@dani-builder/strapi-plugin-builder 0.16.0 → 1.0.0

package/dist/server/src/services/template.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateTemplate = validateTemplate;
+exports.renderTemplate = renderTemplate;
+exports.renderEmail = renderEmail;
+const utils_1 = require("@strapi/utils");
+function validateTemplate(template, fields) {
+    const allowed = new Set([
+        ...fields.map((name) => `field.${name}`),
+        'form.name',
+        'submission.id',
+        'submission.receivedAt',
+    ]);
+    const remainder = template.replace(/{{\s*([^{}]+?)\s*}}/g, (_, key) => {
+        if (!allowed.has(key))
+            throw new utils_1.errors.ValidationError('notifications: unknown placeholder.');
+        return '';
+    });
+    if (remainder.includes('{{') || remainder.includes('}}'))
+        throw new utils_1.errors.ValidationError('notifications: invalid placeholder.');
+}
+function renderTemplate(template, context) {
+    return template.replace(/{{\s*([^{}]+?)\s*}}/g, (_, key) => {
+        const value = key.startsWith('field.')
+            ? context.fields[key.slice(6)]
+            : key === 'form.name'
+                ? context.form.name
+                : key === 'submission.id'
+                    ? context.submission.id
+                    : context.submission.receivedAt;
+        return value === undefined || value === null ? '' : String(value);
+    });
+}
+function renderEmail(subject, body, context) {
+    const text = renderTemplate(body, context);
+    return {
+        subject: renderTemplate(subject, context).replace(/[\r\n\u2028\u2029]/g, ''),
+        text,
+        html: text
+            .replace(/[&<>"']/g, (char) => ({
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&quot;',
+            "'": '&#39;',
+        })[char])
+            .replace(/\r?\n/g, '<br>'),
+    };
+}
+//# sourceMappingURL=template.js.map

package/dist/server/src/services/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../../../server/src/services/template.ts"],"names":[],"mappings":";;AAOA,4CAiBC;AACD,wCAcC;AACD,kCA0BC;AAlED,yCAAuC;AAOvC,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,MAAgB;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,WAAW;QACX,eAAe;QACf,uBAAuB;KACxB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAChC,sBAAsB,EACtB,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,MAAM,IAAI,cAAM,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC;IACZ,CAAC,CACF,CAAC;IACF,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtD,MAAM,IAAI,cAAM,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAC;AAC5E,CAAC;AACD,SAAgB,cAAc,CAC5B,QAAgB,EAChB,OAAwB;IAExB,OAAO,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC,GAAG,KAAK,WAAW;gBACnB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;gBACnB,CAAC,CAAC,GAAG,KAAK,eAAe;oBACvB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;oBACvB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,SAAgB,WAAW,CACzB,OAAe,EACf,IAAY,EACZ,OAAwB;IAExB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,CAC/C,qBAAqB,EACrB,EAAE,CACH;QACD,IAAI;QACJ,IAAI,EAAE,IAAI;aACP,OAAO,CACN,UAAU,EACV,CAAC,IAAI,EAAE,EAAE,CACP,CAAC;YACC,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO;SACb,CAAC,CAAC,IAAI,CAAE,CACZ;aACA,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/dist/server/src/validation/form.d.ts

@@ -0,0 +1,48 @@
+import type { NotificationConfig } from './notification';
+import type { Core } from '@strapi/strapi';
+export declare const FORM_UID = "plugin::builder.form";
+export declare const SUBMISSION_UID = "plugin::builder.submission";
+export interface FormField {
+    name: string;
+    type: string;
+    label: string;
+    required: boolean;
+    visibility: 'form' | 'hidden';
+    placeholder?: string;
+    help?: string;
+    options?: {
+        value: string;
+        label: string;
+    }[];
+    maxLength?: number;
+    min?: number;
+    max?: number;
+}
+export interface FormDefinition {
+    slug: string;
+    name: string;
+    targetUid: string;
+    fields: FormField[];
+    consent: {
+        label: string;
+        version: string;
+    };
+    notifications: NotificationConfig;
+}
+export declare function isObject(value: unknown): value is Record<string, unknown>;
+export declare function listFormFields(strapi: Core.Strapi, uid: unknown): FormField[];
+export declare function listFormTargets(strapi: Core.Strapi): {
+    uid: string;
+    name: string;
+}[];
+export declare function validateFormDefinition(strapi: Core.Strapi, value: unknown): FormDefinition;
+/** Portable configuration excludes document metadata and the server-owned version. */
+export declare function exportFormDefinition(value: Record<string, unknown>): Record<string, unknown>;
+interface DocumentContext {
+    uid: string;
+    action: string;
+    params: unknown;
+}
+export declare function createFormMiddleware(strapi: Core.Strapi): <T>(context: DocumentContext, next: () => T) => Promise<Awaited<T>>;
+export {};
+//# sourceMappingURL=form.d.ts.map

package/dist/server/src/validation/form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../../../server/src/validation/form.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAG3C,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,eAAO,MAAM,cAAc,+BAA+B,CAAC;AAgD3D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,aAAa,EAAE,kBAAkB,CAAC;CACnC;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AA+DD,wBAAgB,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS,EAAE,CAkB7E;AACD,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM;;;IAUlD;AACD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,KAAK,EAAE,OAAO,GACb,cAAc,CAmJhB;AAED,sFAAsF;AACtF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED,UAAU,eAAe;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AACD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IACxC,CAAC,EACb,SAAS,eAAe,EACxB,MAAM,MAAM,CAAC,KACZ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAsGvB"}

package/dist/server/src/validation/form.js

@@ -0,0 +1,354 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUBMISSION_UID = exports.FORM_UID = void 0;
+exports.isObject = isObject;
+exports.listFormFields = listFormFields;
+exports.listFormTargets = listFormTargets;
+exports.validateFormDefinition = validateFormDefinition;
+exports.exportFormDefinition = exportFormDefinition;
+exports.createFormMiddleware = createFormMiddleware;
+const notification_1 = require("./notification");
+const submission_access_1 = require("./submission-access");
+const utils_1 = require("@strapi/utils");
+const content_type_availability_1 = require("../content-type-availability");
+exports.FORM_UID = 'plugin::builder.form';
+exports.SUBMISSION_UID = 'plugin::builder.submission';
+const scalarTypes = new Set([
+    'string',
+    'text',
+    'email',
+    'integer',
+    'decimal',
+    'boolean',
+    'enumeration',
+    'date',
+    'datetime',
+]);
+const systemFields = new Set([
+    'id',
+    'documentId',
+    'createdAt',
+    'updatedAt',
+    'publishedAt',
+    'createdBy',
+    'updatedBy',
+    'locale',
+    'localizations',
+]);
+const definitionKeys = [
+    'slug',
+    'name',
+    'targetUid',
+    'fields',
+    'consent',
+    'notifications',
+];
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function fail(message) {
+    throw new utils_1.errors.ValidationError(message);
+}
+function text(value, path, limit = 1000) {
+    if (typeof value !== 'string' || !value.trim() || value.length > limit)
+        fail(`${path}: expected nonempty text (maximum ${limit}).`);
+    return value;
+}
+function keys(value, allowed, path) {
+    for (const key of Object.keys(value))
+        if (!allowed.includes(key))
+            fail(`${path}.${key}: unknown or server-owned field.`);
+}
+function selectable(name, attribute) {
+    return (!systemFields.has(name) &&
+        !attribute.private &&
+        !attribute.customField &&
+        scalarTypes.has(attribute.type ?? ''));
+}
+function getTarget(strapi, uid) {
+    if (typeof uid !== 'string' ||
+        (!/^api::[\w-]+\.[\w-]+$/.test(uid) && uid !== 'plugin::builder.inquiry'))
+        fail('targetUid: unsupported target.');
+    if (!(0, content_type_availability_1.isBuilderContentTypeEnabled)(strapi.config.get('plugin::builder'), uid))
+        fail('targetUid: target is disabled.');
+    const target = strapi.contentTypes[uid];
+    if (!target?.attributes)
+        fail('targetUid: unknown target.');
+    const configuredPrivate = strapi.config.get('api.responses.privateAttributes', []);
+    const privateNames = new Set([
+        ...(target.options?.privateAttributes ?? []),
+        ...(Array.isArray(configuredPrivate) ? configuredPrivate : []),
+    ]);
+    const normalized = {
+        ...target,
+        attributes: Object.fromEntries(Object.entries(target.attributes).map(([name, attribute]) => [
+            name,
+            { ...attribute, private: attribute.private || privateNames.has(name) },
+        ])),
+    };
+    for (const [name, attribute] of Object.entries(normalized.attributes)) {
+        if (!systemFields.has(name) &&
+            attribute.required &&
+            !selectable(name, attribute))
+            fail(`targetUid: required attribute ${name} cannot be represented by a form.`);
+    }
+    return normalized;
+}
+function listFormFields(strapi, uid) {
+    return Object.entries(getTarget(strapi, uid).attributes)
+        .filter(([name, attribute]) => selectable(name, attribute))
+        .map(([name, attribute]) => ({
+        name,
+        type: attribute.type,
+        label: name,
