@kywi-software/core 0.1.0

package/dist/api/feed-routes.js

@@ -0,0 +1,209 @@
+import { z } from 'zod';
+import { jsonOk, jsonError, notFound, unauthorized, forbidden, validationError } from './response.js';
+import { resolveAuth } from './auth.js';
+import { toSiteUuid } from './site-context.js';
+import { canAccessContent } from '../auth/roles.js';
+import { listFeeds, getFeedBySlug, createFeed, updateFeed, deleteFeed } from '../db/feed-queries.js';
+import { executeFeedQuery } from '../feeds/engine.js';
+import { generateRss } from '../feeds/rss.js';
+// ─── Zod schemas ──────────────────────────────────────────────────────────────
+const filterOperatorSchema = z.enum([
+    'eq', 'neq', 'gt', 'gte', 'lt', 'lte',
+    'contains', 'begins', 'ends',
+    'in', 'notin',
+    'isNull', 'isNotNull',
+]);
+const filterConditionSchema = z.object({
+    field: z.string(),
+    operator: filterOperatorSchema,
+    value: z.unknown().optional(),
+});
+const filterGroupSchema = z.object({
+    operator: z.enum(['and', 'or']),
+    conditions: z.array(filterConditionSchema),
+});
+const feedDisplayConfigSchema = z.object({
+    layout: z.enum(['list', 'grid', 'carousel']),
+    showImage: z.boolean(),
+    showSummary: z.boolean(),
+    showDate: z.boolean(),
+    showAuthor: z.boolean(),
+    columnsDesktop: z.number().optional(),
+    columnsMobile: z.number().optional(),
+});
+const feedQuerySchema = z.object({
+    contentType: z.string(),
+    siteId: z.string().optional(),
+    filters: z.array(filterConditionSchema).optional(),
+    filterGroups: z.array(filterGroupSchema).optional(),
+    search: z.string().optional(),
+    status: z.union([z.string(), z.array(z.string())]).optional(),
+    locale: z.string().optional(),
+    parentId: z.string().optional(),
+    categoryIds: z.array(z.string()).optional(),
+    tagIds: z.array(z.string()).optional(),
+    categorySlugs: z.array(z.string()).optional(),
+    tagSlugs: z.array(z.string()).optional(),
+    maxDepth: z.number().optional(),
+    sort: z.object({
+        field: z.string(),
+        direction: z.enum(['asc', 'desc']),
+    }).optional(),
+    limit: z.number().optional(),
+    page: z.number().optional(),
+    offset: z.number().optional(),
+    display: feedDisplayConfigSchema.optional(),
+    rss: z.boolean().optional(),
+}).strict();
+const createFeedSchema = z.object({
+    name: z.string().min(1),
+    slug: z.string().min(1),
+    query: feedQuerySchema,
+    cacheTtl: z.number().optional(),
+}).strict();
+const updateFeedSchema = createFeedSchema.partial();
+// ─── Route registration ───────────────────────────────────────────────────────
+export function registerFeedRoutes(router, ctx) {
+    const { db, authSecret, config, contentTypeMap, customTableMap } = ctx;
+    async function authenticate(req) {
+        return resolveAuth(req.headers.get('authorization'), authSecret, db);
+    }
+    // GET /feeds — list saved feeds
+    router.get('/feeds', async (req) => {
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const feeds = await listFeeds(db, siteId);
+        return jsonOk(feeds);
+    });
+    // POST /feeds/query — ad-hoc query
+    router.post('/feeds/query', async (req) => {
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = feedQuerySchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const query = parsed.data;
+        const result = await executeFeedQuery(db, query, contentTypeMap, customTableMap);
+        return jsonOk(result);
+    });
+    // GET /feeds/:slug — get saved feed + execute its query
+    router.get('/feeds/:slug', async (req, params) => {
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const feed = await getFeedBySlug(db, params.slug, siteId);
+        if (!feed)
+            return notFound('Feed not found');
+        const query = feed.query;
+        const result = await executeFeedQuery(db, query, contentTypeMap, customTableMap);
+        return jsonOk(result);
+    });
+    // GET /feeds/:slug/rss — public RSS 2.0 rendering of a saved feed
+    // (GAP-02a-F1B-01). Forced published-only + site-scoped regardless of the
+    // feed's stored query, so it can never leak drafts to anonymous readers.
