# Agentic InfraOps - Copilot Instructions

> All outputs → agent-output/{project}/. Context flows via artifact files + handoffs.

- Skill: `tools-only/agentic-infraops-copilot-instructions-5` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add tools-only/agentic-infraops-copilot-instructions-5`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tools-only/agentic-infraops-copilot-instructions-5/raw
- Safety review: pending (external: skill-scanner PASS, skillspector CAUTION)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tools-only (https://skillmd.com/u/tools-only)
- Updated: 2026-09-29
- Page: https://skillmd.com/skills/tools-only/agentic-infraops-copilot-instructions-5

---

# Agentic InfraOps - Copilot Instructions

> Azure infrastructure engineered by agents. Verified. Well-Architected. Deployable.

## Quick Start

1. Enable subagents: `"github.copilot.chat": { "customAgentInSubagent": { "enabled": true } }`
2. Open Chat (`Ctrl+Shift+I`) → Select **InfraOps Conductor** → Describe your project
3. The Conductor guides you through all 7 steps with approval gates

## 7-Step Workflow

| Step | Agent        | Output                                                                                                    | Gate       |
| ---- | ------------ | --------------------------------------------------------------------------------------------------------- | ---------- |
| 1    | Requirements | `01-requirements.md`                                                                                      | Approval   |
| 2    | Architect    | `02-architecture-assessment.md` + cost estimate                                                           | Approval   |
| 3    | Design (opt) | `03-des-*.{py,png,md}`                                                                                    | —          |
| 4    | Bicep Plan   | `04-implementation-plan.md` + governance + `04-dependency-diagram.py/.png` + `04-runtime-diagram.py/.png` | Approval   |
| 5    | Bicep Code   | `infra/bicep/{project}/`                                                                                  | Validation |
| 6    | Deploy       | `06-deployment-summary.md`                                                                                | Approval   |
| 7    | As-Built     | `07-*.md` documentation suite                                                                             | —          |

All outputs → `agent-output/{project}/`. Context flows via artifact files + handoffs.

## Skills (Auto-Invoked by Agents)

| Skill               | Purpose                                                   |
| ------------------- | --------------------------------------------------------- |
| `azure-defaults`    | Regions, tags, naming, AVM, security, governance, pricing |
| `azure-artifacts`   | Template H2 structures, styling, generation rules         |
| `azure-diagrams`    | Python architecture diagram generation                    |
| `azure-adr`         | Architecture Decision Records                             |
| `github-operations` | GitHub issues, PRs, CLI, Actions, releases                |
| `git-commit`        | Commit message conventions                                |
| `docs-writer`       | Documentation generation                                  |

Agents read skills via: **"Read `.github/skills/{name}/SKILL.md`"** in their body.

## Chat Triggers

- If a user message starts with `gh`, treat it as a GitHub operation.
  Examples: `gh pr create ...`, `gh workflow run ...`, `gh api ...`.
- Automatically follow the `github-operations` skill guidance (MCP-first, `gh` CLI fallback) from `.github/skills/github-operations/SKILL.md`.

### GitHub MCP Priority (Mandatory)

- For issues and pull requests, always prefer GitHub MCP tools over `gh` CLI.
- Only use `gh` for operations that have no equivalent MCP write tool in the current environment.
- In devcontainers, do not run `gh auth` commands unless the user explicitly asks for CLI authentication troubleshooting.

## Key Conventions

- **Default region**: `swedencentral` (exception: Static Web Apps → `westeurope`)
- **Required tags**: `Environment`, `ManagedBy`, `Project`, `Owner`
- **Unique suffix**: `uniqueString(resourceGroup().id)` — generate once, pass everywhere
- **AVM-first**: Always prefer Azure Verified Modules over raw Bicep
- **Security baseline**: TLS 1.2, HTTPS-only, managed identity, Azure AD-only SQL auth

Full details in `.github/skills/azure-defaults/SKILL.md`.

## Key Files

| Path                        | Purpose                                 |
| --------------------------- | --------------------------------------- |
| `.github/agents/*.agent.md` | Agent definitions                       |
| `.github/skills/*/SKILL.md` | Reusable skill knowledge                |
| `.github/instructions/`     | File-type rules (Bicep, Markdown, etc.) |
| `agent-output/{project}/`   | Agent-generated artifacts               |
| `infra/bicep/{project}/`    | Bicep templates                         |
| `mcp/azure-pricing-mcp/`    | Azure Pricing MCP server                |
| `.vscode/mcp.json`          | MCP server configuration                |

## Validation

```bash
bicep build infra/bicep/{project}/main.bicep
bicep lint infra/bicep/{project}/main.bicep
npm run validate
npm run lint:md
```