@polymorphism-tech/morph-spec 8.34.2 → 8.35.1

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-cache/cache/triagem.acme.a-saudacao/1/19F631228C6E00BA/contents.data

@@ -0,0 +1,13 @@
+{
+  "messages": [
+    {
+      "role": "assistant",
+      "contents": [
+        {
+          "$type": "text",
+          "text": "Bom dia! Como posso ajudar voce hoje?"
+        }
+      ]
+    }
+  ]
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-cache/cache/triagem.acme.a-saudacao/1/19F631228C6E00BA/entry.json

@@ -0,0 +1,7 @@
+{
+  "scenarioName": "triagem.acme.a-saudacao",
+  "iterationName": "1",
+  "key": "19F631228C6E00BA41892982E6EA1BB23822FA53D6E62C79B6724893618E7E03AE4F70F94332FDEE0DAA960974BA1171",
+  "creation": "2026-09-09T04:54:34.8385364+00:00",
+  "expiration": "2036-09-06T04:54:34.8385364+00:00"
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-cache/cache/triagem.acme.b-escalonamento/1/A24A7C9BDD8239D8/contents.data

@@ -0,0 +1,13 @@
+{
+  "messages": [
+    {
+      "role": "assistant",
+      "contents": [
+        {
+          "$type": "text",
+          "text": "Encaminhando voce para um atendente humano agora."
+        }
+      ]
+    }
+  ]
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-cache/cache/triagem.acme.b-escalonamento/1/A24A7C9BDD8239D8/entry.json

@@ -0,0 +1,7 @@
+{
+  "scenarioName": "triagem.acme.b-escalonamento",
+  "iterationName": "1",
+  "key": "A24A7C9BDD8239D87A60FD05A4BF870DAB4CFBE8BE7A796FF86534B6F37F4517321D3420D76ED6B5EF000C68CB18301F",
+  "creation": "2026-09-09T04:54:34.8448053+00:00",
+  "expiration": "2036-09-06T04:54:34.8448053+00:00"
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-cache/cache/triagem.globex.a-saudacao/1/E38CD37DF003EDB7/contents.data

@@ -0,0 +1,13 @@
+{
+  "messages": [
+    {
+      "role": "assistant",
+      "contents": [
+        {
+          "$type": "text",
+          "text": "Bom dia! Aqui e o atendimento da Globex."
+        }
+      ]
+    }
+  ]
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-cache/cache/triagem.globex.a-saudacao/1/E38CD37DF003EDB7/entry.json

@@ -0,0 +1,7 @@
+{
+  "scenarioName": "triagem.globex.a-saudacao",
+  "iterationName": "1",
+  "key": "E38CD37DF003EDB77815FF1A086F48ACBDD63E743D44DFFDF2A23EEED34731E8D3B6E51A4EBB740CB0BF2720D8AA02ED",
+  "creation": "2026-09-09T04:54:34.846003+00:00",
+  "expiration": "2036-09-06T04:54:34.846003+00:00"
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-datasets/orcamento/acme/a-resposta-estruturada.json

@@ -0,0 +1,24 @@
+{
+  "messages": [
+    {
+      "role": "system",
+      "text": "Responda SOMENTE com um objeto JSON com as chaves valor e prazo."
+    },
+    {
+      "role": "user",
+      "text": "quanto custa a revisao anual?"
+    }
+  ],
+  "assertions": [
+    {
+      "name": "tem-valor",
+      "kind": "json-has-key",
+      "target": "valor"
+    },
+    {
+      "name": "tem-prazo",
+      "kind": "json-has-key",
+      "target": "prazo"
+    }
+  ]
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-datasets/triagem/acme/a-saudacao.json

@@ -0,0 +1,23 @@
+{
+  "messages": [
+    {
+      "role": "system",
+      "text": "Voce e o atendente da Acme. Responda em portugues, em uma frase."
+    },
+    {
+      "role": "user",
+      "text": "bom dia"
+    }
+  ],
+  "assertions": [
+    {
+      "name": "cumprimenta",
+      "kind": "contains",
+      "value": "bom dia"
+    },
+    {
+      "name": "sem-dado-pessoal",
+      "kind": "no-pii"
+    }
+  ]
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-datasets/triagem/acme/b-escalonamento.json

@@ -0,0 +1,24 @@
+{
+  "messages": [
+    {
+      "role": "system",
+      "text": "Voce e o atendente da Acme. Responda em portugues, em uma frase."
+    },
+    {
+      "role": "user",
+      "text": "quero falar com um humano agora"
+    }
+  ],
+  "assertions": [
+    {
+      "name": "confirma-encaminhamento",
+      "kind": "contains",
+      "value": "encaminhando"
+    },
+    {
+      "name": "nao-promete-prazo",
+      "kind": "not-contains",
+      "value": "garantimos"
+    }
+  ]
+}

package/framework/templates/dotnet/ai-kit/tests/Morph.AiKit.Tests/eval-datasets/triagem/globex/a-saudacao.json

