utils/form-rescue.ts
+var FORM_RESCUE_FORM_IDS = [
+  "contact",
+  "case_study_pitch",
+  "data_room_request",
+  "trust_center_request",
+  "tmcg_join",
+  "meeting_booking",
+  "waitlist"
+];
+function isFormRescueFormId(value) {
+  return typeof value === "string" && FORM_RESCUE_FORM_IDS.includes(value);
+}
+var FORM_RESCUE_VALUE_FIELDS = [
+  "email",
+  "name",
+  "firstName",
+  "lastName",
+  "company",
+  "jobtitle",
+  "companySize",
+  "linkedin_url"
+];
+var EXCLUDED_FIELD_PATTERN = /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;
+function isExcludedRescueField(name) {
+  return EXCLUDED_FIELD_PATTERN.test(name);
+}
+var FORM_RESCUE_MAX_VALUE_CHARS = 200;
+var FORM_RESCUE_DEBOUNCE_MS = 1500;
+var FORM_RESCUE_MAX_FIELDS = 40;
+var FORM_RESCUE_ATTEMPT_FIELD = "form_attempt_id";
+var FORM_RESCUE_RESUME_FIELD = "form_resume_token";
+var FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD];
+var FORM_RESCUE_RESUME_PARAM = "resume";
+var FORM_DRAFT_STATUSES = ["started", "rescuable", "rescued", "submitted"];
+var FORM_RESCUE_SKIP_REASONS = {
+  finishedElsewhere: "finished_elsewhere",
+  alreadyRescued: "already_rescued",
+  internal: "internal_email"
+};
+var EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/;
+function isRescueEmail(value) {
+  return typeof value === "string" && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());
+}
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isFormAttemptId(value) {
+  return typeof value === "string" && UUID_PATTERN.test(value);
+}
+function isFilled(value) {
+  if (value == null) return false;
+  if (typeof value === "string") return value.trim().length > 0;
+  if (typeof value === "boolean") return value;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === "object") return Object.values(value).some(isFilled);
+  return true;
+}
+function sanitizeRescueValues(values) {
+  const out = {};
+  if (!values || typeof values !== "object") return out;
+  for (const key of FORM_RESCUE_VALUE_FIELDS) {
+    if (isExcludedRescueField(key)) continue;
+    const raw = values[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);
+    if (trimmed) out[key] = trimmed;
+  }
+  return out;
+}
+function filledRescueFields(values, fieldNames) {
+  return fieldNames.filter((name) => !isExcludedRescueField(name) && isFilled(values[name])).slice(0, FORM_RESCUE_MAX_FIELDS);
+}
+function rescueCompletionPct(filledCount, totalCount) {
+  if (totalCount <= 0) return 0;
+  return Math.max(0, Math.min(100, Math.round(filledCount / totalCount * 100)));
+}
+function sanitizeRescueFieldName(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;
+}
+var FORM_RESCUE_EVENTS = {
+  started: "form_started",
+  progress: "form_progress",
+  leadCaptured: "form_lead_captured",
+  abandoned: "form_abandoned",
+  submitted: "form_submitted",
+  rescued: "form_rescued",
+  resumed: "form_resumed"
+};
+function captureFormRescueEvent(event, properties) {
+  try {
+    if (typeof window === "undefined") return;
+    const ph = window.posthog;
+    if (typeof ph?.capture === "function") ph.capture(event, properties);
+  } catch {
+  }
+}
+
+exports.FORM_DRAFT_STATUSES = FORM_DRAFT_STATUSES;
+exports.FORM_RESCUE_ATTEMPT_FIELD = FORM_RESCUE_ATTEMPT_FIELD;
+exports.FORM_RESCUE_DEBOUNCE_MS = FORM_RESCUE_DEBOUNCE_MS;
+exports.FORM_RESCUE_EVENTS = FORM_RESCUE_EVENTS;
+exports.FORM_RESCUE_FORM_IDS = FORM_RESCUE_FORM_IDS;
+exports.FORM_RESCUE_MAX_FIELDS = FORM_RESCUE_MAX_FIELDS;
+exports.FORM_RESCUE_MAX_VALUE_CHARS = FORM_RESCUE_MAX_VALUE_CHARS;
+exports.FORM_RESCUE_RESUME_FIELD = FORM_RESCUE_RESUME_FIELD;
+exports.FORM_RESCUE_RESUME_PARAM = FORM_RESCUE_RESUME_PARAM;
+exports.FORM_RESCUE_SKIP_REASONS = FORM_RESCUE_SKIP_REASONS;
+exports.FORM_RESCUE_SUBMIT_KEYS = FORM_RESCUE_SUBMIT_KEYS;
+exports.FORM_RESCUE_VALUE_FIELDS = FORM_RESCUE_VALUE_FIELDS;
+exports.captureFormRescueEvent = captureFormRescueEvent;
+exports.filledRescueFields = filledRescueFields;
+exports.isExcludedRescueField = isExcludedRescueField;
+exports.isFormAttemptId = isFormAttemptId;
+exports.isFormRescueFormId = isFormRescueFormId;
+exports.isRescueEmail = isRescueEmail;
+exports.rescueCompletionPct = rescueCompletionPct;
+exports.sanitizeRescueFieldName = sanitizeRescueFieldName;
+exports.sanitizeRescueValues = sanitizeRescueValues;
+//# sourceMappingURL=form-rescue.cjs.map
+//# sourceMappingURL=form-rescue.cjs.map

package/dist/utils/form-rescue.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/form-rescue.ts"],"names":[],"mappings":";;;AAsBO,IAAM,oBAAA,GAAuB;AAAA,EAClC,SAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,sBAAA;AAAA,EACA,WAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AAIO,SAAS,mBAAmB,KAAA,EAA2C;AAC5E,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAa,oBAAA,CAA2C,SAAS,KAAK,CAAA;AAChG;AAQO,IAAM,wBAAA,GAA2B;AAAA,EACtC,OAAA;AAAA,EACA,MAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF;AAGA,IAAM,sBAAA,GACJ,6FAAA;AAEK,SAAS,sBAAsB,IAAA,EAAuB;AAC3D,EAAA,OAAO,sBAAA,CAAuB,KAAK,IAAI,CAAA;AACzC;AAGO,IAAM,2BAAA,GAA8B;AAEpC,IAAM,uBAAA,GAA0B;AAEhC,IAAM,sBAAA,GAAyB;AAG/B,IAAM,yBAAA,GAA4B;AAClC,IAAM,wBAAA,GAA2B;AAEjC,IAAM,uBAAA,GAA0B,CAAC,yBAAA,EAA2B,wBAAwB;AAGpF,IAAM,wBAAA,GAA2B;AAGjC,IAAM,mBAAA,GAAsB,CAAC,SAAA,EAAW,WAAA,EAAa,WAAW,WAAW;AAI3E,IAAM,wBAAA,GAA2B;AAAA,EACtC,iBAAA,EAAmB,oBAAA;AAAA,EACnB,cAAA,EAAgB,iBAAA;AAAA,EAChB,QAAA,EAAU;AACZ;AAIA,IAAM,aAAA,GAAgB,kDAAA;AAEf,SAAS,cAAc,KAAA,EAAiC;AAC7D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,IAAU,+BAA+B,aAAA,CAAc,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAAA;AACpH;AAEA,IAAM,YAAA,GAAe,iEAAA;AAEd,SAAS,gBAAgB,KAAA,EAAiC;AAC/D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