Source identity
| Field | Recorded value |
|---|---|
| Source type | GitHub source |
| Original record | Janady13/missionmatch / cmd/provision-org/main.go |
| Date | Not specified in source |
| Repository | Janady13/missionmatch |
| Revision | 720d47fae476b0d38477ae4401697d372b1ea2bc |
| Branch | feature/opportunity-to-outcome |
| Path or archive member | cmd/provision-org/main.go |
| Original SHA-256 | b8ff4e50b8af558f31df757ccea20adffb6314a126e4a72c873f7f327caffcb6 |
| Git blob SHA | 76411d05e5d1fd1d98a975770e7bd8ed6287accc |
| Reading-copy SHA-256 | b8ff4e50b8af558f31df757ccea20adffb6314a126e4a72c873f7f327caffcb6 |
Every recorded occurrence
These 36 records contain identical original source bytes. Their paths and revisions remain part of the archive.
| Original record | Branch or archive | Revision / identifier | Original location |
|---|---|---|---|
| Janady13/missionmatch / cmd/provision-org/main.go | feature/opportunity-to-outcome | 720d47fae476b0d38477ae4401697d372b1ea2bc | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | per-tenant-routing | 9bde0f9a74b89d01980fa658e5253acda7528d0c | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | collision-deconfliction | 4ee5a09972608ed89f8377c6665542d5f450f0a6 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ws6-retrieval | 6c56e29231ec05735927fa265c97d517499dfeaf | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-a-shared-core | e0de03ac3a1ec826bd15d0e048e3b02baa23eeff | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | m5-price-to-win | 41000ad30fff4129fdaf5ec84e15ba14c27d4890 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-c-slatematch | 5cd60c918301b46ecd6ed3e03e20c395da0062e2 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ws1-ontology-sync | b596f449a32a1016fbd403c36505cc00a1ac9ee6 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | master | 1e9249840a4302ec82e123b9c9cb6f75badea3e4 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ws8-teaching-loop | c823f0fb6bb2aba0f39001eb6de96f4000d9321f | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | w3-ai-staffing-recommendations | 43d56387270ef4da4cabd794d97ca6a49909bc7d | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | mag-substrate | b82c7100a492dec67dfd1eda6b3f53def859be35 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ws3-clearance | 4b8e7ce594c068621867f9c9deed0ec64ae6c553 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-d-command-center | 255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | phase2-eval-fairness | d361af254701975fe239927656ababb56374655e | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-e-dataflow-deploy | 433815a042f9741411e60fa553fe72143e9b10db | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ruthless-debug-sweep | b7d742f8f032984be3817efffa3eb8b13b651c1f | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | time-to-fill-survival | b66e1e505863d4f17741a4b9ede73509e45bd6c6 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ai-intelligence-layer | 5d5ddff70393a197c5f54a45280bb5dd42b24755 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | graphrag-foundation | b0ddeb9f633fd138d09309d1a17b7d13bc3a67f7 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-a-opportunity-intelligence | 1675031db74316e100782d063e9eda1a597fe3a1 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | deploy-and-ops | bdacd9d0b4d5998d25fc74bf4007f4c3ec538c7a | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ws9-bench-ingestion | f585a9ef32fa554663ce1fba9a414a54b6e49cf0 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ws2-alias-relationship | e4dada4601c6eb101830f9d223a9655dfa120616 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | presentation-readiness | eb574acaa29d71ce4d0f852572e87c275c79fdb7 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | vendor-intelligence | fe9796a19c261951d3f2565206c0c1b5ac294465 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-b-screenmatch | 09015496d565a172bcaa15cfe9a8e4b072b13df0 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ws7-federal-signal | 6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-e-commercial-stubs | 4437da660539284a400ee380b9b427a300c369ee | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | ai-brain-live | aac32fc49c878cc5bca099459307611562d0bac1 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-d-missionmatch | 3be46ba89edb737182075a2b320509b42dc916f8 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | phase2-connectors | e038d4c687aec16f8bd9bc4d907eea14d91f8704 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | workstream-b-sam-contract-awards | d5101cceb98e70000cebb31d3e7ac73d747d3a6d | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | w0-aedt-compliance | 39df94f92b2a33f852481fe1954dabed841524bb | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | feature/aioe-upgrade | 2178e7298d0e5d9af83afa12402fd587f0ba6ed8 | Open original |
| Janady13/missionmatch / cmd/provision-org/main.go | capture-readiness | bae6af7cb2997e819174a9e9cfff5e16067a1975 | Open original |
Recovered source transcript
Download complete source text ↓81 lines · 2.7 KB
// Command provision-org is the genesis bootstrap. It runs as the BYPASSRLS migrator role and calls
// the provision_org SECURITY DEFINER function to create an organization, its owner user (invited, MFA
// not yet enrolled), and a one time activation link. The app role cannot do this (it has no
// organizations INSERT grant and no EXECUTE on provision_org), which keeps org creation off the
// public attack surface.
//
// Env: MM_MIGRATOR_DATABASE_URL (or MM_DATABASE_URL). Flags name the org and owner. The printed
// activation token is delivered to the owner out of band (manual at pilot); the owner redeems it at
// POST /api/auth/invite/accept to set a password and enroll MFA.
package main
import (
"context"
"flag"
"fmt"
"log"
"os"
"time"
"github.com/google/uuid"
"github.com/jackc/pgx/v5"
"github.com/missionworkforce/missionmatch/internal/platform/security"
)
func main() {
name := flag.String("name", "", "organization name")
slug := flag.String("slug", "", "organization slug (unique)")
ownerEmail := flag.String("owner-email", "", "owner email")
ownerName := flag.String("owner-name", "", "owner full name")
expiryHours := flag.Int("expiry-hours", 72, "activation link lifetime in hours")
flag.Parse()
if *name == "" || *slug == "" || *ownerEmail == "" || *ownerName == "" {
log.Fatal("provision-org: -name, -slug, -owner-email, and -owner-name are all required")
}
dsn := firstNonEmpty(os.Getenv("MM_MIGRATOR_DATABASE_URL"), os.Getenv("MM_DATABASE_URL"))
if dsn == "" {
log.Fatal("provision-org: set MM_MIGRATOR_DATABASE_URL (the BYPASSRLS migrator DSN)")
}
token, tokenHash, err := security.NewSessionToken()
if err != nil {
log.Fatalf("provision-org: generate token: %v", err)
}
ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
defer cancel()
conn, err := pgx.Connect(ctx, dsn)
if err != nil {
log.Fatalf("provision-org: connect: %v", err)
}
defer conn.Close(ctx)
var orgID, ownerID, inviteID uuid.UUID
err = conn.QueryRow(ctx,
`SELECT organization_id, owner_user_id, invite_id FROM provision_org($1,$2,$3,$4,$5,$6)`,
*name, *slug, *ownerEmail, *ownerName, tokenHash, *expiryHours*3600).
Scan(&orgID, &ownerID, &inviteID)
if err != nil {
log.Fatalf("provision-org: provision_org: %v", err)
}
fmt.Printf("organization_id: %s\n", orgID)
fmt.Printf("owner_user_id: %s\n", ownerID)
fmt.Printf("invite_id: %s\n", inviteID)
fmt.Printf("activation_token (deliver to the owner, expires in %dh):\n%s\n", *expiryHours, token)
fmt.Printf("\nThe owner redeems it at POST /api/auth/invite/accept with {\"token\":\"...\",\"password\":\"...\"}, then enrolls MFA.\n")
}
func firstNonEmpty(vals ...string) string {
for _, v := range vals {
if v != "" {
return v
}
}
return ""
}