@polymorphism-tech/morph-spec 9.6.0 → 9.7.0

package/framework/templates/code/sql/ai-agents/pgvector-embeddings-migration.sql.template

@@ -1,91 +1,91 @@
--- TEMPLATE: pgvector-embeddings-migration.sql
--- PURPOSE: Creates the kb_embeddings table for custom RAG — chunk storage with pgvector.
--- READS STANDARD: ai-agents-rag-custom-pgvector
--- PLACEHOLDERS:
---   {{SCHEMA}}  — target schema (default: public)
--- LAST-VERIFIED: 2026-05-19
---
--- PREREQUISITES:
---   - pgvector extension enabled in Neon (see infrastructure-neon-pgvector).
---   - NpgsqlDataSourceBuilder.UseVector() called in the project's DB setup.
---
--- DIMENSION NOTE:
---   embedding vector(1536) matches text-embedding-3-small (default 1536 dimensions).
---   If the project uses a different embedding model, adjust the dimension to match.
---   NEVER mix embedding models on a single column — vectors live in different spaces.
-
--- ============================================================
--- 1. EXTENSION
--- ============================================================
-
-CREATE EXTENSION IF NOT EXISTS vector;
-
--- ============================================================
--- 2. TABLE
--- ============================================================
-
-CREATE TABLE {{SCHEMA}}.kb_embeddings (
-    id          uuid         PRIMARY KEY DEFAULT gen_random_uuid(),
-    tenant_id   uuid         NOT NULL,
-    source      text         NOT NULL,   -- document identifier or source URL
-    chunk_index int          NOT NULL,   -- position of this chunk within the source document
-    content     text         NOT NULL,   -- chunk text returned to the agent as context
-    embedding   vector(1536) NOT NULL,   -- vector dimension must match embedding model
-    metadata    jsonb        NOT NULL DEFAULT '{}',
-    created_at  timestamptz  NOT NULL DEFAULT now()
-);
-
-COMMENT ON TABLE  {{SCHEMA}}.kb_embeddings               IS 'RAG knowledge base — chunk text and pgvector embeddings for semantic search.';
-COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.tenant_id     IS 'Tenant partition. Every query MUST filter on this column. Never query across tenants.';
-COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.source        IS 'Document identifier or URL. Used for citation and re-indexing detection.';
-COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.chunk_index   IS 'Zero-based position of this chunk within the source document.';
-COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.content       IS 'Chunk text returned to the agent. Plain text, no markup.';
-COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.embedding     IS 'Float vector. Dimension MUST match the embedding model declared in model-registry.json.';
-COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.metadata      IS 'Arbitrary JSON metadata (section headers, page numbers, doc type, etc.). Used for filtering.';
-
--- ============================================================
--- 3. INDEXES
--- ============================================================
-
--- HNSW index for cosine similarity — production-grade recall, no training data required.
--- vector_cosine_ops: use <=> operator (cosine distance, ascending = most similar first).
--- m=16, ef_construction=64 are pgvector defaults. Tune per infrastructure-neon-pgvector §HNSW Parameters.
-CREATE INDEX ix_kb_embeddings_hnsw
-    ON {{SCHEMA}}.kb_embeddings
-    USING hnsw (embedding vector_cosine_ops)
-    WITH (m = 16, ef_construction = 64);
-
--- Index for the mandatory tenant_id filter (applied in every search query).
-CREATE INDEX ix_kb_embeddings_tenant
-    ON {{SCHEMA}}.kb_embeddings (tenant_id);
-
--- Composite index for source-level operations (re-indexing, deletion by document).
-CREATE INDEX ix_kb_embeddings_source
-    ON {{SCHEMA}}.kb_embeddings (tenant_id, source);
-
--- ============================================================
--- 4. ROW-LEVEL SECURITY (multi-tenant)
--- ============================================================
-
--- RLS enforces tenant isolation at the database level as a second line of defence.
--- The application already filters on tenant_id in every query; RLS is the backstop.
---
--- See templates/code/sql/postgresql-rls-policy.sql for the policy pattern that
--- binds app.current_tenant_id (a session-level setting) to the RLS policy.
---
--- Uncomment and adapt once RLS is wired in the project:
---
--- ALTER TABLE {{SCHEMA}}.kb_embeddings ENABLE ROW LEVEL SECURITY;
---
--- CREATE POLICY kb_embeddings_tenant_isolation
---     ON {{SCHEMA}}.kb_embeddings
---     USING (tenant_id = current_setting('app.current_tenant_id')::uuid);
-
--- ============================================================
--- ROLLBACK
--- ============================================================
-
--- DROP INDEX IF EXISTS {{SCHEMA}}.ix_kb_embeddings_hnsw;
--- DROP INDEX IF EXISTS {{SCHEMA}}.ix_kb_embeddings_tenant;
--- DROP INDEX IF EXISTS {{SCHEMA}}.ix_kb_embeddings_source;