+    router.get('/feeds/:slug/rss', async (req, params) => {
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const feed = await getFeedBySlug(db, params.slug, siteId);
+        if (!feed)
+            return notFound('Feed not found');
+        const query = {
+            ...feed.query,
+            siteId,
+            status: 'published',
+        };
+        const result = await executeFeedQuery(db, query, contentTypeMap, customTableMap);
+        const siteName = config.sites[0]?.name;
+        const xml = generateRss({
+            title: feed.name,
+            description: siteName ? `${feed.name} — ${siteName}` : feed.name,
+            link: url.origin,
+        }, result);
+        return new Response(xml, {
+            status: 200,
+            headers: { 'Content-Type': 'application/rss+xml; charset=utf-8' },
+        });
+    });
+    // POST /feeds — create a named feed
+    router.post('/feeds', async (req) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = createFeedSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const createData = {
+            siteId: await toSiteUuid(db, null, config),
+            name: parsed.data.name,
+            slug: parsed.data.slug,
+            query: parsed.data.query,
+        };
+        if (parsed.data.cacheTtl !== undefined)
+            createData.cacheTtl = parsed.data.cacheTtl;
+        createData.createdBy = auth.user.id;
+        const feed = await createFeed(db, createData);
+        return jsonOk(feed, 201);
+    });
+    // PUT /feeds/:slug — update a named feed
+    router.put('/feeds/:slug', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = updateFeedSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const updateData = {};
+        if (parsed.data.name !== undefined)
+            updateData.name = parsed.data.name;
+        if (parsed.data.query !== undefined)
+            updateData.query = parsed.data.query;
+        if (parsed.data.cacheTtl !== undefined)
+            updateData.cacheTtl = parsed.data.cacheTtl;
+        const feed = await updateFeed(db, params.slug, siteId, updateData);
+        if (!feed)
+            return notFound('Feed not found');
+        return jsonOk(feed);
+    });
+    // DELETE /feeds/:slug — delete a named feed
+    router.delete('/feeds/:slug', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const deleted = await deleteFeed(db, params.slug, siteId);
+        if (!deleted)
+            return notFound('Feed not found');
+        return jsonOk({ deleted: true });
+    });
+}
+//# sourceMappingURL=feed-routes.js.map

package/dist/api/feed-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-routes.js","sourceRoot":"","sources":["../../src/api/feed-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACrG,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAgB,MAAM,iBAAiB,CAAA;AAU3D,iFAAiF;AAEjF,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;IACrC,UAAU,EAAE,QAAQ,EAAE,MAAM;IAC5B,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAA;AAEF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,oBAAoB;IAC9B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;CAC3C,CAAC,CAAA;AAEF,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IAClD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;KACnC,CAAC,CAAC,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,eAAe;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAA;AAEnD,iFAAiF;AAEjF,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAqB;IACtE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,GAAG,CAAA;IAEtE,KAAK,UAAU,YAAY,CAAC,GAAY;QACtC,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,gCAAgC;IAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,mCAAmC;IACnC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAA6C,CAAA;QAClE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QAChF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,wDAAwD;IACxD,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3E,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAY,CAAA;QAC/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QAChF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,kEAAkE;IAClE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3E,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE5C,MAAM,KAAK,GAA0C;YACnD,GAAI,IAAI,CAAC,KAA+C;YACxD,MAAM;YACN,MAAM,EAAE,WAAW;SACpB,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QAEhF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAA;QACtC,MAAM,GAAG,GAAG,WAAW,CACrB;YACE,KAAK,EAAE,IAAI,CAAC,IAAI;YAChB,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;YAChE,IAAI,EAAE,GAAG,CAAC,MAAM;SACjB,EACD,MAAM,CACP,CAAA;QACD,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,oCAAoC,EAAE;SAClE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,oCAAoC;IACpC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAqC;YACnD,MAAM,EAAE,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC;YAC1C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAA8C;SAClE,CAAA;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,UAAU,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAA;QAClF,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QAC7C,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,yCAAyC;IACzC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAE3E,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAqC,EAAE,CAAA;QACvD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA;QACtE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAA8C,CAAA;QAClH,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,UAAU,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAA;QAClF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;QACnE,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,4CAA4C;IAC5C,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAE3E,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAC/C,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/form-routes.d.ts

@@ -0,0 +1,31 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig } from '../config/types.js';
+import type { EmailProvider } from '../email/types.js';
+import type { RecaptchaConfig } from '../forms/recaptcha.js';
+import type { HookRegistry } from '../hooks/registry.js';
+export interface FormRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+    emailProvider?: EmailProvider;
+    recaptchaConfig?: RecaptchaConfig;
+    hookRegistry?: HookRegistry;
+    /** Max submissions per IP per windowMs. Default: 10 per 15 minutes. */
+    rateLimit?: {
+        maxPerWindow?: number;
+        windowMs?: number;
+    };
+    /**
+     * Pre-resolved map of config site IDs (slugs) to DB UUIDs. Without it, a form
+     * lookup would use the config slug (e.g. 'default') as the siteId and never
+     * match content rows keyed by the site's real UUID.
