@stapel/forms-react 0.1.0

package/dist/model/mutations.d.ts

@@ -0,0 +1,135 @@
+import type { UseMutationResult } from "@tanstack/react-query";
+import type { StapelApiError } from "@stapel/core";
+import type { FormCreateRequest, FormPatchRequest, FormRow, FormSchema, FormState, PublishResult, ResendRequest, ResendResult, SubmitRequest, SubmitResult } from "../api/types.js";
+/** Variables for {@link useSubmitForm}. */
+export interface SubmitVariables {
+    readonly publicId: string;
+    readonly body: SubmitRequest;
+}
+/**
+ * `POST /public/<public_id>/submissions/` — the anonymous submit.
+ *
+ * Deliberately does NOT invalidate anything: an anonymous respondent holds no
+ * admin cache to refresh, and the one read they do hold (the schema) is
+ * unchanged by their own submission. The 409-superseded refetch is driven by
+ * `<FormFill>`, which knows to preserve the values first.
+ *
+ * `retry: false` — a resubmit is not idempotent. A retried POST that the
+ * server actually received is a duplicate response in somebody's spreadsheet.
+ */
+export declare function useSubmitForm(): UseMutationResult<SubmitResult, StapelApiError, SubmitVariables>;
+/** `POST /forms` — create a form (it starts in `draft`). `forms.manage`. */
+export declare function useCreateForm(): UseMutationResult<FormRow, StapelApiError, FormCreateRequest>;
+/** Variables for {@link useUpdateForm}. */
+export interface UpdateFormVariables {
+    readonly workspaceId: string;
+    readonly formId: string;
+    readonly patch: FormPatchRequest;
+}
+/** `PATCH /forms/<id>` — title and notification targets. `forms.manage`. */
+export declare function useUpdateForm(): UseMutationResult<FormRow, StapelApiError, UpdateFormVariables>;
+/** Variables for the form-scoped mutations that take no body. */
+export interface FormRef {
+    readonly workspaceId: string;
+    readonly formId: string;
+}
+/** `DELETE /forms/<id>` — soft-delete. `forms.manage`. */
+export declare function useDeleteForm(): UseMutationResult<void, StapelApiError, FormRef>;
+/** Variables for {@link useSaveDraft}. */
+export interface SaveDraftVariables extends FormRef {
+    readonly schema: FormSchema;
+}
+/**
+ * `PUT /forms/<id>/draft` — replace the builder's scratchpad. `forms.manage`.
+ *
+ * A draft save is NOT a publish: what respondents see does not move until
+ * {@link usePublishForm} freezes the draft into the next immutable version.
+ * That separation is the whole reason a live form can be edited safely.
+ */
+export declare function useSaveDraft(): UseMutationResult<FormRow, StapelApiError, SaveDraftVariables>;
+/**
+ * `POST /forms/<id>/publish` — freeze the draft into the next version.
+ * `forms.manage`.
+ *
+ * Refuses a schema the engine will not accept, per-field where it can:
+ * `error.400.forms_empty_schema`, `..._duplicate_slug` (`params.slug`),
+ * `..._kind_not_allowed` (`params.kind`), `..._too_many_fields`, and
+ * `..._invalid_schema` with `params.key` for a config key the type's
+ * dataclass does not know — which is a cap that would otherwise silently not
+ * exist (backend delta note 1).
+ */
+export declare function usePublishForm(): UseMutationResult<PublishResult, StapelApiError, FormRef>;
+/** Variables for {@link useSetFormState}. */
+export interface SetFormStateVariables extends FormRef {
+    readonly state: FormState;
+}
+/** `POST /forms/<id>/state` — open / close / back to draft. `forms.manage`. */
+export declare function useSetFormState(): UseMutationResult<FormRow, StapelApiError, SetFormStateVariables>;
+/**
+ * `POST /forms/<id>/rotate-link` — mint a new `public_id`. `forms.manage`.
+ *
+ * The old link stops resolving (a uniform `error.404.forms_not_found`, so a
+ * probe cannot tell a rotated link from one that never existed). This is why
+ * every admin mutation invalidates the module root: the public read is cached
+ * BY the token this call replaces.
+ */
+export declare function useRotateLink(): UseMutationResult<FormRow, StapelApiError, FormRef>;
+/** Variables for the submission-scoped mutations. */
+export interface SubmissionRef {
+    readonly workspaceId: string;
+    readonly submissionId: string;
+}
+/** `DELETE /submissions/<id>` — erase one response.
+ * `forms.responses.manage`. */
+export declare function useDeleteSubmission(): UseMutationResult<void, StapelApiError, SubmissionRef>;
+/** Variables for {@link useResendSubmission}. */
+export interface ResendVariables extends SubmissionRef {
+    /**
+     * Destination override. Given either list, the form's configured targets
+     * are **replaced**, not supplemented (backend delta note 7) — "send this one
+     * to legal" must not also re-send it to everybody who already received it.
+     * Omit to use the form's own targets.
+     */
+    readonly override?: ResendRequest;
+}
+/**
+ * `POST /submissions/<id>/resend` — re-deliver one response.
+ * `forms.responses.manage`.
+ *
+ * Admin-initiated, so it is NOT subject to `NOTIFY_COOLDOWN_SECONDS` (that
+ * cooldown suppresses respondent-triggered auto-notifies; a resend is an
+ * explicit operator act). Reads no cache and invalidates none — delivery is
+ * not state this pair holds.
+ */
+export declare function useResendSubmission(): UseMutationResult<ResendResult, StapelApiError, ResendVariables>;
+/** The state of a running CSV export. */
+export interface CsvExportBag {
+    /** Drive the export to completion; resolves to the whole CSV text. */
+    run(params: {
+        readonly workspaceId: string;
+        readonly formId: string;
+        readonly version?: number;
+    }): Promise<string>;
+    readonly isExporting: boolean;
+    /** Pages fetched so far — a coarse but honest progress signal for a long
+     * export (the server never tells us the total). */
+    readonly pagesFetched: number;
+    readonly error: StapelApiError | null;
+}
+/**
+ * The paged CSV export, driven to completion.
+ *
+ * The server streams a bounded page per request and hands back the
+ * continuation cursor in the `X-Forms-Next-Before` response header — never in
+ * the body, which is a spreadsheet (backend delta note 6). This hook follows
+ * that header until it is absent, concatenates the pages keeping the header
+ * row exactly once, and returns the whole CSV as text. The cursor is passed
+ * back VERBATIM; re-formatting it is what made the second page a silent 400
+ * during the backend build.
+ *
+ * The result is text, not a download: handing the caller a string keeps this
+ * hook usable in a test, in a node script, and in a browser, and leaves the
+ * "make it a file" decision (which is a DOM act) to the skin.
+ */
+export declare function useCsvExport(): CsvExportBag;
+//# sourceMappingURL=mutations.d.ts.map

package/dist/model/mutations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutations.d.ts","sourceRoot":"","sources":["../../src/model/mutations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,OAAO,EACP,UAAU,EACV,SAAS,EACT,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,EACb,MAAM,iBAAiB,CAAC;AA4BzB,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CAChD,YAAY,EACZ,cAAc,EACd,eAAe,CAChB,CAWA;AAID,4EAA4E;AAC5E,wBAAgB,aAAa,IAAI,iBAAiB,CAChD,OAAO,EACP,cAAc,EACd,iBAAiB,CAClB,CASA;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,IAAI,iBAAiB,CAChD,OAAO,EACP,cAAc,EACd,mBAAmB,CACpB,CAYA;AAED,iEAAiE;AACjE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,0DAA0D;AAC1D,wBAAgB,aAAa,IAAI,iBAAiB,CAChD,IAAI,EACJ,cAAc,EACd,OAAO,CACR,CAQA;AAED,0CAA0C;AAC1C,MAAM,WAAW,kBAAmB,SAAQ,OAAO;IACjD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,iBAAiB,CAC/C,OAAO,EACP,cAAc,EACd,kBAAkB,CACnB,CAUA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,IAAI,iBAAiB,CACjD,aAAa,EACb,cAAc,EACd,OAAO,CACR,CAQA;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAsB,SAAQ,OAAO;IACpD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,IAAI,iBAAiB,CAClD,OAAO,EACP,cAAc,EACd,qBAAqB,CACtB,CAYA;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CAChD,OAAO,EACP,cAAc,EACd,OAAO,CACR,CAQA;AAID,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;+BAC+B;AAC/B,wBAAgB,mBAAmB,IAAI,iBAAiB,CACtD,IAAI,EACJ,cAAc,EACd,aAAa,CACd,CASA;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAAI,iBAAiB,CACtD,YAAY,EACZ,cAAc,EACd,eAAe,CAChB,CAYA;AAID,yCAAyC;AACzC,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,GAAG,CAAC,MAAM,EAAE;QACV,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B;uDACmD;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAC;CACvC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,IAAI,YAAY,CA6C3C"}

