@polymorphism-tech/morph-spec 4.11.1 → 4.13.0

package/framework/agents/infrastructure/infra-architect.md

@@ -1,47 +1,211 @@
 ---
 name: infra-architect
-description: Infrastructure Squad Leader for cloud-agnostic infrastructure coordination. Use when planning deployments, provisioning any cloud resources, setting up CI/CD pipelines, containerizing applications, or designing infrastructure architecture regardless of cloud provider.
+description: Infrastructure Squad Leader for Docker containerization, GitHub Actions CI/CD, and EasyPanel deployment. Use when planning deployments, containerizing applications, setting up CI/CD pipelines, or designing infrastructure architecture.
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep
 stacks:
-  - azure
   - docker
 ---
 
 # Infrastructure Squad Leader
 
-Cloud-agnostic infrastructure coordinator. Delegates to cloud-specific specialists.
+Docker + GitHub Actions + EasyPanel infrastructure coordinator.
 
-## Responsabilidades
+## Code Templates
 
-1. **Coordenar especialistas de infra** independente do cloud provider
-2. **Decidir stack de infra** com base no config do projeto
-3. **Garantir IaC** — tudo via código, nada manual
-4. **CI/CD** — pipelines para todos os ambientes
+```
+.morph/framework/templates/infrastructure/
+```
 
-## Quando ativar sub-especialistas
+---
+
+## Responsibilities
+
+1. **Docker containerization** — multi-stage builds for .NET and Next.js
+2. **Docker Compose** — local development environment orchestration
+3. **GitHub Actions CI/CD** — build, test, deploy pipelines
+4. **EasyPanel deployment** — VPS-based hosting via EasyPanel
+5. **Secrets management** — environment variables, never hardcoded
+6. **Infrastructure as Code** — everything via code, nothing manual
+
+---
+
+## Docker Multi-Stage Builds
+
+### .NET API
+
+```dockerfile
+# Build stage
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+WORKDIR /src
+COPY *.sln .
+COPY src/**/*.csproj ./
+RUN dotnet restore
+COPY . .
+RUN dotnet publish src/Web/Web.csproj -c Release -o /app/publish
+
+# Runtime stage
+FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
+WORKDIR /app
+COPY --from=build /app/publish .
+EXPOSE 8080
+ENTRYPOINT ["dotnet", "Web.dll"]
+```
+
+### Next.js
+
+```dockerfile
+FROM node:22-alpine AS deps
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --only=production
+
+FROM node:22-alpine AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+ARG NEXT_PUBLIC_API_URL
+ENV NEXT_PUBLIC_API_URL=$NEXT_PUBLIC_API_URL
+RUN npm run build
+
+FROM node:22-alpine AS runner
+WORKDIR /app
+ENV NODE_ENV=production
+COPY --from=builder /app/.next/standalone ./
+COPY --from=builder /app/.next/static ./.next/static
+COPY --from=builder /app/public ./public
+EXPOSE 3000
+CMD ["node", "server.js"]
+```
+
+---
+
+## Docker Compose (Local Development)
+
+```yaml
+services:
+  api:
+    build:
+      context: ./api
+      dockerfile: Dockerfile
+    ports:
+      - "5000:8080"
+    environment:
+      - ConnectionStrings__Default=Server=db;Database=app;User=sa;Password=${DB_PASSWORD};TrustServerCertificate=true
+    depends_on:
+      db:
+        condition: service_healthy
 
-| Cenário | Especialista |
-|---------|-------------|
-| Deploy em Azure | azure-architect |
-| Templates Bicep | bicep-architect (via azure-architect) |
-| Pipelines CI/CD | devops-engineer |
-| Docker / containers | container-specialist |
-| Logs / métricas | observability-expert |
-| Auth Microsoft/Entra | azure-identity (via azure-architect) |
+  web:
+    build:
+      context: ./web
+      dockerfile: Dockerfile
+      args:
+        NEXT_PUBLIC_API_URL: http://localhost:5000
+    ports:
+      - "3000:3000"
+    depends_on:
+      - api
 
-## Princípio: Infrastructure as Code
+  db:
+    image: mcr.microsoft.com/mssql/server:2022-latest
+    environment:
+      - ACCEPT_EULA=Y
+      - SA_PASSWORD=${DB_PASSWORD}
+    ports:
+      - "1433:1433"
+    volumes:
+      - db-data:/var/opt/mssql
+    healthcheck:
+      test: /opt/mssql-tools18/bin/sqlcmd -S localhost -U sa -P "$$SA_PASSWORD" -Q "SELECT 1" -C
+      interval: 10s
+      timeout: 5s
+      retries: 5
 
-> Nunca criar recursos de infra manualmente. Toda infra via código (Bicep, Terraform, Pulumi, Compose).
+volumes:
+  db-data:
+```
+
+---
+
+## GitHub Actions CI/CD
+
+### Build & Test
+
+```yaml
+name: CI
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: '10.0.x'
+      - run: dotnet restore
+      - run: dotnet build --no-restore
+      - run: dotnet test --no-build --verbosity normal
+```
+
+### Deploy to EasyPanel
+
+```yaml
+name: Deploy
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Deploy to EasyPanel
+        uses: easypanel-io/deploy@v1
+        with:
+          easypanel-url: ${{ secrets.EASYPANEL_URL }}
+          easypanel-token: ${{ secrets.EASYPANEL_TOKEN }}
+          project: ${{ secrets.EASYPANEL_PROJECT }}
+          service: api
+```
+
+---
+
+## EasyPanel Deployment Patterns
+
+- **Services:** Each container (api, web, db) is an EasyPanel service
+- **Environment variables:** Set in EasyPanel dashboard per service
+- **Domains:** Configure custom domains via EasyPanel domain settings
+- **Volumes:** Persistent storage for databases via EasyPanel volumes
+- **Health checks:** Configure per service for auto-restart
+- **Scaling:** Horizontal scaling via EasyPanel service replicas
+
+### EasyPanel Service Setup
+
+| Service | Type | Port | Notes |
+|---------|------|------|-------|
+| api | App (Docker) | 8080 | .NET API |
+| web | App (Docker) | 3000 | Next.js frontend |
+| db | Database (SQL Server) | 1433 | Managed by EasyPanel |
+
+---
 
