Added mediator

.github/FUNDING.yml

@@ -1,13 +1,11 @@
-# These are supported funding model platforms
-
-github: JelleBuning # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
-patreon: # Replace with a single Patreon username
-open_collective: # Replace with a single Open Collective username
-ko_fi: # Replace with a single Ko-fi username
-tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
-community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
-liberapay: # Replace with a single Liberapay username
-issuehunt: # Replace with a single IssueHunt username
-otechie: # Replace with a single Otechie username
-lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
-custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']
+github: JelleBuning
+patreon:
+open_collective:
+ko_fi:
+tidelift:
+community_bridge:
+liberapay:
+issuehunt:
+otechie:
+lfx_crowdfunding:
+custom:

.github/README.md

@@ -48,7 +48,6 @@
     <li>
       <a href="#getting-started">Getting Started</a>
       <ul>
-        <li><a href="#prerequisites">Prerequisites</a></li>
         <li><a href="#installation">Installation</a></li>
       </ul>
     </li>
@@ -90,8 +89,6 @@ Setting up this solution on your local machine is straightforward and will enabl
 
 Before beginning, ensure that your development environment is properly configured. Having the required software and dependencies installed will prevent common issues and streamline the process.
 
-### Prerequisites
-
 ### Installation
 This installation method utilizes Docker Compose for a streamlined setup. Ensure you have Docker and Docker Compose installed on your system.
 

.github/copilot-instructions.md

@@ -0,0 +1,19 @@
+# Core Philosophy
+- Mission: Produce maintainable, testable, evolvable C# code.
+- Priority: SOLID first, Design Patterns over "quick fixes".
+- Hierarchy: Correctness > Maintainability > Performance.
+- Principles: KISS, DRY, YAGNI.
+
+# Change Discipline
+1. Clarify requirements (inputs, outputs, edge cases).
+2. Propose a minimal design (responsibilities, abstractions, patterns).
+3. Implement in small, reversible, well-tested steps.
+4. Explain tradeoffs.
+
+# Stop and Ask
+Ask before: changing public APIs, adding dependencies, choosing between multiple patterns, or impacting security/financial logic.
+
+# Copilot-specific directives
+- When responding to code or design requests, actively consult the other instruction files in `.github/instructions/` (code, architecture, testing, etc.).
+- Prioritize the repository’s explicit guidelines over generic advice and ask clarifying questions if the instructions seem to conflict or are incomplete.
+- Mention the relevant instruction file in your response when you use its guidance, to reinforce awareness.

.github/dependabot.yml

@@ -1,8 +1,3 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
 version: 2
 updates:
   - package-ecosystem: "github-actions"
@@ -14,9 +9,9 @@ updates:
         patterns:
           - "*"
 
-  - package-ecosystem: "nuget" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    target-branch: "main" # The branch that dependabot will target
+  - package-ecosystem: "nuget"
+    directory: "/"
+    target-branch: "main"
     schedule:
       interval: "weekly"
     groups:

.github/instructions/architecture.instructions.md

@@ -0,0 +1,12 @@
+# Architecture: Clean / Onion
+- Domain: entities, value objects, domain services, events (no infrastructure dependencies).
+- Application: use-cases, orchestration, ports (interfaces), DTOs, handlers.
+- Infrastructure: EF Core, HTTP clients, implementations (hide these from domain).
+- Presentation: Web API / UI.
+
+# DDD Standards
+- Ubiquitous Language.
+- Aggregates: Use root entities to maintain consistency boundaries.
+- Value Objects: Prefer immutable objects for identity-less data.
+- Domain Services: For logic that doesn't fit in an entity.
+- Bounded Contexts: Clear separation using ACLs if necessary.

.github/instructions/code.instructions.md

@@ -0,0 +1,15 @@
+# Coding Standards
+- Modern C#: Use records, pattern matching, init-only properties.
+- Immutability: Prefer by default.
+- Collections: Use IReadOnlyList/Collection for public APIs.
+- Async: No .Result or .Wait(). Use CancellationToken.
+- Guard Clauses: Validate arguments.
+
+# Patterns & Error Handling
+- Use patterns (Strategy, Factory, Decorator, etc.) intentionally.
+- Results: Use explicit Result<T> or ErrorOr<T> types.
+- Exceptions: Only for truly exceptional conditions.
+
+# Performance
+- No micro-optimization.
+- Use Span<T> or IAsyncEnumerable<T> only when justified and readable.

