feat: migrate authorization and identity services to mmf_new architecture

.github/workflows/ci.yml

@@ -0,0 +1,66 @@
+name: CI
+
+on:
+  push:
+    branches: [ "main", "dev" ]
+  pull_request:
+    branches: [ "main", "dev" ]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11"]
+
+    services:
+      # Service containers for integration tests
+      # Note: testcontainers will spin up their own, but having these available
+      # ensures the environment is capable of running containers.
+      redis:
+        image: redis:7-alpine
+        ports:
+          - 6379:6379
+      postgres:
+        image: postgres:15-alpine
+        env:
+          POSTGRES_PASSWORD: password # pragma: allowlist secret
+          POSTGRES_DB: test_db
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Install uv
+      uses: astral-sh/setup-uv@v3
+      with:
+        version: "latest"
+
+    - name: Set up Python ${{ matrix.python-version }}
+      run: uv python install ${{ matrix.python-version }}
+
+    - name: Install dependencies
+      run: |
+        uv sync --all-extras --dev
+
+    - name: Run Architecture Checks
+      run: |
+        # Run the architecture tests
+        uv run pytest mmf/tests/test_architecture.py
+
+    - name: Run Core Tests with Coverage
+      run: |
+        # Run unit and integration tests with coverage enforcement
+        # The --cov-fail-under=70 flag is set in pyproject.toml, but we can override or rely on it.
+        uv run pytest mmf/tests/unit mmf/tests/integration
+
+    - name: Run Contract Tests (POC)
+      run: |
+        # Run contract tests
+        uv run pytest mmf/tests/contract

.github/workflows/comprehensive-e2e.yml

@@ -132,7 +132,7 @@ jobs:
       working-directory: ./mmf
       run: |
         echo "Running MMF contract validation tests..."
-        ../tests/run_mmf_tests.sh --contract --verbose
+        uv run pytest tests/contract -v
 
     - name: Upload contract test results
       if: always()
@@ -199,28 +199,8 @@ jobs:
       timeout-minutes: ${{ matrix.timeout }}
       working-directory: ./mmf
       run: |
-        cd ${{ github.workspace }}
-
         echo "Running MMF ${{ matrix.test-category }} tests in ${{ matrix.test-mode }} mode..."
-
-        case "${{ matrix.test-mode }}" in
-          "quick")
-            ./tests/run_mmf_tests.sh --${{ matrix.test-category }} --quick --verbose
-            ;;
-          "smoke")
-            ./tests/run_mmf_tests.sh --${{ matrix.test-category }} --smoke --verbose
-            ;;
-          "comprehensive")
-            ./tests/run_mmf_tests.sh --${{ matrix.test-category }} --verbose
-            ;;
-          "chaos")
-            ./tests/run_mmf_tests.sh --${{ matrix.test-category }} --chaos --verbose
-            ;;
-          *)
-            echo "Unknown test mode: ${{ matrix.test-mode }}"
-            exit 1
-            ;;
-        esac
+        uv run pytest tests/${{ matrix.test-category }} -v
 
     - name: Upload test artifacts
       if: always()
@@ -278,11 +258,7 @@ jobs:
       working-directory: ./mmf
       run: |
         echo "Running MMF performance validation tests..."
-        if [[ "${{ needs.check-test-scope.outputs.test-mode }}" == "comprehensive" ]]; then
-          ../tests/run_mmf_tests.sh --performance --verbose
-        else
-          ../tests/run_mmf_tests.sh --performance --quick --verbose
-        fi
+        uv run pytest tests/performance -v
 
     - name: Upload performance results
       if: always()
@@ -324,7 +300,7 @@ jobs:
       working-directory: ./mmf
       run: |
         echo "Running MMF security validation tests..."
-        ../tests/run_mmf_tests.sh --security --verbose
+        uv run pytest tests/security -v
 
     - name: Security scan
       run: |
@@ -386,7 +362,7 @@ jobs:
       working-directory: ./mmf
       run: |
         echo "Running MMF chaos engineering tests..."
-        ../tests/run_mmf_tests.sh --chaos --verbose
+        uv run pytest tests/chaos -v
 
     - name: Upload chaos test results
       if: always()

.github/workflows/e2e-tests.yml

@@ -59,9 +59,8 @@ jobs:
     - name: Run E2E tests
       working-directory: ./mmf
       run: |
-        cd ${{ github.workspace }}
         echo "Running MMF E2E tests..."
-        ./tests/run_mmf_tests.sh --e2e --verbose
+        uv run pytest tests/e2e -v
 
     - name: Upload test artifacts on failure
       if: failure()

.github/workflows/pr-validation.yml

@@ -80,16 +80,21 @@ jobs:
         uv run ruff check . || echo "Linting issues found - will continue with tests"
         uv run ruff format --check . || echo "Formatting issues found - will continue with tests"
 
+    - name: Run architectural tests
+      run: |
+        echo "Running architectural tests..."
+        uv run pytest mmf/tests/test_architecture.py -v
+
     - name: Run unit tests
       working-directory: ./mmf
       run: |
         echo "Running MMF unit tests..."
-        ../tests/run_mmf_tests.sh --unit --verbose
+        uv run pytest tests/unit -v
 
     - name: Run integration tests
       run: |
         echo "Running integration tests..."
-        uv run pytest tests/integration/ -v --tb=short -x || true
+        uv run pytest mmf/tests/integration/ -v --tb=short -x || true
 
   # Contract tests - validate API compatibility
   contract-tests:

.pre-commit-config.yaml

@@ -72,24 +72,32 @@ repos:
 
