@cogito.ai/cli 0.4.1 → 0.4.2

package/dist/index.js

@@ -868,7 +868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@cogito.ai/cli",
-    version: "0.4.1",
+    version: "0.4.2",
     type: "module",
     description: "AgentDock CLI – scaffold projects for humans and AI agents",
     publishConfig: {

package/dist/templates/web-nextjs/apps/docs/.source/server.ts

@@ -6,8 +6,8 @@ import * as __fd_glob_7 from "../content/docs/decisions/turbo-package-manager.md
 import * as __fd_glob_6 from "../content/docs/changelog/index.mdx?collection=docs"
 import * as __fd_glob_5 from "../content/docs/index.mdx?collection=docs"
 import { default as __fd_glob_4 } from "../content/docs/roadmap/meta.json?collection=docs"
-import { default as __fd_glob_3 } from "../content/docs/features/meta.json?collection=docs"
-import { default as __fd_glob_2 } from "../content/docs/decisions/meta.json?collection=docs"
+import { default as __fd_glob_3 } from "../content/docs/decisions/meta.json?collection=docs"
+import { default as __fd_glob_2 } from "../content/docs/features/meta.json?collection=docs"
 import { default as __fd_glob_1 } from "../content/docs/changelog/meta.json?collection=docs"
 import { default as __fd_glob_0 } from "../content/docs/meta.json?collection=docs"
 import { server } from 'fumadocs-mdx/runtime/server';
@@ -18,4 +18,4 @@ const create = server<typeof Config, import("fumadocs-mdx/runtime/types").Intern
   }
 }>({"doc":{"passthroughs":["extractedReferences"]}});
 
-export const docs = await create.docs("docs", "content/docs", {"meta.json": __fd_glob_0, "changelog/meta.json": __fd_glob_1, "decisions/meta.json": __fd_glob_2, "features/meta.json": __fd_glob_3, "roadmap/meta.json": __fd_glob_4, }, {"index.mdx": __fd_glob_5, "changelog/index.mdx": __fd_glob_6, "decisions/turbo-package-manager.mdx": __fd_glob_7, "features/auth.mdx": __fd_glob_8, "features/hello.mdx": __fd_glob_9, "roadmap/index.mdx": __fd_glob_10, });
+export const docs = await create.docs("docs", "content/docs", {"meta.json": __fd_glob_0, "changelog/meta.json": __fd_glob_1, "features/meta.json": __fd_glob_2, "decisions/meta.json": __fd_glob_3, "roadmap/meta.json": __fd_glob_4, }, {"index.mdx": __fd_glob_5, "changelog/index.mdx": __fd_glob_6, "decisions/turbo-package-manager.mdx": __fd_glob_7, "features/auth.mdx": __fd_glob_8, "features/hello.mdx": __fd_glob_9, "roadmap/index.mdx": __fd_glob_10, });

package/dist/templates/web-nextjs/apps/web/messages/en.json

@@ -33,6 +33,56 @@
     "termsText": "By clicking continue, you agree to our",
     "termsLink": "Terms of Service",
     "andText": "and",
-    "privacyLink": "Privacy Policy"
+    "privacyLink": "Privacy Policy",
+    "forgotPasswordLink": "Forgot password?",
+    "forgotPasswordTitle": "Reset your password",
+    "forgotPasswordSubtitle": "Enter your email and we'll send you a reset link.",
+    "forgotPasswordSent": "A reset link has been sent to {email}. Please check your inbox.",
+    "sendResetLink": "Send reset link",
+    "backToLogin": "Back to login",
+    "resetPasswordTitle": "Set new password",
+    "resetPasswordSubtitle": "Enter your new password below.",
+    "newPasswordLabel": "New password",
+    "resetPasswordButton": "Reset password",
+    "resetLinkExpired": "The reset link has expired. Please request a new one.",
+    "resetPasswordSuccess": "Password updated. Please log in."
+  },
+  "settings": {
+    "profile": {
+      "title": "Profile Settings",
+      "subtitle": "Manage your account settings and preferences.",
+      "profileCardTitle": "Profile",
+      "profileCardDescription": "Your public profile information.",
+      "avatarUploadComingSoon": "Avatar upload feature coming soon.",
+      "displayNameCardTitle": "Display Name",
+      "displayNameCardDescription": "Update your display name shown across the app.",
+      "displayNameLabel": "Display Name",
+      "displayNamePlaceholder": "Enter your display name",
+      "saveChanges": "Save Changes",
+      "displayNameUpdated": "Display name updated successfully",
+      "emailCardTitle": "Email Address",
+      "emailCardDescription": "Your primary email address.",
+      "contactSupportToChange": "To change your email, please contact support.",
+      "passwordCardTitle": "Password",
+      "passwordCardDescription": "Change your password.",
+      "changePassword": "Change Password"
+    }
+  },
+  "pages": {
+    "help": {
+      "title": "Help Center",
+      "description": "Find answers to common questions.",
+      "placeholder": "We are currently compiling our help documentation. Please check back later."
+    },
+    "privacy": {
+      "title": "Privacy Policy",
+      "description": "How we handle your data.",
+      "placeholder": "This template page is a placeholder. Replace it with your actual privacy policy before shipping."
+    },
+    "about": {
+      "title": "About Us",
+      "description": "Learn more about AgentDock.",
+      "placeholder": "This page is a placeholder. Replace it with your actual about information before shipping."
+    }
   }
 }

