@lastbrain/app 0.1.39 → 0.1.42

package/src/scripts/init-app.ts

@@ -903,7 +903,7 @@ async function createConfigFiles(
 ) {
   console.log(chalk.yellow("\n⚙️  Création des fichiers de configuration..."));
 
-  // middleware.ts - Protection des routes /auth/* et /admin/*
+  // middleware.ts - Protection des routes /auth/*, /admin/* et /api/admin/*
   const middlewarePath = path.join(targetDir, "middleware.ts");
   if (!fs.existsSync(middlewarePath) || force) {
     const middleware = `import { type NextRequest, NextResponse } from "next/server";
@@ -911,6 +911,7 @@ import { createMiddlewareClient } from "@lastbrain/core/server";
 
 export async function middleware(request: NextRequest) {
   const { pathname } = request.nextUrl;
+  const isApi = pathname.startsWith("/api/");
 
   // Protéger les routes /auth/* (espace membre)
   if (pathname.startsWith("/auth")) {
@@ -920,33 +921,56 @@ export async function middleware(request: NextRequest) {
         data: { session },
       } = await supabase.auth.getSession();
 
-      // Pas de session → redirection vers /signin
+      // Pas de session → nettoyage des cookies + redirection vers /auth/signin
       if (!session) {
-        const redirectUrl = new URL("/signin", request.url);
+        const redirectUrl = new URL("/auth/signin", request.url);
         redirectUrl.searchParams.set("redirect", pathname);
-        return NextResponse.redirect(redirectUrl);
+        const res = NextResponse.redirect(redirectUrl);
+        res.cookies.delete("sb-access-token");
+        res.cookies.delete("sb-refresh-token");
+        res.cookies.delete("sb:token");
+        res.cookies.delete("sb:refresh-token");
+        return res;
       }
 
       return response;
     } catch (error) {
       console.error("Middleware auth error:", error);
-      return NextResponse.redirect(new URL("/signin", request.url));
+      const res = NextResponse.redirect(new URL("/auth/signin", request.url));
+      res.cookies.delete("sb-access-token");
+      res.cookies.delete("sb-refresh-token");
+      res.cookies.delete("sb:token");
+      res.cookies.delete("sb:refresh-token");
+      return res;
     }
   }
 
-  // Protéger les routes /admin/* (superadmin uniquement)
-  if (pathname.startsWith("/admin")) {
+  // Protéger les routes /admin/* et /api/admin/* (superadmin uniquement)
+  if (pathname.startsWith("/admin") || pathname.startsWith("/api/admin")) {
     try {
       const { supabase, response } = createMiddlewareClient(request);
       const {
         data: { session },
       } = await supabase.auth.getSession();
 
-      // Pas de session → redirection vers /signin
+      // Pas de session → 401 JSON pour API, sinon redirection vers /auth/signin avec nettoyage cookies
       if (!session) {
-        const redirectUrl = new URL("/signin", request.url);
+        if (isApi) {
+          const res = NextResponse.json({ error: "Non authentifié" }, { status: 401 });
+          res.cookies.delete("sb-access-token");
+          res.cookies.delete("sb-refresh-token");
+          res.cookies.delete("sb:token");
+          res.cookies.delete("sb:refresh-token");
+          return res;
+        }
+        const redirectUrl = new URL("/auth/signin", request.url);
         redirectUrl.searchParams.set("redirect", pathname);
-        return NextResponse.redirect(redirectUrl);
+        const res = NextResponse.redirect(redirectUrl);
+        res.cookies.delete("sb-access-token");
+        res.cookies.delete("sb-refresh-token");
+        res.cookies.delete("sb:token");
+        res.cookies.delete("sb:refresh-token");
+        return res;
       }
 
       // Vérifier si l'utilisateur est superadmin
@@ -957,13 +981,24 @@ export async function middleware(request: NextRequest) {
 
       if (error || !isSuperAdmin) {
         console.error("Access denied: not a superadmin", error);
+        if (isApi) {
+          return NextResponse.json({ error: "Accès refusé" }, { status: 403 });
+        }
         return NextResponse.redirect(new URL("/", request.url));
       }
 
       return response;
     } catch (error) {
       console.error("Middleware admin error:", error);
-      return NextResponse.redirect(new URL("/", request.url));
+      if (isApi) {
+        return NextResponse.json({ error: "Erreur middleware" }, { status: 500 });
+      }
+      const res = NextResponse.redirect(new URL("/", request.url));
+      res.cookies.delete("sb-access-token");
+      res.cookies.delete("sb-refresh-token");
+      res.cookies.delete("sb:token");
+      res.cookies.delete("sb:refresh-token");
+      return res;
     }
   }
 
