showpane 0.4.0 → 0.4.2

package/bundle/scaffold/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "showpane-portal",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "dev": "next dev",
+    "prisma:generate": "node scripts/prisma-generate.mjs",
+    "prisma:db-push": "node scripts/prisma-db-push.mjs",
+    "build": "npm run prisma:generate && next build",
+    "start": "next start",
+    "postinstall": "npm run prisma:generate",
+    "db:migrate": "prisma migrate deploy",
+    "db:push": "npm run prisma:db-push",
+    "db:seed": "npx tsx prisma/seed.ts",
+    "test": "vitest"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "^3.1027.0",
+    "@prisma/client": "6.19.2",
+    "bcryptjs": "^2.4.3",
+    "clsx": "^2.1.1",
+    "lucide-react": "^0.468.0",
+    "next": "^15.3.1",
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0",
+    "tailwind-merge": "^3.0.2"
+  },
+  "devDependencies": {
+    "adm-zip": "^0.5.17",
+    "@types/bcryptjs": "^2.4.6",
+    "@types/node": "^22.15.2",
+    "@types/react": "^19.1.2",
+    "@types/react-dom": "^19.1.2",
+    "autoprefixer": "^10.4.21",
+    "postcss": "^8.5.3",
+    "prisma": "6.19.2",
+    "tailwindcss": "^3.4.17",
+    "tsx": "^4.19.4",
+    "typescript": "^5.8.3",
+    "vitest": "^4.1.3"
+  }
+}

package/bundle/scaffold/postcss.config.js

@@ -0,0 +1,6 @@
+module.exports = {
+  plugins: {
+    tailwindcss: {},
+    autoprefixer: {},
+  },
+};

package/bundle/scaffold/prisma/migrations/20260408000000_init/migration.sql

@@ -0,0 +1,143 @@
+-- CreateTable
+CREATE TABLE "Organization" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "logoUrl" TEXT,
+    "primaryColor" TEXT NOT NULL DEFAULT '#111827',
+    "portalLabel" TEXT NOT NULL DEFAULT 'Client Portal',
+    "websiteUrl" TEXT,
+    "contactName" TEXT NOT NULL,
+    "contactTitle" TEXT NOT NULL,
+    "contactEmail" TEXT NOT NULL,
+    "contactPhone" TEXT,
+    "contactAvatar" TEXT,
+    "supportEmail" TEXT NOT NULL,
+    "customDomain" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Organization_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Member" (
+    "id" TEXT NOT NULL,
+    "organizationId" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "role" TEXT NOT NULL DEFAULT 'owner',
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Member_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "User" (
+    "id" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "name" TEXT,
+    "passwordHash" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "User_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "ClientPortal" (
+    "id" TEXT NOT NULL,
+    "organizationId" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "companyName" TEXT NOT NULL,
+    "logoUrl" TEXT,
+    "username" TEXT NOT NULL,
+    "passwordHash" TEXT NOT NULL,
+    "credentialVersion" TEXT NOT NULL,
+    "isActive" BOOLEAN NOT NULL DEFAULT true,
+    "lastUpdated" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "ClientPortal_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "PortalEvent" (
+    "id" TEXT NOT NULL,
+    "portalId" TEXT NOT NULL,
+    "event" TEXT NOT NULL,
+    "detail" TEXT,
+    "ipAddress" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "PortalEvent_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "PortalFile" (
+    "id" TEXT NOT NULL,
+    "portalId" TEXT NOT NULL,
+    "filename" TEXT NOT NULL,
+    "mimeType" TEXT NOT NULL,
+    "storagePath" TEXT NOT NULL,
+    "size" INTEGER NOT NULL,
+    "uploadedBy" TEXT NOT NULL DEFAULT 'operator',
+    "uploadedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "PortalFile_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Session" (
+    "id" TEXT NOT NULL,
+    "token" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Session_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Organization_slug_key" ON "Organization"("slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Organization_customDomain_key" ON "Organization"("customDomain");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Member_organizationId_userId_key" ON "Member"("organizationId", "userId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "User_email_key" ON "User"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ClientPortal_organizationId_slug_key" ON "ClientPortal"("organizationId", "slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ClientPortal_organizationId_username_key" ON "ClientPortal"("organizationId", "username");
+
+-- CreateIndex
+CREATE INDEX "PortalEvent_portalId_createdAt_idx" ON "PortalEvent"("portalId", "createdAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "PortalFile_storagePath_key" ON "PortalFile"("storagePath");
+
+-- CreateIndex
+CREATE INDEX "PortalFile_portalId_idx" ON "PortalFile"("portalId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Session_token_key" ON "Session"("token");
+
+-- AddForeignKey
+ALTER TABLE "Member" ADD CONSTRAINT "Member_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Member" ADD CONSTRAINT "Member_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "ClientPortal" ADD CONSTRAINT "ClientPortal_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "PortalEvent" ADD CONSTRAINT "PortalEvent_portalId_fkey" FOREIGN KEY ("portalId") REFERENCES "ClientPortal"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "PortalFile" ADD CONSTRAINT "PortalFile_portalId_fkey" FOREIGN KEY ("portalId") REFERENCES "ClientPortal"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/bundle/scaffold/prisma/migrations/20260408010000_add_visitor_tracking/migration.sql

