using ErsatzTV.Core;

namespace ErsatzTV.Application.Auth;

/// <summary>
///     Recovery/bootstrap path: (re)sets the local admin from configuration (env
///     <c>Auth:LocalAdmin:Username</c>/<c>Password</c>). Overwrites any existing credential and rotates the
///     stamp (revoking sessions), so an operator who is locked out can reset by setting the env and
///     restarting. Runs at startup only when a password is configured.
/// </summary>
public record SeedLocalAdminFromEnvironment(string Username, string Password) : IRequest<Either<BaseError, Unit>>;