Skip to content

Release v0.4.0#308

Merged
placerda merged 4 commits into
mainfrom
release/v0.4.0
Jun 14, 2026
Merged

Release v0.4.0#308
placerda merged 4 commits into
mainfrom
release/v0.4.0

Conversation

@placerda

Copy link
Copy Markdown
Contributor

v0.4.0

Added

  • agentops doctor detects missing OpenAI data-plane RBAC on the Foundry resource (#228, #307)

Changed

  • agentops-pr workflow templates auto-detect a committed baseline at .agentops/baseline/results.json (#155, #306)

Fixed

  • agentops skills install --platform help text now lists cursor (#157, #305)

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

placerda and others added 4 commits June 14, 2026 12:35
The --platform option's help string only mentioned copilot and claude
even though the cursor platform is fully implemented (PLATFORMS table in
src/agentops/services/skills.py and _register_cursor in the same file
write to .cursor/rules/agentops.mdc). Update the help to advertise
cursor so users discover it from agentops skills install --help.

Closes #157

Co-authored-by: placerda <placerda@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…es (#306)

The agentops-pr GitHub Actions and Azure DevOps templates emitted by
'agentops workflow generate' now wrap 'agentops eval run' with a small
bash guard that auto-detects a committed baseline file at
.agentops/baseline/results.json. When the file is present (e.g. dropped
into the repo per docs/tutorial-baseline-comparison.md Section 4), the
eval step compares against it via --baseline. When absent, BASELINE_ARG
stays empty and the bash invocation is byte-equivalent to the prior
behaviour, so existing PR pipelines do not change. Deploy templates
(dev/qa/prod) are intentionally untouched.

Implementation: _eval_substitutions, _github_eval_substitutions, and
_ado_eval_substitutions now accept a kind kwarg and only inject the
baseline-detection bash when kind == 'pr'. Two helper functions
(_github_baseline_autodetect_block, _ado_baseline_autodetect_block) keep
the indentation correct for both the GitHub Actions run block and the
ADO AzureCLI@2 inlineScript.

Tests added in tests/unit/test_cicd.py guard the PR / deploy split for
both GitHub Actions and Azure DevOps. Validation: 946 unit tests pass.

Closes #155

Co-authored-by: placerda <placerda@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…ce (#307)

Adds a new `security.missing_openai_data_plane_rbac` check to `agentops
doctor` that resolves the signed-in principal from the access token `oid`
claim and lists role assignments at the Foundry account scope using
`azure-mgmt-authorization`. When none of *Cognitive Services OpenAI User*,
*Cognitive Services OpenAI Contributor* or *Cognitive Services Contributor*
is present (directly or inherited), Doctor surfaces a WARNING with an
actionable `az role assignment create` command pre-populated with the
principal object id and Foundry account scope.

The check is read-only and skips silently when the SDK, principal or scope
cannot be resolved, matching the existing Doctor fail-open pattern.

Closes #228

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@placerda placerda merged commit 7a22c77 into main Jun 14, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant