import { serve } from "https://deno.land/std@0.168.0/http/server.ts"; const corsHeaders = { "Access-Control-Allow-Origin": "*", "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type", }; serve(async (req) => { if (req.method === "OPTIONS") { return new Response("ok", { headers: corsHeaders }); } try { const { to, name, username, password, role, dept } = await req.json(); const RESEND_API_KEY = Deno.env.get("RESEND_API_KEY"); const FROM_EMAIL = Deno.env.get("FROM_EMAIL") || "noreply@uwezofund.go.ke"; const ORG_NAME = "Uwezo Fund Oversight Board"; const roleLabel: Record = { admin: "System Administrator", hr: "HR Manager", hod: "Head of Department", hos: "Head of Secretariat", finance: "Finance Officer", employee: "Staff Member", intern: "Intern", }; const htmlBody = `

${ORG_NAME}

Human Resource Management System — Account Setup

Dear ${name},

Welcome to the ${ORG_NAME} HR Management System. Your account has been created. ${dept ? `You have been assigned to the ${dept} department as ${roleLabel[role] || role}.` : `Your system role is ${roleLabel[role] || role}.`}

🔐 Your Login Credentials

Username / Employee ID ${username}
Temporary Password ${password}
System Role ${roleLabel[role] || role}
${dept ? `
Department${dept}
` : ''}

⚠ Important: This is a temporary password. You will be required to change it on your first login. Please do not share these credentials with anyone.

Getting Started:

1
Navigate to the HRMS login page
2
Enter the username and temporary password above
3
You will be prompted to create a new secure password
4
Complete your profile setup and explore your dashboard

This is an automated message from the ${ORG_NAME} HR System.

If you did not expect this email, please contact the HR department immediately.

`; let emailSent = false; let emailError = ""; if (RESEND_API_KEY) { try { const resendRes = await fetch("https://api.resend.com/emails", { method: "POST", headers: { "Authorization": `Bearer ${RESEND_API_KEY}`, "Content-Type": "application/json", }, body: JSON.stringify({ from: `${ORG_NAME} HR <${FROM_EMAIL}>`, to: [to], subject: `Welcome to ${ORG_NAME} HRMS — Your Account Credentials`, html: htmlBody, }), }); if (resendRes.ok) { emailSent = true; } else { const errData = await resendRes.json(); emailError = JSON.stringify(errData); } } catch (e) { emailError = String(e); } } else { emailError = "RESEND_API_KEY not configured. Add it to Supabase Edge Function secrets to enable email sending."; console.log(`[WELCOME EMAIL] Would send to: ${to}`); console.log(`[WELCOME EMAIL] Username: ${username}, Password: ${password}`); } return new Response( JSON.stringify({ success: true, emailSent, emailError: emailError || undefined, message: emailSent ? `Welcome email sent to ${to}` : `Account created. Email not sent: ${emailError}`, }), { headers: { ...corsHeaders, "Content-Type": "application/json" }, status: 200, } ); } catch (error) { return new Response( JSON.stringify({ success: false, error: String(error) }), { headers: { ...corsHeaders, "Content-Type": "application/json" }, status: 400 } ); } });