sproutkit-code 1.2.1 → 1.3.0

package/dist/index.js

@@ -33287,13 +33287,23 @@ export default async function handler(req, res) {
     var s = useState(null);
     var v = s[0], set = s[1];
     var loading = useState(true);
+    // Standalone booking sites ship /api/bookings but NO /api/content. Treat a
+    // missing content API as "this is a bookings-only site" instead of hanging
+    // the whole panel on a permanent Loading\u2026 state.
+    var available = useState(true);
     useEffect(function () {
-      fetch("/api/content").then(function (r) { return r.json(); }).then(function (d) {
+      fetch("/api/content").then(function (r) {
+        if (!r.ok) throw new Error("no content api");
+        return r.json();
+      }).then(function (d) {
         set(d);
         loading[1](false);
+      }).catch(function () {
+        available[1](false);
+        loading[1](false);
       });
     }, []);
-    return { content: v, setContent: set, loading: loading[0] };
+    return { content: v, setContent: set, loading: loading[0], available: available[0] };
   }
 
   function Login(props) {
@@ -33823,7 +33833,7 @@ export default async function handler(req, res) {
     );
   }
 
-  function BookingsPanel() {
+  function BookingsPanel(props) {
     var sub = useState("incoming");
     var b = useBookings();
     var c = useBookingConfig();
@@ -33832,7 +33842,7 @@ export default async function handler(req, res) {
         h("div", null,
           h("div", { style: { fontSize: 15, fontWeight: 600 } }, "Bookings"),
           h("div", { style: { fontSize: 12, color: "var(--muted)" } },
-            h("a", { href: "/book", target: "_blank" }, "Public booking page \u2192")
+            h("a", { href: props && props.bookingPath ? props.bookingPath : "/book", target: "_blank" }, "Public booking page \u2192")
           )
         ),
         h("div", { style: { display: "flex", gap: 4 } },
@@ -33861,9 +33871,14 @@ export default async function handler(req, res) {
     if (!authed[0]) {
       return h(Login, { onLogin: function () { authed[1](true); } });
     }
-    if (ctl.loading || !ctl.content) {
+    if (ctl.loading) {
       return h("div", { className: "app" }, "Loading\u2026");
     }
+    // Bookings-only site: no Site content tab to switch to, and the public
+    // booking page is the site root rather than /book.
+    if (!ctl.available || !ctl.content) {
+      return h("div", { className: "app" }, h(BookingsPanel, { bookingPath: "/" }));
+    }
 
