@fleox-agent-crm/agentcrm 0.0.0-stage → 0.3.0

package/dist/agent/chunks/forms-BKU5F9WF.mjs

@@ -0,0 +1,847 @@
+import { createRequire as __acrmRequire } from "node:module";
+import { fileURLToPath as __acrmPath } from "node:url";
+import { dirname as __acrmDirname } from "node:path";
+const require2 = __acrmRequire(import.meta.url);
+const __filename = __acrmPath(import.meta.url);
+const __dirname = __acrmDirname(__filename);
+import { normalizeEmail, isEmptyFieldValue, normalizeDomain, formatFieldValue, recordLabel } from "./fields-B0bitgmr.mjs";
+import { n as newId } from "./ids-CvnmrMJX.mjs";
+import { addActivity } from "./activities-Cj_SIOay.mjs";
+import { assertCan, OpsError } from "./context-CxFfqS4D.mjs";
+import { createRecord, updateRecord, queryContext } from "./records-DoqiT9xR.mjs";
+import { formsOf, requireObject, asDoc, objectOf, thaw, userOf, recordsOf, activitiesOf } from "./store-5gqRSKXg.mjs";
+import "./query-C5nJB_3C.mjs";
+import "../agentcrm.mjs";
+import "node:util";
+import "node:fs";
+import "node:path";
+import "node:url";
+import "node:crypto";
+import "node:os";
+import "node:child_process";
+import "node:http";
+import "./relations-B9TynBmA.mjs";
+import "./pluginRegistry-DyHtlkcr.mjs";
+import "./standardObjects-CheqfDqa.mjs";
+const INBOX_KINDS = ["s3", "firebase", "webhook"];
+const DEFAULT_INBOX_PREFIX = "inbox/";
+const DEFAULT_FIREBASE_INBOX = "inbox";
+const DEFAULT_FORM_TEXTS = {
+  submit: "Submit",
+  sending: "Sending…",
+  error: "Something went wrong. Please try again in a moment.",
+  tooFast: "Please take a second to check your answers, then submit again."
+};
+const MIN_FILL_MS = 2500;
+const HONEYPOT_NAME = "_hp";
+const FORM_FIELD_TYPES = [
+  "text",
+  "longText",
+  "email",
+  "phone",
+  "url",
+  "number",
+  "currency",
+  "percent",
+  "date",
+  "datetime",
+  "boolean",
+  "select",
+  "multiSelect",
+  "rating",
+  "tags"
+];
+function isFormFieldType(type) {
+  return FORM_FIELD_TYPES.includes(type);
+}
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function scriptJson(value) {
+  return JSON.stringify(value).replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/&/g, "\\u0026").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+function safeColor(c) {
+  return c && /^#[0-9a-f]{3,8}$/i.test(c) ? c : "#2563eb";
+}
+function inputFor(def, name, id, required, describedBy) {
+  const req = required ? ' required aria-required="true"' : "";
+  const common = `id="${id}" name="${escapeHtml(name)}"${req} aria-describedby="${describedBy}"`;
+  switch (def.type) {
+    case "longText":
+      return `<textarea ${common} rows="4"></textarea>`;
+    case "email":
+      return `<input type="email" ${common} autocomplete="email" inputmode="email">`;
+    case "phone":
+      return `<input type="tel" ${common} autocomplete="tel" inputmode="tel">`;
+    case "url":
+      return `<input type="url" ${common} autocomplete="url" placeholder="https://">`;
+    case "number":
+    case "currency":
+    case "percent":
+      return `<input type="number" ${common} step="any" inputmode="decimal">`;
+    case "rating":
+      return `<input type="number" ${common} min="1" max="5" step="1" inputmode="numeric">`;
+    case "date":
+      return `<input type="date" ${common}>`;
+    case "datetime":
+      return `<input type="datetime-local" ${common}>`;
+    case "select":
+      return `<select ${common}><option value="">—</option>${(def.options ?? []).map((o) => `<option value="${escapeHtml(o.id)}">${escapeHtml(o.label)}</option>`).join("")}</select>`;
+    default: {
+      const ac = name === "firstName" ? ' autocomplete="given-name"' : name === "lastName" ? ' autocomplete="family-name"' : name === "name" ? ' autocomplete="name"' : name === "jobTitle" ? ' autocomplete="organization-title"' : name === "city" ? ' autocomplete="address-level2"' : "";
+      return `<input type="text" ${common}${ac}>`;
+    }
+  }
+}
+function fieldBlock(form, object, index) {
+  const f = form.fields[index];
+  const def = object.fields.find((x) => x.id === f.field);
+  if (!def || !isFormFieldType(def.type)) return "";
+  const id = `acrm-${form.id}-${index}`;
+  const label = escapeHtml(f.label || def.label);
+  const star = f.required ? ' <span class="acrm-req" aria-hidden="true">*</span>' : "";
+  const err = `${id}-err`;
+  if (def.type === "boolean") {
+    return `<div class="acrm-field acrm-check"><input type="checkbox" id="${id}" name="${escapeHtml(def.id)}" value="true"${f.required ? ' required aria-required="true"' : ""} aria-describedby="${err}"><label for="${id}">${label}${star}</label><p class="acrm-err" id="${err}" hidden></p></div>`;
+  }
+  if (def.type === "multiSelect") {
+    const opts = (def.options ?? []).map((o, i) => `<label class="acrm-opt"><input type="checkbox" name="${escapeHtml(def.id)}" value="${escapeHtml(o.id)}" id="${id}-${i}"> ${escapeHtml(o.label)}</label>`).join("");
+    return `<fieldset class="acrm-field" aria-describedby="${err}"${f.required ? ' data-required="true"' : ""}><legend>${label}${star}</legend>${opts}<p class="acrm-err" id="${err}" hidden></p></fieldset>`;
+  }
+  const hint = def.type === "tags" ? `<p class="acrm-hint" id="${id}-hint">Separate values with commas.</p>` : "";
