feat: complete backend setup

- Project scaffold and folder architecture
- Neon PostgreSQL + Drizzle ORM schema (7 tables)
- NextAuth.js v5 credentials auth + admin login page
- Middleware route protection for /admin and /api/admin
- Contact form API with Resend email notification
- Career application API with email notification
- Cloudinary image upload API (admin protected)
- Full admin CRUD API routes (team, projects, blog, careers, applications, messages)
- GitHub Actions CI workflow (type check + lint + build)
- PR template, issue templates, CODEOWNERS
- Environment variable setup

Author: onerandomdevv

AGENTS.md

@@ -1,9 +1,14 @@
+import type { NextRequest } from "next/server";
 import { NextResponse } from "next/server";
-import { auth } from "@/lib/auth";
+import { getToken } from "next-auth/jwt";
 
-export const middleware = auth((request) => {
+export async function middleware(request: NextRequest) {
   const { pathname } = request.nextUrl;
-  const isAuthenticated = Boolean(request.auth);
+  const token = await getToken({
+    req: request,
+    secret: process.env.NEXTAUTH_SECRET,
+  });
+  const isAuthenticated = Boolean(token);
 
   if (pathname.startsWith("/api/admin") && !isAuthenticated) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
@@ -22,7 +27,7 @@ export const middleware = auth((request) => {
   }
 
   return NextResponse.next();
-});
+}
 
 export const config = {
   matcher: ["/admin/:path*", "/api/admin/:path*"],

CLAUDE.md

@@ -0,0 +1,49 @@
+import { existsSync, readFileSync } from "node:fs";
+import { hash } from "bcryptjs";
+
+function loadLocalEnv() {
+  if (!existsSync(".env.local")) {
+    return;
+  }
+
+  const envFile = readFileSync(".env.local", "utf8");
+
+  for (const line of envFile.split(/\r?\n/)) {
+    const match = line.match(/^([^#=]+)=(.*)$/);
+
+    if (match) {
+      const value = match[2].trim().replace(/^(['"])(.*)\1$/, "$2");
+      process.env[match[1].trim()] ??= value;
+    }
+  }
+}
+
+async function main() {
+  loadLocalEnv();
+
+  const [email, password] = process.argv.slice(2);
+
+  if (!email || !password) {
+    throw new Error(
+      "Usage: pnpm dlx tsx scripts/seed-admin.ts admin@example.com secure-password",
+    );
+  }
+
+  const { adminUsers, db } = await import("@/db");
+  const password_hash = await hash(password, 12);
+
+  await db.insert(adminUsers).values({
+    email,
+    password_hash,
+  });
+
+  console.log(`Admin user created successfully: ${email}`);
+  console.log(
+    "Run this once only. Delete this script or remove the credentials after use.",
+  );
+}
+
+main().catch((error: unknown) => {
+  console.error(error);
+  process.exit(1);
+});

middleware.ts

@@ -1 +1,3 @@
-// Placeholder
+export default function AboutPage() {
+  return null;
+}

scripts/seed-admin.ts

@@ -1 +1,3 @@
-// Placeholder
+export default function BlogPostPage() {
+  return null;
+}

src/app/(public)/about/page.tsx

@@ -1 +1,3 @@
-// Placeholder
+export default function BlogPage() {
+  return null;
+}

src/app/(public)/blog/[slug]/page.tsx

@@ -1 +1,3 @@
-// Placeholder
+export default function CareersPage() {
+  return null;
+}

src/app/(public)/blog/page.tsx

@@ -1 +1,3 @@
-// Placeholder
+export default function ContactPage() {
+  return null;
+}

src/app/(public)/careers/page.tsx

@@ -1 +1,7 @@
-// Placeholder
+export default function PublicLayout({
+  children,
+}: Readonly<{
+  children: React.ReactNode;
+}>) {
+  return children;
+}