+     */
+    siteIdMap?: Record<string, string>;
+}
+export declare function checkHoneypot(body: Record<string, unknown>): boolean;
+export declare function isRateLimited(ip: string, maxPerWindow: number, windowMs: number, now?: number): boolean;
+/** Exposed for testing — clears the rate limit store. */
+export declare function resetRateLimitStore(): void;
+export declare function registerFormRoutes(router: Router, ctx: FormRouteContext): void;
+//# sourceMappingURL=form-routes.d.ts.map

package/dist/api/form-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-routes.d.ts","sourceRoot":"","sources":["../../src/api/form-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAepD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAItD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAExD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,uEAAuE;IACvE,SAAS,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC;AAYD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAIpE;AAUD,wBAAgB,aAAa,CAC3B,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,GAAG,SAAa,GACf,OAAO,CAYT;AAED,yDAAyD;AACzD,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAID,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAsV9E"}

package/dist/api/form-routes.js

@@ -0,0 +1,346 @@
+import { jsonOk, jsonError, notFound, unauthorized, forbidden } from './response.js';
+import { resolveAuth } from './auth.js';
+import { hasMinRole } from '../auth/roles.js';
+import { getContentBySlug } from '../db/content-queries.js';
+import { createFormSubmission, listFormSubmissions, listFormSubmissionCounts, deleteFormSubmission, updateFormSubmissionStatus, } from '../db/form-queries.js';
+import { resolveSiteId } from './site-context.js';
+import { buildFormValidationSchema } from '../forms/validation.js';
+import { renderEmailTemplate, FORM_NOTIFICATION_TEMPLATE, FORM_CONFIRMATION_TEMPLATE } from '../email/templates.js';
+import { generateCsrfToken, verifyCsrfToken } from '../forms/csrf.js';
+import { verifyRecaptcha } from '../forms/recaptcha.js';
+function parseCsrfFromCookie(cookieHeader) {
+    if (!cookieHeader)
+        return null;
+    const match = cookieHeader.match(/kywi-csrf=([^;]+)/);
+    return match?.[1] ?? null;
+}
+// ─── Honeypot ────────────────────────────────────────────────────────────────
+const HONEYPOT_FIELD = '_kywi_hp';
+export function checkHoneypot(body) {
+    const val = body[HONEYPOT_FIELD];
+    // If the honeypot field is filled, this is likely a bot.
+    return val !== undefined && val !== null && val !== '';
+}
+const rateLimitStore = new Map();
+export function isRateLimited(ip, maxPerWindow, windowMs, now = Date.now()) {
+    const entry = rateLimitStore.get(ip);
+    if (!entry) {
+        rateLimitStore.set(ip, { timestamps: [now] });
+        return false;
+    }
+    // Prune old entries
+    entry.timestamps = entry.timestamps.filter(ts => now - ts < windowMs);
+    if (entry.timestamps.length >= maxPerWindow)
+        return true;
+    entry.timestamps.push(now);
+    return false;
+}
+/** Exposed for testing — clears the rate limit store. */
+export function resetRateLimitStore() {
+    rateLimitStore.clear();
+}
+// ─── Route registration ──────────────────────────────────────────────────────
+export function registerFormRoutes(router, ctx) {
+    const { db, authSecret, config } = ctx;
+    const maxPerWindow = ctx.rateLimit?.maxPerWindow ?? 10;
+    const windowMs = ctx.rateLimit?.windowMs ?? 15 * 60 * 1000;
+    async function authenticate(req) {
+        return resolveAuth(req.headers.get('authorization'), authSecret, db);
+    }
+    // GET /forms/:slug/csrf — get a fresh CSRF token
+    router.get('/forms/:slug/csrf', async () => {
+        const token = generateCsrfToken();
+        const cookie = `kywi-csrf=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=3600`;
+        return new Response(JSON.stringify({ token }), {
+            status: 200,
+            headers: {
+                'Content-Type': 'application/json',
+                'Set-Cookie': cookie,
+            },
+        });
+    });
+    // POST /forms/:slug/submit — submit form data
+    router.post('/forms/:slug/submit', async (req, params) => {
+        const slug = params.slug;
+        const siteId = resolveSiteId(req, config, ctx.siteIdMap);
+        const formContent = await getContentBySlug(db, null, slug, siteId);
+        if (!formContent)
+            return notFound('Form not found');
+        // CSRF validation (double-submit cookie pattern)
+        const csrfCookie = parseCsrfFromCookie(req.headers.get('cookie'));
+        const csrfHeader = req.headers.get('x-csrf-token');
+        if (!csrfCookie || !csrfHeader || !verifyCsrfToken(csrfCookie, csrfHeader)) {
+            return jsonError('FORBIDDEN', 'Invalid CSRF token', 403);
+        }
+        // Rate limiting per IP
+        const rawIp = req.headers.get('x-forwarded-for')?.split(',')[0]?.trim() ??
+            req.headers.get('x-real-ip') ??
+            null;
+        if (rawIp && isRateLimited(rawIp, maxPerWindow, windowMs)) {
+            return jsonError('RATE_LIMITED', 'Too many submissions. Please try again later.', 429);
+        }
+        // reCAPTCHA verification (optional)
+        if (ctx.recaptchaConfig) {
+            const recaptchaToken = req.headers.get('x-recaptcha-token');
+            if (!recaptchaToken)
+                return jsonError('BAD_REQUEST', 'reCAPTCHA token required', 400);
+            const result = await verifyRecaptcha(recaptchaToken, ctx.recaptchaConfig);
+            if (!result.success)
+                return jsonError('FORBIDDEN', result.error ?? 'reCAPTCHA failed', 403);
+        }
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const bodyObj = body;
+        // Honeypot check
+        if (checkHoneypot(bodyObj)) {
+            // Silently accept but do not persist — bot protection
+            return jsonOk({ id: 'rejected', message: 'Submission received' }, 200);
+        }
+        // Strip honeypot field from the data before validation/storage
+        const { [HONEYPOT_FIELD]: _hp, ...cleanData } = bodyObj;
+        // Validate against form field definitions if present. When a schema exists,
+        // persist ONLY the declared, validated fields (parsed.data) — not the raw
+        // body — so a client cannot inject arbitrary extra keys into the stored
+        // submission record. Forms with no declared fields fall back to cleanData.
+        const formFields = formContent.formFields;
+        let dataToStore = cleanData;
+        if (formFields && Array.isArray(formFields) && formFields.length > 0) {
+            const schema = buildFormValidationSchema(formFields);
+            const parsed = schema.safeParse(cleanData);
+            if (!parsed.success) {
+                return jsonError('VALIDATION_ERROR', 'Validation failed', 400, parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+            }
+            dataToStore = parsed.data;
+        }
+        // onBeforeFormSubmitSave hook
+        const hookPayload = {
+            formContentId: formContent.id,
+            siteId,
+            data: dataToStore,
+            ipAddress: rawIp,
+        };
+        if (ctx.hookRegistry) {
+            await ctx.hookRegistry.emit('onBeforeFormSubmitSave', hookPayload);
+        }
+        const submitData = {
+            siteId,
+            formContentId: formContent.id,
