@frigear-nu/forms 0.0.6 → 0.0.8

package/README.md

@@ -4,7 +4,22 @@ Dynamic, database-stored forms for the frigear ecosystem. A form is a JSON defin
 with conditional fields), submissions are stored with a snapshot of the definition they were answered against, and
 delivery (email, webhooks, ...) hangs off the `forms:submitted` Nitro hook.
 
-Full documentation: `apps/docs/content/4.modules/26.forms.md`.
+Captcha fields (Cloudflare Turnstile, reCAPTCHA, hCaptcha) need a site key (`NUXT_PUBLIC_FORMS_CAPTCHA_<PROVIDER>_SITE_KEY`)
+and a secret key (`NUXT_FORMS_CAPTCHA_<PROVIDER>_SECRET_KEY`) with `<PROVIDER>` one of `TURNSTILE`, `RECAPTCHA`, `HCAPTCHA`;
+`NUXT_PUBLIC_FORMS_CAPTCHA_DEFAULT_PROVIDER` picks the provider of a field that names none. A secret key can also be set
+per form in the admin builder: it is stored encrypted (AES-256-GCM, key from `NUXT_FORMS_ENCRYPTION_KEY`, else
+`NUXT_ENCRYPTION_KEY`, else the session password; changing the key makes stored secrets unreadable) and takes precedence
+over the environment one. Without any secret key submissions fail closed.
+
+Embed a published form in Markdown (Nuxt Content / MDC) with the globally registered `FormEmbed` component
+(`slug`, `title`, `locale`, `class`; honors the form's access settings):
+
+```md
+::form-embed{slug="contact"}
+::
+```
+
+Full documentation: `apps/docs/content/4.modules/07.forms.md`.
 
 ```ts
 export default defineNuxtConfig({

package/dist/module.d.mts

@@ -1,20 +1,23 @@
 import * as _nuxt_schema from '@nuxt/schema';
 import { H3Event } from 'h3';
+import { Schedule } from '@frigear-nu/module-kit/schedule';
+export { Schedule as FormSchedule, ScheduleMoment as FormScheduleMoment } from '@frigear-nu/module-kit/schedule';
+import { Translated } from '@frigear-nu/ui/translated';
+export { Translated } from '@frigear-nu/ui/translated';
 
-/** A text that is either one string or a map of locale -> string. */
-type Translated = string | Record<string, string>;
 type FormStatus = 'draft' | 'published' | 'archived';
 type FormMode = 'single' | 'stepped';
 type FormStorage = 'db' | 'none';
 type DeliveryStatus = 'none' | 'pending' | 'delivered' | 'failed';
-type FieldType = 'text' | 'email' | 'tel' | 'number' | 'textarea' | 'select' | 'radio' | 'checkbox' | 'date' | 'file' | 'markdown';
-type ConditionOp = 'eq' | 'neq' | 'in' | 'truthy';
+type FieldType = 'text' | 'email' | 'tel' | 'number' | 'textarea' | 'select' | 'radio' | 'checkbox' | 'date' | 'file' | 'markdown' | 'captcha';
+type CaptchaProvider = 'turnstile' | 'recaptcha' | 'hcaptcha';
+type ConditionOp = 'eq' | 'neq' | 'in' | 'empty' | 'notEmpty' | 'truthy';
 /** Shows a field (or step) only while the condition on another field's answer holds. */
 type Condition = {
     /** Key of the field whose answer is inspected. */
     field: string;
     op: ConditionOp;
-    /** Compared value for `eq`/`neq`; a list of accepted values for `in`. Unused for `truthy`. */
+    /** Compared value for `eq`/`neq`; a list of accepted values for `in`. Unused for `empty`, `notEmpty` and `truthy` (an alias of `notEmpty`). */
     value?: unknown;
 };
 type FieldOption = {
@@ -37,6 +40,24 @@ type FieldValidation = {
     /** Replaces the default error message of every rule on this field. */
     message?: Translated;
 };
+/** Settings of a `captcha` field. The visitor's response token lives in the form state only and is never stored. */
+type CaptchaConfig = {
+    /** Defaults to `turnstile`. */
+    provider?: CaptchaProvider;
+    /** Public site key; overrides `runtimeConfig.public.forms.captcha.<provider>.siteKey` for this field. */
+    siteKey?: string;
+    theme?: 'auto' | 'light' | 'dark';
+    size?: 'normal' | 'compact';
+};
+/** Settings of a `tel` field. The answer is always one string; with a country selector it is `+<dial code><number>`, e.g. `+4512345678`. */
