Python: Migrate Foundry Toolbox sample to unified azure.yaml

python/samples/04-hosting/foundry-hosted-agents/responses/foundry_toolbox/.azdignore

@@ -1,6 +1,7 @@
-agent.manifest.yaml
-agent.yaml
-.env.example
 .env
-toolbox.yaml
+.azure
+.venv
+__pycache__
+.pytest_cache
+tests
 ./scripts

python/samples/04-hosting/foundry-hosted-agents/responses/foundry_toolbox/.dockerignore

@@ -4,4 +4,8 @@ __pycache__
 *.pyo
 *.pyd
 .Python
-.env
+.env
+.azure
+.git
+.pytest_cache
+tests

python/samples/04-hosting/foundry-hosted-agents/responses/foundry_toolbox/.env.example

@@ -1,3 +1,5 @@
-FOUNDRY_PROJECT_ENDPOINT="..."
-FOUNDRY_MODEL="..."
-TOOLBOX_ENDPOINT="..."
+# Copy to .env for standalone Python or VS Code runs after deploying dependencies.
+FOUNDRY_PROJECT_ENDPOINT="https://<account>.services.ai.azure.com/api/projects/<project>"
+AZURE_AI_MODEL_DEPLOYMENT_NAME="<model-deployment-name>"
+# From: azd env get-value TOOLBOX_AGENT_TOOLS_MCP_ENDPOINT
+TOOLBOX_ENDPOINT="https://<account>.services.ai.azure.com/api/projects/<project>/toolboxes/agent-tools/versions/<version>/mcp?api-version=v1"

python/samples/04-hosting/foundry-hosted-agents/responses/foundry_toolbox/azure.yaml

@@ -0,0 +1,122 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/Azure/azure-dev/main/schemas/v1.0/azure.yaml.json
+
+requiredVersions:
+  azd: '>=1.32.0'
+  extensions:
+    azure.ai.agents: '>=1.0.0-beta.17'
+    azure.ai.connections: '>=1.0.0-beta.8'
+    azure.ai.toolboxes: '>=1.0.0-beta.8'
+name: agent-framework-agent-with-foundry-toolbox-responses
+services:
+  ai-project:
+    host: azure.ai.project
+    deployments:
+      - name: gpt-4.1
+        model:
+          format: OpenAI
+          name: gpt-4.1
+          version: '2025-04-14'
+        sku:
+          name: GlobalStandard
+          capacity: 10
+  ghmcppat:
+    host: azure.ai.connection
+    uses:
+      - ai-project
+    category: RemoteTool
+    target: https://api.githubcopilot.com/mcp
+    authType: CustomKeys
+    credentials:
+      type: CustomKeys
+      keys:
+        Authorization: Bearer ${GITHUB_MCP_PAT}
+    env:
+      GITHUB_MCP_PAT: ${GITHUB_MCP_PAT}
+  langmcpconn:
+    host: azure.ai.connection
+    uses:
+      - ai-project
+    category: RemoteTool
+    target: ${AZURE_LANGUAGE_MCP_ENDPOINT}
+    authType: ProjectManagedIdentity
+    audience: https://cognitiveservices.azure.com/
+    env:
+      AZURE_LANGUAGE_MCP_ENDPOINT: ${AZURE_LANGUAGE_MCP_ENDPOINT}
+  foundrymcpconn:
+    host: azure.ai.connection
+    uses:
+      - ai-project
+    category: RemoteTool
+    target: https://mcp.ai.azure.com
+    authType: UserEntraToken
+    audience: https://mcp.ai.azure.com
+  agent-tools:
+    host: azure.ai.toolbox
+    uses:
+      - ai-project
+      - ghmcppat
+      - langmcpconn
+      - foundrymcpconn
+    description: Multiple MCP servers behind one endpoint
+    env:
+      AZURE_LANGUAGE_MCP_ENDPOINT: ${AZURE_LANGUAGE_MCP_ENDPOINT}
+    tools:
+      - type: web_search
+        name: web_search
+        require_approval: never
+      - type: code_interpreter
+        name: code_interpreter
+        require_approval: never
+      - type: mcp
+        server_label: noauth_mcp
+        server_url: https://gitmcp.io/Azure/azure-rest-api-specs
+        require_approval: never
+      - type: mcp
+        server_label: github
+        server_url: https://api.githubcopilot.com/mcp
+        connection: ghmcppat
+        require_approval: never
+      - type: mcp
+        server_label: language-mcp
+        server_url: ${AZURE_LANGUAGE_MCP_ENDPOINT}
+        connection: langmcpconn
+        require_approval: never
+      - type: mcp
+        server_label: foundry-mcp
+        server_url: https://mcp.ai.azure.com
+        connection: foundrymcpconn
+        require_approval: never
+  agent-framework-agent-with-foundry-toolbox-responses:
+    host: azure.ai.agent
+    project: .
+    language: python
+    codeConfiguration:
+      dependencyResolution: remote_build
+      runtime: python_3_13
+      entryPoint: main.py
+    uses:
+      - ai-project
+      - agent-tools
+    kind: hosted
+    name: agent-framework-agent-with-foundry-toolbox-responses
+    description: An Agent Framework agent with Foundry Toolbox integration.
+    metadata:
+      tags:
+        - Agent Framework
+        - AI Agent Hosting
+        - Azure AI AgentServer
+        - Responses Protocol
+        - Streaming
+    protocols:
+      - protocol: responses
+        version: 2.0.0
+    env:
+      FOUNDRY_PROJECT_ENDPOINT: ${FOUNDRY_PROJECT_ENDPOINT}
+      AZURE_AI_MODEL_DEPLOYMENT_NAME: ${AZURE_AI_MODEL_DEPLOYMENT_NAME}
+      TOOLBOX_ENDPOINT: ${TOOLBOX_AGENT_TOOLS_MCP_ENDPOINT}
+    container:
+      resources:
+        cpu: '0.25'
+        memory: 0.5Gi
+infra:
+  provider: microsoft.foundry

