kybernus 1.0.0

package/templates/python-fastapi/free/mvc/app/services/item_service.py.hbs

@@ -0,0 +1,33 @@
+from typing import List, Optional
+from app.models.item import Item
+from app.schemas.item import ItemCreate
+from datetime import datetime
+import uuid
+
+class ItemService:
+"""Item Service - Business Logic Layer"""
+
+def __init__(self):
+self._items: dict[str, Item] = {}
+
+def get_all(self) -> List[Item]:
+return list(self._items.values())
+
+def get_by_id(self, item_id: str) -> Optional[Item]:
+return self._items.get(item_id)
+
+def create(self, data: ItemCreate) -> Item:
+item = Item(
+id=str(uuid.uuid4()),
+name=data.name,
+description=data.description,
+created_at=datetime.now()
+)
+self._items[item.id] = item
+return item
+
+def delete(self, item_id: str) -> bool:
+if item_id in self._items:
+del self._items[item_id]
+return True
+return False

package/templates/python-fastapi/free/mvc/requirements.txt.hbs

@@ -0,0 +1,4 @@
+fastapi>=0.109.0
+uvicorn[standard]>=0.27.0
+pydantic>=2.5.0
+python-dotenv>=1.0.0

package/templates/python-fastapi/pro/clean/.env.example.hbs

@@ -0,0 +1,17 @@
+# {{projectName}} Environment Variables
+
+# Server
+PORT=8000
+
+# Database
+DATABASE_URL=postgresql://postgres:postgres@localhost:5432/{{projectNameSnakeCase}}
+
+# JWT
+JWT_SECRET=your-super-secret-jwt-key-change-in-production
+
+# Stripe
+STRIPE_SECRET_KEY=sk_test_your_stripe_secret_key
+STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret
+
+# Frontend
+FRONTEND_URL=http://localhost:3000

package/templates/python-fastapi/pro/clean/.github/workflows/ci-cd.yml.hbs

@@ -0,0 +1,88 @@
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches: [main, develop]
+    pull_request:
+      branches: [main]
+
+      env:
+        NODE_VERSION: '20'
+        AWS_REGION: 'us-east-1'
+
+        jobs:
+          test:
+            runs-on: ubuntu-latest
+
+            steps:
+              - uses: actions/checkout@v4
+
+              - name: Setup Node.js
+              uses: actions/setup-node@v4
+              with:
+                node-version: $\{{ env.NODE_VERSION }}
+                cache: 'npm'
+
+                - name: Install dependencies
+                run: npm ci
+
+                - name: Run linter
+                run: npm run lint --if-present
+
+                - name: Run tests
+                run: npm test --if-present
+
+                - name: Build
+                run: npm run build
+
+                build-and-push:
+                  needs: test
+                  runs-on: ubuntu-latest
+                  if: github.ref == 'refs/heads/main'
+
+                  steps:
+                    - uses: actions/checkout@v4
+
+                    - name: Configure AWS credentials
+                    uses: aws-actions/configure-aws-credentials@v4
+                    with:
+                      aws-access-key-id: $\{{ secrets.AWS_ACCESS_KEY_ID }}
+                      aws-secret-access-key: $\{{ secrets.AWS_SECRET_ACCESS_KEY }}
+                      aws-region: $\{{ env.AWS_REGION }}
+
+                      - name: Login to Amazon ECR
+                      id: login-ecr
+                      uses: aws-actions/amazon-ecr-login@v2
+
+                      - name: Build, tag, and push image to Amazon ECR
+                      env:
+                        ECR_REGISTRY: $\{{ steps.login-ecr.outputs.registry }}
+                        ECR_REPOSITORY: {{projectNameKebabCase}}
+                        IMAGE_TAG: $\{{ github.sha }}
+                        run: |
+                        docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
+                        docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:latest .
+                        docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+                        docker push $ECR_REGISTRY/$ECR_REPOSITORY:latest
+
+                        deploy:
+                          needs: build-and-push
+                          runs-on: ubuntu-latest
+                          if: github.ref == 'refs/heads/main'
+
+                          steps:
+                            - uses: actions/checkout@v4
+
+                            - name: Configure AWS credentials
+                            uses: aws-actions/configure-aws-credentials@v4
+                            with:
+                              aws-access-key-id: $\{{ secrets.AWS_ACCESS_KEY_ID }}
+                              aws-secret-access-key: $\{{ secrets.AWS_SECRET_ACCESS_KEY }}
+                              aws-region: $\{{ env.AWS_REGION }}
+
+                              - name: Deploy to ECS
+                              run: |
+                              aws ecs update-service \
+                              --cluster {{projectNameKebabCase}}-prod \
+                              --service {{projectNameKebabCase}}-api \
+                              --force-new-deployment

