Summary

• New file: src/PrestaShopBundle/Command/EmployeeCreateCommand.php — dispatches AddEmployeeCommand via the CommandBus. The new account is always a SuperAdmin (full back-office access); the CLI prints an explicit warning. No flags for profile / language / shops / active / gravatar — those are hardcoded to sensible defaults.
• New file: src/PrestaShopBundle/Command/EmployeeChangePasswordCommand.php — calls EmployeePasswordResetter::resetPassword().
• New unit tests: tests/Unit/PrestaShopBundle/Command/EmployeeCreateCommandTest.php (5 scenarios) and tests/Unit/PrestaShopBundle/Command/EmployeeChangePasswordCommandTest.php (7 scenarios). All dependencies are mocked.
• New adapter: src/Adapter/Employee/EmployeeContextInitializer.php — loads the first active SuperAdmin into the legacy context before dispatch, so the CQRS ProfileAccessChecker allows the CLI to create another SuperAdmin (the BO assumes a logged-in employee; the CLI has none).
• Service wiring: declarations added to src/PrestaShopBundle/Resources/config/services/bundle/command.yml (the two commands) and src/PrestaShopBundle/Resources/config/services/adapter/employee.yml (the initializer).
• Both commands are auto-registered via the #[AsCommand] attribute, like prestashop:api-client, prestashop:config, etc.

Usage

# Create SuperAdmin — fully interactive
php bin/console prestashop:employee:create

# Create SuperAdmin — non-interactive (CI / provisioning)
php bin/console prestashop:employee:create [email protected] \
    --first-name=John --last-name=Doe --password='Str0ng!Pass'

# Change password — fully interactive
php bin/console prestashop:employee:change-password

# Change password — non-interactive
php bin/console prestashop:employee:change-password [email protected] --password='S0meStr0ngP@ss!'

Test plan

• php bin/console list prestashop lists prestashop:employee:create and prestashop:employee:change-password.
• prestashop:employee:create interactive mode prompts for email, first name, last name and password (twice), creates the employee, and prints a success message stating the new account is a SuperAdmin plus an explicit "SuperAdmin privileges" warning.
• prestashop:employee:create non-interactive mode (all values as options) succeeds and the resulting employee is SuperAdmin, active, on the default language, associated to every shop.
• Creating an employee with an already-used email returns a clear error and a non-zero exit code.
• Creating an employee with a password that violates the configured policy returns a clear error and a non-zero exit code.
• Newly created SuperAdmin can log in to the BO with the provided password and has access to every section.
• prestashop:employee:change-password interactive mode prompts for email then password twice; success path updates the password and exits 0.
• Login to the BO with the new password works.
• prestashop:employee:change-password non-interactive mode (--password=...) succeeds.
• Unknown email on change-password returns a clear error and a non-zero exit code.
• Mismatched password prompts (on either command) return a clear error and a non-zero exit code.
• Employee receives the "Your new password" email on change-password (same template as the BO forgot-password flow).
• php vendor/bin/phpunit -c tests/Unit/phpunit.xml --filter 'EmployeeCreateCommandTest|EmployeeChangePasswordCommandTest' is green (12 tests, 46 assertions).