Merge branch 'main' into fix/keyvault-certificates-san-ip-uri-validator

Author: rohitsinghal4u

eng/common/pipelines/templates/steps/verify-codeowners.yml

@@ -0,0 +1,32 @@
+parameters:
+  - name: ArtifactPath
+    type: string
+    default: $(Build.ArtifactStagingDirectory)/PackageInfo
+  - name: Repo
+    type: string
+    default: $(Build.Repository.Name)
+  - name: SdkTypes
+    type: object
+    default:
+      - client
+      - compat
+      - data
+      - functions
+      - datamovement
+
+steps:
+  - template: /eng/common/pipelines/templates/steps/install-azsdk-cli.yml
+    parameters:
+      Condition: and(succeeded(), ne(variables['Skip.VerifyCodeowners'], 'true'))
+
+  - task: PowerShell@2
+    displayName: Verify Codeowners
+    condition: and(succeeded(), ne(variables['Skip.VerifyCodeowners'], 'true'))
+    inputs:
+      pwsh: true
+      filePath: $(Build.SourcesDirectory)/eng/common/scripts/Test-CodeownersForArtifacts.ps1
+      arguments: >-
+        -AzsdkPath '$(AZSDK)'
+        -PackageInfoDirectory '${{ parameters.ArtifactPath }}'
+        -SdkTypes ${{ join(',', parameters.SdkTypes) }}
+        -Repo '${{ parameters.Repo }}'

eng/common/scripts/Test-CodeownersForArtifacts.ps1

@@ -0,0 +1,59 @@
+[CmdletBinding()]
+param(
+    [string] $AzsdkPath,
+    [string] $PackageInfoDirectory,
+    [array] $SdkTypes,
+    [string] $Repo
+)
+
+. "$PSScriptRoot/common.ps1"
+
+Set-StrictMode -Version 3
+$ErrorActionPreference = 'Stop'
+
+$failedPackages = @()
+
+foreach ($pkgPropertiesFile in Get-ChildItem -Path $PackageInfoDirectory -Filter '*.json' -File) {
+    $pkgProperties = Get-Content -Raw -Path $pkgPropertiesFile | ConvertFrom-Json
+    if ($SdkTypes -notcontains $pkgProperties.SdkType) {
+        Write-Host "Skipping package: $($pkgProperties.Name) $($pkgProperties.DirectoryPath) because its SdkType '$($pkgProperties.SdkType)' is not in the list of SdkTypes to validate."
+        continue
+    }
+
+    Write-Host "Validating codeowners for package: $($pkgProperties.Name) $($pkgProperties.DirectoryPath)"
+
+    if (!$pkgProperties.ReleaseStatus) {
+        LogError "Package $($pkgProperties.Name) at $($pkgProperties.DirectoryPath) is missing a ReleaseStatus property."
+        $failedPackages += $pkgProperties.DirectoryPath
+        continue
+    }
+
+    # Validate packages with a release date (intended to release)
+    if ($pkgProperties.ReleaseStatus -ne "Unreleased") {
+        $output = & $AzsdkPath config codeowners check-package `
+            --directory-path $pkgProperties.DirectoryPath `
+            --repo $Repo `
+            --output json 2>&1
+
+        if ($LASTEXITCODE) {
+            LogError "Codeowners validation failed for package: $($pkgProperties.DirectoryPath)"
+            $output | Write-Host
+            $failedPackages += $pkgProperties.DirectoryPath
+        } else {
+            Write-Host "  Codeowners validation succeeded for package: $($pkgProperties.DirectoryPath)"
+        }
+    } else {
+        Write-Host "  Skipping CODEOWNERS validation, package is not intended to release."
+    }
+}
+
+if ($failedPackages.Count -gt 0) {
+    Write-Host ""
+    Write-Host "Failed Packages:"
+    foreach ($directoryPath in $failedPackages) {
+        LogError "  - $directoryPath does not have sufficient code owners coverage"
+    }
+    LogError "Codeowners validation failed for one or more packages. See http://aka.ms/azsdk/codeowners for instructions to fix the issue."
+    exit 1
+}
+exit 0