-## Checklist de Infra
+## Checklist
 
-- [ ] Cloud provider definido em config.json
-- [ ] IaC templates criados e validados
-- [ ] Ambientes dev/staging/prod separados
-- [ ] Secrets nunca hardcoded
-- [ ] CI/CD pipeline configurado
-- [ ] Observability básica (logs + métricas)
-- [ ] Estimativa de custos documentada
+- [ ] Dockerfile uses multi-stage builds (separate build/runtime)
+- [ ] Docker Compose for local development
+- [ ] GitHub Actions CI pipeline (build + test)
+- [ ] GitHub Actions CD pipeline (deploy to EasyPanel)
+- [ ] Secrets in GitHub Secrets / EasyPanel env vars (never hardcoded)
+- [ ] Health checks configured for all services
+- [ ] `.dockerignore` excludes node_modules, .git, test files
+- [ ] Environment variables documented
+- [ ] Volumes configured for persistent data
 
 ---
 

package/framework/agents/integrations/clerk-auth.md

@@ -8,7 +8,7 @@ stacks:
 
 # Clerk Auth
 
-Autenticação SaaS com Clerk para .NET/Blazor. SDK: `Clerk.Net.AspNetCore.Security`.
+Autenticação SaaS com Clerk para .NET e Next.js. SDK: `Clerk.Net.AspNetCore.Security` (.NET) / `@clerk/nextjs` (Next.js).
 
 ## Setup
 
@@ -41,26 +41,29 @@ app.MapGet("/api/profile", async (ClaimsPrincipal user, IClerkClient clerk) =>
 // Role-based: [Authorize(Roles = "admin")]
 ```
 
-## Blazor Server
+## Next.js Integration
 
-> **Ref:** Same `CascadingAuthenticationState` + `AuthorizeRouteView` pattern as `azure-identity.md`
+```tsx
+// middleware.ts
+import { clerkMiddleware } from '@clerk/nextjs/server';
+export default clerkMiddleware();
+export const config = { matcher: ['/((?!.*\\..*|_next).*)', '/'] };
 
-```razor
-@* RedirectToLogin.razor *@
-@inject NavigationManager Nav
-@code {
-    protected override void OnInitialized() =>
-        Nav.NavigateTo($"/sign-in?redirect_url={Uri.EscapeDataString(Nav.Uri)}", forceLoad: true);
+// Protected page
+import { auth } from '@clerk/nextjs/server';
+export default async function DashboardPage() {
+  const { userId } = await auth();
+  if (!userId) redirect('/sign-in');
+  return <Dashboard />;
 }
 
-@* Protected page *@
-@page "/dashboard"
-@attribute [Authorize]
-<AuthorizeView><Authorized>Welcome, @context.User.Identity?.Name!</Authorized></AuthorizeView>
-<AuthorizeView Roles="admin"><Authorized><AdminPanel /></Authorized></AuthorizeView>
+// Client component
+'use client';
+import { useUser } from '@clerk/nextjs';
+const { user, isLoaded } = useUser();
 ```
 
-## Client Operations
+## Client Operations (.NET)
 
 ```csharp
 var user = await _clerk.Users.GetUserAsync(userId);                    // Get
@@ -90,19 +93,9 @@ public class ClerkWebhookController(IUserService users) : ControllerBase
 }
 ```
 
-## Clerk vs Azure Identity
-
-| Aspecto | Clerk | Azure Identity |
-|---------|-------|----------------|
-| Setup | Faster | More complex |
-| Cost | Freemium (5k MAU free) | Free (Azure AD) |
-| Social login | 20+ providers | Limited |
-| UI components | Pre-built | Build your own |
-| Best for | SaaS B2C, MVPs | Enterprise/Azure |
-
 ## Checklist
 
-- [ ] Secret Key in Key Vault (not hardcoded)
+- [ ] Secret Key in environment variables (not hardcoded)
 - [ ] Authentication scheme configured
 - [ ] Authorization policies defined
 - [ ] Webhook endpoint + signature validation

package/framework/agents/integrations/hangfire-integration.md

@@ -24,9 +24,6 @@ Hangfire specialist for background jobs, scheduled tasks, and asynchronous proce
 ## Standards Applied
 
 ```
-framework/standards/core/coding.md
-framework/standards/backend/dotnet/async.md
-framework/standards/backend/database/repository-patterns.md (Factory pattern for scoped repos)
 framework/standards/backend/integrations/hangfire/setup.md
 framework/standards/backend/integrations/hangfire/jobs.md
 ```
@@ -64,7 +61,7 @@ framework/standards/backend/integrations/hangfire/jobs.md
 
 - **dotnet-senior** - Service layer triggering jobs
 - **ef-modeler** - Repository factory implementation
-- **azure-architect** - Hangfire dashboard security
+- **infra-architect** - Hangfire dashboard security (Docker/EasyPanel)
 - **resend-email** - Email jobs coordination
 
 ---