@aphexcms/plugin-forms 0.1.0

package/dist/submit.js

@@ -0,0 +1,213 @@
+import { z } from 'zod';
+import { validateFormData } from '@aphexcms/cms-core';
+import { systemContext } from '@aphexcms/cms-core/local-api/auth-helpers';
+import { compileForm, isInputField } from './compile.js';
+import { fieldLabels, toStoredValue } from './template.js';
+import { formSubmissionCreated } from './events.js';
+/**
+ * `POST /api/form-submissions` — the one public surface this plugin opens.
+ *
+ * Everything here treats the request as hostile, because it is: this is the only
+ * endpoint in the CMS an anonymous visitor is *meant* to write through.
+ *
+ *  - The submitted values are validated against the form's own fields, using the
+ *    same engine the admin uses (see `compile.ts`). A select can only hold an
+ *    option the form offers; an email field must hold an email.
+ *  - Only fields the form declares are stored. A key the form doesn't define is
+ *    dropped rather than persisted, so a crafted request can't stuff arbitrary
+ *    data into a document.
+ *  - The submission is written under `systemContext`, which bypasses RBAC — the
+ *    visitor has no account. That is safe only because the shape written here is
+ *    fully determined by the form document, never by the request.
+ *  - No email is sent from this path. A submission is stored and an event is
+ *    emitted; the notification runs as a durable job, so a mail outage can't fail
+ *    a visitor's submit and a retry can't re-store the submission.
+ */
+const submitRequest = z.object({
+    form: z.string().min(1),
+    version: z.string().min(1).max(128),
+    /** Field name → submitted value. */
+    data: z
+        .record(z.string(), z.unknown())
+        .refine((data) => Object.keys(data).length <= 50, 'Too many fields'),
+    /**
+     * Honeypot. A real visitor never sees this input and so never fills it; a bot
+     * that fills every field it finds does. Named innocuously on purpose.
+     */
+    website: z.string().optional()
+});
+/** Requests per window, per IP. Deliberately generous — this is a floor, not a filter. */
+const IP_RATE_LIMIT = 10;
+const FORM_RATE_LIMIT = 50;
+const RATE_WINDOW_MS = 60_000;
+const MAX_REQUEST_BYTES = 64 * 1024;
+/**
+ * In-memory rate limiting.
+ *
+ * Per-process and therefore per-instance: behind several replicas the effective
+ * limit multiplies, and a restart forgets everything. That is a real limitation
+ * and it is the right trade for a starter — it costs nothing, needs no Redis, and
+ * stops the naive case. A site under actual attack wants this at the edge (a WAF
+ * or the platform's own rate limiting), where a request can be dropped before it
+ * reaches an application process at all.
+ */
+const hits = new Map();
+function rateLimited(key, limit) {
+    const now = Date.now();
+    const entry = hits.get(key);
+    if (!entry || now > entry.resetAt) {
+        hits.set(key, { count: 1, resetAt: now + RATE_WINDOW_MS });
+        // Opportunistic sweep: without it the map grows for the life of the process,
+        // one entry per IP ever seen.
+        if (hits.size > 5000) {
+            for (const [k, v] of hits)
+                if (now > v.resetAt)
+                    hits.delete(k);
+        }
+        return false;
+    }
+    entry.count += 1;
+    return entry.count > limit;
+}
+/** Trusted connection address supplied by the framework bridge. */
+function clientKey(c) {
+    return c.env.clientAddress?.trim() || 'unknown';
+}
+async function parseRequest(c) {
+    const contentLength = Number(c.req.header('content-length'));
+    if (Number.isFinite(contentLength) && contentLength > MAX_REQUEST_BYTES)
+        return null;
+    const body = await c.req.text().catch(() => '');
+    if (new TextEncoder().encode(body).byteLength > MAX_REQUEST_BYTES)
+        return null;
+    const json = (() => {
+        try {
+            return JSON.parse(body);
+        }
+        catch {
+            return null;
+        }
+    })();
+    const parsed = submitRequest.safeParse(json);
+    return parsed.success ? parsed.data : null;
+}
+export async function handleSubmit(c) {
+    const { aphexCMS } = c.var;
+    const parsed = await parseRequest(c);
+    if (!parsed) {
+        return c.json({ success: false, error: 'Invalid request' }, 400);
+    }
+    const { form: formId, version, data, website } = parsed;
+    /*
+     * A tripped honeypot returns success. Telling a bot it was detected teaches
+     * whoever wrote it to stop filling that field; a 200 with nothing stored costs
+     * them a submission and no information.
+     */
+    if (website && website.trim() !== '') {
+        return c.json({ success: true });
+    }
+    if (rateLimited(`ip:${clientKey(c)}`, IP_RATE_LIMIT) ||
+        rateLimited(`form:${formId}`, FORM_RATE_LIMIT)) {
+        return c.json({ success: false, error: 'Too many submissions. Try again shortly.' }, 429);
+    }
+    const organizationId = await aphexCMS.databaseAdapter.resolvePublishedDocumentOrganizationId(formId, 'form');
+    if (!organizationId)
+        return c.json({ success: false, error: 'Form not found' }, 404);
+    const context = systemContext(organizationId);
+    /*
+     * Collections are reached by name, not through the typed `collections` map:
+     * that map is generated from the *app's* schemas, and a plugin's own
+     * collections aren't in it at compile time. `getCollection` is the accessor
+     * built for exactly this — dynamic access from route handlers.
+     */
+    const forms = aphexCMS.localAPI.getCollection('form');
+    const submissions = aphexCMS.localAPI.getCollection('formSubmission');
+    if (!forms || !submissions) {
+        aphexCMS.logger?.error('[forms] plugin collections are not registered');
+        return c.json({ success: false, error: 'Forms are not configured' }, 500);
+    }
+    // Published only. A form still in draft is not live, and honouring it would let
+    // anyone submit against a form the editor hasn't finished.
+    const formDoc = await forms
+        .findByID(context, formId, { perspective: 'published' })
+        .catch(() => null);
+    if (!formDoc)
+        return c.json({ success: false, error: 'Form not found' }, 404);
+    if (formDoc._meta?.status !== 'published') {
+        return c.json({ success: false, error: 'Form not found' }, 404);
+    }
+    if (!formDoc._meta?.publishedHash || formDoc._meta.publishedHash !== version) {
+        return c.json({ success: false, error: 'This form changed. Refresh the page and try again.' }, 409);
+    }
+    const declared = (formDoc.fields ?? []);
+    const inputs = declared.filter(isInputField);
+    // Keep only what the form declares — see the note above about stuffing.
+    const submitted = {};
+    for (const field of inputs)
+        submitted[field.name] = data[field.name];
+    const definition = compileForm({ ...formDoc, id: formId });
+    const shaped = definition.transform ? definition.transform(submitted) : submitted;
+    const result = await validateFormData(definition, shaped);
+    if (!result.isValid) {
+        // Field-keyed so the form can show each message against its own input.
+        const errors = {};
+        for (const entry of result.errors)
+            errors[entry.field] = entry.errors[0] ?? 'Invalid';
+        return c.json({ success: false, error: 'Please check the form', errors }, 400);
+    }
+    const answers = inputs.map((field) => ({
+        field: field.name,
+        value: toStoredValue(result.normalizedData[field.name])
+    }));
+    // A one-line description for the submissions list, so it's readable without
+    // opening every row. The first answer with something in it is nearly always
+    // the name or the email.
+    const labels = fieldLabels(declared);
+    const first = answers.find((a) => a.value);
+    const summary = first
+        ? `${labels.get(first.field) ?? first.field}: ${first.value}`
+        : 'Submission';
+    const submissionId = crypto.randomUUID();
+    const notificationEmails = (formDoc.emails ?? [])
+        .filter((email) => typeof email.to === 'string' && email.to.trim().length > 0)
+        .map((email, index) => ({
+        _type: 'submissionNotification',
+        _key: `notification-${index}`,
+        to: email.to?.trim(),
+        replyTo: email.replyTo?.trim() || undefined,
+        subject: email.subject ?? 'New form submission',
+        message: email.message ?? '{{allFields}}'
+    }));
+    await submissions.create(context, {
+        form: { _type: 'reference', _ref: formId },
+        summary: summary.slice(0, 200),
+        submittedAt: new Date().toISOString(),
+        submissionData: answers.map((answer, i) => ({
+            _type: 'answer',
+            _key: `a-${i}`,
+            ...answer
+        })),
+        notificationEmails,
+        notificationFieldLabels: inputs.map((field, index) => ({
+            _type: 'submissionFieldLabel',
+            _key: `label-${index}`,
+            field: field.name,
+            label: labels.get(field.name) ?? field.name
+        }))
+    }, {
+        id: submissionId,
+        skipVersioning: true,
+        outboxEvents: [
+            {
+                type: formSubmissionCreated.type,
+                payload: formSubmissionCreated.parse({ submissionId, formId })
+            }
+        ]
+    });
+    return c.json({
+        success: true,
+        confirmationType: formDoc.confirmationType ?? 'message',
+        redirectUrl: formDoc.confirmationType === 'redirect' ? (formDoc.redirectUrl ?? null) : null
+    });
+}
+//# sourceMappingURL=submit.js.map

