@getquick/content 0.3.1 → 0.4.0

package/dist/{dist-D4-CMkrf.js → dist-5jNKLmbn.js}

@@ -1574,7 +1574,18 @@ const NUMBERED_HEADERS = /* @__PURE__ */ new Set([
 	$.H5,
 	$.H6
 ]);
-TAG_NAMES.STYLE, TAG_NAMES.SCRIPT, TAG_NAMES.XMP, TAG_NAMES.IFRAME, TAG_NAMES.NOEMBED, TAG_NAMES.NOFRAMES, TAG_NAMES.PLAINTEXT;
+const UNESCAPED_TEXT = /* @__PURE__ */ new Set([
+	TAG_NAMES.STYLE,
+	TAG_NAMES.SCRIPT,
+	TAG_NAMES.XMP,
+	TAG_NAMES.IFRAME,
+	TAG_NAMES.NOEMBED,
+	TAG_NAMES.NOFRAMES,
+	TAG_NAMES.PLAINTEXT
+]);
+function hasUnescapedText(tn, scriptingEnabled) {
+	return UNESCAPED_TEXT.has(tn) || scriptingEnabled && tn === TAG_NAMES.NOSCRIPT;
+}
 //#endregion
 //#region node_modules/.pnpm/parse5@8.0.1/node_modules/parse5/dist/tokenizer/index.js
 var State;
@@ -7010,7 +7021,191 @@ function endTagInForeignContent(p, token) {
 		}
 	}
 }
-TAG_NAMES.AREA, TAG_NAMES.BASE, TAG_NAMES.BASEFONT, TAG_NAMES.BGSOUND, TAG_NAMES.BR, TAG_NAMES.COL, TAG_NAMES.EMBED, TAG_NAMES.FRAME, TAG_NAMES.HR, TAG_NAMES.IMG, TAG_NAMES.INPUT, TAG_NAMES.KEYGEN, TAG_NAMES.LINK, TAG_NAMES.META, TAG_NAMES.PARAM, TAG_NAMES.SOURCE, TAG_NAMES.TRACK, TAG_NAMES.WBR;
+//#endregion
+//#region node_modules/.pnpm/entities@8.1.0/node_modules/entities/dist/escape.js
+/**
+* Get the named reference for an XML special character or U+00A0.
+* @param char Code unit matched by one of the escape regexes.
+*/
+function getEscape(char) {
+	return char === 34 ? """ : char === 38 ? "&" : char === 39 ? "'" : char === 60 ? "<" : char === 62 ? ">" : " ";
+}
+/**
+* Escape `data` using `re`, mapping each matched character to its entity.
+* Every match is one UTF-16 code unit, so its index is `lastIndex - 1`.
+* @param re Global regex matching exactly the characters to escape
+*   (`"`, `&`, `'`, `<`, `>`, `\u00A0` at most).
+* @param data String to escape.
+*/
+function escapeWithRegex(re, data) {
+	re.lastIndex = 0;
+	if (!re.test(data)) return data;
+	let out = "";
+	let last = 0;
+	do {
+		const index = re.lastIndex - 1;
+		if (last !== index) out += data.substring(last, index);
+		const char = data.charCodeAt(index);
+		out += getEscape(char);
+		last = index + 1;
+	} while (re.test(data));
+	return out + data.substring(last);
+}
+const attributeEscapeRegex = /["&\u{A0}]/gu;
+/**
+* Encodes all characters that have to be escaped in HTML attributes,
+* following {@link https://html.spec.whatwg.org/multipage/parsing.html#escapingString}.
+* @param data String to escape.
+*/
+function escapeAttribute(data) {
+	return escapeWithRegex(attributeEscapeRegex, data);
+}
+const textEscapeRegex = /[&<>\u{A0}]/gu;
+/**
+* Encodes all characters that have to be escaped in HTML text,
+* following {@link https://html.spec.whatwg.org/multipage/parsing.html#escapingString}.
+* @param data String to escape.
+*/
+function escapeText(data) {
+	return escapeWithRegex(textEscapeRegex, data);
+}
+//#endregion
+//#region node_modules/.pnpm/parse5@8.0.1/node_modules/parse5/dist/serializer/index.js
+const VOID_ELEMENTS = /* @__PURE__ */ new Set([
+	TAG_NAMES.AREA,
+	TAG_NAMES.BASE,
+	TAG_NAMES.BASEFONT,
+	TAG_NAMES.BGSOUND,
+	TAG_NAMES.BR,
+	TAG_NAMES.COL,
+	TAG_NAMES.EMBED,
+	TAG_NAMES.FRAME,
+	TAG_NAMES.HR,
+	TAG_NAMES.IMG,
+	TAG_NAMES.INPUT,
+	TAG_NAMES.KEYGEN,
+	TAG_NAMES.LINK,
+	TAG_NAMES.META,
+	TAG_NAMES.PARAM,
+	TAG_NAMES.SOURCE,
+	TAG_NAMES.TRACK,
+	TAG_NAMES.WBR
+]);
+function isVoidElement(node, options) {
+	return options.treeAdapter.isElementNode(node) && options.treeAdapter.getNamespaceURI(node) === NS.HTML && VOID_ELEMENTS.has(options.treeAdapter.getTagName(node));
+}
+const defaultOpts = {
+	treeAdapter: defaultTreeAdapter,
+	scriptingEnabled: true
+};
+/**
+* Serializes an AST node to an HTML string.
+*
+* @example
+*
+* ```js
+* const parse5 = require('parse5');
+*
+* const document = parse5.parse('<!DOCTYPE html><html><head></head><body>Hi there!</body></html>');
+*
+* // Serializes a document.
+* const html = parse5.serialize(document);
+*
+* // Serializes the <html> element content.
+* const str = parse5.serialize(document.childNodes[1]);
+*
+* console.log(str); //> '<head></head><body>Hi there!</body>'
+* ```
+*
+* @param node Node to serialize.
+* @param options Serialization options.
+*/
+function serialize(node, options) {
+	const opts = {
+		...defaultOpts,
+		...options
+	};
+	if (isVoidElement(node, opts)) return "";
+	return serializeChildNodes(node, opts);
+}
+/**
+* Serializes an AST element node to an HTML string, including the element node.
+*
+* @example
+*
+* ```js
+* const parse5 = require('parse5');
+*
+* const document = parse5.parseFragment('<div>Hello, <b>world</b>!</div>');
+*
+* // Serializes the <div> element.
+* const str = parse5.serializeOuter(document.childNodes[0]);
+*
+* console.log(str); //> '<div>Hello, <b>world</b>!</div>'
+* ```
+*
+* @param node Node to serialize.
+* @param options Serialization options.
+*/
+function serializeOuter(node, options) {
+	return serializeNode(node, {
+		...defaultOpts,
+		...options
+	});
+}
+function serializeChildNodes(parentNode, options) {
+	let html = "";
+	const container = options.treeAdapter.isElementNode(parentNode) && options.treeAdapter.getTagName(parentNode) === TAG_NAMES.TEMPLATE && options.treeAdapter.getNamespaceURI(parentNode) === NS.HTML ? options.treeAdapter.getTemplateContent(parentNode) : parentNode;
+	const childNodes = options.treeAdapter.getChildNodes(container);
+	if (childNodes) for (const currentNode of childNodes) html += serializeNode(currentNode, options);
+	return html;
+}
+function serializeNode(node, options) {
+	if (options.treeAdapter.isElementNode(node)) return serializeElement(node, options);
+	if (options.treeAdapter.isTextNode(node)) return serializeTextNode(node, options);
+	if (options.treeAdapter.isCommentNode(node)) return serializeCommentNode(node, options);
+	if (options.treeAdapter.isDocumentTypeNode(node)) return serializeDocumentTypeNode(node, options);
+	return "";
+}
+function serializeElement(node, options) {
+	const tn = options.treeAdapter.getTagName(node);
+	return `<${tn}${serializeAttributes(node, options)}>${isVoidElement(node, options) ? "" : `${serializeChildNodes(node, options)}</${tn}>`}`;
+}
+function serializeAttributes(node, { treeAdapter }) {
+	let html = "";
+	for (const attr of treeAdapter.getAttrList(node)) {
+		html += " ";
+		if (attr.namespace) switch (attr.namespace) {
+			case NS.XML:
+				html += `xml:${attr.name}`;
+				break;
+			case NS.XMLNS:
+				if (attr.name !== "xmlns") html += "xmlns:";
+				html += attr.name;
+				break;
+			case NS.XLINK:
+				html += `xlink:${attr.name}`;
+				break;
+			default: html += `${attr.prefix}:${attr.name}`;
+		}
+		else html += attr.name;
+		html += `="${escapeAttribute(attr.value)}"`;
+	}
+	return html;
+}
+function serializeTextNode(node, options) {
+	const { treeAdapter } = options;
+	const content = treeAdapter.getTextNodeContent(node);
+	const parent = treeAdapter.getParentNode(node);
+	const parentTn = parent && treeAdapter.isElementNode(parent) && treeAdapter.getTagName(parent);
+	return parentTn && treeAdapter.getNamespaceURI(parent) === NS.HTML && hasUnescapedText(parentTn, options.scriptingEnabled) ? content : escapeText(content);
