call-command-from-code

Call a Command from Code

Backend code can drive a command through ICommandPipeline instead of an HTTP request. The pipeline runs the same authorization → validation → Provide() → Handle() chain as the HTTP boundary — only the entry point changes. Common callers: a reactor spawning a follow-up command, a background/scheduled job, an integration test harness.

Inside Handle() wanting to append to a different stream, do not inject IEventLog — return IEnumerable<object> with EventForEventSourceId(targetId, @event) wrappers (see vertical-slices.md). ICommandPipeline is for command-shaped invocations that need validation/authorization.

Steps

1. Inject and execute (scopeless overload)

public class <Source>Handler(ICommandPipeline pipeline) : IReactor
{
    [OnceOnly]
    public Task <Source>Created(<Source>Created @event, EventContext context) =>
        pipeline.Execute(new <TargetCommand>(@event.SourceId, @event.Name));
}

Execute(command) is the scopeless overload — the pipeline manages its own DI scope per call. This is the normal case.

2. Scoped overload — only when needed

Execute(command, serviceProvider) reuses the caller's ambient DI scope. Use it only when the handler genuinely depends on resolving something from that scope (e.g. a scoped DB session). Most callers don't need it.

3. Typed result

var result = await pipeline.Execute<RegistrationToken>(new Register(...));
if (result.IsSuccess) { var token = result.Response; }

4. Pre-flight Validate

await pipeline.Validate(command) runs authorization + validation without executing Provide()/Handle() — useful to confirm validity before committing to side effects. Scoped overload available.

Validation severity filtering: both Execute and Validate take an optional allowedSeverity of type ValidationResultSeverity? (from Cratis.Arc.Validation) — pipeline.Execute(command, allowedSeverity: ValidationResultSeverity.Warning). The levels are Unknown=0, Information=1, Warning=2, Error=3; by default only Error blocks, and failures at or below allowedSeverity are filtered out (so passing Warning lets warnings through but still blocks errors).