@lastbrain/app 0.1.0

package/dist/templates/migrations/20201010100000_app_base.sql

@@ -0,0 +1,228 @@
+
+-- ===========================================================================
+-- Helper: is_superadmin (if not already present)
+-- ===========================================================================
+CREATE OR REPLACE FUNCTION public.is_superadmin(user_id uuid)
+RETURNS boolean
+LANGUAGE sql
+STABLE
+SECURITY DEFINER
+SET search_path = public, auth
+AS $function$
+	SELECT COALESCE((
+		SELECT
+			COALESCE((raw_app_meta_data ->> 'is_super_admin')::boolean, FALSE)
+			OR COALESCE((raw_user_meta_data ->> 'is_super_admin')::boolean, FALSE)
+			OR COALESCE((raw_app_meta_data -> 'roles') ? 'admin', FALSE)
+			OR COALESCE((raw_user_meta_data -> 'roles') ? 'admin', FALSE)
+		FROM auth.users
+		WHERE id = user_id
+	), FALSE);
+$function$;
+
+REVOKE ALL ON FUNCTION public.is_superadmin(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.is_superadmin(uuid) TO authenticated, service_role, anon;
+
+
+
+-- ===========================================================================
+-- Storage Buckets (for avatars and file storage)
+-- ===========================================================================
+INSERT INTO storage.buckets (id, name, public)
+VALUES ('avatar', 'avatar', TRUE)
+ON CONFLICT (id) DO NOTHING;
+
+INSERT INTO storage.buckets (id, name, public)
+VALUES ('app', 'app', FALSE)
+ON CONFLICT (id) DO NOTHING;
+
+-- ===========================================================================
+-- Avatar bucket policies
+-- ===========================================================================
+DROP POLICY IF EXISTS avatar_public_read ON storage.objects;
+CREATE POLICY avatar_public_read ON storage.objects
+  FOR SELECT USING (bucket_id = 'avatar');
+
+DROP POLICY IF EXISTS avatar_insert_owner ON storage.objects;
+CREATE POLICY avatar_insert_owner ON storage.objects
+  FOR INSERT WITH CHECK (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS avatar_manage_owner ON storage.objects;
+CREATE POLICY avatar_manage_owner ON storage.objects
+  FOR UPDATE USING (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  )
+  WITH CHECK (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS avatar_delete_owner ON storage.objects;
+CREATE POLICY avatar_delete_owner ON storage.objects
+  FOR DELETE USING (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  );
+
+-- ===========================================================================
+-- App bucket policies (per-user folders app/{uuid})
+-- ===========================================================================
+DROP POLICY IF EXISTS app_user_select ON storage.objects;
+CREATE POLICY app_user_select ON storage.objects
+  FOR SELECT USING (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS app_user_insert ON storage.objects;
+CREATE POLICY app_user_insert ON storage.objects
+  FOR INSERT WITH CHECK (
+    bucket_id = 'app' AND (
+      split_part(name, '/', 1) = auth.uid()::text
+      OR owner = auth.uid()
+      OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS app_user_manage ON storage.objects;
+CREATE POLICY app_user_manage ON storage.objects
+  FOR UPDATE USING (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  )
+  WITH CHECK (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS app_user_delete ON storage.objects;
+CREATE POLICY app_user_delete ON storage.objects
+  FOR DELETE USING (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  );
+
+-- ===========================================================================
+-- RPC Function: Get table structure
+-- ===========================================================================
