diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
new file mode 100644
index 0000000..839e5a5
--- /dev/null
+++ b/.github/copilot-instructions.md
@@ -0,0 +1,293 @@
+# CHURRO - AI Development Guidelines
+
+## Project Overview
+**CHURRO** (Cloud Hosting Usage Reporting with Recurring Output) is a Next.js 15 dashboard for visualizing Acquia Cloud hosting analytics (views/visits data). Built for Stanford University with Stanford Design System (Decanter) styling, basic HTTP authentication, and daily email reporting.
+
+## Architecture
+
+### Tech Stack
+- **Framework**: Next.js 15.5+ (App Router only, no Pages Router)
+- **Runtime**: Node.js 22.x (enforced via package.json engines)
+- **Styling**: TailwindCSS with Decanter preset (Stanford Design System)
+- **Authentication**: Basic HTTP Authentication via middleware
+- **Data Viz**: Recharts for charts/graphs
+- **Email**: Resend.com for daily summary emails
+- **Deployment**: Vercel
+
+### Key Components
+
+**API Routes** (`app/api/`):
+- `/api/acquia/applications` - Fetches all Acquia applications
+- `/api/acquia/visits` - Fetches visits metrics with pagination
+- `/api/acquia/views` - Fetches views metrics with pagination
+- `/api/email/daily-summary` - Sends daily usage summary emails (cron job)
+- `/api/test/email` - Test endpoint for email functionality
+
+**Core Services** (`lib/`):
+- `lib/acquia-api.ts` - Acquia Cloud API client with 6-hour caching and pagination
+- `lib/email-service.ts` - Shared email functionality with accessibility and security features
+
+**Data Flow**:
+1. User accesses application → Basic auth via middleware
+2. Dashboard fetches from `/api/acquia/*` routes
+3. API routes use `AcquiaApiServiceFixed` with OAuth2 client_credentials flow
+4. Response data parsed from Acquia's nested `_embedded.items[].datapoints[]` structure
+5. Data cached in-memory for 6 hours with cache keys based on query params
+
+## Development Patterns
+
+### Environment Variables
+**Required** (stored in `.env.local`, never committed):
+- `ACQUIA_API_KEY` / `ACQUIA_API_SECRET` - OAuth2 credentials (no quotes)
+- `ACQUIA_API_BASE_URL` / `ACQUIA_AUTH_BASE_URL` - API endpoints (optional, defaults provided)
+- `NEXT_PUBLIC_ACQUIA_SUBSCRIPTION_UUID` - Subscription identifier
+- `NEXT_PUBLIC_ACQUIA_MONTHLY_{VIEWS|VISITS}_ENTITLEMENT` - Usage limits
+- `BASIC_AUTH_USERNAME` / `BASIC_AUTH_PASSWORD` - Basic HTTP authentication credentials
+
+**Email Reporting** (optional, for daily summary emails):
+- `RESEND_API_KEY` - Resend.com API key for email delivery
+- `FROM_EMAIL` - Sender email address (use onboarding@resend.dev for testing)
+- `ADMIN_EMAIL` - Recipient email for daily summaries
+- `CRON_SECRET` - Protects cron endpoint from unauthorized access
+- `APP_URL` - Application URL for email links (optional, inferred from request)
+
+**Critical**: Values must NOT have surrounding quotes. API key/secret are auto-stripped of quotes in `acquia-api.ts` (lines 91-92).
+
+### Authentication
+
+**Basic HTTP Authentication** (`middleware.ts`):
+- Credentials: Configured via `BASIC_AUTH_USERNAME` and `BASIC_AUTH_PASSWORD` environment variables
+- **Required**: Must set both environment variables (validated at startup)
+- Protects all routes except `/_next`, `/api/public`, `/favicon.ico`
+- Allows localhost access (IPv4/IPv6) without authentication
+- Returns 503 Service Unavailable if auth not configured (security hardened)
+- No information disclosure about configuration status
+
+### Stanford Design System (Decanter)
+
+**Colors** - Use semantic Decanter tokens, NOT hex values:
+- Primary: `cardinal-red` (Stanford brand red)
+- Accents: `digital-blue`, `digital-green`
+- Grays: `black-{10,20,60,80}`, `gc-black`
+- **Never use**: Custom hex colors unless explicitly non-Stanford branding
+
+**Typography**:
+- Headings: `type-{0,1,2,3,4}` classes (defined in Decanter)
+- Body: `Source_Sans_3` (imported in `app/layout.tsx`)
+- Serif: `Source_Serif_4` for emphasis
+- Display: Custom `stanford` font (local woff2)
+
+**Interaction States**:
+- Use `hocus:` prefix for hover+focus states (Decanter utility)
+- Example: `hocus:bg-black hocus:text-white`
+
+**Spacing**:
+- Use Decanter scale: `p-{5,8,10,15,20,25,30,50}` (not arbitrary values)
+- Responsive: `px-20 sm:px-30 md:px-50 lg:px-30`
+
+### Acquia API Integration
+
+**Authentication** (`lib/acquia-api.ts` lines 81-177):
+- OAuth2 client credentials flow with 3 fallback methods
+- Token cached in `this.accessToken`, auto-retries on 401
+- **Debug tip**: Check lines 127-142 for auth method attempts
+
+**Data Parsing** (`lib/acquia-api.ts` lines 312-466):
+- Response structure: `_embedded.items[]` where each item = one application
+- Each item has `metadata.application.uuids[0]` + `datapoints[]` array
+- Datapoints format: `["2025-04-15T00:00:00+00:00", "1124"]` (date, value)
+- **Critical**: ONE item = ONE application, ALL datapoints belong to that app
+
+**Caching**:
+- 6-hour in-memory cache (lines 10-24)
+- Cache keys: `generateCacheKey([endpoint, uuid, from, to, resolution])`
+- Cache hit returns immediately without API call
+
+**Date Filtering** (lines 218-262):
+- API expects ISO 8601: `2025-04-15T23:59:59.000Z`
+- Frontend sends: `YYYY-MM-DD`
+- Conversion adds `T00:00:00.000Z` (start) or `T23:59:59.000Z` (end)
+- Filter format: `filter=from=2025-04-01T00:00:00.000Z,to=2025-04-30T23:59:59.000Z`
+
+### Component Patterns
+
+**Client Components** - Use `'use client'` directive when:
+- Using React hooks (`useState`, `useEffect`)
+- Browser APIs (localStorage, fetch)
+- Example: `components/Dashboard.tsx` (line 1)
+
+**Server Components** - Default for:
+- Page layouts (`app/layout.tsx`, `app/page.tsx`)
+- Static content rendering
+
+**Data Fetching**:
+- Client-side: `fetch('/api/acquia/visits')` from Dashboard
+- Pass query params: `new URLSearchParams({ subscriptionUuid, from, to })`
+- Handle loading states with `CountUpTimer` component
+
+## Email Reporting System
+
+**Daily Summary Emails** (`app/api/email/daily-summary/`):
+- **Trigger**: Vercel cron job runs daily at 9 AM UTC (configured in `vercel.json`)
+- **Data**: Aggregates views/visits across all applications for current month with data lag handling
+- **Data Lag Protection**: Uses 2-day offset when possible, but never crosses month boundaries:
+  - Day 1: Current day only (no previous data)
+  - Day 2: First day only (avoids previous month)
+  - Day 3: First day only (2-day offset would be previous month)
+  - Day 4+: 2-day offset within current month
+- **Calculations**:
