Feat/registration and login pages

.env.example

@@ -0,0 +1,9 @@
+BETTER_AUTH_SECRET=
+BETTER_AUTH_URL=http://localhost:3000
+
+POSTGRES_USER=
+POSTGRES_PASSWORD=
+POSTGRES_DB=awaketh
+
+NEXT_PUBLIC_GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=

.github/workflows/checks.yml

@@ -43,7 +43,7 @@ jobs:
           restore-keys: bun-${{ runner.os }}-
 
       - name: Install dependencies
-        run: bun install --frozen-lockfile
+        run: bun install --frozen-lockfile --ignore-scripts
 
       - name: Run ${{ matrix.name }}
         run: ${{ matrix.run }}

.github/workflows/visual-snapshots.yml

@@ -16,10 +16,34 @@ concurrency:
 env:
   # Directory the Playwright capture writes to and sentry-cli uploads from.
   SNAPSHOT_OUTPUT_DIR: snapshots
+  # CI-only database and auth config. prisma.config.ts builds the connection
+  # string from POSTGRES_* at load time, and the app queries the database when
+  # pages behind the session proxy are captured.
+  POSTGRES_USER: ci
+  POSTGRES_PASSWORD: ci
+  POSTGRES_DB: awaketh
+  BETTER_AUTH_URL: http://localhost:3000
+  BETTER_AUTH_SECRET: ci-only-secret-for-visual-snapshots
 
 jobs:
   visual:
     runs-on: blacksmith-4vcpu-ubuntu-2404
+
+    services:
+      postgres:
+        image: postgres:17
+        env:
+          POSTGRES_USER: ci
+          POSTGRES_PASSWORD: ci
+          POSTGRES_DB: awaketh
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U ci -d awaketh"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
+
     steps:
       - uses: actions/checkout@v7
         with:
@@ -30,7 +54,15 @@ jobs:
           bun-version: latest
 
       - name: Install dependencies
-        run: bun install --frozen-lockfile
+        run: bun install --frozen-lockfile --ignore-scripts
+
+      # --ignore-scripts skips the postinstall hook, so generate the Prisma
+      # client explicitly; the build resolves src/generated/prisma from it.
+      - name: Generate Prisma client
+        run: bunx prisma generate
+
+      - name: Apply database migrations
+        run: bunx prisma migrate deploy
 
       - name: Install Playwright browser
         run: bunx playwright install --with-deps chromium

.gitignore

@@ -40,7 +40,8 @@ yarn-error.log*
 
 # env files (can opt-in for committing if needed)
 .env.sentry-build-plugin
-.env
+.env*
+!.env.example
 
 # vercel
 .vercel
@@ -51,3 +52,4 @@ yarn-error.log*
 # IDEA IDEs (For whoever uses these lol)
 .idea
 /src/generated/prisma
+

next.config.ts

@@ -1,13 +1,33 @@
 import { withSentryConfig } from '@sentry/nextjs';
 import type { NextConfig } from 'next';
 
-const nextConfig: NextConfig = {/* config options here */};
+const nextConfig: NextConfig = {
+  async redirects() {
+    return [
+      {
+        source: `/legal/terms`,
+        destination: `https://stegnet.com/terms`,
+        permanent: false,
+      },
+      {
+        source: `/legal/privacy`,
+        destination: `https://stegnet.com/privacy`,
+        permanent: false,
+      },
+    ];
+  },
+};
 
 export default withSentryConfig(nextConfig, {
   org: 'stegnet',
   project: 'awaketh-web',
   silent: !process.env.CI,
   widenClientFileUpload: true,
+  authToken: process.env.SENTRY_AUTH_TOKEN,
+
+  sourcemaps: {
+    deleteSourcemapsAfterUpload: true,
+  },
 
   // Uncomment to route browser requests to Sentry through a Next.js rewrite to circumvent ad-blockers.
   // This can increase your server load as well as your hosting bill.

package.json

@@ -21,6 +21,9 @@
   },
   "dependencies": {
     "@base-ui/react": "^1.6.0",
+    "@better-auth/passkey": "^1.6.23",
+    "@icons-pack/react-simple-icons": "^13.13.0",
+    "@marsidev/react-turnstile": "1.5.3",
     "@prisma/adapter-pg": "^7.8.0",
     "@prisma/client": "^7.8.0",
     "@sentry/nextjs": "^10",
@@ -35,6 +38,7 @@
     "react": "19.2.7",
     "react-dom": "19.2.7",
     "shadcn": "^4.13.0",
+    "sonner": "^2.0.7",
     "tailwind-merge": "^3.6.0",
     "tw-animate-css": "^1.4.0"
   },

prisma.config.ts

@@ -1,6 +1,7 @@
 // Prisma CLI config. Prisma 7 does not auto-load .env, so we load it here.
 import 'dotenv/config';
 import { defineConfig } from 'prisma/config';
+import { buildConnectionString } from './src/lib/database/connection-string';
 
 export default defineConfig({
   schema: 'prisma/schema.prisma',
@@ -9,6 +10,6 @@ export default defineConfig({
   },
   datasource: {
     // Prisma 7 keeps the connection URL out of schema.prisma; the CLI/Migrate reads it here.
-    url: process.env['DATABASE_URL'],
+    url: buildConnectionString(),
   },
 });

prisma/migrations/20260715090009_0002/migration.sql

@@ -0,0 +1,25 @@
+-- CreateTable
+CREATE TABLE "passkey" (
+    "id" TEXT NOT NULL,
+    "name" TEXT,
+    "publicKey" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "credentialID" TEXT NOT NULL,
+    "counter" INTEGER NOT NULL,
+    "deviceType" TEXT NOT NULL,
+    "backedUp" BOOLEAN NOT NULL,
+    "transports" TEXT,
+    "createdAt" TIMESTAMP(3),
+    "aaguid" TEXT,
+
+    CONSTRAINT "passkey_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "passkey_userId_idx" ON "passkey"("userId");
+
+-- CreateIndex
+CREATE INDEX "passkey_credentialID_idx" ON "passkey"("credentialID");
+
+-- AddForeignKey
+ALTER TABLE "passkey" ADD CONSTRAINT "passkey_userId_fkey" FOREIGN KEY ("userId") REFERENCES "user"("id") ON DELETE CASCADE ON UPDATE CASCADE;

prisma/schema.prisma

@@ -21,6 +21,8 @@ model User {
   sessions      Session[]
   accounts      Account[]
 
