@dani-builder/strapi-plugin-builder 0.15.0 → 1.0.0

package/dist/server/src/services/submission.js

@@ -0,0 +1,284 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
+const forms_1 = require("../config/forms");
+const form_1 = require("../validation/form");
+const submission_1 = require("../validation/submission");
+const submission_access_1 = require("../validation/submission-access");
+const idempotency_collision_1 = require("./idempotency-collision");
+const notification_1 = __importDefault(require("./notification"));
+function receipt(ledger) {
+    return { id: ledger.documentId, receivedAt: ledger.createdAt };
+}
+function freeze(value) {
+    if (value && typeof value === 'object') {
+        for (const entry of Object.values(value))
+            freeze(entry);
+        Object.freeze(value);
+    }
+    return value;
+}
+function errorName(error) {
+    return error instanceof Error ? error.name : 'Error';
+}
+const submission = ({ strapi }) => {
+    const documents = (uid) => strapi.documents(uid);
+    async function findForm(slug) {
+        const [form] = await documents(form_1.FORM_UID).findMany({
+            filters: { slug },
+            limit: 1,
+        });
+        if (!form)
+            throw new forms_1.SubmissionServiceError(404, 'form_not_found');
+        return form;
+    }
+    async function recordDelivery(documentId, delivery, replace = true) {
+        await strapi.db.transaction(async ({ trx }) => {
+            await strapi.db
+                .getConnection(strapi.db.metadata.get(form_1.SUBMISSION_UID).tableName)
+                .transacting(trx)
+                .where({ document_id: documentId })
+                .forUpdate()
+                .select('id');
+            const current = await documents(form_1.SUBMISSION_UID).findOne({ documentId });
+            if (!current)
+                return;
+            const deliveries = Array.isArray(current.deliveries)
+                ? [...current.deliveries]
+                : [];
+            const index = replace
+                ? deliveries.findIndex((item) => (0, form_1.isObject)(item) && item.channel === delivery.channel)
+                : -1;
+            const previous = index >= 0 ? deliveries[index] : undefined;
+            const attempts = (0, form_1.isObject)(previous) && typeof previous.attempts === 'number'
+                ? previous.attempts
+                : 0;
+            const result = { ...delivery, attempts: attempts + delivery.attempts };
+            if (index >= 0)
+                deliveries[index] = result;
+            else
+                deliveries.push(result);
+            const params = { documentId, data: { deliveries } };
+            await (0, submission_access_1.writeSubmission)(params, () => documents(form_1.SUBMISSION_UID).update(params));
+        });
+    }
+    async function notify(form, ledger, fields) {
+        return (0, notification_1.default)({ strapi }).send({
+            form,
+            submissionId: ledger.documentId,
+            receivedAt: ledger.createdAt,
+            fields,
+        }, (delivery) => recordDelivery(ledger.documentId, delivery));
+    }
+    async function afterSave(hooks, context) {
+        for (const hook of hooks) {
+            if (!hook.afterSave)
+                continue;
+            try {
+                await hook.afterSave(context);
+            }
+            catch (error) {
+                const name = errorName(error);
+                strapi.log.error(`[builder] afterSave form=${context.submission.form} submission=${context.ledger.documentId} error=${name}`);
+                try {
+                    await recordDelivery(context.ledger.documentId, {
+                        channel: 'afterSave',
+                        status: 'failed',
+                        attempts: 1,
+                        lastError: name,
+                        sentAt: null,
+                    }, false);
+                }
+                catch (recordError) {
+                    strapi.log.error(`[builder] afterSave form=${context.submission.form} submission=${context.ledger.documentId} error=${errorName(recordError)}`);
+                }
+            }
+        }
+    }
+    return {
+        /** Owns its transaction; call outside an ambient Strapi transaction so a
+         * uniqueness failure can roll back before recovery and hooks run postcommit. */
+        async submit(slug, input, options = {}) {
+            if (strapi.db.inTransaction())
+                throw new forms_1.SubmissionServiceError(503, 'submission_unavailable');
+            const form = await findForm(slug);
+            const normalized = (0, submission_1.normalizeSubmission)(form.fields, input);
+            if (normalized.formVersion !== form.version)
+                throw new forms_1.SubmissionServiceError(409, 'form_outdated');
+            const candidate = freeze({
+                form: slug,
+                fields: normalized.fields,
