jumpstart-mode 1.1.13 → 1.1.14

package/.github/skills/azure-architecture-autopilot/README.md

@@ -0,0 +1,188 @@
+<h1 align="center">Azure Architecture Autopilot</h1>
+
+<p align="center">
+  <strong>Design → Diagram → Bicep → Deployment - all from natural language</strong>
+</p>
+
+<p align="center">
+  <img src="https://img.shields.io/badge/GitHub_Copilot-Skill-8957e5?logo=github" alt="Copilot Skill">
+  <img src="https://img.shields.io/badge/Azure-All_Services-0078D4?logo=microsoftazure&logoColor=white" alt="Azure">
+  <img src="https://img.shields.io/badge/Bicep-IaC-ff6f00" alt="Bicep">
+  <img src="https://img.shields.io/badge/70+-Service_Types-00bcf2" alt="Service Types">
+  <img src="https://img.shields.io/badge/License-MIT-green" alt="License">
+</p>
+
+<p align="center">
+  <b>Azure Architecture Autopilot</b> designs Azure infrastructure from natural language,<br>
+  generates interactive diagrams, produces modular Bicep templates, and deploys - all through conversation.<br>
+  It also scans existing resources, visualizes them as architecture diagrams, and refines them on the fly.
+</p>
+
+<!-- Hero image: interactive architecture diagram with 605+ Azure icons -->
+<p align="center">
+  <img src="assets/06-architecture-diagram.png" width="100%" alt="Interactive Azure architecture diagram with 605+ official icons">
+</p>
+
+<p align="center">
+  <em>↑ Auto-generated interactive diagram — drag, zoom, click for details, export to PNG</em>
+</p>
+
+<p align="center">
+  <img src="assets/08-deployment-succeeded.png" width="80%" alt="Deployment succeeded">
+  &nbsp;&nbsp;
+  <img src="assets/07-azure-portal-resources.png" width="80%" alt="Azure Portal — deployed resources">
+</p>
+
+<p align="center">
+  <em>↑ Real Azure resources deployed from the generated Bicep templates</em>
+</p>
+
+<p align="center">
+  <a href="#-how-it-works">How It Works</a> •
+  <a href="#-features">Features</a> •
+  <a href="#%EF%B8%8F-prerequisites">Prerequisites</a> •
+  <a href="#-usage">Usage</a> •
+  <a href="#-architecture">Architecture</a>
+</p>
+
+---
+
+## 🔄 How It Works
+
+```
+Path A: "Build me a RAG chatbot on Azure"
+         ↓
+  🎨 Design → 🔧 Bicep → ✅ Review → 🚀 Deploy
+
+Path B: "Analyze my current Azure resources"
+         ↓
+  🔍 Scan → 🎨 Modify → 🔧 Bicep → ✅ Review → 🚀 Deploy
+```
+
+| Phase | Role | What Happens |
+|:-----:|------|--------------|
+| **0** | 🔍 Scanner | Scans existing Azure resources via `az` CLI → auto-generates architecture diagram |
+| **1** | 🎨 Advisor | Interactive design through conversation — asks targeted questions with smart defaults |
+| **2** | 🔧 Generator | Produces modular Bicep: `main.bicep` + `modules/*.bicep` + `.bicepparam` |
+| **3** | ✅ Reviewer | Compiles with `az bicep build`, checks security & best practices |
+| **4** | 🚀 Deployer | `validate` → `what-if` → preview diagram → `create` (5-step mandatory sequence) |
+
+---
+
+## ✨ Features
+
+| | Feature | Description |
+|---|---------|-------------|
+| 📦 | **Zero Dependencies** | 605+ Azure icons bundled — no `pip install`, works offline |
+| 🎨 | **Interactive Diagrams** | Drag-and-drop HTML with zoom, click details, PNG export |
+| 🔍 | **Resource Scanning** | Analyze existing Azure infra → auto-generate architecture diagrams |
+| 💬 | **Natural Language** | *"It's slow"*, *"reduce costs"*, *"add security"* → guided resolution |
+| 📊 | **Live Verification** | API versions, SKUs, model availability fetched from MS Docs in real-time |
+| 🔒 | **Secure by Default** | Private Endpoints, RBAC, managed identity — no secrets in files |
+| ⚡ | **Parallel Preload** | Next-phase info loaded while waiting for user input |
+| 🌐 | **Multi-Language** | Auto-detects user language — responds in English, Korean, or any language |
+
+---
+
+## ⚙️ Prerequisites
+
+| Tool | Required | Install |
+|------|:--------:|---------|
+| **GitHub Copilot CLI** | ✅ | [Install guide](https://docs.github.com/copilot/concepts/agents/about-copilot-cli) |
+| **Azure CLI** | ✅ | `winget install Microsoft.AzureCLI` / `brew install azure-cli` |
+| **Python 3.10+** | ✅ | `winget install Python.Python.3.12` / `brew install python` |
+
+> No additional packages required — the diagram engine is bundled in `scripts/`.
+
+### 🤖 Recommended Models
+
+| | Models | Notes |
+|---|--------|-------|
+| 🏆 **Best** | Claude Opus 4.5 / 4.6 | Most reliable for all 5 phases |
+| ✅ **Recommended** | Claude Sonnet 4.5 / 4.6 | Best cost-performance balance |
+| ⚠️ **Minimum** | Claude Sonnet 4, GPT-5.1+ | May skip steps in complex architectures |
+
+---
+
+## 🚀 Usage
+
+### Path A — Build new infrastructure
+
+```
+"Build a RAG chatbot with Foundry and AI Search"
+"Create a data platform with Databricks and ADLS Gen2"
+"Deploy Fabric + ADF pipeline with private endpoints"
+"Set up a microservices architecture with AKS and Cosmos DB"
+```
+
+### Path B — Analyze & modify existing resources
+
+```
+"Analyze my current Azure infrastructure"
+"Scan rg-production and show me the architecture"
+"What resources are in my subscription?"
+```
+
+Then modify through conversation:
+```
+"Add 3 VMs to this architecture"
+"The Foundry endpoint is slow — what can I do?"
+"Reduce costs — downgrade AI Search to Basic"
+"Add private endpoints to all services"
+```
+
+### 📂 Output Structure
+
+```
+<project-name>/
+├── 00_arch_current.html         ← Scanned architecture (Path B)
+├── 01_arch_diagram_draft.html   ← Design diagram
+├── 02_arch_diagram_preview.html ← What-if preview
+├── 03_arch_diagram_result.html  ← Deployment result
+├── main.bicep                   ← Orchestration
+├── main.bicepparam              ← Parameter values
+└── modules/
+    └── *.bicep                  ← Per-service modules
+```
+
+---
+
+## 📁 Architecture
+
+```
+SKILL.md                            ← Lightweight router (~170 lines)
+│
+├── scripts/                         ← Embedded diagram engine
+│   ├── generator.py                 ← Interactive HTML generator
+│   ├── icons.py                     ← 605+ Azure icons (Base64 SVG)
+│   └── cli.py                       ← CLI entry point
+│
+└── references/                      ← Phase instructions + patterns
+    ├── phase0-scanner.md            ← 🔍 Resource scanning
+    ├── phase1-advisor.md            ← 🎨 Architecture design
+    ├── bicep-generator.md           ← 🔧 Bicep generation
+    ├── bicep-reviewer.md            ← ✅ Code review
+    ├── phase4-deployer.md           ← 🚀 Deployment pipeline
+    ├── service-gotchas.md           ← Required properties & PE mappings
+    ├── azure-common-patterns.md     ← Security & naming patterns
+    ├── azure-dynamic-sources.md     ← MS Docs URL registry
+    ├── architecture-guidance-sources.md
+    └── ai-data.md                   ← AI/Data service domain pack
+```
+
+> **Self-contained** — `SKILL.md` is a lightweight router. All phase logic lives in `references/`. The diagram engine is embedded in `scripts/` with no external dependencies.
+
+---
+
+## 📊 Supported Services (70+ types)
+
+All Azure services supported. AI/Data services have optimized templates; others are auto-looked up from MS Docs.
