Mail when new Feedback Submitted

functions/package.json

@@ -34,6 +34,7 @@
     "jspdf": "^4.2.1",
     "jspdf-autotable": "^5.0.2",
     "luxon": "^3.7.2",
+    "nodemailer": "^8.0.3",
     "openai": "^6.17.0",
     "zod": "^3.25.76"
   },
@@ -46,6 +47,7 @@
     "@types/luxon": "^3.4.2",
     "@types/mocha": "^10.0.7",
     "@types/node": "^22",
+    "@types/nodemailer": "^7.0.11",
     "@types/sinon": "^21.0.0",
     "@typescript-eslint/eslint-plugin": "^8.54.0",
     "@typescript-eslint/parser": "^8.54.0",
@@ -70,4 +72,4 @@
     "serialize-javascript": "^7.0.4",
     "http-proxy-agent": "^7.0.2"
   }
-}
+}

functions/src/env.ts

@@ -7,6 +7,12 @@ import { defineSecret } from "firebase-functions/params";
 
 enum SecretKey {
   OPENAI_API_KEY = "OPENAI_API_KEY",
+  SMTP_HOST = "SMTP_HOST",
+  SMTP_PORT = "SMTP_PORT",
+  SMTP_USERNAME = "SMTP_USERNAME",
+  SMTP_PASSWORD = "SMTP_PASSWORD",
+  FEEDBACK_SENDER_EMAIL = "FEEDBACK_SENDER_EMAIL",
+  FEEDBACK_COORDINATOR_EMAIL = "FEEDBACK_COORDINATOR_EMAIL",
 }
 
 const openaiApiKey = defineSecret(SecretKey.OPENAI_API_KEY);
@@ -16,3 +22,39 @@ export const getOpenaiApiKey = (): string => openaiApiKey.value();
 export const getOpenaiSecretKeys = (): string[] => [SecretKey.OPENAI_API_KEY];
 
 export const openaiApiKeyParam: ReturnType<typeof defineSecret> = openaiApiKey;
+
+const smtpHost = defineSecret(SecretKey.SMTP_HOST);
+const smtpPort = defineSecret(SecretKey.SMTP_PORT);
+const smtpUsername = defineSecret(SecretKey.SMTP_USERNAME);
+const smtpPassword = defineSecret(SecretKey.SMTP_PASSWORD);
+const feedbackSenderEmail = defineSecret(SecretKey.FEEDBACK_SENDER_EMAIL);
+const feedbackCoordinatorEmail = defineSecret(
+  SecretKey.FEEDBACK_COORDINATOR_EMAIL,
+);
+
+export const getSmtpHost = (): string => smtpHost.value();
+
+export const getSmtpPort = (): string => smtpPort.value();
+
+export const getSmtpUsername = (): string => smtpUsername.value();
+
+export const getSmtpPassword = (): string => smtpPassword.value();
+
+export const getFeedbackSenderEmail = (): string => feedbackSenderEmail.value();
+
+export const getFeedbackCoordinatorEmail = (): string =>
+  feedbackCoordinatorEmail.value();
+
+export const smtpUsernameParam: ReturnType<typeof defineSecret> = smtpUsername;
+
+export const smtpPasswordParam: ReturnType<typeof defineSecret> = smtpPassword;
+
+export const feedbackEmailSecretParams: Array<ReturnType<typeof defineSecret>> =
+  [
+    smtpHost,
+    smtpPort,
+    smtpUsername,
+    smtpPassword,
+    feedbackSenderEmail,
+    feedbackCoordinatorEmail,
+  ];

functions/src/functions/onFeedbackCreated.ts

@@ -0,0 +1,98 @@
+// This source file is part of the MyHeart Counts project
+//
+// SPDX-FileCopyrightText: 2026 Stanford University and the project authors (see CONTRIBUTORS.md)
+// SPDX-License-Identifier: MIT
+
+import { logger } from "firebase-functions";
+import { onDocumentCreated } from "firebase-functions/v2/firestore";
+import { createTransport } from "nodemailer";
+import type SMTPTransport from "nodemailer/lib/smtp-transport";
+import {
+  feedbackEmailSecretParams,
+  getFeedbackCoordinatorEmail,
+  getFeedbackSenderEmail,
+  getSmtpHost,
+  getSmtpPassword,
+  getSmtpPort,
+  getSmtpUsername,
+} from "../env.js";
+import { defaultServiceAccount } from "./helpers.js";
+
+const formatFeedbackEmail = (
+  feedbackId: string,
+  data: Record<string, unknown>,
+): { subject: string; text: string } => {
+  const subject = `[MyHeartCounts] New Feedback Received (ID: ${feedbackId})`;
+
+  const { accountId, ...rest } = data;
+  const lines: string[] = [
+    `New feedback has been submitted.`,
+    ``,
+    `Feedback ID: ${feedbackId}`,
+    `From user: ${typeof accountId === "string" ? accountId : "unknown"}`,
+    ``,
+    `--- Feedback Content ---`,
+  ];
+
+  for (const [key, value] of Object.entries(rest)) {
+    const formatted =
+      typeof value === "string" ? value : JSON.stringify(value, null, 2);
+    lines.push(`${key}: ${formatted}`);
+  }
+
+  return { subject, text: lines.join("\n") };
+};
+
+export const onFeedbackCreated = onDocumentCreated(
+  {
+    document: "feedback/{feedbackId}",
+    serviceAccount: defaultServiceAccount,
+    secrets: feedbackEmailSecretParams,
+  },
+  async (event) => {
+    const snapshot = event.data;
+    if (!snapshot) {
+      logger.warn("onFeedbackCreated: No data in event");
+      return;
+    }
+
+    const feedbackId = event.params.feedbackId;
+    const data = snapshot.data();
+    const { subject, text } = formatFeedbackEmail(feedbackId, data);
+
+    try {
+      // requireTLS/forceAuth make the transport fail loudly if the server does
+      // not offer STARTTLS or AUTH, instead of silently sending
+      // unauthenticated. forceAuth is supported by nodemailer at runtime but
+      // missing from @types/nodemailer, so the options object needs a cast.
+      const port = Number(getSmtpPort());
+      const transporter = createTransport({
+        host: getSmtpHost(),
+        port,
+        secure: port === 465,
+        requireTLS: true,
+        forceAuth: true,
+        logger: true,
+        auth: {
+          user: getSmtpUsername(),
+          pass: getSmtpPassword(),
+        },
+      } as SMTPTransport.Options);
+
+      await transporter.sendMail({
+        from: `"MyHeart Counts" <${getFeedbackSenderEmail()}>`,
+        to: getFeedbackCoordinatorEmail(),
+        subject,
+        text,
+      });
+
+      logger.info(
+        `Feedback notification sent for ${feedbackId} to ${getFeedbackCoordinatorEmail()}`,
+      );
+    } catch (error) {
+      logger.error(
+        `Failed to send feedback notification for ${feedbackId}: ${String(error)}`,
+      );
+    }
+  },
+);

functions/src/index.ts

@@ -45,6 +45,7 @@ export * from "./functions/updateUserInformation.js";
 export * from "./functions/planNudges.js";
 export * from "./functions/planPosttrialNudges.js";
 export * from "./functions/sendNudges.js";
+export * from "./functions/onFeedbackCreated.js";
 export * from "./functions/onUserQuestionnaireResponseWritten.js";
 export * from "./functions/onUserDocumentSnapshot.js";
 export * from "./functions/deleteHealthSamples.js";