medusa-plugin-forms 0.1.0

package/.medusa/server/src/api/admin/form-submissions/[id]/route.d.ts

@@ -0,0 +1,5 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminGetFormSubmissionType, AdminUpdateFormSubmissionType } from '../../../validators';
+export declare const GET: (req: AuthenticatedMedusaRequest<AdminGetFormSubmissionType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<AdminUpdateFormSubmissionType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/form-submissions/[id]/route.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.POST = exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const form_1 = require("../../../../modules/form");
+const GET = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data: [form_submission] } = await query.graph({ entity: 'form_submission', ...req.queryConfig, filters: { id: req.params.id } }, { throwIfKeyNotFound: true });
+    res.json({ form_submission });
+};
+exports.GET = GET;
+const POST = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    const form_submission = await formService.updateFormSubmissions({
+        id: req.params.id,
+        status: req.validatedBody.status
+    });
+    res.json({ form_submission });
+};
+exports.POST = POST;
+const DELETE = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteFormSubmissions([req.params.id]);
+    res.json({ deleted: [req.params.id] });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL2Zvcm0tc3VibWlzc2lvbnMvW2lkXS9yb3V0ZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFDQSxxREFBcUU7QUFDckUsbURBQXNEO0FBSy9DLE1BQU0sR0FBRyxHQUFHLEtBQUssRUFDdkIsR0FBMkQsRUFDM0QsR0FBbUIsRUFDbEIsRUFBRTtJQUNILE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO0lBRWhFLE1BQU0sRUFDTCxJQUFJLEVBQUUsQ0FBQyxlQUFlLENBQUMsRUFDdkIsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQ3BCLEVBQUUsTUFBTSxFQUFFLGlCQUFpQixFQUFFLEdBQUcsR0FBRyxDQUFDLFdBQVcsRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLEVBQUUsRUFBRSxFQUNqRixFQUFFLGtCQUFrQixFQUFFLElBQUksRUFBRSxDQUM1QixDQUFBO0lBRUQsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLGVBQWUsRUFBRSxDQUFDLENBQUE7QUFDOUIsQ0FBQyxDQUFBO0FBZFksUUFBQSxHQUFHLE9BY2Y7QUFFTSxNQUFNLElBQUksR0FBRyxLQUFLLEVBQ3hCLEdBQThELEVBQzlELEdBQW1CLEVBQ2xCLEVBQUU7SUFDSCxNQUFNLFdBQVcsR0FBZ0IsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsa0JBQVcsQ0FBQyxDQUFBO0lBQy9ELE1BQU0sZUFBZSxHQUFHLE1BQU0sV0FBVyxDQUFDLHFCQUFxQixDQUFDO1FBQy9ELEVBQUUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUU7UUFDakIsTUFBTSxFQUFFLEdBQUcsQ0FBQyxhQUFhLENBQUMsTUFBMEI7S0FDcEQsQ0FBQyxDQUFBO0lBQ0YsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLGVBQWUsRUFBRSxDQUFDLENBQUE7QUFDOUIsQ0FBQyxDQUFBO0FBVlksUUFBQSxJQUFJLFFBVWhCO0FBRU0sTUFBTSxNQUFNLEdBQUcsS0FBSyxFQUFFLEdBQStCLEVBQUUsR0FBbUIsRUFBRSxFQUFFO0lBQ3BGLE1BQU0sV0FBVyxHQUFnQixHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxrQkFBVyxDQUFDLENBQUE7SUFDL0QsTUFBTSxXQUFXLENBQUMscUJBQXFCLENBQUMsQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUE7SUFDeEQsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLE9BQU8sRUFBRSxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLEVBQUUsQ0FBQyxDQUFBO0FBQ3ZDLENBQUMsQ0FBQTtBQUpZLFFBQUEsTUFBTSxVQUlsQiJ9

package/.medusa/server/src/api/admin/form-submissions/route.d.ts

@@ -0,0 +1,4 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminDeleteFormSubmissionsType, AdminGetFormSubmissionsType } from '../../validators';
+export declare const GET: (req: AuthenticatedMedusaRequest<AdminGetFormSubmissionsType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest<AdminDeleteFormSubmissionsType>, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/form-submissions/route.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const form_1 = require("../../../modules/form");
+const GET = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { form_id, status } = req.validatedQuery;
+    const { data: form_submissions, metadata } = await query.graph({
+        entity: 'form_submission',
+        ...req.queryConfig,
+        filters: {
+            ...(form_id ? { form_id } : {}),
+            ...(status ? { status } : {})
+        }
+    });
+    res.json({
+        form_submissions,
+        count: metadata?.count,
+        limit: metadata?.take,
+        offset: metadata?.skip
+    });
+};
+exports.GET = GET;
+const DELETE = async (req, res) => {
+    const { ids } = req.validatedBody;
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteFormSubmissions(ids);
+    res.json({ deleted: ids });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/forms/[id]/fields/[fieldId]/options/[optionId]/route.d.ts

