@frigear-nu/forms 0.0.6 → 0.0.7

package/dist/runtime/server/db/schema.sqlite.d.ts

@@ -502,3 +502,286 @@ export declare const formSubmissionFiles: import("drizzle-orm/sqlite-core").SQLi
     };
     dialect: "sqlite";
 }>;
+export declare const formAccessTokens: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "form_access_tokens";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "id";
+            tableName: "form_access_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        formId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "formId";
+            tableName: "form_access_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        name: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "name";
+            tableName: "form_access_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        tokenHash: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "tokenHash";
+            tableName: "form_access_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        prefix: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "prefix";
+            tableName: "form_access_tokens";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "createdAt";
+            tableName: "form_access_tokens";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastUsedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "lastUsedAt";
+            tableName: "form_access_tokens";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        revokedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "revokedAt";
+            tableName: "form_access_tokens";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;
+/** Shared password of a form with `access.auth = 'password'`. Kept out of the (versioned) definition. */
+export declare const formAccess: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "form_access";
+    schema: undefined;
+    columns: {
+        formId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "formId";
+            tableName: "form_access";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        passwordHash: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "passwordHash";
+            tableName: "form_access";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "updatedAt";
+            tableName: "form_access";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;
+/**
+ * Per-form secrets, encrypted at rest. Keys are namespaced strings (`captcha.turnstile.secretKey`, ...) from an
+ * allowlist in `utils/secrets.ts`; future integrations (webhook signing secrets, ...) add their keys there.
+ * Kept out of the (versioned) definition, submission snapshots, deliveries and exports.
+ */
+export declare const formSecrets: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "form_secrets";
+    schema: undefined;
+    columns: {
+        formId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "formId";
+            tableName: "form_secrets";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: undefined;
+        }>;
+        secrets: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "secrets";
+            tableName: "form_secrets";
+            dataType: "custom";
+            columnType: "SQLiteCustomColumn";
+            data: Record<string, string>;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            sqliteColumnBuilderBrand: "SQLiteCustomColumnBuilderBrand";
+        }>;
+        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "updatedAt";
+            tableName: "form_secrets";
+            dataType: "date";
+            columnType: "SQLiteTimestamp";
+            data: Date;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;

package/dist/runtime/server/db/schema.sqlite.js

@@ -1,4 +1,4 @@
-import { sqliteTable, text, integer, index } from "drizzle-orm/sqlite-core";
+import { customType, sqliteTable, text, integer, index } from "drizzle-orm/sqlite-core";
 export const forms = sqliteTable("forms", {
   /** `frm_` + random id. */
   id: text().primaryKey(),
@@ -44,3 +44,35 @@ export const formSubmissionFiles = sqliteTable("form_submission_files", {
 }, (t) => [
   index("form_submission_file_submission_idx").on(t.submissionId)
 ]);
+export const formAccessTokens = sqliteTable("form_access_tokens", {
+  /** `fat_` + random id. */
+  id: text().primaryKey(),
+  formId: text().notNull().references(() => forms.id, { onDelete: "cascade" }),
+  name: text().notNull(),
+  /** SHA-256 (hex) of the token; the token itself is shown once on creation and never stored. */
+  tokenHash: text().notNull().unique(),
+  /** First characters of the token, for display. */
+  prefix: text().notNull(),
+  createdAt: integer({ mode: "timestamp" }).notNull().$defaultFn(() => /* @__PURE__ */ new Date()),
+  lastUsedAt: integer({ mode: "timestamp" }),
+  revokedAt: integer({ mode: "timestamp" })
+}, (t) => [
+  index("form_access_token_form_idx").on(t.formId)
+]);
+export const formAccess = sqliteTable("form_access", {
+  formId: text().primaryKey().references(() => forms.id, { onDelete: "cascade" }),
+  /** Scrypt hash (nuxt-auth-utils `hashPassword`). */
+  passwordHash: text().notNull(),
+  updatedAt: integer({ mode: "timestamp" }).notNull().$defaultFn(() => /* @__PURE__ */ new Date())
+});
+export const formSecrets = sqliteTable("form_secrets", {
+  formId: text().primaryKey().references(() => forms.id, { onDelete: "cascade" }),
+  // Inline on purpose: the module kit copies this property (and only the imports above) into a generated schema
+  // template, so it cannot call a local helper. `utils/crypto.ts` registers the cipher on `globalThis`.
+  secrets: customType({
+    dataType: () => "text",
+    toDriver: (value) => globalThis.__frigearFormsCrypto.encrypt(value),
+    fromDriver: (value) => globalThis.__frigearFormsCrypto.decrypt(value)
+  })("secrets").notNull(),
+  updatedAt: integer({ mode: "timestamp" }).notNull().$defaultFn(() => /* @__PURE__ */ new Date())
+});