+}
+function serializeCommentNode(node, { treeAdapter }) {
+	return `<!--${treeAdapter.getCommentNodeContent(node)}-->`;
+}
+function serializeDocumentTypeNode(node, { treeAdapter }) {
+	return `<!DOCTYPE ${treeAdapter.getDocumentTypeNodeName(node)}>`;
+}
 //#endregion
 //#region node_modules/.pnpm/parse5@8.0.1/node_modules/parse5/dist/index.js
 /**
@@ -7044,4 +7239,4 @@ function parseFragment(fragmentContext, html, options) {
 	return parser.getFragment();
 }
 //#endregion
-export { parseFragment as n, parse as t };
+export { serializeOuter as i, parseFragment as n, serialize as r, parse as t };

package/dist/{embeds-p9SyGNZI.js → embeds-CJJemAmE.js}

@@ -308,7 +308,7 @@ function rewriteEmbeds(html, context) {
 			}
 			const tag = (pairedTag ?? voidTag).toLowerCase();
 			const attrs = attributesOf((pairedAttrs ?? voidAttrs) || "");
-			const reference = tag === "object" ? attrs.data : attrs.src;
+			const reference = tag === "object" ? attrs.data : attrs.src ?? attrs["data-src"];
 			if (reference === void 0) {
 				if (tag === "iframe" && attrs.srcdoc === void 0) return whole;
 				return block(tag, "inline", null, "unknown-host");
@@ -333,7 +333,7 @@ function rewriteEmbeds(html, context) {
 				...width !== void 0 ? { width } : {},
 				...height !== void 0 ? { height } : {},
 				attributes: rest,
-				decorative: /\bwp-block-getquick-design-video-hero__video\b/.test(attrs.class ?? "")
+				decorative: /\b(?:wp-block-getquick-design-video-hero__video|gqd-video-hero__video)\b/.test(attrs.class ?? "")
 			});
 		}),
 		placeholders,

package/dist/forms-astro.d.ts

@@ -0,0 +1,50 @@
+import { _ as findForm, g as blockFormId, l as FormField, m as GRAVITY_FORMS_BLOCK, o as FormDescriptor } from "./descriptor-B-e7gHi1.js";
+import { a as clearFormStateCookie, l as readFormState, n as FORM_STATE_PARAM, r as FormState } from "./state-CsMFLUUO.js";
+//#region frontend/src/forms/astro.d.ts
+/** LEGAL-1's links in the page's language (the chrome's `legal`), structurally. */
+export interface FormsLegal {
+  roles: ReadonlyArray<{
+    role: string;
+    url: string;
+    title?: string | null;
+  }>;
+}
+export interface GravityFormInput {
+  /** The form's descriptor from the publication (`findForm(page.forms, blockFormId(attributes))`). */
+  descriptor: FormDescriptor | null;
+  /** The page's path: the handler sends the visitor back to it. */
+  source: string;
+  /** The page's `lang` (BCP 47). */
+  language: string;
+  /** The page language's Legal Contract: the consent links to its privacy policy. */
+  legal?: FormsLegal | null;
+  /** The outcome on the redirect back after a post (`readFormState`). */
+  state?: FormState | null;
+  /** Turnstile's site key, when the Site uses Turnstile. */
+  turnstile?: {
+    siteKey: string;
+  } | null;
+  /** The block's `title` and `description` attributes: show the form's title and description. */
+  showTitle?: boolean;
+  showDescription?: boolean;
+  /** The heading level of the form's title (2 by default). */
+  headingLevel?: 2 | 3 | 4 | 5 | 6;
+}
+export declare function escapeHtml(value: string): string;
+/** The HTML id of an input (`gq-form-1-input_1_3`). */
+export declare const inputId: (formId: number, name: string) => string;
+/** Turnstile loads only once the visitor interacts with a form (CONSENT-1, CN-R3). */
+export declare const FORMS_TURNSTILE_SCRIPT = "(()=>{const s=\"https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit\";let l;const load=()=>l??=new Promise((ok,no)=>{const e=document.createElement(\"script\");e.src=s;e.async=true;e.onload=()=>ok(window.turnstile);e.onerror=no;document.head.append(e)});for(const f of document.querySelectorAll(\"form[data-gq-turnstile]\")){const start=()=>{if(f.dataset.gqTurnstileStarted)return;f.dataset.gqTurnstileStarted=\"1\";load().then(t=>t.render(f.querySelector(\"[data-gq-turnstile-widget]\"),{sitekey:f.dataset.gqTurnstile,\"response-field-name\":\"cf-turnstile-response\"}))};f.addEventListener(\"focusin\",start,{once:true});f.addEventListener(\"pointerdown\",start,{once:true})}})();";
+/**
+ * A `gravityforms/form` block's HTML. Without a descriptor (the CMS hasn't
+ * delivered one) or for an unavailable form, a status message instead of a
+ * form that can't be sent.
