@karibsen/eponyme 0.8.13 → 0.9.0-nightly.20260808

package/README.md

@@ -226,6 +226,43 @@ A phone field is also allowed in a public `form()`.
 
 Eponyme uses the Prisma client owned by your application. It does not create the connection or run migrations.
 
+Install Prisma 7 and its PostgreSQL driver adapter:
+
+```bash
+pnpm add @prisma/client@latest @prisma/adapter-pg@latest
+pnpm add --save-dev prisma@latest dotenv@latest
+```
+
+Generate the client outside `node_modules` and keep the connection URL in Prisma Config:
+
+```prisma
+// prisma/schema.prisma
+generator client {
+  provider = "prisma-client"
+  output   = "../generated/prisma"
+}
+
+datasource db {
+  provider = "postgresql"
+}
+```
+
+```ts
+// prisma.config.ts
+import 'dotenv/config'
+import { defineConfig, env } from 'prisma/config'
+
+export default defineConfig({
+  schema: 'prisma/schema.prisma',
+  migrations: {
+    path: 'prisma/migrations',
+  },
+  datasource: {
+    url: env('DATABASE_URL'),
+  },
+})
+```
+
 Export an initialized client from the path configured in `nuxt.config.ts`. Note the
 double tilde: `~~/` points at the project root, where `server/` lives, while `~/` points
 at the source directory (`app/` in Nuxt 4). A relative path such as
@@ -233,14 +270,44 @@ at the source directory (`app/` in Nuxt 4). A relative path such as
 
 ```ts
 // server/utils/prisma.ts
-import { PrismaClient } from '@prisma/client'
+import { PrismaPg } from '@prisma/adapter-pg'
+import { PrismaClient } from '../../generated/prisma/client'
+
+const prismaGlobal = globalThis as typeof globalThis & { prisma?: PrismaClient }
+
+function createPrismaClient() {
+  const connectionString = process.env.DATABASE_URL
 
-const prisma = new PrismaClient()
+  if (!connectionString)
+    throw new Error('DATABASE_URL is required to initialise Prisma.')
+
+  return new PrismaClient({
+    adapter: new PrismaPg({ connectionString }),
+  })
+}
+
+const prisma = prismaGlobal.prisma ?? createPrismaClient()
+
+if (process.env.NODE_ENV !== 'production')
+  prismaGlobal.prisma = prisma
 
 export default prisma
 ```
 
-Add the required models to your Prisma schema:
+Install the published Eponyme CLI, then let it add the required models and immutable migration
+history to your application:
+
+```bash
+pnpm add --save-dev @eponyme/cli
+pnpm exec eponyme init
+pnpm prisma migrate deploy
+pnpm prisma generate
+pnpm exec eponyme check --client server/utils/prisma.ts
+```
+
+`eponyme init` only writes the host Prisma schema and migration files; it never connects to the
+database. `eponyme check` is read-only and verifies the generated PrismaClient, PostgreSQL tables,
+columns and the Eponyme schema version. The generated models are shown below for reference:
 
 ```prisma
 model Eponyme {
@@ -344,12 +411,27 @@ model EponymeFormSubmission {
   @@index([formName, createdAt])
   @@map("eponyme_form_submissions")
 }
-```
 
-Run the migration with the workflow used by your application.
+model EponymeRateLimit {
+  key       String   @id
+  count     Int
+  expiresAt DateTime
+
+  @@index([expiresAt])
+  @@map("eponyme_rate_limits")
+}
+
+model EponymeSchema {
+  key       String   @id @default("eponyme")
+  version   Int
+  updatedAt DateTime @updatedAt
+
+  @@map("_eponyme_schema")
+}
+```
 
-Upgrading from 0.1.1 requires one migration: `Eponyme.deletedAt`, which backs the trash.
-Deleting a collection entry no longer destroys it.
+Keep the generated migrations in source control. On an upgrade, run `eponyme init` again, inspect
+the newly copied migrations, deploy them, regenerate Prisma and finish with `eponyme check`.
