@mj-biz-apps/forms-ng 0.0.0 → 0.2.0

package/dist/lib/widget/components/questions/input-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-mode.d.ts","sourceRoot":"","sources":["../../../../../src/lib/widget/components/questions/input-mode.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAW3D;AAED,uDAAuD;AACvD,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAe3D;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAS9D"}

package/dist/lib/widget/components/questions/input-mode.js

@@ -0,0 +1,42 @@
+/** HTML `inputmode` for the soft keyboard a text-style question should summon. */
+export function inputModeFor(type) {
+    switch (type) {
+        case 'Email':
+            return 'email';
+        case 'Phone':
+            return 'tel';
+        case 'Number':
+            return 'decimal';
+        default:
+            return 'text';
+    }
+}
+/** Native `<input type>` for a text-style question. */
+export function inputTypeFor(type) {
+    switch (type) {
+        case 'Email':
+            return 'email';
+        case 'Phone':
+            return 'tel';
+        case 'Number':
+            return 'number';
+        case 'Date':
+            return 'date';
+        case 'Time':
+            return 'time';
+        default:
+            return 'text';
+    }
+}
+/** `autocomplete` token to speed up known fields on mobile. */
+export function autocompleteFor(type) {
+    switch (type) {
+        case 'Email':
+            return 'email';
+        case 'Phone':
+            return 'tel';
+        default:
+            return 'on';
+    }
+}
+//# sourceMappingURL=input-mode.js.map

package/dist/lib/widget/components/questions/input-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-mode.js","sourceRoot":"","sources":["../../../../../src/lib/widget/components/questions/input-mode.ts"],"names":[],"mappings":"AAOA,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC;QACf;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/lib/widget/components/turnstile-challenge.component.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Renders a Cloudflare Turnstile challenge (DG-4) inside the respondent widget and
+ * emits its lifecycle: `(solved)` with the single-use token, `(expired)` when a solved
+ * token times out (~300s), and `(errored)` when the widget itself fails to load/render.
+ *
+ * The parent (`MjFormComponent`) only mounts this component when the form requires
+ * captcha AND a site key is configured — so this component assumes a valid site key.
+ * It loads the Cloudflare script once per document (shared across widget instances),
+ * renders in explicit mode against the injected site key, and exposes `reset()` so the
+ * parent can re-arm the challenge after an expiry or a failed submit (tokens are
+ * single-use).
+ *
+ * Framework-free by design: no Explorer shell, no MJ globals. The external script load
+ * is intentional — the widget is a real embeddable app, not a sandboxed artifact.
+ */
+import { AfterViewInit, OnDestroy } from '@angular/core';
+import * as i0 from "@angular/core";
+export declare class TurnstileChallengeComponent implements AfterViewInit, OnDestroy {
+    /** Public Cloudflare site key (global, not per-form). Required for a real render. */
+    readonly siteKey: import("@angular/core").InputSignal<string>;
+    /** Emits the single-use token when the challenge is solved. */
+    readonly solved: import("@angular/core").OutputEmitterRef<string>;
+    /** Emits when a previously-solved token expires and must be re-solved. */
+    readonly expired: import("@angular/core").OutputEmitterRef<void>;
+    /** Emits when the challenge fails to load or render (script blocked, bad key, etc.). */
+    readonly errored: import("@angular/core").OutputEmitterRef<void>;
+    private readonly hostEl;
+    private readonly config;
+    private readonly zone;
+    /** Handle returned by `turnstile.render`, used to reset/remove the widget. */
+    private widgetId;
+    private disposed;
+    /** Guards against a second mount while the script load is still in flight. */
+    private mounting;
+    ngAfterViewInit(): void;
+    ngOnDestroy(): void;
+    /** Load the script (once) then render the challenge into the host element. */
+    private mount;
+    /** Render the Turnstile widget in explicit mode and wire its callbacks. */
+    private render;
+    /**
+     * Re-arm the challenge for a fresh token — called by the parent after a token expires
+     * or a submit fails on the server's Turnstile check (tokens are single-use).
+     */
+    reset(): void;
+    /** Remove the rendered widget (on destroy) to free the Cloudflare instance. */
+    private remove;
+    private emitErrored;
+    static ɵfac: i0.ɵɵFactoryDeclaration<TurnstileChallengeComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<TurnstileChallengeComponent, "mjf-turnstile-challenge", never, { "siteKey": { "alias": "siteKey"; "required": true; "isSignal": true; }; }, { "solved": "solved"; "expired": "expired"; "errored": "errored"; }, never, never, true, never>;
+}
+//# sourceMappingURL=turnstile-challenge.component.d.ts.map

