Refactor auth session handling and server actions across app

- Overhaul `lib/auth/server.ts` and `lib/auth/session.ts`; update all API
  routes and server actions to use the revised session pattern
- Refactor server actions (settings, titles, watchlist, setup) for
  consistency with new auth layer
- Extract `SetupForm` into its own client component with `useActionState`,
  animated steps, and copyable env snippets
- Move landing page redirect logic into `app/page.tsx`; slim down
  `LandingPage` component
- Add `proxy.ts` for local dev proxying
- Minor cleanup to `NavBar`, `MobileTabBar`, and `TitleCard`

app/api/admin/jobs/trigger/route.ts

@@ -1,10 +1,9 @@
-import { headers } from "next/headers";
 import { NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { triggerJob } from "@/lib/cron";
 
 export async function POST(request: Request) {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/admin/system-health/route.ts

@@ -1,10 +1,9 @@
-import { headers } from "next/headers";
 import { NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { getSystemHealth } from "@/lib/services/system-health";
 
 export async function GET() {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/admin/update-check/route.ts

@@ -1,10 +1,9 @@
-import { headers } from "next/headers";
 import { NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { getCachedUpdateCheck } from "@/lib/services/update-check";
 
 export async function GET() {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/backup/[filename]/route.ts

@@ -1,14 +1,13 @@
 import path from "node:path";
-import { headers } from "next/headers";
 import { type NextRequest, NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { getBackupPath } from "@/lib/services/backup";
 
 export async function GET(
   _req: NextRequest,
   { params }: { params: Promise<{ filename: string }> },
 ) {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/backup/restore/route.ts

@@ -1,12 +1,11 @@
-import { headers } from "next/headers";
 import { NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { restoreFromBackup } from "@/lib/services/backup";
 
 const MAX_SIZE = 500 * 1024 * 1024; // 500MB
 
 export async function POST(req: Request) {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/explore/discover/route.ts

@@ -1,7 +1,6 @@
-import { headers } from "next/headers";
 import { type NextRequest, NextResponse } from "next/server";
 import { z } from "zod";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { isTmdbConfigured } from "@/lib/config";
 import { discover } from "@/lib/tmdb/client";
 import { tmdbImageUrl } from "@/lib/tmdb/image";
@@ -20,9 +19,7 @@ const querySchema = z.object({
 });
 
 export async function GET(req: NextRequest) {
-  const session = await auth.api.getSession({
-    headers: await headers(),
-  });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/person/[id]/filmography/route.ts

@@ -1,13 +1,12 @@
-import { headers } from "next/headers";
 import { type NextRequest, NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { fetchFullFilmography } from "@/lib/services/person";
 
 export async function GET(
   _req: NextRequest,
   { params }: { params: Promise<{ id: string }> },
 ) {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/person/[id]/route.ts

@@ -1,6 +1,5 @@
-import { headers } from "next/headers";
 import { type NextRequest, NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import {
   getLocalFilmography,
   getOrFetchPerson,
@@ -13,7 +12,7 @@ export async function GET(
   _req: NextRequest,
   { params }: { params: Promise<{ id: string }> },
 ) {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/search/route.ts

@@ -1,6 +1,5 @@
-import { headers } from "next/headers";
 import { type NextRequest, NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { isTmdbConfigured } from "@/lib/config";
 import {
   searchMovies,
@@ -12,9 +11,7 @@ import { tmdbImageUrl } from "@/lib/tmdb/image";
 import type { TmdbSearchResponse } from "@/lib/tmdb/types";
 
 export async function GET(req: NextRequest) {
-  const session = await auth.api.getSession({
-    headers: await headers(),
-  });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/setup/status/route.ts

@@ -1,8 +0,0 @@
-import { NextResponse } from "next/server";
-import { isTmdbConfigured } from "@/lib/config";
-
-export async function GET() {
-  return NextResponse.json({
-    tmdbConfigured: isTmdbConfigured(),
-  });
-}

app/api/stats/route.ts

@@ -1,6 +1,5 @@
-import { headers } from "next/headers";
 import { NextResponse } from "next/server";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import {
   getWatchCount,
   getWatchHistory,
@@ -16,7 +15,7 @@ const validPeriods: TimePeriod[] = [
 ];
 
 export async function GET(request: Request) {
-  const session = await auth.api.getSession({ headers: await headers() });
+  const session = await getSession();
   if (!session)
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
 

app/api/titles/import/route.ts

@@ -1,8 +1,7 @@
-import { headers } from "next/headers";
 import type { NextRequest } from "next/server";
 import { NextResponse } from "next/server";
 import { z } from "zod";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { importTitle } from "@/lib/services/metadata";
 
 const bodySchema = z.object({
@@ -11,9 +10,7 @@ const bodySchema = z.object({
 });
 
 export async function POST(req: NextRequest) {
-  const session = await auth.api.getSession({
-    headers: await headers(),
-  });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }

app/api/titles/resolve/route.ts

@@ -1,8 +1,7 @@
-import { headers } from "next/headers";
 import type { NextRequest } from "next/server";
 import { NextResponse } from "next/server";
 import { z } from "zod";
-import { auth } from "@/lib/auth/server";
+import { getSession } from "@/lib/auth/session";
 import { importTitle } from "@/lib/services/metadata";
 
 const bodySchema = z.object({
@@ -11,9 +10,7 @@ const bodySchema = z.object({
 });
 
 export async function POST(req: NextRequest) {
-  const session = await auth.api.getSession({
-    headers: await headers(),
-  });
+  const session = await getSession();
   if (!session) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }