showpane 0.4.27 → 0.4.29

package/bundle/meta/scaffold-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-04-13T22:57:26.230Z",
+  "generatedAt": "2026-04-13T23:58:51.565Z",
   "scaffoldVersion": "0.2.7",
   "files": {
     ".env.example": "ed105f2bdcd1888a98181d55e3c9f7d6eff3ae9c3e2366c2e777a12e3caddfa7",
@@ -19,7 +19,7 @@
     "scripts/prisma-db-push.mjs": "76ac85fe65b5dc3d9cc7432e44618fcc84b7443574c8d88198d01f13ac23c040",
     "scripts/prisma-generate.mjs": "d371e63388fa39f963b7c3c7cb8f87e0d9cd43cbf69d254b999108e29b8738c8",
     "scripts/prisma-schema.mjs": "0a86cc1b5f84120948aed8f97a84f2d5b173f91a43ea34ad6767441894121d83",
-    "src/__tests__/branding.test.ts": "dffbb3744705bc378ad91b9d7b8868004ffeaa45623f4748e1fed951096b9e3f",
+    "src/__tests__/branding.test.ts": "ed6246013ca9465e3ee73de72791b781556a75b65935ed61e116d3dcc7885b53",
     "src/__tests__/client-portals.test.ts": "9c3236bf0f7190b7d5ba9082287dcb29bc00d28dd63782a89505125ead06c624",
     "src/__tests__/deploy-bundle.test.ts": "abd3216170f306c09df6abb0d2afad966a5741e8859f25a310a0a09693d37609",
     "src/__tests__/portal-contracts.test.ts": "a3ecf29c460a14f22ef48449fc9de5b945ce5f03423f12380d05e01159d1e3b4",
@@ -28,7 +28,7 @@
     "src/app/(portal)/client/example/example-client.tsx": "ed32b111acea861f448d865338f8841d47c6ca7c2f87ed30d85bb0804940d4ec",
     "src/app/(portal)/client/example/page.tsx": "f330864f63c9feea76c8a62c3eba3ce57578627e0d4abd929fd7fefdfc7af058",
     "src/app/(portal)/client/layout.tsx": "4f43871510408a81da229d48ae316ec1d1c1beda93121922246300a2c8fd0999",
-    "src/app/(portal)/client/page.tsx": "cf0d1b0517aadf1bfbfc91552d0c13201a140c31d2df9e08e1c62a5d48e59189",
+    "src/app/(portal)/client/page.tsx": "856b70d4514e09e6efbb933421dbe7dfcfcea04321d142d0aca4b5dff6c2dc95",
     "src/app/api/client-auth/route.ts": "ce1858559b1e944d5b1dc719d1f03bebf66286671700b1b5397382109f0f1e0d",
     "src/app/api/client-auth/share/route.ts": "ed82414212dcd26af8c6c0f2bd44d9d79a727ed35cfedbac8c4077a6220aad14",
     "src/app/api/client-events/route.ts": "13d545537b7e8ce421e6169d25c105adf2a2de3d978ae0a2c6751ff5f7d2eb33",
@@ -41,10 +41,10 @@
     "src/app/layout.tsx": "c17aabeb2b486f023e777230343ace6cc06840f641a10b9dd9f65e092018f82f",
     "src/app/page.tsx": "1f71205c3ae30bf6929d37947b0c94ae53aed33b6689b7d6b13066ad51c1bc14",
     "src/components/copy-button.tsx": "2f3d1d8a6a0a570c8d78e19c3c15519c44af17b5d8893ae5a5f57db5ecce7077",
-    "src/components/portal-login.tsx": "8b0d91bb28674e1102fd2e5b5ddcc3a93755dd806fbd3d1b2dbea2646cffca5e",
-    "src/components/portal-shell.tsx": "f46a0f753a4a0318f06c8b4e46295febb84b03ea082c95057a6da50c737b4e21",
+    "src/components/portal-login.tsx": "cd20f5023a427202fc031d403048ffd7d8966cfa07b96fadc0877e553c5bc9bb",
+    "src/components/portal-shell.tsx": "098e65be5a4303644e5302e345c1fb7601493dbdda0421f59b1f428c918a8918",
     "src/lib/abuse-controls.ts": "d79d58d93267aca48ad0b7b9b91f753c9a3c27263e4e98daf768a950c44a6fc6",
-    "src/lib/branding.ts": "f0fa242c285610105c27fcaf76828f1892c8051fc2db5c36bdbe92ea916aa4bd",
+    "src/lib/branding.ts": "9abd43d77ea35c2e39e237cb9a5c45d20cf7830a3685c4f9a545f0d5333ee012",
     "src/lib/client-auth.ts": "b9bdfe77dbe5d6ec6c6a930627fc43d3253f0d76fd8fc4093af5a75742bebe42",
     "src/lib/client-portals.ts": "9b531f9a9ea459b4ab85257b9dd282874fa1422838fe89d511940e417114216a",
     "src/lib/control-plane.ts": "e0cf39f28ec7de715fd5cfbb5f4240773fcd3d775cd1677588dd749fff740a0e",

