@polymorphism-tech/morph-spec 3.0.0 → 3.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (160) hide show
  1. package/CLAUDE.md +75 -371
  2. package/LICENSE +72 -72
  3. package/bin/detect-agents.js +225 -225
  4. package/bin/render-template.js +302 -302
  5. package/bin/semantic-detect-agents.js +246 -246
  6. package/bin/validate-agents-skills.js +251 -251
  7. package/bin/validate-agents.js +69 -69
  8. package/bin/validate-phase.js +263 -263
  9. package/content/.azure/README.md +293 -293
  10. package/content/.azure/docs/azure-devops-setup.md +454 -454
  11. package/content/.azure/docs/branch-strategy.md +398 -398
  12. package/content/.azure/docs/local-development.md +515 -515
  13. package/content/.azure/pipelines/pipeline-variables.yml +34 -34
  14. package/content/.azure/pipelines/prod-pipeline.yml +319 -319
  15. package/content/.azure/pipelines/staging-pipeline.yml +234 -234
  16. package/content/.azure/pipelines/templates/build-dotnet.yml +75 -75
  17. package/content/.azure/pipelines/templates/deploy-app-service.yml +94 -94
  18. package/content/.azure/pipelines/templates/deploy-container-app.yml +120 -120
  19. package/content/.azure/pipelines/templates/infra-deploy.yml +90 -90
  20. package/content/.claude/commands/morph-archive.md +79 -79
  21. package/content/.claude/commands/morph-deploy.md +529 -529
  22. package/content/.claude/commands/morph-infra.md +209 -209
  23. package/content/.claude/commands/morph-preflight.md +227 -227
  24. package/content/.claude/commands/morph-troubleshoot.md +122 -122
  25. package/content/.claude/settings.local.json +15 -15
  26. package/content/.claude/skills/{specialists → level-2-domains/architecture}/prompt-engineer.md +189 -189
  27. package/content/.claude/skills/{specialists → level-2-domains/architecture}/seo-growth-hacker.md +320 -320
  28. package/content/.claude/skills/{infra → level-2-domains/infrastructure}/azure-deploy-specialist.md +699 -699
  29. package/content/.morph/.morphversion +5 -5
  30. package/content/.morph/archive/.gitkeep +25 -25
  31. package/content/.morph/config/agents.json +7 -5
  32. package/content/.morph/docs/STORY-DRIVEN-DEVELOPMENT.md +392 -392
  33. package/content/.morph/examples/api-nextjs/README.md +241 -241
  34. package/content/.morph/examples/api-nextjs/contracts.ts +307 -307
  35. package/content/.morph/examples/api-nextjs/spec.md +399 -399
  36. package/content/.morph/examples/api-nextjs/tasks.md +168 -168
  37. package/content/.morph/examples/micro-saas/README.md +125 -125
  38. package/content/.morph/examples/micro-saas/contracts.cs +358 -358
  39. package/content/.morph/examples/micro-saas/decisions.md +246 -246
  40. package/content/.morph/examples/micro-saas/spec.md +236 -236
  41. package/content/.morph/examples/micro-saas/tasks.md +150 -150
  42. package/content/.morph/examples/multi-agent/README.md +309 -309
  43. package/content/.morph/examples/multi-agent/contracts.cs +433 -433
  44. package/content/.morph/examples/multi-agent/spec.md +479 -479
  45. package/content/.morph/examples/multi-agent/tasks.md +185 -185
  46. package/content/.morph/examples/state-v3.json +188 -188
  47. package/content/.morph/features/.gitkeep +25 -25
  48. package/content/.morph/hooks/pre-commit-all.sh +48 -48
  49. package/content/.morph/hooks/pre-commit-specs.sh +49 -49
  50. package/content/.morph/hooks/pre-commit-tests.sh +60 -60
  51. package/content/.morph/project.md +160 -160
  52. package/content/.morph/schemas/agent.schema.json +296 -296
  53. package/content/.morph/specs/.gitkeep +20 -20
  54. package/content/.morph/standards/coding.md +377 -377
  55. package/content/.morph/standards/fluent-ui-setup.md +590 -590
  56. package/content/.morph/standards/migration-guide.md +514 -514
  57. package/content/.morph/standards/passkeys-auth.md +423 -423
  58. package/content/.morph/standards/vector-search-rag.md +536 -536
  59. package/content/.morph/state.json +17 -17
  60. package/content/.morph/templates/FluentDesignTheme.cs +149 -149
  61. package/content/.morph/templates/MudTheme.cs +281 -281
  62. package/content/.morph/templates/component.razor +239 -239
