botrun-horse 2.30.0 → 2.34.0

package/botrun-c/api/admin-tools/firebase-auth-domains-v2.py.migration-bak

@@ -1,287 +0,0 @@
-#!/usr/bin/env python3
-
-"""
-Firebase Authentication Authorized Domains Manager (v2 API)
-使用 Google Identity Toolkit v2 API 完整實作列出、新增、移除授權域名
-
-使用方式：
-  # 列出所有授權域名
-  python3 firebase-auth-domains-v2.py --list
-
-  # 新增授權域名
-  python3 firebase-auth-domains-v2.py --add botrun-j-example.a.run.app
-
-  # 移除授權域名
-  python3 firebase-auth-domains-v2.py --remove botrun-j-example.a.run.app
-
-  # 批次新增 Cloud Run URLs
-  python3 firebase-auth-domains-v2.py --add-cloud-run
-
-  # 列出所有域名並顯示完整配置
-  python3 firebase-auth-domains-v2.py --list --verbose
-"""
-
-import sys
-import os
-import json
-import argparse
-from typing import List, Set, Optional
-import google.auth
-from googleapiclient.discovery import build
-from googleapiclient.errors import HttpError
-from google.auth.exceptions import DefaultCredentialsError
-
-# 顏色代碼
-GREEN = '\033[92m'
-RED = '\033[91m'
-YELLOW = '\033[93m'
-BLUE = '\033[94m'
-RESET = '\033[0m'
-BOLD = '\033[1m'
-
-PROJECT_ID = os.getenv('FIREBASE_PROJECT_ID', 'scoop-386004')
-
-# Cloud Run URLs 需要添加的清單
-CLOUD_RUN_URLS = [
-    'botrun-j-53288a47-36186877499.asia-east1.run.app',
-    'botrun-j-aee12461-36186877499.asia-east1.run.app',
-]
-
-
-class FirebaseAuthDomainManagerV2:
-    """Firebase Authentication 授權域名管理器 - 使用 Identity Toolkit v2 API"""
-
-    def __init__(self):
-        """初始化服務客戶端"""
-        try:
-            # 使用 cloud-platform scope 以獲得完整存取權限
-            self.credentials, _ = google.auth.default(
-                scopes=['https://www.googleapis.com/auth/cloud-platform']
-            )
-
-            # 建立 Identity Toolkit v2 服務客戶端
-            self.service = build('identitytoolkit', 'v2', credentials=self.credentials)
-            self.config_name = f'projects/{PROJECT_ID}/config'
-
-            print(f"{BLUE}✅ Successfully authenticated with Identity Toolkit v2 API{RESET}\n")
-
-        except DefaultCredentialsError:
-            print(f"{RED}❌ Error: Cannot authenticate with Google Cloud{RESET}")
-            print(f"{YELLOW}Please run: gcloud auth application-default login{RESET}")
-            sys.exit(1)
-        except Exception as e:
-            print(f"{RED}❌ Error initializing service: {e}{RESET}")
-            sys.exit(1)
-
-    def get_authorized_domains(self) -> Set[str]:
-        """取得所有授權域名"""
-        try:
-            request = self.service.projects().getConfig(name=self.config_name)
-            result = request.execute()
-            domains = result.get('authorizedDomains', [])
-            return set(domains) if domains else set()
-        except HttpError as error:
-            print(f"{RED}❌ Error fetching domains: {error}{RESET}")
-            return set()
-        except Exception as e:
-            print(f"{RED}❌ Unexpected error: {e}{RESET}")
-            return set()
-
-    def add_authorized_domain(self, domain: str) -> bool:
-        """新增授權域名"""
-        try:
-            print(f"{BLUE}📝 Adding domain: {domain}{RESET}\n")
-
-            # 步驟 1: 取得目前的設定
-            print(f"  1️⃣  Reading current configuration...")
-            current_domains = self.get_authorized_domains()
