fix: Dev to main PR

.devcontainer/Dockerfile

@@ -1,4 +1,10 @@
 FROM mcr.microsoft.com/devcontainers/python:3.11-bullseye
 
+# Route npm/corepack traffic (used during devcontainer feature installation,
+# e.g. ghcr.io/devcontainers/features/node) through the internal package feed
+# proxy, since the public npmjs.org registry is blocked/unreachable on this
+# network and causes feature install failures (ERR_SSL_SSL/TLS_ALERT_HANDSHAKE_FAILURE).
+ENV NPM_CONFIG_REGISTRY=https://packagefeedproxy.microsoft.io/npm/
+
 # Remove Yarn repository to avoid GPG key expiration issue
 RUN rm -f /etc/apt/sources.list.d/yarn.list

.devcontainer/devcontainer.json

@@ -6,7 +6,7 @@
     "features": {
         "ghcr.io/devcontainers/features/docker-in-docker:2": {"version": "latest"},
         "ghcr.io/azure/azure-dev/azd:latest": {},
-        "ghcr.io/devcontainers/features/node:1": {},
+        "ghcr.io/devcontainers/features/node:1": {"pnpmVersion": "none"},
         "ghcr.io/devcontainers/features/azure-cli:1": {
             "installBicep": true,
 			"version": "latest",
@@ -46,7 +46,10 @@
         "DISPLAY": "dummy",
         "PYTHONUNBUFFERED": "True",
         "UV_LINK_MODE": "copy",
-        "UV_PROJECT_ENVIRONMENT": "/home/vscode/.venv"
+        "UV_PROJECT_ENVIRONMENT": "/home/vscode/.venv",
+        "PIP_INDEX_URL": "https://packagefeedproxy.microsoft.io/pypi/simple/",
+        "UV_INDEX_URL": "https://packagefeedproxy.microsoft.io/pypi/simple/",
+        "NPM_CONFIG_REGISTRY": "https://packagefeedproxy.microsoft.io/npm/"
     },
     "remoteUser": "vscode",
     "hostRequirements": {

.devcontainer/setupEnv.sh

@@ -8,7 +8,7 @@ set -e
 
 echo "Setting up Backend..."
 cd ./src/backend
-uv sync --frozen --extra dev
+uv sync --frozen
 cd ../../
 
 echo "Setting up Frontend..."

.github/requirements.txt

@@ -1,3 +1,4 @@
+--index-url https://packagefeedproxy.microsoft.io/pypi/simple/
 fastapi==0.136.1
 uvicorn==0.35.0
 azure-cosmos==4.15.0

.github/workflows/pylint.yml

@@ -26,9 +26,9 @@ jobs:
 
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
+          python -m pip install --upgrade pip --index-url https://packagefeedproxy.microsoft.io/pypi/simple/
           pip install -r .github/requirements.txt
-          pip install flake8  # Ensure flake8 is installed explicitly
+          pip install --index-url https://packagefeedproxy.microsoft.io/pypi/simple/ flake8  # Ensure flake8 is installed explicitly
 
       - name: Run flake8 and pylint
         run: |

.github/workflows/test-automation-v2.yml

@@ -59,7 +59,7 @@ jobs:
 
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
+          python -m pip install --upgrade pip --index-url https://packagefeedproxy.microsoft.io/pypi/simple/
           pip install -r tests/e2e-test/requirements.txt
 
       - name: Ensure browsers are installed

.github/workflows/test-automation.yml

@@ -63,7 +63,7 @@ jobs:
 
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
+          python -m pip install --upgrade pip --index-url https://packagefeedproxy.microsoft.io/pypi/simple/
           pip install -r tests/e2e-test/requirements.txt
 
       - name: Ensure browsers are installed

.github/workflows/test.yml

@@ -55,7 +55,7 @@ jobs:
 
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
+          python -m pip install --upgrade pip --index-url https://packagefeedproxy.microsoft.io/pypi/simple/
           pip install -r .github/requirements.txt
 
       - name: Check if test files exist

infra/scripts/post-provision/post_deploy.sh

@@ -16,7 +16,12 @@ resource_group=""
 user_principal_id=""
 ai_foundry_resource_id=""
 python_cmd=""
-venv_path="$SCRIPT_DIR/scriptenv"
+# Dev container bind-mounts cause OSError on large packages; use $HOME Path instead.
+if [ -n "${REMOTE_CONTAINERS:-}" ] || [ -n "${CODESPACES:-}" ] || [ -f "/run/.containerenv" ] || grep -qF "microsoft.com/devcontainers" /etc/os-release 2>/dev/null; then
+  venv_path="$HOME/.macae-post-provision-env"
+else
+  venv_path="$SCRIPT_DIR/scriptenv"
+fi
 
 st_is_public_access_disabled=false
 srch_is_public_access_disabled=false

infra/scripts/post-provision/requirements.txt

@@ -1,3 +1,4 @@
+--index-url https://packagefeedproxy.microsoft.io/pypi/simple/
 azure-search-documents==11.5.3
 azure-identity==1.24.0
 azure-storage-blob==12.26.0

infra/vscode_web/endpoint-requirements.txt

@@ -1,3 +1,4 @@
+--index-url https://packagefeedproxy.microsoft.io/pypi/simple/
 azure-ai-projects==1.0.0b12
 azure-identity==1.20.0
 ansible-core~=2.17.0

infra/vscode_web/requirements.txt

@@ -1,3 +1,4 @@
+--index-url https://packagefeedproxy.microsoft.io/pypi/simple/
 azure-ai-projects==1.0.0b12
 azure-identity==1.20.0
 ansible-core~=2.17.0

src/App/.npmrc

@@ -0,0 +1 @@
+registry=https://packagefeedproxy.microsoft.io/npm/

src/App/Dockerfile

@@ -5,10 +5,10 @@ FROM node:20-alpine AS frontend-builder
 
 WORKDIR /app/frontend
 
-# Copy package files first for better caching
-COPY package*.json ./
+# Copy package files and npm registry config (packagefeedproxy) first for better caching
+COPY package*.json .npmrc* ./
 
-# Install dependencies
+# Install dependencies (registry is routed through the Microsoft Package Feed Proxy via .npmrc)
 RUN npm ci --silent
 
 # Copy source files
@@ -28,6 +28,10 @@ COPY --from=ghcr.io/astral-sh/uv:0.6.3 /uv /uvx /bin/
 # Setup UV environment variables
 ENV UV_COMPILE_BYTECODE=1 UV_LINK_MODE=copy
 
+# Route pip/uv package resolution through the Microsoft Package Feed Proxy
+ENV UV_INDEX_URL=https://packagefeedproxy.microsoft.io/pypi/simple/ \
+    PIP_INDEX_URL=https://packagefeedproxy.microsoft.io/pypi/simple/
+
 WORKDIR /app
 
 # Copy Python project definition files