--- DROP TABLE IF EXISTS {{SCHEMA}}.kb_embeddings CASCADE;
+-- TEMPLATE: pgvector-embeddings-migration.sql
+-- PURPOSE: Creates the kb_embeddings table for custom RAG — chunk storage with pgvector.
+-- READS STANDARD: ai-agents-rag-custom-pgvector
+-- PLACEHOLDERS:
+--   {{SCHEMA}}  — target schema (default: public)
+-- LAST-VERIFIED: 2026-05-19
+--
+-- PREREQUISITES:
+--   - pgvector extension enabled in Neon (see infrastructure-neon-pgvector).
+--   - NpgsqlDataSourceBuilder.UseVector() called in the project's DB setup.
+--
+-- DIMENSION NOTE:
+--   embedding vector(1536) matches text-embedding-3-small (default 1536 dimensions).
+--   If the project uses a different embedding model, adjust the dimension to match.
+--   NEVER mix embedding models on a single column — vectors live in different spaces.
+
+-- ============================================================
+-- 1. EXTENSION
+-- ============================================================
+
+CREATE EXTENSION IF NOT EXISTS vector;
+
+-- ============================================================
+-- 2. TABLE
+-- ============================================================
+
+CREATE TABLE {{SCHEMA}}.kb_embeddings (
+    id          uuid         PRIMARY KEY DEFAULT gen_random_uuid(),
+    tenant_id   uuid         NOT NULL,
+    source      text         NOT NULL,   -- document identifier or source URL
+    chunk_index int          NOT NULL,   -- position of this chunk within the source document
+    content     text         NOT NULL,   -- chunk text returned to the agent as context
+    embedding   vector(1536) NOT NULL,   -- vector dimension must match embedding model
+    metadata    jsonb        NOT NULL DEFAULT '{}',
+    created_at  timestamptz  NOT NULL DEFAULT now()
+);
+
+COMMENT ON TABLE  {{SCHEMA}}.kb_embeddings               IS 'RAG knowledge base — chunk text and pgvector embeddings for semantic search.';
+COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.tenant_id     IS 'Tenant partition. Every query MUST filter on this column. Never query across tenants.';
+COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.source        IS 'Document identifier or URL. Used for citation and re-indexing detection.';
+COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.chunk_index   IS 'Zero-based position of this chunk within the source document.';
+COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.content       IS 'Chunk text returned to the agent. Plain text, no markup.';
+COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.embedding     IS 'Float vector. Dimension MUST match the embedding model declared in model-registry.json.';
+COMMENT ON COLUMN {{SCHEMA}}.kb_embeddings.metadata      IS 'Arbitrary JSON metadata (section headers, page numbers, doc type, etc.). Used for filtering.';
+
+-- ============================================================
+-- 3. INDEXES
+-- ============================================================
+
+-- HNSW index for cosine similarity — production-grade recall, no training data required.
+-- vector_cosine_ops: use <=> operator (cosine distance, ascending = most similar first).
+-- m=16, ef_construction=64 are pgvector defaults. Tune per infrastructure-neon-pgvector §HNSW Parameters.
+CREATE INDEX ix_kb_embeddings_hnsw
+    ON {{SCHEMA}}.kb_embeddings
+    USING hnsw (embedding vector_cosine_ops)
+    WITH (m = 16, ef_construction = 64);
+
+-- Index for the mandatory tenant_id filter (applied in every search query).
+CREATE INDEX ix_kb_embeddings_tenant
+    ON {{SCHEMA}}.kb_embeddings (tenant_id);
+
+-- Composite index for source-level operations (re-indexing, deletion by document).
+CREATE INDEX ix_kb_embeddings_source
+    ON {{SCHEMA}}.kb_embeddings (tenant_id, source);
+
+-- ============================================================
+-- 4. ROW-LEVEL SECURITY (multi-tenant)
+-- ============================================================
+
+-- RLS enforces tenant isolation at the database level as a second line of defence.
+-- The application already filters on tenant_id in every query; RLS is the backstop.
+--
+-- See templates/code/sql/postgresql-rls-policy.sql for the policy pattern that
+-- binds app.current_tenant_id (a session-level setting) to the RLS policy.
+--
+-- Uncomment and adapt once RLS is wired in the project:
+--
+-- ALTER TABLE {{SCHEMA}}.kb_embeddings ENABLE ROW LEVEL SECURITY;
+--
+-- CREATE POLICY kb_embeddings_tenant_isolation
+--     ON {{SCHEMA}}.kb_embeddings
+--     USING (tenant_id = current_setting('app.current_tenant_id')::uuid);
+
+-- ============================================================
+-- ROLLBACK
+-- ============================================================
+
+-- DROP INDEX IF EXISTS {{SCHEMA}}.ix_kb_embeddings_hnsw;
+-- DROP INDEX IF EXISTS {{SCHEMA}}.ix_kb_embeddings_tenant;
+-- DROP INDEX IF EXISTS {{SCHEMA}}.ix_kb_embeddings_source;
+-- DROP TABLE IF EXISTS {{SCHEMA}}.kb_embeddings CASCADE;