package/dist/templates/web-nextjs/apps/web/messages/zh.json

@@ -33,6 +33,56 @@
     "termsText": "点击继续即表示您同意我们的",
     "termsLink": "服务条款",
     "andText": "和",
-    "privacyLink": "隐私政策"
+    "privacyLink": "隐私政策",
+    "forgotPasswordLink": "忘记密码？",
+    "forgotPasswordTitle": "重置密码",
+    "forgotPasswordSubtitle": "输入您的邮箱，我们将发送重置链接。",
+    "forgotPasswordSent": "重置链接已发送至 {email}，请查收邮件。",
+    "sendResetLink": "发送重置链接",
+    "backToLogin": "返回登录",
+    "resetPasswordTitle": "设置新密码",
+    "resetPasswordSubtitle": "在下方输入您的新密码。",
+    "newPasswordLabel": "新密码",
+    "resetPasswordButton": "重置密码",
+    "resetLinkExpired": "重置链接已过期，请重新申请。",
+    "resetPasswordSuccess": "密码已更新，请登录。"
+  },
+  "settings": {
+    "profile": {
+      "title": "个人资料设置",
+      "subtitle": "管理您的账号设置和偏好。",
+      "profileCardTitle": "个人资料",
+      "profileCardDescription": "您的公开资料信息。",
+      "avatarUploadComingSoon": "头像上传功能即将推出。",
+      "displayNameCardTitle": "显示名",
+      "displayNameCardDescription": "更新您在应用中显示的昵称。",
+      "displayNameLabel": "显示名",
+      "displayNamePlaceholder": "输入您的显示名",
+      "saveChanges": "保存更改",
+      "displayNameUpdated": "显示名已更新",
+      "emailCardTitle": "邮箱地址",
+      "emailCardDescription": "您的主要邮箱地址。",
+      "contactSupportToChange": "如需修改邮箱，请联系支持。",
+      "passwordCardTitle": "密码",
+      "passwordCardDescription": "修改您的密码。",
+      "changePassword": "修改密码"
+    }
+  },
+  "pages": {
+    "help": {
+      "title": "帮助中心",
+      "description": "查找常见问题的答案。",
+      "placeholder": "我们正在整理帮助文档，请稍后查看。"
+    },
+    "privacy": {
+      "title": "隐私政策",
+      "description": "我们如何处理您的数据。",
+      "placeholder": "此页面为占位符。在发布前请替换为实际的隐私政策。"
+    },
+    "about": {
+      "title": "关于我们",
+      "description": "了解更多关于 AgentDock 的信息。",
+      "placeholder": "此页面为占位符。在发布前请替换为实际的关于我们信息。"
+    }
   }
 }

package/dist/templates/web-nextjs/apps/web/next-env.d.ts

@@ -1,6 +1,6 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
-import "./.next/types/routes.d.ts";
+import "./.next/dev/types/routes.d.ts";
 
 // NOTE: This file should not be edited
 // see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/(auth)/forgot-password/page.tsx

