@getquick/content 0.3.1 → 0.4.0

package/README.md

@@ -1,5 +1,11 @@
 # @getquick/content
 
+The runtime's public `search({ search, page?, perPage?, language? })` searches
+delivered pages, posts, declared collections and the language's front page
+from the publication store alone. It returns a `found.content` page with
+`items`, `total`, `page`, `perPage`, `totalPages`, or `unavailable.failure`.
+See the [search contract and adoption guide](../docs/search.md).
+
 The configured content runtime for WordPress HTML and WPGraphQL. This slice
 provides pure helpers, the configured WordPress client, durable delivery and
 installed SQL migrations, and event/refresh HTTP handlers. It is released as a
@@ -290,3 +296,84 @@ content runtime, framework or WordPress client. Passing
 at delivery and stores gq-config's Legal Contract and GA4 settings in each
 language's chrome; `runtime.consentConfiguration(chrome)` returns the page's
 consent configuration. See the repository's `docs/consent.md`.
+
+## Design presentation and composition
+
+Sites import the canonical presentation and theme APIs from `@getquick/content`.
+The package bundles its pinned Design renderer and contract; Sites do not install
+those packages themselves. Apply `gqd-content` to body and chrome regions and emit
+`designThemeStyleSheet(theme)` followed by `presentationStyleSheet(theme)` once
+per response, using the delivered `theme` from entry/home/chrome. Resolve defaults
+with `resolveDesignTheme` for older stored publications. A changed theme requires
+regenerating both stylesheets, including its media thresholds.
+
+`presentationHtml(name, shell, presentation, { attributes, model? })` decorates an
+existing root shell. Pass the complete block attributes for native Group layout
+context. `presentationVariables` takes the same attributes context. Both delegate
+validation and responsive rules to the bundled renderer; saved variables survive
+when parsed attributes are absent. An optional extended `model` must also be
+passed to the corresponding canonical stylesheet generator.
+
+`renderDesignPattern` restores native text/list structures, media and layout
+wrappers, resolved Navigation and Query composition. Site `options.blocks`
+renderers retain precedence. Complete saved media HTML stays authoritative;
+source-only Image nodes use `renderDesignImage`. The public low-level HTML
+adapters also support parsed Site adapters without a second presentation parser.
+
+Carousel uses `renderDesignCarousel(attributes, orderedChildren, shell?)`, where
+children carry `{ name, attributes, html }` and each `html` is the complete rendered
+child. Supply exactly one navigation child, even though WordPress saves its HTML
+as null. `renderDesignCarouselItem` accepts its rendered foreground children and
+an optional saved figure shell. Emit `designCarouselStyle()` once. Video Hero
+uses `renderDesignVideoHero` and the canonical `videoHeroStyleSheet()`; deferred
+iframes remain `data-src` until consent and motion preferences allow playback.
+Navigation uses `navigationStyleSheet(theme)` for interaction geometry.
+
+Browser lifecycle is isolated in `@getquick/content/design/client`, exporting
+`mountDesignCarousels`, `mountVideoHero` and `mountDesignNavigation`. Each returns
+cleanup; mount again after navigation replaces the DOM. Importing the root does
+not require browser globals. The configured runtime gates generated Hero media
+before composing already-delivered children, so consent hooks are not rewritten
+a second time.
+
+For a producer-resolved Query, preload outside the synchronous renderer:
+
+```ts
+const loaded = await runtime.preloadDesignQueryPosts(pattern, siteOrigin);
+const html = runtime.renderDesignPattern(pattern, {
+  siteOrigin,
+  resolvePost: loaded.resolvePost,
+});
+```
+
+This uses the existing `publishedEntry(item.uri)` read for standard Post/Page
+items. Its optional `databaseId` and canonical `designBlocks` become a typed
+`DesignPostContext` through `designPostContext`. Older publications without the
+neutral tree cannot supply that context. Custom post types require an explicit
+authorized preloaded record through `preloadDesignQueryPosts(pattern, load)`;
+this API adds no custom post type GraphQL field or query selection engine.
+Delivered item order, count and duplicates are preserved without applying Query
+arguments again. Synced references add no layout wrapper, and Post Content
+recursively renders the matching preloaded neutral blocks.
+
+Native decorative Cover backgrounds use the same explicit Site lifecycle:
+
+```ts
+import { mountDesignCoverVideos } from "@getquick/content/design/client";
+const cleanup = mountDesignCoverVideos(document);
+// Invoke cleanup before removing/replacing the rendered page; remount afterward.
+```
+
+The configured publication delivery and `presentationHtml("core/cover", ...)`
+remove eager `autoplay` from direct native Cover background videos. The initializer
+plays when reduced motion is off, pauses when enabled, resumes when disabled,
+and pauses/removes its preference listener on cleanup. It does not own foreground
+or ordinary content videos. If a Site renders raw Cover HTML outside these paths,
+apply `enhanceDesignCoverVideosHtml(html)` before SSR. Sources, posters and ordered
+foreground remain authoritative; no legacy appearance properties are inferred.
+
+`mountDesignNavigation` also enhances native Polylang dropdowns inside
+`.wp-block-polylang-language-switcher`, including ordinary published HTML whose
+inline controller was removed during delivery. It navigates to the delivered
+selected option's HTTP(S) URL; it does not resolve languages or evaluate inline
+scripts. Cleanup removes that handler and restores the original selection.

