@flusys/nestjs-form-builder 8.0.3 → 8.1.1

package/fesm/{98.js → 720.js}

@@ -1,13 +1,15 @@
-import { JwtAuthGuard, PermissionGuard } from "@flusys/nestjs-shared/guards";
-export const __rspack_esm_id = 98;
-export const __rspack_esm_ids = [98];
+import { JwtAuthGuard, OptionalJwtGuard, PermissionGuard } from "@flusys/nestjs-shared/guards";
+import { Throttle } from "@nestjs/throttler";
+export const __rspack_esm_id = 720;
+export const __rspack_esm_ids = [720];
 export const __webpack_modules__ = {
-585(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+971(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
-  X: () => (/* reexport */ FormController),
-  Y: () => (/* reexport */ FormResultController)
+  Xq: () => (/* reexport */ FormController),
+  Vh: () => (/* reexport */ FormEmailAuthController),
+  Ye: () => (/* reexport */ FormResultController)
 });
 
 // EXTERNAL MODULE: external "@flusys/nestjs-shared/classes"
@@ -22,10 +24,12 @@ var common_ = __webpack_require__(157);
 var swagger_ = __webpack_require__(176);
 // EXTERNAL MODULE: ./projects/nestjs-form-builder/src/config/message-keys.ts
 var message_keys = __webpack_require__(137);
-// EXTERNAL MODULE: ./projects/nestjs-form-builder/src/dtos/index.ts + 1 modules
-var dtos = __webpack_require__(998);
-// EXTERNAL MODULE: ./projects/nestjs-form-builder/src/services/form.service.ts + 2 modules
-var form_service = __webpack_require__(148);
+// EXTERNAL MODULE: ./projects/nestjs-form-builder/src/dtos/index.ts + 2 modules
+var dtos = __webpack_require__(472);
+// EXTERNAL MODULE: ./projects/nestjs-form-builder/src/services/form-email-auth.service.ts + 1 modules
+var form_email_auth_service = __webpack_require__(474);
+// EXTERNAL MODULE: ./projects/nestjs-form-builder/src/services/form.service.ts + 1 modules
+var form_service = __webpack_require__(134);
 ;// CONCATENATED MODULE: ./projects/nestjs-form-builder/src/controllers/form.controller.ts
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -58,6 +62,7 @@ function _ts_param(paramIndex, decorator) {
 
 
 
+
 class FormController extends (0,classes_.createApiController)(dtos/* .CreateFormDto */.YD, dtos/* .UpdateFormDto */.jQ, dtos/* .FormResponseDto */.bV, {
     entityName: 'form',
     security: {
@@ -106,13 +111,12 @@ class FormController extends (0,classes_.createApiController)(dtos/* .CreateForm
     }
 }) {
     formService;
-    constructor(formService){
-        super(formService), this.formService = formService;
+    formEmailAuthService;
+    constructor(formService, formEmailAuthService){
+        super(formService), this.formService = formService, this.formEmailAuthService = formEmailAuthService;
     }
     // Public Endpoints
-    /**
-   * Get form access info (no authentication required)
-   */ async getFormAccessInfo(id) {
+    async getFormAccessInfo(id) {
         const data = await this.formService.getFormAccessInfo(id);
         return {
             success: true,
@@ -139,6 +143,29 @@ class FormController extends (0,classes_.createApiController)(dtos/* .CreateForm
             data
         };
     }
+    // OptionalJwtGuard: an already-logged-in visitor is auto-identified by their
+    // account email; an anonymous visitor must supply a verified access token.
+    async getEmailVerifiedForm(id, dto, user) {
+        const [form, email] = await Promise.all([
+            this.formService.getEmailVerifiedForm(id),
+            this.formEmailAuthService.resolveSubmitterEmail(id, user, dto.accessToken)
+        ]);
+        if (!email) {
+            throw new common_.UnauthorizedException({
+                message: 'Email verification required to access this form',
+                messageKey: message_keys/* .FORM_MESSAGES.EMAIL_VERIFICATION_REQUIRED */.Q.EMAIL_VERIFICATION_REQUIRED
+            });
+        }
+        return {
+            success: true,
+            message: 'Form retrieved',
+            messageKey: message_keys/* .FORM_MESSAGES.GET_SUCCESS */.Q.GET_SUCCESS,
+            data: {
+                ...form,
+                verifiedEmail: email
+            }
+        };
+    }
     async getBySlug(slug, _user) {
         const data = await this.formService.getBySlug(slug);
         return {
@@ -203,6 +230,25 @@ _ts_decorate([
     ]),
     _ts_metadata("design:returntype", Promise)
 ], FormController.prototype, "getAuthenticatedForm", null);
+_ts_decorate([
+    (0,common_.Post)('email-verified/:id'),
+    (0,common_.UseGuards)(OptionalJwtGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get form for email-verified submission (optionally authenticated)'
+    }),
+    _ts_param(0, (0,common_.Param)('id')),
+    _ts_param(1, (0,common_.Body)()),
+    _ts_param(2, (0,decorators_.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        typeof dtos/* .LoadEmailVerifiedFormDto */.gI === "undefined" ? Object : dtos/* .LoadEmailVerifiedFormDto */.gI,
+        Object
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], FormController.prototype, "getEmailVerifiedForm", null);
 _ts_decorate([
     (0,common_.Post)('by-slug/:slug'),
     (0,common_.UseGuards)(JwtAuthGuard, PermissionGuard),
@@ -239,9 +285,11 @@ FormController = _ts_decorate([
     (0,swagger_.ApiTags)('Form Builder - Forms'),
     (0,common_.Controller)('form-builder/form'),
     _ts_param(0, (0,common_.Inject)(form_service/* .FormService */.u)),
+    _ts_param(1, (0,common_.Inject)(form_email_auth_service/* .FormEmailAuthService */.w)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof form_service/* .FormService */.u === "undefined" ? Object : form_service/* .FormService */.u
+        typeof form_service/* .FormService */.u === "undefined" ? Object : form_service/* .FormService */.u,
+        typeof form_email_auth_service/* .FormEmailAuthService */.w === "undefined" ? Object : form_email_auth_service/* .FormEmailAuthService */.w
     ])
 ], FormController);
 