+
+**Key types:** `ai_foundry` · `openai` · `ai_search` · `storage` · `adls` · `keyvault` · `fabric` · `databricks` · `aks` · `vm` · `app_service` · `function_app` · `cosmos_db` · `sql_server` · `postgresql` · `mysql` · `synapse` · `adf` · `apim` · `service_bus` · `logic_apps` · `event_grid` · `event_hub` · `container_apps` · `app_insights` · `log_analytics` · `firewall` · `front_door` · `load_balancer` · `expressroute` · `sentinel` · `redis` · `iot_hub` · `digital_twins` · `signalr` · `acr` · `bastion` · `vpn_gateway` · `data_explorer` · `document_intelligence` ...
+
+
+---
+
+## 📄 License
+
+MIT © [Jeonghoon Lee](https://github.com/whoniiii)

package/.github/skills/azure-architecture-autopilot/SKILL.md

@@ -0,0 +1,170 @@
+---
+name: azure-architecture-autopilot
+description: >
+  Design Azure infrastructure using natural language, or analyze existing Azure resources
+  to auto-generate architecture diagrams, refine them through conversation, and deploy with Bicep.
+
+  When to use this skill:
+  - "Create X on Azure", "Set up a RAG architecture" (new design)
+  - "Analyze my current Azure infrastructure", "Draw a diagram for rg-xxx" (existing analysis)
+  - "Foundry is slow", "I want to reduce costs", "Strengthen security" (natural language modification)
+  - Azure resource deployment, Bicep template generation, IaC code generation
+  - Microsoft Foundry, AI Search, OpenAI, Fabric, ADLS Gen2, Databricks, and all Azure services
+---
+
+# Azure Architecture Builder
+
+A pipeline that designs Azure infrastructure using natural language, or analyzes existing resources to visualize architecture and proceed through modification and deployment.
+
+The diagram engine is **embedded within the skill** (`scripts/` folder).
+No `pip install` needed — it directly uses the bundled Python scripts
+to generate interactive HTML diagrams with 605+ official Azure icons.
+Ready to use immediately without network access or package installation.
+
+## Automatic User Language Detection
+
+**🚨 Detect the language of the user's first message and provide all subsequent responses in that language. This is the highest-priority principle.**
+
+- If the user writes in Korean → respond in Korean
+- If the user writes in English → **respond in English** (ask_user, progress updates, reports, Bicep comments — all in English)
+- The instructions and examples in this document are written in English, and **all user-facing output must match the user's language**
+
+**⚠️ Do not copy examples from this document verbatim to the user.**
+Use only the structure as reference, and adapt text to the user's language.
+
+## Tool Usage Guide (GHCP Environment)
+
+| Feature | Tool Name | Notes |
+|---------|-----------|-------|
+| Fetch URL content | `web_fetch` | For MS Docs lookups, etc. |
+| Web search | `web_search` | URL discovery |
+| Ask user | `ask_user` | `choices` must be a string array |
+| Sub-agents | `task` | explore/task/general-purpose |
+| Shell command execution | `powershell` | Windows PowerShell |
+
+> All sub-agents (explore/task/general-purpose) cannot use `web_fetch` or `web_search`.
+> Fact-checking that requires MS Docs lookups must be performed **directly by the main agent**.
+
+## External Tool Path Discovery
+
+`az`, `python`, `bicep`, etc. are often not on PATH.
+**Discover once before starting a Phase and cache the result. Do not re-discover every time.**
+
+> **⚠️ Do not use `Get-Command python`** — risk of Windows Store alias.
+> Direct filesystem discovery (`$env:LOCALAPPDATA\Programs\Python`) takes priority.
+
+az CLI path:
+```powershell
+$azCmd = $null
+if (Get-Command az -ErrorAction SilentlyContinue) { $azCmd = 'az' }
+if (-not $azCmd) {
+  $azExe = Get-ChildItem -Path "$env:ProgramFiles\Microsoft SDKs\Azure\CLI2\wbin", "$env:LOCALAPPDATA\Programs\Azure CLI\wbin" -Filter "az.cmd" -ErrorAction SilentlyContinue | Select-Object -First 1 -ExpandProperty FullName
+  if ($azExe) { $azCmd = $azExe }
+}
+```
+
+Python path + embedded diagram engine: refer to the diagram generation section in `references/phase1-advisor.md`.
