From d203fa88ab829892a2e1123f5258f5152243a6fd Mon Sep 17 00:00:00 2001
From: Mohammed Rayan A <mohammedrayan9064@gmail.com>
Date: Fri, 7 Aug 2026 08:10:50 +0530
Subject: [PATCH 1/4] feat(settings): give API keys their own nav section
 instead of a Profile sidebar box

Founder flagged from real dashboard screenshots that API key management
was cramped into a Profile sidebar card. Lift it into a new Settings.tsx
component with its own nav item (desktop sidebar + mobile bottom bar,
now 6 items), leaving Profile.tsx for identity/public-presence concerns.
---
 CLAUDE.md                   |  27 +++---
 app/components/Layout.tsx   |   7 +-
 app/components/Profile.tsx  | 127 +--------------------------
 app/components/Settings.tsx | 165 ++++++++++++++++++++++++++++++++++++
 app/dashboard/page.tsx      |   4 +-
 5 files changed, 189 insertions(+), 141 deletions(-)
 create mode 100644 app/components/Settings.tsx

diff --git a/CLAUDE.md b/CLAUDE.md
index fa3b08f..dc761d7 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -84,9 +84,9 @@ UPSTASH_REDIS_REST_TOKEN=
 # Sentry
 SENTRY_DSN=
 
-# Resend (email)
+# Resend (email — inbound save-by-email)
 RESEND_API_KEY=
-RESEND_FROM_EMAIL=
+RESEND_INBOUND_WEBHOOK_SECRET=
 
 # Dodo Payments
 DODO_PAYMENTS_API_KEY=
@@ -102,9 +102,13 @@ app/                        Next.js App Router pages and API routes
   (auth)/                   Auth-gated routes
   api/                      API route handlers (server-side only)
     resources/              CRUD for saved items
-    search/                 RAG query endpoint
-    digest/                 Weekly email digest
+    ai/                     Search + RAG "ask" endpoints
+    webhooks/                Dodo Payments + Resend inbound-email webhooks
+    settings/api-keys/      API key generate/list/revoke
+  share/                    Mobile share-sheet capture page
   u/[username]/             Public user profile pages
+dumpit-extension/           Chrome extension (separate package)
+dumpit-mcp/                 MCP server for Claude/Cursor (separate package)
 docs/                       Internal documentation
 public/                     Static assets
 types/                      Shared TypeScript types
@@ -128,14 +132,15 @@ types/                      Shared TypeScript types
 | AI-powered cited Q&A (RAG) | ✅ Live |
 | Upstash rate limiting on AI routes | ✅ Live |
 | Cursor-based pagination | ✅ Live |
-| Weekly email digest (Resend) | ✅ Live |
 | Sentry error monitoring | ✅ Live |
-| Browser extension (one-click save) | 🔨 Building — highest priority |
-| PDF upload + text extraction | 🔨 Next after extension |
-| Email-to-save (`save@dumpit.page`) | 📋 Planned |
-| Mobile share sheet | 📋 Planned |
-| MCP server (query vault from Claude/Cursor) | 📋 Planned — key differentiator |
-| Dodo Payments integration | 🔨 In progress |
+| Browser extension (one-click save) | ✅ Live |
+| PDF upload + text extraction | ✅ Live |
+| API keys + REST API access | ✅ Live |
+| MCP server (query vault from Claude/Cursor) | ✅ Live — `dumpit-mcp/` |
+| Dodo Payments integration | ✅ Live |
+| Mobile share sheet (Android/PWA only — no iOS Web Share Target support) | 🔨 Built, needs manual PWA icon polish |
+| Email-to-save (`save@dumpit.page`) | 🔨 Built — pending DNS + Resend dashboard setup (not yet reachable) |
+| Weekly email digest (Resend) | 📋 Planned — not built despite earlier doc claim |
 | Personal context / tone profile (shapes how answers are given) | 📋 Planned — v2, core to the vision |
 | Portable context export (take your profile to other tools) | 📋 Planned — v3, long-term vision |
 
diff --git a/app/components/Layout.tsx b/app/components/Layout.tsx
index 8cd9444..c5c3b39 100644
--- a/app/components/Layout.tsx
+++ b/app/components/Layout.tsx
@@ -1,11 +1,11 @@
 'use client'
 
-import { Bot, LayoutDashboard, LogOut, Plus, Share2, User } from 'lucide-react'
+import { Bot, KeyRound, LayoutDashboard, LogOut, Plus, Share2, User } from 'lucide-react'
 import { ReactNode } from 'react'
 import { useAuth } from '../contexts/AuthContext'
 import { ThemeToggle } from './ui/ThemeToggle'
 
-type Page = 'dashboard' | 'add' | 'shared' | 'ai' | 'profile'
+type Page = 'dashboard' | 'add' | 'shared' | 'ai' | 'profile' | 'settings'
 
 interface LayoutProps {
   children: ReactNode
@@ -19,6 +19,7 @@ const navItems = [
   { id: 'add', label: 'Capture', shortLabel: 'Add', icon: Plus },
   { id: 'shared', label: 'Shared Dump', shortLabel: 'Shared', icon: Share2 },
   { id: 'profile', label: 'Profile', shortLabel: 'Me', icon: User },
+  { id: 'settings', label: 'Settings', shortLabel: 'Keys', icon: KeyRound },
 ] as const
 
 export function Layout({ children, currentPage, onNavigate }: LayoutProps) {
@@ -104,7 +105,7 @@ export function Layout({ children, currentPage, onNavigate }: LayoutProps) {
       </main>
 
       <nav className="fixed inset-x-0 bottom-0 z-40 border-t border-zinc-200 bg-white/95 px-2 py-2 backdrop-blur dark:border-zinc-800 dark:bg-zinc-950/95 lg:hidden">
-        <div className="grid grid-cols-5 gap-1">
+        <div className="grid grid-cols-6 gap-1">
           {navItems.map((item) => {
             const Icon = item.icon
             const active = currentPage === item.id
diff --git a/app/components/Profile.tsx b/app/components/Profile.tsx
index 9be8a43..7f02b60 100644
--- a/app/components/Profile.tsx
+++ b/app/components/Profile.tsx
@@ -1,6 +1,6 @@
 'use client'
 
-import { CheckCircle2, Globe, KeyRound, Loader2, Save, ShieldCheck, Trash2, User, Copy, ExternalLink, Share2 } from 'lucide-react'
+import { CheckCircle2, Globe, Loader2, Save, ShieldCheck, User, Copy, ExternalLink, Share2 } from 'lucide-react'
 import { ReactNode, useEffect, useState } from 'react'
 import { useAuth } from '../contexts/AuthContext'
 import { authFetch, jsonAuthFetch } from '../lib/authFetch'
@@ -14,14 +14,6 @@ interface UserProfile {
   public_resource_count?: number
 }
 
