payload-dynamic-forms 0.0.0-stage → 0.1.0

package/dist/security/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/security/rateLimit.ts"],"sourcesContent":["import type { Payload } from 'payload'\n\nimport { sha256Hex } from './crypto.js'\n\ntype Entry = { count: number; start: number }\n\n/**\n * Soft per-form, per-visitor limit in Payload's KV store. The key holds a hash of the IP and the\n * app secret, never the IP. Returns false when the visitor is over the limit.\n */\nexport async function checkRateLimit(args: {\n  formId: number | string\n  ip: string\n  max: number\n  now?: number\n  payload: Payload\n  windowSeconds: number\n}): Promise<boolean> {\n  const { payload } = args\n  const now = args.now ?? Date.now()\n  const hash = await sha256Hex(`${args.ip || 'unknown'}${payload.secret}`)\n  const key = `forms:rl:${args.formId}:${hash}`\n  const entry = await payload.kv.get<Entry>(key)\n  if (!entry || typeof entry.start !== 'number' || now - entry.start >= args.windowSeconds * 1000) {\n    await payload.kv.set(key, { count: 1, start: now })\n    return true\n  }\n  if (entry.count >= args.max) {\n    return false\n  }\n  await payload.kv.set(key, { count: entry.count + 1, start: entry.start })\n  return true\n}\n"],"names":["sha256Hex","checkRateLimit","args","payload","now","Date","hash","ip","secret","key","formId","entry","kv","get","start","windowSeconds","set","count","max"],"mappings":"AAEA,SAASA,SAAS,QAAQ,cAAa;AAIvC;;;CAGC,GACD,OAAO,eAAeC,eAAeC,IAOpC;IACC,MAAM,EAAEC,OAAO,EAAE,GAAGD;IACpB,MAAME,MAAMF,KAAKE,GAAG,IAAIC,KAAKD,GAAG;IAChC,MAAME,OAAO,MAAMN,UAAU,GAAGE,KAAKK,EAAE,IAAI,YAAYJ,QAAQK,MAAM,EAAE;IACvE,MAAMC,MAAM,CAAC,SAAS,EAAEP,KAAKQ,MAAM,CAAC,CAAC,EAAEJ,MAAM;IAC7C,MAAMK,QAAQ,MAAMR,QAAQS,EAAE,CAACC,GAAG,CAAQJ;IAC1C,IAAI,CAACE,SAAS,OAAOA,MAAMG,KAAK,KAAK,YAAYV,MAAMO,MAAMG,KAAK,IAAIZ,KAAKa,aAAa,GAAG,MAAM;QAC/F,MAAMZ,QAAQS,EAAE,CAACI,GAAG,CAACP,KAAK;YAAEQ,OAAO;YAAGH,OAAOV;QAAI;QACjD,OAAO;IACT;IACA,IAAIO,MAAMM,KAAK,IAAIf,KAAKgB,GAAG,EAAE;QAC3B,OAAO;IACT;IACA,MAAMf,QAAQS,EAAE,CAACI,GAAG,CAACP,KAAK;QAAEQ,OAAON,MAAMM,KAAK,GAAG;QAAGH,OAAOH,MAAMG,KAAK;IAAC;IACvE,OAAO;AACT"}

package/dist/security/request.d.ts

@@ -0,0 +1,3 @@
+/** The visitor IP: `cf-connecting-ip`, else the first `x-forwarded-for`, else `x-real-ip`. */
+export declare function getRequestIP(headers: Headers): string;
+export declare function isHoneypotFilled(raw: Record<string, unknown>, fieldName: string): boolean;

package/dist/security/request.js

@@ -0,0 +1,13 @@
+/** The visitor IP: `cf-connecting-ip`, else the first `x-forwarded-for`, else `x-real-ip`. */ export function getRequestIP(headers) {
+    const value = headers.get('cf-connecting-ip') || headers.get('x-forwarded-for') || headers.get('x-real-ip') || '';
+    return value.split(',')[0]?.trim() || '';
+}
+export function isHoneypotFilled(raw, fieldName) {
+    const value = raw[fieldName];
+    const list = Array.isArray(value) ? value : [
+        value
+    ];
+    return list.some((v)=>typeof v === 'string' && v.trim() !== '');
+}
+
+//# sourceMappingURL=request.js.map

package/dist/security/request.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/security/request.ts"],"sourcesContent":["/** The visitor IP: `cf-connecting-ip`, else the first `x-forwarded-for`, else `x-real-ip`. */\nexport function getRequestIP(headers: Headers): string {\n  const value =\n    headers.get('cf-connecting-ip') || headers.get('x-forwarded-for') || headers.get('x-real-ip') || ''\n  return value.split(',')[0]?.trim() || ''\n}\n\nexport function isHoneypotFilled(raw: Record<string, unknown>, fieldName: string): boolean {\n  const value = raw[fieldName]\n  const list = Array.isArray(value) ? value : [value]\n  return list.some((v) => typeof v === 'string' && v.trim() !== '')\n}\n"],"names":["getRequestIP","headers","value","get","split","trim","isHoneypotFilled","raw","fieldName","list","Array","isArray","some","v"],"mappings":"AAAA,4FAA4F,GAC5F,OAAO,SAASA,aAAaC,OAAgB;IAC3C,MAAMC,QACJD,QAAQE,GAAG,CAAC,uBAAuBF,QAAQE,GAAG,CAAC,sBAAsBF,QAAQE,GAAG,CAAC,gBAAgB;IACnG,OAAOD,MAAME,KAAK,CAAC,IAAI,CAAC,EAAE,EAAEC,UAAU;AACxC;AAEA,OAAO,SAASC,iBAAiBC,GAA4B,EAAEC,SAAiB;IAC9E,MAAMN,QAAQK,GAAG,CAACC,UAAU;IAC5B,MAAMC,OAAOC,MAAMC,OAAO,CAACT,SAASA,QAAQ;QAACA;KAAM;IACnD,OAAOO,KAAKG,IAAI,CAAC,CAACC,IAAM,OAAOA,MAAM,YAAYA,EAAER,IAAI,OAAO;AAChE"}

package/dist/security/turnstile.d.ts

@@ -0,0 +1,28 @@
+export declare const SITEVERIFY_URL = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
+type Logger = {
+    error: (msg: unknown, ...rest: unknown[]) => void;
+};
+/**
+ * Verifies a Turnstile token with Cloudflare's siteverify: secret, token, visitor IP and an
+ * idempotency key (safe retries). Any error counts as a failed check.
+ */
+export declare function verifyTurnstile(args: {
+    idempotencyKey?: string;
+    ip?: string;
+    secret: string;
+    token: string;
+}): Promise<boolean>;
+/**
+ * The Turnstile check for one plugin setup. Off: passes. On without a secret: refuses every
+ * submission and logs one error line. On: the token must verify.
+ */
+export declare function checkTurnstile(args: {
+    ip: string;
+    logger: Logger;
+    settings: {
+        enabled: boolean;
+        secretKey: string;
+    };
+    token: unknown;
+}): Promise<boolean>;
+export {};

