@polymorphism-tech/morph-spec 1.0.2 → 2.0.0

package/content/.morph/templates/infra/app-service.bicep

@@ -0,0 +1,164 @@
+// ==============================================================================
+// MORPH-SPEC - App Service
+// Azure App Service with Free F1 tier support
+// ==============================================================================
+
+@description('App Service name')
+param name string
+
+@description('Location')
+param location string
+
+@description('Tags')
+param tags object = {}
+
+@description('App Service Plan SKU (F1, B1, S1, P1v2)')
+@allowed(['F1', 'B1', 'S1', 'P1v2', 'P2v2'])
+param sku string = 'F1'
+
+@description('App Insights connection string')
+param appInsightsConnectionString string = ''
+
+@description('.NET version')
+@allowed(['v6.0', 'v7.0', 'v8.0'])
+param dotnetVersion string = 'v8.0'
+
+@description('Always On (not available on Free tier)')
+param alwaysOn bool = false
+
+@description('Environment variables')
+param envVars object = {}
+
+// ==============================================================================
+// VARIABLES
+// ==============================================================================
+
+var skuTiers = {
+  F1: 'Free'
+  B1: 'Basic'
+  S1: 'Standard'
+  P1v2: 'PremiumV2'
+  P2v2: 'PremiumV2'
+}
+
+var planName = 'plan-${name}'
+
+// Merge default env vars with custom ones
+var defaultEnvVars = {
+  ASPNETCORE_ENVIRONMENT: 'Production'
+  APPLICATIONINSIGHTS_CONNECTION_STRING: appInsightsConnectionString
+}
+
+var mergedEnvVars = union(defaultEnvVars, envVars)
+
+// ==============================================================================
+// APP SERVICE PLAN
+// ==============================================================================
+
+resource appServicePlan 'Microsoft.Web/serverfarms@2022-09-01' = {
+  name: planName
+  location: location
+  tags: tags
+  sku: {
+    name: sku
+    tier: skuTiers[sku]
+  }
+  kind: 'linux'
+  properties: {
+    reserved: true // Required for Linux
+  }
+}
+
+// ==============================================================================
+// APP SERVICE
+// ==============================================================================
+
+resource appService 'Microsoft.Web/sites@2022-09-01' = {
+  name: name
+  location: location
+  tags: tags
+  kind: 'app,linux'
+  identity: {
+    type: 'SystemAssigned'
+  }
+  properties: {
+    serverFarmId: appServicePlan.id
+    httpsOnly: true
+    siteConfig: {
+      linuxFxVersion: 'DOTNETCORE|${dotnetVersion}'
+      alwaysOn: alwaysOn
+      minTlsVersion: '1.2'
+      ftpsState: 'Disabled'
+      http20Enabled: true
+      healthCheckPath: '/health'
+      appSettings: [for key in objectKeys(mergedEnvVars): {
+        name: key
+        value: mergedEnvVars[key]
+      }]
+      cors: {
+        allowedOrigins: [
+          'https://portal.azure.com'
+        ]
+        supportCredentials: false
+      }
+    }
+    clientAffinityEnabled: false // Recommended for stateless apps
+  }
+}
+
+// ==============================================================================
+// DEPLOYMENT SLOT (Only for non-Free tiers)
+// ==============================================================================
+
+resource stagingSlot 'Microsoft.Web/sites/slots@2022-09-01' = if (sku != 'F1') {
+  name: 'staging'
+  parent: appService
+  location: location
+  tags: tags
+  kind: 'app,linux'
+  identity: {
+    type: 'SystemAssigned'
+  }
+  properties: {
+    serverFarmId: appServicePlan.id
+    httpsOnly: true
+    siteConfig: {
+      linuxFxVersion: 'DOTNETCORE|${dotnetVersion}'
+      alwaysOn: alwaysOn
+      minTlsVersion: '1.2'
+      ftpsState: 'Disabled'
+      http20Enabled: true
+      healthCheckPath: '/health'
+      appSettings: [for key in objectKeys(mergedEnvVars): {
+        name: key
+        value: mergedEnvVars[key]
+      }]
+    }
+    clientAffinityEnabled: false
+  }
+}
+
+// ==============================================================================
+// OUTPUTS
+// ==============================================================================
+
+@description('App Service ID')
+output id string = appService.id
+
+@description('App Service name')
+output name string = appService.name
+
+@description('App Service URL')
+output url string = 'https://${appService.properties.defaultHostName}'
+
+@description('App Service default hostname')
+output defaultHostName string = appService.properties.defaultHostName
+
+@description('App Service Plan ID')
+output planId string = appServicePlan.id
+
+@description('App Service Managed Identity Principal ID')
+output principalId string = appService.identity.principalId
+
+@description('Staging slot URL (if available)')
+output stagingUrl string = sku != 'F1' ? 'https://${stagingSlot.properties.defaultHostName}' : ''