@@ -0,0 +1,4 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminUpdateFormFieldOptionType } from '../../../../../../../validators';
+export declare const POST: (req: AuthenticatedMedusaRequest<AdminUpdateFormFieldOptionType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/forms/[id]/fields/[fieldId]/options/[optionId]/route.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.POST = void 0;
+const form_1 = require("../../../../../../../../modules/form");
+const POST = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    const option = await formService.updateFormFieldOptions({
+        id: req.params.optionId,
+        ...req.validatedBody
+    });
+    res.json({ option });
+};
+exports.POST = POST;
+const DELETE = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteFormFieldOptions([req.params.optionId]);
+    res.json({ deleted: [req.params.optionId] });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL2Zvcm1zL1tpZF0vZmllbGRzL1tmaWVsZElkXS9vcHRpb25zL1tvcHRpb25JZF0vcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQ0EsK0RBQWtFO0FBSTNELE1BQU0sSUFBSSxHQUFHLEtBQUssRUFDeEIsR0FBK0QsRUFDL0QsR0FBbUIsRUFDbEIsRUFBRTtJQUNILE1BQU0sV0FBVyxHQUFnQixHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxrQkFBVyxDQUFDLENBQUE7SUFDL0QsTUFBTSxNQUFNLEdBQUcsTUFBTSxXQUFXLENBQUMsc0JBQXNCLENBQUM7UUFDdkQsRUFBRSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsUUFBUTtRQUN2QixHQUFHLEdBQUcsQ0FBQyxhQUFhO0tBQ3BCLENBQUMsQ0FBQTtJQUNGLEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFBO0FBQ3JCLENBQUMsQ0FBQTtBQVZZLFFBQUEsSUFBSSxRQVVoQjtBQUVNLE1BQU0sTUFBTSxHQUFHLEtBQUssRUFBRSxHQUErQixFQUFFLEdBQW1CLEVBQUUsRUFBRTtJQUNwRixNQUFNLFdBQVcsR0FBZ0IsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsa0JBQVcsQ0FBQyxDQUFBO0lBQy9ELE1BQU0sV0FBVyxDQUFDLHNCQUFzQixDQUFDLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFBO0lBQy9ELEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxPQUFPLEVBQUUsQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUMsQ0FBQTtBQUM3QyxDQUFDLENBQUE7QUFKWSxRQUFBLE1BQU0sVUFJbEIifQ==

package/.medusa/server/src/api/admin/forms/[id]/fields/[fieldId]/options/route.d.ts

@@ -0,0 +1,4 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminCreateFormFieldOptionType, AdminDeleteFormFieldOptionsType } from '../../../../../../validators';
+export declare const POST: (req: AuthenticatedMedusaRequest<AdminCreateFormFieldOptionType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest<AdminDeleteFormFieldOptionsType>, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/forms/[id]/fields/[fieldId]/options/route.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.POST = void 0;
+const form_1 = require("../../../../../../../modules/form");
+const POST = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    const option = await formService.createFormFieldOptions({
+        form_field_id: req.params.fieldId,
+        ...req.validatedBody
+    });
+    res.json({ option });
+};
+exports.POST = POST;
+const DELETE = async (req, res) => {
+    const { ids } = req.validatedBody;
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteFormFieldOptions(ids);
+    res.json({ deleted: ids });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/forms/[id]/fields/[fieldId]/route.d.ts