+  return `<div class="acrm-field"><label for="${id}">${label}${star}</label>${inputFor(def, def.id, id, f.required, def.type === "tags" ? `${err} ${id}-hint` : err)}${hint}<p class="acrm-err" id="${err}" hidden></p></div>`;
+}
+function formClientConfig(form, object) {
+  const s = form.inbox.settings ?? {};
+  let endpoint = "";
+  let extra;
+  if (form.inbox.kind === "s3") {
+    endpoint = (s.uploadUrl ?? "").trim();
+    if (endpoint && !endpoint.endsWith("/")) endpoint += "/";
+  } else if (form.inbox.kind === "firebase") {
+    const collection = (s.collection || DEFAULT_FIREBASE_INBOX).trim();
+    endpoint = `https://firestore.googleapis.com/v1/projects/${encodeURIComponent((s.projectId ?? "").trim())}/databases/(default)/documents/${encodeURIComponent(collection)}?key=${encodeURIComponent((s.apiKey ?? "").trim())}`;
+  } else {
+    endpoint = (s.url ?? "").trim();
+    if (s.extra) {
+      try {
+        const parsed = JSON.parse(s.extra);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) extra = parsed;
+      } catch {
+      }
+    }
+  }
+  const fields = form.fields.map((f) => object.fields.find((x) => x.id === f.field)).filter((d) => !!d && isFormFieldType(d.type)).map((d) => ({ name: d.id, type: d.type }));
+  return {
+    formId: form.id,
+    kind: form.inbox.kind,
+    endpoint,
+    ...form.inbox.kind === "webhook" ? { format: s.format === "form" ? "form" : "json" } : {},
+    ...extra ? { extra } : {},
+    successMessage: form.successMessage || "Thank you! We'll be in touch soon.",
+    ...form.redirectUrl ? { redirectUrl: form.redirectUrl } : {},
+    texts: { ...DEFAULT_FORM_TEXTS, ...Object.fromEntries(Object.entries(form.texts ?? {}).filter(([k, v]) => k in DEFAULT_FORM_TEXTS && typeof v === "string" && v.trim())) },
+    fields,
+    minFillMs: MIN_FILL_MS
+  };
+}
+function formScript(config) {
+  return `(function(){
+var C=${scriptJson(config)};
+function enc(v){if(typeof v==="string")return{stringValue:v};if(typeof v==="boolean")return{booleanValue:v};if(typeof v==="number")return{doubleValue:v};if(Array.isArray(v))return{arrayValue:{values:v.map(enc)}};if(v===null||v===undefined)return{nullValue:null};var f={};for(var k in v)f[k]=enc(v[k]);return{mapValue:{fields:f}};}
+function rid(){var a=new Uint8Array(6);(window.crypto||{getRandomValues:function(x){for(var i=0;i<x.length;i++)x[i]=Math.random()*256|0;return x;}}).getRandomValues(a);return Array.prototype.map.call(a,function(b){return("0"+b.toString(16)).slice(-2)}).join("");}
+function collect(form){var data={};C.fields.forEach(function(f){var els=form.querySelectorAll('[name="'+f.name+'"]');if(!els.length)return;if(f.type==="multiSelect"){var vals=[];els.forEach(function(e){if(e.checked)vals.push(e.value)});if(vals.length)data[f.name]=vals;return;}var el=els[0];if(f.type==="boolean"){data[f.name]=!!el.checked;return;}var v=(el.value||"").trim();if(!v)return;if(f.type==="tags"){data[f.name]=v.split(",").map(function(s){return s.trim()}).filter(Boolean);return;}if(f.type==="number"||f.type==="currency"||f.type==="percent"||f.type==="rating"){var n=Number(v);data[f.name]=isNaN(n)?v:n;return;}data[f.name]=v;});return data;}
+function send(sub){var headers={};if(C.preview)return Promise.resolve({ok:true,status:200});if(C.kind==="s3"){return fetch(C.endpoint+encodeURIComponent(C.formId)+"/"+sub.createdAt+"-"+rid()+".json",{method:"PUT",headers:{"content-type":"application/json"},body:JSON.stringify(sub)});}
+if(C.kind==="firebase"){return fetch(C.endpoint,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({fields:{formId:enc(sub.formId),data:enc(sub.data),createdAt:{integerValue:String(sub.createdAt)}}})});}
+var flat={};for(var k in sub.data)flat[k]=sub.data[k];if(C.extra)for(var x in C.extra)flat[x]=C.extra[x];flat._formId=sub.formId;flat._submittedAt=new Date(sub.createdAt).toISOString();flat._page=sub.meta.page;
+if(C.format==="form"){var p=new URLSearchParams();for(var y in flat){var val=flat[y];p.append(y,Array.isArray(val)?val.join(", "):String(val));}return fetch(C.endpoint,{method:"POST",body:p});}
+headers["content-type"]="application/json";headers.accept="application/json";return fetch(C.endpoint,{method:"POST",headers:headers,body:JSON.stringify(flat)});}
+function bind(form){if(form.__acrm)return;form.__acrm=true;var t0=Date.now();var status=form.querySelector(".acrm-status");var btn=form.querySelector('button[type="submit"]');var label=btn?btn.querySelector(".acrm-btn-label"):null;
+function say(msg,isErr){if(!status)return;status.textContent=msg;status.className="acrm-status"+(isErr?" acrm-status-err":"");status.hidden=!msg;}
+form.addEventListener("submit",function(e){e.preventDefault();say("");
+var groups=form.querySelectorAll('fieldset[data-required="true"]');for(var i=0;i<groups.length;i++){if(!groups[i].querySelector("input:checked")){var er=groups[i].querySelector(".acrm-err");if(er){er.textContent="Please choose at least one option.";er.hidden=false;}groups[i].querySelector("input").focus();return;}}
+if(form.reportValidity&&!form.reportValidity())return;
+var hp=form.querySelector('[name="${HONEYPOT_NAME}"]');if(hp&&hp.value){form.innerHTML='<p class="acrm-success" role="status"></p>';form.firstChild.textContent=C.successMessage;return;}
+if(Date.now()-t0<C.minFillMs){say(C.texts.tooFast,true);return;}
