feat: establish multi-tenant foundation

.github/workflows/CI-CT-CD.yml

@@ -1,4 +1,4 @@
-name: CI - CT - CD
+name: Continuous Integration - Testing - Deploy
 
 on:
   push:
@@ -91,6 +91,7 @@ jobs:
 
           if ($coverageFiles.Count -eq 0) {
             "## Coverage gate`n`nNo Coverlet XML was found under the test-results GUID subdirectories." | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
+            Write-Error "Coverage data was not produced."
             return
           }
 
@@ -99,27 +100,21 @@ jobs:
           $lineRate = [double]$coverage.coverage.'line-rate' * 100
           $branchRate = [double]$coverage.coverage.'branch-rate' * 100
 
-          @"           
+          @"
           ## Coverage gate
           | Metric | Result | Minimum | Status |
           | --- | ---: | ---: | --- |
+          | Line coverage | $([math]::Round($lineRate, 2))% | 80% | $(if ($lineRate -ge 80) { '✅' } else { '❌' }) |
+          | Branch coverage | $([math]::Round($branchRate, 2))% | 80% | $(if ($branchRate -ge 80) { '✅' } else { '❌' }) |
           "@ | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
 
+          "LINE_COVERAGE=$([math]::Round($lineRate, 2))" | Out-File artifacts/line-rate.txt -Encoding utf8
+          "BRANCH_COVERAGE=$([math]::Round($branchRate, 2))" | Out-File artifacts/branch-rate.txt -Encoding utf8
 
-          if ($lineRate -ge 80) {
-            "| Line coverage | $([math]::Round($lineRate, 2))% | 80% | ✅ |" | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
-          } else {
-            "| Line coverage | $([math]::Round($lineRate, 2))% | 80% | ❌ |" | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
+          if ($lineRate -lt 80 -or $branchRate -lt 80) {
+            Write-Error "Coverage gate failed. Line coverage: $([math]::Round($lineRate, 2))%; Branch coverage: $([math]::Round($branchRate, 2))%; minimum: 80%."
           }
 
-          if ($branchRate -ge 80) {
-            "| Branch coverage | $([math]::Round($branchRate, 2))% | 80% | ✅ |" | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
-          } else {
-            "| Branch coverage | $([math]::Round($branchRate, 2))% | 80% | ❌ |" | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
-          }
-
-
-
       - name: Append test execution report
         if: always()
         shell: pwsh

src/server/RemoteTickets.Application/Common/System/SystemContracts.cs

@@ -0,0 +1,29 @@
+namespace RemoteTickets.Application.Common.System;
+
+/// <summary>Represents the master database setup payload.</summary>
+/// <param name="ConnectionString">The SQL Server connection string used by the tenant catalog.</param>
+/// <param name="CommandTimeout">The value (in seconds) for use for operations timeout in SQL Server.</param>
+public sealed record MasterDatabaseSetupRequest(
+    string ConnectionString, 
+    int CommandTimeout);
+
+/// <summary>Represents the first-time setup administrator credentials.</summary>
+/// <param name="Email">The administrator email address.</param>
+/// <param name="Password">The administrator password.</param>
+public sealed record InitializeSetupRequest(string Email, string Password);
+
+/// <summary>
+/// Contract for System Service
+/// </summary>
+public interface ISystemService
+{
+    /// <summary>
+    /// Performs the setup of master database
+    /// </summary>
+    /// <param name="connectionString">Connection string of master database</param>
+    /// <param name="commandTimeout">Timeout for operations on master database</param>
+    /// <param name="cancellationToken">Cancellation token for the operation</param>
+    /// <returns>An <see cref="MasterDatabaseSetupResponse" /> with the status of setup operation </returns>
+    Task<MasterDatabaseSetupResponse> PerformMasterDatabaseSetup(string connectionString, int commandTimeout, CancellationToken cancellationToken);
+}
+