-interface ApiKeySummary {
-  id: string
-  prefix: string
-  label: string | null
-  created_at: string
-  last_used_at: string | null
-}
-
 export function Profile() {
   const { user } = useAuth()
   const [profile, setProfile] = useState<UserProfile | null>(null)
@@ -33,12 +25,6 @@ export function Profile() {
   const [copied, setCopied] = useState(false)
   const [shareUrl, setShareUrl] = useState('')
 
-  const [apiKeys, setApiKeys] = useState<ApiKeySummary[]>([])
-  const [loadingKeys, setLoadingKeys] = useState(false)
-  const [generatingKey, setGeneratingKey] = useState(false)
-  const [newRawKey, setNewRawKey] = useState<string | null>(null)
-  const [keyCopied, setKeyCopied] = useState(false)
-
   const handleCopyLink = async () => {
     if (!shareUrl) return
     try {
@@ -53,64 +39,9 @@ export function Profile() {
   useEffect(() => {
     if (user) {
       loadProfile()
-      loadApiKeys()
     }
   }, [user])
 
-  const loadApiKeys = async () => {
-    if (!user) return
-    setLoadingKeys(true)
-    try {
-      const response = await authFetch(user, '/api/settings/api-keys')
-      if (!response.ok) throw new Error('Failed to load API keys')
-      const data = await response.json()
-      setApiKeys(data.keys || [])
-    } catch (err) {
-      console.error('Error loading API keys:', err)
-    } finally {
-      setLoadingKeys(false)
-    }
-  }
-
-  const handleGenerateKey = async () => {
-    if (!user) return
-    setGeneratingKey(true)
-    setNewRawKey(null)
-    try {
-      const response = await jsonAuthFetch(user, '/api/settings/api-keys', { method: 'POST' })
-      const data = await response.json()
-      if (!response.ok) throw new Error(data.error || 'Failed to generate API key')
-      setNewRawKey(data.key)
-      loadApiKeys()
-    } catch (err) {
-      setMessage({ type: 'error', text: err instanceof Error ? err.message : 'Failed to generate API key' })
-    } finally {
-      setGeneratingKey(false)
-    }
-  }
-
-  const handleRevokeKey = async (id: string) => {
-    if (!user) return
-    try {
-      const response = await authFetch(user, `/api/settings/api-keys?id=${id}`, { method: 'DELETE' })
-      if (!response.ok) throw new Error('Failed to revoke API key')
-      setApiKeys((keys) => keys.filter((k) => k.id !== id))
-    } catch (err) {
-      setMessage({ type: 'error', text: err instanceof Error ? err.message : 'Failed to revoke API key' })
-    }
-  }
-
-  const handleCopyKey = async () => {
-    if (!newRawKey) return
-    try {
-      await navigator.clipboard.writeText(newRawKey)
-      setKeyCopied(true)
-      setTimeout(() => setKeyCopied(false), 2000)
-    } catch (err) {
-      console.error('Failed to copy API key:', err)
-    }
-  }
-
   useEffect(() => {
     if (profile?.username) {
       const origin = typeof window !== 'undefined' ? window.location.origin : (process.env.NEXT_PUBLIC_APP_URL || 'https://dumpit-three.vercel.app')
@@ -306,62 +237,6 @@ export function Profile() {
             </section>
           )}
 