 
 The playground includes the same models in `playground/prisma/schema.prisma`. Copy `playground/.env.example` to `playground/.env`, set `DATABASE_URL`, then run:
 

package/dist/eponyme.d.mts

@@ -1,7 +1,7 @@
 import { EponymeConfig, EponymeSchema, EponymeCollectionOptions, CollectionSlugField, EponymeCollectionDefinition, EponymeFormSchema, EponymeFormOptions, EponymeFormDefinition } from '../dist/runtime/types/index.js';
-export { ArrayFieldDefinition, ArrayFieldOptions, ArrayItemDefinition, ArrayItemFieldDefinition, ArrayItemSchema, ArrayItemValue, BooleanFieldDefinition, BooleanFieldOptions, CheckboxGroupFieldDefinition, CheckboxGroupFieldOptions, CollectionSlugField, ColorFieldDefinition, ColorFieldOptions, DateFieldDefinition, DateFieldOptions, EmailFieldDefinition, EmailFieldOptions, EponymeAuthSession, EponymeAuthUser, EponymeCollectionDataByName, EponymeCollectionDefinition, EponymeCollectionDefinitionBase, EponymeCollectionName, EponymeCollectionOptions, EponymeConfig, EponymeData, EponymeDataByName, EponymeFormDataByName, EponymeFormDefinition, EponymeFormDefinitionBase, EponymeFormFieldDefinition, EponymeFormMode, EponymeFormName, EponymeFormOptions, EponymeFormSchema, EponymeManagedUserResult, EponymeName, EponymeRole, EponymeSchema, EponymeVariableDefinition, EponymeVariableSummary, EponymeVariableValue, EponymeVariables, FieldDefinition, FieldValidationResult, FieldValidator, FieldVisibilityCondition, ImageFieldDefinition, ImageFieldOptions, MediaPlayerFieldDefinition, MediaPlayerFieldOptions, MediaPlayerProvider, MediaPlayerValue, NumberFieldDefinition, NumberFieldOptions, RadioFieldDefinition, RadioFieldOptions, RichTextFieldDefinition, RichTextFieldOptions, SectionFieldDefinition, SectionFieldOptions, SectionItemFieldDefinition, SectionItemValue, SectionSchema, SectionValue, SelectFieldDefinition, SelectFieldOptions, SelectOption, SlugFieldDefinition, SlugFieldOptions, StringFieldDefinition, StringFieldOptions, TabDefinition, TabFieldDefinition, TabFieldOptions, TabsSchema, TabsValue, TextareaFieldDefinition, TextareaFieldOptions, TodayDateDefault, UrlFieldDefinition, UrlFieldOptions, UrlType, UrlValue } from '../dist/runtime/types/index.js';
+export { ArrayFieldDefinition, ArrayFieldOptions, ArrayItemDefinition, ArrayItemFieldDefinition, ArrayItemSchema, ArrayItemValue, BooleanFieldDefinition, BooleanFieldOptions, CheckboxGroupFieldDefinition, CheckboxGroupFieldOptions, CollectionSlugField, ColorFieldDefinition, ColorFieldOptions, DateFieldDefinition, DateFieldOptions, DateTimeFieldDefinition, DateTimeFieldOptions, DurationFieldDefinition, DurationFieldOptions, DurationInput, EmailFieldDefinition, EmailFieldOptions, EponymeAuthSession, EponymeAuthUser, EponymeCollectionDataByName, EponymeCollectionDefinition, EponymeCollectionDefinitionBase, EponymeCollectionName, EponymeCollectionOptions, EponymeConfig, EponymeData, EponymeDataByName, EponymeFormDataByName, EponymeFormDefinition, EponymeFormDefinitionBase, EponymeFormFieldDefinition, EponymeFormMode, EponymeFormName, EponymeFormOptions, EponymeFormSchema, EponymeManagedUserResult, EponymeName, EponymeRole, EponymeSchema, EponymeVariableDefinition, EponymeVariableSummary, EponymeVariableValue, EponymeVariables, FieldDefinition, FieldValidationResult, FieldValidator, FieldVisibilityCondition, ImageFieldDefinition, ImageFieldOptions, MediaPlayerFieldDefinition, MediaPlayerFieldOptions, MediaPlayerProvider, MediaPlayerValue, NormalizedDurationFieldOptions, NumberFieldDefinition, NumberFieldOptions, RadioFieldDefinition, RadioFieldOptions, RichTextFieldDefinition, RichTextFieldOptions, SectionFieldDefinition, SectionFieldOptions, SectionItemFieldDefinition, SectionItemValue, SectionSchema, SectionValue, SelectFieldDefinition, SelectFieldOptions, SelectOption, SlugFieldDefinition, SlugFieldOptions, StringFieldDefinition, StringFieldOptions, TabDefinition, TabFieldDefinition, TabFieldOptions, TabsSchema, TabsValue, TextareaFieldDefinition, TextareaFieldOptions, TodayDateDefault, UrlFieldDefinition, UrlFieldOptions, UrlType, UrlValue } from '../dist/runtime/types/index.js';
 import { EponymeVariables } from '../dist/runtime/types/variables.js';
