@ivannxbt/ai-config 0.1.0

package/.agents/skills/microsoft-foundry/models/deploy-model/preset/references/workflow.md

@@ -0,0 +1,172 @@
+# Preset Deployment Workflow — Step-by-Step
+
+Condensed implementation reference for preset (optimal region) model deployment. See [SKILL.md](../SKILL.md) for overview.
+
+---
+
+## Phase 1: Verify Authentication
+
+```bash
+az account show --query "{Subscription:name, User:user.name}" -o table
+```
+
+If not logged in: `az login`
+
+Switch subscription:
+
+```bash
+az account list --query "[].[name,id,state]" -o table
+az account set --subscription <subscription-id>
+```
+
+---
+
+## Phase 2: Get Current Project
+
+Read `PROJECT_RESOURCE_ID` from env or prompt user. Format:
+`/subscriptions/{sub-id}/resourceGroups/{rg}/providers/Microsoft.CognitiveServices/accounts/{account}/projects/{project}`
+
+Parse ARM ID components:
+
+```bash
+SUBSCRIPTION_ID=$(echo "$PROJECT_RESOURCE_ID" | sed -n 's|.*/subscriptions/\([^/]*\).*|\1|p')
+RESOURCE_GROUP=$(echo "$PROJECT_RESOURCE_ID" | sed -n 's|.*/resourceGroups/\([^/]*\).*|\1|p')
+ACCOUNT_NAME=$(echo "$PROJECT_RESOURCE_ID" | sed -n 's|.*/accounts/\([^/]*\)/projects.*|\1|p')
+PROJECT_NAME=$(echo "$PROJECT_RESOURCE_ID" | sed -n 's|.*/projects/\([^/?]*\).*|\1|p')
+```
+
+Verify project exists and get region:
+
+```bash
+az account set --subscription "$SUBSCRIPTION_ID"
+
+PROJECT_REGION=$(az cognitiveservices account show \
+  --name "$PROJECT_NAME" \
+  --resource-group "$RESOURCE_GROUP" \
+  --query location -o tsv)
+```
+
+---
+
+## Phase 3: Get Model Name
+
+If model not provided as parameter, list available models:
+
+```bash
+az cognitiveservices account list-models \
+  --name "$PROJECT_NAME" \
+  --resource-group "$RESOURCE_GROUP" \
+  --query "[].name" -o tsv | sort -u
+```
+
+Get versions for selected model:
+
+```bash
+az cognitiveservices account list-models \
+  --name "$PROJECT_NAME" \
+  --resource-group "$RESOURCE_GROUP" \
+  --query "[?name=='$MODEL_NAME'].{Name:name, Version:version, Format:format}" \
+  -o table
+```
+
+---
+
+## Phase 4: Check Current Region Capacity
+
+```bash
+CAPACITY_JSON=$(az rest --method GET \
+  --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION")
+
+CURRENT_CAPACITY=$(echo "$CAPACITY_JSON" | jq -r '.value[] | select(.properties.skuName=="GlobalStandard") | .properties.availableCapacity')
+```
+
+If `CURRENT_CAPACITY > 0` → skip to Phase 7. Otherwise continue to Phase 5.
+
+---
+
+## Phase 5: Query Multi-Region Capacity
+
+```bash
+ALL_REGIONS_JSON=$(az rest --method GET \
+  --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION")
+```
+
+Extract available regions (capacity > 0):
+
+```bash
+AVAILABLE_REGIONS=$(echo "$ALL_REGIONS_JSON" | jq -r '.value[] | select(.properties.skuName=="GlobalStandard" and .properties.availableCapacity > 0) | "\(.location)|\(.properties.availableCapacity)"')
+```
+
+Extract unavailable regions:
+
+```bash
+UNAVAILABLE_REGIONS=$(echo "$ALL_REGIONS_JSON" | jq -r '.value[] | select(.properties.skuName=="GlobalStandard" and (.properties.availableCapacity == 0 or .properties.availableCapacity == null)) | "\(.location)|0"')
+```
+
+If no regions have capacity, defer to the [quota skill](../../../../quota/quota.md) for increase requests. Suggest checking existing deployments or trying alternative models like `gpt-4o-mini`.
+
+---
+
+## Phase 6: Select Region and Project
+
+Present available regions to user. Store selection as `SELECTED_REGION`.
+
+Find projects in selected region:
+
+```bash
+PROJECTS_IN_REGION=$(az cognitiveservices account list \
+  --query "[?kind=='AIProject' && location=='$SELECTED_REGION'].{Name:name, ResourceGroup:resourceGroup}" \
+  --output json)
+```
+
+**If no projects exist — create new:**
+
+```bash
+az cognitiveservices account create \
+  --name "$HUB_NAME" \
+  --resource-group "$RESOURCE_GROUP" \
+  --location "$SELECTED_REGION" \
+  --kind "AIServices" \
+  --sku "S0" --yes
+
+az cognitiveservices account create \
+  --name "$NEW_PROJECT_NAME" \
+  --resource-group "$RESOURCE_GROUP" \
+  --location "$SELECTED_REGION" \
+  --kind "AIProject" \
+  --sku "S0" --yes
+```
+
+---
+
+## Phase 7: Deploy Model
+
+Generate unique deployment name using `scripts/generate_deployment_name.sh`:
+
+```bash
+DEPLOYMENT_NAME=$(bash scripts/generate_deployment_name.sh "$ACCOUNT_NAME" "$RESOURCE_GROUP" "$MODEL_NAME")
+```
+
+Calculate capacity — 50% of available, minimum 50 TPM:
+
+```bash
+SELECTED_CAPACITY=$(echo "$ALL_REGIONS_JSON" | jq -r ".value[] | select(.location==\"$SELECTED_REGION\" and .properties.skuName==\"GlobalStandard\") | .properties.availableCapacity")
+DEPLOY_CAPACITY=$(( SELECTED_CAPACITY / 2 ))
+[ "$DEPLOY_CAPACITY" -lt 50 ] && DEPLOY_CAPACITY=50
+```
+
+Create deployment:
+
+```bash
+az cognitiveservices account deployment create \
+  --name "$ACCOUNT_NAME" \
+  --resource-group "$RESOURCE_GROUP" \
+  --deployment-name "$DEPLOYMENT_NAME" \
+  --model-name "$MODEL_NAME" \
+  --model-version "$MODEL_VERSION" \
+  --model-format "OpenAI" \
+  --sku-name "GlobalStandard" \
+  --sku-capacity "$DEPLOY_CAPACITY"
+```
+
+Monitor with `az cognitiveservices account deployment show ... --query "properties.provisioningState"` until `Succeeded` or `Failed`.

