Claude Fable 5
f0a82bad20
Some checks failed
CD / Build and push images (push) Successful in 3m16s
CI / Lint, typecheck, test (push) Successful in 3m5s
CD / Deploy to Test (push) Successful in 13s
CD / Smoke tests against Test (push) Failing after 3m35s
CD / Promote to Int (push) Has been skipped
CI / Auth e2e pack (push) Successful in 5m6s
CI / Import/export fidelity gate (push) Successful in 43s
CI / Build container images (push) Has been skipped
When the api runs against a database without the setup.completedAt marker, a global SetupGuard answers every non-exempt route with 503 setup_required; only /setup/*, health probes, and the session routes stay reachable. The wizard steps (POST /setup/admin|instance|smtp| registration|complete) write straight to their production homes; the Site Admin step signs its creator in, later steps require that session. Completing sets the marker and locks every step permanently (410, also across restarts, and not reopenable via PATCH /admin/settings). SMTP entered in the wizard is verified with a live delivery test first (failure blocks the step with the transport error as detail) and then persisted to the new env-backed secret store: a mode-600 dotenv file on the new `secrets` volume (SECRETS_FILE). Explicit container env always wins over the store; empty compose-passed strings count as unset. The mail transport now resolves lazily through SmtpConfigService so wizard changes apply without a restart. SETUP_ADMIN_* env pre-seeds the whole wizard at boot for automated deploys; a backfill migration marks instances that already have a Site Admin as completed, and seed/vitest global-setup do the same for fixture databases. The setup e2e suite provisions its own fresh database (CREATE DATABASE + migrate deploy) per run. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EwZ4jR4KFAPvpjWevfUGX1
54 lines
1.8 KiB
TypeScript
54 lines
1.8 KiB
TypeScript
import { apiI18n } from '../i18n/api-i18n';
|
|
|
|
export type MailTemplate = 'verifyEmail' | 'resetPassword' | 'smtpTest';
|
|
|
|
export interface RenderedMail {
|
|
subject: string;
|
|
text: string;
|
|
html: string;
|
|
}
|
|
|
|
/**
|
|
* Renders the layout-light transactional mails (text + simple HTML) from
|
|
* the `mails` i18n namespace. Every template gets: greeting, body text,
|
|
* one action link, expiry note, ignore hint, signoff.
|
|
*/
|
|
export function renderMail(
|
|
template: MailTemplate,
|
|
params: { displayName: string; link: string },
|
|
locale: 'de' | 'en',
|
|
): RenderedMail {
|
|
const t = (key: string, options: Record<string, string> = {}): string =>
|
|
apiI18n.t(`mails:${key}`, { lng: locale, ...options });
|
|
|
|
const greeting = t('common.greeting', { displayName: params.displayName });
|
|
const body = t(`${template}.body`);
|
|
const action = t(`${template}.action`);
|
|
const expiry = t(`${template}.expiry`);
|
|
const ignore = t('common.ignoreHint');
|
|
const signoff = t('common.signoff');
|
|
|
|
const text = [greeting, '', body, '', params.link, '', expiry, ignore, '', signoff].join('\n');
|
|
|
|
const html = `<!doctype html>
|
|
<html><body style="font-family: system-ui, sans-serif; color: #1f2933; max-width: 32rem; margin: 0 auto; padding: 1.5rem;">
|
|
<p>${escapeHtml(greeting)}</p>
|
|
<p>${escapeHtml(body)}</p>
|
|
<p style="margin: 1.5rem 0;">
|
|
<a href="${params.link}" style="background: #2f6f4f; color: #ffffff; padding: 0.6rem 1.2rem; border-radius: 6px; text-decoration: none;">${escapeHtml(action)}</a>
|
|
</p>
|
|
<p style="font-size: 0.85rem; color: #616e7c;">${escapeHtml(expiry)}<br>${escapeHtml(ignore)}</p>
|
|
<p>${escapeHtml(signoff)}</p>
|
|
</body></html>`;
|
|
|
|
return { subject: t(`${template}.subject`), text, html };
|
|
}
|
|
|
|
function escapeHtml(value: string): string {
|
|
return value
|
|
.replaceAll('&', '&')
|
|
.replaceAll('<', '<')
|
|
.replaceAll('>', '>')
|
|
.replaceAll('"', '"');
|
|
}
|