@polymorphism-tech/morph-spec 8.38.0 → 8.40.0

package/framework/templates/code/dotnet/ai-agents/VectorSearchTool.cs.template

@@ -1,107 +1,54 @@
-// TEMPLATE: VectorSearchTool.cs
-// PURPOSE: A typed MAF tool that retrieves relevant chunks from the pgvector knowledge base.
-// READS STANDARD: ai-agents-rag-custom-pgvector
-// PLACEHOLDERS:
-//   {{PROJECT_NAMESPACE}}  — root namespace of the project (e.g., MyProject)
-// LAST-VERIFIED: 2026-05-19
-//
-// SECURITY NOTE — tenant_id:
-//   tenant_id is resolved from the injected ITenantContext (or equivalent auth accessor),
-//   NEVER from a tool parameter visible to the LLM. A model-facing tenant parameter would
-//   allow prompt-injection to cross tenant boundaries.
-//
-// NPGSQL + PGVECTOR PARAMETER BINDING:
-//   This template uses NpgsqlDataSource (raw SQL) for the cosine-distance query.
-//   The project must call dataSourceBuilder.UseVector() before building the data source
-//   so Npgsql can map the vector type — see infrastructure-neon-pgvector.
-//
-//   // VERIFY: The exact Npgsql parameter binding for a pgvector type has been written
-//   // conservatively below using new Pgvector.Vector(float[]).
-//   // Confirmed pattern from neon-pgvector standard (Pgvector package):
-//   //   cmd.Parameters.AddWithValue("queryVec", new Pgvector.Vector(embedding.ToArray()));
-//   // If the project uses a different Npgsql/Pgvector version, verify the parameter API.
-//
-// REGISTRATION (in agent setup code):
-//   var tool = sp.GetRequiredService<VectorSearchTool>();
-//   var agent = modelRegistry.GetChatClient("text-default")
-//       .AsAIAgent(
-//           instructions: systemPrompt,
-//           tools: [AIFunctionFactory.Create(tool.SearchAsync)]);
-//
-// ALTERNATIVE — EF Core:
-//   If the project already wires pgvector through EF Core (UseVector(), HasMethod("hnsw")),
-//   replace the NpgsqlDataSource usage with db.Database.SqlQuery<string>() per
-//   infrastructure-neon-pgvector. The tool method signature stays identical.
-
-using System.ComponentModel;
-using Npgsql;
-using Pgvector;
-
-namespace {{PROJECT_NAMESPACE}}.AI;
-
-/// <summary>
-/// MAF tool: searches the knowledge base for chunks semantically similar to a query.
-/// Registered on an agent via <c>AIFunctionFactory.Create(tool.SearchAsync)</c>.
-/// The agent calls this autonomously when it needs grounding context.
-/// </summary>
-public sealed class VectorSearchTool(
-    EmbeddingService embeddingService,
-    NpgsqlDataSource dataSource,
-    ITenantContext tenantContext)   // Resolved from DI — scoped to the authenticated request.
-                                    // Replace with Guid currentTenantId if a simpler accessor is preferred.
-{
-    private const int DefaultTopK = 5;
-
-    /// <summary>
-    /// Searches the knowledge base for context relevant to a question.
-    /// </summary>
-    /// <param name="query">The natural-language search query.</param>
-    /// <param name="ct">Cancellation token.</param>
-    /// <returns>
-    /// Concatenated text of the top matching chunks, separated by double newlines.
-    /// Returns an empty string if no results are found.
-    /// </returns>
-    [Description("Searches the knowledge base for context relevant to a question")]
-    public async Task<string> SearchAsync(
-        [Description("the natural-language search query")] string query,
-        CancellationToken ct = default)
-    {
-        // 1. Embed the query at search time.
-        ReadOnlyMemory<float> queryVector = await embeddingService.EmbedAsync(query, ct);
-
-        // 2. Resolve tenant from auth context — never from a model-supplied parameter.
-        Guid tenantId = tenantContext.CurrentTenantId;
-
-        // 3. Run parameterized cosine-distance query.
-        //    ORDER BY embedding <=> @queryVec sorts ascending by distance (most similar first).
-        const string sql = """
-            SELECT content
-            FROM   kb_embeddings
-            WHERE  tenant_id = @tenant
-            ORDER  BY embedding <=> @queryVec
-            LIMIT  @topK
-            """;
-
-        var chunks = new List<string>(DefaultTopK);
-
-        await using var conn = await dataSource.OpenConnectionAsync(ct);
-        await using var cmd = new NpgsqlCommand(sql, conn);
-
-        cmd.Parameters.AddWithValue("tenant", tenantId);
-
-        // VERIFY: Pgvector.Vector wraps a float[] for Npgsql parameter binding.
-        // The project must have called dataSourceBuilder.UseVector() on NpgsqlDataSourceBuilder.
-        // NuGet: Pgvector (matches the Pgvector.EntityFrameworkCore used in neon-pgvector.md).
-        cmd.Parameters.AddWithValue("queryVec", new Vector(queryVector.ToArray()));
-
-        cmd.Parameters.AddWithValue("topK", DefaultTopK);
-
-        await using var reader = await cmd.ExecuteReaderAsync(ct);
-        while (await reader.ReadAsync(ct))
-        {
-            chunks.Add(reader.GetString(0));
-        }
-
-        return string.Join("\n\n", chunks);
-    }
-}
+// READS STANDARD: ai-agents-rag-custom-pgvector
+
+using System.ComponentModel;
+using Npgsql;
+using Pgvector;
+
+namespace {{PROJECT_NAMESPACE}}.AI;
+
+public sealed class VectorSearchTool(
+    EmbeddingService embeddingService,
+    NpgsqlDataSource dataSource,
+    ITenantContext tenantContext)
+{
+    private const int DefaultTopK = 5;
+
+    [Description("Searches the knowledge base for context relevant to a question")]
+    public async Task<string> SearchAsync(
+        [Description("the natural-language search query")] string query,
+        CancellationToken ct = default)
+    {
+        ReadOnlyMemory<float> queryVector = await embeddingService.EmbedAsync(query, ct);
+
+        // Tenant comes from auth, never a tool parameter: the model could be prompt-injected into another tenant.
+        Guid tenantId = tenantContext.CurrentTenantId;
+
+        const string sql = """
+            SELECT content
+            FROM   kb_embeddings
+            WHERE  tenant_id = @tenant
+            ORDER  BY embedding <=> @queryVec
+            LIMIT  @topK
+            """;
+
+        var chunks = new List<string>(DefaultTopK);
+
+        await using var conn = await dataSource.OpenConnectionAsync(ct);
+        await using var cmd = new NpgsqlCommand(sql, conn);
+
+        cmd.Parameters.AddWithValue("tenant", tenantId);
+
+        // VERIFY: binding Pgvector.Vector needs dataSourceBuilder.UseVector(); confirm against the project's Npgsql/Pgvector versions.
+        cmd.Parameters.AddWithValue("queryVec", new Vector(queryVector.ToArray()));
+
+        cmd.Parameters.AddWithValue("topK", DefaultTopK);
+
+        await using var reader = await cmd.ExecuteReaderAsync(ct);
+        while (await reader.ReadAsync(ct))
+        {
+            chunks.Add(reader.GetString(0));
+        }
+
+        return string.Join("\n\n", chunks);
+    }
+}