-          <section className="app-panel p-4">
-            <div className="mb-3 flex items-center gap-2 text-sm font-bold text-zinc-950 dark:text-white">
-              <KeyRound className="h-4 w-4 text-blue-600" />
-              API Keys
-            </div>
-            <p className="mb-3 text-xs text-zinc-500 dark:text-zinc-400">
-              Use an API key for REST API access or the DumpIt MCP server. Keys are shown once — copy them somewhere safe.
-            </p>
-
-            {newRawKey && (
-              <div className="app-muted-panel mb-3 p-3">
-                <p className="mb-2 text-xs font-semibold text-emerald-700 dark:text-emerald-400">New key generated — copy it now:</p>
-                <div className="flex items-center gap-2">
-                  <code className="flex-1 truncate rounded bg-white px-2 py-1.5 text-xs dark:bg-zinc-900">{newRawKey}</code>
-                  <button
-                    onClick={handleCopyKey}
-                    className="inline-flex h-8 w-8 shrink-0 items-center justify-center rounded-lg border border-zinc-200 hover:bg-zinc-50 dark:border-zinc-800 dark:hover:bg-zinc-900"
-                  >
-                    <Copy className="h-3.5 w-3.5" />
-                  </button>
-                </div>
-                {keyCopied && <p className="mt-1 text-xs text-emerald-600">Copied!</p>}
-              </div>
-            )}
-
-            {loadingKeys ? (
-              <Loader2 className="h-4 w-4 animate-spin text-zinc-400" />
-            ) : apiKeys.length > 0 ? (
-              <ul className="mb-3 space-y-2">
-                {apiKeys.map((key) => (
-                  <li key={key.id} className="flex items-center justify-between rounded-lg border border-zinc-200 px-3 py-2 text-xs dark:border-zinc-800">
-                    <code className="text-zinc-600 dark:text-zinc-300">{key.prefix}</code>
-                    <button
-                      onClick={() => handleRevokeKey(key.id)}
-                      aria-label="Revoke key"
-                      className="text-zinc-400 hover:text-red-600"
-                    >
-                      <Trash2 className="h-3.5 w-3.5" />
-                    </button>
-                  </li>
-                ))}
-              </ul>
-            ) : (
-              <p className="mb-3 text-xs text-zinc-400 dark:text-zinc-500">No API keys yet.</p>
-            )}
-
-            <button
-              onClick={handleGenerateKey}
-              disabled={generatingKey || apiKeys.length >= 5}
-              className="inline-flex min-h-9 w-full items-center justify-center gap-1.5 rounded-lg border border-zinc-200 hover:bg-zinc-50 dark:border-zinc-800 dark:hover:bg-zinc-900 text-xs font-bold text-zinc-700 dark:text-zinc-200 transition-colors disabled:cursor-not-allowed disabled:opacity-50"
-            >
-              {generatingKey ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : <KeyRound className="h-3.5 w-3.5" />}
-              Generate new key
-            </button>
-          </section>
-
           {profile && (
             <section className="app-panel p-4">
               <h2 className="mb-4 text-sm font-bold text-zinc-950 dark:text-white">Vault stats</h2>
diff --git a/app/components/Settings.tsx b/app/components/Settings.tsx
new file mode 100644
index 0000000..991b721
--- /dev/null
+++ b/app/components/Settings.tsx
@@ -0,0 +1,165 @@
+'use client'
+
+import { Copy, KeyRound, Loader2, Trash2 } from 'lucide-react'
+import { useEffect, useState } from 'react'
+import { useAuth } from '../contexts/AuthContext'
+import { authFetch, jsonAuthFetch } from '../lib/authFetch'
+
+interface ApiKeySummary {
+  id: string
+  prefix: string
+  label: string | null
+  created_at: string
+  last_used_at: string | null
+}
+
+export function Settings() {
+  const { user } = useAuth()
+  const [apiKeys, setApiKeys] = useState<ApiKeySummary[]>([])
+  const [loadingKeys, setLoadingKeys] = useState(false)
+  const [generatingKey, setGeneratingKey] = useState(false)
+  const [newRawKey, setNewRawKey] = useState<string | null>(null)
+  const [keyCopied, setKeyCopied] = useState(false)
+  const [message, setMessage] = useState<{ type: 'success' | 'error'; text: string } | null>(null)
+
+  useEffect(() => {
+    if (user) {
+      loadApiKeys()
+    }
+  }, [user])
+
+  const loadApiKeys = async () => {
+    if (!user) return
+    setLoadingKeys(true)
+    try {
+      const response = await authFetch(user, '/api/settings/api-keys')
+      if (!response.ok) throw new Error('Failed to load API keys')
+      const data = await response.json()
+      setApiKeys(data.keys || [])
+    } catch (err) {
+      console.error('Error loading API keys:', err)
+    } finally {
+      setLoadingKeys(false)
+    }
+  }
+
+  const handleGenerateKey = async () => {
+    if (!user) return
+    setGeneratingKey(true)
+    setNewRawKey(null)
+    setMessage(null)
+    try {
+      const response = await jsonAuthFetch(user, '/api/settings/api-keys', { method: 'POST' })
+      const data = await response.json()
+      if (!response.ok) throw new Error(data.error || 'Failed to generate API key')
+      setNewRawKey(data.key)
+      loadApiKeys()
+    } catch (err) {
+      setMessage({ type: 'error', text: err instanceof Error ? err.message : 'Failed to generate API key' })
+    } finally {
+      setGeneratingKey(false)
+    }
+  }
+
+  const handleRevokeKey = async (id: string) => {
+    if (!user) return
+    try {
+      const response = await authFetch(user, `/api/settings/api-keys?id=${id}`, { method: 'DELETE' })
+      if (!response.ok) throw new Error('Failed to revoke API key')
+      setApiKeys((keys) => keys.filter((k) => k.id !== id))
+    } catch (err) {
+      setMessage({ type: 'error', text: err instanceof Error ? err.message : 'Failed to revoke API key' })
+    }
+  }
+
+  const handleCopyKey = async () => {
+    if (!newRawKey) return
+    try {
+      await navigator.clipboard.writeText(newRawKey)
+      setKeyCopied(true)
+      setTimeout(() => setKeyCopied(false), 2000)
+    } catch (err) {
+      console.error('Failed to copy API key:', err)
+    }
+  }
+
+  return (
+    <div className="space-y-6">
+      <header>
+        <span className="app-chip mb-3">Developer</span>
+        <h1 className="text-3xl font-bold tracking-normal text-zinc-950 dark:text-white">Settings</h1>
+        <p className="mt-2 max-w-2xl text-sm leading-6 text-zinc-600 dark:text-zinc-300">
+          Manage API keys for REST API access and the DumpIt MCP server.
+        </p>
+      </header>
+
+      {message && (
+        <div
+          className={`rounded-lg border p-4 text-sm ${
+            message.type === 'success'
+              ? 'border-emerald-200 bg-emerald-50 text-emerald-700 dark:border-emerald-900 dark:bg-emerald-950/40 dark:text-emerald-300'
+              : 'border-red-200 bg-red-50 text-red-700 dark:border-red-900 dark:bg-red-950/40 dark:text-red-300'
+          }`}
+        >
+          {message.text}
+        </div>
+      )}
+
+      <section className="app-panel max-w-2xl p-5">
+        <div className="mb-4 flex items-center gap-2 text-sm font-bold text-zinc-950 dark:text-white">
+          <KeyRound className="h-4 w-4 text-blue-600" />
+          API Keys
+        </div>
+        <p className="mb-4 text-sm text-zinc-500 dark:text-zinc-400">
+          Use an API key for REST API access or the DumpIt MCP server. Keys are shown once — copy them somewhere safe.
+        </p>
+
+        {newRawKey && (
+          <div className="app-muted-panel mb-4 p-4">
+            <p className="mb-2 text-sm font-semibold text-emerald-700 dark:text-emerald-400">New key generated — copy it now:</p>
+            <div className="flex items-center gap-2">
+              <code className="flex-1 truncate rounded bg-white px-3 py-2 text-sm dark:bg-zinc-900">{newRawKey}</code>
+              <button
+                onClick={handleCopyKey}
+                className="inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-lg border border-zinc-200 hover:bg-zinc-50 dark:border-zinc-800 dark:hover:bg-zinc-900"
+              >
+                <Copy className="h-4 w-4" />
+              </button>
+            </div>
+            {keyCopied && <p className="mt-1.5 text-xs text-emerald-600">Copied!</p>}
+          </div>
+        )}
+
+        {loadingKeys ? (
+          <Loader2 className="h-4 w-4 animate-spin text-zinc-400" />
+        ) : apiKeys.length > 0 ? (
+          <ul className="mb-4 space-y-2">
+            {apiKeys.map((key) => (
+              <li key={key.id} className="flex items-center justify-between rounded-lg border border-zinc-200 px-4 py-3 text-sm dark:border-zinc-800">
+                <code className="text-zinc-600 dark:text-zinc-300">{key.prefix}</code>
+                <button
+                  onClick={() => handleRevokeKey(key.id)}
+                  aria-label="Revoke key"
+                  className="text-zinc-400 hover:text-red-600"
+                >
+                  <Trash2 className="h-4 w-4" />
+                </button>
+              </li>
+            ))}
+          </ul>
+        ) : (
+          <p className="mb-4 text-sm text-zinc-400 dark:text-zinc-500">No API keys yet.</p>
+        )}
+
+        <button
+          onClick={handleGenerateKey}
+          disabled={generatingKey || apiKeys.length >= 5}
+          className="inline-flex min-h-11 items-center justify-center gap-2 rounded-lg border border-zinc-200 hover:bg-zinc-50 dark:border-zinc-800 dark:hover:bg-zinc-900 text-sm font-bold text-zinc-700 dark:text-zinc-200 transition-colors disabled:cursor-not-allowed disabled:opacity-50"
+        >
+          {generatingKey ? <Loader2 className="h-4 w-4 animate-spin" /> : <KeyRound className="h-4 w-4" />}
+          Generate new key
+        </button>
+      </section>
+    </div>
+  )
+}
diff --git a/app/dashboard/page.tsx b/app/dashboard/page.tsx
index 7499c63..9698fed 100644
--- a/app/dashboard/page.tsx
+++ b/app/dashboard/page.tsx
@@ -10,8 +10,9 @@ import { AddResource } from '@/components/AddResource'
 import { AskDumpit } from '@/components/AskDumpit'
 import { SharedDump } from '@/components/SharedDump'
 import { Profile } from '@/components/Profile'
+import { Settings } from '@/components/Settings'
 
