@mj-biz-apps/forms-ng 0.0.0 → 0.2.0

package/dist/lib/widget/core/form-runtime.js

@@ -0,0 +1,123 @@
+/**
+ * Headless runtime shared by both render modes. Holds the live answer map as a signal,
+ * derives per-question/per-page visibility from the conditional rules (S2), tracks
+ * validation + touched state, and computes the progress signal. Components read its
+ * signals and call its mutators; it owns no DOM and no transport.
+ */
+import { computed, signal } from '@angular/core';
+import { evaluateConditionalRule, } from '@mj-biz-apps/forms-entities';
+import { toAnswerInputs } from './answer-value';
+import { validateQuestion } from './validation';
+export class FormRuntime {
+    definition;
+    answers = signal(new Map(), ...(ngDevMode ? [{ debugName: "answers" }] : []));
+    touched = signal(new Set(), ...(ngDevMode ? [{ debugName: "touched" }] : []));
+    constructor(definition) {
+        this.definition = definition;
+    }
+    // --- Answer access -------------------------------------------------------
+    answerMap = this.answers.asReadonly();
+    valueFor(questionId) {
+        return this.answers().get(questionId);
+    }
+    setValue(questionId, value) {
+        const next = new Map(this.answers());
+        if (value === null || value === undefined) {
+            next.delete(questionId);
+        }
+        else {
+            next.set(questionId, value);
+        }
+        this.answers.set(next);
+    }
+    markTouched(questionId) {
+        if (this.touched().has(questionId)) {
+            return;
+        }
+        const next = new Set(this.touched());
+        next.add(questionId);
+        this.touched.set(next);
+    }
+    isTouched(questionId) {
+        return this.touched().has(questionId);
+    }
+    // --- Visibility (conditional rules, S2) ---------------------------------
+    /** Pages whose page-level rule passes given current answers. */
+    visiblePages = computed(() => {
+        const map = this.answers();
+        return this.orderedPages().filter((p) => evaluateConditionalRule(p.conditionalRule, map));
+    }, ...(ngDevMode ? [{ debugName: "visiblePages" }] : []));
+    /** Visible questions on a given page (page must itself be visible to matter). */
+    visibleQuestions(page) {
+        const map = this.answers();
+        return [...page.questions]
+            .sort((a, b) => a.displayOrder - b.displayOrder)
+            .filter((q) => evaluateConditionalRule(q.conditionalRule, map));
+    }
+    /** Every visible, non-statement question across the form, in document order. */
+    visibleAnswerableQuestions = computed(() => {
+        const out = [];
+        for (const page of this.visiblePages()) {
+            for (const q of this.visibleQuestions(page)) {
+                if (q.type !== 'Statement') {
+                    out.push(q);
+                }
+            }
+        }
+        return out;
+    }, ...(ngDevMode ? [{ debugName: "visibleAnswerableQuestions" }] : []));
+    // --- Validation ----------------------------------------------------------
+    /** Validation message for a question, or `null` when valid. */
+    errorFor(question) {
+        return validateQuestion(question, this.valueFor(question.id)).message;
+    }
+    /** Error shown in the UI only after the field has been touched. */
+    visibleErrorFor(question) {
+        return this.isTouched(question.id) ? this.errorFor(question) : null;
+    }
+    /** True when every supplied list of questions currently validates. */
+    areValid(questions) {
+        return questions.every((q) => validateQuestion(q, this.valueFor(q.id)).valid);
+    }
+    /** Mark a set of questions touched (e.g. on a failed next/submit) to surface errors. */
+    touchAll(questions) {
+        const next = new Set(this.touched());
+        for (const q of questions) {
+            next.add(q.id);
+        }
+        this.touched.set(next);
+    }
+    /** Whole-form validity over all currently-visible answerable questions. */
+    isFormValid = computed(() => this.visibleAnswerableQuestions().every((q) => validateQuestion(q, this.valueFor(q.id)).valid), ...(ngDevMode ? [{ debugName: "isFormValid" }] : []));
+    // --- Progress ------------------------------------------------------------
+    /** Fraction 0–1 of visible answerable questions that have a value. */
+    progress = computed(() => {
+        const qs = this.visibleAnswerableQuestions();
+        if (qs.length === 0) {
+            return 1;
+        }
+        const answered = qs.filter((q) => hasAnswer(this.valueFor(q.id))).length;
+        return answered / qs.length;
+    }, ...(ngDevMode ? [{ debugName: "progress" }] : []));
+    // --- Submission ----------------------------------------------------------
+    /** Build the wire answers for all currently-visible answerable questions. */
+    buildAnswerInputs() {
+        return toAnswerInputs(this.visibleAnswerableQuestions(), this.answers());
+    }
+    orderedPages() {
+        return [...this.definition.pages].sort((a, b) => a.displayOrder - b.displayOrder);
+    }
+}
+function hasAnswer(value) {
+    if (value === null || value === undefined) {
+        return false;
+    }
+    if (typeof value === 'string') {
+        return value.trim().length > 0;
+    }
+    if (Array.isArray(value)) {
+        return value.length > 0;
+    }
+    return true;
+}
+//# sourceMappingURL=form-runtime.js.map

