feat(client): workspace

Signed-off-by: Noa Virellia <noa@requiem.garden>
refactor(client): token helper
2025-12-24 13:12:02 +00:00 · 2025-12-24 13:12:02 +00:00 · 2025-12-24 13:12:02 +00:00 · 2025-12-24 13:12:02 +00:00 · 2025-12-24 13:12:02 +00:00 · 2025-12-24 13:12:02 +00:00
91 changed files with 2547 additions and 3999 deletions
--- a/.env.development
+++ b/.env.development
@@ -1 +1,9 @@
-TZ=Asia/Shanghai
+SERVER_ADDRESS=:8000
+SERVER_DEBUG_MODE=true
+SERVER_FILE_LOGGER=false
+SERVER_JWT_SECRET=test
+DATABASE_TYPE=postgres
+DATABASE_HOST=127.0.0.1
+DATABASE_NAME=postgres
+DATABASE_USERNAME=postgres
+DATABASE_PASSWORD=postgres
--- a/.zed/settings.json
+++ b/.zed/settings.json
@@ -7,11 +7,7 @@
    "tab_size": 4,
    "format_on_save": "on",
    "languages": {
-        "Nix": {
-            "tab_size": 2,
-        },
        "TypeScript": {
-            "tab_size": 2,
            "language_servers": [
                "typescript-language-server",
                "!vtsls",
@@ -20,7 +16,6 @@
            ],
        },
        "TSX": {
-            "tab_size": 2,
            "language_servers": [
                "typescript-language-server",
                "!vtsls",
@@ -29,7 +24,6 @@
            ],
        },
        "JavaScript": {
-            "tab_size": 2,
            "language_servers": [
                "typescript-language-server",
                "!vtsls",
--- a/README.md
+++ b/README.md
@@ -1,25 +1,2 @@
 # nixcn-cms

-## Contribution
-
-1. **Root docs serve the zh-CN version** _[MUST]_
-2. **Use sign-off via `git commit -s`** _[MUST]_
-3. **Do not modify the `main` branch for any reason** _[MUST]_
-4. **Do not omit the commit subject for any reason** _[MUST]_
-5. **Describe all changes in the commit message** _[MUST]_
-6. **Rebase before submitting patches** _[MUST]_
-7. **Commit message written in english** _[MUST]_
-8. **Use OpenPGP/SSH for commit signing** _[MUST]_
-9. **Split commits for large or multi-part changes** _[OPTION]_
-10. **Have fun contributing :)** _[VERY NECESSARY]_
-
-## Toolchain
-
- Nix
- Devenv
- Direnv
-
-## Notice
-
-1. Client and all nix files use 2 space tab.
-2. All Golang files and other configs use 4 space tab.
--- a/client/.envrc
+++ b/client/.envrc
@@ -0,0 +1 @@
+use flake . --impure
--- a/client/bun.lock
+++ b/client/bun.lock
@@ -9,7 +9,6 @@
        "@dnd-kit/modifiers": "^9.0.0",
        "@dnd-kit/sortable": "^10.0.0",
        "@dnd-kit/utilities": "^3.2.2",
-        "@marsidev/react-turnstile": "^1.4.0",
        "@radix-ui/react-avatar": "^1.1.11",
        "@radix-ui/react-checkbox": "^1.3.3",
        "@radix-ui/react-dialog": "^1.1.15",
@@ -28,15 +27,11 @@
        "@tanstack/react-router": "^1.141.6",
        "@tanstack/react-router-devtools": "^1.141.6",
        "@tanstack/react-table": "^8.21.3",
-        "@tanstack/zod-adapter": "^1.143.4",
        "axios": "^1.13.2",
        "class-variance-authority": "^0.7.1",
        "clsx": "^2.1.1",
-        "culori": "^4.0.2",
-        "immer": "^11.1.0",
        "lucide-react": "^0.562.0",
        "next-themes": "^0.4.6",
-        "qrcode": "^1.5.4",
        "react": "^19.2.0",
        "react-dom": "^19.2.0",
        "recharts": "2.15.4",
@@ -45,7 +40,6 @@
        "tailwindcss": "^4.1.18",
        "vaul": "^1.1.2",
        "zod": "^4.2.1",
-        "zustand": "^5.0.9",
      },
      "devDependencies": {
        "@antfu/eslint-config": "^6.7.1",
@@ -53,9 +47,7 @@
        "@eslint/js": "^9.39.1",
        "@tanstack/eslint-plugin-query": "^5.91.2",
        "@tanstack/router-plugin": "^1.141.7",
-        "@types/culori": "^4.0.1",
        "@types/node": "^25.0.3",
-        "@types/qrcode": "^1.5.6",
        "@types/react": "^19.2.5",
        "@types/react-dom": "^19.2.3",
        "@vitejs/plugin-react": "^5.1.1",
@@ -272,8 +264,6 @@

    "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],

-    "@marsidev/react-turnstile": ["@marsidev/react-turnstile@1.4.0", "", { "peerDependencies": { "react": "^17.0.2 || ^18.0.0 || ^19.0", "react-dom": "^17.0.2 || ^18.0.0 || ^19.0" } }, "sha512-3aR7mh4lATeayWt6GjWuYyLjM0GL148z7/ZQl0rLKGpDYIrWgoU2PYsdAdA9fzH+JysW3Q2OaPfHvv66cwcAZg=="],
-
    "@pkgr/core": ["@pkgr/core@0.2.9", "", {}, "sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA=="],

    "@radix-ui/number": ["@radix-ui/number@1.1.1", "", {}, "sha512-MkKCwxlXTgz6CFoJx3pCwn07GKp36+aZyu/u2Ln2VrA5DcdyCZkASEDBTd8x5whTQQL5CiYf4prXKLcgQdv29g=="],
@@ -498,8 +488,6 @@

    "@tanstack/virtual-file-routes": ["@tanstack/virtual-file-routes@1.141.0", "", {}, "sha512-CJrWtr6L9TVzEImm9S7dQINx+xJcYP/aDkIi6gnaWtIgbZs1pnzsE0yJc2noqXZ+yAOqLx3TBGpBEs9tS0P9/A=="],

-    "@tanstack/zod-adapter": ["@tanstack/zod-adapter@1.143.4", "", { "peerDependencies": { "@tanstack/react-router": ">=1.43.2", "zod": "^3.23.8" } }, "sha512-yrdxNCKPaMjIXM5ZFf3jWNtGlOEZWh2nPdN5NQagkOrYK/l87SZRASB/vFerBXupXPaXvEL8C0qzb894trHW5w=="],
-
    "@types/babel__core": ["@types/babel__core@7.20.5", "", { "dependencies": { "@babel/parser": "^7.20.7", "@babel/types": "^7.20.7", "@types/babel__generator": "*", "@types/babel__template": "*", "@types/babel__traverse": "*" } }, "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA=="],

    "@types/babel__generator": ["@types/babel__generator@7.27.0", "", { "dependencies": { "@babel/types": "^7.0.0" } }, "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg=="],
@@ -508,8 +496,6 @@

    "@types/babel__traverse": ["@types/babel__traverse@7.28.0", "", { "dependencies": { "@babel/types": "^7.28.2" } }, "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q=="],

-    "@types/culori": ["@types/culori@4.0.1", "", {}, "sha512-43M51r/22CjhbOXyGT361GZ9vncSVQ39u62x5eJdBQFviI8zWp2X5jzqg7k4M6PVgDQAClpy2bUe2dtwEgEDVQ=="],
-
    "@types/d3-array": ["@types/d3-array@3.2.2", "", {}, "sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw=="],

    "@types/d3-color": ["@types/d3-color@3.1.3", "", {}, "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A=="],
@@ -540,8 +526,6 @@

    "@types/node": ["@types/node@25.0.3", "", { "dependencies": { "undici-types": "~7.16.0" } }, "sha512-W609buLVRVmeW693xKfzHeIV6nJGGz98uCPfeXI1ELMLXVeKYZ9m15fAMSaUPBHYLGFsVRcMmSCksQOrZV9BYA=="],

-    "@types/qrcode": ["@types/qrcode@1.5.6", "", { "dependencies": { "@types/node": "*" } }, "sha512-te7NQcV2BOvdj2b1hCAHzAoMNuj65kNBMz0KBaxM6c3VGBOhU0dURQKOtH8CFNI/dsKkwlv32p26qYQTWoB5bw=="],
-
    "@types/react": ["@types/react@19.2.7", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-MWtvHrGZLFttgeEj28VXHxpmwYbor/ATPYbBfSFZEIRK0ecCFLl2Qo55z52Hss+UV9CRN7trSeq1zbgx7YDWWg=="],

    "@types/react-dom": ["@types/react-dom@19.2.3", "", { "peerDependencies": { "@types/react": "^19.2.0" } }, "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ=="],
@@ -660,8 +644,6 @@

    "cli-truncate": ["cli-truncate@5.1.1", "", { "dependencies": { "slice-ansi": "^7.1.0", "string-width": "^8.0.0" } }, "sha512-SroPvNHxUnk+vIW/dOSfNqdy1sPEFkrTk6TUtqLCnBlo3N7TNYYkzzN7uSD6+jVjrdO4+p8nH7JzH6cIvUem6A=="],

-    "cliui": ["cliui@6.0.0", "", { "dependencies": { "string-width": "^4.2.0", "strip-ansi": "^6.0.0", "wrap-ansi": "^6.2.0" } }, "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ=="],
-
    "clsx": ["clsx@2.1.1", "", {}, "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA=="],

    "color-convert": ["color-convert@2.0.1", "", { "dependencies": { "color-name": "~1.1.4" } }, "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ=="],
@@ -696,8 +678,6 @@

    "csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],

-    "culori": ["culori@4.0.2", "", {}, "sha512-1+BhOB8ahCn4O0cep0Sh2l9KCOfOdY+BXJnKMHFFzDEouSr/el18QwXEMRlOj9UY5nCeA8UN3a/82rUWRBeyBw=="],
-
    "d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],

    "d3-color": ["d3-color@3.1.0", "", {}, "sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA=="],
@@ -722,8 +702,6 @@

    "debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],

-    "decamelize": ["decamelize@1.2.0", "", {}, "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA=="],
-
    "decimal.js-light": ["decimal.js-light@2.5.1", "", {}, "sha512-qIMFpTMZmny+MMIitAB6D7iVPEorVw6YQRWkvarTkT4tBeSLLiHzcwj6q0MmYSFCiVpiqPJTJEYIrpcPzVEIvg=="],

    "decode-named-character-reference": ["decode-named-character-reference@1.2.0", "", { "dependencies": { "character-entities": "^2.0.0" } }, "sha512-c6fcElNV6ShtZXmsgNgFFV5tVX2PaV4g+MOAkb8eXHvn6sryJBrZa9r0zV6+dtTyoCKxtDy5tyQ5ZwQuidtd+Q=="],
@@ -744,8 +722,6 @@

    "diff-sequences": ["diff-sequences@27.5.1", "", {}, "sha512-k1gCAXAsNgLwEL+Y8Wvl+M6oEFj5bgazfZULpS5CneoPPXRaCCW7dm+q21Ky2VEE5X+VeRDBVg1Pcvvsr4TtNQ=="],

-    "dijkstrajs": ["dijkstrajs@1.0.3", "", {}, "sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA=="],
-
    "dom-helpers": ["dom-helpers@5.2.1", "", { "dependencies": { "@babel/runtime": "^7.8.7", "csstype": "^3.0.2" } }, "sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA=="],

    "dot-case": ["dot-case@3.0.4", "", { "dependencies": { "no-case": "^3.0.4", "tslib": "^2.0.3" } }, "sha512-Kv5nKlh6yRrdrGvxeJ2e5y2eRUpkUosIW4A2AS38zwSz27zu7ufDwQPi5Jhs3XAlGNetl3bmnGhQsMtkKJnj3w=="],
@@ -754,7 +730,7 @@

    "electron-to-chromium": ["electron-to-chromium@1.5.267", "", {}, "sha512-0Drusm6MVRXSOJpGbaSVgcQsuB4hEkMpHXaVstcPmhu5LIedxs1xNK/nIxmQIU/RPC0+1/o0AVZfBTkTNJOdUw=="],

-    "emoji-regex": ["emoji-regex@8.0.0", "", {}, "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="],
+    "emoji-regex": ["emoji-regex@10.6.0", "", {}, "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A=="],

    "empathic": ["empathic@2.0.0", "", {}, "sha512-i6UzDscO/XfAcNYD75CfICkmfLedpyPDdozrLMmQc5ORaQcdMoc21OnlEylMIqI7U8eniKrPMxxtj8k0vhmJhA=="],

@@ -898,8 +874,6 @@

    "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],

-    "get-caller-file": ["get-caller-file@2.0.5", "", {}, "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="],
-
    "get-east-asian-width": ["get-east-asian-width@1.4.0", "", {}, "sha512-QZjmEOC+IT1uk6Rx0sX22V6uHWVwbdbxf1faPqJ1QhLdGgsRGCZoyaQBm/piRdJy/D2um6hM1UP7ZEeQ4EkP+Q=="],

    "get-intrinsic": ["get-intrinsic@1.3.0", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "function-bind": "^1.1.2", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "math-intrinsics": "^1.1.0" } }, "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ=="],
@@ -942,8 +916,6 @@

    "ignore": ["ignore@5.3.2", "", {}, "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g=="],

-    "immer": ["immer@11.1.0", "", {}, "sha512-dlzb07f5LDY+tzs+iLCSXV2yuhaYfezqyZQc+n6baLECWkOMEWxkECAOnXL0ba7lsA25fM9b2jtzpu/uxo1a7g=="],
-
    "import-fresh": ["import-fresh@3.3.1", "", { "dependencies": { "parent-module": "^1.0.0", "resolve-from": "^4.0.0" } }, "sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ=="],

    "imurmurhash": ["imurmurhash@0.1.4", "", {}, "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA=="],
@@ -960,7 +932,7 @@

    "is-extglob": ["is-extglob@2.1.1", "", {}, "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ=="],

-    "is-fullwidth-code-point": ["is-fullwidth-code-point@3.0.0", "", {}, "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg=="],
+    "is-fullwidth-code-point": ["is-fullwidth-code-point@5.1.0", "", { "dependencies": { "get-east-asian-width": "^1.3.1" } }, "sha512-5XHYaSyiqADb4RnZ1Bdad6cPp8Toise4TzEjcOYDHZkTCbKgiUl7WTUCpNWHuxmDt91wnsZBc9xinNzopv3JMQ=="],

    "is-glob": ["is-glob@4.0.3", "", { "dependencies": { "is-extglob": "^2.1.1" } }, "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg=="],

@@ -1180,8 +1152,6 @@

    "p-locate": ["p-locate@5.0.0", "", { "dependencies": { "p-limit": "^3.0.2" } }, "sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw=="],

-    "p-try": ["p-try@2.2.0", "", {}, "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ=="],
-
    "package-manager-detector": ["package-manager-detector@1.6.0", "", {}, "sha512-61A5ThoTiDG/C8s8UMZwSorAGwMJ0ERVGj2OjoW5pAalsNOg15+iQiPzrLJ4jhZ1HJzmC2PIHT2oEiH3R5fzNA=="],

    "parent-module": ["parent-module@1.0.1", "", { "dependencies": { "callsites": "^3.0.0" } }, "sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g=="],
@@ -1212,8 +1182,6 @@

    "pluralize": ["pluralize@8.0.0", "", {}, "sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA=="],

-    "pngjs": ["pngjs@5.0.0", "", {}, "sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw=="],
-
    "pnpm-workspace-yaml": ["pnpm-workspace-yaml@1.4.3", "", { "dependencies": { "yaml": "^2.8.2" } }, "sha512-Q8B3SWuuISy/Ciag4DFP7MCrJX07wfaekcqD2o/msdIj4x8Ql3bZ/NEKOXV7mTVh7m1YdiFWiMi9xH+0zuEGHw=="],

    "postcss": ["postcss@8.5.6", "", { "dependencies": { "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg=="],
@@ -1230,8 +1198,6 @@

    "punycode": ["punycode@2.3.1", "", {}, "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="],

-    "qrcode": ["qrcode@1.5.4", "", { "dependencies": { "dijkstrajs": "^1.0.1", "pngjs": "^5.0.0", "yargs": "^15.3.1" }, "bin": { "qrcode": "bin/qrcode" } }, "sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg=="],
-
    "quansync": ["quansync@0.2.11", "", {}, "sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA=="],

    "react": ["react@19.2.3", "", {}, "sha512-Ku/hhYbVjOQnXDZFv2+RibmLFGwFdeeKHFcOTlrt7xplBnya5OGn/hIRDsqDiSUcfORsDC7MPxwork8jBwsIWA=="],
@@ -1268,10 +1234,6 @@

    "regjsparser": ["regjsparser@0.13.0", "", { "dependencies": { "jsesc": "~3.1.0" }, "bin": { "regjsparser": "bin/parser" } }, "sha512-NZQZdC5wOE/H3UT28fVGL+ikOZcEzfMGk/c3iN9UGxzWHMa1op7274oyiUVrAG4B2EuFhus8SvkaYnhvW92p9Q=="],

-    "require-directory": ["require-directory@2.1.1", "", {}, "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q=="],
-
-    "require-main-filename": ["require-main-filename@2.0.0", "", {}, "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg=="],
-
    "reserved-identifiers": ["reserved-identifiers@1.2.0", "", {}, "sha512-yE7KUfFvaBFzGPs5H3Ops1RevfUEsDc5Iz65rOwWg4lE8HJSYtle77uul3+573457oHvBKuHYDl/xqUkKpEEdw=="],

    "resolve-from": ["resolve-from@4.0.0", "", {}, "sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g=="],
@@ -1294,8 +1256,6 @@

    "seroval-plugins": ["seroval-plugins@1.4.0", "", { "peerDependencies": { "seroval": "^1.0" } }, "sha512-zir1aWzoiax6pbBVjoYVd0O1QQXgIL3eVGBMsBsNmM8Ukq90yGaWlfx0AB9dTS8GPqrOrbXn79vmItCUP9U3BQ=="],

-    "set-blocking": ["set-blocking@2.0.0", "", {}, "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw=="],
-
    "shebang-command": ["shebang-command@2.0.0", "", { "dependencies": { "shebang-regex": "^3.0.0" } }, "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA=="],

    "shebang-regex": ["shebang-regex@3.0.0", "", {}, "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A=="],
@@ -1328,7 +1288,7 @@

    "string-ts": ["string-ts@2.3.1", "", {}, "sha512-xSJq+BS52SaFFAVxuStmx6n5aYZU571uYUnUrPXkPFCfdHyZMMlbP2v2Wx5sNBnAVzq/2+0+mcBLBa3Xa5ubYw=="],

-    "string-width": ["string-width@4.2.3", "", { "dependencies": { "emoji-regex": "^8.0.0", "is-fullwidth-code-point": "^3.0.0", "strip-ansi": "^6.0.1" } }, "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g=="],
+    "string-width": ["string-width@8.1.0", "", { "dependencies": { "get-east-asian-width": "^1.3.0", "strip-ansi": "^7.1.0" } }, "sha512-Kxl3KJGb/gxkaUMOjRsQ8IrXiGW75O4E3RPjFIINOVH8AMl2SQ/yWdTzWwF3FevIX9LcMAjJW+GRwAlAbTSXdg=="],

    "strip-ansi": ["strip-ansi@7.1.2", "", { "dependencies": { "ansi-regex": "^6.0.1" } }, "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA=="],

@@ -1420,34 +1380,24 @@

    "which": ["which@2.0.2", "", { "dependencies": { "isexe": "^2.0.0" }, "bin": { "node-which": "./bin/node-which" } }, "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA=="],

-    "which-module": ["which-module@2.0.1", "", {}, "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ=="],
-
    "word-wrap": ["word-wrap@1.2.5", "", {}, "sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA=="],

    "wrap-ansi": ["wrap-ansi@9.0.2", "", { "dependencies": { "ansi-styles": "^6.2.1", "string-width": "^7.0.0", "strip-ansi": "^7.1.0" } }, "sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww=="],

    "xml-name-validator": ["xml-name-validator@4.0.0", "", {}, "sha512-ICP2e+jsHvAj2E2lIHxa5tjXRlKDJo4IdvPvCXbXQGdzSfmSpNVyIKMvoZHjDY9DP0zV17iI85o90vRFXNccRw=="],

-    "y18n": ["y18n@4.0.3", "", {}, "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ=="],
-
    "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],

    "yaml": ["yaml@2.8.2", "", { "bin": { "yaml": "bin.mjs" } }, "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A=="],

    "yaml-eslint-parser": ["yaml-eslint-parser@1.3.2", "", { "dependencies": { "eslint-visitor-keys": "^3.0.0", "yaml": "^2.0.0" } }, "sha512-odxVsHAkZYYglR30aPYRY4nUGJnoJ2y1ww2HDvZALo0BDETv9kWbi16J52eHs+PWRNmF4ub6nZqfVOeesOvntg=="],

-    "yargs": ["yargs@15.4.1", "", { "dependencies": { "cliui": "^6.0.0", "decamelize": "^1.2.0", "find-up": "^4.1.0", "get-caller-file": "^2.0.1", "require-directory": "^2.1.1", "require-main-filename": "^2.0.0", "set-blocking": "^2.0.0", "string-width": "^4.2.0", "which-module": "^2.0.0", "y18n": "^4.0.0", "yargs-parser": "^18.1.2" } }, "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A=="],
-
-    "yargs-parser": ["yargs-parser@18.1.3", "", { "dependencies": { "camelcase": "^5.0.0", "decamelize": "^1.2.0" } }, "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ=="],
-
    "yocto-queue": ["yocto-queue@0.1.0", "", {}, "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q=="],

    "zod": ["zod@4.2.1", "", {}, "sha512-0wZ1IRqGGhMP76gLqz8EyfBXKk0J2qo2+H3fi4mcUP/KtTocoX08nmIAHl1Z2kJIZbZee8KOpBCSNPRgauucjw=="],

    "zod-validation-error": ["zod-validation-error@4.0.2", "", { "peerDependencies": { "zod": "^3.25.0 || ^4.0.0" } }, "sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ=="],

-    "zustand": ["zustand@5.0.9", "", { "peerDependencies": { "@types/react": ">=18.0.0", "immer": ">=9.0.6", "react": ">=18.0.0", "use-sync-external-store": ">=1.2.0" }, "optionalPeers": ["@types/react", "immer", "react", "use-sync-external-store"] }, "sha512-ALBtUj0AfjJt3uNRQoL1tL2tMvj6Gp/6e39dnfT6uzpelGru8v1tPOGBzayOWbPJvujM8JojDk3E1LxeFisBNg=="],
-
    "zwitch": ["zwitch@2.0.4", "", {}, "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A=="],

    "@babel/core/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
@@ -1556,12 +1506,6 @@

    "clean-regexp/escape-string-regexp": ["escape-string-regexp@1.0.5", "", {}, "sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg=="],

-    "cli-truncate/string-width": ["string-width@8.1.0", "", { "dependencies": { "get-east-asian-width": "^1.3.0", "strip-ansi": "^7.1.0" } }, "sha512-Kxl3KJGb/gxkaUMOjRsQ8IrXiGW75O4E3RPjFIINOVH8AMl2SQ/yWdTzWwF3FevIX9LcMAjJW+GRwAlAbTSXdg=="],
-
-    "cliui/strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
-
-    "cliui/wrap-ansi": ["wrap-ansi@6.2.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA=="],
-
    "eslint-plugin-es-x/eslint-compat-utils": ["eslint-compat-utils@0.5.1", "", { "dependencies": { "semver": "^7.5.4" }, "peerDependencies": { "eslint": ">=6.0.0" } }, "sha512-3z3vFexKIEnjHE3zCMRo6fn/e44U7T1khUjg+Hp0ZQMCigh28rALD0nPFBcGZuiLC5rLZa2ubQHDRln09JfU2Q=="],

    "eslint-plugin-jsdoc/@es-joy/jsdoccomment": ["@es-joy/jsdoccomment@0.76.0", "", { "dependencies": { "@types/estree": "^1.0.8", "@typescript-eslint/types": "^8.46.0", "comment-parser": "1.4.1", "esquery": "^1.6.0", "jsdoc-type-pratt-parser": "~6.10.0" } }, "sha512-g+RihtzFgGTx2WYCuTHbdOXJeAlGnROws0TeALx9ow/ZmOROOZkVg5wp/B44n0WJgI4SQFP1eWM2iRPlU2Y14w=="],
@@ -1590,14 +1534,10 @@

    "slice-ansi/ansi-styles": ["ansi-styles@6.2.3", "", {}, "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg=="],

-    "slice-ansi/is-fullwidth-code-point": ["is-fullwidth-code-point@5.1.0", "", { "dependencies": { "get-east-asian-width": "^1.3.1" } }, "sha512-5XHYaSyiqADb4RnZ1Bdad6cPp8Toise4TzEjcOYDHZkTCbKgiUl7WTUCpNWHuxmDt91wnsZBc9xinNzopv3JMQ=="],
-
    "solid-js/seroval": ["seroval@1.3.2", "", {}, "sha512-RbcPH1n5cfwKrru7v7+zrZvjLurgHhGyso3HTyGtRivGWgYjbOmGuivCQaORNELjNONoK35nj28EoWul9sb1zQ=="],

    "solid-js/seroval-plugins": ["seroval-plugins@1.3.3", "", { "peerDependencies": { "seroval": "^1.0" } }, "sha512-16OL3NnUBw8JG1jBLUoZJsLnQq0n5Ua6aHalhJK4fMQkz1lqR7Osz1sA30trBtd9VUDc2NgkuRCn8+/pBwqZ+w=="],

-    "string-width/strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
-
    "toml-eslint-parser/eslint-visitor-keys": ["eslint-visitor-keys@3.4.3", "", {}, "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag=="],

    "wrap-ansi/ansi-styles": ["ansi-styles@6.2.3", "", {}, "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg=="],
@@ -1606,10 +1546,6 @@

    "yaml-eslint-parser/eslint-visitor-keys": ["eslint-visitor-keys@3.4.3", "", {}, "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag=="],

-    "yargs/find-up": ["find-up@4.1.0", "", { "dependencies": { "locate-path": "^5.0.0", "path-exists": "^4.0.0" } }, "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw=="],
-
-    "yargs-parser/camelcase": ["camelcase@5.3.1", "", {}, "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg=="],
-
    "@radix-ui/react-arrow/@radix-ui/react-primitive/@radix-ui/react-slot": ["@radix-ui/react-slot@1.2.3", "", { "dependencies": { "@radix-ui/react-compose-refs": "1.1.2" }, "peerDependencies": { "@types/react": "*", "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react"] }, "sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A=="],

    "@radix-ui/react-checkbox/@radix-ui/react-primitive/@radix-ui/react-slot": ["@radix-ui/react-slot@1.2.3", "", { "dependencies": { "@radix-ui/react-compose-refs": "1.1.2" }, "peerDependencies": { "@types/react": "*", "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react"] }, "sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A=="],
@@ -1636,20 +1572,8 @@

    "@typescript-eslint/typescript-estree/minimatch/brace-expansion": ["brace-expansion@2.0.2", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ=="],

-    "cliui/strip-ansi/ansi-regex": ["ansi-regex@5.0.1", "", {}, "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="],
-
    "eslint-plugin-jsdoc/@es-joy/jsdoccomment/jsdoc-type-pratt-parser": ["jsdoc-type-pratt-parser@6.10.0", "", {}, "sha512-+LexoTRyYui5iOhJGn13N9ZazL23nAHGkXsa1p/C8yeq79WRfLBag6ZZ0FQG2aRoc9yfo59JT9EYCQonOkHKkQ=="],

