create-veap 0.1.2

package/stubs/docker/Dockerfile.bun.stub

@@ -0,0 +1,42 @@
+# Stage 1: Base image (bun)
+FROM node:22-alpine AS base
+RUN apk add --no-cache libc6-compat
+
+# Install bun (Node stays the runtime for the standalone server)
+RUN npm install -g bun
+
+# Stage 2: Install dependencies
+FROM base AS deps
+WORKDIR /app
+COPY . .
+RUN bun install --frozen-lockfile
+
+# Stage 3: Build the project
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app ./
+RUN bun run build
+
+# Stage 4: Production runner
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+# Automatically leverage output traces to reduce image size
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "./server.js"]

package/stubs/docker/Dockerfile.npm.stub

@@ -0,0 +1,42 @@
+# Stage 1: Base image (npm)
+FROM node:22-alpine AS base
+RUN apk add --no-cache libc6-compat
+
+# Stage 2: Install dependencies
+FROM base AS deps
+WORKDIR /app
+COPY . .
+RUN npm config set fetch-retries 10 && \
+    npm config set fetch-retry-maxtimeout 120000 && \
+    npm config set fetch-timeout 600000 && \
+    npm ci
+
+# Stage 3: Build the project
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app ./
+RUN npm run build
+
+# Stage 4: Production runner
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+# Automatically leverage output traces to reduce image size
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "./server.js"]

package/stubs/docker/Dockerfile.stub

@@ -0,0 +1,49 @@
+# Stage 1: Base image with pnpm
+FROM node:22-alpine AS base
+RUN apk add --no-cache libc6-compat
+ENV PNPM_HOME="/pnpm"
+ENV PATH="$PNPM_HOME:$PATH"
+
+RUN corepack enable
+RUN corepack prepare pnpm@10.29.3 --activate
+
+# Stage 2: Install dependencies
+FROM base AS deps
+WORKDIR /app
+COPY . .
+RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
+    pnpm config set store-dir /pnpm/store && \
+    pnpm config set fetch-retries 10 && \
+    pnpm config set fetch-retry-maxtimeout 120000 && \
+    pnpm config set fetch-timeout 600000 && \
+    pnpm install --frozen-lockfile
+
+# Stage 3: Build the project
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app ./
+RUN pnpm build
+
+# Stage 4: Production runner
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+# Automatically leverage output traces to reduce image size
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static .next/static
+COPY --from=builder --chown=nextjs:nodejs /app/public public
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "./server.js"]

package/stubs/docker/Dockerfile.yarn.stub

@@ -0,0 +1,44 @@
+# Stage 1: Base image (yarn berry)
+FROM node:22-alpine AS base
+RUN apk add --no-cache libc6-compat
+
+RUN corepack enable
+RUN corepack prepare yarn@4.9.2 --activate
+
+# Stage 2: Install dependencies
+FROM base AS deps
+WORKDIR /app
+COPY . .
+RUN --mount=type=cache,id=yarn,target=/root/.yarn/berry/cache \
+    yarn config set enableNetworkConcurrency 8 && \
+    yarn install --immutable
+
+# Stage 3: Build the project
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app ./
+RUN yarn build
+
+# Stage 4: Production runner
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+# Automatically leverage output traces to reduce image size
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "./server.js"]

package/stubs/docker/compose.yml.stub

@@ -0,0 +1,58 @@
+services:
+  # Node.js service (use with: docker compose up {{name}} --build)
+  {{name}}:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: {{name}}-image
+    container_name: {{name}}
+    env_file:
+      - .env
+    environment:
+      NODE_ENV: production
+      PORT: "3000"
+      NEXT_TELEMETRY_DISABLED: "1"
+      DATABASE_URL: "postgresql://postgres:postgres@database:5432/postgres?sslmode=disable"
+    depends_on:
+      database:
+        condition: service_healthy
+      redis:
+        condition: service_started
+    ports:
+      - "80:3000"
+    restart: unless-stopped
+    volumes:
+      - ./storage:/app/public/storage
+
+  # PostgreSQL service
+  database:
+    image: postgres:17-alpine
+    container_name: {{name}}-db
+    restart: always
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: postgres
+      POSTGRES_DB: postgres
+    ports:
+      - "5432:5432"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+
+  # Redis service
+  redis:
+    image: redis:7-alpine
+    container_name: {{name}}-redis
+    restart: always
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis_data:/data
+
+volumes:
+  postgres_data:
+  redis_data:

