strapi-plugin-magic-mail 2.10.9 → 2.10.11

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [2.10.11](https://github.com/Schero94/Magic-Mail/compare/v2.10.10...v2.10.11) (2026-04-21)
+
+
+### Bug Fixes
+
+* **email-designer:** generate duplicate-template refId within int4 range ([d1ecae8](https://github.com/Schero94/Magic-Mail/commit/d1ecae8d657ead41521b08fcad35d9c483f779d9))
+
+## [2.10.10](https://github.com/Schero94/Magic-Mail/compare/v2.10.9...v2.10.10) (2026-04-21)
+
+
+### Bug Fixes
+
+* **validation:** auto-strip Strapi system metadata before .strict() check ([039b889](https://github.com/Schero94/Magic-Mail/commit/039b889d96d6a076e199bec7497304c6900b8165))
+
 ## [2.10.9](https://github.com/Schero94/Magic-Mail/compare/v2.10.8...v2.10.9) (2026-04-21)
 
 

package/dist/server/index.js

@@ -1256,12 +1256,44 @@ const schemas = {
     phoneNumber: z.string().min(5).max(32).regex(/^[\d+\-() ]+$/)
   })
 };
+const STRAPI_METADATA_FIELDS = Object.freeze([
+  "id",
+  "documentId",
+  "createdAt",
+  "updatedAt",
+  "publishedAt",
+  "locale",
+  "localizations",
+  "createdBy",
+  "updatedBy",
+  "__component",
+  // Populated relations/components we never want to round-trip as a write:
+  "versions"
+]);
+function stripStrapiMetadata(body, schemaName) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) return body;
+  const cleaned = { ...body };
+  const removed = [];
+  for (const key of STRAPI_METADATA_FIELDS) {
+    if (key in cleaned) {
+      delete cleaned[key];
+      removed.push(key);
+    }
+  }
+  if (removed.length > 0 && typeof strapi !== "undefined" && strapi?.log?.debug) {
+    strapi.log.debug(
+      `[magic-mail] Stripped Strapi metadata from ${schemaName} payload: ${removed.join(", ")}`
+    );
+  }
+  return cleaned;
+}
 function validate$5(schemaName, body) {
   const schema = schemas[schemaName];
   if (!schema) {
     throw new Error(`Unknown validation schema: ${schemaName}`);
   }
-  const result2 = schema.safeParse(body);
+  const sanitized = stripStrapiMetadata(body, schemaName);
+  const result2 = schema.safeParse(sanitized);
   if (!result2.success) {
     const strapiErrors = require$$1__default.default.errors;
     const flattened = result2.error.flatten();
@@ -15877,7 +15909,7 @@ var oauth$1 = ({ strapi: strapi2 }) => ({
     return account;
   }
 });
-const version = "2.10.8";
+const version = "2.10.10";
 const require$$2 = {
   version
 };
@@ -16526,6 +16558,35 @@ var emailDesigner$1 = ({ strapi: strapi2 }) => ({
     strapi2.log.info(`[magic-mail] [SUCCESS] Template "${template.name}" and ${allVersions.length} versions deleted`);
     return result2;
   },
+  /**
+   * Generate a new `templateReferenceId` guaranteed to fit in PostgreSQL's
+   * `integer` column (max 2_147_483_647). We retry a few times to dodge
+   * the astronomically unlikely collision with an already-used reference
+   * id — the schema declares `unique: true`, so picking a duplicate here
+   * would otherwise fail at insert time.
+   *
+   * Previous implementation used `Date.now()` which overflows the int4
+   * range (13 digits vs. 10-digit max), producing a "value is out of range
+   * for type integer" error on every duplicate call.
+   *
+   * @returns {Promise<number>}
+   * @throws {Error} if no unique id can be found after MAX_ATTEMPTS tries
+   */
+  async _generateUniqueTemplateReferenceId() {
+    const MAX_ATTEMPTS = 5;
+    const UPPER_BOUND = 2e9;
+    for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt += 1) {
+      const candidate = Math.floor(Math.random() * UPPER_BOUND) + 1;
+      const existing = await this.findByReferenceId(candidate);
+      if (!existing) return candidate;
+      strapi2.log.warn(
+        `[magic-mail] [DUPLICATE] templateReferenceId collision on ${candidate} (attempt ${attempt + 1}/${MAX_ATTEMPTS}); retrying`
+      );
+    }
+    throw new Error(
+      `Could not generate a unique templateReferenceId after ${MAX_ATTEMPTS} attempts`
+    );
+  },
   /**
    * Duplicate template
    * @param {string|number} idOrDocumentId - Either numeric id or documentId
@@ -16537,6 +16598,7 @@ var emailDesigner$1 = ({ strapi: strapi2 }) => ({
       throw new Error("Template not found");
     }
     strapi2.log.info(`[magic-mail] [PACKAGE] Original template: documentId=${original.documentId}, name="${original.name}"`);
+    const newRefId = await this._generateUniqueTemplateReferenceId();
     const duplicateData = {
       name: `${original.name} copy`,
       subject: original.subject,
@@ -16546,10 +16608,10 @@ var emailDesigner$1 = ({ strapi: strapi2 }) => ({
       category: original.category,
       tags: original.tags,
       isActive: original.isActive,
-      templateReferenceId: Date.now() + Math.floor(Math.random() * 1e3)
+      templateReferenceId: newRefId
     };
     const duplicated = await this.create(duplicateData);
-    strapi2.log.info(`[magic-mail] [SUCCESS] Template duplicated: documentId=${duplicated.documentId}`);
+    strapi2.log.info(`[magic-mail] [SUCCESS] Template duplicated: documentId=${duplicated.documentId}, newRefId=${newRefId}`);
     return duplicated;
   },
   // ============================================================

