@wral/report-it 0.1.4 → 0.2.0

package/README.md

@@ -36,6 +36,7 @@ Keep this first in the host page's `<head>`:
 | --- | --- | --- | --- |
 | `api` | attribute | `https://api.wral.com/forms` | api-forms base URL (dev: `https://api.wral.com/dev/forms`) |
 | `client` | property | — | Full I/O surface override (API + auth); wins over `api`. See `src/demo/demo-client.mjs` for the shape |
+| `flow` | attribute | — | Open one form directly by its `formId` (e.g. `investigates`). The host page's `?flow=<formId>` does the same; the attribute wins |
 
 Styling hooks: design tokens are read as `var(--wral-…, fallback)` with
 prototype-accurate fallbacks, so the component renders correctly with no
@@ -44,7 +45,8 @@ column width (default 680px).
 
 ## How a submission flows
 
-1. `GET {api}/v1/forms` (public) — one button per published form.
+1. `GET {api}/v1/forms` (public) — one button per published form
+   (forms with `listed: false` are served but not shown; see below).
 2. The chosen form's tree walks client-side: `choice` chips, `collect`
    cards (text/textarea/url/datetime/location/media/consent/select),
    the `gate` (My WRAL email + one-time code — skipped with a
@@ -56,6 +58,44 @@ column width (default 680px).
    `PUT /v1/requests/{requestId}` (idempotent — retries return the same
    reference) → confirmation + behind-the-scenes journey.
 
+### Hand-offs, unlisted forms and deep links (DEV-1305)
+
+A choice option may carry `form` (and optionally `path`) instead of
+`next`: choosing it switches to that form document and replays the
+`path` choice steps there first. News → "5 On Your Side" lands on the
+consumer form's complaint card, past its own "5 On Your Side or
+Investigates?" question. The submission is made against the target
+form, with the preset steps at the head of its `path`; a path through
+a hand-off option itself is never sent (the API rejects one).
+
+The form the viewer came from is kept as an origin (`src/lib/handoff.mjs`),
+persisted with the draft: the transcript reads as one conversation, a
+reload rebuilds it, and **Back** from the first card after a hand-off
+returns to the choice that made it, skipping the preset steps. A
+hand-off to a form that is not loaded shows the load-error notice and
+stays put.
+
+An unlisted form (`listed: false`, e.g. `investigates`) is fetched with
+the rest and reachable by hand-off or deep link, just not offered on the
+entry screen. `?flow=<formId>` on the host page (or the `flow`
+attribute) opens a form directly; a draft for that form (or one handed
+off to or from it) resumes instead, and a draft for any other form
+yields to the link.
+
+### Fields
+
+- `text` fields pass `inputMode` and `autocomplete` from the form
+  document through to the input, and each collect card is a real
+  `<form autocomplete="on">`, so the browser can fill name, phone,
+  address and zip from the viewer's saved details. Nothing is prefilled
+  from My WRAL or stored anywhere else. (Autofill inside shadow DOM
+  varies by browser — verify on iOS Safari and Android Chrome.)
+- A `text` field's `pattern` is checked before submit the way the
+  server checks it (a zip gets its own message).
+- `consent` copy comes from the field's `text`. With
+  `requiredIf: "media"` the checkbox appears only once a file is
+  attached, is required only then, and is not sent without files.
+
 ### Skipping the account (DEV-1270)
 
 The sign-in card files its alternatives under a collapsed **"Other ways
@@ -92,7 +132,11 @@ in place instead of opening the sign-in card.
 
 Auth uses `@wral/sdk-auth-audience` directly (`sendCode`/`verifyCode`);
 `requireAuth`/`authFetch` are deliberately avoided — their 401 paths
-redirect to `/login/`, which would destroy an unsubmitted form. A 401
+redirect to `/login/`, which would destroy an unsubmitted form. The
+bearer on uploads and submit is the viewer's Cognito **ID token** (not
+the access token the SDK's `getAuthHeaders` sends): same `sub`, but it
+also carries the verified `email`, which api-forms writes onto the
+record beside the account id (`src/lib/id-token.mjs`). A 401
 mid-submit re-opens the gate in place and resumes where it parked.
 
 ## Drafts
@@ -115,7 +159,10 @@ npm run dev       # vite harness at http://localhost:5173
 
 The harness runs against the live dev API by default (real My WRAL
 login — your email receives a real code) or fully offline with the
-in-memory demo client (any email, any six digits). Append
+in-memory demo client (any email, any six digits). The demo client
+serves the form documents in `src/demo/fixtures/` (copies of api-forms'
+seeds), so hand-offs, `?flow=investigates` and the files-only consent
+all work offline. Append
 `?demofail=1` to make the second upload fail once and exercise the
 retry UX. The **Anonymous route** checkbox (demo mode only, also
 settable with `?anon=1`) makes the demo client advertise anonymous

package/dist/define.mjs

@@ -1,5 +1,5 @@
 import * as n from "amazon-cognito-identity-js";
-import { W as i, a as r, b as a } from "./wral-code-input-DCemMj53.js";
+import { W as i, a as r, b as a } from "./wral-code-input-BZTBgLk3.js";
 typeof window < "u" && !window.AmazonCognitoIdentity && (window.AmazonCognitoIdentity = n);
 const d = {
   "wral-report-it": a,