From 6510109896b5d900ad5dd401acf2fdfb2a71bc42 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 27 May 2026 12:00:37 +0800
Subject: [PATCH 01/34] ci: bootstrap sample-catalog sync workflow

Copy the sync-sample-catalog pipeline from microsoft-foundry-for-vscode so the foundry-toolkit repo can publish samples/hosted-agent/sample-catalog.json from upstream microsoft-foundry/foundry-samples.

- .github/workflows/sync-sample-catalog.yml: workflow_dispatch-triggered job that runs the generator and opens a draft PR with the regenerated catalog.
- .github/scripts/generate_sample_catalog.mjs: walks the upstream tree, derives displayName/protocol/requiresModel from each agent.yaml + manifest, applies sample-overrides.json, and LLM-generates descriptions.
- samples/hosted-agent/sample-overrides.json: PM-managed per-path framework/requiresModel overrides.

The workflow has only a workflow_dispatch trigger and requires repo secrets (SYNC_APP_ID, SYNC_APP_PRIVATE_KEY, AZURE_OPENAI_ENDPOINT, AZURE_OPENAI_API_KEY, AZURE_OPENAI_DEPLOYMENT) to run; secrets are intentionally not configured yet, so the workflow stays dormant until they are added.
---
 .github/scripts/generate_sample_catalog.mjs | 841 ++++++++++++++++++++
 .github/workflows/sync-sample-catalog.yml   | 186 +++++
 samples/hosted-agent/sample-overrides.json  |   8 +
 3 files changed, 1035 insertions(+)
 create mode 100644 .github/scripts/generate_sample_catalog.mjs
 create mode 100644 .github/workflows/sync-sample-catalog.yml
 create mode 100644 samples/hosted-agent/sample-overrides.json