+  - Month progress percentage (e.g., day 7 of 30 = 23.3%)
+  - Expected usage at current point vs actual usage
+  - Overage warnings when usage exceeds expected pace
+- **Email Service**: Uses Resend.com for reliable delivery
+- **Security**: Vercel cron jobs authenticated via User-Agent header; manual calls require CRON_SECRET
+
+**Email Content**:
+- Stanford-branded HTML email with Decanter color scheme
+- Current month usage vs entitlements (Views/Visits)
+- Progress tracking against monthly pace
+- Visual indicators for on-track vs over-usage status
+- Error handling for data collection failures
+- Full accessibility compliance (WCAG 2.1 AA)
+- HTML escaping for XSS protection
+
+**Setup Requirements**:
+1. `RESEND_API_KEY` - Sign up at resend.com
+2. `FROM_EMAIL` - Sender address (use onboarding@resend.dev for testing)
+3. `ADMIN_EMAIL` - Recipient for daily summaries
+4. `CRON_SECRET` - Generate with `openssl rand -base64 32`
+5. Configure in Vercel environment variables
+
+**Testing**:
+- Manual trigger: `GET /api/test/email` (browser accessible, basic auth only)
+- Production cron: Uses Vercel User-Agent validation or manual CRON_SECRET
+- Check Vercel function logs for debugging
+- Verify email delivery in Resend dashboard
+
+**Cron Schedule Options** (`vercel.json`):
+- `"0 9 * * *"` - 9 AM UTC daily (current)
+- `"0 17 * * *"` - 5 PM UTC daily (9 AM PST)
+- `"0 8 * * 1-5"` - 8 AM UTC, weekdays only
+
+## Common Tasks
+
+### Adding a New Chart Type
+1. Create component in `components/` (e.g., `NewChart.tsx`)
+2. Import Recharts primitives: `{ BarChart, Bar, XAxis, YAxis, Tooltip }`
+3. Accept `data` prop with `{ name: string, value: number, uuid: string }[]`
+4. Use Decanter colors: `className='fill-cardinal-red'`
+5. Add tab to `Dashboard.tsx` TABS array
+6. Add conditional render in tab content section
+
+### Debugging Acquia API Issues
+1. Check auth: Uncomment console.logs in `lib/acquia-api.ts` lines 95-141
+2. Verify date parsing: Check logs at lines 237-251 (date formatting)
+3. Inspect response structure: Logs at lines 320-330 (parsing entry point)
+4. Cache debugging: Search for "Returning cached" logs
+
+### Environment Setup
+
+**Local Development**:
+```bash
+nvm use                     # Ensures Node 22.x
+npm install                 # Install dependencies
+
+# Configure environment
+cp .env.example .env.local  # Create env file
+# Edit .env.local:
+#   ACQUIA_API_KEY=your-api-key
+#   ACQUIA_API_SECRET=your-api-secret
+#   NEXT_PUBLIC_ACQUIA_SUBSCRIPTION_UUID=your-subscription-uuid
+#   RESEND_API_KEY=your-resend-key (optional)
+#   FROM_EMAIL=sws-developers@lists.stanford.edu (optional)
+#   ADMIN_EMAIL=admin@stanford.edu (optional)
+#   CRON_SECRET=generate-with-openssl-rand-base64-32 (optional)
+
+# Start development server
+npm run dev                 # HTTP server (basic development)
+```
+
+### Setting Up Email Reporting
+1. **Get Resend API Key**: Sign up at [resend.com](https://resend.com)
+2. **Configure Environment Variables**:
+   ```bash
+   RESEND_API_KEY=re_xxxxxxxxxx
+   FROM_EMAIL=onboarding@resend.dev  # For testing
+   ADMIN_EMAIL=your-email@stanford.edu
+   CRON_SECRET=your-secure-random-key
+   ```
+3. **Test Email**: Visit `/api/test/email` in browser (basic auth only) or use curl
+4. **Deploy**: Cron job automatically runs daily at 9 AM UTC
+5. **Production**: Verify your own domain in Resend or work with Stanford IT for @stanford.edu addresses
+
+### Modifying Email Schedule
+1. Edit `vercel.json` cron schedule
+2. Common patterns:
+   - `"0 9 * * *"` - 9 AM UTC daily
+   - `"0 17 * * *"` - 5 PM UTC daily (9 AM PST)
+   - `"0 8 * * 1-5"` - 8 AM UTC, weekdays only
+
+## File Organization
+
+```
+app/
+  api/              # API routes (Next.js 15 route handlers)
+    acquia/         # Acquia Cloud API proxy routes
+    email/          # Email functionality
+      daily-summary/ # Daily summary cron job
+    test/           # Testing endpoints
+      email/        # Email testing
+  [pages]           # Page components (e.g., page.tsx, layout.tsx)
+components/         # React components
+  [Component]/      # Directory-based components with .styles.ts, .types.ts
+lib/                # Core business logic (API clients)
+  acquia-api.ts     # Acquia Cloud API integration
+  email-service.ts  # Shared email functionality with accessibility and security
+docs/               # Technical documentation (EMAIL-CONFIGURATION.md)
+public/fonts/       # Local fonts (stanford.woff2)
+tailwind/plugins/   # Tailwind customizations (font families)
+utilities/          # Helper utilities (datasource color mappings)
+vercel.json         # Vercel configuration including cron jobs
+```
+
+## Testing & Verification
+
+**Local Testing**:
+- Use basic auth credentials: `sws/sws`
+- Test API: Check DevTools Network tab for `/api/acquia/*` responses
+- Test email: Navigate to `/api/test/email`
+
+**Production Checklist**:
+- Verify all environment variables set in Vercel
+- Test basic authentication works
+- Verify email functionality with test endpoint (basic auth only)
+- Test cron endpoint with manual CRON_SECRET if needed
+- Check Vercel function logs for cron job execution
+- Confirm email delivery in Resend dashboard
+
+## Common Pitfalls
+
+1. **Quoted env vars** - `ACQUIA_API_KEY="abc"` breaks auth (remove quotes)
+2. **Wrong auth method** - This branch uses basic HTTP auth, not SAML
+3. **Date format mismatch** - Frontend sends `YYYY-MM-DD`, API needs ISO 8601
+4. **Cache staleness** - 6-hour cache may hide API issues, check timestamps
+5. **Decanter overrides** - Don't use arbitrary Tailwind values, use Decanter tokens
+6. **Missing email env vars** - `FROM_EMAIL` and `ADMIN_EMAIL` are required for email functionality
+7. **CRON_SECRET confusion** - Test endpoint doesn't need it; cron endpoint does for manual calls
+8. **Security oversights** - Always escape HTML output, validate environment variables at startup
+9. **Accessibility issues** - Use proper semantic HTML, ARIA labels, and table structure in emails
+
+## Key Documentation
+
+- **Email Configuration**: `docs/EMAIL-CONFIGURATION.md` (comprehensive email setup guide)
+- **Acquia API**: https://cloud.acquia.com/api (official docs, requires login)
+- **Decanter**: https://decanter.stanford.edu (Stanford Design System)
+- **Next.js 15**: https://nextjs.org/docs (App Router only)
+- **Resend**: https://resend.com/docs (email service documentation)
+
+## Branch Strategy
+- Main branch: `main` (current development branch)
+- Repository: `SU-SWS/churro` (Stanford University Web Services)
+
+---