-export { field, today } from '../dist/runtime/fields/index.js';
+export { field, toMs, today } from '../dist/runtime/fields/index.js';
 export { EPONYME_ROLES, canEditEponyme, isEponymeRole } from '../dist/runtime/types/auth.js';
 export { eponymeMediaEmbedUrl, eponymeMediaThumbnailUrl, parseEponymeMediaUrl } from '../dist/runtime/utils/media-player.js';
 

package/dist/eponyme.mjs

@@ -1,4 +1,4 @@
-export { field, today } from '../dist/runtime/fields/index.js';
+export { field, toMs, today } from '../dist/runtime/fields/index.js';
 export { EPONYME_ROLES, canEditEponyme, isEponymeRole } from '../dist/runtime/types/auth.js';
 export { eponymeMediaEmbedUrl, eponymeMediaThumbnailUrl, parseEponymeMediaUrl } from '../dist/runtime/utils/media-player.js';
 
@@ -15,14 +15,19 @@ function collection(options) {
 const PUBLIC_FIELD_TYPES = ["string", "textarea", "email", "phone", "url", "number", "boolean", "select", "radio", "checkboxGroup"];
 const DEFAULT_HONEYPOT = "_eponyme_hp";
 const DEFAULT_MAX_BODY_BYTES = 64 * 1024;
+const DEFAULT_MAX_STORED_SUBMISSIONS = 1e4;
+const DEFAULT_RETENTION_DAYS = 365;
 function form(options) {
   for (const [name, definition] of Object.entries(options.fields)) {
     const type = definition.type;
     if (!PUBLIC_FIELD_TYPES.includes(type))
       throw new TypeError(`[Eponyme] Form field "${name}" uses field.${type}(), which is not available in a public form. Use one of: ${PUBLIC_FIELD_TYPES.join(", ")}.`);
   }
+  const mode = options.submission?.mode ?? "custom";
+  const maxStored = positiveIntegerOrFalse(options.submission?.maxStored, DEFAULT_MAX_STORED_SUBMISSIONS, "submission.maxStored");
+  const retentionDays = positiveIntegerOrFalse(options.submission?.retentionDays, DEFAULT_RETENTION_DAYS, "submission.retentionDays");
   const honeypot = options.honeypot === void 0 ? DEFAULT_HONEYPOT : options.honeypot;
-  if (honeypot && honeypot in options.fields)
+  if (honeypot && Object.hasOwn(options.fields, honeypot))
     throw new TypeError(`[Eponyme] Form honeypot "${honeypot}" collides with a declared field. Rename the field or set another honeypot.`);
   return {
     __eponymeForm: true,
@@ -30,11 +35,23 @@ function form(options) {
     description: options.description,
     fields: options.fields,
     // Storing a submission has to be an explicit decision, so `custom` is the default.
-    submission: { mode: options.submission?.mode ?? "custom" },
+    submission: {
+      mode,
+      store: mode === "managed" || (options.submission?.store ?? false),
+      maxStored,
+      retentionDays
+    },
     honeypot,
     maxBodyBytes: options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES
   };
 }
+function positiveIntegerOrFalse(value, fallback, name) {
+  const resolved = value ?? fallback;
+  if (resolved === false) return false;
+  if (!Number.isSafeInteger(resolved) || resolved < 1)
+    throw new TypeError(`[Eponyme] Form ${name} must be a positive integer or false.`);
+  return resolved;
+}
 
 function defineEponymeVariables(variables) {
   return variables;

package/dist/module.d.mts

@@ -1,9 +1,11 @@
 import * as _nuxt_schema from '@nuxt/schema';
+import { EponymeLocaleDefinition } from '../dist/runtime/locales/index.js';
+export { EponymeLocaleDefinition, EponymeMessageKey } from '../dist/runtime/locales/index.js';
 export { collection, defineEponymeConfig, defineEponymeVariables, form } from './eponyme.mjs';
-export { field, today } from '../dist/runtime/fields/index.js';
+export { field, toMs, today } from '../dist/runtime/fields/index.js';
 export { EPONYME_ROLES, canEditEponyme, isEponymeRole } from '../dist/runtime/types/auth.js';
 export { eponymeMediaEmbedUrl, eponymeMediaThumbnailUrl, parseEponymeMediaUrl } from '../dist/runtime/utils/media-player.js';
