fix

2026-08-13 21:38:42 +02:00
parent db1f341784
commit 260fe28ac0
6 changed files with 134 additions and 11 deletions
@@ -0,0 +1,97 @@
+#!/usr/bin/env node
+/**
+ * Upsert a platform admin (is_platform_admin + staff_role=admin).
+ * Loads monorepo-root `.env` only for DATABASE_URL (same as the API).
+ * Email/password are CLI flags only — never read from .env.
+ *
+ * Usage (from repo root):
+ *   npm run seed:platform-admin -- --email you@example.com --password '…'
+ *   npm run seed:platform-admin -- --email you@example.com --promote-only
+ *
+ * Optional: --name "Display Name"
+ */
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+import { detectHostProfile, withGoLowMem } from "./lowmem-env.mjs";
+import { loadRootEnv, repoRoot } from "./root-env.mjs";
+
+const env = withGoLowMem(loadRootEnv(process.env), detectHostProfile());
+
+function usage(msg) {
+  if (msg) console.error(msg);
+  console.error(`Usage:
+  npm run seed:platform-admin -- --email you@example.com --password 'strong-password'
+  npm run seed:platform-admin -- --email you@example.com --promote-only
+  npm run seed:platform-admin -- --email you@example.com --password '…' --name 'Ops'
+
+Email/password must be passed on the CLI (not stored in .env).
+DATABASE_URL comes from the shell or monorepo-root .env.`);
+  process.exit(1);
+}
+
+/** Parse `--key value` / `--flag` from argv after npm's `--`. */
+function parseArgs(argv) {
+  const out = { email: "", password: "", name: "", promoteOnly: false };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--promote-only") {
+      out.promoteOnly = true;
+      continue;
+    }
+    if (a === "--email" || a === "-email") {
+      out.email = String(argv[++i] || "").trim();
+      continue;
+    }
+    if (a === "--password" || a === "-password") {
+      out.password = String(argv[++i] || "");
+      continue;
+    }
+    if (a === "--name" || a === "-name") {
+      out.name = String(argv[++i] || "").trim();
+      continue;
+    }
+    if (a === "--help" || a === "-h") usage();
+    usage(`Unknown argument: ${a}`);
+  }
+  return out;
+}
+
+const opts = parseArgs(process.argv.slice(2));
+
+if (!env.DATABASE_URL) {
+  usage("DATABASE_URL is required (shell or monorepo-root .env)");
+}
+if (!opts.email || !opts.email.includes("@")) {
+  usage("--email is required");
+}
+if (!opts.promoteOnly && opts.password.length < 8) {
+  usage("--password is required (min 8 characters), or pass --promote-only");
+}
+
+const apiDir = path.join(repoRoot, "apps", "api");
+const args = [
+  "run",
+  "./cmd/seed-platform-admin",
+  "-postgres",
+  env.DATABASE_URL,
+  "-email",
+  opts.email,
+  "-confirm",
+];
+if (opts.name) {
+  args.push("-name", opts.name);
+}
+if (opts.promoteOnly) {
+  args.push("-promote-only");
+} else {
+  args.push("-password", opts.password);
+}
+
+console.log(`==> seed-platform-admin ${opts.email}`);
+const r = spawnSync("go", args, {
+  cwd: apiDir,
+  env,
+  stdio: "inherit",
+  shell: false,
+});
+process.exit(r.status ?? 1);