Nutyum

Imported from root-Akira/Nutyum (AGENTS.md). Install upstream with npx skills add root-Akira/Nutyum. Copyright stays with the author.

This is NOT the Next.js you know

This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in node_modules/next/dist/docs/ before writing any code. Heed deprecation notices.

IMPORTANT — No action without permission

Do NOT commit, push, or take any action (including file edits, installations, etc.) without the user explicitly asking you to. Wait for instructions.

Project: Nutyum — Premium Makhana Snacks

Tech Stack

• Frontend: Next.js 16.2.9 / React 19.2.4 / TypeScript 5 / Tailwind v4
• Animations: Framer Motion 12 + GSAP 3.15
• State: Zustand 5
• Forms: react-hook-form 7 + Zod 4
• Database: Supabase (PostgreSQL) + Drizzle ORM (Phase 2)
• Auth: NextAuth.js v5 (Phase 3)
• Payments: Razorpay (Phase 3)
• Deployment: Vercel

Session: 2026-07-27

• Logo & favicon update — navbar, email, checkout, admin panel all updated to use /main%20logo.png (local public/ folder) instead of deleted Supabase storage URL. Favicon resized to 192x192 square with white background. Admin login sidebar logo size increased.
• Vercel deploy fix — vercel.json cron */30 * * * * blocked all builds on Hobby plan (limited to 1 cron/day). Changed to 0 0 * * *. GitHub Vercel integration was also broken (missing webhook) — reinstalled Vercel GitHub App. Token-based deploy now working.
• Admin panel TypeScript fix — toast('...', 'warning') changed to 'info' (not in union type).
• Abandoned Razorpay order handling — added cancellation_reason column to orders table, migration backfills from notes + order_status_logs. Customer cancellation now writes to cancellation_reason instead of stuffing into notes. Cron job (/api/cron/abandoned-orders) auto-cancels Razorpay orders stuck in placed for >2h. vercel.json configures */30 * * * * cron schedule. Admin panel shows reason on order list + detail. Frontend order detail shows reason in cancelled banner. Requires CRON_SECRET env var on Vercel main site.

Session: 2026-07-01

Completed

• Robust error handling in API routes — 41 routes, 0 errors
• Navbar 70px, glass effect, hero carousel smooth animation
• Default address enforcement — unsetAllDefaults() before setting new default
• Account section — Profile, Orders, Wishlist, Addresses, Change Password all verified
• Hydration fix — passthrough provider replaced next-themes
• Coming Soon products — isComingSoon + launchDate, badge, purchase disabled
• BestSellers tabs — toggle Best Sellers / Coming Soon
• Our Origins — lucide SVG icons (Leaf, Globe, Mountain)

Repositories

• Main website → https://github.com/root-Akira/Nutyum (this repo)
• Admin panel → https://github.com/root-Akira/Nutyum-admin (separate repo)

Session: 2026-07-02

Completed

• Admin panel scaffolded — Vite + React 19 + TS 6 + Tailwind v4
• Auth, Dashboard, Products (list/form), Orders (list/detail), Customers, Reviews, Coupons, CMS, Settings (shipping/payments/site)

