@prenta/core 0.118.0

package/dist/api/routes/documents.js

@@ -0,0 +1,340 @@
+import { listDocuments, getDocument, createDocument, updateDocument, deleteDocument, duplicateDocument, assertCollectionAccess, } from '../../actions.js';
+import { logEvent } from '../../security/audit.js';
+import { applyFieldAccess } from '../../security/access.js';
+import { PRENTA_TAG_ROOT, prentaTag, cachedRead } from '../../cache/http.js';
+import { notifyPreviewUpdate } from '../../preview/event-bus.js';
+import { getPrentaConfig } from '../../config/runtime.js';
+import { guardedDb } from '../guarded-db.js';
+import { maybePopulate, json, jsonWithCache, errorResponse, internalError, actionError, clampPage, clampPageSize, requireAuth, requireCollectionScope, buildActionContext, } from '../route-helpers.js';
+/**
+ * Some admin callers wrap field updates as `{ data: { …fields } }` (or mix
+ * column keys with a nested `data` object). `createDocument` / `updateDocument`
+ * expect a flat field map — a nested `data` key is undeclared and gets stripped
+ * by field-access, so moves/tags silently no-op (#671 follow-up). Flatten here
+ * so both wire shapes work. Top-level keys win on conflict.
+ */
+export function flattenDocumentWriteBody(body) {
+    const nested = body.data;
+    if (!nested || typeof nested !== 'object' || Array.isArray(nested))
+        return body;
+    const { data: _data, ...rest } = body;
+    return { ...nested, ...rest };
+}
+/**
+ * Parse `?filter.<field>=<value>` query params into validated data-field
+ * filters (admin facet filters, taxonomy Phase B). Only fields declared in the
+ * collection config with short-label types are honored — undeclared or
+ * long-form fields are silently dropped so a stale URL never 500s a list view.
+ */
+function parseDataFilters(url, collectionSlug) {
+    const fields = getPrentaConfig()?.collections?.[collectionSlug]?.fields;
+    if (!fields)
+        return undefined;
+    const out = [];
+    for (const [param, raw] of url.searchParams.entries()) {
+        if (!param.startsWith('filter.') || out.length >= 5)
+            continue;
+        const fieldName = param.slice('filter.'.length);
+        const value = raw.trim().slice(0, 200);
+        if (!value)
+            continue;
+        const field = fields[fieldName];
+        if (!field)
+            continue;
+        if (field.type === 'text' || field.type === 'select') {
+            out.push({ field: fieldName, value, kind: 'scalar' });
+        }
+        else if (field.type === 'array') {
+            out.push({ field: fieldName, value, kind: 'array' });
+        }
+    }
+    return out.length > 0 ? out : undefined;
+}
+export function registerDocumentRoutes(router) {
+    const db = guardedDb;
+    // ---------------------------------------------------------------------------
+    // Document routes
+    // ---------------------------------------------------------------------------
+    router.get('/collections/:slug', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.slug, 'read');
+            if (scopeErr)
+                return scopeErr;
+            return await cachedRead(request, {
+                cache: getPrentaConfig()?.cache,
+                tags: [PRENTA_TAG_ROOT, prentaTag('collection', params.slug)],
+                wrap: jsonWithCache,
+                build: async () => {
+                    const url = new URL(request.url);
+                    const ctx = buildActionContext(auth.session, db(), url.searchParams.get('locale') ?? undefined);
+                    const result = await listDocuments({
+                        collection: params.slug,
+                        page: clampPage(url.searchParams.get('page')),
+                        pageSize: clampPageSize(url.searchParams.get('pageSize')),
+                        sort: url.searchParams.get('sort') ?? undefined,
+                        order: url.searchParams.get('order') ?? undefined,
+                        status: url.searchParams.get('status') ?? undefined,
+                        locale: url.searchParams.get('locale') ?? undefined,
+                        folderId: url.searchParams.get('folderId') ?? undefined,
+                        // Exact slug filter — powers slug→id resolution for the MCP
+                        // relationship resolver (WS-C C2). Additive: omitted ⇒ no filter.
+                        slug: url.searchParams.get('slug') ?? undefined,
+                        dataFilters: parseDataFilters(url, params.slug),
+                    }, ctx);
+                    const collectionConfig = getPrentaConfig()?.collections?.[params.slug];
+                    const fields = collectionConfig?.fields;
+                    if (fields && result.docs.length > 0) {
+                        const user = { id: auth.session.userId, role: auth.session.role };
+                        result.docs = await Promise.all(result.docs.map(async (doc) => {
+                            if (doc.data && typeof doc.data === 'object') {
+                                return {
+                                    ...doc,
+                                    data: await applyFieldAccess('read', fields, doc.data, user),
+                                };
+                            }
+                            return doc;
+                        }));
+                    }
+                    return { data: result };
+                },
+            });
+        }
+        catch (err) {
+            return actionError(err, 'list documents');
+        }
+    });
+    // Distinct values in use for one field across a collection — powers tag
+    // autocomplete and category suggestions in the admin ("UpChat" taxonomy
+    // feedback: avoid `AI` / `ai` / `Artificial Intelligence` drift). Registered
+    // BEFORE `/collections/:slug/:id` so the literal segment wins the match.