  63. package/content/.morph/templates/contracts.cs +217 -217
  64. package/content/.morph/templates/design-system.css +226 -226
  65. package/content/.morph/templates/infra/.dockerignore.example +89 -89
  66. package/content/.morph/templates/infra/Dockerfile.example +82 -82
  67. package/content/.morph/templates/infra/README.md +286 -286
  68. package/content/.morph/templates/infra/app-insights.bicep +63 -63
  69. package/content/.morph/templates/infra/app-service.bicep +164 -164
  70. package/content/.morph/templates/infra/azure-pipelines-deploy.yml +480 -480
  71. package/content/.morph/templates/infra/container-app-env.bicep +49 -49
  72. package/content/.morph/templates/infra/container-app.bicep +156 -156
  73. package/content/.morph/templates/infra/deploy-checklist.md +426 -426
  74. package/content/.morph/templates/infra/deploy.ps1 +229 -229
  75. package/content/.morph/templates/infra/deploy.sh +208 -208
  76. package/content/.morph/templates/infra/key-vault.bicep +91 -91
  77. package/content/.morph/templates/infra/main.bicep +189 -189
  78. package/content/.morph/templates/infra/parameters.dev.json +29 -29
  79. package/content/.morph/templates/infra/parameters.prod.json +29 -29
  80. package/content/.morph/templates/infra/parameters.staging.json +29 -29
  81. package/content/.morph/templates/infra/sql-database.bicep +103 -103
  82. package/content/.morph/templates/infra/storage.bicep +106 -106
  83. package/content/.morph/templates/integrations/asaas-client.cs +387 -387
  84. package/content/.morph/templates/integrations/asaas-webhook.cs +351 -351
  85. package/content/.morph/templates/integrations/azure-identity-config.cs +288 -288
  86. package/content/.morph/templates/integrations/clerk-config.cs +258 -258
  87. package/content/.morph/templates/job.cs +171 -171
  88. package/content/.morph/templates/migration.cs +83 -83
  89. package/content/.morph/templates/repository.cs +141 -141
  90. package/content/.morph/templates/saas/subscription.cs +347 -347
  91. package/content/.morph/templates/saas/tenant.cs +338 -338
  92. package/content/.morph/templates/service.cs +139 -139
  93. package/content/.morph/templates/sprint-status.yaml +68 -68
  94. package/content/.morph/templates/story.md +143 -143
  95. package/content/.morph/templates/test.cs +239 -239
  96. package/content/.morph/templates/ui-design-system.md +286 -286
  97. package/content/.morph/templates/ui-flows.md +336 -336
  98. package/content/.morph/templates/ui-mockups.md +133 -133
  99. package/content/.morph/test-infra/example.bicep +59 -59
  100. package/content/README.md +79 -79
  101. package/docs/api/fonts/Source-Sans-Pro/sourcesanspro-light-webfont.svg +977 -977
  102. package/docs/api/fonts/Source-Sans-Pro/sourcesanspro-regular-webfont.svg +1048 -1048
  103. package/docs/api/scripts/collapse.js +38 -38
  104. package/docs/api/scripts/commonNav.js +28 -28
  105. package/docs/api/scripts/linenumber.js +25 -25
  106. package/docs/api/scripts/nav.js +12 -12
  107. package/docs/api/scripts/polyfill.js +3 -3
  108. package/docs/api/scripts/prettify/Apache-License-2.0.txt +202 -202
  109. package/docs/api/scripts/prettify/lang-css.js +2 -2
  110. package/docs/api/scripts/prettify/prettify.js +28 -28
  111. package/docs/api/scripts/search.js +98 -98
  112. package/docs/api/styles/jsdoc.css +776 -776
  113. package/docs/api/styles/prettify.css +80 -80
  114. package/docs/examples.md +328 -328
  115. package/docs/templates.md +418 -418
  116. package/package.json +1 -2
  117. package/scripts/postinstall.js +132 -132
  118. package/scripts/reorganize-skills.cjs +175 -0
  119. package/scripts/validate-agents-structure.cjs +52 -0
  120. package/scripts/validate-skills.cjs +180 -0
  121. package/src/commands/analyze-blazor-concurrency.js +193 -193
  122. package/src/commands/create-story.js +351 -351
  123. package/src/commands/deploy.js +780 -780
  124. package/src/commands/detect-agents.js +9 -0
  125. package/src/commands/detect.js +104 -104
  126. package/src/commands/generate.js +149 -149
  127. package/src/commands/lint-fluent.js +352 -352
  128. package/src/commands/rollback-phase.js +185 -185
