@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.9.0

package/dist/modules/forms/api/public/submissions/[id]/submit/route.js

@@ -0,0 +1,127 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { FormDistribution, FormInvitation } from "../../../../../data/entities.js";
+import { submissionSubmitInputSchema } from "../../../../../data/validators.js";
+import { resolveRuntimePrincipal } from "../../../../../lib/runtime-principal.js";
+import {
+  buildSubmitMetadata,
+  mapDistributionError,
+  readJsonBody,
+  serializeSubmission
+} from "../../../../runtime-helpers.js";
+import { buildPublicRateLimitKey, enforcePublicRateLimit } from "../../../rate-limit.js";
+const metadata = {
+  POST: { requireAuth: false }
+};
+async function POST(req, context) {
+  const params = await Promise.resolve(context.params);
+  const submissionId = String(params.id);
+  const limited = await enforcePublicRateLimit(
+    req,
+    buildPublicRateLimitKey("submission-submit", submissionId)
+  );
+  if (limited) return limited;
+  let raw;
+  try {
+    raw = await readJsonBody(req);
+  } catch (error) {
+    return mapDistributionError(error);
+  }
+  const parsed = submissionSubmitInputSchema.safeParse(raw);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "VALIDATION_FAILED", details: parsed.error.flatten() },
+      { status: 422 }
+    );
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const service = container.resolve("formsSubmissionService");
+  const principal = await resolveRuntimePrincipal({ req, submissionId, em });
+  if (!principal) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+  try {
+    let distribution = null;
+    if (principal.source === "token") {
+      const invitation = await em.findOne(FormInvitation, {
+        id: principal.principal,
+        organizationId: principal.organizationId,
+        tenantId: principal.tenantId,
+        deletedAt: null
+      });
+      if (!invitation) {
+        return NextResponse.json({ error: "NOT_FOUND", message: "Invitation not found." }, { status: 404 });
+      }
+      distribution = await em.findOne(FormDistribution, {
+        id: invitation.distributionId,
+        organizationId: principal.organizationId,
+        tenantId: principal.tenantId,
+        deletedAt: null
+      });
+      const distributionService = container.resolve("formsDistributionService");
+      await distributionService.reserveResponseSlot({
+        distributionId: invitation.distributionId,
+        organizationId: principal.organizationId,
+        tenantId: principal.tenantId
+      });
+    }
+    const submission = await service.submit({
+      organizationId: principal.organizationId,
+      tenantId: principal.tenantId,
+      submissionId,
+      baseRevisionId: parsed.data.base_revision_id,
+      submittedBy: principal.principal,
+      submitMetadata: buildSubmitMetadata(req, parsed.data.submit_metadata)
+    });
+    if (principal.source === "token") {
+      const distributionService = container.resolve("formsDistributionService");
+      await distributionService.markInvitationSubmitted({
+        invitationId: principal.principal,
+        organizationId: principal.organizationId,
+        tenantId: principal.tenantId,
+        submissionId
+      });
+    }
+    return NextResponse.json({
+      submission: serializeSubmission(submission),
+      redirect_url: distribution?.redirectUrl ?? null
+    });
+  } catch (error) {
+    return mapDistributionError(error);
+  }
+}
+const errorSchema = z.object({
+  error: z.string(),
+  message: z.string().optional(),
+  details: z.unknown().optional()
+});
+const responseSchema = z.object({
+  submission: z.record(z.string(), z.unknown()),
+  redirect_url: z.string().nullable()
+});
+const postMethodDoc = {
+  summary: "Submit a public submission",
+  description: "Finalizes the submission named in the access token / session, enforcing the distribution response cap atomically before submitting.",
+  tags: ["Forms Public Runtime"],
+  requestBody: { schema: submissionSubmitInputSchema },
+  responses: [{ status: 200, description: "Submission submitted", schema: responseSchema }],
+  errors: [
+    { status: 401, description: "Missing or invalid access token / session", schema: errorSchema },
+    { status: 404, description: "Submission or invitation not found", schema: errorSchema },
+    { status: 409, description: "Stale base_revision_id", schema: errorSchema },
+    { status: 410, description: "Distribution response cap reached or unavailable", schema: errorSchema },
+    { status: 422, description: "Validation failed or submission in terminal state", schema: errorSchema },
+    { status: 429, description: "Rate limit exceeded", schema: errorSchema },
+    { status: 503, description: "Rate limiting unavailable", schema: errorSchema }
+  ]
+};
+const openApi = {
+  summary: "Submit a public submission",
+  methods: { POST: postMethodDoc }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/public/submissions/[id]/submit/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/forms/api/public/submissions/%5Bid%5D/submit/route.ts"],
+  "sourcesContent": ["/**\n * Public runtime API \u2014 POST /api/forms/public/submissions/:id/submit\n *\n * Finalizes an anonymous (token) or customer-session submission.\n *\n * For token-authorized submits the order is load-bearing for atomic cap\n * enforcement (R-2d-5): FIRST reserve a response slot on the distribution\n * (derived from the invitation), and only if that succeeds proceed to submit,\n * then mark the invitation submitted. A capped distribution returns 410 BEFORE\n * any submission state changes. Customer-session submits skip the\n * reserve/mark-invitation steps \u2014 those are anonymous-distribution concerns.