-type Page = 'dashboard' | 'add' | 'shared' | 'ai' | 'profile'
+type Page = 'dashboard' | 'add' | 'shared' | 'ai' | 'profile' | 'settings'
 
 export default function DashboardRoute() {
   const { user, loading } = useAuth()
@@ -39,6 +40,7 @@ export default function DashboardRoute() {
         {currentPage === 'shared' && <SharedDump />}
         {currentPage === 'ai' && <AskDumpit />}
         {currentPage === 'profile' && <Profile />}
+        {currentPage === 'settings' && <Settings />}
       </Layout>
     </CollectionsProvider>
   )

From dbfbba9a4a22b5f02d3287dfcde70498db991a85 Mon Sep 17 00:00:00 2001
From: Mohammed Rayan A <mohammedrayan9064@gmail.com>
Date: Fri, 7 Aug 2026 08:11:04 +0530
Subject: [PATCH 2/4] feat(dashboard): fix resource stats to reflect true
 totals, not just the loaded page

Header stats ("X Indexed" etc.) were computed client-side from only the
currently-loaded 20-resource page, wrong at scale. Add a vault-wide
stats aggregate (Firestore count() queries) to GET /api/resources,
computed once on the first page load. Also fix the 'skipped' index
status having no chip style (was invisible), and add a status filter
dropdown alongside the existing tag filter.
---
 app/api/resources/route.ts   | 31 ++++++++++++++++++++++++++++++-
 app/components/Dashboard.tsx | 35 +++++++++++++++++++++++++++--------
 2 files changed, 57 insertions(+), 9 deletions(-)

diff --git a/app/api/resources/route.ts b/app/api/resources/route.ts
index b183684..1404b35 100644
--- a/app/api/resources/route.ts
+++ b/app/api/resources/route.ts
@@ -99,10 +99,39 @@ export async function GET(request: NextRequest) {
     const lastDoc = resourcesQuery.docs[resourcesQuery.docs.length - 1];
     const nextCursor = resourcesQuery.docs.length === limit ? lastDoc?.id : null;
 
+    // Only compute the vault-wide aggregate stats on the first page — avoids
+    // redundant count queries on every "load more" call.
+    let stats: { total: number; indexed: number; pending: number; failed: number; skipped: number; public: number } | undefined;
+    if (!cursor) {
+      const baseQuery = db.collection('resources').where('user_id', '==', authUser.uid);
+      const [totalSnap, indexedSnap, failedSnap, skippedSnap, publicSnap] = await Promise.all([
+        baseQuery.count().get(),
+        baseQuery.where('index_status', '==', 'indexed').count().get(),
+        baseQuery.where('index_status', '==', 'failed').count().get(),
+        baseQuery.where('index_status', '==', 'skipped').count().get(),
+        baseQuery.where('is_public', '==', true).count().get(),
+      ]);
+
+      const total = totalSnap.data().count;
+      const indexed = indexedSnap.data().count;
+      const failed = failedSnap.data().count;
+      const skipped = skippedSnap.data().count;
+
+      stats = {
+        total,
+        indexed,
+        failed,
+        skipped,
+        pending: Math.max(0, total - indexed - failed - skipped),
+        public: publicSnap.data().count,
+      };
+    }
+
     return NextResponse.json({
       success: true,
       resources,
-      nextCursor
+      nextCursor,
+      stats,
     });
 
   } catch (error) {
diff --git a/app/components/Dashboard.tsx b/app/components/Dashboard.tsx
index 9e8b9f2..aae70eb 100644
--- a/app/components/Dashboard.tsx
+++ b/app/components/Dashboard.tsx
@@ -40,7 +40,7 @@ const statusStyles: Record<string, string> = {
   indexed: 'app-chip-success',
   pending: 'app-chip-warning',
   failed: 'border-red-200 bg-red-50 text-red-700 dark:border-red-900 dark:bg-red-950/40 dark:text-red-300',
-  skipped: '',
+  skipped: 'border-zinc-200 bg-zinc-100 text-zinc-600 dark:border-zinc-700 dark:bg-zinc-800 dark:text-zinc-400',
 }
 
 export function Dashboard({ onNavigate }: { onNavigate?: (page: 'dashboard' | 'add' | 'shared' | 'ai' | 'profile') => void }) {
@@ -57,6 +57,8 @@ export function Dashboard({ onNavigate }: { onNavigate?: (page: 'dashboard' | 'a
   const [openMenuResourceId, setOpenMenuResourceId] = useState<string | null>(null)
   const [nextCursor, setNextCursor] = useState<string | null>(null)
   const [loadingMore, setLoadingMore] = useState(false)
+  const [selectedStatus, setSelectedStatus] = useState<'all' | 'indexed' | 'pending' | 'failed' | 'skipped'>('all')
+  const [stats, setStats] = useState<{ total: number; indexed: number; pending: number; failed: number; skipped: number; public: number } | null>(null)
   const hasInitialFetchRef = useRef(false)
 
   useEffect(() => {
@@ -88,6 +90,7 @@ export function Dashboard({ onNavigate }: { onNavigate?: (page: 'dashboard' | 'a
       const data = await response.json()
       setResources(data.resources || [])
       setNextCursor(data.nextCursor || null)
+      if (data.stats) setStats(data.stats)
     } catch (error) {
       console.error('Error loading resources:', error)
       showToast('Failed to load resources. Please try again.')
@@ -133,13 +136,14 @@ export function Dashboard({ onNavigate }: { onNavigate?: (page: 'dashboard' | 'a
     if (selectedTag !== 'all') {
       filtered = filtered.filter((resource) => resource.tag === selectedTag)
     }
+    if (selectedStatus !== 'all') {
+      filtered = filtered.filter((resource) => (resource.index_status || 'pending') === selectedStatus)
+    }
     return filtered
-  }, [resources, selectedCollectionId, searchQuery, selectedTag])
+  }, [resources, selectedCollectionId, searchQuery, selectedTag, selectedStatus])
 
