@prenta/core 0.118.0

package/dist/forms/webhooks.js

@@ -0,0 +1,360 @@
+/**
+ * Per-form outbound webhooks.
+ *
+ * Distinct from the site-wide `WebhookEndpoint` registry: form owners can wire
+ * delivery for their own forms without site-admin access. Secrets are stored
+ * encrypted, URLs are SSRF-validated on write, payloads are HMAC-SHA256 signed,
+ * and delivery goes through `safeFetch` (DNS-rebinding safe) with bounded
+ * inline retries + exponential backoff.
+ */
+import { randomBytes } from 'node:crypto';
+import { getDB } from '../db.js';
+import { logEvent } from '../security/audit.js';
+import { validateWebhookUrl } from '../security/webhook.js';
+import { safeFetch, SsrfBlockedError } from '../security/safe-fetch.js';
+import { encryptSecret, decryptSecret } from '../security/secret-storage.js';
+import { prentaWebhookHeaders, signPrentaWebhook } from '../webhooks/signing.js';
+import { createLogger } from '../diagnostics/logger.js';
+const logger = createLogger('forms-webhooks');
+export const FORM_WEBHOOK_EVENTS = [
+    'form.submitted',
+    'form.entry.starred',
+    'form.entry.archived',
+    'form.spam_detected',
+];
+const DEFAULT_MAX_RETRIES = 3;
+const RETRY_DELAYS_MS = [1_000, 3_000, 8_000];
+const DELIVERY_TIMEOUT_MS = 10_000;
+const MAX_STATUS_LEN = 200;
+function rawDb() {
+    return getDB();
+}
+function toISO(value) {
+    if (value instanceof Date)
+        return value.toISOString();
+    if (typeof value === 'string')
+        return value;
+    return new Date().toISOString();
+}
+function normalizeEvents(value) {
+    const arr = Array.isArray(value) ? value : [];
+    const valid = arr.filter((e) => FORM_WEBHOOK_EVENTS.includes(e));
+    return valid.length > 0 ? [...new Set(valid)] : ['form.submitted'];
+}
+/** Parse a DB row to the public config shape. The secret is masked unless explicitly requested. */
+function parseWebhook(row, includeSecret = false) {
+    return {
+        id: String(row.id),
+        formId: String(row.formId),
+        url: String(row.url),
+        ...(includeSecret ? { secret: row.secret } : {}),
+        enabled: Boolean(row.enabled),
+        events: normalizeEvents(row.events),
+        retryCount: Number(row.retryCount ?? 0),
+        lastDeliveryAt: row.lastDeliveryAt ? toISO(row.lastDeliveryAt) : null,
+        lastDeliveryStatus: row.lastDeliveryStatus ?? null,
+        createdAt: toISO(row.createdAt),
+        updatedAt: toISO(row.updatedAt),
+    };
+}
+export class FormWebhookError extends Error {
+    status;
+    constructor(message, status = 400) {
+        super(message);
+        this.name = 'FormWebhookError';
+        this.status = status;
+    }
+}
+function generateSecret() {
+    return `whsec_${randomBytes(24).toString('hex')}`;
+}
+export async function createFormWebhook(ctx, formId, input) {
+    const urlCheck = validateWebhookUrl(input.url);
+    if (!urlCheck.valid) {
+        throw new FormWebhookError(`Invalid webhook URL: ${urlCheck.error}`, 400);
+    }
+    const secret = input.secret?.trim() || generateSecret();
+    const row = await rawDb().formWebhook.create({
+        data: {
+            formId,
+            url: input.url,
+            secret: await encryptSecret(secret),
+            events: normalizeEvents(input.events),
+            enabled: input.enabled ?? true,
+            retryCount: clampRetries(input.retryCount),
+        },
+    });
+    await logEvent({
+        event: 'form.webhook.created',
+        userId: ctx.userId,
+        details: { formId, webhookId: row.id, url: input.url },
+    });
+    // Return the plaintext secret exactly once, on creation.