\n */\n\nimport { NextResponse, type NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { SubmissionService } from '../../../../../services/submission-service'\nimport type { DistributionService } from '../../../../../services/distribution-service'\nimport { FormDistribution, FormInvitation } from '../../../../../data/entities'\nimport { submissionSubmitInputSchema } from '../../../../../data/validators'\nimport { resolveRuntimePrincipal } from '../../../../../lib/runtime-principal'\nimport {\n  buildSubmitMetadata,\n  mapDistributionError,\n  readJsonBody,\n  serializeSubmission,\n} from '../../../../runtime-helpers'\nimport { buildPublicRateLimitKey, enforcePublicRateLimit } from '../../../rate-limit'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nexport async function POST(\n  req: NextRequest,\n  context: { params: { id: string } | Promise<{ id: string }> },\n) {\n  const params = await Promise.resolve(context.params)\n  const submissionId = String(params.id)\n\n  const limited = await enforcePublicRateLimit(\n    req,\n    buildPublicRateLimitKey('submission-submit', submissionId),\n  )\n  if (limited) return limited\n\n  let raw: unknown\n  try {\n    raw = await readJsonBody(req)\n  } catch (error) {\n    return mapDistributionError(error)\n  }\n  const parsed = submissionSubmitInputSchema.safeParse(raw)\n  if (!parsed.success) {\n    return NextResponse.json(\n      { error: 'VALIDATION_FAILED', details: parsed.error.flatten() },\n      { status: 422 },\n    )\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const service = container.resolve('formsSubmissionService') as SubmissionService\n\n  const principal = await resolveRuntimePrincipal({ req, submissionId, em })\n  if (!principal) return NextResponse.json({ error: 'UNAUTHORIZED' }, { status: 401 })\n\n  try {\n    let distribution: FormDistribution | null = null\n\n    if (principal.source === 'token') {\n      const invitation = await em.findOne(FormInvitation, {\n        id: principal.principal,\n        organizationId: principal.organizationId,\n        tenantId: principal.tenantId,\n        deletedAt: null,\n      })\n      if (!invitation) {\n        return NextResponse.json({ error: 'NOT_FOUND', message: 'Invitation not found.' }, { status: 404 })\n      }\n      distribution = await em.findOne(FormDistribution, {\n        id: invitation.distributionId,\n        organizationId: principal.organizationId,\n        tenantId: principal.tenantId,\n        deletedAt: null,\n      })\n\n      const distributionService = container.resolve('formsDistributionService') as DistributionService\n      // Reserve BEFORE submitting \u2014 a capped distribution must 410 without\n      // mutating the submission.\n      await distributionService.reserveResponseSlot({\n        distributionId: invitation.distributionId,\n        organizationId: principal.organizationId,\n        tenantId: principal.tenantId,\n      })\n    }\n\n    const submission = await service.submit({\n      organizationId: principal.organizationId,\n      tenantId: principal.tenantId,\n      submissionId,\n      baseRevisionId: parsed.data.base_revision_id,\n      submittedBy: principal.principal,\n      submitMetadata: buildSubmitMetadata(req, parsed.data.submit_metadata),\n    })\n\n    if (principal.source === 'token') {\n      const distributionService = container.resolve('formsDistributionService') as DistributionService\n      await distributionService.markInvitationSubmitted({\n        invitationId: principal.principal,\n        organizationId: principal.organizationId,\n        tenantId: principal.tenantId,\n        submissionId,\n      })\n    }\n\n    return NextResponse.json({\n      submission: serializeSubmission(submission),\n      redirect_url: distribution?.redirectUrl ?? null,\n    })\n  } catch (error) {\n    return mapDistributionError(error)\n  }\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n  message: z.string().optional(),\n  details: z.unknown().optional(),\n})\n\nconst responseSchema = z.object({\n  submission: z.record(z.string(), z.unknown()),\n  redirect_url: z.string().nullable(),\n})\n\nconst postMethodDoc: OpenApiMethodDoc = {\n  summary: 'Submit a public submission',\n  description: 'Finalizes the submission named in the access token / session, enforcing the distribution response cap atomically before submitting.',\n  tags: ['Forms Public Runtime'],\n  requestBody: { schema: submissionSubmitInputSchema },\n  responses: [{ status: 200, description: 'Submission submitted', schema: responseSchema }],\n  errors: [\n    { status: 401, description: 'Missing or invalid access token / session', schema: errorSchema },\n    { status: 404, description: 'Submission or invitation not found', schema: errorSchema },\n    { status: 409, description: 'Stale base_revision_id', schema: errorSchema },\n    { status: 410, description: 'Distribution response cap reached or unavailable', schema: errorSchema },\n    { status: 422, description: 'Validation failed or submission in terminal state', schema: errorSchema },\n    { status: 429, description: 'Rate limit exceeded', schema: errorSchema },\n    { status: 503, description: 'Rate limiting unavailable', schema: errorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Submit a public submission',\n  methods: { POST: postMethodDoc },\n}\n"],
+  "mappings": "AAaA,SAAS,oBAAsC;AAC/C,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAGvC,SAAS,kBAAkB,sBAAsB;AACjD,SAAS,mCAAmC;AAC5C,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB,8BAA8B;AAEzD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,eAAsB,KACpB,KACA,SACA;AACA,QAAM,SAAS,MAAM,QAAQ,QAAQ,QAAQ,MAAM;AACnD,QAAM,eAAe,OAAO,OAAO,EAAE;AAErC,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA,wBAAwB,qBAAqB,YAAY;AAAA,EAC3D;AACA,MAAI,QAAS,QAAO;AAEpB,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,aAAa,GAAG;AAAA,EAC9B,SAAS,OAAO;AACd,WAAO,qBAAqB,KAAK;AAAA,EACnC;AACA,QAAM,SAAS,4BAA4B,UAAU,GAAG;AACxD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,qBAAqB,SAAS,OAAO,MAAM,QAAQ,EAAE;AAAA,MAC9D,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,UAAU,UAAU,QAAQ,wBAAwB;AAE1D,QAAM,YAAY,MAAM,wBAAwB,EAAE,KAAK,cAAc,GAAG,CAAC;AACzE,MAAI,CAAC,UAAW,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEnF,MAAI;AACF,QAAI,eAAwC;AAE5C,QAAI,UAAU,WAAW,SAAS;AAChC,YAAM,aAAa,MAAM,GAAG,QAAQ,gBAAgB;AAAA,QAClD,IAAI,UAAU;AAAA,QACd,gBAAgB,UAAU;AAAA,QAC1B,UAAU,UAAU;AAAA,QACpB,WAAW;AAAA,MACb,CAAC;AACD,UAAI,CAAC,YAAY;AACf,eAAO,aAAa,KAAK,EAAE,OAAO,aAAa,SAAS,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACpG;AACA,qBAAe,MAAM,GAAG,QAAQ,kBAAkB;AAAA,QAChD,IAAI,WAAW;AAAA,QACf,gBAAgB,UAAU;AAAA,QAC1B,UAAU,UAAU;AAAA,QACpB,WAAW;AAAA,MACb,CAAC;AAED,YAAM,sBAAsB,UAAU,QAAQ,0BAA0B;AAGxE,YAAM,oBAAoB,oBAAoB;AAAA,QAC5C,gBAAgB,WAAW;AAAA,QAC3B,gBAAgB,UAAU;AAAA,QAC1B,UAAU,UAAU;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,MAAM,QAAQ,OAAO;AAAA,MACtC,gBAAgB,UAAU;AAAA,MAC1B,UAAU,UAAU;AAAA,MACpB;AAAA,MACA,gBAAgB,OAAO,KAAK;AAAA,MAC5B,aAAa,UAAU;AAAA,MACvB,gBAAgB,oBAAoB,KAAK,OAAO,KAAK,eAAe;AAAA,IACtE,CAAC;AAED,QAAI,UAAU,WAAW,SAAS;AAChC,YAAM,sBAAsB,UAAU,QAAQ,0BAA0B;AACxE,YAAM,oBAAoB,wBAAwB;AAAA,QAChD,cAAc,UAAU;AAAA,QACxB,gBAAgB,UAAU;AAAA,QAC1B,UAAU,UAAU;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,YAAY,oBAAoB,UAAU;AAAA,MAC1C,cAAc,cAAc,eAAe;AAAA,IAC7C,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,qBAAqB,KAAK;AAAA,EACnC;AACF;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC5C,cAAc,EAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAED,MAAM,gBAAkC;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,sBAAsB;AAAA,EAC7B,aAAa,EAAE,QAAQ,4BAA4B;AAAA,EACnD,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,eAAe,CAAC;AAAA,EACxF,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,6CAA6C,QAAQ,YAAY;AAAA,IAC7F,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,YAAY;AAAA,IACtF,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,YAAY;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,oDAAoD,QAAQ,YAAY;AAAA,IACpG,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,YAAY;AAAA,IACrG,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,YAAY;AAAA,IACvE,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,YAAY;AAAA,EAC/E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,SAAS,EAAE,MAAM,cAAc;AACjC;",
+  "names": []
+}

package/dist/modules/forms/api/route.js

@@ -0,0 +1,216 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
+import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { Form, FormVersion } from "../data/entities.js";
+import {
+  formCreateRequestSchema,
+  formListQuerySchema
+} from "../data/validators.js";
+import {
+  attachOperationMetadata,
+  buildFormsRouteContext,
+  handleRouteError,
+  jsonError,
+  withMutationGuard,
+  withScopedPayload
+} from "./helpers.js";
+import { FORM_RESOURCE_KIND } from "../commands/shared.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["forms.view"] },
+  POST: { requireAuth: true, requireFeatures: ["forms.design"] }
+};
+const listItemSchema = z.object({
+  id: z.string().uuid(),
+  key: z.string(),
+  name: z.string(),
+  description: z.string().nullable(),
+  status: z.enum(["draft", "active", "archived"]),
+  defaultLocale: z.string(),
+  supportedLocales: z.array(z.string()),
+  currentPublishedVersionId: z.string().uuid().nullable(),
+  currentPublishedVersionNumber: z.number().int().nullable(),
+  draftVersionId: z.string().uuid().nullable(),
+  createdAt: z.string(),
+  updatedAt: z.string()
+});
+const listResponseSchema = z.object({
+  items: z.array(listItemSchema),
+  total: z.number().int(),
+  page: z.number().int(),
+  pageSize: z.number().int(),
+  totalPages: z.number().int()
+});
+const createResponseSchema = z.object({
+  id: z.string().uuid()
+});
+const errorSchema = z.object({ error: z.string() });
+function pickStatuses(raw) {
+  if (!raw) return [];
+  const tokens = raw.split(",").map((entry) => entry.trim()).filter(Boolean);
+  return tokens.filter(
+    (t) => t === "draft" || t === "active" || t === "archived"
+  );
+}
+async function GET(req) {
+  try {
+    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const url = new URL(req.url);
+    const queryRaw = {};
+    const statusParam = url.searchParams.get("status");
+    if (statusParam !== null) queryRaw.status = pickStatuses(statusParam);
+    const qParam = url.searchParams.get("q");
+    if (qParam !== null) queryRaw.q = qParam;
+    const pageParam = url.searchParams.get("page");
+    if (pageParam !== null) queryRaw.page = pageParam;
+    const pageSizeParam = url.searchParams.get("pageSize");
+    if (pageSizeParam !== null) queryRaw.pageSize = pageSizeParam;
+    const parsed = formListQuerySchema.parse(queryRaw);
+    const page = parsed.page ?? 1;
+    const pageSize = Math.min(parsed.pageSize ?? 20, 100);
+    const em = ctx.container.resolve("em");
+    const where = {
+      tenantId,
+      organizationId,
+      deletedAt: null
+    };
+    const statuses = Array.isArray(parsed.status) ? parsed.status : parsed.status ? [parsed.status] : [];
+    if (statuses.length > 0) {
+      where.status = { $in: statuses };
+    }
+    if (parsed.q && parsed.q.trim()) {
+      const pattern = `%${escapeLikePattern(parsed.q.trim().toLowerCase())}%`;
+      where.$or = [
+        { name: { $ilike: pattern } },
+        { key: { $ilike: pattern } }
+      ];
+    }
+    const [forms, total] = await em.findAndCount(Form, where, {
+      orderBy: { updatedAt: "desc" },
+      limit: pageSize,
+      offset: (page - 1) * pageSize
+    });
+    const formIds = forms.map((entry) => entry.id);
+    const versions = formIds.length ? await em.find(FormVersion, {
+      formId: { $in: formIds },
+      tenantId,
+      organizationId
+    }) : [];
+    const draftByForm = /* @__PURE__ */ new Map();
+    const publishedNumberByForm = /* @__PURE__ */ new Map();
+    for (const version of versions) {
+      if (version.status === "draft") {
+        if (!draftByForm.has(version.formId)) {
+          draftByForm.set(version.formId, version.id);
+        }
+      }
+    }
+    for (const form of forms) {
+      if (form.currentPublishedVersionId) {
+        const match = versions.find((v) => v.id === form.currentPublishedVersionId);
+        if (match) publishedNumberByForm.set(form.id, match.versionNumber);
+      }
+    }
+    const items = forms.map((form) => ({
+      id: form.id,
+      key: form.key,
+      name: form.name,
+      description: form.description ?? null,
+      status: form.status,
+      defaultLocale: form.defaultLocale,
+      supportedLocales: [...form.supportedLocales],
+      currentPublishedVersionId: form.currentPublishedVersionId ?? null,
+      currentPublishedVersionNumber: publishedNumberByForm.get(form.id) ?? null,
+      draftVersionId: draftByForm.get(form.id) ?? null,
+      createdAt: form.createdAt.toISOString(),
+      updatedAt: form.updatedAt.toISOString()
+    }));
+    return NextResponse.json({
+      items,
+      total,
+      page,
+      pageSize,
+      totalPages: Math.ceil(total / pageSize)
+    });
+  } catch (error) {
+    return handleRouteError("forms.GET", error);
+  }
+}
+async function POST(req) {
+  try {
+    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req);
+    if (!organizationId || !tenantId) {
+      return jsonError(400, "forms.errors.organization_required");
+    }
+    const body = await readJsonSafe(req, {}) ?? {};
