nextworks 0.0.1 → 0.1.0-alpha.0

package/dist/commands/remove-auth-core.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeAuthCore = removeAuthCore;
+const file_operations_1 = require("../utils/file-operations");
+const installation_tracker_1 = require("../utils/installation-tracker");
+async function removeAuthCore() {
+    console.log("Removing auth-core kit...");
+    try {
+        // Files to remove (same as what was installed)
+        const files = [
+            "lib/auth.ts",
+            "app/api/auth/[...nextauth]/route.ts",
+            "types/next-auth.d.ts",
+            "components/session-provider.tsx",
+            "lib/prisma.ts",
+            "prisma/auth-models.prisma",
+            // lib/validation/forms.ts is provided by the Forms kit; do not remove here
+            "lib/utils.ts",
+            "components/auth/login-form.tsx",
+            "components/auth/signup-form.tsx",
+            "components/auth/signup-form.tsx",
+            "components/require-auth.tsx",
+            "components/ui/button.tsx",
+            "components/ui/input.tsx",
+            "components/ui/label.tsx",
+            "app/auth/login/page.tsx",
+            "app/auth/signup/page.tsx",
+            "app/api/signup/route.ts",
+            "app/(protected)/layout.tsx",
+            "app/(protected)/dashboard/page.tsx",
+        ];
+        // Get safe-to-remove dependencies (not shared with other kits)
+        const safeToRemove = await (0, installation_tracker_1.getSafeToRemoveDependencies)("auth-core");
+        // Remove files
+        await (0, file_operations_1.removeFiles)(files);
+        // Remove empty folders (only if they're empty)
+        await (0, file_operations_1.removeEmptyFolders)(files);
+        // Remove only safe dependencies (not shared with other kits)
+        if (safeToRemove.dependencies.length > 0 ||
+            safeToRemove.devDependencies.length > 0) {
+            await (0, file_operations_1.removePackageDepsSmart)(safeToRemove.dependencies, safeToRemove.devDependencies);
+        }
+        else {
+            console.log("ℹ️  No dependencies to remove (shared with other kits)");
+        }
+        // Revert layout.tsx changes
+        await (0, file_operations_1.revertLayoutFile)();
+        // Remove from installation tracker
+        await (0, installation_tracker_1.removeInstalledKit)("auth-core");
+        console.log("✓ auth-core kit removed successfully!");
+        console.log("\n📋 Cleanup completed:");
+        console.log("• Removed all auth-core files");
+        console.log("• Removed empty folders (if any)");
+        if (safeToRemove.dependencies.length > 0 ||
+            safeToRemove.devDependencies.length > 0) {
+            console.log("• Removed unshared dependencies from package.json");
+        }
+        else {
+            console.log("• Kept shared dependencies in package.json");
+        }
+        console.log("• Reverted app/layout.tsx changes");
+        console.log("\n💡 You may want to run 'npm install' to clean up node_modules");
+    }
+    catch (error) {
+        console.log("❌ Failed to remove auth-core kit");
+        throw error;
+    }
+}
+//# sourceMappingURL=remove-auth-core.js.map

