Safari Digital Portal

Client portal and admin dashboard for Safari Digital, at portal.safaridigital.co.tz.

• Next.js 16 (App Router) on Vercel
• Supabase for the database, sign-in (email + password) and, later, file storage
• Every table uses Row Level Security: admins see everything, clients only their own company

What's in this first version

• Sign in, sign out, forgot password, set a new password
• Two roles: admin (Safari Digital) and client (tour operators)
• Admin: Overview, Clients list with search, Add client, edit a client (package, onboarding and account status)
• Admin: Settings for tutorial videos (link or upload) and the Meta Business ID / Drive share email shown in onboarding
• Admin: Portal access per client (link an existing sign-in, or create a one-time invite link to send by WhatsApp) and the client's onboarding answers and files
• Admin: Data connections per client (Vercel website project now; Meta ads next)
• Client: Website page with visitors, daily chart, top pages and countries from Vercel Web Analytics
• Client: onboarding wizard (saves as you go; photos and brand files are shared as a Google Drive folder), Overview and Account (change password)
• Inquiries: clients see and update their leads; admin sees all, adds WhatsApp/Messenger/phone leads by hand; website forms post to /api/inquiries with a per-client form key (admin → client → Connections)
• Marketing → Content: admin uploads Reels/posts, sends for approval, uploads revisions, marks scheduled/published; clients approve or request changes; monthly plan progress (published vs. planned)
• Marketing → Advertising: monthly Meta results entered in admin → client → Reporting (spend, Meta inquiries, campaigns); cost per Meta inquiry is worked out
• Website: Performance (Vercel) and Management (project stage, design review, training videos, website change requests)
• Help: WhatsApp button, FAQs, requests with a simple message thread and attachments; admin Requests list
• Overviews: needs-attention lists and recent activity for clients and admin
• Email notifications through Resend (optional; see below)

Setting it up

1. Database. In Supabase → SQL Editor, paste and run each file in supabase/migrations/ in order (0001_init.sql to 0007_billing.sql).
2. Turn off public sign-ups. Supabase → Authentication → Sign In / Providers → turn off "Allow new users to sign up". Accounts are created by Safari Digital only.
3. Your admin account. Supabase → Authentication → Users → Add user → Create new user (tick "Auto confirm"). Then run supabase/make-admin.sql with your email.
4. Redirect URLs. Supabase → Authentication → URL Configuration: set Site URL to https://portal.safaridigital.co.tz and add https://portal.safaridigital.co.tz/** and https://*.vercel.app/** to Redirect URLs (password-reset links need these).
5. Website analytics. Create a Vercel access token (Account Settings → Tokens) and add it in this project's Environment Variables as ANALYTICS_VERCEL_TOKEN; then pick each client's Vercel project under Data connections on the client page. Web Analytics must be enabled on each client site.
6. Tutorial videos and client-facing details (Meta Business ID, Drive share email) are set in the app under Admin → Settings.
7. Email notifications (optional). Create a Resend account (resend.com), verify the safaridigital.co.tz domain (DNS records), create an API key, then add RESEND_API_KEY and EMAIL_FROM (e.g. Safari Digital <[email protected]>) in Vercel's Environment Variables and redeploy. Optionally set PORTAL_URL=https://portal.safaridigital.co.tz so email links use the custom domain.
8. Meta ad results (optional). Create a Business-type Meta app (use case "Measure ad performance data with Marketing API") in the Safari Digital business portfolio, add a system user, assign it the app and each client's ad account (View performance), and generate a never-expiring token with ads_read and business_management. Add it in Vercel as META_SYSTEM_USER_TOKEN, plus a random CRON_SECRET, and redeploy. Pick each client's ad account under Connections; results sync every morning (vercel.json) or with Sync now.
9. Uploads. Content videos follow your Supabase plan's per-file upload limit (50 MB on Free).
10. Vercel. Import this repository, add the Supabase integration (it sets NEXT_PUBLIC_SUPABASE_URL and the key), and deploy.

Local development

cp .env.example .env.local   # fill in the two Supabase values
npm install
npm run dev

Follow-ups (automatic emails to guests)

• Migrations: 0020–0023 (run in order). Tests: npm test (Vitest + PGlite, no real emails).
• Sending: hourly cron /api/cron/followups (vercel.json). Each email goes Monday–Friday 9:00–17:00 in the guest's time zone (from their country when it has one zone, otherwise the operator's setting).
• Per client, Safari Digital verifies the client's domain in Resend, then enters the address under Admin › Client › Connections › Follow-up emails.
• Bounces and spam complaints: add a Resend webhook to https://<portal>/api/webhooks/resend (events email.bounced, email.complained, email.delivered) and put its signing secret in RESEND_WEBHOOK_SECRET.
• Replies are not detected automatically (no inbox connection). Operators click "Guest replied" on the inquiry, or move the card.
• Follow-ups only start once the operator confirms they sent the stage's message ("Yes, sent" after moving a card, or "I sent the quote" in the inquiry).