@polymorphism-tech/morph-spec 4.3.3 → 4.3.5

package/.morph/templates/code/dotnet/test.cs

@@ -0,0 +1,239 @@
+// ============================================================
+// TEST TEMPLATE
+// Generated by MORPH Framework
+// ============================================================
+
+using FluentAssertions;
+using Microsoft.Extensions.Logging;
+using NSubstitute;
+using Xunit;
+
+namespace {{NAMESPACE}}.Tests.Unit.Features.{{pascalCase FEATURE_NAME}};
+
+/// <summary>
+/// Unit tests for {{pascalCase FEATURE_NAME}}Service.
+/// </summary>
+public class {{pascalCase FEATURE_NAME}}ServiceTests
+{
+    private readonly I{{pascalCase FEATURE_NAME}}Repository _repository;
+    private readonly ILogger<{{pascalCase FEATURE_NAME}}Service> _logger;
+    private readonly {{pascalCase FEATURE_NAME}}Service _sut;
+
+    public {{pascalCase FEATURE_NAME}}ServiceTests()
+    {
+        _repository = Substitute.For<I{{pascalCase FEATURE_NAME}}Repository>();
+        _logger = Substitute.For<ILogger<{{pascalCase FEATURE_NAME}}Service>>();
+        _sut = new {{pascalCase FEATURE_NAME}}Service(_repository, _logger);
+    }
+
+    #region GetByIdAsync Tests
+
+    [Fact]
+    public async Task GetByIdAsync_WithValidId_ReturnsDto()
+    {
+        // Arrange
+        var id = 1;
+        var entity = CreateTestEntity(id, "Test {{pascalCase FEATURE_NAME}}");
+        _repository.GetByIdAsync(id, Arg.Any<CancellationToken>())
+            .Returns(entity);
+
+        // Act
+        var result = await _sut.GetByIdAsync(id);
+
+        // Assert
+        result.Should().NotBeNull();
+        result!.Id.Should().Be(id);
+        result.Name.Should().Be("Test {{pascalCase FEATURE_NAME}}");
+    }
+
+    [Fact]
+    public async Task GetByIdAsync_WithInvalidId_ReturnsNull()
+    {
+        // Arrange
+        var id = 999;
+        _repository.GetByIdAsync(id, Arg.Any<CancellationToken>())
+            .Returns((Domain.Entities.{{pascalCase FEATURE_NAME}}?)null);
+
+        // Act
+        var result = await _sut.GetByIdAsync(id);
+
+        // Assert
+        result.Should().BeNull();
+    }
+
+    #endregion
+
+    #region GetAllAsync Tests
+
+    [Fact]
+    public async Task GetAllAsync_ReturnsAllItems()
+    {
+        // Arrange
+        var entities = new List<Domain.Entities.{{pascalCase FEATURE_NAME}}>
+        {
+            CreateTestEntity(1, "First"),
+            CreateTestEntity(2, "Second"),
+            CreateTestEntity(3, "Third")
+        };
+        _repository.GetAllAsync(Arg.Any<CancellationToken>())
+            .Returns(entities);
+
+        // Act
+        var result = await _sut.GetAllAsync();
+
+        // Assert
+        result.Should().HaveCount(3);
+        result[0].Name.Should().Be("First");
+    }
+
+    [Fact]
+    public async Task GetAllAsync_WithNoItems_ReturnsEmptyList()
+    {
+        // Arrange
+        _repository.GetAllAsync(Arg.Any<CancellationToken>())
+            .Returns(new List<Domain.Entities.{{pascalCase FEATURE_NAME}}>());
+
+        // Act
+        var result = await _sut.GetAllAsync();
+
+        // Assert
+        result.Should().BeEmpty();
+    }
+
+    #endregion
+
+    #region CreateAsync Tests
+
+    [Fact]
+    public async Task CreateAsync_WithValidRequest_CreatesAndReturnsDto()
+    {
+        // Arrange
+        var request = new Create{{pascalCase FEATURE_NAME}}Request("New {{pascalCase FEATURE_NAME}}");
+
+        _repository
+            .When(x => x.AddAsync(Arg.Any<Domain.Entities.{{pascalCase FEATURE_NAME}}>(), Arg.Any<CancellationToken>()))
+            .Do(x =>
+            {
+                // Simulate ID assignment