package/content/.morph/templates/infra/deploy.ps1

@@ -0,0 +1,229 @@
+# ==============================================================================
+# MORPH-SPEC - Deploy Script (PowerShell)
+# Automated deployment of Azure infrastructure
+# ==============================================================================
+
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory=$false)]
+    [string]$AppName = "myapp",
+
+    [Parameter(Mandatory=$false)]
+    [ValidateSet("dev", "staging", "prod")]
+    [string]$Environment = "dev",
+
+    [Parameter(Mandatory=$false)]
+    [string]$Location = "eastus",
+
+    [Parameter(Mandatory=$false)]
+    [string]$SubscriptionId,
+
+    [Parameter(Mandatory=$false)]
+    [ValidateSet("appservice", "containerapp")]
+    [string]$HostingType = "appservice",
+
+    [Parameter(Mandatory=$false)]
+    [ValidateSet("F1", "B1", "S1", "P1v2")]
+    [string]$AppServiceSku = "F1",
+
+    [Parameter(Mandatory=$false)]
+    [string]$ContainerImage = "mcr.microsoft.com/hello-world:latest"
+)
+
+# ==============================================================================
+# CONFIGURATION
+# ==============================================================================
+
+$ErrorActionPreference = "Stop"
+
+$ResourceGroup = "rg-$AppName-$Environment"
+$DeploymentName = "deploy-$AppName-$(Get-Date -Format 'yyyyMMdd-HHmmss')"
+
+# ==============================================================================
+# FUNCTIONS
+# ==============================================================================
+
+function Write-InfoLog {
+    param([string]$Message)
+    Write-Host "ℹ️  $Message" -ForegroundColor Blue
+}
+
+function Write-SuccessLog {
+    param([string]$Message)
+    Write-Host "✅ $Message" -ForegroundColor Green
+}
+
+function Write-WarningLog {
+    param([string]$Message)
+    Write-Host "⚠️  $Message" -ForegroundColor Yellow
+}
+
+function Write-ErrorLog {
+    param([string]$Message)
+    Write-Host "❌ $Message" -ForegroundColor Red
+}
+
+function Test-Prerequisites {
+    Write-InfoLog "Checking prerequisites..."
+
+    # Check Azure CLI
+    $azCliInstalled = Get-Command az -ErrorAction SilentlyContinue
+    if (-not $azCliInstalled) {
+        Write-ErrorLog "Azure CLI not found. Install from: https://aka.ms/azure-cli"
+        exit 1
+    }
+
+    # Check login
+    try {
+        $null = az account show 2>$null
+    }
+    catch {
+        Write-ErrorLog "Not logged in to Azure. Run: az login"
+        exit 1
+    }
+
+    # Set subscription if provided
+    if ($SubscriptionId) {
+        Write-InfoLog "Setting subscription to: $SubscriptionId"
+        az account set --subscription $SubscriptionId
+    }
+
+    Write-SuccessLog "Prerequisites checked"
+}
+
+function New-ResourceGroupIfNotExists {
+    Write-InfoLog "Creating resource group: $ResourceGroup"
+
+    $exists = az group exists -n $ResourceGroup
+    if ($exists -eq "true") {
+        Write-WarningLog "Resource group already exists"
+    }
+    else {
+        az group create `
+            --name $ResourceGroup `
+            --location $Location `
+            --tags `
+                environment=$Environment `
+                application=$AppName `
+                managedBy=bicep `
+                framework=morph-spec
+
+        Write-SuccessLog "Resource group created"
+    }
+}
+
+function New-SqlPassword {
+    # Generate secure random password
+    $bytes = New-Object byte[] 32
+    [Security.Cryptography.RNGCryptoServiceProvider]::Create().GetBytes($bytes)
+    $password = [Convert]::ToBase64String($bytes) -replace '[=+/]', '' | Select-Object -First 25
+
+    Write-SuccessLog "SQL password generated (stored in Key Vault after deploy)"
+    return $password
+}
+
+function Deploy-Infrastructure {
+    param([string]$SqlPassword)
+
+    Write-InfoLog "Deploying infrastructure..."