  129. package/src/commands/session-summary.js +291 -291
  130. package/src/commands/shard-spec.js +224 -224
  131. package/src/commands/sprint-status.js +250 -250
  132. package/src/commands/state.js +334 -333
  133. package/src/commands/sync.js +167 -167
  134. package/src/commands/troubleshoot.js +222 -222
  135. package/src/commands/update.js +13 -1
  136. package/src/commands/validate-blazor-state.js +210 -210
  137. package/src/commands/validate-blazor.js +156 -156
  138. package/src/commands/validate-css.js +84 -84
  139. package/src/commands/validate-phase.js +221 -221
  140. package/src/lib/blazor-concurrency-analyzer.js +288 -288
  141. package/src/lib/blazor-state-validator.js +291 -291
  142. package/src/lib/blazor-validator.js +374 -374
  143. package/src/lib/css-validator.js +352 -352
  144. package/src/lib/design-system-generator.js +298 -298
  145. package/{detectors → src/lib/detectors}/config-detector.js +223 -223
  146. package/{detectors → src/lib/detectors}/conversation-analyzer.js +163 -163
  147. package/{detectors → src/lib/detectors}/index.js +84 -84
  148. package/{detectors → src/lib/detectors}/standards-generator.js +275 -275
  149. package/src/lib/learning-system.js +520 -520
  150. package/src/lib/mockup-generator.js +366 -366
  151. package/src/lib/state-manager.js +21 -4
  152. package/src/lib/troubleshoot-grep.js +194 -194
  153. package/src/lib/troubleshoot-index.js +144 -144
  154. package/src/lib/ui-detector.js +350 -350
  155. package/src/lib/validators/architecture-validator.js +387 -387
  156. package/src/lib/validators/package-validator.js +360 -360
  157. package/src/lib/validators/ui-contrast-validator.js +422 -422
  158. package/src/utils/logger.js +32 -32
  159. package/src/utils/version-checker.js +175 -175
  160. /package/{detectors → src/lib/detectors}/structure-detector.js +0 -0
@@ -1,399 +1,399 @@
1
- # API .NET + Next.js - Especificação
2
-
3
- ## 1. Visão Geral
4
-
5
- Arquitetura full-stack moderna com API .NET e frontend Next.js, seguindo boas práticas de separação de responsabilidades.
6
-
7
- ### 1.1 Objetivos
8
-
9
- - Backend robusto com .NET Minimal APIs
10
- - Frontend moderno com Next.js App Router
11
- - Autenticação unificada via Clerk
12
- - Type-safety end-to-end
13
- - Deploy independente de cada camada
14
-
15
- ### 1.2 Use Cases
16
-
17
- - Dashboards administrativos
18
- - Aplicações CRUD complexas
19
- - Sistemas que precisam de SEO (Next.js SSR)
20
- - Aplicações com múltiplos frontends (web, mobile)
21
-
22
- ## 2. Requisitos Funcionais
23
-
24
- ### 2.1 Backend (.NET API)
25
-
26
- | ID | Requisito |
27
- |----|-----------|
28
- | API-001 | Minimal APIs com OpenAPI/Swagger |
29
- | API-002 | Autenticação JWT via Clerk |
30
- | API-003 | Validação com FluentValidation |
31
- | API-004 | Paginação, filtros e ordenação |
32
- | API-005 | Rate limiting por usuário |
33
- | API-006 | Health checks (liveness + readiness) |
34
- | API-007 | Logging estruturado |
35
- | API-008 | CORS configurável |
36
-
37
- ### 2.2 Frontend (Next.js)
38
-
39
- | ID | Requisito |
40
- |----|-----------|
41
- | WEB-001 | App Router com layouts aninhados |
42
- | WEB-002 | Server Components para dados estáticos |
43
- | WEB-003 | Client Components para interatividade |
44
- | WEB-004 | React Query para cache e mutations |
45
- | WEB-005 | Forms com React Hook Form + Zod |
46
- | WEB-006 | UI com Tailwind + shadcn/ui |
47
- | WEB-007 | Dark mode support |
48
- | WEB-008 | Loading states e error boundaries |
49
-
50
- ### 2.3 Autenticação
51
-
52
- | ID | Requisito |
53
- |----|-----------|
54
- | AUTH-001 | SSO via Clerk |
55
- | AUTH-002 | Proteção de rotas (middleware) |
56
- | AUTH-003 | Token refresh automático |
57
- | AUTH-004 | Role-based access control |
58
-
59
- ## 3. Requisitos Não-Funcionais
60
-
61
- ### 3.1 Performance
62
-
63
- | ID | Requisito |
64
- |----|-----------|
65
- | PERF-001 | API response < 100ms (P95) |
66
- | PERF-002 | LCP < 2.5s (Core Web Vitals) |
67
- | PERF-003 | FID < 100ms |
68
- | PERF-004 | CLS < 0.1 |
69
-
70
- ### 3.2 Segurança
71
-
72
- | ID | Requisito |
73
- |----|-----------|
74
