Add user profile enhancements, messaging, reporting, and certificate system to portal

[Copilot]

Portal enhancement to support comprehensive user profiles, case manager communication, anonymous reporting, and course certificates. Adds free Financial Management course with 6-week curriculum.

User Profile Extensions

• Demographics: age, gender, ethnicity, location
• Contact: phone, address, emergency contact
• Case manager assignment reference
• Customization preferences (font size, accent color, notifications)

Updated User type in lib/auth.tsx with optional nested objects. Profile page now renders extended form fields.

Messaging System

New /portal/messages page for case manager communication:

• Inbox/compose UI with read/unread tracking
• Message threading with reply support
• Database: messages table with RLS policies restricting to sender/recipient

Helper functions in lib/supabase.ts:

getMessages(userId: string): Promise<Message[]>
sendMessage(senderId, recipientId, subject, message): Promise<Message | null>
markMessageRead(messageId: string): Promise<boolean>

Anonymous Reporting & Grievances

New /portal/report page with three submission types (report, grievance, feedback):

• Anonymous submission flag (nullable user_id)
• Priority levels, categories, status tracking
• Database: reports table with RLS allowing null user_id for anonymity

Customization Settings

New /portal/settings page:

• Font size toggle (small/medium/large)
• Accent color picker (6 theme options)
• Notification preferences
• Stored in preferences JSONB field

Certificates

Certificate component with professional design (A4 ratio, decorative borders, verification seal):

<Certificate
  userName="John Doe"
  courseName="Financial Management Fundamentals"
  completionDate="2026-01-31"
  certificateNumber="TOOLS-2026-001234"
  onDownload={() => handleDownload()}
/>

Gallery view at /portal/certificates with download placeholders. Database: certificates table with unique verification numbers.

Financial Management Course

SQL insert for 6-week free course in Personal Growth program:

• Lessons: Financial Wellness, Budgeting, Credit Building, Emergency Funds, Debt Management, Goal Setting
• Each lesson includes duration, content, and resources (templates, calculators, guides)
• Marked as FREE with pricing metadata in outline JSONB

Database Migrations

Two new SQL files:

• api/schema-enhancements.sql: messages, reports, certificates tables + profile extensions
• api/schema-financial-course.sql: course and lesson inserts

All tables use RLS policies. Run in Supabase SQL editor to apply.

Dashboard Integration

Updated /portal/dashboard with navigation cards for: Messages, Settings, Report & Grievance, Certificates.

Original prompt

Start fine tuning each portal. For each user profile we need to gather demographics and contact information.allow personal customization. Instant messaging between them and thier assigned case manager. Allow anonymous reporting and grievance filing. Add financial managemnt course (free) and design the course certificates for all

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

Adds several new portal capabilities (profile extensions, messaging UI, reporting UI, certificates UI) plus Supabase helper functions and SQL schema/data scripts to support these features in the broader T.O.O.L.S Inc Next.js portal.

Changes:

• Extends the user profile model and profile/settings pages with demographics, contact info, and preferences UI.
• Introduces new portal pages for Messages, Report & Grievance, and Certificates (plus a new Certificate component).
• Adds Supabase helper functions and SQL scripts for new tables (messages/reports/certificates) and inserts a free Financial Management course curriculum.

Reviewed changes

Copilot reviewed 13 out of 16 changed files in this pull request and generated 15 comments.

Show a summary per file

File	Description
package-lock.json	Lockfile updated (dependency metadata changes).
next-env.d.ts	Changes the generated Next.js routes type import path.
lib/supabase.ts	Adds Supabase helpers for messages, reports, and certificates.
lib/auth.tsx	Extends mock User type with demographics/contact info/case manager id/preferences defaults.
components/certificates/Certificate.tsx	Adds a reusable certificate UI component (A4 layout, download button).
app/portal/settings/page.tsx	Adds customization/settings UI (font size, accent color, notifications).
app/portal/report/page.tsx	Adds report/grievance UI with tabs and submission form/history (currently mocked).
app/portal/profile/page.tsx	Expands profile form to capture demographics and contact information.
app/portal/messages/page.tsx	Adds messaging UI (inbox/detail/compose) (currently mocked).
app/portal/dashboard/page.tsx	Adds navigation cards linking to new portal features.
app/portal/certificates/page.tsx	Adds certificates gallery + modal certificate preview (currently mocked).
api/schema-financial-course.sql	Inserts “Financial Management Fundamentals” course + 6 lessons and FREE pricing metadata.
api/schema-enhancements.sql	Creates messages/reports/certificates tables, profile extensions, indexes, and RLS policies.
PORTAL_ENHANCEMENTS.md	Adds documentation describing the new portal features and schema.
IMPLEMENTATION_SUMMARY.md	Adds a high-level implementation/deployment summary for the enhancements.

