GLE Movies (project code name: CineWave)

By Gamers Loft Entertainment. Code folders and packages keep the cinewave name; everything viewers see says GLE Movies.

Movie streaming platform built for Uganda (open to viewers worldwide) — website + Android app on one shared backend. Prices in UGX; payments planned via MTN MoMo, Airtel Money and cards.

cinewave/
├─ apps/
│  ├─ web/        Next.js 16 website (catalogue, title pages, accounts, plans)
│  └─ mobile/     Expo (React Native) Android app
├─ packages/
│  └─ shared/     Types, data access and business rules used by BOTH apps
└─ supabase/
   ├─ migrations/ Database schema, access rules (RLS), storage bucket
   ├─ seed.sql    Sample plans, genres, 9 placeholder titles + 2 partner films
   └─ tests/      Access-rule checks

Design

	Website	Android app
Look	Cinematic, poster-led (CineStream reference)	Rounded cards, bottom tabs (mobile reference)
Accent	Red #e5192e — --accent in apps/web/app/globals.css	Orange #ff7a2f — colors.accent in apps/mobile/lib/theme.ts
Fonts	Bebas Neue (titles) + Inter, self-hosted	Plus Jakarta Sans
Home	Rotating hero with Play / More Info, rows with page dots	Greeting, swipeable hero cards, Continue Watching, rows
Title	Full-bleed art, chips, cast, details	Full-bleed art, chips, synopsis, cast, Watch Now bar
Player	Overlay player: title, rating, synopsis, seek bar, volume, settings, full screen, keyboard shortcuts	Phase 3

Posters without a wide backdrop are shown as blurred fill + sharp key art on the right (desktop) or full-bleed (phone). Upload a 16:9 backdrop for the best hero.

What works today (Phase 2 foundation)

Area	Web	Android
Home: featured hero + Trending, Recently Added, Free to Watch, curated rows	✅	✅
Continue Watching row (from saved progress)	✅	✅
Title page: details, genres, languages, related titles	✅	✅
Browse/search with genre, access and sort filters	✅	✅ (search + genre)
Sign up, sign in, sign out, email confirmation, password reset	✅	✅ (no reset yet)
My List (watchlist), synced across devices	✅	✅
Account: plan status, profile, country	✅	✅ (plan status)
Plans page (UGX, weekly and monthly, from database)	✅	✅
Play / Download buttons decided by server-side entitlement	✅	✅
Video playback	Phase 3	Phase 3
Checkout / Google Play billing	Phase 4	Phase 4
Offline downloads	—	Phase 5
Admin dashboard (/admin)	✅	—

How access is decided

The database decides what each person can see and play — the apps only display the result.

• A title appears in the catalogue only if it is published and has an active rights window.
• playback_entitlement(title, country) returns can_play, can_download and a reason: ok, sign_in_required, upgrade_required, not_available_in_region, not_found.
• Plans are ranked (Free 0 → Standard 1 → Premium 2). A higher plan unlocks everything below it.
• Downloads need both a rights window that allows downloads and a plan that includes them.
• Rights, partners and contracts are visible to staff only. Users can never grant themselves a plan or admin role.

The seed data includes deliberate test cases: a draft title and an expired licence (both hidden), and a title licensed only in AE, UG, KE.

---

Setup (Windows)

1. Install once

• Node.js 22 LTS — https://nodejs.org
• Git — https://git-scm.com
• Android Studio with an emulator, or an Android phone with the Expo Go app

2. Create the Supabase project

1. Create a new project at https://supabase.com (separate from the trainer app).

2. Open SQL Editor and run these files in order, one at a time:

   1. supabase/migrations/20261027000000_init.sql
   2. supabase/migrations/20261027000100_storage.sql
   3. supabase/migrations/20261027000200_ratings.sql
   4. supabase/migrations/20261028000000_admin_uganda.sql
   5. supabase/migrations/20261028000100_security_hardening.sql
   6. supabase/seed.sql

   The live CineWave project (bugmkghovzdgncspjvwy, Frankfurt) already has all of these applied.

3. Authentication → URL Configuration

   • Site URL: http://localhost:3000
   • Redirect URLs: add http://localhost:3000/auth/confirm

4. Project Settings → API: copy the Project URL and anon public key.

Prefer the command line? With the Supabase CLI: supabase link then supabase db push, then run seed.sql.

3. Run the website

npm install                                  # from the cinewave folder, installs everything
copy apps\web\.env.example apps\web\.env.local   # then paste your URL and anon key
npm run web                                  # http://localhost:3000

4. Run the Android app

copy apps\mobile\.env.example apps\mobile\.env   # same URL and anon key
# EXPO_PUBLIC_SITE_URL lets the app load sample posters from the website:
#   emulator → http://10.0.2.2:3000     phone → http://YOUR-PC-IP:3000
npm run android                              # opens in the emulator
# or: npm run mobile, then scan the QR code with Expo Go on your phone

5. Make yourself an admin

Sign up on the website, then run this once in the SQL Editor:

insert into public.user_roles (user_id, role)
select id, 'admin' from auth.users where email = '[email protected]';

Refresh the site — an Admin button appears in the header (on phones: Account → Open admin dashboard). For staff who should manage films but not rights, partners or users, use role 'editor' instead.

This is the beginning of the README. Read the rest at the original. Read the full README ↗