How to Send Email from a Bolt.new Project

import { AhaSendAPIError, AhaSendClient, isAhaSendError } from "npm:@ahasend/sdk";
import { withSupabase } from "npm:@supabase/server";

function requireEnv(name: string): string {
  const value = Deno.env.get(name);
  if (!value) throw new Error(`Missing required environment variable: ${name}`);
  return value;
}

const ahasend = new AhaSendClient({
  apiKey: requireEnv("AHASEND_API_KEY"),
  accountId: requireEnv("AHASEND_ACCOUNT_ID"),
});
const sandbox = Deno.env.get("AHASEND_SANDBOX") !== "false";
const environment = sandbox ? "sandbox" : "production";

function escapeHtml(value: string) {
  return value.replace(/[&<>"']/g, (character) => ({
    "&": "&amp;",
    "<": "&lt;",
    ">": "&gt;",
    '"': "&quot;",
    "'": "&#39;",
  })[character]!);
}

export default {
  fetch: withSupabase({ auth: "user" }, async (req, ctx) => {
    if (req.method !== "POST") {
      return Response.json(
        { error: "Method not allowed" },
        { status: 405, headers: { Allow: "POST" } },
      );
    }
    if (Number(req.headers.get("content-length")) > 1024) {
      return Response.json({ error: "Request body too large" }, { status: 413 });
    }

    let orderId: unknown;
    try {
      ({ orderId } = (await req.json()) as { orderId?: unknown });
    } catch {
      return Response.json({ error: "Invalid JSON body" }, { status: 400 });
    }
    if (typeof orderId !== "string" || orderId.length === 0) {
      return Response.json({ error: "orderId is required" }, { status: 400 });
    }

    // ctx.supabase runs under the caller's RLS policies, so an order that
    // belongs to someone else comes back empty instead of being emailed.
    const { data: order } = await ctx.supabase
      .from("orders")
      .select("id, customer_email, customer_name")
      .eq("id", orderId)
      .maybeSingle<{ id: string; customer_email: string; customer_name: string }>();
    if (!order) {
      return Response.json({ error: "Order not found" }, { status: 404 });
    }

    try {
      const result = await ahasend.messages.send(
        {
          from: { email: "orders@yourdomain.com", name: "Your Store" },
          recipients: [{ email: order.customer_email, name: order.customer_name }],
          subject: `Order ${order.id} confirmed`,
          html_content: `<p>Thanks ${escapeHtml(order.customer_name)}, order ${escapeHtml(order.id)} is confirmed.</p>`,
          text_content: `Thanks ${order.customer_name}, order ${order.id} is confirmed.`,
          sandbox,
        },
        { idempotencyKey: `order-receipt-${environment}-${order.id}` },
      );

      const rejectedCount = result.data.filter((recipient) => recipient.status === "error").length;
      if (rejectedCount > 0) {
        console.warn("AhaSend rejected recipients", { rejectedCount });
        return Response.json({ error: "Email was not accepted" }, { status: 502 });
      }

      return Response.json({ queued: true }, { status: 202 });
    } catch (err) {
      if (isAhaSendError(err)) {
        console.error(
          "AhaSend request failed",
          err instanceof AhaSendAPIError
            ? { errorCode: err.code, status: err.status, requestId: err.requestId }
            : { errorCode: err.code },
        );
        return Response.json({ error: "Failed to send email" }, { status: 502 });
      }
      throw err;
    }
  }),
};