package/stubs/overlay-full/AGENTS.md.stub

@@ -0,0 +1,63 @@
+<!-- BEGIN:veap-agent-rules -->
+
+# Veap Application - Agent Instructions
+
+This project is a **Veap** application: the official `create-next-app` base plus the Veap overlay (root layout, router, API pipeline, bootstrap). Next.js owns the shell; **Veap owns routing, auth, database, events, plugins and storage**. When the two disagree, prefer the Veap mechanisms below.
+
+## Project Structure (Veap-owned files)
+
+- `lib/veap.ts` - the composition root: `Application.configure()...create()` + `initializeSystem()` (cached bootstrap). Providers and plugins are wired here.
+- `lib/plugins.gen.ts` - **generated by `veap register`. Never edit by hand.** It statically imports installed plugins so the bundler can trace them.
+- `app/[[...catchAll]]/page.tsx` - every page render goes through `VeapRouter` (route tree built from plugins + app routes). Do not add competing page routes without understanding the router.
+- `app/api/[...catchAll]/route.ts` - API pipeline: middlewares, auth, roles/permissions resolved from the route tree.
+- `app/layout.tsx`, `app/not-found.tsx` - root shell with the bootstrap and the **force-dynamic contract (below)**.
+- `plugins/`, `templates/` - workspace packages (pnpm workspace / npm workspaces).
+- `migrations/` - app migrations (`veap make:migration`).
+
+## Critical Contracts (do not break)
+
+### 1. `force-dynamic` on the root layout and not-found
+
+`app/layout.tsx` and `app/not-found.tsx` **must** keep:
+
+```ts
+export const dynamic = "force-dynamic";
+```
+
+Why: `Application.bootstrap()` intentionally skips provider boot during `next build` (`NEXT_PHASE=phase-production-build`) - the database and env are not guaranteed at build time. But Next still prerenders `/_not-found` with the full root layout, whose helpers (`getPathPrefix()`, extension points) require booted contexts. Without `force-dynamic` the build fails with `AppError: [Plugins] Context is not bound`. This is a deliberate architectural trade-off (see ADR-006 of the framework): the whole app is dynamic; only `manifest.webmanifest` is static.
+
+### 2. `ENCRYPTION_KEY` is required - no fallback
+
+`.env` (generated) contains a random 16-byte base64 key used for AES encryption at rest (recovery codes, TOTP). The application **fails fast at boot** if the key is missing or does not decode to exactly 16/24/32 bytes. Regenerate with `openssl rand -base64 16`. Never commit `.env`.
+
+### 3. Database safety
+
+All mutations go through `transaction()` from `@veap/framework/database` (AsyncLocalStorage-based). Raw knex handles are available for reads, but transactions are the only supported write path.
+
+### 4. Plugins and events
+
+- Plugins are isolated packages: import only their public exports (`package.json` → `exports`).
+- Use the typed event bus (`system:auth:*` etc.); publish plugin events with your own `plugin:*` prefix.
+- Application services receive dependencies through ports (DI container); never `container.resolve()` inside request code - use the bound contexts/facades (`getCurrentSession`, `sendMail`, ...).
+
+### 5. Mail
+
+`MAIL_TRANSPORT` selects the delivery: `smtp` (default), `console` (dev - codes are logged), or `custom` (register your own `IMailer` under `CUSTOM_MAILER`). Transports only deliver `MailMessage` DTOs; semantic emails (verification codes, resets) are built as mailables in application code.
+
+## Commands
+
+```bash
+bun dev            # development server (or pnpm dev / npm run dev)
+bun run build      # production build
+bun run lint       # eslint
+veap add <plugin>  # install + register a plugin
+veap register      # regenerate lib/plugins.gen.ts
+veap make:plugin <name>
+veap make:migration <name>
+```
+
+## Source of Truth
+
+The installed framework code (`node_modules/@veap/framework`) overrides any documentation, including this file. If this file disagrees with the code, follow the code.
+
+<!-- END:veap-agent-rules -->