package/dist/commands/remove-auth-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-auth-core.js","sourceRoot":"","sources":["../../src/commands/remove-auth-core.ts"],"names":[],"mappings":";;AAWA,wCA6EC;AAxFD,8DAKkC;AAClC,wEAGuC;AAEhC,KAAK,UAAU,cAAc;IAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAEzC,IAAI,CAAC;QACH,+CAA+C;QAC/C,MAAM,KAAK,GAAG;YACZ,aAAa;YACb,qCAAqC;YACrC,sBAAsB;YACtB,iCAAiC;YACjC,eAAe;YACf,2BAA2B;YAC3B,2EAA2E;YAC3E,cAAc;YACd,gCAAgC;YAChC,iCAAiC;YACjC,iCAAiC;YACjC,6BAA6B;YAC7B,0BAA0B;YAC1B,yBAAyB;YACzB,yBAAyB;YACzB,yBAAyB;YACzB,0BAA0B;YAC1B,yBAAyB;YACzB,4BAA4B;YAC5B,oCAAoC;SACrC,CAAC;QAEF,+DAA+D;QAC/D,MAAM,YAAY,GAAG,MAAM,IAAA,kDAA2B,EAAC,WAAW,CAAC,CAAC;QAEpE,eAAe;QACf,MAAM,IAAA,6BAAW,EAAC,KAAK,CAAC,CAAC;QAEzB,+CAA+C;QAC/C,MAAM,IAAA,oCAAkB,EAAC,KAAK,CAAC,CAAC;QAEhC,6DAA6D;QAC7D,IACE,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACpC,YAAY,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;YACD,MAAM,IAAA,wCAAsB,EAC1B,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,eAAe,CAC7B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACxE,CAAC;QAED,4BAA4B;QAC5B,MAAM,IAAA,kCAAgB,GAAE,CAAC;QAEzB,mCAAmC;QACnC,MAAM,IAAA,yCAAkB,EAAC,WAAW,CAAC,CAAC;QAEtC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,IACE,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACpC,YAAY,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/commands/remove-blocks.d.ts

@@ -0,0 +1,2 @@
+export declare function removeBlocks(): Promise<void>;
+//# sourceMappingURL=remove-blocks.d.ts.map

package/dist/commands/remove-blocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-blocks.d.ts","sourceRoot":"","sources":["../../src/commands/remove-blocks.ts"],"names":[],"mappings":"AAaA,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CA4ClD"}

package/dist/commands/remove-blocks.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeBlocks = removeBlocks;
+const file_operations_1 = require("../utils/file-operations");
+const installation_tracker_1 = require("../utils/installation-tracker");
+async function removeBlocks() {
+    console.log("Removing blocks kit...");
+    try {
+        const manifestPath = (0, file_operations_1.resolveAssetPath)("cli_manifests", "blocks_manifest.json");
+        const manifest = await (0, file_operations_1.readJsonFile)(manifestPath);
+        const files = manifest.files || [];
+        // Get safe-to-remove dependencies (not shared with other kits)
+        const safeToRemove = await (0, installation_tracker_1.getSafeToRemoveDependencies)("blocks");
+        // Remove files
+        await (0, file_operations_1.removeFiles)(files);
+        // Remove empty folders
+        await (0, file_operations_1.removeEmptyFolders)(files);
+        // Remove only safe dependencies
+        if (safeToRemove.dependencies.length > 0 ||
+            safeToRemove.devDependencies.length > 0) {
+            await (0, file_operations_1.removePackageDepsSmart)(safeToRemove.dependencies, safeToRemove.devDependencies);
+        }
+        else {
+            console.log("ℹ️  No dependencies to remove (shared with other kits)");
+        }
+        // Remove from installation tracker
+        await (0, installation_tracker_1.removeInstalledKit)("blocks");
+        console.log("✓ blocks kit removed successfully!");
+        console.log("\n💡 You may want to run 'npm install' to clean up node_modules");
+    }
+    catch (error) {
+        console.log("❌ Failed to remove blocks kit");
+        throw error;
+    }
+}
+//# sourceMappingURL=remove-blocks.js.map