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
new file mode 100644
index 0000000..2042068
--- /dev/null
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -0,0 +1,841 @@
+// @ts-check
+/**
+ * Generate samples/hosted-agent/sample-catalog.json from the foundry-samples repository.
+ *
+ * Walks the hosted-agents tree in microsoft-foundry/foundry-samples once via
+ * the git-tree API, parses each sample's agent.yaml (+ optional
+ * agent.manifest.yaml) for protocol and model requirements, derives
+ * displayName from the directory name, and — when AZURE_OPENAI_* secrets are
+ * set — fills the description with a short LLM-generated sentence sourced
+ * from the sample's README.md.
+ *
+ * Usage:
+ *   node generate_sample_catalog.mjs <commitSha>
+ *
+ * Environment variables:
+ *   GITHUB_TOKEN        Optional GitHub token for API authentication.
+ *   REPO_ROOT           Repository root (defaults to two levels up from this script).
+ *   SAMPLES_REPO_URL    Source repo URL (defaults to https://github.com/microsoft-foundry/foundry-samples/).
+ *   AZURE_OPENAI_*      Optional; when set, descriptions are LLM-generated.
+ */
+
+import { readFileSync, writeFileSync, existsSync, mkdirSync, appendFileSync } from 'node:fs';
+import { join, dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+const REPO_ROOT = process.env.REPO_ROOT || resolve(__dirname, '..', '..');
+const SAMPLES_REPO_URL = process.env.SAMPLES_REPO_URL || 'https://github.com/microsoft-foundry/foundry-samples/';
+const SAMPLES_REPO_API = 'https://api.github.com/repos/microsoft-foundry/foundry-samples';
+const OUTPUT_PATH = join(REPO_ROOT, 'samples', 'hosted-agent', 'sample-catalog.json');
+const OVERRIDES_PATH = join(REPO_ROOT, 'samples', 'hosted-agent', 'sample-overrides.json');
+
+const GITHUB_TOKEN = process.env.GITHUB_TOKEN || '';
+
+const LANGUAGES = ['python', 'csharp'];
+const FRAMEWORKS = ['agent-framework', 'bring-your-own'];
+
+/** @type {Record<string, {title: string, placeholder: string, options: Record<string, string>}>} */
+const DIMENSION_DEFAULTS = {
+    language: {
+        title: 'Select a Language',
+        placeholder: 'Choose the language for your agent',
+        options: {
+            python: 'Python',
+            csharp: 'C# (.NET)',
+        },
+    },
+    framework: {
+        title: 'Select a Framework',
+        placeholder: 'Choose the framework for your agent',
+        // Insertion order here drives the option order in the generated catalog
+        // (see buildDimensions). Keep the most actively promoted framework first.
+        options: {
+            'copilot-sdk': 'Copilot SDK',
+            'agent-framework': 'Agent Framework',
+            'bring-your-own': 'Bring Your Own',
+        },
+    },
+    protocol: {
+        title: 'Select a Protocol',
+        placeholder: 'Choose the protocol for your agent',
+        options: {
+            responses: 'Responses API',
+            invocations: 'Invocations API',
+        },
+    },
+};
+
+const TEMPLATE_SELECTION = {
+    title: 'Select a Template',
+    placeholder: 'Choose a template for your agent',
+};
+
+// Path segments must be alphanumeric, hyphens, underscores, or dots
+const SAFE_PATH_SEGMENT = /^[a-zA-Z0-9._-]+$/;
+
+/**
+ * Collected anomaly messages surfaced in CI step summary so reviewers do not
+ * silently merge a catalog with missing/derived data. Always populated, even
+ * when running locally without a step-summary file.
+ * @type {string[]}
+ */
+const warnings = [];
+
+/**
+ * Record a warning that should appear in the CI step summary, and mirror it
+ * to stderr for live log visibility.
+ * @param {string} message
+ */
+function warn(message) {
+    warnings.push(message);
+    console.warn(`WARN: ${message}`);
+}
+
+/**
+ * @param {string} url
+ * @returns {Promise<any>}
+ */
+async function fetchJson(url) {
+    /** @type {Record<string, string>} */
+    const headers = {
+        'User-Agent': 'microsoft-foundry-for-vscode-sync',
+        Accept: 'application/vnd.github+json',
+    };
+    if (GITHUB_TOKEN) {
+        headers['Authorization'] = `Bearer ${GITHUB_TOKEN}`;
+    }
+    const response = await fetch(url, { headers });
+    if (!response.ok) {
+        throw new Error(`HTTP ${response.status} for ${url}`);
+    }
+    return response.json();
+}
+
+/**
+ * @param {string} url
+ * @returns {Promise<string>}
+ */
+async function fetchText(url) {
+    /** @type {Record<string, string>} */
+    const headers = { 'User-Agent': 'microsoft-foundry-for-vscode-sync' };
+    if (GITHUB_TOKEN) {
+        headers['Authorization'] = `Bearer ${GITHUB_TOKEN}`;
+    }
+    const response = await fetch(url, { headers });
+    if (!response.ok) {
+        throw new Error(`HTTP ${response.status} for ${url}`);
+    }
+    return response.text();
+}
+
+/**
+ * Validate that a path segment is safe: no traversal, no special chars, no
+ * leading-dot directories (e.g. `.claude`, `.github`) which are tooling
+ * metadata, not sample templates.
+ * @param {string} segment
+ * @returns {boolean}
+ */
+function isSafePathSegment(segment) {
+    if (segment === '.' || segment === '..' || segment.startsWith('.')) {
+        return false;
+    }
+    return SAFE_PATH_SEGMENT.test(segment);
+}
+
+/**
+ * Parse the commit SHA from the CLI argument.
+ * @returns {string}
+ */
+function parseCommitShaArg() {
+    const sha = process.argv[2] || '';
+    if (!sha) {
+        console.error('Usage: node generate_sample_catalog.mjs <commitSha>');
+        process.exit(1);
+    }
+    if (!/^[0-9a-f]{7,40}$/i.test(sha)) {
+        throw new Error(`Invalid commit SHA: "${sha}"`);
+    }
+    return sha;
+}
+
+/**
+ * Fetch the full recursive git tree for a ref. One API call covers the entire
+ * `samples/` hierarchy, which is much cheaper (and more accurate) than walking
+ * the `/contents/` endpoint level-by-level — and it lets us discover samples
+ * at arbitrary nesting depths (e.g. `bring-your-own/voicelive/<template>`)
+ * without hard-coding the layout.
+ *
+ * @param {string} ref
+ * @returns {Promise<{tree: Array<{path: string, type: string}>, truncated: boolean}>}
+ */
+async function fetchRepoTree(ref) {
+    const data = await fetchJson(`${SAMPLES_REPO_API}/git/trees/${ref}?recursive=1`);
+    const tree = Array.isArray(data?.tree) ? data.tree : [];
+    return { tree, truncated: Boolean(data?.truncated) };
+}
+
+/**
+ * Find sample template directories under a `hosted-agents/<framework>/` prefix.
+ * A template is identified by the presence of an `agent.yaml`. When nested
+ * agent.yaml files exist (e.g. a sub-agent declared inside a parent sample),
+ * only the OUTERMOST one is treated as a catalog template — the inner files
+ * are part of the parent sample. Hidden directories (segments beginning with
+ * `.`, e.g. `.claude/skills`) are skipped, as are segments that fail the
+ * `SAFE_PATH_SEGMENT` check.
+ *
+ * @param {Array<{path: string, type: string}>} tree
+ * @param {string} prefix Path prefix ending in `/`, e.g. `samples/python/hosted-agents/agent-framework/`.
+ * @returns {string[]} Repo-relative template directory paths, outermost only.
+ */
+function findTemplateDirsUnder(tree, prefix) {
+    const candidates = tree
+        .filter((entry) => entry.type === 'blob' && entry.path.startsWith(prefix) && entry.path.endsWith('/agent.yaml'))
+        .map((entry) => entry.path.slice(0, -'/agent.yaml'.length))
+        .filter((dir) => {
+            const rel = dir.slice(prefix.length);
+            if (!rel) {
+                return false;
+            }
+            return rel.split('/').every((seg) => isSafePathSegment(seg));
+        })
+        // Lexicographic sort serves two purposes: (1) a parent path always