package/stubs/overlay-full/app/[[...catchAll]]/page.tsx.stub

@@ -0,0 +1,47 @@
+import { VeapRouter } from "@veap/framework/router";
+import { buildRouteTree } from "@veap/framework/router/server";
+import type { Metadata } from "next";
+import { initializeSystem } from "@/lib/veap";
+
+export const dynamic = "force-dynamic";
+
+export async function generateMetadata({
+  params,
+  searchParams,
+}: {
+  params: Promise<{ catchAll?: string[] }>;
+  searchParams: Promise<Record<string, string>>;
+}): Promise<Metadata> {
+  const { catchAll } = await params;
+  const sParams = await searchParams;
+  const path = catchAll && catchAll.length > 0 ? `/${catchAll.join("/")}` : "/";
+
+  await initializeSystem();
+  const tree = await buildRouteTree(true);
+  const result = await tree.generateMetadata(path, sParams);
+
+  return result;
+}
+
+export default async function CatchAllPage({
+  params,
+  searchParams,
+}: {
+  params: Promise<{ catchAll?: string[] }>;
+  searchParams: Promise<any>;
+}) {
+  const { catchAll } = await params;
+  const sParams = await searchParams;
+  const path = catchAll && catchAll.length > 0 ? `/${catchAll.join("/")}` : "/";
+
+  await initializeSystem();
+  const tree = await buildRouteTree(true);
+
+  const result = await VeapRouter({
+    tree,
+    path,
+    searchParams: sParams,
+  });
+
+  return result;
+}

package/stubs/overlay-full/app/api/[...catchAll]/route.ts.stub

@@ -0,0 +1,111 @@
+import { ApiEnsuredAuth, runApiPipeline } from "@veap/framework/router/server";
+import { initializeSystem } from "@/lib/veap";
+
+export const dynamic = "force-dynamic";
+
+async function handleRequest(
+  request: Request,
+  context: { params: Promise<{ catchAll: string[] }> },
+) {
+  // Ensure system is initialized (DB injected, plugins registered)
+  await initializeSystem();
+
+  const { catchAll } = await context.params;
+  const path = `/api/${catchAll.join("/")}`;
+
+  const { buildRouteTree } = await import("@veap/framework/router/server");
+  const tree = await buildRouteTree(true);
+
+  const match = tree.match(path);
+
+  const node = match?.node as any;
+
+  if (match?.isExact && node?.route) {
+    const method = request.method.toUpperCase();
+    const handler = node.route[method] || node.route.handler;
+
+    if (handler) {
+      const middlewares = [];
+
+      // Collect middlewares from the layout chain
+      for (const entry of match.layoutChain) {
+        if (entry.middlewares) {
+          middlewares.push(...entry.middlewares);
+        }
+      }
+
+      // Node middlewares
+      if (node.middlewares) {
+        middlewares.push(...node.middlewares);
+      }
+
+      // Resolve auth from chain (closest to leaf wins)
+      let authRequired = node.auth;
+      if (authRequired === undefined) {
+        for (let i = match.layoutChain.length - 1; i >= 0; i--) {
+          if (match.layoutChain[i].auth !== undefined) {
+            authRequired = match.layoutChain[i].auth;
+            break;
+          }
+        }
+      }
+
+      // Roles and permissions
+      let roles = node.roles;
+      if (!roles) {
+        for (let i = match.layoutChain.length - 1; i >= 0; i--) {
+          if (match.layoutChain[i].roles) {
+            roles = match.layoutChain[i].roles;
+            break;
+          }
+        }
+      }
+
+      let permissions = node.permissions;
+      if (!permissions) {
+        for (let i = match.layoutChain.length - 1; i >= 0; i--) {
+          if (match.layoutChain[i].permissions) {
+            permissions = match.layoutChain[i].permissions;
+            break;
+          }
+        }
+      }
+
+      if (authRequired) {
+        middlewares.unshift(ApiEnsuredAuth);
+      }
+
+      return await runApiPipeline(
+        middlewares as any,
+        request,
+        {
+          params: match.params,
+          roles,
+          permissions,
+        },
+        async (req: Request, ctx: any) => {
+          return handler(req, ctx);
+        },
+      );
+    } else {
+      return new Response(
+        JSON.stringify({ error: `Method ${method} Not Allowed` }),
+        {
+          status: 405,
+          headers: { "Content-Type": "application/json" },
+        },
+      );
+    }
+  }
+
+  return new Response(JSON.stringify({ error: "API Route not found" }), {
+    status: 404,
+    headers: { "Content-Type": "application/json" },
+  });
+}
+
+export const GET = handleRequest;
+export const POST = handleRequest;
+export const PUT = handleRequest;
+export const PATCH = handleRequest;
+export const DELETE = handleRequest;

