@prenta/core 0.118.0

package/dist/forms/types.d.ts

@@ -0,0 +1,259 @@
+/**
+ * Forms domain contracts.
+ *
+ * These types are the single source of truth shared across the data layer,
+ * the REST API, the admin UI service client, and the public form renderer.
+ * They intentionally mirror the persisted shapes (Prisma `FormSubmission`,
+ * `FormSchemaVersion`, `FormSubmissionFile`, `FormWebhook`) plus the form
+ * definition that lives as a typed `forms` document.
+ *
+ * Storage split:
+ *   - Form *definitions* live in `prenta_documents` (collection `forms`); the
+ *     `FormDefinition` shape below is the parsed view of `document.data`.
+ *   - Field *schema* is versioned in `prenta_form_schema_versions`.
+ *   - *Submissions* live in `prenta_form_submissions` and reference the schema
+ *     version they were captured against (`schemaVersionId`).
+ */
+import type { FormAnalyticsConfig } from './analytics.js';
+export type FormFieldType = 'text' | 'email' | 'phone' | 'textarea' | 'select' | 'multiselect' | 'radio' | 'checkbox' | 'date' | 'number' | 'url' | 'hidden' | 'file' | 'consent' | 'richtext' | 'divider' | 'honeypot';
+/** Field types that capture user input (excludes display-only/system fields). */
+export declare const INPUT_FIELD_TYPES: readonly FormFieldType[];
+/** Field types that never produce a stored value. */
+export declare const NON_INPUT_FIELD_TYPES: readonly FormFieldType[];
+/** PII sensitivity classification used for masking, encryption, and export gating. */
+export type PiiClassification = 'none' | 'low' | 'medium' | 'high';
+/** A single selectable option for select/multiselect/radio fields. */
+export interface FormFieldOption {
+    label: string;
+    value: string;
+}
+/** Declarative, server-enforceable validation for a field. */
+export interface FieldValidationRules {
+    required?: boolean;
+    minLength?: number;
+    maxLength?: number;
+    pattern?: string;
+    /** Built-in format validators layered on top of `type`. */
+    format?: 'email' | 'phone' | 'url';
+    min?: number;
+    max?: number;
+    /** Allowed MIME types for file fields. */
+    fileTypes?: string[];
+    /** Max upload size in megabytes for file fields. */
+    maxFileSizeMB?: number;
+    /** Named server-side hook to run for custom validation (resolved by config). */
+    customValidator?: string;
+}
+export type ConditionalOperator = 'equals' | 'notEquals' | 'contains' | 'isEmpty' | 'isNotEmpty';
+/** Show/hide or require-when rules driven by another field's value. */
+export interface ConditionalRule {
+    fieldKey: string;
+    operator: ConditionalOperator;
+    value?: string;
+}
+export interface ConditionalLogic {
+    show?: ConditionalRule[];
+    require?: ConditionalRule[];
+}
+export type FieldWidth = 'full' | 'half' | 'third';
+export interface FormField {
+    id: string;
+    label: string;
+    key: string;
+    type: FormFieldType;
+    required: boolean;
+    placeholder?: string;
+    helpText?: string;
+    defaultValue?: string | number | boolean | string[] | null;
+    options?: FormFieldOption[];
+    validationRules?: FieldValidationRules;
+    conditionalLogic?: ConditionalLogic;
+    sortOrder: number;
+    width?: FieldWidth;
+    piiClassification?: PiiClassification;
+    encrypted?: boolean;
+}
+export interface FormSchemaVersion {
+    id: string;
+    formId: string;
+    version: number;
+    fields: FormField[];
+    notes?: string | null;
+    createdById?: string | null;
+    createdAt: string;
+}
+export interface FormWebhookConfig {
+    id: string;
+    formId: string;
+    url: string;
+    /** Present in admin responses only when the caller may view secrets. */
+    secret?: string;
+    enabled: boolean;
+    events: FormWebhookEvent[];
+    retryCount: number;
+    lastDeliveryAt?: string | null;
+    lastDeliveryStatus?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export type FormWebhookEvent = 'form.submitted' | 'form.entry.starred' | 'form.entry.archived' | 'form.spam_detected';
+export interface FormNotificationSettings {
+    enabled: boolean;
+    recipients: string[];
+    /**
+     * Form field key used as Reply-To. When empty/null, the derived submitter
+     * email (`senderEmail`) is used automatically.
+     */
+    replyToFieldKey?: string | null;
+    subjectTemplate?: string;
+    messageTemplate?: string;
+    /** Append every submitted field to the notification body. Default true. */
+    includeFields?: boolean;
+    /** Append marketing attribution (UTM/referrer/channel) when present. Default true. */
+    includeAttribution?: boolean;
+    excludeSensitiveFields?: boolean;
+    autoresponderEnabled?: boolean;
+    autoresponderEmailFieldKey?: string | null;
+    autoresponderSubject?: string;
+    autoresponderBody?: string;
+    webhookEnabled?: boolean;
+}
+export type SpamProtectionStrategy = 'honeypot' | 'timeToSubmit' | 'rateLimit' | 'captcha' | 'domainAllowlist' | 'blocklist' | 'keyword' | 'aiClassifier';
+export interface FormSpamSettings {
+    strategies?: SpamProtectionStrategy[];
+    honeypotFieldKey?: string;
+    /** Minimum seconds between render and submit; faster is treated as a bot. */
+    minSubmitSeconds?: number;
+    allowedDomains?: string[];
+    blockedEmails?: string[];
+    blockedDomains?: string[];
+    blockedKeywords?: string[];
+}
+export interface FormEmbedSettings {
+    /** Origins allowed to host the embedded form (empty = any). */
+    allowedDomains?: string[];
+    embedToken?: string | null;
+}
+export type FormStatus = 'active' | 'draft' | 'archived';
+export interface FormDefinition {
+    id: string;
+    name: string;
+    slug: string;
+    description?: string;
+    status: FormStatus;
+    activeSchemaVersionId?: string | null;
+    fields: FormField[];
