@actuate-media/cms-core 0.31.0 → 0.33.0

package/dist/__tests__/api/form-webhooks.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=form-webhooks.test.d.ts.map

package/dist/__tests__/api/form-webhooks.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-webhooks.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/api/form-webhooks.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/api/form-webhooks.test.js

@@ -0,0 +1,162 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+// Mock the SSRF-safe fetch so webhook "test" deliveries don't hit the network.
+const safeFetchMock = vi.hoisted(() => vi.fn());
+vi.mock('../../security/safe-fetch.js', () => ({
+    safeFetch: (...args) => safeFetchMock(...args),
+    SsrfBlockedError: class SsrfBlockedError extends Error {
+    },
+}));
+import { handleActuateAPI } from '../../api/index.js';
+import { createSession } from '../../auth/session.js';
+import { initDB } from '../../db.js';
+import { generateToken as generateCsrfToken } from '../../security/csrf.js';
+const SECRET = 'test-secret-for-form-webhooks-1234567890abcd';
+const FORM_ROW = {
+    id: 'form-1',
+    title: 'Contact Us',
+    slug: 'contact-us',
+    collection: 'forms',
+    createdById: 'admin-1',
+    createdAt: new Date('2026-01-01T00:00:00.000Z'),
+    updatedAt: new Date('2026-01-02T00:00:00.000Z'),
+    data: {
+        name: 'Contact Us',
+        slug: 'contact-us',
+        status: 'active',
+        activeSchemaVersionId: null,
+        fields: [
+            { id: '1', key: 'name', label: 'Name', type: 'text', required: true, sortOrder: 0 },
+            { id: '2', key: 'email', label: 'Email', type: 'email', required: true, sortOrder: 1 },
+        ],
+    },
+};
+function createMockDB() {
+    const webhooks = [];
+    let counter = 0;
+    const db = {
+        webhooks,
+        session: { findUnique: async () => ({ revokedAt: null }) },
+        user: {},
+        media: {},
+        auditLog: { create: async () => ({}) },
+        document: {
+            findFirst: async (args) => {
+                const where = args?.where ?? {};
+                if (where.collection !== 'forms')
+                    return null;
+                if (where.id && where.id !== 'form-1')
+                    return null;
+                if (where.slug && where.slug !== 'contact-us')
+                    return null;
+                return FORM_ROW;
+            },
+        },
+        formSubmission: { groupBy: async () => [], count: async () => 0 },
+        formWebhook: {
+            create: async ({ data }) => {
+                counter += 1;
+                const row = {
+                    id: `wh-${counter}`,
+                    createdAt: new Date(),
+                    updatedAt: new Date(),
+                    lastDeliveryAt: null,
+                    lastDeliveryStatus: null,
+                    ...data,
+                };
+                webhooks.push(row);
+                return row;
+            },
+            findMany: async ({ where }) => webhooks.filter((w) => w.formId === where.formId),
+            findUnique: async ({ where }) => webhooks.find((w) => w.id === where.id) ?? null,
+            update: async ({ where, data }) => {
+                const w = webhooks.find((x) => x.id === where.id);
+                Object.assign(w, data);
+                return w;
+            },
+            delete: async ({ where }) => {
+                const i = webhooks.findIndex((x) => x.id === where.id);
+                webhooks.splice(i, 1);
+                return {};
+            },
+        },
+    };
+    return db;
+}
+async function adminHeaders() {
+    const token = await createSession({ userId: 'admin-1', role: 'ADMIN', sessionId: 'sess-admin' }, { secret: SECRET });
+    const csrf = await generateCsrfToken();
+    return {
+        cookie: `actuate_session=${token}; actuate_csrf=${csrf}`,
+        'x-csrf-token': csrf,
+        'content-type': 'application/json',
+    };
+}
+describe('form webhook + notification endpoints', () => {
+    let db;
+    let handler;
+    beforeEach(() => {
+        process.env.CMS_SECRET = SECRET;
+        safeFetchMock.mockReset();
+        db = createMockDB();
+        initDB(db);
+        handler = handleActuateAPI({ prismaClient: db });
+    });
+    it('rejects unauthenticated webhook listing', async () => {
+        const res = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks'));
+        expect(res.status).toBe(401);
+    });
+    it('creates a webhook and returns the secret once, then masks it on list', async () => {
+        const headers = await adminHeaders();
+        const createRes = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ url: 'https://hooks.example.com/x', events: ['form.submitted'] }),
+        }));
+        expect(createRes.status).toBe(201);
+        const created = (await createRes.json());
+        expect(created.data.secret).toMatch(/^whsec_/);
+        expect(created.data.events).toEqual(['form.submitted']);
+        const listRes = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            headers: { cookie: headers.cookie },
+        }));
+        expect(listRes.status).toBe(200);
+        const list = (await listRes.json());
+        expect(list.data).toHaveLength(1);
+        expect(list.data[0].secret).toBeUndefined();
+    });
+    it('rejects an SSRF webhook URL with 400', async () => {
+        const headers = await adminHeaders();
+        const res = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ url: 'http://localhost/hook' }),
+        }));
+        expect(res.status).toBe(400);
+    });
+    it('sends a test delivery through the webhook', async () => {
+        safeFetchMock.mockResolvedValue({ ok: true, status: 200, text: async () => '' });
+        const headers = await adminHeaders();
+        const created = (await (await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ url: 'https://hooks.example.com/x' }),
+        }))).json());
+        const testRes = await handler(new Request(`https://example.com/api/cms/forms/form-1/webhooks/${created.data.id}/test`, {
+            method: 'POST',
+            headers,
+        }));
+        expect(testRes.status).toBe(200);
+        const body = (await testRes.json());
+        expect(body.data.ok).toBe(true);
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+    });
+    it('returns 400 from the test-notification route when no recipients are configured', async () => {
+        const headers = await adminHeaders();
+        const res = await handler(new Request('https://example.com/api/cms/forms/form-1/notifications/test', {
+            method: 'POST',
+            headers,
+        }));
+        expect(res.status).toBe(400);
+    });
+});
+//# sourceMappingURL=form-webhooks.test.js.map

