create-nextblock 0.0.1

package/templates/nextblock-template/lib/ui/ColorPicker.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/ConfirmationDialog.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/CustomSelectWithInput.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/Skeleton.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/avatar.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/badge.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/button.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/card.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/checkbox.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/dialog.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/dropdown-menu.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/input.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/label.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/popover.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/progress.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/select.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/separator.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/table.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/textarea.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/tooltip.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/lib/ui/ui.ts

@@ -0,0 +1 @@
+export * from '@nextblock-cms/ui';

package/templates/nextblock-template/middleware.ts

@@ -0,0 +1,206 @@
+// middleware.ts
+import { createServerClient, type CookieOptions } from '@supabase/ssr';
+import { NextResponse, type NextRequest } from 'next/server';
+import type { Database } from "@nextblock-cms/db";
+
+type Profile = Database["public"]["Tables"]["profiles"]["Row"];
+type UserRole = Database["public"]["Enums"]["user_role"];
+
+const LANGUAGE_COOKIE_KEY = 'NEXT_USER_LOCALE';
+const DEFAULT_LOCALE = 'en';
+const SUPPORTED_LOCALES = ['en', 'fr']; // Keep this in sync with DB or make dynamic
+
+const cmsRoutePermissions: Record<string, UserRole[]> = {
+  '/cms': ['WRITER', 'ADMIN'],
+  '/cms/admin': ['ADMIN'],
+  '/cms/users': ['ADMIN'],
+  '/cms/settings': ['ADMIN'],
+};
+
+function getRequiredRolesForPath(pathname: string): UserRole[] | null {
+    const sortedPaths = Object.keys(cmsRoutePermissions).sort((a, b) => b.length - a.length);
+    for (const specificPath of sortedPaths) {
+      if (pathname === specificPath || pathname.startsWith(specificPath + (specificPath === '/' ? '' : '/'))) {
+          return cmsRoutePermissions[specificPath];
+      }
+    }
+    return null;
+}
+
+export async function middleware(request: NextRequest) {
+  const requestHeaders = new Headers(request.headers);
+  const nonce = crypto.randomUUID();
+  requestHeaders.set('x-nonce', nonce);
+
+  let response = NextResponse.next({
+    request: {
+      headers: requestHeaders,
+    },
+  });
+
+  const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+  const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+  
+  if (!supabaseUrl || !supabaseAnonKey) {
+    throw new Error('Missing required Supabase environment variables');
+  }
+
+  const supabase = createServerClient(
+    supabaseUrl,
+    supabaseAnonKey,
+    {
+      cookies: {
