@aglyn/plugins-forms 1.0.0-beta.220 → 1.0.0-beta.222

package/src/lib/model/form-door.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * What `/api/forms/submit` answers a submission to a site that switched Forms
+ * off (AGL-3029). A visitor reads it, so it names no plugin and no setting.
+ */
+export declare const FORMS_OFF_FOR_SITE_REFUSAL = "This site is not accepting form submissions";
+/**
+ * The plugin whose door a submission to `/api/forms/submit` came through
+ * (AGL-3029) — the plugin that must run on the site for it to be accepted.
+ *
+ * The endpoint is shared. A form element posts to it, and so does a Marketing
+ * popup's email capture, which is a Marketing element rather than a form: a
+ * site that switched Forms off and still shows its popup must not silently
+ * lose every address the popup collects. The popup names its door in the
+ * body; everything else is a form's.
+ *
+ * A body that names a form ENTITY or a dataset binding is a form's, whatever
+ * door it claims. Those are what a form element sends and a popup never does,
+ * so the popup door cannot be used to file rows under a form, or into a
+ * dataset, on a site that switched Forms off.
+ */
+export declare function formSubmissionDoorPlugin(body: Record<string, unknown> | null | undefined): string;

package/src/lib/model/form-door.js

@@ -0,0 +1,50 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Which plugin's switch decides a submission to this plugin's door, and what
+ * the door says when that switch is off (AGL-3029). The door's own words:
+ * read by the door (`server/form-submit.ts`) and nothing else.
+ */ import { BUNDLE_ID } from "../constants/bundle-common.js";
+/**
+ * What `/api/forms/submit` answers a submission to a site that switched Forms
+ * off (AGL-3029). A visitor reads it, so it names no plugin and no setting.
+ */ export const FORMS_OFF_FOR_SITE_REFUSAL = 'This site is not accepting form submissions';
+/**
+ * The marketing plugin's id, as the door names the plugin whose switch judges
+ * a popup's capture. This plugin holds no import of it; the catalog is where
+ * the string is defined.
+ */ const MARKETING_PLUGIN_ID = 'marketing';
+/**
+ * The plugin whose door a submission to `/api/forms/submit` came through
+ * (AGL-3029) — the plugin that must run on the site for it to be accepted.
+ *
+ * The endpoint is shared. A form element posts to it, and so does a Marketing
+ * popup's email capture, which is a Marketing element rather than a form: a
+ * site that switched Forms off and still shows its popup must not silently
+ * lose every address the popup collects. The popup names its door in the
+ * body; everything else is a form's.
+ *
+ * A body that names a form ENTITY or a dataset binding is a form's, whatever
+ * door it claims. Those are what a form element sends and a popup never does,
+ * so the popup door cannot be used to file rows under a form, or into a
+ * dataset, on a site that switched Forms off.
+ */ export function formSubmissionDoorPlugin(body) {
+    var _ref;
+    const namesFormData = Boolean(String((_ref = body == null ? void 0 : body['formId']) != null ? _ref : '').trim()) || Boolean(body == null ? void 0 : body['datasetBinding']);
+    return (body == null ? void 0 : body['door']) === 'popup' && !namesFormData ? MARKETING_PLUGIN_ID : BUNDLE_ID;
+}
+
+//# sourceMappingURL=form-door.js.map

package/src/lib/model/form-door.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/forms/src/lib/model/form-door.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Which plugin's switch decides a submission to this plugin's door, and what\n * the door says when that switch is off (AGL-3029). The door's own words:\n * read by the door (`server/form-submit.ts`) and nothing else.\n */\n\nimport { BUNDLE_ID } from '../constants/bundle-common'\n\n/**\n * What `/api/forms/submit` answers a submission to a site that switched Forms\n * off (AGL-3029). A visitor reads it, so it names no plugin and no setting.\n */\nexport const FORMS_OFF_FOR_SITE_REFUSAL = 'This site is not accepting form submissions'\n\n/**\n * The marketing plugin's id, as the door names the plugin whose switch judges\n * a popup's capture. This plugin holds no import of it; the catalog is where\n * the string is defined.\n */\nconst MARKETING_PLUGIN_ID = 'marketing'\n\n/**\n * The plugin whose door a submission to `/api/forms/submit` came through\n * (AGL-3029) — the plugin that must run on the site for it to be accepted.\n *\n * The endpoint is shared. A form element posts to it, and so does a Marketing\n * popup's email capture, which is a Marketing element rather than a form: a\n * site that switched Forms off and still shows its popup must not silently\n * lose every address the popup collects. The popup names its door in the\n * body; everything else is a form's.\n *\n * A body that names a form ENTITY or a dataset binding is a form's, whatever\n * door it claims. Those are what a form element sends and a popup never does,\n * so the popup door cannot be used to file rows under a form, or into a\n * dataset, on a site that switched Forms off.\n */\nexport function formSubmissionDoorPlugin(body: Record<string, unknown> | null | undefined): string {\n  const namesFormData =\n    Boolean(String(body?.['formId'] ?? '').trim()) || Boolean(body?.['datasetBinding'])\n  return body?.['door'] === 'popup' && !namesFormData ? MARKETING_PLUGIN_ID : BUNDLE_ID\n}\n"],"names":["BUNDLE_ID","FORMS_OFF_FOR_SITE_REFUSAL","MARKETING_PLUGIN_ID","formSubmissionDoorPlugin","body","namesFormData","Boolean","String","trim"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;CAIC,GAED,SAASA,SAAS,QAAQ,gCAA4B;AAEtD;;;CAGC,GACD,OAAO,MAAMC,6BAA6B,8CAA6C;AAEvF;;;;CAIC,GACD,MAAMC,sBAAsB;AAE5B;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,yBAAyBC,IAAgD;;IACvF,MAAMC,gBACJC,QAAQC,eAAOH,wBAAAA,IAAM,CAAC,SAAS,mBAAI,IAAII,IAAI,OAAOF,QAAQF,wBAAAA,IAAM,CAAC,iBAAiB;IACpF,OAAOA,CAAAA,wBAAAA,IAAM,CAAC,OAAO,MAAK,WAAW,CAACC,gBAAgBH,sBAAsBF;AAC9E"}

package/src/lib/model/form-submission-counts.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginRecordCountSource } from '@aglyn/aglyn/plugin-manager/plugin-record-counts';
+/**
+ * How many submissions a site received, counted in the console for another
+ * plugin's figure (AGL-3080) — a campaign's conversions out of every
+ * submission the site took in. Every one is the site's own, so the count
+ * never crosses sites; a reader with no site counts none.
+ */
+export declare const formSubmissionRecordCountSource: PluginRecordCountSource;
+/** Called from the console registrar, owner named for a spec that calls it directly. */
+export declare function registerFormSubmissionCounts(): void;

package/src/lib/model/form-submission-counts.js

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerPluginRecordCountSource } from "@aglyn/aglyn/plugin-manager/plugin-record-counts";
+import { collection } from "firebase/firestore";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+/**
+ * How many submissions a site received, counted in the console for another
+ * plugin's figure (AGL-3080) — a campaign's conversions out of every
+ * submission the site took in. Every one is the site's own, so the count
+ * never crosses sites; a reader with no site counts none.
+ */ export const formSubmissionRecordCountSource = {
+    query (firestore, request) {
+        return request.hostId ? collection(firestore, 'hosts', request.hostId, 'formSubmissions') : null;
+    }
+};
+/** Called from the console registrar, owner named for a spec that calls it directly. */ export function registerFormSubmissionCounts() {
+    registerPluginRecordCountSource('formSubmission', formSubmissionRecordCountSource, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=form-submission-counts.js.map

package/src/lib/model/form-submission-counts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/forms/src/lib/model/form-submission-counts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordCountSource,\n  type PluginRecordCountSource,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-counts'\nimport { collection } from 'firebase/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\n\n/**\n * How many submissions a site received, counted in the console for another\n * plugin's figure (AGL-3080) — a campaign's conversions out of every\n * submission the site took in. Every one is the site's own, so the count\n * never crosses sites; a reader with no site counts none.\n */\nexport const formSubmissionRecordCountSource: PluginRecordCountSource = {\n  query(firestore, request) {\n    return request.hostId ? collection(firestore, 'hosts', request.hostId, 'formSubmissions') : null\n  },\n}\n\n/** Called from the console registrar, owner named for a spec that calls it directly. */\nexport function registerFormSubmissionCounts(): void {\n  registerPluginRecordCountSource('formSubmission', formSubmissionRecordCountSource, {\n    pluginId: BUNDLE_ID,\n  })\n}\n"],"names":["registerPluginRecordCountSource","collection","BUNDLE_ID","formSubmissionRecordCountSource","query","firestore","request","hostId","registerFormSubmissionCounts","pluginId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,+BAA+B,QAE1B,mDAAkD;AACzD,SAASC,UAAU,QAAQ,qBAAoB;AAC/C,SAASC,SAAS,QAAQ,gCAA4B;AAEtD;;;;;CAKC,GACD,OAAO,MAAMC,kCAA2D;IACtEC,OAAMC,SAAS,EAAEC,OAAO;QACtB,OAAOA,QAAQC,MAAM,GAAGN,WAAWI,WAAW,SAASC,QAAQC,MAAM,EAAE,qBAAqB;IAC9F;AACF,EAAC;AAED,sFAAsF,GACtF,OAAO,SAASC;IACdR,gCAAgC,kBAAkBG,iCAAiC;QACjFM,UAAUP;IACZ;AACF"}

package/src/lib/model/form-submission-list.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginRecordListSource } from '@aglyn/aglyn/plugin-manager/plugin-record-lists';
+/**
+ * A site's form submissions, listed in the console for the plugin that
+ * reads them (AGL-3080) — the Inbox. The record is
+ * `formSubmissionIndexedRecord`'s, and the stored fields a reader may filter,
+ * order and change are documented there.
+ *
+ * - `query` — the newest of one site's, at most `limit`, for a glance.
+ * - `walk` — the base a paged list walks: a site's submissions, or on the
+ *   organization's Inbox every site's, which the reader narrows to the
+ *   organization by `orgId` — the only group read the rules admit. The
+ *   reader's list query adds that, its filters, its `createdAt` order and
+ *   its pages.
+ * - `doc` — one site's submission, which the Inbox opens, marks read or
+ *   unread, and deletes (a site admin's or editor's to do, by the rules), and
+ *   under which it reads the replies it sent.
+ * - `byIds` — a site's submissions by name, at most
+ *   {@link PLUGIN_RECORD_LIST_IDS_MAX} at a time, for a reader that holds ids
+ *   from elsewhere: a campaign's conversion report grouping the submissions it
+ *   was credited with by the page each was sent from.
+ */
+export declare const formSubmissionListSource: PluginRecordListSource;
+/** Called from the console registrar, owner named for a spec that calls it directly. */
+export declare function registerFormSubmissionList(): void;

package/src/lib/model/form-submission-list.js

@@ -0,0 +1,66 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { PLUGIN_RECORD_LIST_IDS_MAX, registerPluginRecordListSource } from "@aglyn/aglyn/plugin-manager/plugin-record-lists";
+import { collection, collectionGroup, doc, documentId, limit, orderBy, query, where } from "firebase/firestore";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+import { formSubmissionIndexedRecord } from "./form-submission-record.js";
+/** The collection this plugin keeps submissions in, under a site. */ const SUBMISSIONS = 'formSubmissions';
+/**
+ * A site's form submissions, listed in the console for the plugin that
+ * reads them (AGL-3080) — the Inbox. The record is
+ * `formSubmissionIndexedRecord`'s, and the stored fields a reader may filter,
+ * order and change are documented there.
+ *
+ * - `query` — the newest of one site's, at most `limit`, for a glance.
+ * - `walk` — the base a paged list walks: a site's submissions, or on the
+ *   organization's Inbox every site's, which the reader narrows to the
+ *   organization by `orgId` — the only group read the rules admit. The
+ *   reader's list query adds that, its filters, its `createdAt` order and
+ *   its pages.
+ * - `doc` — one site's submission, which the Inbox opens, marks read or
+ *   unread, and deletes (a site admin's or editor's to do, by the rules), and
+ *   under which it reads the replies it sent.
+ * - `byIds` — a site's submissions by name, at most
+ *   {@link PLUGIN_RECORD_LIST_IDS_MAX} at a time, for a reader that holds ids
+ *   from elsewhere: a campaign's conversion report grouping the submissions it
+ *   was credited with by the page each was sent from.
+ */ export const formSubmissionListSource = {
+    query (firestore, request) {
+        if (!request.hostId || request.search || request.installedFrom) return null;
+        return query(collection(firestore, 'hosts', request.hostId, SUBMISSIONS), orderBy('createdAt', 'desc'), limit(request.limit));
+    },
+    walk (firestore, request) {
+        if (request.hostId) return collection(firestore, 'hosts', request.hostId, SUBMISSIONS);
+        return request.orgId ? collectionGroup(firestore, SUBMISSIONS) : null;
+    },
+    doc (firestore, request) {
+        if (!request.hostId || !request.id) return null;
+        return doc(firestore, 'hosts', request.hostId, SUBMISSIONS, request.id);
+    },
+    byIds (firestore, request) {
+        const ids = request.ids.filter(Boolean).slice(0, PLUGIN_RECORD_LIST_IDS_MAX);
+        if (!request.hostId || !ids.length) return null;
+        return query(collection(firestore, 'hosts', request.hostId, SUBMISSIONS), where(documentId(), 'in', ids));
+    },
+    record: formSubmissionIndexedRecord
+};
+/** Called from the console registrar, owner named for a spec that calls it directly. */ export function registerFormSubmissionList() {
+    registerPluginRecordListSource('formSubmission', formSubmissionListSource, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=form-submission-list.js.map