+*Last Updated: Based on codebase analysis, November 2025 - Basic HTTP auth with email reporting*
\ No newline at end of file
diff --git a/app/api/email/daily-summary/route.ts b/app/api/email/daily-summary/route.ts
new file mode 100644
index 0000000..f7b23e1
--- /dev/null
+++ b/app/api/email/daily-summary/route.ts
@@ -0,0 +1,59 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { sendDailySummaryEmail } from '@/lib/email-service';
+
+export async function POST(request: NextRequest) {
+  try {
+    // Verify this is a legitimate Vercel cron job request
+    const userAgent = request.headers.get('user-agent');
+    const authHeader = request.headers.get('authorization');
+    const cronSecretHeader = request.headers.get('x-cron-secret');
+
+    // Check for Vercel cron user agent OR manual auth with CRON_SECRET
+    const isVercelCron = userAgent?.includes('vercel-cron/1.0');
+
+    // Validate CRON_SECRET is configured before doing any auth checks
+    const cronSecret = process.env.CRON_SECRET;
+    if (!cronSecret) {
+      console.error('❌ CRON_SECRET environment variable not configured');
+      // Only allow Vercel cron if CRON_SECRET is not configured
+      if (!isVercelCron) {
+        return NextResponse.json({
+          error: 'Service misconfigured - manual authentication not available'
+        }, { status: 503 });
+      }
+    }
+
+    const bearerAuth = cronSecret && authHeader?.startsWith('Bearer ') &&
+                      authHeader.slice(7) === cronSecret;
+    const headerAuth = cronSecret && cronSecretHeader === cronSecret;
+    const manualAuth = bearerAuth || headerAuth;
+
+    if (!isVercelCron && !manualAuth) {
+      console.error('❌ Unauthorized cron call - not from Vercel cron and no valid CRON_SECRET');
+      return NextResponse.json({
+        error: 'Unauthorized - must be Vercel cron job or provide valid CRON_SECRET via Authorization or X-Cron-Secret header'
+      }, { status: 401 });
+    }
+
+    const authMethod = isVercelCron ? 'Vercel Cron' :
+                      bearerAuth ? 'Manual (Bearer token)' :
+                      'Manual (X-Cron-Secret header)';
+    console.log(`✅ ${authMethod} authentication successful - executing daily summary...`);
+
+    // Call the shared email service function
+    const result = await sendDailySummaryEmail();
+
+    if (result.success) {
+      return NextResponse.json(result);
+    } else {
+      return NextResponse.json(result, { status: 500 });
+    }
+  } catch (error) {
+    console.error('❌ Error in daily summary cron job:', error);
+    return NextResponse.json({
+      success: false,
+      message: 'Error executing daily summary cron job',
+      error: error instanceof Error ? error.message : String(error)
+    }, { status: 500 });
+  }
+}
\ No newline at end of file
diff --git a/app/api/test/email/route.ts b/app/api/test/email/route.ts
new file mode 100644
index 0000000..ea78067
--- /dev/null
+++ b/app/api/test/email/route.ts
@@ -0,0 +1,32 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { sendDailySummaryEmail } from '@/lib/email-service';
+
+export async function GET(request: NextRequest) {
+  try {
+    console.log('🧪 Triggering test email via direct function call...');
+
+    // Call the shared email service function directly (no HTTP request needed)
+    const result = await sendDailySummaryEmail();
+
+    if (result.success) {
+      return NextResponse.json({
+        success: true,
+        message: 'Test email sent successfully!',
+        details: result
+      });
+    } else {
+      return NextResponse.json({
+        success: false,
+        message: 'Failed to send test email',
+        error: result
+      }, { status: 500 });
+    }
+  } catch (error) {
+    console.error('❌ Test email failed:', error);
+    return NextResponse.json({
+      success: false,
+      message: 'Error sending test email',
+      error: error instanceof Error ? error.message : String(error)
+    }, { status: 500 });
+  }
+}
\ No newline at end of file
diff --git a/docs/EMAIL-CONFIGURATION.md b/docs/EMAIL-CONFIGURATION.md
new file mode 100644
index 0000000..93b22ce
--- /dev/null
+++ b/docs/EMAIL-CONFIGURATION.md
@@ -0,0 +1,166 @@
+# CHURRO Environment Variables Configuration
+
+## Required Environment Variables
+
+Add these to your Vercel project environment variables or `.env.local` for development:
+
+### Acquia API Configuration
+```bash
+# Acquia Cloud API credentials (OAuth2)
+ACQUIA_API_KEY=your-api-key-uuid
+ACQUIA_API_SECRET=your-api-secret
+
+# API endpoints (optional - uses defaults if not specified)
+ACQUIA_API_BASE_URL=https://cloud.acquia.com/api
+ACQUIA_AUTH_BASE_URL=https://accounts.acquia.com/api
+
+# Subscription and entitlements
+NEXT_PUBLIC_ACQUIA_SUBSCRIPTION_UUID=your-subscription-uuid
+NEXT_PUBLIC_ACQUIA_MONTHLY_VIEWS_ENTITLEMENT=30000000
+NEXT_PUBLIC_ACQUIA_MONTHLY_VISITS_ENTITLEMENT=9000000
+```
+
+### SAML Authentication (if using)
+```bash
+# SAML certificates and configuration
+SAML_CERT=your-stanford-cert
+SAML_SP_CERT=your-sp-cert
+SAML_SP_PRIVATE_KEY=your-sp-private-key
+
+# Application URLs
+APP_URL=https://your-domain.vercel.app
+SAML_ENTITY_ID=https://your-entity-id
+
+# JWT for session management
+JWT_SECRET=your-jwt-secret-generate-with-openssl-rand-base64-32
+```
+
+### Email Reporting Configuration
+```bash
+# Email service (Resend.com)
+RESEND_API_KEY=re_xxxxxxxxxx
+
+# Email configuration
+FROM_EMAIL=onboarding@resend.dev  # Use for testing, or verify your own domain
+ADMIN_EMAIL=your-email@stanford.edu
+
+# For production with verified domain
+# FROM_EMAIL=noreply@your-verified-domain.com
+
+# Note: Stanford DMARC requires Stanford IT to configure DKIM for @stanford.edu addresses
+# See Stanford email authentication docs for production setup
+
+# Cron job security
+CRON_SECRET=your-secure-random-key-for-cron-protection
+```
+
+## Setup Instructions
+
+### 1. Resend Email Service
+1. Sign up at [resend.com](https://resend.com)
+2. Create an API key
+3. Add `RESEND_API_KEY` to your environment
+
+### 2. Generate CRON_SECRET
+```bash
+# Generate a secure random key
+openssl rand -base64 32
+```
+
+### 3. Configure Vercel Environment Variables
+1. Go to Vercel Dashboard → Your Project → Settings → Environment Variables
+2. Add each variable with appropriate values
+3. Set environment scope (Development/Preview/Production as needed)
+
+## Email Testing
+
+To test the daily summary email manually:
+
+```bash
+# Test endpoint - simple browser-accessible testing (no auth required beyond basic auth)
+# Visit in browser: http://localhost:3000/api/test/email
+curl -X GET "http://localhost:3000/api/test/email"
+
+# Production cron endpoint - requires CRON_SECRET for security
+curl -X POST "https://your-domain.vercel.app/api/email/daily-summary" \
+  -H "Authorization: Bearer your-cron-secret" \
+  -H "Content-Type: application/json"
+
+# Alternative cron auth method:
+curl -X POST "https://your-domain.vercel.app/api/email/daily-summary" \
+  -H "X-Cron-Secret: your-cron-secret" \
+  -H "Content-Type: application/json"
+```
+
+**Security Note**:
+- **Test endpoint** (`/api/test/email`): Protected by basic auth middleware only - easy for development
+- **Cron endpoint** (`/api/email/daily-summary`): Accepts Vercel cron jobs (via User-Agent) OR manual requests with `CRON_SECRET`
+
+## Data Collection Details
+
+**Data Lag Handling**: The email accounts for Acquia's data processing delays by using a 2-day offset when possible, but always ensures data stays within the current month:
+
+- **Day 1**: Uses current day only (no previous data available)
+- **Day 2**: Uses first day only (2-day offset would cross to previous month)
+- **Day 3**: Uses first day only (2-day offset would be previous month)
+- **Day 4+**: Uses 2-day offset (e.g., Day 4 reports through Day 2)
+
+**Month Boundary Protection**: Never includes data from the previous month to ensure accurate monthly usage tracking
+
+**Date Range**: Reports data from the 1st of the current month through the calculated end date based on data availability
+
+**Data Aggregation**: Combines views and visits across all applications in your Acquia subscription
+
+**Calculations**:
+- Month progress: Current day / Total days in month
+- Expected usage: Entitlement × Month progress percentage
+- Status: "On track" if actual usage ≤ expected usage
+
+## Cron Schedule
+
+The current schedule in `vercel.json` runs daily at 9 AM UTC:
+```json
+{
+  "crons": [
+    {
+      "path": "/api/email/daily-summary",
+      "schedule": "0 9 * * *"
+    }
+  ]
+}
+```
+
+**How Vercel Cron Authentication Works**:
+- Vercel cron jobs include `vercel-cron/1.0` in the User-Agent header
+- The endpoint validates this header to ensure requests come from Vercel
+- Manual testing still requires `CRON_SECRET` for security
+- No additional configuration needed in `vercel.json`
+
+### Common Cron Schedules
+- `0 9 * * *` - 9 AM UTC daily
+- `0 17 * * *` - 5 PM UTC daily (9 AM PST)
+- `0 8 * * 1-5` - 8 AM UTC, Monday-Friday only
+- `0 10 * * *` - 10 AM UTC daily
+
+## Security Notes
+
+1. **CRON_SECRET**: Prevents unauthorized access to the email endpoint
+2. **Environment Variables**: Never commit secrets to version control
+3. **API Keys**: Use environment-specific keys (dev/staging/prod)
+4. **Email Recipients**: Consider using distribution lists for multiple recipients
+
+## Troubleshooting
+
+### Common Issues
+1. **Email not sending**: Check `RESEND_API_KEY` is valid
+2. **Unauthorized cron calls**: Verify `CRON_SECRET` matches between environment and request header
+3. **Test endpoint access denied**: Ensure you can access the application (basic auth credentials required)
+4. **Cron endpoint 401 error**: Ensure `CRON_SECRET` is provided in Authorization or X-Cron-Secret header
+5. **No data in email**: Check Acquia API credentials and permissions
+6. **Wrong timezone**: Cron runs in UTC, adjust schedule accordingly
+
+### Logs
+Check Vercel function logs for:
+- Authentication errors with Acquia API
+- Email sending failures
+- Data aggregation issues
\ No newline at end of file
diff --git a/lib/acquia-api.ts b/lib/acquia-api.ts
index 5278f0f..3bb85e6 100644
--- a/lib/acquia-api.ts
+++ b/lib/acquia-api.ts
@@ -255,6 +255,13 @@ class AcquiaApiServiceFixed {
       return response;
     } catch (error) {
       if (axios.isAxiosError(error)) {
+        console.error('❌ Acquia API Error Details:', {
+          url: fullUrl,
+          status: error.response?.status,
+          statusText: error.response?.statusText,
+          data: error.response?.data
+        });
+
         if (error.response?.status === 401) {
           // console.log('🔄 Token expired, retrying...');
           this.accessToken = null;
diff --git a/lib/email-service.ts b/lib/email-service.ts
new file mode 100644
index 0000000..ceb7ee2
--- /dev/null
+++ b/lib/email-service.ts
@@ -0,0 +1,546 @@
+import { Resend } from 'resend';
+import AcquiaApiServiceFixed from '@/lib/acquia-api';
+
+const resend = new Resend(process.env.RESEND_API_KEY);
+
+/**
+ * Escapes HTML characters to prevent XSS attacks
+ * @param text - Text to escape
+ * @returns Escaped text safe for HTML insertion
+ */
+function escapeHtml(text: string | number): string {
+  const str = String(text);
+  const htmlEscapeMap: Record<string, string> = {
+    '&': '&amp;',
+    '<': '&lt;',
+    '>': '&gt;',
+    '"': '&quot;',
+    "'": '&#x27;',
+    '/': '&#x2F;',
+  };
+
+  return str.replace(/[&<>"'\/]/g, (char) => htmlEscapeMap[char] || char);
+}
+
+interface UsageMetric {
+  actual: number;
+  percentage: number;
+  expected: number;
+  entitlement: number;
+  status: 'On track' | 'Over expected pace';
+}
+
+interface EmailData {
+  views: UsageMetric;
+  visits: UsageMetric;
+  monthProgress: number;
+  currentDay: number;
+  daysInMonth: number;
+  reportDate: string;
+}
+
+interface EmailServiceResult {
+  success: boolean;
+  message: string;
+  emailId?: string;
+  data?: EmailData;
+  error?: string;
+}
+
+export async function sendDailySummaryEmail(): Promise<EmailServiceResult> {
+  try {
+    // Validate required environment variables
+    const fromEmail = process.env.FROM_EMAIL;
+    if (!fromEmail) {
+      console.error('❌ FROM_EMAIL environment variable not configured');
+      return {
+        success: false,
+        message: 'FROM_EMAIL environment variable is required for email functionality',
+        error: 'Missing FROM_EMAIL'
+      };
+    }
+
+    const adminEmail = process.env.ADMIN_EMAIL;
+    if (!adminEmail) {
+      console.error('❌ ADMIN_EMAIL environment variable not configured');
+      return {
+        success: false,
+        message: 'ADMIN_EMAIL environment variable is required for email functionality',
+        error: 'Missing ADMIN_EMAIL'
+      };
+    }
+
+    const subscriptionUuid = process.env.NEXT_PUBLIC_ACQUIA_SUBSCRIPTION_UUID;
+    if (!subscriptionUuid) {
+      console.error('❌ NEXT_PUBLIC_ACQUIA_SUBSCRIPTION_UUID environment variable not configured');
+      return {
+        success: false,
+        message: 'NEXT_PUBLIC_ACQUIA_SUBSCRIPTION_UUID environment variable is required',
