Harden authentication, tenant isolation and security boundaries

package.json

@@ -3,23 +3,28 @@
   "version": "0.1.0",
   "private": true,
   "scripts": {
-    "dev": "NODE_ENV=development prisma db push && NODE_ENV=development prisma db seed && next dev",
-    "build": "next build",
-    "build:prod": "prisma generate && next build",
+    "dev": "next dev",
+    "build": "next build && node scripts/prepare-standalone.mjs",
+    "build:prod": "prisma generate && next build && node scripts/prepare-standalone.mjs",
     "start": "next start",
-    "start:prod": "next start",
+    "start:prod": "node .next/standalone/server.js",
     "lint": "eslint",
     "prisma:generate": "prisma generate",
     "prisma:migrate": "prisma migrate dev",
     "prisma:studio": "prisma studio",
-    "db:seed": "NODE_ENV=development prisma db seed",
-    "db:seed:reset": "NODE_ENV=development prisma db seed -- --reset"
+    "db:seed": "prisma db seed",
+    "db:seed:reset": "prisma db seed -- --reset",
+    "db:migrate:deploy": "prisma migrate deploy",
+    "test:security": "node --test tests/security.test.cjs",
+    "db:provision-runtime": "node scripts/provision-runtime-role.mjs",
+    "uploads:backfill": "tsx scripts/backfill-attachment-sizes.ts",
+    "uploads:cleanup": "tsx scripts/cleanup-attachments.ts",
+    "test:security:http": "node tests/security-http.cjs"
   },
   "prisma": {
     "seed": "tsx prisma/seed.ts"
   },
   "dependencies": {
-    "@auth/prisma-adapter": "^2.11.2",
     "@hookform/resolvers": "^5.2.2",
     "@prisma/client": "^6.19.3",
     "@radix-ui/react-checkbox": "^1.3.3",
@@ -36,8 +41,8 @@
     "clsx": "^2.1.1",
     "date-fns": "^4.1.0",
     "lucide-react": "^1.14.0",
-    "next": "16.2.4",
-    "next-auth": "^5.0.0-beta.31",
+    "next": "^16.4.0",
+    "next-auth": "^5.0.0-beta.32",
     "next-themes": "^0.4.6",
     "react": "19.2.4",
     "react-dom": "19.2.4",
@@ -57,10 +62,18 @@
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "eslint": "^9",
-    "eslint-config-next": "16.2.4",
+    "eslint-config-next": "^16.4.0",
     "prisma": "^6.19.3",
     "tailwindcss": "^4",
     "tsx": "^4.21.0",
     "typescript": "^5"
+  },
+  "overrides": {
+    "@prisma/config": {
+      "deepmerge-ts": "8.0.0"
+    },
+    "tsx": {
+      "esbuild": "^0.28.1"
+    }
   }
 }