@flamingo-stack/openframe-frontend-core 0.0.672 → 0.0.673-2406.7239.1

package/src/utils/form-rescue.ts

@@ -0,0 +1,237 @@
+/**
+ * Form rescue — the shared rules for saving a half-filled public form so the
+ * team can follow up with a visitor who left before submitting.
+ *
+ * Pure and server-safe: the browser hook (`hooks/use-form-rescue`) and the
+ * host's draft endpoint import the SAME allowlist, exclusions, caps and
+ * completion math, so the server re-applies exactly the filter the client ran
+ * and a rename here reaches both sides at once. Also exported through the
+ * granular subpath `./utils/form-rescue` for server-only consumers.
+ *
+ * What a draft may carry:
+ *   - values of ALLOWLISTED contact fields only (`FORM_RESCUE_VALUE_FIELDS`),
+ *     trimmed and capped at `FORM_RESCUE_MAX_VALUE_CHARS`;
+ *   - for every other field, only whether it is filled (never its value);
+ *   - nothing whose name looks like a credential or payment field
+ *     (`isExcludedRescueField`), whatever the allowlist says.
+ *
+ * Field values go to the host only, never to analytics: the PostHog events
+ * (`captureFormRescueEvent`) carry ids, field names and percentages.
+ */
+
+/**
+ * A rescuable form, defined ONCE beside the form that uses it (the strategy a
+ * form plugs in with). The browser sends `id`; the host validates it with
+ * `getRescueForm` and shows `label` to the team. A new form is one
+ * `defineRescueForm` call: no central list, no host change.
+ */
+export interface FormRescueDefinition {
+  /** Stable wire id: lower snake case, stored on every draft of this form. */
+  readonly id: string;
+  /** What the team reads on the alert ("Contact form"). */
+  readonly label: string;
+}
+
+const FORM_ID_PATTERN = /^[a-z][a-z0-9_]{1,47}$/;
+const definitions = new Map<string, FormRescueDefinition>();
+
+/**
+ * Register a rescuable form. Idempotent for the same id and label (a module
+ * evaluated twice registers once); a second, different definition of one id
+ * throws, so two forms can never share a draft vocabulary.
+ */
+export function defineRescueForm(definition: FormRescueDefinition): FormRescueDefinition {
+  if (!FORM_ID_PATTERN.test(definition.id)) throw new Error(`[form-rescue] invalid form id "${definition.id}"`);
+  const existing = definitions.get(definition.id);
+  if (existing) {
+    if (existing.label !== definition.label) {
+      throw new Error(`[form-rescue] form id "${definition.id}" is already defined as "${existing.label}"`);
+    }
+    return existing;
+  }
+  const frozen = Object.freeze({ id: definition.id, label: definition.label });
+  definitions.set(frozen.id, frozen);
+  return frozen;
+}
+
+/** The registered definition for a wire id, or null (unknown ids are refused by the host). */
+export function getRescueForm(id: unknown): FormRescueDefinition | null {
+  return typeof id === 'string' ? (definitions.get(id) ?? null) : null;
+}
+
+/** Every registered form, for a host listing them. */
+export function listRescueForms(): FormRescueDefinition[] {
+  return [...definitions.values()];
+}
+
+/** The lib's own public forms. A host defines its own forms the same way, beside them. */
+export const RESCUE_FORMS = {
+  contact: defineRescueForm({ id: 'contact', label: 'Contact form' }),
+  caseStudyPitch: defineRescueForm({ id: 'case_study_pitch', label: 'Case study pitch' }),
+  dataRoomRequest: defineRescueForm({ id: 'data_room_request', label: 'Data room request' }),
+  trustCenterRequest: defineRescueForm({ id: 'trust_center_request', label: 'Trust Center document request' }),
+  meetingBooking: defineRescueForm({ id: 'meeting_booking', label: 'Meeting booking' }),
+  waitlist: defineRescueForm({ id: 'waitlist', label: 'Waitlist' }),
+} as const;
+
+/**
+ * Fields whose VALUES a draft keeps: who the visitor is and where they work.
+ * Covers both naming schemes in use (the contact form's `name` / `companySize`,
+ * the meeting booking's HubSpot `firstName` / `company` / `jobtitle`).
+ * Free text (`message`) and phone numbers are reported as filled only.
+ */
+export const FORM_RESCUE_VALUE_FIELDS = [
+  'email',
+  'name',
+  'firstName',
+  'lastName',
+  'company',
+  'jobtitle',
+  'companySize',
+  'linkedin_url',
+] as const;
+
+/** Never send or store these, whatever the allowlist says. */
+const EXCLUDED_FIELD_PATTERN =
+  /pass(word|code)?|card|cvv|cvc|ssn|social.?security|iban|bank|routing|token|secret|otp|pin$/i;
+
+export function isExcludedRescueField(name: string): boolean {
+  return EXCLUDED_FIELD_PATTERN.test(name);
+}
+
+/** Longest value a draft keeps per field. */
+export const FORM_RESCUE_MAX_VALUE_CHARS = 200;
+/** Save this long after the visitor stops typing. */
+export const FORM_RESCUE_DEBOUNCE_MS = 1500;
+/** Most fields a draft reports (filled names), a bound on the payload. */
+export const FORM_RESCUE_MAX_FIELDS = 40;
+
+/** Body keys a form's SUBMIT carries so the host can close the matching draft. */
+export const FORM_RESCUE_ATTEMPT_FIELD = 'form_attempt_id';
+export const FORM_RESCUE_RESUME_FIELD = 'form_resume_token';
+/** Every rescue key that rides in a submit body. Hosts forwarding a payload upstream strip by THIS array. */
+export const FORM_RESCUE_SUBMIT_KEYS = [FORM_RESCUE_ATTEMPT_FIELD, FORM_RESCUE_RESUME_FIELD] as const;
+
+/** Query parameter a resume link carries. */
+export const FORM_RESCUE_RESUME_PARAM = 'resume';
+
+/** Draft lifecycle. `submitted` is final; `rescued` can still become `submitted`. */
+export const FORM_DRAFT_STATUSES = ['started', 'rescuable', 'rescued', 'submitted'] as const;
+export type FormDraftStatus = (typeof FORM_DRAFT_STATUSES)[number];
+
+/** Why a due draft was settled WITHOUT alerting the team (stored on the draft). */
+export const FORM_RESCUE_SKIP_REASONS = {
+  finishedElsewhere: 'finished_elsewhere',
+  alreadyRescued: 'already_rescued',
+  internal: 'internal_email',
+} as const;
+export type FormRescueSkipReason = (typeof FORM_RESCUE_SKIP_REASONS)[keyof typeof FORM_RESCUE_SKIP_REASONS];
+
+/** Same shape the host's `contact_submissions.email` check accepts. */
+const EMAIL_PATTERN = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/;
+
+export function isRescueEmail(value: unknown): value is string {
+  return typeof value === 'string' && value.length <= FORM_RESCUE_MAX_VALUE_CHARS && EMAIL_PATTERN.test(value.trim());
+}
+
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+export function isFormAttemptId(value: unknown): value is string {
+  return typeof value === 'string' && UUID_PATTERN.test(value);
+}
+
+function isFilled(value: unknown): boolean {
+  if (value == null) return false;
+  if (typeof value === 'string') return value.trim().length > 0;
+  if (typeof value === 'boolean') return value;
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === 'object') return Object.values(value as Record<string, unknown>).some(isFilled);
+  return true;
+}
+
+/**
+ * Keep only allowlisted, non-excluded string values, trimmed and capped.