-
-            if domain in current_domains:
-                print(f"{YELLOW}     ⚠️  Domain already exists: {domain}{RESET}\n")
-                return False
-
-            # 步驟 2: 修改域名清單
-            print(f"  2️⃣  Updating domain list...")
-            updated_domains = list(current_domains)
-            updated_domains.append(domain)
-
-            # 步驟 3: 發送更新請求
-            print(f"  3️⃣  Sending update request to Identity Toolkit API v2...")
-
-            update_body = {
-                'authorizedDomains': sorted(updated_domains)
-            }
-
-            # 使用 updateMask 確保只更新 authorizedDomains 欄位
-            request = self.service.projects().updateConfig(
-                name=self.config_name,
-                body=update_body,
-                updateMask='authorizedDomains'
-            )
-            result = request.execute()
-
-            print(f"\n{GREEN}✅ Domain added successfully: {domain}{RESET}\n")
-            return True
-
-        except HttpError as error:
-            print(f"\n{RED}❌ HTTP Error: {error}{RESET}\n")
-            return False
-        except Exception as e:
-            print(f"\n{RED}❌ Error adding domain: {e}{RESET}\n")
-            return False
-
-    def remove_authorized_domain(self, domain: str) -> bool:
-        """移除授權域名"""
-        try:
-            print(f"{BLUE}🗑️  Removing domain: {domain}{RESET}\n")
-
-            # 步驟 1: 取得目前的設定
-            print(f"  1️⃣  Reading current configuration...")
-            current_domains = self.get_authorized_domains()
-
-            if domain not in current_domains:
-                print(f"{YELLOW}     ⚠️  Domain not found: {domain}{RESET}\n")
-                return False
-
-            # 步驟 2: 修改域名清單
-            print(f"  2️⃣  Updating domain list...")
-            updated_domains = [d for d in current_domains if d != domain]
-
-            # 步驟 3: 發送更新請求
-            print(f"  3️⃣  Sending update request...")
-
-            update_body = {
-                'authorizedDomains': sorted(updated_domains)
-            }
-
-            request = self.service.projects().updateConfig(
-                name=self.config_name,
-                body=update_body,
-                updateMask='authorizedDomains'
-            )
-            result = request.execute()
-
-            print(f"\n{GREEN}✅ Domain removed successfully: {domain}{RESET}\n")
-            return True
-
-        except HttpError as error:
-            print(f"\n{RED}❌ HTTP Error: {error}{RESET}\n")
-            return False
-        except Exception as e:
-            print(f"\n{RED}❌ Error removing domain: {e}{RESET}\n")
-            return False
-
-    def list_authorized_domains(self):
-        """列出所有授權域名"""
-        print(f"{BLUE}📋 Fetching authorized domains...{RESET}\n")
-
-        domains = self.get_authorized_domains()
-
-        if not domains:
-            print(f"{YELLOW}⚠️  No authorized domains configured{RESET}\n")
-            return
-
-        domains_list = sorted(list(domains))
-
-        print(f"{GREEN}✅ Authorized Domains ({len(domains)} total):{RESET}\n")
-        for i, domain in enumerate(domains_list, 1):