+                var entity = x.Arg<Domain.Entities.{{pascalCase FEATURE_NAME}}>();
+                // entity.Id would be set by EF Core
+            });
+
+        // Act
+        var result = await _sut.CreateAsync(request);
+
+        // Assert
+        result.Should().NotBeNull();
+        result.Name.Should().Be("New {{pascalCase FEATURE_NAME}}");
+
+        await _repository.Received(1).AddAsync(Arg.Any<Domain.Entities.{{pascalCase FEATURE_NAME}}>(), Arg.Any<CancellationToken>());
+        await _repository.Received(1).SaveChangesAsync(Arg.Any<CancellationToken>());
+    }
+
+    [Theory]
+    [InlineData("")]
+    [InlineData(" ")]
+    [InlineData(null)]
+    public async Task CreateAsync_WithInvalidName_ThrowsValidationException(string? name)
+    {
+        // Arrange
+        var request = new Create{{pascalCase FEATURE_NAME}}Request(name!);
+
+        // Act
+        var act = async () => await _sut.CreateAsync(request);
+
+        // Assert
+        await act.Should().ThrowAsync<ValidationException>();
+    }
+
+    #endregion
+
+    #region UpdateAsync Tests
+
+    [Fact]
+    public async Task UpdateAsync_WithValidRequest_UpdatesEntity()
+    {
+        // Arrange
+        var id = 1;
+        var entity = CreateTestEntity(id, "Original");
+        var request = new Update{{pascalCase FEATURE_NAME}}Request("Updated");
+
+        _repository.GetByIdAsync(id, Arg.Any<CancellationToken>())
+            .Returns(entity);
+
+        // Act
+        await _sut.UpdateAsync(id, request);
+
+        // Assert
+        _repository.Received(1).Update(Arg.Any<Domain.Entities.{{pascalCase FEATURE_NAME}}>());
+        await _repository.Received(1).SaveChangesAsync(Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task UpdateAsync_WithNonExistentId_ThrowsNotFoundException()
+    {
+        // Arrange
+        var id = 999;
+        var request = new Update{{pascalCase FEATURE_NAME}}Request("Updated");
+
+        _repository.GetByIdAsync(id, Arg.Any<CancellationToken>())
+            .Returns((Domain.Entities.{{pascalCase FEATURE_NAME}}?)null);
+
+        // Act
+        var act = async () => await _sut.UpdateAsync(id, request);
+
+        // Assert
+        await act.Should().ThrowAsync<{{pascalCase FEATURE_NAME}}NotFoundException>();
+    }
+
+    #endregion
+
+    #region DeleteAsync Tests
+
+    [Fact]
+    public async Task DeleteAsync_WithValidId_DeletesEntity()
+    {
+        // Arrange
+        var id = 1;
+        var entity = CreateTestEntity(id, "To Delete");
+
+        _repository.GetByIdAsync(id, Arg.Any<CancellationToken>())
+            .Returns(entity);
+
+        // Act
+        await _sut.DeleteAsync(id);
+
+        // Assert
+        _repository.Received(1).Remove(entity);
+        await _repository.Received(1).SaveChangesAsync(Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task DeleteAsync_WithNonExistentId_ThrowsNotFoundException()
+    {
+        // Arrange
+        var id = 999;
+
+        _repository.GetByIdAsync(id, Arg.Any<CancellationToken>())
+            .Returns((Domain.Entities.{{pascalCase FEATURE_NAME}}?)null);
+
+        // Act
+        var act = async () => await _sut.DeleteAsync(id);
+
+        // Assert
+        await act.Should().ThrowAsync<{{pascalCase FEATURE_NAME}}NotFoundException>();
+    }
+
+    #endregion
+
+    #region Helper Methods
+
+    private static Domain.Entities.{{pascalCase FEATURE_NAME}} CreateTestEntity(int id, string name)
+    {
+        return Domain.Entities.{{pascalCase FEATURE_NAME}}.Create(name);
+        // Note: In real tests, you might need reflection to set the Id
+        // or use a factory method that accepts an id for testing
+    }
+
+    #endregion
+}