+        required: attribute.required === true,
+        visibility: 'form',
+        ...(attribute.enum
+            ? { options: attribute.enum.map((value) => ({ value, label: value })) }
+            : {}),
+        ...(attribute.maxLength !== undefined
+            ? { maxLength: attribute.maxLength }
+            : {}),
+        ...(attribute.min !== undefined ? { min: attribute.min } : {}),
+        ...(attribute.max !== undefined ? { max: attribute.max } : {}),
+    }));
+}
+function listFormTargets(strapi) {
+    return Object.keys(strapi.contentTypes).flatMap((uid) => {
+        try {
+            const target = getTarget(strapi, uid);
+            return [{ uid, name: target.info?.displayName ?? uid }];
+        }
+        catch (error) {
+            if (error instanceof utils_1.errors.ValidationError)
+                return [];
+            throw error;
+        }
+    });
+}
+function validateFormDefinition(strapi, value) {
+    if (!isObject(value))
+        fail('form: expected an object.');
+    keys(value, definitionKeys, 'form');
+    const slug = text(value.slug, 'slug', 120);
+    if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug))
+        fail('slug: use lowercase letters, numbers and separating hyphens.');
+    const name = text(value.name, 'name', 120);
+    const target = getTarget(strapi, value.targetUid);
+    if (!Array.isArray(value.fields) || !value.fields.length)
+        fail('fields: expected at least one field.');
+    const seen = new Set();
+    const fields = value.fields.map((input) => {
+        if (!isObject(input))
+            fail('fields: expected objects.');
+        keys(input, [
+            'name',
+            'type',
+            'label',
+            'required',
+            'visibility',
+            'placeholder',
+            'help',
+            'options',
+            'maxLength',
+            'min',
+            'max',
+        ], 'fields');
+        const fieldName = text(input.name, 'fields.name', 120);
+        const attribute = Object.prototype.hasOwnProperty.call(target.attributes, fieldName)
+            ? target.attributes[fieldName]
+            : undefined;
+        if (!attribute || !selectable(fieldName, attribute))
+            fail(`fields.${fieldName}: unsupported attribute.`);
+        if (seen.has(fieldName))
+            fail(`fields.${fieldName}: duplicate field.`);
+        seen.add(fieldName);
+        if (input.type !== attribute.type)
+            fail(`fields.${fieldName}.type: must match target schema.`);
+        if (typeof input.required !== 'boolean' ||
+            (attribute.required && !input.required))
+            fail(`fields.${fieldName}.required: cannot relax target schema.`);
+        if (input.visibility !== 'form' && input.visibility !== 'hidden')
+            fail(`fields.${fieldName}.visibility: expected form or hidden.`);
+        const field = {
+            name: fieldName,
+            type: attribute.type,
+            label: text(input.label, `fields.${fieldName}.label`),
+            required: input.required,
+            visibility: input.visibility,
+        };
+        for (const key of ['placeholder', 'help']) {
+            if (input[key] !== undefined) {
+                if (typeof input[key] !== 'string')
+                    fail(`fields.${fieldName}.${key}: expected text.`);
+                field[key] = input[key];
+            }
+        }
+        for (const key of ['maxLength', 'min', 'max']) {
+            const constraint = input[key];
+            if (constraint !== undefined) {
+                const applicable = key === 'maxLength'
+                    ? ['string', 'text', 'email'].includes(field.type)
+                    : ['integer', 'decimal'].includes(field.type);
+                if (!applicable ||
+                    typeof constraint !== 'number' ||
+                    !Number.isFinite(constraint) ||
+                    (key === 'maxLength' &&
+                        (!Number.isInteger(constraint) || constraint < 1)) ||
+                    (field.type === 'integer' && !Number.isInteger(constraint)))
+                    fail(`fields.${fieldName}.${key}: invalid constraint.`);
+                const schemaConstraint = attribute[key];
+                if (schemaConstraint !== undefined &&
+                    (key === 'min'
+                        ? constraint < schemaConstraint
+                        : constraint > schemaConstraint))
+                    fail(`fields.${fieldName}.${key}: cannot relax target schema.`);
+                field[key] = constraint;
+            }
+            else if (attribute[key] !== undefined)
+                field[key] = attribute[key];
+        }
+        if (field.min !== undefined &&
+            field.max !== undefined &&
+            field.min > field.max)