@@ -0,0 +1,130 @@
+'use client'
+
+import { useActionState, useEffect, useState } from 'react'
+import { useParams } from 'next/navigation'
+import Link from 'next/link'
+import { useTranslations } from 'next-intl'
+import { useForm } from 'react-hook-form'
+import { zodResolver } from '@hookform/resolvers/zod'
+import { GalleryVerticalEnd } from 'lucide-react'
+import { toast } from 'sonner'
+import { Button } from '@/components/ui/button'
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
+import { Input } from '@/components/ui/input'
+import { Field, FieldDescription, FieldGroup, FieldLabel } from '@/components/ui/field'
+import { requestPasswordReset } from '@/features/auth'
+import { forgotPasswordSchema, type ForgotPasswordInput } from '@/lib/validations/auth'
+import type { ActionResult } from '@/core/types/auth'
+
+export default function ForgotPasswordPage() {
+  const t = useTranslations('auth')
+  const routeParams = useParams<{ locale: string }>()
+  const locale = routeParams.locale ?? 'en'
+  const [isSent, setIsSent] = useState(false)
+  const [submittedEmail, setSubmittedEmail] = useState('')
+
+  const { register, handleSubmit, formState: { errors }, reset } = useForm<ForgotPasswordInput>({
+    resolver: zodResolver(forgotPasswordSchema),
+    defaultValues: { email: '' },
+  })
+
+  const [state, formAction, isPending] = useActionState<ActionResult | null, FormData>(
+    requestPasswordReset,
+    null,
+  )
+
+  useEffect(() => {
+    if (state?.error) toast.error(state.error)
+  }, [state])
+
+  async function onSubmit(data: ForgotPasswordInput) {
+    const formData = new FormData()
+    formData.append('email', data.email)
+    formData.append('locale', locale)
+    await formAction(formData)
+    setSubmittedEmail(data.email)
+    setIsSent(true)
+    reset()
+  }
+
+  if (isSent) {
+    return (
+      <div className="flex min-h-svh flex-col items-center justify-center gap-6 bg-muted p-6 md:p-10">
+        <div className="flex w-full max-w-sm flex-col gap-6">
+          <Link href={`/${locale}`} className="flex items-center gap-2 self-center font-medium">
+            <div className="flex size-6 items-center justify-center rounded-md bg-primary text-primary-foreground">
+              <GalleryVerticalEnd className="size-4" />
+            </div>
+            AgentDock
+          </Link>
+
+          <Card>
+            <CardHeader className="text-center">
+              <CardTitle className="text-xl">{t('forgotPasswordTitle')}</CardTitle>
+            </CardHeader>
+            <CardContent className="space-y-4">
+              <p className="text-center text-sm text-muted-foreground">
+                {t('forgotPasswordSent', { email: submittedEmail })}
+              </p>
+              <Button asChild variant="outline" className="w-full">
+                <Link href={`/${locale}/login`}>{t('backToLogin')}</Link>
+              </Button>
+            </CardContent>
+          </Card>
+        </div>
+      </div>
+    )
+  }
+
+  return (
+    <div className="flex min-h-svh flex-col items-center justify-center gap-6 bg-muted p-6 md:p-10">
+      <div className="flex w-full max-w-sm flex-col gap-6">
+        <Link href={`/${locale}`} className="flex items-center gap-2 self-center font-medium">
+          <div className="flex size-6 items-center justify-center rounded-md bg-primary text-primary-foreground">
+            <GalleryVerticalEnd className="size-4" />
+          </div>
+          AgentDock
+        </Link>
+
+        <Card>
+          <CardHeader className="text-center">
+            <CardTitle className="text-xl">{t('forgotPasswordTitle')}</CardTitle>
+            <CardDescription>{t('forgotPasswordSubtitle')}</CardDescription>
+          </CardHeader>
+          <CardContent>
+            <form onSubmit={handleSubmit(onSubmit)}>
+              <input type="hidden" name="locale" value={locale} />
+              <FieldGroup>
+                <Field>
+                  <FieldLabel htmlFor="email">{t('emailLabel')}</FieldLabel>
+                  <Input
+                    id="email"
+                    type="email"
+                    placeholder={t('emailPlaceholder')}
+                    autoComplete="email"
+                    {...register('email')}
+                  />
+                  {errors.email && (
+                    <FieldDescription className="text-destructive">
+                      {errors.email.message}
+                    </FieldDescription>
+                  )}
+                </Field>
+                <Field>
+                  <Button type="submit" className="w-full" disabled={isPending}>
+                    {isPending ? '\u2026' : t('sendResetLink')}
+                  </Button>
+                  <FieldDescription className="text-center">
+                    <Link href={`/${locale}/login`} className="underline underline-offset-4">
+                      {t('backToLogin')}
+                    </Link>
+                  </FieldDescription>
+                </Field>
+              </FieldGroup>
+            </form>
+          </CardContent>
+        </Card>
+      </div>
+    </div>
+  )
+}

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/(auth)/login/page.tsx

@@ -98,8 +98,14 @@ export default function LoginPage() {
                     )}
                   </Field>
                   <Field>
-                    <div className="flex items-center">
+                    <div className="flex items-center justify-between">
                       <FieldLabel htmlFor="password">{t('passwordLabel')}</FieldLabel>
+                      <Link
+                        href={`/${locale}/forgot-password`}
+                        className="text-sm text-muted-foreground underline underline-offset-4 hover:text-foreground"
+                      >
+                        {t('forgotPasswordLink')}
+                      </Link>
                     </div>
                     <Input
                       id="password"

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/(auth)/reset-password/page.tsx

