progmaweb/apps/api/Accounts/AccountCommand.cs, branch main The site and account service of Progmasoft: a Next.js frontend and an ASP.NET Core API. Provision the reserved accounts on the server 2026-10-29T12:35:06+00:00 Leitwolf11 2026-10-29T12:35:06+00:00 21b515565b73f86477afe436bb3588f3e5929443 Registration refuses the reserved names Progmasoft and Leitwolf, which are meant to be created by trusted operations tooling only, and that tooling did not exist: the Progmasoft account, the publisher of Progmasoft's Tazel plugins on ViGet, could not be created at all. - 'accounts provision-reserved <Name> <email>' runs with the configuration of the service, like the viget commands. It accepts only the reserved names, applies the rules of registration to the email address and the password, never replaces an existing account, and brings the account tables to the current schema first. - The password is read from the terminal without echo, twice, or from one line of standard input when it is not a terminal; it never appears on a command line or in the output. - AccountNamePolicy.TryNormalizeReserved checks a reserved name; TryNormalize, which registration uses, still refuses it. Tests cover a reserved account created and signing in with its password, a name that is not reserved, two different passwords, a weak password, an existing account and the usage line. ops/README.md shows the command with systemd-run --pty; docs/ACCOUNT-API.md points to it. 
Registration refuses the reserved names Progmasoft and Leitwolf, which are
meant to be created by trusted operations tooling only, and that tooling did
not exist: the Progmasoft account, the publisher of Progmasoft's Tazel
plugins on ViGet, could not be created at all.

- 'accounts provision-reserved <Name> <email>' runs with the configuration
  of the service, like the viget commands. It accepts only the reserved
  names, applies the rules of registration to the email address and the
  password, never replaces an existing account, and brings the account
  tables to the current schema first.
- The password is read from the terminal without echo, twice, or from one
  line of standard input when it is not a terminal; it never appears on a
  command line or in the output.
- AccountNamePolicy.TryNormalizeReserved checks a reserved name;
  TryNormalize, which registration uses, still refuses it.

Tests cover a reserved account created and signing in with its password,
a name that is not reserved, two different passwords, a weak password, an
existing account and the usage line. ops/README.md shows the command with
systemd-run --pty; docs/ACCOUNT-API.md points to it.