+            data: dataToStore,
+        };
+        if (rawIp)
+            submitData.ipAddress = rawIp;
+        const submission = await createFormSubmission(db, submitData);
+        // onAfterFormSubmitSave hook
+        if (ctx.hookRegistry) {
+            await ctx.hookRegistry.emit('onAfterFormSubmitSave', {
+                ...hookPayload,
+                submissionId: submission.id,
+            });
+        }
+        // Admin email notifications
+        const notifyEmails = formContent.notifyEmails;
+        if (notifyEmails && ctx.emailProvider) {
+            const emails = notifyEmails.split(',').map(e => e.trim()).filter(Boolean);
+            if (emails.length > 0) {
+                const submissionHtml = Object.entries(dataToStore)
+                    .map(([k, v]) => `<p><strong>${k}:</strong> ${String(v)}</p>`)
+                    .join('');
+                const html = renderEmailTemplate(FORM_NOTIFICATION_TEMPLATE, {
+                    formName: String(formContent.title ?? 'Form'),
+                    siteName: config.sites[0]?.name ?? 'Kywi',
+                    submissionHtml,
+                    submittedAt: new Date().toISOString(),
+                });
+                await ctx.emailProvider.send({
+                    to: emails,
+                    subject: `New submission: ${formContent.title}`,
+                    html,
+                });
+            }
+        }
+        // Submitter confirmation email
+        const submitterEmail = dataToStore.email;
+        if (submitterEmail && ctx.emailProvider) {
+            const formTitle = String(formContent.title ?? 'Form');
+            const confirmMessage = formContent.successMessage;
+            const html = renderEmailTemplate(FORM_CONFIRMATION_TEMPLATE, {
+                formName: formTitle,
+                siteName: config.sites[0]?.name ?? 'Kywi',
+                confirmationMessage: confirmMessage ?? 'We have received your submission and will be in touch.',
+            });
+            await ctx.emailProvider.send({
+                to: [submitterEmail],
+                subject: `Submission received: ${formTitle}`,
+                html,
+            });
+        }
+        // Build success response with successMessage / redirectUrl
+        const successMessage = formContent.successMessage;
+        const redirectUrl = formContent.redirectUrl;
+        const responseData = { id: submission.id };
+        if (successMessage)
+            responseData.successMessage = successMessage;
+        if (redirectUrl)
+            responseData.redirectUrl = redirectUrl;
+        return jsonOk(responseData, 200);
+    });
+    // ─── Draft API ─────────────────────────────────────────────────────────────
+    // POST /forms/:slug/drafts — save or update a draft
+    router.post('/forms/:slug/drafts', async (req, params) => {
+        const slug = params.slug;
+        const siteId = resolveSiteId(req, config, ctx.siteIdMap);
+        const formContent = await getContentBySlug(db, null, slug, siteId);
+        if (!formContent)
+            return notFound('Form not found');
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const { token, data, currentStep } = body;
+        if (!data || currentStep === undefined) {
+            return jsonError('BAD_REQUEST', 'Missing data or currentStep', 400);
+        }
+        const formContentId = formContent.id;
+        // Import draft helpers inline to keep the module boundary clean
+        const { createDraft } = await import('../forms/multi-step.js');
+        if (token) {
+            // Update existing draft
+            const { kywiFormSubmissionDrafts } = await import('../schema/base.js');
+            const { eq, and } = await import('drizzle-orm');
+            const existing = await db
+                .select()
+                .from(kywiFormSubmissionDrafts)
+                .where(and(eq(kywiFormSubmissionDrafts.token, token), eq(kywiFormSubmissionDrafts.formContentId, formContentId)))
+                .then(rows => rows[0]);
+            if (!existing)
+                return notFound('Draft not found');
+            await db
+                .update(kywiFormSubmissionDrafts)
+                .set({ data: data, currentStep, updatedAt: new Date() })
+                .where(eq(kywiFormSubmissionDrafts.id, existing.id));
+            return jsonOk({ token: existing.token }, 200);
+        }
+        // Create new draft
+        const draft = createDraft(formContentId, data, currentStep);
+        const { kywiFormSubmissionDrafts } = await import('../schema/base.js');
+        await db.insert(kywiFormSubmissionDrafts).values({
+            formContentId: draft.formContentId,
+            token: draft.token,
+            data: draft.data,
+            currentStep: draft.currentStep,
+            expiresAt: draft.expiresAt,
+        });
+        return jsonOk({ token: draft.token }, 200);