package/dist/lib/widget/components/turnstile-challenge.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile-challenge.component.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/components/turnstile-challenge.component.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,aAAa,EAKb,SAAS,EAKV,MAAM,eAAe,CAAC;;AASvB,qBAOa,2BAA4B,YAAW,aAAa,EAAE,SAAS;IAC1E,qFAAqF;IACrF,SAAgB,OAAO,8CAA4B;IAEnD,+DAA+D;IAC/D,SAAgB,MAAM,mDAAoB;IAC1C,0EAA0E;IAC1E,SAAgB,OAAO,iDAAkB;IACzC,wFAAwF;IACxF,SAAgB,OAAO,iDAAkB;IAEzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuD;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IAEvC,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,QAAQ,CAAS;IACzB,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAS;IAElB,eAAe,IAAI,IAAI;IAIvB,WAAW,IAAI,IAAI;IAK1B,8EAA8E;YAChE,KAAK;IAmBnB,2EAA2E;IAC3E,OAAO,CAAC,MAAM;IAoBd;;;OAGG;IACI,KAAK,IAAI,IAAI;IAOpB,+EAA+E;IAC/E,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,WAAW;yCA3FR,2BAA2B;2CAA3B,2BAA2B;CAgGvC"}

package/dist/lib/widget/components/turnstile-challenge.component.js

@@ -0,0 +1,123 @@
+/**
+ * Renders a Cloudflare Turnstile challenge (DG-4) inside the respondent widget and
+ * emits its lifecycle: `(solved)` with the single-use token, `(expired)` when a solved
+ * token times out (~300s), and `(errored)` when the widget itself fails to load/render.
+ *
+ * The parent (`MjFormComponent`) only mounts this component when the form requires
+ * captcha AND a site key is configured — so this component assumes a valid site key.
+ * It loads the Cloudflare script once per document (shared across widget instances),
+ * renders in explicit mode against the injected site key, and exposes `reset()` so the
+ * parent can re-arm the challenge after an expiry or a failed submit (tokens are
+ * single-use).
+ *
+ * Framework-free by design: no Explorer shell, no MJ globals. The external script load
+ * is intentional — the widget is a real embeddable app, not a sandboxed artifact.
+ */
+import { ChangeDetectionStrategy, Component, NgZone, inject, input, output, viewChild, } from '@angular/core';
+import { FORMS_API_CONFIG } from '../api/forms-api.config';
+import { ensureTurnstileScript, getTurnstile, } from '../core/turnstile-loader';
+import * as i0 from "@angular/core";
+const _c0 = ["host"];
+export class TurnstileChallengeComponent {
+    /** Public Cloudflare site key (global, not per-form). Required for a real render. */
+    siteKey = input.required(...(ngDevMode ? [{ debugName: "siteKey" }] : []));
+    /** Emits the single-use token when the challenge is solved. */
+    solved = output();
+    /** Emits when a previously-solved token expires and must be re-solved. */
+    expired = output();
+    /** Emits when the challenge fails to load or render (script blocked, bad key, etc.). */
+    errored = output();
+    hostEl = viewChild.required('host');
+    config = inject(FORMS_API_CONFIG);
+    zone = inject(NgZone);
+    /** Handle returned by `turnstile.render`, used to reset/remove the widget. */
+    widgetId;
+    disposed = false;
+    /** Guards against a second mount while the script load is still in flight. */
+    mounting = false;
+    ngAfterViewInit() {
+        void this.mount();
+    }
+    ngOnDestroy() {
+        this.disposed = true;
+        this.remove();
+    }
+    /** Load the script (once) then render the challenge into the host element. */
+    async mount() {
+        if (this.mounting || this.widgetId !== undefined) {
+            return;
+        }
+        this.mounting = true;
+        try {
+            await ensureTurnstileScript(this.config.turnstileScriptUrl);
+        }
+        catch {
+            this.mounting = false;
+            this.emitErrored();
+            return;
+        }
+        this.mounting = false;
+        if (this.disposed || this.widgetId !== undefined) {
+            return;
+        }
+        this.render();
+    }
+    /** Render the Turnstile widget in explicit mode and wire its callbacks. */
