chore(release): v5.1.2

Closes #2986.

Since v5.1.0 the renderer was migrated from Puppeteer to
@react-pdf/renderer. The new pipeline only registers the user-selected
typography family (e.g. Roboto, IBM Plex Serif), which contains no CJK
glyphs, so any Chinese / Japanese / Korean characters in the resume
fall back to .notdef and render as garbled boxes in both the in-app
preview and the exported PDF.

@react-pdf/renderer's textkit layer already supports per-codepoint
font substitution when a Text node is styled with `fontFamily` as a
string array — but only if every family in the stack has been
registered via Font.register. This change wires that up:

- packages/fonts: new `getPdfCjkFallbackFontFamily(family)` returns
  Noto Sans SC / Noto Serif SC depending on whether the primary font
  is sans-serif or serif, and `null` when no fallback is needed
  (standard PDF font, or primary already is the fallback). Source Han
  Sans/Serif SC covers all CJK-Unified ideographs, so a single font
  transparently handles Simplified/Traditional Chinese, Japanese
  kanji and Korean hanja.

- packages/pdf/hooks/use-register-fonts: after registering the
  primary body/heading fonts as before, additionally register the
  resolved CJK fallback (regular weight only — substitution is
  per-codepoint, not per-weight, so one face is enough). The
  function's return type is widened to a new `PdfTypography` whose
  `body.fontFamily` and `heading.fontFamily` become
  `[primary, cjkFallback]` two-element stacks.

- packages/pdf/document: cast the widened typography back through the
  schema-typed `ResumeData` so the wider runtime value reaches
  templates without changing the public `Typography` schema. All 15
  templates already consume `metadata.typography.body.fontFamily`
  directly, and `StyleSheet.fontFamily` accepts both string and
  string[], so no template edits are required.

Latin-only resumes are unaffected:
- `getPdfCjkFallbackFontFamily` returns `null` for standard PDF fonts
  and existing CJK selections, so the extra Font.register call is
  skipped.
- When no fallback applies, `registerFonts` returns the original
  typography reference unchanged (zero allocation).
- Even when the fallback is registered, textkit only consults it for
  codepoints the primary font cannot render, so Latin glyphs still
  come from the user-selected font with identical metrics.

.devcontainer/Dockerfile

@@ -1,10 +0,0 @@
-FROM mcr.microsoft.com/devcontainers/typescript-node:24
-
-RUN corepack enable
-
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    git \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
-
-EXPOSE 3000

.devcontainer/devcontainer.json

@@ -1,32 +0,0 @@
-{
-	"name": "Reactive Resume",
-	"service": "reactive_resume",
-	"dockerComposeFile": "docker-compose.yml",
-	"workspaceFolder": "/workspace",
-
-	"forwardPorts": [3000, 4000, 5432, 8333],
-	"portsAttributes": {
-		"3000": { "label": "Reactive Resume", "onAutoForward": "openBrowser" },
-		"4000": { "label": "Browserless (Printer)" },
-		"5432": { "label": "PostgreSQL" },
-		"8333": { "label": "SeaweedFS (S3)" }
-	},
-
-	"customizations": {
-		"vscode": {
-			"extensions": ["biomejs.biome", "bradlc.vscode-tailwindcss", "lokalise.i18n-ally"],
-			"settings": {
-				"biome.enabled": true,
-				"editor.codeActionsOnSave": {
-					"source.biome": "explicit",
-					"source.fixAll.biome": "explicit",
-					"source.organizeImports.biome": "explicit"
-				},
-				"editor.defaultFormatter": "biomejs.biome",
-				"typescript.tsdk": "node_modules/typescript/lib"
-			}
-		}
-	},
-
-	"postCreateCommand": "corepack enable && pnpm install"
-}

.devcontainer/docker-compose.yml

@@ -1,96 +0,0 @@
-services:
-  reactive_resume:
-    build:
-      context: ..
-      dockerfile: .devcontainer/Dockerfile
-    volumes:
-      - ..:/workspace:cached
-    command: sleep infinity
-    depends_on:
-      postgres:
-        condition: service_healthy
-      browserless:
-        condition: service_started
-      seaweedfs:
-        condition: service_healthy
-      seaweedfs_create_bucket:
-        condition: service_completed_successfully
-    environment:
-      TZ: Etc/UTC
-      APP_URL: http://localhost:3000
-      PRINTER_APP_URL: http://reactive_resume:3000
-      PRINTER_ENDPOINT: ws://browserless:3000?token=1234567890
-      DATABASE_URL: postgresql://postgres:postgres@postgres:5432/postgres
-      AUTH_SECRET: change-me-to-a-secure-secret-key-in-production
-      S3_ACCESS_KEY_ID: seaweedfs
-      S3_SECRET_ACCESS_KEY: seaweedfs
-      S3_REGION: us-east-1
-      S3_ENDPOINT: http://seaweedfs:8333
-      S3_BUCKET: reactive-resume
-      S3_FORCE_PATH_STYLE: "true"
-
-  postgres:
-    image: postgres:latest
-    restart: unless-stopped
-    environment:
-      POSTGRES_DB: postgres
-      POSTGRES_USER: postgres
-      POSTGRES_PASSWORD: postgres
-    volumes:
-      - postgres_data:/var/lib/postgresql
-    healthcheck:
-      test: ["CMD", "pg_isready", "-U", "postgres", "-d", "postgres"]
-      start_period: 10s
-      interval: 30s
-      timeout: 10s
-      retries: 3
-
-  browserless:
-    image: ghcr.io/browserless/chromium:latest
-    restart: unless-stopped
-    environment:
-      QUEUED: "10"
-      HEALTH: "true"
-      CONCURRENT: "5"
-      TOKEN: "1234567890"
-    healthcheck:
-      test:
-        ["CMD", "curl", "-f", "http://localhost:3000/pressure?token=1234567890"]
-      interval: 10s
-      timeout: 5s
-      retries: 10
-
-  seaweedfs:
-    image: chrislusf/seaweedfs:latest
-    restart: unless-stopped
-    command: server -s3 -filer -dir=/data -ip=0.0.0.0
-    environment:
-      AWS_ACCESS_KEY_ID: seaweedfs
-      AWS_SECRET_ACCESS_KEY: seaweedfs
-    volumes:
-      - seaweedfs_data:/data
-    healthcheck:
-      test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://localhost:8888"]
-      start_period: 10s
-      interval: 30s
-      timeout: 10s
-      retries: 3
-
-  seaweedfs_create_bucket:
-    image: quay.io/minio/mc:latest
-    restart: on-failure
-    entrypoint: >
-      /bin/sh -c "
-        until mc alias set seaweedfs http://seaweedfs:8333 seaweedfs seaweedfs; do
-          echo 'Waiting for SeaweedFS...';
-          sleep 2;
-        done;
-        mc mb seaweedfs/reactive-resume --ignore-existing;
-      "
-    depends_on:
-      seaweedfs:
-        condition: service_healthy
-
-volumes:
-  postgres_data:
-  seaweedfs_data:

.dockerignore

@@ -1,15 +1,31 @@
-dist
-docs
+# VCS and editor state
+.git
+.gitignore
+.cursor
+.DS_Store
+
+# Local configuration and runtime state
 .env*
 /data
+
+# Dependency and package-manager caches
+node_modules
+**/node_modules
+.pnpm-store
+
+# Build, test, and framework output
+dist
+**/dist
 .nitro
-.cursor
 .output
 .vercel
 .netlify
-coverage
-.DS_Store
 .tanstack
-node_modules
+.turbo
+**/.turbo
+coverage
+reports
+
+# Generated service-worker assets are rebuilt during the web build.
 public/sw.js
-public/workbox-*.js
+public/workbox-*.js