package/src/lib/model/form-submission-list.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/forms/src/lib/model/form-submission-list.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  PLUGIN_RECORD_LIST_IDS_MAX,\n  registerPluginRecordListSource,\n  type PluginRecordListSource,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-lists'\nimport {\n  collection,\n  collectionGroup,\n  doc,\n  documentId,\n  limit,\n  orderBy,\n  query,\n  where,\n} from 'firebase/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport { formSubmissionIndexedRecord } from './form-submission-record'\n\n/** The collection this plugin keeps submissions in, under a site. */\nconst SUBMISSIONS = 'formSubmissions'\n\n/**\n * A site's form submissions, listed in the console for the plugin that\n * reads them (AGL-3080) — the Inbox. The record is\n * `formSubmissionIndexedRecord`'s, and the stored fields a reader may filter,\n * order and change are documented there.\n *\n * - `query` — the newest of one site's, at most `limit`, for a glance.\n * - `walk` — the base a paged list walks: a site's submissions, or on the\n *   organization's Inbox every site's, which the reader narrows to the\n *   organization by `orgId` — the only group read the rules admit. The\n *   reader's list query adds that, its filters, its `createdAt` order and\n *   its pages.\n * - `doc` — one site's submission, which the Inbox opens, marks read or\n *   unread, and deletes (a site admin's or editor's to do, by the rules), and\n *   under which it reads the replies it sent.\n * - `byIds` — a site's submissions by name, at most\n *   {@link PLUGIN_RECORD_LIST_IDS_MAX} at a time, for a reader that holds ids\n *   from elsewhere: a campaign's conversion report grouping the submissions it\n *   was credited with by the page each was sent from.\n */\nexport const formSubmissionListSource: PluginRecordListSource = {\n  query(firestore, request) {\n    if (!request.hostId || request.search || request.installedFrom) return null\n    return query(\n      collection(firestore, 'hosts', request.hostId, SUBMISSIONS),\n      orderBy('createdAt', 'desc'),\n      limit(request.limit),\n    )\n  },\n  walk(firestore, request) {\n    if (request.hostId) return collection(firestore, 'hosts', request.hostId, SUBMISSIONS)\n    return request.orgId ? collectionGroup(firestore, SUBMISSIONS) : null\n  },\n  doc(firestore, request) {\n    if (!request.hostId || !request.id) return null\n    return doc(firestore, 'hosts', request.hostId, SUBMISSIONS, request.id)\n  },\n  byIds(firestore, request) {\n    const ids = request.ids.filter(Boolean).slice(0, PLUGIN_RECORD_LIST_IDS_MAX)\n    if (!request.hostId || !ids.length) return null\n    return query(\n      collection(firestore, 'hosts', request.hostId, SUBMISSIONS),\n      where(documentId(), 'in', ids),\n    )\n  },\n  record: formSubmissionIndexedRecord,\n}\n\n/** Called from the console registrar, owner named for a spec that calls it directly. */\nexport function registerFormSubmissionList(): void {\n  registerPluginRecordListSource('formSubmission', formSubmissionListSource, {\n    pluginId: BUNDLE_ID,\n  })\n}\n"],"names":["PLUGIN_RECORD_LIST_IDS_MAX","registerPluginRecordListSource","collection","collectionGroup","doc","documentId","limit","orderBy","query","where","BUNDLE_ID","formSubmissionIndexedRecord","SUBMISSIONS","formSubmissionListSource","firestore","request","hostId","search","installedFrom","walk","orgId","id","byIds","ids","filter","Boolean","slice","length","record","registerFormSubmissionList","pluginId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,0BAA0B,EAC1BC,8BAA8B,QAEzB,kDAAiD;AACxD,SACEC,UAAU,EACVC,eAAe,EACfC,GAAG,EACHC,UAAU,EACVC,KAAK,EACLC,OAAO,EACPC,KAAK,EACLC,KAAK,QACA,qBAAoB;AAC3B,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SAASC,2BAA2B,QAAQ,8BAA0B;AAEtE,mEAAmE,GACnE,MAAMC,cAAc;AAEpB;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,MAAMC,2BAAmD;IAC9DL,OAAMM,SAAS,EAAEC,OAAO;QACtB,IAAI,CAACA,QAAQC,MAAM,IAAID,QAAQE,MAAM,IAAIF,QAAQG,aAAa,EAAE,OAAO;QACvE,OAAOV,MACLN,WAAWY,WAAW,SAASC,QAAQC,MAAM,EAAEJ,cAC/CL,QAAQ,aAAa,SACrBD,MAAMS,QAAQT,KAAK;IAEvB;IACAa,MAAKL,SAAS,EAAEC,OAAO;QACrB,IAAIA,QAAQC,MAAM,EAAE,OAAOd,WAAWY,WAAW,SAASC,QAAQC,MAAM,EAAEJ;QAC1E,OAAOG,QAAQK,KAAK,GAAGjB,gBAAgBW,WAAWF,eAAe;IACnE;IACAR,KAAIU,SAAS,EAAEC,OAAO;QACpB,IAAI,CAACA,QAAQC,MAAM,IAAI,CAACD,QAAQM,EAAE,EAAE,OAAO;QAC3C,OAAOjB,IAAIU,WAAW,SAASC,QAAQC,MAAM,EAAEJ,aAAaG,QAAQM,EAAE;IACxE;IACAC,OAAMR,SAAS,EAAEC,OAAO;QACtB,MAAMQ,MAAMR,QAAQQ,GAAG,CAACC,MAAM,CAACC,SAASC,KAAK,CAAC,GAAG1B;QACjD,IAAI,CAACe,QAAQC,MAAM,IAAI,CAACO,IAAII,MAAM,EAAE,OAAO;QAC3C,OAAOnB,MACLN,WAAWY,WAAW,SAASC,QAAQC,MAAM,EAAEJ,cAC/CH,MAAMJ,cAAc,MAAMkB;IAE9B;IACAK,QAAQjB;AACV,EAAC;AAED,sFAAsF,GACtF,OAAO,SAASkB;IACd5B,+BAA+B,kBAAkBY,0BAA0B;QACzEiB,UAAUpB;IACZ;AACF"}

