mailgun send owner notifications,

Author: a-a-k

README.md

@@ -1,6 +1,6 @@
 # MB3R Lab Landing
 
-Static landing page + Supabase Edge Function backend for pilot onboarding. The UI lives on any static host (GitHub Pages), while a Supabase function receives submissions, stores them (with Geo-IP country) in Postgres, and triggers Mailgun emails.
+Static landing page + Supabase Edge Function backend for pilot onboarding. The UI lives on any static host (GitHub Pages), while a Supabase function receives submissions, stores them (with Geo-IP country) in Postgres, and sends owner notifications via Mailgun.
 
 ## Architecture
 
@@ -34,6 +34,7 @@ If the function is unreachable, the UI falls back to localStorage so leads are n
       MAIL_FROM="MB3R Lab <noreply@mb3r-lab.org>" \
       MAILGUN_API_KEY="key-..." \
       MAILGUN_DOMAIN="mg.example.com" \
+      MAIL_NOTIFY_TO="owner@company.com" \
       ALLOWED_ORIGINS="https://mb3r-lab.github.io,http://localhost:5500"
     # Optional: MAILGUN_API_BASE_URL=https://api.eu.mailgun.net/v3
     # Optional admin brute-force controls:
@@ -47,6 +48,10 @@ If the function is unreachable, the UI falls back to localStorage so leads are n
    ```bash
    supabase functions deploy applications --project-ref YOUR_PROJECT_REF
    ```
+   If production still uses the legacy endpoint name, deploy the same code as:
+   ```bash
+   supabase functions deploy database-access --project-ref YOUR_PROJECT_REF
+   ```
    The function expects an existing `public.applications` table (see SQL below).
 
 ### 2. Point the frontend at the function
@@ -67,15 +72,16 @@ Push the static site (e.g., to GitHub Pages). The landing page and `/admin.html`
 
 - **CTA + modal form** — collects email/company/context and sends the payload to the Supabase function.
 - **Supabase storage** — submissions persist in `public.applications`; schema (including `country` column) is auto-created on first call.
-- **Mailgun confirmations** — the function posts to Mailgun so every lead receives an acknowledgement email.
+- **Mailgun owner notifications** — the function posts to Mailgun so the owner mailbox receives every new lead.
+- **No auto-reply to requester** — submitters are not emailed automatically; follow-up is manual from the owner side.
 - **Admin dashboard** — `/admin.html` lists submissions. Access requires the password that you stored in the function secret (`x-admin-pass` header). If the function is offline, the dashboard shows the locally cached leads.
 - **Offline fallback** — when the API is unreachable (or not configured) leads are saved in `localStorage`, so you can later recover them from `/admin`.
 
 ## Supabase function behavior
 
 The deployed function handles:
 
-- `POST /database-access` — validate payload, insert into `applications`, trigger Mailgun email, respond with the created ID.
+- `POST /database-access` — validate payload, insert into `applications`, send owner notification to `MAIL_NOTIFY_TO` (if configured), respond with the created ID.
 - `GET /database-access` — require `x-admin-pass` header, validate request `Origin` against `ALLOWED_ORIGINS`, apply per-client failed-login throttling (delay + temporary block), return ordered submissions.
 - `OPTIONS` — CORS preflight for allowlisted origins (`content-type` + `x-admin-pass` headers).
 - **Schema requirement** — create the table once in Supabase (SQL editor):

assets/i18n/en.json

@@ -284,11 +284,11 @@
     "companyPlaceholder": "Company name",
     "commentLabel": "Context (optional)",
     "commentPlaceholder": "Key systems, desired outcomes, timelines",
-    "note": "We will send a confirmation email after the request is delivered.",
+    "note": "After we receive your request, we will contact you by work email.",
     "submit": "Submit request",
     "status": {
       "sending": "Sending your request...",
-      "success": "All set! We just confirmed via email.",
+      "success": "All set! Your request was received. We will contact you soon.",
       "savedOffline": "No backend connection. Saved locally for now.",
       "savedMissingEndpoint": "API endpoint missing. Saved locally for now."
     },

assets/i18n/ru.json

@@ -284,11 +284,11 @@
     "companyPlaceholder": "Название компании",
     "commentLabel": "Контекст (необязательно)",
     "commentPlaceholder": "Ключевые системы, цели, сроки",
-    "note": "Мы отправим подтверждение по почте после получения заявки.",
+    "note": "После получения заявки мы свяжемся с вами по рабочей почте.",
     "submit": "Отправить заявку",
     "status": {
       "sending": "Отправляем заявку...",
-      "success": "Готово! Подтверждение отправлено на почту.",
+      "success": "Готово! Заявка принята, мы скоро свяжемся.",
       "savedOffline": "Нет соединения с бэкендом. Пока сохранили локально.",
       "savedMissingEndpoint": "API-эндпоинт не указан. Пока сохранили локально."
     },

