@lastbrain/module-auth 0.1.0

package/dist/api/public/signin.d.ts

@@ -0,0 +1,2 @@
+export declare function POST(request: Request): Promise<Response>;
+//# sourceMappingURL=signin.d.ts.map

package/dist/api/public/signin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signin.d.ts","sourceRoot":"","sources":["../../../src/api/public/signin.ts"],"names":[],"mappings":"AAWA,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,qBAmB1C"}

package/dist/api/public/signin.js

@@ -0,0 +1,25 @@
+import { getSupabaseServerClient } from "@lastbrain/core/server";
+const jsonResponse = (payload, status = 200) => {
+    return new Response(JSON.stringify(payload), {
+        headers: {
+            "content-type": "application/json"
+        },
+        status
+    });
+};
+export async function POST(request) {
+    const supabase = await getSupabaseServerClient();
+    const body = await request.json();
+    const { email, password } = body;
+    if (!email || !password) {
+        return jsonResponse({ error: "Email et mot de passe requis." }, 400);
+    }
+    const { error, data } = await supabase.auth.signInWithPassword({
+        email,
+        password
+    });
+    if (error) {
+        return jsonResponse({ error: error.message }, 400);
+    }
+    return jsonResponse({ data });
+}

package/dist/auth.build.config.d.ts

@@ -0,0 +1,4 @@
+import type { ModuleBuildConfig } from "@lastbrain/core";
+declare const authBuildConfig: ModuleBuildConfig;
+export default authBuildConfig;
+//# sourceMappingURL=auth.build.config.d.ts.map

package/dist/auth.build.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.build.config.d.ts","sourceRoot":"","sources":["../src/auth.build.config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,QAAA,MAAM,eAAe,EAAE,iBA+GtB,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/auth.build.config.js

@@ -0,0 +1,113 @@
+const authBuildConfig = {
+    moduleName: "@lastbrain/module-auth",
+    pages: [
+        {
+            section: "public",
+            path: "/signin",
+            componentExport: "SignInPage",
+        },
+        {
+            section: "public",
+            path: "/signup",
+            componentExport: "SignUpPage",
+        },
+        {
+            section: "public",
+            path: "/reset-password",
+            componentExport: "ResetPassword",
+        },
+        {
+            section: "auth",
+            path: "/dashboard",
+            componentExport: "DashboardPage",
+        },
+        {
+            section: "auth",
+            path: "/reglage",
+            componentExport: "ReglagePage",
+        },
+        {
+            section: "auth",
+            path: "/profile",
+            componentExport: "ProfilePage",
+        },
+        {
+            section: "admin",
+            path: "/users",
+            componentExport: "AdminUsersPage",
+        },
+    ],
+    apis: [
+        {
+            method: "POST",
+            path: "/api/auth/signin",
+            handlerExport: "POST",
+            entryPoint: "api/public/signin",
+            authRequired: false,
+        },
+    ],
+    migrations: {
+        enabled: true,
+        priority: 20,
+        path: "supabase/migrations",
+        files: ["001_auth_base.sql"],
+    },
+    menu: {
+        public: [
+            {
+                title: "Connexion",
+                description: "Connectez-vous à votre compte",
+                icon: "LogIn",
+                path: "/signin",
+                order: 1,
+            },
+            {
+                title: "Inscription",
+                description: "Créez votre compte",
+                icon: "UserPlus2",
+                path: "/signup",
+                order: 2,
+            },
+        ],
+        admin: [
+            {
+                title: "Gestion des utilisateurs",
+                description: "Gérez les utilisateurs de la plateforme",
+                icon: "Users2",
+                path: "/admin/users",
+                order: 1,
+            },
+        ],
+        account: [
+            {
+                title: "Tableau de bord",
+                description: "Accédez à votre tableau de bord",
+                icon: "LayoutDashboard",
+                path: "/auth/dashboard",
+                order: 1,
+            },
+            {
+                title: "Mon profil",
+                description: "Gérez vos informations personnelles",
+                icon: "User2",
+                path: "/auth/profile",
+                order: 1,
+            },
+            {
+                title: "Paramètres",
+                description: "Configurez votre compte",
+                icon: "Settings",
+                path: "/auth/reglage",
+                order: 2,
+            },
+            {
+                title: "Déconnexion",
+                description: "Se déconnecter",
+                icon: "LogOut",
+                path: "/signout",
+                order: 99,
+            },
+        ],
+    },
+};
+export default authBuildConfig;

package/dist/components/Doc.d.ts

@@ -0,0 +1,2 @@
+export declare function AuthModuleDoc(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=Doc.d.ts.map

package/dist/components/Doc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Doc.d.ts","sourceRoot":"","sources":["../../src/components/Doc.tsx"],"names":[],"mappings":"AAUA,wBAAgB,aAAa,4CA2S5B"}