package/framework/templates/frontend/nextjs/client-component.tsx.hbs

@@ -1,26 +1,26 @@
-// features/{{kebabCase featureName}}/components/{{kebabCase featureName}}-list.tsx
-'use client';
-
-import { use{{pascalCase featureName}}s } from '@/features/{{kebabCase featureName}}/hooks/use-{{kebabCase featureName}}s';
-import { DataTable } from '@/components/data-table';
-import type { {{pascalCase featureName}} } from '@/features/{{kebabCase featureName}}/types/{{kebabCase featureName}}.types';
-import type { ColumnDef } from '@tanstack/react-table';
-
-const columns: ColumnDef<{{pascalCase featureName}}>[] = [
-  { accessorKey: 'id', header: 'ID' },
-  { accessorKey: 'name', header: 'Name' },
-];
-
-interface {{pascalCase featureName}}ListProps {
-  initialData?: {{pascalCase featureName}}[];
-}
-
-export function {{pascalCase featureName}}List({ initialData }: {{pascalCase featureName}}ListProps) {
-  const { data = initialData ?? [], isLoading } = use{{pascalCase featureName}}s();
-
-  if (isLoading) {
-    return <div className="flex items-center justify-center h-32">Loading...</div>;
-  }
-
-  return <DataTable columns={columns} data={data} />;
-}
+// features/{{kebabCase featureName}}/components/{{kebabCase featureName}}-list.tsx
+'use client';
+
+import { use{{pascalCase featureName}}s } from '@/features/{{kebabCase featureName}}/hooks/use-{{kebabCase featureName}}s';
+import { DataTable } from '@/components/data-table';
+import type { {{pascalCase featureName}} } from '@/features/{{kebabCase featureName}}/types/{{kebabCase featureName}}.types';
+import type { ColumnDef } from '@tanstack/react-table';
+
+const columns: ColumnDef<{{pascalCase featureName}}>[] = [
+  { accessorKey: 'id', header: 'ID' },
+  { accessorKey: 'name', header: 'Name' },
+];
+
+interface {{pascalCase featureName}}ListProps {
+  initialData?: {{pascalCase featureName}}[];
+}
+
+export function {{pascalCase featureName}}List({ initialData }: {{pascalCase featureName}}ListProps) {
+  const { data = initialData ?? [], isLoading } = use{{pascalCase featureName}}s();
+
+  if (isLoading) {
+    return <div className="flex items-center justify-center h-32">Loading...</div>;
+  }
+
+  return <DataTable columns={columns} data={data} />;
+}

