@polymorphism-tech/morph-spec 4.11.1 → 4.13.0

package/framework/templates/infrastructure/azure/storage.bicep

@@ -1,106 +0,0 @@
-// ==============================================================================
-// MORPH-SPEC - Storage Account
-// Azure Storage Account with Blob containers
-// ==============================================================================
-
-@description('Storage account name (lowercase, no hyphens, 3-24 chars)')
-@minLength(3)
-@maxLength(24)
-param name string
-
-@description('Location')
-param location string
-
-@description('Tags')
-param tags object = {}
-
-@description('SKU (Standard_LRS, Standard_GRS, Standard_ZRS)')
-@allowed(['Standard_LRS', 'Standard_GRS', 'Standard_ZRS', 'Premium_LRS'])
-param sku string = 'Standard_LRS'
-
-@description('Create default blob containers')
-param createContainers bool = true
-
-// ==============================================================================
-// STORAGE ACCOUNT
-// ==============================================================================
-
-resource storageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' = {
-  name: name
-  location: location
-  tags: tags
-  kind: 'StorageV2'
-  sku: {
-    name: sku
-  }
-  properties: {
-    accessTier: 'Hot'
-    allowBlobPublicAccess: false
-    allowSharedKeyAccess: true
-    minimumTlsVersion: 'TLS1_2'
-    supportsHttpsTrafficOnly: true
-    networkAcls: {
-      defaultAction: 'Allow'
-      bypass: 'AzureServices'
-    }
-  }
-}
-
-// ==============================================================================
-// BLOB SERVICE
-// ==============================================================================
-
-resource blobService 'Microsoft.Storage/storageAccounts/blobServices@2023-01-01' = {
-  parent: storageAccount
-  name: 'default'
-  properties: {
-    deleteRetentionPolicy: {
-      enabled: true
-      days: 7
-    }
-  }
-}
-
-// ==============================================================================
-// DEFAULT CONTAINERS
-// ==============================================================================
-
-resource uploadsContainer 'Microsoft.Storage/storageAccounts/blobServices/containers@2023-01-01' = if (createContainers) {
-  parent: blobService
-  name: 'uploads'
-  properties: {
-    publicAccess: 'None'
-  }
-}
-
-resource reportsContainer 'Microsoft.Storage/storageAccounts/blobServices/containers@2023-01-01' = if (createContainers) {
-  parent: blobService
-  name: 'reports'
-  properties: {
-    publicAccess: 'None'
-  }
-}
-
-resource backupsContainer 'Microsoft.Storage/storageAccounts/blobServices/containers@2023-01-01' = if (createContainers) {
-  parent: blobService
-  name: 'backups'
-  properties: {
-    publicAccess: 'None'
-  }
-}
-
-// ==============================================================================
-// OUTPUTS
-// ==============================================================================
-
-@description('Storage Account ID')
-output id string = storageAccount.id
-
-@description('Storage Account name')
-output name string = storageAccount.name
-
-@description('Primary blob endpoint')
-output primaryBlobEndpoint string = storageAccount.properties.primaryEndpoints.blob
-
-@description('Connection string')
-output connectionString string = 'DefaultEndpointsProtocol=https;AccountName=${storageAccount.name};AccountKey=${storageAccount.listKeys().keys[0].value};EndpointSuffix=core.windows.net'

package/framework/templates/infrastructure/github/actions/azure-auth/action.yml.hbs

@@ -1,22 +0,0 @@
-name: 'Azure Authentication'
-description: 'Login to Azure using OIDC'
-inputs:
-  client-id:
-    description: 'Azure Client ID'
-    required: true
-  tenant-id:
-    description: 'Azure Tenant ID'
-    required: true
-  subscription-id:
-    description: 'Azure Subscription ID'
-    required: true
-
-runs:
-  using: 'composite'
-  steps:
-    - name: Azure Login (OIDC)
-      uses: azure/login@v1
-      with:
-        client-id: ${{{{ inputs.client-id }}}}
-        tenant-id: ${{{{ inputs.tenant-id }}}}
-        subscription-id: ${{{{ inputs.subscription-id }}}}

package/framework/templates/infrastructure/github/workflows/deploy-azure-app-service.yml.hbs

@@ -1,61 +0,0 @@
-name: Deploy to Azure App Service
-
-on:
-  workflow_call:
-    inputs:
-      environment:
-        required: true
-        type: string
-      resource-group:
-        required: true
-        type: string
-      app-service-name:
-        required: true
-        type: string
-      package-path:
-        required: false
-        type: string
-        default: './publish'
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    environment: ${{{{ inputs.environment }}}}
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Azure Login (OIDC)
-        uses: azure/login@v1
-        with:
-          client-id: ${{{{ secrets.AZURE_CLIENT_ID }}}}
-          tenant-id: ${{{{ secrets.AZURE_TENANT_ID }}}}
-          subscription-id: ${{{{ secrets.AZURE_SUBSCRIPTION_ID }}}}
-
-      - name: Deploy Infrastructure (Bicep)
-        uses: azure/arm-deploy@v1
-        with:
-          resourceGroupName: ${{{{ inputs.resource-group }}}}
-          template: .morph/framework/templates/infra/main.bicep
-          parameters: .morph/framework/templates/infra/parameters.${{{{ inputs.environment }}}}.json
-
-      - name: Setup .NET
-        uses: actions/setup-dotnet@v4
-        with:
-          dotnet-version: '{{DOTNET_VERSION}}'
-
-      - name: Publish .NET App
-        run: dotnet publish -c Release -o ${{{{ inputs.package-path }}}}
-
-      - name: Deploy to App Service
-        uses: azure/webapps-deploy@v2
-        with:
-          app-name: ${{{{ inputs.app-service-name }}}}
-          package: ${{{{ inputs.package-path }}}}
-
-      - name: Health Check
-        run: |
-          APP_URL=$(az webapp show \
-            --name ${{{{ inputs.app-service-name }}}} \
-            --resource-group ${{{{ inputs.resource-group }}}} \
-            --query defaultHostName -o tsv)
-          curl --retry 10 --retry-delay 5 --retry-connrefused https://$APP_URL/health