@@ -279,6 +327,7 @@ function form_result_controller_ts_param(paramIndex, decorator) {
 
 
 
+
 class FormResultController extends (0,classes_.createApiController)(dtos/* .CreateFormResultDto */.pZ, dtos/* .UpdateFormResultDto */.Uj, dtos/* .FormResultResponseDto */._$, {
     entityName: 'form.result',
     security: {
@@ -327,13 +376,12 @@ class FormResultController extends (0,classes_.createApiController)(dtos/* .Crea
     }
 }) {
     formResultService;
-    constructor(formResultService){
-        super(formResultService), this.formResultService = formResultService;
+    formEmailAuthService;
+    constructor(formResultService, formEmailAuthService){
+        super(formResultService), this.formResultService = formResultService, this.formEmailAuthService = formEmailAuthService;
     }
     // Submit Endpoints
-    /**
-   * Submit form with authentication
-   */ async submitForm(dto, user) {
+    async submitForm(dto, user) {
         const data = await this.formResultService.submitForm(dto, user, false);
         return {
             success: true,
@@ -342,8 +390,8 @@ class FormResultController extends (0,classes_.createApiController)(dtos/* .Crea
             data
         };
     }
-    async submitPublicForm(dto) {
-        const data = await this.formResultService.submitForm(dto, null, true);
+    async submitPublicForm(dto, user) {
+        const data = await this.formResultService.submitForm(dto, user ?? null, true);
         return {
             success: true,
             message: 'Form submitted successfully',
@@ -371,9 +419,7 @@ class FormResultController extends (0,classes_.createApiController)(dtos/* .Crea
         };
     }
     // Query Endpoints
-    /**
-   * Get results by form ID with pagination
-   */ async getByFormId(dto, user) {
+    async getByFormId(dto, user) {
         const page = dto.page ?? 0;
         const pageSize = dto.pageSize ?? 10;
         const result = await this.formResultService.getByFormId(dto.formId, user, {
@@ -393,10 +439,7 @@ class FormResultController extends (0,classes_.createApiController)(dtos/* .Crea
             }
         };
     }
-    /**
-   * Check if current user has already submitted this form (non-draft)
-   * Used for single response mode
-   */ async hasUserSubmitted(dto, user) {
+    async hasUserSubmitted(dto, user) {
         const hasSubmitted = await this.formResultService.hasUserSubmitted(dto.formId, user);
         return {
             success: true,
@@ -405,6 +448,18 @@ class FormResultController extends (0,classes_.createApiController)(dtos/* .Crea
             data: hasSubmitted
         };
     }
+    // Anonymous-path counterpart to has-submitted: resolves identity from an
+    // optional JWT or a verified email access token instead of requiring login.
+    async hasSubmittedEmail(dto, user) {
+        const email = await this.formEmailAuthService.resolveSubmitterEmail(dto.formId, user, dto.accessToken);
+        const hasSubmitted = email ? await this.formResultService.hasSubmittedByEmail(dto.formId, email) : false;
+        return {
+            success: true,
+            message: hasSubmitted ? 'Already submitted this form' : 'Not yet submitted this form',
+            messageKey: hasSubmitted ? message_keys/* .FORM_RESULT_MESSAGES.HAS_SUBMITTED_SUCCESS */.y.HAS_SUBMITTED_SUCCESS : message_keys/* .FORM_RESULT_MESSAGES.HAS_NOT_SUBMITTED_SUCCESS */.y.HAS_NOT_SUBMITTED_SUCCESS,
