@dyrected/core 2.18.1 → 2.20.0

package/dist/server.d.cts

@@ -1,5 +1,5 @@
-import { O as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, e as DatabaseAdapter, b as AuthenticatedUser, bW as DyrectedAIContext, ax as AIThread, at as AIMessage, cU as RAGSearchResult, aw as AIRateLimitStore, av as AIRateLimitResult } from './app-x7J5BIqK.cjs';
-export { dH as CollectionTokenPayload, dI as DEFAULT_SESSION_EXPIRY, dJ as DyrectedObservabilityRuntime, dK as RequestBodyCapture, dL as RequestTraceContext, dM as ResolvedObservabilityConfig, dN as attachRequestMetrics, dO as bindObservabilityRuntime, dP as buildRequestLogger, dQ as captureRequestBody, dR as createDyrectedApp, dS as createObservabilityRuntime, dT as createRequestSpan, dU as decodeCollectionToken, dV as endRequestSpan, dW as getConfigLogger, dX as getObservabilityRuntime, dY as getRequestLogger, dZ as redactBody, d_ as redactHeaders, d$ as renderPrometheusMetrics, e0 as resolveObservabilityConfig, e1 as resolveSessionTokenExpiry, e2 as shouldSampleRequest, e3 as signCollectionToken, e4 as verifyCollectionToken } from './app-x7J5BIqK.cjs';
+import { O as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, c4 as EmailTemplateArgs, c5 as EmailTemplateResult, cY as OutboundEmail, e as DatabaseAdapter, b as AuthenticatedUser, c0 as DyrectedAIContext, ax as AIThread, at as AIMessage, d1 as RAGSearchResult, aw as AIRateLimitStore, av as AIRateLimitResult } from './app-v23fNf58.cjs';
+export { dR as CollectionTokenPayload, dS as DEFAULT_INVITE_EXPIRY, dT as DEFAULT_RESET_PASSWORD_EXPIRY, dU as DEFAULT_SESSION_EXPIRY, dV as DyrectedObservabilityRuntime, dW as RequestBodyCapture, dX as RequestTraceContext, dY as ResolvedObservabilityConfig, dZ as attachRequestMetrics, d_ as bindObservabilityRuntime, d$ as buildRequestLogger, e0 as captureRequestBody, e1 as createDyrectedApp, e2 as createObservabilityRuntime, e3 as createRequestSpan, e4 as decodeCollectionToken, e5 as endRequestSpan, e6 as getConfigLogger, e7 as getObservabilityRuntime, e8 as getRequestLogger, e9 as redactBody, ea as redactHeaders, eb as renderPrometheusMetrics, ec as resolveInviteTokenExpiry, ed as resolveObservabilityConfig, ee as resolveResetPasswordTokenExpiry, ef as resolveSessionTokenExpiry, eg as shouldSampleRequest, eh as signCollectionToken, ei as verifyCollectionToken } from './app-v23fNf58.cjs';
 import * as hono from 'hono';
 import { Hono, Context, Next } from 'hono';
 import * as hono_utils_http_status from 'hono/utils/http-status';
@@ -132,6 +132,10 @@ declare class AuthController {
         error: true;
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
+        emailError?: string | undefined;
+        emailSent: boolean;
+        token?: string | undefined;
+        resetUrl?: string | undefined;
         success: true;
         message: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
@@ -141,6 +145,10 @@ declare class AuthController {
         error: true;
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        code: string;
+        message: string;
+    }, 403, "json">) | (Response & hono.TypedResponse<{
         success: true;
         message: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
@@ -154,12 +162,15 @@ declare class AuthController {
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
         error: true;
+        code: string;
         message: string;
     }, 409, "json">) | (Response & hono.TypedResponse<{
+        emailError?: string | undefined;
         success: true;
         message: string;
         token: string;
         inviteUrl: string;
+        emailSent: boolean;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     acceptInvite(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
@@ -168,6 +179,11 @@ declare class AuthController {
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
         error: true;
+        code: string;
+        message: string;
+    }, 403, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        code: string;
         message: string;
     }, 409, "json">) | (Response & hono.TypedResponse<{
         token: string;
@@ -177,6 +193,21 @@ declare class AuthController {
             collection: string;
         };
     }, 201, "json">)>;
+    verifyToken(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
+        message: string;
+    }, 500, "json">) | (Response & hono.TypedResponse<{
+        valid: false;
+        code: string;
+        message: string;
+    }, 400, "json">) | (Response & hono.TypedResponse<{
+        valid: false;
+        code: string;
+        message: string;
+    }, 200, "json">) | (Response & hono.TypedResponse<{
+        valid: true;
+        email: any;
+        collection: string;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
 }
 