package/dist/security/turnstile.js

@@ -0,0 +1,56 @@
+export const SITEVERIFY_URL = 'https://challenges.cloudflare.com/turnstile/v0/siteverify';
+/**
+ * Verifies a Turnstile token with Cloudflare's siteverify: secret, token, visitor IP and an
+ * idempotency key (safe retries). Any error counts as a failed check.
+ */ export async function verifyTurnstile(args) {
+    try {
+        const response = await fetch(SITEVERIFY_URL, {
+            body: JSON.stringify({
+                idempotency_key: args.idempotencyKey || crypto.randomUUID(),
+                remoteip: args.ip || undefined,
+                response: args.token,
+                secret: args.secret
+            }),
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            method: 'POST'
+        });
+        if (!response.ok) {
+            return false;
+        }
+        const data = await response.json();
+        return data.success === true;
+    } catch  {
+        return false;
+    }
+}
+const warned = new WeakSet();
+/**
+ * The Turnstile check for one plugin setup. Off: passes. On without a secret: refuses every
+ * submission and logs one error line. On: the token must verify.
+ */ export async function checkTurnstile(args) {
+    const { settings } = args;
+    if (!settings.enabled) {
+        return true;
+    }
+    if (!settings.secretKey) {
+        if (!warned.has(settings)) {
+            warned.add(settings);
+            args.logger.error('payload-dynamic-forms: Turnstile is on but has no secret key; every submission is refused.');
+        }
+        return false;
+    }
+    const token = Array.isArray(args.token) ? args.token[0] : args.token;
+    if (typeof token !== 'string' || !token.trim()) {
+        return false;
+    }
+    return verifyTurnstile({
+        idempotencyKey: crypto.randomUUID(),
+        ip: args.ip,
+        secret: settings.secretKey,
+        token: token.trim()
+    });
+}
+
+//# sourceMappingURL=turnstile.js.map

package/dist/security/turnstile.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/security/turnstile.ts"],"sourcesContent":["export const SITEVERIFY_URL = 'https://challenges.cloudflare.com/turnstile/v0/siteverify'\n\ntype Logger = { error: (msg: unknown, ...rest: unknown[]) => void }\n\n/**\n * Verifies a Turnstile token with Cloudflare's siteverify: secret, token, visitor IP and an\n * idempotency key (safe retries). Any error counts as a failed check.\n */\nexport async function verifyTurnstile(args: {\n  idempotencyKey?: string\n  ip?: string\n  secret: string\n  token: string\n}): Promise<boolean> {\n  try {\n    const response = await fetch(SITEVERIFY_URL, {\n      body: JSON.stringify({\n        idempotency_key: args.idempotencyKey || crypto.randomUUID(),\n        remoteip: args.ip || undefined,\n        response: args.token,\n        secret: args.secret,\n      }),\n      headers: { 'Content-Type': 'application/json' },\n      method: 'POST',\n    })\n    if (!response.ok) {\n      return false\n    }\n    const data = (await response.json()) as { success?: boolean }\n    return data.success === true\n  } catch {\n    return false\n  }\n}\n\nconst warned = new WeakSet<object>()\n\n/**\n * The Turnstile check for one plugin setup. Off: passes. On without a secret: refuses every\n * submission and logs one error line. On: the token must verify.\n */\nexport async function checkTurnstile(args: {\n  ip: string\n  logger: Logger\n  settings: { enabled: boolean; secretKey: string }\n  token: unknown\n}): Promise<boolean> {\n  const { settings } = args\n  if (!settings.enabled) {\n    return true\n  }\n  if (!settings.secretKey) {\n    if (!warned.has(settings)) {\n      warned.add(settings)\n      args.logger.error('payload-dynamic-forms: Turnstile is on but has no secret key; every submission is refused.')\n    }\n    return false\n  }\n  const token = Array.isArray(args.token) ? args.token[0] : args.token\n  if (typeof token !== 'string' || !token.trim()) {\n    return false\n  }\n  return verifyTurnstile({ idempotencyKey: crypto.randomUUID(), ip: args.ip, secret: settings.secretKey, token: token.trim() })\n}\n"],"names":["SITEVERIFY_URL","verifyTurnstile","args","response","fetch","body","JSON","stringify","idempotency_key","idempotencyKey","crypto","randomUUID","remoteip","ip","undefined","token","secret","headers","method","ok","data","json","success","warned","WeakSet","checkTurnstile","settings","enabled","secretKey","has","add","logger","error","Array","isArray","trim"],"mappings":"AAAA,OAAO,MAAMA,iBAAiB,4DAA2D;AAIzF;;;CAGC,GACD,OAAO,eAAeC,gBAAgBC,IAKrC;IACC,IAAI;QACF,MAAMC,WAAW,MAAMC,MAAMJ,gBAAgB;YAC3CK,MAAMC,KAAKC,SAAS,CAAC;gBACnBC,iBAAiBN,KAAKO,cAAc,IAAIC,OAAOC,UAAU;gBACzDC,UAAUV,KAAKW,EAAE,IAAIC;gBACrBX,UAAUD,KAAKa,KAAK;gBACpBC,QAAQd,KAAKc,MAAM;YACrB;YACAC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CC,QAAQ;QACV;QACA,IAAI,CAACf,SAASgB,EAAE,EAAE;YAChB,OAAO;QACT;QACA,MAAMC,OAAQ,MAAMjB,SAASkB,IAAI;QACjC,OAAOD,KAAKE,OAAO,KAAK;IAC1B,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,MAAMC,SAAS,IAAIC;AAEnB;;;CAGC,GACD,OAAO,eAAeC,eAAevB,IAKpC;IACC,MAAM,EAAEwB,QAAQ,EAAE,GAAGxB;IACrB,IAAI,CAACwB,SAASC,OAAO,EAAE;QACrB,OAAO;IACT;IACA,IAAI,CAACD,SAASE,SAAS,EAAE;QACvB,IAAI,CAACL,OAAOM,GAAG,CAACH,WAAW;YACzBH,OAAOO,GAAG,CAACJ;YACXxB,KAAK6B,MAAM,CAACC,KAAK,CAAC;QACpB;QACA,OAAO;IACT;IACA,MAAMjB,QAAQkB,MAAMC,OAAO,CAAChC,KAAKa,KAAK,IAAIb,KAAKa,KAAK,CAAC,EAAE,GAAGb,KAAKa,KAAK;IACpE,IAAI,OAAOA,UAAU,YAAY,CAACA,MAAMoB,IAAI,IAAI;QAC9C,OAAO;IACT;IACA,OAAOlC,gBAAgB;QAAEQ,gBAAgBC,OAAOC,UAAU;QAAIE,IAAIX,KAAKW,EAAE;QAAEG,QAAQU,SAASE,SAAS;QAAEb,OAAOA,MAAMoB,IAAI;IAAG;AAC7H"}

package/dist/server/forms.d.ts

@@ -0,0 +1,73 @@
+import type { Payload, PayloadRequest, TypedLocale } from 'payload';
+import type { PublicForm } from '../shared/types.js';
+import type { ResolvedOptions } from '../types.js';
+export type EmailOutput = {
+    bcc?: null | string;
+    body?: null | string;
+    cc?: null | string;
+    enabled?: boolean | null;
+    from?: null | string;
+    id?: null | string;
+    kind?: 'team' | 'visitor' | null;
+    label?: null | string;
+    replyToField?: null | string;
+    subject?: null | string;
+    to?: null | string;
+    visitorField?: null | string;
+};
+export type WebhookOutput = {
+    enabled?: boolean | null;
+    headers?: Array<{
+        key?: null | string;
+        value?: null | string;
+    }> | null;
+    id?: null | string;
+    label?: null | string;
+    method?: 'PATCH' | 'POST' | 'PUT' | null;
+    payloadMode?: 'answersOnly' | 'full' | null;
+    retries?: null | number;
+    signingSecret?: null | string;
+    timeoutMs?: null | number;
+    url?: null | string;
+};
+export type FormDelivery = {
+    emails: EmailOutput[];
+    store: boolean;
+    webhooks: WebhookOutput[];
+    whatsapp: {
+        enabled: boolean;
+        messageTemplate?: null | string;
+        number?: null | string;
+        rowTemplate?: null | string;
+    };
+};
+export type LoadedForm = {
+    delivery: FormDelivery;
+    form: PublicForm;
+};
+type Locale = 'all' | TypedLocale | undefined;
+/** The plugin options of an app, kept on its config by `formsPlugin`. */
+export declare function getPluginOptions(payload: Payload): ResolvedOptions;
+/**
+ * Loads a published form by slug, as a visitor would see it, plus its delivery settings for the
+ * server. Null when the slug is unknown or the form is not published.
+ */
+export declare function loadPublishedForm(payload: Payload, slug: string, args?: {
+    locale?: Locale;
+    req?: PayloadRequest;
+}): Promise<LoadedForm | null>;
+/** Loads a form by id with its delivery settings (trusted server use: resend). */
+export declare function loadFormById(payload: Payload, id: number | string, args?: {
+    locale?: Locale;
+    req?: PayloadRequest;
+}): Promise<LoadedForm | null>;
+/**
+ * A published form ready to render: sections, choices from sources resolved with their
+ * attributes, words filled from the defaults, the WhatsApp number when WhatsApp is on, and none of
+ * its other delivery settings. Null for unknown or unpublished slugs.
+ */
+export declare function getPublicForm(payload: Payload, slug: string, args?: {
+    locale?: Locale;
+    req?: PayloadRequest;
+}): Promise<null | PublicForm>;
+export {};