+            data: hasSubmitted
+        };
+    }
 }
 form_result_controller_ts_decorate([
     (0,common_.Post)('submit'),
@@ -425,15 +480,18 @@ form_result_controller_ts_decorate([
 ], FormResultController.prototype, "submitForm", null);
 form_result_controller_ts_decorate([
     (0,common_.Post)('submit-public'),
-    (0,decorators_.Public)(),
+    (0,common_.UseGuards)(OptionalJwtGuard),
+    (0,swagger_.ApiBearerAuth)(),
     (0,common_.HttpCode)(common_.HttpStatus.CREATED),
     (0,swagger_.ApiOperation)({
-        summary: 'Submit public form (no auth required)'
+        summary: 'Submit public form (no auth required; EMAIL_VERIFIED forms resolve identity from an optional JWT or access token)'
     }),
     form_result_controller_ts_param(0, (0,common_.Body)()),
+    form_result_controller_ts_param(1, (0,decorators_.CurrentUser)()),
     form_result_controller_ts_metadata("design:type", Function),
     form_result_controller_ts_metadata("design:paramtypes", [
-        typeof dtos/* .SubmitFormDto */.sH === "undefined" ? Object : dtos/* .SubmitFormDto */.sH
+        typeof dtos/* .SubmitFormDto */.sH === "undefined" ? Object : dtos/* .SubmitFormDto */.sH,
+        Object
     ]),
     form_result_controller_ts_metadata("design:returntype", Promise)
 ], FormResultController.prototype, "submitPublicForm", null);
@@ -506,38 +564,171 @@ form_result_controller_ts_decorate([
     ]),
     form_result_controller_ts_metadata("design:returntype", Promise)
 ], FormResultController.prototype, "hasUserSubmitted", null);
+form_result_controller_ts_decorate([
+    (0,common_.Post)('has-submitted-email'),
+    (0,common_.UseGuards)(OptionalJwtGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,swagger_.ApiOperation)({
+        summary: 'Check if the resolved email has already submitted this form'
+    }),
+    form_result_controller_ts_param(0, (0,common_.Body)()),
+    form_result_controller_ts_param(1, (0,decorators_.CurrentUser)()),
+    form_result_controller_ts_metadata("design:type", Function),
+    form_result_controller_ts_metadata("design:paramtypes", [
+        typeof dtos/* .HasSubmittedEmailDto */.BW === "undefined" ? Object : dtos/* .HasSubmittedEmailDto */.BW,
+        Object
+    ]),
+    form_result_controller_ts_metadata("design:returntype", Promise)
+], FormResultController.prototype, "hasSubmittedEmail", null);
 FormResultController = form_result_controller_ts_decorate([
     (0,swagger_.ApiTags)('Form Builder - Results'),
     (0,common_.Controller)('form-builder/result'),
     form_result_controller_ts_param(0, (0,common_.Inject)(form_result_service/* .FormResultService */.v)),
+    form_result_controller_ts_param(1, (0,common_.Inject)(form_email_auth_service/* .FormEmailAuthService */.w)),
     form_result_controller_ts_metadata("design:type", Function),
     form_result_controller_ts_metadata("design:paramtypes", [
-        typeof form_result_service/* .FormResultService */.v === "undefined" ? Object : form_result_service/* .FormResultService */.v
+        typeof form_result_service/* .FormResultService */.v === "undefined" ? Object : form_result_service/* .FormResultService */.v,
+        typeof form_email_auth_service/* .FormEmailAuthService */.w === "undefined" ? Object : form_email_auth_service/* .FormEmailAuthService */.w
     ])
 ], FormResultController);
 
