strapi-plugin-magic-mail 2.10.8 → 2.10.10

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [2.10.10](https://github.com/Schero94/Magic-Mail/compare/v2.10.9...v2.10.10) (2026-04-21)
+
+
+### Bug Fixes
+
+* **validation:** auto-strip Strapi system metadata before .strict() check ([039b889](https://github.com/Schero94/Magic-Mail/commit/039b889d96d6a076e199bec7497304c6900b8165))
+
+## [2.10.9](https://github.com/Schero94/Magic-Mail/compare/v2.10.8...v2.10.9) (2026-04-21)
+
+
+### Bug Fixes
+
+* **email-designer:** resolve PUT 500s on template update by whitelisting payload + proper error propagation ([29dd0c0](https://github.com/Schero94/Magic-Mail/commit/29dd0c0f6744a87108323ba511246502c5c3fc84))
+
 ## [2.10.8](https://github.com/Schero94/Magic-Mail/compare/v2.10.7...v2.10.8) (2026-04-21)
 
 

package/dist/_chunks/{App-cpuAww_Y.js → App-CInlcJMb.js}

@@ -6442,12 +6442,24 @@ const EditorPage = () => {
         setSaving(false);
         return;
       }
+      const refIdRaw = templateData.templateReferenceId;
+      const refIdParsed = refIdRaw === "" || refIdRaw === null || refIdRaw === void 0 ? void 0 : Number.parseInt(refIdRaw, 10);
       const payload = {
-        ...templateData,
-        design,
+        name: templateData.name,
+        subject: templateData.subject,
         bodyHtml,
-        templateReferenceId: parseInt(templateData.templateReferenceId)
+        bodyText: templateData.bodyText,
+        design,
+        category: templateData.category,
+        isActive: templateData.isActive,
+        tags: templateData.tags
       };
+      if (Number.isFinite(refIdParsed)) {
+        payload.templateReferenceId = refIdParsed;
+      }
+      Object.keys(payload).forEach((k) => {
+        if (payload[k] === void 0) delete payload[k];
+      });
       let response;
       if (isNewTemplate) {
         response = await post("/magic-mail/designer/templates", payload);

package/dist/_chunks/{App-CDFT2wYy.mjs → App-D4bFKNcg.mjs}

@@ -6419,12 +6419,24 @@ const EditorPage = () => {
         setSaving(false);
         return;
       }
+      const refIdRaw = templateData.templateReferenceId;
+      const refIdParsed = refIdRaw === "" || refIdRaw === null || refIdRaw === void 0 ? void 0 : Number.parseInt(refIdRaw, 10);
       const payload = {
-        ...templateData,
-        design,
+        name: templateData.name,
+        subject: templateData.subject,
         bodyHtml,
-        templateReferenceId: parseInt(templateData.templateReferenceId)
+        bodyText: templateData.bodyText,
+        design,
+        category: templateData.category,
+        isActive: templateData.isActive,
+        tags: templateData.tags
       };
+      if (Number.isFinite(refIdParsed)) {
+        payload.templateReferenceId = refIdParsed;
+      }
+      Object.keys(payload).forEach((k) => {
+        if (payload[k] === void 0) delete payload[k];
+      });
       let response;
       if (isNewTemplate) {
         response = await post("/magic-mail/designer/templates", payload);

package/dist/admin/index.js

@@ -68,7 +68,7 @@ const index = {
         id: `${pluginId}.plugin.name`,
         defaultMessage: "MagicMail"
       },
-      Component: () => Promise.resolve().then(() => require("../_chunks/App-cpuAww_Y.js")),
+      Component: () => Promise.resolve().then(() => require("../_chunks/App-CInlcJMb.js")),
       permissions: pluginPermissions
     });
     app.createSettingSection(

package/dist/admin/index.mjs

@@ -67,7 +67,7 @@ const index = {
         id: `${pluginId}.plugin.name`,
         defaultMessage: "MagicMail"
       },
-      Component: () => import("../_chunks/App-CDFT2wYy.mjs"),
+      Component: () => import("../_chunks/App-D4bFKNcg.mjs"),
       permissions: pluginPermissions
     });
     app.createSettingSection(