python/samples/04-hosting/foundry-hosted-agents/responses/foundry_toolbox/tests/test_configuration.py

@@ -0,0 +1,141 @@
+# Copyright (c) Microsoft. All rights reserved.
+
+from __future__ import annotations
+
+import re
+from graphlib import TopologicalSorter
+from pathlib import Path
+
+import yaml
+
+SAMPLE_ROOT = Path(__file__).parents[1]
+AGENT_NAME = "agent-framework-agent-with-foundry-toolbox-responses"
+
+
+def _configuration() -> dict:
+    return yaml.safe_load((SAMPLE_ROOT / "azure.yaml").read_text(encoding="utf-8"))
+
+
+def test_hosted_agent_preserves_metadata_protocol_and_resources() -> None:
+    configuration = _configuration()
+    agent = configuration["services"][AGENT_NAME]
+
+    assert configuration["name"] == agent["name"] == AGENT_NAME
+    assert agent["kind"] == "hosted"
+    assert agent["description"] == "An Agent Framework agent with Foundry Toolbox integration."
+    assert agent["metadata"]["tags"] == [
+        "Agent Framework",
+        "AI Agent Hosting",
+        "Azure AI AgentServer",
+        "Responses Protocol",
+        "Streaming",
+    ]
+    assert agent["protocols"] == [{"protocol": "responses", "version": "2.0.0"}]
+    assert agent["container"]["resources"] == {"cpu": "0.25", "memory": "0.5Gi"}
+    assert configuration["infra"]["provider"] == "microsoft.foundry"
+
+
+def test_flat_source_layout_is_independently_deployable() -> None:
+    agent = _configuration()["services"][AGENT_NAME]
+
+    assert agent["project"] == "."
+    assert agent["language"] == "python"
+    assert agent["codeConfiguration"] == {
+        "dependencyResolution": "remote_build",
+        "runtime": "python_3_13",
+        "entryPoint": "main.py",
+    }
+    assert (SAMPLE_ROOT / agent["project"] / agent["codeConfiguration"]["entryPoint"]).is_file()
+    assert (SAMPLE_ROOT / agent["project"] / "requirements.txt").is_file()
+
+
+def test_model_and_runtime_environment_bindings() -> None:
+    services = _configuration()["services"]
+    deployment = services["ai-project"]["deployments"][0]
+
+    assert deployment["name"] == deployment["model"]["name"] == "gpt-4.1"
+    assert deployment["model"]["format"] == "OpenAI"
+    assert isinstance(deployment["model"]["version"], str)
+    assert services[AGENT_NAME]["env"] == {
+        "FOUNDRY_PROJECT_ENDPOINT": "${FOUNDRY_PROJECT_ENDPOINT}",
+        "AZURE_AI_MODEL_DEPLOYMENT_NAME": "${AZURE_AI_MODEL_DEPLOYMENT_NAME}",
+        "TOOLBOX_ENDPOINT": "${TOOLBOX_AGENT_TOOLS_MCP_ENDPOINT}",
+    }
+
+
+def test_dependency_graph_orders_project_connections_toolbox_and_agent() -> None:
+    services = _configuration()["services"]
+    graph = {name: service.get("uses", []) for name, service in services.items()}
+
+    assert all(dependency in services for dependencies in graph.values() for dependency in dependencies)
+    order = list(TopologicalSorter(graph).static_order())
+    assert order[0] == "ai-project"
+    assert order[-1] == AGENT_NAME
+    for connection in ("ghmcppat", "langmcpconn", "foundrymcpconn"):
+        assert order.index(connection) < order.index("agent-tools")
+        assert services[connection]["uses"] == ["ai-project"]
+    assert services[AGENT_NAME]["uses"] == ["ai-project", "agent-tools"]
+
+
+def test_six_tool_sources_use_declared_connections() -> None:
+    services = _configuration()["services"]
+    tools = services["agent-tools"]["tools"]
+
+    assert [tool["type"] for tool in tools] == ["web_search", "code_interpreter", "mcp", "mcp", "mcp", "mcp"]
+    assert all(tool["require_approval"] == "never" for tool in tools)
+    mcp_tools = {tool["server_label"]: tool for tool in tools if tool["type"] == "mcp"}
+    assert mcp_tools["noauth_mcp"]["server_url"] == "https://gitmcp.io/Azure/azure-rest-api-specs"
+    assert "connection" not in mcp_tools["noauth_mcp"]
+    for label, connection in (
+        ("github", "ghmcppat"),
+        ("language-mcp", "langmcpconn"),
+        ("foundry-mcp", "foundrymcpconn"),
+    ):
+        assert mcp_tools[label]["connection"] == connection
+        assert connection in services["agent-tools"]["uses"]
+        assert mcp_tools[label]["server_url"] == services[connection]["target"]
+        assert "project_connection_id" not in mcp_tools[label]
+
+
+def test_authentication_and_external_inputs_are_forwarded_without_embedded_secrets() -> None:
+    services = _configuration()["services"]
+
+    assert services["ghmcppat"]["authType"] == "CustomKeys"
+    assert services["ghmcppat"]["credentials"] == {
+        "type": "CustomKeys",
+        "keys": {"Authorization": "Bearer ${GITHUB_MCP_PAT}"},
+    }
+    assert services["langmcpconn"]["authType"] == "ProjectManagedIdentity"
+    assert services["langmcpconn"]["audience"] == "https://cognitiveservices.azure.com/"
+    assert services["foundrymcpconn"]["authType"] == "UserEntraToken"
+    assert services["foundrymcpconn"]["audience"] == "https://mcp.ai.azure.com"
+    assert "GITHUB_MCP_PAT" not in services[AGENT_NAME]["env"]
+    for service in services.values():
+        payload = {key: value for key, value in service.items() if key != "env"}
+        references = re.findall(r"\$\{([^}]+)\}", yaml.safe_dump(payload))
+        assert all(reference in service.get("env", {}) for reference in references)
+
+
+def test_readme_uses_own_template_and_existing_local_links() -> None:
+    readme = (SAMPLE_ROOT / "README.md").read_text(encoding="utf-8")
+
+    assert (
+        "--template https://github.com/microsoft/agent-framework/blob/main/"
+        "python/samples/04-hosting/foundry-hosted-agents/responses/foundry_toolbox/azure.yaml --src ."
+    ) in readme
+    assert readme.index("Create a fine-grained personal access token") < readme.index("azd ai agent init --template")
+    assert "--model-deployment <existing-deployment-name>" in readme
+    assert "https://github.com/Azure/azure-dev/issues/10519" in readme
+    assert "azd deploy --all" in readme
+    for target in re.findall(r"\]\(([^)]+)\)", readme):
+        if not target.startswith(("https://", "http://", "#")):
+            assert (SAMPLE_ROOT / target.split("#", 1)[0]).exists(), target
+
+
+def test_legacy_definitions_are_retired_and_local_secrets_excluded() -> None:
+    for filename in ("agent.manifest.yaml", "agent.yaml", "toolbox.yaml"):
+        assert not (SAMPLE_ROOT / filename).exists()
+    for filename in (".azdignore", ".dockerignore"):
+        patterns = (SAMPLE_ROOT / filename).read_text(encoding="utf-8").splitlines()
+        assert ".env" in patterns
+        assert ".azure" in patterns