+type PhoneConfig = {
+    /** `simple`: one free-form input (default). `country`: a country selector next to the national number, merged into one value. */
+    mode?: 'simple' | 'country';
+    /** ISO 3166-1 alpha-2 codes the visitor may choose from (`country` mode). Default: all countries. */
+    countries?: string[];
+    /** Preselected country (`country` mode). Defaults to `DK` when offered, else the first offered country. */
+    defaultCountry?: string;
+};
 type FormField = {
     /** Unique across the whole form; the key of the answer. */
     key: string;
@@ -50,9 +71,13 @@ type FormField = {
     options?: FieldOption[];
     /** `file` fields only: allow more than one file. */
     multiple?: boolean;
-    /** Browser `autocomplete` token, e.g. `email`. */
+    /** Browser `autocomplete` token, e.g. `email`. Defaults by type: `email` for email, `tel` for phone (`tel-national` next to a country selector). */
     autocomplete?: string;
     validation?: FieldValidation;
+    /** `tel` fields only. */
+    phone?: PhoneConfig;
+    /** `captcha` fields only. */
+    captcha?: CaptchaConfig;
     showIf?: Condition;
 };
 type FormStep = {
@@ -65,9 +90,22 @@ type FormStep = {
 };
 type FormDelivery = {
     email?: {
-        /** Recipient addresses. */
+        /** Recipient addresses; used when no `routes` entry matches. */
         to: string[];
+        /** May use `{{variables}}` (see the forms docs). */
         subject?: Translated;
+        /**
+         * Custom plain-text body with `{{variables}}` (`{{answers}}`, `{{answer.<key>}}`, `{{form.name}}`, ...).
+         * Without it the email lists the answers.
+         */
+        body?: Translated;
+        /** Sends to different recipients depending on the answer of one field (e.g. a subject select). */
+        routes?: {
+            field: string;
+            to: Record<string, string[]>;
+        };
+        /** Key of an email field whose answer becomes the `Reply-To` of the delivered email. */
+        replyToField?: string;
     };
 };
 type FormSubmitSettings = {
@@ -80,6 +118,18 @@ type FormSubmitSettings = {
         keep: string[];
     };
 };
+/** `web`: public page and API. `api`: API only, the public page does not exist. */
+type FormAvailability = 'web' | 'api';
+/** How a submitter proves access: nothing, a signed-in user, a bearer token or a shared password. */
+type FormAuthMode = 'none' | 'user' | 'token' | 'password';
+
+/** Who may read and submit the form, and when. Secrets (tokens, password hash) are never part of the definition. */
+type FormAccess = {
+    availability: FormAvailability;
+    auth: FormAuthMode;
+    /** Defaults to `{ type: 'always' }`. */
+    schedule?: Schedule;
+};
 type FormDefinition = {
     mode: FormMode;
     /** `none` never stores answers (or files): they are only emitted through `forms:submitted` and emailed. */
@@ -87,9 +137,12 @@ type FormDefinition = {
     steps: FormStep[];
     submit?: FormSubmitSettings;
     delivery?: FormDelivery;
+    /** Defaults to `{ availability: 'web', auth: 'none' }` (open to everyone, as forms always were). */
+    access?: FormAccess;
 };
 type ModuleOptions = {
     settings?: {
+        mcp?: boolean;
         pages?: {
             /** Public form page; must contain a `:slug` param. `true` = `/forms/:slug`. */
             form?: string | boolean;
@@ -115,6 +168,22 @@ type ModuleOptions = {
         enabled?: boolean;
         forms?: SeedForm[];
     };
+    /**
+     * Keys for `captcha` fields. Site keys are public, secret keys stay on the server. Both can be set per
+     * provider here or through `NUXT_PUBLIC_FORMS_CAPTCHA_<PROVIDER>_SITE_KEY` / `NUXT_FORMS_CAPTCHA_<PROVIDER>_SECRET_KEY`.