package/dist/server/forms.js

@@ -0,0 +1,215 @@
+import { createLocalReq } from 'payload';
+import { isChoiceBlock, isInputBlock } from '../shared/rules.js';
+import { fillWords } from '../shared/words.js';
+/** The plugin options of an app, kept on its config by `formsPlugin`. */ export function getPluginOptions(payload) {
+    const options = payload.config.custom?.payloadForms;
+    if (!options) {
+        throw new Error('payload-dynamic-forms: formsPlugin is not installed (or is switched off) in this config.');
+    }
+    return options;
+}
+function pick(doc, names = []) {
+    const out = {};
+    for (const name of names){
+        if (doc[name] !== undefined && doc[name] !== null) {
+            out[name] = doc[name];
+        }
+    }
+    return out;
+}
+/**
+ * Turns source-based choices into `{ label, value, attributes }`: picked items in their order, or
+ * every published item in the source's default sort when the pick is empty. Unpublished and
+ * missing items are left out.
+ */ async function resolveChoices(payload, options, sections, locale) {
+    const sources = options.optionSources || {};
+    for (const section of sections){
+        for (const field of section.fields || []){
+            if (!isInputBlock(field) || !isChoiceBlock(field)) {
+                continue;
+            }
+            const block = field;
+            const sourceKey = block.optionsFrom;
+            const source = sourceKey && sourceKey !== 'typed' ? sources[sourceKey] : undefined;
+            const picked = Array.isArray(block.sourceItems) ? block.sourceItems : [];
+            delete block.sourceItems;
+            if (!source) {
+                block.options = (block.options || []).map((o)=>({
+                        label: o.label,
+                        value: o.value
+                    }));
+                continue;
+            }
+            const slug = String(source.collection);
+            const config = payload.collections[slug]?.config;
+            if (!config) {
+                block.options = [];
+                continue;
+            }
+            const ids = picked.filter((item)=>item && item.relationTo === slug).map((item)=>item.value && typeof item.value === 'object' ? item.value.id : item.value);
+            const and = [];
+            if (picked.length) {
+                and.push({
+                    id: {
+                        in: ids.length ? ids : [
+                            -1
+                        ]
+                    }
+                });
+            }
+            if (config.versions?.drafts) {
+                and.push({
+                    _status: {
+                        equals: 'published'
+                    }
+                });
+            }
+            // Trusted read of the items the editor picked: only label, value and listed attributes leave it.
+            const { docs } = await payload.find({
+                collection: slug,
+                depth: 0,
+                draft: false,
+                locale: locale,
+                overrideAccess: true,
+                pagination: false,
+                where: and.length ? {
+                    and
+                } : undefined
+            });
+            const byId = new Map(docs.map((doc)=>[
+                    String(doc.id),
+                    doc
+                ]));
+            const ordered = picked.length ? ids.map((id)=>byId.get(String(id))).filter((d)=>Boolean(d)) : docs;
+            block.options = ordered.map((doc)=>({
+                    attributes: pick(doc, source.attributes),
+                    label: String(doc[source.labelField] ?? ''),
+                    value: String(doc[source.valueField] ?? '')
+                })).filter((o)=>o.value);
+        }
+    }
+}
+async function buildLoaded(payload, options, raw, locale, req) {
+    const sections = structuredClone(raw.sections || []).filter(Boolean);
+    await resolveChoices(payload, options, sections, locale);
+    const d = raw.delivery || {};
+    const delivery = {
+        emails: (d.emails || []).filter(Boolean),
+        store: d.store !== false,
+        webhooks: (d.webhooks || []).filter(Boolean),
+        whatsapp: {
+            enabled: false,
+            ...d.whatsapp || {}
+        }
+    };
+    const sends = delivery.emails.some((e)=>e.enabled !== false) || delivery.webhooks.some((w)=>w.enabled !== false);
+    const form = {
+        id: raw.id,
+        slug: String(raw.slug || ''),
+        honeypotField: options.honeypotField,
+        intakeState: raw.intakeState === 'closed' ? 'closed' : 'open',
+        presentationMode: raw.presentationMode === 'steps' ? 'steps' : 'singlePage',
+        sections,
+        spamChecks: delivery.store || sends,
+        successRedirectURL: raw.successType === 'redirect' ? raw.successRedirectURL || null : null,
+        successType: raw.successType === 'redirect' ? 'redirect' : 'message',
+        title: String(raw.title || ''),
+        turnstile: {
+            enabled: options.turnstile.enabled,
+            fieldName: options.turnstile.fieldName
+        },
+        wording: fillWords(raw.wording, options.words)
+    };
+    if (delivery.whatsapp.enabled) {
+        let number = delivery.whatsapp.number?.trim() || '';
+        if (!number && options.whatsapp?.number) {
+            const request = req || await createLocalReq({}, payload);
+            number = String(await options.whatsapp.number({
+                form,
+                req: request
+            }) || '').trim();
+        }
+        if (number) {
+            form.whatsapp = {
+                number
+            };
+        }
+    }
+    return {
+        delivery,
+        form
+    };
+}
+/**
+ * Loads a published form by slug, as a visitor would see it, plus its delivery settings for the
+ * server. Null when the slug is unknown or the form is not published.
+ */ export async function loadPublishedForm(payload, slug, args = {}) {
+    const options = getPluginOptions(payload);
+    // Read as an anonymous visitor: access control decides, delivery fields are stripped.
+    const { docs } = await payload.find({
+        collection: options.slugs.forms,
+        depth: 0,
+        draft: false,
+        limit: 1,
+        locale: args.locale,
+        overrideAccess: false,
+        pagination: false,
+        where: {
+            and: [
+                {
+                    slug: {
+                        equals: slug
+                    }
+                },
+                {
+                    _status: {
+                        equals: 'published'
+                    }
+                }
+            ]
+        }
+    });
+    const visible = docs[0];
+    if (!visible) {
+        return null;
+    }
+    // Server-side read of the same published document for its delivery settings and secrets.
+    const full = await payload.findByID({
+        id: visible.id,
+        collection: options.slugs.forms,
+        depth: 0,
+        draft: false,
+        locale: args.locale,
+        overrideAccess: true
+    });
+    return buildLoaded(payload, options, {
+        ...full,
+        id: visible.id
+    }, args.locale, args.req);
+}
+/** Loads a form by id with its delivery settings (trusted server use: resend). */ export async function loadFormById(payload, id, args = {}) {
+    const options = getPluginOptions(payload);
+    try {
+        const full = await payload.findByID({
+            id,
+            collection: options.slugs.forms,
+            depth: 0,
+            draft: false,
+            locale: args.locale,
+            overrideAccess: true
+        });
+        return full ? buildLoaded(payload, options, full, args.locale, args.req) : null;
+    } catch  {
+        return null;
+    }
+}
+/**
+ * A published form ready to render: sections, choices from sources resolved with their
+ * attributes, words filled from the defaults, the WhatsApp number when WhatsApp is on, and none of
+ * its other delivery settings. Null for unknown or unpublished slugs.
+ */ export async function getPublicForm(payload, slug, args = {}) {
+    const loaded = await loadPublishedForm(payload, slug, args);
+    return loaded ? loaded.form : null;
+}
+
+//# sourceMappingURL=forms.js.map