package/bundle/scaffold/src/__tests__/branding.test.ts

@@ -5,6 +5,7 @@ import {
   getDomainFromWebsite,
   getLogoUrl,
   normalizeWebsiteUrl,
+  resolvePortalLabel,
 } from "@/lib/branding";
 
 describe("branding helpers", () => {
@@ -40,4 +41,9 @@ describe("branding helpers", () => {
       }),
     ).toBe(getLogoUrl("", "Bidgen"));
   });
+
+  it("uses the org name when the stored portal label is still generic", () => {
+    expect(resolvePortalLabel("Bidgen-Test", "Client Portal")).toBe("Bidgen-Test Portal");
+    expect(resolvePortalLabel("Bidgen-Test", "Bidgen-Test Workspace")).toBe("Bidgen-Test Workspace");
+  });
 });

package/bundle/scaffold/src/app/(portal)/client/page.tsx

@@ -1,5 +1,5 @@
 import { PortalLogin } from "@/components/portal-login";
-import { getBrandLogoUrl } from "@/lib/branding";
+import { getBrandLogoUrl, resolvePortalLabel } from "@/lib/branding";
 import { prisma } from "@/lib/db";
 import { resolveDefaultOrganizationId } from "@/lib/client-portals";
 import { getRuntimePortalBySlug, getRuntimeState, isRuntimeSnapshotMode } from "@/lib/runtime-state";
@@ -13,7 +13,7 @@ export default async function ClientLogin({
   const portalSlug = params.portal?.trim() || null;
 
   let companyName = "Showpane";
-  let companyUrl = "https://showpane.com";
+  let companyUrl: string | null = "https://showpane.com";
   let supportEmail = "support@showpane.com";
   let portalLabel = "Client Portal";
   let description = "Private portal access. Sign in with the credentials you were sent.";
@@ -29,16 +29,14 @@ export default async function ClientLogin({
           const orgName = state?.organization?.name || companyName;
           companyName = orgName;
           companyLogoAlt = orgName;
-          portalLabel = state?.organization?.portalLabel || `${orgName} Portal`;
+          portalLabel = resolvePortalLabel(orgName, state?.organization?.portalLabel);
           description = `Private portal created by ${orgName} for ${portal.companyName}. Sign in with the credentials you were sent.`;
           companyLogoSrc = getBrandLogoUrl({
             logoUrl: state?.organization?.logoUrl,
             websiteUrl: state?.organization?.websiteUrl,
             fallbackName: orgName,
           });
-          if (state?.organization?.websiteUrl) {
-            companyUrl = state.organization.websiteUrl;
-          }
+          companyUrl = state?.organization?.websiteUrl ?? null;
           if (state?.organization?.supportEmail) {
             supportEmail = state.organization.supportEmail;
           }
@@ -71,7 +69,7 @@ export default async function ClientLogin({
             const orgName = organization?.name || companyName;
             companyName = orgName;
             companyLogoAlt = orgName;
-            portalLabel = organization?.portalLabel || `${orgName} Portal`;
+            portalLabel = resolvePortalLabel(orgName, organization?.portalLabel);
             description = `Private portal created by ${orgName} for ${portal.companyName}. Sign in with the credentials you were sent.`;
             companyLogoSrc = getBrandLogoUrl({
               logoUrl: organization?.logoUrl,
@@ -79,9 +77,7 @@ export default async function ClientLogin({
               fallbackName: orgName,
             });
           }
-          if (organization?.websiteUrl) {
-            companyUrl = organization.websiteUrl;
-          }
+          companyUrl = organization?.websiteUrl ?? null;
           if (organization?.supportEmail) {
             supportEmail = organization.supportEmail;
           }
@@ -95,21 +91,8 @@ export default async function ClientLogin({
   return (
     <PortalLogin
       companyName={companyName}
-      companyLogo={
-        companyLogoSrc ? (
-          <img
-            src={companyLogoSrc}
-            alt={companyLogoAlt}
-            className="h-7 w-7 rounded-lg object-cover"
-          />
-        ) : (
-          <div className="flex h-7 w-7 items-center justify-center rounded-lg bg-gray-900">
-            <span className="text-xs font-bold text-white">
-              {companyName[0]?.toUpperCase() || "S"}
-            </span>
-          </div>
-        )
-      }
+      companyLogoSrc={companyLogoSrc}
+      companyLogoAlt={companyLogoAlt}
       companyUrl={companyUrl}
       supportEmail={supportEmail}
       portalLabel={portalLabel}