+    });
+    // GET /forms/:slug/drafts/:token — recover a draft
+    router.get('/forms/:slug/drafts/:token', async (req, params) => {
+        const slug = params.slug;
+        const token = params.token;
+        const siteId = resolveSiteId(req, config, ctx.siteIdMap);
+        const formContent = await getContentBySlug(db, null, slug, siteId);
+        if (!formContent)
+            return notFound('Form not found');
+        const formContentId = formContent.id;
+        const { kywiFormSubmissionDrafts } = await import('../schema/base.js');
+        const { eq, and } = await import('drizzle-orm');
+        const draft = await db
+            .select()
+            .from(kywiFormSubmissionDrafts)
+            .where(and(eq(kywiFormSubmissionDrafts.token, token), eq(kywiFormSubmissionDrafts.formContentId, formContentId)))
+            .then(rows => rows[0]);
+        if (!draft)
+            return notFound('Draft not found');
+        // Check expiration
+        if (new Date() > draft.expiresAt) {
+            return jsonError('GONE', 'Draft has expired', 410);
+        }
+        return jsonOk({
+            data: draft.data,
+            currentStep: draft.currentStep,
+            token: draft.token,
+        });
+    });
+    // GET /forms/:slug/submissions — list submissions (siteAdmin+)
+    router.get('/forms/:slug/submissions', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        const slug = params.slug;
+        const siteId = resolveSiteId(req, config, ctx.siteIdMap);
+        const formContent = await getContentBySlug(db, null, slug, siteId);
+        if (!formContent)
+            return notFound('Form not found');
+        const submissions = await listFormSubmissions(db, formContent.id);
+        return jsonOk(submissions);
+    });
+    // ─── Admin submission management ─────────────────────────────────────────────
+    // Shared siteAdmin+ gate for the admin-only form endpoints.
+    async function requireSiteAdmin(req) {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return { error: unauthorized() };
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return { error: forbidden() };
+        return { user: auth.user };
+    }
+    // GET /forms/submission-counts — per-form submission counts for the site.
+    // Two literal segments, so it never collides with the `/forms/:slug/*` routes.
+    router.get('/forms/submission-counts', async (req) => {
+        const gate = await requireSiteAdmin(req);
+        if (gate.error)
+            return gate.error;
+        const siteId = resolveSiteId(req, config, ctx.siteIdMap);
+        const counts = await listFormSubmissionCounts(db, siteId);
+        return jsonOk(counts);
+    });
+    // DELETE /forms/:slug/submissions/:id — delete one submission (siteAdmin+).
+    router.delete('/forms/:slug/submissions/:id', async (req, params) => {
+        const gate = await requireSiteAdmin(req);
+        if (gate.error)
+            return gate.error;
+        const siteId = resolveSiteId(req, config, ctx.siteIdMap);
+        const formContent = await getContentBySlug(db, null, params.slug, siteId);
+        if (!formContent)
+            return notFound('Form not found');
+        const ok = await deleteFormSubmission(db, formContent.id, params.id);
+        if (!ok)
+            return notFound('Submission not found');
+        return jsonOk({ id: params.id });
+    });
+    // PATCH /forms/:slug/submissions/:id — update submission review status (siteAdmin+).
+    router.patch('/forms/:slug/submissions/:id', async (req, params) => {
+        const gate = await requireSiteAdmin(req);
+        if (gate.error)
+            return gate.error;
+        const siteId = resolveSiteId(req, config, ctx.siteIdMap);
+        const formContent = await getContentBySlug(db, null, params.slug, siteId);
+        if (!formContent)
+            return notFound('Form not found');
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const status = body.status;
+        if (typeof status !== 'string' || !['new', 'reviewed', 'archived'].includes(status)) {
+            return jsonError('BAD_REQUEST', 'Invalid status (expected new | reviewed | archived)', 400);
+        }
+        const ok = await updateFormSubmissionStatus(db, formContent.id, params.id, status);
+        if (!ok)
+            return notFound('Submission not found');
+        return jsonOk({ id: params.id, status });
+    });
+}
+//# sourceMappingURL=form-routes.js.map