-            print(f"   {i}. {BOLD}{domain}{RESET}")
-        print()
-
-    def print_full_config(self):
-        """顯示完整配置"""
-        try:
-            print(f"{BLUE}📊 Full Configuration:{RESET}\n")
-            request = self.service.projects().getConfig(name=self.config_name)
-            result = request.execute()
-            print(json.dumps(result, indent=2))
-            print()
-        except HttpError as error:
-            print(f"{RED}❌ Error fetching config: {error}{RESET}\n")
-        except Exception as e:
-            print(f"{RED}❌ Error: {e}{RESET}\n")
-
-    def add_cloud_run_urls(self) -> int:
-        """批次新增所有 Cloud Run URLs"""
-        print(f"{BLUE}📦 Adding Cloud Run service domains...{RESET}\n")
-
-        added = 0
-        current_domains = self.get_authorized_domains()
-
-        for url in CLOUD_RUN_URLS:
-            if url in current_domains:
-                print(f"{YELLOW}   ⚠️  Already exists: {url}{RESET}")
-            else:
-                if self.add_authorized_domain(url):
-                    added += 1
-                    # 刷新域名清單以便下一次迭代使用
-                    current_domains = self.get_authorized_domains()
-
-        if added > 0:
-            print(f"\n{GREEN}✅ Successfully added {added} domain(s){RESET}\n")
-        else:
-            print(f"\n{YELLOW}ℹ️  All domains already exist{RESET}\n")
-
-        return added
-
-
-def main():
-    """主程式"""
-    parser = argparse.ArgumentParser(
-        description='Firebase Authentication Authorized Domains Manager (v2 API)',
-        formatter_class=argparse.RawDescriptionHelpFormatter,
-        epilog="""
-Examples:
-  # 列出所有授權域名
-  %(prog)s --list
-
-  # 新增單個域名
-  %(prog)s --add botrun-j-example.a.run.app
-
-  # 移除域名
-  %(prog)s --remove botrun-j-example.a.run.app
-
-  # 批次新增 Cloud Run URLs
-  %(prog)s --add-cloud-run
-
-  # 列出所有域名並顯示完整配置
-  %(prog)s --list --verbose
-        """
-    )
-
-    parser.add_argument('--list', action='store_true', help='List all authorized domains')
-    parser.add_argument('--add', metavar='DOMAIN', help='Add an authorized domain')
-    parser.add_argument('--remove', metavar='DOMAIN', help='Remove an authorized domain')
-    parser.add_argument('--add-cloud-run', action='store_true', help='Add all Cloud Run service domains')
-    parser.add_argument('--verbose', '-v', action='store_true', help='Show full configuration')
-
-    args = parser.parse_args()
-
-    # 如果沒有指定任何操作，顯示列表
-    if not any([args.list, args.add, args.remove, args.add_cloud_run, args.verbose]):
-        args.list = True
-
-    # 初始化管理器
-    print(f"\n{BLUE}🔐 Firebase Auth Domains Manager (v2 API){RESET}")
-    print(f"{BLUE}Project ID: {GREEN}{PROJECT_ID}{RESET}\n")
-
-    manager = FirebaseAuthDomainManagerV2()
-
-    # 執行操作
-    if args.add:
-        manager.add_authorized_domain(args.add)
-    elif args.remove:
-        manager.remove_authorized_domain(args.remove)
-    elif args.add_cloud_run:
-        manager.add_cloud_run_urls()
-    elif args.list or args.verbose:
-        manager.list_authorized_domains()
-
-    if args.verbose:
-        manager.print_full_config()
-
-    print(f"{GREEN}✅ Done{RESET}\n")
-
-
-if __name__ == '__main__':
-    main()