package/bundle/scaffold/src/components/portal-login.tsx

@@ -1,12 +1,13 @@
 "use client";
 
-import { useState, FormEvent, ReactNode } from "react";
+import { useState, FormEvent } from "react";
 import { ArrowRight, Eye, EyeOff } from "lucide-react";
 
 export type PortalLoginProps = {
   companyName: string;
-  companyLogo: ReactNode;
-  companyUrl: string;
+  companyLogoSrc?: string | null;
+  companyLogoAlt?: string;
+  companyUrl?: string | null;
   portalLabel?: string;
   description?: string;
   supportEmail: string;
@@ -16,7 +17,8 @@ export type PortalLoginProps = {
 
 export function PortalLogin({
   companyName,
-  companyLogo,
+  companyLogoSrc,
+  companyLogoAlt,
   companyUrl,
   portalLabel,
   description,
@@ -29,17 +31,40 @@ export function PortalLogin({
   const [error, setError] = useState<{ message: string; hint?: string } | null>(null);
   const [loading, setLoading] = useState(false);
   const [showPassword, setShowPassword] = useState(false);
+  const [logoFailed, setLogoFailed] = useState(false);
 
   const resolvedPortalLabel = portalLabel ?? "Client Portal";
   const resolvedDescription = description ?? `Private portal for ${companyName} clients. Sign in with the credentials we sent you.`;
   const resolvedAuthEndpoint = authEndpoint ?? "/api/client-auth";
   const resolvedRedirectBasePath = redirectBasePath ?? "/client";
+  const resolvedCompanyLogoAlt = companyLogoAlt ?? companyName;
+  const brandMark = (
+    <>
+      {companyLogoSrc && !logoFailed ? (
+        <img
+          src={companyLogoSrc}
+          alt={resolvedCompanyLogoAlt}
+          className="h-7 w-7 rounded-lg object-cover"
+          onError={() => setLogoFailed(true)}
+        />
+      ) : (
+        <div className="flex h-7 w-7 items-center justify-center rounded-lg bg-gray-900">
+          <span className="text-xs font-bold text-white">
+            {companyName[0]?.toUpperCase() || "S"}
+          </span>
+        </div>
+      )}
+      <span className="text-base font-bold tracking-tight text-gray-900">{companyName}</span>
+    </>
+  );
 
-  let displayDomain: string;
-  try {
-    displayDomain = new URL(companyUrl).hostname;
-  } catch {
-    displayDomain = companyUrl;
+  let displayDomain: string | null = null;
+  if (companyUrl) {
+    try {
+      displayDomain = new URL(companyUrl).hostname;
+    } catch {
+      displayDomain = companyUrl;
+    }
   }
 
   async function handleSubmit(e: FormEvent) {
@@ -85,10 +110,15 @@ export function PortalLogin({
       <div className="absolute -bottom-32 -left-32 h-96 w-96 rounded-full bg-primary/5 blur-[120px]" />
 
       <div className="relative z-10 w-full max-w-sm">
-        <a href={companyUrl} className="mx-auto mb-8 flex w-fit items-center gap-2 transition-opacity hover:opacity-70">
-          {companyLogo}
-          <span className="text-base font-bold tracking-tight text-gray-900">{companyName}</span>
-        </a>
+        {companyUrl ? (
+          <a href={companyUrl} className="mx-auto mb-8 flex w-fit items-center gap-2 transition-opacity hover:opacity-70">
+            {brandMark}
+          </a>
+        ) : (
+          <div className="mx-auto mb-8 flex w-fit items-center gap-2">
+            {brandMark}
+          </div>
+        )}
 
