botrun-horse 2.31.0 → 2.35.0

package/botrun-c/api/admin-tools/manage-authorized-domains.ts

@@ -1,255 +0,0 @@
-#!/usr/bin/env node
-/**
- * 管理 Firebase Authentication 授權域名
- *
- * 使用方式：
- *   npx tsx admin-tools/manage-authorized-domains.ts --list
- *   npx tsx admin-tools/manage-authorized-domains.ts --add <domain>
- *   npx tsx admin-tools/manage-authorized-domains.ts --remove <domain>
- *   npx tsx admin-tools/manage-authorized-domains.ts --add-cloud-run
- */
-
-import admin from 'firebase-admin';
-
-// 初始化 Firebase Admin
-if (!admin.apps || admin.apps.length === 0) {
-  admin.initializeApp({
-    projectId: process.env.FIREBASE_PROJECT_ID || 'confidential-botrun',
-  });
-}
-
-const auth = admin.auth();
-
-/**
- * 列出所有授權域名
- */
-async function listAuthorizedDomains(): Promise<void> {
-  try {
-    console.log('\n📋 Fetching authorized domains...\n');
-
-    const response = await auth.getProjectConfig();
-    const authorizedDomains = response.authorizedDomains || [];
-
-    console.log(`✅ Total authorized domains: ${authorizedDomains.length}\n`);
-
-    if (authorizedDomains.length === 0) {
-      console.log('No authorized domains configured.');
-      return;
-    }
-
-    authorizedDomains.forEach((domain, index) => {
-      console.log(`${index + 1}. ${domain}`);
-    });
-    console.log('');
-  } catch (error) {
-    console.error('❌ Error fetching authorized domains:', error);
-    throw error;
-  }
-}
-
-/**
- * 新增授權域名
- */
-async function addAuthorizedDomain(domain: string): Promise<void> {
-  try {
-    console.log(`\n🔧 Adding authorized domain: ${domain}\n`);
-
-    const config = await auth.getProjectConfig();
-    const authorizedDomains = config.authorizedDomains || [];
-
-    // 檢查是否已存在
-    if (authorizedDomains.includes(domain)) {
-      console.log(`⚠️  Domain already exists: ${domain}`);
-      return;
-    }
-
-    // 新增域名
-    authorizedDomains.push(domain);
-
-    await auth.updateProjectConfig({
-      authorizedDomains,
-    });
-
-    console.log(`✅ Domain added successfully: ${domain}`);
-    console.log(`\n📋 Updated authorized domains (${authorizedDomains.length} total):`);
-    authorizedDomains.forEach((d, index) => {
-      console.log(`   ${index + 1}. ${d}`);
-    });
-    console.log('');
-  } catch (error) {
-    console.error('❌ Error adding authorized domain:', error);
-    throw error;
-  }
-}
-
-/**
- * 移除授權域名
- */
-async function removeAuthorizedDomain(domain: string): Promise<void> {
-  try {
-    console.log(`\n🔧 Removing authorized domain: ${domain}\n`);
-
-    const config = await auth.getProjectConfig();
-    const authorizedDomains = config.authorizedDomains || [];
-
-    // 檢查是否存在
-    if (!authorizedDomains.includes(domain)) {
-      console.log(`⚠️  Domain not found: ${domain}`);
-      return;
-    }
-
-    // 移除域名
-    const updatedDomains = authorizedDomains.filter(d => d !== domain);
-
-    await auth.updateProjectConfig({
-      authorizedDomains: updatedDomains,
-    });
-
-    console.log(`✅ Domain removed successfully: ${domain}`);
-    console.log(`\n📋 Updated authorized domains (${updatedDomains.length} total):`);
-    updatedDomains.forEach((d, index) => {
-      console.log(`   ${index + 1}. ${d}`);
-    });
-    console.log('');
-  } catch (error) {
-    console.error('❌ Error removing authorized domain:', error);
-    throw error;
-  }
-}
-
-/**
- * 一次新增所有 Cloud Run service URLs
- */
-async function addCloudRunDomains(): Promise<void> {
-  const cloudRunDomains = [
-    'botrun-j-53288a47-36186877499.asia-east1.run.app',
-    'botrun-j-aee12461-36186877499.asia-east1.run.app',
-  ];
-
-  console.log('\n🚀 Adding all Cloud Run service domains...\n');
-
-  for (const domain of cloudRunDomains) {
