Update app.py

app.py

@@ -319,14 +319,26 @@ async def health():
         "endpoints": ["/health", "/send", "/status/{job_id}", "/track/open/{job_id}/{email}", "/analytics/{job_id}", "/docs"]
     }
 
+# ── Read HF Space secrets once at startup ────────────────────────────────────
+_DEFAULT_GMAIL_USER = os.getenv("GMAIL_USER", "")
+_DEFAULT_GMAIL_PASS = os.getenv("GMAIL_PASS", "")
+
+@app.get("/config")
+async def config():
+    """Returns non-sensitive config so the UI can pre-fill fields."""
+    return {
+        "gmail_user": _DEFAULT_GMAIL_USER,
+        "has_pass": bool(_DEFAULT_GMAIL_PASS),
+    }
+
 @app.post("/send")
 async def send_emails(
     request: Request,
     background_tasks: BackgroundTasks,
     file: UploadFile = File(...),
-    # SMTP — primary account always required
-    gmail_user: str = Form(...),
-    gmail_pass: str = Form(...),
+    # SMTP — falls back to HF Space secrets if left blank
+    gmail_user: str = Form(default=""),
+    gmail_pass: str = Form(default=""),
     # Optional extra SMTP accounts for round-robin (JSON array string)
     extra_accounts: str = Form("[]"),
     # Campaign settings
@@ -354,6 +366,15 @@ async def send_emails(
     if "Email" not in df.columns:
         raise HTTPException(status_code=400, detail=f"File must have 'Email' column. Found: {list(df.columns)}")
 
+    # Fall back to HF Space secrets if the UI left the fields blank
+    if not gmail_user:
+        gmail_user = _DEFAULT_GMAIL_USER
+    if not gmail_pass:
+        gmail_pass = _DEFAULT_GMAIL_PASS
+
+    if not gmail_user or not gmail_pass:
+        raise HTTPException(status_code=400, detail="No Gmail credentials provided and no GMAIL_USER/GMAIL_PASS secrets configured.")
+
     # Build SMTP list
     smtp_accounts = [{"user": gmail_user, "pass": gmail_pass}]
     try: