@actuate-media/cms-core 0.32.0 → 0.33.0

package/dist/__tests__/api/form-webhooks.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=form-webhooks.test.d.ts.map

package/dist/__tests__/api/form-webhooks.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-webhooks.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/api/form-webhooks.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/api/form-webhooks.test.js

@@ -0,0 +1,162 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+// Mock the SSRF-safe fetch so webhook "test" deliveries don't hit the network.
+const safeFetchMock = vi.hoisted(() => vi.fn());
+vi.mock('../../security/safe-fetch.js', () => ({
+    safeFetch: (...args) => safeFetchMock(...args),
+    SsrfBlockedError: class SsrfBlockedError extends Error {
+    },
+}));
+import { handleActuateAPI } from '../../api/index.js';
+import { createSession } from '../../auth/session.js';
+import { initDB } from '../../db.js';
+import { generateToken as generateCsrfToken } from '../../security/csrf.js';
+const SECRET = 'test-secret-for-form-webhooks-1234567890abcd';
+const FORM_ROW = {
+    id: 'form-1',
+    title: 'Contact Us',
+    slug: 'contact-us',
+    collection: 'forms',
+    createdById: 'admin-1',
+    createdAt: new Date('2026-01-01T00:00:00.000Z'),
+    updatedAt: new Date('2026-01-02T00:00:00.000Z'),
+    data: {
+        name: 'Contact Us',
+        slug: 'contact-us',
+        status: 'active',
+        activeSchemaVersionId: null,
+        fields: [
+            { id: '1', key: 'name', label: 'Name', type: 'text', required: true, sortOrder: 0 },
+            { id: '2', key: 'email', label: 'Email', type: 'email', required: true, sortOrder: 1 },
+        ],
+    },
+};
+function createMockDB() {
+    const webhooks = [];
+    let counter = 0;
+    const db = {
+        webhooks,
+        session: { findUnique: async () => ({ revokedAt: null }) },
+        user: {},
+        media: {},
+        auditLog: { create: async () => ({}) },
+        document: {
+            findFirst: async (args) => {
+                const where = args?.where ?? {};
+                if (where.collection !== 'forms')
+                    return null;
+                if (where.id && where.id !== 'form-1')
+                    return null;
+                if (where.slug && where.slug !== 'contact-us')
+                    return null;
+                return FORM_ROW;
+            },
+        },
+        formSubmission: { groupBy: async () => [], count: async () => 0 },
+        formWebhook: {
+            create: async ({ data }) => {
+                counter += 1;
+                const row = {
+                    id: `wh-${counter}`,
+                    createdAt: new Date(),
+                    updatedAt: new Date(),
+                    lastDeliveryAt: null,
+                    lastDeliveryStatus: null,
+                    ...data,
+                };
+                webhooks.push(row);
+                return row;
+            },
+            findMany: async ({ where }) => webhooks.filter((w) => w.formId === where.formId),
+            findUnique: async ({ where }) => webhooks.find((w) => w.id === where.id) ?? null,
+            update: async ({ where, data }) => {
+                const w = webhooks.find((x) => x.id === where.id);
+                Object.assign(w, data);
+                return w;
+            },
+            delete: async ({ where }) => {
+                const i = webhooks.findIndex((x) => x.id === where.id);
+                webhooks.splice(i, 1);
+                return {};
+            },
+        },
+    };
+    return db;
+}
+async function adminHeaders() {
+    const token = await createSession({ userId: 'admin-1', role: 'ADMIN', sessionId: 'sess-admin' }, { secret: SECRET });
+    const csrf = await generateCsrfToken();
+    return {
+        cookie: `actuate_session=${token}; actuate_csrf=${csrf}`,
+        'x-csrf-token': csrf,
+        'content-type': 'application/json',
+    };
+}
+describe('form webhook + notification endpoints', () => {
+    let db;
+    let handler;
+    beforeEach(() => {
+        process.env.CMS_SECRET = SECRET;
+        safeFetchMock.mockReset();
+        db = createMockDB();
+        initDB(db);
+        handler = handleActuateAPI({ prismaClient: db });
+    });
+    it('rejects unauthenticated webhook listing', async () => {
+        const res = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks'));
+        expect(res.status).toBe(401);
+    });
+    it('creates a webhook and returns the secret once, then masks it on list', async () => {
+        const headers = await adminHeaders();
+        const createRes = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ url: 'https://hooks.example.com/x', events: ['form.submitted'] }),
+        }));
+        expect(createRes.status).toBe(201);
+        const created = (await createRes.json());
+        expect(created.data.secret).toMatch(/^whsec_/);
+        expect(created.data.events).toEqual(['form.submitted']);
+        const listRes = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            headers: { cookie: headers.cookie },
+        }));
+        expect(listRes.status).toBe(200);
+        const list = (await listRes.json());
+        expect(list.data).toHaveLength(1);
+        expect(list.data[0].secret).toBeUndefined();
+    });
+    it('rejects an SSRF webhook URL with 400', async () => {
+        const headers = await adminHeaders();
+        const res = await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ url: 'http://localhost/hook' }),
+        }));
+        expect(res.status).toBe(400);
+    });
+    it('sends a test delivery through the webhook', async () => {
+        safeFetchMock.mockResolvedValue({ ok: true, status: 200, text: async () => '' });
+        const headers = await adminHeaders();
+        const created = (await (await handler(new Request('https://example.com/api/cms/forms/form-1/webhooks', {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ url: 'https://hooks.example.com/x' }),
+        }))).json());
+        const testRes = await handler(new Request(`https://example.com/api/cms/forms/form-1/webhooks/${created.data.id}/test`, {
+            method: 'POST',
+            headers,
+        }));
+        expect(testRes.status).toBe(200);
+        const body = (await testRes.json());
+        expect(body.data.ok).toBe(true);
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+    });
+    it('returns 400 from the test-notification route when no recipients are configured', async () => {
+        const headers = await adminHeaders();
+        const res = await handler(new Request('https://example.com/api/cms/forms/form-1/notifications/test', {
+            method: 'POST',
+            headers,
+        }));
+        expect(res.status).toBe(400);
+    });
+});
+//# sourceMappingURL=form-webhooks.test.js.map

package/dist/__tests__/api/form-webhooks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-webhooks.test.js","sourceRoot":"","sources":["../../../src/__tests__/api/form-webhooks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7D,+EAA+E;AAC/E,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AAC/C,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACrD,gBAAgB,EAAE,MAAM,gBAAiB,SAAQ,KAAK;KAAG;CAC1D,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE3E,MAAM,MAAM,GAAG,8CAA8C,CAAA;AAE7D,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,UAAU,EAAE,OAAO;IACnB,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;IAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;IAC/C,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,QAAQ;QAChB,qBAAqB,EAAE,IAAI;QAC3B,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;YACnF,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;SACvF;KACF;CACF,CAAA;AAED,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAU,EAAE,CAAA;IAC1B,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,MAAM,EAAE,GAAQ;QACd,QAAQ;QACR,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE;QAC1D,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE;QACtC,QAAQ,EAAE;YACR,SAAS,EAAE,KAAK,EAAE,IAAsE,EAAE,EAAE;gBAC1F,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;gBAC/B,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAA;gBAC7C,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAA;gBAClD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAO,IAAI,CAAA;gBAC1D,OAAO,QAAQ,CAAA;YACjB,CAAC;SACF;QACD,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE;QACjE,WAAW,EAAE;YACX,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC9B,OAAO,IAAI,CAAC,CAAA;gBACZ,MAAM,GAAG,GAAG;oBACV,EAAE,EAAE,MAAM,OAAO,EAAE;oBACnB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,cAAc,EAAE,IAAI;oBACpB,kBAAkB,EAAE,IAAI;oBACxB,GAAG,IAAI;iBACR,CAAA;gBACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAClB,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;YACrF,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI;YACrF,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBACtB,OAAO,CAAC,CAAA;YACV,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBACtD,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACrB,OAAO,EAAE,CAAA;YACX,CAAC;SACF;KACF,CAAA;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAC7D,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAA;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAA;IACtC,OAAO;QACL,MAAM,EAAE,mBAAmB,KAAK,kBAAkB,IAAI,EAAE;QACxD,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,kBAAkB;KACnC,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,EAAmC,CAAA;IACvC,IAAI,OAA4C,CAAA;IAEhD,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAA;QAC/B,aAAa,CAAC,SAAS,EAAE,CAAA;QACzB,EAAE,GAAG,YAAY,EAAE,CAAA;QACnB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,mDAAmD,CAAC,CAAC,CAAA;QAC3F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;SACzF,CAAC,CACH,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAkB,CAAA;QACzD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACpC,CAAC,CACH,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAoB,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC;SACvD,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAChF,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,OAAO,GAAG,CAAC,MAAM,CACrB,MAAM,OAAO,CACX,IAAI,OAAO,CAAC,mDAAmD,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC;SAC7D,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CAA6B,CAAA;QAErC,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,OAAO,CAAC,qDAAqD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;YACvF,MAAM,EAAE,MAAM;YACd,OAAO;SACR,CAAC,CACH,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA8B,CAAA;QAChE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,6DAA6D,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO;SACR,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/forms/notify.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=notify.test.d.ts.map

package/dist/__tests__/forms/notify.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/forms/notify.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/forms/notify.test.js

@@ -0,0 +1,114 @@
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+const sendMock = vi.fn(async (_opts) => { });
+const configHolder = { current: { platform: { email: { send: sendMock } } } };
+vi.mock('../../config/runtime.js', () => ({
+    getActuateConfig: () => configHolder.current,
+}));
+import { buildNotificationEmail, buildAutoresponderEmail, sendFormNotifications, } from '../../forms/notify.js';
+function field(overrides) {
+    return {
+        id: 'f',
+        label: 'Label',
+        key: 'key',
+        type: 'text',
+        required: false,
+        sortOrder: 0,
+        ...overrides,
+    };
+}
+function ctx(overrides = {}) {
+    return {
+        formId: 'form_1',
+        formName: 'Contact Us',
+        entryNumber: 42,
+        submittedAt: '2026-01-01T00:00:00.000Z',
+        fields: [
+            field({ key: 'name', label: 'Name', type: 'text' }),
+            field({ key: 'email', label: 'Email', type: 'email' }),
+            field({ key: 'message', label: 'Message', type: 'textarea' }),
+        ],
+        data: { name: 'Ada Lovelace', email: 'ada@calc.io', message: 'Hello there' },
+        senderName: 'Ada Lovelace',
+        senderEmail: 'ada@calc.io',
+        ...overrides,
+    };
+}
+const baseSettings = { enabled: true, recipients: ['ops@example.com'] };
+describe('buildNotificationEmail', () => {
+    it('renders subject/message templates with placeholders and a fields table', () => {
+        const email = buildNotificationEmail({
+            ...baseSettings,
+            subjectTemplate: 'New {{formName}} entry {{entryNumber}}',
+            messageTemplate: 'From {{name}} <{{email}}>',
+        }, ctx());
+        expect(email.subject).toBe('New Contact Us entry #00042');
+        expect(email.html).toContain('From Ada Lovelace');
+        expect(email.html).toContain('Ada Lovelace');
+        expect(email.html).toContain('Hello there');
+        expect(email.text).toContain('Name: Ada Lovelace');
+    });
+    it('escapes HTML in field values to prevent injection', () => {
