@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.8.1-develop.7441.1.b42958b98c

package/dist/modules/forms/di.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/forms/di.ts"],
+  "sourcesContent": ["import { asValue, asFunction } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { getOrm } from '@open-mercato/shared/lib/db/mikro'\nimport { defaultFieldTypeRegistry } from './schema/field-type-registry'\nimport { FormVersionCompiler } from './services/form-version-compiler'\nimport { FormVersionDiffer } from './services/form-version-differ'\nimport {\n  FormsEncryptionService,\n  resolveKmsAdapter,\n  type EncryptionService,\n} from './services/encryption-service'\nimport { RolePolicyService } from './services/role-policy-service'\nimport { SubmissionService } from './services/submission-service'\nimport { DistributionService } from './services/distribution-service'\nimport {\n  AccessAuditLogger,\n  BatchingAccessAuditLogger,\n  FormsAccessAuditLogger,\n  resolveAccessAuditBatchMs,\n  type AccessAuditEvent,\n} from './services/access-audit-logger'\nimport { AnonymizeService } from './services/anonymize-service'\nimport { AnalyticsService } from './services/analytics-service'\nimport { ConsentRecordService } from './services/consent-record-service'\nimport { ExportService } from './services/export-service'\nimport { AttachmentService } from './services/attachment-service'\nimport { PdfSnapshotService } from './services/pdf-snapshot-service'\nimport { NoopUploadScanner, type UploadScanner } from './services/upload-scanner'\nimport { resolveCaptchaVerifier, type CaptchaVerifier } from './services/captcha-verifier'\nimport { DefaultPrefillResolver, type PrefillResolver } from './services/prefill-resolver'\nimport { emitFormsEvent } from './events'\nimport { formsEventPayloadSchemas } from './events-payloads'\n\n/**\n * Forms module DI registrar.\n *\n * Registered keys (FROZEN \u2014 root AGENTS.md \u00A7 BC contract \u00A7 9):\n * - `fieldTypeRegistry` (1a) \u2192 singleton FieldTypeRegistry preloaded with the\n *    11 v1 core field types.\n * - `formVersionCompiler` (1a) \u2192 singleton FormVersionCompiler bound to the\n *    same registry. Phases 1b/1c/1d resolve this to compile draft and\n *    published form versions for AJV/Zod validation and role policy.\n * - `formVersionDiffer` (1b) \u2192 singleton pure-function FormVersionDiffer.\n *    Consumes compiled `fieldIndex` maps to produce added/removed/modified\n *    field-level diffs for the publish dialog and version history modal.\n * - `formsEncryptionService` (1c) \u2192 per-tenant envelope encryption service\n *    used by SubmissionService for revision payloads.\n * - `formsRolePolicyService` (1c) \u2192 resolver over compiled form versions for\n *    role-aware read/write decisions.\n * - `formsSubmissionService` (1c) \u2192 owns the submission lifecycle.\n *    Lazy-resolves `em` per request from the container so EntityManager\n *    request scoping is honoured.\n */\nexport function register(container: AppContainer): void {\n  const formVersionCompiler = new FormVersionCompiler({ registry: defaultFieldTypeRegistry })\n  const formVersionDiffer = new FormVersionDiffer()\n  const rolePolicyService = new RolePolicyService()\n\n  // T7 \u2014 async-batched access audit. `FORMS_ACCESS_AUDIT_BATCH_MS=0` (default)\n  // keeps the synchronous insert-per-read posture on the request's own EM\n  // (deterministic for tests). A positive value buffers events and flushes them\n  // as a bulk insert on a fresh forked EM, off the read hot path.\n  const accessAuditBatchMs = resolveAccessAuditBatchMs(process.env)\n  const accessAuditLogger: AccessAuditLogger =\n    accessAuditBatchMs > 0\n      ? new BatchingAccessAuditLogger({\n          batchMs: accessAuditBatchMs,\n          // Fork a fresh EM at flush time \u2014 the request EM is long gone.\n          emFactory: async (): Promise<EntityManager> => {\n            const orm = await getOrm()\n            return orm.em.fork() as unknown as EntityManager\n          },\n        })\n      : new FormsAccessAuditLogger()\n\n  container.register({\n    fieldTypeRegistry: asValue(defaultFieldTypeRegistry),\n    formVersionCompiler: asValue(formVersionCompiler),\n    formVersionDiffer: asValue(formVersionDiffer),\n    formsRolePolicyService: asValue(rolePolicyService),\n    formsAccessAuditLogger: asValue(accessAuditLogger),\n    formsEncryptionService: asFunction(({ em }: { em: EntityManager }): EncryptionService => {\n      // resolveKmsAdapter picks the production env master-key adapter (or an\n      // operator-injected cloud-KMS adapter) and refuses the DEV-ONLY fallback\n      // when NODE_ENV=production (spec W1 / risk R-1). An operator may also\n      // inject a custom adapter via setKmsAdapterFactory(...).\n      return new FormsEncryptionService({\n        emFactory: () => em,\n        kmsAdapter: resolveKmsAdapter(process.env),\n      })\n    }).proxy().singleton(),\n    formsSubmissionService: asFunction(({ em, formsEncryptionService }: { em: EntityManager; formsEncryptionService: EncryptionService }): SubmissionService => {\n      return new SubmissionService({\n        emFactory: () => em,\n        formVersionCompiler,\n        encryptionService: formsEncryptionService,\n        rolePolicyService,\n        emitEvent: async (eventId, payload) => {\n          // Validate against catalogued payload schema before forwarding to the\n          // global event bus. Keeps the event contract tight per AGENTS.md.\n          const schema = formsEventPayloadSchemas[eventId as keyof typeof formsEventPayloadSchemas]\n          const validated = schema ? schema.parse(payload) : payload\n          await emitFormsEvent(eventId, validated as never)\n        },\n        auditAccess: async (args) => {\n          // Phase 2b \u2014 replaces the no-op hook from phase 1c. Writes one\n          // row per admin-surface read/mutation. Runtime patient reads\n          // bypass this hook by calling with `surface = 'runtime'` (R1 posture).\n          if (args.surface !== 'admin') return\n          if (!args.viewerUserId) return\n          const event: AccessAuditEvent = {\n            organizationId: args.organizationId,\n            submissionId: args.submissionId,\n            accessedBy: args.viewerUserId,\n            accessPurpose: 'view',\n          }\n          await accessAuditLogger.log(em, event)\n        },\n      })\n    }).proxy().singleton(),\n    formsDistributionService: asFunction(({ em, formsSubmissionService }: { em: EntityManager; formsSubmissionService: SubmissionService }): DistributionService => {\n      return new DistributionService({\n        emFactory: () => em,\n        submissionService: formsSubmissionService,\n        emitEvent: async (eventId, payload) => {\n          const schema = formsEventPayloadSchemas[eventId as keyof typeof formsEventPayloadSchemas]\n          const validated = schema ? schema.parse(payload) : payload\n          await emitFormsEvent(eventId, validated as never)\n        },\n      })\n    }).proxy().singleton(),\n    formsAnonymizeService: asFunction(({ em, formsEncryptionService }: { em: EntityManager; formsEncryptionService: EncryptionService }): AnonymizeService => {\n      return new AnonymizeService({\n        em,\n        compiler: formVersionCompiler,\n        encryption: formsEncryptionService,\n      })\n    }).proxy().singleton(),\n    // Phase 3 Track B \u2014 aggregate, PII-safe form analytics. Decrypts revision\n    // payloads only to tally enumerable answers; never returns decrypted\n    // values. Lazy-resolves `em` per request so EM request scoping is honoured.\n    formsAnalyticsService: asFunction(({ em, formsEncryptionService }: { em: EntityManager; formsEncryptionService: EncryptionService }): AnalyticsService => {\n      return new AnalyticsService({\n        emFactory: () => em,\n        compiler: formVersionCompiler,\n        encryption: formsEncryptionService,\n      })\n    }).proxy().singleton(),\n    // Phase 3 Track D \u2014 projects signed `signature` answers into the\n    // `forms_consent_record` per-subject consent aggregate. Loads the\n    // submission via the submission service (admin/full read, no role slice)\n    // so signature answers are present, then upserts + supersedes. PII-free.