+    render() {
+        const turnstile = getTurnstile();
+        const host = this.hostEl().nativeElement;
+        if (!turnstile || !host) {
+            this.emitErrored();
+            return;
+        }
+        const options = {
+            sitekey: this.siteKey(),
+            callback: (token) => this.zone.run(() => this.solved.emit(token)),
+            'expired-callback': () => this.zone.run(() => this.expired.emit()),
+            'error-callback': () => this.zone.run(() => this.emitErrored()),
+        };
+        try {
+            this.widgetId = turnstile.render(host, options);
+        }
+        catch {
+            this.emitErrored();
+        }
+    }
+    /**
+     * Re-arm the challenge for a fresh token — called by the parent after a token expires
+     * or a submit fails on the server's Turnstile check (tokens are single-use).
+     */
+    reset() {
+        const turnstile = getTurnstile();
+        if (turnstile && this.widgetId !== undefined) {
+            turnstile.reset(this.widgetId);
+        }
+    }
+    /** Remove the rendered widget (on destroy) to free the Cloudflare instance. */
+    remove() {
+        const turnstile = getTurnstile();
+        if (turnstile && this.widgetId !== undefined) {
+            turnstile.remove(this.widgetId);
+        }
+        this.widgetId = undefined;
+    }
+    emitErrored() {
+        if (!this.disposed) {
+            this.errored.emit();
+        }
+    }
+    static ɵfac = function TurnstileChallengeComponent_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || TurnstileChallengeComponent)(); };
+    static ɵcmp = /*@__PURE__*/ i0.ɵɵdefineComponent({ type: TurnstileChallengeComponent, selectors: [["mjf-turnstile-challenge"]], viewQuery: function TurnstileChallengeComponent_Query(rf, ctx) { if (rf & 1) {
+            i0.ɵɵviewQuerySignal(ctx.hostEl, _c0, 5);
+        } if (rf & 2) {
+            i0.ɵɵqueryAdvance();
+        } }, inputs: { siteKey: [1, "siteKey"] }, outputs: { solved: "solved", expired: "expired", errored: "errored" }, decls: 2, vars: 0, consts: [["host", ""], ["aria-label", "Security challenge", 1, "mjf-turnstile"]], template: function TurnstileChallengeComponent_Template(rf, ctx) { if (rf & 1) {
+            i0.ɵɵdomElement(0, "div", 1, 0);
+        } }, styles: ["\n\n\n\n[_nghost-%COMP%] {\n  display: block;\n}\n\n.mjf-turnstile[_ngcontent-%COMP%] {\n  display: flex;\n  justify-content: center;\n  margin: 1rem 0;\n  min-height: 65px; \n\n}"], changeDetection: 0 });
+}
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(TurnstileChallengeComponent, [{
+        type: Component,
+        args: [{ selector: 'mjf-turnstile-challenge', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, template: `<div #host class="mjf-turnstile" aria-label="Security challenge"></div>`, styles: ["/* The Turnstile challenge slot. Cloudflare renders its own iframe inside .mjf-turnstile;\n   we only reserve space and center it so it sits comfortably above the submit action on\n   mobile and desktop alike. No hardcoded colors \u2014 the iframe styles itself. */\n:host {\n  display: block;\n}\n\n.mjf-turnstile {\n  display: flex;\n  justify-content: center;\n  margin: 1rem 0;\n  min-height: 65px; /* Turnstile's default widget height; avoids layout shift on load. */\n}\n"] }]
+    }], null, { siteKey: [{ type: i0.Input, args: [{ isSignal: true, alias: "siteKey", required: true }] }], solved: [{ type: i0.Output, args: ["solved"] }], expired: [{ type: i0.Output, args: ["expired"] }], errored: [{ type: i0.Output, args: ["errored"] }], hostEl: [{ type: i0.ViewChild, args: ['host', { isSignal: true }] }] }); })();
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassDebugInfo(TurnstileChallengeComponent, { className: "TurnstileChallengeComponent", filePath: "lib/widget/components/turnstile-challenge.component.ts", lineNumber: 43 }); })();
+//# sourceMappingURL=turnstile-challenge.component.js.map