package/dist/components/Doc.js

@@ -0,0 +1,5 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Card, CardBody, CardHeader, Snippet, Chip, TableStructure, } from "@lastbrain/ui";
+export function AuthModuleDoc() {
+    return (_jsxs("div", { className: "space-y-6", children: [_jsxs("div", { className: "flex items-start justify-between", children: [_jsxs("div", { children: [_jsx("h2", { className: "text-3xl font-bold mb-2", children: "Module Auth" }), _jsx("p", { className: "text-slate-600 dark:text-slate-400", children: "Authentification compl\u00E8te avec gestion des profils utilisateur" })] }), _jsx(Chip, { color: "primary", variant: "flat", children: "v0.1.0" })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-xl font-semibold", children: "\uD83D\uDCDD Informations" }) }), _jsxs(CardBody, { className: "space-y-2", children: [_jsxs("div", { children: [_jsx("span", { className: "font-semibold", children: "Auteur:" }), " LastBrain Team"] }), _jsxs("div", { children: [_jsx("span", { className: "font-semibold", children: "Package:" }), " ", "@lastbrain/module-auth"] }), _jsxs("div", { children: [_jsx("span", { className: "font-semibold", children: "Derni\u00E8re mise \u00E0 jour:" }), " 21 novembre 2025"] })] })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-xl font-semibold", children: "\uD83D\uDCC4 Pages Disponibles" }) }), _jsxs(CardBody, { className: "space-y-3", children: [_jsxs("div", { children: [_jsx("h4", { className: "font-semibold mb-2", children: "Pages Publiques" }), _jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "success", variant: "flat", children: "GET" }), _jsx("code", { className: "text-sm", children: "/signin" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Connexion" })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "success", variant: "flat", children: "GET" }), _jsx("code", { className: "text-sm", children: "/signup" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Inscription" })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "success", variant: "flat", children: "GET" }), _jsx("code", { className: "text-sm", children: "/reset-password" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- R\u00E9initialisation mot de passe" })] })] })] }), _jsxs("div", { children: [_jsx("h4", { className: "font-semibold mb-2", children: "Pages Prot\u00E9g\u00E9es (Auth)" }), _jsxs("div", { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "primary", variant: "flat", children: "GET" }), _jsx("code", { className: "text-sm", children: "/auth/dashboard" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Tableau de bord" })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "primary", variant: "flat", children: "GET" }), _jsx("code", { className: "text-sm", children: "/auth/profile" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Profil utilisateur" })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "primary", variant: "flat", children: "GET" }), _jsx("code", { className: "text-sm", children: "/auth/reglage" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Param\u00E8tres" })] })] })] }), _jsxs("div", { children: [_jsx("h4", { className: "font-semibold mb-2", children: "Pages Admin" }), _jsx("div", { className: "space-y-2", children: _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "danger", variant: "flat", children: "GET" }), _jsx("code", { className: "text-sm", children: "/admin/users" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Gestion des utilisateurs" })] }) })] })] })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-xl font-semibold", children: "\uD83D\uDD0C Routes API" }) }), _jsxs(CardBody, { className: "space-y-2", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "warning", variant: "flat", children: "POST" }), _jsx("code", { className: "text-sm", children: "/api/auth/signin" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Authentification" })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "warning", variant: "flat", children: "POST" }), _jsx("code", { className: "text-sm", children: "/api/auth/signup" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- Cr\u00E9ation de compte" })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "warning", variant: "flat", children: "POST" }), _jsx("code", { className: "text-sm", children: "/api/auth/signout" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- D\u00E9connexion" })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Chip, { size: "sm", color: "warning", variant: "flat", children: "POST" }), _jsx("code", { className: "text-sm", children: "/api/auth/reset-password" }), _jsx("span", { className: "text-slate-600 dark:text-slate-400", children: "- R\u00E9initialisation" })] })] })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-xl font-semibold", children: "\uD83D\uDCC1 Structure" }) }), _jsx(CardBody, { children: _jsx(Snippet, { symbol: "", color: "default", size: "sm", hideSymbol: true, hideCopyButton: true, children: _jsxs("div", { className: "flex flex-col gap-1 text-xs font-mono", children: [_jsx("span", { children: "module-auth/" }), _jsx("span", { children: "\u251C\u2500\u2500 src/" }), _jsx("span", { children: "\u2502 \u251C\u2500\u2500 web/" }), _jsx("span", { children: "\u2502 \u2502 \u251C\u2500\u2500 signin/" }), _jsx("span", { children: "\u2502 \u2502 \u251C\u2500\u2500 signup/" }), _jsx("span", { children: "\u2502 \u2502 \u251C\u2500\u2500 dashboard/" }), _jsx("span", { children: "\u2502 \u2502 \u251C\u2500\u2500 profile/" }), _jsx("span", { children: "\u2502 \u2502 \u2514\u2500\u2500 reglage/" }), _jsx("span", { children: "\u2502 \u251C\u2500\u2500 api/" }), _jsx("span", { children: "\u2502 \u2502 \u251C\u2500\u2500 signin.ts" }), _jsx("span", { children: "\u2502 \u2502 \u251C\u2500\u2500 signup.ts" }), _jsx("span", { children: "\u2502 \u2502 \u251C\u2500\u2500 signout.ts" }), _jsx("span", { children: "\u2502 \u2502 \u2514\u2500\u2500 reset-password.ts" }), _jsx("span", { children: "\u2502 \u251C\u2500\u2500 components/" }), _jsx("span", { children: "\u2502 \u2502 \u2514\u2500\u2500 Doc.tsx" }), _jsx("span", { children: "\u2502 \u2514\u2500\u2500 auth.build.config.ts" }), _jsx("span", { children: "\u2514\u2500\u2500 supabase/" }), _jsx("span", { children: " \u2514\u2500\u2500 migrations/" }), _jsx("span", { children: " \u2514\u2500\u2500 20251112000000_user_init.sql" })] }) }) })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-xl font-semibold", children: "\uD83D\uDDC4\uFE0F Tables de Donn\u00E9es" }) }), _jsxs(CardBody, { className: "space-y-4", children: [_jsx(TableStructure, { tableName: "user_profil", title: "user_profil", description: "Profil \u00E9tendu des utilisateurs (pr\u00E9nom, nom, t\u00E9l\u00E9phone, avatar, bio, etc.)" }), _jsx(TableStructure, { tableName: "user_address", title: "user_address", description: "Adresses des utilisateurs (livraison, facturation)" }), _jsx(TableStructure, { tableName: "user_notifications", title: "user_notifications", description: "Pr\u00E9f\u00E9rences de notifications (email, SMS, push)" })] })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-xl font-semibold", children: "\uD83D\uDCE6 Installation" }) }), _jsxs(CardBody, { className: "space-y-4", children: [_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Snippet, { symbol: "", color: "default", size: "sm", children: "pnpm lastbrain add-module auth" }), _jsx(Snippet, { symbol: "", color: "default", size: "sm", children: "pnpm build:modules" }), _jsx(Snippet, { symbol: "", color: "default", size: "sm", children: "supabase migration up" })] }), _jsxs("div", { className: "border-2 border-danger rounded-lg p-4 mt-6", children: [_jsx("h4", { className: "text-lg font-semibold text-danger mb-3", children: "\u26A0\uFE0F Danger Zone" }), _jsx("p", { className: "text-sm text-slate-600 dark:text-slate-400 mb-3", children: "La suppression du module supprimera toutes les pages, routes API et migrations associ\u00E9es. Cette action est irr\u00E9versible." }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Snippet, { symbol: "", color: "danger", size: "sm", children: "pnpm lastbrain remove-module auth" }), _jsx(Snippet, { symbol: "", color: "danger", size: "sm", children: "pnpm build:modules" })] })] })] })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-xl font-semibold", children: "\uD83D\uDCA1 Utilisation" }) }), _jsxs(CardBody, { className: "space-y-3", children: [_jsxs("div", { children: [_jsx("h4", { className: "font-semibold mb-2", children: "Hooks disponibles" }), _jsxs(Snippet, { symbol: "", color: "default", size: "sm", children: ["import ", "{ useAuthSession }", " from \"@lastbrain/module-auth\";"] })] }), _jsxs("div", { children: [_jsx("h4", { className: "font-semibold mb-2 mt-4", children: "Exemple d'utilisation" }), _jsx(Snippet, { symbol: "", color: "default", size: "sm", hideSymbol: true, children: _jsxs("div", { className: "flex flex-col gap-1", children: [_jsxs("span", { children: ["const ", "{ session, user }", " = useAuthSession();"] }), _jsx("span", { children: "if (!session) return <p>Non connect\u00E9</p>;" }), _jsxs("span", { children: ["return <div>Bonjour ", "{user.email}", "</div>;"] })] }) })] })] })] })] }));
+}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { SignInPage } from "./web/public/SignInPage.js";
+export { SignUpPage } from "./web/public/SignUpPage.js";
+export { ResetPassword } from "./web/public/ResetPassword.js";
+export { DashboardPage } from "./web/auth/dashboard.js";
+export { ProfilePage } from "./web/auth/profile.js";
+export { ReglagePage } from "./web/auth/reglage.js";
+export { AdminUsersPage } from "./web/admin/users.js";
+export { AuthModuleDoc } from "./components/Doc.js";
+export { default as authBuildConfig } from "./auth.build.config.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,12 @@
+// Client Components uniquement
+export { SignInPage } from "./web/public/SignInPage.js";
+export { SignUpPage } from "./web/public/SignUpPage.js";
+export { ResetPassword } from "./web/public/ResetPassword.js";
+export { DashboardPage } from "./web/auth/dashboard.js";
+export { ProfilePage } from "./web/auth/profile.js";
+export { ReglagePage } from "./web/auth/reglage.js";
+export { AdminUsersPage } from "./web/admin/users.js";
+// Documentation
+export { AuthModuleDoc } from "./components/Doc.js";
+// Configuration de build (utilisée par les scripts)
+export { default as authBuildConfig } from "./auth.build.config.js";