- | SEC-001 | HTTPS obrigatório |
75
- | SEC-002 | CORS restrito a domínios conhecidos |
76
- | SEC-003 | Input validation em todos endpoints |
77
- | SEC-004 | SQL injection prevention (EF Core) |
78
- | SEC-005 | XSS prevention (React default) |
79
-
80
- ## 4. Arquitetura da API
81
-
82
- ### 4.1 Estrutura de Camadas
83
-
84
- ```
85
- Api/
86
- ├── Endpoints/ # Minimal API endpoints
87
- ├── Middleware/ # Custom middlewares
88
- ├── Filters/ # Exception filters
89
- └── Program.cs # Entry point
90
-
91
- Application/
92
- ├── Services/ # Business logic
93
- ├── Validators/ # FluentValidation
94
- └── DTOs/ # Data transfer objects
95
-
96
- Domain/
97
- ├── Entities/ # Domain models
98
- ├── Interfaces/ # Repository contracts
99
- └── Enums/ # Domain enums
100
-
101
- Infrastructure/
102
- ├── Data/ # DbContext
103
- ├── Repositories/ # EF Core implementations
104
- └── Services/ # External service clients
105
- ```
106
-
107
- ### 4.2 Endpoint Pattern
108
-
109
- ```csharp
110
- // Endpoints/ProductEndpoints.cs
111
- public static class ProductEndpoints
112
- {
113
- public static void MapProductEndpoints(this IEndpointRouteBuilder app)
114
- {
115
- var group = app.MapGroup("/api/products")
116
- .WithTags("Products")
117
- .RequireAuthorization();
118
-
119
- group.MapGet("/", GetAll);
120
- group.MapGet("/{id:int}", GetById);
121
- group.MapPost("/", Create);
122
- group.MapPut("/{id:int}", Update);
123
- group.MapDelete("/{id:int}", Delete);
124
- }
125
-
126
- private static async Task<IResult> GetAll(
127
- [AsParameters] PaginationQuery query,
128
- IProductService service,
129
- CancellationToken ct)
130
- {
131
- var result = await service.GetAllAsync(query, ct);
132
- return Results.Ok(result);
133
- }
134
- }
135
- ```
136
-
137
- ### 4.3 Pagination
138
-
139
- ```csharp
140
- public record PaginationQuery(
141
- int Page = 1,
142
- int PageSize = 20,
143
- string? SortBy = null,
144
- bool SortDesc = false,
145
- string? Search = null
146
- );
147
-
148
- public record PagedResult<T>(
149
- IReadOnlyList<T> Items,
150
- int TotalItems,
151
- int Page,
152
- int PageSize,
153
- int TotalPages
154
- );
155
- ```
156
-
157
- ## 5. Arquitetura do Frontend
158
-
159
- ### 5.1 Estrutura de Pastas
160
-
161
- ```
162
- app/
163
- ├── (auth)/
164
- │ ├── sign-in/[[...sign-in]]/page.tsx
165
- │ └── sign-up/[[...sign-up]]/page.tsx
166
- ├── (dashboard)/
167
- │ ├── layout.tsx # Dashboard layout
168
- │ ├── dashboard/page.tsx
169
- │ ├── products/
170
- │ │ ├── page.tsx # List
171
- │ │ ├── [id]/page.tsx # Detail
172
- │ │ └── new/page.tsx # Create
173
- │ └── orders/
174
- ├── api/ # API routes (BFF)
175
- ├── layout.tsx # Root layout
176
- └── page.tsx # Landing
177
-
178
- components/
179
- ├── ui/ # shadcn components
180
- ├── forms/ # Form components
181
- ├── tables/ # Table components
182
- └── shared/ # Shared components
183
-
184
- hooks/
185
- ├── use-products.ts
186
- ├── use-orders.ts
187
- └── use-pagination.ts
188
-
189
- lib/
190
- ├── api-client.ts # Fetch wrapper
191
- ├── query-client.ts # React Query config
192
- └── utils.ts # Utility functions
193
-
194
- types/
195
- ├── api.ts # API response types
196
- └── entities.ts # Domain types
197
- ```
198
-
199
- ### 5.2 Data Fetching Pattern
200
-
201
- ```typescript
202
- // hooks/use-products.ts
203
- import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
204
- import { apiClient } from "@/lib/api-client";
205
- import type { Product, CreateProductRequest } from "@/types/entities";
206
-
207
- export function useProducts(params?: PaginationParams) {
208
- return useQuery({
209
- queryKey: ["products", params],
210
- queryFn: () => apiClient<PagedResult<Product>>("/api/products", { params }),
211
- });
212
- }
213
-
214
- export function useProduct(id: number) {
215
- return useQuery({
216
- queryKey: ["products", id],
217
- queryFn: () => apiClient<Product>(`/api/products/${id}`),
218
- enabled: !!id,
219
- });
220
- }
221
-
222
- export function useCreateProduct() {
223
- const queryClient = useQueryClient();
224
-
225
- return useMutation({
226
- mutationFn: (data: CreateProductRequest) =>
227