+    const parsedBody = formCreateRequestSchema.parse(body);
+    const scoped = withScopedPayload(parsedBody, ctx, translate);
+    return await withMutationGuard({
+      ctx,
+      tenantId,
+      organizationId,
+      resourceKind: FORM_RESOURCE_KIND,
+      resourceId: "new",
+      operation: "create",
+      request: req,
+      payload: scoped,
+      run: async () => {
+        const commandBus = ctx.container.resolve("commandBus");
+        const { result, logEntry } = await commandBus.execute(
+          "forms.form.create",
+          { input: scoped, ctx }
+        );
+        const response = NextResponse.json({ id: result?.formId ?? null }, { status: 201 });
+        return attachOperationMetadata(response, logEntry, FORM_RESOURCE_KIND, result?.formId ?? null);
+      }
+    });
+  } catch (error) {
+    const interceptorRejection = getCommandInterceptorHttpRejection(error);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
+    return handleRouteError("forms.POST", error);
+  }
+}
+const openApi = {
+  tag: "Forms",
+  summary: "Manage forms",
+  methods: {
+    GET: {
+      summary: "List forms",
+      description: "Returns paginated forms scoped to the authenticated organization.",
+      query: formListQuerySchema,
+      responses: [
+        { status: 200, description: "Form list", schema: listResponseSchema }
+      ],
+      errors: [
+        { status: 400, description: "Tenant or organization context missing", schema: errorSchema },
+        { status: 401, description: "Unauthorized", schema: errorSchema }
+      ]
+    },
+    POST: {
+      summary: "Create form",
+      description: "Creates a new form. Status starts as draft until a version is published.",
+      requestBody: { contentType: "application/json", schema: formCreateRequestSchema },
+      responses: [
+        { status: 201, description: "Form created", schema: createResponseSchema }
+      ],
+      errors: [
+        { status: 400, description: "Invalid payload", schema: errorSchema },
+        { status: 401, description: "Unauthorized", schema: errorSchema },
+        { status: 422, description: "Form key already taken", schema: errorSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/forms/api/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/forms/api/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { Form, FormVersion } from '../data/entities'\nimport {\n  formCreateRequestSchema,\n  formListQuerySchema,\n  type FormCreateCommandInput,\n  type FormCreateRequestInput,\n} from '../data/validators'\nimport {\n  attachOperationMetadata,\n  buildFormsRouteContext,\n  handleRouteError,\n  jsonError,\n  withMutationGuard,\n  withScopedPayload,\n} from './helpers'\nimport { FORM_RESOURCE_KIND } from '../commands/shared'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['forms.view'] },\n  POST: { requireAuth: true, requireFeatures: ['forms.design'] },\n}\n\nconst listItemSchema = z.object({\n  id: z.string().uuid(),\n  key: z.string(),\n  name: z.string(),\n  description: z.string().nullable(),\n  status: z.enum(['draft', 'active', 'archived']),\n  defaultLocale: z.string(),\n  supportedLocales: z.array(z.string()),\n  currentPublishedVersionId: z.string().uuid().nullable(),\n  currentPublishedVersionNumber: z.number().int().nullable(),\n  draftVersionId: z.string().uuid().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst listResponseSchema = z.object({\n  items: z.array(listItemSchema),\n  total: z.number().int(),\n  page: z.number().int(),\n  pageSize: z.number().int(),\n  totalPages: z.number().int(),\n})\n\nconst createResponseSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nfunction pickStatuses(raw: string | null): Array<'draft' | 'active' | 'archived'> {\n  if (!raw) return []\n  const tokens = raw\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n  return tokens.filter((t): t is 'draft' | 'active' | 'archived' =>\n    t === 'draft' || t === 'active' || t === 'archived',\n  )\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const url = new URL(req.url)\n    const queryRaw: Record<string, unknown> = {}\n    const statusParam = url.searchParams.get('status')\n    if (statusParam !== null) queryRaw.status = pickStatuses(statusParam)\n    const qParam = url.searchParams.get('q')\n    if (qParam !== null) queryRaw.q = qParam\n    const pageParam = url.searchParams.get('page')\n    if (pageParam !== null) queryRaw.page = pageParam\n    const pageSizeParam = url.searchParams.get('pageSize')\n    if (pageSizeParam !== null) queryRaw.pageSize = pageSizeParam\n\n    const parsed = formListQuerySchema.parse(queryRaw)\n    const page = parsed.page ?? 1\n    const pageSize = Math.min(parsed.pageSize ?? 20, 100)\n\n    const em = ctx.container.resolve('em') as EntityManager\n    const where: Record<string, unknown> = {\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    }\n    const statuses = Array.isArray(parsed.status)\n      ? parsed.status\n      : parsed.status\n        ? [parsed.status]\n        : []\n    if (statuses.length > 0) {\n      where.status = { $in: statuses }\n    }\n    if (parsed.q && parsed.q.trim()) {\n      const pattern = `%${escapeLikePattern(parsed.q.trim().toLowerCase())}%`\n      where.$or = [\n        { name: { $ilike: pattern } },\n        { key: { $ilike: pattern } },\n      ]\n    }\n    const [forms, total] = await em.findAndCount(Form, where, {\n      orderBy: { updatedAt: 'desc' },\n      limit: pageSize,\n      offset: (page - 1) * pageSize,\n    })\n\n    // Aggregate version metadata in a single pass to avoid N+1.