@flamingo-stack/openframe-frontend-core 0.0.672 → 0.0.673-2406.7239.1

package/dist/utils/form-rescue.cjs

@@ -0,0 +1,142 @@
+'use strict';
+
+// src/utils/form-rescue.ts
+var FORM_ID_PATTERN = /^[a-z][a-z0-9_]{1,47}$/;
+var definitions = /* @__PURE__ */ new Map();
+function defineRescueForm(definition) {
+  if (!FORM_ID_PATTERN.test(definition.id)) throw new Error(`[form-rescue] invalid form id "${definition.id}"`);
+  const existing = definitions.get(definition.id);
+  if (existing) {
+    if (existing.label !== definition.label) {
+      throw new Error(`[form-rescue] form id "${definition.id}" is already defined as "${existing.label}"`);
+    }
+    return existing;
+  }
+  const frozen = Object.freeze({ id: definition.id, label: definition.label });
+  definitions.set(frozen.id, frozen);
+  return frozen;
+}
+function getRescueForm(id) {
+  return typeof id === "string" ? definitions.get(id) ?? null : null;
+}
+function listRescueForms() {
+  return [...definitions.values()];
+}
+var RESCUE_FORMS = {
+  contact: defineRescueForm({ id: "contact", label: "Contact form" }),
+  caseStudyPitch: defineRescueForm({ id: "case_study_pitch", label: "Case study pitch" }),
+  dataRoomRequest: defineRescueForm({ id: "data_room_request", label: "Data room request" }),
+  trustCenterRequest: defineRescueForm({ id: "trust_center_request", label: "Trust Center document request" }),
+  meetingBooking: defineRescueForm({ id: "meeting_booking", label: "Meeting booking" }),
+  waitlist: defineRescueForm({ id: "waitlist", label: "Waitlist" })
+};
+var FORM_RESCUE_VALUE_FIELDS = [
+  "email",
+  "name",
+  "firstName",
+  "lastName",
+  "company",
+  "jobtitle",
+  "companySize",
+  "linkedin_url"
+];
+var EXCLUDED_FIELD_PATTERN = /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;
+function isExcludedRescueField(name) {
+  return EXCLUDED_FIELD_PATTERN.test(name);
+}
+var FORM_RESCUE_MAX_VALUE_CHARS = 200;
+var FORM_RESCUE_DEBOUNCE_MS = 1500;
+var FORM_RESCUE_MAX_FIELDS = 40;
+var FORM_RESCUE_ATTEMPT_FIELD = "form_attempt_id";
+var FORM_RESCUE_RESUME_FIELD = "form_resume_token";
+var FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD];
+var FORM_RESCUE_RESUME_PARAM = "resume";
+var FORM_DRAFT_STATUSES = ["started", "rescuable", "rescued", "submitted"];
+var FORM_RESCUE_SKIP_REASONS = {
+  finishedElsewhere: "finished_elsewhere",
+  alreadyRescued: "already_rescued",
+  internal: "internal_email"
+};
+var EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/;
+function isRescueEmail(value) {
+  return typeof value === "string" && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());
+}
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isFormAttemptId(value) {
+  return typeof value === "string" && UUID_PATTERN.test(value);
+}
+function isFilled(value) {
+  if (value == null) return false;
+  if (typeof value === "string") return value.trim().length > 0;
+  if (typeof value === "boolean") return value;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === "object") return Object.values(value).some(isFilled);
+  return true;
+}
+function sanitizeRescueValues(values) {
+  const out = {};
+  if (!values || typeof values !== "object") return out;
+  for (const key of FORM_RESCUE_VALUE_FIELDS) {
+    if (isExcludedRescueField(key)) continue;
+    const raw = values[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);
+    if (trimmed) out[key] = trimmed;
+  }
+  return out;
+}
+function filledRescueFields(values, fieldNames) {
+  return fieldNames.filter((name) => !isExcludedRescueField(name) && isFilled(values[name])).slice(0, FORM_RESCUE_MAX_FIELDS);
+}
+function rescueCompletionPct(filledCount, totalCount) {
+  if (totalCount <= 0) return 0;
+  return Math.max(0, Math.min(100, Math.round(filledCount / totalCount * 100)));
+}
+function sanitizeRescueFieldName(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;
+}
+var FORM_RESCUE_EVENTS = {
+  started: "form_started",
+  progress: "form_progress",
+  leadCaptured: "form_lead_captured",
+  abandoned: "form_abandoned",
+  submitted: "form_submitted",
+  rescued: "form_rescued",
+  resumed: "form_resumed"
+};
+function captureFormRescueEvent(event, properties) {
+  try {
+    if (typeof window === "undefined") return;
+    const ph = window.posthog;
+    if (typeof ph?.capture === "function") ph.capture(event, properties);
+  } catch {
+  }
+}
+
+exports.FORM_DRAFT_STATUSES = FORM_DRAFT_STATUSES;
+exports.FORM_RESCUE_ATTEMPT_FIELD = FORM_RESCUE_ATTEMPT_FIELD;
+exports.FORM_RESCUE_DEBOUNCE_MS = FORM_RESCUE_DEBOUNCE_MS;
+exports.FORM_RESCUE_EVENTS = FORM_RESCUE_EVENTS;
+exports.FORM_RESCUE_MAX_FIELDS = FORM_RESCUE_MAX_FIELDS;
+exports.FORM_RESCUE_MAX_VALUE_CHARS = FORM_RESCUE_MAX_VALUE_CHARS;
+exports.FORM_RESCUE_RESUME_FIELD = FORM_RESCUE_RESUME_FIELD;
+exports.FORM_RESCUE_RESUME_PARAM = FORM_RESCUE_RESUME_PARAM;
+exports.FORM_RESCUE_SKIP_REASONS = FORM_RESCUE_SKIP_REASONS;
+exports.FORM_RESCUE_SUBMIT_KEYS = FORM_RESCUE_SUBMIT_KEYS;
+exports.FORM_RESCUE_VALUE_FIELDS = FORM_RESCUE_VALUE_FIELDS;
+exports.RESCUE_FORMS = RESCUE_FORMS;
+exports.captureFormRescueEvent = captureFormRescueEvent;
+exports.defineRescueForm = defineRescueForm;
+exports.filledRescueFields = filledRescueFields;
+exports.getRescueForm = getRescueForm;
+exports.isExcludedRescueField = isExcludedRescueField;
+exports.isFormAttemptId = isFormAttemptId;
+exports.isRescueEmail = isRescueEmail;
+exports.listRescueForms = listRescueForms;
+exports.rescueCompletionPct = rescueCompletionPct;
+exports.sanitizeRescueFieldName = sanitizeRescueFieldName;
+exports.sanitizeRescueValues = sanitizeRescueValues;
+//# sourceMappingURL=form-rescue.cjs.map
+//# sourceMappingURL=form-rescue.cjs.map