package/dist/__tests__/api/form-webhooks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-webhooks.test.js","sourceRoot":"","sources":["../../../src/__tests__/api/form-webhooks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7D,+EAA+E;AAC/E,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AAC/C,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACrD,gBAAgB,EAAE,MAAM,gBAAiB,SAAQ,KAAK;KAAG;CAC1D,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE3E,MAAM,MAAM,GAAG,8CAA8C,CAAA;AAE7D,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,UAAU,EAAE,OAAO;IACnB,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;IAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;IAC/C,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,QAAQ;QAChB,qBAAqB,EAAE,IAAI;QAC3B,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;YACnF,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;SACvF;KACF;CACF,CAAA;AAED,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAU,EAAE,CAAA;IAC1B,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,MAAM,EAAE,GAAQ;QACd,QAAQ;QACR,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE;QAC1D,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE;QACtC,QAAQ,EAAE;YACR,SAAS,EAAE,KAAK,EAAE,IAAsE,EAAE,EAAE;gBAC1F,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;gBAC/B,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAA;gBAC7C,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAA;gBAClD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAO,IAAI,CAAA;gBAC1D,OAAO,QAAQ,CAAA;YACjB,CAAC;SACF;QACD,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE;QACjE,WAAW,EAAE;YACX,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC9B,OAAO,IAAI,CAAC,CAAA;gBACZ,MAAM,GAAG,GAAG;oBACV,EAAE,EAAE,MAAM,OAAO,EAAE;oBACnB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,cAAc,EAAE,IAAI;oBACpB,kBAAkB,EAAE,IAAI;oBACxB,GAAG,IAAI;iBACR,CAAA;gBACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAClB,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;YACrF,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI;YACrF,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBACtB,OAAO,CAAC,CAAA;YACV,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBACtD,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACrB,OAAO,EAAE,CAAA;YACX,CAAC;SACF;KACF,CAAA;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAC7D,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAA;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAA;IACtC,OAAO;QACL,MAAM,EAAE,mBAAmB,KAAK,kBAAkB,IAAI,EAAE;QACxD,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,kBAAkB;KACnC,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,EAAmC,CAAA;IACvC,IAAI,OAA4C,CAAA;IAEhD,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAA;QAC/B,aAAa,CAAC,SAAS,EAAE,CAAA;QACzB,EAAE,GAAG,YAAY,EAAE,CAAA;QACnB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,mDAAmD,CAAC,CAAC,CAAA;QAC3F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;SACzF,CAAC,CACH,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAkB,CAAA;QACzD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACpC,CAAC,CACH,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAoB,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC;SACvD,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAChF,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,OAAO,GAAG,CAAC,MAAM,CACrB,MAAM,OAAO,CACX,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC;SAC7D,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CAA6B,CAAA;QAErC,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,OAAO,CAAC,qDAAqD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;YACvF,MAAM,EAAE,MAAM;YACd,OAAO;SACR,CAAC,CACH,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA8B,CAAA;QAChE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,6DAA6D,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO;SACR,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/api/public-forms.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=public-forms.test.d.ts.map

package/dist/__tests__/api/public-forms.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-forms.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/api/public-forms.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/api/public-forms.test.js