+ * The ONE filter, run by the browser before sending and by the host before storing.
+ */
+export function sanitizeRescueValues(values: Record<string, unknown> | null | undefined): Record<string, string> {
+  const out: Record<string, string> = {};
+  if (!values || typeof values !== 'object') return out;
+  for (const key of FORM_RESCUE_VALUE_FIELDS) {
+    if (isExcludedRescueField(key)) continue;
+    const raw = values[key];
+    if (typeof raw !== 'string') continue;
+    const trimmed = raw.trim().slice(0, FORM_RESCUE_MAX_VALUE_CHARS);
+    if (trimmed) out[key] = trimmed;
+  }
+  return out;
+}
+
+/** Names of the given fields that hold something, credentials never included. */
+export function filledRescueFields(values: Record<string, unknown>, fieldNames: readonly string[]): string[] {
+  return fieldNames
+    .filter(name => !isExcludedRescueField(name) && isFilled(values[name]))
+    .slice(0, FORM_RESCUE_MAX_FIELDS);
+}
+
+export function rescueCompletionPct(filledCount: number, totalCount: number): number {
+  if (totalCount <= 0) return 0;
+  return Math.max(0, Math.min(100, Math.round((filledCount / totalCount) * 100)));
+}
+
+/** A field NAME the host stores (`last_field`, `fields_filled`); bounded, printable. */
+export function sanitizeRescueFieldName(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  const trimmed = value.trim();
+  return /^[A-Za-z0-9_.-]{1,64}$/.test(trimmed) && !isExcludedRescueField(trimmed) ? trimmed : null;
+}
+
+/** A form's progress at one moment: allowlisted values, filled field names, position. */
+export interface FormDraftProgress {
+  values: Record<string, string>;
+  fields_filled: string[];
+  last_field: string | null;
+  completion_pct: number;
+}
+
+/** What the browser sends on every save (`POST <formDraftsUrl>`), beside the humanity signals. */
+export interface FormDraftSaveRequest extends FormDraftProgress {
+  /** The attempt's idempotency key: every save of one attempt updates one draft. */
+  attempt_id: string;
+  /** A `FormRescueDefinition.id`. */
+  form_id: string;
+  source_path: string;
+  utm?: Partial<Record<'source' | 'medium' | 'campaign' | 'content' | 'term', string>>;
+}
+
+/** What the host answers a resume link with: the allowlisted values, nothing internal. */
+export interface FormDraftResumeResponse {
+  form_id: string;
+  values: Record<string, string>;
+}
+
+/** The PostHog events this feature emits. Properties are ids, names and numbers, never values. */
+export const FORM_RESCUE_EVENTS = {
+  started: 'form_started',
+  progress: 'form_progress',
+  leadCaptured: 'form_lead_captured',
+  abandoned: 'form_abandoned',
+  submitted: 'form_submitted',
+  rescued: 'form_rescued',
+  resumed: 'form_resumed',
+} as const;
+
+type AnalyticsValue = string | number | boolean | string[] | null;
+
+/**
+ * Send one form event to PostHog when the page loaded it (GTM exposes
+ * `window.posthog`); a no-op otherwise. Never throws.
+ */
+export function captureFormRescueEvent(event: string, properties: Record<string, AnalyticsValue>): void {
+  try {
+    if (typeof window === 'undefined') return;
+    const ph = (window as unknown as { posthog?: { capture?: (e: string, p: object) => void } }).posthog;
+    if (typeof ph?.capture === 'function') ph.capture(event, properties);
+  } catch {
+    // Analytics never breaks a form.
+  }
+}

package/src/utils/index.ts

@@ -387,6 +387,11 @@ export {
 // `./utils/humanity-signals` for server-only consumers.
 export * from './humanity-signals';
 
+// Form rescue rules (allowlist, exclusions, caps, lifecycle) — pure + server-safe
+// so the host's draft endpoint re-applies the same filter the browser hook runs.
+// Also exported via the granular subpath `./utils/form-rescue`.
+export * from './form-rescue';
+
 // Doc-source viewer utilities (path parsing, tree building, section extraction,
 // embed-URL conversion) — single home for all doc-viewer pure helpers across
 // hub + lib consumers (knowledge-base, data-room, and future sources).

package/dist/chunk-D55IENZJ.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-D55IENZJ.cjs","../src/contexts/endpoints-runtime-context.tsx"],"names":[],"mappings":"AAAA,qFAAY;AACZ;AACA;ACqBA,8BAA0C;AAqBnC,IAAM,wBAAA,EAA0B,kCAAA,IAA2C,CAAA;AAO3E,SAAS,mBAAA,CAAA,EAA+C;AAC7D,EAAA,OAAO,+BAAA,uBAAkC,CAAA;AAC3C;AASO,SAAS,2BAAA,CAAA,EAAgD;AAC9D,EAAA,MAAM,EAAA,EAAI,+BAAA,uBAAkC,CAAA;AAC5C,EAAA,GAAA,CAAI,CAAC,CAAA,EAAG;AACN,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,IAIF,CAAA;AAAA,EACF;AACA,EAAA,OAAO,CAAA;AACT;ADxDA;AACA;AACE;AACA;AACA;AACF,gLAAC","file":"/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-D55IENZJ.cjs","sourcesContent":[null,"'use client';\n\n/**\n * Endpoints runtime — sibling of ChatRuntime. Carries the API path\n * literals consumed by oss-lib components/hooks/utils so a host\n * application can override them (e.g. when running behind a reverse\n * proxy as `user1.openframe.ai` → `/api/mingo-guide/*`).\n *\n * The hub mounts `<HubRuntimeProvider>` at root with the\n * canonical hub paths; an embedded app mounts its own provider with\n * remapped paths. The pattern mirrors ChatRuntimeContext exactly:\n *\n *   - `useEndpointsRuntime()` returns null when no provider is mounted.\n *     For optional consumers that should gracefully no-op without one.\n *   - `useRequiredEndpointsRuntime()` throws on missing provider — for\n *     hooks/components that cannot function without endpoints.\n *\n * IMPORTANT for embedders: memoize the value passed to\n * `<EndpointsRuntimeContext.Provider value={...}>` (e.g. React.useMemo).\n * Reference changes invalidate downstream effect dependency arrays and\n * trigger unnecessary re-fetches.