attaform 0.18.2 → 0.19.0

package/dist/shared/{attaform.5UhpSVFI.cjs → attaform.CoxJ8Qm8.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-const paths = require('./attaform.BqK_L4gK.cjs');
+const paths = require('./attaform.BqEfHpVB.cjs');
 
 function renderAttaformState(app) {
   const registry = paths.getRegistryFromApp(app);
@@ -60,4 +60,4 @@ exports.REDACTED = REDACTED;
 exports.hydrateAttaformState = hydrateAttaformState;
 exports.redactSensitiveLeaves = redactSensitiveLeaves;
 exports.renderAttaformState = renderAttaformState;
-//# sourceMappingURL=attaform.5UhpSVFI.cjs.map
+//# sourceMappingURL=attaform.CoxJ8Qm8.cjs.map

package/dist/shared/{attaform.5UhpSVFI.cjs.map → attaform.CoxJ8Qm8.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"attaform.5UhpSVFI.cjs","sources":["../../src/runtime/core/serialize.ts","../../src/runtime/core/devtools-shared.ts"],"sourcesContent":["import type { App } from 'vue'\nimport type { FormKey } from '../types/types-api'\nimport { pathKeyToDotted, type PathKey } from './paths'\nimport { getRegistryFromApp, type SerializedFormData } from './registry'\n\n/**\n * Serialised snapshot of every form in a Vue app, produced by\n * `renderAttaformState` and consumed by `hydrateAttaformState`.\n *\n * JSON-safe — pass to `JSON.stringify`, `devalue`, or any other\n * serialiser before embedding in your SSR payload.\n */\nexport type SerializedAttaformState = {\n  /** Tuples of `[formKey, snapshot]` for every form in the app. */\n  readonly forms: ReadonlyArray<readonly [FormKey, SerializedFormData]>\n}\n\n/**\n * Snapshot every form on a Vue app for SSR. Call from your server\n * entry after rendering the app:\n *\n * ```ts\n * import { renderToString } from '@vue/server-renderer'\n * import { renderAttaformState, escapeForInlineScript } from 'attaform'\n *\n * const html = await renderToString(app)\n * const state = renderAttaformState(app)\n * const payload = escapeForInlineScript(JSON.stringify(state))\n *\n * return `\n *   ${html}\n *   <script>window.__ATTAFORM_STATE__ = ${payload}</script>\n * `\n * ```\n *\n * Pair with `hydrateAttaformState` on the client to restore the\n * forms in their server-rendered state. Nuxt users don't need this —\n * `attaform/nuxt` wires SSR automatically.\n */\nexport function renderAttaformState(app: App): SerializedAttaformState {\n  const registry = getRegistryFromApp(app)\n  const forms: Array<readonly [FormKey, SerializedFormData]> = []\n  for (const [key, state] of registry.forms) {\n    // Skip the blank field when the set is empty so the\n    // wire payload stays minimal for forms that don't use it. The\n    // optional shape on the consuming side handles the absence\n    // cleanly (defaults to \"no blank paths\"). PathKey → dotted at\n    // the boundary so the wire shape matches the rest of the\n    // public path notation.\n    const transientList: string[] = []\n    for (const pk of state.blankPaths) {\n      const d = pathKeyToDotted(pk as PathKey)\n      if (d !== null) transientList.push(d)\n    }\n    forms.push([\n      key,\n      {\n        form: state.form.value,\n        schemaErrors: Array.from(state.schemaErrors.entries()),\n        userErrors: Array.from(state.userErrors.entries()),\n        fields: Array.from(state.fields.entries()),\n        ...(transientList.length > 0 ? { blankPaths: transientList } : {}),\n      },\n    ])\n  }\n  return { forms }\n}\n\n/**\n * Restore forms from a server-rendered snapshot on the client. Call\n * from your client entry before mounting:\n *\n * ```ts\n * import { createApp } from 'vue'\n * import { createAttaform, hydrateAttaformState } from 'attaform'\n *\n * const app = createApp(App).use(createAttaform())\n * hydrateAttaformState(app, window.__ATTAFORM_STATE__)\n * app.mount('#app')\n * ```\n *\n * The next `useForm({ key })` call for each serialised form picks up\n * the snapshot transparently — no further action is required.