import nodemailer from "nodemailer"; import { openStore } from "@/lib/data/store"; import type { MailSettings } from "@/lib/types"; /** * Sending is deliberately forgiving: if no server is configured, or the send * fails, the caller carries on. A signup shouldn't fail because the mail * server is down. */ export async function sendMail(opts: { to: string; subject: string; heading: string; body: string; action?: { label: string; url: string }; }): Promise<{ sent: boolean; reason?: string }> { const store = await openStore(); const m = await store.small("mailSettings", {} as MailSettings); const site = await store.settings(); if (!m.enabled || !m.host || !m.fromAddress) { return { sent: false, reason: "Email isn't configured" }; } if (!opts.to) return { sent: false, reason: "No address to send to" }; try { const transport = nodemailer.createTransport({ host: m.host, port: m.port, secure: m.secure, auth: m.username ? { user: m.username, pass: m.password } : undefined, }); await transport.sendMail({ from: `"${m.fromName}" <${m.fromAddress}>`, to: opts.to, subject: opts.subject, text: `${opts.heading}\n\n${opts.body}${ opts.action ? `\n\n${opts.action.label}: ${opts.action.url}` : "" }`, html: template(opts, String(site.siteName ?? "")), }); return { sent: true }; } catch (err) { return { sent: false, reason: err instanceof Error ? err.message : "Send failed" }; } } /** One plain, readable layout for every message the site sends. */ function template( opts: { heading: string; body: string; action?: { label: string; url: string } }, siteName: string ) { return ` ${ opts.action ? `` : "" }

${escape(siteName)}

${escape(opts.heading)}

${escape(opts.body).replace(/\n/g, "
")}

${escape(opts.action.label)}

You're receiving this because you have an account on ${escape(siteName)}.

`; } /** Values go into HTML, so they're escaped rather than trusted. */ function escape(s: string) { return String(s) .replace(/&/g, "&") .replace(//g, ">") .replace(/"/g, """); }