+                idempotencyKey: normalized.idempotencyKey,
+            });
+            const config = strapi.config.get('plugin::builder');
+            const hooks = [
+                config?.forms?.hooks?.['*'],
+                config?.forms?.hooks?.[slug],
+            ].filter((hook) => !!hook);
+            const frozenForm = freeze(structuredClone(form));
+            for (const hook of hooks) {
+                if (!hook.validate)
+                    continue;
+                let rejection;
+                try {
+                    rejection = await hook.validate(candidate, {
+                        form: frozenForm,
+                        request: options.request,
+                    });
+                }
+                catch {
+                    throw new forms_1.SubmissionServiceError(500, 'hook_failed');
+                }
+                if (rejection === undefined)
+                    continue;
+                if (!(0, form_1.isObject)(rejection) ||
+                    !Number.isInteger(rejection.status) ||
+                    Number(rejection.status) < 400 ||
+                    Number(rejection.status) > 499 ||
+                    typeof rejection.code !== 'string' ||
+                    !rejection.code.trim() ||
+                    (rejection.message !== undefined &&
+                        typeof rejection.message !== 'string'))
+                    throw new forms_1.SubmissionServiceError(500, 'hook_failed');
+                throw new forms_1.SubmissionServiceError(Number(rejection.status), rejection.code, [], rejection.message);
+            }
+            const payloadHash = (0, node_crypto_1.createHash)('sha256')
+                .update(JSON.stringify({
+                fields: Object.fromEntries(Object.keys(candidate.fields)
+                    .sort()
+                    .map((key) => [key, candidate.fields[key]])),
+                form: slug,
+            }))
+                .digest('hex');
+            let insertCollision = false;
+            let saved;
+            try {
+                saved = await strapi.db.transaction(async ({ trx }) => {
+                    // Same lock as form update/delete: a form cannot disappear mid-submit.
+                    await strapi.db
+                        .getConnection(strapi.db.metadata.get(form_1.FORM_UID).tableName)
+                        .transacting(trx)
+                        .where({ document_id: form.documentId })
+                        .forUpdate()
+                        .select('version');
+                    const current = await documents(form_1.FORM_UID).findOne({
+                        documentId: form.documentId,
+                    });
+                    if (!current)
+                        throw new forms_1.SubmissionServiceError(404, 'form_not_found');
+                    if (current.version !== form.version)
+                        throw new forms_1.SubmissionServiceError(409, 'form_outdated');
+                    const createParams = {
+                        data: {
+                            form: slug,
+                            idempotencyKey: candidate.idempotencyKey,
+                            payloadHash,
+                            consentAt: new Date().toISOString(),
+                            consentVersion: form.consent.version,
+                            targetUid: form.targetUid,
+                        },
+                    };
+                    let ledger;
+                    try {
+                        ledger = (await (0, submission_access_1.writeSubmission)(createParams, () => documents(form_1.SUBMISSION_UID).create(createParams)));
+                    }
+                    catch (error) {
+                        insertCollision = (0, idempotency_collision_1.isIdempotencyCollision)(error);
+                        throw error;
+                    }
+                    const record = await documents(form.targetUid).create({
+                        data: { ...candidate.fields },
+                    });
+                    const updateParams = {
+                        documentId: ledger.documentId,
+                        data: { targetDocumentId: record.documentId },
+                    };
+                    ledger = (await (0, submission_access_1.writeSubmission)(updateParams, () => documents(form_1.SUBMISSION_UID).update(updateParams)));
+                    return { ledger, record };
+                });
+            }
+            catch (error) {
+                if (error instanceof forms_1.SubmissionServiceError)
+                    throw error;
+                if (insertCollision) {
+                    try {
+                        const [existing] = await documents(form_1.SUBMISSION_UID).findMany({
+                            filters: { idempotencyKey: candidate.idempotencyKey },
+                            limit: 1,
+                        });
+                        if (existing) {
