attaform 0.0.1 → 0.14.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Oswald Kay Chisala
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,143 @@
-# attaform
+# 🙌🏽 Attaform
 
-Name reserved. A Vue 3 forms library by [Oswald Chisala](mailto:oswald.kay.chisala@gmail.com) is in the works.
+[![npm version][npm-version-src]][npm-version-href]
+[![npm downloads][npm-downloads-src]][npm-downloads-href]
+[![License][license-src]][license-href]
+[![Node.js Test Suite](https://github.com/attaform/attaform/actions/workflows/matrix.yml/badge.svg)](https://github.com/attaform/attaform/actions/workflows/matrix.yml)
+[![Nuxt][nuxt-src]][nuxt-href]
+
+A type-safe, schema-driven form library for Vue 3 and Nuxt with first-class Zod support.
+
+## Installation
+
+```bash
+npm install attaform zod
+```
+
+**Nuxt 3 / 4** — install the module:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  modules: ['attaform/nuxt'],
+})
+```
+
+**Bare Vue 3** — install the plugin and the Vite plugin:
+
+```ts
+// main.ts
+import { createApp } from 'vue'
+import { createAttaform } from 'attaform'
+
+createApp(App).use(createAttaform()).mount('#app')
+```
+
+```ts
+// vite.config.ts
+import vue from '@vitejs/plugin-vue'
+import { attaform } from 'attaform/vite'
+
+export default defineConfig({
+  plugins: [vue(), attaform()],
+})
+```
+
+### Recommended tsconfig
+
+We pair well with `noUncheckedIndexedAccess: true`:
+
+```json
+{
+  "compilerOptions": {
+    "strict": true,
+    "noUncheckedIndexedAccess": true
+  }
+}
+```
+
+It catches stale `form.values.contacts[N]` reads at compile time. Nuxt 3 / 4 sets this for you.
+
+## Quick start
+
+```vue
+<script setup lang="ts">
+  import { z } from 'zod'
+  import { useForm } from 'attaform/zod' // zod v4; use /zod-v3 for v3
+
+  const schema = z.object({
+    email: z.email(),
+    password: z.string().min(8),
+  })
+
+  const form = useForm({ schema, key: 'signup' })
+
+  const onSubmit = form.handleSubmit(async (values) => {
+    await $fetch('/api/signup', { method: 'POST', body: JSON.stringify(values) })
+  })
+</script>
+
+<template>
+  <form @submit.prevent="onSubmit">
+    <input v-register="form.register('email')" placeholder="Email" />
+    <small v-if="form.errors.email?.[0]">{{ form.errors.email[0].message }}</small>
+
+    <input v-register="form.register('password')" type="password" placeholder="Password" />
+    <small v-if="form.errors.password?.[0]">{{ form.errors.password[0].message }}</small>
+
+    <button :disabled="form.meta.isSubmitting">Sign up</button>
+  </form>
+</template>
+```
+
+`useForm({ schema, key })` returns a Pinia-style reactive object — read leaves directly, no `.value`:
+
+- **`form.values`** — current values. `form.values.email`, `form.values.address.city`.
+- **`form.errors`** — per-field errors, keyed by dotted path. `form.errors.email?.[0]?.message`.
+- **`form.fields`** — per-field flags (`dirty`, `touched`, `errors`, `blank`, …). `form.fields.email.dirty`.
+- **`form.meta`** — form-level flags + counters (`isSubmitting`, `isValid`, `canUndo`, `submitCount`, the flat `meta.errors` aggregate, the per-mount `instanceId`, …).
+- **`form.register(path)`** — typed two-way binding; pair with `v-register` on `<input>` / `<textarea>` / `<select>`.
+- **`form.handleSubmit(onValid, onInvalid?)`** — runs validation, dispatches. The valid callback receives the strict zod-inferred type.
+- **`form.setValue(path, value)`**, **`form.reset()`**, field-array helpers, undo / redo, persistence — see the [API reference](./docs/api.md).
+
+## Features
+
+- **Schema-driven types** — every path, value, and error is inferred from the schema; no `any`.
+- **Live validation** — `validateOn: 'change'` by default with synchronous `debounceMs: 0`; `'blur'` and `'submit'` (opt-out) modes available; async refinements await before submit dispatches.
+- **Schema-driven coercion** — string DOM input → schema's typed slot (`string→number`, `string→boolean`) at the directive layer. Default-on; pass `useForm({ coerce: false })` to disable or a custom `CoercionRegistry` to extend.
+- **Register transforms** — `register('email', { transforms: [trim, lowercase] })` runs sync user-input normalization before storage commit. See [recipe](./docs/recipes/transforms.md).
+- **Discriminated-union variant memory** — switching a discriminator (`notify.channel: 'email' → 'sms' → 'email'`) restores the previous variant's typed subtree by default. Set `useForm({ rememberVariants: false })` to drop on switch.
+- **Field arrays** — `append` / `prepend` / `insert` / `remove` / `swap` / `move` / `replace`, fully typed at the call site.
+- **Drafts + undo / redo** — per-field opt-in persistence (`localStorage` / `sessionStorage` / IndexedDB / [custom backend](./docs/recipes/persistence.md#picking-a-backend)) and a bounded undo stack.
+- **Server errors** — `parseApiErrors(payload)` normalises a `{ message, code }[]` wire format; pair with `form.setFieldErrors(...)`. User errors survive schema revalidation.
+- **Stable error codes** — every `ValidationError` carries `code: string`. Library codes (`atta:`) live on the exported `AttaformErrorCode` enum; adapter codes use a `zod:` prefix; consumers pick their own (`api:`, `auth:`, …).
+- **Clearable required fields** — the `unset` sentinel marks a field displayed-empty while storage holds the schema's slim default. Submit fails with `'No value supplied'` for required schemas; `.optional()` / `.nullable()` / `.default(N)` opt out.
+- **SSR** — Nuxt handles the payload round-trip automatically; bare Vue uses `renderAttaformState` / `hydrateAttaformState` ([recipe](./docs/recipes/ssr-hydration.md)).
+
+## Documentation
+
+- [**API reference**](./docs/api.md) — every public export with signatures and return shapes
+- [**Recipes**](./docs/recipes) — task-oriented walkthroughs for every feature above
+- [**Troubleshooting**](./docs/troubleshooting.md) — common gotchas and fixes
+- [**Migration guides**](./docs/migration) — per-release upgrade notes
+- [**Performance**](./docs/perf.md) — how it scales; when to worry
+- [**Changelog**](./CHANGELOG.md) — full release history
+
+## Status
+
+Pre-1.0. SemVer applies from `v1.0` onward; 0.x minor bumps may still include breaking changes, each documented under [`docs/migration/`](./docs/migration).
+
+## License
+
+MIT — see [LICENSE](./LICENSE).