+    Write-InfoLog "  App Name: $AppName"
+    Write-InfoLog "  Environment: $Environment"
+    Write-InfoLog "  Hosting Type: $HostingType"
+    Write-InfoLog "  Location: $Location"
+
+    # Prepare parameters file
+    $paramsFile = "parameters.$Environment.json"
+
+    if (-not (Test-Path $paramsFile)) {
+        Write-ErrorLog "Parameters file not found: $paramsFile"
+        exit 1
+    }
+
+    # Deploy
+    az deployment group create `
+        --resource-group $ResourceGroup `
+        --name $DeploymentName `
+        --template-file main.bicep `
+        --parameters "@$paramsFile" `
+        --parameters `
+            appName=$AppName `
+            environment=$Environment `
+            location=$Location `
+            hostingType=$HostingType `
+            appServiceSku=$AppServiceSku `
+            containerImage=$ContainerImage `
+            sqlAdminPassword=$SqlPassword `
+        --output table
+
+    Write-SuccessLog "Infrastructure deployed"
+}
+
+function Show-Outputs {
+    Write-InfoLog "Retrieving deployment outputs..."
+
+    $appUrl = az deployment group show `
+        -g $ResourceGroup `
+        -n $DeploymentName `
+        --query properties.outputs.appUrl.value -o tsv
+
+    $sqlConnection = az deployment group show `
+        -g $ResourceGroup `
+        -n $DeploymentName `
+        --query properties.outputs.sqlConnectionString.value -o tsv
+
+    $appInsightsConnection = az deployment group show `
+        -g $ResourceGroup `
+        -n $DeploymentName `
+        --query properties.outputs.appInsightsConnectionString.value -o tsv
+
+    Write-Host ""
+    Write-Host "╔════════════════════════════════════════════════════════════════╗" -ForegroundColor Green
+    Write-Host "║              DEPLOYMENT SUCCESSFUL                             ║" -ForegroundColor Green
+    Write-Host "╚════════════════════════════════════════════════════════════════╝" -ForegroundColor Green
+    Write-Host ""
+    Write-Host "🌐 Application URL:" -ForegroundColor Cyan
+    Write-Host "   $appUrl"
+    Write-Host ""
+    Write-Host "🗄️  SQL Connection String:" -ForegroundColor Cyan
+    Write-Host "   $sqlConnection"
+    Write-Host ""
+    Write-Host "📊 App Insights Connection String:" -ForegroundColor Cyan
+    Write-Host "   $appInsightsConnection"
+    Write-Host ""
+    Write-Host "💡 Next steps:" -ForegroundColor Yellow
+
+    if ($HostingType -eq "appservice") {
+        Write-Host "   1. Deploy your code: az webapp up --name app-$AppName-$Environment"
+        Write-Host "   2. View logs: az webapp log tail --name app-$AppName-$Environment -g $ResourceGroup"
+    }
+    else {
+        Write-Host "   1. Build and push container: az acr build --registry <ACR> --image ${AppName}:latest ."
+        Write-Host "   2. Update container app: az containerapp update -n ca-$AppName-$Environment -g $ResourceGroup --image <IMAGE>"
+        Write-Host "   3. View logs: az containerapp logs show -n ca-$AppName-$Environment -g $ResourceGroup --follow"
+    }
+
+    Write-Host ""
+}
+
+# ==============================================================================
+# MAIN
+# ==============================================================================
+
+function Main {
+    Write-Host ""
+    Write-Host "╔════════════════════════════════════════════════════════════════╗" -ForegroundColor Cyan
+    Write-Host "║          MORPH-SPEC - Azure Infrastructure Deploy             ║" -ForegroundColor Cyan
+    Write-Host "╚════════════════════════════════════════════════════════════════╝" -ForegroundColor Cyan
+    Write-Host ""
+
+    Test-Prerequisites
+    New-ResourceGroupIfNotExists
+    $sqlPassword = New-SqlPassword
+    Deploy-Infrastructure -SqlPassword $sqlPassword
+    Show-Outputs
+
+    Write-SuccessLog "Deployment complete! 🚀"
+}
+
+# Run main function
+Main

