@kelpie/server 0.7.0 → 0.9.0

package/dist/modules/forms/embed.d.ts

@@ -8,13 +8,23 @@ import type { FormFieldRecord, FormRecord } from './repository.ts';
  * characters that break out of either is the same.
  */
 export declare function escapeHtml(text: string): string;
+export type EmbedLayout = 'page' | 'embed';
 export interface EmbedPageOptions {
     readonly form: FormRecord;
     readonly fields: readonly FormFieldRecord[];
+    /** Labels for the consent purposes the fields refer to, keyed by purpose id. */
+    readonly consentPurposeLabels: ReadonlyMap<string, string>;
     /** Absolute URL of the public submit endpoint this page posts to. */
     readonly submitUrl: string;
     /** Per-response value tying the inline style and script to the CSP header. */
     readonly nonce: string;
+    /** Workspace name shown above the form title on the hosted page layout. */
+    readonly workspaceName: string;
+    /**
+     * `page` is the standalone hosted URL (brand chrome). `embed` is the iframe
+     * document: fields only, no page design around them.
+     */
+    readonly layout: EmbedLayout;
 }
 /**
  * The whole page, as one document.
@@ -33,18 +43,22 @@ export declare function renderEmbedPage(options: EmbedPageOptions): string;
  * must not also send `X-Frame-Options`.
  */
 export declare function embedContentSecurityPolicy(nonce: string): string;
-/** What a customer pastes into their site. Both put the same hosted page on the page. */
+/** What a customer pastes into their site, plus the standalone hosted URL. */
 export interface EmbedSnippets {
+    /** Standalone hosted page (brand chrome). */
     readonly url: string;
+    /** Bare document the iframe snippets load (fields only). */
+    readonly embedUrl: string;
     readonly iframe: string;
     readonly script: string;
 }
 /**
- * The two ways to embed.
+ * The two ways to embed, plus the hosted page URL.
  *
- * The iframe is the honest minimum: one tag, no JavaScript, fixed height. The
- * script adds the listener that resizes it as fields appear and as the thank-you
- * replaces the form, which is the only thing an iframe cannot do for itself.
+ * Hosted `url` is the full page. The iframe snippets point at `embedUrl`, which
+ * is the same form without page chrome — what belongs inside somebody else's
+ * site. The plain iframe is fixed height; the script listens for height
+ * messages as fields appear and as the thank-you replaces the form.
  */
-export declare function embedSnippets(url: string, formId: string): EmbedSnippets;
+export declare function embedSnippets(hostedUrl: string, embedUrl: string, formId: string): EmbedSnippets;
 //# sourceMappingURL=embed.d.ts.map

package/dist/modules/forms/embed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../../../src/modules/forms/embed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAuBlE;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAuID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAoCjE;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAShE;AAED,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAkBxE"}
+{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../../../src/modules/forms/embed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AA4BlE;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAuaD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C,gFAAgF;IAChF,QAAQ,CAAC,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC1D,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B;AAkCD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CA2CjE;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAShE;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAkBhG"}

package/dist/modules/forms/embed.js

@@ -5,6 +5,11 @@
  * frames a page from the Kelpie origin, and that page must not drag the CRM's
  * React bundle into somebody else's marketing site to draw five inputs.
  *
+ * The hosted layout carries Kelpie's look. The iframe layout is intentionally
+ * unbranded (system font, Field colours) so it does not paint Kelpie onto the
+ * host site — an iframe cannot inherit the host's CSS, so staying neutral is
+ * the alternative.
+ *
  * Everything here is pure: a form, its fields, and a URL in; a string out. That
  * is what makes the escaping testable, which for a page built by string
  * concatenation is the part worth testing.
@@ -62,8 +67,50 @@ function renderControl(field) {
     // round trip. The server validates the address regardless.
     return `<input ${shared} type="${field.type === 'email' ? 'email' : 'text'}">`;
 }
-function renderField(field) {
+function renderField(field, consentPurposeLabels) {
     const required = field.required ? '<span class="req" aria-hidden="true">*</span>' : '';
+    if (field.type === 'notice') {
+        // Text-only: prose the visitor reads before submitting. Submission is the
+        // consent (see readConsentGrants), so no input is rendered. `label` is
+        // the heading; `statement` is the prose.
