feat: rebuild fiscal clone architecture and harden coolify deployment

frontend/app/auth/signin/page.tsx

@@ -1,17 +1,24 @@
 'use client';
 
-import { signIn, useSession } from '@/lib/better-auth';
-import { useRouter } from 'next/navigation';
-import { useEffect, useState } from 'react';
+export const dynamic = 'force-dynamic';
+export const revalidate = 0;
 
-export default function SignIn() {
-  const { data: session, isPending: sessionPending } = useSession();
+import Link from 'next/link';
+import { useEffect, useState } from 'react';
+import { useRouter } from 'next/navigation';
+import { signIn, useSession } from '@/lib/better-auth';
+import { AuthShell } from '@/components/auth/auth-shell';
+import { Input } from '@/components/ui/input';
+import { Button } from '@/components/ui/button';
+
+export default function SignInPage() {
   const router = useRouter();
+  const { data: session, isPending: sessionPending } = useSession();
 
   const [email, setEmail] = useState('');
   const [password, setPassword] = useState('');
   const [loading, setLoading] = useState(false);
-  const [error, setError] = useState('');
+  const [error, setError] = useState<string | null>(null);
 
   useEffect(() => {
     if (!sessionPending && session?.user) {
@@ -19,91 +26,64 @@ export default function SignIn() {
     }
   }, [sessionPending, session, router]);
 
-  const handleCredentialsLogin = async (e: React.FormEvent) => {
-    e.preventDefault();
+  const handleSubmit = async (event: React.FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
     setLoading(true);
-    setError('');
+    setError(null);
 
     try {
-      const result = await signIn.email({
-        email,
-        password,
-      });
+      const result = await signIn.email({ email, password });
 
       if (result.error) {
         setError(result.error.message || 'Invalid credentials');
-        return;
+      } else {
+        router.replace('/');
+        router.refresh();
       }
-
-      router.replace('/');
-      router.refresh();
-    } catch (err) {
-      setError('Login failed');
+    } catch {
+      setError('Sign in failed');
     } finally {
       setLoading(false);
     }
   };
 
   return (
-    <div className="min-h-screen bg-gradient-to-br from-slate-900 to-slate-800 flex items-center justify-center p-4">
-      <div className="max-w-md w-full bg-slate-800/50 rounded-lg p-8 border border-slate-700">
-        <h1 className="text-3xl font-bold text-center mb-2 bg-gradient-to-r from-blue-400 to-purple-500 bg-clip-text text-transparent">
-          Fiscal Clone
-        </h1>
-        <p className="text-slate-400 text-center mb-8">Sign in to your account</p>
+    <AuthShell
+      title="Sign in"
+      subtitle="Authenticate with Better Auth session-backed credentials."
+      footer={(
+        <>
+          No account yet?{' '}
+          <Link href="/auth/signup" className="text-[color:var(--accent)] hover:text-[color:var(--accent-strong)]">
+            Create one
+          </Link>
+        </>
+      )}
+    >
+      <form onSubmit={handleSubmit} className="space-y-4">
+        <div>
+          <label className="mb-1 block text-sm text-[color:var(--terminal-muted)]">Email</label>
+          <Input type="email" required value={email} onChange={(event) => setEmail(event.target.value)} placeholder="you@company.com" />
+        </div>
 
-        {error && (
-          <div className="bg-red-500/20 border border-red-500 text-red-400 px-4 py-3 rounded-lg mb-6">
-            {error}
-          </div>
-        )}
+        <div>
+          <label className="mb-1 block text-sm text-[color:var(--terminal-muted)]">Password</label>
+          <Input
+            type="password"
+            required
+            minLength={8}
+            value={password}
+            onChange={(event) => setPassword(event.target.value)}
+            placeholder="********"
+          />
+        </div>
 
-        <form onSubmit={handleCredentialsLogin} className="space-y-4">
-          <div>
-            <label className="block text-sm font-medium text-slate-300 mb-2">
-              Email
-            </label>
-            <input
-              type="email"
-              value={email}
-              onChange={(e) => setEmail(e.target.value)}
-              className="w-full bg-slate-700/50 border border-slate-600 rounded-lg px-4 py-3 text-white placeholder-slate-400 focus:outline-none focus:ring-2 focus:ring-blue-500"
-              placeholder="you@example.com"
-              required
-            />
-          </div>
+        {error ? <p className="text-sm text-[#ff9f9f]">{error}</p> : null}
 