+CREATE OR REPLACE FUNCTION public.get_table_structure(p_table_name text)
+RETURNS TABLE (
+  column_name text,
+  data_type text,
+  is_nullable text,
+  column_default text,
+  is_primary_key boolean,
+  is_foreign_key boolean,
+  foreign_table text,
+  foreign_column text,
+  description text
+)
+LANGUAGE plpgsql
+SECURITY DEFINER
+SET search_path = public, pg_catalog
+AS $$
+BEGIN
+  RETURN QUERY
+  SELECT 
+    c.column_name::text,
+    CASE 
+      WHEN c.data_type = 'USER-DEFINED' THEN c.udt_name::text
+      WHEN c.data_type = 'ARRAY' THEN c.udt_name::text || '[]'
+      ELSE c.data_type::text
+    END as data_type,
+    c.is_nullable::text,
+    c.column_default::text,
+    COALESCE(
+      EXISTS(
+        SELECT 1 FROM information_schema.table_constraints tc
+        JOIN information_schema.key_column_usage kcu 
+          ON tc.constraint_name = kcu.constraint_name 
+          AND tc.table_schema = kcu.table_schema
+        WHERE tc.constraint_type = 'PRIMARY KEY'
+          AND tc.table_schema = 'public'
+          AND tc.table_name = p_table_name
+          AND kcu.column_name = c.column_name
+      ), false
+    ) as is_primary_key,
+    COALESCE(
+      EXISTS(
+        SELECT 1 FROM information_schema.table_constraints tc
+        JOIN information_schema.key_column_usage kcu 
+          ON tc.constraint_name = kcu.constraint_name 
+          AND tc.table_schema = kcu.table_schema
+        WHERE tc.constraint_type = 'FOREIGN KEY'
+          AND tc.table_schema = 'public'
+          AND tc.table_name = p_table_name
+          AND kcu.column_name = c.column_name
+      ), false
+    ) as is_foreign_key,
+    (
+      SELECT ccu.table_name::text
+      FROM information_schema.table_constraints tc
+      JOIN information_schema.key_column_usage kcu 
+        ON tc.constraint_name = kcu.constraint_name 
+        AND tc.table_schema = kcu.table_schema
+      JOIN information_schema.constraint_column_usage ccu
+        ON ccu.constraint_name = tc.constraint_name
+        AND ccu.table_schema = tc.table_schema
+      WHERE tc.constraint_type = 'FOREIGN KEY'
+        AND tc.table_schema = 'public'
+        AND tc.table_name = p_table_name
+        AND kcu.column_name = c.column_name
+      LIMIT 1
+    ) as foreign_table,
+    (
+      SELECT ccu.column_name::text
+      FROM information_schema.table_constraints tc
+      JOIN information_schema.key_column_usage kcu 
+        ON tc.constraint_name = kcu.constraint_name 
+        AND tc.table_schema = kcu.table_schema
+      JOIN information_schema.constraint_column_usage ccu
+        ON ccu.constraint_name = tc.constraint_name
+        AND ccu.table_schema = tc.table_schema
+      WHERE tc.constraint_type = 'FOREIGN KEY'
+        AND tc.table_schema = 'public'
+        AND tc.table_name = p_table_name
+        AND kcu.column_name = c.column_name
+      LIMIT 1
+    ) as foreign_column,
+    pgd.description::text
+  FROM information_schema.columns c
+  LEFT JOIN pg_catalog.pg_statio_all_tables st 
+    ON c.table_schema = st.schemaname 
+    AND c.table_name = st.relname
+  LEFT JOIN pg_catalog.pg_description pgd 
+    ON pgd.objoid = st.relid 
+    AND pgd.objsubid = c.ordinal_position
+  WHERE c.table_schema = 'public'
+    AND c.table_name = p_table_name
+  ORDER BY c.ordinal_position;
+END;
+$$;
+
+REVOKE ALL ON FUNCTION public.get_table_structure(text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.get_table_structure(text) TO authenticated, anon;
+
+COMMENT ON FUNCTION public.get_table_structure(text) IS 
+'Returns the structure of a table including column names, types, constraints, and foreign key relationships';
+

package/dist/templates/migrations/20201010100000_init.sql

@@ -0,0 +1,123 @@
+
+-- ===========================================================================
+-- Helper: is_superadmin (if not already present)
+-- ===========================================================================
+CREATE OR REPLACE FUNCTION public.is_superadmin(user_id uuid)
+RETURNS boolean
+LANGUAGE sql
+STABLE
+SECURITY DEFINER
+SET search_path = public, auth
+AS $function$
+	SELECT COALESCE((
+		SELECT
+			COALESCE((raw_app_meta_data ->> 'is_super_admin')::boolean, FALSE)
+			OR COALESCE((raw_user_meta_data ->> 'is_super_admin')::boolean, FALSE)
+			OR COALESCE((raw_app_meta_data -> 'roles') ? 'admin', FALSE)
+			OR COALESCE((raw_user_meta_data -> 'roles') ? 'admin', FALSE)
+		FROM auth.users
+		WHERE id = user_id
+	), FALSE);
+$function$;
+
+REVOKE ALL ON FUNCTION public.is_superadmin(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION public.is_superadmin(uuid) TO authenticated, service_role, anon;
+
+
+
+-- ===========================================================================
+-- Storage Buckets (for avatars and file storage)
+-- ===========================================================================
+INSERT INTO storage.buckets (id, name, public)
+VALUES ('avatar', 'avatar', TRUE)
+ON CONFLICT (id) DO NOTHING;
+
+INSERT INTO storage.buckets (id, name, public)
+VALUES ('app', 'app', FALSE)
+ON CONFLICT (id) DO NOTHING;
+
+-- ===========================================================================
+-- Avatar bucket policies
+-- ===========================================================================
+DROP POLICY IF EXISTS avatar_public_read ON storage.objects;
+CREATE POLICY avatar_public_read ON storage.objects
+  FOR SELECT USING (bucket_id = 'avatar');
+
+DROP POLICY IF EXISTS avatar_insert_owner ON storage.objects;
+CREATE POLICY avatar_insert_owner ON storage.objects
+  FOR INSERT WITH CHECK (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS avatar_manage_owner ON storage.objects;
+CREATE POLICY avatar_manage_owner ON storage.objects
+  FOR UPDATE USING (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  )
+  WITH CHECK (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS avatar_delete_owner ON storage.objects;
+CREATE POLICY avatar_delete_owner ON storage.objects
+  FOR DELETE USING (
+    bucket_id = 'avatar' AND (
+      owner = auth.uid() OR public.is_superadmin(auth.uid())
+    )
+  );
+
+-- ===========================================================================
+-- App bucket policies (per-user folders app/{uuid})
+-- ===========================================================================
+DROP POLICY IF EXISTS app_user_select ON storage.objects;
+CREATE POLICY app_user_select ON storage.objects
+  FOR SELECT USING (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS app_user_insert ON storage.objects;
+CREATE POLICY app_user_insert ON storage.objects
+  FOR INSERT WITH CHECK (
+    bucket_id = 'app' AND (
+      split_part(name, '/', 1) = auth.uid()::text
+      OR owner = auth.uid()
+      OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS app_user_manage ON storage.objects;
+CREATE POLICY app_user_manage ON storage.objects
+  FOR UPDATE USING (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  )
+  WITH CHECK (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  );
+
+DROP POLICY IF EXISTS app_user_delete ON storage.objects;
+CREATE POLICY app_user_delete ON storage.objects
+  FOR DELETE USING (
+    bucket_id = 'app' AND (
+      owner = auth.uid()
+      OR split_part(name, '/', 1) = auth.uid()::text
+      OR public.is_superadmin(auth.uid())
+    )
+  );

