Feature: Add /seed/ endpoint for production data seeding

Author: AhmadMWaddah

config/urls.py

@@ -13,6 +13,7 @@
 from django.urls import include, path
 from django.views.generic.base import RedirectView, TemplateView
 from drf_spectacular.views import SpectacularAPIView, SpectacularSwaggerView
+import core.views as core_views
 
 urlpatterns = [
     # Admin
@@ -34,6 +35,8 @@
     path("", RedirectView.as_view(url="/accounts/dashboard/", permanent=False)),
     # Health Check (for monitoring)
     path("health/", TemplateView.as_view(template_name="health.html"), name="Health"),
+    # Seed endpoint (use token from SEED_TOKEN env var)
+    path("seed/", core_views.seed_endpoint, name="Seed"),
 ]
 
 if settings.DEBUG:

core/views.py

@@ -91,3 +91,34 @@ def wrapper(request, *args, **kwargs):
         return view_func(request, *args, **kwargs)
 
     return wrapper
+
+
+def seed_endpoint(request):
+    """
+    Seed endpoint for initial data setup in production.
+
+    Requires SEED_TOKEN env var to match ?token= query param.
+    """
+    from django.conf import settings
+
+    provided_token = request.GET.get("token", "")
+    expected_token = getattr(settings, "SEED_TOKEN", "")
+
+    if not expected_token:
+        return JsonResponse({"error": "Seed endpoint disabled - no SEED_TOKEN configured"}, status=403)
+
+    if provided_token != expected_token:
+        return JsonResponse({"error": "Invalid token"}, status=403)
+
+    # Run the seed command
+    from core.management.commands.seed_erp import Command as SeedCommand
+    from io import StringIO
+
+    output = StringIO()
+    try:
+        cmd = SeedCommand()
+        cmd(stdout=output, stderr=StringIO(), force=True)
+        result = output.getvalue()
+        return JsonResponse({"status": "success", "output": result})
+    except Exception as e:
+        return JsonResponse({"error": str(e)}, status=500)