    "mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
-
-    "string-width/strip-ansi/ansi-regex": ["ansi-regex@5.0.1", "", {}, "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="],
-
-    "wrap-ansi/string-width/emoji-regex": ["emoji-regex@10.6.0", "", {}, "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A=="],
-
-    "yargs/find-up/locate-path": ["locate-path@5.0.0", "", { "dependencies": { "p-locate": "^4.1.0" } }, "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g=="],
-
-    "yargs/find-up/locate-path/p-locate": ["p-locate@4.1.0", "", { "dependencies": { "p-limit": "^2.2.0" } }, "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A=="],
-
-    "yargs/find-up/locate-path/p-locate/p-limit": ["p-limit@2.3.0", "", { "dependencies": { "p-try": "^2.0.0" } }, "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w=="],
  }
 }
--- a/client/flake.lock
+++ b/client/flake.lock
@@ -0,0 +1,61 @@
+{
+  "nodes": {
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1765779637,
+        "narHash": "sha256-KJ2wa/BLSrTqDjbfyNx70ov/HdgNBCBBSQP3BIzKnv4=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "1306659b587dc277866c7b69eb97e5f07864d8c4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": "nixpkgs"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
--- a/client/flake.nix
+++ b/client/flake.nix
@@ -0,0 +1,28 @@
+{
+  description = "Basic flake for devShell";
+
+  inputs = {
+    flake-utils.url = "github:numtide/flake-utils";
+    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-unstable";
+  };
+
+  outputs =
+    {
+      nixpkgs,
+      flake-utils,
+      ...
+    }:
+    flake-utils.lib.eachDefaultSystem (
+      system:
+      let
+        pkgs = nixpkgs.legacyPackages.${system};
+      in
+      {
+        devShells.default = pkgs.mkShell {
+          packages = with pkgs; [
+            bun
+          ];
+        };
+      }
+    );
+}
--- a/client/package.json
+++ b/client/package.json
@@ -14,7 +14,6 @@
    "@dnd-kit/modifiers": "^9.0.0",
    "@dnd-kit/sortable": "^10.0.0",
    "@dnd-kit/utilities": "^3.2.2",
-    "@marsidev/react-turnstile": "^1.4.0",
    "@radix-ui/react-avatar": "^1.1.11",
    "@radix-ui/react-checkbox": "^1.3.3",
    "@radix-ui/react-dialog": "^1.1.15",
@@ -33,15 +32,11 @@
    "@tanstack/react-router": "^1.141.6",
    "@tanstack/react-router-devtools": "^1.141.6",
    "@tanstack/react-table": "^8.21.3",
-    "@tanstack/zod-adapter": "^1.143.4",
    "axios": "^1.13.2",
    "class-variance-authority": "^0.7.1",
    "clsx": "^2.1.1",
-    "culori": "^4.0.2",
-    "immer": "^11.1.0",
    "lucide-react": "^0.562.0",
    "next-themes": "^0.4.6",
-    "qrcode": "^1.5.4",
    "react": "^19.2.0",
    "react-dom": "^19.2.0",
    "recharts": "2.15.4",
@@ -49,8 +44,7 @@
    "tailwind-merge": "^3.4.0",
    "tailwindcss": "^4.1.18",
    "vaul": "^1.1.2",
-    "zod": "^4.2.1",
-    "zustand": "^5.0.9"
+    "zod": "^4.2.1"
  },
  "devDependencies": {
    "@antfu/eslint-config": "^6.7.1",
@@ -58,9 +52,7 @@
    "@eslint/js": "^9.39.1",
    "@tanstack/eslint-plugin-query": "^5.91.2",
    "@tanstack/router-plugin": "^1.141.7",
-    "@types/culori": "^4.0.1",
    "@types/node": "^25.0.3",
-    "@types/qrcode": "^1.5.6",
    "@types/react": "^19.2.5",
    "@types/react-dom": "^19.2.3",
    "@vitejs/plugin-react": "^5.1.1",
--- a/client/src/app/dashboard/data.json
+++ b/client/src/app/dashboard/data.json
@@ -0,0 +1,614 @@
+[
+  {
+    "id": 1,
+    "header": "Cover page",
+    "type": "Cover page",
+    "status": "In Process",
+    "target": "18",
+    "limit": "5",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 2,
+    "header": "Table of contents",
+    "type": "Table of contents",
+    "status": "Done",
+    "target": "29",
+    "limit": "24",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 3,
+    "header": "Executive summary",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "10",
+    "limit": "13",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 4,
+    "header": "Technical approach",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "27",
+    "limit": "23",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 5,
+    "header": "Design",
+    "type": "Narrative",
+    "status": "In Process",
+    "target": "2",
+    "limit": "16",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 6,
+    "header": "Capabilities",
+    "type": "Narrative",
+    "status": "In Process",
+    "target": "20",
+    "limit": "8",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 7,
+    "header": "Integration with existing systems",
+    "type": "Narrative",
+    "status": "In Process",
+    "target": "19",
+    "limit": "21",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 8,
+    "header": "Innovation and Advantages",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "25",
+    "limit": "26",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 9,
+    "header": "Overview of EMR's Innovative Solutions",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "7",
+    "limit": "23",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 10,
+    "header": "Advanced Algorithms and Machine Learning",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "30",
+    "limit": "28",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 11,
+    "header": "Adaptive Communication Protocols",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "9",
+    "limit": "31",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 12,
+    "header": "Advantages Over Current Technologies",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "12",
+    "limit": "0",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 13,
+    "header": "Past Performance",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "22",
+    "limit": "33",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 14,
+    "header": "Customer Feedback and Satisfaction Levels",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "15",
+    "limit": "34",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 15,
+    "header": "Implementation Challenges and Solutions",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "3",
+    "limit": "35",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 16,
+    "header": "Security Measures and Data Protection Policies",
+    "type": "Narrative",
+    "status": "In Process",
+    "target": "6",
+    "limit": "36",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 17,
+    "header": "Scalability and Future Proofing",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "4",
+    "limit": "37",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 18,
+    "header": "Cost-Benefit Analysis",
+    "type": "Plain language",
+    "status": "Done",
+    "target": "14",
+    "limit": "38",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 19,
+    "header": "User Training and Onboarding Experience",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "17",
+    "limit": "39",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 20,
+    "header": "Future Development Roadmap",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "11",
+    "limit": "40",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 21,
+    "header": "System Architecture Overview",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "24",
+    "limit": "18",
+    "reviewer": "Maya Johnson"
+  },
+  {
+    "id": 22,
+    "header": "Risk Management Plan",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "15",
+    "limit": "22",
+    "reviewer": "Carlos Rodriguez"
+  },
+  {
+    "id": 23,
+    "header": "Compliance Documentation",
+    "type": "Legal",
+    "status": "In Process",
+    "target": "31",
+    "limit": "27",
+    "reviewer": "Sarah Chen"
+  },
+  {
+    "id": 24,
+    "header": "API Documentation",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "8",
+    "limit": "12",
+    "reviewer": "Raj Patel"
+  },
+  {
+    "id": 25,
+    "header": "User Interface Mockups",
+    "type": "Visual",
+    "status": "In Process",
+    "target": "19",
+    "limit": "25",
+    "reviewer": "Leila Ahmadi"
+  },
+  {
+    "id": 26,
+    "header": "Database Schema",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "22",
+    "limit": "20",
+    "reviewer": "Thomas Wilson"
+  },
+  {
+    "id": 27,
+    "header": "Testing Methodology",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "17",
+    "limit": "14",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 28,
+    "header": "Deployment Strategy",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "26",
+    "limit": "30",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 29,
+    "header": "Budget Breakdown",
+    "type": "Financial",
+    "status": "In Process",
+    "target": "13",
+    "limit": "16",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 30,
+    "header": "Market Analysis",
+    "type": "Research",
+    "status": "Done",
+    "target": "29",
+    "limit": "32",
+    "reviewer": "Sophia Martinez"
+  },
+  {
+    "id": 31,
+    "header": "Competitor Comparison",
+    "type": "Research",
+    "status": "In Process",
+    "target": "21",
+    "limit": "19",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 32,
+    "header": "Maintenance Plan",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "16",
+    "limit": "23",
+    "reviewer": "Alex Thompson"
+  },
+  {
+    "id": 33,
+    "header": "User Personas",
+    "type": "Research",
+    "status": "In Process",
+    "target": "27",
+    "limit": "24",
+    "reviewer": "Nina Patel"
+  },
+  {
+    "id": 34,
+    "header": "Accessibility Compliance",
+    "type": "Legal",
+    "status": "Done",
+    "target": "18",
+    "limit": "21",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 35,
+    "header": "Performance Metrics",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "23",
+    "limit": "26",
+    "reviewer": "David Kim"
+  },
+  {
+    "id": 36,
+    "header": "Disaster Recovery Plan",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "14",
+    "limit": "17",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 37,
+    "header": "Third-party Integrations",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "25",
+    "limit": "28",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 38,
+    "header": "User Feedback Summary",
+    "type": "Research",
+    "status": "Done",
+    "target": "20",
+    "limit": "15",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 39,
+    "header": "Localization Strategy",
+    "type": "Narrative",
+    "status": "In Process",
+    "target": "12",
+    "limit": "19",
+    "reviewer": "Maria Garcia"
+  },
+  {
+    "id": 40,
+    "header": "Mobile Compatibility",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "28",
+    "limit": "31",
+    "reviewer": "James Wilson"
+  },
+  {
+    "id": 41,
+    "header": "Data Migration Plan",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "19",
+    "limit": "22",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 42,
+    "header": "Quality Assurance Protocols",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "30",
+    "limit": "33",
+    "reviewer": "Priya Singh"
+  },
+  {
+    "id": 43,
+    "header": "Stakeholder Analysis",
+    "type": "Research",
+    "status": "In Process",
+    "target": "11",
+    "limit": "14",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 44,
+    "header": "Environmental Impact Assessment",
+    "type": "Research",
+    "status": "Done",
+    "target": "24",
+    "limit": "27",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 45,
+    "header": "Intellectual Property Rights",
+    "type": "Legal",
+    "status": "In Process",
+    "target": "17",
+    "limit": "20",
+    "reviewer": "Sarah Johnson"
+  },
+  {
+    "id": 46,
+    "header": "Customer Support Framework",
+    "type": "Narrative",
+    "status": "Done",
+    "target": "22",
+    "limit": "25",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 47,
+    "header": "Version Control Strategy",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "15",
+    "limit": "18",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 48,
+    "header": "Continuous Integration Pipeline",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "26",
+    "limit": "29",
+    "reviewer": "Michael Chen"
+  },
+  {
+    "id": 49,
+    "header": "Regulatory Compliance",
+    "type": "Legal",
+    "status": "In Process",
+    "target": "13",
+    "limit": "16",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 50,
+    "header": "User Authentication System",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "28",
+    "limit": "31",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 51,
+    "header": "Data Analytics Framework",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "21",
+    "limit": "24",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 52,
+    "header": "Cloud Infrastructure",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "16",
+    "limit": "19",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 53,
+    "header": "Network Security Measures",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "29",
+    "limit": "32",
+    "reviewer": "Lisa Wong"
+  },
+  {
+    "id": 54,
+    "header": "Project Timeline",
+    "type": "Planning",
+    "status": "Done",
+    "target": "14",
+    "limit": "17",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 55,
+    "header": "Resource Allocation",
+    "type": "Planning",
+    "status": "In Process",
+    "target": "27",
+    "limit": "30",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 56,
+    "header": "Team Structure and Roles",
+    "type": "Planning",
+    "status": "Done",
+    "target": "20",
+    "limit": "23",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 57,
+    "header": "Communication Protocols",
+    "type": "Planning",
+    "status": "In Process",
+    "target": "15",
+    "limit": "18",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 58,
+    "header": "Success Metrics",
+    "type": "Planning",
+    "status": "Done",
+    "target": "30",
+    "limit": "33",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 59,
+    "header": "Internationalization Support",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "23",
+    "limit": "26",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 60,
+    "header": "Backup and Recovery Procedures",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "18",
+    "limit": "21",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 61,
+    "header": "Monitoring and Alerting System",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "25",
+    "limit": "28",
+    "reviewer": "Daniel Park"
+  },
+  {
+    "id": 62,
+    "header": "Code Review Guidelines",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "12",
+    "limit": "15",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 63,
+    "header": "Documentation Standards",
+    "type": "Technical content",
+    "status": "In Process",
+    "target": "27",
+    "limit": "30",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 64,
+    "header": "Release Management Process",
+    "type": "Planning",
+    "status": "Done",
+    "target": "22",
+    "limit": "25",
+    "reviewer": "Assign reviewer"
+  },
+  {
+    "id": 65,
+    "header": "Feature Prioritization Matrix",
+    "type": "Planning",
+    "status": "In Process",
+    "target": "19",
+    "limit": "22",
+    "reviewer": "Emma Davis"
+  },
+  {
+    "id": 66,
+    "header": "Technical Debt Assessment",
+    "type": "Technical content",
+    "status": "Done",
+    "target": "24",
+    "limit": "27",
+    "reviewer": "Eddie Lake"
+  },
+  {
+    "id": 67,
+    "header": "Capacity Planning",
+    "type": "Planning",
+    "status": "In Process",
+    "target": "21",
+    "limit": "24",
+    "reviewer": "Jamik Tashpulatov"
+  },
+  {
+    "id": 68,
+    "header": "Service Level Agreements",
+    "type": "Legal",
+    "status": "Done",
+    "target": "26",
+    "limit": "29",
+    "reviewer": "Assign reviewer"
+  }
+]
--- a/client/src/components/Time.tsx
+++ b/client/src/components/Time.tsx
@@ -0,0 +1,17 @@
+import { useSuspenseQuery } from '@tanstack/react-query';
+import axios from 'axios';
+
+export function Time() {
+  const { data: time } = useSuspenseQuery({
+    queryKey: ['time'],
+    queryFn: async () => axios.get<{ datetime: string }>('https://worldtimeapi.org/api/timezone/Asia/Shanghai')
+      .then(res => res.data.datetime)
+      .then(isoString => new Date(isoString).toLocaleTimeString()),
+  });
+  return (
+    <p>
+      Current time:
+      {time}
+    </p>
+  );
+}
--- a/client/src/components/app-sidebar.tsx
+++ b/client/src/components/app-sidebar.tsx
@@ -7,6 +7,7 @@ import * as React from 'react';
 import NixOSLogo from '@/assets/nixos.svg?react';
 import { NavMain } from '@/components/nav-main';
 import { NavSecondary } from '@/components/nav-secondary';
+import { NavUser } from '@/components/nav-user';
 import {
  Sidebar,
  SidebarContent,
@@ -16,7 +17,6 @@ import {
  SidebarMenuButton,
  SidebarMenuItem,
 } from '@/components/ui/sidebar';
-import { NavUser } from './nav-user';

 const data = {
  user: {
@@ -48,7 +48,7 @@ export function AppSidebar({ ...props }: React.ComponentProps<typeof Sidebar>) {
          <SidebarMenuItem>
            <SidebarMenuButton
              asChild
-              className="data-[slot=sidebar-menu-button]:p-1.5!"
+              className="data-[slot=sidebar-menu-button]:!p-1.5"
            >
              <a href="#">
                <NixOSLogo />
@@ -63,7 +63,7 @@ export function AppSidebar({ ...props }: React.ComponentProps<typeof Sidebar>) {
        <NavSecondary items={data.navSecondary} className="mt-auto" />
      </SidebarContent>
      <SidebarFooter>
-        <NavUser />
+        <NavUser user={data.user} />
      </SidebarFooter>
    </Sidebar>
  );
--- a/client/src/components/chart-area-interactive.tsx
+++ b/client/src/components/chart-area-interactive.tsx
@@ -0,0 +1,291 @@
+"use client"
+
+import * as React from "react"
+import { Area, AreaChart, CartesianGrid, XAxis } from "recharts"
+
+import { useIsMobile } from "@/hooks/use-mobile"
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@/components/ui/card"
+import {
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  type ChartConfig,
+} from "@/components/ui/chart"
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select"
+import {
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@/components/ui/toggle-group"
+
+export const description = "An interactive area chart"
+
+const chartData = [
+  { date: "2024-04-01", desktop: 222, mobile: 150 },
+  { date: "2024-04-02", desktop: 97, mobile: 180 },
+  { date: "2024-04-03", desktop: 167, mobile: 120 },
+  { date: "2024-04-04", desktop: 242, mobile: 260 },
+  { date: "2024-04-05", desktop: 373, mobile: 290 },
+  { date: "2024-04-06", desktop: 301, mobile: 340 },
+  { date: "2024-04-07", desktop: 245, mobile: 180 },
+  { date: "2024-04-08", desktop: 409, mobile: 320 },
+  { date: "2024-04-09", desktop: 59, mobile: 110 },
+  { date: "2024-04-10", desktop: 261, mobile: 190 },
+  { date: "2024-04-11", desktop: 327, mobile: 350 },
+  { date: "2024-04-12", desktop: 292, mobile: 210 },
+  { date: "2024-04-13", desktop: 342, mobile: 380 },
+  { date: "2024-04-14", desktop: 137, mobile: 220 },
+  { date: "2024-04-15", desktop: 120, mobile: 170 },
+  { date: "2024-04-16", desktop: 138, mobile: 190 },
+  { date: "2024-04-17", desktop: 446, mobile: 360 },
+  { date: "2024-04-18", desktop: 364, mobile: 410 },
+  { date: "2024-04-19", desktop: 243, mobile: 180 },
+  { date: "2024-04-20", desktop: 89, mobile: 150 },
+  { date: "2024-04-21", desktop: 137, mobile: 200 },
+  { date: "2024-04-22", desktop: 224, mobile: 170 },
+  { date: "2024-04-23", desktop: 138, mobile: 230 },
+  { date: "2024-04-24", desktop: 387, mobile: 290 },
+  { date: "2024-04-25", desktop: 215, mobile: 250 },
+  { date: "2024-04-26", desktop: 75, mobile: 130 },
+  { date: "2024-04-27", desktop: 383, mobile: 420 },
+  { date: "2024-04-28", desktop: 122, mobile: 180 },
+  { date: "2024-04-29", desktop: 315, mobile: 240 },
+  { date: "2024-04-30", desktop: 454, mobile: 380 },
+  { date: "2024-05-01", desktop: 165, mobile: 220 },
+  { date: "2024-05-02", desktop: 293, mobile: 310 },
+  { date: "2024-05-03", desktop: 247, mobile: 190 },
+  { date: "2024-05-04", desktop: 385, mobile: 420 },
+  { date: "2024-05-05", desktop: 481, mobile: 390 },
+  { date: "2024-05-06", desktop: 498, mobile: 520 },
+  { date: "2024-05-07", desktop: 388, mobile: 300 },
+  { date: "2024-05-08", desktop: 149, mobile: 210 },
+  { date: "2024-05-09", desktop: 227, mobile: 180 },
+  { date: "2024-05-10", desktop: 293, mobile: 330 },
+  { date: "2024-05-11", desktop: 335, mobile: 270 },
+  { date: "2024-05-12", desktop: 197, mobile: 240 },
+  { date: "2024-05-13", desktop: 197, mobile: 160 },
+  { date: "2024-05-14", desktop: 448, mobile: 490 },
+  { date: "2024-05-15", desktop: 473, mobile: 380 },
+  { date: "2024-05-16", desktop: 338, mobile: 400 },
+  { date: "2024-05-17", desktop: 499, mobile: 420 },
+  { date: "2024-05-18", desktop: 315, mobile: 350 },
+  { date: "2024-05-19", desktop: 235, mobile: 180 },
+  { date: "2024-05-20", desktop: 177, mobile: 230 },
+  { date: "2024-05-21", desktop: 82, mobile: 140 },
+  { date: "2024-05-22", desktop: 81, mobile: 120 },
+  { date: "2024-05-23", desktop: 252, mobile: 290 },
+  { date: "2024-05-24", desktop: 294, mobile: 220 },
+  { date: "2024-05-25", desktop: 201, mobile: 250 },
+  { date: "2024-05-26", desktop: 213, mobile: 170 },
+  { date: "2024-05-27", desktop: 420, mobile: 460 },
+  { date: "2024-05-28", desktop: 233, mobile: 190 },
+  { date: "2024-05-29", desktop: 78, mobile: 130 },
+  { date: "2024-05-30", desktop: 340, mobile: 280 },
+  { date: "2024-05-31", desktop: 178, mobile: 230 },
+  { date: "2024-06-01", desktop: 178, mobile: 200 },
+  { date: "2024-06-02", desktop: 470, mobile: 410 },
+  { date: "2024-06-03", desktop: 103, mobile: 160 },
+  { date: "2024-06-04", desktop: 439, mobile: 380 },
+  { date: "2024-06-05", desktop: 88, mobile: 140 },
+  { date: "2024-06-06", desktop: 294, mobile: 250 },
+  { date: "2024-06-07", desktop: 323, mobile: 370 },
+  { date: "2024-06-08", desktop: 385, mobile: 320 },
+  { date: "2024-06-09", desktop: 438, mobile: 480 },
+  { date: "2024-06-10", desktop: 155, mobile: 200 },
+  { date: "2024-06-11", desktop: 92, mobile: 150 },
+  { date: "2024-06-12", desktop: 492, mobile: 420 },
+  { date: "2024-06-13", desktop: 81, mobile: 130 },
+  { date: "2024-06-14", desktop: 426, mobile: 380 },
+  { date: "2024-06-15", desktop: 307, mobile: 350 },
+  { date: "2024-06-16", desktop: 371, mobile: 310 },
+  { date: "2024-06-17", desktop: 475, mobile: 520 },
+  { date: "2024-06-18", desktop: 107, mobile: 170 },
+  { date: "2024-06-19", desktop: 341, mobile: 290 },
+  { date: "2024-06-20", desktop: 408, mobile: 450 },
+  { date: "2024-06-21", desktop: 169, mobile: 210 },
+  { date: "2024-06-22", desktop: 317, mobile: 270 },
+  { date: "2024-06-23", desktop: 480, mobile: 530 },
+  { date: "2024-06-24", desktop: 132, mobile: 180 },
+  { date: "2024-06-25", desktop: 141, mobile: 190 },
+  { date: "2024-06-26", desktop: 434, mobile: 380 },
+  { date: "2024-06-27", desktop: 448, mobile: 490 },
+  { date: "2024-06-28", desktop: 149, mobile: 200 },
+  { date: "2024-06-29", desktop: 103, mobile: 160 },
+  { date: "2024-06-30", desktop: 446, mobile: 400 },
+]
+
+const chartConfig = {
+  visitors: {
+    label: "Visitors",
+  },
+  desktop: {
+    label: "Desktop",
+    color: "var(--primary)",
+  },
+  mobile: {
+    label: "Mobile",
+    color: "var(--primary)",
+  },
+} satisfies ChartConfig
+
+export function ChartAreaInteractive() {
+  const isMobile = useIsMobile()
+  const [timeRange, setTimeRange] = React.useState("90d")
+
+  React.useEffect(() => {
+    if (isMobile) {
+      setTimeRange("7d")
+    }
+  }, [isMobile])
+
+  const filteredData = chartData.filter((item) => {
+    const date = new Date(item.date)
+    const referenceDate = new Date("2024-06-30")
+    let daysToSubtract = 90
+    if (timeRange === "30d") {
+      daysToSubtract = 30
+    } else if (timeRange === "7d") {
+      daysToSubtract = 7
+    }
+    const startDate = new Date(referenceDate)
+    startDate.setDate(startDate.getDate() - daysToSubtract)
+    return date >= startDate
+  })
+
+  return (
+    <Card className="@container/card">
+      <CardHeader>
+        <CardTitle>Total Visitors</CardTitle>
+        <CardDescription>
+          <span className="hidden @[540px]/card:block">
+            Total for the last 3 months
+          </span>
+          <span className="@[540px]/card:hidden">Last 3 months</span>
+        </CardDescription>
+        <CardAction>
+          <ToggleGroup
+            type="single"
+            value={timeRange}
+            onValueChange={setTimeRange}
+            variant="outline"
+            className="hidden *:data-[slot=toggle-group-item]:!px-4 @[767px]/card:flex"
+          >
+            <ToggleGroupItem value="90d">Last 3 months</ToggleGroupItem>
+            <ToggleGroupItem value="30d">Last 30 days</ToggleGroupItem>
+            <ToggleGroupItem value="7d">Last 7 days</ToggleGroupItem>
+          </ToggleGroup>
+          <Select value={timeRange} onValueChange={setTimeRange}>
+            <SelectTrigger
+              className="flex w-40 **:data-[slot=select-value]:block **:data-[slot=select-value]:truncate @[767px]/card:hidden"
+              size="sm"
+              aria-label="Select a value"
+            >
+              <SelectValue placeholder="Last 3 months" />
+            </SelectTrigger>
+            <SelectContent className="rounded-xl">
+              <SelectItem value="90d" className="rounded-lg">
+                Last 3 months
+              </SelectItem>
+              <SelectItem value="30d" className="rounded-lg">
+                Last 30 days
+              </SelectItem>
+              <SelectItem value="7d" className="rounded-lg">
+                Last 7 days
+              </SelectItem>
+            </SelectContent>
+          </Select>
+        </CardAction>
+      </CardHeader>
+      <CardContent className="px-2 pt-4 sm:px-6 sm:pt-6">
+        <ChartContainer
+          config={chartConfig}
+          className="aspect-auto h-[250px] w-full"
+        >
+          <AreaChart data={filteredData}>
+            <defs>
+              <linearGradient id="fillDesktop" x1="0" y1="0" x2="0" y2="1">
+                <stop
+                  offset="5%"
+                  stopColor="var(--color-desktop)"
+                  stopOpacity={1.0}
+                />
+                <stop
+                  offset="95%"
+                  stopColor="var(--color-desktop)"
+                  stopOpacity={0.1}
+                />
+              </linearGradient>
+              <linearGradient id="fillMobile" x1="0" y1="0" x2="0" y2="1">
+                <stop
+                  offset="5%"
+                  stopColor="var(--color-mobile)"
+                  stopOpacity={0.8}
+                />
+                <stop
+                  offset="95%"
+                  stopColor="var(--color-mobile)"
+                  stopOpacity={0.1}
+                />
+              </linearGradient>
+            </defs>
+            <CartesianGrid vertical={false} />
+            <XAxis
+              dataKey="date"
+              tickLine={false}
+              axisLine={false}
+              tickMargin={8}
+              minTickGap={32}
+              tickFormatter={(value) => {
+                const date = new Date(value)
+                return date.toLocaleDateString("en-US", {
+                  month: "short",
+                  day: "numeric",
+                })
+              }}
+            />
+            <ChartTooltip
+              cursor={false}
+              content={
+                <ChartTooltipContent
+                  labelFormatter={(value) => {
+                    return new Date(value).toLocaleDateString("en-US", {
+                      month: "short",
+                      day: "numeric",
+                    })
+                  }}
+                  indicator="dot"
+                />
+              }
+            />
+            <Area
+              dataKey="mobile"
+              type="natural"
+              fill="url(#fillMobile)"
+              stroke="var(--color-mobile)"
+              stackId="a"
+            />
+            <Area
+              dataKey="desktop"
+              type="natural"
+              fill="url(#fillDesktop)"
+              stroke="var(--color-desktop)"
+              stackId="a"
+            />
+          </AreaChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  )
+}
--- a/client/src/components/checkin/qr-dialog.tsx
+++ b/client/src/components/checkin/qr-dialog.tsx
@@ -1,70 +0,0 @@
-import { useState } from 'react';
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  DialogTrigger,
-} from '@/components/ui/dialog';
-import { QRCode } from '@/components/ui/shadcn-io/qr-code';
-import { useCheckinCode } from '@/hooks/data/useGetCheckInCode';
-import { Button } from '../ui/button';
-
-export function QrDialog(
-  { eventId }: { eventId: string },
-) {
-  const [open, setOpen] = useState(false);
-  return (
-    <Dialog open={open} onOpenChange={setOpen}>
-      <DialogTrigger asChild>
-        <Button className="w-20">签到</Button>
-      </DialogTrigger>
-      <DialogContent className="sm:max-w-[425px]">
-        <DialogHeader>
-          <DialogTitle>QR Code</DialogTitle>
-          <DialogDescription>
-            请工作人员扫描下面的二维码为你签到。
-          </DialogDescription>
-        </DialogHeader>
-        <QrSection eventId={eventId} enabled={open} />
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-function QrSection({ eventId, enabled }: { eventId: string; enabled: boolean }) {
-  const { data } = useCheckinCode(eventId, enabled);
-  return data
-    ? (
-      <>
-        <div className="border-2 px-4 py-8 border-muted rounded-xl flex flex-col items-center justify-center p-4">
-          <QRCode data={data.data.checkin_code} className="size-60" />
-        </div>
-        <DialogFooter>
-          <div className="flex flex-1 items-center ml-2 font-mono text-3xl tracking-widest text-primary/80 justify-center">
-            {data.data.checkin_code}
-          </div>
-        </DialogFooter>
-      </>
-    )
-    : (
-      <QrSectionSkeleton />
-    );
-}
-
-function QrSectionSkeleton() {
-  return (
-    <>
-      <div className="border-2 px-4 py-8 border-muted rounded-xl flex flex-col items-center justify-center p-4">
-        <QRCode data="114514" className="size-60 blur-xs" />
-      </div>
-      <DialogFooter>
-        <div className="flex flex-1 items-center ml-2 font-mono text-3xl tracking-widest text-primary/80 justify-center">
-          Loading...
-        </div>
-      </DialogFooter>
-    </>
-  );
-}
--- a/client/src/components/data-table.tsx
+++ b/client/src/components/data-table.tsx
@@ -0,0 +1,805 @@
+import * as React from "react"
+import {
+  closestCenter,
+  DndContext,
+  KeyboardSensor,
+  MouseSensor,
+  TouchSensor,
+  useSensor,
+  useSensors,
+  type DragEndEvent,
+  type UniqueIdentifier,
+} from "@dnd-kit/core"
+import { restrictToVerticalAxis } from "@dnd-kit/modifiers"
+import {
+  arrayMove,
+  SortableContext,
+  useSortable,
+  verticalListSortingStrategy,
+} from "@dnd-kit/sortable"
+import { CSS } from "@dnd-kit/utilities"
+import {
+  IconChevronDown,
+  IconChevronLeft,
+  IconChevronRight,
+  IconChevronsLeft,
+  IconChevronsRight,
+  IconCircleCheckFilled,
+  IconDotsVertical,
+  IconGripVertical,
+  IconLayoutColumns,
+  IconLoader,
+  IconPlus,
+  IconTrendingUp,
+} from "@tabler/icons-react"
+import {
+  flexRender,
+  getCoreRowModel,
+  getFacetedRowModel,
+  getFacetedUniqueValues,
+  getFilteredRowModel,
+  getPaginationRowModel,
+  getSortedRowModel,
+  useReactTable,
+  type ColumnDef,
+  type ColumnFiltersState,
+  type Row,
+  type SortingState,
+  type VisibilityState,
+} from "@tanstack/react-table"
+import { Area, AreaChart, CartesianGrid, XAxis } from "recharts"
+import { toast } from "sonner"
+import { z } from "zod"
+
+import { useIsMobile } from "@/hooks/use-mobile"
+import { Badge } from "@/components/ui/badge"
+import { Button } from "@/components/ui/button"
+import {
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  type ChartConfig,
+} from "@/components/ui/chart"
+import { Checkbox } from "@/components/ui/checkbox"
+import {
+  Drawer,
+  DrawerClose,
+  DrawerContent,
+  DrawerDescription,
+  DrawerFooter,
+  DrawerHeader,
+  DrawerTitle,
+  DrawerTrigger,
+} from "@/components/ui/drawer"
+import {
+  DropdownMenu,
+  DropdownMenuCheckboxItem,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@/components/ui/dropdown-menu"
+import { Input } from "@/components/ui/input"
+import { Label } from "@/components/ui/label"
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select"
+import { Separator } from "@/components/ui/separator"
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@/components/ui/table"
+import {
+  Tabs,
+  TabsContent,
+  TabsList,
+  TabsTrigger,
+} from "@/components/ui/tabs"
+
+export const schema = z.object({
+  id: z.number(),
+  header: z.string(),
+  type: z.string(),
+  status: z.string(),
+  target: z.string(),
+  limit: z.string(),
+  reviewer: z.string(),
+})
+
+// Create a separate component for the drag handle
+function DragHandle({ id }: { id: number }) {
+  const { attributes, listeners } = useSortable({
+    id,
+  })
+
+  return (
+    <Button
+      {...attributes}
+      {...listeners}
+      variant="ghost"
+      size="icon"
+      className="text-muted-foreground size-7 hover:bg-transparent"
+    >
+      <IconGripVertical className="text-muted-foreground size-3" />
+      <span className="sr-only">Drag to reorder</span>
+    </Button>
+  )
+}
+
+const columns: ColumnDef<z.infer<typeof schema>>[] = [
+  {
+    id: "drag",
+    header: () => null,
+    cell: ({ row }) => <DragHandle id={row.original.id} />,
+  },
+  {
+    id: "select",
+    header: ({ table }) => (
+      <div className="flex items-center justify-center">
+        <Checkbox
+          checked={
+            table.getIsAllPageRowsSelected() ||
+            (table.getIsSomePageRowsSelected() && "indeterminate")
+          }
+          onCheckedChange={(value) => table.toggleAllPageRowsSelected(!!value)}
+          aria-label="Select all"
+        />
+      </div>
+    ),
+    cell: ({ row }) => (
+      <div className="flex items-center justify-center">
+        <Checkbox
+          checked={row.getIsSelected()}
+          onCheckedChange={(value) => row.toggleSelected(!!value)}
+          aria-label="Select row"
+        />
+      </div>
+    ),
+    enableSorting: false,
+    enableHiding: false,
+  },
+  {
+    accessorKey: "header",
+    header: "Header",
+    cell: ({ row }) => {
+      return <TableCellViewer item={row.original} />
+    },
+    enableHiding: false,
+  },
+  {
+    accessorKey: "type",
+    header: "Section Type",
+    cell: ({ row }) => (
+      <div className="w-32">
+        <Badge variant="outline" className="text-muted-foreground px-1.5">
+          {row.original.type}
+        </Badge>
+      </div>
+    ),
+  },
+  {
+    accessorKey: "status",
+    header: "Status",
+    cell: ({ row }) => (
+      <Badge variant="outline" className="text-muted-foreground px-1.5">
+        {row.original.status === "Done" ? (
+          <IconCircleCheckFilled className="fill-green-500 dark:fill-green-400" />
+        ) : (
+          <IconLoader />
+        )}
+        {row.original.status}
+      </Badge>
+    ),
+  },
+  {
+    accessorKey: "target",
+    header: () => <div className="w-full text-right">Target</div>,
+    cell: ({ row }) => (
+      <form
+        onSubmit={(e) => {
+          e.preventDefault()
+          toast.promise(new Promise((resolve) => setTimeout(resolve, 1000)), {
+            loading: `Saving ${row.original.header}`,
+            success: "Done",
+            error: "Error",
+          })
+        }}
+      >
+        <Label htmlFor={`${row.original.id}-target`} className="sr-only">
+          Target
+        </Label>
+        <Input
+          className="hover:bg-input/30 focus-visible:bg-background dark:hover:bg-input/30 dark:focus-visible:bg-input/30 h-8 w-16 border-transparent bg-transparent text-right shadow-none focus-visible:border dark:bg-transparent"
+          defaultValue={row.original.target}
+          id={`${row.original.id}-target`}
+        />
+      </form>
+    ),
+  },
+  {
+    accessorKey: "limit",
+    header: () => <div className="w-full text-right">Limit</div>,
+    cell: ({ row }) => (
+      <form
+        onSubmit={(e) => {
+          e.preventDefault()
+          toast.promise(new Promise((resolve) => setTimeout(resolve, 1000)), {
+            loading: `Saving ${row.original.header}`,
+            success: "Done",
+            error: "Error",
+          })
+        }}
+      >
+        <Label htmlFor={`${row.original.id}-limit`} className="sr-only">
+          Limit
+        </Label>
+        <Input
+          className="hover:bg-input/30 focus-visible:bg-background dark:hover:bg-input/30 dark:focus-visible:bg-input/30 h-8 w-16 border-transparent bg-transparent text-right shadow-none focus-visible:border dark:bg-transparent"
+          defaultValue={row.original.limit}
+          id={`${row.original.id}-limit`}
+        />
+      </form>
+    ),
+  },
+  {
+    accessorKey: "reviewer",
+    header: "Reviewer",
+    cell: ({ row }) => {
+      const isAssigned = row.original.reviewer !== "Assign reviewer"
+
+      if (isAssigned) {
+        return row.original.reviewer
+      }
+
+      return (
+        <>
+          <Label htmlFor={`${row.original.id}-reviewer`} className="sr-only">
+            Reviewer
+          </Label>
+          <Select>
+            <SelectTrigger
+              className="w-38 **:data-[slot=select-value]:block **:data-[slot=select-value]:truncate"
+              size="sm"
+              id={`${row.original.id}-reviewer`}
+            >
+              <SelectValue placeholder="Assign reviewer" />
+            </SelectTrigger>
+            <SelectContent align="end">
+              <SelectItem value="Eddie Lake">Eddie Lake</SelectItem>
+              <SelectItem value="Jamik Tashpulatov">
+                Jamik Tashpulatov
+              </SelectItem>
+            </SelectContent>
+          </Select>
+        </>
+      )
+    },
+  },
+  {
+    id: "actions",
+    cell: () => (
+      <DropdownMenu>
+        <DropdownMenuTrigger asChild>
+          <Button
+            variant="ghost"
+            className="data-[state=open]:bg-muted text-muted-foreground flex size-8"
+            size="icon"
+          >
+            <IconDotsVertical />
+            <span className="sr-only">Open menu</span>
+          </Button>
+        </DropdownMenuTrigger>
+        <DropdownMenuContent align="end" className="w-32">
+          <DropdownMenuItem>Edit</DropdownMenuItem>
+          <DropdownMenuItem>Make a copy</DropdownMenuItem>
+          <DropdownMenuItem>Favorite</DropdownMenuItem>
+          <DropdownMenuSeparator />
+          <DropdownMenuItem variant="destructive">Delete</DropdownMenuItem>
+        </DropdownMenuContent>
+      </DropdownMenu>
+    ),
+  },
+]
+
+function DraggableRow({ row }: { row: Row<z.infer<typeof schema>> }) {
+  const { transform, transition, setNodeRef, isDragging } = useSortable({
+    id: row.original.id,
+  })
+
+  return (
+    <TableRow
+      data-state={row.getIsSelected() && "selected"}
+      data-dragging={isDragging}
+      ref={setNodeRef}
+      className="relative z-0 data-[dragging=true]:z-10 data-[dragging=true]:opacity-80"
+      style={{
+        transform: CSS.Transform.toString(transform),
+        transition: transition,
+      }}
+    >
+      {row.getVisibleCells().map((cell) => (
+        <TableCell key={cell.id}>
+          {flexRender(cell.column.columnDef.cell, cell.getContext())}
+        </TableCell>
+      ))}
+    </TableRow>
+  )
+}
+
+export function DataTable({
+  data: initialData,
+}: {
+  data: z.infer<typeof schema>[]
+}) {
+  const [data, setData] = React.useState(() => initialData)
+  const [rowSelection, setRowSelection] = React.useState({})
+  const [columnVisibility, setColumnVisibility] =
+    React.useState<VisibilityState>({})
+  const [columnFilters, setColumnFilters] = React.useState<ColumnFiltersState>(
+    []
+  )
+  const [sorting, setSorting] = React.useState<SortingState>([])
+  const [pagination, setPagination] = React.useState({
+    pageIndex: 0,
+    pageSize: 10,
+  })
+  const sortableId = React.useId()
+  const sensors = useSensors(
+    useSensor(MouseSensor, {}),
+    useSensor(TouchSensor, {}),
+    useSensor(KeyboardSensor, {})
+  )
+
+  const dataIds = React.useMemo<UniqueIdentifier[]>(
+    () => data?.map(({ id }) => id) || [],
+    [data]
+  )
+
+  const table = useReactTable({
+    data,
+    columns,
+    state: {
+      sorting,
+      columnVisibility,
+      rowSelection,
+      columnFilters,
+      pagination,
+    },
+    getRowId: (row) => row.id.toString(),
+    enableRowSelection: true,
+    onRowSelectionChange: setRowSelection,
+    onSortingChange: setSorting,
+    onColumnFiltersChange: setColumnFilters,
+    onColumnVisibilityChange: setColumnVisibility,
+    onPaginationChange: setPagination,
+    getCoreRowModel: getCoreRowModel(),
+    getFilteredRowModel: getFilteredRowModel(),
+    getPaginationRowModel: getPaginationRowModel(),
+    getSortedRowModel: getSortedRowModel(),
+    getFacetedRowModel: getFacetedRowModel(),
+    getFacetedUniqueValues: getFacetedUniqueValues(),
+  })
+
+  function handleDragEnd(event: DragEndEvent) {
+    const { active, over } = event
+    if (active && over && active.id !== over.id) {
+      setData((data) => {
+        const oldIndex = dataIds.indexOf(active.id)
+        const newIndex = dataIds.indexOf(over.id)
+        return arrayMove(data, oldIndex, newIndex)
+      })
+    }
+  }
+
+  return (
+    <Tabs
+      defaultValue="outline"
+      className="w-full flex-col justify-start gap-6"
+    >
+      <div className="flex items-center justify-between px-4 lg:px-6">
+        <Label htmlFor="view-selector" className="sr-only">
+          View
+        </Label>
+        <Select defaultValue="outline">
+          <SelectTrigger
+            className="flex w-fit @4xl/main:hidden"
+            size="sm"
+            id="view-selector"
+          >
+            <SelectValue placeholder="Select a view" />
+          </SelectTrigger>
+          <SelectContent>
+            <SelectItem value="outline">Outline</SelectItem>
+            <SelectItem value="past-performance">Past Performance</SelectItem>
+            <SelectItem value="key-personnel">Key Personnel</SelectItem>
+            <SelectItem value="focus-documents">Focus Documents</SelectItem>
+          </SelectContent>
+        </Select>
+        <TabsList className="**:data-[slot=badge]:bg-muted-foreground/30 hidden **:data-[slot=badge]:size-5 **:data-[slot=badge]:rounded-full **:data-[slot=badge]:px-1 @4xl/main:flex">
+          <TabsTrigger value="outline">Outline</TabsTrigger>
+          <TabsTrigger value="past-performance">
+            Past Performance <Badge variant="secondary">3</Badge>
+          </TabsTrigger>
+          <TabsTrigger value="key-personnel">
+            Key Personnel <Badge variant="secondary">2</Badge>
+          </TabsTrigger>
+          <TabsTrigger value="focus-documents">Focus Documents</TabsTrigger>
+        </TabsList>
+        <div className="flex items-center gap-2">
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button variant="outline" size="sm">
+                <IconLayoutColumns />
+                <span className="hidden lg:inline">Customize Columns</span>
+                <span className="lg:hidden">Columns</span>
+                <IconChevronDown />
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="end" className="w-56">
+              {table
+                .getAllColumns()
+                .filter(
+                  (column) =>
+                    typeof column.accessorFn !== "undefined" &&
+                    column.getCanHide()
+                )
+                .map((column) => {
+                  return (
+                    <DropdownMenuCheckboxItem
+                      key={column.id}
+                      className="capitalize"
+                      checked={column.getIsVisible()}
+                      onCheckedChange={(value) =>
+                        column.toggleVisibility(!!value)
+                      }
+                    >
+                      {column.id}
+                    </DropdownMenuCheckboxItem>
+                  )
+                })}
+            </DropdownMenuContent>
+          </DropdownMenu>
+          <Button variant="outline" size="sm">
+            <IconPlus />
+            <span className="hidden lg:inline">Add Section</span>
+          </Button>
+        </div>
+      </div>
+      <TabsContent
+        value="outline"
+        className="relative flex flex-col gap-4 overflow-auto px-4 lg:px-6"
+      >
+        <div className="overflow-hidden rounded-lg border">
+          <DndContext
+            collisionDetection={closestCenter}
+            modifiers={[restrictToVerticalAxis]}
+            onDragEnd={handleDragEnd}
+            sensors={sensors}
+            id={sortableId}
+          >
+            <Table>
+              <TableHeader className="bg-muted sticky top-0 z-10">
+                {table.getHeaderGroups().map((headerGroup) => (
+                  <TableRow key={headerGroup.id}>
+                    {headerGroup.headers.map((header) => {
+                      return (
+                        <TableHead key={header.id} colSpan={header.colSpan}>
+                          {header.isPlaceholder
+                            ? null
+                            : flexRender(
+                                header.column.columnDef.header,
+                                header.getContext()
+                              )}
+                        </TableHead>
+                      )
+                    })}
+                  </TableRow>
+                ))}
+              </TableHeader>
+              <TableBody className="**:data-[slot=table-cell]:first:w-8">
+                {table.getRowModel().rows?.length ? (
+                  <SortableContext
+                    items={dataIds}
+                    strategy={verticalListSortingStrategy}
+                  >
+                    {table.getRowModel().rows.map((row) => (
+                      <DraggableRow key={row.id} row={row} />
+                    ))}
+                  </SortableContext>
+                ) : (
+                  <TableRow>
+                    <TableCell
+                      colSpan={columns.length}
+                      className="h-24 text-center"
+                    >
+                      No results.
+                    </TableCell>
+                  </TableRow>
+                )}
+              </TableBody>
+            </Table>
+          </DndContext>
+        </div>
+        <div className="flex items-center justify-between px-4">
+          <div className="text-muted-foreground hidden flex-1 text-sm lg:flex">
+            {table.getFilteredSelectedRowModel().rows.length} of{" "}
+            {table.getFilteredRowModel().rows.length} row(s) selected.
+          </div>
+          <div className="flex w-full items-center gap-8 lg:w-fit">
+            <div className="hidden items-center gap-2 lg:flex">
+              <Label htmlFor="rows-per-page" className="text-sm font-medium">
+                Rows per page
+              </Label>
+              <Select
+                value={`${table.getState().pagination.pageSize}`}
+                onValueChange={(value) => {
+                  table.setPageSize(Number(value))
+                }}
+              >
+                <SelectTrigger size="sm" className="w-20" id="rows-per-page">
+                  <SelectValue
+                    placeholder={table.getState().pagination.pageSize}
+                  />
+                </SelectTrigger>
+                <SelectContent side="top">
+                  {[10, 20, 30, 40, 50].map((pageSize) => (
+                    <SelectItem key={pageSize} value={`${pageSize}`}>
+                      {pageSize}
+                    </SelectItem>
+                  ))}
+                </SelectContent>
+              </Select>
+            </div>
+            <div className="flex w-fit items-center justify-center text-sm font-medium">
+              Page {table.getState().pagination.pageIndex + 1} of{" "}
+              {table.getPageCount()}
+            </div>
+            <div className="ml-auto flex items-center gap-2 lg:ml-0">
+              <Button
+                variant="outline"
+                className="hidden h-8 w-8 p-0 lg:flex"
+                onClick={() => table.setPageIndex(0)}
+                disabled={!table.getCanPreviousPage()}
+              >
+                <span className="sr-only">Go to first page</span>
+                <IconChevronsLeft />
+              </Button>
+              <Button
+                variant="outline"
+                className="size-8"
+                size="icon"
+                onClick={() => table.previousPage()}
+                disabled={!table.getCanPreviousPage()}
+              >
+                <span className="sr-only">Go to previous page</span>
+                <IconChevronLeft />
+              </Button>
+              <Button
+                variant="outline"
+                className="size-8"
+                size="icon"
+                onClick={() => table.nextPage()}
+                disabled={!table.getCanNextPage()}
+              >
+                <span className="sr-only">Go to next page</span>
+                <IconChevronRight />
+              </Button>
+              <Button
+                variant="outline"
+                className="hidden size-8 lg:flex"
+                size="icon"
+                onClick={() => table.setPageIndex(table.getPageCount() - 1)}
+                disabled={!table.getCanNextPage()}
+              >
+                <span className="sr-only">Go to last page</span>
+                <IconChevronsRight />
+              </Button>
+            </div>
+          </div>
+        </div>
+      </TabsContent>
+      <TabsContent
+        value="past-performance"
+        className="flex flex-col px-4 lg:px-6"
+      >
+        <div className="aspect-video w-full flex-1 rounded-lg border border-dashed"></div>
+      </TabsContent>
+      <TabsContent value="key-personnel" className="flex flex-col px-4 lg:px-6">
+        <div className="aspect-video w-full flex-1 rounded-lg border border-dashed"></div>
+      </TabsContent>
+      <TabsContent
+        value="focus-documents"
+        className="flex flex-col px-4 lg:px-6"
+      >
+        <div className="aspect-video w-full flex-1 rounded-lg border border-dashed"></div>
+      </TabsContent>
+    </Tabs>
+  )
+}
+
+const chartData = [
+  { month: "January", desktop: 186, mobile: 80 },
+  { month: "February", desktop: 305, mobile: 200 },
+  { month: "March", desktop: 237, mobile: 120 },
+  { month: "April", desktop: 73, mobile: 190 },
+  { month: "May", desktop: 209, mobile: 130 },
+  { month: "June", desktop: 214, mobile: 140 },
+]
+
+const chartConfig = {
+  desktop: {
+    label: "Desktop",
+    color: "var(--primary)",
+  },
+  mobile: {
+    label: "Mobile",
+    color: "var(--primary)",
+  },
+} satisfies ChartConfig
+
+function TableCellViewer({ item }: { item: z.infer<typeof schema> }) {
+  const isMobile = useIsMobile()
+
+  return (
+    <Drawer direction={isMobile ? "bottom" : "right"}>
+      <DrawerTrigger asChild>
+        <Button variant="link" className="text-foreground w-fit px-0 text-left">
+          {item.header}
+        </Button>
+      </DrawerTrigger>
+      <DrawerContent>
+        <DrawerHeader className="gap-1">
+          <DrawerTitle>{item.header}</DrawerTitle>
+          <DrawerDescription>
+            Showing total visitors for the last 6 months
+          </DrawerDescription>
+        </DrawerHeader>
+        <div className="flex flex-col gap-4 overflow-y-auto px-4 text-sm">
+          {!isMobile && (
+            <>
+              <ChartContainer config={chartConfig}>
+                <AreaChart
+                  accessibilityLayer
+                  data={chartData}
+                  margin={{
+                    left: 0,
+                    right: 10,
+                  }}
+                >
+                  <CartesianGrid vertical={false} />
+                  <XAxis
+                    dataKey="month"
+                    tickLine={false}
+                    axisLine={false}
+                    tickMargin={8}
+                    tickFormatter={(value) => value.slice(0, 3)}
+                    hide
+                  />
+                  <ChartTooltip
+                    cursor={false}
+                    content={<ChartTooltipContent indicator="dot" />}
+                  />
+                  <Area
+                    dataKey="mobile"
+                    type="natural"
+                    fill="var(--color-mobile)"
+                    fillOpacity={0.6}
+                    stroke="var(--color-mobile)"
+                    stackId="a"
+                  />
+                  <Area
+                    dataKey="desktop"
+                    type="natural"
+                    fill="var(--color-desktop)"
+                    fillOpacity={0.4}
+                    stroke="var(--color-desktop)"
+                    stackId="a"
+                  />
+                </AreaChart>
+              </ChartContainer>
+              <Separator />
+              <div className="grid gap-2">
+                <div className="flex gap-2 leading-none font-medium">
+                  Trending up by 5.2% this month{" "}
+                  <IconTrendingUp className="size-4" />
+                </div>
+                <div className="text-muted-foreground">
+                  Showing total visitors for the last 6 months. This is just
+                  some random text to test the layout. It spans multiple lines
+                  and should wrap around.
+                </div>
+              </div>
+              <Separator />
+            </>
+          )}
+          <form className="flex flex-col gap-4">
+            <div className="flex flex-col gap-3">
+              <Label htmlFor="header">Header</Label>
+              <Input id="header" defaultValue={item.header} />
+            </div>
+            <div className="grid grid-cols-2 gap-4">
+              <div className="flex flex-col gap-3">
+                <Label htmlFor="type">Type</Label>
+                <Select defaultValue={item.type}>
+                  <SelectTrigger id="type" className="w-full">
+                    <SelectValue placeholder="Select a type" />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="Table of Contents">
+                      Table of Contents
+                    </SelectItem>
+                    <SelectItem value="Executive Summary">
+                      Executive Summary
+                    </SelectItem>
+                    <SelectItem value="Technical Approach">
+                      Technical Approach
+                    </SelectItem>
+                    <SelectItem value="Design">Design</SelectItem>
+                    <SelectItem value="Capabilities">Capabilities</SelectItem>
+                    <SelectItem value="Focus Documents">
+                      Focus Documents
+                    </SelectItem>
+                    <SelectItem value="Narrative">Narrative</SelectItem>
+                    <SelectItem value="Cover Page">Cover Page</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+              <div className="flex flex-col gap-3">
+                <Label htmlFor="status">Status</Label>
+                <Select defaultValue={item.status}>
+                  <SelectTrigger id="status" className="w-full">
+                    <SelectValue placeholder="Select a status" />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="Done">Done</SelectItem>
+                    <SelectItem value="In Progress">In Progress</SelectItem>
+                    <SelectItem value="Not Started">Not Started</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+            </div>
+            <div className="grid grid-cols-2 gap-4">
+              <div className="flex flex-col gap-3">
+                <Label htmlFor="target">Target</Label>
+                <Input id="target" defaultValue={item.target} />
+              </div>
+              <div className="flex flex-col gap-3">
+                <Label htmlFor="limit">Limit</Label>
+                <Input id="limit" defaultValue={item.limit} />
+              </div>
+            </div>
+            <div className="flex flex-col gap-3">
+              <Label htmlFor="reviewer">Reviewer</Label>
+              <Select defaultValue={item.reviewer}>
+                <SelectTrigger id="reviewer" className="w-full">
+                  <SelectValue placeholder="Select a reviewer" />
+                </SelectTrigger>
+                <SelectContent>
+                  <SelectItem value="Eddie Lake">Eddie Lake</SelectItem>
+                  <SelectItem value="Jamik Tashpulatov">
+                    Jamik Tashpulatov
+                  </SelectItem>
+                  <SelectItem value="Emily Whalen">Emily Whalen</SelectItem>
+                </SelectContent>
+              </Select>
+            </div>
+          </form>
+        </div>
+        <DrawerFooter>
+          <Button>Submit</Button>
+          <DrawerClose asChild>
+            <Button variant="outline">Done</Button>
+          </DrawerClose>
+        </DrawerFooter>
+      </DrawerContent>
+    </Drawer>
+  )
+}
--- a/client/src/components/hoc/with-fallback.tsx
+++ b/client/src/components/hoc/with-fallback.tsx
@@ -1,20 +0,0 @@
-import type { ReactNode } from 'react';
-import React, { Suspense } from 'react';
-
-export function withFallback<P extends object>(
-  Component: React.ComponentType<P>,
-  fallback: ReactNode,
-) {
-  const Wrapped: React.FC<P> = (props) => {
-    return (
-      <Suspense fallback={fallback}>
-        <Component {...props} />
-      </Suspense>
-    );
-  };
-
-  Wrapped.displayName = `withFallback(${Component.displayName! || Component.name || 'Component'
-    })`;
-
-  return Wrapped;
-}
--- a/client/src/components/login-form.tsx
+++ b/client/src/components/login-form.tsx
@@ -1,8 +1,3 @@
-import type { TurnstileInstance } from '@marsidev/react-turnstile';
-import { Turnstile } from '@marsidev/react-turnstile';
-import { useNavigate } from '@tanstack/react-router';
-import { useRef, useState } from 'react';
-import { toast } from 'sonner';
 import NixOSLogo from '@/assets/nixos.svg?react';
 import { Button } from '@/components/ui/button';
 import {
@@ -11,70 +6,42 @@ import {
  FieldLabel,
 } from '@/components/ui/field';
 import { Input } from '@/components/ui/input';
-import { useGetMagicLink } from '@/hooks/data/useGetMagicLink';
 import { cn } from '@/lib/utils';