package/dist/api/form-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-routes.js","sourceRoot":"","sources":["../../src/api/form-routes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAGlE,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AACnH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAqBvD,SAAS,mBAAmB,CAAC,YAA2B;IACtD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACrD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AAC3B,CAAC;AAED,gFAAgF;AAEhF,MAAM,cAAc,GAAG,UAAU,CAAA;AAEjC,MAAM,UAAU,aAAa,CAAC,IAA6B;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,CAAA;IAChC,yDAAyD;IACzD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,CAAA;AACxD,CAAC;AAQD,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAA;AAExD,MAAM,UAAU,aAAa,CAC3B,EAAU,EACV,YAAoB,EACpB,QAAgB,EAChB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAA;IACrE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,YAAY;QAAE,OAAO,IAAI,CAAA;IACxD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAA;AACd,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,mBAAmB;IACjC,cAAc,CAAC,KAAK,EAAE,CAAA;AACxB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAqB;IACtE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACtC,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,EAAE,YAAY,IAAI,EAAE,CAAA;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAE1D,KAAK,UAAU,YAAY,CAAC,GAAY;QACtC,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,iDAAiD;IACjD,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;QACjC,MAAM,MAAM,GAAG,aAAa,KAAK,gDAAgD,CAAA;QACjF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC7C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,MAAM;aACrB;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,8CAA8C;IAC9C,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAK,CAAA;QACzB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QAExD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAClE,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAEnD,iDAAiD;QACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QACjE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAClD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;YAC3E,OAAO,SAAS,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAA;QAC1D,CAAC;QAED,uBAAuB;QACvB,MAAM,KAAK,GACT,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YACzD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YAC5B,IAAI,CAAA;QACN,IAAI,KAAK,IAAI,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1D,OAAO,SAAS,CAAC,cAAc,EAAE,+CAA+C,EAAE,GAAG,CAAC,CAAA;QACxF,CAAC;QAED,oCAAoC;QACpC,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;YACxB,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;YAC3D,IAAI,CAAC,cAAc;gBAAE,OAAO,SAAS,CAAC,aAAa,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAA;YACrF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,cAAc,EAAE,GAAG,CAAC,eAAe,CAAC,CAAA;YACzE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,IAAI,kBAAkB,EAAE,GAAG,CAAC,CAAA;QAC7F,CAAC;QAED,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,OAAO,GAAG,IAA+B,CAAA;QAE/C,iBAAiB;QACjB,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,sDAAsD;YACtD,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAA;QACxE,CAAC;QAED,+DAA+D;QAC/D,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAA;QAEvD,4EAA4E;QAC5E,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,UAAU,GAAI,WAAmB,CAAC,UAA+C,CAAA;QACvF,IAAI,WAAW,GAA4B,SAAS,CAAA;QACpD,IAAI,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,SAAS,CACd,kBAAkB,EAClB,mBAAmB,EACnB,GAAG,EACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;YACH,CAAC;YACD,WAAW,GAAG,MAAM,CAAC,IAA+B,CAAA;QACtD,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAA0B;YACzC,aAAa,EAAG,WAAmB,CAAC,EAAY;YAChD,MAAM;YACN,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,KAAK;SACjB,CAAA;QACD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAA;QACpE,CAAC;QAED,MAAM,UAAU,GAA+C;YAC7D,MAAM;YACN,aAAa,EAAG,WAAmB,CAAC,EAAY;YAChD,IAAI,EAAE,WAAW;SAClB,CAAA;QACD,IAAI,KAAK;YAAE,UAAU,CAAC,SAAS,GAAG,KAAK,CAAA;QAEvC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QAE7D,6BAA6B;QAC7B,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACnD,GAAG,WAAW;gBACd,YAAY,EAAE,UAAU,CAAC,EAAE;aAC5B,CAAC,CAAA;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAI,WAAmB,CAAC,YAAkC,CAAA;QAC5E,IAAI,YAAY,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACzE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;qBAC/C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;qBAC7D,IAAI,CAAC,EAAE,CAAC,CAAA;gBACX,MAAM,IAAI,GAAG,mBAAmB,CAAC,0BAA0B,EAAE;oBAC3D,QAAQ,EAAE,MAAM,CAAE,WAAmB,CAAC,KAAK,IAAI,MAAM,CAAC;oBACtD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM;oBACzC,cAAc;oBACd,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACtC,CAAC,CAAA;gBACF,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC;oBAC3B,EAAE,EAAE,MAAM;oBACV,OAAO,EAAE,mBAAoB,WAAmB,CAAC,KAAK,EAAE;oBACxD,IAAI;iBACL,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,MAAM,cAAc,GAAG,WAAW,CAAC,KAA2B,CAAA;QAC9D,IAAI,cAAc,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,CAAE,WAAmB,CAAC,KAAK,IAAI,MAAM,CAAC,CAAA;YAC9D,MAAM,cAAc,GAAI,WAAmB,CAAC,cAAoC,CAAA;YAChF,MAAM,IAAI,GAAG,mBAAmB,CAAC,0BAA0B,EAAE;gBAC3D,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM;gBACzC,mBAAmB,EAAE,cAAc,IAAI,wDAAwD;aAChG,CAAC,CAAA;YACF,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC3B,EAAE,EAAE,CAAC,cAAc,CAAC;gBACpB,OAAO,EAAE,wBAAwB,SAAS,EAAE;gBAC5C,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;QAED,2DAA2D;QAC3D,MAAM,cAAc,GAAI,WAAmB,CAAC,cAAoC,CAAA;QAChF,MAAM,WAAW,GAAI,WAAmB,CAAC,WAAiC,CAAA;QAC1E,MAAM,YAAY,GAA4B,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAA;QACnE,IAAI,cAAc;YAAE,YAAY,CAAC,cAAc,GAAG,cAAc,CAAA;QAChE,IAAI,WAAW;YAAE,YAAY,CAAC,WAAW,GAAG,WAAW,CAAA;QAEvD,OAAO,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAE9E,oDAAoD;IACpD,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAK,CAAA;QACzB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAClE,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAEnD,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAIpC,CAAA;QAED,IAAI,CAAC,IAAI,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC,aAAa,EAAE,6BAA6B,EAAE,GAAG,CAAC,CAAA;QACrE,CAAC;QAED,MAAM,aAAa,GAAI,WAAmB,CAAC,EAAY,CAAA;QAEvD,gEAAgE;QAChE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAA;QAE9D,IAAI,KAAK,EAAE,CAAC;YACV,wBAAwB;YACxB,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;YACtE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;YAC/C,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,wBAAwB,CAAC;iBAC9B,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,EACzC,EAAE,CAAC,wBAAwB,CAAC,aAAa,EAAE,aAAa,CAAC,CAC1D,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YAExB,IAAI,CAAC,QAAQ;gBAAE,OAAO,QAAQ,CAAC,iBAAiB,CAAC,CAAA;YAEjD,MAAM,EAAE;iBACL,MAAM,CAAC,wBAAwB,CAAC;iBAChC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAW,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBAC9D,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;YAEtD,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/C,CAAC;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;QACtE,MAAM,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC;YAC/C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAW;YACvB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAA;QAEF,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,mDAAmD;IACnD,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAK,CAAA;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAM,CAAA;QAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAClE,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAEnD,MAAM,aAAa,GAAI,WAAmB,CAAC,EAAY,CAAA;QACvD,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;QACtE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;QAE/C,MAAM,KAAK,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,wBAAwB,CAAC;aAC9B,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,EACzC,EAAE,CAAC,wBAAwB,CAAC,aAAa,EAAE,aAAa,CAAC,CAC1D,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAExB,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC,iBAAiB,CAAC,CAAA;QAE9C,mBAAmB;QACnB,IAAI,IAAI,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QACpD,CAAC;QAED,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAK,CAAA;QACzB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QAExD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAClE,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAEnD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAG,WAAmB,CAAC,EAAY,CAAC,CAAA;QACpF,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,gFAAgF;IAEhF,4DAA4D;IAC5D,KAAK,UAAU,gBAAgB,CAAC,GAAY;QAC1C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAc,EAAE,CAAA;QAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAc,EAAE,CAAA;QACvF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IAC5B,CAAC;IAED,0EAA0E;IAC1E,+EAA+E;IAC/E,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACzD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;QAC1E,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QACnD,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAG,WAAmB,CAAC,EAAY,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACxF,IAAI,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QAChD,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,qFAAqF;IACrF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACjE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;QAC1E,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAEnD,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QACD,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAA;QACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpF,OAAO,SAAS,CAAC,aAAa,EAAE,qDAAqD,EAAE,GAAG,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,0BAA0B,CAAC,EAAE,EAAG,WAAmB,CAAC,EAAY,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QACtG,IAAI,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QAChD,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/graphql/__tests__/resolvers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resolvers.test.d.ts.map

package/dist/api/graphql/__tests__/resolvers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvers.test.d.ts","sourceRoot":"","sources":["../../../../src/api/graphql/__tests__/resolvers.test.ts"],"names":[],"mappings":""}