+        const email = buildNotificationEmail(baseSettings, ctx({ data: { name: '<script>alert(1)</script>', email: 'x@y.z', message: 'hi' } }));
+        expect(email.html).not.toContain('<script>');
+        expect(email.html).toContain('&lt;script&gt;');
+    });
+    it('hides sensitive fields when excludeSensitiveFields is set', () => {
+        const email = buildNotificationEmail({ ...baseSettings, excludeSensitiveFields: true }, ctx({
+            fields: [field({ key: 'ssn', label: 'SSN', type: 'text', piiClassification: 'high' })],
+            data: { ssn: '123-45-6789' },
+        }));
+        expect(email.html).not.toContain('123-45-6789');
+        expect(email.html).toContain('[hidden]');
+    });
+    it('omits the fields table when includeFields is false', () => {
+        const email = buildNotificationEmail({ ...baseSettings, includeFields: false }, ctx());
+        expect(email.html).not.toContain('Hello there');
+    });
+});
+describe('buildAutoresponderEmail', () => {
+    it('uses a default thank-you body and personalizes the name', () => {
+        const auto = buildAutoresponderEmail({ ...baseSettings, autoresponderEnabled: true }, ctx());
+        expect(auto.subject).toBe('We received your submission');
+        expect(auto.html).toContain('Ada Lovelace');
+    });
+});
+describe('sendFormNotifications', () => {
+    beforeEach(() => {
+        sendMock.mockClear();
+        configHolder.current = { platform: { email: { send: sendMock } } };
+    });
+    it('sends one email per recipient with a resolved reply-to', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, recipients: ['a@x.com', 'b@x.com'], replyToFieldKey: 'email' }, ctx());
+        expect(result.notified).toBe(2);
+        expect(sendMock).toHaveBeenCalledTimes(2);
+        expect(sendMock.mock.calls[0][0]).toMatchObject({ to: 'a@x.com', replyTo: 'ada@calc.io' });
+    });
+    it('skips invalid recipient addresses', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, recipients: ['valid@x.com', 'not-an-email'] }, ctx());
+        expect(result.notified).toBe(1);
+        expect(sendMock).toHaveBeenCalledTimes(1);
+    });
+    it('sends an autoresponder to the submitter when enabled', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, autoresponderEnabled: true, autoresponderEmailFieldKey: 'email' }, ctx());
+        expect(result.autoresponded).toBe(true);
+        // 1 admin notification + 1 autoresponder
+        expect(sendMock).toHaveBeenCalledTimes(2);
+        expect(sendMock.mock.calls.some((c) => c[0].to === 'ada@calc.io')).toBe(true);
+    });
+    it('no-ops when notifications are disabled', async () => {
+        const result = await sendFormNotifications({ ...baseSettings, enabled: false }, ctx());
+        expect(result.skippedReason).toBe('notifications-disabled');
+        expect(sendMock).not.toHaveBeenCalled();
+    });
+    it('no-ops when no email adapter is configured', async () => {
+        configHolder.current = { platform: {} };
+        const result = await sendFormNotifications(baseSettings, ctx());
+        expect(result.skippedReason).toBe('no-email-adapter');
+    });
+    it('continues past a failing recipient without throwing', async () => {
+        sendMock.mockRejectedValueOnce(new Error('smtp down'));
+        const result = await sendFormNotifications({ ...baseSettings, recipients: ['a@x.com', 'b@x.com'] }, ctx());
+        expect(result.notified).toBe(1);
+    });
+});
+//# sourceMappingURL=notify.test.js.map

package/dist/__tests__/forms/notify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.test.js","sourceRoot":"","sources":["../../../src/__tests__/forms/notify.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAE7D,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAuC,EAAE,EAAE,GAAE,CAAC,CAAC,CAAA;AAC7E,MAAM,YAAY,GAAqB,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAA;AAE/F,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,gBAAgB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO;CAC7C,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,uBAAuB,CAAA;AAG9B,SAAS,KAAK,CAAC,SAA6B;IAC1C,OAAO;QACL,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,CAAC;QACZ,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,SAAS,GAAG,CAAC,YAA6C,EAAE;IAC1D,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,YAAY;QACtB