+        // sorts before its descendants, so the `startsWith` check below
+        // correctly keeps only the outermost agent.yaml; (2) it preserves
+        // upstream's `NN-` numeric prefix ordering in the picker.
+        .sort();
+
+    /** @type {string[]} */
+    const outermost = [];
+    for (const dir of candidates) {
+        if (!outermost.some((existing) => dir.startsWith(`${existing}/`))) {
+            outermost.push(dir);
+        }
+    }
+    return outermost;
+}
+
+/**
+ * Infer protocol when `agent.yaml` does not declare one explicitly. Looks for
+ * a `responses` or `invocations` segment in the path, then for the substring
+ * in the leaf directory name (common for samples like
+ * `hello-world-invocations-voicelive`). Falls back to `responses` and emits a
+ * warning so the catalog reviewer can verify the choice.
+ *
+ * @param {string} templatePath
+ * @returns {'responses' | 'invocations'}
+ */
+function inferProtocolFromPath(templatePath) {
+    const segments = templatePath.split('/');
+    if (segments.includes('responses')) {
+        return 'responses';
+    }
+    if (segments.includes('invocations')) {
+        return 'invocations';
+    }
+    const leaf = segments[segments.length - 1].toLowerCase();
+    if (leaf.includes('invocations')) {
+        return 'invocations';
+    }
+    if (leaf.includes('responses')) {
+        return 'responses';
+    }
+    warn(`Could not infer protocol for "${templatePath}"; defaulting to "responses". Add a "- protocol:" entry to agent.yaml or a sample-overrides.json entry to silence this.`);
+    return 'responses';
+}
+
+/**
+ * Minimal parser for agent.yaml. Extracts the declared protocol(s) and
+ * whether the sample exposes the AZURE_AI_MODEL_DEPLOYMENT_NAME env var
+ * (used as a heuristic for `requiresModel`). Does NOT use eval or a real
+ * YAML library — a regex-y scan is sufficient for our two fields.
+ * @param {string} content
+ * @returns {{ protocols: Array<'responses' | 'invocations'>, hasModelEnv: boolean }}
+ */
+function parseAgentYaml(content) {
+    /** @type {{ protocols: Array<'responses' | 'invocations'>, hasModelEnv: boolean }} */
+    const result = { protocols: [], hasModelEnv: false };
+
+    for (const line of content.split('\n')) {
+        const stripped = line.trim();
+        if (stripped.startsWith('- protocol:')) {
+            const value = stripped.split(':')[1]?.trim();
+            if (value === 'responses' || value === 'invocations') {
+                result.protocols.push(value);
+            }
+        }
+        if (stripped.startsWith('- name:') && stripped.includes('AZURE_AI_MODEL_DEPLOYMENT_NAME')) {
+            result.hasModelEnv = true;
+        }
+    }
+
+    return result;
+}
+
+/**
+ * Fetch and parse agent.yaml for a sample directory.
+ * @param {string} samplePath
+ * @param {string} ref
+ * @returns {Promise<{ protocols: Array<'responses' | 'invocations'>, hasModelEnv: boolean } | null>}
+ */
+async function fetchAgentYaml(samplePath, ref) {
+    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/agent.yaml`;
+    try {
+        const content = await fetchText(rawUrl);
+        return parseAgentYaml(content);
+    } catch {
+        return null;
+    }
+}
+
+/**
+ * Minimal parser for agent.manifest.yaml — detects whether the manifest
+ * declares a top-level `resources:` list containing `kind: model`. Matches
+ * both `- kind: model` and the multi-line continuation form, and limits
+ * scanning to the `resources:` block to avoid false positives.
+ * @param {string} content
+ * @returns {{ hasModelResource: boolean }}
+ */
+function parseAgentManifestYaml(content) {
+    let inResources = false;
+    for (const rawLine of content.split('\n')) {
+        const stripped = rawLine.trim();
+        // Detect top-level key (column 0, e.g. `resources:`, `metadata:`).
+        if (/^[A-Za-z_][\w-]*:/.test(rawLine)) {
+            inResources = stripped.startsWith('resources:');
+            continue;
+        }
+        if (!inResources) {
+            continue;
+        }
+        // Strip optional `- ` so the inline and continuation forms both match.
+        const withoutDash = stripped.replace(/^-\s+/, '');
+        if (withoutDash.startsWith('kind:')) {
+            const value = withoutDash.substring('kind:'.length).trim().replace(/^["']|["']$/g, '');
+            if (value === 'model') {
+                return { hasModelResource: true };
+            }
+        }
+    }
+    return { hasModelResource: false };
+}
+
+/**
+ * Fetch and parse agent.manifest.yaml for a sample directory.
+ * @param {string} samplePath
+ * @param {string} ref
+ * @returns {Promise<{ hasModelResource: boolean } | null>}
+ */
+async function fetchAgentManifestYaml(samplePath, ref) {
+    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/agent.manifest.yaml`;
+    try {
+        const content = await fetchText(rawUrl);
+        return parseAgentManifestYaml(content);
+    } catch {
+        return null;
+    }
+}
+
+// Azure OpenAI configuration (from GitHub Secrets via env vars)
+const AZURE_OPENAI_ENDPOINT = process.env.AZURE_OPENAI_ENDPOINT || '';
+const AZURE_OPENAI_API_KEY = process.env.AZURE_OPENAI_API_KEY || '';
+const AZURE_OPENAI_DEPLOYMENT = process.env.AZURE_OPENAI_DEPLOYMENT || 'gpt-4o-mini';
+
+/**
+ * Fetch README.md content for a sample directory.
+ * @param {string} samplePath
+ * @param {string} ref
+ * @returns {Promise<string | null>}
+ */
+async function fetchReadme(samplePath, ref) {
+    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/README.md`;
+    try {
+        return await fetchText(rawUrl);
+    } catch {
+        return null;
+    }
+}
+
+/**
+ * Call Azure OpenAI to generate a description from README content. We
+ * intentionally do NOT ask the LLM for displayName — the folder name (with
+ * numeric-prefix stripped, dashes turned into spaces, and Title Case)
+ * produces more consistent results across the catalog and is easier for PMs
+ * to predict at review time.
+ *
+ * @param {string} readmeContent
+ * @param {string} samplePath
+ * @returns {Promise<{ description: string } | null>}
+ */
+async function generateWithLLM(readmeContent, samplePath) {
+    if (!AZURE_OPENAI_ENDPOINT || !AZURE_OPENAI_API_KEY) {
+        return null;
+    }
+
+    const apiUrl = `${AZURE_OPENAI_ENDPOINT}/openai/deployments/${AZURE_OPENAI_DEPLOYMENT}/chat/completions?api-version=2024-08-01-preview`;
+
+    const systemPrompt = `You generate one-sentence descriptions for a VS Code template picker.
+The user has already selected language, framework, and protocol before seeing these items, so the description must NOT repeat those choices.
+
+Rules:
+- One sentence, max 100 characters
+- Plain text, no markdown
+- Describe what the sample does, not how it is implemented
+- Do NOT include language names, protocol names, framework names, or words like "Sample" / "Demo"
+
+Examples:
+  {"description": "Minimal agent that echoes a response from a Foundry model."}
+  {"description": "Conversational agent with multi-turn session history."}
+  {"description": "Agent with local function tools for hotel search."}
+  {"description": "Agent that discovers and invokes tools from a remote MCP server."}
+  {"description": "Agent that saves and retrieves notes using function calling."}
+
+Respond ONLY with a JSON object: {"description": "..."}`;
+
+    const userPrompt = `Path: ${samplePath}
+
+README.md:
+${readmeContent.substring(0, 2000)}`;
+
+    const body = {
+        messages: [
+            { role: 'system', content: systemPrompt },
+            { role: 'user', content: userPrompt },
+        ],
+        temperature: 0,
+        max_tokens: 120,
+    };
+
+    try {
