From 04a92ec7dec56e62a40502f2326e64f8365f19af Mon Sep 17 00:00:00 2001
From: Chris Parsons <438676+chrisparsons83@users.noreply.github.com>
Date: Sun, 10 May 2026 11:18:57 -0700
Subject: [PATCH] Add branded dark-themed HTML email template (#402)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Introduces a shared email module that wraps all transactional emails in a
cohesive dark-themed template matching the site's visual identity (Barlow
font, #14171e background, #adf661 CTA buttons, logomark PNG header).

- app/lib/email.server.ts: new module with sendEmail, wrapInEmailTemplate,
  emailButton, emailParagraph, and escapeHtml helpers; Resend instance is
  lazily initialized as a singleton
- public/email-logo.png: 96×124px PNG of the logomark for email use (SVG
  gradients are not supported in Outlook)
- auth.server.ts: password reset and email verification now use the branded
  template; errors are thrown so Better Auth can surface failures
- support.tsx: internal notification uses sendEmail; adds a user-facing
  branded confirmation email (fire-and-forget so failures don't surface to
  the user); plain text fallback included
- scripts/sync-prod-db.sh: remove first_name/last_name from sanitize query
  (columns were dropped in #399)
- 13 unit tests covering all template helpers

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 app/lib/__tests__/email.server.test.ts | 101 ++++++++++++++++++
 app/lib/auth.server.ts                 |  26 +++--
 app/lib/email.server.ts                | 138 +++++++++++++++++++++++++
 app/routes/support.tsx                 |  34 ++++--
 public/email-logo.png                  | Bin 0 -> 3164 bytes
 scripts/sync-prod-db.sh                |   2 -
 6 files changed, 281 insertions(+), 20 deletions(-)
 create mode 100644 app/lib/__tests__/email.server.test.ts
 create mode 100644 app/lib/email.server.ts
 create mode 100644 public/email-logo.png

diff --git a/app/lib/__tests__/email.server.test.ts b/app/lib/__tests__/email.server.test.ts
new file mode 100644
index 0000000..b926951
--- /dev/null
+++ b/app/lib/__tests__/email.server.test.ts
@@ -0,0 +1,101 @@
+import { describe, expect, it, beforeEach, afterEach } from "vitest";
+import {
+  escapeHtml,
+  emailParagraph,
+  emailButton,
+  wrapInEmailTemplate,
+} from "~/lib/email.server";
+
+describe("escapeHtml", () => {
+  it("escapes all five special characters", () => {
+    expect(escapeHtml('&<>"\'')).toBe("&amp;&lt;&gt;&quot;&#39;");
+  });
+
+  it("leaves safe strings unchanged", () => {
+    expect(escapeHtml("Hello World")).toBe("Hello World");
+  });
+});
+
+describe("emailParagraph", () => {
+  it("wraps content in a <p> tag", () => {
+    const result = emailParagraph("Hello");
+    expect(result).toContain("<p ");
+    expect(result).toContain("Hello");
+    expect(result).toContain("</p>");
+  });
+
+  it("passes HTML through unescaped (caller is responsible for escaping)", () => {
+    const result = emailParagraph('<a href="x">link</a>');
+    expect(result).toContain('<a href="x">');
+  });
+});
+
+describe("emailButton", () => {
+  it("contains the href and button text", () => {
+    const result = emailButton("https://example.com/verify", "Verify My Email");
+    expect(result).toContain("https://example.com/verify");
+    expect(result).toContain("Verify My Email");
+  });
+
+  it("renders a table-wrapped anchor for Outlook compatibility", () => {
+    const result = emailButton("https://example.com", "Click me");
+    expect(result).toContain("<table");
+    expect(result).toContain("<a ");
+    expect(result).toContain('href="https://example.com"');
+  });
+});
+
