@nextlyhq/plugin-form-builder 0.0.2-alpha.71 → 0.0.2-alpha.73

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { A as RadioFormField, B as isEmailFormField, C as FormNotificationItem, D as HiddenFormField, E as FormSubmission, F as TextareaFormField, G as isSelectFormField, H as isFormField, I as TimeFormField, K as isTextFormField, L as UrlFormField, M as SelectFormField, N as SubmissionDocument, O as NumberFormField, P as TextFormField, R as ValidationRules, S as FormNotification, T as FormSettings, U as isFormFieldType, V as isFileFormField, W as isKnownFormField, _ as FormField, a as ConditionalLogic, b as FormHookContext, c as DateFormField, d as FieldBlockConfig, f as FileFormField, g as FormDocument, h as FormConfig, i as CheckboxFormField, j as ResolvedFormBuilderConfig, k as PhoneFormField, l as EmailConfig, m as FormBuilderPluginOptions, n as BUILT_IN_FORM_FIELD_TYPES, o as ConditionalLogicCondition, p as FormAccess, r as BaseFormField, s as CustomFormField, t as AnyFormField, u as EmailFormField, v as FormFieldType, w as FormNotifications, x as FormHooks, y as FormFieldTypeId, z as isCheckboxFormField } from "./types-BHReIA0j.js";
+import { A as HiddenFormField, B as UrlFormField, C as FormHookContext, D as FormNotifications, E as FormNotificationItem, F as SelectFormField, G as isFormField, H as isCheckboxFormField, I as SubmissionDocument, J as isSelectFormField, K as isFormFieldType, L as TextFormField, M as PhoneFormField, N as RadioFormField, O as FormSettings, P as ResolvedFormBuilderConfig, R as TextareaFormField, S as FormFieldTypeId, T as FormNotification, U as isEmailFormField, V as ValidationRules, W as isFileFormField, Y as isTextFormField, _ as FormBuilderPluginOptions, a as BUILT_IN_FORM_FIELD_TYPES, b as FormField, c as ConditionalLogic, d as DateFormField, f as EmailConfig, g as FormAccess, h as FileFormField, i as AnyFormField, j as NumberFormField, k as FormSubmission, l as ConditionalLogicCondition, m as FieldBlockConfig, n as NewSubmissionRow, o as BaseFormField, p as EmailFormField, q as isKnownFormField, r as NewSubmissionsData, s as CheckboxFormField, t as NEW_SUBMISSIONS_WIDGET_ID, u as CustomFormField, v as FormConfig, w as FormHooks, x as FormFieldType, y as FormDocument, z as TimeFormField } from "./new-submissions-CzlhVGhH.js";
 import { PluginDefinition } from "@nextlyhq/plugin-sdk";
 import { CollectionConfig, PluginContext } from "nextly";
 import { z } from "zod";
@@ -1385,5 +1385,5 @@ interface ExtendedCollectionConfig extends Omit<CollectionConfig, "admin"> {
  */
 export declare function submissionsCollection(pluginConfig: ResolvedFormBuilderConfig): ExtendedCollectionConfig;
 export declare const formBuilderPlugin: ReturnType<typeof formBuilder>["plugin"];
-export { type AnyFormField, BUILT_IN_FORM_FIELD_TYPES, type BaseFormField, type CSVExportOptions, type CheckboxFormField, type ComparisonOperator, type ConditionalLogic, type ConditionalLogicCondition, type CustomFormField, type DateFormField, type EmailConfig, type EmailFormField, type ExportedJSON, type FieldBlockConfig, type FileFormField, type FormAccess, type FormBuilderPluginOptions, type FormBuilderPluginResult, type FormConfig, type FormDocument, type FormField, type FormFieldOption, type FormFieldType, type FormFieldTypeId, type FormHookContext, type FormHooks, type FormNotification, type FormNotificationItem, type FormNotifications, type FormSettings, type FormSubmission, type FormValidationError, type FormValidationErrorCode, type FormValidationResult, type HiddenFormField, type JSONExportOptions, type NextlyPlugin, type NumberFormField, type PhoneFormField, type RadioFormField, type ResolvedFormBuilderConfig, type SelectFormField, type SpamCheckConfig, type SpamCheckOptions, type SpamCheckResult, type SubmissionDocument, type SubmitFormContext, type SubmitFormOptions, type SubmitFormResult, type TextFormField, type TextareaFormField, type TimeFormField, type UrlFormField, type ValidationRules, isCheckboxFormField, isEmailFormField, isFileFormField, isFormField, isFormFieldType, isKnownFormField, isSelectFormField, isTextFormField };
