pn-new-crm/src/lib/email/templates/crm-invite.ts

import { brandingPrimaryColor, renderShell, safeUrl, type BrandingShell } from '@/lib/email/shell';

interface InviteData {
  link: string;
  ttlHours: number;
  recipientName?: string;
  isSuperAdmin: boolean;
  /** Display name for the port — falls back to "Port Nimara" so the
   *  pre-multi-tenant default still reads correctly. */
  portName?: string;
}

interface RenderOpts {
  branding?: BrandingShell | null;
}

export function crmInviteEmail(
  data: InviteData,
  overrides?: RenderOpts,
): {
  subject: string;
  html: string;
  text: string;
} {
  const portName = data.portName ?? 'Port Nimara';
  const subject = `You're invited to the ${portName} CRM`;
  const greeting = data.recipientName ? `Dear ${escapeHtml(data.recipientName)},` : 'Welcome,';
  const role = data.isSuperAdmin ? 'super administrator' : 'administrator';
  const accent = brandingPrimaryColor(overrides?.branding);

  const body = `
              <p style="margin-bottom:10px; font-size:18px; font-weight:bold; color:${accent};">
                Welcome to the ${escapeHtml(portName)} CRM
              </p>
              <p style="margin-bottom:10px; font-size:16px; line-height:1.5;">${greeting}</p>
              <p style="margin-bottom:20px; font-size:16px; line-height:1.5;">
                You've been invited to the ${escapeHtml(portName)} CRM as a ${role}. Click the
                button below to set your password and activate your account. The
                link expires in ${data.ttlHours} hours.
              </p>
              <p style="text-align:center; margin:30px 0;">
                <a href="${safeUrl(data.link)}" style="display:inline-block; background-color:${accent}; color:#ffffff; text-decoration:none; padding:14px 35px; border-radius:5px; font-weight:bold; font-size:16px;">
                  Set up your account
                </a>
              </p>
              <p style="font-size:14px; color:#666; line-height:1.5; padding:15px 0; border-top:1px solid #eee; margin-top:20px;">
                If the button doesn't work, paste this link into your browser:<br />
                <a href="${safeUrl(data.link)}" style="color:${accent}; text-decoration:underline; word-break:break-all;">${data.link}</a>
              </p>
              <p style="font-size:16px; margin-top:30px;">
                Thank you,<br />
                <strong>${escapeHtml(portName)} CRM</strong>
              </p>`;

  const text = [
    `Welcome to the ${portName} CRM`,
    '',
    `You've been invited as a ${role}.`,
    `Set up your account: ${data.link}`,
    '',
    `The link expires in ${data.ttlHours} hours.`,
    '',
    `Thank you,`,
    `${portName} CRM`,
  ].join('\n');

  return {
    subject,
    html: renderShell({ title: subject, body, branding: overrides?.branding }),
    text,
  };
}

function escapeHtml(str: string): string {
  return str
    .replace(/&/g, '&amp;')
    .replace(/</g, '&lt;')
    .replace(/>/g, '&gt;')
    .replace(/"/g, '&quot;')
    .replace(/'/g, '&#39;');
}