+
+## Progress Updates Required
+
+Use blockquote + emoji + bold format:
+```markdown
+> **⏳ [Action]** — [Reason]
+> **✅ [Complete]** — [Result]
+> **⚠️ [Warning]** — [Details]
+> **❌ [Failed]** — [Cause]
+```
+
+## Parallel Preload Principle
+
+While waiting for user input via `ask_user`, preload information needed for the next step in parallel.
+
+| ask_user Question | Preload Simultaneously |
+|---|---|
+| Project name / scan scope | Reference files, MS Docs, Python path discovery, **diagram module path verification** |
+| Model/SKU selection | MS Docs for next question choices |
+| Architecture confirmation | `az account show/list`, `az group list` |
+| Subscription selection | `az group list` |
+
+---
+
+## Path Branching — Automatically Determined by User Request
+
+### Path A: New Design (New Build)
+
+**Trigger**: "create", "set up", "deploy", "build", etc.
+```
+Phase 1 (references/phase1-advisor.md) — Interactive architecture design + diagram
+    ↓
+Phase 2 (references/bicep-generator.md) — Bicep code generation
+    ↓
+Phase 3 (references/bicep-reviewer.md) — Code review + compilation verification
+    ↓
+Phase 4 (references/phase4-deployer.md) — validate → what-if → deploy
+```
+
+### Path B: Existing Analysis + Modification (Analyze & Modify)
+
+**Trigger**: "analyze", "current resources", "scan", "draw a diagram", "show my infrastructure", etc.
+```
+Phase 0 (references/phase0-scanner.md) — Existing resource scan + diagram
+    ↓
+Modification conversation — "What would you like to change here?" (natural language modification request → follow-up questions)
+    ↓
+Phase 1 (references/phase1-advisor.md) — Confirm modifications + update diagram
+    ↓
+Phase 2~4 — Same as above
+```
+
+### When Path Determination Is Ambiguous
+
+Ask the user directly:
+```
+ask_user({
+  question: "What would you like to do?",
+  choices: [
+    "Design a new Azure architecture (Recommended)",
+    "Analyze + modify existing Azure resources"
+  ]
+})
+```
+
+---
+
+## Phase Transition Rules
+
+- Each Phase reads and follows the instructions in its corresponding `references/*.md` file
+- When transitioning between Phases, always inform the user about the next step
+- Do not skip Phases (especially the what-if between Phase 3 → Phase 4)
+- **🚨 Required condition for Phase 1 → Phase 2 transition**: `01_arch_diagram_draft.html` must have been generated using the embedded diagram engine and shown to the user. **Do not proceed to Bicep generation without a diagram.** Completing spec collection alone does not mean Phase 1 is done — Phase 1 includes diagram generation + user confirmation.
+- Modification request after deployment → return to Phase 1, not Phase 0 (Delta Confirmation Rule)
+
+## Service Coverage & Fallback
+
+### Optimized Services
+Microsoft Foundry, Azure OpenAI, AI Search, ADLS Gen2, Key Vault, Microsoft Fabric, Azure Data Factory, VNet/Private Endpoint, AML/AI Hub
+
+### Other Azure Services
+All supported — MS Docs are automatically consulted to generate at the same quality standard.
+**Do not send messages that cause user anxiety such as "out of scope" or "best-effort".**
+
+### Stable vs Dynamic Information Handling
+
+| Category | Handling Method | Examples |
+|----------|----------------|---------|
+| **Stable** | Reference files first | `isHnsEnabled: true`, PE triple set |
+| **Dynamic** | **Always fetch MS Docs** | API version, model availability, SKU, region |
+
+## Quick Reference
+
+| File | Role |
+|------|------|
+| `references/phase0-scanner.md` | Existing resource scan + relationship inference + diagram |
+| `references/phase1-advisor.md` | Interactive architecture design + fact checking |
+| `references/bicep-generator.md` | Bicep code generation rules |
+| `references/bicep-reviewer.md` | Code review checklist |
+| `references/phase4-deployer.md` | validate → what-if → deploy |
+| `references/service-gotchas.md` | Required properties, PE mappings |
+| `references/azure-dynamic-sources.md` | MS Docs URL registry |
+| `references/azure-common-patterns.md` | PE/security/naming patterns |
+| `references/ai-data.md` | AI/Data service guide |

package/.github/skills/azure-architecture-autopilot/references/ai-data.md

@@ -0,0 +1,254 @@
+# Domain Pack: AI/Data (v1)
+
+Service configuration guide specialized for Azure AI/Data workloads.