package/src/lib/model/form-submission-record.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginIndexedRecord } from '@aglyn/aglyn/plugin-manager/plugin-record-index';
+/**
+ * A FORM SUBMISSION, as this plugin shares it with another (AGL-3080).
+ *
+ * Submissions are this plugin's records: its door (`/api/forms/submit`)
+ * writes every one, its `/v1` resource serves them, its counters are what the
+ * plan bills, and they live where it keeps them —
+ * `hosts/{hostId}/formSubmissions/{id}`, which only this plugin names. The
+ * Inbox is the console's reader of them, and reads, marks and threads them
+ * through what this plugin publishes for the `formSubmission` kind: a list
+ * source in the console (`form-submission-list.ts`) and a record index on the
+ * server (`server/form-submission-index.ts`).
+ *
+ * ## The record, as a reader may rely on it
+ *
+ * Every stored document carries, from the moment the door writes it:
+ * `hostId`, and `orgId` when the site has one (both frozen by the rules);
+ * `formId` for a verified form entity; `formName` and `path`; `fields`, the
+ * values as typed, keyed by field name; `senderTokens` and `searchTokens`,
+ * the word-prefix keys a list filters and searches by; `read`, a boolean;
+ * `createdAt`, the server time it arrived; and `campaignIds`, `routing` and
+ * `rateDegraded` where they apply. A reader may change `read`, and stamp
+ * `repliedAtMs` with `read` when it answers one; it may keep its own records
+ * of what it did with one under the document (the Inbox's `replies` and
+ * `listAssignments`). Nothing else on it is a reader's to write, and the
+ * security rules hold the client half of that line.
+ *
+ * `null` for a document that holds nothing. Otherwise its id, a name — the
+ * form it was sent to, as it was called when it arrived — and `facts`:
+ * `hostId`, `formId` (`null` for a submission no form entity filed),
+ * `formName`, `path`, `fields`, `read` and `createdAtMs` (`null` before the
+ * server stamped it).
+ */
+export declare function formSubmissionIndexedRecord(id: string, data: Readonly<Record<string, unknown>> | undefined): PluginIndexedRecord | null;

package/src/lib/model/form-submission-record.js

@@ -0,0 +1,68 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * A FORM SUBMISSION, as this plugin shares it with another (AGL-3080).
+ *
+ * Submissions are this plugin's records: its door (`/api/forms/submit`)
+ * writes every one, its `/v1` resource serves them, its counters are what the
+ * plan bills, and they live where it keeps them —
+ * `hosts/{hostId}/formSubmissions/{id}`, which only this plugin names. The
+ * Inbox is the console's reader of them, and reads, marks and threads them
+ * through what this plugin publishes for the `formSubmission` kind: a list
+ * source in the console (`form-submission-list.ts`) and a record index on the
+ * server (`server/form-submission-index.ts`).
+ *
+ * ## The record, as a reader may rely on it
+ *
+ * Every stored document carries, from the moment the door writes it:
+ * `hostId`, and `orgId` when the site has one (both frozen by the rules);
+ * `formId` for a verified form entity; `formName` and `path`; `fields`, the
+ * values as typed, keyed by field name; `senderTokens` and `searchTokens`,
+ * the word-prefix keys a list filters and searches by; `read`, a boolean;
+ * `createdAt`, the server time it arrived; and `campaignIds`, `routing` and
+ * `rateDegraded` where they apply. A reader may change `read`, and stamp
+ * `repliedAtMs` with `read` when it answers one; it may keep its own records
+ * of what it did with one under the document (the Inbox's `replies` and
+ * `listAssignments`). Nothing else on it is a reader's to write, and the
+ * security rules hold the client half of that line.
+ *
+ * `null` for a document that holds nothing. Otherwise its id, a name — the
+ * form it was sent to, as it was called when it arrived — and `facts`:
+ * `hostId`, `formId` (`null` for a submission no form entity filed),
+ * `formName`, `path`, `fields`, `read` and `createdAtMs` (`null` before the
+ * server stamped it).
+ */ export function formSubmissionIndexedRecord(id, data) {
+    if (!data) return null;
+    const text = (value)=>typeof value === 'string' ? value : '';
+    const formName = text(data['formName']);
+    const createdAt = data['createdAt'];
+    const createdAtMs = typeof (createdAt == null ? void 0 : createdAt.toMillis) === 'function' ? createdAt.toMillis() : null;
+    return {
+        id,
+        name: formName || 'Form',
+        facts: {
+            hostId: text(data['hostId']) || null,
+            formId: text(data['formId']) || null,
+            formName,
+            path: text(data['path']),
+            fields: data['fields'] && typeof data['fields'] === 'object' ? data['fields'] : {},
+            read: data['read'] === true,
+            createdAtMs
+        }
+    };
+}
+
+//# sourceMappingURL=form-submission-record.js.map