+        get(name: string) { return request.cookies.get(name)?.value; },
+        set(name: string, value: string, options: CookieOptions) {
+          request.cookies.set({ name, value, ...options });
+          response = NextResponse.next({ request: { headers: requestHeaders } });
+          response.cookies.set({ name, value, ...options });
+        },
+        remove(name: string, options: CookieOptions) {
+          request.cookies.set({ name, value: '', ...options });
+          response = NextResponse.next({ request: { headers: requestHeaders } });
+          response.cookies.set({ name, value: '', ...options });
+        },
+      },
+    }
+  );
+
+  await supabase.auth.getSession();
+
+  const cookieLocale = request.cookies.get(LANGUAGE_COOKIE_KEY)?.value;
+  let currentLocale = cookieLocale;
+
+  if (!currentLocale || !SUPPORTED_LOCALES.includes(currentLocale)) {
+    currentLocale = DEFAULT_LOCALE;
+  }
+
+  requestHeaders.set('X-User-Locale', currentLocale);
+
+  const { data: { user }, error: userError } = await supabase.auth.getUser(); // Use getUser for revalidation
+  const { pathname } = request.nextUrl;
+
+  // CMS route protection
+  if (pathname.startsWith('/cms')) { // Ensure this check is broad enough for all CMS paths
+    if (userError || !user) { // Check for error or no user
+      return NextResponse.redirect(new URL(`/sign-in?redirect=${pathname}`, request.url));
+    }
+
+    const requiredRoles = getRequiredRolesForPath(pathname);
+
+    if (requiredRoles && requiredRoles.length > 0) {
+      const { data: profile, error: profileError } = await supabase
+        .from('profiles')
+        .select('role')
+        .eq('id', user.id)
+        .single<Pick<Profile, 'role'>>();
+
+      if (profileError || !profile) {
+        console.error(`Middleware: Profile error for user ${user.id} accessing ${pathname}. Error: ${profileError?.message}. Redirecting to unauthorized.`);
+        return NextResponse.redirect(new URL('/unauthorized?error=profile_issue', request.url));
+      }
+
+      const userRole = profile.role as UserRole;
+      if (!requiredRoles.includes(userRole)) {
+        console.warn(`Middleware: User ${user.id} (Role: ${userRole}) denied access to ${pathname}. Required: ${requiredRoles.join(' OR ')}. Redirecting to unauthorized.`);
+        return NextResponse.redirect(new URL(`/unauthorized?path=${pathname}&required=${requiredRoles.join(',')}`, request.url));
+      }
+    }
+  }
+
+  if (response.headers.get('location')) {
+      return response;
+  }
+
+  const finalResponse = NextResponse.next({
+    request: {
+      headers: requestHeaders,
+    },
+  });
+
+  response.cookies.getAll().forEach(cookie => {
+    finalResponse.cookies.set(cookie.name, cookie.value, cookie);
+  });
+  
+  if (request.cookies.get(LANGUAGE_COOKIE_KEY)?.value !== currentLocale) {
+      finalResponse.cookies.set(LANGUAGE_COOKIE_KEY, currentLocale, { path: '/', maxAge: 31536000, sameSite: 'lax' });
+  }
+
+  if (pathname === '/sign-in' || pathname === '/sign-up' || pathname === '/forgot-password') {
+    finalResponse.headers.set('X-Page-Type', 'auth');
+    finalResponse.headers.set('X-Prefetch-Priority', 'critical');
+  } else if (pathname === '/') {