package/framework/templates/frontend/nextjs/tsconfig.json.hbs

@@ -1,26 +1,26 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "lib": ["dom", "dom.iterable", "esnext"],
-    "allowJs": false,
-    "skipLibCheck": true,
-    "strict": true,
-    "noUncheckedIndexedAccess": true,
-    "noImplicitOverride": true,
-    "forceConsistentCasingInFileNames": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "module": "esnext",
-    "moduleResolution": "bundler",
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "jsx": "preserve",
-    "incremental": true,
-    "plugins": [{ "name": "next" }],
-    "paths": {
-      "@/*": ["./src/*"]
-    }
-  },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
-  "exclude": ["node_modules"]
-}
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": false,
+    "skipLibCheck": true,
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+    "forceConsistentCasingInFileNames": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "preserve",
+    "incremental": true,
+    "plugins": [{ "name": "next" }],
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
+  "exclude": ["node_modules"]
+}

package/framework/templates/infrastructure/docker/Dockerfile.template

@@ -1,58 +1,58 @@
-# Multi-stage Dockerfile for Next.js Production Build
-# Optimized for Next.js 15 with App Router
-
-FROM node:20-alpine AS base
-
-# Install dependencies only when needed
-FROM base AS deps
-RUN apk add --no-cache libc6-compat
-WORKDIR /app
-
-# Copy package files
-COPY package.json package-lock.json* ./
-RUN npm ci
-
-# Rebuild the source code only when needed
-FROM base AS builder
-WORKDIR /app
-COPY --from=deps /app/node_modules ./node_modules
-COPY . .
-
-# Set build-time environment variables
-ENV NEXT_TELEMETRY_DISABLED 1
-
-# Build Next.js application
-RUN npm run build
-
-# Production image, copy all the files and run next
-FROM base AS runner
-WORKDIR /app
-
-ENV NODE_ENV production
-ENV NEXT_TELEMETRY_DISABLED 1
-
-# Create nextjs user
-RUN addgroup --system --gid 1001 nodejs
-RUN adduser --system --uid 1001 nextjs
-
-# Copy built application
-COPY --from=builder /app/public ./public
-
-# Set the correct permission for prerender cache
-RUN mkdir .next
-RUN chown nextjs:nodejs .next
-
-# Automatically leverage output traces to reduce image size
-# https://nextjs.org/docs/advanced-features/output-file-tracing
-COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
-COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
-
-USER nextjs
-
-EXPOSE 3000
-
-ENV PORT 3000
-ENV HOSTNAME "0.0.0.0"
-
-# Run Next.js server
-CMD ["node", "server.js"]
+# Multi-stage Dockerfile for Next.js Production Build
+# Optimized for Next.js 15 with App Router
+
+FROM node:20-alpine AS base
+
+# Install dependencies only when needed
+FROM base AS deps
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+
+# Copy package files
+COPY package.json package-lock.json* ./
+RUN npm ci
+
+# Rebuild the source code only when needed
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Set build-time environment variables
+ENV NEXT_TELEMETRY_DISABLED 1
+
+# Build Next.js application
+RUN npm run build
+
+# Production image, copy all the files and run next
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV production
+ENV NEXT_TELEMETRY_DISABLED 1
+
+# Create nextjs user
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+# Copy built application
+COPY --from=builder /app/public ./public
+
+# Set the correct permission for prerender cache
+RUN mkdir .next
+RUN chown nextjs:nodejs .next
+
+# Automatically leverage output traces to reduce image size
+# https://nextjs.org/docs/advanced-features/output-file-tracing
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT 3000
+ENV HOSTNAME "0.0.0.0"
+
+# Run Next.js server
+CMD ["node", "server.js"]

