fix: Dev to main merge

[Dhruvkumar-Microsoft]

Purpose

This pull request introduces a new environment variable for the container app deployments and updates the Bicep-generated infrastructure templates to use a newer Bicep compiler version. The most significant change is the addition of the APP_ENV environment variable set to prod, which helps distinguish production deployments. Additionally, all generated JSON templates now reflect the upgrade to Bicep version 0.46.1.

Environment configuration:

• Added a new environment variable, APP_ENV, with the value prod to the container app environment variables in both infra/avm/main.bicep and infra/bicep/main.bicep. This change is also reflected in the generated JSON templates. [1] [2] [3]

Infrastructure as Code tooling:

• Upgraded the Bicep compiler version from 0.44.1 to 0.46.1 in all generated infrastructure JSON templates, resulting in updated templateHash values throughout the files. This affects both infra/avm/main.json and infra/bicep/main.json. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32]

Does this introduce a breaking change?

• Yes
• No

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
agents
agent_template.py	295	123	58%	99, 134, 139, 161–162, 164, 168, 171, 176, 181–187, 192–194, 207, 211–222, 225–229, 232, 234–236, 240–241, 245, 252, 254, 256, 260, 265, 272, 277, 282, 287, 289, 293, 304, 309, 336–339, 356–358, 363–364, 382–385, 388, 390–400, 405, 409–410, 423, 428, 450–456, 460–462, 497, 513, 518, 529–530, 532, 546, 568–569, 596–597, 656, 661, 668, 682–683, 727, 729, 732–733, 736, 738, 746–747, 750–751
common/config
app_config.py	116	7	93%	164–170
TOTAL	3835	552	85%

Tests	Skipped	Failures	Errors	Time
841	0 💤	0 ❌	0 🔥	8.256s ⏱️

[Copilot]

🟡 Changes recommended

The undocumented CLI-only development credential change can break environments relying on other credential sources.

1 open finding

• Replacing DefaultAzureCredential breaks non-CLI developer authentication · New

What changed in this PR

Adds production environment identification, updates Azure credential selection, and regenerates deployment templates with Bicep 0.46.1.

Changes:

• Adds APP_ENV=prod to MCP container deployments.
• Uses Azure CLI locally and managed identity when deployed.
• Updates related tests and generated ARM templates.

File	Description
src/​mcp_server/​services/​image_service.py	Selects credentials by environment.
src/​backend/​common/​config/​app_config.py	Changes local Azure authentication.
src/​backend/​agents/​agent_template.py	Updates agent credential selection.
src/​tests/​mcp_server/​test_image_service.py	Tests MCP credential branches.
src/​tests/​backend/​common/​config/​test_app_config.py	Updates configuration credential tests.
src/​tests/​backend/​agents/​test_agent_template.py	Updates agent credential mocks.
src/​tests/​agents/​test_agent_template_integration.py	Updates integration credential mocks.
infra/​avm/​main.bicep	Adds MCP production environment variable.
infra/​avm/​main.json	Regenerates the AVM template.
infra/​bicep/​main.bicep	Adds MCP production environment variable.
infra/​bicep/​main.json	Regenerates the vanilla template.
infra/​main.json	Regenerates the deployment router template.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.