+var sub={formId:C.formId,data:collect(form),createdAt:Date.now(),meta:{page:location.href,referrer:document.referrer||"",elapsedMs:Date.now()-t0,lang:navigator.language||""}};
+if(btn){btn.disabled=true;btn.setAttribute("aria-busy","true");}if(label)label.textContent=C.texts.sending;
+send(sub).then(function(r){if(r&&r.type!=="opaque"&&!r.ok)throw new Error("HTTP "+r.status);if(C.redirectUrl){location.href=C.redirectUrl;return;}var p=document.createElement("p");p.className="acrm-success";p.setAttribute("role","status");p.setAttribute("tabindex","-1");p.textContent=C.successMessage;form.replaceChildren(p);p.focus();}).catch(function(){say(C.texts.error,true);if(btn){btn.disabled=false;btn.removeAttribute("aria-busy");}if(label)label.textContent=C.texts.submit;});});}
+function init(){document.querySelectorAll('form[data-agentcrm-form="'+C.formId+'"]').forEach(bind);}
+if(document.readyState==="loading")document.addEventListener("DOMContentLoaded",init);else init();
+})();`;
+}
+function formMarkup(form, object) {
+  const texts = { ...DEFAULT_FORM_TEXTS, ...form.texts ?? {} };
+  const fields = form.fields.map((_f, i) => fieldBlock(form, object, i)).join("\n    ");
+  return `<form class="acrm-form" data-agentcrm-form="${escapeHtml(form.id)}" data-form-type="other">
+    ${fields}
+    <div class="acrm-hp" aria-hidden="true"><label for="acrm-${escapeHtml(form.id)}-hp">Leave this field empty</label><input type="text" id="acrm-${escapeHtml(form.id)}-hp" name="${HONEYPOT_NAME}" tabindex="-1" autocomplete="off"></div>
+    <p class="acrm-status" role="status" aria-live="polite" hidden></p>
+    <button type="submit" class="acrm-btn"><span class="acrm-btn-icon" aria-hidden="true"></span><span class="acrm-btn-label">${escapeHtml(texts.submit)}</span></button>
+  </form>`;
+}
+function formCss(accent, scope) {
+  return `${scope}{--acrm-accent:${accent};font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;color:#111827;box-sizing:border-box}
+${scope} *{box-sizing:inherit}
+${scope} .acrm-field{margin:0 0 1rem;border:0;padding:0}
+${scope} label,${scope} legend{display:block;font-weight:600;font-size:.9rem;margin:0 0 .35rem}
+${scope} .acrm-req{color:#b91c1c}
+${scope} input[type=text],${scope} input[type=email],${scope} input[type=tel],${scope} input[type=url],${scope} input[type=number],${scope} input[type=date],${scope} input[type=datetime-local],${scope} select,${scope} textarea{width:100%;font:inherit;font-size:1rem;padding:.6rem .75rem;border:1px solid #d1d5db;border-radius:.5rem;background:#fff;color:inherit}
+${scope} input:focus,${scope} select:focus,${scope} textarea:focus{outline:2px solid var(--acrm-accent);outline-offset:1px;border-color:var(--acrm-accent)}
+${scope} .acrm-check{display:flex;gap:.5rem;align-items:flex-start}
+${scope} .acrm-check label{font-weight:500;margin:0}
+${scope} .acrm-opt{display:flex;gap:.5rem;align-items:center;font-weight:400;margin:.25rem 0}
+${scope} .acrm-hint{font-size:.8rem;color:#6b7280;margin:.25rem 0 0}
+${scope} .acrm-err,${scope} .acrm-status-err{color:#b91c1c;font-size:.85rem;margin:.25rem 0 0}
+${scope} .acrm-status{margin:0 0 1rem}
+${scope} .acrm-hp{position:absolute!important;left:-10000px!important;width:1px;height:1px;overflow:hidden}
+${scope} .acrm-btn{display:inline-flex;align-items:center;gap:.5rem;font:inherit;font-weight:600;font-size:1rem;padding:.7rem 1.4rem;border:0;border-radius:.5rem;background:var(--acrm-accent);color:#fff;cursor:pointer}
+${scope} .acrm-btn:hover{filter:brightness(1.08)}
+${scope} .acrm-btn:focus-visible{outline:3px solid var(--acrm-accent);outline-offset:2px}
+${scope} .acrm-btn[disabled]{opacity:.6;cursor:progress}
+${scope} .acrm-btn-icon:empty{display:none}
+${scope} .acrm-success{font-size:1.05rem;padding:1rem;border-radius:.5rem;background:#ecfdf5;color:#065f46;outline:none}`;
+}
+function defaultFormPath(form) {
+  const slug = form.name.toLowerCase().normalize("NFD").replace(/[\u0300-\u036f]/g, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+  return `forms/${slug || form.id}/index.html`;
+}
+function buildFormArtifacts(form, object, opts = {}) {
+  const config = { ...formClientConfig(form, object), ...opts.preview ? { preview: true, minFillMs: 0 } : {} };
+  const accent = safeColor(form.accentColor);
+  const title = form.texts?.title?.trim() || form.name;
+  const description = form.texts?.description?.trim();
+  const markup = formMarkup(form, object);
+  const script = formScript(config);
+  const html = `<!doctype html>
+<html lang="${escapeHtml(opts.lang ?? "en")}">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="robots" content="noindex">
+<meta name="generator" content="AgentCRM">
+<title>${escapeHtml(title)}</title>
+<style>
+html{background:#f3f4f6}
+body{margin:0;min-height:100vh;display:flex;align-items:flex-start;justify-content:center;padding:3rem 1rem}
+main{width:100%;max-width:34rem;background:#fff;border-radius:1rem;box-shadow:0 1px 3px rgba(0,0,0,.08),0 8px 24px rgba(0,0,0,.06);padding:2rem}
+h1{font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;font-size:1.5rem;margin:0 0 .5rem;color:#111827}
+.acrm-intro{font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;color:#4b5563;margin:0 0 1.5rem;line-height:1.5}
+${formCss(accent, ".acrm-root")}