-export { ArrayFieldDefinition, ArrayFieldOptions, ArrayItemDefinition, ArrayItemFieldDefinition, ArrayItemSchema, ArrayItemValue, BooleanFieldDefinition, BooleanFieldOptions, CheckboxGroupFieldDefinition, CheckboxGroupFieldOptions, CollectionSlugField, ColorFieldDefinition, ColorFieldOptions, DateFieldDefinition, DateFieldOptions, EmailFieldDefinition, EmailFieldOptions, EponymeAuthSession, EponymeAuthUser, EponymeCollectionDataByName, EponymeCollectionDefinition, EponymeCollectionDefinitionBase, EponymeCollectionName, EponymeCollectionOptions, EponymeConfig, EponymeData, EponymeDataByName, EponymeFormDataByName, EponymeFormDefinition, EponymeFormDefinitionBase, EponymeFormFieldDefinition, EponymeFormMode, EponymeFormName, EponymeFormOptions, EponymeFormSchema, EponymeManagedUserResult, EponymeName, EponymeRole, EponymeSchema, EponymeVariableDefinition, EponymeVariableSummary, EponymeVariableValue, EponymeVariables, FieldDefinition, FieldValidationResult, FieldValidator, FieldVisibilityCondition, ImageFieldDefinition, ImageFieldOptions, MediaPlayerFieldDefinition, MediaPlayerFieldOptions, MediaPlayerProvider, MediaPlayerValue, NumberFieldDefinition, NumberFieldOptions, RadioFieldDefinition, RadioFieldOptions, RichTextFieldDefinition, RichTextFieldOptions, SectionFieldDefinition, SectionFieldOptions, SectionItemFieldDefinition, SectionItemValue, SectionSchema, SectionValue, SelectFieldDefinition, SelectFieldOptions, SelectOption, SlugFieldDefinition, SlugFieldOptions, StringFieldDefinition, StringFieldOptions, TabDefinition, TabFieldDefinition, TabFieldOptions, TabsSchema, TabsValue, TextareaFieldDefinition, TextareaFieldOptions, TodayDateDefault, UrlFieldDefinition, UrlFieldOptions, UrlType, UrlValue } from '../dist/runtime/types/index.js';
+export { ArrayFieldDefinition, ArrayFieldOptions, ArrayItemDefinition, ArrayItemFieldDefinition, ArrayItemSchema, ArrayItemValue, BooleanFieldDefinition, BooleanFieldOptions, CheckboxGroupFieldDefinition, CheckboxGroupFieldOptions, CollectionSlugField, ColorFieldDefinition, ColorFieldOptions, DateFieldDefinition, DateFieldOptions, DateTimeFieldDefinition, DateTimeFieldOptions, DurationFieldDefinition, DurationFieldOptions, DurationInput, EmailFieldDefinition, EmailFieldOptions, EponymeAuthSession, EponymeAuthUser, EponymeCollectionDataByName, EponymeCollectionDefinition, EponymeCollectionDefinitionBase, EponymeCollectionName, EponymeCollectionOptions, EponymeConfig, EponymeData, EponymeDataByName, EponymeFormDataByName, EponymeFormDefinition, EponymeFormDefinitionBase, EponymeFormFieldDefinition, EponymeFormMode, EponymeFormName, EponymeFormOptions, EponymeFormSchema, EponymeManagedUserResult, EponymeName, EponymeRole, EponymeSchema, EponymeVariableDefinition, EponymeVariableSummary, EponymeVariableValue, EponymeVariables, FieldDefinition, FieldValidationResult, FieldValidator, FieldVisibilityCondition, ImageFieldDefinition, ImageFieldOptions, MediaPlayerFieldDefinition, MediaPlayerFieldOptions, MediaPlayerProvider, MediaPlayerValue, NormalizedDurationFieldOptions, NumberFieldDefinition, NumberFieldOptions, RadioFieldDefinition, RadioFieldOptions, RichTextFieldDefinition, RichTextFieldOptions, SectionFieldDefinition, SectionFieldOptions, SectionItemFieldDefinition, SectionItemValue, SectionSchema, SectionValue, SelectFieldDefinition, SelectFieldOptions, SelectOption, SlugFieldDefinition, SlugFieldOptions, StringFieldDefinition, StringFieldOptions, TabDefinition, TabFieldDefinition, TabFieldOptions, TabsSchema, TabsValue, TextareaFieldDefinition, TextareaFieldOptions, TodayDateDefault, UrlFieldDefinition, UrlFieldOptions, UrlType, UrlValue } from '../dist/runtime/types/index.js';
 import '../dist/runtime/types/variables.js';
 
 /**
@@ -88,16 +90,63 @@ interface ModuleOptions {
          */
         sessionDurationDays?: number;
     };
+    rateLimits?: {
+        /** Login attempts per client address and minute. @default 10 */
+        loginPerIp?: number;
+        /** Login attempts across the deployment and minute. @default 300 */
+        loginGlobal?: number;
+        /** Failed login attempts per account and 15 minutes. @default 5 */
+        loginAccountFailures?: number;
+        /** Managed-form submissions per client address, form and minute. @default 5 */
+        formPerIp?: number;
+        /** Managed-form submissions per form across the deployment and minute. @default 100 */
+        formGlobal?: number;
+    };
     /**
-     * How long a server instance may reuse content it has already read, in seconds. `0` disables it.
