create-bw-app 0.10.0 → 0.11.0

package/template/base/public/brand/logo-mark.svg

@@ -1,5 +1,5 @@
 <svg width="64" height="64" viewBox="0 0 64 64" fill="none" xmlns="http://www.w3.org/2000/svg">
   <rect width="64" height="64" rx="18" fill="#13251A"/>
-  <path d="M19 42V22H31.8C36.4 22 39.6 24.7 39.6 28.8C39.6 32.1 37.7 34.5 34.8 35.4L41.8 42H36L29.7 36H24V42H19ZM24 31.9H31.1C33.5 31.9 34.7 30.8 34.7 29C34.7 27.2 33.5 26.1 31.1 26.1H24V31.9Z" fill="#F5F4EC"/>
-  <circle cx="46.5" cy="18.5" r="4.5" fill="#71C48B"/>
+  <path d="M15 44V20H28.02C32.8 20 35.76 22.42 35.76 26.24C35.76 28.58 34.62 30.28 32.58 31.18C35.22 32.02 36.84 34.04 36.84 36.86C36.84 41.36 33.42 44 28.02 44H15ZM20.36 29.58H27.08C29.08 29.58 30.24 28.62 30.24 26.96C30.24 25.3 29.08 24.36 27.08 24.36H20.36V29.58ZM20.36 39.62H27.64C29.98 39.62 31.28 38.56 31.28 36.68C31.28 34.84 29.98 33.78 27.64 33.78H20.36V39.62Z" fill="#F5F4EC"/>
+  <path d="M38.72 20H44.18L46.58 34.74L49.72 20H54.5L49.32 44H44.12L41.18 29.34L38.24 44H33.16L32.26 39.72H37.22L38.72 20Z" fill="#71C48B"/>
 </svg>

package/template/module-manifests/admin/brightweb.module.json

@@ -0,0 +1,6 @@
+{
+  "contractVersion": 1,
+  "key": "admin",
+  "requires": { "core": ">=0.3" },
+  "env": []
+}

package/template/module-manifests/crm/brightweb.module.json

@@ -0,0 +1,7 @@
+{
+  "contractVersion": 1,
+  "key": "crm",
+  "requires": { "core": ">=0.3", "admin": ">=0.3", "orgs": ">=0.1" },
+  "env": [],
+  "tokens": "./tokens.css"
+}

package/template/module-manifests/orgs/brightweb.module.json

@@ -0,0 +1,6 @@
+{
+  "contractVersion": 1,
+  "key": "orgs",
+  "requires": { "core": ">=0.3", "admin": ">=0.3" },
+  "env": []
+}

package/template/module-manifests/projects/brightweb.module.json

@@ -0,0 +1,6 @@
+{
+  "contractVersion": 1,
+  "key": "projects",
+  "requires": { "core": ">=0.3", "admin": ">=0.3", "orgs": ">=0.1" },
+  "env": []
+}

package/template/modules/crm/app/api/crm/contacts/route.ts

@@ -6,3 +6,13 @@ export const GET = createModuleRouteHandler(
   () => import("@brightweblabs/module-crm"),
   "handleCrmContactsGetRequest",
 );
+
+export const POST = createModuleRouteHandler(
+  () => import("@brightweblabs/module-crm"),
+  "handleCrmContactsPostRequest",
+);
+
+export const PATCH = createModuleRouteHandler(
+  () => import("@brightweblabs/module-crm"),
+  "handleCrmContactsPatchRequest",
+);

package/template/modules/crm/app/api/crm/timeline/route.ts

@@ -0,0 +1,8 @@
+import { createModuleRouteHandler } from "../_shared/create-module-route-handler";
+
+export const dynamic = "force-dynamic";
+
+export const GET = createModuleRouteHandler(
+  () => import("@brightweblabs/module-crm"),
+  "handleCrmTimelineGetRequest",
+);

package/template/modules/crm/app/crm/layout.tsx

@@ -0,0 +1,5 @@
+import "@brightweblabs/module-crm/tokens.css";
+
+export default function CrmLayout({ children }: Readonly<{ children: React.ReactNode }>) {
+  return children;
+}