@@ -0,0 +1,112 @@
+'use client'
+
+import { useActionState, useEffect } from 'react'
+import { useParams, useSearchParams } from 'next/navigation'
+import Link from 'next/link'
+import { useTranslations } from 'next-intl'
+import { useForm } from 'react-hook-form'
+import { zodResolver } from '@hookform/resolvers/zod'
+import { GalleryVerticalEnd } from 'lucide-react'
+import { toast } from 'sonner'
+import { Button } from '@/components/ui/button'
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
+import { Input } from '@/components/ui/input'
+import { Field, FieldDescription, FieldGroup, FieldLabel } from '@/components/ui/field'
+import { resetPassword } from '@/features/auth'
+import { resetPasswordSchema, type ResetPasswordInput } from '@/lib/validations/auth'
+import type { ActionResult } from '@/core/types/auth'
+
+export default function ResetPasswordPage() {
+  const t = useTranslations('auth')
+  const routeParams = useParams<{ locale: string }>()
+  const searchParams = useSearchParams()
+  const locale = routeParams.locale ?? 'en'
+  const error = searchParams.get('error')
+
+  const { register, formState: { errors } } = useForm<ResetPasswordInput>({
+    resolver: zodResolver(resetPasswordSchema),
+    defaultValues: { password: '', confirmPassword: '' },
+  })
+
+  const [state, formAction, isPending] = useActionState<ActionResult | null, FormData>(
+    resetPassword,
+    null,
+  )
+
+  useEffect(() => {
+    if (state?.error) toast.error(state.error)
+  }, [state])
+
+  useEffect(() => {
+    if (error === 'link_expired') {
+      toast.error(t('resetLinkExpired'))
+    }
+  }, [error, t])
+
+  return (
+    <div className="flex min-h-svh flex-col items-center justify-center gap-6 bg-muted p-6 md:p-10">
+      <div className="flex w-full max-w-sm flex-col gap-6">
+        <Link href={`/${locale}`} className="flex items-center gap-2 self-center font-medium">
+          <div className="flex size-6 items-center justify-center rounded-md bg-primary text-primary-foreground">
+            <GalleryVerticalEnd className="size-4" />
+          </div>
+          AgentDock
+        </Link>
+
+        <Card>
+          <CardHeader className="text-center">
+            <CardTitle className="text-xl">{t('resetPasswordTitle')}</CardTitle>
+            <CardDescription>{t('resetPasswordSubtitle')}</CardDescription>
+          </CardHeader>
+          <CardContent>
+            <form action={formAction}>
+              <input type="hidden" name="locale" value={locale} />
+              <FieldGroup>
+                <Field>
+                  <FieldLabel htmlFor="password">{t('newPasswordLabel')}</FieldLabel>
+                  <Input
+                    id="password"
+                    type="password"
+                    placeholder={t('passwordPlaceholder')}
+                    autoComplete="new-password"
+                    {...register('password')}
+                  />
+                  {errors.password && (
+                    <FieldDescription className="text-destructive">
+                      {errors.password.message}
+                    </FieldDescription>
+                  )}
+                </Field>
+                <Field>
+                  <FieldLabel htmlFor="confirmPassword">{t('confirmPasswordLabel')}</FieldLabel>
+                  <Input
+                    id="confirmPassword"
+                    type="password"
+                    placeholder={t('confirmPasswordPlaceholder')}
+                    autoComplete="new-password"
+                    {...register('confirmPassword')}
+                  />
+                  {errors.confirmPassword && (
+                    <FieldDescription className="text-destructive">
+                      {errors.confirmPassword.message}
+                    </FieldDescription>
+                  )}
+                </Field>
+                <Field>
+                  <Button type="submit" className="w-full" disabled={isPending}>
+                    {isPending ? '\u2026' : t('resetPasswordButton')}
+                  </Button>
+                  <FieldDescription className="text-center">
+                    <Link href={`/${locale}/login`} className="underline underline-offset-4">
+                      {t('backToLogin')}
+                    </Link>
+                  </FieldDescription>
+                </Field>
+              </FieldGroup>
+            </form>
+          </CardContent>
+        </Card>
+      </div>
+    </div>
+  )
+}

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/(protected)/settings/layout.tsx

@@ -0,0 +1,9 @@
+import { ReactNode } from 'react'
+
+export default function SettingsLayout({ children }: { children: ReactNode }) {
+  return (
+    <div className="container mx-auto max-w-4xl px-4 py-10">
+      {children}
+    </div>
+  )
+}

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/(protected)/settings/page.tsx

@@ -0,0 +1,9 @@
+import { redirect } from 'next/navigation'
+import { defaultLocale } from '@/i18n/config'
+
+export default function SettingsPage({ params }: { params: Promise<{ locale: string }> }) {
+  return (async () => {
+    const { locale } = await params
+    redirect(`/${locale}/settings/profile`)
+  })()
+}

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/(protected)/settings/profile/page.tsx

@@ -0,0 +1,97 @@
+import { redirect } from 'next/navigation'
+import Link from 'next/link'
+import { getCurrentUser } from '@/features/auth/server'
+import { ProfileForm } from '@/components/profile/profile-form'
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
+import { Avatar, AvatarFallback, AvatarImage } from '@/components/ui/avatar'
+import { Button } from '@/components/ui/button'
+import { Separator } from '@/components/ui/separator'
+
+export default async function ProfilePage({
+  params,
+}: {
+  params: Promise<{ locale: string }>
+}) {
+  const { locale } = await params
+  const user = await getCurrentUser()
+
+  if (!user) {
+    redirect(`/${locale}/login`)
+  }
+
+  const displayName = user.user_metadata?.display_name ?? ''
+  const email = user.email ?? ''
+  const avatarUrl = user.user_metadata?.avatar_url ?? ''
+  const initials = email.charAt(0).toUpperCase()
+
+  return (
+    <div className="space-y-6">
+      <div>
+        <h1 className="text-2xl font-semibold">Profile Settings</h1>
+        <p className="text-muted-foreground">Manage your account settings and preferences.</p>
+      </div>
+      <Separator />
+
+      {/* Avatar & Basic Info */}
+      <Card>
+        <CardHeader>
+          <CardTitle>Profile</CardTitle>
+          <CardDescription>Your public profile information.</CardDescription>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <div className="flex items-center gap-4">
+            <Avatar className="h-16 w-16">
+              <AvatarImage src={avatarUrl} alt={displayName || email} />
+              <AvatarFallback className="text-lg">{initials}</AvatarFallback>
+            </Avatar>
+            <div>
+              <p className="font-medium">{displayName || 'No display name set'}</p>
+              <p className="text-sm text-muted-foreground">{email}</p>
+            </div>
+          </div>
+          <p className="text-sm text-muted-foreground">
+            Avatar upload feature coming soon.
+          </p>
+        </CardContent>
+      </Card>
+
+      {/* Display Name */}
+      <Card>
+        <CardHeader>
+          <CardTitle>Display Name</CardTitle>
+          <CardDescription>Update your display name shown across the app.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <ProfileForm defaultName={displayName} locale={locale} />
+        </CardContent>
+      </Card>
+
+      {/* Email */}
+      <Card>
+        <CardHeader>
+          <CardTitle>Email Address</CardTitle>
+          <CardDescription>Your primary email address.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p className="text-sm">{email}</p>
+          <p className="mt-2 text-sm text-muted-foreground">
+            To change your email, please contact support.
+          </p>
+        </CardContent>
+      </Card>
+
+      {/* Password */}
+      <Card>
+        <CardHeader>
+          <CardTitle>Password</CardTitle>
+          <CardDescription>Change your password.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Button asChild variant="outline">
+            <Link href={`/${locale}/forgot-password`}>Change Password</Link>
+          </Button>
+        </CardContent>
+      </Card>
+    </div>
+  )
+}