+ */
+export declare function renderGravityForm(input: GravityFormInput): string;
+/**
+ * A minimal default stylesheet (layout and states only). Sites usually style
+ * the `gq-form*` classes with their own tokens instead.
+ */
+export declare const FORMS_STYLES: string;
+//#endregion
+export { FORM_STATE_PARAM, type FormDescriptor, type FormField, type FormState, GRAVITY_FORMS_BLOCK, blockFormId, clearFormStateCookie, findForm, readFormState };

package/dist/forms-astro.js

@@ -0,0 +1,193 @@
+import { a as blockFormId, o as findForm, r as GRAVITY_FORMS_BLOCK, s as formAction } from "./descriptor-x8kHFQ79.js";
+import { a as clearFormStateCookie, i as FORM_STATE_PARAM, l as readFormState, n as formsCopyLanguage, t as FORMS_COPY } from "./copy-DLto_bWj.js";
+//#region frontend/src/forms/astro.ts
+function escapeHtml(value) {
+	return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&#39;");
+}
+/** Text without tags: Gravity Forms allows HTML in a consent's checkbox label. */
+const tagless = (value) => value.replace(/<[^>]*>/g, "").replace(/\s+/g, " ").trim();
+const attribute = (name, value) => value === null || value === void 0 ? "" : ` ${name}="${escapeHtml(value)}"`;
+/** The HTML id of an input (`gq-form-1-input_1_3`). */
+const inputId = (formId, name) => `gq-form-${formId}-${name}`;
+const AUTOCOMPLETE = {
+	email: "email",
+	phone: "tel",
+	website: "url"
+};
+const INPUT_TYPE = {
+	text: "text",
+	email: "email",
+	phone: "tel",
+	website: "url",
+	number: "text"
+};
+function errorText(field, context) {
+	const message = context.state?.messages[field.id];
+	if (message) return message;
+	const code = context.state?.errors[field.id];
+	return code ? context.copy.errors[code] : null;
+}
+/** The value to show: what the visitor typed, after a failed post, else the field's default. */
+/** What the visitor typed, when the outcome kept it; otherwise the form shows its defaults. */
+function typed(context) {
+	const state = context.state;
+	return state && state.status !== "sent" && Object.keys(state.values).length ? state.values : null;
+}
+function shown(name, field, context) {
+	const values = typed(context);
+	if (values) return values[name] ?? "";
+	return field.defaultValue ?? "";
+}
+function requiredMark(field, copy) {
+	return field.required ? ` <span class="gq-form__required" aria-hidden="true">*</span><span class="gq-form__visually-hidden"> (${escapeHtml(copy.required)})</span>` : "";
+}
+/** The description and error elements of a field, and the ids that describe its input. */
+function annotations(field, context) {
+	const base = `gq-form-${context.formId}-field-${field.id}`;
+	const error = errorText(field, context);
+	const ids = [];
+	let html = "";
+	if (field.description) {
+		ids.push(`${base}-description`);
+		html += `<p class="gq-form__description" id="${base}-description">${escapeHtml(field.description)}</p>`;
+	}
+	if (error) {
+		ids.push(`${base}-error`);
+		html += `<p class="gq-form__error" id="${base}-error">${escapeHtml(error)}</p>`;
+	}
+	return {
+		html,
+		describedBy: ids.length ? ids.join(" ") : null,
+		invalid: Boolean(error),
+		base
+	};
+}
+function inputAttributes(field, context, notes) {
+	return attribute("aria-describedby", notes.describedBy) + (notes.invalid ? " aria-invalid=\"true\"" : "") + (field.required ? " required aria-required=\"true\"" : "");
+}
+function fieldClass(field, invalid, extra = "") {