+
+<!-- Badges -->
+
+[npm-version-src]: https://img.shields.io/npm/v/attaform/latest.svg?style=flat&colorA=020420&colorB=00DC82
+[npm-version-href]: https://npmjs.com/package/attaform
+[npm-downloads-src]: https://img.shields.io/npm/dm/attaform.svg?style=flat&colorA=020420&colorB=00DC82
+[npm-downloads-href]: https://npm.chart.dev/attaform
+[license-src]: https://img.shields.io/npm/l/attaform.svg?style=flat&colorA=020420&colorB=00DC82
+[license-href]: https://npmjs.com/package/attaform
+[nuxt-src]: https://img.shields.io/badge/Nuxt-020420?logo=nuxt.js
+[nuxt-href]: https://nuxt.com

package/dist/chunks/devtools.cjs

@@ -0,0 +1,179 @@
+'use strict';
+
+const paths = require('../shared/attaform.xKWYHMdq.cjs');
+const sensitiveNames = require('../shared/attaform.B5GWYl76.cjs');
+
+const INSPECTOR_ID = "attaform";
+const TIMELINE_LAYER_ID = "attaform:events";
+const REDACTED = "[redacted]";
+function redactSensitiveLeaves(value) {
+  return redactImpl(value, false);
+}
+function redactImpl(value, inSensitiveSubtree) {
+  if (value === null || value === void 0) return value;
+  if (typeof value !== "object") {
+    return inSensitiveSubtree ? REDACTED : value;
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => redactImpl(item, inSensitiveSubtree));
+  }
+  if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) {
+    return inSensitiveSubtree ? REDACTED : value;
+  }
+  const out = {};
+  for (const key of Object.keys(value)) {
+    const childSensitive = inSensitiveSubtree || sensitiveNames.segmentMatchesSensitive(key);
+    out[key] = redactImpl(value[key], childSensitive);
+  }
+  return out;
+}
+async function setupAttaformDevtools(app, registry) {
+  let mod;
+  try {
+    mod = await import('@vue/devtools-api');
+  } catch {
+    return false;
+  }
+  const setupDevtoolsPlugin = mod.setupDevtoolsPlugin;
+  if (typeof setupDevtoolsPlugin !== "function") return false;
+  setupDevtoolsPlugin(
+    {
+      id: INSPECTOR_ID,
+      label: "Attaform",
+      packageName: "attaform",
+      homepage: "https://github.com/attaform/attaform",
+      app,
+      componentStateTypes: ["Attaform form"]
+    },
+    (api) => wire(api, app, registry)
+  );
+  return true;
+}
+function wire(api, app, registry) {
+  const subscriberUnsubs = /* @__PURE__ */ new Map();
+  api.addInspector({ id: INSPECTOR_ID, label: "Attaform", app });
+  api.addTimelineLayer({ id: TIMELINE_LAYER_ID, label: "Attaform", color: 6000111 });
+  function refreshTree() {
+    api.sendInspectorTree(INSPECTOR_ID);
+  }
+  function refreshState() {
+    api.sendInspectorState(INSPECTOR_ID);
+  }
+  function subscribeForm(state) {
+    if (subscriberUnsubs.has(state.formKey)) return;
+    const unsubChange = state.onFormChange(() => {
+      refreshState();
+      api.addTimelineEvent({
+        layerId: TIMELINE_LAYER_ID,
+        event: {
+          time: Date.now(),
+          title: "form.change",
+          subtitle: state.formKey,
+          // Redact sensitive-named leaves before they land in the
+          // timeline event log — events accumulate for the whole
+          // session and a screen-share / paired-debugging session
+          // would otherwise expose any password / token / etc. the
+          // user typed since DevTools was opened.
+          data: { form: redactSensitiveLeaves(state.form.value) }
+        }
+      });
+    });
+    const unsubSubmit = state.onSubmitSuccess(() => {
+      api.addTimelineEvent({
+        layerId: TIMELINE_LAYER_ID,
+        event: {
+          time: Date.now(),
+          title: "submit.success",
+          subtitle: state.formKey,
+          data: { form: redactSensitiveLeaves(state.form.value) }
+        }
+      });
+    });
+    const unsubReset = state.onReset(() => {
+      refreshState();
+      api.addTimelineEvent({
+        layerId: TIMELINE_LAYER_ID,
+        event: {
+          time: Date.now(),
+          title: "reset",
+          subtitle: state.formKey
+        }
+      });
+    });
+    subscriberUnsubs.set(state.formKey, () => {
+      unsubChange();
+      unsubSubmit();
+      unsubReset();
+    });
+  }
+  function syncForms() {
+    for (const [, state] of registry.forms) {
+      subscribeForm(state);
+    }
+    for (const [formKey, unsub] of subscriberUnsubs) {
+      if (!registry.forms.has(formKey)) {
+        unsub();
+        subscriberUnsubs.delete(formKey);
+      }
+    }
+  }
+  api.on.getInspectorTree((payload) => {
+    if (payload.inspectorId !== INSPECTOR_ID) return;
+    syncForms();
+    payload.rootNodes = [...registry.forms.keys()].map((key) => ({
+      id: `form:${key}`,
+      label: key,
+      tags: []
+    }));
+  });
+  api.on.getInspectorState((payload) => {
+    if (payload.inspectorId !== INSPECTOR_ID) return;
+    if (!payload.nodeId.startsWith("form:")) return;
+    const formKey = payload.nodeId.slice("form:".length);
+    const state = registry.forms.get(formKey);
+    if (state === void 0) return;
+    payload.state["Form value"] = [
+      { key: "form", value: redactSensitiveLeaves(state.form.value), editable: true }
+    ];
+    payload.state["Schema Errors"] = [
+      ...[...state.schemaErrors.entries()].map(([k, v]) => ({
+        key: String(k),
+        value: v
+      }))
+    ];
+    payload.state["User Errors"] = [
+      ...[...state.userErrors.entries()].map(([k, v]) => ({
+        key: String(k),
+        value: v
+      }))
+    ];
+    payload.state["Aggregates"] = [
+      { key: "isSubmitting", value: state.isSubmitting.value },
+      { key: "submitCount", value: state.submitCount.value },
+      { key: "submitError", value: state.submitError.value },
+      { key: "activeValidations", value: state.activeValidations.value }
+    ];
+  });
+  api.on.editInspectorState((payload) => {
+    if (payload.inspectorId !== INSPECTOR_ID) return;
+    if (!payload.nodeId.startsWith("form:")) return;
+    const formKey = payload.nodeId.slice("form:".length);
+    const state = registry.forms.get(formKey);
+    if (state === void 0) return;
+    if (payload.path.length < 3) return;
+    const section = payload.path[0];
+    if (section !== "Form value") return;
+    const segments = payload.path.slice(2);
+    const { segments: canonicalPath, key: canonicalKey } = paths.canonicalizePath(segments);
+    if (sensitiveNames.isSensitivePath([...canonicalPath])) return;
+    state.setValueAtPath(canonicalPath, payload.state.value, {
+      persist: state.persistOptIns.hasAnyOptInForPath(canonicalKey)
+    });
+    refreshState();
+  });
+  syncForms();
+  refreshTree();
+}
+
+exports.setupAttaformDevtools = setupAttaformDevtools;
+//# sourceMappingURL=devtools.cjs.map