@@ -0,0 +1,6 @@
+-- AlterTable
+ALTER TABLE "PortalEvent" ADD COLUMN "visitorId" TEXT;
+ALTER TABLE "PortalEvent" ADD COLUMN "metadata" TEXT;
+
+-- CreateIndex
+CREATE INDEX "PortalEvent_visitorId_idx" ON "PortalEvent"("visitorId");

package/bundle/scaffold/prisma/migrations/20260409040000_add_portal_file_checksum/migration.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "PortalFile"
+ADD COLUMN IF NOT EXISTS "checksum" TEXT;

package/bundle/scaffold/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"

package/bundle/scaffold/prisma/schema.local.prisma

@@ -0,0 +1,131 @@
+// Local development schema — SQLite provider for zero-config local dev.
+// Used by `npx showpane` installer via: prisma db push --schema prisma/schema.local.prisma
+
+generator client {
+  provider      = "prisma-client"
+  output        = "../src/generated/prisma"
+  binaryTargets = ["native"]
+}
+
+datasource db {
+  provider = "sqlite"
+  url      = env("DATABASE_URL")
+}
+
+model Organization {
+  id            String   @id @default(cuid())
+  name          String
+  slug          String   @unique
+
+  // Branding
+  logoUrl       String?
+  primaryColor  String   @default("#111827")
+  portalLabel   String   @default("Client Portal")
+  websiteUrl    String?
+
+  // Contact (displayed in portal footer + login)
+  contactName   String
+  contactTitle  String
+  contactEmail  String
+  contactPhone  String?
+  contactAvatar String?
+  supportEmail  String
+
+  // Domain
+  customDomain  String?  @unique
+
+  createdAt     DateTime @default(now())
+  updatedAt     DateTime @updatedAt
+
+  members       Member[]
+  portals       ClientPortal[]
+}
+
+model Member {
+  id             String       @id @default(cuid())
+  organizationId String
+  userId         String
+  role           String       @default("owner")
+  createdAt      DateTime     @default(now())
+
+  organization   Organization @relation(fields: [organizationId], references: [id])
+  user           User         @relation(fields: [userId], references: [id])
+
+  @@unique([organizationId, userId])
+}
+
+model User {
+  id            String   @id @default(cuid())
+  email         String   @unique
+  name          String?
+  passwordHash  String?
+  createdAt     DateTime @default(now())
+
+  members       Member[]
+}
+
+model ClientPortal {
+  id                String       @id @default(cuid())
+  organizationId    String
+  slug              String
+  companyName       String
+  logoUrl           String?
+
+  // Auth
+  username          String
+  passwordHash      String
+  credentialVersion String       @default(cuid())
+  isActive          Boolean      @default(true)
+
+  // Meta
+  lastUpdated       String?
+  createdAt         DateTime     @default(now())
+  updatedAt         DateTime     @updatedAt
+
+  organization      Organization @relation(fields: [organizationId], references: [id])
+  events            PortalEvent[]
+  files             PortalFile[]
+
+  @@unique([organizationId, slug])
+  @@unique([organizationId, username])
+}
+
+model PortalEvent {
+  id          String       @id @default(cuid())
+  portalId    String
+  event       String
+  detail      String?
+  visitorId   String?
+  metadata    String?
+  ipAddress   String?
+  createdAt   DateTime     @default(now())
+
+  portal      ClientPortal @relation(fields: [portalId], references: [id], onDelete: Cascade)
+
+  @@index([portalId, createdAt])
+  @@index([visitorId])
+}
+
+model PortalFile {
+  id          String       @id @default(cuid())
+  portalId    String
+  filename    String
+  mimeType    String
+  storagePath String       @unique
+  checksum    String?
+  size        Int
+  uploadedBy  String       @default("operator")
+  uploadedAt  DateTime     @default(now())
+
+  portal      ClientPortal @relation(fields: [portalId], references: [id], onDelete: Cascade)
+
+  @@index([portalId])
+}
+
+model Session {
+  id        String   @id @default(cuid())
+  token     String   @unique
+  userId    String
+  expiresAt DateTime
+  createdAt DateTime @default(now())
+}

package/bundle/scaffold/prisma/schema.prisma

@@ -0,0 +1,128 @@
+generator client {
+  provider      = "prisma-client"
+  output        = "../src/generated/prisma"
+  binaryTargets = ["native", "linux-musl-openssl-3.0.x", "debian-openssl-3.0.x"]
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+model Organization {
+  id            String   @id @default(cuid())
+  name          String
+  slug          String   @unique
+
+  // Branding
+  logoUrl       String?
+  primaryColor  String   @default("#111827")
+  portalLabel   String   @default("Client Portal")
+  websiteUrl    String?
+
+  // Contact (displayed in portal footer + login)
+  contactName   String
+  contactTitle  String
+  contactEmail  String
+  contactPhone  String?
+  contactAvatar String?
+  supportEmail  String
+
+  // Domain
+  customDomain  String?  @unique
+
+  createdAt     DateTime @default(now())
+  updatedAt     DateTime @updatedAt
+
+  members       Member[]
+  portals       ClientPortal[]
+}
+
+model Member {
+  id             String       @id @default(cuid())
+  organizationId String
+  userId         String
+  role           String       @default("owner")
+  createdAt      DateTime     @default(now())
+
+  organization   Organization @relation(fields: [organizationId], references: [id])
+  user           User         @relation(fields: [userId], references: [id])
+
+  @@unique([organizationId, userId])
+}
+
+model User {
+  id            String   @id @default(cuid())
+  email         String   @unique
+  name          String?
+  passwordHash  String?
+  createdAt     DateTime @default(now())
+
+  members       Member[]
+}
+
+model ClientPortal {
+  id                String       @id @default(cuid())
+  organizationId    String
+  slug              String
+  companyName       String
+  logoUrl           String?
+
+  // Auth
+  username          String
+  passwordHash      String
+  credentialVersion String       @default(cuid())
+  isActive          Boolean      @default(true)
+
+  // Meta
+  lastUpdated       String?
+  createdAt         DateTime     @default(now())
+  updatedAt         DateTime     @updatedAt
+
+  organization      Organization @relation(fields: [organizationId], references: [id])
+  events            PortalEvent[]
+  files             PortalFile[]
+
+  @@unique([organizationId, slug])
+  @@unique([organizationId, username])
+}
+
+model PortalEvent {
+  id          String       @id @default(cuid())
+  portalId    String
+  event       String
+  detail      String?
+  visitorId   String?
+  metadata    String?
+  ipAddress   String?
+  createdAt   DateTime     @default(now())
+
+  portal      ClientPortal @relation(fields: [portalId], references: [id], onDelete: Cascade)
+
+  @@index([portalId, createdAt])
+  @@index([visitorId])
+}
+
+model PortalFile {
+  id          String       @id @default(cuid())
+  portalId    String
+  filename    String
+  mimeType    String
+  storagePath String       @unique
+  checksum    String?
+  size        Int
+  uploadedBy  String       @default("operator")
+  uploadedAt  DateTime     @default(now())
+
+  portal      ClientPortal @relation(fields: [portalId], references: [id], onDelete: Cascade)
+
+  @@index([portalId])
+}
+
+model Session {
+  id        String   @id @default(cuid())
+  token     String   @unique
+  userId    String
+  expiresAt DateTime
+  createdAt DateTime @default(now())
+}