package/framework/templates/code/dotnet/ai-agents/model-registry.json.template

@@ -1,58 +1,53 @@
-// TEMPLATE: model-registry.json (place in project at config/model-registry.json)
-// PURPOSE: Single source of truth for model selection. Agents reference aliases, not models.
-// READS STANDARD: ai-agents-providers-model-registry
-// PROVIDERS: openai + ollama work out-of-the-box with the ModelRegistry template.
-//            For google / anthropic, add a provider branch first (see the standard).
-// PLACEHOLDERS:
-//   {{PROJECT_DEFAULT_ALIAS}} — alias used when none specified (default: "text-default")
-// LAST-VERIFIED: 2026-05-19
-{
-  "$schema": "./model-registry.schema.json",
-  "version": "1.0",
-  "defaultAlias": "{{PROJECT_DEFAULT_ALIAS}}",
-  "aliases": {
-    "text-default": {
-      "provider": "openai",
-      "model": "gpt-4o-mini",
-      "options": { "temperature": 0.7 }
-    },
-    "text-heavy": {
-      "provider": "openai",
-      "model": "gpt-4o",
-      "options": { "temperature": 0.5 }
-    },
-    "reasoning": {
-      "provider": "openai",
-      "model": "o3-mini",
-      "options": { "reasoningEffort": "medium" }
-    },
-    "long-form": {
-      "provider": "anthropic",
-      "model": "claude-sonnet-4-6",
-      "options": {}
-    },
-    "vision": {
-      "provider": "google",
-      "model": "gemini-2.5-flash",
-      "options": {}
-    },
-    "embeddings": {
-      "provider": "openai",
-      "model": "text-embedding-3-small",
-      "options": { "dimensions": 1536 }
-    },
-    "local-dev": {
-      "provider": "ollama",
-      "model": "llama3.2:3b",
-      "options": { "endpoint": "http://localhost:11434/v1" }
-    },
-    "transcription": {
-      "provider": "openai",
-      "model": "whisper-1",
-      "options": {}
-    }
-  },
-  "fallback": {
-    "text-default": "ollama/llama3.2:3b"
-  }
-}
+// READS STANDARD: ai-agents-providers-model-registry
+// Goes in config/model-registry.json. ModelRegistry only builds openai and ollama:
+// the anthropic and google aliases throw until a provider branch is added there.
+{
+  "$schema": "./model-registry.schema.json",
+  "version": "1.0",
+  "defaultAlias": "{{PROJECT_DEFAULT_ALIAS}}",
+  "aliases": {
+    "text-default": {
+      "provider": "openai",
+      "model": "gpt-4o-mini",
+      "options": { "temperature": 0.7 }
+    },
+    "text-heavy": {
+      "provider": "openai",
+      "model": "gpt-4o",
+      "options": { "temperature": 0.5 }
+    },
+    "reasoning": {
+      "provider": "openai",
+      "model": "o3-mini",
+      "options": { "reasoningEffort": "medium" }
+    },
+    "long-form": {
+      "provider": "anthropic",
+      "model": "claude-sonnet-4-6",
+      "options": {}
+    },
+    "vision": {
+      "provider": "google",
+      "model": "gemini-2.5-flash",
+      "options": {}
+    },
+    "embeddings": {
+      "provider": "openai",
+      "model": "text-embedding-3-small",
+      "options": { "dimensions": 1536 }
+    },
+    "local-dev": {
+      "provider": "ollama",
+      "model": "llama3.2:3b",
+      "options": { "endpoint": "http://localhost:11434/v1" }
+    },
+    "transcription": {
+      "provider": "openai",
+      "model": "whisper-1",
+      "options": {}
+    }
+  },
+  "fallback": {
+    "text-default": "ollama/llama3.2:3b"
+  }
+}