+@media (prefers-color-scheme:dark){html{background:#111827}main{background:#1f2937}h1,.acrm-root{color:#f9fafb}.acrm-intro{color:#d1d5db}.acrm-root input,.acrm-root select,.acrm-root textarea{background:#111827!important;border-color:#374151!important}.acrm-root .acrm-success{background:#064e3b;color:#d1fae5}}
+</style>
+</head>
+<body>
+<main class="acrm-root">
+<h1>${escapeHtml(title)}</h1>
+${description ? `<p class="acrm-intro">${escapeHtml(description)}</p>
+` : ""}${markup}
+</main>
+<script>${script}<\/script>
+</body>
+</html>
+`;
+  const scope = `.acrm-embed-${form.id.replace(/[^a-zA-Z0-9_-]/g, "")}`;
+  const embedSnippet = `<!-- AgentCRM lead form: ${escapeHtml(form.name).replace(/--/g, "—")} -->
+<div class="${scope.slice(1)}">
+<style>${formCss(accent, scope)}</style>
+${markup}
+</div>
+<script>${script}<\/script>
+`;
+  return { html, embedSnippet, path: form.publishedPath || defaultFormPath(form), config };
+}
+function normalizePrefix(prefix) {
+  const p = (prefix ?? DEFAULT_INBOX_PREFIX).trim().replace(/^\/+/, "");
+  return p ? p.endsWith("/") ? p : `${p}/` : "";
+}
+function failedPrefix(prefix) {
+  return `${prefix.replace(/\/+$/, "") || "inbox"}-failed/`;
+}
+function parseSubmission(id, raw) {
+  let value = raw;
+  if (typeof raw === "string") {
+    try {
+      value = JSON.parse(raw);
+    } catch {
+      return null;
+    }
+  }
+  if (!value || typeof value !== "object") return null;
+  const v = value;
+  if (typeof v.formId !== "string" || !v.data || typeof v.data !== "object" || Array.isArray(v.data)) return null;
+  const createdAt = typeof v.createdAt === "number" ? v.createdAt : typeof v.createdAt === "string" ? /^\d+$/.test(v.createdAt) ? Number(v.createdAt) : Date.parse(v.createdAt) || 0 : 0;
+  return {
+    id,
+    formId: v.formId,
+    data: v.data,
+    createdAt,
+    ...v.meta && typeof v.meta === "object" ? { meta: v.meta } : {}
+  };
+}
+function connectorInboxSource(connector, prefix = DEFAULT_INBOX_PREFIX, key = `connector:${prefix}`) {
+  const root = normalizePrefix(prefix);
+  return {
+    key,
+    async list() {
+      if (!connector.listPrefix) throw new Error("This storage can't list files: inbox ingestion needs a connector with listPrefix (S3, git, local folder).");
+      const paths = (await connector.listPrefix(root)).filter((p) => p.endsWith(".json") && p.startsWith(root));
+      const out = [];
+      for (const path of paths) {
+        let text;
+        try {
+          text = await connector.get(path);
+        } catch {
+          continue;
+        }
+        const sub = parseSubmission(path, text);
+        out.push(sub ?? { id: path, formId: "", data: {}, createdAt: 0, meta: { invalid: true } });
+      }
+      return out.sort((a, b) => a.createdAt - b.createdAt || a.id.localeCompare(b.id));
+    },
+    async remove(id) {
+      await connector.delete(id);
+    },
+    async markFailed(id, error) {
+      let body = "";
+      try {
+        body = await connector.get(id);
+      } catch {
+      }
+      const target = failedPrefix(root) + id.slice(root.length);
+      let payload;
+      try {
+        payload = { ...JSON.parse(body), _error: error };
+      } catch {
+        payload = { raw: body, _error: error };
+      }
+      await connector.put({ path: target, content: JSON.stringify(payload, null, 2) });
+      await connector.delete(id);
+    }
+  };
+}
+function decodeFirestoreValue(v) {
+  if (!v || typeof v !== "object") return void 0;
+  if ("stringValue" in v) return v.stringValue;
+  if ("booleanValue" in v) return v.booleanValue;
+  if ("integerValue" in v) return Number(v.integerValue);
+  if ("doubleValue" in v) return Number(v.doubleValue);
+  if ("timestampValue" in v) return Date.parse(String(v.timestampValue));
+  if ("nullValue" in v) return null;
+  if ("arrayValue" in v) return (v.arrayValue?.values ?? []).map(decodeFirestoreValue);
+  if ("mapValue" in v) return decodeFirestoreFields(v.mapValue?.fields ?? {});
+  return void 0;
+}
+function decodeFirestoreFields(fields) {
+  return Object.fromEntries(Object.entries(fields).map(([k, v]) => [k, decodeFirestoreValue(v)]));
+}
+function firestoreInboxSource(opts) {
+  const collection = opts.collection || DEFAULT_FIREBASE_INBOX;
+  const base = `https://firestore.googleapis.com/v1/projects/${encodeURIComponent(opts.projectId)}/databases/(default)/documents`;
+  const doFetch = opts.fetch ?? ((url, init) => fetch(url, init));
+  async function call(url, init = {}) {
+    const token = await opts.getToken();
+    const headers = { "content-type": "application/json" };
+    if (token) headers.authorization = `Bearer ${token}`;
+    const res = await doFetch(url, { ...init, headers });
+    if (!res.ok && res.status !== 404) {
+      let message = `Firestore answered HTTP ${res.status}`;
+      try {
+        const body = await res.json();
+        if (body?.error?.message) message += `: ${body.error.message}`;
+      } catch {
+      }
+      throw new Error(message);
+    }
+    return res;
+  }
+  return {
+    key: `firestore:${opts.projectId}/${collection}`,
+    async list() {
+      const out = [];
+      let pageToken = "";
+      for (let guard = 0; guard < 50; guard++) {