@@ -0,0 +1,125 @@
+import { beforeEach, afterAll, describe, expect, it } from 'vitest';
+import { handleActuateAPI } from '../../api/index.js';
+import { initDB } from '../../db.js';
+const SECRET = 'test-secret-for-public-forms-1234567890';
+const FORM_ROW = {
+    id: 'form-1',
+    title: 'Contact Us',
+    slug: 'contact-us',
+    collection: 'forms',
+    createdById: 'admin-1',
+    createdAt: new Date('2026-01-01T00:00:00.000Z'),
+    updatedAt: new Date('2026-01-02T00:00:00.000Z'),
+    data: {
+        name: 'Contact Us',
+        slug: 'contact-us',
+        status: 'active',
+        activeSchemaVersionId: null,
+        successMessage: 'Got it!',
+        fields: [
+            { id: '1', key: 'name', label: 'Name', type: 'text', required: true, sortOrder: 0 },
+            { id: '2', key: 'email', label: 'Email', type: 'email', required: true, sortOrder: 1 },
+            { id: '3', key: 'hp', label: 'Leave blank', type: 'honeypot', required: false, sortOrder: 2 },
+        ],
+    },
+};
+function createMockDB() {
+    const created = [];
+    const db = {
+        created,
+        session: { findUnique: async () => ({ revokedAt: null }) },
+        user: {},
+        media: {},
+        document: {
+            findFirst: async (args) => {
+                const where = args?.where ?? {};
+                if (where.collection !== 'forms')
+                    return null;
+                if (where.slug && where.slug !== 'contact-us')
+                    return null;
+                if (where.id && where.id !== 'form-1')
+                    return null;
+                return FORM_ROW;
+            },
+        },
+        formSubmission: {
+            aggregate: async () => ({ _max: { entryNumber: 7 } }),
+            create: async ({ data }) => {
+                created.push(data);
+                return { id: 'sub_1', entryNumber: data.entryNumber };
+            },
+            groupBy: async () => [],
+            count: async () => 0,
+        },
+    };
+    db.$transaction = async (fn) => fn(db);
+    return db;
+}
+describe('public form endpoints', () => {
+    beforeEach(() => {
+        process.env.CMS_SECRET = SECRET;
+        process.env.ACTUATE_DISABLE_RATE_LIMIT = '1';
+        initDB(createMockDB());
+    });
+    afterAll(() => {
+        delete process.env.ACTUATE_DISABLE_RATE_LIMIT;
+    });
+    it('serves a public, embeddable schema with the honeypot stripped', async () => {
+        const handler = handleActuateAPI({ prismaClient: createMockDB() });
+        const res = await handler(new Request('https://example.com/api/cms/public/forms/contact-us', {
+            headers: { origin: 'https://embed.site' },
+        }));
+        expect(res.status).toBe(200);
+        expect(res.headers.get('access-control-allow-origin')).toBe('https://embed.site');
+        const body = (await res.json());
+        expect(body.data.slug).toBe('contact-us');
+        expect(body.data.submitPath).toBe('/api/cms/public/forms/contact-us/submit');
+        expect(body.data.fields.map((f) => f.key)).toEqual(['name', 'email']);
+        expect(body.data.spam.honeypotFieldKey).toBe('hp');
+    });
+    it('returns 404 for an unknown form', async () => {
+        const handler = handleActuateAPI({ prismaClient: createMockDB() });
+        const res = await handler(new Request('https://example.com/api/cms/public/forms/missing'));
+        expect(res.status).toBe(404);
+    });
+    it('answers a CORS preflight with 204', async () => {
+        const handler = handleActuateAPI({ prismaClient: createMockDB() });
+        const res = await handler(new Request('https://example.com/api/cms/public/forms/contact-us/submit', {
+            method: 'OPTIONS',
+            headers: { origin: 'https://embed.site' },
+        }));
+        expect(res.status).toBe(204);
+        expect(res.headers.get('access-control-allow-methods')).toContain('POST');
+    });
+    it('accepts a valid JSON submission and returns a confirmation', async () => {
+        const db = createMockDB();
+        initDB(db);
+        const handler = handleActuateAPI({ prismaClient: db });
+        const res = await handler(new Request('https://example.com/api/cms/public/forms/contact-us/submit', {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ fields: { name: 'Ada', email: 'ada@calc.io' } }),
+        }));
+        expect(res.status).toBe(201);
+        const body = (await res.json());
+        expect(body.data.success).toBe(true);
+        expect(body.data.entryNumber).toBe(8);
+        expect(body.data.confirmation).toEqual({ type: 'message', message: 'Got it!' });
+        expect(db.created[0].senderEmail).toBe('ada@calc.io');
+    });
+    it('rejects an invalid submission with a 422 and field errors', async () => {
+        const db = createMockDB();
+        initDB(db);
+        const handler = handleActuateAPI({ prismaClient: db });
+        const res = await handler(new Request('https://example.com/api/cms/public/forms/contact-us/submit', {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ fields: { name: '', email: 'bad' } }),
+        }));
+        expect(res.status).toBe(422);
+        const body = (await res.json());
+        expect(body.code).toBe('VALIDATION_ERROR');
+        expect(body.details.length).toBeGreaterThan(0);
+    });
+});
+//# sourceMappingURL=public-forms.test.js.map