+	return `gq-form__field gq-form__field--${field.type}${extra}` + (invalid ? " gq-form__field--invalid" : "") + (field.cssClass ? ` ${field.cssClass}` : "");
+}
+function renderField(field, context) {
+	const { formId, copy } = context;
+	if (field.type === "html") return `<div class="gq-form__html${field.cssClass ? ` ${escapeHtml(field.cssClass)}` : ""}">${field.content ?? ""}</div>`;
+	if (field.type === "section") return `<div class="gq-form__section"><h3 class="gq-form__section-title">${escapeHtml(field.label)}</h3>` + (field.description ? `<p class="gq-form__description">${escapeHtml(field.description)}</p>` : "") + `</div>`;
+	if (field.type === "hidden" || field.visibility === "hidden") return field.inputs.map((input) => `<input type="hidden" name="${escapeHtml(input.name)}" value="${escapeHtml(field.defaultValue ?? "")}">`).join("");
+	const notes = annotations(field, context);
+	const first = field.inputs[0];
+	if (!first) return "";
+	const classes = escapeHtml(fieldClass(field, notes.invalid));
+	const label = escapeHtml(field.label) + requiredMark(field, copy);
+	if (field.type === "radio" || field.type === "checkbox") {
+		const options = (field.choices ?? []).map((choice, index) => {
+			const input = field.type === "checkbox" ? field.inputs[index] : first;
+			if (!input) return "";
+			const id = `${inputId(formId, input.name)}-${index}`;
+			const values = typed(context);
+			const checked = values ? values[input.name] === choice.value : choice.selected;
+			return `<div class="gq-form__choice"><input type="${field.type}" id="${id}" name="${escapeHtml(input.name)}" value="${escapeHtml(choice.value)}"${checked ? " checked" : ""}${attribute("aria-describedby", notes.describedBy)}${notes.invalid ? " aria-invalid=\"true\"" : ""}><label for="${id}">${escapeHtml(choice.text)}</label></div>`;
+		});
+		return `<fieldset class="${classes}"${field.required ? " aria-required=\"true\"" : ""}><legend class="gq-form__label">${label}</legend>` + notes.html + options.join("") + `</fieldset>`;
+	}
+	if (field.type === "consent") {
+		const id = inputId(formId, first.name);
+		const checked = shown(first.name, field, context) === "1";
+		const policy = context.privacyPolicy ? ` <a class="gq-form__policy" href="${escapeHtml(context.privacyPolicy.url)}">${escapeHtml(context.privacyPolicy.title)}</a>` : "";
+		const consentText = field.consent?.description ? `<p class="gq-form__description gq-form__consent-text" id="${notes.base}-text">${escapeHtml(field.consent.description)}</p>` : "";
+		const describedBy = [notes.describedBy, consentText ? `${notes.base}-text` : null].filter(Boolean).join(" ");
+		return `<fieldset class="${classes}"><legend class="gq-form__label">${label}</legend>` + notes.html + consentText + `<div class="gq-form__choice"><input type="checkbox" id="${id}" name="${escapeHtml(first.name)}" value="1"${checked ? " checked" : ""}${attribute("aria-describedby", describedBy || null)}${notes.invalid ? " aria-invalid=\"true\"" : ""}${field.required ? " required aria-required=\"true\"" : ""}><label for="${id}">${escapeHtml(tagless(field.consent?.checkboxLabel ?? "") || field.label)}</label>${policy}</div></fieldset>`;
+	}
+	if (field.type === "name" && field.inputs.length > 1) {
+		const parts = field.inputs.map((input) => {
+			const id = inputId(formId, input.name);
+			return `<div class="gq-form__name-part"><label for="${id}">${escapeHtml(input.label)}</label><input type="text" id="${id}" name="${escapeHtml(input.name)}" value="${escapeHtml(shown(input.name, field, context))}"${attribute("autocomplete", input.autocomplete)}${attribute("placeholder", input.placeholder)}${attribute("aria-describedby", notes.describedBy)}${notes.invalid ? " aria-invalid=\"true\"" : ""}></div>`;