+        const statement = field.statement ?? '';
+        return [
+            '<div class="field notice">',
+            `<div class="field-label">${escapeHtml(field.label)}</div>`,
+            `<p class="notice-body">${escapeHtml(statement)}</p>`,
+            '</div>',
+        ].join('');
+    }
+    if (field.type === 'consent') {
+        // Layout: the field label above (heading, e.g. "Consent"), the intro
+        // statement, then one checkbox per configured purpose. The submit reads
+        // the ticked checkboxes' values (purpose ids) from EMBED_SCRIPT and
+        // sends them as a comma-separated string under the field id.
+        const statement = field.statement ?? field.label;
+        const rows = field.consentPurposeIds
+            .map((purposeId, index) => {
+            const boxId = `${field.id}__${String(index)}`;
+            // Field-level override wins over the workspace's default label. Falls
+            // back to the workspace label, then the raw id — the id only shows up
+            // when a purpose has been deleted and its label was never overridden.
+            const override = field.consentPurposeLabels[purposeId];
+            const label = override ?? consentPurposeLabels.get(purposeId) ?? purposeId;
+            return [
+                '<div class="consent-row">',
+                `<input type="checkbox" id="${escapeHtml(boxId)}" data-consent-field="${escapeHtml(field.id)}" value="${escapeHtml(purposeId)}">`,
+                `<label for="${escapeHtml(boxId)}">${escapeHtml(label)}</label>`,
+                '</div>',
+            ].join('');
+        })
+            .join('');
+        return [
+            '<div class="field consent">',
+            `<div class="field-label">${escapeHtml(field.label)}${required}</div>`,
+            `<p class="consent-statement">${escapeHtml(statement)}</p>`,
+            rows,
+            '</div>',
+        ].join('');
+    }
     return [
         '<div class="field">',
         `<label for="${escapeHtml(field.id)}">${escapeHtml(field.label)}${required}</label>`,
@@ -72,26 +119,246 @@ function renderField(field) {
     ].join('');
 }
 /**
- * Styles for the page. Deliberately plain and system-font: this renders inside
- * somebody else's design, and a form that tries to bring its own brand fights
- * the site it was embedded in.
+ * Styles for the standalone hosted page — Kelpie tokens, brand chrome, card.
+ */
+const HOSTED_STYLES = `
+:root {
+  color-scheme: light;
+  --surface: #fafafa;
+  --surface-raised: #ffffff;
+  --ink: #18181b;
+  --ink-muted: #52525b;
+  --ink-faint: #71717a;
+  --border: #e4e4e7;
+  --accent: #0f766e;
+  --accent-hover: #0d9488;
+  --accent-soft: #f0fdfa;
+  --accent-fg: #ffffff;
+  --danger: #dc2626;
+  --font: "IBM Plex Sans", ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+@media (prefers-color-scheme: dark) {
+  :root {
+    color-scheme: dark;
+    --surface: #0c0c0d;
+    --surface-raised: #141416;
+    --ink: #fafafa;
+    --ink-muted: #a1a1aa;
+    --ink-faint: #71717a;
+    --border: #27272a;
+    --accent: #2dd4bf;
+    --accent-hover: #5eead4;
+    --accent-soft: #134e4a;
+    --accent-fg: #042f2e;
+    --danger: #f87171;
+  }
+}
+* { box-sizing: border-box; }
+html { background: var(--surface); }
+body {
+  margin: 0;
+  min-height: 100vh;
+  font: 14px/1.5 var(--font);
+  color: var(--ink);
+  -webkit-font-smoothing: antialiased;
+  background:
+    radial-gradient(ellipse at top, color-mix(in srgb, var(--accent-soft) 85%, transparent), transparent 55%),
+    var(--surface);
+}
+.shell {
+  width: 100%;
+  max-width: 28rem;
+  margin: 0 auto;
+  padding: 2.5rem 1rem 3rem;
+}
+.brand { text-align: center; margin-bottom: 1.5rem; }
+.eyebrow {
+  font-size: 11px;
+  font-weight: 600;
+  letter-spacing: 0.06em;
+  text-transform: uppercase;
+  color: var(--accent);
+}
+.brand h1 {
+  margin: 0.25rem 0 0;
+  font-size: 1.375rem;
+  font-weight: 600;
+  letter-spacing: -0.02em;
+  line-height: 1.25;
+  color: var(--ink);
+}
+.lead {
+  margin: 0.35rem 0 0;
+  font-size: 13px;
+  color: var(--ink-muted);
+}
+.card {
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  background: var(--surface-raised);