package/template/modules/crm/app/crm/page.tsx

@@ -0,0 +1,5 @@
+import { CrmDashboard } from "@brightweblabs/module-crm/ui";
+
+export default function CrmPage() {
+  return <CrmDashboard />;
+}

package/template/supabase/module-registry.json

@@ -12,16 +12,22 @@
       "dependsOn": ["core"],
       "description": "RBAC, user governance, and privileged role-management behavior."
     },
+    "orgs": {
+      "label": "Organizations",
+      "path": "supabase/modules/orgs/migrations",
+      "dependsOn": ["core", "admin"],
+      "description": "Organizations, membership, invitations, and shared organization access helpers."
+    },
     "crm": {
       "label": "CRM",
       "path": "supabase/modules/crm/migrations",
-      "dependsOn": ["core", "admin"],
-      "description": "Organizations, CRM contacts, org membership, and invitation flows."
+      "dependsOn": ["core", "admin", "orgs"],
+      "description": "CRM contacts, status tracking, and organization integration."
     },
     "projects": {
       "label": "Projects",
       "path": "supabase/modules/projects/migrations",
-      "dependsOn": ["core", "admin", "crm"],
+      "dependsOn": ["core", "admin", "orgs"],
       "description": "Projects, tasks, milestones, members, links, and project activity policies."
     }
   }

package/template/supabase/modules/crm/README.md

@@ -11,12 +11,14 @@
 - `organization_invitations`
 - CRM/org helper functions like `is_org_admin()` and `set_crm_status(...)`
 - CRM/org RLS and triggers
+- app-owned operational contact records, not external ESP topic identifiers
 
 ## Shared boundary
 
 Some marketing data is adjacent to CRM, but the Brightweb v1 split is:
 
 - CRM owns operational contact and organization management
+- CRM does not currently define newsletter/product-update subscription tables or Resend Topic mappings
 - Marketing automation remains its own future module boundary
 
 ## Dependency

package/template/supabase/modules/crm/migrations/20260316092000_crm_v1.sql

@@ -1,80 +1,7 @@
 -- Brightweb CRM v1 baseline.
-
-CREATE TABLE IF NOT EXISTS public.organizations (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  name text NOT NULL,
-  industry text,
-  company_size text,
-  budget_range text,
-  website_url text,
-  address text,
-  tax_identifier_value text,
-  tax_identifier_kind text,
-  tax_identifier_country_code text,
-  primary_contact_id uuid REFERENCES public.profiles(id) ON DELETE SET NULL,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  CONSTRAINT organizations_tax_identifier_kind_check
-    CHECK (
-      tax_identifier_kind IS NULL
-      OR tax_identifier_kind IN ('vat', 'tax', 'registration', 'other')
-    ),
-  CONSTRAINT organizations_tax_identifier_country_code_check
-    CHECK (
-      tax_identifier_country_code IS NULL
-      OR tax_identifier_country_code ~ '^[A-Z]{2}$'
-    )
-);
-
-CREATE INDEX IF NOT EXISTS idx_organizations_primary_contact_id
-  ON public.organizations (primary_contact_id);
-
-CREATE INDEX IF NOT EXISTS idx_organizations_tax_identifier_lookup
-  ON public.organizations (tax_identifier_country_code, tax_identifier_kind, tax_identifier_value)
-  WHERE tax_identifier_value IS NOT NULL;
-
-CREATE TABLE IF NOT EXISTS public.organization_members (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  organization_id uuid NOT NULL REFERENCES public.organizations(id) ON DELETE CASCADE,
-  profile_id uuid NOT NULL REFERENCES public.profiles(id) ON DELETE CASCADE,
-  role text NOT NULL,
-  joined_at timestamptz NOT NULL DEFAULT now(),
-  CONSTRAINT organization_members_role_check CHECK (role IN ('admin', 'member')),
-  CONSTRAINT organization_members_unique UNIQUE (organization_id, profile_id)
-);
-
-CREATE INDEX IF NOT EXISTS idx_organization_members_profile_id
-  ON public.organization_members (profile_id);
-
-CREATE OR REPLACE FUNCTION public.is_org_admin(target_org_id uuid)
-RETURNS boolean
-LANGUAGE sql
-STABLE
-SECURITY DEFINER
-SET search_path = public
-AS $$
-  SELECT EXISTS (
-    SELECT 1
-    FROM public.organization_members om
-    WHERE om.organization_id = target_org_id
-      AND om.profile_id = public.current_profile_id()
-      AND om.role = 'admin'
-  )
-$$;
-
-CREATE OR REPLACE FUNCTION public.is_org_member(target_org_id uuid)
-RETURNS boolean
-LANGUAGE sql
-STABLE
-SECURITY DEFINER
-SET search_path = public
-AS $$
-  SELECT EXISTS (
-    SELECT 1
-    FROM public.organization_members om
-    WHERE om.organization_id = target_org_id
-      AND om.profile_id = public.current_profile_id()
-  )
-$$;
+-- Organizations install first from the orgs module. Cross-module invitation
+-- linkage and primary-contact membership synchronization are added by the
+-- following CRM org integration migration.
 
