next-auth@^5.0.0 doesn't exist — v5 ships under the 'beta' npm dist-tag until it stabilizes. Plus @auth/prisma-adapter was referenced in src/lib/auth.ts but missing from package.json deps.