+  padding: 1.5rem;
+}
+form { display: grid; gap: 1rem; margin: 0; }
+.field { display: grid; gap: 0.35rem; }
+label { font-weight: 500; font-size: 12px; color: var(--ink); }
+.req { color: var(--danger); margin-left: 2px; }
+input, textarea, select {
+  width: 100%;
+  padding: 0.5rem 0.75rem;
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  font: inherit;
+  font-size: 14px;
+  color: var(--ink);
+  background: var(--surface);
+  outline: none;
+  transition: border-color 120ms ease, box-shadow 120ms ease;
+}
+input::placeholder, textarea::placeholder { color: var(--ink-faint); }
+input:focus-visible, textarea:focus-visible, select:focus-visible {
+  border-color: var(--accent);
+  box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent) 20%, transparent);
+}
+textarea { resize: vertical; min-height: 6.5rem; }
+/* Consent field: label above (heading), a statement, then a checkbox per purpose. */
+.field.consent { gap: 0.35rem; }
+.field.consent .field-label {
+  font-weight: 500;
+  font-size: 12px;
+  color: var(--ink);
+}
+.field.consent .consent-statement {
+  margin: 0 0 0.35rem;
+  font-size: 12px;
+  color: var(--ink-muted);
+}
+.field.consent .consent-row {
+  display: grid;
+  grid-template-columns: auto 1fr;
+  align-items: start;
+  gap: 0.5rem;
+  padding: 0.15rem 0;
+}
+.field.consent input[type="checkbox"] {
+  width: 1rem;
+  height: 1rem;
+  margin-top: 0.2rem;
+  padding: 0;
+  background: var(--surface);
+}
+.field.consent .consent-row label {
+  font-weight: 400;
+  color: var(--ink);
+}
+.field.notice { gap: 0.35rem; }
+.field.notice .field-label {
+  font-weight: 500;
+  font-size: 12px;
+  color: var(--ink);
+}
+.field.notice .notice-body {
+  margin: 0;
+  padding: 0.5rem 0.75rem;
+  font-size: 12px;
+  color: var(--ink-muted);
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  white-space: pre-line;
+}
+button[type="submit"] {
+  width: 100%;
+  padding: 0.625rem 0.875rem;
+  border: 0;
+  border-radius: 6px;
+  background: var(--accent);
+  color: var(--accent-fg);
+  font: inherit;
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+  transition: background 120ms ease;
+}
+button[type="submit"]:hover:not([disabled]) { background: var(--accent-hover); }
+button[type="submit"][disabled] { opacity: 0.55; cursor: progress; }
+.note { margin: 0; font-size: 12px; color: var(--ink-muted); }
+.error { color: var(--danger); font-weight: 500; }
+.done {
+  margin: 0;
+  text-align: center;
+  font-size: 15px;
+  font-weight: 500;
+  line-height: 1.45;
+  color: var(--ink);
+}
+.paused {
+  margin: 0;
+  font-size: 13px;
+  color: var(--ink-muted);
+  text-align: center;
+}
+`;
+/**
+ * Styles for the iframe document.
+ *
+ * Deliberately not Kelpie: system font, browser field colours, a plain button.
+ * An iframe cannot pick up the host page's CSS, so the only way not to fight
+ * the host is to stay neutral and leave the background transparent.
  */
-const EMBED_STYLES = `
-:root { color-scheme: light dark; }
+const IFRAME_STYLES = `
 * { box-sizing: border-box; }
-body { margin: 0; padding: 16px; font: 15px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; }
-form { display: grid; gap: 14px; max-width: 32rem; margin: 0 auto; }
+html, body { background: transparent; }
+body {
+  margin: 0;
+  padding: 12px;
+  font: 15px/1.5 system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+  color: CanvasText;
+  -webkit-font-smoothing: antialiased;
+}
+.shell { margin: 0; padding: 0; }
+form { display: grid; gap: 14px; margin: 0; }
 .field { display: grid; gap: 5px; }
 label { font-weight: 600; font-size: 0.875rem; }
 .req { color: #b4232c; margin-left: 2px; }
-input, textarea, select { width: 100%; padding: 9px 10px; border: 1px solid #b9bfc9; border-radius: 6px; font: inherit; background: Field; color: FieldText; }
-input:focus-visible, textarea:focus-visible, select:focus-visible { outline: 2px solid #2f6feb; outline-offset: 1px; }
-textarea { resize: vertical; }
-button { padding: 10px 16px; border: 0; border-radius: 6px; background: #2f6feb; color: #fff; font: inherit; font-weight: 600; cursor: pointer; }
-button[disabled] { opacity: 0.6; cursor: progress; }
-.note { margin: 0; font-size: 0.875rem; }
