SendGrid

SENDGRID_API_KEY=SG.xxxxxxxxxxxxxxxxxxxx
EMAIL_FROM_ADDRESS=noreply@leadmetrics.io
EMAIL_FROM_NAME=Leadmetrics

interface SendGridConfig {
  apiKey:      string;   // SG API key with "Mail Send" permission scope
  fromAddress: string;   // Must be a verified sender in the tenant's SG account
  fromName:    string;   // Display name shown in email client
}

channel:     'email'
provider:    'sendgrid'
config:      { apiKey, fromAddress, fromName }  ← AES-256-GCM encrypted
verified_at: TIMESTAMPTZ (NULL until test passes)

import sgMail from '@sendgrid/mail';
 
class SendGridProvider implements EmailProvider {
  readonly name = 'sendgrid';
 
  constructor(
    private apiKey:      string,
    private fromAddress: string,
    private fromName:    string,
  ) {
    sgMail.setApiKey(apiKey);
  }
 
  async send(message: EmailMessage): Promise<EmailSendResult> {
    const response = await sgMail.send({
      to:          message.to.map(r => ({ name: r.name, email: r.email })),
      from:        { name: this.fromName, email: this.fromAddress },
      replyTo:     message.replyTo,
      subject:     message.subject,
      html:        message.html,
      text:        message.text,
      attachments: message.attachments?.map(a => ({
        filename:    a.filename,
        content:     a.content.toString('base64'),
        type:        a.contentType,
        disposition: 'attachment',
      })),
    });
    return {
      messageId: response[0].headers['x-message-id'] as string,
      provider:  'sendgrid',
    };
  }
 
  async verify(): Promise<void> {
    // Sends a real test email to the configured from-address to verify API key and sender
    await sgMail.send({
      to:      this.fromAddress,
      from:    { name: this.fromName, email: this.fromAddress },
      subject: 'Leadmetrics — SendGrid connection test',
      text:    'This is a test email from Leadmetrics to verify your SendGrid configuration.',
    });
  }
}

resolveEmailProvider(tenantId)
  ├── DB query: notification_providers WHERE tenant_id = X AND channel = 'email' AND verified_at IS NOT NULL
  ├── Row found with provider = 'sendgrid' → new SendGridProvider(decrypt(row.config).apiKey, ...)
  └── No row / unverified                 → new SendGridProvider(env.SENDGRID_API_KEY, env.EMAIL_FROM_ADDRESS, ...)

// apps/notifications/src/templates/renderer.ts
const template = Handlebars.compile(fs.readFileSync(`./templates/${templateSlug}.hbs`, 'utf8'));
const html = template(variables);

// Inside email.handler.ts
const attachments = await Promise.all(
  (job.data.attachments ?? []).map(async (key) => {
    const object = await s3.getObject({ Bucket: config.S3_BUCKET, Key: key }).promise();
    return {
      filename:    path.basename(key),
      content:     object.Body as Buffer,
      contentType: object.ContentType ?? 'application/octet-stream',
    };
  }),
);