         <div className="rounded-2xl border border-gray-200 bg-white p-6 shadow-sm">
           <div className="mb-5">
@@ -156,9 +186,11 @@ export function PortalLogin({
         </div>
 
         <div className="mt-5 space-y-2 text-center text-xs">
-          <p className="text-gray-400">
-            Not a client? <a href={companyUrl} className="text-gray-500 underline underline-offset-2 transition-colors hover:text-gray-700">Visit {displayDomain}</a>
-          </p>
+          {companyUrl && displayDomain ? (
+            <p className="text-gray-400">
+              Not a client? <a href={companyUrl} className="text-gray-500 underline underline-offset-2 transition-colors hover:text-gray-700">Visit {displayDomain}</a>
+            </p>
+          ) : null}
           <p className="text-gray-400">
             Lost your credentials? Email <span className="font-medium text-gray-500">{supportEmail}</span>
           </p>

package/bundle/scaffold/src/components/portal-shell.tsx

@@ -33,7 +33,7 @@ export type PortalShellProps = {
   portalLabel?: string;
 
   clientName: string;
-  clientLogoSrc: string;
+  clientLogoSrc?: string | null;
   clientLogoAlt: string;
 
   tabs: PortalTab[];
@@ -181,6 +181,7 @@ export function PortalShell({
   const [copyError, setCopyError] = useState(false);
   const [visitorId] = useState(() => getOrCreateVisitorId());
   const [showLocalBanner, setShowLocalBanner] = useState(false);
+  const [clientLogoFailed, setClientLogoFailed] = useState(false);
 
   useEffect(() => {
     const syncFromHash = () => setActiveTab(readHashTab(tabIds));
@@ -207,6 +208,10 @@ export function PortalShell({
     setShowLocalBanner(host === "localhost" || host === "127.0.0.1" || host === "0.0.0.0");
   }, []);
 
+  useEffect(() => {
+    setClientLogoFailed(false);
+  }, [clientLogoSrc]);
+
   useSectionTimeTracking(activeTab, resolvedEventsEndpoint, visitorId);
 
   function switchTab(tab: string) {
@@ -234,7 +239,8 @@ export function PortalShell({
   }
 
   const activeContent = tabs.find((t) => t.id === activeTab)?.content ?? null;
-  const showFooter = hideFooterOnTab ? activeTab !== hideFooterOnTab : true;
+  const showContactFooter = hideFooterOnTab ? activeTab !== hideFooterOnTab : true;
+  const clientInitial = clientName[0]?.toUpperCase() || "?";
 
   return (
     <div className="flex min-h-screen flex-col bg-gray-50">
@@ -262,14 +268,25 @@ export function PortalShell({
                 <div className="flex h-8 w-8 items-center justify-center rounded-full border-2 border-white bg-gray-900">
                   {companyLogo}
                 </div>
-                <img
-                  src={clientLogoSrc}
-                  alt={clientLogoAlt}
-                  width={32}
-                  height={32}
-                  className="-ml-2 h-8 w-8 rounded-full border-2 border-white"
-                  loading="eager"
-                />
+                {clientLogoSrc && !clientLogoFailed ? (
+                  <img
+                    src={clientLogoSrc}
+                    alt={clientLogoAlt}
+                    width={32}
+                    height={32}
+                    className="-ml-2 h-8 w-8 rounded-full border-2 border-white bg-white object-cover"
+                    loading="eager"
+                    onError={() => setClientLogoFailed(true)}
+                  />
+                ) : (
+                  <div
+                    role="img"
+                    aria-label={clientLogoAlt}
+                    className="-ml-2 flex h-8 w-8 items-center justify-center rounded-full border-2 border-white bg-gray-100"
+                  >
+                    <span className="text-[11px] font-semibold text-gray-700">{clientInitial}</span>
+                  </div>
+                )}
               </div>
               <div>
                 <h1 className="text-sm font-bold tracking-tight text-gray-900">
@@ -342,8 +359,8 @@ export function PortalShell({
         {activeContent}
       </main>
 