package/.agents/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.ps1

@@ -0,0 +1,73 @@
+# Generate Azure AI Foundry portal URL for a model deployment
+# This script creates a direct clickable link to view a deployment in the Azure AI Foundry portal
+#
+# NOTE: The encoding scheme for the subscription ID portion is proprietary to Azure AI Foundry.
+# This script uses a GUID byte encoding approach, but may need adjustment based on the actual encoding used.
+
+param(
+    [Parameter(Mandatory=$true)]
+    [string]$SubscriptionId,
+    
+    [Parameter(Mandatory=$true)]
+    [string]$ResourceGroup,
+    
+    [Parameter(Mandatory=$true)]
+    [string]$FoundryResource,
+    
+    [Parameter(Mandatory=$true)]
+    [string]$ProjectName,
+    
+    [Parameter(Mandatory=$true)]
+    [string]$DeploymentName
+)
+
+function Get-SubscriptionIdEncoded {
+    param([string]$SubscriptionId)
+    
+    # Parse GUID and convert to bytes in string order (big-endian)
+    # Not using ToByteArray() because it uses little-endian format
+    $guidString = $SubscriptionId.Replace('-', '')
+    $bytes = New-Object byte[] 16
+    for ($i = 0; $i -lt 16; $i++) {
+        $bytes[$i] = [Convert]::ToByte($guidString.Substring($i * 2, 2), 16)
+    }
+    
+    # Encode as base64url
+    $base64 = [Convert]::ToBase64String($bytes)
+    $urlSafe = $base64.Replace('+', '-').Replace('/', '_').TrimEnd('=')
+    return $urlSafe
+}
+
+function Get-FoundryDeploymentUrl {
+    param(
+        [string]$SubscriptionId,
+        [string]$ResourceGroup,
+        [string]$FoundryResource,
+        [string]$ProjectName,
+        [string]$DeploymentName
+    )
+    
+    # Encode subscription ID
+    $encodedSubId = Get-SubscriptionIdEncoded -SubscriptionId $SubscriptionId
+    
+    # Build the encoded resource path
+    # Format: {encoded-sub-id},{resource-group},,{foundry-resource},{project-name}
+    # Note: Two commas between resource-group and foundry-resource
+    $encodedPath = "$encodedSubId,$ResourceGroup,,$FoundryResource,$ProjectName"
+    
+    # Build the full URL
+    $baseUrl = "https://ai.azure.com/nextgen/r/"
+    $deploymentPath = "/build/models/deployments/$DeploymentName/details"
+    
+    return "$baseUrl$encodedPath$deploymentPath"
+}
+
+# Generate and output the URL
+$url = Get-FoundryDeploymentUrl `
+    -SubscriptionId $SubscriptionId `
+    -ResourceGroup $ResourceGroup `
+    -FoundryResource $FoundryResource `
+    -ProjectName $ProjectName `
+    -DeploymentName $DeploymentName
+
+Write-Output $url