\n */\n\nimport { createContext, useContext } from 'react';\n\nexport interface EndpointsRuntime {\n  /** GET active announcement (used by `<AnnouncementBar>` mount fetch + refocus revalidation). */\n  announcementsUrl: string;\n  accessCode: {\n    /** POST validate access code. */\n    validateUrl: string;\n    /** POST consume / redeem access code after registration. */\n    consumeUrl: string;\n  };\n  /** POST contact-form submission. */\n  contactUrl: string;\n  /** GET base of the host's private-storage view proxy\n   *  (`<base>/<bucket>/<object>`). `ClaudeEmbed` derives artifact mirror\n   *  urls under it (`<base>/design-briefs/<uuid>.html`). OPTIONAL: a host\n   *  without the proxy simply omits it and claude embeds fall back to\n   *  claude.ai — no probing happens. */\n  storageViewBaseUrl?: string;\n}\n\nexport const EndpointsRuntimeContext = createContext<EndpointsRuntime | null>(null);\n\n/**\n * Optional read — returns null when no provider is mounted. Use for\n * surfaces that should silently skip the fetch (e.g. announcement\n * polling on a page rendered outside the provider tree).\n */\nexport function useEndpointsRuntime(): EndpointsRuntime | null {\n  return useContext(EndpointsRuntimeContext);\n}\n\n/**\n * Strict variant — throws on missing provider. Use for consumers that\n * cannot function without an endpoint (form submission, code\n * validation). In tests/Storybook, wrap with the hub's\n * `<HubRuntimeProvider>` or a stub\n * `<EndpointsRuntimeContext.Provider value={mockedEndpoints}>`.\n */\nexport function useRequiredEndpointsRuntime(): EndpointsRuntime {\n  const v = useContext(EndpointsRuntimeContext);\n  if (!v) {\n    throw new Error(\n      '[endpoints-runtime] hook called outside an <EndpointsRuntimeContext.Provider>. ' +\n        'Hub: mount <HubRuntimeProvider> in your providers tree. ' +\n        'Embedded app: mount your own provider with proxied URLs at the tree root. ' +\n        'Tests/Storybook: wrap render() in <EndpointsRuntimeContext.Provider value={mocked}>.',\n    );\n  }\n  return v;\n}\n"]}

package/dist/chunk-HOEVEB7N.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-HOEVEB7N.cjs","../src/components/contact/contact-form.tsx","../src/schemas/contact-schema.ts"],"names":[],"mappings":"AAAA,6rBAAY;AACZ;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACTA,8CAA4B;AAC5B,8BAAyC;AACzC,gDAAoC;ADWpC;AACA;AErCA,2BAAkB;AAKX,IAAM,mBAAA,EAAqB,CAAC,MAAA,EAAQ,OAAA,EAAS,QAAA,EAAU,SAAA,EAAW,UAAA,EAAY,OAAO,CAAA;AAErF,IAAM,sBAAA,EAAwB;AAAA,EACnC,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAA;AAKO,IAAM,2BAAA,EAA6B;AAAA,EACxC,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,oBAAA;AAAA,EACA,cAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA;AAWO,IAAM,kBAAA,EAAoB,OAAA,CAC9B,MAAA,CAAO,CAAA,CACP,GAAA,CAAI,EAAE,OAAA,EAAS,oCAAoC,CAAC,CAAA,CACpD,MAAA;AAAA,EACC,CAAA,GAAA,EAAA,GAAO;AACL,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,EAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,QAAA,CAAS,WAAA,CAAY,CAAA;AAC/C,MAAA,OAAO,KAAA,IAAS,eAAA,GAAkB,IAAA,CAAK,QAAA,CAAS,eAAe,CAAA;AAAA,IACjE,EAAA,UAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF,CAAA;AAAA,EACA;AAAA,IACE,OAAA,EAAS;AAAA,EACX;AACF,CAAA,CACC,QAAA,CAAS,CAAA,CACT,EAAA,CAAG,OAAA,CAAE,OAAA,CAAQ,EAAE,CAAC,CAAA;AASZ,IAAM,kBAAA,EAAoB,OAAA,CAAE,MAAA,CAAO;AAAA,EACxC,IAAA,EAAM,OAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,qCAAqC,CAAC,CAAA,CAAE,GAAA,CAAI,GAAA,EAAK,EAAE,OAAA,EAAS,mBAAmB,CAAC,CAAA;AAAA,EACnH,KAAA,EAAO,OAAA,CAAE,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,EAAE,OAAA,EAAS,qCAAqC,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAClF,YAAA,EAAc,iBAAA;AAAA,EACd,YAAA,EAAc,OAAA,CACX,MAAA,CAAO,CAAA,CACP,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,0CAA0C,CAAC,CAAA,CAC7D,GAAA,CAAI,GAAA,EAAK,EAAE,OAAA,EAAS,4BAA4B,CAAC,CAAA;AAAA,EACpD,OAAA,EAAS,OAAA,CACN,MAAA,CAAO,CAAA,CACP,GAAA,CAAI,EAAA,EAAI,EAAE,OAAA,EAAS,yCAAyC,CAAC,CAAA,CAC7D,GAAA,CAAI,GAAA,EAAM,EAAE,OAAA,EAAS,8CAA8C,CAAC,CAAA;AAAA,EACvE,OAAA,EAAS,OAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AAC/B,CAAC,CAAA;AAKM,IAAM,cAAA,EAAgB,iBAAA,CAAkB,MAAA,CAAO;AAAA,EACpD,WAAA,EAAa,OAAA,CACV,MAAA,CAAO,CAAA,CACP,QAAA,CAAS,CAAA,CACT,MAAA,CAAO,CAAA,GAAA,EAAA,GAAO,CAAC,IAAA,GAAO,kBAAA,CAAmB,QAAA,CAAS,GAA0C,CAAA,EAAG;AAAA,IAC9F,OAAA,EAAS;AAAA,EACX,CAAC,CAAA;AAAA,EACH,cAAA,EAAgB,OAAA,CACb,MAAA,CAAO,CAAA,CACP,QAAA,CAAS,CAAA,CACT,MAAA,CAAO,CAAA,GAAA,EAAA,GAAO,CAAC,IAAA,GAAO,qBAAA,CAAsB,QAAA,CAAS,GAA6C,CAAA,EAAG;AAAA,IACpG,OAAA,EAAS;AAAA,EACX,CAAC;AACL,CAAC,CAAA;AFTD;AACA;ACgKQ,+CAAA;AAhHD,SAAS,WAAA,CAAY;AAAA,EAC1B,MAAA;AAAA,EACA,oBAAA,EAAsB,0BAAA;AAAA,EACtB,MAAA;AAAA,EACA,eAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA,EAAa,CAAC,CAAA;AAAA,EACd,aAAA,EAAe,iBAAA;AAAA,EACf,cAAA;AAAA,EACA,aAAA;AAAA,EACA,mBAAA,EAAqB,KAAA;AAAA,EACrB,MAAA,EAAQ,WAAA;AAAA,EACR,QAAA;AAAA,EACA,WAAA,EAAa,qFAAA;AAAA,EACb,SAAA,EAAW,KAAA;AAAA,EACX,UAAA,EAAY,KAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,gBAAA,EAAkB,EAAA;AAAA,EAClB,YAAA,EAAc,cAAA;AAAA,EACd,mBAAA,EAAqB,eAAA;AAAA,EACrB,mBAAA,EAAqB,iBAAA;AAAA,EACrB,oBAAA,EAAsB;AACxB,EAAA,EAAsB,CAAC,CAAA,EAAG;AAMxB,EAAA,MAAM,YAAA,EAAc,kDAAA,CAAmB;AAKvC,EAAA,MAAM,kBAAA,EAAoB,oDAAA;AAAqB,IAC7C,MAAA;AAAA,IACA,kBAAA;AAAA,IACA;AAAA,EACF,CAAC,CAAA;AAID,EAAA,MAAM,CAAC,gBAAA,EAAkB,mBAAmB,EAAA,EAAI,6BAAA,KAAc,CAAA;AAI9D,EAAA,MAAM,EAAE,kBAAA,EAAoB,UAAA,EAAY,aAAa,EAAA,EAAI,kDAAA,CAAmB;AAE5E,EAAA,MAAM,aAAA,EAAe,eAAA,EAAiB,iBAAA,EAAmB,iBAAA,CAAkB,YAAA;AAG3E,EAAA,MAAM,UAAA,EAAY,eAAA,EAAiB,MAAA,EAAQ,iBAAA,CAAkB,SAAA;AAE7D,EAAA,MAAM;AAAA,IACJ,QAAA;AAAA,IACA,YAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA,EAAW,EAAE,OAAO,CAAA;AAAA,IACpB;AAAA,EACF,EAAA,EAAI,oCAAA;AAAyB,IAC3B,QAAA,EAAU,8BAAA,aAAyB,CAAA;AAAA,IACnC,aAAA,EAAe;AAAA,MACb,GAAI,gBAAA,GAAmB,EAAE,YAAA,EAAc,gBAAgB,CAAA;AAAA,MACvD,GAAI,iBAAA,GAAoB,EAAE,OAAA,EAAS,iBAAiB,CAAA;AAAA;AAAA;AAAA,MAGpD,GAAG;AAAA,IACL;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,iBAAA,EAAmB,MAAA,CAAO,IAAA,EAAA,GAA0B;AACxD,IAAA,GAAA,CAAI,YAAA,EAAc,MAAA;AAClB,IAAA,GAAA,CAAI,mBAAA,GAAsB,WAAA,CAAY,kBAAA,EAAoB,MAAA;AAC1D,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,EAAU,EAAE,GAAG,IAAA,EAAM,GAAI,OAAA,GAAU,EAAE,OAAA,EAAS,OAAO,CAAA,EAAI,GAAG,UAAA,CAAW,EAAE,CAAA;AAC/E,MAAA,MAAM,iBAAA,EAAmB,mBAAA,EAAqB,WAAA,CAAY,iBAAA,EAAmB,CAAC,CAAA;AAC9E,MAAA,GAAA,CAAI,cAAA,EAAgB;AAClB,QAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,QAAA,IAAI;AACF,UAAA,MAAM,cAAA,CAAe,OAAA,EAAS,gBAAgB,CAAA;AAAA,QAChD,EAAA,QAAE;AACA,UAAA,mBAAA,CAAoB,KAAK,CAAA;AAAA,QAC3B;AAAA,MACF,EAAA,KAAO;AACL,QAAA,MAAM,iBAAA,CAAkB,MAAA,CAAO,OAAO,CAAA;AAAA,MACxC;AACA,sBAAA,eAAA,wBAAA,CAAkB,GAAA;AAClB,MAAA,KAAA,CAAM,CAAA;AACN,MAAA,YAAA,CAAa,CAAA;AACb,MAAA,GAAA,CAAI,kBAAA,EAAoB,WAAA,CAAY,KAAA,CAAM,CAAA;AAAA,IAC5C,EAAA,WAAQ;AAAA,IAMR;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,SAAA,EAAW,CAAC,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAC5C,EAAA,MAAM,UAAA,EAAY,CAAC,UAAA,CAAW,QAAA,CAAS,OAAO,CAAA;AAC9C,EAAA,MAAM,iBAAA,EAAmB,SAAA,GAAY,SAAA;AACrC,EAAA,MAAM,gBAAA,EAAkB,CAAC,UAAA,CAAW,QAAA,CAAS,aAAa,CAAA;AAC1D,EAAA,MAAM,mBAAA,EAAqB,CAAC,UAAA,CAAW,QAAA,CAAS,gBAAgB,CAAA;AAChE,EAAA,MAAM,iBAAA,EAAmB,CAAC,UAAA,CAAW,QAAA,CAAS,cAAc,CAAA;AAC5D,EAAA,MAAM,YAAA,EAAc,CAAC,UAAA,CAAW,QAAA,CAAS,SAAS,CAAA;AAElD,EAAA,uBACE,8BAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,CAAA,qBAAA,EAAwB,CAAC,SAAA,EAAW,sDAAA,EAAwD,EAAE,CAAA,CAAA,EAAI,CAAC,UAAA,EAAY,qBAAA,EAAuB,EAAE,CAAA,CAAA;AAEjJ,MAAA;AAEG,QAAA;AAAwE,UAAA;AACL,UAAA;AACtE,QAAA;AAGF,wBAAA;AAAC,UAAA;AAAA,UAAA;AAC8D,YAAA;AAMnD,cAAA;AACN,gBAAA;AACyF,gBAAA;AAC3F,cAAA;AACD,YAAA;AACS,YAAA;AACN,YAAA;AAUH,YAAA;AAAwD,cAAA;AACE,cAAA;AACc,cAAA;AACV,cAAA;AAGxB,8BAAA;AAKtC,cAAA;AAII,cAAA;AAEG,gBAAA;AAAsB,kCAAA;AAAA,oBAAA;AAEN,oCAAA;AAChB,kBAAA;AACA,kCAAA;AAAC,oBAAA;AAAA,oBAAA;AACI,sBAAA;AACE,sBAAA;AACc,sBAAA;AACP,sBAAA;AACW,sBAAA;AACV,sBAAA;AACI,sBAAA;AACP,sBAAA;AAAA,oBAAA;AACZ,kBAAA;AAIE,kBAAA;AAEJ,gBAAA;AAIE,gBAAA;AAAuB,kCAAA;AAAA,oBAAA;AAEP,oCAAA;AAChB,kBAAA;AACA,kCAAA;AAAC,oBAAA;AAAA,oBAAA;AACI,sBAAA;AACE,sBAAA;AACe,sBAAA;AACR,sBAAA;AACW,sBAAA;AACV,sBAAA;AACI,sBAAA;AACP,sBAAA;AAAA,oBAAA;AACZ,kBAAA;AAGkB,kBAAA;AAGpB,gBAAA;AAEJ,cAAA;AAKG,cAAA;AAEG,gBAAA;AAAyC,kCAAA;AACzC,kCAAA;AAAC,oBAAA;AAAA,oBAAA;AACC,sBAAA;AACK,sBAAA;AAGD,sBAAA;AAAA,wCAAA;AAAC,0BAAA;AAAA,0BAAA;AACI,4BAAA;AACQ,4BAAA;AACD,4BAAA;AAEqC,4BAAA;AAAA,0BAAA;AACjD,wBAAA;AAIO,wCAAA;AAIT,sBAAA;AAAA,oBAAA;AAEJ,kBAAA;AAGY,kBAAA;AAGd,gBAAA;AAIE,gBAAA;AAA0D,kCAAA;AAC1D,kCAAA;AAAC,oBAAA;AAAA,oBAAA;AACC,sBAAA;AACK,sBAAA;AAGD,sBAAA;AAAA,wCAAA;AAAC,0BAAA;AAAA,0BAAA;AACI,4BAAA;AACQ,4BAAA;AACD,4BAAA;AAEkC,4BAAA;AAAA,0BAAA;AAC9C,wBAAA;AAIO,wCAAA;AAIT,sBAAA;AAAA,oBAAA;AAEJ,kBAAA;AAGK,kBAAA;AAGP,gBAAA;AAEJ,cAAA;AAKE,cAAA;AAA8B,gCAAA;AAAA,kBAAA;AAEd,kCAAA;AAChB,gBAAA;AACA,gCAAA;AAAC,kBAAA;AAAA,kBAAA;AACC,oBAAA;AACK,oBAAA;AAGD,oBAAA;AAAA,sCAAA;AAAC,wBAAA;AAAA,wBAAA;AACI,0BAAA;AACQ,0BAAA;AACE,0BAAA;AACH,0BAAA;AAE2C,0BAAA;AAAA,wBAAA;AACvD,sBAAA;AAIO,sCAAA;AAIT,oBAAA;AAAA,kBAAA;AAEJ,gBAAA;AAGY,gBAAA;AAGd,cAAA;AAKE,cAAA;AAAyB,gCAAA;AAAA,kBAAA;AAET,kCAAA;AAChB,gBAAA;AACA,gCAAA;AAAC,kBAAA;AAAA,kBAAA;AACI,oBAAA;AACmB,oBAAA;AACV,oBAAA;AACW,oBAAA;AACV,oBAAA;AACI,oBAAA;AACP,oBAAA;AAAA,kBAAA;AACZ,gBAAA;AAGoB,gBAAA;AAGtB,cAAA;AAUE,cAAA;AAAA,gCAAA;AAAC,kBAAA;AAAA,kBAAA;AAC0B,oBAAA;AACH,oBAAA;AACZ,oBAAA;AAAA,kBAAA;AACZ,gBAAA;AAEE,gCAAA;AAAA,kCAAA;AAAC,oBAAA;AAAA,oBAAA;AACmB,sBAAA;AACwB,sBAAA;AAClB,sBAAA;AACd,sBAAA;AAAA,oBAAA;AACZ,kBAAA;AACyE,kCAAA;AAC3E,gBAAA;AACF,cAAA;AAIC,8BAAA;AAAkG,gBAAA;AACnG,gCAAA;AAAC,kBAAA;AAAA,kBAAA;AACM,oBAAA;AACI,oBAAA;AACiE,oBAAA;AACjE,oBAAA;AACqC,oBAAA;AAEZ,oBAAA;AAAA,kBAAA;AACpC,gBAAA;AACF,cAAA;AAAA,YAAA;AAAA,UAAA;AACF,QAAA;AAAA,MAAA;AAAA,IAAA;AACF,EAAA;AAEJ;ADrI0J;AACA;AACA;AACA","file":"/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-HOEVEB7N.cjs","sourcesContent":[null,"'use client';\n\n/**\n * `<ContactForm />` — the canonical contact form used by every public\n * surface (TMCG join, case-study pitch, generic /contact, Help Center\n * ticket creation, etc.).\n *\n * Self-contained inside the lib — host-specific values (user id for\n * tracking, platform-specific contact reasons, reddit-click attribution\n * id) flow IN via props. The hub passes them via a thin\n * `<ContactForm>` wrapper that resolves them from `useAuth` /\n * `getAppConfig` / `getStoredRedditClickId`. Other embedders pass\n * whatever they have (or omit).\n *\n * Field-hide + custom-submit + extra-top-field knobs let one form\n * serve both contact and ticket-creation flows without forking:\n *   - Contact page: rendered with all fields visible, built-in submit\n *     flow to `/api/contact` via `useContactSubmission`.\n *   - Ticket page: hides name/email/companySize/referralSource/\n *     helpCategory; supplies `extraTopField` (a Subject input) +\n *     `onCustomSubmit` wired to `useTicketActions.submitTicket`.\n */\n\nimport { zodResolver } from '@hookform/resolvers/zod';\nimport { useState, type ReactNode } from 'react';\nimport { useForm, Controller } from 'react-hook-form';\nimport { useContactSubmission } from '../../hooks/use-contact-submission';\nimport { useHumanitySignals } from '../../hooks/use-humanity-signals';\nimport {\n  ContactSchema,\n  type ContactFormData,\n  companySizeOptions,\n  referralSourceOptions,\n  defaultHelpCategoryOptions,\n} from '../../schemas/contact-schema';\nimport { HUBSPOT_DO_NOT_COLLECT_FORM_PROPS } from '../../utils/hubspot-collected-forms';\nimport { ChatAttachmentAddButton, ChatAttachmentChipStrip } from '../chat/chat-attachment-bar';\nimport { useChatAttachments } from '../chat/hooks/use-chat-attachments';\nimport type { ChatAttachment } from '../chat/utils/chat-attachment-markdown';\nimport { SECTION_HEADING_CLASS } from '../layout/page-heading';\nimport {\n  Button,\n  type ButtonProps,\n  Input,\n  Textarea,\n  Select,\n  SelectTrigger,\n  SelectValue,\n  SelectContent,\n  SelectItem,\n  Label,\n} from '../ui';\nimport { HoneypotField } from '../ui/honeypot-field';\nimport { RequiredMark } from '../ui/required-mark';\n\n/**\n * Fields the caller can suppress. Six values — every primary form\n * field plus `name` and `email` (newly hideable so ticket-creation\n * surfaces can hide them; they still need to validate, so the caller\n * MUST supply pre-filled values via `defaultValues` when hiding them).