+     * How long content already read may be reused, in seconds. `0` disables it.
      *
      * @remarks
-     * A save only clears the instance that served it, so this bounds how long another instance can
-     * still answer with the previous content.
+     * Without `cacheStorage`, the cache is per instance and a save only clears the instance that
+     * served it — so this also bounds how long another instance can still answer with the previous
+     * content. With `cacheStorage`, an invalidation reaches every instance and this is simply how
+     * long a cached read lives.
      *
      * @default 5
      */
     cacheSeconds?: number;
+    /**
+     * Name of a Nitro storage mount the content cache is shared through, typically Redis.
+     * Left out, the cache stays in the memory of each instance.
+     *
+     * @remarks
+     * This is what makes a publication visible everywhere at once: a shared mount is a cache a
+     * write can actually invalidate across instances, which an in-process map cannot be.
+     *
+     * A small in-process tier is kept in front of it either way — it coalesces the concurrent
+     * reads of one render and answers repeats without a network hop — so an instance can still
+     * miss an invalidation for up to a second.
+     *
+     * The mount is declared by the application, and the driver's `base` is what the keys are
+     * prefixed with:
+     *
+     * ```ts
+     * // nuxt.config.ts
+     * nitro: {
+     *   storage: {
+     *     eponyme: { driver: 'redis', url: process.env.REDIS_URL, base: 'eponyme' },
+     *   },
+     * },
+     * eponyme: { cacheStorage: 'eponyme', cacheSeconds: 60 },
+     * ```
+     *
+     * Keys then read `eponyme:row:<name>` and `eponyme:rows:<collection>:<version>`.
+     *
+     * `unstorage` ships the Redis driver; the application adds `ioredis` itself, so a deployment
+     * that caches in memory does not carry a Redis client it never builds.
+     *
+     * @see https://nitro.build/guide/storage
+     */
+    cacheStorage?: string;
     /**
      * Whether the filterable index is rebuilt at startup when the configuration that produced
      * it has changed.
@@ -135,6 +184,31 @@ interface ModuleOptions {
      * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cache-Control
      */
     cdnCacheSeconds?: number;
+    /**
+     * Language of the dashboard interface, resolved once at build time.
+     *
+     * @remarks
+     * One language per build: the catalogue is merged over English and inlined, so a key the
+     * locale does not carry falls back to English rather than showing raw. This never touches
+     * content, schema labels, or a host's own `@nuxtjs/i18n` setup.
+     *
+     * Catalogues live in `@eponyme/locale`, one subpath per language, and each export is a
+     * function so it can take overrides. Passing the function itself instead of calling it is
+     * refused at setup with a message saying so.
+     *
+     * @default undefined — English
+     * @example
+     * ```ts
+     * import { fr } from '@eponyme/locale/fr'
+     *
+     * export default defineNuxtConfig({
+     *   eponyme: {
+     *     locale: fr({ 'array.add': 'Ajouter un bloc' }),
+     *   },
+     * })
+     * ```
+     */
+    locale?: EponymeLocaleDefinition;
 }
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;
 

package/dist/module.json

@@ -4,7 +4,7 @@
   "compatibility": {
     "nuxt": ">=4.0.0"
   },
-  "version": "0.8.13",
+  "version": "0.9.0-nightly.20260808",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -1,8 +1,42 @@
-import { defineNuxtModule, useLogger, createResolver, findPath, addImports, addImportsDir, addServerImports, addRouteMiddleware, extendViteConfig, addTypeTemplate, addServerHandler, addServerPlugin, hasNuxtModule, hasNuxtModuleCompatibility, getNuxtModuleVersion } from '@nuxt/kit';
+import { defineNuxtModule, useLogger, createResolver, addTemplate, addTypeTemplate, addPlugin, findPath, addImports, addImportsDir, addComponent, addServerImports, addRouteMiddleware, extendViteConfig, addServerHandler, addServerPlugin, hasNuxtModule, hasNuxtModuleCompatibility, getNuxtModuleVersion } from '@nuxt/kit';
 import pc from 'picocolors';
 import tailwindcss from '@tailwindcss/vite';
+import { EPONYME_DEFAULT_LOCALE, eponymeEnglishMessages } from '../dist/runtime/locales/index.js';
 import { resolve } from 'pathe';
 import { tagPreviewPathRoutes } from '../dist/runtime/utils/cache-tags.js';
+import { EPONYME_THEME_BOOTSTRAP } from '../dist/runtime/utils/eponyme-theme.js';
+
+function resolveEponymeLocale(locale, prefix = "[Eponyme]") {
+  if (locale === void 0 || locale === null) return { ...EPONYME_DEFAULT_LOCALE, missing: [] };
+  if (typeof locale === "function") {
+    throw new TypeError(
+      `${prefix} eponyme.locale expects the result of a call, not the function itself.