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "@lastbrain/app",
+  "version": "0.1.0",
+  "description": "Framework modulaire Next.js avec CLI et système de modules",
+  "private": false,
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "keywords": [
+    "nextjs",
+    "framework",
+    "modular",
+    "typescript",
+    "supabase",
+    "monorepo",
+    "cli"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lastpublication/starter.git",
+    "directory": "packages/app"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "lastbrain": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "src/app-shell",
+    "src/layouts",
+    "src/scripts",
+    "src/templates"
+  ],
+  "dependencies": {
+    "@lastbrain/core": "0.1.0",
+    "@lastbrain/module-auth": "0.1.0",
+    "@lastbrain/ui": "0.1.0",
+    "@supabase/supabase-js": "^2.36.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "fs-extra": "^11.2.0",
+    "lucide-react": "^0.554.0",
+    "next-themes": "^0.4.6",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "peerDependencies": {
+    "next": ">=15.0.0"
+  },
+  "devDependencies": {
+    "@types/fs-extra": "^11.0.4",
+    "@types/inquirer": "^9.0.9",
+    "@types/node": "^20.0.0",
+    "inquirer": "^13.0.1",
+    "typescript": "^5.4.0"
+  },
+  "scripts": {
+    "dev": "tsc -p tsconfig.json --watch",
+    "build": "tsc -p tsconfig.json && npm run copy:templates && chmod +x dist/cli.js",
+    "copy:templates": "mkdir -p dist/templates/migrations dist/templates/env.example dist/templates/gitignore && cp src/templates/migrations/* dist/templates/migrations/ 2>/dev/null || true && cp src/templates/env.example/.env.example dist/templates/env.example/ 2>/dev/null || true && cp src/templates/gitignore/.gitignore dist/templates/gitignore/ 2>/dev/null || true",
+    "module:build": "node dist/scripts/module-build.js",
+    "module:create": "node dist/scripts/module-create.js",
+    "module:add": "node dist/scripts/module-add.js",
+    "module:remove": "node dist/scripts/module-remove.js",
+    "module:list": "node dist/scripts/module-list.js",
+    "build:modules": "node dist/scripts/module-build.js",
+    "db:migrations:sync": "node dist/scripts/db-migrations-sync.js",
+    "db:init": "node dist/scripts/db-init.js",
+    "readme:create": "node dist/scripts/readme-build.js",
+    "dev:shell": "next dev ./src/app-shell -p 3001",
+    "dev:sync": "node dist/scripts/dev-sync.js"
+  }
+}

package/src/app-shell/(admin)/layout.tsx

@@ -0,0 +1,13 @@
+"use client";
+
+import type { PropsWithChildren } from "react";
+
+export default function AdminShellLayout({ children }: PropsWithChildren<{}>) {
+  return (
+    <div className="mx-auto max-w-5xl px-4 py-16">
+      <h1 className="text-3xl font-bold">Section Admin</h1>
+      <p className="text-slate-600">Gestion avancée des modules.</p>
+      {children}
+    </div>
+  );
+}

package/src/app-shell/(auth)/layout.tsx

@@ -0,0 +1,13 @@
+"use client";
+
+import type { PropsWithChildren } from "react";
+
+export default function AuthLayout({ children }: PropsWithChildren<{}>) {
+  return (
+    <div className="mx-auto max-w-5xl px-4 py-16">
+      <h1 className="text-3xl font-bold">Section Auth</h1>
+      <p className="text-slate-600">Les pages authentifiées regroupées ici.</p>
+      {children}
+    </div>
+  );
+}

package/src/app-shell/(public)/page.tsx

@@ -0,0 +1,11 @@
+"use client";
+
+export default function PublicPage() {
+  return (
+    <div className="mx-auto max-w-3xl space-y-4 px-4 py-16 text-center">
+      <h1 className="text-3xl font-bold">Bienvenue sur LastBrain</h1>
+      <p className="text-slate-600">Cette coquille publique présente la structure par défaut.</p>
+      <button className="rounded-full bg-slate-900 px-5 py-2 text-white">Connexion</button>
+    </div>
+  );
+}

package/src/app-shell/layout.tsx

@@ -0,0 +1,5 @@
+"use client";
+
+import { RootLayout } from "../layouts/RootLayout.js";
+
+export default RootLayout;

package/src/app-shell/not-found.tsx

@@ -0,0 +1,28 @@
+"use client";
+import { Button } from "@lastbrain/ui";
+import { useRouter } from "next/navigation";
+
+export default function NotFound() {
+  const router = useRouter();
+  return (
+    <div className="flex min-h-screen items-center justify-center bg-background">
+      <div className="mx-auto max-w-md text-center">
+        <h1 className="mb-4 text-6xl font-bold text-foreground">404</h1>
+        <h2 className="mb-4 text-2xl font-semibold text-foreground">
+          Page non trouvée
+        </h2>
+        <p className="mb-8 text-muted-foreground">
+          La page que vous recherchez n'existe pas ou a été déplacée.
+        </p>
+        <Button
+          onPress={() => {
+            router.back();
+          }}
+          className="inline-flex items-center justify-center rounded-md bg-primary px-6 py-3 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90"
+        >
+          Retour à l'accueil
+        </Button>
+      </div>
+    </div>
+  );
+}