package/templates/python-fastapi/pro/clean/Dockerfile.hbs

@@ -0,0 +1,20 @@
+# Production Dockerfile for {{projectName}}
+
+FROM python:3.11-slim
+
+WORKDIR /app
+
+# Install dependencies
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy source
+COPY . .
+
+# Create non-root user
+RUN adduser --disabled-password --gecos "" appuser
+USER appuser
+
+EXPOSE 8000
+
+CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]

package/templates/python-fastapi/pro/clean/app/domain/entities/user.py.hbs

@@ -0,0 +1,23 @@
+from dataclasses import dataclass, field
+from datetime import datetime
+from typing import Optional
+import uuid
+
+@dataclass
+class User:
+    """User Entity - Domain Layer"""
+    email: str
+    name: str
+    password: str
+    id: str = field(default_factory=lambda: str(uuid.uuid4()))
+    stripe_customer_id: Optional[str] = None
+    created_at: datetime = field(default_factory=datetime.now)
+    
+    def __post_init__(self):
+        if "@" not in self.email:
+            raise ValueError("Invalid email format")
+        if len(self.password) < 8:
+            raise ValueError("Password must be at least 8 characters")
+    
+    def set_stripe_customer_id(self, customer_id: str):
+        self.stripe_customer_id = customer_id

package/templates/python-fastapi/pro/clean/app/domain/repositories/user_repository.py.hbs

@@ -0,0 +1,22 @@
+from abc import ABC, abstractmethod
+from typing import Optional, List
+from app.domain.entities.user import User
+
+class IUserRepository(ABC):
+    """User Repository Interface - Domain Layer"""
+    
+    @abstractmethod
+    async def find_by_id(self, user_id: str) -> Optional[User]:
+        pass
+    
+    @abstractmethod
+    async def find_by_email(self, email: str) -> Optional[User]:
+        pass
+    
+    @abstractmethod
+    async def save(self, user: User) -> User:
+        pass
+    
+    @abstractmethod
+    async def delete(self, user_id: str) -> None:
+        pass

package/templates/python-fastapi/pro/clean/app/domain/usecases/register_user.py.hbs

@@ -0,0 +1,30 @@
+from app.domain.entities.user import User
+from app.domain.repositories.user_repository import IUserRepository
+from typing import Protocol
+
+class IPasswordHasher(Protocol):
+    def hash(self, password: str) -> str: ...
+    def verify(self, password: str, hashed: str) -> bool: ...
+
+class ITokenGenerator(Protocol):
+    def generate(self, user_id: str, email: str) -> str: ...
+
+class RegisterUserUseCase:
+    """Register User Use Case - Domain Layer"""
+    
+    def __init__(self, repository: IUserRepository, hasher: IPasswordHasher, token_gen: ITokenGenerator):
+        self.repository = repository
+        self.hasher = hasher
+        self.token_gen = token_gen
+    
+    async def execute(self, email: str, name: str, password: str):
+        existing = await self.repository.find_by_email(email)
+        if existing:
+            raise ValueError("User already exists")
+        
+        hashed = self.hasher.hash(password)
+        user = User(email=email, name=name, password=hashed)
+        saved_user = await self.repository.save(user)
+        token = self.token_gen.generate(saved_user.id, saved_user.email)
+        
+        return {"user": saved_user, "token": token}

package/templates/python-fastapi/pro/clean/app/infrastructure/database/in_memory_repository.py.hbs