\n    // Lazy-resolves `em` per request so EM request scoping is honoured.\n    formsConsentRecordService: asFunction(\n      ({ em, formsSubmissionService }: { em: EntityManager; formsSubmissionService: SubmissionService }): ConsentRecordService => {\n        return new ConsentRecordService({\n          emFactory: () => em,\n          compiler: formVersionCompiler,\n          loadSubmission: async ({ submissionId, organizationId, tenantId }) => {\n            const view = await formsSubmissionService.getCurrent({\n              submissionId,\n              organizationId,\n              tenantId,\n              // The projector has no viewer and must see `signature` answers to\n              // write consent rows. `getCurrent` fails closed on an absent role,\n              // so this opt-in is required \u2014 without it every signature reads\n              // `undefined` and consent records are silently never written.\n              unsliced: true,\n            })\n            return {\n              submission: view.submission,\n              formVersion: view.formVersion,\n              decodedData: view.decodedData,\n            }\n          },\n        })\n      },\n    ).proxy().singleton(),\n    // W5 (DP-5) \u2014 builds the structured GDPR data-subject export document.\n    // Lazy-resolves `em` per request so EM request scoping is honoured.\n    formsExportService: asFunction(({ em, formsEncryptionService }: { em: EntityManager; formsEncryptionService: EncryptionService }): ExportService => {\n      return new ExportService({\n        emFactory: () => em,\n        compiler: formVersionCompiler,\n        encryption: formsEncryptionService,\n      })\n    }).proxy().singleton(),\n    // W4 \u2014 no-op virus/malware scanner. Operators inject a real scanner by\n    // overriding `formsUploadScanner` with their own `UploadScanner`.\n    formsUploadScanner: asValue<UploadScanner>(new NoopUploadScanner()),\n    // W8 / FD-1 \u2014 default patient prefill resolver. Maps `name`/`email` from\n    // the customer auth context; anonymous principals resolve to `{}`. Stateless\n    // and pure, so `asValue` is correct. Operators inject a richer resolver\n    // (e.g. dental-os providing `dob`) by overriding `formsPrefillResolver`.\n    formsPrefillResolver: asValue<PrefillResolver>(new DefaultPrefillResolver()),\n    // T5 \u2014 pluggable CAPTCHA verifier for the public start route. Selects a\n    // provider verifier (Cloudflare Turnstile / Google reCAPTCHA) when\n    // `FORMS_CAPTCHA_PROVIDER` + `FORMS_CAPTCHA_SECRET` are set; otherwise a\n    // no-op verifier (token presence is still enforced by the route for\n    // backward-compat). Stateless, so `asValue` is correct. Operators inject a\n    // custom verifier by overriding `formsCaptchaVerifier`.\n    formsCaptchaVerifier: asValue<CaptchaVerifier>(resolveCaptchaVerifier(process.env)),\n    // W4 \u2014 encrypts + persists participant uploads as `forms_form_attachment`\n    // rows. Lazy-resolves `em` per request so EM request scoping is honoured.\n    formsAttachmentService: asFunction(\n      ({\n        em,\n        formsEncryptionService,\n        formsUploadScanner,\n      }: {\n        em: EntityManager\n        formsEncryptionService: EncryptionService\n        formsUploadScanner: UploadScanner\n      }): AttachmentService => {\n        return new AttachmentService({\n          emFactory: () => em,\n          encryptionService: formsEncryptionService,\n          scanner: formsUploadScanner,\n        })\n      },\n    ).proxy().singleton(),\n    // W3 \u2014 renders + stores the immutable signed PDF snapshot as an encrypted\n    // `forms_form_attachment` (`kind = 'snapshot'`). Generated once (on-submit\n    // subscriber or lazily on first download) and idempotent thereafter.\n    formsPdfSnapshotService: asFunction(\n      ({\n        em,\n        formsEncryptionService,\n      }: {\n        em: EntityManager\n        formsEncryptionService: EncryptionService\n      }): PdfSnapshotService => {\n        return new PdfSnapshotService({\n          emFactory: () => em,\n          encryptionService: formsEncryptionService,\n          emitEvent: async (eventId, payload) => {\n            const schema = formsEventPayloadSchemas[eventId as keyof typeof formsEventPayloadSchemas]\n            const validated = schema ? schema.parse(payload) : payload\n            await emitFormsEvent(eventId, validated as never)\n          },\n        })\n      },\n    ).proxy().singleton(),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS,kBAAkB;AAGpC,SAAS,cAAc;AACvB,SAAS,gCAAgC;AACzC,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,yBAAyB;AAClC,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,yBAA6C;AACtD,SAAS,8BAAoD;AAC7D,SAAS,8BAAoD;AAC7D,SAAS,sBAAsB;AAC/B,SAAS,gCAAgC;AAsBlC,SAAS,SAAS,WAA+B;AACtD,QAAM,sBAAsB,IAAI,oBAAoB,EAAE,UAAU,yBAAyB,CAAC;AAC1F,QAAM,oBAAoB,IAAI,kBAAkB;AAChD,QAAM,oBAAoB,IAAI,kBAAkB;AAMhD,QAAM,qBAAqB,0BAA0B,QAAQ,GAAG;AAChE,QAAM,oBACJ,qBAAqB,IACjB,IAAI,0BAA0B;AAAA,IAC5B,SAAS;AAAA;AAAA,IAET,WAAW,YAAoC;AAC7C,YAAM,MAAM,MAAM,OAAO;AACzB,aAAO,IAAI,GAAG,KAAK;AAAA,IACrB;AAAA,EACF,CAAC,IACD,IAAI,uBAAuB;AAEjC,YAAU,SAAS;AAAA,IACjB,mBAAmB,QAAQ,wBAAwB;AAAA,IACnD,qBAAqB,QAAQ,mBAAmB;AAAA,IAChD,mBAAmB,QAAQ,iBAAiB;AAAA,IAC5C,wBAAwB,QAAQ,iBAAiB;AAAA,IACjD,wBAAwB,QAAQ,iBAAiB;AAAA,IACjD,wBAAwB,WAAW,CAAC,EAAE,GAAG,MAAgD;AAKvF,aAAO,IAAI,uBAAuB;AAAA,QAChC,WAAW,MAAM;AAAA,QACjB,YAAY,kBAAkB,QAAQ,GAAG;AAAA,MAC3C,CAAC;AAAA,IACH,CAAC,EAAE,MAAM,EAAE,UAAU;AAAA,IACrB,wBAAwB,WAAW,CAAC,EAAE,IAAI,uBAAuB,MAA2F;AAC1J,aAAO,IAAI,kBAAkB;AAAA,QAC3B,WAAW,MAAM;AAAA,QACjB;AAAA,QACA,mBAAmB;AAAA,QACnB;AAAA,QACA,WAAW,OAAO,SAAS,YAAY;AAGrC,gBAAM,SAAS,yBAAyB,OAAgD;AACxF,gBAAM,YAAY,SAAS,OAAO,MAAM,OAAO,IAAI;AACnD,gBAAM,eAAe,SAAS,SAAkB;AAAA,QAClD;AAAA,QACA,aAAa,OAAO,SAAS;AAI3B,cAAI,KAAK,YAAY,QAAS;AAC9B,cAAI,CAAC,KAAK,aAAc;AACxB,gBAAM,QAA0B;AAAA,YAC9B,gBAAgB,KAAK;AAAA,YACrB,cAAc,KAAK;AAAA,YACnB,YAAY,KAAK;AAAA,YACjB,eAAe;AAAA,UACjB;AACA,gBAAM,kBAAkB,IAAI,IAAI,KAAK;AAAA,QACvC;AAAA,MACF,CAAC;AAAA,IACH,CAAC,EAAE,MAAM,EAAE,UAAU;AAAA,IACrB,0BAA0B,WAAW,CAAC,EAAE,IAAI,uBAAuB,MAA6F;AAC9J,aAAO,IAAI,oBAAoB;AAAA,QAC7B,WAAW,MAAM;AAAA,QACjB,mBAAmB;AAAA,QACnB,WAAW,OAAO,SAAS,YAAY;AACrC,gBAAM,SAAS,yBAAyB,OAAgD;AACxF,gBAAM,YAAY,SAAS,OAAO,MAAM,OAAO,IAAI;AACnD,gBAAM,eAAe,SAAS,SAAkB;AAAA,QAClD;AAAA,MACF,CAAC;AAAA,IACH,CAAC,EAAE,MAAM,EAAE,UAAU;AAAA,IACrB,uBAAuB,WAAW,CAAC,EAAE,IAAI,uBAAuB,MAA0F;AACxJ,aAAO,IAAI,iBAAiB;AAAA,QAC1B;AAAA,QACA,UAAU;AAAA,QACV,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC,EAAE,MAAM,EAAE,UAAU;AAAA;AAAA;AAAA;AAAA,IAIrB,uBAAuB,WAAW,CAAC,EAAE,IAAI,uBAAuB,MAA0F;AACxJ,aAAO,IAAI,iBAAiB;AAAA,QAC1B,WAAW,MAAM;AAAA,QACjB,UAAU;AAAA,QACV,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC,EAAE,MAAM,EAAE,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMrB,2BAA2B;AAAA,MACzB,CAAC,EAAE,IAAI,uBAAuB,MAA8F;AAC1H,eAAO,IAAI,qBAAqB;AAAA,UAC9B,WAAW,MAAM;AAAA,UACjB,UAAU;AAAA,UACV,gBAAgB,OAAO,EAAE,cAAc,gBAAgB,SAAS,MAAM;AACpE,kBAAM,OAAO,MAAM,uBAAuB,WAAW;AAAA,cACnD;AAAA,cACA;AAAA,cACA;AAAA;AAAA;AAAA;AAAA;AAAA,cAKA,UAAU;AAAA,YACZ,CAAC;AACD,mBAAO;AAAA,cACL,YAAY,KAAK;AAAA,cACjB,aAAa,KAAK;AAAA,cAClB,aAAa,KAAK;AAAA,YACpB;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,EAAE,MAAM,EAAE,UAAU;AAAA;AAAA;AAAA,IAGpB,oBAAoB,WAAW,CAAC,EAAE,IAAI,uBAAuB,MAAuF;AAClJ,aAAO,IAAI,cAAc;AAAA,QACvB,WAAW,MAAM;AAAA,QACjB,UAAU;AAAA,QACV,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC,EAAE,MAAM,EAAE,UAAU;AAAA;AAAA;AAAA,IAGrB,oBAAoB,QAAuB,IAAI,kBAAkB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKlE,sBAAsB,QAAyB,IAAI,uBAAuB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO3E,sBAAsB,QAAyB,uBAAuB,QAAQ,GAAG,CAAC;AAAA;AAAA;AAAA,IAGlF,wBAAwB;AAAA,MACtB,CAAC;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,MACF,MAIyB;AACvB,eAAO,IAAI,kBAAkB;AAAA,UAC3B,WAAW,MAAM;AAAA,UACjB,mBAAmB;AAAA,UACnB,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF,EAAE,MAAM,EAAE,UAAU;AAAA;AAAA;AAAA;AAAA,IAIpB,yBAAyB;AAAA,MACvB,CAAC;AAAA,QACC;AAAA,QACA;AAAA,MACF,MAG0B;AACxB,eAAO,IAAI,mBAAmB;AAAA,UAC5B,WAAW,MAAM;AAAA,UACjB,mBAAmB;AAAA,UACnB,WAAW,OAAO,SAAS,YAAY;AACrC,kBAAM,SAAS,yBAAyB,OAAgD;AACxF,kBAAM,YAAY,SAAS,OAAO,MAAM,OAAO,IAAI;AACnD,kBAAM,eAAe,SAAS,SAAkB;AAAA,UAClD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,EAAE,MAAM,EAAE,UAAU;AAAA,EACtB,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/forms/encryption.js