package/dist/utils/form-rescue.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/form-rescue.ts"],"names":[],"mappings":";;;AAkCA,IAAM,eAAA,GAAkB,wBAAA;AACxB,IAAM,WAAA,uBAAkB,GAAA,EAAkC;AAOnD,SAAS,iBAAiB,UAAA,EAAwD;AACvF,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,UAAA,CAAW,EAAE,CAAA,CAAA,CAAG,CAAA;AAC5G,EAAA,MAAM,QAAA,GAAW,WAAA,CAAY,GAAA,CAAI,UAAA,CAAW,EAAE,CAAA;AAC9C,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,IAAI,QAAA,CAAS,KAAA,KAAU,UAAA,CAAW,KAAA,EAAO;AACvC,MAAA,MAAM,IAAI,MAAM,CAAA,uBAAA,EAA0B,UAAA,CAAW,EAAE,CAAA,yBAAA,EAA4B,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,IACtG;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,EAAE,EAAA,EAAI,WAAW,EAAA,EAAI,KAAA,EAAO,UAAA,CAAW,KAAA,EAAO,CAAA;AAC3E,EAAA,WAAA,CAAY,GAAA,CAAI,MAAA,CAAO,EAAA,EAAI,MAAM,CAAA;AACjC,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,cAAc,EAAA,EAA0C;AACtE,EAAA,OAAO,OAAO,EAAA,KAAO,QAAA,GAAY,YAAY,GAAA,CAAI,EAAE,KAAK,IAAA,GAAQ,IAAA;AAClE;AAGO,SAAS,eAAA,GAA0C;AACxD,EAAA,OAAO,CAAC,GAAG,WAAA,CAAY,MAAA,EAAQ,CAAA;AACjC;AAGO,IAAM,YAAA,GAAe;AAAA,EAC1B,SAAS,gBAAA,CAAiB,EAAE,IAAI,SAAA,EAAW,KAAA,EAAO,gBAAgB,CAAA;AAAA,EAClE,gBAAgB,gBAAA,CAAiB,EAAE,IAAI,kBAAA,EAAoB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACtF,iBAAiB,gBAAA,CAAiB,EAAE,IAAI,mBAAA,EAAqB,KAAA,EAAO,qBAAqB,CAAA;AAAA,EACzF,oBAAoB,gBAAA,CAAiB,EAAE,IAAI,sBAAA,EAAwB,KAAA,EAAO,iCAAiC,CAAA;AAAA,EAC3G,gBAAgB,gBAAA,CAAiB,EAAE,IAAI,iBAAA,EAAmB,KAAA,EAAO,mBAAmB,CAAA;AAAA,EACpF,UAAU,gBAAA,CAAiB,EAAE,IAAI,UAAA,EAAY,KAAA,EAAO,YAAY;AAClE;AAQO,IAAM,wBAAA,GAA2B;AAAA,EACtC,OAAA;AAAA,EACA,MAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF;AAGA,IAAM,sBAAA,GACJ,6FAAA;AAEK,SAAS,sBAAsB,IAAA,EAAuB;AAC3D,EAAA,OAAO,sBAAA,CAAuB,KAAK,IAAI,CAAA;AACzC;AAGO,IAAM,2BAAA,GAA8B;AAEpC,IAAM,uBAAA,GAA0B;AAEhC,IAAM,sBAAA,GAAyB;AAG/B,IAAM,yBAAA,GAA4B;AAClC,IAAM,wBAAA,GAA2B;AAEjC,IAAM,uBAAA,GAA0B,CAAC,yBAAA,EAA2B,wBAAwB;AAGpF,IAAM,wBAAA,GAA2B;AAGjC,IAAM,mBAAA,GAAsB,CAAC,SAAA,EAAW,WAAA,EAAa,WAAW,WAAW;AAI3E,IAAM,wBAAA,GAA2B;AAAA,EACtC,iBAAA,EAAmB,oBAAA;AAAA,EACnB,cAAA,EAAgB,iBAAA;AAAA,EAChB,QAAA,EAAU;AACZ;AAIA,IAAM,aAAA,GAAgB,kDAAA;AAEf,SAAS,cAAc,KAAA,EAAiC;AAC7D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,IAAU,+BAA+B,aAAA,CAAc,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAAA;AACpH;AAEA,IAAM,YAAA,GAAe,iEAAA;AAEd,SAAS,gBAAgB,KAAA,EAAiC;AAC/D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,YAAA,CAAa,KAAK,KAAK,CAAA;AAC7D;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,SAAiB,KAAA,CAAM,IAAA,GAAO,MAAA,GAAS,CAAA;AAC5D,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,KAAA;AACvC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,GAAS,CAAA;AAChD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,OAAO,MAAA,CAAO,KAAgC,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA;AACnG,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,qBAAqB,MAAA,EAA4E;AAC/G,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,GAAA;AAClD,EAAA,KAAA,MAAW,OAAO,wBAAA,EAA0B;AAC1C,IAAA,IAAI,qBAAA,CAAsB,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,GAAA,GAAM,OAAO,GAAG,CAAA;AACtB,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,UAAU,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,2BAA2B,CAAA;AAC/D,IAAA,IAAI,OAAA,EAAS,GAAA,CAAI,GAAG,CAAA,GAAI,OAAA;AAAA,EAC1B;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,kBAAA,CAAmB,QAAiC,UAAA,EAAyC;AAC3G,EAAA,OAAO,UAAA,CACJ,MAAA,CAAO,CAAA,IAAA,KAAQ,CAAC,sBAAsB,IAAI,CAAA,IAAK,QAAA,CAAS,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA,CACrE,KAAA,CAAM,GAAG,sBAAsB,CAAA;AACpC;AAEO,SAAS,mBAAA,CAAoB,aAAqB,UAAA,EAA4B;AACnF,EAAA,IAAI,UAAA,IAAc,GAAG,OAAO,CAAA;AAC5B,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,KAAA,CAAO,WAAA,GAAc,UAAA,GAAc,GAAG,CAAC,CAAC,CAAA;AAChF;AAGO,SAAS,wBAAwB,KAAA,EAA+B;AACrE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,OAAO,wBAAA,CAAyB,KAAK,OAAO,CAAA,IAAK,CAAC,qBAAA,CAAsB,OAAO,IAAI,OAAA,GAAU,IAAA;AAC/F;AA2BO,IAAM,kBAAA,GAAqB;AAAA,EAChC,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,eAAA;AAAA,EACV,YAAA,EAAc,oBAAA;AAAA,EACd,SAAA,EAAW,gBAAA;AAAA,EACX,SAAA,EAAW,gBAAA;AAAA,EACX,OAAA,EAAS,cAAA;AAAA,EACT,OAAA,EAAS;AACX;AAQO,SAAS,sBAAA,CAAuB,OAAe,UAAA,EAAkD;AACtG,EAAA,IAAI;AACF,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACnC,IAAA,MAAM,KAAM,MAAA,CAAiF,OAAA;AAC7F,IAAA,IAAI,OAAO,EAAA,EAAI,OAAA,KAAY,YAAY,EAAA,CAAG,OAAA,CAAQ,OAAO,UAAU,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF","file":"form-rescue.cjs","sourcesContent":["/**\n * Form rescue — the shared rules for saving a half-filled public form so the\n * team can follow up with a visitor who left before submitting.\n *\n * Pure and server-safe: the browser hook (`hooks/use-form-rescue`) and the\n * host's draft endpoint import the SAME allowlist, exclusions, caps and\n * completion math, so the server re-applies exactly the filter the client ran\n * and a rename here reaches both sides at once. Also exported through the\n * granular subpath `./utils/form-rescue` for server-only consumers.\n *\n * What a draft may carry:\n *   - values of ALLOWLISTED contact fields only (`FORM_RESCUE_VALUE_FIELDS`),\n *     trimmed and capped at `FORM_RESCUE_MAX_VALUE_CHARS`;\n *   - for every other field, only whether it is filled (never its value);\n *   - nothing whose name looks like a credential or payment field\n *     (`isExcludedRescueField`), whatever the allowlist says.\n *\n * Field values go to the host only, never to analytics: the PostHog events\n * (`captureFormRescueEvent`) carry ids, field names and percentages.\n */\n\n/**\n * A rescuable form, defined ONCE beside the form that uses it (the strategy a\n * form plugs in with). The browser sends `id`; the host validates it with\n * `getRescueForm` and shows `label` to the team. A new form is one\n * `defineRescueForm` call: no central list, no host change.