+            fail(`fields.${fieldName}: min exceeds max.`);
+        if (field.type === 'enumeration') {
+            if (!Array.isArray(input.options) || !input.options.length)
+                fail(`fields.${fieldName}.options: expected enumeration options.`);
+            const values = new Set();
+            field.options = input.options.map((option) => {
+                if (!isObject(option))
+                    fail(`fields.${fieldName}.options: invalid option.`);
+                keys(option, ['value', 'label'], `fields.${fieldName}.options`);
+                const optionValue = text(option.value, `fields.${fieldName}.options.value`);
+                if (!attribute.enum?.includes(optionValue) || values.has(optionValue))
+                    fail(`fields.${fieldName}.options: unknown or duplicate value.`);
+                values.add(optionValue);
+                return {
+                    value: optionValue,
+                    label: text(option.label, `fields.${fieldName}.options.label`),
+                };
+            });
+        }
+        else if (input.options !== undefined)
+            fail(`fields.${fieldName}.options: only enumeration supports options.`);
+        return field;
+    });
+    for (const [fieldName, attribute] of Object.entries(target.attributes)) {
+        if (!systemFields.has(fieldName) &&
+            attribute.required &&
+            !seen.has(fieldName))
+            fail(`fields.${fieldName}: required target attribute is missing.`);
+    }
+    if (!isObject(value.consent))
+        fail('consent: expected label and version.');
+    keys(value.consent, ['label', 'version'], 'consent');
+    const consent = {
+        label: text(value.consent.label, 'consent.label', 5000),
+        version: text(value.consent.version, 'consent.version', 120),
+    };
+    const notifications = (0, notification_1.validateNotifications)(value.notifications ?? {}, fields);
+    return {
+        slug,
+        name,
+        targetUid: value.targetUid,
+        fields,
+        consent,
+        notifications,
+    };
+}
+/** Portable configuration excludes document metadata and the server-owned version. */
+function exportFormDefinition(value) {
+    return Object.fromEntries(definitionKeys
+        .filter((key) => Object.prototype.hasOwnProperty.call(value, key))
+        .map((key) => [key, value[key]]));
+}
+function createFormMiddleware(strapi) {
+    return async (context, next) => {
+        if (context.uid === exports.SUBMISSION_UID &&
+            !['findOne', 'findMany', 'count'].includes(context.action) &&
+            !(['create', 'update'].includes(context.action) &&
+                (0, submission_access_1.consumeSubmissionWrite)(context.params)))
+            fail('submission: direct writes are unavailable; use the submission service.');
+        if (context.uid !== exports.FORM_UID)
+            return await next();
+        if (['findOne', 'findMany', 'count'].includes(context.action))
+            return await next();
+        if (context.action === 'delete') {
+            if (!isObject(context.params) ||
+                typeof context.params.documentId !== 'string')
+                fail('form: documentId is required.');
+            const documentId = context.params.documentId;
+            return await strapi.db.transaction(async ({ trx }) => {
+                await strapi.db
+                    .getConnection(strapi.db.metadata.get(exports.FORM_UID).tableName)
+                    .transacting(trx)
+                    .where({ document_id: documentId })
+                    .forUpdate()
+                    .select('version');
+                const current = await strapi
+                    .documents(exports.FORM_UID)
+                    .findOne({ documentId });
+                if (current &&
+                    (await strapi
+                        .documents(exports.SUBMISSION_UID)
+                        .count({ filters: { form: current.slug } })))
+                    fail('form: cannot delete a form with submissions.');
+                return await next();
+            });
+        }
+        if (!['create', 'update'].includes(context.action))
+            fail('form: unsupported document action.');
+        if (!isObject(context.params) || !isObject(context.params.data))
+            fail('form: expected data.');
+        const params = context.params;
+        const input = params.data;
+        keys(input, definitionKeys, 'form');
+        if (params.locale !== undefined || params.status !== undefined)
+            fail('form: locale and publication status are not supported.');
+        // Lock the persisted version inside the same transaction as the Document Service
+        // update. Concurrent admin saves cannot assign the same version on PostgreSQL.