@@ -0,0 +1,15 @@
+const defaultEncryptionMaps = [
+  {
+    entityId: "forms:form_invitation",
+    fields: [
+      { field: "recipient_email" },
+      { field: "recipient_name" }
+    ]
+  }
+];
+var encryption_default = defaultEncryptionMaps;
+export {
+  encryption_default as default,
+  defaultEncryptionMaps
+};
+//# sourceMappingURL=encryption.js.map

package/dist/modules/forms/encryption.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/forms/encryption.ts"],
+  "sourcesContent": ["import type { ModuleEncryptionMap } from '@open-mercato/shared/modules/encryption'\n\n/**\n * Forms module encryption-defaults declarations.\n *\n * IMPORTANT: the `data` column on `forms_form_submission_revision` is NOT\n * routed through the global `findWithDecryption` pipeline \u2014 it is encrypted\n * directly by `EncryptionService` (see `services/encryption-service.ts`)\n * with per-tenant envelope encryption and a self-describing ciphertext\n * header carrying the key version.\n *\n * The export here exists so any future submission-side fields that ARE\n * suitable for the global pipeline (e.g. `submit_metadata`, `change_summary`)\n * can be declared in additive fashion without rewiring; phase 1c does not\n * route any column through the global pipeline.\n *\n * The invitation recipient PII (`recipient_email`, `recipient_name`) IS routed\n * through the global pipeline \u2014 these are ordinary text columns at the schema\n * level and the map below opts them into transparent at-rest encryption.\n */\nexport const defaultEncryptionMaps: ModuleEncryptionMap[] = [\n  {\n    entityId: 'forms:form_invitation',\n    fields: [\n      { field: 'recipient_email' },\n      { field: 'recipient_name' },\n    ],\n  },\n]\n\nexport default defaultEncryptionMaps\n"],
+  "mappings": "AAoBO,MAAM,wBAA+C;AAAA,EAC1D;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,iBAAiB;AAAA,IAC5B;AAAA,EACF;AACF;AAEA,IAAO,qBAAQ;",
+  "names": []
+}

package/dist/modules/forms/events-payloads.js

@@ -0,0 +1,81 @@
+import { z } from "zod";
+const submissionRevisionAppendedSchema = z.object({
+  submissionId: z.string().uuid(),
+  revisionId: z.string().uuid(),
+  savedBy: z.string().uuid(),
+  savedByRole: z.string().min(1),
+  changedFieldKeys: z.array(z.string())
+});
+const submissionActorAssignedSchema = z.object({
+  submissionId: z.string().uuid(),
+  userId: z.string().uuid(),
+  role: z.string().min(1)
+});
+const formsEventPayloadSchemas = {
+  "forms.form.created": z.object({
+    formId: z.string().uuid(),
+    organizationId: z.string().uuid()
+  }),
+  "forms.form.archived": z.object({
+    formId: z.string().uuid()
+  }),
+  "forms.form_version.published": z.object({
+    formId: z.string().uuid(),
+    versionId: z.string().uuid(),
+    versionNumber: z.number().int().nonnegative(),
+    publishedBy: z.string().uuid()
+  }),
+  "forms.submission.started": z.object({
+    submissionId: z.string().uuid(),
+    formVersionId: z.string().uuid()
+  }),
+  "forms.submission.revision_appended": submissionRevisionAppendedSchema,
+  "forms.submission.submitted": z.object({
+    submissionId: z.string().uuid()
+  }),
+  "forms.submission.reopened": z.object({
+    submissionId: z.string().uuid()
+  }),
+  "forms.submission.actor_assigned": submissionActorAssignedSchema,
+  "forms.submission.anonymized": z.object({
+    submissionId: z.string().uuid()
+  }),
+  "forms.attachment.uploaded": z.object({
+    attachmentId: z.string().uuid(),
+    submissionId: z.string().uuid()
+  }),
+  "forms.distribution.created": z.object({
+    distributionId: z.string().uuid(),
+    organizationId: z.string().uuid(),
+    formId: z.string().uuid()
+  }),
+  "forms.distribution.closed": z.object({
+    distributionId: z.string().uuid()
+  }),
+  "forms.invitation.created": z.object({
+    invitationId: z.string().uuid(),
+    distributionId: z.string().uuid()
+  }),
+  "forms.invitation.sent": z.object({
+    invitationId: z.string().uuid(),
+    distributionId: z.string().uuid()
+  }),
+  "forms.invitation.opened": z.object({
+    invitationId: z.string().uuid()
+  }),
+  "forms.invitation.submitted": z.object({
+    invitationId: z.string().uuid(),
+    submissionId: z.string().uuid()
+  }),
+  "forms.invitation.revoked": z.object({
+    invitationId: z.string().uuid()
+  }),
+  "forms.consent.recorded": z.object({
+    recordId: z.string().uuid(),
+    submissionId: z.string().uuid()
+  })
+};
+export {
+  formsEventPayloadSchemas
+};
+//# sourceMappingURL=events-payloads.js.map

package/dist/modules/forms/events-payloads.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/forms/events-payloads.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\n/**\n * Typed payload schemas for every event declared in `events.ts`.\n *\n * `createModuleEvents()` only enforces the event ID at compile time \u2014 payload\n * shape is left to the emitter. To keep the cross-module contract honest,\n * downstream phases (1b authoring, 1c submission core, 2a inbox, 2b\n * compliance) MUST validate their emit payload against the schema for the\n * event they emit:\n *\n * ```ts\n * import { formsEventPayloadSchemas } from '@open-mercato/core/modules/forms/events-payloads'\n * await emitFormsEvent('forms.submission.submitted', formsEventPayloadSchemas['forms.submission.submitted'].parse(payload))\n * ```\n *\n * The IDs here mirror the catalog one-to-one. Adding/renaming/removing a\n * payload field is a BC consideration just like the IDs themselves; new\n * fields should be added as optional first.\n */\n\nconst submissionRevisionAppendedSchema = z.object({\n  submissionId: z.string().uuid(),\n  revisionId: z.string().uuid(),\n  savedBy: z.string().uuid(),\n  savedByRole: z.string().min(1),\n  changedFieldKeys: z.array(z.string()),\n})\n\nconst submissionActorAssignedSchema = z.object({\n  submissionId: z.string().uuid(),\n  userId: z.string().uuid(),\n  role: z.string().min(1),\n})\n\nexport const formsEventPayloadSchemas = {\n  'forms.form.created': z.object({\n    formId: z.string().uuid(),\n    organizationId: z.string().uuid(),\n  }),\n  'forms.form.archived': z.object({\n    formId: z.string().uuid(),\n  }),\n  'forms.form_version.published': z.object({\n    formId: z.string().uuid(),\n    versionId: z.string().uuid(),\n    versionNumber: z.number().int().nonnegative(),\n    publishedBy: z.string().uuid(),\n  }),\n  'forms.submission.started': z.object({\n    submissionId: z.string().uuid(),\n    formVersionId: z.string().uuid(),\n  }),\n  'forms.submission.revision_appended': submissionRevisionAppendedSchema,\n  'forms.submission.submitted': z.object({\n    submissionId: z.string().uuid(),\n  }),\n  'forms.submission.reopened': z.object({\n    submissionId: z.string().uuid(),\n  }),\n  'forms.submission.actor_assigned': submissionActorAssignedSchema,\n  'forms.submission.anonymized': z.object({\n    submissionId: z.string().uuid(),\n  }),\n  'forms.attachment.uploaded': z.object({\n    attachmentId: z.string().uuid(),\n    submissionId: z.string().uuid(),\n  }),\n  'forms.distribution.created': z.object({\n    distributionId: z.string().uuid(),\n    organizationId: z.string().uuid(),\n    formId: z.string().uuid(),\n  }),\n  'forms.distribution.closed': z.object({\n    distributionId: z.string().uuid(),\n  }),\n  'forms.invitation.created': z.object({\n    invitationId: z.string().uuid(),\n    distributionId: z.string().uuid(),\n  }),\n  'forms.invitation.sent': z.object({\n    invitationId: z.string().uuid(),\n    distributionId: z.string().uuid(),\n  }),\n  'forms.invitation.opened': z.object({\n    invitationId: z.string().uuid(),\n  }),\n  'forms.invitation.submitted': z.object({\n    invitationId: z.string().uuid(),\n    submissionId: z.string().uuid(),\n  }),\n  'forms.invitation.revoked': z.object({\n    invitationId: z.string().uuid(),\n  }),\n  'forms.consent.recorded': z.object({\n    recordId: z.string().uuid(),\n    submissionId: z.string().uuid(),\n  }),\n} as const\n\nexport type FormsEventPayload = {\n  [K in keyof typeof formsEventPayloadSchemas]: z.infer<typeof formsEventPayloadSchemas[K]>\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAqBlB,MAAM,mCAAmC,EAAE,OAAO;AAAA,EAChD,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,KAAK;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;AACtC,CAAC;AAED,MAAM,gCAAgC,EAAE,OAAO;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAEM,MAAM,2BAA2B;AAAA,EACtC,sBAAsB,EAAE,OAAO;AAAA,IAC7B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IACxB,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,CAAC;AAAA,EACD,uBAAuB,EAAE,OAAO;AAAA,IAC9B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,CAAC;AAAA,EACD,gCAAgC,EAAE,OAAO;AAAA,IACvC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IACxB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IAC5C,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,CAAC;AAAA,EACD,4BAA4B,EAAE,OAAO;AAAA,IACnC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,CAAC;AAAA,EACD,sCAAsC;AAAA,EACtC,8BAA8B,EAAE,OAAO;AAAA,IACrC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AAAA,EACD,6BAA6B,EAAE,OAAO;AAAA,IACpC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AAAA,EACD,mCAAmC;AAAA,EACnC,+BAA+B,EAAE,OAAO;AAAA,IACtC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AAAA,EACD,6BAA6B,EAAE,OAAO;AAAA,IACpC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AAAA,EACD,8BAA8B,EAAE,OAAO;AAAA,IACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,IAChC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,IAChC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,CAAC;AAAA,EACD,6BAA6B,EAAE,OAAO;AAAA,IACpC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,CAAC;AAAA,EACD,4BAA4B,EAAE,OAAO;AAAA,IACnC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,CAAC;AAAA,EACD,yBAAyB,EAAE,OAAO;AAAA,IAChC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,CAAC;AAAA,EACD,2BAA2B,EAAE,OAAO;AAAA,IAClC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AAAA,EACD,8BAA8B,EAAE,OAAO;AAAA,IACrC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AAAA,EACD,4BAA4B,EAAE,OAAO;AAAA,IACnC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AAAA,EACD,0BAA0B,EAAE,OAAO;AAAA,IACjC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/forms/events.js