[Copilot]

type/setType state is declared but never used, and the submission logic currently ignores several collected fields (category/anonymous/priority/type). This is likely to trigger lint issues and also diverges from the intended behavior—either wire these values into the submit call (e.g., via submitReport) or remove the unused state/inputs until backend integration is ready.

[Copilot]

Certificate numbers are derived from the current timestamp (last 6 digits), which can collide under fast/parallel inserts and will trip the UNIQUE constraint (returning null with only a console error). Prefer a collision-resistant generator (UUID/ULID, random bytes, or a database sequence) and surface a meaningful error when insertion fails.

[Copilot]

This script inserts a course with a fixed UUID; rerunning it will fail with a primary-key conflict. If these SQL files are meant to be safely re-applied in Supabase, use INSERT ... ON CONFLICT (id) DO NOTHING (and consider similar safeguards for lessons/outline updates) so the migration is idempotent.

[Copilot]

This page uses the mock auth context (useAuth from @/lib/auth), but /portal/auth and /portal/dashboard use the Supabase-based hook (@/lib/hooks/useAuth). As written, a user authenticated via Supabase will still be treated as unauthenticated here (no localStorage session) and get redirected back to /portal/auth. Align these pages on the same auth source (preferably the Supabase hook) so navigation works end-to-end.

Suggested change

	import { useAuth } from "@/lib/auth";
	import { useAuth } from "@/lib/hooks/useAuth";

[Copilot]

This settings page uses the mock auth context (@/lib/auth) rather than the Supabase auth hook used by /portal/auth. As a result, users authenticated via Supabase may appear logged out here and be redirected to the auth page. Align the auth source (and profile persistence) with the rest of the portal before relying on these preferences in production.

[Copilot]

The SVG background pattern uses a hard-coded id="grid", which will be duplicated if multiple Certificate components are rendered on the same page, leading to invalid DOM and potentially broken pattern fills. Use a unique id per component instance (e.g., via useId) and reference it in the fill URL; also consider moving the Google Fonts import to a centralized Next.js font setup to avoid injecting global CSS per render.

[Copilot]

There are two consecutive if (!user) checks: one returns a loading UI, and the later if (!user) return null; is unreachable dead code. Remove the redundant check to keep the control flow clear and avoid confusion during future edits.

[Copilot]

This page relies on the mock auth context (@/lib/auth), but the portal login flow (/portal/auth) uses the Supabase auth hook (@/lib/hooks/useAuth). That mismatch means authenticated users may be redirected here as "not authenticated" (no localStorage session). Consider switching to the Supabase auth hook (and using user.id from Supabase) so access control is consistent across the portal.

Suggested change

	import { useAuth } from "@/lib/auth";
	import { useAuth } from "@/lib/hooks/useAuth";

[Copilot]

This certificates page uses the mock auth context (@/lib/auth) even though the portal authentication flow uses Supabase (@/lib/hooks/useAuth). That mismatch can cause authenticated users to be treated as unauthenticated (no localStorage session) and redirected. Consider switching to the Supabase auth hook and fetching certificates by the Supabase user id.

Suggested change

	import { useAuth } from "@/lib/auth";
	import { useAuth } from "@/lib/hooks/useAuth";

[Copilot]

The info text claims certificates are "digitally signed" and downloadable as PDF, but the current implementation doesn’t perform any signing/verification and handleDownload is a placeholder alert. Please update the copy to match the actual behavior (or implement signing/PDF generation) to avoid misleading users.

Suggested change

	✓ All certificates are digitally signed and verified by T.O.O.L.S Inc
	</p>
	<p>
	✓ Each certificate has a unique verification number for authenticity
	</p>
	<p>
	✓ Certificates can be shared with employers and educational institutions
	</p>
	<p>
	✓ Download your certificates in PDF format for printing or sharing
	✓ All certificates are issued by T.O.O.L.S Inc and stored securely in your portal account
	</p>
	<p>
	✓ Each certificate has a unique reference number you can share for verification
	</p>
	<p>
	✓ Certificates can be shared with employers and educational institutions as proof of completion
	</p>
	<p>
	✓ PDF downloads and digital signatures are coming soon — for now, you can use your browser&apos;s print or “Save as PDF” options