package/dist/server.d.ts

@@ -0,0 +1,2 @@
+export { POST as signInApi } from "./api/public/signin.js";
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/server.js

@@ -0,0 +1,2 @@
+// Server-only exports (Route Handlers, Server Actions, etc.)
+export { POST as signInApi } from "./api/public/signin.js";

package/dist/web/admin/users.d.ts

@@ -0,0 +1,2 @@
+export declare function AdminUsersPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=users.d.ts.map

package/dist/web/admin/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/web/admin/users.tsx"],"names":[],"mappings":"AAAA,wBAAgB,cAAc,4CAE7B"}

package/dist/web/admin/users.js

@@ -0,0 +1,4 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+export function AdminUsersPage() {
+    return _jsx("div", { children: "Admin Users Page" });
+}

package/dist/web/auth/dashboard.d.ts

@@ -0,0 +1,2 @@
+export declare function DashboardPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/web/auth/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../../src/web/auth/dashboard.tsx"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,4CAE5B"}

package/dist/web/auth/dashboard.js

@@ -0,0 +1,4 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+export function DashboardPage() {
+    return _jsx("div", { className: "pt-12", children: "Welcome to your dashboard!" });
+}

package/dist/web/auth/profile.d.ts

@@ -0,0 +1,2 @@
+export declare function ProfilePage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=profile.d.ts.map

package/dist/web/auth/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../src/web/auth/profile.tsx"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,4CAE1B"}

package/dist/web/auth/profile.js

@@ -0,0 +1,4 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+export function ProfilePage() {
+    return _jsx("div", { className: "pt-12", children: "Welcome to your Profile!" });
+}

