@murumets-ee/create 0.1.18 → 0.2.0

package/dist/index.mjs

@@ -1,2960 +1,344 @@
-import{i as e,n as t,o as n,r,t as i}from"./utils-Bmw75lEa.mjs";import{join as a}from"node:path";import{mkdir as o}from"node:fs/promises";async function s(e,t){await n(a(e,`lib/admin-config.ts`),`import { Media } from '@murumets-ee/media'
-import {
-  Ticket,
-  TicketMessage,
-  TicketAttachment,
-  Department,
-  TicketTag,
-} from '@murumets-ee/ticketing'
-import { Article, Category } from '@/entities'
-
-/** All entities available in the admin (drives sidebar nav + CRUD) */
-export const allEntities = [
-  Article, Media, Category,
-  Ticket, TicketMessage, TicketAttachment, Department, TicketTag,
-]
+import{a as e,n as t,r as n,t as r}from"./utils-DHetVfSn.mjs";import{existsSync as i,readFileSync as a}from"node:fs";import{mkdir as o,readFile as s,readdir as c,writeFile as l}from"node:fs/promises";import{dirname as u,join as d}from"node:path";import{fileURLToPath as f}from"node:url";import{extract as p}from"tar";const m={myorgCore:`0.1.6`,myorgDb:`0.1.5`,myorgEntity:`0.2.0`,myorgLogging:`0.1.6`,myorgAuth:`0.1.5`,myorgAuthUi:`0.1.5`,myorgAdminUi:`0.2.0`,myorgContent:`0.2.0`,myorgContentApi:`0.1.5`,myorgSettings:`0.1.6`,myorgStorage:`0.1.6`,myorgMedia:`0.2.0`,myorgTaxonomy:`0.1.5`,myorgQueue:`0.1.6`,myorgMail:`0.1.5`,myorgTicketing:`0.2.0`,myorgTicketingUi:`0.2.0`,myorgEditor:`0.1.5`,myorgBlocks:`0.1.5`,myorgTokens:`0.1.5`,myorgUi:`0.1.5`,myorgCli:`0.1.10`,betterAuth:`1.4.0`,drizzleOrm:`0.45.1`,nextIntl:`4.8.2`,nextThemes:`0.4.6`,lucideReact:`0.563.0`,postgres:`3.4.5`,reactHookForm:`7.71.1`,hookformResolvers:`5.2.2`,zod:`3.24.1`,tanstackReactQuery:`5.60.5`,tanstackReactTable:`8.21.3`,next:`16.1.6`,react:`19.2.3`,reactDom:`19.2.3`,drizzleKit:`0.31.10`,tsx:`4.19.2`,babelReactCompiler:`1.0.0`};async function h(e,t,n){await g(e,t),n?.(`Workspace root created`),n?.(`Creating admin app...`),await v(e,t),n?.(`Admin app created`),n?.(`Creating web app...`),await y(e,t),n?.(`Web app created`),await _(e,t),n?.(`Shared config package created`)}async function g(t,n){let{name:r}=n;await o(t,{recursive:!0}),await e(d(t,`pnpm-workspace.yaml`),`packages:
+  - 'packages/*'
+  - 'apps/*'
 
-/** Taxonomy entities keyed by name */
-export const taxonomyVocabularies = {
-  category: Category,
-  department: Department,
-  ticket_tag: TicketTag,
-}
+ignoredBuiltDependencies:
+  - sharp
+  - unrs-resolver
+`),await e(d(t,`package.json`),`${JSON.stringify({name:`@${r}/monorepo`,version:`0.0.0`,private:!0,type:`module`,scripts:{dev:`turbo dev`,build:`turbo build`,"db:generate":`tsx --env-file=.env packages/config/scripts/generate-schema.ts`,"db:migrate:generate":`drizzle-kit generate --config packages/config/drizzle.config.ts`,"db:migrate":`tsx --env-file=.env packages/config/scripts/migrate.ts`,"db:reset":`tsx --env-file=.env packages/config/scripts/reset-db.ts`},devDependencies:{turbo:`^2.3.3`,typescript:`^5.7.3`,tsx:`^${m.tsx}`,"drizzle-kit":`^${m.drizzleKit}`}},null,2)}\n`),await e(d(t,`.gitignore`),`# dependencies
+node_modules/
 
-/** Entities exposed via generic CRUD API handler */
-export const crudEntities = [Article, Media, Ticket, TicketMessage, TicketAttachment]
+# build
+dist/
+.next/
+.turbo/
 
-/** Plugin resources for the permission catalog */
-export const pluginResources = [
-  { resource: 'storage', actions: ['view', 'create', 'update', 'delete'] },
-  { resource: 'settings', actions: ['view', 'update'] },
-  { resource: 'audit-logs', actions: ['view'] },
-  { resource: 'permissions', actions: ['view', 'create', 'update', 'delete'] },
-  { resource: 'ticketing', actions: ['view', 'create', 'update', 'delete'] },
-]
-`),await n(a(e,`lib/content-locale.ts`),`import { cookies } from 'next/headers'
-import { hasLocale } from 'next-intl'
-import { routing } from '@/i18n/routing'
+# env
+.env*
+!.env.example
 
-/**
- * Get the content editing locale from the cookie, falling back to the interface locale.
- */
-export async function getContentLocale(interfaceLocale: string): Promise<string> {
-  const jar = await cookies()
-  const raw = jar.get('content-locale')?.value
-  if (raw && hasLocale(routing.locales, raw)) return raw
-  return interfaceLocale
-}
-`),await n(a(e,`lib/with-admin-context.ts`),`import { getContentConfig } from '@murumets-ee/content/plugin'
-import type { RequestContext } from '@murumets-ee/core'
-import { runWithContextAsync } from '@murumets-ee/core'
-import { getToolkitApp } from './app'
-import { getContentLocale } from './content-locale'
+# toolkit generated
+generated/
 
-export async function withAdminContext<T>(
-  interfaceLocale: string,
-  fn: (ctx: { locale: string; defaultLocale: string }) => Promise<T>,
-): Promise<T> {
-  const app = await getToolkitApp()
-  const contentLocale = await getContentLocale(interfaceLocale)
-  const { defaultLocale } = getContentConfig()
+# IDE
+.vscode/
+.idea/
 
-  const context: RequestContext = {
-    locale: contentLocale,
-    defaultLocale,
-    app,
-  }
+# OS
+.DS_Store
+Thumbs.db
+
+# logs
+*.log
+
+# migrations meta
+migrations/
+
+# turbo
+.turbo/
+`),await e(d(t,`.env.example`),`DATABASE_URL=postgresql://${r}:${r}_dev_password@localhost:5432/${r}_dev
+BETTER_AUTH_SECRET=dev-secret-change-me-in-production-min-32-chars
+BETTER_AUTH_URL=http://localhost:3000
+LOG_LEVEL=debug
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+QUEUE_WORKER=true
+RESEND_API_KEY=
+RESEND_WEBHOOK_SECRET=
+MAIL_FROM=noreply@example.com
+CSAT_SECRET=
+`),await e(d(t,`docker-compose.yml`),`services:
+  postgres:
+    image: postgres:17-alpine
+    container_name: ${r}-postgres
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${r}
+      POSTGRES_PASSWORD: ${r}_dev_password
+      POSTGRES_DB: ${r}_dev
+    ports:
+      - "5432:5432"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${r} -d ${r}_dev"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  postgres_data:
+    name: ${r}_postgres_data
+`)}async function _(t,n){let{name:r}=n,i=d(t,`packages/config`);await e(d(i,`package.json`),`${JSON.stringify({name:`@${r}/config`,version:`0.1.0`,private:!0,type:`module`,exports:{".":`./toolkit.config.ts`,"./entities":`./entities/index.ts`,"./entities/*":`./entities/*`,"./app":`./lib/app.ts`,"./auth":`./lib/auth.ts`,"./auth-client":`./lib/auth-client.ts`},dependencies:{"@murumets-ee/core":`^${m.myorgCore}`,"@murumets-ee/db":`^${m.myorgDb}`,"@murumets-ee/entity":`^${m.myorgEntity}`,"@murumets-ee/logging":`^${m.myorgLogging}`,"@murumets-ee/auth":`^${m.myorgAuth}`,"better-auth":`^${m.betterAuth}`,"drizzle-orm":`^${m.drizzleOrm}`,postgres:`^${m.postgres}`,zod:`^${m.zod}`}},null,2)}\n`),await e(d(i,`tsconfig.json`),`${JSON.stringify({compilerOptions:{target:`ES2022`,module:`ESNext`,moduleResolution:`Bundler`,strict:!0,esModuleInterop:!0,skipLibCheck:!0,resolveJsonModule:!0},include:[`**/*.ts`]},null,2)}\n`),await e(d(i,`toolkit.config.ts`),`import { auth } from '@murumets-ee/auth/plugin'
+import { content } from '@murumets-ee/content/plugin'
+import { defineConfig } from '@murumets-ee/core'
+import { logging } from '@murumets-ee/logging/plugin'
+import { mail, ResendMailProvider } from '@murumets-ee/mail'
+import { media } from '@murumets-ee/media/plugin'
+import { queue } from '@murumets-ee/queue/plugin'
+import { settings } from '@murumets-ee/settings/plugin'
+import { storage } from '@murumets-ee/storage/plugin'
+import { taxonomy } from '@murumets-ee/taxonomy/plugin'
+import { ticketing } from '@murumets-ee/ticketing/plugin'
+import { Article, Category } from './entities'
+import * as authSchema from './generated/auth-schema'
 
-  return runWithContextAsync(context, () => fn({ locale: contentLocale, defaultLocale }))
+if (!process.env.DATABASE_URL) {
+  throw new Error('DATABASE_URL environment variable is required')
 }
-`),await n(a(e,`lib/load-roles.ts`),`import { buildInitialRoleDefinitions } from '@murumets-ee/auth'
-import type { ToolkitApp } from '@murumets-ee/core'
-import { createSettingsClient } from '@murumets-ee/settings'
-import { permissionSettings } from '@/settings/permissions'
-
-export async function loadRoles(
-  app: ToolkitApp,
-): Promise<Record<string, Record<string, string[]>>> {
-  const client = createSettingsClient(permissionSettings, { app })
-  const saved = await client.get('roles')
-
-  if (saved) return saved
-
-  // First run — seed built-in roles with zero permissions
-  const initial = buildInitialRoleDefinitions()
-  await client.set('roles', initial)
-  return initial
+
+export default defineConfig({
+  db: {
+    url: process.env.DATABASE_URL,
+    poolMin: 2,
+    poolMax: 10,
+  },
+  logging: {
+    level: (process.env.LOG_LEVEL || 'info') as 'debug' | 'info' | 'warn' | 'error',
+    name: '${r}',
+  },
+  entities: [Category, Article],
+  plugins: [
+    auth({ providers: ['email'], schema: authSchema }),
+    content({
+      locales: [{ code: 'en', label: 'English' }],
+      defaultLocale: 'en',
+    }),
+    logging(),
+    settings(),
+    storage(),
+    media(),
+    taxonomy(),
+    queue(),
+    mail({
+      provider: process.env.RESEND_API_KEY
+        ? new ResendMailProvider({ apiKey: process.env.RESEND_API_KEY })
+        : undefined,
+      defaultFrom: process.env.MAIL_FROM ?? 'noreply@example.com',
+      webhookSecret: process.env.RESEND_WEBHOOK_SECRET,
+    }),
+    ticketing({
+      csatSecret: process.env.CSAT_SECRET,
+    }),
+  ],
+  projectRoot: import.meta.dirname,
+})
+`),await e(d(i,`auth.config.ts`),`import { betterAuth } from 'better-auth'
+import { drizzleAdapter } from 'better-auth/adapters/drizzle'
+import { admin } from 'better-auth/plugins'
+import { organization } from 'better-auth/plugins/organization'
+import { drizzle } from 'drizzle-orm/postgres-js'
+import postgres from 'postgres'
+
+const sql = postgres(process.env.DATABASE_URL!)
+const db = drizzle(sql)
+
+export const auth = betterAuth({
+  database: drizzleAdapter(db, { provider: 'pg' }),
+  emailAndPassword: { enabled: true },
+  plugins: [
+    admin(),
+    organization(),
+  ],
+})
+`),await e(d(i,`drizzle.config.ts`),`import type { Config } from 'drizzle-kit'
+
+if (!process.env.DATABASE_URL) {
+  throw new Error('DATABASE_URL environment variable is required')
 }
-`),await n(a(e,`settings/permissions.ts`),`import { defineSettings, setting } from '@murumets-ee/settings'
 
-export const permissionSettings = defineSettings({
-  namespace: 'permissions',
+export default {
+  schema: ['./generated/schema.ts', './generated/auth-schema.ts'],
+  out: './migrations',
+  dialect: 'postgresql',
+  dbCredentials: {
+    url: process.env.DATABASE_URL,
+  },
+} satisfies Config
+`),await e(d(i,`entities/index.ts`),`export { Article } from './article'
+export { Category } from './category'
+`),await e(d(i,`entities/article.ts`),`import { behavior, defineEntity, field } from '@murumets-ee/entity'
+
+export const Article = defineEntity({
+  name: 'article',
+  fields: {
+    title: field.text({ required: true, maxLength: 200, indexed: true, translatable: true }),
+    slug: field.slug({ from: 'title', unique: true }),
+    excerpt: field.text({ maxLength: 500, translatable: true }),
+    body: field.richtext(),
+    viewCount: field.number({ default: 0, integer: true }),
+    featured: field.boolean({ default: false }),
+    publishDate: field.date(),
+    contentType: field.select({ options: ['news', 'tutorial', 'announcement'], default: 'news' }),
+    category: field.reference({ entity: 'category', required: false }),
+    tags: field.reference({ entity: 'category', cardinality: 'many' }),
+    coverImage: field.media({ accept: ['image/*'] }),
+  },
+  behaviors: [
+    behavior.publishable(),
+    behavior.auditable(),
+    behavior.sluggable('title'),
+    behavior.revisionable(),
+  ],
   scope: 'global',
-  label: 'Permissions',
-  schema: {
-    roles: setting.json<Record<string, Record<string, string[]>>>(),
+  access: {
+    view: 'public',
+    create: 'group.editor',
+    update: 'group.editor',
+    delete: 'group.admin',
   },
 })
-`),await n(a(e,`settings/site.ts`),`import { defineSettings, setting } from '@murumets-ee/settings'
+`),await e(d(i,`entities/category.ts`),`import { defineEntity, field } from '@murumets-ee/entity'
 
-export const siteSettings = defineSettings({
-  namespace: 'site',
+export const Category = defineEntity({
+  name: 'category',
+  fields: {
+    name: field.text({ required: true, maxLength: 100, indexed: true, translatable: true }),
+    slug: field.slug({ from: 'name', unique: true }),
+    description: field.text({ maxLength: 500, translatable: true }),
+  },
   scope: 'global',
-  label: 'Site Settings',
-  schema: {
-    siteName: setting.text({ default: 'My Site', label: 'Site Name', translatable: true }),
-    siteDescription: setting.text({ label: 'Site Description', translatable: true }),
-    maintenanceMode: setting.boolean({ default: false, label: 'Maintenance Mode' }),
-    postsPerPage: setting.number({
-      default: 10,
-      min: 1,
-      max: 100,
-      integer: true,
-      label: 'Posts Per Page',
-    }),
+  access: {
+    view: 'public',
+    create: 'group.editor',
+    update: 'group.editor',
+    delete: 'group.admin',
   },
 })
-`),await n(a(e,`app/admin-layout.tsx`),`'use client'
-
-import type { LinkComponent, SidebarNavGroup } from '@murumets-ee/admin-ui'
-import { AdminShell } from '@murumets-ee/admin-ui'
-import type { AdminNavGroup } from '@murumets-ee/admin-ui/server'
-import {
-  Activity,
-  Building2,
-  FileText,
-  FolderTree,
-  Home,
-  Image,
-  ImageDown,
-  Inbox,
-  Kanban,
-  Lock,
-  PenTool,
-  ShieldCheck,
-  Tag,
-  Tags,
-  Ticket,
-  Users,
-  type LucideIcon,
-} from 'lucide-react'
-import type { ReactNode } from 'react'
-import { Link, usePathname } from '@/i18n/navigation'
-
-/** Map from icon name strings (from entity admin config) to Lucide components */
-const ICON_MAP: Record<string, LucideIcon> = {
-  'file-text': FileText,
-  'folder-tree': FolderTree,
-  tags: Tags,
-  ticket: Ticket,
-}
+`),await e(d(i,`lib/app.ts`),`import { createApp, setApp, type ToolkitApp } from '@murumets-ee/core'
+import config from '../toolkit.config'
+
+let appInstance: ToolkitApp | null = null
 
-interface AdminLayoutProps {
-  children: ReactNode
-  defaultOpen?: boolean
-  headerActions?: ReactNode
-  sidebarFooter?: ReactNode
-  entityNavGroups?: AdminNavGroup[]
+export async function getToolkitApp(): Promise<ToolkitApp> {
+  if (!appInstance) {
+    appInstance = await createApp(config)
+    setApp(appInstance)
+  }
+  return appInstance
 }
+`),await e(d(i,`lib/auth.ts`),`import { getAuth } from '@murumets-ee/auth'
+import { getToolkitApp } from './app'
 
-export function AdminLayout({
-  children,
-  defaultOpen,
-  headerActions,
-  sidebarFooter,
-  entityNavGroups,
-}: AdminLayoutProps) {
-  const pathname = usePathname()
+await getToolkitApp()
 
-  const dynamicGroups: SidebarNavGroup[] = (entityNavGroups ?? []).map((group) => ({
-    label: group.label,
-    items: group.items.map((item) => ({
-      label: item.label,
-      href: item.href,
-      icon: item.iconName ? ICON_MAP[item.iconName] : undefined,
-    })),
-  }))
-
-  const staticBefore: SidebarNavGroup = {
-    items: [
-      { label: 'Home', href: '/', icon: Home },
-      { label: 'Admin', href: '/admin', icon: PenTool },
-    ],
-  }
+export const auth = getAuth()
+`),await e(d(i,`lib/auth-client.ts`),`import { createClient } from '@murumets-ee/auth/client'
 
-  const supportGroup: SidebarNavGroup = {
-    label: 'Support',
-    items: [
-      { label: 'Tickets', href: '/admin/tickets', icon: Inbox },
-      { label: 'Board', href: '/admin/tickets/board', icon: Kanban },
-      { label: 'Departments', href: '/admin/departments', icon: Building2 },
-      { label: 'Ticket Tags', href: '/admin/ticket-tags', icon: Tag },
-    ],
-  }
+export const authClient = createClient()
+`),await e(d(i,`generated/auth-schema.ts`),`// This file is generated by better-auth CLI.
+// Run: npx @better-auth/cli generate --config auth.config.ts -y
+export {}
+`),await e(d(i,`scripts/generate-schema.ts`),`/**
+ * Generate Drizzle schemas from entity definitions
+ */
 
-  const systemGroup: SidebarNavGroup = {
-    label: 'System',
-    items: [
-      { label: 'Users', href: '/admin/users', icon: Users },
-      { label: 'Roles', href: '/admin/roles', icon: ShieldCheck },
-      { label: 'Permissions', href: '/admin/permissions', icon: Lock },
-      { label: 'Media', href: '/admin/media', icon: Image },
-      { label: 'Image Styles', href: '/admin/media/image-styles', icon: ImageDown },
-      { label: 'Activity', href: '/admin/activity', icon: Activity },
-    ],
-  }
+import { mkdir, writeFile } from 'node:fs/promises'
+import { join } from 'node:path'
+import { generateSchemaCode, generateTranslationSchemaCode } from '@murumets-ee/entity'
+import config from '../toolkit.config'
 
-  const navGroups: SidebarNavGroup[] = [
-    staticBefore,
-    ...dynamicGroups,
-    supportGroup,
-    systemGroup,
-  ]
+async function generateSchemas() {
+  console.log('Generating Drizzle schemas from entity definitions...')
 
-  return (
-    <AdminShell
-      defaultOpen={defaultOpen}
-      sidebar={{
-        navGroups,
-        pathname,
-        Link: Link as unknown as LinkComponent,
-        logo: (
-          <div className="flex h-8 items-center gap-2 px-2">
-            <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 truncate">
-              Admin
-            </span>
-          </div>
-        ),
-        footer: sidebarFooter,
-      }}
-      header={{
-        actions: headerActions,
-      }}
-    >
-      {children}
-    </AdminShell>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/layout.tsx`),`import { buildAdminNav } from '@murumets-ee/admin-ui/server'
-import { cookies, headers } from 'next/headers'
-import { redirect } from 'next/navigation'
-import { Suspense } from 'react'
-import { allEntities } from '@/lib/admin-config'
-import { auth } from '@/lib/auth'
-import { AdminLayout } from '../../admin-layout'
-import { ThemeToggle } from '../../theme-toggle'
-
-async function DynamicShell({
-  children,
-  interfaceLocale,
-}: {
-  children: React.ReactNode
-  interfaceLocale: string
-}) {
-  const h = await headers()
-  const session = await auth.api.getSession({ headers: h })
-  if (!session?.user) {
-    redirect(\`/\${interfaceLocale}/auth/sign-in\`)
-  }
+  const schemaDir = join(import.meta.dirname, '..', 'generated')
+  await mkdir(schemaDir, { recursive: true })
 
-  const jar = await cookies()
-  const sidebarOpen = jar.get('sidebar:state')?.value !== 'false'
-  const entityNavGroups = buildAdminNav(allEntities, { basePath: '/admin' })
+  const imports: string[] = []
+  const schemas: string[] = []
+  let hasTranslations = false
 
-  return (
-    <AdminLayout
-      defaultOpen={sidebarOpen}
-      entityNavGroups={entityNavGroups}
-      sidebarFooter={
-        <div className="flex justify-center gap-2">
-          <ThemeToggle />
-        </div>
-      }
-    >
-      {children}
-    </AdminLayout>
-  )
-}
+  for (const entity of config.entities) {
+    console.log(\`  - Generating schema for \${entity.name}\`)
 
-export default async function ShellLayout({
-  children,
-  params,
-}: {
-  children: React.ReactNode
-  params: Promise<{ locale: string }>
-}) {
-  const { locale } = await params
+    const schemaCode = generateSchemaCode(entity)
+    schemas.push(\`\\n// \${entity.name} table\`)
+    schemas.push(schemaCode)
 
-  return (
-    <Suspense>
-      <DynamicShell interfaceLocale={locale}>{children}</DynamicShell>
-    </Suspense>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/layout.tsx`),`import { headers } from 'next/headers'
-import { redirect } from 'next/navigation'
-import { auth } from '@/lib/auth'
-
-const ALLOWED_ROLES = new Set(['admin', 'editor'])
-
-export default async function AdminGuardLayout({
-  children,
-  params,
-}: {
-  children: React.ReactNode
-  params: Promise<{ locale: string }>
-}) {
-  const { locale } = await params
-  const h = await headers()
-  const session = await auth.api.getSession({ headers: h })
-
-  if (!session?.user) {
-    redirect(\`/\${locale}/auth/sign-in\`)
-  }
-
-  const role = (session.user as Record<string, unknown>).role as string | undefined
-  if (!role || !ALLOWED_ROLES.has(role)) {
-    redirect(\`/\${locale}\`)
-  }
-
-  return <>{children}</>
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/page.tsx`),`import { setRequestLocale } from 'next-intl/server'
-
-export default async function AdminDashboard({ params }: { params: Promise<{ locale: string }> }) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  return (
-    <div className="p-6">
-      <h1 className="text-2xl font-bold mb-4">Dashboard</h1>
-      <p className="text-muted-foreground">
-        Welcome to the admin panel. Use the sidebar to manage your content.
-      </p>
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/[entity]/page.tsx`),`import { EntityList } from '@murumets-ee/admin-ui/entity-list'
-import {
-  entityNameToSlug,
-  fetchEntityList,
-  getEntityLabel,
-  resolveEntityFromSlug,
-  toEntityMeta,
-} from '@murumets-ee/admin-ui/server'
-import { getContentConfig } from '@murumets-ee/content/plugin'
-import { notFound } from 'next/navigation'
-import { setRequestLocale } from 'next-intl/server'
-import { allEntities, taxonomyVocabularies } from '@/lib/admin-config'
-import { withAdminContext } from '@/lib/with-admin-context'
-
-interface EntityListPageProps {
-  params: Promise<{ locale: string; entity: string }>
-}
-
-export default async function EntityListPage({ params }: EntityListPageProps) {
-  const { locale, entity: entitySlug } = await params
-  setRequestLocale(locale)
-
-  const entity = resolveEntityFromSlug(entitySlug, allEntities)
-  if (!entity) notFound()
-
-  const admin = entity.admin
-  const meta = toEntityMeta(entity)
-  const urlSlug = entityNameToSlug(entity.name)
-  const hasTranslatable = Object.values(entity.allFields).some((f) => f.translatable)
-  const isPublishable = entity.behaviors?.some((b) => b.name === 'publishable')
-  const isTaxonomy = entity.name in taxonomyVocabularies
-
-  return withAdminContext(locale, async ({ locale: contentLocale, defaultLocale }) => {
-    let locales: Array<{ code: string; label: string }> | undefined
-    if (hasTranslatable) {
-      try {
-        const config = getContentConfig()
-        locales = config.locales
-      } catch {
-        // content plugin not available
-      }
-    }
-
-    const initialData = await fetchEntityList(entity, {
-      sortField: admin?.defaultSort ?? 'createdAt',
-      sortDirection: admin?.defaultSortDirection ?? 'desc',
-      limit: admin?.pageSize ?? 20,
-      locale: contentLocale,
-      includeTranslationStatus: hasTranslatable,
-    })
-
-    return (
-      <div className="p-6">
-        <div className="mb-6">
-          <h1 className="text-2xl font-bold">{getEntityLabel(entity)}</h1>
-          {admin?.description && (
-            <p className="text-sm text-muted-foreground">{admin.description}</p>
-          )}
-        </div>
-        <EntityList
-          entity={meta}
-          allowDelete
-          allowStatusToggle={isPublishable}
-          {...(isTaxonomy ? { apiBasePath: '/api/admin/taxonomy', entityPath: entity.name } : {})}
-          defaultSort={admin?.defaultSort ?? 'createdAt'}
-          defaultSortDirection={admin?.defaultSortDirection ?? 'desc'}
-          hiddenColumns={admin?.hiddenColumns}
-          pageSize={admin?.pageSize}
-          locale={contentLocale}
-          locales={locales}
-          defaultLocale={defaultLocale}
-          showTranslationStatus={hasTranslatable && !!locales}
-          searchPlaceholder={\`Search \${getEntityLabel(entity).toLowerCase()}...\`}
-          editHref={\`/\${locale}/admin/\${urlSlug}/:id\`}
-          createHref={admin?.disableCreate ? undefined : \`/\${locale}/admin/\${urlSlug}/new\`}
-          initialData={initialData}
-        />
-      </div>
-    )
-  })
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/[entity]/[id]/page.tsx`),`import {
-  entityNameToSlug,
-  fetchReferenceOptions,
-  getBlocksFieldName,
-  getEntityLabelSingular,
-  getReferenceFields,
-  inferRootFields,
-  resolveEntityFromSlug,
-  toEntityMeta,
-} from '@murumets-ee/admin-ui/server'
-import { buildPermissionChecker } from '@murumets-ee/auth'
-import { ContentClient } from '@murumets-ee/content/client'
-import { LockService } from '@murumets-ee/content/lock'
-import { createAdminClient } from '@murumets-ee/core/clients'
-import { getApp } from '@murumets-ee/core'
-import { prepareBlockEditor } from '@murumets-ee/editor/server'
-import { headers } from 'next/headers'
-import { notFound } from 'next/navigation'
-import { setRequestLocale } from 'next-intl/server'
-import { GenericBlockEditor } from '@murumets-ee/admin-ui/content-editor'
-import { GenericEntityForm } from '@murumets-ee/admin-ui/entity-form'
-import { allEntities } from '@/lib/admin-config'
-import { auth } from '@/lib/auth'
-import { loadRoles } from '@/lib/load-roles'
-import { withAdminContext } from '@/lib/with-admin-context'
-
-interface EditEntityPageProps {
-  params: Promise<{ locale: string; entity: string; id: string }>
-}
-
-export default async function EditEntityPage({ params }: EditEntityPageProps) {
-  const { locale, entity: entitySlug, id } = await params
-  setRequestLocale(locale)
-
-  const entity = resolveEntityFromSlug(entitySlug, allEntities)
-  if (!entity) notFound()
-
-  const blocksField = getBlocksFieldName(entity)
-  const urlSlug = entityNameToSlug(entity.name)
-
-  return withAdminContext(locale, async ({ locale: contentLocale, defaultLocale }) => {
-    const client = createAdminClient(entity)
-    const isDefaultLocale = contentLocale === defaultLocale
-    const isNonDefaultLocale = !isDefaultLocale
-
-    const isVersionable = entity.behaviors?.some((b) => b.name === 'versionable') ?? false
-    const isPublishable = entity.behaviors?.some((b) => b.name === 'publishable') ?? false
-
-    let draft: { data: Record<string, unknown>; createdBy: string; createdByName: string | null; updatedAt: Date | string } | undefined
-    let canPublish = false
-    let lockResult: { acquired: boolean; lock?: { lockedBy: string; lockedByName: string | null; lockedAt: Date | string; expiresAt: Date | string } | null } | undefined
-    const enableLocking = isPublishable
-
-    if (isPublishable) {
-      try {
-        const app = getApp()
-        const contentClient = new ContentClient({ entity, db: app.db.readWrite })
-        const lockLocale = isDefaultLocale ? '_' : contentLocale
-
-        const draftEntry = await contentClient.getDraft(id, lockLocale)
-        if (draftEntry) {
-          draft = {
-            data: draftEntry.data,
-            createdBy: draftEntry.createdBy,
-            createdByName: draftEntry.createdByName,
-            updatedAt: draftEntry.updatedAt,
-          }
-        }
-
-        const session = await auth.api.getSession({ headers: await headers() })
-        if (session?.user) {
-          const role = (session.user as Record<string, unknown>).role as string | undefined
-          if (role) {
-            const roles = await loadRoles(app)
-            const checker = buildPermissionChecker(roles)
-            canPublish = checker(role, entity.name, 'publish')
-          }
-
-          const lockService = new LockService({ db: app.db.readWrite })
-          const result = await lockService.acquireLock(
-            entity.name, id, lockLocale,
-            { id: session.user.id, name: session.user.name ?? undefined },
-          )
-          if (result.acquired) {
-            lockResult = { acquired: true }
-          } else {
-            lockResult = { acquired: false, lock: result.lock }
-          }
-        }
-      } catch {
-        // Draft/permission/lock errors — proceed without
-      }
-    }
-
-    // Block editor entity
-    if (blocksField) {
-      const record = isDefaultLocale
-        ? await client.findById(id, { defaultLocale })
-        : await client.findById(id, { locale: contentLocale, defaultLocale })
-      if (!record) notFound()
-
-      const rootFields = inferRootFields(entity, blocksField)
-      const { blocks, initialData, mediaUrls, rootData, rootFieldDefs } =
-        await prepareBlockEditor(
-          entity as Parameters<typeof prepareBlockEditor>[0],
-          blocksField,
-          record,
-          { rootFields },
-        )
-
-      return (
-        <div className="flex h-[calc(100vh-3.5rem)] flex-col">
-          <div className="flex items-center gap-3 border-b px-6 py-3">
-            <h1 className="text-lg font-semibold">
-              {(record.title as string) ?? \`Untitled \${getEntityLabelSingular(entity)}\`}
-            </h1>
-            <span className="rounded bg-muted px-2 py-0.5 text-xs text-muted-foreground uppercase">
-              {contentLocale}
-            </span>
-          </div>
-          <div className="flex-1 overflow-hidden">
-            <GenericBlockEditor
-              key={contentLocale}
-              entityId={id}
-              entityName={entity.name}
-              blocksField={blocksField}
-              blocks={blocks}
-              initialData={initialData}
-              mediaUrls={mediaUrls}
-              rootData={rootData}
-              rootFieldDefs={rootFieldDefs}
-              saveLabel="Save"
-              locale={contentLocale}
-              defaultLocale={defaultLocale}
-              versionable={isVersionable}
-              isPublishable={isPublishable}
-              draft={draft}
-              canPublish={canPublish}
-              enableLocking={enableLocking}
-              lockResult={lockResult}
-            />
-          </div>
-        </div>
-      )
-    }
-
-    // Form entity
-    const [record, defaultLocaleData] = await Promise.all([
-      client.findById(id, { locale: contentLocale }),
-      isNonDefaultLocale ? client.findById(id) : Promise.resolve(null),
-    ])
-    if (!record) notFound()
-
-    const refFields = getReferenceFields(entity)
-    const referenceOptions: Record<string, Array<{ id: string; label: string }>> = {}
-
-    if (refFields.length > 0) {
-      const optionPromises = refFields.map(async ({ fieldName, entityName }) => {
-        const refEntity = allEntities.find((e) => e.name === entityName)
-        if (!refEntity) return { fieldName, options: [] }
-        const options = await fetchReferenceOptions(refEntity, { locale: contentLocale })
-        return { fieldName, options }
-      })
-      const results = await Promise.all(optionPromises)
-      for (const { fieldName, options } of results) {
-        referenceOptions[fieldName] = options
-      }
-    }
-
-    return (
-      <div className="p-6">
-        <div className="mb-6">
-          <h1 className="text-2xl font-bold">Edit {getEntityLabelSingular(entity)}</h1>
-        </div>
-        <GenericEntityForm
-          entity={toEntityMeta(entity)}
-          id={id}
-          locale={contentLocale}
-          defaultLocale={defaultLocale}
-          defaultLocaleData={
-            isNonDefaultLocale && defaultLocaleData
-              ? (defaultLocaleData as Record<string, unknown>)
-              : undefined
-          }
-          initialData={record as Record<string, unknown>}
-          referenceOptions={referenceOptions}
-          listUrl={\`/\${locale}/admin/\${urlSlug}\`}
-          versionable={isVersionable}
-          draft={draft}
-          canPublish={canPublish}
-          enableLocking={enableLocking}
-          lockResult={lockResult}
-        />
-      </div>
-    )
-  })
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/[entity]/new/page.tsx`),`import {
-  entityNameToSlug,
-  fetchReferenceOptions,
-  getBlocksFieldName,
-  getEntityLabelSingular,
-  getReferenceFields,
-  resolveEntityFromSlug,
-  toEntityMeta,
-} from '@murumets-ee/admin-ui/server'
-import { createAdminClient } from '@murumets-ee/core/clients'
-import { notFound, redirect } from 'next/navigation'
-import { setRequestLocale } from 'next-intl/server'
-import { GenericEntityForm } from '@murumets-ee/admin-ui/entity-form'
-import { allEntities } from '@/lib/admin-config'
-import { withAdminContext } from '@/lib/with-admin-context'
-
-interface NewEntityPageProps {
-  params: Promise<{ locale: string; entity: string }>
-}
-
-export default async function NewEntityPage({ params }: NewEntityPageProps) {
-  const { locale, entity: entitySlug } = await params
-  setRequestLocale(locale)
-
-  const entity = resolveEntityFromSlug(entitySlug, allEntities)
-  if (!entity) notFound()
-  if (entity.admin?.disableCreate) notFound()
-
-  const blocksField = getBlocksFieldName(entity)
-  const urlSlug = entityNameToSlug(entity.name)
-
-  return withAdminContext(locale, async ({ locale: contentLocale }) => {
-    // Block editor entities: create a draft and redirect to the edit page
-    if (blocksField) {
-      const client = createAdminClient(entity)
-      const draft = await client.create({ title: 'Untitled' })
-      const newId = (draft as Record<string, unknown>).id as string
-      redirect(\`/\${locale}/admin/\${urlSlug}/\${newId}\`)
-    }
-
-    // Form entities: render the create form
-    const refFields = getReferenceFields(entity)
-    const referenceOptions: Record<string, Array<{ id: string; label: string }>> = {}
-
-    if (refFields.length > 0) {
-      const optionPromises = refFields.map(async ({ fieldName, entityName }) => {
-        const refEntity = allEntities.find((e) => e.name === entityName)
-        if (!refEntity) return { fieldName, options: [] }
-        const options = await fetchReferenceOptions(refEntity, { locale: contentLocale })
-        return { fieldName, options }
-      })
-      const results = await Promise.all(optionPromises)
-      for (const { fieldName, options } of results) {
-        referenceOptions[fieldName] = options
-      }
+    const translationCode = generateTranslationSchemaCode(entity)
+    if (translationCode) {
+      hasTranslations = true
+      schemas.push(\`\\n// \${entity.name} translations\`)
+      schemas.push(translationCode)
     }
-
-    return (
-      <div className="p-6">
-        <div className="mb-6">
-          <h1 className="text-2xl font-bold">New {getEntityLabelSingular(entity)}</h1>
-        </div>
-        <GenericEntityForm
-          entity={toEntityMeta(entity)}
-          locale={contentLocale}
-          referenceOptions={referenceOptions}
-          listUrl={\`/\${locale}/admin/\${urlSlug}\`}
-        />
-      </div>
-    )
-  })
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/media/page.tsx`),`import { EntityList } from '@murumets-ee/admin-ui/entity-list'
-import { fetchEntityList, toEntityMeta } from '@murumets-ee/admin-ui/server'
-import { Media } from '@murumets-ee/media'
-import { getMediaClient } from '@murumets-ee/media/client'
-import { setRequestLocale } from 'next-intl/server'
-
-export default async function MediaListPage({ params }: { params: Promise<{ locale: string }> }) {
-  const { locale } = await params
-  setRequestLocale(locale)
-  const initialData = await fetchEntityList(Media, { sortField: 'createdAt' })
-
-  const mediaClient = await getMediaClient()
-  const ids = initialData.items.map((i) => i.id as string)
-  const thumbMap = await mediaClient.getVariantUrls(ids, 'thumbnail')
-  for (const item of initialData.items) {
-    item.thumbnailUrl = thumbMap.get(item.id as string) ?? ''
-  }
-
-  return (
-    <div className="p-6">
-      <div className="mb-6">
-        <h1 className="text-2xl font-bold">Media</h1>
-        <p className="text-sm text-muted-foreground">
-          Manage uploaded media files.
-        </p>
-      </div>
-      <EntityList
-        entity={toEntityMeta(Media)}
-        entityPath="media"
-        image={{ field: 'thumbnailUrl', size: 'sm', shape: 'rounded' }}
-        allowDelete
-        defaultSort="createdAt"
-        searchPlaceholder="Search media..."
-        editHref={\`/\${locale}/admin/media/:id\`}
-        initialData={initialData}
-      />
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/media/[id]/page.tsx`),`import { toEntityMeta } from '@murumets-ee/admin-ui/server'
-import { getCurrentApp } from '@murumets-ee/core'
-import { createAdminClient } from '@murumets-ee/core/clients'
-import { Media } from '@murumets-ee/media'
-import { findMediaUsages } from '@murumets-ee/media/usage'
-import { notFound } from 'next/navigation'
-import { setRequestLocale } from 'next-intl/server'
-import { withAdminContext } from '@/lib/with-admin-context'
-import { MediaForm } from './media-form'
-import { MediaUsagePanel } from './media-usage-panel'
-
-interface MediaEditPageProps {
-  params: Promise<{ locale: string; id: string }>
-}
-
-export default async function MediaEditPage({ params }: MediaEditPageProps) {
-  const { locale, id } = await params
-  setRequestLocale(locale)
-
-  return withAdminContext(locale, async ({ locale: contentLocale }) => {
-    const app = getCurrentApp()!
-    const client = createAdminClient(Media)
-    const [mediaItem, usages] = await Promise.all([
-      client.findById(id, { locale: contentLocale }),
-      findMediaUsages(id, app.db.readWrite),
-    ])
-    if (!mediaItem) notFound()
-
-    return (
-      <div className="p-6">
-        <div className="mb-6">
-          <h1 className="text-2xl font-bold">Edit Media</h1>
-        </div>
-        <div className="grid grid-cols-1 gap-6 lg:grid-cols-3">
-          <div className="lg:col-span-2">
-            <MediaForm
-              entity={toEntityMeta(Media)}
-              id={id}
-              locale={contentLocale}
-              initialData={mediaItem as Record<string, unknown>}
-            />
-          </div>
-          <div>
-            <MediaUsagePanel usages={usages} locale={locale} />
-          </div>
-        </div>
-      </div>
-    )
-  })
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/media/[id]/media-form.tsx`),`'use client'
-
-import { EntityForm } from '@murumets-ee/admin-ui/entity-form'
-import type { EntityMeta } from '@murumets-ee/admin-ui/entity-list'
-import { useRouter } from 'next/navigation'
-
-interface MediaFormProps {
-  entity: EntityMeta
-  id: string
-  locale?: string
-  initialData?: Record<string, unknown>
-}
-
-export function MediaForm({ entity, id, locale, initialData }: MediaFormProps) {
-  const router = useRouter()
-
-  return (
-    <EntityForm
-      entity={entity}
-      id={id}
-      locale={locale}
-      initialData={initialData}
-      entityPath="media"
-      layout="two-column"
-      fields={['title', 'alt', 'description', 'filename', 'mimeType', 'size', 'mediaType']}
-      fieldOverrides={{
-        filename: { readOnly: true, description: 'Original upload filename (read-only)' },
-        mimeType: { readOnly: true, label: 'MIME Type' },
-        size: { readOnly: true, description: 'File size in bytes' },
-        mediaType: { readOnly: true, label: 'Media Type' },
-        alt: { label: 'Alt Text', description: 'Alternative text for accessibility' },
-      }}
-      onSuccess={() => router.push(\`/\${locale}/admin/media\`)}
-      onCancel={() => router.back()}
-    />
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/media/[id]/media-usage-panel.tsx`),`import type { MediaUsage } from '@murumets-ee/media/usage'
-
-interface MediaUsagePanelProps {
-  usages: MediaUsage[]
-  locale: string
-}
-
-export function MediaUsagePanel({ usages, locale }: MediaUsagePanelProps) {
-  return (
-    <div className="rounded-lg border bg-card p-4">
-      <h3 className="mb-3 text-sm font-semibold">Used by</h3>
-
-      {usages.length === 0 && (
-        <p className="text-sm text-muted-foreground">
-          This media item is not referenced by any entity.
-        </p>
-      )}
-
-      {usages.length > 0 && (
-        <ul className="space-y-2">
-          {usages.map((usage) => {
-            const entitySlug = \`\${usage.entityName}s\`
-            const href = \`/\${locale}/admin/\${entitySlug}/\${usage.entityId}\`
-
-            return (
-              <li key={\`\${usage.entityName}-\${usage.entityId}-\${usage.fieldName}\`}>
-                <a
-                  href={href}
-                  className="block rounded-md border px-3 py-2 text-sm hover:bg-muted transition-colors"
-                >
-                  <span className="font-medium capitalize">{usage.entityName}</span>
-                  <span className="mx-1.5 text-muted-foreground">&middot;</span>
-                  <span className="text-muted-foreground">{usage.fieldName}</span>
-                  {usage.context === 'block' && (
-                    <span className="ml-1.5 rounded bg-muted px-1.5 py-0.5 text-xs text-muted-foreground">
-                      block
-                    </span>
-                  )}
-                </a>
-              </li>
-            )
-          })}
-        </ul>
-      )}
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/media/image-styles/page.tsx`),`import { imageStylesSettings } from '@murumets-ee/media'
-import { ImageStylesManager } from '@murumets-ee/media/image-styles'
-import { createSettingsClient } from '@murumets-ee/settings'
-import { setRequestLocale } from 'next-intl/server'
-import { getToolkitApp } from '@/lib/app'
-
-async function loadImageStyles() {
-  const app = await getToolkitApp()
-  const client = createSettingsClient(imageStylesSettings, { app })
-  const styles = await client.get('imageStyles')
-  return styles ?? {}
-}
-
-export default async function ImageStylesPage({ params }: { params: Promise<{ locale: string }> }) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  const initialStyles = await loadImageStyles()
-
-  return (
-    <div className="p-6 max-w-4xl">
-      <ImageStylesManager initialStyles={initialStyles} />
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/users/page.tsx`),`import type { UsersInitialData } from '@murumets-ee/admin-ui/users'
-import { getAuth } from '@murumets-ee/auth'
-import { headers } from 'next/headers'
-import { setRequestLocale } from 'next-intl/server'
-import { getToolkitApp } from '@/lib/app'
-import { UsersPage } from './users-page'
-
-export default async function UsersAdminPage({ params }: { params: Promise<{ locale: string }> }) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  await getToolkitApp()
-  const auth = getAuth()
-
-  const result = await auth.api.listUsers({
-    headers: await headers(),
-    query: { limit: 20, sortBy: 'createdAt', sortDirection: 'desc' },
-  })
-
-  const initialData: UsersInitialData = {
-    users: result.users.map((u) => ({
-      id: u.id,
-      name: u.name,
-      email: u.email,
-      emailVerified: u.emailVerified,
-      image: u.image ?? null,
-      createdAt: u.createdAt instanceof Date ? u.createdAt.toISOString() : String(u.createdAt),
-      updatedAt: u.updatedAt instanceof Date ? u.updatedAt.toISOString() : String(u.updatedAt),
-      role: u.role ?? null,
-      banned: u.banned ?? null,
-      banReason: u.banReason ?? null,
-      banExpires:
-        u.banExpires instanceof Date
-          ? u.banExpires.toISOString()
-          : u.banExpires
-            ? String(u.banExpires)
-            : null,
-    })),
-    total: result.total,
   }
 
-  return (
-    <div className="p-6">
-      <div className="mb-6">
-        <h1 className="text-2xl font-bold">Users</h1>
-        <p className="text-sm text-muted-foreground">Manage user accounts, roles, and access.</p>
-      </div>
-      <UsersPage initialData={initialData} />
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/users/users-page.tsx`),`'use client'
-
-import type { UsersInitialData } from '@murumets-ee/admin-ui/users'
-import { UsersManagement } from '@murumets-ee/admin-ui/users'
-import { createUsersApi } from '@murumets-ee/auth/client'
-import { authClient } from '@/lib/auth-client'
-
-const usersApi = createUsersApi(authClient)
-
-export function UsersPage({ initialData }: { initialData: UsersInitialData }) {
-  const session = authClient.useSession()
-
-  return (
-    <UsersManagement
-      api={usersApi}
-      currentUserId={session.data?.user?.id}
-      roles={['admin', 'editor', 'viewer']}
-      initialData={initialData}
-    />
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/permissions/page.tsx`),`import { PermissionsEditor } from '@murumets-ee/admin-ui/permissions'
-import { BUILT_IN_ROLES, buildResourceCatalog } from '@murumets-ee/auth'
-import { setRequestLocale } from 'next-intl/server'
-import { allEntities, pluginResources } from '@/lib/admin-config'
-import { getToolkitApp } from '@/lib/app'
-import { loadRoles } from '@/lib/load-roles'
-
-export default async function PermissionsPage({ params }: { params: Promise<{ locale: string }> }) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  const app = await getToolkitApp()
-  const savedRoles = await loadRoles(app)
-  const statements = buildResourceCatalog(allEntities, pluginResources)
-
-  return (
-    <div className="p-6">
-      <div className="mb-6">
-        <h1 className="text-2xl font-bold">Permissions</h1>
-        <p className="text-sm text-muted-foreground">
-          Configure what each role can do. Admin always has full access.
-        </p>
-      </div>
-      <PermissionsEditor
-        statements={statements}
-        roles={Object.keys(savedRoles)}
-        builtInRoles={[...BUILT_IN_ROLES]}
-        initialPermissions={savedRoles}
-      />
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/roles/page.tsx`),`import { RolesEditor } from '@murumets-ee/admin-ui/permissions'
-import { BUILT_IN_ROLES } from '@murumets-ee/auth'
-import { setRequestLocale } from 'next-intl/server'
-import { getToolkitApp } from '@/lib/app'
-import { loadRoles } from '@/lib/load-roles'
-
-export default async function RolesPage({ params }: { params: Promise<{ locale: string }> }) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  const app = await getToolkitApp()
-  const savedRoles = await loadRoles(app)
-
-  const roles = [
-    { name: 'admin', builtIn: true, permissionCount: 0 },
-    ...Object.entries(savedRoles).map(([name, perms]) => ({
-      name,
-      builtIn: (BUILT_IN_ROLES as readonly string[]).includes(name),
-      permissionCount: Object.values(perms).flat().length,
-    })),
-  ]
-
-  return (
-    <div className="p-6">
-      <div className="mb-6">
-        <h1 className="text-2xl font-bold">Roles</h1>
-        <p className="text-sm text-muted-foreground">
-          Manage user roles. Built-in roles cannot be deleted.
-        </p>
-      </div>
-      <RolesEditor roles={roles} permissionsHref={\`/\${locale}/admin/permissions\`} />
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/activity/page.tsx`),`import { AuditLog } from '@murumets-ee/admin-ui/audit-log'
-import { fetchAuditLogData } from '@murumets-ee/admin-ui/server'
-import { setRequestLocale } from 'next-intl/server'
-import { withAdminContext } from '@/lib/with-admin-context'
-
-export default async function ActivityPage({ params }: { params: Promise<{ locale: string }> }) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  return withAdminContext(locale, async () => {
-    const initialData = await fetchAuditLogData()
-
-    return (
-      <div className="p-6">
-        <div className="mb-6">
-          <h1 className="text-2xl font-bold">Activity Log</h1>
-          <p className="text-sm text-muted-foreground">
-            Track all content changes across your CMS.
-          </p>
-        </div>
-        <AuditLog
-          initialData={initialData}
-          editHrefPattern={\`/\${locale}/admin/:entityType/:entityId\`}
-        />
-      </div>
-    )
-  })
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/tickets/page.tsx`),`import { Ticket, Department, TicketTag } from '@murumets-ee/ticketing'
-import { headers } from 'next/headers'
-import { setRequestLocale } from 'next-intl/server'
-import { withAdminContext } from '@/lib/with-admin-context'
-import { auth } from '@/lib/auth'
-import { TicketsInboxClient } from './tickets-inbox-client'
-import { fetchEntityList } from '@murumets-ee/admin-ui/server'
-import type {
-  TicketData,
-  DepartmentData,
-  TagData,
-} from '@murumets-ee/ticketing-ui'
-
-interface TicketsPageProps {
-  params: Promise<{ locale: string }>
-}
-
-export default async function TicketsPage({ params }: TicketsPageProps) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  const h = await headers()
-  const session = await auth.api.getSession({ headers: h })
-  const currentUserId = session?.user?.id ?? ''
-
-  return withAdminContext(locale, async () => {
-    const ticketData = await fetchEntityList(Ticket, {
-      sortField: 'lastReplyAt',
-      sortDirection: 'desc',
-      limit: 50,
-    })
-
-    const departmentData = await fetchEntityList(Department, {
-      sortField: 'name',
-      sortDirection: 'asc',
-      limit: 100,
-    })
-
-    const tagData = await fetchEntityList(TicketTag, {
-      sortField: 'name',
-      sortDirection: 'asc',
-      limit: 100,
-    })
-
-    return (
-      <TicketsInboxClient
-        initialTickets={ticketData.items as unknown as TicketData[]}
-        initialTotal={ticketData.total}
-        initialDepartments={departmentData.items as unknown as DepartmentData[]}
-        initialTags={tagData.items as unknown as TagData[]}
-        currentUserId={currentUserId}
-        locale={locale}
-      />
-    )
-  })
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/tickets/tickets-inbox-client.tsx`),`'use client'
-
-import { QueryProvider } from '@murumets-ee/admin-ui'
-import { InboxProvider, TicketInbox } from '@murumets-ee/ticketing-ui/inbox'
-import type {
-  TicketData,
-  DepartmentData,
-  TagData,
-} from '@murumets-ee/ticketing-ui'
-
-interface TicketsInboxClientProps {
-  initialTickets: TicketData[]
-  initialTotal: number
-  initialDepartments: DepartmentData[]
-  initialTags: TagData[]
-  currentUserId: string
-  locale: string
-}
-
-export function TicketsInboxClient({
-  initialTickets,
-  initialTotal,
-  initialDepartments,
-  initialTags,
-  currentUserId,
-}: TicketsInboxClientProps) {
-  return (
-    <QueryProvider>
-      <InboxProvider
-        apiBasePath="/api/admin"
-        initialTickets={initialTickets}
-        initialTotal={initialTotal}
-        initialDepartments={initialDepartments}
-        initialTags={initialTags}
-        currentUserId={currentUserId}
-      >
-        <div className="h-[calc(100vh-3.5rem)]">
-          <TicketInbox currentUserId={currentUserId} />
-        </div>
-      </InboxProvider>
-    </QueryProvider>
-  )
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/tickets/board/page.tsx`),`import { Ticket, Department } from '@murumets-ee/ticketing'
-import { setRequestLocale } from 'next-intl/server'
-import { withAdminContext } from '@/lib/with-admin-context'
-import { fetchEntityList } from '@murumets-ee/admin-ui/server'
-import { TicketBoardClient } from './ticket-board-client'
-import type { TicketData, DepartmentData } from '@murumets-ee/ticketing-ui'
-
-interface TicketBoardPageProps {
-  params: Promise<{ locale: string }>
-}
-
-export default async function TicketBoardPage({ params }: TicketBoardPageProps) {
-  const { locale } = await params
-  setRequestLocale(locale)
-
-  return withAdminContext(locale, async () => {
-    const ticketData = await fetchEntityList(Ticket, {
-      sortField: 'lastReplyAt',
-      sortDirection: 'desc',
-      limit: 200,
-    })
-
-    const departmentData = await fetchEntityList(Department, {
-      sortField: 'name',
-      sortDirection: 'asc',
-      limit: 100,
-    })
-
-    return (
-      <div className="p-6 h-[calc(100vh-3.5rem)]">
-        <div className="mb-4">
-          <h1 className="text-2xl font-bold">Ticket Board</h1>
-          <p className="text-sm text-muted-foreground">
-            Kanban view of tickets by status
-          </p>
-        </div>
-        <TicketBoardClient
-          initialTickets={ticketData.items as unknown as TicketData[]}
-          initialDepartments={departmentData.items as unknown as DepartmentData[]}
-          locale={locale}
-        />
-      </div>
-    )
-  })
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/tickets/board/ticket-board-client.tsx`),`'use client'
+  const pgCoreTypes = ['pgTable', 'varchar', 'text', 'boolean', 'timestamp', 'integer', 'doublePrecision', 'jsonb', 'uuid', 'index']
+  if (hasTranslations) pgCoreTypes.push('unique')
+  const pgCoreImports = \`import { \${pgCoreTypes.join(', ')} } from 'drizzle-orm/pg-core'\\n\`
+  imports.push(pgCoreImports)
 
-import { useMemo } from 'react'
-import { TicketBoard } from '@murumets-ee/ticketing-ui/board'
-import type { TicketData, DepartmentData } from '@murumets-ee/ticketing-ui'
-import { useRouter } from 'next/navigation'
+  const schemaFile = join(schemaDir, 'schema.ts')
+  await writeFile(schemaFile, [...imports, ...schemas].join('\\n'))
 
-interface TicketBoardClientProps {
-  initialTickets: TicketData[]
-  initialDepartments: DepartmentData[]
-  locale: string
+  console.log(\`\\nSchemas written to: \${schemaFile}\`)
+  console.log('Run \\\`pnpm db:migrate:generate\\\` to create migrations')
 }
 
-export function TicketBoardClient({
-  initialTickets,
-  initialDepartments,
-  locale,
-}: TicketBoardClientProps) {
-  const router = useRouter()
-  const departmentMap = useMemo(
-    () => new Map(initialDepartments.map((d) => [d.id, d])),
-    [initialDepartments],
-  )
-
-  return (
-    <TicketBoard
-      tickets={initialTickets}
-      departments={departmentMap}
-      onTicketSelect={(ticket) => {
-        router.push(\`/\${locale}/admin/tickets?selected=\${ticket.id}\`)
-      }}
-      className="h-[calc(100%-4rem)]"
-    />
-  )
-}
-`),await n(a(e,`app/api/ticketing/inbound/route.ts`),`/**
- * Resend inbound email webhook endpoint.
- *
- * Public endpoint (no session auth) — protected by webhook signature
- * verification (HMAC-SHA256). Lives outside the admin API handler
- * because the admin handler requires authentication.
+generateSchemas().catch(console.error)
+`),await e(d(i,`scripts/migrate.ts`),`/**
+ * Run pending migrations
  */
 
-import { getToolkitApp } from '@/lib/app'
-
-await getToolkitApp()
-
-export async function POST(req: Request): Promise<Response> {
-  const { handleInboundWebhook } = await import('@murumets-ee/ticketing')
-  const { QueueClient } = await import('@murumets-ee/queue/client')
-  const { getApp } = await import('@murumets-ee/core')
-
-  const db = getApp().db.readWrite
-  const queueClient = new QueueClient({ db })
-
-  return handleInboundWebhook(req, (type, payload) => queueClient.enqueue(type, payload))
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/seed/actions.ts`),`'use server'
-
-import { AdminClient } from '@murumets-ee/entity/admin'
-import { createTaxonomyClient } from '@murumets-ee/taxonomy/client'
-import { Ticket, TicketMessage, Department, TicketTag } from '@murumets-ee/ticketing'
-import { headers } from 'next/headers'
-import { Article, Category } from '@/entities'
-import { getToolkitApp } from '@/lib/app'
-import { auth } from '@/lib/auth'
-
-async function requireAdmin() {
-  const session = await auth.api.getSession({ headers: await headers() })
-  if (!session?.user) throw new Error('Unauthorized')
-  const role = (session.user as Record<string, unknown>).role as string | undefined
-  if (role !== 'admin') throw new Error('Forbidden: admin role required')
-}
-
-export async function seedContent() {
-  if (process.env.NODE_ENV === 'production') {
-    return { error: 'Seed disabled in production' }
-  }
-
-  await requireAdmin()
-  const app = await getToolkitApp()
-  const categories = createTaxonomyClient(Category)
-  const articles = new AdminClient({
-    entity: Article,
-    db: app.db.readWrite,
-    logger: app.logger.child({ entity: 'article' }),
-  })
-
-  const techCat = await categories.create({ name: 'Technology', slug: 'technology', color: '#3B82F6' })
-  const newsCat = await categories.create({ name: 'News', slug: 'news', color: '#EF4444' })
-
-  await articles.create({
-    title: 'Getting Started with Lumi CMS',
-    slug: 'getting-started',
-    excerpt: 'Learn how to build apps with the toolkit',
-    body: [{ type: 'p', children: [{ text: 'A guide to getting started with Lumi CMS.' }] }],
-    category: techCat.id as string,
-    status: 'published',
-    publishedAt: new Date(),
-  })
+import { createDbClient, runMigrations } from '@murumets-ee/db'
 
-  await articles.create({
-    title: 'Lumi CMS v1.0 Released',
-    slug: 'v1-released',
-    excerpt: 'We are excited to announce version 1.0',
-    body: [{ type: 'p', children: [{ text: 'After months of development, v1.0 is here.' }] }],
-    category: newsCat.id as string,
-    status: 'published',
-    publishedAt: new Date(),
-  })
+async function migrate() {
+  console.log('Running migrations...')
 