+        error: 'Missing subscription UUID'
+      };
+    }
+
+    // Get monthly entitlements
+    const monthlyViewsEntitlement = parseInt(process.env.NEXT_PUBLIC_ACQUIA_MONTHLY_VIEWS_ENTITLEMENT || '30000000', 10);
+    const monthlyVisitsEntitlement = parseInt(process.env.NEXT_PUBLIC_ACQUIA_MONTHLY_VISITS_ENTITLEMENT || '9000000', 10);
+
+    // Validate entitlement values to prevent division by zero
+    if (monthlyViewsEntitlement <= 0) {
+      console.error('❌ NEXT_PUBLIC_ACQUIA_MONTHLY_VIEWS_ENTITLEMENT must be greater than zero');
+      return {
+        success: false,
+        message: 'Invalid views entitlement configuration - must be greater than zero',
+        error: 'Invalid views entitlement'
+      };
+    }
+
+    if (monthlyVisitsEntitlement <= 0) {
+      console.error('❌ NEXT_PUBLIC_ACQUIA_MONTHLY_VISITS_ENTITLEMENT must be greater than zero');
+      return {
+        success: false,
+        message: 'Invalid visits entitlement configuration - must be greater than zero',
+        error: 'Invalid visits entitlement'
+      };
+    }
+
+    console.log('📧 Starting daily summary email generation...');
+
+    // Fetch current month usage data
+    const usageData = await fetchCurrentMonthUsage(subscriptionUuid);
+
+    if (!usageData) {
+      console.error('❌ Failed to fetch usage data from Acquia API');
+      return {
+        success: false,
+        message: 'Failed to fetch usage data from Acquia API',
+        error: 'API fetch failed'
+      };
+    }
+
+    // Calculate month progress and expected usage
+    const now = new Date();
+    const currentDay = now.getDate();
+    const daysInMonth = new Date(now.getFullYear(), now.getMonth() + 1, 0).getDate();
+    const monthProgress = (currentDay / daysInMonth) * 100;
+
+    // Calculate expected usage at this point in the month
+    const expectedViews = Math.round(monthlyViewsEntitlement * (currentDay / daysInMonth));
+    const expectedVisits = Math.round(monthlyVisitsEntitlement * (currentDay / daysInMonth));
+
+    // Calculate percentages of entitlements used
+    const viewsPercentage = (usageData.totalViews / monthlyViewsEntitlement) * 100;
+    const visitsPercentage = (usageData.totalVisits / monthlyVisitsEntitlement) * 100;
+
+    // Determine status
+    const viewsStatus: 'On track' | 'Over expected pace' = usageData.totalViews <= expectedViews ? 'On track' : 'Over expected pace';
+    const visitsStatus: 'On track' | 'Over expected pace' = usageData.totalVisits <= expectedVisits ? 'On track' : 'Over expected pace';
+
+    const emailData = {
+      views: {
+        actual: usageData.totalViews,
+        percentage: viewsPercentage,
+        expected: expectedViews,
+        entitlement: monthlyViewsEntitlement,
+        status: viewsStatus
+      },
+      visits: {
+        actual: usageData.totalVisits,
+        percentage: visitsPercentage,
+        expected: expectedVisits,
+        entitlement: monthlyVisitsEntitlement,
+        status: visitsStatus
+      },
+      monthProgress: monthProgress,
+      currentDay: currentDay,
+      daysInMonth: daysInMonth,
+      reportDate: now.toLocaleDateString('en-US', {
+        weekday: 'long',
+        year: 'numeric',
+        month: 'long',
+        day: 'numeric'
+      })
+    };
+
+    // Generate and send email
+    const emailHTML = generateEmailHTML(emailData);
+
+    console.log('📧 Sending daily summary email...');
+    const result = await resend.emails.send({
+      from: fromEmail,
+      to: [adminEmail],
+      subject: `CHURRO Daily Usage Summary - ${emailData.reportDate}`,
+      html: emailHTML,
+    });
+
+    if (result.error) {
+      console.error('❌ Failed to send email:', result.error);
+      return {
+        success: false,
+        message: 'Failed to send email',
+        error: result.error.message || 'Unknown email error'
+      };
+    }
+
+    console.log('✅ Daily summary email sent successfully!', result.data?.id);
+
+    return {
+      success: true,
+      message: 'Daily summary email sent successfully',
+      emailId: result.data?.id,
+      data: emailData
+    };
+
+  } catch (error) {
+    console.error('❌ Error in sendDailySummaryEmail:', error);
+    return {
+      success: false,
+      message: 'Error sending daily summary email',
+      error: error instanceof Error ? error.message : String(error)
+    };
+  }
+}
+
+async function fetchCurrentMonthUsage(subscriptionUuid: string) {
+  try {
+    console.log('📊 Fetching current month usage data...');
+
+    // Get current month date range accounting for data processing delays
+    const now = new Date();
+    const firstDayOfMonth = new Date(now.getFullYear(), now.getMonth(), 1);
+
+    // Handle first day of month edge case and cross-month boundaries
+    let toDate: string;
+    let fromDate: string;
+
+    if (now.getDate() === 1) {
+      // On the first day, we don't have any previous days in this month to query
+      // Use the first day as both start and end date to get zero values
+      toDate = firstDayOfMonth.toISOString().split('T')[0];
+      fromDate = firstDayOfMonth.toISOString().split('T')[0];
+      console.log(`📊 First day of month detected - using current day for date range`);
+    } else if (now.getDate() === 2) {
+      // On the second day, 2-day offset would go to previous month
+      // Use first day of current month through first day only
+      fromDate = firstDayOfMonth.toISOString().split('T')[0];
+      toDate = firstDayOfMonth.toISOString().split('T')[0];
+      console.log(`📊 Second day of month detected - using first day only to avoid previous month`);
+    } else {
+      // Use 2-day offset for data availability, but ensure we don't cross month boundary
+      const twoDaysAgo = new Date(now);
+      twoDaysAgo.setDate(twoDaysAgo.getDate() - 2);
+
+      if (twoDaysAgo.getMonth() !== now.getMonth()) {
+        // 2-day offset crosses into previous month, use first day of current month instead
+        fromDate = firstDayOfMonth.toISOString().split('T')[0];
+        toDate = firstDayOfMonth.toISOString().split('T')[0];
+        console.log(`📊 2-day offset crosses month boundary - using first day only`);
+      } else {
+        // Safe to use 2-day offset within current month
+        fromDate = firstDayOfMonth.toISOString().split('T')[0];
+        toDate = twoDaysAgo.toISOString().split('T')[0];
+        console.log(`📊 Using 2-day offset for data availability - querying through ${toDate}`);
+      }
+    }
+
+    console.log(`📊 Fetching data from ${fromDate} to ${toDate}`);
+