\n */\nexport interface FormRescueDefinition {\n  /** Stable wire id: lower snake case, stored on every draft of this form. */\n  readonly id: string;\n  /** What the team reads on the alert (\"Contact form\"). */\n  readonly label: string;\n}\n\nconst FORM_ID_PATTERN = /^[a-z][a-z0-9_]{1,47}$/;\nconst definitions = new Map<string, FormRescueDefinition>();\n\n/**\n * Register a rescuable form. Idempotent for the same id and label (a module\n * evaluated twice registers once); a second, different definition of one id\n * throws, so two forms can never share a draft vocabulary.\n */\nexport function defineRescueForm(definition: FormRescueDefinition): FormRescueDefinition {\n  if (!FORM_ID_PATTERN.test(definition.id)) throw new Error(`[form-rescue] invalid form id \"${definition.id}\"`);\n  const existing = definitions.get(definition.id);\n  if (existing) {\n    if (existing.label !== definition.label) {\n      throw new Error(`[form-rescue] form id \"${definition.id}\" is already defined as \"${existing.label}\"`);\n    }\n    return existing;\n  }\n  const frozen = Object.freeze({ id: definition.id, label: definition.label });\n  definitions.set(frozen.id, frozen);\n  return frozen;\n}\n\n/** The registered definition for a wire id, or null (unknown ids are refused by the host). */\nexport function getRescueForm(id: unknown): FormRescueDefinition | null {\n  return typeof id === 'string' ? (definitions.get(id) ?? null) : null;\n}\n\n/** Every registered form, for a host listing them. */\nexport function listRescueForms(): FormRescueDefinition[] {\n  return [...definitions.values()];\n}\n\n/** The lib's own public forms. A host defines its own forms the same way, beside them. */\nexport const RESCUE_FORMS = {\n  contact: defineRescueForm({ id: 'contact', label: 'Contact form' }),\n  caseStudyPitch: defineRescueForm({ id: 'case_study_pitch', label: 'Case study pitch' }),\n  dataRoomRequest: defineRescueForm({ id: 'data_room_request', label: 'Data room request' }),\n  trustCenterRequest: defineRescueForm({ id: 'trust_center_request', label: 'Trust Center document request' }),\n  meetingBooking: defineRescueForm({ id: 'meeting_booking', label: 'Meeting booking' }),\n  waitlist: defineRescueForm({ id: 'waitlist', label: 'Waitlist' }),\n} as const;\n\n/**\n * Fields whose VALUES a draft keeps: who the visitor is and where they work.\n * Covers both naming schemes in use (the contact form's `name` / `companySize`,\n * the meeting booking's HubSpot `firstName` / `company` / `jobtitle`).\n * Free text (`message`) and phone numbers are reported as filled only.\n */\nexport const FORM_RESCUE_VALUE_FIELDS = [\n  'email',\n  'name',\n  'firstName',\n  'lastName',\n  'company',\n  'jobtitle',\n  'companySize',\n  'linkedin_url',\n] as const;\n\n/** Never send or store these, whatever the allowlist says. */\nconst EXCLUDED_FIELD_PATTERN =\n  /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;\n\nexport function isExcludedRescueField(name: string): boolean {\n  return EXCLUDED_FIELD_PATTERN.test(name);\n}\n\n/** Longest value a draft keeps per field. */\nexport const FORM_RESCUE_MAX_VALUE_CHARS = 200;\n/** Save this long after the visitor stops typing. */\nexport const FORM_RESCUE_DEBOUNCE_MS = 1500;\n/** Most fields a draft reports (filled names), a bound on the payload. */\nexport const FORM_RESCUE_MAX_FIELDS = 40;\n\n/** Body keys a form's SUBMIT carries so the host can close the matching draft. */\nexport const FORM_RESCUE_ATTEMPT_FIELD = 'form_attempt_id';\nexport const FORM_RESCUE_RESUME_FIELD = 'form_resume_token';\n/** Every rescue key that rides in a submit body. Hosts forwarding a payload upstream strip by THIS array. */\nexport const FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD] as const;\n\n/** Query parameter a resume link carries. */\nexport const FORM_RESCUE_RESUME_PARAM = 'resume';\n\n/** Draft lifecycle. `submitted` is final; `rescued` can still become `submitted`. */\nexport const FORM_DRAFT_STATUSES = ['started', 'rescuable', 'rescued', 'submitted'] as const;\nexport type FormDraftStatus = (typeof FORM_DRAFT_STATUSES)[number];\n\n/** Why a due draft was settled WITHOUT alerting the team (stored on the draft). */\nexport const FORM_RESCUE_SKIP_REASONS = {\n  finishedElsewhere: 'finished_elsewhere',\n  alreadyRescued: 'already_rescued',\n  internal: 'internal_email',\n} as const;\nexport type FormRescueSkipReason = (typeof FORM_RESCUE_SKIP_REASONS)[keyof typeof FORM_RESCUE_SKIP_REASONS];\n\n/** Same shape the host's `contact_submissions.email` check accepts. */\nconst EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$/;\n\nexport function isRescueEmail(value: unknown): value is string {\n  return typeof value === 'string' && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());\n}\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport function isFormAttemptId(value: unknown): value is string {\n  return typeof value === 'string' && UUID_PATTERN.test(value);\n}\n\nfunction isFilled(value: unknown): boolean {\n  if (value == null) return false;\n  if (typeof value === 'string') return value.trim().length > 0;\n  if (typeof value === 'boolean') return value;\n  if (Array.isArray(value)) return value.length > 0;\n  if (typeof value === 'object') return Object.values(value as Record<string, unknown>).some(isFilled);\n  return true;\n}\n\n/**\n * Keep only allowlisted, non-excluded string values, trimmed and capped.\n * The ONE filter, run by the browser before sending and by the host before storing.\n */\nexport function sanitizeRescueValues(values: Record<string, unknown> | null | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  if (!values || typeof values !== 'object') return out;\n  for (const key of FORM_RESCUE_VALUE_FIELDS) {\n    if (isExcludedRescueField(key)) continue;\n    const raw = values[key];\n    if (typeof raw !