\n */\nexport function hydrateAttaformState(app: App, payload: SerializedAttaformState): void {\n  const registry = getRegistryFromApp(app)\n  for (const [key, data] of payload.forms) {\n    registry.pendingHydration.set(key, data)\n  }\n}\n","/**\n * Shared building blocks for Attaform's two devtools surfaces — the Vue\n * DevTools (Chrome-extension) inspector wired up in `./devtools.ts`, and\n * the Nuxt DevTools (overlay) panel wired up via `../../nuxt.ts` +\n * `../pages/_attaform_devtools.vue`.\n *\n * Centralizing the redaction policy and the window-bridge contract here\n * keeps both surfaces aligned: a future tightening of the sensitive-name\n * heuristic, or a new field added to the bridge, lands in one file.\n */\nimport type { AttaformRegistry } from './registry'\nimport type { Segment } from './paths'\n\nexport const REDACTED = '[redacted]'\n\n/**\n * Walk `value` and replace any leaf whose enclosing path matches the\n * sensitive-name heuristic with the string `'[redacted]'`. Returns a\n * new tree (no mutation of the input). Object keys + array indices are\n * preserved; only the leaf payloads change.\n *\n * Applied to BOTH devtools surfaces' Form-value rendering AND every\n * timeline event payload — leaks via either surface are treatable as\n * \"any developer with the panel open during user testing can read a\n * customer's password,\" which is exactly the failure mode the\n * sensitive-name guard exists to prevent on the storage side.\n *\n * Leaves whose path doesn't match a pattern pass through untouched.\n * `acknowledgeSensitive: true` on persistence does NOT bypass this — if\n * the consumer opted into persisting the value, they still shouldn't\n * see it in DevTools timelines that grow unbounded.\n *\n * Implementation note: tracks an `inSensitiveSubtree` flag through the\n * recursion instead of allocating a fresh path array per node + calling\n * `isSensitivePath` per leaf. Once any ancestor segment matches the\n * heuristic, the flag stays set for every descendant — the leaf simply\n * returns `REDACTED` without re-scanning the path. For a 100-leaf form:\n * ~100 path allocations + ~100 full-path regex sweeps → 0 path\n * allocations + ~100 single-segment regex sweeps, with whole-subtree\n * short-circuit when sensitive ancestors are found early.\n */\nexport function redactSensitiveLeaves(\n  value: unknown,\n  matchSensitive: (segment: Segment) => boolean\n): unknown {\n  return redactImpl(value, false, matchSensitive)\n}\n\nfunction redactImpl(\n  value: unknown,\n  inSensitiveSubtree: boolean,\n  matchSensitive: (segment: Segment) => boolean\n): unknown {\n  if (value === null || value === undefined) return value\n  if (typeof value !== 'object') {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  if (Array.isArray(value)) {\n    // Numeric segments never match the sensitive-name heuristic\n    // (segmentMatchesSensitive rejects non-string segments), so the\n    // flag passes through unchanged when descending into arrays.\n    return value.map((item) => redactImpl(item, inSensitiveSubtree, matchSensitive))\n  }\n  // Non-plain object (Map / Set / Date / class instance) — redact\n  // wholesale if we're already in a sensitive subtree; otherwise pass\n  // through. DevTools rendering of these is already heuristic, so we\n  // don't try to descend into them.\n  //\n  // Use `Object.prototype.toString.call(value)` rather than a\n  // `getPrototypeOf` comparison because `Object.prototype` is\n  // realm-scoped — the Nuxt DevTools overlay panel runs in an iframe\n  // whose Vue runtime is separate from the host's, so the host's\n  // reactive proxies have a prototype that doesn't equal the panel's\n  // `Object.prototype`. The `toString` tag check is realm-aware via\n  // `@@toStringTag` and returns `'[object Object]'` for plain objects\n  // (including Vue reactive proxies of plain objects) regardless of\n  // which iframe they were created in.\n  if (Object.prototype.toString.call(value) !