package/src/lib/model/form-submission-record.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/forms/src/lib/model/form-submission-record.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginIndexedRecord } from '@aglyn/aglyn/plugin-manager/plugin-record-index'\n\n/**\n * A FORM SUBMISSION, as this plugin shares it with another (AGL-3080).\n *\n * Submissions are this plugin's records: its door (`/api/forms/submit`)\n * writes every one, its `/v1` resource serves them, its counters are what the\n * plan bills, and they live where it keeps them —\n * `hosts/{hostId}/formSubmissions/{id}`, which only this plugin names. The\n * Inbox is the console's reader of them, and reads, marks and threads them\n * through what this plugin publishes for the `formSubmission` kind: a list\n * source in the console (`form-submission-list.ts`) and a record index on the\n * server (`server/form-submission-index.ts`).\n *\n * ## The record, as a reader may rely on it\n *\n * Every stored document carries, from the moment the door writes it:\n * `hostId`, and `orgId` when the site has one (both frozen by the rules);\n * `formId` for a verified form entity; `formName` and `path`; `fields`, the\n * values as typed, keyed by field name; `senderTokens` and `searchTokens`,\n * the word-prefix keys a list filters and searches by; `read`, a boolean;\n * `createdAt`, the server time it arrived; and `campaignIds`, `routing` and\n * `rateDegraded` where they apply. A reader may change `read`, and stamp\n * `repliedAtMs` with `read` when it answers one; it may keep its own records\n * of what it did with one under the document (the Inbox's `replies` and\n * `listAssignments`). Nothing else on it is a reader's to write, and the\n * security rules hold the client half of that line.\n *\n * `null` for a document that holds nothing. Otherwise its id, a name — the\n * form it was sent to, as it was called when it arrived — and `facts`:\n * `hostId`, `formId` (`null` for a submission no form entity filed),\n * `formName`, `path`, `fields`, `read` and `createdAtMs` (`null` before the\n * server stamped it).\n */\nexport function formSubmissionIndexedRecord(\n  id: string,\n  data: Readonly<Record<string, unknown>> | undefined,\n): PluginIndexedRecord | null {\n  if (!data) return null\n  const text = (value: unknown): string => (typeof value === 'string' ? value : '')\n  const formName = text(data['formName'])\n  const createdAt = data['createdAt'] as { toMillis?: () => number } | null | undefined\n  const createdAtMs =\n    typeof createdAt?.toMillis === 'function' ? createdAt.toMillis() : null\n  return {\n    id,\n    name: formName || 'Form',\n    facts: {\n      hostId: text(data['hostId']) || null,\n      formId: text(data['formId']) || null,\n      formName,\n      path: text(data['path']),\n      fields:\n        data['fields'] && typeof data['fields'] === 'object' ? data['fields'] : {},\n      read: data['read'] === true,\n      createdAtMs,\n    },\n  }\n}\n"],"names":["formSubmissionIndexedRecord","id","data","text","value","formName","createdAt","createdAtMs","toMillis","name","facts","hostId","formId","path","fields","read"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BC,GACD,OAAO,SAASA,4BACdC,EAAU,EACVC,IAAmD;IAEnD,IAAI,CAACA,MAAM,OAAO;IAClB,MAAMC,OAAO,CAACC,QAA4B,OAAOA,UAAU,WAAWA,QAAQ;IAC9E,MAAMC,WAAWF,KAAKD,IAAI,CAAC,WAAW;IACtC,MAAMI,YAAYJ,IAAI,CAAC,YAAY;IACnC,MAAMK,cACJ,QAAOD,6BAAAA,UAAWE,QAAQ,MAAK,aAAaF,UAAUE,QAAQ,KAAK;IACrE,OAAO;QACLP;QACAQ,MAAMJ,YAAY;QAClBK,OAAO;YACLC,QAAQR,KAAKD,IAAI,CAAC,SAAS,KAAK;YAChCU,QAAQT,KAAKD,IAAI,CAAC,SAAS,KAAK;YAChCG;YACAQ,MAAMV,KAAKD,IAAI,CAAC,OAAO;YACvBY,QACEZ,IAAI,CAAC,SAAS,IAAI,OAAOA,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAG,CAAC;YAC3Ea,MAAMb,IAAI,CAAC,OAAO,KAAK;YACvBK;QACF;IACF;AACF"}

package/src/lib/model/form-unavailable.d.ts

@@ -0,0 +1,83 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * What a VISITOR is told when a site's form is not accepting (AGL-1666).
+ *
+ * The door answers a flooded site's submissions with a refusal the form
+ * element recognises by its code, and the element shows the sentence below.
+ * The owner's half of the same moment — the count, the ceiling and when it
+ * lifts — is the forms plugin's `visitorDoors` declaration, which the Inbox
+ * and the staff pages read without loading this plugin. The two halves are
+ * constrained in opposite directions: the visitor is a stranger and must not
+ * be told why; the owner needs exactly that.
+ */
+/**
+ * Refusal code carried by the abuse-ceiling 429 (AGL-1655).
+ *
+ * The Free plan's monthly wall answers 429 too, so the STATUS identifies
+ * nothing — this code is the whole discriminator, and one means "the customer
+ * needs a bigger plan" while the other means "this site is being flooded".
+ * Shared rather than restated so the producer and the consumer cannot drift.
+ */
+export declare const FORM_ABUSE_CEILING_CODE = "form-abuse-ceiling";
+/** What the visitor is shown when a site's form is not accepting. */
+export interface FormUnavailableNotice {
+    /** The whole message. Fixed copy — never the server's terse `error`. */
+    message: string;
+    /**
+     * An alternative way to reach the site, when the site publishes one
+     * (`business.supportEmail`, the token whose own description is "where
+     * visitors should write for help"). Absent when it does not.
+     */
+    contact?: string;
+}
+/**
+ * The visitor's sentence.
+ *
+ * Three things it must not do, all of which the generic error branch did or
+ * a friendlier rewrite would:
+ *
+ *  1. **Not blame the visitor.** They filled in a form correctly. Nothing
+ *     about their message, their address or their retry is the reason.
+ *  2. **Not explain.** "Unusual volume", "temporarily over its limit", even
+ *     "this site is receiving too many messages" all tell a stranger
+ *     something about the site owner's account that the owner never chose to
+ *     publish. The refusal is the owner's problem to see, not the caller's.
+ *  3. **Not sound delivered.** "We'll get back to you", or anything ending
+ *     in a thank-you, converts a lost lead into a person waiting for a reply
+ *     that is never coming. So it says, in as many words, that the message
+ *     was not sent.
+ *
+ * What is left is short on purpose. The one genuinely useful thing to add is
+ * a door that still opens, which is why `contact` rides along.
+ */
+export declare const FORM_UNAVAILABLE_MESSAGE: string;
+/**
+ * Does this refused submit mean "this site's form is not accepting", rather
+ * than "something broke"?
+ *
+ * Takes the BODY only, deliberately. The obvious signature — `(status, body)`,
+ * matching `parseLockdownRefusal` — invites a caller to gate on the status
+ * first, and the status is precisely what does not distinguish this refusal
+ * from the Free plan's monthly wall. A caller holding only this function
+ * cannot make that mistake.
+ *
+ * Returns `null` for every other body, so a caller's existing generic error
+ * branch keeps handling real failures. Dressing a 500 as a deliberate pause
+ * would be the same class of lie in the other direction.
+ */
+export declare function parseFormUnavailableRefusal(body: unknown): FormUnavailableNotice | null;