+                            if (existing.payloadHash !== payloadHash)
+                                throw new forms_1.SubmissionServiceError(409, 'idempotency_conflict');
+                            return receipt(existing);
+                        }
+                    }
+                    catch (lookupError) {
+                        if (lookupError instanceof forms_1.SubmissionServiceError)
+                            throw lookupError;
+                    }
+                }
+                throw new forms_1.SubmissionServiceError(503, 'submission_unavailable');
+            }
+            const context = freeze({
+                submission: candidate,
+                record: saved.record,
+                ledger: saved.ledger,
+            });
+            setImmediate(() => {
+                void Promise.all([
+                    afterSave(hooks, context),
+                    notify(form, saved.ledger, candidate.fields),
+                ]).catch(() => {
+                    strapi.log.error(`[builder] afterSave form=${slug} submission=${saved.ledger.documentId} error=Error`);
+                });
+            });
+            return receipt(saved.ledger);
+        },
+        async redeliver(documentId) {
+            const row = await documents(form_1.SUBMISSION_UID).findOne({ documentId });
+            if (!row)
+                throw new forms_1.SubmissionServiceError(404, 'submission_not_found');
+            const ledger = row;
+            const form = await findForm(ledger.form);
+            if (ledger.targetUid !== form.targetUid || !ledger.targetDocumentId)
+                throw new forms_1.SubmissionServiceError(404, 'submission_record_not_found');
+            const record = await documents(ledger.targetUid).findOne({
+                documentId: ledger.targetDocumentId,
+            });
+            if (!record)
+                throw new forms_1.SubmissionServiceError(404, 'submission_record_not_found');
+            const fields = Object.fromEntries(form.fields
+                .filter((field) => Object.prototype.hasOwnProperty.call(record, field.name))
+                .map((field) => [field.name, record[field.name]]));
+            return notify(form, ledger, fields);
+        },
+        async findByField(slug, name, value) {
+            const form = await findForm(slug);
+            if (!form.fields.some((field) => field.name === name))
+                throw new forms_1.SubmissionServiceError(400, 'invalid_submission', [
+                    { field: name, code: 'unknown' },
+                ]);
+            const ledgers = await documents(form_1.SUBMISSION_UID).findMany({
+                filters: { form: slug },
+            });
+            const matches = [];
+            for (const row of ledgers) {
+                if (typeof row.targetUid !== 'string' ||
+                    typeof row.targetDocumentId !== 'string')
+                    continue;
+                const records = await documents(row.targetUid).findMany({
+                    filters: { documentId: row.targetDocumentId, [name]: { $eq: value } },
+                    limit: 1,
+                });
+                if (records.length)
+                    matches.push(row);
+            }
+            return matches;
+        },
+    };
+};
+exports.default = submission;
+//# sourceMappingURL=submission.js.map

package/dist/server/src/services/submission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submission.js","sourceRoot":"","sources":["../../../../server/src/services/submission.ts"],"names":[],"mappings":";;;;;AAAA,6CAAyC;AAGzC,2CAAyD;AAOzD,6CAAwE;AAExE,yDAA+D;AAC/D,uEAAkE;AAClE,mEAAiE;AACjE,kEAAiD;AAUjD,SAAS,OAAO,CAAC,MAAwB;IACvC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AACjE,CAAC;AACD,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACvD,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,EAAE,MAAM,EAA2B,EAAE,EAAE;IACzD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAChC,MAAM,CAAC,SAAS,CACd,GAA6C,CACtB,CAAC;IAC5B,KAAK,UAAU,QAAQ,CAAC,IAAY;QAClC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,CAAC,eAAQ,CAAC,CAAC,QAAQ,CAAC;YAChD,OAAO,EAAE,EAAE,IAAI,EAAE;YACjB,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACnE,OAAO,IAA6B,CAAC;IACvC,CAAC;IACD,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,QAAkB,EAClB,OAAO,GAAG,IAAI;QAEd,MAAM,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAC5C,MAAM,MAAM,CAAC,EAAE;iBACZ,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAc,CAAC,CAAC,SAAS,CAAC;iBAC/D,WAAW,CAAC,GAAG,CAAC;iBAChB,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;iBAClC,SAAS,EAAE;iBACX,MAAM,CAAC,IAAI,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,qBAAc,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;gBACzB,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,KAAK,GAAG,OAAO;gBACnB,CAAC,CAAC,UAAU,CAAC,SAAS,CAClB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,eAAQ,EAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAC9D;gBACH,CAAC,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,QAAQ,GACZ,IAAA,eAAQ,EAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBACzD,CAAC,CAAC,QAAQ,CAAC,QAAQ;gBACnB,CAAC,CAAC,CAAC,CAAC;YACR,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvE,IAAI,KAAK,IAAI,CAAC;gBAAE,UAAU,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;;gBACtC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC;YACpD,MAAM,IAAA,mCAAe,EAAC,MAAM,EAAE,GAAG,EAAE,CACjC,SAAS,CAAC,qBAAc,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CACzC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,UAAU,MAAM,CACnB,IAAgB,EAChB,MAAwB,EACxB,MAAyC;QAEzC,OAAO,IAAA,sBAAmB,EAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CACzC;YACE,IAAI;YACJ,YAAY,EAAE,MAAM,CAAC,UAAU;YAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,MAAM;SACP,EACD,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,KAAK,UAAU,SAAS,CACtB,KAAkB,EAClB,OAIC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,SAAS;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,KAAK,CACd,4BAA4B,OAAO,CAAC,UAAU,CAAC,IAAI,eAAe,OAAO,CAAC,MAAM,CAAC,UAAU,UAAU,IAAI,EAAE,CAC5G,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,cAAc,CAClB,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB;wBACE,OAAO,EAAE,WAAW;wBACpB,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,CAAC;wBACX,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,IAAI;qBACb,EACD,KAAK,CACN,CAAC;gBACJ,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,MAAM,CAAC,GAAG,CAAC,KAAK,CACd,4BAA4B,OAAO,CAAC,UAAU,CAAC,IAAI,eAAe,OAAO,CAAC,MAAM,CAAC,UAAU,UAAU,SAAS,CAAC,WAAW,CAAC,EAAE,CAC9H,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL;wFACgF;QAChF,KAAK,CAAC,MAAM,CACV,IAAY,EACZ,KAAc,EACd,UAAiC,EAAE;YAEnC,IAAI,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE;gBAC3B,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,IAAA,gCAAmB,EAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3D,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO;gBACzC,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC;gBACvB,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,cAAc,EAAE,UAAU,CAAC,cAAc;aAC1C,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CACvB,CAAC;YAC5B,MAAM,KAAK,GAAG;gBACZ,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;gBAC3B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC;aAC7B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAC7B,IAAI,SAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;wBACzC,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;gBACvD,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS;oBAAE,SAAS;gBACtC,IACE,CAAC,IAAA,eAAQ,EAAC,SAAS,CAAC;oBACpB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC;oBACnC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,GAAG;oBAC9B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,GAAG;oBAC9B,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;oBAClC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;oBACtB,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS;wBAC9B,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC;oBAExC,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;gBACvD,MAAM,IAAI,8BAAsB,CAC9B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EACxB,SAAS,CAAC,IAAI,EACd,EAAE,EACF,SAAS,CAAC,OAA6B,CACxC,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;iBACrC,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;qBAC1B,IAAI,EAAE;qBACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAC9C;gBACD,IAAI,EAAE,IAAI;aACX,CAAC,CACH;iBACA,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,KAAoE,CAAC;YACzE,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;oBACpD,uEAAuE;oBACvE,MAAM,MAAM,CAAC,EAAE;yBACZ,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAQ,CAAC,CAAC,SAAS,CAAC;yBACzD,WAAW,CAAC,GAAG,CAAC;yBAChB,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;yBACvC,SAAS,EAAE;yBACX,MAAM,CAAC,SAAS,CAAC,CAAC;oBACrB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,eAAQ,CAAC,CAAC,OAAO,CAAC;wBAChD,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC5B,CAAC,CAAC;oBACH,IAAI,CAAC,OAAO;wBAAE,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;oBACtE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;wBAClC,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;oBACzD,MAAM,YAAY,GAAG;wBACnB,IAAI,EAAE;4BACJ,IAAI,EAAE,IAAI;4BACV,cAAc,EAAE,SAAS,CAAC,cAAc;4BACxC,WAAW;4BACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACnC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;4BACpC,SAAS,EAAE,IAAI,CAAC,SAAS;yBAC1B;qBACF,CAAC;oBACF,IAAI,MAAwB,CAAC;oBAC7B,IAAI,CAAC;wBACH,MAAM,GAAG,CAAC,MAAM,IAAA,mCAAe,EAAC,YAAY,EAAE,GAAG,EAAE,CACjD,SAAS,CAAC,qBAAc,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAC/C,CAAqB,CAAC;oBACzB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,eAAe,GAAG,IAAA,8CAAsB,EAAC,KAAK,CAAC,CAAC;wBAChD,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;wBACpD,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE;qBAC9B,CAAC,CAAC;oBACH,MAAM,YAAY,GAAG;wBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,IAAI,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE;qBAC9C,CAAC;oBACF,MAAM,GAAG,CAAC,MAAM,IAAA,mCAAe,EAAC,YAAY,EAAE,GAAG,EAAE,CACjD,SAAS,CAAC,qBAAc,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAC/C,CAAqB,CAAC;oBACvB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5B,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,8BAAsB;oBAAE,MAAM,KAAK,CAAC;gBACzD,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,SAAS,CAAC,qBAAc,CAAC,CAAC,QAAQ,CAAC;4BAC1D,OAAO,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE;4BACrD,KAAK,EAAE,CAAC;yBACT,CAAC,CAAC;wBACH,IAAI,QAAQ,EAAE,CAAC;4BACb,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW;gCACtC,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;4BAChE,OAAO,OAAO,CAAC,QAA4B,CAAC,CAAC;wBAC/C,CAAC;oBACH,CAAC;oBAAC,OAAO,WAAW,EAAE,CAAC;wBACrB,IAAI,WAAW,YAAY,8BAAsB;4BAC/C,MAAM,WAAW,CAAC;oBACtB,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC;gBACrB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,YAAY,CAAC,GAAG,EAAE;gBAChB,KAAK,OAAO,CAAC,GAAG,CAAC;oBACf,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;oBACzB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;iBAC7C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACZ,MAAM,CAAC,GAAG,CAAC,KAAK,CACd,4BAA4B,IAAI,eAAe,KAAK,CAAC,MAAM,CAAC,UAAU,cAAc,CACrF,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,UAAkB;YAChC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,qBAAc,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,GAAuB,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBACjE,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;gBACvD,UAAU,EAAE,MAAM,CAAC,gBAAgB;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM;gBACT,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,IAAI,CAAC,MAAM;iBACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CACzD;iBACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CACpD,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,WAAW,CACf,IAAY,EACZ,IAAY,EACZ,KAAc;YAEd,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBACnD,MAAM,IAAI,8BAAsB,CAAC,GAAG,EAAE,oBAAoB,EAAE;oBAC1D,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;iBACjC,CAAC,CAAC;YACL,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,qBAAc,CAAC,CAAC,QAAQ,CAAC;gBACvD,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACxB,CAAC,CAAC;YACH,MAAM,OAAO,GAAuB,EAAE,CAAC;YACvC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,IACE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;oBACjC,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ;oBAExC,SAAS;gBACX,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;oBACtD,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;oBACrE,KAAK,EAAE,CAAC;iBACT,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAuB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AACF,kBAAe,UAAU,CAAC"}

package/dist/server/src/services/template.d.ts

@@ -0,0 +1,18 @@
+export interface TemplateContext {
+    fields: Readonly<Record<string, unknown>>;
+    form: {
+        name: string;
+    };
+    submission: {
+        id: string;
+        receivedAt: string;
+    };
+}
+export declare function validateTemplate(template: string, fields: string[]): void;
+export declare function renderTemplate(template: string, context: TemplateContext): string;
+export declare function renderEmail(subject: string, body: string, context: TemplateContext): {
+    subject: string;
+    text: string;
+    html: string;
+};
+//# sourceMappingURL=template.d.ts.map

package/dist/server/src/services/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../../../server/src/services/template.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AACD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAiBzE;AACD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,GACvB,MAAM,CAWR;AACD,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe;;;;EAuBzB"}

package/dist/server/src/services/template.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateTemplate = validateTemplate;
+exports.renderTemplate = renderTemplate;
+exports.renderEmail = renderEmail;
+const utils_1 = require("@strapi/utils");
+function validateTemplate(template, fields) {
+    const allowed = new Set([
+        ...fields.map((name) => `field.${name}`),
+        'form.name',
+        'submission.id',
+        'submission.receivedAt',
+    ]);
+    const remainder = template.replace(/{{\s*([^{}]+?)\s*}}/g, (_, key) => {
+        if (!allowed.has(key))
+            throw new utils_1.errors.ValidationError('notifications: unknown placeholder.');
+        return '';
+    });
+    if (remainder.includes('{{') || remainder.includes('}}'))
+        throw new utils_1.errors.ValidationError('notifications: invalid placeholder.');
+}
+function renderTemplate(template, context) {
+    return template.replace(/{{\s*([^{}]+?)\s*}}/g, (_, key) => {
+        const value = key.startsWith('field.')