+export { type AnyFormField, BUILT_IN_FORM_FIELD_TYPES, type BaseFormField, type CSVExportOptions, type CheckboxFormField, type ComparisonOperator, type ConditionalLogic, type ConditionalLogicCondition, type CustomFormField, type DateFormField, type EmailConfig, type EmailFormField, type ExportedJSON, type FieldBlockConfig, type FileFormField, type FormAccess, type FormBuilderPluginOptions, type FormBuilderPluginResult, type FormConfig, type FormDocument, type FormField, type FormFieldOption, type FormFieldType, type FormFieldTypeId, type FormHookContext, type FormHooks, type FormNotification, type FormNotificationItem, type FormNotifications, type FormSettings, type FormSubmission, type FormValidationError, type FormValidationErrorCode, type FormValidationResult, type HiddenFormField, type JSONExportOptions, NEW_SUBMISSIONS_WIDGET_ID, type NewSubmissionRow, type NewSubmissionsData, type NextlyPlugin, type NumberFormField, type PhoneFormField, type RadioFormField, type ResolvedFormBuilderConfig, type SelectFormField, type SpamCheckConfig, type SpamCheckOptions, type SpamCheckResult, type SubmissionDocument, type SubmitFormContext, type SubmitFormOptions, type SubmitFormResult, type TextFormField, type TextareaFormField, type TimeFormField, type UrlFormField, type ValidationRules, isCheckboxFormField, isEmailFormField, isFileFormField, isFormField, isFormFieldType, isKnownFormField, isSelectFormField, isTextFormField };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,6 +1,6 @@
-import { A as isKnownFormField, D as isFileFormField, E as isEmailFormField, F as pickedDocumentField, M as isTextFormField, N as documentReachability, O as isFormField, P as parseRedirectReference, S as ENFORCED_VALIDATION_RULES, T as isCheckboxFormField, _ as applyFormDefaults, a as exportToCSV, b as toTitleCase, c as generateExportFilename, d as getSupportedComparisonOperators, f as isValidComparisonOperator, g as applyFieldDefaults, h as DEFAULT_NOTIFICATION_SETTINGS, i as exportAndDownload, j as isSelectFormField, k as isFormFieldType, l as evaluateConditions, m as DEFAULT_FORM_SETTINGS, n as parseFieldRef, o as exportToJSON, p as normalizeFormSettings, r as downloadFile, s as formatExportValue, u as evaluateSingleCondition, v as createFormConfig, w as BUILT_IN_FORM_FIELD_TYPES, x as warnIfWebhooksConfigured, y as pluralize } from "./field-references-BshlgMcn.js";
+import { A as isKnownFormField, D as isFileFormField, E as isEmailFormField, F as SCHEMA_ONLY_CONTEXT, I as SCHEMA_ONLY_READ, L as documentReachability, M as isTextFormField, N as NEW_SUBMISSIONS_WIDGET_ID, O as isFormField, P as readNewSubmissions, R as parseRedirectReference, S as ENFORCED_VALIDATION_RULES, T as isCheckboxFormField, _ as applyFormDefaults, a as exportToCSV, b as toTitleCase, c as generateExportFilename, d as getSupportedComparisonOperators, f as isValidComparisonOperator, g as applyFieldDefaults, h as DEFAULT_NOTIFICATION_SETTINGS, i as exportAndDownload, j as isSelectFormField, k as isFormFieldType, l as evaluateConditions, m as DEFAULT_FORM_SETTINGS, n as parseFieldRef, o as exportToJSON, p as normalizeFormSettings, r as downloadFile, s as formatExportValue, u as evaluateSingleCondition, v as createFormConfig, w as BUILT_IN_FORM_FIELD_TYPES, x as warnIfWebhooksConfigured, y as pluralize, z as pickedDocumentField } from "./field-references-CtzGg51W.js";
 import { createRequire } from "node:module";
-import { NextlyError, definePlugin, isLocaleSelector } from "@nextlyhq/plugin-sdk";
+import { NextlyError, definePlugin, defineWidget, isLocaleSelector, rowsThatFit } from "@nextlyhq/plugin-sdk";
 import { NO_SUCH_FORM, NextlyError as NextlyError$1, RateLimiter, buildPaginatedResponse, checkbox as checkbox$1, clampLimit, date as date$1, formAvailability, group, isPluginFieldTypeOnSurface, json, relationship, resolveRateLimitStore, respondAction, respondDoc, respondList, select as select$1, stripHtmlTags, text as text$1, textarea as textarea$1, trustedClientIp } from "nextly";
 import { previewUrlFromTemplate } from "nextly/config";
 import { z } from "zod";
@@ -69,9 +69,9 @@ function applyRedirectPattern(pattern, document) {
 * the role screen grants it: `read-form-submissions` to read submissions,
 * `update-forms` to edit a form.