+    notificationSettings?: FormNotificationSettings;
+    embedSettings?: FormEmbedSettings;
+    spamSettings?: FormSpamSettings;
+    successMessage?: string;
+    redirectUrl?: string;
+    /**
+     * GA4 event tracking config. Client-safe by design (measurement IDs are
+     * public); exposed on the public schema only when `enabled` is true.
+     */
+    analytics?: FormAnalyticsConfig;
+    /** Aggregate counters surfaced in the list/sidebar (computed by services). */
+    totalEntries?: number;
+    unreadEntries?: number;
+    starredEntries?: number;
+    lastEntryAt?: string | null;
+    notifyEnabled?: boolean;
+    createdBy?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    archivedAt?: string | null;
+}
+export type SpamStatus = 'clean' | 'suspected' | 'spam';
+export interface FormSubmissionFile {
+    id: string;
+    submissionId: string;
+    fieldKey: string;
+    mediaAssetId?: string | null;
+    fileName: string;
+    mimeType: string;
+    sizeBytes: number;
+    storageKey: string;
+    publicUrl?: string | null;
+    secureDownloadUrl?: string | null;
+    createdAt: string;
+}
+export interface FormSubmission {
+    id: string;
+    entryNumber?: number | null;
+    formId: string;
+    formName?: string;
+    formSlug?: string;
+    schemaVersionId?: string | null;
+    data: Record<string, unknown>;
+    normalizedData?: Record<string, unknown> | null;
+    senderName?: string | null;
+    senderEmail?: string | null;
+    senderPhone?: string | null;
+    preview?: string | null;
+    unread: boolean;
+    starred: boolean;
+    archived: boolean;
+    spamStatus: SpamStatus;
+    ipAddressHash?: string | null;
+    userAgent?: string | null;
+    referrer?: string | null;
+    pageUrl?: string | null;
+    utmSource?: string | null;
+    utmMedium?: string | null;
+    utmCampaign?: string | null;
+    /** Full client-captured attribution blob (merged first/last touch). */
+    attribution?: Record<string, unknown> | null;
+    submittedAt: string;
+    readAt?: string | null;
+    archivedAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    files?: FormSubmissionFile[];
+}
+export interface FetchFormsParams {
+    search?: string;
+    status?: FormStatus;
+    notifyEnabled?: boolean;
+    sortBy?: string;
+    sortDirection?: 'asc' | 'desc';
+    page?: number;
+    pageSize?: number;
+}
+export interface FetchFormEntriesParams {
+    search?: string;
+    formId?: string;
+    unread?: boolean;
+    starred?: boolean;
+    archived?: boolean;
+    spamStatus?: SpamStatus;
+    dateFrom?: string;
+    dateTo?: string;
+    thisWeek?: boolean;
+    sortBy?: string;
+    sortDirection?: 'asc' | 'desc';
+    page?: number;
+    pageSize?: number;
+}
+export interface FormStats {
+    totalForms: number;
+    activeForms: number;
+    totalEntries: number;
+    unreadEntries: number;
+}
+/** A sidebar nav entry with its dynamic unread count. */
+export interface FormsSidebarCount {
+    formId: string;
+    name: string;
+    slug: string;
+    status: FormStatus;
+    unread: number;
+}
+export interface EntryCounts {
+    total: number;
+    unread: number;
+    starred: number;
+    thisWeek: number;
+    byForm: Record<string, number>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/forms/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/forms/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAIzD,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,OAAO,GACP,OAAO,GACP,UAAU,GACV,QAAQ,GACR,aAAa,GACb,OAAO,GACP,UAAU,GACV,MAAM,GACN,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,MAAM,GACN,SAAS,GACT,UAAU,GACV,SAAS,GACT,UAAU,CAAA;AAEd,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,EAAE,SAAS,aAAa,EAerD,CAAA;AAED,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,EAAE,SAAS,aAAa,EAAwC,CAAA;AAElG,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAElE,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,8DAA8D;AAC9D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,KAAK,CAAA;IAClC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,CAAA;AAEhG,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,eAAe,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;CAC5B;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAElD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,aAAa,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAAA;IAC1D,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;IAC3B,eAAe,CAAC,EAAE,oBAAoB,CAAA;IACtC,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAID,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;CAClB;AAID,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,gBAAgB,EAAE,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,oBAAoB,CAAA;AAExB,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,MAAM,sBAAsB,GAC9B,UAAU,GACV,cAAc,GACd,WAAW,GACX,SAAS,GACT,iBAAiB,GACjB,WAAW,GACX,SAAS,GACT,cAAc,CAAA;AAElB,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAA;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAID,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;AAExD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,UAAU,CAAA;IAClB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,oBAAoB,CAAC,EAAE,wBAAwB,CAAA;IAC/C,aAAa,CAAC,EAAE,iBAAiB,CAAA;IACjC,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAA;IAC/B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAID,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,CAAA;AAEvD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC/C,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;IACjB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC5C,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAA;CAC7B;AAID,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,UAAU,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC/B"}