package/dist/__tests__/api/public-forms.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-forms.test.js","sourceRoot":"","sources":["../../../src/__tests__/api/public-forms.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,MAAM,GAAG,yCAAyC,CAAA;AAExD,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,UAAU,EAAE,OAAO;IACnB,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;IAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;IAC/C,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,QAAQ;QAChB,qBAAqB,EAAE,IAAI;QAC3B,cAAc,EAAE,SAAS;QACzB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;YACnF,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;YACtF,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;SAC9F;KACF;CACF,CAAA;AAED,SAAS,YAAY;IACnB,MAAM,OAAO,GAAU,EAAE,CAAA;IACzB,MAAM,EAAE,GAAQ;QACd,OAAO;QACP,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE;QAC1D,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE;YACR,SAAS,EAAE,KAAK,EAAE,IAAsE,EAAE,EAAE;gBAC1F,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;gBAC/B,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAA;gBAC7C,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAO,IAAI,CAAA;gBAC1D,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAA;gBAClD,OAAO,QAAQ,CAAA;YACjB,CAAC;SACF;QACD,cAAc,EAAE;YACd,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClB,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAA;YACvD,CAAC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACvB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;SACrB;KACF,CAAA;IACD,EAAE,CAAC,YAAY,GAAG,KAAK,EAAE,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3C,OAAO,EAAE,CAAA;AACX,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAA;QAC/B,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,GAAG,CAAA;QAC5C,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,GAAG,EAAE;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,qDAAqD,EAAE;YACjE,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;SAC1C,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAEjF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QAC1E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,kDAAkD,CAAC,CAAC,CAAA;QAC1F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;SAC1C,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;SACxE,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;SAC7D,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsD,CAAA;QACpF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/forms/notify.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=notify.test.d.ts.map

package/dist/__tests__/forms/notify.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/forms/notify.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/forms/notify.test.js