package/dist/lib/widget/components/turnstile-challenge.component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile-challenge.component.js","sourceRoot":"","sources":["../../../../src/lib/widget/components/turnstile-challenge.component.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAEL,uBAAuB,EACvB,SAAS,EAET,MAAM,EAEN,MAAM,EACN,KAAK,EACL,MAAM,EACN,SAAS,GACV,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,YAAY,GAEb,MAAM,0BAA0B,CAAC;;;AASlC,MAAM,OAAO,2BAA2B;IACtC,qFAAqF;IACrE,OAAO,GAAG,KAAK,CAAC,QAAQ,kDAAU,CAAC;IAEnD,+DAA+D;IAC/C,MAAM,GAAG,MAAM,EAAU,CAAC;IAC1C,0EAA0E;IAC1D,OAAO,GAAG,MAAM,EAAQ,CAAC;IACzC,wFAAwF;IACxE,OAAO,GAAG,MAAM,EAAQ,CAAC;IAExB,MAAM,GAAG,SAAS,CAAC,QAAQ,CAA0B,MAAM,CAAC,CAAC;IAC7D,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAClC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvC,8EAA8E;IACtE,QAAQ,CAAqB;IAC7B,QAAQ,GAAG,KAAK,CAAC;IACzB,8EAA8E;IACtE,QAAQ,GAAG,KAAK,CAAC;IAElB,eAAe;QACpB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAEM,WAAW;QAChB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,2EAA2E;IACnE,MAAM;QACZ,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAA2B;YACtC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzE,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClE,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;SAChE,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK;QACV,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,+EAA+E;IACvE,MAAM;QACZ,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;qHA/FU,2BAA2B;6DAA3B,2BAA2B;;;;;YAH3B,+BAAuE;;;iFAGvE,2BAA2B;cAPvC,SAAS;2BACE,yBAAyB,cACvB,IAAI,mBACC,uBAAuB,CAAC,MAAM,YACrC,yEAAyE;0SAcb,MAAM;kFAXjE,2BAA2B"}

package/dist/lib/widget/core/answer-value.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The widget's in-memory answer representation and the bridge to the S1 wire format.
+ *
+ * Internally each question's answer is held as an {@link AnswerValue} (the same union
+ * the conditional-rule evaluator consumes), keyed by questionId. At submit time we
+ * convert to the contract's {@link FormAnswerInput} typed-column shape.
+ */
+import type { AnswerValue, FormAnswerInput, PublishedFormQuestion } from '@mj-biz-apps/forms-entities';
+/** The live answer map: questionId -> current value. */
+export type AnswerMap = Map<string, AnswerValue>;
+/**
+ * Convert the answer map into the wire `FormAnswerInput[]`, routing each value into
+ * the correct typed column based on the question type. Unanswered questions and
+ * display-only `Statement` questions are skipped.
+ */
+export declare function toAnswerInputs(questions: PublishedFormQuestion[], answers: AnswerMap): FormAnswerInput[];
+//# sourceMappingURL=answer-value.d.ts.map

package/dist/lib/widget/core/answer-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"answer-value.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/answer-value.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEvG,wDAAwD;AACxD,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEjD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,qBAAqB,EAAE,EAClC,OAAO,EAAE,SAAS,GACjB,eAAe,EAAE,CAanB"}

package/dist/lib/widget/core/answer-value.js

@@ -0,0 +1,41 @@
+/**
+ * Convert the answer map into the wire `FormAnswerInput[]`, routing each value into
+ * the correct typed column based on the question type. Unanswered questions and
+ * display-only `Statement` questions are skipped.
+ */
+export function toAnswerInputs(questions, answers) {
+    const inputs = [];
+    for (const q of questions) {
+        if (q.type === 'Statement') {
+            continue;
+        }
+        const value = answers.get(q.id);
+        if (value === null || value === undefined || value === '') {
+            continue;
+        }
+        inputs.push(toAnswerInput(q, value));
+    }
+    return inputs;
+}
+/** Map one question's value into the right typed column of a {@link FormAnswerInput}. */
+function toAnswerInput(question, value) {
+    const base = { questionId: question.id };
+    switch (question.type) {
+        case 'Number':
+        case 'Rating':
+        case 'NPS':
+            return { ...base, numericValue: typeof value === 'number' ? value : Number(value) };
+        case 'YesNo':
+            return { ...base, booleanValue: Boolean(value) };
+        case 'Date':
+        case 'Time':
+            return { ...base, dateValue: String(value) };
+        case 'MultiChoice':
+            return { ...base, jsonValue: Array.isArray(value) ? value : [String(value)] };
+        case 'FileUpload':
+            return { ...base, fileId: String(value) };
+        default:
+            return { ...base, textValue: String(value) };
+    }
+}
+//# sourceMappingURL=answer-value.js.map