package/dist/forms/types.js

@@ -0,0 +1,20 @@
+/** Field types that capture user input (excludes display-only/system fields). */
+export const INPUT_FIELD_TYPES = [
+    'text',
+    'email',
+    'phone',
+    'textarea',
+    'select',
+    'multiselect',
+    'radio',
+    'checkbox',
+    'date',
+    'number',
+    'url',
+    'hidden',
+    'file',
+    'consent',
+];
+/** Field types that never produce a stored value. */
+export const NON_INPUT_FIELD_TYPES = ['richtext', 'divider', 'honeypot'];
+//# sourceMappingURL=types.js.map

package/dist/forms/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/forms/types.ts"],"names":[],"mappings":"AAuCA,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAA6B;IACzD,MAAM;IACN,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,aAAa;IACb,OAAO;IACP,UAAU;IACV,MAAM;IACN,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAA;AAED,qDAAqD;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAA6B,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA"}

package/dist/forms/validation.d.ts

@@ -0,0 +1,19 @@
+import type { FormField } from './types.js';
+export interface FieldError {
+    key: string;
+    message: string;
+}
+export interface SubmissionValidationResult {
+    ok: boolean;
+    errors: FieldError[];
+    /** Sanitized raw values keyed by field key (HTML stripped from strings). */
+    data: Record<string, unknown>;
+    /** Type-coerced values for export/search. */
+    normalized: Record<string, unknown>;
+}
+export interface ValidateOptions {
+    /** Field keys that have an accompanying uploaded file (for required-file checks). */
+    fileKeys?: ReadonlySet<string>;
+}
+export declare function validateAndNormalizeSubmission(fields: FormField[], rawValues: Record<string, unknown>, options?: ValidateOptions): SubmissionValidationResult;
+//# sourceMappingURL=validation.d.ts.map

package/dist/forms/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/forms/validation.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAC/B;AAQD,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,SAAS,EAAE,EACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,OAAO,GAAE,eAAoB,GAC5B,0BAA0B,CAuJ5B"}