== 'string') continue;\n    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);\n    if (trimmed) out[key] = trimmed;\n  }\n  return out;\n}\n\n/** Names of the given fields that hold something, credentials never included. */\nexport function filledRescueFields(values: Record<string, unknown>, fieldNames: readonly string[]): string[] {\n  return fieldNames\n    .filter(name => !isExcludedRescueField(name) && isFilled(values[name]))\n    .slice(0, FORM_RESCUE_MAX_FIELDS);\n}\n\nexport function rescueCompletionPct(filledCount: number, totalCount: number): number {\n  if (totalCount <= 0) return 0;\n  return Math.max(0, Math.min(100, Math.round((filledCount / totalCount) * 100)));\n}\n\n/** A field NAME the host stores (`last_field`, `fields_filled`); bounded, printable. */\nexport function sanitizeRescueFieldName(value: unknown): string | null {\n  if (typeof value !== 'string') return null;\n  const trimmed = value.trim();\n  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;\n}\n\n/** A form's progress at one moment: allowlisted values, filled field names, position. */\nexport interface FormDraftProgress {\n  values: Record<string, string>;\n  fields_filled: string[];\n  last_field: string | null;\n  completion_pct: number;\n}\n\n/** What the browser sends on every save (`POST <formDraftsUrl>`), beside the humanity signals. */\nexport interface FormDraftSaveRequest extends FormDraftProgress {\n  /** The attempt's idempotency key: every save of one attempt updates one draft. */\n  attempt_id: string;\n  /** A `FormRescueDefinition.id`. */\n  form_id: string;\n  source_path: string;\n  utm?: Partial<Record<'source' | 'medium' | 'campaign' | 'content' | 'term', string>>;\n}\n\n/** What the host answers a resume link with: the allowlisted values, nothing internal. */\nexport interface FormDraftResumeResponse {\n  form_id: string;\n  values: Record<string, string>;\n}\n\n/** The PostHog events this feature emits. Properties are ids, names and numbers, never values. */\nexport const FORM_RESCUE_EVENTS = {\n  started: 'form_started',\n  progress: 'form_progress',\n  leadCaptured: 'form_lead_captured',\n  abandoned: 'form_abandoned',\n  submitted: 'form_submitted',\n  rescued: 'form_rescued',\n  resumed: 'form_resumed',\n} as const;\n\ntype AnalyticsValue = string | number | boolean | string[] | null;\n\n/**\n * Send one form event to PostHog when the page loaded it (GTM exposes\n * `window.posthog`); a no-op otherwise. Never throws.\n */\nexport function captureFormRescueEvent(event: string, properties: Record<string, AnalyticsValue>): void {\n  try {\n    if (typeof window === 'undefined') return;\n    const ph = (window as unknown as { posthog?: { capture?: (e: string, p: object) => void } }).posthog;\n    if (typeof ph?.capture === 'function') ph.capture(event, properties);\n  } catch {\n    // Analytics never breaks a form.\n  }\n}\n"]}

package/dist/utils/form-rescue.d.ts

@@ -0,0 +1,133 @@
+/**
+ * Form rescue — the shared rules for saving a half-filled public form so the
+ * team can follow up with a visitor who left before submitting.
+ *
+ * Pure and server-safe: the browser hook (`hooks/use-form-rescue`) and the
+ * host's draft endpoint import the SAME allowlist, exclusions, caps and
+ * completion math, so the server re-applies exactly the filter the client ran
+ * and a rename here reaches both sides at once. Also exported through the
+ * granular subpath `./utils/form-rescue` for server-only consumers.
+ *
+ * What a draft may carry:
+ *   - values of ALLOWLISTED contact fields only (`FORM_RESCUE_VALUE_FIELDS`),
+ *     trimmed and capped at `FORM_RESCUE_MAX_VALUE_CHARS`;
+ *   - for every other field, only whether it is filled (never its value);
+ *   - nothing whose name looks like a credential or payment field
+ *     (`isExcludedRescueField`), whatever the allowlist says.
+ *
+ * Field values go to the host only, never to analytics: the PostHog events
+ * (`captureFormRescueEvent`) carry ids, field names and percentages.
+ */
+/**
+ * A rescuable form, defined ONCE beside the form that uses it (the strategy a
+ * form plugs in with). The browser sends `id`; the host validates it with
+ * `getRescueForm` and shows `label` to the team. A new form is one
+ * `defineRescueForm` call: no central list, no host change.
+ */
+export interface FormRescueDefinition {
+    /** Stable wire id: lower snake case, stored on every draft of this form. */
+    readonly id: string;
+    /** What the team reads on the alert ("Contact form"). */
+    readonly label: string;
+}
+/**
+ * Register a rescuable form. Idempotent for the same id and label (a module
+ * evaluated twice registers once); a second, different definition of one id
+ * throws, so two forms can never share a draft vocabulary.
+ */
+export declare function defineRescueForm(definition: FormRescueDefinition): FormRescueDefinition;
+/** The registered definition for a wire id, or null (unknown ids are refused by the host). */
+export declare function getRescueForm(id: unknown): FormRescueDefinition | null;
+/** Every registered form, for a host listing them. */
+export declare function listRescueForms(): FormRescueDefinition[];
+/** The lib's own public forms. A host defines its own forms the same way, beside them. */
+export declare const RESCUE_FORMS: {
+    readonly contact: FormRescueDefinition;
+    readonly caseStudyPitch: FormRescueDefinition;
+    readonly dataRoomRequest: FormRescueDefinition;
+    readonly trustCenterRequest: FormRescueDefinition;
+    readonly meetingBooking: FormRescueDefinition;
+    readonly waitlist: FormRescueDefinition;
+};
+/**
+ * Fields whose VALUES a draft keeps: who the visitor is and where they work.
+ * Covers both naming schemes in use (the contact form's `name` / `companySize`,
+ * the meeting booking's HubSpot `firstName` / `company` / `jobtitle`).
+ * Free text (`message`) and phone numbers are reported as filled only.