package/dist/model/mutations.js

@@ -0,0 +1,223 @@
+import { useCallback, useState } from "react";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { isStapelApiError } from "@stapel/core";
+import { concatCsvPages } from "../api/export.js";
+import { useFormsApi } from "./context.js";
+import { formsQueryKeys } from "./queryKeys.js";
+/**
+ * Write hooks (frontend-standard §2 — mutations invalidate on success).
+ *
+ * A forms write shifts several cached reads at once — a publish moves the
+ * form's `active_version`, adds a version row, AND changes what the public
+ * link serves; a rotate-link changes the very key the public read is cached
+ * under — so each admin mutation invalidates the module root
+ * (`formsQueryKeys.all`) rather than guessing which entries moved. Guessing
+ * is how `rotateLink` would leave a stale schema cached under an id that no
+ * longer resolves.
+ *
+ * Options are built as typed `UseMutationOptions` objects (not call-site
+ * generics) so `void`/error types stay in reference position.
+ */
+function useInvalidateModule() {
+    const queryClient = useQueryClient();
+    return () => {
+        void queryClient.invalidateQueries({ queryKey: formsQueryKeys.all });
+    };
+}
+/**
+ * `POST /public/<public_id>/submissions/` — the anonymous submit.
+ *
+ * Deliberately does NOT invalidate anything: an anonymous respondent holds no
+ * admin cache to refresh, and the one read they do hold (the schema) is
+ * unchanged by their own submission. The 409-superseded refetch is driven by
+ * `<FormFill>`, which knows to preserve the values first.
+ *
+ * `retry: false` — a resubmit is not idempotent. A retried POST that the
+ * server actually received is a duplicate response in somebody's spreadsheet.
+ */
+export function useSubmitForm() {
+    const api = useFormsApi();
+    const options = {
+        mutationFn: (vars) => api.submit(vars.publicId, vars.body),
+        retry: false,
+    };
+    return useMutation(options);
+}
+// ── admin: the form lifecycle ────────────────────────────────────────────────
+/** `POST /forms` — create a form (it starts in `draft`). `forms.manage`. */
+export function useCreateForm() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (body) => api.createForm(body),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/** `PATCH /forms/<id>` — title and notification targets. `forms.manage`. */
+export function useUpdateForm() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (vars) => api.patchForm(vars.workspaceId, vars.formId, vars.patch),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/** `DELETE /forms/<id>` — soft-delete. `forms.manage`. */
+export function useDeleteForm() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (vars) => api.deleteForm(vars.workspaceId, vars.formId),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/**
+ * `PUT /forms/<id>/draft` — replace the builder's scratchpad. `forms.manage`.
+ *
+ * A draft save is NOT a publish: what respondents see does not move until
+ * {@link usePublishForm} freezes the draft into the next immutable version.
+ * That separation is the whole reason a live form can be edited safely.
+ */
+export function useSaveDraft() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (vars) => api.putDraft(vars.workspaceId, vars.formId, vars.schema),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/**
+ * `POST /forms/<id>/publish` — freeze the draft into the next version.
+ * `forms.manage`.
+ *
+ * Refuses a schema the engine will not accept, per-field where it can:
+ * `error.400.forms_empty_schema`, `..._duplicate_slug` (`params.slug`),
+ * `..._kind_not_allowed` (`params.kind`), `..._too_many_fields`, and
+ * `..._invalid_schema` with `params.key` for a config key the type's
+ * dataclass does not know — which is a cap that would otherwise silently not
+ * exist (backend delta note 1).
+ */
+export function usePublishForm() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (vars) => api.publish(vars.workspaceId, vars.formId),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/** `POST /forms/<id>/state` — open / close / back to draft. `forms.manage`. */
+export function useSetFormState() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (vars) => api.setState(vars.workspaceId, vars.formId, vars.state),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/**
+ * `POST /forms/<id>/rotate-link` — mint a new `public_id`. `forms.manage`.
+ *
+ * The old link stops resolving (a uniform `error.404.forms_not_found`, so a
+ * probe cannot tell a rotated link from one that never existed). This is why
+ * every admin mutation invalidates the module root: the public read is cached
+ * BY the token this call replaces.
+ */
+export function useRotateLink() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (vars) => api.rotateLink(vars.workspaceId, vars.formId),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/** `DELETE /submissions/<id>` — erase one response.
+ * `forms.responses.manage`. */
+export function useDeleteSubmission() {
+    const api = useFormsApi();
+    const invalidate = useInvalidateModule();
+    const options = {
+        mutationFn: (vars) => api.deleteSubmission(vars.workspaceId, vars.submissionId),
+        onSuccess: invalidate,
+    };
+    return useMutation(options);
+}
+/**
+ * `POST /submissions/<id>/resend` — re-deliver one response.
+ * `forms.responses.manage`.
+ *
+ * Admin-initiated, so it is NOT subject to `NOTIFY_COOLDOWN_SECONDS` (that
+ * cooldown suppresses respondent-triggered auto-notifies; a resend is an
+ * explicit operator act). Reads no cache and invalidates none — delivery is
+ * not state this pair holds.
+ */
+export function useResendSubmission() {
+    const api = useFormsApi();
+    const options = {
+        mutationFn: (vars) => api.resendSubmission(vars.workspaceId, vars.submissionId, vars.override),
+        retry: false,
+    };
+    return useMutation(options);
+}
+/**
+ * The paged CSV export, driven to completion.
+ *
+ * The server streams a bounded page per request and hands back the
+ * continuation cursor in the `X-Forms-Next-Before` response header — never in
+ * the body, which is a spreadsheet (backend delta note 6). This hook follows
+ * that header until it is absent, concatenates the pages keeping the header
+ * row exactly once, and returns the whole CSV as text. The cursor is passed
+ * back VERBATIM; re-formatting it is what made the second page a silent 400
+ * during the backend build.
+ *
+ * The result is text, not a download: handing the caller a string keeps this
+ * hook usable in a test, in a node script, and in a browser, and leaves the
+ * "make it a file" decision (which is a DOM act) to the skin.
+ */
+export function useCsvExport() {
+    const api = useFormsApi();
+    const [isExporting, setExporting] = useState(false);
+    const [pagesFetched, setPagesFetched] = useState(0);
+    const [error, setError] = useState(null);
+    const run = useCallback(async (params) => {
+        setExporting(true);
+        setPagesFetched(0);
+        setError(null);
+        const pages = [];
+        let before;
+        try {
+            for (;;) {
+                const page = await api.exportSubmissions({
+                    workspaceId: params.workspaceId,
+                    formId: params.formId,
+                    ...(params.version !== undefined ? { version: params.version } : {}),
+                    ...(before !== undefined ? { before } : {}),
+                });
+                pages.push(page.csv);
+                setPagesFetched(pages.length);
+                if (page.nextBefore === null)
+                    break;
+                before = page.nextBefore;
+            }
+            return concatCsvPages(pages);
+        }
+        catch (caught) {
+            // Not `caught as StapelApiError`: a network fault carries neither
+            // `.code` nor `.status`, and claiming otherwise makes the skin render
+            // `undefined` as a sentence. `null` means "we cannot describe it".
+            setError(isStapelApiError(caught) ? caught : null);
+            throw caught;
+        }
+        finally {
+            setExporting(false);
+        }
+    }, [api]);
+    return { run, isExporting, pagesFetched, error };
+}
+//# sourceMappingURL=mutations.js.map