+    return { ...parseWebhook(row), secret };
+}
+export async function listFormWebhooks(formId) {
+    const rows = await rawDb().formWebhook.findMany({
+        where: { formId },
+        orderBy: { createdAt: 'desc' },
+    });
+    return rows.map((r) => parseWebhook(r));
+}
+export async function getFormWebhook(id) {
+    const row = await rawDb().formWebhook.findUnique({ where: { id } });
+    return row ? parseWebhook(row) : null;
+}
+export async function updateFormWebhook(ctx, id, patch) {
+    const existing = await rawDb().formWebhook.findUnique({ where: { id } });
+    if (!existing)
+        throw new FormWebhookError('Webhook not found', 404);
+    if (patch.url !== undefined) {
+        const urlCheck = validateWebhookUrl(patch.url);
+        if (!urlCheck.valid)
+            throw new FormWebhookError(`Invalid webhook URL: ${urlCheck.error}`, 400);
+    }
+    const data = {};
+    if (patch.url !== undefined)
+        data.url = patch.url;
+    if (patch.events !== undefined)
+        data.events = normalizeEvents(patch.events);
+    if (patch.enabled !== undefined)
+        data.enabled = patch.enabled;
+    if (patch.retryCount !== undefined)
+        data.retryCount = clampRetries(patch.retryCount);
+    if (patch.secret !== undefined && patch.secret.trim()) {
+        data.secret = await encryptSecret(patch.secret.trim());
+    }
+    const row = await rawDb().formWebhook.update({ where: { id }, data });
+    await logEvent({
+        event: 'form.webhook.updated',
+        userId: ctx.userId,
+        details: { formId: row.formId, webhookId: id },
+    });
+    return parseWebhook(row);
+}
+export async function deleteFormWebhook(ctx, id) {
+    const existing = await rawDb().formWebhook.findUnique({ where: { id } });
+    if (!existing)
+        throw new FormWebhookError('Webhook not found', 404);
+    await rawDb().formWebhook.delete({ where: { id } });
+    await logEvent({
+        event: 'form.webhook.deleted',
+        userId: ctx.userId,
+        details: { formId: existing.formId, webhookId: id },
+    });
+}
+function clampRetries(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value))
+        return DEFAULT_MAX_RETRIES;
+    return Math.min(10, Math.max(0, Math.floor(value)));
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
+ * Deliver a signed payload to one webhook URL with bounded retries. Each retry
+ * waits an increasing, capped delay. Returns the final result; never throws.
+ */
+async function deliverOnce(url, secret, payload, maxRetries, deliveryId) {
+    const body = JSON.stringify(payload);
+    const totalAttempts = maxRetries + 1;
+    let lastError = '';
+    let lastStatus = 0;
+    for (let attempt = 1; attempt <= totalAttempts; attempt++) {
+        try {
+            // Fresh timestamp per HTTP attempt; stable delivery id for idempotency (#679).
+            const { signature, timestampSec } = await signPrentaWebhook(body, secret);
+            const response = await safeFetch(url, {
+                method: 'POST',
+                headers: prentaWebhookHeaders({
+                    signature,
+                    timestampSec,
+                    event: payload.event,
+                    deliveryId,
+                    userAgent: 'PrentaCMS-FormWebhook/1.0',
+                }),
+                body,
+                timeoutMs: DELIVERY_TIMEOUT_MS,
+            });
+            lastStatus = response.status;
+            if (response.ok) {
+                return { ok: true, status: response.status, attempts: attempt };
+            }
+            lastError = `HTTP ${response.status}`;
+            // 4xx (except 408/429) won't succeed on retry — stop early.