package/dist/commands/remove-blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-blocks.js","sourceRoot":"","sources":["../../src/commands/remove-blocks.ts"],"names":[],"mappings":";;AAaA,oCA4CC;AAzDD,8DAMkC;AAClC,wEAGuC;AAGhC,KAAK,UAAU,YAAY;IAChC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAA,kCAAgB,EACnC,eAAe,EACf,sBAAsB,CACvB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;QAClD,MAAM,KAAK,GAAa,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QAE7C,+DAA+D;QAC/D,MAAM,YAAY,GAAG,MAAM,IAAA,kDAA2B,EAAC,QAAQ,CAAC,CAAC;QAEjE,eAAe;QACf,MAAM,IAAA,6BAAW,EAAC,KAAK,CAAC,CAAC;QAEzB,uBAAuB;QACvB,MAAM,IAAA,oCAAkB,EAAC,KAAK,CAAC,CAAC;QAEhC,gCAAgC;QAChC,IACE,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACpC,YAAY,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;YACD,MAAM,IAAA,wCAAsB,EAC1B,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,eAAe,CAC7B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACxE,CAAC;QAED,mCAAmC;QACnC,MAAM,IAAA,yCAAkB,EAAC,QAAQ,CAAC,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+"use strict";
+// Copyright (c) 2025 Jakob Bro Liebe Hansen
+// SPDX-License-Identifier: MIT
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const auth_core_1 = require("./commands/auth-core");
+const blocks_1 = require("./commands/blocks");
+const forms_1 = __importDefault(require("./commands/forms"));
+// NOTE: auth-forms, admin-users, and admin-posts are planned but not yet implemented as real kits.
+// We temporarily remove them from the public CLI surface to avoid advertising non-existent kits.
+const data_1 = __importDefault(require("./commands/data"));
+const remove_auth_core_1 = require("./commands/remove-auth-core");
+const remove_blocks_1 = require("./commands/remove-blocks");
+const installation_tracker_1 = require("./utils/installation-tracker");
+const program = new commander_1.Command();
+program
+    .name("nextworks")
+    .description("Nextworks CLI - Feature kits installer for Next.js apps")
+    .version("0.1.0");
+program
+    .command("add <kit>")
+    .description("Add a feature kit to your project")
+    .option("--sections", "Include standalone sections (Hero, CTA, Pricing, etc.)")
+    .option("--templates", "Include full page templates (Product Launch, SaaS Dashboard, Digital Agency, Gallery)")
+    .option("--gallery", "Include gallery/demo template and assets")
+    .action(async (kit, options) => {
+    try {
+        switch (kit) {
+            case "auth-core":
+                await (0, auth_core_1.addAuthCore)();
+                break;
+            case "forms":
+                await (0, forms_1.default)();
+                break;
+            case "data":
+                await (0, data_1.default)();
+                break;
+            case "blocks":
+                await (0, blocks_1.addBlocks)({
+                    sections: options.sections,
+                    templates: options.templates,
+                    gallery: options.gallery,
+                });
+                break;
+            default:
+                console.log(`❌ Unknown kit: ${kit}`);
+                console.log("Available kits:");
+                console.log("  • auth-core     - NextAuth + Prisma + session wrapper");
+                console.log("  • forms         - Form primitives, validation, and examples");
+                console.log("  • data          - Posts + Users CRUD, API routes, admin panels (depends on auth + forms)");
+                console.log("  • blocks        - Frontend UI sections & templates (Blocks kit)");
+                process.exit(1);
+        }
+    }
+    catch (error) {
+        console.error("❌ Error:", error);
+        process.exit(1);
+    }
+});
+program
+    .command("remove <kit>")
+    .description("Remove a feature kit from your project")
+    .action(async (kit) => {
+    try {
+        switch (kit) {
+            case "auth-core":
+                await (0, remove_auth_core_1.removeAuthCore)();
+                break;
+            case "blocks":
+                await (0, remove_blocks_1.removeBlocks)();
+                break;
+            default:
+                console.log(`❌ Unknown kit: ${kit}`);
+                console.log("Available kits to remove:");
+                console.log("  • auth-core     - NextAuth + Prisma + session wrapper");
+                process.exit(1);
+        }
+    }
+    catch (error) {
+        console.error("❌ Error:", error);
+        process.exit(1);
+    }
+});
+program
+    .command("list")
+    .description("List installed kits")
+    .action(async () => {
+    try {
+        const installedKits = await (0, installation_tracker_1.getInstalledKits)();
+        if (installedKits.length === 0) {
+            console.log("No kits installed.");
+            return;
+        }
+        console.log("Installed kits:");
+        installedKits.forEach((kit) => {
+            console.log(`  • ${kit}`);
+        });
+    }
+    catch (error) {
+        console.error("❌ Error:", error);
+        process.exit(1);
+    }
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;AAEA,4CAA4C;AAC5C,+BAA+B;;;;;AAE/B,yCAAoC;AACpC,oDAAmD;AACnD,8CAA8C;AAC9C,6DAAwC;AACxC,mGAAmG;AACnG,iGAAiG;AAEjG,2DAAsC;AACtC,kEAA6D;AAC7D,4DAAwD;AACxD,uEAAgE;AAEhE,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,yDAAyD,CAAC;KACtE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,mCAAmC,CAAC;KAChD,MAAM,CACL,YAAY,EACZ,wDAAwD,CACzD;KACA,MAAM,CACL,aAAa,EACb,uFAAuF,CACxF;KACA,MAAM,CAAC,WAAW,EAAE,0CAA0C,CAAC;KAC/D,MAAM,CACL,KAAK,EACH,GAAW,EACX,OAAuE,EACvE,EAAE;IACF,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,WAAW;gBACd,MAAM,IAAA,uBAAW,GAAE,CAAC;gBACpB,MAAM;YACR,KAAK,OAAO;gBACV,MAAM,IAAA,eAAQ,GAAE,CAAC;gBACjB,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,IAAA,cAAO,GAAE,CAAC;gBAChB,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,IAAA,kBAAS,EAAC;oBACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM;YACR;gBACE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,CACT,yDAAyD,CAC1D,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,+DAA+D,CAChE,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,4FAA4F,CAC7F,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,mEAAmE,CACpE,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,WAAW;gBACd,MAAM,IAAA,iCAAc,GAAE,CAAC;gBACvB,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,IAAA,4BAAY,GAAE,CAAC;gBACrB,MAAM;YACR;gBACE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACzC,OAAO,CAAC,GAAG,CACT,yDAAyD,CAC1D,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,qBAAqB,CAAC;KAClC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,IAAA,uCAAgB,GAAE,CAAC;QAE/C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/kits/auth-core/README.md