,YAAA,CAAa,KAAK,KAAK,CAAA;AAC7D;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,SAAiB,KAAA,CAAM,IAAA,GAAO,MAAA,GAAS,CAAA;AAC5D,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,KAAA;AACvC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,GAAS,CAAA;AAChD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,OAAO,MAAA,CAAO,KAAgC,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA;AACnG,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,qBAAqB,MAAA,EAA4E;AAC/G,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,GAAA;AAClD,EAAA,KAAA,MAAW,OAAO,wBAAA,EAA0B;AAC1C,IAAA,IAAI,qBAAA,CAAsB,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,GAAA,GAAM,OAAO,GAAG,CAAA;AACtB,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,UAAU,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,2BAA2B,CAAA;AAC/D,IAAA,IAAI,OAAA,EAAS,GAAA,CAAI,GAAG,CAAA,GAAI,OAAA;AAAA,EAC1B;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,kBAAA,CAAmB,QAAiC,UAAA,EAAyC;AAC3G,EAAA,OAAO,UAAA,CACJ,MAAA,CAAO,CAAA,IAAA,KAAQ,CAAC,sBAAsB,IAAI,CAAA,IAAK,QAAA,CAAS,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA,CACrE,KAAA,CAAM,GAAG,sBAAsB,CAAA;AACpC;AAEO,SAAS,mBAAA,CAAoB,aAAqB,UAAA,EAA4B;AACnF,EAAA,IAAI,UAAA,IAAc,GAAG,OAAO,CAAA;AAC5B,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,KAAA,CAAO,WAAA,GAAc,UAAA,GAAc,GAAG,CAAC,CAAC,CAAA;AAChF;AAGO,SAAS,wBAAwB,KAAA,EAA+B;AACrE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,OAAO,wBAAA,CAAyB,KAAK,OAAO,CAAA,IAAK,CAAC,qBAAA,CAAsB,OAAO,IAAI,OAAA,GAAU,IAAA;AAC/F;AA0BO,IAAM,kBAAA,GAAqB;AAAA,EAChC,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,eAAA;AAAA,EACV,YAAA,EAAc,oBAAA;AAAA,EACd,SAAA,EAAW,gBAAA;AAAA,EACX,SAAA,EAAW,gBAAA;AAAA,EACX,OAAA,EAAS,cAAA;AAAA,EACT,OAAA,EAAS;AACX;AAQO,SAAS,sBAAA,CAAuB,OAAe,UAAA,EAAkD;AACtG,EAAA,IAAI;AACF,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACnC,IAAA,MAAM,KAAM,MAAA,CAAiF,OAAA;AAC7F,IAAA,IAAI,OAAO,EAAA,EAAI,OAAA,KAAY,YAAY,EAAA,CAAG,OAAA,CAAQ,OAAO,UAAU,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF","file":"form-rescue.cjs","sourcesContent":["/**\n * Form rescue — the shared rules for saving a half-filled public form so the\n * team can follow up with a visitor who left before submitting.\n *\n * Pure and server-safe: the browser hook (`hooks/use-form-rescue`) and the\n * host's draft endpoint import the SAME allowlist, exclusions, caps and\n * completion math, so the server re-applies exactly the filter the client ran\n * and a rename here reaches both sides at once. Also exported through the\n * granular subpath `./utils/form-rescue` for server-only consumers.\n *\n * What a draft may carry:\n *   - values of ALLOWLISTED contact fields only (`FORM_RESCUE_VALUE_FIELDS`),\n *     trimmed and capped at `FORM_RESCUE_MAX_VALUE_CHARS`;\n *   - for every other field, only whether it is filled (never its value);\n *   - nothing whose name looks like a credential or payment field\n *     (`isExcludedRescueField`), whatever the allowlist says.\n *\n * Field values go to the host only, never to analytics: the PostHog events\n * (`captureFormRescueEvent`) carry ids, field names and percentages.\n */\n\n/** Every public form that can be rescued. The host validates `form_id` against this list. */\nexport const FORM_RESCUE_FORM_IDS = [\n  'contact',\n  'case_study_pitch',\n  'data_room_request',\n  'trust_center_request',\n  'tmcg_join',\n  'meeting_booking',\n  'waitlist',\n] as const;\n\nexport type FormRescueFormId = (typeof FORM_RESCUE_FORM_IDS)[number];\n\nexport function isFormRescueFormId(value: unknown): value is FormRescueFormId {\n  return typeof value === 'string' && (FORM_RESCUE_FORM_IDS as readonly string[]).includes(value);\n}\n\n/**\n * Fields whose VALUES a draft keeps: who the visitor is and where they work.\n * Covers both naming schemes in use (the contact form's `name` / `companySize`,\n * the meeting booking's HubSpot `firstName` / `company` / `jobtitle`).\n * Free text (`message`) and phone numbers are reported as filled only.\n */\nexport const FORM_RESCUE_VALUE_FIELDS = [\n  'email',\n  'name',\n  'firstName',\n  'lastName',\n  'company',\n  'jobtitle',\n  'companySize',\n  'linkedin_url',\n] as const;\n\n/** Never send or store these, whatever the allowlist says. */\nconst EXCLUDED_FIELD_PATTERN =\n  /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;\n\nexport function isExcludedRescueField(name: string): boolean {\n  return EXCLUDED_FIELD_PATTERN.test(name);\n}\n\n/** Longest value a draft keeps per field. */\nexport const FORM_RESCUE_MAX_VALUE_CHARS = 200;\n/** Save this long after the visitor stops typing. */\nexport const FORM_RESCUE_DEBOUNCE_MS = 1500;\n/** Most fields a draft reports (filled names), a bound on the payload. */\nexport const FORM_RESCUE_MAX_FIELDS = 40;\n\n/** Body keys a form's SUBMIT carries so the host can close the matching draft. */\nexport const FORM_RESCUE_ATTEMPT_FIELD = 'form_attempt_id';\nexport const FORM_RESCUE_RESUME_FIELD = 'form_resume_token';\n/** Every rescue key that rides in a submit body. Hosts forwarding a payload upstream strip by THIS array. */\nexport const FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD] as const;\n\n/** Query parameter a resume link carries. */\nexport const FORM_RESCUE_RESUME_PARAM = 'resume';\n\n/** Draft lifecycle. `submitted` is final; `rescued` can still become `submitted`. */\nexport const FORM_DRAFT_STATUSES = ['started', 'rescuable', 'rescued', 'submitted'] as const;\nexport type FormDraftStatus = (typeof FORM_DRAFT_STATUSES)[number];\n\n/** Why a due draft was settled WITHOUT alerting the team (stored on the draft). */\nexport const