-          <div>
-            <label className="block text-sm font-medium text-slate-300 mb-2">
-              Password
-            </label>
-            <input
-              type="password"
-              value={password}
-              onChange={(e) => setPassword(e.target.value)}
-              className="w-full bg-slate-700/50 border border-slate-600 rounded-lg px-4 py-3 text-white placeholder-slate-400 focus:outline-none focus:ring-2 focus:ring-blue-500"
-              placeholder="•••••••••"
-              required
-              minLength={8}
-            />
-          </div>
-
-          <button
-            type="submit"
-            disabled={loading || sessionPending}
-            className="w-full bg-gradient-to-r from-blue-500 to-purple-500 hover:from-blue-600 hover:to-purple-600 text-white font-semibold py-3 rounded-lg transition disabled:opacity-50 disabled:cursor-not-allowed"
-          >
-            {loading ? 'Signing in...' : 'Sign In'}
-          </button>
-        </form>
-
-        <p className="mt-8 text-center text-sm text-slate-400">
-          Don&apos;t have an account?{' '}
-          <a href="/auth/signup" className="text-blue-400 hover:text-blue-300">
-            Sign up
-          </a>
-        </p>
-      </div>
-    </div>
+        <Button type="submit" className="w-full" disabled={loading || sessionPending}>
+          {loading ? 'Signing in...' : 'Sign in'}
+        </Button>
+      </form>
+    </AuthShell>
   );
 }

frontend/app/auth/signup/page.tsx

@@ -1,18 +1,25 @@
 'use client';
 
-import { signUp, useSession } from '@/lib/better-auth';
-import { useRouter } from 'next/navigation';
-import { useEffect, useState } from 'react';
+export const dynamic = 'force-dynamic';
+export const revalidate = 0;
 
-export default function SignUp() {
-  const { data: session, isPending: sessionPending } = useSession();
+import Link from 'next/link';
+import { useEffect, useState } from 'react';
+import { useRouter } from 'next/navigation';
+import { signUp, useSession } from '@/lib/better-auth';
+import { AuthShell } from '@/components/auth/auth-shell';
+import { Input } from '@/components/ui/input';
+import { Button } from '@/components/ui/button';
+
+export default function SignUpPage() {
   const router = useRouter();
+  const { data: session, isPending: sessionPending } = useSession();
 
   const [name, setName] = useState('');
   const [email, setEmail] = useState('');
   const [password, setPassword] = useState('');
   const [loading, setLoading] = useState(false);
-  const [error, setError] = useState('');
+  const [error, setError] = useState<string | null>(null);
 
   useEffect(() => {
     if (!sessionPending && session?.user) {
@@ -20,25 +27,25 @@ export default function SignUp() {
     }
   }, [sessionPending, session, router]);
 
-  const handleSignUp = async (e: React.FormEvent) => {
-    e.preventDefault();
+  const handleSubmit = async (event: React.FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
     setLoading(true);
-    setError('');
+    setError(null);
 
     try {
       const result = await signUp.email({
-        email,
-        password,
         name,
+        email,
+        password
       });
 
       if (result.error) {
-        setError(result.error.message || 'Sign up failed');
+        setError(result.error.message || 'Unable to create account');
       } else {
         router.replace('/');
         router.refresh();
       }
-    } catch (err) {
+    } catch {
       setError('Sign up failed');
     } finally {
       setLoading(false);
@@ -46,79 +53,47 @@ export default function SignUp() {
   };
 