+            if (response.status >= 400 &&
+                response.status < 500 &&
+                response.status !== 408 &&
+                response.status !== 429) {
+                return { ok: false, status: response.status, attempts: attempt, error: lastError };
+            }
+        }
+        catch (err) {
+            lastStatus = 0;
+            lastError =
+                err instanceof SsrfBlockedError
+                    ? `SSRF blocked: ${err.message}`
+                    : err instanceof Error
+                        ? err.message
+                        : 'Connection failed';
+            if (err instanceof SsrfBlockedError) {
+                return { ok: false, status: 0, attempts: attempt, error: lastError };
+            }
+        }
+        if (attempt < totalAttempts) {
+            await sleep(RETRY_DELAYS_MS[attempt - 1] ?? RETRY_DELAYS_MS[RETRY_DELAYS_MS.length - 1]);
+        }
+    }
+    return { ok: false, status: lastStatus, attempts: totalAttempts, error: lastError };
+}
+async function recordDelivery(id, result) {
+    const status = (result.ok ? 'success' : `failed: ${result.error ?? result.status}`).slice(0, MAX_STATUS_LEN);
+    try {
+        await rawDb().formWebhook.update({
+            where: { id },
+            data: { lastDeliveryAt: new Date(), lastDeliveryStatus: status },
+        });
+    }
+    catch (err) {
+        logger.error('failed to record webhook delivery', {
+            webhookId: id,
+            reason: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+/**
+ * Dispatch an event to all enabled webhooks for a form that subscribe to it.
+ * Best-effort and non-throwing — intended to run in the request's async tail.
+ * When `payload.submissionId` is set, each delivery persists a
+ * `FormDeliveryAttempt` row (#675).
+ */
+export async function dispatchFormWebhooks(formId, payload) {
+    let rows;
+    try {
+        rows = await rawDb().formWebhook.findMany({ where: { formId, enabled: true } });
+    }
+    catch (err) {
+        logger.error('failed to load webhooks', {
+            formId,
+            reason: err instanceof Error ? err.message : String(err),
+        });
+        return { matched: 0, delivered: 0 };
+    }
+    const matching = rows.filter((r) => normalizeEvents(r.events).includes(payload.event));
+    if (matching.length === 0)
+        return { matched: 0, delivered: 0 };
+    const full = { ...payload, timestamp: new Date().toISOString() };
+    let delivered = 0;
+    for (const row of matching) {
+        let secret;
+        try {
+            secret = await decryptSecret(row.secret);
+        }
+        catch (err) {
+            logger.error('failed to decrypt webhook secret', {
+                webhookId: row.id,
+                reason: err instanceof Error ? err.message : String(err),
+            });
+            continue;
+        }
+        let attemptId = null;
+        if (payload.submissionId) {
+            try {
+                const { createDeliveryAttempt } = await import('./delivery.js');
+                const created = await createDeliveryAttempt({
+                    submissionId: payload.submissionId,
+                    formId,
+                    channel: 'form_webhook',
+                    destination: String(row.url),
+                    webhookId: String(row.id),
+                    maxAttempts: clampRetries(row.retryCount) + 1,
+                    payload: full,
+                });
+                attemptId = created.id;
+            }
+            catch (err) {
+                logger.error('failed to create webhook delivery attempt', {
+                    webhookId: row.id,
+                    reason: err instanceof Error ? err.message : String(err),
+                });
+            }
+        }
+        const deliveryKey = attemptId ?? `form-webhook:${row.id}:${full.timestamp}`;
+        const result = await deliverOnce(row.url, secret, full, clampRetries(row.retryCount), deliveryKey);
+        await recordDelivery(row.id, result);
+        if (attemptId) {
+            const { markDeliverySuccess, markDeliveryFailure } = await import('./delivery.js');
+            if (result.ok) {
+                await markDeliverySuccess(attemptId, {
+                    responseStatus: result.status,
+                    attempts: result.attempts,
+                });
+            }
+            else {
+                const hardFail = result.status >= 400 &&
+                    result.status < 500 &&
+                    result.status !== 408 &&
+                    result.status !== 429;
+                await markDeliveryFailure(attemptId, {
+                    error: result.error ?? `HTTP ${result.status}`,
+                    responseStatus: result.status,
+                    attempts: result.attempts,