@@ -0,0 +1,4 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminUpdateFormFieldType } from '../../../../../validators';
+export declare const POST: (req: AuthenticatedMedusaRequest<AdminUpdateFormFieldType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/forms/[id]/fields/[fieldId]/route.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.POST = void 0;
+const form_1 = require("../../../../../../modules/form");
+const POST = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    const { field_options: incomingOptions, ...fieldData } = req.validatedBody;
+    const field = await formService.updateFormFields({ id: req.params.fieldId, ...fieldData });
+    if (incomingOptions !== undefined) {
+        const existing = await formService.listFormFieldOptions({ form_field_id: req.params.fieldId });
+        const existingIds = new Set(existing.map(o => o.id));
+        const incomingIds = new Set(incomingOptions.filter(o => o.id).map(o => o.id));
+        const toDelete = [...existingIds].filter(id => !incomingIds.has(id));
+        const toCreate = incomingOptions.filter(o => !o.id);
+        const toUpdate = incomingOptions.filter(o => o.id && existingIds.has(o.id));
+        await Promise.all([
+            toDelete.length > 0 ? formService.deleteFormFieldOptions(toDelete) : Promise.resolve(),
+            ...toCreate.map((o, i) => formService.createFormFieldOptions({
+                form_field_id: req.params.fieldId,
+                label: o.label,
+                value: o.value,
+                sort_order: o.sort_order ?? i
+            })),
+            ...toUpdate.map(o => formService.updateFormFieldOptions({
+                id: o.id,
+                label: o.label,
+                value: o.value,
+                sort_order: o.sort_order
+            }))
+        ]);
+    }
+    res.json({ field });
+};
+exports.POST = POST;
+const DELETE = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteFormFields([req.params.fieldId]);
+    res.json({ deleted: [req.params.fieldId] });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/forms/[id]/fields/route.d.ts

@@ -0,0 +1,5 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminCreateFormFieldType, AdminDeleteFormFieldsType, AdminGetFormFieldsType } from '../../../../validators';
+export declare const GET: (req: AuthenticatedMedusaRequest<AdminGetFormFieldsType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<AdminCreateFormFieldType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest<AdminDeleteFormFieldsType>, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/forms/[id]/fields/route.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.POST = exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const form_1 = require("../../../../../modules/form");
+const GET = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { id: form_id } = req.params;
+    const { data: fields, metadata } = await query.graph({
+        entity: 'form_field',
+        ...req.queryConfig,
+        filters: { form_id }
+    });
+    res.json({ fields, count: metadata?.count, limit: metadata?.take, offset: metadata?.skip });
+};
+exports.GET = GET;
+const POST = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    const field = await formService.createFormFields({
+        form_id: req.params.id,
+        ...req.validatedBody
+    });
+    res.json({ field });
+};
+exports.POST = POST;
+const DELETE = async (req, res) => {
+    const { ids } = req.validatedBody;
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteFormFields(ids);
+    res.json({ deleted: ids });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/forms/[id]/route.d.ts

@@ -0,0 +1,5 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminGetFormType, AdminUpdateFormType } from '../../../validators';
+export declare const GET: (req: AuthenticatedMedusaRequest<AdminGetFormType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<AdminUpdateFormType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/forms/[id]/route.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.POST = exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const form_1 = require("../../../../modules/form");
+const GET = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { id } = req.params;
+    const { data: [form] } = await query.graph({ entity: 'form', ...req.queryConfig, filters: { id } }, { throwIfKeyNotFound: true });
+    res.json({ form });
+};
+exports.GET = GET;
+const POST = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    const { form_fields: incomingFields, ...formData } = req.validatedBody;
+    const form = await formService.updateForms({ id: req.params.id, ...formData });
+    if (incomingFields !== undefined) {
+        const existing = await formService.listFormFields({ form_id: req.params.id });
+        const existingIds = new Set(existing.map(f => f.id));
+        const incomingIds = new Set(incomingFields.filter(f => f.id).map(f => f.id));
+        const toDelete = [...existingIds].filter(id => !incomingIds.has(id));
+        const toCreate = incomingFields.filter(f => !f.id);
+        const toUpdate = incomingFields.filter(f => f.id && existingIds.has(f.id));
+        if (toDelete.length > 0) {
+            await formService.deleteFormFields(toDelete);
+        }
+        if (toCreate.length > 0) {
+            await formService.createFormFields(toCreate.map((f, i) => ({
+                form_id: req.params.id,
+                name: f.name,
+                label: f.label,
+                field_type: f.field_type,
+                required: f.required ?? false,
+                sort_order: f.sort_order ?? i
+            })));
+        }
+        if (toUpdate.length > 0) {
+            await formService.updateFormFields(toUpdate.map(f => ({
+                id: f.id,
+                name: f.name,
+                label: f.label,
+                field_type: f.field_type,
+                required: f.required ?? false,
+                sort_order: f.sort_order
+            })));
+        }
+    }
+    res.json({ form });
+};
+exports.POST = POST;
+const DELETE = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteForms([req.params.id]);
+    res.json({ deleted: [req.params.id] });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/forms/route.d.ts