package/dist/forms/validation.js

@@ -0,0 +1,166 @@
+/**
+ * Server-side submission validation + normalization.
+ *
+ * This is the authoritative gate for incoming public form submissions: the
+ * client-side form is convenience only and is assumed hostile. Every value is
+ * validated against the field's declared type and `validationRules`, then split
+ * into two views:
+ *
+ *   - `data`        — the sanitized *raw* values (HTML-stripped strings) that we
+ *                     persist and render back in the admin inbox.
+ *   - `normalized`  — type-coerced values (numbers as numbers, checkboxes as
+ *                     booleans, dates as ISO strings) used for export/search.
+ *
+ * Keys that are not part of the schema are dropped entirely — a submitter
+ * cannot smuggle arbitrary columns into the stored payload. Fields hidden by
+ * conditional logic are skipped (not required, not stored).
+ */
+import { stripHtml } from '../security/sanitize.js';
+import { FORM_EMAIL_RE, FORM_MAX_MULTISELECT_ITEMS, FORM_MAX_TEXT_LEN, FORM_MAX_TEXTAREA_LEN, FORM_NON_INPUT_TYPES, FORM_PHONE_RE, asString, coerceBoolean, isFieldConditionallyRequired, isFieldVisible, isHttpUrl, isValuePresent, } from './client-validation.js';
+// Shared rule primitives (regexes, caps, conditional logic) live in
+// `client-validation.ts` — the client-safe module published at
+// `@prenta/core/forms/client` — so client and server can never
+// drift. This module adds the server-only parts: HTML stripping and the
+// data/normalized split.
+export function validateAndNormalizeSubmission(fields, rawValues, options = {}) {
+    const errors = [];
+    const data = {};
+    const normalized = {};
+    const fileKeys = options.fileKeys ?? new Set();
+    for (const field of fields) {
+        if (FORM_NON_INPUT_TYPES.has(field.type))
+            continue;
+        if (!isFieldVisible(field, rawValues))
+            continue;
+        const key = field.key;
+        const label = field.label || key;
+        const rules = field.validationRules ?? {};
+        const required = Boolean(field.required) ||
+            Boolean(rules.required) ||
+            isFieldConditionallyRequired(field, rawValues);
+        if (field.type === 'file') {
+            if (required && !fileKeys.has(key)) {
+                errors.push({ key, message: `${label} is required.` });
+            }
+            continue;
+        }
+        const raw = rawValues[key];
+        if (!isValuePresent(raw)) {
+            if (required)
+                errors.push({ key, message: `${label} is required.` });
+            continue;
+        }
+        switch (field.type) {
+            case 'checkbox':
+            case 'consent': {
+                const bool = coerceBoolean(raw);
+                if ((field.type === 'consent' || required) && !bool) {
+                    errors.push({ key, message: `${label} must be accepted.` });
+                }
+                data[key] = bool;
+                normalized[key] = bool;
+                break;
+            }
+            case 'number': {
+                const num = typeof raw === 'number' ? raw : Number(asString(raw).trim());
+                if (!Number.isFinite(num)) {
+                    errors.push({ key, message: `${label} must be a number.` });
+                    break;
+                }
+                if (rules.min != null && num < rules.min) {
+                    errors.push({ key, message: `${label} must be at least ${rules.min}.` });
+                }
+                if (rules.max != null && num > rules.max) {
+                    errors.push({ key, message: `${label} must be at most ${rules.max}.` });
+                }
+                data[key] = num;
+                normalized[key] = num;
+                break;
+            }
+            case 'multiselect': {
+                const list = Array.isArray(raw) ? raw : [raw];
+                if (list.length > FORM_MAX_MULTISELECT_ITEMS) {
+                    errors.push({ key, message: `${label} has too many selections.` });
+                    break;
+                }
+                const cleaned = list.map((v) => stripHtml(asString(v)).trim()).filter((v) => v !== '');
+                const allowed = new Set((field.options ?? []).map((o) => o.value));
+                if (allowed.size > 0 && cleaned.some((v) => !allowed.has(v))) {
+                    errors.push({ key, message: `${label} contains an invalid selection.` });
+                }
+                data[key] = cleaned;
+                normalized[key] = cleaned;
+                break;
+            }
+            case 'select':
+            case 'radio': {
+                const val = stripHtml(asString(raw)).trim();
+                const allowed = new Set((field.options ?? []).map((o) => o.value));
+                if (allowed.size > 0 && !allowed.has(val)) {
+                    errors.push({ key, message: `${label} contains an invalid selection.` });
+                }
+                data[key] = val;
+                normalized[key] = val;
+                break;
+            }
+            case 'date': {
+                const s = asString(raw).trim();
+                const d = new Date(s);
+                if (Number.isNaN(d.getTime())) {
+                    errors.push({ key, message: `${label} is not a valid date.` });
+                    data[key] = s;
+                }
+                else {
+                    data[key] = s;
+                    normalized[key] = d.toISOString();
+                }
+                break;
+            }
+            default: {
+                // text, email, phone, url, textarea, hidden
+                const s = stripHtml(asString(raw)).trim();
+                const maxLen = rules.maxLength ?? (field.type === 'textarea' ? FORM_MAX_TEXTAREA_LEN : FORM_MAX_TEXT_LEN);
+                if (s.length > maxLen) {
+                    errors.push({ key, message: `${label} must be at most ${maxLen} characters.` });
+                }
+                if (rules.minLength != null && s.length < rules.minLength) {
+                    errors.push({ key, message: `${label} must be at least ${rules.minLength} characters.` });
+                }
+                const format = rules.format ??
+                    (field.type === 'email'
+                        ? 'email'
+                        : field.type === 'url'
+                            ? 'url'
+                            : field.type === 'phone'
+                                ? 'phone'
+                                : undefined);
+                if (format === 'email' && !FORM_EMAIL_RE.test(s)) {
+                    errors.push({ key, message: `${label} must be a valid email address.` });
+                }
+                else if (format === 'phone' && !FORM_PHONE_RE.test(s)) {
+                    errors.push({ key, message: `${label} must be a valid phone number.` });
+                }
+                else if (format === 'url') {
+                    if (!isHttpUrl(s)) {
+                        errors.push({ key, message: `${label} must be a valid URL.` });
+                    }
+                }
+                if (rules.pattern) {
+                    try {
+                        if (!new RegExp(rules.pattern).test(s)) {
+                            errors.push({ key, message: `${label} is not in the expected format.` });
+                        }
+                    }
+                    catch {
+                        // An invalid pattern in the schema must never block a submission;
+                        // schema validation already surfaces bad patterns to the editor.
+                    }
+                }
+                data[key] = s;
+                normalized[key] = s;
+            }
+        }
+    }
+    return { ok: errors.length === 0, errors, data, normalized };
+}
+//# sourceMappingURL=validation.js.map

package/dist/forms/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/forms/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,QAAQ,EACR,aAAa,EACb,4BAA4B,EAC5B,cAAc,EACd,SAAS,EACT,cAAc,GACf,MAAM,wBAAwB,CAAA;AAsB/B,oEAAoE;AACpE,+DAA+D;AAC/D,+DAA+D;AAC/D,wEAAwE;AACxE,yBAAyB;AAEzB,MAAM,UAAU,8BAA8B,CAC5C,MAAmB,EACnB,SAAkC,EAClC,UAA2B,EAAE;IAE7B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,MAAM,UAAU,GAA4B,EAAE,CAAA;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAA;IAEtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAQ;QAClD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,SAAQ;QAE/C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,CAAA;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAA;QACzC,MAAM,QAAQ,GACZ,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YACvB,4BAA4B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QAEhD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,eAAe,EAAE,CAAC,CAAA;YACxD,CAAC;YACD,SAAQ;QACV,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,eAAe,EAAE,CAAC,CAAA;YACpE,SAAQ;QACV,CAAC;QAED,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,UAAU,CAAC;YAChB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACpD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,oBAAoB,EAAE,CAAC,CAAA;gBAC7D,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;gBAChB,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBACxE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,oBAAoB,EAAE,CAAC,CAAA;oBAC3D,MAAK;gBACP,CAAC;gBACD,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,qBAAqB,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAA;gBAC1E,CAAC;gBACD,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,oBAAoB,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAA;gBACzE,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;gBACf,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;gBACrB,MAAK;YACP,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;gBAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,2BAA2B,EAAE,CAAC,CAAA;oBAClE,MAAK;gBACP,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;gBACtF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;gBAClE,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,iCAAiC,EAAE,CAAC,CAAA;gBAC1E,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAA;gBACnB,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAA;gBACzB,MAAK;YACP,CAAC;YAED,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;gBAClE,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,iCAAiC,EAAE,CAAC,CAAA;gBAC1E,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;gBACf,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;gBACrB,MAAK;YACP,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC9B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;gBACrB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,uBAAuB,EAAE,CAAC,CAAA;oBAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACf,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;oBACb,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;gBACnC,CAAC;gBACD,MAAK;YACP,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,4CAA4C;gBAC5C,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACzC,MAAM,MAAM,GACV,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;gBAC5F,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,oBAAoB,MAAM,cAAc,EAAE,CAAC,CAAA;gBACjF,CAAC;gBACD,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;oBAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,qBAAqB,KAAK,CAAC,SAAS,cAAc,EAAE,CAAC,CAAA;gBAC3F,CAAC;gBAED,MAAM,MAAM,GACV,KAAK,CAAC,MAAM;oBACZ,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;wBACrB,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK;4BACpB,CAAC,CAAC,KAAK;4BACP,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;gCACtB,CAAC,CAAC,OAAO;gCACT,CAAC,CAAC,SAAS,CAAC,CAAA;gBAEpB,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,iCAAiC,EAAE,CAAC,CAAA;gBAC1E,CAAC;qBAAM,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,gCAAgC,EAAE,CAAC,CAAA;gBACzE,CAAC;qBAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBAC5B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,uBAAuB,EAAE,CAAC,CAAA;oBAChE,CAAC;gBACH,CAAC;gBAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,IAAI,CAAC;wBACH,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;4BACvC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,iCAAiC,EAAE,CAAC,CAAA;wBAC1E,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,kEAAkE;wBAClE,iEAAiE;oBACnE,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACb,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC9D,CAAC"}

