create-volt 0.53.0 → 0.55.0

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to `create-volt` are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/), and this project adheres to
 [Semantic Versioning](https://semver.org/).
 
+## [0.55.0] - 2026-07-05
+
+### Added
+- **Inline "Test" buttons for SMTP + AI in the config wizard** — the result shows
+  right next to each button. `/setup/test-smtp` verifies connection/auth (nodemailer,
+  or a TCP reachability fallback); `/setup/test-ai` does a 1-token live call to the
+  provider key or the hosted gateway. The DB test result is inline now too.
+
+## [0.54.0] - 2026-07-04
+
+### Added
+- **Config editor renders themed.** The in-config WYSIWYG loads the active theme's
+  CSS (new `/setup/theme-css` → RTEPro `exportCSS`), so pages look like the published
+  site as you edit — new pages included.
+
+### Fixed
+- **Log analytics bot/attack counts were always 0** — they read `.bot`/`.attack`,
+  but mir-sentinel's parseLine returns `.isBot`/`.isAttack`. Fixed in `--logs`.
+
 ## [0.53.0] - 2026-07-04
 
 ### Added
@@ -692,6 +711,8 @@ All notable changes to `create-volt` are documented here. The format follows
   watching and full-page hot reload. Supports `--skip-install` and `--force`,
   and auto-detects npm / pnpm / yarn / bun for the install step.
 
+[0.55.0]: https://github.com/MIR-2025/volt/releases/tag/v0.55.0
+[0.54.0]: https://github.com/MIR-2025/volt/releases/tag/v0.54.0
 [0.53.0]: https://github.com/MIR-2025/volt/releases/tag/v0.53.0
 [0.52.0]: https://github.com/MIR-2025/volt/releases/tag/v0.52.0
 [0.51.0]: https://github.com/MIR-2025/volt/releases/tag/v0.51.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-volt",
-  "version": "0.53.0",
+  "version": "0.55.0",
   "description": "Scaffold a new Volt app — no-build, signals-based UI with Socket.io hot reload.",
   "type": "module",
   "bin": {

package/templates/blog/server.js

@@ -440,6 +440,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -538,6 +564,104 @@ function startSetup() {
       });
       return;
     }
+    // verify SMTP creds (form values merged over the saved .env) — auth check via
+    // nodemailer if available, else a TCP reachability check.
+    if (req.method === "POST" && p === "/setup/test-smtp") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const url = cfg.SMTP_URL;
+          const host = cfg.SMTP_HOST;
+          if (!url && !host) return done({ ok: false, error: "no SMTP config (set SMTP_URL or SMTP_HOST)" });
+          let nodemailer;
+          try {
+            nodemailer = (await import("nodemailer")).default;
+          } catch {
+            /* not installed */
+          }
+          if (nodemailer) {
+            const transport = url
+              ? nodemailer.createTransport(url)
+              : nodemailer.createTransport({ host, port: Number(cfg.SMTP_PORT) || 587, secure: /^(1|true|yes|on)$/i.test(cfg.SMTP_SECURE || "") || Number(cfg.SMTP_PORT) === 465, auth: cfg.SMTP_USER ? { user: cfg.SMTP_USER, pass: cfg.SMTP_PASS } : undefined });
+            await transport.verify();
+            return done({ ok: true, detail: "connection + auth OK" });
+          }
+          const net = await import("node:net");
+          let h = host;
+          let prt = Number(cfg.SMTP_PORT) || 587;
+          if (url) {
+            const u = new URL(url.replace(/^smtps?:\/\//, "http://"));
+            h = u.hostname;
+            prt = Number(u.port) || (url.startsWith("smtps") ? 465 : 587);
+          }
+          await new Promise((resolve, reject) => {
+            const s = net.connect(prt, h, () => {
+              s.end();
+              resolve();
+            });
+            s.setTimeout(5000, () => {
+              s.destroy();
+              reject(new Error("timeout"));
+            });
+            s.on("error", reject);
+          });
+          done({ ok: true, detail: `${h}:${prt} reachable — enable the mailer add-on for a full auth test` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
+    // verify the AI provider key (or gateway token) with a 1-token live call.
+    if (req.method === "POST" && p === "/setup/test-ai") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const provider = cfg.AI_PROVIDER || "anthropic";
+          const key = { anthropic: cfg.ANTHROPIC_API_KEY, openai: cfg.OPENAI_API_KEY, gemini: cfg.GEMINI_API_KEY }[provider];
+          let url, headers, payload, label;
+          if (key) {
+            label = provider + " key";
+            if (provider === "anthropic") {
+              url = "https://api.anthropic.com/v1/messages";
+              headers = { "x-api-key": key, "anthropic-version": "2023-06-01", "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else if (provider === "openai") {
+              url = "https://api.openai.com/v1/chat/completions";
+              headers = { authorization: "Bearer " + key, "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "gpt-4o-mini", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else {
+              url = `https://generativelanguage.googleapis.com/v1beta/models/gemini-2.0-flash:generateContent?key=${key}`;
+              headers = { "content-type": "application/json" };
+              payload = { contents: [{ parts: [{ text: "hi" }] }] };
+            }
+          } else if (cfg.VOLT_AI_TOKEN) {
+            label = "hosted gateway";
+            url = cfg.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai";
+            headers = { authorization: "Bearer " + cfg.VOLT_AI_TOKEN, "content-type": "application/json" };
+            payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+          } else {
+            return done({ ok: false, error: "no AI key or VOLT_AI_TOKEN set" });
+          }
+          const r = await fetch(url, { method: "POST", headers, body: JSON.stringify(payload) });
+          if (r.ok) return done({ ok: true, detail: `${label} works` });
+          done({ ok: false, error: `${r.status}: ${(await r.text()).slice(0, 120)}` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
     if (req.method === "POST" && p === "/setup/apply") {
       let body = "";
       req.on("data", (c) => (body += c));
@@ -785,7 +909,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/blog/setup/setup.js