 *
-* A collection's rule is the whole answer for a signed-in user, so "signed in"
-* here would admit every staff member whatever their role holds, and a role
-* name would refuse a custom role that holds the permission. The rule is given
+* The grant is checked before a collection's rule, and the rule only narrows
+* it, so this check repeats the gate's and keeps the default plain; a role
+* name here would refuse a custom role that holds the permission. The rule is given
 * the caller's permissions as the role screen spells them, `<action>-<slug>`,
 * for a session and an API key alike, and a visitor holds none. `collection` is the slug the host installed
 * the collection under, so a renamed collection is judged by its own
@@ -686,6 +686,19 @@ function formsCollection(pluginConfig) {
 
 // src/collections/submissions.ts
 /**
+* Whether a create keeps the `submittedAt` it names: only one made on the
+* server with no request behind it (`req.http` absent), such as an import
+* restoring old submissions with their dates, and only where it names one.
+*
+* A create a request produced, a visitor's through the public grant above
+* all, is given the server's time whatever it says: the dashboard lists new
+* submissions newest first by this field, and a date a visitor chose (one far
+* in the future) would keep theirs ahead of every real submission.
+*/
+function trustedSubmittedAt(context) {
+	return context.req?.http === void 0 && Boolean(context.data?.submittedAt);
+}
+/**
 * Generate the Form Submissions collection configuration.
 *
 * Creates a collection for storing form submissions with:
@@ -750,6 +763,7 @@ function submissionsCollection(pluginConfig) {
 					value: "spam"
 				}
 			],
+			index: true,
 			admin: { description: "Track whether this submission has been reviewed" }
 		}),
 		text$1({
@@ -785,6 +799,7 @@ function submissionsCollection(pluginConfig) {
 			name: "submittedAt",
 			label: "Submitted At",
 			required: true,
+			index: true,
 			admin: {
 				readOnly: true,
 				description: "When the form was submitted"
@@ -841,7 +856,7 @@ function submissionsCollection(pluginConfig) {
 		hooks: {
 			beforeValidate: [(context) => {
 				const { data, operation } = context;
-				if (operation === "create" && data && !data.submittedAt) data.submittedAt = /* @__PURE__ */ new Date();
+				if (operation === "create" && data && !trustedSubmittedAt(context)) data.submittedAt = /* @__PURE__ */ new Date();
 				return data;
 			}],
 			afterChange: [(context) => {
@@ -853,6 +868,106 @@ function submissionsCollection(pluginConfig) {
 	};
 }
 
+// src/dashboard/widget.ts
+/**
+* New form submissions: the form-builder plugin's dashboard widget, declared
+* once with `defineWidget` and contributed under `contributes.dashboard`.
+*
+* Offered to a reader of both the forms and the submissions, and shown while
+* at least one form is theirs to read; its card lists the new submissions of
+* those forms, newest first, and stays on the dashboard with "No new
+* submissions" while there are none. Its summary puts the card's own count in
+* the dashboard's header. Core's default dashboard names it by its id
+* (`NEW_SUBMISSIONS_WIDGET_ID`), so a site without this plugin has no such
+* card and no such part.
+*
+* @module dashboard/widget
+*/
+/** The component the card is drawn by, as the admin's component map imports it. */
+const CARD_COMPONENT = "@nextlyhq/plugin-form-builder/admin#NewSubmissionsCard";
+/** A case for the preview page and the add panel's tile. */
+const PREVIEW = {
+	items: [{
+		id: "preview-1",
+		title: "Ana Ruiz",
+		form: "Contact",
+		excerpt: "Could you send me your price list?",
+		at: "2026-01-05T09:30:00.000Z",
+		href: "/admin/collections/form-submissions/preview-1"
+	}, {
+		id: "preview-2",
+		title: "sam@example.com",
+		form: "Newsletter",
+		at: "2026-01-05T08:10:00.000Z",
+		href: "/admin/collections/form-submissions/preview-2"
+	}],
+	total: 2,
+	allHref: "/admin/collections/form-submissions",
+	collection: "form-submissions"
+};
+/**
+* The widget, over the plugin's collections as it declares them and the
+* submissions slug the admin knows them by once installed.
