webspresso 0.0.80 → 0.0.81

package/plugins/email/transport.js

@@ -0,0 +1,71 @@
+/**
+ * Nodemailer transport resolution
+ * @module plugins/email/transport
+ */
+
+let nodemailer;
+try {
+  nodemailer = require('nodemailer');
+} catch {
+  nodemailer = null;
+}
+
+/**
+ * Build SMTP config from env vars
+ * @returns {Object|null}
+ */
+function smtpFromEnv() {
+  const host = process.env.SMTP_HOST;
+  if (!host) return null;
+
+  const port = parseInt(process.env.SMTP_PORT || '587', 10);
+  const secure = process.env.SMTP_SECURE === 'true' || port === 465;
+  const user = process.env.SMTP_USER;
+  const pass = process.env.SMTP_PASS;
+
+  const config = { host, port, secure };
+  if (user && pass) {
+    config.auth = { user, pass };
+  }
+  return config;
+}
+
+/**
+ * @param {Object} options
+ * @param {Object} [options.transport] - Pre-built nodemailer transport
+ * @param {Object} [options.smtp] - SMTP options
+ * @returns {Object} nodemailer transport
+ */
+function createTransport(options = {}) {
+  if (!nodemailer) {
+    throw new Error('nodemailer is required. Install it with: npm install nodemailer');
+  }
+
+  if (options.transport) {
+    return options.transport;
+  }
+
+  const smtp = options.smtp || smtpFromEnv();
+  if (!smtp) {
+    throw new Error(
+      'Email transport not configured. Pass transport/smtp options or set SMTP_HOST env variable.'
+    );
+  }
+
+  return nodemailer.createTransport(smtp);
+}
+
+/**
+ * Default from address
+ * @param {Object} [defaults={}]
+ * @returns {string|undefined}
+ */
+function resolveDefaultFrom(defaults = {}) {
+  return defaults.from || process.env.MAIL_FROM || undefined;
+}
+
+module.exports = {
+  createTransport,
+  smtpFromEnv,
+  resolveDefaultFrom,
+};

package/plugins/index.js

@@ -21,7 +21,9 @@ const { uploadPlugin, createLocalFileProvider } = require('./upload');
 const { dataExchangePlugin } = require('./data-exchange');
 const { redirectPlugin } = require('./redirect');
 const { rateLimitPlugin } = require('./rate-limit');
+const emailPlugin = require('./email');
 const contentPlugin = require('./content');
+const csrfPlugin = require('./csrf');
 
 module.exports = {
   sitemapPlugin,
@@ -42,6 +44,8 @@ module.exports = {
   dataExchangePlugin,
   redirectPlugin,
   rateLimitPlugin,
+  emailPlugin,
   contentPlugin,
+  csrfPlugin,
 };
 

package/src/file-router.js

@@ -644,6 +644,81 @@ function mountPages(app, options) {
   
   // Get absolute path to pages directory
   const absolutePagesDir = path.resolve(pagesDir);
+
+  // Routing and file-system checks at startup
+  function checkRoutesAtStartup() {
+    function getGenericSegment(name) {
+      if (name.startsWith('[') && name.endsWith(']')) {
+        const inner = name.slice(1, -1);
+        if (inner.startsWith('...')) return '*';
+        return ':param';
+      }
+      return name;
+    }
+
+    function checkDir(dirPath, relativeDir = '', isApi = false) {
+      if (!fs.existsSync(dirPath)) return;
+      const children = fs.readdirSync(dirPath);
+      const kept = [];
+
+      for (const child of children) {
+        if (child.startsWith('_') || child === 'locales') continue;
+        const fullPath = path.join(dirPath, child);
+        const relPath = relativeDir ? path.join(relativeDir, child) : child;
+        const stats = fs.statSync(fullPath);
+
+        // 1. Check case-sensitivity issues
+        if (child !== child.toLowerCase()) {
+          console.warn(`[webspresso] WARNING: Path "pages/${relPath.split(path.sep).join('/')}" contains uppercase letters. Use lowercase to avoid routing issues on case-sensitive filesystems.`);
+        }
+
+        if (stats.isDirectory()) {
+          if (child === 'api' && relativeDir === '') {
+            checkDir(fullPath, relPath, true);
+          } else {
+            checkDir(fullPath, relPath, isApi);
+            if (!isApi) {
+              kept.push({ name: child, isDir: true, original: child });
+            }
+          }
+        } else {
+          const ext = path.extname(child);
+          if (isApi) {
+            if (ext === '.js') {
+              const base = path.basename(child, ext);
+              kept.push({ name: base, isDir: false, original: child });
+            }
+          } else {
+            if (ext === '.njk') {
+              const base = path.basename(child, ext);
+              kept.push({ name: base, isDir: false, original: child });
+            }
+          }
+        }
+      }
+
+      // 2. Check dynamic route collisions
+      const groups = new Map();
+      for (const item of kept) {
+        const normalized = getGenericSegment(item.name);
+        if (!groups.has(normalized)) {
+          groups.set(normalized, []);
+        }
+        groups.get(normalized).push(item);
+      }
+
+      for (const [norm, items] of groups.entries()) {
+        if (items.length > 1) {
+          const namesList = items.map(item => `"${item.original}"`).join(' and ');
+          console.warn(`[webspresso] WARNING: Dynamic route collision in "pages/${relativeDir.split(path.sep).join('/')}": ${namesList} resolve to the same segment "${norm}" and will conflict at runtime.`);
+        }
+      }
+    }
+
+    checkDir(absolutePagesDir, '');
+  }
+
+  checkRoutesAtStartup();
   
   // Load global hooks
   const globalHooks = loadGlobalHooks(absolutePagesDir, isDev);

package/templates/skills/webspresso-usage/REFERENCE-framework.md

@@ -202,6 +202,7 @@ Pass **`db`** into **`createApp({ db })`** so **`ctx.db`** works in pages and pl
 | `siteAnalyticsPlugin` | Self-hosted page views + admin charts |
 | `auditLogPlugin` | Admin mutation audit trail |
 | `recaptchaPlugin` | v2/v3 + middleware |
+| `emailPlugin` | MJML + Nodemailer sending with optional admin UI and auth bridge |
 | `seoCheckerPlugin` | Dev SEO panel |
 | `restResourcePlugin` | Opt-in REST CRUD from models; `?include=` uses ORM eager load (single-level relations only) |
 | `ormCacheAdminPlugin` | Admin page for ORM cache metrics / purge / invalidate (`db.cache` required) |