npm - @momentumcms/server-express - Versions diffs - 0.5.0 → 0.5.2 - Mend

@momentumcms/server-express 0.5.0 → 0.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/index.js CHANGED Viewed

@@ -1,4 +1,5 @@
 var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
@@ -7,6 +8,15 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+var __decorateClass = (decorators, target, key, kind) => {
+  var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
+  for (var i = decorators.length - 1, decorator; i >= 0; i--)
+    if (decorator = decorators[i])
+      result = (kind ? decorator(target, key, result) : decorator(result)) || result;
+  if (kind && result)
+    __defProp(target, key, result);
+  return result;
+};
 // libs/storage/src/lib/storage.types.ts
 var init_storage_types = __esm({
@@ -294,7 +304,7 @@ function detectMimeType(buffer) {
     if (match) {
       if (sig.bytes[0] === 82 && sig.bytes[1] === 73) {
         if (buffer.length >= 12) {
-          const formatId = buffer.slice(8, 12).toString("ascii");
+          const formatId = String.fromCharCode(...buffer.subarray(8, 12));
           if (formatId === "WEBP") {
             return "image/webp";
           }
@@ -307,7 +317,7 @@ function detectMimeType(buffer) {
         }
       }
       if (sig.mimeType === "video/mp4" && buffer.length >= 8) {
-        const boxType = buffer.slice(4, 8).toString("ascii");
+        const boxType = String.fromCharCode(...buffer.subarray(4, 8));
         if (boxType === "ftyp") {
           return "video/mp4";
         }
@@ -316,7 +326,7 @@ function detectMimeType(buffer) {
     }
   }
   if (isTextContent(buffer)) {
-    const text2 = buffer.toString("utf8", 0, Math.min(buffer.length, 1e3));
+    const text2 = new TextDecoder().decode(buffer.subarray(0, Math.min(buffer.length, 1e3)));
     if (text2.trim().startsWith("{") || text2.trim().startsWith("[")) {
       return "application/json";
     }
@@ -508,6 +518,1111 @@ var init_src = __esm({
   }
 });
+// libs/email/src/lib/utils/css-inliner.ts
+import juice from "juice";
+function inlineCss(html) {
+  return juice(html, {
+    removeStyleTags: true,
+    preserveMediaQueries: true,
+    preserveFontFaces: true,
+    insertPreservedExtraCss: true
+  });
+}
+var init_css_inliner = __esm({
+  "libs/email/src/lib/utils/css-inliner.ts"() {
+    "use strict";
+  }
+});
+// libs/email/src/lib/utils/strip-artifacts.ts
+function stripAngularArtifacts(html) {
+  return html.replace(/<!--[\s\S]*?-->/g, "").replace(/\s*ng-reflect-[\w-]+="[^"]*"/g, "").replace(/\s*_ng(?:host|content)-[\w-]+(?:="")?/g, "").replace(/\s*ng-version="[^"]*"/g, "").replace(/\s*ng-server-context="[^"]*"/g, "").replace(/\s*ngh="[^"]*"/g, "").replace(/\n\s*\n/g, "\n");
+}
+var init_strip_artifacts = __esm({
+  "libs/email/src/lib/utils/strip-artifacts.ts"() {
+    "use strict";
+  }
+});
+// libs/email/src/lib/render/render-types.ts
+import { InjectionToken, inject } from "@angular/core";
+function injectEmailData() {
+  return inject(EMAIL_DATA);
+}
+var EMAIL_DATA;
+var init_render_types = __esm({
+  "libs/email/src/lib/render/render-types.ts"() {
+    "use strict";
+    EMAIL_DATA = new InjectionToken("EMAIL_DATA");
+  }
+});
+// libs/email/src/lib/render/render-email.ts
+import "@angular/compiler";
+import { reflectComponentType } from "@angular/core";
+import { renderApplication } from "@angular/platform-server";
+import { bootstrapApplication } from "@angular/platform-browser";
+function buildDocument(selector) {
+  return `<!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head><body><${selector}></${selector}></body></html>`;
+}
+async function renderEmail(component, data, options) {
+  const shouldInlineCss = options?.inlineCss ?? true;
+  const shouldStripArtifacts = options?.stripArtifacts ?? true;
+  const extraProviders = options?.providers ?? [];
+  const mirror = reflectComponentType(component);
+  if (!mirror) {
+    throw new Error(
+      `Cannot reflect component type: ${component.name}. Ensure it has a @Component decorator.`
+    );
+  }
+  const providers = [...extraProviders, { provide: EMAIL_DATA, useValue: data ?? {} }];
+  let html = await renderApplication(
+    (context) => bootstrapApplication(component, { providers }, context),
+    {
+      document: buildDocument(mirror.selector),
+      url: "/"
+    }
+  );
+  if (shouldStripArtifacts) {
+    html = stripAngularArtifacts(html);
+  }
+  if (shouldInlineCss) {
+    html = inlineCss(html);
+  }
+  return html;
+}
+var init_render_email = __esm({
+  "libs/email/src/lib/render/render-email.ts"() {
+    "use strict";
+    init_css_inliner();
+    init_strip_artifacts();
+    init_render_types();
+  }
+});
+// libs/email/src/lib/utils/escape-html.ts
+function escapeHtml2(unsafe) {
+  return unsafe.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
+}
+var init_escape_html = __esm({
+  "libs/email/src/lib/utils/escape-html.ts"() {
+    "use strict";
+  }
+});
+// libs/email/src/lib/utils/replace-variables.ts
+function replaceVariables(text2, variables) {
+  return text2.replace(/\{\{(\w+)\}\}/g, (_, key) => variables[key] ?? "");
+}
+function replaceBlockVariables(blocks2, variables) {
+  return blocks2.map((block) => ({
+    ...block,
+    data: replaceDataVariables(block.data, variables)
+  }));
+}
+function replaceDataVariables(data, variables) {
+  const result = {};
+  for (const [key, value] of Object.entries(data)) {
+    if (typeof value === "string") {
+      result[key] = replaceVariables(value, variables);
+    } else if (Array.isArray(value)) {
+      result[key] = value.map((item) => {
+        if (typeof item === "object" && item !== null && "blocks" in item) {
+          const col = item;
+          const nestedBlocks = Array.isArray(col["blocks"]) ? col["blocks"] : [];
+          return { ...col, blocks: replaceBlockVariables(nestedBlocks, variables) };
+        }
+        return item;
+      });
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+var init_replace_variables = __esm({