-    try {
-      await addAuthorizedDomain(domain);
-    } catch (error) {
-      console.error(`Failed to add ${domain}, continuing...`);
-    }
-  }
-
-  console.log('✅ Cloud Run domains setup completed!');
-}
-
-/**
- * 批次新增多個域名
- */
-async function addMultipleDomains(domains: string[]): Promise<void> {
-  console.log(`\n📦 Adding ${domains.length} domains...\n`);
-
-  const config = await auth.getProjectConfig();
-  const authorizedDomains = config.authorizedDomains || [];
-
-  const newDomains = [];
-  const existingDomains = [];
-
-  for (const domain of domains) {
-    if (authorizedDomains.includes(domain)) {
-      existingDomains.push(domain);
-    } else {
-      newDomains.push(domain);
-      authorizedDomains.push(domain);
-    }
-  }
-
-  if (existingDomains.length > 0) {
-    console.log(`⚠️  Already existing (${existingDomains.length}):`);
-    existingDomains.forEach(d => console.log(`   - ${d}`));
-    console.log('');
-  }
-
-  if (newDomains.length === 0) {
-    console.log('✅ All domains already exist.');
-    return;
-  }
-
-  try {
-    await auth.updateProjectConfig({
-      authorizedDomains,
-    });
-
-    console.log(`✅ Added ${newDomains.length} new domains:`);
-    newDomains.forEach(d => console.log(`   - ${d}`));
-    console.log(`\n📋 Total authorized domains now: ${authorizedDomains.length}\n`);
-  } catch (error) {
-    console.error('❌ Error adding domains:', error);
-    throw error;
-  }
-}
-
-// CLI 使用
-const isMainModule = import.meta.url === `file://${process.argv[1]}`;
-if (isMainModule) {
-  const args = process.argv.slice(2);
-
-  if (args.length === 0) {
-    console.log(`
-Usage:
-  # 列出所有授權域名
-  npx tsx admin-tools/manage-authorized-domains.ts --list
-
-  # 新增單個域名
-  npx tsx admin-tools/manage-authorized-domains.ts --add <domain>
-
-  # 移除域名
-  npx tsx admin-tools/manage-authorized-domains.ts --remove <domain>
-
-  # 新增所有 Cloud Run service domains
-  npx tsx admin-tools/manage-authorized-domains.ts --add-cloud-run
-
-Examples:
-  npx tsx admin-tools/manage-authorized-domains.ts --list
-  npx tsx admin-tools/manage-authorized-domains.ts --add botrun-j-53288a47-36186877499.asia-east1.run.app
-  npx tsx admin-tools/manage-authorized-domains.ts --remove old-domain.com
-  npx tsx admin-tools/manage-authorized-domains.ts --add-cloud-run
-`);
-    process.exit(1);
-  }
-
-  if (args[0] === '--list') {
-    listAuthorizedDomains()
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else if (args[0] === '--add') {
-    const domain = args[1];
-    if (!domain) {
-      console.error('❌ Error: Missing domain');
-      process.exit(1);
-    }
-    addAuthorizedDomain(domain)
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else if (args[0] === '--remove') {
-    const domain = args[1];
-    if (!domain) {
-      console.error('❌ Error: Missing domain');
-      process.exit(1);
-    }
-    removeAuthorizedDomain(domain)
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else if (args[0] === '--add-cloud-run') {
-    addCloudRunDomains()
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else {
-    console.error(`❌ Unknown command: ${args[0]}`);
-    process.exit(1);
-  }
-}
-
-export {
-  listAuthorizedDomains,
-  addAuthorizedDomain,
-  removeAuthorizedDomain,
-  addCloudRunDomains,
-  addMultipleDomains,
-};

package/botrun-c/api/admin-tools/manage-authorized-domains.ts.migration-bak

@@ -1,255 +0,0 @@
-#!/usr/bin/env node
-/**
- * 管理 Firebase Authentication 授權域名
- *
- * 使用方式：
- *   npx tsx admin-tools/manage-authorized-domains.ts --list
- *   npx tsx admin-tools/manage-authorized-domains.ts --add <domain>
- *   npx tsx admin-tools/manage-authorized-domains.ts --remove <domain>