@@ -0,0 +1,33 @@
+import { createModuleEvents } from "@open-mercato/shared/modules/events";
+const events = [
+  { id: "forms.form.created", label: "Form Created", entity: "form", category: "crud" },
+  { id: "forms.form.archived", label: "Form Archived", entity: "form", category: "lifecycle" },
+  { id: "forms.form_version.published", label: "Form Version Published", entity: "form_version", category: "lifecycle" },
+  { id: "forms.submission.started", label: "Submission Started", entity: "submission", category: "lifecycle" },
+  { id: "forms.submission.revision_appended", label: "Submission Revision Appended", entity: "submission", category: "lifecycle", portalBroadcast: true },
+  { id: "forms.submission.submitted", label: "Submission Submitted", entity: "submission", category: "lifecycle", clientBroadcast: true, portalBroadcast: true },
+  { id: "forms.submission.reopened", label: "Submission Reopened", entity: "submission", category: "lifecycle" },
+  { id: "forms.submission.actor_assigned", label: "Submission Actor Assigned", entity: "submission", category: "lifecycle" },
+  { id: "forms.submission.anonymized", label: "Submission Anonymized", entity: "submission", category: "lifecycle" },
+  { id: "forms.attachment.uploaded", label: "Attachment Uploaded", entity: "attachment", category: "crud" },
+  { id: "forms.distribution.created", label: "Distribution Created", entity: "distribution", category: "crud" },
+  { id: "forms.distribution.closed", label: "Distribution Closed", entity: "distribution", category: "lifecycle" },
+  { id: "forms.invitation.created", label: "Invitation Created", entity: "invitation", category: "crud" },
+  { id: "forms.invitation.sent", label: "Invitation Sent", entity: "invitation", category: "lifecycle" },
+  { id: "forms.invitation.opened", label: "Invitation Opened", entity: "invitation", category: "lifecycle" },
+  { id: "forms.invitation.submitted", label: "Invitation Submitted", entity: "invitation", category: "lifecycle" },
+  { id: "forms.invitation.revoked", label: "Invitation Revoked", entity: "invitation", category: "lifecycle" },
+  { id: "forms.consent.recorded", label: "Consent Recorded", entity: "consent", category: "lifecycle" }
+];
+const eventsConfig = createModuleEvents({
+  moduleId: "forms",
+  events
+});
+const emitFormsEvent = eventsConfig.emit;
+var events_default = eventsConfig;
+export {
+  events_default as default,
+  emitFormsEvent,
+  eventsConfig
+};
+//# sourceMappingURL=events.js.map

package/dist/modules/forms/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/forms/events.ts"],
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\n/**\n * Forms module event catalog.\n *\n * Every event ID listed here is a CONTRACT SURFACE (root AGENTS.md\n * \u00A7 Backward Compatibility Contract \u00A7 5 \u2014 Event IDs are FROZEN). Adding new\n * IDs is additive; renaming or removing an existing ID is a breaking change\n * that requires the deprecation protocol.\n *\n * Phase 1a declares the catalog only. Emission lands in:\n *  - `forms.form.created` / `forms.form.archived`        \u2014 phase 1b\n *  - `forms.form_version.published`                       \u2014 phase 1b\n *  - `forms.submission.started` / `revision_appended`     \u2014 phase 1c\n *  - `forms.submission.submitted` / `reopened`            \u2014 phase 1c / 2a\n *  - `forms.submission.actor_assigned`                    \u2014 phase 2a\n *  - `forms.submission.anonymized`                        \u2014 phase 2b\n *  - `forms.attachment.uploaded`                          \u2014 phase 2c\n */\nconst events = [\n  { id: 'forms.form.created', label: 'Form Created', entity: 'form', category: 'crud' as const },\n  { id: 'forms.form.archived', label: 'Form Archived', entity: 'form', category: 'lifecycle' as const },\n  { id: 'forms.form_version.published', label: 'Form Version Published', entity: 'form_version', category: 'lifecycle' as const },\n  { id: 'forms.submission.started', label: 'Submission Started', entity: 'submission', category: 'lifecycle' as const },\n  { id: 'forms.submission.revision_appended', label: 'Submission Revision Appended', entity: 'submission', category: 'lifecycle' as const, portalBroadcast: true },\n  { id: 'forms.submission.submitted', label: 'Submission Submitted', entity: 'submission', category: 'lifecycle' as const, clientBroadcast: true, portalBroadcast: true },\n  { id: 'forms.submission.reopened', label: 'Submission Reopened', entity: 'submission', category: 'lifecycle' as const },\n  { id: 'forms.submission.actor_assigned', label: 'Submission Actor Assigned', entity: 'submission', category: 'lifecycle' as const },\n  { id: 'forms.submission.anonymized', label: 'Submission Anonymized', entity: 'submission', category: 'lifecycle' as const },\n  { id: 'forms.attachment.uploaded', label: 'Attachment Uploaded', entity: 'attachment', category: 'crud' as const },\n  { id: 'forms.distribution.created', label: 'Distribution Created', entity: 'distribution', category: 'crud' as const },\n  { id: 'forms.distribution.closed', label: 'Distribution Closed', entity: 'distribution', category: 'lifecycle' as const },\n  { id: 'forms.invitation.created', label: 'Invitation Created', entity: 'invitation', category: 'crud' as const },\n  { id: 'forms.invitation.sent', label: 'Invitation Sent', entity: 'invitation', category: 'lifecycle' as const },\n  { id: 'forms.invitation.opened', label: 'Invitation Opened', entity: 'invitation', category: 'lifecycle' as const },\n  { id: 'forms.invitation.submitted', label: 'Invitation Submitted', entity: 'invitation', category: 'lifecycle' as const },\n  { id: 'forms.invitation.revoked', label: 'Invitation Revoked', entity: 'invitation', category: 'lifecycle' as const },\n  { id: 'forms.consent.recorded', label: 'Consent Recorded', entity: 'consent', category: 'lifecycle' as const },\n] as const\n\nexport const eventsConfig = createModuleEvents({\n  moduleId: 'forms',\n  events,\n})\n\nexport const emitFormsEvent = eventsConfig.emit\n\nexport type FormsEventId = typeof events[number]['id']\n\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAmBnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,sBAAsB,OAAO,gBAAgB,QAAQ,QAAQ,UAAU,OAAgB;AAAA,EAC7F,EAAE,IAAI,uBAAuB,OAAO,iBAAiB,QAAQ,QAAQ,UAAU,YAAqB;AAAA,EACpG,EAAE,IAAI,gCAAgC,OAAO,0BAA0B,QAAQ,gBAAgB,UAAU,YAAqB;AAAA,EAC9H,EAAE,IAAI,4BAA4B,OAAO,sBAAsB,QAAQ,cAAc,UAAU,YAAqB;AAAA,EACpH,EAAE,IAAI,sCAAsC,OAAO,gCAAgC,QAAQ,cAAc,UAAU,aAAsB,iBAAiB,KAAK;AAAA,EAC/J,EAAE,IAAI,8BAA8B,OAAO,wBAAwB,QAAQ,cAAc,UAAU,aAAsB,iBAAiB,MAAM,iBAAiB,KAAK;AAAA,EACtK,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,cAAc,UAAU,YAAqB;AAAA,EACtH,EAAE,IAAI,mCAAmC,OAAO,6BAA6B,QAAQ,cAAc,UAAU,YAAqB;AAAA,EAClI,EAAE,IAAI,+BAA+B,OAAO,yBAAyB,QAAQ,cAAc,UAAU,YAAqB;AAAA,EAC1H,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,cAAc,UAAU,OAAgB;AAAA,EACjH,EAAE,IAAI,8BAA8B,OAAO,wBAAwB,QAAQ,gBAAgB,UAAU,OAAgB;AAAA,EACrH,EAAE,IAAI,6BAA6B,OAAO,uBAAuB,QAAQ,gBAAgB,UAAU,YAAqB;AAAA,EACxH,EAAE,IAAI,4BAA4B,OAAO,sBAAsB,QAAQ,cAAc,UAAU,OAAgB;AAAA,EAC/G,EAAE,IAAI,yBAAyB,OAAO,mBAAmB,QAAQ,cAAc,UAAU,YAAqB;AAAA,EAC9G,EAAE,IAAI,2BAA2B,OAAO,qBAAqB,QAAQ,cAAc,UAAU,YAAqB;AAAA,EAClH,EAAE,IAAI,8BAA8B,OAAO,wBAAwB,QAAQ,cAAc,UAAU,YAAqB;AAAA,EACxH,EAAE,IAAI,4BAA4B,OAAO,sBAAsB,QAAQ,cAAc,UAAU,YAAqB;AAAA,EACpH,EAAE,IAAI,0BAA0B,OAAO,oBAAoB,QAAQ,WAAW,UAAU,YAAqB;AAC/G;AAEO,MAAM,eAAe,mBAAmB;AAAA,EAC7C,UAAU;AAAA,EACV;AACF,CAAC;AAEM,MAAM,iBAAiB,aAAa;AAI3C,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/forms/extension-points.js