+    router.get('/collections/:slug/field-values', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.slug, 'read');
+            if (scopeErr)
+                return scopeErr;
+            const url = new URL(request.url);
+            const fieldName = (url.searchParams.get('field') ?? '').trim();
+            const query = (url.searchParams.get('q') ?? '').trim().slice(0, 100).toLowerCase();
+            const collectionConfig = getPrentaConfig()?.collections?.[params.slug];
+            if (!collectionConfig)
+                return errorResponse('Collection not found', 404);
+            // Enforce the collection's access.read exactly like the list/get routes.
+            // requireCollectionScope above only checks API-key scopes, not access.read,
+            // so without this any authenticated principal could enumerate the distinct
+            // field values of a collection their access.read denies (#563). Checked at
+            // the collection level (no doc arg), matching listDocuments. Runs before
+            // the field-validation 400 so denial can't be probed via the error shape.
+            const ctx = buildActionContext(auth.session, db());
+            await assertCollectionAccess(params.slug, 'read', ctx);
+            const field = collectionConfig.fields?.[fieldName];
+            // Only fields whose values are short editorial labels are aggregatable.
+            // Rejecting undeclared fields keeps this from probing arbitrary JSON.
+            if (!field || !['text', 'select', 'array'].includes(field.type)) {
+                return errorResponse('Field is not suggestible', 400);
+            }
+            const rows = await db().document.findMany({
+                where: { collection: params.slug, deletedAt: null },
+                select: { data: true },
+                orderBy: { updatedAt: 'desc' },
+                // Aggregation cap: recent documents dominate active vocabularies.
+                take: 1000,
+            });
+            // For array fields, values live on each row — either plain strings or
+            // objects keyed by the array's first text sub-field (e.g. `{ tag }`).
+            const subKey = field.type === 'array'
+                ? Object.entries(field.fields ?? {}).find(([, def]) => def?.type === 'text')?.[0]
+                : undefined;
+            const counts = new Map();
+            const record = (raw) => {
+                const value = typeof raw === 'string' ? raw.trim() : '';
+                if (!value)
+                    return;
+                const key = value.toLowerCase();
+                const existing = counts.get(key);
+                if (existing)
+                    existing.count += 1;
+                else
+                    counts.set(key, { value, count: 1 });
+            };
+            for (const row of rows) {
+                const data = row.data;
+                const raw = data?.[fieldName];
+                if (field.type === 'array') {
+                    if (!Array.isArray(raw))
+                        continue;
+                    for (const item of raw) {
+                        if (typeof item === 'string')
+                            record(item);
+                        else if (item && typeof item === 'object' && subKey) {
+                            record(item[subKey]);
+                        }
+                    }
+                }
+                else {
+                    record(raw);
+                }
+            }
+            const values = [...counts.values()]
+                .filter((v) => !query || v.value.toLowerCase().includes(query))
+                .sort((a, b) => b.count - a.count || a.value.localeCompare(b.value))
+                .slice(0, 25);
+            return json({ data: { field: fieldName, values } });
+        }
+        catch (err) {
+            // actionError maps the 'Access denied: …' thrown by assertCollectionAccess
+            // to 403 (matching the list route), falling through to 500 otherwise.
+            return actionError(err, 'field values');
+        }
+    });
+    router.get('/collections/:slug/:id', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.slug, 'read');
+            if (scopeErr)
+                return scopeErr;
+            return await cachedRead(request, {
+                cache: getPrentaConfig()?.cache,
+                tags: [
+                    PRENTA_TAG_ROOT,
+                    prentaTag('collection', params.slug),
+                    prentaTag('doc', params.id),
+                ],
+                wrap: jsonWithCache,
+                build: async () => {
+                    const ctx = buildActionContext(auth.session, db());
+                    const doc = await getDocument(params.slug, params.id, ctx);
+                    if (!doc) {
+                        // Returning a Response short-circuits the cache layer — we
+                        // never cache 404s. The next request gets a fresh DB lookup
+                        // so a doc that's restored from soft-delete is visible
+                        // immediately.
+                        return errorResponse('Document not found', 404);
+                    }
+                    // `getDocument` already lifts `_layout` / `_pageSettings` to
+                    // the top-level page builder envelope and strips internal keys
+                    // from `data`. Field-level access has been applied as well.