.env.example

@@ -1,41 +1,60 @@
-# --- Server ---
-TZ="Etc/UTC"
+# --- Application ---
+# Port used by the web server in local development and self-hosted containers.
+PORT="3000"
+
+# Public URL where the app is served. Used for auth callbacks, OAuth issuer URLs,
+# OpenGraph metadata, and absolute upload URLs.
 APP_URL="http://localhost:3000"
 
-# Optional, uses APP_URL by default
-# PLEASE READ: This should be set to an internal URL (like http://host.docker.internal:3000 or http://{docker_service}:3000)
-# to let the browser navigate to a non-public instance of Reactive Resume.
-# This is required when the printer service is running inside Docker, and cannot reach the app via the APP URL,
-# which is usually when the APP_URL is localhost or a local network IP/hostname.
-PRINTER_APP_URL="http://host.docker.internal:3000"
-
-# --- Printer ---
-PRINTER_ENDPOINT="ws://localhost:4000?token=1234567890"
-
 # --- Database (PostgreSQL) ---
+# PostgreSQL connection URL. In Docker Compose, the hostname is usually `postgres`;
+# when running directly on your machine, `localhost` is typical.
 DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres"
 
 # --- Authentication ---
 # Generated using `openssl rand -hex 32`
 AUTH_SECRET="change-me-to-a-secure-secret-key-in-production"
 
+# Better Auth Dashboard (optional)
+# Enables the Better Auth Dashboard plugin when set, you probably don't need this.
+BETTER_AUTH_API_KEY=""
+
 # Social Auth (Google, optional)
+# Set both values to enable Google sign-in.
 GOOGLE_CLIENT_ID=""
 GOOGLE_CLIENT_SECRET=""
 
 # Social Auth (GitHub, optional)
+# Set both values to enable GitHub sign-in.
 GITHUB_CLIENT_ID=""
 GITHUB_CLIENT_SECRET=""
 
-# Custom OAuth Provider
+# Social Auth (LinkedIn, optional)
+# Set both values to enable LinkedIn sign-in.
+LINKEDIN_CLIENT_ID=""
+LINKEDIN_CLIENT_SECRET=""
+
+# Custom OAuth Provider (optional)
+# Set OAUTH_CLIENT_ID and OAUTH_CLIENT_SECRET plus either OAUTH_DISCOVERY_URL or
+# the three manual endpoint URLs below.
 OAUTH_PROVIDER_NAME=""
 OAUTH_CLIENT_ID=""
 OAUTH_CLIENT_SECRET=""
 OAUTH_DISCOVERY_URL=""
 OAUTH_AUTHORIZATION_URL=""
+OAUTH_TOKEN_URL=""
+OAUTH_USER_INFO_URL=""
+
+# Space-separated scopes requested from the custom OAuth provider.
+OAUTH_SCOPES="openid profile email"
+
+# Comma-separated extra hosts/origins allowed for dynamic OAuth client redirect URIs.
+# By default, only the APP_URL origin is allowed.
+OAUTH_DYNAMIC_CLIENT_REDIRECT_HOSTS=""
 
 # --- Email (optional) ---
-# If all keys are disabled, the app logs the email to be sent to the console instead.
+# If SMTP_HOST, SMTP_USER, SMTP_PASS, or SMTP_FROM is missing, the app logs the
+# email to the console instead.
 SMTP_HOST="localhost"
 SMTP_PORT="1025"
 SMTP_USER=""
@@ -44,8 +63,11 @@ SMTP_FROM="Reactive Resume <noreply@rxresu.me>"
 SMTP_SECURE="false"
 
 # --- Storage (optional) ---
-# If all keys are disabled, the app uses local filesystem (/data) to store uploads instead.
+# If all S3 keys are disabled, the app uses local filesystem storage instead.
 # Make sure to mount this directory to a volume or the host filesystem to ensure data integrity.
+# LOCAL_STORAGE_PATH overrides where local uploads/cache are written.
+# Defaults to /app/data in the official Docker image; in dev, defaults to <workspace>/data.
+# LOCAL_STORAGE_PATH="/app/data"
 
 # Seaweedfs
 S3_ACCESS_KEY_ID="seaweedfs"
@@ -56,18 +78,24 @@ S3_BUCKET="reactive-resume"
 S3_FORCE_PATH_STYLE="true"
 
 # --- Feature Flags ---
-# This flag bypasses the check that the endpoint to fetch data for the printing of PDFs `getByIdForPrinter`, is only accessible from the server.
-# Useful for when you want to debug the /printer/{resumeId} route to quickly take a peek at the page that is sent to the printer.
-FLAG_DEBUG_PRINTER="false"
-
 # This flag disables new signups, both on the web app and the server.
 FLAG_DISABLE_SIGNUPS="false"
 
-# This flag disables email/password login. Disables email verification, forgot password, and reset password flows. Users can still sign up via social auth (Google/GitHub/Custom OAuth), unless FLAG_DISABLE_SIGNUPS is also set to true.
+# This flag disables email/password login. Disables email verification, forgot password, and reset password flows.
+# Users can still sign up via social auth (Google/GitHub/Custom OAuth), unless FLAG_DISABLE_SIGNUPS is also set to true.
 FLAG_DISABLE_EMAIL_AUTH="false"
 
+# This flag disables the image processing.
+# This is useful if you are using a machine with limited resources, like a Raspberry Pi.
+FLAG_DISABLE_IMAGE_PROCESSING="false"
+
 # --- Others ---
 # Google Cloud API Key (optional)
-# This is not used within Reactive Resume, but in src/scripts/fonts/generate.ts to generate a list of fonts served by Google Fonts.
-# Note: Make sure "Google Fonts Developer API" is unrestricted.
+# For font-list generation tooling.
+# Requires "Google Fonts Developer API" to be enabled.
 GOOGLE_CLOUD_API_KEY=""
+
+# Crowdin (optional)
+# For translation tooling.
+CROWDIN_PROJECT_ID=""
+CROWDIN_API_TOKEN=""

.gitattributes

@@ -1 +0,0 @@
-locales/*.po linguist-generated=true

.github/.well-known/funding.json

@@ -5,7 +5,7 @@
 		"type": "individual",
 		"role": "maintainer",
 		"name": "Amruth Pillai",
-		"email": "im.amruth@gmail.com",
+		"email": "hello@amruthpillai.com",
 		"description": "Software Engineer",
 		"webpageUrl": {
 			"url": "https://rxresu.me/funding.json"

.github/FUNDING.yml

@@ -1,2 +1,2 @@
 github: AmruthPillai
-open_collective: reactive-resume
+open_collective: reactive-resume

.github/ISSUE_TEMPLATE/2-feature-request.yml

@@ -20,4 +20,4 @@ body:
       label: Feature Description
       description: A detailed description of the feature you would like to see in Reactive Resume. Please provide as much detail as possible as it will help me implement the feature faster.
     validations:
-      required: true
+      required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1 +1 @@
-blank_issues_enabled: false
+blank_issues_enabled: false

.github/workflows/autofix.yml

@@ -0,0 +1,41 @@
+name: autofix.ci
+
+on:
+  pull_request:
+  push:
+    branches: ["main"]
+
+permissions:
+  contents: read
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  autofix:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v6
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v6
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: "lts/*"
+          cache: "pnpm"
+
+      - name: Install Dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Remove Unused Dependencies
+        run: pnpm knip --fix
+
+      - name: Lint and Format
+        run: pnpm check
+
+      - name: Autofix
+        uses: autofix-ci/action@7a166d7532b277f34e16238930461bf77f9d7ed8

