IMPORTANT: Third-Party Services & Usage Costs

This script integrates with several third-party services. Accounts and any associated fees are the buyer’s responsibility and are NOT included in the purchase price:

• Supabase — backend, database, auth, storage (free tier available, paid plans for production usage)
• Stripe — card payments (per-transaction fees set by Stripe)
• PayPal — alternative payment provider (per-transaction fees set by PayPal)
• Google OAuth — social sign-in (free)
• Google Gemini API — AI Smart Matching & content suggestions (usage-based pricing)

You will need to provide your own API keys and manage all associated costs separately. Typical costs vary based on usage volume.

TaskHive — The Complete Multi-Tenant Service Marketplace SaaS Script

TaskHive is a production-ready, multi-tenant Service Marketplace + CRM SaaS script & web app built with React 18, Vite 5, TypeScript, Tailwind CSS, and Supabase. It ships with a full multi-role system (Admin, Provider, Staff, Client), instant booking, post-a-task workflow, real-time chat, Stripe & PayPal payments, AI-powered smart matching, an installable PWA, a guided setup wizard, and a polished, fully-responsive UI ready for desktop, tablet, and mobile.

Whether you’re launching a handyman marketplace, beauty booking platform, home services SaaS, freelance marketplace, or a white-label vendor CRM, TaskHive gives you everything you need out of the box — no backend coding required.

Live Demo

Demo URL: https://taskhive.wrapcoders.com

System Requirements

• Node.js: 18.x – 22.x (LTS recommended; tested on 18, 20, and 22)
• Package Manager: npm 9+, pnpm 8+, or bun 1.0+
• Database: Supabase / PostgreSQL 15+
• Build Output: Static SPA — deploys to any static host or CDN
• Hosting: Vercel, Netlify, Cloudflare Pages, VPS (Nginx), cPanel, or Docker
• RAM (build): 2 GB minimum, 4 GB recommended

Compatible Browsers

• Google Chrome (latest 2 versions)
• Mozilla Firefox (latest 2 versions)
• Microsoft Edge (latest 2 versions)
• Apple Safari 15+ (macOS & iOS)
• Opera (latest)
• Samsung Internet (latest)
• Brave (latest)

IE11 is not supported.

App Overview

• Multi-tenant architecture with path-based routing (/:tenant-slug) and full tenant isolation via Postgres RLS
• 4 distinct user roles with dedicated dashboards: Super Admin, Provider/Vendor, Staff, Client/Customer
• Built-in CRM for providers: customers, leads, inquiries, bookings, earnings, reviews
• Installable Progressive Web App (PWA) with offline support and admin-controlled branding
• Guided Setup Wizard for first-run installation, tenant creation, and onboarding
• Real-time everything: chat, notifications, booking updates, payments — powered by Supabase Realtime
• AI-powered Smart Matching using Google Gemini to rank professionals for each task
• Fully responsive across 1920px → 320px with no overflow, polished typography scaling, and mobile-first navigation

Key Features

Multi-Tenant SaaS Architecture

• Path-based multi-tenancy (/:tenant-slug) — host unlimited brands on one install
• Per-tenant branding: logo, favicon, primary/accent colors, theme color, app name
• Tenant-scoped data with PostgreSQL Row-Level Security (RLS)
• Database-level subscription plan enforcement via Postgres RPC
• Default tenant fallback + tenant-aware authentication signup
• Modular tenant landing pages with public-facing marketing sections

Multi-Role User System

• Super Admin — Platform-wide control: users, payments, disputes, refunds, withdrawals, content, branding, Stripe config, audit log
• Tenant Admin / Moderator — Tenant dashboard, refunds, withdrawals, content moderation, vendor approvals, coupons
• Provider / Vendor / Agent — Services, bookings, calendar, holidays, earnings, customers, leads, inquiries, reviews, staff management, subscriptions, withdrawals, lead credits
• Staff (sub-vendor) — Invitation-based onboarding, scoped vendor access, dedicated staff dashboard
• Client / Customer / User — Browse, book, post tasks, chat, wallet, reviews, invoices, saved providers, disputes
• Role aliases supported: Vendor, Agent, Driver, Freelancer, Creator, Customer, User, Owner, Publisher

Authentication System

• Email + password signup and login with Supabase Auth
• Google OAuth + Apple Sign-In ready
• Forgot password & secure password reset flow
• Email verification before sign-in
• Profile completion gate for OAuth users
• Centralized usePermission() hook — single source of truth for role gating
• Secure user roles in a separate user_roles table (no privilege escalation)
• Security-definer Postgres functions (has_role) for safe RLS checks
• Tenant-aware signup binds new users to their tenant slug

Role-Based Redirect System

• Smart post-login redirect based on strongest role
• Deep-link aware — returns user to original destination after auth
• Friendly toast messaging when accessing wrong-role areas
• Admin-only routes protected with confirmation dialog
• Staff treated as Provider for UI gating (configurable)
• Profile completion redirect for incomplete signups
• Context-aware redirect prompts (e.g. “Continue to your booking after signing in”)