package/dist/web/auth/reglage.d.ts

@@ -0,0 +1,2 @@
+export declare function ReglagePage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=reglage.d.ts.map

package/dist/web/auth/reglage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reglage.d.ts","sourceRoot":"","sources":["../../../src/web/auth/reglage.tsx"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,4CAE1B"}

package/dist/web/auth/reglage.js

@@ -0,0 +1,4 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+export function ReglagePage() {
+    return _jsx("div", { className: "pt-12", children: "Welcome to your Reglage!" });
+}

package/dist/web/public/ResetPassword.d.ts

@@ -0,0 +1,2 @@
+export declare function ResetPassword(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ResetPassword.d.ts.map

package/dist/web/public/ResetPassword.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPassword.d.ts","sourceRoot":"","sources":["../../../src/web/public/ResetPassword.tsx"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,4CAE5B"}

package/dist/web/public/ResetPassword.js

@@ -0,0 +1,4 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+export function ResetPassword() {
+    return _jsx("div", { children: "Reset Password Page" });
+}

package/dist/web/public/SignInPage.d.ts

@@ -0,0 +1,2 @@
+export declare function SignInPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=SignInPage.d.ts.map

package/dist/web/public/SignInPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInPage.d.ts","sourceRoot":"","sources":["../../../src/web/public/SignInPage.tsx"],"names":[],"mappings":"AAwPA,wBAAgB,UAAU,4CAMzB"}

package/dist/web/public/SignInPage.js

@@ -0,0 +1,108 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Suspense, useState } from "react";
+import { supabaseBrowserClient } from "@lastbrain/core";
+import { addToast, Button, Card, CardBody, Chip, Input, Link, } from "@lastbrain/ui";
+import { ArrowRight, Lock, Mail, Sparkles } from "lucide-react";
+import { useRouter, useSearchParams } from "next/navigation";
+function SignInForm() {
+    const searchParams = useSearchParams();
+    const [email, setEmail] = useState("");
+    const [password, setPassword] = useState("");
+    const [isLoading, setIsLoading] = useState(false);
+    const [error, setError] = useState(null);
+    const redirectUrl = searchParams.get("redirect");
+    const router = useRouter();
+    const handleSubmit = async (event) => {
+        event.preventDefault();
+        setIsLoading(true);
+        try {
+            const { data, error } = await supabaseBrowserClient.auth.signInWithPassword({
+                email,
+                password,
+            });
+            if (error) {
+                addToast({
+                    color: "danger",
+                    title: "Erreur de connexion",
+                    description: error.message,
+                });
+                setIsLoading(false);
+                return;
+            }
+            setIsLoading(false);
+            console.log("Signed in user:", data.user);
+            addToast({
+                color: "success",
+                title: "Connecté avec succès !",
+                description: `Bienvenue ${data.user?.email}`,
+            });
+            router.push(redirectUrl || "/auth/dashboard");
+        }
+        catch (err) {
+            setIsLoading(false);
+            addToast({
+                color: "danger",
+                title: "Erreur de connexion",
+                description: `${err instanceof Error ? err.message : String(err)}`,
+            });
+        }
+    };
+    // return (
+    //   <div className=" min-h-screen h-full  flex flex-col justify-center items-center p-4">
+    //     <Card className="w-full max-w-md">
+    //       <CardHeader className="flex flex-col">
+    //         <h1 className="text-2xl font-semibold text-slate-900 dark:text-white">
+    //           Connexion
+    //         </h1>
+    //         <p className="mt-1 text-sm text-slate-500">
+    //           Utilisez votre adresse email pour vous connecter.
+    //         </p>
+    //       </CardHeader>
+    //       <CardBody>
+    //         <form onSubmit={handleSubmit}>
+    //           <div className="space-y-6">
+    //             <Input
+    //               label="Email"
+    //               type="email"
+    //               className="mb-6"
+    //               required
+    //               value={email}
+    //               onChange={(event) => setEmail(event.target.value)}
+    //             />
+    //             <Input
+    //               label="Mot de passe"
+    //               type="password"
+    //               required
+    //               placeholder="Password"
+    //               className="mb-6"
+    //               value={password}
+    //               onChange={(event) => setPassword(event.target.value)}
+    //             />
+    //             <Button
+    //               size="lg"
+    //               type="submit"
+    //               className="w-full"
+    //               isLoading={isLoading}
+    //             >
+    //               Se connecter
+    //             </Button>
+    //           </div>
+    //         </form>
+    //       </CardBody>
+    //     </Card>
+    //   </div>
+    // );
+    return (_jsxs("div", { className: "pt-12 relative min-h-screen w-full overflow-hidden bg-linear-to-br from-primary-50/30 to-secondary-50/30 dark:from-primary-950/50 dark:to-secondary-950/50", children: [_jsx("div", { className: "absolute inset-0 bg-grid-slate-100 dark:bg-grid-slate-800/20 mask-[linear-gradient(0deg,white,rgba(255,255,255,0.6))] dark:mask-[linear-gradient(0deg,rgba(255,255,255,0.1),rgba(255,255,255,0.05))]" }), _jsx("div", { className: "relative flex min-h-[60vh] items-center justify-center px-4 py-12", children: _jsxs("div", { className: "w-full max-w-md", children: [_jsxs("div", { className: "mb-8 text-center", children: [_jsx(Chip, { color: "primary", variant: "flat", startContent: _jsx(Sparkles, { className: "w-4 h-4" }), className: "mb-4 p-2", children: "Espace membre" }), _jsx("h1", { className: "mb-3 text-4xl font-bold", children: _jsx("span", { className: "bg-linear-to-r from-primary-600 to-secondary-600 bg-clip-text text-transparent", children: "Bon retour" }) }), _jsx("p", { className: "text-default-600 dark:text-default-400", children: "Connectez-vous pour acc\u00E9der \u00E0 votre espace" })] }), _jsx(Card, { className: "border border-default-200/60 bg-background/60 backdrop-blur-md backdrop-saturate-150 shadow-xl", children: _jsxs(CardBody, { className: "gap-6 p-8", children: [_jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-6", children: [_jsx(Input, { label: "Email", type: "email", placeholder: "votre@email.com", value: email, onChange: (e) => setEmail(e.target.value), required: true, startContent: _jsx(Mail, { className: "h-4 w-4 text-default-400" }), classNames: {
+                                                    input: "text-base",
+                                                    inputWrapper: "border border-default-200/60 hover:border-primary-400 focus-within:border-primary-500",
+                                                } }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Input, { label: "Mot de passe", type: "password", placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", value: password, onChange: (e) => setPassword(e.target.value), required: true, minLength: 6, startContent: _jsx(Lock, { className: "h-4 w-4 text-default-400" }), classNames: {
+                                                            input: "text-base",
+                                                            inputWrapper: "border border-default-200/60 hover:border-primary-400 focus-within:border-primary-500",
+                                                        } }), _jsx(Link, { href: "/forgot-password", className: "text-xs text-default-500 hover:text-primary-500 self-end", children: "Mot de passe oubli\u00E9 ?" })] }), error && (_jsx("div", { className: "rounded-lg border border-danger-200 bg-danger-50/50 px-4 py-3 dark:border-danger-800 dark:bg-danger-950/50", children: _jsx("p", { className: "text-sm text-danger-600 dark:text-danger-400", children: error }) })), _jsx(Button, { type: "submit", color: "primary", size: "lg", className: "w-full font-semibold", endContent: isLoading ? null : _jsx(ArrowRight, { className: "h-5 w-5" }), isLoading: isLoading, children: "Se connecter" })] }), _jsxs("div", { className: "relative flex items-center gap-4 py-2", children: [_jsx("div", { className: "h-px flex-1 bg-default-200" }), _jsx("span", { className: "text-xs text-default-400", children: "OU" }), _jsx("div", { className: "h-px flex-1 bg-default-200" })] }), _jsx("div", { className: "text-center", children: _jsxs("p", { className: "text-sm text-default-600", children: ["Pas encore de compte ?", " ", _jsx(Link, { href: redirectUrl
+                                                        ? `/signup?redirect=${encodeURIComponent(redirectUrl)}`
+                                                        : "/signup", className: "font-semibold text-primary-600 hover:text-primary-700", children: "Cr\u00E9er un compte" })] }) })] }) }), _jsxs("p", { className: "mt-8 text-center text-xs text-default-400", children: ["En vous connectant, vous acceptez nos", " ", _jsx(Link, { href: "/legal/terms", className: "underline hover:text-primary-500", children: "conditions d'utilisation" })] })] }) })] }));
+}
+export function SignInPage() {
+    return (_jsx(Suspense, { fallback: _jsx("div", { children: "Chargement..." }), children: _jsx(SignInForm, {}) }));
+}

