fix: import migration via web api body

scripts/spacetime-import-migration-json.mjs

@@ -4,7 +4,9 @@ import { readFile } from 'node:fs/promises';
 import path from 'node:path';
 import {
   assertReadableFile,
-  callSpacetimeProcedureAuto,
+  callSpacetimeProcedure,
+  callSpacetimeProcedureViaCli,
+  createSpacetimeWebIdentity,
   ensureProcedureOk,
   parseArgs,
 } from './spacetime-migration-common.mjs';
@@ -22,17 +24,13 @@ try {
     throw new Error(`迁移文件为空: ${inPath}`);
   }
 
-  const input = {
-    migration_json: migrationJson,
-    include_tables: options.includeTables,
-    replace_existing: options.replaceExisting === true,
-    dry_run: options.dryRun === true,
-  };
-  const result = await callSpacetimeProcedureAuto(
-    options,
-    'import_database_migration_from_file',
-    input,
-  );
+  const webOptions = await prepareWebImportOptions(options);
+  let result;
+  try {
+    result = await importMigrationJsonDirect(webOptions, migrationJson);
+  } finally {
+    await revokeTemporaryWebIdentity(webOptions);
+  }
   ensureProcedureOk(result);
 
   console.log(
@@ -46,6 +44,68 @@ try {
   process.exit(1);
 }
 
+async function prepareWebImportOptions(options) {
+  if (options.token) {
+    return { ...options, useHttp: true };
+  }
+
+  const identity = await createSpacetimeWebIdentity(options);
+  console.log(
+    `[spacetime:migration:import] 已通过 Web API 创建临时 identity: ${identity.identity}`,
+  );
+
+  const authorizeResult = await callSpacetimeProcedureViaCli(
+    options,
+    'authorize_database_migration_operator',
+    {
+      bootstrap_secret: options.bootstrapSecret || '',
+      operator_identity_hex: identity.identity,
+      note: options.note || 'temporary web api migration import',
+    },
+  );
+  ensureProcedureOk(authorizeResult);
+  console.log(`[spacetime:migration:import] 已授权临时 Web API identity`);
+
+  return {
+    ...options,
+    token: identity.token,
+    temporaryWebIdentity: identity.identity,
+    useHttp: true,
+  };
+}
+
+async function importMigrationJsonDirect(options, migrationJson) {
+  const input = {
+    migration_json: migrationJson,
+    include_tables: options.includeTables,
+    replace_existing: options.replaceExisting === true,
+    dry_run: options.dryRun === true,
+  };
+  return callSpacetimeProcedure(options, 'import_database_migration_from_file', input);
+}
+
+async function revokeTemporaryWebIdentity(options) {
+  if (!options.temporaryWebIdentity) {
+    return;
+  }
+
+  try {
+    const revokeResult = await callSpacetimeProcedure(
+      options,
+      'revoke_database_migration_operator',
+      { operator_identity_hex: options.temporaryWebIdentity },
+    );
+    ensureProcedureOk(revokeResult);
+    console.log(`[spacetime:migration:import] 已撤销临时 Web API identity`);
+  } catch (error) {
+    console.warn(
+      `[spacetime:migration:import] 撤销临时 Web API identity 失败: ${
+        error instanceof Error ? error.message : String(error)
+      }`,
+    );
+  }
+}
+
 function printTableStats(tableStats) {
   if (!Array.isArray(tableStats) || tableStats.length === 0) {
     return;