package/dist/model/mutations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutations.js","sourceRoot":"","sources":["../../src/model/mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAKpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAalD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AAEH,SAAS,mBAAmB;IAC1B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,OAAO,GAAG,EAAE;QACV,KAAK,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa;IAK3B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,OAAO,GAIT;QACF,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;QAC1D,KAAK,EAAE,KAAK;KACb,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAEhF,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAK3B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GACX;QACE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,SAAS,EAAE,UAAU;KACtB,CAAC;IACJ,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AASD,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAK3B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GAIT;QACF,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC;QAC9E,SAAS,EAAE,UAAU;KACtB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAQD,0DAA0D;AAC1D,MAAM,UAAU,aAAa;IAK3B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAsD;QACjE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;QACnE,SAAS,EAAE,UAAU;KACtB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY;IAK1B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GACX;QACE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACnB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QAC1D,SAAS,EAAE,UAAU;KACtB,CAAC;IACJ,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc;IAK5B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GAA+D;QAC1E,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;QAChE,SAAS,EAAE,UAAU;KACtB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAOD,+EAA+E;AAC/E,MAAM,UAAU,eAAe;IAK7B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GAIT;QACF,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC;QAC7E,SAAS,EAAE,UAAU;KACtB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAK3B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAyD;QACpE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;QACnE,SAAS,EAAE,UAAU;KACtB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAUD;+BAC+B;AAC/B,MAAM,UAAU,mBAAmB;IAKjC,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,OAAO,GAA4D;QACvE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACnB,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC;QAC3D,SAAS,EAAE,UAAU;KACtB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAaD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB;IAKjC,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,OAAO,GAIT;QACF,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACnB,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC1E,KAAK,EAAE,KAAK;KACb,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAmBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAwB,IAAI,CAAC,CAAC;IAEhE,MAAM,GAAG,GAAG,WAAW,CACrB,KAAK,EAAE,MAIN,EAAmB,EAAE;QACpB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,eAAe,CAAC,CAAC,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC;oBACvC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5C,CAAC,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrB,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;oBAAE,MAAM;gBACpC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3B,CAAC;YACD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EACD,CAAC,GAAG,CAAC,CACN,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC"}