package/dist/forms/webhooks.d.ts

@@ -0,0 +1,60 @@
+import type { ActionContext } from '../actions.js';
+import type { FormWebhookConfig, FormWebhookEvent } from './types.js';
+export declare const FORM_WEBHOOK_EVENTS: readonly FormWebhookEvent[];
+export declare class FormWebhookError extends Error {
+    status: number;
+    constructor(message: string, status?: number);
+}
+export interface CreateFormWebhookInput {
+    url: string;
+    events?: FormWebhookEvent[];
+    secret?: string;
+    enabled?: boolean;
+    retryCount?: number;
+}
+export declare function createFormWebhook(ctx: ActionContext, formId: string, input: CreateFormWebhookInput): Promise<FormWebhookConfig & {
+    secret: string;
+}>;
+export declare function listFormWebhooks(formId: string): Promise<FormWebhookConfig[]>;
+export declare function getFormWebhook(id: string): Promise<FormWebhookConfig | null>;
+export interface UpdateFormWebhookInput {
+    url?: string;
+    events?: FormWebhookEvent[];
+    secret?: string;
+    enabled?: boolean;
+    retryCount?: number;
+}
+export declare function updateFormWebhook(ctx: ActionContext, id: string, patch: UpdateFormWebhookInput): Promise<FormWebhookConfig>;
+export declare function deleteFormWebhook(ctx: ActionContext, id: string): Promise<void>;
+export interface FormWebhookPayload {
+    event: FormWebhookEvent;
+    timestamp: string;
+    formId: string;
+    formSlug?: string;
+    submissionId?: string;
+    entryNumber?: number | null;
+    data?: Record<string, unknown>;
+    /** Merged first/last-touch marketing attribution captured client-side. */
+    attribution?: Record<string, unknown> | null;
+}
+export interface WebhookDeliveryResult {
+    ok: boolean;
+    status: number;
+    attempts: number;
+    error?: string;
+}
+/**
+ * Dispatch an event to all enabled webhooks for a form that subscribe to it.
+ * Best-effort and non-throwing — intended to run in the request's async tail.
+ * When `payload.submissionId` is set, each delivery persists a
+ * `FormDeliveryAttempt` row (#675).
+ */
+export declare function dispatchFormWebhooks(formId: string, payload: Omit<FormWebhookPayload, 'timestamp'>): Promise<{
+    matched: number;
+    delivered: number;
+}>;
+/** Deliver to one webhook by id (used by delivery retry). Never throws. */
+export declare function deliverFormWebhookById(webhookId: string, payload: Omit<FormWebhookPayload, 'timestamp'>): Promise<WebhookDeliveryResult>;
+/** Send a sample payload to a single webhook to verify configuration. */
+export declare function testFormWebhook(ctx: ActionContext, id: string): Promise<WebhookDeliveryResult>;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/forms/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/forms/webhooks.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAOrE,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAK1D,CAAA;AA0CD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,MAAM,EAAE,MAAM,CAAA;gBACF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAM;CAK1C;AAQD,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,iBAAiB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBjD;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAMnF;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAGlF;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAyB5B;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASrF;AASD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,gBAAgB,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AA0FD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAC7C,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAwFjD;AAED,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAC7C,OAAO,CAAC,qBAAqB,CAAC,CAmBhC;AAED,yEAAyE;AACzE,wBAAsB,eAAe,CACnC,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,qBAAqB,CAAC,CA0BhC"}