\n    const formIds = forms.map((entry) => entry.id)\n    const versions = formIds.length\n      ? await em.find(FormVersion, {\n          formId: { $in: formIds },\n          tenantId,\n          organizationId,\n        })\n      : []\n    const draftByForm = new Map<string, string>()\n    const publishedNumberByForm = new Map<string, number>()\n    for (const version of versions) {\n      if (version.status === 'draft') {\n        if (!draftByForm.has(version.formId)) {\n          draftByForm.set(version.formId, version.id)\n        }\n      }\n    }\n    for (const form of forms) {\n      if (form.currentPublishedVersionId) {\n        const match = versions.find((v) => v.id === form.currentPublishedVersionId)\n        if (match) publishedNumberByForm.set(form.id, match.versionNumber)\n      }\n    }\n\n    const items = forms.map((form) => ({\n      id: form.id,\n      key: form.key,\n      name: form.name,\n      description: form.description ?? null,\n      status: form.status,\n      defaultLocale: form.defaultLocale,\n      supportedLocales: [...form.supportedLocales],\n      currentPublishedVersionId: form.currentPublishedVersionId ?? null,\n      currentPublishedVersionNumber: publishedNumberByForm.get(form.id) ?? null,\n      draftVersionId: draftByForm.get(form.id) ?? null,\n      createdAt: form.createdAt.toISOString(),\n      updatedAt: form.updatedAt.toISOString(),\n    }))\n\n    return NextResponse.json({\n      items,\n      total,\n      page,\n      pageSize,\n      totalPages: Math.ceil(total / pageSize),\n    })\n  } catch (error) {\n    return handleRouteError('forms.GET', error)\n  }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const { ctx, organizationId, tenantId, translate } = await buildFormsRouteContext(req)\n    if (!organizationId || !tenantId) {\n      return jsonError(400, 'forms.errors.organization_required')\n    }\n    const body = (await readJsonSafe<Record<string, unknown>>(req, {})) ?? {}\n    const parsedBody = formCreateRequestSchema.parse(body) satisfies FormCreateRequestInput\n    const scoped = withScopedPayload(parsedBody as Record<string, unknown>, ctx, translate)\n\n    return await withMutationGuard({\n      ctx,\n      tenantId,\n      organizationId,\n      resourceKind: FORM_RESOURCE_KIND,\n      resourceId: 'new',\n      operation: 'create',\n      request: req,\n      payload: scoped as Record<string, unknown>,\n      run: async () => {\n        const commandBus = ctx.container.resolve('commandBus') as CommandBus\n        const { result, logEntry } = await commandBus.execute<FormCreateCommandInput, { formId: string }>(\n          'forms.form.create',\n          { input: scoped as FormCreateCommandInput, ctx },\n        )\n        const response = NextResponse.json({ id: result?.formId ?? null }, { status: 201 })\n        return attachOperationMetadata(response, logEntry, FORM_RESOURCE_KIND, result?.formId ?? null)\n      },\n    })\n  } catch (error) {\n    const interceptorRejection = getCommandInterceptorHttpRejection(error)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    return handleRouteError('forms.POST', error)\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Forms',\n  summary: 'Manage forms',\n  methods: {\n    GET: {\n      summary: 'List forms',\n      description: 'Returns paginated forms scoped to the authenticated organization.',\n      query: formListQuerySchema,\n      responses: [\n        { status: 200, description: 'Form list', schema: listResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Tenant or organization context missing', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create form',\n      description: 'Creates a new form. Status starts as draft until a version is published.',\n      requestBody: { contentType: 'application/json', schema: formCreateRequestSchema },\n      responses: [\n        { status: 201, description: 'Form created', schema: createResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 422, description: 'Form key already taken', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0CAA0C;AAGnD,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,MAAM,mBAAmB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,YAAY,EAAE;AAAA,EAC1D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAC/D;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,KAAK,EAAE,OAAO;AAAA,EACd,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,KAAK,CAAC,SAAS,UAAU,UAAU,CAAC;AAAA,EAC9C,eAAe,EAAE,OAAO;AAAA,EACxB,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACpC,2BAA2B,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtD,+BAA+B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACzD,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,OAAO,EAAE,MAAM,cAAc;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,IAAI;AAAA,EACtB,MAAM,EAAE,OAAO,EAAE,IAAI;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI;AAAA,EACzB,YAAY,EAAE,OAAO,EAAE,IAAI;AAC7B,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,SAAS,aAAa,KAA4D;AAChF,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,SAAS,IACZ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACjB,SAAO,OAAO;AAAA,IAAO,CAAC,MACpB,MAAM,WAAW,MAAM,YAAY,MAAM;AAAA,EAC3C;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,SAAS,IAAI,MAAM,uBAAuB,GAAG;AAC1E,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAoC,CAAC;AAC3C,UAAM,cAAc,IAAI,aAAa,IAAI,QAAQ;AACjD,QAAI,gBAAgB,KAAM,UAAS,SAAS,aAAa,WAAW;AACpE,UAAM,SAAS,IAAI,aAAa,IAAI,GAAG;AACvC,QAAI,WAAW,KAAM,UAAS,IAAI;AAClC,UAAM,YAAY,IAAI,aAAa,IAAI,MAAM;AAC7C,QAAI,cAAc,KAAM,UAAS,OAAO;AACxC,UAAM,gBAAgB,IAAI,aAAa,IAAI,UAAU;AACrD,QAAI,kBAAkB,KAAM,UAAS,WAAW;AAEhD,UAAM,SAAS,oBAAoB,MAAM,QAAQ;AACjD,UAAM,OAAO,OAAO,QAAQ;AAC5B,UAAM,WAAW,KAAK,IAAI,OAAO,YAAY,IAAI,GAAG;AAEpD,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,QAAiC;AAAA,MACrC;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb;AACA,UAAM,WAAW,MAAM,QAAQ,OAAO,MAAM,IACxC,OAAO,SACP,OAAO,SACL,CAAC,OAAO,MAAM,IACd,CAAC;AACP,QAAI,SAAS,SAAS,GAAG;AACvB,YAAM,SAAS,EAAE,KAAK,SAAS;AAAA,IACjC;AACA,QAAI,OAAO,KAAK,OAAO,EAAE,KAAK,GAAG;AAC/B,YAAM,UAAU,IAAI,kBAAkB,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AACpE,YAAM,MAAM;AAAA,QACV,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE;AAAA,QAC5B,EAAE,KAAK,EAAE,QAAQ,QAAQ,EAAE;AAAA,MAC7B;AAAA,IACF;AACA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG,aAAa,MAAM,OAAO;AAAA,MACxD,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO;AAAA,MACP,SAAS,OAAO,KAAK;AAAA,IACvB,CAAC;AAGD,UAAM,UAAU,MAAM,IAAI,CAAC,UAAU,MAAM,EAAE;AAC7C,UAAM,WAAW,QAAQ,SACrB,MAAM,GAAG,KAAK,aAAa;AAAA,MACzB,QAAQ,EAAE,KAAK,QAAQ;AAAA,MACvB;AAAA,MACA;AAAA,IACF,CAAC,IACD,CAAC;AACL,UAAM,cAAc,oBAAI,IAAoB;AAC5C,UAAM,wBAAwB,oBAAI,IAAoB;AACtD,eAAW,WAAW,UAAU;AAC9B,UAAI,QAAQ,WAAW,SAAS;AAC9B,YAAI,CAAC,YAAY,IAAI,QAAQ,MAAM,GAAG;AACpC,sBAAY,IAAI,QAAQ,QAAQ,QAAQ,EAAE;AAAA,QAC5C;AAAA,MACF;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,2BAA2B;AAClC,cAAM,QAAQ,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,yBAAyB;AAC1E,YAAI,MAAO,uBAAsB,IAAI,KAAK,IAAI,MAAM,aAAa;AAAA,MACnE;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,IAAI,CAAC,UAAU;AAAA,MACjC,IAAI,KAAK;AAAA,MACT,KAAK,KAAK;AAAA,MACV,MAAM,KAAK;AAAA,MACX,aAAa,KAAK,eAAe;AAAA,MACjC,QAAQ,KAAK;AAAA,