== '[object Object]') {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  const out: Record<string, unknown> = {}\n  for (const key of Object.keys(value as Record<string, unknown>)) {\n    const childSensitive = inSensitiveSubtree || matchSensitive(key)\n    out[key] = redactImpl((value as Record<string, unknown>)[key], childSensitive, matchSensitive)\n  }\n  return out\n}\n\n/**\n * Property key on `window` that the Nuxt-side dev plugin attaches the\n * bridge object to. The iframe-mounted overlay panel reads\n * `window.parent[DEVTOOLS_WINDOW_KEY]` to reach the host app's registry.\n *\n * Underscored + namespaced to make accidental collision with consumer\n * globals vanishingly unlikely. Stable across versions — bumping it\n * would silently disconnect older library builds from newer overlay\n * panels in the same browser tab during a library upgrade.\n */\nexport const DEVTOOLS_WINDOW_KEY = '__attaform_devtools__'\n\n/**\n * Shape of the object the host plugin attaches to `window` in dev mode.\n * The iframe overlay panel reads this to discover the live registry and\n * render its forms.\n *\n * Single-registry assumption: the latest `createAttaform()` install\n * wins. Multi-app pages (rare; typically only seen in micro-frontend\n * setups) will only see one app's forms in the panel. Documented but\n * not actively supported — the alternative (a Set of registries with\n * union-rendering) is a future call if a real consumer hits it.\n */\nexport interface AttaformDevtoolsBridge {\n  registry: AttaformRegistry\n  /**\n   * The library version, surfaced in the panel's footer for support /\n   * bug-report context. Read from `package.json` at host-plugin init.\n   */\n  version: string\n}\n\ndeclare global {\n  interface Window {\n    [DEVTOOLS_WINDOW_KEY]?: AttaformDevtoolsBridge\n  }\n}\n"],"names":["getRegistryFromApp","pathKeyToDotted"],"mappings":";;;;AAuCO,SAAS,oBAAoB,GAAA,EAAmC;AACrE,EAAA,MAAM,QAAA,GAAWA,yBAAmB,GAAG,CAAA;AACvC,EAAA,MAAM,QAAuD,EAAC;AAC9D,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,SAAS,KAAA,EAAO;AAOzC,IAAA,MAAM,gBAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,MAAM,UAAA,EAAY;AACjC,MAAA,MAAM,CAAA,GAAIC,sBAAgB,EAAa,CAAA;AACvC,MAAA,IAAI,CAAA,KAAM,IAAA,EAAM,aAAA,CAAc,IAAA,CAAK,CAAC,CAAA;AAAA,IACtC;AACA,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,GAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,MAAM,IAAA,CAAK,KAAA;AAAA,QACjB,cAAc,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,SAAS,CAAA;AAAA,QACrD,YAAY,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,SAAS,CAAA;AAAA,QACjD,QAAQ,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,SAAS,CAAA;AAAA,QACzC,GAAI,cAAc,MAAA,GAAS,CAAA,GAAI,EAAE,UAAA,EAAY,aAAA,KAAkB;AAAC;AAClE,KACD,CAAA;AAAA,EACH;AACA,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAkBO,SAAS,oBAAA,CAAqB,KAAU,OAAA,EAAwC;AACrF,EAAA,MAAM,QAAA,GAAWD,yBAAmB,GAAG,CAAA;AACvC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,CAAA,IAAK,QAAQ,KAAA,EAAO;AACvC,IAAA,QAAA,CAAS,gBAAA,CAAiB,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAAA,EACzC;AACF;;AC5EO,MAAM,QAAA,GAAW;AA4BjB,SAAS,qBAAA,CACd,OACA,cAAA,EACS;AACT,EAAA,OAAO,UAAA,CAAW,KAAA,EAAO,KAAA,EAAO,cAAc,CAAA;AAChD;AAEA,SAAS,UAAA,CACP,KAAA,EACA,kBAAA,EACA,cAAA,EACS;AACT,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,EAAW,OAAO,KAAA;AAClD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AAIxB,IAAA,OAAO,KAAA,CAAM,IAAI,CAAC,IAAA,KAAS,WAAW,IAAA,EAAM,kBAAA,EAAoB,cAAc,CAAC,CAAA;AAAA,EACjF;AAeA,EAAA,IAAI,OAAO,SAAA,CAAU,QAAA,CAAS,IAAA,CAAK,KAAK,MAAM,iBAAA,EAAmB;AAC/D,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,EAAG;AAC/D,IAAA,MAAM,cAAA,GAAiB,kBAAA,IAAsB,cAAA,CAAe,GAAG,CAAA;AAC/D,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,UAAA,CAAY,MAAkC,GAAG,CAAA,EAAG,gBAAgB,cAAc,CAAA;AAAA,EAC/F;AACA,EAAA,OAAO,GAAA;AACT;AAYO,MAAM,mBAAA,GAAsB;;;;;;;;"}