+        const response = await fetch(apiUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'api-key': AZURE_OPENAI_API_KEY,
+            },
+            body: JSON.stringify(body),
+        });
+
+        if (!response.ok) {
+            warn(`LLM API returned ${response.status} for ${samplePath}; description will be left empty.`);
+            return null;
+        }
+
+        const data = await response.json();
+        const content = data.choices?.[0]?.message?.content?.trim();
+        if (!content) {
+            return null;
+        }
+
+        // Parse JSON response — strip markdown code fences if present
+        const jsonStr = content.replace(/^```json\s*/, '').replace(/\s*```$/, '');
+        const parsed = JSON.parse(jsonStr);
+
+        const description = typeof parsed.description === 'string' ? parsed.description.trim() : '';
+        if (!description) {
+            return null;
+        }
+
+        return { description };
+    } catch (/** @type {any} */ err) {
+        warn(`LLM call failed for ${samplePath}: ${err.message}`);
+        return null;
+    }
+}
+
+/**
+ * Brand and acronym casing overrides applied during displayName derivation.
+ * Keys are lower-case tokens; values are the canonical user-facing rendering.
+ * Add entries here when a new acronym or brand appears in a sample folder
+ * name so the template picker doesn't show "Github" / "Mcp" / "Sdk".
+ * @type {Record<string, string>}
+ */
+const DISPLAY_NAME_TOKEN_CASING = {
+    ag: 'AG',
+    ai: 'AI',
+    api: 'API',
+    aws: 'AWS',
+    cli: 'CLI',
+    gcp: 'GCP',
+    github: 'GitHub',
+    llm: 'LLM',
+    mcp: 'MCP',
+    openai: 'OpenAI',
+    rag: 'RAG',
+    sdk: 'SDK',
+    sso: 'SSO',
+    ui: 'UI',
+};
+
+/**
+ * Derive a displayName from the template's directory name. Strips a leading
+ * numeric ordering prefix (`09-`, `12_`) so upstream reorderings don't bleed
+ * into the picker, then converts dash/underscore tokens into Title Case
+ * words and applies `DISPLAY_NAME_TOKEN_CASING` for known acronyms/brands:
+ * `09-declarative-customer-support` -> `Declarative Customer Support`,
+ * `azure-search-rag` -> `Azure Search RAG`.
+ *
+ * @param {string} samplePath
+ * @returns {string}
+ */
+function displayNameFromPath(samplePath) {
+    const dirName = samplePath.split('/').pop() || '';
+    return dirName
+        .replace(/^\d+[-_]/, '')
+        .split(/[-_]/)
+        .filter((w) => w.length > 0)
+        .map((w) => DISPLAY_NAME_TOKEN_CASING[w.toLowerCase()] ?? (w.charAt(0).toUpperCase() + w.slice(1)))
+        .join(' ');
+}
+
+/**
+ * Scan the foundry-samples repo and build the flat template list. Uses one
+ * recursive git-tree call to enumerate every `agent.yaml` under each
+ * `<language>/hosted-agents/<framework>/` prefix, regardless of intermediate
+ * directories. This supports both the canonical layout
+ * (`<framework>/<protocol>/<template>`), the flat layout
+ * (`<framework>/<template>`), and category-grouped layouts such as
+ * `bring-your-own/voicelive/hello-world-invocations-voicelive`.
+ *
+ * @param {string} commitSha
+ * @returns {Promise<Array<{language: string, framework: string, protocol: string, displayName: string, description: string, path: string, requiresModel: boolean}>>}
+ */
+async function scanTemplates(commitSha) {
+    /** @type {Array<{language: string, framework: string, protocol: string, displayName: string, description: string, path: string, requiresModel: boolean}>} */
+    const templates = [];
+
+    const { tree, truncated } = await fetchRepoTree(commitSha);
+    if (truncated) {
+        warn(`GitHub git-tree API returned truncated=true for ${commitSha}; some samples may be missing from the catalog. Consider pinning to a smaller subtree or re-running.`);
+    }
+
+    for (const language of LANGUAGES) {
+        for (const framework of FRAMEWORKS) {
+            const prefix = `samples/${language}/hosted-agents/${framework}/`;
+            const templateDirs = findTemplateDirsUnder(tree, prefix);
+
+            for (const templatePath of templateDirs) {
+                const agentInfo = await fetchAgentYaml(templatePath, commitSha);
+                if (!agentInfo) {
+                    warn(`Could not fetch or parse agent.yaml for "${templatePath}"; skipping this template.`);
+                    continue;
+                }
+
+                /** @type {'responses' | 'invocations'} */
+                const protocol = agentInfo.protocols.length > 0
+                    ? agentInfo.protocols[0]
+                    : inferProtocolFromPath(templatePath);
+
+                let requiresModel = agentInfo.hasModelEnv;
+                // Only consult agent.manifest.yaml when agent.yaml reported no
+                // model env; otherwise we already default to `true`.
+                if (!requiresModel) {
+                    const manifestInfo = await fetchAgentManifestYaml(templatePath, commitSha);
+                    if (manifestInfo?.hasModelResource) {
+                        requiresModel = true;
+                    }
+                }
+
+                templates.push({
+                    language,
+                    framework,
+                    protocol,
+                    displayName: '',
+                    description: '',
+                    path: templatePath,
+                    requiresModel,
+                });
+            }
+        }
+    }
+
+    return templates;
+}
+
+/**
+ * Build the dimensions section from discovered templates and defaults.
+ * Option order follows the insertion order of `DIMENSION_DEFAULTS[dim].options`
+ * so we have UX control (e.g. promote `copilot-sdk` ahead of
+ * `agent-framework`). Any id seen in the scanned templates but not declared in
+ * the defaults is appended at the end in alphabetical order, so a new
+ * framework added upstream does not break the build — just shows up last.
+ *
+ * @param {Array<{language: string, framework: string, protocol: string}>} templates
+ */
+function buildDimensions(templates) {
+    /** @type {Record<string, {title: string, placeholder: string, options: Array<{id: string, displayName: string}>}>} */
+    const dimensions = {};
+
+    for (const dimKey of /** @type {const} */ (['language', 'framework', 'protocol'])) {
+        const defaults = DIMENSION_DEFAULTS[dimKey];
+        const seenIds = new Set(templates.map((t) => t[dimKey]));
+        const declaredOrder = Object.keys(defaults.options);
+        const orderedIds = [
+            ...declaredOrder.filter((id) => seenIds.has(id)),
+            ...[...seenIds].filter((id) => !declaredOrder.includes(id)).sort(),
+        ];
+        const options = orderedIds.map((id) => ({
+            id,
+            displayName: defaults.options[id] || id,
+        }));
+        dimensions[dimKey] = {
+            title: defaults.title,
+            placeholder: defaults.placeholder,
+            options,
+        };
+    }
+
+    return dimensions;
+}
+
+/**
+ * Preserve existing displayName and description from the current catalog.
+ * Only non-empty existing values are kept — never overwritten.
+ * @param {Array<{displayName: string, description: string, path: string}>} templates
+ */
+function mergeExistingDisplayFields(templates) {
+    if (!existsSync(OUTPUT_PATH)) {
+        return;
+    }
+
+    try {
+        const existing = JSON.parse(readFileSync(OUTPUT_PATH, 'utf-8'));
+        /** @type {Map<string, {displayName?: string, description?: string}>} */
+        const existingByPath = new Map();
+        for (const t of existing.templates || []) {
+            if (t.path) {
+                existingByPath.set(t.path, t);
+            }
+        }
+
+        const scannedPaths = new Set(templates.map((t) => t.path));
