Statement
The contact form shall submit validated data to the Postmark HTTP API for transactional email delivery; API credentials shall not be exposed to the client.
Rationale
The Postmark HTTP API (not the Node.js SDK) is required for Cloudflare Workers compatibility. Server-side execution ensures credentials are never included in client-side bundles or responses.
Notes
Credentials are read from server-side environment variables. The form submission endpoint runs as an Astro API route under src/pages/api/. Client-side validation uses WA form controls; server-side validation runs in the endpoint before sending.
Topics
Owner: operational
Related: rendering-runtime , component-system
Applies To
- Site Configuration DOC-00002
- Forms & Submission DOC-00017