\n */\nexport type ContactFormHideableField = 'name' | 'email' | 'companySize' | 'referralSource' | 'helpCategory' | 'message';\n\nexport interface ContactFormProps {\n  /** Host-side user id passed to `useContactSubmission` for attribution.\n   *  Hub wrapper passes `useAuth().user?.id`; lib's Help Center surface\n   *  passes `useChatIdentity().user?.id`. Omit for anon flows. */\n  userId?: string;\n  /** Platform-specific help-category dropdown options. Hub wrapper\n   *  passes `getAppConfig().contact.contactReasons`. Defaults to the\n   *  lib's `defaultHelpCategoryOptions`. */\n  helpCategoryOptions?: readonly string[];\n  /** Reddit click attribution id. Caller resolves from wherever they\n   *  stash it (hub: sessionStorage via `getStoredRedditClickId`). When\n   *  set, it's spread into the submission payload. */\n  rdtCid?: string;\n  /** Called after a successful submit so the caller can clear their\n   *  attribution storage (hub wrapper calls `clearStoredRedditClickId`).\n   *  Fires for BOTH the built-in and custom submit paths. */\n  onSubmitSuccess?: () => void;\n\n  prefilledReason?: string;\n  prefilledMessage?: string;\n  hideFields?: ContactFormHideableField[];\n  /** Authoritative pre-fill for any field the caller hides. Merged\n   *  into react-hook-form's `defaultValues` AFTER the legacy\n   *  `prefilledReason` / `prefilledMessage` props (caller-supplied\n   *  wins). REQUIRED when hiding `name` / `email` / `helpCategory` —\n   *  those fields are still validated by Zod even when not rendered. */\n  defaultValues?: Partial<ContactFormData>;\n  /** Optional custom submit handler. When provided, the form bypasses\n   *  the built-in `useContactSubmission` flow (no /api/contact call,\n   *  no success-redirect, no built-in toast) — the caller owns the\n   *  entire side-effect chain. Reset + `onSubmitSuccess` still fire\n   *  on a successful await.\n   *\n   *  Receives the schema-validated form payload PLUS the ready\n   *  attachments array (empty when `attachmentsEnabled === false` or\n   *  the user hasn't picked any). Caller forwards `attachments` to\n   *  whichever sink owns the upload (e.g. `actions.submitTicket`'s\n   *  `attachments` field for HubSpot Note engagements). */\n  onCustomSubmit?: (data: ContactFormData, attachments: ChatAttachment[]) => Promise<void>;\n  /** Turn on the attachments bar (file `+` button + chip strip) using\n   *  the same lib primitives the chat composer uses\n   *  (`<ChatAttachmentAddButton>` + `<ChatAttachmentChipStrip>` +\n   *  `useChatAttachments`). When `false` (the default), the form\n   *  doesn't render the bar AND the attachments array passed to\n   *  `onCustomSubmit` is always empty. */\n  attachmentsEnabled?: boolean;\n  /** Render slot for an EXTRA field at the very top of the form,\n   *  ABOVE the name/email row. Use this for ticket surfaces that need\n   *  a Subject input — the field is NOT part of `ContactSchema`, so\n   *  the caller manages its own state + validation and reads the\n   *  value back inside `onCustomSubmit`. */\n  extraTopField?: ReactNode;\n\n  title?: string;\n  subtitle?: string;\n  footerText?: string;\n  noBorder?: boolean;\n  noPadding?: boolean;\n  buttonVariant?: ButtonProps['variant'];\n  buttonClassName?: string;\n  /** Submit-button label. Defaults to \"Send Message\". Override for\n   *  ticket surfaces (e.g. \"Open ticket\"). */\n  submitLabel?: string;\n  /** Success-state submit-button label (shown briefly after submit on\n   *  the built-in flow). Defaults to \"Message Sent!\". Has no effect\n   *  when `onCustomSubmit` is provided — the caller owns success UX. */\n  submitSuccessLabel?: string;\n  successRedirectUrl?: string;\n  successToastMessage?: string;\n}\n\nexport function ContactForm({\n  userId,\n  helpCategoryOptions = defaultHelpCategoryOptions,\n  rdtCid,\n  onSubmitSuccess,\n  prefilledReason,\n  prefilledMessage,\n  hideFields = [],\n  defaultValues: defaultValuesProp,\n  onCustomSubmit,\n  extraTopField,\n  attachmentsEnabled = false,\n  title = 'Hit Us Up',\n  subtitle,\n  footerText = 'We typically respond within 24 hours. We respect your privacy – no spam, ever.',\n  noBorder = false,\n  noPadding = false,\n  buttonVariant = 'accent',\n  buttonClassName = '',\n  submitLabel = 'Send Message',\n  submitSuccessLabel = 'Message Sent!',\n  successRedirectUrl = '/blog#community',\n  successToastMessage = 'Redirecting you to join our community...',\n}: ContactFormProps = {}) {\n  // Attachments staging — same hook the chat composer + ticket\n  // detail-drawer composer use. Files upload to Supabase as soon as\n  // the user picks them; `readyAttachments` is the wire-shape array\n  // ready for the next submit. `hasInflightUploads` disables Send\n  // until every upload settles.\n  const attachments = useChatAttachments();\n  // Built-in contact-API flow. Hook is called unconditionally (rules\n  // of hooks); we just don't dispatch its `submit` when the caller\n  // passes `onCustomSubmit`. The hook owns its own toast + redirect\n  // chain so bypassing it cleanly hands all side-effects to the caller.\n  const builtInSubmission = useContactSubmission({\n    userId,\n    successRedirectUrl,\n    successToastMessage,\n  });\n  // Independent in-flight tracker for the custom path — we can't reuse\n  // `builtInSubmission.isSubmitting` because that hook never sees a\n  // request when `onCustomSubmit` is active.\n  const [customSubmitting, setCustomSubmitting] = useState(false);\n\n  // Invisible bot-protection signals (honeypot + timing). Spread into the\n  // submit payload for BOTH the built-in and custom paths; reset on success.