-  return { ok: true, created: { categories: 2, articles: 2 } }
-}
-
-export async function seedTicketing() {
-  if (process.env.NODE_ENV === 'production') {
-    return { error: 'Seed disabled in production' }
-  }
-
-  await requireAdmin()
-  const app = await getToolkitApp()
-
-  const deptClient = createTaxonomyClient(Department)
-  const tagClient = createTaxonomyClient(TicketTag)
-  const ticketAdmin = new AdminClient({
-    entity: Ticket,
-    db: app.db.readWrite,
-    logger: app.logger.child({ entity: 'ticket' }),
-  })
-  const messageAdmin = new AdminClient({
-    entity: TicketMessage,
-    db: app.db.readWrite,
-    logger: app.logger.child({ entity: 'ticket_message' }),
-  })
-
-  const support = await deptClient.create({
-    name: 'General Support', slug: 'general-support', color: '#3B82F6',
-    description: 'General customer support inquiries',
-    emailAddress: 'support@example.com',
-    slaFirstResponseHours: 4, slaResolutionHours: 24,
-  })
-  const billing = await deptClient.create({
-    name: 'Billing', slug: 'billing', color: '#10B981',
-    description: 'Payment and invoice questions',
-    emailAddress: 'billing@example.com',
-    slaFirstResponseHours: 2, slaResolutionHours: 12,
-  })
-  const technical = await deptClient.create({
-    name: 'Technical', slug: 'technical', color: '#8B5CF6',
-    description: 'Technical issues and bug reports',
-    emailAddress: 'tech@example.com',
-    slaFirstResponseHours: 1, slaResolutionHours: 8,
-  })
-
-  const bugTag = await tagClient.create({ name: 'Bug', slug: 'bug', color: '#EF4444' })
-  const featureTag = await tagClient.create({ name: 'Feature Request', slug: 'feature-request', color: '#F59E0B' })
-  const urgentTag = await tagClient.create({ name: 'Urgent', slug: 'urgent', color: '#DC2626' })
-  await tagClient.create({ name: 'Feedback', slug: 'feedback', color: '#06B6D4' })
-  await tagClient.create({ name: 'Documentation', slug: 'documentation', color: '#6366F1' })
-
-  const now = Date.now()
-  let counter = 0
-
-  async function createTicket(opts: {
-    subject: string; department: string; status: string; priority: string;
-    requesterEmail: string; requesterName: string; tags?: string[];
-    messages: Array<{ body: string; senderType: string; senderEmail: string; senderName: string; visibility?: string; minutesAgo: number }>
-  }) {
-    counter++
-    const lastMsg = opts.messages[opts.messages.length - 1]
-    const ticket = await ticketAdmin.create({
-      subject: opts.subject, status: opts.status, priority: opts.priority,
-      department: opts.department, requesterEmail: opts.requesterEmail,
-      requesterName: opts.requesterName,
-      ticketNumber: \`TK-\${String(counter).padStart(6, '0')}\`,
-      lastReplyAt: new Date(now - lastMsg.minutesAgo * 60_000),
-      lastReplierType: lastMsg.senderType,
-      tags: (opts.tags ?? []) as never,
-    })
-    for (const msg of opts.messages) {
-      await messageAdmin.create({
-        ticket: ticket.id, body: msg.body, bodyFormat: 'html',
-        senderType: msg.senderType, senderEmail: msg.senderEmail,
-        senderName: msg.senderName, visibility: msg.visibility ?? 'public',
-      })
-    }
-    return ticket
-  }
-
-  await createTicket({
-    subject: 'API returns 500 error on file upload',
-    department: technical.id as string, status: 'open', priority: 'high',
-    requesterEmail: 'john@acme.com', requesterName: 'John Smith',
-    tags: [bugTag.id as string, urgentTag.id as string],
-    messages: [
-      { body: '<p>When I upload files larger than 5MB, I get a 500 error. Started after the last update.</p>', senderType: 'customer', senderEmail: 'john@acme.com', senderName: 'John Smith', minutesAgo: 120 },
-      { body: '<p>Thanks for reporting this. I can see the error in our logs. Escalating to backend team.</p>', senderType: 'agent', senderEmail: 'sarah@support.com', senderName: 'Sarah Chen', minutesAgo: 90 },
-      { body: '<p>Any update? We have a deadline tomorrow.</p>', senderType: 'customer', senderEmail: 'john@acme.com', senderName: 'John Smith', minutesAgo: 30 },
-    ],
-  })
-
-  await createTicket({
-    subject: 'Invoice #2024-0847 has incorrect amount',
-    department: billing.id as string, status: 'pending', priority: 'normal',
-    requesterEmail: 'maria@startup.io', requesterName: 'Maria Garcia',
-    messages: [
-      { body: '<p>Invoice #2024-0847 shows $299 instead of the agreed $199. Please correct.</p>', senderType: 'customer', senderEmail: 'maria@startup.io', senderName: 'Maria Garcia', minutesAgo: 1440 },
-      { body: '<p>Apologies for the discrepancy. Checking with billing team, should be resolved in 24h.</p>', senderType: 'agent', senderEmail: 'alex@support.com', senderName: 'Alex Johnson', minutesAgo: 1380 },
-    ],
-  })
-
-  await createTicket({
-    subject: 'Production site down — 503 errors',
-    department: technical.id as string, status: 'open', priority: 'urgent',
-    requesterEmail: 'ops@enterprise.co', requesterName: 'Emma Wilson',
-    tags: [bugTag.id as string, urgentTag.id as string],
-    messages: [
-      { body: '<p><strong>URGENT</strong> — Production returning 503 for all users. Need immediate help.</p>', senderType: 'customer', senderEmail: 'ops@enterprise.co', senderName: 'Emma Wilson', minutesAgo: 15 },
-    ],
-  })
-
-  await createTicket({
-    subject: 'Can we get dark mode for the dashboard?',
-    department: support.id as string, status: 'resolved', priority: 'low',
-    requesterEmail: 'dev@techcorp.com', requesterName: 'David Lee',
-    tags: [featureTag.id as string],
-    messages: [
-      { body: '<p>Would it be possible to add dark mode? Our team works late hours.</p>', senderType: 'customer', senderEmail: 'dev@techcorp.com', senderName: 'David Lee', minutesAgo: 10080 },
-      { body: '<p>Dark mode just shipped! Toggle it in Settings → Appearance.</p>', senderType: 'agent', senderEmail: 'sarah@support.com', senderName: 'Sarah Chen', minutesAgo: 4320 },
-      { body: '<p>Perfect, exactly what we needed. Thanks!</p>', senderType: 'customer', senderEmail: 'dev@techcorp.com', senderName: 'David Lee', minutesAgo: 4200 },
-    ],
-  })
-
-  return { ok: true, created: { departments: 3, tags: 5, tickets: 4, messages: 9 } }
-}
-`),await n(a(e,`app/[locale]/(shell)/admin/seed/page.tsx`),`'use client'
-
-import { Button } from '@murumets-ee/ui'
-import { useState } from 'react'
-import { seedContent, seedTicketing } from './actions'
-
-export default function SeedPage() {
-  const [result, setResult] = useState<string | null>(null)
-  const [loading, setLoading] = useState(false)
-
-  async function run(action: () => Promise<unknown>) {
-    setLoading(true)
-    setResult(null)
-    try {
-      const res = await action()
-      setResult(JSON.stringify(res, null, 2))
-    } catch (e) {
-      setResult(\`Error: \${e instanceof Error ? e.message : String(e)}\`)
-    } finally {
-      setLoading(false)
-    }
-  }
-
-  return (
-    <div className="max-w-2xl mx-auto p-8">
-      <h1 className="text-2xl font-bold mb-2">Seed Data</h1>
-      <p className="text-sm text-zinc-500 dark:text-zinc-400 mb-6">
-        Create demo content for testing. Only available in development mode.
-      </p>
-
-      <div className="flex gap-3 flex-wrap">
-        <Button onClick={() => run(seedContent)} loading={loading}>
-          Seed Content
-        </Button>
-        <Button onClick={() => run(seedTicketing)} loading={loading} variant="secondary">
-          Seed Ticketing
-        </Button>
-      </div>
-
-      {result && (
-        <pre className="mt-6 bg-zinc-100 dark:bg-zinc-900 border border-zinc-200 dark:border-zinc-800 rounded-lg p-4 text-sm overflow-auto">
-          {result}
-        </pre>
-      )}
-    </div>
-  )
-}
-`),await n(a(e,`app/api/admin/[...path]/route.ts`),`import { createAdminApiHandler } from '@murumets-ee/admin-ui/server'
-import { buildPermissionChecker, buildResourceCatalog } from '@murumets-ee/auth'
-import { permissionRoutes } from '@murumets-ee/auth/admin'
-import { ContentClient } from '@murumets-ee/content/client'
-import { LockService } from '@murumets-ee/content/lock'
-import type { PermissionChecker } from '@murumets-ee/core'
-import { getApp } from '@murumets-ee/core'
-import {
-  AuditLogClient,
-  createAuditDbWriter,
-  createAuditLogger,
-  createLogger,
-} from '@murumets-ee/logging'
-import { logRoutes } from '@murumets-ee/logging/admin'
-import { mediaRoutes } from '@murumets-ee/media/admin'
-import { createSettingsClient } from '@murumets-ee/settings'
-import { settingsRoutes } from '@murumets-ee/settings/admin'
-import { storageRoutes } from '@murumets-ee/storage/admin'
-import { taxonomyRoutes } from '@murumets-ee/taxonomy/admin'
-import { ticketingRoutes } from '@murumets-ee/ticketing/admin'
-import {
-  allEntities,
-  crudEntities,
-  pluginResources,
-  taxonomyVocabularies,
-} from '@/lib/admin-config'
-import { getToolkitApp } from '@/lib/app'
-import { auth } from '@/lib/auth'
-import { loadRoles } from '@/lib/load-roles'
-import { permissionSettings } from '@/settings/permissions'
-import { siteSettings } from '@/settings/site'
-
-await getToolkitApp()
-
-let _auditLogger: ReturnType<typeof createAuditLogger> | null = null
-let _checker: PermissionChecker | null = null
-
-const routes = [
-  mediaRoutes(),
-  storageRoutes(),
-  settingsRoutes(siteSettings),
-  taxonomyRoutes(taxonomyVocabularies),
-  ticketingRoutes(),
-  logRoutes(() => new AuditLogClient(getApp().db.readWrite)),
-  permissionRoutes({
-    getStatements: () => buildResourceCatalog(allEntities, pluginResources),
-    loadRoles: async () => loadRoles(getApp()),
-    saveRoles: async (roles) => {
-      const app = getApp()
-      const client = createSettingsClient(permissionSettings, { app })
-      await client.set('roles', roles)
-    },
-    onSave: () => {
-      _checker = null
-    },
-  }),
-]
-
-const handler = createAdminApiHandler({
-  authenticate: async (req) => {
-    const session = await auth.api.getSession({ headers: req.headers })
-    if (!session?.user) return null
-    const role = (session.user as Record<string, unknown>).role as string | undefined
-    return { id: session.user.id, role, name: session.user.name, email: session.user.email }
-  },
-  defaultLocale: 'en',
-  entities: crudEntities,
-  routes,
-  loadPermissions: async () => {
-    if (_checker) return _checker
-    const roles = await loadRoles(getApp())
-    _checker = buildPermissionChecker(roles)
-    return _checker
-  },
-  auditLogger: {
-    log: async (entry) => {
-      if (!_auditLogger) {
-        const app = getApp()
-        _auditLogger = createAuditLogger({
-          logger: createLogger({ name: 'audit' }),
-          dbWriter: createAuditDbWriter(app.db.readWrite),
-        })
-      }
-      return _auditLogger.log(entry)
-    },
-  },
-  contentClientFactory: (entity) =>
-    new ContentClient({ entity, db: getApp().db.readWrite }),
-  lockServiceFactory: () =>
-    new LockService({ db: getApp().db.readWrite }),
-})
-
-export const { GET, POST, PATCH, DELETE } = handler
-`)}async function c(e,t){await n(a(e,`lib/auth.ts`),`import { getAuth } from '@murumets-ee/auth'
-import { getToolkitApp } from './app'
-
-await getToolkitApp()
-
-export const auth = getAuth()
-`),await n(a(e,`lib/auth-client.ts`),`import { createClient } from '@murumets-ee/auth/client'
-
-export const authClient = createClient()
-`),await n(a(e,`app/api/auth/[...all]/route.ts`),`import { toNextJsHandler } from 'better-auth/next-js'
-import { auth } from '@/lib/auth'
-
-const { GET, POST } = toNextJsHandler(auth)
-export { GET, POST }
-`),await n(a(e,`app/[locale]/auth/layout.tsx`),`import { AuthProviders } from './providers'
-import type { ReactNode } from 'react'
-
-export default function AuthLayout({ children }: { children: ReactNode }) {
-  return (
-    <AuthProviders>
-      <div className="flex min-h-[calc(100vh-3rem)] items-center justify-center px-4">
-        {children}
-      </div>
-    </AuthProviders>
-  )
-}
-`),await n(a(e,`app/[locale]/auth/providers.tsx`),`'use client'
-
-import { AuthUIProvider } from '@murumets-ee/auth-ui'
-import { authClient } from '@/lib/auth-client'
-import Link from 'next/link'
-import { useRouter } from 'next/navigation'
-import { useLocale } from 'next-intl'
-import type { ReactNode } from 'react'
-
-export function AuthProviders({ children }: { children: ReactNode }) {
-  const router = useRouter()
-  const locale = useLocale()
-
-  return (
-    <AuthUIProvider
-      authClient={authClient as never}
-      basePath="/auth"
-      redirectTo="/"
-      Link={Link}
-      navigate={(url) => router.push(url)}
-      resetPasswordUrl={\`/\${locale}/auth/reset-password\`}
-    >
-      {children}
-    </AuthUIProvider>
-  )
-}
-`),await n(a(e,`app/[locale]/auth/sign-in/page.tsx`),`import { SignInForm } from '@murumets-ee/auth-ui'
-
-export default function SignInPage() {
-  return <SignInForm />
-}
-`),await n(a(e,`app/[locale]/auth/sign-up/page.tsx`),`import { SignUpForm } from '@murumets-ee/auth-ui'
-
-export default function SignUpPage() {
-  return <SignUpForm />
-}
-`),await n(a(e,`app/[locale]/auth/forgot-password/page.tsx`),`import { ForgotPasswordForm } from '@murumets-ee/auth-ui'
-
-export default function ForgotPasswordPage() {
-  return <ForgotPasswordForm />
-}
-`),await n(a(e,`app/[locale]/auth/reset-password/page.tsx`),`import { Suspense } from 'react'
-import { ResetPasswordContent } from './content'
-
-export default function ResetPasswordPage() {
-  return (
-    <Suspense>
-      <ResetPasswordContent />
-    </Suspense>
-  )
-}
-`),await n(a(e,`app/[locale]/auth/reset-password/content.tsx`),`'use client'
-
-import { useSearchParams } from 'next/navigation'
-import { ResetPasswordForm } from '@murumets-ee/auth-ui'
-
-export function ResetPasswordContent() {
-  const searchParams = useSearchParams()
-  const token = searchParams.get('token')
-
-  if (!token) {
-    return (
-      <div className="text-center">
-        <h1 className="text-2xl font-bold text-zinc-900 dark:text-zinc-50">
-          Invalid or expired link
-        </h1>
-        <p className="mt-2 text-zinc-500">
-          Please request a new password reset.
-        </p>
-      </div>
-    )
-  }
-
-  return <ResetPasswordForm token={token} />
-}
-`),await n(a(e,`app/[locale]/setup/page.tsx`),`import { redirect } from 'next/navigation'
-import { sql } from 'drizzle-orm'
-import { getToolkitApp } from '@/lib/app'
-import { SetupForm } from './form'
-
-export default async function SetupPage() {
-  const app = await getToolkitApp()
-  const result = await app.db.readOnly.execute<{ count: string }>(
-    sql\`SELECT COUNT(*)::text as count FROM "user"\`,
-  )
-
-  if (Number(result[0]?.count) > 0) {
-    redirect('/')
-  }
-
-  return (
-    <div className="max-w-md mx-auto p-8">
-      <h1 className="text-2xl font-bold mb-2">Create Admin</h1>
-      <p className="text-sm text-zinc-500 dark:text-zinc-400 mb-6">
-        No users found. Create the first admin account.
-      </p>
-      <SetupForm />
-    </div>
-  )
-}
-`),await n(a(e,`app/[locale]/setup/form.tsx`),`'use client'
-
-import { useState } from 'react'
-import { createFirstAdmin } from './actions'
-
-export function SetupForm() {
-  const [result, setResult] = useState<{ ok?: boolean; error?: string; email?: string } | null>(null)
-  const [loading, setLoading] = useState(false)
-
-  async function handleSubmit(e: React.FormEvent<HTMLFormElement>) {
-    e.preventDefault()
-    setLoading(true)
-    setResult(null)
-    const res = await createFirstAdmin(new FormData(e.currentTarget))
-    setResult(res)
-    setLoading(false)
-  }
-
-  if (result?.ok) {
-    return (
-      <div className="space-y-2">
-        <p className="text-green-600 dark:text-green-400">Admin created: {result.email}</p>
-        <a href="/auth/sign-in" className="text-blue-600 dark:text-blue-400 hover:underline">
-          Sign in &rarr;
-        </a>
-      </div>
-    )
-  }
-
-  return (
-    <form onSubmit={handleSubmit} className="flex flex-col gap-4">
-      <label className="text-sm font-medium">
-        Name
-        <input
-          name="name"
-          required
-          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
-        />
-      </label>
-      <label className="text-sm font-medium">
-        Email
-        <input
-          name="email"
-          type="email"
-          required
-          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
-        />
-      </label>
-      <label className="text-sm font-medium">
-        Password (min 8 chars)
-        <input
-          name="password"
-          type="password"
-          required
-          minLength={8}
-          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
-        />
-      </label>
-
-      {result?.error && <p className="text-red-600 dark:text-red-400 text-sm">{result.error}</p>}
-
-      <button
-        type="submit"
-        disabled={loading}
-        className="px-4 py-2 text-sm rounded-md bg-blue-600 text-white hover:bg-blue-500 disabled:opacity-50 transition-colors"
-      >
-        {loading ? 'Creating...' : 'Create Admin'}
-      </button>
-    </form>
-  )
-}
-`),await n(a(e,`app/[locale]/setup/actions.ts`),`'use server'
-
-import { sql } from 'drizzle-orm'
-import { getToolkitApp } from '@/lib/app'
-import { getAuth } from '@murumets-ee/auth'
-
-/**
- * Create the first admin user. Locked down:
- * - Advisory lock prevents race conditions (two simultaneous requests)
- * - User count check inside the lock ensures only one admin can be created
- * - Once any user exists, this action permanently refuses
- */
-export async function createFirstAdmin(formData: FormData) {
-  const email = formData.get('email') as string
-  const password = formData.get('password') as string
-  const name = formData.get('name') as string
-
-  if (!email || !password || !name) {
-    return { error: 'All fields are required' }
-  }
-
-  if (password.length < 8) {
-    return { error: 'Password must be at least 8 characters' }
-  }
-
-  const app = await getToolkitApp()
-
-  // Acquire advisory lock + check atomically in a transaction
-  const canCreate = await app.db.readWrite.transaction(async (tx) => {
-    // Advisory lock 1 = "setup lock". Blocks concurrent setup attempts.
-    await tx.execute(sql\`SELECT pg_advisory_xact_lock(1)\`)
-
-    const result = await tx.execute<{ count: string }>(
-      sql\`SELECT COUNT(*)::text as count FROM "user"\`,
-    )
-    return Number(result[0]?.count) === 0
-  })
-
-  if (!canCreate) {
-    return { error: 'Admin user already exists. Setup is complete.' }
-  }
-
-  const auth = getAuth()
-
-  const adminUser = await auth.api.signUpEmail({
-    body: { email, password, name },
-  })
-
-  await app.db.readWrite.execute(
-    sql\`UPDATE "user" SET role = 'admin' WHERE id = \${adminUser.user.id}\`,
-  )
-
-  return { ok: true, email: adminUser.user.email }
-}
-`)}async function l(e,t){let{name:r}=t;await n(a(e,`.env.example`),`DATABASE_URL=postgresql://${r}:${r}_dev_password@localhost:5432/${r}_dev
-BETTER_AUTH_SECRET=dev-secret-change-me-in-production-min-32-chars
-BETTER_AUTH_URL=http://localhost:3000
-LOG_LEVEL=debug
-NEXT_PUBLIC_APP_URL=http://localhost:3000
-# Queue worker — by default runs embedded in the web process.
-# Set to "false" in production and run "pnpm worker" as a separate process.
-# QUEUE_WORKER=false
-RESEND_API_KEY=
-RESEND_WEBHOOK_SECRET=
-MAIL_FROM=noreply@example.com
-CSAT_SECRET=
-`),await n(a(e,`.dockerignore`),`# Dependencies (installed inside Docker)
-node_modules/
-.pnpm-store/
-
-# Build outputs (rebuilt inside Docker)
-.next/
-out/
-dist/
-
-# Git
-.git/
-.gitignore
-
-# Environment files (pass via docker run --env-file)
-.env
-.env.*
-!.env.example
-
-# Docker files
-Dockerfile*
-.dockerignore
-docker-compose*.yml
-
-# Tests
-coverage/
-**/*.test.*
-**/*.spec.*
-**/vitest.config.*
-docker-compose.test.yml
-
-# Development tooling
-.vscode/
-.idea/
-.turbo/
-.cache/
-*.tsbuildinfo
-
-# Documentation
-*.md
-docs/
-
-# OS files
-.DS_Store
-Thumbs.db
-`),await n(a(e,`Dockerfile`),`# --- Base image ---
-# Node 22 LTS (Debian slim — glibc required for sharp image optimization)
-FROM node:22-slim AS base
-
-# --- Stage 1: Install dependencies ---
-FROM base AS deps
-WORKDIR /app
-RUN corepack enable pnpm
-COPY package.json pnpm-lock.yaml ./
-RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store \\
-    pnpm install --frozen-lockfile
-
-# --- Stage 2: Build the application ---
-FROM base AS builder
-WORKDIR /app
-RUN corepack enable pnpm
-COPY --from=deps /app/node_modules ./node_modules
-COPY . .
-ENV NODE_ENV=production
-ENV NEXT_TELEMETRY_DISABLED=1
-# Dummy env vars so toolkit.config.ts doesn't throw at build time (no DB connection needed)
-ENV DATABASE_URL=postgresql://build:build@localhost:5432/build
-ENV BETTER_AUTH_SECRET=build-secret-not-used-at-runtime
-RUN pnpm build
-
-# --- Stage 3: Production runner ---
-FROM base AS runner
-WORKDIR /app
-ENV NODE_ENV=production
-ENV PORT=3000
-ENV HOSTNAME=0.0.0.0
-ENV NEXT_TELEMETRY_DISABLED=1
-
-# Copy standalone output (includes server.js + traced node_modules)
-COPY --from=builder --chown=node:node /app/.next/standalone ./
-# Copy static assets (JS/CSS chunks — excluded from standalone trace)
-COPY --from=builder --chown=node:node /app/.next/static ./.next/static
-# Copy public assets (favicon, robots.txt, images)
-COPY --from=builder --chown=node:node /app/public ./public
-# Copy migrations (applied at app startup by the toolkit migration runner)
-COPY --from=builder --chown=node:node /app/migrations ./migrations
-
-# Run as non-root user
-USER node
-EXPOSE 3000
-CMD ["node", "server.js"]
-`),await n(a(e,`docker-compose.yml`),`services:
-  postgres:
-    image: postgres:17-alpine
-    container_name: ${r}-postgres
-    restart: unless-stopped
-    environment:
-      POSTGRES_USER: ${r}
-      POSTGRES_PASSWORD: ${r}_dev_password
-      POSTGRES_DB: ${r}_dev
-    ports:
-      - "5432:5432"
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ${r} -d ${r}_dev"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-volumes:
-  postgres_data:
-    name: ${r}_postgres_data
-`),await n(a(e,`docker-compose.prod.yml`),`services:
-  app:
-    build: .
-    restart: unless-stopped
-    env_file: .env
-    depends_on:
-      postgres:
-        condition: service_healthy
-    ports:
-      - "3000:3000"
-    networks:
-      - internal
-
-  postgres:
-    image: postgres:17-alpine
-    restart: unless-stopped
-    environment:
-      POSTGRES_USER: ${r}
-      POSTGRES_PASSWORD: \${DB_PASSWORD}
-      POSTGRES_DB: ${r}
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ${r} -d ${r}"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-    networks:
-      - internal
-
-volumes:
-  postgres_data:
-
-networks:
-  internal:
-`),await i(a(e,`.gitignore`),`
-# Toolkit generated files
-generated/
-
-# Environment
-.env*
-!.env.example
-`)}async function u(e,t){await n(a(e,`entities/index.ts`),`export { Article } from './article'
-export { Category } from './category'
-`),await n(a(e,`entities/article.ts`),`import { behavior, defineEntity, field } from '@murumets-ee/entity'
-
-export const Article = defineEntity({
-  name: 'article',
-  fields: {
-    title: field.text({ required: true, maxLength: 200, indexed: true, translatable: true }),
-    slug: field.slug({ from: 'title', unique: true }),
-    excerpt: field.text({ maxLength: 500, translatable: true }),
-    body: field.richtext(),
-    viewCount: field.number({ default: 0, integer: true }),
-    featured: field.boolean({ default: false }),
-    publishDate: field.date(),
-    contentType: field.select({ options: ['news', 'tutorial', 'announcement'], default: 'news' }),
-    category: field.reference({ entity: 'category', required: false }),
-    tags: field.reference({ entity: 'category', cardinality: 'many' }),
-    coverImage: field.media({ accept: ['image/*'] }),
-  },
-  behaviors: [
-    behavior.publishable(),
-    behavior.auditable(),
-    behavior.sluggable('title'),
-    behavior.revisionable(),
-  ],
-  scope: 'global',
-  access: {
-    view: 'public',
-    create: 'group.editor',
-    update: 'group.editor',
-    delete: 'group.admin',
-  },
-})
-`),await n(a(e,`entities/category.ts`),`import { defineEntity, field } from '@murumets-ee/entity'
-
-export const Category = defineEntity({
-  name: 'category',
-  fields: {
-    name: field.text({ required: true, maxLength: 100, indexed: true, translatable: true }),
-    slug: field.slug({ from: 'name', unique: true }),
-    description: field.text({ maxLength: 500, translatable: true }),
-  },
-  scope: 'global',
-  access: {
-    view: 'public',
-    create: 'group.editor',
-    update: 'group.editor',
-    delete: 'group.admin',
-  },
-})
-`)}async function d(e,t){await n(a(e,`i18n/routing.ts`),`import { defineRouting } from 'next-intl/routing'
-
-export const routing = defineRouting({
-  locales: ['en'],
-  defaultLocale: 'en',
-})
-`),await n(a(e,`i18n/navigation.ts`),`import { createNavigation } from 'next-intl/navigation'
-import { routing } from './routing'
-
-export const { Link, redirect, usePathname, useRouter, getPathname } = createNavigation(routing)
-`),await n(a(e,`i18n/request.ts`),`import { getRequestConfig } from 'next-intl/server'
-import { hasLocale } from 'next-intl'
-import { routing } from './routing'
-import { getAuthMessages } from '@murumets-ee/auth-ui/i18n'
-
-export default getRequestConfig(async ({ requestLocale }) => {
-  const requested = await requestLocale
-  const locale = hasLocale(routing.locales, requested)
-    ? requested
-    : routing.defaultLocale
-
-  const authMessages = await getAuthMessages(locale)
-
-  return {
-    locale,
-    messages: {
-      ...authMessages,
-    },
-  }
-})
-`)}const f={myorgCore:`0.1.0`,myorgDb:`0.1.0`,myorgEntity:`0.1.0`,myorgLogging:`0.1.0`,myorgAuth:`0.1.0`,myorgAuthUi:`0.1.0`,myorgAdminUi:`0.1.0`,myorgContent:`0.1.0`,myorgContentApi:`0.1.0`,myorgSettings:`0.1.0`,myorgStorage:`0.1.0`,myorgMedia:`0.1.0`,myorgTaxonomy:`0.1.0`,myorgQueue:`0.1.0`,myorgMail:`0.1.0`,myorgTicketing:`0.1.0`,myorgTicketingUi:`0.1.0`,myorgEditor:`0.1.0`,myorgBlocks:`0.1.0`,myorgTokens:`0.1.0`,myorgUi:`0.1.0`,myorgCli:`0.1.0`,betterAuth:`1.4.0`,drizzleOrm:`0.45.1`,nextIntl:`4.8.2`,nextThemes:`0.4.6`,lucideReact:`0.563.0`,postgres:`3.4.5`,reactHookForm:`7.71.1`,hookformResolvers:`5.2.2`,zod:`3.24.1`,tanstackReactQuery:`5.60.5`,tanstackReactTable:`8.21.3`,drizzleKit:`0.31.10`,tsx:`4.19.2`,babelReactCompiler:`1.0.0`};async function p(e,t,n){await m(e,t),n?.(`Workspace root created`),n?.(`Creating admin app...`),await g(e,t),n?.(`Admin app created`),n?.(`Creating web app...`),await _(e,t),n?.(`Web app created`),await h(e,t),n?.(`Shared config package created`)}async function m(e,t){let{name:r}=t;await o(e,{recursive:!0}),await n(a(e,`pnpm-workspace.yaml`),`packages:
-  - 'packages/*'
-  - 'apps/*'
-
-ignoredBuiltDependencies:
-  - sharp
-  - unrs-resolver
-`),await n(a(e,`package.json`),`${JSON.stringify({name:`@${r}/monorepo`,version:`0.0.0`,private:!0,type:`module`,scripts:{dev:`turbo dev`,build:`turbo build`,"db:generate":`tsx --env-file=.env packages/config/scripts/generate-schema.ts`,"db:migrate:generate":`drizzle-kit generate --config packages/config/drizzle.config.ts`,"db:migrate":`tsx --env-file=.env packages/config/scripts/migrate.ts`,"db:reset":`tsx --env-file=.env packages/config/scripts/reset-db.ts`},devDependencies:{turbo:`^2.3.3`,typescript:`^5.7.3`,tsx:`^${f.tsx}`,"drizzle-kit":`^${f.drizzleKit}`}},null,2)}\n`),await n(a(e,`.gitignore`),`# dependencies
