@orion-studios/cms 0.5.4 → 0.5.6

package/dist/{chunk-VPUODCNH.js → chunk-CFZP7674.js}

@@ -241,19 +241,19 @@ function createMemoryRateLimitStore(options) {
   const windowMs = options?.windowMs ?? 6e4;
   const hits = /* @__PURE__ */ new Map();
   return {
-    isLimited(key, now) {
-      const windowStart = now - windowMs;
-      const entries = (hits.get(key) || []).filter((timestamp) => timestamp > windowStart);
-      entries.push(now);
-      hits.set(key, entries);
+    isLimited(key, now, cost = 1) {
+      const normalizedCost = Number.isSafeInteger(cost) && cost > 0 ? cost : max + 1;
+      const existing = hits.get(key);
+      const entry = !existing || now - existing.windowStart >= windowMs ? { windowStart: now, count: normalizedCost } : { ...existing, count: existing.count + normalizedCost };
+      hits.set(key, entry);
       if (hits.size > 1e4) {
-        for (const [entryKey, timestamps] of hits) {
-          if (timestamps.every((timestamp) => timestamp <= windowStart)) {
+        for (const [entryKey, candidate] of hits) {
+          if (now - candidate.windowStart >= windowMs) {
             hits.delete(entryKey);
           }
         }
       }
-      return entries.length > max;
+      return entry.count > max;
     }
   };
 }
@@ -274,6 +274,25 @@ function collectFieldDefinitions(config) {
   }
   return definitions;
 }
+function getAutoReplyEmailFields(config) {
+  const fieldTypes = /* @__PURE__ */ new Map();
+  for (const definition of collectFieldDefinitions(config)) {
+    const types = fieldTypes.get(definition.name) || /* @__PURE__ */ new Set();
+    types.add(definition.type);
+    fieldTypes.set(definition.name, types);
+  }
+  return [...fieldTypes.entries()].filter(([, types]) => types.size === 1 && types.has("email")).map(([name]) => name);
+}
+function resolveAutoReplyEmailField(config) {
+  const eligibleFields = getAutoReplyEmailFields(config);
+  const configuredValue = config.notify?.autoReplyEmailField;
+  if (configuredValue !== void 0 && typeof configuredValue !== "string") return null;
+  const configuredField = configuredValue?.trim();
+  if (configuredField) {
+    return eligibleFields.includes(configuredField) ? configuredField : null;
+  }
+  return eligibleFields.length === 1 ? eligibleFields[0] : null;
+}
 var MAX_UNKNOWN_FIELDS = 20;
 var MAX_VALUE_LENGTH = 5e3;
 function validateChoice(definition, rawValue) {
@@ -443,6 +462,8 @@ export {
   fieldOptions,
   HONEYPOT_FIELD_NAME,
   createMemoryRateLimitStore,
+  getAutoReplyEmailFields,
+  resolveAutoReplyEmailField,
   processSubmission,
   isOriginAllowed
 };

package/dist/{chunk-WQDHEQDE.js → chunk-ULE565KD.js}

@@ -221,6 +221,32 @@ function fieldOptions(field) {
 
 // src/forms/submission.ts
 var HONEYPOT_FIELD_NAME = "website_url_confirm";
+function collectFieldDefinitions(config) {
+  const definitions = [];
+  for (const step of config.steps || []) {
+    for (const field of step.fields || []) {
+      const name = typeof field.name === "string" ? field.name.trim() : "";
+      if (!name) continue;
+      definitions.push({
+        name,
+        type: inferFieldType(field),
+        required: field.required === true,
+        label: typeof field.label === "string" && field.label.length > 0 ? field.label : name,
+        options: fieldOptions(field)
+      });
+    }
+  }
+  return definitions;
+}
+function getAutoReplyEmailFields(config) {
+  const fieldTypes = /* @__PURE__ */ new Map();
+  for (const definition of collectFieldDefinitions(config)) {
+    const types = fieldTypes.get(definition.name) || /* @__PURE__ */ new Set();
+    types.add(definition.type);
+    fieldTypes.set(definition.name, types);
+  }
+  return [...fieldTypes.entries()].filter(([, types]) => types.size === 1 && types.has("email")).map(([name]) => name);
+}
 