+        for (const template of templates) {
+            const prev = existingByPath.get(template.path);
+            if (prev) {
+                if (prev.displayName) {
+                    template.displayName = prev.displayName;
+                }
+                if (prev.description) {
+                    template.description = prev.description;
+                }
+            }
+        }
+        // Surface paths that exist in the prior catalog but were not produced
+        // by this scan — upstream likely renamed or removed the sample, and any
+        // PM-edited displayName/description on it has been dropped.
+        for (const [path, prev] of existingByPath) {
+            if (scannedPaths.has(path)) {
+                continue;
+            }
+            const hadEdits = Boolean(prev.displayName || prev.description);
+            const suffix = hadEdits ? ' Previously-edited displayName/description were dropped.' : '';
+            warn(`Template "${path}" was in the previous catalog but no longer matches any scanned sample (upstream may have renamed or removed it).${suffix}`);
+        }
+    } catch (/** @type {any} */ err) {
+        warn(`Could not read existing catalog at ${OUTPUT_PATH}: ${err.message}. Existing displayName/description values were NOT preserved this run.`);
+    }
+}
+
+/**
+ * Load source-controlled per-path overrides. Returns an empty map when the
+ * file is missing or unreadable so generation never fails on it.
+ *
+ * @returns {Map<string, Record<string, unknown>>}
+ */
+function loadOverrides() {
+    /** @type {Map<string, Record<string, unknown>>} */
+    const byPath = new Map();
+    if (!existsSync(OVERRIDES_PATH)) {
+        return byPath;
+    }
+    try {
+        const raw = JSON.parse(readFileSync(OVERRIDES_PATH, 'utf-8'));
+        const entries = (raw && typeof raw === 'object' && raw.byPath) || {};
+        for (const [path, fields] of Object.entries(entries)) {
+            if (fields && typeof fields === 'object') {
+                byPath.set(path, /** @type {Record<string, unknown>} */ (fields));
+            }
+        }
+    } catch (/** @type {any} */ err) {
+        warn(`Could not read sample-overrides.json: ${err.message}`);
+    }
+    return byPath;
+}
+
+/**
+ * Shallow-merge per-path overrides onto scanned templates. Lets us correct
+ * structural fields (e.g. `framework: "copilot-sdk"` for a sample that lives
+ * under `bring-your-own/` upstream) without touching upstream or hand-editing
+ * the generated catalog. Unknown override paths are logged but never fail
+ * the build — upstream may have moved a sample.
+ *
+ * @param {Array<{path: string} & Record<string, unknown>>} templates
+ * @param {Map<string, Record<string, unknown>>} overrides
+ */
+function applyOverrides(templates, overrides) {
+    if (overrides.size === 0) {
+        return;
+    }
+    /** @type {Set<string>} */
+    const seenPaths = new Set();
+    for (const template of templates) {
+        seenPaths.add(template.path);
+        const fields = overrides.get(template.path);
+        if (fields) {
+            Object.assign(template, fields);
+        }
+    }
+    for (const path of overrides.keys()) {
+        if (!seenPaths.has(path)) {
+            warn(`Override for "${path}" did not match any scanned template; check sample-overrides.json (upstream may have moved or renamed the sample).`);
+        }
+    }
+}
+
+/**
+ * Auto-fill empty displayName and description fields.
+ *
+ * displayName is ALWAYS derived from the template's directory name when empty
+ * — the LLM is not consulted, because folder-name derivation is deterministic
+ * and PM-predictable. Existing PM-curated displayName values are preserved by
+ * the prior `mergeExistingDisplayFields` step, so this only affects newly
+ * scanned templates.
+ *
+ * description is filled by the LLM (when configured) using the sample's
+ * README as context. Without LLM credentials the description stays empty and
+ * gets surfaced as an anomaly in the step summary.
+ *
+ * @param {Array<{displayName: string, description: string, path: string}>} templates
+ * @param {string} commitSha
+ */
+async function autoFillDisplayFields(templates, commitSha) {
+    // Fill displayName first — deterministic, no API calls.
+    for (const template of templates) {
+        if (!template.displayName) {
+            template.displayName = displayNameFromPath(template.path);
+        }
+    }
+
+    const needsDescription = templates.filter((t) => !t.description);
+    if (needsDescription.length === 0) {
+        console.log('All templates already have a description.');
+    } else {
+        const hasLLM = Boolean(AZURE_OPENAI_ENDPOINT && AZURE_OPENAI_API_KEY);
+        if (hasLLM) {
+            console.log(`Generating descriptions for ${needsDescription.length} templates using LLM...`);
+            for (const template of needsDescription) {
+                const readme = await fetchReadme(template.path, commitSha);
+                if (!readme) {
+                    continue;
+                }
+                const result = await generateWithLLM(readme, template.path);
+                if (result?.description) {
+                    template.description = result.description;
+                }
+            }
+        } else {
+            console.log(`${needsDescription.length} templates need a description but no LLM is configured; leaving empty (will be flagged as anomalies).`);
+        }
+    }
+
+    // displayName always gets filled by the folder-name fallback above, so
+    // anomaly detection here is description-only.
+    for (const template of templates) {
+        if (!template.description) {
+            warn(`Template "${template.path}" is missing: description. PM should fill it before merge.`);
+        }
+    }
+}
+
+async function main() {
+    const commitSha = parseCommitShaArg();
+    console.log(`Using commit: ${commitSha}`);
+
+    console.log('Scanning templates...');
+    const templates = await scanTemplates(commitSha);
+    console.log(`Found ${templates.length} templates`);
+
+    // Step 1: Preserve existing PM-curated displayName/description values.
+    mergeExistingDisplayFields(templates);
+
+    // Step 2: Apply source-controlled per-path overrides (structural fields like
+    // `framework` that the upstream tree layout cannot express on its own).
+    applyOverrides(templates, loadOverrides());
+
+    // Step 3: Fill remaining empties — displayName from folder name (always),
+    // description from the LLM when configured.
+    await autoFillDisplayFields(templates, commitSha);
+
+    const dimensions = buildDimensions(templates);
+
+    const catalog = {
+        commitSha,
+        repo: SAMPLES_REPO_URL,
+        generatedAt: new Date().toISOString().replace(/\.\d{3}Z$/, 'Z'),
+        dimensions,
+        templateSelection: TEMPLATE_SELECTION,
+        templates,
+    };
+
+    const outputDir = dirname(OUTPUT_PATH);
+    mkdirSync(outputDir, { recursive: true });
+    writeFileSync(OUTPUT_PATH, JSON.stringify(catalog, null, 4) + '\n', 'utf-8');
+
+    console.log(`Wrote ${OUTPUT_PATH}`);
+
+    writeSummary(templates.length);
+}
+
+/**
+ * Append a Markdown report to `$GITHUB_STEP_SUMMARY` (when running in CI) that
+ * surfaces the warnings collected during this run. Reviewers otherwise have
+ * to scroll through raw job logs to notice anomalies like templates missing
+ * descriptions or unmatched overrides. Locally (no env var) this is a no-op.
+ *
+ * @param {number} templateCount
+ */
+function writeSummary(templateCount) {
+    const summaryPath = process.env.GITHUB_STEP_SUMMARY;
+    if (!summaryPath) {
+        if (warnings.length > 0) {
+            console.warn(`\nCatalog generation produced ${warnings.length} warning(s) (see WARN lines above).`);
+        }
+        return;
+    }
+
+    const lines = [
+        '',
+        '## Sample Catalog Generation',
+        '',
+        `- Templates discovered: **${templateCount}**`,
+        `- Warnings emitted: **${warnings.length}**`,
+        '',
+    ];
+
+    if (warnings.length > 0) {
+        lines.push('### ⚠ Anomalies');
+        lines.push('');
+        lines.push('These were logged during generation and may need human attention before merging:');
+        lines.push('');
+        for (const message of warnings) {
+            lines.push(`- ${message}`);
+        }
+        lines.push('');
+    } else {
+        lines.push('No anomalies detected. ✅');
+        lines.push('');
+    }
+
+    try {
+        appendFileSync(summaryPath, lines.join('\n'), 'utf-8');
+    } catch (/** @type {any} */ err) {
+        console.warn(`Could not append to GITHUB_STEP_SUMMARY: ${err.message}`);
+    }
+}
+
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
new file mode 100644
index 0000000..54b6dd2
--- /dev/null
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -0,0 +1,186 @@
+name: Sync Sample Catalog
+
+on:
+  workflow_dispatch:
+    inputs:
+      commit_sha:
+        description: "Commit SHA from microsoft-foundry/foundry-samples to pin to"
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  pull-requests: write
+
+# A single in-flight sync at a time — a re-trigger cancels any earlier run
+# rather than racing it for the same PR branch.
+concurrency:
+  group: sync-sample-catalog-${{ github.ref_name }}
+  cancel-in-progress: true
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    env:
+      PR_LABEL_CANDIDATES: |
+        automated-pr
+        area:samples
+        area:hosted-agent
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.SYNC_APP_ID }}
+          private-key: ${{ secrets.SYNC_APP_PRIVATE_KEY }}
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Generate sample catalog
+        env:
+          REPO_ROOT: ${{ github.workspace }}
+          GITHUB_TOKEN: ${{ github.token }}
+          AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
+          AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
+          AZURE_OPENAI_DEPLOYMENT: ${{ secrets.AZURE_OPENAI_DEPLOYMENT }}
+        run: node .github/scripts/generate_sample_catalog.mjs "${{ inputs.commit_sha }}"
+
+      - name: Detect catalog changes
+        id: diff
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          catalog_file="samples/hosted-agent/sample-catalog.json"
+
+          if [[ ! -f "$catalog_file" ]]; then
+            echo "Catalog file not generated."
+            echo "has_changes=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          # Stage the file so git diff detects both new and modified files
+          git add "$catalog_file"
+
+          if git diff --cached --quiet -- "$catalog_file"; then
+            echo "No changes to sample catalog."
+            echo "has_changes=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          echo "Catalog has changes:"
+          git diff --cached --stat -- "$catalog_file"
+
+          {
+            echo "## Sample Catalog Sync"
+            echo
+            echo "The sample catalog was regenerated from \`microsoft-foundry/foundry-samples\`."
+            echo
+            echo "### Changed files"
+            echo "- \`$catalog_file\`"
+          } >> "$GITHUB_STEP_SUMMARY"
+
+          echo "has_changes=true" >> "$GITHUB_OUTPUT"
+
+      - name: Resolve pull request labels
+        if: steps.diff.outputs.has_changes == 'true'
+        id: labels
+        shell: bash
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          set -euo pipefail
+
+          existing_labels=$(gh api --paginate repos/${{ github.repository }}/labels --jq '.[].name')
+          matched_labels=""
+
+          while IFS= read -r candidate; do
+            if [[ -z "$candidate" ]]; then
+              continue
+            fi
+
+            if grep -Fqx "$candidate" <<< "$existing_labels"; then
+              matched_labels+="$candidate"
+              matched_labels+=$'\n'
+            fi
+          done <<< "$PR_LABEL_CANDIDATES"
+
+          {
+            echo "labels<<EOF"
+            printf '%s' "$matched_labels"
+            echo
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Generate PR branch name
+        if: steps.diff.outputs.has_changes == 'true'
+        id: branch
+        shell: bash
+        run: |
+          date_suffix=$(date -u +%Y%m%d)
+          echo "name=ci/sync-sample-catalog-${{ github.ref_name }}-${date_suffix}" >> "$GITHUB_OUTPUT"
+
+      - name: Create draft pull request
+        if: steps.diff.outputs.has_changes == 'true'
+        id: cpr
+        uses: peter-evans/create-pull-request@v8
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          branch: ${{ steps.branch.outputs.name }}
+          base: ${{ github.ref_name }}
+          delete-branch: true
+          draft: always-true
+          commit-message: |
+            ci: sync sample catalog from foundry-samples (${{ github.ref_name }})
+          title: "ci: sync sample catalog from foundry-samples (${{ github.ref_name }})"
+          body: |
+            ## Summary
+            This automated draft PR updates `samples/hosted-agent/sample-catalog.json` by scanning
+            the `microsoft-foundry/foundry-samples` repository for hosted-agent sample templates.
+
+            ## What changed
+            - New templates added or removed based on the upstream repo structure.
+            - `commitSha` pinned to the upstream commit supplied via the `commit_sha` workflow input.
+            - `requiresModel` and `protocol` values re-derived from each sample's `agent.yaml`.
+            - `displayName` derived from each template's folder name; `description` LLM-generated when empty.
+            - PM-edited `displayName` and `description` values are preserved from the previous catalog.
+
+            ## Reviewer Checks
+            - Confirm new templates have correct `language`, `framework`, and `protocol` values.
+            - Review the auto-generated `description` for any new templates.
+            - Confirm no PM-edited display fields were accidentally lost.
+          labels: ${{ steps.labels.outputs.labels }}
+          add-paths: |
+            samples/hosted-agent/sample-catalog.json
+
+      - name: Report PR result
+        if: steps.diff.outputs.has_changes == 'true'
+        shell: bash
+        env:
+          PR_OPERATION: ${{ steps.cpr.outputs.pull-request-operation }}
+          PR_URL: ${{ steps.cpr.outputs.pull-request-url }}
+          PR_NUMBER: ${{ steps.cpr.outputs.pull-request-number }}
+        run: |
+          echo "PR operation: $PR_OPERATION"
+          echo "PR URL: $PR_URL"
+
+          {
+            echo
+            echo "## Pull Request"
+            echo
+            if [[ -n "$PR_URL" ]]; then
+              echo "- Operation: \`$PR_OPERATION\`"
+              echo "- PR: [#${PR_NUMBER:-?}]($PR_URL)"
+            else
+              echo "- No pull request was created or updated (peter-evans/create-pull-request returned no URL)."
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
diff --git a/samples/hosted-agent/sample-overrides.json b/samples/hosted-agent/sample-overrides.json
new file mode 100644
index 0000000..43a3b06
--- /dev/null
+++ b/samples/hosted-agent/sample-overrides.json
@@ -0,0 +1,8 @@
+{
+    "byPath": {
+        "samples/python/hosted-agents/bring-your-own/invocations/github-copilot": {
+            "framework": "copilot-sdk",
+            "requiresModel": false
+        }
+    }
+}