-node_modules/
-
-# build
-dist/
-.next/
-.turbo/
-
-# env
-.env*
-!.env.example
-
-# toolkit generated
-generated/
-
-# IDE
-.vscode/
-.idea/
-
-# OS
-.DS_Store
-Thumbs.db
-
-# logs
-*.log
-
-# migrations meta
-migrations/
-
-# turbo
-.turbo/
-`),await n(a(e,`.env.example`),`DATABASE_URL=postgresql://${r}:${r}_dev_password@localhost:5432/${r}_dev
-BETTER_AUTH_SECRET=dev-secret-change-me-in-production-min-32-chars
-BETTER_AUTH_URL=http://localhost:3000
-LOG_LEVEL=debug
-NEXT_PUBLIC_APP_URL=http://localhost:3000
-QUEUE_WORKER=true
-RESEND_API_KEY=
-RESEND_WEBHOOK_SECRET=
-MAIL_FROM=noreply@example.com
-CSAT_SECRET=
-`),await n(a(e,`docker-compose.yml`),`services:
-  postgres:
-    image: postgres:17-alpine
-    container_name: ${r}-postgres
-    restart: unless-stopped
-    environment:
-      POSTGRES_USER: ${r}
-      POSTGRES_PASSWORD: ${r}_dev_password
-      POSTGRES_DB: ${r}_dev
-    ports:
-      - "5432:5432"
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ${r} -d ${r}_dev"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-volumes:
-  postgres_data:
-    name: ${r}_postgres_data
-`)}async function h(e,t){let{name:r}=t,i=a(e,`packages/config`);await n(a(i,`package.json`),`${JSON.stringify({name:`@${r}/config`,version:`0.1.0`,private:!0,type:`module`,exports:{".":`./toolkit.config.ts`,"./entities":`./entities/index.ts`,"./entities/*":`./entities/*`,"./app":`./lib/app.ts`,"./auth":`./lib/auth.ts`,"./auth-client":`./lib/auth-client.ts`},dependencies:{"@murumets-ee/core":`^${f.myorgCore}`,"@murumets-ee/db":`^${f.myorgDb}`,"@murumets-ee/entity":`^${f.myorgEntity}`,"@murumets-ee/logging":`^${f.myorgLogging}`,"@murumets-ee/auth":`^${f.myorgAuth}`,"better-auth":`^${f.betterAuth}`,"drizzle-orm":`^${f.drizzleOrm}`,postgres:`^${f.postgres}`,zod:`^${f.zod}`}},null,2)}\n`),await n(a(i,`tsconfig.json`),`${JSON.stringify({compilerOptions:{target:`ES2022`,module:`ESNext`,moduleResolution:`Bundler`,strict:!0,esModuleInterop:!0,skipLibCheck:!0,resolveJsonModule:!0},include:[`**/*.ts`]},null,2)}\n`),await n(a(i,`toolkit.config.ts`),`import { auth } from '@murumets-ee/auth/plugin'
-import { content } from '@murumets-ee/content/plugin'
-import { defineConfig } from '@murumets-ee/core'
-import { logging } from '@murumets-ee/logging/plugin'
-import { mail, ResendMailProvider } from '@murumets-ee/mail'
-import { media } from '@murumets-ee/media/plugin'
-import { queue } from '@murumets-ee/queue/plugin'
-import { settings } from '@murumets-ee/settings/plugin'
-import { storage } from '@murumets-ee/storage/plugin'
-import { taxonomy } from '@murumets-ee/taxonomy/plugin'
-import { ticketing } from '@murumets-ee/ticketing/plugin'
-import { Article, Category } from './entities'
-import * as authSchema from './generated/auth-schema'
-
-if (!process.env.DATABASE_URL) {
-  throw new Error('DATABASE_URL environment variable is required')
-}
-
-export default defineConfig({
-  db: {
-    url: process.env.DATABASE_URL,
-    poolMin: 2,
-    poolMax: 10,
-  },
-  logging: {
-    level: (process.env.LOG_LEVEL || 'info') as 'debug' | 'info' | 'warn' | 'error',
-    name: '${r}',
-  },
-  entities: [Category, Article],
-  plugins: [
-    auth({ providers: ['email'], schema: authSchema }),
-    content({
-      locales: [{ code: 'en', label: 'English' }],
-      defaultLocale: 'en',
-    }),
-    logging(),
-    settings(),
-    storage(),
-    media(),
-    taxonomy(),
-    queue(),
-    mail({
-      provider: process.env.RESEND_API_KEY
-        ? new ResendMailProvider({ apiKey: process.env.RESEND_API_KEY })
-        : undefined,
-      defaultFrom: process.env.MAIL_FROM ?? 'noreply@example.com',
-      webhookSecret: process.env.RESEND_WEBHOOK_SECRET,
-    }),
-    ticketing({
-      csatSecret: process.env.CSAT_SECRET,
-    }),
-  ],
-  projectRoot: import.meta.dirname,
-})
-`),await n(a(i,`auth.config.ts`),`import { betterAuth } from 'better-auth'
-import { drizzleAdapter } from 'better-auth/adapters/drizzle'
-import { admin } from 'better-auth/plugins'
-import { organization } from 'better-auth/plugins/organization'
-import { drizzle } from 'drizzle-orm/postgres-js'
-import postgres from 'postgres'
-
-const sql = postgres(process.env.DATABASE_URL!)
-const db = drizzle(sql)
-
-export const auth = betterAuth({
-  database: drizzleAdapter(db, { provider: 'pg' }),
-  emailAndPassword: { enabled: true },
-  plugins: [
-    admin(),
-    organization(),
-  ],
-})
-`),await n(a(i,`drizzle.config.ts`),`import type { Config } from 'drizzle-kit'
-
-if (!process.env.DATABASE_URL) {
-  throw new Error('DATABASE_URL environment variable is required')
-}
-
-export default {
-  schema: ['./generated/schema.ts', './generated/auth-schema.ts'],
-  out: './migrations',
-  dialect: 'postgresql',
-  dbCredentials: {
-    url: process.env.DATABASE_URL,
-  },
-} satisfies Config
-`),await n(a(i,`entities/index.ts`),`export { Article } from './article'
-export { Category } from './category'
-`),await n(a(i,`entities/article.ts`),`import { behavior, defineEntity, field } from '@murumets-ee/entity'
-
-export const Article = defineEntity({
-  name: 'article',
-  fields: {
-    title: field.text({ required: true, maxLength: 200, indexed: true, translatable: true }),
-    slug: field.slug({ from: 'title', unique: true }),
-    excerpt: field.text({ maxLength: 500, translatable: true }),
-    body: field.richtext(),
-    viewCount: field.number({ default: 0, integer: true }),
-    featured: field.boolean({ default: false }),
-    publishDate: field.date(),
-    contentType: field.select({ options: ['news', 'tutorial', 'announcement'], default: 'news' }),
-    category: field.reference({ entity: 'category', required: false }),
-    tags: field.reference({ entity: 'category', cardinality: 'many' }),
-    coverImage: field.media({ accept: ['image/*'] }),
-  },
-  behaviors: [
-    behavior.publishable(),
-    behavior.auditable(),
-    behavior.sluggable('title'),
-    behavior.revisionable(),
-  ],
-  scope: 'global',
-  access: {
-    view: 'public',
-    create: 'group.editor',
-    update: 'group.editor',
-    delete: 'group.admin',
-  },
-})
-`),await n(a(i,`entities/category.ts`),`import { defineEntity, field } from '@murumets-ee/entity'
-
-export const Category = defineEntity({
-  name: 'category',
-  fields: {
-    name: field.text({ required: true, maxLength: 100, indexed: true, translatable: true }),
-    slug: field.slug({ from: 'name', unique: true }),
-    description: field.text({ maxLength: 500, translatable: true }),
-  },
-  scope: 'global',
-  access: {
-    view: 'public',
-    create: 'group.editor',
-    update: 'group.editor',
-    delete: 'group.admin',
-  },
-})
-`),await n(a(i,`lib/app.ts`),`import { createApp, setApp, type ToolkitApp } from '@murumets-ee/core'
-import config from '../toolkit.config'
-
-let appInstance: ToolkitApp | null = null
-
-export async function getToolkitApp(): Promise<ToolkitApp> {
-  if (!appInstance) {
-    appInstance = await createApp(config)
-    setApp(appInstance)
-  }
-  return appInstance
-}
-`),await n(a(i,`lib/auth.ts`),`import { getAuth } from '@murumets-ee/auth'
-import { getToolkitApp } from './app'
-
-await getToolkitApp()
-
-export const auth = getAuth()
-`),await n(a(i,`lib/auth-client.ts`),`import { createClient } from '@murumets-ee/auth/client'
-
-export const authClient = createClient()
-`),await n(a(i,`generated/auth-schema.ts`),`// This file is generated by better-auth CLI.
-// Run: npx @better-auth/cli generate --config auth.config.ts -y
-export {}
-`),await n(a(i,`scripts/generate-schema.ts`),`/**
- * Generate Drizzle schemas from entity definitions
- */
-
-import { mkdir, writeFile } from 'node:fs/promises'
-import { join } from 'node:path'
-import { generateSchemaCode, generateTranslationSchemaCode } from '@murumets-ee/entity'
-import config from '../toolkit.config'
-
-async function generateSchemas() {
-  console.log('Generating Drizzle schemas from entity definitions...')
-
-  const schemaDir = join(import.meta.dirname, '..', 'generated')
-  await mkdir(schemaDir, { recursive: true })
-
-  const imports: string[] = []
-  const schemas: string[] = []
-  let hasTranslations = false
-
-  for (const entity of config.entities) {
-    console.log(\`  - Generating schema for \${entity.name}\`)
-
-    const schemaCode = generateSchemaCode(entity)
-    schemas.push(\`\\n// \${entity.name} table\`)
-    schemas.push(schemaCode)
-
-    const translationCode = generateTranslationSchemaCode(entity)
-    if (translationCode) {
-      hasTranslations = true
-      schemas.push(\`\\n// \${entity.name} translations\`)
-      schemas.push(translationCode)
-    }
-  }
-
-  const pgCoreTypes = ['pgTable', 'varchar', 'text', 'boolean', 'timestamp', 'integer', 'doublePrecision', 'jsonb', 'uuid', 'index']
-  if (hasTranslations) pgCoreTypes.push('unique')
-  const pgCoreImports = \`import { \${pgCoreTypes.join(', ')} } from 'drizzle-orm/pg-core'\\n\`
-  imports.push(pgCoreImports)
-
-  const schemaFile = join(schemaDir, 'schema.ts')
-  await writeFile(schemaFile, [...imports, ...schemas].join('\\n'))
-
-  console.log(\`\\nSchemas written to: \${schemaFile}\`)
-  console.log('Run \\\`pnpm db:migrate:generate\\\` to create migrations')
-}
-
-generateSchemas().catch(console.error)
-`),await n(a(i,`scripts/migrate.ts`),`/**
- * Run pending migrations
- */
-
-import { createDbClient, runMigrations } from '@murumets-ee/db'
-
-async function migrate() {
-  console.log('Running migrations...')
-
-  try {
-    if (!process.env.DATABASE_URL) {
-      throw new Error('DATABASE_URL environment variable is required')
-    }
-
-    const db = createDbClient({ url: process.env.DATABASE_URL })
-    await runMigrations(db, import.meta.dirname + '/..')
-
-    console.log('Migrations completed successfully')
-    process.exit(0)
-  } catch (error) {
-    console.error('Migration failed:', error)
-    process.exit(1)
-  }
-}
-
-migrate()
-`),await n(a(i,`scripts/reset-db.ts`),`/**
- * Reset database (DROP all tables)
- * WARNING: Only for development
- */
-
-import postgres from 'postgres'
-
-async function resetDb() {
-  const DATABASE_URL = process.env.DATABASE_URL
-
-  if (!DATABASE_URL) {
-    throw new Error('DATABASE_URL not set')
-  }
-
-  console.warn('WARNING: This will DROP ALL TABLES')
-  console.log('Database:', DATABASE_URL.split('@')[1])
-
-  const sql = postgres(DATABASE_URL)
-
-  try {
-    await sql\`
-      DROP SCHEMA public CASCADE;
-      CREATE SCHEMA public;
-      GRANT ALL ON SCHEMA public TO PUBLIC;
-    \`
-
-    console.log('Database reset complete')
-  } finally {
-    await sql.end()
-  }
-}
-
-resetDb().catch(console.error)
-`)}async function g(i,s){let{name:c}=s,l=a(i,`apps/admin`);await o(a(i,`apps`),{recursive:!0}),e(`pnpm create next-app@16 ${l} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await t(l,[`app/page.tsx`,`app/page.module.css`,`app/fonts`,`README.md`,`pnpm-workspace.yaml`]),await r(a(l,`package.json`),{dependencies:{[`@${c}/config`]:`workspace:*`,"@murumets-ee/auth-ui":`^${f.myorgAuthUi}`,"better-auth":`^${f.betterAuth}`,"next-intl":`^${f.nextIntl}`,"next-themes":`^${f.nextThemes}`,"lucide-react":`^${f.lucideReact}`,"react-hook-form":`^${f.reactHookForm}`,"@hookform/resolvers":`^${f.hookformResolvers}`,zod:`^${f.zod}`},devDependencies:{"babel-plugin-react-compiler":f.babelReactCompiler}});let{appendToFile:u}=await import(`./utils-Bmw75lEa.mjs`).then(e=>e.a);await u(a(l,`.gitignore`),`
-# Environment
-.env*
-!.env.example
-`),await n(a(l,`next.config.ts`),`import type { NextConfig } from 'next'
-import createNextIntlPlugin from 'next-intl/plugin'
-
-const withNextIntl = createNextIntlPlugin('./i18n/request.ts')
-
-const nextConfig: NextConfig = {
-  reactCompiler: true,
-  transpilePackages: [
-    '@${c}/config',
-    '@murumets-ee/core',
-    '@murumets-ee/entity',
-    '@murumets-ee/db',
-    '@murumets-ee/logging',
-    '@murumets-ee/auth-ui',
-  ],
-  serverExternalPackages: ['drizzle-orm', 'postgres'],
-  experimental: {
-    serverActions: {
-      bodySizeLimit: '2mb',
-    },
-  },
-}
-
-export default withNextIntl(nextConfig)
-`),await n(a(l,`proxy.ts`),`import { NextRequest, NextResponse } from 'next/server'
-import { getSessionCookie } from 'better-auth/cookies'
-import createMiddleware from 'next-intl/middleware'
-import { routing } from './i18n/routing'
-
-const intlMiddleware = createMiddleware(routing)
-
-const protectedPaths = ['/setup']
-
-export function proxy(request: NextRequest) {
-  const { pathname } = request.nextUrl
-
-  const localePattern = new RegExp(\`^/(\${routing.locales.join('|')})\`)
-  const pathWithoutLocale = pathname.replace(localePattern, '') || '/'
-
-  if (protectedPaths.some((p) => pathWithoutLocale.startsWith(p))) {
-    const session = getSessionCookie(request)
-    if (!session) {
-      const locale = pathname.match(localePattern)?.[1] || routing.defaultLocale
-      return NextResponse.redirect(new URL(\`/\${locale}/auth/sign-in\`, request.url))
-    }
-  }
-
-  return intlMiddleware(request)
-}
-
-export const config = {
-  matcher: '/((?!api|_next|_vercel|.*\\\\..*).*)',
-}
-`),await n(a(l,`i18n/routing.ts`),`import { defineRouting } from 'next-intl/routing'
-
-export const routing = defineRouting({
-  locales: ['en'],
-  defaultLocale: 'en',
-})
-`),await n(a(l,`i18n/request.ts`),`import { getRequestConfig } from 'next-intl/server'
-import { hasLocale } from 'next-intl'
-import { routing } from './routing'
-import { getAuthMessages } from '@murumets-ee/auth-ui/i18n'
-
-export default getRequestConfig(async ({ requestLocale }) => {
-  const requested = await requestLocale
-  const locale = hasLocale(routing.locales, requested)
-    ? requested
-    : routing.defaultLocale
-
-  const authMessages = await getAuthMessages(locale)
-
-  return {
-    locale,
-    messages: {
-      ...authMessages,
-    },
-  }
-})
-`),await n(a(l,`app/globals.css`),`@import "tailwindcss";
-@source "../node_modules/@murumets-ee/auth-ui/dist";
-
-@custom-variant dark (&:where(.dark, .dark *));
-
-:root {
-  --background: #ffffff;
-  --foreground: #171717;
-}
-
-@theme inline {
-  --color-background: var(--background);
-  --color-foreground: var(--foreground);
-  --font-sans: var(--font-geist-sans);
-  --font-mono: var(--font-geist-mono);
-}
-
-.dark {
-  --background: #0a0a0a;
-  --foreground: #ededed;
-}
-
-body {
-  background: var(--background);
-  color: var(--foreground);
-  font-family: Arial, Helvetica, sans-serif;
-}
-`),await n(a(l,`app/theme-provider.tsx`),`'use client'
-
-import { ThemeProvider as NextThemesProvider } from 'next-themes'
-import type { ReactNode } from 'react'
-
-export function ThemeProvider({ children }: { children: ReactNode }) {
-  return (
-    <NextThemesProvider
-      attribute="class"
-      defaultTheme="system"
-      enableSystem
-      disableTransitionOnChange
-    >
-      {children}
-    </NextThemesProvider>
-  )
-}
-`),await n(a(l,`app/theme-toggle.tsx`),`'use client'
-
-import { useTheme } from 'next-themes'
-import { useState, useEffect } from 'react'
-import { Sun, Moon } from 'lucide-react'
-
-export function ThemeToggle() {
-  const [mounted, setMounted] = useState(false)
-  const { resolvedTheme, setTheme } = useTheme()
-
-  useEffect(() => { setMounted(true) }, [])
-
-  if (!mounted) {
-    return <div className="h-8 w-8" />
-  }
-
-  return (
-    <button
-      type="button"
-      onClick={() => setTheme(resolvedTheme === 'dark' ? 'light' : 'dark')}
-      className="rounded-md p-1.5 text-zinc-400 transition-colors hover:bg-zinc-100 hover:text-zinc-600 dark:hover:bg-zinc-800 dark:hover:text-zinc-200 cursor-pointer"
-      aria-label={resolvedTheme === 'dark' ? 'Switch to light mode' : 'Switch to dark mode'}
-    >
-      {resolvedTheme === 'dark' ? <Sun className="h-5 w-5" /> : <Moon className="h-5 w-5" />}
-    </button>
-  )
-}
-`),await n(a(l,`app/nav-header.tsx`),`'use client'
-
-import Link from 'next/link'
-import { usePathname } from 'next/navigation'
-import { ThemeToggle } from './theme-toggle'
-
-const links = [
-  { href: '/', label: 'Home' },
-  { href: '/auth/sign-in', label: 'Sign In' },
-  { href: '/setup', label: 'Setup' },
-]
-
-export function NavHeader() {
-  const pathname = usePathname()
-
-  function isActive(href: string) {
-    return href === '/' ? pathname === '/' : pathname.startsWith(href)
-  }
-
-  const linkClass = (href: string) =>
-    \`px-3 py-1.5 rounded-md text-sm transition-colors \${
-      isActive(href)
-        ? 'bg-zinc-200 text-zinc-900 dark:bg-zinc-800 dark:text-zinc-50'
-        : 'text-zinc-500 hover:text-zinc-700 hover:bg-zinc-100 dark:text-zinc-400 dark:hover:text-zinc-200 dark:hover:bg-zinc-800/50'
-    }\`
-
-  return (
-    <header className="sticky top-0 z-50 backdrop-blur-md border-b bg-white/80 border-zinc-200 dark:bg-zinc-950/80 dark:border-zinc-800">
-      <nav className="max-w-6xl mx-auto flex items-center gap-1 px-4 h-12">
-        <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 mr-3 select-none">
-          ${c} Admin
-        </span>
-        {links.map(({ href, label }) => (
-          <Link key={href} href={href} className={linkClass(href)}>
-            {label}
-          </Link>
-        ))}
-        <div className="ml-auto">
-          <ThemeToggle />
-        </div>
-      </nav>
-    </header>
-  )
-}
-`),await n(a(l,`app/layout.tsx`),`import './globals.css'
-
-export default function RootLayout({ children }: { children: React.ReactNode }) {
-  return children
-}
-`),await n(a(l,`app/[locale]/layout.tsx`),`import type { Metadata } from 'next'
-import { Geist, Geist_Mono } from 'next/font/google'
-import { NextIntlClientProvider } from 'next-intl'
-import { getMessages } from 'next-intl/server'
-import { notFound } from 'next/navigation'
-import { routing } from '@/i18n/routing'
-import { ThemeProvider } from '../theme-provider'
-import { NavHeader } from '../nav-header'
-
-const geistSans = Geist({
-  variable: '--font-geist-sans',
-  subsets: ['latin'],
-})
-
-const geistMono = Geist_Mono({
-  variable: '--font-geist-mono',
-  subsets: ['latin'],
-})
-
-export const metadata: Metadata = {
-  title: '${c} Admin',
-  description: 'Built with Lumi CMS Toolkit',
-}
-
-export default async function LocaleLayout({
-  children,
-  params,
-}: {
-  children: React.ReactNode
-  params: Promise<{ locale: string }>
-}) {
-  const { locale } = await params
-  if (!routing.locales.includes(locale as any)) notFound()
-
-  const messages = await getMessages()
-
-  return (
-    <html lang={locale} suppressHydrationWarning>
-      <body className={\`\${geistSans.variable} \${geistMono.variable} antialiased\`}>
-        <ThemeProvider>
-          <NextIntlClientProvider locale={locale} messages={messages}>
-            <NavHeader />
-            {children}
-          </NextIntlClientProvider>
-        </ThemeProvider>
-      </body>
-    </html>
-  )
-}
-`),await n(a(l,`app/[locale]/page.tsx`),`import { createQueryClient } from '@murumets-ee/core/clients'
-import { Article, Category } from '@${c}/config/entities'
-import { getToolkitApp } from '@${c}/config/app'
-
-export default async function HomePage() {
-  await getToolkitApp()
-  const articles = createQueryClient(Article)
-  const categories = createQueryClient(Category)
-
-  const [articleList, categoryList] = await Promise.all([
-    articles.findMany({ limit: 10 }),
-    categories.findMany({}),
-  ])
-
-  return (
-    <div className="min-h-screen p-8">
-      <div className="max-w-4xl mx-auto">
-        <h1 className="text-4xl font-bold mb-8">Welcome to ${c}</h1>
-
-        <section className="mb-12">
-          <h2 className="text-2xl font-semibold mb-4">
-            Categories ({categoryList.length})
-          </h2>
-          <div className="grid gap-4 md:grid-cols-2">
-            {categoryList.map((cat) => (
-              <div
-                key={cat.id}
-                className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-4"
-              >
-                <h3 className="font-semibold text-lg">{cat.name}</h3>
-                <p className="text-sm text-zinc-600 dark:text-zinc-400">
-                  {cat.description}
-                </p>
-              </div>
-            ))}
-          </div>
-        </section>
-
-        <section>
-          <h2 className="text-2xl font-semibold mb-4">
-            Articles ({articleList.length})
-          </h2>
-          {articleList.length === 0 ? (
-            <p className="text-zinc-500">No published articles yet.</p>
-          ) : (
-            <div className="space-y-4">
-              {articleList.map((article) => (
-                <div
-                  key={article.id}
-                  className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-6"
-                >
-                  <h3 className="text-xl font-bold">{article.title}</h3>
-                  <p className="text-zinc-600 dark:text-zinc-400 mt-2">
-                    {article.excerpt}
-                  </p>
-                </div>
-              ))}
-            </div>
-          )}
-        </section>
-      </div>
-    </div>
-  )
-}
-`),await n(a(l,`app/api/auth/[...all]/route.ts`),`import { toNextJsHandler } from 'better-auth/next-js'
-import { auth } from '@${c}/config/auth'
-
-const { GET, POST } = toNextJsHandler(auth)
-export { GET, POST }
-`),await n(a(l,`app/[locale]/auth/layout.tsx`),`import { AuthProviders } from './providers'
-import type { ReactNode } from 'react'
-
-export default function AuthLayout({ children }: { children: ReactNode }) {
-  return (
-    <AuthProviders>
-      <div className="flex min-h-[calc(100vh-3rem)] items-center justify-center px-4">
-        {children}
-      </div>
-    </AuthProviders>
-  )
-}
-`),await n(a(l,`app/[locale]/auth/providers.tsx`),`'use client'
-
-import { AuthUIProvider } from '@murumets-ee/auth-ui'
-import { authClient } from '@${c}/config/auth-client'
-import Link from 'next/link'
-import { useRouter } from 'next/navigation'
-import { useLocale } from 'next-intl'
-import type { ReactNode } from 'react'
-
-export function AuthProviders({ children }: { children: ReactNode }) {
-  const router = useRouter()
-  const locale = useLocale()
-
-  return (
-    <AuthUIProvider
-      authClient={authClient as never}
-      basePath="/auth"
-      redirectTo="/"
-      Link={Link}
-      navigate={(url) => router.push(url)}
-      resetPasswordUrl={\`/\${locale}/auth/reset-password\`}
-    >
-      {children}
-    </AuthUIProvider>
-  )
-}
-`),await n(a(l,`app/[locale]/auth/sign-in/page.tsx`),`import { SignInForm } from '@murumets-ee/auth-ui'
-
-export default function SignInPage() {
-  return <SignInForm />
-}
-`),await n(a(l,`app/[locale]/auth/sign-up/page.tsx`),`import { SignUpForm } from '@murumets-ee/auth-ui'
-
-export default function SignUpPage() {
-  return <SignUpForm />
-}
-`),await n(a(l,`app/[locale]/auth/forgot-password/page.tsx`),`import { ForgotPasswordForm } from '@murumets-ee/auth-ui'
-
-export default function ForgotPasswordPage() {
-  return <ForgotPasswordForm />
-}
-`),await n(a(l,`app/[locale]/auth/reset-password/page.tsx`),`import { Suspense } from 'react'
-import { ResetPasswordContent } from './content'
-
-export default function ResetPasswordPage() {
-  return (
-    <Suspense>
-      <ResetPasswordContent />
-    </Suspense>
-  )
-}
-`),await n(a(l,`app/[locale]/auth/reset-password/content.tsx`),`'use client'
-
-import { useSearchParams } from 'next/navigation'
-import { ResetPasswordForm } from '@murumets-ee/auth-ui'
-
-export function ResetPasswordContent() {
-  const searchParams = useSearchParams()
-  const token = searchParams.get('token')
-
-  if (!token) {
-    return (
-      <div className="text-center">
-        <h1 className="text-2xl font-bold text-zinc-900 dark:text-zinc-50">
-          Invalid or expired link
-        </h1>
-        <p className="mt-2 text-zinc-500">
-          Please request a new password reset.
-        </p>
-      </div>
-    )
-  }
-
-  return <ResetPasswordForm token={token} />
-}
-`),await n(a(l,`app/[locale]/setup/page.tsx`),`import { redirect } from 'next/navigation'
-import { sql } from 'drizzle-orm'
-import { getToolkitApp } from '@${c}/config/app'
-import { SetupForm } from './form'
-
-export default async function SetupPage() {
-  const app = await getToolkitApp()
-  const result = await app.db.readOnly.execute<{ count: string }>(
-    sql\`SELECT COUNT(*)::text as count FROM "user"\`,
-  )
-
-  if (Number(result[0]?.count) > 0) {
-    redirect('/')
-  }
-
-  return (
-    <div className="max-w-md mx-auto p-8">
-      <h1 className="text-2xl font-bold mb-2">Create Admin</h1>
-      <p className="text-sm text-zinc-500 dark:text-zinc-400 mb-6">
-        No users found. Create the first admin account.
-      </p>
-      <SetupForm />
-    </div>
-  )
-}
-`),await n(a(l,`app/[locale]/setup/form.tsx`),`'use client'
-
-import { useState } from 'react'
-import { createFirstAdmin } from './actions'
-
-export function SetupForm() {
-  const [result, setResult] = useState<{ ok?: boolean; error?: string; email?: string } | null>(null)
-  const [loading, setLoading] = useState(false)
-
-  async function handleSubmit(e: React.FormEvent<HTMLFormElement>) {
-    e.preventDefault()
-    setLoading(true)
-    setResult(null)
-    const res = await createFirstAdmin(new FormData(e.currentTarget))
-    setResult(res)
-    setLoading(false)
-  }
-
-  if (result?.ok) {
-    return (
-      <div className="space-y-2">
-        <p className="text-green-600 dark:text-green-400">Admin created: {result.email}</p>
-        <a href="/auth/sign-in" className="text-blue-600 dark:text-blue-400 hover:underline">
-          Sign in &rarr;
-        </a>
-      </div>
-    )
-  }
-
-  return (
-    <form onSubmit={handleSubmit} className="flex flex-col gap-4">
-      <label className="text-sm font-medium">
-        Name
-        <input
-          name="name"
-          required
-          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
-        />
-      </label>
-      <label className="text-sm font-medium">
-        Email
-        <input
-          name="email"
-          type="email"
-          required
-          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
-        />
-      </label>
-      <label className="text-sm font-medium">
-        Password (min 8 chars)
-        <input
-          name="password"
-          type="password"
-          required
-          minLength={8}
-          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
-        />
-      </label>
-
-      {result?.error && <p className="text-red-600 dark:text-red-400 text-sm">{result.error}</p>}
-
-      <button
-        type="submit"
-        disabled={loading}
-        className="px-4 py-2 text-sm rounded-md bg-blue-600 text-white hover:bg-blue-500 disabled:opacity-50 transition-colors"
-      >
-        {loading ? 'Creating...' : 'Create Admin'}
-      </button>
-    </form>
-  )
-}
-`),await n(a(l,`app/[locale]/setup/actions.ts`),`'use server'
-
-import { sql } from 'drizzle-orm'
-import { getToolkitApp } from '@${c}/config/app'
-import { getAuth } from '@murumets-ee/auth'
-
-export async function createFirstAdmin(formData: FormData) {
-  const email = formData.get('email') as string
-  const password = formData.get('password') as string
-  const name = formData.get('name') as string
+  try {
+    if (!process.env.DATABASE_URL) {
+      throw new Error('DATABASE_URL environment variable is required')
+    }
 
