@protobase/schema 0.21.6 → 0.21.7

package/dist/access/role-entry.js

@@ -33,10 +33,10 @@ const limited = (role, capability, limit) => {
 const checkAnonymous = (held) => {
 	for (const { capability, fields } of held) {
 		const { name, action, scope } = parseCapability(capability);
-		if (action !== "read") throw new Error(`The anonymous role may only read, but it grants "${capability}"`);
-		if (name === "*") throw new Error(`The anonymous role must name each resource it reads, not "${capability}"`);
+		if (action !== "read" && action !== "create") throw new Error(`The anonymous role may only read, or create through a public form, but it grants "${capability}"`);
+		if (name === "*") throw new Error(`The anonymous role must name each resource it ${action}s, not "${capability}"`);
 		if (scope !== void 0) throw new Error(`The anonymous role grants "${capability}", but an anonymous caller owns no rows`);
-		if (!fields) throw new Error(`The anonymous role must list the fields it reads: { '${capability}': ['name', ...] }`);
+		if (!fields) throw new Error(`The anonymous role must list the fields it ${action}s: { '${capability}': ['name', ...] }`);
 	}
 };
 /** A role's entries as the capabilities it holds; throws on anything that is not a capability or a valid limit. */

package/dist/access/roles.d.ts

@@ -22,7 +22,8 @@ export type RoleLimit = HeldCapability & {
  *
  * An entry may limit capabilities to fields (an allowlist) and rows (an AIP-160 filter):
  * `{ 'products.read': ['sku', 'price'] }`, `{ 'products.read': { fields: ['name'], filter: 'published = true' } }`.
- * The role `anonymous`, when defined, is what requests without a token act as; it may only read listed fields.
+ * The role `anonymous`, when defined, is what requests without a token act as; it may only read listed fields, and
+ * create listed fields through a public form.
  * See [Access](website/src/content/docs/reference/access.mdx#capabilities).
  *
  * @example

package/dist/access/roles.js

@@ -11,7 +11,8 @@ const rolesOf = (user) => user.roles ?? [];
 *
 * An entry may limit capabilities to fields (an allowlist) and rows (an AIP-160 filter):
 * `{ 'products.read': ['sku', 'price'] }`, `{ 'products.read': { fields: ['name'], filter: 'published = true' } }`.
-* The role `anonymous`, when defined, is what requests without a token act as; it may only read listed fields.
+* The role `anonymous`, when defined, is what requests without a token act as; it may only read listed fields, and
+* create listed fields through a public form.
 * See [Access](website/src/content/docs/reference/access.mdx#capabilities).
 *
 * @example

package/dist/form-address.d.ts

@@ -0,0 +1,13 @@
+//#region src/form-address.d.ts
+/** The path of the public forms, below the app's base path: a form is at `/-/forms/<name>`. */
+export declare const formRoute = "/-/forms";
+/** Where a public form is: the form's name. */
+export type FormAddress = {
+  /** The form's name, as `.form(...)` gives it. */
+  name: string;
+};
+/** The path below the base path of the public form `name`. */
+export declare const formPath: (name: string) => string;
+/** The public form the path below the base path shows; `undefined` for any other path. */
+export declare const readFormAddress: (path: string) => FormAddress | undefined;
+//#endregion

