@flusys/nestjs-form-builder 9.1.0 → 9.1.2

package/README.md

@@ -145,6 +145,23 @@ TypeOrmModule.forRoot({
 
 The service selects the correct entity automatically at request time — no manual switching needed.
 
+### ACTION_GROUP permission rule
+
+An `ACTION_GROUP` form stores `permissionLogic` — an `ILogicNode` AND / OR tree from `@flusys/nestjs-shared/interfaces` (up to `MAX_PERMISSION_LOGIC_DEPTH` nested groups and `MAX_PERMISSION_LOGIC_CODES` codes), validated with `permissionLogicProblem()` from `@flusys/nestjs-shared/utils`:
+
+```typescript
+{
+  type: 'group',
+  operator: 'AND',
+  children: [
+    { type: 'action', actionId: 'hr.survey.submit' },
+    { type: 'group', operator: 'OR', children: [{ type: 'action', actionId: 'hr.manager' }, { type: 'action', actionId: 'hr.admin' }] },
+  ],
+}
+```
+
+Fetching (`form/authenticated/:id`) and submitting check it with `evaluatePermissionLogic()` against the user's codes from `loadPermissionCodes()` (`PERMISSION_RESOLVER`, else `SharedPermissionCacheService`); when the codes cannot be read, access fails closed (403 `form.permission.check.failed`). A form with no rule is open to any logged-in user.
+
 ---
 
 ## 3. EMAIL_VERIFIED Access Type
@@ -189,6 +206,17 @@ FormBuilderModule.forRoot({
 
 ---
 
+## 4. Computed Fields
+
+`schema.settings.computedFields[]` are calculated on final submission (not drafts) and stored under `data._computed[key]`. Each field has ordered `rules` - `{ condition?, value }`, first match wins, else `defaultValue` - where `value` is an [Expression](../nestjs-shared/README.md#10-expressions) and `condition` an expression condition group. Combinations (regex extract, then join with another field, then upper-case; inline if / else) are just nested expressions.
+
+- References: a field id, a field `name` (what templates use, `{{ email }}`), or `computed.<key>` for a computed field defined **earlier**.
+- `valueType` (`number` | `string` | `boolean`) casts the result; a rule that fails at run time falls back to `defaultValue` instead of failing the submission.
+- Saving a form validates its computed fields (`findComputedFieldIssue`): key format and uniqueness, shape, unknown references or functions, argument counts, literal regex patterns. A problem is a 400 with `form.invalid.computed.field` and `{ field, code, ... }`.
+- **Breaking (v9):** the old rule shape (`computation: { type: 'direct' | 'field_reference' | 'arithmetic', config }` with `{ fieldId, comparison }` conditions) is not read or converted. A form saved with it computes only `defaultValue` on submit and is refused on save until its computed fields are rebuilt in the builder.
+
+---
+
 ## License
 
 MIT © FLUSYS

package/config/message-keys.d.ts

@@ -15,6 +15,7 @@ export declare const FORM_MESSAGES: {
     readonly OTP_EXPIRED: "form.email.otp.expired";
     readonly OTP_TOO_MANY_ATTEMPTS: "form.email.otp.too.many.attempts";
     readonly OTP_VERIFIED: "form.email.otp.verified";
+    readonly INVALID_COMPUTED_FIELD: "form.invalid.computed.field";
 };
 export declare const FORM_RESULT_MESSAGES: {
     readonly GET_ALL_SUCCESS: "form.result.get.all.success";

package/dtos/form.dto.d.ts

@@ -1,4 +1,5 @@
 import { IdentityResponseDto } from '@flusys/nestjs-shared/dtos';
+import { type ILogicNode } from '@flusys/nestjs-shared/interfaces';
 import { FormAccessType } from '../enums/form-access-type.enum.js';
 export declare class CreateFormDto {
     name: string;
@@ -6,7 +7,7 @@ export declare class CreateFormDto {
     slug?: string;
     schema: Record<string, unknown>;
     accessType?: FormAccessType;
-    actionGroups?: string[];
+    permissionLogic?: ILogicNode | null;
     tags?: string[];
     companyId?: string;
     isActive?: boolean;
@@ -23,15 +24,15 @@ export declare class FormResponseDto extends IdentityResponseDto {
     schema: Record<string, unknown>;
     schemaVersion: number;
     accessType: FormAccessType;
-    actionGroups: string[] | null;
+    permissionLogic: ILogicNode | null;
     tags: string[] | null;
     companyId: string | null;
     isActive: boolean;
 }
-declare const PublicFormResponseDto_base: import("@nestjs/common").Type<Pick<FormResponseDto, "description" | "name" | "schema" | "id" | "schemaVersion">>;
+declare const PublicFormResponseDto_base: import("@nestjs/common").Type<Pick<FormResponseDto, "name" | "description" | "schema" | "id" | "schemaVersion">>;
 export declare class PublicFormResponseDto extends PublicFormResponseDto_base {
 }
-declare const FormAccessInfoResponseDto_base: import("@nestjs/common").Type<Pick<FormResponseDto, "description" | "name" | "accessType" | "actionGroups" | "isActive" | "id">>;
+declare const FormAccessInfoResponseDto_base: import("@nestjs/common").Type<Pick<FormResponseDto, "name" | "description" | "accessType" | "permissionLogic" | "isActive" | "id">>;
 export declare class FormAccessInfoResponseDto extends FormAccessInfoResponseDto_base {
 }
 export declare class EmailVerifiedFormResponseDto extends PublicFormResponseDto {

package/entities/form.entity.d.ts

@@ -1,4 +1,5 @@
 import { Identity } from '@flusys/nestjs-shared/entities';
+import { type ILogicNode } from '@flusys/nestjs-shared/interfaces';
 import { FormAccessType } from '../enums/form-access-type.enum.js';
 export declare class Form extends Identity {
     name: string;
@@ -7,7 +8,7 @@ export declare class Form extends Identity {
     schema: Record<string, unknown>;
     schemaVersion: number;
     accessType: FormAccessType;
-    actionGroups: string[] | null;
+    permissionLogic: ILogicNode | null;
     tags: string[] | null;
     isActive: boolean;
 }