@@ -39,6 +39,12 @@ const state = signal({
 const set = (patch) => state({ ...state(), ...patch });
 const toggle = (n) => state({ ...state(), addons: { ...state().addons, [n]: !state().addons[n] } });
 const status = signal("");
+// per-test inline results (shown right next to each Test button)
+const dbTest = signal("");
+const smtpTest = signal("");
+const aiTest = signal("");
+const testResult = (m) => (m ? html`<span class="small ms-2 ${m.startsWith("✓") ? "text-success" : m.startsWith("✗") ? "text-danger" : "text-muted"}">${m}</span>` : "");
+const envObj = () => Object.fromEntries(env().split("\n").filter((l) => /^[A-Za-z0-9_]+=/.test(l)).map((l) => { const i = l.indexOf("="); return [l.slice(0, i), l.slice(i + 1)]; }));
 
 // selected add-ons, dependencies expanded, in display order
 function effective(s) {
@@ -149,12 +155,30 @@ async function testDb() {
   } else if (s.dbDriver === "mysql" || s.dbDriver === "postgres") {
     e.DATABASE_URL = s.dbUrl;
   }
-  status("Testing connection…");
+  dbTest("Testing…");
   try {
     const r = await (await fetch("/setup/test-db", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: e }) })).json();
-    status(r.ok ? `✓ Connected (${r.driver}).` : `✗ ${r.error}`);
+    dbTest(r.ok ? `✓ Connected (${r.driver})` : `✗ ${r.error}`);
   } catch {
-    status("Network error testing connection.");
+    dbTest("✗ network error");
+  }
+}
+async function testSmtp() {
+  smtpTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-smtp", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    smtpTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    smtpTest("✗ network error");
+  }
+}
+async function testAi() {
+  aiTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-ai", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    aiTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    aiTest("✗ network error");
   }
 }
 
@@ -221,7 +245,7 @@ const dbSettings = () =>
         : dbDriver() === "mysql" || dbDriver() === "postgres"
           ? field("DATABASE_URL", "dbUrl", dbDriver() + "://user:pass@host/db")
           : null}
-    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>` : null)}`;
+    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>${() => testResult(dbTest())}` : null)}`;
 
 const mediaSettings = () =>
   html`<div class="mb-2">
@@ -270,6 +294,7 @@ const aiSettings = () =>
       ${field("API key", "aiKey", "sk-…")}
       <div class="small text-muted mt-2 mb-1">— or — no key? Use the hosted tier (free, capped, then pay-as-you-go):</div>
       ${() => (state().aiToken ? html`<div class="small">Hosted token: <code>${state().aiToken.slice(0, 14)}…</code> <button class="btn btn-sm btn-link p-0 ms-1" onclick=${() => set({ aiToken: "" })}>clear</button></div>` : html`<button class="btn btn-sm btn-outline-secondary" onclick=${genToken}>Generate a free hosted token</button>`)}
+      <div class="mt-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testAi}>Test AI</button>${() => testResult(aiTest())}</div>
     </div>
   </details>`;
 
@@ -323,6 +348,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +360,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }
@@ -415,7 +442,7 @@ const configView = () =>
       ${field("SITE_NAME", "siteName", "My Site")}
       ${() => (hasContent() ? themePicker() : null)}
       ${() => (hasDb() ? dbSettings() : null)}
-      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}` : null)}
+      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}<div class="mb-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testSmtp}>Test SMTP</button>${() => testResult(smtpTest())}</div>` : null)}
       ${() => (hasMedia() ? mediaSettings() : null)}
       ${aiSettings()}
       ${field("SITE_URL (optional — absolute links, RSS, canonical)", "siteUrl", "https://example.com")}

package/templates/default/server.js

@@ -440,6 +440,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -538,6 +564,104 @@ function startSetup() {
       });
       return;
     }
+    // verify SMTP creds (form values merged over the saved .env) — auth check via
+    // nodemailer if available, else a TCP reachability check.
+    if (req.method === "POST" && p === "/setup/test-smtp") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const url = cfg.SMTP_URL;
+          const host = cfg.SMTP_HOST;
+          if (!url && !host) return done({ ok: false, error: "no SMTP config (set SMTP_URL or SMTP_HOST)" });
+          let nodemailer;
+          try {
+            nodemailer = (await import("nodemailer")).default;
+          } catch {
+            /* not installed */
+          }
+          if (nodemailer) {
+            const transport = url
+              ? nodemailer.createTransport(url)
+              : nodemailer.createTransport({ host, port: Number(cfg.SMTP_PORT) || 587, secure: /^(1|true|yes|on)$/i.test(cfg.SMTP_SECURE || "") || Number(cfg.SMTP_PORT) === 465, auth: cfg.SMTP_USER ? { user: cfg.SMTP_USER, pass: cfg.SMTP_PASS } : undefined });
+            await transport.verify();
+            return done({ ok: true, detail: "connection + auth OK" });
+          }
+          const net = await import("node:net");
+          let h = host;
+          let prt = Number(cfg.SMTP_PORT) || 587;
+          if (url) {
+            const u = new URL(url.replace(/^smtps?:\/\//, "http://"));
+            h = u.hostname;
+            prt = Number(u.port) || (url.startsWith("smtps") ? 465 : 587);
+          }
+          await new Promise((resolve, reject) => {
+            const s = net.connect(prt, h, () => {
+              s.end();
+              resolve();
+            });
+            s.setTimeout(5000, () => {
+              s.destroy();
+              reject(new Error("timeout"));
+            });
+            s.on("error", reject);
+          });
+          done({ ok: true, detail: `${h}:${prt} reachable — enable the mailer add-on for a full auth test` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
+    // verify the AI provider key (or gateway token) with a 1-token live call.
+    if (req.method === "POST" && p === "/setup/test-ai") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const provider = cfg.AI_PROVIDER || "anthropic";
+          const key = { anthropic: cfg.ANTHROPIC_API_KEY, openai: cfg.OPENAI_API_KEY, gemini: cfg.GEMINI_API_KEY }[provider];
+          let url, headers, payload, label;
+          if (key) {
+            label = provider + " key";
+            if (provider === "anthropic") {
+              url = "https://api.anthropic.com/v1/messages";
+              headers = { "x-api-key": key, "anthropic-version": "2023-06-01", "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else if (provider === "openai") {
+              url = "https://api.openai.com/v1/chat/completions";
+              headers = { authorization: "Bearer " + key, "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "gpt-4o-mini", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else {
+              url = `https://generativelanguage.googleapis.com/v1beta/models/gemini-2.0-flash:generateContent?key=${key}`;
+              headers = { "content-type": "application/json" };
+              payload = { contents: [{ parts: [{ text: "hi" }] }] };
+            }
+          } else if (cfg.VOLT_AI_TOKEN) {
+            label = "hosted gateway";
+            url = cfg.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai";
+            headers = { authorization: "Bearer " + cfg.VOLT_AI_TOKEN, "content-type": "application/json" };
+            payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+          } else {
+            return done({ ok: false, error: "no AI key or VOLT_AI_TOKEN set" });
+          }
+          const r = await fetch(url, { method: "POST", headers, body: JSON.stringify(payload) });
+          if (r.ok) return done({ ok: true, detail: `${label} works` });
+          done({ ok: false, error: `${r.status}: ${(await r.text()).slice(0, 120)}` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
     if (req.method === "POST" && p === "/setup/apply") {
       let body = "";
       req.on("data", (c) => (body += c));
@@ -785,7 +909,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/default/setup/setup.js

