@murumets-ee/create 0.1.7 → 0.1.9

package/dist/index.cjs

@@ -0,0 +1,2103 @@
+"use strict";var A=Object.defineProperty;var F=Object.getOwnPropertyDescriptor;var D=Object.getOwnPropertyNames;var B=Object.prototype.hasOwnProperty;var H=(e,a)=>()=>(e&&(a=e(e=0)),a);var P=(e,a)=>{for(var r in a)A(e,r,{get:a[r],enumerable:!0})},W=(e,a,r,o)=>{if(a&&typeof a=="object"||typeof a=="function")for(let c of D(a))!B.call(e,c)&&c!==r&&A(e,c,{get:()=>a[c],enumerable:!(o=F(a,c))||o.enumerable});return e};var G=e=>W(A({},"__esModule",{value:!0}),e);var T={};P(T,{appendToFile:()=>N,deleteFiles:()=>g,mergePackageJson:()=>d,runCommand:()=>u,writeFile:()=>t});async function t(e,a){await(0,m.mkdir)((0,b.dirname)(e),{recursive:!0}),await(0,m.writeFile)(e,a,"utf-8")}async function d(e,a){let r=await(0,m.readFile)(e,"utf-8"),o=JSON.parse(r);a.type&&(o.type=a.type),a.dependencies&&(o.dependencies={...o.dependencies,...a.dependencies}),a.devDependencies&&(o.devDependencies={...o.devDependencies,...a.devDependencies}),a.scripts&&(o.scripts={...o.scripts,...a.scripts}),await(0,m.writeFile)(e,`${JSON.stringify(o,null,2)}
+`,"utf-8")}async function g(e,a){for(let r of a)await(0,m.rm)((0,b.join)(e,r),{force:!0,recursive:!0})}function u(e,a){return(0,R.execSync)(e,{cwd:a?.cwd,stdio:"pipe",encoding:"utf-8"})}async function N(e,a){await(0,m.appendFile)(e,a,"utf-8")}var R,m,b,l=H(()=>{"use strict";R=require("child_process"),m=require("fs/promises"),b=require("path")});var X={};P(X,{scaffold:()=>U});module.exports=G(X);var k=require("path");var s=require("path");l();async function z(e,a){await t((0,s.join)(e,"lib/auth.ts"),`import { getToolkitApp } from './app'
+import { getAuth } from '@murumets-ee/auth'
+
+export async function getAuthInstance() {
+  await getToolkitApp()
+  return getAuth()
+}
+`),await t((0,s.join)(e,"lib/auth-client.ts"),`import { createClient } from '@murumets-ee/auth/client'
+
+export const authClient = createClient()
+`),await t((0,s.join)(e,"app/api/auth/[...all]/route.ts"),`import { toNextJsHandler } from 'better-auth/next-js'
+import { getAuthInstance } from '../../../../lib/auth'
+
+let _handler: ReturnType<typeof toNextJsHandler> | null = null
+
+async function handler() {
+  if (!_handler) {
+    const auth = await getAuthInstance()
+    _handler = toNextJsHandler(auth)
+  }
+  return _handler
+}
+
+export async function GET(req: Request) {
+  const h = await handler()
+  return h.GET(req)
+}
+
+export async function POST(req: Request) {
+  const h = await handler()
+  return h.POST(req)
+}
+`),await t((0,s.join)(e,"app/[locale]/auth/layout.tsx"),`import { AuthProviders } from './providers'
+import type { ReactNode } from 'react'
+
+export default function AuthLayout({ children }: { children: ReactNode }) {
+  return (
+    <AuthProviders>
+      <div className="flex min-h-[calc(100vh-3rem)] items-center justify-center px-4">
+        {children}
+      </div>
+    </AuthProviders>
+  )
+}
+`),await t((0,s.join)(e,"app/[locale]/auth/providers.tsx"),`'use client'
+
+import { AuthUIProvider } from '@murumets-ee/auth-ui'
+import { authClient } from '@/lib/auth-client'
+import Link from 'next/link'
+import { useRouter } from 'next/navigation'
+import { useLocale } from 'next-intl'
+import type { ReactNode } from 'react'
+
+export function AuthProviders({ children }: { children: ReactNode }) {
+  const router = useRouter()
+  const locale = useLocale()
+
+  return (
+    <AuthUIProvider
+      authClient={authClient as never}
+      basePath="/auth"
+      redirectTo="/"
+      Link={Link}
+      navigate={(url) => router.push(url)}
+      resetPasswordUrl={\`/\${locale}/auth/reset-password\`}
+    >
+      {children}
+    </AuthUIProvider>
+  )
+}
+`),await t((0,s.join)(e,"app/[locale]/auth/sign-in/page.tsx"),`import { SignInForm } from '@murumets-ee/auth-ui'
+
+export default function SignInPage() {
+  return <SignInForm />
+}
+`),await t((0,s.join)(e,"app/[locale]/auth/sign-up/page.tsx"),`import { SignUpForm } from '@murumets-ee/auth-ui'
+
+export default function SignUpPage() {
+  return <SignUpForm />
+}
+`),await t((0,s.join)(e,"app/[locale]/auth/forgot-password/page.tsx"),`import { ForgotPasswordForm } from '@murumets-ee/auth-ui'
+
+export default function ForgotPasswordPage() {
+  return <ForgotPasswordForm />
+}
+`),await t((0,s.join)(e,"app/[locale]/auth/reset-password/page.tsx"),`import { Suspense } from 'react'
+import { ResetPasswordContent } from './content'
+
+export default function ResetPasswordPage() {
+  return (
+    <Suspense>
+      <ResetPasswordContent />
+    </Suspense>
+  )
+}
+`),await t((0,s.join)(e,"app/[locale]/auth/reset-password/content.tsx"),`'use client'
+
+import { useSearchParams } from 'next/navigation'
+import { ResetPasswordForm } from '@murumets-ee/auth-ui'
+
+export function ResetPasswordContent() {
+  const searchParams = useSearchParams()
+  const token = searchParams.get('token')
+
+  if (!token) {
+    return (
+      <div className="text-center">
+        <h1 className="text-2xl font-bold text-zinc-900 dark:text-zinc-50">
+          Invalid or expired link
+        </h1>
+        <p className="mt-2 text-zinc-500">
+          Please request a new password reset.
+        </p>
+      </div>
+    )
+  }
+
+  return <ResetPasswordForm token={token} />
+}
+`),await t((0,s.join)(e,"app/[locale]/setup/page.tsx"),`import { redirect } from 'next/navigation'
+import { sql } from 'drizzle-orm'
+import { getToolkitApp } from '@/lib/app'
+import { SetupForm } from './form'
+
+export default async function SetupPage() {
+  const app = await getToolkitApp()
+  const result = await app.db.readOnly.execute<{ count: string }>(
+    sql\`SELECT COUNT(*)::text as count FROM "user"\`,
+  )
+
+  if (Number(result[0]?.count) > 0) {
+    redirect('/')
+  }
+
+  return (
+    <div className="max-w-md mx-auto p-8">
+      <h1 className="text-2xl font-bold mb-2">Create Admin</h1>
+      <p className="text-sm text-zinc-500 dark:text-zinc-400 mb-6">
+        No users found. Create the first admin account.
+      </p>
+      <SetupForm />
+    </div>
+  )
+}
+`),await t((0,s.join)(e,"app/[locale]/setup/form.tsx"),`'use client'
+
+import { useState } from 'react'
+import { createFirstAdmin } from './actions'
+
+export function SetupForm() {
+  const [result, setResult] = useState<{ ok?: boolean; error?: string; email?: string } | null>(null)
+  const [loading, setLoading] = useState(false)
+
+  async function handleSubmit(e: React.FormEvent<HTMLFormElement>) {
+    e.preventDefault()
+    setLoading(true)
+    setResult(null)
+    const res = await createFirstAdmin(new FormData(e.currentTarget))
+    setResult(res)
+    setLoading(false)
+  }
+
+  if (result?.ok) {
+    return (
+      <div className="space-y-2">
+        <p className="text-green-600 dark:text-green-400">Admin created: {result.email}</p>
+        <a href="/auth/sign-in" className="text-blue-600 dark:text-blue-400 hover:underline">
+          Sign in &rarr;
+        </a>
+      </div>
+    )
+  }
+
+  return (
+    <form onSubmit={handleSubmit} className="flex flex-col gap-4">
+      <label className="text-sm font-medium">
+        Name
+        <input
+          name="name"
+          required
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+      <label className="text-sm font-medium">
+        Email
+        <input
+          name="email"
+          type="email"
+          required
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+      <label className="text-sm font-medium">
+        Password (min 8 chars)
+        <input
+          name="password"
+          type="password"
+          required
+          minLength={8}
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+
+      {result?.error && <p className="text-red-600 dark:text-red-400 text-sm">{result.error}</p>}
+
+      <button
+        type="submit"
+        disabled={loading}
+        className="px-4 py-2 text-sm rounded-md bg-blue-600 text-white hover:bg-blue-500 disabled:opacity-50 transition-colors"
+      >
+        {loading ? 'Creating...' : 'Create Admin'}
+      </button>
+    </form>
+  )
+}
+`),await t((0,s.join)(e,"app/[locale]/setup/actions.ts"),`'use server'
+
+import { sql } from 'drizzle-orm'
+import { getToolkitApp } from '@/lib/app'
+import { getAuth } from '@murumets-ee/auth'
+
+/**
+ * Create the first admin user. Locked down:
+ * - Advisory lock prevents race conditions (two simultaneous requests)
+ * - User count check inside the lock ensures only one admin can be created
+ * - Once any user exists, this action permanently refuses
+ */
+export async function createFirstAdmin(formData: FormData) {
+  const email = formData.get('email') as string
+  const password = formData.get('password') as string
+  const name = formData.get('name') as string
+
+  if (!email || !password || !name) {
+    return { error: 'All fields are required' }
+  }
+
+  if (password.length < 8) {
+    return { error: 'Password must be at least 8 characters' }
+  }
+
+  const app = await getToolkitApp()
+
+  // Acquire advisory lock + check atomically in a transaction
+  const canCreate = await app.db.readWrite.transaction(async (tx) => {
+    // Advisory lock 1 = "setup lock". Blocks concurrent setup attempts.