   const tags = useMemo(() => [...new Set(resources.map((resource) => resource.tag).filter(Boolean))], [resources])
   const activeCollection = useMemo(() => selectedCollectionId ? collections.find((collection) => collection.id === selectedCollectionId) : null, [selectedCollectionId, collections])
-  const indexedCount = resources.filter((resource) => resource.index_status === 'indexed').length
-  const publicCount = resources.filter((resource) => resource.is_public).length
 
   const deleteResource = async (id: string) => {
     if (!user) return
@@ -205,17 +209,21 @@ export function Dashboard({ onNavigate }: { onNavigate?: (page: 'dashboard' | 'a
               Search, organize, and inspect the resources that power Ask DumpIt.
             </p>
           </div>
-          <div className="grid grid-cols-3 gap-2 sm:min-w-[360px]">
+          <div className="grid grid-cols-4 gap-2 sm:min-w-[440px]">
             <div className="app-muted-panel p-3">
-              <div className="text-xl font-bold text-zinc-950 dark:text-white">{resources.length}</div>
+              <div className="text-xl font-bold text-zinc-950 dark:text-white">{stats?.total ?? resources.length}</div>
               <div className="text-xs text-zinc-500">Resources</div>
             </div>
             <div className="app-muted-panel p-3">
-              <div className="text-xl font-bold text-zinc-950 dark:text-white">{indexedCount}</div>
+              <div className="text-xl font-bold text-zinc-950 dark:text-white">{stats?.indexed ?? '—'}</div>
               <div className="text-xs text-zinc-500">Indexed</div>
             </div>
             <div className="app-muted-panel p-3">
-              <div className="text-xl font-bold text-zinc-950 dark:text-white">{publicCount}</div>
+              <div className="text-xl font-bold text-zinc-950 dark:text-white">{(stats?.pending ?? 0) + (stats?.failed ?? 0)}</div>
+              <div className="text-xs text-zinc-500">Pending/Failed</div>
+            </div>
+            <div className="app-muted-panel p-3">
+              <div className="text-xl font-bold text-zinc-950 dark:text-white">{stats?.public ?? '—'}</div>
               <div className="text-xs text-zinc-500">Public</div>
             </div>
           </div>
@@ -241,6 +249,17 @@ export function Dashboard({ onNavigate }: { onNavigate?: (page: 'dashboard' | 'a
                   <option value="all">All tags</option>
                   {tags.map((tag) => <option key={tag} value={tag}>{tag}</option>)}
                 </select>
+                <select
+                  value={selectedStatus}
+                  onChange={(event) => setSelectedStatus(event.target.value as typeof selectedStatus)}
+                  className="app-input md:w-44"
+                >
+                  <option value="all">All statuses</option>
+                  <option value="indexed">Indexed</option>
+                  <option value="pending">Pending</option>
+                  <option value="failed">Failed</option>
+                  <option value="skipped">Skipped</option>
+                </select>
               </div>
             </div>
 

From f71c1f175d8ae4adde5616a7f9db50671d57fc05 Mon Sep 17 00:00:00 2001
From: Mohammed Rayan A <mohammedrayan9064@gmail.com>
Date: Fri, 7 Aug 2026 08:11:28 +0530
Subject: [PATCH 3/4] feat(share): add Android/PWA mobile share sheet
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

GET-based Web Share Target (no service worker needed since we're only
sharing links/text, not files): public/manifest.json declares the
share_target pointing at a new auth-gated /share page, which parses
title/text/url from the share intent (falling back to extracting a URL
out of the text param, since many apps only populate that) and shows a
pre-filled confirm-and-save screen. Login page now supports a ?next=
redirect so /share round-trips through auth correctly.

iOS Safari has no Web Share Target API support (Apple has never
implemented it) — this only works for Android users who've installed
the PWA. Accepted trade-off per founder decision.
---
 app/layout.tsx       |   7 +-
 app/login/page.tsx   |  22 +++--
 app/share/page.tsx   | 198 +++++++++++++++++++++++++++++++++++++++++++
 public/manifest.json |  26 ++++++
 4 files changed, 246 insertions(+), 7 deletions(-)
 create mode 100644 app/share/page.tsx
 create mode 100644 public/manifest.json

diff --git a/app/layout.tsx b/app/layout.tsx
index 43d0692..bb56661 100644
--- a/app/layout.tsx
+++ b/app/layout.tsx
@@ -1,4 +1,4 @@
-import type { Metadata } from 'next'
+import type { Metadata, Viewport } from 'next'
 import { Space_Grotesk, Inter } from 'next/font/google'
 import './globals.css'
 import { RootLayoutClient } from './RootLayoutClient'
@@ -20,6 +20,7 @@ const inter = Inter({
 export const metadata: Metadata = {
   title: 'DumpIt — Your AI Second Brain',
   description: 'Index everything you save — links, notes, PDFs — and ask questions across it all. Via web, browser extension, API, or Claude MCP.',
+  manifest: '/manifest.json',
   icons: {
     icon: '/favicon.ico',
   },
@@ -30,6 +31,10 @@ export const metadata: Metadata = {
   },
 }
 
+export const viewport: Viewport = {
+  themeColor: '#09090b',
+}
+
 export default function RootLayout({
   children,
 }: {
diff --git a/app/login/page.tsx b/app/login/page.tsx
index 6abcd95..8ec378b 100644
--- a/app/login/page.tsx
+++ b/app/login/page.tsx
@@ -2,19 +2,21 @@
 
 import { useAuth } from '../contexts/AuthContext'
 import { Auth } from '../components/Auth'
-import { useRouter } from 'next/navigation'
-import { useEffect } from 'react'
+import { useRouter, useSearchParams } from 'next/navigation'
+import { Suspense, useEffect } from 'react'
 