@@ -0,0 +1,23 @@
+{
+  "messages": [
+    {
+      "role": "system",
+      "text": "Voce e o atendente da Globex. Responda em portugues, em uma frase."
+    },
+    {
+      "role": "user",
+      "text": "bom dia"
+    }
+  ],
+  "assertions": [
+    {
+      "name": "cumprimenta",
+      "kind": "contains",
+      "value": "Globex"
+    },
+    {
+      "name": "sem-dado-pessoal",
+      "kind": "no-pii"
+    }
+  ]
+}

package/framework/templates/feature/decisions.md

@@ -1,122 +1,122 @@
-# Architecture Decision Records - {{titleCase FEATURE_NAME}}
-
-## ADR-001: {Decision Title}
-
-**Date:** {{DATE}}
-**Status:** Proposed | Accepted | Deprecated | Superseded
-**Deciders:** MORPH Agents, Developer
-
-### Context
-
-{Describe the context and problem that led to this decision}
-
-### Decision
-
-{Describe the decision made}
-
-### Consequences
-
-**Pros:**
-- {Positive consequence 1}
-- {Positive consequence 2}
-
-**Cons:**
-- {Negative consequence 1}
-
-**Risks:**
-- {Identified risk}
-
-### Alternatives Considered
-
-#### Option A: {Name}
-- Pros: {advantages}
-- Cons: {disadvantages}
-- **Rejected because:** {reason}
-
-#### Option B: {Name}
-- Pros: {advantages}
-- Cons: {disadvantages}
-- **Rejected because:** {reason}
-
----
-
-{{#if (eq STACK "nextjs-neon")}}
-## ADR-002: Database Access Strategy
-
-**Date:** {{DATE}}
-**Status:** Accepted
-
-### Context
-
-Need to decide how the .NET API accesses Neon PostgreSQL.
-
-### Decision
-
-Use Dapper with Npgsql for direct SQL queries. No EF Core.
-
-### Consequences
-
-**Pros:**
-- Full control over SQL queries
-- Better performance (no ORM overhead)
-- Direct access to PostgreSQL features (jsonb, pgvector, functions)
-- RLS policies apply naturally through connection
-
-**Cons:**
-- No automatic migrations (use Neon CLI / dotnet ef instead)
-- Manual SQL query writing
-- No change tracking
-
----
-
-## ADR-003: Auth Strategy
-
-**Date:** {{DATE}}
-**Status:** Accepted
-
-### Context
-
-Need authentication for both Next.js frontend and .NET API.
-
-### Decision
-
-Use Neon Auth (Better Auth) for authentication. Auth data lives in the Neon database. JWT validated by .NET API middleware.
-
-### Consequences
-
-**Pros:**
-- Auth data in same database — no external provider, no sync delays
-- RLS policies work with Neon Auth JWT via auth.user_id() / pg_session_jwt
-- Built-in social login, email/password via @neondatabase/auth SDK
-- Branch isolation — each Neon branch gets isolated auth data
-- No webhooks needed — query neon_auth schema directly
-
-**Cons:**
-- Neon Auth is currently in Beta
-- JWT must be forwarded to .NET API for backend auth
-{{/if}}
-
----
-
-## Template for New ADRs
-
-```markdown
-## ADR-XXX: {Title}
-
-**Date:**
-**Status:** Proposed | Accepted | Deprecated | Superseded
-
-### Context
-{Why is this decision needed?}
-
-### Decision
-{What was decided?}
-
-### Consequences
-**Pros:** {list}
-**Cons:** {list}
-```
-
----
-
-*Generated by MORPH Framework*
+# Architecture Decision Records - {{titleCase FEATURE_NAME}}
+
+## ADR-001: {Decision Title}
+
+**Date:** {{DATE}}
+**Status:** Proposed | Accepted | Deprecated | Superseded
+**Deciders:** MORPH Agents, Developer
+
+### Context
+
+{Describe the context and problem that led to this decision}
+
+### Decision
+
+{Describe the decision made}
+
+### Consequences
+
+**Pros:**
+- {Positive consequence 1}
+- {Positive consequence 2}
+
+**Cons:**
+- {Negative consequence 1}
+
+**Risks:**
+- {Identified risk}
+
+### Alternatives Considered
+
+#### Option A: {Name}
+- Pros: {advantages}
+- Cons: {disadvantages}
+- **Rejected because:** {reason}
+
+#### Option B: {Name}
+- Pros: {advantages}
+- Cons: {disadvantages}
+- **Rejected because:** {reason}
+
+---
+
+{{#if (eq STACK "nextjs-neon")}}
+## ADR-002: Database Access Strategy
+
+**Date:** {{DATE}}
+**Status:** Accepted
+
+### Context
+
+Need to decide how the .NET API accesses Neon PostgreSQL.
+
+### Decision
+
+Use Dapper with Npgsql for direct SQL queries. No EF Core.
+
+### Consequences
+
+**Pros:**
+- Full control over SQL queries
+- Better performance (no ORM overhead)
+- Direct access to PostgreSQL features (jsonb, pgvector, functions)
+- RLS policies apply naturally through connection
+
+**Cons:**
+- No automatic migrations (use Neon CLI / dotnet ef instead)
+- Manual SQL query writing
+- No change tracking
+
+---
+
+## ADR-003: Auth Strategy
+
+**Date:** {{DATE}}
+**Status:** Accepted
+
+### Context
+
+Need authentication for both Next.js frontend and .NET API.
+
+### Decision
+
+Use Neon Auth (Better Auth) for authentication. Auth data lives in the Neon database. JWT validated by .NET API middleware.
+
+### Consequences
+
+**Pros:**
+- Auth data in same database — no external provider, no sync delays
+- RLS policies work with Neon Auth JWT via auth.user_id() / pg_session_jwt
+- Built-in social login, email/password via @neondatabase/auth SDK
+- Branch isolation — each Neon branch gets isolated auth data
+- No webhooks needed — query neon_auth schema directly
+
+**Cons:**
+- Neon Auth is currently in Beta
+- JWT must be forwarded to .NET API for backend auth
+{{/if}}
+
+---
+
+## Template for New ADRs
+
+```markdown
+## ADR-XXX: {Title}
+
+**Date:**
+**Status:** Proposed | Accepted | Deprecated | Superseded
+
+### Context
+{Why is this decision needed?}
+
+### Decision
+{What was decided?}
+
+### Consequences
+**Pros:** {list}
+**Cons:** {list}
+```
+
+---
+
+*Generated by MORPH Framework*