 export function LoginForm({
  className,
  ...props
 }: React.ComponentProps<'div'>) {
-  const formRef = useRef<HTMLFormElement>(null);
-  const turnstileRef = useRef<TurnstileInstance>(null);
-  const [token, setToken] = useState<string | null>(null);
-  const { mutateAsync, isPending } = useGetMagicLink();
-  const navigate = useNavigate();
-
-  const handleSubmit = (event: React.FormEvent<HTMLFormElement>) => {
-    event.preventDefault();
-    const formData = new FormData(formRef.current!);
-    const email = formData.get('email')! as string;
-    mutateAsync({ email, turnstile_token: token! }).then(() => {
-      void navigate({ to: '/magicLinkSent', search: { email } });
-    }).catch((error) => {
-      console.error(error);
-      toast.error('请求登录链接失败');
-      turnstileRef.current?.reset();
-    });
-  };
-
  return (
    <div className={cn('flex flex-col gap-6', className)} {...props}>
-      <form ref={formRef} onSubmit={handleSubmit}>
+      <form>
        <FieldGroup>
          <div className="flex flex-col items-center gap-2 text-center">
+            <a
+              href="#"
+              className="flex flex-col items-center gap-2 font-medium"
+            >
              <div className="flex size-8 items-center justify-center rounded-md">
                <NixOSLogo className="size-6" />
              </div>
              <span className="sr-only">Nix CN Meetup #2</span>
+            </a>
            <h1 className="text-xl font-bold">欢迎来到 Nix CN Meetup #2</h1>
          </div>
          <Field>
            <FieldLabel htmlFor="email">参会登记Email</FieldLabel>
            <Input
              id="email"
-              name="email"
              type="email"
              placeholder="edolstra@gmail.com"
              required
            />
          </Field>
          <Field>
-            <Button type="submit" disabled={token === null || isPending}>
-              {token === null ? '等待 Turnstile' : isPending ? '发送中...' : '发送登录链接'}
-            </Button>
+            <Button type="submit">发送登录链接</Button>
          </Field>
        </FieldGroup>
      </form>
-      <Turnstile
-        ref={turnstileRef}
-        siteKey="0x4AAAAAACI5pu-lNWFc6Wu1"
-        options={{
-          refreshExpired: 'auto',
-        }}
-        onSuccess={(token) => {
-          setToken(token);
-        }}
-      />
    </div>
  );
 }
--- a/client/src/components/nav-documents.tsx
+++ b/client/src/components/nav-documents.tsx
@@ -0,0 +1,92 @@
+"use client"
+
+import {
+  IconDots,
+  IconFolder,
+  IconShare3,
+  IconTrash,
+  type Icon,
+} from "@tabler/icons-react"
+
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@/components/ui/dropdown-menu"
+import {
+  SidebarGroup,
+  SidebarGroupLabel,
+  SidebarMenu,
+  SidebarMenuAction,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  useSidebar,
+} from "@/components/ui/sidebar"
+
+export function NavDocuments({
+  items,
+}: {
+  items: {
+    name: string
+    url: string
+    icon: Icon
+  }[]
+}) {
+  const { isMobile } = useSidebar()
+
+  return (
+    <SidebarGroup className="group-data-[collapsible=icon]:hidden">
+      <SidebarGroupLabel>Documents</SidebarGroupLabel>
+      <SidebarMenu>
+        {items.map((item) => (
+          <SidebarMenuItem key={item.name}>
+            <SidebarMenuButton asChild>
+              <a href={item.url}>
+                <item.icon />
+                <span>{item.name}</span>
+              </a>
+            </SidebarMenuButton>
+            <DropdownMenu>
+              <DropdownMenuTrigger asChild>
+                <SidebarMenuAction
+                  showOnHover
+                  className="data-[state=open]:bg-accent rounded-sm"
+                >
+                  <IconDots />
+                  <span className="sr-only">More</span>
+                </SidebarMenuAction>
+              </DropdownMenuTrigger>
+              <DropdownMenuContent
+                className="w-24 rounded-lg"
+                side={isMobile ? "bottom" : "right"}
+                align={isMobile ? "end" : "start"}
+              >
+                <DropdownMenuItem>
+                  <IconFolder />
+                  <span>Open</span>
+                </DropdownMenuItem>
+                <DropdownMenuItem>
+                  <IconShare3 />
+                  <span>Share</span>
+                </DropdownMenuItem>
+                <DropdownMenuSeparator />
+                <DropdownMenuItem variant="destructive">
+                  <IconTrash />
+                  <span>Delete</span>
+                </DropdownMenuItem>
+              </DropdownMenuContent>
+            </DropdownMenu>
+          </SidebarMenuItem>
+        ))}
+        <SidebarMenuItem>
+          <SidebarMenuButton className="text-sidebar-foreground/70">
+            <IconDots className="text-sidebar-foreground/70" />
+            <span>More</span>
+          </SidebarMenuButton>
+        </SidebarMenuItem>
+      </SidebarMenu>
+    </SidebarGroup>
+  )
+}
--- a/client/src/components/nav-secondary.tsx
+++ b/client/src/components/nav-secondary.tsx
@@ -1,7 +1,7 @@
-'use client';
+"use client"

-import type { Icon } from '@tabler/icons-react';
-import * as React from 'react';
+import * as React from "react"
+import { type Icon } from "@tabler/icons-react"

 import {
  SidebarGroup,
@@ -9,23 +9,23 @@ import {
  SidebarMenu,
  SidebarMenuButton,
  SidebarMenuItem,
-} from '@/components/ui/sidebar';
+} from "@/components/ui/sidebar"

 export function NavSecondary({
  items,
  ...props
 }: {
  items: {
-    title: string;
-    url: string;
-    icon: Icon;
-  }[];
+    title: string
+    url: string
+    icon: Icon
+  }[]
 } & React.ComponentPropsWithoutRef<typeof SidebarGroup>) {
  return (
    <SidebarGroup {...props}>
      <SidebarGroupContent>
        <SidebarMenu>
-          {items.map(item => (
+          {items.map((item) => (
            <SidebarMenuItem key={item.title}>
              <SidebarMenuButton asChild>
                <a href={item.url}>
@@ -38,5 +38,5 @@ export function NavSecondary({
        </SidebarMenu>
      </SidebarGroupContent>
    </SidebarGroup>
-  );
+  )
 }
--- a/client/src/components/nav-user.tsx
+++ b/client/src/components/nav-user.tsx
@@ -22,15 +22,17 @@ import {
  SidebarMenuItem,
  useSidebar,
 } from '@/components/ui/sidebar';
-import { useUserInfo } from '@/hooks/data/useUserInfo';
-import { useLogout } from '@/hooks/useLogout';
-import { withFallback } from './hoc/with-fallback';
-import { Skeleton } from './ui/skeleton';

-function NavUser_() {
+export function NavUser({
+  user,
+}: {
+  user: {
+    name: string;
+    email: string;
+    avatar: string;
+  };
+}) {
  const { isMobile } = useSidebar();
-  const { data: user } = useUserInfo();
-  const { logout } = useLogout();