+    await tx.execute(sql\`SELECT pg_advisory_xact_lock(1)\`)
+
+    const result = await tx.execute<{ count: string }>(
+      sql\`SELECT COUNT(*)::text as count FROM "user"\`,
+    )
+    return Number(result[0]?.count) === 0
+  })
+
+  if (!canCreate) {
+    return { error: 'Admin user already exists. Setup is complete.' }
+  }
+
+  const auth = getAuth()
+
+  const adminUser = await auth.api.signUpEmail({
+    body: { email, password, name },
+  })
+
+  await app.db.readWrite.execute(
+    sql\`UPDATE "user" SET role = 'admin' WHERE id = \${adminUser.user.id}\`,
+  )
+
+  return { ok: true, email: adminUser.user.email }
+}
+`)}var p=require("path");l();async function C(e,a){let{name:r}=a;await t((0,p.join)(e,".env.example"),`DATABASE_URL=postgresql://${r}:${r}_dev_password@localhost:5432/${r}_dev
+BETTER_AUTH_SECRET=dev-secret-change-me-in-production-min-32-chars
+BETTER_AUTH_URL=http://localhost:3000
+LOG_LEVEL=debug
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+QUEUE_WORKER=true
+RESEND_API_KEY=
+RESEND_WEBHOOK_SECRET=
+MAIL_FROM=noreply@example.com
+CSAT_SECRET=
+`),await t((0,p.join)(e,".dockerignore"),`# Dependencies (installed inside Docker)
+node_modules/
+.pnpm-store/
+
+# Build outputs (rebuilt inside Docker)
+.next/
+out/
+dist/
+
+# Git
+.git/
+.gitignore
+
+# Environment files (pass via docker run --env-file)
+.env
+.env.*
+!.env.example
+
+# Docker files
+Dockerfile*
+.dockerignore
+docker-compose*.yml
+
+# Tests
+coverage/
+**/*.test.*
+**/*.spec.*
+**/vitest.config.*
+docker-compose.test.yml
+
+# Development tooling
+.vscode/
+.idea/
+.turbo/
+.cache/
+*.tsbuildinfo
+
+# Documentation
+*.md
+docs/
+
+# OS files
+.DS_Store
+Thumbs.db
+`),await t((0,p.join)(e,"Dockerfile"),`# --- Base image ---
+# Node 22 LTS (Debian slim \u2014 glibc required for sharp image optimization)
+FROM node:22-slim AS base
+
+# --- Stage 1: Install dependencies ---
+FROM base AS deps
+WORKDIR /app
+RUN corepack enable pnpm
+COPY package.json pnpm-lock.yaml ./
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store \\
+    pnpm install --frozen-lockfile
+
+# --- Stage 2: Build the application ---
+FROM base AS builder
+WORKDIR /app
+RUN corepack enable pnpm
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+# Dummy env vars so toolkit.config.ts doesn't throw at build time (no DB connection needed)
+ENV DATABASE_URL=postgresql://build:build@localhost:5432/build
+ENV BETTER_AUTH_SECRET=build-secret-not-used-at-runtime
+RUN pnpm build
+
+# --- Stage 3: Production runner ---
+FROM base AS runner
+WORKDIR /app
+ENV NODE_ENV=production
+ENV PORT=3000
+ENV HOSTNAME=0.0.0.0
+ENV NEXT_TELEMETRY_DISABLED=1
+
+# Copy standalone output (includes server.js + traced node_modules)
+COPY --from=builder --chown=node:node /app/.next/standalone ./
+# Copy static assets (JS/CSS chunks \u2014 excluded from standalone trace)
+COPY --from=builder --chown=node:node /app/.next/static ./.next/static
+# Copy public assets (favicon, robots.txt, images)
+COPY --from=builder --chown=node:node /app/public ./public
+# Copy migrations (applied at app startup by the toolkit migration runner)
+COPY --from=builder --chown=node:node /app/migrations ./migrations
+
+# Run as non-root user
+USER node
+EXPOSE 3000
+CMD ["node", "server.js"]
+`),await t((0,p.join)(e,"docker-compose.yml"),`services:
+  postgres:
+    image: postgres:17-alpine
+    container_name: ${r}-postgres
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${r}
+      POSTGRES_PASSWORD: ${r}_dev_password
+      POSTGRES_DB: ${r}_dev
+    ports:
+      - "5432:5432"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${r} -d ${r}_dev"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  postgres_data:
+    name: ${r}_postgres_data
+`),await t((0,p.join)(e,"docker-compose.prod.yml"),`services:
+  app:
+    build: .
+    restart: unless-stopped
+    env_file: .env
+    depends_on:
+      postgres:
+        condition: service_healthy
+    ports:
+      - "3000:3000"
+    networks:
+      - internal
+
+  postgres:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${r}
+      POSTGRES_PASSWORD: \${DB_PASSWORD}
+      POSTGRES_DB: ${r}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${r} -d ${r}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    networks:
+      - internal
+
+volumes:
+  postgres_data:
+
+networks:
+  internal:
+`),await N((0,p.join)(e,".gitignore"),`
+# Toolkit generated files
+generated/
+
+# Environment
+.env*
+!.env.example
+`)}var v=require("path");l();async function L(e,a){await t((0,v.join)(e,"entities/index.ts"),`export { Article } from './article'
+export { Category } from './category'
+`),await t((0,v.join)(e,"entities/article.ts"),`import { behavior, defineEntity, field } from '@murumets-ee/entity'
+
+export const Article = defineEntity({
+  name: 'article',
+  fields: {
+    title: field.text({ required: true, maxLength: 200, indexed: true, translatable: true }),
+    slug: field.slug({ from: 'title', unique: true }),
+    excerpt: field.text({ maxLength: 500, translatable: true }),
+    body: field.richtext(),
+    viewCount: field.number({ default: 0, integer: true }),
+    featured: field.boolean({ default: false }),
+    publishDate: field.date(),
+    contentType: field.select({ options: ['news', 'tutorial', 'announcement'], default: 'news' }),
+    category: field.reference({ entity: 'category', required: false }),
+    tags: field.reference({ entity: 'category', cardinality: 'many' }),
+    coverImage: field.media({ accept: ['image/*'] }),
+  },
+  behaviors: [
+    behavior.publishable(),
+    behavior.auditable(),
+    behavior.sluggable('title'),
+    behavior.revisionable(),
+  ],
+  scope: 'global',
+  access: {
+    view: 'public',
+    create: 'group.editor',
+    update: 'group.editor',
+    delete: 'group.admin',
+  },
+})
+`),await t((0,v.join)(e,"entities/category.ts"),`import { defineEntity, field } from '@murumets-ee/entity'
+
+export const Category = defineEntity({
+  name: 'category',
+  fields: {
+    name: field.text({ required: true, maxLength: 100, indexed: true, translatable: true }),
+    slug: field.slug({ from: 'name', unique: true }),
+    description: field.text({ maxLength: 500, translatable: true }),
+  },
+  scope: 'global',
+  access: {
+    view: 'public',
+    create: 'group.editor',
+    update: 'group.editor',
+    delete: 'group.admin',
+  },
+})
+`)}var S=require("path");l();async function _(e,a){await t((0,S.join)(e,"i18n/routing.ts"),`import { defineRouting } from 'next-intl/routing'
+
+export const routing = defineRouting({
+  locales: ['en'],
+  defaultLocale: 'en',
+})
+`),await t((0,S.join)(e,"i18n/request.ts"),`import { getRequestConfig } from 'next-intl/server'
+import { hasLocale } from 'next-intl'
+import { routing } from './routing'
+import { getAuthMessages } from '@murumets-ee/auth-ui/i18n'
+
+export default getRequestConfig(async ({ requestLocale }) => {
+  const requested = await requestLocale
+  const locale = hasLocale(routing.locales, requested)
+    ? requested
+    : routing.defaultLocale
+
+  const authMessages = await getAuthMessages(locale)
+
+  return {
+    locale,
+    messages: {
+      ...authMessages,
+    },
+  }
+})
+`)}var E=require("fs/promises"),i=require("path");l();var n={myorgCore:"0.1.0",myorgDb:"0.1.0",myorgEntity:"0.1.0",myorgLogging:"0.1.0",myorgAuth:"0.1.0",myorgAuthUi:"0.1.0",myorgAdminUi:"0.1.0",myorgContent:"0.1.0",myorgContentApi:"0.1.0",myorgSettings:"0.1.0",myorgStorage:"0.1.0",myorgMedia:"0.1.0",myorgTaxonomy:"0.1.0",myorgQueue:"0.1.0",myorgMail:"0.1.0",myorgTicketing:"0.1.0",myorgTicketingUi:"0.1.0",myorgEditor:"0.1.0",myorgBlocks:"0.1.0",myorgTokens:"0.1.0",myorgUi:"0.1.0",myorgCli:"0.1.0",betterAuth:"1.4.0",drizzleOrm:"0.45.1",nextIntl:"4.8.2",nextThemes:"0.4.6",lucideReact:"0.563.0",postgres:"3.4.5",reactHookForm:"7.71.1",hookformResolvers:"5.2.2",zod:"3.24.1",drizzleKit:"0.27.2",tsx:"4.19.2",babelReactCompiler:"1.0.0"};async function $(e,a,r){await j(e,a),r?.("Workspace root created"),r?.("Creating admin app..."),await V(e,a),r?.("Admin app created"),r?.("Creating web app..."),await J(e,a),r?.("Web app created"),await K(e,a),r?.("Shared config package created")}async function j(e,a){let{name:r}=a;await(0,E.mkdir)(e,{recursive:!0}),await t((0,i.join)(e,"pnpm-workspace.yaml"),`packages:
+  - 'packages/*'
+  - 'apps/*'
+
+ignoredBuiltDependencies:
+  - sharp
+  - unrs-resolver