 CREATE TABLE IF NOT EXISTS public.crm_contacts (
   id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
@@ -187,131 +114,8 @@ BEGIN
 END;
 $$;
 
-CREATE TABLE IF NOT EXISTS public.organization_invitations (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  organization_id uuid NOT NULL REFERENCES public.organizations(id) ON DELETE CASCADE,
-  invited_email text NOT NULL,
-  role text NOT NULL CHECK (role IN ('admin', 'member')),
-  status text NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'accepted', 'revoked', 'expired')),
-  invited_by_profile_id uuid REFERENCES public.profiles(id) ON DELETE SET NULL,
-  accepted_by_profile_id uuid REFERENCES public.profiles(id) ON DELETE SET NULL,
-  accepted_contact_id uuid REFERENCES public.crm_contacts(id) ON DELETE SET NULL,
-  accepted_at timestamptz,
-  revoked_at timestamptz,
-  expires_at timestamptz NOT NULL DEFAULT (now() + interval '14 days'),
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE UNIQUE INDEX IF NOT EXISTS organization_invitations_unique_org_email
-  ON public.organization_invitations (organization_id, invited_email);
-
-CREATE INDEX IF NOT EXISTS idx_organization_invitations_org_status
-  ON public.organization_invitations (organization_id, status);
-
-CREATE INDEX IF NOT EXISTS idx_organization_invitations_email_status
-  ON public.organization_invitations (invited_email, status);
-
-CREATE INDEX IF NOT EXISTS idx_organization_invitations_accepted_contact_id
-  ON public.organization_invitations (accepted_contact_id)
-  WHERE accepted_contact_id IS NOT NULL;
-
-CREATE OR REPLACE FUNCTION public.touch_organization_invitations_updated_at()
-RETURNS trigger
-LANGUAGE plpgsql
-SECURITY DEFINER
-SET search_path = public
-AS $$
-BEGIN
-  NEW.updated_at := now();
-  RETURN NEW;
-END;
-$$;
-
-DROP TRIGGER IF EXISTS trg_touch_organization_invitations_updated_at ON public.organization_invitations;
-CREATE TRIGGER trg_touch_organization_invitations_updated_at
-BEFORE UPDATE ON public.organization_invitations
-FOR EACH ROW
-EXECUTE FUNCTION public.touch_organization_invitations_updated_at();
-
-CREATE OR REPLACE FUNCTION public.normalize_organization_invitation_email()
-RETURNS trigger
-LANGUAGE plpgsql
-SECURITY DEFINER
-SET search_path = public
-AS $$
-BEGIN
-  NEW.invited_email := lower(trim(NEW.invited_email));
-  RETURN NEW;
-END;
-$$;
-
-DROP TRIGGER IF EXISTS trg_normalize_organization_invitation_email ON public.organization_invitations;
-CREATE TRIGGER trg_normalize_organization_invitation_email
-BEFORE INSERT OR UPDATE OF invited_email ON public.organization_invitations
-FOR EACH ROW
-EXECUTE FUNCTION public.normalize_organization_invitation_email();
-
-CREATE OR REPLACE FUNCTION public.sync_org_primary_contact_admin_membership()
-RETURNS trigger
-LANGUAGE plpgsql
-SECURITY DEFINER
-SET search_path = public
-AS $$
-BEGIN
-  IF NEW.primary_contact_id IS NOT NULL THEN
-    INSERT INTO public.organization_members (organization_id, profile_id, role)
-    VALUES (NEW.id, NEW.primary_contact_id, 'admin')
-    ON CONFLICT (organization_id, profile_id)
-    DO UPDATE SET role = 'admin';
-  END IF;
-
-  RETURN NEW;
-END;
-$$;
-
-DROP TRIGGER IF EXISTS trg_sync_org_primary_contact_admin_membership ON public.organizations;
-CREATE TRIGGER trg_sync_org_primary_contact_admin_membership
-AFTER INSERT OR UPDATE OF primary_contact_id ON public.organizations
-FOR EACH ROW
-EXECUTE FUNCTION public.sync_org_primary_contact_admin_membership();
-
-ALTER TABLE public.organizations ENABLE ROW LEVEL SECURITY;
-ALTER TABLE public.organization_members ENABLE ROW LEVEL SECURITY;
 ALTER TABLE public.crm_contacts ENABLE ROW LEVEL SECURITY;
 ALTER TABLE public.crm_status_log ENABLE ROW LEVEL SECURITY;
-ALTER TABLE public.organization_invitations ENABLE ROW LEVEL SECURITY;
-
-DROP POLICY IF EXISTS "Staff manage organizations" ON public.organizations;
-CREATE POLICY "Staff manage organizations"
-  ON public.organizations
-  FOR ALL
-  TO authenticated
-  USING (public.is_staff())
-  WITH CHECK (public.is_staff());
-
-DROP POLICY IF EXISTS "Staff manage org members" ON public.organization_members;
-CREATE POLICY "Staff manage org members"
-  ON public.organization_members
-  FOR ALL
-  TO authenticated
-  USING (public.is_staff())
-  WITH CHECK (public.is_staff());
-
-DROP POLICY IF EXISTS "Org admins manage org members" ON public.organization_members;
-CREATE POLICY "Org admins manage org members"
-  ON public.organization_members
-  FOR ALL
-  TO authenticated
-  USING (public.is_org_admin(organization_id))
-  WITH CHECK (public.is_org_admin(organization_id));
-
-DROP POLICY IF EXISTS "Members view own org membership" ON public.organization_members;
-CREATE POLICY "Members view own org membership"
-  ON public.organization_members
-  FOR SELECT
-  TO authenticated
-  USING (profile_id = public.current_profile_id());
 