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/about/page.tsx

@@ -0,0 +1,25 @@
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
+
+export default async function AboutPage({
+  params,
+}: {
+  params: Promise<{ locale: string }>
+}) {
+  const { locale } = await params
+
+  return (
+    <main className="mx-auto max-w-3xl px-4 py-10">
+      <Card>
+        <CardHeader>
+          <CardTitle>About Us</CardTitle>
+          <CardDescription>Learn more about AgentDock.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p className="text-muted-foreground">
+            This page is a placeholder. Replace it with your actual about information before shipping.
+          </p>
+        </CardContent>
+      </Card>
+    </main>
+  )
+}

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/help/page.tsx

@@ -0,0 +1,25 @@
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
+
+export default async function HelpPage({
+  params,
+}: {
+  params: Promise<{ locale: string }>
+}) {
+  const { locale } = await params
+
+  return (
+    <main className="mx-auto max-w-3xl px-4 py-10">
+      <Card>
+        <CardHeader>
+          <CardTitle>Help Center</CardTitle>
+          <CardDescription>Find answers to common questions.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p className="text-muted-foreground">
+            We are currently compiling our help documentation. Please check back later.
+          </p>
+        </CardContent>
+      </Card>
+    </main>
+  )
+}

package/dist/templates/web-nextjs/apps/web/src/app/[locale]/privacy/page.tsx

@@ -1,4 +1,4 @@
-import Link from 'next/link'
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
 
 export default async function PrivacyPage({
   params,
@@ -9,15 +9,17 @@ export default async function PrivacyPage({
 
   return (
     <main className="mx-auto max-w-3xl px-4 py-10">
-      <h1 className="text-2xl font-semibold">Privacy Policy</h1>
-      <p className="mt-4 text-muted-foreground">
-        This template page is a placeholder. Replace it with your actual privacy policy before shipping.
-      </p>
-      <p className="mt-6">
-        <Link href={`/${locale}/signup`} className="underline underline-offset-4">
-          Back to sign up
-        </Link>
-      </p>
+      <Card>
+        <CardHeader>
+          <CardTitle>Privacy Policy</CardTitle>
+          <CardDescription>How we handle your data.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p className="text-muted-foreground">
+            This template page is a placeholder. Replace it with your actual privacy policy before shipping.
+          </p>
+        </CardContent>
+      </Card>
     </main>
   )
 }

package/dist/templates/web-nextjs/apps/web/src/app/auth/callback/route.ts

@@ -2,18 +2,24 @@ import { NextRequest, NextResponse } from 'next/server'
 import { getServerClient } from '@/infra/db/client'
 import { defaultLocale } from '@/i18n/config'
 
+const ALLOWED_NEXT = ['/reset-password']
+
 export async function GET(request: NextRequest) {
   const { searchParams, origin } = new URL(request.url)
   const code = searchParams.get('code')
   const nextParam = searchParams.get('next')
-  const next = nextParam && nextParam.startsWith('/') ? nextParam : `/${defaultLocale}/dashboard`
+
+  // Whitelist check to prevent open redirect attacks
+  const safePath = nextParam && ALLOWED_NEXT.includes(nextParam)
+    ? nextParam
+    : `/${defaultLocale}/dashboard`
 
   if (code) {
     const supabase = await getServerClient()
     const { error } = await supabase.auth.exchangeCodeForSession(code)
 
     if (!error) {
-      return NextResponse.redirect(`${origin}${next}`)
+      return NextResponse.redirect(`${origin}${safePath}`)
     }
   }
 

package/dist/templates/web-nextjs/apps/web/src/components/dashboard/app-sidebar.tsx

@@ -2,24 +2,14 @@
 
 import * as React from "react"
 import {
-  IconCamera,
-  IconChartBar,
   IconDashboard,
-  IconDatabase,
-  IconFileAi,
-  IconFileDescription,
-  IconFileWord,
-  IconFolder,
   IconHelp,
+  IconInfoCircle,
   IconInnerShadowTop,
-  IconListDetails,
-  IconReport,
-  IconSearch,
   IconSettings,
-  IconUsers,
+  IconShield,
 } from "@tabler/icons-react"
 