scripts/breaking_changes_checker/detect_breaking_changes.py

@@ -606,10 +606,11 @@ def main(
         packages = [f"{package_name}=={version}", "jsondiff==1.2.0"]
         with create_venv_with_package(packages) as venv:
             subprocess.check_call(
-                [venv.env_exe, "-m", "pip", "install", "-r", os.path.join(pkg_dir, "dev_requirements.txt")]
+                [venv.env_exe, "-m", "pip", "install", "-r", os.path.join(pkg_dir, "dev_requirements.txt")],
+                cwd=pkg_dir,
             )
             _LOGGER.info(f"Installed version {version} of {package_name} in a venv")
-            args = [venv.env_exe, __file__, "-t", package_name, "-m", target_module, "--in-venv", "true", "-s", version]
+            args = [venv.env_exe, __file__, "-t", pkg_dir, "-m", target_module, "--in-venv", "true", "-s", version]
             try:
                 subprocess.check_call(args)
             except subprocess.CalledProcessError:
@@ -619,12 +620,12 @@ def main(
         public_api = build_library_report(target_module)
 
         if in_venv:
-            with open("stable.json", "w") as fd:
+            with open(os.path.join(pkg_dir, "stable.json"), "w") as fd:
                 json.dump(public_api, fd, indent=2)
             _LOGGER.info("stable.json is written.")
             return
 
-        with open("current.json", "w") as fd:
+        with open(os.path.join(pkg_dir, "current.json"), "w") as fd:
             json.dump(public_api, fd, indent=2)
         _LOGGER.info("current.json is written.")
 

sdk/agentserver/azure-ai-agentserver-core/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Release History
 
+## 2.0.0b2 (2026-04-17)
+
+### Features Added
+
+- Startup configuration logging — `AgentServerHost` lifespan now emits three INFO-level log lines at startup: platform environment (agent name, version, port, session ID, SSE keep-alive), connectivity (project endpoint and OTLP endpoint masked to scheme://host, Application Insights configured flag), and host options (shutdown timeout, registered protocols). Sensitive values (Application Insights connection string) are never logged.
+- `InboundRequestLoggingMiddleware` — pure-ASGI middleware wired automatically by `AgentServerHost` that logs every inbound HTTP request. Logs method, path (no query string), status code, duration in milliseconds, and correlation headers (`x-request-id`, `x-ms-client-request-id`). Status codes >= 400 are logged at WARNING; unhandled exceptions are logged as status 500 at WARNING. OpenTelemetry trace ID is included when an active trace exists.
+
 ## 2.0.0b1 (2026-04-14)
 
 This is a major architectural rewrite. The package has been redesigned as a lightweight hosting

sdk/agentserver/azure-ai-agentserver-core/azure/ai/agentserver/core/__init__.py

@@ -26,6 +26,7 @@
 from ._base import AgentServerHost
 from ._config import AgentConfig
 from ._errors import create_error_response
+from ._middleware import InboundRequestLoggingMiddleware
 from ._server_version import build_server_version
 from ._tracing import (
     configure_observability,
@@ -41,6 +42,7 @@
 __all__ = [
     "AgentConfig",
     "AgentServerHost",
+    "InboundRequestLoggingMiddleware",
     "build_server_version",
     "configure_observability",
     "create_error_response",

sdk/agentserver/azure-ai-agentserver-core/azure/ai/agentserver/core/_base.py

@@ -6,7 +6,14 @@
 import logging
 import os
 import signal
-from collections.abc import AsyncGenerator, AsyncIterable, AsyncIterator, Awaitable, Callable  # pylint: disable=import-error
+import urllib.parse
+from collections.abc import (  # pylint: disable=import-error
+    AsyncGenerator,
+    AsyncIterable,
+    AsyncIterator,
+    Awaitable,
+    Callable,
+)
 from typing import Any, MutableMapping, Optional, Union
 
 from starlette.applications import Starlette
@@ -17,6 +24,7 @@
 from starlette.types import ASGIApp, Receive, Scope, Send
 
 from . import _config, _tracing
+from ._middleware import InboundRequestLoggingMiddleware
 from ._server_version import build_server_version
 from ._version import VERSION as _CORE_VERSION
 