package/dist/model/queries.d.ts

@@ -0,0 +1,59 @@
+import type { UseQueryResult } from "@tanstack/react-query";
+import type { StapelApiError } from "@stapel/core";
+import type { FieldKindCatalogue, FormRow, FormState, FormVersion, PublicForm, Submission, SubmissionListParams } from "../api/types.js";
+/**
+ * Read hooks over the forms API (frontend-standard §2 — read hooks). Keys are
+ * namespaced (see `formsQueryKeys`).
+ *
+ * SESSION GATING, and the one hook that is deliberately NOT gated. Every
+ * ADMIN read is gated on {@link useActiveSessionReady} (owner-diagnosed live
+ * incident, 2026-07-17): a list hook with no natural `enabled` condition is
+ * exactly the shape that raced a still-bootstrapping session.
+ * {@link usePublicForm} is the documented exception core's own doc comment
+ * carves out ("or be unconditionally safe pre-session, e.g. a public GET"):
+ * the endpoint is anonymous, and gating it would make an embedded form on a
+ * marketing page wait for a login bootstrap it has no stake in — a form that
+ * renders late for a visitor who will never sign in.
+ */
+/**
+ * The active schema behind a public link — the anonymous read `<StapelForm>`
+ * and `<FormFill>` are built on.
+ *
+ * `retry: false`: the refusals here are VERDICTS, not blips
+ * (`error.404.forms_not_found`, `error.410.forms_closed`), and retrying a 404
+ * three times only delays the moment the skin can say which one it was. A
+ * genuine outage is retried by the person, through the bag's `refetch`.
+ */
+export declare function usePublicForm(publicId: string): UseQueryResult<PublicForm, StapelApiError>;
+/**
+ * The field kinds a form may be built from, with their config forms.
+ * `forms.manage`.
+ *
+ * `staleTime: Infinity`: a deployment's registered feature types change when
+ * somebody deploys, not while an admin edits a form, so refetching this on
+ * every window focus would be pure noise behind the builder.
+ */
+export declare function useFieldKinds(workspaceId: string): UseQueryResult<FieldKindCatalogue, StapelApiError>;
+/** The workspace's forms, optionally filtered by state. `forms.view`. */
+export declare function useForms(workspaceId: string, state?: FormState): UseQueryResult<readonly FormRow[], StapelApiError>;
+/** One form, as its workspace's admins see it. `forms.view`. */
+export declare function useForm(workspaceId: string, formId: string): UseQueryResult<FormRow, StapelApiError>;
+/**
+ * Every published version of a form. `forms.view`.
+ *
+ * This is what makes per-version column sets possible in `<ResponsesTable>`:
+ * a submission records WHICH schema it answered, so the reviewer's columns
+ * come from that version rather than from today's fields.
+ */
+export declare function useFormVersions(workspaceId: string, formId: string): UseQueryResult<readonly FormVersion[], StapelApiError>;
+/**
+ * One keyset page of responses. `forms.responses.view`.
+ *
+ * Keyset, not offset: `before` is the previous page's last `submitted_at`.
+ * Each cursor is its own cache entry (see `formsQueryKeys.submissions`), which
+ * is what makes paging back instant instead of a re-fetch.
+ */
+export declare function useSubmissions(params: SubmissionListParams): UseQueryResult<readonly Submission[], StapelApiError>;
+/** One response in full. `forms.responses.view`. */
+export declare function useSubmission(workspaceId: string, submissionId: string): UseQueryResult<Submission, StapelApiError>;
+//# sourceMappingURL=queries.d.ts.map

