[zumbrunn]

Draft: needs a published @dune/core that has duneorg/dune#79 and duneorg/dune#80. The @dune/core range in deno.json is still 0.35 and is set when that core ships (expected ^0.35.2); CI cannot pass until then, because the JSR core it resolves today has no BootstrapResult.submissions and no registerFormRoutes.

Part of duneorg/dune#78: public features must not depend on an admin plugin.

Forms, the legacy contact route and the incoming webhook are now served by @dune/core. This plugin keeps only the submissions management UI.

What changes

• Removes public-api.ts, email.ts and webhook.ts; the plugin no longer registers /api/forms/:name, /api/contact or /api/webhook/incoming, nor sends the submission email/webhook.
• submissions.ts re-exports createSubmissionManager and the submission types from @dune/core/forms, so existing importers keep working. The UI reads the same files through bootstrap.submissions.
• On a core without BootstrapResult.submissions the plugin stops at startup with a message that says what to upgrade (or to stay on 3.1).
• The incoming webhook's audit entries (system.rebuild, system.cache_purge) are written from core's new onSystemAction hook.
• The data directory follows system.data_dir, falling back to the deprecated admin.dataDir, the same resolution core uses for the submissions it stores.
• mountDuneAdmin() calls core's registerFormRoutes() so headless apps (bootstrap + mountDuneAdmin, no createDuneApp) still get the public routes; it is a no-op when already registered.
• Security: dev/apply blocks writes to admin.incoming_webhooks because those are secret tokens. The tokens now live at system.webhooks, so that is blocked too (with a test).

Tests

239 pass (locally, against the workspace core). Lint shows the same 6 pre-existing problems as main.

Release

Core first (#79 is merged, #80 open), then the 24 h dependency-age window, then set the core range here and publish. Version is not bumped in this PR; this is a behaviour change for anyone relying on this plugin to serve the public form routes with an older core, so decide the bump at release.

Not touched: the now-unused nodemailer import and publicServerError in http.ts.

🤖 Generated with Claude Code