-.error { color: #b4232c; }
-.done { max-width: 32rem; margin: 0 auto; }
+input, textarea, select {
+  width: 100%;
+  padding: 9px 10px;
+  border: 1px solid #b9bfc9;
+  border-radius: 6px;
+  font: inherit;
+  background: Field;
+  color: FieldText;
+}
+input:focus-visible, textarea:focus-visible, select:focus-visible {
+  outline: 2px solid #2f6feb;
+  outline-offset: 1px;
+}
+textarea { resize: vertical; min-height: 6rem; }
+.field.consent { gap: 5px; }
+.field.consent .field-label { font-weight: 600; font-size: 0.875rem; color: CanvasText; }
+.field.consent .consent-statement { margin: 0 0 5px; font-size: 0.8125rem; color: #5c6570; }
+.field.consent .consent-row { display: grid; grid-template-columns: auto 1fr; align-items: start; gap: 8px; padding: 2px 0; }
+.field.consent input[type="checkbox"] { width: 1rem; height: 1rem; margin-top: 3px; padding: 0; background: Field; }
+.field.consent .consent-row label { font-weight: 400; }
+.field.notice { gap: 5px; }
+.field.notice .field-label { font-weight: 600; font-size: 0.875rem; color: CanvasText; }
+.field.notice .notice-body { margin: 0; padding: 9px 10px; font-size: 0.8125rem; color: CanvasText; background: Field; border: 1px solid #b9bfc9; border-radius: 6px; white-space: pre-line; }
+button[type="submit"] {
+  width: 100%;
+  padding: 10px 16px;
+  border: 0;
+  border-radius: 6px;
+  background: #2f6feb;
+  color: #fff;
+  font: inherit;
+  font-weight: 600;
+  cursor: pointer;
+}
+button[type="submit"][disabled] { opacity: 0.6; cursor: progress; }
+.note { margin: 0; font-size: 0.875rem; color: #5c6570; }
+.error { color: #b4232c; font-weight: 500; }
+.done { margin: 0; font-size: 15px; font-weight: 500; line-height: 1.45; }
+.paused { margin: 0; font-size: 13px; color: #5c6570; }
 `;
 /**
  * The browser half of the page.
@@ -121,8 +388,28 @@ const EMBED_SCRIPT = `
     button.disabled = true;
 
     var answers = {};
+    // Consent fields render a checkbox per purpose, each tagged with
+    // data-consent-field=<field_id> and value=<purpose_id>. Collect the
+    // ticked ones into a comma-separated list under the field id — the
+    // server parses that back into a set of ticked purpose ids.
+    var consentBoxes = form.querySelectorAll('input[type="checkbox"][data-consent-field]');
+    var consentByField = {};
+    for (var i = 0; i < consentBoxes.length; i += 1) {
+      var box = consentBoxes[i];
+      var fieldId = box.getAttribute('data-consent-field');
+      if (!consentByField[fieldId]) { consentByField[fieldId] = []; }
+      if (box.checked) { consentByField[fieldId].push(box.value); }
+    }
+    for (var fieldId in consentByField) {
+      if (consentByField[fieldId].length > 0) {
+        answers[fieldId] = consentByField[fieldId].join(',');
+      }
+    }
     config.fieldIds.forEach(function (id) {
-      var value = form.elements[id].value.trim();
+      if (consentByField[id] !== undefined) { return; }
+      var element = form.elements[id];
+      if (!element) { return; }
+      var value = element.value.trim();
       if (value) { answers[id] = value; }
     });
 
@@ -150,6 +437,28 @@ const EMBED_SCRIPT = `
   });
 })();
 `;
+/**
+ * Public heading for the hosted page: the form's `title`, falling back to
+ * `name` if somehow blank (legacy rows, a cleared field).
+ */
+function displayTitle(form) {
+    const title = form.title.trim();
+    return title.length > 0 ? title : form.name;
+}
+function renderFormBody(form, fields, consentPurposeLabels, config, nonce) {
+    if (form.status === 'paused') {
+        return `<p class="paused">This form is not accepting submissions right now.</p>`;
+    }
+    return [
+        '<form id="kelpie-form" novalidate>',
+        fields.map((field) => renderField(field, consentPurposeLabels)).join(''),
+        '<div><button id="kelpie-submit" type="submit">Submit</button></div>',
+        '<p id="kelpie-status" class="note" role="status" aria-live="polite"></p>',
+        '</form>',
+        `<script type="application/json" id="kelpie-config">${config}</script>`,
+        `<script nonce="${escapeHtml(nonce)}">${EMBED_SCRIPT}</script>`,
+    ].join('');
+}
 /**
  * The whole page, as one document.