+v1 scope: Foundry, AI Search, ADLS Gen2, Key Vault, Fabric, ADF, VNet/PE.
+
+> Required properties/common mistakes → `service-gotchas.md`
+> Dynamic information (API version, SKU, region) → `azure-dynamic-sources.md`
+> Common patterns (PE, security, naming) → `azure-common-patterns.md`
+
+---
+
+## 1. Microsoft Foundry (CognitiveServices)
+
+### Resource Hierarchy
+
+```
+Microsoft.CognitiveServices/accounts (kind: 'AIServices')
+├── /projects          — Foundry Project (required for portal access)
+└── /deployments       — Model deployments (GPT-4o, embedding, etc.)
+```
+
+### Bicep Core Structure
+
+```bicep
+// Foundry resource
+resource foundry 'Microsoft.CognitiveServices/accounts@<fetch>' = {
+  name: foundryName
+  location: location
+  kind: 'AIServices'
+  sku: { name: '<confirm with user>' }               // ← SKU confirmed after MS Docs check in Phase 1
+  identity: { type: 'SystemAssigned' }
+  properties: {
+    customSubDomainName: foundryName  // ← Required, globally unique. Cannot change after creation — must delete and recreate if omitted
+    allowProjectManagement: true
+    publicNetworkAccess: 'Disabled'
+    networkAcls: { defaultAction: 'Deny' }
+  }
+}
+
+// Foundry Project — Must be created as a set with Foundry
+resource project 'Microsoft.CognitiveServices/accounts/projects@<fetch>' = {
+  parent: foundry
+  name: '${foundryName}-project'
+  location: location
+  sku: { name: '<same as parent>' }
+  kind: 'AIServices'
+  identity: { type: 'SystemAssigned' }
+  properties: {}
+}
+
+// Model deployment — At Foundry resource level
+resource deployment 'Microsoft.CognitiveServices/accounts/deployments@<fetch>' = {
+  parent: foundry
+  name: '<model-name>'                              // ← Confirmed with user in Phase 1
+  sku: {
+    name: '<deployment-type>'                        // ← GlobalStandard, Standard, etc. — MS Docs fetch
+    capacity: <confirm with user>                    // ← Capacity units — verify available range from MS Docs
+  }
+  properties: {
+    model: {
+      format: 'OpenAI'
+      name: '<model-name>'                           // ← Must verify availability (fetch)
+      version: '<fetch>'                             // ← Version also fetched
+    }
+  }
+}
+```
+
+> `@<fetch>`: Verify API version from the URLs in `azure-dynamic-sources.md`.
+> Model name/version/deployment type/capacity: All Dynamic — Confirmed with user after MS Docs fetch in Phase 1.
+
+---
+
+## 2. Azure AI Search
+
+### Bicep Core Structure
+
+```bicep
+resource search 'Microsoft.Search/searchServices@<fetch>' = {
+  name: searchName
+  location: location
+  sku: { name: '<confirm with user>' }
+  identity: { type: 'SystemAssigned' }
+  properties: {
+    hostingMode: 'default'
+    publicNetworkAccess: 'disabled'
+    semanticSearch: '<confirm with user>'    // disabled | free | standard — verify in MS Docs
+  }
+}
+```
+
+### Design Notes
+
+- PE support: Basic SKU or higher (verify latest constraints in MS Docs)
+- Semantic Ranker: Activated via `semanticSearch` property (`disabled` | `free` | `standard`) — verify per-SKU support in MS Docs
+- Vector search: Supported on paid SKUs (verify in MS Docs)
+- Commonly used together with Foundry for RAG configurations
+
+---
+
+## 3. ADLS Gen2 (Storage Account)
+
+### Bicep Core Structure
+
+```bicep
+resource storage 'Microsoft.Storage/storageAccounts@<fetch>' = {
+  name: storageName        // Lowercase+numbers only, no hyphens
+  location: location
+  kind: 'StorageV2'
+  sku: { name: 'Standard_LRS' }
+  properties: {
+    isHnsEnabled: true                 // ← Never omit this
+    accessTier: 'Hot'
