@defra/forms-engine-plugin 0.0.1

package/.server/server/plugins/router.js

@@ -0,0 +1,169 @@
+import { slugSchema } from '@defra/forms-model';
+import Boom from '@hapi/boom';
+import humanizeDuration from 'humanize-duration';
+import Joi from 'joi';
+import { defaultConsent, parseCookieConsent, serialiseCookieConsent } from "../../common/cookies.js";
+import { config } from "../../config/index.js";
+import { isPathRelative } from "./engine/helpers.js";
+import { getFormMetadata } from "./engine/services/formsService.js";
+import { healthRoute, publicRoutes } from "../routes/index.js";
+import { crumbSchema } from "../schemas/index.js";
+const routes = [...publicRoutes, healthRoute];
+export default {
+  plugin: {
+    name: 'router',
+    register: server => {
+      server.route(routes);
+
+      // Shared help routes params schema & options
+      const params = Joi.object().keys({
+        slug: slugSchema
+      }).required();
+      const options = {
+        validate: {
+          params
+        }
+      };
+      server.route({
+        method: 'get',
+        path: '/help/get-support/{slug}',
+        async handler(request, h) {
+          const {
+            slug
+          } = request.params;
+          const form = await getFormMetadata(slug);
+          return h.view('help/get-support', {
+            form
+          });
+        },
+        options
+      });
+      server.route({
+        method: 'get',
+        path: '/help/privacy/{slug}',
+        async handler(request, h) {
+          const {
+            slug
+          } = request.params;
+          const form = await getFormMetadata(slug);
+          return h.view('help/privacy-notice', {
+            form
+          });
+        },
+        options
+      });
+      server.route({
+        method: 'get',
+        path: '/help/cookies/{slug}',
+        handler(_request, h) {
+          const sessionTimeout = config.get('sessionTimeout');
+          const sessionDurationPretty = humanizeDuration(sessionTimeout);
+          return h.view('help/cookies', {
+            googleAnalyticsContainerId: config.get('googleAnalyticsTrackingId').replace(/^G-/, ''),
+            sessionDurationPretty
+          });
+        },
+        options
+      });
+      server.route({
+        method: 'post',
+        path: '/help/cookie-preferences/{slug}',
+        handler(request, h) {
+          const {
+            params,
+            payload,
+            query
+          } = request;
+          const {
+            slug
+          } = params;
+          let {
+            returnUrl
+          } = query;
+          if (returnUrl && !isPathRelative(returnUrl)) {
+            throw Boom.badRequest('Return URL must be relative');
+          }
+          const analyticsDecision = (payload['cookies[analytics]'] ?? '').toLowerCase();
+          const dismissedDecision = (payload['cookies[dismissed]'] ?? '').toLowerCase();
+
+          // move the parser into our JS code so we can delegate to the frontend in a future iteration
+          let cookieConsent;
+          if (typeof request.state.cookieConsent === 'string') {
+            cookieConsent = parseCookieConsent(request.state.cookieConsent);
+          } else {
+            cookieConsent = defaultConsent;
+          }
+          if (analyticsDecision) {
+            cookieConsent.analytics = analyticsDecision === 'yes';
+            cookieConsent.dismissed = false;
+          }
+          if (dismissedDecision) {
+            cookieConsent.dismissed = dismissedDecision === 'yes';
+          }
+          if (!returnUrl) {
+            cookieConsent.dismissed = true; // this page already has a confirmation message, don't show another
+            returnUrl = `/help/cookie-preferences/${slug}`;
+          }
+          const serialisedCookieConsent = serialiseCookieConsent(cookieConsent);
+          h.state('cookieConsent', serialisedCookieConsent);
+          return h.redirect(returnUrl);
+        },
+        options: {
+          validate: {
+            params,
+            payload: Joi.object({
+              crumb: crumbSchema,
+              'cookies[analytics]': Joi.string().valid('yes', 'no').optional(),
+              'cookies[dismissed]': Joi.string().valid('yes', 'no').optional()
+            }),
+            query: Joi.object({
+              returnUrl: Joi.string().optional()
+            })
+          }
+        }
+      });
+      server.route({
+        method: 'get',
+        path: '/',
+        handler() {
+          throw Boom.notFound();
+        }
+      });
+      server.route({
+        method: 'get',
+        path: '/help/cookie-preferences/{slug}',
+        handler(request, h) {
+          const {
+            params
+          } = request;
+          const {
+            slug
+          } = params;
+          let cookieConsentDismissed = false;
+          if (typeof request.state.cookieConsent === 'string') {
+            const cookieConsent = parseCookieConsent(request.state.cookieConsent);
+            cookieConsentDismissed = cookieConsent.dismissed;
+          }
+
+          // if the user has come back to this page after updating their preferences
+          // override the 'dismissed' behaviour to show a success notification instead of
+          // the cookie banner
+          const showConsentSuccess = cookieConsentDismissed && request.info.referrer.endsWith(`/help/cookie-preferences/${slug}`);
+          return h.view('help/cookie-preferences', {
+            cookieConsentUpdated: showConsentSuccess
+          });
+        },
+        options
+      });
+      server.route({
+        method: 'get',
+        path: '/help/accessibility-statement/{slug}',
+        handler(_request, h) {
+          return h.view('help/accessibility-statement');
+        },
+        options
+      });
+    }
+  }
+};
+//# sourceMappingURL=router.js.map