Setup Wizard (Installation Flow)

• 4-step guided tenant onboarding wizard
• First-run installation flow with environment validation
• Tenant registration with slug validation and uniqueness check
• Subscription tier selection during setup
• Post-install onboarding checklist for new tenants
• Branding setup directly in the wizard (logo, colors, theme)
• Auto-provisions wallet, profile, and default role on completion

PWA System (Installable App)

• Installable on iOS, Android, Windows, macOS, Linux
• Offline support via service worker (production builds)
• Admin-controlled PWA branding: app name, short name, icon, theme color, background color
• Live BrandingApplier + PwaBrandingApplier patch favicon, theme-color, and manifest at runtime
• Apple touch icon, Android maskable icons, full manifest support
• Install page with platform-specific instructions
• NetworkFirst caching strategy — never serves stale shells
• Admin can rebrand the installed app without redeploying

Supabase Integration

• Auth — Email, OAuth (Google/Apple), password reset, email verification
• Database — PostgreSQL with full schema migrations included
• RLS — Row-Level Security on every table, tenant-isolated
• Storage — 9 pre-configured buckets: avatars, portfolio, task-photos, chat-attachments, review-photos, branding, tenant-logos, verification-docs (private), receipts (private)
• Realtime — Chat, notifications, bookings, payments stream live
• Edge Functions — PDF receipts, email sending, payment webhooks, AI matching
• Cron jobs — Scheduled reminders via pg_cron
• Audit log — Every admin action recorded with actor, target, and details

Demo / Test Mode (Quick Login System)

• .env-controlled demo credentials system (gated by VITE_DEMO_MODE)
• Three real demo accounts: Admin, Provider, Client (one-click login)
• Dedicated Demo Login page with role selector cards
• Compact demo widget embedded on the standard login page
• Aliased role labels (Vendor, Customer, Moderator, Staff) all map to real accounts
• Auto-fill credentials button for instant manual testing
• Demo UI & credentials never bundled in production builds — safe for client demos and QA

Responsive Navigation System

• Desktop mega-menu with category browsing
• Tablet adaptive header with collapsible sections
• Mobile hamburger drawer with full nav tree
• Sticky bottom navigation for client mobile dashboard
• Sidebar navigation for admin & provider dashboards
• Tested across 1920, 1440, 1366, 1280, 1024, 768, 430, 390, 360, 320 px breakpoints
• Zero horizontal overflow on any viewport
• Smooth transitions between breakpoints with optimized typography scaling

Booking & Task System

• Instant Booking with vendor availability calendar
• Post-a-Task flow for open marketplace bidding
• Reusable VendorAvailabilityCalendar filtering booked/blocked/closed slots
• Booking actions: confirm, reschedule, cancel, mark complete
• Reschedule request flow with vendor approval
• Booking policy engine (cancellation windows, deposits, refund rules)
• Auto-generated invoices: INV-YYYYMMDD-ID
• PDF receipts via Edge Function, stored in private bucket with signed URLs
• Calendar invite (.ics) generation for confirmed bookings

Payments & Monetization

• Stripe + PayPal integration
• 25% deposits with balance on completion
• Platform commission system (configurable %)
• Lead credits system for providers
• Wallet system with transactions, withdrawals, refunds
• Withdrawal cap enforcement at the database trigger level
• Promo coupons with discount types and usage limits
• Edge-function tax calculation (region-aware)
• Admin earnings dashboard with commission breakdowns
• Refund request workflow with admin approval
• Payment history & invoice downloads for clients

Real-Time Chat

• Supabase Realtime messaging (1-to-1 booking chats)
• File & image attachments via Supabase Storage
• Read receipts and typing indicators
• Per-channel unique IDs to prevent subscription leaks
• Booking-scoped chat threads
• Unread message badges across the app

Reviews & Ratings

• Verified 5-star ratings (only completed bookings can review)
• Photo evidence uploads
• Vendor reply system
• Aggregate rating display on provider profiles
• “My Reviews” page for clients

AI Smart Matching

• Google Gemini-powered professional ranking for posted tasks
• AI score badges on matched providers
• Recent matches history (auto-trimmed to last 5 per user)
• Bring-your-own Gemini API key (usage-based pricing)

Notifications System

• Real-time notification bell with badge count
• Per-tenant unique badge counts
• Toast notifications for instant feedback
• Scheduled reminders via pg_cron
• Per-user notification policy preferences
• Email + in-app delivery channels
• Customizable email templates managed by admin

Inquiries & Lead Management

• Provider inquiries inbox with status tracking
• Client-to-provider inquiry forms on service pages
• Auto-conversion of inquiries into bookings
• Lead credit deduction per accepted inquiry