-      {showFooter ? (
-        <footer className="mt-auto border-t bg-white">
+      <footer className="mt-auto border-t bg-white">
+        {showContactFooter ? (
           <div className="mx-auto flex max-w-4xl items-center gap-4 px-4 py-4 sm:px-6">
             <img
               src={contact.avatarSrc}
@@ -377,20 +394,28 @@ export function PortalShell({
               ) : null}
             </div>
           </div>
-          <div className="flex items-center justify-center gap-2 pb-3">
-            <p className="text-[11px] text-gray-300">Last updated {lastUpdated}</p>
-            <span className="text-gray-200">·</span>
+        ) : null}
+        <div
+          className={cn(
+            "flex flex-wrap items-center justify-center gap-2 px-4 py-3 text-[11px] text-gray-400 sm:px-6",
+            showContactFooter ? "border-t border-gray-100" : "",
+          )}
+        >
+          <p>Last updated {lastUpdated}</p>
+          <span className="text-gray-200">·</span>
+          <p>
+            Created using{" "}
             <a
               href="https://showpane.com"
               target="_blank"
               rel="noopener noreferrer"
-              className="text-[10px] text-gray-300 transition-colors hover:text-gray-400"
+              className="font-medium text-gray-500 transition-colors hover:text-gray-700"
             >
-              Powered by Showpane
+              showpane.com
             </a>
-          </div>
-        </footer>
-      ) : null}
+          </p>
+        </div>
+      </footer>
     </div>
   );
 }

package/bundle/scaffold/src/lib/branding.ts

@@ -36,13 +36,18 @@ export function getDomainFromWebsite(value?: string | null): string | null {
 
 /**
  * Fetch a company logo URL from a domain.
- * Uses Clearbit Logo API (free, no key required).
+ * Uses Logo.dev for hosted brand logos.
  * Falls back to a UI Avatars URL with the company initial.
  */
 export function getLogoUrl(domain: string, fallbackName?: string): string {
   if (domain) {
-    // Clearbit Logo API - free, no authentication needed
-    return `https://logo.clearbit.com/${domain}`;
+    const params = new URLSearchParams({
+      size: "128",
+      format: "webp",
+      fallback: "monogram",
+      retina: "true",
+    });
+    return `https://img.logo.dev/${domain}?${params.toString()}`;
   }
   // Fallback: initial-based avatar via ui-avatars.com
   const initial = (fallbackName || "?")[0].toUpperCase();
@@ -66,6 +71,17 @@ export function getBrandLogoUrl(options: {
   return getLogoUrl(domain ?? "", options.fallbackName);
 }
 
+export function resolvePortalLabel(
+  organizationName: string,
+  portalLabel?: string | null,
+): string {
+  if (portalLabel && portalLabel.trim() && portalLabel !== "Client Portal") {
+    return portalLabel;
+  }
+
+  return `${organizationName} Portal`;
+}
+
 /**
  * Fetch a Gravatar URL for an email address.
  * Falls back to UI Avatars if no Gravatar exists.

package/bundle/toolchain/CLI_VERSION

@@ -1 +1 @@
-0.4.27
+0.4.29

package/bundle/toolchain/bin/create-portal.ts

@@ -13,6 +13,21 @@ function fail(message: string): never {
   process.exit(1);
 }
 
+function shouldRetryWithoutWebsiteUrl(message: string): boolean {
+  const normalized = message.toLowerCase();
+  return (
+    normalized.includes("websiteurl") &&
+    (
+      normalized.includes("unknown arg") ||
+      normalized.includes("unknown argument") ||
+      normalized.includes("unknown field") ||
+      normalized.includes("no column named") ||
+      normalized.includes("has no column") ||
+      normalized.includes("does not exist")
+    )
+  );
+}
+
 async function main() {
   const args = process.argv.slice(2);
 
@@ -74,11 +89,7 @@ async function main() {
       });
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
-      if (
-        websiteUrl &&
-        (message.includes("Unknown arg `websiteUrl`") ||
-          message.includes("Unknown argument `websiteUrl`"))
-      ) {
+      if (websiteUrl && shouldRetryWithoutWebsiteUrl(message)) {
         delete createData.websiteUrl;
         portal = await prisma.clientPortal.create({
           data: createData,

package/bundle/toolchain/bin/export-runtime-state.ts

@@ -45,21 +45,57 @@ async function main() {
       fail("No organization found");
     }
 