package/.server/server/plugins/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","names":["slugSchema","Boom","humanizeDuration","Joi","defaultConsent","parseCookieConsent","serialiseCookieConsent","config","isPathRelative","getFormMetadata","healthRoute","publicRoutes","crumbSchema","routes","plugin","name","register","server","route","params","object","keys","slug","required","options","validate","method","path","handler","request","h","form","view","_request","sessionTimeout","get","sessionDurationPretty","googleAnalyticsContainerId","replace","payload","query","returnUrl","badRequest","analyticsDecision","toLowerCase","dismissedDecision","cookieConsent","state","analytics","dismissed","serialisedCookieConsent","redirect","crumb","string","valid","optional","notFound","cookieConsentDismissed","showConsentSuccess","info","referrer","endsWith","cookieConsentUpdated"],"sources":["../../../src/server/plugins/router.ts"],"sourcesContent":["import { slugSchema } from '@defra/forms-model'\nimport Boom from '@hapi/boom'\nimport { type ServerRegisterPluginObject } from '@hapi/hapi'\nimport humanizeDuration from 'humanize-duration'\nimport Joi from 'joi'\n\nimport {\n  defaultConsent,\n  parseCookieConsent,\n  serialiseCookieConsent\n} from '~/src/common/cookies.js'\nimport { type CookieConsent } from '~/src/common/types.js'\nimport { config } from '~/src/config/index.js'\nimport { isPathRelative } from '~/src/server/plugins/engine/helpers.js'\nimport { getFormMetadata } from '~/src/server/plugins/engine/services/formsService.js'\nimport { healthRoute, publicRoutes } from '~/src/server/routes/index.js'\nimport { crumbSchema } from '~/src/server/schemas/index.js'\n\nconst routes = [...publicRoutes, healthRoute]\n\nexport default {\n  plugin: {\n    name: 'router',\n    register: (server) => {\n      server.route(routes)\n\n      // Shared help routes params schema & options\n      const params = Joi.object()\n        .keys({\n          slug: slugSchema\n        })\n        .required()\n\n      const options = {\n        validate: {\n          params\n        }\n      }\n\n      server.route<{ Params: { slug: string } }>({\n        method: 'get',\n        path: '/help/get-support/{slug}',\n        async handler(request, h) {\n          const { slug } = request.params\n          const form = await getFormMetadata(slug)\n\n          return h.view('help/get-support', { form })\n        },\n        options\n      })\n\n      server.route<{ Params: { slug: string } }>({\n        method: 'get',\n        path: '/help/privacy/{slug}',\n        async handler(request, h) {\n          const { slug } = request.params\n          const form = await getFormMetadata(slug)\n\n          return h.view('help/privacy-notice', { form })\n        },\n        options\n      })\n\n      server.route<{ Params: { slug: string } }>({\n        method: 'get',\n        path: '/help/cookies/{slug}',\n        handler(_request, h) {\n          const sessionTimeout = config.get('sessionTimeout')\n\n          const sessionDurationPretty = humanizeDuration(sessionTimeout)\n\n          return h.view('help/cookies', {\n            googleAnalyticsContainerId: config\n              .get('googleAnalyticsTrackingId')\n              .replace(/^G-/, ''),\n            sessionDurationPretty\n          })\n        },\n        options\n      })\n\n      server.route<{\n        Params: { slug: string }\n        Payload: {\n          crumb?: string\n          'cookies[analytics]'?: string\n          'cookies[dismissed]'?: string\n        }\n        Query: { returnUrl?: string }\n      }>({\n        method: 'post',\n        path: '/help/cookie-preferences/{slug}',\n        handler(request, h) {\n          const { params, payload, query } = request\n          const { slug } = params\n          let { returnUrl } = query\n\n          if (returnUrl && !isPathRelative(returnUrl)) {\n            throw Boom.badRequest('Return URL must be relative')\n          }\n\n          const analyticsDecision = (\n            payload['cookies[analytics]'] ?? ''\n          ).toLowerCase()\n\n          const dismissedDecision = (\n            payload['cookies[dismissed]'] ?? ''\n          ).toLowerCase()\n\n          // move the parser into our JS code so we can delegate to the frontend in a future iteration\n          let cookieConsent: CookieConsent\n\n          if (typeof request.state.cookieConsent === 'string') {\n            cookieConsent = parseCookieConsent(request.state.cookieConsent)\n          } else {\n            cookieConsent = defaultConsent\n          }\n\n          if (analyticsDecision) {\n            cookieConsent.analytics = analyticsDecision === 'yes'\n            cookieConsent.dismissed = false\n          }\n\n          if (dismissedDecision) {\n            cookieConsent.dismissed = dismissedDecision === 'yes'\n          }\n\n          if (!returnUrl) {\n            cookieConsent.dismissed = true // this page already has a confirmation message, don't show another\n            returnUrl = `/help/cookie-preferences/${slug}`\n          }\n\n          const serialisedCookieConsent = serialiseCookieConsent(cookieConsent)\n          h.state('cookieConsent', serialisedCookieConsent)\n\n          return h.redirect(returnUrl)\n        },\n        options: {\n          validate: {\n            params,\n            payload: Joi.object({\n              crumb: crumbSchema,\n              'cookies[analytics]': Joi.string().valid('yes', 'no').optional(),\n              'cookies[dismissed]': Joi.string().valid('yes', 'no').optional()\n            }),\n            query: Joi.object({\n              returnUrl: Joi.string().optional()\n            })\n          }\n        }\n      })\n\n      server.route({\n        method: 'get',\n        path: '/',\n        handler() {\n          throw Boom.notFound()\n        }\n      })\n\n      server.route<{ Params: { slug: string } }>({\n        method: 'get',\n        path: '/help/cookie-preferences/{slug}',\n        handler(request, h) {\n          const { params } = request\n          const { slug } = params\n          let cookieConsentDismissed = false\n\n          if (typeof request.state.cookieConsent === 'string') {\n            const cookieConsent = parseCookieConsent(\n              request.state.cookieConsent\n            )\n\n            cookieConsentDismissed = cookieConsent.dismissed\n          }\n\n          // if the user has come back to this page after updating their preferences\n          // override the 'dismissed' behaviour to show a success notification instead of\n          // the cookie banner\n          const showConsentSuccess =\n            cookieConsentDismissed &&\n            request.info.referrer.endsWith(`/help/cookie-preferences/${slug}`)\n\n          return h.view('help/cookie-preferences', {\n            cookieConsentUpdated: showConsentSuccess\n          })\n        },\n        options\n      })\n\n      server.route<{ Params: { slug: string } }>({\n        method: 'get',\n        path: '/help/accessibility-statement/{slug}',\n        handler(_request, h) {\n          return h.view('help/accessibility-statement')\n        },\n        options\n      })\n    }\n  }\n} satisfies ServerRegisterPluginObject<void>\n"],"mappings":"AAAA,SAASA,UAAU,QAAQ,oBAAoB;AAC/C,OAAOC,IAAI,MAAM,YAAY;AAE7B,OAAOC,gBAAgB,MAAM,mBAAmB;AAChD,OAAOC,GAAG,MAAM,KAAK;AAErB,SACEC,cAAc,EACdC,kBAAkB,EAClBC,sBAAsB;AAGxB,SAASC,MAAM;AACf,SAASC,cAAc;AACvB,SAASC,eAAe;AACxB,SAASC,WAAW,EAAEC,YAAY;AAClC,SAASC,WAAW;AAEpB,MAAMC,MAAM,GAAG,CAAC,GAAGF,YAAY,EAAED,WAAW,CAAC;AAE7C,eAAe;EACbI,MAAM,EAAE;IACNC,IAAI,EAAE,QAAQ;IACdC,QAAQ,EAAGC,MAAM,IAAK;MACpBA,MAAM,CAACC,KAAK,CAACL,MAAM,CAAC;;MAEpB;MACA,MAAMM,MAAM,GAAGhB,GAAG,CAACiB,MAAM,CAAC,CAAC,CACxBC,IAAI,CAAC;QACJC,IAAI,EAAEtB;MACR,CAAC,CAAC,CACDuB,QAAQ,CAAC,CAAC;MAEb,MAAMC,OAAO,GAAG;QACdC,QAAQ,EAAE;UACRN;QACF;MACF,CAAC;MAEDF,MAAM,CAACC,KAAK,CAA+B;QACzCQ,MAAM,EAAE,KAAK;QACbC,IAAI,EAAE,0BAA0B;QAChC,MAAMC,OAAOA,CAACC,OAAO,EAAEC,CAAC,EAAE;UACxB,MAAM;YAAER;UAAK,CAAC,GAAGO,OAAO,CAACV,MAAM;UAC/B,MAAMY,IAAI,GAAG,MAAMtB,eAAe,CAACa,IAAI,CAAC;UAExC,OAAOQ,CAAC,CAACE,IAAI,CAAC,kBAAkB,EAAE;YAAED;UAAK,CAAC,CAAC;QAC7C,CAAC;QACDP;MACF,CAAC,CAAC;MAEFP,MAAM,CAACC,KAAK,CAA+B;QACzCQ,MAAM,EAAE,KAAK;QACbC,IAAI,EAAE,sBAAsB;QAC5B,MAAMC,OAAOA,CAACC,OAAO,EAAEC,CAAC,EAAE;UACxB,MAAM;YAAER;UAAK,CAAC,GAAGO,OAAO,CAACV,MAAM;UAC/B,MAAMY,IAAI,GAAG,MAAMtB,eAAe,CAACa,IAAI,CAAC;UAExC,OAAOQ,CAAC,CAACE,IAAI,CAAC,qBAAqB,EAAE;YAAED;UAAK,CAAC,CAAC;QAChD,CAAC;QACDP;MACF,CAAC,CAAC;MAEFP,MAAM,CAACC,KAAK,CAA+B;QACzCQ,MAAM,EAAE,KAAK;QACbC,IAAI,EAAE,sBAAsB;QAC5BC,OAAOA,CAACK,QAAQ,EAAEH,CAAC,EAAE;UACnB,MAAMI,cAAc,GAAG3B,MAAM,CAAC4B,GAAG,CAAC,gBAAgB,CAAC;UAEnD,MAAMC,qBAAqB,GAAGlC,gBAAgB,CAACgC,cAAc,CAAC;UAE9D,OAAOJ,CAAC,CAACE,IAAI,CAAC,cAAc,EAAE;YAC5BK,0BAA0B,EAAE9B,MAAM,CAC/B4B,GAAG,CAAC,2BAA2B,CAAC,CAChCG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACrBF;UACF,CAAC,CAAC;QACJ,CAAC;QACDZ;MACF,CAAC,CAAC;MAEFP,MAAM,CAACC,KAAK,CAQT;QACDQ,MAAM,EAAE,MAAM;QACdC,IAAI,EAAE,iCAAiC;QACvCC,OAAOA,CAACC,OAAO,EAAEC,CAAC,EAAE;UAClB,MAAM;YAAEX,MAAM;YAAEoB,OAAO;YAAEC;UAAM,CAAC,GAAGX,OAAO;UAC1C,MAAM;YAAEP;UAAK,CAAC,GAAGH,MAAM;UACvB,IAAI;YAAEsB;UAAU,CAAC,GAAGD,KAAK;UAEzB,IAAIC,SAAS,IAAI,CAACjC,cAAc,CAACiC,SAAS,CAAC,EAAE;YAC3C,MAAMxC,IAAI,CAACyC,UAAU,CAAC,6BAA6B,CAAC;UACtD;UAEA,MAAMC,iBAAiB,GAAG,CACxBJ,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,EACnCK,WAAW,CAAC,CAAC;UAEf,MAAMC,iBAAiB,GAAG,CACxBN,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,EACnCK,WAAW,CAAC,CAAC;;UAEf;UACA,IAAIE,aAA4B;UAEhC,IAAI,OAAOjB,OAAO,CAACkB,KAAK,CAACD,aAAa,KAAK,QAAQ,EAAE;YACnDA,aAAa,GAAGzC,kBAAkB,CAACwB,OAAO,CAACkB,KAAK,CAACD,aAAa,CAAC;UACjE,CAAC,MAAM;YACLA,aAAa,GAAG1C,cAAc;UAChC;UAEA,IAAIuC,iBAAiB,EAAE;YACrBG,aAAa,CAACE,SAAS,GAAGL,iBAAiB,KAAK,KAAK;YACrDG,aAAa,CAACG,SAAS,GAAG,KAAK;UACjC;UAEA,IAAIJ,iBAAiB,EAAE;YACrBC,aAAa,CAACG,SAAS,GAAGJ,iBAAiB,KAAK,KAAK;UACvD;UAEA,IAAI,CAACJ,SAAS,EAAE;YACdK,aAAa,CAACG,SAAS,GAAG,IAAI,EAAC;YAC/BR,SAAS,GAAG,4BAA4BnB,IAAI,EAAE;UAChD;UAEA,MAAM4B,uBAAuB,GAAG5C,sBAAsB,CAACwC,aAAa,CAAC;UACrEhB,CAAC,CAACiB,KAAK,CAAC,eAAe,EAAEG,uBAAuB,CAAC;UAEjD,OAAOpB,CAAC,CAACqB,QAAQ,CAACV,SAAS,CAAC;QAC9B,CAAC;QACDjB,OAAO,EAAE;UACPC,QAAQ,EAAE;YACRN,MAAM;YACNoB,OAAO,EAAEpC,GAAG,CAACiB,MAAM,CAAC;cAClBgC,KAAK,EAAExC,WAAW;cAClB,oBAAoB,EAAET,GAAG,CAACkD,MAAM,CAAC,CAAC,CAACC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAACC,QAAQ,CAAC,CAAC;cAChE,oBAAoB,EAAEpD,GAAG,CAACkD,MAAM,CAAC,CAAC,CAACC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAACC,QAAQ,CAAC;YACjE,CAAC,CAAC;YACFf,KAAK,EAAErC,GAAG,CAACiB,MAAM,CAAC;cAChBqB,SAAS,EAAEtC,GAAG,CAACkD,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC;YACnC,CAAC;UACH;QACF;MACF,CAAC,CAAC;MAEFtC,MAAM,CAACC,KAAK,CAAC;QACXQ,MAAM,EAAE,KAAK;QACbC,IAAI,EAAE,GAAG;QACTC,OAAOA,CAAA,EAAG;UACR,MAAM3B,IAAI,CAACuD,QAAQ,CAAC,CAAC;QACvB;MACF,CAAC,CAAC;MAEFvC,MAAM,CAACC,KAAK,CAA+B;QACzCQ,MAAM,EAAE,KAAK;QACbC,IAAI,EAAE,iCAAiC;QACvCC,OAAOA,CAACC,OAAO,EAAEC,CAAC,EAAE;UAClB,MAAM;YAAEX;UAAO,CAAC,GAAGU,OAAO;UAC1B,MAAM;YAAEP;UAAK,CAAC,GAAGH,MAAM;UACvB,IAAIsC,sBAAsB,GAAG,KAAK;UAElC,IAAI,OAAO5B,OAAO,CAACkB,KAAK,CAACD,aAAa,KAAK,QAAQ,EAAE;YACnD,MAAMA,aAAa,GAAGzC,kBAAkB,CACtCwB,OAAO,CAACkB,KAAK,CAACD,aAChB,CAAC;YAEDW,sBAAsB,GAAGX,aAAa,CAACG,SAAS;UAClD;;UAEA;UACA;UACA;UACA,MAAMS,kBAAkB,GACtBD,sBAAsB,IACtB5B,OAAO,CAAC8B,IAAI,CAACC,QAAQ,CAACC,QAAQ,CAAC,4BAA4BvC,IAAI,EAAE,CAAC;UAEpE,OAAOQ,CAAC,CAACE,IAAI,CAAC,yBAAyB,EAAE;YACvC8B,oBAAoB,EAAEJ;UACxB,CAAC,CAAC;QACJ,CAAC;QACDlC;MACF,CAAC,CAAC;MAEFP,MAAM,CAACC,KAAK,CAA+B;QACzCQ,MAAM,EAAE,KAAK;QACbC,IAAI,EAAE,sCAAsC;QAC5CC,OAAOA,CAACK,QAAQ,EAAEH,CAAC,EAAE;UACnB,OAAOA,CAAC,CAACE,IAAI,CAAC,8BAA8B,CAAC;QAC/C,CAAC;QACDR;MACF,CAAC,CAAC;IACJ;EACF;AACF,CAAC","ignoreList":[]}