package/dist/web/public/SignUpPage.d.ts

@@ -0,0 +1,2 @@
+export declare function SignUpPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=SignUpPage.d.ts.map

package/dist/web/public/SignUpPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignUpPage.d.ts","sourceRoot":"","sources":["../../../src/web/public/SignUpPage.tsx"],"names":[],"mappings":"AA8RA,wBAAgB,UAAU,4CAMzB"}

package/dist/web/public/SignUpPage.js

@@ -0,0 +1,102 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button, Card, CardBody, Input, Link, Chip, addToast, } from "@lastbrain/ui";
+import { useRouter, useSearchParams } from "next/navigation";
+import { Suspense, useState } from "react";
+import { Mail, Lock, User, ArrowRight, Sparkles, CheckCircle2, } from "lucide-react";
+import { supabaseBrowserClient } from "@lastbrain/core";
+function SignUpForm() {
+    const router = useRouter();
+    const searchParams = useSearchParams();
+    const [fullName, setFullName] = useState("");
+    const [email, setEmail] = useState("");
+    const [password, setPassword] = useState("");
+    const [confirmPassword, setConfirmPassword] = useState("");
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState(null);
+    const [success, setSuccess] = useState(null);
+    // Récupérer le paramètre redirect
+    const redirectUrl = searchParams.get("redirect");
+    const handleSubmit = async (event) => {
+        event.preventDefault();
+        setError(null);
+        setSuccess(null);
+        if (password !== confirmPassword) {
+            setError("Les mots de passe ne correspondent pas.");
+            return;
+        }
+        if (password.length < 6) {
+            setError("Le mot de passe doit contenir au moins 6 caractères.");
+            return;
+        }
+        setLoading(true);
+        try {
+            const { data, error: signUpError } = await supabaseBrowserClient.auth.signUp({
+                email,
+                password,
+                options: {
+                    emailRedirectTo: `${window.location.origin}/api/auth/callback${redirectUrl ? `?next=${encodeURIComponent(redirectUrl)}` : ""}`,
+                    data: {
+                        full_name: fullName,
+                    },
+                },
+            });
+            if (signUpError) {
+                setError(signUpError.message);
+                return;
+            }
+            // Si la confirmation par email est requise
+            if (data.user && !data.session) {
+                setSuccess("Compte créé avec succès ! Veuillez vérifier votre email pour confirmer votre compte.");
+                return;
+            }
+            // Si l'utilisateur est directement connecté (confirmation email désactivée)
+            if (data.session) {
+                if (redirectUrl) {
+                    window.location.href = redirectUrl;
+                }
+                else {
+                    window.location.href = "/auth/dashboard";
+                }
+                return;
+            }
+            setSuccess("Compte créé. Vous pouvez désormais vous connecter.");
+            setTimeout(() => {
+                if (redirectUrl) {
+                    router.push(`/signin?redirect=${encodeURIComponent(redirectUrl)}`);
+                }
+                else {
+                    router.push("/signin");
+                }
+            }, 2000);
+        }
+        catch (err) {
+            addToast({
+                title: "Erreur",
+                description: "Une erreur inattendue est survenue.",
+                color: "danger",
+            });
+        }
+        finally {
+            setLoading(false);
+        }
+    };
+    return (_jsxs("div", { className: "pt-12 relative min-h-screen w-full overflow-hidden bg-linear-to-br from-secondary-50/30 to-primary-50/30 dark:from-secondary-950/50 dark:to-primary-950/50", children: [_jsx("div", { className: "absolute inset-0 bg-grid-slate-100 dark:bg-grid-slate-800/20 mask-[linear-gradient(0deg,white,rgba(255,255,255,0.6))] dark:mask-[linear-gradient(0deg,rgba(255,255,255,0.1),rgba(255,255,255,0.05))]" }), _jsx("div", { className: "relative flex min-h-screen items-center justify-center px-4 py-12", children: _jsxs("div", { className: "w-full max-w-md", children: [_jsxs("div", { className: "mb-8 text-center", children: [_jsx(Chip, { color: "secondary", variant: "flat", startContent: _jsx(Sparkles, { className: "w-4 h-4" }), className: "mb-4 p-2", children: "Rejoignez-nous" }), _jsx("h1", { className: "mb-3 text-4xl font-bold", children: _jsx("span", { className: "bg-linear-to-r from-secondary-600 to-primary-600 bg-clip-text text-transparent", children: "Commencer gratuitement" }) }), _jsx("p", { className: "text-default-600 dark:text-default-400", children: "Cr\u00E9ez votre compte en quelques secondes" })] }), _jsx(Card, { className: "border border-default-200/60 bg-background/60 backdrop-blur-md backdrop-saturate-150 shadow-xl", children: _jsxs(CardBody, { className: "gap-6 p-8", children: [_jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-6", children: [_jsx(Input, { label: "Nom complet", type: "text", placeholder: "Jean Dupont", value: fullName, onChange: (e) => setFullName(e.target.value), startContent: _jsx(User, { className: "h-4 w-4 text-default-400" }), classNames: {
+                                                    input: "text-base",
+                                                    inputWrapper: "border border-default-200/60 hover:border-secondary-400 focus-within:border-secondary-500",
+                                                } }), _jsx(Input, { label: "Email", type: "email", placeholder: "votre@email.com", value: email, onChange: (e) => setEmail(e.target.value), required: true, startContent: _jsx(Mail, { className: "h-4 w-4 text-default-400" }), classNames: {
+                                                    input: "text-base",
+                                                    inputWrapper: "border border-default-200/60 hover:border-secondary-400 focus-within:border-secondary-500",
+                                                } }), _jsx(Input, { label: "Mot de passe", type: "password", placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", value: password, onChange: (e) => setPassword(e.target.value), required: true, minLength: 6, startContent: _jsx(Lock, { className: "h-4 w-4 text-default-400" }), classNames: {
+                                                    input: "text-base",
+                                                    inputWrapper: "border border-default-200/60 hover:border-secondary-400 focus-within:border-secondary-500",
+                                                }, description: "Minimum 6 caract\u00E8res" }), _jsx(Input, { label: "Confirmer le mot de passe", type: "password", placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), required: true, minLength: 6, startContent: _jsx(Lock, { className: "h-4 w-4 text-default-400" }), classNames: {
+                                                    input: "text-base",
+                                                    inputWrapper: "border border-default-200/60 hover:border-secondary-400 focus-within:border-secondary-500",
+                                                } }), error && (_jsx("div", { className: "rounded-lg border border-danger-200 bg-danger-50/50 px-4 py-3 dark:border-danger-800 dark:bg-danger-950/50", children: _jsx("p", { className: "text-sm text-danger-600 dark:text-danger-400", children: error }) })), success && (_jsx("div", { className: "rounded-lg border border-success-200 bg-success-50/50 px-4 py-3 dark:border-success-800 dark:bg-success-950/50", children: _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(CheckCircle2, { className: "h-4 w-4 text-success-600 dark:text-success-400" }), _jsx("p", { className: "text-sm text-success-600 dark:text-success-400", children: success })] }) })), _jsx(Button, { type: "submit", color: "secondary", size: "lg", className: "w-full font-semibold", endContent: loading ? null : _jsx(ArrowRight, { className: "h-5 w-5" }), isLoading: loading, children: "Cr\u00E9er mon compte" })] }), _jsxs("div", { className: "relative flex items-center gap-4 py-2", children: [_jsx("div", { className: "h-px flex-1 bg-default-200" }), _jsx("span", { className: "text-xs text-default-400", children: "OU" }), _jsx("div", { className: "h-px flex-1 bg-default-200" })] }), _jsx("div", { className: "text-center", children: _jsxs("p", { className: "text-sm text-default-600", children: ["D\u00E9j\u00E0 inscrit ?", " ", _jsx(Link, { href: redirectUrl
+                                                        ? `/signin?redirect=${encodeURIComponent(redirectUrl)}`
+                                                        : "/signin", className: "font-semibold text-secondary-600 hover:text-secondary-700", children: "Se connecter" })] }) })] }) }), _jsxs("p", { className: "mt-8 text-center text-xs text-default-400", children: ["En cr\u00E9ant un compte, vous acceptez nos", " ", _jsx(Link, { href: "/legal/terms", className: "underline hover:text-secondary-500", children: "conditions d'utilisation" }), " ", "et notre", " ", _jsx(Link, { href: "/legal/privacy", className: "underline hover:text-secondary-500", children: "politique de confidentialit\u00E9" })] })] }) })] }));
+}
+export function SignUpPage() {
+    return (_jsx(Suspense, { fallback: _jsx("div", { children: "Chargement..." }), children: _jsx(SignUpForm, {}) }));
+}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@lastbrain/module-auth",
+  "version": "0.1.0",
+  "description": "Module d'authentification complet pour LastBrain avec Supabase",
+  "private": false,
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "keywords": [
+    "lastbrain",
+    "module",
+    "authentication",
+    "auth",
+    "supabase",
+    "login",
+    "signup"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lastpublication/starter.git",
+    "directory": "packages/module-auth"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "supabase"
+  ],
+  "dependencies": {
+    "@lastbrain/core": "0.1.0",
+    "@lastbrain/ui": "0.1.0",
+    "lucide-react": "^0.554.0",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "peerDependencies": {
+    "next": ">=15.0.0"
+  },
+  "devDependencies": {
+    "next": "^15.5.6",
+    "typescript": "^5.4.0"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./auth.build.config": {
+      "types": "./dist/auth.build.config.d.ts",
+      "default": "./dist/auth.build.config.js"
+    },
+    "./api/*": {
+      "types": "./dist/api/*.d.ts",
+      "default": "./dist/api/*.js"
+    }
+  },
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch"
+  }
+}

