@actuate-media/cms-core 0.32.0 → 0.34.0

package/dist/__tests__/forms/webhooks.test.js

@@ -0,0 +1,203 @@
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+const dbHolder = { current: {} };
+vi.mock('../../db.js', () => ({ getDB: () => dbHolder.current }));
+vi.mock('../../security/audit.js', () => ({ logEvent: vi.fn(async () => { }) }));
+// Identity secret storage so the "encrypted" value equals the plaintext in tests.
+vi.mock('../../security/secret-storage.js', () => ({
+    encryptSecret: async (s) => s,
+    decryptSecret: async (s) => s,
+}));
+const { SsrfBlockedError, safeFetchMock } = vi.hoisted(() => {
+    class SsrfBlockedError extends Error {
+    }
+    return { SsrfBlockedError, safeFetchMock: vi.fn() };
+});
+vi.mock('../../security/safe-fetch.js', () => ({
+    safeFetch: (...args) => safeFetchMock(...args),
+    SsrfBlockedError,
+}));
+import { createFormWebhook, listFormWebhooks, updateFormWebhook, deleteFormWebhook, dispatchFormWebhooks, testFormWebhook, FormWebhookError, } from '../../forms/webhooks.js';
+import { signPayload } from '../../webhooks/index.js';
+const ctx = { userId: 'u1', role: 'admin', locale: 'en', db: {} };
+function fakeDb() {
+    const rows = [];
+    return {
+        rows,
+        formWebhook: {
+            create: async ({ data }) => {
+                const row = {
+                    id: `wh_${rows.length + 1}`,
+                    createdAt: new Date(),
+                    updatedAt: new Date(),
+                    lastDeliveryAt: null,
+                    lastDeliveryStatus: null,
+                    ...data,
+                };
+                rows.push(row);
+                return row;
+            },
+            findMany: async ({ where }) => rows.filter((r) => r.formId === where.formId &&
+                (where.enabled === undefined || r.enabled === where.enabled)),
+            findUnique: async ({ where }) => rows.find((r) => r.id === where.id) ?? null,
+            update: async ({ where, data }) => {
+                const r = rows.find((x) => x.id === where.id);
+                Object.assign(r, data);
+                return r;
+            },
+            delete: async ({ where }) => {
+                const i = rows.findIndex((x) => x.id === where.id);
+                rows.splice(i, 1);
+                return {};
+            },
+        },
+    };
+}
+function httpResponse(status) {
+    return { ok: status >= 200 && status < 300, status, text: async () => '' };
+}
+beforeEach(() => {
+    dbHolder.current = fakeDb();
+    safeFetchMock.mockReset();
+});
+describe('form webhook CRUD', () => {
+    it('creates a webhook, auto-generates a signing secret, and returns it once', async () => {
+        const wh = await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x' });
+        expect(wh.secret).toMatch(/^whsec_/);
+        expect(wh.events).toEqual(['form.submitted']);
+        expect(wh.enabled).toBe(true);
+    });
+    it('masks the secret in list responses', async () => {
+        await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x', secret: 's3cret' });
+        const list = await listFormWebhooks('form_1');
+        expect(list).toHaveLength(1);
+        expect(list[0].secret).toBeUndefined();
+    });
+    it('rejects SSRF / private webhook URLs', async () => {
+        await expect(createFormWebhook(ctx, 'form_1', { url: 'http://localhost:3000/hook' })).rejects.toBeInstanceOf(FormWebhookError);
+        await expect(createFormWebhook(ctx, 'form_1', { url: 'http://169.254.169.254/latest' })).rejects.toBeInstanceOf(FormWebhookError);
+    });
+    it('clamps retryCount and normalizes events on update', async () => {
+        const wh = await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x' });
+        const updated = await updateFormWebhook(ctx, wh.id, {
+            retryCount: 99,
+            events: ['form.submitted', 'bogus'],
+        });
+        expect(updated.retryCount).toBe(10);
+        expect(updated.events).toEqual(['form.submitted']);
+    });
+    it('deletes a webhook', async () => {
+        const wh = await createFormWebhook(ctx, 'form_1', { url: 'https://hooks.example.com/x' });
+        await deleteFormWebhook(ctx, wh.id);
+        expect(await listFormWebhooks('form_1')).toHaveLength(0);
+    });
+});
+describe('dispatchFormWebhooks', () => {
+    it('delivers a signed payload to matching enabled webhooks', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            secret: 'shh',
+            events: ['form.submitted'],
+        });
+        const res = await dispatchFormWebhooks('form_1', {
+            event: 'form.submitted',
+            formId: 'form_1',
+            submissionId: 'sub_1',
+            data: { name: 'Ada' },
+        });
+        expect(res).toEqual({ matched: 1, delivered: 1 });
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+        const [url, opts] = safeFetchMock.mock.calls[0];
+        expect(url).toBe('https://hooks.example.com/x');
+        const expectedSig = await signPayload(opts.body, 'shh');
