feat: (PBAC) Add db seed (calcom#22704)

* add a seed for pbac

* remove readme

* add team feature

* add seed script to json

* log seed detials

Author: sean-brydon

packages/prisma/cleanup-pbac.ts

@@ -0,0 +1,110 @@
+#!/usr/bin/env tsx
+
+/**
+ * Cleanup script to remove PBAC demo organization and related data
+ * Run with: npx tsx packages/prisma/cleanup-pbac.ts
+ */
+import prisma from ".";
+
+async function cleanupPBACOrganization() {
+  console.log("🧹 Cleaning up PBAC Demo Organization...");
+
+  try {
+    // Find the organization
+    const organization = await prisma.team.findFirst({
+      where: {
+        slug: "pbac-demo-org",
+        isOrganization: true,
+      },
+      include: {
+        members: true,
+        roles: true,
+        children: true, // teams within the organization
+      },
+    });
+
+    if (!organization) {
+      console.log("ℹ️  PBAC Demo Organization not found, nothing to clean up");
+      return;
+    }
+
+    console.log(`Found organization: ${organization.name} (ID: ${organization.id})`);
+
+    // Delete users created for PBAC demo
+    const pbacUserEmails = [
+      "owner@pbac-demo.com",
+      "events@pbac-demo.com",
+      "analytics@pbac-demo.com",
+      "coordinator@pbac-demo.com",
+      "support@pbac-demo.com",
+    ];
+
+    const pbacUsers = await prisma.user.findMany({
+      where: {
+        email: { in: pbacUserEmails },
+      },
+    });
+
+    console.log(`Found ${pbacUsers.length} PBAC users to delete`);
+
+    // Delete users (this will cascade delete memberships, profiles, etc.)
+    for (const user of pbacUsers) {
+      await prisma.user.delete({
+        where: { id: user.id },
+      });
+      console.log(`  ✅ Deleted user: ${user.email}`);
+    }
+
+    // Delete custom roles (this will cascade delete permissions)
+    for (const role of organization.roles) {
+      await prisma.role.delete({
+        where: { id: role.id },
+      });
+      console.log(`  ✅ Deleted role: ${role.name}`);
+    }
+
+    // Delete child teams
+    for (const team of organization.children) {
+      await prisma.team.delete({
+        where: { id: team.id },
+      });
+      console.log(`  ✅ Deleted team: ${team.name}`);
+    }
+
+    // Delete the organization (this will cascade delete organization settings)
+    await prisma.team.delete({
+      where: { id: organization.id },
+    });
+
+    console.log(`  ✅ Deleted organization: ${organization.name}`);
+
+    // Clean up any temp org redirects
+    await prisma.tempOrgRedirect.deleteMany({
+      where: {
+        OR: [
+          { from: { in: ["owner", "events", "analytics", "coordinator", "support"] } },
+          { toUrl: { contains: "pbac-demo-org" } },
+        ],
+      },
+    });
+
+    console.log("  ✅ Cleaned up temp org redirects");
+
+    console.log("\n🎉 PBAC Demo Organization cleanup completed successfully!");
+  } catch (error) {
+    console.error("❌ Error during cleanup:", error);
+    throw error;
+  } finally {
+    await prisma.$disconnect();
+  }
+}
+
+cleanupPBACOrganization()
+  .then(() => {
+    console.log("✅ Cleanup completed!");
+    process.exit(0);
+  })
+  .catch((error) => {
+    console.error("❌ Cleanup failed:", error);
+    process.exit(1);
+  });

packages/prisma/package.json

@@ -18,7 +18,8 @@
     "post-install": "yarn generate-schemas",
     "seed-app-store": "ts-node --transpile-only ./seed-app-store.ts",
     "delete-app": "ts-node --transpile-only ./delete-app.ts",
-    "seed-insights": "ts-node --transpile-only ./seed-insights.ts"
+    "seed-insights": "ts-node --transpile-only ./seed-insights.ts",
+    "seed-pbac": "ts-node --transpile-only ./seed-pbac-organization.ts"
   },
   "devDependencies": {
     "@faker-js/faker": "9.2.0",

packages/prisma/seed-pbac-only.ts

@@ -0,0 +1,47 @@
+#!/usr/bin/env tsx
+
+/**
+ * Standalone script to create a PBAC-enabled organization with custom roles
+ * Run with: npx tsx packages/prisma/seed-pbac-only.ts
+ */
+import { createPBACOrganization } from "./seed-pbac-organization";
+
+async function main() {
+  console.log("🚀 Starting PBAC organization seed...");
+
+  try {
+    const result = await createPBACOrganization();
+
+    console.log("\n🎉 PBAC Organization created successfully!");
+    console.log("\n📋 Summary:");
+    console.log(`Organization: ${result.organization.name} (${result.organization.slug})`);
+    console.log(`Custom Roles: ${Object.keys(result.customRoles).length}`);
+    console.log(`Users: ${result.users.length}`);
+    console.log(`Team: ${result.team?.name || "None"} (${result.team?.slug || "N/A"})`);
+
+    console.log("\n🔐 Login Credentials:");
+    result.users.forEach(({ user, role, customRole }) => {
+      const roleText = customRole ? `${role} + ${customRole}` : role;
+      console.log(`  - ${user.name}: ${user.email} / password (${roleText})`);
+    });
+
+    console.log(`\n🌐 Access URLs:`);
+    console.log(`Organization: ${process.env.NEXT_PUBLIC_WEBAPP_URL}/org/${result.organization.slug}`);
+    if (result.team) {
+      console.log(`Team: ${process.env.NEXT_PUBLIC_WEBAPP_URL}/team/${result.team.slug}`);
+    }
+  } catch (error) {
+    console.error("❌ Error creating PBAC organization:", error);
+    process.exit(1);
+  }
+}
+
+main()
+  .then(() => {
+    console.log("\n✅ Seed completed successfully!");
+    process.exit(0);
+  })
+  .catch((error) => {
+    console.error("❌ Seed failed:", error);
+    process.exit(1);
+  });