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,0BAA0B;QACvC,MAAM,EAAE;YACN,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACnD,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACtD,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC9D;QACD,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE;QAC5E,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,aAAa;QAC1B,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,YAAY,GAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAA;AAEjG,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG,sBAAsB,CAClC;YACE,GAAG,YAAY;YACf,eAAe,EAAE,wCAAwC;YACzD,eAAe,EAAE,2BAA2B;SAC7C,EACD,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QACzD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,sBAAsB,CAClC,YAAY,EACZ,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CACpF,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAG,sBAAsB,CAClC,EAAE,GAAG,YAAY,EAAE,sBAAsB,EAAE,IAAI,EAAE,EACjD,GAAG,CAAC;YACF,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;YACtF,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;SAC7B,CAAC,CACH,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,KAAK,GAAG,sBAAsB,CAAC,EAAE,GAAG,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,uBAAuB,CAAC,EAAE,GAAG,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,CAAC,SAAS,EAAE,CAAA;QACpB,YAAY,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,EACjF,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,EAChE,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,EACpF,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,yCAAyC;QACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,YAAY,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QACvC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,QAAQ,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;QACtD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EACvD,GAAG,EAAE,CACN,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/forms/webhooks.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=webhooks.test.d.ts.map

package/dist/__tests__/forms/webhooks.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/forms/webhooks.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/forms/webhooks.test.js

@@ -0,0 +1,203 @@
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+const dbHolder = { current: {} };
+vi.mock('../../db.js', () => ({ getDB: () => dbHolder.current }));
+vi.mock('../../security/audit.js', () => ({ logEvent: vi.fn(async () => { }) }));
+// Identity secret storage so the "encrypted" value equals the plaintext in tests.
+vi.mock('../../security/secret-storage.js', () => ({
+    encryptSecret: async (s) => s,
+    decryptSecret: async (s) => s,
+}));
+const { SsrfBlockedError, safeFetchMock } = vi.hoisted(() => {
+    class SsrfBlockedError extends Error {
+    }
+    return { SsrfBlockedError, safeFetchMock: vi.fn() };
+});
+vi.mock('../../security/safe-fetch.js', () => ({
+    safeFetch: (...args) => safeFetchMock(...args),
+    SsrfBlockedError,
+}));
+import { createFormWebhook, listFormWebhooks, updateFormWebhook, deleteFormWebhook, dispatchFormWebhooks, testFormWebhook, FormWebhookError, } from '../../forms/webhooks.js';
+import { signPayload } from '../../webhooks/index.js';
+const ctx = { userId: 'u1', role: 'admin', locale: 'en', db: {} };
+function fakeDb() {
+    const rows = [];
+    return {
+        rows,
+        formWebhook: {
+            create: async ({ data }) => {
+                const row = {
+                    id: `wh_${rows.length + 1}`,
+                    createdAt: new Date(),
+                    updatedAt: new Date(),
+                    lastDeliveryAt: null,
+                    lastDeliveryStatus: null,
+                    ...data,
+                };
+                rows.push(row);
+                return row;
+            },
+            findMany: async ({ where }) => rows.filter((r) => r.formId === where.formId &&
+                (where.enabled === undefined || r.enabled === where.enabled)),
+            findUnique: async ({ where }) => rows.find((r) => r.id === where.id) ?? null,
+            update: async ({ where, data }) => {
+                const r = rows.find((x) => x.id === where.id);
+                Object.assign(r, data);
+                return r;
+            },
+            delete: async ({ where }) => {
+                const i = rows.findIndex((x) => x.id === where.id);