@@ -0,0 +1,5 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { AdminCreateFormType, AdminDeleteFormsType, AdminGetFormsType } from '../../validators';
+export declare const GET: (req: AuthenticatedMedusaRequest<AdminGetFormsType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<AdminCreateFormType>, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest<AdminDeleteFormsType>, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/admin/forms/route.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE = exports.POST = exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const form_1 = require("../../../modules/form");
+const GET = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { q, active, ...rest } = req.validatedQuery;
+    const { data: forms, metadata } = await query.graph({
+        entity: 'form',
+        ...req.queryConfig,
+        filters: {
+            ...(active != null ? { active } : {}),
+            ...(q ? { $or: [{ name: { $ilike: `%${q}%` } }, { handle: { $ilike: `%${q}%` } }] } : {})
+        }
+    });
+    res.json({ forms, count: metadata?.count, limit: metadata?.take, offset: metadata?.skip });
+};
+exports.GET = GET;
+const POST = async (req, res) => {
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    const { form_fields: fieldInputs, ...formData } = req.validatedBody;
+    const form = await formService.createForms(formData);
+    if (fieldInputs?.length) {
+        await formService.createFormFields(fieldInputs.map((f, i) => ({
+            ...f,
+            form_id: form.id,
+            sort_order: f.sort_order ?? i
+        })));
+    }
+    res.json({ form });
+};
+exports.POST = POST;
+const DELETE = async (req, res) => {
+    const { ids } = req.validatedBody;
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    await formService.deleteForms(ids);
+    res.json({ deleted: ids });
+};
+exports.DELETE = DELETE;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/forms/[handle]/route.d.ts

@@ -0,0 +1,3 @@
+import { MedusaRequest, MedusaResponse } from '@medusajs/framework/http';
+import { StoreSubmitFormType } from '../../validators';
+export declare const POST: (req: MedusaRequest<StoreSubmitFormType>, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/forms/[handle]/route.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const form_1 = require("../../../modules/form");
+async function validateTurnstileToken(token, secret) {
+    const response = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ response: token, secret })
+    });
+    const data = await response.json();
+    return data.success;
+}
+const POST = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const formService = req.scope.resolve(form_1.FORM_MODULE);
+    // Look up form by handle, include fields for validation
+    const { data: forms } = await query.graph({
+        entity: 'form',
+        fields: [
+            'id',
+            'active',
+            'turnstile_enabled',
+            'form_fields.name',
+            'form_fields.label',
+            'form_fields.required'
+        ],
+        filters: { handle: req.params.handle }
+    });
+    const form = forms[0];
+    if (!form) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Form "${req.params.handle}" not found`);
+    }
+    if (!form.active) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, `Form "${req.params.handle}" is not accepting submissions`);
+    }
+    const { cf_turnstile_response, data } = req.validatedBody;
+    // ── Sanitize data immediately: strip unknown fields and cap value sizes ──
+    const MAX_FIELD_VALUE_LENGTH = 10_000;
+    const configuredFields = form.form_fields ?? [];
+    const allowedFieldNames = new Set(configuredFields.map(f => f.name));
+    const filteredData = {};
+    for (const key of Object.keys(data)) {
+        if (!allowedFieldNames.has(key))
+            continue;
+        const val = data[key];
+        if (typeof val === 'string' && val.length > MAX_FIELD_VALUE_LENGTH) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, `Field "${key}" exceeds maximum length of ${MAX_FIELD_VALUE_LENGTH} characters`);
+        }
+        filteredData[key] = val;
+    }
+    // Validate Turnstile token if required
+    if (form.turnstile_enabled) {
+        if (!cf_turnstile_response) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, 'Turnstile token is required');
+        }
+        const { turnstileSecretKey } = formService.getOptions();
+        if (!turnstileSecretKey) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, 'Turnstile is not configured on the server');
+        }
+        const valid = await validateTurnstileToken(cf_turnstile_response, turnstileSecretKey);
+        if (!valid) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, 'Turnstile verification failed');
+        }
+    }
+    // Validate required fields (against already-filtered data)
+    const missingFields = configuredFields
+        .filter(f => f.required && (filteredData[f.name] == null || filteredData[f.name] === ''))
+        .map(f => f.label);
+    if (missingFields.length > 0) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, `Missing required fields: ${missingFields.join(', ')}`);
+    }
+    const submission = await formService.createFormSubmissions({
+        form_id: form.id,
+        data: filteredData,
+        ip_address: req.headers['x-forwarded-for']?.split(',')[0]?.trim() ?? req.ip ?? null,
+        user_agent: req.headers['user-agent'] ?? null
+    });
+    const eventBus = req.scope.resolve(utils_1.Modules.EVENT_BUS);
+    await eventBus.emit({ name: 'form.submitted', data: { id: submission.id } });
+    res.status(201).json({ submitted: true });
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/middlewares.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("@medusajs/framework/http").MiddlewaresConfig;
+export default _default;