package/dist/chunks/devtools.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools.cjs","sources":["../../src/runtime/core/devtools.ts"],"sourcesContent":["import type { App } from 'vue'\nimport type { FormStore } from './create-form-store'\nimport type { AttaformRegistry } from './registry'\nimport type { GenericForm } from '../types/types-core'\nimport type { FormKey } from '../types/types-api'\nimport { canonicalizePath } from './paths'\nimport { isSensitivePath, segmentMatchesSensitive } from './persistence/sensitive-names'\n\n/**\n * Vue DevTools plugin wiring for attaform. Lazy-imported by\n * `createAttaform` under dev-mode guards so the production\n * bundle tree-shakes it out entirely.\n *\n * Registers:\n *  - An inspector (per-app) that lists every registered form, with\n *    nodes for form value / errors / aggregates / history.\n *  - A timeline layer that emits events on submit start/success/\n *    failure, reset, undo, redo, and form mutations.\n *  - State editing — modifying a leaf inside the inspector tree\n *    pushes through `state.setValueAtPath`, mutating the form.\n *\n * Tolerant of missing `@vue/devtools-api` — the peer dep is marked\n * optional. If the import fails, `setupAttaformDevtools` silently\n * no-ops so production builds / users without DevTools installed\n * don't see errors.\n */\n\nconst INSPECTOR_ID = 'attaform'\nconst TIMELINE_LAYER_ID = 'attaform:events'\n\nconst REDACTED = '[redacted]'\n\n/**\n * Walk `value` and replace any leaf whose enclosing path matches the\n * sensitive-name heuristic with the string `'[redacted]'`. Returns a\n * new tree (no mutation of the input). Object keys + array indices\n * are preserved; only the leaf payloads change.\n *\n * Applied to BOTH the DevTools timeline events and the inspector\n * `Form value` panel — leaks via either surface are treatable as\n * \"any developer with the panel open during user testing can read\n * a customer's password,\" which is exactly the failure mode the\n * sensitive-name guard exists to prevent on the storage side.\n *\n * Leaves whose path doesn't match a pattern pass through untouched.\n * `acknowledgeSensitive: true` on persistence does NOT bypass this —\n * if the consumer opted into persisting the value, they still\n * shouldn't see it in DevTools timelines that grow unbounded.\n *\n * Implementation note: tracks an `inSensitiveSubtree` flag through\n * the recursion instead of allocating a fresh path array per node\n * + calling `isSensitivePath` per leaf. Once any ancestor segment\n * matches the heuristic, the flag stays set for every descendant —\n * the leaf simply returns `REDACTED` without re-scanning the path.\n * For a 100-leaf form: ~100 path allocations + ~100 full-path regex\n * sweeps → 0 path allocations + ~100 single-segment regex sweeps,\n * with whole-subtree short-circuit when sensitive ancestors are\n * found early.\n */\nfunction redactSensitiveLeaves(value: unknown): unknown {\n  return redactImpl(value, false)\n}\n\nfunction redactImpl(value: unknown, inSensitiveSubtree: boolean): unknown {\n  if (value === null || value === undefined) return value\n  if (typeof value !== 'object') {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  if (Array.isArray(value)) {\n    // Numeric segments never match the sensitive-name heuristic\n    // (segmentMatchesSensitive rejects non-string segments), so the\n    // flag passes through unchanged when descending into arrays.\n    return value.map((item) => redactImpl(item, inSensitiveSubtree))\n  }\n  // Non-plain object (Map / Set / Date / class instance) — redact\n  // wholesale if we're already in a sensitive subtree; otherwise pass\n  // through. DevTools rendering of these is already heuristic, so we\n  // don't try to descend into them.\n  if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  const out: Record<string, unknown> = {}\n  for (const key of Object.keys(value as Record<string, unknown>)) {\n    const childSensitive = inSensitiveSubtree || segmentMatchesSensitive(key)\n    out[key] = redactImpl((value as Record<string, unknown>)[key], childSensitive)\n  }\n  return out\n}\n\ntype UnsafeDevtoolsApi = {\n  addInspector(opts: { id: string; label: string; icon?: string; app: App }): void\n  addTimelineLayer(opts: { id: string; label: string; color: number }): void\n  sendInspectorTree(inspectorId: string): void\n  sendInspectorState(inspectorId: string): void\n  addTimelineEvent(payload: {\n    layerId: string\n    event: {\n      time: number\n      title: string\n      subtitle?: string\n      data?: Record<string, unknown>\n      groupId?: string | number\n    }\n  }): void\n  on: {\n    getInspectorTree(\n      handler: (payload: {\n        inspectorId: string\n        filter: string\n        rootNodes: Array<{ id: string; label: string; tags?: unknown[] }>\n      }) => void\n    ): void\n    getInspectorState(\n      handler: (payload: {\n        inspectorId: string\n        nodeId: string\n        state: Record<string, Array<{ key: string; value: unknown; editable?: boolean }>>\n      }) => void\n    ): void\n    editInspectorState(\n      handler: (payload: {\n        inspectorId: string\n        nodeId: string\n        path: string[]\n        state: { value: unknown; newKey?: string | null; remove?: boolean }\n      }) => void\n    ): void\n  }\n}\n\ntype SetupDevtoolsPluginFn = (\n  descriptor: {\n    id: string\n    label: string\n    packageName?: string\n    homepage?: string\n    componentStateTypes?: string[]\n    app: App\n  },\n  setup: (api: UnsafeDevtoolsApi) => void\n) => void\n\n/**\n * Install the DevTools plugin for the given Vue app + registry. Safe\n * to call in production — if `@vue/devtools-api` isn't installed, the\n * dynamic import fails and we log nothing. Returns `true` when\n * DevTools was wired successfully, `false` otherwise — useful for\n * tests.\n */\nexport async function setupAttaformDevtools(\n  app: App,\n  registry: AttaformRegistry\n): Promise<boolean> {\n  let mod: { setupDevtoolsPlugin?: SetupDevtoolsPluginFn }\n  try {\n    mod = (await import('@vue/devtools-api')) as {\n      setupDevtoolsPlugin?: SetupDevtoolsPluginFn\n    }\n  } catch {\n    // Peer dep not installed — silently skip. Production builds pass\n    // `{ devtools: false }` explicitly, but this catch covers the\n    // \"dev without the peer dep\" case without a noisy warning.\n    return false\n  }\n  const setupDevtoolsPlugin = mod.setupDevtoolsPlugin\n  if (typeof setupDevtoolsPlugin !== 'function') return false\n\n  setupDevtoolsPlugin(\n    {\n      id: INSPECTOR_ID,\n      label: 'Attaform',\n      packageName: 'attaform',\n      homepage: 'https://github.com/attaform/attaform',\n      app,\n      componentStateTypes: ['Attaform form'],\n    },\n    (api) => wire(api, app, registry)\n  )\n  return true\n}\n\nfunction wire(api: UnsafeDevtoolsApi, app: App, registry: AttaformRegistry): void {\n  // Per-form subscriber bookkeeping — we keep the unsubscribers so\n  // the registry's eviction path can detach them when a form is\n  // disposed. Using a Map keyed by FormKey mirrors the registry.\n  const subscriberUnsubs = new Map<FormKey, () => void>()\n\n  api.addInspector({ id: INSPECTOR_ID, label: 'Attaform', app })\n  api.addTimelineLayer({ id: TIMELINE_LAYER_ID, label: 'Attaform', color: 0x5b8def })\n\n  function refreshTree(): void {\n    api.sendInspectorTree(INSPECTOR_ID)\n  }\n\n  function refreshState(): void {\n    api.sendInspectorState(INSPECTOR_ID)\n  }\n\n  function subscribeForm(state: FormStore<GenericForm>): void {\n    if (subscriberUnsubs.has(state.formKey)) return\n    const unsubChange = state.onFormChange(() => {\n      refreshState()\n      api.addTimelineEvent({\n        layerId: TIMELINE_LAYER_ID,\n        event: {\n          time: Date.now(),\n          title: 'form.change',\n          subtitle: state.formKey,\n          // Redact sensitive-named leaves before they land in the\n          // timeline event log — events accumulate for the whole\n          // session and a screen-share / paired-debugging session\n          // would otherwise expose any password / token / etc. the\n          // user typed since DevTools was opened.