+ */
+export declare const FORM_RESCUE_VALUE_FIELDS: readonly ["email", "name", "firstName", "lastName", "company", "jobtitle", "companySize", "linkedin_url"];
+export declare function isExcludedRescueField(name: string): boolean;
+/** Longest value a draft keeps per field. */
+export declare const FORM_RESCUE_MAX_VALUE_CHARS = 200;
+/** Save this long after the visitor stops typing. */
+export declare const FORM_RESCUE_DEBOUNCE_MS = 1500;
+/** Most fields a draft reports (filled names), a bound on the payload. */
+export declare const FORM_RESCUE_MAX_FIELDS = 40;
+/** Body keys a form's SUBMIT carries so the host can close the matching draft. */
+export declare const FORM_RESCUE_ATTEMPT_FIELD = "form_attempt_id";
+export declare const FORM_RESCUE_RESUME_FIELD = "form_resume_token";
+/** Every rescue key that rides in a submit body. Hosts forwarding a payload upstream strip by THIS array. */
+export declare const FORM_RESCUE_SUBMIT_KEYS: readonly ["form_attempt_id", "form_resume_token"];
+/** Query parameter a resume link carries. */
+export declare const FORM_RESCUE_RESUME_PARAM = "resume";
+/** Draft lifecycle. `submitted` is final; `rescued` can still become `submitted`. */
+export declare const FORM_DRAFT_STATUSES: readonly ["started", "rescuable", "rescued", "submitted"];
+export type FormDraftStatus = (typeof FORM_DRAFT_STATUSES)[number];
+/** Why a due draft was settled WITHOUT alerting the team (stored on the draft). */
+export declare const FORM_RESCUE_SKIP_REASONS: {
+    readonly finishedElsewhere: "finished_elsewhere";
+    readonly alreadyRescued: "already_rescued";
+    readonly internal: "internal_email";
+};
+export type FormRescueSkipReason = (typeof FORM_RESCUE_SKIP_REASONS)[keyof typeof FORM_RESCUE_SKIP_REASONS];
+export declare function isRescueEmail(value: unknown): value is string;
+export declare function isFormAttemptId(value: unknown): value is string;
+/**
+ * Keep only allowlisted, non-excluded string values, trimmed and capped.
+ * The ONE filter, run by the browser before sending and by the host before storing.
+ */
+export declare function sanitizeRescueValues(values: Record<string, unknown> | null | undefined): Record<string, string>;
+/** Names of the given fields that hold something, credentials never included. */
+export declare function filledRescueFields(values: Record<string, unknown>, fieldNames: readonly string[]): string[];
+export declare function rescueCompletionPct(filledCount: number, totalCount: number): number;
+/** A field NAME the host stores (`last_field`, `fields_filled`); bounded, printable. */
+export declare function sanitizeRescueFieldName(value: unknown): string | null;
+/** A form's progress at one moment: allowlisted values, filled field names, position. */
+export interface FormDraftProgress {
+    values: Record<string, string>;
+    fields_filled: string[];
+    last_field: string | null;
+    completion_pct: number;
+}
+/** What the browser sends on every save (`POST <formDraftsUrl>`), beside the humanity signals. */
+export interface FormDraftSaveRequest extends FormDraftProgress {
+    /** The attempt's idempotency key: every save of one attempt updates one draft. */
+    attempt_id: string;
+    /** A `FormRescueDefinition.id`. */
+    form_id: string;
+    source_path: string;
+    utm?: Partial<Record<'source' | 'medium' | 'campaign' | 'content' | 'term', string>>;
+}
+/** What the host answers a resume link with: the allowlisted values, nothing internal. */
+export interface FormDraftResumeResponse {
+    form_id: string;
+    values: Record<string, string>;
+}
+/** The PostHog events this feature emits. Properties are ids, names and numbers, never values. */
+export declare const FORM_RESCUE_EVENTS: {
+    readonly started: "form_started";
+    readonly progress: "form_progress";
+    readonly leadCaptured: "form_lead_captured";
+    readonly abandoned: "form_abandoned";
+    readonly submitted: "form_submitted";
+    readonly rescued: "form_rescued";
+    readonly resumed: "form_resumed";
+};
+type AnalyticsValue = string | number | boolean | string[] | null;
+/**
+ * Send one form event to PostHog when the page loaded it (GTM exposes
+ * `window.posthog`); a no-op otherwise. Never throws.
+ */
+export declare function captureFormRescueEvent(event: string, properties: Record<string, AnalyticsValue>): void;
+export {};
+//# sourceMappingURL=form-rescue.d.ts.map

package/dist/utils/form-rescue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-rescue.d.ts","sourceRoot":"","sources":["../../src/utils/form-rescue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAKD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,oBAAoB,GAAG,oBAAoB,CAYvF;AAED,8FAA8F;AAC9F,wBAAgB,aAAa,CAAC,EAAE,EAAE,OAAO,GAAG,oBAAoB,GAAG,IAAI,CAEtE;AAED,sDAAsD;AACtD,wBAAgB,eAAe,IAAI,oBAAoB,EAAE,CAExD;AAED,0FAA0F;AAC1F,eAAO,MAAM,YAAY;;;;;;;CAOf,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,2GAS3B,CAAC;AAMX,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,qDAAqD;AACrD,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAC3D,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAC5D,6GAA6G;AAC7G,eAAO,MAAM,uBAAuB,mDAAiE,CAAC;AAEtG,6CAA6C;AAC7C,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAEjD,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,2DAA4D,CAAC;AAC7F,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,mFAAmF;AACnF,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,OAAO,wBAAwB,CAAC,CAAC;AAK5G,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAID,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE/D;AAWD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAW/G;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAI3G;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGnF;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIrE;AAED,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtF;AAED,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,kGAAkG;AAClG,eAAO,MAAM,kBAAkB;;;;;;;;CAQrB,CAAC;AAEX,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;AAElE;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAQtG"}

package/dist/utils/form-rescue.js

@@ -0,0 +1,118 @@
+// src/utils/form-rescue.ts
+var FORM_ID_PATTERN = /^[a-z][a-z0-9_]{1,47}$/;
+var definitions = /* @__PURE__ */ new Map();
+function defineRescueForm(definition) {
+  if (!FORM_ID_PATTERN.test(definition.id)) throw new Error(`[form-rescue] invalid form id "${definition.id}"`);