+        return await strapi.db.transaction(async ({ trx }) => {
+            let current = null;
+            if (context.action === 'update') {
+                if (typeof params.documentId !== 'string')
+                    fail('form: documentId is required.');
+                const metadata = strapi.db.metadata.get(exports.FORM_UID);
+                await strapi.db
+                    .getConnection(metadata.tableName)
+                    .transacting(trx)
+                    .where({ document_id: params.documentId })
+                    .forUpdate()
+                    .select('version');
+                current = await strapi
+                    .documents(exports.FORM_UID)
+                    .findOne({ documentId: params.documentId });
+                if (!current)
+                    fail('form: document not found.');
+            }
+            const definition = validateFormDefinition(strapi, {
+                ...(current ? exportFormDefinition(current) : {}),
+                ...input,
+            });
+            if (current && definition.slug !== current.slug)
+                fail('form.slug: cannot change after creation.');
+            if (!current &&
+                (await strapi
+                    .documents(exports.SUBMISSION_UID)
+                    .count({ filters: { form: definition.slug } })))
+                fail('form.slug: cannot reuse a slug with submissions.');
+            if (current &&
+                (!Number.isSafeInteger(current.version) ||
+                    Number(current.version) < 1 ||
+                    Number(current.version) >= Number.MAX_SAFE_INTEGER))
+                fail('form.version: invalid stored version.');
+            definition.notifications = (0, notification_1.protectNotifications)(strapi, definition.notifications, current?.notifications);
+            params.data = {
+                ...definition,
+                version: current ? Number(current.version) + 1 : 1,
+            };
+            return await next();
+        });
+    };
+}
+//# sourceMappingURL=form.js.map

package/dist/server/src/validation/form.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.js","sourceRoot":"","sources":["../../../../server/src/validation/form.ts"],"names":[],"mappings":";;;AA8EA,4BAEC;AA+DD,wCAkBC;AACD,0CAUC;AACD,wDAsJC;AAGD,oDAQC;AAOD,oDA0GC;AA/bD,iDAA6E;AAE7E,2DAA6D;AAC7D,yCAAuC;AAEvC,4EAA2E;AAE9D,QAAA,QAAQ,GAAG,sBAAsB,CAAC;AAClC,QAAA,cAAc,GAAG,4BAA4B,CAAC;AAC3D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ;IACR,MAAM;IACN,OAAO;IACP,SAAS;IACT,SAAS;IACT,SAAS;IACT,aAAa;IACb,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,IAAI;IACJ,YAAY;IACZ,WAAW;IACX,WAAW;IACX,aAAa;IACb,WAAW;IACX,WAAW;IACX,QAAQ;IACR,eAAe;CAChB,CAAC,CAAC;AACH,MAAM,cAAc,GAAG;IACrB,MAAM;IACN,MAAM;IACN,WAAW;IACX,QAAQ;IACR,SAAS;IACT,eAAe;CAChB,CAAC;AAwCF,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,cAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY,EAAE,KAAK,GAAG,IAAI;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QACpE,IAAI,CAAC,GAAG,IAAI,qCAAqC,KAAK,IAAI,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,IAAI,CAAC,KAA8B,EAAE,OAAiB,EAAE,IAAY;IAC3E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,kCAAkC,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,UAAU,CAAC,IAAY,EAAE,SAAoB;IACpD,OAAO,CACL,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QACvB,CAAC,SAAS,CAAC,OAAO;QAClB,CAAC,SAAS,CAAC,WAAW;QACtB,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CACtC,CAAC;AACJ,CAAC;AACD,SAAS,SAAS,CAAC,MAAmB,EAAE,GAAY;IAClD,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,yBAAyB,CAAC;QAEzE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACzC,IAAI,CAAC,IAAA,uDAA2B,EAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC;QACzE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAChC,GAAuC,CACP,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,UAAU;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAY,MAAM,CAAC,MAAM,CAAC,GAAG,CAClD,iCAAiC,EACjC,EAAE,CACH,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IACH,MAAM,UAAU,GAAG;QACjB,GAAG,MAAM;QACT,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;YAC3D,IAAI;YACJ,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;SACvE,CAAC,CACH;KACF,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YACvB,SAAS,CAAC,QAAQ;YAClB,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC;YAE5B,IAAI,CACF,iCAAiC,IAAI,mCAAmC,CACzE,CAAC;IACN,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,SAAgB,cAAc,CAAC,MAAmB,EAAE,GAAY;IAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC;SACrD,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,IAAI;QACJ,IAAI,EAAE,SAAS,CAAC,IAAK;QACrB,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,SAAS,CAAC,QAAQ,KAAK,IAAI;QACrC,UAAU,EAAE,MAAM;QAClB,GAAG,CAAC,SAAS,CAAC,IAAI;YAChB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE;YACvE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC,CAAC;AACR,CAAC;AACD,SAAgB,eAAe,CAAC,MAAmB;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAM,CAAC,eAAe;gBAAE,OAAO,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AACD,SAAgB,sBAAsB,CACpC,MAAmB,EACnB,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1C,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM;QACtD,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAc,EAAa,EAAE;QAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxD,IAAI,CACF,KAAK,EACL;YACE,MAAM;YACN,MAAM;YACN,OAAO;YACP,UAAU;YACV,YAAY;YACZ,aAAa;YACb,MAAM;YACN,SAAS;YACT,WAAW;YACX,KAAK;YACL,KAAK;SACN,EACD,QAAQ,CACT,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CACpD,MAAM,CAAC,UAAU,EACjB,SAAS,CACV;YACC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAC9B,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;YACjD,IAAI,CAAC,UAAU,SAAS,0BAA0B,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,UAAU,SAAS,oBAAoB,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;YAC/B,IAAI,CAAC,UAAU,SAAS,kCAAkC,CAAC,CAAC;QAC9D,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;YACnC,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAEvC,IAAI,CAAC,UAAU,SAAS,wCAAwC,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ;YAC9D,IAAI,CAAC,UAAU,SAAS,uCAAuC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAc;YACvB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS,CAAC,IAAK;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,SAAS,QAAQ,CAAC;YACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,CAAU,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;oBAChC,IAAI,CAAC,UAAU,SAAS,IAAI,GAAG,kBAAkB,CAAC,CAAC;gBACrD,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAU,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,UAAU,GACd,GAAG,KAAK,WAAW;oBACjB,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAClD,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClD,IACE,CAAC,UAAU;oBACX,OAAO,UAAU,KAAK,QAAQ;oBAC9B,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAC5B,CAAC,GAAG,KAAK,WAAW;wBAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;oBACpD,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBAE3D,IAAI,CAAC,UAAU,SAAS,IAAI,GAAG,uBAAuB,CAAC,CAAC;gBAC1D,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBACxC,IACE,gBAAgB,KAAK,SAAS;oBAC9B,CAAC,GAAG,KAAK,KAAK;wBACZ,CAAC,CAAC,UAAU,GAAG,gBAAgB;wBAC/B,CAAC,CAAC,UAAU,GAAG,gBAAgB,CAAC;oBAElC,IAAI,CAAC,UAAU,SAAS,IAAI,GAAG,+BAA+B,CAAC,CAAC;gBAClE,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC1B,CAAC;iBAAM,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,IACE,KAAK,CAAC,GAAG,KAAK,SAAS;YACvB,KAAK,CAAC,GAAG,KAAK,SAAS;YACvB,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG;YAErB,IAAI,CAAC,UAAU,SAAS,oBAAoB,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;gBACxD,IAAI,CAAC,UAAU,SAAS,yCAAyC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;YACjC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAe,EAAE,EAAE;gBACpD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACnB,IAAI,CAAC,UAAU,SAAS,2BAA2B,CAAC,CAAC;gBACvD,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,UAAU,SAAS,UAAU,CAAC,CAAC;gBAChE,MAAM,WAAW,GAAG,IAAI,CACtB,MAAM,CAAC,KAAK,EACZ,UAAU,SAAS,gBAAgB,CACpC,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;oBACnE,IAAI,CAAC,UAAU,SAAS,uCAAuC,CAAC,CAAC;gBACnE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACxB,OAAO;oBACL,KAAK,EAAE,WAAW;oBAClB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,SAAS,gBAAgB,CAAC;iBAC/D,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YACpC,IAAI,CAAC,UAAU,SAAS,8CAA8C,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACvE,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;YAC5B,SAAS,CAAC,QAAQ;YAClB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAEpB,IAAI,CAAC,UAAU,SAAS,yCAAyC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;QACvD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC;KAC7D,CAAC;IACF,MAAM,aAAa,GAAG,IAAA,oCAAqB,EACzC,KAAK,CAAC,aAAa,IAAI,EAAE,EACzB,MAAM,CACP,CAAC;IACF,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAmB;QACpC,MAAM;QACN,OAAO;QACP,aAAa;KACd,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAgB,oBAAoB,CAClC,KAA8B;IAE9B,OAAO,MAAM,CAAC,WAAW,CACvB,cAAc;SACX,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACjE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CACnC,CAAC;AACJ,CAAC;AAOD,SAAgB,oBAAoB,CAAC,MAAmB;IACtD,OAAO,KAAK,EACV,OAAwB,EACxB,IAAa,EACQ,EAAE;QACvB,IACE,OAAO,CAAC,GAAG,KAAK,sBAAc;YAC9B,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAC1D,CAAC,CACC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC7C,IAAA,0CAAsB,EAAC,OAAO,CAAC,MAAM,CAAC,CACvC;YAED,IAAI,CACF,wEAAwE,CACzE,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,KAAK,gBAAQ;YAAE,OAAO,MAAM,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3D,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChC,IACE,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzB,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ;gBAE7C,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