package/framework/templates/integrations/azure-identity-config.cs

@@ -1,288 +0,0 @@
-// ==============================================================================
-// MORPH-SPEC - Azure Identity (Microsoft Identity) Configuration Template
-// Configuração de autenticação com Microsoft Identity Platform
-// ==============================================================================
-
-using Microsoft.AspNetCore.Authentication;
-using Microsoft.AspNetCore.Authentication.OpenIdConnect;
-using Microsoft.AspNetCore.Components.Authorization;
-using Microsoft.Identity.Web;
-using Microsoft.Identity.Web.UI;
-using System.Security.Claims;
-
-namespace {{Namespace}}.Infrastructure.Auth;
-
-// ==============================================================================
-// SERVICE EXTENSIONS
-// ==============================================================================
-
-public static class AzureIdentityServiceExtensions
-{
-    /// <summary>
-    /// Adiciona autenticação Microsoft Identity para Web Apps
-    /// Requer: Microsoft.Identity.Web, Microsoft.Identity.Web.UI
-    /// </summary>
-    public static IServiceCollection AddAzureIdentityAuthentication(
-        this IServiceCollection services,
-        IConfiguration configuration)
-    {
-        services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
-            .AddMicrosoftIdentityWebApp(configuration.GetSection("AzureAd"));
-
-        services.AddControllersWithViews()
-            .AddMicrosoftIdentityUI();
-
-        services.AddAuthorization(options =>
-        {
-            // Default policy - requires authenticated user
-            options.FallbackPolicy = options.DefaultPolicy;
-
-            // Custom policies
-            options.AddPolicy("RequireAdmin", policy =>
-                policy.RequireRole("Admin"));
-
-            options.AddPolicy("RequireManager", policy =>
-                policy.RequireAssertion(context =>
-                    context.User.IsInRole("Admin") ||
-                    context.User.IsInRole("Manager")));
-        });
-
-        return services;
-    }
-
-    /// <summary>
-    /// Adiciona autenticação Microsoft Identity para Blazor Server
-    /// </summary>
-    public static IServiceCollection AddAzureIdentityBlazor(
-        this IServiceCollection services,
-        IConfiguration configuration)
-    {
-        services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
-            .AddMicrosoftIdentityWebApp(configuration.GetSection("AzureAd"));
-
-        services.AddControllersWithViews()
-            .AddMicrosoftIdentityUI();
-
-        services.AddRazorPages();
-        services.AddServerSideBlazor()
-            .AddMicrosoftIdentityConsentHandler();
-
-        services.AddAuthorization();
-
-        return services;
-    }
-
-    /// <summary>
-    /// Adiciona autenticação Microsoft Identity para APIs (JWT Bearer)
-    /// </summary>
-    public static IServiceCollection AddAzureIdentityApi(
-        this IServiceCollection services,
-        IConfiguration configuration)
-    {
-        services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
-            .AddMicrosoftIdentityWebApi(configuration.GetSection("AzureAd"));
-
-        services.AddAuthorization();
-
-        return services;
-    }
-
-    /// <summary>
-    /// Adiciona suporte para chamar APIs downstream (Graph, custom APIs)
-    /// </summary>
-    public static IServiceCollection AddAzureIdentityWithDownstreamApi(
-        this IServiceCollection services,
-        IConfiguration configuration)
-    {
-        services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
-            .AddMicrosoftIdentityWebApp(configuration.GetSection("AzureAd"))
-            .EnableTokenAcquisitionToCallDownstreamApi()
-            .AddMicrosoftGraph(configuration.GetSection("Graph"))
-            .AddInMemoryTokenCaches();
-
-        return services;
-    }
-}
-
-// ==============================================================================
-// USER SERVICE
-// ==============================================================================
-
-public interface IAzureIdentityUserService
-{
-    string? GetUserId();
-    string? GetUserEmail();
-    string? GetUserName();
-    IEnumerable<string> GetUserRoles();
-    bool IsAuthenticated();
-    bool IsInRole(string role);
-}
-
-public class AzureIdentityUserService : IAzureIdentityUserService
-{
-    private readonly IHttpContextAccessor _httpContextAccessor;
-
-    public AzureIdentityUserService(IHttpContextAccessor httpContextAccessor)
-    {
-        _httpContextAccessor = httpContextAccessor;
-    }
-
-    private ClaimsPrincipal? User => _httpContextAccessor.HttpContext?.User;
-
-    public string? GetUserId() =>
-        User?.FindFirstValue(ClaimTypes.NameIdentifier) ??
-        User?.FindFirstValue("oid"); // Azure AD Object ID
-
-    public string? GetUserEmail() =>
-        User?.FindFirstValue(ClaimTypes.Email) ??
-        User?.FindFirstValue("preferred_username");
-
-    public string? GetUserName() =>
-        User?.FindFirstValue(ClaimTypes.Name) ??
-        User?.FindFirstValue("name");
-
-    public IEnumerable<string> GetUserRoles() =>
-        User?.FindAll(ClaimTypes.Role).Select(c => c.Value) ??
-        Enumerable.Empty<string>();
-
-    public bool IsAuthenticated() =>
-        User?.Identity?.IsAuthenticated ?? false;
-
-    public bool IsInRole(string role) =>
-        User?.IsInRole(role) ?? false;
-}
-
-// ==============================================================================
-// MIDDLEWARE PIPELINE
-// ==============================================================================
-
-public static class AzureIdentityMiddlewareExtensions
-{
-    public static IApplicationBuilder UseAzureIdentityAuthentication(this IApplicationBuilder app)
-    {
-        app.UseAuthentication();
-        app.UseAuthorization();
-        return app;
-    }
-}
-
-// ==============================================================================
-// BLAZOR COMPONENTS HELPER
-// ==============================================================================
-
-/*
-<!-- App.razor -->
-<CascadingAuthenticationState>
-    <Router AppAssembly="@typeof(App).Assembly">
-        <Found Context="routeData">
-            <AuthorizeRouteView RouteData="@routeData" DefaultLayout="@typeof(MainLayout)">
-                <NotAuthorized>
-                    @if (!context.User.Identity?.IsAuthenticated ?? true)
-                    {
-                        <RedirectToLogin />
-                    }
-                    else
-                    {
-                        <p>Você não tem permissão para acessar este recurso.</p>
-                    }
-                </NotAuthorized>
-            </AuthorizeRouteView>
-        </Found>
-    </Router>
-</CascadingAuthenticationState>
-*/
-
-// ==============================================================================
-// REDIRECT TO LOGIN COMPONENT
-// ==============================================================================
-
-/*
-<!-- Components/RedirectToLogin.razor -->
-@inject NavigationManager Navigation
-
-@code {
-    protected override void OnInitialized()
-    {
-        var returnUrl = Uri.EscapeDataString(Navigation.Uri);
-        Navigation.NavigateTo($"MicrosoftIdentity/Account/SignIn?redirectUri={returnUrl}", forceLoad: true);
-    }
-}
-*/
-
-// ==============================================================================
-// APPSETTINGS EXAMPLE
-// ==============================================================================
-
-/*
-{
-  "AzureAd": {
-    "Instance": "https://login.microsoftonline.com/",
-    "Domain": "yourdomain.onmicrosoft.com",
-    "TenantId": "your-tenant-id",
-    "ClientId": "your-client-id",
-    "ClientSecret": "your-client-secret",
-    "CallbackPath": "/signin-oidc"
-  },
-  "Graph": {
-    "BaseUrl": "https://graph.microsoft.com/v1.0",
-    "Scopes": "User.Read"
-  }
-}
-*/
-
-// ==============================================================================
-// PROGRAM.CS EXAMPLES
-// ==============================================================================
-
-/*
-// Web App (MVC/Razor Pages)
-var builder = WebApplication.CreateBuilder(args);
-builder.Services.AddAzureIdentityAuthentication(builder.Configuration);
-
-var app = builder.Build();
-app.UseAzureIdentityAuthentication();
-app.MapControllers();
-app.Run();
-
-// Blazor Server
-var builder = WebApplication.CreateBuilder(args);
-builder.Services.AddAzureIdentityBlazor(builder.Configuration);
-
-var app = builder.Build();
-app.UseAzureIdentityAuthentication();
-app.MapBlazorHub();
-app.MapFallbackToPage("/_Host");
-app.Run();
-
-// API (JWT Bearer)
-var builder = WebApplication.CreateBuilder(args);
-builder.Services.AddAzureIdentityApi(builder.Configuration);
-
-var app = builder.Build();
-app.UseAzureIdentityAuthentication();
-app.MapControllers().RequireAuthorization();
-app.Run();
-*/
-
-// ==============================================================================
-// AZURE AD B2C CONFIGURATION
-// ==============================================================================
-
-/*
-// For Azure AD B2C, use this configuration:
-{
-  "AzureAdB2C": {
-    "Instance": "https://yourtenant.b2clogin.com",
-    "Domain": "yourtenant.onmicrosoft.com",
-    "TenantId": "your-tenant-id",
-    "ClientId": "your-client-id",
-    "SignUpSignInPolicyId": "B2C_1_signupsignin",
-    "ResetPasswordPolicyId": "B2C_1_passwordreset",
-    "EditProfilePolicyId": "B2C_1_editprofile"
-  }
-}
-
-// And use:
-services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
-    .AddMicrosoftIdentityWebApp(configuration.GetSection("AzureAdB2C"));
-*/