@@ -25,6 +33,35 @@
 # Pre-built health-check response to avoid per-request allocation.
 _HEALTHY_BODY = b'{"status":"healthy"}'
 
+_NOT_SET = "(not set)"
+
+
+def _mask_uri(uri: str) -> str:
+    """Return only the scheme and host of a URI, hiding path/query/credentials.
+
+    Returns ``"(not set)"`` for empty or whitespace-only values, or
+    ``"(redacted)"`` when the URI cannot be parsed into scheme + host.
+
+    :param uri: The URI to mask.
+    :type uri: str
+    :return: ``"scheme://host[:port]"``, ``"(not set)"``, or ``"(redacted)"``.
+    :rtype: str
+    """
+    stripped = uri.strip() if uri else ""
+    if not stripped:
+        return _NOT_SET
+    try:
+        parsed = urllib.parse.urlparse(stripped)
+        scheme = parsed.scheme or ""
+        host = parsed.hostname or ""
+        if scheme and host:
+            port_suffix = f":{parsed.port}" if parsed.port else ""
+            return f"{scheme}://{host}{port_suffix}"
+        # Best-effort: if parsing fails to extract components, redact entirely
+        return "(redacted)"
+    except Exception:  # pylint: disable=broad-exception-caught
+        return "(redacted)"
+
 
 class _PlatformHeaderMiddleware:
     """Pure-ASGI middleware that adds ``x-platform-server`` header to responses.
@@ -176,6 +213,32 @@ def __init__(
         @contextlib.asynccontextmanager
         async def _lifespan(_app: Starlette) -> AsyncGenerator[None, None]:  # noqa: RUF029
             logger.info("AgentServerHost started")
+
+            # --- Startup configuration logging ---
+            cfg = self.config
+            logger.info(
+                "Platform environment: is_hosted=%s, agent_name=%s, agent_version=%s, "
+                "port=%s, session_id=%s, sse_keepalive_interval=%s",
+                cfg.is_hosted,
+                cfg.agent_name or _NOT_SET,
+                cfg.agent_version or _NOT_SET,
+                cfg.port,
+                cfg.session_id or _NOT_SET,
+                cfg.sse_keepalive_interval if cfg.sse_keepalive_interval > 0 else "disabled",
+            )
+            logger.info(
+                "Connectivity: project_endpoint=%s, otlp_endpoint=%s, appinsights_configured=%s",
+                _mask_uri(cfg.project_endpoint),
+                _mask_uri(cfg.otlp_endpoint),
+                bool(cfg.appinsights_connection_string),
+            )
+            protocols = ", ".join(self._server_version_segments) if self._server_version_segments else _NOT_SET
+            logger.info(
+                "Host options: shutdown_timeout=%ss, protocols=%s",
+                self._graceful_shutdown_timeout,
+                protocols,
+            )
+
             yield
 
             # --- SHUTDOWN: runs once when the server is stopping ---
@@ -210,7 +273,11 @@ async def _lifespan(_app: Starlette) -> AsyncGenerator[None, None]:  # noqa: RUF
             routes=all_routes,
             lifespan=_lifespan,
             middleware=[
-                Middleware(_PlatformHeaderMiddleware, get_server_version=self._build_server_version),
+                Middleware(InboundRequestLoggingMiddleware),  # type: ignore[arg-type]
+                Middleware(  # type: ignore[arg-type]
+                    _PlatformHeaderMiddleware,
+                    get_server_version=self._build_server_version,
+                ),
             ],
             **kwargs,
         )

sdk/agentserver/azure-ai-agentserver-core/azure/ai/agentserver/core/_config.py

@@ -15,6 +15,7 @@
 """
 import os
 from typing import Optional
+
 from typing_extensions import Self
 
 # ======================================================================