+  const existing = definitions.get(definition.id);
+  if (existing) {
+    if (existing.label !== definition.label) {
+      throw new Error(`[form-rescue] form id "${definition.id}" is already defined as "${existing.label}"`);
+    }
+    return existing;
+  }
+  const frozen = Object.freeze({ id: definition.id, label: definition.label });
+  definitions.set(frozen.id, frozen);
+  return frozen;
+}
+function getRescueForm(id) {
+  return typeof id === "string" ? definitions.get(id) ?? null : null;
+}
+function listRescueForms() {
+  return [...definitions.values()];
+}
+var RESCUE_FORMS = {
+  contact: defineRescueForm({ id: "contact", label: "Contact form" }),
+  caseStudyPitch: defineRescueForm({ id: "case_study_pitch", label: "Case study pitch" }),
+  dataRoomRequest: defineRescueForm({ id: "data_room_request", label: "Data room request" }),
+  trustCenterRequest: defineRescueForm({ id: "trust_center_request", label: "Trust Center document request" }),
+  meetingBooking: defineRescueForm({ id: "meeting_booking", label: "Meeting booking" }),
+  waitlist: defineRescueForm({ id: "waitlist", label: "Waitlist" })
+};
+var FORM_RESCUE_VALUE_FIELDS = [
+  "email",
+  "name",
+  "firstName",
+  "lastName",
+  "company",
+  "jobtitle",
+  "companySize",
+  "linkedin_url"
+];
+var EXCLUDED_FIELD_PATTERN = /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;
+function isExcludedRescueField(name) {
+  return EXCLUDED_FIELD_PATTERN.test(name);
+}
+var FORM_RESCUE_MAX_VALUE_CHARS = 200;
+var FORM_RESCUE_DEBOUNCE_MS = 1500;
+var FORM_RESCUE_MAX_FIELDS = 40;
+var FORM_RESCUE_ATTEMPT_FIELD = "form_attempt_id";
+var FORM_RESCUE_RESUME_FIELD = "form_resume_token";
+var FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD];
+var FORM_RESCUE_RESUME_PARAM = "resume";
+var FORM_DRAFT_STATUSES = ["started", "rescuable", "rescued", "submitted"];
+var FORM_RESCUE_SKIP_REASONS = {
+  finishedElsewhere: "finished_elsewhere",
+  alreadyRescued: "already_rescued",
+  internal: "internal_email"
+};
+var EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/;
+function isRescueEmail(value) {
+  return typeof value === "string" && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());
+}
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isFormAttemptId(value) {
+  return typeof value === "string" && UUID_PATTERN.test(value);
+}
+function isFilled(value) {
+  if (value == null) return false;
+  if (typeof value === "string") return value.trim().length > 0;
+  if (typeof value === "boolean") return value;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === "object") return Object.values(value).some(isFilled);
+  return true;
+}
+function sanitizeRescueValues(values) {
+  const out = {};
+  if (!values || typeof values !== "object") return out;
+  for (const key of FORM_RESCUE_VALUE_FIELDS) {
+    if (isExcludedRescueField(key)) continue;
+    const raw = values[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);
+    if (trimmed) out[key] = trimmed;
+  }
+  return out;
+}
+function filledRescueFields(values, fieldNames) {
+  return fieldNames.filter((name) => !isExcludedRescueField(name) && isFilled(values[name])).slice(0, FORM_RESCUE_MAX_FIELDS);
+}
+function rescueCompletionPct(filledCount, totalCount) {
+  if (totalCount <= 0) return 0;
+  return Math.max(0, Math.min(100, Math.round(filledCount / totalCount * 100)));
+}
+function sanitizeRescueFieldName(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;
+}
+var FORM_RESCUE_EVENTS = {
+  started: "form_started",
+  progress: "form_progress",
+  leadCaptured: "form_lead_captured",
+  abandoned: "form_abandoned",
+  submitted: "form_submitted",
+  rescued: "form_rescued",
+  resumed: "form_resumed"
+};
+function captureFormRescueEvent(event, properties) {
+  try {
+    if (typeof window === "undefined") return;
+    const ph = window.posthog;
+    if (typeof ph?.capture === "function") ph.capture(event, properties);
+  } catch {
+  }
+}
+
+export { FORM_DRAFT_STATUSES, FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_DEBOUNCE_MS, FORM_RESCUE_EVENTS, FORM_RESCUE_MAX_FIELDS, FORM_RESCUE_MAX_VALUE_CHARS, FORM_RESCUE_RESUME_FIELD, FORM_RESCUE_RESUME_PARAM, FORM_RESCUE_SKIP_REASONS, FORM_RESCUE_SUBMIT_KEYS, FORM_RESCUE_VALUE_FIELDS, RESCUE_FORMS, captureFormRescueEvent, defineRescueForm, filledRescueFields, getRescueForm, isExcludedRescueField, isFormAttemptId, isRescueEmail, listRescueForms, rescueCompletionPct, sanitizeRescueFieldName, sanitizeRescueValues };
+//# sourceMappingURL=form-rescue.js.map
+//# sourceMappingURL=form-rescue.js.map

package/dist/utils/form-rescue.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/form-rescue.ts"],"names":[],"mappings":";AAkCA,IAAM,eAAA,GAAkB,wBAAA;AACxB,IAAM,WAAA,uBAAkB,GAAA,EAAkC;AAOnD,SAAS,iBAAiB,UAAA,EAAwD;AACvF,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,UAAA,CAAW,EAAE,CAAA,CAAA,CAAG,CAAA;AAC5G,EAAA,MAAM,QAAA,GAAW,WAAA,CAAY,GAAA,CAAI,UAAA,CAAW,EAAE,CAAA;AAC9C,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,IAAI,QAAA,CAAS,KAAA,KAAU,UAAA,CAAW,KAAA,EAAO;AACvC,MAAA,MAAM,IAAI,MAAM,CAAA,uBAAA,EAA0B,UAAA,CAAW,EAAE,CAAA,yBAAA,EAA4B,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,IACtG;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,EAAE,EAAA,EAAI,WAAW,EAAA,EAAI,KAAA,EAAO,UAAA,CAAW,KAAA,EAAO,CAAA;AAC3E,EAAA,WAAA,CAAY,GAAA,CAAI,MAAA,CAAO,EAAA,EAAI,MAAM,CAAA;AACjC,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,cAAc,EAAA,EAA0C;AACtE,EAAA,OAAO,OAAO,EAAA,KAAO,QAAA,GAAY,YAAY,GAAA,CAAI,EAAE,KAAK,IAAA,GAAQ,IAAA;AAClE;AAGO,SAAS,eAAA,GAA0C;AACxD,EAAA,OAAO,CAAC,GAAG,WAAA,CAAY,MAAA,EAAQ,CAAA;AACjC;AAGO,IAAM,YAAA,GAAe;AAAA,EAC1B,SAAS,gBAAA,CAAiB,EAAE,IAAI,SAAA,EAAW,KAAA,EAAO,gBAAgB,CAAA;AAAA,EAClE,gBAAgB,gBAAA,CAAiB,EAAE,IAAI,kBAAA,EAAoB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACtF,iBAAiB,gBAAA,CAAiB,EAAE,IAAI,mBAAA,EAAqB,KAAA,EAAO,qBAAqB,CAAA;AAAA,EACzF,oBAAoB,gBAAA,CAAiB,EAAE,IAAI,sBAAA,EAAwB,KAAA,EAAO,iCAAiC,CAAA;AAAA,EAC3G,gBAAgB,gBAAA,CAAiB,EAAE,IAAI,iBAAA,EAAmB,KAAA,EAAO,mBAAmB,CAAA;AAAA,EACpF,UAAU,gBAAA,CAAiB,EAAE,IAAI,UAAA,EAAY,KAAA,EAAO,YAAY;AAClE;AAQO,IAAM,wBAAA,GAA2B;AAAA,EACtC,OAAA;AAAA,EACA,MAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF;AAGA,IAAM,sBAAA,GACJ,6FAAA;AAEK,SAAS,sBAAsB,IAAA,EAAuB;AAC3D,EAAA,OAAO,sBAAA,CAAuB,KAAK,IAAI,CAAA;AACzC;AAGO,IAAM,2BAAA,GAA8B;AAEpC,IAAM,uBAAA,GAA0