package/framework/templates/infrastructure/docker/dockerfile-api.dockerfile

@@ -1,38 +1,38 @@
-# ============================================================
-# Dockerfile: .NET 10 API ({{titleCase FEATURE_NAME}})
-# Stack: Next.js + Neon + .NET API
-# Generated by MORPH Framework
-# ============================================================
-
-# Stage 1: Build
-FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
-WORKDIR /src
-
-# Copy project file and restore dependencies
-COPY *.csproj .
-RUN dotnet restore
-
-# Copy source code and publish
-COPY . .
-RUN dotnet publish -c Release -o /app/publish --no-restore
-
-# Stage 2: Runtime
-FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
-WORKDIR /app
-
-# Copy published output
-COPY --from=build /app/publish .
-
-# Configuration
-ENV ASPNETCORE_URLS=http://+:8080
-ENV ASPNETCORE_ENVIRONMENT=Production
-
-# Expose port
-EXPOSE 8080
-
-# Health check
-HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
-  CMD curl -f http://localhost:8080/health || exit 1
-
-# Entrypoint
-ENTRYPOINT ["dotnet", "Api.dll"]
+# ============================================================
+# Dockerfile: .NET 10 API ({{titleCase FEATURE_NAME}})
+# Stack: Next.js + Neon + .NET API
+# Generated by MORPH Framework
+# ============================================================
+
+# Stage 1: Build
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+WORKDIR /src
+
+# Copy project file and restore dependencies
+COPY *.csproj .
+RUN dotnet restore
+
+# Copy source code and publish
+COPY . .
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Stage 2: Runtime
+FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
+WORKDIR /app
+
+# Copy published output
+COPY --from=build /app/publish .
+
+# Configuration
+ENV ASPNETCORE_URLS=http://+:8080
+ENV ASPNETCORE_ENVIRONMENT=Production
+
+# Expose port
+EXPOSE 8080
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD curl -f http://localhost:8080/health || exit 1
+
+# Entrypoint
+ENTRYPOINT ["dotnet", "Api.dll"]

package/framework/templates/infrastructure/docker/dockerfile-web.dockerfile

@@ -1,48 +1,48 @@
-# ============================================================
-# Dockerfile: Next.js Frontend ({{titleCase FEATURE_NAME}})
-# Stack: Next.js + Neon
-# Generated by MORPH Framework
-# Requires: output: "standalone" in next.config.ts
-# ============================================================
-
-# Stage 1: Install dependencies
-FROM node:22-alpine AS deps
-WORKDIR /app
-COPY package.json package-lock.json ./
-RUN npm ci --omit=dev
-
-# Stage 2: Build application
-FROM node:22-alpine AS builder
-WORKDIR /app
-COPY --from=deps /app/node_modules ./node_modules
-COPY . .
-ENV NEXT_TELEMETRY_DISABLED=1
-RUN npm run build
-
-# Stage 3: Production runtime
-FROM node:22-alpine AS runner
-WORKDIR /app
-
-ENV NODE_ENV=production
-ENV NEXT_TELEMETRY_DISABLED=1
-
-# Create non-root user
-RUN addgroup --system --gid 1001 nodejs && \
-    adduser --system --uid 1001 nextjs
-
-# Copy build output
-COPY --from=builder /app/public ./public
-COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
-COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
-
-# Switch to non-root user
-USER nextjs
-
-# Expose port
-EXPOSE 3000
-
-ENV PORT=3000
-ENV HOSTNAME="0.0.0.0"
-
-# Start server
-CMD ["node", "server.js"]
+# ============================================================
+# Dockerfile: Next.js Frontend ({{titleCase FEATURE_NAME}})
+# Stack: Next.js + Neon
+# Generated by MORPH Framework
+# Requires: output: "standalone" in next.config.ts
+# ============================================================
+
+# Stage 1: Install dependencies
+FROM node:22-alpine AS deps
+WORKDIR /app
+COPY package.json package-lock.json ./
+RUN npm ci --omit=dev
+
+# Stage 2: Build application
+FROM node:22-alpine AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+ENV NEXT_TELEMETRY_DISABLED=1
+RUN npm run build
+
+# Stage 3: Production runtime
+FROM node:22-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+# Create non-root user
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+# Copy build output
+COPY --from=builder /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+# Switch to non-root user
+USER nextjs
+
+# Expose port
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+# Start server
+CMD ["node", "server.js"]