package/content/.morph/templates/infra/deploy.sh

@@ -0,0 +1,208 @@
+#!/bin/bash
+# ==============================================================================
+# MORPH-SPEC - Deploy Script
+# Automated deployment of Azure infrastructure
+# ==============================================================================
+
+set -e  # Exit on error
+
+# ==============================================================================
+# CONFIGURATION
+# ==============================================================================
+
+# Required variables (override via environment)
+APP_NAME="${APP_NAME:-myapp}"
+ENVIRONMENT="${ENVIRONMENT:-dev}"
+LOCATION="${LOCATION:-eastus}"
+SUBSCRIPTION_ID="${SUBSCRIPTION_ID:-}"
+
+# Optional variables
+HOSTING_TYPE="${HOSTING_TYPE:-appservice}"  # appservice or containerapp
+APP_SERVICE_SKU="${APP_SERVICE_SKU:-F1}"
+CONTAINER_IMAGE="${CONTAINER_IMAGE:-mcr.microsoft.com/hello-world:latest}"
+
+# Derived variables
+RESOURCE_GROUP="rg-${APP_NAME}-${ENVIRONMENT}"
+DEPLOYMENT_NAME="deploy-${APP_NAME}-$(date +%Y%m%d-%H%M%S)"
+
+# ==============================================================================
+# COLORS
+# ==============================================================================
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+# ==============================================================================
+# FUNCTIONS
+# ==============================================================================
+
+log_info() {
+    echo -e "${BLUE}ℹ️  $1${NC}"
+}
+
+log_success() {
+    echo -e "${GREEN}✅ $1${NC}"
+}
+
+log_warning() {
+    echo -e "${YELLOW}⚠️  $1${NC}"
+}
+
+log_error() {
+    echo -e "${RED}❌ $1${NC}"
+}
+
+check_prerequisites() {
+    log_info "Checking prerequisites..."
+
+    # Check Azure CLI
+    if ! command -v az &> /dev/null; then
+        log_error "Azure CLI not found. Install from: https://aka.ms/azure-cli"
+        exit 1
+    fi
+
+    # Check login
+    if ! az account show &> /dev/null; then
+        log_error "Not logged in to Azure. Run: az login"
+        exit 1
+    fi
+
+    # Set subscription if provided
+    if [ -n "$SUBSCRIPTION_ID" ]; then
+        log_info "Setting subscription to: $SUBSCRIPTION_ID"
+        az account set --subscription "$SUBSCRIPTION_ID"
+    fi
+
+    log_success "Prerequisites checked"
+}
+
+create_resource_group() {
+    log_info "Creating resource group: $RESOURCE_GROUP"
+
+    if az group exists -n "$RESOURCE_GROUP" | grep -q true; then
+        log_warning "Resource group already exists"
+    else
+        az group create \
+            --name "$RESOURCE_GROUP" \
+            --location "$LOCATION" \
+            --tags \
+                environment="$ENVIRONMENT" \
+                application="$APP_NAME" \
+                managedBy="bicep" \
+                framework="morph-spec"
+
+        log_success "Resource group created"
+    fi
+}
+
+generate_sql_password() {
+    # Generate secure random password
+    SQL_PASSWORD=$(openssl rand -base64 32 | tr -d "=+/" | cut -c1-25)
+    log_success "SQL password generated (stored in Key Vault after deploy)"
+}
+
+deploy_infrastructure() {
+    log_info "Deploying infrastructure..."
+    log_info "  App Name: $APP_NAME"
+    log_info "  Environment: $ENVIRONMENT"
+    log_info "  Hosting Type: $HOSTING_TYPE"
+    log_info "  Location: $LOCATION"
+
+    # Prepare parameters file
