Enhance reports, budget, settings, and splits features

.env.example

@@ -27,6 +27,13 @@ DATABASE_URL="postgresql://postgres:password@localhost:5432/trackit-saas"
 BETTER_AUTH_SECRET="your_secret_here"
 BETTER_AUTH_URL="http://localhost:3000"
 
+# Google OAuth (optional — enables "Continue with Google")
+GOOGLE_CLIENT_ID="your_google_client_id"
+GOOGLE_CLIENT_SECRET="your_google_client_secret"
+
+# Better Auth Infrastructure (optional — dashboard + security)
+BETTER_AUTH_API_KEY="your_better_auth_api_key"
+
 # ──────────────────────────────────────────────
 # Email - Primary: Resend (optional, needs paid plan)
 # ──────────────────────────────────────────────
@@ -41,6 +48,7 @@ SMTP_PORT=587
 SMTP_USER="you@gmail.com"
 SMTP_PASS="your_app_password"
 SMTP_FROM="Trackit <you@gmail.com>"
+ADMIN_EMAIL="admin@yourdomain.com"
 
 # ──────────────────────────────────────────────
 # AI (Google Gemini) — server-side only
@@ -76,3 +84,10 @@ NEXT_PUBLIC_BETTER_STACK_LOG_LEVEL="debug"
 # ──────────────────────────────────────────────
 UPSTASH_REDIS_REST_URL="your_upstash_redis_rest_url"
 UPSTASH_REDIS_REST_TOKEN="your_upstash_redis_rest_token"
+
+# ──────────────────────────────────────────────
+# Field-Level PII Encryption (optional)
+# ──────────────────────────────────────────────
+# 256-bit hex key for AES-256-GCM encryption of PII fields.
+# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+FIELD_ENCRYPTION_KEY=""

README.md

@@ -51,8 +51,8 @@ A personal finance SaaS for bank account management, transaction tracking, hiera
 ### 1. Clone and Install
 
 ```bash
-git clone <repo-url>
-cd trackit-saas
+git clone https://github.com/hasnaintypes/trackit-app.git
+cd trackit-app
 pnpm install
 ```
 

middleware.ts

@@ -8,13 +8,14 @@ const AUTH_PATHS = [
   "/sign-in",
   "/sign-up",
   "/reset-password",
+  "/forgot-password",
   "/verify-success",
+  "/two-factor",
 ];
 
 // Public pages under src/app/(public)
 const PUBLIC_PATHS = [
   "/",
-  "/about",
   "/blog",
   "/changelog",
   "/contact",

next.config.js

@@ -51,6 +51,11 @@ config.images = {
       hostname: "randomuser.me",
       pathname: "/api/portraits/**",
     },
+    {
+      protocol: "https",
+      hostname: "www.comarch.com",
+      pathname: "/**",
+    },
   ],
 };
 

package.json

@@ -25,6 +25,7 @@
     "prepare": "husky install"
   },
   "dependencies": {
+    "@better-auth/infra": "^0.1.13",
     "@google/generative-ai": "^0.24.1",
     "@hookform/resolvers": "^5.2.2",
     "@logtail/next": "^0.2.1",
@@ -68,7 +69,7 @@
     "@tsparticles/slim": "^3.9.1",
     "@upstash/ratelimit": "^2.0.8",
     "@upstash/redis": "^1.37.0",
-    "better-auth": "^1.3.27",
+    "better-auth": "^1.5.6",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
@@ -81,13 +82,15 @@
     "hast-util-sanitize": "^5.0.2",
     "inngest": "^3.18.0",
     "input-otp": "^1.4.2",
+    "jspdf": "^4.2.1",
     "lucide-react": "^0.545.0",
     "motion": "^12.23.24",
     "next": "15.5.9",
     "next-themes": "^0.4.6",
     "nodemailer": "^8.0.2",
     "pg": "^8.16.3",
     "prismjs": "^1.30.0",
+    "qrcode.react": "^4.2.0",
     "radix-ui": "^1.4.3",
     "react": "^19.2.4",
     "react-day-picker": "^9.11.3",
@@ -106,7 +109,7 @@
     "superjson": "^2.2.1",
     "tailwind-merge": "^3.3.1",
     "vaul": "^1.1.2",
-    "zod": "^3.24.2"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.1",