+     */
+    captcha?: Partial<Record<CaptchaProvider, {
+        siteKey?: string;
+        secretKey?: string;
+    }>> & {
+        /** Provider of a captcha field that does not name one. Defaults to `turnstile`; env `NUXT_PUBLIC_FORMS_CAPTCHA_DEFAULT_PROVIDER`. */
+        defaultProvider?: CaptchaProvider;
+    };
+    /**
+     * Key that encrypts per-form secrets in the database (env `NUXT_FORMS_ENCRYPTION_KEY`). Falls back to
+     * `NUXT_ENCRYPTION_KEY`, then to the session password. Changing it makes stored secrets unreadable.
+     */
+    encryptionKey?: string;
 };
 type SeedForm = {
     slug: string;
@@ -129,6 +198,10 @@ type FormsRuntimeConfig = {
         enabled: boolean;
         forms: SeedForm[];
     };
+    captcha: Record<CaptchaProvider, {
+        secretKey: string;
+    }>;
+    encryptionKey: string;
 };
 type PublicModuleOptions = {
     pages: {
@@ -138,6 +211,11 @@ type PublicModuleOptions = {
         adminSubmissions?: string;
         adminSubmission?: string;
     };
+    captcha: Record<CaptchaProvider, {
+        siteKey: string;
+    }> & {
+        defaultProvider: CaptchaProvider;
+    };
 };
 type AuthorizeContext = {
     event: H3Event;
@@ -172,6 +250,22 @@ type SubmittedContext = {
     /** Set by a handler to report that it delivered the submission (email delivery does). */
     delivered: boolean;
 };
+type CaptchaVerifyContext = {
+    event: H3Event;
+    provider: CaptchaProvider;
+    token: string;
+    ip: string | undefined;
+    /** The form being submitted, when known. */
+    formId?: string;
+    /**
+     * The secret key the siteverify call would use: the form's own encrypted secret, else the environment/config
+     * one, else `undefined` (which fails closed). Server-side only, never sent anywhere but the provider.
+     */
+    secretKey?: string;
+    secretSource?: SecretSource;
+    /** Set by a handler to decide the outcome; left `undefined` the provider's siteverify endpoint is asked. */
+    valid: boolean | undefined;
+};
 type DeliveredContext = {
     submissionId: string | null;
     formSlug: string;
@@ -186,6 +280,45 @@ type PublicFormDto = {
     /** The definition without `delivery` (recipients are never public). */
     definition: Omit<FormDefinition, 'delivery'>;
 };
+type FormAccessTokenDto = {
+    id: string;
+    name: string;
+    /** First characters of the token, to recognise it; the token itself is shown once on creation. */
+    prefix: string;
+    createdAt: string;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+};
+type CreatedFormAccessTokenDto = FormAccessTokenDto & {
+    token: string;
+};
+type FormPasswordStatusDto = {
+    set: boolean;
+};
+/** Where a captcha secret key comes from: the form's encrypted secret, the environment/config, or nowhere. */
+type SecretSource = 'form' | 'env' | 'unset';
+/** Which per-form secrets are set. Names only: values are write-only and never leave the server. */
+type FormSecretsDto = {
+    /** Names of the secrets stored for this form. */
+    keys: string[];
+    /** Per captcha provider, which secret key a submission would use. */
+    captcha: Record<CaptchaProvider, {
+        source: SecretSource;
+    }>;
+    /** The stored secrets cannot be decrypted (the encryption key changed); set them again. */
+    unreadable: boolean;
+};
+/** What the public page needs to decide between the form, a gate and "not found". Never contains secrets. */