  return (
    <SidebarMenu>
@@ -42,11 +44,11 @@ function NavUser_() {
              className="data-[state=open]:bg-sidebar-accent data-[state=open]:text-sidebar-accent-foreground"
            >
              <Avatar className="h-8 w-8 rounded-lg grayscale">
-                <AvatarImage src={user.avatar} alt={user.nickname} />
+                <AvatarImage src={user.avatar} alt={user.name} />
                <AvatarFallback className="rounded-lg">CN</AvatarFallback>
              </Avatar>
              <div className="grid flex-1 text-left text-sm leading-tight">
-                <span className="truncate font-medium">{user.nickname}</span>
+                <span className="truncate font-medium">{user.name}</span>
                <span className="text-muted-foreground truncate text-xs">
                  {user.email}
                </span>
@@ -63,11 +65,11 @@ function NavUser_() {
            <DropdownMenuLabel className="p-0 font-normal">
              <div className="flex items-center gap-2 px-1 py-1.5 text-left text-sm">
                <Avatar className="h-8 w-8 rounded-lg">
-                  <AvatarImage src={user.avatar} alt={user.nickname} />
+                  <AvatarImage src={user.avatar} alt={user.name} />
                  <AvatarFallback className="rounded-lg">CN</AvatarFallback>
                </Avatar>
                <div className="grid flex-1 text-left text-sm leading-tight">
-                  <span className="truncate font-medium">{user.nickname}</span>
+                  <span className="truncate font-medium">{user.name}</span>
                  <span className="text-muted-foreground truncate text-xs">
                    {user.email}
                  </span>
@@ -75,7 +77,7 @@ function NavUser_() {
              </div>
            </DropdownMenuLabel>
            <DropdownMenuSeparator />
-            <DropdownMenuItem onClick={logout}>
+            <DropdownMenuItem>
              <IconLogout />
              登出
            </DropdownMenuItem>
@@ -85,20 +87,3 @@ function NavUser_() {
    </SidebarMenu>
  );
 }
-
-function NavUserSkeleton() {
-  return (
-    <SidebarMenuButton
-      size="lg"
-    >
-      <Skeleton className="h-8 w-8 rounded-lg" />
-      <div className="flex flex-col flex-1 gap-1">
-        <Skeleton className="h-3 w-16" />
-        <Skeleton className="h-3 w-24" />
-      </div>
-      <IconDotsVertical className="ml-auto size-4" />
-    </SidebarMenuButton>
-  );
-}
-
-export const NavUser = withFallback(NavUser_, <NavUserSkeleton />);
--- a/client/src/components/section-cards.tsx
+++ b/client/src/components/section-cards.tsx
@@ -0,0 +1,31 @@
+import { Badge } from '@/components/ui/badge';
+import {
+  Card,
+  CardAction,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from '@/components/ui/card';
+import { Button } from './ui/button';
+
+export function SectionCards() {
+  return (
+    <div className="*:data-[slot=card]:from-primary/5 *:data-[slot=card]:to-card dark:*:data-[slot=card]:bg-card grid grid-cols-1 gap-4 px-4 *:data-[slot=card]:bg-gradient-to-t *:data-[slot=card]:shadow-xs lg:px-6 @xl/main:grid-cols-2 @5xl/main:grid-cols-4">
+      <Card className="@container/card">
+        <CardHeader>
+          <CardDescription>签到状态</CardDescription>
+          <CardTitle className="text-2xl font-semibold tabular-nums @[250px]/card:text-3xl">
+            未签到
+          </CardTitle>
+          <CardAction>
+            <Badge variant="outline">Day 1</Badge>
+          </CardAction>
+        </CardHeader>
+        <CardFooter className="flex-col items-start gap-1.5 text-sm">
+          <Button className="w-20">签到</Button>
+        </CardFooter>
+      </Card>
+    </div>
+  );
+}
--- a/client/src/components/ui/dialog.tsx
+++ b/client/src/components/ui/dialog.tsx
@@ -1,141 +0,0 @@
-import * as React from "react"
-import * as DialogPrimitive from "@radix-ui/react-dialog"
-import { XIcon } from "lucide-react"
-
-import { cn } from "@/lib/utils"
-
-function Dialog({
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Root>) {
-  return <DialogPrimitive.Root data-slot="dialog" {...props} />
-}
-
-function DialogTrigger({
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Trigger>) {
-  return <DialogPrimitive.Trigger data-slot="dialog-trigger" {...props} />
-}
-
-function DialogPortal({
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Portal>) {
-  return <DialogPrimitive.Portal data-slot="dialog-portal" {...props} />
-}
-
-function DialogClose({
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Close>) {
-  return <DialogPrimitive.Close data-slot="dialog-close" {...props} />
-}
-
-function DialogOverlay({
-  className,
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Overlay>) {
-  return (
-    <DialogPrimitive.Overlay
-      data-slot="dialog-overlay"
-      className={cn(
-        "data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 fixed inset-0 z-50 bg-black/50",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-function DialogContent({
-  className,
-  children,
-  showCloseButton = true,
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Content> & {
-  showCloseButton?: boolean
-}) {
-  return (
-    <DialogPortal data-slot="dialog-portal">
-      <DialogOverlay />
-      <DialogPrimitive.Content
-        data-slot="dialog-content"
-        className={cn(
-          "bg-background data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] translate-x-[-50%] translate-y-[-50%] gap-4 rounded-lg border p-6 shadow-lg duration-200 outline-none sm:max-w-lg",
-          className
-        )}
-        {...props}
-      >
-        {children}
-        {showCloseButton && (
-          <DialogPrimitive.Close
-            data-slot="dialog-close"
-            className="ring-offset-background focus:ring-ring data-[state=open]:bg-accent data-[state=open]:text-muted-foreground absolute top-4 right-4 rounded-xs opacity-70 transition-opacity hover:opacity-100 focus:ring-2 focus:ring-offset-2 focus:outline-hidden disabled:pointer-events-none [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4"
-          >
-            <XIcon />
-            <span className="sr-only">Close</span>
-          </DialogPrimitive.Close>
-        )}
-      </DialogPrimitive.Content>
-    </DialogPortal>
-  )
-}
-
-function DialogHeader({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="dialog-header"
-      className={cn("flex flex-col gap-2 text-center sm:text-left", className)}
-      {...props}
-    />
-  )
-}
-
-function DialogFooter({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="dialog-footer"
-      className={cn(
-        "flex flex-col-reverse gap-2 sm:flex-row sm:justify-end",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-function DialogTitle({
-  className,
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Title>) {
-  return (
-    <DialogPrimitive.Title
-      data-slot="dialog-title"
-      className={cn("text-lg leading-none font-semibold", className)}
-      {...props}
-    />
-  )
-}
-
-function DialogDescription({
-  className,
-  ...props
-}: React.ComponentProps<typeof DialogPrimitive.Description>) {
-  return (
-    <DialogPrimitive.Description
-      data-slot="dialog-description"
-      className={cn("text-muted-foreground text-sm", className)}
-      {...props}
-    />
-  )
-}
-
-export {
-  Dialog,
-  DialogClose,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogOverlay,
-  DialogPortal,
-  DialogTitle,
-  DialogTrigger,
-}
--- a/client/src/components/ui/shadcn-io/qr-code/index.tsx
+++ b/client/src/components/ui/shadcn-io/qr-code/index.tsx
@@ -1,86 +0,0 @@
-import { formatHex, oklch } from 'culori';
-import QR from 'qrcode';
-import { type HTMLAttributes, useEffect, useState } from 'react';
-import { cn } from '@/lib/utils';
-
-export type QRCodeProps = HTMLAttributes<HTMLDivElement> & {
-  data: string;
-  foreground?: string;
-  background?: string;
-  robustness?: 'L' | 'M' | 'Q' | 'H';
-};
-
-const oklchRegex = /oklch\(([0-9.]+)\s+([0-9.]+)\s+([0-9.]+)\)/;
-
-const getOklch = (color: string, fallback: [number, number, number]) => {
-  const oklchMatch = color.match(oklchRegex);
-
-  if (!oklchMatch) {
-    return { l: fallback[0], c: fallback[1], h: fallback[2] };
-  }
-
-  return {
-    l: Number.parseFloat(oklchMatch[1]),
-    c: Number.parseFloat(oklchMatch[2]),
-    h: Number.parseFloat(oklchMatch[3]),
-  };
-};
-
-export const QRCode = ({
-  data,
-  foreground,
-  background,
-  robustness = 'M',
-  className,
-  ...props
-}: QRCodeProps) => {
-  const [svg, setSVG] = useState<string | null>(null);
-
-  useEffect(() => {
-    const generateQR = async () => {
-      try {
-        const styles = getComputedStyle(document.documentElement);
-        const foregroundColor =
-          foreground ?? styles.getPropertyValue('--foreground');
-        const backgroundColor =
-          background ?? styles.getPropertyValue('--background');
-
-        const foregroundOklch = getOklch(
-          foregroundColor,
-          [0.21, 0.006, 285.885]
-        );
-        const backgroundOklch = getOklch(backgroundColor, [0.985, 0, 0]);
-
-        const newSvg = await QR.toString(data, {
-          type: 'svg',
-          color: {
-            dark: formatHex(oklch({ mode: 'oklch', ...foregroundOklch })),
-            light: formatHex(oklch({ mode: 'oklch', ...backgroundOklch })),
-          },
-          width: 200,
-          errorCorrectionLevel: robustness,
-          margin: 0,
-        });
-
-        setSVG(newSvg);
-      } catch (err) {
-        console.error(err);
-      }
-    };
-
-    generateQR();
-  }, [data, foreground, background, robustness]);
-
-  if (!svg) {
-    return null;
-  }
-
-  return (
-    <div
-      className={cn('size-full', '[&_svg]:size-full', className)}
-      // biome-ignore lint/security/noDangerouslySetInnerHtml: "Required for SVG"
-      dangerouslySetInnerHTML={{ __html: svg }}
-      {...(props as any)}
-    />
-  );
-};
--- a/client/src/components/workbenchCards/card-skeleton.tsx
+++ b/client/src/components/workbenchCards/card-skeleton.tsx
@@ -1,9 +0,0 @@
-import { Skeleton } from '../ui/skeleton';
-
-export function CardSkeleton() {
-  return (
-    <Skeleton
-      className="gap-6 rounded-xl py-6 h-full"
-    />
-  );
-}
--- a/client/src/components/workbenchCards/checkin.tsx
+++ b/client/src/components/workbenchCards/checkin.tsx
@@ -1,32 +0,0 @@
-import { Badge } from '@/components/ui/badge';
-import { Card, CardAction, CardDescription, CardFooter, CardHeader, CardTitle } from '@/components/ui/card';
-import { useUserInfo } from '@/hooks/data/useUserInfo';
-import { QrDialog } from '../checkin/qr-dialog';
-import { withFallback } from '../hoc/with-fallback';
-import { CardSkeleton } from './card-skeleton';
-
-function CheckinCard_() {
-  const { data } = useUserInfo();
-  return (
-    <Card className="@container/card">
-      <CardHeader>
-        <CardDescription>签到状态</CardDescription>
-        <CardTitle className="text-2xl font-semibold tabular-nums @[250px]/card:text-3xl">
-          {data.checkin !== null ? '已签到' : '未签到'}
-          {data.checkin !== null && <span className="text-sm font-medium ml-2">{`${new Date(data.checkin).toLocaleString()}`}</span>}
-        </CardTitle>
-        <CardAction>
-          <Badge variant="outline">Day 1</Badge>
-        </CardAction>
-      </CardHeader>
-      <CardFooter className="flex-col items-start gap-1.5 text-sm">
-        <QrDialog
-          eventId="019b5bf2-90ce-75f5-93a4-a66914c2ef11"
-        >
-        </QrDialog>
-      </CardFooter>
-    </Card>
-  );
-}
-
-export const CheckinCard = withFallback(CheckinCard_, <CardSkeleton />);
--- a/client/src/hooks/data/useGetCheckInCode.ts
+++ b/client/src/hooks/data/useGetCheckInCode.ts
@@ -1,18 +0,0 @@
-import { useQuery } from '@tanstack/react-query';
-import { axiosClient } from '@/lib/axios';
-
-export function useCheckinCode(eventId: string, enabled: boolean) {
-  return useQuery({
-    queryKey: ['getCheckinCode', eventId],
-    queryFn: async () => {
-      return axiosClient.get<{
-        checkin_code: string;
-      }>('/user/checkin', {
-        params: {
-          event_id: eventId,
-        },
-      });
-    },
-    enabled,
-  });
-}
--- a/client/src/hooks/data/useGetMagicLink.ts
+++ b/client/src/hooks/data/useGetMagicLink.ts
@@ -1,15 +0,0 @@
-import { useMutation } from '@tanstack/react-query';
-import { axiosClient } from '@/lib/axios';
-
-interface GetMagicLinkPayload {
-  email: string;
-  turnstile_token: string;
-}
-
-export function useGetMagicLink() {
-  return useMutation({
-    mutationFn: async (payload: GetMagicLinkPayload) => {
-      return axiosClient.post<object>('/auth/magic', payload);
-    },
-  });
-}
--- a/client/src/hooks/data/useUserInfo.ts
+++ b/client/src/hooks/data/useUserInfo.ts
@@ -1,21 +0,0 @@
-import { useSuspenseQuery } from '@tanstack/react-query';
-import { axiosClient } from '@/lib/axios';
-
-export function useUserInfo() {
-  return useSuspenseQuery({
-    queryKey: ['userInfo'],
-    queryFn: async () => {
-      const response = await axiosClient.get<{
-        user_id: string;
-        email: string;
-        type: string;
-        nickname: string;
-        subtitle: string;
-        avatar: string;
-        checkin: string | null;
-      }
-      >('/user/info');
-      return response.data;
-    },
-  });
-}
--- a/client/src/hooks/data/useValidateMagicLink.ts
+++ b/client/src/hooks/data/useValidateMagicLink.ts
@@ -1,11 +0,0 @@
-import { useSuspenseQuery } from '@tanstack/react-query';
-import { axiosClient } from '@/lib/axios';
-
-export function useValidateMagicLink(ticket: string) {
-  return useSuspenseQuery({
-    queryKey: ['validateMagicLink', ticket],
-    queryFn: async () => {
-      return axiosClient.get<{ access_token: string; refresh_token: string }>('/auth/magic/verify', { params: { token: ticket } });
-    },
-  });
-}
--- a/client/src/hooks/use-mobile.ts
+++ b/client/src/hooks/use-mobile.ts
@@ -1,19 +1,19 @@
-import * as React from 'react';
+import * as React from "react"

-const MOBILE_BREAKPOINT = 768;
+const MOBILE_BREAKPOINT = 768

 export function useIsMobile() {
-  const [isMobile, setIsMobile] = React.useState<boolean | undefined>(undefined);
+  const [isMobile, setIsMobile] = React.useState<boolean | undefined>(undefined)

  React.useEffect(() => {
-    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);
+    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`)
    const onChange = () => {
-      setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
-    };
-    mql.addEventListener('change', onChange);
-    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
-    return () => mql.removeEventListener('change', onChange);
-  }, []);
-
-  return !!isMobile;
+      setIsMobile(window.innerWidth < MOBILE_BREAKPOINT)
+    }
+    mql.addEventListener("change", onChange)
+    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT)
+    return () => mql.removeEventListener("change", onChange)
+  }, [])
+
+  return !!isMobile
 }
--- a/client/src/hooks/useLogout.ts
+++ b/client/src/hooks/useLogout.ts
@@ -1,14 +0,0 @@
-import { useNavigate } from '@tanstack/react-router';
-import { useCallback } from 'react';
-import { clearTokens } from '@/lib/token';
-
-export function useLogout() {
-  const navigate = useNavigate();
-
-  const logout = useCallback(() => {
-    clearTokens();
-    void navigate({ to: '/login' });
-  }, [navigate]);
-
-  return { logout };
-}
--- a/client/src/index.css
+++ b/client/src/index.css
@@ -1,4 +1,3 @@
-@import url("https://fonts.googleapis.com/css2?family=Noto+Sans+Mono:wght@100..900&display=swap");
@import "tailwindcss";
@import "tw-animate-css";

@@ -43,9 +42,9 @@
  --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
  --color-sidebar-border: var(--sidebar-border);
  --color-sidebar-ring: var(--sidebar-ring);
-  --font-sans: "Inter", sans-serif;
-  --font-mono: "Noto Sans Mono", monospace;
-  --font-serif: "Lora", serif;
+  --font-sans: 'Inter', sans-serif;
+  --font-mono: 'JetBrains Mono', monospace;
+  --font-serif: 'Lora', serif;
  --radius: 0.5rem;
  --tracking-tighter: calc(var(--tracking-normal) - 0.05em);
  --tracking-tight: calc(var(--tracking-normal) - 0.025em);
@@ -74,23 +73,23 @@

 :root {
  --radius: 0.5rem;
-  --background: oklch(0.9816 0.0017 247.839);
+  --background: oklch(0.9816 0.0017 247.8390);
  --foreground: oklch(0.2621 0.0095 248.1897);
-  --card: oklch(1 0 0);
+  --card: oklch(1.0000 0 0);
  --card-foreground: oklch(0.2621 0.0095 248.1897);
-  --popover: oklch(1 0 0);
+  --popover: oklch(1.0000 0 0);
  --popover-foreground: oklch(0.2621 0.0095 248.1897);
  --primary: oklch(0.5502 0.1193 263.8209);
-  --primary-foreground: oklch(1 0 0);
+  --primary-foreground: oklch(1.0000 0 0);
  --secondary: oklch(0.7499 0.0898 239.3977);
  --secondary-foreground: oklch(0.2621 0.0095 248.1897);
-  --muted: oklch(0.9417 0.0052 247.879);
+  --muted: oklch(0.9417 0.0052 247.8790);
  --muted-foreground: oklch(0.5575 0.0165 244.8933);
-  --accent: oklch(0.9417 0.0052 247.879);
+  --accent: oklch(0.9417 0.0052 247.8790);
  --accent-foreground: oklch(0.2621 0.0095 248.1897);
-  --destructive: oklch(0.5915 0.202 21.2388);
-  --border: oklch(0.9109 0.007 247.9014);
-  --input: oklch(1 0 0);
+  --destructive: oklch(0.5915 0.2020 21.2388);
+  --border: oklch(0.9109 0.0070 247.9014);
+  --input: oklch(1.0000 0 0);
  --ring: oklch(0.5502 0.1193 263.8209);
  --chart-1: oklch(0.5502 0.1193 263.8209);
  --chart-2: oklch(0.7499 0.0898 239.3977);
@@ -100,15 +99,15 @@
  --sidebar: oklch(0.9632 0.0034 247.8585);
  --sidebar-foreground: oklch(0.2621 0.0095 248.1897);
  --sidebar-primary: oklch(0.5502 0.1193 263.8209);
-  --sidebar-primary-foreground: oklch(1 0 0);
-  --sidebar-accent: oklch(0.9417 0.0052 247.879);
+  --sidebar-primary-foreground: oklch(1.0000 0 0);
+  --sidebar-accent: oklch(0.9417 0.0052 247.8790);
  --sidebar-accent-foreground: oklch(0.2621 0.0095 248.1897);
-  --sidebar-border: oklch(0.9109 0.007 247.9014);
+  --sidebar-border: oklch(0.9109 0.0070 247.9014);
  --sidebar-ring: oklch(0.5502 0.1193 263.8209);
-  --destructive-foreground: oklch(1 0 0);
-  --font-sans: "Inter", sans-serif;
-  --font-serif: "Lora", serif;
-  --font-mono: "JetBrains Mono", monospace;
+  --destructive-foreground: oklch(1.0000 0 0);
+  --font-sans: 'Inter', sans-serif;
+  --font-serif: 'Lora', serif;
+  --font-mono: 'JetBrains Mono', monospace;
  --shadow-color: #000000;
  --shadow-opacity: 0.05;
  --shadow-blur: 0.5rem;
@@ -119,62 +118,52 @@
  --spacing: 0.25rem;
  --shadow-2xs: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.03);
  --shadow-xs: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.03);
-  --shadow-sm:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05),
-    0rem 1px 2px -1px hsl(0 0% 0% / 0.05);
-  --shadow:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05),
-    0rem 1px 2px -1px hsl(0 0% 0% / 0.05);
-  --shadow-md:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05),
-    0rem 2px 4px -1px hsl(0 0% 0% / 0.05);
-  --shadow-lg:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05),
-    0rem 4px 6px -1px hsl(0 0% 0% / 0.05);
-  --shadow-xl:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05),
-    0rem 8px 10px -1px hsl(0 0% 0% / 0.05);
+  --shadow-sm: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05), 0rem 1px 2px -1px hsl(0 0% 0% / 0.05);
+  --shadow: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05), 0rem 1px 2px -1px hsl(0 0% 0% / 0.05);
+  --shadow-md: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05), 0rem 2px 4px -1px hsl(0 0% 0% / 0.05);
+  --shadow-lg: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05), 0rem 4px 6px -1px hsl(0 0% 0% / 0.05);
+  --shadow-xl: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.05), 0rem 8px 10px -1px hsl(0 0% 0% / 0.05);
  --shadow-2xl: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.13);
  --tracking-normal: 0em;
 }

 .dark {
-  --background: oklch(0.227 0.012 270.8402);
+  --background: oklch(0.2270 0.0120 270.8402);
  --foreground: oklch(0.9067 0 0);
-  --card: oklch(0.263 0.0127 258.3724);
+  --card: oklch(0.2630 0.0127 258.3724);
  --card-foreground: oklch(0.9067 0 0);
-  --popover: oklch(0.263 0.0127 258.3724);
+  --popover: oklch(0.2630 0.0127 258.3724);
  --popover-foreground: oklch(0.9067 0 0);
-  --primary: oklch(0.5774 0.1248 263.377);
-  --primary-foreground: oklch(1 0 0);
+  --primary: oklch(0.5774 0.1248 263.3770);
+  --primary-foreground: oklch(1.0000 0 0);
  --secondary: oklch(0.7636 0.0866 239.8852);
  --secondary-foreground: oklch(0.2621 0.0095 248.1897);
  --muted: oklch(0.3006 0.0156 264.3078);
  --muted-foreground: oklch(0.7137 0.0192 261.3246);
  --accent: oklch(0.3006 0.0156 264.3078);
  --accent-foreground: oklch(0.9067 0 0);
-  --destructive: oklch(0.5915 0.202 21.2388);
+  --destructive: oklch(0.5915 0.2020 21.2388);
  --border: oklch(0.3451 0.0133 248.2124);
-  --input: oklch(0.263 0.0127 258.3724);
+  --input: oklch(0.2630 0.0127 258.3724);
  --ring: oklch(0.5502 0.1193 263.8209);
  --chart-1: oklch(0.5502 0.1193 263.8209);
  --chart-2: oklch(0.7499 0.0898 239.3977);
  --chart-3: oklch(0.4711 0.0998 264.0792);
  --chart-4: oklch(0.6689 0.0699 240.3096);
  --chart-5: oklch(0.5107 0.1098 263.6921);
-  --sidebar: oklch(0.227 0.012 270.8402);
+  --sidebar: oklch(0.2270 0.0120 270.8402);
  --sidebar-foreground: oklch(0.9067 0 0);
  --sidebar-primary: oklch(0.5502 0.1193 263.8209);
-  --sidebar-primary-foreground: oklch(1 0 0);
+  --sidebar-primary-foreground: oklch(1.0000 0 0);
  --sidebar-accent: oklch(0.3006 0.0156 264.3078);
  --sidebar-accent-foreground: oklch(0.9067 0 0);
  --sidebar-border: oklch(0.3451 0.0133 248.2124);
  --sidebar-ring: oklch(0.5502 0.1193 263.8209);
-  --destructive-foreground: oklch(1 0 0);
+  --destructive-foreground: oklch(1.0000 0 0);
  --radius: 0.5rem;
-  --font-sans: "Inter", sans-serif;
-  --font-serif: "Lora", serif;
-  --font-mono: "JetBrains Mono", monospace;
+  --font-sans: 'Inter', sans-serif;
+  --font-serif: 'Lora', serif;
+  --font-mono: 'JetBrains Mono', monospace;
  --shadow-color: #000000;
  --shadow-opacity: 0.3;
  --shadow-blur: 0.5rem;
@@ -185,21 +174,11 @@
  --spacing: 0.25rem;
  --shadow-2xs: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.15);
  --shadow-xs: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.15);
-  --shadow-sm:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.3),
-    0rem 1px 2px -1px hsl(0 0% 0% / 0.3);
-  --shadow:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.3),
-    0rem 1px 2px -1px hsl(0 0% 0% / 0.3);
-  --shadow-md:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.3),
-    0rem 2px 4px -1px hsl(0 0% 0% / 0.3);
-  --shadow-lg:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.3),
-    0rem 4px 6px -1px hsl(0 0% 0% / 0.3);
-  --shadow-xl:
-    0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.3),
-    0rem 8px 10px -1px hsl(0 0% 0% / 0.3);
+  --shadow-sm: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.30), 0rem 1px 2px -1px hsl(0 0% 0% / 0.30);
+  --shadow: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.30), 0rem 1px 2px -1px hsl(0 0% 0% / 0.30);
+  --shadow-md: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.30), 0rem 2px 4px -1px hsl(0 0% 0% / 0.30);
+  --shadow-lg: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.30), 0rem 4px 6px -1px hsl(0 0% 0% / 0.30);
+  --shadow-xl: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.30), 0rem 8px 10px -1px hsl(0 0% 0% / 0.30);
  --shadow-2xl: 0rem 0.1rem 0.5rem 0rem hsl(0 0% 0% / 0.75);
 }

@@ -212,7 +191,3 @@
    letter-spacing: var(--tracking-normal);
  }
 }
-
-[data-slot="dialog-overlay"] {
-  backdrop-filter: blur(3px);
-}
--- a/client/src/lib/axios.ts
+++ b/client/src/lib/axios.ts
@@ -1,44 +1,30 @@
-import type { AxiosRequestConfig } from 'axios';
-import axios, { AxiosError } from 'axios';
+import type { AxiosError } from 'axios';
+import axios from 'axios';
 import { router } from '@/lib/router';
-import { doRefreshToken, getRefreshToken, getToken, setRefreshToken, setToken } from './token';
+import { getToken, hasToken } from './token';

 export const axiosClient = axios.create({
-  baseURL: '/api/v1/',
+  baseURL: '/api/',
 });

 axiosClient.interceptors.request.use((config) => {
  const token = getToken();
  if (token !== null) {
-    config.headers = config.headers ?? {};
    config.headers.Authorization = `Bearer ${token}`;
  }
  return config;
 });

-type RetryConfig = AxiosRequestConfig & { _retry?: boolean };
-
 axiosClient.interceptors.response.use(undefined, async (error: AxiosError) => {
-  const originalRequest = error.config as RetryConfig | undefined;
-  if (!error.response || error.response.status !== 401 || !originalRequest) {
-    return Promise.reject(error);
-  }
-
-  if (error.response.status === 401 && getRefreshToken() !== null) {
-    try {
-      const maybeRefreshTokenValue = await doRefreshToken();
-      const { access_token, refresh_token } = maybeRefreshTokenValue.data;
-      originalRequest.headers = originalRequest.headers ?? {};
-      originalRequest.headers.Authorization = `Bearer ${access_token}`;
-      setToken(access_token);
-      setRefreshToken(refresh_token);
-      return await axiosClient(originalRequest);
-    }
-    catch (e) {
-      if (e instanceof AxiosError && e.status === 401) {
+  if (error.response && error?.response.status === 401) {
+    // TODO: refresh token
+    if (!hasToken()) {
      await router.navigate({ to: '/login' });
+      return;
+    }
+    if (error.config) {
+      return axiosClient(error.config);
+    }
+  }
  return Promise.reject(error);
-      }
-    }
-  }
 });
--- a/client/src/lib/token.ts
+++ b/client/src/lib/token.ts
@@ -1,5 +1,3 @@
-import axios from 'axios';
-
 export function setToken(token: string) {
  localStorage.setItem('token', token);
 }
@@ -15,20 +13,3 @@ export function removeToken() {
 export function hasToken() {
  return getToken() !== null;
 }
-
-export function setRefreshToken(refreshToken: string) {
-  localStorage.setItem('refreshToken', refreshToken);
-}
-
-export function getRefreshToken() {
-  return localStorage.getItem('refreshToken');
-}
-
-export function clearTokens() {
-  removeToken();
-  setRefreshToken('');
-}
-
-export async function doRefreshToken() {
-  return axios.post<{ access_token: string; refresh_token: string }>('/api/v1/auth/refresh', { refresh_token: getRefreshToken() });
-}
--- a/client/src/routeTree.gen.ts
+++ b/client/src/routeTree.gen.ts
@@ -9,16 +9,10 @@
 // Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.

 import { Route as rootRouteImport } from './routes/__root'
-import { Route as MagicLinkSentRouteImport } from './routes/magicLinkSent'
 import { Route as LoginRouteImport } from './routes/login'
 import { Route as SidebarLayoutRouteImport } from './routes/_sidebarLayout'
 import { Route as SidebarLayoutIndexRouteImport } from './routes/_sidebarLayout/index'

-const MagicLinkSentRoute = MagicLinkSentRouteImport.update({
-  id: '/magicLinkSent',
-  path: '/magicLinkSent',
-  getParentRoute: () => rootRouteImport,
-} as any)
 const LoginRoute = LoginRouteImport.update({
  id: '/login',
  path: '/login',
@@ -36,49 +30,33 @@ const SidebarLayoutIndexRoute = SidebarLayoutIndexRouteImport.update({

 export interface FileRoutesByFullPath {
  '/login': typeof LoginRoute
-  '/magicLinkSent': typeof MagicLinkSentRoute
  '/': typeof SidebarLayoutIndexRoute
 }
 export interface FileRoutesByTo {
  '/login': typeof LoginRoute
-  '/magicLinkSent': typeof MagicLinkSentRoute
  '/': typeof SidebarLayoutIndexRoute
 }
 export interface FileRoutesById {
  __root__: typeof rootRouteImport
  '/_sidebarLayout': typeof SidebarLayoutRouteWithChildren
  '/login': typeof LoginRoute
-  '/magicLinkSent': typeof MagicLinkSentRoute
  '/_sidebarLayout/': typeof SidebarLayoutIndexRoute
 }
 export interface FileRouteTypes {
  fileRoutesByFullPath: FileRoutesByFullPath
-  fullPaths: '/login' | '/magicLinkSent' | '/'
+  fullPaths: '/login' | '/'
  fileRoutesByTo: FileRoutesByTo
-  to: '/login' | '/magicLinkSent' | '/'
-  id:
-    | '__root__'
-    | '/_sidebarLayout'
-    | '/login'
-    | '/magicLinkSent'
-    | '/_sidebarLayout/'
+  to: '/login' | '/'
+  id: '__root__' | '/_sidebarLayout' | '/login' | '/_sidebarLayout/'
  fileRoutesById: FileRoutesById
 }
 export interface RootRouteChildren {
  SidebarLayoutRoute: typeof SidebarLayoutRouteWithChildren
  LoginRoute: typeof LoginRoute
-  MagicLinkSentRoute: typeof MagicLinkSentRoute
 }

 declare module '@tanstack/react-router' {
  interface FileRoutesByPath {
-    '/magicLinkSent': {
-      id: '/magicLinkSent'
-      path: '/magicLinkSent'
-      fullPath: '/magicLinkSent'
-      preLoaderRoute: typeof MagicLinkSentRouteImport
-      parentRoute: typeof rootRouteImport
-    }
    '/login': {
      id: '/login'
      path: '/login'
@@ -118,7 +96,6 @@ const SidebarLayoutRouteWithChildren = SidebarLayoutRoute._addFileChildren(
 const rootRouteChildren: RootRouteChildren = {
  SidebarLayoutRoute: SidebarLayoutRouteWithChildren,
  LoginRoute: LoginRoute,
-  MagicLinkSentRoute: MagicLinkSentRoute,
 }
 export const routeTree = rootRouteImport
  ._addFileChildren(rootRouteChildren)
--- a/client/src/routes/__root.tsx
+++ b/client/src/routes/__root.tsx
@@ -1,27 +1,10 @@
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
 import { createRootRoute, Outlet } from '@tanstack/react-router';
+import { TanStackRouterDevtools } from '@tanstack/react-router-devtools';
 import { ThemeProvider } from '@/components/theme-provider';
-import { Toaster } from '@/components/ui/sonner';
 import '@/index.css';

-const queryClient = new QueryClient({
-  defaultOptions: {
-    queries: {
-      retry: (failureCount, error: any) => {
-        // eslint-disable-next-line ts/no-unsafe-assignment
-        const status
-          // eslint-disable-next-line ts/no-unsafe-member-access
-          = error?.response?.status ?? error?.status;
-
-        if (status >= 400 && status < 500) {
-          return false;
-        }
-
-        return failureCount < 3;
-      },
-    },
-  },
-});
+const queryClient = new QueryClient();

 function RootLayout() {
  return (
@@ -31,7 +14,7 @@ function RootLayout() {
          <Outlet />
        </QueryClientProvider>
      </ThemeProvider>
-      <Toaster position="top-right" />
+      <TanStackRouterDevtools />
    </>
  );
 }
--- a/client/src/routes/_sidebarLayout/index.tsx
+++ b/client/src/routes/_sidebarLayout/index.tsx
@@ -1,13 +1,16 @@
 import { createFileRoute, redirect } from '@tanstack/react-router';
-import { CheckinCard } from '@/components/workbenchCards/checkin';
+import { SectionCards } from '@/components/section-cards';
 import { hasToken } from '@/lib/token';

 export const Route = createFileRoute('/_sidebarLayout/')({
  component: Index,
-  loader: async () => {
+  beforeLoad: async ({ location }) => {
    if (!hasToken()) {
      throw redirect({
        to: '/login',
+        search: {
+          redirect: location.href,
+        },
      });
    }
  },
@@ -16,13 +19,7 @@ export const Route = createFileRoute('/_sidebarLayout/')({
 function Index() {
  return (
    <div className="flex flex-col gap-4 py-4 md:gap-6 md:py-6">
-      {/* Section Cards */}
-      <div className="*:data-[slot=card]:from-primary/5 *:data-[slot=card]:to-card dark:*:data-[slot=card]:bg-card
-        grid grid-cols-1 gap-4 px-4 auto-rows-[minmax(175px,auto)] items-stretch
-        *:data-[slot=card]:bg-linear-to-t *:data-[slot=card]:shadow-xs lg:px-6 @xl/main:grid-cols-2 @5xl/main:grid-cols-4"
-      >
-        <CheckinCard />
-      </div>
+      <SectionCards />
    </div>
  );
 }
--- a/client/src/routes/login.tsx
+++ b/client/src/routes/login.tsx
@@ -1,35 +1,15 @@
-import { createFileRoute, Navigate } from '@tanstack/react-router';
-import { zodValidator } from '@tanstack/zod-adapter';
-import z from 'zod';
+import { createFileRoute } from '@tanstack/react-router';
 import { LoginForm } from '@/components/login-form';
-import { useValidateMagicLink } from '@/hooks/data/useValidateMagicLink';
-import { setRefreshToken, setToken } from '@/lib/token';
-
-const loginMagicLinkReceiverSchema = z.object({
-  ticket: z.string().optional(),
-});

 export const Route = createFileRoute('/login')({
  component: RouteComponent,
-  validateSearch: zodValidator(loginMagicLinkReceiverSchema),
 });

-function ReceiveMagicLinkComponent() {
-  const { ticket } = Route.useSearch();
-  const { data } = useValidateMagicLink(ticket!);
-
-  setToken(data.data.access_token);
-  setRefreshToken(data.data.refresh_token);
-
-  return <Navigate to="/" />;
-}
-
 function RouteComponent() {
-  const { ticket } = Route.useSearch();
  return (
    <div className="bg-background flex min-h-svh flex-col items-center justify-center gap-6 p-6 md:p-10">
      <div className="w-full max-w-sm">
-        {ticket === undefined ? <LoginForm /> : <ReceiveMagicLinkComponent />}
+        <LoginForm />
      </div>
    </div>
  );
--- a/client/src/routes/magicLinkSent.tsx
+++ b/client/src/routes/magicLinkSent.tsx
@@ -1,33 +0,0 @@
-import { createFileRoute, Navigate } from '@tanstack/react-router';
-import { zodValidator } from '@tanstack/zod-adapter';
-import z from 'zod';
-import NixOSLogo from '@/assets/nixos.svg?react';
-
-const paramsSchema = z.object({
-  email: z.string().optional(),
-});
-
-export const Route = createFileRoute('/magicLinkSent')({
-  component: RouteComponent,
-  validateSearch: zodValidator(paramsSchema),
-});
-
-function RouteComponent() {
-  const { email } = Route.useSearch();
-  return email !== undefined
-    ? (
-        <div className="
-      bg-background flex min-h-svh flex-row items-center justify-center gap-6 p-6 md:p-10"
-        >
-          <NixOSLogo className="size-12" />
-          <span
-            aria-hidden="true"
-            className="mx-2 inline-block h-6 w-px bg-current opacity-40"
-          />
-          登录链接已发送至
-          {' '}
-          {email}
-        </div>
-      )
-    : <Navigate to="/login" />;
-}
--- a/client/tsconfig.app.json
+++ b/client/tsconfig.app.json
@@ -12,7 +12,7 @@
    /* Bundler mode */
    "moduleResolution": "bundler",
    "paths": {
-      "@/*": ["./src/*"]
+      "@/*": ["./src/*"],
    },
    "types": ["vite/client", "vite-plugin-svgr/client"],
    "allowImportingTsExtensions": true,
@@ -26,7 +26,7 @@
    "verbatimModuleSyntax": true,
    "erasableSyntaxOnly": true,
    "skipLibCheck": true,
-    "noUncheckedSideEffectImports": true
+    "noUncheckedSideEffectImports": true,
  },
-  "include": ["src"]
+  "include": ["src"],
 }
--- a/client/vite.config.ts
+++ b/client/vite.config.ts
@@ -21,12 +21,4 @@ export default defineConfig({
      '@': path.resolve(__dirname, './src'),
    },
  },
-  server: {
-    proxy: {
-      '/api': 'http://10.0.0.10:8000',
-    },
-    host: '0.0.0.0',
-    port: 5173,
-    allowedHosts: ['test.sne.moe'],
-  },
 });
--- a/config.default.yaml
+++ b/config.default.yaml
@@ -1,5 +1,4 @@
 server:
-    application: example
    address: :8000
    external_url: https://example.com
    debug_mode: false
@@ -10,38 +9,11 @@ database:
    name: postgres
    username: postgres
    password: postgres
-cache:
-    hosts: ["127.0.0.1:6379"]
-    master: ""
-    username: ""
-    password: ""
-    db: 0
-search:
-    host: 127.0.0.1
-    api_key: ""
 email:
-    host:
-    port:
-    username:
-    password:
-    security:
-    insecure_skip_verify:
+    resend_api_key: abc
    from:
-    auth:
-    oauth2:
-        tenant_id:
-        client_id:
-        client_secret:
-        scope:
 secrets:
-    turnstile_secret: example
-    client_secret_key: aes_32_byte_string
-    kyc_info_key: aes_32_byte_string
+    jwt: something
+    turnstile: something
 ttl:
-    auth_code_ttl: 10m
-    access_ttl: 15s
-    refresh_ttl: 168h
-    checkin_code_ttl: 10m
-kyc:
-    ali_access_key_id: example
-    ali_access_key_secret: example
+    magic_link: 15000
--- a/config/types.go
+++ b/config/types.go
@@ -3,20 +3,16 @@ package config
 type config struct {
 	Server   server   `yaml:"server"`
 	Database database `yaml:"database"`
-	Cache    cache    `yaml:"cache"`
-	Search   search   `yaml:"search"`
 	Email    email    `yaml:"email"`
 	Secrets  secrets  `yaml:"secrets"`
 	TTL      ttl      `yaml:"ttl"`
-	KYC      kyc      `yaml:"kyc"`
 }

 type server struct {
-	Application string `yaml:"application"`
 	Address    string `yaml:"address"`
-	ExternalUrl string `yaml:"external_url"`
 	DebugMode  string `yaml:"debug_mode"`
 	FileLogger string `yaml:"file_logger"`
+	JwtSecret  string `yaml:"jwt_secret"`
 }

 type database struct {
@@ -27,52 +23,16 @@ type database struct {
 	Password string `yaml:"password"`
 }