@@ -0,0 +1,26 @@
+from app.domain.repositories.user_repository import IUserRepository
+from app.domain.entities.user import User
+from typing import Optional
+
+class InMemoryUserRepository(IUserRepository):
+    """In-Memory User Repository - Infrastructure Layer"""
+    
+    def __init__(self):
+        self._users: dict[str, User] = {}
+    
+    async def find_by_id(self, user_id: str) -> Optional[User]:
+        return self._users.get(user_id)
+    
+    async def find_by_email(self, email: str) -> Optional[User]:
+        for user in self._users.values():
+            if user.email == email:
+                return user
+        return None
+    
+    async def save(self, user: User) -> User:
+        self._users[user.id] = user
+        return user
+    
+    async def delete(self, user_id: str) -> None:
+        if user_id in self._users:
+            del self._users[user_id]

package/templates/python-fastapi/pro/clean/app/infrastructure/http/auth_controller.py.hbs

@@ -0,0 +1,26 @@
+from fastapi import APIRouter, HTTPException, Depends
+from pydantic import BaseModel, EmailStr
+from app.domain.usecases.register_user import RegisterUserUseCase
+from app.infrastructure.database.in_memory_repository import InMemoryUserRepository
+from app.infrastructure.security.adapters import BcryptHasher, JwtTokenGenerator
+
+router = APIRouter()
+
+# Dependency Injection
+repo = InMemoryUserRepository()
+hasher = BcryptHasher()
+token_gen = JwtTokenGenerator()
+register_usecase = RegisterUserUseCase(repo, hasher, token_gen)
+
+class RegisterRequest(BaseModel):
+    email: EmailStr
+    name: str
+    password: str
+
+@router.post("/register")
+async def register(req: RegisterRequest):
+    try:
+        result = await register_usecase.execute(req.email, req.name, req.password)
+        return result
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=str(e))

package/templates/python-fastapi/pro/clean/app/infrastructure/security/adapters.py.hbs

@@ -0,0 +1,23 @@
+from passlib.context import CryptContext
+from jose import jwt
+from datetime import datetime, timedelta
+import os
+
+SECRET_KEY = os.getenv("JWT_SECRET", "secret")
+ALGORITHM = "HS256"
+
+class BcryptHasher:
+    def __init__(self):
+        self.pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+    
+    def hash(self, password: str) -> str:
+        return self.pwd_context.hash(password)
+    
+    def verify(self, password: str, hashed: str) -> bool:
+        return self.pwd_context.verify(password, hashed)
+
+class JwtTokenGenerator:
+    def generate(self, user_id: str, email: str) -> str:
+        expire = datetime.utcnow() + timedelta(days=7)
+        to_encode = {"exp": expire, "sub": user_id, "email": email}
+        return jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)

package/templates/python-fastapi/pro/clean/app/main.py.hbs

@@ -0,0 +1,10 @@
+from fastapi import FastAPI
+from app.infrastructure.http import auth_controller
+
+app = FastAPI(title="{{projectName}} - Clean Architecture")
+
+app.include_router(auth_controller.router, prefix="/api/auth", tags=["Auth"])
+
+@app.get("/health")
+def health():
+    return {"status": "ok", "architecture": "clean"}