package/.agents/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.sh

@@ -0,0 +1,90 @@
+#!/bin/bash
+# Generate Azure AI Foundry portal URL for a model deployment
+# This script creates a direct clickable link to view a deployment in the Azure AI Foundry portal
+
+set -e
+
+# Function to display usage
+usage() {
+    cat << EOF
+Usage: $0 --subscription SUBSCRIPTION_ID --resource-group RESOURCE_GROUP \\
+          --foundry-resource FOUNDRY_RESOURCE --project PROJECT_NAME \\
+          --deployment DEPLOYMENT_NAME
+
+Generate Azure AI Foundry deployment URL
+
+Required arguments:
+  --subscription        Azure subscription ID (GUID)
+  --resource-group      Resource group name
+  --foundry-resource    Foundry resource (account) name
+  --project             Project name
+  --deployment          Deployment name
+
+Example:
+  $0 --subscription d5320f9a-73da-4a74-b639-83efebc7bb6f \\
+     --resource-group bani-host \\
+     --foundry-resource banide-host-resource \\
+     --project banide-host \\
+     --deployment text-embedding-ada-002
+EOF
+    exit 1
+}
+
+# Parse command line arguments
+while [[ $# -gt 0 ]]; do
+    case $1 in
+        --subscription)
+            SUBSCRIPTION_ID="$2"
+            shift 2
+            ;;
+        --resource-group)
+            RESOURCE_GROUP="$2"
+            shift 2
+            ;;
+        --foundry-resource)
+            FOUNDRY_RESOURCE="$2"
+            shift 2
+            ;;
+        --project)
+            PROJECT_NAME="$2"
+            shift 2
+            ;;
+        --deployment)
+            DEPLOYMENT_NAME="$2"
+            shift 2
+            ;;
+        -h|--help)
+            usage
+            ;;
+        *)
+            echo "Unknown option: $1"
+            usage
+            ;;
+    esac
+done
+
+# Validate required arguments
+if [ -z "$SUBSCRIPTION_ID" ] || [ -z "$RESOURCE_GROUP" ] || [ -z "$FOUNDRY_RESOURCE" ] || \
+   [ -z "$PROJECT_NAME" ] || [ -z "$DEPLOYMENT_NAME" ]; then
+    echo "Error: Missing required arguments"
+    usage
+fi
+
+# Convert subscription GUID to bytes (big-endian/string order) and encode as base64url
+# Remove hyphens from GUID
+GUID_HEX=$(echo "$SUBSCRIPTION_ID" | tr -d '-')
+
+# Convert hex string to bytes and base64 encode
+# Using xxd to convert hex to binary, then base64 encode
+ENCODED_SUB=$(echo "$GUID_HEX" | xxd -r -p | base64 | tr '+' '-' | tr '/' '_' | tr -d '=')
+
+# Build the encoded resource path
+# Format: {encoded-sub-id},{resource-group},,{foundry-resource},{project-name}
+# Note: Two commas between resource-group and foundry-resource
+ENCODED_PATH="${ENCODED_SUB},${RESOURCE_GROUP},,${FOUNDRY_RESOURCE},${PROJECT_NAME}"
+
+# Build the full URL
+BASE_URL="https://ai.azure.com/nextgen/r/"
+DEPLOYMENT_PATH="/build/models/deployments/${DEPLOYMENT_NAME}/details"
+
+echo "${BASE_URL}${ENCODED_PATH}${DEPLOYMENT_PATH}"

