사용자 테넌트 소속 데이터 정리

backend/cmd/adminctl/main.go

@@ -28,6 +28,10 @@ type createSuperAdminConfig struct {
 	UpdatePassword bool
 }
 
+type clearOrphanUserTenantMembershipsConfig struct {
+	DryRun bool
+}
+
 func main() {
 	loadEnv()
 	logger.Init(logger.Config{
@@ -47,6 +51,11 @@ func main() {
 			slog.Error("create-super-admin failed", "error", err)
 			os.Exit(1)
 		}
+	case "clear-orphan-user-tenant-memberships":
+		if err := runClearOrphanUserTenantMemberships(os.Args[2:]); err != nil {
+			slog.Error("clear-orphan-user-tenant-memberships failed", "error", err)
+			os.Exit(1)
+		}
 	default:
 		printUsage()
 		os.Exit(2)
@@ -107,6 +116,37 @@ func runCreateSuperAdmin(args []string) error {
 	return nil
 }
 
+func runClearOrphanUserTenantMemberships(args []string) error {
+	config, err := resolveClearOrphanUserTenantMembershipsConfig(args)
+	if err != nil {
+		return err
+	}
+
+	db, err := openDB()
+	if err != nil {
+		return err
+	}
+
+	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	defer cancel()
+
+	if config.DryRun {
+		count, err := repository.CountOrphanUserTenantMemberships(ctx, db)
+		if err != nil {
+			return err
+		}
+		fmt.Printf("orphan user tenant memberships dry-run: count=%d\n", count)
+		return nil
+	}
+
+	affected, err := repository.ClearOrphanUserTenantMemberships(ctx, db)
+	if err != nil {
+		return err
+	}
+	fmt.Printf("orphan user tenant memberships cleared: count=%d\n", affected)
+	return nil
+}
+
 func resolveCreateSuperAdminConfig(args []string) (createSuperAdminConfig, error) {
 	fs := flag.NewFlagSet("create-super-admin", flag.ContinueOnError)
 	fs.SetOutput(os.Stderr)
@@ -135,6 +175,19 @@ func resolveCreateSuperAdminConfig(args []string) (createSuperAdminConfig, error
 	return config, nil
 }
 
+func resolveClearOrphanUserTenantMembershipsConfig(args []string) (clearOrphanUserTenantMembershipsConfig, error) {
+	fs := flag.NewFlagSet("clear-orphan-user-tenant-memberships", flag.ContinueOnError)
+	fs.SetOutput(os.Stderr)
+
+	config := clearOrphanUserTenantMembershipsConfig{}
+	fs.BoolVar(&config.DryRun, "dry-run", false, "count orphan memberships without updating users")
+
+	if err := fs.Parse(args); err != nil {
+		return config, err
+	}
+	return config, nil
+}
+
 func openDB() (*gorm.DB, error) {
 	dsn := fmt.Sprintf(
 		"host=%s user=%s password=%s dbname=%s port=%s sslmode=disable TimeZone=Asia/Seoul",
@@ -173,4 +226,5 @@ func getenv(key string, fallback string) string {
 func printUsage() {
 	fmt.Fprintln(os.Stderr, "usage:")
 	fmt.Fprintln(os.Stderr, "  adminctl create-super-admin [--email EMAIL] [--password PASSWORD] [--name NAME] [--update-password]")
+	fmt.Fprintln(os.Stderr, "  adminctl clear-orphan-user-tenant-memberships [--dry-run]")
 }

backend/cmd/adminctl/main_test.go

@@ -60,3 +60,14 @@ func TestResolveCreateSuperAdminConfigRequiresEmailAndPassword(t *testing.T) {
 		t.Fatal("expected error")
 	}
 }
+
+func TestResolveClearOrphanUserTenantMembershipsConfig(t *testing.T) {
+	config, err := resolveClearOrphanUserTenantMembershipsConfig([]string{"--dry-run"})
+	if err != nil {
+		t.Fatalf("resolveClearOrphanUserTenantMembershipsConfig returned error: %v", err)
+	}
+
+	if !config.DryRun {
+		t.Fatal("dry-run flag was not set")
+	}
+}