package/supabase/migrations/20251112000000_user_init.sql

@@ -0,0 +1,175 @@
+-- User authentication and profile tables
+-- Module: @lastbrain/module-auth
+
+-- =====================================================
+-- Table: user_profil
+-- =====================================================
+CREATE TABLE IF NOT EXISTS public.user_profil (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  owner_id UUID NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  first_name TEXT,
+  last_name TEXT,
+  avatar_url TEXT,
+  bio TEXT,
+  phone TEXT,
+  company TEXT,
+  website TEXT,
+  location TEXT,
+  language TEXT DEFAULT 'en',
+  timezone TEXT,
+  preferences JSONB DEFAULT '{}'::jsonb,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_user_profil_owner_id ON public.user_profil(owner_id);
+
+-- RLS
+ALTER TABLE public.user_profil ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS user_profil_owner_select ON public.user_profil;
+CREATE POLICY user_profil_owner_select ON public.user_profil
+  FOR SELECT USING (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_profil_owner_insert ON public.user_profil;
+CREATE POLICY user_profil_owner_insert ON public.user_profil
+  FOR INSERT WITH CHECK (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_profil_owner_update ON public.user_profil;
+CREATE POLICY user_profil_owner_update ON public.user_profil
+  FOR UPDATE USING (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_profil_owner_delete ON public.user_profil;
+CREATE POLICY user_profil_owner_delete ON public.user_profil
+  FOR DELETE USING (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_profil_superadmin_all ON public.user_profil;
+CREATE POLICY user_profil_superadmin_all ON public.user_profil
+  FOR ALL USING (is_superadmin(auth.uid()));
+
+-- Trigger updated_at
+CREATE OR REPLACE FUNCTION public.set_user_profil_updated_at()
+RETURNS TRIGGER AS $$
+BEGIN
+  NEW.updated_at = now();
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS set_user_profil_updated_at ON public.user_profil;
+CREATE TRIGGER set_user_profil_updated_at
+  BEFORE UPDATE ON public.user_profil
+  FOR EACH ROW
+  EXECUTE FUNCTION public.set_user_profil_updated_at();
+
+-- =====================================================
+-- Table: user_address
+-- =====================================================
+CREATE TABLE IF NOT EXISTS public.user_address (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  owner_id UUID NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  street TEXT NOT NULL,
+  street2 TEXT,
+  city TEXT NOT NULL,
+  state TEXT,
+  postal_code TEXT,
+  country TEXT NOT NULL,
+  is_default BOOLEAN DEFAULT false,
+  address_type TEXT DEFAULT 'billing',
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_user_address_owner_id ON public.user_address(owner_id);
+
+-- RLS
+ALTER TABLE public.user_address ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS user_address_owner_select ON public.user_address;
+CREATE POLICY user_address_owner_select ON public.user_address
+  FOR SELECT USING (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_address_owner_insert ON public.user_address;
+CREATE POLICY user_address_owner_insert ON public.user_address
+  FOR INSERT WITH CHECK (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_address_owner_update ON public.user_address;
+CREATE POLICY user_address_owner_update ON public.user_address
+  FOR UPDATE USING (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_address_owner_delete ON public.user_address;
+CREATE POLICY user_address_owner_delete ON public.user_address
+  FOR DELETE USING (owner_id = auth.uid());
+
+DROP POLICY IF EXISTS user_address_superadmin_all ON public.user_address;
+CREATE POLICY user_address_superadmin_all ON public.user_address
+  FOR ALL USING (is_superadmin(auth.uid()));
+
+-- Trigger updated_at
+CREATE OR REPLACE FUNCTION public.set_user_address_updated_at()
+RETURNS TRIGGER AS $$
+BEGIN
+  NEW.updated_at = now();
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS set_user_address_updated_at ON public.user_address;
+CREATE TRIGGER set_user_address_updated_at
+  BEFORE UPDATE ON public.user_address
+  FOR EACH ROW
+  EXECUTE FUNCTION public.set_user_address_updated_at();
+
+-- =====================================================
+-- Table: user_notifications
+-- =====================================================
+CREATE TABLE IF NOT EXISTS public.user_notifications (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  owner_id UUID NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  title TEXT NOT NULL,
+  body TEXT,
+  type TEXT NOT NULL DEFAULT 'primary',
+  read BOOLEAN NOT NULL DEFAULT false,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_user_notifications_owner_id ON public.user_notifications(owner_id);
+
+-- RLS
+ALTER TABLE public.user_notifications ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_select ON public.user_notifications;
+CREATE POLICY user_notifications_owner_or_superadmin_select ON public.user_notifications
+  FOR SELECT USING (owner_id = auth.uid() OR is_superadmin(auth.uid()));
+
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_insert ON public.user_notifications;
+CREATE POLICY user_notifications_owner_or_superadmin_insert ON public.user_notifications
+  FOR INSERT WITH CHECK (owner_id = auth.uid() OR is_superadmin(auth.uid()));
+
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_update ON public.user_notifications;
+CREATE POLICY user_notifications_owner_or_superadmin_update ON public.user_notifications
+  FOR UPDATE USING (owner_id = auth.uid() OR is_superadmin(auth.uid()));
+
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_delete ON public.user_notifications;
+CREATE POLICY user_notifications_owner_or_superadmin_delete ON public.user_notifications
+  FOR DELETE USING (owner_id = auth.uid() OR is_superadmin(auth.uid()));
+
+DROP POLICY IF EXISTS user_notifications_superadmin_all ON public.user_notifications;
+CREATE POLICY user_notifications_superadmin_all ON public.user_notifications
+  FOR ALL USING (is_superadmin(auth.uid()));
+
+-- Trigger updated_at
+CREATE OR REPLACE FUNCTION public.set_user_notifications_updated_at()
+RETURNS TRIGGER AS $$
+BEGIN
+  NEW.updated_at = now();
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS set_user_notifications_updated_at ON public.user_notifications;
+CREATE TRIGGER set_user_notifications_updated_at
+  BEFORE UPDATE ON public.user_notifications
+  FOR EACH ROW
+  EXECUTE FUNCTION public.set_user_notifications_updated_at();