+    finalResponse.headers.set('X-Page-Type', 'home');
+    finalResponse.headers.set('X-Prefetch-Priority', 'high');
+  } else if (pathname === '/blog') {
+    finalResponse.headers.set('X-Page-Type', 'blog-index');
+    finalResponse.headers.set('X-Prefetch-Priority', 'high');
+  } else if (pathname.startsWith('/blog/')) {
+    finalResponse.headers.set('X-Page-Type', 'blog-post');
+    finalResponse.headers.set('X-Prefetch-Priority', 'medium');
+  } else {
+    const segments = pathname.split('/').filter(Boolean);
+    if (segments.length === 1 && !pathname.startsWith('/cms')) {
+      finalResponse.headers.set('X-Page-Type', 'dynamic-page');
+      finalResponse.headers.set('X-Prefetch-Priority', 'medium');
+    }
+  }
+
+  const acceptHeader = request.headers.get('accept');
+  if (
+    acceptHeader &&
+    acceptHeader.includes('text/html') &&
+    !pathname.startsWith('/api/')
+  ) {
+    finalResponse.headers.set('Cache-Control', 'public, max-age=0, must-revalidate');
+    finalResponse.headers.set('X-BFCache-Applied', 'true');
+  }
+
+  finalResponse.headers.set('Strict-Transport-Security', 'max-age=63072000; includeSubDomains; preload');
+  finalResponse.headers.set('X-Frame-Options', 'SAMEORIGIN');
+  finalResponse.headers.set('X-Content-Type-Options', 'nosniff');
+  finalResponse.headers.set('Referrer-Policy', 'origin-when-cross-origin');
+  finalResponse.headers.set('Permissions-Policy', 'camera=(), microphone=(), geolocation=()');
+  finalResponse.headers.set('Cross-Origin-Opener-Policy', 'same-origin');
+
+  // Only send nonce-based CSP in production. In development, Next.js
+  // Dev Overlay injects inline scripts without a nonce, which would be blocked.
+  if (process.env.NODE_ENV === 'production') {
+    const nonceValue = requestHeaders.get('x-nonce');
+    if (nonceValue) {
+      const csp = [
+        "default-src 'self'",
+        `script-src 'self' blob: data: 'nonce-${nonceValue}'`,
+        "style-src 'self' 'unsafe-inline'",
+        "img-src 'self' data: blob: https://nrh-next-cms.e260676f72b0b18314b868f136ed72ae.r2.cloudflarestorage.com https://pub-a31e3f1a87d144898aeb489a8221f92e.r2.dev",
+        "font-src 'self'",
+        "object-src 'none'",
+        "connect-src 'self' https://ppcppwsfnrptznvbxnsz.supabase.co wss://ppcppwsfnrptznvbxnsz.supabase.co https://nrh-next-cms.e260676f72b0b18314b868f136ed72ae.r2.cloudflarestorage.com https://pub-a31e3f1a87d144898aeb489a8221f92e.r2.dev",
+        "frame-src 'self' blob: data: https://www.youtube.com",
+        "form-action 'self'",
+        "base-uri 'self'",
+      ].join('; ');
+
+      finalResponse.headers.set('Content-Security-Policy', csp);
+    }
+  }
+
+  const responseForLogging = finalResponse.clone();
+  const cacheStatus = responseForLogging.headers.get('x-vercel-cache') || 'none';
+  
+  if (!pathname.startsWith('/api/')) {
+    console.log(JSON.stringify({
+      type: 'cache',
+      status: cacheStatus,
+      path: pathname,
+    }));
+  }
+
+  return finalResponse;
+}
+
+export const config = {
+  matcher: [
+    '/((?!_next/static|_next/image|favicon.ico|auth/.*|sign-in|sign-up|forgot-password|unauthorized|api/auth/.*|api/revalidate|api/revalidate-log).*)',
+    '/cms/:path*',
+  ],
+};