package/dist/model/queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/model/queries.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EACV,kBAAkB,EAClB,OAAO,EACP,SAAS,EACT,WAAW,EACX,UAAU,EACV,UAAU,EACV,oBAAoB,EACrB,MAAM,iBAAiB,CAAC;AAIzB;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,GACf,cAAc,CAAC,UAAU,EAAE,cAAc,CAAC,CAQ5C;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,GAClB,cAAc,CAAC,kBAAkB,EAAE,cAAc,CAAC,CASpD;AAED,yEAAyE;AACzE,wBAAgB,QAAQ,CACtB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,SAAS,GAChB,cAAc,CAAC,SAAS,OAAO,EAAE,EAAE,cAAc,CAAC,CAQpD;AAED,gEAAgE;AAChE,wBAAgB,OAAO,CACrB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAQzC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,cAAc,CAAC,SAAS,WAAW,EAAE,EAAE,cAAc,CAAC,CAQxD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,oBAAoB,GAC3B,cAAc,CAAC,SAAS,UAAU,EAAE,EAAE,cAAc,CAAC,CASvD;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,cAAc,CAAC,UAAU,EAAE,cAAc,CAAC,CAQ5C"}

package/dist/model/queries.js

@@ -0,0 +1,117 @@
+import { useQuery } from "@tanstack/react-query";
+import { useActiveSessionReady } from "@stapel/core";
+import { useFormsApi } from "./context.js";
+import { formsQueryKeys } from "./queryKeys.js";
+/**
+ * Read hooks over the forms API (frontend-standard §2 — read hooks). Keys are
+ * namespaced (see `formsQueryKeys`).
+ *
+ * SESSION GATING, and the one hook that is deliberately NOT gated. Every
+ * ADMIN read is gated on {@link useActiveSessionReady} (owner-diagnosed live
+ * incident, 2026-07-17): a list hook with no natural `enabled` condition is
+ * exactly the shape that raced a still-bootstrapping session.
+ * {@link usePublicForm} is the documented exception core's own doc comment
+ * carves out ("or be unconditionally safe pre-session, e.g. a public GET"):
+ * the endpoint is anonymous, and gating it would make an embedded form on a
+ * marketing page wait for a login bootstrap it has no stake in — a form that
+ * renders late for a visitor who will never sign in.
+ */
+/**
+ * The active schema behind a public link — the anonymous read `<StapelForm>`
+ * and `<FormFill>` are built on.
+ *
+ * `retry: false`: the refusals here are VERDICTS, not blips
+ * (`error.404.forms_not_found`, `error.410.forms_closed`), and retrying a 404
+ * three times only delays the moment the skin can say which one it was. A
+ * genuine outage is retried by the person, through the bag's `refetch`.
+ */
+export function usePublicForm(publicId) {
+    const api = useFormsApi();
+    return useQuery({
+        queryKey: formsQueryKeys.publicForm(publicId),
+        queryFn: () => api.getPublicForm(publicId),
+        enabled: publicId.length > 0,
+        retry: false,
+    });
+}
+/**
+ * The field kinds a form may be built from, with their config forms.
+ * `forms.manage`.
+ *
+ * `staleTime: Infinity`: a deployment's registered feature types change when
+ * somebody deploys, not while an admin edits a form, so refetching this on
+ * every window focus would be pure noise behind the builder.
+ */
+export function useFieldKinds(workspaceId) {
+    const api = useFormsApi();
+    const sessionReady = useActiveSessionReady();
+    return useQuery({
+        queryKey: formsQueryKeys.fieldKinds(workspaceId),
+        queryFn: () => api.listFieldKinds(workspaceId),
+        enabled: sessionReady && workspaceId.length > 0,
+        staleTime: Number.POSITIVE_INFINITY,
+    });
+}
+/** The workspace's forms, optionally filtered by state. `forms.view`. */
+export function useForms(workspaceId, state) {
+    const api = useFormsApi();
+    const sessionReady = useActiveSessionReady();
+    return useQuery({
+        queryKey: formsQueryKeys.forms(workspaceId, state),
+        queryFn: () => api.listForms(workspaceId, state),
+        enabled: sessionReady && workspaceId.length > 0,
+    });
+}
+/** One form, as its workspace's admins see it. `forms.view`. */
+export function useForm(workspaceId, formId) {
+    const api = useFormsApi();
+    const sessionReady = useActiveSessionReady();
+    return useQuery({
+        queryKey: formsQueryKeys.form(workspaceId, formId),
+        queryFn: () => api.getForm(workspaceId, formId),
+        enabled: sessionReady && workspaceId.length > 0 && formId.length > 0,
+    });
+}
+/**
+ * Every published version of a form. `forms.view`.
+ *
+ * This is what makes per-version column sets possible in `<ResponsesTable>`:
+ * a submission records WHICH schema it answered, so the reviewer's columns
+ * come from that version rather than from today's fields.
+ */
+export function useFormVersions(workspaceId, formId) {
+    const api = useFormsApi();
+    const sessionReady = useActiveSessionReady();
+    return useQuery({
+        queryKey: formsQueryKeys.versions(workspaceId, formId),
+        queryFn: () => api.listVersions(workspaceId, formId),
+        enabled: sessionReady && workspaceId.length > 0 && formId.length > 0,
+    });
+}
+/**
+ * One keyset page of responses. `forms.responses.view`.
+ *
+ * Keyset, not offset: `before` is the previous page's last `submitted_at`.
+ * Each cursor is its own cache entry (see `formsQueryKeys.submissions`), which
+ * is what makes paging back instant instead of a re-fetch.
+ */
+export function useSubmissions(params) {
+    const api = useFormsApi();
+    const sessionReady = useActiveSessionReady();
+    return useQuery({
+        queryKey: formsQueryKeys.submissions(params),
+        queryFn: () => api.listSubmissions(params),
+        enabled: sessionReady && params.workspaceId.length > 0 && params.formId.length > 0,
+    });
+}
+/** One response in full. `forms.responses.view`. */
+export function useSubmission(workspaceId, submissionId) {
+    const api = useFormsApi();
+    const sessionReady = useActiveSessionReady();
+    return useQuery({
+        queryKey: formsQueryKeys.submission(workspaceId, submissionId),
+        queryFn: () => api.getSubmission(workspaceId, submissionId),
+        enabled: sessionReady && workspaceId.length > 0 && submissionId.length > 0,
+    });
+}
+//# sourceMappingURL=queries.js.map