-import { NavDocuments } from "@/components/dashboard/nav-documents"
 import { NavMain } from "@/components/dashboard/nav-main"
 import { NavSecondary } from "@/components/dashboard/nav-secondary"
 import { NavUser } from "@/components/dashboard/nav-user"
@@ -33,131 +23,45 @@ import {
   SidebarMenuItem,
 } from "@/components/ui/sidebar"
 
-const data = {
-  user: {
-    name: "shadcn",
-    email: "m@example.com",
-    avatar: "/avatars/shadcn.jpg",
-  },
-  navMain: [
+export function AppSidebar({
+  user,
+  locale,
+  ...props
+}: React.ComponentProps<typeof Sidebar> & {
+  user: { name: string; email: string; avatar: string }
+  locale: string
+}) {
+  const navMain = [
     {
       title: "Dashboard",
-      url: "#",
+      url: `/${locale}/dashboard`,
       icon: IconDashboard,
     },
-    {
-      title: "Lifecycle",
-      url: "#",
-      icon: IconListDetails,
-    },
-    {
-      title: "Analytics",
-      url: "#",
-      icon: IconChartBar,
-    },
-    {
-      title: "Projects",
-      url: "#",
-      icon: IconFolder,
-    },
-    {
-      title: "Team",
-      url: "#",
-      icon: IconUsers,
-    },
-  ],
-  navClouds: [
-    {
-      title: "Capture",
-      icon: IconCamera,
-      isActive: true,
-      url: "#",
-      items: [
-        {
-          title: "Active Proposals",
-          url: "#",
-        },
-        {
-          title: "Archived",
-          url: "#",
-        },
-      ],
-    },
-    {
-      title: "Proposal",
-      icon: IconFileDescription,
-      url: "#",
-      items: [
-        {
-          title: "Active Proposals",
-          url: "#",
-        },
-        {
-          title: "Archived",
-          url: "#",
-        },
-      ],
-    },
-    {
-      title: "Prompts",
-      icon: IconFileAi,
-      url: "#",
-      items: [
-        {
-          title: "Active Proposals",
-          url: "#",
-        },
-        {
-          title: "Archived",
-          url: "#",
-        },
-      ],
-    },
-  ],
-  navSecondary: [
     {
       title: "Settings",
-      url: "#",
+      url: `/${locale}/settings/profile`,
       icon: IconSettings,
     },
+  ]
+
+  const navSecondary = [
     {
-      title: "Get Help",
-      url: "#",
+      title: "Help",
+      url: `/${locale}/help`,
       icon: IconHelp,
     },
     {
-      title: "Search",
-      url: "#",
-      icon: IconSearch,
-    },
-  ],
-  documents: [
-    {
-      name: "Data Library",
-      url: "#",
-      icon: IconDatabase,
-    },
-    {
-      name: "Reports",
-      url: "#",
-      icon: IconReport,
+      title: "Privacy Policy",
+      url: `/${locale}/privacy`,
+      icon: IconShield,
     },
     {
-      name: "Word Assistant",
-      url: "#",
-      icon: IconFileWord,
+      title: "About",
+      url: `/${locale}/about`,
+      icon: IconInfoCircle,
     },
-  ],
-}
+  ]
 
-export function AppSidebar({
-  user,
-  locale,
-  ...props
-}: React.ComponentProps<typeof Sidebar> & {
-  user: { name: string; email: string; avatar: string }
-  locale: string
-}) {
   return (
     <Sidebar collapsible="offcanvas" {...props}>
       <SidebarHeader>
@@ -176,9 +80,8 @@ export function AppSidebar({
         </SidebarMenu>
       </SidebarHeader>
       <SidebarContent>
-        <NavMain items={data.navMain} />
-        <NavDocuments items={data.documents} />
-        <NavSecondary items={data.navSecondary} className="mt-auto" />
+        <NavMain items={navMain} />
+        <NavSecondary items={navSecondary} className="mt-auto" />
       </SidebarContent>
       <SidebarFooter>
         <NavUser user={user} locale={locale} />

package/dist/templates/web-nextjs/apps/web/src/components/dashboard/nav-user.tsx

@@ -1,10 +1,9 @@
 "use client"
 
+import Link from 'next/link'
 import {
-  IconCreditCard,
   IconDotsVertical,
   IconLogout,
-  IconNotification,
   IconUserCircle,
 } from "@tabler/icons-react"
 
@@ -87,17 +86,11 @@ export function NavUser({
             </DropdownMenuLabel>
             <DropdownMenuSeparator />
             <DropdownMenuGroup>
-              <DropdownMenuItem>
-                <IconUserCircle />
-                Account
-              </DropdownMenuItem>
-              <DropdownMenuItem>
-                <IconCreditCard />
-                Billing
-              </DropdownMenuItem>
-              <DropdownMenuItem>
-                <IconNotification />
-                Notifications
+              <DropdownMenuItem asChild>
+                <Link href={`/${locale}/settings/profile`} className="flex w-full items-center gap-2">
+                  <IconUserCircle />
+                  Account
+                </Link>
               </DropdownMenuItem>
             </DropdownMenuGroup>
             <DropdownMenuSeparator />

package/dist/templates/web-nextjs/apps/web/src/components/profile/profile-form.tsx