-type cache struct {
-	Hosts    []string `yaml:"hosts"`
-	Master   string   `yaml:"master"`
-	Username string   `yaml:"username"`
-	Password string   `yaml:"passowrd"`
-	DB       int      `yaml:"db"`
-}
-
-type search struct {
-	Host   string `yaml:"host"`
-	ApiKey string `yaml:"api_key"`
-}
-
-type _email_oauth2 struct {
-	Tenantid     string `yaml:"tenant_id"`
-	ClientId     string `yaml:"client_id"`
-	ClientSecret string `yaml:"client_secret"`
-	Scope        string `yaml:"scope"`
-}
-
 type email struct {
-	Host               string        `yaml:"host"`
-	Port               string        `yaml:"port"`
-	Username           string        `yaml:"username"`
-	Password           string        `yaml:"password"`
-	Security           string        `yaml:"security"`
-	InsecureSkipVerify bool          `yaml:"insecure_skip_verify"`
+	ResendApiKey string `yaml:"resend_api_key"`
 	From         string `yaml:"from"`
-	Auth               string        `yaml:"auth"`
-	Oauth2             _email_oauth2 `yaml:"oauth2"`
 }

 type secrets struct {
-	TurnstileSecret string `yaml:"turnstile_secret"`
-	ClientSecretKey string `yaml:"client_secret_key"`
-	KycInfoKey      string `yaml:"kyc_info_key"`
+	jwt       string `yaml:"jwt"`
+	turnstile string `yaml:"turnstile"`
 }

 type ttl struct {
-	AuthCodeTTL    string `yaml:"auth_code_ttl"`
-	AccessTTL      string `yaml:"access_ttl"`
-	RefreshTTL     string `yaml:"refresh_ttl"`
-	CheckinCodeTTL string `yaml:"checkin_code_ttl"`
-}
-
-type kyc struct {
-	AliAccessKeyId     string `yaml:"ali_access_key_id"`
-	AliAccessKeySecret string `yaml:"ali_access_key_secret"`
+	magic_token string `yaml:"magin_token"`
 }
--- a/data/agenda.go
+++ b/data/agenda.go
@@ -1,13 +0,0 @@
-package data
-
-import "github.com/google/uuid"
-
-type Agenda struct {
-	Id          uint      `json:"id" gorm:"primarykey;autoIncrement"`
-	UUID        uuid.UUID `json:"uuid" gorm:"type:uuid;uniqueIndex;not null"`
-	AgendaId    uuid.UUID `json:"agenda_id" gorm:"type:uuid;uniqueIndex;not null"`
-	EventId     uuid.UUID `json:"event_id" gorm:"type:uuid;uniqueIndex:unique_event_user;not null"`
-	UserId      uuid.UUID `json:"user_id" gorm:"type:uuid;uniqueIndex:unique_event_user;not null"`
-	Name        string    `json:"name" gorm:"type:varchar(255);not null"`
-	Description string    `json:"description" gorm:"type:text;not null"`
-}
--- a/data/attendance.go
+++ b/data/attendance.go
@@ -1,265 +0,0 @@
-package data
-
-import (
-	"context"
-	"errors"
-	"fmt"
-	"math/rand"
-	"strings"
-	"time"
-
-	"github.com/google/uuid"
-	"github.com/meilisearch/meilisearch-go"
-	"github.com/spf13/viper"
-	"gorm.io/gorm"
-)
-
-type Attendance struct {
-	Id           uint      `json:"id" gorm:"primarykey;autoIncrement"`
-	UUID         uuid.UUID `json:"uuid" gorm:"type:uuid;uniqueIndex;not null"`
-	AttendanceId uuid.UUID `json:"attendance_id" gorm:"type:uuid;uniqueIndex;not null"`
-	EventId      uuid.UUID `json:"event_id" gorm:"type:uuid;uniqueIndex:unique_event_user;not null"`
-	UserId       uuid.UUID `json:"user_id" gorm:"type:uuid;uniqueIndex:unique_event_user;not null"`
-	Role         string    `json:"role" gorm:"type:varchar(255);not null"`
-	State        string    `json:"state" gorm:"type:varchar(255);not null"`
-	KycInfo      string    `json:"kyc_info" gorm:"type:text"`
-	CheckinAt    time.Time `json:"checkin_at"`
-}
-
-type AttendanceSearchDoc struct {
-	AttendanceId string    `json:"attendance_id"`
-	EventId      string    `json:"event_id"`
-	UserId       string    `json:"user_id"`
-	Role         string    `json:"role"`
-	CheckinAt    time.Time `json:"checkin_at"`
-}
-
-func (self *Attendance) GetAttendance(userId, eventId uuid.UUID) (*Attendance, error) {
-	var checkin Attendance
-
-	err := Database.
-		Where("user_id = ? AND event_id = ?", userId, eventId).
-		First(&checkin).Error
-
-	if err != nil {
-		if err == gorm.ErrRecordNotFound {
-			return nil, nil
-		}
-		return nil, err
-	}
-
-	return &checkin, err
-}
-
-type AttendanceUsers struct {
-	UserId    uuid.UUID `json:"user_id"`
-	Role      string    `json:"role"`
-	CheckinAt time.Time `json:"checkin_at"`
-}
-
-func (self *Attendance) GetUsersByEventID(eventID uuid.UUID) (*[]AttendanceUsers, error) {
-	var result []AttendanceUsers
-
-	err := Database.
-		Model(&Attendance{}).
-		Select("user_id, checkin_at").
-		Where("event_id = ?", eventID).
-		Order("checkin_at ASC").
-		Scan(&result).Error
-
-	return &result, err
-}
-
-type AttendanceEvent struct {
-	EventId   uuid.UUID `json:"event_id"`
-	CheckinAt time.Time `json:"checkin_at"`
-}
-
-func (self *Attendance) GetEventsByUserID(userID uuid.UUID) (*[]AttendanceEvent, error) {
-	var result []AttendanceEvent
-
-	err := Database.
-		Model(&Attendance{}).
-		Select("event_id, checkin_at").
-		Where("user_id = ?", userID).
-		Order("checkin_at ASC").
-		Scan(&result).Error
-
-	return &result, err
-}
-
-func (self *Attendance) Create() error {
-	self.UUID = uuid.New()
-	self.AttendanceId = uuid.New()
-
-	// DB transaction for strong consistency
-	err := Database.Transaction(func(tx *gorm.DB) error {
-		if err := tx.Create(&self).Error; err != nil {
-			return err
-		}
-		return nil
-	})
-	if err != nil {
-		return err
-	}
-
-	if err := self.UpdateSearchIndex(); err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func (self *Attendance) Update(attendanceId uuid.UUID, checkinTime *time.Time) (*Attendance, error) {
-	var attendance Attendance
-
-	err := Database.Transaction(func(tx *gorm.DB) error {
-		// Lock the row for update
-		if err := tx.
-			Where("attendance_id = ?", attendanceId).
-			First(&attendance).Error; err != nil {
-			return err
-		}
-
-		updates := map[string]any{}
-
-		if checkinTime != nil {
-			updates["checkin_at"] = *checkinTime
-		}
-
-		if len(updates) == 0 {
-			return nil
-		}
-
-		if err := tx.
-			Model(&attendance).
-			Updates(updates).Error; err != nil {
-			return err
-		}
-
-		// Reload to ensure struct is up to date
-		return tx.
-			Where("attendance_id = ?", attendanceId).
-			First(&attendance).Error
-	})
-
-	if err != nil {
-		return nil, err
-	}
-
-	// Sync to MeiliSearch (eventual consistency)
-	if err := attendance.UpdateSearchIndex(); err != nil {
-		return nil, err
-	}
-
-	return &attendance, nil
-}
-
-func (self *Attendance) SearchUsersByEvent(eventID string) (*meilisearch.SearchResponse, error) {
-	index := MeiliSearch.Index("attendance")
-
-	return index.Search("", &meilisearch.SearchRequest{
-		Filter: "event_id = \"" + eventID + "\"",
-		Sort:   []string{"checkin_at:asc"},
-	})
-}
-
-func (self *Attendance) SearchEventsByUser(userID string) (*meilisearch.SearchResponse, error) {
-	index := MeiliSearch.Index("attendance")
-
-	return index.Search("", &meilisearch.SearchRequest{
-		Filter: "user_id = \"" + userID + "\"",
-		Sort:   []string{"checkin_at:asc"},
-	})
-}
-
-func (self *Attendance) UpdateSearchIndex() error {
-	doc := AttendanceSearchDoc{
-		AttendanceId: self.AttendanceId.String(),
-		EventId:      self.EventId.String(),
-		UserId:       self.UserId.String(),
-		CheckinAt:    self.CheckinAt,
-	}
-
-	index := MeiliSearch.Index("attendance")
-
-	primaryKey := "attendance_id"
-	opts := &meilisearch.DocumentOptions{
-		PrimaryKey: &primaryKey,
-	}
-
-	if _, err := index.UpdateDocuments([]AttendanceSearchDoc{doc}, opts); err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func (self *Attendance) DeleteSearchIndex() error {
-	index := MeiliSearch.Index("attendance")
-	_, err := index.DeleteDocument(self.AttendanceId.String(), nil)
-	return err
-}
-
-func (self *Attendance) GenCheckinCode(eventId uuid.UUID) (*string, error) {
-	ctx := context.Background()
-	ttl := viper.GetDuration("ttl.checkin_code_ttl")
-	rng := rand.New(rand.NewSource(time.Now().UnixNano()))
-
-	for {
-		code := fmt.Sprintf("%06d", rng.Intn(900000)+100000)
-		ok, err := Redis.SetNX(
-			ctx,
-			"checkin_code:"+code,
-			"user_id:"+self.UserId.String()+":event_id:"+eventId.String(),
-			ttl,
-		).Result()
-		if err != nil {
-			return nil, err
-		}
-		if ok {
-			return &code, nil
-		}
-	}
-}
-
-func (self *Attendance) VerifyCheckinCode(checkinCode string) error {
-	ctx := context.Background()
-
-	val, err := Redis.Get(ctx, "checkin_code:"+checkinCode).Result()
-	if err != nil {
-		return errors.New("invalid or expired checkin code")
-	}
-
-	// Expected format: user_id:<uuid>:event_id:<uuid>
-	parts := strings.Split(val, ":")
-	if len(parts) != 4 {
-		return errors.New("invalid checkin code format")
-	}
-
-	userIdStr := parts[1]
-	eventIdStr := parts[3]
-
-	userId, err := uuid.Parse(userIdStr)
-	if err != nil {
-		return err
-	}
-
-	eventId, err := uuid.Parse(eventIdStr)
-	if err != nil {
-		return err
-	}
-
-	attendanceData, err := self.GetAttendance(userId, eventId)
-	if err != nil {
-		return err
-	}
-
-	time := time.Now()
-	_, err = self.Update(attendanceData.AttendanceId, &time)
-	if err != nil {
-		return err
-	}
-
-	return nil
-}
--- a/data/client.go
+++ b/data/client.go
@@ -1,91 +0,0 @@
-package data
-
-import (
-	"crypto/rand"
-	"encoding/base64"
-	"encoding/json"
-	"errors"
-	"nixcn-cms/internal/cryptography"
-	"strings"
-
-	"github.com/google/uuid"
-	"github.com/spf13/viper"
-	"gorm.io/datatypes"
-)
-
-type Client struct {
-	Id           uint           `json:"id" gorm:"primaryKey;autoIncrement"`
-	UUID         uuid.UUID      `json:"uuid" gorm:"type:uuid;uniqueIndex;not null"`
-	ClientId     string         `json:"client_id" gorm:"type:varchar(255);uniqueIndex;not null"`
-	ClientSecret string         `json:"client_secret" gorm:"type:varchar(255);not null"`
-	ClientName   string         `json:"client_name" gorm:"type:varchar(255);uniqueIndex;not null"`
-	RedirectUri  datatypes.JSON `json:"redirect_uri" gorm:"type:json;not null"`
-}
-
-func (self *Client) GetClientByClientId(clientId string) (*Client, error) {
-	var client Client
-	if err := Database.
-		Where("client_id = ?", clientId).
-		First(&client).Error; err != nil {
-		return nil, err
-	}
-	return &client, nil
-}
-
-func (self *Client) GetDecryptedSecret() (string, error) {
-	secretKey := viper.GetString("secrets.client_secret_key")
-	secret, err := cryptography.AESCBCDecrypt(self.ClientSecret, []byte(secretKey))
-	return string(secret), err
-}
-
-type ClientParams struct {
-	ClientId    string
-	ClientName  string
-	RedirectUri []string
-}
-
-func (self *Client) Create(params *ClientParams) (*Client, error) {
-	jsonRedirectUri, err := json.Marshal(params.RedirectUri)
-	if err != nil {
-		return nil, err
-	}
-
-	encKey := viper.GetString("secrets.client_secret_key")
-	b := make([]byte, 32)
-	if _, err := rand.Read(b); err != nil {
-		return nil, err
-	}
-	clientSecret := base64.RawURLEncoding.EncodeToString(b)
-	encryptedSecret, err := cryptography.AESCBCEncrypt([]byte(clientSecret), []byte(encKey))
-	if err != nil {
-		return nil, err
-	}
-
-	client := &Client{
-		UUID:         uuid.New(),
-		ClientId:     params.ClientId,
-		ClientSecret: encryptedSecret,
-		ClientName:   params.ClientName,
-		RedirectUri:  jsonRedirectUri,
-	}
-
-	if err := Database.Create(&client).Error; err != nil {
-		return nil, err
-	}
-
-	return client, nil
-}
-
-func (self *Client) ValidateRedirectURI(redirectURI string) error {
-	var uris []string
-	if err := json.Unmarshal(self.RedirectUri, &uris); err != nil {
-		return err
-	}
-
-	for _, prefix := range uris {
-		if strings.HasPrefix(redirectURI, prefix) {
-			return nil
-		}
-	}
-	return errors.New("redirect uri not match")
-}
--- a/data/data.go
+++ b/data/data.go
@@ -3,16 +3,11 @@ package data
 import (
 	"nixcn-cms/data/drivers"

-	"github.com/meilisearch/meilisearch-go"
-	"github.com/redis/go-redis/v9"
 	log "github.com/sirupsen/logrus"
 	"github.com/spf13/viper"
-	"gorm.io/gorm"
 )

-var Database *gorm.DB
-var Redis redis.UniversalClient
-var MeiliSearch meilisearch.ServiceManager
+var Database *drivers.DBClient

 func Init() {
 	// Init database
@@ -35,32 +30,10 @@ func Init() {
 	}

 	// Auto migrate
-	err = db.AutoMigrate(&User{}, &Event{}, &Attendance{}, &Client{})
+	err = db.DB.AutoMigrate(&User{})
 	if err != nil {
 		log.Error("[Database] Error migrating database: ", err)
 	}
+
 	Database = db
-
-	// Init redis conection
-	rdbAddress := viper.GetStringSlice("cache.hosts")
-	rDSN := drivers.RedisDSN{
-		Hosts:    rdbAddress,
-		Master:   viper.GetString("cache.master"),
-		Username: viper.GetString("cache.username"),
-		Password: viper.GetString("cache.password"),
-		DB:       viper.GetInt("cache.db"),
-	}
-	rdb, err := drivers.Redis(rDSN)
-	if err != nil {
-		log.Fatal("[Redis] Error connecting to Redis: ", err)
-	}
-	Redis = rdb
-
-	// Init meilisearch
-	mDSN := drivers.MeiliDSN{
-		Host:   viper.GetString("search.host"),
-		ApiKey: viper.GetString("search.api_key"),
-	}
-	mdb := drivers.MeiliSearch(mDSN)
-	MeiliSearch = mdb
 }
--- a/data/drivers/meilisearch.go
+++ b/data/drivers/meilisearch.go
@@ -1,13 +0,0 @@
-package drivers
-
-import "github.com/meilisearch/meilisearch-go"
-
-func MeiliSearch(dsn MeiliDSN) meilisearch.ServiceManager {
-	return meilisearch.New(dsn.Host,
-		meilisearch.WithAPIKey(dsn.ApiKey),
-		meilisearch.WithContentEncoding(
-			meilisearch.GzipEncoding,
-			meilisearch.BestCompression,
-		),
-	)
-}
--- a/data/drivers/postgres.go
+++ b/data/drivers/postgres.go
@@ -16,9 +16,9 @@ func SplitHostPort(url string) (host, port string) {
 	return split[0], split[1]
 }

-func Postgres(dsn ExternalDSN) (*gorm.DB, error) {
+func Postgres(dsn ExternalDSN) (*DBClient, error) {
 	host, port := SplitHostPort(dsn.Host)
 	conn := "host=" + host + " user=" + dsn.Username + " password=" + dsn.Password + " dbname=" + dsn.Name + " port=" + port + " sslmode=disable TimeZone=" + config.TZ()
 	db, err := gorm.Open(postgres.Open(conn), &gorm.Config{})
-	return db, err
+	return &DBClient{db}, err
 }
--- a/data/drivers/redis.go
+++ b/data/drivers/redis.go
@@ -1,22 +0,0 @@
-package drivers
-
-import (
-	"context"
-
-	"github.com/redis/go-redis/v9"
-)
-
-func Redis(dsn RedisDSN) (redis.UniversalClient, error) {
-	// Connect to Redis
-	rdb := redis.NewUniversalClient(&redis.UniversalOptions{
-		Addrs:      dsn.Hosts,
-		MasterName: dsn.Master,
-		Username:   dsn.Username,
-		Password:   dsn.Password,
-		DB:         dsn.DB,
-	})
-	ctx := context.Background()
-	// Ping Redis
-	_, err := rdb.Ping(ctx).Result()
-	return rdb, err
-}
--- a/data/drivers/types.go
+++ b/data/drivers/types.go
@@ -1,5 +1,9 @@
 package drivers

+import (
+	"gorm.io/gorm"
+)
+
 type ExternalDSN struct {
 	Host     string
 	Name     string
@@ -7,15 +11,6 @@ type ExternalDSN struct {
 	Password string
 }

-type RedisDSN struct {
-	Hosts    []string
-	Master   string
-	Username string
-	Password string
-	DB       int
-}
-
-type MeiliDSN struct {
-	Host   string
-	ApiKey string
+type DBClient struct {
+	*gorm.DB
 }
--- a/data/event.go
+++ b/data/event.go
@@ -1,157 +0,0 @@
-package data
-
-import (
-	"time"
-
-	"github.com/go-viper/mapstructure/v2"
-	"github.com/google/uuid"
-	"github.com/meilisearch/meilisearch-go"
-	"gorm.io/gorm"
-)
-
-type Event struct {
-	Id          uint      `json:"id" gorm:"primarykey;autoincrement"`
-	UUID        uuid.UUID `json:"uuid" gorm:"type:uuid;uniqueIndex;not null"`
-	EventId     uuid.UUID `json:"event_id" gorm:"type:uuid;uniqueIndex;not null"`
-	Name        string    `json:"name" gorm:"type:varchar(255);index;not null"`
-	Type        string    `json:"type" gotm:"type:varchar(255);index;not null"`
-	Description string    `json:"description" gorm:"type:text;not null"`
-	StartTime   time.Time `json:"start_time" gorm:"index"`
-	EndTime     time.Time `json:"end_time" gorm:"index"`
-	Owner       uuid.UUID `json:"owner" gorm:"type:uuid;index;not null"`
-	EnableKYC   bool      `json:"enable_kyc" gorm:"not null"`
-}
-
-type EventSearchDoc struct {
-	EventId     string    `json:"event_id"`
-	Name        string    `json:"name"`
-	Type        string    `json:"type"`
-	Description string    `json:"description"`
-	StartTime   time.Time `json:"start_time"`
-	EndTime     time.Time `json:"end_time"`
-}
-
-func (self *Event) GetEventById(eventId uuid.UUID) (*Event, error) {
-	var event Event
-
-	err := Database.
-		Where("event_id = ?", eventId).
-		First(&event).Error
-
-	if err != nil {
-		if err == gorm.ErrRecordNotFound {
-			return nil, nil
-		}
-		return nil, err
-	}
-
-	return &event, nil
-}
-
-func (self *Event) UpdateEventById(eventId uuid.UUID) error {
-	// DB transaction
-	if err := Database.Transaction(func(tx *gorm.DB) error {
-		// Update by business key
-		if err := tx.
-			Model(&Event{}).
-			Where("event_id = ?", eventId).
-			Updates(self).Error; err != nil {
-			return err
-		}
-
-		// Reload to ensure struct is fresh
-		return tx.
-			Where("event_id = ?", eventId).
-			First(self).Error
-	}); err != nil {
-		return err
-	}
-
-	// Sync search index
-	if err := self.UpdateSearchIndex(); err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func (self *Event) Create() error {
-	self.UUID = uuid.New()
-	self.EventId = uuid.New()
-
-	// DB transaction only
-	if err := Database.Transaction(func(tx *gorm.DB) error {
-		if err := tx.Create(self).Error; err != nil {
-			return err
-		}
-		return nil
-	}); err != nil {
-		return err
-	}
-
-	// Search index (eventual consistency)
-	if err := self.UpdateSearchIndex(); err != nil {
-		// TODO: async retry / log
-		return err
-	}
-
-	return nil
-}
-
-func (self *Event) GetFullTable() (*[]Event, error) {
-	var events []Event
-	err := Database.Find(&events).Error
-	if err != nil {
-		return nil, err
-	}
-	return &events, err
-}
-
-func (self *Event) FastListEvents(limit, offset int64) (*[]EventSearchDoc, error) {
-	index := MeiliSearch.Index("event")
-
-	// Fast read from MeiliSearch (no DB involved)
-	result, err := index.Search("", &meilisearch.SearchRequest{
-		Limit:  limit,
-		Offset: offset,
-	})
-	if err != nil {
-		return nil, err
-	}
-
-	var list []EventSearchDoc
-	if err := mapstructure.Decode(result.Hits, &list); err != nil {
-		return nil, err
-	}
-
-	return &list, nil
-}
-
-func (self *Event) UpdateSearchIndex() error {
-	doc := EventSearchDoc{
-		EventId:     self.EventId.String(),
-		Name:        self.Name,
-		Type:        self.Type,
-		Description: self.Description,
-		StartTime:   self.StartTime,
-		EndTime:     self.EndTime,
-	}
-	index := MeiliSearch.Index("event")
-
-	primaryKey := "event_id"
-	opts := &meilisearch.DocumentOptions{
-		PrimaryKey: &primaryKey,
-	}
-
-	if _, err := index.UpdateDocuments([]EventSearchDoc{doc}, opts); err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func (self *Event) DeleteSearchIndex() error {
-	index := MeiliSearch.Index("event")
-	_, err := index.DeleteDocument(self.EventId.String(), nil)
-	return err
-}
--- a/data/user.go
+++ b/data/user.go
@@ -1,159 +1,38 @@
 package data

-import (
-	"github.com/go-viper/mapstructure/v2"
-	"github.com/google/uuid"
-	"github.com/meilisearch/meilisearch-go"
-	"gorm.io/gorm"
-)
+import "github.com/google/uuid"

 type User struct {
 	Id       uint      `json:"id" gorm:"primarykey;autoincrement"`
 	UUID     uuid.UUID `json:"uuid" gorm:"type:uuid;uniqueindex;not null"`
-	UserId          uuid.UUID `json:"user_id" gorm:"type:uuid;uniqueindex;not null"`
-	Email           string    `json:"email" gorm:"type:varchar(255);uniqueindex;not null"`
-	Username        string    `json:"username" gorm:"type:varchar(255);uniqueindex;not null"`
-	Nickname        string    `json:"nickname" gorm:"type:text"`
-	Subtitle        string    `json:"subtitle" gorm:"type:text"`
-	Avatar          string    `json:"avatar" gorm:"type:text"`
-	Bio             string    `json:"bio" gorm:"type:text"`
-	PermissionLevel uint      `json:"permission_level" gorm:"default:10;not null"`
-	AllowPublic     bool      `json:"allow_public" gorm:"default:false;not null"`
+	UserId   uuid.UUID `json:"user_id" gorm:"size:8;uniqueindex;not null"`
+	Email    string    `json:"email" gorm:"uniqueindex;not null"`
+	Nickname string    `json:"nickname" gorm:"not null"`
+	Type     string    `json:"type" gorm:"not null"`
+	Subtitle string    `json:"subtitle" gorm:"not null"`
+	Avatar   string    `json:"avatar" gorm:"not null"`
+	Checkin  bool      `json:"checkin" gorm:"not null"`
 }

-type UserSearchDoc struct {
-	UserId   string `json:"user_id"`
-	Email    string `json:"email"`
-	Username string `json:"username"`
-	Type     string `json:"type"`
-	Nickname string `json:"nickname"`
-	Subtitle string `json:"subtitle"`
-	Avatar   string `json:"avatar"`
-}
-
-func (self *User) GetByEmail(email string) (*User, error) {
-	var user User
-
-	err := Database.
-		Where("email = ?", email).
-		First(&user).Error
-
-	if err != nil {
-		if err == gorm.ErrRecordNotFound {
-			return nil, nil
-		}
-		return nil, err
-	}
-
-	return &user, nil
-}
-
-func (self *User) GetByUserId(userId uuid.UUID) (*User, error) {
-	var user User
-
-	err := Database.
-		Where("user_id = ?", userId).
-		First(&user).Error
-
-	if err != nil {
-		if err == gorm.ErrRecordNotFound {
-			return nil, nil
-		}
-		return nil, err
-	}
-
-	return &user, err
-}
-
-func (self *User) Create() error {
-	self.UUID = uuid.New()
-	self.UserId = uuid.New()
-
-	// DB transaction only
-	if err := Database.Transaction(func(tx *gorm.DB) error {
-		if err := tx.Create(self).Error; err != nil {
+func (self *User) GetByEmail(email string) error {
+	if err := Database.Where("email = ?", email).First(&self).Error; err != nil {
 		return err
 	}
 	return nil
-	}); err != nil {
-		return err
 }

-	// Search index (eventual consistency)
-	if err := self.UpdateSearchIndex(); err != nil {
-		// TODO: async retry / log
-		return err
-	}
-
-	return nil
-}
-
-func (self *User) UpdateByUserID(userId uuid.UUID) error {
-	return Database.Transaction(func(tx *gorm.DB) error {
-		if err := tx.Model(&User{}).Where("user_id = ?", userId).Updates(&self).Error; err != nil {
+func (self *User) GetByUserId(userId string) error {
+	if err := Database.Where("user_id = ?", userId).First(&self).Error; err != nil {
 		return err
 	}
 	return nil
-	})
 }

-func (self *User) GetFullTable() (*[]User, error) {
-	var users []User
-	err := Database.Find(&users).Error
-	if err != nil {
-		return nil, err
-	}
-	return &users, nil
-}
-
-func (self *User) FastListUsers(limit, offset int64) (*[]UserSearchDoc, error) {
-	index := MeiliSearch.Index("user")
-
-	// Fast read from MeiliSearch, no DB involved
-	result, err := index.Search("", &meilisearch.SearchRequest{
-		Limit:  limit,
-		Offset: offset,
-	})
-	if err != nil {
-		return nil, err
-	}
-
-	var list []UserSearchDoc
-	if err := mapstructure.Decode(result.Hits, &list); err != nil {
-		return nil, err
-	}
-
-	return &list, nil
-}
-
-func (self *User) UpdateSearchIndex() error {
-	doc := UserSearchDoc{
-		UserId:   self.UserId.String(),
-		Email:    self.Email,
-		Username: self.Username,
-		Nickname: self.Nickname,
-		Subtitle: self.Subtitle,
-		Avatar:   self.Avatar,
-	}
-	index := MeiliSearch.Index("user")
-
-	primaryKey := "user_id"
-	opts := &meilisearch.DocumentOptions{
-		PrimaryKey: &primaryKey,
-	}
-
-	if _, err := index.UpdateDocuments(
-		[]UserSearchDoc{doc},
-		opts,
-	); err != nil {
+func (self *User) SetCheckinState(email string, state bool) error {
+	if err := Database.Where("email = ?", email).First(&self).Error; err != nil {
 		return err
 	}
-
+	self.Checkin = state
+	Database.Save(&self)
 	return nil
 }
-
-func (self *User) DeleteSearchIndex() error {
-	index := MeiliSearch.Index("user")
-	_, err := index.DeleteDocument(self.UserId.String(), nil)
-	return err
-}
--- a/devenv.nix
+++ b/devenv.nix
@@ -1,14 +1,12 @@
 { pkgs, config, ... }:

 {
-  process.managers.process-compose = {
-    settings.log_level = "info";
-  };
+  env.GREET = "devenv";

  packages = [
    pkgs.git
+    pkgs.bun
    pkgs.just
-    pkgs.watchexec
  ];

  dotenv = {
@@ -19,42 +17,31 @@
    ];
  };

-  languages = {
-    go = {
+  languages.go = {
    enable = true;
    version = "1.25.5";
  };
-    javascript.enable = true;
-    javascript.bun.enable = true;
-  };

