@lastbrain/module-auth 2.0.27 → 2.0.31

package/src/api/public/webhook/storage-addon.ts

@@ -0,0 +1,267 @@
+/**
+ * POST /api/auth/webhook/storage-addon
+ * Webhook handler for storage addon subscription events
+ * Called by module-billing-pro when a storage addon subscription item is updated
+ */
+
+import { getSupabaseServiceClient } from "@lastbrain/core/server";
+import { logger } from "@lastbrain/core";
+
+// Runtime config
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+interface StorageAddonWebhookPayload {
+  eventType: string;
+  owner_id: string;
+  addon_key: string; // e.g., "storage_8gb"
+  stripe_subscription_id: string;
+  stripe_subscription_item_id: string;
+  stripe_customer_id?: string;
+  quantity?: number;
+  status: string; // active, trialing, canceled, past_due, etc.
+  current_period_start?: string;
+  current_period_end?: string;
+}
+
+export async function POST(request: Request) {
+  try {
+    const body: StorageAddonWebhookPayload = await request.json();
+
+    const {
+      eventType,
+      owner_id,
+      addon_key,
+      stripe_subscription_id,
+      stripe_subscription_item_id,
+      stripe_customer_id,
+      quantity = 1,
+      status,
+      current_period_start,
+      current_period_end,
+    } = body;
+
+    logger.debug(
+      `[Storage Addon Webhook] Processing ${eventType} for user ${owner_id}, addon ${addon_key}`
+    );
+
+    if (
+      !owner_id ||
+      !addon_key ||
+      !stripe_subscription_id ||
+      !stripe_subscription_item_id
+    ) {
+      logger.warn("[Storage Addon Webhook] Missing required fields in payload");
+      return Response.json({ received: true }, { status: 200 });
+    }
+
+    const supabase = await getSupabaseServiceClient();
+
+    // Find the addon by key
+    const { data: addon, error: addonError } = await supabase
+      .from("global_addons")
+      .select("id")
+      .eq("addon_key", addon_key)
+      .eq("addon_type", "storage")
+      .eq("is_active", true)
+      .single();
+
+    if (addonError || !addon) {
+      logger.warn(
+        `[Storage Addon Webhook] Addon not found for key: ${addon_key}`
+      );
+      return Response.json({ received: true }, { status: 200 });
+    }
+
+    // Handle different event types
+    switch (eventType) {
+      case "addon.created":
+      case "addon.updated": {
+        // Upsert user addon activation
+        // Use owner_id + addon_id as the unique key (one addon type per user)
+        // When a subscription is canceled and recreated, we update the same record with new stripe IDs
+        const { error: upsertError } = await supabase
+          .from("user_global_addons")
+          .upsert(
+            {
+              owner_id,
+              addon_id: addon.id,
+              quantity,
+              status,
+              current_period_start,
+              current_period_end,
+              stripe_customer_id,
+              stripe_subscription_id,
+              stripe_subscription_item_id,
+              updated_at: new Date().toISOString(),
+            },
+            {
+              // Use owner_id + addon_id as the unique key for idempotency
+              // This ensures one addon per user, even if subscription is recreated
+              onConflict: "owner_id,addon_id",
+            }
+          );
+
+        if (upsertError) {
+          logger.error(
+            "[Storage Addon Webhook] Error upserting addon:",
+            upsertError
+          );
+          return Response.json(
+            { error: "Failed to update storage addon" },
+            { status: 500 }
+          );
+        }
+
+        logger.debug(
+          `[Storage Addon Webhook] Storage addon ${addon_key} ${eventType} for user ${owner_id}: status=${status}, quantity=${quantity}`
+        );
+
+        // Update user_profil.stockage to reflect total (optional, since get_user_limits calculates dynamically)
+        // We'll keep this for backward compatibility with existing code
+        try {
+          const limitsResult = await supabase.rpc("get_user_limits", {
+            owner_id_param: owner_id,
+          });
+
+          logger.debug(
+            `[Storage Addon Webhook] get_user_limits raw result:`,