+                    //
+                    // Opt-in relation population (?populate=author,relatedPosts |
+                    // *) replaces stored IDs with reference summaries. The
+                    // `?populate=` param is part of the cache key (URL-derived),
+                    // so populated and non-populated reads cache independently.
+                    const populated = await maybePopulate(request, params.slug, doc, db(), {
+                        id: ctx.userId,
+                        role: ctx.role,
+                    });
+                    return { data: populated };
+                },
+            });
+        }
+        catch (err) {
+            return actionError(err, 'get document');
+        }
+    });
+    router.post('/collections/:slug', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.slug, 'create');
+            if (scopeErr)
+                return scopeErr;
+            const body = flattenDocumentWriteBody((await request.json()));
+            const ctx = buildActionContext(auth.session, db());
+            const doc = await createDocument(params.slug, body, ctx);
+            await logEvent({
+                event: 'document_created',
+                userId: auth.session.userId,
+                details: { collection: params.slug, documentId: doc?.id },
+            });
+            return json({ data: doc }, 201);
+        }
+        catch (err) {
+            return actionError(err, 'create document');
+        }
+    });
+    router.post('/collections/:slug/:id/duplicate', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            // Duplication creates a new document, so it's gated on create scope.
+            const scopeErr = requireCollectionScope(auth.session, params.slug, 'create');
+            if (scopeErr)
+                return scopeErr;
+            const ctx = buildActionContext(auth.session, db());
+            const doc = await duplicateDocument(params.slug, params.id, ctx);
+            await logEvent({
+                event: 'document_created',
+                userId: auth.session.userId,
+                details: {
+                    collection: params.slug,
+                    documentId: doc?.id,
+                    duplicatedFrom: params.id,
+                },
+            });
+            return json({ data: doc }, 201);
+        }
+        catch (err) {
+            return actionError(err, 'duplicate document');
+        }
+    });
+    router.put('/collections/:slug/:id', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.slug, 'update');
+            if (scopeErr)
+                return scopeErr;
+            const body = flattenDocumentWriteBody((await request.json()));
+            const ctx = buildActionContext(auth.session, db());
+            const doc = await updateDocument(params.slug, params.id, body, ctx);
+            await logEvent({
+                event: 'document_updated',
+                userId: auth.session.userId,
+                details: { collection: params.slug, documentId: params.id },
+            });
+            // Push to any open live-preview SSE streams. No-op when no admin is
+            // watching the document; the bus drops the call cheaply.
+            notifyPreviewUpdate(params.slug, params.id, {
+                values: doc.data,
+                status: doc.status,
+                updatedAt: doc.updatedAt?.toISOString?.(),
+            });
+            return json({ data: doc });
+        }
+        catch (err) {
+            return actionError(err, 'update document');
+        }
+    });
+    router.delete('/collections/:slug/:id', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.slug, 'delete');
+            if (scopeErr)
+                return scopeErr;
+            const ctx = buildActionContext(auth.session, db());
+            await deleteDocument(params.slug, params.id, ctx);
+            await logEvent({
+                event: 'document_deleted',
+                userId: auth.session.userId,
+                details: { collection: params.slug, documentId: params.id },
+            });
+            return json({ data: { success: true } });
+        }
+        catch (err) {
+            return internalError(err, 'delete document');
+        }
+    });
+}
+//# sourceMappingURL=documents.js.map

package/dist/api/routes/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../../src/api/routes/documents.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,WAAW,EACX,cAAc,EACd,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,sBAAsB,GAEvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAE3D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EACL,aAAa,EACb,IAAI,EACJ,aAAa,EACb,aAAa,EACb,aAAa,EACb,WAAW,EACX,SAAS,EACT,aAAa,EACb,WAAW,EACX,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAE5B;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA6B;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAA;IACxB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IACrC,OAAO,EAAE,GAAI,MAAkC,EAAE,GAAG,IAAI,EAAE,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,GAAQ,EAAE,cAAsB;IACxD,MAAM,MAAM,GAAG,eAAe,EAAE,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAE7B,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;YAAE,SAAQ;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;QAC/B,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,MAAM,EAAE,GAAG,SAAS,CAAA;IACpB,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;YAC3E,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE;gBAC/B,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK;gBAC/B,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAK,CAAC,CAAC;gBAC9D,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,KAAK,IAAI,EAAE;oBAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;oBAChC,MAAM,GAAG,GAAG,kBAAkB,CAC5B,IAAI,CAAC,OAAO,EACZ,EAAE,EAAE,EACJ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAC5C,CAAA;oBAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC;wBACE,UAAU,EAAE,MAAM,CAAC,IAAK;wBACxB,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAC7C,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACzD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;wBAC/C,KAAK,EAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAoB,IAAI,SAAS;wBACrE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;wBACnD,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;wBACnD,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;wBACvD,4DAA4D;wBAC5D,kEAAkE;wBAClE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;wBAC/C,WAAW,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAK,CAAC;qBACjD,EACD,GAAG,CACJ,CAAA;oBAED,MAAM,gBAAgB,GAAG,eAAe,EAAE,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,IAAK,CAAC,CAAA;oBACvE,MAAM,MAAM,GAAgD,gBAAgB,EAAE,MAAM,CAAA;oBAEpF,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;wBACjE,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;4BAC5B,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gCAC7C,OAAO;oCACL,GAAG,GAAG;oCACN,IAAI,EAAE,MAAM,gBAAgB,CAC1B,MAAM,EACN,MAAM,EACN,GAAG,CAAC,IAA+B,EACnC,IAAI,CACL;iCACF,CAAA;4BACH,CAAC;4BACD,OAAO,GAAG,CAAA;wBACZ,CAAC,CAAC,CACH,CAAA;oBACH,CAAC;oBAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;gBACzB,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,wEAAwE;IACxE,wEAAwE;IACxE,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACtE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;YAC3E,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;YAElF,MAAM,gBAAgB,GAAG,eAAe,EAAE,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,IAAK,CAAC,CAAA;YACvE,IAAI,CAAC,gBAAgB;gBAAE,OAAO,aAAa,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAA;YAExE,yEAAyE;YACzE,4EAA4E;YAC5E,2EAA2E;YAC3E,2EAA2E;YAC3E,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,sBAAsB,CAAC,MAAM,CAAC,IAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;YAEvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,wEAAwE;YACxE,sEAAsE;YACtE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,OAAO,aAAa,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAA;YACvD,CAAC;YAED,MAAM,IAAI,GAA6B,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAClE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAK,EAAE,SAAS,EAAE,IAAI,EAAE;gBACpD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACtB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,kEAAkE;gBAClE,IAAI,EAAE,IAAI;aACX,CAAC,CAAA;YAEF,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,KAAK,OAAO;gBACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjF,CAAC,CAAC,SAAS,CAAA;YAEf,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAA;YAClE,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE;gBAC9B,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;gBACvD,IAAI,CAAC,KAAK;oBAAE,OAAM;gBAClB,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;gBAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAChC,IAAI,QAAQ;oBAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAA;;oBAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3C,CAAC,CAAA;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAsC,CAAA;gBACvD,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,SAAS,CAAC,CAAA;gBAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;wBAAE,SAAQ;oBACjC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;wBACvB,IAAI,OAAO,IAAI,KAAK,QAAQ;4BAAE,MAAM,CAAC,IAAI,CAAC,CAAA;6BACrC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;4BACpD,MAAM,CAAE,IAAgC,CAAC,MAAM,CAAC,CAAC,CAAA;wBACnD,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAA;gBACb,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;iBAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;iBACnE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YAEf,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,sEAAsE;YACtE,OAAO,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;QACzC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,CAAA;YAC3E,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE;gBAC/B,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK;gBAC/B,IAAI,EAAE;oBACJ,eAAe;oBACf,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAK,CAAC;oBACrC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,EAAG,CAAC;iBAC7B;gBACD,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,KAAK,IAAI,EAAE;oBAChB,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;oBAClD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,CAAC,CAAA;oBAE5D,IAAI,CAAC,GAAG,EAAE,CAAC;wBACT,2DAA2D;wBAC3D,4DAA4D;wBAC5D,uDAAuD;wBACvD,eAAe;wBACf,OAAO,aAAa,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAA;oBACjD,CAAC;oBAED,6DAA6D;oBAC7D,+DAA+D;oBAC/D,4DAA4D;oBAC5D,EAAE;oBACF,8DAA8D;oBAC9D,uDAAuD;oBACvD,6DAA6D;oBAC7D,4DAA4D;oBAC5D,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;wBACtE,EAAE,EAAE,GAAG,CAAC,MAAM;wBACd,IAAI,EAAE,GAAG,CAAC,IAAI;qBACf,CAAC,CAAA;oBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;gBAC5B,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;QACzC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,QAAQ,CAAC,CAAA;YAC7E,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC,CAAA;YACxF,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;YAEzD,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAG,GAAW,EAAE,EAAE,EAAE;aACnE,CAAC,CAAA;YAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,qEAAqE;YACrE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,QAAQ,CAAC,CAAA;YAC7E,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,CAAC,CAAA;YAElE,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE;oBACP,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,UAAU,EAAG,GAAuB,EAAE,EAAE;oBACxC,cAAc,EAAE,MAAM,CAAC,EAAE;iBAC1B;aACF,CAAC,CAAA;YAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,QAAQ,CAAC,CAAA;YAC7E,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC,CAAA;YACxF,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,EAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;YAErE,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE;aAC5D,CAAC,CAAA;YAEF,oEAAoE;YACpE,yDAAyD;YACzD,mBAAmB,CAAC,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,EAAG,EAAE;gBAC5C,MAAM,EAAG,GAA0B,CAAC,IAAI;gBACxC,MAAM,EAAG,GAA2B,CAAC,MAAM;gBAC3C,SAAS,EAAG,GAA4B,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE;aACpE,CAAC,CAAA;YAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAK,EAAE,QAAQ,CAAC,CAAA;YAC7E,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,cAAc,CAAC,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,CAAC,CAAA;YAEnD,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE;aAC5D,CAAC,CAAA;YAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/routes/email-settings.d.ts

@@ -0,0 +1,3 @@
+import type { ApiRouter } from '../router.js';
+export declare function registerEmailSettingsRoutes(router: ApiRouter): void;
+//# sourceMappingURL=email-settings.d.ts.map

package/dist/api/routes/email-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings.d.ts","sourceRoot":"","sources":["../../../src/api/routes/email-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAgB7C,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAyRnE"}

package/dist/api/routes/email-settings.js

@@ -0,0 +1,248 @@
+import { logEvent } from '../../security/audit.js';
+import { getClientIp } from '../../security/client-ip.js';
+import { getPrentaConfig } from '../../config/runtime.js';
+import { guardedDb } from '../guarded-db.js';
+import { json, errorResponse, internalError, hasModel, requireAuth, requireAdminScope, emailTestLimiter, checkRateLimitAsync, } from '../route-helpers.js';
+export function registerEmailSettingsRoutes(router) {
+    const db = guardedDb;
+    // ---------------------------------------------------------------------------
+    // Settings > Email — transactional email provider configuration.
+    // Backed by the `__email_config__` document (see `../email/settings-store.ts`).
+    // ADMIN-gated. API keys / SMTP passwords are encrypted at rest, NEVER returned.
+    // ---------------------------------------------------------------------------
+    router.get('/email/settings', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const adminErr = requireAdminScope(auth.session);
+            if (adminErr)
+                return adminErr;
+            const { getEmailConfig, toPublicEmailConfig, detectEnvEmailProvider } = await import('../../email/settings-store.js');
+            const { getEmailProviderFactory, getRegisteredEmailSender } = await import('../../email/sender.js');
+            const config = await getEmailConfig(db());
+            return json({
+                data: {
+                    settings: toPublicEmailConfig(config),
+                    /** Provider configured via env vars (informational; DB settings win). */
+                    envProvider: detectEnvEmailProvider(),
+                    /** Whether plugin-email registered its factory (required for DB-configured sends). */
+                    factoryAvailable: Boolean(getEmailProviderFactory()),
+                    /** Whether an env-configured sender is registered as fallback. */
+                    envSenderActive: Boolean(getRegisteredEmailSender()),
+                    /** A platform adapter in code takes precedence over everything. */
+                    platformAdapter: Boolean(getPrentaConfig()?.platform?.email),
+                },
+            });
+        }
+        catch (err) {
+            return internalError(err, 'email/settings GET');
+        }
+    });
+    router.put('/email/settings', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const adminErr = requireAdminScope(auth.session);
+            if (adminErr)
+                return adminErr;
+            const body = (await request.json().catch(() => null));
+            if (!body || typeof body !== 'object') {
+                return errorResponse('Request body must be an object', 400);
+            }
+            const { getEmailConfig, putEmailConfig, toPublicEmailConfig, validateEmailSettingsInput, encryptEmailSecret, isEmailProviderKey, detectEnvEmailProvider, } = await import('../../email/settings-store.js');
+            const { clearEmailSenderCache } = await import('../../email/resolve.js');
+            const current = await getEmailConfig(db());
+            // Keeping an existing key only makes sense while staying on the same
+            // provider — switching providers must not silently reuse the old secret.
+            const sameProvider = isEmailProviderKey(body.provider) && body.provider === current.provider;
+            const validationError = validateEmailSettingsInput(body, {
+                hasApiKey: sameProvider && Boolean(current.apiKeyEncrypted),
+            });
+            if (validationError)
+                return errorResponse(validationError, 400);
+            // Clearing the configuration (provider: null) wipes everything,
+            // including stored secrets.