\n          data: { form: redactSensitiveLeaves(state.form.value) as Record<string, unknown> },\n        },\n      })\n    })\n    const unsubSubmit = state.onSubmitSuccess(() => {\n      api.addTimelineEvent({\n        layerId: TIMELINE_LAYER_ID,\n        event: {\n          time: Date.now(),\n          title: 'submit.success',\n          subtitle: state.formKey,\n          data: { form: redactSensitiveLeaves(state.form.value) as Record<string, unknown> },\n        },\n      })\n    })\n    const unsubReset = state.onReset(() => {\n      refreshState()\n      api.addTimelineEvent({\n        layerId: TIMELINE_LAYER_ID,\n        event: {\n          time: Date.now(),\n          title: 'reset',\n          subtitle: state.formKey,\n        },\n      })\n    })\n    subscriberUnsubs.set(state.formKey, () => {\n      unsubChange()\n      unsubSubmit()\n      unsubReset()\n    })\n  }\n\n  // Subscribe all currently-registered forms + register as they're\n  // added. The registry's `forms` Map is shallowReactive — we poll\n  // once per render on refresh; for live change detection, each\n  // useForm call that adds a new form triggers a tree/state refresh\n  // via the form's own onFormChange emission on the first\n  // applyFormReplacement.\n  function syncForms(): void {\n    for (const [, state] of registry.forms) {\n      subscribeForm(state)\n    }\n    // Drop subscribers for forms that were evicted.\n    for (const [formKey, unsub] of subscriberUnsubs) {\n      if (!registry.forms.has(formKey)) {\n        unsub()\n        subscriberUnsubs.delete(formKey)\n      }\n    }\n  }\n\n  api.on.getInspectorTree((payload) => {\n    if (payload.inspectorId !== INSPECTOR_ID) return\n    syncForms()\n    payload.rootNodes = [...registry.forms.keys()].map((key) => ({\n      id: `form:${key}`,\n      label: key,\n      tags: [],\n    }))\n  })\n\n  api.on.getInspectorState((payload) => {\n    if (payload.inspectorId !== INSPECTOR_ID) return\n    if (!payload.nodeId.startsWith('form:')) return\n    const formKey = payload.nodeId.slice('form:'.length)\n    const state = registry.forms.get(formKey)\n    if (state === undefined) return\n    // Redact sensitive-named leaves in the inspector panel for the\n    // same reason as the timeline events: a screen-share with an\n    // open DevTools panel shouldn't expose passwords / tokens.\n    // Editing stays enabled at the section level — the editInspector\n    // handler refuses sensitive-path edits at write time so a dev\n    // can't accidentally write the literal string `'[redacted]'` over\n    // a real value.\n    payload.state['Form value'] = [\n      { key: 'form', value: redactSensitiveLeaves(state.form.value), editable: true },\n    ]\n    // Schema-driven and user-injected errors land in separate inspector\n    // sections so devs can see the source distinction at a glance — a\n    // user-injected entry surviving a successful submit, or a schema\n    // entry that should have cleared after a value fix, are immediately\n    // visible without cross-referencing call sites.\n    payload.state['Schema Errors'] = [\n      ...[...state.schemaErrors.entries()].map(([k, v]) => ({\n        key: String(k),\n        value: v as unknown,\n      })),\n    ]\n    payload.state['User Errors'] = [\n      ...[...state.userErrors.entries()].map(([k, v]) => ({\n        key: String(k),\n        value: v as unknown,\n      })),\n    ]\n    payload.state['Aggregates'] = [\n      { key: 'isSubmitting', value: state.isSubmitting.value },\n      { key: 'submitCount', value: state.submitCount.value },\n      { key: 'submitError', value: state.submitError.value },\n      { key: 'activeValidations', value: state.activeValidations.value },\n    ]\n  })\n\n  api.on.editInspectorState((payload) => {\n    if (payload.inspectorId !== INSPECTOR_ID) return\n    if (!payload.nodeId.startsWith('form:')) return\n    const formKey = payload.nodeId.slice('form:'.length)\n    const state = registry.forms.get(formKey)\n    if (state === undefined) return\n    // payload.path is `['Form value', 'form', ...pathSegments]` — the\n    // first two segments are the inspector section + key, the rest is\n    // the target form path the user edited. Pass the segment array\n    // directly to `canonicalizePath`: join('.') would collapse a\n    // literal-dot field key (`{\"user.email\": ...}`) into two segments,\n    // writing to the wrong leaf.\n    if (payload.path.length < 3) return\n    const section = payload.path[0]\n    if (section !== 'Form value') return\n    const segments = payload.path.slice(2)\n    const { segments: canonicalPath, key: canonicalKey } = canonicalizePath(segments)\n    // Refuse edits on sensitive-named paths. The inspector renders\n    // them as `'[redacted]'`, so a dev who confirms the field would\n    // overwrite the real value with the literal masked string. Edits\n    // to sensitive paths must go through the bound input element.\n    if (isSensitivePath([...canonicalPath])) return\n    // A devtools edit on a path that any element has opted in to should\n    // persist (matches the user's expectation: editing via the inspector\n    // should be indistinguishable from typing into the bound input).\n    // No opt-in for this path → no write.\n    state.setValueAtPath(canonicalPath, payload.state.value, {\n      persist: state.persistOptIns.hasAnyOptInForPath(canonicalKey),\n    })\n    refreshState()\n  })\n\n  // Initial sync so existing forms show up.\n  syncForms()\n  refreshTree()\n}\n"],"names":["segmentMatchesSensitive","canonicalizePath","isSensitivePath"],"mappings":";;;;;AA2BA,MAAM,YAAA,GAAe,UAAA;AACrB,MAAM,iBAAA,GAAoB,iBAAA;AAE1B,MAAM,QAAA,GAAW,YAAA;AA6BjB,SAAS,sBAAsB,KAAA,EAAyB;AACtD,EAAA,OAAO,UAAA,CAAW,OAAO,KAAK,CAAA;AAChC;AAEA,SAAS,UAAA,CAAW,OAAgB,kBAAA,EAAsC;AACxE,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,EAAW,OAAO,KAAA;AAClD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AAIxB,IAAA,OAAO,MAAM,GAAA,CAAI,CAAC,SAAS,UAAA,CAAW,IAAA,EAAM,kBAAkB,CAAC,CAAA;AAAA,EACjE;AAKA,EAAA,IAAI,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA,KAAM,MAAA,CAAO,aAAa,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA,KAAM,IAAA,EAAM;AAC9F,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,EAAG;AAC/D,IAAA,MAAM,cAAA,GAAiB,kBAAA,IAAsBA,sCAAA,CAAwB,GAAG,CAAA;AACxE,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,UAAA,CAAY,KAAA,CAAkC,GAAG,GAAG,cAAc,CAAA;AAAA,EAC/E;AACA,EAAA,OAAO,GAAA;AACT;AA8DA,eAAsB,qBAAA,CACpB,KACA,QAAA,EACkB;AAClB,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAO,MAAM,OAAO,mBAAmB,CAAA;AAAA,EAGzC,CAAA,CAAA,MAAQ;AAIN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,sBAAsB,GAAA,CAAI,mBAAA;AAChC,EAAA,IAAI,OAAO,mBAAA,KAAwB,UAAA,EAAY,OAAO,KAAA;AAEtD,EAAA,mBAAA;AAAA,IACE;AAAA,MACE,EAAA,EAAI,YAAA;AAAA,MACJ,KAAA,EAAO,UAAA;AAAA,MACP,WAAA,EAAa,UAAA;AAAA,MACb,QAAA,EAAU,sCAAA;AAAA,MACV,GAAA;AAAA,MACA,mBAAA,EAAqB,CAAC,eAAe;AAAA,KACvC;AAAA,IACA,CAAC,GAAA,KAAQ,IAAA,CAAK,GAAA,EAAK,KAAK,QAAQ;AAAA,GAClC;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,IAAA,CAAK,GAAA,EAAwB,GAAA,EAAU,QAAA,EAAkC;AAIhF,