package/.morph/templates/code/sql/rls-policy.sql

@@ -0,0 +1,57 @@
+-- ============================================================
+-- RLS Policy: {{titleCase FEATURE_NAME}}
+-- Stack: Next.js + Supabase
+-- Generated by MORPH Framework
+-- Date: {{DATE}}
+-- ============================================================
+
+-- Enable RLS on table
+alter table public.{{TABLE_NAME}} enable row level security;
+
+-- Force RLS for table owner (prevents bypassing)
+alter table public.{{TABLE_NAME}} force row level security;
+
+-- Policy: {{POLICY_NAME}}
+-- Operation: {{OPERATION}} (SELECT | INSERT | UPDATE | DELETE | ALL)
+
+-- SELECT policy: users can read their own rows
+create policy "{{POLICY_NAME}}_select"
+  on public.{{TABLE_NAME}}
+  for select
+  using ({{USING_EXPRESSION}});
+
+-- INSERT policy: users can insert rows for themselves
+create policy "{{POLICY_NAME}}_insert"
+  on public.{{TABLE_NAME}}
+  for insert
+  with check ({{WITH_CHECK_EXPRESSION}});
+
+-- UPDATE policy: users can update their own rows
+create policy "{{POLICY_NAME}}_update"
+  on public.{{TABLE_NAME}}
+  for update
+  using ({{USING_EXPRESSION}})
+  with check ({{WITH_CHECK_EXPRESSION}});
+
+-- DELETE policy: users can delete their own rows
+create policy "{{POLICY_NAME}}_delete"
+  on public.{{TABLE_NAME}}
+  for delete
+  using ({{USING_EXPRESSION}});
+
+-- ============================================================
+-- Common USING / WITH CHECK expressions:
+--
+-- Owner-based:
+--   auth.uid() = user_id
+--
+-- Role-based:
+--   auth.jwt() ->> 'role' = 'admin'
+--
+-- Organization-based:
+--   org_id in (select org_id from public.org_members where user_id = auth.uid())
+--
+-- Public read, owner write:
+--   SELECT using (true)
+--   INSERT/UPDATE/DELETE using (auth.uid() = user_id)
+-- ============================================================

package/.morph/templates/code/sql/supabase-migration.sql

@@ -0,0 +1,100 @@
+-- ============================================================
+-- Migration: {{titleCase FEATURE_NAME}}
+-- Stack: Next.js + Supabase
+-- Generated by MORPH Framework
+-- Date: {{DATE}}
+-- Run: supabase db push
+-- ============================================================
+
+-- ============================================================
+-- 1. TABLE CREATION
+-- ============================================================
+
+create table if not exists public.{{TABLE_NAME}} (
+  id uuid primary key default gen_random_uuid(),
+  user_id uuid not null references auth.users(id) on delete cascade,
+  name text not null,
+  status text not null default 'draft'
+    check (status in ('draft', 'active', 'completed', 'archived', 'failed', 'cancelled')),
+  -- Add feature-specific columns here
+  metadata jsonb default '{}'::jsonb,
+  created_at timestamptz not null default now(),
+  updated_at timestamptz
+);
+
+-- Comment on table
+comment on table public.{{TABLE_NAME}} is '{{titleCase FEATURE_NAME}} - managed by MORPH Framework';
+
+-- ============================================================
+-- 2. INDEXES
+-- ============================================================
+
+-- Index for filtering by owner
+create index if not exists idx_{{TABLE_NAME}}_user_id
+  on public.{{TABLE_NAME}} (user_id);
+
+-- Index for filtering by status
+create index if not exists idx_{{TABLE_NAME}}_status
+  on public.{{TABLE_NAME}} (status);
+
+-- Index for sorting by creation date
+create index if not exists idx_{{TABLE_NAME}}_created_at
+  on public.{{TABLE_NAME}} (created_at desc);
+
+-- ============================================================
+-- 3. UPDATED_AT TRIGGER
+-- ============================================================
+
+-- Function to auto-update updated_at
+create or replace function public.update_updated_at_column()
+returns trigger as $$
+begin
+  new.updated_at = now();
+  return new;
+end;
+$$ language plpgsql;
+
+-- Trigger for auto-updating updated_at
+create trigger set_{{TABLE_NAME}}_updated_at
+  before update on public.{{TABLE_NAME}}
+  for each row execute function public.update_updated_at_column();
+
+-- ============================================================
+-- 4. ROW LEVEL SECURITY
+-- ============================================================
+
+-- Enable RLS
+alter table public.{{TABLE_NAME}} enable row level security;
+
+-- Users can read their own rows
+create policy "Users can read own {{TABLE_NAME}}"
+  on public.{{TABLE_NAME}}
+  for select
+  using (auth.uid() = user_id);
+
+-- Users can insert rows for themselves
+create policy "Users can insert own {{TABLE_NAME}}"
+  on public.{{TABLE_NAME}}
+  for insert
+  with check (auth.uid() = user_id);
+
+-- Users can update their own rows
+create policy "Users can update own {{TABLE_NAME}}"
+  on public.{{TABLE_NAME}}
+  for update
+  using (auth.uid() = user_id)
+  with check (auth.uid() = user_id);
+
+-- Users can delete their own rows
+create policy "Users can delete own {{TABLE_NAME}}"
+  on public.{{TABLE_NAME}}
+  for delete
+  using (auth.uid() = user_id);
+
+-- ============================================================
+-- 5. GRANTS
+-- ============================================================
+
+-- Grant access to authenticated users (via Supabase API)
+grant select, insert, update, delete on public.{{TABLE_NAME}} to authenticated;
+grant usage on schema public to authenticated;