+`),await t((0,i.join)(e,"package.json"),`${JSON.stringify({name:`@${r}/monorepo`,version:"0.0.0",private:!0,type:"module",scripts:{dev:"turbo dev",build:"turbo build","db:generate":"tsx --env-file=.env packages/config/scripts/generate-schema.ts","db:migrate:generate":"drizzle-kit generate --config packages/config/drizzle.config.ts","db:migrate":"tsx --env-file=.env packages/config/scripts/migrate.ts","db:reset":"tsx --env-file=.env packages/config/scripts/reset-db.ts"},devDependencies:{turbo:"^2.3.3",typescript:"^5.7.3",tsx:`^${n.tsx}`,"drizzle-kit":`^${n.drizzleKit}`}},null,2)}
+`),await t((0,i.join)(e,".gitignore"),`# dependencies
+node_modules/
+
+# build
+dist/
+.next/
+.turbo/
+
+# env
+.env*
+!.env.example
+
+# toolkit generated
+generated/
+
+# IDE
+.vscode/
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# logs
+*.log
+
+# migrations meta
+migrations/
+
+# turbo
+.turbo/
+`),await t((0,i.join)(e,".env.example"),`DATABASE_URL=postgresql://${r}:${r}_dev_password@localhost:5432/${r}_dev
+BETTER_AUTH_SECRET=dev-secret-change-me-in-production-min-32-chars
+BETTER_AUTH_URL=http://localhost:3000
+LOG_LEVEL=debug
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+QUEUE_WORKER=true
+RESEND_API_KEY=
+RESEND_WEBHOOK_SECRET=
+MAIL_FROM=noreply@example.com
+CSAT_SECRET=
+`),await t((0,i.join)(e,"docker-compose.yml"),`services:
+  postgres:
+    image: postgres:17-alpine
+    container_name: ${r}-postgres
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${r}
+      POSTGRES_PASSWORD: ${r}_dev_password
+      POSTGRES_DB: ${r}_dev
+    ports:
+      - "5432:5432"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${r} -d ${r}_dev"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  postgres_data:
+    name: ${r}_postgres_data
+`)}async function K(e,a){let{name:r}=a,o=(0,i.join)(e,"packages/config");await t((0,i.join)(o,"package.json"),`${JSON.stringify({name:`@${r}/config`,version:"0.1.0",private:!0,type:"module",exports:{".":"./toolkit.config.ts","./entities":"./entities/index.ts","./entities/*":"./entities/*","./app":"./lib/app.ts","./auth":"./lib/auth.ts","./auth-client":"./lib/auth-client.ts"},dependencies:{"@murumets-ee/core":`^${n.myorgCore}`,"@murumets-ee/db":`^${n.myorgDb}`,"@murumets-ee/entity":`^${n.myorgEntity}`,"@murumets-ee/logging":`^${n.myorgLogging}`,"@murumets-ee/auth":`^${n.myorgAuth}`,"better-auth":`^${n.betterAuth}`,"drizzle-orm":`^${n.drizzleOrm}`,postgres:`^${n.postgres}`,zod:`^${n.zod}`}},null,2)}
+`),await t((0,i.join)(o,"tsconfig.json"),`${JSON.stringify({compilerOptions:{target:"ES2022",module:"ESNext",moduleResolution:"Bundler",strict:!0,esModuleInterop:!0,skipLibCheck:!0,resolveJsonModule:!0},include:["**/*.ts"]},null,2)}
+`),await t((0,i.join)(o,"toolkit.config.ts"),`import { auth } from '@murumets-ee/auth/plugin'
+import { content } from '@murumets-ee/content/plugin'
+import { defineConfig } from '@murumets-ee/core'
+import { logging } from '@murumets-ee/logging/plugin'
+import { mail, ResendMailProvider } from '@murumets-ee/mail'
+import { media } from '@murumets-ee/media/plugin'
+import { queue } from '@murumets-ee/queue/plugin'
+import { settings } from '@murumets-ee/settings/plugin'
+import { storage } from '@murumets-ee/storage/plugin'
+import { taxonomy } from '@murumets-ee/taxonomy/plugin'
+import { ticketing } from '@murumets-ee/ticketing/plugin'
+import { Article, Category } from './entities'
+import * as authSchema from './generated/auth-schema'
+
+if (!process.env.DATABASE_URL) {
+  throw new Error('DATABASE_URL environment variable is required')
+}
+
+export default defineConfig({
+  db: {
+    url: process.env.DATABASE_URL,
+    poolMin: 2,
+    poolMax: 10,
+  },
+  logging: {
+    level: (process.env.LOG_LEVEL || 'info') as 'debug' | 'info' | 'warn' | 'error',
+    name: '${r}',
+  },
+  entities: [Category, Article],
+  plugins: [
+    auth({ providers: ['email'], schema: authSchema }),
+    content({
+      locales: [{ code: 'en', label: 'English' }],
+      defaultLocale: 'en',
+    }),
+    logging(),
+    settings(),
+    storage(),
+    media(),
+    taxonomy(),
+    queue(),
+    mail({
+      provider: process.env.RESEND_API_KEY
+        ? new ResendMailProvider({ apiKey: process.env.RESEND_API_KEY })
+        : undefined,
+      defaultFrom: process.env.MAIL_FROM ?? 'noreply@example.com',
+      webhookSecret: process.env.RESEND_WEBHOOK_SECRET,
+    }),
+    ticketing({
+      csatSecret: process.env.CSAT_SECRET,
+    }),
+  ],
+  projectRoot: import.meta.dirname,
+})
+`),await t((0,i.join)(o,"auth.config.ts"),`import { betterAuth } from 'better-auth'
+import { drizzleAdapter } from 'better-auth/adapters/drizzle'
+import { admin } from 'better-auth/plugins'
+import { organization } from 'better-auth/plugins/organization'
+import { drizzle } from 'drizzle-orm/postgres-js'
+import postgres from 'postgres'
+
+const sql = postgres(process.env.DATABASE_URL!)
+const db = drizzle(sql)
+
+export const auth = betterAuth({
+  database: drizzleAdapter(db, { provider: 'pg' }),
+  emailAndPassword: { enabled: true },
+  plugins: [
+    admin(),
+    organization(),
+  ],
+})
+`),await t((0,i.join)(o,"drizzle.config.ts"),`import type { Config } from 'drizzle-kit'
+
+if (!process.env.DATABASE_URL) {
+  throw new Error('DATABASE_URL environment variable is required')
+}
+
+export default {
+  schema: ['./generated/schema.ts', './generated/auth-schema.ts'],
+  out: './migrations',
+  dialect: 'postgresql',
+  dbCredentials: {
+    url: process.env.DATABASE_URL,
+  },
+} satisfies Config
+`),await t((0,i.join)(o,"entities/index.ts"),`export { Article } from './article'
+export { Category } from './category'
+`),await t((0,i.join)(o,"entities/article.ts"),`import { behavior, defineEntity, field } from '@murumets-ee/entity'
+
+export const Article = defineEntity({
+  name: 'article',
+  fields: {
+    title: field.text({ required: true, maxLength: 200, indexed: true, translatable: true }),
+    slug: field.slug({ from: 'title', unique: true }),
+    excerpt: field.text({ maxLength: 500, translatable: true }),
+    body: field.richtext(),
+    viewCount: field.number({ default: 0, integer: true }),
+    featured: field.boolean({ default: false }),
+    publishDate: field.date(),
+    contentType: field.select({ options: ['news', 'tutorial', 'announcement'], default: 'news' }),
+    category: field.reference({ entity: 'category', required: false }),
+    tags: field.reference({ entity: 'category', cardinality: 'many' }),
+    coverImage: field.media({ accept: ['image/*'] }),
+  },
+  behaviors: [
+    behavior.publishable(),
+    behavior.auditable(),
+    behavior.sluggable('title'),
+    behavior.revisionable(),
+  ],
+  scope: 'global',
+  access: {
+    view: 'public',
+    create: 'group.editor',
+    update: 'group.editor',
+    delete: 'group.admin',
+  },
+})
+`),await t((0,i.join)(o,"entities/category.ts"),`import { defineEntity, field } from '@murumets-ee/entity'
+
+export const Category = defineEntity({
+  name: 'category',
+  fields: {
+    name: field.text({ required: true, maxLength: 100, indexed: true, translatable: true }),
+    slug: field.slug({ from: 'name', unique: true }),
+    description: field.text({ maxLength: 500, translatable: true }),
+  },
+  scope: 'global',
+  access: {
+    view: 'public',
+    create: 'group.editor',
+    update: 'group.editor',
+    delete: 'group.admin',
+  },
+})
+`),await t((0,i.join)(o,"lib/app.ts"),`import { createApp, setApp, type ToolkitApp } from '@murumets-ee/core'
+import config from '../toolkit.config'
+
+let appInstance: ToolkitApp | null = null
+
+export async function getToolkitApp(): Promise<ToolkitApp> {
+  if (!appInstance) {
+    console.log('Initializing toolkit app...')
+    appInstance = await createApp(config)
+    setApp(appInstance)
+    console.log('Toolkit app initialized')
+  }
+  return appInstance
+}
+`),await t((0,i.join)(o,"lib/auth.ts"),`import { getToolkitApp } from './app'
+import { getAuth } from '@murumets-ee/auth'
+
+export async function getAuthInstance() {
+  await getToolkitApp()
+  return getAuth()
+}
+`),await t((0,i.join)(o,"lib/auth-client.ts"),`import { createClient } from '@murumets-ee/auth/client'
+
+export const authClient = createClient()
+`),await t((0,i.join)(o,"generated/auth-schema.ts"),`// This file is generated by better-auth CLI.
+// Run: npx @better-auth/cli generate --config auth.config.ts -y
+export {}
+`),await t((0,i.join)(o,"scripts/generate-schema.ts"),`/**
+ * Generate Drizzle schemas from entity definitions
+ */
+
+import { mkdir, writeFile } from 'node:fs/promises'
+import { join } from 'node:path'
+import { generateSchemaCode, generateTranslationSchemaCode } from '@murumets-ee/entity'
+import config from '../toolkit.config'
+
+async function generateSchemas() {
+  console.log('Generating Drizzle schemas from entity definitions...')