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAyB;AAEtD,EAAA,GAAA,CAAI,aAAa,EAAE,EAAA,EAAI,cAAc,KAAA,EAAO,UAAA,EAAY,KAAK,CAAA;AAC7D,EAAA,GAAA,CAAI,gBAAA,CAAiB,EAAE,EAAA,EAAI,iBAAA,EAAmB,OAAO,UAAA,EAAY,KAAA,EAAO,SAAU,CAAA;AAElF,EAAA,SAAS,WAAA,GAAoB;AAC3B,IAAA,GAAA,CAAI,kBAAkB,YAAY,CAAA;AAAA,EACpC;AAEA,EAAA,SAAS,YAAA,GAAqB;AAC5B,IAAA,GAAA,CAAI,mBAAmB,YAAY,CAAA;AAAA,EACrC;AAEA,EAAA,SAAS,cAAc,KAAA,EAAqC;AAC1D,IAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,WAAA,GAAc,KAAA,CAAM,YAAA,CAAa,MAAM;AAC3C,MAAA,YAAA,EAAa;AACb,MAAA,GAAA,CAAI,gBAAA,CAAiB;AAAA,QACnB,OAAA,EAAS,iBAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,GAAA,EAAI;AAAA,UACf,KAAA,EAAO,aAAA;AAAA,UACP,UAAU,KAAA,CAAM,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAMhB,MAAM,EAAE,IAAA,EAAM,sBAAsB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAA6B;AACnF,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,MAAM,WAAA,GAAc,KAAA,CAAM,eAAA,CAAgB,MAAM;AAC9C,MAAA,GAAA,CAAI,gBAAA,CAAiB;AAAA,QACnB,OAAA,EAAS,iBAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,GAAA,EAAI;AAAA,UACf,KAAA,EAAO,gBAAA;AAAA,UACP,UAAU,KAAA,CAAM,OAAA;AAAA,UAChB,MAAM,EAAE,IAAA,EAAM,sBAAsB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAA6B;AACnF,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,MAAM,UAAA,GAAa,KAAA,CAAM,OAAA,CAAQ,MAAM;AACrC,MAAA,YAAA,EAAa;AACb,MAAA,GAAA,CAAI,gBAAA,CAAiB;AAAA,QACnB,OAAA,EAAS,iBAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,GAAA,EAAI;AAAA,UACf,KAAA,EAAO,OAAA;AAAA,UACP,UAAU,KAAA,CAAM;AAAA;AAClB,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,gBAAA,CAAiB,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,MAAM;AACxC,MAAA,WAAA,EAAY;AACZ,MAAA,WAAA,EAAY;AACZ,MAAA,UAAA,EAAW;AAAA,IACb,CAAC,CAAA;AAAA,EACH;AAQA,EAAA,SAAS,SAAA,GAAkB;AACzB,IAAA,KAAA,MAAW,GAAG,KAAK,CAAA,IAAK,SAAS,KAAA,EAAO;AACtC,MAAA,aAAA,CAAc,KAAK,CAAA;AAAA,IACrB;AAEA,IAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,CAAA,IAAK,gBAAA,EAAkB;AAC/C,MAAA,IAAI,CAAC,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA,EAAG;AAChC,QAAA,KAAA,EAAM;AACN,QAAA,gBAAA,CAAiB,OAAO,OAAO,CAAA;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,EAAA,GAAA,CAAI,EAAA,CAAG,gBAAA,CAAiB,CAAC,OAAA,KAAY;AACnC,IAAA,IAAI,OAAA,CAAQ,gBAAgB,YAAA,EAAc;AAC1C,IAAA,SAAA,EAAU;AACV,IAAA,OAAA,CAAQ,SAAA,GAAY,CAAC,GAAG,QAAA,CAAS,KAAA,CAAM,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,MAC3D,EAAA,EAAI,QAAQ,GAAG,CAAA,CAAA;AAAA,MACf,KAAA,EAAO,GAAA;AAAA,MACP,MAAM;AAAC,KACT,CAAE,CAAA;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,GAAA,CAAI,EAAA,CAAG,iBAAA,CAAkB,CAAC,OAAA,KAAY;AACpC,IAAA,IAAI,OAAA,CAAQ,gBAAgB,YAAA,EAAc;AAC1C,IAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,MAAM,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA;AACxC,IAAA,IAAI,UAAU,MAAA,EAAW;AAQzB,IAAA,OAAA,CAAQ,KAAA,CAAM,YAAY,CAAA,GAAI;AAAA,MAC5B,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,qBAAA,CAAsB,MAAM,IAAA,CAAK,KAAK,CAAA,EAAG,QAAA,EAAU,IAAA;AAAK,KAChF;AAMA,IAAA,OAAA,CAAQ,KAAA,CAAM,eAAe,CAAA,GAAI;AAAA,MAC/B,GAAG,CAAC,GAAG,KAAA,CAAM,YAAA,CAAa,OAAA,EAAS,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,MAAO;AAAA,QACpD,GAAA,EAAK,OAAO,CAAC,CAAA;AAAA,QACb,KAAA,EAAO;AAAA,OACT,CAAE;AAAA,KACJ;AACA,IAAA,OAAA,CAAQ,KAAA,CAAM,aAAa,CAAA,GAAI;AAAA,MAC7B,GAAG,CAAC,GAAG,KAAA,CAAM,UAAA,CAAW,OAAA,EAAS,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,MAAO;AAAA,QAClD,GAAA,EAAK,OAAO,CAAC,CAAA;AAAA,QACb,KAAA,EAAO;AAAA,OACT,CAAE;AAAA,KACJ;AACA,IAAA,OAAA,CAAQ,KAAA,CAAM,YAAY,CAAA,GAAI;AAAA,MAC5B,EAAE,GAAA,EAAK,cAAA,EAAgB,KAAA,EAAO,KAAA,CAAM,aAAa,KAAA,EAAM;AAAA,MACvD,EAAE,GAAA,EAAK,aAAA,EAAe,KAAA,EAAO,KAAA,CAAM,YAAY,KAAA,EAAM;AAAA,MACrD,EAAE,GAAA,EAAK,aAAA,EAAe,KAAA,EAAO,KAAA,CAAM,YAAY,KAAA,EAAM;AAAA,MACrD,EAAE,GAAA,EAAK,mBAAA,EAAqB,KAAA,EAAO,KAAA,CAAM,kBAAkB,KAAA;AAAM,KACnE;AAAA,EACF,CAAC,CAAA;AAED,EAAA,GAAA,CAAI,EAAA,CAAG,kBAAA,CAAmB,CAAC,OAAA,KAAY;AACrC,IAAA,IAAI,OAAA,CAAQ,gBAAgB,YAAA,EAAc;AAC1C,IAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,MAAM,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA;AACxC,IAAA,IAAI,UAAU,MAAA,EAAW;AAOzB,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG;AAC7B,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AAC9B,IAAA,IAAI,YAAY,YAAA,EAAc;AAC9B,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AACrC,IAAA,MAAM,EAAE,QAAA,EAAU,aAAA,EAAe,KAAK,YAAA,EAAa,GAAIC,uBAAiB,QAAQ,CAAA;AAKhF,IAAA,IAAIC,8BAAA,CAAgB,CAAC,GAAG,aAAa,CAAC,CAAA,EAAG;AAKzC,IAAA,KAAA,CAAM,cAAA,CAAe,aAAA,EAAe,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO;AAAA,MACvD,OAAA,EAAS,KAAA,CAAM,aAAA,CAAc,kBAAA,CAAmB,YAAY;AAAA,KAC7D,CAAA;AACD,IAAA,YAAA,EAAa;AAAA,EACf,CAAC,CAAA;AAGD,EAAA,SAAA,EAAU;AACV,EAAA,WAAA,EAAY;AACd;;;;"}

package/dist/chunks/devtools.mjs

@@ -0,0 +1,177 @@
+import { c as canonicalizePath } from '../shared/attaform.Cc93zNzD.mjs';
+import { i as isSensitivePath, s as segmentMatchesSensitive } from '../shared/attaform.al_rpt7_.mjs';
+
+const INSPECTOR_ID = "attaform";
+const TIMELINE_LAYER_ID = "attaform:events";
+const REDACTED = "[redacted]";
+function redactSensitiveLeaves(value) {
+  return redactImpl(value, false);
+}
+function redactImpl(value, inSensitiveSubtree) {
+  if (value === null || value === void 0) return value;
+  if (typeof value !== "object") {
+    return inSensitiveSubtree ? REDACTED : value;
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => redactImpl(item, inSensitiveSubtree));
+  }
+  if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) {
+    return inSensitiveSubtree ? REDACTED : value;
+  }
+  const out = {};
+  for (const key of Object.keys(value)) {
+    const childSensitive = inSensitiveSubtree || segmentMatchesSensitive(key);
+    out[key] = redactImpl(value[key], childSensitive);
+  }
+  return out;
+}
+async function setupAttaformDevtools(app, registry) {
+  let mod;
+  try {
+    mod = await import('@vue/devtools-api');
+  } catch {
+    return false;
+  }
+  const setupDevtoolsPlugin = mod.setupDevtoolsPlugin;
+  if (typeof setupDevtoolsPlugin !== "function") return false;
+  setupDevtoolsPlugin(
+    {
+      id: INSPECTOR_ID,
+      label: "Attaform",
+      packageName: "attaform",
+      homepage: "https://github.com/attaform/attaform",
+      app,
+      componentStateTypes: ["Attaform form"]
+    },
+    (api) => wire(api, app, registry)
+  );
+  return true;
+}
+function wire(api, app, registry) {
+  const subscriberUnsubs = /* @__PURE__ */ new Map();
+  api.addInspector({ id: INSPECTOR_ID, label: "Attaform", app });
+  api.addTimelineLayer({ id: TIMELINE_LAYER_ID, label: "Attaform", color: 6000111 });
+  function refreshTree() {
+    api.sendInspectorTree(INSPECTOR_ID);
+  }
+  function refreshState() {
+    api.sendInspectorState(INSPECTOR_ID);
+  }
+  function subscribeForm(state) {
+    if (subscriberUnsubs.has(state.formKey)) return;
+    const unsubChange = state.onFormChange(() => {
+      refreshState();
+      api.addTimelineEvent({
+        layerId: TIMELINE_LAYER_ID,
+        event: {
+          time: Date.now(),
+          title: "form.change",
+          subtitle: state.formKey,
+          // Redact sensitive-named leaves before they land in the
+          // timeline event log — events accumulate for the whole
+          // session and a screen-share / paired-debugging session
+          // would otherwise expose any password / token / etc. the
+          // user typed since DevTools was opened.
+          data: { form: redactSensitiveLeaves(state.form.value) }
+        }
+      });
+    });
+    const unsubSubmit = state.onSubmitSuccess(() => {
+      api.addTimelineEvent({
+        layerId: TIMELINE_LAYER_ID,
+        event: {
+          time: Date.now(),
+          title: "submit.success",
+          subtitle: state.formKey,
+          data: { form: redactSensitiveLeaves(state.form.value) }
+        }
+      });
+    });
+    const unsubReset = state.onReset(() => {
+      refreshState();
+      api.addTimelineEvent({
+        layerId: TIMELINE_LAYER_ID,
+        event: {
+          time: Date.now(),
+          title: "reset",
+          subtitle: state.formKey
+        }
+      });
+    });
+    subscriberUnsubs.set(state.formKey, () => {
+      unsubChange();
+      unsubSubmit();
+      unsubReset();
+    });
+  }
+  function syncForms() {
+    for (const [, state] of registry.forms) {
+      subscribeForm(state);
+    }
+    for (const [formKey, unsub] of subscriberUnsubs) {
+      if (!registry.forms.has(formKey)) {
+        unsub();
+        subscriberUnsubs.delete(formKey);
+      }
+    }
+  }
+  api.on.getInspectorTree((payload) => {
+    if (payload.inspectorId !== INSPECTOR_ID) return;
+    syncForms();
+    payload.rootNodes = [...registry.forms.keys()].map((key) => ({
+      id: `form:${key}`,
+      label: key,
+      tags: []
+    }));
+  });
+  api.on.getInspectorState((payload) => {
+    if (payload.inspectorId !== INSPECTOR_ID) return;
+    if (!payload.nodeId.startsWith("form:")) return;
+    const formKey = payload.nodeId.slice("form:".length);
+    const state = registry.forms.get(formKey);
+    if (state === void 0) return;
+    payload.state["Form value"] = [
+      { key: "form", value: redactSensitiveLeaves(state.form.value), editable: true }
+    ];
+    payload.state["Schema Errors"] = [
+      ...[...state.schemaErrors.entries()].map(([k, v]) => ({
+        key: String(k),
+        value: v
+      }))
+    ];
+    payload.state["User Errors"] = [
+      ...[...state.userErrors.entries()].map(([k, v]) => ({
+        key: String(k),
+        value: v
+      }))
+    ];
+    payload.state["Aggregates"] = [
+      { key: "isSubmitting", value: state.isSubmitting.value },
+      { key: "submitCount", value: state.submitCount.value },
+      { key: "submitError", value: state.submitError.value },
+      { key: "activeValidations", value: state.activeValidations.value }
+    ];
+  });
+  api.on.editInspectorState((payload) => {
+    if (payload.inspectorId !== INSPECTOR_ID) return;
+    if (!payload.nodeId.startsWith("form:")) return;
+    const formKey = payload.nodeId.slice("form:".length);
+    const state = registry.forms.get(formKey);
+    if (state === void 0) return;
+    if (payload.path.length < 3) return;
+    const section = payload.path[0];
+    if (section !== "Form value") return;
+    const segments = payload.path.slice(2);
+    const { segments: canonicalPath, key: canonicalKey } = canonicalizePath(segments);
+    if (isSensitivePath([...canonicalPath])) return;
+    state.setValueAtPath(canonicalPath, payload.state.value, {
+      persist: state.persistOptIns.hasAnyOptInForPath(canonicalKey)
+    });
+    refreshState();
+  });
+  syncForms();
+  refreshTree();
+}
+
+export { setupAttaformDevtools };
+//# sourceMappingURL=devtools.mjs.map

package/dist/chunks/devtools.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools.mjs","sources":["../../src/runtime/core/devtools.ts"],"sourcesContent":["import type { App } from 'vue'\nimport type { FormStore } from './create-form-store'\nimport type { AttaformRegistry } from './registry'\nimport type { GenericForm } from '../types/types-core'\nimport type { FormKey } from '../types/types-api'\nimport { canonicalizePath } from './paths'\nimport { isSensitivePath, segmentMatchesSensitive } from './persistence/sensitive-names'\n\n/**\n * Vue DevTools plugin wiring for attaform. Lazy-imported by\n * `createAttaform` under dev-mode guards so the production\n * bundle tree-shakes it out entirely.\n *\n * Registers:\n *  - An inspector (per-app) that lists every registered form, with\n *    nodes for form value / errors / aggregates / history.\n *  - A timeline layer that emits events on submit start/success/\n *    failure, reset, undo, redo, and form mutations.\n *  - State editing — modifying a leaf inside the inspector tree\n *    pushes through `state.setValueAtPath`, mutating the form.\n *\n * Tolerant of missing `@vue/devtools-api` — the peer dep is marked\n * optional. If the import fails, `setupAttaformDevtools` silently\n * no-ops so production builds / users without DevTools installed\n * don't see errors.\n */\n\nconst INSPECTOR_ID = 'attaform'\nconst TIMELINE_LAYER_ID = 'attaform:events'\n\nconst REDACTED = '[redacted]'\n\n/**\n * Walk `value` and replace any leaf whose enclosing path matches the\n * sensitive-name heuristic with the string `'[redacted]'`. Returns a\n * new tree (no mutation of the input). Object keys + array indices\n * are preserved; only the leaf payloads change.\n *\n * Applied to BOTH the DevTools timeline events and the inspector\n * `Form value` panel — leaks via either surface are treatable as\n * \"any developer with the panel open during user testing can read\n * a customer's password,\" which is exactly the failure mode the\n * sensitive-name guard exists to prevent on the storage side.\n *\n * Leaves whose path doesn't match a pattern pass through untouched.\n * `acknowledgeSensitive: true` on persistence does NOT bypass this —\n * if the consumer opted into persisting the value, they still\n * shouldn't see it in DevTools timelines that grow unbounded.\n *\n * Implementation note: tracks an `inSensitiveSubtree` flag through\n * the recursion instead of allocating a fresh path array per node\n * + calling `isSensitivePath` per leaf. Once any ancestor segment\n * matches the heuristic, the flag stays set for every descendant —\n * the leaf simply returns `REDACTED` without re-scanning the path.\n * For a 100-leaf form: ~100 path allocations + ~100 full-path regex\n * sweeps → 0 path allocations + ~100 single-segment regex sweeps,\n * with whole-subtree short-circuit when sensitive ancestors are\n * found early.\n */\nfunction redactSensitiveLeaves(value: unknown): unknown {\n  return redactImpl(value, false)\n}\n\nfunction redactImpl(value: unknown, inSensitiveSubtree: boolean): unknown {\n  if (value === null || value === undefined) return value\n  if (typeof value !== 'object') {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  if (Array.isArray(value)) {\n    // Numeric segments never match the sensitive-name heuristic\n    // (segmentMatchesSensitive rejects non-string segments), so the\n    // flag passes through unchanged when descending into arrays.\n    return value.map((item) => redactImpl(item, inSensitiveSubtree))\n  }\n  // Non-plain object (Map / Set / Date / class instance) — redact\n  // wholesale if we're already in a sensitive subtree; otherwise pass\n  // through. DevTools rendering of these is already heuristic, so we\n  // don't try to descend into them.