package/src/lib/model/form-unavailable.js

@@ -0,0 +1,88 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * What a VISITOR is told when a site's form is not accepting (AGL-1666).
+ *
+ * The door answers a flooded site's submissions with a refusal the form
+ * element recognises by its code, and the element shows the sentence below.
+ * The owner's half of the same moment — the count, the ceiling and when it
+ * lifts — is the forms plugin's `visitorDoors` declaration, which the Inbox
+ * and the staff pages read without loading this plugin. The two halves are
+ * constrained in opposite directions: the visitor is a stranger and must not
+ * be told why; the owner needs exactly that.
+ */ /**
+ * Refusal code carried by the abuse-ceiling 429 (AGL-1655).
+ *
+ * The Free plan's monthly wall answers 429 too, so the STATUS identifies
+ * nothing — this code is the whole discriminator, and one means "the customer
+ * needs a bigger plan" while the other means "this site is being flooded".
+ * Shared rather than restated so the producer and the consumer cannot drift.
+ */ export const FORM_ABUSE_CEILING_CODE = 'form-abuse-ceiling';
+/**
+ * The visitor's sentence.
+ *
+ * Three things it must not do, all of which the generic error branch did or
+ * a friendlier rewrite would:
+ *
+ *  1. **Not blame the visitor.** They filled in a form correctly. Nothing
+ *     about their message, their address or their retry is the reason.
+ *  2. **Not explain.** "Unusual volume", "temporarily over its limit", even
+ *     "this site is receiving too many messages" all tell a stranger
+ *     something about the site owner's account that the owner never chose to
+ *     publish. The refusal is the owner's problem to see, not the caller's.
+ *  3. **Not sound delivered.** "We'll get back to you", or anything ending
+ *     in a thank-you, converts a lost lead into a person waiting for a reply
+ *     that is never coming. So it says, in as many words, that the message
+ *     was not sent.
+ *
+ * What is left is short on purpose. The one genuinely useful thing to add is
+ * a door that still opens, which is why `contact` rides along.
+ */ export const FORM_UNAVAILABLE_MESSAGE = 'This form isn’t accepting messages right now, so your message was not ' + 'sent. Please try again later.';
+/**
+ * A site's published support address is author-written, so it is validated
+ * before being rendered as a link rather than trusted. Conservative on
+ * purpose: a rejected address costs the visitor a convenience, an accepted
+ * junk one costs them a bounced email and the site a lead it never learns it
+ * lost. The `mailto:` scheme is written by the renderer, not taken from here,
+ * so this is a plausibility check and not the injection defence.
+ */ const CONTACT_EMAIL_PATTERN = /^[^\s@<>"']+@[^\s@<>"'.]+(\.[^\s@<>"'.]+)+$/;
+/**
+ * Does this refused submit mean "this site's form is not accepting", rather
+ * than "something broke"?
+ *
+ * Takes the BODY only, deliberately. The obvious signature — `(status, body)`,
+ * matching `parseLockdownRefusal` — invites a caller to gate on the status
+ * first, and the status is precisely what does not distinguish this refusal
+ * from the Free plan's monthly wall. A caller holding only this function
+ * cannot make that mistake.
+ *
+ * Returns `null` for every other body, so a caller's existing generic error
+ * branch keeps handling real failures. Dressing a 500 as a deliberate pause
+ * would be the same class of lie in the other direction.
+ */ export function parseFormUnavailableRefusal(body) {
+    if (!body || typeof body !== 'object') return null;
+    const payload = body;
+    if (payload.code !== FORM_ABUSE_CEILING_CODE) return null;
+    const contact = typeof payload.contact === 'string' && payload.contact.trim() ? payload.contact.trim() : undefined;
+    return _extends({
+        message: FORM_UNAVAILABLE_MESSAGE
+    }, contact && CONTACT_EMAIL_PATTERN.test(contact) ? {
+        contact
+    } : {});
+}
+
+//# sourceMappingURL=form-unavailable.js.map