package/.agents/skills/microsoft-foundry/project/connections.md

@@ -0,0 +1,58 @@
+# Foundry Project Connections
+
+Connections authenticate and link external resources to a Foundry project. Many agent tools (Azure AI Search, Bing Grounding, MCP) require a project connection before use.
+
+## Managing Connections via MCP
+
+Use the Foundry MCP server for all connection operations. The MCP tools handle authentication, validation, and project scoping automatically.
+
+| Operation | MCP Tool | Description |
+|-----------|----------|-------------|
+| List all connections | `foundry_connections_list` | Lists all connections in the current project |
+| Get connection details | `foundry_connections_get` | Retrieves a specific connection by name, including its ID |
+| Create a connection | `foundry_connections_create` | Creates a new connection to an external resource |
+| Delete a connection | `foundry_connections_delete` | Removes a connection from the project |
+
+> 💡 **Tip:** The `connection_id` returned by `foundry_connections_get` is the value you pass as `project_connection_id` when configuring agent tools.
+
+## Create Connection via Portal
+
+1. Open [Microsoft Foundry portal](https://ai.azure.com)
+2. Navigate to **Operate** → **Admin** → select your project
+3. Select **Add connection** → choose service type
+4. Browse for resource, select auth method, click **Add connection**
+
+## Connection ID Format
+
+For REST and TypeScript samples, the full connection ID format is:
+
+```
+/subscriptions/{subId}/resourceGroups/{rg}/providers/Microsoft.CognitiveServices/accounts/{account}/projects/{project}/connections/{connectionName}
+```
+
+Python and C# SDKs resolve this automatically from the connection name.
+
+## Common Connection Types
+
+| Type | Resource | Used By |
+|------|----------|---------|
+| `azure_ai_search` | Azure AI Search | AI Search tool |
+| `bing` | Grounding with Bing Search | Bing grounding tool |
+| `bing_custom_search` | Grounding with Bing Custom Search | Bing Custom Search tool |
+| `api_key` | Any API-key resource | MCP servers, custom tools |
+| `azure_openai` | Azure OpenAI | Model access |
+
+## RBAC for Connection Management
+
+| Role | Scope | Permission |
+|------|-------|------------|
+| **Azure AI Project Manager** | Project | Create/manage project connections |
+| **Contributor** or **Owner** | Subscription/RG | Create Bing/Search resources, get keys |
+
+## Troubleshooting
+
+| Error | Cause | Fix |
+|-------|-------|-----|
+| `Connection not found` | Name mismatch or wrong project | Use `foundry_connections_list` to find correct name |
+| `Unauthorized` creating connection | Missing Azure AI Project Manager role | Assign role on the Foundry project |
+| `Invalid connection ID format` | Using name instead of full resource ID | Use `foundry_connections_get` to resolve the full ID |

package/.agents/skills/microsoft-foundry/project/create/create-foundry-project.md