+  "libs/email/src/lib/utils/replace-variables.ts"() {
+    "use strict";
+  }
+});
+// libs/email/src/lib/utils/sanitize.ts
+function sanitizeAlignment(value) {
+  return VALID_ALIGNMENTS.has(value) ? value : "left";
+}
+function sanitizeCssValue(value) {
+  return value.replace(/[;{}()"'<>\\]/g, "");
+}
+function sanitizeFontFamily(value) {
+  return value.replace(/[;{}()"<>\\]/g, "");
+}
+function sanitizeCssNumber(value, fallback) {
+  if (value === null || value === void 0)
+    return String(fallback);
+  const num = Number(value);
+  return Number.isFinite(num) && num >= 0 ? String(num) : String(fallback);
+}
+function sanitizeUrl(url) {
+  const trimmed = url.trim();
+  if (!trimmed || trimmed === "#")
+    return trimmed || "#";
+  try {
+    const parsed = new URL(trimmed);
+    return SAFE_URL_PROTOCOLS.has(parsed.protocol) ? trimmed : "#";
+  } catch {
+    if (trimmed.startsWith("/") || trimmed.startsWith("#"))
+      return trimmed;
+    return "#";
+  }
+}
+var VALID_ALIGNMENTS, SAFE_URL_PROTOCOLS;
+var init_sanitize = __esm({
+  "libs/email/src/lib/utils/sanitize.ts"() {
+    "use strict";
+    VALID_ALIGNMENTS = /* @__PURE__ */ new Set(["left", "center", "right"]);
+    SAFE_URL_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "mailto:"]);
+  }
+});
+// libs/email/src/types.ts
+var DEFAULT_EMAIL_THEME;
+var init_types = __esm({
+  "libs/email/src/types.ts"() {
+    "use strict";
+    DEFAULT_EMAIL_THEME = {
+      primaryColor: "#18181b",
+      backgroundColor: "#f4f4f5",
+      textColor: "#3f3f46",
+      mutedColor: "#71717a",
+      fontFamily: "-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif",
+      borderRadius: "8px"
+    };
+  }
+});
+// libs/email/src/lib/render/render-blocks.ts
+function renderEmailFromBlocks(template, options) {
+  const theme = { ...DEFAULT_EMAIL_THEME, ...template.theme };
+  const shouldInline = options?.inlineCss ?? true;
+  const blocks2 = options?.variables ? replaceBlockVariables(template.blocks, options.variables) : template.blocks;
+  const validBlocks = blocks2.filter((block) => {
+    if (!isValidBlock(block)) {
+      console.warn("[momentum:email] Skipping invalid email block:", block);
+      return false;
+    }
+    return true;
+  });
+  const blocksHtml = validBlocks.map((block) => renderBlock(block, theme, 0)).join("\n");
+  let html = wrapEmailDocument(blocksHtml, theme);
+  if (shouldInline) {
+    html = inlineCss(html);
+  }
+  return html;
+}
+function wrapEmailDocument(content, theme) {
+  const fontFamily = sanitizeFontFamily(theme.fontFamily);
+  const bgColor = sanitizeCssValue(theme.backgroundColor);
+  const borderRadius = sanitizeCssValue(theme.borderRadius);
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+</head>
+<body style="margin: 0; padding: 0; font-family: ${fontFamily}; background-color: ${bgColor}; line-height: 1.6;">
+  <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="background-color: ${bgColor};">
+    <tr>
+      <td style="padding: 40px 20px;">
+        <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="max-width: 480px; margin: 0 auto; background-color: #ffffff; border-radius: ${borderRadius}; box-shadow: 0 1px 3px rgba(0,0,0,0.1);">
+          <tr>
+            <td style="padding: 40px;">
+              ${content}
+            </td>
+          </tr>
+        </table>
+      </td>
+    </tr>
+  </table>
+</body>
+</html>`;
+}
+function isValidBlock(block) {
+  const rec = block;
+  return typeof block === "object" && block !== null && typeof rec["id"] === "string" && rec["id"].length > 0 && typeof rec["type"] === "string" && typeof rec["data"] === "object" && rec["data"] !== null;
+}
+function renderBlock(block, theme, depth) {
+  switch (block.type) {
+    case "header":
+      return renderHeaderBlock(block.data, theme);
+    case "text":
+      return renderTextBlock(block.data, theme);
+    case "button":
+      return renderButtonBlock(block.data, theme);
+    case "image":
+      return renderImageBlock(block.data);
+    case "divider":
+      return renderDividerBlock(block.data);
+    case "spacer":
+      return renderSpacerBlock(block.data);
+    case "columns":
+      if (depth >= MAX_BLOCK_DEPTH) {
+        console.warn("[momentum:email] Max nesting depth reached, skipping columns block");
+        return "";
+      }
+      return renderColumnsBlock(block.data, theme, depth);
+    case "footer":
+      return renderFooterBlock(block.data, theme);
+    default:
+      return `<!-- unknown block type: ${escapeHtml2(block.type)} -->`;
+  }
+}
+function renderHeaderBlock(data, theme) {
+  const title = escapeHtml2(String(data["title"] ?? ""));
+  const subtitle = data["subtitle"] ? escapeHtml2(String(data["subtitle"])) : "";
+  const alignment = sanitizeAlignment(String(data["alignment"] ?? "left"));
+  return `<h1 style="margin: 0 0 8px; font-size: 24px; font-weight: 600; color: ${sanitizeCssValue(theme.textColor)}; text-align: ${alignment};">${title}</h1>${subtitle ? `<p style="margin: 0 0 16px; font-size: 16px; color: ${sanitizeCssValue(theme.mutedColor)}; text-align: ${alignment};">${subtitle}</p>` : ""}`;
+}
+function renderTextBlock(data, theme) {
+  const content = escapeHtml2(String(data["content"] ?? ""));
+  const fontSize = sanitizeCssNumber(data["fontSize"], 16);
+  const color = sanitizeCssValue(String(data["color"] ?? theme.textColor));
+  const alignment = sanitizeAlignment(String(data["alignment"] ?? "left"));
+  return `<p style="margin: 0 0 16px; font-size: ${fontSize}px; color: ${color}; text-align: ${alignment}; line-height: 1.6;">${content}</p>`;
+}
+function renderButtonBlock(data, theme) {
+  const label = escapeHtml2(String(data["label"] ?? "Click here"));
+  const href = escapeHtml2(sanitizeUrl(String(data["href"] ?? "#")));
+  const bgColor = sanitizeCssValue(String(data["backgroundColor"] ?? theme.primaryColor));
+  const color = sanitizeCssValue(String(data["color"] ?? "#ffffff"));