Session: 2026-07-08

Completed

• Loading states & flash fixes — shop page no longer shows STATIC_PRODUCTS fallback then replaces with real data (shows spinner while loading); product detail page same pattern; API caching headers (s-maxage=30, stale-while-revalidate=60) on /api/products
• Block/unblock customers — admin detail page: Block/Unblock button with ConfirmModal; uses supabaseAdmin.auth.admin.updateUserById() with ban_duration: '876000h' (block) or 'none' (unblock); syncs is_blocked to public.users; invalidates customer list query on success
• Blocked badge on customer list — added blocked status to StatusBadge (red "Blocked" label); list uses 'blocked' instead of 'cancelled'
• Blocked user sign-in message — CredentialsSignin subclass BlockedError with code "blocked"; auth.ts checks users.is_blocked before sign-in; SignInForm.tsx shows "Your account has been blocked. Please contact support." on result.code === "blocked"
• Session invalidation for blocked users — jwt callback queries users.is_blocked on every request; returns empty token if blocked, effectively logging them out
• Loading states — loading.tsx at app/, app/shop/, app/shop/[slug]/, app/account/; spinner on /account/profile page while profile data loads; form skeletons on admin product-form.tsx and coupon-form.tsx edit modes; loading state on /account/account-settings profile section
• Account redirect fix — moved /account → /account/profile redirect from page.tsx to next.config.ts async redirects(); deleted app/account/page.tsx to eliminate AccountPage performance.measure() error
• Banners removed — deleted banners.tsx, removed from App.tsx lazy import + route, removed from sidebar.tsx nav link + ImageIcon import, removed from dashboard-layout.tsx path map
• CMS Pages connected — GET /api/cms/content?slug=:slug API route; /pages/[slug] dynamic route renders HTML content with prose styles; lib/cms.ts shared fetch helper; admin CMS Pages has "Seed Default Pages" button (inserts about/faq/contact with default HTML via upsert ignoreDuplicates)
• Out of stock button fix — added variantsLoading state; outOfStock now waits for variants to finish loading before deciding, preventing "Add to Cart" flash when all variants are OOS
• You May Also Like alignment — horizontal scroll cards now have fixed w-[260px] wrapper for consistent card sizing
• Wishlist heart on BestSellers — added WishlistButton to BestSellers product cards
• ProductCard responsive width — w-full max-w-[260px] instead of fixed w-[260px] to eliminate gap in grid layouts
• Sidebar Sign Out — moved from Account Settings page to sidebar below Account Settings
• Hydration fix — replaced next-themes with passthrough provider to eliminate DOM attribute mismatch
• Account section audit — all pages and API routes verified (Profile, Orders, Wishlist, Account Settings, addresses, change password)
• Coming Soon products — isComingSoon + launchDate on Product type, DB migration (0004), seed update, badge logic, purchase disabled
• BestSellers tabs — toggle between Best Sellers / Coming Soon with original gold badge design; "We are planning to bring something new!" when empty
• Our Origins icons — emojis replaced with lucide SVG icons (Leaf, Globe, Mountain) + glass effect
• No-action-without-permission rule — added to AGENTS.md

Main Website

• Set is_best_seller=true on DB products — 3 products already flagged ✅
• Razorpay payments integration (High)
• Google OAuth — configure AUTH_GOOGLE_ID + AUTH_GOOGLE_SECRET (Medium)
• Error boundaries — app/error.tsx, app/global-error.tsx, app/not-found.tsx created
• Align DB schemas — added is_out_of_stock, image_alts, compare_price, sku, stock + TypeScript types + mapDbToProduct mapping
• Bulk Order page — replace static wholesale page with real inquiry form + API (pending client feedback)

Admin Panel — Setup

• Run supabase-migration.sql in Supabase SQL Editor — all 10 tables created, default data inserted, users synced ✅
• Tighten RLS policies — admin role only (ss5494602@gmail.com) ✅
• Zod validation on admin forms — product, coupon, site settings forms (High/Medium)
• Configure SMTP for production email sending (password reset, order confirmations) (Low)

Admin Panel — Features Not Yet Built

• Variants per product (pack sizes / flavors)
• Bulk actions (prices, stock, delete)
• Stock history / low-stock threshold config
• Invoice generation / packing slips
• Block/unblock customers
• Auto-discounts
• Promotional pop-ups
• Courier partner integration
• Refund management
• GST / tax settings
• Analytics & reports (CSV export)
• Marketing tools (abandoned cart, campaigns, referral)
• Email/SMS notification templates
• Activity log / role-based access / auto-logout