  *
@@ -158,37 +467,43 @@ const EMBED_SCRIPT = `
  * form whose submit answers 409.
  */
 export function renderEmbedPage(options) {
-    const { form, fields, submitUrl, nonce } = options;
+    const { form, fields, consentPurposeLabels, submitUrl, nonce, workspaceName, layout } = options;
+    const heading = displayTitle(form);
     const config = escapeScriptJson({
         formId: form.id,
         submitUrl,
         thankYou: form.thankYouMessage,
         fieldIds: fields.map((field) => field.id),
     });
-    const body = form.status === 'paused'
-        ? `<div class="done"><p class="note">This form is not accepting submissions right now.</p></div>`
-        : [
-            '<form id="kelpie-form" novalidate>',
-            fields.map(renderField).join(''),
-            '<div><button id="kelpie-submit" type="submit">Submit</button></div>',
-            '<p id="kelpie-status" class="note" role="status" aria-live="polite"></p>',
-            '</form>',
-            `<script type="application/json" id="kelpie-config">${config}</script>`,
-            `<script nonce="${escapeHtml(nonce)}">${EMBED_SCRIPT}</script>`,
-        ].join('');
+    const formBody = renderFormBody(form, fields, consentPurposeLabels, config, nonce);
+    const styles = layout === 'page' ? HOSTED_STYLES : IFRAME_STYLES;
+    const shell = layout === 'page'
+        ? [
+            '<div class="shell">',
+            '<header class="brand">',
+            `<div class="eyebrow">${escapeHtml(workspaceName)}</div>`,
+            `<h1>${escapeHtml(heading)}</h1>`,
+            form.description === null || form.description.trim().length === 0
+                ? ''
+                : `<p class="lead">${escapeHtml(form.description)}</p>`,
+            '</header>',
+            `<div class="card">${formBody}</div>`,
+            '</div>',
+        ].join('')
+        : `<div class="shell">${formBody}</div>`;
     return [
         '<!doctype html>',
-        '<html lang="en">',
+        `<html lang="en" class="layout-${layout}">`,
         '<head>',
         '<meta charset="utf-8">',
         '<meta name="viewport" content="width=device-width, initial-scale=1">',
         // Not indexed: the canonical page for this form is the customer's own, and
         // a bare embed ranking above it would be a worse result for a reader.
         '<meta name="robots" content="noindex">',
-        `<title>${escapeHtml(form.name)}</title>`,
-        `<style nonce="${escapeHtml(nonce)}">${EMBED_STYLES}</style>`,
+        `<title>${escapeHtml(heading)}</title>`,
+        `<style nonce="${escapeHtml(nonce)}">${styles}</style>`,
         '</head>',
-        `<body>${body}</body>`,
+        `<body class="layout-${layout}">${shell}</body>`,
         '</html>',
     ].join('');
 }
@@ -211,18 +526,19 @@ export function embedContentSecurityPolicy(nonce) {
     ].join('; ');
 }
 /**
- * The two ways to embed.
+ * The two ways to embed, plus the hosted page URL.
  *
- * The iframe is the honest minimum: one tag, no JavaScript, fixed height. The
- * script adds the listener that resizes it as fields appear and as the thank-you
- * replaces the form, which is the only thing an iframe cannot do for itself.
+ * Hosted `url` is the full page. The iframe snippets point at `embedUrl`, which
+ * is the same form without page chrome — what belongs inside somebody else's
+ * site. The plain iframe is fixed height; the script listens for height
+ * messages as fields appear and as the thank-you replaces the form.