package/dist/lib/widget/core/answer-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"answer-value.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/answer-value.ts"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAkC,EAClC,OAAkB;IAElB,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,QAA+B,EAAE,KAAkB;IACxE,MAAM,IAAI,GAAoB,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC1D,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,KAAK;YACR,OAAO,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACtF,KAAK,OAAO;YACV,OAAO,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,KAAK,aAAa;YAChB,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChF,KAAK,YAAY;YACf,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C;YACE,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/lib/widget/core/autosave-controller.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Headless autosave scheduler for the respondent widget.
+ *
+ * Debounces "progress" pings (page advance / answer edits) and, when they settle,
+ * fires a single partial save through a caller-supplied `save` function. It:
+ *   - coalesces bursts of pings into one save (not chatty),
+ *   - never overlaps saves — a ping during an in-flight save re-arms afterwards,
+ *   - threads the server-returned `responseId` back into the caller so every save
+ *     UPSERTS the same partial response (cross-session resume is Phase 2 and NOT
+ *     handled here — the id lives only for this widget instance),
+ *   - is fail-soft: a rejected save is swallowed (surfaced only via `status`), so the
+ *     respondent is never blocked or interrupted.
+ *
+ * Framework-free (takes injected `setTimeout`/`clearTimeout`) so it is unit-testable
+ * with fake timers and no Angular. The component wires it to signals + the API.
+ */
+/** What the controller asks the host to do: persist the current partial, return its id. */
+export type AutosaveFn = () => Promise<string | undefined>;
+/** Observable status for a subtle "saving…/saved" indicator. */
+export type AutosaveStatus = 'idle' | 'pending' | 'saving' | 'saved' | 'error';
+/** Callback invoked whenever {@link AutosaveController.status} changes. */
+export type AutosaveStatusListener = (status: AutosaveStatus) => void;
+/** Injectable timer seam so tests can drive time deterministically. */
+export interface TimerApi {
+    setTimeout: (fn: () => void, ms: number) => number;
+    clearTimeout: (handle: number) => void;
+}
+export declare class AutosaveController {
+    private readonly save;
+    private readonly onStatus;
+    private readonly debounceMs;
+    private readonly timers;
+    private timer;
+    private inFlight;
+    /** The promise for the currently-running save, so callers can await it settling. */
+    private inFlightSave;
+    /** A ping arrived while a save was in flight — save again once it settles. */
+    private rearm;
+    private disposed;
+    private currentStatus;
+    constructor(save: AutosaveFn, onStatus?: AutosaveStatusListener, debounceMs?: number, timers?: TimerApi);
+    get status(): AutosaveStatus;
+    /** Register progress worth saving. Restarts the debounce window. */
+    ping(): void;
+    /** Cancel any pending timer (e.g. on final submit, which persists everything). */
+    cancel(): void;
+    /**
+     * Cancel the pending debounce AND await any save that is already in flight, so a caller
+     * (the final submit) can guarantee no autosave write is still on the wire carrying the
+     * same `clientResponseId`. This is what prevents the widget from firing two overlapping
+     * writes with the same idempotency key (the source of the cosmetic PK-collision noise).
+     * Never re-arms and never throws — a failed in-flight save is swallowed (fail-soft).
+     */
+    settle(): Promise<void>;
+    /** Stop all activity; a controller is dead after this. */
+    dispose(): void;
+    private arm;
+    /** Perform one save now; re-arm if a ping arrived meanwhile. */
+    private flush;
+    /** The awaited body of one save; always resolves (fail-soft), then re-arms if needed. */
+    private runSave;
+    private clearTimer;
+    private setStatus;
+}
+//# sourceMappingURL=autosave-controller.d.ts.map

package/dist/lib/widget/core/autosave-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autosave-controller.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/autosave-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,2FAA2F;AAC3F,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAE3D,gEAAgE;AAChE,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAE/E,2EAA2E;AAC3E,MAAM,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;AAEtE,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC;IACnD,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAID,qBAAa,kBAAkB;IAW3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAbzB,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,QAAQ,CAAS;IACzB,oFAAoF;IACpF,OAAO,CAAC,YAAY,CAA8B;IAClD,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,aAAa,CAA0B;gBAG5B,IAAI,EAAE,UAAU,EAChB,QAAQ,GAAE,sBAAiC,EAC3C,UAAU,GAAE,MAA4B,EACxC,MAAM,GAAE,QAAyB;IAGpD,IAAW,MAAM,IAAI,cAAc,CAElC;IAED,oEAAoE;IAC7D,IAAI,IAAI,IAAI;IAanB,kFAAkF;IAC3E,MAAM,IAAI,IAAI;IAKrB;;;;;;OAMG;IACU,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAQpC,0DAA0D;IACnD,OAAO,IAAI,IAAI;IAKtB,OAAO,CAAC,GAAG;IAQX,gEAAgE;IAChE,OAAO,CAAC,KAAK;IAYb,yFAAyF;YAC3E,OAAO;IAkBrB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,SAAS;CAIlB"}