+		});
+		return `<fieldset class="${classes}"${field.required ? " aria-required=\"true\"" : ""}><legend class="gq-form__label">${label}</legend>` + notes.html + parts.join("") + `</fieldset>`;
+	}
+	const id = inputId(formId, first.name);
+	const common = attribute("placeholder", field.placeholder) + (field.maxLength ? ` maxlength="${field.maxLength}"` : "") + inputAttributes(field, context, notes);
+	let control;
+	if (field.type === "textarea") control = `<textarea id="${id}" name="${escapeHtml(first.name)}" rows="6"${common}>${escapeHtml(shown(first.name, field, context))}</textarea>`;
+	else if (field.type === "select") {
+		const value = typed(context) ? shown(first.name, field, context) : null;
+		const choices = field.choices ?? [];
+		const options = (choices.some((choice) => choice.value === "") ? "" : `<option value=""${value === "" ? " selected" : ""}></option>`) + choices.map((choice) => {
+			const selected = value !== null ? value === choice.value : choice.selected;
+			return `<option value="${escapeHtml(choice.value)}"${selected ? " selected" : ""}>${escapeHtml(choice.text)}</option>`;
+		}).join("");
+		control = `<select id="${id}" name="${escapeHtml(first.name)}"${inputAttributes(field, context, notes)}>${options}</select>`;
+	} else {
+		const inputmode = field.type === "number" ? " inputmode=\"decimal\"" : "";
+		const autocomplete = field.type === "name" ? "name" : AUTOCOMPLETE[field.type] ?? first.autocomplete;
+		control = `<input type="${INPUT_TYPE[field.type] ?? "text"}" id="${id}" name="${escapeHtml(first.name)}" value="${escapeHtml(shown(first.name, field, context))}"${attribute("autocomplete", autocomplete)}${inputmode}${common}>`;
+	}
+	let confirmation = "";
+	const second = field.inputs[1];
+	if (field.type === "email" && second) {
+		const confirmId = inputId(formId, second.name);
+		confirmation = `<label class="gq-form__label" for="${confirmId}">${escapeHtml(second.label)}${requiredMark(field, copy)}</label><input type="email" id="${confirmId}" name="${escapeHtml(second.name)}" value="${escapeHtml(shown(second.name, field, context))}" autocomplete="email"${inputAttributes(field, context, notes)}>`;
+	}
+	return `<div class="${classes}"><label class="gq-form__label" for="${id}">${label}</label>` + notes.html + control + confirmation + `</div>`;
+}
+/** Turnstile loads only once the visitor interacts with a form (CONSENT-1, CN-R3). */
+const FORMS_TURNSTILE_SCRIPT = `(()=>{const s="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit";let l;const load=()=>l??=new Promise((ok,no)=>{const e=document.createElement("script");e.src=s;e.async=true;e.onload=()=>ok(window.turnstile);e.onerror=no;document.head.append(e)});for(const f of document.querySelectorAll("form[data-gq-turnstile]")){const start=()=>{if(f.dataset.gqTurnstileStarted)return;f.dataset.gqTurnstileStarted="1";load().then(t=>t.render(f.querySelector("[data-gq-turnstile-widget]"),{sitekey:f.dataset.gqTurnstile,"response-field-name":"cf-turnstile-response"}))};f.addEventListener("focusin",start,{once:true});f.addEventListener("pointerdown",start,{once:true})}})();`;
+/**
+* A `gravityforms/form` block's HTML. Without a descriptor (the CMS hasn't
+* delivered one) or for an unavailable form, a status message instead of a
+* form that can't be sent.
