Sharang Parnerkar
c7ab569b2b
All checks were successful
CI / test-go-consent (push) Successful in 42s
CI / test-python-voice (push) Successful in 30s
CI / test-bqas (push) Successful in 30s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / Deploy (push) Successful in 2s
Adds /pitch-admin dashboard with real bcrypt admin accounts and full audit attribution for every state-changing action. - pitch_admins + pitch_admin_sessions tables (migration 002) - pitch_audit_logs.admin_id + target_investor_id columns - lib/admin-auth.ts: bcryptjs, single-session, jose JWT with audience claim - middleware.ts: two-cookie gating with bearer-secret CLI fallback - 14 new API routes (admin-auth, dashboard, investor detail/edit/resend, admins CRUD, fm scenarios + assumptions PATCH) - 9 admin pages: login, dashboard, investors list/new/[id], audit, financial-model list/[id], admins - Bootstrap CLI: npm run admin:create - 36 vitest tests covering auth, admin-auth, rate-limit primitives Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
69 lines
2.2 KiB
TypeScript
69 lines
2.2 KiB
TypeScript
#!/usr/bin/env tsx
|
|
/**
|
|
* Bootstrap a new pitch admin user.
|
|
*
|
|
* Usage:
|
|
* tsx scripts/create-admin.ts --email=ben@breakpilot.ai --name="Benjamin" --password='...'
|
|
*
|
|
* Or via env vars (useful in CI):
|
|
* PITCH_ADMIN_BOOTSTRAP_EMAIL=... PITCH_ADMIN_BOOTSTRAP_NAME=... PITCH_ADMIN_BOOTSTRAP_PASSWORD=... \
|
|
* tsx scripts/create-admin.ts
|
|
*
|
|
* Idempotent: if an admin with the email already exists, the password is updated
|
|
* (so you can use it to reset). The script always re-activates the account.
|
|
*/
|
|
|
|
import { Pool } from 'pg'
|
|
import bcrypt from 'bcryptjs'
|
|
|
|
function arg(name: string): string | undefined {
|
|
const prefix = `--${name}=`
|
|
const m = process.argv.find(a => a.startsWith(prefix))
|
|
return m ? m.slice(prefix.length) : undefined
|
|
}
|
|
|
|
const email = (arg('email') || process.env.PITCH_ADMIN_BOOTSTRAP_EMAIL || '').trim().toLowerCase()
|
|
const name = arg('name') || process.env.PITCH_ADMIN_BOOTSTRAP_NAME || 'Admin'
|
|
const password = arg('password') || process.env.PITCH_ADMIN_BOOTSTRAP_PASSWORD || ''
|
|
|
|
if (!email || !password) {
|
|
console.error('ERROR: --email and --password are required (or set env vars).')
|
|
console.error(' tsx scripts/create-admin.ts --email=user@example.com --name="Name" --password=secret')
|
|
process.exit(1)
|
|
}
|
|
|
|
if (password.length < 12) {
|
|
console.error('ERROR: password must be at least 12 characters.')
|
|
process.exit(1)
|
|
}
|
|
|
|
const pool = new Pool({
|
|
connectionString: process.env.DATABASE_URL || 'postgres://breakpilot:breakpilot123@localhost:5432/breakpilot_db',
|
|
})
|
|
|
|
async function main() {
|
|
const hash = await bcrypt.hash(password, 12)
|
|
const { rows } = await pool.query(
|
|
`INSERT INTO pitch_admins (email, name, password_hash, is_active)
|
|
VALUES ($1, $2, $3, true)
|
|
ON CONFLICT (email) DO UPDATE SET
|
|
name = EXCLUDED.name,
|
|
password_hash = EXCLUDED.password_hash,
|
|
is_active = true,
|
|
updated_at = NOW()
|
|
RETURNING id, email, name, created_at`,
|
|
[email, name, hash],
|
|
)
|
|
const row = rows[0]
|
|
console.log(`✓ Admin ready: ${row.email} (${row.name})`)
|
|
console.log(` id: ${row.id}`)
|
|
console.log(` created_at: ${row.created_at.toISOString()}`)
|
|
await pool.end()
|
|
}
|
|
|
|
main().catch(err => {
|
|
console.error('ERROR:', err.message)
|
|
pool.end().catch(() => {})
|
|
process.exit(1)
|
|
})
|