gti
d21a9d1140
git-subtree-dir: fiscal git-subtree-mainline:d95165fc8fgit-subtree-split:102ba84500
62 lines
2.4 KiB
Python
62 lines
2.4 KiB
Python
"""Administrative CLI: register a new Agent directly against Postgres.
|
|
|
|
No new HTTP endpoint is needed for this — it's a one-time, operator-run
|
|
action per installation, run from wherever DATABASE_URL is reachable (the
|
|
Hub host, or a machine with network access to Postgres). Only the token's
|
|
SHA-256 hash is ever stored; the plaintext token is printed once and must
|
|
be copied into that installation's local Agent config immediately.
|
|
|
|
Usage:
|
|
python central/scripts/register_agent.py --company "Restaurante X" --name "loja-01"
|
|
"""
|
|
import argparse
|
|
import secrets
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
ROOT = Path(__file__).resolve().parents[2]
|
|
sys.path.insert(0, str(ROOT / "central"))
|
|
|
|
from sqlalchemy.orm import Session # noqa: E402
|
|
|
|
from app.auth import token_hash # noqa: E402
|
|
from app.db import engine # noqa: E402
|
|
from app.models import Agent, Tenant # noqa: E402
|
|
|
|
|
|
def register_agent(session, company_name, agent_name, token=None):
|
|
token = token or secrets.token_urlsafe(32)
|
|
tenant = session.query(Tenant).filter_by(name=company_name).one_or_none()
|
|
if tenant is None:
|
|
tenant = Tenant(name=company_name)
|
|
session.add(tenant)
|
|
session.flush()
|
|
agent = Agent(tenant_id=tenant.id, name=agent_name, token_hash=token_hash(token), enabled=True)
|
|
session.add(agent)
|
|
session.commit()
|
|
# Read everything the caller needs now, while the session is still open —
|
|
# session.commit() expires ORM attributes by default, and callers may use
|
|
# these values after the session (and its `with` block) has closed.
|
|
return {"id": agent.id, "tenant_id": tenant.id, "enabled": agent.enabled}, token
|
|
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser(description=__doc__)
|
|
parser.add_argument("--company", required=True, help="Company/tenant name (created if it doesn't exist)")
|
|
parser.add_argument("--name", required=True, help="Human-readable name for this Agent installation, e.g. 'loja-01'")
|
|
args = parser.parse_args()
|
|
|
|
with Session(engine) as session:
|
|
info, token = register_agent(session, args.company, args.name)
|
|
|
|
print("Agent registered. Copy these into that installation's local .env NOW — the token is shown only once:")
|
|
print(f" AGENT_ID={info['id']}")
|
|
print(f" AGENT_TOKEN={token}")
|
|
print(f" COMPANY_ID={info['tenant_id']}")
|
|
print(" FIREBIRD_WRITES=0")
|
|
print(f"enabled={info['enabled']}")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|