refactor: remove configurable endpoint option and update documentation

- Removed the optional  parameter from FormsReach initialization and submission options.
- Updated the SDK to use a fixed submit URL: .
- Adjusted documentation across various files to reflect these changes and clarify that the endpoint is not configurable.

Author: vitrora

.changeset/fixed-submit-endpoint.md

@@ -0,0 +1,14 @@
+---
+"@formsreach/js": minor
+"@formsreach/react": minor
+"@formsreach/vue": minor
+---
+
+Bake the submit endpoint into the SDK and stop exposing it
+
+All requests now go to `https://app.formsreach.com/api/v1/submit`, which is fixed inside `@formsreach/js`.
+
+**Breaking:**
+
+- Removed the `endpoint` option from `FormsReach.init`, `submitForm`, and `useFormsReach` (React and Vue).
+- Removed the `DEFAULT_ENDPOINT` export from `@formsreach/js`.

examples/html/index.html

@@ -63,8 +63,6 @@ <h1>FormsReach HTML example</h1>
 
       FormsReach.init({
         apiKey,
-        // Optional: point at local formsreach-app
-        // endpoint: "http://localhost:3000/api/v1/submit",
         onSuccess(result) {
           log.textContent = "Success: " + JSON.stringify(result, null, 2);
         },

packages/js/AGENTS.md

@@ -45,7 +45,6 @@ import { FormsReach, init, submitForm } from "@formsreach/js";
 
 FormsReach.init({
   apiKey: "fr_…",
-  // endpoint?: string — default https://formsreach.com/api/v1/submit
   onSuccess: ({ id, redirectUrl }) => {},
   onError: (err) => {},
 });
@@ -63,7 +62,6 @@ try {
   const { id, redirectUrl } = await submitForm({
     apiKey: "fr_…",
     data: { name: "Ada", email: "ada@example.com" },
-    // endpoint?: string
   });
 } catch (e) {
   if (e instanceof FormsReachClientError) {
@@ -84,28 +82,25 @@ Field values must be strings (`Record<string, string>`). File uploads are **not*
 | `ensureSpamFields(form, opts?)` | function | Injects empty `_gotcha` + once-set `_ts` into the form DOM (idempotent).                  |
 | `FormsReach`                    | object   | `{ init, submitForm }` — also default export.                                             |
 | `FormsReachClientError`         | class    | `error.formsreach` holds normalized error payload.                                        |
-| `DEFAULT_ENDPOINT`              | const    | `https://formsreach.com/api/v1/submit`                                                    |
 | `FORM_ATTR`                     | const    | `data-formsreach`                                                                         |
 | `EVENT_SUCCESS` / `EVENT_ERROR` | const    | DOM event names (see below)                                                               |
 
 ### `FormsReachInitOptions`
 
 - `apiKey: string` (required)
-- `endpoint?: string`
 - `onSuccess?: (result: { id: string; redirectUrl: string \| null }) => void`
 - `onError?: (error: FormsReachError) => void`
 
 ### `SubmitFormOptions`
 
 - `apiKey: string`
-- `endpoint?: string`
 - `data: Record<string, string>`
 
 ## Backend contract (do not invent alternatives)
 
-- `POST` to endpoint (default above)
+- `POST` to the fixed FormsReach endpoint `https://app.formsreach.com/api/v1/submit` (baked into the SDK; not configurable)
 - Body JSON: form fields + `api_key` + `_gotcha` (non-empty → silent spam) + `_ts` (render ms; too fast → silent spam; missing skips)
-- `init` / React / Vue auto-inject `_gotcha` + `_ts` via `ensureSpamFields`. Raw HTML POST without the SDK must include both in markup.
+- `init` / React / Vue auto-inject `_gotcha` + `_ts` via `ensureSpamFields`. Raw HTML POST without the SDK must include both in markup, and posts to a different host: `https://api.formsreach.com/submit`.
 - Programmatic `submitForm({ data })` without a form does not invent `_ts` (server skips time-trap).
 - Success envelope: `{ status: "success", data: { ok: true, id, redirectUrl }, meta: { requestId } }`
 - Failure envelope: `{ status: "failure", data: null, error: Problem, meta }`
@@ -129,7 +124,7 @@ Field values must be strings (`Record<string, string>`). File uploads are **not*
 
