Add deployment

VigilCareClinicalAPI/Commands/CreateAdminCommand.cs

@@ -0,0 +1,81 @@
+using Microsoft.EntityFrameworkCore;
+
+/// <summary>
+/// One-shot bootstrap: creates the first Admin user when the ClinicalUsers
+/// table is empty. Refuses to run if any user already exists so it cannot
+/// be used as a backdoor after the system is in use.
+///
+/// Usage:
+///   dotnet VigilCareClinicalAPI.dll create-admin --username &lt;u&gt; --password &lt;p&gt; --display-name "&lt;n&gt;"
+/// </summary>
+public static class CreateAdminCommand
+{
+    public static async Task<int> RunAsync(IServiceProvider services, string[] args)
+    {
+        var username = RequireArg(args, "--username");
+        var password = RequireArg(args, "--password");
+        var displayName = RequireArg(args, "--display-name");
+
+        if (username.Length > 100)
+        {
+            Console.Error.WriteLine("Username must be 100 characters or fewer.");
+            return 1;
+        }
+
+        if (password.Length < 8)
+        {
+            Console.Error.WriteLine("Password must be at least 8 characters.");
+            return 1;
+        }
+
+        if (displayName.Length > 200)
+        {
+            Console.Error.WriteLine("Display name must be 200 characters or fewer.");
+            return 1;
+        }
+
+        using var scope = services.CreateScope();
+        var db = scope.ServiceProvider.GetRequiredService<AppDbContext>();
+
+        if (await db.ClinicalUsers.AnyAsync())
+        {
+            Console.Error.WriteLine(
+                "Refusing to create admin: ClinicalUsers already contains at least one row. " +
+                "create-admin is a one-shot bootstrap and cannot be used as a backdoor.");
+            return 1;
+        }
+
+        var user = new ClinicalUser
+        {
+            Id = Guid.NewGuid(),
+            Username = username.Trim(),
+            PasswordHash = BCrypt.Net.BCrypt.HashPassword(password),
+            DisplayName = displayName.Trim(),
+            Role = ClinicalRole.Admin,
+            IsActive = true,
+            CreatedAt = DateTimeOffset.UtcNow,
+        };
+
+        db.ClinicalUsers.Add(user);
+        await db.SaveChangesAsync();
+
+        Console.WriteLine($"Created admin user '{user.Username}' (id={user.Id}).");
+        return 0;
+    }
+
+    private static string RequireArg(string[] args, string name)
+    {
+        for (var i = 0; i < args.Length - 1; i++)
+        {
+            if (string.Equals(args[i], name, StringComparison.OrdinalIgnoreCase))
+            {
+                var value = args[i + 1];
+                if (string.IsNullOrWhiteSpace(value) || value.StartsWith("--", StringComparison.Ordinal))
+                    break;
+                return value;
+            }
+        }
+
+        throw new ArgumentException($"Missing required argument: {name}");
+    }
+}