 declare class CollectionController {
@@ -232,6 +263,26 @@ declare class CollectionController {
     changePassword(c: Context<DyrectedContext>): Promise<any>;
     delete(c: Context<DyrectedContext>): Promise<any>;
     deleteMany(c: Context<DyrectedContext>): Promise<any>;
+    listTrash(c: Context<DyrectedContext>): Promise<any>;
+    getTrashEntry(c: Context<DyrectedContext>): Promise<any>;
+    restore(c: Context<DyrectedContext>): Promise<any>;
+    restoreMany(c: Context<DyrectedContext>): Promise<any>;
+    keep(c: Context<DyrectedContext>): Promise<any>;
+    purgeTrashEntry(c: Context<DyrectedContext>): Promise<any>;
+    emptyTrash(c: Context<DyrectedContext>): Promise<any>;
+    static listAllTrash(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
+        message: string;
+    }, 500, "json">) | (Response & hono.TypedResponse<{
+        docs: {
+            snapshot: any;
+        }[];
+        total: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     seed(c: Context<DyrectedContext>): Promise<Response & hono.TypedResponse<{
         message: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">>;
@@ -492,10 +543,14 @@ declare function revokeAllAuthSessions(config: DyrectedConfig, args: {
  * Returns a `salt:hash` string safe to store in the database.
  */
 declare function hashPassword(plain: string): Promise<string>;
+/**
+ * Check whether a stored password string represents a valid salt:hash format.
+ */
+declare function hasUsablePassword(stored: unknown): boolean;
 /**
  * Verify a plain-text password against a stored `salt:hash` string.
  */
-declare function verifyPassword(plain: string, stored: string): Promise<boolean>;
+declare function verifyPassword(plain: string, stored: string | null | undefined): Promise<boolean>;
 
 declare const DEFAULT_MAX_LOGIN_ATTEMPTS = 5;
 declare const DEFAULT_LOCK_TIME_MS: number;
@@ -507,38 +562,53 @@ type ResolvedAuthLockoutConfig = {
 declare function resolveAuthLockoutConfig(collection: CollectionConfig): ResolvedAuthLockoutConfig;
 declare function getLockedUntilMs(value: unknown): number | null;
 
-declare function sendEmail(config: DyrectedConfig, payload: {
-    to: string;
-    subject: string;
-    html: string;
-}): Promise<void>;
-declare function buildWelcomeEmail(config: DyrectedConfig, args: {
+declare function sendEmail(config: DyrectedConfig, payload: OutboundEmail): Promise<{
+    success: boolean;
+    previewUrl?: string;
+}>;
+/**
+ * Interpolate simple {{key}} or {{object.nestedKey}} placeholders inside template strings.
+ *
+ * @param escapeMode
+ *   - `"html"` (default): HTML-escapes every substituted value, preventing injection when
+ *     the output string is rendered as HTML in an email body or subject.
+ *   - `"none"`: Returns raw values as-is. Only use when the caller has already validated
+ *     or controlled every value in `args` (e.g. internal mock-data in the test endpoint).
+ */
+declare function interpolateVariables(str: string, args: Record<string, unknown>, escapeMode?: "html" | "none"): string;
+declare function getDbEmailTemplateOverride(db: any, collectionSlug: string | undefined, purpose: string, args: Record<string, unknown>): Promise<EmailTemplateResult | null>;
+/**
+ * Adapt an EmailTemplateResult into an OutboundEmail payload for dispatching to config.email.send.
+ */
+declare function toOutboundEmail(to: string, result: EmailTemplateResult, metadata?: {
+    from?: string;
+    collection?: string;
+    purpose?: "invite" | "resetPassword" | "welcome" | "passwordChanged" | string;
+    user?: Record<string, unknown>;
+}): OutboundEmail;
+declare function buildWelcomeEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     email: string;
-}): {
-    subject: string;
-    html: string;
-};
-declare function buildInviteEmail(config: DyrectedConfig, args: {
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function buildInviteEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     token: string;
     invitedByEmail?: string;
     url?: string;
-}): {
-    subject: string;
-    html: string;
-};
-declare function buildResetPasswordEmail(config: DyrectedConfig, args: {
+    data?: Record<string, unknown>;
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function buildResetPasswordEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     token: string;
     url?: string;
-}): {
-    subject: string;
-    html: string;
-};
-declare function buildPasswordChangedEmail(config: DyrectedConfig, args: {
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function buildPasswordChangedEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     email: string;
-}): {
-    subject: string;
-    html: string;
-};
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function resolveEmailTemplate<T extends Record<string, unknown>>(params: {
+    config: DyrectedConfig;
+    collection?: CollectionConfig;
+    purpose: "invite" | "resetPassword" | "welcome" | "passwordChanged";
+    args: EmailTemplateArgs<T>;
+    db?: any;
+}): Promise<EmailTemplateResult>;
 
