Update intranet tools and voucher comparison

scripts/create_app_user.py

@@ -0,0 +1,72 @@
+#!/usr/bin/env python3
+import argparse
+from pathlib import Path
+import sys
+
+ROOT = Path(__file__).resolve().parents[1]
+sys.path.insert(0, str(ROOT))
+
+from main import engine, hash_password, init_db  # noqa: E402
+from sqlalchemy import text  # noqa: E402
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description="Create or update an intranet app user.")
+    parser.add_argument("username")
+    parser.add_argument("--password", required=True)
+    parser.add_argument("--display-name", default="")
+    parser.add_argument("--role", choices=["admin", "viewer"], default="viewer")
+    parser.add_argument("--inactive", action="store_true")
+    args = parser.parse_args()
+
+    init_db()
+    with engine.begin() as conn:
+        conn.execute(
+            text(
+                """
+                INSERT INTO app_users (
+                    username, password_hash, display_name, is_active, is_admin, created_at, updated_at
+                ) VALUES (
+                    :username, :password_hash, :display_name, :is_active, :is_admin,
+                    CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
+                )
+                ON CONFLICT(username) DO UPDATE SET
+                    password_hash = excluded.password_hash,
+                    display_name = excluded.display_name,
+                    is_active = excluded.is_active,
+                    is_admin = excluded.is_admin,
+                    updated_at = CURRENT_TIMESTAMP
+                """
+            ),
+            {
+                "username": args.username,
+                "password_hash": hash_password(args.password),
+                "display_name": args.display_name or args.username,
+                "is_active": 0 if args.inactive else 1,
+                "is_admin": 1 if args.role == "admin" else 0,
+            },
+        )
+        user_id = conn.execute(
+            text("SELECT id FROM app_users WHERE username = :username"),
+            {"username": args.username},
+        ).scalar_one()
+        role_id = conn.execute(
+            text("SELECT id FROM app_roles WHERE role_key = :role_key"),
+            {"role_key": args.role},
+        ).scalar_one()
+        conn.execute(text("DELETE FROM app_user_roles WHERE user_id = :user_id"), {"user_id": user_id})
+        conn.execute(
+            text(
+                """
+                INSERT OR IGNORE INTO app_user_roles (user_id, role_id, created_at)
+                VALUES (:user_id, :role_id, CURRENT_TIMESTAMP)
+                """
+            ),
+            {"user_id": user_id, "role_id": role_id},
+        )
+    print(f"ok: {args.username} ({args.role})")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())