package/botrun-c/api/admin-tools/init-firestore.mjs

@@ -1,75 +0,0 @@
-#!/usr/bin/env node
-/**
- * 初始化 Firestore - 建立使用者文件（用於管理追蹤）
- * 簡化版：不需要白名單，任何 Gmail 登入即可使用
- * 整合到 sh/auth.sh create 流程中
- */
-
-import admin from 'firebase-admin';
-import { Timestamp } from 'firebase-admin/firestore';
-
-// 從命令列參數取得使用者資料
-const args = process.argv.slice(2);
-if (args.length < 6) {
-  console.error('❌ Usage: node init-firestore.mjs <email> <displayName> <serviceName> <serviceUrl> <bucketName> <bucketHash>');
-  process.exit(1);
-}
-
-const [email, displayName, serviceName, serviceUrl, bucketName, bucketHash] = args;
-
-// 初始化 Firebase Admin
-if (!admin.apps || admin.apps.length === 0) {
-  admin.initializeApp({
-    projectId: 'confidential-botrun',
-  });
-}
-
-const db = admin.firestore();
-
-async function initFirestoreForUser() {
-  try {
-    console.log(`\n🔧 Initializing Firestore for: ${email}`);
-    console.log('ℹ️  簡化版：不使用白名單，直接建立使用者文件（用於管理追蹤）');
-
-    // 建立使用者文件（僅用於管理追蹤，不影響登入權限）
-    const userRef = db.collection('users').doc(email);
-    const userDoc = await userRef.get();
-
-    if (!userDoc.exists) {
-      await userRef.set({
-        email: email,
-        displayName: displayName,
-        allowedService: serviceName,
-        serviceUrl: serviceUrl,
-        bucketName: bucketName,
-        bucketHash: bucketHash,
-        role: 'doctor',
-        loginMethods: ['google'],
-        active: true,
-        createdAt: Timestamp.now(),
-        createdBy: 'sh/auth.sh',
-        updatedAt: Timestamp.now()
-      });
-      console.log('✅ User document created');
-    } else {
-      // 更新現有文件
-      await userRef.update({
-        displayName: displayName,
-        allowedService: serviceName,
-        serviceUrl: serviceUrl,
-        bucketName: bucketName,
-        bucketHash: bucketHash,
-        updatedAt: Timestamp.now()
-      });
-      console.log('✅ User document updated');
-    }
-
-    console.log('✅ Firestore 初始化完成！（僅用於管理追蹤，任何 Gmail 都可登入）');
-  } catch (error) {
-    console.error('❌ Error initializing Firestore:', error.message);
-    throw error;
-  }
-}
-
-await initFirestoreForUser();
-process.exit(0);

package/botrun-c/api/admin-tools/init-firestore.mjs.migration-bak

@@ -1,101 +0,0 @@
-#!/usr/bin/env node
-/**
- * 初始化 Firestore - 新增使用者到白名單和建立使用者文件
- * 整合到 sh/auth.sh create 流程中
- */
-
-import admin from 'firebase-admin';
-import { Timestamp } from 'firebase-admin/firestore';
-
-// 從命令列參數取得使用者資料
-const args = process.argv.slice(2);
-if (args.length < 6) {
-  console.error('❌ Usage: node init-firestore.mjs <email> <displayName> <serviceName> <serviceUrl> <bucketName> <bucketHash>');
-  process.exit(1);
-}
-
-const [email, displayName, serviceName, serviceUrl, bucketName, bucketHash] = args;
-
-// 初始化 Firebase Admin
-if (!admin.apps || admin.apps.length === 0) {
-  admin.initializeApp({
-    projectId: 'scoop-386004',
-  });
-}
-
-const db = admin.firestore();
-
-async function initFirestoreForUser() {
-  try {
-    console.log(`\n🔧 Initializing Firestore for: ${email}`);
-
-    // 1. 檢查 system/allowedUsers 是否存在
-    const systemRef = db.collection('system').doc('allowedUsers');
-    const systemDoc = await systemRef.get();
-
-    if (!systemDoc.exists) {
-      // 首次初始化 - 建立 system collection
-      console.log('📦 Creating system collection (first time)...');
-      await systemRef.set({
-        emails: [email],
-        updatedAt: Timestamp.now(),
-        updatedBy: 'sh/auth.sh'
-      });
-      console.log('✅ System collection created');
-    } else {
-      // 更新現有白名單
-      const currentEmails = systemDoc.data().emails || [];
-      if (!currentEmails.includes(email)) {
-        await systemRef.update({
-          emails: admin.firestore.FieldValue.arrayUnion(email),
-          updatedAt: Timestamp.now(),
-          updatedBy: 'sh/auth.sh'
-        });
-        console.log('✅ Added to whitelist');
-      } else {
-        console.log('ℹ️  Already in whitelist');
-      }
-    }
-
-    // 2. 建立使用者文件
-    const userRef = db.collection('users').doc(email);
-    const userDoc = await userRef.get();
-
-    if (!userDoc.exists) {
-      await userRef.set({
-        email: email,
-        displayName: displayName,
-        allowedService: serviceName,
-        serviceUrl: serviceUrl,
-        bucketName: bucketName,
-        bucketHash: bucketHash,
-        role: 'doctor',
-        loginMethods: ['google'],
-        active: true,
-        createdAt: Timestamp.now(),
-        createdBy: 'sh/auth.sh',
-        updatedAt: Timestamp.now()
-      });
-      console.log('✅ User document created');
-    } else {
-      // 更新現有文件
-      await userRef.update({
-        displayName: displayName,
-        allowedService: serviceName,
-        serviceUrl: serviceUrl,
-        bucketName: bucketName,
-        bucketHash: bucketHash,
-        updatedAt: Timestamp.now()
-      });
-      console.log('✅ User document updated');
-    }
-
-    console.log('✅ Firestore initialization complete!');
-  } catch (error) {
-    console.error('❌ Error initializing Firestore:', error.message);
-    throw error;
-  }
-}
-
-await initFirestoreForUser();
-process.exit(0);