+;// CONCATENATED MODULE: external "@nestjs/throttler"
+
+;// CONCATENATED MODULE: ./projects/nestjs-form-builder/src/controllers/form-email-auth.controller.ts
+function form_email_auth_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function form_email_auth_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function form_email_auth_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+class FormEmailAuthController {
+    formEmailAuthService;
+    formService;
+    constructor(formEmailAuthService, formService){
+        this.formEmailAuthService = formEmailAuthService;
+        this.formService = formService;
+    }
+    async requestOtp(dto) {
+        const form = await this.formService.getEmailVerifiedFormEntity(dto.formId);
+        return this.formEmailAuthService.requestOtp(dto.formId, dto.email, form.name);
+    }
+    async verifyOtp(dto) {
+        const data = await this.formEmailAuthService.verifyOtp(dto.formId, dto.email, dto.code);
+        return {
+            success: true,
+            message: 'Email verified successfully',
+            messageKey: message_keys/* .FORM_MESSAGES.OTP_VERIFIED */.Q.OTP_VERIFIED,
+            data
+        };
+    }
+}
+form_email_auth_controller_ts_decorate([
+    (0,common_.Post)('request-otp'),
+    (0,decorators_.Public)(),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    Throttle({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: 'Request an email verification code (no auth required)'
+    }),
+    form_email_auth_controller_ts_param(0, (0,common_.Body)()),
+    form_email_auth_controller_ts_metadata("design:type", Function),
+    form_email_auth_controller_ts_metadata("design:paramtypes", [
+        typeof dtos/* .RequestFormEmailOtpDto */.ME === "undefined" ? Object : dtos/* .RequestFormEmailOtpDto */.ME
+    ]),
+    form_email_auth_controller_ts_metadata("design:returntype", Promise)
+], FormEmailAuthController.prototype, "requestOtp", null);
+form_email_auth_controller_ts_decorate([
+    (0,common_.Post)('verify-otp'),
+    (0,decorators_.Public)(),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    Throttle({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: 'Verify an email verification code (no auth required)'
+    }),
+    form_email_auth_controller_ts_param(0, (0,common_.Body)()),
+    form_email_auth_controller_ts_metadata("design:type", Function),
+    form_email_auth_controller_ts_metadata("design:paramtypes", [
+        typeof dtos/* .VerifyFormEmailOtpDto */.uY === "undefined" ? Object : dtos/* .VerifyFormEmailOtpDto */.uY
+    ]),
+    form_email_auth_controller_ts_metadata("design:returntype", Promise)
+], FormEmailAuthController.prototype, "verifyOtp", null);
+FormEmailAuthController = form_email_auth_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Form Builder - Email Auth'),
+    (0,common_.Controller)('form-builder/form-email-auth'),
+    form_email_auth_controller_ts_param(0, (0,common_.Inject)(form_email_auth_service/* .FormEmailAuthService */.w)),
+    form_email_auth_controller_ts_param(1, (0,common_.Inject)(form_service/* .FormService */.u)),
+    form_email_auth_controller_ts_metadata("design:type", Function),
+    form_email_auth_controller_ts_metadata("design:paramtypes", [
+        typeof form_email_auth_service/* .FormEmailAuthService */.w === "undefined" ? Object : form_email_auth_service/* .FormEmailAuthService */.w,
+        typeof form_service/* .FormService */.u === "undefined" ? Object : form_service/* .FormService */.u
+    ])
+], FormEmailAuthController);
+
 ;// CONCATENATED MODULE: ./projects/nestjs-form-builder/src/controllers/index.ts
 
 
 