@@ -0,0 +1,114 @@
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+const sendMock = vi.fn(async (_opts) => { });
+const configHolder = { current: { platform: { email: { send: sendMock } } } };
+vi.mock('../../config/runtime.js', () => ({
+    getActuateConfig: () => configHolder.current,
+}));
+import { buildNotificationEmail, buildAutoresponderEmail, sendFormNotifications, } from '../../forms/notify.js';
+function field(overrides) {
+    return {
+        id: 'f',
+        label: 'Label',
+        key: 'key',
+        type: 'text',
+        required: false,
+        sortOrder: 0,
+        ...overrides,
+    };
+}
+function ctx(overrides = {}) {
+    return {
+        formId: 'form_1',
+        formName: 'Contact Us',
+        entryNumber: 42,
+        submittedAt: '2026-01-01T00:00:00.000Z',
+        fields: [
+            field({ key: 'name', label: 'Name', type: 'text' }),
+            field({ key: 'email', label: 'Email', type: 'email' }),
+            field({ key: 'message', label: 'Message', type: 'textarea' }),
+        ],
+        data: { name: 'Ada Lovelace', email: 'ada@calc.io', message: 'Hello there' },
+        senderName: 'Ada Lovelace',
+        senderEmail: 'ada@calc.io',
+        ...overrides,
+    };
+}
+const baseSettings = { enabled: true, recipients: ['ops@example.com'] };
+describe('buildNotificationEmail', () => {
+    it('renders subject/message templates with placeholders and a fields table', () => {
+        const email = buildNotificationEmail({
+            ...baseSettings,
+            subjectTemplate: 'New {{formName}} entry {{entryNumber}}',
+            messageTemplate: 'From {{name}} <{{email}}>',
+        }, ctx());
+        expect(email.subject).toBe('New Contact Us entry #00042');
+        expect(email.html).toContain('From Ada Lovelace');
+        expect(email.html).toContain('Ada Lovelace');
+        expect(email.html).toContain('Hello there');
+        expect(email.text).toContain('Name: Ada Lovelace');
+    });
+    it('escapes HTML in field values to prevent injection', () => {
+        const email = buildNotificationEmail(baseSettings, ctx({ data: { name: '<script>alert(1)</script>', email: 'x@y.z', message: 'hi' } }));
+        expect(email.html).not.toContain('<script>');
+        expect(email.html).toContain('&lt;script&gt;');
+    });
+    it('hides sensitive fields when excludeSensitiveFields is set', () => {
+        const email = buildNotificationEmail({ ...baseSettings, excludeSensitiveFields: true }, ctx({
+            fields: [field({ key: 'ssn', label: 'SSN', type: 'text', piiClassification: 'high' })],
+            data: { ssn: '123-45-6789' },
+        }));
+        expect(email.html).not.toContain('123-45-6789');
+        expect(email.html).toContain('[hidden]');
+    });
+    it('omits the fields table when includeFields is false', () => {
+        const email = buildNotificationEmail({ ...baseSettings, includeFields: false }, ctx());
+        expect(email.html).not.toContain('Hello there');
+    });
+});
+describe('buildAutoresponderEmail', () => {
+    it('uses a default thank-you body and personalizes the name', () => {
+        const auto = buildAutoresponderEmail({ ...baseSettings, autoresponderEnabled: true }, ctx());
+        expect(auto.subject).toBe('We received your submission');
+        expect(auto.html).toContain('Ada Lovelace');
+    });
+});
+describe('sendFormNotifications', () => {
+    beforeEach(() => {
+        sendMock.mockClear();
+        configHolder.current = { platform: { email: { send: sendMock } } };
+    });
+    it('sends one email per recipient with a resolved reply-to', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, recipients: ['a@x.com', 'b@x.com'], replyToFieldKey: 'email' }, ctx());
+        expect(result.notified).toBe(2);
+        expect(sendMock).toHaveBeenCalledTimes(2);
+        expect(sendMock.mock.calls[0][0]).toMatchObject({ to: 'a@x.com', replyTo: 'ada@calc.io' });
+    });
+    it('skips invalid recipient addresses', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, recipients: ['valid@x.com', 'not-an-email'] }, ctx());
+        expect(result.notified).toBe(1);
+        expect(sendMock).toHaveBeenCalledTimes(1);
+    });
+    it('sends an autoresponder to the submitter when enabled', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, autoresponderEnabled: true, autoresponderEmailFieldKey: 'email' }, ctx());
+        expect(result.autoresponded).toBe(true);
+        // 1 admin notification + 1 autoresponder
+        expect(sendMock).toHaveBeenCalledTimes(2);
+        expect(sendMock.mock.calls.some((c) => c[0].to === 'ada@calc.io')).toBe(true);
+    });
+    it('no-ops when notifications are disabled', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, enabled: false }, ctx());
+        expect(result.skippedReason).toBe('notifications-disabled');
+        expect(sendMock).not.toHaveBeenCalled();
+    });
+    it('no-ops when no email adapter is configured', async () => {
+        configHolder.current = { platform: {} };
+        const result = await sendFormNotifications(baseSettings, ctx());
+        expect(result.skippedReason).toBe('no-email-adapter');
+    });
+    it('continues past a failing recipient without throwing', async () => {
+        sendMock.mockRejectedValueOnce(new Error('smtp down'));
+        const result = await sendFormNotifications({ ...baseSettings, recipients: ['a@x.com', 'b@x.com'] }, ctx());
+        expect(result.notified).toBe(1);
+    });
+});
+//# sourceMappingURL=notify.test.js.map