package/dist/model/queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.js","sourceRoot":"","sources":["../../src/model/queries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAWrD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB;IAEhB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC7C,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC5B,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,WAAmB;IAEnB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC;QAC9C,OAAO,EAAE,YAAY,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAC/C,SAAS,EAAE,MAAM,CAAC,iBAAiB;KACpC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CACtB,WAAmB,EACnB,KAAiB;IAEjB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC;QAChD,OAAO,EAAE,YAAY,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,OAAO,CACrB,WAAmB,EACnB,MAAc;IAEd,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;QAC/C,OAAO,EAAE,YAAY,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;KACrE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,MAAc;IAEd,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QACtD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC;QACpD,OAAO,EAAE,YAAY,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;KACrE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA4B;IAE5B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC;QAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC;QAC1C,OAAO,EACL,YAAY,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAC3B,WAAmB,EACnB,YAAoB;IAEpB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC;QAC9D,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC;QAC3D,OAAO,EAAE,YAAY,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC"}

package/dist/model/queryKeys.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Namespaced TanStack Query keys (frontend-standard §2 — namespaced keys).
+ * Everything under the `"forms"` root so a host can invalidate the whole
+ * module or match a single resource. Explicit tuple return types satisfy
+ * `--isolatedDeclarations`. One entry per read-operation.
+ *
+ * Invalidation shape: a schema-shifting mutation (draft, publish, rotate-link)
+ * invalidates the form AND its public read — the public key is keyed by
+ * `public_id`, which `rotateLink` changes, so the root is invalidated instead
+ * of a stale id. A response mutation (delete, resend) invalidates the
+ * submission list, and delete also the form (its `submission_count` moved).
+ */
+import type { SubmissionListParams } from "../api/types.js";
+export declare const formsQueryKeys: {
+    readonly all: readonly ["forms"];
+    /** The anonymous schema read, keyed by the public token — NOT by the row
+     * id, which an anonymous respondent never learns. */
+    publicForm(publicId: string): readonly ["forms", "public", string];
+    /** The builder's field-kind catalogue. Workspace-scoped because the
+     * endpoint is — a deployment's registered types are not global knowledge. */
+    fieldKinds(workspaceId: string): readonly ["forms", "field-kinds", string];
+    forms(workspaceId: string, state?: string): readonly ["forms", "list", string, string | null];
+    form(workspaceId: string, formId: string): readonly ["forms", "form", string, string];
+    versions(workspaceId: string, formId: string): readonly ["forms", "versions", string, string];
+    submissions(params: SubmissionListParams): readonly ["forms", "submissions", SubmissionListParams];
+    submission(workspaceId: string, submissionId: string): readonly ["forms", "submission", string, string];
+};
+//# sourceMappingURL=queryKeys.d.ts.map