+  const alignment = sanitizeAlignment(String(data["alignment"] ?? "left"));
+  return `<table role="presentation" width="100%" cellspacing="0" cellpadding="0">
+  <tr>
+    <td style="padding: 0 0 16px;" align="${alignment}">
+      <a href="${href}" style="display: inline-block; padding: 12px 24px; background-color: ${bgColor}; color: ${color}; text-decoration: none; border-radius: 6px; font-weight: 500; font-size: 16px;">${label}</a>
+    </td>
+  </tr>
+</table>`;
+}
+function renderImageBlock(data) {
+  const rawSrc = String(data["src"] ?? "").trim();
+  if (!rawSrc)
+    return "<!-- image block: no src configured -->";
+  const src = escapeHtml2(sanitizeUrl(rawSrc));
+  const alt = escapeHtml2(String(data["alt"] ?? ""));
+  const width = sanitizeCssValue(String(data["width"] ?? "100%"));
+  const img = `<img src="${src}" alt="${alt}" width="${width}" style="display: block; max-width: 100%; height: auto; border: 0;">`;
+  if (data["href"]) {
+    const href = escapeHtml2(sanitizeUrl(String(data["href"])));
+    return `<a href="${href}" style="display: block;">${img}</a>`;
+  }
+  return img;
+}
+function renderDividerBlock(data) {
+  const color = sanitizeCssValue(String(data["color"] ?? "#e4e4e7"));
+  const margin = sanitizeCssValue(String(data["margin"] ?? "24px 0"));
+  return `<hr style="border: none; border-top: 1px solid ${color}; margin: ${margin};">`;
+}
+function renderSpacerBlock(data) {
+  const height = sanitizeCssNumber(data["height"], 24);
+  return `<div style="height: ${height}px; line-height: ${height}px; font-size: 1px;">&nbsp;</div>`;
+}
+function renderColumnsBlock(data, theme, depth) {
+  const rawColumns = data["columns"];
+  const columns = Array.isArray(rawColumns) ? rawColumns : [];
+  const width = Math.floor(100 / (columns.length || 1));
+  const tds = columns.map((col) => {
+    const colObj = (
+      // eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- narrowing unknown column objects
+      typeof col === "object" && col !== null ? col : {}
+    );
+    const rawBlocks = colObj["blocks"];
+    const colContent = (Array.isArray(rawBlocks) ? rawBlocks : []).filter(isValidBlock).map((b) => renderBlock(b, theme, depth + 1)).join("\n");
+    return `<td style="width: ${width}%; vertical-align: top; padding: 0 8px;">${colContent}</td>`;
+  }).join("\n");
+  return `<table role="presentation" width="100%" cellspacing="0" cellpadding="0"><tr>${tds}</tr></table>`;
+}
+function renderFooterBlock(data, theme) {
+  const text2 = escapeHtml2(String(data["text"] ?? ""));
+  const color = sanitizeCssValue(String(data["color"] ?? theme.mutedColor));
+  return `<p style="margin: 16px 0 0; font-size: 12px; color: ${color}; text-align: center;">${text2}</p>`;
+}
+var MAX_BLOCK_DEPTH;
+var init_render_blocks = __esm({
+  "libs/email/src/lib/render/render-blocks.ts"() {
+    "use strict";
+    init_escape_html();
+    init_css_inliner();
+    init_replace_variables();
+    init_sanitize();
+    init_types();
+    MAX_BLOCK_DEPTH = 5;
+  }
+});
+// libs/email/src/lib/templates/default-templates.ts
+var DEFAULT_PASSWORD_RESET_BLOCKS, DEFAULT_VERIFICATION_BLOCKS;
+var init_default_templates = __esm({
+  "libs/email/src/lib/templates/default-templates.ts"() {
+    "use strict";
+    DEFAULT_PASSWORD_RESET_BLOCKS = [
+      {
+        id: "pr-header",
+        type: "header",
+        data: {
+          title: "Reset Your Password",
+          subtitle: "",
+          alignment: "left"
+        }
+      },
+      {
+        id: "pr-greeting",
+        type: "text",
+        data: {
+          content: "{{greeting}}",
+          fontSize: 16,
+          color: "#3f3f46",
+          alignment: "left"
+        }
+      },
+      {
+        id: "pr-body",
+        type: "text",
+        data: {
+          content: "We received a request to reset your password. Click the button below to choose a new password:",
+          fontSize: 16,
+          color: "#3f3f46",
+          alignment: "left"
+        }
+      },
+      {
+        id: "pr-button",
+        type: "button",
+        data: {
+          label: "Reset Password",
+          href: "{{url}}",
+          backgroundColor: "#18181b",
+          color: "#ffffff",
+          alignment: "center"
+        }
+      },
+      {
+        id: "pr-expiry",
+        type: "text",
+        data: {
+          content: "This link will expire in {{expiresIn}}.",
+          fontSize: 14,
+          color: "#71717a",
+          alignment: "left"
+        }
+      },
+      {
+        id: "pr-ignore",
+        type: "text",
+        data: {
+          content: "If you didn't request a password reset, you can safely ignore this email. Your password will remain unchanged.",
+          fontSize: 14,
+          color: "#71717a",
+          alignment: "left"
+        }
+      },
+      {
+        id: "pr-divider",
+        type: "divider",
+        data: {
+          color: "#e4e4e7",
+          margin: "24px 0"
+        }
+      },
+      {
+        id: "pr-footer",
+        type: "footer",
+        data: {
+          text: "The {{appName}} Team",
+          color: "#71717a"
+        }
+      }
+    ];
+    DEFAULT_VERIFICATION_BLOCKS = [
+      {
+        id: "ev-header",
+        type: "header",
+        data: {
+          title: "Verify Your Email",
+          subtitle: "",
+          alignment: "left"
+        }
+      },
+      {
+        id: "ev-greeting",
+        type: "text",
+        data: {
+          content: "{{greeting}}",
+          fontSize: 16,
+          color: "#3f3f46",
+          alignment: "left"
+        }
+      },
+      {
+        id: "ev-body",
+        type: "text",
+        data: {
+          content: "Welcome to {{appName}}! Please verify your email address by clicking the button below:",
+          fontSize: 16,
+          color: "#3f3f46",
+          alignment: "left"
+        }
+      },
+      {
+        id: "ev-button",
+        type: "button",
+        data: {
+          label: "Verify Email",
