Safari Digital Portal
Client portal and admin dashboard for Safari Digital, at portal.safaridigital.co.tz.
- Next.js 16 (App Router) on Vercel
- Supabase for the database, sign-in (email + password) and, later, file storage
- Every table uses Row Level Security: admins see everything, clients only their own company
What's in this first version
- Sign in, sign out, forgot password, set a new password
- Two roles:
admin (Safari Digital) and client (tour operators)
- Admin: Overview, Clients list with search, Add client, edit a client (package, onboarding and account status)
- Admin: Settings for tutorial videos (link or upload) and the Meta Business ID / Drive share email shown in onboarding
- Admin: Portal access per client (link an existing sign-in, or create a one-time invite link to send by WhatsApp) and the client's onboarding answers and files
- Admin: Data connections per client (Vercel website project now; Meta ads next)
- Client: Website page with visitors, daily chart, top pages and countries from Vercel Web Analytics
- Client: onboarding wizard (saves as you go; photos and brand files are shared as a Google Drive folder), Overview and Account (change password)
- Inquiries: clients see and update their leads; admin sees all, adds WhatsApp/Messenger/phone leads by hand; website forms post to
/api/inquiries with a per-client form key (admin → client → Connections)
- Marketing → Content: admin uploads Reels/posts, sends for approval, uploads revisions, marks scheduled/published; clients approve or request changes; monthly plan progress (published vs. planned)
- Marketing → Advertising: monthly Meta results entered in admin → client → Reporting (spend, Meta inquiries, campaigns); cost per Meta inquiry is worked out
- Website: Performance (Vercel) and Management (project stage, design review, training videos, website change requests)
- Help: WhatsApp button, FAQs, requests with a simple message thread and attachments; admin Requests list
- Overviews: needs-attention lists and recent activity for clients and admin
- Email notifications through Resend (optional; see below)
Setting it up
- Database. In Supabase → SQL Editor, paste and run each file in
supabase/migrations/ in order (0001_init.sql to 0007_billing.sql).
- Turn off public sign-ups. Supabase → Authentication → Sign In / Providers → turn off "Allow new users to sign up". Accounts are created by Safari Digital only.
- Your admin account. Supabase → Authentication → Users → Add user → Create new user (tick "Auto confirm"). Then run
supabase/make-admin.sql with your email.
- Redirect URLs. Supabase → Authentication → URL Configuration: set Site URL to
https://portal.safaridigital.co.tz and add https://portal.safaridigital.co.tz/** and https://*.vercel.app/** to Redirect URLs (password-reset links need these).
- Website analytics. Create a Vercel access token (Account Settings → Tokens) and add it in this project's Environment Variables as
ANALYTICS_VERCEL_TOKEN; then pick each client's Vercel project under Data connections on the client page. Web Analytics must be enabled on each client site.
- Tutorial videos and client-facing details (Meta Business ID, Drive share email) are set in the app under Admin → Settings.
- Email notifications (optional). Create a Resend account (resend.com), verify the
safaridigital.co.tz domain (DNS records), create an API key, then add RESEND_API_KEY and EMAIL_FROM (e.g. Safari Digital <[email protected]>) in Vercel's Environment Variables and redeploy. Optionally set PORTAL_URL=https://portal.safaridigital.co.tz so email links use the custom domain.
- Meta ad results (optional). Create a Business-type Meta app (use case "Measure ad performance data with Marketing API") in the Safari Digital business portfolio, add a system user, assign it the app and each client's ad account (View performance), and generate a never-expiring token with
ads_read and business_management. Add it in Vercel as META_SYSTEM_USER_TOKEN, plus a random CRON_SECRET, and redeploy. Pick each client's ad account under Connections; results sync every morning (vercel.json) or with Sync now.
- Uploads. Content videos follow your Supabase plan's per-file upload limit (50 MB on Free).
- Vercel. Import this repository, add the Supabase integration (it sets
NEXT_PUBLIC_SUPABASE_URL and the key), and deploy.
Local development
cp .env.example .env.local # fill in the two Supabase values
npm install
npm run dev
Follow-ups (automatic emails to guests)
- Migrations:
0020–0023 (run in order). Tests: npm test (Vitest + PGlite, no real emails).
- Sending: hourly cron
/api/cron/followups (vercel.json). Each email goes Monday–Friday 9:00–17:00 in the guest's time zone
(from their country when it has one zone, otherwise the operator's setting).
- Per client, Safari Digital verifies the client's domain in Resend, then enters the address under Admin › Client › Connections › Follow-up emails.
- Bounces and spam complaints: add a Resend webhook to
https://<portal>/api/webhooks/resend (events email.bounced,
email.complained, email.delivered) and put its signing secret in RESEND_WEBHOOK_SECRET.
- Replies are not detected automatically (no inbox connection). Operators click "Guest replied" on the inquiry, or move the card.
- Follow-ups only start once the operator confirms they sent the stage's message ("Yes, sent" after moving a card, or "I sent the quote" in the inquiry).
