feat: dashboard Second Brain, essai 7 jours et vérification e-mail

Rendre le dashboard actionnable (inbox, peek, carte mentale), aligner la facturation sur l’essai 7 jours, et bloquer le login e-mail tant que l’adresse n’est pas confirmée.

Co-authored-by: Cursor <cursoragent@cursor.com>

memento-note/app/actions/register.ts

@@ -5,6 +5,7 @@ import prisma from '@/lib/prisma';
 import { z } from 'zod';
 import { redirect } from 'next/navigation';
 import { getSystemConfig } from '@/lib/config';
+import { sendVerificationEmail } from '@/lib/auth/email-verification';
 
 const RegisterSchema = z.object({
   email: z.string().email(),
@@ -17,9 +18,8 @@ const RegisterSchema = z.object({
 });
 
 export async function register(prevState: string | undefined, formData: FormData) {
-  // Check if registration is allowed
   const config = await getSystemConfig();
-  const allowRegister = config.ALLOW_REGISTRATION !== 'false' || process.env.ALLOW_REGISTRATION !== 'false';
+  const allowRegister = config.ALLOW_REGISTRATION !== 'false' && process.env.ALLOW_REGISTRATION !== 'false';
 
   if (!allowRegister) {
     return 'Registration is currently disabled by the administrator.';
@@ -37,36 +37,48 @@ export async function register(prevState: string | undefined, formData: FormData
   }
 
   const { email, password, name } = validatedFields.data;
+  const normalizedEmail = email.toLowerCase();
+  const adminEmail = process.env.ADMIN_EMAIL?.toLowerCase();
+  const isAdmin = Boolean(adminEmail && normalizedEmail === adminEmail);
 
   try {
-    const existingUser = await prisma.user.findUnique({ where: { email: email.toLowerCase() } });
+    const existingUser = await prisma.user.findUnique({ where: { email: normalizedEmail } });
     if (existingUser) {
       return 'User already exists.';
     }
 
     const hashedPassword = await bcrypt.hash(password, 10);
-
-    const adminEmail = process.env.ADMIN_EMAIL?.toLowerCase();
-    const role = adminEmail && email.toLowerCase() === adminEmail ? 'ADMIN' : 'USER';
+    const role = isAdmin ? 'ADMIN' : 'USER';
 
     await prisma.user.create({
       data: {
-        email: email.toLowerCase(),
+        email: normalizedEmail,
         password: hashedPassword,
         name,
         role,
+        // Admin bootstrap + Google OAuth are trusted; everyone else must verify.
+        emailVerified: isAdmin ? new Date() : null,
       },
     });
-    
-    // Attempt to sign in immediately after registration
-    // We cannot import signIn here directly if it causes circular deps or issues, 
-    // but usually it works. If not, redirecting to login is fine.
-    // Let's stick to redirecting to login but with a clear success message?
-    // Or better: lowercase the email to fix the potential bug.
+
+    if (!isAdmin) {
+      const mailResult = await sendVerificationEmail({
+        email: normalizedEmail,
+        name,
+      });
+
+      if (!mailResult.success) {
+        console.error('[register] verification email failed:', mailResult.error);
+      }
+    }
   } catch (error) {
     console.error('Registration Error:', error);
     return 'Database Error: Failed to create user.';
   }
 
-  redirect('/login');
+  if (isAdmin) {
+    redirect('/login?verified=1');
+  }
+
+  redirect(`/check-email?email=${encodeURIComponent(normalizedEmail)}`);
 }