@@ -39,6 +39,12 @@ const state = signal({
 const set = (patch) => state({ ...state(), ...patch });
 const toggle = (n) => state({ ...state(), addons: { ...state().addons, [n]: !state().addons[n] } });
 const status = signal("");
+// per-test inline results (shown right next to each Test button)
+const dbTest = signal("");
+const smtpTest = signal("");
+const aiTest = signal("");
+const testResult = (m) => (m ? html`<span class="small ms-2 ${m.startsWith("✓") ? "text-success" : m.startsWith("✗") ? "text-danger" : "text-muted"}">${m}</span>` : "");
+const envObj = () => Object.fromEntries(env().split("\n").filter((l) => /^[A-Za-z0-9_]+=/.test(l)).map((l) => { const i = l.indexOf("="); return [l.slice(0, i), l.slice(i + 1)]; }));
 
 // selected add-ons, dependencies expanded, in display order
 function effective(s) {
@@ -149,12 +155,30 @@ async function testDb() {
   } else if (s.dbDriver === "mysql" || s.dbDriver === "postgres") {
     e.DATABASE_URL = s.dbUrl;
   }
-  status("Testing connection…");
+  dbTest("Testing…");
   try {
     const r = await (await fetch("/setup/test-db", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: e }) })).json();
-    status(r.ok ? `✓ Connected (${r.driver}).` : `✗ ${r.error}`);
+    dbTest(r.ok ? `✓ Connected (${r.driver})` : `✗ ${r.error}`);
   } catch {
-    status("Network error testing connection.");
+    dbTest("✗ network error");
+  }
+}
+async function testSmtp() {
+  smtpTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-smtp", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    smtpTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    smtpTest("✗ network error");
+  }
+}
+async function testAi() {
+  aiTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-ai", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    aiTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    aiTest("✗ network error");
   }
 }
 
@@ -221,7 +245,7 @@ const dbSettings = () =>
         : dbDriver() === "mysql" || dbDriver() === "postgres"
           ? field("DATABASE_URL", "dbUrl", dbDriver() + "://user:pass@host/db")
           : null}
-    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>` : null)}`;
+    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>${() => testResult(dbTest())}` : null)}`;
 
 const mediaSettings = () =>
   html`<div class="mb-2">
@@ -270,6 +294,7 @@ const aiSettings = () =>
       ${field("API key", "aiKey", "sk-…")}
       <div class="small text-muted mt-2 mb-1">— or — no key? Use the hosted tier (free, capped, then pay-as-you-go):</div>
       ${() => (state().aiToken ? html`<div class="small">Hosted token: <code>${state().aiToken.slice(0, 14)}…</code> <button class="btn btn-sm btn-link p-0 ms-1" onclick=${() => set({ aiToken: "" })}>clear</button></div>` : html`<button class="btn btn-sm btn-outline-secondary" onclick=${genToken}>Generate a free hosted token</button>`)}
+      <div class="mt-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testAi}>Test AI</button>${() => testResult(aiTest())}</div>
     </div>
   </details>`;
 
@@ -323,6 +348,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +360,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }
@@ -415,7 +442,7 @@ const configView = () =>
       ${field("SITE_NAME", "siteName", "My Site")}
       ${() => (hasContent() ? themePicker() : null)}
       ${() => (hasDb() ? dbSettings() : null)}
-      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}` : null)}
+      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}<div class="mb-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testSmtp}>Test SMTP</button>${() => testResult(smtpTest())}</div>` : null)}
       ${() => (hasMedia() ? mediaSettings() : null)}
       ${aiSettings()}
       ${field("SITE_URL (optional — absolute links, RSS, canonical)", "siteUrl", "https://example.com")}