@@ -0,0 +1,64 @@
+'use client'
+
+import { useActionState, useEffect } from 'react'
+import { useForm } from 'react-hook-form'
+import { zodResolver } from '@hookform/resolvers/zod'
+import { toast } from 'sonner'
+import { Button } from '@/components/ui/button'
+import { Input } from '@/components/ui/input'
+import { Field, FieldDescription, FieldGroup, FieldLabel } from '@/components/ui/field'
+import { updateDisplayName } from '@/features/auth'
+import { displayNameSchema, type DisplayNameInput } from '@/lib/validations/auth'
+import type { ActionResult } from '@/core/types/auth'
+
+interface ProfileFormProps {
+  defaultName: string
+  locale: string
+}
+
+export function ProfileForm({ defaultName, locale }: ProfileFormProps) {
+  const { register, formState: { errors }, reset } = useForm<DisplayNameInput>({
+    resolver: zodResolver(displayNameSchema),
+    defaultValues: { name: defaultName },
+  })
+
+  const [state, formAction, isPending] = useActionState<ActionResult | null, FormData>(
+    updateDisplayName,
+    null,
+  )
+
+  useEffect(() => {
+    if (state?.error) {
+      toast.error(state.error)
+    } else if (state?.data !== undefined && !state.error) {
+      toast.success('Display name updated successfully')
+    }
+  }, [state])
+
+  return (
+    <form action={formAction}>
+      <input type="hidden" name="locale" value={locale} />
+      <FieldGroup>
+        <Field>
+          <FieldLabel htmlFor="name">Display Name</FieldLabel>
+          <Input
+            id="name"
+            type="text"
+            placeholder="Enter your display name"
+            {...register('name')}
+          />
+          {errors.name && (
+            <FieldDescription className="text-destructive">
+              {errors.name.message}
+            </FieldDescription>
+          )}
+        </Field>
+        <Field>
+          <Button type="submit" disabled={isPending}>
+            {isPending ? '\u2026' : 'Save Changes'}
+          </Button>
+        </Field>
+      </FieldGroup>
+    </form>
+  )
+}

package/dist/templates/web-nextjs/apps/web/src/core/repositories/IAuthRepository.ts

@@ -6,4 +6,7 @@ export interface IAuthRepository {
   signOut(): Promise<void>
   getSession(): Promise<AuthUser | null>
   signInWithOAuth(provider: 'github', nextPath?: string): Promise<{ url: string }>
+  updateDisplayName(name: string): Promise<AuthResult>
+  requestPasswordReset(email: string, redirectTo: string): Promise<void>
+  resetPassword(password: string): Promise<AuthResult>
 }

package/dist/templates/web-nextjs/apps/web/src/features/auth/__contract__.ts

@@ -4,6 +4,9 @@ export type SignInArgs = { email: string; password: string }
 export type SignUpArgs = { email: string; password: string; confirmPassword: string }
 export type SignUpSuccessData = { success: true; email: string }
 export type OAuthData = { url: string }
+export type RequestPasswordResetArgs = { email: string }
+export type ResetPasswordArgs = { password: string; confirmPassword: string }
+export type UpdateDisplayNameArgs = { name: string }
 
 export interface AuthFeatureContract {
   signIn(args: SignInArgs): Promise<ActionResult>
@@ -11,4 +14,7 @@ export interface AuthFeatureContract {
   signOut(): Promise<void>
   signInWithGithub(): Promise<ActionResult<OAuthData>>
   signInWithGithubForLocale(locale: string): Promise<ActionResult<OAuthData>>
+  requestPasswordReset(args: RequestPasswordResetArgs): Promise<ActionResult>
+  resetPassword(args: ResetPasswordArgs): Promise<ActionResult>
+  updateDisplayName(args: UpdateDisplayNameArgs): Promise<ActionResult>
 }