@@ -0,0 +1,132 @@
+---
+name: foundry-create-project
+description: |
+  Create a new Azure AI Foundry project using Azure Developer CLI (azd) to provision infrastructure for hosting AI agents and models.
+  USE FOR: create Foundry project, new AI Foundry project, set up Foundry, azd init Foundry, provision Foundry infrastructure, onboard to Foundry, create Azure AI project, set up AI project.
+  DO NOT USE FOR: deploying agents to existing projects (use agent/deploy), creating agent code (use agent/create), deploying AI models from catalog (use microsoft-foundry main skill), Azure Functions (use azure-functions).
+allowed-tools: Read, Write, Bash, AskUserQuestion
+---
+
+# Create Azure AI Foundry Project
+
+Create a new Azure AI Foundry project using azd. Provisions: Foundry account, project, Application Insights, managed identity, and RBAC permissions. Optionally enables hosted agents (capability host + Container Registry).
+
+## Prerequisites
+
+Run checks in order. STOP on any failure and resolve before proceeding.
+
+**1. Azure CLI** — `az version` → expects version output. If missing: https://aka.ms/installazurecli
+
+**2. Azure login & subscription:**
+
+```bash
+az account show --query "{Name:name, SubscriptionId:id, State:state}" -o table
+```
+
+If not logged in, run `az login`. If no active subscription: https://azure.microsoft.com/free/ — STOP.
+
+If multiple subscriptions, ask which to use, then `az account set --subscription "<id>"`.
+
+**3. Role permissions:**
+
+```bash
+az role assignment list --assignee "$(az ad signed-in-user show --query id -o tsv)" --query "[?contains(roleDefinitionName, 'Owner') || contains(roleDefinitionName, 'Contributor') || contains(roleDefinitionName, 'Azure AI')].{Role:roleDefinitionName, Scope:scope}" -o table
+```
+
+Requires Owner, Contributor, or Azure AI Owner. If insufficient — STOP, request elevated access from admin.
+
+**4. Azure Developer CLI** — `azd version`. If missing: https://aka.ms/azure-dev/install
+
+## Workflow
+
+### Step 1: Verify azd login
+
+```bash
+azd auth login --check-status
+```
+
+If not logged in, run `azd auth login` and complete browser auth.
+
+### Step 2: Ask User for Project Details
+
+Use AskUserQuestion for:
+
+1. **Project name** — used as azd environment name and resource group (`rg-<name>`). Must contain only alphanumeric characters and hyphens. Examples: `my-ai-project`, `dev-agents`
+2. **Azure location** (optional) — defaults to North Central US (required for hosted agents preview)
+3. **Enable hosted agents?** (yes/no) — provisions a capability host and Container Registry for deploying hosted agents. Defaults to no.
+
+### Step 3: Create Directory and Initialize
+
+```bash
+mkdir "<project-name>" && cd "<project-name>"
+azd init -t https://github.com/Azure-Samples/azd-ai-starter-basic -e <project-name> --no-prompt
+```
+
+- `-t` — Azure AI starter template (Foundry infrastructure)
+- `-e` — environment name
+- `--no-prompt` — non-interactive, use defaults
+- **IMPORTANT:** `azd init` requires an empty directory
+
+If user specified a non-default location:
+
+```bash
+azd config set defaults.location <location>
+```
+
+If user chose to enable hosted agents:
+
+```bash
+azd env set ENABLE_HOSTED_AGENTS true
+```
+
+This provisions a capability host (`capabilityHosts/agents`) on the Foundry account and auto-adds an Azure Container Registry for hosted agent deployments.
+
+### Step 4: Provision Infrastructure
+
+```bash
+azd provision --no-prompt
+```
+
+Takes 5–10 minutes. Creates resource group, Foundry account/project, Application Insights, managed identity, and RBAC roles. If hosted agents enabled, also creates Container Registry and capability host.
+
+### Step 5: Retrieve Project Details
+
+```bash
+azd env get-values
+```
+
+Capture `AZURE_AI_PROJECT_ID`, `AZURE_AI_PROJECT_ENDPOINT`, and `AZURE_RESOURCE_GROUP`. Direct user to verify at https://ai.azure.com.
+
+### Step 6: Next Steps
+
+- Deploy an agent → `agent/deploy` skill
+- Browse models → `foundry_models_list` MCP tool
+- Manage project → https://ai.azure.com
+
+## Best Practices
+
+- Use North Central US for hosted agents (preview requirement)
+- Name must be alphanumeric + hyphens only — no spaces, underscores, or special characters
+- Delete unused projects with `azd down` to avoid ongoing costs
+- `azd down` deletes ALL resources — Foundry account, agents, models, Container Registry, and Application Insights data
+- `azd provision` is safe to re-run on failure
+
+## Troubleshooting
+
+| Problem | Solution |
+|---------|----------|
+| `azd: command not found` | Install from https://aka.ms/azure-dev/install |
+| `ERROR: Failed to authenticate` | Run `azd auth login`; verify subscription with `az account list` |
+| `environment name '' is invalid` | Name must be alphanumeric + hyphens only |
+| `ERROR: Insufficient permissions` | Request Contributor or Azure AI Owner role from admin |
+| Region not supported for hosted agents | Use `azd config set defaults.location northcentralus` |
+| Provisioning timeout | Check region availability, verify connectivity, retry `azd provision` |
+
+## Related Skills
+
+- **agent/deploy** — Deploy agents to the created project
+- **agent/create** — Create a new agent for deployment
+
+## Resources
+
+- [Azure Developer CLI](https://aka.ms/azure-dev/install) · [AI Foundry Portal](https://ai.azure.com) · [Foundry Docs](https://learn.microsoft.com/azure/ai-foundry/) · [azd-ai-starter-basic template](https://github.com/Azure-Samples/azd-ai-starter-basic)