package/src/layouts/AdminLayout.tsx

@@ -0,0 +1,7 @@
+"use client";
+
+import type { PropsWithChildren } from "react";
+
+export function AdminLayout({ children }: PropsWithChildren<{}>) {
+  return <div className="pt-18 px-2 md:px-5">{children}</div>;
+}

package/src/layouts/AppProviders.tsx

@@ -0,0 +1,61 @@
+"use client";
+
+import type { PropsWithChildren } from "react";
+import { createContext, useContext, useMemo } from "react";
+import { getModuleConfigs } from "../modules/module-loader.js";
+import { Header, ToastProvider } from "@lastbrain/ui";
+import { useAuthSession } from "../auth/useAuthSession.js";
+import type { User } from "@supabase/supabase-js";
+import { useRouter } from "next/navigation.js";
+
+const ModuleContext = createContext(getModuleConfigs());
+const NotificationContext = createContext({ messages: [] as string[] });
+const AuthContext = createContext<{
+  user: User | null;
+  loading: boolean;
+  isSuperAdmin: boolean;
+}>({
+  user: null,
+  loading: true,
+  isSuperAdmin: false,
+});
+
+export function useModules() {
+  return useContext(ModuleContext);
+}
+
+export function useNotifications() {
+  return useContext(NotificationContext);
+}
+
+export function useAuth() {
+  return useContext(AuthContext);
+}
+
+export function AppProviders({ children }: PropsWithChildren<{}>) {
+  const modules = useMemo(() => getModuleConfigs(), []);
+  const notifications = useMemo(() => ({ messages: [] as string[] }), []);
+  const { user, loading, isSuperAdmin } = useAuthSession();
+  // const router = useRouter();
+  const authValue = useMemo(
+    () => ({ user, loading, isSuperAdmin }),
+    [user, loading, isSuperAdmin]
+  );
+
+  // const handleLogout = async () => {
+  //   const { signOut } = await import("../auth/authHelpers.js");
+  //   await signOut();
+  //   router.push("/auth/signin");
+  // };
+
+  return (
+    <AuthContext.Provider value={authValue}>
+      <ModuleContext.Provider value={modules}>
+        <NotificationContext.Provider value={notifications}>
+          {children}
+          <ToastProvider placement="top-right" toastOffset={75} />
+        </NotificationContext.Provider>
+      </ModuleContext.Provider>
+    </AuthContext.Provider>
+  );
+}

package/src/layouts/AuthLayout.tsx

@@ -0,0 +1,7 @@
+"use client";
+
+import type { PropsWithChildren } from "react";
+
+export function AuthLayout({ children }: PropsWithChildren<{}>) {
+  return <div className="pt-18  px-2 md:px-5 ">{children}</div>;
+}

package/src/layouts/PublicLayout.tsx

@@ -0,0 +1,7 @@
+"use client";
+
+import type { PropsWithChildren } from "react";
+
+export function PublicLayout({ children }: PropsWithChildren<{}>) {
+  return <section className=" px-4 ">{children}</section>;
+}

package/src/layouts/RootLayout.tsx

@@ -0,0 +1,27 @@
+"use client";
+
+import type { PropsWithChildren } from "react";
+import { ThemeProvider } from "next-themes";
+import { AppProviders } from "./AppProviders.js";
+
+// Note: L'app Next.js doit importer son propre globals.css dans son layout
+export function RootLayout({ children }: PropsWithChildren<{}>) {
+  return (
+    <html lang="fr" suppressHydrationWarning>
+      <body className="min-h-screen">
+        <ThemeProvider
+          attribute="class"
+          defaultTheme="light"
+          enableSystem={false}
+          storageKey="lastbrain-theme"
+        >
+          <AppProviders>
+            <div className=" min-h-screen bg-slate-50 text-slate-900 dark:bg-slate-950 dark:text-white">
+              {children}
+            </div>
+          </AppProviders>
+        </ThemeProvider>
+      </body>
+    </html>
+  );
+}