 DROP POLICY IF EXISTS "Staff manage crm contacts" ON public.crm_contacts;
 CREATE POLICY "Staff manage crm contacts"
@@ -328,39 +132,6 @@ CREATE POLICY "Staff view crm status log"
   TO authenticated
   USING (public.is_staff());
 
-DROP POLICY IF EXISTS "Staff manage organization invitations" ON public.organization_invitations;
-CREATE POLICY "Staff manage organization invitations"
-  ON public.organization_invitations
-  FOR ALL
-  TO authenticated
-  USING (public.is_staff())
-  WITH CHECK (public.is_staff());
-
-DROP POLICY IF EXISTS "Org admins manage organization invitations" ON public.organization_invitations;
-CREATE POLICY "Org admins manage organization invitations"
-  ON public.organization_invitations
-  FOR ALL
-  TO authenticated
-  USING (public.is_org_admin(organization_id))
-  WITH CHECK (public.is_org_admin(organization_id));
-
-DROP POLICY IF EXISTS "Invited users view own invitations" ON public.organization_invitations;
-CREATE POLICY "Invited users view own invitations"
-  ON public.organization_invitations
-  FOR SELECT
-  TO authenticated
-  USING (
-    status = 'pending'
-    AND lower(invited_email) = lower(coalesce(auth.jwt() ->> 'email', ''))
-  );
-
-INSERT INTO public.organization_members (organization_id, profile_id, role)
-SELECT o.id, o.primary_contact_id, 'admin'
-FROM public.organizations o
-WHERE o.primary_contact_id IS NOT NULL
-ON CONFLICT (organization_id, profile_id)
-DO UPDATE SET role = 'admin';
-
 UPDATE public.crm_contacts c
 SET profile_id = p.id,
     updated_at = now()
@@ -369,24 +140,3 @@ WHERE c.profile_id IS NULL
   AND c.email IS NOT NULL
   AND p.email IS NOT NULL
   AND lower(trim(c.email)) = lower(trim(p.email));
-
-UPDATE public.organization_invitations oi
-SET accepted_contact_id = (
-      SELECT c.id
-      FROM public.crm_contacts c
-      WHERE (
-          oi.accepted_by_profile_id IS NOT NULL
-          AND c.profile_id = oi.accepted_by_profile_id
-        )
-        OR (
-          oi.accepted_by_profile_id IS NULL
-          AND oi.invited_email IS NOT NULL
-          AND c.email IS NOT NULL
-          AND lower(trim(c.email)) = lower(trim(oi.invited_email))
-        )
-      ORDER BY c.updated_at DESC NULLS LAST, c.created_at DESC NULLS LAST, c.id DESC
-      LIMIT 1
-    ),
-    updated_at = now()
-WHERE oi.accepted_contact_id IS NULL
-  AND oi.status = 'accepted';