+*
+* `submissionsPath` is read when a card loads rather than when the widget is
+* declared: the plugin learns the slug a site renamed its collection to only
+* at `init`, after this declaration was made. Every link the card draws, its
+* empty state's among them, is made from it, so none names a slug the site
+* renamed away.
+*/
+function newSubmissionsWidget(declared, submissionsPath) {
+	return defineWidget({
+		id: NEW_SUBMISSIONS_WIDGET_ID,
+		title: "New form submissions",
+		description: "Form submissions nobody has opened yet, newest first.",
+		icon: "Inbox",
+		category: "Forms",
+		size: {
+			default: {
+				w: 6,
+				h: 3
+			},
+			max: {
+				w: 12,
+				h: 8
+			}
+		},
+		access: { collections: [declared.forms, declared.submissions] },
+		shows: async ({ services, signal }) => await services.count(declared.forms, {
+			status: "all",
+			signal
+		}) > 0,
+		skeleton: "list",
+		load: async ({ services, size, signal, scope }) => readNewSubmissions(services, declared, {
+			limit: rowsThatFit(size, { density: "default" }),
+			signal,
+			scope,
+			submissionsPath: submissionsPath()
+		}),
+		view: { component: CARD_COMPONENT },
+		isEmpty: () => false,
+		preview: [{
+			name: "Two new",
+			data: PREVIEW
+		}],
+		summary: {
+			label: "new submissions",
+			count: async ({ services, signal, scope }) => {
+				const { total, atLeast } = await readNewSubmissions(services, declared, {
+					limit: 0,
+					signal,
+					scope,
+					submissionsPath: submissionsPath()
+				});
+				return {
+					count: total,
+					atLeast: atLeast === true
+				};
+			}
+		}
+	});
+}
+
 // src/document-shapes.ts
 /**
 * Read a stored row as a submission.
@@ -2376,6 +2491,11 @@ function formBuilder(options = {}) {
 	const resolvedConfig = resolveConfig(options);
 	const formsCol = formsCollection(resolvedConfig);
 	const submissionsCol = submissionsCollection(resolvedConfig);
+	let installedSubmissionsSlug = resolvedConfig.formSubmissionOverrides.slug;
+	const newSubmissions = newSubmissionsWidget({
+		forms: resolvedConfig.formOverrides.slug,
+		submissions: resolvedConfig.formSubmissionOverrides.slug
+	}, () => installedSubmissionsSlug);
 	return {
 		plugin: definePlugin({
 			name: "@nextlyhq/plugin-form-builder",
@@ -2393,6 +2513,11 @@ function formBuilder(options = {}) {
 			],
 			contributes: {
 				collections: [formsCol, submissionsCol],
+				dashboard: { widgets: [newSubmissions] },
+				publicGrants: [{
+					collection: resolvedConfig.formSubmissionOverrides.slug,
+					action: "create"
+				}],
 				permissions: [{
 					action: "export",
 					resource: "submissions",
@@ -2503,6 +2628,7 @@ function formBuilder(options = {}) {
 			async init(nextly) {
 				const declaredSubmissionsSlug = resolvedConfig.formSubmissionOverrides.slug;
 				const submissionSlug = nextly.self.collections[declaredSubmissionsSlug] ?? declaredSubmissionsSlug;
+				installedSubmissionsSlug = submissionSlug;
 				nextly.logger.info("Form Builder plugin initialized", {
 					formsCollection: resolvedConfig.formOverrides.slug,
 					submissionsCollection: submissionSlug,
@@ -2797,7 +2923,8 @@ async function prepareSubmissionForWrite(context, formsSlug, nextly) {
 	})) });
 	ctx.data = {
 		...submission,
-		data: prepared.data
+		data: prepared.data,
+		...startingStatus(ctx, marks)
 	};
 	if (spam) {
 		ctx.data.status = "spam";
@@ -2807,6 +2934,21 @@ async function prepareSubmissionForWrite(context, formsSlug, nextly) {
 	return ctx.data;
 }
 /**
+* The status a submission a request created starts with: `new`, whatever the
+* request named, before the spam verdict may make it `spam`. The collection
+* grants public create and nothing restricts `status`, so a visitor posting
+* `read` or `archived` would otherwise file their submission where nobody
+* looks for one that was never opened.