package/botrun-c/api/admin-tools/list-users.mjs

@@ -1,43 +0,0 @@
-#!/usr/bin/env node
-/**
- * 列出所有 Firebase Auth 使用者
- */
-
-import admin from 'firebase-admin';
-
-console.log('🚀 Listing Firebase Auth users...\n');
-
-// 初始化 Firebase Admin
-if (!admin.apps || admin.apps.length === 0) {
-  admin.initializeApp({
-    projectId: 'confidential-botrun',
-  });
-}
-
-async function listAllUsers() {
-  try {
-    const listUsersResult = await admin.auth().listUsers(1000);
-
-    if (listUsersResult.users.length === 0) {
-      console.log('❌ No users found in Firebase Authentication');
-      console.log('\n⚠️  Users need to login at least once before Custom Claims can be set.');
-      return;
-    }
-
-    console.log(`✅ Found ${listUsersResult.users.length} users:\n`);
-
-    listUsersResult.users.forEach((userRecord, index) => {
-      console.log(`${index + 1}. Email: ${userRecord.email || 'N/A'}`);
-      console.log(`   UID: ${userRecord.uid}`);
-      console.log(`   Created: ${userRecord.metadata.creationTime}`);
-      console.log(`   Last Sign In: ${userRecord.metadata.lastSignInTime || 'Never'}`);
-      console.log(`   Custom Claims:`, userRecord.customClaims || 'None');
-      console.log('');
-    });
-  } catch (error) {
-    console.error('❌ Error:', error.message);
-  }
-}
-
-await listAllUsers();
-process.exit(0);

package/botrun-c/api/admin-tools/list-users.mjs.migration-bak

@@ -1,43 +0,0 @@
-#!/usr/bin/env node
-/**
- * 列出所有 Firebase Auth 使用者
- */
-
-import admin from 'firebase-admin';
-
-console.log('🚀 Listing Firebase Auth users...\n');
-
-// 初始化 Firebase Admin
-if (!admin.apps || admin.apps.length === 0) {
-  admin.initializeApp({
-    projectId: 'scoop-386004',
-  });
-}
-
-async function listAllUsers() {
-  try {
-    const listUsersResult = await admin.auth().listUsers(1000);
-
-    if (listUsersResult.users.length === 0) {
-      console.log('❌ No users found in Firebase Authentication');
-      console.log('\n⚠️  Users need to login at least once before Custom Claims can be set.');
-      return;
-    }
-
-    console.log(`✅ Found ${listUsersResult.users.length} users:\n`);
-
-    listUsersResult.users.forEach((userRecord, index) => {
-      console.log(`${index + 1}. Email: ${userRecord.email || 'N/A'}`);
-      console.log(`   UID: ${userRecord.uid}`);
-      console.log(`   Created: ${userRecord.metadata.creationTime}`);
-      console.log(`   Last Sign In: ${userRecord.metadata.lastSignInTime || 'Never'}`);
-      console.log(`   Custom Claims:`, userRecord.customClaims || 'None');
-      console.log('');
-    });
-  } catch (error) {
-    console.error('❌ Error:', error.message);
-  }
-}
-
-await listAllUsers();
-process.exit(0);