package/templates/python-fastapi/pro/clean/infra/main.tf.hbs

@@ -0,0 +1,83 @@
+# Terraform Infrastructure for {{projectName}}
+
+terraform {
+  required_version = ">= 1.0.0"
+
+  required_providers {
+    aws = {
+      source = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+
+# Uncomment for remote state (recommended for production)
+# backend "s3" {
+# bucket = "your-terraform-state-bucket"
+# key = "{{projectNameKebabCase}}/terraform.tfstate"
+# region = "us-east-1"
+# encrypt = true
+# dynamodb_table = "terraform-locks"
+# }
+}
+
+provider "aws" {
+  region = var.aws_region
+}
+
+# Variables
+variable "aws_region" {
+  description = "AWS region"
+  type = string
+  default = "us-east-1"
+}
+
+variable "environment" {
+  description = "Environment name (dev, staging, prod)"
+  type = string
+  default = "dev"
+}
+
+variable "app_name" {
+  description = "Application name"
+  type = string
+  default = "{{projectNameKebabCase}}"
+}
+
+# VPC
+module "vpc" {
+  source = "./modules/vpc"
+
+  app_name = var.app_name
+  environment = var.environment
+}
+
+# ECS Cluster
+module "ecs" {
+  source = "./modules/ecs"
+
+  app_name = var.app_name
+  environment = var.environment
+  vpc_id = module.vpc.vpc_id
+  subnet_ids = module.vpc.private_subnet_ids
+}
+
+# RDS PostgreSQL
+module "rds" {
+  source = "./modules/rds"
+
+  app_name = var.app_name
+  environment = var.environment
+  vpc_id = module.vpc.vpc_id
+  subnet_ids = module.vpc.private_subnet_ids
+  security_group_id = module.vpc.db_security_group_id
+}
+
+# Outputs
+output "ecs_cluster_name" {
+  value = module.ecs.cluster_name
+}
+
+output "rds_endpoint" {
+  value = module.rds.endpoint
+  sensitive = true
+}

package/templates/python-fastapi/pro/clean/infra/modules/ecs/main.tf.hbs

@@ -0,0 +1,54 @@
+# ECS Module
+
+variable "app_name" {
+  type = string
+}
+
+variable "environment" {
+  type = string
+}
+
+variable "vpc_id" {
+  type = string
+}
+
+variable "subnet_ids" {
+  type = list(string)
+}
+
+# ECS Cluster
+resource "aws_ecs_cluster" "main" {
+  name = "${var.app_name}-${var.environment}"
+
+  setting {
+    name = "containerInsights"
+    value = "enabled"
+  }
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}"
+    Environment = var.environment
+  }
+}
+
+# ECS Capacity Provider
+resource "aws_ecs_cluster_capacity_providers" "main" {
+  cluster_name = aws_ecs_cluster.main.name
+
+  capacity_providers = ["FARGATE", "FARGATE_SPOT"]
+
+  default_capacity_provider_strategy {
+    base = 1
+    weight = 100
+    capacity_provider = "FARGATE"
+  }
+}
+
+# Outputs
+output "cluster_name" {
+  value = aws_ecs_cluster.main.name
+}
+
+output "cluster_arn" {
+  value = aws_ecs_cluster.main.arn
+}

package/templates/python-fastapi/pro/clean/infra/modules/rds/main.tf.hbs

@@ -0,0 +1,88 @@
+# RDS Module
+
+variable "app_name" {
+  type = string
+}
+
+variable "environment" {
+  type = string
+}
+
+variable "vpc_id" {
+  type = string
+}
+
+variable "subnet_ids" {
+  type = list(string)
+}
+
+variable "security_group_id" {
+  type = string
+}
+
+# DB Subnet Group
+resource "aws_db_subnet_group" "main" {
+  name = "${var.app_name}-${var.environment}"
+  subnet_ids = var.subnet_ids
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}"
+    Environment = var.environment
+  }
+}
+
+# RDS PostgreSQL Instance
+resource "aws_db_instance" "main" {
+  identifier = "${var.app_name}-${var.environment}"
+
+  engine = "postgres"
+  engine_version = "16"
+  instance_class = "db.t3.micro"
+
+  allocated_storage = 20
+  max_allocated_storage = 100
+  storage_type = "gp3"
+  storage_encrypted = true
+
+  db_name = replace(var.app_name, "-", "_")
+  username = "postgres"
+  password = random_password.db_password.result
+
+  db_subnet_group_name = aws_db_subnet_group.main.name
+  vpc_security_group_ids = [var.security_group_id]
+
+  backup_retention_period = 7
+  skip_final_snapshot = var.environment != "prod"
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}"
+    Environment = var.environment
+  }
+}
+
+# Random password for DB
+resource "random_password" "db_password" {
+  length = 32
+  special = false
+}
+
+# Store password in SSM
+resource "aws_ssm_parameter" "db_password" {
+  name = "/${var.app_name}/${var.environment}/db-password"
+  description = "Database password for ${var.app_name}"
+  type = "SecureString"
+  value = random_password.db_password.result
+
+  tags = {
+    Environment = var.environment
+  }
+}
+
+# Outputs
+output "endpoint" {
+  value = aws_db_instance.main.endpoint
+}
+
+output "db_name" {
+  value = aws_db_instance.main.db_name
+}