FORM_RESCUE_SKIP_REASONS = {\n  finishedElsewhere: 'finished_elsewhere',\n  alreadyRescued: 'already_rescued',\n  internal: 'internal_email',\n} as const;\nexport type FormRescueSkipReason = (typeof FORM_RESCUE_SKIP_REASONS)[keyof typeof FORM_RESCUE_SKIP_REASONS];\n\n/** Same shape the host's `contact_submissions.email` check accepts. */\nconst EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$/;\n\nexport function isRescueEmail(value: unknown): value is string {\n  return typeof value === 'string' && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());\n}\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport function isFormAttemptId(value: unknown): value is string {\n  return typeof value === 'string' && UUID_PATTERN.test(value);\n}\n\nfunction isFilled(value: unknown): boolean {\n  if (value == null) return false;\n  if (typeof value === 'string') return value.trim().length > 0;\n  if (typeof value === 'boolean') return value;\n  if (Array.isArray(value)) return value.length > 0;\n  if (typeof value === 'object') return Object.values(value as Record<string, unknown>).some(isFilled);\n  return true;\n}\n\n/**\n * Keep only allowlisted, non-excluded string values, trimmed and capped.\n * The ONE filter, run by the browser before sending and by the host before storing.\n */\nexport function sanitizeRescueValues(values: Record<string, unknown> | null | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  if (!values || typeof values !== 'object') return out;\n  for (const key of FORM_RESCUE_VALUE_FIELDS) {\n    if (isExcludedRescueField(key)) continue;\n    const raw = values[key];\n    if (typeof raw !== 'string') continue;\n    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);\n    if (trimmed) out[key] = trimmed;\n  }\n  return out;\n}\n\n/** Names of the given fields that hold something, credentials never included. */\nexport function filledRescueFields(values: Record<string, unknown>, fieldNames: readonly string[]): string[] {\n  return fieldNames\n    .filter(name => !isExcludedRescueField(name) && isFilled(values[name]))\n    .slice(0, FORM_RESCUE_MAX_FIELDS);\n}\n\nexport function rescueCompletionPct(filledCount: number, totalCount: number): number {\n  if (totalCount <= 0) return 0;\n  return Math.max(0, Math.min(100, Math.round((filledCount / totalCount) * 100)));\n}\n\n/** A field NAME the host stores (`last_field`, `fields_filled`); bounded, printable. */\nexport function sanitizeRescueFieldName(value: unknown): string | null {\n  if (typeof value !== 'string') return null;\n  const trimmed = value.trim();\n  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;\n}\n\n/** A form's progress at one moment: allowlisted values, filled field names, position. */\nexport interface FormDraftProgress {\n  values: Record<string, string>;\n  fields_filled: string[];\n  last_field: string | null;\n  completion_pct: number;\n}\n\n/** What the browser sends on every save (`POST <formDraftsUrl>`), beside the humanity signals. */\nexport interface FormDraftSaveRequest extends FormDraftProgress {\n  /** The attempt's idempotency key: every save of one attempt updates one draft. */\n  attempt_id: string;\n  form_id: FormRescueFormId;\n  source_path: string;\n  utm?: Partial<Record<'source' | 'medium' | 'campaign' | 'content' | 'term', string>>;\n}\n\n/** What the host answers a resume link with: the allowlisted values, nothing internal. */\nexport interface FormDraftResumeResponse {\n  form_id: FormRescueFormId;\n  values: Record<string, string>;\n}\n\n/** The PostHog events this feature emits. Properties are ids, names and numbers, never values. */\nexport const FORM_RESCUE_EVENTS = {\n  started: 'form_started',\n  progress: 'form_progress',\n  leadCaptured: 'form_lead_captured',\n  abandoned: 'form_abandoned',\n  submitted: 'form_submitted',\n  rescued: 'form_rescued',\n  resumed: 'form_resumed',\n} as const;\n\ntype AnalyticsValue = string | number | boolean | string[] | null;\n\n/**\n * Send one form event to PostHog when the page loaded it (GTM exposes\n * `window.posthog`); a no-op otherwise. Never throws.\n */\nexport function captureFormRescueEvent(event: string, properties: Record<string, AnalyticsValue>): void {\n  try {\n    if (typeof window === 'undefined') return;\n    const ph = (window as unknown as { posthog?: { capture?: (e: string, p: object) => void } }).posthog;\n    if (typeof ph?.capture === 'function') ph.capture(event, properties);\n  } catch {\n    // Analytics never breaks a form.\n  }\n}\n"]}

package/dist/utils/form-rescue.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Form rescue — the shared rules for saving a half-filled public form so the
+ * team can follow up with a visitor who left before submitting.
+ *
+ * Pure and server-safe: the browser hook (`hooks/use-form-rescue`) and the
+ * host's draft endpoint import the SAME allowlist, exclusions, caps and
+ * completion math, so the server re-applies exactly the filter the client ran
+ * and a rename here reaches both sides at once. Also exported through the
+ * granular subpath `./utils/form-rescue` for server-only consumers.
+ *
+ * What a draft may carry:
+ *   - values of ALLOWLISTED contact fields only (`FORM_RESCUE_VALUE_FIELDS`),
+ *     trimmed and capped at `FORM_RESCUE_MAX_VALUE_CHARS`;
+ *   - for every other field, only whether it is filled (never its value);
+ *   - nothing whose name looks like a credential or payment field
+ *     (`isExcludedRescueField`), whatever the allowlist says.
+ *
+ * Field values go to the host only, never to analytics: the PostHog events
+ * (`captureFormRescueEvent`) carry ids, field names and percentages.