- *   npx tsx admin-tools/manage-authorized-domains.ts --add-cloud-run
- */
-
-import admin from 'firebase-admin';
-
-// 初始化 Firebase Admin
-if (!admin.apps || admin.apps.length === 0) {
-  admin.initializeApp({
-    projectId: process.env.FIREBASE_PROJECT_ID || 'scoop-386004',
-  });
-}
-
-const auth = admin.auth();
-
-/**
- * 列出所有授權域名
- */
-async function listAuthorizedDomains(): Promise<void> {
-  try {
-    console.log('\n📋 Fetching authorized domains...\n');
-
-    const response = await auth.getProjectConfig();
-    const authorizedDomains = response.authorizedDomains || [];
-
-    console.log(`✅ Total authorized domains: ${authorizedDomains.length}\n`);
-
-    if (authorizedDomains.length === 0) {
-      console.log('No authorized domains configured.');
-      return;
-    }
-
-    authorizedDomains.forEach((domain, index) => {
-      console.log(`${index + 1}. ${domain}`);
-    });
-    console.log('');
-  } catch (error) {
-    console.error('❌ Error fetching authorized domains:', error);
-    throw error;
-  }
-}
-
-/**
- * 新增授權域名
- */
-async function addAuthorizedDomain(domain: string): Promise<void> {
-  try {
-    console.log(`\n🔧 Adding authorized domain: ${domain}\n`);
-
-    const config = await auth.getProjectConfig();
-    const authorizedDomains = config.authorizedDomains || [];
-
-    // 檢查是否已存在
-    if (authorizedDomains.includes(domain)) {
-      console.log(`⚠️  Domain already exists: ${domain}`);
-      return;
-    }
-
-    // 新增域名
-    authorizedDomains.push(domain);
-
-    await auth.updateProjectConfig({
-      authorizedDomains,
-    });
-
-    console.log(`✅ Domain added successfully: ${domain}`);
-    console.log(`\n📋 Updated authorized domains (${authorizedDomains.length} total):`);
-    authorizedDomains.forEach((d, index) => {
-      console.log(`   ${index + 1}. ${d}`);
-    });
-    console.log('');
-  } catch (error) {
-    console.error('❌ Error adding authorized domain:', error);
-    throw error;
-  }
-}
-
-/**
- * 移除授權域名
- */
-async function removeAuthorizedDomain(domain: string): Promise<void> {
-  try {
-    console.log(`\n🔧 Removing authorized domain: ${domain}\n`);
-
-    const config = await auth.getProjectConfig();
-    const authorizedDomains = config.authorizedDomains || [];
-
-    // 檢查是否存在
-    if (!authorizedDomains.includes(domain)) {
-      console.log(`⚠️  Domain not found: ${domain}`);
-      return;
-    }
-
-    // 移除域名
-    const updatedDomains = authorizedDomains.filter(d => d !== domain);
-
-    await auth.updateProjectConfig({
-      authorizedDomains: updatedDomains,
-    });
-
-    console.log(`✅ Domain removed successfully: ${domain}`);
-    console.log(`\n📋 Updated authorized domains (${updatedDomains.length} total):`);
-    updatedDomains.forEach((d, index) => {
-      console.log(`   ${index + 1}. ${d}`);
-    });
-    console.log('');
-  } catch (error) {
-    console.error('❌ Error removing authorized domain:', error);
-    throw error;
-  }
-}
-
-/**
- * 一次新增所有 Cloud Run service URLs
- */
-async function addCloudRunDomains(): Promise<void> {
-  const cloudRunDomains = [
-    'botrun-j-53288a47-36186877499.asia-east1.run.app',
-    'botrun-j-aee12461-36186877499.asia-east1.run.app',
-  ];
-
-  console.log('\n🚀 Adding all Cloud Run service domains...\n');
-
-  for (const domain of cloudRunDomains) {
-    try {
-      await addAuthorizedDomain(domain);
-    } catch (error) {
-      console.error(`Failed to add ${domain}, continuing...`);
-    }
-  }
-
-  console.log('✅ Cloud Run domains setup completed!');
-}
-
-/**
- * 批次新增多個域名
- */
-async function addMultipleDomains(domains: string[]): Promise<void> {
-  console.log(`\n📦 Adding ${domains.length} domains...\n`);
-