+    // Initialize Acquia API service
+    const acquiaService = new AcquiaApiServiceFixed({
+      baseUrl: process.env.ACQUIA_API_BASE_URL || 'https://cloud.acquia.com/api',
+      authUrl: process.env.ACQUIA_AUTH_BASE_URL || 'https://accounts.acquia.com/api',
+      apiKey: process.env.ACQUIA_API_KEY || '',
+      apiSecret: process.env.ACQUIA_API_SECRET || ''
+    });
+
+    // Fetch data for current month
+    const [viewsData, visitsData] = await Promise.all([
+      acquiaService.getViewsDataByApplication(subscriptionUuid, fromDate, toDate),
+      acquiaService.getVisitsDataByApplication(subscriptionUuid, fromDate, toDate)
+    ]);
+
+    // Calculate totals
+    const totalViews = viewsData.reduce((sum, item) => sum + (item.views || 0), 0);
+    const totalVisits = visitsData.reduce((sum, item) => sum + (item.visits || 0), 0);
+
+    console.log(`📊 Current month usage: ${totalViews.toLocaleString()} views, ${totalVisits.toLocaleString()} visits`);
+
+    return {
+      totalViews,
+      totalVisits,
+      viewsData,
+      visitsData,
+      dateRange: { from: fromDate, to: toDate }
+    };
+
+  } catch (error) {
+    console.error('❌ Error fetching current month usage:', error);
+    return null;
+  }
+}
+
+function generateEmailHTML(data: EmailData): string {
+  const { views, visits, monthProgress, currentDay, daysInMonth, reportDate } = data;
+
+  // Escape all dynamic content for security
+  const safeReportDate = escapeHtml(reportDate);
+  const safeCurrentDay = escapeHtml(currentDay);
+  const safeDaysInMonth = escapeHtml(daysInMonth);
+  const safeMonthProgress = escapeHtml(monthProgress.toFixed(1));
+
+  // Views data with escaping
+  const safeViewsActual = escapeHtml(views.actual.toLocaleString());
+  const safeViewsPercentage = escapeHtml(views.percentage.toFixed(1));
+  const safeViewsEntitlement = escapeHtml(views.entitlement.toLocaleString());
+  const safeViewsStatus = escapeHtml(views.status);
+  const safeViewsExpected = escapeHtml(views.expected.toLocaleString());
+
+  // Visits data with escaping
+  const safeVisitsActual = escapeHtml(visits.actual.toLocaleString());
+  const safeVisitsPercentage = escapeHtml(visits.percentage.toFixed(1));
+  const safeVisitsEntitlement = escapeHtml(visits.entitlement.toLocaleString());
+  const safeVisitsStatus = escapeHtml(visits.status);
+  const safeVisitsExpected = escapeHtml(visits.expected.toLocaleString());
+
+  // Safe progress width for CSS style attribute
+  const safeProgressWidth = escapeHtml(Math.min(monthProgress, 100).toFixed(1));
+
+  // Validate status values for safe conditional logic
+  const isViewsOnTrack = views.status === 'On track';
+  const isVisitsOnTrack = visits.status === 'On track';
+
+  return `
+    <!DOCTYPE html>
+    <html lang="en">
+    <head>
+      <meta charset="UTF-8">
+      <meta name="viewport" content="width=device-width, initial-scale=1.0">
+      <title>CHURRO Daily Usage Summary - ${safeReportDate}</title>
+      <style>
+        body {
+          font-family: 'Source Sans Pro', Arial, sans-serif;
+          line-height: 1.6;
+          color: #2e2d29;
+          background-color: #f4f4f1;
+          margin: 0;
+          padding: 20px;
+        }
+        .container {
+          max-width: 600px;
+          margin: 0 auto;
+          background-color: #ffffff;
+          border-radius: 8px;
+          box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1);
+          overflow: hidden;
+        }
+        .header {
+          background-color: #8c1515;
+          color: #ffffff;
+          text-align: center;
+          padding: 30px 20px;
+        }
+        .header h1 {
+          margin: 0;
+          font-size: 24px;
+          font-weight: 700;
+        }
+        .content {
+          padding: 30px;
+        }
+        .metric-table {
+          width: 100%;
+          margin: 15px 0;
+          border-radius: 6px;
+          border-left: 4px solid #8c1515;
+          border-collapse: collapse;
+          overflow: hidden;
+        }
+        .metric-table.views {
+          background-color: #f9f6f2;
+        }
+        .metric-table.visits {
+          background-color: #f4f1f9;
+        }
+        .metric-table td {
+          padding: 20px;
+          vertical-align: middle;
+        }
+        .metric-label {
+          font-weight: 600;
+          font-size: 18px;
+          color: #8c1515;
+          width: 120px;
+        }
+        .metric-value {
+          text-align: right;
+          width: auto;
+        }
+        .metric-number {
+          font-size: 24px;
+          font-weight: 700;
+          color: #2e2d29;
+          display: block;
+        }
+        .metric-percentage {
+          font-size: 14px;
+          color: #767676;
+          display: block;
+        }
+        .status-indicator {
+          padding: 4px 12px;
+          border-radius: 20px;
+          font-size: 12px;
+          font-weight: 600;
+          text-transform: uppercase;
+          margin-top: 5px;
+          display: inline-block;
+        }
+        .status-on-track {
+          background-color: #d4edda;
+          color: #155724;
+        }
+        .status-over {
+          background-color: #f8d7da;
+          color: #721c24;
+        }
+        .progress-section {
+          background-color: #f9f9f9;
+          padding: 20px;
+          border-radius: 6px;
+          margin: 20px 0;
+          text-align: center;
+        }
+        .progress-bar {
+          background-color: #e0e0e0;
+          height: 20px;
+          border-radius: 10px;
+          overflow: hidden;
+          margin: 10px 0;
+        }
+        .progress-fill {
+          background-color: #8c1515;
+          height: 100%;
+          transition: width 0.3s ease;
+        }
+        .footer {
+          background-color: #f8f8f8;
+          padding: 20px;
+          text-align: center;
+          font-size: 12px;
+          color: #767676;
+        }
+        .stanford-branding {
+          color: #8c1515;
+          font-weight: 600;
+        }
+        .sr-only {
+          position: absolute;
+          width: 1px;
+          height: 1px;
+          padding: 0;
+          margin: -1px;
+          overflow: hidden;
+          clip: rect(0, 0, 0, 0);
+          white-space: nowrap;
+          border: 0;
+        }
+        .skip-link {
+          position: absolute;
+          top: -40px;
+          left: 6px;
+          background: #000;
+          color: #fff;
+          padding: 8px;
+          text-decoration: none;
+          z-index: 1000;
+        }
