@sudajs/cli 0.10.1 → 0.10.3

package/dist/index.js

@@ -265,6 +265,143 @@ var activateThemeOutputSchema = z.discriminatedUnion("status", [
     themeVersion: z.string().nullable()
   })
 ]);
+var contactOptionSchema = z.object({ label: z.string().min(1).max(80), value: z.string().min(1).max(80) });
+var contactFieldSchema = z.object({
+  id: z.string().trim().min(1).max(48).regex(/^[a-zA-Z][a-zA-Z0-9_-]*$/),
+  type: z.enum(["text", "textarea", "checkbox", "radio", "select"]),
+  label: z.string().trim().min(1).max(120),
+  placeholder: z.string().trim().max(160).optional(),
+  required: z.boolean().default(false),
+  options: z.array(contactOptionSchema).default([]),
+  validation: z.object({
+    format: z.enum(["email"]).optional(),
+    maxLength: z.number().int().min(1).max(5e3).optional()
+  }).default({})
+});
+function addUniqueContactIssue(items, collectionName, key, ctx, prefix = []) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const [index, item] of items.entries()) {
+    const value = item[key];
+    if (value === void 0 || value === null || value === "") continue;
+    if (seen.has(value)) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `Duplicate ${String(key)} in ${collectionName}.`,
+        path: [...prefix, index, key]
+      });
+      continue;
+    }
+    seen.add(value);
+  }
+}
+var contactFieldsSchema = z.array(contactFieldSchema).superRefine((fields, ctx) => {
+  addUniqueContactIssue(fields, "fields", "id", ctx);
+  for (const [index, field] of fields.entries()) {
+    if ((field.type === "radio" || field.type === "select") && field.options.length === 0) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `${field.type} fields require at least one option.`,
+        path: [index, "options"]
+      });
+    }
+    addUniqueContactIssue(field.options, "options", "value", ctx, [index, "options"]);
+  }
+});
+var contactEmailNotificationUpdateSchema = z.object({
+  id: z.string().trim().min(1).max(48),
+  type: z.literal("email"),
+  enabled: z.boolean().default(true),
+  label: z.string().trim().min(1).max(80),
+  recipients: z.array(z.string().trim().email()).min(1)
+});
+var contactChatNotificationUpdateSchema = z.object({
+  id: z.string().trim().min(1).max(48),
+  type: z.enum(["slack", "wecom", "feishu", "dingtalk"]),
+  enabled: z.boolean().default(true),
+  label: z.string().trim().min(1).max(80),
+  webhookUrl: z.string().trim().url().optional()
+});
+var contactNotificationUpdateSchema = z.discriminatedUnion("type", [
+  contactEmailNotificationUpdateSchema,
+  contactChatNotificationUpdateSchema
+]);
+var contactWebhookUpdateSchema = z.object({
+  id: z.string().trim().min(1).max(48),
+  enabled: z.boolean().default(true),
+  label: z.string().trim().min(1).max(80),
+  event: z.literal("contact.submitted").default("contact.submitted"),
+  url: z.string().trim().url().optional()
+});
+var updateContactFormInputSchema = z.object({
+  projectId: z.string().min(1),
+  enabled: z.boolean().optional(),
+  title: z.string().trim().min(1).max(120).optional(),
+  successMessage: z.string().trim().min(1).max(240).optional(),
+  submitLabel: z.string().trim().min(1).max(80).optional(),
+  fields: contactFieldsSchema.optional(),
+  notifications: z.array(contactNotificationUpdateSchema).optional(),
+  webhooks: z.array(contactWebhookUpdateSchema).optional(),
+  confirm: z.boolean().optional()
+});
+var contactFormViewSchema = z.object({
+  enabled: z.boolean(),
+  title: z.string(),
+  successMessage: z.string(),
+  submitLabel: z.string(),
+  fields: z.array(contactFieldSchema),
+  notifications: z.array(
+    z.discriminatedUnion("type", [
+      z.object({
+        id: z.string(),
+        type: z.literal("email"),
+        enabled: z.boolean(),
+        label: z.string(),
+        recipients: z.array(z.string())
+      }),
+      z.object({
+        id: z.string(),
+        type: z.enum(["slack", "wecom", "feishu", "dingtalk"]),
+        enabled: z.boolean(),
+        label: z.string(),
+        webhookUrlMasked: z.string().nullable()
+      })
+    ])
+  ),
+  webhooks: z.array(
+    z.object({
+      id: z.string(),
+      enabled: z.boolean(),
+      label: z.string(),
+      event: z.literal("contact.submitted"),
+      urlMasked: z.string().nullable()
+    })
+  ),
+  limits: z.object({
+    maxFields: z.number(),
+    maxNotificationChannels: z.number(),
+    maxWebhooks: z.number()
+  }),
+  features: z.object({
+    contactNotifications: z.boolean(),
+    contactWebhooks: z.boolean()
+  })
+});
+var contactFormOutputSchema = z.object({
+  contactForm: contactFormViewSchema
+});
+var updateContactFormOutputSchema = z.discriminatedUnion("status", [
+  z.object({
+    status: z.literal("needs_confirmation"),
+    projectId: z.string(),
+    impact: z.string(),