package/dist/__tests__/forms/notify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.test.js","sourceRoot":"","sources":["../../../src/__tests__/forms/notify.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAE7D,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAuC,EAAE,EAAE,GAAE,CAAC,CAAC,CAAA;AAC7E,MAAM,YAAY,GAAqB,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAA;AAE/F,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,gBAAgB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO;CAC7C,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,uBAAuB,CAAA;AAG9B,SAAS,KAAK,CAAC,SAA6B;IAC1C,OAAO;QACL,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,CAAC;QACZ,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,SAAS,GAAG,CAAC,YAA6C,EAAE;IAC1D,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,YAAY;QACtB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,0BAA0B;QACvC,MAAM,EAAE;YACN,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACnD,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACtD,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC9D;QACD,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE;QAC5E,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,aAAa;QAC1B,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,YAAY,GAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAA;AAEjG,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG,sBAAsB,CAClC;YACE,GAAG,YAAY;YACf,eAAe,EAAE,wCAAwC;YACzD,eAAe,EAAE,2BAA2B;SAC7C,EACD,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QACzD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,sBAAsB,CAClC,YAAY,EACZ,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CACpF,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAG,sBAAsB,CAClC,EAAE,GAAG,YAAY,EAAE,sBAAsB,EAAE,IAAI,EAAE,EACjD,GAAG,CAAC;YACF,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;YACtF,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;SAC7B,CAAC,CACH,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,KAAK,GAAG,sBAAsB,CAAC,EAAE,GAAG,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,uBAAuB,CAAC,EAAE,GAAG,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,CAAC,SAAS,EAAE,CAAA;QACpB,YAAY,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,EACjF,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,EAChE,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,EACpF,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,yCAAyC;QACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,YAAY,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,QAAQ,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;QACtD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EACvD,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/forms/spam.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=spam.test.d.ts.map

package/dist/__tests__/forms/spam.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spam.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/forms/spam.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/forms/spam.test.js