+Write \`locale: fr()\` rather than \`locale: fr\`.`
+    );
+  }
+  const candidate = locale;
+  if (typeof locale !== "object" || typeof candidate.code !== "string" || !candidate.code || typeof candidate.messages !== "object" || !candidate.messages) {
+    throw new TypeError(
+      `${prefix} eponyme.locale must be a locale definition carrying a \`code\` and \`messages\`.
+Import one from @eponyme/locale, for example \`import { fr } from '@eponyme/locale/fr'\`.`
+    );
+  }
+  const messages = candidate.messages;
+  return {
+    ...candidate,
+    messages: { ...eponymeEnglishMessages, ...messages },
+    missing: Object.keys(eponymeEnglishMessages).filter((key) => !(key in messages))
+  };
+}
+function renderEponymeLocaleModule(locale, translatorPath) {
+  return [
+    `import { createEponymeTranslator } from ${JSON.stringify(translatorPath)}`,
+    `export const locale = ${JSON.stringify({ code: locale.code, dir: locale.dir ?? "ltr" })}`,
+    `const messages = ${JSON.stringify(locale.messages, null, 2)}`,
+    `export const t = createEponymeTranslator(messages${locale.plural ? `, ${locale.plural.toString()}` : ""})`,
+    ""
+  ].join("\n");
+}
 
 const MINIMUM_NUXT_UI = "4.10.0";
 const CLIENT_DEPENDENCIES = [
@@ -33,6 +67,12 @@ async function warnOnIncompatibleNuxtUi(nuxt, logger) {
   build or misbehave somewhere with no obvious link back to this warning.`
   );
 }
+function positiveInteger(value, fallback, name) {
+  const resolved = value ?? fallback;
+  if (!Number.isSafeInteger(resolved) || resolved < 1)
+    throw new TypeError(`${pc.red("[Eponyme]")} ${name} must be a positive integer.`);
+  return resolved;
+}
 const module$1 = defineNuxtModule({
   meta: {
     name: "@karibsen/eponyme",
@@ -49,6 +89,13 @@ const module$1 = defineNuxtModule({
     auth: {
       sessionDurationDays: 7
     },
+    rateLimits: {
+      loginPerIp: 10,
+      loginGlobal: 300,
+      loginAccountFailures: 5,
+      formPerIp: 5,
+      formGlobal: 100
+    },
     cacheSeconds: 5,
     autoReindex: true,
     browserCacheSeconds: 30,
@@ -62,6 +109,7 @@ const module$1 = defineNuxtModule({
           icons: [
             "mingcute:history-anticlockwise-line",
             "mingcute:eye-2-line",
+            "mingcute:eye-close-line",
             "mingcute:layout-leftbar-close-line",
             "mingcute:layout-leftbar-open-line",
             "mingcute:down-small-line",
@@ -112,12 +160,51 @@ const module$1 = defineNuxtModule({
     nuxt.options.runtimeConfig.eponymeAuth = {
       sessionDurationDays: options.auth?.sessionDurationDays ?? 7
     };
-    nuxt.options.runtimeConfig.eponymeContent = {
+    nuxt.options.runtimeConfig.eponymeRateLimits = {
+      loginPerIp: positiveInteger(options.rateLimits?.loginPerIp, 10, "eponyme.rateLimits.loginPerIp"),
+      loginGlobal: positiveInteger(options.rateLimits?.loginGlobal, 300, "eponyme.rateLimits.loginGlobal"),
+      loginAccountFailures: positiveInteger(options.rateLimits?.loginAccountFailures, 5, "eponyme.rateLimits.loginAccountFailures"),
+      formPerIp: positiveInteger(options.rateLimits?.formPerIp, 5, "eponyme.rateLimits.formPerIp"),
+      formGlobal: positiveInteger(options.rateLimits?.formGlobal, 100, "eponyme.rateLimits.formGlobal")
+    };
+    const eponymeContent = {
       cacheSeconds: options.cacheSeconds ?? 5,
+      cacheStorage: options.cacheStorage?.trim() || "",
       autoReindex: options.autoReindex ?? true,
       browserCacheSeconds: options.browserCacheSeconds ?? 30,
       cdnCacheSeconds: options.cdnCacheSeconds ?? 300
     };
+    nuxt.options.runtimeConfig.eponymeContent = eponymeContent;
+    const locale = resolveEponymeLocale(options.locale, pc.red("[Eponyme]"));
+    if (locale.missing.length) {
+      logger.warn(
+        `The \`${locale.code}\` catalogue is missing ${locale.missing.length} key${locale.missing.length > 1 ? "s" : ""}, which fall back to English:
+` + locale.missing.map((key) => `  - ${key}`).join("\n")
+      );
+    }
+    const translatorPath = await resolver.resolvePath("./runtime/utils/translate");
+    const localeTemplate = addTemplate({
+      filename: "eponyme-locale.mjs",
+      write: true,
+      getContents: () => renderEponymeLocaleModule(locale, translatorPath)
+    });
+    nuxt.options.alias["#eponyme/locale"] = localeTemplate.dst;
+    addTypeTemplate({
+      filename: "types/eponyme-locale.d.ts",
+      getContents: () => `declare module '#eponyme/locale' {
+  import type { EponymeLocaleDefinition, EponymeMessageKey } from ${JSON.stringify(resolver.resolve("./runtime/locales"))}
+  import type { EponymeTranslateParams } from ${JSON.stringify(resolver.resolve("./runtime/utils/translate"))}
+  export const locale: EponymeLocaleDefinition
+  export function t(key: EponymeMessageKey, params?: EponymeTranslateParams): string
+}
+`
+    });
+    nuxt.options.app.head.script ??= [];
+    nuxt.options.app.head.script.unshift({
+      key: "eponyme-theme",
+      innerHTML: EPONYME_THEME_BOOTSTRAP
+    });
+    addPlugin(resolver.resolve("./runtime/plugins/eponyme-theme"));
     const tagged = tagPreviewPathRoutes(options.previewPaths ?? {}, nuxt.options.routeRules ??= {});
     if (tagged.length) {
       const width = Math.max(...tagged.map(({ route }) => route.length));
@@ -152,10 +239,15 @@ Note that '~/' points at ${nuxt.options.srcDir}, so a server module needs '~~/'.
       { name: "eponymeMediaThumbnailUrl", from: resolver.resolve("./runtime/utils/media-player") }
     ]);
     addImportsDir(resolver.resolve("./runtime/composables"));
+    addComponent({ name: "EponymeRichText", filePath: resolver.resolve("./runtime/components/EponymeRichText") });
     addServerImports([
       { name: "getEponymeSitemapEntries", from: resolver.resolve("./runtime/server/utils/eponyme-sitemap") },
       { name: "reindexEponymeEntries", from: resolver.resolve("./runtime/server/utils/eponyme-reindex") },
+      { name: "runEponymeSchedule", from: resolver.resolve("./runtime/server/utils/eponyme-schedule") },
       { name: "validateEponymeForm", from: resolver.resolve("./runtime/server/utils/eponyme-form") },
+      // Lets a route Eponyme does not own feed the dashboard's submission list.
+      { name: "storeEponymeFormSubmission", from: resolver.resolve("./runtime/server/utils/eponyme-form") },
+      { name: "assertEponymeFormRateLimit", from: resolver.resolve("./runtime/server/utils/eponyme-form") },
       { name: "getEponymeCacheTags", from: resolver.resolve("./runtime/server/utils/eponyme-cache") }
     ]);
     addRouteMiddleware({

package/dist/runtime/assets/dashboard.css

@@ -1 +1 @@
-@import "tailwindcss/theme" layer(theme) prefix(ep);@import "tailwindcss/preflight" layer(base);@import "tailwindcss/utilities" layer(utilities) prefix(ep);@source "../components";@source "../pages";@theme{--font-sans:"SF Pro Text",Inter,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;--color-theme-ep:#1c1c1c;--color-border-ep:#343434;--color-selected-ep:#262626;--color-text-ep:#e7e7e7;--color-muted-ep:#8d8d8d;--color-success-ep:#72d39a;--color-warning-ep:#e6b85c;--color-danger-ep:#ff8585}:root.dark{--color-eponyme-50:#fafafa;--color-eponyme-100:#f5f5f5;--color-eponyme-200:#e6e6e6;--color-eponyme-300:#d3d3d3;--color-eponyme-400:#a3a3a3;--color-eponyme-500:#727272;--color-eponyme-600:#535353;--color-eponyme-700:#404040;--color-eponyme-800:#272727;--color-eponyme-900:#1c1c1c;--color-eponyme-950:#0b0b0b}@layer base{.eponyme-portal,.eponyme-root{font-family:var(--ep-font-sans)}:where(.eponyme-root,.eponyme-portal),:where(.eponyme-root,.eponyme-portal) *,:where(.eponyme-root,.eponyme-portal) :after,:where(.eponyme-root,.eponyme-portal) :before{border:0 solid;box-sizing:border-box;margin:0;padding:0}}.eponyme-date-input{color-scheme:dark}
