Base System
Open app
Auth-ready workspace

Public front door, protected app behind it.

The root route is now a public landing page. The authenticated workspace, linked sign-ins, todo dashboard, and RBAC flows live under `/app`.

Auth flows
Social OAuth
Access control
User / Admin
Persistence
SQLite + Drizzle
Route layout

The app is now split into a public entry and a dedicated workspace route.

/
Landing page

Public overview and entry point.

/app
Workspace

Authentication modal, linked accounts, RBAC, and todos.

/api/auth/*
Auth endpoints

Better Auth handlers for sign-in and session management.