package/templates/nextblock-template/next-env.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+/// <reference path="./../../dist/apps/nextblock/.next/types/routes.d.ts" />
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/templates/nextblock-template/next.config.js

@@ -0,0 +1,99 @@
+//@ts-check
+
+const { composePlugins, withNx } = require('@nx/next');
+
+/**
+ * @type {import('@nx/next/plugins/with-nx').WithNxOptions}
+ **/
+const nextConfig = {
+  // Use this to set Nx-specific options
+  // See: https://nx.dev/recipes/next/next-config-setup
+  nx: {svgr: false},
+  env: {
+    NEXT_PUBLIC_SUPABASE_URL: process.env.NEXT_PUBLIC_SUPABASE_URL,
+    NEXT_PUBLIC_SUPABASE_ANON_KEY: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY,
+  },
+  images: {
+    formats: ['image/avif', 'image/webp'],
+    imageSizes: [16, 32, 48, 64, 96, 128, 256, 384, 512],
+    deviceSizes: [320, 480, 640, 750, 828, 1080, 1200, 1440, 1920, 2048, 2560],
+    minimumCacheTTL: 31536000,
+    dangerouslyAllowSVG: false,
+    contentSecurityPolicy: "default-src 'self'; script-src 'none'; sandbox;",
+    remotePatterns: [
+      {
+        protocol: 'https',
+        hostname: 'pub-a31e3f1a87d144898aeb489a8221f92e.r2.dev',
+      },
+      {
+        protocol: 'https',
+        hostname: 'e260676f72b0b18314b868f136ed72ae.r2.cloudflarestorage.com',
+      },
+      // Add other necessary hostnames, for example, from NEXT_PUBLIC_URL if it's different
+      // and used for images. This example assumes NEXT_PUBLIC_R2_BASE_URL's hostname is the one above.
+      // If NEXT_PUBLIC_URL is also an image source and has a different hostname:
+      ...(process.env.NEXT_PUBLIC_URL
+        ? [
+            {
+              protocol: /** @type {'http' | 'https'} */ (new URL(process.env.NEXT_PUBLIC_URL).protocol.slice(0, -1)),
+              hostname: new URL(process.env.NEXT_PUBLIC_URL).hostname,
+            },
+          ]
+        : []),
+    ],
+  },
+experimental: {
+    optimizeCss: true,
+    cssChunking: 'strict',
+  },
+  transpilePackages: ['@nextblock-cms/utils', '@nextblock-cms/ui', '@nextblock-cms/editor'],
+  webpack: (config, { isServer }) => {
+    if (!isServer) {
+      config.module.rules.push({
+      test: /\.svg$/i,
+      issuer: /\.[jt]sx?$/,
+      use: ['@svgr/webpack'],
+    });
+      // Optimize TipTap bundle separation for client-side
+      config.optimization = {
+        ...config.optimization,
+        splitChunks: {
+          ...config.optimization.splitChunks,
+          cacheGroups: {
+            ...config.optimization.splitChunks?.cacheGroups,
+            // Create a separate chunk for TipTap and related dependencies
+            tiptap: {
+              test: /[\\/]node_modules[\\/](@tiptap|prosemirror)[\\/]/,
+              name: 'tiptap',
+              chunks: 'async', // Only include in async chunks (dynamic imports)
+              priority: 30,
+              reuseExistingChunk: true,
+            },
+            // Separate chunk for TipTap extensions and custom components
+            tiptapExtensions: {
+              test: /[\\/](tiptap-extensions|RichTextEditor|MenuBar|MediaLibraryModal)[\\/]/,
+              name: 'tiptap-extensions',
+              chunks: 'async',
+              priority: 25,
+              reuseExistingChunk: true,
+            },
+          },
+        },
+      };
+    }
+    return config;
+  },
+  turbopack: {
+    // Turbopack-specific options can be placed here if needed in the future
+  },
+  compiler: {
+    removeConsole: process.env.NODE_ENV === 'production',
+  }
+};
+
+const plugins = [
+  // Add more Next.js plugins to this list if needed.
+  withNx,
+];
+
+module.exports = composePlugins(...plugins)(nextConfig);

package/templates/nextblock-template/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@nextblock-cms/template",
+  "version": "0.0.0",
+  "private": true,
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "lint": "next lint"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "^3.810.0",
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
+    "@supabase/ssr": "^0.6.1",
+    "@supabase/supabase-js": "^2.47.2",
+    "@tiptap/react": "^3.3.0",
+    "date-fns": "^3.6.0",
+    "dotenv": "^16.5.0",
+    "fast-json-patch": "^3.1.1",
+    "html-react-parser": "^5.2.6",
+    "js-cookie": "^3.0.5",
+    "lodash.debounce": "^4.0.8",
+    "lucide-react": "^0.534.0",
+    "next": "^15.5.4",
+    "nodemailer": "^7.0.4",
+    "plaiceholder": "^3.0.0",
+    "react": "19.0.0",
+    "react-dom": "19.0.0",
+    "react-hot-toast": "^2.4.1",
+    "sharp": "^0.34.2",
+    "uuid": "^10.0.0",
+    "zod": "^3.25.76",
+    "@nextblock-cms/ui": "workspace:*",
+    "@nextblock-cms/utils": "workspace:*",
+    "@nextblock-cms/db": "workspace:*",
+    "@nextblock-cms/editor": "workspace:*",
+    "@nextblock-cms/sdk": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/node": "22.10.2",
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "19.0.2",
+    "autoprefixer": "^10.4.13",
+    "eslint": "^9.8.0",
+    "eslint-config-next": "^15.5.4",
+    "postcss": "^8.4.38",
+    "tailwindcss": "^3.4.3",
+    "typescript": "~5.8.2"
+  }
+}