package/dist/server/index.mjs

@@ -1243,12 +1243,44 @@ const schemas = {
     phoneNumber: z.string().min(5).max(32).regex(/^[\d+\-() ]+$/)
   })
 };
+const STRAPI_METADATA_FIELDS = Object.freeze([
+  "id",
+  "documentId",
+  "createdAt",
+  "updatedAt",
+  "publishedAt",
+  "locale",
+  "localizations",
+  "createdBy",
+  "updatedBy",
+  "__component",
+  // Populated relations/components we never want to round-trip as a write:
+  "versions"
+]);
+function stripStrapiMetadata(body, schemaName) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) return body;
+  const cleaned = { ...body };
+  const removed = [];
+  for (const key of STRAPI_METADATA_FIELDS) {
+    if (key in cleaned) {
+      delete cleaned[key];
+      removed.push(key);
+    }
+  }
+  if (removed.length > 0 && typeof strapi !== "undefined" && strapi?.log?.debug) {
+    strapi.log.debug(
+      `[magic-mail] Stripped Strapi metadata from ${schemaName} payload: ${removed.join(", ")}`
+    );
+  }
+  return cleaned;
+}
 function validate$5(schemaName, body) {
   const schema = schemas[schemaName];
   if (!schema) {
     throw new Error(`Unknown validation schema: ${schemaName}`);
   }
-  const result2 = schema.safeParse(body);
+  const sanitized = stripStrapiMetadata(body, schemaName);
+  const result2 = schema.safeParse(sanitized);
   if (!result2.success) {
     const strapiErrors = require$$1$2.errors;
     const flattened = result2.error.flatten();
@@ -15864,7 +15896,7 @@ var oauth$1 = ({ strapi: strapi2 }) => ({
     return account;
   }
 });
-const version = "2.10.8";
+const version = "2.10.10";
 const require$$2 = {
   version
 };
@@ -16513,6 +16545,35 @@ var emailDesigner$1 = ({ strapi: strapi2 }) => ({
     strapi2.log.info(`[magic-mail] [SUCCESS] Template "${template.name}" and ${allVersions.length} versions deleted`);
     return result2;
   },
+  /**
+   * Generate a new `templateReferenceId` guaranteed to fit in PostgreSQL's
+   * `integer` column (max 2_147_483_647). We retry a few times to dodge
+   * the astronomically unlikely collision with an already-used reference
+   * id — the schema declares `unique: true`, so picking a duplicate here
+   * would otherwise fail at insert time.
+   *
+   * Previous implementation used `Date.now()` which overflows the int4
+   * range (13 digits vs. 10-digit max), producing a "value is out of range
+   * for type integer" error on every duplicate call.
+   *
+   * @returns {Promise<number>}
+   * @throws {Error} if no unique id can be found after MAX_ATTEMPTS tries
+   */
+  async _generateUniqueTemplateReferenceId() {
+    const MAX_ATTEMPTS = 5;
+    const UPPER_BOUND = 2e9;
+    for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt += 1) {
+      const candidate = Math.floor(Math.random() * UPPER_BOUND) + 1;
+      const existing = await this.findByReferenceId(candidate);
+      if (!existing) return candidate;
+      strapi2.log.warn(
+        `[magic-mail] [DUPLICATE] templateReferenceId collision on ${candidate} (attempt ${attempt + 1}/${MAX_ATTEMPTS}); retrying`
+      );
+    }
+    throw new Error(
+      `Could not generate a unique templateReferenceId after ${MAX_ATTEMPTS} attempts`
+    );
+  },
   /**
    * Duplicate template
    * @param {string|number} idOrDocumentId - Either numeric id or documentId
@@ -16524,6 +16585,7 @@ var emailDesigner$1 = ({ strapi: strapi2 }) => ({
       throw new Error("Template not found");
     }
     strapi2.log.info(`[magic-mail] [PACKAGE] Original template: documentId=${original.documentId}, name="${original.name}"`);
+    const newRefId = await this._generateUniqueTemplateReferenceId();
     const duplicateData = {
       name: `${original.name} copy`,
       subject: original.subject,
@@ -16533,10 +16595,10 @@ var emailDesigner$1 = ({ strapi: strapi2 }) => ({
       category: original.category,
       tags: original.tags,
       isActive: original.isActive,
-      templateReferenceId: Date.now() + Math.floor(Math.random() * 1e3)
+      templateReferenceId: newRefId
     };
     const duplicated = await this.create(duplicateData);
-    strapi2.log.info(`[magic-mail] [SUCCESS] Template duplicated: documentId=${duplicated.documentId}`);
+    strapi2.log.info(`[magic-mail] [SUCCESS] Template duplicated: documentId=${duplicated.documentId}, newRefId=${newRefId}`);
     return duplicated;
   },
   // ============================================================

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.10.9",
+  "version": "2.10.11",
   "keywords": [
     "strapi",
     "plugin",