package/template/supabase/modules/crm/migrations/20260316092010_crm_org_integration.sql

@@ -0,0 +1,66 @@
+-- CRM integration for the independently installable Organizations module.
+-- The orgs baseline keeps accepted_contact_id as a plain uuid and omits this
+-- trigger so it never references CRM-owned objects during an orgs-only install.
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'organization_invitations_accepted_contact_id_fkey'
+      AND conrelid = 'public.organization_invitations'::regclass
+  ) THEN
+    ALTER TABLE public.organization_invitations
+      ADD CONSTRAINT organization_invitations_accepted_contact_id_fkey
+      FOREIGN KEY (accepted_contact_id)
+      REFERENCES public.crm_contacts(id)
+      ON DELETE SET NULL;
+  END IF;
+END;
+$$;
+
+CREATE OR REPLACE FUNCTION public.sync_org_primary_contact_admin_membership()
+RETURNS trigger
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public
+AS $$
+BEGIN
+  IF NEW.primary_contact_id IS NOT NULL THEN
+    INSERT INTO public.organization_members (organization_id, profile_id, role)
+    VALUES (NEW.id, NEW.primary_contact_id, 'admin')
+    ON CONFLICT (organization_id, profile_id)
+    DO UPDATE SET role = 'admin';
+  END IF;
+
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS trg_sync_org_primary_contact_admin_membership ON public.organizations;
+CREATE TRIGGER trg_sync_org_primary_contact_admin_membership
+AFTER INSERT OR UPDATE OF primary_contact_id ON public.organizations
+FOR EACH ROW
+EXECUTE FUNCTION public.sync_org_primary_contact_admin_membership();
+
+UPDATE public.organization_invitations oi
+SET accepted_contact_id = (
+      SELECT c.id
+      FROM public.crm_contacts c
+      WHERE (
+          oi.accepted_by_profile_id IS NOT NULL
+          AND c.profile_id = oi.accepted_by_profile_id
+        )
+        OR (
+          oi.accepted_by_profile_id IS NULL
+          AND oi.invited_email IS NOT NULL
+          AND c.email IS NOT NULL
+          AND lower(trim(c.email)) = lower(trim(oi.invited_email))
+        )
+      ORDER BY c.updated_at DESC NULLS LAST, c.created_at DESC NULLS LAST, c.id DESC
+      LIMIT 1
+    ),
+    updated_at = now()
+WHERE oi.accepted_contact_id IS NULL
+  AND oi.status = 'accepted';
+

package/template/supabase/modules/crm/migrations/20260421201523_portal_read_indexes.sql

@@ -0,0 +1,19 @@
+-- portal_read_indexes
+-- target: crm
+-- created_at: 2026-04-21T20:15:23.686Z
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_updated_at_desc
+  ON public.crm_contacts (updated_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_created_at_desc
+  ON public.crm_contacts (created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_status
+  ON public.crm_contacts (status);
+
+CREATE INDEX IF NOT EXISTS idx_crm_contacts_source
+  ON public.crm_contacts (source)
+  WHERE source IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_crm_status_log_changed_at_desc
+  ON public.crm_status_log (changed_at DESC);

package/template/supabase/modules/orgs/README.md

@@ -0,0 +1,4 @@
+# Organizations database module
+
+Foundation schema for organizations, memberships, invitations, and organization access helpers. CRM-specific foreign keys and trigger integration are installed by the dependent CRM module.
+