MACb,eAAe,KAAK;AAAA,MACpB,kBAAkB,CAAC,GAAG,KAAK,gBAAgB;AAAA,MAC3C,2BAA2B,KAAK,6BAA6B;AAAA,MAC7D,+BAA+B,sBAAsB,IAAI,KAAK,EAAE,KAAK;AAAA,MACrE,gBAAgB,YAAY,IAAI,KAAK,EAAE,KAAK;AAAA,MAC5C,WAAW,KAAK,UAAU,YAAY;AAAA,MACtC,WAAW,KAAK,UAAU,YAAY;AAAA,IACxC,EAAE;AAEF,WAAO,aAAa,KAAK;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,KAAK,KAAK,QAAQ,QAAQ;AAAA,IACxC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,iBAAiB,aAAa,KAAK;AAAA,EAC5C;AACF;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,KAAK,gBAAgB,UAAU,UAAU,IAAI,MAAM,uBAAuB,GAAG;AACrF,QAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,aAAO,UAAU,KAAK,oCAAoC;AAAA,IAC5D;AACA,UAAM,OAAQ,MAAM,aAAsC,KAAK,CAAC,CAAC,KAAM,CAAC;AACxE,UAAM,aAAa,wBAAwB,MAAM,IAAI;AACrD,UAAM,SAAS,kBAAkB,YAAuC,KAAK,SAAS;AAEtF,WAAO,MAAM,kBAAkB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,SAAS;AAAA,MACT,SAAS;AAAA,MACT,KAAK,YAAY;AACf,cAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,cAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW;AAAA,UAC5C;AAAA,UACA,EAAE,OAAO,QAAkC,IAAI;AAAA,QACjD;AACA,cAAM,WAAW,aAAa,KAAK,EAAE,IAAI,QAAQ,UAAU,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClF,eAAO,wBAAwB,UAAU,UAAU,oBAAoB,QAAQ,UAAU,IAAI;AAAA,MAC/F;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,uBAAuB,mCAAmC,KAAK;AACrE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,WAAO,iBAAiB,cAAc,KAAK;AAAA,EAC7C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,mBAAmB;AAAA,MACtE;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,YAAY;AAAA,QAC1F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,MAClE;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,wBAAwB;AAAA,MAChF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,qBAAqB;AAAA,MAC3E;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,YAAY;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/forms/api/runtime-helpers.js

@@ -0,0 +1,149 @@
+import { NextResponse } from "next/server";
+import { SubmissionServiceError, isSubmissionServiceError } from "../services/submission-service.js";
+import { isDistributionServiceError } from "../services/distribution-service.js";
+import { readEmbedSettings } from "../lib/embed-frame-policy.js";
+function mapSubmissionError(error) {
+  if (isSubmissionServiceError(error)) {
+    return NextResponse.json(
+      { error: error.code, message: error.message, details: error.details ?? null },
+      { status: error.httpStatus }
+    );
+  }
+  const message = error instanceof Error ? error.message : "Unknown error";
+  return NextResponse.json({ error: "INTERNAL_ERROR", message }, { status: 500 });
+}
+function mapDistributionError(error) {
+  if (isDistributionServiceError(error)) {
+    return NextResponse.json(
+      { error: error.code, message: error.message, details: error.details ?? null },
+      { status: error.httpStatus }
+    );
+  }
+  if (isSubmissionServiceError(error)) {
+    return mapSubmissionError(error);
+  }
+  const message = error instanceof Error ? error.message : "Unknown error";
+  return NextResponse.json({ error: "INTERNAL_ERROR", message }, { status: 500 });
+}
+function buildSubmitMetadata(req, clientMetadata) {
+  const forwardedFor = req.headers.get("x-forwarded-for");
+  const ip = forwardedFor?.split(",")[0]?.trim() || req.headers.get("x-real-ip") || null;
+  const userAgent = req.headers.get("user-agent") || null;
+  return {
+    ...clientMetadata ?? {},
+    ip,
+    userAgent,
+    serverSubmittedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function readCompletionCopy(settings) {
+  const completion = settings && typeof settings === "object" && !Array.isArray(settings) ? settings.completion : void 0;
+  if (!completion || typeof completion !== "object" || Array.isArray(completion)) {
+    return { title: null, message: null };
+  }
+  const record = completion;
+  const title = typeof record.title === "string" && record.title.trim() ? record.title : null;
+  const message = typeof record.message === "string" && record.message.trim() ? record.message : null;
+  return { title, message };
+}
+function readEmbedContext(distribution) {
+  const embed = readEmbedSettings(distribution?.settings);
+  if (!embed || embed.enabled !== true) return null;
+  return {
+    theme: embed.theme ?? null,
+    autoResize: embed.autoResize !== false
+  };
+}
+function serializeFormContext(args) {
+  const { form, formVersion, compiled, distribution } = args;
+  const fieldIndex = {};
+  for (const [fieldKey, descriptor] of Object.entries(compiled.fieldIndex)) {
+    fieldIndex[fieldKey] = {
+      key: descriptor.key,
+      type: descriptor.type,
+      sectionKey: descriptor.sectionKey,
+      sensitive: descriptor.sensitive,
+      editableBy: descriptor.editableBy,
+      visibleTo: descriptor.visibleTo,
+      required: descriptor.required
+    };
+  }
+  return {
+    form: {
+      key: form.key,
+      name: form.name,
+      defaultLocale: form.defaultLocale,
+      supportedLocales: form.supportedLocales
+    },
+    schema: formVersion.schema,
+    ui_schema: formVersion.uiSchema,
+    fieldIndex,
+    completion: readCompletionCopy(distribution?.settings),
+    redirect_url: distribution?.redirectUrl ?? null,
+    embed: readEmbedContext(distribution)
+  };
+}
+async function readJsonBody(req) {
+  try {
+    return await req.json();
+  } catch {
+    throw new SubmissionServiceError("VALIDATION_FAILED", "Invalid JSON body.", 400);
+  }
+}
+function serializeSubmission(submission) {
+  return {
+    id: submission.id,
+    organizationId: submission.organizationId,
+    tenantId: submission.tenantId,
+    formVersionId: submission.formVersionId,
+    subjectType: submission.subjectType,
+    subjectId: submission.subjectId,
+    status: submission.status,
+    currentRevisionId: submission.currentRevisionId ?? null,
+    startedBy: submission.startedBy,
+    submittedBy: submission.submittedBy ?? null,
+    firstSavedAt: submission.firstSavedAt?.toISOString() ?? null,
+    submittedAt: submission.submittedAt?.toISOString() ?? null,
+    submitMetadata: submission.submitMetadata ?? null,
+    pdfSnapshotAttachmentId: submission.pdfSnapshotAttachmentId ?? null,
+    anonymizedAt: submission.anonymizedAt?.toISOString() ?? null,
+    createdAt: submission.createdAt?.toISOString() ?? null,
+    updatedAt: submission.updatedAt?.toISOString() ?? null
+  };
+}
+function serializeRevision(revision) {
+  return {