+{"version":3,"file":"attaform.CoxJ8Qm8.cjs","sources":["../../src/runtime/core/serialize.ts","../../src/runtime/core/devtools-shared.ts"],"sourcesContent":["import type { App } from 'vue'\nimport type { FormKey } from '../types/types-api'\nimport { pathKeyToDotted, type PathKey } from './paths'\nimport { getRegistryFromApp, type SerializedFormData } from './registry'\n\n/**\n * Serialised snapshot of every form in a Vue app, produced by\n * `renderAttaformState` and consumed by `hydrateAttaformState`.\n *\n * JSON-safe — pass to `JSON.stringify`, `devalue`, or any other\n * serialiser before embedding in your SSR payload.\n */\nexport type SerializedAttaformState = {\n  /** Tuples of `[formKey, snapshot]` for every form in the app. */\n  readonly forms: ReadonlyArray<readonly [FormKey, SerializedFormData]>\n}\n\n/**\n * Snapshot every form on a Vue app for SSR. Call from your server\n * entry after rendering the app:\n *\n * ```ts\n * import { renderToString } from '@vue/server-renderer'\n * import { renderAttaformState, escapeForInlineScript } from 'attaform'\n *\n * const html = await renderToString(app)\n * const state = renderAttaformState(app)\n * const payload = escapeForInlineScript(JSON.stringify(state))\n *\n * return `\n *   ${html}\n *   <script>window.__ATTAFORM_STATE__ = ${payload}</script>\n * `\n * ```\n *\n * Pair with `hydrateAttaformState` on the client to restore the\n * forms in their server-rendered state. Nuxt users don't need this —\n * `attaform/nuxt` wires SSR automatically.\n */\nexport function renderAttaformState(app: App): SerializedAttaformState {\n  const registry = getRegistryFromApp(app)\n  const forms: Array<readonly [FormKey, SerializedFormData]> = []\n  for (const [key, state] of registry.forms) {\n    // Skip the blank field when the set is empty so the\n    // wire payload stays minimal for forms that don't use it. The\n    // optional shape on the consuming side handles the absence\n    // cleanly (defaults to \"no blank paths\"). PathKey → dotted at\n    // the boundary so the wire shape matches the rest of the\n    // public path notation.\n    const transientList: string[] = []\n    for (const pk of state.blankPaths) {\n      const d = pathKeyToDotted(pk as PathKey)\n      if (d !== null) transientList.push(d)\n    }\n    forms.push([\n      key,\n      {\n        form: state.form.value,\n        schemaErrors: Array.from(state.schemaErrors.entries()),\n        userErrors: Array.from(state.userErrors.entries()),\n        fields: Array.from(state.fields.entries()),\n        ...(transientList.length > 0 ? { blankPaths: transientList } : {}),\n      },\n    ])\n  }\n  return { forms }\n}\n\n/**\n * Restore forms from a server-rendered snapshot on the client. Call\n * from your client entry before mounting:\n *\n * ```ts\n * import { createApp } from 'vue'\n * import { createAttaform, hydrateAttaformState } from 'attaform'\n *\n * const app = createApp(App).use(createAttaform())\n * hydrateAttaformState(app, window.__ATTAFORM_STATE__)\n * app.mount('#app')\n * ```\n *\n * The next `useForm({ key })` call for each serialised form picks up\n * the snapshot transparently — no further action is required.\n */\nexport function hydrateAttaformState(app: App, payload: SerializedAttaformState): void {\n  const registry = getRegistryFromApp(app)\n  for (const [key, data] of payload.forms) {\n    registry.pendingHydration.set(key, data)\n  }\n}\n","/**\n * Shared building blocks for Attaform's two devtools surfaces — the Vue\n * DevTools (Chrome-extension) inspector wired up in `./devtools.ts`, and\n * the Nuxt DevTools (overlay) panel wired up via `../../nuxt.ts` +\n * `../pages/_attaform_devtools.vue`.\n *\n * Centralizing the redaction policy and the window-bridge contract here\n * keeps both surfaces aligned: a future tightening of the sensitive-name\n * heuristic, or a new field added to the bridge, lands in one file.