From bfb88ebb45d0524d0783dc76f194acfef178c281 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 27 May 2026 12:57:47 +0800
Subject: [PATCH 02/34] ci: drop GitHub App token, use built-in GITHUB_TOKEN

Org-level GitHub App creation requires admin permission this repo's maintainer does not have. Since foundry-toolkit has no PR checks today, the anti-recursion limitation of GITHUB_TOKEN (auto-PRs don't trigger downstream workflows) is acceptable. Drop the create-github-app-token step and the SYNC_APP_ID / SYNC_APP_PRIVATE_KEY secret requirements; comment in the workflow records the trade-off so a future switch back to a GitHub App is obvious.
---
 .github/workflows/sync-sample-catalog.yml | 16 +++++++---------
 1 file changed, 7 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
index 54b6dd2..542edf8 100644
--- a/.github/workflows/sync-sample-catalog.yml
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -33,13 +33,6 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Generate GitHub App token
-        id: app-token
-        uses: actions/create-github-app-token@v1
-        with:
-          app-id: ${{ secrets.SYNC_APP_ID }}
-          private-key: ${{ secrets.SYNC_APP_PRIVATE_KEY }}
-
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
@@ -96,7 +89,7 @@ jobs:
         id: labels
         shell: bash
         env:
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
 
@@ -134,7 +127,12 @@ jobs:
         id: cpr
         uses: peter-evans/create-pull-request@v8
         with:
-          token: ${{ steps.app-token.outputs.token }}
+          # Uses the built-in GITHUB_TOKEN; PRs opened with this token will
+          # NOT trigger downstream workflows (GitHub's anti-recursion rule).
+          # That is fine for this repo today — there are no PR checks that
+          # need to run on the auto-PR. If that changes, switch to a GitHub
+          # App token (actions/create-github-app-token@v1).
+          token: ${{ secrets.GITHUB_TOKEN }}
           branch: ${{ steps.branch.outputs.name }}
           base: ${{ github.ref_name }}
           delete-branch: true