+                    permanent: hardFail || Boolean(result.error?.startsWith('SSRF')),
+                });
+            }
+        }
+        if (result.ok)
+            delivered++;
+    }
+    return { matched: matching.length, delivered };
+}
+/** Deliver to one webhook by id (used by delivery retry). Never throws. */
+export async function deliverFormWebhookById(webhookId, payload) {
+    const row = await rawDb().formWebhook.findUnique({ where: { id: webhookId } });
+    if (!row) {
+        return { ok: false, status: 0, attempts: 0, error: 'Webhook not found' };
+    }
+    let secret;
+    try {
+        secret = await decryptSecret(row.secret);
+    }
+    catch {
+        return { ok: false, status: 0, attempts: 0, error: 'Unable to read webhook secret' };
+    }
+    const full = { ...payload, timestamp: new Date().toISOString() };
+    const deliveryKey = typeof payload.submissionId === 'string' && payload.submissionId
+        ? `form-webhook-retry:${webhookId}:${payload.submissionId}`
+        : `form-webhook-retry:${webhookId}:${full.timestamp}`;
+    const result = await deliverOnce(row.url, secret, full, 0, deliveryKey);
+    await recordDelivery(webhookId, result);
+    return result;
+}
+/** Send a sample payload to a single webhook to verify configuration. */
+export async function testFormWebhook(ctx, id) {
+    const row = await rawDb().formWebhook.findUnique({ where: { id } });
+    if (!row)
+        throw new FormWebhookError('Webhook not found', 404);
+    let secret;
+    try {
+        secret = await decryptSecret(row.secret);
+    }
+    catch {
+        throw new FormWebhookError('Unable to read webhook secret', 500);
+    }
+    const payload = {
+        event: 'form.submitted',
+        timestamp: new Date().toISOString(),
+        formId: row.formId,
+        submissionId: 'test_submission',
+        data: { _test: true, message: 'This is a test delivery from Prenta CMS.' },
+    };
+    const result = await deliverOnce(row.url, secret, payload, 0, `form-webhook-test:${id}`);
+    await recordDelivery(id, result);
+    await logEvent({
+        event: 'form.webhook.tested',
+        userId: ctx.userId,
+        details: { formId: row.formId, webhookId: id, ok: result.ok, status: result.status },
+    });
+    return result;
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/forms/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/forms/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAKvD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAA;AAI7C,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC9D,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;CACrB,CAAA;AAED,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAC7B,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AAC7C,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAClC,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,SAAS,KAAK;IACZ,OAAO,KAAK,EAAM,CAAA;AACpB,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAA;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CACpD,mBAAmB,CAAC,QAAQ,CAAC,CAAqB,CAAC,CACpD,CAAA;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA;AACpE,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,GAAQ,EAAE,aAAa,GAAG,KAAK;IACnD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC1B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACvC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;QACrE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,IAAI;QAClD,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;KAChC,CAAA;AACH,CAAC;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,MAAM,CAAQ;IACd,YAAY,OAAe,EAAE,MAAM,GAAG,GAAG;QACvC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED,SAAS,cAAc;IACrB,OAAO,SAAS,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AACnD,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,MAAc,EACd,KAA6B;IAE7B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,cAAc,EAAE,CAAA;IACvD,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;QAC3C,IAAI,EAAE;YACJ,MAAM;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,MAAM,aAAa,CAAC,MAAM,CAAC;YACnC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC;SAC3C;KACF,CAAC,CAAA;IACF,MAAM,QAAQ,CAAC;QACb,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;KACvD,CAAC,CAAA;IACF,yDAAyD;IACzD,OAAO,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC9C,KAAK,EAAE,EAAE,MAAM,EAAE;QACjB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC/B,CAAC,CAAA;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU;IAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACnE,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACvC,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,EAAU,EACV,KAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACxE,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IAEnE,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