+ */
+/** Every public form that can be rescued. The host validates `form_id` against this list. */
+export declare const FORM_RESCUE_FORM_IDS: readonly ["contact", "case_study_pitch", "data_room_request", "trust_center_request", "tmcg_join", "meeting_booking", "waitlist"];
+export type FormRescueFormId = (typeof FORM_RESCUE_FORM_IDS)[number];
+export declare function isFormRescueFormId(value: unknown): value is FormRescueFormId;
+/**
+ * Fields whose VALUES a draft keeps: who the visitor is and where they work.
+ * Covers both naming schemes in use (the contact form's `name` / `companySize`,
+ * the meeting booking's HubSpot `firstName` / `company` / `jobtitle`).
+ * Free text (`message`) and phone numbers are reported as filled only.
+ */
+export declare const FORM_RESCUE_VALUE_FIELDS: readonly ["email", "name", "firstName", "lastName", "company", "jobtitle", "companySize", "linkedin_url"];
+export declare function isExcludedRescueField(name: string): boolean;
+/** Longest value a draft keeps per field. */
+export declare const FORM_RESCUE_MAX_VALUE_CHARS = 200;
+/** Save this long after the visitor stops typing. */
+export declare const FORM_RESCUE_DEBOUNCE_MS = 1500;
+/** Most fields a draft reports (filled names), a bound on the payload. */
+export declare const FORM_RESCUE_MAX_FIELDS = 40;
+/** Body keys a form's SUBMIT carries so the host can close the matching draft. */
+export declare const FORM_RESCUE_ATTEMPT_FIELD = "form_attempt_id";
+export declare const FORM_RESCUE_RESUME_FIELD = "form_resume_token";
+/** Every rescue key that rides in a submit body. Hosts forwarding a payload upstream strip by THIS array. */
+export declare const FORM_RESCUE_SUBMIT_KEYS: readonly ["form_attempt_id", "form_resume_token"];
+/** Query parameter a resume link carries. */
+export declare const FORM_RESCUE_RESUME_PARAM = "resume";
+/** Draft lifecycle. `submitted` is final; `rescued` can still become `submitted`. */
+export declare const FORM_DRAFT_STATUSES: readonly ["started", "rescuable", "rescued", "submitted"];
+export type FormDraftStatus = (typeof FORM_DRAFT_STATUSES)[number];
+/** Why a due draft was settled WITHOUT alerting the team (stored on the draft). */
+export declare const FORM_RESCUE_SKIP_REASONS: {
+    readonly finishedElsewhere: "finished_elsewhere";
+    readonly alreadyRescued: "already_rescued";
+    readonly internal: "internal_email";
+};
+export type FormRescueSkipReason = (typeof FORM_RESCUE_SKIP_REASONS)[keyof typeof FORM_RESCUE_SKIP_REASONS];
+export declare function isRescueEmail(value: unknown): value is string;
+export declare function isFormAttemptId(value: unknown): value is string;
+/**
+ * Keep only allowlisted, non-excluded string values, trimmed and capped.
+ * The ONE filter, run by the browser before sending and by the host before storing.
+ */
+export declare function sanitizeRescueValues(values: Record<string, unknown> | null | undefined): Record<string, string>;
+/** Names of the given fields that hold something, credentials never included. */
+export declare function filledRescueFields(values: Record<string, unknown>, fieldNames: readonly string[]): string[];
+export declare function rescueCompletionPct(filledCount: number, totalCount: number): number;
+/** A field NAME the host stores (`last_field`, `fields_filled`); bounded, printable. */
+export declare function sanitizeRescueFieldName(value: unknown): string | null;
+/** A form's progress at one moment: allowlisted values, filled field names, position. */
+export interface FormDraftProgress {
+    values: Record<string, string>;
+    fields_filled: string[];
+    last_field: string | null;
+    completion_pct: number;
+}
+/** What the browser sends on every save (`POST <formDraftsUrl>`), beside the humanity signals. */
+export interface FormDraftSaveRequest extends FormDraftProgress {
+    /** The attempt's idempotency key: every save of one attempt updates one draft. */
+    attempt_id: string;
+    form_id: FormRescueFormId;
+    source_path: string;
+    utm?: Partial<Record<'source' | 'medium' | 'campaign' | 'content' | 'term', string>>;
+}
+/** What the host answers a resume link with: the allowlisted values, nothing internal. */
+export interface FormDraftResumeResponse {
+    form_id: FormRescueFormId;
+    values: Record<string, string>;
+}
+/** The PostHog events this feature emits. Properties are ids, names and numbers, never values. */
+export declare const FORM_RESCUE_EVENTS: {
+    readonly started: "form_started";
+    readonly progress: "form_progress";
+    readonly leadCaptured: "form_lead_captured";
+    readonly abandoned: "form_abandoned";
+    readonly submitted: "form_submitted";
+    readonly rescued: "form_rescued";
+    readonly resumed: "form_resumed";
+};
+type AnalyticsValue = string | number | boolean | string[] | null;
+/**
+ * Send one form event to PostHog when the page loaded it (GTM exposes
+ * `window.posthog`); a no-op otherwise. Never throws.