-    const portals = await prisma.clientPortal.findMany({
-      where: { organizationId: organization.id },
-      orderBy: { createdAt: "asc" },
-      select: {
-        slug: true,
-        companyName: true,
-        websiteUrl: true,
-        logoUrl: true,
-        username: true,
-        passwordHash: true,
-        credentialVersion: true,
-        isActive: true,
-        lastUpdated: true,
-      },
-    });
+    let portals: Array<{
+      slug: string;
+      companyName: string;
+      websiteUrl?: string | null;
+      logoUrl?: string | null;
+      username: string;
+      passwordHash: string;
+      credentialVersion: string;
+      isActive: boolean;
+      lastUpdated?: string | null;
+    }> = [];
+    try {
+      portals = await prisma.clientPortal.findMany({
+        where: { organizationId: organization.id },
+        orderBy: { createdAt: "asc" },
+        select: {
+          slug: true,
+          companyName: true,
+          websiteUrl: true,
+          logoUrl: true,
+          username: true,
+          passwordHash: true,
+          credentialVersion: true,
+          isActive: true,
+          lastUpdated: true,
+        },
+      });
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (!message.toLowerCase().includes("websiteurl")) {
+        throw error;
+      }
+      const legacyPortals = await prisma.clientPortal.findMany({
+        where: { organizationId: organization.id },
+        orderBy: { createdAt: "asc" },
+        select: {
+          slug: true,
+          companyName: true,
+          logoUrl: true,
+          username: true,
+          passwordHash: true,
+          credentialVersion: true,
+          isActive: true,
+          lastUpdated: true,
+        },
+      });
+      portals = legacyPortals.map((portal) => ({
+        ...portal,
+        websiteUrl: null,
+      }));
+    }
 
     console.log(JSON.stringify({
       ok: true,

package/bundle/toolchain/skills/portal-create/SKILL.md

@@ -168,11 +168,10 @@ The script returns `{"valid":true}` or `{"valid":false,"reason":"...","message":
 
 If invalid, explain the issue and ask for a different slug.
 
-Also determine the client's website domain. This enables auto-branding and is worth a quick best-effort pass:
+Also determine the client's website domain. This enables auto-branding, but keep the step deterministic:
 - if the domain is explicit in the transcript or user prompt, use it
-- otherwise make one quick best-effort lookup for the official site
-- if one clear candidate stands out, suggest it briefly: `I found <domain> — I'll use that for the logo unless you want a different one`
-- if confidence is low, ask directly
+- otherwise ask the user directly for the official site/domain
+- do not guess, browse, or invent a domain as part of this skill flow
 
 Store the confirmed value in `ClientPortal.websiteUrl`.
 Use it to derive `ClientPortal.logoUrl` via `getBrandLogoUrl(...)`.
@@ -299,6 +298,7 @@ import { PortalShell } from "@/components/portal-shell";
 - `contact` — object with `name`, `title`, `avatarSrc`, `email` (from the `get-org.ts` result, not from ad-hoc config or DB probing)
 - `tabs` — array of tab objects with `id`, `label`, `icon`, `content`, and optional `badge`
 - `hideFooterOnTab` — set to `"overview"` (hides the contact footer on the first tab since it typically has contact info inline)
+- Keep the shared `PortalShell` footer attribution intact. New portals should retain the `Created using showpane.com` link rendered by the shell.
 
 **Styling conventions (match the example portal exactly):**
 - Cards: `rounded-2xl border bg-white shadow-sm`
@@ -356,13 +356,14 @@ For onboarding, carry them forward quietly and show them at the access phase.
 After generating the files, read them back and verify:
 
 1. **PortalShell used?** The client component must use `<PortalShell>` as its root element.
-2. **Minimum 2 tabs?** Check the `tabs` array has at least 2 entries.
-3. **Contact info in props?** The `contact` prop must have `name`, `title`, `avatarSrc`, `email`.
-4. **"use client" directive?** Must be the first line of the client component.
-5. **Imports correct?** `cn` from `@/lib/utils`, `PortalShell` from `@/components/portal-shell`.
-6. **No hardcoded localhost URLs?** Links should be relative or use placeholders.
-7. **Responsive patterns?** Check for `sm:` breakpoints on grids and padding.
-8. **Tab content functions?** Each tab should have its own function, not inline JSX.
+2. **Shared attribution preserved?** Do not replace or bypass `PortalShell` in a way that removes the `Created using showpane.com` footer link.
+3. **Minimum 2 tabs?** Check the `tabs` array has at least 2 entries.
+4. **Contact info in props?** The `contact` prop must have `name`, `title`, `avatarSrc`, `email`.
+5. **"use client" directive?** Must be the first line of the client component.
+6. **Imports correct?** `cn` from `@/lib/utils`, `PortalShell` from `@/components/portal-shell`.
+7. **No hardcoded localhost URLs?** Links should be relative or use placeholders.
+8. **Responsive patterns?** Check for `sm:` breakpoints on grids and padding.
+9. **Tab content functions?** Each tab should have its own function, not inline JSX.
 