package/stubs/overlay-full/app/error.tsx.stub

@@ -0,0 +1,34 @@
+"use client";
+
+import { useTranslation } from "@veap/framework/intl";
+import { useEffect } from "react";
+
+export default function ErrorPage({
+  error,
+  reset,
+}: {
+  error: Error & { digest?: string };
+  reset: () => void;
+}) {
+  const { t } = useTranslation();
+  useEffect(() => {
+    console.error(error);
+  }, [error]);
+
+  return (
+    <div className="flex min-h-screen flex-col items-center justify-center p-4">
+      <div className="max-w-md text-center">
+        <h2 className="text-2xl font-bold mb-4">{t("Something went wrong!")}</h2>
+        <p className="text-muted-foreground mb-6">
+          {error.message || t("An unexpected error occurred.")}
+        </p>
+        <button
+          onClick={() => reset()}
+          className="px-4 py-2 bg-primary text-primary-foreground rounded-md hover:opacity-90"
+        >
+          {t("Try Again")}
+        </button>
+      </div>
+    </div>
+  );
+}

package/stubs/overlay-full/app/globals.css.stub

@@ -0,0 +1,124 @@
+@import "tailwindcss";
+@import "tw-animate-css";
+
+@custom-variant dark (&:is(.dark *));
+
+@theme inline {
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --color-card: var(--card);
+  --color-card-foreground: var(--card-foreground);
+  --color-popover: var(--popover);
+  --color-popover-foreground: var(--popover-foreground);
+  --color-primary: var(--primary);
+  --color-primary-foreground: var(--primary-foreground);
+  --color-secondary: var(--secondary);
+  --color-secondary-foreground: var(--secondary-foreground);
+  --color-muted: var(--muted);
+  --color-muted-foreground: var(--muted-foreground);
+  --color-accent: var(--accent);
+  --color-accent-foreground: var(--accent-foreground);
+  --color-destructive: var(--destructive);
+  --color-destructive-foreground: var(--destructive-foreground);
+  --color-border: var(--border);
+  --color-input: var(--input);
+  --color-ring: var(--ring);
+  --color-chart-1: var(--chart-1);
+  --color-chart-2: var(--chart-2);
+  --color-chart-3: var(--chart-3);
+  --color-chart-4: var(--chart-4);
+  --color-chart-5: var(--chart-5);
+  --radius-sm: calc(var(--radius) * 0.6);
+  --radius-md: calc(var(--radius) * 0.8);
+  --radius-lg: var(--radius);
+  --radius-xl: calc(var(--radius) * 1.4);
+  --radius-2xl: calc(var(--radius) * 1.8);
+  --radius-3xl: calc(var(--radius) * 2.2);
+  --radius-4xl: calc(var(--radius) * 2.6);
+  --color-sidebar: var(--sidebar);
+  --color-sidebar-foreground: var(--sidebar-foreground);
+  --color-sidebar-primary: var(--sidebar-primary);
+  --color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+  --color-sidebar-accent: var(--sidebar-accent);
+  --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+  --color-sidebar-border: var(--sidebar-border);
+  --color-sidebar-ring: var(--sidebar-ring);
+}
+
+:root {
+  --radius: 0.625rem;
+  --background: oklch(1 0 0);
+  --foreground: oklch(0.145 0 0);
+  --card: oklch(1 0 0);
+  --card-foreground: oklch(0.145 0 0);
+  --popover: oklch(1 0 0);
+  --popover-foreground: oklch(0.145 0 0);
+  --primary: oklch(0.205 0 0);
+  --primary-foreground: oklch(0.985 0 0);
+  --secondary: oklch(0.97 0 0);
+  --secondary-foreground: oklch(0.205 0 0);
+  --muted: oklch(0.97 0 0);
+  --muted-foreground: oklch(0.556 0 0);
+  --accent: oklch(0.97 0 0);
+  --accent-foreground: oklch(0.205 0 0);
+  --destructive: oklch(0.577 0.245 27.325);
+  --border: oklch(0.922 0 0);
+  --input: oklch(0.922 0 0);
+  --ring: oklch(0.708 0 0);
+  --chart-1: oklch(0.646 0.222 41.116);
+  --chart-2: oklch(0.6 0.118 184.704);
+  --chart-3: oklch(0.398 0.07 227.392);
+  --chart-4: oklch(0.828 0.189 84.429);
+  --chart-5: oklch(0.769 0.188 70.08);
+  --sidebar: oklch(0.985 0 0);
+  --sidebar-foreground: oklch(0.145 0 0);
+  --sidebar-primary: oklch(0.205 0 0);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.97 0 0);
+  --sidebar-accent-foreground: oklch(0.205 0 0);
+  --sidebar-border: oklch(0.922 0 0);
+  --sidebar-ring: oklch(0.708 0 0);
+}
+
+.dark {
+  --background: oklch(0.145 0 0);
+  --foreground: oklch(0.985 0 0);
+  --card: oklch(0.205 0 0);
+  --card-foreground: oklch(0.985 0 0);
+  --popover: oklch(0.205 0 0);
+  --popover-foreground: oklch(0.985 0 0);
+  --primary: oklch(0.922 0 0);
+  --primary-foreground: oklch(0.205 0 0);
+  --secondary: oklch(0.269 0 0);
+  --secondary-foreground: oklch(0.985 0 0);
+  --muted: oklch(0.269 0 0);
+  --muted-foreground: oklch(0.708 0 0);
+  --accent: oklch(0.269 0 0);
+  --accent-foreground: oklch(0.985 0 0);
+  --destructive: oklch(0.704 0.191 22.216);
+  --border: oklch(1 0 0 / 10%);
+  --input: oklch(1 0 0 / 15%);
+  --ring: oklch(0.556 0 0);
+  --chart-1: oklch(0.488 0.243 264.376);
+  --chart-2: oklch(0.696 0.17 162.48);
+  --chart-3: oklch(0.769 0.188 70.08);
+  --chart-4: oklch(0.627 0.265 303.9);
+  --chart-5: oklch(0.645 0.246 16.439);
+  --sidebar: oklch(0.205 0 0);
+  --sidebar-foreground: oklch(0.985 0 0);
+  --sidebar-primary: oklch(0.488 0.243 264.376);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.269 0 0);
+  --sidebar-accent-foreground: oklch(0.985 0 0);
+  --sidebar-border: oklch(1 0 0 / 10%);
+  --sidebar-ring: oklch(0.556 0 0);
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+  body {
+    @apply bg-background text-foreground;
+  }
+}