+
+  const schemaDir = join(import.meta.dirname, '..', 'generated')
+  await mkdir(schemaDir, { recursive: true })
+
+  const imports: string[] = []
+  const schemas: string[] = []
+  let hasTranslations = false
+
+  for (const entity of config.entities) {
+    console.log(\`  - Generating schema for \${entity.name}\`)
+
+    const schemaCode = generateSchemaCode(entity)
+    schemas.push(\`\\n// \${entity.name} table\`)
+    schemas.push(schemaCode)
+
+    const translationCode = generateTranslationSchemaCode(entity)
+    if (translationCode) {
+      hasTranslations = true
+      schemas.push(\`\\n// \${entity.name} translations\`)
+      schemas.push(translationCode)
+    }
+  }
+
+  const pgCoreTypes = ['pgTable', 'varchar', 'text', 'boolean', 'timestamp', 'integer', 'doublePrecision', 'jsonb', 'uuid', 'index']
+  if (hasTranslations) pgCoreTypes.push('unique')
+  const pgCoreImports = \`import { \${pgCoreTypes.join(', ')} } from 'drizzle-orm/pg-core'\\n\`
+  imports.push(pgCoreImports)
+
+  const schemaFile = join(schemaDir, 'schema.ts')
+  await writeFile(schemaFile, [...imports, ...schemas].join('\\n'))
+
+  console.log(\`\\nSchemas written to: \${schemaFile}\`)
+  console.log('Run \\\`pnpm db:migrate:generate\\\` to create migrations')
+}
+
+generateSchemas().catch(console.error)
+`),await t((0,i.join)(o,"scripts/migrate.ts"),`/**
+ * Run pending migrations
+ */
+
+import { createDbClient, runMigrations } from '@murumets-ee/db'
+
+async function migrate() {
+  console.log('Running migrations...')
+
+  try {
+    if (!process.env.DATABASE_URL) {
+      throw new Error('DATABASE_URL environment variable is required')
+    }
+
+    const db = createDbClient({ url: process.env.DATABASE_URL })
+    await runMigrations(db, import.meta.dirname + '/..')
+
+    console.log('Migrations completed successfully')
+    process.exit(0)
+  } catch (error) {
+    console.error('Migration failed:', error)
+    process.exit(1)
+  }
+}
+
+migrate()
+`),await t((0,i.join)(o,"scripts/reset-db.ts"),`/**
+ * Reset database (DROP all tables)
+ * WARNING: Only for development
+ */
+
+import postgres from 'postgres'
+
+async function resetDb() {
+  const DATABASE_URL = process.env.DATABASE_URL
+
+  if (!DATABASE_URL) {
+    throw new Error('DATABASE_URL not set')
+  }
+
+  console.warn('WARNING: This will DROP ALL TABLES')
+  console.log('Database:', DATABASE_URL.split('@')[1])
+
+  const sql = postgres(DATABASE_URL)
+
+  try {
+    await sql\`
+      DROP SCHEMA public CASCADE;
+      CREATE SCHEMA public;
+      GRANT ALL ON SCHEMA public TO PUBLIC;
+    \`
+
+    console.log('Database reset complete')
+  } finally {
+    await sql.end()
+  }
+}
+
+resetDb().catch(console.error)
+`)}async function V(e,a){let{name:r}=a,o=(0,i.join)(e,"apps/admin");await(0,E.mkdir)((0,i.join)(e,"apps"),{recursive:!0}),u(`pnpm create next-app@${"16"} ${o} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await g(o,["app/page.tsx","app/page.module.css","app/fonts","README.md","pnpm-workspace.yaml"]),await d((0,i.join)(o,"package.json"),{dependencies:{[`@${r}/config`]:"workspace:*","@murumets-ee/auth-ui":`^${n.myorgAuthUi}`,"better-auth":`^${n.betterAuth}`,"next-intl":`^${n.nextIntl}`,"next-themes":`^${n.nextThemes}`,"lucide-react":`^${n.lucideReact}`,"react-hook-form":`^${n.reactHookForm}`,"@hookform/resolvers":`^${n.hookformResolvers}`,zod:`^${n.zod}`},devDependencies:{"babel-plugin-react-compiler":n.babelReactCompiler}});let{appendToFile:c}=await Promise.resolve().then(()=>(l(),T));await c((0,i.join)(o,".gitignore"),`
+# Environment
+.env*
+!.env.example
+`),await t((0,i.join)(o,"next.config.ts"),`import type { NextConfig } from 'next'
+import createNextIntlPlugin from 'next-intl/plugin'
+
+const withNextIntl = createNextIntlPlugin('./i18n/request.ts')
+
+const nextConfig: NextConfig = {
+  reactCompiler: true,
+  transpilePackages: [
+    '@${r}/config',
+    '@murumets-ee/core',
+    '@murumets-ee/entity',
+    '@murumets-ee/db',
+    '@murumets-ee/logging',
+    '@murumets-ee/auth-ui',
+  ],
+  serverExternalPackages: ['drizzle-orm', 'postgres'],
+  experimental: {
+    serverActions: {
+      bodySizeLimit: '2mb',
+    },
+  },
+}
+
+export default withNextIntl(nextConfig)
+`),await t((0,i.join)(o,"proxy.ts"),`import { NextRequest, NextResponse } from 'next/server'
+import createMiddleware from 'next-intl/middleware'
+import { routing } from './i18n/routing'
+
+const intlMiddleware = createMiddleware(routing)
+
+const protectedPaths = ['/setup']
+
+export function proxy(request: NextRequest) {
+  const { pathname } = request.nextUrl
+
+  const localePattern = new RegExp(\`^/(\${routing.locales.join('|')})\`)
+  const pathWithoutLocale = pathname.replace(localePattern, '') || '/'
+
+  if (protectedPaths.some((p) => pathWithoutLocale.startsWith(p))) {
+    const session = request.cookies.get('better-auth.session_token')
+    if (!session) {
+      const locale = pathname.match(localePattern)?.[1] || routing.defaultLocale
+      return NextResponse.redirect(new URL(\`/\${locale}/auth/sign-in\`, request.url))
+    }
+  }
+
+  return intlMiddleware(request)
+}
+
+export const config = {
+  matcher: '/((?!api|_next|_vercel|.*\\\\..*).*)',
+}
+`),await t((0,i.join)(o,"i18n/routing.ts"),`import { defineRouting } from 'next-intl/routing'
+
+export const routing = defineRouting({
+  locales: ['en'],
+  defaultLocale: 'en',
+})
+`),await t((0,i.join)(o,"i18n/request.ts"),`import { getRequestConfig } from 'next-intl/server'
+import { hasLocale } from 'next-intl'
+import { routing } from './routing'
+import { getAuthMessages } from '@murumets-ee/auth-ui/i18n'
+
+export default getRequestConfig(async ({ requestLocale }) => {
+  const requested = await requestLocale
+  const locale = hasLocale(routing.locales, requested)
+    ? requested
+    : routing.defaultLocale
+
+  const authMessages = await getAuthMessages(locale)
+
+  return {
+    locale,
+    messages: {
+      ...authMessages,
+    },
+  }
+})
+`),await t((0,i.join)(o,"app/globals.css"),`@import "tailwindcss";
+@source "../node_modules/@murumets-ee/auth-ui/dist";
+
+@custom-variant dark (&:where(.dark, .dark *));
+
+:root {
+  --background: #ffffff;
+  --foreground: #171717;
+}
+
+@theme inline {
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --font-sans: var(--font-geist-sans);
+  --font-mono: var(--font-geist-mono);
+}
+
+.dark {
+  --background: #0a0a0a;
+  --foreground: #ededed;
+}
+
+body {
+  background: var(--background);
+  color: var(--foreground);
+  font-family: Arial, Helvetica, sans-serif;
+}
+`),await t((0,i.join)(o,"app/theme-provider.tsx"),`'use client'
+
+import { ThemeProvider as NextThemesProvider } from 'next-themes'
+import type { ReactNode } from 'react'
+
+export function ThemeProvider({ children }: { children: ReactNode }) {
+  return (
+    <NextThemesProvider
+      attribute="class"
+      defaultTheme="system"
+      enableSystem
+      disableTransitionOnChange
+    >
+      {children}
+    </NextThemesProvider>
+  )
+}
+`),await t((0,i.join)(o,"app/theme-toggle.tsx"),`'use client'
+
+import { useTheme } from 'next-themes'
+import { useState, useEffect } from 'react'
+import { Sun, Moon } from 'lucide-react'
+
+export function ThemeToggle() {
+  const [mounted, setMounted] = useState(false)
+  const { resolvedTheme, setTheme } = useTheme()
+
+  useEffect(() => { setMounted(true) }, [])
+
+  if (!mounted) {
+    return <div className="h-8 w-8" />
+  }
+
+  return (
+    <button
+      type="button"
+      onClick={() => setTheme(resolvedTheme === 'dark' ? 'light' : 'dark')}
+      className="rounded-md p-1.5 text-zinc-400 transition-colors hover:bg-zinc-100 hover:text-zinc-600 dark:hover:bg-zinc-800 dark:hover:text-zinc-200 cursor-pointer"
+      aria-label={resolvedTheme === 'dark' ? 'Switch to light mode' : 'Switch to dark mode'}
+    >
+      {resolvedTheme === 'dark' ? <Sun className="h-5 w-5" /> : <Moon className="h-5 w-5" />}
+    </button>
+  )
+}
+`),await t((0,i.join)(o,"app/nav-header.tsx"),`'use client'
+
+import Link from 'next/link'
+import { usePathname } from 'next/navigation'
+import { ThemeToggle } from './theme-toggle'
+
+const links = [
+  { href: '/', label: 'Home' },
+  { href: '/auth/sign-in', label: 'Sign In' },
+  { href: '/setup', label: 'Setup' },
+]
+
+export function NavHeader() {
+  const pathname = usePathname()
+
+  function isActive(href: string) {
+    return href === '/' ? pathname === '/' : pathname.startsWith(href)
+  }
+
+  const linkClass = (href: string) =>
+    \`px-3 py-1.5 rounded-md text-sm transition-colors \${
+      isActive(href)
+        ? 'bg-zinc-200 text-zinc-900 dark:bg-zinc-800 dark:text-zinc-50'
