The Living Skyscraper — TikTok Interactive Board

LIVE TICKER

📢 Publicity Ticker

Registry Lock

Select a window... Vacant

Owner Name

Lease Option

Standard Bid $2.00

Can be outbid by anyone at any time.

7-Day Protection Lock $10.99

Locked for 1 week. Nobody can touch it.

✍️ Inspiring Quote (Flag Only)

Current Value

New Bid ($)

Profile Pic URL (Optional)

Website / Social Link (Optional)

📢 Publicity / Ad Copy (Optional)

Window Light Style

Save & Backup

Copy/paste data codes to save work between streams.

☁️ Supabase Cloud DB

Setup SQL Instructions

Paste this inside your Supabase SQL Editor and hit run:

-- 1. Create/Alter table structure
create table if not exists rooms (
  id text primary key,
  owner text not null,
  color text not null,
  image text,
  community_tag text,
  floor_number integer,
  current_value numeric default 2.00
);
alter table rooms add column if not exists community_tag text;
alter table rooms add column if not exists floor_number integer;
alter table rooms add column if not exists current_value numeric default 2.00;
alter table rooms replica identity full;

-- 2. Backfill floor numbers
update rooms 
set floor_number = split_part(id, '-', 1)::integer 
where id <> 'flag' and floor_number is null;

-- 3. Create secure place_bid RPC function
create or replace function place_bid(
  room_id text,
  new_owner text,
  new_color text,
  new_image text,
  new_community_tag text,
  floor_num integer,
  bid_amount numeric
) returns void as $$
declare
  db_current_value numeric;
  old_image text;
  old_ts_str text;
  old_ts bigint;
  one_week_ms bigint := 604800000; -- 7 days in ms
  current_ms bigint;
begin
  -- Get existing room details
  select image, current_value into old_image, db_current_value
  from rooms where id = room_id for update;

  -- 1. Check if room is currently locked
  if old_image is not null then
    old_ts_str := split_part(old_image, '::', 4);
    if old_ts_str <> '' then
      old_ts := old_ts_str::bigint;
      current_ms := extract(epoch from now())::bigint * 1000;
      
      -- Flagpole is locked forever, other rooms locked for 1 week
      if room_id = 'flag' then
        raise exception 'The flagpole is permanently claimed and cannot be outbid.';
      elsif current_ms - old_ts < one_week_ms then
        raise exception 'This room is under active protection and cannot be outbid yet!';
      end if;
    end if;
  end if;

  -- 2. Validate bid amount
  -- If the new bid is a lock purchase (has new_timestamp), we allow it to bypass standard outbids
  if new_image is not null and split_part(new_image, '::', 4) <> '' then
    -- Lock purchase is allowed as long as the room is not currently locked!
  else
    -- Standard bid must exceed current value
    if db_current_value is not null and bid_amount <= db_current_value then
      raise exception 'Bid too low. Someone else outbid you first!';
    end if;
  end if;

  insert into rooms (id, owner, color, image, community_tag, floor_number, current_value)
  values (room_id, new_owner, new_color, new_image, new_community_tag, floor_num, bid_amount)
  on conflict (id) do update set
    owner = excluded.owner,
    color = excluded.color,
    image = excluded.image,
    community_tag = excluded.community_tag,
    floor_number = excluded.floor_number,
    current_value = excluded.current_value;
end;
$$ language plpgsql security definer;

-- 4. Create conquered floors view
create or replace view conquered_floors as
select 
  floor_number,
  min(community_tag) as community_tag
from rooms
where floor_number is not null
group by floor_number
having count(id) = 5 
   and count(case when community_tag is null or community_tag = '' then 1 end) = 0
   and count(distinct community_tag) = 1;

-- 5. Enable Realtime Broadcasting (Crucial for instant, live updates!)
alter publication supabase_realtime add table rooms;

-- 6. Setup Secure Admin Authentication Database Structure
create extension if not exists pgcrypto;

create table if not exists admin_secrets (
  key text primary key,
  value_hash text not null
);

-- Force strict RLS on the secrets table (no public access allowed at all!)
alter table admin_secrets enable row level security;

-- Create helper to check if admin password is set yet
create or replace function is_admin_password_set()
returns boolean as $$
declare
  pwd_count integer;
begin
  select count(*) into pwd_count from admin_secrets;
  return pwd_count > 0;
end;
$$ language plpgsql security definer;

-- Create helper to set initial admin password
create or replace function set_initial_admin_password(new_pwd text)
returns boolean as $$
declare
  pwd_count integer;
begin
  select count(*) into pwd_count from admin_secrets;
  if pwd_count > 0 then
    raise exception 'Admin password has already been set.';
  end if;
  
  insert into admin_secrets (key, value_hash)
  values ('admin_password', crypt(new_pwd, gen_salt('bf')));
  return true;
end;
$$ language plpgsql security definer;

-- Create function to verify admin credentials
create or replace function verify_admin_password(input_pwd text)
returns boolean as $$
declare
  db_hash text;
begin
  select value_hash into db_hash from admin_secrets where key = 'admin_password';
  if db_hash is null then
    return false;
  end if;
  return db_hash = crypt(input_pwd, db_hash);
end;
$$ language plpgsql security definer;

-- Create secure password-authenticated admin eviction
create or replace function admin_evict_room(room_id text, admin_pwd text)
returns boolean as $$
begin
  if not verify_admin_password(admin_pwd) then
    raise exception 'Unauthorized admin credentials!';
  end if;
  
  delete from rooms where id = room_id;
  return true;
end;
$$ language plpgsql security definer;

-- Create secure password-authenticated PayPal configuration save
create or replace function admin_set_paypal_client_id(client_id text, admin_pwd text)
returns boolean as $$
begin
  if not verify_admin_password(admin_pwd) then
    raise exception 'Unauthorized admin credentials!';
  end if;
  
  insert into rooms (id, owner, color, image)
  values ('config-paypal', 'SYSTEM', '#000000', client_id)
  on conflict (id) do update set image = excluded.image;
  return true;
end;
$$ language plpgsql security definer;

-- 7. Secure the rooms table with strict public read-only RLS
alter table rooms enable row level security;
drop policy if exists "Allow public read-only access" on rooms;
drop policy if exists "Enable read access for all users" on rooms;
drop policy if exists "Enable insert for all users" on rooms;
drop policy if exists "Enable update for all users" on rooms;
drop policy if exists "Enable delete for all users" on rooms;

create policy "Allow public read-only access" on rooms
  for select using (true);

💳 PayPal Live Client ID

📊 Revenue Dashboard

TOTAL REVENUE

FLAG VALUE

LEASED

AVG BID

Quick Actions

Backup Data