 declare function getAIModel(config?: DyrectedConfig): LanguageModel;
 declare function formatAIErrorMessage(error: any): string;
@@ -761,4 +831,4 @@ declare class InMemoryRateLimitStore implements AIRateLimitStore {
 }
 declare function aiRateLimit(config?: DyrectedConfig): (c: Context<DyrectedContext>, next: Next) => Promise<void>;
 
-export { AIAgent, type AIAgentOptions, AIController, AUTH_SESSIONS_COLLECTION, AuthController, type AuthSessionRecord, type ChunkOptions, type ChunkResult, CollectionController, DEFAULT_LOCK_TIME_MS, DEFAULT_MAX_LOGIN_ATTEMPTS, type DeleteDocumentChunksOptions, DyrectedContext, EmbeddingService, GlobalController, InMemoryRateLimitStore, type IndexDocumentOptions, MediaController, PreviewController, type RAGSearchOptions, RAGService, type ReindexAllOptions, type ReindexCollectionOptions, type ResolvedAuthLockoutConfig, aiRateLimit, buildDyrectedSystemPrompt, buildInviteEmail, buildPasswordChangedEmail, buildResetPasswordEmail, buildWelcomeEmail, chunkText, cosineSimilarity, createDyrectedAITools, estimateTokens, extractTextFromDoc, formatAIErrorMessage, getAIModel, getAuthSession, getEmbeddingModel, getLockedUntilMs, hasEmbeddingApiKey, hashContent, hashPassword, isAuthSessionActive, issueAuthSessionToken, normalizeFieldValue, registerRoutes, resolveAuthLockoutConfig, revokeAllAuthSessions, revokeAuthSession, sendEmail, serializeActionsForApi, serializeDetailForApi, serializeViewForApi, touchAuthSession, validatePayloadAgainstFields, verifyPassword };
+export { AIAgent, type AIAgentOptions, AIController, AUTH_SESSIONS_COLLECTION, AuthController, type AuthSessionRecord, type ChunkOptions, type ChunkResult, CollectionController, DEFAULT_LOCK_TIME_MS, DEFAULT_MAX_LOGIN_ATTEMPTS, type DeleteDocumentChunksOptions, DyrectedContext, EmbeddingService, GlobalController, InMemoryRateLimitStore, type IndexDocumentOptions, MediaController, PreviewController, type RAGSearchOptions, RAGService, type ReindexAllOptions, type ReindexCollectionOptions, type ResolvedAuthLockoutConfig, aiRateLimit, buildDyrectedSystemPrompt, buildInviteEmail, buildPasswordChangedEmail, buildResetPasswordEmail, buildWelcomeEmail, chunkText, cosineSimilarity, createDyrectedAITools, estimateTokens, extractTextFromDoc, formatAIErrorMessage, getAIModel, getAuthSession, getDbEmailTemplateOverride, getEmbeddingModel, getLockedUntilMs, hasEmbeddingApiKey, hasUsablePassword, hashContent, hashPassword, interpolateVariables, isAuthSessionActive, issueAuthSessionToken, normalizeFieldValue, registerRoutes, resolveAuthLockoutConfig, resolveEmailTemplate, revokeAllAuthSessions, revokeAuthSession, sendEmail, serializeActionsForApi, serializeDetailForApi, serializeViewForApi, toOutboundEmail, touchAuthSession, validatePayloadAgainstFields, verifyPassword };