package/dist/consent-astro.js

@@ -1,6 +1,6 @@
 import { S as SERVICE_CATALOG, T as copyLanguage, c as grantedCategories, d as promptReason, f as readConsentCookie, x as OPTIONAL_CATEGORIES } from "./state-BYWc5TUB.js";
-import { a as CONSENT_COPY, c as legalRevisions, r as escapeHtml } from "./embeds-p9SyGNZI.js";
-import { t as CONSENT_UI_VERSION } from "./version-ChwS3fUu.js";
+import { a as CONSENT_COPY, c as legalRevisions, r as escapeHtml } from "./embeds-CJJemAmE.js";
+import { t as CONSENT_UI_VERSION } from "./version-D81MsCZU.js";
 import { t as CONSENT_CONFIG_ID } from "./client-config-B3LNSOxl.js";
 import { t as CONSENT_PATH } from "./paths-Cmzzof3v.js";
 //#region frontend/src/consent/astro.ts

package/dist/consent-client.js

@@ -121,13 +121,26 @@ function loadEmbed(placeholder, id) {
 	if (src.protocol !== "https:" || embedService(src) !== id) return;
 	const iframe = document.createElement("iframe");
 	for (const [name, value] of Object.entries(embed.attrs)) if (EMBED_ATTRIBUTES.has(name.toLowerCase()) && typeof value === "string") iframe.setAttribute(name, value);
-	iframe.src = src.href;
 	const original = placeholder.cloneNode(true);
-	placeholder.replaceChildren(iframe);
-	placeholder.setAttribute("data-gq-loaded", "");
-	placeholder.removeAttribute("role");
-	placeholder.removeAttribute("aria-label");
-	originals.set(placeholder, original);
+	if (placeholder.hasAttribute("data-gq-decorative") && iframe.classList.contains("gqd-video-hero__video")) {
+		iframe.dataset.src = src.href;
+		for (const name of [
+			"data-gq-consent-embed",
+			"data-gq-category",
+			"data-gq-embed",
+			"data-gq-decorative"
+		]) if (placeholder.hasAttribute(name)) iframe.setAttribute(name, placeholder.getAttribute(name));
+		iframe.setAttribute("data-gq-loaded", "");
+		placeholder.replaceWith(iframe);
+		originals.set(iframe, original);
+	} else {
+		iframe.src = src.href;
+		placeholder.replaceChildren(iframe);
+		placeholder.setAttribute("data-gq-loaded", "");
+		placeholder.removeAttribute("role");
+		placeholder.removeAttribute("aria-label");
+		originals.set(placeholder, original);
+	}
 }
 const originals = /* @__PURE__ */ new WeakMap();
 function unloadEmbed(placeholder) {