 If any check fails, fix the issue before proceeding.
 

package/bundle/toolchain/skills/portal-create/SKILL.md.tmpl

@@ -73,11 +73,10 @@ The script returns `{"valid":true}` or `{"valid":false,"reason":"...","message":
 
 If invalid, explain the issue and ask for a different slug.
 
-Also determine the client's website domain. This enables auto-branding and is worth a quick best-effort pass:
+Also determine the client's website domain. This enables auto-branding, but keep the step deterministic:
 - if the domain is explicit in the transcript or user prompt, use it
-- otherwise make one quick best-effort lookup for the official site
-- if one clear candidate stands out, suggest it briefly: `I found <domain> — I'll use that for the logo unless you want a different one`
-- if confidence is low, ask directly
+- otherwise ask the user directly for the official site/domain
+- do not guess, browse, or invent a domain as part of this skill flow
 
 Store the confirmed value in `ClientPortal.websiteUrl`.
 Use it to derive `ClientPortal.logoUrl` via `getBrandLogoUrl(...)`.
@@ -204,6 +203,7 @@ import { PortalShell } from "@/components/portal-shell";
 - `contact` — object with `name`, `title`, `avatarSrc`, `email` (from the `get-org.ts` result, not from ad-hoc config or DB probing)
 - `tabs` — array of tab objects with `id`, `label`, `icon`, `content`, and optional `badge`
 - `hideFooterOnTab` — set to `"overview"` (hides the contact footer on the first tab since it typically has contact info inline)
+- Keep the shared `PortalShell` footer attribution intact. New portals should retain the `Created using showpane.com` link rendered by the shell.
 
 **Styling conventions (match the example portal exactly):**
 - Cards: `rounded-2xl border bg-white shadow-sm`
@@ -261,13 +261,14 @@ For onboarding, carry them forward quietly and show them at the access phase.
 After generating the files, read them back and verify:
 
 1. **PortalShell used?** The client component must use `<PortalShell>` as its root element.
-2. **Minimum 2 tabs?** Check the `tabs` array has at least 2 entries.
-3. **Contact info in props?** The `contact` prop must have `name`, `title`, `avatarSrc`, `email`.
-4. **"use client" directive?** Must be the first line of the client component.
-5. **Imports correct?** `cn` from `@/lib/utils`, `PortalShell` from `@/components/portal-shell`.
-6. **No hardcoded localhost URLs?** Links should be relative or use placeholders.
-7. **Responsive patterns?** Check for `sm:` breakpoints on grids and padding.
-8. **Tab content functions?** Each tab should have its own function, not inline JSX.
+2. **Shared attribution preserved?** Do not replace or bypass `PortalShell` in a way that removes the `Created using showpane.com` footer link.
+3. **Minimum 2 tabs?** Check the `tabs` array has at least 2 entries.
+4. **Contact info in props?** The `contact` prop must have `name`, `title`, `avatarSrc`, `email`.
+5. **"use client" directive?** Must be the first line of the client component.
+6. **Imports correct?** `cn` from `@/lib/utils`, `PortalShell` from `@/components/portal-shell`.
+7. **No hardcoded localhost URLs?** Links should be relative or use placeholders.
+8. **Responsive patterns?** Check for `sm:` breakpoints on grids and padding.
+9. **Tab content functions?** Each tab should have its own function, not inline JSX.
 
 If any check fails, fix the issue before proceeding.
 

package/bundle/toolchain/skills/portal-setup/SKILL.md

@@ -197,9 +197,9 @@ Do not restart the whole org questionnaire from the top.
 3. **Contact email** (required) — e.g., "jane@acme.com". Displayed in the portal footer as a mailto link.
 4. **Contact title** (optional, default: "Account Manager") — e.g., "Director", "Partner", "Client Success Lead". Shown next to the contact name in the portal footer.
 5. **Contact phone** (optional) — e.g., "+44 7700 900000". If provided, displayed alongside email in the portal footer.
-6. **Company website URL** — e.g., "acme.com". Ask for it plainly instead of framing it as optional. Used to auto-fetch the company logo via Clearbit.
-   - If provided, fetch logo URL: `https://logo.clearbit.com/{domain}` and store in `Organization.logoUrl`
-   - Also store the URL in `Organization.websiteUrl`
+6. **Company website URL** — e.g., "acme.com". Ask for it plainly instead of framing it as optional. Store the normalized value in `Organization.websiteUrl` so runtime branding can derive the company logo.
+   - Do not generate and persist a provider logo URL in `Organization.logoUrl` from this field
+   - Only set `Organization.logoUrl` if the user explicitly gives you a direct logo asset URL they want pinned
 7. **Contact avatar**: Auto-populated from the contact email via Gravatar. No need to ask — just use `getAvatarUrl(email, contactName)` from `app/src/lib/branding.ts` and store in `Organization.contactAvatar`
 