\n */\nimport type { AttaformRegistry } from './registry'\nimport type { Segment } from './paths'\n\nexport const REDACTED = '[redacted]'\n\n/**\n * Walk `value` and replace any leaf whose enclosing path matches the\n * sensitive-name heuristic with the string `'[redacted]'`. Returns a\n * new tree (no mutation of the input). Object keys + array indices are\n * preserved; only the leaf payloads change.\n *\n * Applied to BOTH devtools surfaces' Form-value rendering AND every\n * timeline event payload — leaks via either surface are treatable as\n * \"any developer with the panel open during user testing can read a\n * customer's password,\" which is exactly the failure mode the\n * sensitive-name guard exists to prevent on the storage side.\n *\n * Leaves whose path doesn't match a pattern pass through untouched.\n * `acknowledgeSensitive: true` on persistence does NOT bypass this — if\n * the consumer opted into persisting the value, they still shouldn't\n * see it in DevTools timelines that grow unbounded.\n *\n * Implementation note: tracks an `inSensitiveSubtree` flag through the\n * recursion instead of allocating a fresh path array per node + calling\n * `isSensitivePath` per leaf. Once any ancestor segment matches the\n * heuristic, the flag stays set for every descendant — the leaf simply\n * returns `REDACTED` without re-scanning the path. For a 100-leaf form:\n * ~100 path allocations + ~100 full-path regex sweeps → 0 path\n * allocations + ~100 single-segment regex sweeps, with whole-subtree\n * short-circuit when sensitive ancestors are found early.\n */\nexport function redactSensitiveLeaves(\n  value: unknown,\n  matchSensitive: (segment: Segment) => boolean\n): unknown {\n  return redactImpl(value, false, matchSensitive)\n}\n\nfunction redactImpl(\n  value: unknown,\n  inSensitiveSubtree: boolean,\n  matchSensitive: (segment: Segment) => boolean\n): unknown {\n  if (value === null || value === undefined) return value\n  if (typeof value !== 'object') {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  if (Array.isArray(value)) {\n    // Numeric segments never match the sensitive-name heuristic\n    // (segmentMatchesSensitive rejects non-string segments), so the\n    // flag passes through unchanged when descending into arrays.\n    return value.map((item) => redactImpl(item, inSensitiveSubtree, matchSensitive))\n  }\n  // Non-plain object (Map / Set / Date / class instance) — redact\n  // wholesale if we're already in a sensitive subtree; otherwise pass\n  // through. DevTools rendering of these is already heuristic, so we\n  // don't try to descend into them.\n  //\n  // Use `Object.prototype.toString.call(value)` rather than a\n  // `getPrototypeOf` comparison because `Object.prototype` is\n  // realm-scoped — the Nuxt DevTools overlay panel runs in an iframe\n  // whose Vue runtime is separate from the host's, so the host's\n  // reactive proxies have a prototype that doesn't equal the panel's\n  // `Object.prototype`. The `toString` tag check is realm-aware via\n  // `@@toStringTag` and returns `'[object Object]'` for plain objects\n  // (including Vue reactive proxies of plain objects) regardless of\n  // which iframe they were created in.\n  if (Object.prototype.toString.call(value) !== '[object Object]') {\n    return inSensitiveSubtree ? REDACTED : value\n  }\n  const out: Record<string, unknown> = {}\n  for (const key of Object.keys(value as Record<string, unknown>)) {\n    const childSensitive = inSensitiveSubtree || matchSensitive(key)\n    out[key] = redactImpl((value as Record<string, unknown>)[key], childSensitive, matchSensitive)\n  }\n  return out\n}\n\n/**\n * Property key on `window` that the Nuxt-side dev plugin attaches the\n * bridge object to. The iframe-mounted overlay panel reads\n * `window.parent[DEVTOOLS_WINDOW_KEY]` to reach the host app's registry.\n *\n * Underscored + namespaced to make accidental collision with consumer\n * globals vanishingly unlikely. Stable across versions — bumping it\n * would silently disconnect older library builds from newer overlay\n * panels in the same browser tab during a library upgrade.