index.html

@@ -464,7 +464,7 @@ <h3 id="pilot-modal-title" data-i18n="modal.title">Request a pilot with MB3R Lab
                     <textarea id="application-comment" name="comment" rows="3" placeholder="" data-i18n-attr="placeholder:form.commentPlaceholder"></textarea>
                 </div>
                 <div class="form-meta">
-                    <small data-i18n="form.note">We will send a confirmation email after the request is delivered.</small>
+                    <small data-i18n="form.note">After we receive your request, we will contact you by work email.</small>
                 </div>
                 <button type="submit" class="button button-primary" id="application-submit" data-i18n="form.submit">Submit request</button>
                 <p class="form-status" id="application-status" role="status" aria-live="polite"></p>

supabase/functions/applications/index.ts

@@ -7,6 +7,7 @@ const ADMIN_PASSWORD = Deno.env.get('ADMIN_PASSWORD') ?? '';
 const MAIL_FROM = Deno.env.get('MAIL_FROM') ?? 'MB3R Lab <noreply@mb3r-lab.org>';
 const MAILGUN_API_KEY = Deno.env.get('MAILGUN_API_KEY') ?? '';
 const MAILGUN_DOMAIN = Deno.env.get('MAILGUN_DOMAIN') ?? '';
+const MAIL_NOTIFY_TO = Deno.env.get('MAIL_NOTIFY_TO') ?? '';
 const MAILGUN_API_BASE_URL =
     Deno.env.get('MAILGUN_API_BASE_URL') ?? 'https://api.mailgun.net/v3';
 const DEFAULT_ALLOWED_ORIGINS = [
@@ -209,10 +210,20 @@ async function handlePost(req: Request): Promise<Response> {
         return jsonResponse(req, { message: 'Unable to save your request.' }, 500);
     }
 
+    let ownerNotificationStatus: 'sent' | 'skipped' | 'failed' = 'skipped';
     try {
-        await sendConfirmation(email, company);
+        ownerNotificationStatus = await sendOwnerNotification({
+            id: data?.id,
+            createdAt: data?.created_at,
+            applicantEmail: email,
+            company,
+            comment,
+            country,
+            clientIp: getClientIp(req)
+        });
     } catch (mailError) {
-        console.error('[applications] mailgun error', mailError);
+        ownerNotificationStatus = 'failed';
+        console.error('[applications] mailgun notify error', mailError);
     }
 
     return jsonResponse(
@@ -221,7 +232,8 @@ async function handlePost(req: Request): Promise<Response> {
             id: data?.id,
             created_at: data?.created_at,
             country: data?.country,
-            message: 'Request received.'
+            message: 'Request received.',
+            owner_notification_status: ownerNotificationStatus
         },
         201
     );
@@ -273,35 +285,42 @@ async function handleGet(req: Request): Promise<Response> {
     return jsonResponse(req, data || []);
 }
 
-async function sendConfirmation(to: string, company: string) {
-    if (!to || !MAILGUN_API_KEY || !MAILGUN_DOMAIN) {
-        return;
+type OwnerNotificationPayload = {
+    id: number | null | undefined;
+    createdAt: string | null | undefined;
+    applicantEmail: string;
+    company: string;
+    comment: string | null;
+    country: string | null;
+    clientIp: string;
+};
+
+async function sendOwnerNotification(payload: OwnerNotificationPayload): Promise<'sent' | 'skipped'> {
+    if (!MAIL_NOTIFY_TO || !MAILGUN_API_KEY || !MAILGUN_DOMAIN) {
+        return 'skipped';
     }
 
-    const subject = 'MB3R Lab — pilot request received';
+    const subject = 'MB3R Lab — new pilot request';
     const plainText = [
-        'Hi there,',
+        'New pilot request received:',
         '',
-        'Thanks for your interest in running a pilot with MB3R Lab.',
-        `Company: ${company || '—'}`,
+        `ID: ${payload.id ?? '—'}`,
+        `Created at: ${payload.createdAt ?? '—'}`,
+        `Email: ${payload.applicantEmail || '—'}`,
+        `Company: ${payload.company || '—'}`,
+        `Comment: ${payload.comment || '—'}`,
+        `Country: ${payload.country || '—'}`,
+        `Client IP: ${payload.clientIp || '—'}`,
         '',
-        'Our team will follow up shortly with next steps.',
-        '',
-        '— MB3R Lab'
+        'Open admin page to review full details.'
     ].join('\n');
 
-    const html = plainText
-        .split('\n')
-        .map((line) => (line ? `<p>${line}</p>` : '<br>'))
-        .join('');
-
     const endpoint = `${MAILGUN_API_BASE_URL.replace(/\/$/, '')}/${MAILGUN_DOMAIN}/messages`;
     const params = new URLSearchParams();
     params.append('from', MAIL_FROM);
-    params.append('to', to);
+    params.append('to', MAIL_NOTIFY_TO);
     params.append('subject', subject);
     params.append('text', plainText);
-    params.append('html', html);
 
     const authHeader = `Basic ${btoa(`api:${MAILGUN_API_KEY}`)}`;
 
@@ -318,6 +337,8 @@ async function sendConfirmation(to: string, company: string) {
         const body = await response.text();
         throw new Error(`Mailgun request failed: ${body}`);
     }
+
+    return 'sent';
 }
 
 function jsonResponse(