+        : 'text-zinc-500 hover:text-zinc-700 hover:bg-zinc-100 dark:text-zinc-400 dark:hover:text-zinc-200 dark:hover:bg-zinc-800/50'
+    }\`
+
+  return (
+    <header className="sticky top-0 z-50 backdrop-blur-md border-b bg-white/80 border-zinc-200 dark:bg-zinc-950/80 dark:border-zinc-800">
+      <nav className="max-w-6xl mx-auto flex items-center gap-1 px-4 h-12">
+        <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 mr-3 select-none">
+          ${r} Admin
+        </span>
+        {links.map(({ href, label }) => (
+          <Link key={href} href={href} className={linkClass(href)}>
+            {label}
+          </Link>
+        ))}
+        <div className="ml-auto">
+          <ThemeToggle />
+        </div>
+      </nav>
+    </header>
+  )
+}
+`),await t((0,i.join)(o,"app/layout.tsx"),`import './globals.css'
+
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return children
+}
+`),await t((0,i.join)(o,"app/[locale]/layout.tsx"),`import type { Metadata } from 'next'
+import { Geist, Geist_Mono } from 'next/font/google'
+import { NextIntlClientProvider } from 'next-intl'
+import { getMessages } from 'next-intl/server'
+import { notFound } from 'next/navigation'
+import { routing } from '@/i18n/routing'
+import { ThemeProvider } from '../theme-provider'
+import { NavHeader } from '../nav-header'
+
+const geistSans = Geist({
+  variable: '--font-geist-sans',
+  subsets: ['latin'],
+})
+
+const geistMono = Geist_Mono({
+  variable: '--font-geist-mono',
+  subsets: ['latin'],
+})
+
+export const metadata: Metadata = {
+  title: '${r} Admin',
+  description: 'Built with Lumi CMS Toolkit',
+}
+
+export default async function LocaleLayout({
+  children,
+  params,
+}: {
+  children: React.ReactNode
+  params: Promise<{ locale: string }>
+}) {
+  const { locale } = await params
+  if (!routing.locales.includes(locale as any)) notFound()
+
+  const messages = await getMessages()
+
+  return (
+    <html lang={locale} suppressHydrationWarning>
+      <body className={\`\${geistSans.variable} \${geistMono.variable} antialiased\`}>
+        <ThemeProvider>
+          <NextIntlClientProvider locale={locale} messages={messages}>
+            <NavHeader />
+            {children}
+          </NextIntlClientProvider>
+        </ThemeProvider>
+      </body>
+    </html>
+  )
+}
+`),await t((0,i.join)(o,"app/[locale]/page.tsx"),`import { createQueryClient } from '@murumets-ee/core/clients'
+import { Article, Category } from '@${r}/config/entities'
+import { getToolkitApp } from '@${r}/config/app'
+
+export default async function HomePage() {
+  await getToolkitApp()
+  const articles = createQueryClient(Article)
+  const categories = createQueryClient(Category)
+
+  const [articleList, categoryList] = await Promise.all([
+    articles.findMany({ limit: 10 }),
+    categories.findMany({}),
+  ])
+
+  return (
+    <div className="min-h-screen p-8">
+      <div className="max-w-4xl mx-auto">
+        <h1 className="text-4xl font-bold mb-8">Welcome to ${r}</h1>
+
+        <section className="mb-12">
+          <h2 className="text-2xl font-semibold mb-4">
+            Categories ({categoryList.length})
+          </h2>
+          <div className="grid gap-4 md:grid-cols-2">
+            {categoryList.map((cat) => (
+              <div
+                key={cat.id}
+                className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-4"
+              >
+                <h3 className="font-semibold text-lg">{cat.name}</h3>
+                <p className="text-sm text-zinc-600 dark:text-zinc-400">
+                  {cat.description}
+                </p>
+              </div>
+            ))}
+          </div>
+        </section>
+
+        <section>
+          <h2 className="text-2xl font-semibold mb-4">
+            Articles ({articleList.length})
+          </h2>
+          {articleList.length === 0 ? (
+            <p className="text-zinc-500">No published articles yet.</p>
+          ) : (
+            <div className="space-y-4">
+              {articleList.map((article) => (
+                <div
+                  key={article.id}
+                  className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-6"
+                >
+                  <h3 className="text-xl font-bold">{article.title}</h3>
+                  <p className="text-zinc-600 dark:text-zinc-400 mt-2">
+                    {article.excerpt}
+                  </p>
+                </div>
+              ))}
+            </div>
+          )}
+        </section>
+      </div>
+    </div>
+  )
+}
+`),await t((0,i.join)(o,"app/api/auth/[...all]/route.ts"),`import { toNextJsHandler } from 'better-auth/next-js'
+import { getAuthInstance } from '@${r}/config/auth'
+
+let _handler: ReturnType<typeof toNextJsHandler> | null = null
+
+async function handler() {
+  if (!_handler) {
+    const auth = await getAuthInstance()
+    _handler = toNextJsHandler(auth)
+  }
+  return _handler
+}
+
+export async function GET(req: Request) {
+  return (await handler()).GET(req)
+}
+
+export async function POST(req: Request) {
+  return (await handler()).POST(req)
+}
+`),await t((0,i.join)(o,"app/[locale]/auth/layout.tsx"),`import { AuthProviders } from './providers'
+import type { ReactNode } from 'react'
+
+export default function AuthLayout({ children }: { children: ReactNode }) {
+  return (
+    <AuthProviders>
+      <div className="flex min-h-[calc(100vh-3rem)] items-center justify-center px-4">
+        {children}
+      </div>
+    </AuthProviders>
+  )
+}
+`),await t((0,i.join)(o,"app/[locale]/auth/providers.tsx"),`'use client'
+
+import { AuthUIProvider } from '@murumets-ee/auth-ui'
+import { authClient } from '@${r}/config/auth-client'
+import Link from 'next/link'
+import { useRouter } from 'next/navigation'
+import { useLocale } from 'next-intl'
+import type { ReactNode } from 'react'
+
+export function AuthProviders({ children }: { children: ReactNode }) {
+  const router = useRouter()
+  const locale = useLocale()
+
+  return (
+    <AuthUIProvider
+      authClient={authClient as never}
+      basePath="/auth"
+      redirectTo="/"
+      Link={Link}
+      navigate={(url) => router.push(url)}
+      resetPasswordUrl={\`/\${locale}/auth/reset-password\`}
+    >
+      {children}
+    </AuthUIProvider>
+  )
+}
+`),await t((0,i.join)(o,"app/[locale]/auth/sign-in/page.tsx"),`import { SignInForm } from '@murumets-ee/auth-ui'
+
+export default function SignInPage() {
+  return <SignInForm />
+}
+`),await t((0,i.join)(o,"app/[locale]/auth/sign-up/page.tsx"),`import { SignUpForm } from '@murumets-ee/auth-ui'
+
+export default function SignUpPage() {
+  return <SignUpForm />
+}
+`),await t((0,i.join)(o,"app/[locale]/auth/forgot-password/page.tsx"),`import { ForgotPasswordForm } from '@murumets-ee/auth-ui'
+
+export default function ForgotPasswordPage() {
+  return <ForgotPasswordForm />
+}
+`),await t((0,i.join)(o,"app/[locale]/auth/reset-password/page.tsx"),`import { Suspense } from 'react'
+import { ResetPasswordContent } from './content'
+
+export default function ResetPasswordPage() {
+  return (
+    <Suspense>
+      <ResetPasswordContent />
+    </Suspense>
+  )
+}
+`),await t((0,i.join)(o,"app/[locale]/auth/reset-password/content.tsx"),`'use client'
+
+import { useSearchParams } from 'next/navigation'
+import { ResetPasswordForm } from '@murumets-ee/auth-ui'
+
+export function ResetPasswordContent() {
+  const searchParams = useSearchParams()
+  const token = searchParams.get('token')
+
+  if (!token) {
+    return (
+      <div className="text-center">
+        <h1 className="text-2xl font-bold text-zinc-900 dark:text-zinc-50">
+          Invalid or expired link
+        </h1>
+        <p className="mt-2 text-zinc-500">
+          Please request a new password reset.
+        </p>
+      </div>
+    )
+  }
+
+  return <ResetPasswordForm token={token} />
+}
+`),await t((0,i.join)(o,"app/[locale]/setup/page.tsx"),`import { redirect } from 'next/navigation'
+import { sql } from 'drizzle-orm'
+import { getToolkitApp } from '@${r}/config/app'
+import { SetupForm } from './form'
+
+export default async function SetupPage() {
+  const app = await getToolkitApp()
+  const result = await app.db.readOnly.execute<{ count: string }>(
+    sql\`SELECT COUNT(*)::text as count FROM "user"\`,
+  )
+
+  if (Number(result[0]?.count) > 0) {
+    redirect('/')
+  }
+
+  return (
+    <div className="max-w-md mx-auto p-8">
+      <h1 className="text-2xl font-bold mb-2">Create Admin</h1>
+      <p className="text-sm text-zinc-500 dark:text-zinc-400 mb-6">
+        No users found. Create the first admin account.