+        const res = await call(`${base}/${encodeURIComponent(collection)}?pageSize=300${pageToken ? `&pageToken=${encodeURIComponent(pageToken)}` : ""}`);
+        if (res.status === 404) break;
+        const body = await res.json();
+        for (const doc of body.documents ?? []) {
+          const fields = decodeFirestoreFields(doc.fields ?? {});
+          if (fields.status === "failed") continue;
+          const sub = parseSubmission(doc.name, fields);
+          out.push(sub ?? { id: doc.name, formId: "", data: {}, createdAt: 0, meta: { invalid: true } });
+        }
+        pageToken = body.nextPageToken ?? "";
+        if (!pageToken) break;
+      }
+      return out.sort((a, b) => a.createdAt - b.createdAt || a.id.localeCompare(b.id));
+    },
+    async remove(id) {
+      await call(`https://firestore.googleapis.com/v1/${id}`, { method: "DELETE" });
+    },
+    async markFailed(id, error) {
+      try {
+        await call(`https://firestore.googleapis.com/v1/${id}?updateMask.fieldPaths=status&updateMask.fieldPaths=error`, {
+          method: "PATCH",
+          body: JSON.stringify({ fields: { status: { stringValue: "failed" }, error: { stringValue: error.slice(0, 500) } } })
+        });
+      } catch {
+        await call(`https://firestore.googleapis.com/v1/${id}`, { method: "DELETE" });
+      }
+    }
+  };
+}
+let resolver = null;
+function setInboxSourceResolver(fn) {
+  resolver = fn;
+}
+async function resolveInboxSource(ctx, form) {
+  if (form.inbox.kind === "webhook") return null;
+  return resolver ? await resolver(ctx, form) : null;
+}
+function memoryInboxSource(submissions, key = "memory") {
+  const items = [...submissions];
+  const failed = [];
+  return {
+    key,
+    items,
+    failed,
+    async list() {
+      return [...items];
+    },
+    async remove(id) {
+      const i = items.findIndex((s) => s.id === id);
+      if (i >= 0) items.splice(i, 1);
+    },
+    async markFailed(id, error) {
+      failed.push({ id, error });
+      const i = items.findIndex((s) => s.id === id);
+      if (i >= 0) items.splice(i, 1);
+    }
+  };
+}
+function listForms(ctx) {
+  return ctx.store.list("forms");
+}
+function getForm(ctx, id) {
+  const f = ctx.store.get("forms", id);
+  if (!f) throw new OpsError("notFound", `Form "${id}" not found.${formsOf(ctx.store).length ? ` Forms: ${formsOf(ctx.store).map((x) => x.id).join(", ")}.` : ""}`);
+  return f;
+}
+function validateForm(ctx, input) {
+  const errors = [];
+  const name = (input.name ?? "").trim();
+  if (!name) errors.push("A name is required.");
+  const object = input.object ? objectOf(ctx.store, input.object) : void 0;
+  if (!object) errors.push(`Unknown object "${input.object ?? ""}".`);
+  const fields = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const f of input.fields ?? []) {
+    const def = object?.fields.find((x) => x.id === f.field);
+    if (object && !def) {
+      errors.push(`Field "${f.field}" doesn't exist on ${object.labelPlural}.`);
+      continue;
+    }
+    if (def && !isFormFieldType(def.type)) {
+      errors.push(`${def.label}: ${def.type} fields can't be collected by a public form.`);
+      continue;
+    }
+    if (seen.has(f.field)) continue;
+    seen.add(f.field);
+    fields.push({ field: f.field, label: (f.label ?? "").trim() || def?.label || f.field, required: !!f.required });
+  }
+  if (!fields.length) errors.push("Add at least one field.");
+  const kind = input.inbox?.kind;
+  const settings = Object.fromEntries(Object.entries(input.inbox?.settings ?? {}).map(([k, v]) => [k, String(v ?? "").trim()]));
+  if (!kind || !INBOX_KINDS.includes(kind)) errors.push(`Pick an inbox: ${INBOX_KINDS.join(", ")}.`);
+  if (kind === "s3" && !/^https?:\/\/\S+$/i.test(settings.uploadUrl ?? "")) errors.push("S3 inbox: the public upload URL (https://<bucket>…/inbox/) is required.");
+  if (kind === "firebase") {
+    if (!settings.projectId) errors.push("Firebase inbox: the project id is required.");
+    if (!settings.apiKey) errors.push("Firebase inbox: the web API key is required.");
+  }
+  if (kind === "webhook") {
+    if (!/^https:\/\/\S+$/i.test(settings.url ?? "")) errors.push("Webhook inbox: an https:// URL is required.");
+    if (settings.extra) {
+      try {
+        const parsed = JSON.parse(settings.extra);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error();
+      } catch {
+        errors.push("Webhook inbox: extra fields must be a JSON object.");
+      }
+    }
+  }
+  if (input.ownerId && !userOf(ctx.store, input.ownerId)) errors.push(`Unknown owner "${input.ownerId}".`);
+  if (input.redirectUrl && !/^https?:\/\/\S+$/i.test(input.redirectUrl)) errors.push("The redirect URL must start with https://.");
+  if (input.publishedPath && (/^\/|\.\./.test(input.publishedPath) || !/\.html?$/.test(input.publishedPath))) errors.push('The page path must be relative and end with ".html" (e.g. forms/contact/index.html).');
+  const hiddenValues = {};
+  for (const [k, v] of Object.entries(input.hiddenValues ?? {})) {
+    if (v === void 0 || v === null || v === "") continue;
+    if (object && !object.fields.some((f) => f.id === k)) errors.push(`Hidden value: field "${k}" doesn't exist on ${object.labelPlural}.`);
+    hiddenValues[k] = v;
+  }