+          href: "{{url}}",
+          backgroundColor: "#18181b",
+          color: "#ffffff",
+          alignment: "center"
+        }
+      },
+      {
+        id: "ev-expiry",
+        type: "text",
+        data: {
+          content: "This link will expire in {{expiresIn}}.",
+          fontSize: 14,
+          color: "#71717a",
+          alignment: "left"
+        }
+      },
+      {
+        id: "ev-ignore",
+        type: "text",
+        data: {
+          content: "If you didn't create an account, you can safely ignore this email.",
+          fontSize: 14,
+          color: "#71717a",
+          alignment: "left"
+        }
+      },
+      {
+        id: "ev-divider",
+        type: "divider",
+        data: {
+          color: "#e4e4e7",
+          margin: "24px 0"
+        }
+      },
+      {
+        id: "ev-footer",
+        type: "footer",
+        data: {
+          text: "The {{appName}} Team",
+          color: "#71717a"
+        }
+      }
+    ];
+  }
+});
+// libs/email/src/lib/components/eml-body.component.ts
+import { Component, ChangeDetectionStrategy, input, computed } from "@angular/core";
+var EmlBody;
+var init_eml_body_component = __esm({
+  "libs/email/src/lib/components/eml-body.component.ts"() {
+    "use strict";
+    EmlBody = class {
+      constructor() {
+        this.backgroundColor = input("#f4f4f5");
+        this.fontFamily = input(
+          "-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif"
+        );
+        this.padding = input("40px 20px");
+        this.tableStyle = computed(
+          () => `background-color: ${this.backgroundColor()}; font-family: ${this.fontFamily()}; line-height: 1.6; margin: 0; padding: 0;`
+        );
+        this.cellStyle = computed(() => `padding: ${this.padding()};`);
+      }
+    };
+    EmlBody = __decorateClass([
+      Component({
+        selector: "eml-body",
+        template: `
+		<table
+			role="presentation"
+			width="100%"
+			cellspacing="0"
+			cellpadding="0"
+			[attr.style]="tableStyle()"
+		>
+			<tr>
+				<td [attr.style]="cellStyle()">
+					<ng-content />
+				</td>
+			</tr>
+		</table>
+	`,
+        changeDetection: ChangeDetectionStrategy.OnPush
+      })
+    ], EmlBody);
+  }
+});
+// libs/email/src/lib/components/eml-container.component.ts
+import { Component as Component2, ChangeDetectionStrategy as ChangeDetectionStrategy2, input as input2, computed as computed2 } from "@angular/core";
+var EmlContainer;
+var init_eml_container_component = __esm({
+  "libs/email/src/lib/components/eml-container.component.ts"() {
+    "use strict";
+    EmlContainer = class {
+      constructor() {
+        this.maxWidth = input2("480px");
+        this.backgroundColor = input2("#ffffff");
+        this.borderRadius = input2("8px");
+        this.padding = input2("40px");
+        this.shadow = input2("0 1px 3px rgba(0,0,0,0.1)");
+        this.tableStyle = computed2(
+          () => `max-width: ${this.maxWidth()}; margin: 0 auto; background-color: ${this.backgroundColor()}; border-radius: ${this.borderRadius()}; box-shadow: ${this.shadow()};`
+        );
+        this.cellStyle = computed2(() => `padding: ${this.padding()};`);
+      }
+    };
+    EmlContainer = __decorateClass([
+      Component2({
+        selector: "eml-container",
+        template: `
+		<table
+			role="presentation"
+			width="100%"
+			cellspacing="0"
+			cellpadding="0"
+			[attr.style]="tableStyle()"
+		>
+			<tr>
+				<td [attr.style]="cellStyle()">
+					<ng-content />
+				</td>
+			</tr>
+		</table>
+	`,
+        changeDetection: ChangeDetectionStrategy2.OnPush
+      })
+    ], EmlContainer);
+  }
+});
+// libs/email/src/lib/components/eml-section.component.ts
+import { Component as Component3, ChangeDetectionStrategy as ChangeDetectionStrategy3, input as input3, computed as computed3 } from "@angular/core";
+var EmlSection;
+var init_eml_section_component = __esm({
+  "libs/email/src/lib/components/eml-section.component.ts"() {
+    "use strict";
+    EmlSection = class {
+      constructor() {
+        this.padding = input3("0");
+        this.cellStyle = computed3(() => `padding: ${this.padding()};`);
+      }
+    };
+    EmlSection = __decorateClass([
+      Component3({
+        selector: "eml-section",
+        template: `
+		<table role="presentation" width="100%" cellspacing="0" cellpadding="0">
+			<tr>
+				<td [attr.style]="cellStyle()">
+					<ng-content />
+				</td>
+			</tr>
+		</table>
+	`,
+        changeDetection: ChangeDetectionStrategy3.OnPush
+      })
+    ], EmlSection);
+  }
+});
+// libs/email/src/lib/components/eml-row.component.ts
+import { Component as Component4, ChangeDetectionStrategy as ChangeDetectionStrategy4 } from "@angular/core";
+var EmlRow;
+var init_eml_row_component = __esm({
+  "libs/email/src/lib/components/eml-row.component.ts"() {
+    "use strict";
+    EmlRow = class {
+    };
+    EmlRow = __decorateClass([
+      Component4({
+        selector: "eml-row",
+        template: `
+		<table role="presentation" width="100%" cellspacing="0" cellpadding="0">
+			<tr>
+				<ng-content />
+			</tr>
+		</table>
+	`,
+        changeDetection: ChangeDetectionStrategy4.OnPush
+      })
+    ], EmlRow);
+  }
+});
+// libs/email/src/lib/components/eml-column.component.ts
+import { Component as Component5, ChangeDetectionStrategy as ChangeDetectionStrategy5, input as input4, computed as computed4 } from "@angular/core";
+var EmlColumn;
+var init_eml_column_component = __esm({
+  "libs/email/src/lib/components/eml-column.component.ts"() {
+    "use strict";
+    EmlColumn = class {
+      constructor() {
+        this.width = input4(void 0);
+        this.padding = input4("0");
+        this.verticalAlign = input4("top");
+        this.cellStyle = computed4(
+          () => `padding: ${this.padding()}; vertical-align: ${this.verticalAlign()};`
+        );
+      }
+    };
+    EmlColumn = __decorateClass([
+      Component5({
+        selector: "eml-column",