package/dist/server/index.js

@@ -1118,29 +1118,30 @@ const schemas = {
     // a number via parseInt() before POSTing. Accepting both shapes
     // keeps the wizard working either way — the service layer stores
     // the DB column as a string regardless.
-    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional(),
-    name: safeString.optional(),
-    subject: headerSafe.optional(),
-    bodyHtml: safeText.optional(),
-    bodyText: safeText.optional(),
+    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional().nullable(),
+    // Optional/nullable mirrors the content-type schema: Strapi serves
+    // absent DB columns as `null`, and the editor re-sends the whole
+    // document on save. Accepting null avoids spurious 400s whenever a
+    // template has no category/bodyText/tags yet.
+    name: safeString.optional().nullable(),
+    subject: headerSafe.optional().nullable(),
+    bodyHtml: safeText.optional().nullable(),
+    bodyText: safeText.optional().nullable(),
     design: z.record(z.unknown()).optional().nullable(),
-    category: safeString.optional(),
-    isActive: z.boolean().optional(),
-    tags: z.array(safeString).max(50).optional()
+    category: safeString.optional().nullable(),
+    isActive: z.boolean().optional().nullable(),
+    tags: z.array(safeString).max(50).optional().nullable()
   }).strict(),
   "emailDesigner.update": z.object({
-    // Parity with emailDesigner.create. Some edit flows re-send the
-    // reference id; admitting both number and string matches what the
-    // wizard payload actually looks like over the wire.
-    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional(),
-    name: safeString.optional(),
-    subject: headerSafe.optional(),
-    bodyHtml: safeText.optional(),
-    bodyText: safeText.optional(),
+    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional().nullable(),
+    name: safeString.optional().nullable(),
+    subject: headerSafe.optional().nullable(),
+    bodyHtml: safeText.optional().nullable(),
+    bodyText: safeText.optional().nullable(),
     design: z.record(z.unknown()).optional().nullable(),
-    category: safeString.optional(),
-    isActive: z.boolean().optional(),
-    tags: z.array(safeString).max(50).optional()
+    category: safeString.optional().nullable(),
+    isActive: z.boolean().optional().nullable(),
+    tags: z.array(safeString).max(50).optional().nullable()
   }).strict(),
   "emailDesigner.renderTemplate": z.object({
     data: z.record(z.unknown()).optional()
@@ -1255,16 +1256,52 @@ const schemas = {
     phoneNumber: z.string().min(5).max(32).regex(/^[\d+\-() ]+$/)
   })
 };
+const STRAPI_METADATA_FIELDS = Object.freeze([
+  "id",
+  "documentId",
+  "createdAt",
+  "updatedAt",
+  "publishedAt",
+  "locale",
+  "localizations",
+  "createdBy",
+  "updatedBy",
+  "__component",
+  // Populated relations/components we never want to round-trip as a write:
+  "versions"
+]);
+function stripStrapiMetadata(body, schemaName) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) return body;
+  const cleaned = { ...body };
+  const removed = [];
+  for (const key of STRAPI_METADATA_FIELDS) {
+    if (key in cleaned) {
+      delete cleaned[key];
+      removed.push(key);
+    }
+  }
+  if (removed.length > 0 && typeof strapi !== "undefined" && strapi?.log?.debug) {
+    strapi.log.debug(
+      `[magic-mail] Stripped Strapi metadata from ${schemaName} payload: ${removed.join(", ")}`
+    );
+  }
+  return cleaned;
+}
 function validate$5(schemaName, body) {
   const schema = schemas[schemaName];
   if (!schema) {
     throw new Error(`Unknown validation schema: ${schemaName}`);
   }
-  const result2 = schema.safeParse(body);
+  const sanitized = stripStrapiMetadata(body, schemaName);
+  const result2 = schema.safeParse(sanitized);
   if (!result2.success) {
     const strapiErrors = require$$1__default.default.errors;
     const flattened = result2.error.flatten();
     const strapiLog = typeof strapi !== "undefined" && strapi && strapi.log ? strapi.log : null;
+    const details = { ...flattened.fieldErrors };
+    if (Array.isArray(flattened.formErrors) && flattened.formErrors.length > 0) {
+      details._form = flattened.formErrors;
+    }
     if (strapiLog) {
       strapiLog.warn(
         `[magic-mail] Validation failed for schema '${schemaName}': ` + JSON.stringify({
@@ -1273,23 +1310,38 @@ function validate$5(schemaName, body) {
         })
       );
     }
-    throw new strapiErrors.ValidationError("Validation failed", flattened.fieldErrors);
+    throw new strapiErrors.ValidationError("Validation failed", details);
   }
   return result2.data;
 }
-function handleControllerError$3(ctx, err, logPrefix, fallbackMessage) {
-  const isStrapiError = err && typeof err.status === "number" && typeof err.name === "string";
+function handleControllerError$4(ctx, err, logPrefix, fallbackMessage) {
+  const strapiErrors = require$$1__default.default.errors;
+  const knownStrapiNames = /* @__PURE__ */ new Set([
+    "ApplicationError",
+    "ValidationError",
+    "YupValidationError",
+    "PaginationError",
+    "NotFoundError",
+    "ForbiddenError",
+    "UnauthorizedError",
+    "PayloadTooLargeError",
+    "PolicyError",
+    "NotImplementedError",
+    "RateLimitError",
+    "HttpError"
+  ]);
+  const isStrapiError = err && typeof err === "object" && err instanceof strapiErrors.ApplicationError || err && typeof err.name === "string" && knownStrapiNames.has(err.name);
   if (isStrapiError) {
     strapi.log.warn(
-      `${logPrefix}: ${err.name} (${err.status}) — ${err.message}` + (err.details ? ` | details=${JSON.stringify(err.details)}` : "")
+      `${logPrefix}: ${err.name} — ${err.message}` + (err.details && Object.keys(err.details).length > 0 ? ` | details=${JSON.stringify(err.details)}` : "")
     );
     throw err;
   }
   strapi.log.error(`${logPrefix}:`, err);
   ctx.throw(500, fallbackMessage || err.message || "Internal server error");
 }
-var validation = { validate: validate$5, schemas, handleControllerError: handleControllerError$3 };