package/templates/nextblock-template/postcss.config.js

@@ -0,0 +1,6 @@
+module.exports = {
+  plugins: {
+    tailwindcss: {},
+    autoprefixer: {},
+  },
+};

package/templates/nextblock-template/project.json

@@ -0,0 +1,7 @@
+{
+  "name": "nextblock-template",
+  "projectType": "application",
+  "root": "apps/create-nextblock/templates/nextblock-template",
+  "sourceRoot": "apps/create-nextblock/templates/nextblock-template",
+  "targets": {}
+}

package/templates/nextblock-template/scripts/backfill-image-meta.ts

@@ -0,0 +1,149 @@
+// scripts/backfill-image-meta.ts
+import { createClient } from '@supabase/supabase-js';
+import { S3Client, GetObjectCommand, PutObjectCommand } from '@aws-sdk/client-s3';
+import sharp from 'sharp';
+import { Readable } from 'stream';
+import { getPlaiceholder } from 'plaiceholder';
+import 'dotenv/config';
+import * as dotenv from 'dotenv';
+
+dotenv.config({ path: '.env.local' });
+
+// Helper to convert stream to buffer
+async function streamToBuffer(stream: Readable): Promise<Buffer> {
+  return new Promise((resolve, reject) => {
+    const chunks: Buffer[] = [];
+    stream.on('data', (chunk) => chunks.push(chunk as Buffer));
+    stream.on('error', reject);
+    stream.on('end', () => resolve(Buffer.concat(chunks)));
+  });
+}
+
+const R2_BUCKET_NAME = process.env.R2_BUCKET_NAME;
+const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL;
+const SUPABASE_SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
+const MAX_WIDTH = 2560;
+
+async function backfillImageMeta() {
+  const {
+    R2_ACCOUNT_ID,
+    R2_ACCESS_KEY_ID,
+    R2_SECRET_ACCESS_KEY,
+    R2_BUCKET_NAME: Bucket,
+  } = process.env;
+
+  if (
+    !R2_ACCOUNT_ID ||
+    !R2_ACCESS_KEY_ID ||
+    !R2_SECRET_ACCESS_KEY ||
+    !Bucket
+  ) {
+    console.error('Cloudflare R2 environment variables are not fully set.');
+    process.exit(1);
+  }
+  if (!SUPABASE_URL || !SUPABASE_SERVICE_ROLE_KEY) {
+    console.error('Supabase environment variables are not set.');
+    process.exit(1);
+  }
+
+  const s3Client = new S3Client({
+    region: 'auto',
+    endpoint: `https://${R2_ACCOUNT_ID}.r2.cloudflarestorage.com`,
+    credentials: {
+      accessKeyId: R2_ACCESS_KEY_ID,
+      secretAccessKey: R2_SECRET_ACCESS_KEY,
+    },
+  });
+
+  const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);
+
+  // Fetch all media records
+  const { data: mediaItems, error } = await supabase.from('media').select('id, object_key, width');
+
+  if (error) {
+    console.error('Error fetching media items:', error);
+    return;
+  }
+
+  if (!mediaItems || mediaItems.length === 0) {
+    console.log('No images to backfill.');
+    return;
+  }
+
+  console.log(`Found ${mediaItems.length} images to process.`);
+
+  for (const item of mediaItems) {
+    try {
+      if (item.width && item.width > MAX_WIDTH) {
+        console.log(`Resizing image ${item.id} (${item.object_key}) from ${item.width}px wide.`);
+
+        // 1. Download the image from R2
+        const getObjectParams = {
+          Bucket: R2_BUCKET_NAME,
+          Key: item.object_key,
+        };
+        const getObjectResponse = await s3Client.send(new GetObjectCommand(getObjectParams));
+
+        if (!getObjectResponse.Body) {
+          throw new Error('Failed to retrieve image from R2: Empty body.');
+        }
+
+        const imageBuffer = await streamToBuffer(getObjectResponse.Body as Readable);
+
+        // 2. Resize the image
+        const resizedImageBuffer = await sharp(imageBuffer)
+          .resize({
+            width: MAX_WIDTH,
+            withoutEnlargement: true,
+          })
+          .toBuffer();
+
+        // 3. Upload the resized image back to R2, overwriting the original
+        const putObjectParams = {
+          Bucket: R2_BUCKET_NAME,
+          Key: item.object_key,
+          Body: resizedImageBuffer,
+          ContentType: getObjectResponse.ContentType,
+        };
+        await s3Client.send(new PutObjectCommand(putObjectParams));
+
+        // 4. Get new metadata from the resized image
+        const sharpInstance = sharp(resizedImageBuffer);
+        const metadata = await sharpInstance.metadata();
+        const { base64: blurDataURL } = await getPlaiceholder(resizedImageBuffer, { size: 10 });
+
+        const { width, height } = metadata;
+
+        if (!width || !height) {
+          console.warn(`Could not extract new width/height for ${item.object_key}. Skipping update.`);
+          continue;
+        }
+
+        // 5. Update the record in the media table
+        const { error: updateError } = await supabase
+          .from('media')
+          .update({
+            width,
+            height,
+            blur_data_url: blurDataURL,
+            updated_at: new Date().toISOString(),
+          })
+          .eq('id', item.id);
+
+        if (updateError) {
+          console.error(`Failed to update item ${item.id}:`, updateError);
+        } else {
+          console.log(`Successfully resized and updated item ${item.id}.`);
+        }
+      } else {
+        console.log(`Skipping image ${item.id} (${item.object_key}) - not oversized.`);
+      }
+    } catch (e: unknown) {
+      console.error(`An error occurred while processing item ${item.id}:`, e instanceof Error ? e.message : String(e));
+    }
+  }
+
+  console.log('Backfill complete.');
+}
+
+backfillImageMeta();