package/.server/server/plugins/session.js

@@ -0,0 +1,28 @@
+import yar from '@hapi/yar';
+import { config } from "../../config/index.js";
+
+/**
+ * Yar is used for temporary session data but not form submissions, e.g. UI helpers, session flags.
+ */
+export default {
+  plugin: yar,
+  options: {
+    maxCookieSize: 0,
+    // Always use server-side storage
+    cache: {
+      cache: 'session',
+      segment: 'session',
+      expiresIn: config.get('sessionTimeout')
+    },
+    /**
+     * @todo storeBlank is current commented out as it's a minor efficiency gain but breaks the auth tests if enabled.
+     * this only seems to affect the auth code, which we might remove anyway so it's temporarily disabled.
+     */
+    // storeBlank: false,
+    cookieOptions: {
+      password: config.get('sessionCookiePassword'),
+      isSecure: config.get('isProduction')
+    }
+  }
+};
+//# sourceMappingURL=session.js.map

package/.server/server/plugins/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","names":["yar","config","plugin","options","maxCookieSize","cache","segment","expiresIn","get","cookieOptions","password","isSecure"],"sources":["../../../src/server/plugins/session.ts"],"sourcesContent":["import { type ServerRegisterPluginObject } from '@hapi/hapi'\nimport yar, { type YarOptions } from '@hapi/yar'\n\nimport { config } from '~/src/config/index.js'\n\n/**\n * Yar is used for temporary session data but not form submissions, e.g. UI helpers, session flags.\n */\nexport default {\n  plugin: yar,\n  options: {\n    maxCookieSize: 0, // Always use server-side storage\n    cache: {\n      cache: 'session',\n      segment: 'session',\n      expiresIn: config.get('sessionTimeout')\n    },\n    /**\n     * @todo storeBlank is current commented out as it's a minor efficiency gain but breaks the auth tests if enabled.\n     * this only seems to affect the auth code, which we might remove anyway so it's temporarily disabled.\n     */\n    // storeBlank: false,\n    cookieOptions: {\n      password: config.get('sessionCookiePassword'),\n      isSecure: config.get('isProduction')\n    }\n  }\n} satisfies ServerRegisterPluginObject<YarOptions>\n"],"mappings":"AACA,OAAOA,GAAG,MAA2B,WAAW;AAEhD,SAASC,MAAM;;AAEf;AACA;AACA;AACA,eAAe;EACbC,MAAM,EAAEF,GAAG;EACXG,OAAO,EAAE;IACPC,aAAa,EAAE,CAAC;IAAE;IAClBC,KAAK,EAAE;MACLA,KAAK,EAAE,SAAS;MAChBC,OAAO,EAAE,SAAS;MAClBC,SAAS,EAAEN,MAAM,CAACO,GAAG,CAAC,gBAAgB;IACxC,CAAC;IACD;AACJ;AACA;AACA;IACI;IACAC,aAAa,EAAE;MACbC,QAAQ,EAAET,MAAM,CAACO,GAAG,CAAC,uBAAuB,CAAC;MAC7CG,QAAQ,EAAEV,MAAM,CAACO,GAAG,CAAC,cAAc;IACrC;EACF;AACF,CAAC","ignoreList":[]}