;YAC7C,OAAO,MAAM,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACnD,MAAM,MAAM,CAAC,EAAE;qBACZ,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAQ,CAAC,CAAC,SAAS,CAAC;qBACzD,WAAW,CAAC,GAAG,CAAC;qBAChB,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;qBAClC,SAAS,EAAE;qBACX,MAAM,CAAC,SAAS,CAAC,CAAC;gBACrB,MAAM,OAAO,GAAG,MAAM,MAAM;qBACzB,SAAS,CAAC,gBAAQ,CAAC;qBACnB,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC3B,IACE,OAAO;oBACP,CAAC,MAAM,MAAM;yBACV,SAAS,CAAC,sBAAc,CAAC;yBACzB,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAE9C,IAAI,CAAC,8CAA8C,CAAC,CAAC;gBACvD,OAAO,MAAM,IAAI,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAChD,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAC7D,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAA+B,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAC5D,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACjE,iFAAiF;QACjF,+EAA+E;QAC/E,OAAO,MAAM,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACnD,IAAI,OAAO,GAAmC,IAAI,CAAC;YACnD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;oBACvC,IAAI,CAAC,+BAA+B,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAQ,CAAC,CAAC;gBAClD,MAAM,MAAM,CAAC,EAAE;qBACZ,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC;qBACjC,WAAW,CAAC,GAAG,CAAC;qBAChB,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;qBACzC,SAAS,EAAE;qBACX,MAAM,CAAC,SAAS,CAAC,CAAC;gBACrB,OAAO,GAAG,MAAM,MAAM;qBACnB,SAAS,CAAC,gBAAQ,CAAC;qBACnB,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,EAAE;gBAChD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,KAAK;aACT,CAAC,CAAC;YACH,IAAI,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;gBAC7C,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACnD,IACE,CAAC,OAAO;gBACR,CAAC,MAAM,MAAM;qBACV,SAAS,CAAC,sBAAc,CAAC;qBACzB,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAEjD,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAC3D,IACE,OAAO;gBACP,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;oBACrC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;oBAC3B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC;gBAErD,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAChD,UAAU,CAAC,aAAa,GAAG,IAAA,mCAAoB,EAC7C,MAAM,EACN,UAAU,CAAC,aAAa,EACxB,OAAO,EAAE,aAA+C,CACzD,CAAC;YACF,MAAM,CAAC,IAAI,GAAG;gBACZ,GAAG,UAAU;gBACb,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aACnD,CAAC;YACF,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/src/validation/notification.d.ts

@@ -0,0 +1,28 @@
+import type { Core } from '@strapi/strapi';
+import type { FormField } from './form';
+export interface NotificationConfig {
+    email?: {
+        to: string[];
+        cc?: string[];
+        replyToField?: string;
+        subject: string;
+        body: string;
+    };
+    webhook?: {
+        url: string;
+        secret?: string;
+        headers?: Record<string, string>;
+    };
+}
+export declare const SECRET_MASK = "********";
+export declare function validateNotifications(value: unknown, fields: FormField[]): NotificationConfig;
+interface Encryption {
+    encrypt(value: string): string | null;
+    decrypt(value: string): string | null;
+}
+export declare function encryption(strapi: Core.Strapi): Encryption;
+export declare function protectNotifications(strapi: Core.Strapi, config: NotificationConfig, previous?: NotificationConfig): NotificationConfig;
+/** Apply at every admin response boundary, including delete and export. */
+export declare function maskNotificationSecrets(value: unknown): unknown;
+export {};
+//# sourceMappingURL=notification.d.ts.map

package/dist/server/src/validation/notification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../../../../server/src/validation/notification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE;QACN,EAAE,EAAE,MAAM,EAAE,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;CAC9E;AACD,eAAO,MAAM,WAAW,aAAa,CAAC;AAUtC,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,SAAS,EAAE,GAClB,kBAAkB,CA0FpB;AACD,UAAU,UAAU;IAClB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACtC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACvC;AACD,wBAAgB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,UAAU,CAE1D;AACD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,MAAM,EAAE,kBAAkB,EAC1B,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,kBAAkB,CA6BpB;AACD,2EAA2E;AAC3E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAkB/D"}

package/dist/server/src/validation/notification.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECRET_MASK = void 0;
+exports.validateNotifications = validateNotifications;
+exports.encryption = encryption;
+exports.protectNotifications = protectNotifications;
+exports.maskNotificationSecrets = maskNotificationSecrets;
+const utils_1 = require("@strapi/utils");
+const template_1 = require("../services/template");
+exports.SECRET_MASK = '********';
+function fail() {
