Files
proof-of-work/proof-of-work/lib/library.ts
T
Keysat d9c4e6c4a0 Multi-user: self-serve sign-up gated by admin-toggleable flag
Schema
- User.isAdmin: Boolean default false (Prisma)
- New InstanceSettings singleton (id=1) holding signupsOpen flag

Boot-time compat ALTERs (docker_entrypoint.sh)
- Adds User.isAdmin column to legacy snapshots; auto-promotes the oldest
  user to admin if no admin exists yet, so workout-log -> proof-of-work
  cutover preserves admin functionality with no manual SQL.
- Creates InstanceSettings table + singleton row (signupsOpen=0) for any
  snapshot that doesn't have it.

App: sign-up flow
- /auth/signup page: server component that reads InstanceSettings
  upfront. If sign-ups are closed it shows a closed-instance message and
  a back-to-sign-in link rather than a dead form. If open it renders
  SignupForm (client) which calls signupAction (server).
- signupAction: re-checks the flag (defense in depth), validates email
  format / 8-char password / matching confirm, blocks duplicate-email
  enumeration with a generic error, creates the user with isAdmin=false,
  seeds default UserPreferences, ensures the curated exercise library
  for the new user (lib/library.ts upserts every entry), then issues a
  session cookie.
- Login page now links to /auth/signup; old "Demo: admin@example.com /
  password" footer (which was wrong anyway) removed.

App: admin in-app toggle
- Settings page renders new AdminInstanceSettings component for admins
  only. Optimistic toggle posts to /api/admin/signups; error rollback
  on failure.
- /api/admin/signups: GET returns current flag (any authed user, so the
  UI knows whether to show the sign-up CTA later); POST flips it
  (admin only).

StartOS package action
- toggle-signups: same setter as the in-app toggle, accessible from the
  StartOS UI without an admin login. Single boolean input. Asserts the
  read-back value matches what was written before reporting success.
- changeAdminCredentials now keys the UPDATE on
  `WHERE isAdmin = 1 ORDER BY createdAt ASC LIMIT 1` (was: just
  ORDER BY createdAt) — correct under multi-user.

Release notes / docs
- v1.0.0:1 release notes expanded to call out multi-user as part of
  the cutover release (no separate version needed since this is the
  first proof-of-work release shipping to anyone).
- Root README: short Multi-user section explaining both toggle paths
  and that new users get the curated library automatically.
- README dev setup adds `npx prisma generate` step (required after
  schema changes for local dev).
2026-05-08 20:59:45 -05:00

70 lines
2.1 KiB
TypeScript

import * as fs from "fs";
import * as path from "path";
import { prisma } from "./prisma";
/**
* In-process equivalent of prisma/ensureExerciseLibrary.cjs (which runs at
* container boot via docker_entrypoint.sh). Used when a new user signs up
* mid-runtime so they don't have to wait for the next boot to see the
* curated library.
*
* Reads the curated library from prisma/exercises.seed.json, then upserts
* each entry for the given user. Idempotent; never overwrites a user's
* own custom exercises (the unique constraint on (userId, name) prevents
* duplicates and `update: {}` on upsert keeps existing rows untouched).
*/
interface LibraryExercise {
name: string;
description: string | null;
type: string;
muscleGroups: string[];
inputFields: string[];
defaultWeightUnit: string | null;
}
let cached: LibraryExercise[] | null = null;
function loadLibrary(): LibraryExercise[] {
if (cached) return cached;
const candidates = [
// standalone runtime (Next.js server.js / Node)
path.resolve(process.cwd(), "prisma/exercises.seed.json"),
// .next/standalone runtime
path.resolve(process.cwd(), "../prisma/exercises.seed.json"),
// dev: cwd is repo subdir
path.resolve(__dirname, "../prisma/exercises.seed.json"),
];
for (const p of candidates) {
if (fs.existsSync(p)) {
cached = JSON.parse(fs.readFileSync(p, "utf8")) as LibraryExercise[];
return cached;
}
}
console.warn("[library] exercises.seed.json not found in any candidate path");
return [];
}
export async function ensureLibraryForUser(userId: string): Promise<number> {
const library = loadLibrary();
let inserted = 0;
for (const ex of library) {
const result = await prisma.exercise.upsert({
where: { userId_name: { userId, name: ex.name } },
update: {},
create: {
userId,
name: ex.name,
description: ex.description,
muscleGroups: JSON.stringify(ex.muscleGroups),
type: ex.type,
inputFields: JSON.stringify(ex.inputFields),
defaultWeightUnit: ex.defaultWeightUnit,
isCustom: false,
},
});
if (result) inserted++;
}
return inserted;
}