init

scripts/seed-super-admin.js

@@ -0,0 +1,142 @@
+const fs = require('node:fs');
+const path = require('node:path');
+const bcrypt = require('bcryptjs');
+const postgres = require('postgres');
+
+function loadEnvFile(filePath) {
+  if (!fs.existsSync(filePath)) {
+    return;
+  }
+
+  const content = fs.readFileSync(filePath, 'utf8');
+
+  for (const rawLine of content.split(/\r?\n/)) {
+    const line = rawLine.trim();
+
+    if (!line || line.startsWith('#')) {
+      continue;
+    }
+
+    const separatorIndex = line.indexOf('=');
+
+    if (separatorIndex === -1) {
+      continue;
+    }
+
+    const key = line.slice(0, separatorIndex).trim();
+    let value = line.slice(separatorIndex + 1).trim();
+
+    if (
+      (value.startsWith('"') && value.endsWith('"')) ||
+      (value.startsWith("'") && value.endsWith("'"))
+    ) {
+      value = value.slice(1, -1);
+    }
+
+    if (!(key in process.env)) {
+      process.env[key] = value;
+    }
+  }
+}
+
+function loadLocalEnv() {
+  loadEnvFile(path.resolve(process.cwd(), '.env.local'));
+  loadEnvFile(path.resolve(process.cwd(), '.env'));
+}
+
+function requireEnv(name) {
+  const value = process.env[name]?.trim();
+
+  if (!value) {
+    throw new Error(`Missing required environment variable: ${name}`);
+  }
+
+  return value;
+}
+
+async function main() {
+  loadLocalEnv();
+
+  const databaseUrl = requireEnv('DATABASE_URL');
+  const email = requireEnv('SUPER_ADMIN_EMAIL').toLowerCase();
+  const password = requireEnv('SUPER_ADMIN_PASSWORD');
+  const name = process.env.SUPER_ADMIN_NAME?.trim() || 'Super Admin';
+  const resetPassword = process.env.SUPER_ADMIN_RESET_PASSWORD === 'true';
+
+  if (password.length < 8) {
+    throw new Error('SUPER_ADMIN_PASSWORD must be at least 8 characters long');
+  }
+
+  const sql = postgres(databaseUrl, { prepare: false });
+
+  try {
+    const existingUsers = await sql`
+      select id, system_role
+      from users
+      where email = ${email}
+      limit 1
+    `;
+
+    const passwordHash = await bcrypt.hash(password, 10);
+
+    if (existingUsers.length === 0) {
+      const id = crypto.randomUUID();
+
+      await sql`
+        insert into users (
+          id,
+          name,
+          email,
+          password_hash,
+          system_role,
+          active_organization_id
+        ) values (
+          ${id},
+          ${name},
+          ${email},
+          ${passwordHash},
+          ${'super_admin'},
+          ${null}
+        )
+      `;
+
+      console.log(`Created super admin user: ${email}`);
+      return;
+    }
+
+    const user = existingUsers[0];
+
+    if (resetPassword) {
+      await sql`
+        update users
+        set
+          name = ${name},
+          system_role = ${'super_admin'},
+          password_hash = ${passwordHash},
+          updated_at = now()
+        where id = ${user.id}
+      `;
+
+      console.log(`Promoted and reset password for super admin user: ${email}`);
+      return;
+    }
+
+    await sql`
+      update users
+      set
+        name = ${name},
+        system_role = ${'super_admin'},
+        updated_at = now()
+      where id = ${user.id}
+    `;
+
+    console.log(`Ensured super admin role for user: ${email}`);
+  } finally {
+    await sql.end();
+  }
+}
+
+main().catch((error) => {
+  console.error('[seed-super-admin] Failed:', error.message);
+  process.exitCode = 1;
+});