+*/
+function renderGravityForm(input) {
+	const copy = FORMS_COPY[formsCopyLanguage(input.language)];
+	const descriptor = input.descriptor;
+	if (!descriptor || !descriptor.available) return `<div class="gq-form gq-form--unavailable"${descriptor ? ` id="gq-form-${descriptor.id}"` : ""}><p class="gq-form__status" role="status">${escapeHtml(copy.unavailable)}</p></div>`;
+	const formId = descriptor.id;
+	const state = input.state && input.state.formId === formId ? input.state : null;
+	const policy = input.legal?.roles.find((role) => role.role === "privacy_policy");
+	const context = {
+		formId,
+		copy,
+		state,
+		privacyPolicy: policy ? {
+			url: policy.url,
+			title: policy.title || copy.privacyPolicy
+		} : null
+	};
+	const level = input.headingLevel ?? 2;
+	const titleId = `gq-form-${formId}-title`;
+	const heading = input.showTitle !== false && descriptor.title ? `<h${level} class="gq-form__title" id="${titleId}">${escapeHtml(descriptor.title)}</h${level}>` : "";
+	const description = input.showDescription !== false && descriptor.description ? `<p class="gq-form__intro">${escapeHtml(descriptor.description)}</p>` : "";
+	const open = `<div class="gq-form" id="gq-form-${formId}" data-gq-form="${formId}" lang="${escapeHtml(input.language)}">${heading}${description}`;
+	if (state?.status === "sent") return `${open}<div class="gq-form__status gq-form__status--sent" role="status">${(state.confirmation || (descriptor.confirmation.type === "message" ? descriptor.confirmation.message : "") || copy.sent).split(/\n{2,}/).map((paragraph) => `<p>${escapeHtml(paragraph.trim())}</p>`).join("")}</div></div>`;
+	let status = "";
+	if (state) {
+		const problems = descriptor.fields.flatMap((field) => {
+			const error = errorText(field, context);
+			if (!error) return [];
+			const target = field.inputs[0];
+			return [`<li><a href="#${!target ? `gq-form-${formId}` : field.type === "radio" || field.type === "checkbox" ? `${inputId(formId, target.name)}-0` : inputId(formId, target.name)}">${escapeHtml(field.label)}: ${escapeHtml(error)}</a></li>`];
+		});
+		status = `<div class="gq-form__errors" role="alert" id="gq-form-${formId}-errors" tabindex="-1"><p>${escapeHtml(state.status === "invalid" ? copy.errorSummary : state.status === "verification" ? copy.verification : state.status === "too-many" ? copy.tooMany : copy.failed)}</p>${problems.length ? `<ul>${problems.join("")}</ul>` : ""}</div>`;
+	}
+	const required = descriptor.fields.some((field) => field.required && field.visibility === "visible") ? `<p class="gq-form__legend">${escapeHtml(copy.requiredFields)}</p>` : "";
+	const honeypot = descriptor.honeypot ? `<div class="gq-form__hp" aria-hidden="true" style="position:absolute!important;left:-9999px!important;width:1px;height:1px;overflow:hidden"><label for="${inputId(formId, descriptor.honeypot.name)}">${escapeHtml(copy.honeypot)}</label><input type="text" id="${inputId(formId, descriptor.honeypot.name)}" name="${escapeHtml(descriptor.honeypot.name)}" value="" tabindex="-1" autocomplete="off"></div>` : "";
+	const turnstile = input.turnstile?.siteKey ? `<div class="gq-form__turnstile" data-gq-turnstile-widget></div><noscript><p class="gq-form__status">${escapeHtml(copy.needsJavaScript)}</p></noscript>` : "";
+	const script = input.turnstile?.siteKey ? `<script>${FORMS_TURNSTILE_SCRIPT}<\/script>` : "";
+	return open + status + `<form class="gq-form__form" method="post" action="${formAction(formId)}" novalidate` + (heading ? ` aria-labelledby="${titleId}"` : "") + attribute("data-gq-turnstile", input.turnstile?.siteKey || null) + `><input type="hidden" name="gq_source" value="${escapeHtml(input.source)}">` + required + honeypot + descriptor.fields.map((field) => renderField(field, context)).join("") + turnstile + `<div class="gq-form__actions"><button type="submit" class="gq-form__submit">${escapeHtml(descriptor.submitLabel || copy.submit)}</button></div></form></div>` + script;
+}
+/**
+* A minimal default stylesheet (layout and states only). Sites usually style
+* the `gq-form*` classes with their own tokens instead.