@@ -0,0 +1,82 @@
+Auth core kit (cli/kits/auth-core)
+
+This folder contains the files that the `nextworks` CLI copies into a target Next.js project when you run:
+
+```bash
+npx nextworks add auth-core
+```
+
+What the kit includes
+
+- NextAuth configuration and handler: lib/auth.ts
+- Prisma client helper: lib/prisma.ts
+- Validation schemas: lib/validation/forms.ts
+- ApiResult helpers: lib/server/result.ts
+- Email helpers for dev and SMTP: lib/email/\*
+- Signup API: app/api/signup/route.ts
+- NextAuth API: app/api/auth/[...nextauth]/route.ts
+- Login/Signup UI components: components/auth/\*
+- SessionProvider and RequireAuth utilities
+- Prisma snippet: prisma/auth-models.prisma
+
+Environment variables
+
+The kit relies on the following environment variables. Document these in post-install output or in your project's README:
+
+Required (for core auth):
+
+- DATABASE_URL
+- NEXTAUTH_URL (e.g. http://localhost:3000)
+- NEXTAUTH_SECRET
+
+Optional / password reset & email:
+
+- NEXTWORKS_ENABLE_PASSWORD_RESET=1 (enable password reset scaffold)
+- NEXTWORKS_USE_DEV_EMAIL=1 (enable Ethereal dev email transport)
+- SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS, NOREPLY_EMAIL (when using real SMTP provider)
+- GITHUB_ID, GITHUB_SECRET (optional) — the GitHub provider is enabled only when both are present
+- NODE_ENV
+
+Post-install steps (recommended)
+
+1. Install dependencies copied by the kit (the CLI will merge `package-deps.json` into your `package.json`). Ensure `nodemailer` is installed if you will enable dev email:
+
+   ```bash
+   npm install
+   ```
+
+2. Copy or merge `prisma/auth-models.prisma` into your Prisma schema (`prisma/schema.prisma`) and run:
+
+   ```bash
+   npx prisma generate
+   npx prisma migrate dev -n init
+   ```
+
+3. (Optional) Seed demo data for testing:
+
+   ```bash
+   SEED_ADMIN_EMAIL=admin@example.com SEED_ADMIN_PASSWORD=password123 node ./scripts/seed-demo.mjs
+   ```
+
+4. Start your dev server:
+
+   ```bash
+   npm run dev
+   ```
+
+5. Verify the basic flows:
+
+- Signup: /auth/signup
+- Login: /auth/login
+- Protected dashboard: /dashboard (requires sign in)
+- If enabled, forgot password POST to /api/auth/forgot-password and reset flows at /api/auth/reset-password
+
+Notes & security
+
+- Password reset is intentionally opt-in. Do not enable NEXTWORKS_ENABLE_PASSWORD_RESET in production unless you have configured a real mail provider and replaced the in-memory rate limiter.
+- NEXTWORKS_USE_DEV_EMAIL=1 uses Ethereal (nodemailer) and prints a preview URL to server logs for development testing.
+- Email verification on signup is **not yet implemented**. Stub endpoints and UI are in place at `/api/auth/send-verify-email` and `/auth/verify-email`. The Prisma `VerificationToken` model is already included so a future implementation can be added as a non-breaking enhancement.
+
+CLI behavior (for maintainers)
+
+- In the Nextworks repo, the CLI copies the files listed in `cli/cli_manifests/auth_manifest.json`. Keep that manifest and this kit folder in sync when editing the repo.