@@ -0,0 +1,36 @@
+import { defineModuleExtensionPoints, injectionExtensionHost } from "@open-mercato/shared/modules/widgets/extension-points";
+const extensionPoints = defineModuleExtensionPoints({
+  moduleId: "forms",
+  hosts: {
+    submissionDrawerHeaderActions: injectionExtensionHost({
+      family: "detail",
+      spotId: "submission-drawer:header-actions",
+      supported: ["render-widget"],
+      source: "backend/forms/[id]/submissions/components/SubmissionDrawer.tsx"
+    }),
+    submissionDrawerAnonymizeAction: injectionExtensionHost({
+      family: "detail",
+      spotId: "submission-drawer:anonymize-action",
+      supported: ["render-widget"],
+      source: "backend/forms/[id]/submissions/components/SubmissionDrawer.tsx"
+    }),
+    submissionDrawerAccessAudit: injectionExtensionHost({
+      family: "detail",
+      spotId: "submission-drawer:access-audit",
+      supported: ["render-widget"],
+      source: "backend/forms/[id]/submissions/components/SubmissionDrawer.tsx"
+    }),
+    submissionDrawerFooter: injectionExtensionHost({
+      family: "detail",
+      spotId: "submission-drawer:footer",
+      supported: ["render-widget"],
+      source: "backend/forms/[id]/submissions/components/SubmissionDrawer.tsx"
+    })
+  }
+});
+var extension_points_default = extensionPoints;
+export {
+  extension_points_default as default,
+  extensionPoints
+};
+//# sourceMappingURL=extension-points.js.map

package/dist/modules/forms/extension-points.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/forms/extension-points.ts"],
+  "sourcesContent": ["import { defineModuleExtensionPoints, injectionExtensionHost } from '@open-mercato/shared/modules/widgets/extension-points'\n\n/**\n * Injection hosts the submission drawer mounts. The drawer renders only the\n * `<InjectionSpot>` mount points; the PDF download trigger, the anonymize\n * action, the access-audit trail and the \"this view is logged\" note all live in\n * `widgets/injection/` and are mapped onto these spots by\n * `widgets/injection-table.ts`, so a third-party module can copy the pattern\n * unchanged.\n */\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'forms',\n  hosts: {\n    submissionDrawerHeaderActions: injectionExtensionHost({\n      family: 'detail',\n      spotId: 'submission-drawer:header-actions',\n      supported: ['render-widget'],\n      source: 'backend/forms/[id]/submissions/components/SubmissionDrawer.tsx',\n    }),\n    submissionDrawerAnonymizeAction: injectionExtensionHost({\n      family: 'detail',\n      spotId: 'submission-drawer:anonymize-action',\n      supported: ['render-widget'],\n      source: 'backend/forms/[id]/submissions/components/SubmissionDrawer.tsx',\n    }),\n    submissionDrawerAccessAudit: injectionExtensionHost({\n      family: 'detail',\n      spotId: 'submission-drawer:access-audit',\n      supported: ['render-widget'],\n      source: 'backend/forms/[id]/submissions/components/SubmissionDrawer.tsx',\n    }),\n    submissionDrawerFooter: injectionExtensionHost({\n      family: 'detail',\n      spotId: 'submission-drawer:footer',\n      supported: ['render-widget'],\n      source: 'backend/forms/[id]/submissions/components/SubmissionDrawer.tsx',\n    }),\n  },\n})\n\nexport default extensionPoints\n"],
+  "mappings": "AAAA,SAAS,6BAA6B,8BAA8B;AAU7D,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,+BAA+B,uBAAuB;AAAA,MACpD,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,eAAe;AAAA,MAC3B,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,iCAAiC,uBAAuB;AAAA,MACtD,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,eAAe;AAAA,MAC3B,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,6BAA6B,uBAAuB;AAAA,MAClD,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,eAAe;AAAA,MAC3B,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,wBAAwB,uBAAuB;AAAA,MAC7C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,eAAe;AAAA,MAC3B,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACF,CAAC;AAED,IAAO,2BAAQ;",
+  "names": []
+}

package/dist/modules/forms/frontend/[orgSlug]/portal/forms/[key]/page.js

@@ -0,0 +1,33 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import { navigateWithPageReload } from "@open-mercato/shared/lib/navigation/pageReload";
+import { Spinner } from "@open-mercato/ui/primitives/spinner";
+import { usePortalContext } from "@open-mercato/ui/portal/PortalContext";
+import { EmbeddedForm } from "../../../../../ui/public/index.js";
+function PortalFormRunnerPage({ params }) {
+  const orgSlug = String(params?.orgSlug ?? "");
+  const formKey = String(params?.key ?? "");
+  const { auth } = usePortalContext();
+  const { user, loading } = auth;
+  const subjectType = "customer";
+  const subjectId = user?.id ?? "";
+  if (loading) {
+    return /* @__PURE__ */ jsx("div", { className: "flex items-center justify-center py-20", children: /* @__PURE__ */ jsx(Spinner, {}) });
+  }
+  if (!user) return null;
+  return /* @__PURE__ */ jsx("main", { className: "px-4 py-6 sm:px-6 lg:px-8", children: /* @__PURE__ */ jsx(
+    EmbeddedForm,
+    {
+      source: { kind: "portal", formKey, subjectType, subjectId },
+      onReturnHome: () => {
+        if (typeof window !== "undefined") {
+          navigateWithPageReload(`/${orgSlug}/portal`);
+        }
+      }
+    }
+  ) });
+}
+export {
+  PortalFormRunnerPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/forms/frontend/[orgSlug]/portal/forms/[key]/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/forms/frontend/%5BorgSlug%5D/portal/forms/%5Bkey%5D/page.tsx"],
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { navigateWithPageReload } from '@open-mercato/shared/lib/navigation/pageReload'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { usePortalContext } from '@open-mercato/ui/portal/PortalContext'\nimport { EmbeddedForm } from '../../../../../ui/public'\n\ntype Props = { params: { orgSlug: string; key: string } }\n\nexport default function PortalFormRunnerPage({ params }: Props) {\n  // Read from the `params` prop the (frontend) catch-all passes, as every other\n  // portal page in the repo does. `useParams()` does NOT work here: under the\n  // catch-all the client-side route is `[...slug]`, so it returns `{ slug }`\n  // and nothing else \u2014 `key` came back undefined, `formKey` was always empty,\n  // and this page could never load a form.\n  const orgSlug = String(params?.orgSlug ?? '')\n  const formKey = String(params?.key ?? '')\n  const { auth } = usePortalContext()\n  const { user, loading } = auth\n  const subjectType = 'customer'\n  const subjectId = user?.id ?? ''\n\n  if (loading) {\n    return (\n      <div className=\"flex items-center justify-center py-20\">\n        <Spinner />\n      </div>\n    )\n  }\n  if (!user) return null\n\n  return (\n    <main className=\"px-4 py-6 sm:px-6 lg:px-8\">\n      <EmbeddedForm\n        source={{ kind: 'portal', formKey, subjectType, subjectId }}\n        onReturnHome={() => {\n          if (typeof window !== 'undefined') {\n            navigateWithPageReload(`/${orgSlug}/portal`)\n          }\n        }}\n      />\n    </main>\n  )\n}\n"],
+  "mappings": ";AA0BQ;AAvBR,SAAS,8BAA8B;AACvC,SAAS,eAAe;AACxB,SAAS,wBAAwB;AACjC,SAAS,oBAAoB;AAId,SAAR,qBAAsC,EAAE,OAAO,GAAU;AAM9D,QAAM,UAAU,OAAO,QAAQ,WAAW,EAAE;AAC5C,QAAM,UAAU,OAAO,QAAQ,OAAO,EAAE;AACxC,QAAM,EAAE,KAAK,IAAI,iBAAiB;AAClC,QAAM,EAAE,MAAM,QAAQ,IAAI;AAC1B,QAAM,cAAc;AACpB,QAAM,YAAY,MAAM,MAAM;AAE9B,MAAI,SAAS;AACX,WACE,oBAAC,SAAI,WAAU,0CACb,8BAAC,WAAQ,GACX;AAAA,EAEJ;AACA,MAAI,CAAC,KAAM,QAAO;AAElB,SACE,oBAAC,UAAK,WAAU,6BACd;AAAA,IAAC;AAAA;AAAA,MACC,QAAQ,EAAE,MAAM,UAAU,SAAS,aAAa,UAAU;AAAA,MAC1D,cAAc,MAAM;AAClB,YAAI,OAAO,WAAW,aAAa;AACjC,iCAAuB,IAAI,OAAO,SAAS;AAAA,QAC7C;AAAA,MACF;AAAA;AAAA,EACF,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/forms/frontend/[orgSlug]/portal/forms/[key]/page.meta.js