.github/workflows/crowdin-sync.yml

@@ -0,0 +1,36 @@
+name: Sync Translations from Crowdin
+
+on:
+  push:
+    branches: ["main"]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  crowdin-sync:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v6
+
+      - name: Sync Translations from Crowdin
+        uses: crowdin/github-action@v2
+        with:
+          download_translations: true
+          localization_branch_name: "l10n"
+          commit_message: "[skip ci] chore(i18n): sync translations from crowdin"
+          pull_request_title: "Sync Translations from Crowdin"
+          pull_request_body: "This is an automated pull request to sync translations from [Crowdin](https://crowdin.com/project/reactive-resume)."
+          pull_request_labels: "l10n"
+          pull_request_reviewers: "amruthpillai"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
+          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}

.github/workflows/docker-build.yml

@@ -9,6 +9,7 @@ concurrency:
 
 env:
   IMAGE: ${{ github.repository }}
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 
 jobs:
   build:
@@ -41,16 +42,16 @@ jobs:
         run: echo "version=$(jq -r .version package.json)" >> "$GITHUB_OUTPUT"
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -58,7 +59,7 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: |
             ghcr.io/${{ env.IMAGE }}
@@ -68,7 +69,7 @@ jobs:
 
       - name: Build and Push by Digest
         id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           sbom: true
@@ -88,7 +89,7 @@ jobs:
           touch "/tmp/digests/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: digests-${{ matrix.arch }}
           path: /tmp/digests/*
@@ -118,23 +119,23 @@ jobs:
         run: echo "version=$(jq -r .version package.json)" >> "$GITHUB_OUTPUT"
 
       - name: Download digests
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           path: /tmp/digests
           pattern: digests-*
           merge-multiple: true
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -146,13 +147,13 @@ jobs:
           VERSION="${{ steps.version.outputs.version }}"
           MAJOR=$(echo "$VERSION" | cut -d. -f1)
           MINOR=$(echo "$VERSION" | cut -d. -f2)
-          
+
           echo "major=$MAJOR" >> "$GITHUB_OUTPUT"
           echo "minor=$MINOR" >> "$GITHUB_OUTPUT"
 
       - name: Extract metadata for Docker
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: |
             ghcr.io/${{ env.IMAGE }}
@@ -181,7 +182,7 @@ jobs:
             --annotation "index:org.opencontainers.image.version=${{ steps.version.outputs.version }}" \
             $(printf 'ghcr.io/${{ env.IMAGE }}@sha256:%s ' *) \
             $(printf 'docker.io/${{ env.IMAGE }}@sha256:%s ' *)
-          
+
           # Get the digest of the multi-arch manifest
           GHCR_DIGEST=$(docker buildx imagetools inspect ghcr.io/${{ env.IMAGE }}:v${{ steps.version.outputs.version }} --format '{{json .Manifest.Digest}}' | tr -d '"')
           DOCKER_DIGEST=$(docker buildx imagetools inspect docker.io/${{ env.IMAGE }}:v${{ steps.version.outputs.version }} --format '{{json .Manifest.Digest}}' | tr -d '"')
@@ -195,7 +196,7 @@ jobs:
         run: |
           # Sign GHCR image
           cosign sign --yes ghcr.io/${{ env.IMAGE }}@${{ steps.manifest.outputs.ghcr_digest }}
-          
+
           # Sign Docker Hub image
           cosign sign --yes docker.io/${{ env.IMAGE }}@${{ steps.manifest.outputs.docker_digest }}
 
@@ -212,4 +213,4 @@ jobs:
           username: ${{ secrets.SSH_USER }}
           script: |
             cd docker
-            ./manage_stack.sh up reactive_resume
+            ./manage_stack.sh up reactive_resume

.gitignore

@@ -1,17 +1,54 @@
-dist
-.env*
-/data
-.nitro
+# Dependencies
+node_modules
+.pnpm-store
+
+# Build Outputs
 .output
 .vercel
-.cursor
-TODO.md
-coverage
-.netlify
-.DS_Store
-.tanstack
-node_modules
+.wrangler
+
+# Environment Variables
+.env*
 !.env.example
-public/sw.js
-scripts/**/*.json
-public/workbox-*.js
+
+# IDEs and Editors
+*~
+*.swp
+*.swo
+.DS_Store
+.idea
+.vscode/*
+!.vscode/settings.json
+!.vscode/tasks.json
+!.vscode/launch.json
+!.vscode/extensions.json
+
+# Log Files
+logs
+*.log*
+
+# Turborepo
+.turbo
+
+# TanStack Start
+.tanstack
+
+# Testing
+coverage
+reports
+
+# Cache
+tmp
+temp
+.cache
+
+# AI
+.codex
+.claude
+.cursor
+.superpowers
+docs/superpowers
+
+# Local Storage Data
+/data
+/apps/web/data

.ncurc.cjs

@@ -1,16 +1,14 @@
 // @ts-check
 
-const nextPackages = ["@monaco-editor/react"];
-
-const betaPackages = ["drizzle-orm", "drizzle-kit", "@better-auth/core", "@better-auth/passkey", "better-auth"];
+const betaPackages = ["drizzle-orm", "drizzle-kit", "drizzle-zod"];
 
 /** @type {import('npm-check-updates').RunOptions} */
 module.exports = {
 	upgrade: true,
+	workspaces: true,
 	install: "always",
 	packageManager: "pnpm",
 	target: (packageName) => {
-		if (nextPackages.includes(packageName)) return "@next";
 		if (betaPackages.includes(packageName)) return "@beta";
 		return "latest";
 	},

.vite-hooks/_/commit-msg

@@ -0,0 +1,71 @@
+#!/bin/sh
+
+if [ "$LEFTHOOK_VERBOSE" = "1" -o "$LEFTHOOK_VERBOSE" = "true" ]; then
+  set -x
+fi
+
+if [ "$LEFTHOOK" = "0" ]; then
+  exit 0
+fi
+
+call_lefthook()
+{
+  if test -n "$LEFTHOOK_BIN"
+  then
+    "$LEFTHOOK_BIN" "$@"
+  elif lefthook -h >/dev/null 2>&1
+  then
+    lefthook "$@"
+  elif /Users/amruth/Projects/reactive-resume/node_modules/.pnpm/lefthook-darwin-arm64@2.1.6/node_modules/lefthook-darwin-arm64/bin/lefthook -h >/dev/null 2>&1
+  then
+    /Users/amruth/Projects/reactive-resume/node_modules/.pnpm/lefthook-darwin-arm64@2.1.6/node_modules/lefthook-darwin-arm64/bin/lefthook "$@"
+  else
+    dir="$(git rev-parse --show-toplevel)"
+    osArch=$(uname | tr '[:upper:]' '[:lower:]')
+    cpuArch=$(uname -m | sed 's/aarch64/arm64/;s/x86_64/x64/')
+    if test -f "$dir/node_modules/lefthook-${osArch}-${cpuArch}/bin/lefthook"
+    then
+      "$dir/node_modules/lefthook-${osArch}-${cpuArch}/bin/lefthook" "$@"
+    elif test -f "$dir/node_modules/@evilmartians/lefthook/bin/lefthook-${osArch}-${cpuArch}/lefthook"
+    then
+      "$dir/node_modules/@evilmartians/lefthook/bin/lefthook-${osArch}-${cpuArch}/lefthook" "$@"
+    elif test -f "$dir/node_modules/@evilmartians/lefthook-installer/bin/lefthook"
+    then
+      "$dir/node_modules/@evilmartians/lefthook-installer/bin/lefthook" "$@"
+    elif test -f "$dir/node_modules/lefthook/bin/index.js"
+    then
+      "$dir/node_modules/lefthook/bin/index.js" "$@"
+    elif go tool lefthook -h >/dev/null 2>&1
+    then
+      go tool lefthook "$@"
+    elif bundle exec lefthook -h >/dev/null 2>&1
+    then
+      bundle exec lefthook "$@"
+    elif yarn lefthook -h >/dev/null 2>&1
+    then
+      yarn lefthook "$@"
+    elif pnpm lefthook -h >/dev/null 2>&1
+    then
+      pnpm lefthook "$@"
+    elif swift package lefthook >/dev/null 2>&1
+    then
+      swift package --build-path .build/lefthook --disable-sandbox lefthook "$@"
+    elif command -v mint >/dev/null 2>&1
+    then
+      mint run csjones/lefthook-plugin "$@"
+    elif uv run lefthook -h >/dev/null 2>&1
+    then
+      uv run lefthook "$@"
+    elif mise exec -- lefthook -h >/dev/null 2>&1
+    then
+      mise exec -- lefthook "$@"
+    elif devbox run lefthook -h >/dev/null 2>&1
+    then
+      devbox run lefthook "$@"
+    else
+      echo "Can't find lefthook in PATH"
+    fi
+  fi
+}
+
+call_lefthook run "commit-msg" "$@"