+  if (errors.length) throw new OpsError("validation", errors.join(" "), errors);
+  return {
+    ...input.id ? { id: input.id } : {},
+    name,
+    object: input.object,
+    fields,
+    inbox: { kind, settings },
+    successMessage: (input.successMessage ?? "").trim() || "Thank you! We'll be in touch soon.",
+    ...input.publishedPath ? { publishedPath: input.publishedPath } : {},
+    ...input.texts ? { texts: input.texts } : {},
+    ...Object.keys(hiddenValues).length ? { hiddenValues } : {},
+    ...input.ownerId ? { ownerId: input.ownerId } : {},
+    ...input.accentColor ? { accentColor: input.accentColor } : {},
+    ...input.redirectUrl ? { redirectUrl: input.redirectUrl } : {}
+  };
+}
+async function createForm(ctx, input) {
+  assertCan(ctx, "forms.write");
+  const valid = validateForm(ctx, input);
+  const now = ctx.now();
+  const id = input.id ?? newId(now);
+  if (ctx.store.get("forms", id)) throw new OpsError("conflict", `Form "${id}" already exists.`);
+  const doc = { ...valid, id, createdAt: now, updatedAt: now };
+  await ctx.store.write([{ op: "set", collection: "forms", doc: asDoc(doc) }], { message: `Create form ${valid.name}` });
+  return getForm(ctx, id);
+}
+async function updateForm(ctx, id, patch) {
+  assertCan(ctx, "forms.write");
+  const current = thaw(getForm(ctx, id));
+  const merged = { ...current, ...patch, id };
+  const valid = validateForm(ctx, merged);
+  const next = {
+    ...valid,
+    id,
+    ...current.publishedUrl ? { publishedUrl: current.publishedUrl } : {},
+    ...current.publishedAt ? { publishedAt: current.publishedAt } : {},
+    ...current.lastIngestAt ? { lastIngestAt: current.lastIngestAt } : {},
+    createdAt: current.createdAt,
+    updatedAt: ctx.now()
+  };
+  await ctx.store.write([{ op: "set", collection: "forms", doc: asDoc(next) }], { message: `Update form ${valid.name}` });
+  return getForm(ctx, id);
+}
+async function deleteForm(ctx, id) {
+  assertCan(ctx, "forms.write");
+  const form = getForm(ctx, id);
+  await ctx.store.write([{ op: "delete", collection: "forms", id }], { message: "Delete form" });
+  return { id, ...form.publishedAt ? { publishedPath: form.publishedPath || defaultFormPath(form) } : {} };
+}
+function suggestFormFields(ctx, objectId) {
+  const object = requireObject(ctx.store, objectId);
+  const wanted = objectId === "people" ? ["firstName", "lastName", "email", "phone", "jobTitle"] : objectId === "companies" ? ["name", "domain", "phone"] : [object.labelField];
+  return wanted.map((id) => object.fields.find((f) => f.id === id)).filter((f) => !!f && isFormFieldType(f.type)).map((f) => ({ field: f.id, label: f.label, required: f.id === "email" || f.id === object.labelField }));
+}
+async function buildFormHtml(ctx, formId, opts = {}) {
+  const form = getForm(ctx, formId);
+  const object = requireObject(ctx.store, form.object);
+  const built = buildFormArtifacts(form, object, { lang: opts.lang });
+  const url = opts.baseUrl ? `${opts.baseUrl.replace(/\/+$/, "")}/${built.path.replace(/index\.html$/, "")}` : form.publishedUrl;
+  return { html: built.html, embedSnippet: built.embedSnippet, path: built.path, ...url ? { url } : {} };
+}
+async function publishForm(ctx, formId, uploader, opts = {}) {
+  assertCan(ctx, "forms.write");
+  const form = getForm(ctx, formId);
+  const built = await buildFormHtml(ctx, formId, { lang: opts.lang });
+  await uploader.put({ path: built.path, content: built.html });
+  let url;
+  try {
+    url = uploader.publicUrl ? await uploader.publicUrl(built.path) : void 0;
+  } catch {
+    url = void 0;
+  }
+  if (url) url = url.replace(/index\.html$/, "");
+  await ctx.store.write(
+    [{ op: "patch", collection: "forms", id: form.id, fields: { publishedPath: built.path, publishedAt: ctx.now(), publishedUrl: url, updatedAt: ctx.now() } }],
+    { message: `Publish form ${form.name}` }
+  );
+  return { path: built.path, ...url ? { url } : {}, embedSnippet: built.embedSnippet };
+}
+const FREE_MAIL_DOMAINS = /* @__PURE__ */ new Set([
+  "gmail.com",
+  "googlemail.com",
+  "yahoo.com",
+  "yahoo.fr",
+  "ymail.com",
+  "hotmail.com",
+  "hotmail.fr",
+  "outlook.com",
+  "outlook.fr",
+  "live.com",
+  "live.fr",
+  "msn.com",
+  "icloud.com",
+  "me.com",
+  "mac.com",
+  "aol.com",
+  "gmx.com",
+  "gmx.de",
+  "gmx.fr",
+  "web.de",
+  "proton.me",
+  "protonmail.com",
+  "pm.me",
+  "zoho.com",
+  "mail.com",
+  "yandex.com",
+  "yandex.ru",
+  "orange.fr",
+  "wanadoo.fr",
+  "free.fr",
+  "laposte.net",
+  "sfr.fr",
+  "bbox.fr",
+  "qq.com",
+  "163.com",
+  "fastmail.com",
+  "hey.com",
+  "tutanota.com"
+]);
+function companyDomainOfEmail(email) {
+  const domain = normalizeEmail(email).split("@")[1];
+  if (!domain || !domain.includes(".") || FREE_MAIL_DOMAINS.has(domain)) return null;
+  return domain;
+}
+const SECOND_LEVEL = /* @__PURE__ */ new Set(["co", "com", "net", "org", "gov", "ac", "edu", "ltd", "plc", "gouv", "asso"]);
+function companyNameFromDomain(domain) {
+  const parts = domain.split(".");
+  parts.pop();
+  if (parts.length > 1 && SECOND_LEVEL.has(parts[parts.length - 1])) parts.pop();
+  const main = parts.pop() ?? domain;
+  return main.split(/[-_]/).filter(Boolean).map((w) => w[0].toUpperCase() + w.slice(1)).join(" ");
+}
+function emailFieldOf(form, object) {