B;AAEhC,IAAM,sBAAA,GAAyB;AAG/B,IAAM,yBAAA,GAA4B;AAClC,IAAM,wBAAA,GAA2B;AAEjC,IAAM,uBAAA,GAA0B,CAAC,yBAAA,EAA2B,wBAAwB;AAGpF,IAAM,wBAAA,GAA2B;AAGjC,IAAM,mBAAA,GAAsB,CAAC,SAAA,EAAW,WAAA,EAAa,WAAW,WAAW;AAI3E,IAAM,wBAAA,GAA2B;AAAA,EACtC,iBAAA,EAAmB,oBAAA;AAAA,EACnB,cAAA,EAAgB,iBAAA;AAAA,EAChB,QAAA,EAAU;AACZ;AAIA,IAAM,aAAA,GAAgB,kDAAA;AAEf,SAAS,cAAc,KAAA,EAAiC;AAC7D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,IAAU,+BAA+B,aAAA,CAAc,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAAA;AACpH;AAEA,IAAM,YAAA,GAAe,iEAAA;AAEd,SAAS,gBAAgB,KAAA,EAAiC;AAC/D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,YAAA,CAAa,KAAK,KAAK,CAAA;AAC7D;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,SAAiB,KAAA,CAAM,IAAA,GAAO,MAAA,GAAS,CAAA;AAC5D,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,KAAA;AACvC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,GAAS,CAAA;AAChD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,OAAO,MAAA,CAAO,KAAgC,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA;AACnG,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,qBAAqB,MAAA,EAA4E;AAC/G,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,GAAA;AAClD,EAAA,KAAA,MAAW,OAAO,wBAAA,EAA0B;AAC1C,IAAA,IAAI,qBAAA,CAAsB,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,GAAA,GAAM,OAAO,GAAG,CAAA;AACtB,IAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,IAAA,MAAM,UAAU,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,2BAA2B,CAAA;AAC/D,IAAA,IAAI,OAAA,EAAS,GAAA,CAAI,GAAG,CAAA,GAAI,OAAA;AAAA,EAC1B;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,kBAAA,CAAmB,QAAiC,UAAA,EAAyC;AAC3G,EAAA,OAAO,UAAA,CACJ,MAAA,CAAO,CAAA,IAAA,KAAQ,CAAC,sBAAsB,IAAI,CAAA,IAAK,QAAA,CAAS,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA,CACrE,KAAA,CAAM,GAAG,sBAAsB,CAAA;AACpC;AAEO,SAAS,mBAAA,CAAoB,aAAqB,UAAA,EAA4B;AACnF,EAAA,IAAI,UAAA,IAAc,GAAG,OAAO,CAAA;AAC5B,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,KAAA,CAAO,WAAA,GAAc,UAAA,GAAc,GAAG,CAAC,CAAC,CAAA;AAChF;AAGO,SAAS,wBAAwB,KAAA,EAA+B;AACrE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,OAAO,wBAAA,CAAyB,KAAK,OAAO,CAAA,IAAK,CAAC,qBAAA,CAAsB,OAAO,IAAI,OAAA,GAAU,IAAA;AAC/F;AA2BO,IAAM,kBAAA,GAAqB;AAAA,EAChC,OAAA,EAAS,cAAA;AAAA,EACT,QAAA,EAAU,eAAA;AAAA,EACV,YAAA,EAAc,oBAAA;AAAA,EACd,SAAA,EAAW,gBAAA;AAAA,EACX,SAAA,EAAW,gBAAA;AAAA,EACX,OAAA,EAAS,cAAA;AAAA,EACT,OAAA,EAAS;AACX;AAQO,SAAS,sBAAA,CAAuB,OAAe,UAAA,EAAkD;AACtG,EAAA,IAAI;AACF,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACnC,IAAA,MAAM,KAAM,MAAA,CAAiF,OAAA;AAC7F,IAAA,IAAI,OAAO,EAAA,EAAI,OAAA,KAAY,YAAY,EAAA,CAAG,OAAA,CAAQ,OAAO,UAAU,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF","file":"form-rescue.js","sourcesContent":["/**\n * Form rescue — the shared rules for saving a half-filled public form so the\n * team can follow up with a visitor who left before submitting.\n *\n * Pure and server-safe: the browser hook (`hooks/use-form-rescue`) and the\n * host's draft endpoint import the SAME allowlist, exclusions, caps and\n * completion math, so the server re-applies exactly the filter the client ran\n * and a rename here reaches both sides at once. Also exported through the\n * granular subpath `./utils/form-rescue` for server-only consumers.\n *\n * What a draft may carry:\n *   - values of ALLOWLISTED contact fields only (`FORM_RESCUE_VALUE_FIELDS`),\n *     trimmed and capped at `FORM_RESCUE_MAX_VALUE_CHARS`;\n *   - for every other field, only whether it is filled (never its value);\n *   - nothing whose name looks like a credential or payment field\n *     (`isExcludedRescueField`), whatever the allowlist says.\n *\n * Field values go to the host only, never to analytics: the PostHog events\n * (`captureFormRescueEvent`) carry ids, field names and percentages.\n */\n\n/**\n * A rescuable form, defined ONCE beside the form that uses it (the strategy a\n * form plugs in with). The browser sends `id`; the host validates it with\n * `getRescueForm` and shows `label` to the team. A new form is one\n * `defineRescueForm` call: no central list, no host change.\n */\nexport interface FormRescueDefinition {\n  /** Stable wire id: lower snake case, stored on every draft of this form. */\n  readonly id: string;\n  /** What the team reads on the alert (\"Contact form\"). */\n  readonly label: string;\n}\n\nconst FORM_ID_PATTERN = /^[a-z][a-z0-9_]{1,47}$/;\nconst definitions = new Map<string, FormRescueDefinition>();\n\n/**\n * Register a rescuable form. Idempotent for the same id and label (a module\n * evaluated twice registers once); a second, different definition of one id\n * throws, so two forms can never share a draft vocabulary.\n */\nexport function defineRescueForm(definition: FormRescueDefinition): FormRescueDefinition {\n  if (!FORM_ID_PATTERN.test(definition.id)) throw new Error(`[form-rescue] invalid form id \"${definition.id}\"`);\n  const existing = definitions.get(definition.id);\n  if (existing) {\n    if (existing.label !== definition.label) {\n      throw new Error(`[form-rescue] form id \"${definition.id}\" is already defined as \"${existing.label}\"`);\n    }\n    return existing;\n  }\n  const frozen = Object.freeze({ id: definition.id, label: definition.label });\n  definitions.set(frozen.id, frozen);\n  return frozen;\n}\n\n/** The registered definition for a wire id, or null (unknown ids are refused by the host). */\nexport function getRescueForm(id: unknown): FormRescueDefinition | null {\n  return typeof id === 'string' ? (definitions.get(id) ?? null) : null;\n}\n\n/** Every registered form, for a host listing them. */\nexport function listRescueForms(): FormRescueDefinition[] {\n  return [...definitions.values()];\n}\n\n/** The lib's own public forms. A host defines its own forms the same way, beside them. */\nexport const RESCUE_FORMS = {\n  contact: defineRescueForm({ id: 'contact', label: 'Contact form' }),\n  caseStudyPitch: defineRescueForm({ id: 'case_study_pitch', label: 'Case study pitch' }),\n  dataRoomRequest: defineRescueForm({ id: 'data_room_request', label: 'Data room request' }),\n  trustCenterRequest: defineRescueForm({ id: 'trust_center_request', label: 'Trust Center document request' }),\n  meetingBooking: defineRescueForm({ id: 'meeting_booking', label: 'Meeting booking' }),\n  waitlist: defineRescueForm({ id: 'waitlist', label: 'Waitlist' }),\n} as const;\n\n/**\n * Fields whose VALUES a draft keeps: who the visitor is and where they work.