.vite-hooks/_/pre-commit

@@ -0,0 +1,71 @@
+#!/bin/sh
+
+if [ "$LEFTHOOK_VERBOSE" = "1" -o "$LEFTHOOK_VERBOSE" = "true" ]; then
+  set -x
+fi
+
+if [ "$LEFTHOOK" = "0" ]; then
+  exit 0
+fi
+
+call_lefthook()
+{
+  if test -n "$LEFTHOOK_BIN"
+  then
+    "$LEFTHOOK_BIN" "$@"
+  elif lefthook -h >/dev/null 2>&1
+  then
+    lefthook "$@"
+  elif /Users/amruth/Projects/reactive-resume/node_modules/.pnpm/lefthook-darwin-arm64@2.1.6/node_modules/lefthook-darwin-arm64/bin/lefthook -h >/dev/null 2>&1
+  then
+    /Users/amruth/Projects/reactive-resume/node_modules/.pnpm/lefthook-darwin-arm64@2.1.6/node_modules/lefthook-darwin-arm64/bin/lefthook "$@"
+  else
+    dir="$(git rev-parse --show-toplevel)"
+    osArch=$(uname | tr '[:upper:]' '[:lower:]')
+    cpuArch=$(uname -m | sed 's/aarch64/arm64/;s/x86_64/x64/')
+    if test -f "$dir/node_modules/lefthook-${osArch}-${cpuArch}/bin/lefthook"
+    then
+      "$dir/node_modules/lefthook-${osArch}-${cpuArch}/bin/lefthook" "$@"
+    elif test -f "$dir/node_modules/@evilmartians/lefthook/bin/lefthook-${osArch}-${cpuArch}/lefthook"
+    then
+      "$dir/node_modules/@evilmartians/lefthook/bin/lefthook-${osArch}-${cpuArch}/lefthook" "$@"
+    elif test -f "$dir/node_modules/@evilmartians/lefthook-installer/bin/lefthook"
+    then
+      "$dir/node_modules/@evilmartians/lefthook-installer/bin/lefthook" "$@"
+    elif test -f "$dir/node_modules/lefthook/bin/index.js"
+    then
+      "$dir/node_modules/lefthook/bin/index.js" "$@"
+    elif go tool lefthook -h >/dev/null 2>&1
+    then
+      go tool lefthook "$@"
+    elif bundle exec lefthook -h >/dev/null 2>&1
+    then
+      bundle exec lefthook "$@"
+    elif yarn lefthook -h >/dev/null 2>&1
+    then
+      yarn lefthook "$@"
+    elif pnpm lefthook -h >/dev/null 2>&1
+    then
+      pnpm lefthook "$@"
+    elif swift package lefthook >/dev/null 2>&1
+    then
+      swift package --build-path .build/lefthook --disable-sandbox lefthook "$@"
+    elif command -v mint >/dev/null 2>&1
+    then
+      mint run csjones/lefthook-plugin "$@"
+    elif uv run lefthook -h >/dev/null 2>&1
+    then
+      uv run lefthook "$@"
+    elif mise exec -- lefthook -h >/dev/null 2>&1
+    then
+      mise exec -- lefthook "$@"
+    elif devbox run lefthook -h >/dev/null 2>&1
+    then
+      devbox run lefthook "$@"
+    else
+      echo "Can't find lefthook in PATH"
+    fi
+  fi
+}
+
+call_lefthook run "pre-commit" "$@"

.vscode/extensions.json

@@ -1,3 +1,3 @@
 {
-	"recommendations": ["biomejs.biome", "bradlc.vscode-tailwindcss", "lokalise.i18n-ally"]
+	"recommendations": ["biomejs.biome", "bradlc.vscode-tailwindcss", "typescriptteam.native-preview"]
 }

.vscode/settings.json

@@ -1,28 +1,24 @@
 {
 	"biome.enabled": true,
 	"editor.codeActionsOnSave": {
-		"source.biome": "explicit",
 		"source.fixAll.biome": "explicit",
 		"source.organizeImports.biome": "explicit"
 	},
 	"editor.defaultFormatter": "biomejs.biome",
-	"files.associations": {
-		"*.css": "tailwindcss"
-	},
 	"files.readonlyInclude": {
-		"pnpm-lock.yaml": true,
-		"**/routeTree.gen.ts": true
+		"**/locales/**.po": true,
+		"**/routeTree.gen.ts": true,
+		"pnpm-lock.yaml": true
 	},
 	"files.watcherExclude": {
-		"pnpm-lock.yaml": true,
-		"**/routeTree.gen.ts": true
+		"**/locales/**.po": true,
+		"**/routeTree.gen.ts": true,
+		"pnpm-lock.yaml": true
 	},
-	"i18n-ally.enabledParsers": ["po"],
-	"i18n-ally.localesPaths": ["locales"],
-	"i18n-ally.sourceLanguage": "en-US",
 	"search.exclude": {
-		"pnpm-lock.yaml": true,
-		"**/routeTree.gen.ts": true
+		"**/locales/**.po": true,
+		"**/routeTree.gen.ts": true,
+		"pnpm-lock.yaml": true
 	},
 	"tailwindCSS.classFunctions": ["cn", "cva"],
 	"tailwindCSS.experimental.classRegex": [
@@ -31,5 +27,5 @@
 		["cn\\(([^)]*)\\)", "(?:'|\"|`)([^']*)(?:'|\"|`)"]
 	],
 	"tailwindCSS.experimental.configFile": "src/styles/globals.css",
-	"typescript.tsdk": "node_modules/typescript/lib"
+	"typescript.experimental.useTsgo": true
 }