+        template: `
+		<td [attr.style]="cellStyle()" [attr.width]="width()" valign="top">
+			<ng-content />
+		</td>
+	`,
+        changeDetection: ChangeDetectionStrategy5.OnPush
+      })
+    ], EmlColumn);
+  }
+});
+// libs/email/src/lib/components/eml-text.component.ts
+import { Component as Component6, ChangeDetectionStrategy as ChangeDetectionStrategy6, input as input5, computed as computed5 } from "@angular/core";
+var EmlText;
+var init_eml_text_component = __esm({
+  "libs/email/src/lib/components/eml-text.component.ts"() {
+    "use strict";
+    EmlText = class {
+      constructor() {
+        this.color = input5("#3f3f46");
+        this.fontSize = input5("16px");
+        this.lineHeight = input5("1.6");
+        this.margin = input5("0 0 16px");
+        this.textAlign = input5("left");
+        this.pStyle = computed5(
+          () => `margin: ${this.margin()}; color: ${this.color()}; font-size: ${this.fontSize()}; line-height: ${this.lineHeight()}; text-align: ${this.textAlign()};`
+        );
+      }
+    };
+    EmlText = __decorateClass([
+      Component6({
+        selector: "eml-text",
+        template: `
+		<p [attr.style]="pStyle()">
+			<ng-content />
+		</p>
+	`,
+        changeDetection: ChangeDetectionStrategy6.OnPush
+      })
+    ], EmlText);
+  }
+});
+// libs/email/src/lib/components/eml-heading.component.ts
+import { Component as Component7, ChangeDetectionStrategy as ChangeDetectionStrategy7, input as input6, computed as computed6 } from "@angular/core";
+var EmlHeading;
+var init_eml_heading_component = __esm({
+  "libs/email/src/lib/components/eml-heading.component.ts"() {
+    "use strict";
+    EmlHeading = class {
+      constructor() {
+        this.level = input6(1);
+        this.color = input6("#18181b");
+        this.margin = input6("0 0 24px");
+        this.textAlign = input6("left");
+        this.fontSizeMap = {
+          1: "24px",
+          2: "20px",
+          3: "16px"
+        };
+        this.headingStyle = computed6(
+          () => `margin: ${this.margin()}; font-size: ${this.fontSizeMap[this.level()] ?? "24px"}; font-weight: 600; color: ${this.color()}; text-align: ${this.textAlign()};`
+        );
+      }
+    };
+    EmlHeading = __decorateClass([
+      Component7({
+        selector: "eml-heading",
+        template: `<div [attr.style]="headingStyle()" [attr.role]="'heading'" [attr.aria-level]="level()">
+		<ng-content />
+	</div>`,
+        changeDetection: ChangeDetectionStrategy7.OnPush
+      })
+    ], EmlHeading);
+  }
+});
+// libs/email/src/lib/components/eml-button.component.ts
+import { Component as Component8, ChangeDetectionStrategy as ChangeDetectionStrategy8, input as input7, computed as computed7 } from "@angular/core";
+var EmlButton;
+var init_eml_button_component = __esm({
+  "libs/email/src/lib/components/eml-button.component.ts"() {
+    "use strict";
+    EmlButton = class {
+      constructor() {
+        this.href = input7("");
+        this.backgroundColor = input7("#18181b");
+        this.color = input7("#ffffff");
+        this.borderRadius = input7("6px");
+        this.padding = input7("12px 24px");
+        this.textAlign = input7("left");
+        this.alignStyle = computed7(() => `padding: 0; text-align: ${this.textAlign()};`);
+        this.linkStyle = computed7(
+          () => `display: inline-block; padding: ${this.padding()}; background-color: ${this.backgroundColor()}; color: ${this.color()}; text-decoration: none; border-radius: ${this.borderRadius()}; font-weight: 500;`
+        );
+      }
+    };
+    EmlButton = __decorateClass([
+      Component8({
+        selector: "eml-button",
+        template: `
+		<table role="presentation" width="100%" cellspacing="0" cellpadding="0">
+			<tr>
+				<td [attr.style]="alignStyle()">
+					<a [attr.href]="href()" [attr.style]="linkStyle()" target="_blank">
+						<ng-content />
+					</a>
+				</td>
+			</tr>
+		</table>
+	`,
+        changeDetection: ChangeDetectionStrategy8.OnPush
+      })
+    ], EmlButton);
+  }
+});
+// libs/email/src/lib/components/eml-link.component.ts
+import { Component as Component9, ChangeDetectionStrategy as ChangeDetectionStrategy9, input as input8, computed as computed8 } from "@angular/core";
+var EmlLink;
+var init_eml_link_component = __esm({
+  "libs/email/src/lib/components/eml-link.component.ts"() {
+    "use strict";
+    EmlLink = class {
+      constructor() {
+        this.href = input8("");
+        this.color = input8("#18181b");
+        this.textDecoration = input8("underline");
+        this.linkStyle = computed8(
+          () => `color: ${this.color()}; text-decoration: ${this.textDecoration()};`
+        );
+      }
+    };
+    EmlLink = __decorateClass([
+      Component9({
+        selector: "eml-link",
+        template: `
+		<a [attr.href]="href()" [attr.style]="linkStyle()" target="_blank">
+			<ng-content />
+		</a>
+	`,
+        changeDetection: ChangeDetectionStrategy9.OnPush
+      })
+    ], EmlLink);
+  }
+});
+// libs/email/src/lib/components/eml-image.component.ts
+import { Component as Component10, ChangeDetectionStrategy as ChangeDetectionStrategy10, input as input9, computed as computed9 } from "@angular/core";
+var EmlImage;
+var init_eml_image_component = __esm({
+  "libs/email/src/lib/components/eml-image.component.ts"() {
+    "use strict";
+    EmlImage = class {
+      constructor() {
+        this.src = input9("");
+        this.alt = input9("");
+        this.width = input9(void 0);
+        this.height = input9(void 0);
+        this.borderRadius = input9("0");
+        this.imgStyle = computed9(
+          () => `display: block; max-width: 100%; border: 0; outline: none; border-radius: ${this.borderRadius()};`
+        );
+      }
+    };
+    EmlImage = __decorateClass([
+      Component10({
+        selector: "eml-image",
+        template: `
+		<img
+			[attr.src]="src()"
+			[attr.alt]="alt()"
+			[attr.width]="width()"
+			[attr.height]="height()"