package/.server/server/routes/health.js

@@ -0,0 +1,15 @@
+import { StatusCodes } from 'http-status-codes';
+export default (/** @type {ServerRoute} */{
+  method: 'GET',
+  path: '/health',
+  handler(_, h) {
+    return h.response({
+      message: 'success'
+    }).code(StatusCodes.OK);
+  }
+});
+
+/**
+ * @import { ServerRoute } from '@hapi/hapi'
+ */
+//# sourceMappingURL=health.js.map

package/.server/server/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","names":["StatusCodes","method","path","handler","_","h","response","message","code","OK"],"sources":["../../../src/server/routes/health.js"],"sourcesContent":["import { StatusCodes } from 'http-status-codes'\n\nexport default /** @type {ServerRoute} */ ({\n  method: 'GET',\n  path: '/health',\n  handler(_, h) {\n    return h.response({ message: 'success' }).code(StatusCodes.OK)\n  }\n})\n\n/**\n * @import { ServerRoute } from '@hapi/hapi'\n */\n"],"mappings":"AAAA,SAASA,WAAW,QAAQ,mBAAmB;AAE/C,gBAAe,0BAA4B;EACzCC,MAAM,EAAE,KAAK;EACbC,IAAI,EAAE,SAAS;EACfC,OAAOA,CAACC,CAAC,EAAEC,CAAC,EAAE;IACZ,OAAOA,CAAC,CAACC,QAAQ,CAAC;MAAEC,OAAO,EAAE;IAAU,CAAC,CAAC,CAACC,IAAI,CAACR,WAAW,CAACS,EAAE,CAAC;EAChE;AACF,CAAC;;AAED;AACA;AACA","ignoreList":[]}

package/.server/server/routes/health.test.js

@@ -0,0 +1,32 @@
+import { createServer } from "../index.js";
+describe('Health check route', () => {
+  const startServer = async () => {
+    const server = await createServer();
+    await server.initialize();
+    return server;
+  };
+
+  /** @type {Server} */
+  let server;
+  afterEach(async () => {
+    await server.stop();
+  });
+  test('/health route response is correct', async () => {
+    server = await startServer();
+    const options = {
+      method: 'GET',
+      url: '/health'
+    };
+    const {
+      result
+    } = await server.inject(options);
+    expect(result).toMatchObject({
+      message: 'success'
+    });
+  });
+});
+
+/**
+ * @import { Server } from '@hapi/hapi'
+ */
+//# sourceMappingURL=health.test.js.map

package/.server/server/routes/health.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.test.js","names":["createServer","describe","startServer","server","initialize","afterEach","stop","test","options","method","url","result","inject","expect","toMatchObject","message"],"sources":["../../../src/server/routes/health.test.js"],"sourcesContent":["import { createServer } from '~/src/server/index.js'\n\ndescribe('Health check route', () => {\n  const startServer = async () => {\n    const server = await createServer()\n    await server.initialize()\n    return server\n  }\n\n  /** @type {Server} */\n  let server\n\n  afterEach(async () => {\n    await server.stop()\n  })\n\n  test('/health route response is correct', async () => {\n    server = await startServer()\n\n    const options = {\n      method: 'GET',\n      url: '/health'\n    }\n\n    const { result } = await server.inject(options)\n\n    expect(result).toMatchObject({\n      message: 'success'\n    })\n  })\n})\n\n/**\n * @import { Server } from '@hapi/hapi'\n */\n"],"mappings":"AAAA,SAASA,YAAY;AAErBC,QAAQ,CAAC,oBAAoB,EAAE,MAAM;EACnC,MAAMC,WAAW,GAAG,MAAAA,CAAA,KAAY;IAC9B,MAAMC,MAAM,GAAG,MAAMH,YAAY,CAAC,CAAC;IACnC,MAAMG,MAAM,CAACC,UAAU,CAAC,CAAC;IACzB,OAAOD,MAAM;EACf,CAAC;;EAED;EACA,IAAIA,MAAM;EAEVE,SAAS,CAAC,YAAY;IACpB,MAAMF,MAAM,CAACG,IAAI,CAAC,CAAC;EACrB,CAAC,CAAC;EAEFC,IAAI,CAAC,mCAAmC,EAAE,YAAY;IACpDJ,MAAM,GAAG,MAAMD,WAAW,CAAC,CAAC;IAE5B,MAAMM,OAAO,GAAG;MACdC,MAAM,EAAE,KAAK;MACbC,GAAG,EAAE;IACP,CAAC;IAED,MAAM;MAAEC;IAAO,CAAC,GAAG,MAAMR,MAAM,CAACS,MAAM,CAACJ,OAAO,CAAC;IAE/CK,MAAM,CAACF,MAAM,CAAC,CAACG,aAAa,CAAC;MAC3BC,OAAO,EAAE;IACX,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ,CAAC,CAAC;;AAEF;AACA;AACA","ignoreList":[]}

package/.server/server/routes/index.js

@@ -0,0 +1,3 @@
+export { default as publicRoutes } from "./public.js";
+export { default as healthRoute } from "./health.js";
+//# sourceMappingURL=index.js.map

package/.server/server/routes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["default","publicRoutes","healthRoute"],"sources":["../../../src/server/routes/index.ts"],"sourcesContent":["export { default as publicRoutes } from '~/src/server/routes/public.js'\nexport { default as healthRoute } from '~/src/server/routes/health.js'\n"],"mappings":"AAAA,SAASA,OAAO,IAAIC,YAAY;AAChC,SAASD,OAAO,IAAIE,WAAW","ignoreList":[]}

package/.server/server/routes/public.js

@@ -0,0 +1,37 @@
+import { join } from 'node:path';
+import { config } from "../../config/index.js";
+export default [{
+  from: '/javascripts/{path*}',
+  to: join(config.get('publicDir'), 'javascripts'),
+  immutable: true
+}, {
+  from: '/stylesheets/{path*}',
+  to: join(config.get('publicDir'), 'stylesheets'),
+  immutable: true
+}, {
+  from: '/assets/fonts/{path*}',
+  to: join(config.get('publicDir'), 'assets/fonts'),
+  immutable: true
+}, {
+  from: '/assets/{path*}',
+  to: join(config.get('publicDir'), 'assets'),
+  immutable: false
+}].map(options => {
+  return {
+    method: 'GET',
+    path: options.from,
+    options: {
+      cache: {
+        // Historically, an infinite max-age is the 32-bit maximum 2,147,483,648
+        // https://datatracker.ietf.org/doc/html/rfc9111#section-1.2.2
+        otherwise: options.immutable ? 'public, max-age=2147483648, immutable' : 'public, max-age=0, must-revalidate'
+      },
+      handler: {
+        directory: {
+          path: options.to
+        }
+      }
+    }
+  };
+});
+//# sourceMappingURL=public.js.map