Deployment

• Main site live at https://nutyum.in ✅
• Admin panel live at https://admin.nutyum.in ✅
• Google OAuth — configure AUTH_GOOGLE_ID + AUTH_GOOGLE_SECRET (needs Cloud Console setup)
• SMTP — configure for production email

Blocked (need Supabase Dashboard SQL Editor)

• Direct Postgres unreachable (IPv6 only, no route)
• public.users table + auth trigger created ✅
• admin_reply column on reviews — Storage JSON fallback removed, using DB directly ✅
• DB schema drift on products table
• ALTER TABLE coupons ADD COLUMN IF NOT EXISTS show_in_store BOOLEAN NOT NULL DEFAULT false; — done ✅

Nutyum Admin Panel — /home/akira/Downloads/nutyum-admin/

Tech Stack

• Vite 8 + React 19 + TypeScript 6 + Tailwind v4
• Supabase JS client (same project as main Nutyum)
• React Router v7 — SPA routing, lazy-loaded pages
• TanStack Query v5 — server state, cache, refetch intervals
• Lucide React — icons (matches main site)

Theme

Nutyum palette: #173D22 (green primary), #E0961A (gold accent), #FAF7EE (cream bg), #FFFEFB (card bg)

Features Built

Running

cd /home/akira/Downloads/nutyum-admin
npm run dev      # Vite dev server (default port 5173)
npm run build    # tsc + vite build

Session: 2026-07-21

• COD payment implemented — checkout page shows Pay Online / Cash on Delivery radio buttons (fetches cod_enabled/cod_charge from /api/site-settings). COD charge replaces shipping cost when > 0 (shows "₹X (COD)" instead of "FREE"). Order API handles COD flow: skips Razorpay, confirms immediately, sends confirmation email, clears cart.
• Footer — removed Shop column. Connect column shows store email/phone/address/GST fetched from site_settings. Removed Blog link. Removed Journal from navbar.
• Admin site settings — removed Currency and Low Stock Threshold fields (user wanted only COD options). Low Stock Threshold restored on request. Currency hardcoded as INR.

Session: 2026-07-17

• Production login fixed — NEXT_PUBLIC_SUPABASE_URL at module scope was undefined in auth server chunk (webpack DefinePlugin didn't inline it). Fixed by using SUPABASE_URL (non-public, runtime process.env) as primary fallback across all server files.
• All DB operations fixed — Same NEXT_PUBLIC_ replacement issue affected supabase-fetch.ts, cms.ts, products.ts, and all API routes. Fixed all 7+ files.
• Admin panel env vars added — VITE_SUPABASE_URL, VITE_SUPABASE_ANON_KEY, VITE_SUPABASE_SERVICE_ROLE configured on Vercel.
• Main website — Login, cart, wishlist, addresses, profile, products, reviews, CMS pages all verified connected to database and working.
• Admin panel — Login page rendering at admin.nutyum.in.
• Google OAuth — Configured AUTH_GOOGLE_ID + AUTH_GOOGLE_SECRET on Vercel. Auto-links new/existing Supabase Auth users by email. Working at nutyum.in/signin.
• SMTP/Emails — Resend configured via Supabase SMTP. Custom HTML templates for Confirm Signup + Reset Password. Transactional email helper (lib/email.ts) built with order confirmation/shipping/cancellation templates.
• Client-side Supabase fix — Moved forgot password to server-side API route to avoid NEXT_PUBLIC_ replacement issue. Reset password form uses hardcoded Supabase URL fallback.
• Pending: Razorpay payments + Checkout page (needed for order emails to work).

DB Tables Needed in Supabase

• orders — order data with status/payment tracking
• order_items — line items per order
• order_status_logs — status change history
• products — product details (already exists)
• reviews — customer reviews (already exists)
• coupons — discount coupons
• banners — homepage banners
• cms_pages — static page content
• shipping_zones — shipping rates by region
• site_settings — store-wide config (single row)
• users — customer profiles (already exists in auth schema)