package/framework/templates/frontend/nextjs/Dockerfile.nextjs.hbs

@@ -1,43 +1,43 @@
-# Multi-stage Next.js production build for Coolify
-# Stage 1: Dependencies
-FROM node:20-alpine AS deps
-RUN apk add --no-cache libc6-compat
-WORKDIR /app
-
-COPY package.json package-lock.json* ./
-RUN npm ci --only=production && npm cache clean --force
-
-# Stage 2: Build
-FROM node:20-alpine AS builder
-WORKDIR /app
-
-COPY --from=deps /app/node_modules ./node_modules
-COPY . .
-
-# Build args for NEXT_PUBLIC_ variables (must be available at build time)
-ARG NEXT_PUBLIC_APP_URL
-ENV NEXT_PUBLIC_APP_URL=$NEXT_PUBLIC_APP_URL
-
-RUN npm run build
-
-# Stage 3: Production runner
-FROM node:20-alpine AS runner
-WORKDIR /app
-
-ENV NODE_ENV=production
-ENV NEXT_TELEMETRY_DISABLED=1
-
-RUN addgroup --system --gid 1001 nodejs
-RUN adduser --system --uid 1001 nextjs
-
-COPY --from=builder /app/public ./public
-COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
-COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
-
-USER nextjs
-
-EXPOSE 3000
-ENV PORT=3000
-ENV HOSTNAME="0.0.0.0"
-
-CMD ["node", "server.js"]
+# Multi-stage Next.js production build for Coolify
+# Stage 1: Dependencies
+FROM node:20-alpine AS deps
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+
+COPY package.json package-lock.json* ./
+RUN npm ci --only=production && npm cache clean --force
+
+# Stage 2: Build
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Build args for NEXT_PUBLIC_ variables (must be available at build time)
+ARG NEXT_PUBLIC_APP_URL
+ENV NEXT_PUBLIC_APP_URL=$NEXT_PUBLIC_APP_URL
+
+RUN npm run build
+
+# Stage 3: Production runner
+FROM node:20-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+
+EXPOSE 3000
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "server.js"]