IAChG,CAAC;IAED,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3E,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7D,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACpF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACrE,MAAM,QAAQ,CAAC;QACb,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;KAC/C,CAAC,CAAA;IACF,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAkB,EAAE,EAAU;IACpE,MAAM,QAAQ,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACxE,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IACnE,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACnD,MAAM,QAAQ,CAAC;QACb,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;KACpD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACpF,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC;AAuBD,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,MAAc,EACd,OAA2B,EAC3B,UAAkB,EAClB,UAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,aAAa,GAAG,UAAU,GAAG,CAAC,CAAA;IACpC,IAAI,SAAS,GAAG,EAAE,CAAA;IAClB,IAAI,UAAU,GAAG,CAAC,CAAA;IAElB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;QAC1D,IAAI,CAAC;YACH,+EAA+E;YAC/E,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACzE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,oBAAoB,CAAC;oBAC5B,SAAS;oBACT,YAAY;oBACZ,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,UAAU;oBACV,SAAS,EAAE,2BAA2B;iBACvC,CAAC;gBACF,IAAI;gBACJ,SAAS,EAAE,mBAAmB;aAC/B,CAAC,CAAA;YACF,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAA;YAC5B,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;YACjE,CAAC;YACD,SAAS,GAAG,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAA;YACrC,4DAA4D;YAC5D,IACE,QAAQ,CAAC,MAAM,IAAI,GAAG;gBACtB,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACrB,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,QAAQ,CAAC,MAAM,KAAK,GAAG,EACvB,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;YACpF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,GAAG,CAAC,CAAA;YACd,SAAS;gBACP,GAAG,YAAY,gBAAgB;oBAC7B,CAAC,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE;oBAChC,CAAC,CAAC,GAAG,YAAY,KAAK;wBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;wBACb,CAAC,CAAC,mBAAmB,CAAA;YAC3B,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gBACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;YACtE,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,aAAa,EAAE,CAAC;YAC5B,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;AACrF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,MAA6B;IACrE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CACvF,CAAC,EACD,cAAc,CACf,CAAA;IACD,IAAI,CAAC;QACH,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;YAC/B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;SACjE,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAChD,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,OAA8C;IAE9C,IAAI,IAAW,CAAA;IACf,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YACtC,MAAM;YACN,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IACrC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACtF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IAE9D,MAAM,IAAI,GAAuB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;IACpF,IAAI,SAAS,GAAG,CAAC,CAAA;IAEjB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,MAAc,CAAA;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAC/C,SAAS,EAAE,GAAG,CAAC,EAAE;gBACjB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QAED,IAAI,SAAS,GAAkB,IAAI,CAAA;QACnC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;gBAC/D,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;oBAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,MAAM;oBACN,OAAO,EAAE,cAAc;oBACvB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;oBAC5B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAC7C,OAAO,EAAE,IAA0C;iBACpD,CAAC,CAAA;gBACF,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;oBACxD,SAAS,EAAE,GAAG,CAAC,EAAE;oBACjB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,IAAI,gBAAgB,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;QAC3E,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,GAAG,CAAC,GAAG,EACP,MAAM,EACN,IAAI,EACJ,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAC5B,WAAW,CACZ,CAAA;QACD,MAAM,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAEpC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;YAClF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,mBAAmB,CAAC,SAAS,EAAE;oBACnC,cAAc,EAAE,MAAM,CAAC,MAAM;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,IAAI,GAAG;oBACpB,MAAM,CAAC,MAAM,GAAG,GAAG;oBACnB,MAAM,CAAC,MAAM,KAAK,GAAG;oBACrB,MAAM,CAAC,MAAM,KAAK,GAAG,CAAA;gBACvB,MAAM,mBAAmB,CAAC,SAAS,EAAE;oBACnC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE;oBAC9C,cAAc,EAAE,MAAM,CAAC,MAAM;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;iBACjE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