Resolve all high-severity architecture review findings

src/ZB.MOM.WW.ScadaBridge.ConfigurationDatabase/Services/ConfigurationCommandTransaction.cs

@@ -0,0 +1,56 @@
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using ZB.MOM.WW.ScadaBridge.Commons.Interfaces.Services;
+
+namespace ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Services;
+
+/// <summary>Owns the SQL transaction spanning configuration saves and the final audit flush.</summary>
+public sealed class ConfigurationCommandTransaction(IServiceScopeFactory scopes) : IConfigurationCommandTransaction
+{
+    /// <inheritdoc />
+    public async Task<object?> ExecuteAsync(Func<IServiceProvider, Task<object?>> operation)
+    {
+        using var strategyScope = scopes.CreateScope();
+        var strategy = strategyScope.ServiceProvider.GetRequiredService<ScadaBridgeDbContext>().Database.CreateExecutionStrategy();
+        var commitStarted = false;
+        var result = await strategy.ExecuteAsync(async () =>
+        {
+            // A lost commit acknowledgment must never automatically replay a create.
+            if (commitStarted) throw new InvalidOperationException("Configuration commit outcome is uncertain; inspect the configuration audit before retrying.");
+            await using var attempt = scopes.CreateAsyncScope();
+            var db = attempt.ServiceProvider.GetRequiredService<ScadaBridgeDbContext>();
+            await using var transaction = await db.Database.BeginTransactionAsync();
+            var value = await operation(attempt.ServiceProvider);
+            await db.SaveChangesAsync(); // AuditService stages rows; flush them inside this transaction.
+            commitStarted = true;
+            await transaction.CommitAsync();
+            await attempt.ServiceProvider.GetRequiredService<ConfigurationCommitActions>().RunAsync();
+            return value;
+        });
+        return result;
+    }
+}
+
+/// <summary>Per-attempt postcommit actions; rolled-back attempts never run them.</summary>
+public sealed class ConfigurationCommitActions(ILogger<ConfigurationCommitActions> logger) : IConfigurationCommitActions
+{
+    private readonly List<Func<Task>> _actions = [];
+    /// <inheritdoc />
+    public void Add(Func<Task> action) => _actions.Add(action);
+    internal async Task RunAsync()
+    {
+        foreach (var action in _actions)
+        {
+            try { await action(); }
+            catch (Exception ex) { logger.LogError(ex, "Configuration committed, but local cache maintenance failed"); }
+        }
+    }
+}
+
+/// <summary>Refreshes circuit-held read entities after a command owned by another scope.</summary>
+public sealed class ConfigurationReadSession(ScadaBridgeDbContext db) : IConfigurationReadSession
+{
+    /// <inheritdoc />
+    public void Reset() => db.ChangeTracker.Clear();
+}