package/.morph/templates/code/sql/supabase-migration.template.sql

@@ -0,0 +1,113 @@
+-- Migration: {{FEATURE_NAME_HUMAN}}
+-- Created: {{DATE}}
+-- Description: {{DESCRIPTION}}
+
+-- Enable necessary extensions
+create extension if not exists "uuid-ossp";
+
+-- ========================================
+-- Create Tables
+-- ========================================
+
+create table if not exists public.{{TABLE_NAME}} (
+  -- Primary key
+  id uuid primary key default gen_random_uuid(),
+
+  -- Columns
+  name text not null,
+  description text,
+  is_active boolean default true not null,
+
+  -- Foreign keys (example)
+  -- user_id uuid references auth.users(id) on delete cascade,
+
+  -- Timestamps
+  created_at timestamptz default now() not null,
+  updated_at timestamptz default now() not null
+);
+
+-- ========================================
+-- Create Indexes
+-- ========================================
+
+-- Index on frequently queried columns
+create index if not exists idx_{{TABLE_NAME}}_name
+  on public.{{TABLE_NAME}} (name);
+
+-- Index on foreign keys (if any)
+-- create index if not exists idx_{{TABLE_NAME}}_user_id
+--   on public.{{TABLE_NAME}} (user_id);
+
+-- Composite index for common queries
+-- create index if not exists idx_{{TABLE_NAME}}_user_created
+--   on public.{{TABLE_NAME}} (user_id, created_at desc);
+
+-- ========================================
+-- Create Triggers
+-- ========================================
+
+-- Auto-update timestamp trigger
+create or replace function public.handle_updated_at()
+returns trigger as $$
+begin
+  new.updated_at = now();
+  return new;
+end;
+$$ language plpgsql;
+
+create trigger {{TABLE_NAME}}_updated_at
+  before update on public.{{TABLE_NAME}}
+  for each row execute function public.handle_updated_at();
+
+-- ========================================
+-- Enable Row Level Security (RLS)
+-- ========================================
+
+alter table public.{{TABLE_NAME}} enable row level security;
+
+-- Policy: Users can view all records (example)
+create policy "{{TABLE_NAME}}_select_policy"
+  on public.{{TABLE_NAME}} for select
+  using (true);
+
+-- Policy: Users can only insert their own records (example)
+-- create policy "{{TABLE_NAME}}_insert_policy"
+--   on public.{{TABLE_NAME}} for insert
+--   with check (auth.uid() = user_id);
+
+-- Policy: Users can only update their own records (example)
+-- create policy "{{TABLE_NAME}}_update_policy"
+--   on public.{{TABLE_NAME}} for update
+--   using (auth.uid() = user_id)
+--   with check (auth.uid() = user_id);
+
+-- Policy: Users can only delete their own records (example)
+-- create policy "{{TABLE_NAME}}_delete_policy"
+--   on public.{{TABLE_NAME}} for delete
+--   using (auth.uid() = user_id);
+
+-- Policy: Admins have full access (example)
+-- create policy "{{TABLE_NAME}}_admin_policy"
+--   on public.{{TABLE_NAME}} for all
+--   using (
+--     exists (
+--       select 1 from public.user_roles
+--       where user_id = auth.uid() and role = 'admin'
+--     )
+--   );
+
+-- ========================================
+-- Seed Data (Optional)
+-- ========================================
+
+-- insert into public.{{TABLE_NAME}} (name, description) values
+--   ('Example 1', 'First example record'),
+--   ('Example 2', 'Second example record');
+
+-- ========================================
+-- Rollback Instructions
+-- ========================================
+
+-- Uncomment to rollback this migration:
+-- drop table if exists public.{{TABLE_NAME}} cascade;
+-- drop function if exists public.handle_updated_at() cascade;