     // Top nav lets the owner flip between Site content and Bookings.
     return h("div", { className: "app" },
@@ -80695,6 +80710,7 @@ export default defineConfig({ plugins: [react()] });`;
     }
     async function deployStandaloneBooking2(args) {
       const { lead, vercelToken, blobToken, resendKey, ownerEmail, bookingConfig, onProgress } = args;
+      const adminPassword = args.reuseAdminPassword ?? (0, cms_runtime_1.generateFriendlyPassword)();
       const slug = lead.name.toLowerCase().replace(/[^a-z0-9]/g, "-").replace(/-+/g, "-").slice(0, 26);
       const projectName = `sprout-book-${lead.id}-${slug}`;
       onProgress("Seeding booking config\u2026");
@@ -80712,18 +80728,39 @@ export default defineConfig({ plugins: [react()] });`;
         throw new Error(`Failed to seed booking config: ${e.message}`);
       }
       onProgress("Setting booking env vars\u2026");
+      const adminHash = await (0, cms_runtime_1.hashPassword)(adminPassword);
       await setProjectEnv(projectName, vercelToken, {
         RESEND_API_KEY: resendKey,
         OWNER_EMAIL: ownerEmail,
         BUSINESS_NAME: lead.name,
         BLOB_READ_WRITE_TOKEN: blobToken,
-        SITE_ID: standaloneSiteUid
+        SITE_ID: standaloneSiteUid,
+        // Admin panel auth.
+        ADMIN_PASSWORD_HASH: adminHash,
+        SESSION_SECRET: (0, cms_runtime_1.generateSessionSecret)()
       });
       const files = [
         { file: "index.html", data: booking_runtime_1.BOOK_INDEX_HTML, encoding: "utf-8" },
         { file: "app.js", data: booking_runtime_1.BOOK_APP_JS, encoding: "utf-8" },
         { file: "api/bookings.js", data: booking_runtime_1.API_BOOKINGS_JS, encoding: "utf-8" },
         { file: "api/booking-config.js", data: booking_runtime_1.API_BOOKING_CONFIG_JS, encoding: "utf-8" },
+        // The client's own dashboard: view bookings, edit services/hours. Same
+        // admin the CMS sites use — it already has a Bookings tab.
+        { file: "public/admin/index.html", data: cms_runtime_1.ADMIN_INDEX_HTML, encoding: "utf-8" },
+        { file: "public/admin/app.js", data: cms_runtime_1.ADMIN_APP_JS, encoding: "utf-8" },
+        { file: "api/admin/login.js", data: cms_runtime_1.API_ADMIN_LOGIN_JS, encoding: "utf-8" },
+        { file: "api/admin/whoami.js", data: cms_runtime_1.API_ADMIN_WHOAMI_JS, encoding: "utf-8" },
+        // Serve /admin without a trailing-slash redirect dance.
+        {
+          file: "vercel.json",
+          data: JSON.stringify({
+            rewrites: [
+              { source: "/admin", destination: "/admin/index.html" },
+              { source: "/admin/", destination: "/admin/index.html" }
+            ]
+          }),
+          encoding: "utf-8"
+        },
         {
           file: "package.json",
           data: JSON.stringify({
@@ -80731,7 +80768,8 @@ export default defineConfig({ plugins: [react()] });`;
             private: true,
             version: "0.1.0",
             type: "module",
-            dependencies: { "@vercel/blob": "^0.23.4" }
+            // bcryptjs is required by api/admin/login.js.
+            dependencies: { "@vercel/blob": "^0.23.4", bcryptjs: "^2.4.3" }
           }),
           encoding: "utf-8"
         }
@@ -80765,7 +80803,11 @@ export default defineConfig({ plugins: [react()] });`;
         fallbackUrl: `https://${res.data.url}`
       });
       onProgress(`Live at ${publicUrl}`);
-      return { url: publicUrl, bookingUrl: publicUrl };
+      return {
+        url: publicUrl,
+        bookingUrl: publicUrl,
+        admin: { url: `${publicUrl}/admin`, password: adminPassword }
+      };
     }
     function hasBookLink(code) {
       return /(href\s*=\s*["'`{]*\s*["'`]?\/book\/?["'`}]?)|(location(?:\.href)?\s*=\s*["'`]\/book["'`])/i.test(code);
@@ -93694,12 +93736,19 @@ Interested?`;
         }
         case "prepare_outreach": {
           const explicit = input.ids;
-          const rows = explicit && explicit.length > 0 ? db2.all(`SELECT id, name, phone, email, address, city, site_url, lead_kind, booking_platform, booking_url FROM leads WHERE id IN (${explicit.map(() => "?").join(",")})`, explicit) : db2.all("SELECT id, name, phone, email, address, city, site_url, lead_kind, booking_platform, booking_url FROM leads WHERE status = 'site_built' AND site_url IS NOT NULL AND site_url != '' ORDER BY score DESC NULLS LAST, id DESC", []);
-          const eligible = rows.filter((r) => r.site_url);
+          const rows = explicit && explicit.length > 0 ? db2.all(`SELECT id, name, phone, email, address, city, site_url, lead_kind, booking_platform, booking_url FROM leads WHERE id IN (${explicit.map(() => "?").join(",")})`, explicit) : db2.all(
+            // Eligible = we have something to show them: either a demo site
+            // we built (site_url) OR a booking page we built (booking_url).
+            // Booking leads never get a site_url, so requiring it silently
+            // excluded every one-shot booking customer.
+            "SELECT id, name, phone, email, address, city, site_url, lead_kind, booking_platform, booking_url FROM leads WHERE status IN ('site_built','discovered') AND ((site_url IS NOT NULL AND site_url != '') OR (booking_url IS NOT NULL AND booking_url != '')) ORDER BY score DESC NULLS LAST, id DESC",
+            []
+          );
+          const eligible = rows.filter((r) => r.site_url || r.booking_url);
           if (eligible.length === 0) {
             return {
               ok: false,
-              error: "No leads with a built site to contact. Build sites first, or check the leads already moved past 'ready'."
+              error: "Nothing built to contact anyone about yet. Build a demo site (sproutkit build <id>) or a booking page (sproutkit book <id>) first, or check whether these leads have already moved past 'ready'."
             };
           }
           const channelRow = db2.get("SELECT value FROM settings WHERE key = ?", ["outreach_channel"]);
@@ -93910,7 +93959,10 @@ Interested?`;
             archetypeOverride: input.archetype,
             ownerEmail: input.ownerEmail
           });
-          db2.run("UPDATE leads SET booking_url = ? WHERE id = ?", [result.bookingUrl, leadId]);
+          db2.run("UPDATE leads SET booking_url = ?, status = 'site_built' WHERE id = ?", [
+            result.bookingUrl,
+            leadId
+          ]);
           return {
             ok: true,
             id: leadId,
@@ -93918,7 +93970,11 @@ Interested?`;
             website: biz.website,
             currentBooking: check2.verdict === "messaging_only" ? check2.detail : check2.verdict,
             standalone: true,
-            ...result
+            ...result,
+            // Surfaced flat as well as nested so these always reach the operator —
+            // they are the only copy of the client's password.
+            adminUrl: result.admin.url,
+            adminPassword: result.admin.password
           };
         }
         case "add_booking_site": {
@@ -93934,7 +93990,14 @@ Interested?`;
               archetypeOverride: input.archetype,
               ownerEmail: input.ownerEmail
             });
-            return { ok: true, id, standalone: true, ...result2 };
+            return {
+              ok: true,
+              id,
+              standalone: true,
+              ...result2,
+              adminUrl: result2.admin.url,
+              adminPassword: result2.admin.password
+            };
           }
           if (!lead.site_url) {
             return {
@@ -94964,7 +95027,7 @@ var require_package2 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "sproutkit-code",
-      version: "1.2.1",
+      version: "1.3.0",
       description: "Sproutkit in your terminal \u2014 find leads, build sites, run outreach, all via chat.",
       bin: {
         sproutkit: "./dist/index.js"
@@ -95885,15 +95948,21 @@ function makeInvokeIpc(emit) {
         resendKey: resendKey || "",
         ownerEmail: p.ownerEmail ?? "",
         bookingConfig: config,
+        reuseAdminPassword: lead.admin_password ?? null,
         onProgress: (msg) => emit("bookings:progress", { leadId: p.leadId, msg })
       });
       db2.run(
-        "UPDATE leads SET booking_url = ?, owner_email = ?, booking_archetype = ?, booking_config = ? WHERE id = ?",
+        `UPDATE leads SET booking_url = ?, owner_email = ?, booking_archetype = ?, booking_config = ?,
+           admin_url = ?, admin_password = ?,
+           status = CASE WHEN status = 'discovered' THEN 'site_built' ELSE status END
+         WHERE id = ?`,
         [
           result.bookingUrl,
           p.ownerEmail ?? "",
           config.archetype,
           JSON.stringify(config),
+          result.admin.url,
+          result.admin.password,
           p.leadId
         ]
       );
@@ -96155,7 +96224,14 @@ async function cmdPipeline(argv) {