  */
-export function embedSnippets(url, formId) {
-    const iframe = `<iframe src="${escapeHtml(url)}" title="Contact form" ` +
-        `style="width:100%;border:0;height:520px" loading="lazy"></iframe>`;
+export function embedSnippets(hostedUrl, embedUrl, formId) {
+    const iframe = `<iframe src="${escapeHtml(embedUrl)}" title="Contact form" ` +
+        `style="width:100%;border:0;height:720px" loading="lazy"></iframe>`;
     const script = [
-        `<iframe id="kelpie-${formId}" src="${escapeHtml(url)}" title="Contact form"`,
-        `        style="width:100%;border:0;height:520px" loading="lazy"></iframe>`,
+        `<iframe id="kelpie-${formId}" src="${escapeHtml(embedUrl)}" title="Contact form"`,
+        `        style="width:100%;border:0;height:720px" loading="lazy"></iframe>`,
         `<script>`,
         `  window.addEventListener('message', function (event) {`,
         `    if (event.data && event.data.kelpie === 'height' && event.data.formId === '${formId}') {`,
@@ -231,6 +547,6 @@ export function embedSnippets(url, formId) {
         `  });`,
         `</script>`,
     ].join('\n');
-    return { url, iframe, script };
+    return { url: hostedUrl, embedUrl, iframe, script };
 }
 //# sourceMappingURL=embed.js.map

package/dist/modules/forms/embed.js.map

@@ -1 +1 @@
-{"version":3,"file":"embed.js","sourceRoot":"","sources":["../../../src/modules/forms/embed.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAEH,iFAAiF;AACjF,MAAM,YAAY,GAAqC;IACrD,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAA;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AACzH,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAA;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;SAC1B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;SACjG,IAAI,CAAC,EAAE,CAAC,CAAA;IAEX,OAAO,KAAK,GAAG,OAAO,CAAA;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB;IAC3C,MAAM,MAAM,GAAG;QACb,OAAO,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG;QAC9B,SAAS,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG;QAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;KAC1F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEX,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,WAAW,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,WAAW,CAAA;IAC7D,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,aAAa,MAAM,uBAAuB,CAAA;IACnD,CAAC;IAED,8EAA8E;IAC9E,2DAA2D;IAC3D,OAAO,UAAU,MAAM,UAAU,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAA;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,KAAsB;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,EAAE,CAAA;IAEtF,OAAO;QACL,qBAAqB;QACrB,eAAe,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,UAAU;QACpF,aAAa,CAAC,KAAK,CAAC;QACpB,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;CAgBpB,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDpB,CAAA;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,SAAS;QACT,QAAQ,EAAE,IAAI,CAAC,eAAe;QAC9B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;IACF,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,QAAQ;QACtB,CAAC,CAAC,+FAA+F;QACjG,CAAC,CAAC;YACE,oCAAoC;YACpC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,qEAAqE;YACrE,0EAA0E;YAC1E,SAAS;YACT,sDAAsD,MAAM,WAAW;YACvE,kBAAkB,UAAU,CAAC,KAAK,CAAC,KAAK,YAAY,WAAW;SAChE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEhB,OAAO;QACL,iBAAiB;QACjB,kBAAkB;QAClB,QAAQ;QACR,wBAAwB;QACxB,sEAAsE;QACtE,2EAA2E;QAC3E,sEAAsE;QACtE,wCAAwC;QACxC,UAAU,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU;QACzC,iBAAiB,UAAU,CAAC,KAAK,CAAC,KAAK,YAAY,UAAU;QAC7D,SAAS;QACT,SAAS,IAAI,SAAS;QACtB,SAAS;KACV,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,OAAO;QACL,oBAAoB;QACpB,oBAAoB,KAAK,GAAG;QAC5B,qBAAqB,KAAK,GAAG;QAC7B,oBAAoB;QACpB,oBAAoB;QACpB,mBAAmB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAc;IACvD,MAAM,MAAM,GACV,gBAAgB,UAAU,CAAC,GAAG,CAAC,yBAAyB;QACxD,mEAAmE,CAAA;IAErE,MAAM,MAAM,GAAG;QACb,sBAAsB,MAAM,UAAU,UAAU,CAAC,GAAG,CAAC,wBAAwB;QAC7E,2EAA2E;QAC3E,UAAU;QACV,yDAAyD;QACzD,kFAAkF,MAAM,MAAM;QAC9F,yCAAyC,MAAM,6CAA6C;QAC5F,OAAO;QACP,OAAO;QACP,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAChC,CAAC"}