package/dist/lib/widget/core/form-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-runtime.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/form-runtime.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EACL,uBAAuB,GAMxB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,OAAO,WAAW;IAIO;IAHZ,OAAO,GAAG,MAAM,CAA2B,IAAI,GAAG,EAAE,mDAAC,CAAC;IACtD,OAAO,GAAG,MAAM,CAAc,IAAI,GAAG,EAAE,mDAAC,CAAC;IAE1D,YAA6B,UAAmC;QAAnC,eAAU,GAAV,UAAU,CAAyB;IAAG,CAAC;IAEpE,4EAA4E;IAE5D,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IAE/C,QAAQ,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAEM,QAAQ,CAAC,UAAkB,EAAE,KAAkB;QACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAEM,WAAW,CAAC,UAAkB;QACnC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAEM,SAAS,CAAC,UAAkB;QACjC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,2EAA2E;IAE3E,gEAAgE;IAChD,YAAY,GAAG,QAAQ,CAAsB,GAAG,EAAE;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,uBAAuB,CAAC,CAAC,CAAC,eAAe,EAAE,GAAG,CAAC,CAChD,CAAC;IACJ,CAAC,wDAAC,CAAC;IAEH,iFAAiF;IAC1E,gBAAgB,CAAC,IAAuB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;aACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;aAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,gFAAgF;IAChE,0BAA0B,GAAG,QAAQ,CAA0B,GAAG,EAAE;QAClF,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC3B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,sEAAC,CAAC;IAEH,4EAA4E;IAE5E,+DAA+D;IACxD,QAAQ,CAAC,QAA+B;QAC7C,OAAO,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,CAAC;IAED,mEAAmE;IAC5D,eAAe,CAAC,QAA+B;QACpD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAED,sEAAsE;IAC/D,QAAQ,CAAC,SAAkC;QAChD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC;IAED,wFAAwF;IACjF,QAAQ,CAAC,SAAkC;QAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,2EAA2E;IAC3D,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,CAC1C,IAAI,CAAC,0BAA0B,EAAE,CAAC,KAAK,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CACtD,uDACF,CAAC;IAEF,4EAA4E;IAE5E,sEAAsE;IACtD,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC7C,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC;IAC9B,CAAC,oDAAC,CAAC;IAEH,4EAA4E;IAE5E,6EAA6E;IACtE,iBAAiB;QACtB,OAAO,cAAc,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,YAAY;QAClB,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;IACpF,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAkB;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/widget/core/one-question-stepper.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Pure, framework-free cursor math for the OneQuestion (Typeform-style) render mode.
+ *
+ * The OneQuestion component shows one visible answerable question at a time. The list of
+ * visible questions changes live as conditional rules fire, so the cursor must never point
+ * past the last visible question — and, critically, must be *written back* when the path
+ * shrinks, so it does not "jump ahead" once the path grows again. The component owns the
+ * reactive cursor (an Angular signal) and routes every write through {@link clampCursor};
+ * keeping the clamp here (one tested function, one source of truth) is what makes that
+ * guarantee testable without Angular.
+ */
+/**
+ * Clamp a cursor to the valid `[0, max(0, total-1)]` range.
+ *
+ * @param value the desired cursor position (may be out of range / negative)
+ * @param total the number of visible steps
+ * @returns the in-range cursor; `0` when there are no steps
+ */
+export declare function clampCursor(value: number, total: number): number;
+//# sourceMappingURL=one-question-stepper.d.ts.map