- apiClient<Product>("/api/products", {
228
- method: "POST",
229
- body: JSON.stringify(data),
230
- }),
231
- onSuccess: () => {
232
- queryClient.invalidateQueries({ queryKey: ["products"] });
233
- },
234
- });
235
- }
236
- ```
237
-
238
- ### 5.3 Form Pattern
239
-
240
- ```typescript
241
- // components/forms/product-form.tsx
242
- "use client";
243
-
244
- import { useForm } from "react-hook-form";
245
- import { zodResolver } from "@hookform/resolvers/zod";
246
- import { z } from "zod";
247
- import { useCreateProduct } from "@/hooks/use-products";
248
-
249
- const schema = z.object({
250
- name: z.string().min(1, "Name is required"),
251
- price: z.number().positive("Price must be positive"),
252
- description: z.string().optional(),
253
- });
254
-
255
- type FormData = z.infer<typeof schema>;
256
-
257
- export function ProductForm() {
258
- const { mutate, isPending } = useCreateProduct();
259
- const form = useForm<FormData>({
260
- resolver: zodResolver(schema),
261
- });
262
-
263
- const onSubmit = (data: FormData) => {
264
- mutate(data);
265
- };
266
-
267
- return (
268
- <form onSubmit={form.handleSubmit(onSubmit)}>
269
- {/* Form fields */}
270
- </form>
271
- );
272
- }
273
- ```
274
-
275
- ## 6. Comunicação API
276
-
277
- ### 6.1 API Client
278
-
279
- ```typescript
280
- // lib/api-client.ts
281
- import { auth } from "@clerk/nextjs/server";
282
-
283
- const API_URL = process.env.NEXT_PUBLIC_API_URL;
284
-
285
- interface FetchOptions extends RequestInit {
286
- params?: Record<string, string | number | undefined>;
287
- }
288
-
289
- export async function apiClient<T>(
290
- endpoint: string,
291
- options: FetchOptions = {}
292
- ): Promise<T> {
293
- const { params, ...init } = options;
294
-
295
- // Build URL with query params
296
- const url = new URL(`${API_URL}${endpoint}`);
297
- if (params) {
298
- Object.entries(params).forEach(([key, value]) => {
299
- if (value !== undefined) {
300
- url.searchParams.append(key, String(value));
301
- }
302
- });
303
- }
304
-
305
- // Get auth token
306
- const { getToken } = auth();
307
- const token = await getToken();
308
-
309
- const response = await fetch(url.toString(), {
310
- ...init,
311
- headers: {
312
- "Content-Type": "application/json",
313
- ...(token && { Authorization: `Bearer ${token}` }),
314
- ...init.headers,
315
- },
316
- });
317
-
318
- if (!response.ok) {
319
- const error = await response.json().catch(() => ({}));
320
- throw new ApiError(response.status, error.title || "Request failed", error);
321
- }
322
-
323
- return response.json();
324
- }
325
-
326
- class ApiError extends Error {
327
- constructor(
328
- public status: number,
329
- message: string,
330
- public details?: unknown
331
- ) {
332
- super(message);
333
- this.name = "ApiError";
334
- }
335
- }
336
- ```
337
-
338
- ## 7. Configurações
339
-
340
- ### 7.1 API (appsettings.json)
341
-
342
- ```json
343
- {
344
- "ConnectionStrings": {
345
- "DefaultConnection": "Server=...;Database=...;"
346
- },
347
- "Clerk": {
348
- "Authority": "https://your-clerk-domain.clerk.accounts.dev",
349
- "SecretKey": "sk_..."
350
- },
351
- "Cors": {
352
- "AllowedOrigins": ["http://localhost:3000", "https://your-domain.com"]
353
- }
354
- }
355
- ```
356
-
357
- ### 7.2 Frontend (.env.local)
358
-
359
- ```env
360
- NEXT_PUBLIC_API_URL=http://localhost:5000
361
- NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=pk_...
362
- CLERK_SECRET_KEY=sk_...
363
- ```
364
-
365
- ## 8. Deploy
366
-
367
- ### 8.1 Docker
368
-
369
- ```dockerfile
370
- # API Dockerfile
371
- FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS base
372
- WORKDIR /app
373
- EXPOSE 8080
374
-
375
- FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
376
- WORKDIR /src
377
- COPY ["src/api/Api/Api.csproj", "Api/"]
378
- RUN dotnet restore "Api/Api.csproj"
379
- COPY src/api/ .
380
- RUN dotnet build "Api/Api.csproj" -c Release -o /app/build
381
-
382
- FROM build AS publish
383
- RUN dotnet publish "Api/Api.csproj" -c Release -o /app/publish
384
-
385
- FROM base AS final
386
- WORKDIR /app
387
- COPY --from=publish /app/publish .