package/dist/server/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/forms.ts"],"sourcesContent":["import type { Payload, PayloadRequest, TypedLocale, Where } from 'payload'\n\nimport { createLocalReq } from 'payload'\n\nimport type { ChoiceOption, FormSection, InputBlock, PublicForm } from '../shared/types.js'\nimport type { ResolvedOptions } from '../types.js'\n\nimport { isChoiceBlock, isInputBlock } from '../shared/rules.js'\nimport { fillWords } from '../shared/words.js'\n\nexport type EmailOutput = {\n  bcc?: null | string\n  body?: null | string\n  cc?: null | string\n  enabled?: boolean | null\n  from?: null | string\n  id?: null | string\n  kind?: 'team' | 'visitor' | null\n  label?: null | string\n  replyToField?: null | string\n  subject?: null | string\n  to?: null | string\n  visitorField?: null | string\n}\n\nexport type WebhookOutput = {\n  enabled?: boolean | null\n  headers?: Array<{ key?: null | string; value?: null | string }> | null\n  id?: null | string\n  label?: null | string\n  method?: 'PATCH' | 'POST' | 'PUT' | null\n  payloadMode?: 'answersOnly' | 'full' | null\n  retries?: null | number\n  signingSecret?: null | string\n  timeoutMs?: null | number\n  url?: null | string\n}\n\nexport type FormDelivery = {\n  emails: EmailOutput[]\n  store: boolean\n  webhooks: WebhookOutput[]\n  whatsapp: { enabled: boolean; messageTemplate?: null | string; number?: null | string; rowTemplate?: null | string }\n}\n\nexport type LoadedForm = {\n  delivery: FormDelivery\n  form: PublicForm\n}\n\ntype RawForm = {\n  _status?: string\n  delivery?: null | Partial<FormDelivery>\n  id: number | string\n  intakeState?: 'closed' | 'open' | null\n  presentationMode?: 'singlePage' | 'steps' | null\n  sections?: FormSection[] | null\n  slug?: null | string\n  successRedirectURL?: null | string\n  successType?: 'message' | 'redirect' | null\n  title?: null | string\n  wording?: null | Record<string, null | string>\n}\n\ntype Locale = 'all' | TypedLocale | undefined\n\n/** The plugin options of an app, kept on its config by `formsPlugin`. */\nexport function getPluginOptions(payload: Payload): ResolvedOptions {\n  const options = (payload.config.custom as { payloadForms?: ResolvedOptions } | undefined)?.payloadForms\n  if (!options) {\n    throw new Error('payload-dynamic-forms: formsPlugin is not installed (or is switched off) in this config.')\n  }\n  return options\n}\n\nfunction pick(doc: Record<string, unknown>, names: string[] = []): Record<string, unknown> {\n  const out: Record<string, unknown> = {}\n  for (const name of names) {\n    if (doc[name] !== undefined && doc[name] !== null) {\n      out[name] = doc[name]\n    }\n  }\n  return out\n}\n\n/**\n * Turns source-based choices into `{ label, value, attributes }`: picked items in their order, or\n * every published item in the source's default sort when the pick is empty. Unpublished and\n * missing items are left out.\n */\nasync function resolveChoices(payload: Payload, options: ResolvedOptions, sections: FormSection[], locale: Locale) {\n  const sources = options.optionSources || {}\n  for (const section of sections) {\n    for (const field of section.fields || []) {\n      if (!isInputBlock(field) || !isChoiceBlock(field)) {\n        continue\n      }\n      const block = field as { sourceItems?: unknown } & InputBlock\n      const sourceKey = block.optionsFrom\n      const source = sourceKey && sourceKey !== 'typed' ? sources[sourceKey] : undefined\n      const picked = Array.isArray(block.sourceItems) ? block.sourceItems : []\n      delete block.sourceItems\n      if (!source) {\n        block.options = (block.options || []).map((o: ChoiceOption) => ({ label: o.label, value: o.value }))\n        continue\n      }\n      const slug = String(source.collection)\n      const config = payload.collections[slug as never]?.config\n      if (!config) {\n        block.options = []\n        continue\n      }\n      const ids = picked\n        .filter((item: { relationTo?: string }) => item && item.relationTo === slug)\n        .map((item: { value: unknown }) =>\n          item.value && typeof item.value === 'object' ? (item.value as { id: number | string }).id : item.value,\n        ) as Array<number | string>\n      const and: Where[] = []\n      if (picked.length) {\n        and.push({ id: { in: ids.length ? ids : [-1] } })\n      }\n      if (config.versions?.drafts) {\n        and.push({ _status: { equals: 'published' } })\n      }\n      // Trusted read of the items the editor picked: only label, value and listed attributes leave it.\n      const { docs } = await payload.find({\n        collection: slug as never,\n        depth: 0,\n        draft: false,\n        locale: locale as never,\n        overrideAccess: true,\n        pagination: false,\n        where: and.length ? { and } : undefined,\n      })\n      const byId = new Map(docs.map((doc) => [String((doc as { id: unknown }).id), doc as Record<string, unknown>]))\n      const ordered = picked.length\n        ? ids.map((id) => byId.get(String(id))).filter((d): d is Record<string, unknown> => Boolean(d))\n        : (docs as Record<string, unknown>[])\n      block.options = ordered\n        .map((doc) => ({\n          attributes: pick(doc, source.attributes),\n          label: String(doc[source.labelField] ?? ''),\n          value: String(doc[source.valueField] ?? ''),\n        }))\n        .filter((o) => o.value)\n    }\n  }\n}\n\nasync function buildLoaded(\n  payload: Payload,\n  options: ResolvedOptions,\n  raw: RawForm,\n  locale: Locale,\n  req?: PayloadRequest,\n): Promise<LoadedForm> {\n  const sections = structuredClone(raw.sections || []).filter(Boolean)\n  await resolveChoices(payload, options, sections, locale)\n  const d = raw.delivery || {}\n  const delivery: FormDelivery = {\n    emails: (d.emails || []).filter(Boolean),\n    store: d.store !