+  passkeys Passkey[]
+
   @@unique([email])
   @@map("user")
 }
@@ -72,3 +74,22 @@ model Verification {
   @@index([identifier])
   @@map("verification")
 }
+
+model Passkey {
+  id           String    @id
+  name         String?
+  publicKey    String
+  userId       String
+  user         User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  credentialID String
+  counter      Int
+  deviceType   String
+  backedUp     Boolean
+  transports   String?
+  createdAt    DateTime?
+  aaguid       String?
+
+  @@index([userId])
+  @@index([credentialID])
+  @@map("passkey")
+}

sentry.edge.config.ts

@@ -18,14 +18,17 @@ if (
 
 Sentry.init({
   dsn:
-    process.env.NODE_ENV === 'production'
+    process.env.NODE_ENV === 'production' || process.env.NODE_ENV === 'test'
       ? process.env.NEXT_PUBLIC_WEB_SENTRY_DSN
       : '',
   integrations: [
     Sentry.consoleLoggingIntegration({ levels: ['log', 'warn', 'error'] }),
   ],
 
-  tracesSampleRate: process.env.NODE_ENV === 'production' ? 0.25 : 1.0,
+  tracesSampleRate:
+    process.env.NODE_ENV === 'production' || process.env.NODE_ENV === 'test'
+      ? 0.25
+      : 1.0,
 
   enableLogs: true,
   attachStacktrace: true,

sentry.server.config.ts

@@ -17,15 +17,18 @@ if (
 
 Sentry.init({
   dsn:
-    process.env.NODE_ENV === 'production'
+    process.env.NODE_ENV === 'production' || process.env.NODE_ENV === 'test'
       ? process.env.NEXT_PUBLIC_WEB_SENTRY_DSN
       : '',
   spotlight: process.env.NODE_ENV !== 'production',
   integrations: [
     Sentry.consoleLoggingIntegration({ levels: ['log', 'warn', 'error'] }),
   ],
 
-  tracesSampleRate: process.env.NODE_ENV === 'production' ? 0.25 : 1.0,
+  tracesSampleRate:
+    process.env.NODE_ENV === 'production' || process.env.NODE_ENV === 'test'
+      ? 0.25
+      : 1.0,
 
   enableLogs: true,
   attachStacktrace: true,

src/app/auth/sign-in/page.tsx

@@ -0,0 +1,22 @@
+import { LoginForm } from '@/components/login-form';
+import { GalleryVerticalEndIcon } from 'lucide-react';
+import Link from 'next/link';
+
+export default function LoginPage() {
+  return (
+    <div className="flex min-h-svh flex-col items-center justify-center gap-6 bg-muted p-6 md:p-10">
+      <div className="flex w-full max-w-sm flex-col gap-6">
+        <Link
+          href="/"
+          className="flex items-center gap-2 self-center font-medium"
+        >
+          <div className="flex size-6 items-center justify-center rounded-md bg-primary text-primary-foreground">
+            <GalleryVerticalEndIcon className="size-4" />
+          </div>
+          Awaketh
+        </Link>
+        <LoginForm />
+      </div>
+    </div>
+  );
+}

src/app/auth/sign-up/page.tsx

@@ -0,0 +1,24 @@
+'use client';
+
+import { SignupForm } from '@/components/signup-form';
+import { GalleryVerticalEndIcon } from 'lucide-react';
+import Link from 'next/link';
+
+export default function SignupPage() {
+  return (
+    <div className="flex min-h-svh flex-col items-center justify-center gap-6 bg-muted p-6 md:p-10">
+      <div className="flex w-full max-w-sm flex-col gap-6">
+        <Link
+          href="/"
+          className="flex items-center gap-2 self-center font-medium"
+        >
+          <div className="flex size-6 items-center justify-center rounded-md bg-primary text-primary-foreground">
+            <GalleryVerticalEndIcon className="size-4" />
+          </div>
+          Awaketh
+        </Link>
+        <SignupForm />
+      </div>
+    </div>
+  );
+}

src/app/dashboard/page.tsx

@@ -0,0 +1,16 @@
+'use client';
+
+import { authClient } from '@/lib/auth-client';
+
+export default function Dashboard() {
+  const { data } = authClient.useSession();
+
+  const fullName = data?.user?.name;
+
+  return (
+    <div>
+      <h1>Dashboard</h1>
+      <p>Welcome to the dashboard, {fullName}!</p>
+    </div>
+  );
+}

src/app/layout.tsx

@@ -1,6 +1,7 @@
 import type { Metadata } from 'next';
 import { Geist, Geist_Mono } from 'next/font/google';
 import { ThemeProvider } from '@/components/theme-provider';
+import { Toaster } from '@/components/ui/sonner';
 import './globals.css';
 
 const geistSans = Geist({
@@ -37,6 +38,7 @@ export default function RootLayout({
           disableTransitionOnChange
         >
           {children}
+          <Toaster />
         </ThemeProvider>
       </body>
     </html>