package/templates/docs/server.js

@@ -440,6 +440,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -538,6 +564,104 @@ function startSetup() {
       });
       return;
     }
+    // verify SMTP creds (form values merged over the saved .env) — auth check via
+    // nodemailer if available, else a TCP reachability check.
+    if (req.method === "POST" && p === "/setup/test-smtp") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const url = cfg.SMTP_URL;
+          const host = cfg.SMTP_HOST;
+          if (!url && !host) return done({ ok: false, error: "no SMTP config (set SMTP_URL or SMTP_HOST)" });
+          let nodemailer;
+          try {
+            nodemailer = (await import("nodemailer")).default;
+          } catch {
+            /* not installed */
+          }
+          if (nodemailer) {
+            const transport = url
+              ? nodemailer.createTransport(url)
+              : nodemailer.createTransport({ host, port: Number(cfg.SMTP_PORT) || 587, secure: /^(1|true|yes|on)$/i.test(cfg.SMTP_SECURE || "") || Number(cfg.SMTP_PORT) === 465, auth: cfg.SMTP_USER ? { user: cfg.SMTP_USER, pass: cfg.SMTP_PASS } : undefined });
+            await transport.verify();
+            return done({ ok: true, detail: "connection + auth OK" });
+          }
+          const net = await import("node:net");
+          let h = host;
+          let prt = Number(cfg.SMTP_PORT) || 587;
+          if (url) {
+            const u = new URL(url.replace(/^smtps?:\/\//, "http://"));
+            h = u.hostname;
+            prt = Number(u.port) || (url.startsWith("smtps") ? 465 : 587);
+          }
+          await new Promise((resolve, reject) => {
+            const s = net.connect(prt, h, () => {
+              s.end();
+              resolve();
+            });
+            s.setTimeout(5000, () => {
+              s.destroy();
+              reject(new Error("timeout"));
+            });
+            s.on("error", reject);
+          });
+          done({ ok: true, detail: `${h}:${prt} reachable — enable the mailer add-on for a full auth test` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
+    // verify the AI provider key (or gateway token) with a 1-token live call.
+    if (req.method === "POST" && p === "/setup/test-ai") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const provider = cfg.AI_PROVIDER || "anthropic";
+          const key = { anthropic: cfg.ANTHROPIC_API_KEY, openai: cfg.OPENAI_API_KEY, gemini: cfg.GEMINI_API_KEY }[provider];
+          let url, headers, payload, label;
+          if (key) {
+            label = provider + " key";
+            if (provider === "anthropic") {
+              url = "https://api.anthropic.com/v1/messages";
+              headers = { "x-api-key": key, "anthropic-version": "2023-06-01", "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else if (provider === "openai") {
+              url = "https://api.openai.com/v1/chat/completions";
+              headers = { authorization: "Bearer " + key, "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "gpt-4o-mini", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else {
+              url = `https://generativelanguage.googleapis.com/v1beta/models/gemini-2.0-flash:generateContent?key=${key}`;
+              headers = { "content-type": "application/json" };
+              payload = { contents: [{ parts: [{ text: "hi" }] }] };
+            }
+          } else if (cfg.VOLT_AI_TOKEN) {
+            label = "hosted gateway";
+            url = cfg.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai";
+            headers = { authorization: "Bearer " + cfg.VOLT_AI_TOKEN, "content-type": "application/json" };
+            payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+          } else {
+            return done({ ok: false, error: "no AI key or VOLT_AI_TOKEN set" });
+          }
+          const r = await fetch(url, { method: "POST", headers, body: JSON.stringify(payload) });
+          if (r.ok) return done({ ok: true, detail: `${label} works` });
+          done({ ok: false, error: `${r.status}: ${(await r.text()).slice(0, 120)}` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
     if (req.method === "POST" && p === "/setup/apply") {
       let body = "";
       req.on("data", (c) => (body += c));
@@ -785,7 +909,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/docs/setup/setup.js

@@ -39,6 +39,12 @@ const state = signal({
 const set = (patch) => state({ ...state(), ...patch });
 const toggle = (n) => state({ ...state(), addons: { ...state().addons, [n]: !state().addons[n] } });
 const status = signal("");
+// per-test inline results (shown right next to each Test button)
+const dbTest = signal("");
+const smtpTest = signal("");
+const aiTest = signal("");
+const testResult = (m) => (m ? html`<span class="small ms-2 ${m.startsWith("✓") ? "text-success" : m.startsWith("✗") ? "text-danger" : "text-muted"}">${m}</span>` : "");
+const envObj = () => Object.fromEntries(env().split("\n").filter((l) => /^[A-Za-z0-9_]+=/.test(l)).map((l) => { const i = l.indexOf("="); return [l.slice(0, i), l.slice(i + 1)]; }));
 
 // selected add-ons, dependencies expanded, in display order
 function effective(s) {
@@ -149,12 +155,30 @@ async function testDb() {
   } else if (s.dbDriver === "mysql" || s.dbDriver === "postgres") {
     e.DATABASE_URL = s.dbUrl;
   }
-  status("Testing connection…");
+  dbTest("Testing…");
   try {
     const r = await (await fetch("/setup/test-db", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: e }) })).json();
-    status(r.ok ? `✓ Connected (${r.driver}).` : `✗ ${r.error}`);
+    dbTest(r.ok ? `✓ Connected (${r.driver})` : `✗ ${r.error}`);
   } catch {
-    status("Network error testing connection.");
+    dbTest("✗ network error");
+  }
+}
+async function testSmtp() {
+  smtpTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-smtp", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    smtpTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    smtpTest("✗ network error");
+  }
+}
+async function testAi() {
+  aiTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-ai", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    aiTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    aiTest("✗ network error");
   }
 }
 
@@ -221,7 +245,7 @@ const dbSettings = () =>
         : dbDriver() === "mysql" || dbDriver() === "postgres"
           ? field("DATABASE_URL", "dbUrl", dbDriver() + "://user:pass@host/db")
           : null}
-    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>` : null)}`;
+    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>${() => testResult(dbTest())}` : null)}`;
 
 const mediaSettings = () =>
   html`<div class="mb-2">
@@ -270,6 +294,7 @@ const aiSettings = () =>
       ${field("API key", "aiKey", "sk-…")}
       <div class="small text-muted mt-2 mb-1">— or — no key? Use the hosted tier (free, capped, then pay-as-you-go):</div>
       ${() => (state().aiToken ? html`<div class="small">Hosted token: <code>${state().aiToken.slice(0, 14)}…</code> <button class="btn btn-sm btn-link p-0 ms-1" onclick=${() => set({ aiToken: "" })}>clear</button></div>` : html`<button class="btn btn-sm btn-outline-secondary" onclick=${genToken}>Generate a free hosted token</button>`)}
+      <div class="mt-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testAi}>Test AI</button>${() => testResult(aiTest())}</div>
     </div>
   </details>`;
 
@@ -323,6 +348,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +360,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }
@@ -415,7 +442,7 @@ const configView = () =>
       ${field("SITE_NAME", "siteName", "My Site")}
       ${() => (hasContent() ? themePicker() : null)}
       ${() => (hasDb() ? dbSettings() : null)}
-      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}` : null)}
+      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}<div class="mb-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testSmtp}>Test SMTP</button>${() => testResult(smtpTest())}</div>` : null)}
       ${() => (hasMedia() ? mediaSettings() : null)}
       ${aiSettings()}
       ${field("SITE_URL (optional — absolute links, RSS, canonical)", "siteUrl", "https://example.com")}