-  const config = await auth.getProjectConfig();
-  const authorizedDomains = config.authorizedDomains || [];
-
-  const newDomains = [];
-  const existingDomains = [];
-
-  for (const domain of domains) {
-    if (authorizedDomains.includes(domain)) {
-      existingDomains.push(domain);
-    } else {
-      newDomains.push(domain);
-      authorizedDomains.push(domain);
-    }
-  }
-
-  if (existingDomains.length > 0) {
-    console.log(`⚠️  Already existing (${existingDomains.length}):`);
-    existingDomains.forEach(d => console.log(`   - ${d}`));
-    console.log('');
-  }
-
-  if (newDomains.length === 0) {
-    console.log('✅ All domains already exist.');
-    return;
-  }
-
-  try {
-    await auth.updateProjectConfig({
-      authorizedDomains,
-    });
-
-    console.log(`✅ Added ${newDomains.length} new domains:`);
-    newDomains.forEach(d => console.log(`   - ${d}`));
-    console.log(`\n📋 Total authorized domains now: ${authorizedDomains.length}\n`);
-  } catch (error) {
-    console.error('❌ Error adding domains:', error);
-    throw error;
-  }
-}
-
-// CLI 使用
-const isMainModule = import.meta.url === `file://${process.argv[1]}`;
-if (isMainModule) {
-  const args = process.argv.slice(2);
-
-  if (args.length === 0) {
-    console.log(`
-Usage:
-  # 列出所有授權域名
-  npx tsx admin-tools/manage-authorized-domains.ts --list
-
-  # 新增單個域名
-  npx tsx admin-tools/manage-authorized-domains.ts --add <domain>
-
-  # 移除域名
-  npx tsx admin-tools/manage-authorized-domains.ts --remove <domain>
-
-  # 新增所有 Cloud Run service domains
-  npx tsx admin-tools/manage-authorized-domains.ts --add-cloud-run
-
-Examples:
-  npx tsx admin-tools/manage-authorized-domains.ts --list
-  npx tsx admin-tools/manage-authorized-domains.ts --add botrun-j-53288a47-36186877499.asia-east1.run.app
-  npx tsx admin-tools/manage-authorized-domains.ts --remove old-domain.com
-  npx tsx admin-tools/manage-authorized-domains.ts --add-cloud-run
-`);
-    process.exit(1);
-  }
-
-  if (args[0] === '--list') {
-    listAuthorizedDomains()
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else if (args[0] === '--add') {
-    const domain = args[1];
-    if (!domain) {
-      console.error('❌ Error: Missing domain');
-      process.exit(1);
-    }
-    addAuthorizedDomain(domain)
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else if (args[0] === '--remove') {
-    const domain = args[1];
-    if (!domain) {
-      console.error('❌ Error: Missing domain');
-      process.exit(1);
-    }
-    removeAuthorizedDomain(domain)
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else if (args[0] === '--add-cloud-run') {
-    addCloudRunDomains()
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else {
-    console.error(`❌ Unknown command: ${args[0]}`);
-    process.exit(1);
-  }
-}
-
-export {
-  listAuthorizedDomains,
-  addAuthorizedDomain,
-  removeAuthorizedDomain,
-  addCloudRunDomains,
-  addMultipleDomains,
-};

package/botrun-c/api/admin-tools/setup-custom-claims.ts.migration-bak

@@ -1,155 +0,0 @@
-#!/usr/bin/env node
-/**
- * 設定 Firebase Custom Claims
- * 用於為使用者設定 allowedService 權限
- *
- * 使用方式：
- *   npx tsx src/setup-custom-claims.ts <email> <service-hash>
- *   例如：npx tsx src/setup-custom-claims.ts bohachu@gmail.com 53288a47
- */
-
-import admin from 'firebase-admin';
-
-// 初始化 Firebase Admin (如果尚未初始化)
-if (!admin.apps || admin.apps.length === 0) {
-  admin.initializeApp({
-    projectId: process.env.FIREBASE_PROJECT_ID || 'scoop-386004',
-  });
-}
-
-interface CustomClaims {
-  allowedService: string;
-  role: string;
-  bucketHash: string;
-}
-
-/**
- * 為使用者設定 Custom Claims
- */
-async function setCustomClaims(email: string, serviceHash: string): Promise<void> {
