Implementa o MVP do Adaptador de Planilhas no Elo Pro.

O módulo usa a identidade Supabase, isola cada workspace e registra storage, TTL, runner e biblioteca XLSX como decisões ainda abertas.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/server/auth/context.ts

@@ -0,0 +1,79 @@
+import "server-only";
+import { cookies } from "next/headers";
+import { createServerClient } from "@supabase/ssr";
+import type { RequestContext, Role } from "@/domain/spreadsheet-adapter/types";
+import { getDb } from "@/infra/db/client";
+import { devAuthEnabled, verifyDevSession } from "./dev-session";
+
+export type AuthState =
+  | { kind: "anonymous" }
+  | { kind: "no_workspace" }
+  | { kind: "not_member" }
+  | { kind: "ok"; ctx: RequestContext };
+
+export async function resolveAuth(): Promise<AuthState> {
+  const jar = await cookies();
+  let userId: string | null = null;
+  let workspaceId = jar.get("elo_pro_workspace_id")?.value ?? null;
+  const devToken = jar.get("adapter_dev_session")?.value;
+  if (devToken && devAuthEnabled()) {
+    const dev = verifyDevSession(devToken);
+    if (dev) {
+      userId = dev.userId;
+      workspaceId = dev.workspaceId;
+    }
+  }
+  const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+  const supabaseKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+  if (!userId && supabaseUrl && supabaseKey) {
+    const supabase = createServerClient(supabaseUrl, supabaseKey, {
+      cookies: {
+        getAll: () => jar.getAll(),
+        setAll: (items) => {
+          for (const item of items) jar.set(item.name, item.value, item.options);
+        },
+      },
+    });
+    const { data } = await supabase.auth.getUser();
+    userId = data.user?.id ?? null;
+  }
+  if (!userId) return { kind: "anonymous" };
+  if (!workspaceId) return { kind: "no_workspace" };
+  const db = await getDb();
+  const rows = await db.withUser(userId, (query) =>
+    query.query<{
+      display_name: string;
+      is_superadmin: boolean;
+      workspace_name: string;
+      role: Role;
+      module_enabled: boolean;
+      allow_upload: boolean;
+    }>(
+      `select p.display_name, p.is_superadmin, w.name as workspace_name, m.role,
+              coalesce(f.enabled, false) as module_enabled,
+              coalesce(s.allow_non_admin_model_upload, false) as allow_upload
+       from public.profiles p
+       join public.workspace_members m on m.user_id = p.id and m.workspace_id = $2
+       join public.workspaces w on w.id = m.workspace_id
+       left join public.workspace_module_flags f on f.workspace_id = w.id and f.module_key = 'spreadsheet_adapter'
+       left join public.spreadsheet_adapter_settings s on s.workspace_id = w.id
+       where p.id = $1`,
+      [userId, workspaceId],
+    ),
+  );
+  const row = rows[0];
+  if (!row) return { kind: "not_member" };
+  return {
+    kind: "ok",
+    ctx: {
+      userId,
+      displayName: row.display_name,
+      isSuperadmin: row.is_superadmin,
+      workspaceId,
+      workspaceName: row.workspace_name,
+      role: row.role,
+      moduleEnabled: row.module_enabled,
+      allowNonAdminModelUpload: row.allow_upload,
+    },
+  };
+}