@@ -0,0 +1,11 @@
+const metadata = {
+  requireCustomerAuth: true,
+  titleKey: "forms.runner.loading",
+  title: "Form"
+};
+var page_meta_default = metadata;
+export {
+  page_meta_default as default,
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/forms/frontend/[orgSlug]/portal/forms/[key]/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/forms/frontend/%5BorgSlug%5D/portal/forms/%5Bkey%5D/page.meta.ts"],
+  "sourcesContent": ["import type { PageMetadata } from '@open-mercato/shared/modules/registry'\n\nexport const metadata: PageMetadata = {\n  requireCustomerAuth: true,\n  titleKey: 'forms.runner.loading',\n  title: 'Form',\n}\n\nexport default metadata\n"],
+  "mappings": "AAEO,MAAM,WAAyB;AAAA,EACpC,qBAAqB;AAAA,EACrB,UAAU;AAAA,EACV,OAAO;AACT;AAEA,IAAO,oBAAQ;",
+  "names": []
+}

package/dist/modules/forms/frontend/[orgSlug]/portal/submissions/[id]/continue/page.js

@@ -0,0 +1,41 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import { useSearchParams } from "next/navigation";
+import { navigateWithPageReload } from "@open-mercato/shared/lib/navigation/pageReload";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+import { Spinner } from "@open-mercato/ui/primitives/spinner";
+import { usePortalContext } from "@open-mercato/ui/portal/PortalContext";
+import { FormRunner } from "../../../../../../ui/public/index.js";
+function PortalSubmissionContinuePage({ params }) {
+  const t = useT();
+  const search = useSearchParams();
+  const orgSlug = String(params?.orgSlug ?? "");
+  const submissionId = String(params?.id ?? "");
+  const formKey = String(search?.get("formKey") ?? "");
+  const subjectType = String(search?.get("subjectType") ?? "customer");
+  const { auth } = usePortalContext();
+  const { user, loading } = auth;
+  const subjectId = user?.id ?? "";
+  if (loading) {
+    return /* @__PURE__ */ jsx("div", { className: "flex items-center justify-center py-20", children: /* @__PURE__ */ jsx(Spinner, {}) });
+  }
+  if (!user) return null;
+  return /* @__PURE__ */ jsx("main", { className: "px-4 py-6 sm:px-6 lg:px-8", children: formKey && subjectId ? /* @__PURE__ */ jsx(
+    FormRunner,
+    {
+      formKey,
+      subjectType,
+      subjectId,
+      initialSubmissionId: submissionId,
+      onReturnHome: () => {
+        if (typeof window !== "undefined") {
+          navigateWithPageReload(`/${orgSlug}/portal`);
+        }
+      }
+    }
+  ) : /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("forms.runner.loading") }) });
+}
+export {
+  PortalSubmissionContinuePage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/forms/frontend/[orgSlug]/portal/submissions/[id]/continue/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../../src/modules/forms/frontend/%5BorgSlug%5D/portal/submissions/%5Bid%5D/continue/page.tsx"],
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useSearchParams } from 'next/navigation'\nimport { navigateWithPageReload } from '@open-mercato/shared/lib/navigation/pageReload'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Spinner } from '@open-mercato/ui/primitives/spinner'\nimport { usePortalContext } from '@open-mercato/ui/portal/PortalContext'\nimport { FormRunner } from '../../../../../../ui/public'\n\ntype Props = { params: { orgSlug: string; id: string } }\n\nexport default function PortalSubmissionContinuePage({ params }: Props) {\n  const t = useT()\n  // Route params come from the `params` prop the (frontend) catch-all passes.\n  // `useParams()` returns `{ slug }` under the catch-all, so `id` was undefined\n  // and this page could never resume a submission. Query-string values still\n  // come from `useSearchParams()`, which is unaffected.\n  const search = useSearchParams()\n  const orgSlug = String(params?.orgSlug ?? '')\n  const submissionId = String(params?.id ?? '')\n  const formKey = String(search?.get('formKey') ?? '')\n  const subjectType = String(search?.get('subjectType') ?? 'customer')\n  const { auth } = usePortalContext()\n  const { user, loading } = auth\n  const subjectId = user?.id ?? ''\n\n  if (loading) {\n    return (\n      <div className=\"flex items-center justify-center py-20\">\n        <Spinner />\n      </div>\n    )\n  }\n  if (!user) return null\n\n  return (\n    <main className=\"px-4 py-6 sm:px-6 lg:px-8\">\n      {formKey && subjectId ? (\n        <FormRunner\n          formKey={formKey}\n          subjectType={subjectType}\n          subjectId={subjectId}\n          initialSubmissionId={submissionId}\n          onReturnHome={() => {\n            if (typeof window !== 'undefined') {\n              navigateWithPageReload(`/${orgSlug}/portal`)\n            }\n          }}\n        />\n      ) : (\n        <p className=\"text-sm text-muted-foreground\">{t('forms.runner.loading')}</p>\n      )}\n    </main>\n  )\n}\n"],
+  "mappings": ";AA8BQ;AA3BR,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,wBAAwB;AACjC,SAAS,kBAAkB;AAIZ,SAAR,6BAA8C,EAAE,OAAO,GAAU;AACtE,QAAM,IAAI,KAAK;AAKf,QAAM,SAAS,gBAAgB;AAC/B,QAAM,UAAU,OAAO,QAAQ,WAAW,EAAE;AAC5C,QAAM,eAAe,OAAO,QAAQ,MAAM,EAAE;AAC5C,QAAM,UAAU,OAAO,QAAQ,IAAI,SAAS,KAAK,EAAE;AACnD,QAAM,cAAc,OAAO,QAAQ,IAAI,aAAa,KAAK,UAAU;AACnE,QAAM,EAAE,KAAK,IAAI,iBAAiB;AAClC,QAAM,EAAE,MAAM,QAAQ,IAAI;AAC1B,QAAM,YAAY,MAAM,MAAM;AAE9B,MAAI,SAAS;AACX,WACE,oBAAC,SAAI,WAAU,0CACb,8BAAC,WAAQ,GACX;AAAA,EAEJ;AACA,MAAI,CAAC,KAAM,QAAO;AAElB,SACE,oBAAC,UAAK,WAAU,6BACb,qBAAW,YACV;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA;AAAA,MACA,qBAAqB;AAAA,MACrB,cAAc,MAAM;AAClB,YAAI,OAAO,WAAW,aAAa;AACjC,iCAAuB,IAAI,OAAO,SAAS;AAAA,QAC7C;AAAA,MACF;AAAA;AAAA,EACF,IAEA,oBAAC,OAAE,WAAU,iCAAiC,YAAE,sBAAsB,GAAE,GAE5E;AAEJ;",
+  "names": []
+}

package/dist/modules/forms/frontend/[orgSlug]/portal/submissions/[id]/continue/page.meta.js

@@ -0,0 +1,11 @@
+const metadata = {
+  requireCustomerAuth: true,
+  titleKey: "forms.runner.loading",
+  title: "Continue submission"
+};
+var page_meta_default = metadata;
+export {
+  page_meta_default as default,
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/forms/frontend/[orgSlug]/portal/submissions/[id]/continue/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../../src/modules/forms/frontend/%5BorgSlug%5D/portal/submissions/%5Bid%5D/continue/page.meta.ts"],
+  "sourcesContent": ["import type { PageMetadata } from '@open-mercato/shared/modules/registry'\n\nexport const metadata: PageMetadata = {\n  requireCustomerAuth: true,\n  titleKey: 'forms.runner.loading',\n  title: 'Continue submission',\n}\n\nexport default metadata\n"],
+  "mappings": "AAEO,MAAM,WAAyB;AAAA,EACpC,qBAAqB;AAAA,EACrB,UAAU;AAAA,EACV,OAAO;AACT;AAEA,IAAO,oBAAQ;",
+  "names": []
+}