+      </p>
+      <SetupForm />
+    </div>
+  )
+}
+`),await t((0,i.join)(o,"app/[locale]/setup/form.tsx"),`'use client'
+
+import { useState } from 'react'
+import { createFirstAdmin } from './actions'
+
+export function SetupForm() {
+  const [result, setResult] = useState<{ ok?: boolean; error?: string; email?: string } | null>(null)
+  const [loading, setLoading] = useState(false)
+
+  async function handleSubmit(e: React.FormEvent<HTMLFormElement>) {
+    e.preventDefault()
+    setLoading(true)
+    setResult(null)
+    const res = await createFirstAdmin(new FormData(e.currentTarget))
+    setResult(res)
+    setLoading(false)
+  }
+
+  if (result?.ok) {
+    return (
+      <div className="space-y-2">
+        <p className="text-green-600 dark:text-green-400">Admin created: {result.email}</p>
+        <a href="/auth/sign-in" className="text-blue-600 dark:text-blue-400 hover:underline">
+          Sign in &rarr;
+        </a>
+      </div>
+    )
+  }
+
+  return (
+    <form onSubmit={handleSubmit} className="flex flex-col gap-4">
+      <label className="text-sm font-medium">
+        Name
+        <input
+          name="name"
+          required
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+      <label className="text-sm font-medium">
+        Email
+        <input
+          name="email"
+          type="email"
+          required
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+      <label className="text-sm font-medium">
+        Password (min 8 chars)
+        <input
+          name="password"
+          type="password"
+          required
+          minLength={8}
+          className="mt-1 block w-full px-3 py-2 bg-zinc-100 dark:bg-zinc-900 border border-zinc-300 dark:border-zinc-700 rounded-md text-sm focus:outline-none focus:ring-1 focus:ring-blue-500"
+        />
+      </label>
+
+      {result?.error && <p className="text-red-600 dark:text-red-400 text-sm">{result.error}</p>}
+
+      <button
+        type="submit"
+        disabled={loading}
+        className="px-4 py-2 text-sm rounded-md bg-blue-600 text-white hover:bg-blue-500 disabled:opacity-50 transition-colors"
+      >
+        {loading ? 'Creating...' : 'Create Admin'}
+      </button>
+    </form>
+  )
+}
+`),await t((0,i.join)(o,"app/[locale]/setup/actions.ts"),`'use server'
+
+import { sql } from 'drizzle-orm'
+import { getToolkitApp } from '@${r}/config/app'
+import { getAuth } from '@murumets-ee/auth'
+
+export async function createFirstAdmin(formData: FormData) {
+  const email = formData.get('email') as string
+  const password = formData.get('password') as string
+  const name = formData.get('name') as string
+
+  if (!email || !password || !name) {
+    return { error: 'All fields are required' }
+  }
+
+  if (password.length < 8) {
+    return { error: 'Password must be at least 8 characters' }
+  }
+
+  const app = await getToolkitApp()
+
+  const canCreate = await app.db.readWrite.transaction(async (tx) => {
+    await tx.execute(sql\`SELECT pg_advisory_xact_lock(1)\`)
+
+    const result = await tx.execute<{ count: string }>(
+      sql\`SELECT COUNT(*)::text as count FROM "user"\`,
+    )
+    return Number(result[0]?.count) === 0
+  })
+
+  if (!canCreate) {
+    return { error: 'Admin user already exists. Setup is complete.' }
+  }
+
+  const auth = getAuth()
+
+  const adminUser = await auth.api.signUpEmail({
+    body: { email, password, name },
+  })
+
+  await app.db.readWrite.execute(
+    sql\`UPDATE "user" SET role = 'admin' WHERE id = \${adminUser.user.id}\`,
+  )
+
+  return { ok: true, email: adminUser.user.email }
+}
+`)}async function J(e,a){let{name:r}=a,o=(0,i.join)(e,"apps/web");u(`pnpm create next-app@${"16"} ${o} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await g(o,["app/page.tsx","app/page.module.css","app/fonts","README.md","pnpm-workspace.yaml"]),await d((0,i.join)(o,"package.json"),{dependencies:{[`@${r}/config`]:"workspace:*","@murumets-ee/core":`^${n.myorgCore}`,"@murumets-ee/auth-ui":`^${n.myorgAuthUi}`,"next-intl":`^${n.nextIntl}`,"next-themes":`^${n.nextThemes}`,"lucide-react":`^${n.lucideReact}`},devDependencies:{"babel-plugin-react-compiler":n.babelReactCompiler}});let{appendToFile:c}=await Promise.resolve().then(()=>(l(),T));await c((0,i.join)(o,".gitignore"),`
+# Environment
+.env*
+!.env.example
+`),await t((0,i.join)(o,"next.config.ts"),`import type { NextConfig } from 'next'
+import createNextIntlPlugin from 'next-intl/plugin'
+
+const withNextIntl = createNextIntlPlugin('./i18n/request.ts')
+
+const nextConfig: NextConfig = {
+  reactCompiler: true,
+  transpilePackages: [
+    '@${r}/config',
+    '@murumets-ee/core',
+    '@murumets-ee/entity',
+    '@murumets-ee/db',
+    '@murumets-ee/logging',
+    '@murumets-ee/auth-ui',
+  ],
+  serverExternalPackages: ['drizzle-orm', 'postgres'],
+}
+
+export default withNextIntl(nextConfig)
+`),await t((0,i.join)(o,"proxy.ts"),`import createMiddleware from 'next-intl/middleware'
+import { routing } from './i18n/routing'
+
+export default createMiddleware(routing)
+
+export const config = {
+  matcher: '/((?!api|_next|_vercel|.*\\\\..*).*)',
+}
+`),await t((0,i.join)(o,"i18n/routing.ts"),`import { defineRouting } from 'next-intl/routing'
+
+export const routing = defineRouting({
+  locales: ['en'],
+  defaultLocale: 'en',
+})
+`),await t((0,i.join)(o,"i18n/request.ts"),`import { getRequestConfig } from 'next-intl/server'
+import { hasLocale } from 'next-intl'
+import { routing } from './routing'
+import { getAuthMessages } from '@murumets-ee/auth-ui/i18n'
+
+export default getRequestConfig(async ({ requestLocale }) => {
+  const requested = await requestLocale
+  const locale = hasLocale(routing.locales, requested)
+    ? requested
+    : routing.defaultLocale
+
+  const authMessages = await getAuthMessages(locale)
+
+  return {
+    locale,
+    messages: {
+      ...authMessages,
+    },
+  }
+})
+`),await t((0,i.join)(o,"app/globals.css"),`@import "tailwindcss";
+@source "../node_modules/@murumets-ee/auth-ui/dist";
+
+@custom-variant dark (&:where(.dark, .dark *));
+
+:root {
+  --background: #ffffff;
+  --foreground: #171717;
+}
+
+@theme inline {
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --font-sans: var(--font-geist-sans);
+  --font-mono: var(--font-geist-mono);
+}
+
+.dark {
+  --background: #0a0a0a;
+  --foreground: #ededed;
+}
+
+body {
+  background: var(--background);
+  color: var(--foreground);
+  font-family: Arial, Helvetica, sans-serif;
+}
+`),await t((0,i.join)(o,"app/theme-provider.tsx"),`'use client'
+
+import { ThemeProvider as NextThemesProvider } from 'next-themes'
+import type { ReactNode } from 'react'
+
+export function ThemeProvider({ children }: { children: ReactNode }) {
+  return (
+    <NextThemesProvider
+      attribute="class"
+      defaultTheme="system"
+      enableSystem
+      disableTransitionOnChange
+    >
+      {children}
+    </NextThemesProvider>
+  )
+}
+`),await t((0,i.join)(o,"app/theme-toggle.tsx"),`'use client'
+
+import { useTheme } from 'next-themes'
+import { useState, useEffect } from 'react'
+import { Sun, Moon } from 'lucide-react'
+
+export function ThemeToggle() {
+  const [mounted, setMounted] = useState(false)
+  const { resolvedTheme, setTheme } = useTheme()
+
+  useEffect(() => { setMounted(true) }, [])
+
+  if (!mounted) {
+    return <div className="h-8 w-8" />
+  }
+
+  return (
+    <button
+      type="button"
+      onClick={() => setTheme(resolvedTheme === 'dark' ? 'light' : 'dark')}
+      className="rounded-md p-1.5 text-zinc-400 transition-colors hover:bg-zinc-100 hover:text-zinc-600 dark:hover:bg-zinc-800 dark:hover:text-zinc-200 cursor-pointer"
+      aria-label={resolvedTheme === 'dark' ? 'Switch to light mode' : 'Switch to dark mode'}
+    >
+      {resolvedTheme === 'dark' ? <Sun className="h-5 w-5" /> : <Moon className="h-5 w-5" />}
+    </button>
+  )
+}
+`),await t((0,i.join)(o,"app/nav-header.tsx"),`'use client'
+
+import Link from 'next/link'
+import { usePathname } from 'next/navigation'
+import { ThemeToggle } from './theme-toggle'
+
+const links = [
+  { href: '/', label: 'Home' },
+]
+
+export function NavHeader() {
+  const pathname = usePathname()
+
+  function isActive(href: string) {
+    return href === '/' ? pathname === '/' : pathname.startsWith(href)
+  }
+
+  const linkClass = (href: string) =>
+    \`px-3 py-1.5 rounded-md text-sm transition-colors \${
+      isActive(href)
+        ? 'bg-zinc-200 text-zinc-900 dark:bg-zinc-800 dark:text-zinc-50'
+        : 'text-zinc-500 hover:text-zinc-700 hover:bg-zinc-100 dark:text-zinc-400 dark:hover:text-zinc-200 dark:hover:bg-zinc-800/50'
+    }\`
+
+  return (
+    <header className="sticky top-0 z-50 backdrop-blur-md border-b bg-white/80 border-zinc-200 dark:bg-zinc-950/80 dark:border-zinc-800">
+      <nav className="max-w-6xl mx-auto flex items-center gap-1 px-4 h-12">
+        <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 mr-3 select-none">
+          ${r}
+        </span>
+        {links.map(({ href, label }) => (
+          <Link key={href} href={href} className={linkClass(href)}>
+            {label}
+          </Link>
+        ))}
+        <div className="ml-auto">
+          <ThemeToggle />
+        </div>
+      </nav>
+    </header>
+  )
+}
+`),await t((0,i.join)(o,"app/layout.tsx"),`import './globals.css'
+
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return children
+}
+`),await t((0,i.join)(o,"app/[locale]/layout.tsx"),`import type { Metadata } from 'next'
+import { Geist, Geist_Mono } from 'next/font/google'
+import { NextIntlClientProvider } from 'next-intl'
+import { getMessages } from 'next-intl/server'