+    draft: updateContactFormInputSchema.omit({ confirm: true })
+  }),
+  z.object({
+    status: z.literal("updated"),
+    projectId: z.string(),
+    contactForm: contactFormViewSchema
+  })
+]);
 var PROJECT_NAME_MIN_LENGTH = 1;
 var PROJECT_NAME_MAX_LENGTH = 80;
 var PROJECT_DESCRIPTION_MIN_LENGTH = 1;
@@ -883,6 +1020,40 @@ var THEME_CHECK_ICP = {
   text: "\u4EACICP\u590712345678\u53F7",
   href: "https://beian.miit.gov.cn/"
 };
+var PREVIEW_CONTACT_FORM = {
+  enabled: true,
+  endpoint: "/api/contact",
+  honeypotField: "suda_contact_company",
+  title: "Contact us",
+  successMessage: "Thanks, we received your message.",
+  submitLabel: "Submit",
+  fields: [
+    {
+      id: "name",
+      type: "text",
+      label: "Name",
+      required: true,
+      options: [],
+      validation: { maxLength: 120 }
+    },
+    {
+      id: "email",
+      type: "text",
+      label: "Email",
+      required: true,
+      options: [],
+      validation: { format: "email", maxLength: 200 }
+    },
+    {
+      id: "message",
+      type: "textarea",
+      label: "Message",
+      required: true,
+      options: [],
+      validation: { maxLength: 2e3 }
+    }
+  ]
+};
 function stripHtmlTags(value) {
   return value.replace(/<[^>]+>/g, "").replace(/\s+/g, " ").trim();
 }
@@ -968,7 +1139,9 @@ var __testUtils = {
   initThemeWithKey,
   performActivateTheme,
   performConfirmedPageOperation,
+  performUpdateContactForm,
   renderDevStarterPageHtml,
+  resolveDevStarterSlug,
   resolveScreenshotOptions,
   slugifyThemeName,
   validateThemeKey,
@@ -1065,24 +1238,25 @@ function createSudaPreviewVitePlugin(root) {
             next();
             return;
           }
-          if (url.pathname !== "/" && !url.pathname.startsWith("/pages/")) {
+          const slug = resolveDevStarterSlug(url.pathname);
+          if (slug === void 0) {
             next();
             return;
           }
           try {
             const theme = await loadViteDevTheme(root, server);
             const renderer = await loadThemeScopedRenderer(root);
-            if (url.pathname === "/") {
-              const fallbackSlug = pickStarterSlug(theme);
-              if (!fallbackSlug) {
+            if (slug === null) {
+              const homeSlug = pickStarterSlug(theme);
+              if (!homeSlug) {
                 response.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
                 response.end("No starter pages declared by this theme.");
                 return;
               }
-              const starter2 = findStarterPage(theme, fallbackSlug);
+              const starter2 = findStarterPage(theme, homeSlug);
               if (!starter2) {
                 response.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
-                response.end(`Unknown starter page: ${fallbackSlug}`);
+                response.end(`Unknown starter page: ${homeSlug}`);
                 return;
               }
               const html2 = await server.transformIndexHtml(
@@ -1093,7 +1267,6 @@ function createSudaPreviewVitePlugin(root) {
               response.end(html2);
               return;
             }
-            const slug = decodeURIComponent(url.pathname.slice("/pages/".length));
             const starter = findStarterPage(theme, slug);
             if (!starter) {
               response.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
@@ -1141,6 +1314,16 @@ function pickStarterSlug(theme) {
 function findStarterPage(theme, slug) {
   return theme.module.starterPages.find((page) => page.slug === slug) ?? null;
 }
+function resolveDevStarterSlug(pathname) {
+  if (pathname === "/") {
+    return null;
+  }
+  const normalized = pathname.replace(/^\/+/, "").replace(/\/+$/, "");
+  if (!normalized || normalized.includes("/")) {
+    return void 0;
+  }
+  return decodeURIComponent(normalized);
+}
 function escapeHtml(value) {
   return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
@@ -1177,7 +1360,8 @@ async function loadThemeScopedRenderer(themeRoot) {
 function renderDevStarterPageHtml(theme, page, renderer) {
   const chrome = renderer.extractLayoutChrome(theme.module.defaultLayout);
   const metadata = {
-    resolveAssetUrl: createPreviewAssetResolver(renderer.resolveAssetPath)
+    resolveAssetUrl: createPreviewAssetResolver(renderer.resolveAssetPath),
+    contactForm: PREVIEW_CONTACT_FORM
   };
   const body = renderer.renderToString(
     renderer.createElement(renderer.ThemeRender, {
@@ -1643,6 +1827,58 @@ async function performActivateTheme(auth, input, fetcher = fetchJson) {
     themeVersion: response.themeVersion
   });
 }
+async function getRemoteContactForm(auth, projectId, fetcher = fetchJson) {
+  const response = await fetcher(