package/.morph/templates/code/typescript/contracts.ts

@@ -0,0 +1,168 @@
+// ============================================================
+// CONTRACTS: {{titleCase FEATURE_NAME}}
+// Stack: Next.js + Supabase
+// Generated by MORPH Framework
+// Date: {{DATE}}
+// ============================================================
+
+// ----- Supabase Config -----
+
+export interface SupabaseConfig {
+  url: string;
+  anonKey: string;
+}
+
+// ----- API Client Types -----
+
+export interface ApiClientConfig {
+  baseUrl: string;
+  getAccessToken: () => Promise<string | null>;
+}
+
+export interface ApiError {
+  message: string;
+  code: string;
+  statusCode: number;
+  details?: Record<string, string[]>;
+}
+
+export type ApiResult<T> =
+  | { success: true; data: T }
+  | { success: false; error: ApiError };
+
+// ----- Pagination -----
+
+export interface PaginationQuery {
+  page?: number;
+  pageSize?: number;
+}
+
+export interface PagedResult<T> {
+  items: T[];
+  totalCount: number;
+  page: number;
+  pageSize: number;
+  totalPages: number;
+  hasNext: boolean;
+  hasPrevious: boolean;
+}
+
+// ----- Supabase Client Type Aliases -----
+// Generated by: supabase gen types typescript --project-id <id> > types/database.ts
+
+export type Tables<T extends keyof Database["public"]["Tables"]> =
+  Database["public"]["Tables"][T]["Row"];
+
+export type Insertable<T extends keyof Database["public"]["Tables"]> =
+  Database["public"]["Tables"][T]["Insert"];
+
+export type Updatable<T extends keyof Database["public"]["Tables"]> =
+  Database["public"]["Tables"][T]["Update"];
+
+// ----- Database Schema (placeholder - replace with generated types) -----
+
+export interface Database {
+  public: {
+    Tables: {
+      {{FEATURE_NAME}}: {
+        Row: {
+          id: string;
+          name: string;
+          user_id: string;
+          status: {{pascalCase FEATURE_NAME}}Status;
+          created_at: string;
+          updated_at: string | null;
+        };
+        Insert: {
+          id?: string;
+          name: string;
+          user_id?: string;
+          status?: {{pascalCase FEATURE_NAME}}Status;
+          created_at?: string;
+          updated_at?: string | null;
+        };
+        Update: {
+          id?: string;
+          name?: string;
+          user_id?: string;
+          status?: {{pascalCase FEATURE_NAME}}Status;
+          created_at?: string;
+          updated_at?: string | null;
+        };
+      };
+    };
+    Views: Record<string, never>;
+    Functions: Record<string, never>;
+    Enums: {
+      {{FEATURE_NAME}}_status: {{pascalCase FEATURE_NAME}}Status;
+    };
+  };
+}
+
+// ----- Feature Types -----
+
+export type {{pascalCase FEATURE_NAME}}Status =
+  | "draft"
+  | "active"
+  | "completed"
+  | "archived"
+  | "failed"
+  | "cancelled";
+
+export interface {{pascalCase FEATURE_NAME}} {
+  id: string;
+  name: string;
+  userId: string;
+  status: {{pascalCase FEATURE_NAME}}Status;
+  createdAt: string;
+  updatedAt: string | null;
+}
+
+export interface Create{{pascalCase FEATURE_NAME}}Input {
+  name: string;
+  // Add other required fields
+}
+
+export interface Update{{pascalCase FEATURE_NAME}}Input {
+  name?: string;
+  // Add other updatable fields
+}
+
+// ----- Storage Types -----
+
+export interface StorageUpload {
+  bucket: string;
+  path: string;
+  file: File;
+  contentType?: string;
+}
+
+export interface StorageFile {
+  id: string;
+  name: string;
+  bucket: string;
+  path: string;
+  publicUrl: string;
+  size: number;
+  contentType: string;
+  createdAt: string;
+}
+
+// ----- Auth Types -----
+
+export interface AuthUser {
+  id: string;
+  email: string;
+  displayName: string | null;
+  avatarUrl: string | null;
+}
+
+export interface AuthSession {
+  user: AuthUser;
+  accessToken: string;
+  expiresAt: number;
+}
+
+// ----- Form Schemas (use with zod) -----
+// Define zod schemas in component files, not here.
+// This file is for type definitions only.