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { O as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, e as DatabaseAdapter, b as AuthenticatedUser, bW as DyrectedAIContext, ax as AIThread, at as AIMessage, cU as RAGSearchResult, aw as AIRateLimitStore, av as AIRateLimitResult } from './app-x7J5BIqK.js';
-export { dH as CollectionTokenPayload, dI as DEFAULT_SESSION_EXPIRY, dJ as DyrectedObservabilityRuntime, dK as RequestBodyCapture, dL as RequestTraceContext, dM as ResolvedObservabilityConfig, dN as attachRequestMetrics, dO as bindObservabilityRuntime, dP as buildRequestLogger, dQ as captureRequestBody, dR as createDyrectedApp, dS as createObservabilityRuntime, dT as createRequestSpan, dU as decodeCollectionToken, dV as endRequestSpan, dW as getConfigLogger, dX as getObservabilityRuntime, dY as getRequestLogger, dZ as redactBody, d_ as redactHeaders, d$ as renderPrometheusMetrics, e0 as resolveObservabilityConfig, e1 as resolveSessionTokenExpiry, e2 as shouldSampleRequest, e3 as signCollectionToken, e4 as verifyCollectionToken } from './app-x7J5BIqK.js';
+import { O as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, c4 as EmailTemplateArgs, c5 as EmailTemplateResult, cY as OutboundEmail, e as DatabaseAdapter, b as AuthenticatedUser, c0 as DyrectedAIContext, ax as AIThread, at as AIMessage, d1 as RAGSearchResult, aw as AIRateLimitStore, av as AIRateLimitResult } from './app-v23fNf58.js';
+export { dR as CollectionTokenPayload, dS as DEFAULT_INVITE_EXPIRY, dT as DEFAULT_RESET_PASSWORD_EXPIRY, dU as DEFAULT_SESSION_EXPIRY, dV as DyrectedObservabilityRuntime, dW as RequestBodyCapture, dX as RequestTraceContext, dY as ResolvedObservabilityConfig, dZ as attachRequestMetrics, d_ as bindObservabilityRuntime, d$ as buildRequestLogger, e0 as captureRequestBody, e1 as createDyrectedApp, e2 as createObservabilityRuntime, e3 as createRequestSpan, e4 as decodeCollectionToken, e5 as endRequestSpan, e6 as getConfigLogger, e7 as getObservabilityRuntime, e8 as getRequestLogger, e9 as redactBody, ea as redactHeaders, eb as renderPrometheusMetrics, ec as resolveInviteTokenExpiry, ed as resolveObservabilityConfig, ee as resolveResetPasswordTokenExpiry, ef as resolveSessionTokenExpiry, eg as shouldSampleRequest, eh as signCollectionToken, ei as verifyCollectionToken } from './app-v23fNf58.js';
 import * as hono from 'hono';
 import { Hono, Context, Next } from 'hono';
 import * as hono_utils_http_status from 'hono/utils/http-status';
@@ -132,6 +132,10 @@ declare class AuthController {
         error: true;
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
+        emailError?: string | undefined;
+        emailSent: boolean;
+        token?: string | undefined;
+        resetUrl?: string | undefined;
         success: true;
         message: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
@@ -141,6 +145,10 @@ declare class AuthController {
         error: true;
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        code: string;
+        message: string;
+    }, 403, "json">) | (Response & hono.TypedResponse<{
         success: true;
         message: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
@@ -154,12 +162,15 @@ declare class AuthController {
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
         error: true;
+        code: string;
         message: string;
     }, 409, "json">) | (Response & hono.TypedResponse<{
+        emailError?: string | undefined;
         success: true;
         message: string;
         token: string;
         inviteUrl: string;
+        emailSent: boolean;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     acceptInvite(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
@@ -168,6 +179,11 @@ declare class AuthController {
         message: string;
     }, 400, "json">) | (Response & hono.TypedResponse<{
         error: true;
+        code: string;
+        message: string;
+    }, 403, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        code: string;
         message: string;
     }, 409, "json">) | (Response & hono.TypedResponse<{
         token: string;
@@ -177,6 +193,21 @@ declare class AuthController {
             collection: string;
         };
     }, 201, "json">)>;
+    verifyToken(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
+        message: string;
+    }, 500, "json">) | (Response & hono.TypedResponse<{
+        valid: false;
+        code: string;
+        message: string;
+    }, 400, "json">) | (Response & hono.TypedResponse<{
+        valid: false;
+        code: string;
+        message: string;
+    }, 200, "json">) | (Response & hono.TypedResponse<{
+        valid: true;
+        email: any;
+        collection: string;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
 }
 