+ */
+export declare function captureFormRescueEvent(event: string, properties: Record<string, AnalyticsValue>): void;
+export {};
+//# sourceMappingURL=form-rescue.d.ts.map

package/dist/utils/form-rescue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-rescue.d.ts","sourceRoot":"","sources":["../../src/utils/form-rescue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,6FAA6F;AAC7F,eAAO,MAAM,oBAAoB,mIAQvB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,2GAS3B,CAAC;AAMX,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,qDAAqD;AACrD,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAC3D,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAC5D,6GAA6G;AAC7G,eAAO,MAAM,uBAAuB,mDAAiE,CAAC;AAEtG,6CAA6C;AAC7C,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAEjD,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,2DAA4D,CAAC;AAC7F,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,mFAAmF;AACnF,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,OAAO,wBAAwB,CAAC,CAAC;AAK5G,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAID,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE/D;AAWD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAW/G;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAI3G;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGnF;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIrE;AAED,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtF;AAED,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,kGAAkG;AAClG,eAAO,MAAM,kBAAkB;;;;;;;;CAQrB,CAAC;AAEX,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;AAElE;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAQtG"}

package/dist/utils/form-rescue.js

@@ -0,0 +1,101 @@
+// src/utils/form-rescue.ts
+var FORM_RESCUE_FORM_IDS = [
+  "contact",
+  "case_study_pitch",
+  "data_room_request",
+  "trust_center_request",
+  "tmcg_join",
+  "meeting_booking",
+  "waitlist"
+];
+function isFormRescueFormId(value) {
+  return typeof value === "string" && FORM_RESCUE_FORM_IDS.includes(value);
+}
+var FORM_RESCUE_VALUE_FIELDS = [
+  "email",
+  "name",
+  "firstName",
+  "lastName",
+  "company",
+  "jobtitle",
+  "companySize",
+  "linkedin_url"
+];
+var EXCLUDED_FIELD_PATTERN = /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;
+function isExcludedRescueField(name) {
+  return EXCLUDED_FIELD_PATTERN.test(name);
+}
+var FORM_RESCUE_MAX_VALUE_CHARS = 200;
+var FORM_RESCUE_DEBOUNCE_MS = 1500;
+var FORM_RESCUE_MAX_FIELDS = 40;
+var FORM_RESCUE_ATTEMPT_FIELD = "form_attempt_id";
+var FORM_RESCUE_RESUME_FIELD = "form_resume_token";
+var FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD];
+var FORM_RESCUE_RESUME_PARAM = "resume";
+var FORM_DRAFT_STATUSES = ["started", "rescuable", "rescued", "submitted"];
+var FORM_RESCUE_SKIP_REASONS = {
+  finishedElsewhere: "finished_elsewhere",
+  alreadyRescued: "already_rescued",
+  internal: "internal_email"
+};
+var EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/;
+function isRescueEmail(value) {
+  return typeof value === "string" && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());
+}
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isFormAttemptId(value) {
+  return typeof value === "string" && UUID_PATTERN.test(value);
+}
+function isFilled(value) {
+  if (value == null) return false;
+  if (typeof value === "string") return value.trim().length > 0;
+  if (typeof value === "boolean") return value;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === "object") return Object.values(value).some(isFilled);
+  return true;
+}
+function sanitizeRescueValues(values) {
+  const out = {};
+  if (!values || typeof values !== "object") return out;
+  for (const key of FORM_RESCUE_VALUE_FIELDS) {
+    if (isExcludedRescueField(key)) continue;
+    const raw = values[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);
+    if (trimmed) out[key] = trimmed;
+  }
+  return out;
+}
+function filledRescueFields(values, fieldNames) {
+  return fieldNames.filter((name) => !isExcludedRescueField(name) && isFilled(values[name])).slice(0, FORM_RESCUE_MAX_FIELDS);
+}
+function rescueCompletionPct(filledCount, totalCount) {
+  if (totalCount <= 0) return 0;
+  return Math.max(0, Math.min(100, Math.round(filledCount / totalCount * 100)));
+}
+function sanitizeRescueFieldName(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;
+}
+var FORM_RESCUE_EVENTS = {
+  started: "form_started",
+  progress: "form_progress",
+  leadCaptured: "form_lead_captured",
+  abandoned: "form_abandoned",
+  submitted: "form_submitted",
+  rescued: "form_rescued",
+  resumed: "form_resumed"
+};
+function captureFormRescueEvent(event, properties) {
+  try {
+    if (typeof window === "undefined") return;
+    const ph = window.posthog;
+    if (typeof ph?.capture === "function") ph.capture(event, properties);
+  } catch {
+  }
+}
+
+export { FORM_DRAFT_STATUSES, FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_DEBOUNCE_MS, FORM_RESCUE_EVENTS, FORM_RESCUE_FORM_IDS, FORM_RESCUE_MAX_FIELDS, FORM_RESCUE_MAX_VALUE_CHARS, FORM_RESCUE_RESUME_FIELD, FORM_RESCUE_RESUME_PARAM, FORM_RESCUE_SKIP_REASONS, FORM_RESCUE_SUBMIT_KEYS, FORM_RESCUE_VALUE_FIELDS, captureFormRescueEvent, filledRescueFields, isExcludedRescueField, isFormAttemptId, isFormRescueFormId, isRescueEmail, rescueCompletionPct, sanitizeRescueFieldName, sanitizeRescueValues };
+//# sourceMappingURL=form-rescue.js.map
+//# sourceMappingURL=form-rescue.js.map