package/framework/templates/frontend/nextjs/client-component.tsx.hbs

@@ -1,26 +1,26 @@
-// features/{{kebabCase featureName}}/components/{{kebabCase featureName}}-list.tsx
-'use client';
-
-import { use{{pascalCase featureName}}s } from '@/features/{{kebabCase featureName}}/hooks/use-{{kebabCase featureName}}s';
-import { DataTable } from '@/components/data-table';
-import type { {{pascalCase featureName}} } from '@/features/{{kebabCase featureName}}/types/{{kebabCase featureName}}.types';
-import type { ColumnDef } from '@tanstack/react-table';
-
-const columns: ColumnDef<{{pascalCase featureName}}>[] = [
-  { accessorKey: 'id', header: 'ID' },
-  { accessorKey: 'name', header: 'Name' },
-];
-
-interface {{pascalCase featureName}}ListProps {
-  initialData?: {{pascalCase featureName}}[];
-}
-
-export function {{pascalCase featureName}}List({ initialData }: {{pascalCase featureName}}ListProps) {
-  const { data = initialData ?? [], isLoading } = use{{pascalCase featureName}}s();
-
-  if (isLoading) {
-    return <div className="flex items-center justify-center h-32">Loading...</div>;
-  }
-
-  return <DataTable columns={columns} data={data} />;
-}
+// features/{{kebabCase featureName}}/components/{{kebabCase featureName}}-list.tsx
+'use client';
+
+import { use{{pascalCase featureName}}s } from '@/features/{{kebabCase featureName}}/hooks/use-{{kebabCase featureName}}s';
+import { DataTable } from '@/components/data-table';
+import type { {{pascalCase featureName}} } from '@/features/{{kebabCase featureName}}/types/{{kebabCase featureName}}.types';
+import type { ColumnDef } from '@tanstack/react-table';
+
+const columns: ColumnDef<{{pascalCase featureName}}>[] = [
+  { accessorKey: 'id', header: 'ID' },
+  { accessorKey: 'name', header: 'Name' },
+];
+
+interface {{pascalCase featureName}}ListProps {
+  initialData?: {{pascalCase featureName}}[];
+}
+
+export function {{pascalCase featureName}}List({ initialData }: {{pascalCase featureName}}ListProps) {
+  const { data = initialData ?? [], isLoading } = use{{pascalCase featureName}}s();
+
+  if (isLoading) {
+    return <div className="flex items-center justify-center h-32">Loading...</div>;
+  }
+
+  return <DataTable columns={columns} data={data} />;
+}

package/framework/templates/frontend/nextjs/env.mjs.hbs

@@ -1,32 +1,32 @@
-// env.mjs — Zod-validated environment variables
-// Crashes at startup if required vars are missing — no silent undefined
-import { z } from 'zod';
-
-const serverSchema = z.object({
-  API_URL: z.string().url('API_URL must be a valid URL'),
-  NODE_ENV: z.enum(['development', 'test', 'production']).default('development'),
-});
-
-const clientSchema = z.object({
-  NEXT_PUBLIC_APP_URL: z.string().url().optional(),
-});
-
-// Validate server-side env (only available on server)
-const serverEnv = serverSchema.safeParse(process.env);
-if (!serverEnv.success) {
-  console.error('❌ Invalid server environment variables:');
-  console.error(serverEnv.error.flatten().fieldErrors);
-  throw new Error('Invalid environment variables');
-}
-
-// Validate client-side env
-const clientEnv = clientSchema.safeParse({
-  NEXT_PUBLIC_APP_URL: process.env.NEXT_PUBLIC_APP_URL,
-});
-if (!clientEnv.success) {
-  console.error('❌ Invalid client environment variables:');
-  console.error(clientEnv.error.flatten().fieldErrors);
-  throw new Error('Invalid client environment variables');
-}
-
-export const env = { ...serverEnv.data, ...clientEnv.data };
+// env.mjs — Zod-validated environment variables
+// Crashes at startup if required vars are missing — no silent undefined
+import { z } from 'zod';
+
+const serverSchema = z.object({
+  API_URL: z.string().url('API_URL must be a valid URL'),
+  NODE_ENV: z.enum(['development', 'test', 'production']).default('development'),
+});
+
+const clientSchema = z.object({
+  NEXT_PUBLIC_APP_URL: z.string().url().optional(),
+});
+
+// Validate server-side env (only available on server)
+const serverEnv = serverSchema.safeParse(process.env);
+if (!serverEnv.success) {
+  console.error('❌ Invalid server environment variables:');
+  console.error(serverEnv.error.flatten().fieldErrors);
+  throw new Error('Invalid environment variables');
+}
+
+// Validate client-side env
+const clientEnv = clientSchema.safeParse({
+  NEXT_PUBLIC_APP_URL: process.env.NEXT_PUBLIC_APP_URL,
+});
+if (!clientEnv.success) {
+  console.error('❌ Invalid client environment variables:');
+  console.error(clientEnv.error.flatten().fieldErrors);
+  throw new Error('Invalid client environment variables');
+}
+
+export const env = { ...serverEnv.data, ...clientEnv.data };