+type FormAccessInfoDto = {
+    slug: string;
+    name: string;
+    access: FormAccess;
+    signedIn: boolean;
+    /** False outside the schedule: the page shows a "closed" notice instead of the form. */
+    open: boolean;
+    /** Next moment the form opens (ISO), when it is closed and will open again. */
+    opensAt?: string | null;
+};
 type FormSummaryDto = {
     id: string;
     slug: string;
@@ -204,6 +337,8 @@ type FormAdminDto = {
     status: FormStatus;
     version: number;
     definition: FormDefinition;
+    /** Stored submissions; only set when the form is fetched on its own. Can be above 0 even when storage is now `none`. */
+    submissionCount?: number;
     createdAt: string;
     updatedAt: string;
 };
@@ -271,6 +406,11 @@ declare module 'nitropack' {
          * here (webhooks, CRM, ...); set `ctx.delivered = true` once done. Throwing marks delivery failed.
          */
         'forms:submitted': (ctx: SubmittedContext) => void | Promise<void>;
+        /**
+         * A captcha token must be verified. Set `ctx.valid` to decide; when left `undefined` the provider's
+         * siteverify endpoint is called with the configured secret key. Lets hosts and tests replace the network call.
+         */
+        'forms:captcha:verify': (ctx: CaptchaVerifyContext) => void | Promise<void>;
         /** Delivery of a submission finished (successfully or not). */
         'forms:delivered': (ctx: DeliveredContext) => void | Promise<void>;
     }
@@ -278,4 +418,4 @@ declare module 'nitropack' {
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;
 
 export { _default as default };
-export type { AuthorizeContext, Condition, ConditionOp, DeliveredContext, DeliveryStatus, FieldOption, FieldType, FieldValidation, FileDescriptor, FormAdminDto, FormDefinition, FormDelivery, FormField, FormMode, FormStatus, FormStep, FormStorage, FormSubmitSettings, FormSummaryDto, FormsRuntimeConfig, ModuleOptions, PublicFormDto, PublicModuleOptions, SeedForm, SubmissionDto, SubmissionFileDto, SubmissionSummaryDto, SubmitResponse, SubmittedContext, SubmittedFile, Translated };
+export type { AuthorizeContext, CaptchaConfig, CaptchaProvider, CaptchaVerifyContext, Condition, ConditionOp, CreatedFormAccessTokenDto, DeliveredContext, DeliveryStatus, FieldOption, FieldType, FieldValidation, FileDescriptor, FormAccess, FormAccessInfoDto, FormAccessTokenDto, FormAdminDto, FormAuthMode, FormAvailability, FormDefinition, FormDelivery, FormField, FormMode, FormPasswordStatusDto, FormSecretsDto, FormStatus, FormStep, FormStorage, FormSubmitSettings, FormSummaryDto, FormsRuntimeConfig, ModuleOptions, PhoneConfig, PublicFormDto, PublicModuleOptions, SecretSource, SeedForm, SubmissionDto, SubmissionFileDto, SubmissionSummaryDto, SubmitResponse, SubmittedContext, SubmittedFile };

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@frigear-nu/forms",
   "configKey": "forms",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,12 +1,10 @@
-import { defineNuxtModule, createResolver, hasNuxtModule, addServerImportsDir, addServerPlugin, addImports, addComponentsDir, extendPages, addServerHandler } from '@nuxt/kit';
-import { registerModule, registerLocales, registerDatabaseTable, defineModulePage } from '@frigear-nu/module-kit/utils';
+import { defineNuxtModule, createResolver, hasNuxtModule, addServerImportsDir, addServerPlugin, addImports, addComponentsDir, addComponent, addServerHandler } from '@nuxt/kit';