package/dist/submit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit.js","sourceRoot":"","sources":["../src/lib/submit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE1E,OAAO,EACN,WAAW,EACX,YAAY,EAIZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAe,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAkBjD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,oCAAoC;IACpC,IAAI,EAAE,CAAC;SACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,iBAAiB,CAAC;IACrE;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8C,CAAC;AAEnE,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE5B,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,cAAc,EAAE,CAAC,CAAC;QAC3D,6EAA6E;QAC7E,8BAA8B;QAC9B,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI;gBAAE,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO;oBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;AAC5B,CAAC;AAED,mEAAmE;AACnE,SAAS,SAAS,CAAC,CAAoB;IACtC,OAAO,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,CAAoB;IAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAoB;IACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;IAE3B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAExD;;;;OAIG;IACH,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,IACC,WAAW,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,CAAC;QAChD,WAAW,CAAC,QAAQ,MAAM,EAAE,EAAE,eAAe,CAAC,EAC7C,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,sCAAsC,CAC3F,MAAM,EACN,MAAM,CACN,CAAC;IACF,IAAI,CAAC,cAAc;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAE9C;;;;;OAKG;IACH,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAe,MAAM,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAyB,gBAAgB,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACxE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IAED,gFAAgF;IAChF,2DAA2D;IAC3D,MAAM,OAAO,GAAG,MAAM,KAAK;SACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;SACvD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEpB,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QAC9E,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAC/E,GAAG,CACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAqB,CAAC;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE7C,wEAAwE;IACxE,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,SAAS,CAAC,KAAK,CAAC,IAAc,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;IAEzF,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,uEAAuE;QACvE,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QACtF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,OAAO,GAAa,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChD,KAAK,EAAE,KAAK,CAAC,IAAc;QAC3B,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;KACjE,CAAC,CAAC,CAAC;IAEJ,4EAA4E;IAC5E,4EAA4E;IAC5E,yBAAyB;IACzB,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK;QACpB,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE;QAC7D,CAAC,CAAC,YAAY,CAAC;IAEhB,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACzC,MAAM,kBAAkB,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;SAC/C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7E,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACvB,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,gBAAgB,KAAK,EAAE;QAC7B,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,qBAAqB;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,eAAe;KACzC,CAAC,CAAC,CAAC;IACL,MAAM,WAAW,CAAC,MAAM,CACvB,OAAO,EACP;QACC,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;QAC1C,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC9B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,KAAK,CAAC,EAAE;YACd,GAAG,MAAM;SACT,CAAC,CAAC;QACH,kBAAkB;QAClB,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACtD,KAAK,EAAE,sBAAsB;YAC7B,IAAI,EAAE,SAAS,KAAK,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,IAAc;YAC3B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,IAAK,KAAK,CAAC,IAAe;SACjE,CAAC,CAAC;KACH,EACD;QACC,EAAE,EAAE,YAAY;QAChB,cAAc,EAAE,IAAI;QACpB,YAAY,EAAE;YACb;gBACC,IAAI,EAAE,qBAAqB,CAAC,IAAI;gBAChC,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;aAC9D;SACD;KACD,CACD,CAAC;IAEF,OAAO,CAAC,CAAC,IAAI,CAAC;QACb,OAAO,EAAE,IAAI;QACb,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;QACvD,WAAW,EAAE,OAAO,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3F,CAAC,CAAC;AACJ,CAAC"}