+			[attr.style]="imgStyle()"
+		/>
+	`,
+        changeDetection: ChangeDetectionStrategy10.OnPush
+      })
+    ], EmlImage);
+  }
+});
+// libs/email/src/lib/components/eml-divider.component.ts
+import { Component as Component11, ChangeDetectionStrategy as ChangeDetectionStrategy11, input as input10, computed as computed10 } from "@angular/core";
+var EmlDivider;
+var init_eml_divider_component = __esm({
+  "libs/email/src/lib/components/eml-divider.component.ts"() {
+    "use strict";
+    EmlDivider = class {
+      constructor() {
+        this.color = input10("#e4e4e7");
+        this.margin = input10("24px 0");
+        this.hrStyle = computed10(
+          () => `border: none; border-top: 1px solid ${this.color()}; margin: ${this.margin()};`
+        );
+      }
+    };
+    EmlDivider = __decorateClass([
+      Component11({
+        selector: "eml-divider",
+        template: `<hr [attr.style]="hrStyle()" />`,
+        changeDetection: ChangeDetectionStrategy11.OnPush
+      })
+    ], EmlDivider);
+  }
+});
+// libs/email/src/lib/components/eml-preview.component.ts
+import { Component as Component12, ChangeDetectionStrategy as ChangeDetectionStrategy12 } from "@angular/core";
+var EmlPreview;
+var init_eml_preview_component = __esm({
+  "libs/email/src/lib/components/eml-preview.component.ts"() {
+    "use strict";
+    EmlPreview = class {
+    };
+    EmlPreview = __decorateClass([
+      Component12({
+        selector: "eml-preview",
+        template: `
+		<div style="display: none; max-height: 0; overflow: hidden; mso-hide: all;">
+			<ng-content />
+		</div>
+	`,
+        changeDetection: ChangeDetectionStrategy12.OnPush
+      })
+    ], EmlPreview);
+  }
+});
+// libs/email/src/lib/components/eml-spacer.component.ts
+import { Component as Component13, ChangeDetectionStrategy as ChangeDetectionStrategy13, input as input11, computed as computed11 } from "@angular/core";
+var EmlSpacer;
+var init_eml_spacer_component = __esm({
+  "libs/email/src/lib/components/eml-spacer.component.ts"() {
+    "use strict";
+    EmlSpacer = class {
+      constructor() {
+        this.height = input11("24px");
+        this.spacerStyle = computed11(
+          () => `height: ${this.height()}; line-height: ${this.height()}; font-size: 1px;`
+        );
+      }
+    };
+    EmlSpacer = __decorateClass([
+      Component13({
+        selector: "eml-spacer",
+        template: `<div [attr.style]="spacerStyle()"></div>`,
+        changeDetection: ChangeDetectionStrategy13.OnPush
+      })
+    ], EmlSpacer);
+  }
+});
+// libs/email/src/lib/components/eml-footer.component.ts
+import { Component as Component14, ChangeDetectionStrategy as ChangeDetectionStrategy14, input as input12, computed as computed12 } from "@angular/core";
+var EmlFooter;
+var init_eml_footer_component = __esm({
+  "libs/email/src/lib/components/eml-footer.component.ts"() {
+    "use strict";
+    EmlFooter = class {
+      constructor() {
+        this.maxWidth = input12("480px");
+        this.color = input12("#71717a");
+        this.fontSize = input12("12px");
+        this.textAlign = input12("center");
+        this.padding = input12("20px 0 0");
+        this.tableStyle = computed12(() => `max-width: ${this.maxWidth()}; margin: 0 auto;`);
+        this.cellStyle = computed12(
+          () => `text-align: ${this.textAlign()}; color: ${this.color()}; font-size: ${this.fontSize()}; padding: ${this.padding()};`
+        );
+      }
+    };
+    EmlFooter = __decorateClass([
+      Component14({
+        selector: "eml-footer",
+        template: `
+		<table
+			role="presentation"
+			width="100%"
+			cellspacing="0"
+			cellpadding="0"
+			[attr.style]="tableStyle()"
+		>
+			<tr>
+				<td [attr.style]="cellStyle()">
+					<ng-content />
+				</td>
+			</tr>
+		</table>
+	`,
+        changeDetection: ChangeDetectionStrategy14.OnPush
+      })
+    ], EmlFooter);
+  }
+});
+// libs/email/src/lib/utils/blocks-to-plain-text.ts
+function blocksToPlainText(blocks2, depth = 0) {
+  const lines = [];
+  for (const block of blocks2) {
+    const text2 = blockToText(block, depth);
+    if (text2) {
+      lines.push(text2);
+    }
+  }
+  return lines.join("\n\n");
+}
+function blockToText(block, depth) {
+  switch (block.type) {
+    case "header":
+      return headerToText(block.data);
+    case "text":
+      return String(block.data["content"] ?? "");
+    case "button":
+      return buttonToText(block.data);
+    case "footer":
+      return String(block.data["text"] ?? "");
+    case "columns":
+      if (depth >= MAX_BLOCK_DEPTH2) {
+        console.warn("[momentum:email] Max nesting depth reached, skipping columns block");
+        return "";
+      }
+      return columnsToText(block.data, depth);
+    case "divider":
+    case "spacer":
+    case "image":
+      return "";
+    default:
+      return "";
+  }
+}
+function headerToText(data) {
+  const title = String(data["title"] ?? "");
+  const subtitle = data["subtitle"] ? String(data["subtitle"]) : "";
+  if (!title && !subtitle)
+    return "";
+  if (!subtitle)
+    return title;
+  return `${title}
+${subtitle}`;
+}
+function buttonToText(data) {
+  const label = String(data["label"] ?? "");
+  const href = data["href"] ? String(data["href"]) : "";
+  if (!label)
+    return "";
+  if (!href)
+    return label;
+  return `${label}: ${href}`;
+}
+function columnsToText(data, depth) {
+  const columns = data["columns"];
+  if (!Array.isArray(columns))
+    return "";
+  const parts = [];
+  for (const col of columns) {
+    if (col && typeof col === "object" && Array.isArray(col.blocks)) {
+      const colText = blocksToPlainText(col.blocks, depth + 1);
+      if (colText) {
+        parts.push(colText);
+      }
+    }
+  }
+  return parts.join("\n\n");
+}
+var MAX_BLOCK_DEPTH2;
+var init_blocks_to_plain_text = __esm({
+  "libs/email/src/lib/utils/blocks-to-plain-text.ts"() {
+    "use strict";
+    MAX_BLOCK_DEPTH2 = 5;
+  }
+});
