Referral page, bug fixes, seed data, persona tiers

- New /refer page with share/copy/stats
- Fixed modal z-index conflicts (z-50 → z-[60]) across forum, groups, souq, halal-monitor
- Seed route: forum categories, marketplace listings, private groups
- Mufti/Daie personas now available in Premium tier
- Fixed referral share link: falahos.my/mobile/auth?ref=CODE
- Fixed client-side persona access check for premium

src/app/api/auth/[provider]/callback/route.ts

@@ -88,7 +88,11 @@ async function handleCallback(
     });
 
     // Build the redirect URI (must match the one used in the authorization request)
-    const baseUrl = `${url.protocol}//${url.host}`;
+    const forwardedProto = req.headers.get("x-forwarded-proto") || "https";
+    const rawHost = req.headers.get("host") || "";
+    const isDockerHost = /^[a-f0-9]{12,}$/i.test(rawHost.split(":")[0]);
+    const forwardedHost = req.headers.get("x-forwarded-host") || (isDockerHost ? "falahos.my" : rawHost);
+    const baseUrl = `${forwardedProto}://${forwardedHost}`;
     const redirectUri = `${baseUrl}/mobile/api/auth/${provider}/callback`;
 
     // Exchange code for user info

src/app/api/auth/[provider]/route.ts

@@ -35,8 +35,13 @@ export async function GET(
   }
 
   // Build the redirect URI — the callback URL for this provider
-  const url = new URL(_req.url);
-  const baseUrl = `${url.protocol}//${url.host}`;
+  // Use forwarded headers (Traefik/Cloudflare) or the original Host header
+  // to ensure the public domain is used, not the Docker container hostname.
+  const forwardedProto = _req.headers.get("x-forwarded-proto") || "https";
+  const rawHost = _req.headers.get("host") || "";
+  const isDockerHost = /^[a-f0-9]{12,}$/i.test(rawHost.split(":")[0]);
+  const forwardedHost = _req.headers.get("x-forwarded-host") || (isDockerHost ? "falahos.my" : rawHost);
+  const baseUrl = `${forwardedProto}://${forwardedHost}`;
   const redirectUri = `${baseUrl}/mobile/api/auth/${provider}/callback`;
 
   // Generate state for CSRF protection

src/app/api/auth/register/route.ts

@@ -2,10 +2,14 @@ import { NextRequest, NextResponse } from "next/server";
 import bcrypt from "bcryptjs";
 import { prisma } from "@/lib/prisma";
 import { signJWT } from "@/lib/auth";
+import { findReferrerByCode } from "@/lib/referral";
+
+const REFERRER_REWARD_FLH = 200;
+const REFERRED_BONUS_FLH = 1000;
 
 export async function POST(req: NextRequest) {
   try {
-    const { email, name, password } = await req.json();
+    const { email, name, password, referralCode } = await req.json();
 
     if (!email || !name || !password) {
       return NextResponse.json(
@@ -24,17 +28,66 @@ export async function POST(req: NextRequest) {
 
     const passwordHash = await bcrypt.hash(password, 12);
 
+    // Look up referrer if a referral code was provided
+    let referrerId: string | null = null;
+    if (referralCode && typeof referralCode === "string") {
+      const users = await prisma.user.findMany({
+        select: { id: true },
+      });
+      referrerId = await findReferrerByCode(users, referralCode);
+    }
+
+    // Calculate starting balance
+    let startingBalance = 5000; // default sign-up bonus
+    if (referrerId) {
+      startingBalance += REFERRED_BONUS_FLH; // +1,000 FLH for using a referral code
+    }
+
     const user = await prisma.user.create({
       data: {
         email,
         name,
         passwordHash,
         provider: "email",
-        flhBalance: 5000,
+        flhBalance: startingBalance,
         trialEndsAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000),
       },
     });
 
+    // If referral code was valid, create the referral record and credit the referrer
+    if (referrerId) {
+      await prisma.$transaction([
+        // Create the referral record
+        prisma.referral.create({
+          data: {
+            referrerId,
+            referredId: user.id,
+            status: "joined",
+            rewardFlh: REFERRER_REWARD_FLH,
+          },
+        }),
+        // Credit the referrer
+        prisma.user.update({
+          where: { id: referrerId },
+          data: { flhBalance: { increment: REFERRER_REWARD_FLH } },
+        }),
+        // Notify the referrer
+        prisma.notification.create({
+          data: {
+            userId: referrerId,
+            type: "referral_bonus",
+            title: "Referral Bonus Earned!",
+            body: `${name} joined Falah using your referral code — you earned ${REFERRER_REWARD_FLH} FLH!`,
+            data: JSON.stringify({
+              referredUserId: user.id,
+              referredName: name,
+              rewardFlh: REFERRER_REWARD_FLH,
+            }),
+          },
+        }),
+      ]);
+    }
+
     const token = await signJWT({
       userId: user.id,
       email: user.email,
@@ -53,6 +106,8 @@ export async function POST(req: NextRequest) {
         flhBalance: user.flhBalance,
         dailyMsgCount: user.dailyMsgCount,
       },
+      referralApplied: referrerId ? true : false,
+      referralReward: referrerId ? REFERRED_BONUS_FLH : 0,
     });
   } catch (error) {
     console.error("Register error:", error);