+    allowBlobPublicAccess: false
+    minimumTlsVersion: 'TLS1_2'
+    publicNetworkAccess: 'Disabled'
+    networkAcls: { defaultAction: 'Deny' }
+  }
+}
+
+// Container
+resource container 'Microsoft.Storage/storageAccounts/blobServices/containers@<fetch>' = {
+  name: '${storage.name}/default/raw'
+}
+```
+
+### Design Notes
+
+- `isHnsEnabled` cannot be changed after creation → Resource must be recreated if omitted
+- PE: May need both `blob` and `dfs` PEs depending on use case
+- Common containers: `raw`, `processed`, `curated`
+
+---
+
+## 4. Microsoft Fabric
+
+### Bicep Core Structure
+
+```bicep
+resource fabric 'Microsoft.Fabric/capacities@<fetch>' = {
+  name: fabricName
+  location: location
+  sku: { name: '<confirm with user>', tier: 'Fabric' }
+  properties: {
+    administration: {
+      members: [ '<admin-email>' ]    // ← Required, deployment fails without it
+    }
+  }
+}
+```
+
+### Design Notes
+
+- Only Capacity can be provisioned via Bicep
+- Workspace, Lakehouse, Warehouse, etc. must be created manually in the portal
+- Confirm admin email with the user (`ask_user`)
+
+### Required Confirmation Items When Adding in Phase 1
+
+When Fabric is added during conversation, the following items must be confirmed via ask_user before updating the diagram:
+
+- [ ] **SKU/Capacity**: F2, F4, F8, ... — Provide choices after fetching available SKUs from MS Docs
+- [ ] **administration.members**: Admin email — Deployment fails without it
+
+> Do not arbitrarily include sub-workloads (OneLake, data pipelines, Warehouse, etc.) that the user did not specify. Only Capacity can be provisioned via Bicep.
+
+---
+
+## 5. Azure Data Factory
+
+### Bicep Core Structure
+
+```bicep
+resource adf 'Microsoft.DataFactory/factories@<fetch>' = {
+  name: adfName
+  location: location
+  identity: { type: 'SystemAssigned' }
+  properties: {
+    publicNetworkAccess: 'Disabled'
+  }
+}
+```
+
+### Design Notes
+
+- Self-hosted Integration Runtime requires manual setup outside Bicep
+- Primarily used for on-premises data ingestion scenarios
+- PE groupId: `dataFactory`
+
+---
+
+## 6. AML / AI Hub (MachineLearningServices)
+
+### When to Use
+
+```
+Decision Rule:
+├─ General AI/RAG → Use Foundry (AIServices)
+└─ ML training, open-source models needed → Consider AI Hub
+    └─ Only when the user explicitly requests it
+```
+
+### Bicep Core Structure
+
+```bicep
+resource hub 'Microsoft.MachineLearningServices/workspaces@<fetch>' = {
+  name: hubName
+  location: location
+  kind: 'Hub'
+  sku: { name: '<confirm with user>', tier: '<confirm with user>' }  // e.g., Basic/Basic — verify available SKUs in MS Docs
+  identity: { type: 'SystemAssigned' }
+  properties: {
+    friendlyName: hubName
+    storageAccount: storage.id
+    keyVault: keyVault.id
+    applicationInsights: appInsights.id    // Required for Hub
+    publicNetworkAccess: 'Disabled'
+  }
+}
+```
+
+### AI Hub Dependencies
+
+Additional resources needed when using Hub:
+- Storage Account
+- Key Vault
+- Application Insights + Log Analytics Workspace
+- Container Registry (optional)
+
+---
+
+## 7. Common AI/Data Architecture Combinations
+
+### RAG Chatbot
+
+```
+Foundry (AIServices) + Project
+├── <chat-model> (chat)              — Confirmed after availability check in Phase 1
+├── <embedding-model> (embedding)    — Confirmed after availability check in Phase 1
+├── AI Search (vector + semantic)
+├── ADLS Gen2 (document store)
+└── Key Vault (secrets)
++ Full VNet/PE configuration
+```
+
+### Data Platform
+
+```
+Fabric Capacity (analytics)
+├── ADLS Gen2 (data lake)
+├── ADF (ingestion)
+└── Key Vault (secrets)
++ VNet/PE configuration
+```