-  try {
-    console.log(`\n🔧 Setting custom claims for: ${email}`);
-    console.log(`   Service: botrun-j-${serviceHash}`);
-
-    // 檢查使用者是否存在
-    let user;
-    try {
-      user = await admin.auth().getUserByEmail(email);
-      console.log(`✅ User found: ${user.uid}`);
-    } catch (error) {
-      console.error(`❌ User not found: ${email}`);
-      console.log(`   Please ensure the user has logged in at least once.`);
-      throw error;
-    }
-
-    // 設定 Custom Claims
-    const claims: CustomClaims = {
-      allowedService: `botrun-j-${serviceHash}`,
-      role: 'doctor',
-      bucketHash: serviceHash,
-    };
-
-    await admin.auth().setCustomUserClaims(user.uid, claims);
-    console.log(`✅ Custom claims set successfully`);
-    console.log(`   Claims:`, JSON.stringify(claims, null, 2));
-
-    // 驗證設定
-    const updatedUser = await admin.auth().getUser(user.uid);
-    console.log(`\n✅ Verification - Current custom claims:`);
-    console.log(JSON.stringify(updatedUser.customClaims, null, 2));
-
-    console.log(`\n⚠️  Note: User needs to re-login or refresh token to see the new claims.`);
-  } catch (error) {
-    console.error(`❌ Error setting custom claims:`, error);
-    throw error;
-  }
-}
-
-/**
- * 批次設定多個使用者的 Custom Claims
- */
-async function batchSetCustomClaims(users: Array<{ email: string; serviceHash: string }>): Promise<void> {
-  console.log(`\n📦 Batch setting custom claims for ${users.length} users...\n`);
-
-  for (const user of users) {
-    try {
-      await setCustomClaims(user.email, user.serviceHash);
-      console.log(`\n${'─'.repeat(60)}\n`);
-    } catch (error) {
-      console.error(`Failed to set claims for ${user.email}, continuing...`);
-    }
-  }
-
-  console.log(`\n✅ Batch setup completed!`);
-}
-
-/**
- * 列出使用者的 Custom Claims
- */
-async function listCustomClaims(email: string): Promise<void> {
-  try {
-    const user = await admin.auth().getUserByEmail(email);
-    console.log(`\n👤 User: ${email}`);
-    console.log(`   UID: ${user.uid}`);
-    console.log(`   Custom Claims:`);
-    console.log(JSON.stringify(user.customClaims, null, 2));
-  } catch (error) {
-    console.error(`❌ Error fetching user:`, error);
-    throw error;
-  }
-}
-
-// CLI 使用 (ES modules 環境)
-const isMainModule = import.meta.url === `file://${process.argv[1]}`;
-if (isMainModule) {
-  const args = process.argv.slice(2);
-
-  if (args.length === 0) {
-    console.log(`
-Usage:
-  # 設定單一使用者
-  npx tsx src/setup-custom-claims.ts <email> <service-hash>
-
-  # 查看使用者的 claims
-  npx tsx src/setup-custom-claims.ts --list <email>
-
-  # 批次設定（使用預設的兩個使用者）
-  npx tsx src/setup-custom-claims.ts --batch
-
-Examples:
-  npx tsx src/setup-custom-claims.ts bohachu@gmail.com 53288a47
-  npx tsx src/setup-custom-claims.ts --list bohachu@gmail.com
-  npx tsx src/setup-custom-claims.ts --batch
-`);
-    process.exit(1);
-  }
-
-  if (args[0] === '--list') {
-    listCustomClaims(args[1])
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else if (args[0] === '--batch') {
-    // 預設的兩個使用者
-    const defaultUsers = [
-      { email: 'bohachu@gmail.com', serviceHash: '53288a47' },
-      { email: 'cbh@cameo.tw', serviceHash: 'aee12461' },
-    ];
-    batchSetCustomClaims(defaultUsers)
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  } else {
-    const email = args[0];
-    const serviceHash = args[1];
-
-    if (!email || !serviceHash) {
-      console.error('❌ Error: Missing email or service-hash');
-      process.exit(1);
-    }
-
-    setCustomClaims(email, serviceHash)
-      .then(() => process.exit(0))
-      .catch(() => process.exit(1));
-  }
-}
-
-export { setCustomClaims, batchSetCustomClaims, listCustomClaims };