package/stubs/overlay-full/app/layout.tsx.stub

@@ -0,0 +1,71 @@
+import type { Metadata } from "next";
+import { Geist, Geist_Mono } from "next/font/google";
+import "./globals.css";
+import { I18nProvider } from "@veap/framework/intl/server";
+import { ExtensionPoint, getPathPrefix } from "@veap/framework/plugins/server";
+import { AppProvider } from "@veap/framework/react";
+import { cookies } from "next/headers";
+import { initializeSystem } from "@/lib/veap";
+import {
+  getCurrentSession,
+  isSystemInstalled,
+} from "@veap/framework/auth/server";
+
+const geistSans = Geist({
+  variable: "--font-geist-sans",
+  subsets: ["latin"],
+});
+
+const geistMono = Geist_Mono({
+  variable: "--font-geist-mono",
+  subsets: ["latin"],
+});
+
+export const metadata: Metadata = {
+  title: "Veap App",
+  description: "Built with Veap framework",
+};
+
+// The whole layout is request-time work: it boots Veap (providers + plugin
+// context), reads cookies and renders plugin extension points. Without this,
+// Next.js prerenders /_not-found during `next build` while
+// NEXT_PHASE=phase-production-build - in which `Application.bootstrap()`
+// intentionally skips provider boot - and context-bound helpers (e.g.
+// getPathPrefix()) throw "Context is not bound".
+export const dynamic = "force-dynamic";
+
+export default async function RootLayout({
+  children,
+}: Readonly<{
+  children: React.ReactNode;
+}>) {
+  await initializeSystem();
+  const installed = await isSystemInstalled();
+
+  const session = installed
+    ? await getCurrentSession()
+    : { session: null, user: null };
+
+  const pathPrefix = await getPathPrefix();
+
+  const cookieStore = await cookies();
+  const locale = cookieStore.get("VEAP_LOCALE")?.value || "en";
+
+  return (
+    <html lang={locale} suppressHydrationWarning>
+      <body
+        className={`${geistSans.variable} ${geistMono.variable} antialiased`}
+      >
+        <I18nProvider>
+          <AppProvider initialSession={session} prefix={pathPrefix}>
+            <div className="min-h-screen relative bg-background">
+              <ExtensionPoint target="app" point="before-content" />
+              {children}
+              <ExtensionPoint target="app" point="after-content" />
+            </div>
+          </AppProvider>
+        </I18nProvider>
+      </body>
+    </html>
+  );
+}