\n  const { honeypotInputProps, getSignals, resetSignals } = useHumanitySignals();\n\n  const isSubmitting = onCustomSubmit ? customSubmitting : builtInSubmission.isSubmitting;\n  // `isSuccess` only ever fires on the built-in path; custom callers\n  // own their own UX (no \"Message Sent!\" button-label flicker).\n  const isSuccess = onCustomSubmit ? false : builtInSubmission.isSuccess;\n\n  const {\n    register,\n    handleSubmit,\n    control,\n    formState: { errors },\n    reset,\n  } = useForm<ContactFormData>({\n    resolver: zodResolver(ContactSchema),\n    defaultValues: {\n      ...(prefilledReason && { helpCategory: prefilledReason }),\n      ...(prefilledMessage && { message: prefilledMessage }),\n      // Caller-supplied defaults win over the legacy `prefilled*` props\n      // (they're the authoritative seed for hidden fields).\n      ...defaultValuesProp,\n    },\n  });\n\n  const handleFormSubmit = async (data: ContactFormData) => {\n    if (isSubmitting) return;\n    if (attachmentsEnabled && attachments.hasInflightUploads) return;\n    try {\n      const payload = { ...data, ...(rdtCid && { rdt_cid: rdtCid }), ...getSignals() };\n      const readyAttachments = attachmentsEnabled ? attachments.readyAttachments : [];\n      if (onCustomSubmit) {\n        setCustomSubmitting(true);\n        try {\n          await onCustomSubmit(payload, readyAttachments);\n        } finally {\n          setCustomSubmitting(false);\n        }\n      } else {\n        await builtInSubmission.submit(payload);\n      }\n      onSubmitSuccess?.();\n      reset();\n      resetSignals();\n      if (attachmentsEnabled) attachments.clear();\n    } catch {\n      // Error toast is owned by the active flow:\n      //  - built-in: `useContactSubmission` toasts inside `submit()`.\n      //  - custom:   the caller toasts inside `onCustomSubmit`.\n      // Either way we swallow here so a thrown error doesn't crash the\n      // form tree (react-hook-form's onSubmit handler rejects upward).\n    }\n  };\n\n  const showName = !hideFields.includes('name');\n  const showEmail = !hideFields.includes('email');\n  const showNameEmailRow = showName || showEmail;\n  const showCompanySize = !hideFields.includes('companySize');\n  const showReferralSource = !hideFields.includes('referralSource');\n  const showHelpCategory = !hideFields.includes('helpCategory');\n  const showMessage = !hideFields.includes('message');\n\n  return (\n    <div\n      className={`flex h-full flex-col ${!noBorder ? 'rounded-2xl border border-ods-border md:rounded-3xl' : ''} ${!noPadding ? 'p-6 md:p-8 lg:p-10' : ''}`}\n    >\n      {(title || subtitle) && (\n        <div className=\"mb-6 md:mb-8\">\n          {title && <h2 className={`${SECTION_HEADING_CLASS} mb-3 md:mb-4`}>{title}</h2>}\n          {subtitle && <p className=\"text-ods-text-primary text-h4\">{subtitle}</p>}\n        </div>\n      )}\n\n      <form\n        onSubmit={handleSubmit(handleFormSubmit, validationErrors => {\n          // When validation fails on a HIDDEN field (e.g. ticket form\n          // hides name/email/helpCategory and seeds them via\n          // `defaultValues`), there's no visible error UI for the user\n          // — the submit button just appears dead. Log so the broken\n          // defaultValues wiring is at least discoverable in DevTools.\n          console.warn(\n            '[ContactForm] submit blocked by validation:',\n            Object.fromEntries(Object.entries(validationErrors).map(([k, v]) => [k, v?.message ?? v])),\n          );\n        })}\n        className=\"flex flex-grow flex-col space-y-4 md:space-y-6\"\n        {...HUBSPOT_DO_NOT_COLLECT_FORM_PROPS}\n      >\n        {/* Hidden inputs for fields that are required by `ContactSchema`\n            but suppressed from the visible UI via `hideFields`. Without\n            these, `register('name')` never runs, react-hook-form skips\n            the field at submit time, and Zod's required-string check\n            fails silently — the user clicks Submit and NOTHING visible\n            happens (no error, no network call). The caller-supplied\n            `defaultValues` seed the values; the hidden inputs just tell\n            RHF to include them in the submit payload. */}\n        {!showName && <input type=\"hidden\" {...register('name')} />}\n        {!showEmail && <input type=\"hidden\" {...register('email')} />}\n        {!showHelpCategory && <input type=\"hidden\" {...register('helpCategory')} />}\n        {!showMessage && <input type=\"hidden\" {...register('message')} />}\n\n        {/* Invisible honeypot — real users never fill it; bots that fill every field trip it. */}\n        <HoneypotField {...honeypotInputProps} />\n\n        {/* Extra top field (e.g. Subject for ticket forms). Rendered\n            outside the schema-driven layout so the caller fully owns\n            label / placeholder / state. */}\n        {extraTopField}\n\n        {showNameEmailRow && (\n          <div className=\"grid grid-cols-1 gap-4 md:grid-cols-2 md:gap-6\">\n            {showName && (\n              <div className=\"flex flex-col\">\n                <Label htmlFor=\"name\">\n                  Your Name\n                  <RequiredMark />\n                </Label>\n                <Input\n                  id=\"name\"\n                  type=\"text\"\n                  {...register('name')}\n                  placeholder=\"Jane Doe\"\n                  aria-invalid={!!errors.name}\n                  aria-required\n                  aria-describedby=\"name-error\"\n                  className=\"h-12 border-ods-border bg-ods-card px-3 text-ods-text-primary placeholder-ods-text-secondary\"\n                />\n                {errors.name && (\n                  <span id=\"name-error\" className=\"mt-1 