CLAUDE.md

@@ -1,123 +0,0 @@
-# CLAUDE.md
-
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
-
-## Project Overview
-
-Reactive Resume is a free, open-source resume builder built with TanStack Start (React 19 + Vite), using ORPC for type-safe RPC APIs, Drizzle ORM with PostgreSQL, and Better Auth for authentication.
-
-## Development Commands
-
-```bash
-# Start development server (runs on port 3000)
-pnpm dev
-
-# Build for production
-pnpm build
-
-# Start production server
-pnpm start
-
-# Linting (uses Biome)
-pnpm lint
-
-# Type checking
-pnpm typecheck
-
-# Database operations
-pnpm db:generate    # Generate migration files
-pnpm db:migrate     # Run migrations
-pnpm db:push        # Push schema changes directly
-pnpm db:studio      # Open Drizzle Studio
-
-# Extract i18n strings for translation
-pnpm lingui:extract
-
-# Find unused exports
-pnpm knip
-```
-
-## Local Development Setup
-
-1. Copy `.env.example` to `.env` and configure environment variables
-2. Start required services: `docker compose -f compose.dev.yml up -d`
-   - PostgreSQL (port 5432)
-   - Browserless/Chromium for PDF generation (port 4000)
-   - SeaweedFS for S3-compatible storage (port 8333)
-   - Mailpit for email testing (ports 1025, 8025)
-   - Adminer for DB management (port 8080)
-3. Run `pnpm dev`
-
-## Architecture
-
-### Directory Structure
-
-- `src/routes/` - TanStack Router file-based routing
-- `src/integrations/` - External service integrations (auth, database, ORPC, AI, email)
-- `src/integrations/orpc/router` - oRPC server routers
-- `src/integrations/orpc/services` - oRPC server services
-- `src/components/` - React components organized by feature
-- `src/schema/` - Zod schemas for validation
-- `plugins/` - Nitro server plugins (eg. auto-migration on startup)
-- `migrations/` - Drizzle database migrations
-- `locales/` - i18n translation files (managed by Lingui)
-
-### Key Integrations (`src/integrations/`)
-
-- **auth/** - Better Auth configuration and client
-- **drizzle/** - Database schema and client (PostgreSQL)
-- **orpc/** - Type-safe RPC router with procedures for ai, auth, flags, printer, resume, statistics, storage
-- **query/** - TanStack Query client configuration
-- **ai/** - AI provider integrations (OpenAI, Anthropic, Google Gemini, Ollama)
-
-### Resume Data Model
-
-The resume schema is defined in `src/schema/resume/data.ts`. Key concepts:
-- **ResumeData** - Complete resume data including basics, sections, customSections, metadata
-- **Sections** - Built-in sections (profiles, experience, education, skills, etc.)
-- **CustomSections** - User-created sections that follow one of the built-in section types
-- **Metadata** - Template, layout, typography, design settings, custom CSS
-
-### Resume Templates
-
-Templates are React components in `src/components/resume/templates/`. Each template (azurill, bronzor, chikorita, etc.) renders the resume data with different visual styles. Templates use shared components from `src/components/resume/shared/`.
-
-### Database Schema
-
-Defined in `src/integrations/drizzle/schema.ts`:
-- `user`, `session`, `account`, `verification`, `twoFactor`, `passkey`, `apikey` - Better Auth tables
-- `resume` - Stores Resume Data as JSONB (defined in `src/schema/resume/data.ts`)
-- `resumeStatistics` - Views/Download for Resume Tracking
-
-### Routing
-
-Uses TanStack Router with file-based routing. Key routes:
-- `/_home/` - Public landing pages
-- `/auth/` - Authentication flows
-- `/dashboard/` - User dashboard and resume management
-- `/builder/$resumeId/` - Resume editor
-- `/printer/$resumeId/` - PDF rendering endpoint
-- `/api/` - Public API endpoints
-
-### State Management
-
-- **Zustand** - Client-side state (resume editor state in `src/components/resume/store/`)
-- **TanStack Query** - Server state and caching (configured via ORPC integration)
-
-## Code Style
-
-- Uses Biome for linting and formatting
-- Tab indentation, double quotes, 120 character line width
-- Path alias: `@/` maps to `src/`
-- Tailwind CSS v4 with sorted class names (enforced by Biome)
-- Uses `cn()` utility for conditional class names
-
-## Environment Variables
-
-Key variables (see `.env.example` for full list):
-- `APP_URL` - Application URL
-- `DATABASE_URL` - PostgreSQL connection string
-- `AUTH_SECRET` - Secret for authentication
-- `PRINTER_ENDPOINT` - WebSocket endpoint for PDF printer service
-- `S3_*` - S3-compatible storage configuration
-- `FLAG_*` - Feature flags

Dockerfile

@@ -1,39 +1,44 @@
-# syntax=docker/dockerfile:1
+# syntax=docker/dockerfile:1.7
 
-# ---------- Dependencies Layer ----------
-FROM node:24-slim AS dependencies
+ARG NODE_VERSION=24
 
-ENV PNPM_HOME="/pnpm"
-ENV PATH="$PNPM_HOME:$PATH"
-RUN corepack enable
-
-RUN mkdir -p /tmp/dev /tmp/prod
-
-COPY package.json pnpm-lock.yaml /tmp/dev/
-COPY package.json pnpm-lock.yaml /tmp/prod/
-
-RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
-    cd /tmp/dev && pnpm install --frozen-lockfile
-
-RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
-    cd /tmp/prod && pnpm install --frozen-lockfile --prod
-
-# ---------- Builder Layer ----------
-FROM node:24-slim AS builder
-
-ENV PNPM_HOME="/pnpm"
-ENV PATH="$PNPM_HOME:$PATH"
-RUN corepack enable
+FROM node:${NODE_VERSION}-slim AS base
 
 WORKDIR /app
 
-COPY --from=dependencies /tmp/dev/node_modules ./node_modules
+ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \
+    PNPM_HOME="/pnpm" \
+    PATH="/pnpm:$PATH" \
+    TURBO_TELEMETRY_DISABLED=1
+
+RUN corepack enable
+
+FROM base AS pruner
 COPY . .
+RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
+    pnpm dlx turbo@2.9.9 prune web --docker
 
-RUN pnpm run build
+FROM base AS builder
+COPY --from=pruner /app/out/json/ ./
+COPY --from=pruner /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
+RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
+    pnpm install --frozen-lockfile
 
-# ---------- Runtime Layer ----------
-FROM node:24-slim AS runtime
+COPY --from=pruner /app/out/full/ ./
+RUN pnpm turbo run build --filter=web
+
+FROM base AS runtime-pruner
+COPY . .
+RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
+    pnpm dlx turbo@2.9.9 prune @reactive-resume/runtime-externals --docker
+
+FROM base AS runtime-deps
+COPY --from=runtime-pruner /app/out/json/ ./
+COPY --from=runtime-pruner /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
+RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
+    pnpm --filter=@reactive-resume/runtime-externals deploy --prod --legacy /runtime-deps
+
+FROM node:${NODE_VERSION}-slim AS runtime
 
 LABEL maintainer="amruthpillai"
 LABEL org.opencontainers.image.licenses="MIT"
@@ -44,20 +49,24 @@ LABEL org.opencontainers.image.url="https://rxresu.me"
 LABEL org.opencontainers.image.documentation="https://docs.rxresu.me"
 LABEL org.opencontainers.image.source="https://github.com/amruthpillai/reactive-resume"
 
-RUN apt-get update && apt-get install -y --no-install-recommends curl \
-    && rm -rf /var/lib/apt/lists/*
+ENV NODE_ENV="production" \
+    PORT=3000 \
+    LOCAL_STORAGE_PATH=/app/data
 
 WORKDIR /app
 
-ENV NODE_ENV=production
+RUN mkdir -p /app/apps/web /app/data && chown node:node /app/data
 
-COPY --from=builder /app/.output ./.output
-COPY --from=builder /app/migrations ./migrations
-COPY --from=dependencies /tmp/prod/node_modules ./node_modules
+COPY --from=runtime-deps --chown=node:node /runtime-deps/node_modules ./node_modules
+COPY --from=builder --chown=node:node /app/apps/web/.output ./apps/web/.output
+COPY --from=pruner --chown=node:node /app/migrations ./migrations
+
+WORKDIR /app/apps/web
+
+USER node
 
 EXPOSE 3000/tcp
-
 HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
-    CMD curl -f http://localhost:3000/api/health || exit 1
+    CMD ["node", "-e", "fetch('http://127.0.0.1:3000/api/health').then((r) => { if (!r.ok) process.exit(1); }).catch(() => process.exit(1));"]
 
-ENTRYPOINT ["node", ".output/server/index.mjs"]
+CMD ["node", ".output/server/index.mjs"]

README.md

@@ -1,6 +1,6 @@
 <div align="center">
   <a href="https://rxresu.me">
-    <img src="public/opengraph/banner.jpg" alt="Reactive Resume" />
+    <img src="apps/web/public/opengraph/banner.jpg" alt="Reactive Resume" />
   </a>
 