+    `${auth.baseUrl}/api/cli/agent/projects/${encodeURIComponent(projectId)}/contact-form`,
+    { token: auth.token }
+  );
+  return contactFormViewSchema.parse(response.contactForm);
+}
+async function updateRemoteContactForm(auth, input, fetcher = fetchJson) {
+  const body = {};
+  if (input.enabled !== void 0) body.enabled = input.enabled;
+  if (input.title !== void 0) body.title = input.title;
+  if (input.successMessage !== void 0) body.successMessage = input.successMessage;
+  if (input.submitLabel !== void 0) body.submitLabel = input.submitLabel;
+  if (input.fields !== void 0) body.fields = input.fields;
+  if (input.notifications !== void 0) body.notifications = input.notifications;
+  if (input.webhooks !== void 0) body.webhooks = input.webhooks;
+  const response = await fetcher(
+    `${auth.baseUrl}/api/cli/agent/projects/${encodeURIComponent(input.projectId)}/contact-form`,
+    {
+      method: "PATCH",
+      token: auth.token,
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    }
+  );
+  return contactFormViewSchema.parse(response.contactForm);
+}
+async function performUpdateContactForm(auth, input, fetcher = fetchJson) {
+  const draft = updateContactFormInputSchema.omit({ confirm: true }).parse(input);
+  const changes = [
+    input.enabled !== void 0 ? "enabled state" : null,
+    input.title !== void 0 || input.successMessage !== void 0 || input.submitLabel !== void 0 ? "form copy" : null,
+    input.fields !== void 0 ? `${input.fields.length} field(s)` : null,
+    input.notifications !== void 0 ? `${input.notifications.length} notification channel(s)` : null,
+    input.webhooks !== void 0 ? `${input.webhooks.length} webhook(s)` : null
+  ].filter((item) => typeof item === "string");
+  const impact = `This will update the project contact form settings for "${input.projectId}": ${changes.join(", ") || "no explicit changes"}. Contact form fields affect what visitors submit publicly; notifications and webhooks may send future submissions to external systems and are subject to plan features and limits.`;
+  if (input.confirm !== true) {
+    return {
+      status: "needs_confirmation",
+      projectId: input.projectId,
+      impact,
+      draft
+    };
+  }
+  const contactForm = await updateRemoteContactForm(auth, input, fetcher);
+  return {
+    status: "updated",
+    projectId: input.projectId,
+    contactForm
+  };
+}
 async function listAgentProjects() {
   const auth = await requireCliBaseUrl();
   const result = await fetchJson(
@@ -1696,7 +1932,7 @@ async function startMcpServer() {
   server.registerTool(
     "create_project",
     {
-      description: "Create a new Suda project for the current user. Only call this after list_projects returned an empty list. Conversation flow before calling: (1) Ask the user for the website / brand name in one turn and capture it as `name`. (2) Ask the user for a business introduction; the user is allowed (and expected) to answer over multiple turns \u2014 keep asking follow-up questions and accumulating their answers until they confirm they are done, then concatenate the accumulated text into a single `siteDescription` (trimmed). Do not invent details the user did not provide. Do not call this tool until both fields are confirmed by the user. The project is created with the default theme and starter pages; no in-app AI site generation is triggered \u2014 drive page content afterwards via create_page_draft using the returned projectId.",
+      description: "Create a new Suda project for the current user. Only call this after list_projects returned an empty list. Conversation flow before calling: (1) Ask the user for the website / brand name in one turn and capture it as `name`. (2) Ask the user for a business introduction; the user is allowed (and expected) to answer over multiple turns \u2014 keep asking follow-up questions and accumulating their answers until they confirm they are done, then concatenate the accumulated text into a single `siteDescription` (trimmed). Do not invent details the user did not provide. Do not call this tool until both fields are confirmed by the user. The project is created with the default theme, starter pages, and a default project contact form. After creation, if the business context suggests better contact fields, call get_contact_form_settings, propose the contact form plan to the user, and only call update_contact_form_settings with confirm:true after they agree. No in-app AI site generation is triggered \u2014 drive page content afterwards via create_page_draft using the returned projectId.",
       inputSchema: {
         name: createProjectInputSchema.shape.name.describe(
           "Website or brand name confirmed by the user in a dedicated turn. Used as the project name and site title."
@@ -1769,7 +2005,7 @@ async function startMcpServer() {
   server.registerTool(
     "get_page_schema",
     {
-      description: "Return the AI-first output schema for generating Suda page content, including all section schemas. Field schemas include dynamic visibility metadata for Suda visibleIf fields.",
+      description: "Return the AI-first output schema for generating Suda page content, including all section schemas. Field schemas include dynamic visibility metadata for Suda visibleIf fields. If the theme has a contact section, generate only the section placement/content props; public form fields and delivery integrations are project contact form settings exposed to themes as metadata.contactForm. Use get_contact_form_settings and update_contact_form_settings for user-approved contact form changes.",
       inputSchema: {
         theme: z.string(),
         version: z.string().optional(),
@@ -1790,7 +2026,7 @@ async function startMcpServer() {
   server.registerTool(
     "get_section_schema",
     {
-      description: "Return the AI-first output schema for one section component in a theme. Field schemas include dynamic visibility metadata for Suda visibleIf fields.",
+      description: "Return the AI-first output schema for one section component in a theme. Field schemas include dynamic visibility metadata for Suda visibleIf fields. For contact sections, use the schema for presentation props only and do not hardcode form field metadata, notification channels, webhook URLs, or recipients into page content. Use contact form tools for project-level contact settings.",
       inputSchema: {
         theme: z.string(),
         section: z.string(),
@@ -1827,6 +2063,48 @@ async function startMcpServer() {
       return mcpStructured("Suda page content validation result.", structuredContent);
     }
   );
+  server.registerTool(
+    "get_contact_form_settings",
+    {
+      description: "Read project contact form settings. Use this before planning contact form changes. The result includes editable field metadata, masked notification/webhook URLs, and plan features/limits. Secrets are never returned.",
+      inputSchema: {
+        projectId: z.string()
+      },
+      outputSchema: contactFormOutputSchema.shape
+    },
+    async ({ projectId }) => {
+      const auth = await requireCliBaseUrl();
+      const structuredContent = contactFormOutputSchema.parse({
+        contactForm: await getRemoteContactForm(auth, projectId)
+      });
+      return mcpStructured("Suda contact form settings.", structuredContent);
+    }
+  );
+  server.registerTool(
+    "update_contact_form_settings",
+    {
+      description: "Plan or update project contact form settings. Use this when the user asks to change contact form fields, labels, validation, notification channels, or webhooks. Supported field types are text, textarea, checkbox, radio, and select. Conversation flow: first call get_contact_form_settings, then propose the exact draft to the user. Call this tool without confirm or with confirm:false to return the impact summary; only call again with confirm:true after the user explicitly agrees. Do not invent webhook URLs, notification recipients, or external delivery secrets. When updating an existing webhook, omit url to keep the stored secret; new webhooks need a user-provided url.",
+      inputSchema: updateContactFormInputSchema.shape,
+      outputSchema: {
+        status: z.enum(["needs_confirmation", "updated"]),
+        projectId: z.string(),
+        impact: z.string().optional(),
+        draft: updateContactFormInputSchema.omit({ confirm: true }).optional(),
+        contactForm: contactFormViewSchema.optional()
+      }
+    },
+    async (input) => {
+      const parsed = updateContactFormInputSchema.parse(input);
+      const auth = await requireCliBaseUrl();
+      const structuredContent = updateContactFormOutputSchema.parse(
+        await performUpdateContactForm(auth, parsed)
+      );
+      return mcpStructured(
+        structuredContent.status === "needs_confirmation" ? "Updating this contact form requires explicit confirmation." : "Updated Suda contact form settings.",
+        structuredContent
+      );
+    }
+  );
   server.registerTool(
     "create_page_draft",
     {