package/dist/consent-server.js

@@ -1,7 +1,8 @@
 import { t as bearerMatches } from "./bearer-DMOCoSci.js";
 import { i as DECISION_VALIDITY_MS, l as isConsentId, t as CONSENT_ACTIONS, x as OPTIONAL_CATEGORIES } from "./state-BYWc5TUB.js";
-import { a as parseConsentRecordRequest } from "./records-Dumrz759.js";
+import { a as parseConsentRecordRequest, t as MAX_RECORD_BYTES } from "./records-Dumrz759.js";
 import { t as CONSENT_PATH } from "./paths-Cmzzof3v.js";
+import { n as readBoundedBody, t as isSameOrigin } from "./request-guards-BUPr_vA4.js";
 //#region frontend/src/consent/server.ts
 const MAX_RETENTION_DAYS = 1826;
 const DAY_MS = 864e5;
@@ -73,42 +74,8 @@ function createConsentServer(config) {
 	const now = config.now ?? Date.now;
 	const origins = new Set((config.siteOrigins ?? []).map((origin) => new URL(origin).origin));
 	/** CN-R9: same-origin only. A browser's cross-site post carries its Origin. */
-	function sameOrigin(request) {
-		const origin = request.headers.get("Origin");
-		const site = request.headers.get("Sec-Fetch-Site");
-		if (site && site !== "same-origin") return false;
-		if (!origin) return false;
-		if (origin === new URL(request.url).origin || origins.has(origin)) return true;
-		try {
-			return new URL(origin).host === request.headers.get("Host");
-		} catch {
-			return false;
-		}
-	}
-	async function readBody(request) {
-		if (Number(request.headers.get("Content-Length") ?? "0") > 2048) return null;
-		if (!request.body) return "";
-		const reader = request.body.getReader();
-		const chunks = [];
-		let size = 0;
-		for (;;) {
-			const { done, value } = await reader.read();
-			if (done) break;
-			size += value.byteLength;
-			if (size > 2048) {
-				await reader.cancel();
-				return null;
-			}
-			chunks.push(value);
-		}
-		const bytes = new Uint8Array(size);
-		let offset = 0;
-		for (const chunk of chunks) {
-			bytes.set(chunk, offset);
-			offset += chunk.byteLength;
-		}
-		return new TextDecoder().decode(bytes);
-	}
+	const sameOrigin = (request) => isSameOrigin(request, origins);
+	const readBody = (request) => readBoundedBody(request, MAX_RECORD_BYTES);
 	async function insert(db, request) {
 		const recordedAt = now();
 		return (await db.prepare(`INSERT OR IGNORE INTO consent_records (consent_id, site_id, recorded_at, decided_at, expires_at,