 
+
 },
-998(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+472(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
   YD: () => (/* reexport */ CreateFormDto),
   pZ: () => (/* reexport */ form_result_dto/* .CreateFormResultDto */.pZ),
+  d7: () => (/* reexport */ EmailVerifiedFormResponseDto),
   Xe: () => (/* reexport */ FormAccessInfoResponseDto),
   bV: () => (/* reexport */ FormResponseDto),
   _$: () => (/* reexport */ form_result_dto/* .FormResultResponseDto */._$),
   D5: () => (/* reexport */ form_result_dto/* .GetMyDraftDto */.D5),
   rp: () => (/* reexport */ form_result_dto/* .GetResultsByFormDto */.rp),
+  BW: () => (/* reexport */ HasSubmittedEmailDto),
+  gI: () => (/* reexport */ LoadEmailVerifiedFormDto),
   M4: () => (/* reexport */ PublicFormResponseDto),
+  ME: () => (/* reexport */ RequestFormEmailOtpDto),
   sH: () => (/* reexport */ form_result_dto/* .SubmitFormDto */.sH),
   CQ: () => (/* reexport */ form_result_dto/* .UpdateDraftDto */.CQ),
   jQ: () => (/* reexport */ UpdateFormDto),
-  Uj: () => (/* reexport */ form_result_dto/* .UpdateFormResultDto */.Uj)
+  Uj: () => (/* reexport */ form_result_dto/* .UpdateFormResultDto */.Uj),
+  uY: () => (/* reexport */ VerifyFormEmailOtpDto),
+  TU: () => (/* reexport */ VerifyOtpResponseDto)
 });
 
 // EXTERNAL MODULE: external "@flusys/nestjs-shared/dtos"
@@ -794,14 +985,151 @@ class FormAccessInfoResponseDto extends (0,swagger_.PickType)(FormResponseDto, [
     'isActive'
 ]) {
 }
+class EmailVerifiedFormResponseDto extends PublicFormResponseDto {
+    verifiedEmail;
+}
+_ts_decorate([
+    (0,external_class_transformer_.Expose)(),
+    (0,swagger_.ApiProperty)({
+        description: 'The verified email this form will be submitted as'
+    }),
+    _ts_metadata("design:type", String)
+], EmailVerifiedFormResponseDto.prototype, "verifiedEmail", void 0);
 
 // EXTERNAL MODULE: ./projects/nestjs-form-builder/src/dtos/form-result.dto.ts
 var form_result_dto = __webpack_require__(788);
+;// CONCATENATED MODULE: ./projects/nestjs-form-builder/src/dtos/form-email-auth.dto.ts
+function form_email_auth_dto_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function form_email_auth_dto_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+
+
+class RequestFormEmailOtpDto {
+    formId;
+    email;
+}
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Form ID to verify an email against',
+        example: '123e4567-e89b-12d3-a456-426614174000'
+    }),
+    (0,external_class_validator_.IsUUID)(),
+    (0,external_class_validator_.IsNotEmpty)(),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], RequestFormEmailOtpDto.prototype, "formId", void 0);
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Email address to verify',
+        example: 'visitor@example.com'
+    }),
+    (0,external_class_validator_.IsEmail)(),
+    (0,external_class_validator_.IsNotEmpty)(),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], RequestFormEmailOtpDto.prototype, "email", void 0);
+class VerifyFormEmailOtpDto {
+    formId;
+    email;
+    code;
+}
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Form ID to verify an email against',
+        example: '123e4567-e89b-12d3-a456-426614174000'
+    }),
+    (0,external_class_validator_.IsUUID)(),
+    (0,external_class_validator_.IsNotEmpty)(),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], VerifyFormEmailOtpDto.prototype, "formId", void 0);
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Email address to verify',
+        example: 'visitor@example.com'
+    }),
+    (0,external_class_validator_.IsEmail)(),
+    (0,external_class_validator_.IsNotEmpty)(),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], VerifyFormEmailOtpDto.prototype, "email", void 0);
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: '6-digit verification code',
+        example: '482913'
+    }),
+    (0,external_class_validator_.IsString)(),
+    (0,external_class_validator_.Length)(6, 6),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], VerifyFormEmailOtpDto.prototype, "code", void 0);
+class VerifyOtpResponseDto {
+    accessToken;
+    expiresAt;
+}
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Opaque access token identifying the verified email session'
+    }),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], VerifyOtpResponseDto.prototype, "accessToken", void 0);
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Access token expiry (sliding on subsequent use)'
+    }),
+    form_email_auth_dto_ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], VerifyOtpResponseDto.prototype, "expiresAt", void 0);
+class LoadEmailVerifiedFormDto {
+    accessToken;
+}
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Access token from a prior email verification (omit if already logged in)',
+        required: false
+    }),
+    (0,external_class_validator_.IsString)(),
+    (0,external_class_validator_.IsOptional)(),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], LoadEmailVerifiedFormDto.prototype, "accessToken", void 0);
+class HasSubmittedEmailDto {
+    formId;
+    accessToken;
+}
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Form ID to check',
+        example: '123e4567-e89b-12d3-a456-426614174000'
+    }),
+    (0,external_class_validator_.IsUUID)(),
+    (0,external_class_validator_.IsNotEmpty)(),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], HasSubmittedEmailDto.prototype, "formId", void 0);
+form_email_auth_dto_ts_decorate([
+    (0,swagger_.ApiProperty)({
+        description: 'Access token from a prior email verification (omit if already logged in)',
+        required: false
+    }),
+    (0,external_class_validator_.IsString)(),
+    (0,external_class_validator_.IsOptional)(),
+    form_email_auth_dto_ts_metadata("design:type", String)
+], HasSubmittedEmailDto.prototype, "accessToken", void 0);
+
 ;// CONCATENATED MODULE: ./projects/nestjs-form-builder/src/dtos/index.ts
 