-  processes = {
-    vite = {
-      exec = "bun run dev";
-      cwd = "./client";
-    };
-    backend.exec = "just dev-back";
-  };
-
-  services = {
-    caddy = {
+  services.caddy = {
    enable = true;
    dataDir = "${config.env.DEVENV_STATE}/caddy";
    config = ''
+      {
+          debug
+      }
      :8080 {
-          handle /api/* {
-            reverse_proxy 127.0.0.1:8000
-          }
-          handle {
-            reverse_proxy 127.0.0.1:5173
-          }
+          root * ${config.env.DEVENV_ROOT}/.outputs/static
+          file_server
+          reverse_proxy /api/v1/* http://127.0.0.1:8000
      }
    '';
  };
-    redis = {
+
+  services.redis = {
    enable = true;
  };
-    postgres = {
+
+  services.postgres = {
    enable = true;
    createDatabase = true;
    listen_addresses = "127.0.0.1";
@@ -66,8 +53,4 @@
      }
    ];
  };
-    meilisearch = {
-      enable = true;
-    };
-  };
 }
--- a/go.mod
+++ b/go.mod
@@ -3,56 +3,29 @@ module nixcn-cms
 go 1.25.5

 require (
-	github.com/alibabacloud-go/cloudauth-20190307/v4 v4.12.1
-	github.com/alibabacloud-go/darabonba-openapi/v2 v2.1.13
-	github.com/alibabacloud-go/tea v1.3.13
-	github.com/alibabacloud-go/tea-utils/v2 v2.0.7
-	github.com/aliyun/credentials-go v1.4.5
-	github.com/gin-gonic/gin v1.11.0
-	github.com/go-viper/mapstructure/v2 v2.4.0
-	github.com/golang-jwt/jwt/v5 v5.3.0
-	github.com/google/uuid v1.6.0
-	github.com/meilisearch/meilisearch-go v0.35.0
-	github.com/redis/go-redis/v9 v9.17.2
-	github.com/sirupsen/logrus v1.9.3
-	github.com/spf13/viper v1.21.0
-	golang.org/x/crypto v0.46.0
-	golang.org/x/oauth2 v0.34.0
-	gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df
-	gorm.io/datatypes v1.2.7
-	gorm.io/driver/postgres v1.6.0
-	gorm.io/gorm v1.31.1
-)
-
-require (
-	filippo.io/edwards25519 v1.1.0 // indirect
-	github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.5 // indirect
-	github.com/alibabacloud-go/debug v1.0.1 // indirect
-	github.com/alibabacloud-go/openapi-util v0.1.1 // indirect
-	github.com/andybalholm/brotli v1.1.1 // indirect
 	github.com/bytedance/gopkg v0.1.3 // indirect
 	github.com/bytedance/sonic v1.14.2 // indirect
 	github.com/bytedance/sonic/loader v0.4.0 // indirect
-	github.com/cespare/xxhash/v2 v2.3.0 // indirect
-	github.com/clbanning/mxj/v2 v2.7.0 // indirect
 	github.com/cloudwego/base64x v0.1.6 // indirect
-	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/gabriel-vasile/mimetype v1.4.12 // indirect
 	github.com/gin-contrib/sse v1.1.0 // indirect
+	github.com/gin-gonic/gin v1.11.0 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
 	github.com/go-playground/validator/v10 v10.29.0 // indirect
-	github.com/go-sql-driver/mysql v1.8.1 // indirect
+	github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
 	github.com/goccy/go-json v0.10.5 // indirect
 	github.com/goccy/go-yaml v1.19.1 // indirect
-	github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
+	github.com/golang-jwt/jwt/v5 v5.3.0 // indirect
+	github.com/google/uuid v1.6.0 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
 	github.com/jackc/pgx/v5 v5.6.0 // indirect
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
+	github.com/joho/godotenv v1.5.1 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/leodido/go-urn v1.4.0 // indirect
@@ -63,23 +36,26 @@ require (
 	github.com/quic-go/qpack v0.6.0 // indirect
 	github.com/quic-go/quic-go v0.57.1 // indirect
 	github.com/sagikazarmark/locafero v0.11.0 // indirect
+	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
 	github.com/spf13/afero v1.15.0 // indirect
 	github.com/spf13/cast v1.10.0 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
+	github.com/spf13/viper v1.21.0 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
-	github.com/tjfoc/gmsm v1.4.1 // indirect
 	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
 	github.com/ugorji/go/codec v1.3.1 // indirect
 	go.uber.org/mock v0.6.0 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/arch v0.23.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
+	golang.org/x/mod v0.31.0 // indirect
 	golang.org/x/net v0.48.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.39.0 // indirect
 	golang.org/x/text v0.32.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
-	gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
-	gopkg.in/ini.v1 v1.67.0 // indirect
-	gorm.io/driver/mysql v1.5.6 // indirect
+	gorm.io/driver/postgres v1.6.0 // indirect
+	gorm.io/gorm v1.31.1 // indirect
 )
--- a/go.sum
+++ b/go.sum
@@ -1,85 +1,13 @@
-cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
-filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
-filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
-github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
-github.com/alibabacloud-go/alibabacloud-gateway-pop v0.0.6 h1:eIf+iGJxdU4U9ypaUfbtOWCsZSbTb8AUHvyPrxu6mAA=
-github.com/alibabacloud-go/alibabacloud-gateway-pop v0.0.6/go.mod h1:4EUIoxs/do24zMOGGqYVWgw0s9NtiylnJglOeEB5UJo=
-github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.4/go.mod h1:sCavSAvdzOjul4cEqeVtvlSaSScfNsTQ+46HwlTL1hc=
-github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.5 h1:zE8vH9C7JiZLNJJQ5OwjU9mSi4T9ef9u3BURT6LCLC8=
-github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.5/go.mod h1:tWnyE9AjF8J8qqLk645oUmVUnFybApTQWklQmi5tY6g=
-github.com/alibabacloud-go/cloudauth-20190307/v4 v4.12.1 h1:bVUYai/CnqhFMcofU8TsJGnZEf9zCB1WakLxh0zmpjQ=
-github.com/alibabacloud-go/cloudauth-20190307/v4 v4.12.1/go.mod h1:m3NrP7nlncob5/2ATBk0thsZAozpDy/+vUG4ZuXwdR8=
-github.com/alibabacloud-go/darabonba-array v0.1.0 h1:vR8s7b1fWAQIjEjWnuF0JiKsCvclSRTfDzZHTYqfufY=
-github.com/alibabacloud-go/darabonba-array v0.1.0/go.mod h1:BLKxr0brnggqOJPqT09DFJ8g3fsDshapUD3C3aOEFaI=
-github.com/alibabacloud-go/darabonba-encode-util v0.0.2 h1:1uJGrbsGEVqWcWxrS9MyC2NG0Ax+GpOM5gtupki31XE=
-github.com/alibabacloud-go/darabonba-encode-util v0.0.2/go.mod h1:JiW9higWHYXm7F4PKuMgEUETNZasrDM6vqVr/Can7H8=
-github.com/alibabacloud-go/darabonba-map v0.0.2 h1:qvPnGB4+dJbJIxOOfawxzF3hzMnIpjmafa0qOTp6udc=
-github.com/alibabacloud-go/darabonba-map v0.0.2/go.mod h1:28AJaX8FOE/ym8OUFWga+MtEzBunJwQGceGQlvaPGPc=
-github.com/alibabacloud-go/darabonba-openapi/v2 v2.1.13 h1:Q00FU3H94Ts0ZIHDmY+fYGgB7dV9D/YX6FGsgorQPgw=
-github.com/alibabacloud-go/darabonba-openapi/v2 v2.1.13/go.mod h1:lxFGfobinVsQ49ntjpgWghXmIF0/Sm4+wvBJ1h5RtaE=
-github.com/alibabacloud-go/darabonba-signature-util v0.0.7 h1:UzCnKvsjPFzApvODDNEYqBHMFt1w98wC7FOo0InLyxg=
-github.com/alibabacloud-go/darabonba-signature-util v0.0.7/go.mod h1:oUzCYV2fcCH797xKdL6BDH8ADIHlzrtKVjeRtunBNTQ=
-github.com/alibabacloud-go/darabonba-string v1.0.2 h1:E714wms5ibdzCqGeYJ9JCFywE5nDyvIXIIQbZVFkkqo=
-github.com/alibabacloud-go/darabonba-string v1.0.2/go.mod h1:93cTfV3vuPhhEwGGpKKqhVW4jLe7tDpo3LUM0i0g6mA=
-github.com/alibabacloud-go/debug v0.0.0-20190504072949-9472017b5c68/go.mod h1:6pb/Qy8c+lqua8cFpEy7g39NRRqOWc3rOwAy8m5Y2BY=
-github.com/alibabacloud-go/debug v1.0.0/go.mod h1:8gfgZCCAC3+SCzjWtY053FrOcd4/qlH6IHTI4QyICOc=
-github.com/alibabacloud-go/debug v1.0.1 h1:MsW9SmUtbb1Fnt3ieC6NNZi6aEwrXfDksD4QA6GSbPg=
-github.com/alibabacloud-go/debug v1.0.1/go.mod h1:8gfgZCCAC3+SCzjWtY053FrOcd4/qlH6IHTI4QyICOc=
-github.com/alibabacloud-go/endpoint-util v1.1.0 h1:r/4D3VSw888XGaeNpP994zDUaxdgTSHBbVfZlzf6b5Q=
-github.com/alibabacloud-go/endpoint-util v1.1.0/go.mod h1:O5FuCALmCKs2Ff7JFJMudHs0I5EBgecXXxZRyswlEjE=
-github.com/alibabacloud-go/openapi-util v0.1.0/go.mod h1:sQuElr4ywwFRlCCberQwKRFhRzIyG4QTP/P4y1CJ6Ws=
-github.com/alibabacloud-go/openapi-util v0.1.1 h1:ujGErJjG8ncRW6XtBBMphzHTvCxn4DjrVw4m04HsS28=
-github.com/alibabacloud-go/openapi-util v0.1.1/go.mod h1:/UehBSE2cf1gYT43GV4E+RxTdLRzURImCYY0aRmlXpw=
-github.com/alibabacloud-go/tea v1.1.0/go.mod h1:IkGyUSX4Ba1V+k4pCtJUc6jDpZLFph9QMy2VUPTwukg=
-github.com/alibabacloud-go/tea v1.1.7/go.mod h1:/tmnEaQMyb4Ky1/5D+SE1BAsa5zj/KeGOFfwYm3N/p4=
-github.com/alibabacloud-go/tea v1.1.8/go.mod h1:/tmnEaQMyb4Ky1/5D+SE1BAsa5zj/KeGOFfwYm3N/p4=
-github.com/alibabacloud-go/tea v1.1.11/go.mod h1:/tmnEaQMyb4Ky1/5D+SE1BAsa5zj/KeGOFfwYm3N/p4=
-github.com/alibabacloud-go/tea v1.1.17/go.mod h1:nXxjm6CIFkBhwW4FQkNrolwbfon8Svy6cujmKFUq98A=
-github.com/alibabacloud-go/tea v1.1.20/go.mod h1:nXxjm6CIFkBhwW4FQkNrolwbfon8Svy6cujmKFUq98A=
-github.com/alibabacloud-go/tea v1.2.2/go.mod h1:CF3vOzEMAG+bR4WOql8gc2G9H3EkH3ZLAQdpmpXMgwk=
-github.com/alibabacloud-go/tea v1.3.13 h1:WhGy6LIXaMbBM6VBYcsDCz6K/TPsT1Ri2hPmmZffZ94=
-github.com/alibabacloud-go/tea v1.3.13/go.mod h1:A560v/JTQ1n5zklt2BEpurJzZTI8TUT+Psg2drWlxRg=
-github.com/alibabacloud-go/tea-utils v1.3.1/go.mod h1:EI/o33aBfj3hETm4RLiAxF/ThQdSngxrpF8rKUDJjPE=
-github.com/alibabacloud-go/tea-utils/v2 v2.0.5/go.mod h1:dL6vbUT35E4F4bFTHL845eUloqaerYBYPsdWR2/jhe4=
-github.com/alibabacloud-go/tea-utils/v2 v2.0.6/go.mod h1:qxn986l+q33J5VkialKMqT/TTs3E+U9MJpd001iWQ9I=
-github.com/alibabacloud-go/tea-utils/v2 v2.0.7 h1:WDx5qW3Xa5ZgJ1c8NfqJkF6w+AU5wB8835UdhPr6Ax0=
-github.com/alibabacloud-go/tea-utils/v2 v2.0.7/go.mod h1:qxn986l+q33J5VkialKMqT/TTs3E+U9MJpd001iWQ9I=
-github.com/aliyun/credentials-go v1.1.2/go.mod h1:ozcZaMR5kLM7pwtCMEpVmQ242suV6qTJya2bDq4X1Tw=
-github.com/aliyun/credentials-go v1.3.1/go.mod h1:8jKYhQuDawt8x2+fusqa1Y6mPxemTsBEN04dgcAcYz0=
-github.com/aliyun/credentials-go v1.3.6/go.mod h1:1LxUuX7L5YrZUWzBrRyk0SwSdH4OmPrib8NVePL3fxM=
-github.com/aliyun/credentials-go v1.4.5 h1:O76WYKgdy1oQYYiJkERjlA2dxGuvLRrzuO2ScrtGWSk=
-github.com/aliyun/credentials-go v1.4.5/go.mod h1:Jm6d+xIgwJVLVWT561vy67ZRP4lPTQxMbEYRuT2Ti1U=
-github.com/andybalholm/brotli v1.1.1 h1:PR2pgnyFznKEugtsUo0xLdDop5SKXd5Qf5ysW+7XdTA=
-github.com/andybalholm/brotli v1.1.1/go.mod h1:05ib4cKhjx3OQYUY22hTVd34Bc8upXjOLL2rKwwZBoA=
-github.com/bsm/ginkgo/v2 v2.12.0 h1:Ny8MWAHyOepLGlLKYmXG4IEkioBysk6GpaRTLC8zwWs=
-github.com/bsm/ginkgo/v2 v2.12.0/go.mod h1:SwYbGRRDovPVboqFv0tPTcG1sN61LM1Z4ARdbAV9g4c=
-github.com/bsm/gomega v1.27.10 h1:yeMWxP2pV2fG3FgAODIY8EiRE3dy0aeFYt4l7wh6yKA=
-github.com/bsm/gomega v1.27.10/go.mod h1:JyEr/xRbxbtgWNi8tIEVPUYZ5Dzef52k01W3YH0H+O0=
 github.com/bytedance/gopkg v0.1.3 h1:TPBSwH8RsouGCBcMBktLt1AymVo2TVsBVCY4b6TnZ/M=
 github.com/bytedance/gopkg v0.1.3/go.mod h1:576VvJ+eJgyCzdjS+c4+77QF3p7ubbtiKARP3TxducM=
 github.com/bytedance/sonic v1.14.2 h1:k1twIoe97C1DtYUo+fZQy865IuHia4PR5RPiuGPPIIE=
 github.com/bytedance/sonic v1.14.2/go.mod h1:T80iDELeHiHKSc0C9tubFygiuXoGzrkjKzX2quAx980=
 github.com/bytedance/sonic/loader v0.4.0 h1:olZ7lEqcxtZygCK9EKYKADnpQoYkRQxaeY2NYzevs+o=
 github.com/bytedance/sonic/loader v0.4.0/go.mod h1:AR4NYCk5DdzZizZ5djGqQ92eEhCCcdf5x77udYiSJRo=
-github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
-github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
-github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
-github.com/clbanning/mxj/v2 v2.7.0 h1:WA/La7UGCanFe5NpHF0Q3DNtnCsVoxbPKuyBNHWRyME=
-github.com/clbanning/mxj/v2 v2.7.0/go.mod h1:hNiWqW14h+kc+MdF9C6/YoRfjEJoR3ou6tn/Qo+ve2s=
-github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cloudwego/base64x v0.1.6 h1:t11wG9AECkCDk5fMSoxmufanudBtJ+/HemLstXDLI2M=
 github.com/cloudwego/base64x v0.1.6/go.mod h1:OFcloc187FXDaYHvrNIjxSe8ncn0OOM8gEHfghB2IPU=
-github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78=
-github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
-github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
-github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
-github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
-github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
-github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
 github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k=
 github.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0=
 github.com/gabriel-vasile/mimetype v1.4.12 h1:e9hWvmLYvtp846tLHam2o++qitpguFiYCKbn0w9jyqw=
@@ -88,54 +16,23 @@ github.com/gin-contrib/sse v1.1.0 h1:n0w2GMuUpWDVp7qSpvze6fAu9iRxJY4Hmj6AmBOU05w
 github.com/gin-contrib/sse v1.1.0/go.mod h1:hxRZ5gVpWMT7Z0B0gSNYqqsSCNIJMjzvm6fqCz9vjwM=
 github.com/gin-gonic/gin v1.11.0 h1:OW/6PLjyusp2PPXtyxKHU0RbX6I/l28FTdDlae5ueWk=
 github.com/gin-gonic/gin v1.11.0/go.mod h1:+iq/FyxlGzII0KHiBGjuNn4UNENUlKbGlNmc+W50Dls=
-github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
-github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
 github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
 github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
 github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
 github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
 github.com/go-playground/validator/v10 v10.29.0 h1:lQlF5VNJWNlRbRZNeOIkWElR+1LL/OuHcc0Kp14w1xk=
 github.com/go-playground/validator/v10 v10.29.0/go.mod h1:D6QxqeMlgIPuT02L66f2ccrZ7AGgHkzKmmTMZhk/Kc4=
-github.com/go-sql-driver/mysql v1.7.0/go.mod h1:OXbVy3sEdcQ2Doequ6Z5BW6fXNQTmx+9S1MCJN5yJMI=
-github.com/go-sql-driver/mysql v1.8.1 h1:LedoTUt/eveggdHS9qUFC1EFSa8bU2+1pZjSRpvNJ1Y=
-github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg=
 github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs=
 github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
 github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4=
 github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=
 github.com/goccy/go-yaml v1.19.1 h1:3rG3+v8pkhRqoQ/88NYNMHYVGYztCOCIZ7UQhu7H+NE=
 github.com/goccy/go-yaml v1.19.1/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
-github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
-github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
 github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
-github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9 h1:au07oEsX2xN0ktxqI+Sida1w446QrXBRJ0nee3SNZlA=
-github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9/go.mod h1:8vg3r2VgvsThLBIFL93Qb5yWzgyZWhEmBwUJWevAkK0=
-github.com/golang-sql/sqlexp v0.1.0 h1:ZCD6MBpcuOVfGVqsEmY5/4FtYiKz6tSyUv9LPEDei6A=
-github.com/golang-sql/sqlexp v0.1.0/go.mod h1:J4ad9Vo8ZCWQ2GMrC4UCQy1JpCbwU9m3EOqtpKwwwHI=
-github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
-github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
-github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
-github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
-github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
-github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
-github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
-github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
-github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
-github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
-github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
-github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
-github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
-github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
-github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
-github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
-github.com/gopherjs/gopherjs v0.0.0-20200217142428-fce0ec30dd00/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
 github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=
 github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=
@@ -148,56 +45,32 @@ github.com/jinzhu/inflection v1.0.0 h1:K317FqzuhWc8YvSVlFMCCUb36O/S9MCKRDI7QkRKD
 github.com/jinzhu/inflection v1.0.0/go.mod h1:h+uFLlag+Qp1Va5pdKtLDYj+kHp5pxUVkryuEj+Srlc=
 github.com/jinzhu/now v1.1.5 h1:/o9tlHleP7gOFmsnYNz3RGnqzefHA47wQpKrrdTIwXQ=
 github.com/jinzhu/now v1.1.5/go.mod h1:d3SSVoowX0Lcu0IBviAWJpolVfI5UJVZZ7cO71lE/z8=
-github.com/json-iterator/go v1.1.10/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
+github.com/joho/godotenv v1.5.1 h1:7eLL/+HRGLY0ldzfGMeQkb7vMd0as4CfYvUVzLqw0N0=
+github.com/joho/godotenv v1.5.1/go.mod h1:f4LDr5Voq0i2e/R5DDNOoa2zzDfwtkZa6DnEwAbqwq4=
 github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
-github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y=
 github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
-github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
-github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
-github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
-github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
-github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
-github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
 github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
 github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
-github.com/mattn/go-sqlite3 v1.14.22 h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=
-github.com/mattn/go-sqlite3 v1.14.22/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
-github.com/meilisearch/meilisearch-go v0.35.0 h1:Gh4vO+PinVQZ58iiFdUX9Hld8uXKzKh+C7mSSsCDlI8=
-github.com/meilisearch/meilisearch-go v0.35.0/go.mod h1:cUVJZ2zMqTvvwIMEEAdsWH+zrHsrLpAw6gm8Lt1MXK0=
-github.com/microsoft/go-mssqldb v1.7.2 h1:CHkFJiObW7ItKTJfHo1QX7QBBD1iV+mn1eOyRP3b/PA=
-github.com/microsoft/go-mssqldb v1.7.2/go.mod h1:kOvZKUdrhhFQmxLZqbwUV0rHkNkZpthMITIb2Ko1IoA=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
-github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
-github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
 github.com/pelletier/go-toml/v2 v2.2.4 h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=
 github.com/pelletier/go-toml/v2 v2.2.4/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=
-github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/quic-go/qpack v0.6.0 h1:g7W+BMYynC1LbYLSqRt8PBg5Tgwxn214ZZR34VIOjz8=
 github.com/quic-go/qpack v0.6.0/go.mod h1:lUpLKChi8njB4ty2bFLX2x4gzDqXwUpaO1DP9qMDZII=
 github.com/quic-go/quic-go v0.57.1 h1:25KAAR9QR8KZrCZRThWMKVAwGoiHIrNbT72ULHTuI10=
 github.com/quic-go/quic-go v0.57.1/go.mod h1:ly4QBAjHA2VhdnxhojRsCUOeJwKYg+taDlos92xb1+s=
-github.com/redis/go-redis/v9 v9.17.2 h1:P2EGsA4qVIM3Pp+aPocCJ7DguDHhqrXNhVcEp4ViluI=
-github.com/redis/go-redis/v9 v9.17.2/go.mod h1:u410H11HMLoB+TP67dz8rL9s6QW2j76l0//kSOd3370=
-github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
-github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/sagikazarmark/locafero v0.11.0 h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc=
 github.com/sagikazarmark/locafero v0.11.0/go.mod h1:nVIGvgyzw595SUSUE6tvCp3YYTeHs15MvlmU87WwIik=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
-github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
-github.com/smartystreets/assertions v1.1.0/go.mod h1:tcbTF8ujkAEcZ8TElKY+i30BzYlVhC/LOxJk7iOWnoo=
-github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw=
 github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8/go.mod h1:3n1Cwaq1E1/1lhQhtRK2ts/ZwZEhjcQeJQ1RuC6Q/8U=
 github.com/spf13/afero v1.15.0 h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I=
@@ -209,211 +82,49 @@ github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3A
 github.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=
 github.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.2.0/go.mod h1:qt09Ya8vawLte6SNmTgCsAVtYtaKzEcn8ATUoHMkEqE=
 github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
 github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
 github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
-github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
 github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
-github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
-github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
 github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
-github.com/tjfoc/gmsm v1.3.2/go.mod h1:HaUcFuY0auTiaHB9MHFGCPx5IaLhTUd2atbCFBQXn9w=
-github.com/tjfoc/gmsm v1.4.1 h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho=
-github.com/tjfoc/gmsm v1.4.1/go.mod h1:j4INPkHWMrhJb38G+J6W4Tw0AbuN8Thu3PbdVYhVcTE=
 github.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=
 github.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=
 github.com/ugorji/go/codec v1.3.1 h1:waO7eEiFDwidsBN6agj1vJQ4AG7lh2yqXyOXqhgQuyY=
 github.com/ugorji/go/codec v1.3.1/go.mod h1:pRBVtBSKl77K30Bv8R2P+cLSGaTtex6fsA2Wjqmfxj4=
-github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU=
-github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
-github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
-github.com/yuin/goldmark v1.1.30/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
-github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.uber.org/mock v0.6.0 h1:hyF9dfmbgIX5EfOdasqLsWD6xqpNZlXblLB/Dbnwv3Y=
 go.uber.org/mock v0.6.0/go.mod h1:KiVJ4BqZJaMj4svdfmHM0AUx4NJYO8ZNpPnZn1Z+BBU=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/arch v0.23.0 h1:lKF64A2jF6Zd8L0knGltUnegD62JMFBiCPBmQpToHhg=
 golang.org/x/arch v0.23.0/go.mod h1:dNHoOeKiyja7GTvF9NJS1l3Z2yntpQNzgrjh1cU103A=
-golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.0.0-20191219195013-becbf705a915/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20200510223506-06a226fb4e37/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20201012173705-84dcc777aaee/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
-golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
-golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg=
-golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
-golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs=
-golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
-golang.org/x/crypto v0.24.0/go.mod h1:Z1PMYSOR5nyMcyAVAIQSKCDwalqy85Aqn1x3Ws4L5DM=
 golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
 golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
-golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
-golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
-golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
-golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
-golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
-golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
-golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
-golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
-golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
-golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20200506145744-7e3656a0809f/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
-golang.org/x/net v0.0.0-20201010224723-4f7140c49acb/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
-golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
-golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
-golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.7.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
-golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
-golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
-golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY=
-golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
-golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg=
-golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
-golang.org/x/net v0.26.0/go.mod h1:5YKkiSynbBIh3p6iOc/vibscux0x38BZDkn8sCUPxHE=
+golang.org/x/mod v0.31.0 h1:HaW9xtz0+kOcWKwli0ZXy79Ix+UW/vOfmWI5QVd2tgI=
+golang.org/x/mod v0.31.0/go.mod h1:43JraMp9cGx1Rx3AqioxrbrhNsLl2l/iNAvuBkrezpg=
 golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
 golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
-golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
-golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
-golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20200317015054-43a5402ce75a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
-golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
 golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
-golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20200509044756-6aff5f38e54f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.21.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
 golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
-golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
-golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
-golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
-golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
-golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY=
-golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
-golang.org/x/term v0.18.0/go.mod h1:ILwASektA3OnRv7amZ1xhE/KTR+u50pbXfZ03+6Nx58=
-golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
-golang.org/x/term v0.21.0/go.mod h1:ooXLefLobQVslOqselCNF4SxFAaoS6KujMbsGzSDmX0=
-golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
-golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
-golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
-golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
-golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
-golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI=
 golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
 golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
-golang.org/x/time v0.12.0 h1:ScB/8o8olJvc+CQPWrK3fPZNfh7qgwCrY0zJmoEQLSE=
-golang.org/x/time v0.12.0/go.mod h1:CDIdPxbZBQxdj6cxyCIdrNogrJKMJ7pr37NYpMcMDSg=
-golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
-golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
-golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
-golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
-golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
-golang.org/x/tools v0.0.0-20200509030707-2212a7e161a5/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
-golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
-golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
-golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
-google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
-google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
-google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
-google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
-google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
-google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
-google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
-google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
-google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
-google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
-google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
-google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
-google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA=
+golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
-gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc h1:2gGKlE2+asNV9m7xrywl36YYNnBG5ZQ0r/BOOxqPpmk=
-gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc/go.mod h1:m7x9LTH6d71AHyAX77c9yqWCCa3UKHcVEj9y7hAtKDk=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
-gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
-gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df h1:n7WqCuqOuCbNr617RXOY0AWRXxgwEyPp2z+p0+hgMuE=
-gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df/go.mod h1:LRQQ+SO6ZHR7tOkpBDuZnXENFzX8qRjMDMyPD6BRkCw=
-gopkg.in/ini.v1 v1.56.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
-gopkg.in/ini.v1 v1.67.0 h1:Dgnx+6+nfE+IfzjUEISNeydPJh9AXNNsWbGP9KzCsOA=
-gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
-gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
-gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gorm.io/datatypes v1.2.7 h1:ww9GAhF1aGXZY3EB3cJPJ7//JiuQo7DlQA7NNlVaTdk=
-gorm.io/datatypes v1.2.7/go.mod h1:M2iO+6S3hhi4nAyYe444Pcb0dcIiOMJ7QHaUXxyiNZY=
-gorm.io/driver/mysql v1.5.6 h1:Ld4mkIickM+EliaQZQx3uOJDJHtrd70MxAUqWqlx3Y8=
-gorm.io/driver/mysql v1.5.6/go.mod h1:sEtPWMiqiN1N1cMXoXmBbd8C6/l+TESwriotuRRpkDM=
 gorm.io/driver/postgres v1.6.0 h1:2dxzU8xJ+ivvqTRph34QX+WrRaJlmfyPqXmoGVjMBa4=
 gorm.io/driver/postgres v1.6.0/go.mod h1:vUw0mrGgrTK+uPHEhAdV4sfFELrByKVGnaVRkXDhtWo=
-gorm.io/driver/sqlite v1.6.0 h1:WHRRrIiulaPiPFmDcod6prc4l2VGVWHz80KspNsxSfQ=
-gorm.io/driver/sqlite v1.6.0/go.mod h1:AO9V1qIQddBESngQUKWL9yoH93HIeA1X6V633rBwyT8=
-gorm.io/driver/sqlserver v1.6.0 h1:VZOBQVsVhkHU/NzNhRJKoANt5pZGQAS1Bwc6m6dgfnc=
-gorm.io/driver/sqlserver v1.6.0/go.mod h1:WQzt4IJo/WHKnckU9jXBLMJIVNMVeTu25dnOzehntWw=
-gorm.io/gorm v1.25.7/go.mod h1:hbnx/Oo0ChWMn1BIhpy1oYozzpM15i4YPuHDmfYtwg8=
 gorm.io/gorm v1.31.1 h1:7CA8FTFz/gRfgqgpeKIBcervUn3xSyPUmr6B2WXJ7kg=
 gorm.io/gorm v1.31.1/go.mod h1:XyQVbO2k6YkOis7C2437jSit3SsDK72s7n7rsSHd+Gs=
-honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
-honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
--- a/internal/crypto/jwt/jwt.go
+++ b/internal/crypto/jwt/jwt.go
@@ -0,0 +1,77 @@
+package jwt
+
+import (
+	"net/http"
+	"strings"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/golang-jwt/jwt/v5"
+	"github.com/google/uuid"
+	"github.com/spf13/viper"
+)
+
+type Claims struct {
+	UserID uuid.UUID `json:"user_id"`
+	jwt.RegisteredClaims
+}
+
+func JWTAuth() gin.HandlerFunc {
+	var JwtSecret = []byte(viper.GetString("secrets.jwt"))
+	return func(c *gin.Context) {
+		auth := c.GetHeader("Authorization")
+		if auth == "" {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
+				"error": "missing Authorization header",
+			})
+			return
+		}
+
+		parts := strings.SplitN(auth, " ", 2)
+		if len(parts) != 2 || parts[0] != "Bearer" {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
+				"error": "invalid Authorization header format",
+			})
+			return
+		}
+
+		tokenStr := parts[1]
+
+		token, err := jwt.ParseWithClaims(tokenStr, &Claims{}, func(token *jwt.Token) (interface{}, error) {
+			return JwtSecret, nil
+		})
+
+		if err != nil || !token.Valid {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
+				"error": "invalid or expired token",
+			})
+			return
+		}
+
+		claims, ok := token.Claims.(*Claims)
+		if !ok {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
+				"error": "invalid token claims",
+			})
+			return
+		}
+
+		c.Set("user_id", claims.UserID)
+		c.Next()
+	}
+}
+
+func GenerateToken(userID uuid.UUID, application string) (string, error) {
+	var JwtSecret = []byte(viper.GetString("server.jwt_secret"))
+	claims := Claims{
+		UserID: userID,
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(24 * time.Hour)),
+			IssuedAt:  jwt.NewNumericDate(time.Now()),
+			Issuer:    application,
+		},
+	}
+
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+	return token.SignedString(JwtSecret)
+}
--- a/internal/crypto/jwt/jwt_test.go
+++ b/internal/crypto/jwt/jwt_test.go
@@ -0,0 +1,94 @@
+package jwt
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"nixcn-cms/config"
+	"testing"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/golang-jwt/jwt/v5"
+	"github.com/google/uuid"
+	"github.com/spf13/viper"
+)
+
+func init() {
+	config.Init()
+}
+
+func generateTestToken(userID uuid.UUID, expire time.Duration) string {
+	var JwtSecret = []byte(viper.GetString("server.jwt_secret"))
+	claims := Claims{
+		UserID: userID,
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(expire)),
+		},
+	}
+
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+	tokenStr, _ := token.SignedString(JwtSecret)
+	return tokenStr
+}
+func TestJWTAuth_MissingToken(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	r := gin.New()
+	r.Use(JWTAuth())
+	r.GET("/test", func(c *gin.Context) {
+		c.JSON(200, gin.H{"ok": true})
+	})
+
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	w := httptest.NewRecorder()
+
+	r.ServeHTTP(w, req)
+
+	if w.Code != http.StatusUnauthorized {
+		t.Fatalf("expected 401, got %d", w.Code)
+	}
+}
+func TestJWTAuth_InvalidToken(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	r := gin.New()
+	r.Use(JWTAuth())
+	r.GET("/test", func(c *gin.Context) {
+		c.JSON(200, gin.H{"ok": true})
+	})
+
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("Authorization", "Bearer invalid.token.here")
+	w := httptest.NewRecorder()
+
+	r.ServeHTTP(w, req)
+
+	if w.Code != http.StatusUnauthorized {
+		t.Fatalf("expected 401, got %d", w.Code)
+	}
+}
+func TestJWTAuth_ValidToken(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	r := gin.New()
+	r.Use(JWTAuth())
+	r.GET("/test", func(c *gin.Context) {
+		userID := c.GetUint("user_id")
+		c.JSON(200, gin.H{
+			"user_id": userID,
+		})
+	})
+
+	uuid, _ := uuid.NewUUID()
+	token := generateTestToken(uuid, time.Hour)
+
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("Authorization", "Bearer "+token)
+	w := httptest.NewRecorder()
+
+	r.ServeHTTP(w, req)
+
+	if w.Code != http.StatusOK {
+		t.Fatalf("expected 200, got %d", w.Code)
+	}
+}
--- a/internal/cryptography/aes.go
+++ b/internal/cryptography/aes.go
@@ -1,208 +0,0 @@
-package cryptography
-
-import (
-	"bytes"
-	"crypto/aes"
-	"crypto/cipher"
-	"crypto/rand"
-	"encoding/base64"
-	"errors"
-	"io"
-)
-
-func randomBytes(n int) ([]byte, error) {
-	b := make([]byte, n)
-	_, err := io.ReadFull(rand.Reader, b)
-	return b, err
-}
-
-func normalizeKey(key []byte) ([]byte, error) {
-	switch len(key) {
-	case 16, 24, 32:
-		return key, nil
-	default:
-		return nil, errors.New("AES key length must be 16, 24, or 32 bytes")
-	}
-}
-
-func AESGCMEncrypt(plaintext, key []byte) (string, error) {
-	key, err := normalizeKey(key)
-	if err != nil {
-		return "", err
-	}
-
-	block, err := aes.NewCipher(key)
-	if err != nil {
-		return "", err
-	}
-
-	gcm, err := cipher.NewGCM(block)
-	if err != nil {
-		return "", err
-	}
-
-	nonce, err := randomBytes(gcm.NonceSize())
-	if err != nil {
-		return "", err
-	}
-
-	ciphertext := gcm.Seal(nil, nonce, plaintext, nil)
-	out := append(nonce, ciphertext...)
-
-	return base64.RawURLEncoding.EncodeToString(out), nil
-}
-
-func AESGCMDecrypt(encoded string, key []byte) ([]byte, error) {
-	key, err := normalizeKey(key)
-	if err != nil {
-		return nil, err
-	}
-
-	data, err := base64.RawURLEncoding.DecodeString(encoded)
-	if err != nil {
-		return nil, err
-	}
-
-	block, err := aes.NewCipher(key)
-	if err != nil {
-		return nil, err
-	}
-
-	gcm, err := cipher.NewGCM(block)
-	if err != nil {
-		return nil, err
-	}
-
-	if len(data) < gcm.NonceSize() {
-		return nil, errors.New("ciphertext too short")
-	}
-
-	nonce := data[:gcm.NonceSize()]
-	ciphertext := data[gcm.NonceSize():]
-
-	return gcm.Open(nil, nonce, ciphertext, nil)
-}
-
-func pkcs7Pad(data []byte, blockSize int) []byte {
-	padding := blockSize - len(data)%blockSize
-	padtext := bytes.Repeat([]byte{byte(padding)}, padding)
-	return append(data, padtext...)
-}
-
-func pkcs7Unpad(data []byte) ([]byte, error) {
-	length := len(data)
-	if length == 0 {
-		return nil, errors.New("invalid padding")
-	}
-	padding := int(data[length-1])
-	if padding == 0 || padding > length {
-		return nil, errors.New("invalid padding")
-	}
-	return data[:length-padding], nil
-}
-
-func AESCBCEncrypt(plaintext, key []byte) (string, error) {
-	key, err := normalizeKey(key)
-	if err != nil {
-		return "", err
-	}
-
-	block, err := aes.NewCipher(key)
-	if err != nil {
-		return "", err
-	}
-
-	plaintext = pkcs7Pad(plaintext, block.BlockSize())
-
-	iv, err := randomBytes(block.BlockSize())
-	if err != nil {
-		return "", err
-	}
-
-	mode := cipher.NewCBCEncrypter(block, iv)
-	mode.CryptBlocks(plaintext, plaintext)
-
-	out := append(iv, plaintext...)
-	return base64.RawURLEncoding.EncodeToString(out), nil
-}
-
-func AESCBCDecrypt(encoded string, key []byte) ([]byte, error) {
-	key, err := normalizeKey(key)
-	if err != nil {
-		return nil, err
-	}
-
-	data, err := base64.RawURLEncoding.DecodeString(encoded)
-	if err != nil {
-		return nil, err
-	}
-
-	block, err := aes.NewCipher(key)
-	if err != nil {
-		return nil, err
-	}
-
-	if len(data) < block.BlockSize() {
-		return nil, errors.New("ciphertext too short")
-	}
-
-	iv := data[:block.BlockSize()]
-	data = data[block.BlockSize():]
-
-	mode := cipher.NewCBCDecrypter(block, iv)
-	mode.CryptBlocks(data, data)
-
-	return pkcs7Unpad(data)
-}
-
-func AESCFBEncrypt(plaintext, key []byte) (string, error) {
-	key, err := normalizeKey(key)
-	if err != nil {
-		return "", err
-	}
-
-	block, err := aes.NewCipher(key)
-	if err != nil {
-		return "", err
-	}
-
-	iv, err := randomBytes(block.BlockSize())
-	if err != nil {
-		return "", err
-	}
-
-	stream := cipher.NewCFBEncrypter(block, iv)
-	stream.XORKeyStream(plaintext, plaintext)
-
-	out := append(iv, plaintext...)
-	return base64.RawURLEncoding.EncodeToString(out), nil
-}
-
-func AESCFBDecrypt(encoded string, key []byte) ([]byte, error) {
-	key, err := normalizeKey(key)
-	if err != nil {
-		return nil, err
-	}
-
-	data, err := base64.RawURLEncoding.DecodeString(encoded)
-	if err != nil {
-		return nil, err
-	}
-
-	block, err := aes.NewCipher(key)
-	if err != nil {
-		return nil, err
-	}
-
-	if len(data) < block.BlockSize() {
-		return nil, errors.New("ciphertext too short")
-	}
-
-	iv := data[:block.BlockSize()]
-	data = data[block.BlockSize():]
-
-	stream := cipher.NewCFBDecrypter(block, iv)
-	stream.XORKeyStream(data, data)
-
-	return data, nil
-}
--- a/internal/cryptography/base64.go
+++ b/internal/cryptography/base64.go
@@ -1,20 +0,0 @@
-package cryptography
-
-import (
-	"encoding/base64"
-	"strings"
-)
-
-func IsBase64Std(s string) bool {
-	if s == "" {
-		return false
-	}
-
-	s = strings.TrimSpace(s)
-	if len(s)%4 != 0 {
-		return false
-	}
-
-	_, err := base64.StdEncoding.Strict().DecodeString(s)
-	return err == nil
-}
--- a/internal/cryptography/bcrypt.go
+++ b/internal/cryptography/bcrypt.go
@@ -1,22 +0,0 @@
-package cryptography
-
-import "golang.org/x/crypto/bcrypt"
-
-func BcryptHash(input string) (string, error) {
-	hash, err := bcrypt.GenerateFromPassword(
-		[]byte(input),
-		bcrypt.DefaultCost,
-	)
-	if err != nil {
-		return "", err
-	}
-	return string(hash), nil
-}
-
-func BcryptVerify(input string, hashed string) bool {
-	err := bcrypt.CompareHashAndPassword(
-		[]byte(hashed),
-		[]byte(input),
-	)
-	return err == nil
-}
--- a/29
+++ b/29
@@ -7,34 +7,17 @@ exec_path := join(output_dir, project_name)
 go_cmd := `realpath $(which go)`
 bun_cmd := `realpath $(which bun)`