package/dist/consent.js

@@ -1,5 +1,5 @@
 import { C as SERVICE_IDS, D as hostMatches, E as embedService, O as hostService, S as SERVICE_CATALOG, T as copyLanguage, _ as consentConfiguration, a as consentCookie, b as COPY_LANGUAGES, c as grantedCategories, d as promptReason, f as readConsentCookie, g as MEASUREMENT_ID, h as CONSENT_COPY_REVISION, i as DECISION_VALIDITY_MS, k as isServiceId, l as isConsentId, m as serviceGranted, n as CONSENT_COOKIE, o as decide, p as serializeConsentState, r as CONSENT_COOKIE_MAX_AGE_SECONDS, s as denyAll, t as CONSENT_ACTIONS, u as parseConsentState, v as needsBanner, w as catalogService, x as OPTIONAL_CATEGORIES, y as CONSENT_CATEGORIES } from "./state-BYWc5TUB.js";
 import { a as parseConsentRecordRequest, i as isRecordToken, n as consentRecordRequest, r as isLegalRoleName, t as MAX_RECORD_BYTES } from "./records-Dumrz759.js";
-import { a as CONSENT_COPY, c as legalRevisions, i as rewriteEmbeds, l as parseLegalLanguage, n as embedPlaceholder, o as LEGAL_ROLES, r as escapeHtml, s as REQUIRED_LEGAL_ROLES, t as blockedPlaceholder } from "./embeds-p9SyGNZI.js";
-import { t as CONSENT_UI_VERSION } from "./version-ChwS3fUu.js";
+import { a as CONSENT_COPY, c as legalRevisions, i as rewriteEmbeds, l as parseLegalLanguage, n as embedPlaceholder, o as LEGAL_ROLES, r as escapeHtml, s as REQUIRED_LEGAL_ROLES, t as blockedPlaceholder } from "./embeds-CJJemAmE.js";
+import { t as CONSENT_UI_VERSION } from "./version-D81MsCZU.js";
 export { CONSENT_ACTIONS, CONSENT_CATEGORIES, CONSENT_COOKIE, CONSENT_COOKIE_MAX_AGE_SECONDS, CONSENT_COPY, CONSENT_COPY_REVISION, CONSENT_UI_VERSION, COPY_LANGUAGES, DECISION_VALIDITY_MS, LEGAL_ROLES, MAX_RECORD_BYTES, MEASUREMENT_ID, OPTIONAL_CATEGORIES, REQUIRED_LEGAL_ROLES, SERVICE_CATALOG, SERVICE_IDS, blockedPlaceholder, catalogService, consentConfiguration, consentCookie, consentRecordRequest, copyLanguage, decide, denyAll, embedPlaceholder, embedService, escapeHtml, grantedCategories, hostMatches, hostService, isConsentId, isLegalRoleName, isRecordToken, isServiceId, legalRevisions, needsBanner, parseConsentRecordRequest, parseConsentState, parseLegalLanguage, promptReason, readConsentCookie, rewriteEmbeds, serializeConsentState, serviceGranted };