== false,\n    webhooks: (d.webhooks || []).filter(Boolean),\n    whatsapp: { enabled: false, ...(d.whatsapp || {}) },\n  }\n  const sends =\n    delivery.emails.some((e) => e.enabled !== false) || delivery.webhooks.some((w) => w.enabled !== false)\n  const form: PublicForm = {\n    id: raw.id,\n    slug: String(raw.slug || ''),\n    honeypotField: options.honeypotField,\n    intakeState: raw.intakeState === 'closed' ? 'closed' : 'open',\n    presentationMode: raw.presentationMode === 'steps' ? 'steps' : 'singlePage',\n    sections,\n    spamChecks: delivery.store || sends,\n    successRedirectURL: raw.successType === 'redirect' ? raw.successRedirectURL || null : null,\n    successType: raw.successType === 'redirect' ? 'redirect' : 'message',\n    title: String(raw.title || ''),\n    turnstile: { enabled: options.turnstile.enabled, fieldName: options.turnstile.fieldName },\n    wording: fillWords(raw.wording as never, options.words),\n  }\n  if (delivery.whatsapp.enabled) {\n    let number = delivery.whatsapp.number?.trim() || ''\n    if (!number && options.whatsapp?.number) {\n      const request = req || (await createLocalReq({}, payload))\n      number = String((await options.whatsapp.number({ form, req: request })) || '').trim()\n    }\n    if (number) {\n      form.whatsapp = { number }\n    }\n  }\n  return { delivery, form }\n}\n\n/**\n * Loads a published form by slug, as a visitor would see it, plus its delivery settings for the\n * server. Null when the slug is unknown or the form is not published.\n */\nexport async function loadPublishedForm(\n  payload: Payload,\n  slug: string,\n  args: { locale?: Locale; req?: PayloadRequest } = {},\n): Promise<LoadedForm | null> {\n  const options = getPluginOptions(payload)\n  // Read as an anonymous visitor: access control decides, delivery fields are stripped.\n  const { docs } = await payload.find({\n    collection: options.slugs.forms as never,\n    depth: 0,\n    draft: false,\n    limit: 1,\n    locale: args.locale as never,\n    overrideAccess: false,\n    pagination: false,\n    where: { and: [{ slug: { equals: slug } }, { _status: { equals: 'published' } }] },\n  })\n  const visible = docs[0] as RawForm | undefined\n  if (!visible) {\n    return null\n  }\n  // Server-side read of the same published document for its delivery settings and secrets.\n  const full = (await payload.findByID({\n    id: visible.id,\n    collection: options.slugs.forms as never,\n    depth: 0,\n    draft: false,\n    locale: args.locale as never,\n    overrideAccess: true,\n  })) as unknown as RawForm\n  return buildLoaded(payload, options, { ...full, id: visible.id }, args.locale, args.req)\n}\n\n/** Loads a form by id with its delivery settings (trusted server use: resend). */\nexport async function loadFormById(\n  payload: Payload,\n  id: number | string,\n  args: { locale?: Locale; req?: PayloadRequest } = {},\n): Promise<LoadedForm | null> {\n  const options = getPluginOptions(payload)\n  try {\n    const full = (await payload.findByID({\n      id,\n      collection: options.slugs.forms as never,\n      depth: 0,\n      draft: false,\n      locale: args.locale as never,\n      overrideAccess: true,\n    })) as unknown as RawForm\n    return full ? buildLoaded(payload, options, full, args.locale, args.req) : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * A published form ready to render: sections, choices from sources resolved with their\n * attributes, words filled from the defaults, the WhatsApp number when WhatsApp is on, and none of\n * its other delivery settings. Null for unknown or unpublished slugs.\n */\nexport async function getPublicForm(\n  payload: Payload,\n  slug: string,\n  args: { locale?: Locale; req?: PayloadRequest } = {},\n): Promise<null | PublicForm> {\n  const loaded = await loadPublishedForm(payload, slug, args)\n  return loaded ? loaded.form : null\n}\n"],"names":["createLocalReq","isChoiceBlock","isInputBlock","fillWords","getPluginOptions","payload","options","config","custom","payloadForms","Error","pick","doc","names","out","name","undefined","resolveChoices","sections","locale","sources","optionSources","section","field","fields","block","sourceKey","optionsFrom","source","picked","Array","isArray","sourceItems","map","o","label","value","slug","String","collection","collections","ids","filter","item","relationTo","id","and","length","push","in","versions","drafts","_status","equals","docs","find","depth","draft","overrideAccess","pagination","where","byId","Map","ordered","get","d","Boolean","attributes","labelField","valueField","buildLoaded","raw","req","structuredClone","delivery","emails","store","webhooks","whatsapp","enabled","sends","some","e","w","form","honeypotField","intakeState","presentationMode","spamChecks","successRedirectURL","successType","title","turnstile","fieldName","wording","words","number","trim","request","loadPublishedForm","args","slugs","forms","limit","visible","full","findByID","loadFormById","getPublicForm","loaded"],"mappings":"AAEA,SAASA,cAAc,QAAQ,UAAS;AAKxC,SAASC,aAAa,EAAEC,YAAY,QAAQ,qBAAoB;AAChE,SAASC,SAAS,QAAQ,qBAAoB;AA0D9C,uEAAuE,GACvE,OAAO,SAASC,iBAAiBC,OAAgB;IAC/C,MAAMC,UAAWD,QAAQE,MAAM,CAACC,MAAM,EAAqDC;IAC3F,IAAI,CAACH,SAAS;QACZ,MAAM,IAAII,MAAM;IAClB;IACA,OAAOJ;AACT;AAEA,SAASK,KAAKC,GAA4B,EAAEC,QAAkB,EAAE;IAC9D,MAAMC,MAA+B,CAAC;IACtC,KAAK,MAAMC,QAAQF,MAAO;QACxB,IAAID,GAAG,CAACG,KAAK,KAAKC,aAAaJ,GAAG,CAACG,KAAK,KAAK,MAAM;YACjDD,GAAG,CAACC,KAAK,GAAGH,GAAG,CAACG,KAAK;QACvB;IACF;IACA,OAAOD;AACT;AAEA;;;;CAIC,GACD,eAAeG,eAAeZ,OAAgB,EAAEC,OAAwB,EAAEY,QAAuB,EAAEC,MAAc;IAC/G,MAAMC,UAAUd,QAAQe,aAAa,IAAI,CAAC;IAC1C,KAAK,MAAMC,WAAWJ,SAAU;QAC9B,KAAK,MAAMK,SAASD,QAAQE,MAAM,IAAI,EAAE,CAAE;YACxC,IAAI,CAACtB,aAAaqB,UAAU,CAACtB,cAAcsB,QAAQ;gBACjD;YACF;YACA,MAAME,QAAQF;YACd,MAAMG,YAAYD,MAAME,WAAW;YACnC,MAAMC,SAASF,aAAaA,cAAc,UAAUN,OAAO,CAACM,UAAU,GAAGV;YACzE,MAAMa,SAASC,MAAMC,OAAO,CAACN,MAAMO,WAAW,IAAIP,MAAMO,WAAW,GAAG,EAAE;YACxE,OAAOP,MAAMO,WAAW;YACxB,IAAI,CAACJ,QAAQ;gBACXH,MAAMnB,OAAO,GAAG,AAACmB,CAAAA,MAAMnB,OAAO,IAAI,EAAE,AAAD,EAAG2B,GAAG,CAAC,CAACC,IAAqB,CAAA;wBAAEC,OAAOD,EAAEC,KAAK;wBAAEC,OAAOF,EAAEE,KAAK;oBAAC,CAAA;gBACjG;YACF;YACA,MAAMC,OAAOC,OAAOV,OAAOW,UAAU;YACrC,MAAMhC,SAASF,QAAQmC,WAAW,CAACH,KAAc,EAAE9B;YACnD,IAAI,CAACA,QAAQ;gBACXkB,MAAMnB,OAAO,GAAG,EAAE;gBAClB;YACF;YACA,MAAMmC,MAAMZ,OACTa,MAAM,CAAC,CAACC,OAAkCA,QAAQA,KAAKC,UAAU,KAAKP,MACtEJ,GAAG,CAAC,CAACU,OACJA,KAAKP,KAAK,IAAI,OAAOO,KAAKP,KAAK,KAAK,WAAW,AAACO,KAAKP,KAAK,CAA6BS,EAAE,GAAGF,KAAKP,KAAK;YAE1G,MAAMU,MAAe,EAAE;YACvB,IAAIjB,OAAOkB,MAAM,EAAE;gBACjBD,IAAIE,IAAI,CAAC;oBAAEH,IAAI;wBAAEI,IAAIR,IAAIM,MAAM,GAAGN,MAAM;4BAAC,CAAC;yBAAE;oBAAC;gBAAE;YACjD;YACA,IAAIlC,OAAO2C,QAAQ,EAAEC,QAAQ;gBAC3BL,IAAIE,IAAI,CAAC;oBAAEI,SAAS;wBAAEC,QAAQ;oBAAY;gBAAE;YAC9C;YACA,iGAAiG;YACjG,MAAM,EAAEC,IAAI,EAAE,GAAG,MAAMjD,QAAQkD,IAAI,CAAC;gBAClChB,YAAYF;gBACZmB,OAAO;gBACPC,OAAO;gBACPtC,QAAQA;gBACRuC,gBAAgB;gBAChBC,YAAY;gBACZC,OAAOd,IAAIC,MAAM,GAAG;oBAAED;gBAAI,IAAI9B;YAChC;YACA,MAAM6C,OAAO,IAAIC,IAAIR,KAAKrB,GAAG,CAAC,CAACrB,MAAQ;oBAAC0B,OAAO,AAAC1B,IAAwBiC,EAAE;oBAAGjC;iBAA+B;YAC5G,MAAMmD,UAAUlC,OAAOkB,MAAM,GACzBN,IAAIR,GAAG,CAAC,CAACY,KAAOgB,KAAKG,GAAG,CAAC1B,OAAOO,MAAMH,MAAM,CAAC,CAACuB,IAAoCC,QAAQD,MACzFX;YACL7B,MAAMnB,OAAO,GAAGyD,QACb9B,GAAG,CAAC,CAACrB,MAAS,CAAA;oBACbuD,YAAYxD,KAAKC,KAAKgB,OAAOuC,UAAU;oBACvChC,OAAOG,OAAO1B,GAAG,CAACgB,OAAOwC,UAAU,CAAC,IAAI;oBACxChC,OAAOE,OAAO1B,GAAG,CAACgB,OAAOyC,UAAU,CAAC,IAAI;gBAC1C,CAAA,GACC3B,MAAM,CAAC,CAACR,IAAMA,EAAEE,KAAK;QAC1B;IACF;AACF;AAEA,eAAekC,YACbjE,OAAgB,EAChBC,OAAwB,EACxBiE,GAAY,EACZpD,MAAc,EACdqD,GAAoB;IAEpB,MAAMtD,WAAWuD,gBAAgBF,IAAIrD,QAAQ,IAAI,EAAE,EAAEwB,MAAM,CAACwB;IAC5D,MAAMjD,eAAeZ,SAASC,SAASY,UAAUC;IACjD,MAAM8C,IAAIM,IAAIG,QAAQ,IAAI,CAAC;IAC3B,MAAMA,WAAyB;QAC7BC,QAAQ,AAACV,CAAAA,EAAEU,MAAM,IAAI,EAAE,AAAD,EAAGjC,MAAM,CAACwB;QAChCU,OAAOX,EAAEW,KAAK,KAAK;QACnBC,UAAU,AAACZ,CAAAA,EAAEY,QAAQ,IAAI,EAAE,AAAD,EAAGnC,MAAM,CAACwB;QACpCY,UAAU;YAAEC,SAAS;YAAO,GAAId,EAAEa,QAAQ,IAAI,CAAC,CAAC;QAAE;IACpD;IACA,MAAME,QACJN,SAASC,MAAM,CAACM,IAAI,CAAC,CAACC,IAAMA,EAAEH,OAAO,KAAK,UAAUL,SAASG,QAAQ,CAACI,IAAI,CAAC,CAACE,IAAMA,EAAEJ,OAAO,KAAK;IAClG,MAAMK,OAAmB;QACvBvC,IAAI0B,IAAI1B,EAAE;QACVR,MAAMC,OAAOiC,IAAIlC,IAAI,IAAI;QACzBgD,eAAe/E,QAAQ+E,aAAa;QACpCC,aAAaf,IAAIe,WAAW,KAAK,WAAW,WAAW;QACvDC,kBAAkBhB,IAAIgB,gBAAgB,KAAK,UAAU,UAAU;QAC/DrE;QACAsE,YAAYd,SAASE,KAAK,IAAII;QAC9BS,oBAAoBlB,IAAImB,WAAW,KAAK,aAAanB,IAAIkB,kBAAkB,IAAI,OAAO;QACtFC,aAAanB,IAAImB,WAAW,KAAK,aAAa,aAAa;QAC3DC,OAAOrD,OAAOiC,IAAIoB,KAAK,IAAI;QAC3BC,WAAW;YAAEb,SAASzE,QAAQsF,SAAS,CAACb,OAAO;YAAEc,WAAWvF,QAAQsF,SAAS,CAACC,SAAS;QAAC;QACxFC,SAAS3F,UAAUoE,IAAIuB,OAAO,EAAWxF,QAAQyF,KAAK;IACxD;IACA,IAAIrB,SAASI,QAAQ,CAACC,OAAO,EAAE;QAC7B,IAAIiB,SAAStB,SAASI,QAAQ,CAACkB,MAAM,EAAEC,UAAU;QACjD,IAAI,CAACD,UAAU1F,QAAQwE,QAAQ,EAAEkB,QAAQ;YACvC,MAAME,UAAU1B,OAAQ,MAAMxE,eAAe,CAAC,GAAGK;YACjD2F,SAAS1D,OAAO,AAAC,MAAMhC,QAAQwE,QAAQ,CAACkB,MAAM,CAAC;gBAAEZ;gBAAMZ,KAAK0B;YAAQ,MAAO,IAAID,IAAI;QACrF;QACA,IAAID,QAAQ;YACVZ,KAAKN,QAAQ,GAAG;gBAAEkB;YAAO;QAC3B;IACF;IACA,OAAO;QAAEtB;QAAUU;IAAK;AAC1B;AAEA;;;CAGC,GACD,OAAO,eAAee,kBACpB9F,OAAgB,EAChBgC,IAAY,EACZ+D,OAAkD,CAAC,CAAC;IAEpD,MAAM9F,UAAUF,iBAAiBC;IACjC,sFAAsF;IACtF,MAAM,EAAEiD,IAAI,EAAE,GAAG,MAAMjD,QAAQkD,IAAI,CAAC;QAClChB,YAAYjC,QAAQ+F,KAAK,CAACC,KAAK;QAC/B9C,OAAO;QACPC,OAAO;QACP8C,OAAO;QACPpF,QAAQiF,KAAKjF,MAAM;QACnBuC,gBAAgB;QAChBC,YAAY;QACZC,OAAO;YAAEd,KAAK;gBAAC;oBAAET,MAAM;wBAAEgB,QAAQhB;oBAAK;gBAAE;gBAAG;oBAAEe,SAAS;wBAAEC,QAAQ;oBAAY;gBAAE;aAAE;QAAC;IACnF;IACA,MAAMmD,UAAUlD,IAAI,CAAC,EAAE;IACvB,IAAI,CAACkD,SAAS;QACZ,OAAO;IACT;IACA,yFAAyF;IACzF,MAAMC,OAAQ,MAAMpG,QAAQqG,QAAQ,CAAC;QACnC7D,IAAI2D,QAAQ3D,EAAE;QACdN,YAAYjC,QAAQ+F,KAAK,CAACC,KAAK;QAC/B9C,OAAO;QACPC,OAAO;QACPtC,QAAQiF,KAAKjF,MAAM;QACnBuC,gBAAgB;IAClB;IACA,OAAOY,YAAYjE,SAASC,SAAS;QAAE,GAAGmG,IAAI;QAAE5D,IAAI2D,QAAQ3D,EAAE;IAAC,GAAGuD,KAAKjF,MAAM,EAAEiF,KAAK5B,GAAG;AACzF;AAEA,gFAAgF,GAChF,OAAO,eAAemC,aACpBtG,OAAgB,EAChBwC,EAAmB,EACnBuD,OAAkD,CAAC,CAAC;IAEpD,MAAM9F,UAAUF,iBAAiBC;IACjC,IAAI;QACF,MAAMoG,OAAQ,MAAMpG,QAAQqG,QAAQ,CAAC;YACnC7D;YACAN,YAAYjC,QAAQ+F,KAAK,CAACC,KAAK;YAC/B9C,OAAO;YACPC,OAAO;YACPtC,QAAQiF,KAAKjF,MAAM;YACnBuC,gBAAgB;QAClB;QACA,OAAO+C,OAAOnC,YAAYjE,SAASC,SAASmG,MAAML,KAAKjF,MAAM,EAAEiF,KAAK5B,GAAG,IAAI;IAC7E,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeoC,cACpBvG,OAAgB,EAChBgC,IAAY,EACZ+D,OAAkD,CAAC,CAAC;IAEpD,MAAMS,SAAS,MAAMV,kBAAkB9F,SAASgC,MAAM+D;IACtD,OAAOS,SAASA,OAAOzB,IAAI,GAAG;AAChC"}