+import { notFound } from 'next/navigation'
+import { routing } from '@/i18n/routing'
+import { ThemeProvider } from '../theme-provider'
+import { NavHeader } from '../nav-header'
+
+const geistSans = Geist({
+  variable: '--font-geist-sans',
+  subsets: ['latin'],
+})
+
+const geistMono = Geist_Mono({
+  variable: '--font-geist-mono',
+  subsets: ['latin'],
+})
+
+export const metadata: Metadata = {
+  title: '${r}',
+  description: 'Built with Lumi CMS Toolkit',
+}
+
+export default async function LocaleLayout({
+  children,
+  params,
+}: {
+  children: React.ReactNode
+  params: Promise<{ locale: string }>
+}) {
+  const { locale } = await params
+  if (!routing.locales.includes(locale as any)) notFound()
+
+  const messages = await getMessages()
+
+  return (
+    <html lang={locale} suppressHydrationWarning>
+      <body className={\`\${geistSans.variable} \${geistMono.variable} antialiased\`}>
+        <ThemeProvider>
+          <NextIntlClientProvider locale={locale} messages={messages}>
+            <NavHeader />
+            {children}
+          </NextIntlClientProvider>
+        </ThemeProvider>
+      </body>
+    </html>
+  )
+}
+`),await t((0,i.join)(o,"app/[locale]/page.tsx"),`import { createQueryClient } from '@murumets-ee/core/clients'
+import { Article, Category } from '@${r}/config/entities'
+import { getToolkitApp } from '@${r}/config/app'
+
+export default async function HomePage() {
+  await getToolkitApp()
+  const articles = createQueryClient(Article)
+  const categories = createQueryClient(Category)
+
+  const [articleList, categoryList] = await Promise.all([
+    articles.findMany({ limit: 10 }),
+    categories.findMany({}),
+  ])
+
+  return (
+    <div className="min-h-screen p-8">
+      <div className="max-w-4xl mx-auto">
+        <h1 className="text-4xl font-bold mb-8">Welcome to ${r}</h1>
+
+        <section className="mb-12">
+          <h2 className="text-2xl font-semibold mb-4">
+            Categories ({categoryList.length})
+          </h2>
+          <div className="grid gap-4 md:grid-cols-2">
+            {categoryList.map((cat) => (
+              <div
+                key={cat.id}
+                className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-4"
+              >
+                <h3 className="font-semibold text-lg">{cat.name}</h3>
+                <p className="text-sm text-zinc-600 dark:text-zinc-400">
+                  {cat.description}
+                </p>
+              </div>
+            ))}
+          </div>
+        </section>
+
+        <section>
+          <h2 className="text-2xl font-semibold mb-4">
+            Articles ({articleList.length})
+          </h2>
+          {articleList.length === 0 ? (
+            <p className="text-zinc-500">No published articles yet.</p>
+          ) : (
+            <div className="space-y-4">
+              {articleList.map((article) => (
+                <div
+                  key={article.id}
+                  className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-6"
+                >
+                  <h3 className="text-xl font-bold">{article.title}</h3>
+                  <p className="text-zinc-600 dark:text-zinc-400 mt-2">
+                    {article.excerpt}
+                  </p>
+                </div>
+              ))}
+            </div>
+          )}
+        </section>
+      </div>
+    </div>
+  )
+}
+`)}var f=require("path");l();async function M(e,a){let{name:r}=a;await t((0,f.join)(e,"next.config.ts"),`import type { NextConfig } from 'next'
+import createNextIntlPlugin from 'next-intl/plugin'
+
+const withNextIntl = createNextIntlPlugin('./i18n/request.ts')
+
+const nextConfig: NextConfig = {
+  output: 'standalone',
+  reactCompiler: true,
+  transpilePackages: [
+    '@murumets-ee/core', '@murumets-ee/entity', '@murumets-ee/db',
+    '@murumets-ee/logging', '@murumets-ee/auth', '@murumets-ee/auth-ui',
+    '@murumets-ee/admin-ui', '@murumets-ee/content', '@murumets-ee/settings',
+    '@murumets-ee/storage', '@murumets-ee/media', '@murumets-ee/taxonomy',
+    '@murumets-ee/queue', '@murumets-ee/mail', '@murumets-ee/ticketing',
+    '@murumets-ee/ticketing-ui', '@murumets-ee/tokens', '@murumets-ee/ui',
+  ],
+  serverExternalPackages: ['drizzle-orm', 'postgres', 'pino', 'file-type'],
+  experimental: {
+    serverActions: {
+      bodySizeLimit: '2mb',
+    },
+  },
+}
+
+export default withNextIntl(nextConfig)
+`),await t((0,f.join)(e,"proxy.ts"),`import { NextRequest, NextResponse } from 'next/server'
+import createMiddleware from 'next-intl/middleware'
+import { routing } from './i18n/routing'
+
+const intlMiddleware = createMiddleware(routing)
+
+const protectedPaths = ['/setup']
+
+export function proxy(request: NextRequest) {
+  const { pathname } = request.nextUrl
+
+  // Strip locale prefix to check actual path
+  const localePattern = new RegExp(\`^/(\${routing.locales.join('|')})\`)
+  const pathWithoutLocale = pathname.replace(localePattern, '') || '/'
+
+  // Auth check for protected paths
+  if (protectedPaths.some((p) => pathWithoutLocale.startsWith(p))) {
+    const session = request.cookies.get('better-auth.session_token')
+    if (!session) {
+      const locale = pathname.match(localePattern)?.[1] || routing.defaultLocale
+      return NextResponse.redirect(new URL(\`/\${locale}/auth/sign-in\`, request.url))
+    }
+  }
+
+  // Locale routing
+  return intlMiddleware(request)
+}
+
+export const config = {
+  matcher: '/((?!api|_next|_vercel|.*\\\\..*).*)',
+}
+`),await t((0,f.join)(e,"app/layout.tsx"),`import './globals.css'
+
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return children
+}
+`),await t((0,f.join)(e,"app/[locale]/layout.tsx"),`import type { Metadata } from 'next'
+import { Geist, Geist_Mono } from 'next/font/google'
+import { NextIntlClientProvider } from 'next-intl'
+import { getMessages } from 'next-intl/server'
+import { notFound } from 'next/navigation'
+import { routing } from '@/i18n/routing'
+import { ThemeProvider } from '../theme-provider'
+import { NavHeader } from '../nav-header'
+
+const geistSans = Geist({
+  variable: '--font-geist-sans',
+  subsets: ['latin'],
+})
+
+const geistMono = Geist_Mono({
+  variable: '--font-geist-mono',
+  subsets: ['latin'],
+})
+
+export const metadata: Metadata = {
+  title: '${r}',
+  description: 'Built with Lumi CMS Toolkit',
+}
+
+export default async function LocaleLayout({
+  children,
+  params,
+}: {
+  children: React.ReactNode
+  params: Promise<{ locale: string }>
+}) {
+  const { locale } = await params
+  if (!routing.locales.includes(locale as any)) notFound()
+
+  const messages = await getMessages()
+
+  return (
+    <html lang={locale} suppressHydrationWarning>
+      <body className={\`\${geistSans.variable} \${geistMono.variable} antialiased\`}>
+        <ThemeProvider>
+          <NextIntlClientProvider locale={locale} messages={messages}>
+            <NavHeader />
+            {children}
+          </NextIntlClientProvider>
+        </ThemeProvider>
+      </body>
+    </html>
+  )
+}
+`),await t((0,f.join)(e,"app/[locale]/page.tsx"),`import { createQueryClient } from '@murumets-ee/core/clients'
+import { Article, Category } from '@/entities'
+import { getToolkitApp } from '@/lib/app'
+
+export default async function HomePage() {
+  await getToolkitApp()
+  const articles = createQueryClient(Article)
+  const categories = createQueryClient(Category)
+
+  const [articleList, categoryList] = await Promise.all([
+    articles.findMany({ limit: 10 }),
+    categories.findMany({}),
+  ])
+
+  return (
+    <div className="min-h-screen p-8">
+      <div className="max-w-4xl mx-auto">
+        <h1 className="text-4xl font-bold mb-8">Welcome to ${r}</h1>
+
+        <section className="mb-12">
+          <h2 className="text-2xl font-semibold mb-4">
+            Categories ({categoryList.length})
+          </h2>
+          <div className="grid gap-4 md:grid-cols-2">
+            {categoryList.map((cat) => (
+              <div
+                key={cat.id}
+                className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-4"
+              >
+                <h3 className="font-semibold text-lg">{cat.name}</h3>
+                <p className="text-sm text-zinc-600 dark:text-zinc-400">
+                  {cat.description}
+                </p>
+              </div>
+            ))}
+          </div>
+        </section>
+
+        <section>
+          <h2 className="text-2xl font-semibold mb-4">
+            Articles ({articleList.length})
+          </h2>
+          {articleList.length === 0 ? (
+            <p className="text-zinc-500">No published articles yet.</p>
+          ) : (
+            <div className="space-y-4">
+              {articleList.map((article) => (
+                <div
+                  key={article.id}
+                  className="border border-zinc-200 dark:border-zinc-800 rounded-lg p-6"
+                >
+                  <h3 className="text-xl font-bold">{article.title}</h3>
+                  <p className="text-zinc-600 dark:text-zinc-400 mt-2">
+                    {article.excerpt}
+                  </p>
+                </div>
+              ))}
+            </div>
+          )}
+        </section>
+      </div>
+    </div>
+  )
+}
+`)}var w=require("path");l();async function O(e,a){await t((0,w.join)(e,"scripts/generate-schema.ts"),`import { execSync } from 'node:child_process'
+execSync('npx @murumets-ee/cli generate', { stdio: 'inherit', cwd: import.meta.dirname + '/..' })
+`),await t((0,w.join)(e,"scripts/migrate.ts"),`import { execSync } from 'node:child_process'