 // src/forms/react.tsx
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -348,7 +374,6 @@ function FormRenderer({
         return;
       }
       setState("success");
-      funnel("submit");
       onSuccess?.();
     } catch {
       setState("error");
@@ -523,5 +548,6 @@ function FormRenderer({
 
 export {
   FORM_FIELD_TYPES,
+  getAutoReplyEmailFields,
   FormRenderer
 };

package/dist/forms/index.d.ts

@@ -1,4 +1,4 @@
-export { F as FormConfig, a as FormFieldConfig, b as FormNotifyConfig, H as HONEYPOT_FIELD_NAME, P as ProcessSubmissionArgs, c as ProcessSubmissionResult, R as RateLimitStore, d as createMemoryRateLimitStore, p as processSubmission } from '../submission-BKdBedOe.js';
+export { F as FormConfig, a as FormFieldConfig, b as FormNotifyConfig, H as HONEYPOT_FIELD_NAME, P as ProcessSubmissionArgs, c as ProcessSubmissionResult, R as RateLimitStore, d as createMemoryRateLimitStore, g as getAutoReplyEmailFields, p as processSubmission, r as resolveAutoReplyEmailField } from '../submission-CGz0lElf.js';
 
 /**
  * Shared, isomorphic form validation and normalization.

package/dist/forms/index.js

@@ -4,31 +4,35 @@ import {
   createMemoryRateLimitStore,
   fieldOptions,
   formatPhoneUS,
+  getAutoReplyEmailFields,
   inferFieldType,
   normalizeEmail,
   normalizeFieldValue,
   normalizePhone,
   normalizeUrl,
   processSubmission,
+  resolveAutoReplyEmailField,
   validateDate,
   validateEmail,
   validateNumber,
   validatePhoneUS,
   validateRequired,
   validateUrl
-} from "../chunk-VPUODCNH.js";
+} from "../chunk-CFZP7674.js";
 export {
   FORM_FIELD_TYPES,
   HONEYPOT_FIELD_NAME,
   createMemoryRateLimitStore,
   fieldOptions,
   formatPhoneUS,
+  getAutoReplyEmailFields,
   inferFieldType,
   normalizeEmail,
   normalizeFieldValue,
   normalizePhone,
   normalizeUrl,
   processSubmission,
+  resolveAutoReplyEmailField,
   validateDate,
   validateEmail,
   validateNumber,

package/dist/forms/react.d.ts

@@ -1,6 +1,6 @@
 import * as react from 'react';
 import { ReactNode } from 'react';
-import { F as FormConfig } from '../submission-CzrfXu17.js';
+import { F as FormConfig } from '../submission-CKZgx1h7.js';
 
 /**
  * The shared, config-driven form renderer: the same component renders a form

package/dist/forms/react.js

@@ -2,7 +2,7 @@
 "use client";
 import {
   FormRenderer
-} from "../chunk-WQDHEQDE.js";
+} from "../chunk-ULE565KD.js";
 export {
   FormRenderer
 };

package/dist/server/index.d.ts

@@ -1,6 +1,6 @@
 import { SupabaseClient } from '@supabase/supabase-js';
 import { BlockRegistry, PageLayout } from '../blocks/index.js';
-import { F as FormConfig, R as RateLimitStore } from '../submission-BKdBedOe.js';
+import { F as FormConfig, R as RateLimitStore } from '../submission-CGz0lElf.js';
 export { CONTENT_CACHE_TAG } from '../content/index.js';
 import 'react';
 import 'zod';
@@ -34,6 +34,8 @@ type NotifySubmissionArgs = {
     successMessage?: string;
     data: Record<string, unknown>;
     siteName?: string;
+    /** Caller confirmation that abuse controls admitted this auto-reply. */
+    autoReplyAllowed?: boolean;
 };
 /**
  * Sends the notification email(s) for one accepted submission: a copy to each
@@ -69,6 +71,22 @@ type CmsRoutesOptions = {
     maxUploadBytes?: number;
     /** Days of raw analytics events to keep (default 90). */
     analyticsRetentionDays?: number;
+    /** Optional stricter public analytics budgets. Values cannot raise defaults. */
+    analyticsLimits?: Partial<{
+        requestsPerMinute: number;
+        siteRequestsPerMinute: number;
+        siteRequestsPerDay: number;
+        clientEventsPerMinute: number;
+        clientEventsPerDay: number;
+        siteEventsPerMinute: number;
+        siteEventsPerDay: number;
+    }>;
+    /** Optional stricter auto-reply budgets. Values cannot raise defaults. */
+    autoReplyLimits?: Partial<{
+        recipientPerHour: number;
+        sitePerMinute: number;
+        sitePerDay: number;
+    }>;
     /**
      * Dev-only: uploads are stored as data URLs instead of Supabase Storage so
      * the memory backend can serve them. Never enable in production.
@@ -92,6 +110,7 @@ declare function createDurableRateLimitStore(getClient: () => SupabaseClient, op
     max?: number;
     windowMs?: number;
     bucket?: string;
+    failClosed?: boolean;
 }): RateLimitStore;
 declare function createCmsRoutes(options: CmsRoutesOptions): {
     GET: (request: Request, context: RouteContext) => Promise<Response>;
@@ -101,6 +120,7 @@ declare function createCmsRoutes(options: CmsRoutesOptions): {
 };
 