package/dist/template.d.ts

@@ -0,0 +1,36 @@
+import type { FormFieldValue } from './compile.js';
+/**
+ * `{{fieldName}}` substitution for notification emails.
+ *
+ * Deliberately tiny and deliberately not a template engine. The strings come
+ * from an editor, and the values come from the public internet; anything with
+ * expressions, property access or partials in it would be a way to reach further
+ * than the submission. A name is looked up in a plain map or it is left alone.
+ */
+/** One stored answer. */
+export interface Answer {
+    field: string;
+    value: string;
+}
+/** The whole submission as `Label: value` lines, for the default `{{allFields}}`. */
+export declare function renderAllFields(answers: Answer[], labels: Map<string, string>): string;
+/**
+ * Replace `{{token}}` in an editor-authored string.
+ *
+ * An unknown token is left verbatim rather than blanked: a typo that renders as
+ * `{{emial}}` in the email is a bug someone notices and fixes, whereas one that
+ * silently renders nothing looks like the visitor left the field empty.
+ */
+export declare function renderTemplate(template: string, answers: Answer[], labels: Map<string, string>): string;
+/** Field name → the label an editor gave it, for readable email output. */
+export declare function fieldLabels(fields: FormFieldValue[]): Map<string, string>;
+/**
+ * A submitted value as a string, for storage and email.
+ *
+ * Everything is stored as text on purpose: a submission is a record of what was
+ * sent, and it has to stay readable after the form is edited. A checkbox reads
+ * "Yes"/"No" rather than "true"/"false" because the audience for a submission is
+ * a person reading an inbox.
+ */
+export declare function toStoredValue(value: unknown): string;
+//# sourceMappingURL=template.d.ts.map

