xiaoshu-app/scripts/migrate-launch-fixes.mjs

#!/usr/bin/env node
// --plan is offline. --apply is a publisher action and requires a backup plus a real operator session.
import {readFile} from 'node:fs/promises';import {randomUUID} from 'node:crypto';
const files=['account-security.sql','payroll-integrity.sql','payroll-cutoff.sql','account-deletion.sql'];
const sql=(await Promise.all(files.map(name=>readFile(new URL('./sql/'+name,import.meta.url),'utf8')))).join('\n');
const fields={legacyPasswordMigrationAllowed:{type:'Boolean'},credentialRevision:{type:'Number'},credentialExpectedRevision:{type:'Number'},credentialMigrationAttempt:{type:'Boolean'},passwordResetRequired:{type:'Boolean'}};
if(!process.argv.includes('--apply')){console.log(JSON.stringify({apply:false,files,parseClass:'_User',fields:Object.keys(fields),requires:'Back up database, apply existing payroll and direct-sync prerequisites, then run --apply before publishing gateways.'},null,2));process.exit(0);}
const master=process.env.XIAOSHU_MASTER_KEY,token=process.env.XIAOSHU_MIGRATION_OPERATOR_TOKEN;
if(!master||!token)throw Error('Require XIAOSHU_MASTER_KEY and XIAOSHU_MIGRATION_OPERATOR_TOKEN in environment');
const base=(process.env.XIAOSHU_PARSE_URL||'https://server.xiaoshu.pro/parse').replace(/\/$/,''),app=process.env.XIAOSHU_PARSE_APP_ID||'7pIbDBJmKx_main';
async function api(path,method='GET',body,session=false){const r=await fetch(base+path,{method,headers:{'Content-Type':'application/json','X-Parse-Application-Id':app,...(session?{'X-Parse-Session-Token':token}:{'X-Parse-Master-Key':master})},body:body?JSON.stringify(body):undefined,signal:AbortSignal.timeout(120000)});const data=await r.json();if(!r.ok)throw Error('Migration API failed ('+r.status+')');return data;}
const user=await api('/users/me','GET',undefined,true);if(user.isDisabled||user.isDeleted||!(user.roles||[]).includes('super-admin'))throw Error('An active super-admin session is required');
const schema=await api('/schemas/_User');const missing=Object.fromEntries(Object.entries(fields).filter(([key])=>!schema.fields[key]));if(Object.keys(missing).length)await api('/schemas/_User','PUT',{fields:missing});
const path='xiaoshu/system/launch-fixes-'+randomUUID();let id;
try{const code=`async function handler(request,response){if(request.user?.id!==${JSON.stringify(user.objectId)})return response.status(403).json({success:false});try{await Psql.tx(t=>t.none(${JSON.stringify(sql)}));return response.json({success:true});}catch(e){return response.status(500).json({success:false,message:String(e.message)});}}`;
 id=(await api('/classes/Function','POST',{name:path,path,code,type:'standalone',enabled:true,params:[],paramList:[],respType:'json'})).objectId;
 const r=await fetch(base.replace(/\/parse$/,'/api/functions/')+path,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({token,params:{}}),signal:AbortSignal.timeout(120000)});const result=await r.json();if(!r.ok||!result.success)throw Error(result.message||'Migration failed');console.log(JSON.stringify({applied:true,files}));
}finally{if(id)await api('/classes/Function/'+id,'DELETE');}