@logto/cli 1.13.1 → 1.14.0

package/lib/commands/database/seed/index.d.ts

@@ -1,10 +1,11 @@
 import type { DatabasePool } from 'slonik';
 import type { CommandModule } from 'yargs';
-export declare const seedByPool: (pool: DatabasePool, cloud?: boolean, test?: boolean) => Promise<void>;
+export declare const seedByPool: (pool: DatabasePool, cloud?: boolean, test?: boolean, encryptBaseRole?: boolean) => Promise<void>;
 declare const seed: CommandModule<Record<string, unknown>, {
     swe?: boolean;
     cloud?: boolean;
     test?: boolean;
     'legacy-test-data'?: boolean;
+    'encrypt-base-role'?: boolean;
 }>;
 export default seed;

package/lib/commands/database/seed/index.js

@@ -4,7 +4,7 @@ import { consoleLog, oraPromise } from '../../../utils.js';
 import { getLatestAlterationTimestamp } from '../alteration/index.js';
 import { getAlterationDirectory } from '../alteration/utils.js';
 import { createTables, seedCloud, seedTables, seedTest } from './tables.js';
-export const seedByPool = async (pool, cloud = false, test = false) => {
+export const seedByPool = async (pool, cloud = false, test = false, encryptBaseRole = false) => {
     await pool.transaction(async (connection) => {
         // Check alteration scripts available in order to insert correct timestamp
         const latestTimestamp = await getLatestAlterationTimestamp();
@@ -12,9 +12,12 @@ export const seedByPool = async (pool, cloud = false, test = false) => {
             throw new Error(`No alteration script found when seeding the database.\n` +
                 `Please check \`${getAlterationDirectory()}\` to see if there are alteration scripts available.\n`);
         }
-        await oraPromise(createTables(connection), {
+        const tableInfo = await oraPromise(createTables(connection, encryptBaseRole), {
             text: 'Create tables',
         });
+        if (tableInfo.password.length > 0) {
+            consoleLog.info('base role password:', tableInfo.password);
+        }
         await seedTables(connection, latestTimestamp, cloud);
         if (cloud) {
             await seedCloud(connection);
@@ -49,8 +52,12 @@ const seed = {
         .option('legacy-test-data', {
         describe: 'Seed test data only for legacy Logto versions (<=1.12.0), this option conflicts with others',
         type: 'boolean',
+    })
+        .option('encrypt-base-role', {
+        describe: 'Seed base role with password',
+        type: 'boolean',
     }),
-    handler: async ({ swe, cloud, test, legacyTestData }) => {
+    handler: async ({ swe, cloud, test, legacyTestData, encryptBaseRole }) => {
         const pool = await createPoolAndDatabaseIfNeeded();
         if (legacyTestData) {
             // eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing
@@ -67,7 +74,7 @@ const seed = {
             return;
         }
         try {
-            await seedByPool(pool, cloud, test);
+            await seedByPool(pool, cloud, test, encryptBaseRole);
         }
         catch (error) {
             consoleLog.error(error);

package/lib/commands/database/seed/tables.d.ts

@@ -1,5 +1,7 @@
 import type { DatabaseTransactionConnection } from 'slonik';
-export declare const createTables: (connection: DatabaseTransactionConnection) => Promise<void>;
+export declare const createTables: (connection: DatabaseTransactionConnection, encryptBaseRole: boolean) => Promise<{
+    password: string;
+}>;
 export declare const seedTables: (connection: DatabaseTransactionConnection, latestTimestamp: number, isCloud: boolean) => Promise<void>;
 export declare const seedCloud: (connection: DatabaseTransactionConnection) => Promise<void>;
 /**

package/lib/commands/database/seed/tables.js

@@ -37,7 +37,7 @@ const lifecycleNames = Object.freeze([
     'after_all',
     'after_each',
 ]);
-export const createTables = async (connection) => {
+export const createTables = async (connection, encryptBaseRole) => {
     const tableDirectory = getPathInModule('@logto/schemas', 'tables');
     const directoryFiles = await readdir(tableDirectory);
     const tableFiles = directoryFiles.filter((file) => file.endsWith('.sql'));
@@ -53,6 +53,7 @@ export const createTables = async (connection) => {
             query
                 .replaceAll('${name}', parameters.name ?? '')
                 .replaceAll('${database}', parameters.database ?? '')
+                .replaceAll('${password}', parameters.password ?? '')
             /* eslint-enable no-template-curly-in-string */
             )}`);
         }
@@ -63,7 +64,8 @@ export const createTables = async (connection) => {
     ];
     const sorted = allQueries.slice().sort(compareQuery);
     const database = await getDatabaseName(connection, true);
-    await runLifecycleQuery('before_all', { database });
+    const password = encryptBaseRole ? generateStandardId(32) : '';
+    await runLifecycleQuery('before_all', { database, password });
     /* eslint-disable no-await-in-loop */
     for (const [file, query] of sorted) {
         await connection.query(sql `${raw(query)}`);
@@ -73,6 +75,7 @@ export const createTables = async (connection) => {
     }
     /* eslint-enable no-await-in-loop */
     await runLifecycleQuery('after_all', { database });
+    return { password };
 };
 export const seedTables = async (connection, latestTimestamp, isCloud) => {
     await createTenant(connection, defaultTenantId);

package/lib/package-json.js

@@ -1,6 +1,6 @@
 export const packageJson = {
     "name": "@logto/cli",
-    "version": "1.13.1",
+    "version": "1.14.0",
     "description": "Logto CLI.",
     "author": "Silverhand Inc. <contact@silverhand.io>",
     "homepage": "https://github.com/logto-io/logto#readme",
@@ -48,7 +48,7 @@ export const packageJson = {
         "@logto/language-kit": "workspace:^1.1.0",
         "@logto/phrases": "workspace:^1.9.0",
         "@logto/phrases-experience": "workspace:^1.6.0",
-        "@logto/schemas": "workspace:1.13.1",
+        "@logto/schemas": "workspace:1.14.0",
         "@logto/shared": "workspace:^3.1.0",
         "@silverhand/essentials": "^2.9.0",
         "chalk": "^5.0.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/cli",
-  "version": "1.13.1",
+  "version": "1.14.0",
   "description": "Logto CLI.",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "homepage": "https://github.com/logto-io/logto#readme",
@@ -33,7 +33,7 @@
     "@logto/language-kit": "^1.1.0",
     "@logto/phrases": "^1.9.0",
     "@logto/phrases-experience": "^1.6.0",
-    "@logto/schemas": "1.13.1",
+    "@logto/schemas": "1.14.0",
     "@logto/shared": "^3.1.0",
     "@silverhand/essentials": "^2.9.0",
     "chalk": "^5.0.0",