Janady13/missionmatch / cmd/provision-owner/main.go

Source identity

Field	Recorded value
Source type	GitHub source
Original record	Janady13/missionmatch / cmd/provision-owner/main.go
Date	Not specified in source
Repository	Janady13/missionmatch
Revision	720d47fae476b0d38477ae4401697d372b1ea2bc
Branch	feature/opportunity-to-outcome
Path or archive member	cmd/provision-owner/main.go
Original SHA-256	0cb006c135a86cf4434863be408c17f1deaa1b5e0c243b8be58a3bd7392ed84c
Git blob SHA	a0ec746d8df2130d272d3274792111c198a61e27
Reading-copy SHA-256	0cb006c135a86cf4434863be408c17f1deaa1b5e0c243b8be58a3bd7392ed84c

Original source ↗

Every recorded occurrence

These 35 records contain identical original source bytes. Their paths and revisions remain part of the archive.

Original record	Branch or archive	Revision / identifier	Original location
Janady13/missionmatch / cmd/provision-owner/main.go	feature/opportunity-to-outcome	720d47fae476b0d38477ae4401697d372b1ea2bc	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	per-tenant-routing	9bde0f9a74b89d01980fa658e5253acda7528d0c	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	collision-deconfliction	4ee5a09972608ed89f8377c6665542d5f450f0a6	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ws6-retrieval	6c56e29231ec05735927fa265c97d517499dfeaf	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-a-shared-core	e0de03ac3a1ec826bd15d0e048e3b02baa23eeff	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	m5-price-to-win	41000ad30fff4129fdaf5ec84e15ba14c27d4890	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-c-slatematch	5cd60c918301b46ecd6ed3e03e20c395da0062e2	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ws1-ontology-sync	b596f449a32a1016fbd403c36505cc00a1ac9ee6	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	master	1e9249840a4302ec82e123b9c9cb6f75badea3e4	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ws8-teaching-loop	c823f0fb6bb2aba0f39001eb6de96f4000d9321f	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	w3-ai-staffing-recommendations	43d56387270ef4da4cabd794d97ca6a49909bc7d	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	mag-substrate	b82c7100a492dec67dfd1eda6b3f53def859be35	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ws3-clearance	4b8e7ce594c068621867f9c9deed0ec64ae6c553	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-d-command-center	255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	phase2-eval-fairness	d361af254701975fe239927656ababb56374655e	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-e-dataflow-deploy	433815a042f9741411e60fa553fe72143e9b10db	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ruthless-debug-sweep	b7d742f8f032984be3817efffa3eb8b13b651c1f	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	time-to-fill-survival	b66e1e505863d4f17741a4b9ede73509e45bd6c6	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ai-intelligence-layer	5d5ddff70393a197c5f54a45280bb5dd42b24755	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	graphrag-foundation	b0ddeb9f633fd138d09309d1a17b7d13bc3a67f7	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-a-opportunity-intelligence	1675031db74316e100782d063e9eda1a597fe3a1	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	deploy-and-ops	bdacd9d0b4d5998d25fc74bf4007f4c3ec538c7a	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ws9-bench-ingestion	f585a9ef32fa554663ce1fba9a414a54b6e49cf0	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ws2-alias-relationship	e4dada4601c6eb101830f9d223a9655dfa120616	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	presentation-readiness	eb574acaa29d71ce4d0f852572e87c275c79fdb7	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	vendor-intelligence	fe9796a19c261951d3f2565206c0c1b5ac294465	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-b-screenmatch	09015496d565a172bcaa15cfe9a8e4b072b13df0	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ws7-federal-signal	6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-e-commercial-stubs	4437da660539284a400ee380b9b427a300c369ee	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	ai-brain-live	aac32fc49c878cc5bca099459307611562d0bac1	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-d-missionmatch	3be46ba89edb737182075a2b320509b42dc916f8	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	phase2-connectors	e038d4c687aec16f8bd9bc4d907eea14d91f8704	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	workstream-b-sam-contract-awards	d5101cceb98e70000cebb31d3e7ac73d747d3a6d	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	feature/aioe-upgrade	2178e7298d0e5d9af83afa12402fd587f0ba6ed8	Open original
Janady13/missionmatch / cmd/provision-owner/main.go	capture-readiness	bae6af7cb2997e819174a9e9cfff5e16067a1975	Open original