\n */\nexport const DEVTOOLS_WINDOW_KEY = '__attaform_devtools__'\n\n/**\n * Shape of the object the host plugin attaches to `window` in dev mode.\n * The iframe overlay panel reads this to discover the live registry and\n * render its forms.\n *\n * Single-registry assumption: the latest `createAttaform()` install\n * wins. Multi-app pages (rare; typically only seen in micro-frontend\n * setups) will only see one app's forms in the panel. Documented but\n * not actively supported — the alternative (a Set of registries with\n * union-rendering) is a future call if a real consumer hits it.\n */\nexport interface AttaformDevtoolsBridge {\n  registry: AttaformRegistry\n  /**\n   * The library version, surfaced in the panel's footer for support /\n   * bug-report context. Read from `package.json` at host-plugin init.\n   */\n  version: string\n}\n\ndeclare global {\n  interface Window {\n    [DEVTOOLS_WINDOW_KEY]?: AttaformDevtoolsBridge\n  }\n}\n"],"names":["getRegistryFromApp","pathKeyToDotted"],"mappings":";;;;AAuCO,SAAS,oBAAoB,GAAA,EAAmC;AACrE,EAAA,MAAM,QAAA,GAAWA,yBAAmB,GAAG,CAAA;AACvC,EAAA,MAAM,QAAuD,EAAC;AAC9D,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,SAAS,KAAA,EAAO;AAOzC,IAAA,MAAM,gBAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,MAAM,UAAA,EAAY;AACjC,MAAA,MAAM,CAAA,GAAIC,sBAAgB,EAAa,CAAA;AACvC,MAAA,IAAI,CAAA,KAAM,IAAA,EAAM,aAAA,CAAc,IAAA,CAAK,CAAC,CAAA;AAAA,IACtC;AACA,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,GAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,MAAM,IAAA,CAAK,KAAA;AAAA,QACjB,cAAc,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,SAAS,CAAA;AAAA,QACrD,YAAY,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,SAAS,CAAA;AAAA,QACjD,QAAQ,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,SAAS,CAAA;AAAA,QACzC,GAAI,cAAc,MAAA,GAAS,CAAA,GAAI,EAAE,UAAA,EAAY,aAAA,KAAkB;AAAC;AAClE,KACD,CAAA;AAAA,EACH;AACA,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAkBO,SAAS,oBAAA,CAAqB,KAAU,OAAA,EAAwC;AACrF,EAAA,MAAM,QAAA,GAAWD,yBAAmB,GAAG,CAAA;AACvC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,CAAA,IAAK,QAAQ,KAAA,EAAO;AACvC,IAAA,QAAA,CAAS,gBAAA,CAAiB,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAAA,EACzC;AACF;;AC5EO,MAAM,QAAA,GAAW;AA4BjB,SAAS,qBAAA,CACd,OACA,cAAA,EACS;AACT,EAAA,OAAO,UAAA,CAAW,KAAA,EAAO,KAAA,EAAO,cAAc,CAAA;AAChD;AAEA,SAAS,UAAA,CACP,KAAA,EACA,kBAAA,EACA,cAAA,EACS;AACT,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,EAAW,OAAO,KAAA;AAClD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AAIxB,IAAA,OAAO,KAAA,CAAM,IAAI,CAAC,IAAA,KAAS,WAAW,IAAA,EAAM,kBAAA,EAAoB,cAAc,CAAC,CAAA;AAAA,EACjF;AAeA,EAAA,IAAI,OAAO,SAAA,CAAU,QAAA,CAAS,IAAA,CAAK,KAAK,MAAM,iBAAA,EAAmB;AAC/D,IAAA,OAAO,qBAAqB,QAAA,GAAW,KAAA;AAAA,EACzC;AACA,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,EAAG;AAC/D,IAAA,MAAM,cAAA,GAAiB,kBAAA,IAAsB,cAAA,CAAe,GAAG,CAAA;AAC/D,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,UAAA,CAAY,MAAkC,GAAG,CAAA,EAAG,gBAAgB,cAAc,CAAA;AAAA,EAC/F;AACA,EAAA,OAAO,GAAA;AACT;AAYO,MAAM,mBAAA,GAAsB;;;;;;;;"}

package/dist/shared/{attaform.CDmaxrt2.mjs → attaform.CrpjyXdO.mjs}

@@ -816,6 +816,9 @@ function setAssignFunction(el, vnode, value) {
   }
   el[assignKey] = getModelAssigner(el, vnode, value);
 }
+function noteInteraction(value) {
+  if (isRegisterValue(value)) value.markInteracted();
+}
 const vRegisterText = {
   created(el, { value, modifiers: { lazy, trim, number } }, vnode) {
     const castToNumber = number === true || vnode.props?.["type"] === "number";
@@ -827,6 +830,7 @@ const vRegisterText = {
       if (shouldBailListener(el)) return;
       const target = e.target;
       if (target === null || target.composing) return;
+      noteInteraction(value);
       let domValue = el.value;
       if (trim === true && lazy === true) {
         domValue = domValue.trim();
@@ -958,6 +962,7 @@ const vRegisterCheckbox = {
     setAssignFunction(el, vnode, value);
     addEventListener(el, "change", () => {
       if (shouldBailListener(el)) return;