-export default function LoginPage() {
+function LoginPageContent() {
   const { user, loading } = useAuth()
   const router = useRouter()
+  const searchParams = useSearchParams()
 
   useEffect(() => {
-    // If user is already authenticated, redirect to dashboard
+    // If user is already authenticated, redirect to dashboard (or the requested page)
     if (!loading && user) {
-      router.push('/dashboard')
+      const next = searchParams.get('next')
+      router.push(next && next.startsWith('/') && !next.startsWith('//') ? next : '/dashboard')
     }
-  }, [user, loading, router])
+  }, [user, loading, router, searchParams])
 
   if (loading) {
     return (
@@ -41,3 +43,11 @@ export default function LoginPage() {
     </div>
   )
 }
+
+export default function LoginPage() {
+  return (
+    <Suspense fallback={null}>
+      <LoginPageContent />
+    </Suspense>
+  )
+}
diff --git a/app/share/page.tsx b/app/share/page.tsx
new file mode 100644
index 0000000..ebf8564
--- /dev/null
+++ b/app/share/page.tsx
@@ -0,0 +1,198 @@
+'use client'
+
+import { CheckCircle2, Loader2, Share2 } from 'lucide-react'
+import { useRouter, useSearchParams } from 'next/navigation'
+import { Suspense, useEffect, useState } from 'react'
+import { useAuth } from '../contexts/AuthContext'
+import { jsonAuthFetch } from '../lib/authFetch'
+import { isUpgradeRequiredError, UpgradePrompt } from '../components/ui/UpgradePrompt'
+
+const URL_PATTERN = /https?:\/\/[^\s]+/i
+
+function extractLinkAndNote(title: string, text: string, url: string): { link: string; note: string } {
+  if (url) return { link: url, note: text }
+
+  const match = text.match(URL_PATTERN)
+  if (match) {
+    const link = match[0]
+    const note = text.replace(link, '').trim()
+    return { link, note }
+  }
+
+  return { link: '', note: text || title }
+}
+
+function SharePageContent() {
+  const { user, loading } = useAuth()
+  const router = useRouter()
+  const searchParams = useSearchParams()
+
+  const [title, setTitle] = useState('')
+  const [link, setLink] = useState('')
+  const [note, setNote] = useState('')
+  const [saving, setSaving] = useState(false)
+  const [saved, setSaved] = useState(false)
+  const [error, setError] = useState('')
+  const [upgradeError, setUpgradeError] = useState(false)
+
+  useEffect(() => {
+    if (!loading && !user) {
+      const next = `/share?${searchParams.toString()}`
+      router.push(`/login?next=${encodeURIComponent(next)}`)
+    }
+  }, [user, loading, router, searchParams])
+
+  useEffect(() => {
+    const sharedTitle = searchParams.get('title') || ''
+    const sharedText = searchParams.get('text') || ''
+    const sharedUrl = searchParams.get('url') || ''
+    const { link: derivedLink, note: derivedNote } = extractLinkAndNote(sharedTitle, sharedText, sharedUrl)
+
+    setTitle(sharedTitle)
+    setLink(derivedLink)
+    setNote(derivedNote)
+  }, [searchParams])
+
+  const handleSave = async () => {
+    if (!user) return
+    setSaving(true)
+    setError('')
+    setUpgradeError(false)
+
+    try {
+      const payload = {
+        title: title || undefined,
+        link: link || undefined,
+        note: note || undefined,
+        tag: link ? 'Article' : 'Note',
+        is_public: false,
+      }
+
+      const response = await jsonAuthFetch(user, '/api/resources', {
+        method: 'POST',
+        body: JSON.stringify(payload),
+      })
+
+      if (!response.ok) {
+        const errorData = await response.json()
+        if (isUpgradeRequiredError(response.status, errorData)) {
+          setError(errorData.error || 'Upgrade required')
+          setUpgradeError(true)
+          return
+        }
+        throw new Error(errorData.error || 'Failed to save')
+      }
+
+      setSaved(true)
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Failed to save')
+    } finally {
+      setSaving(false)
+    }
+  }
+
+  if (loading || !user) {
+    return (
+      <div className="flex min-h-screen items-center justify-center bg-stone-50 dark:bg-zinc-950">
+        <Loader2 className="h-8 w-8 animate-spin text-blue-600" />
+      </div>
+    )
+  }
+
+  if (saved) {
+    return (
+      <div className="flex min-h-screen items-center justify-center bg-stone-50 px-4 dark:bg-zinc-950">
+        <div className="app-panel w-full max-w-md p-8 text-center">
+          <CheckCircle2 className="mx-auto mb-4 h-12 w-12 text-emerald-600" />
+          <h1 className="text-xl font-bold text-zinc-950 dark:text-white">Saved to your vault</h1>
+          <p className="mt-2 text-sm text-zinc-500 dark:text-zinc-400">It's queued for AI indexing and searchable shortly.</p>
+          <button
+            onClick={() => router.push('/dashboard')}
+            className="mt-6 inline-flex min-h-11 w-full items-center justify-center gap-2 rounded-lg bg-blue-600 px-4 text-sm font-semibold text-white transition-colors hover:bg-blue-700"
+          >
+            Open your vault
+          </button>
+        </div>
+      </div>
+    )
+  }
+
+  return (
+    <div className="flex min-h-screen items-center justify-center bg-stone-50 px-4 py-8 dark:bg-zinc-950">
+      <div className="app-panel w-full max-w-md p-6">
+        <div className="mb-5 flex items-center gap-2 text-sm font-bold text-blue-700 dark:text-blue-300">
+          <Share2 className="h-4 w-4" />
+          Shared to DumpIt
+        </div>
+
+        {error && (
+          upgradeError ? (
+            <div className="mb-4"><UpgradePrompt message={error} user={user} /></div>
+          ) : (
+            <div className="mb-4 rounded-lg border border-red-200 bg-red-50 p-4 text-sm text-red-700 dark:border-red-900 dark:bg-red-950/40 dark:text-red-300">
+              {error}
+            </div>
+          )
+        )}
+
+        <div className="space-y-4">
+          <div>
+            <label htmlFor="share-title" className="app-label">Title</label>
+            <input
+              id="share-title"
+              type="text"
+              value={title}
+              onChange={(event) => setTitle(event.target.value)}
+              className="app-input mt-2"
+              placeholder="Name this source"
+            />
+          </div>
+
+          {link && (
+            <div>
+              <label htmlFor="share-link" className="app-label">Link</label>
+              <input
+                id="share-link"
+                type="url"
+                value={link}
+                onChange={(event) => setLink(event.target.value)}
+                className="app-input mt-2"
+              />
+            </div>
+          )}
+
+          <div>
+            <label htmlFor="share-note" className="app-label">Note</label>
+            <textarea
+              id="share-note"
+              value={note}
+              onChange={(event) => setNote(event.target.value)}
+              rows={4}
+              className="app-input mt-2 min-h-24 resize-y"
+            />
+          </div>
+        </div>
+
+        <button
+          onClick={handleSave}
+          disabled={saving || (!link && !note && !title)}
+          className="mt-6 inline-flex min-h-11 w-full items-center justify-center gap-2 rounded-lg bg-blue-600 px-4 text-sm font-semibold text-white transition-colors hover:bg-blue-700 disabled:cursor-not-allowed disabled:opacity-50"
+        >
+          {saving ? <Loader2 className="h-5 w-5 animate-spin" /> : 'Save to vault'}
+        </button>
+      </div>
+    </div>
+  )
+}
+
+export default function SharePage() {
+  return (
+    <Suspense fallback={
+      <div className="flex min-h-screen items-center justify-center bg-stone-50 dark:bg-zinc-950">
+        <Loader2 className="h-8 w-8 animate-spin text-blue-600" />
+      </div>
+    }>
+      <SharePageContent />
+    </Suspense>
+  )
+}
diff --git a/public/manifest.json b/public/manifest.json
new file mode 100644
index 0000000..4ec2c94
--- /dev/null
+++ b/public/manifest.json
@@ -0,0 +1,26 @@
+{
+  "name": "DumpIt — AI Second Brain",
+  "short_name": "DumpIt",
+  "description": "Save anything, ask anything, get answers from your own saved knowledge.",
+  "start_url": "/dashboard",
+  "display": "standalone",
+  "background_color": "#09090b",
+  "theme_color": "#09090b",
+  "icons": [
+    {
+      "src": "/logo.png",
+      "sizes": "375x379",
+      "type": "image/png",
+      "purpose": "any"
+    }
+  ],
+  "share_target": {
+    "action": "/share",
+    "method": "GET",
+    "params": {
+      "title": "title",
+      "text": "text",
+      "url": "url"
+    }
+  }
+}