+describe("wrapInEmailTemplate", () => {
+  const originalAppUrl = process.env.APP_URL;
+
+  beforeEach(() => {
+    process.env.APP_URL = "https://test.brackt.com";
+  });
+
+  afterEach(() => {
+    if (originalAppUrl === undefined) {
+      delete process.env.APP_URL;
+    } else {
+      process.env.APP_URL = originalAppUrl;
+    }
+  });
+
+  it("returns a complete HTML document", () => {
+    const result = wrapInEmailTemplate("<p>Body</p>");
+    expect(result).toContain("<!DOCTYPE html>");
+    expect(result).toContain("<html");
+    expect(result).toContain("</html>");
+  });
+
+  it("injects the content into the template", () => {
+    const result = wrapInEmailTemplate("<p>My content</p>");
+    expect(result).toContain("<p>My content</p>");
+  });
+
+  it("includes the preheader text when provided", () => {
+    const result = wrapInEmailTemplate("<p>Body</p>", "Preview text here");
+    expect(result).toContain("Preview text here");
+  });
+
+  it("omits the preheader span when not provided", () => {
+    const result = wrapInEmailTemplate("<p>Body</p>");
+    expect(result).not.toContain("mso-hide:all");
+  });
+
+  it("uses APP_URL for the logo src", () => {
+    const result = wrapInEmailTemplate("<p>Body</p>");
+    expect(result).toContain("https://test.brackt.com/email-logo.png");
+  });
+
+  it("falls back to brackt.com when APP_URL is not set", () => {
+    delete process.env.APP_URL;
+    const result = wrapInEmailTemplate("<p>Body</p>");
+    expect(result).toContain("https://brackt.com/email-logo.png");
+  });
+
+  it("escapes preheader text to prevent injection", () => {
+    const result = wrapInEmailTemplate("<p>Body</p>", "<script>alert(1)</script>");
+    expect(result).not.toContain("<script>");
+    expect(result).toContain("&lt;script&gt;");
+  });
+});
diff --git a/app/lib/auth.server.ts b/app/lib/auth.server.ts
index 0d78911..a3be544 100644
--- a/app/lib/auth.server.ts
+++ b/app/lib/auth.server.ts
@@ -2,17 +2,15 @@ import { betterAuth } from "better-auth";
 import { drizzleAdapter } from "better-auth/adapters/drizzle";
 import { eq } from "drizzle-orm";
 import bcrypt from "bcrypt";
-import { Resend } from "resend";
 import { db } from "~/server/db";
 import * as schema from "~/database/schema";
 import { generateFlagConfig } from "~/lib/flag-generator";
+import { sendEmail, wrapInEmailTemplate, emailButton, emailParagraph } from "~/lib/email.server";
 
 if (!process.env.BETTER_AUTH_SECRET) {
   throw new Error("BETTER_AUTH_SECRET is required");
 }
 
-const resend = new Resend(process.env.RESEND_API_KEY);
-
 const googleProvider = process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET
   ? { google: { clientId: process.env.GOOGLE_CLIENT_ID, clientSecret: process.env.GOOGLE_CLIENT_SECRET } }
   : {};
@@ -86,12 +84,17 @@ export const auth = betterAuth({
         bcrypt.compare(password, hash),
     },
     sendResetPassword: async ({ user, url }) => {
-      await resend.emails.send({
-        from: "Brackt <noreply@brackt.com>",
+      const { error } = await sendEmail({
         to: user.email,
         subject: "Reset your Brackt password",
-        html: `<p>Click the link below to reset your password. This link expires in 1 hour.</p><p><a href="${url}">${url}</a></p>`,
+        html: wrapInEmailTemplate(
+          emailParagraph("Click the button below to reset your Brackt password. This link expires in 1 hour.") +
+          emailButton(url, "Reset My Password") +
+          emailParagraph(`Or copy this link: <a href="${url}" style="color:#adf661;word-break:break-all;">${url}</a>`),
+          "Reset your Brackt password — link expires in 1 hour."
