Implémente le site Plein R (Accueil + Backend) sur Next.js + Postgres + Docker

Application unique Next.js (App Router, TypeScript) servant :
- Accueil public : héro, recherche, métiers, promotions, mises à l'honneur
  (données issues de Postgres)
- Backend authentifié avec RBAC : tableau de bord, adhérents (CRUD), modération
  des promotions, administrateurs, espace adhérent (publication avec aperçu)

Technique :
- Drizzle ORM + drizzle-kit (migrations versionnées) sur driver pg
- Auth.js v5 (credentials, sessions JWT), rôles admin/moderator/editor/member
- Middleware de protection de /backend + gardes par rôle dans chaque vue
- Server actions pour toutes les mutations (vérif auth + capacité + revalidate)
- Design fidèle aux maquettes (design-system CSS, animations, responsive)

Conteneurisation :
- 1 conteneur applicatif (sortie standalone) + 1 conteneur Postgres externe
- docker-compose avec healthcheck ; migrations + seed au démarrage
- scripts migrate/seed bundlés (esbuild) pour un runtime sans devDeps

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XwfhYHzC9hQWPDnQ2p53GL

src/lib/queries.ts

@@ -0,0 +1,63 @@
+import { and, count, desc, eq } from "drizzle-orm";
+import { db } from "@/db";
+import { categories, members, promotions } from "@/db/schema";
+
+export async function getCategoriesWithCounts(limit = 6) {
+  const rows = await db
+    .select({
+      id: categories.id,
+      slug: categories.slug,
+      label: categories.label,
+      accent: categories.accent,
+      tint: categories.tint,
+      sort: categories.sort,
+      memberCount: count(members.id),
+    })
+    .from(categories)
+    .leftJoin(
+      members,
+      and(eq(members.categoryId, categories.id), eq(members.status, "active"))
+    )
+    .groupBy(categories.id)
+    .orderBy(categories.sort)
+    .limit(limit);
+  return rows;
+}
+
+export async function getLivePromotions(limit = 6) {
+  const rows = await db
+    .select({
+      id: promotions.id,
+      title: promotions.title,
+      text: promotions.text,
+      category: promotions.category,
+      badge: promotions.badge,
+      imageUrl: promotions.imageUrl,
+      validUntil: promotions.validUntil,
+      memberName: members.name,
+    })
+    .from(promotions)
+    .leftJoin(members, eq(promotions.memberId, members.id))
+    .where(eq(promotions.status, "live"))
+    .orderBy(desc(promotions.createdAt))
+    .limit(limit);
+  return rows;
+}
+
+export async function getHighlightedMembers(limit = 3) {
+  const rows = await db
+    .select({
+      id: members.id,
+      name: members.name,
+      description: members.description,
+      city: members.city,
+      address: members.address,
+      categoryLabel: categories.label,
+      accent: categories.accent,
+    })
+    .from(members)
+    .leftJoin(categories, eq(members.categoryId, categories.id))
+    .where(and(eq(members.highlighted, true), eq(members.status, "active")))
+    .limit(limit);
+  return rows;
+}

src/lib/rbac.ts

@@ -0,0 +1,40 @@
+import type { AppRole } from "@/types/next-auth";
+
+export const ROLE_LABELS: Record<AppRole, string> = {
+  admin: "Administrateur",
+  moderator: "Modérateur",
+  editor: "Éditeur",
+  member: "Adhérent",
+};
+
+export const LABEL_TO_ROLE: Record<string, AppRole> = {
+  Administrateur: "admin",
+  Modérateur: "moderator",
+  Éditeur: "editor",
+  Adhérent: "member",
+};
+
+type Capability =
+  | "viewDashboard"
+  | "manageMembers"
+  | "moderatePromos"
+  | "manageAdmins"
+  | "memberSpace";
+
+const CAPABILITIES: Record<AppRole, Capability[]> = {
+  admin: ["viewDashboard", "manageMembers", "moderatePromos", "manageAdmins", "memberSpace"],
+  moderator: ["viewDashboard", "manageMembers", "moderatePromos"],
+  editor: ["viewDashboard", "manageMembers"],
+  member: ["memberSpace"],
+};
+
+export function can(role: AppRole | undefined, capability: Capability): boolean {
+  if (!role) return false;
+  return CAPABILITIES[role]?.includes(capability) ?? false;
+}
+
+export const STAFF_ROLES: AppRole[] = ["admin", "moderator", "editor"];
+
+export function isStaff(role: AppRole | undefined): boolean {
+  return !!role && STAFF_ROLES.includes(role);
+}