package/dist/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../src/lib/template.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;;GAOG;AAEH,yBAAyB;AACzB,MAAM,WAAW,MAAM;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAKD,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAItF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EAAE,EACjB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACzB,MAAM,CASR;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAQzE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIpD"}

package/dist/template.js

@@ -0,0 +1,51 @@
+/** `{{name}}` — a bare field name, nothing else. */
+const TOKEN = /\{\{\s*([a-zA-Z][a-zA-Z0-9_]*)\s*\}\}/g;
+/** The whole submission as `Label: value` lines, for the default `{{allFields}}`. */
+export function renderAllFields(answers, labels) {
+    return answers
+        .map(({ field, value }) => `${labels.get(field) ?? field}: ${value || '—'}`)
+        .join('\n');
+}
+/**
+ * Replace `{{token}}` in an editor-authored string.
+ *
+ * An unknown token is left verbatim rather than blanked: a typo that renders as
+ * `{{emial}}` in the email is a bug someone notices and fixes, whereas one that
+ * silently renders nothing looks like the visitor left the field empty.
+ */
+export function renderTemplate(template, answers, labels) {
+    const values = new Map(answers.map((a) => [a.field, a.value]));
+    const all = renderAllFields(answers, labels);
+    return template.replace(TOKEN, (match, name) => {
+        if (name === 'allFields')
+            return all;
+        const value = values.get(name);
+        return value === undefined ? match : value;
+    });
+}
+/** Field name → the label an editor gave it, for readable email output. */
+export function fieldLabels(fields) {
+    const labels = new Map();
+    for (const field of fields) {
+        if (typeof field.name === 'string' && field.name) {
+            labels.set(field.name, field.label ?? field.name);
+        }
+    }
+    return labels;
+}
+/**
+ * A submitted value as a string, for storage and email.
+ *
+ * Everything is stored as text on purpose: a submission is a record of what was
+ * sent, and it has to stay readable after the form is edited. A checkbox reads
+ * "Yes"/"No" rather than "true"/"false" because the audience for a submission is
+ * a person reading an inbox.
+ */
+export function toStoredValue(value) {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'boolean')
+        return value ? 'Yes' : 'No';
+    return String(value);
+}
+//# sourceMappingURL=template.js.map

package/dist/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../src/lib/template.ts"],"names":[],"mappings":"AAiBA,oDAAoD;AACpD,MAAM,KAAK,GAAG,wCAAwC,CAAC;AAEvD,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,OAAiB,EAAE,MAA2B;IAC7E,OAAO,OAAO;SACZ,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,KAAK,IAAI,GAAG,EAAE,CAAC;SAC3E,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC7B,QAAgB,EAChB,OAAiB,EACjB,MAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE7C,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACtD,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,GAAG,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,MAAwB;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+	"name": "@aphexcms/plugin-forms",
+	"version": "0.1.0",
+	"description": "Form builder plugin for AphexCMS — editor-composed forms, stored submissions, and email notifications",
+	"license": "MIT",
+	"publishConfig": {
+		"access": "public"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/IcelandicIcecream/aphex.git",
+		"directory": "plugins/plugin-forms"
+	},
+	"type": "module",
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"svelte": "./dist/index.js",
+			"default": "./dist/index.js"
+		},
+		"./schema": {
+			"types": "./dist/schema.d.ts",
+			"svelte": "./dist/schema.js",
+			"default": "./dist/schema.js"
+		}
+	},
+	"files": [
+		"dist"
+	],
+	"scripts": {
+		"dev": "tsc --watch --preserveWatchOutput",
+		"build": "tsc && node ../../scripts/fix-imports.js ./dist",
+		"check": "tsc --noEmit",
+		"dev:local": "node ../../scripts/swap-package-paths.js ./package.json src lib",
+		"prepack": "node ../../scripts/swap-package-paths.js ./package.json dist lib",
+		"postpack": "node ../../scripts/swap-package-paths.js ./package.json src lib"
+	},
+	"keywords": [
+		"aphex",
+		"aphexcms",
+		"cms",
+		"plugin",
+		"forms",
+		"form-builder"
+	],
+	"devDependencies": {
+		"typescript": "^5.9.3",
+		"hono": "^4.6.0"
+	},
+	"peerDependencies": {
+		"@aphexcms/cms-core": "workspace:>=9",
+		"zod": "^4.0.0"
+	},
+	"dependencies": {
+		"@lucide/svelte": "^0.554.0"
+	}
+}