+        .skip-link:focus {
+          top: 6px;
+        }
+      </style>
+    </head>
+    <body>
+      <a href="#main-content" class="skip-link">Skip to main content</a>
+      <div class="container" role="main">
+        <header class="header" role="banner">
+          <h1><span aria-hidden="true">📊</span> CHURRO Daily Usage Summary</h1>
+          <p style="margin: 10px 0 0 0; opacity: 0.9;">${safeReportDate}</p>
+        </header>
+
+        <main class="content" id="main-content">
+          <section class="progress-section" aria-labelledby="progress-heading">
+            <h2 id="progress-heading" style="margin: 0 0 10px 0; color: #8c1515; font-size: 18px;">Month Progress</h2>
+            <p style="margin: 0; font-size: 16px;">Day ${safeCurrentDay} of ${safeDaysInMonth} (${safeMonthProgress}% complete)</p>
+            <div class="progress-bar" role="progressbar" aria-valuenow="${safeMonthProgress}" aria-valuemin="0" aria-valuemax="100" aria-label="Month progress: ${safeMonthProgress}% complete">
+              <div class="progress-fill" style="width: ${safeProgressWidth}%;"></div>
+            </div>
+            <p class="sr-only">Progress bar showing ${safeMonthProgress}% of the month has elapsed</p>
+          </section>
+
+          <table class="metric-table views" cellpadding="0" cellspacing="0" role="table" aria-labelledby="views-caption">
+            <caption id="views-caption" class="sr-only">Website Views Usage Summary</caption>
+            <thead class="sr-only">
+              <tr>
+                <th scope="col">Metric Type</th>
+                <th scope="col">Current Usage and Status</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <th scope="row" class="metric-label">
+                  <span aria-hidden="true">📈</span> Views
+                </th>
+                <td class="metric-value">
+                  <span class="metric-number">${safeViewsActual}</span>
+                  <span class="metric-percentage">${safeViewsPercentage}% of ${safeViewsEntitlement} monthly limit</span>
+                  <span class="status-indicator ${isViewsOnTrack ? 'status-on-track' : 'status-over'}" role="status" aria-label="Status: ${safeViewsStatus}">
+                    <span aria-hidden="true">${isViewsOnTrack ? '✓' : '⚠'}</span> ${safeViewsStatus}
+                  </span>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+
+          <table class="metric-table visits" cellpadding="0" cellspacing="0" role="table" aria-labelledby="visits-caption">
+            <caption id="visits-caption" class="sr-only">Website Visits Usage Summary</caption>
+            <thead class="sr-only">
+              <tr>
+                <th scope="col">Metric Type</th>
+                <th scope="col">Current Usage and Status</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <th scope="row" class="metric-label">
+                  <span aria-hidden="true">👥</span> Visits
+                </th>
+                <td class="metric-value">
+                  <span class="metric-number">${safeVisitsActual}</span>
+                  <span class="metric-percentage">${safeVisitsPercentage}% of ${safeVisitsEntitlement} monthly limit</span>
+                  <span class="status-indicator ${isVisitsOnTrack ? 'status-on-track' : 'status-over'}" role="status" aria-label="Status: ${safeVisitsStatus}">
+                    <span aria-hidden="true">${isVisitsOnTrack ? '✓' : '⚠'}</span> ${safeVisitsStatus}
+                  </span>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+
+          <section style="margin-top: 30px; padding: 15px; background-color: #f0f8ff; border-radius: 6px; border-left: 4px solid #0066cc;" aria-labelledby="expected-usage">
+            <h3 id="expected-usage" style="margin: 0 0 5px 0; font-size: 14px; font-weight: bold; color: #2e2d29;">Expected Usage Comparison</h3>
+            <p style="margin: 0; font-size: 14px; color: #2e2d29;">
+              At ${safeMonthProgress}% through the month, expected usage should be:<br>
+              Views: ${safeViewsExpected} | Visits: ${safeVisitsExpected}
+            </p>
+          </section>
+        </main>
+
+        <footer class="footer" role="contentinfo">
+          <p style="margin: 0;">
+            Generated by <a href="https://churro.stanford.edu" style="color: #8c1515; font-weight: 600; text-decoration: none;"><abbr title="Cloud Hosting Usage Reporting with Recurring Output">CHURRO</abbr></a><br>
+            Stanford Web Services
+          </p>
+        </footer>
+      </div>
+    </body>
+    </html>
+  `;
+}
\ No newline at end of file
diff --git a/middleware.ts b/middleware.ts
index 92a20e1..90f741c 100644
--- a/middleware.ts
+++ b/middleware.ts
@@ -1,8 +1,17 @@
 import { NextResponse } from 'next/server';
 import type { NextRequest } from 'next/server';
 
-const USERNAME = 'sws';
-const PASSWORD = 'sws';
+// Validate authentication configuration at startup - fail fast if misconfigured
+const USERNAME = process.env.BASIC_AUTH_USERNAME;
+const PASSWORD = process.env.BASIC_AUTH_PASSWORD;
+
+// Startup validation - log configuration issues immediately
+if (!USERNAME || !PASSWORD) {
+  console.error('❌ CRITICAL: BASIC_AUTH_USERNAME or BASIC_AUTH_PASSWORD environment variables not configured');
+  console.error('❌ Application will be inaccessible to external users until authentication is properly configured');
+}
+
+const isAuthConfigured = !!(USERNAME && PASSWORD);
 
 export function middleware(request: NextRequest) {
   const { pathname } = request.nextUrl;
@@ -11,12 +20,13 @@ export function middleware(request: NextRequest) {
   if (
     pathname.startsWith('/_next') ||
     pathname.startsWith('/api/public') ||
-    pathname.startsWith('/favicon.ico')
+    pathname.startsWith('/favicon.ico') ||
+    pathname === '/api/email/daily-summary' // Allow Vercel cron job
   ) {
     return NextResponse.next();
   }
 
-  // Allow requests from localhost (IPv4 and IPv6)
+  // Allow requests from localhost (IPv4 and IPv6) for development
   const ip =
     request.headers.get('x-forwarded-for') ||
     request.headers.get('x-real-ip') ||
@@ -29,6 +39,17 @@ export function middleware(request: NextRequest) {
     return NextResponse.next();
   }
 
+  // If authentication is not configured, return generic service unavailable
+  // without revealing configuration details
+  if (!isAuthConfigured) {
+    return new NextResponse('Service temporarily unavailable', {
+      status: 503,
+      headers: {
+        'Retry-After': '300', // Suggest retry after 5 minutes
+      },
+    });
+  }
+
   // Get the Authorization header
   const authHeader = request.headers.get('authorization');
   if (!authHeader) {
@@ -57,5 +78,5 @@ export function middleware(request: NextRequest) {
 }
 
 export const config = {
-  matcher: ['/((?!_next|api/public|favicon.ico).*)'],
+  matcher: ['/((?!_next|api/public|api/email/daily-summary|favicon.ico).*)'],
 };
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index a762833..533897b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,10 +12,11 @@
         "basic-auth": "^2.0.1",
         "cnbuilder": "^3.1.0",
         "decanter": "^7.4.0",
-        "next": "^15.5.7",
+        "next": "^15.5.8",
         "react": "18.3.1",
         "react-dom": "18.3.1",
-        "recharts": "^2.12.7"
+        "recharts": "^2.12.7",
+        "resend": "^6.5.2"
       },
       "devDependencies": {
         "@types/basic-auth": "^1.1.8",
@@ -912,6 +913,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@stablelib/base64": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@stablelib/base64/-/base64-1.0.1.tgz",
+      "integrity": "sha512-1bnPQqSxSuc3Ii6MhBysoWCg58j97aUjuCSZrGSmDxNqtytIi0k8utUenAwTZN4V5mXXYGsVUI9zeBqy+jBOSQ==",
+      "license": "MIT"
+    },
     "node_modules/@swc/helpers": {
       "version": "0.5.15",
       "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.15.tgz",
@@ -2900,6 +2907,12 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/es6-promise": {
+      "version": "4.2.8",
+      "resolved": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.8.tgz",
+      "integrity": "sha512-HJDGx5daxeIvxdBxvG2cb9g4tEvwIk3i8+nhX0yGrYmZUzbkdg8QbDevheDB8gd0//uPj4c1EQua8Q+MViT0/w==",
+      "license": "MIT"
+    },
     "node_modules/escalade": {
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
@@ -3437,6 +3450,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/fast-sha256": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/fast-sha256/-/fast-sha256-1.3.0.tgz",
+      "integrity": "sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ==",
+      "license": "Unlicense"
+    },
     "node_modules/fastq": {
       "version": "1.19.1",
       "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz",
@@ -5374,6 +5393,12 @@
         "node": ">=6"
       }
     },
+    "node_modules/querystringify": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/querystringify/-/querystringify-2.2.0.tgz",
+      "integrity": "sha512-FIqgj2EUvTa7R50u0rGsyTftzjYmv/a3hO345bZNrqabNqjtgiDMgmo4mkUjd+nzU5oF3dClKqFIPUKybUyqoQ==",
+      "license": "MIT"
+    },
     "node_modules/queue-microtask": {
       "version": "1.2.3",
       "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
@@ -5559,6 +5584,32 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/requires-port": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz",
+      "integrity": "sha512-KigOCHcocU3XODJxsu8i/j8T9tzT4adHiecwORRQ0ZZFcp7ahwXuRU1m+yuO90C5ZUyGeGfocHDI14M3L3yDAQ==",
+      "license": "MIT"
+    },
+    "node_modules/resend": {
+      "version": "6.5.2",
+      "resolved": "https://registry.npmjs.org/resend/-/resend-6.5.2.tgz",
+      "integrity": "sha512-Yl83UvS8sYsjgmF8dVbNPzlfpmb3DkLUk3VwsAbkaEFo9UMswpNuPGryHBXGk+Ta4uYMv5HmjVk3j9jmNkcEDg==",
+      "license": "MIT",
+      "dependencies": {
+        "svix": "1.76.1"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "peerDependencies": {
+        "@react-email/render": "*"
+      },
+      "peerDependenciesMeta": {
+        "@react-email/render": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/resolve": {
       "version": "1.22.10",
       "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.10.tgz",
@@ -6313,6 +6364,29 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/svix": {
+      "version": "1.76.1",
+      "resolved": "https://registry.npmjs.org/svix/-/svix-1.76.1.tgz",
+      "integrity": "sha512-CRuDWBTgYfDnBLRaZdKp9VuoPcNUq9An14c/k+4YJ15Qc5Grvf66vp0jvTltd4t7OIRj+8lM1DAgvSgvf7hdLw==",
+      "license": "MIT",
+      "dependencies": {
+        "@stablelib/base64": "^1.0.0",
+        "@types/node": "^22.7.5",
+        "es6-promise": "^4.2.8",
+        "fast-sha256": "^1.3.0",
+        "url-parse": "^1.5.10",
+        "uuid": "^10.0.0"
+      }
+    },
+    "node_modules/svix/node_modules/@types/node": {
+      "version": "22.19.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.19.1.tgz",
+      "integrity": "sha512-LCCV0HdSZZZb34qifBsyWlUmok6W7ouER+oQIGBScS8EsZsQbrtFTUrDX4hOl+CS6p7cnNC4td+qrSVGSCTUfQ==",
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~6.21.0"
+      }
+    },
     "node_modules/tailwindcss": {
       "version": "3.4.17",
       "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.17.tgz",
@@ -6686,7 +6760,6 @@
       "version": "6.21.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
       "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/unrs-resolver": {
@@ -6765,12 +6838,35 @@
         "punycode": "^2.1.0"
       }
     },
+    "node_modules/url-parse": {
+      "version": "1.5.10",
+      "resolved": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.10.tgz",
+      "integrity": "sha512-WypcfiRhfeUP9vvF0j6rw0J3hrWrw6iZv3+22h6iRMJ/8z1Tj6XfLP4DsUix5MhMPnXpiHDoKyoZ/bdCkwBCiQ==",
+      "license": "MIT",
+      "dependencies": {
+        "querystringify": "^2.1.1",
+        "requires-port": "^1.0.0"
+      }
+    },
     "node_modules/util-deprecate": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
       "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
       "license": "MIT"
     },
+    "node_modules/uuid": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
+      "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==",
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
+      "license": "MIT",
+      "bin": {
+        "uuid": "dist/bin/uuid"
+      }
+    },
     "node_modules/victory-vendor": {
       "version": "36.9.2",
       "resolved": "https://registry.npmjs.org/victory-vendor/-/victory-vendor-36.9.2.tgz",
diff --git a/package.json b/package.json
index 4c33f3a..a2cf857 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,8 @@
     "next": "^15.5.8",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "recharts": "^2.12.7"
+    "recharts": "^2.12.7",
+    "resend": "^6.5.2"
   },
   "devDependencies": {
     "@types/basic-auth": "^1.1.8",
diff --git a/vercel.json b/vercel.json
new file mode 100644
index 0000000..0772313
--- /dev/null
+++ b/vercel.json
@@ -0,0 +1,8 @@
+{
+  "crons": [
+    {
+      "path": "/api/email/daily-summary",
+      "schedule": "0 9 * * *"
+    }
+  ]
+}
\ No newline at end of file