package/dist/lib/widget/core/one-question-stepper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-question-stepper.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/one-question-stepper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhE"}

package/dist/lib/widget/core/one-question-stepper.js

@@ -0,0 +1,23 @@
+/**
+ * Pure, framework-free cursor math for the OneQuestion (Typeform-style) render mode.
+ *
+ * The OneQuestion component shows one visible answerable question at a time. The list of
+ * visible questions changes live as conditional rules fire, so the cursor must never point
+ * past the last visible question — and, critically, must be *written back* when the path
+ * shrinks, so it does not "jump ahead" once the path grows again. The component owns the
+ * reactive cursor (an Angular signal) and routes every write through {@link clampCursor};
+ * keeping the clamp here (one tested function, one source of truth) is what makes that
+ * guarantee testable without Angular.
+ */
+/**
+ * Clamp a cursor to the valid `[0, max(0, total-1)]` range.
+ *
+ * @param value the desired cursor position (may be out of range / negative)
+ * @param total the number of visible steps
+ * @returns the in-range cursor; `0` when there are no steps
+ */
+export function clampCursor(value, total) {
+    const max = Math.max(0, total - 1);
+    return Math.min(Math.max(0, value), max);
+}
+//# sourceMappingURL=one-question-stepper.js.map

package/dist/lib/widget/core/one-question-stepper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-question-stepper.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/one-question-stepper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/dist/lib/widget/core/submit-phase.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Pure phase-transition helpers for the respondent widget's submit lifecycle.
+ *
+ * Framework-free (no Angular, no signals) so the state machine that decides "did this submit
+ * reach the confirmation screen?" is unit-testable in isolation — the component just wires
+ * these to its `phase` signal. This is the guard layer that closes the "success but no
+ * thank-you screen" and "double-submit" bugs.
+ */
+import type { FormSubmissionResult } from '@mj-biz-apps/forms-entities';
+/** Lifecycle phase of the widget. Mirrors the component's `WidgetPhase`. */
+export type WidgetPhase = 'loading' | 'ready' | 'submitting' | 'done' | 'error';
+/**
+ * Whether a submit attempt should be IGNORED as re-entrant. A submit is ignored while one is
+ * already in flight ('submitting') or the widget has already confirmed ('done') — the
+ * double-submit guard. From any other phase the submit proceeds.
+ */
+export declare function shouldIgnoreSubmit(phase: WidgetPhase): boolean;
+/** The phase a submit result maps to, plus whether the widget should redirect. */
+export interface SubmitOutcome {
+    phase: WidgetPhase;
+    /** True only when a redirect URL is present on a successful result. */
+    redirect: boolean;
+}
+/**
+ * Decide the phase (and redirect intent) for a submit RESULT. On success the widget ALWAYS
+ * reaches 'done' — for both render modes and whether or not a redirect URL is set (a redirect
+ * still shows 'done' first, so a blocked/slow navigation never leaves a blank screen). On
+ * failure it returns to 'ready' so the respondent can fix + retry.
+ */
+export declare function outcomeForResult(result: FormSubmissionResult): SubmitOutcome;
+//# sourceMappingURL=submit-phase.d.ts.map

package/dist/lib/widget/core/submit-phase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-phase.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/submit-phase.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAE9D;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB,uEAAuE;IACvE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,GAAG,aAAa,CAK5E"}

package/dist/lib/widget/core/submit-phase.js

@@ -0,0 +1,21 @@
+/**
+ * Whether a submit attempt should be IGNORED as re-entrant. A submit is ignored while one is
+ * already in flight ('submitting') or the widget has already confirmed ('done') — the
+ * double-submit guard. From any other phase the submit proceeds.
+ */
+export function shouldIgnoreSubmit(phase) {
+    return phase === 'submitting' || phase === 'done';
+}
+/**
+ * Decide the phase (and redirect intent) for a submit RESULT. On success the widget ALWAYS
+ * reaches 'done' — for both render modes and whether or not a redirect URL is set (a redirect
+ * still shows 'done' first, so a blocked/slow navigation never leaves a blank screen). On
+ * failure it returns to 'ready' so the respondent can fix + retry.
+ */
+export function outcomeForResult(result) {
+    if (!result.success) {
+        return { phase: 'ready', redirect: false };
+    }
+    return { phase: 'done', redirect: Boolean(result.redirectUrl) };
+}
+//# sourceMappingURL=submit-phase.js.map