\n  if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  const out: Record<string, unknown> = {}\n  for (const key of Object.keys(value as Record<string, unknown>)) {\n    const childSensitive = inSensitiveSubtree || segmentMatchesSensitive(key)\n    out[key] = redactImpl((value as Record<string, unknown>)[key], childSensitive)\n  }\n  return out\n}\n\ntype UnsafeDevtoolsApi = {\n  addInspector(opts: { id: string; label: string; icon?: string; app: App }): void\n  addTimelineLayer(opts: { id: string; label: string; color: number }): void\n  sendInspectorTree(inspectorId: string): void\n  sendInspectorState(inspectorId: string): void\n  addTimelineEvent(payload: {\n    layerId: string\n    event: {\n      time: number\n      title: string\n      subtitle?: string\n      data?: Record<string, unknown>\n      groupId?: string | number\n    }\n  }): void\n  on: {\n    getInspectorTree(\n      handler: (payload: {\n        inspectorId: string\n        filter: string\n        rootNodes: Array<{ id: string; label: string; tags?: unknown[] }>\n      }) => void\n    ): void\n    getInspectorState(\n      handler: (payload: {\n        inspectorId: string\n        nodeId: string\n        state: Record<string, Array<{ key: string; value: unknown; editable?: boolean }>>\n      }) => void\n    ): void\n    editInspectorState(\n      handler: (payload: {\n        inspectorId: string\n        nodeId: string\n        path: string[]\n        state: { value: unknown; newKey?: string | null; remove?: boolean }\n      }) => void\n    ): void\n  }\n}\n\ntype SetupDevtoolsPluginFn = (\n  descriptor: {\n    id: string\n    label: string\n    packageName?: string\n    homepage?: string\n    componentStateTypes?: string[]\n    app: App\n  },\n  setup: (api: UnsafeDevtoolsApi) => void\n) => void\n\n/**\n * Install the DevTools plugin for the given Vue app + registry. Safe\n * to call in production — if `@vue/devtools-api` isn't installed, the\n * dynamic import fails and we log nothing. Returns `true` when\n * DevTools was wired successfully, `false` otherwise — useful for\n * tests.\n */\nexport async function setupAttaformDevtools(\n  app: App,\n  registry: AttaformRegistry\n): Promise<boolean> {\n  let mod: { setupDevtoolsPlugin?: SetupDevtoolsPluginFn }\n  try {\n    mod = (await import('@vue/devtools-api')) as {\n      setupDevtoolsPlugin?: SetupDevtoolsPluginFn\n    }\n  } catch {\n    // Peer dep not installed — silently skip. Production builds pass\n    // `{ devtools: false }` explicitly, but this catch covers the\n    // \"dev without the peer dep\" case without a noisy warning.\n    return false\n  }\n  const setupDevtoolsPlugin = mod.setupDevtoolsPlugin\n  if (typeof setupDevtoolsPlugin !== 'function') return false\n\n  setupDevtoolsPlugin(\n    {\n      id: INSPECTOR_ID,\n      label: 'Attaform',\n      packageName: 'attaform',\n      homepage: 'https://github.com/attaform/attaform',\n      app,\n      componentStateTypes: ['Attaform form'],\n    },\n    (api) => wire(api, app, registry)\n  )\n  return true\n}\n\nfunction wire(api: UnsafeDevtoolsApi, app: App, registry: AttaformRegistry): void {\n  // Per-form subscriber bookkeeping — we keep the unsubscribers so\n  // the registry's eviction path can detach them when a form is\n  // disposed. Using a Map keyed by FormKey mirrors the registry.\n  const subscriberUnsubs = new Map<FormKey, () => void>()\n\n  api.addInspector({ id: INSPECTOR_ID, label: 'Attaform', app })\n  api.addTimelineLayer({ id: TIMELINE_LAYER_ID, label: 'Attaform', color: 0x5b8def })\n\n  function refreshTree(): void {\n    api.sendInspectorTree(INSPECTOR_ID)\n  }\n\n  function refreshState(): void {\n    api.sendInspectorState(INSPECTOR_ID)\n  }\n\n  function subscribeForm(state: FormStore<GenericForm>): void {\n    if (subscriberUnsubs.has(state.formKey)) return\n    const unsubChange = state.onFormChange(() => {\n      refreshState()\n      api.addTimelineEvent({\n        layerId: TIMELINE_LAYER_ID,\n        event: {\n          time: Date.now(),\n          title: 'form.change',\n          subtitle: state.formKey,\n          // Redact sensitive-named leaves before they land in the\n          // timeline event log — events accumulate for the whole\n          // session and a screen-share / paired-debugging session\n          // would otherwise expose any password / token / etc. the\n          // user typed since DevTools was opened.\n          data: { form: redactSensitiveLeaves(state.form.value) as Record<string, unknown> },\n        },\n      })\n    })\n    const unsubSubmit = state.onSubmitSuccess(() => {\n      api.addTimelineEvent({\n        layerId: TIMELINE_LAYER_ID,\n        event: {\n          time: Date.now(),\n          title: 'submit.success',\n          subtitle: state.formKey,\n          data: { form: redactSensitiveLeaves(state.form.value) as Record<string, unknown> },\n        },\n      })\n    })\n    const unsubReset = state.onReset(() => {\n      refreshState()\n      api.addTimelineEvent({\n        layerId: TIMELINE_LAYER_ID,\n        event: {\n          time: Date.now(),\n          title: 'reset',\n          subtitle: state.formKey,\n        },\n      })\n    })\n    subscriberUnsubs.set(state.formKey, () => {\n      unsubChange()\n      unsubSubmit()\n      unsubReset()\n    })\n  }\n\n  // Subscribe all currently-registered forms + register as they're\n  // added. The registry's `forms` Map is shallowReactive — we poll\n  // once per render on refresh; for live change detection, each\n  // useForm call that adds a new form triggers a tree/state refresh\n  // via the form's own onFormChange emission on the first\n  // applyFormReplacement.\n  function syncForms(): void {\n    for (const [, state] of registry.forms) {\n      subscribeForm(state)\n    }\n    // Drop subscribers for forms that were evicted.\n    for (const [formKey, unsub] of subscriberUnsubs) {\n      if (!registry.forms.has(formKey)) {\n        unsub()\n        subscriberUnsubs.delete(formKey)\n      }\n    }\n  }\n\n  api.on.getInspectorTree((payload) => {\n    if (payload.inspectorId !== INSPECTOR_ID) return\n    syncForms()\n    payload.rootNodes = [...registry.forms.keys()].map((key) => ({\n      id: `form:${key}`,\n      label: key,\n      tags: [],\n    }))\n  })\n\n  api.on.getInspectorState((payload) => {\n    if (payload.inspectorId !== INSPECTOR_ID) return\n    if (!payload.nodeId.startsWith('form:')) return\n    const formKey = payload.nodeId.slice('form:'.length)\n    const state = registry.forms.get(formKey)\n    if (state === undefined) return\n    // Redact sensitive-named leaves in the inspector panel for the\n    // same reason as the timeline events: a screen-share with an\n    // open DevTools panel shouldn't expose passwords / tokens.\n    // Editing stays enabled at the section level — the editInspector\n    // handler refuses sensitive-path edits at write time so a dev\n    // can't accidentally write the literal string `'[redacted]'` over\n    // a real value.\n    payload.state['Form value'] = [\n      { key: 'form', value: redactSensitiveLeaves(state.form.value), editable: true },\n    ]\n    // Schema-driven and user-injected errors land in separate inspector\n    // sections so devs can see the source distinction at a glance — a\n    // user-injected entry surviving a successful submit, or a schema\n    // entry that should have cleared after a value fix, are immediately\n    // visible without cross-referencing call sites.\n    payload.state['Schema Errors'] = [\n      ...[...state.schemaErrors.entries()].map(([k, v]) => ({\n        key: String(k),\n        value: v as unknown,\n      })),\n    ]\n    payload.state['User Errors'] = [\n      ...[...state.userErrors.entries()].map(([k, v]) => ({\n        key: String(k),\n        value: v as unknown,\n      })),\n    ]\n    payload.state['Aggregates'] = [\n      { key: 'isSubmitting', value: state.isSubmitting.value },\n      { key: 'submitCount', value: state.submitCount.value },\n      { key: 'submitError', value: state.submitError.value },\n      { key: 'activeValidations', value: state.activeValidations.value },\n    ]\n  })\n\n  api.on.editInspectorState((payload) => {\n    if (payload.inspectorId !