-  if (!email || !password || !name) {
-    return { error: 'All fields are required' }
-  }
+    const db = createDbClient({ url: process.env.DATABASE_URL })
+    await runMigrations(db, import.meta.dirname + '/..')
 
-  if (password.length < 8) {
-    return { error: 'Password must be at least 8 characters' }
+    console.log('Migrations completed successfully')
+    process.exit(0)
+  } catch (error) {
+    console.error('Migration failed:', error)
+    process.exit(1)
   }
+}
 
-  const app = await getToolkitApp()
+migrate()
+`),await e(d(i,`scripts/reset-db.ts`),`/**
+ * Reset database (DROP all tables)
+ * WARNING: Only for development
+ */
 
-  const canCreate = await app.db.readWrite.transaction(async (tx) => {
-    await tx.execute(sql\`SELECT pg_advisory_xact_lock(1)\`)
+import postgres from 'postgres'
 
-    const result = await tx.execute<{ count: string }>(
-      sql\`SELECT COUNT(*)::text as count FROM "user"\`,
-    )
-    return Number(result[0]?.count) === 0
-  })
+async function resetDb() {
+  const DATABASE_URL = process.env.DATABASE_URL
 
-  if (!canCreate) {
-    return { error: 'Admin user already exists. Setup is complete.' }
+  if (!DATABASE_URL) {
+    throw new Error('DATABASE_URL not set')
   }
 
-  const auth = getAuth()
+  console.warn('WARNING: This will DROP ALL TABLES')
+  console.log('Database:', DATABASE_URL.split('@')[1])
 
-  const adminUser = await auth.api.signUpEmail({
-    body: { email, password, name },
-  })
+  const sql = postgres(DATABASE_URL)
 
-  await app.db.readWrite.execute(
-    sql\`UPDATE "user" SET role = 'admin' WHERE id = \${adminUser.user.id}\`,
-  )
+  try {
+    await sql\`
+      DROP SCHEMA public CASCADE;
+      CREATE SCHEMA public;
+      GRANT ALL ON SCHEMA public TO PUBLIC;
+    \`
 
-  return { ok: true, email: adminUser.user.email }
+    console.log('Database reset complete')
+  } finally {
+    await sql.end()
+  }
 }
-`)}async function _(i,o){let{name:s}=o,c=a(i,`apps/web`);e(`pnpm create next-app@16 ${c} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await t(c,[`app/page.tsx`,`app/page.module.css`,`app/fonts`,`README.md`,`pnpm-workspace.yaml`]),await r(a(c,`package.json`),{dependencies:{[`@${s}/config`]:`workspace:*`,"@murumets-ee/core":`^${f.myorgCore}`,"@murumets-ee/auth-ui":`^${f.myorgAuthUi}`,"next-intl":`^${f.nextIntl}`,"next-themes":`^${f.nextThemes}`,"lucide-react":`^${f.lucideReact}`},devDependencies:{"babel-plugin-react-compiler":f.babelReactCompiler}});let{appendToFile:l}=await import(`./utils-Bmw75lEa.mjs`).then(e=>e.a);await l(a(c,`.gitignore`),`
+
+resetDb().catch(console.error)
+`)}async function v(i,a){let{name:s}=a,c=d(i,`apps/admin`);await o(d(i,`apps`),{recursive:!0}),n(`pnpm create next-app@16 ${c} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await r(c,[`app/page.tsx`,`app/page.module.css`,`app/fonts`,`README.md`,`pnpm-workspace.yaml`]),await t(d(c,`package.json`),{dependencies:{[`@${s}/config`]:`workspace:*`,"@murumets-ee/auth-ui":`^${m.myorgAuthUi}`,"better-auth":`^${m.betterAuth}`,"next-intl":`^${m.nextIntl}`,"next-themes":`^${m.nextThemes}`,"lucide-react":`^${m.lucideReact}`,"react-hook-form":`^${m.reactHookForm}`,"@hookform/resolvers":`^${m.hookformResolvers}`,zod:`^${m.zod}`},devDependencies:{"babel-plugin-react-compiler":m.babelReactCompiler}});let{appendToFile:l}=await import(`./utils-DHetVfSn.mjs`).then(e=>e.i);await l(d(c,`.gitignore`),`
 # Environment
 .env*
 !.env.example
-`),await n(a(c,`next.config.ts`),`import type { NextConfig } from 'next'
+`),await e(d(c,`next.config.ts`),`import type { NextConfig } from 'next'
 import createNextIntlPlugin from 'next-intl/plugin'
 
 const withNextIntl = createNextIntlPlugin('./i18n/request.ts')
@@ -2970,24 +354,50 @@ const nextConfig: NextConfig = {
     '@murumets-ee/auth-ui',
   ],
   serverExternalPackages: ['drizzle-orm', 'postgres'],
+  experimental: {
+    serverActions: {
+      bodySizeLimit: '2mb',
+    },
+  },
 }
 
 export default withNextIntl(nextConfig)
-`),await n(a(c,`proxy.ts`),`import createMiddleware from 'next-intl/middleware'
+`),await e(d(c,`proxy.ts`),`import { NextRequest, NextResponse } from 'next/server'
+import { getSessionCookie } from 'better-auth/cookies'
+import createMiddleware from 'next-intl/middleware'
 import { routing } from './i18n/routing'
 