+        ),
       });
+      if (error) throw error;
     },
   },
   emailVerification: {
@@ -99,12 +102,17 @@ export const auth = betterAuth({
     requireEmailVerification: true,
     autoSignInAfterVerification: true,
     sendVerificationEmail: async ({ user, url }) => {
-      await resend.emails.send({
-        from: "Brackt <noreply@brackt.com>",
+      const { error } = await sendEmail({
         to: user.email,
         subject: "Verify your Brackt email",
-        html: `<p>Thanks for signing up for Brackt!</p><p>Click the link below to verify your email address. This link expires in 24 hours.</p><p><a href="${url}">Verify my email</a></p><p>Or copy this link: ${url}</p>`,
+        html: wrapInEmailTemplate(
+          emailParagraph("Thanks for signing up for Brackt! Click the button below to verify your email address. This link expires in 24 hours.") +
+          emailButton(url, "Verify My Email") +
+          emailParagraph(`Or copy this link: <a href="${url}" style="color:#adf661;word-break:break-all;">${url}</a>`),
+          "Verify your email to start using Brackt."
+        ),
       });
+      if (error) throw error;
     },
   },
   socialProviders: {
diff --git a/app/lib/email.server.ts b/app/lib/email.server.ts
new file mode 100644
index 0000000..43a4525
--- /dev/null
+++ b/app/lib/email.server.ts
@@ -0,0 +1,138 @@
+import { Resend } from "resend";
+
+const FONT_STACK =
+  "'Barlow', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif";
+
+const FROM_DEFAULT = "Brackt <noreply@brackt.com>";
+
+// Lazily initialized so import doesn't throw in test environments without RESEND_API_KEY.
+let _resend: Resend | null = null;
+function getResend(): Resend {
+  if (!_resend) {
+    const key = process.env.RESEND_API_KEY;
+    if (!key) throw new Error("RESEND_API_KEY is not set");
+    _resend = new Resend(key);
+  }
+  return _resend;
+}
+
+export async function sendEmail(opts: {
+  to: string;
+  subject: string;
+  html: string;
+  text?: string;
+  replyTo?: string;
+  from?: string;
+}): Promise<{ error: Error | null }> {
+  const resend = getResend();
+  const { error } = await resend.emails.send({
+    from: opts.from ?? FROM_DEFAULT,
+    to: opts.to,
+    subject: opts.subject,
+    html: opts.html,
+    ...(opts.text ? { text: opts.text } : {}),
+    ...(opts.replyTo ? { replyTo: opts.replyTo } : {}),
+  });
+  return { error: error ? new Error(error.message) : null };
+}
+
+export function escapeHtml(s: string): string {
+  return s
+    .replace(/&/g, "&amp;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;")
+    .replace(/'/g, "&#39;");
+}
+
+export function emailParagraph(html: string): string {
+  return `<p style="margin:0 0 16px;font-family:${FONT_STACK};font-size:16px;line-height:1.6;color:#ffffff;">${html}</p>`;
+}
+
+export function emailButton(href: string, text: string): string {
+  return `
+<table role="presentation" cellpadding="0" cellspacing="0" border="0" style="margin:24px 0;">
+  <tr>
+    <td bgcolor="#adf661" style="border-radius:6px;">
+      <a href="${escapeHtml(href)}" target="_blank" style="display:inline-block;padding:12px 28px;color:#14171e;font-family:${FONT_STACK};font-size:16px;font-weight:700;text-decoration:none;border-radius:6px;">${text}</a>
+    </td>
+  </tr>
+</table>`;
+}
+
+export function wrapInEmailTemplate(
+  content: string,
+  preheader?: string
+): string {
+  const appUrl = process.env.APP_URL ?? "https://brackt.com";
+  const logoUrl = `${appUrl}/email-logo.png`;
+  const year = new Date().getFullYear();
+
+  const preheaderHtml = preheader
+    ? `<span style="display:none;max-height:0;overflow:hidden;mso-hide:all;">${escapeHtml(preheader)}&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;&nbsp;&zwnj;</span>`
+    : "";
+
+  return `<!DOCTYPE html>
+<html lang="en" xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <meta name="color-scheme" content="light dark">
+  <meta name="supported-color-schemes" content="light dark">
+  <meta http-equiv="X-UA-Compatible" content="IE=edge">
+  <!--[if gte mso 9]>
+  <xml>
+    <o:OfficeDocumentSettings>
+      <o:AllowPNG/>
+      <o:PixelsPerInch>96</o:PixelsPerInch>
+    </o:OfficeDocumentSettings>
+  </xml>
+  <![endif]-->
+  <style>
+    @import url('https://fonts.googleapis.com/css2?family=Barlow:wght@400;600;700&display=swap');