package/dist/lib/widget/core/autosave-controller.js

@@ -0,0 +1,134 @@
+/**
+ * Headless autosave scheduler for the respondent widget.
+ *
+ * Debounces "progress" pings (page advance / answer edits) and, when they settle,
+ * fires a single partial save through a caller-supplied `save` function. It:
+ *   - coalesces bursts of pings into one save (not chatty),
+ *   - never overlaps saves — a ping during an in-flight save re-arms afterwards,
+ *   - threads the server-returned `responseId` back into the caller so every save
+ *     UPSERTS the same partial response (cross-session resume is Phase 2 and NOT
+ *     handled here — the id lives only for this widget instance),
+ *   - is fail-soft: a rejected save is swallowed (surfaced only via `status`), so the
+ *     respondent is never blocked or interrupted.
+ *
+ * Framework-free (takes injected `setTimeout`/`clearTimeout`) so it is unit-testable
+ * with fake timers and no Angular. The component wires it to signals + the API.
+ */
+const DEFAULT_DEBOUNCE_MS = 1500;
+export class AutosaveController {
+    save;
+    onStatus;
+    debounceMs;
+    timers;
+    timer = null;
+    inFlight = false;
+    /** The promise for the currently-running save, so callers can await it settling. */
+    inFlightSave = null;
+    /** A ping arrived while a save was in flight — save again once it settles. */
+    rearm = false;
+    disposed = false;
+    currentStatus = 'idle';
+    constructor(save, onStatus = () => { }, debounceMs = DEFAULT_DEBOUNCE_MS, timers = globalTimers()) {
+        this.save = save;
+        this.onStatus = onStatus;
+        this.debounceMs = debounceMs;
+        this.timers = timers;
+    }
+    get status() {
+        return this.currentStatus;
+    }
+    /** Register progress worth saving. Restarts the debounce window. */
+    ping() {
+        if (this.disposed) {
+            return;
+        }
+        if (this.inFlight) {
+            // Don't overlap; remember to save again when the current save resolves.
+            this.rearm = true;
+            return;
+        }
+        this.setStatus('pending');
+        this.arm();
+    }
+    /** Cancel any pending timer (e.g. on final submit, which persists everything). */
+    cancel() {
+        this.clearTimer();
+        this.rearm = false;
+    }
+    /**
+     * Cancel the pending debounce AND await any save that is already in flight, so a caller
+     * (the final submit) can guarantee no autosave write is still on the wire carrying the
+     * same `clientResponseId`. This is what prevents the widget from firing two overlapping
+     * writes with the same idempotency key (the source of the cosmetic PK-collision noise).
+     * Never re-arms and never throws — a failed in-flight save is swallowed (fail-soft).
+     */
+    async settle() {
+        this.clearTimer();
+        this.rearm = false;
+        if (this.inFlightSave) {
+            await this.inFlightSave;
+        }
+    }
+    /** Stop all activity; a controller is dead after this. */
+    dispose() {
+        this.disposed = true;
+        this.cancel();
+    }
+    arm() {
+        this.clearTimer();
+        this.timer = this.timers.setTimeout(() => {
+            this.timer = null;
+            this.flush();
+        }, this.debounceMs);
+    }
+    /** Perform one save now; re-arm if a ping arrived meanwhile. */
+    flush() {
+        if (this.disposed || this.inFlight) {
+            return;
+        }
+        this.inFlight = true;
+        this.setStatus('saving');
+        // Track the running save so settle() can await it (a submit must not overlap an
+        // in-flight autosave sharing the same clientResponseId).
+        this.inFlightSave = this.runSave();
+        void this.inFlightSave;
+    }
+    /** The awaited body of one save; always resolves (fail-soft), then re-arms if needed. */
+    async runSave() {
+        try {
+            await this.save();
+            this.setStatus('saved');
+        }
+        catch {
+            // Fail-soft: never surface a blocking error for a background autosave.
+            this.setStatus('error');
+        }
+        finally {
+            this.inFlight = false;
+            this.inFlightSave = null;
+            if (this.rearm && !this.disposed) {
+                this.rearm = false;
+                this.setStatus('pending');
+                this.arm();
+            }
+        }
+    }
+    clearTimer() {
+        if (this.timer !== null) {
+            this.timers.clearTimeout(this.timer);
+            this.timer = null;
+        }
+    }
+    setStatus(status) {
+        this.currentStatus = status;
+        this.onStatus(status);
+    }
+}
+/** Bind the ambient timers, guarding against non-browser/SSR contexts. */
+function globalTimers() {
+    return {
+        setTimeout: (fn, ms) => setTimeout(fn, ms),
+        clearTimeout: (h) => clearTimeout(h),
+    };
+}
+//# sourceMappingURL=autosave-controller.js.map

