[Eduard van Valkenburg (eavanvalkenburg)]

Motivation and Context

Cosmos DB NoSQL hybrid search previously inserted the requested text-field name directly into the generated query. This change limits hybrid text search to fields declared by the collection definition and safely renders the resolved storage property.

Description

• Resolve additional_property_name against declared data-field logical and storage names.
• Reject unknown field names before executing a Cosmos query.
• Render the resolved property using Cosmos bracket notation with JSON string encoding.
• Add regression coverage for logical names, storage aliases, and injection-shaped unknown names.

Validation:

• uv run --frozen pytest tests\unit\connectors\memory\azure_cosmos_db\test_azure_cosmos_db_no_sql_collection.py -q — passed (30 tests).
• uv run --frozen ruff check semantic_kernel\connectors\azure_cosmos_db.py tests\unit\connectors\memory\azure_cosmos_db\test_azure_cosmos_db_no_sql_collection.py — passed.
• uv run --frozen ruff format --check semantic_kernel\connectors\azure_cosmos_db.py tests\unit\connectors\memory\azure_cosmos_db\test_azure_cosmos_db_no_sql_collection.py — passed.
• uv run --frozen mypy semantic_kernel\connectors\azure_cosmos_db.py --config-file mypy.ini — passed.
• uv run --frozen python -m compileall -q semantic_kernel\connectors\azure_cosmos_db.py tests\unit\connectors\memory\azure_cosmos_db\test_azure_cosmos_db_no_sql_collection.py — passed.
• uv run --project python --frozen pre-commit run --config python\.pre-commit-config.yaml --files python\semantic_kernel\connectors\azure_cosmos_db.py python\tests\unit\connectors\memory\azure_cosmos_db\test_azure_cosmos_db_no_sql_collection.py — passed (all applicable hooks).
• git diff --check — passed.

Contribution Checklist

• The code builds clean without any errors or warnings
• The PR follows the SK Contribution Guidelines and the pre-submission formatting script raises no violations
• All unit tests pass, and I have added new tests where possible
• I didn't break anyone 😄

[Copilot]

🟢 Approval recommended

The focused implementation matches the stated requirements, includes regression coverage, and has no identified blocking issues.

No open issues 🎉

What changed in this PR

This PR hardens Cosmos DB NoSQL hybrid search by validating text-field names against the collection definition and safely rendering the resolved storage property.

Changes:

• Accept declared logical field names and storage aliases.
• Reject unknown fields before query execution and use JSON-encoded bracket notation.
• Add regression tests for field resolution and injection-shaped unknown names.

File	Description
python/​tests/​unit/​connectors/​memory/​azure_cosmos_db/​test_azure_cosmos_db_no_sql_collection.py	Tests logical names, storage aliases, and rejection of unknown fields.
python/​semantic_kernel/​connectors/​azure_cosmos_db.py	Validates hybrid text fields and safely renders storage-property references.

_{Review effort: Balanced}

[github-actions]

Python Test Coverage Report •

File	Stmts	Miss	Cover	Missing
connectors
azure_cosmos_db.py	428	123	71%	183, 200, 206–208, 318, 320, 395, 399, 415–418, 420–423, 425–426, 439–442, 445–447, 453–454, 456, 463–465, 469–471, 494–496, 502–504, 510–511, 513, 518, 535, 610, 627, 630–631, 639, 649–653, 710, 713–714, 751, 753, 766–767, 771–773, 787, 791, 827, 839, 857, 869–870, 905–908, 916, 923, 930, 932, 935–944, 947–948, 950–957, 963, 977–980, 988, 992, 1016, 1044–1045, 1049–1054, 1146–1151
TOTAL	29164	5459	81%

Python Unit Test Overview

Tests	Skipped	Failures	Errors	Time
4521	22 💤	0 ❌	0 🔥	2m 17s ⏱️