.github/instructions/testing.instructions.md

@@ -0,0 +1,7 @@
+# Testing Strategy
+- Unit tests: Business logic.
+- Integration tests: Persistence/HTTP layers.
+- Pattern: Arrange-Act-Assert (AAA).
+- Goal: Test behavior, not implementation.
+- Abstractions: Inject interfaces for ISystemClock, IRandom, and IO.
+- TDD: Add/adjust tests before implementation when feasible.

Directory.Packages.props

@@ -17,6 +17,11 @@
     <PackageVersion Include="Microsoft.Extensions.Hosting.Systemd" Version="10.0.5" />
     <PackageVersion Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.5" />
     <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.5" />
+    <PackageVersion Include="EntityFrameworkCore.CommonTools" Version="2.0.2" />
+    <PackageVersion Include="FluentValidation" Version="11.11.0" />
+    <PackageVersion Include="FluentValidation.DependencyInjectionExtensions" Version="11.11.0" />
+    <PackageVersion Include="Mediator.Abstractions" Version="3.0.1" />
+    <PackageVersion Include="Mediator.SourceGenerator" Version="3.0.1" />
     <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="9.0.7" />
     <PackageVersion Include="Otp.NET" Version="1.4.1" />
     <PackageVersion Include="BCrypt.Net-Next" Version="4.1.0" />

Sentinel.slnx

@@ -11,7 +11,6 @@
     <Project Path="src/Sentinel.WorkerService.Core/Sentinel.WorkerService.Core.csproj" />
     <Project Path="src/Sentinel.WorkerService.RemoteAccess/Sentinel.WorkerService.RemoteAccess.csproj" />
     <Project Path="src/Sentinel.WorkerService/Sentinel.WorkerService.csproj" />
-    <File Path="src/Directory.Packages.props" />
   </Folder>
   <Folder Name="/tests/">
     <Project Path="tests/Sentinel.Api.Integration.Tests/Sentinel.Api.Integration.Tests.csproj" />

src/Sentinel.Api.Application/Commands/Auth/Login/LoginCommand.cs

@@ -0,0 +1,6 @@
+using Mediator;
+using Sentinel.Api.Application.DTO.User;
+
+namespace Sentinel.Api.Application.Commands.Auth.Login;
+
+public record LoginCommand(string Email, string Password) : IRequest<SignInUserResponse>;

src/Sentinel.Api.Application/Commands/Auth/Login/LoginCommandHandler.cs

@@ -0,0 +1,19 @@
+using Mediator;
+using Sentinel.Api.Application.DTO.User;
+using Sentinel.Api.Application.Interfaces;
+
+namespace Sentinel.Api.Application.Commands.Auth.Login;
+
+public class LoginCommandHandler(IAuthRepository authRepository) : IRequestHandler<LoginCommand, SignInUserResponse>
+{
+    public async ValueTask<SignInUserResponse> Handle(LoginCommand request, CancellationToken cancellationToken)
+    {
+        var signInDto = new SignInUserDto
+        {
+            Email = request.Email,
+            Password = request.Password
+        };
+
+        return await authRepository.AuthenticateAsync(signInDto);
+    }
+}

src/Sentinel.Api.Application/Commands/Auth/Login/LoginCommandValidator.cs

@@ -0,0 +1,16 @@
+using FluentValidation;
+
+namespace Sentinel.Api.Application.Commands.Auth.Login;
+
+public class LoginCommandValidator : AbstractValidator<LoginCommand>
+{
+    public LoginCommandValidator()
+    {
+        RuleFor(x => x.Email)
+            .NotEmpty().WithMessage("Email is required")
+            .EmailAddress().WithMessage("Email must be a valid email address");
+
+        RuleFor(x => x.Password)
+            .NotEmpty().WithMessage("Password is required");
+    }
+}

src/Sentinel.Api.Application/Commands/Auth/RefreshToken/RefreshTokenCommand.cs

@@ -0,0 +1,6 @@
+using Mediator;
+using Sentinel.Api.Application.DTO.Token;
+
+namespace Sentinel.Api.Application.Commands.Auth.RefreshToken;
+
+public record RefreshTokenCommand(string AccessToken, string RefreshToken) : IRequest<TokenDto>;

src/Sentinel.Api.Application/Commands/Auth/RefreshToken/RefreshTokenCommandHandler.cs

