@

backend phase 3: identity profiles, patients & nurse bank accounts

Add the role-attached identity layer on top of the b2 auth spine: nurse
seller profiles (guarded is_verified, read-only aggregates), thin customer
payer profiles, first-class patients (tenancy-scoped), and nurse payout bank
accounts hardened with an iban_hash uniqueness guard and an automated استعلام
شبا IBAN-ownership inquiry.

- Four usr tables via one migration (1:1 uniques, UNIQUE(iban_hash), filtered
  UNIQUE(nurse_id) WHERE is_primary=1, guarded is_verified, encrypted PII,
  soft-delete on nurse_profiles)
- 15 CQRS slices + 4 role-scoped controllers; reads projected + paginated,
  IBAN masked (last-4); ownership-inquiry endpoints rate-limited
- New IBankAccountOwnershipVerifier seam (mock deterministic شبا match) +
  per-domain repositories on IUnitOfWork + encrypted-PII value converters
- Activate FluentValidation repo-wide (validators were never registered)
- Handler unit tests + WebApplicationFactory integration tests (76 pass);
  contract identity-profiles.md + swagger snapshot; docs, handoff & report

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@

server/src/API/Baya.Web.Api/Controllers/V1/CustomerProfilesController.cs

@@ -0,0 +1,30 @@
+using System.ComponentModel.DataAnnotations;
+using Asp.Versioning;
+using Baya.Application.Features.Identity.Commands.UpsertCustomerProfile;
+using Baya.Application.Features.Identity.Queries.GetMyCustomerProfile;
+using Baya.Application.Models.Identity;
+using Baya.WebFramework.Attributes;
+using Baya.WebFramework.BaseController;
+using Mediator;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Baya.Web.Api.Controllers.V1;
+
+[ApiVersion("1")]
+[ApiController]
+[Route("api/v{version:apiVersion}/[controller]")]
+[Authorize]
+[Display(Description = "The signed-in customer's payer profile")]
+public sealed class CustomerProfilesController(ISender sender) : BaseController
+{
+    [HttpPost("[action]")]
+    [ProducesOkApiResponseType<CustomerProfileDto>]
+    public async Task<IActionResult> Upsert(UpsertCustomerProfileCommand command, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(command, cancellationToken));
+
+    [HttpGet("[action]")]
+    [ProducesOkApiResponseType<CustomerProfileDto>]
+    public async Task<IActionResult> Me(CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(new GetMyCustomerProfileQuery(), cancellationToken));
+}

server/src/API/Baya.Web.Api/Controllers/V1/NurseBankAccountsController.cs

@@ -0,0 +1,48 @@
+using System.ComponentModel.DataAnnotations;
+using Asp.Versioning;
+using Baya.Application.Features.Identity.Commands.AddNurseBankAccount;
+using Baya.Application.Features.Identity.Commands.SetPrimaryBankAccount;
+using Baya.Application.Features.Identity.Commands.TriggerBankAccountOwnershipInquiry;
+using Baya.Application.Features.Identity.Queries.ListNurseBankAccounts;
+using Baya.Application.Models.Identity;
+using Baya.WebFramework.Attributes;
+using Baya.WebFramework.BaseController;
+using Baya.WebFramework.ServiceConfiguration;
+using Mediator;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.RateLimiting;
+
+namespace Baya.Web.Api.Controllers.V1;
+
+[ApiVersion("1")]
+[ApiController]
+[Route("api/v{version:apiVersion}/[controller]")]
+[Authorize]
+[Display(Description = "The signed-in nurse's payout bank accounts")]
+public sealed class NurseBankAccountsController(ISender sender) : BaseController
+{
+    // Rate-limited: adding an account triggers the استعلام شبا vendor inquiry.
+    [HttpPost("[action]")]
+    [EnableRateLimiting(RateLimitingServiceExtension.SensitivePolicy)]
+    [ProducesOkApiResponseType<NurseBankAccountDto>]
+    public async Task<IActionResult> Add(AddNurseBankAccountCommand command, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(command, cancellationToken));
+
+    [HttpPost("[action]/{id}")]
+    [ProducesOkApiResponseType]
+    public async Task<IActionResult> SetPrimary(long id, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(new SetPrimaryBankAccountCommand(id), cancellationToken));
+
+    [HttpGet("[action]")]
+    [ProducesOkApiResponseType<IReadOnlyList<NurseBankAccountDto>>]
+    public async Task<IActionResult> List(CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(new ListNurseBankAccountsQuery(), cancellationToken));
+
+    // Rate-limited: re-runs the استعلام شبا vendor inquiry.
+    [HttpPost("[action]/{id}")]
+    [EnableRateLimiting(RateLimitingServiceExtension.SensitivePolicy)]
+    [ProducesOkApiResponseType<NurseBankAccountDto>]
+    public async Task<IActionResult> VerifyOwnership(long id, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(new TriggerBankAccountOwnershipInquiryCommand(id), cancellationToken));
+}