package/dist/lib/widget/core/submit-phase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-phase.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/submit-phase.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACnD,OAAO,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,CAAC;AACpD,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA4B;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AAClE,CAAC"}

package/dist/lib/widget/core/theming.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Apply a published form's {@link FormStyleTokens} as CSS custom properties on the
+ * widget host element. This is the ONLY place colors enter the widget: every
+ * component styles itself with `--mjf-*` / `--mj-*` tokens, so a form is re-themed
+ * purely by the `cssVariables` map the builder captured at publish time. No hardcoded
+ * colors anywhere downstream.
+ */
+import type { FormStyleTokens } from '@mj-biz-apps/forms-entities';
+/**
+ * Set each `--token: value` from `styleTokens.cssVariables` on `host.style`, inject
+ * optional `customCSS` into a scoped `<style>` inside the host, and expose `logoURL`
+ * as the `--mjf-logo-url` token. Token names are passed through verbatim; only
+ * `--`-prefixed custom properties are accepted (defensive — never lets a raw color in
+ * under a non-custom-property name).
+ */
+export declare function applyStyleTokens(host: HTMLElement, tokens: FormStyleTokens | undefined): void;
+//# sourceMappingURL=theming.d.ts.map

package/dist/lib/widget/core/theming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theming.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/theming.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAe7F"}

package/dist/lib/widget/core/theming.js

@@ -0,0 +1,36 @@
+/**
+ * Set each `--token: value` from `styleTokens.cssVariables` on `host.style`, inject
+ * optional `customCSS` into a scoped `<style>` inside the host, and expose `logoURL`
+ * as the `--mjf-logo-url` token. Token names are passed through verbatim; only
+ * `--`-prefixed custom properties are accepted (defensive — never lets a raw color in
+ * under a non-custom-property name).
+ */
+export function applyStyleTokens(host, tokens) {
+    if (!tokens) {
+        return;
+    }
+    for (const [name, value] of Object.entries(tokens.cssVariables ?? {})) {
+        if (name.startsWith('--')) {
+            host.style.setProperty(name, value);
+        }
+    }
+    if (tokens.logoURL) {
+        host.style.setProperty('--mjf-logo-url', `url("${tokens.logoURL}")`);
+    }
+    if (tokens.customCSS) {
+        applyCustomCss(host, tokens.customCSS);
+    }
+}
+/** Inject form-author custom CSS once, inside the host so it stays scoped to the widget. */
+function applyCustomCss(host, css) {
+    const existing = host.querySelector('style[data-mjf-custom]');
+    if (existing) {
+        existing.textContent = css;
+        return;
+    }
+    const style = host.ownerDocument.createElement('style');
+    style.setAttribute('data-mjf-custom', '');
+    style.textContent = css;
+    host.appendChild(style);
+}
+//# sourceMappingURL=theming.js.map

package/dist/lib/widget/core/theming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theming.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/theming.ts"],"names":[],"mappings":"AASA;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAiB,EAAE,MAAmC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE,QAAQ,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAS,cAAc,CAAC,IAAiB,EAAE,GAAW;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;IAC9D,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACxD,KAAK,CAAC,YAAY,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;IACxB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC"}