@@ -0,0 +1,19 @@
+using Mediator;
+using Sentinel.Api.Application.DTO.Token;
+using Sentinel.Api.Application.Interfaces;
+
+namespace Sentinel.Api.Application.Commands.Auth.RefreshToken;
+
+public class RefreshTokenCommandHandler(IAuthRepository authRepository) : IRequestHandler<RefreshTokenCommand, TokenDto>
+{
+    public async ValueTask<TokenDto> Handle(RefreshTokenCommand request, CancellationToken cancellationToken)
+    {
+        var tokenDto = new TokenDto
+        {
+            AccessToken = request.AccessToken,
+            RefreshToken = request.RefreshToken
+        };
+
+        return await authRepository.RefreshTokenAsync(tokenDto);
+    }
+}

src/Sentinel.Api.Application/Commands/Auth/RefreshToken/RefreshTokenCommandValidator.cs

@@ -0,0 +1,15 @@
+using FluentValidation;
+
+namespace Sentinel.Api.Application.Commands.Auth.RefreshToken;
+
+public class RefreshTokenCommandValidator : AbstractValidator<RefreshTokenCommand>
+{
+    public RefreshTokenCommandValidator()
+    {
+        RuleFor(x => x.AccessToken)
+            .NotEmpty().WithMessage("AccessToken is required");
+
+        RuleFor(x => x.RefreshToken)
+            .NotEmpty().WithMessage("RefreshToken is required");
+    }
+}

src/Sentinel.Api.Application/Commands/Auth/VerifyTotp/VerifyTotpCommand.cs

@@ -0,0 +1,5 @@
+using Mediator;
+
+namespace Sentinel.Api.Application.Commands.Auth.VerifyTotp;
+
+public record VerifyTotpCommand(int UserId, string AuthenticityToken, string OtpAttempt) : IRequest<DTO.Token.TokenDto>;

src/Sentinel.Api.Application/Commands/Auth/VerifyTotp/VerifyTotpCommandHandler.cs

@@ -0,0 +1,22 @@
+using Mediator;
+using Sentinel.Api.Application.DTO.Token;
+using Sentinel.Api.Application.DTO.User;
+using Sentinel.Api.Application.Interfaces;
+
+namespace Sentinel.Api.Application.Commands.Auth.VerifyTotp;
+
+public class VerifyTotpCommandHandler(IAuthRepository authRepository) : IRequestHandler<VerifyTotpCommand, TokenDto>
+{
+    public async ValueTask<TokenDto> Handle(VerifyTotpCommand request, CancellationToken cancellationToken)
+    {
+        var verifyDto = new VerifyUserDto
+        {
+            UserId = request.UserId,
+            AuthenticityToken = request.AuthenticityToken,
+            OtpAttempt = request.OtpAttempt
+        };
+
+        var user = await authRepository.VerifyTotpAsync(verifyDto);
+        return await authRepository.GetTokenAsync(user);
+    }
+}

src/Sentinel.Api.Application/Commands/Auth/VerifyTotp/VerifyTotpCommandValidator.cs

@@ -0,0 +1,19 @@
+using FluentValidation;
+
+namespace Sentinel.Api.Application.Commands.Auth.VerifyTotp;
+
+public class VerifyTotpCommandValidator : AbstractValidator<VerifyTotpCommand>
+{
+    public VerifyTotpCommandValidator()
+    {
+        RuleFor(x => x.UserId)
+            .GreaterThan(0).WithMessage("UserId must be greater than 0");
+
+        RuleFor(x => x.AuthenticityToken)
+            .NotEmpty().WithMessage("AuthenticityToken is required");
+
+        RuleFor(x => x.OtpAttempt)
+            .NotEmpty().WithMessage("OtpAttempt is required")
+            .Length(6).WithMessage("OtpAttempt must be 6 digits");
+    }
+}

src/Sentinel.Api.Application/Commands/Devices/ExecuteSecurityScan/ExecuteSecurityScanCommand.cs

@@ -0,0 +1,5 @@
+using Mediator;
+
+namespace Sentinel.Api.Application.Commands.Devices.ExecuteSecurityScan;
+
+public record ExecuteSecurityScanCommand(int DeviceId) : IRequest;

src/Sentinel.Api.Application/Commands/Devices/ExecuteSecurityScan/ExecuteSecurityScanCommandHandler.cs

@@ -0,0 +1,14 @@
+using Mediator;
+using Sentinel.Api.Application.Interfaces;
+
+namespace Sentinel.Api.Application.Commands.Devices.ExecuteSecurityScan;
+
+public class ExecuteSecurityScanCommandHandler(IDeviceMessenger deviceMessenger)
+    : IRequestHandler<ExecuteSecurityScanCommand>
+{
+    public async ValueTask<Unit> Handle(ExecuteSecurityScanCommand request, CancellationToken cancellationToken)
+    {
+        await deviceMessenger.SendSecurityScanRequestAsync(request.DeviceId, cancellationToken);
+        return Unit.Value;
+    }
+}

src/Sentinel.Api.Application/Commands/Devices/Ping/PingDeviceCommand.cs

@@ -0,0 +1,5 @@
+using Mediator;
+
+namespace Sentinel.Api.Application.Commands.Devices.Ping;
+
+public record PingDeviceCommand(int DeviceId) : IRequest;

src/Sentinel.Api.Application/Commands/Devices/Ping/PingDeviceCommandHandler.cs

@@ -0,0 +1,13 @@
+using Mediator;
+using Sentinel.Api.Application.Interfaces;
+
+namespace Sentinel.Api.Application.Commands.Devices.Ping;
+
+public class PingDeviceCommandHandler(IDeviceRepository deviceRepository) : IRequestHandler<PingDeviceCommand>
+{
+    public ValueTask<Unit> Handle(PingDeviceCommand request, CancellationToken cancellationToken)
+    {
+        deviceRepository.Ping(request.DeviceId);
+        return ValueTask.FromResult(Unit.Value);
+    }
+}

src/Sentinel.Api.Application/Commands/Devices/Ping/PingDeviceCommandValidator.cs

@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Sentinel.Api.Application.Commands.Devices.Ping;
+
+public class PingDeviceCommandValidator : AbstractValidator<PingDeviceCommand>
+{
+    public PingDeviceCommandValidator()
+    {
+        RuleFor(x => x.DeviceId)
+            .GreaterThan(0).WithMessage("DeviceId must be greater than 0");
+    }
+}

src/Sentinel.Api.Application/Commands/Devices/Register/RegisterDeviceCommand.cs

@@ -0,0 +1,6 @@
+using Mediator;
+using Sentinel.Api.Application.DTO.Device;
+
+namespace Sentinel.Api.Application.Commands.Devices.Register;
+
+public record RegisterDeviceCommand(Guid OrganisationHash, string Name) : IRequest<DeviceTokenResponse>;

src/Sentinel.Api.Application/Commands/Devices/Register/RegisterDeviceCommandHandler.cs

@@ -0,0 +1,15 @@
+using Mediator;
+using Sentinel.Api.Application.DTO.Device;
+using Sentinel.Api.Application.Interfaces;
+
+namespace Sentinel.Api.Application.Commands.Devices.Register;
+
+public class RegisterDeviceCommandHandler(IDeviceRepository deviceRepository)
+    : IRequestHandler<RegisterDeviceCommand, DeviceTokenResponse>
+{
+    public ValueTask<DeviceTokenResponse> Handle(RegisterDeviceCommand request, CancellationToken cancellationToken)
+    {
+        var response = deviceRepository.Register(request.OrganisationHash, request.Name);
+        return ValueTask.FromResult(response);
+    }
+}

src/Sentinel.Api.Application/Commands/Devices/Register/RegisterDeviceCommandValidator.cs

@@ -0,0 +1,16 @@
+using FluentValidation;
+
+namespace Sentinel.Api.Application.Commands.Devices.Register;
+
+public class RegisterDeviceCommandValidator : AbstractValidator<RegisterDeviceCommand>
+{
+    public RegisterDeviceCommandValidator()
+    {
+        RuleFor(x => x.OrganisationHash)
+            .NotEmpty().WithMessage("OrganisationHash is required");
+
+        RuleFor(x => x.Name)
+            .NotEmpty().WithMessage("Name is required")
+            .MaximumLength(100).WithMessage("Name must not exceed 100 characters");
+    }
+}

src/Sentinel.Api.Application/Commands/Devices/RequestRemoteAccess/RequestRemoteAccessCommand.cs

@@ -0,0 +1,5 @@
+using Mediator;
+
+namespace Sentinel.Api.Application.Commands.Devices.RequestRemoteAccess;
+
+public record RequestRemoteAccessCommand(int DeviceId) : IRequest;

src/Sentinel.Api.Application/Commands/Devices/RequestRemoteAccess/RequestRemoteAccessCommandHandler.cs

@@ -0,0 +1,14 @@
+using Mediator;
+using Sentinel.Api.Application.Interfaces;
+
+namespace Sentinel.Api.Application.Commands.Devices.RequestRemoteAccess;
+
+public class RequestRemoteAccessCommandHandler(IDeviceMessenger deviceMessenger)
+    : IRequestHandler<RequestRemoteAccessCommand>
+{
+    public async ValueTask<Unit> Handle(RequestRemoteAccessCommand request, CancellationToken cancellationToken)
+    {
+        await deviceMessenger.SendRemoteAccessRequestAsync(request.DeviceId, cancellationToken);
+        return Unit.Value;
+    }
+}