Initial

Author: devosmos

.config/dotnet-tools.json

@@ -0,0 +1,13 @@
+{
+  "version": 1,
+  "isRoot": true,
+  "tools": {
+    "dotnet-ef": {
+      "version": "10.0.7",
+      "commands": [
+        "dotnet-ef"
+      ],
+      "rollForward": false
+    }
+  }
+}

.editorconfig

@@ -0,0 +1,27 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = crlf
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+trim_trailing_whitespace = true
+
+[*.cs]
+indent_size = 4
+dotnet_sort_system_directives_first = true
+dotnet_style_qualification_for_field = false:warning
+dotnet_style_qualification_for_property = false:warning
+dotnet_style_qualification_for_method = false:warning
+dotnet_style_qualification_for_event = false:warning
+dotnet_style_require_accessibility_modifiers = for_non_interface_members:warning
+csharp_style_namespace_declarations = file_scoped:warning
+csharp_style_var_when_type_is_apparent = true:suggestion
+csharp_style_var_elsewhere = false:suggestion
+
+[**/Migrations/*.cs]
+dotnet_diagnostic.IDE0161.severity = none
+
+[*.{yml,yaml,json,md,bicep,bicepparam}]
+indent_size = 2

.github/agents/api-builder.agent.md

@@ -0,0 +1,13 @@
+# API Builder Agent
+
+Use this agent for adding real API feature slices.
+
+Responsibilities:
+
+- Plan controller, operation, domain, infrastructure, and tests.
+- Preserve Clean Architecture boundaries.
+- Keep controllers thin.
+- Use FluentValidation and `Result<T>`.
+- Add tests with the implementation.
+
+Never add fake sample business domains.

.github/agents/iac-reviewer.agent.md

@@ -0,0 +1,10 @@
+# IaC Reviewer Agent
+
+Use this agent for Bicep and deployment workflow review.
+
+Responsibilities:
+
+- Check parameterization, naming, tags, managed identity, Key Vault usage, private endpoints, diagnostic settings, and outputs.
+- Verify no secrets are checked in.
+- Confirm `az bicep build --file infra/main.bicep` can run.
+- Update deployment/runbook docs for operational changes.

.github/agents/test-specialist.agent.md

@@ -0,0 +1,9 @@
+# Test Specialist Agent
+
+Use this agent for test design and test fixes.
+
+Responsibilities:
+
+- Use xUnit v3, FluentAssertions 7.2.x, NSubstitute, Testcontainers.MsSql, Respawn, and `Microsoft.AspNetCore.Mvc.Testing`.
+- Cover validators, operation handlers, result/error mapping, domain invariants, controller wiring, auth behavior, health, readiness, persistence, and OpenAPI.
+- Use `TestContext.Current.CancellationToken` where supported.

.github/copilot-instructions.md

@@ -0,0 +1,35 @@
+# Copilot Instructions
+
+You are working in `Devosmos.ApiStarter`, a domain-neutral ASP.NET Core 10 API starter.
+
+## Core Rules
+
+- Preserve Clean Architecture dependencies.
+- Do not add fake business domains.
+- Keep controllers thin and authorized by default.
+- Add use cases as operations in `Application`.
+- Put domain invariants in `Domain`.
+- Put EF Core and Azure implementations in `Infrastructure`.
+- Return expected failures with `Result<T>` and map them to `ProblemDetails`.
+- Use FluentValidation for request validation.
+- Use xUnit v3, FluentAssertions 7.2.x, NSubstitute, Testcontainers.MsSql, and Respawn.
+- Do not apply migrations on startup.
+- Generate idempotent SQL migration scripts for review.
+
+## File Placement
+
+- Controller: `src/Devosmos.ApiStarter.Api/Controllers`
+- Operation request/response/handler/validator: `src/Devosmos.ApiStarter.Application/<Feature>`
+- Domain model: `src/Devosmos.ApiStarter.Domain/<Feature>`
+- EF configuration: `src/Devosmos.ApiStarter.Infrastructure/Persistence/Configurations`
+- Migrations: `src/Devosmos.ApiStarter.Infrastructure/Persistence/Migrations`
+- Unit tests: `tests/Devosmos.ApiStarter.UnitTests`
+- Integration tests: `tests/Devosmos.ApiStarter.IntegrationTests`
+
+## Style
+
+- Prefer records for immutable DTOs.
+- Use cancellation tokens.
+- Avoid reflection unless the existing code already uses it.
+- Keep comments rare and useful.
+- Add tests with the change.

.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: nuget
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    groups:
+      dotnet:
+        patterns:
+          - "*"
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/hooks/safety-and-context.json

@@ -0,0 +1,26 @@
+{
+  "name": "safety-and-context",
+  "description": "Repository guardrails for AI-assisted changes.",
+  "checks": [
+    {
+      "id": "clean-architecture",
+      "description": "Do not add dependencies from Domain to other layers, or from Application to Infrastructure or Api."
+    },
+    {
+      "id": "domain-neutrality",
+      "description": "Do not add sample products, orders, todos, invoices, customers, or fake aggregates."
+    },
+    {
+      "id": "migration-safety",
+      "description": "Do not apply EF Core migrations on application startup. Generate reviewed idempotent SQL scripts."
+    },
+    {
+      "id": "secret-safety",
+      "description": "Do not commit connection strings, passwords, client secrets, certificates, or tokens."
+    },
+    {
+      "id": "test-stack",
+      "description": "Use xUnit v3, FluentAssertions 7.2.x, NSubstitute, Testcontainers.MsSql, Respawn, and coverlet."
+    }
+  ]
+}

.github/instructions/api.instructions.md

@@ -0,0 +1,12 @@
+---
+applyTo: "src/Devosmos.ApiStarter.Api/**/*.cs"
+---
+
+# API Layer Instructions
+
+- Controllers must be thin and call `IOperationExecutor`.
+- Use `[ApiController]`, `[ApiVersion]`, and `api/v{version:apiVersion}/[controller]`.
+- Controllers are authorized by fallback policy; add `[AllowAnonymous]` only for deliberate public endpoints.
+- Return `IActionResult` through `Result<T>.ToActionResult(this)` for operation outcomes.
+- Add explicit `ProducesResponseType` attributes for success, validation, expected errors, 401, and 403.
+- Keep middleware registration in `Program.cs`.

.github/instructions/application.instructions.md

@@ -0,0 +1,12 @@
+---
+applyTo: "src/Devosmos.ApiStarter.Application/**/*.cs"
+---
+
+# Application Layer Instructions
+
+- Use `IOperationHandler<TRequest,TResponse>` for use cases.
+- Use FluentValidation validators next to request types.
+- Return `Result<T>` instead of throwing for expected business failures.
+- Depend only on `Domain` and abstractions.
+- Define interfaces for infrastructure capabilities here.
+- Keep DTOs independent from EF Core and ASP.NET Core.