388
- ENTRYPOINT ["dotnet", "Api.dll"]
389
- ```
390
-
391
- ### 8.2 Container Apps
392
-
393
- Dois Container Apps separados:
394
- - `app-api`: .NET API
395
- - `app-web`: Next.js (com output: standalone)
396
-
397
- ---
398
-
399
- *MORPH-SPEC by Polymorphism Tech*
1
+ # API .NET + Next.js - Especificação
2
+
3
+ ## 1. Visão Geral
4
+
5
+ Arquitetura full-stack moderna com API .NET e frontend Next.js, seguindo boas práticas de separação de responsabilidades.
6
+
7
+ ### 1.1 Objetivos
8
+
9
+ - Backend robusto com .NET Minimal APIs
10
+ - Frontend moderno com Next.js App Router
11
+ - Autenticação unificada via Clerk
12
+ - Type-safety end-to-end
13
+ - Deploy independente de cada camada
14
+
15
+ ### 1.2 Use Cases
16
+
17
+ - Dashboards administrativos
18
+ - Aplicações CRUD complexas
19
+ - Sistemas que precisam de SEO (Next.js SSR)
20
+ - Aplicações com múltiplos frontends (web, mobile)
21
+
22
+ ## 2. Requisitos Funcionais
23
+
24
+ ### 2.1 Backend (.NET API)
25
+
26
+ | ID | Requisito |
27
+ |----|-----------|
28
+ | API-001 | Minimal APIs com OpenAPI/Swagger |
29
+ | API-002 | Autenticação JWT via Clerk |
30
+ | API-003 | Validação com FluentValidation |
31
+ | API-004 | Paginação, filtros e ordenação |
32
+ | API-005 | Rate limiting por usuário |
33
+ | API-006 | Health checks (liveness + readiness) |
34
+ | API-007 | Logging estruturado |
35
+ | API-008 | CORS configurável |
36
+
37
+ ### 2.2 Frontend (Next.js)
38
+
39
+ | ID | Requisito |
40
+ |----|-----------|
41
+ | WEB-001 | App Router com layouts aninhados |
42
+ | WEB-002 | Server Components para dados estáticos |
43
+ | WEB-003 | Client Components para interatividade |
44
+ | WEB-004 | React Query para cache e mutations |
45
+ | WEB-005 | Forms com React Hook Form + Zod |
46
+ | WEB-006 | UI com Tailwind + shadcn/ui |
47
+ | WEB-007 | Dark mode support |
48
+ | WEB-008 | Loading states e error boundaries |
49
+
50
+ ### 2.3 Autenticação
51
+
52
+ | ID | Requisito |
53
+ |----|-----------|
54
+ | AUTH-001 | SSO via Clerk |
55
+ | AUTH-002 | Proteção de rotas (middleware) |
56
+ | AUTH-003 | Token refresh automático |
57
+ | AUTH-004 | Role-based access control |
58
+
59
+ ## 3. Requisitos Não-Funcionais
60
+
61
+ ### 3.1 Performance
62
+
63
+ | ID | Requisito |
64
+ |----|-----------|
65
+ | PERF-001 | API response < 100ms (P95) |
66
+ | PERF-002 | LCP < 2.5s (Core Web Vitals) |
67
+ | PERF-003 | FID < 100ms |
68
+ | PERF-004 | CLS < 0.1 |
69
+
70
+ ### 3.2 Segurança
71
+
72
+ | ID | Requisito |
73
+ |----|-----------|
74
+ | SEC-001 | HTTPS obrigatório |
75
+ | SEC-002 | CORS restrito a domínios conhecidos |
76
+ | SEC-003 | Input validation em todos endpoints |
77
+ | SEC-004 | SQL injection prevention (EF Core) |
78
+ | SEC-005 | XSS prevention (React default) |
79
+
80
+ ## 4. Arquitetura da API
81
+
82
+ ### 4.1 Estrutura de Camadas
83
+
84
+ ```
85
+ Api/
86
+ ├── Endpoints/ # Minimal API endpoints
87
+ ├── Middleware/ # Custom middlewares
88
+ ├── Filters/ # Exception filters
89
+ └── Program.cs # Entry point
90
+
91
+ Application/
92
+ ├── Services/ # Business logic
93
+ ├── Validators/ # FluentValidation
94
+ └── DTOs/ # Data transfer objects
95
+
96
+ Domain/
97
+ ├── Entities/ # Domain models
98
+ ├── Interfaces/ # Repository contracts
99
+ └── Enums/ # Domain enums
100
+
101
+ Infrastructure/
102
+ ├── Data/ # DbContext
103
+ ├── Repositories/ # EF Core implementations
104
+ └── Services/ # External service clients
105
+ ```
106
+
107
+ ### 4.2 Endpoint Pattern
108
+
109
+ ```csharp
110
+ // Endpoints/ProductEndpoints.cs
111
+ public static class ProductEndpoints
112
+ {
113
+ public static void MapProductEndpoints(this IEndpointRouteBuilder app)
114
