a0091e4ca6
Phase 7 of the berth-recommender refactor (plan §3.3, §4.8, §4.9, §5.7,
§5.8, §5.9, §11.1, §14.7, §14.9). Adds the rep-driven send-out path for
per-berth PDFs and port-wide brochures, the per-port sales SMTP/IMAP
config + body templates, and the supporting admin UI.
Migration: 0031_brochures_and_document_sends.sql
Schema additions:
- brochures (port-wide, with isDefault marker + archive)
- brochure_versions (versioned uploads, storageKey per §4.7a)
- document_sends (audit log of every rep-initiated send; failures
captured with failedAt + errorReason). berthPdfVersionId is a plain
text column (no FK) — loose-coupled to Phase 6b's berth_pdf_versions
so the two phases stay independent.
§14.7 critical mitigations:
- Body XSS: rep-authored markdown goes through renderEmailBody()
(HTML-escape first, then a tight allowlist of bold/italic/code/link
rules). https:// + mailto: only — javascript:/data: URLs stripped.
Tested against script/img/iframe/svg/onerror polyglots.
- Recipient typo: strict email regex + two-step confirm modal that
shows the exact recipient before send.
- Unresolved merge fields: pre-send dry-run /preview endpoint blocks
submission until findUnresolvedTokens() returns empty.
- SMTP failure: every transport rejection writes a document_sends row
with failedAt + errorReason; UI surfaces the message.
- Hourly per-user rate limit: 50 sends/user/hour via existing
checkRateLimit().
- Size threshold fallback (§11.1): files above
email_attach_threshold_mb (default 15) ship as a 24h signed-URL
download link in the body instead of an attachment. Storage stream
flows directly to nodemailer to avoid buffering 20MB+.
§14.10 critical mitigation:
- SMTP/IMAP passwords encrypted at rest via the existing
EMAIL_CREDENTIAL_KEY (AES-256-GCM). The /api/v1/admin/email/
sales-config GET endpoint never returns the decrypted value — only
a *PassIsSet boolean. PATCH treats empty string as "leave unchanged"
and explicit null as "clear", so the masked-placeholder UI round-
trips without forcing re-entry on every save.
system_settings keys (per-port unless noted):
- sales_from_address, sales_smtp_{host,port,secure,user,pass_encrypted}
- sales_imap_{host,port,user,pass_encrypted}
- sales_auth_method (default app_password)
- noreply_from_address
- email_template_send_berth_pdf_body, email_template_send_brochure_body
- brochure_max_upload_mb (default 50)
- email_attach_threshold_mb (default 15)
UI surfaces (per §5.7, §5.8, §5.9):
- <SendDocumentDialog> shared 2-step compose+confirm flow.
- <SendBerthPdfDialog>, <SendDocumentsDialog>, <SendFromInterestButton>
wrappers per detail page.
- /[portSlug]/admin/brochures: list, upload (direct-to-storage
presigned PUT for the 20MB+ files per §11.1), default toggle,
archive.
- /[portSlug]/admin/email extended with <SalesEmailConfigCard>:
SMTP + IMAP creds, body templates, threshold/max settings.
Storage: every upload + download goes through getStorageBackend() —
no direct minio imports, per Phase 6a contract.
Tests: 1145 vitest passing (+ 50 new in
markdown-email-sanitization.test.ts, document-sends-validators.test.ts,
sales-email-config-validators.test.ts).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
102 lines
3.0 KiB
TypeScript
102 lines
3.0 KiB
TypeScript
import {
|
|
SettingsFormCard,
|
|
type SettingFieldDef,
|
|
} from '@/components/admin/shared/settings-form-card';
|
|
import { PageHeader } from '@/components/shared/page-header';
|
|
import { SalesEmailConfigCard } from '@/components/admin/sales-email-config-card';
|
|
|
|
const FIELDS: SettingFieldDef[] = [
|
|
{
|
|
key: 'email_from_name',
|
|
label: 'From name',
|
|
description: 'Display name shown in the From: header on outgoing email.',
|
|
type: 'string',
|
|
placeholder: 'Port Nimara',
|
|
defaultValue: '',
|
|
},
|
|
{
|
|
key: 'email_from_address',
|
|
label: 'From address',
|
|
description: 'Sender email address. Falls back to SMTP_FROM env when blank.',
|
|
type: 'string',
|
|
placeholder: 'noreply@example.com',
|
|
defaultValue: '',
|
|
},
|
|
{
|
|
key: 'email_reply_to',
|
|
label: 'Reply-to address',
|
|
description: 'Optional Reply-To: header for replies (e.g. sales@example.com).',
|
|
type: 'string',
|
|
placeholder: 'sales@example.com',
|
|
defaultValue: '',
|
|
},
|
|
{
|
|
key: 'email_signature_html',
|
|
label: 'Default signature (HTML)',
|
|
description: 'Appended to the bottom of system-generated emails.',
|
|
type: 'html',
|
|
placeholder: '<p>-<br>The Port Nimara team</p>',
|
|
defaultValue: '',
|
|
},
|
|
{
|
|
key: 'email_footer_html',
|
|
label: 'Email footer (HTML)',
|
|
description: 'Legal/contact footer rendered at the very bottom of all emails.',
|
|
type: 'html',
|
|
placeholder: '<p style="font-size:11px;color:#888;">© Port Nimara · ul. ...</p>',
|
|
defaultValue: '',
|
|
},
|
|
{
|
|
key: 'smtp_host_override',
|
|
label: 'SMTP host override',
|
|
description: 'Optional. Falls back to SMTP_HOST env when blank.',
|
|
type: 'string',
|
|
placeholder: 'mail.example.com',
|
|
defaultValue: '',
|
|
},
|
|
{
|
|
key: 'smtp_port_override',
|
|
label: 'SMTP port override',
|
|
description: 'Optional. Falls back to SMTP_PORT env when blank.',
|
|
type: 'number',
|
|
placeholder: '587',
|
|
defaultValue: null,
|
|
},
|
|
{
|
|
key: 'smtp_user_override',
|
|
label: 'SMTP username override',
|
|
description: 'Optional. Falls back to SMTP_USER env when blank.',
|
|
type: 'string',
|
|
defaultValue: '',
|
|
},
|
|
{
|
|
key: 'smtp_pass_override',
|
|
label: 'SMTP password override',
|
|
description: 'Optional. Stored in plain text - only set when overriding env credentials.',
|
|
type: 'password',
|
|
defaultValue: '',
|
|
},
|
|
];
|
|
|
|
export default function EmailSettingsPage() {
|
|
return (
|
|
<div className="space-y-6">
|
|
<PageHeader
|
|
title="Email Settings"
|
|
description="Per-port outgoing email configuration. SMTP credentials and the From address default to environment variables when these fields are blank."
|
|
/>
|
|
<SettingsFormCard
|
|
title="From address & signature"
|
|
description="Identity headers and shared HTML used by system-generated emails."
|
|
fields={FIELDS.slice(0, 5)}
|
|
/>
|
|
<SettingsFormCard
|
|
title="SMTP transport overrides"
|
|
description="Optional per-port SMTP credentials. Leave blank to use the global env defaults."
|
|
fields={FIELDS.slice(5)}
|
|
/>
|
|
<SalesEmailConfigCard />
|
|
</div>
|
|
);
|
|
}
|