package/dist/modules/forms/frontend/embed/[slug]/page.js

@@ -0,0 +1,105 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import * as React from "react";
+import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import { EmbeddedForm } from "../../../ui/public/index.js";
+import { LoadingMessage } from "@open-mercato/ui/backend/detail";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+function EmbedHostPage({ params }) {
+  const t = useT();
+  const slug = params?.slug ?? "";
+  const [presentation, setPresentation] = React.useState(null);
+  const autoResizeRef = React.useRef(true);
+  React.useEffect(() => {
+    if (!slug) return;
+    let cancelled = false;
+    apiCall(
+      `/api/forms/public/distributions/${encodeURIComponent(slug)}`
+    ).then((res) => {
+      if (cancelled) return;
+      const embed = res.ok ? res.result?.embed : null;
+      const next = {
+        theme: embed?.theme ?? "auto",
+        autoResize: embed?.autoResize !== false
+      };
+      autoResizeRef.current = next.autoResize;
+      setPresentation(next);
+    }).catch(() => {
+      if (cancelled) return;
+      autoResizeRef.current = true;
+      setPresentation({ theme: "auto", autoResize: true });
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [slug]);
+  React.useEffect(() => {
+    if (typeof document === "undefined" || !presentation) return;
+    const root = document.documentElement;
+    const apply = (dark) => root.classList.toggle("dark", dark);
+    if (presentation.theme === "dark") {
+      apply(true);
+      return;
+    }
+    if (presentation.theme === "light") {
+      apply(false);
+      return;
+    }
+    const mediaQuery = window.matchMedia("(prefers-color-scheme: dark)");
+    apply(mediaQuery.matches);
+    const onChange = (event) => apply(event.matches);
+    mediaQuery.addEventListener("change", onChange);
+    return () => mediaQuery.removeEventListener("change", onChange);
+  }, [presentation]);
+  React.useEffect(() => {
+    if (typeof window === "undefined") return;
+    if (window.parent === window) return;
+    const ancestorOrigin = resolveAncestorOrigin();
+    if (!ancestorOrigin) return;
+    let lastHeight = -1;
+    let frame = 0;
+    const postHeight = () => {
+      frame = 0;
+      if (!autoResizeRef.current) return;
+      const height = Math.ceil(document.documentElement.scrollHeight);
+      if (height === lastHeight) return;
+      lastHeight = height;
+      window.parent.postMessage({ type: "om-forms:resize", height }, ancestorOrigin);
+    };
+    const scheduleHeight = () => {
+      if (frame) return;
+      frame = window.requestAnimationFrame(postHeight);
+    };
+    const observer = new ResizeObserver(scheduleHeight);
+    observer.observe(document.documentElement);
+    scheduleHeight();
+    return () => {
+      observer.disconnect();
+      if (frame) window.cancelAnimationFrame(frame);
+    };
+  }, []);
+  if (!slug) return null;
+  if (!presentation) {
+    return /* @__PURE__ */ jsx(LoadingMessage, { label: t("forms.runner.loading") });
+  }
+  return /* @__PURE__ */ jsx("div", { className: "min-h-0 bg-background p-4", "data-om-embed-host": "", children: /* @__PURE__ */ jsx(EmbeddedForm, { source: { kind: "distribution", slug } }) });
+}
+function resolveAncestorOrigin() {
+  const ancestorOrigins = window.location.ancestorOrigins;
+  if (ancestorOrigins && ancestorOrigins.length > 0) {
+    const top = ancestorOrigins[ancestorOrigins.length - 1];
+    if (top) return top;
+  }
+  if (document.referrer) {
+    try {
+      return new URL(document.referrer).origin;
+    } catch {
+      return null;
+    }
+  }
+  return null;
+}
+export {
+  EmbedHostPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/forms/frontend/embed/[slug]/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/forms/frontend/embed/%5Bslug%5D/page.tsx"],
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { EmbeddedForm } from '../../../ui/public'\nimport { LoadingMessage } from '@open-mercato/ui/backend/detail'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\n/**\n * External website embed host page (spec `2026-05-21-forms-render-surfaces.md`,\n * S4 / D4\u2013D6). Rendered INSIDE a third-party iframe injected by the embed\n * loader script. It mounts the chrome-stripped `<EmbeddedForm>` over the\n * existing anonymous open-link flow \u2014 no portal/site navigation, no app shell.\n *\n * Behaviour:\n *  - Reuses the `/api/forms/public/*` anonymous lifecycle verbatim; a closed,\n *    capped, auth-required, or non-embeddable distribution renders the\n *    `<EmbeddedForm>` unavailable / auth-required state.\n *  - Applies the distribution's configured `settings.embed.theme`\n *    (`light` / `dark` / `auto`) inside the iframe by toggling the `.dark`\n *    class on the document root (the app's Tailwind dark variant is\n *    `&:is(.dark *)`). `auto` follows `prefers-color-scheme`.\n *  - When `settings.embed.autoResize !== false`, posts\n *    `{ type: 'om-forms:resize', height }` to `window.parent` via a debounced\n *    `ResizeObserver`, only on a height delta, and ONLY to the concrete ancestor\n *    origin (never `'*'`) \u2014 so the message reaches exactly the framing site and\n *    nothing else (R-RS-4 / R-RS-5).\n *\n * SECURITY (R-RS-1) \u2014 frame-ancestors header:\n *   The browser-enforced clickjacking gate for this route is the response\n *   header `Content-Security-Policy: frame-ancestors <allowedDomains>` together\n *   with the ABSENCE of `X-Frame-Options`. That header is per-distribution and\n *   is applied by the app proxy/middleware (`apps/mercato/src/proxy.ts`), which\n *   resolves it from `GET /api/forms/public/distributions/:slug/embed-policy`\n *   (\u2192 `buildFrameAncestorsCsp(readEmbedSettings(...))` in\n *   `lib/embed-frame-policy.ts`). The global app frame protection in\n *   `apps/mercato/next.config.ts` excludes `/embed/`, so the middleware is the\n *   sole authority here and fails closed (`frame-ancestors 'none'`) for\n *   non-embeddable / unknown slugs.\n */\ntype EmbedPresentation = {\n  theme: 'light' | 'dark' | 'auto'\n  autoResize: boolean\n}\n\ntype DistributionEmbedContext = {\n  embed?: { theme?: 'light' | 'dark' | 'auto' | null; autoResize?: boolean | null } | null\n}\n\nexport default function EmbedHostPage({ params }: { params?: { slug?: string } }) {\n  const t = useT()\n  const slug = params?.slug ?? ''\n  const [presentation, setPresentation] = React.useState<EmbedPresentation | null>(null)\n  const autoResizeRef = React.useRef(true)\n\n  // Resolve the distribution's embed presentation settings (theme / autoResize).\n  React.useEffect(() => {\n    if (!slug) return\n    let cancelled = false\n    apiCall<DistributionEmbedContext>(\n      `/api/forms/public/distributions/${encodeURIComponent(slug)}`,\n    )\n      .then((res) => {\n        if (cancelled) return\n        const embed = res.ok ? res.result?.embed : null\n        const next: EmbedPresentation = {\n          theme: embed?.theme ?? 'auto',\n          autoResize: embed?.autoResize !== false,\n        }\n        autoResizeRef.current = next.autoResize\n        setPresentation(next)\n      })\n      .catch(() => {\n        if (cancelled) return\n        autoResizeRef.current = true\n        setPresentation({ theme: 'auto', autoResize: true })\n      })\n    return () => {\n      cancelled = true\n    }\n  }, [slug])\n\n  // Apply the configured theme to the iframe document root.\n  React.useEffect(() => {\n    if (typeof document === 'undefined' || !presentation) return\n    const root = document.documentElement\n    const apply = (dark: boolean) => root.classList.toggle('dark', dark)\n    if (presentation.theme === 'dark') {\n      apply(true)\n      return\n    }\n    if (presentation.theme === 'light') {\n      apply(false)\n      return\n    }\n    const mediaQuery = window.matchMedia('(prefers-color-scheme: dark)')\n    apply(mediaQuery.matches)\n    const onChange = (event: MediaQueryListEvent) => apply(event.matches)\n    mediaQuery.addEventListener('change', onChange)\n    return () => mediaQuery.removeEventListener('change', onChange)\n  }, [presentation])\n\n  // Auto-resize: report content height to the framing site (gated by autoResize).\n  React.useEffect(() => {\n    if (typeof window === 'undefined') return\n    if (window.parent === window) return\n\n    const ancestorOrigin = resolveAncestorOrigin()\n    if (!ancestorOrigin) return\n\n    let lastHeight = -1\n    let frame = 0\n\n    const postHeight = () => {\n      frame = 0\n      if (!autoResizeRef.current) return\n      const height = Math.ceil(document.documentElement.scrollHeight)\n      if (height === lastHeight) return\n      lastHeight = height\n      window.parent.postMessage({ type: 'om-forms:resize', height }, ancestorOrigin)\n    }\n\n    const scheduleHeight = () => {\n      if (frame) return\n      frame = window.requestAnimationFrame(postHeight)\n    }\n\n    const observer = new ResizeObserver(scheduleHeight)\n    observer.observe(document.documentElement)\n    scheduleHeight()\n\n    return () => {\n      observer.disconnect()\n      if (frame) window.cancelAnimationFrame(frame)\n    }\n  }, [])\n\n  if (!slug) return null\n  if (!presentation) {\n    return <LoadingMessage label={t('forms.runner.loading')} />\n  }\n\n  return (\n    <div className=\"min-h-0 bg-background p-4\" data-om-embed-host=\"\">\n      <EmbeddedForm source={{ kind: 'distribution', slug }} />\n    </div>\n  )\n}\n\n/**\n * Best-effort resolution of the single ancestor (framing site) origin so resize\n * messages are posted to a concrete origin instead of `'*'`. Prefers the\n * browser-maintained `ancestorOrigins` list; falls back to the referrer origin.\n * Returns `null` when no cross-origin ancestor can be determined \u2014 in which case\n * no resize message is posted (fail-closed).\n */\nfunction resolveAncestorOrigin(): string | null {\n  const ancestorOrigins = window.location.ancestorOrigins\n  if (ancestorOrigins && ancestorOrigins.length > 0) {\n    const top = ancestorOrigins[ancestorOrigins.length - 1]\n    if (top) return top\n  }\n  if (document.referrer) {\n    try {\n      return new URL(document.referrer).origin\n    } catch {\n      return null\n    }\n  }\n  return null\n}\n"],
+  "mappings": ";AA2IW;AAzIX,YAAY,WAAW;AACvB,SAAS,eAAe;AACxB,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAC/B,SAAS,YAAY;AA2CN,SAAR,cAA+B,EAAE,OAAO,GAAmC;AAChF,QAAM,IAAI,KAAK;AACf,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAmC,IAAI;AACrF,QAAM,gBAAgB,MAAM,OAAO,IAAI;AAGvC,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,KAAM;AACX,QAAI,YAAY;AAChB;AAAA,MACE,mCAAmC,mBAAmB,IAAI,CAAC;AAAA,IAC7D,EACG,KAAK,CAAC,QAAQ;AACb,UAAI,UAAW;AACf,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,QAAQ;AAC3C,YAAM,OAA0B;AAAA,QAC9B,OAAO,OAAO,SAAS;AAAA,QACvB,YAAY,OAAO,eAAe;AAAA,MACpC;AACA,oBAAc,UAAU,KAAK;AAC7B,sBAAgB,IAAI;AAAA,IACtB,CAAC,EACA,MAAM,MAAM;AACX,UAAI,UAAW;AACf,oBAAc,UAAU;AACxB,sBAAgB,EAAE,OAAO,QAAQ,YAAY,KAAK,CAAC;AAAA,IACrD,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,IAAI,CAAC;AAGT,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,aAAa,eAAe,CAAC,aAAc;AACtD,UAAM,OAAO,SAAS;AACtB,UAAM,QAAQ,CAAC,SAAkB,KAAK,UAAU,OAAO,QAAQ,IAAI;AACnE,QAAI,aAAa,UAAU,QAAQ;AACjC,YAAM,IAAI;AACV;AAAA,IACF;AACA,QAAI,aAAa,UAAU,SAAS;AAClC,YAAM,KAAK;AACX;AAAA,IACF;AACA,UAAM,aAAa,OAAO,WAAW,8BAA8B;AACnE,UAAM,WAAW,OAAO;AACxB,UAAM,WAAW,CAAC,UAA+B,MAAM,MAAM,OAAO;AACpE,eAAW,iBAAiB,UAAU,QAAQ;AAC9C,WAAO,MAAM,WAAW,oBAAoB,UAAU,QAAQ;AAAA,EAChE,GAAG,CAAC,YAAY,CAAC;AAGjB,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI,OAAO,WAAW,OAAQ;AAE9B,UAAM,iBAAiB,sBAAsB;AAC7C,QAAI,CAAC,eAAgB;AAErB,QAAI,aAAa;AACjB,QAAI,QAAQ;AAEZ,UAAM,aAAa,MAAM;AACvB,cAAQ;AACR,UAAI,CAAC,cAAc,QAAS;AAC5B,YAAM,SAAS,KAAK,KAAK,SAAS,gBAAgB,YAAY;AAC9D,UAAI,WAAW,WAAY;AAC3B,mBAAa;AACb,aAAO,OAAO,YAAY,EAAE,MAAM,mBAAmB,OAAO,GAAG,cAAc;AAAA,IAC/E;AAEA,UAAM,iBAAiB,MAAM;AAC3B,UAAI,MAAO;AACX,cAAQ,OAAO,sBAAsB,UAAU;AAAA,IACjD;AAEA,UAAM,WAAW,IAAI,eAAe,cAAc;AAClD,aAAS,QAAQ,SAAS,eAAe;AACzC,mBAAe;AAEf,WAAO,MAAM;AACX,eAAS,WAAW;AACpB,UAAI,MAAO,QAAO,qBAAqB,KAAK;AAAA,IAC9C;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,CAAC,cAAc;AACjB,WAAO,oBAAC,kBAAe,OAAO,EAAE,sBAAsB,GAAG;AAAA,EAC3D;AAEA,SACE,oBAAC,SAAI,WAAU,6BAA4B,sBAAmB,IAC5D,8BAAC,gBAAa,QAAQ,EAAE,MAAM,gBAAgB,KAAK,GAAG,GACxD;AAEJ;AASA,SAAS,wBAAuC;AAC9C,QAAM,kBAAkB,OAAO,SAAS;AACxC,MAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,UAAM,MAAM,gBAAgB,gBAAgB,SAAS,CAAC;AACtD,QAAI,IAAK,QAAO;AAAA,EAClB;AACA,MAAI,SAAS,UAAU;AACrB,QAAI;AACF,aAAO,IAAI,IAAI,SAAS,QAAQ,EAAE;AAAA,IACpC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/forms/frontend/embed/[slug]/page.meta.js