+@import "tailwindcss/theme" layer(theme) prefix(ep);@import "tailwindcss/preflight" layer(base);@import "tailwindcss/utilities" layer(utilities) prefix(ep);@source "../components";@source "../pages";@theme{--font-sans:"SF Pro Text",Inter,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;--color-theme-ep:#1c1c1c;--color-border-ep:#343434;--color-selected-ep:#262626;--color-text-ep:#e7e7e7;--color-muted-ep:#8d8d8d;--color-success-ep:#72d39a;--color-warning-ep:#e6b85c;--color-danger-ep:#ff8585;--color-canvas-ep:#fff;--color-inverse-ep:#fff}:root,:root.ep-dark{--ep-color-theme-ep:#1c1c1c;--ep-color-border-ep:#343434;--ep-color-selected-ep:#262626;--ep-color-text-ep:#e7e7e7;--ep-color-muted-ep:#8d8d8d;--ep-color-success-ep:#72d39a;--ep-color-warning-ep:#e6b85c;--ep-color-danger-ep:#ff8585;--ep-color-white:#fff}:root.ep-light{--ep-color-theme-ep:#f7f7f8;--ep-color-border-ep:rgba(172,176,188,.27)!important;--ep-color-selected-ep:#ededf0;--ep-color-text-ep:#1c1d20;--ep-color-muted-ep:#62656d;--ep-color-success-ep:#187443;--ep-color-warning-ep:#ffa700;--ep-color-danger-ep:#b42336;--ep-color-white:#1c1d20}@layer base{.eponyme-portal,.eponyme-root{color-scheme:dark;font-family:var(--ep-font-sans)}:root.ep-light :where(.eponyme-root,.eponyme-portal){color-scheme:light}:where(.eponyme-root,.eponyme-portal),:where(.eponyme-root,.eponyme-portal) *,:where(.eponyme-root,.eponyme-portal) :after,:where(.eponyme-root,.eponyme-portal) :before{border:0 solid;box-sizing:border-box;margin:0;padding:0}}.eponyme-date-input{color-scheme:inherit}

package/dist/runtime/assets.d.ts

@@ -7,3 +7,5 @@ declare module '*.png?url' {
   const url: string
   export default url
 }
+
+declare module '*.css' {}

package/dist/runtime/components/EponymeRichText.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Renders a `field.richText()` value on a public page.
+ *
+ * The HTML is safe by construction rather than by inspection here: every write path runs it
+ * through Eponyme's sanitisation policy before it is stored, and a payload carrying anything
+ * the editor cannot produce is refused with a `422`. Re-sanitising in the browser would ship
+ * a parser to every visitor to re-check a decision the server already made — and a client
+ * that can be skipped is not a security boundary anyway.
+ *
+ * It exists so a host application never writes `v-html` itself, which is the line between
+ * "Eponyme guarantees this" and "the application hopes so".
+ *
+ * A render function rather than a template: `innerHTML` is what `v-html` compiles to, and
+ * writing it directly keeps the one deliberate injection point in a file that explains it.
+ */
+declare const _default: import("vue").DefineComponent<import("vue").ExtractPropTypes<{
+    html: {
+        type: StringConstructor;
+        default: string;
+    };
+    as: {
+        type: StringConstructor;
+        default: string;
+    };
+}>, () => import("vue").VNode<import("vue").RendererNode, import("vue").RendererElement, {
+    [key: string]: any;
+}>, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<import("vue").ExtractPropTypes<{
+    html: {
+        type: StringConstructor;
+        default: string;
+    };
+    as: {
+        type: StringConstructor;
+        default: string;
+    };
+}>> & Readonly<{}>, {
+    html: string;
+    as: string;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+export default _default;

package/dist/runtime/components/EponymeRichText.js

@@ -0,0 +1,11 @@
+import { defineComponent, h } from "vue";
+export default defineComponent({
+  name: "EponymeRichText",
+  props: {
+    html: { type: String, default: "" },
+    as: { type: String, default: "div" }
+  },
+  setup(props) {
+    return () => h(props.as, { class: "eponyme-rich-text", innerHTML: props.html });
+  }
+});