+    PARAMS_FILE="parameters.${ENVIRONMENT}.json"
+
+    if [ ! -f "$PARAMS_FILE" ]; then
+        log_error "Parameters file not found: $PARAMS_FILE"
+        exit 1
+    fi
+
+    # Deploy
+    az deployment group create \
+        --resource-group "$RESOURCE_GROUP" \
+        --name "$DEPLOYMENT_NAME" \
+        --template-file main.bicep \
+        --parameters "@$PARAMS_FILE" \
+        --parameters \
+            appName="$APP_NAME" \
+            environment="$ENVIRONMENT" \
+            location="$LOCATION" \
+            hostingType="$HOSTING_TYPE" \
+            appServiceSku="$APP_SERVICE_SKU" \
+            containerImage="$CONTAINER_IMAGE" \
+            sqlAdminPassword="$SQL_PASSWORD" \
+        --output table
+
+    log_success "Infrastructure deployed"
+}
+
+show_outputs() {
+    log_info "Retrieving deployment outputs..."
+
+    APP_URL=$(az deployment group show \
+        -g "$RESOURCE_GROUP" \
+        -n "$DEPLOYMENT_NAME" \
+        --query properties.outputs.appUrl.value -o tsv)
+
+    SQL_CONNECTION=$(az deployment group show \
+        -g "$RESOURCE_GROUP" \
+        -n "$DEPLOYMENT_NAME" \
+        --query properties.outputs.sqlConnectionString.value -o tsv)
+
+    APPINSIGHTS_CONNECTION=$(az deployment group show \
+        -g "$RESOURCE_GROUP" \
+        -n "$DEPLOYMENT_NAME" \
+        --query properties.outputs.appInsightsConnectionString.value -o tsv)
+
+    echo ""
+    echo "╔════════════════════════════════════════════════════════════════╗"
+    echo "║              DEPLOYMENT SUCCESSFUL                             ║"
+    echo "╚════════════════════════════════════════════════════════════════╝"
+    echo ""
+    echo "🌐 Application URL:"
+    echo "   $APP_URL"
+    echo ""
+    echo "🗄️  SQL Connection String:"
+    echo "   $SQL_CONNECTION"
+    echo ""
+    echo "📊 App Insights Connection String:"
+    echo "   $APPINSIGHTS_CONNECTION"
+    echo ""
+    echo "💡 Next steps:"
+
+    if [ "$HOSTING_TYPE" = "appservice" ]; then
+        echo "   1. Deploy your code: az webapp up --name app-${APP_NAME}-${ENVIRONMENT}"
+        echo "   2. View logs: az webapp log tail --name app-${APP_NAME}-${ENVIRONMENT} -g $RESOURCE_GROUP"
+    else
+        echo "   1. Build and push container: az acr build --registry <ACR> --image ${APP_NAME}:latest ."
+        echo "   2. Update container app: az containerapp update -n ca-${APP_NAME}-${ENVIRONMENT} -g $RESOURCE_GROUP --image <IMAGE>"
+        echo "   3. View logs: az containerapp logs show -n ca-${APP_NAME}-${ENVIRONMENT} -g $RESOURCE_GROUP --follow"
+    fi
+
+    echo ""
+}
+
+# ==============================================================================
+# MAIN
+# ==============================================================================
+
+main() {
+    echo ""
+    echo "╔════════════════════════════════════════════════════════════════╗"
+    echo "║          MORPH-SPEC - Azure Infrastructure Deploy             ║"
+    echo "╚════════════════════════════════════════════════════════════════╝"
+    echo ""
+
+    check_prerequisites
+    create_resource_group
+    generate_sql_password
+    deploy_infrastructure
+    show_outputs
+
+    log_success "Deployment complete! 🚀"
+}
+
+# Run main function
+main

package/content/.morph/templates/infra/main.bicep

@@ -25,9 +25,17 @@ param appName string
 @secure()
 param sqlAdminPassword string
 