-export default createMiddleware(routing)
+const intlMiddleware = createMiddleware(routing)
+
+const protectedPaths = ['/setup']
+
+export function proxy(request: NextRequest) {
+  const { pathname } = request.nextUrl
+
+  const localePattern = new RegExp(\`^/(\${routing.locales.join('|')})\`)
+  const pathWithoutLocale = pathname.replace(localePattern, '') || '/'
+
+  if (protectedPaths.some((p) => pathWithoutLocale.startsWith(p))) {
+    const session = getSessionCookie(request)
+    if (!session) {
+      const locale = pathname.match(localePattern)?.[1] || routing.defaultLocale
+      return NextResponse.redirect(new URL(\`/\${locale}/auth/sign-in\`, request.url))
+    }
+  }
+
+  return intlMiddleware(request)
+}
 
 export const config = {
   matcher: '/((?!api|_next|_vercel|.*\\\\..*).*)',
 }
-`),await n(a(c,`i18n/routing.ts`),`import { defineRouting } from 'next-intl/routing'
+`),await e(d(c,`i18n/routing.ts`),`import { defineRouting } from 'next-intl/routing'
 
 export const routing = defineRouting({
   locales: ['en'],
   defaultLocale: 'en',
 })
-`),await n(a(c,`i18n/request.ts`),`import { getRequestConfig } from 'next-intl/server'
+`),await e(d(c,`i18n/request.ts`),`import { getRequestConfig } from 'next-intl/server'
 import { hasLocale } from 'next-intl'
 import { routing } from './routing'
 import { getAuthMessages } from '@murumets-ee/auth-ui/i18n'
@@ -3007,7 +417,7 @@ export default getRequestConfig(async ({ requestLocale }) => {
     },
   }
 })
-`),await n(a(c,`app/globals.css`),`@import "tailwindcss";
+`),await e(d(c,`app/globals.css`),`@import "tailwindcss";
 @source "../node_modules/@murumets-ee/auth-ui/dist";
 
 @custom-variant dark (&:where(.dark, .dark *));
@@ -3034,7 +444,7 @@ body {
   color: var(--foreground);
   font-family: Arial, Helvetica, sans-serif;
 }
-`),await n(a(c,`app/theme-provider.tsx`),`'use client'
+`),await e(d(c,`app/theme-provider.tsx`),`'use client'
 
 import { ThemeProvider as NextThemesProvider } from 'next-themes'
 import type { ReactNode } from 'react'
@@ -3051,7 +461,7 @@ export function ThemeProvider({ children }: { children: ReactNode }) {
     </NextThemesProvider>
   )
 }
-`),await n(a(c,`app/theme-toggle.tsx`),`'use client'
+`),await e(d(c,`app/theme-toggle.tsx`),`'use client'
 
 import { useTheme } from 'next-themes'
 import { useState, useEffect } from 'react'
@@ -3076,231 +486,58 @@ export function ThemeToggle() {
     >
       {resolvedTheme === 'dark' ? <Sun className="h-5 w-5" /> : <Moon className="h-5 w-5" />}
     </button>
-  )
-}
-`),await n(a(c,`app/nav-header.tsx`),`'use client'
-
-import Link from 'next/link'
-import { usePathname } from 'next/navigation'
-import { ThemeToggle } from './theme-toggle'
-
-const links = [
-  { href: '/', label: 'Home' },
-]
-
-export function NavHeader() {
-  const pathname = usePathname()
-
-  function isActive(href: string) {
-    return href === '/' ? pathname === '/' : pathname.startsWith(href)
-  }
-
-  const linkClass = (href: string) =>
-    \`px-3 py-1.5 rounded-md text-sm transition-colors \${
-      isActive(href)
-        ? 'bg-zinc-200 text-zinc-900 dark:bg-zinc-800 dark:text-zinc-50'
-        : 'text-zinc-500 hover:text-zinc-700 hover:bg-zinc-100 dark:text-zinc-400 dark:hover:text-zinc-200 dark:hover:bg-zinc-800/50'
-    }\`
-
-  return (
-    <header className="sticky top-0 z-50 backdrop-blur-md border-b bg-white/80 border-zinc-200 dark:bg-zinc-950/80 dark:border-zinc-800">
-      <nav className="max-w-6xl mx-auto flex items-center gap-1 px-4 h-12">
-        <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 mr-3 select-none">
-          ${s}
-        </span>
-        {links.map(({ href, label }) => (
-          <Link key={href} href={href} className={linkClass(href)}>
-            {label}
-          </Link>
-        ))}
-        <div className="ml-auto">
-          <ThemeToggle />
-        </div>
-      </nav>
-    </header>
-  )
-}
-`),await n(a(c,`app/layout.tsx`),`import './globals.css'
-
-export default function RootLayout({ children }: { children: React.ReactNode }) {
-  return children
-}
-`),await n(a(c,`app/[locale]/layout.tsx`),`import type { Metadata } from 'next'
-import { Geist, Geist_Mono } from 'next/font/google'
-import { NextIntlClientProvider } from 'next-intl'
-import { getMessages } from 'next-intl/server'
-import { notFound } from 'next/navigation'
-import { routing } from '@/i18n/routing'
-import { ThemeProvider } from '../theme-provider'
-import { NavHeader } from '../nav-header'
-
-const geistSans = Geist({
-  variable: '--font-geist-sans',
-  subsets: ['latin'],
-})
-
-const geistMono = Geist_Mono({
-  variable: '--font-geist-mono',
-  subsets: ['latin'],
-})
-
-export const metadata: Metadata = {
-  title: '${s}',
-  description: 'Built with Lumi CMS Toolkit',
-}
-
-export default async function LocaleLayout({
-  children,
-  params,
-}: {
-  children: React.ReactNode
-  params: Promise<{ locale: string }>
-}) {
-  const { locale } = await params
-  if (!routing.locales.includes(locale as any)) notFound()
-
-  const messages = await getMessages()
-
-  return (
-    <html lang={locale} suppressHydrationWarning>
-      <body className={\`\${geistSans.variable} \${geistMono.variable} antialiased\`}>
-        <ThemeProvider>
-          <NextIntlClientProvider locale={locale} messages={messages}>
-            <NavHeader />
-            {children}
-          </NextIntlClientProvider>
-        </ThemeProvider>
-      </body>
-    </html>
-  )
-}
-`),await n(a(c,`app/[locale]/page.tsx`),`import { createQueryClient } from '@murumets-ee/core/clients'
-import { Article, Category } from '@${s}/config/entities'
-import { getToolkitApp } from '@${s}/config/app'
-
-export default async function HomePage() {
-  await getToolkitApp()
-  const articles = createQueryClient(Article)
-  const categories = createQueryClient(Category)
-
-  const [articleList, categoryList] = await Promise.all([
-    articles.findMany({ limit: 10 }),
-    categories.findMany({}),
-  ])
-
-  return (
-    <div className="min-h-screen p-8">
-      <div className="max-w-4xl mx-auto">
-        <h1 className="text-4xl font-bold mb-8">Welcome to ${s}</h1>
-
-        <section className="mb-12">
-          <h2 className="text-2xl font-semibold mb-4">
-            Categories ({categoryList.length})
-          </h2>
-          <div className="grid gap-4 md:grid-cols-2">
-            {categoryList.map((cat) => (
-              <div
-                key={cat.id}
-                className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-4"
-              >
-                <h3 className="font-semibold text-lg">{cat.name}</h3>
-                <p className="text-sm text-zinc-600 dark:text-zinc-400">
-                  {cat.description}
-                </p>
-              </div>
-            ))}
-          </div>
-        </section>
-
-        <section>
-          <h2 className="text-2xl font-semibold mb-4">
-            Articles ({articleList.length})
-          </h2>
-          {articleList.length === 0 ? (
-            <p className="text-zinc-500">No published articles yet.</p>
-          ) : (
-            <div className="space-y-4">
-              {articleList.map((article) => (
-                <div
-                  key={article.id}
-                  className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-6"
-                >
-                  <h3 className="text-xl font-bold">{article.title}</h3>
-                  <p className="text-zinc-600 dark:text-zinc-400 mt-2">
-                    {article.excerpt}
-                  </p>
-                </div>
-              ))}
-            </div>
-          )}
-        </section>
-      </div>
-    </div>
-  )
-}
-`)}async function v(e,t){let{name:r}=t;await n(a(e,`next.config.ts`),`import type { NextConfig } from 'next'
-import createNextIntlPlugin from 'next-intl/plugin'
-
-const withNextIntl = createNextIntlPlugin('./i18n/request.ts')
-
-const nextConfig: NextConfig = {
-  output: 'standalone',
-  reactCompiler: true,
-  transpilePackages: [
-    '@murumets-ee/core', '@murumets-ee/entity', '@murumets-ee/db',
-    '@murumets-ee/logging', '@murumets-ee/auth', '@murumets-ee/auth-ui',
-    '@murumets-ee/admin-ui', '@murumets-ee/content', '@murumets-ee/settings',
-    '@murumets-ee/storage', '@murumets-ee/media', '@murumets-ee/taxonomy',
-    '@murumets-ee/queue', '@murumets-ee/mail', '@murumets-ee/ticketing',
-    '@murumets-ee/ticketing-ui', '@murumets-ee/tokens', '@murumets-ee/ui',
-  ],
-  serverExternalPackages: ['drizzle-orm', 'postgres', 'pino', 'file-type'],
-  experimental: {
-    serverActions: {
-      bodySizeLimit: '2mb',
-    },
-  },
+  )
 }
+`),await e(d(c,`app/nav-header.tsx`),`'use client'
 
-export default withNextIntl(nextConfig)
-`),await n(a(e,`proxy.ts`),`import { NextRequest, NextResponse } from 'next/server'
-import { getSessionCookie } from 'better-auth/cookies'
-import createMiddleware from 'next-intl/middleware'
-import { routing } from './i18n/routing'
-
-const intlMiddleware = createMiddleware(routing)
-
-const protectedPaths = ['/setup']
+import Link from 'next/link'
+import { usePathname } from 'next/navigation'
+import { ThemeToggle } from './theme-toggle'
 
-export function proxy(request: NextRequest) {
-  const { pathname } = request.nextUrl
+const links = [
+  { href: '/', label: 'Home' },
+  { href: '/auth/sign-in', label: 'Sign In' },
+  { href: '/setup', label: 'Setup' },
+]
 
-  // Strip locale prefix to check actual path
-  const localePattern = new RegExp(\`^/(\${routing.locales.join('|')})\`)
-  const pathWithoutLocale = pathname.replace(localePattern, '') || '/'
+export function NavHeader() {
+  const pathname = usePathname()
 
-  // Auth check for protected paths
-  if (protectedPaths.some((p) => pathWithoutLocale.startsWith(p))) {
-    const session = getSessionCookie(request)
-    if (!session) {
-      const locale = pathname.match(localePattern)?.[1] || routing.defaultLocale
-      return NextResponse.redirect(new URL(\`/\${locale}/auth/sign-in\`, request.url))
-    }
+  function isActive(href: string) {
+    return href === '/' ? pathname === '/' : pathname.startsWith(href)
   }
 
-  // Locale routing
-  return intlMiddleware(request)
-}
+  const linkClass = (href: string) =>
+    \`px-3 py-1.5 rounded-md text-sm transition-colors \${
+      isActive(href)
+        ? 'bg-zinc-200 text-zinc-900 dark:bg-zinc-800 dark:text-zinc-50'
+        : 'text-zinc-500 hover:text-zinc-700 hover:bg-zinc-100 dark:text-zinc-400 dark:hover:text-zinc-200 dark:hover:bg-zinc-800/50'
+    }\`
 
-export const config = {
-  matcher: '/((?!api|_next|_vercel|.*\\\\..*).*)',
+  return (
+    <header className="sticky top-0 z-50 backdrop-blur-md border-b bg-white/80 border-zinc-200 dark:bg-zinc-950/80 dark:border-zinc-800">
+      <nav className="max-w-6xl mx-auto flex items-center gap-1 px-4 h-12">
+        <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 mr-3 select-none">
+          ${s} Admin
+        </span>
+        {links.map(({ href, label }) => (
+          <Link key={href} href={href} className={linkClass(href)}>
+            {label}
+          </Link>
+        ))}
+        <div className="ml-auto">
+          <ThemeToggle />
+        </div>
+      </nav>
+    </header>
+  )
 }
-`),await n(a(e,`app/layout.tsx`),`import './globals.css'
+`),await e(d(c,`app/layout.tsx`),`import './globals.css'
 
 export default function RootLayout({ children }: { children: React.ReactNode }) {
   return children
 }
-`),await n(a(e,`app/[locale]/layout.tsx`),`import type { Metadata } from 'next'
+`),await e(d(c,`app/[locale]/layout.tsx`),`import type { Metadata } from 'next'
 import { Geist, Geist_Mono } from 'next/font/google'
 import { NextIntlClientProvider } from 'next-intl'
 import { getMessages } from 'next-intl/server'
@@ -3320,7 +557,7 @@ const geistMono = Geist_Mono({
 })
 
 export const metadata: Metadata = {
-  title: '${r}',
+  title: '${s} Admin',
   description: 'Built with Lumi CMS Toolkit',
 }
 
@@ -3349,9 +586,9 @@ export default async function LocaleLayout({
     </html>
   )
 }
-`),await n(a(e,`app/[locale]/page.tsx`),`import { createQueryClient } from '@murumets-ee/core/clients'
-import { Article, Category } from '@/entities'
-import { getToolkitApp } from '@/lib/app'
+`),await e(d(c,`app/[locale]/page.tsx`),`import { createQueryClient } from '@murumets-ee/core/clients'
+import { Article, Category } from '@${s}/config/entities'
+import { getToolkitApp } from '@${s}/config/app'
 
 export default async function HomePage() {
   await getToolkitApp()
@@ -3366,7 +603,7 @@ export default async function HomePage() {
   return (
     <div className="min-h-screen p-8">
       <div className="max-w-4xl mx-auto">
-        <h1 className="text-4xl font-bold mb-8">Welcome to ${r}</h1>
+        <h1 className="text-4xl font-bold mb-8">Welcome to ${s}</h1>
 
         <section className="mb-12">
           <h2 className="text-2xl font-semibold mb-4">
@@ -3413,49 +650,298 @@ export default async function HomePage() {
     </div>
   )
 }
-`)}async function y(e,t){await n(a(e,`scripts/generate-schema.ts`),`import { execSync } from 'node:child_process'
-execSync('npx @murumets-ee/cli generate', { stdio: 'inherit', cwd: import.meta.dirname + '/..' })
-`),await n(a(e,`scripts/migrate.ts`),`import { execSync } from 'node:child_process'
-execSync('npx @murumets-ee/cli migrate', { stdio: 'inherit', cwd: import.meta.dirname + '/..' })
-`),await n(a(e,`scripts/reset-db.ts`),`import { execSync } from 'node:child_process'
-execSync('npx @murumets-ee/cli reset --force', { stdio: 'inherit', cwd: import.meta.dirname + '/..' })
-`),await n(a(e,`scripts/worker.ts`),`/**
- * Standalone queue worker process.
- *
- * Run separately from the Next.js web server:
- *   pnpm worker          (or: tsx --env-file=.env scripts/worker.ts)
- *
- * The web server should set QUEUE_WORKER=false so it only enqueues jobs.
- * This process handles job execution.
- */
+`),await e(d(c,`app/api/auth/[...all]/route.ts`),`import { toNextJsHandler } from 'better-auth/next-js'
+import { auth } from '@${s}/config/auth'
+
+const { GET, POST } = toNextJsHandler(auth)
+export { GET, POST }
+`),await e(d(c,`app/[locale]/auth/layout.tsx`),`import { AuthProviders } from './providers'
+import type { ReactNode } from 'react'
+
+export default function AuthLayout({ children }: { children: ReactNode }) {
+  return (
+    <AuthProviders>
+      <div className="flex min-h-[calc(100vh-3rem)] items-center justify-center px-4">
+        {children}
+      </div>
+    </AuthProviders>
+  )
+}
+`),await e(d(c,`app/[locale]/auth/providers.tsx`),`'use client'
+
+import { AuthUIProvider } from '@murumets-ee/auth-ui'
+import { authClient } from '@${s}/config/auth-client'
+import Link from 'next/link'
+import { useRouter } from 'next/navigation'
+import { useLocale } from 'next-intl'
+import type { ReactNode } from 'react'
+
+export function AuthProviders({ children }: { children: ReactNode }) {
+  const router = useRouter()
+  const locale = useLocale()
+
+  return (
+    <AuthUIProvider
+      authClient={authClient as never}
+      basePath="/auth"
+      redirectTo="/"
+      Link={Link}
+      navigate={(url) => router.push(url)}
+      resetPasswordUrl={\`/\${locale}/auth/reset-password\`}
+    >
+      {children}
+    </AuthUIProvider>
+  )
+}
+`),await e(d(c,`app/[locale]/auth/sign-in/page.tsx`),`import { SignInForm } from '@murumets-ee/auth-ui'
+
+export default function SignInPage() {
+  return <SignInForm />
+}
+`),await e(d(c,`app/[locale]/auth/sign-up/page.tsx`),`import { SignUpForm } from '@murumets-ee/auth-ui'
+
+export default function SignUpPage() {
+  return <SignUpForm />
+}
+`),await e(d(c,`app/[locale]/auth/forgot-password/page.tsx`),`import { ForgotPasswordForm } from '@murumets-ee/auth-ui'
+
+export default function ForgotPasswordPage() {
+  return <ForgotPasswordForm />
+}
+`),await e(d(c,`app/[locale]/auth/reset-password/page.tsx`),`import { Suspense } from 'react'
+import { ResetPasswordContent } from './content'
+
+export default function ResetPasswordPage() {
+  return (
+    <Suspense>
+      <ResetPasswordContent />
+    </Suspense>
+  )
+}
+`),await e(d(c,`app/[locale]/auth/reset-password/content.tsx`),`'use client'
+
+import { useSearchParams } from 'next/navigation'
+import { ResetPasswordForm } from '@murumets-ee/auth-ui'
+
+export function ResetPasswordContent() {
+  const searchParams = useSearchParams()
+  const token = searchParams.get('token')
+
+  if (!token) {
+    return (
+      <div className="text-center">
+        <h1 className="text-2xl font-bold text-zinc-900 dark:text-zinc-50">
+          Invalid or expired link
+        </h1>
+        <p className="mt-2 text-zinc-500">
+          Please request a new password reset.
+        </p>
+      </div>
+    )
+  }
+
+  return <ResetPasswordForm token={token} />
+}
+`),await e(d(c,`app/[locale]/setup/page.tsx`),`import { redirect } from 'next/navigation'
+import { sql } from 'drizzle-orm'
+import { getToolkitApp } from '@${s}/config/app'
+import { SetupForm } from './form'
+
+export default async function SetupPage() {
+  const app = await getToolkitApp()
+  const result = await app.db.readOnly.execute<{ count: string }>(
+    sql\`SELECT COUNT(*)::text as count FROM "user"\`,
+  )
+
+  if (Number(result[0]?.count) > 0) {
+    redirect('/')
+  }
+
+  return (
+    <div className="max-w-md mx-auto p-8">
+      <h1 className="text-2xl font-bold mb-2">Create Admin</h1>
+      <p className="text-sm text-zinc-500 dark:text-zinc-400 mb-6">
+        No users found. Create the first admin account.
+      </p>
+      <SetupForm />
+    </div>
+  )
+}
+`),await e(d(c,`app/[locale]/setup/form.tsx`),`'use client'
+
+import { useState } from 'react'
+import { createFirstAdmin } from './actions'
+
+export function SetupForm() {
+  const [result, setResult] = useState<{ ok?: boolean; error?: string; email?: string } | null>(null)
+  const [loading, setLoading] = useState(false)
+
+  async function handleSubmit(e: React.FormEvent<HTMLFormElement>) {
+    e.preventDefault()
+    setLoading(true)
+    setResult(null)
+    const res = await createFirstAdmin(new FormData(e.currentTarget))
+    setResult(res)
+    setLoading(false)
+  }
+
+  if (result?.ok) {
+    return (
+      <div className="space-y-2">
+        <p className="text-green-600 dark:text-green-400">Admin created: {result.email}</p>
+        <a href="/auth/sign-in" className="text-blue-600 dark:text-blue-400 hover:underline">
+          Sign in &rarr;
+        </a>
+      </div>
+    )
+  }
+
+  return (
+    <form onSubmit={handleSubmit} className="flex flex-col gap-4">
+      <label className="text-sm font-medium">
+        Name
+        <input
+          name="name"
+          required
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+      <label className="text-sm font-medium">
+        Email
+        <input
+          name="email"
+          type="email"
+          required
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+      <label className="text-sm font-medium">
+        Password (min 8 chars)
+        <input
+          name="password"
+          type="password"
+          required
+          minLength={8}
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+
+      {result?.error && <p className="text-red-600 dark:text-red-400 text-sm">{result.error}</p>}
+
+      <button
+        type="submit"
+        disabled={loading}
+        className="px-4 py-2 text-sm rounded-md bg-blue-600 text-white hover:bg-blue-500 disabled:opacity-50 transition-colors"
+      >
+        {loading ? 'Creating...' : 'Create Admin'}
+      </button>
+    </form>
+  )
+}
+`),await e(d(c,`app/[locale]/setup/actions.ts`),`'use server'
+
+import { sql } from 'drizzle-orm'
+import { getToolkitApp } from '@${s}/config/app'
+import { getAuth } from '@murumets-ee/auth'
+
+export async function createFirstAdmin(formData: FormData) {
+  const email = formData.get('email') as string
+  const password = formData.get('password') as string
+  const name = formData.get('name') as string
+
+  if (!email || !password || !name) {
+    return { error: 'All fields are required' }
+  }
+
+  if (password.length < 8) {
+    return { error: 'Password must be at least 8 characters' }
+  }
+
+  const app = await getToolkitApp()
+
+  const canCreate = await app.db.readWrite.transaction(async (tx) => {
+    await tx.execute(sql\`SELECT pg_advisory_xact_lock(1)\`)
+
+    const result = await tx.execute<{ count: string }>(
+      sql\`SELECT COUNT(*)::text as count FROM "user"\`,
+    )
+    return Number(result[0]?.count) === 0
+  })
+
+  if (!canCreate) {
+    return { error: 'Admin user already exists. Setup is complete.' }
+  }
+
+  const auth = getAuth()
+
+  const adminUser = await auth.api.signUpEmail({
+    body: { email, password, name },
+  })
+
+  await app.db.readWrite.execute(
+    sql\`UPDATE "user" SET role = 'admin' WHERE id = \${adminUser.user.id}\`,
+  )
+
+  return { ok: true, email: adminUser.user.email }
+}
+`)}async function y(i,a){let{name:o}=a,s=d(i,`apps/web`);n(`pnpm create next-app@16 ${s} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await r(s,[`app/page.tsx`,`app/page.module.css`,`app/fonts`,`README.md`,`pnpm-workspace.yaml`]),await t(d(s,`package.json`),{dependencies:{[`@${o}/config`]:`workspace:*`,"@murumets-ee/core":`^${m.myorgCore}`,"@murumets-ee/auth-ui":`^${m.myorgAuthUi}`,"next-intl":`^${m.nextIntl}`,"next-themes":`^${m.nextThemes}`,"lucide-react":`^${m.lucideReact}`},devDependencies:{"babel-plugin-react-compiler":m.babelReactCompiler}});let{appendToFile:c}=await import(`./utils-DHetVfSn.mjs`).then(e=>e.i);await c(d(s,`.gitignore`),`
+# Environment
+.env*
+!.env.example
+`),await e(d(s,`next.config.ts`),`import type { NextConfig } from 'next'
+import createNextIntlPlugin from 'next-intl/plugin'
 