package/templates/nextblock-template/scripts/backup.js

@@ -0,0 +1,53 @@
+const { exec } = require('child_process');
+const { URL } = require('url');
+const fs = require('fs');
+const path = require('path');
+require('dotenv').config({ path: '.env.local' });
+
+// Backup directory
+const backupDir = path.join(__dirname, '..', 'backup');
+
+// Create backup directory if it doesn't exist
+if (!fs.existsSync(backupDir)) {
+  fs.mkdirSync(backupDir);
+}
+
+// Backup file name
+const backupFile = path.join(backupDir, `backup_${new Date().toISOString().slice(0, 10)}.sql`);
+
+// Function to perform the backup
+const backupDatabase = () => {
+  const connectionString = process.env.POSTGRES_URL;
+
+  if (!connectionString) {
+    console.error('Error: Missing POSTGRES_URL in .env.local file.');
+    return;
+  }
+
+  // Parse the URL and remove non-standard parameters for pg_dump
+  const url = new URL(connectionString);
+  url.searchParams.delete('supa'); // Remove supa parameter
+  const finalConnectionString = url.toString();
+
+  const command = `pg_dump "${finalConnectionString}" > "${backupFile}"`;
+
+  console.log('Starting database backup...');
+
+  exec(command, (error, stdout, stderr) => {
+    if (error) {
+      console.error(`Error executing backup: ${error.message}`);
+      if (stderr) {
+        console.error(`pg_dump error: ${stderr}`);
+      }
+      return;
+    }
+    if (stderr && stderr.toLowerCase().includes('error')) {
+      console.error(`Error: ${stderr}`);
+      return;
+    }
+    console.log(`Backup successful! File saved as ${backupFile}`);
+  });
+};
+
+// Run the backup
+backupDatabase();