work

src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.WebService/Program.cs

@@ -1,41 +1,82 @@
-var builder = WebApplication.CreateBuilder(args);
-
-// Add services to the container.
-// Learn more about configuring OpenAPI at https://aka.ms/aspnet/openapi
-builder.Services.AddOpenApi();
-
-var app = builder.Build();
-
-// Configure the HTTP request pipeline.
-if (app.Environment.IsDevelopment())
-{
-    app.MapOpenApi();
-}
-
-app.UseHttpsRedirection();
-
-var summaries = new[]
-{
-    "Freezing", "Bracing", "Chilly", "Cool", "Mild", "Warm", "Balmy", "Hot", "Sweltering", "Scorching"
-};
-
-app.MapGet("/weatherforecast", () =>
-{
-    var forecast =  Enumerable.Range(1, 5).Select(index =>
-        new WeatherForecast
-        (
-            DateOnly.FromDateTime(DateTime.Now.AddDays(index)),
-            Random.Shared.Next(-20, 55),
-            summaries[Random.Shared.Next(summaries.Length)]
-        ))
-        .ToArray();
-    return forecast;
-})
-.WithName("GetWeatherForecast");
-
-app.Run();
-
-record WeatherForecast(DateOnly Date, int TemperatureC, string? Summary)
-{
-    public int TemperatureF => 32 + (int)(TemperatureC / 0.5556);
-}
+using StellaOps.RiskEngine.Core.Contracts;
+using StellaOps.RiskEngine.Core.Providers;
+using StellaOps.RiskEngine.Core.Services;
+using StellaOps.RiskEngine.Infrastructure.Stores;
+
+var builder = WebApplication.CreateBuilder(args);
+
+builder.Services.AddOpenApi();
+
+builder.Services.AddSingleton<RiskScoreQueue>();
+builder.Services.AddSingleton<IRiskScoreResultStore, InMemoryRiskScoreResultStore>();
+builder.Services.AddSingleton<IRiskScoreProviderRegistry>(_ =>
+    new RiskScoreProviderRegistry(new IRiskScoreProvider[]
+    {
+        new DefaultTransformsProvider(),
+        new CvssKevProvider(new NullCvssSource(), new NullKevSource()),
+        new VexGateProvider(),
+        new FixExposureProvider()
+    }));
+
+var app = builder.Build();
+
+if (app.Environment.IsDevelopment())
+{
+    app.MapOpenApi();
+}
+
+app.UseHttpsRedirection();
+
+app.MapGet("/risk-scores/providers", (IRiskScoreProviderRegistry registry) =>
+    Results.Ok(new { providers = registry.ProviderNames.OrderBy(n => n, StringComparer.OrdinalIgnoreCase) }));
+
+app.MapPost("/risk-scores/jobs", async (
+    ScoreRequest request,
+    RiskScoreQueue queue,
+    IRiskScoreProviderRegistry registry,
+    IRiskScoreResultStore store,
+    TimeProvider timeProvider,
+    CancellationToken ct) =>
+{
+    var job = new RiskScoreJob(Guid.NewGuid(), request);
+    await queue.EnqueueAsync(job.Request, ct).ConfigureAwait(false);
+    var worker = new RiskScoreWorker(queue, registry, store, timeProvider);
+    var result = await worker.ProcessNextAsync(ct).ConfigureAwait(false);
+    return Results.Accepted($"/risk-scores/jobs/{job.JobId}", new { jobId = job.JobId, result });
+});
+
+app.MapGet("/risk-scores/jobs/{jobId:guid}", (Guid jobId, InMemoryRiskScoreResultStore store) =>
+    store.TryGet(jobId, out var result)
+        ? Results.Ok(result)
+        : Results.NotFound());
+
+app.MapPost("/risk-scores/simulations", async (
+    IReadOnlyCollection<ScoreRequest> requests,
+    IRiskScoreProviderRegistry registry,
+    TimeProvider timeProvider,
+    CancellationToken ct) =>
+{
+    var results = new List<RiskScoreResult>(requests.Count);
+    foreach (var req in requests)
+    {
+        if (!registry.TryGet(req.Provider, out var provider))
+        {
+            results.Add(new RiskScoreResult(Guid.NewGuid(), req.Provider, req.Subject, 0d, false, "Provider not registered", req.Signals, timeProvider.GetUtcNow()));
+            continue;
+        }
+
+        try
+        {
+            var score = await provider.ScoreAsync(req, ct).ConfigureAwait(false);
+            results.Add(new RiskScoreResult(Guid.NewGuid(), req.Provider, req.Subject, score, true, null, req.Signals, timeProvider.GetUtcNow()));
+        }
+        catch (Exception ex)
+        {
+            results.Add(new RiskScoreResult(Guid.NewGuid(), req.Provider, req.Subject, 0d, false, ex.Message, req.Signals, timeProvider.GetUtcNow()));
+        }
+    }
+
+    return Results.Ok(new { results });
+});
+
+app.Run();