-const { validate: validate$4, handleControllerError: handleControllerError$2 } = validation;
+var validation = { validate: validate$5, schemas, handleControllerError: handleControllerError$4 };
+const { validate: validate$4, handleControllerError: handleControllerError$3 } = validation;
 function stripAttachmentPaths(body) {
   if (body && Array.isArray(body.attachments)) {
     body.attachments = body.attachments.map(({ path: path2, ...safe }) => safe);
@@ -1305,7 +1357,7 @@ var controller$1 = {
       const result2 = await emailRouter2.send(body);
       ctx.body = { success: true, ...result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error sending email", "Failed to send email");
+      handleControllerError$3(ctx, err, "[magic-mail] Error sending email", "Failed to send email");
     }
   },
   async sendMessage(ctx) {
@@ -1316,7 +1368,7 @@ var controller$1 = {
       const result2 = await emailRouter2.sendMessage(body);
       ctx.body = { success: true, ...result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error sending message", "Failed to send message");
+      handleControllerError$3(ctx, err, "[magic-mail] Error sending message", "Failed to send message");
     }
   },
   async sendWhatsApp(ctx) {
@@ -1326,7 +1378,7 @@ var controller$1 = {
       const result2 = await emailRouter2.sendWhatsApp(body);
       ctx.body = { success: true, ...result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error sending WhatsApp", "Failed to send WhatsApp message");
+      handleControllerError$3(ctx, err, "[magic-mail] Error sending WhatsApp", "Failed to send WhatsApp message");
     }
   },
   async getWhatsAppStatus(ctx) {
@@ -1354,11 +1406,11 @@ var controller$1 = {
       const result2 = await emailRouter2.checkWhatsAppNumber(phoneNumber);
       ctx.body = { success: true, data: result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error checking WhatsApp number", "Failed to check phone number");
+      handleControllerError$3(ctx, err, "[magic-mail] Error checking WhatsApp number", "Failed to check phone number");
     }
   }
 };
-const { validate: validate$3, handleControllerError: handleControllerError$1 } = validation;
+const { validate: validate$3, handleControllerError: handleControllerError$2 } = validation;
 var accounts$1 = {
   /**
    * Get all email accounts
@@ -1401,7 +1453,7 @@ var accounts$1 = {
         message: "Email account created successfully"
       };
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error creating account", "Error creating email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error creating account", "Error creating email account");
     }
   },
   /**
@@ -1419,7 +1471,7 @@ var accounts$1 = {
         data: account
       };
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error getting account", "Error fetching email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error getting account", "Error fetching email account");
     }
   },
   /**
@@ -1447,7 +1499,7 @@ var accounts$1 = {
         message: "Email account updated successfully"
       };
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error updating account", "Error updating email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error updating account", "Error updating email account");
     }
   },
   /**
@@ -1467,7 +1519,7 @@ var accounts$1 = {
       const result2 = await accountManager2.testAccount(accountId, recipientEmail, testOptions);
       ctx.body = result2;
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error testing account", "Error testing email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error testing account", "Error testing email account");
     }
   },
   /**
@@ -2116,7 +2168,7 @@ var oauth$3 = {
     }
   }
 };
-const { handleControllerError } = validation;
+const { handleControllerError: handleControllerError$1 } = validation;
 const ROUTING_RULE_UID = "plugin::magic-mail.routing-rule";
 const ALLOWED_RULE_FIELDS = [
   "name",
@@ -2152,7 +2204,7 @@ var routingRules$1 = {
         data: rules
       };
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error getting routing rules", "Error fetching routing rules");
+      handleControllerError$1(ctx, err, "[magic-mail] Error getting routing rules", "Error fetching routing rules");
     }
   },
   /**
@@ -2171,7 +2223,7 @@ var routingRules$1 = {
         data: rule2
       };
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error getting routing rule", "Error fetching routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error getting routing rule", "Error fetching routing rule");
     }
   },
   /**
@@ -2193,7 +2245,7 @@ var routingRules$1 = {
       };
       strapi.log.info(`[magic-mail] [SUCCESS] Routing rule created: ${rule2.name}`);
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error creating routing rule", "Error creating routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error creating routing rule", "Error creating routing rule");
     }
   },
   /**
@@ -2217,7 +2269,7 @@ var routingRules$1 = {
       };
       strapi.log.info(`[magic-mail] [SUCCESS] Routing rule updated: ${rule2.name}`);
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error updating routing rule", "Error updating routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error updating routing rule", "Error updating routing rule");
     }
   },
   /**
@@ -2238,7 +2290,7 @@ var routingRules$1 = {
       };
       strapi.log.info(`[magic-mail] Routing rule deleted: ${ruleId}`);
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error deleting routing rule", "Error deleting routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error deleting routing rule", "Error deleting routing rule");
     }
   }
 };
@@ -2679,7 +2731,10 @@ var license$1 = ({ strapi: strapi2 }) => ({
     }
   }
 });
-const { validate: validate$2 } = validation;
+const { validate: validate$2, handleControllerError } = validation;
+function isNotFoundMessage(err) {
+  return err && typeof err.message === "string" && err.message.includes("not found");