@@ -985,7 +1020,9 @@ export const config = {
 `;
     await fs.writeFile(middlewarePath, middleware);
     console.log(
-      chalk.green("✓ middleware.ts créé (protection /auth/* et /admin/*)"),
+      chalk.green(
+        "✓ middleware.ts créé (protection /auth/*, /admin/* et /api/admin/*)",
+      ),
     );
   }
 
@@ -1561,6 +1598,13 @@ export const BUCKET_CONFIGS: Record<string, BucketConfig> = {
       return filePath.startsWith(\`\${userId}/\`);
     },
   },
+  recipes: {
+    name: "recipes",
+    isPublic: true,
+    description: "Public recipe images accessible by slug",
+    allowedFileTypes: ["image/jpeg", "image/png", "image/webp", "image/gif"],
+    maxFileSize: 50 * 1024 * 1024, // 50MB
+  },
   // Example for future buckets:
   // public: {
   //   name: "public",

package/src/scripts/module-add.ts

@@ -204,16 +204,49 @@ export async function addModule(moduleName: string, targetDir: string) {
         console.log(
           chalk.yellow("\n⬆️  Application des nouvelles migrations..."),
         );
-        try {
-          execSync("supabase migration up", {
-            cwd: targetDir,
-            stdio: "inherit",
-          });
-          console.log(chalk.green("✓ Migrations appliquées"));
-        } catch {
-          console.error(
-            chalk.red("❌ Erreur lors de l'application des migrations"),
+
+        // Appliquer directement avec psql au lieu de supabase migration up
+        const migrationsDir = path.join(targetDir, "supabase", "migrations");
+        const migrationFiles = fs
+          .readdirSync(migrationsDir)
+          .filter((f) => f.endsWith(".sql"))
+          .filter((f) => copiedMigrationFiles.includes(f))
+          .sort();
+
+        if (migrationFiles.length === 0) {
+          console.log(
+            chalk.yellow("⚠️  Aucune nouvelle migration à appliquer"),
           );
+        } else {
+          try {
+            const dbUrl =
+              "postgresql://postgres:postgres@127.0.0.1:54322/postgres";
+
+            for (const file of migrationFiles) {
+              const filePath = path.join(migrationsDir, file);
+              console.log(chalk.gray(`   Exécution de ${file}...`));
+
+              execSync(`psql "${dbUrl}" -f "${filePath}"`, {
+                cwd: targetDir,
+                stdio: "pipe",
+              });
+            }
+
+            console.log(
+              chalk.green(
+                `✓ ${migrationFiles.length} migration(s) appliquée(s)`,
+              ),
+            );
+          } catch (error: any) {
+            console.error(
+              chalk.red("❌ Erreur lors de l'application des migrations"),
+            );
+            console.log(
+              chalk.gray(
+                "\nVous pouvez essayer manuellement:\n  supabase db reset\n",
+              ),
+            );
+          }
         }
       } else {
         console.log(
@@ -287,13 +320,13 @@ export async function addModule(moduleName: string, targetDir: string) {
   // 7. Générer automatiquement les routes du module
   console.log(chalk.yellow("🔧 Génération des routes du module..."));
   try {
-    execSync("pnpm build:modules", { cwd: targetDir, stdio: "inherit" });
+    execSync("pnpm run build:modules", { cwd: targetDir, stdio: "inherit" });
     console.log(chalk.green("✓ Routes du module générées"));
   } catch {
     console.error(chalk.red("❌ Erreur lors de la génération des routes"));
     console.error(
       chalk.gray(
-        "Vous pouvez les générer manuellement avec: pnpm build:modules",
+        "Vous pouvez les générer manuellement avec: cd apps/<votre-app> && pnpm run build:modules",
       ),
     );
   }