text-ods-error text-h6\">\n                    {errors.name.message}\n                  </span>\n                )}\n              </div>\n            )}\n            {showEmail && (\n              <div className=\"flex flex-col\">\n                <Label htmlFor=\"email\">\n                  Email\n                  <RequiredMark />\n                </Label>\n                <Input\n                  id=\"email\"\n                  type=\"email\"\n                  {...register('email')}\n                  placeholder=\"jane@company.com\"\n                  aria-invalid={!!errors.email}\n                  aria-required\n                  aria-describedby=\"email-error\"\n                  className=\"h-12 border-ods-border bg-ods-card px-3 text-ods-text-primary placeholder-ods-text-secondary\"\n                />\n                {errors.email && (\n                  <span id=\"email-error\" className=\"mt-1 text-ods-error text-h6\">\n                    {errors.email.message}\n                  </span>\n                )}\n              </div>\n            )}\n          </div>\n        )}\n\n        {(showCompanySize || showReferralSource) && (\n          <div className=\"grid grid-cols-1 gap-4 md:grid-cols-2 md:gap-6\">\n            {showCompanySize && (\n              <div className=\"flex flex-col\">\n                <Label htmlFor=\"companySize\">Company Size</Label>\n                <Controller\n                  control={control}\n                  name=\"companySize\"\n                  render={({ field }) => (\n                    <Select onValueChange={field.onChange} defaultValue={field.value}>\n                      <SelectTrigger\n                        id=\"companySize\"\n                        aria-label=\"Company Size\"\n                        className=\"h-12 border-ods-border bg-ods-card px-3 text-ods-text-primary\"\n                      >\n                        <SelectValue placeholder=\"Select company size\" />\n                      </SelectTrigger>\n                      <SelectContent>\n                        {companySizeOptions.map(opt => (\n                          <SelectItem key={opt} value={opt}>\n                            {opt}\n                          </SelectItem>\n                        ))}\n                      </SelectContent>\n                    </Select>\n                  )}\n                />\n                {errors.companySize && (\n                  <span id=\"companySize-error\" className=\"mt-1 text-ods-error text-h6\">\n                    {errors.companySize.message}\n                  </span>\n                )}\n              </div>\n            )}\n            {showReferralSource && (\n              <div className=\"flex flex-col\">\n                <Label htmlFor=\"referralSource\">How did you hear about us?</Label>\n                <Controller\n                  control={control}\n                  name=\"referralSource\"\n                  render={({ field }) => (\n                    <Select onValueChange={field.onChange} defaultValue={field.value}>\n                      <SelectTrigger\n                        id=\"referralSource\"\n                        aria-label=\"Referral Source\"\n                        className=\"h-12 border-ods-border bg-ods-card px-3 text-ods-text-primary\"\n                      >\n                        <SelectValue placeholder=\"Select an option\" />\n                      </SelectTrigger>\n                      <SelectContent>\n                        {referralSourceOptions.map(opt => (\n                          <SelectItem key={opt} value={opt}>\n                            {opt}\n                          </SelectItem>\n                        ))}\n                      </SelectContent>\n                    </Select>\n                  )}\n                />\n                {errors.referralSource && (\n                  <span id=\"referralSource-error\" className=\"mt-1 text-ods-error text-h6\">\n                    {errors.referralSource.message}\n                  </span>\n                )}\n              </div>\n            )}\n          </div>\n        )}\n\n        {showHelpCategory && (\n          <div className=\"flex flex-col\">\n            <Label htmlFor=\"helpCategory\">\n              Choose your main interest\n              <RequiredMark />\n            </Label>\n            <Controller\n              control={control}\n              name=\"helpCategory\"\n              render={({ field }) => (\n                <Select onValueChange={field.onChange} defaultValue={field.value}>\n                  <SelectTrigger\n                    id=\"helpCategory\"\n                    aria-label=\"Help Category\"\n                    aria-required\n                    className=\"h-12 border-ods-border bg-ods-card px-3 text-ods-text-primary\"\n                  >\n                    <SelectValue placeholder=\"Choose your main interest\" />\n                  </SelectTrigger>\n                  <SelectContent>\n                    {helpCategoryOptions.map(opt => (\n                      <SelectItem key={opt} value={opt}>\n                        {opt}\n                      </SelectItem>\n                    ))}\n                  </SelectContent>\n                </Select>\n              )}\n            />\n            {errors.helpCategory && (\n              <span id=\"helpCategory-error\" className=\"mt-1 text-ods-error text-h6\">\n                {errors.helpCategory.message}\n              </span>\n            )}\n          </div>\n        )}\n\n        {showMessage && (\n          <div className=\"flex flex-grow flex-col\">\n            <Label htmlFor=\"message\">\n              Your Message\n              <RequiredMark />\n            </Label>\n            <Textarea\n              id=\"message\"\n              {...register('message')}\n              placeholder=\"Share your current challenges or questions about open-source alternatives...