package/dist/model/queryKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryKeys.d.ts","sourceRoot":"","sources":["../../src/model/queryKeys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAI5D,eAAO,MAAM,cAAc,EAAE;IAC3B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC;yDACqD;IACrD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnE;iFAC6E;IAC7E,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC3E,KAAK,CACH,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACtF,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,WAAW,CACT,MAAM,EAAE,oBAAoB,GAC3B,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC3D,UAAU,CACR,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;CAqBrD,CAAC"}

package/dist/model/queryKeys.js

@@ -0,0 +1,23 @@
+const ROOT = "forms";
+export const formsQueryKeys = {
+    all: [ROOT],
+    publicForm: (publicId) => [ROOT, "public", publicId],
+    fieldKinds: (workspaceId) => [ROOT, "field-kinds", workspaceId],
+    // `state` is part of the key (a filtered list is a different read surface,
+    // not the same list) and normalized to `null` so an absent filter and an
+    // explicit `undefined` cannot cache twice.
+    forms: (workspaceId, state) => [ROOT, "list", workspaceId, state ?? null],
+    form: (workspaceId, formId) => [ROOT, "form", workspaceId, formId],
+    versions: (workspaceId, formId) => [ROOT, "versions", workspaceId, formId],
+    // The params object rides the key: a version filter and a page size are
+    // distinct reads. `before` is deliberately included — keyset pages are
+    // cached per cursor, which is what makes "back" instant.
+    submissions: (params) => [ROOT, "submissions", params],
+    submission: (workspaceId, submissionId) => [
+        ROOT,
+        "submission",
+        workspaceId,
+        submissionId,
+    ],
+};
+//# sourceMappingURL=queryKeys.js.map

package/dist/model/queryKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryKeys.js","sourceRoot":"","sources":["../../src/model/queryKeys.ts"],"names":[],"mappings":"AAcA,MAAM,IAAI,GAAG,OAAgB,CAAC;AAE9B,MAAM,CAAC,MAAM,cAAc,GAwBvB;IACF,GAAG,EAAE,CAAC,IAAI,CAAC;IACX,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACpD,UAAU,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC;IAC/D,2EAA2E;IAC3E,yEAAyE;IACzE,2CAA2C;IAC3C,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,IAAI,IAAI,CAAC;IACzE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;IAClE,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,yDAAyD;IACzD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC;IACtD,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC;QACzC,IAAI;QACJ,YAAY;QACZ,WAAW;QACX,YAAY;KACb;CACF,CAAC"}

package/dist/model/runtime.d.ts

@@ -0,0 +1,28 @@
+import type { CreateModuleRuntimeOptions, ModuleRuntime } from "@stapel/core";
+import type { FormsApi } from "../api/formsApi.js";
+/**
+ * The wired forms runtime — core's `ModuleRuntime` bound to this pair's API
+ * (slim wave §21/S2: the plumbing lives once in `@stapel/core`'s
+ * `createModuleRuntime`/`createModuleContext`; this module only binds the
+ * module-prefixed names). The returned `client` is what the host injects into
+ * core's `StapelConfigProvider` (as the default or the `"forms"` module
+ * client), preserving the client-injection fork seam (frontend-standard §7.2).
+ *
+ * ANONYMOUS EMBED. The two public routes need no session, so a render-only
+ * host page can build this runtime and nothing else:
+ *
+ * ```tsx
+ * const runtime = createFormsRuntime({ baseUrl: "/forms/api/v1/" });
+ * <FormsProvider runtime={runtime}><StapelForm publicId="k3J…x9" /></FormsProvider>
+ * ```
+ *
+ * Auth token/refresh and the verification-403 seam are supplied by the host's
+ * auth runtime on the shared client when the ADMIN surface is in use — this
+ * pair does not re-implement them. The runtime's fetch/credentials/
+ * defaultHeaders are ALSO forwarded to the pair's raw CSV surface
+ * (`api/export.ts`), which cannot ride the JSON client.
+ */
+export type FormsRuntime = ModuleRuntime<FormsApi>;
+export type CreateFormsRuntimeOptions = CreateModuleRuntimeOptions;
+export declare function createFormsRuntime(options: CreateFormsRuntimeOptions): FormsRuntime;
+//# sourceMappingURL=runtime.d.ts.map