+import { registerModule, registerTailwindSource, registerLocales, resolvePagePath, registerDatabaseTable, inlineModuleRuntime, addModulePages, addOptionalMenuSource } from '@frigear-nu/module-kit/utils';
+import { adminRoute } from '@frigear-nu/admin/utils';
+import { addAuthScope } from '@frigear-nu/auth/utils';
+import { addMcpDefinitions } from '@frigear-nu/mcp/utils';
 
 const MODULE_NAME = "@frigear-nu/forms";
-function resolvePagePath(setting, defaultPath) {
-  if (typeof setting === "string") return setting;
-  if (setting === true) return defaultPath;
-  return void 0;
-}
 const module$1 = defineNuxtModule({
   meta: { name: MODULE_NAME, configKey: "forms" },
   defaults: {
@@ -19,25 +17,44 @@ const module$1 = defineNuxtModule({
       defaults: { kv: true, blob: true }
     },
     "@frigear-nu/module-kit": { version: ">=0.0.1" },
+    "@frigear-nu/auth": { version: ">=0.0.1" },
+    "@frigear-nu/mcp": { version: ">=0.0.1" },
     "@frigear-nu/users": { version: ">=0.0.1" },
     "@frigear-nu/notify": { version: ">=0.0.1" },
-    "@frigear-nu/menu": { version: ">=0.0.1", optional: true }
+    "@frigear-nu/ui": { version: ">=0.0.1" },
+    "@frigear-nu/menu": { version: ">=0.0.1", optional: true },
+    // Provides the shared page components of the admin pages (`AdminPage`, `AdminTable`, ...).
+    "@frigear-nu/admin": { version: ">=0.0.0", optional: true }
   },
   async setup(options, nuxt) {
     registerModule(MODULE_NAME, nuxt);
+    addAuthScope(
+      nuxt,
+      { name: "forms:manage", description: "Manage forms and submissions (staff)" },
+      { name: "forms:submit", description: "Submit forms as you" },
+      { name: "forms:pii", description: "See submission answers and file names through MCP tools (also needs forms:manage)" }
+    );
     const resolver = createResolver(import.meta.url);
+    registerTailwindSource(nuxt, resolver.resolve("./runtime/app"));
     registerLocales(nuxt, resolver.resolve("./runtime/i18n/lang"));
     const settings = options.settings ?? {};
-    const withMenus = hasNuxtModule("@frigear-nu/menu");
     const formPath = resolvePagePath(settings.pages?.form, "/forms/:slug");
-    const adminPath = resolvePagePath(settings.pages?.admin, "/admin/forms");
-    const adminFormPath = resolvePagePath(settings.pages?.adminForm, "/admin/forms/:id");
-    const adminSubmissionsPath = resolvePagePath(settings.pages?.adminSubmissions, "/admin/forms/:id/submissions");
-    const adminSubmissionPath = resolvePagePath(settings.pages?.adminSubmission, "/admin/forms/:id/submissions/:submissionId");
+    const withAdmin = hasNuxtModule("@frigear-nu/admin");
+    const adminPage = (setting, ...segments) => withAdmin ? resolvePagePath(setting, adminRoute(nuxt, "forms", ...segments)) : void 0;
+    const adminPath = adminPage(settings.pages?.admin);
+    const adminFormPath = adminPage(settings.pages?.adminForm, ":id");
+    const adminSubmissionsPath = adminPage(settings.pages?.adminSubmissions, ":id", "submissions");
+    const adminSubmissionPath = adminPage(settings.pages?.adminSubmission, ":id", "submissions", ":submissionId");
     nuxt.options.runtimeConfig.forms = {
       rateLimit: settings.rateLimit ?? 10,
       rateLimitWindowSeconds: settings.rateLimitWindowSeconds ?? 600,
-      seed: { enabled: options.seed?.enabled ?? false, forms: options.seed?.forms ?? [] }
+      seed: { enabled: options.seed?.enabled ?? false, forms: options.seed?.forms ?? [] },