+    throw new utils_1.errors.ValidationError('notifications: invalid configuration.');
+}
+function object(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+function keys(value, allowed) {
+    if (Object.keys(value).some((key) => !allowed.includes(key)))
+        fail();
+}
+function validateNotifications(value, fields) {
+    if (!object(value))
+        fail();
+    keys(value, ['email', 'webhook']);
+    const result = {};
+    if (value.email !== undefined) {
+        const email = value.email;
+        if (!object(email))
+            fail();
+        keys(email, ['to', 'cc', 'replyToField', 'subject', 'body']);
+        for (const key of ['to', 'cc']) {
+            const recipients = email[key];
+            if (key === 'cc' && recipients === undefined)
+                continue;
+            if (!Array.isArray(recipients) ||
+                (key === 'to' && !recipients.length) ||
+                recipients.some((item) => typeof item !== 'string' ||
+                    !/^[^\s@<>{},;]+@[^\s@<>{},;]+\.[^\s@<>{},;]+$/.test(item)))
+                fail();
+        }
+        if (typeof email.subject !== 'string' ||
+            !email.subject.trim() ||
+            typeof email.body !== 'string')
+            fail();
+        (0, template_1.validateTemplate)(email.subject, fields.map((field) => field.name));
+        (0, template_1.validateTemplate)(email.body, fields.map((field) => field.name));
+        if (email.replyToField !== undefined &&
+            !fields.some((field) => field.name === email.replyToField && field.type === 'email'))
+            fail();
+        result.email = email;
+    }
+    if (value.webhook !== undefined) {
+        const webhook = value.webhook;
+        if (!object(webhook))
+            fail();
+        keys(webhook, ['url', 'secret', 'headers']);
+        if (typeof webhook.url !== 'string')
+            fail();
+        let url;
+        try {
+            url = new URL(webhook.url);
+        }
+        catch {
+            return fail();
+        }
+        if (!['http:', 'https:'].includes(url.protocol) ||
+            url.username ||
+            url.password)
+            fail();
+        if (webhook.secret !== undefined &&
+            (typeof webhook.secret !== 'string' || !webhook.secret))
+            fail();
+        if (webhook.headers !== undefined) {
+            if (!object(webhook.headers))
+                fail();
+            for (const [name, header] of Object.entries(webhook.headers)) {
+                if (!/^[!#$%&'*+.^_`|~\w-]+$/.test(name) ||
+                    [
+                        'content-type',
+                        'x-builder-signature',
+                        'host',
+                        'content-length',
+                    ].includes(name.toLowerCase()) ||
+                    typeof header !== 'string' ||
+                    !header ||
+                    /[\r\n]/.test(header))
+                    fail();
+            }
+        }
+        result.webhook = webhook;
+    }
+    return result;
+}
+function encryption(strapi) {
+    return strapi.service('admin::encryption');
+}
+function protectNotifications(strapi, config, previous) {
+    const next = structuredClone(config);
+    function protect(value, old) {
+        if (value === exports.SECRET_MASK) {
+            if (!old)
+                fail();
+            return old;
+        }
+        if (value === old)
+            return value;
+        if (value.startsWith('v1:'))
+            fail();
+        const encrypted = encryption(strapi).encrypt(value);
+        if (!encrypted)
+            throw new utils_1.errors.ValidationError('notifications: ENCRYPTION_KEY is required.');
+        return encrypted;
+    }
+    if (next.webhook?.secret)
+        next.webhook.secret = protect(next.webhook.secret, previous?.webhook?.secret);
+    if (next.webhook?.headers)
+        next.webhook.headers = Object.fromEntries(Object.entries(next.webhook.headers).map(([name, value]) => [
+            name,
+            protect(value, previous?.webhook?.headers?.[name]),
+        ]));
+    return next;
+}
+/** Apply at every admin response boundary, including delete and export. */
+function maskNotificationSecrets(value) {
+    if (Array.isArray(value))
+        return value.map(maskNotificationSecrets);
+    if (!object(value))
+        return value;
+    const result = Object.fromEntries(Object.entries(value).map(([key, item]) => [
+        key,
+        maskNotificationSecrets(item),
+    ]));
+    if (object(result.notifications) && object(result.notifications.webhook)) {
+        const webhook = result.notifications.webhook;
+        if (webhook.secret !== undefined)
+            webhook.secret = exports.SECRET_MASK;
+        if (object(webhook.headers))
+            webhook.headers = Object.fromEntries(Object.keys(webhook.headers).map((key) => [key, exports.SECRET_MASK]));
+    }
+    return result;
+}
+//# sourceMappingURL=notification.js.map