package/dist/lib/widget/core/turnstile-gate.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Pure, Angular-free helpers for the client-side Cloudflare Turnstile gate (DG-4).
+ *
+ * Captcha is a per-form / per-distribution toggle: the published definition carries
+ * `settings.captchaRequired`, and the server is fail-closed. The widget mirrors that
+ * decision here — deciding whether to render a challenge, whether the config is complete
+ * enough to render one, whether a final submit may proceed, and whether a failed
+ * submit's error came from Turnstile (so the challenge can be reset for a retry).
+ *
+ * These functions are deliberately free of Angular/DOM so they can be unit-tested
+ * without a browser or the Turnstile global (the package's Vitest suite is node-only).
+ */
+import type { PublishedFormDefinition } from '@mj-biz-apps/forms-entities';
+/** Server-side Turnstile error codes surfaced to the client (see Server/turnstile.service.ts). */
+export declare const TURNSTILE_ERROR_CODES: readonly ["missing-token", "turnstile-not-configured", "verification-failed", "turnstile-unreachable", "invalid-input-response", "timeout-or-duplicate"];
+/** Does this published form require a captcha challenge before submit? */
+export declare function captchaRequired(def: PublishedFormDefinition | null): boolean;
+/**
+ * Can the challenge actually be rendered? Requires captcha to be on AND a public site
+ * key to be configured. When captcha is on but the site key is missing, the widget
+ * shows a config-gap message rather than a silent dead-end.
+ */
+export declare function canRenderChallenge(def: PublishedFormDefinition | null, siteKey: string | undefined): boolean;
+/** True when captcha is required but no site key was supplied to the widget. */
+export declare function isConfigGap(def: PublishedFormDefinition | null, siteKey: string | undefined): boolean;
+/** A site key counts as configured only when it is a non-blank string. */
+export declare function isSiteKeyConfigured(siteKey: string | undefined): boolean;
+/**
+ * May the final submit proceed? When captcha is not required, always yes (behave exactly
+ * as before this feature). When required, a non-empty solved token must be held. If the
+ * site key is missing the answer is no — there is no way to produce a token, so the
+ * config-gap message is what the respondent sees instead.
+ */
+export declare function canSubmit(def: PublishedFormDefinition | null, siteKey: string | undefined, token: string | null): boolean;
+/**
+ * Whether a failed-submit error message came from the Turnstile check, meaning the
+ * (single-use) token was consumed/rejected and the challenge must be reset so the
+ * respondent can solve a fresh one. The server phrases these as
+ * `Captcha verification failed (<code>).`.
+ */
+export declare function isTurnstileError(message: string | undefined | null): boolean;
+//# sourceMappingURL=turnstile-gate.d.ts.map

package/dist/lib/widget/core/turnstile-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile-gate.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/turnstile-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAE3E,kGAAkG;AAClG,eAAO,MAAM,qBAAqB,0JAOxB,CAAC;AAEX,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,GAAG,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,uBAAuB,GAAG,IAAI,EACnC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAET;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CACzB,GAAG,EAAE,uBAAuB,GAAG,IAAI,EACnC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAET;AAED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAExE;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,uBAAuB,GAAG,IAAI,EACnC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAQT;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAS5E"}

package/dist/lib/widget/core/turnstile-gate.js

@@ -0,0 +1,61 @@
+/** Server-side Turnstile error codes surfaced to the client (see Server/turnstile.service.ts). */
+export const TURNSTILE_ERROR_CODES = [
+    'missing-token',
+    'turnstile-not-configured',
+    'verification-failed',
+    'turnstile-unreachable',
+    'invalid-input-response',
+    'timeout-or-duplicate',
+];
+/** Does this published form require a captcha challenge before submit? */
+export function captchaRequired(def) {
+    return def?.settings.captchaRequired === true;
+}
+/**
+ * Can the challenge actually be rendered? Requires captcha to be on AND a public site
+ * key to be configured. When captcha is on but the site key is missing, the widget
+ * shows a config-gap message rather than a silent dead-end.
+ */
+export function canRenderChallenge(def, siteKey) {
+    return captchaRequired(def) && isSiteKeyConfigured(siteKey);
+}
+/** True when captcha is required but no site key was supplied to the widget. */
+export function isConfigGap(def, siteKey) {
+    return captchaRequired(def) && !isSiteKeyConfigured(siteKey);
+}
+/** A site key counts as configured only when it is a non-blank string. */
+export function isSiteKeyConfigured(siteKey) {
+    return typeof siteKey === 'string' && siteKey.trim().length > 0;
+}
+/**
+ * May the final submit proceed? When captcha is not required, always yes (behave exactly
+ * as before this feature). When required, a non-empty solved token must be held. If the
+ * site key is missing the answer is no — there is no way to produce a token, so the
+ * config-gap message is what the respondent sees instead.
+ */
+export function canSubmit(def, siteKey, token) {
+    if (!captchaRequired(def)) {
+        return true;
+    }
+    if (!isSiteKeyConfigured(siteKey)) {
+        return false;
+    }
+    return typeof token === 'string' && token.trim().length > 0;
+}
+/**
+ * Whether a failed-submit error message came from the Turnstile check, meaning the
+ * (single-use) token was consumed/rejected and the challenge must be reset so the
+ * respondent can solve a fresh one. The server phrases these as
+ * `Captcha verification failed (<code>).`.
+ */
+export function isTurnstileError(message) {
+    if (!message) {
+        return false;
+    }
+    const lower = message.toLowerCase();
+    if (lower.includes('captcha')) {
+        return true;
+    }
+    return TURNSTILE_ERROR_CODES.some((code) => lower.includes(code));
+}
+//# sourceMappingURL=turnstile-gate.js.map