+ {
115
+ var group = app.MapGroup("/api/products")
116
+ .WithTags("Products")
117
+ .RequireAuthorization();
118
+
119
+ group.MapGet("/", GetAll);
120
+ group.MapGet("/{id:int}", GetById);
121
+ group.MapPost("/", Create);
122
+ group.MapPut("/{id:int}", Update);
123
+ group.MapDelete("/{id:int}", Delete);
124
+ }
125
+
126
+ private static async Task<IResult> GetAll(
127
+ [AsParameters] PaginationQuery query,
128
+ IProductService service,
129
+ CancellationToken ct)
130
+ {
131
+ var result = await service.GetAllAsync(query, ct);
132
+ return Results.Ok(result);
133
+ }
134
+ }
135
+ ```
136
+
137
+ ### 4.3 Pagination
138
+
139
+ ```csharp
140
+ public record PaginationQuery(
141
+ int Page = 1,
142
+ int PageSize = 20,
143
+ string? SortBy = null,
144
+ bool SortDesc = false,
145
+ string? Search = null
146
+ );
147
+
148
+ public record PagedResult<T>(
149
+ IReadOnlyList<T> Items,
150
+ int TotalItems,
151
+ int Page,
152
+ int PageSize,
153
+ int TotalPages
154
+ );
155
+ ```
156
+
157
+ ## 5. Arquitetura do Frontend
158
+
159
+ ### 5.1 Estrutura de Pastas
160
+
161
+ ```
162
+ app/
163
+ ├── (auth)/
164
+ │ ├── sign-in/[[...sign-in]]/page.tsx
165
+ │ └── sign-up/[[...sign-up]]/page.tsx
166
+ ├── (dashboard)/
167
+ │ ├── layout.tsx # Dashboard layout
168
+ │ ├── dashboard/page.tsx
169
+ │ ├── products/
170
+ │ │ ├── page.tsx # List
171
+ │ │ ├── [id]/page.tsx # Detail
172
+ │ │ └── new/page.tsx # Create
173
+ │ └── orders/
174
+ ├── api/ # API routes (BFF)
175
+ ├── layout.tsx # Root layout
176
+ └── page.tsx # Landing
177
+
178
+ components/
179
+ ├── ui/ # shadcn components
180
+ ├── forms/ # Form components
181
+ ├── tables/ # Table components
182
+ └── shared/ # Shared components
183
+
184
+ hooks/
185
+ ├── use-products.ts
186
+ ├── use-orders.ts
187
+ └── use-pagination.ts
188
+
189
+ lib/
190
+ ├── api-client.ts # Fetch wrapper
191
+ ├── query-client.ts # React Query config
192
+ └── utils.ts # Utility functions
193
+
194
+ types/
195
+ ├── api.ts # API response types
196
+ └── entities.ts # Domain types
197
+ ```
198
+
199
+ ### 5.2 Data Fetching Pattern
200
+
201
+ ```typescript
202
+ // hooks/use-products.ts
203
+ import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
204
+ import { apiClient } from "@/lib/api-client";
205
+ import type { Product, CreateProductRequest } from "@/types/entities";
206
+
207
+ export function useProducts(params?: PaginationParams) {
208
+ return useQuery({
209
+ queryKey: ["products", params],
210
+ queryFn: () => apiClient<PagedResult<Product>>("/api/products", { params }),
211
+ });
212
+ }
213
+
214
+ export function useProduct(id: number) {
215
+ return useQuery({
216
+ queryKey: ["products", id],
217
+ queryFn: () => apiClient<Product>(`/api/products/${id}`),
218
+ enabled: !!id,
219
+ });
220
+ }
221
+
222
+ export function useCreateProduct() {
223
+ const queryClient = useQueryClient();
224
+
225
+ return useMutation({
226
+ mutationFn: (data: CreateProductRequest) =>
227
+ apiClient<Product>("/api/products", {
228
+ method: "POST",
229
+ body: JSON.stringify(data),
230
+ }),
231
+ onSuccess: () => {
232
+ queryClient.invalidateQueries({ queryKey: ["products"] });
233
+ },
234
+ });
235
+ }
236
+ ```
237
+
238
+ ### 5.3 Form Pattern
239
+
240
+ ```typescript
241
+ // components/forms/product-form.tsx
242
+ "use client";
243
+
244
+ import { useForm } from "react-hook-form";
245
+ import { zodResolver } from "@hookform/resolvers/zod";
246
+ import { z } from "zod";
247
+ import { useCreateProduct } from "@/hooks/use-products";
248
+
249
+ const schema = z.object({
250
+ name: z.string().min(1, "Name is required"),
251
+ price: z.number().positive("Price must be positive"),