package/bundle/scaffold/prisma/seed.ts

@@ -0,0 +1,49 @@
+import { PrismaClient } from "@/lib/prisma-client";
+import bcrypt from "bcryptjs";
+
+const prisma = new PrismaClient();
+
+async function main() {
+  const org = await prisma.organization.upsert({
+    where: { slug: "demo" },
+    update: {},
+    create: {
+      name: "Demo Company",
+      slug: "demo",
+      contactName: "Jane Smith",
+      contactTitle: "Account Manager",
+      contactEmail: "jane@example.com",
+      supportEmail: "support@example.com",
+      websiteUrl: "https://example.com",
+    },
+  });
+
+  const passwordHash = await bcrypt.hash("demo-only-password", 10);
+
+  await prisma.clientPortal.upsert({
+    where: {
+      organizationId_slug: {
+        organizationId: org.id,
+        slug: "example",
+      },
+    },
+    update: {},
+    create: {
+      organizationId: org.id,
+      slug: "example",
+      companyName: "Acme Health",
+      username: "example",
+      passwordHash,
+      lastUpdated: "2 April 2026",
+    },
+  });
+
+  console.log("Seed complete: org 'demo', portal 'example' (username: example, password: demo-only-password)");
+}
+
+main()
+  .catch((e) => {
+    console.error(e);
+    process.exit(1);
+  })
+  .finally(() => prisma.$disconnect());

package/bundle/scaffold/public/example-avatar.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">
+  <circle cx="16" cy="16" r="16" fill="#dbeafe"/>
+  <text x="16" y="21" text-anchor="middle" font-family="system-ui" font-size="14" font-weight="bold" fill="#3b82f6">J</text>
+</svg>

package/bundle/scaffold/public/example-logo.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">
+  <circle cx="16" cy="16" r="16" fill="#e5e7eb"/>
+  <text x="16" y="21" text-anchor="middle" font-family="system-ui" font-size="14" font-weight="bold" fill="#6b7280">E</text>
+</svg>

package/bundle/scaffold/public/robots.txt

@@ -0,0 +1,2 @@
+User-agent: *
+Disallow: /

package/bundle/scaffold/scripts/backup.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Showpane PostgreSQL backup script
+# Usage: ./scripts/backup.sh [backup_dir]
+
+BACKUP_DIR="${1:-./backups}"
+TIMESTAMP=$(date +%Y%m%d-%H%M%S)
+FILENAME="showpane-backup-${TIMESTAMP}.sql.gz"
+
+mkdir -p "$BACKUP_DIR"
+
+echo "Backing up Showpane database..."
+docker compose exec -T db pg_dump --clean -U portal portal | gzip > "${BACKUP_DIR}/${FILENAME}"
+
+echo "Backup saved to ${BACKUP_DIR}/${FILENAME}"
+echo ""
+echo "To restore:"
+echo "  gunzip -c ${BACKUP_DIR}/${FILENAME} | docker compose exec -T db psql -U portal portal"