 declare class CollectionController {
@@ -232,6 +263,26 @@ declare class CollectionController {
     changePassword(c: Context<DyrectedContext>): Promise<any>;
     delete(c: Context<DyrectedContext>): Promise<any>;
     deleteMany(c: Context<DyrectedContext>): Promise<any>;
+    listTrash(c: Context<DyrectedContext>): Promise<any>;
+    getTrashEntry(c: Context<DyrectedContext>): Promise<any>;
+    restore(c: Context<DyrectedContext>): Promise<any>;
+    restoreMany(c: Context<DyrectedContext>): Promise<any>;
+    keep(c: Context<DyrectedContext>): Promise<any>;
+    purgeTrashEntry(c: Context<DyrectedContext>): Promise<any>;
+    emptyTrash(c: Context<DyrectedContext>): Promise<any>;
+    static listAllTrash(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
+        message: string;
+    }, 500, "json">) | (Response & hono.TypedResponse<{
+        docs: {
+            snapshot: any;
+        }[];
+        total: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     seed(c: Context<DyrectedContext>): Promise<Response & hono.TypedResponse<{
         message: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">>;
@@ -492,10 +543,14 @@ declare function revokeAllAuthSessions(config: DyrectedConfig, args: {
  * Returns a `salt:hash` string safe to store in the database.
  */
 declare function hashPassword(plain: string): Promise<string>;
+/**
+ * Check whether a stored password string represents a valid salt:hash format.
+ */
+declare function hasUsablePassword(stored: unknown): boolean;
 /**
  * Verify a plain-text password against a stored `salt:hash` string.
  */
-declare function verifyPassword(plain: string, stored: string): Promise<boolean>;
+declare function verifyPassword(plain: string, stored: string | null | undefined): Promise<boolean>;
 
 declare const DEFAULT_MAX_LOGIN_ATTEMPTS = 5;
 declare const DEFAULT_LOCK_TIME_MS: number;
@@ -507,38 +562,53 @@ type ResolvedAuthLockoutConfig = {
 declare function resolveAuthLockoutConfig(collection: CollectionConfig): ResolvedAuthLockoutConfig;
 declare function getLockedUntilMs(value: unknown): number | null;
 
-declare function sendEmail(config: DyrectedConfig, payload: {
-    to: string;
-    subject: string;
-    html: string;
-}): Promise<void>;
-declare function buildWelcomeEmail(config: DyrectedConfig, args: {
+declare function sendEmail(config: DyrectedConfig, payload: OutboundEmail): Promise<{
+    success: boolean;
+    previewUrl?: string;
+}>;
+/**
+ * Interpolate simple {{key}} or {{object.nestedKey}} placeholders inside template strings.
+ *
+ * @param escapeMode
+ *   - `"html"` (default): HTML-escapes every substituted value, preventing injection when
+ *     the output string is rendered as HTML in an email body or subject.
+ *   - `"none"`: Returns raw values as-is. Only use when the caller has already validated
+ *     or controlled every value in `args` (e.g. internal mock-data in the test endpoint).
+ */
+declare function interpolateVariables(str: string, args: Record<string, unknown>, escapeMode?: "html" | "none"): string;
+declare function getDbEmailTemplateOverride(db: any, collectionSlug: string | undefined, purpose: string, args: Record<string, unknown>): Promise<EmailTemplateResult | null>;
+/**
+ * Adapt an EmailTemplateResult into an OutboundEmail payload for dispatching to config.email.send.
+ */
+declare function toOutboundEmail(to: string, result: EmailTemplateResult, metadata?: {
+    from?: string;
+    collection?: string;
+    purpose?: "invite" | "resetPassword" | "welcome" | "passwordChanged" | string;
+    user?: Record<string, unknown>;
+}): OutboundEmail;
+declare function buildWelcomeEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     email: string;
-}): {
-    subject: string;
-    html: string;
-};
-declare function buildInviteEmail(config: DyrectedConfig, args: {
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function buildInviteEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     token: string;
     invitedByEmail?: string;
     url?: string;
-}): {
-    subject: string;
-    html: string;
-};
-declare function buildResetPasswordEmail(config: DyrectedConfig, args: {
+    data?: Record<string, unknown>;
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function buildResetPasswordEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     token: string;
     url?: string;
-}): {
-    subject: string;
-    html: string;
-};
-declare function buildPasswordChangedEmail(config: DyrectedConfig, args: {
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function buildPasswordChangedEmail(config: DyrectedConfig, args: EmailTemplateArgs<{
     email: string;
-}): {
-    subject: string;
-    html: string;
-};
+}>, collection?: CollectionConfig, dbOverride?: EmailTemplateResult | null): EmailTemplateResult;
+declare function resolveEmailTemplate<T extends Record<string, unknown>>(params: {
+    config: DyrectedConfig;
+    collection?: CollectionConfig;
+    purpose: "invite" | "resetPassword" | "welcome" | "passwordChanged";
+    args: EmailTemplateArgs<T>;
+    db?: any;
+}): Promise<EmailTemplateResult>;
 