package/dist/runtime/server/mcp/schemas.d.ts

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+/**
+ * Shown to the agent in tool descriptions and errors, so it can explain the limit to the user
+ * instead of retrying or looking for a way around it.
+ */
+export declare const DELIVERY_NOTICE = "Delivery settings (email recipients, webhooks) are intentionally not available through MCP: letting an agent change where answers are sent could be used to exfiltrate submissions. A person must change them in the admin UI. Do not try to work around this; tell the user to do it there.";
+export declare const formDefinitionInput: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const formSlug: z.ZodString;
+export declare const deliveryRefusal: () => any;

package/dist/runtime/server/mcp/schemas.js

@@ -0,0 +1,8 @@
+import { z } from "zod";
+export const DELIVERY_NOTICE = "Delivery settings (email recipients, webhooks) are intentionally not available through MCP: letting an agent change where answers are sent could be used to exfiltrate submissions. A person must change them in the admin UI. Do not try to work around this; tell the user to do it there.";
+export const formDefinitionInput = z.record(z.string(), z.unknown()).describe(`The form definition (fields, steps, storage, access). Use get-form-definition on an existing form to see the shape. Do not include "delivery". ${DELIVERY_NOTICE}`);
+export const formSlug = z.string().min(1).max(100).describe("Lowercase letters, digits and dashes.");
+export const deliveryRefusal = () => createError({
+  statusCode: 400,
+  statusMessage: `Delivery settings cannot be set through MCP. ${DELIVERY_NOTICE}`
+});

package/dist/runtime/server/mcp/tools/admin/create-form.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/admin/create-form.js

@@ -0,0 +1,21 @@
+import { z } from "zod";
+import { formInput } from "../../../utils/admin-schemas.js";
+import { DELIVERY_NOTICE, deliveryRefusal, formDefinitionInput, formSlug } from "../../schemas.js";
+export default defineScopedMcpTool({
+  description: `Create a form (staff). It starts as a draft unless a status is given. New forms have no delivery settings; ${DELIVERY_NOTICE}`,
+  scopes: ["forms:manage"],
+  gate: canManageForms,
+  annotations: { destructiveHint: false },
+  inputSchema: {
+    slug: formSlug,
+    name: z.string().min(1).max(200),
+    status: z.enum(["draft", "published", "archived"]).optional(),
+    definition: formDefinitionInput
+  },
+  handler: async (args) => {
+    if ("delivery" in args.definition) throw deliveryRefusal();
+    const row = await createForm(formInput.parse(args));
+    const { delivery: _delivery, ...definition } = row.definition;
+    return { id: row.id, slug: row.slug, name: row.name, status: row.status, version: row.version, definition };
+  }
+});

package/dist/runtime/server/mcp/tools/admin/get-form-definition.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/admin/get-form-definition.js