package/templates/starter/server.js

@@ -466,6 +466,32 @@ function startSetup() {
       });
       return;
     }
+    // --- active theme's CSS, so the in-config editor renders pages themed ---
+    if (req.method === "GET" && p === "/setup/theme-css") {
+      res.setHeader("Content-Type", "text/css; charset=utf-8");
+      (async () => {
+        const theme = (readEnvFile().THEME || "").trim();
+        const load = async (rel) => {
+          try {
+            return (await imp(rel)).css || "";
+          } catch {
+            return null;
+          }
+        };
+        let css = null;
+        if (theme) css = await load(path.join(".volt", "themes", theme, "index.js"));
+        if (css == null && fs.existsSync(path.join(__dirname, "pages", "_theme.js"))) css = await load(path.join("pages", "_theme.js"));
+        if (css == null && theme) {
+          try {
+            css = (await import(`volt-theme-${theme}`)).css || "";
+          } catch {
+            css = null;
+          }
+        }
+        res.end(css || "");
+      })();
+      return;
+    }
     // --- content manager: list / read / write / delete pages + posts ---
     if (req.method === "GET" && p === "/setup/content") {
       const list = (type) => {
@@ -564,6 +590,104 @@ function startSetup() {
       });
       return;
     }
+    // verify SMTP creds (form values merged over the saved .env) — auth check via
+    // nodemailer if available, else a TCP reachability check.
+    if (req.method === "POST" && p === "/setup/test-smtp") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const url = cfg.SMTP_URL;
+          const host = cfg.SMTP_HOST;
+          if (!url && !host) return done({ ok: false, error: "no SMTP config (set SMTP_URL or SMTP_HOST)" });
+          let nodemailer;
+          try {
+            nodemailer = (await import("nodemailer")).default;
+          } catch {
+            /* not installed */
+          }
+          if (nodemailer) {
+            const transport = url
+              ? nodemailer.createTransport(url)
+              : nodemailer.createTransport({ host, port: Number(cfg.SMTP_PORT) || 587, secure: /^(1|true|yes|on)$/i.test(cfg.SMTP_SECURE || "") || Number(cfg.SMTP_PORT) === 465, auth: cfg.SMTP_USER ? { user: cfg.SMTP_USER, pass: cfg.SMTP_PASS } : undefined });
+            await transport.verify();
+            return done({ ok: true, detail: "connection + auth OK" });
+          }
+          const net = await import("node:net");
+          let h = host;
+          let prt = Number(cfg.SMTP_PORT) || 587;
+          if (url) {
+            const u = new URL(url.replace(/^smtps?:\/\//, "http://"));
+            h = u.hostname;
+            prt = Number(u.port) || (url.startsWith("smtps") ? 465 : 587);
+          }
+          await new Promise((resolve, reject) => {
+            const s = net.connect(prt, h, () => {
+              s.end();
+              resolve();
+            });
+            s.setTimeout(5000, () => {
+              s.destroy();
+              reject(new Error("timeout"));
+            });
+            s.on("error", reject);
+          });
+          done({ ok: true, detail: `${h}:${prt} reachable — enable the mailer add-on for a full auth test` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
+    // verify the AI provider key (or gateway token) with a 1-token live call.
+    if (req.method === "POST" && p === "/setup/test-ai") {
+      let body = "";
+      req.on("data", (c) => (body += c));
+      req.on("end", async () => {
+        res.setHeader("Content-Type", "application/json");
+        const done = (o) => res.end(JSON.stringify(o));
+        try {
+          const { env = {} } = JSON.parse(body || "{}");
+          const cfg = { ...readEnvFile(), ...env };
+          const provider = cfg.AI_PROVIDER || "anthropic";
+          const key = { anthropic: cfg.ANTHROPIC_API_KEY, openai: cfg.OPENAI_API_KEY, gemini: cfg.GEMINI_API_KEY }[provider];
+          let url, headers, payload, label;
+          if (key) {
+            label = provider + " key";
+            if (provider === "anthropic") {
+              url = "https://api.anthropic.com/v1/messages";
+              headers = { "x-api-key": key, "anthropic-version": "2023-06-01", "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else if (provider === "openai") {
+              url = "https://api.openai.com/v1/chat/completions";
+              headers = { authorization: "Bearer " + key, "content-type": "application/json" };
+              payload = { model: cfg.AI_MODEL || "gpt-4o-mini", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+            } else {
+              url = `https://generativelanguage.googleapis.com/v1beta/models/gemini-2.0-flash:generateContent?key=${key}`;
+              headers = { "content-type": "application/json" };
+              payload = { contents: [{ parts: [{ text: "hi" }] }] };
+            }
+          } else if (cfg.VOLT_AI_TOKEN) {
+            label = "hosted gateway";
+            url = cfg.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai";
+            headers = { authorization: "Bearer " + cfg.VOLT_AI_TOKEN, "content-type": "application/json" };
+            payload = { model: cfg.AI_MODEL || "claude-haiku-4-5", max_tokens: 1, messages: [{ role: "user", content: "hi" }] };
+          } else {
+            return done({ ok: false, error: "no AI key or VOLT_AI_TOKEN set" });
+          }
+          const r = await fetch(url, { method: "POST", headers, body: JSON.stringify(payload) });
+          if (r.ok) return done({ ok: true, detail: `${label} works` });
+          done({ ok: false, error: `${r.status}: ${(await r.text()).slice(0, 120)}` });
+        } catch (e) {
+          done({ ok: false, error: e.message });
+        }
+      });
+      return;
+    }
     if (req.method === "POST" && p === "/setup/apply") {
       let body = "";
       req.on("data", (c) => (body += c));
@@ -811,7 +935,7 @@ async function startLogs() {
       const f = sources()[u.searchParams.get("source")];
       if (!f) return json(res, { ok: false });
       const parsed = tail(f, 5000).map((l) => parseLine(l));
-      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.bot).length, attacks: parsed.filter((x) => x && x.attack).length });
+      return json(res, { ok: true, total: parsed.length, paths: top(parsed, "path"), statuses: top(parsed, "status"), ips: top(parsed, "ip"), bots: parsed.filter((x) => x && x.isBot).length, attacks: parsed.filter((x) => x && x.isAttack).length });
     }
     // add/remove a source ("add servers") — written to .volt/logs.json
     if (req.method === "POST" && (p === "/api/source" || p === "/api/source/remove")) {

package/templates/starter/setup/setup.js

@@ -39,6 +39,12 @@ const state = signal({
 const set = (patch) => state({ ...state(), ...patch });
 const toggle = (n) => state({ ...state(), addons: { ...state().addons, [n]: !state().addons[n] } });
 const status = signal("");
+// per-test inline results (shown right next to each Test button)
+const dbTest = signal("");
+const smtpTest = signal("");
+const aiTest = signal("");
+const testResult = (m) => (m ? html`<span class="small ms-2 ${m.startsWith("✓") ? "text-success" : m.startsWith("✗") ? "text-danger" : "text-muted"}">${m}</span>` : "");
+const envObj = () => Object.fromEntries(env().split("\n").filter((l) => /^[A-Za-z0-9_]+=/.test(l)).map((l) => { const i = l.indexOf("="); return [l.slice(0, i), l.slice(i + 1)]; }));
 
