Base System
Open appAuth-ready workspace
Public front door, protected app behind it.
The root route is now a public landing page. The authenticated workspace, linked sign-ins, todo dashboard, and RBAC flows live under `/app`.
Auth flows
Social OAuth
Access control
User / Admin
Persistence
SQLite + Drizzle
Route layout
The app is now split into a public entry and a dedicated workspace route.
/
Landing page
Public overview and entry point.
/app
Workspace
Authentication modal, linked accounts, RBAC, and todos.
/api/auth/*
Auth endpoints
Better Auth handlers for sign-in and session management.