 Generate an org slug from the organization name: lowercase, replace spaces with hyphens, strip non-alphanumeric characters except hyphens, remove consecutive hyphens. For example, "Acme Consulting Ltd." becomes `acme-consulting-ltd`. Confirm the generated slug with the user and allow them to override it.

package/bundle/toolchain/skills/portal-setup/SKILL.md.tmpl

@@ -114,9 +114,9 @@ Do not restart the whole org questionnaire from the top.
 3. **Contact email** (required) — e.g., "jane@acme.com". Displayed in the portal footer as a mailto link.
 4. **Contact title** (optional, default: "Account Manager") — e.g., "Director", "Partner", "Client Success Lead". Shown next to the contact name in the portal footer.
 5. **Contact phone** (optional) — e.g., "+44 7700 900000". If provided, displayed alongside email in the portal footer.
-6. **Company website URL** — e.g., "acme.com". Ask for it plainly instead of framing it as optional. Used to auto-fetch the company logo via Clearbit.
-   - If provided, fetch logo URL: `https://logo.clearbit.com/{domain}` and store in `Organization.logoUrl`
-   - Also store the URL in `Organization.websiteUrl`
+6. **Company website URL** — e.g., "acme.com". Ask for it plainly instead of framing it as optional. Store the normalized value in `Organization.websiteUrl` so runtime branding can derive the company logo.
+   - Do not generate and persist a provider logo URL in `Organization.logoUrl` from this field
+   - Only set `Organization.logoUrl` if the user explicitly gives you a direct logo asset URL they want pinned
 7. **Contact avatar**: Auto-populated from the contact email via Gravatar. No need to ask — just use `getAvatarUrl(email, contactName)` from `app/src/lib/branding.ts` and store in `Organization.contactAvatar`
 
 Generate an org slug from the organization name: lowercase, replace spaces with hyphens, strip non-alphanumeric characters except hyphens, remove consecutive hyphens. For example, "Acme Consulting Ltd." becomes `acme-consulting-ltd`. Confirm the generated slug with the user and allow them to override it.

package/bundle/toolchain/skills/portal-update/SKILL.md

@@ -225,6 +225,7 @@ Ask the user what they want to change. Common requests and how to handle them:
 **Updating contact info or metadata:**
 1. Update the relevant PortalShell props
 2. Update any inline mentions of the contact in tab content
+3. Keep the shared `PortalShell` footer attribution intact. Do not remove or replace the `Created using showpane.com` link.
 
 ### Step 7: Make the edits
 
@@ -247,6 +248,7 @@ After making edits, show the user a summary of what changed:
 - Which tabs were added, removed, or modified
 - What content was updated
 - Any prop changes on PortalShell
+- Confirm the shared `Created using showpane.com` footer attribution is still present
 
 If using git, show the actual diff:
 

package/bundle/toolchain/skills/portal-update/SKILL.md.tmpl

@@ -130,6 +130,7 @@ Ask the user what they want to change. Common requests and how to handle them:
 **Updating contact info or metadata:**
 1. Update the relevant PortalShell props
 2. Update any inline mentions of the contact in tab content
+3. Keep the shared `PortalShell` footer attribution intact. Do not remove or replace the `Created using showpane.com` link.
 
 ### Step 7: Make the edits
 
@@ -152,6 +153,7 @@ After making edits, show the user a summary of what changed:
 - Which tabs were added, removed, or modified
 - What content was updated
 - Any prop changes on PortalShell
+- Confirm the shared `Created using showpane.com` footer attribution is still present
 
 If using git, show the actual diff:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "showpane",
-  "version": "0.4.27",
+  "version": "0.4.29",
   "description": "CLI for Showpane — AI-generated client portals",
   "type": "module",
   "bin": {