+      noteInteraction(value);
       const modelValue = value.innerRef.value ?? [];
       const explicitValueRequired = true;
       const rawElementValue = getValue(el, explicitValueRequired);
@@ -1055,6 +1060,7 @@ const vRegisterRadio = {
     setAssignFunction(el, vnode, value);
     addEventListener(el, "change", () => {
       if (shouldBailListener(el)) return;
+      noteInteraction(value);
       el[assignKey]?.(getValue(el));
       if (isRegisterValue(value) && isDefaultAssigner(el[assignKey])) {
         const currentModel = value.innerRef.value;
@@ -1103,6 +1109,7 @@ const vRegisterSelect = {
     const isSetModel = isSet(value.innerRef.value);
     addEventListener(el, "change", () => {
       if (shouldBailListener(el)) return;
+      noteInteraction(value);
       const selectedVal = Array.prototype.filter.call(el.options, (o) => o.selected).map((o) => number === true ? looseToNumber(getValue(o)) : getValue(o));
       const wrote = el[assignKey]?.(
         el.multiple ? isSetModel ? new Set(selectedVal) : selectedVal : selectedVal[0]
@@ -1217,11 +1224,83 @@ function getCheckboxValue(el, checked) {
 }
 const SUPPORTED_TAGS = /* @__PURE__ */ new Set(["INPUT", "TEXTAREA", "SELECT"]);
 const warnedUnsupportedElements = __DEV__ ? /* @__PURE__ */ new WeakSet() : null;
+const MANAGED_ARIA_ATTRS = [
+  "aria-invalid",
+  "aria-busy",
+  "aria-required",
+  "aria-describedby"
+];
+const ariaLockKey = Symbol.for("attaform:aria-locks");
+const ariaScopeKey = Symbol.for("attaform:aria-scope");
+const EMPTY_ARIA_LOCKS = /* @__PURE__ */ new Set();
+function mergeAriaLocks(el, vnode) {
+  let locks = el[ariaLockKey];
+  if (locks === void 0) {
+    locks = /* @__PURE__ */ new Set();
+    el[ariaLockKey] = locks;
+  }
+  const props = vnode.props;
+  if (props !== null) {
+    for (const attr of MANAGED_ARIA_ATTRS) {
+      if (attr in props) locks.add(attr);
+    }
+  }
+  return locks;
+}
+function setAriaAttr(el, attr, value) {
+  if (value === null) el.removeAttribute(attr);
+  else el.setAttribute(attr, value);
+}
+function resolveAriaValue(attr, rv, ds) {
+  switch (attr) {
+    case "aria-invalid":
+      return ds === "error" ? "true" : null;
+    case "aria-busy":
+      return ds === "pending" ? "true" : null;
+    case "aria-required":
+      return rv.isRequired === true ? "true" : null;
+    case "aria-describedby":
+      return ds === "error" && rv.aria?.errorId !== void 0 ? rv.aria.errorId : null;
+    default:
+      return null;
+  }
+}
+function applyAria(el, rv) {
+  if (rv.ariaEnabled !== true || rv.ariaDisplayState === void 0) return;
+  const locks = el[ariaLockKey] ?? EMPTY_ARIA_LOCKS;
+  const ds = rv.ariaDisplayState.value;
+  for (const attr of MANAGED_ARIA_ATTRS) {
+    if (!locks.has(attr)) setAriaAttr(el, attr, resolveAriaValue(attr, rv, ds));
+  }
+}
+function setupAria(el, rv, vnode) {
+  if (rv.ariaEnabled !== true || rv.ariaDisplayState === void 0) return;
+  mergeAriaLocks(el, vnode);
+  applyAria(el, rv);
+  const displayState = rv.ariaDisplayState;
+  const scope = effectScope(true);
+  scope.run(() => {
+    watch(displayState, () => applyAria(el, rv), { flush: "post" });
+  });
+  el[ariaScopeKey] = () => scope.stop();
+}
+function teardownAria(el) {
+  const stop = el[ariaScopeKey];
+  if (stop === void 0) return;
+  stop();
+  delete el[ariaScopeKey];
+  const locks = el[ariaLockKey] ?? EMPTY_ARIA_LOCKS;
+  for (const attr of MANAGED_ARIA_ATTRS) {
+    if (!locks.has(attr)) el.removeAttribute(attr);
+  }
+  delete el[ariaLockKey];
+}
 const vRegisterDynamic = {
   created(el, binding, vnode) {
     syncPersistOptIn(el, binding.value, void 0, vnode.props?.["type"]);
     syncMultiTabOptOut(binding.value, void 0);
     callModelHook(el, binding, vnode, null, "created");
+    if (isRegisterValue(binding.value)) setupAria(el, binding.value, vnode);
     if (__DEV__ && warnedUnsupportedElements !== null && !SUPPORTED_TAGS.has(el.tagName) && !warnedUnsupportedElements.has(el)) {