   <h1>Reactive Resume</h1>
@@ -14,11 +14,11 @@
   </p>
 
   <p>
-    <img src="https://img.shields.io/github/package-json/v/amruthpillai/reactive-resume?style=flat-square" alt="Reactive Resume version">
+    <img src="https://img.shields.io/github/package-json/v/amruthpillai/reactive-resume?style=flat-square" alt="Reactive Resume Version">
     <img src="https://img.shields.io/github/stars/amruthpillai/Reactive-Resume?style=flat-square" alt="GitHub Stars">
     <img src="https://img.shields.io/github/license/amruthpillai/Reactive-Resume?style=flat-square" alt="License" />
     <img src="https://img.shields.io/docker/pulls/amruthpillai/reactive-resume?style=flat-square" alt="Docker Pulls" />
-    <a href="https://discord.gg/EE8yFqW4"><img src="https://img.shields.io/discord/1173518977851473940?style=flat-square&label=discord" alt="Discord" /></a>
+    <a href="https://discord.gg/aSyA5ZSxpb"><img src="https://img.shields.io/discord/1173518977851473940?style=flat-square&label=discord" alt="Discord" /></a>
     <a href="https://crowdin.com/project/reactive-resume"><img src="https://badges.crowdin.net/reactive-resume/localized.svg?style=flat-square" alt="Crowdin" /></a>
     <a href="https://github.com/sponsors/AmruthPillai"><img src="https://img.shields.io/github/sponsors/AmruthPillai?style=flat-square&label=sponsors" alt="Sponsors" /></a>
     <a href="https://opencollective.com/reactive-resume"><img src="https://img.shields.io/opencollective/backers/reactive-resume?style=flat-square&label=donations" alt="Donations" /></a>
@@ -69,63 +69,67 @@ Built with privacy as a core principle, Reactive Resume gives you complete owner
 <table>
   <tr>
     <td align="center">
-      <img src="public/templates/jpg/azurill.jpg" alt="Azurill" width="150" />
+      <img src="apps/web/public/templates/jpg/azurill.jpg" alt="Azurill" width="150" />
       <br /><sub><b>Azurill</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/bronzor.jpg" alt="Bronzor" width="150" />
+      <img src="apps/web/public/templates/jpg/bronzor.jpg" alt="Bronzor" width="150" />
       <br /><sub><b>Bronzor</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/chikorita.jpg" alt="Chikorita" width="150" />
+      <img src="apps/web/public/templates/jpg/chikorita.jpg" alt="Chikorita" width="150" />
       <br /><sub><b>Chikorita</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/ditto.jpg" alt="Ditto" width="150" />
+      <img src="apps/web/public/templates/jpg/ditto.jpg" alt="Ditto" width="150" />
       <br /><sub><b>Ditto</b></sub>
     </td>
   </tr>
   <tr>
     <td align="center">
-      <img src="public/templates/jpg/gengar.jpg" alt="Gengar" width="150" />
+      <img src="apps/web/public/templates/jpg/gengar.jpg" alt="Gengar" width="150" />
       <br /><sub><b>Gengar</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/glalie.jpg" alt="Glalie" width="150" />
+      <img src="apps/web/public/templates/jpg/glalie.jpg" alt="Glalie" width="150" />
       <br /><sub><b>Glalie</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/kakuna.jpg" alt="Kakuna" width="150" />
+      <img src="apps/web/public/templates/jpg/kakuna.jpg" alt="Kakuna" width="150" />
       <br /><sub><b>Kakuna</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/lapras.jpg" alt="Lapras" width="150" />
+      <img src="apps/web/public/templates/jpg/lapras.jpg" alt="Lapras" width="150" />
       <br /><sub><b>Lapras</b></sub>
     </td>
   </tr>
   <tr>
     <td align="center">
-      <img src="public/templates/jpg/leafish.jpg" alt="Leafish" width="150" />
+      <img src="apps/web/public/templates/jpg/leafish.jpg" alt="Leafish" width="150" />
       <br /><sub><b>Leafish</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/onyx.jpg" alt="Onyx" width="150" />
+      <img src="apps/web/public/templates/jpg/onyx.jpg" alt="Onyx" width="150" />
       <br /><sub><b>Onyx</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/pikachu.jpg" alt="Pikachu" width="150" />
+      <img src="apps/web/public/templates/jpg/pikachu.jpg" alt="Pikachu" width="150" />
       <br /><sub><b>Pikachu</b></sub>
     </td>
     <td align="center">
-      <img src="public/templates/jpg/rhyhorn.jpg" alt="Rhyhorn" width="150" />
+      <img src="apps/web/public/templates/jpg/rhyhorn.jpg" alt="Rhyhorn" width="150" />
       <br /><sub><b>Rhyhorn</b></sub>
     </td>
   </tr>
   <tr>
     <td align="center">
-      <img src="public/templates/jpg/ditgar.jpg" alt="Ditgar" width="150" />
+      <img src="apps/web/public/templates/jpg/ditgar.jpg" alt="Ditgar" width="150" />
       <br /><sub><b>Ditgar</b></sub>
     </td>
+    <td align="center">
+      <img src="apps/web/public/templates/jpg/meowth.jpg" alt="Meowth" width="150" />
+      <br /><sub><b>Meowth</b></sub>
+    </td>
   </tr>
 </table>
 
@@ -151,38 +155,39 @@ For detailed setup instructions, environment configuration, and self-hosting gui
 
 ## Tech Stack
 
-| Category         | Technology                           |
-| ---------------- | ------------------------------------ |
-| Framework        | TanStack Start (React 19, Vite)      |
-| Runtime          | Node.js                              |
-| Language         | TypeScript                           |
-| Database         | PostgreSQL with Drizzle ORM          |
-| API              | ORPC (Type-safe RPC)                 |
-| Auth             | Better Auth                          |
-| Styling          | Tailwind CSS                         |
-| UI Components    | Radix UI                             |
-| State Management | Zustand + TanStack Query             |
+| Category         | Technology                      |
+| ---------------- | ------------------------------- |
+| Framework        | TanStack Start (React 19, Vite) |
+| Runtime          | Node.js                         |
+| Language         | TypeScript                      |
+| Database         | PostgreSQL with Drizzle ORM     |
+| API              | ORPC (Type-safe RPC)            |
+| Auth             | Better Auth                     |
+| Styling          | Tailwind CSS                    |
+| UI Components    | Radix UI                        |
+| State Management | Zustand + TanStack Query        |
 
 ## Documentation
 
 Comprehensive guides are available at [docs.rxresu.me](https://docs.rxresu.me):
 
-| Guide                                                                       | Description                       |
-| --------------------------------------------------------------------------- | --------------------------------- |
-| [Getting Started](https://docs.rxresu.me/getting-started)                   | First-time setup and basic usage  |
-| [Self-Hosting](https://docs.rxresu.me/self-hosting/docker)                  | Deploy on your own server         |
-| [Development Setup](https://docs.rxresu.me/contributing/development)        | Local development environment     |
-| [Project Architecture](https://docs.rxresu.me/contributing/architecture)    | Codebase structure and patterns   |
-| [Exporting Your Resume](https://docs.rxresu.me/guides/exporting-your-resume)| PDF and JSON export options       |
+| Guide                                                                        | Description                      |
+| ---------------------------------------------------------------------------- | -------------------------------- |
+| [Getting Started](https://docs.rxresu.me/getting-started)                    | First-time setup and basic usage |
+| [Self-Hosting](https://docs.rxresu.me/self-hosting/docker)                   | Deploy on your own server        |
+| [Development Setup](https://docs.rxresu.me/contributing/development)         | Local development environment    |
+| [Project Architecture](https://docs.rxresu.me/contributing/architecture)     | Codebase structure and patterns  |
+| [Exporting Your Resume](https://docs.rxresu.me/guides/exporting-your-resume) | PDF and JSON export options      |
 
 ## Self-Hosting
 
 Reactive Resume can be self-hosted using Docker. The stack includes:
 
 - **PostgreSQL** — Database for storing user data and resumes
-- **Printer** — Headless Chromium service for PDF and screenshot generation
 - **SeaweedFS** (optional) — S3-compatible storage for file uploads
 
+> **From v5.1.0 onwards** — PDF generation now runs entirely client-side via `@react-pdf/renderer`. New deployments no longer require Browserless, Chromium, or any external print service as a dependency. The `PRINTER_*` and `BROWSERLESS_*` environment variables are no longer read and can be removed from your `.env`.
+
 Pull the latest image from Docker Hub or GitHub Container Registry:
 
 ```bash
@@ -193,7 +198,7 @@ docker pull amruthpillai/reactive-resume:latest
 docker pull ghcr.io/amruthpillai/reactive-resume:latest
 ```
 
-See the [self-hosting guide](https://docs.rxresu.me/guides/self-hosting-with-docker) for complete instructions.
+See the [self-hosting guide](https://docs.rxresu.me/self-hosting/docker) for complete instructions.
 