package/templates/python-fastapi/pro/clean/infra/modules/vpc/main.tf.hbs

@@ -0,0 +1,107 @@
+# VPC Module
+
+variable "app_name" {
+  type = string
+}
+
+variable "environment" {
+  type = string
+}
+
+# VPC
+resource "aws_vpc" "main" {
+  cidr_block = "10.0.0.0/16"
+  enable_dns_hostnames = true
+  enable_dns_support = true
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}-vpc"
+    Environment = var.environment
+  }
+}
+
+# Public Subnets
+resource "aws_subnet" "public" {
+  count = 2
+  vpc_id = aws_vpc.main.id
+  cidr_block = "10.0.${count.index + 1}.0/24"
+  availability_zone = data.aws_availability_zones.available.names[count.index]
+
+  map_public_ip_on_launch = true
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}-public-${count.index + 1}"
+    Environment = var.environment
+  }
+}
+
+# Private Subnets
+resource "aws_subnet" "private" {
+  count = 2
+  vpc_id = aws_vpc.main.id
+  cidr_block = "10.0.${count.index + 10}.0/24"
+  availability_zone = data.aws_availability_zones.available.names[count.index]
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}-private-${count.index + 1}"
+    Environment = var.environment
+  }
+}
+
+# Internet Gateway
+resource "aws_internet_gateway" "main" {
+  vpc_id = aws_vpc.main.id
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}-igw"
+    Environment = var.environment
+  }
+}
+
+# Data source for AZs
+data "aws_availability_zones" "available" {
+  state = "available"
+}
+
+# Security Group for DB
+resource "aws_security_group" "db" {
+  name = "${var.app_name}-${var.environment}-db-sg"
+  description = "Security group for database"
+  vpc_id = aws_vpc.main.id
+
+  ingress {
+    from_port = 5432
+    to_port = 5432
+    protocol = "tcp"
+    cidr_blocks = ["10.0.0.0/16"]
+  }
+
+  egress {
+    from_port = 0
+    to_port = 0
+    protocol = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}-db-sg"
+    Environment = var.environment
+  }
+}
+
+# Outputs
+output "vpc_id" {
+  value = aws_vpc.main.id
+}
+
+output "public_subnet_ids" {
+  value = aws_subnet.public[*].id
+}
+
+output "private_subnet_ids" {
+  value = aws_subnet.private[*].id
+}
+
+output "db_security_group_id" {
+  value = aws_security_group.db.id
+}

package/templates/python-fastapi/pro/clean/requirements.txt.hbs

@@ -0,0 +1,12 @@
+fastapi>=0.109.0
+uvicorn[standard]>=0.27.0
+pydantic>=2.5.0
+python-dotenv>=1.0.0
+python-jose[cryptography]>=3.3.0
+passlib[bcrypt]>=1.7.4
+stripe>=8.0.0
+sqlalchemy>=2.0.0
+alembic>=1.13.0
+psycopg2-binary>=2.9.9
+pytest>=8.0.0
+httpx>=0.26.0