== INSPECTOR_ID) return\n    if (!payload.nodeId.startsWith('form:')) return\n    const formKey = payload.nodeId.slice('form:'.length)\n    const state = registry.forms.get(formKey)\n    if (state === undefined) return\n    // payload.path is `['Form value', 'form', ...pathSegments]` — the\n    // first two segments are the inspector section + key, the rest is\n    // the target form path the user edited. Pass the segment array\n    // directly to `canonicalizePath`: join('.') would collapse a\n    // literal-dot field key (`{\"user.email\": ...}`) into two segments,\n    // writing to the wrong leaf.\n    if (payload.path.length < 3) return\n    const section = payload.path[0]\n    if (section !== 'Form value') return\n    const segments = payload.path.slice(2)\n    const { segments: canonicalPath, key: canonicalKey } = canonicalizePath(segments)\n    // Refuse edits on sensitive-named paths. The inspector renders\n    // them as `'[redacted]'`, so a dev who confirms the field would\n    // overwrite the real value with the literal masked string. Edits\n    // to sensitive paths must go through the bound input element.\n    if (isSensitivePath([...canonicalPath])) return\n    // A devtools edit on a path that any element has opted in to should\n    // persist (matches the user's expectation: editing via the inspector\n    // should be indistinguishable from typing into the bound input).\n    // No opt-in for this path → no write.\n    state.setValueAtPath(canonicalPath, payload.state.value, {\n      persist: state.persistOptIns.hasAnyOptInForPath(canonicalKey),\n    })\n    refreshState()\n  })\n\n  // Initial sync so existing forms show up.\n  syncForms()\n  refreshTree()\n}\n"],"names":[],"mappings":";;;AA2BA,MAAM,YAAA,GAAe,UAAA;AACrB,MAAM,iBAAA,GAAoB,iBAAA;AAE1B,MAAM,QAAA,GAAW,YAAA;AA6BjB,SAAS,sBAAsB,KAAA,EAAyB;AACtD,EAAA,OAAO,UAAA,CAAW,OAAO,KAAK,CAAA;AAChC;AAEA,SAAS,UAAA,CAAW,OAAgB,kBAAA,EAAsC;AACxE,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,EAAW,OAAO,KAAA;AAClD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AAIxB,IAAA,OAAO,MAAM,GAAA,CAAI,CAAC,SAAS,UAAA,CAAW,IAAA,EAAM,kBAAkB,CAAC,CAAA;AAAA,EACjE;AAKA,EAAA,IAAI,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA,KAAM,MAAA,CAAO,aAAa,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA,KAAM,IAAA,EAAM;AAC9F,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,EAAG;AAC/D,IAAA,MAAM,cAAA,GAAiB,kBAAA,IAAsB,uBAAA,CAAwB,GAAG,CAAA;AACxE,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,UAAA,CAAY,KAAA,CAAkC,GAAG,GAAG,cAAc,CAAA;AAAA,EAC/E;AACA,EAAA,OAAO,GAAA;AACT;AA8DA,eAAsB,qBAAA,CACpB,KACA,QAAA,EACkB;AAClB,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAO,MAAM,OAAO,mBAAmB,CAAA;AAAA,EAGzC,CAAA,CAAA,MAAQ;AAIN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,sBAAsB,GAAA,CAAI,mBAAA;AAChC,EAAA,IAAI,OAAO,mBAAA,KAAwB,UAAA,EAAY,OAAO,KAAA;AAEtD,EAAA,mBAAA;AAAA,IACE;AAAA,MACE,EAAA,EAAI,YAAA;AAAA,MACJ,KAAA,EAAO,UAAA;AAAA,MACP,WAAA,EAAa,UAAA;AAAA,MACb,QAAA,EAAU,sCAAA;AAAA,MACV,GAAA;AAAA,MACA,mBAAA,EAAqB,CAAC,eAAe;AAAA,KACvC;AAAA,IACA,CAAC,GAAA,KAAQ,IAAA,CAAK,GAAA,EAAK,KAAK,QAAQ;AAAA,GAClC;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,IAAA,CAAK,GAAA,EAAwB,GAAA,EAAU,QAAA,EAAkC;AAIhF,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAyB;AAEtD,EAAA,GAAA,CAAI,aAAa,EAAE,EAAA,EAAI,cAAc,KAAA,EAAO,UAAA,EAAY,KAAK,CAAA;AAC7D,EAAA,GAAA,CAAI,gBAAA,CAAiB,EAAE,EAAA,EAAI,iBAAA,EAAmB,OAAO,UAAA,EAAY,KAAA,EAAO,SAAU,CAAA;AAElF,EAAA,SAAS,WAAA,GAAoB;AAC3B,IAAA,GAAA,CAAI,kBAAkB,YAAY,CAAA;AAAA,EACpC;AAEA,EAAA,SAAS,YAAA,GAAqB;AAC5B,IAAA,GAAA,CAAI,mBAAmB,YAAY,CAAA;AAAA,EACrC;AAEA,EAAA,SAAS,cAAc,KAAA,EAAqC;AAC1D,IAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,WAAA,GAAc,KAAA,CAAM,YAAA,CAAa,MAAM;AAC3C,MAAA,YAAA,EAAa;AACb,MAAA,GAAA,CAAI,gBAAA,CAAiB;AAAA,QACnB,OAAA,EAAS,iBAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,GAAA,EAAI;AAAA,UACf,KAAA,EAAO,aAAA;AAAA,UACP,UAAU,KAAA,CAAM,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAMhB,MAAM,EAAE,IAAA,EAAM,sBAAsB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAA6B;AACnF,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,MAAM,WAAA,GAAc,KAAA,CAAM,eAAA,CAAgB,MAAM;AAC9C,MAAA,GAAA,CAAI,gBAAA,CAAiB;AAAA,QACnB,OAAA,EAAS,iBAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,GAAA,EAAI;AAAA,UACf,KAAA,EAAO,gBAAA;AAAA,UACP,UAAU,KAAA,CAAM,OAAA;AAAA,UAChB,MAAM,EAAE,IAAA,EAAM,sBAAsB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAA6B;AACnF,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,MAAM,UAAA,GAAa,KAAA,CAAM,OAAA,CAAQ,MAAM;AACrC,MAAA,YAAA,EAAa;AACb,MAAA,GAAA,CAAI,gBAAA,CAAiB;AAAA,QACnB,OAAA,EAAS,iBAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,GAAA,EAAI;AAAA,UACf,KAAA,EAAO,OAAA;AAAA,UACP,UAAU,KAAA,CAAM;AAAA;AAClB,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,gBAAA,CAAiB,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,MAAM;AACxC,MAAA,WAAA,EAAY;AACZ,MAAA,WAAA,EAAY;AACZ,MAAA,UAAA,EAAW;AAAA,IACb,CAAC,CAAA;AAAA,EACH;AAQA,EAAA,SAAS,SAAA,GAAkB;AACzB,IAAA,KAAA,MAAW,GAAG,KAAK,CAAA,IAAK,SAAS,KAAA,EAAO;AACtC,MAAA,aAAA,CAAc,KAAK,CAAA;AAAA,IACrB;AAEA,IAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,CAAA,IAAK,gBAAA,EAAkB;AAC/C,MAAA,IAAI,CAAC,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA,EAAG;AAChC,QAAA,KAAA,EAAM;AACN,QAAA,gBAAA,CAAiB,OAAO,OAAO,CAAA;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,EAAA,GAAA,CAAI,EAAA,CAAG,gBAAA,CAAiB,CAAC,OAAA,KAAY;AACnC,IAAA,IAAI,OAAA,CAAQ,gBAAgB,YAAA,EAAc;AAC1C,IAAA,SAAA,EAAU;AACV,IAAA,OAAA,CAAQ,SAAA,GAAY,CAAC,GAAG,QAAA,CAAS,KAAA,CAAM,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,MAC3D,EAAA,EAAI,QAAQ,GAAG,CAAA,CAAA;AAAA,MACf,KAAA,EAAO,GAAA;AAAA,MACP,MAAM;AAAC,KACT,CAAE,CAAA;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,GAAA,CAAI,EAAA,CAAG,iBAAA,CAAkB,CAAC,OAAA,KAAY;AACpC,IAAA,IAAI,OAAA,CAAQ,gBAAgB,YAAA,EAAc;AAC1C,IAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,MAAM,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA;AACxC,IAAA,IAAI,UAAU,MAAA,EAAW;AAQzB,IAAA,OAAA,CAAQ,KAAA,CAAM,YAAY,CAAA,GAAI;AAAA,MAC5B,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,qBAAA,CAAsB,MAAM,IAAA,CAAK,KAAK,CAAA,EAAG,QAAA,EAAU,IAAA;AAAK,KAChF;AAMA,IAAA,OAAA,CAAQ,KAAA,CAAM,eAAe,CAAA,GAAI;AAAA,MAC/B,GAAG,CAAC,GAAG,KAAA,CAAM,YAAA,CAAa,OAAA,EAAS,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,MAAO;AAAA,QACpD,GAAA,EAAK,OAAO,CAAC,CAAA;AAAA,QACb,KAAA,EAAO;AAAA,OACT,CAAE;AAAA,KACJ;AACA,IAAA,OAAA,CAAQ,KAAA,CAAM,aAAa,CAAA,GAAI;AAAA,MAC7B,GAAG,CAAC,GAAG,KAAA,CAAM,UAAA,CAAW,OAAA,EAAS,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,MAAO;AAAA,QAClD,GAAA,EAAK,OAAO,CAAC,CAAA;AAAA,QACb,KAAA,EAAO;AAAA,OACT,CAAE;AAAA,KACJ;AACA,IAAA,OAAA,CAAQ,KAAA,CAAM,YAAY,CAAA,GAAI;AAAA,MAC5B,EAAE,GAAA,EAAK,cAAA,EAAgB,KAAA,EAAO,KAAA,CAAM,aAAa,KAAA,EAAM;AAAA,MACvD,EAAE,GAAA,EAAK,aAAA,EAAe,KAAA,EAAO,KAAA,CAAM,YAAY,KAAA,EAAM;AAAA,MACrD,EAAE,GAAA,EAAK,aAAA,EAAe,KAAA,EAAO,KAAA,CAAM,YAAY,KAAA,EAAM;AAAA,MACrD,EAAE,GAAA,EAAK,mBAAA,EAAqB,KAAA,EAAO,KAAA,CAAM,kBAAkB,KAAA;AAAM,KACnE;AAAA,EACF,CAAC,CAAA;AAED,EAAA,GAAA,CAAI,EAAA,CAAG,kBAAA,CAAmB,CAAC,OAAA,KAAY;AACrC,IAAA,IAAI,OAAA,CAAQ,gBAAgB,YAAA,EAAc;AAC1C,IAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,MAAM,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA;AACxC,IAAA,IAAI,UAAU,MAAA,EAAW;AAOzB,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG;AAC7B,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AAC9B,IAAA,IAAI,YAAY,YAAA,EAAc;AAC9B,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AACrC,IAAA,MAAM,EAAE,QAAA,EAAU,aAAA,EAAe,KAAK,YAAA,EAAa,GAAI,iBAAiB,QAAQ,CAAA;AAKhF,IAAA,IAAI,eAAA,CAAgB,CAAC,GAAG,aAAa,CAAC,CAAA,EAAG;AAKzC,IAAA,KAAA,CAAM,cAAA,CAAe,aAAA,EAAe,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO;AAAA,MACvD,OAAA,EAAS,KAAA,CAAM,aAAA,CAAc,kBAAA,CAAmB,YAAY;AAAA,KAC7D,CAAA;AACD,IAAA,YAAA,EAAa;AAAA,EACf,CAAC,CAAA;AAGD,EAAA,SAAA,EAAU;AACV,EAAA,WAAA,EAAY;AACd;;;;"}