+      captcha: {
+        turnstile: { secretKey: options.captcha?.turnstile?.secretKey ?? "" },
+        recaptcha: { secretKey: options.captcha?.recaptcha?.secretKey ?? "" },
+        hcaptcha: { secretKey: options.captcha?.hcaptcha?.secretKey ?? "" }
+      },
+      encryptionKey: options.encryptionKey ?? ""
     };
     nuxt.options.runtimeConfig.public.forms = {
       pages: {
@@ -46,6 +63,12 @@ const module$1 = defineNuxtModule({
         adminForm: adminFormPath,
         adminSubmissions: adminSubmissionsPath,
         adminSubmission: adminSubmissionPath
+      },
+      captcha: {
+        turnstile: { siteKey: options.captcha?.turnstile?.siteKey ?? "" },
+        recaptcha: { siteKey: options.captcha?.recaptcha?.siteKey ?? "" },
+        hcaptcha: { siteKey: options.captcha?.hcaptcha?.siteKey ?? "" },
+        defaultProvider: options.captcha?.defaultProvider ?? "turnstile"
       }
     };
     await registerDatabaseTable(nuxt, {
@@ -58,44 +81,51 @@ const module$1 = defineNuxtModule({
     route("get", "/admin/forms/:id", "admin/form.get");
     route("patch", "/admin/forms/:id", "admin/form.patch");
     route("delete", "/admin/forms/:id", "admin/form.delete");
+    route("post", "/admin/forms/:id/clone", "admin/form-clone.post");
     route("get", "/admin/forms/:id/submissions", "admin/submissions.get");
+    route("get", "/admin/forms/:id/tokens", "admin/form-tokens.get");
+    route("post", "/admin/forms/:id/tokens", "admin/form-tokens.post");
+    route("delete", "/admin/forms/:id/tokens/:tokenId", "admin/form-token.delete");
+    route("get", "/admin/forms/:id/password", "admin/form-password.get");
+    route("put", "/admin/forms/:id/password", "admin/form-password.put");
+    route("delete", "/admin/forms/:id/password", "admin/form-password.delete");
+    route("get", "/admin/forms/:id/secrets", "admin/form-secrets.get");
+    route("put", "/admin/forms/:id/secrets", "admin/form-secrets.put");
+    route("delete", "/admin/forms/:id/secrets/:key", "admin/form-secret.delete");
     route("post", "/admin/import", "admin/import.post");
     route("get", "/admin/submissions/:id", "admin/submission.get");
     route("get", "/admin/submissions/:id/files/:fileId", "admin/submission-file.get");
     route("post", "/admin/submissions/:id/redeliver", "admin/submission-redeliver.post");
     route("get", "/:slug", "public/form.get");
+    route("get", "/:slug/access", "public/access.get");
     route("post", "/:slug/submit", "public/submit.post");
     addServerImportsDir(resolver.resolve("./runtime/server/utils"));
+    inlineModuleRuntime(nuxt, resolver);
+    if (settings.mcp === true) addMcpDefinitions(nuxt, resolver.resolve("./runtime/server/mcp"));
+    addServerPlugin(resolver.resolve("./runtime/server/plugins/encryption"));
+    addServerPlugin(resolver.resolve("./runtime/server/plugins/staff-scopes"));
     addServerPlugin(resolver.resolve("./runtime/server/plugins/email-delivery"));
     addServerPlugin(resolver.resolve("./runtime/server/plugins/seed"));
     addImports([
       { name: "useForm", from: resolver.resolve("./runtime/app/composables/useForms") },
+      { name: "useFormAccess", from: resolver.resolve("./runtime/app/composables/useForms") },
+      { name: "FORM_PASSWORD_HEADER", from: resolver.resolve("./runtime/app/composables/useForms") },
       { name: "useFormsLocale", from: resolver.resolve("./runtime/app/composables/useForms") },
