Configuring access rights in the CRM Super Admin

apps/api/prisma/seed.ts

@@ -44,9 +44,19 @@ async function seedPlatformAdmin() {
     return;
   }
 
+  const passwordHash = await bcrypt.hash(password, 10);
   const existingByMobile = await prisma.platformAdmin.findUnique({ where: { mobile } });
   if (existingByMobile) {
-    console.log('Platform admin exists:', mobile);
+    await prisma.platformAdmin.update({
+      where: { id: existingByMobile.id },
+      data: {
+        passwordHash,
+        fullName: envName,
+        isActive: true,
+        ...(email ? { email } : {}),
+      },
+    });
+    console.log('Platform admin password refreshed:', mobile);
     return;
   }
   if (email) {
@@ -54,14 +64,38 @@ async function seedPlatformAdmin() {
     if (existingByEmail) {
       await prisma.platformAdmin.update({
         where: { id: existingByEmail.id },
-        data: { mobile, ...(envName ? { fullName: envName } : {}) },
+        data: {
+          mobile,
+          passwordHash,
+          fullName: envName,
+          isActive: true,
+        },
       });
-      console.log('Platform admin linked mobile:', mobile, '→', email);
+      console.log('Platform admin linked mobile + password refreshed:', mobile, '→', email);
       return;
     }
   }
 
-  const passwordHash = await bcrypt.hash(password, 10);
+  const orphans = await prisma.platformAdmin.findMany({
+    where: { mobile: null },
+    take: 2,
+  });
+  if (orphans.length === 1) {
+    const orphan = orphans[0]!;
+    await prisma.platformAdmin.update({
+      where: { id: orphan.id },
+      data: {
+        mobile,
+        passwordHash,
+        fullName: envName,
+        isActive: true,
+        ...(email ? { email } : {}),
+      },
+    });
+    console.log('Platform admin orphan linked mobile:', mobile);
+    return;
+  }
+
   await prisma.platformAdmin.create({
     data: {
       mobile,