-import { createApp, setApp } from '@murumets-ee/core'
-import config from '../toolkit.config'
+const withNextIntl = createNextIntlPlugin('./i18n/request.ts')
 
-process.env.QUEUE_WORKER = 'true'
+const nextConfig: NextConfig = {
+  reactCompiler: true,
+  transpilePackages: [
+    '@${o}/config',
+    '@murumets-ee/core',
+    '@murumets-ee/entity',
+    '@murumets-ee/db',
+    '@murumets-ee/logging',
+    '@murumets-ee/auth-ui',
+  ],
+  serverExternalPackages: ['drizzle-orm', 'postgres'],
+}
 
-const app = await createApp(config)
-setApp(app)
+export default withNextIntl(nextConfig)
+`),await e(d(s,`proxy.ts`),`import createMiddleware from 'next-intl/middleware'
+import { routing } from './i18n/routing'
 
-app.logger.info('Queue worker process running. Press Ctrl+C to stop.')
+export default createMiddleware(routing)
 
-const shutdown = async () => {
-  app.logger.info('Shutting down queue worker...')
+export const config = {
+  matcher: '/((?!api|_next|_vercel|.*\\\\..*).*)',
+}
+`),await e(d(s,`i18n/routing.ts`),`import { defineRouting } from 'next-intl/routing'
 
-  const worker = (globalThis as Record<symbol, unknown>)[
-    Symbol.for('@murumets-ee/queue:worker')
-  ] as { stop: () => Promise<void> } | undefined
+export const routing = defineRouting({
+  locales: ['en'],
+  defaultLocale: 'en',
+})
+`),await e(d(s,`i18n/request.ts`),`import { getRequestConfig } from 'next-intl/server'
+import { hasLocale } from 'next-intl'
+import { routing } from './routing'
+import { getAuthMessages } from '@murumets-ee/auth-ui/i18n'
 
-  if (worker) {
-    await worker.stop()
-  }
+export default getRequestConfig(async ({ requestLocale }) => {
+  const requested = await requestLocale
+  const locale = hasLocale(routing.locales, requested)
+    ? requested
+    : routing.defaultLocale
 
-  process.exit(0)
-}
+  const authMessages = await getAuthMessages(locale)
 
-process.on('SIGINT', shutdown)
-process.on('SIGTERM', shutdown)
-`)}async function b(e,t){let{name:r}=t;await n(a(e,`app/globals.css`),`@import "tailwindcss";
+  return {
+    locale,
+    messages: {
+      ...authMessages,
+    },
+  }
+})
+`),await e(d(s,`app/globals.css`),`@import "tailwindcss";
 @source "../node_modules/@murumets-ee/auth-ui/dist";
 
 @custom-variant dark (&:where(.dark, .dark *));
@@ -3482,7 +968,7 @@ body {
   color: var(--foreground);
   font-family: Arial, Helvetica, sans-serif;
 }
-`),await n(a(e,`app/theme-provider.tsx`),`'use client'
+`),await e(d(s,`app/theme-provider.tsx`),`'use client'
 
 import { ThemeProvider as NextThemesProvider } from 'next-themes'
 import type { ReactNode } from 'react'
@@ -3499,7 +985,7 @@ export function ThemeProvider({ children }: { children: ReactNode }) {
     </NextThemesProvider>
   )
 }
-`),await n(a(e,`app/theme-toggle.tsx`),`'use client'
+`),await e(d(s,`app/theme-toggle.tsx`),`'use client'
 
 import { useTheme } from 'next-themes'
 import { useState, useEffect } from 'react'
@@ -3526,7 +1012,7 @@ export function ThemeToggle() {
     </button>
   )
 }
-`),await n(a(e,`app/nav-header.tsx`),`'use client'
+`),await e(d(s,`app/nav-header.tsx`),`'use client'
 
 import Link from 'next/link'
 import { usePathname } from 'next/navigation'
@@ -3534,8 +1020,6 @@ import { ThemeToggle } from './theme-toggle'
 
 const links = [
   { href: '/', label: 'Home' },
-  { href: '/auth/sign-in', label: 'Sign In' },
-  { href: '/setup', label: 'Setup' },
 ]
 
 export function NavHeader() {
@@ -3556,7 +1040,7 @@ export function NavHeader() {
     <header className="sticky top-0 z-50 backdrop-blur-md border-b bg-white/80 border-zinc-200 dark:bg-zinc-950/80 dark:border-zinc-800">
       <nav className="max-w-6xl mx-auto flex items-center gap-1 px-4 h-12">
         <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 mr-3 select-none">
-          ${r}
+          ${o}
         </span>
         {links.map(({ href, label }) => (
           <Link key={href} href={href} className={linkClass(href)}>
@@ -3570,106 +1054,123 @@ export function NavHeader() {
     </header>
   )
 }
-`)}async function x(e,t){let{name:r}=t;await n(a(e,`toolkit.config.ts`),`import { auth } from '@murumets-ee/auth/plugin'
-import { content } from '@murumets-ee/content/plugin'
-import { defineConfig } from '@murumets-ee/core'
-import { logging } from '@murumets-ee/logging/plugin'
-import { mail, ResendMailProvider } from '@murumets-ee/mail'
-import { media } from '@murumets-ee/media/plugin'
-import { queue } from '@murumets-ee/queue/plugin'
-import { settings } from '@murumets-ee/settings/plugin'
-import { storage } from '@murumets-ee/storage/plugin'
-import { taxonomy } from '@murumets-ee/taxonomy/plugin'
-import { ticketing } from '@murumets-ee/ticketing/plugin'
-import { Article, Category } from './entities'
-import * as authSchema from './generated/auth-schema'
+`),await e(d(s,`app/layout.tsx`),`import './globals.css'
 
-if (!process.env.DATABASE_URL) {
-  throw new Error('DATABASE_URL environment variable is required')
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return children
 }
+`),await e(d(s,`app/[locale]/layout.tsx`),`import type { Metadata } from 'next'
+import { Geist, Geist_Mono } from 'next/font/google'
+import { NextIntlClientProvider } from 'next-intl'
+import { getMessages } from 'next-intl/server'
+import { notFound } from 'next/navigation'
+import { routing } from '@/i18n/routing'
+import { ThemeProvider } from '../theme-provider'
+import { NavHeader } from '../nav-header'
 
-export default defineConfig({
-  db: {
-    url: process.env.DATABASE_URL,
-    poolMin: 2,
-    poolMax: 10,
-  },
-  logging: {
-    level: (process.env.LOG_LEVEL || 'info') as 'debug' | 'info' | 'warn' | 'error',
-    name: '${r}',
-  },
-  entities: [Category, Article],
-  plugins: [
-    auth({ providers: ['email'], schema: authSchema }),
-    content({
-      locales: [{ code: 'en', label: 'English' }],
-      defaultLocale: 'en',
-    }),
-    logging(),
-    settings(),
-    storage(),
-    media(),
-    taxonomy(),
-    queue(),
-    mail({
-      provider: process.env.RESEND_API_KEY
-        ? new ResendMailProvider({ apiKey: process.env.RESEND_API_KEY })
-        : undefined,
-      defaultFrom: process.env.MAIL_FROM ?? 'noreply@example.com',
-      webhookSecret: process.env.RESEND_WEBHOOK_SECRET,
-    }),
-    ticketing({
-      csatSecret: process.env.CSAT_SECRET,
-    }),
-  ],
-  projectRoot: import.meta.dirname,
+const geistSans = Geist({
+  variable: '--font-geist-sans',
+  subsets: ['latin'],
 })
-`),await n(a(e,`lib/app.ts`),`import { createApp, setApp, type ToolkitApp } from '@murumets-ee/core'
-import config from '../toolkit.config'
 
-let appInstance: ToolkitApp | null = null
+const geistMono = Geist_Mono({
+  variable: '--font-geist-mono',
+  subsets: ['latin'],
+})
 
-export async function getToolkitApp(): Promise<ToolkitApp> {
-  if (!appInstance) {
-    appInstance = await createApp(config)
-    setApp(appInstance)
-  }
-  return appInstance
+export const metadata: Metadata = {
+  title: '${o}',
+  description: 'Built with Lumi CMS Toolkit',
 }
-`),await n(a(e,`drizzle.config.ts`),`import type { Config } from 'drizzle-kit'
 
-if (!process.env.DATABASE_URL) {
-  throw new Error('DATABASE_URL environment variable is required')
+export default async function LocaleLayout({
+  children,
+  params,
+}: {
+  children: React.ReactNode
+  params: Promise<{ locale: string }>
+}) {
+  const { locale } = await params
+  if (!routing.locales.includes(locale as any)) notFound()
+
+  const messages = await getMessages()
+
+  return (
+    <html lang={locale} suppressHydrationWarning>
+      <body className={\`\${geistSans.variable} \${geistMono.variable} antialiased\`}>
+        <ThemeProvider>
+          <NextIntlClientProvider locale={locale} messages={messages}>
+            <NavHeader />
+            {children}
+          </NextIntlClientProvider>
+        </ThemeProvider>
+      </body>
+    </html>
+  )
 }
+`),await e(d(s,`app/[locale]/page.tsx`),`import { createQueryClient } from '@murumets-ee/core/clients'
+import { Article, Category } from '@${o}/config/entities'
+import { getToolkitApp } from '@${o}/config/app'
 
-export default {
-  schema: ['./generated/schema.ts', './generated/auth-schema.ts'],
-  out: './migrations',
-  dialect: 'postgresql',
-  dbCredentials: {
-    url: process.env.DATABASE_URL,
-  },
-} satisfies Config
-`),await n(a(e,`auth.config.ts`),`import { betterAuth } from 'better-auth'
-import { drizzleAdapter } from 'better-auth/adapters/drizzle'
-import { admin } from 'better-auth/plugins'
-import { organization } from 'better-auth/plugins/organization'
-import { drizzle } from 'drizzle-orm/postgres-js'
-import postgres from 'postgres'
+export default async function HomePage() {
+  await getToolkitApp()
+  const articles = createQueryClient(Article)
+  const categories = createQueryClient(Category)
 
-const sql = postgres(process.env.DATABASE_URL!)
-const db = drizzle(sql)
+  const [articleList, categoryList] = await Promise.all([
+    articles.findMany({ limit: 10 }),
+    categories.findMany({}),
+  ])
 
-export const auth = betterAuth({
-  database: drizzleAdapter(db, { provider: 'pg' }),
-  emailAndPassword: { enabled: true },
-  plugins: [
-    admin(),
-    organization(),
-  ],
-})
-`),await n(a(e,`generated/auth-schema.ts`),`// This file is generated by better-auth CLI.
-// Run: npx @better-auth/cli generate --config auth.config.ts -y
-export {}
-`)}async function S(e,t){e.mode===`single`?await C(e,t):await w(e,t)}async function C(n,i){let o=a(process.cwd(),n.name);i?.(`Creating Next.js app...`),e(`pnpm create next-app@16 ${n.name} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await t(o,[`app/page.tsx`,`app/page.module.css`,`app/fonts`,`README.md`]),await r(a(o,`package.json`),{type:`module`,dependencies:{"@murumets-ee/core":`^${f.myorgCore}`,"@murumets-ee/db":`^${f.myorgDb}`,"@murumets-ee/entity":`^${f.myorgEntity}`,"@murumets-ee/logging":`^${f.myorgLogging}`,"@murumets-ee/auth":`^${f.myorgAuth}`,"@murumets-ee/auth-ui":`^${f.myorgAuthUi}`,"@murumets-ee/admin-ui":`^${f.myorgAdminUi}`,"@murumets-ee/content":`^${f.myorgContent}`,"@murumets-ee/settings":`^${f.myorgSettings}`,"@murumets-ee/storage":`^${f.myorgStorage}`,"@murumets-ee/media":`^${f.myorgMedia}`,"@murumets-ee/taxonomy":`^${f.myorgTaxonomy}`,"@murumets-ee/queue":`^${f.myorgQueue}`,"@murumets-ee/mail":`^${f.myorgMail}`,"@murumets-ee/ticketing":`^${f.myorgTicketing}`,"@murumets-ee/ticketing-ui":`^${f.myorgTicketingUi}`,"@murumets-ee/tokens":`^${f.myorgTokens}`,"@murumets-ee/editor":`^${f.myorgEditor}`,"@murumets-ee/blocks":`^${f.myorgBlocks}`,"@murumets-ee/ui":`^${f.myorgUi}`,"better-auth":`^${f.betterAuth}`,"drizzle-orm":`^${f.drizzleOrm}`,"next-intl":`^${f.nextIntl}`,"next-themes":`^${f.nextThemes}`,"lucide-react":`^${f.lucideReact}`,postgres:`^${f.postgres}`,"@tanstack/react-query":`^${f.tanstackReactQuery}`,"@tanstack/react-table":`^${f.tanstackReactTable}`,"react-hook-form":`^${f.reactHookForm}`,"@hookform/resolvers":`^${f.hookformResolvers}`,zod:`^${f.zod}`},devDependencies:{"drizzle-kit":`^${f.drizzleKit}`,tsx:`^${f.tsx}`,"babel-plugin-react-compiler":f.babelReactCompiler},scripts:{"db:generate":`tsx --env-file=.env scripts/generate-schema.ts`,"db:migrate:generate":`drizzle-kit generate`,"db:migrate":`tsx --env-file=.env scripts/migrate.ts`,"db:reset":`tsx --env-file=.env scripts/reset-db.ts`,worker:`tsx --env-file=.env scripts/worker.ts`}}),i?.(`Adding toolkit files...`),await l(o,n),await u(o,n),await x(o,n),await c(o,n),await d(o,n),await v(o,n),await b(o,n),await s(o,n),await y(o,n),n.installDeps&&(i?.(`Installing dependencies...`),e(`pnpm install`,{cwd:o}))}async function w(t,n){let r=a(process.cwd(),t.name);n?.(`Creating workspace...`),await p(r,t,n),t.installDeps&&(n?.(`Installing dependencies...`),e(`pnpm install`,{cwd:r}))}export{S as scaffold};
+  return (
+    <div className="min-h-screen p-8">
+      <div className="max-w-4xl mx-auto">
+        <h1 className="text-4xl font-bold mb-8">Welcome to ${o}</h1>
+
+        <section className="mb-12">
+          <h2 className="text-2xl font-semibold mb-4">
+            Categories ({categoryList.length})
+          </h2>
+          <div className="grid gap-4 md:grid-cols-2">
+            {categoryList.map((cat) => (
+              <div
+                key={cat.id}
+                className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-4"
+              >
+                <h3 className="font-semibold text-lg">{cat.name}</h3>
+                <p className="text-sm text-zinc-600 dark:text-zinc-400">
+                  {cat.description}
+                </p>
+              </div>
+            ))}
+          </div>
+        </section>
+
+        <section>
+          <h2 className="text-2xl font-semibold mb-4">
+            Articles ({articleList.length})
+          </h2>
+          {articleList.length === 0 ? (
+            <p className="text-zinc-500">No published articles yet.</p>
+          ) : (
+            <div className="space-y-4">
+              {articleList.map((article) => (
+                <div
+                  key={article.id}
+                  className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-6"
+                >
+                  <h3 className="text-xl font-bold">{article.title}</h3>
+                  <p className="text-zinc-600 dark:text-zinc-400 mt-2">
+                    {article.excerpt}
+                  </p>
+                </div>
+              ))}
+            </div>
+          )}
+        </section>
+      </div>
+    </div>
+  )
+}
+`)}const b=new Set([`.ts`,`.tsx`,`.mts`,`.json`,`.md`,`.yml`,`.yaml`,`.css`,`.html`]),x=new Set([`.env.example`,`Dockerfile`,`.gitignore`]),S=`__PROJECT_NAME__`,C=`__PROJECT_NAME_TITLE__`;async function w(e,t){e.mode===`single`?await T(e,t):await E(e,t)}async function T(e,t){let i=d(process.cwd(),e.name);t?.(`Creating Next.js app...`),n(`pnpm create next-app@16 ${e.name} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await r(i,[`app/page.tsx`,`app/page.module.css`,`app/fonts`,`app/globals.css`,`README.md`]),t?.(`Extracting template...`),await D(e.template,i),t?.(`Personalizing template...`),await k(i,e.name),e.installDeps&&(t?.(`Installing dependencies...`),n(`pnpm install`,{cwd:i}))}async function E(e,t){let r=d(process.cwd(),e.name);t?.(`Creating workspace...`),await h(r,e,t),e.installDeps&&(t?.(`Installing dependencies...`),n(`pnpm install`,{cwd:r}))}async function D(e,t){let n=O(e);if(!i(n))throw Error(`Template tarball missing: ${n}\nRun \`pnpm --filter @murumets-ee/create build:templates\` first.`);await p({file:n,cwd:t})}function O(e){let t=u(f(import.meta.url)),n=t;for(let t=0;t<5;t++){let t=d(n,`package.json`);if(i(t))try{if(JSON.parse(a(t,`utf-8`)).name===`@murumets-ee/create`)return d(n,`templates`,`template-${e}.tar.gz`)}catch{}let r=u(n);if(r===n)break;n=r}throw Error(`Could not find @murumets-ee/create package root above ${t}. template-${e}.tar.gz cannot be located.`)}async function k(e,t){let n=N(t);for await(let r of j(e)){if(!M(r))continue;let e=await s(r,`utf-8`);!e.includes(S)&&!e.includes(C)||await l(r,e.split(C).join(n).split(S).join(t),`utf-8`)}}const A=new Set([`node_modules`,`dist`,`build`,`coverage`,`out`]);async function*j(e){let t=await c(e,{withFileTypes:!0});for(let n of t){let t=d(e,n.name);if(n.isDirectory()){if(A.has(n.name)||n.name.startsWith(`.`))continue;yield*j(t)}else n.isFile()&&(yield t)}}function M(e){let t=e.lastIndexOf(`/`),n=t>=0?e.slice(t+1):e;if(x.has(n))return!0;let r=n.lastIndexOf(`.`);if(r<0)return!1;let i=n.slice(r);return b.has(i)}function N(e){return e.split(/[-_\s]+/).filter(Boolean).map(e=>e[0]?.toUpperCase()+e.slice(1)).join(` `)}export{w as scaffold};
 //# sourceMappingURL=index.mjs.map