package/dist/form-address.js

@@ -0,0 +1,15 @@
+//#region src/form-address.ts
+/** The path of the public forms, below the app's base path: a form is at `/-/forms/<name>`. */
+const formRoute = "/-/forms";
+/** What a form's name may hold, since it is its address: lowercase letters, digits, `-` and `_`. */
+const formNamePattern = /^[a-z0-9][a-z0-9_-]*$/;
+/** The path below the base path of the public form `name`. */
+const formPath = (name) => `${formRoute}/${name}`;
+/** The public form the path below the base path shows; `undefined` for any other path. */
+const readFormAddress = (path) => {
+	if (!path.startsWith(`/-/forms/`)) return void 0;
+	const name = path.slice(9);
+	return formNamePattern.test(name) ? { name } : void 0;
+};
+//#endregion
+export { formNamePattern, formPath, formRoute, readFormAddress };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { FileOptions, FileProcessor, FileProcessorInput, ImageFormat, ImageVariant, ImageVariantOptions, imageFormats } from "./files/file-options.js";
-import { ActionInputKind, ActionInputModel, ActionModel, ActionRun, AppAddress, BadgeShape, BottomBarItemModel, BottomBarModel, CardFavoriteModel, CardPhotosModel, ChartGranularity, ChartModel, ChartRange, CheckedFilter, CompareOp, CreateModel, CustomSectionModel, DatePreset, DurationLiteral, DurationUnit, EventModel, EventOperation, ExportModel, FieldFormat, FieldModel, FieldPath, FieldType, FieldViewModel, FieldWidgetModel, FileFieldModel, FilterError, FilterErrorCode, FilterExpr, FilterLayout, FilterOf, FilterValue, FilterWidgetModel, GalleryModel, GroupChartModel, HelpWhen, HistorySectionModel, JsonValue, KeyValue, LayoutItemModel, ListDisplayModel, ListModel, ListQuery, Literal, MapSectionModel, MapView, NavModel, NavRecentModel, NowValue, OrderByItem, PeriodChartModel, RecordMode, RelatedColumnModel, RelatedModel, ResourceModel, SaveFeedback, SaveSearchModel, SearchMatch, SearchResultModel, SearchesOfModel, SectionPresentation, ShowWhen, SignInPromptModel, SignInViewModel, SortSpec, Span, StatusTone, UserMenuItemModel, UserMenuModel, ViewModel } from "./model.js";
+import { ActionInputKind, ActionInputModel, ActionModel, ActionRun, AppAddress, BadgeShape, BottomBarItemModel, BottomBarModel, CardFavoriteModel, CardPhotosModel, ChartGranularity, ChartModel, ChartRange, CheckedFilter, CompareOp, CreateModel, CustomSectionModel, DatePreset, DurationLiteral, DurationUnit, EventModel, EventOperation, ExportModel, FieldFormat, FieldModel, FieldPath, FieldType, FieldViewModel, FieldWidgetModel, FileFieldModel, FilterError, FilterErrorCode, FilterExpr, FilterLayout, FilterOf, FilterValue, FilterWidgetModel, FormModel, GalleryModel, GroupChartModel, HelpWhen, HistorySectionModel, JsonValue, KeyValue, LayoutItemModel, ListDisplayModel, ListModel, ListQuery, Literal, MapSectionModel, MapView, NavModel, NavRecentModel, NowValue, OrderByItem, PeriodChartModel, RecordMode, RelatedColumnModel, RelatedModel, ResourceModel, SaveFeedback, SaveSearchModel, SearchMatch, SearchResultModel, SearchesOfModel, SectionPresentation, ShowWhen, SignInPromptModel, SignInViewModel, SortSpec, Span, StatusTone, UserMenuItemModel, UserMenuModel, ViewModel } from "./model.js";
 import { AccessAction, AccessContext, AccessFn, AccessResult, AccessUser, FieldAccess, FieldRule } from "./access/types.js";
 import { AnyField, Constraint, Field, FieldMeta, FieldTypeDef } from "./field.js";
 import { RelationField } from "./relation-field.js";
@@ -10,6 +10,7 @@ import { CreatedOptions, DeletedOptions, EventActor, EventContext, EventHelpers,
 import { Access, InferRecord, Issue, KeyOf, KeyRefs, RecordKey, RecordOf } from "./resource-types.js";
 import { ResourceBuilder, SearchRef, SearchRefs, Validator, resource } from "./resource.js";
 import { ChartInput, GroupChartInput, PeriodChartInput } from "./view-chart.js";
+import { FormInput } from "./view-form.js";
 import { ListColumn } from "./view-columns.js";
 import { ComponentRef, ViewProps } from "./view-displays.js";
 import { FieldView } from "./view-field.js";
@@ -22,6 +23,7 @@ import { BottomBarNames, bottomBarErrors } from "./bottom-bar-errors.js";