package/.server/server/routes/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","names":["join","config","from","to","get","immutable","map","options","method","path","cache","otherwise","handler","directory"],"sources":["../../../src/server/routes/public.ts"],"sourcesContent":["import { join } from 'node:path'\n\nimport { type HandlerDecorations, type ServerRoute } from '@hapi/hapi'\n\nimport { config } from '~/src/config/index.js'\n\nexport default [\n  {\n    from: '/javascripts/{path*}',\n    to: join(config.get('publicDir'), 'javascripts'),\n    immutable: true\n  },\n  {\n    from: '/stylesheets/{path*}',\n    to: join(config.get('publicDir'), 'stylesheets'),\n    immutable: true\n  },\n  {\n    from: '/assets/fonts/{path*}',\n    to: join(config.get('publicDir'), 'assets/fonts'),\n    immutable: true\n  },\n  {\n    from: '/assets/{path*}',\n    to: join(config.get('publicDir'), 'assets'),\n    immutable: false\n  }\n].map((options) => {\n  return {\n    method: 'GET',\n    path: options.from,\n    options: {\n      cache: {\n        // Historically, an infinite max-age is the 32-bit maximum 2,147,483,648\n        // https://datatracker.ietf.org/doc/html/rfc9111#section-1.2.2\n        otherwise: options.immutable\n          ? 'public, max-age=2147483648, immutable'\n          : 'public, max-age=0, must-revalidate'\n      },\n      handler: {\n        directory: {\n          path: options.to\n        }\n      } satisfies HandlerDecorations\n    }\n  } satisfies ServerRoute\n})\n"],"mappings":"AAAA,SAASA,IAAI,QAAQ,WAAW;AAIhC,SAASC,MAAM;AAEf,eAAe,CACb;EACEC,IAAI,EAAE,sBAAsB;EAC5BC,EAAE,EAAEH,IAAI,CAACC,MAAM,CAACG,GAAG,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;EAChDC,SAAS,EAAE;AACb,CAAC,EACD;EACEH,IAAI,EAAE,sBAAsB;EAC5BC,EAAE,EAAEH,IAAI,CAACC,MAAM,CAACG,GAAG,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;EAChDC,SAAS,EAAE;AACb,CAAC,EACD;EACEH,IAAI,EAAE,uBAAuB;EAC7BC,EAAE,EAAEH,IAAI,CAACC,MAAM,CAACG,GAAG,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC;EACjDC,SAAS,EAAE;AACb,CAAC,EACD;EACEH,IAAI,EAAE,iBAAiB;EACvBC,EAAE,EAAEH,IAAI,CAACC,MAAM,CAACG,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;EAC3CC,SAAS,EAAE;AACb,CAAC,CACF,CAACC,GAAG,CAAEC,OAAO,IAAK;EACjB,OAAO;IACLC,MAAM,EAAE,KAAK;IACbC,IAAI,EAAEF,OAAO,CAACL,IAAI;IAClBK,OAAO,EAAE;MACPG,KAAK,EAAE;QACL;QACA;QACAC,SAAS,EAAEJ,OAAO,CAACF,SAAS,GACxB,uCAAuC,GACvC;MACN,CAAC;MACDO,OAAO,EAAE;QACPC,SAAS,EAAE;UACTJ,IAAI,EAAEF,OAAO,CAACJ;QAChB;MACF;IACF;EACF,CAAC;AACH,CAAC,CAAC","ignoreList":[]}

package/.server/server/routes/types.js

@@ -0,0 +1,14 @@
+export let FormAction = /*#__PURE__*/function (FormAction) {
+  FormAction["Continue"] = "continue";
+  FormAction["Validate"] = "validate";
+  FormAction["Delete"] = "delete";
+  FormAction["AddAnother"] = "add-another";
+  FormAction["Send"] = "send";
+  return FormAction;
+}({});
+export let FormStatus = /*#__PURE__*/function (FormStatus) {
+  FormStatus["Draft"] = "draft";
+  FormStatus["Live"] = "live";
+  return FormStatus;
+}({});
+//# sourceMappingURL=types.js.map

package/.server/server/routes/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","names":["FormAction","FormStatus"],"sources":["../../../src/server/routes/types.ts"],"sourcesContent":["import { type ReqRefDefaults, type Request } from '@hapi/hapi'\n\nimport { type FormPayload } from '~/src/server/plugins/engine/types.js'\n\nexport interface FormQuery extends Partial<Record<string, string>> {\n  /**\n   * Allow preview URL direct access without relevant page checks\n   */\n  force?: string\n\n  /**\n   * Redirect location after 'continue' form action\n   */\n  returnUrl?: string\n}\n\nexport interface FormParams extends Partial<Record<string, string>> {\n  path: string\n  slug: string\n  state?: FormStatus\n}\n\nexport interface FormRequestRefs\n  extends Omit<ReqRefDefaults, 'Params' | 'Payload' | 'Query'> {\n  Params: FormParams\n  Payload: object | undefined\n  Query: FormQuery\n}\n\nexport interface FormRequestPayloadRefs extends FormRequestRefs {\n  Payload: FormPayload\n}\n\nexport type FormRequest = Request<FormRequestRefs>\nexport type FormRequestPayload = Request<FormRequestPayloadRefs>\n\nexport enum FormAction {\n  Continue = 'continue',\n  Validate = 'validate',\n  Delete = 'delete',\n  AddAnother = 'add-another',\n  Send = 'send'\n}\n\nexport enum FormStatus {\n  Draft = 'draft',\n  Live = 'live'\n}\n"],"mappings":"AAoCA,WAAYA,UAAU,0BAAVA,UAAU;EAAVA,UAAU;EAAVA,UAAU;EAAVA,UAAU;EAAVA,UAAU;EAAVA,UAAU;EAAA,OAAVA,UAAU;AAAA;AAQtB,WAAYC,UAAU,0BAAVA,UAAU;EAAVA,UAAU;EAAVA,UAAU;EAAA,OAAVA,UAAU;AAAA","ignoreList":[]}

package/.server/server/schemas/index.js

@@ -0,0 +1,15 @@
+import Joi from 'joi';
+import { FormAction, FormStatus } from "../routes/types.js";
+export const stateSchema = Joi.string().valid(FormStatus.Draft, FormStatus.Live).required();
+export const actionSchema = Joi.string().valid(FormAction.Continue, FormAction.Validate, FormAction.Delete, FormAction.AddAnother, FormAction.Send).default(FormAction.Validate).optional();
+export const pathSchema = Joi.string().required();
+export const itemIdSchema = Joi.string().uuid().required();
+export const crumbSchema = Joi.string().optional().allow('');
+export const confirmSchema = Joi.boolean().empty(false);
+export const paramsSchema = Joi.object().keys({
+  action: actionSchema,
+  confirm: confirmSchema,
+  crumb: crumbSchema,
+  itemId: itemIdSchema.optional()
+}).default({}).optional();
+//# sourceMappingURL=index.js.map

package/.server/server/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["Joi","FormAction","FormStatus","stateSchema","string","valid","Draft","Live","required","actionSchema","Continue","Validate","Delete","AddAnother","Send","default","optional","pathSchema","itemIdSchema","uuid","crumbSchema","allow","confirmSchema","boolean","empty","paramsSchema","object","keys","action","confirm","crumb","itemId"],"sources":["../../../src/server/schemas/index.ts"],"sourcesContent":["import Joi from 'joi'\n\nimport { type FormParams } from '~/src/server/plugins/engine/types.js'\nimport { FormAction, FormStatus } from '~/src/server/routes/types.js'\n\nexport const stateSchema = Joi.string<FormStatus>()\n  .valid(FormStatus.Draft, FormStatus.Live)\n  .required()\n\nexport const actionSchema = Joi.string<FormAction>()\n  .valid(\n    FormAction.Continue,\n    FormAction.Validate,\n    FormAction.Delete,\n    FormAction.AddAnother,\n    FormAction.Send\n  )\n  .default(FormAction.Validate)\n  .optional()\n\nexport const pathSchema = Joi.string().required()\nexport const itemIdSchema = Joi.string().uuid().required()\nexport const crumbSchema = Joi.string().optional().allow('')\nexport const confirmSchema = Joi.boolean().empty(false)\n\nexport const paramsSchema = Joi.object<FormParams>()\n  .keys({\n    action: actionSchema,\n    confirm: confirmSchema,\n    crumb: crumbSchema,\n    itemId: itemIdSchema.optional()\n  })\n  .default({})\n  .optional()\n"],"mappings":"AAAA,OAAOA,GAAG,MAAM,KAAK;AAGrB,SAASC,UAAU,EAAEC,UAAU;AAE/B,OAAO,MAAMC,WAAW,GAAGH,GAAG,CAACI,MAAM,CAAa,CAAC,CAChDC,KAAK,CAACH,UAAU,CAACI,KAAK,EAAEJ,UAAU,CAACK,IAAI,CAAC,CACxCC,QAAQ,CAAC,CAAC;AAEb,OAAO,MAAMC,YAAY,GAAGT,GAAG,CAACI,MAAM,CAAa,CAAC,CACjDC,KAAK,CACJJ,UAAU,CAACS,QAAQ,EACnBT,UAAU,CAACU,QAAQ,EACnBV,UAAU,CAACW,MAAM,EACjBX,UAAU,CAACY,UAAU,EACrBZ,UAAU,CAACa,IACb,CAAC,CACAC,OAAO,CAACd,UAAU,CAACU,QAAQ,CAAC,CAC5BK,QAAQ,CAAC,CAAC;AAEb,OAAO,MAAMC,UAAU,GAAGjB,GAAG,CAACI,MAAM,CAAC,CAAC,CAACI,QAAQ,CAAC,CAAC;AACjD,OAAO,MAAMU,YAAY,GAAGlB,GAAG,CAACI,MAAM,CAAC,CAAC,CAACe,IAAI,CAAC,CAAC,CAACX,QAAQ,CAAC,CAAC;AAC1D,OAAO,MAAMY,WAAW,GAAGpB,GAAG,CAACI,MAAM,CAAC,CAAC,CAACY,QAAQ,CAAC,CAAC,CAACK,KAAK,CAAC,EAAE,CAAC;AAC5D,OAAO,MAAMC,aAAa,GAAGtB,GAAG,CAACuB,OAAO,CAAC,CAAC,CAACC,KAAK,CAAC,KAAK,CAAC;AAEvD,OAAO,MAAMC,YAAY,GAAGzB,GAAG,CAAC0B,MAAM,CAAa,CAAC,CACjDC,IAAI,CAAC;EACJC,MAAM,EAAEnB,YAAY;EACpBoB,OAAO,EAAEP,aAAa;EACtBQ,KAAK,EAAEV,WAAW;EAClBW,MAAM,EAAEb,YAAY,CAACF,QAAQ,CAAC;AAChC,CAAC,CAAC,CACDD,OAAO,CAAC,CAAC,CAAC,CAAC,CACXC,QAAQ,CAAC,CAAC","ignoreList":[]}