+            if (body.provider === null) {
+                const saved = await putEmailConfig(db(), { provider: null }, auth.session.userId);
+                clearEmailSenderCache();
+                try {
+                    await logEvent({
+                        event: 'update_email_settings',
+                        userId: auth.session.userId,
+                        ipAddress: getClientIp(request),
+                        details: { provider: null, source: 'settings.email' },
+                    });
+                }
+                catch {
+                    /* never block on audit */
+                }
+                return json({
+                    data: { settings: toPublicEmailConfig(saved), envProvider: detectEnvEmailProvider() },
+                });
+            }
+            const provider = body.provider;
+            // Secrets: undefined = keep existing (same provider only), ''/null = clear,
+            // string = encrypt + replace.
+            let apiKeyEncrypted = sameProvider ? current.apiKeyEncrypted : undefined;
+            let apiKeyLast4 = sameProvider ? current.apiKeyLast4 : undefined;
+            let keyChanged = false;
+            if (body.apiKey !== undefined) {
+                if (body.apiKey === null || body.apiKey === '') {
+                    apiKeyEncrypted = undefined;
+                    apiKeyLast4 = undefined;
+                    keyChanged = true;
+                }
+                else if (typeof body.apiKey === 'string' && body.apiKey.trim()) {
+                    const enc = await encryptEmailSecret(body.apiKey.trim());
+                    apiKeyEncrypted = enc.encrypted;
+                    apiKeyLast4 = enc.last4;
+                    keyChanged = true;
+                }
+            }
+            let smtpPassEncrypted = sameProvider ? current.smtpPassEncrypted : undefined;
+            let passChanged = false;
+            if (body.smtpPass !== undefined) {
+                if (body.smtpPass === null || body.smtpPass === '') {
+                    smtpPassEncrypted = undefined;
+                    passChanged = true;
+                }
+                else if (typeof body.smtpPass === 'string' && body.smtpPass.trim()) {
+                    smtpPassEncrypted = (await encryptEmailSecret(body.smtpPass)).encrypted;
+                    passChanged = true;
+                }
+            }
+            const next = {
+                provider,
+                from: typeof body.from === 'string' ? body.from.trim() : undefined,
+                apiKeyEncrypted,
+                apiKeyLast4,
+                channel: provider === 'smtpcom' && typeof body.channel === 'string' && body.channel.trim()
+                    ? body.channel.trim()
+                    : undefined,
+                region: provider === 'ses' && typeof body.region === 'string' ? body.region.trim() : undefined,
+                host: provider === 'smtp' && typeof body.host === 'string' ? body.host.trim() : undefined,
+                port: provider === 'smtp' && typeof body.port === 'number' && Number.isInteger(body.port)
+                    ? body.port
+                    : undefined,
+                secure: provider === 'smtp' && typeof body.secure === 'boolean' ? body.secure : undefined,
+                smtpUser: provider === 'smtp' && typeof body.smtpUser === 'string' && body.smtpUser.trim()
+                    ? body.smtpUser.trim()
+                    : undefined,
+                smtpPassEncrypted: provider === 'smtp' ? smtpPassEncrypted : undefined,
+                // Changing the config invalidates the previous test result.
+                lastTestStatus: undefined,
+                lastTestedAt: undefined,
+                lastTestError: undefined,
+            };
+            const saved = await putEmailConfig(db(), next, auth.session.userId);
+            clearEmailSenderCache();
+            try {
+                await logEvent({
+                    event: 'update_email_settings',
+                    userId: auth.session.userId,
+                    ipAddress: getClientIp(request),
+                    // Config metadata only — never key material.
+                    details: {
+                        provider,
+                        from: next.from ?? null,
+                        keyChanged: keyChanged || passChanged,
+                        source: 'settings.email',
+                    },
+                });
+            }
+            catch {
+                /* never block on audit */
+            }
+            return json({
+                data: { settings: toPublicEmailConfig(saved), envProvider: detectEnvEmailProvider() },
+            });
+        }
+        catch (err) {
+            return internalError(err, 'email/settings PUT');
+        }
+    });
+    router.post('/email/settings/test', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const adminErr = requireAdminScope(auth.session);
+            if (adminErr)
+                return adminErr;
+            if (!(await checkRateLimitAsync(emailTestLimiter, `email-test:${auth.session.userId}`))) {
+                return errorResponse('Too many test emails. Please try again later.', 429);
+            }
+            const d = db();
+            // The test recipient is ALWAYS the signed-in admin's own address — never
+            // a caller-supplied one — so this endpoint can't be used to spam others.
