Add passkey authentication and responsive team navigation

.prettierignore

@@ -1,8 +1,13 @@
 .next
 .cache
 package-lock.json
+pnpm-lock.yaml
 public
 node_modules
 next-env.d.ts
 next.config.ts
-docker-compose.yml
+docker-compose.yml
+prisma/generated
+
+# machine-local tool state
+.claude/settings.local.json

eslint.config.mjs

@@ -1,34 +1,45 @@
-import { FlatCompat } from "@eslint/eslintrc";
-import js from "@eslint/js";
+import { FlatCompat } from '@eslint/eslintrc';
+import js from '@eslint/js';
 import vitest from '@vitest/eslint-plugin';
-import nextCoreWebVitals from "eslint-config-next/core-web-vitals";
-import nextTypescript from "eslint-config-next/typescript";
-import { defineConfig, globalIgnores } from "eslint/config";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
+import nextCoreWebVitals from 'eslint-config-next/core-web-vitals';
+import nextTypescript from 'eslint-config-next/typescript';
+import { defineConfig, globalIgnores } from 'eslint/config';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 const compat = new FlatCompat({
-    baseDirectory: __dirname,
-    recommendedConfig: js.configs.recommended,
-    allConfig: js.configs.all
+  baseDirectory: __dirname,
+  recommendedConfig: js.configs.recommended,
+  allConfig: js.configs.all,
 });
 
-export default defineConfig([globalIgnores(["**/node_modules/", "**/.next/"]), {
-    extends: [...nextCoreWebVitals, ...nextTypescript, ...compat.extends("prettier")],
+export default defineConfig([
+  globalIgnores(['**/node_modules/', '**/.next/']),
+  {
+    extends: [
+      ...nextCoreWebVitals,
+      ...nextTypescript,
+      ...compat.extends('prettier'),
+    ],
 
     plugins: {
-        vitest
+      vitest,
     },
 
     rules: {
-        "no-unused-vars": ["error", {
-            argsIgnorePattern: "^_",
-            ignoreRestSiblings: true,
-        }],
+      'no-unused-vars': [
+        'error',
+        {
+          argsIgnorePattern: '^_',
+          ignoreRestSiblings: true,
+        },
+      ],
     },
-}, {
+  },
+  {
     files: ['**/*.{test,spec}.{ts,tsx,js,jsx}'],
     ...vitest.configs.recommended,
-}]);
+  },
+]);

example.env

@@ -7,8 +7,13 @@ DATABASE_HOST=localhost
 DATABASE_PORT=5431
 # database url used for prisma (combination of the 5 lines above)
 DATABASE_URL=postgresql://root:euI3dxzgDt8NaLuaR4QPWIoJjVXeAKqEovTEV8ecKxw=@localhost:5431/template?schema=public
-# Base url for better-auth
+# Base url for better-auth. Must be set in production: passkeys derive their
+# Relying Party ID from this hostname, and it falls back to "localhost" if unset.
 BETTER_AUTH_URL=http://localhost:3000
+# Optional passkey Relying Party ID override. Defaults to the BETTER_AUTH_URL
+# hostname, which scopes passkeys to this app alone. Only set this to a parent
+# domain if you intend to share passkeys with sibling subdomains.
+PASSKEY_RP_ID=
 # Auth secret for better-auth
 # replace this with output from: openssl rand -base64 32
 AUTH_SECRET=PxVYHb3UPLDMO/F8IWh1EmDDCWqm9Y+l2meScUjUQog=

package.json

@@ -14,8 +14,8 @@
     "test": "vitest --run",
     "start": "next start",
     "lint": "eslint .",
-    "format": "prettier --check --ignore-path .gitignore .",
-    "format:fix": "prettier --write --ignore-path .gitignore .",
+    "format": "prettier --check --ignore-path .gitignore --ignore-path .prettierignore .",
+    "format:fix": "prettier --write --ignore-path .gitignore --ignore-path .prettierignore .",
     "postinstall": "prisma generate",
     "prepare": "husky",
     "init": "tsx scripts/initialize.ts",
@@ -25,20 +25,22 @@
     "docker:build": "docker compose build"
   },
   "dependencies": {
+    "@better-auth/passkey": "^1.6.26",
     "@prisma/adapter-pg": "^7.3.0",
     "@prisma/client": "^7.3.0",
     "@radix-ui/react-avatar": "^1.1.1",
     "@radix-ui/react-dialog": "^1.1.2",
     "@radix-ui/react-dropdown-menu": "^2.1.2",
     "@radix-ui/react-label": "^2.1.0",
+    "@radix-ui/react-select": "^2.3.7",
     "@radix-ui/react-slot": "^1.1.0",
     "@radix-ui/react-tabs": "^1.1.2",
     "@radix-ui/react-toast": "^1.2.2",
     "@react-email/components": "^1.0.6",
     "@types/web-push": "^3.6.4",
     "ag-grid-community": "^35.0.1",
     "ag-grid-react": "^35.0.1",
-    "better-auth": "^1.6.23",
+    "better-auth": "^1.6.26",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "dotenv": "^17.2.3",