package/.medusa/server/src/api/middlewares.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const http_1 = require("@medusajs/framework/http");
+const validators_1 = require("./validators");
+exports.default = (0, http_1.defineMiddlewares)([
+    {
+        matcher: '/admin/forms',
+        method: ['GET'],
+        middlewares: [
+            (0, http_1.validateAndTransformQuery)(validators_1.AdminGetForms, {
+                defaults: [
+                    'id', 'name', 'handle', 'description', 'active', 'turnstile_enabled',
+                    'notification_emails', 'metadata', 'created_at', 'updated_at', 'form_fields.id'
+                ],
+                isList: true,
+                defaultLimit: 15
+            })
+        ]
+    },
+    {
+        matcher: '/admin/forms',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminCreateForm)]
+    },
+    {
+        matcher: '/admin/forms',
+        method: ['DELETE'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminDeleteForms)]
+    },
+    {
+        matcher: '/admin/forms/:id',
+        method: ['GET'],
+        middlewares: [
+            (0, http_1.validateAndTransformQuery)(validators_1.AdminGetForm, {
+                defaults: [
+                    'id', 'name', 'handle', 'description', 'active', 'turnstile_enabled',
+                    'notification_emails', 'metadata', 'created_at', 'updated_at',
+                    'form_fields.id', 'form_fields.name', 'form_fields.label',
+                    'form_fields.field_type', 'form_fields.required', 'form_fields.sort_order',
+                    'form_fields.field_options.id', 'form_fields.field_options.label',
+                    'form_fields.field_options.value', 'form_fields.field_options.sort_order'
+                ],
+                isList: false
+            })
+        ]
+    },
+    {
+        matcher: '/admin/forms/:id',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminUpdateForm)]
+    },
+    {
+        matcher: '/admin/forms/:id/fields',
+        method: ['GET'],
+        middlewares: [
+            (0, http_1.validateAndTransformQuery)(validators_1.AdminGetFormFields, {
+                defaults: [
+                    'id', 'name', 'label', 'field_type', 'required', 'options', 'sort_order',
+                    'created_at', 'updated_at'
+                ],
+                isList: true,
+                defaultLimit: 50
+            })
+        ]
+    },
+    {
+        matcher: '/admin/forms/:id/fields',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminCreateFormField)]
+    },
+    {
+        matcher: '/admin/forms/:id/fields',
+        method: ['DELETE'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminDeleteFormFields)]
+    },
+    {
+        matcher: '/admin/forms/:id/fields/:fieldId',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminUpdateFormField)]
+    },
+    {
+        matcher: '/admin/forms/:id/fields/:fieldId/options',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminCreateFormFieldOption)]
+    },
+    {
+        matcher: '/admin/forms/:id/fields/:fieldId/options',
+        method: ['DELETE'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminDeleteFormFieldOptions)]
+    },
+    {
+        matcher: '/admin/forms/:id/fields/:fieldId/options/:optionId',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminUpdateFormFieldOption)]
+    },
+    {
+        matcher: '/admin/form-submissions',
+        method: ['GET'],
+        middlewares: [
+            (0, http_1.validateAndTransformQuery)(validators_1.AdminGetFormSubmissions, {
+                defaults: [
+                    'id', 'status', 'data', 'ip_address', 'user_agent', 'created_at', 'updated_at',
+                    'form.id', 'form.name', 'form.handle'
+                ],
+                isList: true,
+                defaultLimit: 20
+            })
+        ]
+    },
+    {
+        matcher: '/admin/form-submissions',
+        method: ['DELETE'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminDeleteFormSubmissions)]
+    },
+    {
+        matcher: '/admin/form-submissions/:id',
+        method: ['GET'],
+        middlewares: [
+            (0, http_1.validateAndTransformQuery)(validators_1.AdminGetFormSubmission, {
+                defaults: [
+                    'id', 'status', 'data', 'ip_address', 'user_agent', 'created_at', 'updated_at',
+                    'form.id', 'form.name', 'form.handle',
+                    'form.form_fields.id', 'form.form_fields.name',
+                    'form.form_fields.label', 'form.form_fields.field_type'
+                ],
+                isList: false
+            })
+        ]
+    },
+    {
+        matcher: '/admin/form-submissions/:id',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.AdminUpdateFormSubmission)]
+    },
+    // Store
+    {
+        matcher: '/forms/:handle',
+        method: ['POST'],
+        middlewares: [(0, http_1.validateAndTransformBody)(validators_1.StoreSubmitForm)]
+    }
+]);
+//# sourceMappingURL=data:application/json;base64,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