+execSync('npx @murumets-ee/cli migrate', { stdio: 'inherit', cwd: import.meta.dirname + '/..' })
+`),await t((0,w.join)(e,"scripts/reset-db.ts"),`import { execSync } from 'node:child_process'
+execSync('npx @murumets-ee/cli reset --force', { stdio: 'inherit', cwd: import.meta.dirname + '/..' })
+`)}var x=require("path");l();async function q(e,a){let{name:r}=a;await t((0,x.join)(e,"app/globals.css"),`@import "tailwindcss";
+@source "../node_modules/@murumets-ee/auth-ui/dist";
+
+@custom-variant dark (&:where(.dark, .dark *));
+
+:root {
+  --background: #ffffff;
+  --foreground: #171717;
+}
+
+@theme inline {
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --font-sans: var(--font-geist-sans);
+  --font-mono: var(--font-geist-mono);
+}
+
+.dark {
+  --background: #0a0a0a;
+  --foreground: #ededed;
+}
+
+body {
+  background: var(--background);
+  color: var(--foreground);
+  font-family: Arial, Helvetica, sans-serif;
+}
+`),await t((0,x.join)(e,"app/theme-provider.tsx"),`'use client'
+
+import { ThemeProvider as NextThemesProvider } from 'next-themes'
+import type { ReactNode } from 'react'
+
+export function ThemeProvider({ children }: { children: ReactNode }) {
+  return (
+    <NextThemesProvider
+      attribute="class"
+      defaultTheme="system"
+      enableSystem
+      disableTransitionOnChange
+    >
+      {children}
+    </NextThemesProvider>
+  )
+}
+`),await t((0,x.join)(e,"app/theme-toggle.tsx"),`'use client'
+
+import { useTheme } from 'next-themes'
+import { useState, useEffect } from 'react'
+import { Sun, Moon } from 'lucide-react'
+
+export function ThemeToggle() {
+  const [mounted, setMounted] = useState(false)
+  const { resolvedTheme, setTheme } = useTheme()
+
+  useEffect(() => { setMounted(true) }, [])
+
+  if (!mounted) {
+    return <div className="h-8 w-8" />
+  }
+
+  return (
+    <button
+      type="button"
+      onClick={() => setTheme(resolvedTheme === 'dark' ? 'light' : 'dark')}
+      className="rounded-md p-1.5 text-zinc-400 transition-colors hover:bg-zinc-100 hover:text-zinc-600 dark:hover:bg-zinc-800 dark:hover:text-zinc-200 cursor-pointer"
+      aria-label={resolvedTheme === 'dark' ? 'Switch to light mode' : 'Switch to dark mode'}
+    >
+      {resolvedTheme === 'dark' ? <Sun className="h-5 w-5" /> : <Moon className="h-5 w-5" />}
+    </button>
+  )
+}
+`),await t((0,x.join)(e,"app/nav-header.tsx"),`'use client'
+
+import Link from 'next/link'
+import { usePathname } from 'next/navigation'
+import { ThemeToggle } from './theme-toggle'
+
+const links = [
+  { href: '/', label: 'Home' },
+  { href: '/auth/sign-in', label: 'Sign In' },
+  { href: '/setup', label: 'Setup' },
+]
+
+export function NavHeader() {
+  const pathname = usePathname()
+
+  function isActive(href: string) {
+    return href === '/' ? pathname === '/' : pathname.startsWith(href)
+  }
+
+  const linkClass = (href: string) =>
+    \`px-3 py-1.5 rounded-md text-sm transition-colors \${
+      isActive(href)
+        ? 'bg-zinc-200 text-zinc-900 dark:bg-zinc-800 dark:text-zinc-50'
+        : 'text-zinc-500 hover:text-zinc-700 hover:bg-zinc-100 dark:text-zinc-400 dark:hover:text-zinc-200 dark:hover:bg-zinc-800/50'
+    }\`
+
+  return (
+    <header className="sticky top-0 z-50 backdrop-blur-md border-b bg-white/80 border-zinc-200 dark:bg-zinc-950/80 dark:border-zinc-800">
+      <nav className="max-w-6xl mx-auto flex items-center gap-1 px-4 h-12">
+        <span className="font-semibold text-sm text-zinc-700 dark:text-zinc-300 mr-3 select-none">
+          ${r}
+        </span>
+        {links.map(({ href, label }) => (
+          <Link key={href} href={href} className={linkClass(href)}>
+            {label}
+          </Link>
+        ))}
+        <div className="ml-auto">
+          <ThemeToggle />
+        </div>
+      </nav>
+    </header>
+  )
+}
+`)}var h=require("path");l();async function I(e,a){let{name:r}=a;await t((0,h.join)(e,"toolkit.config.ts"),`import { auth } from '@murumets-ee/auth/plugin'
+import { content } from '@murumets-ee/content/plugin'
+import { defineConfig } from '@murumets-ee/core'
+import { logging } from '@murumets-ee/logging/plugin'
+import { mail, ResendMailProvider } from '@murumets-ee/mail'
+import { media } from '@murumets-ee/media/plugin'
+import { queue } from '@murumets-ee/queue/plugin'
+import { settings } from '@murumets-ee/settings/plugin'
+import { storage } from '@murumets-ee/storage/plugin'
+import { taxonomy } from '@murumets-ee/taxonomy/plugin'
+import { ticketing } from '@murumets-ee/ticketing/plugin'
+import { Article, Category } from './entities'
+import * as authSchema from './generated/auth-schema'
+
+if (!process.env.DATABASE_URL) {
+  throw new Error('DATABASE_URL environment variable is required')
+}
+
+export default defineConfig({
+  db: {
+    url: process.env.DATABASE_URL,
+    poolMin: 2,
+    poolMax: 10,
+  },
+  logging: {
+    level: (process.env.LOG_LEVEL || 'info') as 'debug' | 'info' | 'warn' | 'error',
+    name: '${r}',
+  },
+  entities: [Category, Article],
+  plugins: [
+    auth({ providers: ['email'], schema: authSchema }),
+    content({
+      locales: [{ code: 'en', label: 'English' }],
+      defaultLocale: 'en',
+    }),
+    logging(),
+    settings(),
+    storage(),
+    media(),
+    taxonomy(),
+    queue(),
+    mail({
+      provider: process.env.RESEND_API_KEY
+        ? new ResendMailProvider({ apiKey: process.env.RESEND_API_KEY })
+        : undefined,
+      defaultFrom: process.env.MAIL_FROM ?? 'noreply@example.com',
+      webhookSecret: process.env.RESEND_WEBHOOK_SECRET,
+    }),
+    ticketing({
+      csatSecret: process.env.CSAT_SECRET,
+    }),
+  ],
+  projectRoot: import.meta.dirname,
+})
+`),await t((0,h.join)(e,"lib/app.ts"),`import { createApp, setApp, type ToolkitApp } from '@murumets-ee/core'
+import config from '../toolkit.config'
+
+let appInstance: ToolkitApp | null = null
+
+export async function getToolkitApp(): Promise<ToolkitApp> {
+  if (!appInstance) {
+    console.log('Initializing toolkit app...')
+    appInstance = await createApp(config)
+    setApp(appInstance)
+    console.log('Toolkit app initialized')
+  }
+  return appInstance
+}
+`),await t((0,h.join)(e,"drizzle.config.ts"),`import type { Config } from 'drizzle-kit'
+
+if (!process.env.DATABASE_URL) {
+  throw new Error('DATABASE_URL environment variable is required')
+}
+
+export default {
+  schema: ['./generated/schema.ts', './generated/auth-schema.ts'],
+  out: './migrations',
+  dialect: 'postgresql',
+  dbCredentials: {
+    url: process.env.DATABASE_URL,
+  },
+} satisfies Config
+`),await t((0,h.join)(e,"auth.config.ts"),`import { betterAuth } from 'better-auth'
+import { drizzleAdapter } from 'better-auth/adapters/drizzle'
+import { admin } from 'better-auth/plugins'
+import { organization } from 'better-auth/plugins/organization'
+import { drizzle } from 'drizzle-orm/postgres-js'
+import postgres from 'postgres'
+
+const sql = postgres(process.env.DATABASE_URL!)
+const db = drizzle(sql)
+
+export const auth = betterAuth({
+  database: drizzleAdapter(db, { provider: 'pg' }),
+  emailAndPassword: { enabled: true },
+  plugins: [
+    admin(),
+    organization(),
+  ],
+})
+`),await t((0,h.join)(e,"generated/auth-schema.ts"),`// This file is generated by better-auth CLI.
+// Run: npx @better-auth/cli generate --config auth.config.ts -y
+export {}
+`)}l();async function U(e,a){e.mode==="single"?await Y(e,a):await Q(e,a)}async function Y(e,a){let r=(0,k.join)(process.cwd(),e.name);a?.("Creating Next.js app..."),u(`pnpm create next-app@${"16"} ${e.name} --typescript --tailwind --no-eslint --app --no-src-dir --turbopack --react-compiler --skip-install --import-alias "@/*"`),await g(r,["app/page.tsx","app/page.module.css","app/fonts","README.md"]),await d((0,k.join)(r,"package.json"),{type:"module",dependencies:{"@murumets-ee/core":`^${n.myorgCore}`,"@murumets-ee/db":`^${n.myorgDb}`,"@murumets-ee/entity":`^${n.myorgEntity}`,"@murumets-ee/logging":`^${n.myorgLogging}`,"@murumets-ee/auth":`^${n.myorgAuth}`,"@murumets-ee/auth-ui":`^${n.myorgAuthUi}`,"@murumets-ee/admin-ui":`^${n.myorgAdminUi}`,"@murumets-ee/content":`^${n.myorgContent}`,"@murumets-ee/settings":`^${n.myorgSettings}`,"@murumets-ee/storage":`^${n.myorgStorage}`,"@murumets-ee/media":`^${n.myorgMedia}`,"@murumets-ee/taxonomy":`^${n.myorgTaxonomy}`,"@murumets-ee/queue":`^${n.myorgQueue}`,"@murumets-ee/mail":`^${n.myorgMail}`,"@murumets-ee/ticketing":`^${n.myorgTicketing}`,"@murumets-ee/ticketing-ui":`^${n.myorgTicketingUi}`,"@murumets-ee/tokens":`^${n.myorgTokens}`,"better-auth":`^${n.betterAuth}`,"drizzle-orm":`^${n.drizzleOrm}`,"next-intl":`^${n.nextIntl}`,"next-themes":`^${n.nextThemes}`,"lucide-react":`^${n.lucideReact}`,postgres:`^${n.postgres}`,"react-hook-form":`^${n.reactHookForm}`,"@hookform/resolvers":`^${n.hookformResolvers}`,zod:`^${n.zod}`},devDependencies:{"drizzle-kit":`^${n.drizzleKit}`,tsx:`^${n.tsx}`,"babel-plugin-react-compiler":n.babelReactCompiler},scripts:{"db:generate":"tsx --env-file=.env scripts/generate-schema.ts","db:migrate:generate":"drizzle-kit generate","db:migrate":"tsx --env-file=.env scripts/migrate.ts","db:reset":"tsx --env-file=.env scripts/reset-db.ts"}}),a?.("Adding toolkit files..."),await C(r,e),await L(r,e),await I(r,e),await z(r,e),await _(r,e),await M(r,e),await q(r,e),await O(r,e),e.installDeps&&(a?.("Installing dependencies..."),u("pnpm install",{cwd:r}))}async function Q(e,a){let r=(0,k.join)(process.cwd(),e.name);a?.("Creating workspace..."),await $(r,e,a),e.installDeps&&(a?.("Installing dependencies..."),u("pnpm install",{cwd:r}))}0&&(module.exports={scaffold});