src/server/RemoteTickets.Application/Common/Tenancy/TenancyContracts.cs

@@ -0,0 +1,93 @@
+namespace RemoteTickets.Application.Common.Tenancy;
+
+/// <summary>Contains the application roles used by the tenant-aware authorization model.</summary>
+public static class TenantRoles
+{
+    /// <summary>Gets the role that can administer the complete installation and every tenant.</summary>
+    public const string SysAdmin = "sysadmin";
+    /// <summary>Gets the role that can administer a single tenant.</summary>
+    public const string TenantAdmin = "tenadmin";
+    /// <summary>Gets the role that can operate the cash register and other non-configuration business functions.</summary>
+    public const string TenantOperator = "tenop";
+    /// <summary>Gets the role that can perform attendance and non-critical business operations.</summary>
+    public const string TenantAttendant = "tenat";
+}
+
+/// <summary>Contains claim names used by the tenant-aware security model.</summary>
+public static class TenantClaimTypes
+{
+    /// <summary>Gets the claim containing the tenant identifier assigned to a user.</summary>
+    public const string TenantId = "tenant_id";
+}
+
+/// <summary>Contains authorization policy names used by tenant-aware endpoints.</summary>
+public static class TenantPolicies
+{
+    /// <summary>Gets the policy requiring system administration privileges.</summary>
+    public const string SysAdmin = "tenant.sysadmin";
+    /// <summary>Gets the policy requiring tenant administration privileges.</summary>
+    public const string TenantAdmin = "tenant.admin";
+    /// <summary>Gets the policy requiring operator privileges.</summary>
+    public const string TenantOperator = "tenant.operator";
+    /// <summary>Gets the policy requiring attendant privileges.</summary>
+    public const string TenantAttendant = "tenant.attendant";
+}
+
+/// <summary>Represents the setup state of a tenant database.</summary>
+/// <param name="IsSetupRequired">Indicates whether tenant setup is still required.</param>
+/// <param name="IsSetupComplete">Indicates whether tenant setup has completed.</param>
+public sealed record TenantSetupStatusResponse(bool IsSetupRequired, bool IsSetupComplete) : IResponse;
+
+/// <summary>Represents a tenant exposed to system administrators.</summary>
+/// <param name="Id">The stable tenant identifier used in routes.</param>
+/// <param name="Name">The tenant display name.</param>
+/// <param name="DatabaseName">The database name assigned to the tenant.</param>
+/// <param name="IsActive">Indicates whether the tenant accepts normal operations.</param>
+/// <param name="IsSetupComplete">Indicates whether tenant setup has completed.</param>
+public sealed record TenantResponse(string Id, string Name, string DatabaseName, bool IsActive, bool IsSetupComplete) : IResponse;
+
+/// <summary>Represents a request to provision a tenant and its first administrator.</summary>
+/// <param name="Id">The tenant identifier.</param>
+/// <param name="Name">The tenant display name.</param>
+/// <param name="DatabaseName">The SQL Server database name.</param>
+/// <param name="ConnectionString">The connection string for the tenant database.</param>
+/// <param name="AdminEmail">The first tenant administrator email.</param>
+/// <param name="AdminPassword">The first tenant administrator password.</param>
+public sealed record CreateTenantRequest(string Id, string Name, string DatabaseName, string ConnectionString, string AdminEmail, string AdminPassword)
+{
+    public CreateTenantCommand ToCommand() 
+        => new ((string.IsNullOrEmpty(Name) || string.IsNullOrWhiteSpace(Name) ? throw new ArgumentNullException(nameof(Name)) : Name),
+            (string.IsNullOrEmpty(DatabaseName) || string.IsNullOrWhiteSpace(DatabaseName)? throw new ArgumentNullException(nameof(DatabaseName)) : DatabaseName),
+            (string.IsNullOrEmpty(ConnectionString) || string.IsNullOrWhiteSpace(ConnectionString)? throw new ArgumentNullException(nameof(ConnectionString)) : ConnectionString),
+            (string.IsNullOrEmpty(AdminEmail) || string.IsNullOrWhiteSpace(AdminEmail)? throw new ArgumentNullException(nameof(AdminEmail)) : AdminEmail),
+            (string.IsNullOrEmpty(AdminPassword) || string.IsNullOrWhiteSpace(AdminPassword)? throw new ArgumentNullException(nameof(AdminPassword)) : AdminPassword));
+}
+
+/// <summary>Provides tenant registration and setup operations.</summary>
+public interface ITenantManagementService
+{
+    /// <summary>Gets a tenant by its route identifier.</summary>
+    /// <param name="tenantId">The tenant route identifier.</param>
+    /// <param name="cancellationToken">The token used to cancel the operation.</param>
+    /// <returns>The tenant, or <see langword="null"/> when it does not exist.</returns>
+    Task<TenantResponse?> GetAsync(string tenantId, CancellationToken cancellationToken);
+
+    /// <summary>Creates a tenant database and its first tenant administrator.</summary>
+    /// <param name="request">The tenant provisioning request.</param>
+    /// <param name="cancellationToken">The token used to cancel the operation.</param>
+    /// <returns>The provisioned tenant.</returns>
+    Task<TenantResponse> CreateAsync(CreateTenantRequest request, CancellationToken cancellationToken);
+
+    /// <summary>Gets the setup state stored in a tenant database.</summary>
+    /// <param name="tenantId">The tenant route identifier.</param>
+    /// <param name="cancellationToken">The token used to cancel the operation.</param>
+    /// <returns>The tenant setup state.</returns>
+    Task<TenantSetupStatusResponse> GetSetupStatusAsync(string tenantId, CancellationToken cancellationToken);
+
+    /// <summary>Completes tenant setup after all tenant initialization checks have succeeded.</summary>
+    /// <param name="tenantId">The tenant route identifier.</param>
+    /// <param name="cancellationToken">The token used to cancel the operation.</param>
+    /// <returns>The resulting setup state.</returns>
+    Task<TenantSetupStatusResponse> CompleteSetupAsync(string tenantId, CancellationToken cancellationToken);
+}
+

src/server/RemoteTickets.Application/Common/Util/RemoteTicketsConstants.cs

@@ -0,0 +1,7 @@
+namespace RemoteTickets.Application.Common.Util;
+
+public static class RemoteTicketsConstants
+{
+    public const string SystemSetupId = "01a00d95-87a3-7d90-b45c-759bf28c5d50";
+    public const string TenantSetupId = "01a00e8b-ffe7-7186-aa29-46980b4cdbd7";
+}

src/server/RemoteTickets.Application/GlobalUsings.cs

@@ -1,13 +1,19 @@
 global using System;
 global using System.Collections.Generic;
+global using System.Data.Common;
 global using System.Linq;
 global using System.Security.Claims;
 global using System.Threading;
 global using System.Threading.Tasks;
 global using FluentValidation;
 global using FluentValidation.Results;
+global using FluentValidation.Validators;
 global using Mediator.Net.Context;
 global using Mediator.Net.Contracts;
 global using Mediator.Net.Pipeline;
 global using RemoteTickets.Application.Common.Identity;
+global using RemoteTickets.Application.Common.System;
+global using RemoteTickets.Application.Common.Tenancy;
 global using RemoteTickets.Application.Identity.Requests;
+global using RemoteTickets.Application.System.Requests;
+global using RemoteTickets.Application.Tenant.Requests;