+            JSON.stringify(limitsResult, null, 2)
+          );
+
+          if (limitsResult.error) {
+            logger.error(
+              `[Storage Addon Webhook] get_user_limits error:`,
+              limitsResult.error
+            );
+          }
+
+          if (limitsResult.data) {
+            // Supabase RPC returns JSON as string, need to parse if string
+            const limitsData =
+              typeof limitsResult.data === "string"
+                ? JSON.parse(limitsResult.data)
+                : limitsResult.data;
+
+            logger.debug(
+              `[Storage Addon Webhook] Parsed limits data:`,
+              limitsData
+            );
+
+            const totalStorageGb = limitsData.storage_quota_gb;
+
+            logger.debug(
+              `[Storage Addon Webhook] Extracted storage_quota_gb: ${totalStorageGb}`
+            );
+
+            // Update user_profil with new total
+            await supabase.from("user_profil").upsert(
+              {
+                owner_id,
+                stockage: totalStorageGb,
+                updated_at: new Date().toISOString(),
+              },
+              {
+                onConflict: "owner_id",
+              }
+            );
+
+            logger.debug(
+              `[Storage Addon Webhook] Updated user_profil.stockage to ${totalStorageGb} GB for user ${owner_id}`
+            );
+          } else {
+            logger.warn(
+              `[Storage Addon Webhook] get_user_limits returned no data for user ${owner_id}`
+            );
+          }
+        } catch (error) {
+          logger.error(
+            "[Storage Addon Webhook] Error updating user_profil.stockage:",
+            error
+          );
+          // Don't fail - the addon is still recorded
+        }
+
+        break;
+      }
+
+      case "addon.deleted":
+      case "addon.canceled": {
+        // Mark addon as canceled but keep for period_end grace
+        const { error: cancelError } = await supabase
+          .from("user_global_addons")
+          .update({
+            status: "canceled",
+            updated_at: new Date().toISOString(),
+          })
+          .eq("stripe_subscription_item_id", stripe_subscription_item_id);
+
+        if (cancelError) {
+          logger.error(
+            "[Storage Addon Webhook] Error canceling addon:",
+            cancelError
+          );
+          return Response.json(
+            { error: "Failed to cancel storage addon" },
+            { status: 500 }
+          );
+        }
+
+        logger.debug(
+          `[Storage Addon Webhook] Storage addon ${addon_key} canceled for user ${owner_id}`
+        );
+
+        // Recalculate total storage
+        try {
+          const limitsResult = await supabase.rpc("get_user_limits", {
+            owner_id_param: owner_id,
+          });
+
+          if (limitsResult.data) {
+            const limitsData =
+              typeof limitsResult.data === "string"
+                ? JSON.parse(limitsResult.data)
+                : limitsResult.data;
+
+            const totalStorageGb = limitsData.storage_quota_gb;
+
+            await supabase.from("user_profil").upsert(
+              {
+                owner_id,
+                stockage: totalStorageGb,
+                updated_at: new Date().toISOString(),
+              },
+              {
+                onConflict: "owner_id",
+              }
+            );
+
+            logger.debug(
+              `[Storage Addon Webhook] Recalculated user_profil.stockage to ${totalStorageGb} GB after addon cancellation`
+            );
+          }
+        } catch (error) {
+          logger.warn(
+            "[Storage Addon Webhook] Could not recalculate storage:",
+            error
+          );
+        }
+
+        break;
+      }
+
+      default:
+        logger.warn(`[Storage Addon Webhook] Unknown event type: ${eventType}`);
+    }
+
+    return Response.json({ received: true }, { status: 200 });
+  } catch (error) {
+    logger.error("[Storage Addon Webhook] Error:", error);
+    return Response.json(
+      {
+        error: error instanceof Error ? error.message : "Webhook error",
+      },
+      { status: 400 }
+    );
+  }
+}