+        expect(opts.headers['X-Actuate-Signature']).toBe(expectedSig);
+        expect(opts.headers['X-Actuate-Event']).toBe('form.submitted');
+        expect(dbHolder.current.rows[0].lastDeliveryStatus).toBe('success');
+    });
+    it('ignores webhooks not subscribed to the event', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            events: ['form.entry.starred'],
+        });
+        const res = await dispatchFormWebhooks('form_1', {
+            event: 'form.submitted',
+            formId: 'form_1',
+        });
+        expect(res.matched).toBe(0);
+        expect(safeFetchMock).not.toHaveBeenCalled();
+    });
+    it('does not deliver to disabled webhooks', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            enabled: false,
+        });
+        const res = await dispatchFormWebhooks('form_1', { event: 'form.submitted', formId: 'form_1' });
+        expect(res.matched).toBe(0);
+    });
+    it('stops retrying on a 4xx response', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(400));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            retryCount: 3,
+        });
+        const res = await dispatchFormWebhooks('form_1', { event: 'form.submitted', formId: 'form_1' });
+        expect(res.delivered).toBe(0);
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+        expect(dbHolder.current.rows[0].lastDeliveryStatus).toContain('failed');
+    });
+    it('retries on a 5xx response and succeeds with backoff', async () => {
+        // Fire backoff timers immediately so the test doesn't wait real seconds.
+        const timeoutSpy = vi.spyOn(global, 'setTimeout').mockImplementation(((fn) => {
+            fn();
+            return 0;
+        }));
+        try {
+            safeFetchMock
+                .mockResolvedValueOnce(httpResponse(503))
+                .mockResolvedValueOnce(httpResponse(200));
+            await createFormWebhook(ctx, 'form_1', {
+                url: 'https://hooks.example.com/x',
+                retryCount: 2,
+            });
+            const res = await dispatchFormWebhooks('form_1', {
+                event: 'form.submitted',
+                formId: 'form_1',
+            });
+            expect(res.delivered).toBe(1);
+            expect(safeFetchMock).toHaveBeenCalledTimes(2);
+        }
+        finally {
+            timeoutSpy.mockRestore();
+        }
+    });
+    it('treats an SSRF block as a permanent failure (no retry)', async () => {
+        safeFetchMock.mockRejectedValue(new SsrfBlockedError('blocked'));
+        await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            retryCount: 3,
+        });
+        const res = await dispatchFormWebhooks('form_1', { event: 'form.submitted', formId: 'form_1' });
+        expect(res.delivered).toBe(0);
+        expect(safeFetchMock).toHaveBeenCalledTimes(1);
+    });
+});
+describe('testFormWebhook', () => {
+    it('sends a single sample delivery and records the result', async () => {
+        safeFetchMock.mockResolvedValue(httpResponse(200));
+        const wh = await createFormWebhook(ctx, 'form_1', {
+            url: 'https://hooks.example.com/x',
+            secret: 'shh',
+        });
+        const result = await testFormWebhook(ctx, wh.id);
+        expect(result.ok).toBe(true);
+        expect(result.attempts).toBe(1);
+        const [, opts] = safeFetchMock.mock.calls[0];
+        expect(JSON.parse(opts.body).data._test).toBe(true);
+    });
+    it('throws a 404 FormWebhookError for an unknown webhook', async () => {
+        await expect(testFormWebhook(ctx, 'missing')).rejects.toMatchObject({ status: 404 });
+    });
+});
+//# sourceMappingURL=webhooks.test.js.map

package/dist/__tests__/forms/webhooks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.test.js","sourceRoot":"","sources":["../../../src/__tests__/forms/webhooks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAE7D,MAAM,QAAQ,GAAqB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAClD,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AACjE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC/E,kFAAkF;AAClF,EAAE,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,aAAa,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;IACrC,aAAa,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;CACtC,CAAC,CAAC,CAAA;AAEH,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IAC1D,MAAM,gBAAiB,SAAQ,KAAK;KAAG;IACvC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAA;AACrD,CAAC,CAAC,CAAA;AACF,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACrD,gBAAgB;CACjB,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAGrD,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAS,EAAE,CAAA;AAEvF,SAAS,MAAM;IACb,MAAM,IAAI,GAAU,EAAE,CAAA;IACtB,OAAO;QACL,IAAI;QACJ,WAAW,EAAE;YACX,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC9B,MAAM,GAAG,GAAG;oBACV,EAAE,EAAE,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;oBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,cAAc,EAAE,IAAI;oBACpB,kBAAkB,EAAE,IAAI;oBACxB,GAAG,IAAI;iBACR,CAAA;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACd,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CACjC,IAAI,CAAC,MAAM,CACT,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBACzB,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAC/D;YACH,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI;YACjF,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBACtB,OAAO,CAAC,CAAA;YACV,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBAClD,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACjB,OAAO,EAAE,CAAA;YACX,CAAC;SACF;KACF,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAA;AAC5E,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,QAAQ,CAAC,OAAO,GAAG,MAAM,EAAE,CAAA;IAC3B,aAAa,CAAC,SAAS,EAAE,CAAA;AAC3B,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAA;QACzF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChG,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,CACV,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,4BAA4B,EAAE,CAAC,CACxE,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAA;QAC1C,MAAM,MAAM,CACV,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAA;QACzF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,CAAC,gBAAgB,EAAE,OAAc,CAAC;SAC3C,CAAC,CAAA;QACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAA;QACzF,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,CAAC,gBAAgB,CAAC;SAC3B,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE;YAC/C,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,OAAO;YACrB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACtB,CAAC,CAAA;QAEF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAE9C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QAC/C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC7D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC9D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,CAAC,oBAAoB,CAAC;SAC/B,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE;YAC/C,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,OAAO,EAAE,KAAK;SACf,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,UAAU,EAAE,CAAC;SACd,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,yEAAyE;QACzE,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAc,EAAE,EAAE;YACvF,EAAE,EAAE,CAAA;YACJ,OAAO,CAA6C,CAAA;QACtD,CAAC,CAAsB,CAAC,CAAA;QACxB,IAAI,CAAC;YACH,aAAa;iBACV,qBAAqB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;iBACxC,qBAAqB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;YAC3C,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;gBACrC,GAAG,EAAE,6BAA6B;gBAClC,UAAU,EAAE,CAAC;aACd,CAAC,CAAA;YACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE;gBAC/C,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;YACF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,WAAW,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,aAAa,CAAC,iBAAiB,CAAC,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAA;QAChE,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YACrC,GAAG,EAAE,6BAA6B;YAClC,UAAU,EAAE,CAAC;SACd,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE;YAChD,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAk/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAkQD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAugUzD"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA+/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAkQD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAkrUzD"}

package/dist/api/handlers.js

@@ -24,10 +24,12 @@ import { isAuthorizedCronRequest, processCleanup, processSeoScan } from '../cron
 import { processContentHealthScan } from '../content-health/cron.js';
 import { verifyCaptcha, getCaptchaConfig } from '../security/captcha.js';
 import { listForms as listFormsService, getFormById as getFormByIdService, getFormBySlug as getFormBySlugService, createForm as createFormService, updateForm as updateFormService, duplicateForm as duplicateFormService, deleteForm as deleteFormService, saveFormSchema as saveFormSchemaService, getFormSchema as getFormSchemaService, getNotificationSettings as getFormNotificationSettingsService, updateNotificationSettings as updateFormNotificationSettingsService, setNotifyEnabled as setFormNotifyEnabledService, getEmbedSettings as getFormEmbedSettingsService, updateEmbedSettings as updateFormEmbedSettingsService, getFormStats as getFormStatsService, getFormsSidebarCounts as getFormsSidebarCountsService, FormNotFoundError, FormValidationError, FormConflictError, FormHasSubmissionsError, } from '../forms/service.js';
-import { listEntries as listEntriesService, getEntryWithSchema as getEntryWithSchemaService, getEntryCounts as getEntryCountsService, updateEntry as updateEntryService, bulkUpdateEntries as bulkUpdateEntriesService, deleteEntry as deleteEntryService, } from '../forms/entries.js';
+import { listEntries as listEntriesService, getEntryWithSchema as getEntryWithSchemaService, getEntryCounts as getEntryCountsService, updateEntry as updateEntryService, bulkUpdateEntries as bulkUpdateEntriesService, deleteEntry as deleteEntryService, exportFormEntries as exportFormEntriesService, } from '../forms/entries.js';