,EAAE;YAAE,SAAS,EAAE,CAAA;IAC5B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAA;AAChD,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,OAA8C;IAE9C,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;IAC9E,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;IAC1E,CAAC;IACD,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;IACtF,CAAC;IACD,MAAM,IAAI,GAAuB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;IACpF,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY;QAC9D,CAAC,CAAC,sBAAsB,SAAS,IAAI,OAAO,CAAC,YAAY,EAAE;QAC3D,CAAC,CAAC,sBAAsB,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;IACzD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;IACvE,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACvC,OAAO,MAAM,CAAA;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAkB,EAClB,EAAU;IAEV,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACnE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IAE9D,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,OAAO,GAAuB;QAClC,KAAK,EAAE,gBAAgB;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,iBAAiB;QAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0CAA0C,EAAE;KAC3E,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAA;IACxF,MAAM,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAChC,MAAM,QAAQ,CAAC;QACb,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACrF,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/forms/webmcp.d.ts

@@ -0,0 +1,36 @@
+import type { PublicForm } from './submission.js';
+/** WebMCP declarative tool metadata derived from a public form schema. */
+export interface WebMcpFormMeta {
+    enabled: boolean;
+    /** Snake-case tool id agents reference (e.g. `submit_contact`). */
+    toolName: string;
+    /** Natural-language description of what invoking the tool does. */
+    toolDescription: string;
+    /** When true, agents may submit without a human click (default false). */
+    autoSubmit: boolean;
+    /** Field key → `toolparamdescription` text for each exposed control. */
+    fieldParams: Record<string, string>;
+}
+export interface BuildWebMcpFormMetaOptions {
+    /** Override site default for agent auto-submit. */
+    autoSubmit?: boolean;
+    toolName?: string;
+    toolDescription?: string;
+}
+/** Whether site-wide WebMCP annotations are enabled for public forms. */
+export declare function isWebMcpEnabledForForms(): boolean;
+/** Default auto-submit policy — false keeps humans in the loop (recommended for lead forms). */
+export declare function defaultWebMcpAutoSubmit(): boolean;
+/**
+ * Convert a form slug into a stable WebMCP tool name (`submit_contact`, etc.).
+ * Non-alphanumeric runs collapse to underscores; empty slugs fall back to `submit_form`.
+ */
+export declare function slugToWebMcpToolName(slug: string): string;
+/**
+ * Build WebMCP declarative metadata for a {@link PublicForm}. Returns `null`
+ * when WebMCP is disabled site-wide.
+ */
+export declare function buildWebMcpFormMeta(form: Pick<PublicForm, 'slug' | 'name' | 'description' | 'fields'>, options?: BuildWebMcpFormMetaOptions): WebMcpFormMeta | null;
+/** Attach WebMCP metadata to a projected public form (when enabled). */
+export declare function attachWebMcpToPublicForm(form: PublicForm): PublicForm;
+//# sourceMappingURL=webmcp.d.ts.map

package/dist/forms/webmcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webmcp.d.ts","sourceRoot":"","sources":["../../src/forms/webmcp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,iBAAiB,CAAA;AAElE,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,eAAe,EAAE,MAAM,CAAA;IACvB,0EAA0E;IAC1E,UAAU,EAAE,OAAO,CAAA;IACnB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,mDAAmD;IACnD,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,yEAAyE;AACzE,wBAAgB,uBAAuB,IAAI,OAAO,CAIjD;AAED,gGAAgG;AAChG,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOzD;AAeD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAC,EAClE,OAAO,GAAE,0BAA+B,GACvC,cAAc,GAAG,IAAI,CAgBvB;AAED,wEAAwE;AACxE,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAIrE"}

package/dist/forms/webmcp.js

@@ -0,0 +1,67 @@
+import { getPrentaConfig } from '../config/runtime.js';
+/** Whether site-wide WebMCP annotations are enabled for public forms. */
+export function isWebMcpEnabledForForms() {
+    const forms = getPrentaConfig()?.forms;
+    if (forms?.enabled === false)
+        return false;
+    return forms?.webmcp?.enabled !== false;
+}
+/** Default auto-submit policy — false keeps humans in the loop (recommended for lead forms). */
+export function defaultWebMcpAutoSubmit() {
+    return getPrentaConfig()?.forms?.webmcp?.autoSubmit === true;
+}
+/**
+ * Convert a form slug into a stable WebMCP tool name (`submit_contact`, etc.).
+ * Non-alphanumeric runs collapse to underscores; empty slugs fall back to `submit_form`.