 ## Support
 

SECURITY.md

@@ -0,0 +1,34 @@
+# Security Policy
+
+## Supported Versions
+
+Reactive Resume provides security updates for version `5.0.x` and newer.
+Earlier major versions are no longer supported.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| >= 5.0  | :white_check_mark: |
+| 4.x     | :x:                |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+If you believe you have found a security vulnerability, please report it
+privately instead of opening a public issue.
+
+Preferred reporting channels:
+
+- Use GitHub's private vulnerability reporting for this repository.
+- If that is unavailable, email `hello@amruthpillai.com` with the subject
+  `Security Vulnerability: Reactive Resume`.
+
+Please include as much detail as possible, including:
+
+- A description of the vulnerability and its impact.
+- Steps to reproduce or a proof of concept.
+- Affected versions, configuration, or deployment details.
+- Any relevant logs, screenshots, or links.
+
+You can expect an initial response within 7 days. If the report is accepted,
+we will coordinate remediation and disclosure timing with you before publishing
+details publicly.

apps/web/components.json

@@ -0,0 +1,25 @@
+{
+	"$schema": "https://ui.shadcn.com/schema.json",
+	"style": "base-nova",
+	"rsc": false,
+	"tsx": true,
+	"tailwind": {
+		"config": "",
+		"css": "../../packages/ui/src/styles/globals.css",
+		"baseColor": "zinc",
+		"cssVariables": true,
+		"prefix": ""
+	},
+	"iconLibrary": "phosphor",
+	"aliases": {
+		"components": "@reactive-resume/ui/components",
+		"utils": "@reactive-resume/utils/style",
+		"hooks": "@reactive-resume/ui/hooks",
+		"lib": "@reactive-resume/utils",
+		"ui": "@reactive-resume/ui/components"
+	},
+	"rtl": true,
+	"menuColor": "default-translucent",
+	"menuAccent": "subtle",
+	"registries": {}
+}

apps/web/lingui.config.ts

@@ -1,4 +1,5 @@
 import { defineConfig } from "@lingui/cli";
+import { formatter } from "@lingui/format-po";
 
 export default defineConfig({
 	sourceLocale: "en-US",
@@ -16,6 +17,7 @@ export default defineConfig({
 		"de-DE",
 		"el-GR",
 		"en-US",
+		"en-GB",
 		"es-ES",
 		"fa-IR",
 		"fi-FI",
@@ -44,6 +46,7 @@ export default defineConfig({
 		"ro-RO",
 		"ru-RU",
 		"sk-SK",
+		"sl-SI",
 		"sq-AL",
 		"sr-SP",
 		"sv-SE",
@@ -62,9 +65,9 @@ export default defineConfig({
 		"zu-ZA": "en-US",
 		default: "en-US",
 	},
-	formatOptions: {
+	format: formatter({
 		lineNumbers: false,
-	},
+	}),
 	catalogs: [
 		{
 			path: "<rootDir>/locales/{locale}",

apps/web/package.json

@@ -0,0 +1,109 @@
+{
+	"name": "web",
+	"version": "0.0.0",
+	"type": "module",
+	"private": true,
+	"scripts": {
+		"build": "vite build",
+		"dev": "vite dev",
+		"serve": "vite preview",
+		"start": "node .output/server/index.mjs",
+		"typecheck": "tsgo --noEmit",
+		"test": "vitest run --passWithNoTests",
+		"test:coverage": "vitest run --coverage --passWithNoTests",
+		"test:ci": "vitest run --coverage --reporter=default --reporter=github-actions --reporter=json --reporter=junit --outputFile.json=reports/vitest-results.json --outputFile.junit=reports/vitest-junit.xml --passWithNoTests",
+		"test:agent": "vitest run --reporter=agent --reporter=json --outputFile.json=reports/vitest-results.json --passWithNoTests",
+		"lingui:extract": "lingui extract --clean --overwrite"
+	},
+	"dependencies": {
+		"@ai-sdk/react": "^3.0.179",
+		"@base-ui/react": "^1.4.1",
+		"@better-auth/api-key": "^1.6.10",
+		"@better-auth/infra": "^0.2.6",
+		"@better-auth/oauth-provider": "^1.6.10",
+		"@better-auth/passkey": "^1.6.10",
+		"@dnd-kit/core": "^6.3.1",
+		"@dnd-kit/sortable": "^10.0.0",
+		"@dnd-kit/utilities": "^3.2.2",
+		"@lingui/core": "^6.0.1",
+		"@lingui/react": "^6.0.1",
+		"@modelcontextprotocol/sdk": "^1.29.0",
+		"@orpc/client": "^1.14.2",
+		"@orpc/json-schema": "^1.14.2",
+		"@orpc/openapi": "^1.14.2",
+		"@orpc/server": "^1.14.2",
+		"@orpc/tanstack-query": "^1.14.2",
+		"@orpc/zod": "^1.14.2",
+		"@phosphor-icons/react": "^2.1.10",
+		"@react-pdf/renderer": "^4.5.1",
+		"@reactive-resume/ai": "workspace:*",
+		"@reactive-resume/api": "workspace:*",
+		"@reactive-resume/auth": "workspace:*",
+		"@reactive-resume/db": "workspace:*",
+		"@reactive-resume/env": "workspace:*",
+		"@reactive-resume/fonts": "workspace:*",
+		"@reactive-resume/import": "workspace:*",
+		"@reactive-resume/pdf": "workspace:*",
+		"@reactive-resume/schema": "workspace:*",
+		"@reactive-resume/ui": "workspace:*",
+		"@reactive-resume/utils": "workspace:*",
+		"@tailwindcss/vite": "^4.3.0",
+		"@tanstack/react-form": "^1.31.0",
+		"@tanstack/react-hotkeys": "^0.10.0",
+		"@tanstack/react-query": "^5.100.9",
+		"@tanstack/react-router": "^1.169.2",
+		"@tanstack/react-router-ssr-query": "^1.166.12",
+		"@tanstack/react-start": "^1.167.65",
+		"@tiptap/extension-color": "^3.23.1",
+		"@tiptap/extension-highlight": "^3.23.1",
+		"@tiptap/extension-table": "^3.23.1",
+		"@tiptap/extension-text-align": "^3.23.1",
+		"@tiptap/extension-text-style": "^3.23.1",
+		"@tiptap/pm": "^3.23.1",
+		"@tiptap/react": "^3.23.1",
+		"@tiptap/starter-kit": "^3.23.1",
+		"@types/js-cookie": "^3.0.6",
+		"@uiw/color-convert": "^2.10.1",
+		"@uiw/react-color-colorful": "^2.10.1",
+		"better-auth": "1.6.10",
+		"cmdk": "^1.1.1",
+		"drizzle-orm": "1.0.0-beta.22",
+		"es-toolkit": "^1.46.1",
+		"fuse.js": "^7.3.0",
+		"immer": "^11.1.8",
+		"js-cookie": "^3.0.5",
+		"motion": "^12.38.0",
+		"pdfjs-dist": "5.7.284",
+		"pg": "^8.20.0",
+		"qrcode.react": "^4.2.0",
+		"react": "^19.2.6",
+		"react-dom": "^19.2.6",
+		"react-resizable-panels": "^4.11.0",
+		"react-window": "^2.2.7",
+		"react-zoom-pan-pinch": "^4.0.3",
+		"sonner": "^2.0.7",
+		"srvx": "^0.11.15",
+		"ts-pattern": "^5.9.0",
+		"usehooks-ts": "^3.1.1",
+		"zod": "^4.4.3",
+		"zustand": "^5.0.13"
+	},
+	"devDependencies": {
+		"@lingui/babel-plugin-lingui-macro": "^6.0.1",
+		"@lingui/cli": "^6.0.1",
+		"@lingui/format-po": "^6.0.1",
+		"@lingui/vite-plugin": "^6.0.1",
+		"@reactive-resume/config": "workspace:*",
+		"@rolldown/plugin-babel": "^0.2.3",
+		"@types/pg": "^8.20.0",
+		"@types/react": "^19.2.14",
+		"@types/react-dom": "^19.2.3",
+		"@typescript/native-preview": "7.0.0-dev.20260510.1",
+		"@vitejs/plugin-react": "^6.0.1",
+		"babel-plugin-macros": "^3.1.0",
+		"nitro": "3.0.260429-beta",
+		"typescript": "^6.0.3",
+		"vite": "^8.0.11",
+		"vite-plugin-pwa": "^1.3.0"
+	}
+}