+{"version":3,"file":"embed.js","sourceRoot":"","sources":["../../../src/modules/forms/embed.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AAEH,iFAAiF;AACjF,MAAM,YAAY,GAAqC;IACrD,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAA;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AACzH,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAA;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;SAC1B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;SACjG,IAAI,CAAC,EAAE,CAAC,CAAA;IAEX,OAAO,KAAK,GAAG,OAAO,CAAA;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB;IAC3C,MAAM,MAAM,GAAG;QACb,OAAO,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG;QAC9B,SAAS,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG;QAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;KAC1F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEX,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,WAAW,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,WAAW,CAAA;IAC7D,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,aAAa,MAAM,uBAAuB,CAAA;IACnD,CAAC;IAED,8EAA8E;IAC9E,2DAA2D;IAC3D,OAAO,UAAU,MAAM,UAAU,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAA;AAChF,CAAC;AAED,SAAS,WAAW,CAClB,KAAsB,EACtB,oBAAiD;IAEjD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,EAAE,CAAA;IAEtF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,uEAAuE;QACvE,yCAAyC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAA;QACvC,OAAO;YACL,4BAA4B;YAC5B,4BAA4B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC3D,0BAA0B,UAAU,CAAC,SAAS,CAAC,MAAM;YACrD,QAAQ;SACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAA;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,iBAAiB;aACjC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;YACxB,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;YAC7C,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAA;YACtD,MAAM,KAAK,GAAG,QAAQ,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAA;YAC1E,OAAO;gBACL,2BAA2B;gBAC3B,8BAA8B,UAAU,CAAC,KAAK,CAAC,yBAAyB,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,UAAU,CAAC,SAAS,CAAC,IAAI;gBACjI,eAAe,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,UAAU;gBAChE,QAAQ;aACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACZ,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC,CAAA;QACX,OAAO;YACL,6BAA6B;YAC7B,4BAA4B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,QAAQ;YACtE,gCAAgC,UAAU,CAAC,SAAS,CAAC,MAAM;YAC3D,IAAI;YACJ,QAAQ;SACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACZ,CAAC;IAED,OAAO;QACL,qBAAqB;QACrB,eAAe,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,UAAU;QACpF,aAAa,CAAC,KAAK,CAAC;QACpB,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgLrB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDrB,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoEpB,CAAA;AAsBD;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAgB;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;IAE/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;AAC7C,CAAC;AAED,SAAS,cAAc,CACrB,IAAgB,EAChB,MAAkC,EAClC,oBAAiD,EACjD,MAAc,EACd,KAAa;IAEb,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,yEAAyE,CAAA;IAClF,CAAC;IAED,OAAO;QACL,oCAAoC;QACpC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,qEAAqE;QACrE,0EAA0E;QAC1E,SAAS;QACT,sDAAsD,MAAM,WAAW;QACvE,kBAAkB,UAAU,CAAC,KAAK,CAAC,KAAK,YAAY,WAAW;KAChE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC/F,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,SAAS;QACT,QAAQ,EAAE,IAAI,CAAC,eAAe;QAC9B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IAElF,MAAM,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAA;IAChE,MAAM,KAAK,GACT,MAAM,KAAK,MAAM;QACf,CAAC,CAAC;YACE,qBAAqB;YACrB,wBAAwB;YACxB,wBAAwB,UAAU,CAAC,aAAa,CAAC,QAAQ;YACzD,OAAO,UAAU,CAAC,OAAO,CAAC,OAAO;YACjC,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAC/D,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,mBAAmB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM;YACzD,WAAW;YACX,qBAAqB,QAAQ,QAAQ;YACrC,QAAQ;SACT,CAAC,IAAI,CAAC,EAAE,CAAC;QACZ,CAAC,CAAC,sBAAsB,QAAQ,QAAQ,CAAA;IAE5C,OAAO;QACL,iBAAiB;QACjB,iCAAiC,MAAM,IAAI;QAC3C,QAAQ;QACR,wBAAwB;QACxB,sEAAsE;QACtE,2EAA2E;QAC3E,sEAAsE;QACtE,wCAAwC;QACxC,UAAU,UAAU,CAAC,OAAO,CAAC,UAAU;QACvC,iBAAiB,UAAU,CAAC,KAAK,CAAC,KAAK,MAAM,UAAU;QACvD,SAAS;QACT,uBAAuB,MAAM,KAAK,KAAK,SAAS;QAChD,SAAS;KACV,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,OAAO;QACL,oBAAoB;QACpB,oBAAoB,KAAK,GAAG;QAC5B,qBAAqB,KAAK,GAAG;QAC7B,oBAAoB;QACpB,oBAAoB;QACpB,mBAAmB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAc;IAC/E,MAAM,MAAM,GACV,gBAAgB,UAAU,CAAC,QAAQ,CAAC,yBAAyB;QAC7D,mEAAmE,CAAA;IAErE,MAAM,MAAM,GAAG;QACb,sBAAsB,MAAM,UAAU,UAAU,CAAC,QAAQ,CAAC,wBAAwB;QAClF,2EAA2E;QAC3E,UAAU;QACV,yDAAyD;QACzD,kFAAkF,MAAM,MAAM;QAC9F,yCAAyC,MAAM,6CAA6C;QAC5F,OAAO;QACP,OAAO;QACP,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AACrD,CAAC"}

package/dist/modules/forms/events.d.ts

@@ -1,11 +1,5 @@
+import type { FormActionStatus } from '@kelpie/schemas';
 import { z } from 'zod';
-/**
- * Domain events published by the forms module.