package/dist/lib/widget/core/autosave-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autosave-controller.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/autosave-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiBH,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,MAAM,OAAO,kBAAkB;IAWV;IACA;IACA;IACA;IAbX,KAAK,GAAkB,IAAI,CAAC;IAC5B,QAAQ,GAAG,KAAK,CAAC;IACzB,oFAAoF;IAC5E,YAAY,GAAyB,IAAI,CAAC;IAClD,8EAA8E;IACtE,KAAK,GAAG,KAAK,CAAC;IACd,QAAQ,GAAG,KAAK,CAAC;IACjB,aAAa,GAAmB,MAAM,CAAC;IAE/C,YACmB,IAAgB,EAChB,WAAmC,GAAG,EAAE,GAAE,CAAC,EAC3C,aAAqB,mBAAmB,EACxC,SAAmB,YAAY,EAAE;QAHjC,SAAI,GAAJ,IAAI,CAAY;QAChB,aAAQ,GAAR,QAAQ,CAAmC;QAC3C,eAAU,GAAV,UAAU,CAA8B;QACxC,WAAM,GAAN,MAAM,CAA2B;IACjD,CAAC;IAEJ,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,oEAAoE;IAC7D,IAAI;QACT,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,wEAAwE;YACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;IACb,CAAC;IAED,kFAAkF;IAC3E,MAAM;QACX,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,YAAY,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,0DAA0D;IACnD,OAAO;QACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAED,gEAAgE;IACxD,KAAK;QACX,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,gFAAgF;QAChF,yDAAyD;QACzD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,YAAY,CAAC;IACzB,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,MAAsB;QACtC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;CACF;AAED,0EAA0E;AAC1E,SAAS,YAAY;IACnB,OAAO;QACL,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAsB;QAC/D,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;KACrC,CAAC;AACJ,CAAC"}

package/dist/lib/widget/core/client-id.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generate a stable, unguessable client response id — the widget's primary idempotency
+ * key for partial autosaves + the final submit (see FORMS_BUILD_PLAN §4 / the submit
+ * lifecycle hardening).
+ *
+ * One id is minted ONCE per form load and sent on EVERY save so all of them target one
+ * FormResponse row regardless of debounce/network timing or a blank server session id.
+ * The id is a v4-shaped UUID: `crypto.randomUUID()` when available (all modern browsers
+ * over HTTPS, Node 19+), else a `crypto.getRandomValues`-seeded fallback, else a
+ * last-resort `Math.random` fallback for environments with no Web Crypto at all.
+ *
+ * The value is used verbatim as the FormResponse primary key server-side, so it MUST be a
+ * syntactically valid uniqueidentifier — every branch below returns canonical UUID text.
+ */
+/** Return a fresh v4-shaped UUID string, degrading gracefully when Web Crypto is absent. */
+export declare function generateClientResponseId(): string;
+//# sourceMappingURL=client-id.d.ts.map

package/dist/lib/widget/core/client-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-id.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/client-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,4FAA4F;AAC5F,wBAAgB,wBAAwB,IAAI,MAAM,CASjD"}

package/dist/lib/widget/core/client-id.js

@@ -0,0 +1,52 @@
+/**
+ * Generate a stable, unguessable client response id — the widget's primary idempotency
+ * key for partial autosaves + the final submit (see FORMS_BUILD_PLAN §4 / the submit
+ * lifecycle hardening).
+ *
+ * One id is minted ONCE per form load and sent on EVERY save so all of them target one
+ * FormResponse row regardless of debounce/network timing or a blank server session id.
+ * The id is a v4-shaped UUID: `crypto.randomUUID()` when available (all modern browsers
+ * over HTTPS, Node 19+), else a `crypto.getRandomValues`-seeded fallback, else a
+ * last-resort `Math.random` fallback for environments with no Web Crypto at all.
+ *
+ * The value is used verbatim as the FormResponse primary key server-side, so it MUST be a
+ * syntactically valid uniqueidentifier — every branch below returns canonical UUID text.
+ */
+/** Return a fresh v4-shaped UUID string, degrading gracefully when Web Crypto is absent. */
+export function generateClientResponseId() {
+    const c = typeof crypto !== 'undefined' ? crypto : undefined;
+    if (c && typeof c.randomUUID === 'function') {
+        return c.randomUUID();
+    }
+    if (c && typeof c.getRandomValues === 'function') {
+        return uuidFromBytes(c.getRandomValues(new Uint8Array(16)));
+    }
+    return uuidFromBytes(mathRandomBytes());
+}
+/** Format 16 bytes as a canonical v4 UUID (sets the version + variant bits). */
+function uuidFromBytes(bytes) {
+    bytes[6] = (bytes[6] & 0x0f) | 0x40; // version 4
+    bytes[8] = (bytes[8] & 0x3f) | 0x80; // variant 10xx
+    const hex = [];
+    for (let i = 0; i < 16; i++) {
+        hex.push(bytes[i].toString(16).padStart(2, '0'));
+    }
+    return (hex.slice(0, 4).join('') +
+        '-' +
+        hex.slice(4, 6).join('') +
+        '-' +
+        hex.slice(6, 8).join('') +
+        '-' +
+        hex.slice(8, 10).join('') +
+        '-' +
+        hex.slice(10, 16).join(''));
+}
+/** Non-cryptographic 16-byte fallback for the (rare) no-Web-Crypto environment. */
+function mathRandomBytes() {
+    const bytes = new Uint8Array(16);
+    for (let i = 0; i < 16; i++) {
+        bytes[i] = Math.floor(Math.random() * 256);
+    }
+    return bytes;
+}
+//# sourceMappingURL=client-id.js.map