 import { layout } from "./layout.js";
 import { KeyType, fitsKeyType, keyTypes } from "./keys.js";
 import { addressWords, appPath, readAppPath } from "./app-address.js";
+import { FormAddress, formPath, formRoute, readFormAddress } from "./form-address.js";
 import { SignInAddress, SignInStep, readSignInAddress, signInParams, signInPath, signInRoute, signInSteps } from "./sign-in-address.js";
 import { FilterLimits, FilterParse, parseFilter } from "./filter/parse.js";
 import { CheckResult, checkFilter } from "./filter/check.js";
@@ -39,4 +41,4 @@ import { AccessSource, ResolveOptions, ResolvedAccess, RowFilterOperation, acces
 import { restrictModel } from "./access/restrict.js";
 import "./access/index.js";
 import { AssistantAction, AssistantActionRequest, AssistantCardPart, AssistantDiff, AssistantEvent, AssistantMessage, AssistantMessageRequest, AssistantPart, AssistantState, AssistantStep, AssistantStepState, AssistantTablePart, AssistantTextPart, AssistantTone, AssistantWidgetPart } from "./assistant/protocol.js";
-export { type Access, type AccessAction, type AccessContext, type AccessFn, type AccessResult, type AccessSource, type AccessUser, type ActionInputKind, type ActionInputModel, type ActionModel, type ActionRun, type AnyField, type AppAddress, type AssistantAction, type AssistantActionRequest, type AssistantCardPart, type AssistantDiff, type AssistantEvent, type AssistantMessage, type AssistantMessageRequest, type AssistantPart, type AssistantState, type AssistantStep, type AssistantStepState, type AssistantTablePart, type AssistantTextPart, type AssistantTone, type AssistantWidgetPart, type BadgeShape, type BottomBarItemModel, type BottomBarModel, type BottomBarNames, type BottomBarSource, type Capability, type CapabilityAction, type CapabilityLimit, type CapabilityScope, type CardFavoriteModel, type CardPhotosModel, type ChartGranularity, type ChartInput, type ChartModel, type ChartRange, type CheckResult, type CheckedFilter, type CompareOp, type ComponentRef, type Constraint, type CreateModel, type CreatedOptions, type CustomSectionModel, type DatePreset, type DeletedOptions, type DurationLiteral, type DurationUnit, type EvaluateOptions, type EventActor, type EventContext, type EventHelpers, type EventMatch, type EventModel, type EventOperation, type EventSpec, type ExportModel, type Field, type FieldAccess, type FieldFormat, type FieldMeta, type FieldModel, type FieldPath, type FieldRefValue, type FieldRefs, type FieldRule, type FieldType, type FieldTypeDef, type FieldView, type FieldViewModel, type FieldViews, type FieldWidgetModel, type FieldsInput, type FileField, type FileFieldModel, type FileOptions, type FileProcessor, type FileProcessorInput, type FilterError, type FilterErrorCode, type FilterExpr, type FilterLayout, type FilterLimits, type FilterOf, type FilterParse, type FilterValue, type FilterWidgetModel, type GalleryModel, type Grant, type GroupChartInput, type GroupChartModel, type HeldCapability, type HelpWhen, type HistorySectionModel, type ImageFormat, type ImageVariant, type ImageVariantOptions, type InferRecord, type Issue, type JsonValue, type KeyOf, type KeyRefs, type KeyType, type KeyValue, type LayoutItemModel, type ListColumn, type ListDisplayModel, type ListModel, type ListQuery, type Literal, type MapSectionModel, type MapView, type NavModel, type NavRecentModel, type NowValue, type OrderByCheck, type OrderByItem, type OrderByParse, type PeriodChartInput, type PeriodChartModel, type RecordKey, type RecordMode, type RecordOf, type Ref, type Refs, type RelatedColumnModel, type RelatedModel, type RelationField, type ResolveOptions, type ResolvedAccess, type ResourceBuilder, type ResourceModel, type RoleEntry, type RoleLimit, type Roles, type RolesOptions, type RowFilterOperation, type Rule, type SaveFeedback, type SaveSearchModel, type SearchMatch, type SearchRef, type SearchRefs, type SearchResultModel, type SearchesOfModel, type SectionPresentation, type ShowWhen, type SignInAddress, type SignInPromptModel, type SignInStep, type SignInViewModel, type SortSpec, type Span, type StatusTone, type UndeletedOptions, type UpdatedOptions, type UserMenuItemModel, type UserMenuModel, type UserMenuSource, type Validator, type ViewBuilder, type ViewModel, type ViewProps, accessWarnings, addressWords, anonymousRole, appPath, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, createWhere, defineRoles, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, imageFormats, keyTypes, layout as l, maxBottomBarItems, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };
+export { type Access, type AccessAction, type AccessContext, type AccessFn, type AccessResult, type AccessSource, type AccessUser, type ActionInputKind, type ActionInputModel, type ActionModel, type ActionRun, type AnyField, type AppAddress, type AssistantAction, type AssistantActionRequest, type AssistantCardPart, type AssistantDiff, type AssistantEvent, type AssistantMessage, type AssistantMessageRequest, type AssistantPart, type AssistantState, type AssistantStep, type AssistantStepState, type AssistantTablePart, type AssistantTextPart, type AssistantTone, type AssistantWidgetPart, type BadgeShape, type BottomBarItemModel, type BottomBarModel, type BottomBarNames, type BottomBarSource, type Capability, type CapabilityAction, type CapabilityLimit, type CapabilityScope, type CardFavoriteModel, type CardPhotosModel, type ChartGranularity, type ChartInput, type ChartModel, type ChartRange, type CheckResult, type CheckedFilter, type CompareOp, type ComponentRef, type Constraint, type CreateModel, type CreatedOptions, type CustomSectionModel, type DatePreset, type DeletedOptions, type DurationLiteral, type DurationUnit, type EvaluateOptions, type EventActor, type EventContext, type EventHelpers, type EventMatch, type EventModel, type EventOperation, type EventSpec, type ExportModel, type Field, type FieldAccess, type FieldFormat, type FieldMeta, type FieldModel, type FieldPath, type FieldRefValue, type FieldRefs, type FieldRule, type FieldType, type FieldTypeDef, type FieldView, type FieldViewModel, type FieldViews, type FieldWidgetModel, type FieldsInput, type FileField, type FileFieldModel, type FileOptions, type FileProcessor, type FileProcessorInput, type FilterError, type FilterErrorCode, type FilterExpr, type FilterLayout, type FilterLimits, type FilterOf, type FilterParse, type FilterValue, type FilterWidgetModel, type FormAddress, type FormInput, type FormModel, type GalleryModel, type Grant, type GroupChartInput, type GroupChartModel, type HeldCapability, type HelpWhen, type HistorySectionModel, type ImageFormat, type ImageVariant, type ImageVariantOptions, type InferRecord, type Issue, type JsonValue, type KeyOf, type KeyRefs, type KeyType, type KeyValue, type LayoutItemModel, type ListColumn, type ListDisplayModel, type ListModel, type ListQuery, type Literal, type MapSectionModel, type MapView, type NavModel, type NavRecentModel, type NowValue, type OrderByCheck, type OrderByItem, type OrderByParse, type PeriodChartInput, type PeriodChartModel, type RecordKey, type RecordMode, type RecordOf, type Ref, type Refs, type RelatedColumnModel, type RelatedModel, type RelationField, type ResolveOptions, type ResolvedAccess, type ResourceBuilder, type ResourceModel, type RoleEntry, type RoleLimit, type Roles, type RolesOptions, type RowFilterOperation, type Rule, type SaveFeedback, type SaveSearchModel, type SearchMatch, type SearchRef, type SearchRefs, type SearchResultModel, type SearchesOfModel, type SectionPresentation, type ShowWhen, type SignInAddress, type SignInPromptModel, type SignInStep, type SignInViewModel, type SortSpec, type Span, type StatusTone, type UndeletedOptions, type UpdatedOptions, type UserMenuItemModel, type UserMenuModel, type UserMenuSource, type Validator, type ViewBuilder, type ViewModel, type ViewProps, accessWarnings, addressWords, anonymousRole, appPath, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, createWhere, defineRoles, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, formPath, formRoute, imageFormats, keyTypes, layout as l, maxBottomBarItems, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readFormAddress, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };

package/dist/index.js

@@ -9,6 +9,7 @@ import { createWhere, where } from "./filter/where.js";
 import { anonymousRole } from "./access/role-entry.js";
 import { accessWarnings, checkRecord, fieldsUsedBy, resolveAccess } from "./access/resolve.js";
 import { resource } from "./resource.js";
+import { formPath, formRoute, readFormAddress } from "./form-address.js";
 import { fieldRef } from "./field-ref.js";
 import { view } from "./view.js";
 import { enumLabel } from "./enum-label.js";
@@ -23,4 +24,4 @@ import { rule } from "./access/rule.js";
 import { defineRoles } from "./access/roles.js";
 import { pickView } from "./access/pick-view.js";
 import { restrictModel } from "./access/restrict.js";
-export { accessWarnings, addressWords, anonymousRole, appPath, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, createWhere, defineRoles, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, imageFormats, keyTypes, layout as l, maxBottomBarItems, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };
+export { accessWarnings, addressWords, anonymousRole, appPath, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, createWhere, defineRoles, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, formPath, formRoute, imageFormats, keyTypes, layout as l, maxBottomBarItems, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readFormAddress, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };

package/dist/model.d.ts

@@ -1000,6 +1000,25 @@ export type ViewModel = {
   export?: false | ExportModel;
   /** The page that creates the resource's records, in place of the create form. */
   create?: CreateModel;
+  /** Public forms that create its records for people without an account, each at `/-/forms/<name>`. */
+  forms?: FormModel[];
+};
+/**
+ * A public form (`.form(...)`): anyone, signed in or not, opens it at `/-/forms/<name>` and creates a record with its
+ * fields, through the `anonymous` role's `create`, behind a rate limit and a bot check. See
+ * [Public forms](website/src/content/docs/reference/forms.mdx).
+ */
+export type FormModel = {
+  /** Its address in the app, `/-/forms/<name>`; unique across the app. */
+  name: string;
+  /** The page's heading; the view's singular name when omitted. */
+  title?: string;
+  /** The fields a visitor fills in, in order. */
+  fields: string[];
+  /** What the page shows once the record is created. */
+  thanks: string;
+  /** How many submissions one client may send per minute. */
+  perMinute: number;
 };
 /** How the resource's records are created (`.create(...)`): a page of the app's own. */
 export type CreateModel = {

package/dist/view-form.d.ts

@@ -0,0 +1,16 @@
+import { Ref } from "./refs.js";
+//#region src/view-form.d.ts
+/** What `.form(...)` takes. */
+export type FormInput = {
+  /** Its address in the app, `/-/forms/<name>`: lowercase letters, digits, `-` and `_`, unique across the app. */
+  name: string;
+  /** The page's heading; the view's singular name when omitted. */
+  title?: string;
+  /** The fields a visitor fills in, in order: plain fields the `anonymous` role may create. */
+  fields: Ref[];
+  /** What the page shows once the record is created. */
+  thanks: string;
+  /** How many submissions one client may send per minute; default 5. */
+  perMinute?: number;
+};
+//#endregion

package/dist/view-form.js

@@ -0,0 +1,22 @@
+import { formNamePattern } from "./form-address.js";
+const formModel = (input) => {
+	const { name, title, fields, thanks } = input;
+	if (!formNamePattern.test(name)) throw new Error(`A form's name goes in its address, so it takes lowercase letters, digits, - and _, not "${name}"`);
+	if (fields.length === 0) throw new Error(`Form "${name}" has no fields`);
+	const names = fields.map((field) => field.name);
+	const repeated = names.find((field, index) => names.indexOf(field) !== index);
+	if (repeated !== void 0) throw new Error(`Form "${name}" lists the field "${repeated}" twice`);
+	if (thanks.trim() === "") throw new Error(`Form "${name}" needs a thanks text, shown once a visitor sends it`);
+	if (title !== void 0 && title.trim() === "") throw new Error(`Form "${name}" has an empty title; leave it out for the view's name`);
+	const perMinute = input.perMinute ?? 5;
+	if (!Number.isInteger(perMinute) || perMinute < 1) throw new Error(`Form "${name}" takes perMinute as a positive whole number, not ${perMinute}`);
+	return {
+		name,
+		...title !== void 0 && { title },
+		fields: names,
+		thanks,
+		perMinute
+	};
+};
+//#endregion
+export { formModel };

package/dist/view.d.ts

@@ -2,6 +2,7 @@ import { ActionModel, CreateModel, ExportModel, FilterWidgetModel, HelpWhen, Lay
 import { FieldRefs, Ref } from "./refs.js";
 import { actions } from "./view-actions.js";
 import { ChartInput } from "./view-chart.js";
+import { FormInput } from "./view-form.js";
 import { ListColumn, columns } from "./view-columns.js";
 import { displays } from "./view-displays.js";
 import { FieldView } from "./view-field.js";
@@ -97,6 +98,14 @@ export declare class ViewBuilder<R extends {
    * 10), counted or with `sum` or `average` that of a numeric field.
    */
   chart(build: (r: FieldRefs<FieldsOf<R>>) => ChartInput): ViewBuilder<R>;
+  /**
+   * A public form that creates a record of this resource for anyone, signed in or not, at `/-/forms/<name>`: the
+   * `fields` a visitor fills in, the `thanks` shown once it is sent, a `title` (the view's singular name by default) and
+   * how many submissions one client may send `perMinute` (default 5). The `anonymous` role must grant `create` of those
+   * fields; the form is the only way it creates. Each call adds a form. Throws on a name that does not fit an address, no
+   * or repeated fields, or an empty `thanks`. See [Public forms](website/src/content/docs/reference/forms.mdx).
+   */
+  form(build: (r: FieldRefs<FieldsOf<R>>) => FormInput): ViewBuilder<R>;
   /**
    * How the record page opens to a user who may change the record: `edit`, the default, as its form; `read` as a read
    * view, its sections as tables of labels and values, with an Edit button to the form; `locked` as the form, locked
@@ -178,7 +187,7 @@ export declare class ViewBuilder<R extends {
     };
     limit?: number;
   }): ViewBuilder<R>;
-  /** With the resource's model, also verifies the title, search result and list display fields, related column names, a gallery's image, `listOf`, `searchesOf` and the sidebar's `recent` group. */
+  /** With the resource's model, also verifies the title, search result and list display fields, related column names, a gallery's image, `listOf`, `searchesOf`, the sidebar's `recent` group and the forms' fields. */
   toModel(resource?: ResourceModel): ViewModel;
   private refs;
   private next;