+*/
+const FORMS_STYLES = `
+.gq-form__visually-hidden{position:absolute!important;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}
+.gq-form__form{display:grid;gap:var(--gq-form-gap,1rem)}
+.gq-form__field{display:grid;gap:.375rem;border:0;margin:0;padding:0;min-width:0}
+.gq-form__field input:not([type=checkbox]):not([type=radio]),.gq-form__field textarea,.gq-form__field select{font:inherit;width:100%;padding:.5rem .75rem;border:1px solid var(--gq-form-border,#767676);border-radius:var(--gq-form-radius,.25rem)}
+.gq-form__field--invalid input,.gq-form__field--invalid textarea,.gq-form__field--invalid select{border-color:var(--gq-form-error,#b00020)}
+.gq-form__error,.gq-form__errors{color:var(--gq-form-error,#b00020)}
+.gq-form__errors{border:2px solid currentColor;padding:1rem}
+.gq-form__choice{display:flex;gap:.5rem;align-items:baseline}
+.gq-form :focus-visible{outline:3px solid var(--gq-form-focus,#1a73e8);outline-offset:2px}
+`.trim();
+//#endregion
+export { FORMS_STYLES, FORMS_TURNSTILE_SCRIPT, FORM_STATE_PARAM, GRAVITY_FORMS_BLOCK, blockFormId, clearFormStateCookie, escapeHtml, findForm, inputId, readFormState, renderGravityForm };

package/dist/forms-server.d.ts

@@ -0,0 +1,80 @@
+import { o as FormDescriptor, t as FORMS_PATH } from "./descriptor-B-e7gHi1.js";
+//#region frontend/src/forms/server.d.ts
+/** The largest form body accepted (bytes); larger posts are refused unread. */
+export declare const MAX_FORM_BYTES: number;
+/** Cloudflare's server-side Turnstile verification. */
+export declare const TURNSTILE_SITEVERIFY_URL = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
+/** The field Turnstile's widget posts its token in. */
+export declare const TURNSTILE_RESPONSE_FIELD = "cf-turnstile-response";
+/** A Workers Rate Limiting binding. */
+export interface FormsRateLimiter {
+  limit(options: {
+    key: string;
+  }): Promise<{
+    success: boolean;
+  }>;
+}
+/** The Worker bindings the handler reads. None is a Gravity Forms credential. */
+export interface FormsBindings {
+  /** Turnstile's secret key (a Worker secret), when the Site uses Turnstile. */
+  TURNSTILE_SECRET_KEY?: string;
+  /**
+   * A Cloudflare Access service token for the CMS's submissions path only,
+   * when the CMS is behind Access. Both or neither.
+   */
+  GQ_FORMS_ACCESS_CLIENT_ID?: string;
+  GQ_FORMS_ACCESS_CLIENT_SECRET?: string;
+  /** Rate limiting for form posts, keyed per client IP per request. */
+  FORMS_RATE_LIMITER?: FormsRateLimiter;
+}
+export interface FormLookup {
+  formId: number;
+  /** The page the form was posted from (a path on the Site). */
+  source: string;
+}
+export interface FormsServerConfig {
+  /** The CMS's origin (https://cms.example.com): Gravity Forms' REST API is under it. */
+  cmsOrigin: string;
+  /** WordPress's REST root, when not `<cmsOrigin>/wp-json`. */
+  restRoot?: string;
+  /**
+   * The form's descriptor as published with the page it was posted from
+   * (the content runtime's `publishedForm(source, formId)`), or null.
+   */
+  descriptor: (lookup: FormLookup) => Promise<FormDescriptor | null> | FormDescriptor | null;
+  /** The Site's spam controls. The honeypot is always applied when a form enables it. */
+  spam?: {
+    turnstile?: boolean;
+  };
+  bindings: () => FormsBindings | Promise<FormsBindings>;
+  /** The Site's public origin(s), when the Worker sees another (a proxy). */
+  siteOrigins?: readonly string[];
+  /** The page language for the handler's own messages (`pt-PT`, `en`). */
+  language?: string;
+  /** Milliseconds Gravity Forms and Turnstile have to answer (15 s). */
+  timeoutMs?: number;
+  fetch?: typeof globalThis.fetch;
+}
+/** HTML as text: tags dropped, paragraphs and breaks as new lines, entities decoded. */
+export declare function htmlText(html: string): string;
+/**
+ * The form endpoint. `handle` answers `POST /gq/forms/<id>` and null for any
+ * other path; `check` says what is configured, for readiness, never values.
+ */
+export declare function createFormsServer(config: FormsServerConfig): {
+  handle: (request: Request) => Promise<Response | null>;
+  check: () => Promise<{
+    cmsOrigin: string;
+    spam: {
+      honeypot: boolean;
+      turnstile: boolean;
+    };
+    turnstileSecret: boolean;
+    access: string;
+    rateLimit: boolean;
+    ready: boolean;
+  }>;
+};
+export type FormsServer = ReturnType<typeof createFormsServer>;
+//#endregion
+export { FORMS_PATH, type FormDescriptor };