+                rows.splice(i, 1);
+                return {};
+            },
+        },
+    };
+}
+function httpResponse(status) {
+    return { ok: status >= 200 && status < 300, status, text: async () => '' };
+}
+beforeEach(() => {
+    dbHolder.current = fakeDb();
+    safeFetchMock.mockReset();
+});
+describe('form webhook CRUD', () => {
+    it('creates a webhook, auto-generates a signing secret, and returns it once', async () => {
+        const wh = await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x' });
+        expect(wh.secret).toMatch(/^whsec_/);
+        expect(wh.events).toEqual(['form.submitted']);
+        expect(wh.enabled).toBe(true);
+    });
+    it('masks the secret in list responses', async () => {
+        await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x', secret: 's3cret' });
+        const list = await listFormWebhooks('form_1');
+        expect(list).toHaveLength(1);
+        expect(list[0].secret).toBeUndefined();
+    });
+    it('rejects SSRF / private webhook URLs', async () => {
+        await expect(createFormWebhook(ctx, 'form_1', { url: 'http://localhost:3000/hook' })).rejects.toBeInstanceOf(FormWebhookError);
+        await expect(createFormWebhook(ctx, 'form_1', { url: 'http://169.254.169.254/latest' })).rejects.toBeInstanceOf(FormWebhookError);
+    });
+    it('clamps retryCount and normalizes events on update', async () => {
+        const wh = await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x' });
+        const updated = await updateFormWebhook(ctx, wh.id, {
+            retryCount: 99,
+            events: ['form.submitted', 'bogus'],
+        });
+        expect(updated.retryCount).toBe(10);
+        expect(updated.events).toEqual(['form.submitted']);
+    });
+    it('deletes a webhook', async () => {
+        const wh = await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x' });
+        await deleteFormWebhook(ctx, wh.id);
+        expect(await listFormWebhooks('form_1')).toHaveLength(0);
+    });
+});
+describe('dispatchFormWebhooks', () => {
+    it('delivers a signed payload to matching enabled webhooks', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            secret: 'shh',
+            events: ['form.submitted'],
+        });
+        const res = await dispatchFormWebhooks('form_1', {
+            event: 'form.submitted',
+            formId: 'form_1',
+            submissionId: 'sub_1',
+            data: { name: 'Ada' },
+        });
+        expect(res).toEqual({ matched: 1, delivered: 1 });
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+        const [url, opts] = safeFetchMock.mock.calls[0];
+        expect(url).toBe('https://hooks.example.com/x');
+        const expectedSig = await signPayload(opts.body, 'shh');
+        expect(opts.headers['X-Actuate-Signature']).toBe(expectedSig);
+        expect(opts.headers['X-Actuate-Event']).toBe('form.submitted');
+        expect(dbHolder.current.rows[0].lastDeliveryStatus).toBe('success');
+    });
+    it('ignores webhooks not subscribed to the event', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            events: ['form.entry.starred'],
+        });
+        const res = await dispatchFormWebhooks('form_1', {
+            event: 'form.submitted',
+            formId: 'form_1',
+        });
+        expect(res.matched).toBe(0);
+        expect(safeFetchMock).not.toHaveBeenCalled();
+    });
+    it('does not deliver to disabled webhooks', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            enabled: false,
+        });
+        const res = await dispatchFormWebhooks('form_1', { event: 'form.submitted', formId: 'form_1' });
+        expect(res.matched).toBe(0);
+    });
+    it('stops retrying on a 4xx response', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(400));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            retryCount: 3,
+        });
+        const res = await dispatchFormWebhooks('form_1', { event: 'form.submitted', formId: 'form_1' });
+        expect(res.delivered).toBe(0);
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+        expect(dbHolder.current.rows[0].lastDeliveryStatus).toContain('failed');
+    });
+    it('retries on a 5xx response and succeeds with backoff', async () => {
+        // Fire backoff timers immediately so the test doesn't wait real seconds.