+// libs/email/src/index.ts
+var src_exports2 = {};
+__export(src_exports2, {
+  DEFAULT_EMAIL_THEME: () => DEFAULT_EMAIL_THEME,
+  DEFAULT_PASSWORD_RESET_BLOCKS: () => DEFAULT_PASSWORD_RESET_BLOCKS,
+  DEFAULT_VERIFICATION_BLOCKS: () => DEFAULT_VERIFICATION_BLOCKS,
+  EMAIL_DATA: () => EMAIL_DATA,
+  EmlBody: () => EmlBody,
+  EmlButton: () => EmlButton,
+  EmlColumn: () => EmlColumn,
+  EmlContainer: () => EmlContainer,
+  EmlDivider: () => EmlDivider,
+  EmlFooter: () => EmlFooter,
+  EmlHeading: () => EmlHeading,
+  EmlImage: () => EmlImage,
+  EmlLink: () => EmlLink,
+  EmlPreview: () => EmlPreview,
+  EmlRow: () => EmlRow,
+  EmlSection: () => EmlSection,
+  EmlSpacer: () => EmlSpacer,
+  EmlText: () => EmlText,
+  blocksToPlainText: () => blocksToPlainText,
+  escapeHtml: () => escapeHtml2,
+  injectEmailData: () => injectEmailData,
+  inlineCss: () => inlineCss,
+  isValidBlock: () => isValidBlock,
+  renderEmail: () => renderEmail,
+  renderEmailFromBlocks: () => renderEmailFromBlocks,
+  replaceBlockVariables: () => replaceBlockVariables,
+  replaceVariables: () => replaceVariables,
+  sanitizeAlignment: () => sanitizeAlignment,
+  sanitizeCssNumber: () => sanitizeCssNumber,
+  sanitizeCssValue: () => sanitizeCssValue,
+  sanitizeFontFamily: () => sanitizeFontFamily,
+  sanitizeUrl: () => sanitizeUrl
+});
+var init_src2 = __esm({
+  "libs/email/src/index.ts"() {
+    "use strict";
+    init_render_email();
+    init_render_blocks();
+    init_render_types();
+    init_replace_variables();
+    init_default_templates();
+    init_eml_body_component();
+    init_eml_container_component();
+    init_eml_section_component();
+    init_eml_row_component();
+    init_eml_column_component();
+    init_eml_text_component();
+    init_eml_heading_component();
+    init_eml_button_component();
+    init_eml_link_component();
+    init_eml_image_component();
+    init_eml_divider_component();
+    init_eml_preview_component();
+    init_eml_spacer_component();
+    init_eml_footer_component();
+    init_escape_html();
+    init_css_inliner();
+    init_sanitize();
+    init_blocks_to_plain_text();
+    init_render_blocks();
+    init_types();
+  }
+});
 // libs/server-express/src/lib/server-express.ts
 import { Router, json as jsonParser } from "express";
 import multer from "multer";
@@ -985,6 +2100,31 @@ function validateRowCount(name, label, count, minRows, maxRows, errors) {
 }
 // libs/core/src/lib/collections/media.collection.ts
+var validateFocalPoint = (value) => {
+  if (value === null || value === void 0)
+    return true;
+  if (typeof value !== "object" || Array.isArray(value)) {
+    return "Focal point must be an object with x and y coordinates";
+  }
+  const fp = Object.fromEntries(Object.entries(value));
+  if (!("x" in fp) || !("y" in fp)) {
+    return "Focal point must have both x and y properties";
+  }
+  const { x, y } = fp;
+  if (typeof x !== "number" || !Number.isFinite(x)) {
+    return "Focal point x must be a finite number";
+  }
+  if (typeof y !== "number" || !Number.isFinite(y)) {
+    return "Focal point y must be a finite number";
+  }
+  if (x < 0 || x > 1) {
+    return `Focal point x must be between 0 and 1 (received ${x})`;
+  }
+  if (y < 0 || y > 1) {
+    return `Focal point y must be between 0 and 1 (received ${y})`;
+  }
+  return true;
+};
 var MediaCollection = defineCollection({
   slug: "media",
   labels: {
@@ -1039,6 +2179,14 @@ var MediaCollection = defineCollection({
     json("focalPoint", {
       label: "Focal Point",
       description: "Focal point coordinates for image cropping",
+      validate: validateFocalPoint,
+      admin: {
+        hidden: true
+      }
+    }),
+    json("sizes", {
+      label: "Image Sizes",
+      description: "Generated image size variants",
       admin: {
         hidden: true
       }
@@ -1897,6 +3045,15 @@ function deepEqual(a, b) {
     (key) => Object.prototype.hasOwnProperty.call(bRec, key) && deepEqual(aRec[key], bRec[key])
   );
 }
+function stripTransientKeys(data) {
+  const result = {};
+  for (const [key, value] of Object.entries(data)) {
+    if (!key.startsWith("_")) {
+      result[key] = value;
+    }
+  }
+  return result;
+}
 function flattenWhereClause(where) {
   if (!where)
     return {};
@@ -2060,6 +3217,7 @@ var CollectionOperationsImpl = class _CollectionOperationsImpl {
       );
     }
     processedData = await this.runHooks("beforeChange", processedData, "create");
+    processedData = stripTransientKeys(processedData);
     const doc = await this.adapter.create(this.slug, processedData);
     await this.runHooks("afterChange", doc, "create");
     if (hasFieldHooks(this.collectionConfig.fields)) {
@@ -2120,6 +3278,7 @@ var CollectionOperationsImpl = class _CollectionOperationsImpl {
       );
     }
     processedData = await this.runHooks("beforeChange", processedData, "update", originalDoc);
+    processedData = stripTransientKeys(processedData);
     const doc = await this.adapter.update(this.slug, id, processedData);
     await this.runHooks("afterChange", doc, "update", originalDoc);
     if (hasFieldHooks(this.collectionConfig.fields)) {
@@ -4247,7 +5406,8 @@ async function handleUpload(config, request) {
       filesize: file.size,
       path: storedFile.path,
       url: storedFile.url,
-      alt: alt ?? ""
+      alt: alt ?? "",
+      _file: file
     };
     const api = getMomentumAPI().setContext({ user });
     const doc = await api.collection(collection).create(mediaData);
@@ -4314,7 +5474,8 @@ async function handleCollectionUpload(globalConfig, request) {
       mimeType: file.mimeType,
       filesize: file.size,
       path: storedFile.path,
-      url: storedFile.url
+      url: storedFile.url,
+      _file: file
     };
     const api = getMomentumAPI().setContext({ user });
     const doc = await api.collection(collectionSlug).create(docData);
@@ -4351,6 +5512,7 @@ function getMimeTypeFromPath(path) {
     png: "image/png",
     gif: "image/gif",