package/src/lib/model/form-unavailable.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/forms/src/lib/model/form-unavailable.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * What a VISITOR is told when a site's form is not accepting (AGL-1666).\n *\n * The door answers a flooded site's submissions with a refusal the form\n * element recognises by its code, and the element shows the sentence below.\n * The owner's half of the same moment — the count, the ceiling and when it\n * lifts — is the forms plugin's `visitorDoors` declaration, which the Inbox\n * and the staff pages read without loading this plugin. The two halves are\n * constrained in opposite directions: the visitor is a stranger and must not\n * be told why; the owner needs exactly that.\n */\n\n/**\n * Refusal code carried by the abuse-ceiling 429 (AGL-1655).\n *\n * The Free plan's monthly wall answers 429 too, so the STATUS identifies\n * nothing — this code is the whole discriminator, and one means \"the customer\n * needs a bigger plan\" while the other means \"this site is being flooded\".\n * Shared rather than restated so the producer and the consumer cannot drift.\n */\nexport const FORM_ABUSE_CEILING_CODE = 'form-abuse-ceiling'\n\n/** What the visitor is shown when a site's form is not accepting. */\nexport interface FormUnavailableNotice {\n  /** The whole message. Fixed copy — never the server's terse `error`. */\n  message: string\n  /**\n   * An alternative way to reach the site, when the site publishes one\n   * (`business.supportEmail`, the token whose own description is \"where\n   * visitors should write for help\"). Absent when it does not.\n   */\n  contact?: string\n}\n\n/**\n * The visitor's sentence.\n *\n * Three things it must not do, all of which the generic error branch did or\n * a friendlier rewrite would:\n *\n *  1. **Not blame the visitor.** They filled in a form correctly. Nothing\n *     about their message, their address or their retry is the reason.\n *  2. **Not explain.** \"Unusual volume\", \"temporarily over its limit\", even\n *     \"this site is receiving too many messages\" all tell a stranger\n *     something about the site owner's account that the owner never chose to\n *     publish. The refusal is the owner's problem to see, not the caller's.\n *  3. **Not sound delivered.** \"We'll get back to you\", or anything ending\n *     in a thank-you, converts a lost lead into a person waiting for a reply\n *     that is never coming. So it says, in as many words, that the message\n *     was not sent.\n *\n * What is left is short on purpose. The one genuinely useful thing to add is\n * a door that still opens, which is why `contact` rides along.\n */\nexport const FORM_UNAVAILABLE_MESSAGE =\n  'This form isn’t accepting messages right now, so your message was not ' +\n  'sent. Please try again later.'\n\n/**\n * A site's published support address is author-written, so it is validated\n * before being rendered as a link rather than trusted. Conservative on\n * purpose: a rejected address costs the visitor a convenience, an accepted\n * junk one costs them a bounced email and the site a lead it never learns it\n * lost. The `mailto:` scheme is written by the renderer, not taken from here,\n * so this is a plausibility check and not the injection defence.\n */\nconst CONTACT_EMAIL_PATTERN = /^[^\\s@<>\"']+@[^\\s@<>\"'.]+(\\.[^\\s@<>\"'.]+)+$/\n\n/**\n * Does this refused submit mean \"this site's form is not accepting\", rather\n * than \"something broke\"?\n *\n * Takes the BODY only, deliberately. The obvious signature — `(status, body)`,\n * matching `parseLockdownRefusal` — invites a caller to gate on the status\n * first, and the status is precisely what does not distinguish this refusal\n * from the Free plan's monthly wall. A caller holding only this function\n * cannot make that mistake.\n *\n * Returns `null` for every other body, so a caller's existing generic error\n * branch keeps handling real failures. Dressing a 500 as a deliberate pause\n * would be the same class of lie in the other direction.\n */\nexport function parseFormUnavailableRefusal(\n  body: unknown,\n): FormUnavailableNotice | null {\n  if (!body || typeof body !== 'object') return null\n  const payload = body as { code?: unknown; contact?: unknown }\n  if (payload.code !== FORM_ABUSE_CEILING_CODE) return null\n  const contact =\n    typeof payload.contact === 'string' && payload.contact.trim()\n      ? payload.contact.trim()\n      : undefined\n  return {\n    message: FORM_UNAVAILABLE_MESSAGE,\n    ...(contact && CONTACT_EMAIL_PATTERN.test(contact) ? { contact } : {}),\n  }\n}\n"],"names":["FORM_ABUSE_CEILING_CODE","FORM_UNAVAILABLE_MESSAGE","CONTACT_EMAIL_PATTERN","parseFormUnavailableRefusal","body","payload","code","contact","trim","undefined","message","test"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;CAUC,GAED;;;;;;;CAOC,GACD,OAAO,MAAMA,0BAA0B,qBAAoB;AAc3D;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,MAAMC,2BACX,2EACA,gCAA+B;AAEjC;;;;;;;CAOC,GACD,MAAMC,wBAAwB;AAE9B;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC,4BACdC,IAAa;IAEb,IAAI,CAACA,QAAQ,OAAOA,SAAS,UAAU,OAAO;IAC9C,MAAMC,UAAUD;IAChB,IAAIC,QAAQC,IAAI,KAAKN,yBAAyB,OAAO;IACrD,MAAMO,UACJ,OAAOF,QAAQE,OAAO,KAAK,YAAYF,QAAQE,OAAO,CAACC,IAAI,KACvDH,QAAQE,OAAO,CAACC,IAAI,KACpBC;IACN,OAAO;QACLC,SAAST;OACLM,WAAWL,sBAAsBS,IAAI,CAACJ,WAAW;QAAEA;IAAQ,IAAI,CAAC;AAExE"}