@wral/report-it 0.1.0

package/README.md

@@ -0,0 +1,110 @@
+# `<wral-report-it>`
+
+Lit web component for the **Report It** guided viewer-submission flow
+on WRAL.com (DEV-1099): a chat-style walk through a form's flow tree,
+an embedded My WRAL sign-in gate, and submit-time media uploads,
+rendered against [api-forms](https://api.wral.com/forms/v1/openapi.json).
+
+## Usage
+
+From the CDN (self-contained, registers the elements):
+
+```html
+<script type="module"
+	src="https://cdn.wral.com/@wral/report-it/v0/define.standalone.js"></script>
+<wral-report-it api="https://api.wral.com/forms"></wral-report-it>
+```
+
+From npm:
+
+```js
+import '@wral/report-it/define';        // registers wral-report-it,
+                                        // wral-report-media, wral-code-input
+```
+
+### Pre-sizing (avoid layout shift)
+
+Keep this first in the host page's `<head>`:
+
+```html
+<style>wral-report-it { display: block; min-height: 70vh; }</style>
+```
+
+## Attributes and properties
+
+| Name | Kind | Default | Purpose |
+| --- | --- | --- | --- |
+| `api` | attribute | `https://api.wral.com/forms` | api-forms base URL (dev: `https://api.wral.com/dev/forms`) |
+| `client` | property | — | Full I/O surface override (API + auth); wins over `api`. See `src/demo/demo-client.mjs` for the shape |
+
+Styling hooks: design tokens are read as `var(--wral-…, fallback)` with
+prototype-accurate fallbacks, so the component renders correctly with no
+token stylesheet on the page. `--report-it-max-width` overrides the
+column width (default 680px).
+
+## How a submission flows
+
+1. `GET {api}/v1/forms` (public) — one button per published form.
+2. The chosen form's tree walks client-side: `choice` chips, `collect`
+   cards (text/textarea/url/datetime/location/media/consent/select),
+   the `gate` (My WRAL email + one-time code — skipped with a
+   confirmation card when already signed in), `redirect` dead-ends,
+   and the `terminal` review screen.
+3. **Nothing uploads until the viewer confirms submit.** Then:
+   `POST /v1/uploads` (Bearer) → presigned S3 PUTs with per-file
+   progress and retry (expired presigns re-mint per file) →
+   `PUT /v1/requests/{requestId}` (idempotent — retries return the same
+   reference) → confirmation + behind-the-scenes journey.
+
+Auth uses `@wral/sdk-auth-audience` directly (`sendCode`/`verifyCode`);
+`requireAuth`/`authFetch` are deliberately avoided — their 401 paths
+redirect to `/login/`, which would destroy an unsubmitted form. A 401
+mid-submit re-opens the gate in place and resumes where it parked.
+
+## Drafts
+
+The answer stack persists to `sessionStorage`
+(`wral-report-it:draft:v1`) so a reload or app switch loses nothing.
+**Attached files cannot persist** — restored drafts show a re-attach
+notice for any files that were selected. Drafts are discarded when the
+form changed incompatibly, and flagged for review when the flowVersion
+moved but the answers still fit.
+
+## Development
+
+```
+npm install
+npm test          # node --test over src/lib (all logic lives there)
+npm run lint
+npm run dev       # vite harness at http://localhost:5173
+```
+
+The harness runs against the live dev API by default (real My WRAL
+login — your email receives a real code) or fully offline with the
+in-memory demo client (any email, any six digits). Append
+`?demofail=1` to make the second upload fail once and exercise the
+retry UX.
+
+## Release
+
+`npm version patch && git push && git push --tags` — the `v*.*.*` tag
+pipeline publishes to npm and to
+`cdn.wral.com/@wral/report-it/{vX.Y.Z,vX.Y,vX,latest}/`.
+Repo variables: `NPM_TOKEN`, `AWS_ACCESS_KEY_ID`,
+`AWS_SECRET_ACCESS_KEY`, `AWS_DEFAULT_REGION`,
+`S3_BUCKET=cdn.wral.com`, `S3_PREFIX=@wral/report-it`,
+`AWS_DISTRIBUTION_ID`.
+
+## Notes
+
+- `wral-code-input` + helpers are copied from
+  `webapps.wral-web.audience-login` with one fix: the original's
+  `code-complete` guard could never fire when typing left-to-right
+  (only on paste). Worth upstreaming.
+- The county list for `location` fields is hardcoded
+  (`src/lib/counties.mjs`) — the form model carries none; the component
+  prefers `field.counties` if a form document ever ships it.
+- Required `location` fields need a county or a written place — one
+  notch stricter than the server schema, deliberately.
+- `routing.state: "failed"` on a successful submission renders honest
+  "delivery being retried" journey copy, never fake delivery.

package/dist/define.mjs

@@ -0,0 +1,18 @@
+import * as n from "amazon-cognito-identity-js";
+import { W as i, a as r, b as a } from "./wral-code-input-CS9ASu8g.js";
+typeof window < "u" && !window.AmazonCognitoIdentity && (window.AmazonCognitoIdentity = n);
+const d = {
+  "wral-report-it": a,
+  "wral-report-media": r,
+  "wral-code-input": i
+};
+function f() {
+  const o = globalThis?.customElements;
+  if (o)
+    for (const [t, e] of Object.entries(d))
+      o.get(t) || o.define(t, e);
+}
+typeof window < "u" && globalThis.customElements && f();
+export {
+  f as defineAll
+};