+    body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
+    table, td { mso-table-lspace: 0pt; mso-table-rspace: 0pt; }
+    img { -ms-interpolation-mode: bicubic; border: 0; outline: none; text-decoration: none; }
+    body { margin: 0; padding: 0; background-color: #14171e; color-scheme: light dark; }
+    a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; }
+  </style>
+</head>
+<body style="margin:0;padding:0;background-color:#14171e;">
+  ${preheaderHtml}
+  <table role="presentation" cellpadding="0" cellspacing="0" border="0" width="100%" bgcolor="#14171e" style="background-color:#14171e;">
+    <tr>
+      <td align="center" style="padding:40px 16px;">
+        <!--[if mso]>
+        <table role="presentation" cellpadding="0" cellspacing="0" border="0" width="600"><tr><td>
+        <![endif]-->
+        <table role="presentation" cellpadding="0" cellspacing="0" border="0" width="100%" style="max-width:600px;background-color:#1c1f26;border-radius:8px;border:1px solid rgba(255,255,255,0.1);">
+          <!-- Header -->
+          <tr>
+            <td align="center" style="padding:32px 40px 24px;border-bottom:1px solid rgba(255,255,255,0.08);">
+              <img src="${logoUrl}" width="48" height="62" alt="Brackt" style="display:block;width:48px;height:62px;">
+            </td>
+          </tr>
+          <!-- Content -->
+          <tr>
+            <td style="padding:32px 40px;">
+              ${content}
+            </td>
+          </tr>
+          <!-- Footer -->
+          <tr>
+            <td align="center" style="padding:24px 40px;border-top:1px solid rgba(255,255,255,0.08);">
+              <p style="margin:0;font-family:${FONT_STACK};font-size:12px;line-height:1.5;color:rgba(255,255,255,0.45);">
+                &copy; ${year} Brackt. All rights reserved.
+              </p>
+            </td>
+          </tr>
+        </table>
+        <!--[if mso]>
+        </td></tr></table>
+        <![endif]-->
+      </td>
+    </tr>
+  </table>
+</body>
+</html>`;
+}
diff --git a/app/routes/support.tsx b/app/routes/support.tsx
index b440bef..a58433f 100644
--- a/app/routes/support.tsx
+++ b/app/routes/support.tsx
@@ -1,5 +1,6 @@
 import { data, useActionData, useLoaderData } from "react-router";
-import { Resend } from "resend";
+import { sendEmail, wrapInEmailTemplate, emailButton, emailParagraph, escapeHtml } from "~/lib/email.server";
+import { logger } from "~/lib/logger";
 import { Turnstile } from "@marsidev/react-turnstile";
 import { MessageCircle, Mail, CheckCircle } from "lucide-react";
 import { Button } from "~/components/ui/button";
@@ -73,25 +74,40 @@ export async function action({ request }: Route.ActionArgs) {
     }
   }
 
-  // Send email via Resend
-  const resendKey = process.env.RESEND_API_KEY;
-  if (!resendKey) {
-    return data({ error: "Server configuration error. Please try again later." });
-  }
-
-  const resend = new Resend(resendKey);
-  const { error: sendError } = await resend.emails.send({
+  // Send internal notification to support@brackt.com
+  const { error: sendError } = await sendEmail({
     from: "Brackt Support Form <noreply@brackt.com>",
     to: "support@brackt.com",
     replyTo: email,
     subject: `[Support] ${subject}`,
     text: `Name: ${name}\nEmail: ${email}\n\n${message}`,
+    html: wrapInEmailTemplate(
+      emailParagraph(`<strong>From:</strong> ${escapeHtml(name)} &lt;${escapeHtml(email)}&gt;`) +
+      emailParagraph(`<strong>Subject:</strong> ${escapeHtml(subject)}`) +
+      emailParagraph(escapeHtml(message).replace(/\n/g, "<br>")),
+    ),
   });
 
   if (sendError) {
     return data({ error: "Failed to send your message. Please try again." });
   }
 
+  // Send confirmation to the user — fire and forget so a failure doesn't surface as a user error
+  const appUrl = process.env.APP_URL ?? "https://brackt.com";
+  sendEmail({
+    to: email,
+    subject: "We received your message — Brackt Support",
+    html: wrapInEmailTemplate(
+      emailParagraph(`Hi ${escapeHtml(name)}, thanks for reaching out!`) +
+      emailParagraph("We've received your message and will get back to you as soon as we can.") +
+      emailButton(appUrl, "Back to Brackt"),
+      "We received your Brackt support request."