       void nextTick(() => {
         if (warnedUnsupportedElements.has(el)) return;
@@ -1245,12 +1324,28 @@ const vRegisterDynamic = {
     syncMultiTabOptOut(binding.value, binding.oldValue);
     syncElementRegistration(el, binding.value, binding.oldValue);
     callModelHook(el, binding, vnode, prevVNode, "beforeUpdate");
+    const ariaEl = el;
+    const value = binding.value;
+    if (!isRegisterValue(value) || value.ariaEnabled !== true || value.ariaDisplayState === void 0) {
+      teardownAria(ariaEl);
+    } else {
+      const old = binding.oldValue;
+      const pathChanged = !isRegisterValue(old) || old.path !== value.path;
+      if (pathChanged) {
+        teardownAria(ariaEl);
+        setupAria(ariaEl, value, vnode);
+      } else {
+        mergeAriaLocks(ariaEl, vnode);
+        applyAria(ariaEl, value);
+      }
+    }
   },
   updated(el, binding, vnode, prevVNode) {
     callModelHook(el, binding, vnode, prevVNode, "updated");
   },
   beforeUnmount(el, { value }) {
     removeTrackedListeners(el);
+    teardownAria(el);
     if (isRegisterValue(value)) {
       value.persistOptIns.removeAllFor(getOrAssignElementId(el));
       value.unmarkNoSync?.();
@@ -1260,6 +1355,28 @@ const vRegisterDynamic = {
     delete el.composing;
     delete el._assigning;
     delete el[assignKey];
+  },
+  // The lifecycle hooks above don't run on the server (Vue skips
+  // directive lifecycle during SSR), so emit the same aria attributes
+  // here from the SSR-time gated display state. Honors authored attrs
+  // (vnode-level lockout) and the ariaEnabled gate, touches no DOM, and
+  // shares `resolveAriaValue` with the client path. Ids are SSR-stable
+  // (formInstanceId derives from Vue's useId), so a server-rendered
+  // describedby matches the client after hydration.
+  getSSRProps(binding, vnode) {
+    const rv = binding.value;
+    if (!isRegisterValue(rv) || rv.ariaEnabled !== true || rv.ariaDisplayState === void 0) {
+      return void 0;
+    }
+    const props = vnode?.props ?? null;
+    const ds = rv.ariaDisplayState.value;
+    const out = {};
+    for (const attr of MANAGED_ARIA_ATTRS) {
+      if (props !== null && attr in props) continue;
+      const value = resolveAriaValue(attr, rv, ds);
+      if (value !== null) out[attr] = value;
+    }
+    return out;
   }
 };
 function isBlankFileValue(value) {
@@ -1305,6 +1422,7 @@ const vRegisterFile = {
       value.setValueWithInternalPath(blankShape, { blank: true });
     }
     addEventListener(input, "change", () => {
+      noteInteraction(value);
       const next = readFilesFromInput(input);
       const blank = isBlankFileValue(next);
       value.setValueWithInternalPath(next, blank ? { blank: true } : void 0);
@@ -1505,4 +1623,4 @@ function isPathPrefix(prefix, path) {
 }
 
 export { AnonPersistError as A, kFormInstanceId as B, parseDottedPath as C, DEFAULT_SENSITIVE_NAMES as D, pathKeyToDotted as E, FORM_ERRORS_PATH as F, segmentMatchesSensitive as G, segmentsForPathKey as H, InvalidPathError as I, useRegister as J, useRegistry as K, vRegister as L, OutsideSetupError as O, ROOT_PATH as R, SensitivePersistFieldError as S, __DEV__ as _, AttaformError as a, FORM_ERRORS_PATH_KEY as b, InvalidUseFormConfigError as c, ROOT_PATH_KEY as d, RegistryNotInstalledError as e, ReservedFormKeyError as f, SubmitErrorHandlerError as g, assignKey as h, canonicalizePath as i, captureUserCallSite as j, coerceToPathKey as k, createAttaform as l, createIsSensitivePath as m, createPersistOptInRegistry as n, createRegistry as o, createSegmentMatchesSensitive as p, enforceSensitiveCheck as q, ensureAttaformInstalled as r, getRegistryFromApp as s, isPathPrefix as t, isRegisterValue as u, isSensitivePath as v, kAttaformAncestorWizard as w, kAttaformRegistry as x, kAttaformWizardActiveStepResolver as y, kFormContext as z };
-//# sourceMappingURL=attaform.CDmaxrt2.mjs.map
+//# sourceMappingURL=attaform.CrpjyXdO.mjs.map