package/.server/server/secure-context.js

@@ -0,0 +1,36 @@
+import tls from 'node:tls';
+import { getTrustStoreCerts } from "./utils/secure-context/get-trust-store-certs.js";
+
+/**
+ * @type {SecureContext}
+ */
+export let secureContext;
+
+/**
+ * Prepares the TLS secure context
+ * @param {Server} server
+ * @returns
+ */
+export function prepareSecureContext(server) {
+  const originalCreateSecureContext = tls.createSecureContext;
+  tls.createSecureContext = function (options = {}) {
+    const trustStoreCerts = getTrustStoreCerts(process.env);
+    if (!trustStoreCerts.length) {
+      server.logger.info('Could not find any TRUSTSTORE_ certificates');
+    }
+    const originalSecureContext = originalCreateSecureContext(options);
+    trustStoreCerts.forEach(cert => {
+      // eslint-disable-next-line -- Node.js API not documented
+      originalSecureContext.context.addCACert(cert);
+    });
+    return originalSecureContext;
+  };
+  secureContext = tls.createSecureContext();
+  return secureContext;
+}
+
+/**
+ * @import { Server } from '@hapi/hapi'
+ * @import { SecureContext } from 'node:tls'
+ */
+//# sourceMappingURL=secure-context.js.map

package/.server/server/secure-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-context.js","names":["tls","getTrustStoreCerts","secureContext","prepareSecureContext","server","originalCreateSecureContext","createSecureContext","options","trustStoreCerts","process","env","length","logger","info","originalSecureContext","forEach","cert","context","addCACert"],"sources":["../../src/server/secure-context.js"],"sourcesContent":["import tls from 'node:tls'\n\nimport { getTrustStoreCerts } from '~/src/server/utils/secure-context/get-trust-store-certs.js'\n\n/**\n * @type {SecureContext}\n */\nexport let secureContext\n\n/**\n * Prepares the TLS secure context\n * @param {Server} server\n * @returns\n */\nexport function prepareSecureContext(server) {\n  const originalCreateSecureContext = tls.createSecureContext\n\n  tls.createSecureContext = function (options = {}) {\n    const trustStoreCerts = getTrustStoreCerts(process.env)\n\n    if (!trustStoreCerts.length) {\n      server.logger.info('Could not find any TRUSTSTORE_ certificates')\n    }\n\n    const originalSecureContext = originalCreateSecureContext(options)\n\n    trustStoreCerts.forEach((cert) => {\n      // eslint-disable-next-line -- Node.js API not documented\n      originalSecureContext.context.addCACert(cert)\n    })\n\n    return originalSecureContext\n  }\n\n  secureContext = tls.createSecureContext()\n\n  return secureContext\n}\n\n/**\n * @import { Server } from '@hapi/hapi'\n * @import { SecureContext } from 'node:tls'\n */\n"],"mappings":"AAAA,OAAOA,GAAG,MAAM,UAAU;AAE1B,SAASC,kBAAkB;;AAE3B;AACA;AACA;AACA,OAAO,IAAIC,aAAa;;AAExB;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,oBAAoBA,CAACC,MAAM,EAAE;EAC3C,MAAMC,2BAA2B,GAAGL,GAAG,CAACM,mBAAmB;EAE3DN,GAAG,CAACM,mBAAmB,GAAG,UAAUC,OAAO,GAAG,CAAC,CAAC,EAAE;IAChD,MAAMC,eAAe,GAAGP,kBAAkB,CAACQ,OAAO,CAACC,GAAG,CAAC;IAEvD,IAAI,CAACF,eAAe,CAACG,MAAM,EAAE;MAC3BP,MAAM,CAACQ,MAAM,CAACC,IAAI,CAAC,6CAA6C,CAAC;IACnE;IAEA,MAAMC,qBAAqB,GAAGT,2BAA2B,CAACE,OAAO,CAAC;IAElEC,eAAe,CAACO,OAAO,CAAEC,IAAI,IAAK;MAChC;MACAF,qBAAqB,CAACG,OAAO,CAACC,SAAS,CAACF,IAAI,CAAC;IAC/C,CAAC,CAAC;IAEF,OAAOF,qBAAqB;EAC9B,CAAC;EAEDZ,aAAa,GAAGF,GAAG,CAACM,mBAAmB,CAAC,CAAC;EAEzC,OAAOJ,aAAa;AACtB;;AAEA;AACA;AACA;AACA","ignoreList":[]}

package/.server/server/services/cacheService.js

@@ -0,0 +1,85 @@
+import * as Hoek from '@hapi/hoek';
+import { config } from "../../config/index.js";
+const partition = 'cache';
+var ADDITIONAL_IDENTIFIER = /*#__PURE__*/function (ADDITIONAL_IDENTIFIER) {
+  ADDITIONAL_IDENTIFIER["Confirmation"] = ":confirmation";
+  return ADDITIONAL_IDENTIFIER;
+}(ADDITIONAL_IDENTIFIER || {});
+export class CacheService {
+  /**
+   * This service is responsible for getting, storing or deleting a user's session data in the cache. This service has been registered by {@link createServer}
+   */
+  cache;
+  logger;
+  constructor(server) {
+    this.cache = server.cache({
+      cache: 'session',
+      segment: 'formSubmission'
+    });
+    this.logger = server.logger;
+  }
+  async getState(request) {
+    const cached = await this.cache.get(this.Key(request));
+    return cached || {};
+  }
+  async setState(request, state) {
+    const key = this.Key(request);
+    const ttl = config.get('sessionTimeout');
+    await this.cache.set(key, state, ttl);
+    return this.getState(request);
+  }
+  async getConfirmationState(request) {
+    const key = this.Key(request, ADDITIONAL_IDENTIFIER.Confirmation);
+    const value = await this.cache.get(key);
+    return value || {};
+  }
+  async setConfirmationState(request, confirmationState) {
+    const key = this.Key(request, ADDITIONAL_IDENTIFIER.Confirmation);
+    const ttl = config.get('confirmationSessionTimeout');
+    return this.cache.set(key, confirmationState, ttl);
+  }
+  async clearState(request) {
+    if (request.yar.id) {
+      await this.cache.drop(this.Key(request));
+    }
+  }
+  getFlash(request) {
+    const key = this.Key(request);
+    const messages = request.yar.flash(key.id);
+    if (Array.isArray(messages) && messages.length) {
+      return messages.at(0);
+    }
+  }
+  setFlash(request, message) {
+    const key = this.Key(request);
+    request.yar.flash(key.id, message);
+  }
+
+  /**
+   * The key used to store user session data against.
+   * If there are multiple forms on the same runner instance, for example `form-a` and `form-a-feedback` this will prevent CacheService from clearing data from `form-a` if a user gave feedback before they finished `form-a`
+   * @param request - hapi request object
+   * @param additionalIdentifier - appended to the id
+   */
+  Key(request, additionalIdentifier) {
+    if (!request.yar.id) {
+      throw Error('No session ID found');
+    }
+    return {
+      segment: partition,
+      id: `${request.yar.id}:${request.params.state ?? ''}:${request.params.slug ?? ''}:${additionalIdentifier ?? ''}`
+    };
+  }
+}
+
+/**
+ * State merge helper
+ * 1. Merges objects (form fields)
+ * 2. Overwrites arrays
+ */
+export function merge(state, update) {
+  return Hoek.merge(state, update, {
+    mergeArrays: false
+  });
+}
+//# sourceMappingURL=cacheService.js.map