+  return form.fields.map((f) => object.fields.find((x) => x.id === f.field)).find((d) => d?.type === "email")?.id ?? (object.fields.some((f) => f.id === "email" && f.type === "email") ? "email" : void 0);
+}
+function isSpam(sub) {
+  const hp = sub.data[HONEYPOT_NAME] ?? sub.meta?.hp;
+  return typeof hp === "string" ? hp.trim() !== "" : !!hp;
+}
+function alreadyIngested(ctx, submissionId) {
+  const a = activitiesOf(ctx.store).find((x) => x.meta?.source === "form" && x.meta?.submissionId === submissionId);
+  if (!a) return void 0;
+  return recordsOf(ctx.store).find((r) => a.targets.some((t) => t.id === r.id)) ?? null;
+}
+async function ingestOne(ctx, form, object, sub, dryRun) {
+  const done = alreadyIngested(ctx, sub.id);
+  if (done) return { outcome: "duplicate", record: done, companyCreated: false };
+  const values = {};
+  const missing = [];
+  for (const f of form.fields) {
+    const def = object.fields.find((x) => x.id === f.field);
+    if (!def) continue;
+    const raw = sub.data[f.field];
+    const empty = raw === void 0 || raw === null || typeof raw === "string" && !raw.trim() || Array.isArray(raw) && !raw.length || def.type === "boolean" && raw === false && f.required;
+    if (empty) {
+      if (f.required) missing.push(f.label || def.label);
+      continue;
+    }
+    values[f.field] = typeof raw === "string" ? raw.trim().slice(0, 5e3) : raw;
+  }
+  if (missing.length) throw new OpsError("validation", `Missing required field(s): ${missing.join(", ")}.`);
+  const emailField = emailFieldOf(form, object);
+  const email = emailField ? normalizeEmail(values[emailField]) : "";
+  if (emailField && values[emailField] !== void 0) values[emailField] = email;
+  const existing = email ? recordsOf(ctx.store, object.id).find((r) => normalizeEmail(r.fields[emailField]) === email) : void 0;
+  let companyId;
+  let companyCreated = false;
+  const companyField = object.id === "people" ? object.fields.find((f) => f.id === "company" && f.type === "relation" && f.relation?.object === "companies") : void 0;
+  const domain = email ? companyDomainOfEmail(email) : null;
+  if (companyField && domain && objectOf(ctx.store, "companies") && isEmptyFieldValue(companyField, existing?.fields.company) && values.company === void 0) {
+    const company = recordsOf(ctx.store, "companies").find((c) => normalizeDomain(c.fields.domain) === domain);
+    if (company) companyId = company.id;
+    else if (!dryRun) {
+      const created = await createRecord(ctx, "companies", { name: companyNameFromDomain(domain), domain }, { ownerId: form.ownerId ?? null, message: `Company from form ${form.name}` });
+      companyId = created.id;
+      companyCreated = true;
+    } else companyCreated = true;
+    if (companyId) values.company = companyId;
+  }
+  if (dryRun) {
+    const preview = existing ?? { id: "(new)", object: object.id, fields: { ...form.hiddenValues, ...values }, createdAt: ctx.now(), updatedAt: ctx.now() };
+    return { outcome: existing ? "updated" : "created", record: preview, companyCreated };
+  }
+  let record;
+  let outcome;
+  if (existing) {
+    record = await updateRecord(ctx, existing.id, values, { unknownFields: "drop", message: `Form submission ${form.name}` });
+    outcome = "updated";
+  } else {
+    record = await createRecord(ctx, object.id, { ...form.hiddenValues ?? {}, ...values }, { unknownFields: "drop", ownerId: form.ownerId ?? null, message: `Form submission ${form.name}` });
+    outcome = "created";
+  }
+  const qctx = queryContext(ctx, object);
+  const lines = form.fields.filter((f) => values[f.field] !== void 0 && f.field !== "company").map((f) => {
+    const def = object.fields.find((x) => x.id === f.field);
+    return `- **${f.label || def.label}:** ${formatFieldValue(def, record.fields[f.field] ?? values[f.field], qctx) || String(values[f.field])}`;
+  });
+  const page = typeof sub.meta?.page === "string" ? sub.meta.page : void 0;
+  if (page) lines.push(`- **Page:** ${page}`);
+  const targets = [{ object: record.object, id: record.id }, ...companyId ? [{ object: "companies", id: companyId }] : []];
+  await addActivity(ctx, {
+    type: "note",
+    title: `Form submission: ${form.name}`,
+    body: lines.join("\n"),
+    targets,
+    meta: { source: "form", formId: form.id, submissionId: sub.id, submittedAt: sub.createdAt || void 0, ...page ? { page } : {} }
+  });
+  ctx.log?.(`form ${form.id}: ${outcome} ${recordLabel(object, record)}`);
+  return { outcome, record, companyCreated };
+}
+function emptyReport() {
+  return { processed: 0, created: 0, updated: 0, failed: 0, errors: [], spam: 0, companiesCreated: 0, skippedForms: [], results: [] };
+}
+async function ingestSubmissions(ctx, submissions, opts = {}) {
+  assertCan(ctx, "records.write");
+  const report = emptyReport();
+  for (const sub of submissions) {
+    if (opts.formId && sub.formId && sub.formId !== opts.formId) continue;
+    const ack = async (kind, message) => {
+      if (opts.dryRun || !opts.source) return;
+      try {
+        if (kind === "remove") await opts.source.remove(sub.id);
+        else await opts.source.markFailed(sub.id, message ?? "failed");
+      } catch (err) {
+        report.errors.push({ submission: sub.id, message: `Couldn't acknowledge: ${err.message}` });