-@description('Container image to deploy')
+@description('Container image to deploy (only for Container Apps)')
 param containerImage string = 'mcr.microsoft.com/hello-world:latest'
 
+@description('Hosting type: appservice or containerapp')
+@allowed(['appservice', 'containerapp'])
+param hostingType string = 'appservice'
+
+@description('App Service SKU (only for App Service hosting)')
+@allowed(['F1', 'B1', 'S1', 'P1v2'])
+param appServiceSku string = 'F1'
+
 // ==============================================================================
 // VARIABLES
 // ==============================================================================
@@ -106,8 +114,28 @@ module sqlDatabase 'sql-database.bicep' = {
   }
 }
 
+// ==============================================================================
+// HOSTING - App Service (Conditional)
+// ==============================================================================
+
+module appService 'app-service.bicep' = if (hostingType == 'appservice') {
+  name: 'appService-${uniqueString(resourceGroup().id)}'
+  params: {
+    name: 'app-${resourcePrefix}'
+    location: location
+    tags: tags
+    sku: appServiceSku
+    appInsightsConnectionString: appInsights.outputs.connectionString
+    alwaysOn: appServiceSku != 'F1' // Only available on paid tiers
+  }
+}
+
+// ==============================================================================
+// HOSTING - Container Apps (Conditional)
+// ==============================================================================
+
 // Container Apps Environment
-module containerAppEnv 'container-app-env.bicep' = {
+module containerAppEnv 'container-app-env.bicep' = if (hostingType == 'containerapp') {
   name: 'containerAppEnv-${uniqueString(resourceGroup().id)}'
   params: {
     name: '${resourcePrefix}-env'
@@ -118,13 +146,13 @@ module containerAppEnv 'container-app-env.bicep' = {
 }
 
 // Container App
-module containerApp 'container-app.bicep' = {
+module containerApp 'container-app.bicep' = if (hostingType == 'containerapp') {
   name: 'containerApp-${uniqueString(resourceGroup().id)}'
   params: {
-    name: resourcePrefix
+    name: 'ca-${resourcePrefix}'
     location: location
     tags: tags
-    environmentId: containerAppEnv.outputs.id
+    environmentId: hostingType == 'containerapp' ? containerAppEnv.outputs.id : ''
     containerImage: containerImage
     appInsightsConnectionString: appInsights.outputs.connectionString
     minReplicas: environment == 'prod' ? 1 : 0
@@ -136,8 +164,11 @@ module containerApp 'container-app.bicep' = {
 // OUTPUTS
 // ==============================================================================
 
-@description('Container App URL')
-output containerAppUrl string = containerApp.outputs.url
+@description('Application URL')
+output appUrl string = hostingType == 'appservice' ? appService.outputs.url : containerApp.outputs.url
+
+@description('Hosting Type')
+output hostingType string = hostingType
 
 @description('SQL Server connection string')
 output sqlConnectionString string = sqlDatabase.outputs.connectionString
@@ -153,3 +184,6 @@ output appInsightsConnectionString string = appInsights.outputs.connectionString
 
 @description('Log Analytics Workspace ID')
 output logAnalyticsWorkspaceId string = logAnalytics.id
+
+@description('App Service Principal ID (for Managed Identity)')
+output appPrincipalId string = hostingType == 'appservice' ? appService.outputs.principalId : ''

package/content/.morph/templates/infra/parameters.dev.json

@@ -16,6 +16,12 @@
         "secretName": "sql-admin-password"
       }
     },
+    "hostingType": {
+      "value": "appservice"
+    },
+    "appServiceSku": {
+      "value": "F1"
+    },
     "containerImage": {
       "value": "{{ACR_NAME}}.azurecr.io/{{APP_NAME}}:latest"
     }