package/dist/kits/auth-core/app/(protected)/dashboard/page.tsx

@@ -0,0 +1,8 @@
+import { requireAuth } from "@/lib/auth-helpers";
+import Dashboard from "@/components/auth/dashboard";
+
+export default async function DashboardPage() {
+  const session = await requireAuth("/dashboard");
+
+  return <Dashboard session={session} />;
+}

package/dist/kits/auth-core/app/(protected)/layout.tsx

@@ -0,0 +1,18 @@
+import RequireAuth from "@/components/require-auth";
+
+/**
+ * ProtectedLayout wraps all routes under /app/(protected).
+ * We delegate the optional admin header to RequireAuth via a prop, keeping
+ * the control in shared components instead of env flags.
+ */
+export default async function ProtectedLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <RequireAuth showAdminHeader>
+      <div className="mx-auto max-w-6xl px-4">{children}</div>
+    </RequireAuth>
+  );
+}

package/dist/kits/auth-core/app/(protected)/settings/profile/page.tsx

@@ -0,0 +1,15 @@
+import React from "react";
+import ProfileForm from "./profile-form";
+
+export default function ProfilePage() {
+  return (
+    <div className="mx-auto max-w-3xl p-6">
+      <h1 className="mb-4 text-2xl font-bold">Profile Settings</h1>
+      <p className="text-muted-foreground mb-4 text-sm">
+        Update your name and email. Changes are persisted via the
+        /api/users/[id] API.
+      </p>
+      <ProfileForm />
+    </div>
+  );
+}

package/dist/kits/auth-core/app/(protected)/settings/profile/profile-form.tsx

@@ -0,0 +1,114 @@
+"use client";
+
+import React, { useEffect, useState } from "react";
+import { useForm } from "react-hook-form";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { userSchema } from "@/lib/validation/forms";
+import { Form } from "@/components/ui/form/form";
+import { FormField } from "@/components/ui/form/form-field";
+import { FormItem } from "@/components/ui/form/form-item";
+import { FormLabel } from "@/components/ui/form/form-label";
+import { FormControl } from "@/components/ui/form/form-control";
+import { FormMessage } from "@/components/ui/form/form-message";
+import { Input } from "@/components/ui/input";
+import { Button } from "@/components/ui/button";
+import { useSession } from "next-auth/react";
+import { mapApiErrorsToForm } from "@/lib/forms/map-errors";
+import { toast } from "sonner";
+
+export default function ProfileForm() {
+  const { data: session, update } = useSession();
+
+  const methods = useForm({
+    resolver: zodResolver(userSchema),
+    defaultValues: { name: "", email: "" },
+  });
+  const { control, handleSubmit, reset } = methods;
+  const [isSaving, setIsSaving] = useState(false);
+
+  useEffect(() => {
+    if (session?.user) {
+      reset({ name: session.user.name ?? "", email: session.user.email ?? "" });
+    }
+  }, [session, reset]);
+
+  const onSubmit = async (values: any) => {
+    if (!session?.user?.id) {
+      toast.error("You must be signed in to update your profile");
+      return;
+    }
+
+    setIsSaving(true);
+    try {
+      const res = await fetch(`/api/users/${session.user.id}`, {
+        method: "PUT",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(values),
+      });
+
+      const payload = await res.json();
+
+      const globalMessage = mapApiErrorsToForm(methods, payload);
+
+      if (payload?.success) {
+        toast.success(payload.message ?? "Profile updated");
+        // update local form values to reflect saved state
+        reset(values);
+        // Patch the NextAuth session so UI reflects the change immediately
+        await update({ name: values.name, email: values.email });
+      } else {
+        if (globalMessage) {
+          toast.error(globalMessage);
+        } else {
+          toast.error(payload?.message ?? "Failed to update profile");
+        }
+      }
+    } catch (e) {
+      console.error("Failed to update profile", e);
+      toast.error("Network error while updating profile");
+    } finally {
+      setIsSaving(false);
+    }
+  };
+
+  return (
+    <div className="bg-card rounded-md p-6">
+      <h2 className="mb-3 text-lg font-semibold">Profile settings</h2>
+      <Form methods={methods}>
+        <form onSubmit={handleSubmit(onSubmit)} className="space-y-3">
+          <FormField
+            control={control}
+            name="name"
+            render={({ field }) => (
+              <FormItem>
+                <FormLabel>Name</FormLabel>
+                <FormControl>
+                  <Input {...field} />
+                </FormControl>
+                <FormMessage />
+              </FormItem>
+            )}
+          />
+
+          <FormField
+            control={control}
+            name="email"
+            render={({ field }) => (
+              <FormItem>
+                <FormLabel>Email</FormLabel>
+                <FormControl>
+                  <Input {...field} />
+                </FormControl>
+                <FormMessage />
+              </FormItem>
+            )}
+          />
+
+          <Button type="submit" disabled={isSaving}>
+            {isSaving ? "Saving..." : "Save"}
+          </Button>
+        </form>
+      </Form>
+    </div>
+  );
+}

package/dist/kits/auth-core/app/api/auth/[...nextauth]/route.ts

@@ -0,0 +1 @@
+export { GET, POST } from "@/lib/auth";