 - Rename CDN file, `FormsReach` global, or `data-formsreach` without a major version + product snippet update
 - Ship or document file-upload fields until the product API supports them
-- Point at a non-FormsReach submit API unless the user explicitly overrides `endpoint` for self-host/testing
+- Add an `endpoint` / `baseUrl` option back — the submit URL is intentionally fixed and not part of the public API
 - Put dashboard or server code in the client
 
 ## Related packages

packages/js/README.md

@@ -45,6 +45,8 @@ const { id, redirectUrl } = await submitForm({
 });
 ```
 
+All requests go to `https://app.formsreach.com/api/v1/submit`. The endpoint is built into the SDK and is not configurable.
+
 ## Events
 
 After `init`, the SDK dispatches DOM events on `document`:

packages/js/src/bind.ts

@@ -68,7 +68,6 @@ async function handleSubmit(event: Event): Promise<void> {
     const data = formToPayload(form, config.apiKey);
     const result = await submitForm({
       apiKey: config.apiKey,
-      endpoint: config.endpoint,
       data,
     });
 

packages/js/src/client.ts

@@ -1,5 +1,5 @@
 import {
-  DEFAULT_ENDPOINT,
+  SUBMIT_ENDPOINT,
   type FormsReachError,
   type FormsReachSuccess,
   type SubmitFormOptions,
@@ -64,12 +64,11 @@ function fromFailure(
 export async function submitForm(
   options: SubmitFormOptions,
 ): Promise<FormsReachSuccess> {
-  const endpoint = options.endpoint ?? DEFAULT_ENDPOINT;
   const payload = withSubmitMeta(options.data, options.apiKey);
 
   let res: Response;
   try {
-    res = await fetch(endpoint, {
+    res = await fetch(SUBMIT_ENDPOINT, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",

packages/js/src/index.ts

@@ -2,7 +2,6 @@ export { init } from "./init";
 export { submitForm, FormsReachClientError } from "./client";
 export { ensureSpamFields, type EnsureSpamFieldsOptions } from "./spam-fields";
 export {
-  DEFAULT_ENDPOINT,
   FORM_ATTR,
   EVENT_SUCCESS,
   EVENT_ERROR,

packages/js/src/init.ts

@@ -16,7 +16,6 @@ export function init(options: FormsReachInitOptions): void {
 
   setConfig({
     apiKey: options.apiKey.trim(),
-    endpoint: options.endpoint,
     onSuccess: options.onSuccess,
     onError: options.onError,
   });

packages/js/src/types.ts

@@ -16,22 +16,17 @@ export type FormsReachError = {
 export type FormsReachInitOptions = {
   /** Form API key from the FormsReach dashboard (`fr_…`). */
   apiKey: string;
-  /**
-   * Public submit URL.
-   * @default "https://formsreach.com/api/v1/submit"
-   */
-  endpoint?: string;
   onSuccess?: (result: FormsReachSuccess) => void;
   onError?: (error: FormsReachError) => void;
 };
 
 export type SubmitFormOptions = {
   apiKey: string;
-  endpoint?: string;
   data: Record<string, string>;
 };
 
-export const DEFAULT_ENDPOINT = "https://formsreach.com/api/v1/submit";
+/** Fixed FormsReach submit URL. Internal — not part of the public API. */
+export const SUBMIT_ENDPOINT = "https://app.formsreach.com/api/v1/submit";
 
 export const FORM_ATTR = "data-formsreach";
 

packages/js/tests/client.test.ts

@@ -35,7 +35,7 @@ describe("submitForm", () => {
     });
 
     expect(fetch).toHaveBeenCalledWith(
-      "https://formsreach.com/api/v1/submit",
+      "https://app.formsreach.com/api/v1/submit",
       expect.objectContaining({
         method: "POST",
         headers: expect.objectContaining({