+}
 var emailDesigner$3 = ({ strapi: strapi2 }) => ({
   /**
    * Get all templates
@@ -2692,7 +2747,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: templates
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error listing templates");
     }
   },
   /**
@@ -2710,7 +2765,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error fetching template");
     }
   },
   /**
@@ -2724,10 +2779,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      if (error.message.includes("limit reached") || error.message.includes("already exists")) {
+      if (error && typeof error.message === "string" && (error.message.includes("limit reached") || error.message.includes("already exists"))) {
         return ctx.badRequest(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error creating template");
     }
   },
   /**
@@ -2742,10 +2797,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error updating template");
     }
   },
   /**
@@ -2760,7 +2815,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         message: "Template deleted successfully"
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      if (isNotFoundMessage(error)) {
+        return ctx.notFound(error.message);
+      }
+      handleControllerError(ctx, error, "[magic-mail] Error deleting template");
     }
   },
   /**
@@ -2775,7 +2833,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: versions
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      if (isNotFoundMessage(error)) {
+        return ctx.notFound(error.message);
+      }
+      handleControllerError(ctx, error, "[magic-mail] Error fetching versions");
     }
   },
   /**
@@ -2790,10 +2851,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error restoring version");
     }
   },
   /**
@@ -2808,13 +2869,13 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: result2
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      if (error.message.includes("does not belong")) {
+      if (error && typeof error.message === "string" && error.message.includes("does not belong")) {
         return ctx.badRequest(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error deleting version");
     }
   },
   /**
@@ -2829,10 +2890,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: result2
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error deleting all versions");
     }
   },
   /**
@@ -2848,10 +2909,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: rendered
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error rendering template");
     }
   },
   /**
@@ -2866,10 +2927,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: templates
       });
     } catch (error) {
-      if (error.message.includes("requires")) {
+      if (error && typeof error.message === "string" && error.message.includes("requires")) {
         return ctx.forbidden(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error exporting templates");
     }
   },
   /**
@@ -2887,10 +2948,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: results
       });
     } catch (error) {
-      if (error.message.includes("requires")) {
+      if (error && typeof error.message === "string" && error.message.includes("requires")) {
         return ctx.forbidden(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error importing templates");
     }
   },
   /**
@@ -2904,7 +2965,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: stats
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error fetching stats");
     }
   },
   /**
@@ -2919,7 +2980,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error fetching core template");
     }
   },
   /**
@@ -2934,7 +2995,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error updating core template");
     }
   },
   /**
@@ -2948,7 +3009,8 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
       if (!template) {
         return ctx.notFound("Template not found");
       }
-      let fileContent, fileName;
+      let fileContent;
+      let fileName;
       if (type === "json") {
         fileContent = JSON.stringify(template.design, null, 2);
         fileName = `template-${id}.json`;
@@ -2963,8 +3025,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
       ctx.set("Content-Disposition", `attachment; filename="${fileName}"`);
       ctx.send(fileContent);
     } catch (error) {
-      strapi2.log.error("[magic-mail] Error downloading template:", error.message);
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error downloading template");
     }
   },
   /**
@@ -2979,10 +3040,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: duplicated
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error duplicating template");
     }
   },
   /**
@@ -3002,7 +3063,6 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
       const rendered = await strapi2.plugin("magic-mail").service("email-designer").renderTemplate(template.templateReferenceId, {
         name: "Test User",
         email: to
-        // Add more default test variables as needed
       });
       const emailRouterService = strapi2.plugin("magic-mail").service("email-router");
       const sendOptions = {
@@ -3010,7 +3070,6 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         subject: rendered.subject || template.subject,
         html: rendered.html,
         text: rendered.text,
-        // Add template tracking info
         templateId: template.templateReferenceId,
         templateName: template.name
       };
@@ -3028,8 +3087,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         }
       });
     } catch (error) {
-      strapi2.log.error("[magic-mail] Error sending test email:", error);
-      return ctx.badRequest(error.message || "Failed to send test email");
+      handleControllerError(ctx, error, "[magic-mail] Error sending test email");
     }
   }
 });
@@ -15851,7 +15909,7 @@ var oauth$1 = ({ strapi: strapi2 }) => ({
     return account;
   }
 });
-const version = "2.10.7";
+const version = "2.10.9";
 const require$$2 = {
   version
 };

package/dist/server/index.mjs

@@ -1105,29 +1105,30 @@ const schemas = {
     // a number via parseInt() before POSTing. Accepting both shapes
     // keeps the wizard working either way — the service layer stores
     // the DB column as a string regardless.
-    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional(),
-    name: safeString.optional(),
-    subject: headerSafe.optional(),
-    bodyHtml: safeText.optional(),
-    bodyText: safeText.optional(),
+    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional().nullable(),
+    // Optional/nullable mirrors the content-type schema: Strapi serves
+    // absent DB columns as `null`, and the editor re-sends the whole
+    // document on save. Accepting null avoids spurious 400s whenever a
+    // template has no category/bodyText/tags yet.
+    name: safeString.optional().nullable(),
+    subject: headerSafe.optional().nullable(),
+    bodyHtml: safeText.optional().nullable(),
+    bodyText: safeText.optional().nullable(),
     design: z.record(z.unknown()).optional().nullable(),
-    category: safeString.optional(),
-    isActive: z.boolean().optional(),
-    tags: z.array(safeString).max(50).optional()
+    category: safeString.optional().nullable(),
+    isActive: z.boolean().optional().nullable(),
+    tags: z.array(safeString).max(50).optional().nullable()
   }).strict(),
   "emailDesigner.update": z.object({
-    // Parity with emailDesigner.create. Some edit flows re-send the
-    // reference id; admitting both number and string matches what the
-    // wizard payload actually looks like over the wire.
-    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional(),
-    name: safeString.optional(),
-    subject: headerSafe.optional(),
-    bodyHtml: safeText.optional(),
-    bodyText: safeText.optional(),
+    templateReferenceId: z.union([safeString, z.number().int().nonnegative()]).optional().nullable(),
+    name: safeString.optional().nullable(),
+    subject: headerSafe.optional().nullable(),
+    bodyHtml: safeText.optional().nullable(),
+    bodyText: safeText.optional().nullable(),
     design: z.record(z.unknown()).optional().nullable(),
-    category: safeString.optional(),
-    isActive: z.boolean().optional(),
-    tags: z.array(safeString).max(50).optional()
+    category: safeString.optional().nullable(),
+    isActive: z.boolean().optional().nullable(),
+    tags: z.array(safeString).max(50).optional().nullable()
   }).strict(),
   "emailDesigner.renderTemplate": z.object({
     data: z.record(z.unknown()).optional()
@@ -1242,16 +1243,52 @@ const schemas = {
     phoneNumber: z.string().min(5).max(32).regex(/^[\d+\-() ]+$/)
   })
 };
+const STRAPI_METADATA_FIELDS = Object.freeze([
+  "id",
+  "documentId",
+  "createdAt",
+  "updatedAt",
+  "publishedAt",
+  "locale",
+  "localizations",
+  "createdBy",
+  "updatedBy",
+  "__component",
+  // Populated relations/components we never want to round-trip as a write:
+  "versions"
+]);
+function stripStrapiMetadata(body, schemaName) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) return body;
+  const cleaned = { ...body };
+  const removed = [];
+  for (const key of STRAPI_METADATA_FIELDS) {
+    if (key in cleaned) {
+      delete cleaned[key];
+      removed.push(key);
+    }
+  }
+  if (removed.length > 0 && typeof strapi !== "undefined" && strapi?.log?.debug) {
+    strapi.log.debug(
+      `[magic-mail] Stripped Strapi metadata from ${schemaName} payload: ${removed.join(", ")}`
+    );
+  }
+  return cleaned;
+}
 function validate$5(schemaName, body) {
   const schema = schemas[schemaName];
   if (!schema) {
     throw new Error(`Unknown validation schema: ${schemaName}`);
   }
-  const result2 = schema.safeParse(body);
+  const sanitized = stripStrapiMetadata(body, schemaName);
+  const result2 = schema.safeParse(sanitized);
   if (!result2.success) {
     const strapiErrors = require$$1$2.errors;
     const flattened = result2.error.flatten();
     const strapiLog = typeof strapi !== "undefined" && strapi && strapi.log ? strapi.log : null;
+    const details = { ...flattened.fieldErrors };
+    if (Array.isArray(flattened.formErrors) && flattened.formErrors.length > 0) {
+      details._form = flattened.formErrors;
+    }
     if (strapiLog) {
       strapiLog.warn(
         `[magic-mail] Validation failed for schema '${schemaName}': ` + JSON.stringify({
@@ -1260,23 +1297,38 @@ function validate$5(schemaName, body) {
         })
       );
     }
-    throw new strapiErrors.ValidationError("Validation failed", flattened.fieldErrors);
+    throw new strapiErrors.ValidationError("Validation failed", details);
   }
   return result2.data;
 }
-function handleControllerError$3(ctx, err, logPrefix, fallbackMessage) {
-  const isStrapiError = err && typeof err.status === "number" && typeof err.name === "string";
+function handleControllerError$4(ctx, err, logPrefix, fallbackMessage) {
+  const strapiErrors = require$$1$2.errors;
+  const knownStrapiNames = /* @__PURE__ */ new Set([
+    "ApplicationError",
+    "ValidationError",
+    "YupValidationError",
+    "PaginationError",
+    "NotFoundError",
+    "ForbiddenError",
+    "UnauthorizedError",
+    "PayloadTooLargeError",
+    "PolicyError",
+    "NotImplementedError",
+    "RateLimitError",
+    "HttpError"
+  ]);
+  const isStrapiError = err && typeof err === "object" && err instanceof strapiErrors.ApplicationError || err && typeof err.name === "string" && knownStrapiNames.has(err.name);
   if (isStrapiError) {
     strapi.log.warn(
-      `${logPrefix}: ${err.name} (${err.status}) — ${err.message}` + (err.details ? ` | details=${JSON.stringify(err.details)}` : "")
+      `${logPrefix}: ${err.name} — ${err.message}` + (err.details && Object.keys(err.details).length > 0 ? ` | details=${JSON.stringify(err.details)}` : "")
     );
     throw err;
   }
   strapi.log.error(`${logPrefix}:`, err);
   ctx.throw(500, fallbackMessage || err.message || "Internal server error");
 }
-var validation = { validate: validate$5, schemas, handleControllerError: handleControllerError$3 };
-const { validate: validate$4, handleControllerError: handleControllerError$2 } = validation;
+var validation = { validate: validate$5, schemas, handleControllerError: handleControllerError$4 };
+const { validate: validate$4, handleControllerError: handleControllerError$3 } = validation;
 function stripAttachmentPaths(body) {
   if (body && Array.isArray(body.attachments)) {
     body.attachments = body.attachments.map(({ path: path2, ...safe }) => safe);
@@ -1292,7 +1344,7 @@ var controller$1 = {
       const result2 = await emailRouter2.send(body);
       ctx.body = { success: true, ...result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error sending email", "Failed to send email");
+      handleControllerError$3(ctx, err, "[magic-mail] Error sending email", "Failed to send email");
     }
   },
   async sendMessage(ctx) {
@@ -1303,7 +1355,7 @@ var controller$1 = {
       const result2 = await emailRouter2.sendMessage(body);
       ctx.body = { success: true, ...result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error sending message", "Failed to send message");
+      handleControllerError$3(ctx, err, "[magic-mail] Error sending message", "Failed to send message");
     }
   },
   async sendWhatsApp(ctx) {
@@ -1313,7 +1365,7 @@ var controller$1 = {
       const result2 = await emailRouter2.sendWhatsApp(body);
       ctx.body = { success: true, ...result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error sending WhatsApp", "Failed to send WhatsApp message");
+      handleControllerError$3(ctx, err, "[magic-mail] Error sending WhatsApp", "Failed to send WhatsApp message");
     }
   },
   async getWhatsAppStatus(ctx) {
@@ -1341,11 +1393,11 @@ var controller$1 = {
       const result2 = await emailRouter2.checkWhatsAppNumber(phoneNumber);
       ctx.body = { success: true, data: result2 };
     } catch (err) {
-      handleControllerError$2(ctx, err, "[magic-mail] Error checking WhatsApp number", "Failed to check phone number");
+      handleControllerError$3(ctx, err, "[magic-mail] Error checking WhatsApp number", "Failed to check phone number");
     }
   }
 };
-const { validate: validate$3, handleControllerError: handleControllerError$1 } = validation;
+const { validate: validate$3, handleControllerError: handleControllerError$2 } = validation;
 var accounts$1 = {
   /**
    * Get all email accounts
@@ -1388,7 +1440,7 @@ var accounts$1 = {
         message: "Email account created successfully"
       };
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error creating account", "Error creating email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error creating account", "Error creating email account");
     }
   },
   /**
@@ -1406,7 +1458,7 @@ var accounts$1 = {
         data: account
       };
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error getting account", "Error fetching email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error getting account", "Error fetching email account");
     }
   },
   /**
@@ -1434,7 +1486,7 @@ var accounts$1 = {
         message: "Email account updated successfully"
       };
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error updating account", "Error updating email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error updating account", "Error updating email account");