Invitation System

• Vendor marketplace invites with auto-approval
• Staff invitations with role-scoped tokens
• Email-matched invitee verification
• Expiring invitation tokens with full audit log
• Unknown role audit trail for security

Service Taxonomy

• Hierarchical category system with icons
• Database-linked vendor services
• Featured categories on landing page
• Category landing pages with SEO meta
• Missing icon detection page for admins

Tenant Branding & Theming

• Admin Branding page → CSS variables → live across app, receipts PDF, and email templates
• Light/dark mode with HSL token strategy
• Centralized typography system (.text-heading, .text-body, etc.)
• Geist font with earthy green accent palette
• Theme persistence per user
• Logo auto-switching for light/dark mode

CMS & Content

• Built-in CMS for marketing pages (About, Terms, Privacy, FAQ, etc.)
• Contact messages inbox for admins
• Dynamic page rendering with SEO meta
• Email template editor
• DOMPurify sanitization on all rich-text rendering (XSS-safe)

Documentation System

• Complete setup guide (Supabase, env vars, deployment) in /docs/index.html
• Auth E2E + visual QA checklists
• Theme token contract & dark-mode role tokens documentation
• Theming guide
• Changelog v1.0.0
• Multi-role testing credentials documented
• Inline JSDoc on hooks and utilities

Security Features

• Row-Level Security (RLS) policies on every table
• Roles stored in separate table — no privilege escalation
• Server-side role checks via security-definer functions
• Hardened signup trigger silently downgrades any admin/moderator self-elevation attempts
• Audit log for admin actions, refunds, withdrawals, settings, role changes, branding edits
• Withdrawal cap triggers prevent overdrafts at DB level
• Email-matched invitation verification
• Private storage buckets with signed URLs (receipts, verification docs)
• No client-side admin checks (no localStorage role storage)
• CSRF-safe Supabase Auth + httpOnly session cookies
• Hardcoded color scanner enforces design-token discipline at build time

Performance Optimization

• Vite 5 build with route-level code splitting
• Lazy-loaded pages (every dashboard page split)
• Bundle size monitoring with baseline tracking and CI guard
• Knip-pruned dependencies (zero unused code shipped)
• Tree-shaken Lucide icons (per-icon chunks)
• Image lazy loading + responsive srcset
• Memoized expensive queries
• Supabase query limits respected (1000 rows default)
• Scroll-reveal animations with IntersectionObserver (no scroll listeners)

Deployment Guide Summary

• One-click deploy to Vercel, Netlify, Cloudflare Pages
• VPS deployment with Nginx (build & serve dist/)
• cPanel deployment (upload dist/ to public_html)
• Docker recipe included in /docs
• Supabase project setup with included SQL migrations
• Environment variable template provided (.env.example)
• Stripe + PayPal configuration walkthrough
• Custom domain setup guide
• PWA publishing checklist
• Production build: npm run build / bun run build
• Edge Functions auto-deploy with the project

Use Cases — Who Is It For?

• Home Services Marketplace — Plumbers, electricians, cleaners, handymen
• Beauty & Wellness Booking — Salons, spas, barbers, massage therapists
• Freelance Marketplace — Designers, writers, developers, consultants
• Local Services SaaS — Tutoring, fitness training, pet care, photography
• White-Label Vendor CRM — Resell as a managed SaaS to local businesses
• Multi-Brand Operators — Run multiple service brands from one install
• Agencies — Spin up tenants for clients in minutes
• Startup Founders — Launch an MVP marketplace in days, not months
• Field Service Companies — Dispatch agents, track jobs, collect payments

Tech Stack

• Frontend: React 18, Vite 5, TypeScript 5, Tailwind CSS v3
• UI: shadcn/ui (curated), Radix primitives, Lucide icons, Framer Motion
• Backend: Supabase (PostgreSQL, Auth, Storage, Realtime, Edge Functions)
• Payments: Stripe, PayPal
• AI: Google Gemini (bring your own API key)
• PWA: vite-plugin-pwa, Workbox
• Testing: Vitest, Playwright E2E, axe accessibility

What’s Included

• Full TypeScript source code
• Complete Supabase SQL migrations
• Edge Functions (PDF receipts, email, payments)
• Setup wizard + onboarding checklist
• 3 ready-to-use demo accounts
• Documentation portal (setup, deployment, theming, changelog) in /docs
• QA checklists (auth, dark mode, accessibility)
• E2E test suites
• 6 months of free updates + priority support

Changelog

v1.0.0 — Initial Release

• Multi-tenant SaaS architecture
• 4 user roles with dedicated dashboards
• Stripe + PayPal payments with deposits
• Real-time chat, notifications, bookings
• AI smart matching
• Installable PWA with admin branding
• Setup wizard + onboarding
• Demo mode with one-click login (env-gated)
• Fully responsive (1920px → 320px)
• Complete documentation portal

TaskHive is a complete, production-grade SaaS script you can launch this weekend. Buy once, brand it, deploy it, scale it.