 // selected add-ons, dependencies expanded, in display order
 function effective(s) {
@@ -149,12 +155,30 @@ async function testDb() {
   } else if (s.dbDriver === "mysql" || s.dbDriver === "postgres") {
     e.DATABASE_URL = s.dbUrl;
   }
-  status("Testing connection…");
+  dbTest("Testing…");
   try {
     const r = await (await fetch("/setup/test-db", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: e }) })).json();
-    status(r.ok ? `✓ Connected (${r.driver}).` : `✗ ${r.error}`);
+    dbTest(r.ok ? `✓ Connected (${r.driver})` : `✗ ${r.error}`);
   } catch {
-    status("Network error testing connection.");
+    dbTest("✗ network error");
+  }
+}
+async function testSmtp() {
+  smtpTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-smtp", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    smtpTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    smtpTest("✗ network error");
+  }
+}
+async function testAi() {
+  aiTest("Testing…");
+  try {
+    const r = await (await fetch("/setup/test-ai", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ env: envObj() }) })).json();
+    aiTest(r.ok ? `✓ ${r.detail || "OK"}` : `✗ ${r.error}`);
+  } catch {
+    aiTest("✗ network error");
   }
 }
 
@@ -221,7 +245,7 @@ const dbSettings = () =>
         : dbDriver() === "mysql" || dbDriver() === "postgres"
           ? field("DATABASE_URL", "dbUrl", dbDriver() + "://user:pass@host/db")
           : null}
-    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>` : null)}`;
+    ${() => (dbDriver() !== "memory" ? html`<button class="btn btn-sm btn-outline-secondary mb-2" onclick=${testDb}>Test connection</button>${() => testResult(dbTest())}` : null)}`;
 
 const mediaSettings = () =>
   html`<div class="mb-2">
@@ -270,6 +294,7 @@ const aiSettings = () =>
       ${field("API key", "aiKey", "sk-…")}
       <div class="small text-muted mt-2 mb-1">— or — no key? Use the hosted tier (free, capped, then pay-as-you-go):</div>
       ${() => (state().aiToken ? html`<div class="small">Hosted token: <code>${state().aiToken.slice(0, 14)}…</code> <button class="btn btn-sm btn-link p-0 ms-1" onclick=${() => set({ aiToken: "" })}>clear</button></div>` : html`<button class="btn btn-sm btn-outline-secondary" onclick=${genToken}>Generate a free hosted token</button>`)}
+      <div class="mt-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testAi}>Test AI</button>${() => testResult(aiTest())}</div>
     </div>
   </details>`;
 
@@ -323,6 +348,8 @@ async function genToken() {
 const items = signal({ pages: [], posts: [] });
 const editing = signal(null); // { type, slug, title, isNew } — set only on open/save/close
 let ed = null; // live RTEPro instance for the open editor
+let themeCss = ""; // active theme's CSS, so the editor renders pages themed
+fetch("/setup/theme-css").then((r) => r.text()).then((c) => { themeCss = c; }).catch(() => {});
 const loadItems = async () => items(await (await fetch("/setup/content")).json());
 // raw .md → { title, body, isHtml }; RTEPro takes markdown directly (setMarkdown),
 // so no markdown library is needed.
@@ -333,7 +360,7 @@ function parseDoc(raw) {
   return { title, body: fm ? raw.slice(fm[0].length) : raw, isHtml: /^format:\s*html\s*$/m.test(front) };
 }
 function mountEditor(doc) {
-  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic" });
+  ed = window.RTEPro.init("#mg-editor", { height: "60vh", placeholder: "Write…", aiProxy: "/setup/ai", aiProvider: state().aiProvider || "anthropic", exportCSS: themeCss });
   if (doc && doc.isHtml) ed.setHTML(doc.body || "");
   else ed.setMarkdown((doc && doc.body) || "");
 }
@@ -415,7 +442,7 @@ const configView = () =>
       ${field("SITE_NAME", "siteName", "My Site")}
       ${() => (hasContent() ? themePicker() : null)}
       ${() => (hasDb() ? dbSettings() : null)}
-      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}` : null)}
+      ${() => (hasMailer() ? html`${field("SMTP_URL (optional)", "smtpUrl", "smtp://user:pass@smtp.host:587")}${field("MAIL_FROM", "mailFrom", "App <no-reply@you.com>")}<div class="mb-2"><button class="btn btn-sm btn-outline-secondary" onclick=${testSmtp}>Test SMTP</button>${() => testResult(smtpTest())}</div>` : null)}
       ${() => (hasMedia() ? mediaSettings() : null)}
       ${aiSettings()}
       ${field("SITE_URL (optional — absolute links, RSS, canonical)", "siteUrl", "https://example.com")}