@@ -0,0 +1,115 @@
+import { describe, expect, it } from 'vitest';
+import { scoreSubmissionSpam } from '../../forms/spam.js';
+function field(overrides) {
+    return {
+        id: 'f',
+        label: 'Label',
+        key: 'key',
+        type: 'text',
+        required: false,
+        sortOrder: 0,
+        ...overrides,
+    };
+}
+describe('scoreSubmissionSpam', () => {
+    it('returns clean when no strategies trigger', () => {
+        const result = scoreSubmissionSpam({
+            fields: [field({ key: 'name' })],
+            rawValues: { name: 'Ada' },
+        });
+        expect(result.status).toBe('clean');
+        expect(result.reasons).toHaveLength(0);
+    });
+    it('flags a populated honeypot regardless of enabled strategies', () => {
+        const result = scoreSubmissionSpam({
+            fields: [field({ key: 'name' }), field({ key: 'website', type: 'honeypot' })],
+            rawValues: { name: 'Ada', website: 'http://spam.example' },
+        });
+        expect(result.status).toBe('spam');
+        expect(result.reasons).toContain('honeypot');
+    });
+    it('ignores an empty honeypot', () => {
+        const result = scoreSubmissionSpam({
+            fields: [field({ key: 'hp', type: 'honeypot' })],
+            rawValues: { hp: '' },
+        });
+        expect(result.status).toBe('clean');
+    });
+    it('flags submissions faster than the minimum submit time', () => {
+        const result = scoreSubmissionSpam({
+            fields: [field({ key: 'name' })],
+            rawValues: { name: 'Ada' },
+            settings: { strategies: ['timeToSubmit'], minSubmitSeconds: 3 },
+            elapsedMs: 500,
+        });
+        expect(result.status).toBe('spam');
+        expect(result.reasons).toContain('too_fast');
+    });
+    it('does not flag a normal-speed submission', () => {
+        const result = scoreSubmissionSpam({
+            fields: [field({ key: 'name' })],
+            rawValues: { name: 'Ada' },
+            settings: { strategies: ['timeToSubmit'], minSubmitSeconds: 3 },
+            elapsedMs: 8000,
+        });
+        expect(result.status).toBe('clean');
+    });
+    it('blocks emails and domains on the blocklist', () => {
+        const byEmail = scoreSubmissionSpam({
+            fields: [field({ key: 'email', type: 'email' })],
+            rawValues: { email: 'bad@evil.com' },
+            settings: { strategies: ['blocklist'], blockedEmails: ['bad@evil.com'] },
+            senderEmail: 'bad@evil.com',
+        });
+        expect(byEmail.reasons).toContain('blocked_email');
+        const byDomain = scoreSubmissionSpam({
+            fields: [field({ key: 'email', type: 'email' })],
+            rawValues: { email: 'x@evil.com' },
+            settings: { strategies: ['blocklist'], blockedDomains: ['evil.com'] },
+            senderEmail: 'x@evil.com',
+        });
+        expect(byDomain.reasons).toContain('blocked_domain');
+    });
+    it('flags blocked keywords in any text value', () => {
+        const result = scoreSubmissionSpam({
+            fields: [field({ key: 'message', type: 'textarea' })],
+            rawValues: { message: 'Cheap V1AGRA available now' },
+            settings: { strategies: ['keyword'], blockedKeywords: ['viagra'] },
+        });
+        // case-insensitive substring; 'viagra' won't match 'v1agra', so this stays clean
+        expect(result.status).toBe('clean');
+        const hit = scoreSubmissionSpam({
+            fields: [field({ key: 'message', type: 'textarea' })],
+            rawValues: { message: 'Buy cheap loans today' },
+            settings: { strategies: ['keyword'], blockedKeywords: ['cheap loans'] },
+        });
+        expect(hit.reasons).toContain('blocked_keyword');
+    });
+    it('enforces a domain allowlist against the origin', () => {
+        const blocked = scoreSubmissionSpam({
+            fields: [field({ key: 'name' })],
+            rawValues: { name: 'Ada' },
+            settings: { strategies: ['domainAllowlist'], allowedDomains: ['mysite.com'] },
+            origin: 'https://evil.example',
+        });
+        expect(blocked.reasons).toContain('origin_not_allowed');
+        const allowed = scoreSubmissionSpam({
+            fields: [field({ key: 'name' })],
+            rawValues: { name: 'Ada' },
+            settings: { strategies: ['domainAllowlist'], allowedDomains: ['mysite.com'] },
+            origin: 'https://www.mysite.com',
+        });
+        expect(allowed.status).toBe('clean');
+    });
+    it('merges site-wide default strategies with per-form ones', () => {
+        const result = scoreSubmissionSpam({
+            fields: [field({ key: 'email', type: 'email' })],
+            rawValues: { email: 'x@evil.com' },
+            defaultStrategies: ['blocklist'],
+            settings: { blockedDomains: ['evil.com'] },
+            senderEmail: 'x@evil.com',
+        });
+        expect(result.status).toBe('spam');
+    });
+});
+//# sourceMappingURL=spam.test.js.map

package/dist/__tests__/forms/spam.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spam.test.js","sourceRoot":"","sources":["../../../src/__tests__/forms/spam.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAGzD,SAAS,KAAK,CAAC,SAA6B;IAC1C,OAAO;QACL,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,CAAC;QACZ,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAChC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SAC3B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7E,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE;SAC3D,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAChD,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;SACtB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAChC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YAC1B,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE;YAC/D,SAAS,EAAE,GAAG;SACf,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAChC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YAC1B,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE;YAC/D,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,SAAS,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;YACpC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,cAAc,CAAC,EAAE;YACxE,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAA;QACF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QAElD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;YACnC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,SAAS,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;YAClC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC,UAAU,CAAC,EAAE;YACrE,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAA;QACF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACrD,SAAS,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE;YACpD,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC,QAAQ,CAAC,EAAE;SACnE,CAAC,CAAA;QACF,iFAAiF;QACjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEnC,MAAM,GAAG,GAAG,mBAAmB,CAAC;YAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACrD,SAAS,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;YAC/C,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC,aAAa,CAAC,EAAE;SACxE,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAChC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YAC1B,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,YAAY,CAAC,EAAE;YAC7E,MAAM,EAAE,sBAAsB;SAC/B,CAAC,CAAA;QACF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAChC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YAC1B,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,YAAY,CAAC,EAAE;YAC7E,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAA;QACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,SAAS,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;YAClC,iBAAiB,EAAE,CAAC,WAAW,CAAC;YAChC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,UAAU,CAAC,EAAE;YAC1C,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/forms/submission-files.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=submission-files.test.d.ts.map

package/dist/__tests__/forms/submission-files.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submission-files.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/forms/submission-files.test.ts"],"names":[],"mappings":""}