   return (
-    <div className="min-h-screen bg-gradient-to-br from-slate-900 to-slate-800 flex items-center justify-center p-4">
-      <div className="max-w-md w-full bg-slate-800/50 rounded-lg p-8 border border-slate-700">
-        <h1 className="text-3xl font-bold text-center mb-2 bg-gradient-to-r from-blue-400 to-purple-500 bg-clip-text text-transparent">
-          Fiscal Clone
-        </h1>
-        <p className="text-slate-400 text-center mb-8">Create your account</p>
-
-        {error && (
-          <div className="bg-red-500/20 border border-red-500 text-red-400 px-4 py-3 rounded-lg mb-6">
-            {error}
-          </div>
-        )}
-
-        <form onSubmit={handleSignUp} className="space-y-4">
-          <div>
-            <label className="block text-sm font-medium text-slate-300 mb-2">
-              Name
-            </label>
-            <input
-              type="text"
-              value={name}
-              onChange={(e) => setName(e.target.value)}
-              className="w-full bg-slate-700/50 border border-slate-600 rounded-lg px-4 py-3 text-white placeholder-slate-400 focus:outline-none focus:ring-2 focus:ring-blue-500"
-              placeholder="Your name"
-              required
-            />
-          </div>
-
-          <div>
-            <label className="block text-sm font-medium text-slate-300 mb-2">
-              Email
-            </label>
-            <input
-              type="email"
-              value={email}
-              onChange={(e) => setEmail(e.target.value)}
-              className="w-full bg-slate-700/50 border border-slate-600 rounded-lg px-4 py-3 text-white placeholder-slate-400 focus:outline-none focus:ring-2 focus:ring-blue-500"
-              placeholder="you@example.com"
-              required
-            />
-          </div>
-
-          <div>
-            <label className="block text-sm font-medium text-slate-300 mb-2">
-              Password
-            </label>
-            <input
-              type="password"
-              value={password}
-              onChange={(e) => setPassword(e.target.value)}
-              className="w-full bg-slate-700/50 border border-slate-600 rounded-lg px-4 py-3 text-white placeholder-slate-400 focus:outline-none focus:ring-2 focus:ring-blue-500"
-              placeholder="•••••••••"
-              required
-              minLength={8}
-            />
-          </div>
-
-          <button
-            type="submit"
-            disabled={loading || sessionPending}
-            className="w-full bg-gradient-to-r from-blue-500 to-purple-500 hover:from-blue-600 hover:to-purple-600 text-white font-semibold py-3 rounded-lg transition disabled:opacity-50 disabled:cursor-not-allowed"
-          >
-            {loading ? 'Creating account...' : 'Sign Up'}
-          </button>
-        </form>
-
-        <p className="mt-8 text-center text-sm text-slate-400">
-          Already have an account?{' '}
-          <a href="/auth/signin" className="text-blue-400 hover:text-blue-300">
+    <AuthShell
+      title="Create account"
+      subtitle="Provision an analyst workspace with Better Auth sessions."
+      footer={(
+        <>
+          Already registered?{' '}
+          <Link href="/auth/signin" className="text-[color:var(--accent)] hover:text-[color:var(--accent-strong)]">
             Sign in
-          </a>
-        </p>
-      </div>
-    </div>
+          </Link>
+        </>
+      )}
+    >
+      <form onSubmit={handleSubmit} className="space-y-4">
+        <div>
+          <label className="mb-1 block text-sm text-[color:var(--terminal-muted)]">Name</label>
+          <Input required value={name} onChange={(event) => setName(event.target.value)} placeholder="Operator name" />
+        </div>
+
+        <div>
+          <label className="mb-1 block text-sm text-[color:var(--terminal-muted)]">Email</label>
+          <Input type="email" required value={email} onChange={(event) => setEmail(event.target.value)} placeholder="you@company.com" />
+        </div>
+
+        <div>
+          <label className="mb-1 block text-sm text-[color:var(--terminal-muted)]">Password</label>
+          <Input
+            type="password"
+            required
+            minLength={8}
+            value={password}
+            onChange={(event) => setPassword(event.target.value)}
+            placeholder="Minimum 8 characters"
+          />
+        </div>
+
+        {error ? <p className="text-sm text-[#ff9f9f]">{error}</p> : null}
+
+        <Button type="submit" className="w-full" disabled={loading || sessionPending}>
+          {loading ? 'Creating account...' : 'Create account'}
+        </Button>
+      </form>
+    </AuthShell>
   );
 }