+    id: revision.id,
+    submissionId: revision.submissionId,
+    revisionNumber: revision.revisionNumber,
+    encryptionKeyVersion: revision.encryptionKeyVersion,
+    savedAt: revision.savedAt?.toISOString() ?? null,
+    savedBy: revision.savedBy,
+    savedByRole: revision.savedByRole,
+    changeSource: revision.changeSource,
+    changedFieldKeys: revision.changedFieldKeys ?? [],
+    changeSummary: revision.changeSummary ?? null,
+    anonymizedAt: revision.anonymizedAt?.toISOString() ?? null
+  };
+}
+function serializeActor(actor) {
+  return {
+    id: actor.id,
+    submissionId: actor.submissionId,
+    userId: actor.userId,
+    role: actor.role,
+    assignedAt: actor.assignedAt?.toISOString() ?? null,
+    revokedAt: actor.revokedAt?.toISOString() ?? null
+  };
+}
+export {
+  buildSubmitMetadata,
+  mapDistributionError,
+  mapSubmissionError,
+  readJsonBody,
+  serializeActor,
+  serializeFormContext,
+  serializeRevision,
+  serializeSubmission
+};
+//# sourceMappingURL=runtime-helpers.js.map

package/dist/modules/forms/api/runtime-helpers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/forms/api/runtime-helpers.ts"],
+  "sourcesContent": ["/**\n * Shared helpers for forms runtime API routes.\n */\n\nimport { NextResponse, type NextRequest } from 'next/server'\nimport { SubmissionServiceError, isSubmissionServiceError } from '../services/submission-service'\nimport { DistributionServiceError, isDistributionServiceError } from '../services/distribution-service'\nimport { readEmbedSettings } from '../lib/embed-frame-policy'\nimport type { CompiledFormVersion } from '../services/form-version-compiler'\nimport type {\n  Form,\n  FormDistribution,\n  FormSubmission,\n  FormSubmissionActor,\n  FormSubmissionRevision,\n  FormVersion,\n} from '../data/entities'\n\nexport function mapSubmissionError(error: unknown): NextResponse {\n  if (isSubmissionServiceError(error)) {\n    return NextResponse.json(\n      { error: error.code, message: error.message, details: error.details ?? null },\n      { status: error.httpStatus },\n    )\n  }\n  const message = error instanceof Error ? error.message : 'Unknown error'\n  return NextResponse.json({ error: 'INTERNAL_ERROR', message }, { status: 500 })\n}\n\nexport function mapDistributionError(error: unknown): NextResponse {\n  if (isDistributionServiceError(error)) {\n    return NextResponse.json(\n      { error: error.code, message: error.message, details: error.details ?? null },\n      { status: error.httpStatus },\n    )\n  }\n  if (isSubmissionServiceError(error)) {\n    return mapSubmissionError(error)\n  }\n  const message = error instanceof Error ? error.message : 'Unknown error'\n  return NextResponse.json({ error: 'INTERNAL_ERROR', message }, { status: 500 })\n}\n\n/**\n * Builds the authoritative submit metadata recorded on `form_submission`.\n *\n * Signing audit (CN-3): the IP, user-agent, and UTC submit timestamp are\n * derived SERVER-SIDE here \u2014 the client cannot forge them. Any client-supplied\n * `submit_metadata` (e.g. locale, timezone hints) is preserved but the\n * server-derived `ip` / `userAgent` / `serverSubmittedAt` always win.\n *\n * Together with the version-pinned (immutable) schema and the encrypted,\n * append-only revision answers (which carry the signature payload incl. the\n * consent clause SHA-256 and the signer's affirmation), this metadata forms\n * the tamper-evident signed record. Full PDF reproduction of that bundle is W3.\n */\nexport function buildSubmitMetadata(\n  req: NextRequest,\n  clientMetadata: Record<string, unknown> | null | undefined,\n): Record<string, unknown> {\n  const forwardedFor = req.headers.get('x-forwarded-for')\n  const ip = forwardedFor?.split(',')[0]?.trim() || req.headers.get('x-real-ip') || null\n  const userAgent = req.headers.get('user-agent') || null\n  return {\n    ...(clientMetadata ?? {}),\n    ip,\n    userAgent,\n    serverSubmittedAt: new Date().toISOString(),\n  }\n}\n\n/**\n * Serializes the published form version a distribution serves into the same\n * shape the public renderer already understands (mirrors\n * `/api/forms/by-key/:key/active`), exposing the JSON schema, ui schema, and a\n * flattened field index. Anonymous participants are never sliced by caller\n * role here \u2014 the distribution carries the default actor role.\n */\n/**\n * Reads the optional `settings.completion.{title,message}` from a distribution\n * `settings` json bag, guarding for the untyped shape. Empty / whitespace-only\n * strings collapse to `null` so the renderer falls back to its default copy.\n */\nfunction readCompletionCopy(\n  settings: Record<string, unknown> | null | undefined,\n): { title: string | null; message: string | null } {\n  const completion =\n    settings && typeof settings === 'object' && !Array.isArray(settings)\n      ? (settings as Record<string, unknown>).completion\n      : undefined\n  if (!completion || typeof completion !== 'object' || Array.isArray(completion)) {\n    return { title: null, message: null }\n  }\n  const record = completion as Record<string, unknown>\n  const title = typeof record.title === 'string' && record.title.trim() ? record.title : null\n  const message =\n    typeof record.message === 'string' && record.message.trim() ? record.message : null\n  return { title, message }\n}\n\n/**\n * Reads the PUBLIC-SAFE embed display hints from a distribution's `settings`\n * bag \u2014 `theme` and `autoResize` only, and only when embedding is enabled. The\n * framing allowlist (`allowedDomains`) is NEVER echoed to a public context\n * payload (R-RS-1); it is consumed exclusively server-side by the CSP builder.\n */\nfunction readEmbedContext(\n  distribution: FormDistribution | undefined,\n): { theme: 'light' | 'dark' | 'auto' | null; autoResize: boolean } | null {\n  const embed = readEmbedSettings(distribution?.settings)\n  if (!embed || embed.enabled !== true) return null\n  return {\n    theme: embed.theme ?? null,\n    autoResize: embed.autoResize !== false,\n  }\n}\n\nexport function serializeFormContext(args: {\n  form: Form\n  formVersion: FormVersion\n  compiled: CompiledFormVersion\n  distribution?: FormDistribution\n}) {\n  const { form, formVersion, compiled, distribution } = args\n  const fieldIndex: Record<string, unknown> = {}\n  for (const [fieldKey, descriptor] of Object.entries(compiled.fieldIndex)) {\n    fieldIndex[fieldKey] = {\n      key: descriptor.key,\n      type: descriptor.type,\n      sectionKey: descriptor.sectionKey,\n      sensitive: descriptor.sensitive,\n      editableBy: descriptor.editableBy,\n      visibleTo: descriptor.visibleTo,\n      required: descriptor.required,\n    }\n  }\n  return {\n    form: {\n      key: form.key,\n      name: form.name,\n      defaultLocale: form.defaultLocale,\n      supportedLocales: form.supportedLocales,\n    },\n    schema: formVersion.schema,\n    ui_schema: formVersion.uiSchema,\n    fieldIndex,\n    completion: readCompletionCopy(distribution?.settings),\n    redirect_url: distribution?.redirectUrl ?? null,\n    embed: readEmbedContext(distribution),\n  }\n}\n\nexport async function readJsonBody<T = unknown>(req: Request): Promise<T> {\n  try {\n    return (await req.json()) as T\n  } catch {\n    throw new SubmissionServiceError('VALIDATION_FAILED', 'Invalid JSON body.', 400)\n  }\n}\n\nexport function serializeSubmission(submission: FormSubmission) {\n  return {\n    id: submission.id,\n    organizationId: submission.organizationId,\n    tenantId: submission.tenantId,\n    formVersionId: submission.formVersionId,\n    subjectType: submission.subjectType,\n    subjectId: submission.subjectId,\n    status: submission.status,\n    currentRevisionId: submission.currentRevisionId ?? null,\n    startedBy: submission.startedBy,\n    submittedBy: submission.submittedBy ?? null,\n    firstSavedAt: submission.firstSavedAt?.toISOString() ?? null,\n    submittedAt: submission.submittedAt?.toISOString() ?? null,\n    submitMetadata: submission.submitMetadata ?? null,\n    pdfSnapshotAttachmentId: submission.pdfSnapshotAttachmentId ?? null,\n    anonymizedAt: submission.anonymizedAt?.toISOString() ?? null,\n    createdAt: submission.createdAt?.toISOString() ?? null,\n    updatedAt: submission.updatedAt?.toISOString() ?? null,\n  }\n}\n\nexport function serializeRevision(revision: FormSubmissionRevision) {\n  return {\n    id: revision.id,\n    submissionId: revision.submissionId,\n    revisionNumber: revision.revisionNumber,\n    encryptionKeyVersion: revision.encryptionKeyVersion,\n    savedAt: revision.savedAt?.toISOString() ?? null,\n    savedBy: revision.savedBy,\n    savedByRole: revision.savedByRole,\n    changeSource: revision.changeSource,\n    changedFieldKeys: revision.changedFieldKeys ?? [],\n    changeSummary: revision.changeSummary ?? null,\n    anonymizedAt: revision.anonymizedAt?.toISOString() ?? null,\n  }\n}\n\nexport function serializeActor(actor: FormSubmissionActor) {\n  return {\n    id: actor.id,\n    submissionId: actor.submissionId,\n    userId: actor.userId,\n    role: actor.role,\n    assignedAt: actor.assignedAt?.toISOString() ?? null,\n    revokedAt: actor.revokedAt?.toISOString() ?? null,\n  }\n}\n"],
+  "mappings": "AAIA,SAAS,oBAAsC;AAC/C,SAAS,wBAAwB,gCAAgC;AACjE,SAAmC,kCAAkC;AACrE,SAAS,yBAAyB;AAW3B,SAAS,mBAAmB,OAA8B;AAC/D,MAAI,yBAAyB,KAAK,GAAG;AACnC,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,MAAM,MAAM,SAAS,MAAM,SAAS,SAAS,MAAM,WAAW,KAAK;AAAA,MAC5E,EAAE,QAAQ,MAAM,WAAW;AAAA,IAC7B;AAAA,EACF;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,SAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAChF;AAEO,SAAS,qBAAqB,OAA8B;AACjE,MAAI,2BAA2B,KAAK,GAAG;AACrC,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,MAAM,MAAM,SAAS,MAAM,SAAS,SAAS,MAAM,WAAW,KAAK;AAAA,MAC5E,EAAE,QAAQ,MAAM,WAAW;AAAA,IAC7B;AAAA,EACF;AACA,MAAI,yBAAyB,KAAK,GAAG;AACnC,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,SAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAChF;AAeO,SAAS,oBACd,KACA,gBACyB;AACzB,QAAM,eAAe,IAAI,QAAQ,IAAI,iBAAiB;AACtD,QAAM,KAAK,cAAc,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,KAAK,IAAI,QAAQ,IAAI,WAAW,KAAK;AAClF,QAAM,YAAY,IAAI,QAAQ,IAAI,YAAY,KAAK;AACnD,SAAO;AAAA,IACL,GAAI,kBAAkB,CAAC;AAAA,IACvB;AAAA,IACA;AAAA,IACA,oBAAmB,oBAAI,KAAK,GAAE,YAAY;AAAA,EAC5C;AACF;AAcA,SAAS,mBACP,UACkD;AAClD,QAAM,aACJ,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAC9D,SAAqC,aACtC;AACN,MAAI,CAAC,cAAc,OAAO,eAAe,YAAY,MAAM,QAAQ,UAAU,GAAG;AAC9E,WAAO,EAAE,OAAO,MAAM,SAAS,KAAK;AAAA,EACtC;AACA,QAAM,SAAS;AACf,QAAM,QAAQ,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,IAAI,OAAO,QAAQ;AACvF,QAAM,UACJ,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,KAAK,IAAI,OAAO,UAAU;AACjF,SAAO,EAAE,OAAO,QAAQ;AAC1B;AAQA,SAAS,iBACP,cACyE;AACzE,QAAM,QAAQ,kBAAkB,cAAc,QAAQ;AACtD,MAAI,CAAC,SAAS,MAAM,YAAY,KAAM,QAAO;AAC7C,SAAO;AAAA,IACL,OAAO,MAAM,SAAS;AAAA,IACtB,YAAY,MAAM,eAAe;AAAA,EACnC;AACF;AAEO,SAAS,qBAAqB,MAKlC;AACD,QAAM,EAAE,MAAM,aAAa,UAAU,aAAa,IAAI;AACtD,QAAM,aAAsC,CAAC;AAC7C,aAAW,CAAC,UAAU,UAAU,KAAK,OAAO,QAAQ,SAAS,UAAU,GAAG;AACxE,eAAW,QAAQ,IAAI;AAAA,MACrB,KAAK,WAAW;AAAA,MAChB,MAAM,WAAW;AAAA,MACjB,YAAY,WAAW;AAAA,MACvB,WAAW,WAAW;AAAA,MACtB,YAAY,WAAW;AAAA,MACvB,WAAW,WAAW;AAAA,MACtB,UAAU,WAAW;AAAA,IACvB;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,KAAK,KAAK;AAAA,MACV,MAAM,KAAK;AAAA,MACX,eAAe,KAAK;AAAA,MACpB,kBAAkB,KAAK;AAAA,IACzB;AAAA,IACA,QAAQ,YAAY;AAAA,IACpB,WAAW,YAAY;AAAA,IACvB;AAAA,IACA,YAAY,mBAAmB,cAAc,QAAQ;AAAA,IACrD,cAAc,cAAc,eAAe;AAAA,IAC3C,OAAO,iBAAiB,YAAY;AAAA,EACtC;AACF;AAEA,eAAsB,aAA0B,KAA0B;AACxE,MAAI;AACF,WAAQ,MAAM,IAAI,KAAK;AAAA,EACzB,QAAQ;AACN,UAAM,IAAI,uBAAuB,qBAAqB,sBAAsB,GAAG;AAAA,EACjF;AACF;AAEO,SAAS,oBAAoB,YAA4B;AAC9D,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,gBAAgB,WAAW;AAAA,IAC3B,UAAU,WAAW;AAAA,IACrB,eAAe,WAAW;AAAA,IAC1B,aAAa,WAAW;AAAA,IACxB,WAAW,WAAW;AAAA,IACtB,QAAQ,WAAW;AAAA,IACnB,mBAAmB,WAAW,qBAAqB;AAAA,IACnD,WAAW,WAAW;AAAA,IACtB,aAAa,WAAW,eAAe;AAAA,IACvC,cAAc,WAAW,cAAc,YAAY,KAAK;AAAA,IACxD,aAAa,WAAW,aAAa,YAAY,KAAK;AAAA,IACtD,gBAAgB,WAAW,kBAAkB;AAAA,IAC7C,yBAAyB,WAAW,2BAA2B;AAAA,IAC/D,cAAc,WAAW,cAAc,YAAY,KAAK;AAAA,IACxD,WAAW,WAAW,WAAW,YAAY,KAAK;AAAA,IAClD,WAAW,WAAW,WAAW,YAAY,KAAK;AAAA,EACpD;AACF;AAEO,SAAS,kBAAkB,UAAkC;AAClE,SAAO;AAAA,IACL,IAAI,SAAS;AAAA,IACb,cAAc,SAAS;AAAA,IACvB,gBAAgB,SAAS;AAAA,IACzB,sBAAsB,SAAS;AAAA,IAC/B,SAAS,SAAS,SAAS,YAAY,KAAK;AAAA,IAC5C,SAAS,SAAS;AAAA,IAClB,aAAa,SAAS;AAAA,IACtB,cAAc,SAAS;AAAA,IACvB,kBAAkB,SAAS,oBAAoB,CAAC;AAAA,IAChD,eAAe,SAAS,iBAAiB;AAAA,IACzC,cAAc,SAAS,cAAc,YAAY,KAAK;AAAA,EACxD;AACF;AAEO,SAAS,eAAe,OAA4B;AACzD,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,cAAc,MAAM;AAAA,IACpB,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,IACZ,YAAY,MAAM,YAAY,YAAY,KAAK;AAAA,IAC/C,WAAW,MAAM,WAAW,YAAY,KAAK;AAAA,EAC/C;AACF;",
+  "names": []
+}