+    ),
+    text: `Hi ${name}, thanks for reaching out!\n\nWe've received your message and will get back to you as soon as we can.\n\nBrackt — ${appUrl}`,
+  }).then(({ error }) => {
+    if (error) logger.warn("Support confirmation email failed", { error, to: email });
+  });
+
   return data({ success: true as const });
 }
 
diff --git a/public/email-logo.png b/public/email-logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..4f8e1e0e7d6a3162f4be24abd502f847f4e7617f
GIT binary patch
literal 3164
zcmV-i45RajP)<h;3K|Lk000e1NJLTq003YB004Xl1^@s6mW;L700006VoOIv0RI60
z0RN!9r;`8x3=v60K~#90?VW#&RMi#7zvs@I-DLrH7Zl1`SEv%TU{VZ5jkZdNwOFG@
zVPl&VSyT{<RBNGDVi{|rq682Mksl&xjS&<ZtJPX5O4>+_@+)kAh=K}>%CG&wk7Z})
z-EaTcrOeLG?!GfK`}PgIPx7*P^X@%!_nv$2x$oS2&&aFCs)+pLC?N6Nh+<=_yau5?
zNF$$-{FK72jYW3jczNMyZoa2IlE(`0iv++;6!V&edAYLJ@?E(U9x6bI0Pk6H?)Kur
zZ^k5Mvz2FZQK-`i0@sMh>lYvYV%sZ6s;<jcUf2V&guok7%H*4Ruh^SO{;&sRi2yew
zgj?4ht-2|b{GkGJ!<iJk_Uh4zF>S_B0l7mUob_sB)nXFjHB+d7TtiG*+gP>0Yw}P5
z-NV$i$EtqiC1I$5Zi2uQYZ`AK-Br3!0o_N$&^-S}-A~IpOXO%I3i%EM%R7E<j@SsA
z(>=4aO^)TUbkAHkRwAs|l%*@!?DmQn6aj#ZM9KhwuI*(6MHb=+r7r~~BDNTmVhBn>
z^a0R^K!pJ30qC1$G0Kk@7CZ)EN=FIgm17e%FJe!PEnYDr%R=P^>lt$nHSQTnxVJ%M
z0*I0fMOhG+jqSbSqjV1)>wU%qsM6*)qa>C9uo1w<wGHDRO+=z|AefMWC<B8SfE&_2
zBn4ittUXV8$}ML+f3ULmvsIu>CMBV%Gg3e+*S~c1juGi(8$#gqI^At{W$)!n2{T1g
zXRVh2W@<W_#zNrz3c0QK(&ZMiN>^_Jii~@nKkJ<;Pt^l-_TtpVNw~ix<bbLdQ2IKJ
z#W$wPQVu~O08m-->>&#?PdgM@O1t#~l@X>ry=_1;g-z}vQW}*8`Px)RU1$R`q_W@A
zdJB17X$#7qYnn17Sxz_$$^uf>YKNhSYc5Wfp)|rF$yk{6gixu3;mI<LrNHwQ_JB4_
z?7MKkrF^2PL)W4rS%#yT-Gnot_7JiSzy*pd1CnnH0eHPa+C!jPQ-_4KQGl`sgrq{6
z-4IpHv~h8V-q0+ekv&w@zW}|G?;X;6rRo%Ydf>X!Ac}TLv@8;xAT+{RVrk<>G_yl#
z+XF%eTXsYuPTW<EK};Ef6bcAc)gG5NPR;ufrHF)xw9IL=v!Kca_0!X??BpK4Ijv;Q
