create_admin.js

// create_admin.js (ESM) — matches server.js (name/hash/role in ./data.sqlite)
import sqlite3 from "sqlite3";
import crypto from "crypto";
import path from "node:path";
import { fileURLToPath } from "node:url";

// --- paths ---
const __filename = fileURLToPath(import.meta.url);
const __dirname = path.dirname(__filename);
const DB_PATH = path.join(__dirname, "data.sqlite"); // << same file as server.js

// --- config (edit as needed or pass via env/CLI) ---
const ADMIN_NAME = process.env.ADMIN_NAME || "admin";
const ADMIN_PASS = process.env.ADMIN_PASS || "admintest";
const ADMIN_ROLE = process.env.ADMIN_ROLE || "admin";

// --- hash must match server.js makeHash(name, pass) ---
function makeHash(name, pass) {
  return crypto.createHash("sha256").update(String(name) + String(pass)).digest("hex");
}

async function run() {
  const db = new sqlite3.Database(DB_PATH);

  // Ensure table exists with same schema as server.js
  await new Promise((resolve, reject) => {
    db.run(
      `
      CREATE TABLE IF NOT EXISTS users (
        id   INTEGER PRIMARY KEY AUTOINCREMENT,
        name TEXT NOT NULL UNIQUE,
        hash TEXT NOT NULL,
        role TEXT NOT NULL DEFAULT 'user'
      );
      `,
      (err) => (err ? reject(err) : resolve())
    );
  });

  const hash = makeHash(ADMIN_NAME.trim(), ADMIN_PASS.trim());

  // Insert admin (unique on name)
  await new Promise((resolve, reject) => {
    db.run(
      `INSERT INTO users (name, hash, role) VALUES (?, ?, ?)`,
      [ADMIN_NAME.trim(), hash, ADMIN_ROLE.trim()],
      function (err) {
        if (err) {
          // Constraint error likely means the user already exists
          if (err.code === "SQLITE_CONSTRAINT") {
            console.error(`⚠️ User "${ADMIN_NAME}" already exists.`);
            return resolve();
          }
          return reject(err);
        }
        console.log(`✅ Admin user created with id: ${this.lastID}`);
        resolve();
      }
    );
  });

  // Optional: show the created/updated user
  await new Promise((resolve, reject) => {
    db.get(
      `SELECT id, name, role FROM users WHERE name = ?`,
      [ADMIN_NAME.trim()],
      (err, row) => {
        if (err) return reject(err);
        if (row) console.log("👤", row);
        resolve();
      }
    );
  });

  db.close();
}

run().catch((e) => {
  console.error("Error:", e.message || e);
  process.exit(1);
});