         setRow("building", "preparing outreach\u2026");
         await runTool("prepare_outreach", { ids: [t.id] }, makeCtx({ json: true }));
         setRow("built", booked.bookingUrl ?? "booking site live");
-        results.push({ id: t.id, name: t.name, ok: true, url: booked.bookingUrl });
+        results.push({
+          id: t.id,
+          name: t.name,
+          ok: true,
+          url: booked.bookingUrl,
+          adminUrl: booked.adminUrl,
+          adminPassword: booked.adminPassword
+        });
       } catch (e) {
         setRow("failed", e.message.slice(0, 60));
         results.push({ id: t.id, name: t.name, ok: false, error: e.message });
@@ -96222,6 +96298,13 @@ async function cmdPipeline(argv) {
     c.green(`  Pipeline ${cancelled ? "stopped" : "done"} \u2014 ${ok} client${ok === 1 ? "" : "s"} built + outreach prepared`) + (failed ? c.red(`, ${failed} failed`) : "") + (cancelled ? c.amber(`, ${cancelled} not started`) : "") + c.dim(` (concurrency ${concurrency}).`)
   );
   say(c.dim("  Open the message links above, or check emailed leads in your Contacted column."));
+  const withAdmin = results.filter((r) => r.ok && r.adminUrl && r.adminPassword);
+  if (withAdmin.length) {
+    say();
+    say(c.bold("  Client admin panels"));
+    for (const r of withAdmin) say(`  ${r.name} \u2014 ${r.adminUrl}  ${c.bold(String(r.adminPassword))}`);
+    say(c.dim("  Also stored per lead: sproutkit list --json"));
+  }
   say();
 }
 async function cmdRegenerate(argv) {
@@ -96287,6 +96370,14 @@ async function cmdCms(argv) {
     process.exitCode = 1;
   }
 }
+function sayAdminHandover(adminUrl, adminPassword) {
+  if (!adminUrl || !adminPassword) return;
+  say("");
+  say(c.bold("  Client handover"));
+  say(`  Admin panel: ${adminUrl}`);
+  say(`  Password:    ${adminPassword}`);
+  say(c.dim("  Send these to the client \u2014 they manage bookings and content there."));
+}
 async function cmdBook(argv) {
   const { flags, rest } = parseArgs(argv);
   const json = !!flags.json;
@@ -96316,7 +96407,10 @@ async function cmdBook(argv) {
       if (status2) status2.done(true, `${r.business} \u2014 ${r.bookingUrl}`);
       autoSync();
       if (json) emitJson(r);
-      else if (r.currentBooking) say(c.dim(`  They currently take bookings via ${r.currentBooking}.`));
+      else {
+        if (r.currentBooking) say(c.dim(`  They currently take bookings via ${r.currentBooking}.`));
+        sayAdminHandover(r.adminUrl, r.adminPassword);
+      }
     } catch (e) {
       if (status2) status2.done(false, "Failed");
       json ? emitJson({ ok: false, error: e.message }) : say(c.red("  " + e.message));
@@ -96356,6 +96450,7 @@ async function cmdBook(argv) {
     if (status) status.done(true, result.bookingUrl ? `Booking live at ${result.bookingUrl}` : `Booking added to lead #${id}`);
     autoSync();
     if (json) emitJson(result);
+    else sayAdminHandover(result.adminUrl, result.adminPassword);
   } catch (e) {
     if (status) status.done(false, "Booking failed");
     json ? emitJson({ ok: false, error: e.message }) : say(c.red("  " + e.message));

package/dist/skill/SKILL.md

@@ -65,6 +65,14 @@ you can parse results reliably, then summarise them for the user in prose.
     `--archetype slots|reservation|enquiry`, `--email owner@x.com`.
   - Use `book --standalone` when the user says the client "already has a
     website" or "just needs a booking page".
+  - Booking sites include a client `/admin` panel where the owner sees incoming
+    bookings and edits their services and hours. The JSON result carries
+    `adminUrl` and `adminPassword` — ALWAYS relay both to the user, they are the
+    client handover and the password is shown only at build time. It is stored
+    on the lead afterwards (`sproutkit list --json`) if they lose it.
+  - You can also name a business that isn't a lead yet:
+    `sproutkit book "Kings Barbers, Leeds" --json` looks them up, reads their
+    site, and builds a booking page in one shot.
 
 - **Run the full pipeline for many clients** — `sproutkit pipeline x3 --json` (optional `--book`, `--limit 10`, `--ids 3,5`)
   - Builds → (optionally adds booking) → prepares outreach for several clients

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sproutkit-code",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "Sproutkit in your terminal — find leads, build sites, run outreach, all via chat.",
   "bin": {
     "sproutkit": "./dist/index.js"