 import { processSubmission, buildPublicForm, SubmissionValidationError, } from '../forms/submission.js';
 import { validateSubmissionFiles, FORM_UPLOAD_ALLOWED_MIME_TYPES, DEFAULT_MAX_FILE_BYTES, } from '../forms/files.js';
 import { resolveSubmissionFields } from '../forms/submission.js';
+import { createFormWebhook, listFormWebhooks, updateFormWebhook, deleteFormWebhook, testFormWebhook, FormWebhookError, } from '../forms/webhooks.js';
+import { sendFormNotifications } from '../forms/notify.js';
 import { checkForUpdates } from '../upgrade/version-check.js';
 import { createUpgradePR } from '../upgrade/upgrade-pr.js';
 import { encryptField, decryptField } from '../security/encrypted-fields.js';
@@ -290,6 +292,8 @@ function mapFormError(err) {
     if (err instanceof FormHasSubmissionsError) {
         return json({ error: err.message, code: 'FORM_HAS_SUBMISSIONS', submissionCount: err.submissionCount }, 409);
     }
+    if (err instanceof FormWebhookError)
+        return errorResponse(err.message, err.status);
     return null;
 }
 function parseFormsQuery(url) {
@@ -4428,6 +4432,41 @@ export function registerCMSRoutes(router) {
             return internalError(err);
         }
     });
+    // Defined before `/forms/entries/:entryId` so "export" is not parsed as an id.
+    router.get('/forms/entries/export', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, WRITE_ROLES);
+            if (roleErr)
+                return roleErr;
+            const formId = new URL(request.url).searchParams.get('formId');
+            if (!formId)
+                return errorResponse('"formId" query parameter is required', 400);
+            const result = await exportFormEntriesService(formId);
+            if (!result)
+                return errorResponse('Form not found', 404);
+            // PII access audit: a bulk export of decrypted submission data.
+            void logEvent({
+                event: 'form.entries.exported',
+                userId: auth.session.userId,
+                ipAddress: getClientIp(request),
+                details: { formId, count: result.count },
+            });
+            const filename = `${result.formSlug || 'form'}-entries.csv`;
+            return new Response(result.csv, {
+                status: 200,
+                headers: {
+                    'Content-Type': 'text/csv; charset=utf-8',
+                    'Content-Disposition': `attachment; filename="${filename}"`,
+                },
+            });
+        }
+        catch (err) {
+            return internalError(err);
+        }
+    });
     router.get('/forms/entries/:entryId', async (request, params) => {
         try {
             const auth = await requireAuth(request);
@@ -4439,6 +4478,13 @@ export function registerCMSRoutes(router) {
             const result = await getEntryWithSchemaService(params.entryId);
             if (!result)
                 return errorResponse('Entry not found', 404);
+            // PII access audit: viewing a single entry exposes its decrypted fields.
+            void logEvent({
+                event: 'form.entry.viewed',
+                userId: auth.session.userId,
+                ipAddress: getClientIp(request),
+                details: { entryId: params.entryId, formId: result.entry.formId },
+            });
             return json({ data: result });
         }
         catch (err) {
@@ -4720,6 +4766,147 @@ export function registerCMSRoutes(router) {
             return mapFormError(err) ?? internalError(err);
         }
     });
+    // ── Per-form webhooks (CRUD + test) ──────────────────────────────────────
+    router.get('/forms/:id/webhooks', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, WRITE_ROLES);
+            if (roleErr)
+                return roleErr;
+            const form = await getFormByIdService(params.id);
+            if (!form)
+                return errorResponse('Form not found', 404);
+            const webhooks = await listFormWebhooks(params.id);
+            return json({ data: webhooks });
+        }
+        catch (err) {
+            return mapFormError(err) ?? internalError(err);
+        }
+    });
+    router.post('/forms/:id/webhooks', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, WRITE_ROLES);
+            if (roleErr)
+                return roleErr;
+            const form = await getFormByIdService(params.id);
+            if (!form)
+                return errorResponse('Form not found', 404);
+            const body = (await request.json().catch(() => ({})));
+            if (!body.url || typeof body.url !== 'string') {
+                return errorResponse('A webhook url is required', 400);
+            }
+            const ctx = buildActionContext(auth.session, db());
+            const webhook = await createFormWebhook(ctx, params.id, body);
+            // The plaintext secret is returned exactly once here, on creation.