package/src/api/storage.ts

@@ -1,4 +1,4 @@
-import { supabaseBrowserClient } from "@lastbrain/core";
+import { logger, supabaseBrowserClient } from "@lastbrain/core";
 
 /**
  * Upload a file to Supabase Storage and return proxy URL
@@ -55,7 +55,7 @@ export async function deleteFilesWithPrefix(
     });
 
   if (listError) {
-    console.warn("Failed to list files for deletion:", listError);
+    logger.warn("Failed to list files for deletion:", listError);
     return;
   }
 

package/src/auth.build.config.ts

@@ -18,6 +18,16 @@ const authBuildConfig: ModuleBuildConfig = {
       path: "/reset-password",
       componentExport: "ResetPassword",
     },
+    {
+      section: "public",
+      path: "/confirm",
+      componentExport: "ConfirmPage",
+    },
+    {
+      section: "public",
+      path: "/auth-code-error",
+      componentExport: "AuthCodeErrorPage",
+    },
     {
       section: "auth",
       path: "/folder",
@@ -64,6 +74,34 @@ const authBuildConfig: ModuleBuildConfig = {
       entryPoint: "api/public/signup",
       authRequired: false,
     },
+    {
+      method: "POST",
+      path: "/api/public/set-session",
+      handlerExport: "POST",
+      entryPoint: "api/public/set-session",
+      authRequired: false,
+    },
+    {
+      method: "POST",
+      path: "/api/public/add-welcome-bonus",
+      handlerExport: "POST",
+      entryPoint: "api/public/add-welcome-bonus",
+      authRequired: true,
+    },
+    {
+      method: "POST",
+      path: "/api/public/reset-password",
+      handlerExport: "POST",
+      entryPoint: "api/public/reset-password",
+      authRequired: false,
+    },
+    {
+      method: "GET",
+      path: "/api/public/callback",
+      handlerExport: "GET",
+      entryPoint: "api/public/callback",
+      authRequired: false,
+    },
     {
       method: "GET",
       path: "/api/auth/profile",
@@ -85,6 +123,13 @@ const authBuildConfig: ModuleBuildConfig = {
       entryPoint: "api/auth/profile",
       authRequired: true,
     },
+    {
+      method: "GET",
+      path: "/api/auth/check-username",
+      handlerExport: "GET",
+      entryPoint: "api/auth/check-username",
+      authRequired: false,
+    },
     {
       method: "GET",
       path: "/api/auth/me",
@@ -92,6 +137,20 @@ const authBuildConfig: ModuleBuildConfig = {
       entryPoint: "api/auth/me",
       authRequired: true,
     },
+    {
+      method: "POST",
+      path: "/api/auth/account/email-change",
+      handlerExport: "POST",
+      entryPoint: "api/auth/account/email-change",
+      authRequired: true,
+    },
+    {
+      method: "POST",
+      path: "/api/auth/account/reset-password",
+      handlerExport: "POST",
+      entryPoint: "api/auth/account/reset-password",
+      authRequired: true,
+    },
     {
       method: "GET",
       path: "/api/admin/users",
@@ -113,6 +172,20 @@ const authBuildConfig: ModuleBuildConfig = {
       entryPoint: "api/admin/users/[id]/notifications",
       authRequired: true,
     },
+    {
+      method: "POST",
+      path: "/api/admin/users/suspend/[id]",
+      handlerExport: "POST",
+      entryPoint: "api/admin/users/suspend/[id]",
+      authRequired: true,
+    },
+    {
+      method: "POST",
+      path: "/api/admin/users/reactivate/[id]",
+      handlerExport: "POST",
+      entryPoint: "api/admin/users/reactivate/[id]",
+      authRequired: true,
+    },
     {
       method: "GET",
       path: "/api/admin/signup-stats",
@@ -120,6 +193,34 @@ const authBuildConfig: ModuleBuildConfig = {
       entryPoint: "api/admin/signup-stats",
       authRequired: true,
     },
+    {
+      method: "GET",
+      path: "/api/admin/storage/usage",
+      handlerExport: "GET",
+      entryPoint: "api/admin/storage/usage",
+      authRequired: true,
+    },
+    {
+      method: "GET",
+      path: "/api/auth/storage/usage",
+      handlerExport: "GET",
+      entryPoint: "api/auth/storage/usage",
+      authRequired: true,
+    },
+    {
+      method: "POST",
+      path: "/api/auth/storage/recalculate",
+      handlerExport: "POST",
+      entryPoint: "api/auth/storage/recalculate",
+      authRequired: true,
+    },
+    {
+      method: "POST",
+      path: "/api/auth/webhook/storage-addon",
+      handlerExport: "POST",
+      entryPoint: "api/public/webhook/storage-addon",
+      authRequired: false,
+    },
   ],
   migrations: {
     enabled: true,
@@ -130,6 +231,13 @@ const authBuildConfig: ModuleBuildConfig = {
       "20251112000001_auto_profile_and_admin_view.sql",
       "20251112000002_sync_avatars.sql",
       "20251124000001_add_get_admin_user_details.sql",
+      "20251127100000_rename_body_to_message.sql",
+      "20260120150001_add_user_storage.sql",
+      "20260122131200_add_global_addons_system.sql",
+      "20260123100000_enable_vector_extension.sql",
+      "20260123140000_module_auth_fix_get_user_limits_null.sql",
+      "20260123145000_module_auth_fix_circular_storage_base.sql",
+      "20260129400000_add_username_to_user_profil.sql"
     ],
     migrationsDownPath: "supabase/migrations-down",
   },
@@ -155,16 +263,16 @@ const authBuildConfig: ModuleBuildConfig = {
         position: "end",
         componentExport: "AccountButton",
       },
-      {
-        title: "module-auth.menu.theme",
-        description: "module-auth.menu.theme_desc",
-        icon: "Palette",
-        path: "#",
-        order: 9999,
-        type: "icon",
-        position: "end",
-        componentExport: "ThemeSwitcherButton",
-      },
+      // {
+      //   title: "module-auth.menu.theme",
+      //   description: "module-auth.menu.theme_desc",
+      //   icon: "Palette",
+      //   path: "#",
+      //   order: 9999,
+      //   type: "icon",
+      //   position: "end",
+      //   componentExport: "ThemeSwitcherButton",
+      // },
     ],
     admin: [
       {
@@ -280,7 +388,7 @@ const authBuildConfig: ModuleBuildConfig = {
         description: "module-auth.menu.settings_desc",
         icon: "Settings",
         path: "/auth/reglage",
-        order: 2,
+        order: 70,
         shortcut: "cmd+shift+s",
         shortcutDisplay: "⌘⇧S",
       },
@@ -303,6 +411,13 @@ const authBuildConfig: ModuleBuildConfig = {
         filter: "owner_id=eq.${USER_ID}",
         broadcast: "user_notifications_updated",
       },
+      {
+        schema: "public",
+        table: "user_profil",
+        event: "*",
+        filter: "owner_id=eq.${USER_ID}",
+        broadcast: "user_profile_updated",
+      },
     ],
   }, 
   authDashboard: [