package/framework/templates/project-structure/dotnet-ddd.md

@@ -1,70 +0,0 @@
-# Estrutura de Pastas .NET + DDD
-
-> Gerado na fase de Design baseado no Domain Complexity Level.
-> Ref: framework/standards/architecture/ddd/complexity-levels.md
-
-## Nível 1 — CRUD
-
-```
-src/{App}.Domain/
-  Entities/
-    {EntityName}.cs
-  Interfaces/
-    I{EntityName}Repository.cs
-
-src/{App}.Application/
-  Features/{FeatureName}/
-    {FeatureName}Service.cs
-    DTOs/
-      {FeatureName}Dto.cs
-      Create{FeatureName}Request.cs
-      Update{FeatureName}Request.cs
-```
-
-## Nível 2 — Business Logic
-
-```
-src/{App}.Domain/
-  {EntityName}s/
-    Aggregates/
-      {EntityName}.cs
-    ValueObjects/
-      {ValueObjectName}.cs
-    Events/
-      {EntityName}CreatedEvent.cs
-    Exceptions/
-      {EntityName}NotFoundException.cs
-    I{EntityName}Repository.cs
-
-src/{App}.Application/
-  {EntityName}s/
-    Commands/
-      Create{EntityName}Command.cs
-      Create{EntityName}Handler.cs
-    Queries/
-      Get{EntityName}Query.cs
-      Get{EntityName}Handler.cs
-    {EntityName}Dto.cs
-```
-
-## Nível 3 — Bounded Context
-
-```
-src/{App}.Domain/
-  {BoundedContext}/
-    {EntityName}s/
-      Aggregates/
-        {EntityName}.cs
-      ValueObjects/
-      Events/
-      Exceptions/
-    IntegrationEvents/
-      {EntityName}IntegrationEvent.cs
-
-src/{App}.Application/
-  {BoundedContext}/
-    {EntityName}s/
-      Commands/
-      Queries/
-      {EntityName}Dto.cs
-```