package/dist/templates/web-nextjs/apps/web/src/features/auth/actions.ts

@@ -2,7 +2,7 @@
 
 import { redirect } from 'next/navigation'
 import { getAuthRepository } from '@/infra/providers'
-import { signInSchema, signUpSchema } from '@/lib/validations/auth'
+import { signInSchema, signUpSchema, forgotPasswordSchema, resetPasswordSchema, displayNameSchema } from '@/lib/validations/auth'
 import type { ActionResult } from '@/core/types/auth'
 import { defaultLocale, isLocale } from '@/i18n/config'
 import type { SignUpSuccessData, OAuthData } from './__contract__'
@@ -84,3 +84,72 @@ export async function signInWithGithubForLocale(
     return { data: null, error: msg }
   }
 }
+
+export async function requestPasswordReset(
+  _prevState: ActionResult | null,
+  formData: FormData,
+): Promise<ActionResult<void>> {
+  const parsed = forgotPasswordSchema.safeParse({
+    email: formData.get('email'),
+  })
+
+  if (!parsed.success) {
+    return { data: null, error: parsed.error.issues[0]?.message ?? '输入无效' }
+  }
+
+  const repo = getAuthRepository()
+  const appUrl = process.env.NEXT_PUBLIC_APP_URL ?? 'http://localhost:3000'
+  const locale = normalizeLocale(formData.get('locale'))
+  const redirectTo = `${appUrl}/auth/callback?next=/${locale}/reset-password`
+
+  // Always return success to prevent email enumeration
+  await repo.requestPasswordReset(parsed.data.email, redirectTo)
+
+  return { data: undefined as void, error: null }
+}
+
+export async function resetPassword(
+  _prevState: ActionResult | null,
+  formData: FormData,
+): Promise<ActionResult<void>> {
+  const parsed = resetPasswordSchema.safeParse({
+    password: formData.get('password'),
+    confirmPassword: formData.get('confirmPassword'),
+  })
+
+  if (!parsed.success) {
+    return { data: null, error: parsed.error.issues[0]?.message ?? '输入无效' }
+  }
+
+  const repo = getAuthRepository()
+  const result = await repo.resetPassword(parsed.data.password)
+
+  if (result.error) {
+    return { data: null, error: result.error }
+  }
+
+  const locale = normalizeLocale(formData.get('locale'))
+  redirect(`/${locale}/login`)
+}
+
+export async function updateDisplayName(
+  _prevState: ActionResult | null,
+  formData: FormData,
+): Promise<ActionResult<void>> {
+  const parsed = displayNameSchema.safeParse({
+    name: formData.get('name'),
+  })
+
+  if (!parsed.success) {
+    return { data: null, error: parsed.error.issues[0]?.message ?? '输入无效' }
+  }
+
+  const repo = getAuthRepository()
+  const result = await repo.updateDisplayName(parsed.data.name)
+
+  if (result.error) {
+    return { data: null, error: result.error }
+  }
+
+  return { data: undefined as void, error: null }
+}

package/dist/templates/web-nextjs/apps/web/src/features/auth/index.ts

@@ -1 +1,10 @@
-export { signIn, signUp, signOut, signInWithGithub, signInWithGithubForLocale } from './actions'
+export {
+  signIn,
+  signUp,
+  signOut,
+  signInWithGithub,
+  signInWithGithubForLocale,
+  requestPasswordReset,
+  resetPassword,
+  updateDisplayName,
+} from './actions'

package/dist/templates/web-nextjs/apps/web/src/features/auth/server.ts

@@ -1,9 +1,12 @@
 import { cache } from 'react'
+// eslint-disable-next-line no-restricted-imports -- Infrastructure helper for reading current session; returns raw Supabase user with metadata
 import { getServerClient } from '@/infra/db/client'
 
 /**
  * Returns the current authenticated user for the active request.
  * Wrapped in React cache() so repeated reads in one request are deduplicated.
+ * Note: This is an infrastructure helper that returns the raw Supabase user
+ * object (including user_metadata) for use in Server Components.
  */
 export const getCurrentUser = cache(async () => {
   const supabase = await getServerClient()

package/dist/templates/web-nextjs/apps/web/src/infra/db/SupabaseAuthRepository.ts

@@ -60,4 +60,29 @@ export class SupabaseAuthRepository implements IAuthRepository {
     }
     return { url: data.url }
   }
+
+  async updateDisplayName(name: string): Promise<AuthResult> {
+    const supabase = await getServerClient()
+    const { error } = await supabase.auth.updateUser({
+      data: { display_name: name },
+    })
+    if (error) {
+      return { user: null, error: error.message }
+    }
+    return { user: null, error: null }
+  }
+
+  async requestPasswordReset(email: string, redirectTo: string): Promise<void> {
+    const supabase = await getServerClient()
+    await supabase.auth.resetPasswordForEmail(email, { redirectTo })
+  }
+
+  async resetPassword(password: string): Promise<AuthResult> {
+    const supabase = await getServerClient()
+    const { error } = await supabase.auth.updateUser({ password })
+    if (error) {
+      return { user: null, error: error.message }
+    }
+    return { user: null, error: null }
+  }
 }

package/dist/templates/web-nextjs/apps/web/src/lib/validations/auth.ts

@@ -16,5 +16,26 @@ export const signUpSchema = z
     path: ['confirmPassword'],
   })
 
+export const forgotPasswordSchema = z.object({
+  email: z.string().email('请输入有效邮箱'),
+})
+
+export const resetPasswordSchema = z
+  .object({
+    password: z.string().min(8, '密码至少 8 位'),
+    confirmPassword: z.string(),
+  })
+  .refine((data) => data.password === data.confirmPassword, {
+    message: '两次密码不一致',
+    path: ['confirmPassword'],
+  })
+
+export const displayNameSchema = z.object({
+  name: z.string().min(1, '显示名不能为空').max(50, '显示名最多 50 字符'),
+})
+
 export type SignInInput = z.infer<typeof signInSchema>
 export type SignUpInput = z.infer<typeof signUpSchema>
+export type ForgotPasswordInput = z.infer<typeof forgotPasswordSchema>
+export type ResetPasswordInput = z.infer<typeof resetPasswordSchema>
+export type DisplayNameInput = z.infer<typeof displayNameSchema>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cogito.ai/cli",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "type": "module",
   "description": "AgentDock CLI – scaffold projects for humans and AI agents",
   "publishConfig": {