+      }
+    };
+    report.processed++;
+    if (isSpam(sub)) {
+      report.spam++;
+      report.results.push({ submission: sub.id, formId: sub.formId, outcome: "spam" });
+      await ack("remove");
+      continue;
+    }
+    const form = sub.formId ? ctx.store.get("forms", sub.formId) : void 0;
+    const object = form ? objectOf(ctx.store, form.object) : void 0;
+    try {
+      if (sub.meta?.invalid) throw new OpsError("validation", "Not a valid submission file.");
+      if (!form) throw new OpsError("notFound", `Unknown form "${sub.formId}".`);
+      if (!object) throw new OpsError("notFound", `Form "${form.name}" targets a missing object (${form.object}).`);
+      const res = await ingestOne(ctx, form, object, sub, !!opts.dryRun);
+      if (res.outcome === "created") report.created++;
+      if (res.outcome === "updated") report.updated++;
+      if (res.companyCreated) report.companiesCreated++;
+      report.results.push({ submission: sub.id, formId: sub.formId, outcome: res.outcome, recordId: res.record.id });
+      await ack("remove");
+    } catch (err) {
+      const message = err.message ?? String(err);
+      report.failed++;
+      report.errors.push({ submission: sub.id, message });
+      report.results.push({ submission: sub.id, formId: sub.formId, outcome: "failed", message });
+      await ack("fail", message);
+    }
+  }
+  return report;
+}
+async function listInbox(ctx, formId, opts = {}) {
+  assertCan(ctx, "records.read");
+  const forms = formId ? [getForm(ctx, formId)] : formsOf(ctx.store);
+  const skippedForms = [];
+  const sources = /* @__PURE__ */ new Map();
+  if (opts.source) sources.set(opts.source.key, opts.source);
+  else {
+    for (const form of forms) {
+      if (form.inbox.kind === "webhook") {
+        skippedForms.push({ formId: form.id, reason: "Webhook inbox: submissions stay in your webhook service." });
+        continue;
+      }
+      let source = null;
+      try {
+        source = await resolveInboxSource(ctx, form);
+      } catch (err) {
+        skippedForms.push({ formId: form.id, reason: err.message });
+        continue;
+      }
+      if (!source) skippedForms.push({ formId: form.id, reason: "No credentials to read this inbox here." });
+      else sources.set(source.key, source);
+    }
+  }
+  const wanted = new Set(forms.map((f) => f.id));
+  const submissions = [];
+  for (const source of sources.values()) {
+    for (const s of await source.list()) if (!formId || s.formId === formId || !s.formId && wanted.has(formId)) submissions.push(s);
+  }
+  return { submissions, skippedForms };
+}
+async function ingestInbox(ctx, formId, opts = {}) {
+  assertCan(ctx, "records.write");
+  const forms = formId ? [getForm(ctx, formId)] : formsOf(ctx.store);
+  const total = emptyReport();
+  const sources = /* @__PURE__ */ new Map();
+  if (opts.source) sources.set(opts.source.key, opts.source);
+  else {
+    for (const form of forms) {
+      if (form.inbox.kind === "webhook") {
+        total.skippedForms.push({ formId: form.id, reason: "Webhook inbox: submissions stay in your webhook service." });
+        continue;
+      }
+      let source = null;
+      try {
+        source = await resolveInboxSource(ctx, form);
+      } catch (err) {
+        total.skippedForms.push({ formId: form.id, reason: err.message });
+        continue;
+      }
+      if (!source) total.skippedForms.push({ formId: form.id, reason: "No credentials to read this inbox here." });
+      else sources.set(source.key, source);
+    }
+  }
+  for (const source of sources.values()) {
+    let pending = await source.list();
+    if (formId) pending = pending.filter((s) => s.formId === formId);
+    if (opts.limit) pending = pending.slice(0, opts.limit);
+    const r = await ingestSubmissions(ctx, pending, { dryRun: opts.dryRun, source });
+    total.processed += r.processed;
+    total.created += r.created;
+    total.updated += r.updated;
+    total.failed += r.failed;
+    total.errors.push(...r.errors);
+    total.spam += r.spam ?? 0;
+    total.companiesCreated += r.companiesCreated ?? 0;
+    total.results.push(...r.results ?? []);
+  }
+  if (!opts.dryRun) {
+    const touched = new Set(total.results.map((r) => r.formId).filter(Boolean));
+    const now = ctx.now();
+    const mutations = forms.filter((f) => touched.has(f.id) || formId === f.id).map((f) => ({ op: "patch", collection: "forms", id: f.id, fields: { lastIngestAt: now } }));
+    try {
+      if (mutations.length) await ctx.store.write(mutations, { message: "Ingest lead inbox" });
+    } catch {
+    }
+  }
+  return total;
+}
+export {
+  DEFAULT_FIREBASE_INBOX,
+  DEFAULT_FORM_TEXTS,
+  DEFAULT_INBOX_PREFIX,
+  FORM_FIELD_TYPES,
+  FREE_MAIL_DOMAINS,
+  HONEYPOT_NAME,
+  INBOX_KINDS,
+  MIN_FILL_MS,
+  buildFormArtifacts,
+  buildFormHtml,
+  companyDomainOfEmail,
+  connectorInboxSource,
+  createForm,
+  defaultFormPath,
+  deleteForm,
+  escapeHtml,
+  firestoreInboxSource,
+  getForm,
+  ingestInbox,
+  ingestSubmissions,
+  isFormFieldType,
+  listForms,
+  listInbox,
+  memoryInboxSource,
+  parseSubmission,
+  publishForm,
+  resolveInboxSource,
+  setInboxSourceResolver,
+  suggestFormFields,
+  updateForm,
+  validateForm
+};