ze1E<x3tVYpMAbCSBZx(TSR7CqVF2g0Ufm7_pZW1U+2Yb6G(%7d0k#1_EmvFI0+fiG
zd0ACMke^6E%he8RN}0tgYG4(RFRvT~O0wy#0Um<#1JaZzdjNrxo_(zm_Kz$Ko1a)n
zsj|D)##%Og0SNFAls7g2?60iD{mD0hRX|Y7l?o{r>dGqLB;SQLAWK}B?<%vjRX}iU
zKtRit#1c-59;lZKG&VpW+mr7dD{^hF3)bP66Hfy0<jM$s^#cd$&%TCaQP(L?Vl6&Q
zzIPrjjlG-OVs*^#Y9Be|HEll3fn3Y6&@2WBj@u?~Nd8E5LMB^u#wyq<h%r{cI-@$A
zEyQ19<+IwH67pFA2Hq<+;Db<|b2q_(syxOnZTC^m3giU~&-*BYybEu}{@HzLF;lZI
z6qL=g&iL&+sj__S0j?r#klTNu(>&j@?f#xFpct7BX}_xOs{*Xz{Who;U}o*_?;~ZR
zE*F<SS~_!Gx+lIW01(d=8$<;>bnx*zK|ZA{TTKFy=^Z`vxd&*BaBx&`FBcT{sXexk
z;9W`=i6wF8?EVjScm~>M1pwml4L1nRxJg_REjw8I6RAD+Fp2ZEmWhIyv->~zc4uh<
zJOuTO0w!@uwDdsTRWKMMhw8>bWN;>)aRM(tSvF%f@L;Fu0{bH7^?&}&;m6K$n<Ene
z)C1z_2!jBnOma2}We^4D0;s^D`k^q=S5t;|keiF+jT6(&dQ$OO0l9D4&CSt4AfC|Y
zOesh1OioS2*qdYJv9xh9Qt1IB><#aORiM@m8ffIlbIPWF={1ADJwV}Nrozb;5SMx!
zz%6sj9@whM6kr?REp0QRFg<^IjRM{=_sj><zHD`d@6*uka54m7Rj=AMJAch2qpuz>
z!YGc!>Uv8LU&Bq*Zol{7ys_Fk@mT@gb0jtZ3V?+S0L_|d2cBMW?~Vn9Ud!&Q0#rw0
zJ%&YyH!J0K^W{>iYzfx?;+y%N)(U*?0h-q8wP*!B-ul~JB3Cq<$Ok{K{X>^K$^GpC
zDjVRP9<T89*ASb)x~cmYmUmY60Q-WxVI1qaR%$aXQ7gp&JdfK7&Pzbn-B&yBiuq;t
z*QHC~|C_K^&z8q@i~3Kk2GB3_QnfH)*K<WqaiRoh9%uw30FDIYG5{ly-Q4-YWAVaO
zAa4%9ikQaD?C;!u<&di50FI+&=h`*^s{ml~zGsG7*eXD72hizo(jkHyC+&ac*Gtjf
zXXW$CxA!qLD2wt-2Hd@4*?@Z<Dynb(4ryi(ax|l9D&>(o4=lPURld(g*n4oJMAzbc
zW#Q0iP0I&PeoDk#Vj<hKLHn#ofor3SQyo{nH?w>X46^L3NuM-Dn!ZoqeO-_a0N^!M
z`<L9BEYIH_V2$_qYChWl4KMbe))0?0-AKw-br4sYnaRB%urFdk=f(ch8X$HYA%~Ur
z;CmDHFCTM4j_<x8?=~P9Mz}Lp4!C=VrOeXW1D7)Cgbd$}aK6ogx?=ahJqrohsq6(~
z#_w6x9|-Ue6l6o3%zF|`P%u}ifPzHSy%q3V0W>PlV!jY}5`VOmM$P|5D?bDRJOuUl
zBBO#e{U+D9hOqSB3q(eZ<LZc0`PIrw0~ylw*JKY>fj;u52LONo|0LvkMV5ZfzQ$n=
zV5+R(N8MJkjL9zrSmFcKaU}o=Vt9B=HAfVReAoy{K;__+;RevY$@z2TTf=zaTjP(C