252
+ description: z.string().optional(),
253
+ });
254
+
255
+ type FormData = z.infer<typeof schema>;
256
+
257
+ export function ProductForm() {
258
+ const { mutate, isPending } = useCreateProduct();
259
+ const form = useForm<FormData>({
260
+ resolver: zodResolver(schema),
261
+ });
262
+
263
+ const onSubmit = (data: FormData) => {
264
+ mutate(data);
265
+ };
266
+
267
+ return (
268
+ <form onSubmit={form.handleSubmit(onSubmit)}>
269
+ {/* Form fields */}
270
+ </form>
271
+ );
272
+ }
273
+ ```
274
+
275
+ ## 6. Comunicação API
276
+
277
+ ### 6.1 API Client
278
+
279
+ ```typescript
280
+ // lib/api-client.ts
281
+ import { auth } from "@clerk/nextjs/server";
282
+
283
+ const API_URL = process.env.NEXT_PUBLIC_API_URL;
284
+
285
+ interface FetchOptions extends RequestInit {
286
+ params?: Record<string, string | number | undefined>;
287
+ }
288
+
289
+ export async function apiClient<T>(
290
+ endpoint: string,
291
+ options: FetchOptions = {}
292
+ ): Promise<T> {
293
+ const { params, ...init } = options;
294
+
295
+ // Build URL with query params
296
+ const url = new URL(`${API_URL}${endpoint}`);
297
+ if (params) {
298
+ Object.entries(params).forEach(([key, value]) => {
299
+ if (value !== undefined) {
300
+ url.searchParams.append(key, String(value));
301
+ }
302
+ });
303
+ }
304
+
305
+ // Get auth token
306
+ const { getToken } = auth();
307
+ const token = await getToken();
308
+
309
+ const response = await fetch(url.toString(), {
310
+ ...init,
311
+ headers: {
312
+ "Content-Type": "application/json",
313
+ ...(token && { Authorization: `Bearer ${token}` }),
314
+ ...init.headers,
315
+ },
316
+ });
317
+
318
+ if (!response.ok) {
319
+ const error = await response.json().catch(() => ({}));
320
+ throw new ApiError(response.status, error.title || "Request failed", error);
321
+ }
322
+
323
+ return response.json();
324
+ }
325
+
326
+ class ApiError extends Error {
327
+ constructor(
328
+ public status: number,
329
+ message: string,
330
+ public details?: unknown
331
+ ) {
332
+ super(message);
333
+ this.name = "ApiError";
334
+ }
335
+ }
336
+ ```
337
+
338
+ ## 7. Configurações
339
+
340
+ ### 7.1 API (appsettings.json)
341
+
342
+ ```json
343
+ {
344
+ "ConnectionStrings": {
345
+ "DefaultConnection": "Server=...;Database=...;"
346
+ },
347
+ "Clerk": {
348
+ "Authority": "https://your-clerk-domain.clerk.accounts.dev",
349
+ "SecretKey": "sk_..."
350
+ },
351
+ "Cors": {
352
+ "AllowedOrigins": ["http://localhost:3000", "https://your-domain.com"]
353
+ }
354
+ }
355
+ ```
356
+
357
+ ### 7.2 Frontend (.env.local)
358
+
359
+ ```env
360
+ NEXT_PUBLIC_API_URL=http://localhost:5000
361
+ NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=pk_...
362
+ CLERK_SECRET_KEY=sk_...
363
+ ```
364
+
365
+ ## 8. Deploy
366
+
367
+ ### 8.1 Docker
368
+
369
+ ```dockerfile
370
+ # API Dockerfile
371
+ FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS base
372
+ WORKDIR /app
373
+ EXPOSE 8080
374
+
375
+ FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
376
+ WORKDIR /src
377
+ COPY ["src/api/Api/Api.csproj", "Api/"]
378
+ RUN dotnet restore "Api/Api.csproj"
379
+ COPY src/api/ .
380
+ RUN dotnet build "Api/Api.csproj" -c Release -o /app/build
381
+
382
+ FROM build AS publish
383
+ RUN dotnet publish "Api/Api.csproj" -c Release -o /app/publish
384
+
385
+ FROM base AS final
386
+ WORKDIR /app
387
+ COPY --from=publish /app/publish .
388
+ ENTRYPOINT ["dotnet", "Api.dll"]
389
+ ```
390
+
391
+ ### 8.2 Container Apps
392
+
393
+ Dois Container Apps separados:
394
+ - `app-api`: .NET API
395
+ - `app-web`: Next.js (com output: standalone)
396
+
397
+ ---
398
+
399
+ *MORPH-SPEC by Polymorphism Tech*