package/dist/lib/widget/core/client-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-id.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/client-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,4FAA4F;AAC5F,MAAM,UAAU,wBAAwB;IACtC,MAAM,CAAC,GAAuB,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACjD,OAAO,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAC,KAAiB;IACtC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,YAAY;IACjD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,eAAe;IACpD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CACL,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe;IACtB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lib/widget/core/form-runtime.d.ts

@@ -0,0 +1,34 @@
+import { type AnswerValue, type FormAnswerInput, type PublishedFormDefinition, type PublishedFormPage, type PublishedFormQuestion } from '@mj-biz-apps/forms-entities';
+export declare class FormRuntime {
+    private readonly definition;
+    private readonly answers;
+    private readonly touched;
+    constructor(definition: PublishedFormDefinition);
+    readonly answerMap: import("@angular/core").Signal<Map<string, AnswerValue>>;
+    valueFor(questionId: string): AnswerValue;
+    setValue(questionId: string, value: AnswerValue): void;
+    markTouched(questionId: string): void;
+    isTouched(questionId: string): boolean;
+    /** Pages whose page-level rule passes given current answers. */
+    readonly visiblePages: import("@angular/core").Signal<PublishedFormPage[]>;
+    /** Visible questions on a given page (page must itself be visible to matter). */
+    visibleQuestions(page: PublishedFormPage): PublishedFormQuestion[];
+    /** Every visible, non-statement question across the form, in document order. */
+    readonly visibleAnswerableQuestions: import("@angular/core").Signal<PublishedFormQuestion[]>;
+    /** Validation message for a question, or `null` when valid. */
+    errorFor(question: PublishedFormQuestion): string | null;
+    /** Error shown in the UI only after the field has been touched. */
+    visibleErrorFor(question: PublishedFormQuestion): string | null;
+    /** True when every supplied list of questions currently validates. */
+    areValid(questions: PublishedFormQuestion[]): boolean;
+    /** Mark a set of questions touched (e.g. on a failed next/submit) to surface errors. */
+    touchAll(questions: PublishedFormQuestion[]): void;
+    /** Whole-form validity over all currently-visible answerable questions. */
+    readonly isFormValid: import("@angular/core").Signal<boolean>;
+    /** Fraction 0–1 of visible answerable questions that have a value. */
+    readonly progress: import("@angular/core").Signal<number>;
+    /** Build the wire answers for all currently-visible answerable questions. */
+    buildAnswerInputs(): FormAnswerInput[];
+    private orderedPages;
+}
+//# sourceMappingURL=form-runtime.d.ts.map

package/dist/lib/widget/core/form-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-runtime.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/form-runtime.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AAKrC,qBAAa,WAAW;IAIV,OAAO,CAAC,QAAQ,CAAC,UAAU;IAHvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IACvE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;gBAE7B,UAAU,EAAE,uBAAuB;IAIhE,SAAgB,SAAS,2DAA6B;IAE/C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW;IAIzC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI;IAUtD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IASrC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAM7C,gEAAgE;IAChE,SAAgB,YAAY,sDAKzB;IAEH,iFAAiF;IAC1E,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,EAAE;IAOzE,gFAAgF;IAChF,SAAgB,0BAA0B,0DAUvC;IAIH,+DAA+D;IACxD,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI;IAI/D,mEAAmE;IAC5D,eAAe,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI;IAItE,sEAAsE;IAC/D,QAAQ,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,OAAO;IAI5D,wFAAwF;IACjF,QAAQ,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,IAAI;IAQzD,2EAA2E;IAC3E,SAAgB,WAAW,0CAIzB;IAIF,sEAAsE;IACtE,SAAgB,QAAQ,yCAOrB;IAIH,6EAA6E;IACtE,iBAAiB,IAAI,eAAe,EAAE;IAI7C,OAAO,CAAC,YAAY;CAGrB"}