3 Commits

Author	SHA1	Message	Date
Peter Meier	d03afe780e	feat(contact): add Cloudflare Turnstile captcha ... Client renders explicit Turnstile widget (flexible, light theme) when PUBLIC_TURNSTILE_SITE_KEY is set. Token sent with form payload, server verifies via siteverify endpoint before forwarding to CMS. Skipped entirely when no site key configured (dev fallback). New i18n keys: contact_captcha_pending, contact_server_error_captcha. Deploy workflow forwards PUBLIC_TURNSTILE_SITE_KEY + TURNSTILE_SECRET. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-21 11:37:09 +02:00
Peter Meier	94a8feeb67	feat(contact): full validation, CMS-translated strings, smaller UI ... - contact-form-validation.ts: shared client+server validator returning {key, params} so messages can be translated via the CMS bundle. - ContactFormComponent: 3 honeypots, subject field, GDPR consent checkbox, character counter, inline per-field errors after submit, uses useTranslate() everywhere. - /api/contact: origin allowlist, multiple honeypot check, client-age gate, server-side re-validation, forwards X-Forwarded-For + UA to CMS forms plugin with consent timestamp in payload. - TextInput/Textarea: new size="sm" variant (rounded-sm, shadow-sm, h-10, smaller padding/text). Default "md" unchanged. - translations.ts: 37 new contact_* keys. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-21 11:28:23 +02:00
Peter Meier	9e05fbb2ba	feat: add internal_component block type with contact form ... InternalComponentBlock dispatches on `component` field value. ContactFormComponent submits via /api/contact (SvelteKit proxy → CMS /api/forms/kontakt/submit) with honeypot + client_age_ms. BlockRenderer and block-types.ts updated accordingly. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-21 11:01:47 +02:00