-default: install clean build-back build-client run-back
-
-backend: clean build-back run-back
-
-install:
-    cd {{ client_dir }} && {{ bun_cmd }} install
+default: clean build run

 clean:
-    mkdir -p .outputs
-    find .outputs -mindepth 1 ! -path .outputs/config.yaml -exec rm -rf {} +
+    find .outputs -mindepth 1 ! -name config.yaml -exec rm -rf {} +

-client:
-    cd {{ client_dir }} && {{ bun_cmd }} dev
-
-build-client:
-    cd {{ client_dir }} && {{ bun_cmd }} run build --outDir {{ join(output_dir, "static") }}
-
-build-back:
+build:
+    mkdir -p {{ output_dir }}
    {{ go_cmd }} build -o {{ exec_path }}{{ if os() == "windows" { ".exe" } else { "" } }} {{ server_enrty }}

-run-back:
+run:
    cd {{ output_dir }} && CONFIG_PATH={{ output_dir }} {{ exec_path }}{{ if os() == "windows" { ".exe" } else { "" } }}

-test-back:
+test:
    cd {{ output_dir }} && CONFIG_PATH={{ output_dir }} GO_ENV=test go test -C .. ./...
-
-dev-back: clean
-    watchexec -r -e go,yaml,tpl -i '.devenv/**' -i '.direnv/**' -i 'client/**' -i 'vendor/**' 'go build -o {{ join(output_dir, "nixcn-cms") }} . && cd {{ output_dir }} && CONFIG_PATH={{ output_dir }} {{ exec_path }}'
-
-dev:
-    devenv up --verbose
--- a/middleware/jwt.go
+++ b/middleware/jwt.go
@@ -1,30 +0,0 @@
-package middleware
-
-import (
-	"nixcn-cms/pkgs/authtoken"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-)
-
-func JWTAuth(required bool) gin.HandlerFunc {
-
-	return func(c *gin.Context) {
-		auth := c.GetHeader("Authorization")
-
-		authtoken := new(authtoken.Token)
-		uid, err := authtoken.HeaderVerify(auth)
-		if err != nil {
-			utils.HttpAbort(c, 401, "", "unauthorized")
-			return
-		}
-
-		if required == true && uid == "" {
-			utils.HttpAbort(c, 401, "", "unauthorized")
-			return
-		}
-
-		c.Set("user_id", uid)
-		c.Next()
-	}
-}
--- a/middleware/permission.go
+++ b/middleware/permission.go
@@ -1,47 +0,0 @@
-package middleware
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-)
-
-func Permission(requiredLevel uint) gin.HandlerFunc {
-	return func(c *gin.Context) {
-		var permissionLevel uint
-		permissionLevelPrev, ok := c.Get("permission_level")
-		if !ok {
-			userIdOrig, ok := c.Get("user_id")
-			if !ok || userIdOrig.(string) == "" {
-				utils.HttpAbort(c, 401, "", "missing user id")
-				return
-			}
-
-			userId, err := uuid.Parse(userIdOrig.(string))
-			if err != nil {
-				utils.HttpAbort(c, 500, "", "error parsing user id")
-				return
-			}
-
-			userData, err := new(data.User).GetByUserId(userId)
-			if err != nil {
-				utils.HttpAbort(c, 404, "", "user not found")
-				return
-			}
-
-			permissionLevel = userData.PermissionLevel
-			c.Set("permission_level", userData.PermissionLevel)
-		} else {
-			permissionLevel = permissionLevelPrev.(uint)
-		}
-
-		if permissionLevel < requiredLevel {
-			utils.HttpAbort(c, 403, "", "permission denied")
-			return
-		}
-
-		c.Next()
-	}
-}
--- a/pkgs/authcode/authcode.go
+++ b/pkgs/authcode/authcode.go
@@ -1,68 +0,0 @@
-package authcode
-
-import (
-	"context"
-	"crypto/rand"
-	"encoding/base64"
-	"nixcn-cms/data"
-
-	"github.com/spf13/viper"
-)
-
-type Token struct {
-	ClientId string
-	Email    string
-}
-
-func NewAuthCode(clientId string, email string) (string, error) {
-	ctx := context.Background()
-
-	// generate random code
-	b := make([]byte, 32)
-	if _, err := rand.Read(b); err != nil {
-		return "", err
-	}
-
-	code := base64.RawURLEncoding.EncodeToString(b)
-	key := "auth_code:" + code
-
-	ttl := viper.GetDuration("ttl.auth_code_ttl")
-
-	// store auth code metadata in Redis
-	if err := data.Redis.HSet(
-		ctx,
-		key,
-		map[string]any{
-			"client_id": clientId,
-			"email":     email,
-		},
-	).Err(); err != nil {
-		return "", err
-	}
-
-	// set expiration (one-time auth code)
-	if err := data.Redis.Expire(ctx, key, ttl).Err(); err != nil {
-		return "", err
-	}
-
-	return code, nil
-}
-
-func VerifyAuthCode(code string) (*Token, bool) {
-	ctx := context.Background()
-	key := "auth_code:" + code
-
-	// Read auth code payload
-	dataMap, err := data.Redis.HGetAll(ctx, key).Result()
-	if err != nil || len(dataMap) == 0 {
-		return nil, false
-	}
-
-	// Delete auth code immediately (one-time use)
-	_ = data.Redis.Del(ctx, key).Err()
-
-	return &Token{
-		ClientId: dataMap["client_id"],
-		Email:    dataMap["email"],
-	}, true
-}
--- a/pkgs/authtoken/authtoken.go
+++ b/pkgs/authtoken/authtoken.go
@@ -1,295 +0,0 @@
-package authtoken
-
-import (
-	"context"
-	"crypto/rand"
-	"encoding/base64"
-	"errors"
-	"fmt"
-	"nixcn-cms/data"
-	"strings"
-	"time"
-
-	"github.com/golang-jwt/jwt/v5"
-	"github.com/google/uuid"
-	"github.com/spf13/viper"
-)
-
-type Token struct {
-	Application string
-}
-
-type JwtClaims struct {
-	ClientId string    `json:"client_id"`
-	UserID   uuid.UUID `json:"user_id"`
-	jwt.RegisteredClaims
-}
-
-// Generate jwt clames
-func (self *Token) NewClaims(clientId string, userId uuid.UUID) JwtClaims {
-	return JwtClaims{
-		ClientId: clientId,
-		UserID:   userId,
-		RegisteredClaims: jwt.RegisteredClaims{
-			ExpiresAt: jwt.NewNumericDate(time.Now().Add(viper.GetDuration("ttl.access_ttl"))),
-			IssuedAt:  jwt.NewNumericDate(time.Now()),
-			Issuer:    self.Application,
-		},
-	}
-}
-
-// Generate access token
-func (self *Token) GenerateAccessToken(clientId string, userId uuid.UUID) (string, error) {
-	claims := self.NewClaims(clientId, userId)
-	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
-
-	clientData, err := new(data.Client).GetClientByClientId(clientId)
-	if err != nil {
-		return "", fmt.Errorf("error getting client data: %v", err)
-	}
-
-	secret, err := clientData.GetDecryptedSecret()
-	if err != nil {
-		return "", fmt.Errorf("error getting decrypted secret: %v", err)
-	}
-
-	signedToken, err := token.SignedString([]byte(secret))
-	if err != nil {
-		return "", fmt.Errorf("error signing token: %v", err)
-	}
-	return signedToken, nil
-}
-
-// Generate refresh token
-func (self *Token) GenerateRefreshToken() (string, error) {
-	b := make([]byte, 32)
-	if _, err := rand.Read(b); err != nil {
-		return "", err
-	}
-	return base64.URLEncoding.EncodeToString(b), nil
-}
-
-// Issue both access and refresh token
-func (self *Token) IssueTokens(clientId string, userId uuid.UUID) (string, string, error) {
-	// access token
-	access, err := self.GenerateAccessToken(clientId, userId)
-	if err != nil {
-		return "", "", err
-	}
-
-	// refresh token
-	refresh, err := self.GenerateRefreshToken()
-	if err != nil {
-		return "", "", err
-	}
-
-	ctx := context.Background()
-	ttl := viper.GetDuration("ttl.refresh_ttl")
-
-	refreshKey := "refresh:" + refresh
-
-	// refresh -> user + client
-	if err := data.Redis.HSet(
-		ctx,
-		refreshKey,
-		map[string]any{
-			"user_id":   userId.String(),
-			"client_id": clientId,
-		},
-	).Err(); err != nil {
-		return "", "", err
-	}
-
-	if err := data.Redis.Expire(ctx, refreshKey, ttl).Err(); err != nil {
-		return "", "", err
-	}
-
-	// user -> refresh tokens
-	userSetKey := "user:" + userId.String() + ":refresh_tokens"
-
-	if err := data.Redis.SAdd(ctx, userSetKey, refresh).Err(); err != nil {
-		return "", "", err
-	}
-
-	_ = data.Redis.Expire(ctx, userSetKey, ttl).Err()
-
-	// client -> refresh tokens
-	clientSetKey := "client:" + clientId + ":refresh_tokens"
-	_ = data.Redis.SAdd(ctx, clientSetKey, refresh).Err()
-	_ = data.Redis.Expire(ctx, clientSetKey, ttl).Err()
-
-	return access, refresh, nil
-}
-
-// Refresh access token
-func (self *Token) RefreshAccessToken(refreshToken string) (string, error) {
-	ctx := context.Background()
-	key := "refresh:" + refreshToken
-
-	// read refresh token bind data
-	dataMap, err := data.Redis.HGetAll(ctx, key).Result()
-	if err != nil || len(dataMap) == 0 {
-		return "", errors.New("invalid refresh token")
-	}
-
-	userIdStr := dataMap["user_id"]
-	clientId := dataMap["client_id"]
-
-	if userIdStr == "" || clientId == "" {
-		return "", errors.New("refresh token corrupted")
-	}
-
-	userId, err := uuid.Parse(userIdStr)
-	if err != nil {
-		return "", err
-	}
-
-	// Generate new access token
-	return self.GenerateAccessToken(clientId, userId)
-}
-
-func (self *Token) RenewRefreshToken(refreshToken string) (string, error) {
-	ctx := context.Background()
-	ttl := viper.GetDuration("ttl.refresh_ttl")
-
-	oldKey := "refresh:" + refreshToken
-
-	// read old refresh token bind data
-	dataMap, err := data.Redis.HGetAll(ctx, oldKey).Result()
-	if err != nil || len(dataMap) == 0 {
-		return "", errors.New("invalid refresh token")
-	}
-
-	userIdStr := dataMap["user_id"]
-	clientId := dataMap["client_id"]
-
-	if userIdStr == "" || clientId == "" {
-		return "", errors.New("refresh token corrupted")
-	}
-
-	// generate new refresh token
-	newRefresh, err := self.GenerateRefreshToken()
-	if err != nil {
-		return "", err
-	}
-
-	// revoke old refresh token
-	if err := self.RevokeRefreshToken(refreshToken); err != nil {
-		return "", err
-	}
-
-	newKey := "refresh:" + newRefresh
-
-	// refresh -> user + client
-	if err := data.Redis.HSet(
-		ctx,
-		newKey,
-		map[string]any{
-			"user_id":   userIdStr,
-			"client_id": clientId,
-		},
-	).Err(); err != nil {
-		return "", err
-	}
-
-	if err := data.Redis.Expire(ctx, newKey, ttl).Err(); err != nil {
-		return "", err
-	}
-
-	// user -> refresh tokens
-	userSetKey := "user:" + userIdStr + ":refresh_tokens"
-	if err := data.Redis.SAdd(ctx, userSetKey, newRefresh).Err(); err != nil {
-		return "", err
-	}
-	_ = data.Redis.Expire(ctx, userSetKey, ttl).Err()
-
-	// client -> refresh tokens
-	clientSetKey := "client:" + clientId + ":refresh_tokens"
-	_ = data.Redis.SAdd(ctx, clientSetKey, newRefresh).Err()
-	_ = data.Redis.Expire(ctx, clientSetKey, ttl).Err()
-
-	return newRefresh, nil
-}
-
-func (self *Token) RevokeRefreshToken(refreshToken string) error {
-	ctx := context.Background()
-
-	refreshKey := "refresh:" + refreshToken
-
-	// read refresh token metadata (user_id, client_id)
-	dataMap, err := data.Redis.HGetAll(ctx, refreshKey).Result()
-	if err != nil || len(dataMap) == 0 {
-		// Token already revoked or not found
-		return nil
-	}
-
-	userID := dataMap["user_id"]
-	clientID := dataMap["client_id"]
-
-	// build index keys
-	userSetKey := "user:" + userID + ":refresh_tokens"
-	clientSetKey := "client:" + clientID + ":refresh_tokens"
-
-	// remove refresh token and all related indexes atomically
-	pipe := data.Redis.TxPipeline()
-
-	// remove main refresh token record
-	pipe.Del(ctx, refreshKey)
-
-	// remove refresh token from user's active refresh token set
-	pipe.SRem(ctx, userSetKey, refreshToken)
-
-	// remove refresh token from client's active refresh token set
-	pipe.SRem(ctx, clientSetKey, refreshToken)
-
-	_, err = pipe.Exec(ctx)
-	return err
-}
-
-func (self *Token) HeaderVerify(header string) (string, error) {
-	if header == "" {
-		return "", nil
-	}
-
-	// Split header to 2
-	parts := strings.SplitN(header, " ", 2)
-	if len(parts) != 2 || parts[0] != "Bearer" {
-		return "", errors.New("invalid Authorization header format")
-	}
-
-	tokenStr := parts[1]
-
-	// Verify access token
-	claims := &JwtClaims{}
-	token, err := jwt.ParseWithClaims(
-		tokenStr,
-		claims,
-		func(token *jwt.Token) (any, error) {
-			if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
-				return nil, errors.New("unexpected signing method")
-			}
-
-			if claims.ClientId == "" {
-				return nil, errors.New("client_id missing in token")
-			}
-
-			clientData, err := new(data.Client).GetClientByClientId(claims.ClientId)
-			if err != nil {
-				return nil, fmt.Errorf("error getting client data: %v", err)
-			}
-
-			secret, err := clientData.GetDecryptedSecret()
-			if err != nil {
-				return nil, fmt.Errorf("error getting decrypted secret: %v", err)
-			}
-
-			return secret, nil
-		},
-	)
-
-	if err != nil || !token.Valid {
-		return "", errors.New("invalid or expired token")
-	}
-
-	return claims.UserID.String(), nil
-}
--- a/pkgs/email/email.go
+++ b/pkgs/email/email.go
@@ -1,313 +0,0 @@
-package email
-
-import (
-	"bytes"
-	"context"
-	"crypto/tls"
-	"errors"
-	"fmt"
-	"net"
-	"net/smtp"
-	"strings"
-	"sync"
-	"time"
-
-	"github.com/spf13/viper"
-	"golang.org/x/oauth2"
-	"golang.org/x/oauth2/clientcredentials"
-	gomail "gopkg.in/gomail.v2"
-)
-
-type Client struct {
-	// basic smtp
-	dialer *gomail.Dialer
-
-	// shared
-	from     string
-	host     string
-	port     int
-	username string
-
-	security string
-	insecure bool
-
-	// auth mode
-	authMode string
-
-	// oauth2
-	oauth *oauthTokenProvider
-}
-
-type oauthTokenProvider struct {
-	cfg clientcredentials.Config
-
-	mu       sync.Mutex
-	token    *oauth2.Token
-	fetchErr error
-}
-
-func (p *oauthTokenProvider) getToken(ctx context.Context) (string, error) {
-	p.mu.Lock()
-	defer p.mu.Unlock()
-
-	if p.token != nil && p.token.Valid() && time.Until(p.token.Expiry) > 60*time.Second {
-		return p.token.AccessToken, nil
-	}
-
-	tok, err := p.cfg.Token(ctx)
-	if err != nil {
-		p.fetchErr = err
-		return "", err
-	}
-	p.token = tok
-	p.fetchErr = nil
-	return tok.AccessToken, nil
-}
-
-func NewSMTPClient() (*Client, error) {
-	host := viper.GetString("email.host")
-	port := viper.GetInt("email.port")
-	user := viper.GetString("email.username")
-	pass := viper.GetString("email.password")
-	from := viper.GetString("email.from")
-
-	security := strings.ToLower(viper.GetString("email.security"))
-	insecure := viper.GetBool("email.insecure_skip_verify")
-
-	authMode := strings.ToLower(viper.GetString("email.auth"))
-	if authMode == "" {
-		authMode = "basic"
-	}
-
-	if host == "" || port == 0 || user == "" {
-		return nil, errors.New("SMTP config not set")
-	}
-
-	c := &Client{
-		from:     from,
-		host:     host,
-		port:     port,
-		username: user,
-		security: security,
-		insecure: insecure,
-		authMode: authMode,
-	}
-
-	switch authMode {
-	case "basic":
-		if pass == "" {
-			return nil, errors.New("SMTP basic auth requires email.password")
-		}
-
-		dialer := gomail.NewDialer(host, port, user, pass)
-		dialer.TLSConfig = &tls.Config{
-			ServerName:         host,
-			InsecureSkipVerify: insecure,
-		}
-
-		switch security {
-		case "ssl":
-			dialer.SSL = true
-		case "starttls":
-			dialer.SSL = false
-		case "plain", "":
-			dialer.SSL = false
-			dialer.TLSConfig = nil
-		default:
-			return nil, errors.New("unknown smtp security mode: " + security)
-		}
-
-		c.dialer = dialer
-		return c, nil
-
-	case "oauth2":
-		if security == "" {
-			security = "starttls"
-			c.security = "starttls"
-		}
-		if security == "plain" {
-			return nil, errors.New("oauth2 requires TLS (starttls or ssl); plain is not allowed")
-		}
-
-		tenantID := viper.GetString("email.oauth2.tenant_id")
-		clientID := viper.GetString("email.oauth2.client_id")
-		clientSecret := viper.GetString("email.oauth2.client_secret")
-		scope := viper.GetString("email.oauth2.scope")
-		if scope == "" {
-			// Microsoft Learn: client credentials for SMTP uses https://outlook.office365.com/.default :contentReference[oaicite:3]{index=3}
-			scope = "https://outlook.office365.com/.default"
-		}
-
-		if tenantID == "" || clientID == "" || clientSecret == "" {
-			return nil, errors.New("oauth2 requires email.oauth2.tenant_id/client_id/client_secret")
-		}
-
-		c.oauth = &oauthTokenProvider{
-			cfg: clientcredentials.Config{
-				ClientID:     clientID,
-				ClientSecret: clientSecret,
-				TokenURL:     fmt.Sprintf("https://login.microsoftonline.com/%s/oauth2/v2.0/token", tenantID),
-				Scopes:       []string{scope},
-			},
-		}
-		return c, nil
-
-	default:
-		return nil, errors.New("unknown email.auth: " + authMode)
-	}
-}
-
-func (c *Client) Send(to, subject, html string) (string, error) {
-	m := gomail.NewMessage()
-	m.SetHeader("From", c.from)
-	m.SetHeader("To", to)
-	m.SetHeader("Subject", subject)
-	m.SetBody("text/html", html)
-
-	switch c.authMode {
-	case "basic":
-		if c.dialer == nil {
-			return "", errors.New("basic dialer not initialized")
-		}
-		if err := c.dialer.DialAndSend(m); err != nil {
-			return "", err
-		}
-		return time.Now().Format(time.RFC3339Nano), nil
-
-	case "oauth2":
-		if err := c.sendWithXOAUTH2(m, to); err != nil {
-			return "", err
-		}
-		return time.Now().Format(time.RFC3339Nano), nil
-
-	default:
-		return "", errors.New("unsupported auth mode: " + c.authMode)
-	}
-}
-
-// XOAUTH2 auth for net/smtp
-type xoauth2Auth struct {
-	username string
-	token    string
-}
-
-func (a *xoauth2Auth) Start(server *smtp.ServerInfo) (string, []byte, error) {
-	if !server.TLS {
-		return "", nil, errors.New("refusing to authenticate over insecure connection")
-	}
-
-	// Microsoft Learn XOAUTH2 Format: user=<user>\x01auth=Bearer <token>\x01\x01 :contentReference[oaicite:4]{index=4}
-	resp := fmt.Sprintf("user=%s\x01auth=Bearer %s\x01\x01", a.username, a.token)
-	return "XOAUTH2", []byte(resp), nil
-}
-
-func (a *xoauth2Auth) Next(fromServer []byte, more bool) ([]byte, error) {
-	if more {
-		return nil, errors.New("unexpected server challenge during XOAUTH2 auth")
-	}
-	return nil, nil
-}
-
-func (c *Client) sendWithXOAUTH2(m *gomail.Message, rcpt string) error {
-	if c.oauth == nil {
-		return errors.New("oauth2 provider not initialized")
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
-	defer cancel()
-
-	token, err := c.oauth.getToken(ctx)
-	if err != nil {
-		return fmt.Errorf("oauth2 token error: %w", err)
-	}
-
-	// write gomail.Message to RFC822
-	var buf bytes.Buffer
-	if _, err := m.WriteTo(&buf); err != nil {
-		return err
-	}
-	msg := buf.Bytes()
-
-	addr := fmt.Sprintf("%s:%d", c.host, c.port)
-	tlsCfg := &tls.Config{
-		ServerName:         c.host,
-		InsecureSkipVerify: c.insecure,
-	}
-
-	var (
-		conn net.Conn
-		cl   *smtp.Client
-	)
-
-	switch c.security {
-	case "ssl":
-		conn, err = tls.Dial("tcp", addr, tlsCfg)
-		if err != nil {
-			return err
-		}
-		cl, err = smtp.NewClient(conn, c.host)
-		if err != nil {
-			_ = conn.Close()
-			return err
-		}
-
-	case "starttls", "":
-		conn, err = net.Dial("tcp", addr)
-		if err != nil {
-			return err
-		}
-		cl, err = smtp.NewClient(conn, c.host)
-		if err != nil {
-			_ = conn.Close()
-			return err
-		}
-
-		// Upgrade with STARTTLS
-		if ok, _ := cl.Extension("STARTTLS"); ok {
-			if err := cl.StartTLS(tlsCfg); err != nil {
-				_ = cl.Close()
-				return err
-			}
-		} else {
-			_ = cl.Close()
-			return errors.New("server does not support STARTTLS")
-		}
-
-	default:
-		return errors.New("unknown smtp security mode: " + c.security)
-	}
-
-	defer func() { _ = cl.Quit() }()
-
-	// AUTH XOAUTH2
-	if err := cl.Auth(&xoauth2Auth{username: c.username, token: token}); err != nil {
-		return err
-	}
-
-	// MAIL FROM / RCPT TO / DATA
-	if err := cl.Mail(extractAddress(c.from)); err != nil {
-		return err
-	}
-	if err := cl.Rcpt(rcpt); err != nil {
-		return err
-	}
-
-	w, err := cl.Data()
-	if err != nil {
-		return err
-	}
-	if _, err := w.Write(msg); err != nil {
-		_ = w.Close()
-		return err
-	}
-	return w.Close()
-}
-
-func extractAddress(from string) string {
-	if i := strings.LastIndex(from, "<"); i >= 0 {
-		if j := strings.LastIndex(from, ">"); j > i {
-			return strings.TrimSpace(from[i+1 : j])
-		}
-	}
-	return strings.TrimSpace(from)
-}
--- a/pkgs/email/resend.go
+++ b/pkgs/email/resend.go
@@ -0,0 +1,87 @@
+package email
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"net/http"
+	"time"
+
+	"github.com/spf13/viper"
+)
+
+type Client struct {
+	apiKey string
+	http   *http.Client
+}
+
+// Resend service client
+func NewResendClient() (*Client, error) {
+	key := viper.GetString("email.resend_api_key")
+	if key == "" {
+		return nil, errors.New("RESEND_API_KEY not set")
+	}
+
+	return &Client{
+		apiKey: key,
+		http: &http.Client{
+			Timeout: 10 * time.Second,
+		},
+	}, nil
+}
+
+type sendEmailRequest struct {
+	From    string   `json:"from"`
+	To      []string `json:"to"`
+	Subject string   `json:"subject"`
+	HTML    string   `json:"html,omitempty"`
+	Text    string   `json:"text,omitempty"`
+}
+
+type sendEmailResponse struct {
+	ID string `json:"id"`
+}
+
+// Send email by resend API
+func (c *Client) Send(to, subject, html string) (string, error) {
+	reqBody := sendEmailRequest{
+		From:    viper.GetString("email.from"),
+		To:      []string{to},
+		Subject: subject,
+		HTML:    html,
+	}
+
+	body, err := json.Marshal(reqBody)
+	if err != nil {
+		return "", err
+	}
+
+	req, err := http.NewRequest(
+		http.MethodPost,
+		"https://api.resend.com/emails",
+		bytes.NewReader(body),
+	)
+	if err != nil {
+		return "", err
+	}
+
+	req.Header.Set("Authorization", "Bearer "+c.apiKey)
+	req.Header.Set("Content-Type", "application/json")
+
+	resp, err := c.http.Do(req)
+	if err != nil {
+		return "", err
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode >= 300 {
+		return "", errors.New("resend send failed")
+	}
+
+	var res sendEmailResponse
+	if err := json.NewDecoder(resp.Body).Decode(&res); err != nil {
+		return "", err
+	}
+
+	return res.ID, nil
+}
--- a/pkgs/kyc/kyc.go
+++ b/pkgs/kyc/kyc.go
@@ -1,168 +0,0 @@
-package kyc
-
-import (
-	"crypto/md5"
-	"encoding/base64"
-	"encoding/hex"
-	"encoding/json"
-	"errors"
-	"fmt"
-	"nixcn-cms/internal/cryptography"
-	"unicode/utf8"
-
-	alicloudauth20190307 "github.com/alibabacloud-go/cloudauth-20190307/v4/client"
-	aliopenapi "github.com/alibabacloud-go/darabonba-openapi/v2/client"
-	aliutil "github.com/alibabacloud-go/tea-utils/v2/service"
-	alitea "github.com/alibabacloud-go/tea/tea"
-	alicredential "github.com/aliyun/credentials-go/credentials"
-	"github.com/spf13/viper"
-)
-
-func DecodeB64Json(b64Json string) (*KycInfo, error) {
-	rawJson, err := base64.StdEncoding.DecodeString(b64Json)
-	if err != nil {
-		return nil, errors.New("invalid base64 json")
-	}
-
-	var kyc KycInfo
-	if err := json.Unmarshal(rawJson, &kyc); err != nil {
-		return nil, errors.New("invalid json structure")
-	}
-
-	return &kyc, nil
-}
-
-func EncodeAES(kyc *KycInfo) (*string, error) {
-	plainJson, err := json.Marshal(kyc)
-	if err != nil {
-		return nil, err
-	}
-
-	aesKey := viper.GetString("secrets.kyc_info_key")
-	encrypted, err := cryptography.AESCBCEncrypt(plainJson, []byte(aesKey))
-	if err != nil {
-		return nil, err
-	}
-
-	return &encrypted, nil
-}
-
-func DecodeAES(cipherStr string) (*KycInfo, error) {
-	aesKey := viper.GetString("secrets.kyc_info_key")
-	plainBytes, err := cryptography.AESCBCDecrypt(cipherStr, []byte(aesKey))
-	if err != nil {
-		return nil, err
-	}
-
-	var kyc KycInfo
-	if err := json.Unmarshal(plainBytes, &kyc); err != nil {
-		return nil, errors.New("invalid decrypted json")
-	}
-
-	return &kyc, nil
-}
-
-func MD5AliEnc(kyc *KycInfo) (*KycAli, error) {
-	if kyc.Type != "Chinese" {
-		return nil, nil
-	}
-
-	// MD5 Legal Name rule: First Chinese char md5enc, remaining plain, at least 2 Chinese chars
-	if len(kyc.LegalName) < 2 || utf8.RuneCountInString(kyc.LegalName) < 2 {
-		return nil, fmt.Errorf("input string must have at least 2 Chinese characters")
-	}
-
-	lnFirstRune, size := utf8.DecodeRuneInString(kyc.LegalName)
-	if lnFirstRune == utf8.RuneError {
-		return nil, fmt.Errorf("invalid first character")
-	}
-
-	lnHash := md5.New()
-	lnHash.Write([]byte(string(lnFirstRune)))
-	lnFirstHash := hex.EncodeToString(lnHash.Sum(nil))
-
-	lnRemaining := kyc.LegalName[size:]
-
-	ln := lnFirstHash + lnRemaining
-
-	// MD5 Resident Id rule: First 6 char plain, middle birthdate md5enc, last 4 char plain, at least 18 chars
-	if len(kyc.ResidentId) < 18 {
-		return nil, fmt.Errorf("input string must have at least 18 characters")
-	}
-
-	ridPrefix := kyc.ResidentId[:6]
-	ridSuffix := kyc.ResidentId[len(kyc.ResidentId)-4:]
-	ridMiddle := kyc.ResidentId[6 : len(kyc.ResidentId)-4]
-
-	ridHash := md5.New()
-	ridHash.Write([]byte(ridMiddle))
-	ridMiddleHash := hex.EncodeToString(ridHash.Sum(nil))
-
-	rid := ridPrefix + ridMiddleHash + ridSuffix
-
-	// Aliyun Id2MetaVerify API Params
-	var kycAli KycAli
-	kycAli.ParamType = "md5"
-	kycAli.UserName = ln
-	kycAli.IdentifyNum = rid
-
-	return &kycAli, nil
-}
-
-func AliId2MetaVerify(kycAli *KycAli) (*string, error) {
-	// Create aliyun openapi credential
-	credentialConfig := new(alicredential.Config).
-		SetType("access_key").
-		SetAccessKeyId(viper.GetString("kyc.ali_access_key_id")).
-		SetAccessKeySecret(viper.GetString("kyc.ali_access_key_secret"))
-	credential, err := alicredential.NewCredential(credentialConfig)
-	if err != nil {
-		return nil, err
-	}
-
-	// Create aliyun cloudauth client
-	config := &aliopenapi.Config{
-		Credential: credential,
-	}
-	config.Endpoint = alitea.String("cloudauth.aliyuncs.com")
-	client := &alicloudauth20190307.Client{}
-	client, err = alicloudauth20190307.NewClient(config)
-	if err != nil {
-		return nil, err
-	}
-
-	// Create Id2MetaVerify request
-	id2MetaVerifyRequest := &alicloudauth20190307.Id2MetaVerifyRequest{
-		ParamType:   &kycAli.ParamType,
-		UserName:    &kycAli.UserName,
-		IdentifyNum: &kycAli.IdentifyNum,
-	}
-
-	// Create client runtime request
-	runtime := &aliutil.RuntimeOptions{}
-	resp, tryErr := func() (*alicloudauth20190307.Id2MetaVerifyResponse, error) {
-		defer func() {
-			if r := alitea.Recover(recover()); r != nil {
-				err = r
-			}
-		}()
-		resp, err := client.Id2MetaVerifyWithOptions(id2MetaVerifyRequest, runtime)
-		if err != nil {
-			return nil, err
-		}
-		return resp, nil
-	}()
-
-	// Try error handler ??? from ali generated sdk
-	if tryErr != nil {
-		var error = &alitea.SDKError{}
-		if t, ok := tryErr.(*alitea.SDKError); ok {
-			error = t
-		} else {
-			error.Message = alitea.String(tryErr.Error())
-		}
-		return nil, error
-	}
-
-	return resp.Body.ResultObject.BizCode, err
-}
--- a/pkgs/kyc/types.go
+++ b/pkgs/kyc/types.go
@@ -1,13 +0,0 @@
-package kyc
-
-type KycInfo struct {
-	Type       string `json:"type"` // Chinese / Foreigner
-	LegalName  string `json:"legal_name"`
-	ResidentId string `json:"rsident_id"`
-}
-
-type KycAli struct {
-	ParamType   string `json:"param_type"`
-	IdentifyNum string `json:"identify_num"`
-	UserName    string `json:"user_name"`
-}
--- a/pkgs/magiclink/magiclink.go
+++ b/pkgs/magiclink/magiclink.go
@@ -0,0 +1,51 @@
+package magiclink
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"sync"
+	"time"
+)
+
+type Token struct {
+	Email     string
+	ExpiresAt time.Time
+}
+
+var (
+	store = sync.Map{}
+)
+
+// Generate magic token
+func NewMagicToken(email string, ttl time.Duration) (string, error) {
+	b := make([]byte, 32)
+	if _, err := rand.Read(b); err != nil {
+		return "", err
+	}
+
+	token := base64.RawURLEncoding.EncodeToString(b)
+
+	store.Store(token, Token{
+		Email:     email,
+		ExpiresAt: time.Now().Add(ttl),
+	})
+
+	return token, nil
+}
+
+// Verify magic token
+func VerifyMagicToken(token string) (string, bool) {
+	val, ok := store.Load(token)
+	if !ok {
+		return "", false
+	}
+
+	t := val.(Token)
+	if time.Now().After(t.ExpiresAt) {
+		store.Delete(token)
+		return "", false
+	}
+
+	store.Delete(token)
+	return t.Email, true
+}
--- a/pkgs/turnstile/turnstile.go
+++ b/pkgs/turnstile/turnstile.go
@@ -10,7 +10,7 @@ import (

