0.2.1b6 - Hardening Build Pipeline

.gitattributes

@@ -0,0 +1,5 @@
+# Force LF line endings for all text files
+* text=auto eol=lf
+
+# Ensure shell scripts are always LF
+*.sh text eol=lf

.github/workflows/ci.yml

@@ -85,11 +85,8 @@ jobs:
           python -m pip install --upgrade pip
           pip install pyyaml
 
-      - name: Validate policy files (strict)
-        run: python -m azext_prototype.governance.policies.validate --dir azext_prototype/governance/policies/ --strict
-
-      - name: Validate workload templates against policies (strict)
-        run: python -m azext_prototype.templates.validate --dir azext_prototype/templates/workloads/ --strict
+      - name: Validate governance (policies, anti-patterns, standards, workloads)
+        run: python -m azext_prototype.governance.validate --all --strict
 
   test:
     name: Test (Python ${{ matrix.python-version }})
@@ -191,6 +188,11 @@ jobs:
           "
           echo "Stamped version: $CI_VERSION"
 
+      - name: Compute policy embeddings
+        run: |
+          python -m pip install sentence-transformers
+          python scripts/compute_embeddings.py
+
       - name: Inject App Insights connection string and build wheel
         run: |
           python -m pip install --upgrade pip "setuptools<70" wheel==0.30.0

.github/workflows/pr.yml

@@ -58,11 +58,8 @@ jobs:
           python -m pip install --upgrade pip
           pip install pyyaml
 
-      - name: Validate policy files (strict)
-        run: python -m azext_prototype.governance.policies.validate --dir azext_prototype/governance/policies/ --strict
-
-      - name: Validate workload templates against policies (strict)
-        run: python -m azext_prototype.templates.validate --dir azext_prototype/templates/workloads/ --strict
+      - name: Validate governance (policies, anti-patterns, standards, workloads)
+        run: python -m azext_prototype.governance.validate --all --strict
 
   test:
     name: Test (Python ${{ matrix.python-version }})
@@ -154,6 +151,11 @@ jobs:
           python -m pip install --upgrade pip
           pip install "setuptools<70" wheel==0.30.0
 
+      - name: Compute policy embeddings
+        run: |
+          pip install sentence-transformers
+          python scripts/compute_embeddings.py
+
       - name: Inject App Insights connection string and build wheel
         run: |
           WHEEL_SRC="azext_prototype/telemetry/__init__.py"

.github/workflows/release.yml

@@ -71,13 +71,10 @@ jobs:
           python -m pip install --upgrade pip
           pip install "setuptools<70" wheel==0.30.0
 
-      - name: Validate governance policies
+      - name: Validate governance (policies, anti-patterns, standards, workloads)
         run: |
           pip install pyyaml
-          python -m azext_prototype.governance.policies.validate --dir azext_prototype/governance/policies/ --strict
-
-      - name: Validate workload templates against policies
-        run: python -m azext_prototype.templates.validate --dir azext_prototype/templates/workloads/ --strict
+          python -m azext_prototype.governance.validate --all --strict
 
       - name: Stamp version into metadata
         run: |
@@ -95,6 +92,11 @@ jobs:
           echo "Stamped version: $TAG_VERSION"
           echo "Preview: $(python -c "import re; print(bool(re.search(r'(a|b|rc|alpha|beta|preview|dev)\d*', '$TAG_NAME')))")"
 
+      - name: Compute policy embeddings
+        run: |
+          pip install sentence-transformers
+          python scripts/compute_embeddings.py
+
       - name: Inject App Insights connection string and build wheel
         run: |
           WHEEL_SRC="azext_prototype/telemetry/__init__.py"

.gitignore

@@ -8,6 +8,9 @@ eggs/
 sdist/
 wheels/
 
+# --- Generated at build time ---
+azext_prototype/governance/*.vectors.json
+
 # --- Python bytecode ---
 __pycache__/
 *.py[cod]

COMMANDS.md

@@ -405,7 +405,7 @@ az prototype deploy [--stage]
                     [--rollback-info]
                     [--generate-scripts]
                     [--script-type {container_app, function, webapp}]
-                    [--script-resource-group]
+                    [--script-rg]
                     [--script-registry]
 ```
 
@@ -651,7 +651,7 @@ Azure deployment target type for `--generate-scripts`.
 | Default value: | `webapp` |
 | Accepted values: | `container_app`, `function`, `webapp` |
 
-`--script-resource-group`
+`--script-rg`
 
 Default resource group name for `--generate-scripts`.
 

FEATURES.md

@@ -19,7 +19,7 @@
 
 ## Multi-Agent System
 
-- 11 built-in AI agents with specialized roles: architecture, infrastructure, application code, security, monitoring, QA, cost analysis, documentation, project management, and business analysis
+- 12 built-in AI agents with specialized roles: architecture, infrastructure, application code, security, monitoring, governance, QA, cost analysis, documentation, project management, and business analysis
 - Three-tier agent resolution — custom agents override built-in agents, or extend the system with new roles
 - Formal agent contracts — declared inputs, outputs, and delegation targets for dependency validation
 - Parallel execution — independent agent tasks run concurrently with automatic dependency ordering