     }
   },
   /**
@@ -1454,7 +1506,7 @@ var accounts$1 = {
       const result2 = await accountManager2.testAccount(accountId, recipientEmail, testOptions);
       ctx.body = result2;
     } catch (err) {
-      handleControllerError$1(ctx, err, "[magic-mail] Error testing account", "Error testing email account");
+      handleControllerError$2(ctx, err, "[magic-mail] Error testing account", "Error testing email account");
     }
   },
   /**
@@ -2103,7 +2155,7 @@ var oauth$3 = {
     }
   }
 };
-const { handleControllerError } = validation;
+const { handleControllerError: handleControllerError$1 } = validation;
 const ROUTING_RULE_UID = "plugin::magic-mail.routing-rule";
 const ALLOWED_RULE_FIELDS = [
   "name",
@@ -2139,7 +2191,7 @@ var routingRules$1 = {
         data: rules
       };
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error getting routing rules", "Error fetching routing rules");
+      handleControllerError$1(ctx, err, "[magic-mail] Error getting routing rules", "Error fetching routing rules");
     }
   },
   /**
@@ -2158,7 +2210,7 @@ var routingRules$1 = {
         data: rule2
       };
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error getting routing rule", "Error fetching routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error getting routing rule", "Error fetching routing rule");
     }
   },
   /**
@@ -2180,7 +2232,7 @@ var routingRules$1 = {
       };
       strapi.log.info(`[magic-mail] [SUCCESS] Routing rule created: ${rule2.name}`);
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error creating routing rule", "Error creating routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error creating routing rule", "Error creating routing rule");
     }
   },
   /**
@@ -2204,7 +2256,7 @@ var routingRules$1 = {
       };
       strapi.log.info(`[magic-mail] [SUCCESS] Routing rule updated: ${rule2.name}`);
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error updating routing rule", "Error updating routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error updating routing rule", "Error updating routing rule");
     }
   },
   /**
@@ -2225,7 +2277,7 @@ var routingRules$1 = {
       };
       strapi.log.info(`[magic-mail] Routing rule deleted: ${ruleId}`);
     } catch (err) {
-      handleControllerError(ctx, err, "[magic-mail] Error deleting routing rule", "Error deleting routing rule");
+      handleControllerError$1(ctx, err, "[magic-mail] Error deleting routing rule", "Error deleting routing rule");
     }
   }
 };
@@ -2666,7 +2718,10 @@ var license$1 = ({ strapi: strapi2 }) => ({
     }
   }
 });
-const { validate: validate$2 } = validation;
+const { validate: validate$2, handleControllerError } = validation;
+function isNotFoundMessage(err) {
+  return err && typeof err.message === "string" && err.message.includes("not found");
+}
 var emailDesigner$3 = ({ strapi: strapi2 }) => ({
   /**
    * Get all templates
@@ -2679,7 +2734,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: templates
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error listing templates");
     }
   },
   /**
@@ -2697,7 +2752,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error fetching template");
     }
   },
   /**
@@ -2711,10 +2766,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      if (error.message.includes("limit reached") || error.message.includes("already exists")) {
+      if (error && typeof error.message === "string" && (error.message.includes("limit reached") || error.message.includes("already exists"))) {
         return ctx.badRequest(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error creating template");
     }
   },
   /**
@@ -2729,10 +2784,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error updating template");
     }
   },
   /**
@@ -2747,7 +2802,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         message: "Template deleted successfully"
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      if (isNotFoundMessage(error)) {
+        return ctx.notFound(error.message);
+      }
+      handleControllerError(ctx, error, "[magic-mail] Error deleting template");
     }
   },
   /**
@@ -2762,7 +2820,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: versions
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      if (isNotFoundMessage(error)) {
+        return ctx.notFound(error.message);
+      }
+      handleControllerError(ctx, error, "[magic-mail] Error fetching versions");
     }
   },
   /**
@@ -2777,10 +2838,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error restoring version");
     }
   },
   /**
@@ -2795,13 +2856,13 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: result2