package/dist/utils/form-rescue.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/form-rescue.ts"],"names":[],"mappings":";AAsBO,IAAM,oBAAA,GAAuB;AAAA,EAClC,SAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,sBAAA;AAAA,EACA,WAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AAIO,SAAS,mBAAmB,KAAA,EAA2C;AAC5E,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAa,oBAAA,CAA2C,SAAS,KAAK,CAAA;AAChG;AAQO,IAAM,wBAAA,GAA2B;AAAA,EACtC,OAAA;AAAA,EACA,MAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF;AAGA,IAAM,sBAAA,GACJ,6FAAA;AAEK,SAAS,sBAAsB,IAAA,EAAuB;AAC3D,EAAA,OAAO,sBAAA,CAAuB,KAAK,IAAI,CAAA;AACzC;AAGO,IAAM,2BAAA,GAA8B;AAEpC,IAAM,uBAAA,GAA0B;AAEhC,IAAM,sBAAA,GAAyB;AAG/B,IAAM,yBAAA,GAA4B;AAClC,IAAM,wBAAA,GAA2B;AAEjC,IAAM,uBAAA,GAA0B,CAAC,yBAAA,EAA2B,wBAAwB;AAGpF,IAAM,wBAAA,GAA2B;AAGjC,IAAM,mBAAA,GAAsB,CAAC,SAAA,EAAW,WAAA,EAAa,WAAW,WAAW;AAI3E,IAAM,wBAAA,GAA2B;AAAA,EACtC,iBAAA,EAAmB,oBAAA;AAAA,EACnB,cAAA,EAAgB,iBAAA;AAAA,EAChB,QAAA,EAAU;AACZ;AAIA,IAAM,aAAA,GAAgB,kDAAA;AAEf,SAAS,cAAc,KAAA,EAAiC;AAC7D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,IAAU,+BAA+B,aAAA,CAAc,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAAA;AACpH;AAEA,IAAM,YAAA,GAAe,iEAAA;AAEd,SAAS,gBAAgB,KAAA,EAAiC;AAC/D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,YAAA,CAAa,KAAK,KAAK,CAAA;AAC7D;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,SAAiB,KAAA,CAAM,IAAA,GAAO,MAAA,GAAS,CAAA;AAC5D,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,KAAA;AACvC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,GAAS,CAAA;AAChD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,OAAO,MAAA,CAAO,KAAgC,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA;AACnG,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,qBAAqB,MAAA,EAA4E;AAC/G,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,GAAA;AAClD,EAAA,KAAA,MAAW,OAAO,wBAAA,EAA0B;AAC1C,IAAA,IAAI,qBAAA,CAAsB,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,GAAA,GAAM,OAAO,GAAG,CAAA;AACtB,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,UAAU,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,2BAA2B,CAAA;AAC/D,IAAA,IAAI,OAAA,EAAS,GAAA,CAAI,GAAG,CAAA,GAAI,OAAA;AAAA,EAC1B;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,kBAAA,CAAmB,QAAiC,UAAA,EAAyC;AAC3G,EAAA,OAAO,UAAA,CACJ,MAAA,CAAO,CAAA,IAAA,KAAQ,CAAC,sBAAsB,IAAI,CAAA,IAAK,QAAA,CAAS,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA,CACrE,KAAA,CAAM,GAAG,sBAAsB,CAAA;AACpC;AAEO,SAAS,mBAAA,CAAoB,aAAqB,UAAA,EAA4B;AACnF,EAAA,IAAI,UAAA,IAAc,GAAG,OAAO,CAAA;AAC5B,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,KAAA,CAAO,WAAA,GAAc,UAAA,GAAc,GAAG,CAAC,CAAC,CAAA;AAChF;AAGO,SAAS,wBAAwB,KAAA,EAA+B;AACrE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,OAAO,wBAAA,CAAyB,KAAK,OAAO,CAAA,IAAK,CAAC,qBAAA,CAAsB,OAAO,IAAI,OAAA,GAAU,IAAA;AAC/F;AA0BO,IAAM,kBAAA,GAAqB;AAAA,EAChC,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,eAAA;AAAA,EACV,YAAA,EAAc,oBAAA;AAAA,EACd,SAAA,EAAW,gBAAA;AAAA,EACX,SAAA,EAAW,gBAAA;AAAA,EACX,OAAA,EAAS,cAAA;AAAA,EACT,OAAA,EAAS;AACX;AAQO,SAAS,sBAAA,CAAuB,OAAe,UAAA,EAAkD;AACtG,EAAA,IAAI;AACF,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACnC,IAAA,MAAM,KAAM,MAAA,CAAiF,OAAA;AAC7F,IAAA,IAAI,OAAO,EAAA,EAAI,OAAA,KAAY,YAAY,EAAA,CAAG,OAAA,CAAQ,OAAO,UAAU,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF","file":"form-rescue.js","sourcesContent":["/**\n * Form rescue — the shared rules for saving a half-filled public form so the\n * team can follow up with a visitor who left before submitting.\n *\n * Pure and server-safe: the browser hook (`hooks/use-form-rescue`) and the\n * host's draft endpoint import the SAME allowlist, exclusions, caps and\n * completion math, so the server re-applies exactly the filter the client ran\n * and a rename here reaches both sides at once. Also exported through the\n * granular subpath `./utils/form-rescue` for server-only consumers.\n *\n * What a draft may carry:\n *   - values of ALLOWLISTED contact fields only (`FORM_RESCUE_VALUE_FIELDS`),\n *     trimmed and capped at `FORM_RESCUE_MAX_VALUE_CHARS`;\n *   - for every other field, only whether it is filled (never its value);\n *   - nothing whose name looks like a credential or payment field\n *     (`isExcludedRescueField`), whatever the allowlist says.\n *\n * Field values go to the host only, never to analytics: the PostHog events\n * (`captureFormRescueEvent`) carry ids, field names and percentages.\n */\n\n/** Every public form that can be rescued. The host validates `form_id` against this list. */\nexport const FORM_RESCUE_FORM_IDS = [\n  'contact',\n  'case_study_pitch',\n  'data_room_request',\n  'trust_center_request',\n  'tmcg_join',\n  'meeting_booking',\n  'waitlist',\n] as const;\n\nexport type FormRescueFormId = (typeof FORM_RESCUE_FORM_IDS)[number];\n\nexport function isFormRescueFormId(value: unknown): value is FormRescueFormId {\n  return typeof value === 'string' && (FORM_RESCUE_FORM_IDS as readonly string[]).includes(value);\n}\n\n/**\n * Fields whose VALUES a draft keeps: who the visitor is and where they work.\n * Covers both naming schemes in use (the contact form's `name` / `companySize`,\n * the meeting booking's HubSpot `firstName` / `company` / `jobtitle`).\n * Free text (`message`) and phone numbers are reported as filled only.\n */\nexport const FORM_RESCUE_VALUE_FIELDS = [\n  'email',\n  'name',\n  'firstName',\n  'lastName',\n  'company',\n  'jobtitle',\n  'companySize',\n  'linkedin_url',\n] as const;\n\n/** Never send or store these, whatever the allowlist says. */\nconst EXCLUDED_FIELD_PATTERN =\n  /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;\n\nexport function isExcludedRescueField(name: string): boolean {\n  return EXCLUDED_FIELD_PATTERN.test(name);\n}\n\n/** Longest value a draft keeps per field. */\nexport const FORM_RESCUE_MAX_VALUE_CHARS = 200;\n/** Save this long after the visitor stops typing. */\nexport const FORM_RESCUE_DEBOUNCE_MS = 1500;\n/** Most fields a draft reports (filled names), a bound on the payload. */\nexport const FORM_RESCUE_MAX_FIELDS = 40;\n\n/** Body keys a form's SUBMIT carries so the host can close the matching draft. */\nexport const FORM_RESCUE_ATTEMPT_FIELD = 'form_attempt_id';\nexport const FORM_RESCUE_RESUME_FIELD = 'form_resume_token';\n/** Every rescue key that rides in a submit body. Hosts forwarding a payload upstream strip by THIS array. */\nexport const FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD] as const;\n\n/** Query parameter a resume link carries. */\nexport const FORM_RESCUE_RESUME_PARAM = 'resume';\n\n/** Draft lifecycle. `submitted` is final; `rescued` can still become `submitted`. */\nexport const FORM_DRAFT_STATUSES = ['started', 'rescuable', 'rescued', 'submitted'] as const;\nexport type FormDraftStatus = (typeof FORM_DRAFT_STATUSES)[number];\n\n/** Why a due draft was settled WITHOUT alerting the team (stored on the draft). */\nexport const FORM_RESCUE_SKIP_REASONS = {\n  finishedElsewhere: 'finished_elsewhere',\n  alreadyRescued: 'already_rescued',\n  internal: 'internal_email',\n} as const;\nexport type FormRescueSkipReason = (typeof FORM_RESCUE_SKIP_REASONS)[keyof typeof FORM_RESCUE_SKIP_REASONS];\n\n/** Same shape the host's `contact_submissions.email` check accepts. */\nconst EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$/;\n\nexport function isRescueEmail(value: unknown): value is string {\n  return typeof value === 'string' && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());\n}\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport function isFormAttemptId(value: unknown): value is string {\n  return typeof value === 'string' && UUID_PATTERN.test(value);\n}\n\nfunction isFilled(value: unknown): boolean {\n  if (value == null) return false;\n  if (typeof value === 'string') return value.trim().length > 0;\n  if (typeof value === 'boolean') return value;\n  if (Array.isArray(value)) return value.length > 0;\n  if (typeof value === 'object') return Object.values(value as Record<string, unknown>).some(isFilled);\n  return true;\n}\n\n/**\n * Keep only allowlisted, non-excluded string values, trimmed and capped.\n * The ONE filter, run by the browser before sending and by the host before storing.\n */\nexport function sanitizeRescueValues(values: Record<string, unknown> | null | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  if (!values || typeof values !== 'object') return out;\n  for (const key of FORM_RESCUE_VALUE_FIELDS) {\n    if (isExcludedRescueField(key)) continue;\n    const raw = values[key];\n    if (typeof raw !== 'string') continue;\n    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);\n    if (trimmed) out[key] = trimmed;\n  }\n  return out;\n}\n\n/** Names of the given fields that hold something, credentials never included. */\nexport function filledRescueFields(values: Record<string, unknown>, fieldNames: readonly string[]): string[] {\n  return fieldNames\n    .filter(name => !isExcludedRescueField(name) && isFilled(values[name]))\n    .slice(0, FORM_RESCUE_MAX_FIELDS);\n}\n\nexport function rescueCompletionPct(filledCount: number, totalCount: number): number {\n  if (totalCount <= 0) return 0;\n  return Math.max(0, Math.min(100, Math.round((filledCount / totalCount) * 100)));\n}\n\n/** A field NAME the host stores (`last_field`, `fields_filled`); bounded, printable. */\nexport function sanitizeRescueFieldName(value: unknown): string | null {\n  if (typeof value !== 'string') return null;\n  const trimmed = value.trim();\n  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;\n}\n\n/** A form's progress at one moment: allowlisted values, filled field names, position. */\nexport interface FormDraftProgress {\n  values: Record<string, string>;\n  fields_filled: string[];\n  last_field: string | null;\n  completion_pct: number;\n}\n\n/** What the browser sends on every save (`POST <formDraftsUrl>`), beside the humanity signals. */\nexport interface FormDraftSaveRequest extends FormDraftProgress {\n  /** The attempt's idempotency key: every save of one attempt updates one draft. */\n  attempt_id: string;\n  form_id: FormRescueFormId;\n  source_path: string;\n  utm?: Partial<Record<'source' | 'medium' | 'campaign' | 'content' | 'term', string>>;\n}\n\n/** What the host answers a resume link with: the allowlisted values, nothing internal. */\nexport interface FormDraftResumeResponse {\n  form_id: FormRescueFormId;\n  values: Record<string, string>;\n}\n\n/** The PostHog events this feature emits. Properties are ids, names and numbers, never values. */\nexport const FORM_RESCUE_EVENTS = {\n  started: 'form_started',\n  progress: 'form_progress',\n  leadCaptured: 'form_lead_captured',\n  abandoned: 'form_abandoned',\n  submitted: 'form_submitted',\n  rescued: 'form_rescued',\n  resumed: 'form_resumed',\n} as const;\n\ntype AnalyticsValue = string | number | boolean | string[] | null;\n\n/**\n * Send one form event to PostHog when the page loaded it (GTM exposes\n * `window.posthog`); a no-op otherwise. Never throws.\n */\nexport function captureFormRescueEvent(event: string, properties: Record<string, AnalyticsValue>): void {\n  try {\n    if (typeof window === 'undefined') return;\n    const ph = (window as unknown as { posthog?: { capture?: (e: string, p: object) => void } }).posthog;\n    if (typeof ph?.capture === 'function') ph.capture(event, properties);\n  } catch {\n    // Analytics never breaks a form.\n  }\n}\n"]}

package/dist/utils/index.cjs

@@ -5300,6 +5300,104 @@ function evaluateHumanitySignals(body, opts) {
 }
 var splitCsvEnv = (s) => s?.split(",").map((t) => t.trim()).filter(Boolean) ?? [];
 
+// src/utils/form-rescue.ts
+var FORM_RESCUE_FORM_IDS = [
+  "contact",
+  "case_study_pitch",
+  "data_room_request",
+  "trust_center_request",
+  "tmcg_join",
+  "meeting_booking",
+  "waitlist"
+];
+function isFormRescueFormId(value) {
+  return typeof value === "string" && FORM_RESCUE_FORM_IDS.includes(value);
+}
+var FORM_RESCUE_VALUE_FIELDS = [
+  "email",
+  "name",
+  "firstName",
+  "lastName",
+  "company",
+  "jobtitle",
+  "companySize",
+  "linkedin_url"
+];
+var EXCLUDED_FIELD_PATTERN = /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;
+function isExcludedRescueField(name) {
+  return EXCLUDED_FIELD_PATTERN.test(name);
+}
+var FORM_RESCUE_MAX_VALUE_CHARS = 200;
+var FORM_RESCUE_DEBOUNCE_MS = 1500;
+var FORM_RESCUE_MAX_FIELDS = 40;
+var FORM_RESCUE_ATTEMPT_FIELD = "form_attempt_id";
+var FORM_RESCUE_RESUME_FIELD = "form_resume_token";
+var FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD];
+var FORM_RESCUE_RESUME_PARAM = "resume";