+ */
+export function slugToWebMcpToolName(slug) {
+    const base = slug
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '_')
+        .replace(/^_+|_+$/g, '');
+    return base ? `submit_${base}` : 'submit_form';
+}
+function fieldParamDescription(field) {
+    const parts = [field.label?.trim(), field.helpText?.trim()].filter(Boolean);
+    if (field.required)
+        parts.push('Required.');
+    if (field.placeholder?.trim())
+        parts.push(`Example: ${field.placeholder.trim()}.`);
+    return parts.join(' ') || field.key;
+}
+function defaultToolDescription(form) {
+    if (form.description?.trim())
+        return form.description.trim();
+    const name = form.name?.trim() || form.slug;
+    return `Submit the "${name}" form on this website.`;
+}
+/**
+ * Build WebMCP declarative metadata for a {@link PublicForm}. Returns `null`
+ * when WebMCP is disabled site-wide.
+ */
+export function buildWebMcpFormMeta(form, options = {}) {
+    if (!isWebMcpEnabledForForms())
+        return null;
+    const fieldParams = {};
+    for (const field of form.fields) {
+        if (field.type === 'honeypot' || field.type === 'file')
+            continue;
+        fieldParams[field.key] = fieldParamDescription(field);
+    }
+    return {
+        enabled: true,
+        toolName: options.toolName?.trim() || slugToWebMcpToolName(form.slug),
+        toolDescription: options.toolDescription?.trim() || defaultToolDescription(form),
+        autoSubmit: options.autoSubmit ?? defaultWebMcpAutoSubmit(),
+        fieldParams,
+    };
+}
+/** Attach WebMCP metadata to a projected public form (when enabled). */
+export function attachWebMcpToPublicForm(form) {
+    const webmcp = buildWebMcpFormMeta(form);
+    if (!webmcp)
+        return form;
+    return { ...form, webmcp };
+}
+//# sourceMappingURL=webmcp.js.map

package/dist/forms/webmcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webmcp.js","sourceRoot":"","sources":["../../src/forms/webmcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAuBtD,yEAAyE;AACzE,MAAM,UAAU,uBAAuB;IACrC,MAAM,KAAK,GAAG,eAAe,EAAE,EAAE,KAAK,CAAA;IACtC,IAAI,KAAK,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC1C,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,KAAK,CAAA;AACzC,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,uBAAuB;IACrC,OAAO,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,IAAI,GAAG,IAAI;SACd,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IAC1B,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAA;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAsB;IACnD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3E,IAAI,KAAK,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAClF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAA;AACrC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAuD;IACrF,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAA;IAC3C,OAAO,eAAe,IAAI,yBAAyB,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAkE,EAClE,UAAsC,EAAE;IAExC,IAAI,CAAC,uBAAuB,EAAE;QAAE,OAAO,IAAI,CAAA;IAE3C,MAAM,WAAW,GAA2B,EAAE,CAAA;IAC9C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,SAAQ;QAChE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IACvD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QACrE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC;QAChF,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,uBAAuB,EAAE;QAC3D,WAAW;KACZ,CAAA;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,wBAAwB,CAAC,IAAgB;IACvD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAA;AAC5B,CAAC"}

package/dist/forms/xlsx.d.ts

@@ -0,0 +1,10 @@
+export type XlsxCellValue = string | number | boolean | null | undefined;
+export interface BuildXlsxOptions {
+    /** Sheet tab label; sanitized to Excel's 31-char/no-special-chars rules. */
+    sheetName?: string;
+    /** Row-major cell values; the first row is typically the header. */
+    rows: XlsxCellValue[][];
+}
+/** Build a complete `.xlsx` file from rows of cell values. */
+export declare function buildXlsxWorkbook(options: BuildXlsxOptions): Uint8Array;
+//# sourceMappingURL=xlsx.d.ts.map

package/dist/forms/xlsx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xlsx.d.ts","sourceRoot":"","sources":["../../src/forms/xlsx.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;AAExE,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAA;CACxB;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,UAAU,CAWvE"}