 declare const PREVIEW_TOKEN_TTL_MS: number;
+declare const PREVIEW_SESSION_COOKIE = "orion_preview_session";
 declare function createPreviewToken(pageId: string, secret: string, ttlMs?: number): string;
 /** Returns the page id when the token is valid and unexpired, else null. */
 declare function verifyPreviewToken(token: string, secret: string): string | null;
@@ -123,8 +143,9 @@ declare function getPreviewPage(client: SupabaseClient, token: string, secret: s
  * out. Isomorphic and dependency-free so the same code serves the Supabase
  * and memory backends and is trivially testable.
  *
- * Conversion = a call tap, a form submission, or an email click. A session
- * "converted" when it contains at least one conversion event.
+ * Call and email taps are useful interaction counts, but browser events are
+ * forgeable. A conversion requires a server-verified event, currently a form
+ * submission recorded after the authoritative lead write succeeds.
  */
 type StoredEvent = {
     id?: number | string;
@@ -139,6 +160,7 @@ type StoredEvent = {
     region: string;
     city: string;
     meta: Record<string, unknown> | null;
+    server_verified?: boolean;
     created_at: string;
 };
 type AnalyticsKpis = {
@@ -401,4 +423,4 @@ declare function createMemoryCms(): MemoryCms;
 /** Process-wide singleton for Next.js dev servers (module state survives HMR via globalThis). */
 declare function getMemoryCms(): MemoryCms;
 
-export { type AnalyticsEventType, type AnalyticsKpis, type AnalyticsSummary, type CmsAction, type CmsEnv, type CmsRole, type CmsRoutesOptions, type CmsUser, type EmailMessage, type EmailSender, type IncomingEvent, MEMORY_DEV_TOKEN, type MemoryCms, PREVIEW_TOKEN_TTL_MS, type PreviewPage, type ResendSenderOptions, type StoredEvent, type SyncFormInput, type SyncGlobalInput, type SyncInput, type SyncMediaInput, type SyncPageInput, type SyncResult, aggregateAnalytics, can, createCmsRoutes, createDurableRateLimitStore, createMemoryCms, createPreviewToken, createResendSender, deviceFrom, formatSubmissionText, geoFrom, getMemoryCms, getPreviewPage, getServiceClient, isBotRequest, isStructuralChange, notifySubmission, parseEventBatch, readCmsEnv, resolveUser, runContentSync, sessionKeyFor, setServiceClientForTesting, verifyPreviewToken, visitorKeyFor };
+export { type AnalyticsEventType, type AnalyticsKpis, type AnalyticsSummary, type CmsAction, type CmsEnv, type CmsRole, type CmsRoutesOptions, type CmsUser, type EmailMessage, type EmailSender, type IncomingEvent, MEMORY_DEV_TOKEN, type MemoryCms, PREVIEW_SESSION_COOKIE, PREVIEW_TOKEN_TTL_MS, type PreviewPage, type ResendSenderOptions, type StoredEvent, type SyncFormInput, type SyncGlobalInput, type SyncInput, type SyncMediaInput, type SyncPageInput, type SyncResult, aggregateAnalytics, can, createCmsRoutes, createDurableRateLimitStore, createMemoryCms, createPreviewToken, createResendSender, deviceFrom, formatSubmissionText, geoFrom, getMemoryCms, getPreviewPage, getServiceClient, isBotRequest, isStructuralChange, notifySubmission, parseEventBatch, readCmsEnv, resolveUser, runContentSync, sessionKeyFor, setServiceClientForTesting, verifyPreviewToken, visitorKeyFor };