z@|EuY#Q9ElZ57F$e3^)zgpe8l=P0raa$J}|R(}w-r)#k=dzB4mkfYm$=^y#v4@$#c
zWw}co-O*A12wsW0#){di46{?{w4@JUYs*Is5POvyg$n{a4b49dSc^lNUEM%{;{^q>
zS9Sp<5?6*VJMQRqD&S8bH>yjP0TkKd$M@tCSJ>qB5MnFG9nyH#nE-!#`|PocGbr0>
z0bQf4e>5mV7w6x&>?e$vB3SQrB*51WU_4i><jE>kPeF<*coT_zj>hkvPd@sdfZ$oG
z41yZRg?A$y4nUn_iE`EKO}Mkg72(+m=ik)OPsm7xu9?ct@CO`n2qCHvmID4)H3S9I
zZ5Is2adqUI8Vpl3)59CeH|=Ph1$iU5Zi}90@9y3sjA0+o83dalF{^Y%ggu}mL^xVC
zoKrRdfYb6L%^u$a!XI?*5W?K5X`dGIF#xERB*OtHJy+Jeb%C|GRFlV8*$gPXp*9?X
z(von^{T@OCC3CpEqTxS4YxMMRBAPju?|N%61yw3rDqO!tDqR3@bU~ED9*~ObL>2=m
zP-U|Ce_#)X)C5rqjc_uTe);Y_B*%1}vJF-u{PT$$)vk!J{h#ELFW$Yu0#9c!EN}Se
z?CW-)xN$VGJo9m{PIoZki@%SDa2Yc=XD#H)<a?DX;&f-&?zj6zQSdm4yO^10vZndS
z!IzRhaA3vruZ1Y5TBi(`eE$AL39*yJ%0z-^WGsl7S3RsUp8U~i{e#ZqxH|H$J>M=d
z)-4sXRA5U0lv=|QAqGQaD2OW);JGJlWyW=|vw>Wc`k`F>`G&VB)SeGG0-!nV6Tx9H
z?Ll`7AT@?^6CiElYtkNpnDnx}B8-5N)KXc7mYOR~`Wpq{-FcQJ6x>u@arNt|pJy7Z
zqvL`TWjawQ!<tC@&$KX&+#W<A%eGhipk3ty`EnLCzu8g{Exxa#hoJ(xmz}hB%*W*;
zI}BqSDxmxLw`1+->LH`P?krKLfNp@mI-2NJTZWAKysNZ6$BaAWi4%Ody5j0N5O1OM
zLj~jvzCpwLtIrwrsU}ybfb56^Ty1FPZ5w>`rc4Bc3ee+%_y-MFN8-^}ww-_FzHEer
z3h0_Th-?vSH(SB_rg+i&pANmeAy>j3h&=*i9r!dI5dfJxuDp@Xy^(}808IY_e!|0~
zGzicjlm-eL2-FFro?uNxxJ$&{x%HgUHQiJ67XAmrTPaJ_3N{V^0000<MNUMnLSTX-
CR_|W`

literal 0
HcmV?d00001

diff --git a/scripts/sync-prod-db.sh b/scripts/sync-prod-db.sh
index 3cf79d9..f50b4ee 100755
--- a/scripts/sync-prod-db.sh
+++ b/scripts/sync-prod-db.sh
@@ -144,8 +144,6 @@ UPDATE leagues SET discord_webhook_url = NULL;
 --    (admin accounts are untouched so admin pages remain accessible)
 UPDATE users SET
   email        = 'user_' || id || '@example.com',
-  first_name   = 'Test',
-  last_name    = 'User',
   display_name = 'Test User',
   image_url    = NULL
 WHERE is_admin = FALSE;