package/supabase/migrations-down/20251112000000_user_init.down.sql

@@ -0,0 +1,54 @@
+-- Down migration for user_init module
+-- Module: @lastbrain/module-auth
+
+-- =====================================================
+-- user_notifications
+-- =====================================================
+DROP TRIGGER IF EXISTS set_user_notifications_updated_at ON public.user_notifications;
+DROP FUNCTION IF EXISTS public.set_user_notifications_updated_at();
+
+DROP POLICY IF EXISTS user_notifications_superadmin_all ON public.user_notifications;
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_delete ON public.user_notifications;
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_update ON public.user_notifications;
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_insert ON public.user_notifications;
+DROP POLICY IF EXISTS user_notifications_owner_or_superadmin_select ON public.user_notifications;
+ALTER TABLE IF EXISTS public.user_notifications DISABLE ROW LEVEL SECURITY;
+
+DROP INDEX IF EXISTS idx_user_notifications_owner_id;
+
+DROP TABLE IF EXISTS public.user_notifications;
+
+-- =====================================================
+-- user_address
+-- =====================================================
+DROP TRIGGER IF EXISTS set_user_address_updated_at ON public.user_address;
+DROP FUNCTION IF EXISTS public.set_user_address_updated_at();
+
+DROP POLICY IF EXISTS user_address_superadmin_all ON public.user_address;
+DROP POLICY IF EXISTS user_address_owner_delete ON public.user_address;
+DROP POLICY IF EXISTS user_address_owner_update ON public.user_address;
+DROP POLICY IF EXISTS user_address_owner_insert ON public.user_address;
+DROP POLICY IF EXISTS user_address_owner_select ON public.user_address;
+ALTER TABLE IF EXISTS public.user_address DISABLE ROW LEVEL SECURITY;
+
+DROP INDEX IF EXISTS idx_user_address_owner_id;
+
+DROP TABLE IF EXISTS public.user_address;
+
+-- =====================================================
+-- user_profil
+-- =====================================================
+DROP TRIGGER IF EXISTS set_user_profil_updated_at ON public.user_profil;
+DROP FUNCTION IF EXISTS public.set_user_profil_updated_at();
+
+DROP POLICY IF EXISTS user_profil_superadmin_all ON public.user_profil;
+DROP POLICY IF EXISTS user_profil_owner_delete ON public.user_profil;
+DROP POLICY IF EXISTS user_profil_owner_update ON public.user_profil;
+DROP POLICY IF EXISTS user_profil_owner_insert ON public.user_profil;
+DROP POLICY IF EXISTS user_profil_owner_select ON public.user_profil;
+ALTER TABLE IF EXISTS public.user_profil DISABLE ROW LEVEL SECURITY;
+
+DROP INDEX IF EXISTS idx_user_profil_owner_id;
+
+DROP TABLE IF EXISTS public.user_profil;
+