package/dist/copy-DLto_bWj.js

@@ -0,0 +1,163 @@
+//#region frontend/src/forms/state.ts
+/** The query parameter that marks the redirect back after a post. */
+const FORM_STATE_PARAM = "gq-form";
+/** Seconds the outcome is kept for the page after the redirect. */
+const FORM_STATE_MAX_AGE = 300;
+/** Cookies over this many bytes drop the typed values, then Gravity Forms' messages. */
+const MAX_COOKIE_BYTES = 3800;
+const formStateCookieName = (formId) => `gq-form-${formId}`;
+function encode(value) {
+	const bytes = new TextEncoder().encode(JSON.stringify(value));
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function decode(value) {
+	const binary = atob(value.replaceAll("-", "+").replaceAll("_", "/"));
+	return JSON.parse(new TextDecoder().decode(Uint8Array.from(binary, (char) => char.charCodeAt(0))));
+}
+const STATUSES = /* @__PURE__ */ new Set([
+	"sent",
+	"invalid",
+	"failed",
+	"verification",
+	"too-many"
+]);
+/** The Set-Cookie header that carries a form's outcome to the page. */
+function formStateCookie(state, options) {
+	const attempts = [
+		{
+			s: state.status,
+			e: state.errors,
+			m: state.messages,
+			v: state.values,
+			c: state.confirmation
+		},
+		{
+			s: state.status,
+			e: state.errors,
+			m: state.messages,
+			c: state.confirmation
+		},
+		{
+			s: state.status,
+			e: state.errors
+		}
+	];
+	let value = "";
+	for (const attempt of attempts) {
+		value = encode(attempt);
+		if (value.length <= MAX_COOKIE_BYTES) break;
+	}
+	return `${formStateCookieName(state.formId)}=${value}; Path=/; Max-Age=300; HttpOnly; SameSite=Lax` + (options.secure ? "; Secure" : "");
+}
+/** The Set-Cookie header that removes a form's outcome once the page has shown it. */
+function clearFormStateCookie(formId, options) {
+	return `${formStateCookieName(formId)}=; Path=/; Max-Age=0; HttpOnly; SameSite=Lax` + (options.secure ? "; Secure" : "");
+}
+function cookieValue(header, name) {
+	for (const part of (header ?? "").split(";")) {
+		const index = part.indexOf("=");
+		if (index > 0 && part.slice(0, index).trim() === name) return part.slice(index + 1).trim();
+	}
+	return null;
+}
+const stringRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string")) : {};
+const byField = (value) => Object.fromEntries(Object.entries(stringRecord(value)).flatMap(([key, each]) => /^\d+$/.test(key) ? [[Number(key), each]] : []));
+/**
+* A form's outcome for the page: present only on the redirect back after a
+* post to it (`?gq-form=<id>`), from its cookie. Null otherwise.
+*/
+function readFormState(request, formId) {
+	let url;
+	try {
+		url = new URL(request.url);
+	} catch {
+		return null;
+	}
+	if (url.searchParams.get("gq-form") !== String(formId)) return null;
+	const raw = cookieValue(request.cookie, formStateCookieName(formId));
+	if (!raw) return null;
+	let value;
+	try {
+		value = decode(raw);
+	} catch {
+		return null;
+	}
+	if (typeof value !== "object" || value === null) return null;
+	const record = value;
+	if (!STATUSES.has(record.s)) return null;
+	return {
+		formId,
+		status: record.s,
+		errors: byField(record.e),
+		messages: byField(record.m),
+		values: stringRecord(record.v),
