EncryptedTouhid.AgentFramework.Templates 0.4.1

Complete Agent — Microsoft Agent Framework Template

A production-grade dotnet new template for building AI agents on Microsoft Agent Framework in .NET 10.

Generates a Clean-Architecture solution with everything a real deployment needs: dependency injection, validated configuration, versioned prompts, function tools, RAG, conversation memory, content moderation, cost budgeting, JWT + API-key auth, distributed rate limiting, OpenTelemetry, retries, health checks, structured JSON output, streaming, plus Docker and Kubernetes manifests.

• Package ID EncryptedTouhid.AgentFramework.Templates
• Short name et-complete-agent
• Target framework net10.0
• License MIT
• Contributing see CONTRIBUTING.md · Code of Conduct · Security policy · Changelog

Quick start

# 1. Install the template
dotnet new install EncryptedTouhid.AgentFramework.Templates

# 2. Generate a new solution
dotnet new et-complete-agent -n CompleteAgent
cd CompleteAgent

# 3. Set a provider + API key (Azure OpenAI shown below)
dotnet user-secrets set "Agent:AzureOpenAI:Endpoint" "https://<resource>.openai.azure.com" \
    --project src/EncryptedTouhid.CompleteAgent.Host
az login   # DefaultAzureCredential picks this up

# 4. Set an API key for your agent endpoint
dotnet user-secrets set "Authentication:ApiKey" "$(openssl rand -hex 16)" \
    --project src/EncryptedTouhid.CompleteAgent.Host

# 5. Run
dotnet run --project src/EncryptedTouhid.CompleteAgent.Host

# Call the agent
curl -X POST http://localhost:5000/agent/run \
  -H "X-API-Key: <your-key>" \
  -H "Content-Type: application/json" \
  -d '{"input": "Summarise Clean Architecture in two sentences."}'

What you get

CompleteAgent/
├── CompleteAgent.sln
├── Dockerfile                                Multi-stage, distroless, non-root
├── docker-compose.yml                        Agent + Redis + Qdrant for local dev
├── deploy/k8s/                               Namespace, Deployment, HPA, NetworkPolicy, ...
├── src/
│   ├── EncryptedTouhid.CompleteAgent.Domain/                    Contracts, value records (zero deps)
│   ├── EncryptedTouhid.CompleteAgent.Application/               Runner, tools, workflows, sanitiser, retry
│   ├── EncryptedTouhid.CompleteAgent.Infrastructure/            LLM client, EF Core, Qdrant, moderation
│   └── EncryptedTouhid.CompleteAgent.Host/                      Program.cs, endpoints, auth, telemetry
└── tests/
    └── EncryptedTouhid.CompleteAgent.Application.Tests/         xUnit + NSubstitute + FakeTimeProvider

All assemblies use the EncryptedTouhid.<ProjectName>.* namespace convention. The EncryptedTouhid. prefix is the org marker and stays fixed; the middle segment is whatever you pass to dotnet new -n.

Feature inventory

Agent core

Safety & policy

Platform & ops

Engineering quality

HTTP API surface

Request body for /agent/run and /agent/stream:

{ "input": "...", "conversationId": "optional-uuid" }

Configuration

Every knob lives in appsettings.json (or env vars prefixed COMPLETEAGENT_, or dotnet user-secrets). Defaults are dev-friendly so the template runs out of the box; production hardens by flipping switches.

Conversation memory backends

IConversationStore ships with 8 backings, selected via Persistence:ConversationStore. Every backend honours Conversation:TtlMinutes and Conversation:MaxMessagesPerConversation, has a matching IAuditLog implementation, exposes a provider-aware /readyz health check, and idempotently creates its schema / containers / indexes on startup.

Implementation details:

• Relational (Sqlite · SqlServer · AzureSql · Postgres · MySql) share EfCoreConversationStore + EfCoreAuditLog. RelationalSchemaBootstrapper calls EnsureCreatedAsync on startup. SQL Server, Azure SQL, PostgreSQL, and MySQL use their native datetimeoffset types; SQLite uses a value converter to ticks so range queries translate.
• Cosmos DB uses the native Microsoft.Azure.Cosmos SDK. Container is partitioned by /conversationId. CosmosSchemaBootstrapper creates database + containers (TTL set to Conversation:TtlMinutes × 60s).
• MongoDB uses the native MongoDB.Driver. MongoSchemaBootstrapper ensures a compound (conversationId, createdAt) index for fast load plus a TTL index on createdAt for auto-expiry.

Health checks are auto-registered per selected backend (RelationalDbHealthCheck / CosmosHealthCheck / MongoHealthCheck) and tagged ready, so /readyz fails fast when the configured store is unreachable.

To plug a custom backing (DynamoDB, Cassandra, FoundationDB, …) implement IConversationStore and register it instead of calling AddInfrastructure's default. The contract is three methods: LoadAsync, AppendAsync, ClearAsync.

Deploy

Local — docker-compose

export OPENAI_API_KEY=sk-...
export API_KEY=$(openssl rand -hex 16)
docker compose up --build

Wires agent → redis → qdrant → aspire-dashboard with persistent volumes for SQLite and Qdrant.

The bundled Aspire Dashboard is OTLP-native and shows resources, console output, structured logs, distributed traces (agent.run, LLM calls, tool calls), and per-token metrics — zero config. Swap to Grafana / Application Insights / Honeycomb for production by pointing COMPLETEAGENT_Telemetry__OtlpEndpoint at their gateway.

Kubernetes

docker build -t ghcr.io/<your-org>/completeagent:1.0.0 .
docker push ghcr.io/<your-org>/completeagent:1.0.0

# Edit deploy/k8s/secret.example.yaml with real values (or use External Secrets / Key Vault CSI).
kubectl apply -k deploy/k8s

Bundled manifests: namespace, configmap, secret.example, deployment (non-root, read-only FS, dropped capabilities, 3 probes), service, hpa (2–10 replicas on CPU+memory), networkpolicy (DNS, HTTPS, internal services only), kustomization.

Develop the template

# Pack
dotnet pack -c Release -o ./artifacts

# Install from local nupkg
dotnet new install ./artifacts/EncryptedTouhid.AgentFramework.Templates.0.1.0.nupkg

# Generate a sample and smoke-test
dotnet new et-complete-agent -n Demo -o /tmp/Demo
(cd /tmp/Demo && dotnet build && dotnet test)

# Uninstall when iterating
dotnet new uninstall EncryptedTouhid.AgentFramework.Templates

CI runs the same pack → install → generate → build → test flow on every push (.github/workflows/ci.yml).

Versions

Roadmap / not yet included

• WebApplicationFactory-based integration tests
• Conversation summarisation when history exceeds context budget
• Embedding cache
• Idempotency keys, circuit breaker
• Document chunker / ingestion pipeline
• Citations from RAG, hallucination scoring
• MCP server tools, multi-step planner
• Multimodal (image / audio)

See Roadmap discussion in repo issues to vote or contribute.

License

MIT — see LICENSE.