+            if (!hasModel(d, 'user')) {
+                return errorResponse('User model unavailable; cannot determine recipient.', 500);
+            }
+            const user = await d.user.findUnique({
+                where: { id: auth.session.userId },
+                select: { email: true, name: true },
+            });
+            if (!user?.email) {
+                return errorResponse('Your account has no email address to send the test to.', 400);
+            }
+            const { resolveEmailSenderAsync, clearEmailSenderCache } = await import('../../email/resolve.js');
+            const { getEmailConfig, putEmailConfig } = await import('../../email/settings-store.js');
+            clearEmailSenderCache(); // always test the freshest configuration
+            const sender = await resolveEmailSenderAsync(d);
+            if (!sender) {
+                return errorResponse('No email provider is configured. Save provider settings (or set env vars) first.', 400);
+            }
+            let success = false;
+            let errorMessage = null;
+            try {
+                await sender.send({
+                    to: user.email,
+                    subject: 'Prenta CMS test email',
+                    html: `<div style="font-family:system-ui,sans-serif;color:#111;max-width:640px"><p style="font-size:15px">This is a test email from your Prenta CMS email settings${user.name ? `, requested by ${user.name}` : ''}. If you received it, your provider is configured correctly.</p></div>`,
+                    text: 'This is a test email from your Prenta CMS email settings. If you received it, your provider is configured correctly.',
+                });
+                success = true;
+            }
+            catch (err) {
+                errorMessage = err instanceof Error ? err.message : 'Send failed';
+            }
+            // Record the outcome on the config doc (best-effort) so the UI can show
+            // "last tested" state across sessions. Skip when only env config exists.
+            try {
+                const config = await getEmailConfig(d);
+                if (config.provider) {
+                    await putEmailConfig(d, {
+                        ...config,
+                        lastTestStatus: success ? 'success' : 'failed',
+                        lastTestedAt: new Date().toISOString(),
+                        lastTestError: errorMessage ?? undefined,
+                    }, auth.session.userId);
+                }
+            }
+            catch {
+                /* recording the result must not mask the send outcome */
+            }
+            try {
+                await logEvent({
+                    event: 'test_email_settings',
+                    userId: auth.session.userId,
+                    ipAddress: getClientIp(request),
+                    details: { success, source: 'settings.email' },
+                });
+            }
+            catch {
+                /* never block on audit */
+            }
+            if (!success) {
+                return errorResponse(errorMessage ?? 'Test send failed', 502);
+            }
+            return json({ data: { success: true, sentTo: user.email } });
+        }
+        catch (err) {
+            return internalError(err, 'email/settings test');
+        }
+    });
+}
+//# sourceMappingURL=email-settings.js.map

package/dist/api/routes/email-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings.js","sourceRoot":"","sources":["../../../src/api/routes/email-settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EACL,IAAI,EACJ,aAAa,EACb,aAAa,EACb,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAE5B,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,EAAE,GAAG,SAAS,CAAA;IACpB,8EAA8E;IAC9E,iEAAiE;IACjE,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAE9E,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,EAAE,cAAc,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,GACnE,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAA;YAC/C,MAAM,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,GACzD,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;YAEvC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC;gBACV,IAAI,EAAE;oBACJ,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC;oBACrC,yEAAyE;oBACzE,WAAW,EAAE,sBAAsB,EAAE;oBACrC,sFAAsF;oBACtF,gBAAgB,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC;oBACpD,kEAAkE;oBAClE,eAAe,EAAE,OAAO,CAAC,wBAAwB,EAAE,CAAC;oBACpD,mEAAmE;oBACnE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;iBAC7D;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAA;QACjD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAW5C,CAAA;YACR,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,aAAa,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAA;YAC7D,CAAC;YAED,MAAM,EACJ,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,GACvB,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAA;YACjD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAA;YAExE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;YAC1C,qEAAqE;YACrE,yEAAyE;YACzE,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAA;YAC5F,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,EAAE;gBACvD,SAAS,EAAE,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;aAC5D,CAAC,CAAA;YACF,IAAI,eAAe;gBAAE,OAAO,aAAa,CAAC,eAAe,EAAE,GAAG,CAAC,CAAA;YAE/D,gEAAgE;YAChE,4BAA4B;YAC5B,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACjF,qBAAqB,EAAE,CAAA;gBACvB,IAAI,CAAC;oBACH,MAAM,QAAQ,CAAC;wBACb,KAAK,EAAE,uBAAuB;wBAC9B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;wBAC3B,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