+		...typeof record.c === "string" && record.c ? { confirmation: record.c } : {}
+	};
+}
+/** Where the handler sends the visitor back to: the page, marked for the form. */
+function formStateLocation(source, formId) {
+	const url = new URL(source, "https://site.invalid");
+	url.searchParams.set(FORM_STATE_PARAM, String(formId));
+	url.hash = `gq-form-${formId}`;
+	return `${url.pathname}${url.search}${url.hash}`;
+}
+//#endregion
+//#region frontend/src/forms/copy.ts
+const FORMS_COPY = {
+	en: {
+		required: "required",
+		requiredFields: "Fields marked with * are required.",
+		errorSummary: "There was a problem with your submission. Please review the fields below.",
+		errors: {
+			required: "This field is required.",
+			email: "Enter a valid email address.",
+			"email-mismatch": "The email addresses don't match.",
+			number: "Enter a number.",
+			range: "Enter a number in the allowed range.",
+			url: "Enter a valid web address, starting with https://.",
+			choice: "Choose one of the options.",
+			"too-long": "This is longer than allowed."
+		},
+		failed: "Your message couldn't be sent. Please try again later.",
+		verification: "We couldn't verify that you're not a robot. Please try again.",
+		tooMany: "Too many submissions. Please try again later.",
+		sent: "Thank you. Your message has been sent.",
+		unavailable: "This form isn't available.",
+		submit: "Submit",
+		privacyPolicy: "Privacy policy",
+		honeypot: "This field is for validation purposes and should be left unchanged.",
+		needsJavaScript: "This form needs JavaScript to verify you're not a robot."
+	},
+	"pt-PT": {
+		required: "obrigatório",
+		requiredFields: "Os campos assinalados com * são obrigatórios.",
+		errorSummary: "Houve um problema com o envio. Reveja os campos abaixo.",
+		errors: {
+			required: "Este campo é obrigatório.",
+			email: "Introduza um endereço de email válido.",
+			"email-mismatch": "Os endereços de email não coincidem.",
+			number: "Introduza um número.",
+			range: "Introduza um número dentro do intervalo permitido.",
+			url: "Introduza um endereço web válido, começado por https://.",
+			choice: "Escolha uma das opções.",
+			"too-long": "Excede o comprimento permitido."
+		},
+		failed: "Não foi possível enviar a sua mensagem. Tente novamente mais tarde.",
+		verification: "Não foi possível verificar que não é um robô. Tente novamente.",
+		tooMany: "Demasiados envios. Tente novamente mais tarde.",
+		sent: "Obrigado. A sua mensagem foi enviada.",
+		unavailable: "Este formulário não está disponível.",
+		submit: "Enviar",
+		privacyPolicy: "Política de privacidade",
+		honeypot: "Este campo serve para validação e deve ser deixado em branco.",
+		needsJavaScript: "Este formulário precisa de JavaScript para verificar que não é um robô."
+	}
+};
+/** The copy language for a page's `lang`: Portuguese for `pt*`, else English. */
+function formsCopyLanguage(language) {
+	return /^pt\b/i.test(language ?? "") ? "pt-PT" : "en";
+}
+//#endregion
+export { clearFormStateCookie as a, formStateLocation as c, FORM_STATE_PARAM as i, readFormState as l, formsCopyLanguage as n, formStateCookie as o, FORM_STATE_MAX_AGE as r, formStateCookieName as s, FORMS_COPY as t };

