feat: portal self-service email

app/handoff.py

@@ -76,7 +76,12 @@ async def _email_notify(db: AsyncSession, tenant_id: int | None, h: HandoffReque
         f"Responde a este correo para contestarle directamente al cliente."
     )
     try:
-        # reply_to = the customer's email, so hitting "reply" answers the lead.
-        await send_email(settings, to, subject, body, reply_to=h.email or None)
+        # reply_to = the customer's email, so hitting "reply" answers the lead;
+        # sender_name = the store's own brand so the merchant sees who it's from.
+        await send_email(
+            settings, to, subject, body,
+            reply_to=h.email or None,
+            sender_name=f"{brand} · Asistente",
+        )
     except Exception:  # noqa: BLE001 - email is best-effort, never block the capture
         log.warning("handoff email notify failed (non-fatal)")

app/mailer.py

@@ -26,10 +26,16 @@ class BrevoMailer:
         self.sender_name = sender_name or sender_email
 
     async def send(
-        self, to: str, subject: str, body: str, *, reply_to: str | None = None
+        self,
+        to: str,
+        subject: str,
+        body: str,
+        *,
+        reply_to: str | None = None,
+        sender_name: str | None = None,
     ) -> bool:
         payload: dict[str, Any] = {
-            "sender": {"email": self.sender_email, "name": self.sender_name},
+            "sender": {"email": self.sender_email, "name": sender_name or self.sender_name},
             "to": [{"email": to}],
             "subject": subject,
             "textContent": body,
@@ -53,14 +59,21 @@ class BrevoMailer:
 
 
 async def send_email(
-    settings: Any, to: str, subject: str, body: str, *, reply_to: str | None = None
+    settings: Any,
+    to: str,
+    subject: str,
+    body: str,
+    *,
+    reply_to: str | None = None,
+    sender_name: str | None = None,
 ) -> bool:
-    """Send via the best configured provider: Brevo API first, then SMTP."""
+    """Send via the best configured provider: Brevo API first, then SMTP.
+    sender_name overrides the display name (e.g. per-tenant brand)."""
     if settings.brevo_api_key and settings.brevo_sender:
         mailer = BrevoMailer(
             settings.brevo_api_key, settings.brevo_sender, settings.brevo_sender_name
         )
-        return await mailer.send(to, subject, body, reply_to=reply_to)
+        return await mailer.send(to, subject, body, reply_to=reply_to, sender_name=sender_name)
     if settings.smtp_host:
         return await default_sender(settings)(to, subject, body)
     log.warning("no email provider configured; not sending: %s", subject)

app/portal_ui/index.html

@@ -46,6 +46,15 @@
 
   <div id="app" class="hidden">
     <div class="stats" id="stats"></div>
+    <div class="card">
+      <strong>📩 Email donde recibir los avisos</strong>
+      <p class="muted">Pon el correo de tu empresa. Cuando un cliente deje sus datos en el chat, te llegará el aviso aquí automáticamente.</p>
+      <div class="row">
+        <input id="notify-email" type="email" placeholder="tucorreo@empresa.com" />
+        <button onclick="saveEmail()">Guardar</button>
+      </div>
+      <p class="muted" id="email-state"></p>
+    </div>
     <div class="card">
       <div class="row" style="justify-content:space-between;">
         <strong>Solicitudes de contacto</strong>
@@ -70,10 +79,18 @@
     if(!r.ok){ $("loginerr").textContent = "Clave incorrecta."; return; }
     var me = await r.json();
     $("brand").textContent = me.brand_name || me.name || "Mi panel";
+    $("notify-email").value = me.support_email || "";
+    $("email-state").textContent = me.support_email ? "Recibirás los avisos en: " + me.support_email : "Aún no has puesto un email de avisos.";
     try { localStorage.setItem("ssb_portal_token", TOKEN); } catch(e){}
     $("login").classList.add("hidden"); $("app").classList.remove("hidden");
     loadSummary(); loadLeads();
   }
+  async function saveEmail(){
+    var email = $("notify-email").value.trim();
+    var r = await api("/portal/api/settings", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ support_email: email }) });
+    if(r.ok){ var d = await r.json(); $("email-state").textContent = d.support_email ? "✅ Guardado. Avisos a: " + d.support_email : "Email borrado."; }
+    else { $("email-state").textContent = "No se pudo guardar."; }
+  }
   function logout(){
     TOKEN = ""; try { localStorage.removeItem("ssb_portal_token"); } catch(e){}
     $("app").classList.add("hidden"); $("login").classList.remove("hidden"); $("token").value = "";

app/routes/portal.py

@@ -8,12 +8,17 @@ from pathlib import Path
 
 from fastapi import APIRouter, Depends, Header, HTTPException
 from fastapi.responses import HTMLResponse
+from pydantic import BaseModel
 from sqlalchemy import func, select
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.db import get_session
 from app.models import Event, HandoffRequest, Tenant
 