@@ -0,0 +1,14 @@
+import { z } from "zod";
+import { DELIVERY_NOTICE } from "../../schemas.js";
+export default defineScopedMcpTool({
+  description: `Get a form including its draft/archived status (staff). Delivery settings are never returned. ${DELIVERY_NOTICE}`,
+  scopes: ["forms:manage"],
+  gate: canManageForms,
+  annotations: { readOnlyHint: true },
+  inputSchema: { id: z.string() },
+  handler: async ({ id }) => {
+    const row = await findFormById(id);
+    const { delivery: _delivery, ...definition } = row.definition;
+    return { id: row.id, slug: row.slug, name: row.name, status: row.status, version: row.version, definition };
+  }
+});

package/dist/runtime/server/mcp/tools/admin/get-submission.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/admin/get-submission.js

@@ -0,0 +1,26 @@
+import { z } from "zod";
+import { eq } from "drizzle-orm";
+import { db, schema } from "@nuxthub/db";
+export default defineScopedMcpTool({
+  description: "Get one submission (staff). Answers, submitter and file names are only included with the forms:pii scope.",
+  scopes: ["forms:manage"],
+  gate: canManageForms,
+  annotations: { readOnlyHint: true },
+  inputSchema: { id: z.string() },
+  handler: async ({ id }, ctx) => {
+    const [row] = await db.select().from(schema.formSubmissions).where(eq(schema.formSubmissions.id, id)).limit(1);
+    if (!row) throw createError({ statusCode: 404, statusMessage: "Submission not found." });
+    const files = await db.select().from(schema.formSubmissionFiles).where(eq(schema.formSubmissionFiles.submissionId, row.id));
+    const allow = ctx.hasScope("forms:pii");
+    const submission = redactPii({
+      ...pick(row, ["id", "formId", "formSlug", "formVersion", "locale", "deliveryStatus"]),
+      createdAt: row.createdAt.toISOString(),
+      answeredFields: Object.keys(row.answers),
+      fileCount: files.length,
+      answers: row.answers,
+      userId: row.userId,
+      files: files.map(({ id: id2, fieldKey, filename, contentType, size }) => ({ id: id2, fieldKey, filename, contentType, size }))
+    }, { allow, fields: ["answers", "userId", "files"] });
+    return { notice: piiNotice(allow, "forms:pii", "Answers, the submitter and file names"), submission };
+  }
+});

package/dist/runtime/server/mcp/tools/admin/list-all-forms.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/admin/list-all-forms.js

@@ -0,0 +1,21 @@
+import { count, desc } from "drizzle-orm";
+import { db, schema } from "@nuxthub/db";
+export default defineScopedMcpTool({
+  description: "List all forms including drafts, with submission counts (staff).",
+  scopes: ["forms:manage"],
+  gate: canManageForms,
+  annotations: { readOnlyHint: true },
+  handler: async () => {
+    const rows = await db.select().from(schema.forms).orderBy(desc(schema.forms.updatedAt));
+    const counts = await db.select({ formId: schema.formSubmissions.formId, total: count() }).from(schema.formSubmissions).groupBy(schema.formSubmissions.formId);
+    const totals = new Map(counts.map((row) => [row.formId, row.total]));
+    return rows.map((row) => ({
+      id: row.id,
+      slug: row.slug,
+      name: row.name,
+      status: row.status,
+      version: row.version,
+      submissionCount: totals.get(row.id) ?? 0
+    }));
+  }
+});

package/dist/runtime/server/mcp/tools/admin/list-submissions.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/admin/list-submissions.js

@@ -0,0 +1,22 @@
+import { z } from "zod";
+import { desc, eq } from "drizzle-orm";
+import { db, schema } from "@nuxthub/db";
+import { renderAnswers } from "../../../utils/render.js";
+export default defineScopedMcpTool({
+  description: "List the latest submissions of a form (staff). Answer previews are only included with the forms:pii scope.",
+  scopes: ["forms:manage"],
+  gate: canManageForms,
+  annotations: { readOnlyHint: true },
+  inputSchema: { formId: z.string(), limit: z.number().int().min(1).max(200).optional() },
+  handler: async ({ formId, limit }, ctx) => {
+    const form = await findFormById(formId);
+    const rows = await db.select().from(schema.formSubmissions).where(eq(schema.formSubmissions.formId, form.id)).orderBy(desc(schema.formSubmissions.createdAt)).limit(limit ?? 50);
+    const allow = ctx.hasScope("forms:pii");
+    const submissions = rows.map((row) => redactPii({
+      ...pick(row, ["id", "locale", "deliveryStatus"]),
+      createdAt: row.createdAt.toISOString(),
+      preview: renderAnswers(row.definitionSnapshot, row.answers, row.locale).filter((answer) => answer.value).slice(0, 3).map(({ label, value }) => ({ label, value: value.slice(0, 120) }))
+    }, { allow, fields: ["preview"] }));
+    return { notice: piiNotice(allow, "forms:pii", "Answer previews"), submissions };
+  }
+});