package/dist/server/resend.d.ts

@@ -0,0 +1,27 @@
+import type { Payload, PayloadRequest } from 'payload';
+import type { Answers, SnapshotRow, SubmissionStatus } from '../shared/types.js';
+import { type LogEntry } from '../delivery/run.js';
+export type SubmissionDoc = {
+    answers?: Answers | null;
+    attachments?: Array<{
+        id: number | string;
+    } | number | string> | null;
+    deliveryLog?: LogEntry[] | null;
+    form?: {
+        id: number | string;
+    } | null | number | string;
+    id: number | string;
+    metadata?: {
+        locale?: null | string;
+    } | null;
+    snapshot?: null | SnapshotRow[];
+};
+/**
+ * Runs again the outputs whose last try failed and that still exist on the form. Outputs removed
+ * since get a "skipped" entry. Returns the full new log and status (the caller saves them).
+ */
+export declare function resendFailedDeliveries(payload: Payload, submission: SubmissionDoc, req: PayloadRequest): Promise<{
+    added: LogEntry[];
+    log: LogEntry[];
+    status: SubmissionStatus;
+}>;

package/dist/server/resend.js

@@ -0,0 +1,84 @@
+import { runDeliveries, statusFromLog } from '../delivery/run.js';
+import { getPluginOptions, loadFormById } from './forms.js';
+/**
+ * Runs again the outputs whose last try failed and that still exist on the form. Outputs removed
+ * since get a "skipped" entry. Returns the full new log and status (the caller saves them).
+ */ export async function resendFailedDeliveries(payload, submission, req) {
+    const options = getPluginOptions(payload);
+    const log = (submission.deliveryLog || []).map((entry)=>{
+        const { id: _id, ...rest } = entry;
+        return rest;
+    });
+    const formId = typeof submission.form === 'object' && submission.form ? submission.form.id : submission.form;
+    const loaded = formId != null ? await loadFormById(payload, formId, {
+        locale: submission.metadata?.locale || undefined,
+        req
+    }) : null;
+    const last = new Map();
+    for (const entry of log){
+        if (entry.outputId) {
+            last.set(entry.outputId, entry);
+        }
+    }
+    const failed = [
+        ...last.values()
+    ].filter((entry)=>entry.result === 'failed');
+    if (!failed.length) {
+        return {
+            added: [],
+            log,
+            status: statusFromLog(log)
+        };
+    }
+    const existing = new Set(loaded ? [
+        ...loaded.delivery.emails,
+        ...loaded.delivery.webhooks
+    ].filter((o)=>o.enabled !== false && o.id).map((o)=>String(o.id)) : []);
+    const added = [];
+    const rerun = new Set();
+    for (const entry of failed){
+        if (existing.has(entry.outputId)) {
+            rerun.add(entry.outputId);
+        } else {
+            added.push({
+                at: new Date().toISOString(),
+                error: 'This output is no longer on the form (or is switched off); not sent again.',
+                kind: entry.kind,
+                label: entry.label,
+                outputId: entry.outputId,
+                result: 'skipped',
+                target: entry.target,
+                tries: 0
+            });
+        }
+    }
+    if (loaded && rerun.size) {
+        const attachments = (submission.attachments || []).map((a)=>typeof a === 'object' ? a.id : a);
+        added.push(...await runDeliveries({
+            answers: submission.answers || {},
+            attachments: attachments.map((id)=>({
+                    id,
+                    fieldKey: '',
+                    filename: ''
+                })),
+            delivery: loaded.delivery,
+            form: loaded.form,
+            options,
+            payload,
+            req,
+            snapshot: submission.snapshot || [],
+            submissionId: submission.id
+        }, rerun));
+    }
+    const next = [
+        ...log,
+        ...added
+    ];
+    return {
+        added,
+        log: next,
+        status: statusFromLog(next)
+    };
+}
+
+//# sourceMappingURL=resend.js.map

package/dist/server/resend.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/resend.ts"],"sourcesContent":["import type { Payload, PayloadRequest } from 'payload'\n\nimport type { Answers, SnapshotRow, SubmissionStatus } from '../shared/types.js'\n\nimport { type LogEntry, runDeliveries, statusFromLog } from '../delivery/run.js'\nimport { getPluginOptions, loadFormById } from './forms.js'\n\nexport type SubmissionDoc = {\n  answers?: Answers | null\n  attachments?: Array<{ id: number | string } | number | string> | null\n  deliveryLog?: LogEntry[] | null\n  form?: { id: number | string } | null | number | string\n  id: number | string\n  metadata?: { locale?: null | string } | null\n  snapshot?: null | SnapshotRow[]\n}\n\n/**\n * Runs again the outputs whose last try failed and that still exist on the form. Outputs removed\n * since get a \"skipped\" entry. Returns the full new log and status (the caller saves them).\n */\nexport async function resendFailedDeliveries(\n  payload: Payload,\n  submission: SubmissionDoc,\n  req: PayloadRequest,\n): Promise<{ added: LogEntry[]; log: LogEntry[]; status: SubmissionStatus }> {\n  const options = getPluginOptions(payload)\n  const log = (submission.deliveryLog || []).map((entry) => {\n    const { id: _id, ...rest } = entry as { id?: string } & LogEntry\n    return rest as LogEntry\n  })\n  const formId = typeof submission.form === 'object' && submission.form ? submission.form.id : submission.form\n  const loaded = formId != null ? await loadFormById(payload, formId, { locale: (submission.metadata?.locale || undefined) as never, req }) : null\n  const last = new Map<string, LogEntry>()\n  for (const entry of log) {\n    if (entry.outputId) {\n      last.set(entry.outputId, entry)\n    }\n  }\n  const failed = [...last.values()].filter((entry) => entry.result === 'failed')\n  if (!failed.length) {\n    return { added: [], log, status: statusFromLog(log) }\n  }\n  const existing = new Set<string>(\n    loaded\n      ? [...loaded.delivery.emails, ...loaded.delivery.webhooks]\n          .filter((o) => o.enabled !== false && o.id)\n          .map((o) => String(o.id))\n      : [],\n  )\n  const added: LogEntry[] = []\n  const rerun = new Set<string>()\n  for (const entry of failed) {\n    if (existing.has(entry.outputId!)) {\n      rerun.add(entry.outputId!)\n    } else {\n      added.push({\n        at: new Date().toISOString(),\n        error: 'This output is no longer on the form (or is switched off); not sent again.',\n        kind: entry.kind,\n        label: entry.label,\n        outputId: entry.outputId,\n        result: 'skipped',\n        target: entry.target,\n        tries: 0,\n      })\n    }\n  }\n  if (loaded && rerun.size) {\n    const attachments = (submission.attachments || []).map((a) => (typeof a === 'object' ? a.id : a))\n    added.push(\n      ...(await runDeliveries(\n        {\n          answers: submission.answers || {},\n          attachments: attachments.map((id) => ({ id, fieldKey: '', filename: '' })),\n          delivery: loaded.delivery,\n          form: loaded.form,\n          options,\n          payload,\n          req,\n          snapshot: submission.snapshot || [],\n          submissionId: submission.id,\n        },\n        rerun,\n      )),\n    )\n  }\n  const next = [...log, ...added]\n  return { added, log: next, status: statusFromLog(next) }\n}\n"],"names":["runDeliveries","statusFromLog","getPluginOptions","loadFormById","resendFailedDeliveries","payload","submission","req","options","log","deliveryLog","map","entry","id","_id","rest","formId","form","loaded","locale","metadata","undefined","last","Map","outputId","set","failed","values","filter","result","length","added","status","existing","Set","delivery","emails","webhooks","o","enabled","String","rerun","has","add","push","at","Date","toISOString","error","kind","label","target","tries","size","attachments","a","answers","fieldKey","filename","snapshot","submissionId","next"],"mappings":"AAIA,SAAwBA,aAAa,EAAEC,aAAa,QAAQ,qBAAoB;AAChF,SAASC,gBAAgB,EAAEC,YAAY,QAAQ,aAAY;AAY3D;;;CAGC,GACD,OAAO,eAAeC,uBACpBC,OAAgB,EAChBC,UAAyB,EACzBC,GAAmB;IAEnB,MAAMC,UAAUN,iBAAiBG;IACjC,MAAMI,MAAM,AAACH,CAAAA,WAAWI,WAAW,IAAI,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC;QAC9C,MAAM,EAAEC,IAAIC,GAAG,EAAE,GAAGC,MAAM,GAAGH;QAC7B,OAAOG;IACT;IACA,MAAMC,SAAS,OAAOV,WAAWW,IAAI,KAAK,YAAYX,WAAWW,IAAI,GAAGX,WAAWW,IAAI,CAACJ,EAAE,GAAGP,WAAWW,IAAI;IAC5G,MAAMC,SAASF,UAAU,OAAO,MAAMb,aAAaE,SAASW,QAAQ;QAAEG,QAASb,WAAWc,QAAQ,EAAED,UAAUE;QAAqBd;IAAI,KAAK;IAC5I,MAAMe,OAAO,IAAIC;IACjB,KAAK,MAAMX,SAASH,IAAK;QACvB,IAAIG,MAAMY,QAAQ,EAAE;YAClBF,KAAKG,GAAG,CAACb,MAAMY,QAAQ,EAAEZ;QAC3B;IACF;IACA,MAAMc,SAAS;WAAIJ,KAAKK,MAAM;KAAG,CAACC,MAAM,CAAC,CAAChB,QAAUA,MAAMiB,MAAM,KAAK;IACrE,IAAI,CAACH,OAAOI,MAAM,EAAE;QAClB,OAAO;YAAEC,OAAO,EAAE;YAAEtB;YAAKuB,QAAQ/B,cAAcQ;QAAK;IACtD;IACA,MAAMwB,WAAW,IAAIC,IACnBhB,SACI;WAAIA,OAAOiB,QAAQ,CAACC,MAAM;WAAKlB,OAAOiB,QAAQ,CAACE,QAAQ;KAAC,CACrDT,MAAM,CAAC,CAACU,IAAMA,EAAEC,OAAO,KAAK,SAASD,EAAEzB,EAAE,EACzCF,GAAG,CAAC,CAAC2B,IAAME,OAAOF,EAAEzB,EAAE,KACzB,EAAE;IAER,MAAMkB,QAAoB,EAAE;IAC5B,MAAMU,QAAQ,IAAIP;IAClB,KAAK,MAAMtB,SAASc,OAAQ;QAC1B,IAAIO,SAASS,GAAG,CAAC9B,MAAMY,QAAQ,GAAI;YACjCiB,MAAME,GAAG,CAAC/B,MAAMY,QAAQ;QAC1B,OAAO;YACLO,MAAMa,IAAI,CAAC;gBACTC,IAAI,IAAIC,OAAOC,WAAW;gBAC1BC,OAAO;gBACPC,MAAMrC,MAAMqC,IAAI;gBAChBC,OAAOtC,MAAMsC,KAAK;gBAClB1B,UAAUZ,MAAMY,QAAQ;gBACxBK,QAAQ;gBACRsB,QAAQvC,MAAMuC,MAAM;gBACpBC,OAAO;YACT;QACF;IACF;IACA,IAAIlC,UAAUuB,MAAMY,IAAI,EAAE;QACxB,MAAMC,cAAc,AAAChD,CAAAA,WAAWgD,WAAW,IAAI,EAAE,AAAD,EAAG3C,GAAG,CAAC,CAAC4C,IAAO,OAAOA,MAAM,WAAWA,EAAE1C,EAAE,GAAG0C;QAC9FxB,MAAMa,IAAI,IACJ,MAAM5C,cACR;YACEwD,SAASlD,WAAWkD,OAAO,IAAI,CAAC;YAChCF,aAAaA,YAAY3C,GAAG,CAAC,CAACE,KAAQ,CAAA;oBAAEA;oBAAI4C,UAAU;oBAAIC,UAAU;gBAAG,CAAA;YACvEvB,UAAUjB,OAAOiB,QAAQ;YACzBlB,MAAMC,OAAOD,IAAI;YACjBT;YACAH;YACAE;YACAoD,UAAUrD,WAAWqD,QAAQ,IAAI,EAAE;YACnCC,cAActD,WAAWO,EAAE;QAC7B,GACA4B;IAGN;IACA,MAAMoB,OAAO;WAAIpD;WAAQsB;KAAM;IAC/B,OAAO;QAAEA;QAAOtB,KAAKoD;QAAM7B,QAAQ/B,cAAc4D;IAAM;AACzD"}

package/dist/shared/answers.d.ts

@@ -0,0 +1,47 @@
+import type { Answers, AnswerValue, FieldTypeChecks, FileLike, FormLike, FormWords, InputBlock, SnapshotRow, YesNoWords } from './types.js';
+/** Default limits for file-upload fields. */
+export declare const DEFAULT_FILE_LIMITS: {
+    readonly maxFileSize: number;
+    readonly maxTotalSize: number;
+    readonly mimeTypes: readonly ["application/pdf", "image/jpeg", "image/png", "image/webp", "text/plain", "text/csv", "application/msword", "application/vnd.openxmlformats-officedocument.wordprocessingml.document"];
+};
+export type FileLimits = {
+    maxFileSize?: number;
+    maxTotalSize?: number;
+    mimeTypes?: readonly string[];
+};
+/** One valid address: no spaces, commas or lists, a dot in the domain. */
+export declare function isValidEmail(value: unknown): boolean;
+/** Turns a raw answer (form data or JSON) into the value the field type keeps. */
+export declare function normalizeAnswer(field: InputBlock, raw: unknown, fieldTypes?: Record<string, FieldTypeChecks>): AnswerValue;
+/**
+ * The text of an answer in messages and snapshots: option labels, file names, and the form's
+ * `yes` / `no` words for a checkbox (pass `fillWords(form.wording)` or the public form's wording).
+ */
+export declare function answerToText(field: InputBlock, value: AnswerValue, words: YesNoWords, fieldTypes?: Record<string, FieldTypeChecks>): string;
+/** Checks the files given to one upload field: count, MIME type and size. */
+export declare function checkFiles(field: InputBlock, files: FileLike[], limits?: FileLimits): boolean;
+export type CheckOptions = {
+    /** Checks for app-registered field types. */
+    fieldTypes?: Record<string, FieldTypeChecks>;
+    /** Files per upload field key. */
+    files?: Record<string, FileLike[]>;
+    limits?: FileLimits;
+    /** Form words; default: the form's wording filled from the defaults. */
+    words?: FormWords;
+};
+export type CheckResult = {
+    /** Shown answers only, normalised. Upload fields are left out (the server adds them). */
+    answers: Answers;
+    fieldErrors: Record<string, string>;
+    /** Keys of shown upload fields that got files. */
+    fileKeys: string[];
+    ok: boolean;
+};
+/**
+ * Normalises raw answers, drops hidden ones (and, in steps, those of sections off the path), and
+ * reports a field error for every shown field that is required and empty or has a bad value.
+ */
+export declare function checkAnswers(form: FormLike, raw: Record<string, unknown>, options?: CheckOptions): CheckResult;
+/** Section title, label and value per answered, shown field, as worded now. */
+export declare function buildSnapshot(form: FormLike, answers: Answers, fieldTypes?: Record<string, FieldTypeChecks>): SnapshotRow[];