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      if (error.message.includes("does not belong")) {
+      if (error && typeof error.message === "string" && error.message.includes("does not belong")) {
         return ctx.badRequest(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error deleting version");
     }
   },
   /**
@@ -2816,10 +2877,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: result2
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error deleting all versions");
     }
   },
   /**
@@ -2835,10 +2896,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: rendered
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error rendering template");
     }
   },
   /**
@@ -2853,10 +2914,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: templates
       });
     } catch (error) {
-      if (error.message.includes("requires")) {
+      if (error && typeof error.message === "string" && error.message.includes("requires")) {
         return ctx.forbidden(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error exporting templates");
     }
   },
   /**
@@ -2874,10 +2935,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: results
       });
     } catch (error) {
-      if (error.message.includes("requires")) {
+      if (error && typeof error.message === "string" && error.message.includes("requires")) {
         return ctx.forbidden(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error importing templates");
     }
   },
   /**
@@ -2891,7 +2952,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: stats
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error fetching stats");
     }
   },
   /**
@@ -2906,7 +2967,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error fetching core template");
     }
   },
   /**
@@ -2921,7 +2982,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: template
       });
     } catch (error) {
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error updating core template");
     }
   },
   /**
@@ -2935,7 +2996,8 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
       if (!template) {
         return ctx.notFound("Template not found");
       }
-      let fileContent, fileName;
+      let fileContent;
+      let fileName;
       if (type === "json") {
         fileContent = JSON.stringify(template.design, null, 2);
         fileName = `template-${id}.json`;
@@ -2950,8 +3012,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
       ctx.set("Content-Disposition", `attachment; filename="${fileName}"`);
       ctx.send(fileContent);
     } catch (error) {
-      strapi2.log.error("[magic-mail] Error downloading template:", error.message);
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error downloading template");
     }
   },
   /**
@@ -2966,10 +3027,10 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         data: duplicated
       });
     } catch (error) {
-      if (error.message.includes("not found")) {
+      if (isNotFoundMessage(error)) {
         return ctx.notFound(error.message);
       }
-      ctx.throw(500, error.message);
+      handleControllerError(ctx, error, "[magic-mail] Error duplicating template");
     }
   },
   /**
@@ -2989,7 +3050,6 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
       const rendered = await strapi2.plugin("magic-mail").service("email-designer").renderTemplate(template.templateReferenceId, {
         name: "Test User",
         email: to
-        // Add more default test variables as needed
       });
       const emailRouterService = strapi2.plugin("magic-mail").service("email-router");
       const sendOptions = {
@@ -2997,7 +3057,6 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         subject: rendered.subject || template.subject,
         html: rendered.html,
         text: rendered.text,
-        // Add template tracking info
         templateId: template.templateReferenceId,
         templateName: template.name
       };
@@ -3015,8 +3074,7 @@ var emailDesigner$3 = ({ strapi: strapi2 }) => ({
         }
       });
     } catch (error) {
-      strapi2.log.error("[magic-mail] Error sending test email:", error);
-      return ctx.badRequest(error.message || "Failed to send test email");
+      handleControllerError(ctx, error, "[magic-mail] Error sending test email");
     }
   }
 });
@@ -15838,7 +15896,7 @@ var oauth$1 = ({ strapi: strapi2 }) => ({
     return account;
   }
 });
-const version = "2.10.7";
+const version = "2.10.9";
 const require$$2 = {
   version
 };

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.10.8",
+  "version": "2.10.10",
   "keywords": [
     "strapi",
     "plugin",