"""RBS REGAL — Transactional Email Service (Resend). Single helper used across the app for one-off transactional emails: • Forgot-password 6-digit OTPs • (Future) invoice email-shares, weekly reports, etc. Why Resend: simple HTTPS API, generous free tier (3,000/mo), great deliverability, async-friendly. No SMTP, no IMAP, no headaches. Config (in /app/backend/.env): RESEND_API_KEY — required to actually send. If empty, the helper logs the email body and returns False instead of raising — useful for local dev when admin hasn't signed up yet. RESEND_FROM_EMAIL — sender. Default: onboarding@resend.dev (works without domain verification for testing). RESEND_FROM_NAME — display name. Default: "RBS REGAL". NOTE on Resend testing-mode quirk: until the admin verifies a custom domain at resend.com, emails will only deliver to the address used to sign up for Resend. For production, verify your domain in the Resend dashboard and update RESEND_FROM_EMAIL to something@yourdomain.com. """ import os import asyncio import logging from typing import Optional logger = logging.getLogger("rm-regal.email") def _is_configured() -> bool: return bool(os.environ.get("RESEND_API_KEY", "").strip()) def _from_header() -> str: name = os.environ.get("RESEND_FROM_NAME", "RGE REGALGOA").strip() addr = os.environ.get("RESEND_FROM_EMAIL", "onboarding@resend.dev").strip() return f"{name} <{addr}>" if name else addr async def send_email(to_email: str, subject: str, html: str, text: Optional[str] = None) -> bool: """Send a single email via Resend. Returns True on success. On config-missing or send failure returns False (never raises) so that forgot-password and other flows can degrade gracefully. """ if not _is_configured(): logger.warning( "RESEND_API_KEY is empty — email NOT sent to %s. Subject: %s. " "Admin: add RESEND_API_KEY to /app/backend/.env and restart backend.", to_email, subject, ) return False try: import resend # imported lazily so missing pkg doesn't break boot resend.api_key = os.environ["RESEND_API_KEY"].strip() params = { "from": _from_header(), "to": [to_email], "subject": subject, "html": html, } if text: params["text"] = text result = await asyncio.to_thread(resend.Emails.send, params) eid = (result or {}).get("id", "") logger.info("Email sent to %s (id=%s, subject=%s)", to_email, eid, subject) return True except Exception as e: logger.error("Resend send failed for %s: %s: %s", to_email, type(e).__name__, str(e)[:200]) return False # ---------- Template helpers ---------- def _otp_html(otp: str, user_name: str = "") -> str: """Inline-CSS table layout — battle-tested across Gmail/Outlook/Apple Mail.""" safe_name = (user_name or "there").strip()[:60] return f"""
RGE REGALGOA
ERP AI

Reset Your Password

Hi {safe_name}, we received a request to reset your password. Use the 6-digit code below to continue. This code expires in 10 minutes.

Your Verification Code
{otp}

If you didn't request a password reset, you can safely ignore this email — your account is secure.

For security, never share this code with anyone — not even RGE REGALGOA staff.

This is an automated message from RGE REGALGOA ERP AI.
A new beginning of prosperity in business.
Need help? Reply to this email or contact your administrator.
""" def _otp_text(otp: str) -> str: return ( f"Your RGE REGALGOA password reset code is: {otp}\n\n" "This code expires in 10 minutes. If you didn't request a password reset, ignore this email.\n\n" "— RGE REGALGOA ERP AI\nA new beginning of prosperity in business." ) async def send_otp_email(to_email: str, otp: str, user_name: str = "") -> bool: """Sends the 6-digit OTP for forgot-password flow.""" subject = f"Your RGE REGALGOA password reset code: {otp}" return await send_email( to_email=to_email, subject=subject, html=_otp_html(otp, user_name), text=_otp_text(otp), )