package/dist/lib/widget/core/turnstile-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile-gate.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/turnstile-gate.ts"],"names":[],"mappings":"AAcA,kGAAkG;AAClG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe;IACf,0BAA0B;IAC1B,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,sBAAsB;CACd,CAAC;AAEX,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,GAAmC;IACjE,OAAO,GAAG,EAAE,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAmC,EACnC,OAA2B;IAE3B,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CACzB,GAAmC,EACnC,OAA2B;IAE3B,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,GAAmC,EACnC,OAA2B,EAC3B,KAAoB;IAEpB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAkC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC"}

package/dist/lib/widget/core/turnstile-loader.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Typed access to the Cloudflare Turnstile browser global and a one-shot loader for
+ * its script. Kept separate from the component so the render logic has a strongly-typed
+ * seam (no `any`) and so tests can stub the global on `window`.
+ *
+ * The script (`https://challenges.cloudflare.com/turnstile/v0/api.js`) is loaded at most
+ * once per document, regardless of how many `<mj-form>` instances are on the page.
+ */
+/** Options passed to `turnstile.render` (explicit mode subset we use). */
+export interface TurnstileRenderOptions {
+    sitekey: string;
+    callback: (token: string) => void;
+    'expired-callback'?: () => void;
+    'error-callback'?: () => void;
+}
+/** The subset of the Cloudflare Turnstile API this widget calls. */
+export interface TurnstileApi {
+    render(container: HTMLElement, options: TurnstileRenderOptions): string;
+    reset(widgetId: string): void;
+    remove(widgetId: string): void;
+}
+/** Default Cloudflare Turnstile script URL (overridable via widget config). */
+export declare const DEFAULT_TURNSTILE_SCRIPT_URL = "https://challenges.cloudflare.com/turnstile/v0/api.js";
+/** The Turnstile global if the script has loaded, else undefined. */
+export declare function getTurnstile(): TurnstileApi | undefined;
+/**
+ * Ensure the Turnstile script is loaded exactly once, resolving when `window.turnstile`
+ * is available. Rejects if the script fails to load or there is no DOM. Subsequent calls
+ * return the same promise.
+ */
+export declare function ensureTurnstileScript(scriptUrl?: string): Promise<void>;
+/** Test-only: reset the module-level load state so specs start clean. */
+export declare function resetTurnstileLoaderForTest(): void;
+//# sourceMappingURL=turnstile-loader.d.ts.map

package/dist/lib/widget/core/turnstile-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile-loader.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/turnstile-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;CAC/B;AAED,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAAC;IACxE,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAOD,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,0DAA0D,CAAC;AAQpG,qEAAqE;AACrE,wBAAgB,YAAY,IAAI,YAAY,GAAG,SAAS,CAKvD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,SAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CAY7F;AA2BD,yEAAyE;AACzE,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}