package/.server/server/services/cacheService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cacheService.js","names":["Hoek","config","partition","ADDITIONAL_IDENTIFIER","CacheService","cache","logger","constructor","server","segment","getState","request","cached","get","Key","setState","state","key","ttl","set","getConfirmationState","Confirmation","value","setConfirmationState","confirmationState","clearState","yar","id","drop","getFlash","messages","flash","Array","isArray","length","at","setFlash","message","additionalIdentifier","Error","params","slug","merge","update","mergeArrays"],"sources":["../../../src/server/services/cacheService.ts"],"sourcesContent":["import { type Request, type Server } from '@hapi/hapi'\nimport * as Hoek from '@hapi/hoek'\n\nimport { config } from '~/src/config/index.js'\nimport { type createServer } from '~/src/server/index.js'\nimport {\n  type FormPayload,\n  type FormState,\n  type FormSubmissionError,\n  type FormSubmissionState\n} from '~/src/server/plugins/engine/types.js'\nimport {\n  type FormRequest,\n  type FormRequestPayload\n} from '~/src/server/routes/types.js'\n\nconst partition = 'cache'\n\nenum ADDITIONAL_IDENTIFIER {\n  Confirmation = ':confirmation'\n}\n\nexport class CacheService {\n  /**\n   * This service is responsible for getting, storing or deleting a user's session data in the cache. This service has been registered by {@link createServer}\n   */\n  cache\n  logger: Server['logger']\n\n  constructor(server: Server) {\n    this.cache = server.cache({ cache: 'session', segment: 'formSubmission' })\n    this.logger = server.logger\n  }\n\n  async getState(\n    request: Request | FormRequest | FormRequestPayload\n  ): Promise<FormSubmissionState> {\n    const cached = await this.cache.get(this.Key(request))\n\n    return cached || {}\n  }\n\n  async setState(\n    request: FormRequest | FormRequestPayload,\n    state: FormSubmissionState\n  ) {\n    const key = this.Key(request)\n    const ttl = config.get('sessionTimeout')\n\n    await this.cache.set(key, state, ttl)\n    return this.getState(request)\n  }\n\n  async getConfirmationState(\n    request: FormRequest | FormRequestPayload\n  ): Promise<{ confirmed?: true }> {\n    const key = this.Key(request, ADDITIONAL_IDENTIFIER.Confirmation)\n    const value = await this.cache.get(key)\n\n    return value || {}\n  }\n\n  async setConfirmationState(\n    request: FormRequest | FormRequestPayload,\n    confirmationState: { confirmed?: true }\n  ) {\n    const key = this.Key(request, ADDITIONAL_IDENTIFIER.Confirmation)\n    const ttl = config.get('confirmationSessionTimeout')\n\n    return this.cache.set(key, confirmationState, ttl)\n  }\n\n  async clearState(request: FormRequest | FormRequestPayload) {\n    if (request.yar.id) {\n      await this.cache.drop(this.Key(request))\n    }\n  }\n\n  getFlash(\n    request: FormRequest | FormRequestPayload\n  ): { errors: FormSubmissionError[] } | undefined {\n    const key = this.Key(request)\n    const messages = request.yar.flash(key.id)\n\n    if (Array.isArray(messages) && messages.length) {\n      return messages.at(0) as { errors: FormSubmissionError[] }\n    }\n  }\n\n  setFlash(\n    request: FormRequest | FormRequestPayload,\n    message: { errors: FormSubmissionError[] }\n  ) {\n    const key = this.Key(request)\n\n    request.yar.flash(key.id, message)\n  }\n\n  /**\n   * The key used to store user session data against.\n   * If there are multiple forms on the same runner instance, for example `form-a` and `form-a-feedback` this will prevent CacheService from clearing data from `form-a` if a user gave feedback before they finished `form-a`\n   * @param request - hapi request object\n   * @param additionalIdentifier - appended to the id\n   */\n  Key(\n    request: Request | FormRequest | FormRequestPayload,\n    additionalIdentifier?: ADDITIONAL_IDENTIFIER\n  ) {\n    if (!request.yar.id) {\n      throw Error('No session ID found')\n    }\n    return {\n      segment: partition,\n      id: `${request.yar.id}:${request.params.state ?? ''}:${request.params.slug ?? ''}:${additionalIdentifier ?? ''}`\n    }\n  }\n}\n\n/**\n * State merge helper\n * 1. Merges objects (form fields)\n * 2. Overwrites arrays\n */\nexport function merge<StateType extends FormState | FormPayload>(\n  state: StateType,\n  update: object\n): StateType {\n  return Hoek.merge(state, update, {\n    mergeArrays: false\n  })\n}\n"],"mappings":"AACA,OAAO,KAAKA,IAAI,MAAM,YAAY;AAElC,SAASC,MAAM;AAaf,MAAMC,SAAS,GAAG,OAAO;AAAA,IAEpBC,qBAAqB,0BAArBA,qBAAqB;EAArBA,qBAAqB;EAAA,OAArBA,qBAAqB;AAAA,EAArBA,qBAAqB;AAI1B,OAAO,MAAMC,YAAY,CAAC;EACxB;AACF;AACA;EACEC,KAAK;EACLC,MAAM;EAENC,WAAWA,CAACC,MAAc,EAAE;IAC1B,IAAI,CAACH,KAAK,GAAGG,MAAM,CAACH,KAAK,CAAC;MAAEA,KAAK,EAAE,SAAS;MAAEI,OAAO,EAAE;IAAiB,CAAC,CAAC;IAC1E,IAAI,CAACH,MAAM,GAAGE,MAAM,CAACF,MAAM;EAC7B;EAEA,MAAMI,QAAQA,CACZC,OAAmD,EACrB;IAC9B,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACP,KAAK,CAACQ,GAAG,CAAC,IAAI,CAACC,GAAG,CAACH,OAAO,CAAC,CAAC;IAEtD,OAAOC,MAAM,IAAI,CAAC,CAAC;EACrB;EAEA,MAAMG,QAAQA,CACZJ,OAAyC,EACzCK,KAA0B,EAC1B;IACA,MAAMC,GAAG,GAAG,IAAI,CAACH,GAAG,CAACH,OAAO,CAAC;IAC7B,MAAMO,GAAG,GAAGjB,MAAM,CAACY,GAAG,CAAC,gBAAgB,CAAC;IAExC,MAAM,IAAI,CAACR,KAAK,CAACc,GAAG,CAACF,GAAG,EAAED,KAAK,EAAEE,GAAG,CAAC;IACrC,OAAO,IAAI,CAACR,QAAQ,CAACC,OAAO,CAAC;EAC/B;EAEA,MAAMS,oBAAoBA,CACxBT,OAAyC,EACV;IAC/B,MAAMM,GAAG,GAAG,IAAI,CAACH,GAAG,CAACH,OAAO,EAAER,qBAAqB,CAACkB,YAAY,CAAC;IACjE,MAAMC,KAAK,GAAG,MAAM,IAAI,CAACjB,KAAK,CAACQ,GAAG,CAACI,GAAG,CAAC;IAEvC,OAAOK,KAAK,IAAI,CAAC,CAAC;EACpB;EAEA,MAAMC,oBAAoBA,CACxBZ,OAAyC,EACzCa,iBAAuC,EACvC;IACA,MAAMP,GAAG,GAAG,IAAI,CAACH,GAAG,CAACH,OAAO,EAAER,qBAAqB,CAACkB,YAAY,CAAC;IACjE,MAAMH,GAAG,GAAGjB,MAAM,CAACY,GAAG,CAAC,4BAA4B,CAAC;IAEpD,OAAO,IAAI,CAACR,KAAK,CAACc,GAAG,CAACF,GAAG,EAAEO,iBAAiB,EAAEN,GAAG,CAAC;EACpD;EAEA,MAAMO,UAAUA,CAACd,OAAyC,EAAE;IAC1D,IAAIA,OAAO,CAACe,GAAG,CAACC,EAAE,EAAE;MAClB,MAAM,IAAI,CAACtB,KAAK,CAACuB,IAAI,CAAC,IAAI,CAACd,GAAG,CAACH,OAAO,CAAC,CAAC;IAC1C;EACF;EAEAkB,QAAQA,CACNlB,OAAyC,EACM;IAC/C,MAAMM,GAAG,GAAG,IAAI,CAACH,GAAG,CAACH,OAAO,CAAC;IAC7B,MAAMmB,QAAQ,GAAGnB,OAAO,CAACe,GAAG,CAACK,KAAK,CAACd,GAAG,CAACU,EAAE,CAAC;IAE1C,IAAIK,KAAK,CAACC,OAAO,CAACH,QAAQ,CAAC,IAAIA,QAAQ,CAACI,MAAM,EAAE;MAC9C,OAAOJ,QAAQ,CAACK,EAAE,CAAC,CAAC,CAAC;IACvB;EACF;EAEAC,QAAQA,CACNzB,OAAyC,EACzC0B,OAA0C,EAC1C;IACA,MAAMpB,GAAG,GAAG,IAAI,CAACH,GAAG,CAACH,OAAO,CAAC;IAE7BA,OAAO,CAACe,GAAG,CAACK,KAAK,CAACd,GAAG,CAACU,EAAE,EAAEU,OAAO,CAAC;EACpC;;EAEA;AACF;AACA;AACA;AACA;AACA;EACEvB,GAAGA,CACDH,OAAmD,EACnD2B,oBAA4C,EAC5C;IACA,IAAI,CAAC3B,OAAO,CAACe,GAAG,CAACC,EAAE,EAAE;MACnB,MAAMY,KAAK,CAAC,qBAAqB,CAAC;IACpC;IACA,OAAO;MACL9B,OAAO,EAAEP,SAAS;MAClByB,EAAE,EAAE,GAAGhB,OAAO,CAACe,GAAG,CAACC,EAAE,IAAIhB,OAAO,CAAC6B,MAAM,CAACxB,KAAK,IAAI,EAAE,IAAIL,OAAO,CAAC6B,MAAM,CAACC,IAAI,IAAI,EAAE,IAAIH,oBAAoB,IAAI,EAAE;IAChH,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,KAAKA,CACnB1B,KAAgB,EAChB2B,MAAc,EACH;EACX,OAAO3C,IAAI,CAAC0C,KAAK,CAAC1B,KAAK,EAAE2B,MAAM,EAAE;IAC/BC,WAAW,EAAE;EACf,CAAC,CAAC;AACJ","ignoreList":[]}