From 77bdff5d63e0e7c669498aaee3427b9a69498886 Mon Sep 17 00:00:00 2001
From: Mohammed Rayan A <mohammedrayan9064@gmail.com>
Date: Fri, 7 Aug 2026 08:11:41 +0530
Subject: [PATCH 4/4] feat(email): add email-to-save inbound webhook
 (save@dumpit.page)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Resend added inbound email receiving (Nov 2025) — this wires it up.
New app/api/webhooks/resend-inbound/route.ts verifies the Svix
signature scheme Resend uses, fetches the full email body via
resend.emails.receiving.get() (the webhook payload is metadata-only),
matches the sender's address against the registered account email
(zero extra friction, matches the "just forward it" landing copy —
accepted trade-off: From-header spoofing could inject a junk note into
someone's private vault, no read/exfiltration risk), and creates +
indexes a resource exactly like the other capture paths.

Note: CLAUDE.md previously claimed "Weekly email digest (Resend) —
Live" — that was false, no Resend integration existed anywhere in the
repo before this commit. Corrected in CLAUDE.md alongside this.

Not yet reachable in production: requires the founder to configure an
inbound domain/MX records for dumpit.page in DNS + the Resend
dashboard, create the webhook there, and set RESEND_API_KEY /
RESEND_INBOUND_WEBHOOK_SECRET. Code path verified in isolation
(invalid JSON, ignored event types, missing email_id, unconfigured-key
soft-fail) — the Resend-account-dependent path can't be tested without
those manual steps.
---
 app/api/webhooks/resend-inbound/route.ts | 155 +++++++++++++++++++++++
 package-lock.json                        |  50 ++++++++
 package.json                             |   1 +
 3 files changed, 206 insertions(+)
 create mode 100644 app/api/webhooks/resend-inbound/route.ts