 declare function getAIModel(config?: DyrectedConfig): LanguageModel;
 declare function formatAIErrorMessage(error: any): string;
@@ -761,4 +831,4 @@ declare class InMemoryRateLimitStore implements AIRateLimitStore {
 }
 declare function aiRateLimit(config?: DyrectedConfig): (c: Context<DyrectedContext>, next: Next) => Promise<void>;
 
-export { AIAgent, type AIAgentOptions, AIController, AUTH_SESSIONS_COLLECTION, AuthController, type AuthSessionRecord, type ChunkOptions, type ChunkResult, CollectionController, DEFAULT_LOCK_TIME_MS, DEFAULT_MAX_LOGIN_ATTEMPTS, type DeleteDocumentChunksOptions, DyrectedContext, EmbeddingService, GlobalController, InMemoryRateLimitStore, type IndexDocumentOptions, MediaController, PreviewController, type RAGSearchOptions, RAGService, type ReindexAllOptions, type ReindexCollectionOptions, type ResolvedAuthLockoutConfig, aiRateLimit, buildDyrectedSystemPrompt, buildInviteEmail, buildPasswordChangedEmail, buildResetPasswordEmail, buildWelcomeEmail, chunkText, cosineSimilarity, createDyrectedAITools, estimateTokens, extractTextFromDoc, formatAIErrorMessage, getAIModel, getAuthSession, getEmbeddingModel, getLockedUntilMs, hasEmbeddingApiKey, hashContent, hashPassword, isAuthSessionActive, issueAuthSessionToken, normalizeFieldValue, registerRoutes, resolveAuthLockoutConfig, revokeAllAuthSessions, revokeAuthSession, sendEmail, serializeActionsForApi, serializeDetailForApi, serializeViewForApi, touchAuthSession, validatePayloadAgainstFields, verifyPassword };
+export { AIAgent, type AIAgentOptions, AIController, AUTH_SESSIONS_COLLECTION, AuthController, type AuthSessionRecord, type ChunkOptions, type ChunkResult, CollectionController, DEFAULT_LOCK_TIME_MS, DEFAULT_MAX_LOGIN_ATTEMPTS, type DeleteDocumentChunksOptions, DyrectedContext, EmbeddingService, GlobalController, InMemoryRateLimitStore, type IndexDocumentOptions, MediaController, PreviewController, type RAGSearchOptions, RAGService, type ReindexAllOptions, type ReindexCollectionOptions, type ResolvedAuthLockoutConfig, aiRateLimit, buildDyrectedSystemPrompt, buildInviteEmail, buildPasswordChangedEmail, buildResetPasswordEmail, buildWelcomeEmail, chunkText, cosineSimilarity, createDyrectedAITools, estimateTokens, extractTextFromDoc, formatAIErrorMessage, getAIModel, getAuthSession, getDbEmailTemplateOverride, getEmbeddingModel, getLockedUntilMs, hasEmbeddingApiKey, hasUsablePassword, hashContent, hashPassword, interpolateVariables, isAuthSessionActive, issueAuthSessionToken, normalizeFieldValue, registerRoutes, resolveAuthLockoutConfig, resolveEmailTemplate, revokeAllAuthSessions, revokeAuthSession, sendEmail, serializeActionsForApi, serializeDetailForApi, serializeViewForApi, toOutboundEmail, touchAuthSession, validatePayloadAgainstFields, verifyPassword };