- Overhaul `lib/auth/server.ts` and `lib/auth/session.ts`; update all API
routes and server actions to use the revised session pattern
- Refactor server actions (settings, titles, watchlist, setup) for
consistency with new auth layer
- Extract `SetupForm` into its own client component with `useActionState`,
animated steps, and copyable env snippets
- Move landing page redirect logic into `app/page.tsx`; slim down
`LandingPage` component
- Add `proxy.ts` for local dev proxying
- Minor cleanup to `NavBar`, `MobileTabBar`, and `TitleCard`
The proxy treated /setup as a protected route, redirecting unauthenticated
users to /login. This made first-run TMDB onboarding unreachable since
no users exist yet. Add /setup to public auth routes.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Move /setup out of protected (pages) route group so it's accessible
without auth (fixes fresh install redirect loop)
- Redirect /login → /register when zero users exist
- Add "Get Started" button on landing page for fresh installs
- Hide register button/link when registration is closed
- Add auth redirects: logged-in users on /login or /register → /dashboard
- Convert register page to server component with server-side checks
- Fix animation snap on auth form buttons (transition-all → scoped)
- Update proxy middleware with /login and /register routes
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
jake