package/dist/runtime/server/mcp/tools/admin/update-form.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/admin/update-form.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+import { formPatch } from "../../../utils/admin-schemas.js";
+import { DELIVERY_NOTICE, deliveryRefusal, formDefinitionInput, formSlug } from "../../schemas.js";
+export default defineScopedMcpTool({
+  description: `Update a form (staff). A changed definition creates a new version; earlier submissions keep theirs. Existing delivery settings are kept unchanged. ${DELIVERY_NOTICE}`,
+  scopes: ["forms:manage"],
+  gate: canManageForms,
+  annotations: { idempotentHint: true },
+  inputSchema: {
+    id: z.string(),
+    slug: formSlug.optional(),
+    name: z.string().min(1).max(200).optional(),
+    status: z.enum(["draft", "published", "archived"]).optional(),
+    definition: formDefinitionInput.optional()
+  },
+  handler: async ({ id, ...patch }) => {
+    const current = await findFormById(id);
+    if (patch.definition && "delivery" in patch.definition) throw deliveryRefusal();
+    const definition = patch.definition ? { ...patch.definition, ...current.definition.delivery ? { delivery: current.definition.delivery } : {} } : void 0;
+    const row = await patchForm(id, formPatch.parse({ ...patch, definition }));
+    const { delivery: _delivery, ...visible } = row.definition;
+    return { id: row.id, slug: row.slug, name: row.name, status: row.status, version: row.version, definition: visible };
+  }
+});

package/dist/runtime/server/mcp/tools/get-form.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/get-form.js

@@ -0,0 +1,12 @@
+import { z } from "zod";
+export default defineScopedMcpTool({
+  description: "Get the definition (fields) of a published form so you can fill it in.",
+  scopes: ["forms:submit"],
+  annotations: { readOnlyHint: true },
+  inputSchema: { slug: z.string() },
+  handler: async ({ slug }, { event }) => {
+    const form = await findPublishedForm(slug);
+    await assertMcpFormAccess(event, form);
+    return toPublicForm(form);
+  }
+});

package/dist/runtime/server/mcp/tools/list-forms.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/list-forms.js

@@ -0,0 +1,11 @@
+import { desc, eq } from "drizzle-orm";
+import { db, schema } from "@nuxthub/db";
+export default defineScopedMcpTool({
+  description: "List the published forms you can fill in.",
+  scopes: ["forms:submit"],
+  annotations: { readOnlyHint: true },
+  handler: async () => {
+    const rows = await db.select().from(schema.forms).where(eq(schema.forms.status, "published")).orderBy(desc(schema.forms.updatedAt));
+    return rows.map((row) => ({ slug: row.slug, name: row.name, mode: row.definition.mode }));
+  }
+});

package/dist/runtime/server/mcp/tools/submit-form.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/mcp/tools/submit-form.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+export default defineScopedMcpTool({
+  description: "Submit a published form as yourself. Use get-form first to see the fields.",
+  scopes: ["forms:submit"],
+  annotations: { destructiveHint: false, idempotentHint: false },
+  inputSchema: {
+    slug: z.string(),
+    answers: z.record(z.string(), z.unknown()).describe("Answers keyed by field key."),
+    locale: z.string().max(20).optional()
+  },
+  handler: async ({ slug, answers, locale }, { event, user }) => {
+    await enforceRateLimit(event, slug);
+    const form = await findPublishedForm(slug);
+    await assertMcpFormAccess(event, form);
+    return processSubmission(event, form, user.id, { answers, locale: locale ?? "en", uploads: /* @__PURE__ */ new Map() });
+  }
+});

package/dist/runtime/server/plugins/email-delivery.js

@@ -1,19 +1,24 @@
-import { answersToHtml, answersToText, escapeHtml, renderAnswers } from "../utils/render.js";
-import { translate } from "../../utils/index.js";
+import { composeEmail, renderAnswers } from "../../utils/template.js";
+import { resolveEmailDelivery } from "../../utils/index.js";
 export default defineNitroPlugin((nitro) => {
   nitro.hooks.hook("forms:submitted", async (ctx) => {
     const email = ctx.form.definition.delivery?.email;
-    if (!email?.to.length) return;
-    const rows = renderAnswers(ctx.form.definition, ctx.answers, ctx.locale);
-    const subject = translate(email.subject, ctx.locale) || `New submission: ${ctx.form.name}`;
-    const fileNames = ctx.files.map((file) => `${file.filename} (${file.fieldKey})`);
+    if (!email) return;
+    const { to, replyTo } = resolveEmailDelivery(email, ctx.answers);
+    if (!to.length) return;
+    const { subject, body, text } = composeEmail(email, {
+      form: { name: ctx.form.name, slug: ctx.form.slug, version: ctx.form.version },
+      submission: { id: ctx.submissionId, createdAt: (/* @__PURE__ */ new Date()).toISOString(), locale: ctx.locale },
+      answers: renderAnswers(ctx.form.definition, ctx.answers, ctx.locale),
+      files: ctx.files.map((file) => `${file.filename} (${file.fieldKey})`),
+      replyTo
+    });
     await dispatchEmailNotification({
-      to: email.to,
+      to,
+      ...replyTo ? { replyTo } : {},
       subject,
-      body: `<p><strong>${escapeHtml(ctx.form.name)}</strong></p>${answersToHtml(rows)}` + (fileNames.length ? `<p>Files stored with the submission: ${escapeHtml(fileNames.join(", "))}</p>` : ""),
-      text: answersToText(rows) + (fileNames.length ? `
-
-Files stored with the submission: ${fileNames.join(", ")}` : ""),
+      body,
+      text,
       meta: { formSlug: ctx.form.slug, submissionId: ctx.submissionId }
     });
     ctx.delivered = true;

package/dist/runtime/server/plugins/encryption.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/plugins/encryption.js

@@ -0,0 +1,4 @@
+export default defineNitroPlugin(() => {
+  const config = useRuntimeConfig();
+  initEncryptionKey(config.forms.encryptionKey || config.encryptionKey || config.session?.password);
+});

package/dist/runtime/server/plugins/staff-scopes.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/plugins/staff-scopes.js

@@ -0,0 +1 @@
+export default defineStaffScopes(["forms:manage", "forms:pii"], (event, userId) => canManageForms(event, { user: { id: userId } }));

package/dist/runtime/server/routes/admin/form-clone.post.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/routes/admin/form-clone.post.js

@@ -0,0 +1,17 @@
+import { db, schema } from "@nuxthub/db";
+import { newId } from "../../../utils/index.js";
+export default defineEventHandler(async (event) => {
+  await requireFormsManager(event);
+  const source = await findFormById(getRouterParam(event, "id"));
+  let slug = `${source.slug}-copy`;
+  for (let n = 2; await findFormBySlug(slug); n++) slug = `${source.slug}-copy-${n}`;
+  const [row] = await db.insert(schema.forms).values({
+    id: newId("frm"),
+    slug,
+    name: `${source.name} (copy)`,
+    status: "draft",
+    definition: source.definition
+  }).returning();
+  setResponseStatus(event, 201);
+  return toAdminForm(row);
+});

package/dist/runtime/server/routes/admin/form-password.delete.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;