 
 
 
+
 },
 
 };

package/fesm/config/index.js

@@ -63,7 +63,15 @@ const FORM_MESSAGES = {
     INVALID_ACCESS_TYPE: 'form.invalid.access.type',
     PERMISSION_CHECK_FAILED: 'form.permission.check.failed',
     GET_SUCCESS: 'form.get.success',
-    GET_ACCESS_INFO_SUCCESS: 'form.get.access.info.success'
+    GET_ACCESS_INFO_SUCCESS: 'form.get.access.info.success',
+    EMAIL_NOT_CONFIGURED: 'form.email.not.configured',
+    EMAIL_VERIFICATION_REQUIRED: 'form.email.verification.required',
+    OTP_SENT: 'form.email.otp.sent',
+    OTP_SEND_FAILED: 'form.email.otp.send.failed',
+    OTP_INVALID: 'form.email.otp.invalid',
+    OTP_EXPIRED: 'form.email.otp.expired',
+    OTP_TOO_MANY_ATTEMPTS: 'form.email.otp.too.many.attempts',
+    OTP_VERIFIED: 'form.email.otp.verified'
 };
 const FORM_RESULT_MESSAGES = {
     GET_ALL_SUCCESS: 'form.result.get.all.success',
@@ -72,7 +80,8 @@ const FORM_RESULT_MESSAGES = {
     HAS_NOT_SUBMITTED_SUCCESS: 'form.result.has.not.submitted.success',
     SUBMIT_SUCCESS: 'form.result.submit.success',
     DRAFT_GET_SUCCESS: 'form.result.draft.get.success',
-    DRAFT_UPDATE_SUCCESS: 'form.result.draft.update.success'
+    DRAFT_UPDATE_SUCCESS: 'form.result.draft.update.success',
+    ALREADY_SUBMITTED: 'form.result.already.submitted'
 };
 
 __webpack_require__.d(__webpack_exports__, {

package/fesm/controllers/index.js

@@ -3,12 +3,13 @@ export const __rspack_esm_ids = [24];
 export const __webpack_modules__ = {};
 import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
-import * as __rspack_chunk_1 from '../262.js';
+import * as __rspack_chunk_1 from '../432.js';
 __webpack_require__.C(__rspack_chunk_1);
-import * as __rspack_chunk_2 from '../98.js';
+import * as __rspack_chunk_2 from '../720.js';
 __webpack_require__.C(__rspack_chunk_2);
 import * as __rspack_chunk_3 from './index.js';
 __webpack_require__.C(__rspack_chunk_3);
-var __webpack_exports__ = __webpack_exec__(585);var __webpack_exports__FormController = __webpack_exports__.X;
-var __webpack_exports__FormResultController = __webpack_exports__.Y;
-export { __webpack_exports__FormController as FormController, __webpack_exports__FormResultController as FormResultController };
+var __webpack_exports__ = __webpack_exec__(971);var __webpack_exports__FormController = __webpack_exports__.Xq;
+var __webpack_exports__FormEmailAuthController = __webpack_exports__.Vh;
+var __webpack_exports__FormResultController = __webpack_exports__.Ye;
+export { __webpack_exports__FormController as FormController, __webpack_exports__FormEmailAuthController as FormEmailAuthController, __webpack_exports__FormResultController as FormResultController };