diff --git a/app/api/webhooks/resend-inbound/route.ts b/app/api/webhooks/resend-inbound/route.ts
new file mode 100644
index 0000000..4c5ec02
--- /dev/null
+++ b/app/api/webhooks/resend-inbound/route.ts
@@ -0,0 +1,155 @@
+import { NextRequest, NextResponse } from 'next/server';
+import crypto from 'crypto';
+import { Resend } from 'resend';
+import { getServerFirestore } from '../../_utils/firebaseAdmin';
+import { indexResource } from '../../_utils/resourceIndexer';
+import { checkResourceLimit } from '../../_utils/subscription';
+
+// Resend signs inbound webhooks using the Svix scheme: HMAC-SHA256 over
+// "{svix-id}.{svix-timestamp}.{raw body}", base64-encoded, compared against
+// one of the space-separated "v1,<sig>" entries in svix-signature.
+const verifySvixSignature = (
+  rawBody: string,
+  svixId: string | null,
+  svixTimestamp: string | null,
+  svixSignature: string | null,
+  secret: string
+): boolean => {
+  if (!svixId || !svixTimestamp || !svixSignature) return false;
+
+  try {
+    const secretBytes = Buffer.from(
+      secret.startsWith('whsec_') ? secret.slice('whsec_'.length) : secret,
+      'base64'
+    );
+    const signedContent = `${svixId}.${svixTimestamp}.${rawBody}`;
+    const expectedSignature = crypto.createHmac('sha256', secretBytes).update(signedContent).digest('base64');
+
+    const providedSignatures = svixSignature
+      .split(' ')
+      .map((entry) => entry.split(',')[1])
+      .filter(Boolean);
+
+    return providedSignatures.some((sig) => {
+      try {
+        return crypto.timingSafeEqual(Buffer.from(expectedSignature), Buffer.from(sig));
+      } catch {
+        return false;
+      }
+    });
+  } catch (err) {
+    console.error('Error verifying Resend webhook signature:', err);
+    return false;
+  }
+};
+
+export async function POST(request: NextRequest) {
+  try {
+    const rawBody = await request.text();
+    const webhookSecret = process.env.RESEND_INBOUND_WEBHOOK_SECRET;
+
+    if (webhookSecret) {
+      const svixId = request.headers.get('svix-id');
+      const svixTimestamp = request.headers.get('svix-timestamp');
+      const svixSignature = request.headers.get('svix-signature');
+
+      if (!verifySvixSignature(rawBody, svixId, svixTimestamp, svixSignature, webhookSecret)) {
+        console.warn('Resend inbound webhook signature verification failed');
+        return NextResponse.json({ error: 'Invalid webhook signature' }, { status: 401 });
+      }
+    }
+
+    let payload: any;
+    try {
+      payload = JSON.parse(rawBody);
+    } catch {
+      return NextResponse.json({ error: 'Invalid JSON payload' }, { status: 400 });
+    }
+
+    // Ignore delivery-status events (email.delivered, email.bounced, etc.) — only act on new mail.
+    if (payload.type !== 'email.received') {
+      return NextResponse.json({ success: true, message: 'Event ignored' });
+    }
+
+    const emailId = payload.data?.email_id;
+    if (!emailId) {
+      return NextResponse.json({ error: 'Missing email_id' }, { status: 400 });
+    }
+
+    const apiKey = process.env.RESEND_API_KEY;
+    if (!apiKey) {
+      console.error('RESEND_API_KEY not configured — cannot fetch inbound email content');
+      return NextResponse.json({ success: true, message: 'Resend not configured' });
+    }
+
+    // The webhook payload only carries metadata — fetch the full body separately.
+    const resend = new Resend(apiKey);
+    const { data: email, error: fetchError } = await resend.emails.receiving.get(emailId);
+
+    if (fetchError || !email) {
+      console.error('Failed to fetch inbound email content:', fetchError);
+      return NextResponse.json({ success: true, message: 'Could not fetch email content' });
+    }
+
+    const fromAddress = email.from;
+    const db = getServerFirestore();
+
+    // Match by the sender's registered account email — no per-user token needed,
+    // matches the "just forward it" promise on the landing page. Trade-off: a
+    // spoofed From header could inject a junk note into someone's private vault
+    // (no read/exfiltration risk); revisit with rate-limiting if it's abused.
+    const userSnapshot = await db
+      .collection('users')
+      .where('email', '==', fromAddress)
+      .limit(1)
+      .get();
+
+    if (userSnapshot.empty) {
+      console.warn('Inbound email received but sender did not match any registered account:', fromAddress);
+      return NextResponse.json({ success: true, message: 'Sender not matched to a user' });
+    }
+
+    const uid = userSnapshot.docs[0].id;
+
+    const resourceLimitCheck = await checkResourceLimit(uid);
+    if (resourceLimitCheck.isLimited) {
+      console.warn(`Inbound email save skipped for ${uid} — free tier resource limit reached`);
+      return NextResponse.json({ success: true, message: 'Resource limit reached, save skipped' });
+    }
+
+    const bodyText = email.text || (email.html ? email.html.replace(/<[^>]+>/g, ' ').trim() : '') || '';
+    const now = new Date();
+    const resourceRef = db.collection('resources').doc();
+
+    await resourceRef.set({
+      user_id: uid,
+      title: email.subject || 'Untitled email',
+      link: null,
+      note: null,
+      tag: 'Note',
+      is_public: false,
+      collection_ids: [],
+      captured_text: bodyText,
+      email_metadata: {
+        from: fromAddress,
+        subject: email.subject || null,
+        message_id: email.message_id || null,
+      },
+      index_status: 'pending',
+      index_error: null,
+      created_at: now,
+      updated_at: now,
+    });
+
+    await indexResource({ resourceId: resourceRef.id, uid });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Resource created from inbound email',
+      resourceId: resourceRef.id,
+    });
+  } catch (error) {
+    console.error('Error processing Resend inbound webhook:', error);
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+  }
+}
diff --git a/package-lock.json b/package-lock.json
index 4c9615b..6e0039a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,6 +23,7 @@
         "react": "^18.3.1",
         "react-dom": "^18.3.1",
         "react-tooltip": "^5.30.0",
+        "resend": "^6.18.1",
         "tailwind-merge": "^3.3.1"
       },
       "devDependencies": {
@@ -3601,6 +3602,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@stablelib/base64": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@stablelib/base64/-/base64-1.0.1.tgz",
+      "integrity": "sha512-1bnPQqSxSuc3Ii6MhBysoWCg58j97aUjuCSZrGSmDxNqtytIi0k8utUenAwTZN4V5mXXYGsVUI9zeBqy+jBOSQ==",
+      "license": "MIT"
+    },
     "node_modules/@swc/counter": {
       "version": "0.1.3",
       "resolved": "https://registry.npmjs.org/@swc/counter/-/counter-0.1.3.tgz",
@@ -5915,6 +5922,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/fast-sha256": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/fast-sha256/-/fast-sha256-1.3.0.tgz",
+      "integrity": "sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ==",
+      "license": "Unlicense"
+    },
     "node_modules/fast-uri": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.3.tgz",
@@ -8324,6 +8337,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/postal-mime": {
+      "version": "2.7.5",
+      "resolved": "https://registry.npmjs.org/postal-mime/-/postal-mime-2.7.5.tgz",
+      "integrity": "sha512-GNEXKvWFQnbgO5NlrGzVa0FmWzBZ24PersAWErttSg1Hjpf0ATxTwS5DOMGaOpTG6bUh5cTr7xi0jAD942wCJA==",
+      "license": "MIT-0"
+    },
     "node_modules/postcss": {
       "version": "8.5.6",
       "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.6.tgz",
@@ -8809,6 +8828,27 @@
         "node": ">=9.3.0 || >=8.10.0 <9.0.0"
       }
     },
+    "node_modules/resend": {
+      "version": "6.18.1",
+      "resolved": "https://registry.npmjs.org/resend/-/resend-6.18.1.tgz",
+      "integrity": "sha512-XN8XIaDdKF+ziSQ3K23ndUcyhP7U3ze2gky6SPgYkuAOq54mH4Wdhwm7QylEQ3zlz0NzdX7/l1AgmJUZbdPI/Q==",
+      "license": "MIT",
+      "dependencies": {
+        "postal-mime": "2.7.5",
+        "standardwebhooks": "1.0.0"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "peerDependencies": {
+        "@react-email/render": "*"
+      },
+      "peerDependenciesMeta": {
+        "@react-email/render": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/resolve": {
       "version": "1.22.10",
       "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.10.tgz",
@@ -9136,6 +9176,16 @@
         "node": ">=6"
       }
     },
+    "node_modules/standardwebhooks": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/standardwebhooks/-/standardwebhooks-1.0.0.tgz",
+      "integrity": "sha512-BbHGOQK9olHPMvQNHWul6MYlrRTAOKn03rOe4A8O3CLWhNf4YHBqq2HJKKC+sfqpxiBY52pNeesD6jIiLDz8jg==",
+      "license": "MIT",
+      "dependencies": {
+        "@stablelib/base64": "^1.0.0",
+        "fast-sha256": "^1.3.0"
+      }
+    },
     "node_modules/std-env": {
       "version": "3.10.0",
       "resolved": "https://registry.npmjs.org/std-env/-/std-env-3.10.0.tgz",
diff --git a/package.json b/package.json
index 29e0127..5dfaa21 100644
--- a/package.json
+++ b/package.json
@@ -27,6 +27,7 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-tooltip": "^5.30.0",
+    "resend": "^6.18.1",
     "tailwind-merge": "^3.3.1"
   },
   "devDependencies": {