Keysat
d9c4e6c4a0
Schema - User.isAdmin: Boolean default false (Prisma) - New InstanceSettings singleton (id=1) holding signupsOpen flag Boot-time compat ALTERs (docker_entrypoint.sh) - Adds User.isAdmin column to legacy snapshots; auto-promotes the oldest user to admin if no admin exists yet, so workout-log -> proof-of-work cutover preserves admin functionality with no manual SQL. - Creates InstanceSettings table + singleton row (signupsOpen=0) for any snapshot that doesn't have it. App: sign-up flow - /auth/signup page: server component that reads InstanceSettings upfront. If sign-ups are closed it shows a closed-instance message and a back-to-sign-in link rather than a dead form. If open it renders SignupForm (client) which calls signupAction (server). - signupAction: re-checks the flag (defense in depth), validates email format / 8-char password / matching confirm, blocks duplicate-email enumeration with a generic error, creates the user with isAdmin=false, seeds default UserPreferences, ensures the curated exercise library for the new user (lib/library.ts upserts every entry), then issues a session cookie. - Login page now links to /auth/signup; old "Demo: admin@example.com / password" footer (which was wrong anyway) removed. App: admin in-app toggle - Settings page renders new AdminInstanceSettings component for admins only. Optimistic toggle posts to /api/admin/signups; error rollback on failure. - /api/admin/signups: GET returns current flag (any authed user, so the UI knows whether to show the sign-up CTA later); POST flips it (admin only). StartOS package action - toggle-signups: same setter as the in-app toggle, accessible from the StartOS UI without an admin login. Single boolean input. Asserts the read-back value matches what was written before reporting success. - changeAdminCredentials now keys the UPDATE on `WHERE isAdmin = 1 ORDER BY createdAt ASC LIMIT 1` (was: just ORDER BY createdAt) — correct under multi-user. Release notes / docs - v1.0.0:1 release notes expanded to call out multi-user as part of the cutover release (no separate version needed since this is the first proof-of-work release shipping to anyone). - Root README: short Multi-user section explaining both toggle paths and that new users get the curated library automatically. - README dev setup adds `npx prisma generate` step (required after schema changes for local dev).
24 lines
710 B
TypeScript
24 lines
710 B
TypeScript
import { prisma } from "./prisma";
|
|
|
|
/**
|
|
* Read the singleton InstanceSettings row, defensively creating it if
|
|
* missing. The compat ALTERs in docker_entrypoint.sh insert this row at
|
|
* boot time, but we still upsert here so that fresh dev installs (or
|
|
* any boot path that didn't run the entrypoint) see something usable.
|
|
*/
|
|
export async function getInstanceSettings() {
|
|
return prisma.instanceSettings.upsert({
|
|
where: { id: 1 },
|
|
update: {},
|
|
create: { id: 1, signupsOpen: false },
|
|
});
|
|
}
|
|
|
|
export async function setSignupsOpen(open: boolean) {
|
|
return prisma.instanceSettings.upsert({
|
|
where: { id: 1 },
|
|
update: { signupsOpen: open },
|
|
create: { id: 1, signupsOpen: open },
|
|
});
|
|
}
|