+            ? context.fields[key.slice(6)]
+            : key === 'form.name'
+                ? context.form.name
+                : key === 'submission.id'
+                    ? context.submission.id
+                    : context.submission.receivedAt;
+        return value === undefined || value === null ? '' : String(value);
+    });
+}
+function renderEmail(subject, body, context) {
+    const text = renderTemplate(body, context);
+    return {
+        subject: renderTemplate(subject, context).replace(/[\r\n\u2028\u2029]/g, ''),
+        text,
+        html: text
+            .replace(/[&<>"']/g, (char) => ({
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&quot;',
+            "'": '&#39;',
+        })[char])
+            .replace(/\r?\n/g, '<br>'),
+    };
+}
+//# sourceMappingURL=template.js.map

package/dist/server/src/services/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../../../server/src/services/template.ts"],"names":[],"mappings":";;AAOA,4CAiBC;AACD,wCAcC;AACD,kCA0BC;AAlED,yCAAuC;AAOvC,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,MAAgB;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,WAAW;QACX,eAAe;QACf,uBAAuB;KACxB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAChC,sBAAsB,EACtB,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,MAAM,IAAI,cAAM,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC;IACZ,CAAC,CACF,CAAC;IACF,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtD,MAAM,IAAI,cAAM,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAC;AAC5E,CAAC;AACD,SAAgB,cAAc,CAC5B,QAAgB,EAChB,OAAwB;IAExB,OAAO,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC,GAAG,KAAK,WAAW;gBACnB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;gBACnB,CAAC,CAAC,GAAG,KAAK,eAAe;oBACvB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;oBACvB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,SAAgB,WAAW,CACzB,OAAe,EACf,IAAY,EACZ,OAAwB;IAExB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,CAC/C,qBAAqB,EACrB,EAAE,CACH;QACD,IAAI;QACJ,IAAI,EAAE,IAAI;aACP,OAAO,CACN,UAAU,EACV,CAAC,IAAI,EAAE,EAAE,CACP,CAAC;YACC,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO;SACb,CAAC,CAAC,IAAI,CAAE,CACZ;aACA,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/dist/server/src/validation/form.d.ts

@@ -0,0 +1,48 @@
+import type { NotificationConfig } from './notification';
+import type { Core } from '@strapi/strapi';
+export declare const FORM_UID = "plugin::builder.form";
+export declare const SUBMISSION_UID = "plugin::builder.submission";
+export interface FormField {
+    name: string;
+    type: string;
+    label: string;
+    required: boolean;
+    visibility: 'form' | 'hidden';
+    placeholder?: string;
+    help?: string;
+    options?: {
+        value: string;
+        label: string;
+    }[];
+    maxLength?: number;
+    min?: number;
+    max?: number;
+}
+export interface FormDefinition {
+    slug: string;
+    name: string;
+    targetUid: string;
+    fields: FormField[];
+    consent: {
+        label: string;
+        version: string;
+    };
+    notifications: NotificationConfig;
+}
+export declare function isObject(value: unknown): value is Record<string, unknown>;
+export declare function listFormFields(strapi: Core.Strapi, uid: unknown): FormField[];
+export declare function listFormTargets(strapi: Core.Strapi): {
+    uid: string;
+    name: string;
+}[];
+export declare function validateFormDefinition(strapi: Core.Strapi, value: unknown): FormDefinition;
+/** Portable configuration excludes document metadata and the server-owned version. */
+export declare function exportFormDefinition(value: Record<string, unknown>): Record<string, unknown>;
+interface DocumentContext {
+    uid: string;
+    action: string;
+    params: unknown;
+}
+export declare function createFormMiddleware(strapi: Core.Strapi): <T>(context: DocumentContext, next: () => T) => Promise<Awaited<T>>;
+export {};
+//# sourceMappingURL=form.d.ts.map

package/dist/server/src/validation/form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../../../server/src/validation/form.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAG3C,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,eAAO,MAAM,cAAc,+BAA+B,CAAC;AAgD3D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,aAAa,EAAE,kBAAkB,CAAC;CACnC;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AA+DD,wBAAgB,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS,EAAE,CAkB7E;AACD,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM;;;IAUlD;AACD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,KAAK,EAAE,OAAO,GACb,cAAc,CAmJhB;AAED,sFAAsF;AACtF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED,UAAU,eAAe;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AACD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IACxC,CAAC,EACb,SAAS,eAAe,EACxB,MAAM,MAAM,CAAC,KACZ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAsGvB"}