@@ -0,0 +1,11 @@
+const metadata = {
+  requireAuth: false,
+  titleKey: "forms.runner.loading",
+  title: "Form"
+};
+var page_meta_default = metadata;
+export {
+  page_meta_default as default,
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/forms/frontend/embed/[slug]/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/forms/frontend/embed/%5Bslug%5D/page.meta.ts"],
+  "sourcesContent": ["import type { PageMetadata } from '@open-mercato/shared/modules/registry'\n\n/**\n * External iframe host page for an embeddable OPEN distribution (spec\n * `2026-05-21-forms-render-surfaces.md`, S4 / D4\u2013D6). Unauthenticated by design\n * \u2014 the slug is the bearer of access, and the anonymous public runtime enforces\n * availability / cap / CAPTCHA exactly as `/f/:slug`.\n *\n * SECURITY (R-RS-1) \u2014 HOST PLUMBING NOT WIRED IN THIS REPO.\n *\n * The design calls for this route to be served with a per-distribution\n * `Content-Security-Policy: frame-ancestors <allowedDomains>` header and no\n * `X-Frame-Options`, with the app's global frame protection carving `/embed/`\n * out so the dynamic header is the sole authority, resolved via\n * `GET /api/forms/public/distributions/:slug/embed-policy`\n * (\u2192 `buildFrameAncestorsCsp` in `lib/embed-frame-policy.ts`).\n *\n * Neither half exists yet. `apps/mercato/next.config.ts` applies\n * `frame-ancestors 'self'` plus `X-Frame-Options: SAMEORIGIN` to `/:path*` with\n * no `/embed/` carve-out, and `apps/mercato/src/proxy.ts` never calls the\n * embed-policy endpoint. It was absent from the module's original repository\n * too \u2014 that sandbox app declared no `headers()` at all, so `/embed/:slug` was\n * framable there by default rather than by policy.\n *\n * Consequence: cross-origin framing of this page is currently BLOCKED by the\n * app's global policy. That is the fail-closed direction, so the page is safe\n * and the embed surface is inert. Everything below the header is complete and\n * tested \u2014 availability / cap / CAPTCHA enforcement, theme application, the\n * allowlist normalizer, the `embed-policy` endpoint. Only the header is missing.\n *\n * Both halves are load-bearing: a carve-out without the dynamic header would\n * leave this page framable by anyone. A per-request response header cannot come\n * from a React Server Component, so it belongs in the proxy. Tracked in\n * `.ai/specs/2026-09-30-forms-module-into-core.md` \u00A7 Known limitations.\n */\nexport const metadata: PageMetadata = {\n  requireAuth: false,\n  titleKey: 'forms.runner.loading',\n  title: 'Form',\n}\n\nexport default metadata\n"],
+  "mappings": "AAmCO,MAAM,WAAyB;AAAA,EACpC,aAAa;AAAA,EACb,UAAU;AAAA,EACV,OAAO;AACT;AAEA,IAAO,oBAAQ;",
+  "names": []
+}

package/dist/modules/forms/frontend/f/[slug]/page.js

@@ -0,0 +1,12 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import { PublicFormRunnerPage } from "../../../ui/public/index.js";
+function OpenLinkFormRunnerPage({ params }) {
+  const slug = params?.slug ?? "";
+  if (!slug) return null;
+  return /* @__PURE__ */ jsx(PublicFormRunnerPage, { mode: "open", slug });
+}
+export {
+  OpenLinkFormRunnerPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/forms/frontend/f/[slug]/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/forms/frontend/f/%5Bslug%5D/page.tsx"],
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { PublicFormRunnerPage } from '../../../ui/public'\n\nexport default function OpenLinkFormRunnerPage({ params }: { params?: { slug?: string } }) {\n  const slug = params?.slug ?? ''\n  if (!slug) return null\n  return <PublicFormRunnerPage mode=\"open\" slug={slug} />\n}\n"],
+  "mappings": ";AAQS;AALT,SAAS,4BAA4B;AAEtB,SAAR,uBAAwC,EAAE,OAAO,GAAmC;AACzF,QAAM,OAAO,QAAQ,QAAQ;AAC7B,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,oBAAC,wBAAqB,MAAK,QAAO,MAAY;AACvD;",
+  "names": []
+}

package/dist/modules/forms/frontend/f/[slug]/page.meta.js

@@ -0,0 +1,11 @@
+const metadata = {
+  requireAuth: false,
+  titleKey: "forms.runner.loading",
+  title: "Form"
+};
+var page_meta_default = metadata;
+export {
+  page_meta_default as default,
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map