package/.server/server/services/httpService.js

@@ -0,0 +1,44 @@
+import Wreck from '@hapi/wreck';
+import { applyTraceHeaders } from "../utils/utils.js";
+export const request = async (method, url, options) => {
+  const headers = applyTraceHeaders(options?.headers);
+  const mergedOptions = {
+    ...options,
+    headers
+  };
+  const {
+    res,
+    payload
+  } = await Wreck[method](url, mergedOptions);
+  if (!res.statusCode || res.statusCode < 200 || res.statusCode > 299) {
+    return {
+      res,
+      error: payload || new Error('Unknown error')
+    };
+  }
+  return {
+    res,
+    payload
+  };
+};
+export const get = (url, options) => {
+  return request('get', url, options);
+};
+export const getJson = url => {
+  return get(url, {
+    json: true
+  });
+};
+export const post = (url, options) => {
+  return request('post', url, options);
+};
+export const postJson = (url, options) => {
+  return post(url, {
+    ...options,
+    json: true
+  });
+};
+export const put = (url, options) => {
+  return request('put', url, options);
+};
+//# sourceMappingURL=httpService.js.map

package/.server/server/services/httpService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpService.js","names":["Wreck","applyTraceHeaders","request","method","url","options","headers","mergedOptions","res","payload","statusCode","error","Error","get","getJson","json","post","postJson","put"],"sources":["../../../src/server/services/httpService.ts"],"sourcesContent":["import Wreck from '@hapi/wreck'\n\nimport { applyTraceHeaders } from '~/src/server/utils/utils.js'\n\nexport type Method = keyof Pick<typeof Wreck, 'get' | 'post' | 'put' | 'delete'>\nexport type RequestOptions = Parameters<typeof Wreck.defaults>[0]\n\nexport const request = async <BodyType = Buffer>(\n  method: Method,\n  url: string,\n  options?: RequestOptions\n) => {\n  const headers = applyTraceHeaders(options?.headers)\n\n  const mergedOptions = { ...options, headers }\n\n  const { res, payload } = await Wreck[method]<BodyType>(url, mergedOptions)\n\n  if (!res.statusCode || res.statusCode < 200 || res.statusCode > 299) {\n    return { res, error: payload || new Error('Unknown error') }\n  }\n\n  return { res, payload }\n}\n\nexport const get = <BodyType>(url: string, options?: RequestOptions) => {\n  return request<BodyType>('get', url, options)\n}\n\nexport const getJson = <BodyType extends object>(url: string) => {\n  return get<BodyType>(url, { json: true })\n}\n\nexport const post = <BodyType>(url: string, options: RequestOptions) => {\n  return request<BodyType>('post', url, options)\n}\n\nexport const postJson = <BodyType extends object>(\n  url: string,\n  options: RequestOptions\n) => {\n  return post<BodyType>(url, {\n    ...options,\n    json: true\n  })\n}\n\nexport const put = <BodyType>(url: string, options: RequestOptions) => {\n  return request<BodyType>('put', url, options)\n}\n"],"mappings":"AAAA,OAAOA,KAAK,MAAM,aAAa;AAE/B,SAASC,iBAAiB;AAK1B,OAAO,MAAMC,OAAO,GAAG,MAAAA,CACrBC,MAAc,EACdC,GAAW,EACXC,OAAwB,KACrB;EACH,MAAMC,OAAO,GAAGL,iBAAiB,CAACI,OAAO,EAAEC,OAAO,CAAC;EAEnD,MAAMC,aAAa,GAAG;IAAE,GAAGF,OAAO;IAAEC;EAAQ,CAAC;EAE7C,MAAM;IAAEE,GAAG;IAAEC;EAAQ,CAAC,GAAG,MAAMT,KAAK,CAACG,MAAM,CAAC,CAAWC,GAAG,EAAEG,aAAa,CAAC;EAE1E,IAAI,CAACC,GAAG,CAACE,UAAU,IAAIF,GAAG,CAACE,UAAU,GAAG,GAAG,IAAIF,GAAG,CAACE,UAAU,GAAG,GAAG,EAAE;IACnE,OAAO;MAAEF,GAAG;MAAEG,KAAK,EAAEF,OAAO,IAAI,IAAIG,KAAK,CAAC,eAAe;IAAE,CAAC;EAC9D;EAEA,OAAO;IAAEJ,GAAG;IAAEC;EAAQ,CAAC;AACzB,CAAC;AAED,OAAO,MAAMI,GAAG,GAAGA,CAAWT,GAAW,EAAEC,OAAwB,KAAK;EACtE,OAAOH,OAAO,CAAW,KAAK,EAAEE,GAAG,EAAEC,OAAO,CAAC;AAC/C,CAAC;AAED,OAAO,MAAMS,OAAO,GAA6BV,GAAW,IAAK;EAC/D,OAAOS,GAAG,CAAWT,GAAG,EAAE;IAAEW,IAAI,EAAE;EAAK,CAAC,CAAC;AAC3C,CAAC;AAED,OAAO,MAAMC,IAAI,GAAGA,CAAWZ,GAAW,EAAEC,OAAuB,KAAK;EACtE,OAAOH,OAAO,CAAW,MAAM,EAAEE,GAAG,EAAEC,OAAO,CAAC;AAChD,CAAC;AAED,OAAO,MAAMY,QAAQ,GAAGA,CACtBb,GAAW,EACXC,OAAuB,KACpB;EACH,OAAOW,IAAI,CAAWZ,GAAG,EAAE;IACzB,GAAGC,OAAO;IACVU,IAAI,EAAE;EACR,CAAC,CAAC;AACJ,CAAC;AAED,OAAO,MAAMG,GAAG,GAAGA,CAAWd,GAAW,EAAEC,OAAuB,KAAK;EACrE,OAAOH,OAAO,CAAW,KAAK,EAAEE,GAAG,EAAEC,OAAO,CAAC;AAC/C,CAAC","ignoreList":[]}