   # Python - Ruff (replaces both flake8 and black)
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.4
+    rev: v0.4.4
     hooks:
       - id: ruff
         name: Lint Python code with Ruff
         args: [--fix, --exit-non-zero-on-fix]
-        exclude: ^(services/.*\.py$|tools/scaffolding/.*\.py$|services/shared/modern_service_template\.py$|.*\.ipynb$|examples/demos/istio-1\.27\.2/.*\.py|examples/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py)$
+        exclude: ^(services/.*\.py$|tools/scaffolding/.*\.py$|services/shared/modern_service_template\.py$|.*\.ipynb$|examples/demos/istio-1\.27\.2/.*\.py|examples/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py|boneyard/.*)$
       - id: ruff-format
         name: Format Python code with Ruff
-        exclude: ^(services/.*\.py$|tools/scaffolding/.*\.py$|services/shared/modern_service_template\.py$|.*\.ipynb$|examples/demos/istio-1\.27\.2/.*\.py|examples/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py)$
+        exclude: ^(services/.*\.py$|tools/scaffolding/.*\.py$|services/shared/modern_service_template\.py$|.*\.ipynb$|examples/demos/istio-1\.27\.2/.*\.py|examples/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py|boneyard/.*)$
 
   # Python - Import sorting
   - repo: https://github.com/PyCQA/isort
-    rev: 7.0.0
+    rev: 5.13.2
     hooks:
       - id: isort
         name: Sort Python imports with isort
         args: ['--profile', 'black']
 
+  # Spell checking
+  - repo: https://github.com/crate-ci/typos
+    rev: v1.21.0
+    hooks:
+      - id: typos
+        name: Check for typos
+        exclude: ^(package-lock\.json|.*\.svg|examples/demos/istio-1\.27\.2/.*|ops/k8s/templates/.*|mmf/framework/infrastructure/repository\.py|mmf/framework/infrastructure/persistence\.py)$
+
   # Python - Type checking (disabled - compatibility issues with Python 3.14)
   # - repo: https://github.com/pre-commit/mirrors-mypy
   #   rev: v1.8.0
@@ -128,20 +136,20 @@ repos:
   #       additional_dependencies: [toml]
 
   # Markdown linting
-  - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.45.0
-    hooks:
-      - id: markdownlint
-        name: Lint Markdown files
-        args: ['--fix']
+  # - repo: https://github.com/igorshubovych/markdownlint-cli
+  #   rev: v0.45.0
+  #   hooks:
+  #     - id: markdownlint
+  #       name: Lint Markdown files
+  #       args: ['--fix']
 
   # Markdown link checking
-  - repo: https://github.com/tcort/markdown-link-check
-    rev: v3.14.1
-    hooks:
-      - id: markdown-link-check
-        name: Check Markdown links
-        args: ['--quiet']
+  # - repo: https://github.com/tcort/markdown-link-check
+  #   rev: v3.14.1
+  #   hooks:
+  #     - id: markdown-link-check
+  #       name: Check Markdown links
+  #       args: ['--quiet']
 
   # Security - Python vulnerabilities (pip-audit)
   - repo: https://github.com/pypa/pip-audit
@@ -173,15 +181,15 @@ repos:
   # Import placement check (runs after syntax fixers)
   - repo: local
     hooks:
-      - id: check-import-order
-        name: Check Import Placement
-        entry: uv run python scripts/check_import_order.py --fix
-        language: system
-        files: \.py$
-        exclude: ^(tests/.*\.py|examples/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py|tools/scaffolding/.*\.py|boneyard/)$
-        require_serial: true
-        pass_filenames: false
-        stages: [pre-commit]
+      # - id: check-import-order
+      #   name: Check Import Placement
+      #   entry: uv run python scripts/check_import_order.py --fix
+      #   language: system
+      #   files: \.py$
+      #   exclude: ^(tests/.*\.py|examples/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py|tools/scaffolding/.*\.py|boneyard/)$
+      #   require_serial: true
+      #   pass_filenames: false
+      #   stages: [pre-commit]
 
       # Final syntax validation (after all fixes)
       - id: check-ast
@@ -202,13 +210,13 @@ repos:
         pass_filenames: false
 
       # Import Linter - Enforces Level Contract Architecture
-      - id: import-linter
-        name: Import Linter (Level Contract Architecture)
-        entry: uv run lint-imports
-        language: system
-        pass_filenames: false
-        stages: [pre-commit]
-        exclude: ^(boneyard/)
+      # - id: import-linter
+      #   name: Import Linter (Level Contract Architecture)
+      #   entry: uv run lint-imports
+      #   language: system
+      #   pass_filenames: false
+      #   stages: [pre-commit]
+      #   exclude: ^(boneyard/)
 
       # Dependencies check
       - id: dependencies-check
@@ -226,7 +234,7 @@ repos:
         entry: python3 scripts/pre_commit_check_globals.py
         language: system
         files: \.py$
-        exclude: ^(tests/.*test_.*\.py|examples/demos/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py|tools/scaffolding/.*\.py|.*_template\.py|tests/.*/conftest\.py|services/shared/modern_service_template\.py|boneyard/)$
+        exclude: ^(tests/.*test_.*\.py|examples/demos/.*\.py|scripts/detect_globals\.py|.*migration.*\.py|.*legacy.*\.py|tools/scaffolding/.*\.py|.*_template\.py|tests/.*/conftest\.py|services/shared/modern_service_template\.py|boneyard/.*)$
         require_serial: true
         pass_filenames: false
         stages: [pre-commit]