Program.cs

using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Http.Features;
using Microsoft.IdentityModel.Tokens;
using SalesAPI;
using System.Text;

OfficeOpenXml.ExcelPackage.LicenseContext = OfficeOpenXml.LicenseContext.NonCommercial;

// CLI: dotnet run -- verify-clients <path-to-xlsx>
if (args.Length >= 2 && args[0] == "verify-clients")
{
    var workbookPath = args[1];
  var tempDb = Path.Combine(Path.GetTempPath(), $"client-verify-{Guid.NewGuid():N}.db");
  try
  {
    var report = ExcelParser.ParseClientListWithReport(workbookPath);
    Console.WriteLine($"RAW={report.RawRowCount}");
    Console.WriteLine($"UNIQUE={report.UniqueSoldToCodeCount}");
    Console.WriteLine($"DUPLICATE_ROWS={report.DuplicateSoldToRowCount}");
    Console.WriteLine($"DUPLICATE_CODES={report.DuplicateSoldToCodes.Count}");
    Console.WriteLine($"INACTIVE={report.InactiveMarkedRows}");
    Console.WriteLine($"ACTIVE={report.UniqueActiveSoldToCodeCount}");
    Console.WriteLine($"PARSED={report.ParsedClientCount}");

    var db = new DatabaseHelper(tempDb);
    db.DeleteAllClients();
    foreach (var client in report.Clients)
      db.UpsertClient(client);

    var stored = db.GetActiveClientCount();
    var api = db.GetAllClients().Count;
    var repPortal = api;
    Console.WriteLine($"STORED={stored}");
    Console.WriteLine($"API={api}");
    Console.WriteLine($"REP={repPortal}");

    var integrity = ClientImportIntegrity.Validate(report, stored, api, repPortal);
    foreach (var w in integrity.Warnings)
      Console.WriteLine($"WARN={w}");
    foreach (var e in integrity.Errors)
      Console.WriteLine($"ERROR={e}");
    Console.WriteLine($"VALID={(integrity.IsValid ? 1 : 0)}");

    if (!integrity.IsValid)
      Environment.Exit(1);
    return;
  }
  finally
  {
    try { if (File.Exists(tempDb)) File.Delete(tempDb); } catch { }
  }
}

var builder = WebApplication.CreateBuilder(args);

builder.WebHost.UseUrls("http://0.0.0.0:4010");

// Add services to the container.
builder.Services.AddControllers();
builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen();

// Register DatabaseHelper as singleton with lazy initialization
var dbPath = "sales.db";
builder.Services.AddSingleton(_ => new DatabaseHelper(dbPath));
builder.Services.AddHostedService<BootstrapUsersHostedService>();

// Configure JWT Authentication
var jwtKey = builder.Configuration["Jwt:Key"] ?? "your-secret-key-min-32-characters-long";
var jwtIssuer = builder.Configuration["Jwt:Issuer"] ?? "SalesAPI";
var jwtAudience = builder.Configuration["Jwt:Audience"] ?? "SalesAPI";

builder.Services.AddAuthentication(options =>
{
    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
})
.AddJwtBearer(options =>
{
    options.TokenValidationParameters = new TokenValidationParameters
    {
        ValidateIssuer = true,
        ValidateAudience = true,
        ValidateLifetime = true,
        ValidateIssuerSigningKey = true,
        ValidIssuer = jwtIssuer,
        ValidAudience = jwtAudience,
        IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtKey))
    };
});

builder.Services.AddAuthorization();

// Configure CORS
builder.Services.AddCors(options =>
{
    options.AddPolicy("AllowAll", policy =>
    {
        policy.AllowAnyOrigin()
              .AllowAnyMethod()
              .AllowAnyHeader();
    });
});

var app = builder.Build();

// Configure the HTTP request pipeline.
app.UseSwagger();
app.UseSwaggerUI();

// Serve static files (HTML, CSS, JS)
app.UseDefaultFiles();
app.UseStaticFiles();

app.UseCors("AllowAll");

app.UseAuthentication();
app.UseAuthorization();

app.MapControllers();

// Fallback to index.html for SPA routing
app.MapFallbackToFile("index.html");

app.Run();