Recovered source transcript

Download complete source text ↓94 lines · 3.4 KB

// Command provision-owner adds an owner to an EXISTING organization and prints a one time activation
// link. Unlike provision-org (which creates a fresh org), this targets an org that already holds data,
// so an operator can take ownership of a seeded demo org without moving the data. It writes only the
// owner user and the invite; the owner then sets a password and enrolls MFA through the accept flow.
// Migrator role only (it inserts directly into the users and user_invites tables it owns).
//
// Env: MM_MIGRATOR_DATABASE_URL (or MM_DATABASE_URL). Flags: org, email, name, base-url, expiry-hours.
package main

import (
	"context"
	"flag"
	"fmt"
	"log"
	"os"
	"strings"
	"time"

	"github.com/google/uuid"
	"github.com/jackc/pgx/v5"

	"github.com/missionworkforce/missionmatch/internal/platform/security"
)

func main() {
	org := flag.String("org", "", "existing organization id (uuid)")
	email := flag.String("email", "", "owner email")
	name := flag.String("name", "", "owner full name")
	baseURL := flag.String("base-url", "https://screenmatch.thatwebhostingguy.com", "site base url for the activation link")
	expiryHours := flag.Int("expiry-hours", 168, "activation link lifetime in hours")
	flag.Parse()

	if *org == "" || *email == "" || *name == "" {
		log.Fatal("provision-owner: org, email, and name are required")
	}
	orgID, err := uuid.Parse(*org)
	if err != nil {
		log.Fatalf("provision-owner: bad org id %q: %v", *org, err)
	}
	dsn := firstNonEmpty(os.Getenv("MM_MIGRATOR_DATABASE_URL"), os.Getenv("MM_DATABASE_URL"))
	if dsn == "" {
		log.Fatal("provision-owner: set MM_MIGRATOR_DATABASE_URL (the BYPASSRLS migrator DSN)")
	}

	// The token and its hash come from the same function the accept flow validates against, so they
	// match by construction. Only the hash is stored; the raw token rides in the activation link.
	token, tokenHash, err := security.NewSessionToken()
	if err != nil {
		log.Fatalf("provision-owner: generate token: %v", err)
	}

	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
	defer cancel()
	conn, err := pgx.Connect(ctx, dsn)
	if err != nil {
		log.Fatalf("provision-owner: connect: %v", err)
	}
	defer conn.Close(ctx)

	var orgName string
	if err := conn.QueryRow(ctx, `SELECT name FROM organizations WHERE id = $1`, orgID).Scan(&orgName); err != nil {
		log.Fatalf("provision-owner: org %s not found: %v", orgID, err)
	}

	var userID uuid.UUID
	err = conn.QueryRow(ctx,
		`INSERT INTO users (organization_id, email, full_name, role, status, mfa_enrolled)
		 VALUES ($1, $2, $3, 'owner', 'invited', false) RETURNING id`,
		orgID, *email, *name).Scan(&userID)
	if err != nil {
		log.Fatalf("provision-owner: create owner (email may already exist globally): %v", err)
	}

	if _, err := conn.Exec(ctx,
		`INSERT INTO user_invites (organization_id, email_normalized, invited_user_id, token_hash, role, expires_at, created_by)
		 VALUES ($1, lower($2), $3, $4, 'owner', now() + make_interval(secs => $5), $3)`,
		orgID, *email, userID, tokenHash, *expiryHours*3600); err != nil {
		log.Fatalf("provision-owner: create invite: %v", err)
	}

	fmt.Printf("owner provisioned in org %q (%s)\n", orgName, orgID)
	fmt.Printf("owner user id: %s\n", userID)
	fmt.Printf("ACTIVATION LINK: %s/accept?token=%s\n", strings.TrimRight(*baseURL, "/"), token)
}

func firstNonEmpty(vals ...string) string {
	for _, v := range vals {
		if s := strings.TrimSpace(v); s != "" {
			return s
		}
	}
	return ""
}