+      { name: "useFormsLocales", from: resolver.resolve("./runtime/app/composables/useForms") },
       { name: "useFormsPaths", from: resolver.resolve("./runtime/app/composables/useForms") },
+      { name: "useFormLink", from: resolver.resolve("./runtime/app/composables/useForms") },
       { name: "useFormStepper", from: resolver.resolve("./runtime/app/composables/useFormStepper") }
     ]);
     addComponentsDir({ path: resolver.resolve("./runtime/app/components") });
-    const pages = [
-      { name: "forms-form", path: formPath, file: "form.vue" },
-      { name: "forms-admin", path: adminPath, file: "admin.vue" },
-      { name: "forms-admin-form", path: adminFormPath, file: "admin-form.vue" },
-      { name: "forms-admin-submissions", path: adminSubmissionsPath, file: "admin-submissions.vue" },
-      { name: "forms-admin-submission", path: adminSubmissionPath, file: "admin-submission.vue" }
-    ];
-    if (pages.some((page) => page.path)) {
-      extendPages((existing) => {
-        const taken = new Set(existing.map((page) => page.path));
-        for (const page of pages) {
-          if (page.path && !taken.has(page.path)) {
-            existing.push(defineModulePage(MODULE_NAME, { name: page.name, path: page.path, file: resolver.resolve(`./runtime/app/pages/${page.file}`) }));
-          }
-        }
-      });
-    }
-    if (withMenus) {
-      const { registerMenuSource } = await import('@frigear-nu/menu/utils');
-      registerMenuSource(nuxt, { file: resolver.resolve("./runtime/menus"), menu: "dashboard.account" });
-    }
+    addComponent({ name: "FormEmbed", filePath: resolver.resolve("./runtime/app/components/FormEmbed.vue"), global: true });
+    addModulePages(MODULE_NAME, resolver, [
+      { name: "forms-form", path: formPath, file: "./runtime/app/pages/form.vue" },
+      { name: "forms-admin", path: adminPath, file: "./runtime/app/pages/admin.vue" },
+      { name: "forms-admin-form", path: adminFormPath, file: "./runtime/app/pages/admin-form.vue" },
+      { name: "forms-admin-submissions", path: adminSubmissionsPath, file: "./runtime/app/pages/admin-submissions.vue" },
+      { name: "forms-admin-submission", path: adminSubmissionPath, file: "./runtime/app/pages/admin-submission.vue" }
+    ]);
+    addOptionalMenuSource(nuxt, { file: resolver.resolve("./runtime/menus"), menu: "dashboard.account" });
   }
 });
 

package/dist/runtime/app/components/FormBuilder.d.vue.ts

@@ -0,0 +1,26 @@
+import type { FormDefinition } from '../../../types.js';
+/** The saved form; enables per-form secrets (captcha secret key), which are stored right away, not with the definition. */
+type __VLS_Props = {
+    formId?: string;
+};
+type __VLS_ModelProps = {
+    modelValue: FormDefinition;
+};
+type __VLS_PublicProps = __VLS_Props & __VLS_ModelProps;
+declare var __VLS_82: {};
+type __VLS_Slots = {} & {
+    preview?: (props: typeof __VLS_82) => any;
+};
+declare const __VLS_base: import("vue").DefineComponent<__VLS_PublicProps, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
+    "update:modelValue": (value: FormDefinition) => any;
+}, string, import("vue").PublicProps, Readonly<__VLS_PublicProps> & Readonly<{
+    "onUpdate:modelValue"?: ((value: FormDefinition) => any) | undefined;
+}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
+declare const _default: typeof __VLS_export;
+export default _default;
+type __VLS_WithSlots<T, S> = T & {
+    new (): {
+        $slots: S;
+    };
+};