+
+class PortalSettingsIn(BaseModel):
+    support_email: str | None = None
+
 router = APIRouter(prefix="/portal")
 
 _PAGE = Path(__file__).resolve().parent.parent / "portal_ui" / "index.html"
@@ -44,7 +49,24 @@ async def portal_page() -> HTMLResponse:
 
 @router.get("/api/me")
 async def portal_me(tenant: Tenant = Depends(require_portal_tenant)) -> dict:
-    return {"slug": tenant.slug, "brand_name": tenant.brand_name, "name": tenant.name}
+    return {
+        "slug": tenant.slug,
+        "brand_name": tenant.brand_name,
+        "name": tenant.name,
+        "support_email": tenant.support_email,
+    }
+
+
+@router.post("/api/settings")
+async def portal_set_email(
+    body: PortalSettingsIn,
+    tenant: Tenant = Depends(require_portal_tenant),
+    db: AsyncSession = Depends(get_session),
+) -> dict[str, str]:
+    """The store sets, by itself, the email where it wants to receive leads."""
+    tenant.support_email = (body.support_email or "").strip()[:320]
+    await db.commit()
+    return {"support_email": tenant.support_email}
 
 
 @router.get("/api/handoffs")

tests/routes/test_portal.py

@@ -83,6 +83,36 @@ async def test_portal_me_and_summary(app_client, db_session):
     assert s["pending"] == 1
 
 
+async def test_portal_client_sets_own_notify_email(app_client, db_session):
+    _app, client = app_client
+    a, a_tok = await _tenant_with_token(db_session, "selfset")
+    hdr = {"Authorization": "Bearer " + a_tok}
+
+    r = await client.post(
+        "/portal/api/settings", headers=hdr, json={"support_email": "dueno@selfset.com"}
+    )
+    assert r.status_code == 200
+    assert r.json()["support_email"] == "dueno@selfset.com"
+
+    me = (await client.get("/portal/api/me", headers=hdr)).json()
+    assert me["support_email"] == "dueno@selfset.com"
+
+
+async def test_portal_settings_scoped_to_own_tenant(app_client, db_session):
+    _app, client = app_client
+    a, a_tok = await _tenant_with_token(db_session, "ta")
+    b, _b = await _tenant_with_token(db_session, "tb")
+    # A sets its email; B must be unaffected
+    await client.post(
+        "/portal/api/settings", headers={"Authorization": "Bearer " + a_tok},
+        json={"support_email": "only-a@x.com"},
+    )
+    await db_session.refresh(b)
+    assert b.support_email == ""  # B untouched
+    await db_session.refresh(a)
+    assert a.support_email == "only-a@x.com"
+
+
 async def test_admin_generates_dashboard_token(app_client):
     _app, client = app_client
     await client.post("/admin/tenants", headers=AUTH, json={"slug": "clienta"})

tests/test_handoff.py

@@ -141,8 +141,8 @@ async def test_handoff_uses_brevo_api_when_configured(db_session, monkeypatch):
 
     captured = {}
 
-    async def fake_send(self, to, subject, body, *, reply_to=None):
-        captured.update(to=to, reply_to=reply_to, sender=self.sender_email)
+    async def fake_send(self, to, subject, body, *, reply_to=None, sender_name=None):
+        captured.update(to=to, reply_to=reply_to, sender=self.sender_email, sender_name=sender_name)
         return True
 
     monkeypatch.setattr(mailer.BrevoMailer, "send", fake_send)
@@ -151,6 +151,7 @@ async def test_handoff_uses_brevo_api_when_configured(db_session, monkeypatch):
     assert captured["to"] == "dueno@bz.com"  # tenant's own inbox, not anyone else's
     assert captured["reply_to"] == "cliente@x.com"  # merchant replies straight to the lead
     assert captured["sender"] == "noreply@flexigobe.com"
+    assert "BZ" in captured["sender_name"]  # the From name is the store's own brand
 
 
 async def test_handoff_no_smtp_still_stores(db_session, monkeypatch):