package/dist/kits/auth-core/app/api/auth/forgot-password/route.ts

@@ -0,0 +1,114 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { Prisma } from "@prisma/client";
+import { prisma } from "@/lib/prisma";
+import { forgotPasswordSchema } from "@/lib/validation/forms";
+import { randomBytes, createHash } from "crypto";
+import { sendDevEmail } from "@/lib/email/dev-transport";
+import { sendEmail, isEmailProviderConfigured } from "@/lib/email";
+
+const RATE_LIMIT_WINDOW_MS = 60 * 60 * 1000; // 1 hour
+const MAX_PER_WINDOW = 5;
+const ipMap = new Map<string, number[]>();
+
+function rateLimit(ip: string) {
+  const now = Date.now();
+  const arr = ipMap.get(ip) ?? [];
+  const pruned = arr.filter((t) => now - t < RATE_LIMIT_WINDOW_MS);
+  pruned.push(now);
+  ipMap.set(ip, pruned);
+  return pruned.length <= MAX_PER_WINDOW;
+}
+
+export async function POST(req: Request) {
+  if (process.env.NEXTWORKS_ENABLE_PASSWORD_RESET !== "1") {
+    return NextResponse.json({ message: "Not found" }, { status: 404 });
+  }
+  const ip = req.headers.get("x-forwarded-for") || "local";
+  if (!rateLimit(ip)) {
+    return NextResponse.json({ message: "Too many requests" }, { status: 429 });
+  }
+
+  let body: unknown;
+  try {
+    body = await req.json();
+  } catch {
+    return NextResponse.json({ message: "Invalid request" }, { status: 400 });
+  }
+
+  try {
+    const parsed = forgotPasswordSchema.parse(body);
+    const { email } = parsed;
+
+    const user = await prisma.user.findUnique({ where: { email } });
+    if (user) {
+      const token = randomBytes(24).toString("hex");
+      const tokenHash = createHash("sha256").update(token).digest("hex");
+      const expires = new Date(Date.now() + 1000 * 60 * 60); // 1 hour
+      await prisma.passwordReset.create({
+        data: {
+          tokenHash,
+          expires,
+          user: { connect: { id: user.id } },
+        },
+      });
+
+      const mailConfigured = isEmailProviderConfigured();
+      const isProd = process.env.NODE_ENV === "production";
+
+      if (
+        isProd &&
+        process.env.NEXTWORKS_ENABLE_PASSWORD_RESET === "1" &&
+        !mailConfigured
+      ) {
+        return NextResponse.json({ message: "Not found" }, { status: 404 });
+      }
+
+      try {
+        const base = process.env.NEXTAUTH_URL ?? "http://localhost:3000";
+        const resetUrl = `${base.replace(/\/$/, "")}/auth/reset-password?token=${token}`;
+
+        if (mailConfigured) {
+          try {
+            await sendEmail({
+              to: email,
+              subject: "Password reset",
+              text: `Reset your password: ${resetUrl}`,
+              html: `<p>Reset your password: <a href="${resetUrl}">Reset password</a></p>`,
+            });
+            console.info(`Password reset email queued for ${email}`);
+          } catch (e) {
+            console.error("Failed to send password reset email");
+          }
+        } else if (process.env.NEXTWORKS_USE_DEV_EMAIL === "1") {
+          try {
+            const { previewUrl } = await sendDevEmail({
+              to: email,
+              subject: "Password reset",
+              text: `Reset your password: ${resetUrl}`,
+              html: `<p>Reset your password: <a href="${resetUrl}">Reset password</a></p>`,
+            });
+            if (previewUrl) {
+              console.info(`Password reset email (dev preview): ${previewUrl}`);
+            } else {
+              console.info(`Password reset email queued for ${email}`);
+            }
+          } catch (e) {
+            console.error("Failed to send dev password reset email");
+          }
+        } else {
+          console.info(`Password reset requested for ${email}`);
+        }
+      } catch (e) {
+        console.error("Failed to handle password reset email");
+      }
+    }
+
+    return NextResponse.json({ message: "If an account exists, a reset link was sent." });
+  } catch (err: any) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ message: "Validation failed", errors: (err as z.ZodError).issues }, { status: 400 });
+    }
+    return NextResponse.json({ message: "Failed" }, { status: 400 });
+  }
+}

package/dist/kits/auth-core/app/api/auth/providers/route.ts

@@ -0,0 +1,6 @@
+import { NextResponse } from "next/server";
+
+export async function GET() {
+  const enabled = Boolean(process.env.GITHUB_ID && process.env.GITHUB_SECRET);
+  return NextResponse.json({ github: enabled });
+}