+*
+* A create no request produced (an import, a seed, a job) keeps the status it
+* names, and so does this plugin's own handler storing content spam as
+* evidence (`keepAsEvidence`), which chose that status itself. An update is
+* left as it is.
+*/
+function startingStatus(ctx, marks) {
+	return ctx.operation === "create" && ctx.req?.http && marks?.keepAsEvidence !== true ? { status: "new" } : {};
+}
+/**
 * The fields a submission has to satisfy.
 *
 * The handler that already read this form hands it over rather than have the
@@ -3002,7 +3144,7 @@ async function sendNotificationEmails(input) {
 */
 async function injectSubmissionCount(context, submissionSlug, nextly) {
 	const hook = context;
-	if (hook.context?.[SCHEMA_ONLY_READ] === true) return;
+	if (hook.context?.["formBuilder.schemaOnlyRead"] === true) return;
 	const records = Array.isArray(hook.data) ? hook.data : hook.data ? [hook.data] : [];
 	await Promise.all(records.map(async (record) => {
 		const form = record;
@@ -3017,16 +3159,11 @@ async function injectSubmissionCount(context, submissionSlug, nextly) {
 		}
 	}));
 }
-/**
-* Tells the form's `afterRead` hook that this read wants the schema and nothing
-* else, so it can skip work whose only purpose is to be displayed.
-*/
-const SCHEMA_ONLY_READ = "formBuilder.schemaOnlyRead";
 async function fetchParentForm(formsSlug, formId, nextly) {
 	try {
 		return await nextly.services.collections.findEntryById(formsSlug, formId, {
 			as: "system",
-			context: { [SCHEMA_ONLY_READ]: true }
+			context: { ...SCHEMA_ONLY_CONTEXT }
 		});
 	} catch (err) {
 		if (!NextlyError.isNotFound(err)) throw err;
@@ -3953,5 +4090,5 @@ const hidden = (config) => ({
 */
 const formBuilderPlugin = formBuilder().plugin;
 
-export { BUILT_IN_FORM_FIELD_TYPES, DEFAULT_FORM_SETTINGS, DEFAULT_NOTIFICATION_SETTINGS, RESERVED_FORM_SLUGS, applyFieldDefaults, applyFormDefaults, assertValidFormConfig, checkSpam, checkbox, createFormConfig, date, downloadFile, email, evaluateConditions, exportAndDownload, exportToCSV, exportToJSON, file, formBuilder, formBuilderPlugin, formatExportValue, formsCollection, generateExportFilename, generateZodSchema, getFormBuilderConfig, getFormSubmissionStats, getSupportedComparisonOperators, getValidationErrors, hidden, isCheckboxFormField, isEmailFormField, isFileFormField, isFormAcceptingSubmissions, isFormField, isFormFieldType, isKnownFormField, isSelectFormField, isTextFormField, isValidComparisonOperator, number, option, phone, pluralize, radio, select, submissionsCollection, submitForm, text, textarea, time, toTitleCase, transformFormData, url, validateFormConfig, validateFormData, validateSubmission };
+export { BUILT_IN_FORM_FIELD_TYPES, DEFAULT_FORM_SETTINGS, DEFAULT_NOTIFICATION_SETTINGS, NEW_SUBMISSIONS_WIDGET_ID, RESERVED_FORM_SLUGS, applyFieldDefaults, applyFormDefaults, assertValidFormConfig, checkSpam, checkbox, createFormConfig, date, downloadFile, email, evaluateConditions, exportAndDownload, exportToCSV, exportToJSON, file, formBuilder, formBuilderPlugin, formatExportValue, formsCollection, generateExportFilename, generateZodSchema, getFormBuilderConfig, getFormSubmissionStats, getSupportedComparisonOperators, getValidationErrors, hidden, isCheckboxFormField, isEmailFormField, isFileFormField, isFormAcceptingSubmissions, isFormField, isFormFieldType, isKnownFormField, isSelectFormField, isTextFormField, isValidComparisonOperator, number, option, phone, pluralize, radio, select, submissionsCollection, submitForm, text, textarea, time, toTitleCase, transformFormData, url, validateFormConfig, validateFormData, validateSubmission };
 //# sourceMappingURL=index.js.map