package/dist/descriptor-B-e7gHi1.d.ts

@@ -0,0 +1,143 @@
+//#region frontend/src/forms/descriptor.d.ts
+/** The Site path the forms handler answers under: `/gq/forms/<formId>`. */
+declare const FORMS_PATH = "/gq/forms";
+/** The descriptor's wire version; another version doesn't parse. */
+declare const FORM_DESCRIPTOR_SCHEMA = 1;
+/** The Gravity Forms block a Site's dispatcher routes to the renderer. */
+declare const GRAVITY_FORMS_BLOCK = "gravityforms/form";
+/** Field types this release renders and submits. */
+declare const SUPPORTED_FIELD_TYPES: readonly ["text", "textarea", "email", "phone", "number", "website", "select", "radio", "checkbox", "consent", "name", "hidden", "html", "section"];
+type FormFieldType = (typeof SUPPORTED_FIELD_TYPES)[number];
+interface FormChoice {
+  text: string;
+  value: string;
+  selected: boolean;
+}
+/** One HTML input of a field: Gravity Forms' `input_<field>` or `input_<field>_<n>`. */
+interface FormInput {
+  /** Gravity Forms' input id (`1`, `1.3`). */
+  id: string;
+  /** The name it is posted as. */
+  name: string;
+  label: string;
+  /** For a checkbox input, the choice's value. */
+  value?: string;
+  placeholder?: string;
+  /** Name sub-inputs: autocomplete token (given-name, family-name…). */
+  autocomplete?: string;
+}
+interface FormConsent {
+  /** The text next to the checkbox. */
+  checkboxLabel: string;
+  /** The consent's longer text, as plain text. */
+  description: string;
+  /** Gravity Forms' form revision the text belongs to; submitted with the consent. */
+  revisionId: string;
+}
+interface FormField {
+  id: number;
+  type: FormFieldType;
+  label: string;
+  /** Plain text. */
+  description: string;
+  required: boolean;
+  /** A hidden field is submitted, not shown; a `hidden` visibility field is too. */
+  visibility: "visible" | "hidden";
+  placeholder?: string;
+  maxLength?: number;
+  defaultValue?: string;
+  /** select, radio, checkbox. */
+  choices?: FormChoice[];
+  /** The inputs it posts (one for most fields). */
+  inputs: FormInput[];
+  /** consent only. */
+  consent?: FormConsent;
+  /** html only: sanitized by WordPress (wp_kses_post) on the CMS. */
+  content?: string;
+  /** number only. */
+  range?: {
+    min?: number;
+    max?: number;
+  };
+  /** The Site's CSS classes the editor set on the field. */
+  cssClass?: string;
+}
+type FormConfirmation = {
+  type: "message";
+  message: string;
+} | {
+  type: "redirect";
+  url: string;
+};
+/** Why a form can't be offered as it is; readiness reports each one as a failure. */
+type FormDiagnosticCode = "unavailable" | "unsupported-captcha" | "unsupported-file-upload" | "unsupported-payment" | "unsupported-multi-page" | "unsupported-field" | "unsupported-conditional-logic" | "requires-login";
+interface FormDiagnostic {
+  code: FormDiagnosticCode;
+  fieldId?: number;
+  /** Gravity Forms' field type, for a field diagnostic. */
+  type?: string;
+  message: string;
+}
+interface FormDescriptor {
+  schema: typeof FORM_DESCRIPTOR_SCHEMA;
+  id: number;
+  /** False when the form is missing, inactive or trashed: it renders as unavailable. */
+  available: boolean;
+  title: string;
+  /** Plain text. */
+  description: string;
+  submitLabel: string;
+  fields: FormField[];
+  /** Gravity Forms' honeypot input, when the form enables it. */
+  honeypot: {
+    name: string;
+  } | null;
+  /** The default confirmation. */
+  confirmation: FormConfirmation;
+  /** Set by the CMS for fields and settings this release doesn't support. */
+  diagnostics: FormDiagnostic[];
+}
+/**
+ * A descriptor as the CMS delivered it, keeping only the public fields above,
+ * or null when it isn't one. Fields of a type this release doesn't support
+ * are left out; the CMS reports them as diagnostics.
+ */
+declare function parseFormDescriptor(value: unknown): FormDescriptor | null;
+/**
+ * The descriptors a publication carries (the CMS's `getquickForms`, as JSON
+ * text or data), dropping any that don't parse. Undefined for no value.
+ */
+declare function parseFormDescriptors(value: unknown): FormDescriptor[] | undefined;
+/** The form a `gravityforms/form` block shows, from its attributes (`formId`). */
+declare function blockFormId(attributes: Record<string, unknown> | null | undefined): number | null;
+/** A form's descriptor among a publication's, or null. */
+declare function findForm(forms: readonly FormDescriptor[] | null | undefined, formId: number): FormDescriptor | null;
+/** The path a form posts to on the Site's own origin. */
+declare const formAction: (formId: number) => string;
+/** Everything readiness must fail for: an unavailable form, and each unsupported field or setting. */
+declare function formDiagnostics(descriptor: FormDescriptor): FormDiagnostic[];
+/** The spam controls a Site's forms use. */
+type FormSpamControl = "honeypot" | "turnstile";
+interface FormsReadiness {
+  ok: boolean;
+  forms: Array<{
+    id: number;
+    title: string;
+    ok: boolean;
+    diagnostics: FormDiagnostic[];
+    /** Gravity Forms' honeypot is enabled on the form. */
+    honeypot: boolean;
+  }>;
+  /** Controls the Site declares that no checked form uses (honeypot only). */
+  warnings: string[];
+}
+/**
+ * Readiness over the forms a Site's published content references: fails for
+ * any diagnostic. `spam` is the Site's declared controls; declaring the
+ * honeypot for a form that doesn't enable it is reported as a warning.
+ */
+declare function formsReadiness(descriptors: readonly FormDescriptor[], options?: {
+  spam?: readonly FormSpamControl[];
+}): FormsReadiness;
+//#endregion
+export { parseFormDescriptors as S, findForm as _, FormConsent as a, formsReadiness as b, FormDiagnosticCode as c, FormInput as d, FormSpamControl as f, blockFormId as g, SUPPORTED_FIELD_TYPES as h, FormConfirmation as i, FormField as l, GRAVITY_FORMS_BLOCK as m, FORM_DESCRIPTOR_SCHEMA as n, FormDescriptor as o, FormsReadiness as p, FormChoice as r, FormDiagnostic as s, FORMS_PATH as t, FormFieldType as u, formAction as v, parseFormDescriptor as x, formDiagnostics as y };