+        const timeoutSpy = vi.spyOn(global, 'setTimeout').mockImplementation(((fn) => {
+            fn();
+            return 0;
+        }));
+        try {
+            safeFetchMock
+                .mockResolvedValueOnce(httpResponse(503))
+                .mockResolvedValueOnce(httpResponse(200));
+            await createFormWebhook(ctx, 'form_1', {
+                url: 'https://hooks.example.com/x',
+                retryCount: 2,
+            });
+            const res = await dispatchFormWebhooks('form_1', {
+                event: 'form.submitted',
+                formId: 'form_1',
+            });
+            expect(res.delivered).toBe(1);
+            expect(safeFetchMock).toHaveBeenCalledTimes(2);
+        }
+        finally {
+            timeoutSpy.mockRestore();
+        }
+    });
+    it('treats an SSRF block as a permanent failure (no retry)', async () => {
+        safeFetchMock.mockRejectedValue(new SsrfBlockedError('blocked'));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            retryCount: 3,
+        });
+        const res = await dispatchFormWebhooks('form_1', { event: 'form.submitted', formId: 'form_1' });
+        expect(res.delivered).toBe(0);
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+    });
+});
+describe('testFormWebhook', () => {
+    it('sends a single sample delivery and records the result', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        const wh = await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            secret: 'shh',
+        });
+        const result = await testFormWebhook(ctx, wh.id);
+        expect(result.ok).toBe(true);
+        expect(result.attempts).toBe(1);
+        const [, opts] = safeFetchMock.mock.calls[0];
+        expect(JSON.parse(opts.body).data._test).toBe(true);
+    });
+    it('throws a 404 FormWebhookError for an unknown webhook', async () => {
+        await expect(testFormWebhook(ctx, 'missing')).rejects.toMatchObject({ status: 404 });
+    });
+});
+//# sourceMappingURL=webhooks.test.js.map

package/dist/__tests__/forms/webhooks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.test.js","sourceRoot":"","sources":["../../../src/__tests__/forms/webhooks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAE7D,MAAM,QAAQ,GAAqB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAClD,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AACjE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC/E,kFAAkF;AAClF,EAAE,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,aAAa,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;IACrC,aAAa,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;CACtC,CAAC,CAAC,CAAA;AAEH,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IAC1D,MAAM,gBAAiB,SAAQ,KAAK;KAAG;IACvC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAA;AACrD,CAAC,CAAC,CAAA;AACF,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACrD,gBAAgB;CACjB,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAGrD,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAS,EAAE,CAAA;AAEvF,SAAS,MAAM;IACb,MAAM,IAAI,GAAU,EAAE,CAAA;IACtB,OAAO;QACL,IAAI;QACJ,WAAW,EAAE;YACX,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC9B,MAAM,GAAG,GAAG;oBACV,EAAE,EAAE,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;oBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,cAAc,EAAE,IAAI;oBACpB,kBAAkB,EAAE,IAAI;oBACxB,GAAG,IAAI;iBACR,CAAA;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACd,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CACjC,IAAI,CAAC,MAAM,CACT,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBACzB,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAC/D;YACH,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI;YACjF,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBACtB,OAAO,CAAC,CAAA;YACV,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBAClD,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACjB,OAAO,EAAE,CAAA;YACX,CAAC;SACF;KACF,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAA;AAC5E,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,QAAQ,CAAC,OAAO,GAAG,MAAM,EAAE,CAAA;IAC3B,aAAa,CAAC,SAAS,EAAE,CAAA;AAC3B,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAA;QACzF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChG,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,CACV,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,4BAA4B,EAAE,CAAC,CACxE,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAA;QAC1C,MAAM,MAAM,CACV,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAA;QACzF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,CAAC,gBAAgB,EAAE,OAAc,CAAC;SAC3C,CAAC,CAAA;QACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAA;QACzF,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,CAAC,gBAAgB,CAAC;SAC3B,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE;YAC/C,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,OAAO;YACrB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACtB,CAAC,CAAA;QAEF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAE9C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QAC/C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC7D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC9D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,CAAC,oBAAoB,CAAC;SAC/B,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE;YAC/C,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,OAAO,EAAE,KAAK;SACf,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,UAAU,EAAE,CAAC;SACd,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,yEAAyE;QACzE,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAc,EAAE,EAAE;YACvF,EAAE,EAAE,CAAA;YACJ,OAAO,CAA6C,CAAA;QACtD,CAAC,CAAsB,CAAC,CAAA;QACxB,IAAI,CAAC;YACH,aAAa;iBACV,qBAAqB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;iBACxC,qBAAqB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;YAC3C,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;gBACrC,GAAG,EAAE,6BAA6B;gBAClC,UAAU,EAAE,CAAC;aACd,CAAC,CAAA;YACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE;gBAC/C,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;YACF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,WAAW,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,aAAa,CAAC,iBAAiB,CAAC,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAA;QAChE,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,UAAU,EAAE,CAAC;SACd,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YAChD,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAk/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAkQD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAugUzD"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA8/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAkQD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAuoUzD"}