 func VerifyTurnstile(token, ip string) (bool, error) {
 	form := url.Values{}
-	form.Set("secret", viper.GetString("secrets.turnstile_secret"))
+	form.Set("secret", viper.GetString("secrets.turnstile"))
 	form.Set("response", token)
 	form.Set("remoteip", ip)

--- a/server/router.go
+++ b/server/router.go
@@ -2,8 +2,6 @@ package server

 import (
 	"nixcn-cms/service/auth"
-	"nixcn-cms/service/event"
-	"nixcn-cms/service/user"

 	"github.com/gin-gonic/gin"
 )
@@ -12,6 +10,4 @@ func Router(e *gin.Engine) {
 	// API Services
 	api := e.Group("/api/v1")
 	auth.Handler(api.Group("/auth"))
-	user.Handler(api.Group("/user"))
-	event.Handler(api.Group("/event"))
 }
--- a/service/auth/handler.go
+++ b/service/auth/handler.go
@@ -1,14 +1,8 @@
 package auth

-import (
-	"nixcn-cms/middleware"
-
-	"github.com/gin-gonic/gin"
-)
+import "github.com/gin-gonic/gin"

 func Handler(r *gin.RouterGroup) {
-	r.GET("/redirect", Redirect, middleware.JWTAuth(false))
-	r.POST("/magic", Magic)
-	r.POST("/token", Token)
-	r.POST("/refresh", Refresh)
+	r.POST("/magic", RequestMagicLink)
+	r.GET("/magic/verify", VerifyMagicLink)
 }
--- a/service/auth/magic.go
+++ b/service/auth/magic.go
@@ -2,80 +2,79 @@ package auth

 import (
 	"net/url"
-	"nixcn-cms/pkgs/authcode"
-	"nixcn-cms/pkgs/email"
+	"nixcn-cms/internal/crypto/jwt"
+	"nixcn-cms/pkgs/magiclink"
 	"nixcn-cms/pkgs/turnstile"
-	"nixcn-cms/utils"
+	"time"
+
+	"github.com/google/uuid"
+	log "github.com/sirupsen/logrus"

 	"github.com/gin-gonic/gin"
 	"github.com/spf13/viper"
 )

-type MagicRequest struct {
-	ClientId       string `json:"client_id"`
-	RedirectUri    string `json:"redirect_uri"`
-	State          string `json:"state"`
-	Email          string `json:"email"`
-	TurnstileToken string `json:"turnstile_token"`
+type MagicLinkRequest struct {
+	Email          string `json:"email" binding:"required,email"`
+	TurnstileToken string `json:"turnstile_token" binding:"required"`
 }

-func Magic(c *gin.Context) {
+func RequestMagicLink(c *gin.Context) {
 	// Parse request
-	var req MagicRequest
+	var req MagicLinkRequest
 	if err := c.ShouldBindJSON(&req); err != nil {
-		utils.HttpResponse(c, 400, "", "invalid request")
+		c.JSON(400, gin.H{"error": "invalid request"})
 		return
 	}

 	// Cloudflare turnstile
 	ok, err := turnstile.VerifyTurnstile(req.TurnstileToken, c.ClientIP())
 	if err != nil || !ok {
-		utils.HttpResponse(c, 403, "", "turnstile failed")
+		c.JSON(403, gin.H{"error": "turnstile failed"})
 		return
 	}

-	code, err := authcode.NewAuthCode(req.ClientId, req.Email)
+	// Generate magic token
+	token, err := magiclink.NewMagicToken(req.Email, 15*time.Minute)
 	if err != nil {
-		utils.HttpResponse(c, 500, "", "code gen failed")
+		c.JSON(500, gin.H{"error": "internal error"})
 		return
 	}

-	externalUrl := viper.GetString("server.external_url")
-	url, err := url.Parse(externalUrl)
+	link, err := url.JoinPath(viper.GetString("server.external_url"), "/api/v1/auth/magic/verify?token="+token)
 	if err != nil {
-		utils.HttpResponse(c, 500, "", "invalid external url")
+		log.Error("Magic link join failed!")
+		c.JSON(500, gin.H{"message": "magic link join failed"})
 		return
 	}

-	url.Path = "/api/v1/auth/redirect"
-	query := url.Query()
-	query.Set("code", code)
-	query.Set("redirect_uri", req.RedirectUri)
-	query.Set("state", req.State)
-	query.Set("client_id", req.ClientId)
-	url.RawQuery = query.Encode()
+	// TODO Send EMail
+	log.Info("Magic link:", link)

-	debugMode := viper.GetBool("server.debug_mode")
-	if debugMode {
-		uriData := struct {
-			Uri string `json:"uri"`
-		}{url.String()}
+	c.JSON(200, gin.H{"message": "magic link sent"})
+}

-		utils.HttpResponse(c, 200, "", "magiclink sent", uriData)
-		return
-	} else {
-		// Send email using resend
-		emailClient, err := email.NewSMTPClient()
-		if err != nil {
-			utils.HttpResponse(c, 500, "", "invalid email config")
+func VerifyMagicLink(c *gin.Context) {
+	// Get token from url
+	token := c.Query("token")
+	if token == "" {
+		c.JSON(400, gin.H{"error": "missing token"})
 		return
 	}
-		emailClient.Send(
-			req.Email,
-			"NixCN CMS Email Verify",
-			"<p>Click the link below to verify your email. This link will expire in 10 minutes.</p><a href="+url.String()+">"+url.String()+"</a>",
-		)
+
+	// Verify email token
+	email, ok := magiclink.VerifyMagicToken(token)
+	if !ok {
+		c.JSON(401, gin.H{"error": "invalid or expired token"})
+		return
 	}

-	utils.HttpResponse(c, 200, "", "magic link sent")
+	// Generate jwt
+	uuid, _ := uuid.NewUUID()
+	jwtToken, _ := jwt.GenerateToken(uuid, "application")
+
+	c.JSON(200, gin.H{
+		"jwt_token": jwtToken,
+		"email":     email,
+	})
 }
--- a/service/auth/redirect.go
+++ b/service/auth/redirect.go
@@ -1,130 +0,0 @@
-package auth
-
-import (
-	"net/url"
-	"nixcn-cms/data"
-	"nixcn-cms/pkgs/authcode"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-	"gorm.io/gorm"
-)
-
-func Redirect(c *gin.Context) {
-	clientId := c.Query("client_id")
-	if clientId == "" {
-		utils.HttpResponse(c, 400, "", "invalid request")
-		return
-	}
-
-	redirectUri := c.Query("redirect_uri")
-	if redirectUri == "" {
-		utils.HttpResponse(c, 400, "", "invalid request")
-		return
-	}
-
-	state := c.Query("state")
-	if state == "" {
-		utils.HttpResponse(c, 400, "", "invalid request")
-		return
-	}
-
-	code := c.Query("code")
-	if code == "" {
-		userIdOrig, ok := c.Get("user_id")
-		if !ok || userIdOrig == "" {
-			utils.HttpResponse(c, 401, "", "unauthorized")
-			return
-		}
-
-		userId, err := uuid.Parse(userIdOrig.(string))
-		if err != nil {
-			utils.HttpResponse(c, 500, "", "failed to parse uuid")
-			return
-		}
-
-		userData := new(data.User)
-		user, err := userData.GetByUserId(userId)
-		if err != nil {
-			utils.HttpResponse(c, 500, "", "failed to get user id")
-			return
-		}
-
-		code, err := authcode.NewAuthCode(clientId, user.Email)
-		if err != nil {
-			utils.HttpResponse(c, 500, "", "code gen failed")
-			return
-		}
-
-		url, err := url.Parse(redirectUri)
-		if err != nil {
-			utils.HttpResponse(c, 400, "", "invalid redirect uri")
-			return
-		}
-		query := url.Query()
-		query.Set("code", code)
-		url.RawQuery = query.Encode()
-
-		c.Redirect(302, url.String())
-	}
-
-	// Verify email token
-	authCode, ok := authcode.VerifyAuthCode(code)
-	if !ok {
-		utils.HttpResponse(c, 403, "", "invalid or expired token")
-		return
-	}
-
-	// Verify if user exists
-	userData := new(data.User)
-	user, err := userData.GetByEmail(authCode.Email)
-
-	if err != nil {
-		if err == gorm.ErrRecordNotFound {
-			// Create user
-			user.UUID = uuid.New()
-			user.UserId = uuid.New()
-			user.Email = authCode.Email
-			user.Username = user.UserId.String()
-			user.PermissionLevel = 10
-			if err := user.Create(); err != nil {
-				utils.HttpResponse(c, 500, "", "internal server error")
-				return
-			}
-		} else {
-			utils.HttpResponse(c, 500, "", "internal server error")
-			return
-		}
-	}
-
-	clientData := new(data.Client)
-	client, err := clientData.GetClientByClientId(clientId)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "client not found")
-		return
-	}
-
-	err = client.ValidateRedirectURI(redirectUri)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "redirect uri not match")
-		return
-	}
-
-	newCode, err := authcode.NewAuthCode(clientId, authCode.Email)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "internal server error")
-		return
-	}
-
-	url, err := url.Parse(redirectUri)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "invalid redirect uri")
-		return
-	}
-	query := url.Query()
-	query.Set("code", newCode)
-	url.RawQuery = query.Encode()
-
-	c.Redirect(302, url.String())
-}
--- a/service/auth/refresh.go
+++ b/service/auth/refresh.go
@@ -1,43 +0,0 @@
-package auth
-
-import (
-	"nixcn-cms/pkgs/authtoken"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-	"github.com/spf13/viper"
-)
-
-func Refresh(c *gin.Context) {
-	var req struct {
-		RefreshToken string `json:"refresh_token"`
-	}
-
-	if err := c.ShouldBindJSON(&req); err != nil {
-		utils.HttpResponse(c, 400, "", "invalid request")
-		return
-	}
-
-	JwtTool := authtoken.Token{
-		Application: viper.GetString("server.application"),
-	}
-
-	accessToken, err := JwtTool.RefreshAccessToken(req.RefreshToken)
-	if err != nil {
-		utils.HttpResponse(c, 401, "", "invalid refresh token")
-		return
-	}
-
-	refreshToken, err := JwtTool.RenewRefreshToken(req.RefreshToken)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "error renew refresh token")
-		return
-	}
-
-	tokenResp := struct {
-		AccessToken  string `json:"access_token"`
-		RefreshToken string `json:"refresh_token"`
-	}{accessToken, refreshToken}
-
-	utils.HttpResponse(c, 200, "", "success", tokenResp)
-}
--- a/service/auth/token.go
+++ b/service/auth/token.go
@@ -1,55 +0,0 @@
-package auth
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/pkgs/authcode"
-	"nixcn-cms/pkgs/authtoken"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-	"github.com/spf13/viper"
-)
-
-type TokenRequest struct {
-	Code string `json:"code"`
-}
-
-func Token(c *gin.Context) {
-	var req TokenRequest
-
-	err := c.ShouldBindJSON(&req)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "invalid request")
-		return
-	}
-
-	authCode, ok := authcode.VerifyAuthCode(req.Code)
-	if !ok {
-		utils.HttpResponse(c, 403, "", "invalid or expired token")
-		return
-	}
-
-	userData := new(data.User)
-	user, err := userData.GetByEmail(authCode.Email)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "internal server error")
-		return
-	}
-
-	// Generate jwt
-	JwtTool := authtoken.Token{
-		Application: viper.GetString("server.application"),
-	}
-	accessToken, refreshToken, err := JwtTool.IssueTokens(authCode.ClientId, user.UserId)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "error generating tokens")
-		return
-	}
-
-	tokenResp := struct {
-		AccessToken  string `json:"access_token"`
-		RefreshToken string `json:"refresh_token"`
-	}{accessToken, refreshToken}
-
-	utils.HttpResponse(c, 200, "", "success", tokenResp)
-}
--- a/service/checkin/handler.go
+++ b/service/checkin/handler.go
@@ -0,0 +1,11 @@
+package checkin
+
+import (
+	"nixcn-cms/internal/crypto/jwt"
+
+	"github.com/gin-gonic/gin"
+)
+
+func Handler(r *gin.RouterGroup) {
+	r.Use(jwt.JWTAuth())
+}
--- a/service/event/checkin.go
+++ b/service/event/checkin.go
@@ -1,108 +0,0 @@
-package event
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/utils"
-	"time"
-
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-)
-
-func Checkin(c *gin.Context) {
-	data := new(data.Attendance)
-	userIdOrig, ok := c.Get("user_id")
-	if !ok {
-		utils.HttpResponse(c, 403, "", "userid error")
-		return
-	}
-	userId, err := uuid.Parse(userIdOrig.(string))
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "failed to parse uuid")
-	}
-
-	// Get event id from query
-	eventIdOrig, ok := c.GetQuery("event_id")
-	if !ok {
-		utils.HttpResponse(c, 400, "", "undefinded event id")
-		return
-	}
-
-	// Parse event id to uuid
-	eventId, err := uuid.Parse(eventIdOrig)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "error parsing string to uuid")
-		return
-	}
-	data.UserId = userId
-	code, err := data.GenCheckinCode(eventId)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "error generating code")
-		return
-	}
-
-	checkinCodeResp := struct {
-		CheckinCode *string `json:"checkin_code"`
-	}{code}
-	utils.HttpResponse(c, 200, "", "success", checkinCodeResp)
-}
-
-func CheckinSubmit(c *gin.Context) {
-	var req struct {
-		ChekinCode string `json:"checkin_code"`
-	}
-	c.ShouldBindJSON(&req)
-
-	attendanceData := new(data.Attendance)
-	err := attendanceData.VerifyCheckinCode(req.ChekinCode)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "error verify checkin code")
-		return
-	}
-
-	utils.HttpResponse(c, 200, "", "success")
-}
-
-func CheckinQuery(c *gin.Context) {
-	userIdOrig, ok := c.Get("user_id")
-	if !ok {
-		utils.HttpResponse(c, 400, "", "userid error")
-		return
-	}
-	userId, err := uuid.Parse(userIdOrig.(string))
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "failed to parse uuid")
-		return
-	}
-
-	eventIdOrig, ok := c.GetQuery("event_id")
-	if !ok {
-		utils.HttpResponse(c, 400, "", "could not found event_id")
-		return
-	}
-	eventId, err := uuid.Parse(eventIdOrig)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "event_id is not valid")
-		return
-	}
-
-	attendanceData := new(data.Attendance)
-	attendance, err := attendanceData.GetAttendance(userId, eventId)
-
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "database error")
-		return
-	} else if attendance == nil {
-		utils.HttpResponse(c, 404, "", "event checkin record not found")
-		return
-	} else if attendance.CheckinAt.IsZero() {
-		utils.HttpResponse(c, 200, "", "success", gin.H{"checkin_at": nil})
-		return
-	}
-
-	checkInAtResp := struct {
-		CheckinAt time.Time `json:"checkin_at"`
-	}{attendance.CheckinAt}
-
-	utils.HttpResponse(c, 200, "", "success", checkInAtResp)
-}
--- a/service/event/create.go
+++ b/service/event/create.go
@@ -1 +0,0 @@
-package event
--- a/service/event/handler.go
+++ b/service/event/handler.go
@@ -1,15 +0,0 @@
-package event
-
-import (
-	"nixcn-cms/middleware"
-
-	"github.com/gin-gonic/gin"
-)
-
-func Handler(r *gin.RouterGroup) {
-	r.Use(middleware.JWTAuth(true), middleware.Permission(10))
-	r.GET("/info", Info)
-	r.GET("/checkin", Checkin)
-	r.GET("/checkin/query", CheckinQuery)
-	r.POST("/checkin/submit", CheckinSubmit, middleware.Permission(20))
-}
--- a/service/event/info.go
+++ b/service/event/info.go
@@ -1,40 +0,0 @@
-package event
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/utils"
-	"time"
-
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-)
-
-func Info(c *gin.Context) {
-	eventData := new(data.Event)
-	eventIdOrig, ok := c.GetQuery("event_id")
-	if !ok {
-		utils.HttpResponse(c, 400, "", "undefinded event id")
-		return
-	}
-
-	// Parse event id
-	eventId, err := uuid.Parse(eventIdOrig)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "error parsing string to uuid")
-		return
-	}
-
-	event, err := eventData.GetEventById(eventId)
-	if err != nil {
-		utils.HttpResponse(c, 404, "", "event id not found")
-		return
-	}
-
-	eventInfoResp := struct {
-		Name      string    `json:"name"`
-		StartTime time.Time `json:"start_time"`
-		EndTime   time.Time `json:"end_time"`
-	}{event.Name, event.StartTime, event.EndTime}
-
-	utils.HttpResponse(c, 200, "", "success", eventInfoResp)
-}
--- a/service/event/list.go
+++ b/service/event/list.go
@@ -1 +0,0 @@
-package event
--- a/service/event/update.go
+++ b/service/event/update.go
@@ -1 +0,0 @@
-package event
--- a/service/user/create.go
+++ b/service/user/create.go
@@ -1,7 +0,0 @@
-package user
-
-import "github.com/gin-gonic/gin"
-
-func Create(c *gin.Context) {
-
-}
--- a/service/user/full.go
+++ b/service/user/full.go
@@ -1,39 +0,0 @@
-package user
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-)
-
-func Full(c *gin.Context) {
-	userIdOrig, ok := c.Get("user_id")
-	if !ok {
-		utils.HttpResponse(c, 403, "", "userid error")
-		return
-	}
-	userId, err := uuid.Parse(userIdOrig.(string))
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "failed to parse uuid")
-		return
-	}
-
-	userData, err := new(data.User).GetByUserId(userId)
-	if err != nil {
-		utils.HttpResponse(c, 404, "", "user not found")
-		return
-	}
-
-	users, err := userData.GetFullTable()
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "database error")
-		return
-	}
-
-	userFullResp := struct {
-		UserTable *[]data.User `json:"user_table"`
-	}{users}
-	utils.HttpResponse(c, 200, "", "success", userFullResp)
-}
--- a/service/user/handler.go
+++ b/service/user/handler.go
@@ -1,16 +0,0 @@
-package user
-
-import (
-	"nixcn-cms/middleware"
-
-	"github.com/gin-gonic/gin"
-)
-
-func Handler(r *gin.RouterGroup) {
-	r.Use(middleware.JWTAuth(true), middleware.Permission(5))
-	r.GET("/info", Info)
-	r.PATCH("/update", Update)
-	r.GET("/list", List, middleware.Permission(20))
-	r.POST("/full", Full, middleware.Permission(40))
-	r.POST("/create", Create, middleware.Permission(50))
-}
--- a/service/user/info.go
+++ b/service/user/info.go
@@ -1,43 +0,0 @@
-package user
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-)
-
-func Info(c *gin.Context) {
-	userData := new(data.User)
-	userIdOrig, ok := c.Get("user_id")
-	if !ok {
-		utils.HttpResponse(c, 403, "", "userid error")
-		return
-	}
-	userId, err := uuid.Parse(userIdOrig.(string))
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "failed to parse uuid")
-		return
-	}
-
-	// Get user from database
-	user, err := userData.GetByUserId(userId)
-	if err != nil {
-		utils.HttpResponse(c, 404, "", "user not found")
-		return
-	}
-
-	userInfoResp := struct {
-		UserId          uuid.UUID `json:"user_id"`
-		Email           string    `json:"email"`
-		Username        string    `json:"username"`
-		Nickname        string    `json:"nickname"`
-		Subtitle        string    `json:"subtitle"`
-		Avatar          string    `json:"avatar"`
-		Bio             string    `json:"bio"`
-		PermissionLevel uint      `json:"permission_level"`
-	}{user.UserId, user.Email, user.Username, user.Nickname, user.Subtitle, user.Avatar, user.Bio, user.PermissionLevel}
-
-	utils.HttpResponse(c, 200, "", "success", userInfoResp)
-}
--- a/service/user/list.go
+++ b/service/user/list.go
@@ -1,45 +0,0 @@
-package user
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/utils"
-	"strconv"
-
-	"github.com/gin-gonic/gin"
-)
-
-func List(c *gin.Context) {
-	// Get limit and offset from query
-	limit, ok := c.GetQuery("limit")
-	if !ok {
-		limit = "0"
-	}
-	offset, ok := c.GetQuery("offset")
-	if !ok {
-		utils.HttpResponse(c, 400, "", "offset not found")
-		return
-	}
-
-	// Parse string to int64
-	limitNum, err := strconv.ParseInt(limit, 10, 64)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "parse string to int error")
-		return
-	}
-	offsetNum, err := strconv.ParseInt(offset, 10, 64)
-	if err != nil {
-		utils.HttpResponse(c, 400, "", "parse string to int error")
-		return
-	}
-
-	// Get user list from search engine
-	list, err := new(data.User).FastListUsers(limitNum, offsetNum)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "failed list users from meilisearch")
-	}
-
-	userListResp := struct {
-		List *[]data.UserSearchDoc `json:"list"`
-	}{list}
-	utils.HttpResponse(c, 200, "", "success", userListResp)
-}
--- a/service/user/update.go
+++ b/service/user/update.go
@@ -1,62 +0,0 @@
-package user
-
-import (
-	"nixcn-cms/data"
-	"nixcn-cms/internal/cryptography"
-	"nixcn-cms/utils"
-
-	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
-)
-
-func Update(c *gin.Context) {
-	// New user model
-	userIdOrig, ok := c.Get("user_id")
-	if !ok {
-		utils.HttpResponse(c, 403, "", "userid error")
-		return
-	}
-	userId, err := uuid.Parse(userIdOrig.(string))
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "failed to parse uuid")
-		return
-	}
-
-	var ReqInfo data.User
-	c.BindJSON(&ReqInfo)
-
-	// Get user info
-	userData, err := new(data.User).GetByUserId(userId)
-	if err != nil {
-		utils.HttpResponse(c, 500, "", "failed to find user")
-		return
-	}
-
-	if len(ReqInfo.Email) < 5 || len(ReqInfo.Email) >= 255 {
-		utils.HttpResponse(c, 400, "", "invilad email")
-		return
-	}
-	userData.Email = ReqInfo.Email
-
-	if len(ReqInfo.Username) < 5 || len(ReqInfo.Username) >= 255 {
-		utils.HttpResponse(c, 400, "", "invilad user name")
-		return
-	}
-	userData.Username = ReqInfo.Username
-
-	userData.Nickname = ReqInfo.Nickname
-	userData.Subtitle = ReqInfo.Subtitle
-	userData.Avatar = ReqInfo.Avatar
-
-	if ReqInfo.Bio != "" {
-		if !cryptography.IsBase64Std(ReqInfo.Bio) {
-			utils.HttpResponse(c, 400, "", "invalid base64")
-		}
-	}
-	userData.Bio = ReqInfo.Bio
-
-	// Update user info
-	userData.UpdateByUserID(userId)
-
-	utils.HttpResponse(c, 200, "", "success")
-}
--- a/utils/response.go
+++ b/utils/response.go
@@ -1,30 +0,0 @@
-package utils
-
-import "github.com/gin-gonic/gin"
-
-type RespStatus struct {
-	Code    int    `json:"code"`
-	ErrorId string `json:"error_id"`
-	Status  string `json:"status"`
-	Data    any    `json:"data"`
-}
-
-func HttpResponse(c *gin.Context, code int, errorId string, status string, data ...any) {
-	var resp = RespStatus{
-		Code:    code,
-		ErrorId: errorId,
-		Status:  status,
-		Data:    data,
-	}
-	c.JSON(code, resp)
-}
-
-func HttpAbort(c *gin.Context, code int, errorId string, status string, data ...any) {
-	var resp = RespStatus{
-		Code:    code,
-		ErrorId: errorId,
-		Status:  status,
-		Data:    data,
-	}
-	c.AbortWithStatusJSON(code, resp)
-}
Author	SHA1	Message	Date
Noa Virellia	cfe8bd0bfa	feat(client): workspace Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	0d3651f923	refactor(client): token helper Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	a84a13339f	feat(client): login page Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	bbb77a7c5e	feat(client): setup axios client Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	cb46eb4a60	feat(client): setup tanstack query and axios Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	adbad1c365	feat(client): setup tanstack router Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	3df97e2125	feat(client): add shadcn theme - Added Nix theme - Defaults to dark mode Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	252543957b	feat(client): setup tailwindcss and shadcn Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	eb4a0b83e3	feat(client): setup formatting - Installed @antfu/eslint-config for formatting - Installed lint-staged for pre-commit formatting compliance Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00
Noa Virellia	4f6c54e891	feat(client): initial commit - Initialized vite project - Added bun devshell config Signed-off-by: Noa Virellia <noa@requiem.garden>	2025-12-24 13:12:02 +00:00