+var FORM_DRAFT_STATUSES = ["started", "rescuable", "rescued", "submitted"];
+var FORM_RESCUE_SKIP_REASONS = {
+  finishedElsewhere: "finished_elsewhere",
+  alreadyRescued: "already_rescued",
+  internal: "internal_email"
+};
+var EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/;
+function isRescueEmail(value) {
+  return typeof value === "string" && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());
+}
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isFormAttemptId(value) {
+  return typeof value === "string" && UUID_PATTERN.test(value);
+}
+function isFilled(value) {
+  if (value == null) return false;
+  if (typeof value === "string") return value.trim().length > 0;
+  if (typeof value === "boolean") return value;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === "object") return Object.values(value).some(isFilled);
+  return true;
+}
+function sanitizeRescueValues(values) {
+  const out = {};
+  if (!values || typeof values !== "object") return out;
+  for (const key of FORM_RESCUE_VALUE_FIELDS) {
+    if (isExcludedRescueField(key)) continue;
+    const raw = values[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);
+    if (trimmed) out[key] = trimmed;
+  }
+  return out;
+}
+function filledRescueFields(values, fieldNames) {
+  return fieldNames.filter((name) => !isExcludedRescueField(name) && isFilled(values[name])).slice(0, FORM_RESCUE_MAX_FIELDS);
+}
+function rescueCompletionPct(filledCount, totalCount) {
+  if (totalCount <= 0) return 0;
+  return Math.max(0, Math.min(100, Math.round(filledCount / totalCount * 100)));
+}
+function sanitizeRescueFieldName(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;
+}
+var FORM_RESCUE_EVENTS = {
+  started: "form_started",
+  progress: "form_progress",
+  leadCaptured: "form_lead_captured",
+  abandoned: "form_abandoned",
+  submitted: "form_submitted",
+  rescued: "form_rescued",
+  resumed: "form_resumed"
+};
+function captureFormRescueEvent(event, properties) {
+  try {
+    if (typeof window === "undefined") return;
+    const ph = window.posthog;
+    if (typeof ph?.capture === "function") ph.capture(event, properties);
+  } catch {
+  }
+}
+
 // src/utils/doc-tree-nav.ts
 var DEFAULT_FOLDER_INDEX_FILE = "README.md";
 var DEFAULT_FOLDER_INDEX = DEFAULT_FOLDER_INDEX_FILE;
@@ -6032,6 +6130,18 @@ exports.DEV_SECTION_PARAM_KEYS = DEV_SECTION_PARAM_KEYS;
 exports.DOC_TABLE_TYPES = DOC_TABLE_TYPES;
 exports.ELAPSED_MS_FIELD = ELAPSED_MS_FIELD;
 exports.FIRST_TOUCH_ATTRIBUTION_KEY = FIRST_TOUCH_ATTRIBUTION_KEY;
+exports.FORM_DRAFT_STATUSES = FORM_DRAFT_STATUSES;
+exports.FORM_RESCUE_ATTEMPT_FIELD = FORM_RESCUE_ATTEMPT_FIELD;
+exports.FORM_RESCUE_DEBOUNCE_MS = FORM_RESCUE_DEBOUNCE_MS;
+exports.FORM_RESCUE_EVENTS = FORM_RESCUE_EVENTS;
+exports.FORM_RESCUE_FORM_IDS = FORM_RESCUE_FORM_IDS;
+exports.FORM_RESCUE_MAX_FIELDS = FORM_RESCUE_MAX_FIELDS;
+exports.FORM_RESCUE_MAX_VALUE_CHARS = FORM_RESCUE_MAX_VALUE_CHARS;
+exports.FORM_RESCUE_RESUME_FIELD = FORM_RESCUE_RESUME_FIELD;
+exports.FORM_RESCUE_RESUME_PARAM = FORM_RESCUE_RESUME_PARAM;
+exports.FORM_RESCUE_SKIP_REASONS = FORM_RESCUE_SKIP_REASONS;
+exports.FORM_RESCUE_SUBMIT_KEYS = FORM_RESCUE_SUBMIT_KEYS;
+exports.FORM_RESCUE_VALUE_FIELDS = FORM_RESCUE_VALUE_FIELDS;
 exports.FullscreenSwitchController = FullscreenSwitchController;
 exports.GENERIC_EMAIL_DOMAINS = GENERIC_EMAIL_DOMAINS;
 exports.HEADING_EMOJI_RE = HEADING_EMOJI_RE;
@@ -6091,6 +6201,7 @@ exports.buildSuggestionUrl = buildSuggestionUrl;
 exports.buildTicketOpenHref = buildTicketOpenHref;
 exports.canonicalContentRefType = canonicalContentRefType;
 exports.captureFirstTouchAttribution = captureFirstTouchAttribution;
+exports.captureFormRescueEvent = captureFormRescueEvent;
 exports.clamp = clamp;
 exports.clampPageToTotal = clampPageToTotal;
 exports.classifySocialHost = classifySocialHost;
@@ -6138,6 +6249,7 @@ exports.extractSections = extractSections;
 exports.faqItemAnchor = faqItemAnchor;
 exports.faqSectionSlug = faqSectionSlug;
 exports.fetchPriorityProp = fetchPriorityProp;
+exports.filledRescueFields = filledRescueFields;
 exports.findAnchorElementByNormalizedId = findAnchorElementByNormalizedId;
 exports.findDocNodeByPath = findDocNodeByPath;
 exports.findHoneypotCopySource = findHoneypotCopySource;
@@ -6268,7 +6380,10 @@ exports.isBadgePaletteKey = isBadgePaletteKey;
 exports.isBlankLine = isBlankLine;
 exports.isCrossOriginUrl = isCrossOriginUrl;
 exports.isDismissedCookieValue = isDismissedCookieValue;
+exports.isExcludedRescueField = isExcludedRescueField;
 exports.isFigmaSlidesUrl = isFigmaSlidesUrl;
+exports.isFormAttemptId = isFormAttemptId;
+exports.isFormRescueFormId = isFormRescueFormId;
 exports.isGenericDomain = isGenericDomain;
 exports.isGenericWebsiteDomain = isGenericWebsiteDomain;
 exports.isHumanitySignalKey = isHumanitySignalKey;
@@ -6278,6 +6393,7 @@ exports.isLocalUrl = isLocalUrl;
 exports.isOSPlatform = isOSPlatform;
 exports.isOrderedRange = isOrderedRange;
 exports.isPublishableMediaType = isPublishableMediaType;
+exports.isRescueEmail = isRescueEmail;
 exports.isToday = isToday;
 exports.isValidEmailDomain = isValidEmailDomain;
 exports.isValidSchedulingSlug = isValidSchedulingSlug;
@@ -6337,11 +6453,14 @@ exports.readDismissCookie = readDismissCookie;
 exports.readLeadingDecisionFrame = readLeadingDecisionFrame;
 exports.recordCountLabel = recordCountLabel;
 exports.releaseTypeToBadgeColor = releaseTypeToBadgeColor;
+exports.rescueCompletionPct = rescueCompletionPct;
 exports.resolveContentFetchPath = resolveContentFetchPath;
 exports.resolveRedirectTarget = resolveRedirectTarget;
 exports.resolveReleaseCover = resolveReleaseCover;
 exports.rgbToHex = rgbToHex;
 exports.sanitizeLandingUrl = sanitizeLandingUrl;
+exports.sanitizeRescueFieldName = sanitizeRescueFieldName;
+exports.sanitizeRescueValues = sanitizeRescueValues;
 exports.sanitizeTitleForChat = sanitizeTitleForChat;
 exports.scanHeadings = scanHeadings;
 exports.schedulingAudienceKey = schedulingAudienceKey;