feat: add phase five operations foundation

Tiku.Infrastructure/Auth/SmsVerificationService.cs

@@ -1,4 +1,5 @@
 using Microsoft.EntityFrameworkCore;
+using Tiku.Domain.Common;
 using Tiku.Application.Auth;
 using Tiku.Domain.Tenancy;
 using Tiku.Infrastructure.Persistence;
@@ -44,21 +45,48 @@ public sealed class SmsVerificationService(
         rateLimit.UpdatedAt = DateTimeOffset.UtcNow;
 
         var code = Random.Shared.Next(100000, 999999).ToString(System.Globalization.CultureInfo.InvariantCulture);
-        var sendResult = await smsProvider.SendAsync(
-            new SmsProviderSendRequest(
-                request.TenantId,
-                phone,
-                request.Purpose,
-                code,
-                request.IpAddress,
-                request.UserAgent),
-            cancellationToken);
+        var codeHash = SmsCodeHashing.Hash(request.TenantId, phone, request.Purpose, code);
+        SmsProviderSendResult sendResult;
+        try
+        {
+            sendResult = await smsProvider.SendAsync(
+                new SmsProviderSendRequest(
+                    request.TenantId,
+                    phone,
+                    request.Purpose,
+                    code,
+                    request.IpAddress,
+                    request.UserAgent),
+                cancellationToken);
+        }
+        catch (Exception exception) when (exception is not OperationCanceledException)
+        {
+            dbContext.SmsVerificationCodes.Add(new SmsVerificationCode
+            {
+                TenantId = request.TenantId,
+                Phone = phone,
+                Purpose = request.Purpose,
+                CodeHash = codeHash,
+                Provider = "failed",
+                Status = SmsVerificationStatus.Failed,
+                ExpiresAt = DateTimeOffset.UtcNow,
+                IpAddress = request.IpAddress,
+                UserAgent = request.UserAgent,
+                Metadata = JsonDefaults.Object()
+            });
+            await dbContext.SaveChangesAsync(cancellationToken);
+
+            throw exception is SmsProviderException
+                ? exception
+                : new SmsProviderException("SMS provider failed to send the verification code.", "sms_provider_send_failed", exception);
+        }
+
         var verification = new SmsVerificationCode
         {
             TenantId = request.TenantId,
             Phone = phone,
             Purpose = request.Purpose,
-            CodeHash = SmsCodeHashing.Hash(request.TenantId, phone, request.Purpose, code),
+            CodeHash = codeHash,
             Provider = sendResult.Provider,
             Status = SmsVerificationStatus.Sent,
             ExpiresAt = DateTimeOffset.UtcNow.Add(CodeLifetime),
@@ -93,7 +121,7 @@ public sealed class SmsVerificationService(
 
         if (verification is null ||
             verification.ExpiresAt <= now ||
-            verification.Status is SmsVerificationStatus.Expired or SmsVerificationStatus.Blocked)
+            verification.Status != SmsVerificationStatus.Sent)
         {
             throw new InvalidCredentialsException("invalid_sms_code");
         }