Phase 1: auth, room CRUD, WebSocket chat, PWA frontend

Invite-only FastAPI + SQLAlchemy(async) + Postgres backend (session-cookie
auth via CLI-provisioned accounts, open-room CRUD, single-instance /ws/chat)
and a React + Vite PWA frontend (login, room list, chat view). Backend tests
pass against a local Postgres DB. See README.md and backend/README.md for
setup, and ARCHITECTURE.md for the full phased design.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

backend/app/cli.py

@@ -0,0 +1,53 @@
+"""Command-line user management.
+
+Public self-registration is disabled (invite-only site), so accounts are
+created by an operator running this script directly on the app server.
+"""
+
+import argparse
+import asyncio
+
+from pydantic import ValidationError
+
+from app.database import async_session_factory
+from app.schemas.user import UserCreate
+from app.services.auth_service import DuplicateUserError, register_user
+
+
+async def _create_user(username: str, email: str, password: str, is_admin: bool) -> None:
+    try:
+        data = UserCreate(username=username, email=email, password=password)
+    except ValidationError as exc:
+        raise SystemExit(str(exc))
+
+    async with async_session_factory() as db:
+        try:
+            user = await register_user(db, data)
+        except DuplicateUserError:
+            raise SystemExit(f"Username or email already taken: {username} / {email}")
+
+        if is_admin:
+            user.is_site_admin = True
+            await db.commit()
+
+    print(f"Created user {username!r} (id={user.id}, admin={is_admin})")
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(prog="python -m app.cli")
+    subparsers = parser.add_subparsers(dest="command", required=True)
+
+    create_user = subparsers.add_parser("create-user", help="Create a new user account")
+    create_user.add_argument("username")
+    create_user.add_argument("email")
+    create_user.add_argument("password")
+    create_user.add_argument("--admin", action="store_true", help="Grant is_site_admin")
+
+    args = parser.parse_args()
+
+    if args.command == "create-user":
+        asyncio.run(_create_user(args.username, args.email, args.password, args.admin))
+
+
+if __name__ == "__main__":
+    main()