\"\n              aria-invalid={!!errors.message}\n              aria-required\n              aria-describedby=\"message-error\"\n              className=\"h-full flex-grow border-ods-border bg-ods-card text-ods-text-primary placeholder-ods-text-secondary\"\n            />\n            {errors.message && (\n              <span id=\"message-error\" className=\"mt-1 text-ods-error text-h6\">\n                {errors.message.message}\n              </span>\n            )}\n          </div>\n        )}\n\n        {/* Attachments — only renders when `attachmentsEnabled` is on.\n            Uses the SAME chip strip + add button + staging hook the\n            chat composer and ticket-drawer composer use, so the visual\n            chip styling + upload-progress UX are identical everywhere\n            attachments appear. */}\n        {attachmentsEnabled && (\n          <div className=\"flex flex-col gap-2\">\n            <ChatAttachmentChipStrip\n              attachments={attachments.attachments}\n              onRemove={attachments.removeAttachment}\n              disabled={isSubmitting}\n            />\n            <div className=\"flex items-center gap-2\">\n              <ChatAttachmentAddButton\n                attachmentsEnabled\n                attachmentsCount={attachments.attachments.length}\n                onAddFiles={attachments.addFiles}\n                disabled={isSubmitting}\n              />\n              <span className=\"text-ods-text-secondary text-h6\">Attach files (optional)</span>\n            </div>\n          </div>\n        )}\n\n        <div className=\"mt-auto flex w-full flex-col items-center justify-end gap-4 pt-2 md:flex-row md:gap-6\">\n          {footerText && <p className=\"text-center text-ods-text-secondary text-h6 md:text-left\">{footerText}</p>}\n          <Button\n            type=\"submit\"\n            loading={isSubmitting}\n            disabled={isSubmitting || isSuccess || (attachmentsEnabled && attachments.hasInflightUploads)}\n            variant={buttonVariant}\n            className={`w-full md:w-auto ${buttonClassName}`}\n          >\n            {isSuccess ? submitSuccessLabel : submitLabel}\n          </Button>\n        </div>\n      </form>\n    </div>\n  );\n}\n","import { z } from 'zod';\n\n// Dropdown option constants — re-exported by `<ContactForm>` consumers\n// that want to surface their own custom Select widgets keyed on the\n// same allowed-value set.\nexport const companySizeOptions = ['1-10', '11-50', '51-200', '201-500', '501-1000', '1001+'] as const;\n\nexport const referralSourceOptions = [\n  'Google',\n  'LinkedIn',\n  'Twitter/X',\n  'Reddit',\n  'Friend / Colleague',\n  'Other',\n] as const;\n\n// Default fallback options — used when the embedder doesn't supply\n// platform-specific help-category options via the `helpCategoryOptions`\n// prop on `<ContactForm>`.\nexport const defaultHelpCategoryOptions = [\n  'Open-Source Alternatives',\n  'Vendor Cost Reduction',\n  'MSP Best Practices',\n  'Partnerships',\n  'Press',\n  'Other',\n] as const;\n\n// Reusable LinkedIn URL validator — the single source of truth. Every\n// public form schema, every admin update schema, every HubSpot push\n// validator MUST reference this so validation rules cannot drift\n// across boundaries.\n//\n// Host validation parses the URL and checks the hostname suffix so an\n// adversarial input like `https://evil.com/linkedin.com/x` is rejected\n// (substring match would have accepted it — CodeQL alert\n// \"Incomplete URL substring sanitization\").\nexport const LinkedInUrlSchema = z\n  .string()\n  .url({ message: 'Please enter a valid LinkedIn URL' })\n  .refine(\n    url => {\n      try {\n        const host = new URL(url).hostname.toLowerCase();\n        return host === 'linkedin.com' || host.endsWith('.linkedin.com');\n      } catch {\n        return false;\n      }\n    },\n    {\n      message: 'Please enter a valid LinkedIn profile URL',\n    },\n  )\n  .optional()\n  .or(z.literal(''));\n\n/**\n * Base schema — fields shared by every contact-style form (main contact\n * form, TMCG join, data-room request, case-study pitch, etc.). Any\n * field that exists on a form but NOT on this schema is silently\n * stripped by `safeParse` — that's exactly the bug the LinkedIn field\n * hit historically.\n */\nexport const ContactBaseSchema = z.object({\n  name: z.string().min(2, { message: 'Name must be at least 2 characters' }).max(255, { message: 'Name is too long' }),\n  email: z.string().email({ message: 'Please enter a valid email address' }).max(255),\n  linkedin_url: LinkedInUrlSchema,\n  helpCategory: z\n    .string()\n    .min(1, { message: 'Please select what we can help you with' })\n    .max(255, { message: 'Help category is too long' }),\n  message: z\n    .string()\n    .min(10, { message: 'Message must be at least 10 characters' })\n    .max(5000, { message: 'Message is too long (5,000 character limit)' }),\n  rdt_cid: z.string().optional(),\n});\n\n// Public POST /api/contact validator — base + dropdown fields used by\n// the generic contact form. Other form-specific schemas extend\n// `ContactBaseSchema`.\nexport const ContactSchema = ContactBaseSchema.extend({\n  companySize: z\n    .string()\n    .optional()\n    .refine(val => !val || companySizeOptions.includes(val as (typeof companySizeOptions)[number]), {\n      message: 'Please select a valid company size',\n    }),\n  referralSource: z\n    .string()\n    .optional()\n    .refine(val => !val || referralSourceOptions.includes(val as (typeof referralSourceOptions)[number]), {\n      message: 'Please select a valid referral source',\n    }),\n});\n\nexport type ContactFormData = z.infer<typeof ContactSchema>;\n\nexport interface ContactApiResponse {\n  success: boolean;\n  error?: string;\n}\n"]}