package/dist/view.js

@@ -3,6 +3,7 @@ import { isMenuHref } from "./menu-href.js";
 import { navRecentErrors } from "./nav-recent.js";
 import { actions } from "./view-actions.js";
 import { chartModel } from "./view-chart.js";
+import { formModel } from "./view-form.js";
 import { columns, isListColumn } from "./view-columns.js";
 import { boardErrors, displayErrors, displayFields, displays } from "./view-displays.js";
 import { FieldView } from "./view-field.js";
@@ -124,6 +125,16 @@ var ViewBuilder = class ViewBuilder {
 		return this.next({ chart: chartModel(build(this.refs())) });
 	}
 	/**
+	* A public form that creates a record of this resource for anyone, signed in or not, at `/-/forms/<name>`: the
+	* `fields` a visitor fills in, the `thanks` shown once it is sent, a `title` (the view's singular name by default) and
+	* how many submissions one client may send `perMinute` (default 5). The `anonymous` role must grant `create` of those
+	* fields; the form is the only way it creates. Each call adds a form. Throws on a name that does not fit an address, no
+	* or repeated fields, or an empty `thanks`. See [Public forms](website/src/content/docs/reference/forms.mdx).
+	*/
+	form(build) {
+		return this.next({ forms: [...this.state.forms ?? [], formModel(build(this.refs()))] });
+	}
+	/**
 	* How the record page opens to a user who may change the record: `edit`, the default, as its form; `read` as a read
 	* view, its sections as tables of labels and values, with an Edit button to the form; `locked` as the form, locked
 	* until Edit is pressed. A user who may not change it gets the read view in every mode. The form has its own address
@@ -230,7 +241,7 @@ var ViewBuilder = class ViewBuilder {
 		};
 		return this.next({ searchesOf: searches });
 	}
-	/** With the resource's model, also verifies the title, search result and list display fields, related column names, a gallery's image, `listOf`, `searchesOf` and the sidebar's `recent` group. */
+	/** With the resource's model, also verifies the title, search result and list display fields, related column names, a gallery's image, `listOf`, `searchesOf`, the sidebar's `recent` group and the forms' fields. */
 	toModel(resource) {
 		const { title, nav, searchResult, list, listOf } = this.state;
 		if (resource && title !== void 0 && !Object.hasOwn(resource.fields, title)) throw new Error(`View "${this.state.resource}": title field "${title}" does not exist on the resource`);
@@ -255,6 +266,10 @@ var ViewBuilder = class ViewBuilder {
 		if (resource && listOf !== void 0 && (!Object.hasOwn(resource.fields, listOf) || resource.fields[listOf].type !== "relation")) throw new Error(`View "${this.state.resource}": listOf names "${listOf}", which is not a relation field of the resource`);
 		const searchErrors = resource && this.state.searchesOf ? searchesOfErrors(this.state.searchesOf, resource) : [];
 		if (searchErrors.length > 0) throw new Error(`View "${this.state.resource}": searchesOf ${searchErrors.join("; ")}`);
+		for (const form of resource ? this.state.forms ?? [] : []) {
+			const unknown = form.fields.find((name) => !Object.hasOwn(resource.fields, name));
+			if (unknown !== void 0) throw new Error(`View "${this.state.resource}": form "${form.name}" names field "${unknown}", which the resource does not have`);
+		}
 		const recentErrors = resource && nav?.recent ? navRecentErrors(nav.recent, resource) : [];
 		if (recentErrors.length > 0) throw new Error(`View "${this.state.resource}": nav.recent ${recentErrors.join("; ")}`);
 		return structuredClone(this.state);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/schema",
-  "version": "0.21.6",
+  "version": "0.21.7",
   "description": "Resource, field, view and access definitions for Protobase configs.",
   "license": "Apache-2.0",
   "repository": {