package/dist/lib/widget/core/turnstile-loader.js

@@ -0,0 +1,68 @@
+/**
+ * Typed access to the Cloudflare Turnstile browser global and a one-shot loader for
+ * its script. Kept separate from the component so the render logic has a strongly-typed
+ * seam (no `any`) and so tests can stub the global on `window`.
+ *
+ * The script (`https://challenges.cloudflare.com/turnstile/v0/api.js`) is loaded at most
+ * once per document, regardless of how many `<mj-form>` instances are on the page.
+ */
+/** Default Cloudflare Turnstile script URL (overridable via widget config). */
+export const DEFAULT_TURNSTILE_SCRIPT_URL = 'https://challenges.cloudflare.com/turnstile/v0/api.js';
+/** DOM id for the singleton `<script>` tag, so we never inject it twice. */
+const SCRIPT_ELEMENT_ID = 'mjf-turnstile-script';
+/** In-flight/settled load promise, shared across all widget instances on the page. */
+let loadPromise = null;
+/** The Turnstile global if the script has loaded, else undefined. */
+export function getTurnstile() {
+    if (typeof window === 'undefined') {
+        return undefined;
+    }
+    return window.turnstile;
+}
+/**
+ * Ensure the Turnstile script is loaded exactly once, resolving when `window.turnstile`
+ * is available. Rejects if the script fails to load or there is no DOM. Subsequent calls
+ * return the same promise.
+ */
+export function ensureTurnstileScript(scriptUrl = DEFAULT_TURNSTILE_SCRIPT_URL) {
+    if (getTurnstile()) {
+        return Promise.resolve();
+    }
+    if (loadPromise) {
+        return loadPromise;
+    }
+    if (typeof document === 'undefined') {
+        return Promise.reject(new Error('Turnstile requires a DOM.'));
+    }
+    loadPromise = injectScript(scriptUrl);
+    return loadPromise;
+}
+/** Inject the script tag (or await an existing one) and resolve when the global appears. */
+function injectScript(scriptUrl) {
+    return new Promise((resolve, reject) => {
+        const existing = document.getElementById(SCRIPT_ELEMENT_ID);
+        if (existing) {
+            existing.addEventListener('load', () => resolve(), { once: true });
+            existing.addEventListener('error', () => reject(new Error('Turnstile script failed to load.')), {
+                once: true,
+            });
+            return;
+        }
+        const script = document.createElement('script');
+        script.id = SCRIPT_ELEMENT_ID;
+        script.src = scriptUrl;
+        script.async = true;
+        script.defer = true;
+        script.addEventListener('load', () => resolve(), { once: true });
+        script.addEventListener('error', () => {
+            loadPromise = null; // allow a later retry
+            reject(new Error('Turnstile script failed to load.'));
+        }, { once: true });
+        document.head.appendChild(script);
+    });
+}
+/** Test-only: reset the module-level load state so specs start clean. */
+export function resetTurnstileLoaderForTest() {
+    loadPromise = null;
+}
+//# sourceMappingURL=turnstile-loader.js.map

package/dist/lib/widget/core/turnstile-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile-loader.js","sourceRoot":"","sources":["../../../../src/lib/widget/core/turnstile-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAsBH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,uDAAuD,CAAC;AAEpG,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEjD,sFAAsF;AACtF,IAAI,WAAW,GAAyB,IAAI,CAAC;AAE7C,qEAAqE;AACrE,MAAM,UAAU,YAAY;IAC1B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAQ,MAA0B,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAS,GAAG,4BAA4B;IAC5E,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,4FAA4F;AAC5F,SAAS,YAAY,CAAC,SAAiB;IACrC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAA6B,CAAC;QACxF,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE;gBAC9F,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC;QACvB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YACpC,WAAW,GAAG,IAAI,CAAC,CAAC,sBAAsB;YAC1C,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACxD,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,2BAA2B;IACzC,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC"}

package/dist/lib/widget/core/validation.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Client-side enforcement of `isRequired` + `ValidationRule` (S2). The server
+ * re-validates the same rules on submit; this layer gives instant, accessible
+ * feedback and blocks navigation/submit on a visible, required question.
+ */
+import type { AnswerValue, PublishedFormQuestion } from '@mj-biz-apps/forms-entities';
+/** A per-question validation outcome. `null` message means "valid". */
+export interface FieldValidationResult {
+    valid: boolean;
+    message: string | null;
+}
+/** True when a value counts as "supplied" (non-empty string / non-empty array / present). */
+export declare function hasValue(value: AnswerValue): boolean;
+/**
+ * Validate one question's current value. Only call for VISIBLE questions — hidden
+ * questions (failed conditional rule) are never required and never validated.
+ */
+export declare function validateQuestion(question: PublishedFormQuestion, value: AnswerValue): FieldValidationResult;
+//# sourceMappingURL=validation.d.ts.map

package/dist/lib/widget/core/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/lib/widget/core/validation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EACV,WAAW,EACX,qBAAqB,EAEtB,MAAM,6BAA6B,CAAC;AAErC,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAID,6FAA6F;AAC7F,wBAAgB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAWpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,qBAAqB,EAC/B,KAAK,EAAE,WAAW,GACjB,qBAAqB,CAgBvB"}