\n * Covers both naming schemes in use (the contact form's `name` / `companySize`,\n * the meeting booking's HubSpot `firstName` / `company` / `jobtitle`).\n * Free text (`message`) and phone numbers are reported as filled only.\n */\nexport const FORM_RESCUE_VALUE_FIELDS = [\n  'email',\n  'name',\n  'firstName',\n  'lastName',\n  'company',\n  'jobtitle',\n  'companySize',\n  'linkedin_url',\n] as const;\n\n/** Never send or store these, whatever the allowlist says. */\nconst EXCLUDED_FIELD_PATTERN =\n  /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;\n\nexport function isExcludedRescueField(name: string): boolean {\n  return EXCLUDED_FIELD_PATTERN.test(name);\n}\n\n/** Longest value a draft keeps per field. */\nexport const FORM_RESCUE_MAX_VALUE_CHARS = 200;\n/** Save this long after the visitor stops typing. */\nexport const FORM_RESCUE_DEBOUNCE_MS = 1500;\n/** Most fields a draft reports (filled names), a bound on the payload. */\nexport const FORM_RESCUE_MAX_FIELDS = 40;\n\n/** Body keys a form's SUBMIT carries so the host can close the matching draft. */\nexport const FORM_RESCUE_ATTEMPT_FIELD = 'form_attempt_id';\nexport const FORM_RESCUE_RESUME_FIELD = 'form_resume_token';\n/** Every rescue key that rides in a submit body. Hosts forwarding a payload upstream strip by THIS array. */\nexport const FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD] as const;\n\n/** Query parameter a resume link carries. */\nexport const FORM_RESCUE_RESUME_PARAM = 'resume';\n\n/** Draft lifecycle. `submitted` is final; `rescued` can still become `submitted`. */\nexport const FORM_DRAFT_STATUSES = ['started', 'rescuable', 'rescued', 'submitted'] as const;\nexport type FormDraftStatus = (typeof FORM_DRAFT_STATUSES)[number];\n\n/** Why a due draft was settled WITHOUT alerting the team (stored on the draft). */\nexport const FORM_RESCUE_SKIP_REASONS = {\n  finishedElsewhere: 'finished_elsewhere',\n  alreadyRescued: 'already_rescued',\n  internal: 'internal_email',\n} as const;\nexport type FormRescueSkipReason = (typeof FORM_RESCUE_SKIP_REASONS)[keyof typeof FORM_RESCUE_SKIP_REASONS];\n\n/** Same shape the host's `contact_submissions.email` check accepts. */\nconst EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$/;\n\nexport function isRescueEmail(value: unknown): value is string {\n  return typeof value === 'string' && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());\n}\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport function isFormAttemptId(value: unknown): value is string {\n  return typeof value === 'string' && UUID_PATTERN.test(value);\n}\n\nfunction isFilled(value: unknown): boolean {\n  if (value == null) return false;\n  if (typeof value === 'string') return value.trim().length > 0;\n  if (typeof value === 'boolean') return value;\n  if (Array.isArray(value)) return value.length > 0;\n  if (typeof value === 'object') return Object.values(value as Record<string, unknown>).some(isFilled);\n  return true;\n}\n\n/**\n * Keep only allowlisted, non-excluded string values, trimmed and capped.\n * The ONE filter, run by the browser before sending and by the host before storing.\n */\nexport function sanitizeRescueValues(values: Record<string, unknown> | null | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  if (!values || typeof values !== 'object') return out;\n  for (const key of FORM_RESCUE_VALUE_FIELDS) {\n    if (isExcludedRescueField(key)) continue;\n    const raw = values[key];\n    if (typeof raw !== 'string') continue;\n    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);\n    if (trimmed) out[key] = trimmed;\n  }\n  return out;\n}\n\n/** Names of the given fields that hold something, credentials never included. */\nexport function filledRescueFields(values: Record<string, unknown>, fieldNames: readonly string[]): string[] {\n  return fieldNames\n    .filter(name => !isExcludedRescueField(name) && isFilled(values[name]))\n    .slice(0, FORM_RESCUE_MAX_FIELDS);\n}\n\nexport function rescueCompletionPct(filledCount: number, totalCount: number): number {\n  if (totalCount <= 0) return 0;\n  return Math.max(0, Math.min(100, Math.round((filledCount / totalCount) * 100)));\n}\n\n/** A field NAME the host stores (`last_field`, `fields_filled`); bounded, printable. */\nexport function sanitizeRescueFieldName(value: unknown): string | null {\n  if (typeof value !== 'string') return null;\n  const trimmed = value.trim();\n  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;\n}\n\n/** A form's progress at one moment: allowlisted values, filled field names, position. */\nexport interface FormDraftProgress {\n  values: Record<string, string>;\n  fields_filled: string[];\n  last_field: string | null;\n  completion_pct: number;\n}\n\n/** What the browser sends on every save (`POST <formDraftsUrl>`), beside the humanity signals. */\nexport interface FormDraftSaveRequest extends FormDraftProgress {\n  /** The attempt's idempotency key: every save of one attempt updates one draft. */\n  attempt_id: string;\n  /** A `FormRescueDefinition.id`. */\n  form_id: string;\n  source_path: string;\n  utm?: Partial<Record<'source' | 'medium' | 'campaign' | 'content' | 'term', string>>;\n}\n\n/** What the host answers a resume link with: the allowlisted values, nothing internal. */\nexport interface FormDraftResumeResponse {\n  form_id: string;\n  values: Record<string, string>;\n}\n\n/** The PostHog events this feature emits. Properties are ids, names and numbers, never values. */\nexport const FORM_RESCUE_EVENTS = {\n  started: 'form_started',\n  progress: 'form_progress',\n  leadCaptured: 'form_lead_captured',\n  abandoned: 'form_abandoned',\n  submitted: 'form_submitted',\n  rescued: 'form_rescued',\n  resumed: 'form_resumed',\n} as const;\n\ntype AnalyticsValue = string | number | boolean | string[] | null;\n\n/**\n * Send one form event to PostHog when the page loaded it (GTM exposes\n * `window.posthog`); a no-op otherwise. Never throws.\n */\nexport function captureFormRescueEvent(event: string, properties: Record<string, AnalyticsValue>): void {\n  try {\n    if (typeof window === 'undefined') return;\n    const ph = (window as unknown as { posthog?: { capture?: (e: string, p: object) => void } }).posthog;\n    if (typeof ph?.capture === 'function') ph.capture(event, properties);\n  } catch {\n    // Analytics never breaks a form.\n  }\n}\n"]}