fix(bot): restrict setup admin bootstrap

packages/application/src/household-admin-service.test.ts

@@ -92,6 +92,8 @@ function createRepositoryStub() {
       return record
     },
     getHouseholdMember: async (_householdId, telegramUserId) => members.get(telegramUserId) ?? null,
+    listHouseholdMembers: async (householdId) =>
+      [...members.values()].filter((member) => member.householdId === householdId),
     listHouseholdMembersByTelegramUserId: async (telegramUserId) =>
       [...members.values()].filter((member) => member.telegramUserId === telegramUserId),
     listPendingHouseholdMembers: async () => [...pendingMembers.values()],

packages/application/src/household-onboarding-service.test.ts

@@ -101,6 +101,9 @@ function createRepositoryStub() {
     async getHouseholdMember(_householdId, telegramUserId) {
       return members.get(telegramUserId) ?? null
     },
+    async listHouseholdMembers(householdId) {
+      return [...members.values()].filter((member) => member.householdId === householdId)
+    },
     async listHouseholdMembersByTelegramUserId(telegramUserId) {
       const member = members.get(telegramUserId)
       return member ? [member] : []

packages/application/src/household-setup-service.test.ts

@@ -176,6 +176,10 @@ function createRepositoryStub() {
       return members.get(`${householdId}:${telegramUserId}`) ?? null
     },
 
+    async listHouseholdMembers(householdId) {
+      return [...members.values()].filter((member) => member.householdId === householdId)
+    },
+
     async listHouseholdMembersByTelegramUserId(telegramUserId) {
       return [...members.values()].filter((member) => member.telegramUserId === telegramUserId)
     },
@@ -240,6 +244,77 @@ describe('createHouseholdSetupService', () => {
     })
   })
 
+  test('ensures the actor becomes admin when rerunning setup for an existing household with no admins', async () => {
+    const { repository } = createRepositoryStub()
+    const service = createHouseholdSetupService(repository)
+
+    await service.setupGroupChat({
+      actorIsAdmin: true,
+      telegramChatId: '-100123',
+      telegramChatType: 'supergroup',
+      title: 'Kojori House'
+    })
+
+    const result = await service.setupGroupChat({
+      actorIsAdmin: true,
+      actorTelegramUserId: '77',
+      actorDisplayName: 'Mia',
+      telegramChatId: '-100123',
+      telegramChatType: 'supergroup',
+      title: 'Kojori House'
+    })
+
+    expect(result.status).toBe('existing')
+    if (result.status !== 'existing') {
+      return
+    }
+
+    const admin = await repository.getHouseholdMember(result.household.householdId, '77')
+    expect(admin).toEqual({
+      id: 'member-77',
+      householdId: result.household.householdId,
+      telegramUserId: '77',
+      displayName: 'Mia',
+      isAdmin: true
+    })
+  })
+
+  test('does not grant admin when rerunning setup for an existing household that already has admins', async () => {
+    const { repository } = createRepositoryStub()
+    const service = createHouseholdSetupService(repository)
+
+    const created = await service.setupGroupChat({
+      actorIsAdmin: true,
+      actorTelegramUserId: '42',
+      actorDisplayName: 'Stan',
+      telegramChatId: '-100123',
+      telegramChatType: 'supergroup',
+      title: 'Kojori House'
+    })
+
+    expect(created.status).toBe('created')
+    if (created.status !== 'created') {
+      return
+    }
+
+    const result = await service.setupGroupChat({
+      actorIsAdmin: true,
+      actorTelegramUserId: '77',
+      actorDisplayName: 'Mia',
+      telegramChatId: '-100123',
+      telegramChatType: 'supergroup',
+      title: 'Kojori House'
+    })
+
+    expect(result.status).toBe('existing')
+    if (result.status !== 'existing') {
+      return
+    }
+
+    const admin = await repository.getHouseholdMember(result.household.householdId, '77')
+    expect(admin).toBeNull()
+  })
+
   test('rejects setup when the actor is not a group admin', async () => {
     const { repository } = createRepositoryStub()
     const service = createHouseholdSetupService(repository)

packages/application/src/household-setup-service.ts

@@ -85,13 +85,20 @@ export function createHouseholdSetupService(
           : {})
       })
 
-      if (registered.status === 'created' && input.actorTelegramUserId && input.actorDisplayName) {
-        await repository.ensureHouseholdMember({
-          householdId: registered.household.householdId,
-          telegramUserId: input.actorTelegramUserId,
-          displayName: input.actorDisplayName,
-          isAdmin: true
-        })
+      if (input.actorTelegramUserId && input.actorDisplayName) {
+        const existingMembers = await repository.listHouseholdMembers(
+          registered.household.householdId
+        )
+        const hasAdmin = existingMembers.some((member) => member.isAdmin)
+
+        if (registered.status === 'created' || !hasAdmin) {
+          await repository.ensureHouseholdMember({
+            householdId: registered.household.householdId,
+            telegramUserId: input.actorTelegramUserId,
+            displayName: input.actorDisplayName,
+            isAdmin: true
+          })
+        }
       }
 
       return {

packages/application/src/miniapp-admin-service.test.ts

@@ -53,6 +53,7 @@ function repository(): HouseholdConfigurationRepository {
       isAdmin: input.isAdmin === true
     }),
     getHouseholdMember: async () => null,
+    listHouseholdMembers: async () => [],
     listHouseholdMembersByTelegramUserId: async () => [],
     listPendingHouseholdMembers: async () => [
       {