- *
- * `forms.form.*` cover the form definition CRUD. `forms.submission.submitted`
- * fires once per submission; the webhooks bridge translates it to the wire
- * `form.submitted` event (the ids live in `data`).
- */
 export declare const formsEvents: {
     'forms.form.created': z.ZodObject<{}, z.core.$strict>;
     'forms.form.updated': z.ZodObject<{
@@ -15,6 +9,17 @@ export declare const formsEvents: {
     'forms.submission.submitted': z.ZodObject<{
         formId: z.ZodString;
         submissionId: z.ZodString;
+        opportunityId: z.ZodNullable<z.ZodString>;
+        partnershipId: z.ZodNullable<z.ZodString>;
+        enquiryId: z.ZodNullable<z.ZodString>;
+        actions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+            action: z.ZodString;
+            status: z.ZodEnum<{
+                error: "error";
+                ok: "ok";
+                skipped: "skipped";
+            }>;
+        }, z.core.$strip>>>>;
     }, z.core.$strip>;
 };
 export type FormCreatedData = Record<string, never>;
@@ -22,9 +27,17 @@ export interface FormUpdatedData {
     readonly changed: readonly string[];
 }
 export type FormDeletedData = Record<string, never>;
+export interface FormSubmissionActionSummary {
+    readonly action: string;
+    readonly status: FormActionStatus;
+}
 export interface FormSubmissionData {
     readonly formId: string;
     readonly submissionId: string;
+    readonly opportunityId: string | null;
+    readonly partnershipId: string | null;
+    readonly enquiryId: string | null;
+    readonly actions: readonly FormSubmissionActionSummary[];
 }
 declare module '../../runtime/events.ts' {
     interface KelpieEventMap {

package/dist/modules/forms/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/modules/forms/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB;;;;;;GAMG;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;CAKM,CAAA;AAE9B,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACnD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AACD,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACnD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,OAAO,QAAQ,yBAAyB,CAAC;IACvC,UAAU,cAAc;QACtB,oBAAoB,EAAE,eAAe,CAAA;QACrC,oBAAoB,EAAE,eAAe,CAAA;QACrC,oBAAoB,EAAE,eAAe,CAAA;QACrC,4BAA4B,EAAE,kBAAkB,CAAA;KACjD;CACF"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/modules/forms/events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAuBvB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;CAYM,CAAA;AAE9B,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACnD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AACD,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACnD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAClC;AACD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,2BAA2B,EAAE,CAAA;CACzD;AAED,OAAO,QAAQ,yBAAyB,CAAC;IACvC,UAAU,cAAc;QACtB,oBAAoB,EAAE,eAAe,CAAA;QACrC,oBAAoB,EAAE,eAAe,CAAA;QACrC,oBAAoB,EAAE,eAAe,CAAA;QACrC,4BAA4B,EAAE,kBAAkB,CAAA;KACjD;CACF"}

package/dist/modules/forms/events.js

@@ -1,15 +1,33 @@
+import { FORM_ACTION_STATUSES } from '@kelpie/schemas';
 import { z } from 'zod';
 /**
  * Domain events published by the forms module.
  *
  * `forms.form.*` cover the form definition CRUD. `forms.submission.submitted`
  * fires once per submission; the webhooks bridge translates it to the wire
- * `form.submitted` event (the ids live in `data`).
+ * `form.submitted` event (the ids and per-action statuses live in `data`).
+ *
+ * The action summary carries statuses only, no detail strings: the webhook
+ * receiver learns whether each action ran; the authenticated Submissions
+ * reader gets the full detail from `action_log` on the row.
  */
+const actionSummarySchema = z
+    .object({
+    action: z.string(),
+    status: z.enum(FORM_ACTION_STATUSES),
+})
+    .readonly();
 export const formsEvents = {
     'forms.form.created': z.object({}).strict(),
     'forms.form.updated': z.object({ changed: z.array(z.string()).readonly() }),
     'forms.form.deleted': z.object({}).strict(),
-    'forms.submission.submitted': z.object({ formId: z.string(), submissionId: z.string() }),
+    'forms.submission.submitted': z.object({
+        formId: z.string(),
+        submissionId: z.string(),
+        opportunityId: z.string().nullable(),
+        partnershipId: z.string().nullable(),
+        enquiryId: z.string().nullable(),
+        actions: z.array(actionSummarySchema).readonly(),
+    }),
 };
 //# sourceMappingURL=events.js.map