server/src/API/Baya.Web.Api/Controllers/V1/NurseProfilesController.cs

@@ -0,0 +1,36 @@
+using System.ComponentModel.DataAnnotations;
+using Asp.Versioning;
+using Baya.Application.Features.Identity.Commands.SetNurseAcceptingBookings;
+using Baya.Application.Features.Identity.Commands.UpsertNurseProfile;
+using Baya.Application.Features.Identity.Queries.GetMyNurseProfile;
+using Baya.Application.Models.Identity;
+using Baya.WebFramework.Attributes;
+using Baya.WebFramework.BaseController;
+using Mediator;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Baya.Web.Api.Controllers.V1;
+
+[ApiVersion("1")]
+[ApiController]
+[Route("api/v{version:apiVersion}/[controller]")]
+[Authorize]
+[Display(Description = "The signed-in nurse's seller profile")]
+public sealed class NurseProfilesController(ISender sender) : BaseController
+{
+    [HttpPost("[action]")]
+    [ProducesOkApiResponseType<NurseProfileDto>]
+    public async Task<IActionResult> Upsert(UpsertNurseProfileCommand command, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(command, cancellationToken));
+
+    [HttpPost("[action]")]
+    [ProducesOkApiResponseType]
+    public async Task<IActionResult> SetAcceptingBookings(SetNurseAcceptingBookingsCommand command, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(command, cancellationToken));
+
+    [HttpGet("[action]")]
+    [ProducesOkApiResponseType<NurseProfileDto>]
+    public async Task<IActionResult> Me(CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(new GetMyNurseProfileQuery(), cancellationToken));
+}

server/src/API/Baya.Web.Api/Controllers/V1/PatientsController.cs

@@ -0,0 +1,49 @@
+using System.ComponentModel.DataAnnotations;
+using Asp.Versioning;
+using Baya.Application.Features.Identity.Commands.ArchivePatient;
+using Baya.Application.Features.Identity.Commands.CreatePatient;
+using Baya.Application.Features.Identity.Commands.UpdatePatient;
+using Baya.Application.Features.Identity.Queries.GetPatient;
+using Baya.Application.Features.Identity.Queries.ListPatients;
+using Baya.Application.Models.Common;
+using Baya.Application.Models.Identity;
+using Baya.WebFramework.Attributes;
+using Baya.WebFramework.BaseController;
+using Mediator;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Baya.Web.Api.Controllers.V1;
+
+[ApiVersion("1")]
+[ApiController]
+[Route("api/v{version:apiVersion}/[controller]")]
+[Authorize]
+[Display(Description = "The signed-in customer's patients (care recipients)")]
+public sealed class PatientsController(ISender sender) : BaseController
+{
+    [HttpPost("[action]")]
+    [ProducesOkApiResponseType<PatientDto>]
+    public async Task<IActionResult> Create(CreatePatientCommand command, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(command, cancellationToken));
+
+    [HttpGet("[action]")]
+    [ProducesOkApiResponseType<PagedResult<PatientDto>>]
+    public async Task<IActionResult> List([FromQuery] ListPatientsQuery query, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(query, cancellationToken));
+
+    [HttpGet("[action]/{id}")]
+    [ProducesOkApiResponseType<PatientDto>]
+    public async Task<IActionResult> Get(long id, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(new GetPatientQuery(id), cancellationToken));
+
+    [HttpPost("[action]/{id}")]
+    [ProducesOkApiResponseType<PatientDto>]
+    public async Task<IActionResult> Update(long id, UpdatePatientCommand command, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(command with { Id = id }, cancellationToken));
+
+    [HttpPost("[action]/{id}")]
+    [ProducesOkApiResponseType]
+    public async Task<IActionResult> Archive(long id, CancellationToken cancellationToken)
+        => OperationResult(await sender.Send(new ArchivePatientCommand(id), cancellationToken));
+}