;wBAC/B,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE;qBACtD,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,0BAA0B;gBAC5B,CAAC;gBACD,OAAO,IAAI,CAAC;oBACV,IAAI,EAAE,EAAE,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,EAAE;iBACtF,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAgD,CAAA;YAEtE,4EAA4E;YAC5E,8BAA8B;YAC9B,IAAI,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;YACxE,IAAI,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;YAChE,IAAI,UAAU,GAAG,KAAK,CAAA;YACtB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;oBAC/C,eAAe,GAAG,SAAS,CAAA;oBAC3B,WAAW,GAAG,SAAS,CAAA;oBACvB,UAAU,GAAG,IAAI,CAAA;gBACnB,CAAC;qBAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBACjE,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;oBACxD,eAAe,GAAG,GAAG,CAAC,SAAS,CAAA;oBAC/B,WAAW,GAAG,GAAG,CAAC,KAAK,CAAA;oBACvB,UAAU,GAAG,IAAI,CAAA;gBACnB,CAAC;YACH,CAAC;YAED,IAAI,iBAAiB,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAA;YAC5E,IAAI,WAAW,GAAG,KAAK,CAAA;YACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBACnD,iBAAiB,GAAG,SAAS,CAAA;oBAC7B,WAAW,GAAG,IAAI,CAAA;gBACpB,CAAC;qBAAM,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;oBACrE,iBAAiB,GAAG,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;oBACvE,WAAW,GAAG,IAAI,CAAA;gBACpB,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG;gBACX,QAAQ;gBACR,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBAClE,eAAe;gBACf,WAAW;gBACX,OAAO,EACL,QAAQ,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;oBAC/E,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;oBACrB,CAAC,CAAC,SAAS;gBACf,MAAM,EACJ,QAAQ,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBACxF,IAAI,EAAE,QAAQ,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBACzF,IAAI,EACF,QAAQ,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjF,CAAC,CAAC,IAAI,CAAC,IAAI;oBACX,CAAC,CAAC,SAAS;gBACf,MAAM,EAAE,QAAQ,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACzF,QAAQ,EACN,QAAQ,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;oBAC9E,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;oBACtB,CAAC,CAAC,SAAS;gBACf,iBAAiB,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;gBACtE,4DAA4D;gBAC5D,cAAc,EAAE,SAAS;gBACzB,YAAY,EAAE,SAAS;gBACvB,aAAa,EAAE,SAAS;aACzB,CAAA;YAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACnE,qBAAqB,EAAE,CAAA;YAEvB,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,uBAAuB;oBAC9B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;oBAC3B,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;oBAC/B,6CAA6C;oBAC7C,OAAO,EAAE;wBACP,QAAQ;wBACR,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;wBACvB,UAAU,EAAE,UAAU,IAAI,WAAW;wBACrC,MAAM,EAAE,gBAAgB;qBACzB;iBACF,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;YAED,OAAO,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,EAAE;aACtF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAA;QACjD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,gBAAgB,EAAE,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;gBACxF,OAAO,aAAa,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAA;YAC5E,CAAC;YAED,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;YACd,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,aAAa,CAAC,qDAAqD,EAAE,GAAG,CAAC,CAAA;YAClF,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;gBACnC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAClC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;aACpC,CAAC,CAAA;YACF,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;gBACjB,OAAO,aAAa,CAAC,wDAAwD,EAAE,GAAG,CAAC,CAAA;YACrF,CAAC;YAED,MAAM,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,GACtD,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAA;YACxC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAA;YAExF,qBAAqB,EAAE,CAAA,CAAC,yCAAyC;YACjE,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,CAAC,CAAC,CAAA;YAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,aAAa,CAClB,kFAAkF,EAClF,GAAG,CACJ,CAAA;YACH,CAAC;YAED,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,IAAI,YAAY,GAAkB,IAAI,CAAA;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC;oBAChB,EAAE,EAAE,IAAI,CAAC,KAAK;oBACd,OAAO,EAAE,uBAAuB;oBAChC,IAAI,EAAE,8JAA8J,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,wEAAwE;oBAC1R,IAAI,EAAE,sHAAsH;iBAC7H,CAAC,CAAA;gBACF,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAA;YACnE,CAAC;YAED,wEAAwE;YACxE,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,CAAA;gBACtC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,MAAM,cAAc,CAClB,CAAC,EACD;wBACE,GAAG,MAAM;wBACT,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;wBAC9C,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACtC,aAAa,EAAE,YAAY,IAAI,SAAS;qBACzC,EACD,IAAI,CAAC,OAAO,CAAC,MAAM,CACpB,CAAA;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,qBAAqB;oBAC5B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;oBAC3B,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;oBAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE;iBAC/C,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,aAAa,CAAC,YAAY,IAAI,kBAAkB,EAAE,GAAG,CAAC,CAAA;YAC/D,CAAC;YACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAA;QAClD,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/routes/folders.d.ts

@@ -0,0 +1,3 @@
+import type { ApiRouter } from '../router.js';
+export declare function registerFolderRoutes(router: ApiRouter): void;
+//# sourceMappingURL=folders.d.ts.map

package/dist/api/routes/folders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.d.ts","sourceRoot":"","sources":["../../../src/api/routes/folders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAY7C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAsM5D"}