القائمة
Validates service boundary compliance in the KB Agent project. Use when working on cross-service imports, restructuring modules, or reviewing code that crosses service boundaries.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Structured first-pass debugging for test failures, runtime errors, and unexpected behavior. USE FOR: test failure, assertion error, ImportError, traceback, debug failing test, fix broken test, diagnose error, runtime exception, mock error, config error. DO NOT USE FOR: complex multi-system design issues (escalate to @planner for re-planning).
Create, update, refactor, explain, or review Microsoft Agent Framework solutions. Use when working with the KB Agent (src/agent/) or any Microsoft Agent Framework code.
Patterns for adding governance, safety, and trust controls to AI agent systems using Microsoft Foundry and Azure API Management (APIM) AI Gateway. Use when: - Adding rate limiting, content safety, or jailbreak detection to agent traffic - Configuring APIM policies for token limits, throttling, or semantic caching - Leveraging Foundry tracing, evaluations, and agent monitoring - Implementing department-scoped access via JWT claims - Deciding what to handle at the platform layer vs. thin application code
Performs comprehensive preflight validation of Bicep deployments to Azure. Use when: - Before deploying infrastructure to Azure - Reviewing or preparing Bicep files - Previewing what changes a deployment will make (what-if) - Verifying permissions are sufficient for deployment - Before running `azd -C infra/azure up`, `azd -C infra/azure provision`, or `az deployment` commands
Reviews Bicep modules, azure.yaml, and infrastructure changes for the KB Agent project. Checks naming, RBAC, module wiring, and doc sync. Use when working on infra/ or reviewing infrastructure PRs.
Manages epic and story lifecycle for the KB Agent project. Reads epic files, verifies acceptance criteria, updates story status, and checks Definition of Done. Use when completing stories, starting new work, or auditing epic status.
| name | architecture-check |
| description | Validates service boundary compliance in the KB Agent project. Use when working on cross-service imports, restructuring modules, or reviewing code that crosses service boundaries. |
Verify that the KB Agent service-based architecture is respected. Each service is an independent package — cross-service imports break the isolation contract.
┌─────────────────────────────────────────────────┐
│ src/agent/ (KB Agent) │
│ - Starlette + Microsoft Agent Framework │
│ - Hosted on Foundry / Container App │
│ - Own pyproject.toml + .env │
├─────────────────────────────────────────────────┤
│ src/functions/ (Pipeline Functions) │
│ - fn_convert_cu/ (Content Understanding) │
│ - fn_convert_mistral/ (Mistral Document AI) │
│ - fn_convert_markitdown/ (MarkItDown) │
│ - fn_index/ (Markdown → AI Search) │
│ - shared/ (cross-function utilities) │
│ - Own pyproject.toml + .env │
├─────────────────────────────────────────────────┤
│ src/web-app/ (Chainlit Client) │
│ - OpenAI SDK thin client │
│ - Cosmos DB data layer │
│ - Own pyproject.toml + .env │
├─────────────────────────────────────────────────┤
│ infra/ (Azure + local runtime) │
│ - azure/infra/ (Bicep IaC) │
│ - docker/ (Docker Compose) │
│ - No application code │
└─────────────────────────────────────────────────┘
Check these must-never-happen patterns:
Agent importing from functions or web-app:
# FORBIDDEN in src/agent/**/*.py
from shared import ...
from fn_convert_cu import ...
from app import ... # web-app
Functions importing from agent or web-app:
# FORBIDDEN in src/functions/**/*.py
from agent import ...
from app import ... # web-app
Web-app importing from agent or functions:
# FORBIDDEN in src/web-app/**/*.py
from agent import ...
from shared import ...
from fn_index import ...
Shared utilities used outside functions:
# FORBIDDEN in src/agent/**/*.py or src/web-app/**/*.py
from shared import ... # shared/ is for functions only
All services must follow these configuration rules:
DefaultAzureCredential for all Azure SDK clients.env files populated by azd -C infra/azure env get-values — never hardcodedconfig.py per service)conftest.py sets os.environ.setdefault(...) for config safetysrc/agent/ — should not reference shared, fn_*, or appsrc/functions/ — should not reference agent or appsrc/web-app/ — should not reference agent, shared, or fn_*pyproject.toml with independent dependenciesinfra/azure/infra/ contains only Bicep files and parameters — no Python