apps/web/plugins/1.migrate.ts

@@ -0,0 +1,40 @@
+import { existsSync } from "node:fs";
+import path from "node:path";
+import { drizzle } from "drizzle-orm/node-postgres";
+import { migrate } from "drizzle-orm/node-postgres/migrator";
+import { definePlugin } from "nitro";
+import { Pool } from "pg";
+import { env } from "@reactive-resume/env/server";
+
+function resolveMigrationsFolder(): string {
+	let dir = import.meta.dirname;
+
+	while (dir !== path.dirname(dir)) {
+		const candidate = path.join(dir, "migrations");
+		if (existsSync(candidate)) return candidate;
+		dir = path.dirname(dir);
+	}
+
+	throw new Error(`Could not locate migrations folder relative to ${import.meta.dirname}`);
+}
+
+const migrationsFolder = resolveMigrationsFolder();
+
+export default definePlugin(async () => {
+	console.info("Running database migrations...");
+
+	const connectionString = env.DATABASE_URL;
+
+	const pool = new Pool({ connectionString });
+	const db = drizzle({ client: pool });
+
+	try {
+		await migrate(db, { migrationsFolder });
+		console.info("Database migrations completed");
+	} catch (error) {
+		console.error("Database migrations failed", { error });
+		throw error;
+	} finally {
+		await pool.end();
+	}
+});

apps/web/plugins/2.storage.ts

@@ -0,0 +1,24 @@
+import fs from "node:fs/promises";
+import { definePlugin } from "nitro";
+import { env } from "@reactive-resume/env/server";
+import { getLocalDataDirectory } from "@reactive-resume/utils/monorepo.node";
+
+export default definePlugin(async () => {
+	if (env.S3_ACCESS_KEY_ID && env.S3_SECRET_ACCESS_KEY && env.S3_BUCKET) return;
+
+	const dataDirectory = getLocalDataDirectory(env.LOCAL_STORAGE_PATH);
+	console.info(`Validating local storage path: ${dataDirectory}`);
+
+	try {
+		await fs.mkdir(dataDirectory, { recursive: true });
+		await fs.access(dataDirectory, fs.constants.R_OK | fs.constants.W_OK);
+	} catch (error) {
+		const message = error instanceof Error ? error.message : "Unknown error";
+		console.error(
+			`Local storage path is not writable: ${dataDirectory}\n` +
+				`  ${message}\n` +
+				"Set LOCAL_STORAGE_PATH to a writable directory or fix permissions on the existing path.",
+		);
+		throw error;
+	}
+});

apps/web/public/funding.json

@@ -5,7 +5,7 @@
 		"type": "individual",
 		"role": "maintainer",
 		"name": "Amruth Pillai",
-		"email": "im.amruth@gmail.com",
+		"email": "hello@amruthpillai.com",
 		"description": "Software Engineer",
 		"webpageUrl": {
 			"url": "https://rxresu.me/funding.json"

apps/web/public/manifest.webmanifest

@@ -0,0 +1,98 @@
+{
+	"name": "Reactive Resume",
+	"short_name": "Reactive Resume",
+	"description": "A free and open-source resume builder.",
+	"id": "/?source=pwa",
+	"start_url": "/?source=pwa",
+	"scope": "/",
+	"lang": "en",
+	"display": "standalone",
+	"orientation": "portrait",
+	"theme_color": "#09090B",
+	"background_color": "#09090B",
+	"icons": [
+		{ "src": "favicon.ico", "sizes": "128x128", "type": "image/x-icon" },
+		{ "src": "pwa-64x64.png", "sizes": "64x64", "type": "image/png" },
+		{ "src": "pwa-192x192.png", "sizes": "192x192", "type": "image/png" },
+		{ "src": "pwa-512x512.png", "sizes": "512x512", "type": "image/png", "purpose": "any" },
+		{ "src": "maskable-icon-512x512.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" }
+	],
+	"screenshots": [
+		{
+			"src": "screenshots/web/1-landing-page.webp",
+			"sizes": "1920x1080 any",
+			"type": "image/webp",
+			"form_factor": "wide",
+			"label": "Landing Page"
+		},
+		{
+			"src": "screenshots/web/2-resume-dashboard.webp",
+			"sizes": "1920x1080 any",
+			"type": "image/webp",
+			"form_factor": "wide",
+			"label": "Resume Dashboard"
+		},
+		{
+			"src": "screenshots/web/3-builder-screen.webp",
+			"sizes": "1920x1080 any",
+			"type": "image/webp",
+			"form_factor": "wide",
+			"label": "Builder Screen"
+		},
+		{
+			"src": "screenshots/web/4-template-gallery.webp",
+			"sizes": "1920x1080 any",
+			"type": "image/webp",
+			"form_factor": "wide",
+			"label": "Template Gallery"
+		},
+		{
+			"src": "screenshots/mobile/1-landing-page.webp",
+			"sizes": "1284x2778 any",
+			"type": "image/webp",
+			"form_factor": "narrow",
+			"label": "Landing Page"
+		},
+		{
+			"src": "screenshots/mobile/2-resume-dashboard.webp",
+			"sizes": "1284x2778 any",
+			"type": "image/webp",
+			"form_factor": "narrow",
+			"label": "Resume Dashboard"
+		},
+		{
+			"src": "screenshots/mobile/3-builder-screen.webp",
+			"sizes": "1284x2778 any",
+			"type": "image/webp",
+			"form_factor": "narrow",
+			"label": "Builder Screen"
+		},
+		{
+			"src": "screenshots/mobile/4-template-gallery.webp",
+			"sizes": "1284x2778 any",
+			"type": "image/webp",
+			"form_factor": "narrow",
+			"label": "Template Gallery"
+		}
+	],
+	"categories": [
+		"ai",
+		"builder",
+		"business",
+		"career",
+		"cv",
+		"editor",
+		"free",
+		"generator",
+		"job-search",
+		"multilingual",
+		"open-source",
+		"privacy",
+		"productivity",
+		"resume",
+		"self-hosted",
+		"templates",
+		"utilities",
+		"writing"
+	]
+}