     webp: "image/webp",
+    avif: "image/avif",
     svg: "image/svg+xml",
     pdf: "application/pdf",
     json: "application/json",
@@ -5016,11 +6178,11 @@ SwaggerUIBundle({
 // libs/server-core/src/lib/preview-renderer.ts
 function renderPreviewHTML(options) {
-  const { doc, collection } = options;
+  const { doc, collection, customFieldRenderers } = options;
   const titleField = collection.admin?.useAsTitle ?? "id";
   const title = escapeHtml(String(doc[titleField] ?? doc["id"] ?? "Untitled"));
   const fields = collection.fields ?? [];
-  const fieldHtml = fields.filter((f) => !isHiddenField(f) && !isLayoutField(f) && f.name !== titleField).map((f) => renderField(f, doc)).filter(Boolean).join("\n");
+  const fieldHtml = fields.filter((f) => !isHiddenField(f) && !isLayoutField(f) && f.name !== titleField).map((f) => renderField(f, doc, customFieldRenderers)).filter(Boolean).join("\n");
   const richTextFields = fields.filter((f) => f.type === "richText").map((f) => f.name);
   return `<!DOCTYPE html>
 <html lang="en">
@@ -5054,6 +6216,7 @@ ${fieldHtml}
 (function(){
 var richTextFields=${JSON.stringify(richTextFields)};
 window.addEventListener('message',function(e){
+if(e.origin!==window.location.origin)return;
 if(!e.data||e.data.type!=='momentum-preview-update')return;
 var d=e.data.data;if(!d)return;
 document.querySelectorAll('[data-field]').forEach(function(el){
@@ -5074,16 +6237,20 @@ if(titleEl){var tf=titleEl.getAttribute('data-field');if(d[tf]!==undefined)title
 </body>
 </html>`;
 }
-function renderField(field, doc) {
+function renderField(field, doc, customRenderers) {
   const value = doc[field.name];
   if (value === void 0 || value === null) {
     return renderFieldWrapper(field, "");
   }
+  const editorKey = field.admin?.editor;
+  if (editorKey && customRenderers?.[editorKey]) {
+    return renderFieldWrapper(field, customRenderers[editorKey](value, field));
+  }
   switch (field.type) {
     case "richText":
       return renderFieldWrapper(
         field,
-        `<div class="field-value rich-text" data-field="${escapeHtml(field.name)}">${String(value)}</div>`
+        `<div class="field-value rich-text" data-field="${escapeHtml(field.name)}">${escapeHtml(String(value))}</div>`
       );
     case "checkbox":
       return renderFieldWrapper(
@@ -5430,6 +6597,20 @@ function getPluginProviders() {
 }
 // libs/server-express/src/lib/server-express.ts
+function getEmailBuilderFieldName(collection) {
+  const field = collection.fields.find(
+    (f) => f.type === "json" && f.admin?.editor === "email-builder"
+  );
+  return field?.name;
+}
+async function renderEmailPreviewHTML(doc, blocksFieldName) {
+  const { renderEmailFromBlocks: renderEmailFromBlocks2 } = await Promise.resolve().then(() => (init_src2(), src_exports2));
+  const blocks2 = doc[blocksFieldName];
+  if (!Array.isArray(blocks2) || blocks2.length === 0) {
+    return '<html><body style="display:flex;align-items:center;justify-content:center;min-height:100vh;color:#666;font-family:sans-serif"><p>No email blocks yet.</p></body></html>';
+  }
+  return renderEmailFromBlocks2({ blocks: blocks2 });
+}
 function extractUserFromRequest(req) {
   const authReq = req;
   if (authReq.user?.id) {
@@ -5844,16 +7025,13 @@ function momentumApiMiddleware(config) {
       res.status(500).json({ error: "Failed to get status", message });
     }
   });
-  router.get("/:collection/:id/preview", async (req, res) => {
+  async function handlePreviewRequest(req, res) {
     try {
       const slug2 = req.params["collection"];
       const id = req.params["id"];
       const user = extractUserFromRequest(req);
-      const api = getMomentumAPI();
-      const contextApi = user ? api.setContext({ user }) : api;
-      const doc = await contextApi.collection(slug2).findById(id);
-      if (!doc) {
-        res.status(404).json({ error: "Document not found" });
+      if (!user) {
+        res.status(401).json({ error: "Authentication required to access preview" });
         return;
       }
       const collectionConfig = config.collections.find((c) => c.slug === slug2);
@@ -5861,7 +7039,29 @@ function momentumApiMiddleware(config) {
         res.status(404).json({ error: "Collection not found" });
         return;
       }
-      const html = renderPreviewHTML({ doc, collection: collectionConfig });
+      const accessFn = collectionConfig.access?.read;
+      if (accessFn) {
+        const allowed = await Promise.resolve(accessFn({ req: { user } }));
+        if (!allowed) {
+          res.status(403).json({ error: "Access denied" });
+          return;
+        }
+      }
+      let doc;
+      if (req.method === "POST" && req.body?.data) {
+        doc = req.body.data;
+      } else {
+        const api = getMomentumAPI();
+        const contextApi = user ? api.setContext({ user }) : api;
+        const dbDoc = await contextApi.collection(slug2).findById(id);
+        if (!dbDoc) {
+          res.status(404).json({ error: "Document not found" });
+          return;
+        }
+        doc = dbDoc;
+      }
+      const emailField = getEmailBuilderFieldName(collectionConfig);
+      const html = emailField ? await renderEmailPreviewHTML(doc, emailField) : renderPreviewHTML({ doc, collection: collectionConfig });
       res.setHeader("Content-Type", "text/html; charset=utf-8");
       res.send(html);
     } catch (error) {
@@ -5876,7 +7076,9 @@ function momentumApiMiddleware(config) {
       }
       res.status(500).json({ error: "Preview failed", message });
     }
-  });
+  }
+  router.get("/:collection/:id/preview", handlePreviewRequest);
+  router.post("/:collection/:id/preview", handlePreviewRequest);
   const upload2 = multer({
     storage: multer.memoryStorage(),
     limits: {
@@ -7599,6 +8801,7 @@ export {
   createProtectMiddleware,
   createSessionResolverMiddleware,
   createSetupMiddleware,
+  getPluginMiddleware,
   getPluginProviders,
   initializeMomentum,
   momentumApiMiddleware