+            return json({ data: webhook }, 201);
+        }
+        catch (err) {
+            return mapFormError(err) ?? internalError(err);
+        }
+    });
+    router.patch('/forms/:id/webhooks/:webhookId', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, WRITE_ROLES);
+            if (roleErr)
+                return roleErr;
+            const body = (await request.json().catch(() => ({})));
+            const ctx = buildActionContext(auth.session, db());
+            const webhook = await updateFormWebhook(ctx, params.webhookId, body);
+            return json({ data: webhook });
+        }
+        catch (err) {
+            return mapFormError(err) ?? internalError(err);
+        }
+    });
+    router.delete('/forms/:id/webhooks/:webhookId', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, WRITE_ROLES);
+            if (roleErr)
+                return roleErr;
+            const ctx = buildActionContext(auth.session, db());
+            await deleteFormWebhook(ctx, params.webhookId);
+            return json({ data: { success: true } });
+        }
+        catch (err) {
+            return mapFormError(err) ?? internalError(err);
+        }
+    });
+    router.post('/forms/:id/webhooks/:webhookId/test', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, WRITE_ROLES);
+            if (roleErr)
+                return roleErr;
+            const ctx = buildActionContext(auth.session, db());
+            const result = await testFormWebhook(ctx, params.webhookId);
+            return json({ data: result });
+        }
+        catch (err) {
+            return mapFormError(err) ?? internalError(err);
+        }
+    });
+    // ── Test notification email ──────────────────────────────────────────────
+    router.post('/forms/:id/notifications/test', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, WRITE_ROLES);
+            if (roleErr)
+                return roleErr;
+            const form = await getFormByIdService(params.id);
+            if (!form)
+                return errorResponse('Form not found', 404);
+            const settings = await getFormNotificationSettingsService(params.id);
+            const primaryRecipient = (settings?.recipients ?? [])[0];
+            if (!settings?.enabled || !primaryRecipient) {
+                return errorResponse('Configure at least one recipient before sending a test', 400);
+            }
+            // Sample values so operators see a realistic email. The autoresponder is
+            // suppressed for tests so we never email an arbitrary sample address.
+            const fields = form.fields ?? [];
+            const sampleData = {};
+            for (const field of fields) {
+                if (field.type === 'honeypot' || field.type === 'divider' || field.type === 'richtext') {
+                    continue;
+                }
+                if (field.type === 'email')
+                    sampleData[field.key] = primaryRecipient;
+                else if (field.type === 'checkbox' || field.type === 'consent')
+                    sampleData[field.key] = true;
+                else
+                    sampleData[field.key] = `Sample ${field.label || field.key}`;
+            }
+            const ctx = {
+                formId: form.id,
+                formName: form.name,
+                entryNumber: null,
+                submittedAt: new Date().toISOString(),
+                fields,
+                data: sampleData,
+                senderName: 'Test Submission',
+                senderEmail: primaryRecipient,
+            };
+            const result = await sendFormNotifications({ ...settings, autoresponderEnabled: false }, ctx);
+            return json({ data: result });
+        }
+        catch (err) {
+            return mapFormError(err) ?? internalError(err);
+        }
+    });
     // ---------------------------------------------------------------------------
     // Redirects routes
     // ---------------------------------------------------------------------------
@@ -8576,7 +8763,11 @@ export function registerCMSRoutes(router) {
             if (!isAuthorizedCronRequest(request.headers.get('authorization'))) {
                 return errorResponse('Unauthorized', 401);
             }
-            const result = await processCleanup(db());
+            const retentionDays = getActuateConfig()?.forms?.retentionDays;
+            const formSubmissionRetentionMs = typeof retentionDays === 'number' && retentionDays > 0
+                ? retentionDays * 24 * 60 * 60 * 1000
+                : 0;
+            const result = await processCleanup(db(), { formSubmissionRetentionMs });
             return json({ data: result });
         }
         catch (err) {