From 6225353b53bdd41453298d86acac09e5360beb54 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 27 May 2026 13:14:02 +0800
Subject: [PATCH 03/34] ci(temp): push trigger + hardcoded SHA for bootstrap
 smoke test

workflow_dispatch requires the workflow file to exist on the default branch before dispatch is allowed (404 otherwise). Temporarily add a push trigger scoped to this feature branch and a hardcoded DEFAULT_COMMIT_SHA fallback so committing alone runs the pipeline end-to-end. To be reverted before merge.
---
 .github/workflows/sync-sample-catalog.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
index 542edf8..8c5f536 100644
--- a/.github/workflows/sync-sample-catalog.yml
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -7,6 +7,13 @@ on:
         description: "Commit SHA from microsoft-foundry/foundry-samples to pin to"
         required: true
         type: string
+  # TEMP: bootstrap-only — lets us smoke-test the pipeline from the feature
+  # branch before it lands on the default branch (workflow_dispatch requires
+  # the file to exist on the default branch first). Revert this whole block
+  # together with the DEFAULT_COMMIT_SHA env below before merging.
+  push:
+    branches:
+      - yimin/sync-catalog-bootstrap
 
 permissions:
   contents: write
@@ -45,7 +52,10 @@ jobs:
           AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
           AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
           AZURE_OPENAI_DEPLOYMENT: ${{ secrets.AZURE_OPENAI_DEPLOYMENT }}
-        run: node .github/scripts/generate_sample_catalog.mjs "${{ inputs.commit_sha }}"
+          # TEMP: bootstrap-only fallback for push-triggered smoke test. Revert
+          # together with the `push` trigger block above before merging.
+          DEFAULT_COMMIT_SHA: '19b441d474ec963c61a509692fdd81d5fb707d71'
+        run: node .github/scripts/generate_sample_catalog.mjs "${{ inputs.commit_sha || env.DEFAULT_COMMIT_SHA }}"
 
       - name: Detect catalog changes
         id: diff

From 148795d7c46bb8b0f514583bf45e4d0df1668412 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 27 May 2026 14:34:55 +0800
Subject: [PATCH 04/34] ci: restore GitHub App token

Org policy blocks GITHUB_TOKEN from creating PRs (see https://github.com/microsoft/foundry-toolkit/actions/runs/26492230324). Switch back to the App-token approach: a personal GitHub App was created and installed on this repo, with App ID + private key stored in SYNC_APP_ID / SYNC_APP_PRIVATE_KEY secrets. This reverts the GITHUB_TOKEN simplification commit; the temporary push trigger + DEFAULT_COMMIT_SHA are still in place for one more smoke test before final cleanup.
---
 .github/workflows/sync-sample-catalog.yml | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
index 8c5f536..a34d143 100644
--- a/.github/workflows/sync-sample-catalog.yml
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -40,6 +40,13 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.SYNC_APP_ID }}
+          private-key: ${{ secrets.SYNC_APP_PRIVATE_KEY }}
+
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
@@ -99,7 +106,7 @@ jobs:
         id: labels
         shell: bash
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
         run: |
           set -euo pipefail
 
@@ -137,12 +144,7 @@ jobs:
         id: cpr
         uses: peter-evans/create-pull-request@v8
         with:
-          # Uses the built-in GITHUB_TOKEN; PRs opened with this token will
-          # NOT trigger downstream workflows (GitHub's anti-recursion rule).
-          # That is fine for this repo today — there are no PR checks that
-          # need to run on the auto-PR. If that changes, switch to a GitHub
-          # App token (actions/create-github-app-token@v1).
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
           branch: ${{ steps.branch.outputs.name }}
           base: ${{ github.ref_name }}
           delete-branch: true

From 144285c3a4826f636471660bb188c44195aa8b65 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 27 May 2026 14:38:25 +0800
Subject: [PATCH 05/34] ci: retrigger sync workflow smoke test


From c1c12c4d1f7c16a8a895129b2f4a94d4d32ec75d Mon Sep 17 00:00:00 2001
From: Yimin-Jin <139844715+Yimin-Jin@users.noreply.github.com>
Date: Wed, 27 May 2026 06:40:48 +0000
Subject: [PATCH 06/34] ci: sync sample catalog from foundry-samples
 (yimin/sync-catalog-bootstrap)

---
 samples/hosted-agent/sample-catalog.json | 527 +++++++++++++++++++++++
 1 file changed, 527 insertions(+)
 create mode 100644 samples/hosted-agent/sample-catalog.json

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
new file mode 100644
index 0000000..58ba369
--- /dev/null
+++ b/samples/hosted-agent/sample-catalog.json
@@ -0,0 +1,527 @@
+{
+    "commitSha": "19b441d474ec963c61a509692fdd81d5fb707d71",
+    "repo": "https://github.com/microsoft-foundry/foundry-samples/",
+    "generatedAt": "2026-05-27T06:40:47Z",
+    "dimensions": {
+        "language": {
+            "title": "Select a Language",
+            "placeholder": "Choose the language for your agent",
+            "options": [
+                {
+                    "id": "python",
+                    "displayName": "Python"
+                },
+                {
+                    "id": "csharp",
+                    "displayName": "C# (.NET)"
+                }
+            ]
+        },
+        "framework": {
+            "title": "Select a Framework",
+            "placeholder": "Choose the framework for your agent",
+            "options": [
+                {
+                    "id": "copilot-sdk",
+                    "displayName": "Copilot SDK"
+                },
+                {
+                    "id": "agent-framework",
+                    "displayName": "Agent Framework"
+                },
+                {
+                    "id": "bring-your-own",
+                    "displayName": "Bring Your Own"
+                }
+            ]
+        },
+        "protocol": {
+            "title": "Select a Protocol",
+            "placeholder": "Choose the protocol for your agent",
+            "options": [
+                {
+                    "id": "responses",
+                    "displayName": "Responses API"
+                },
+                {
+                    "id": "invocations",
+                    "displayName": "Invocations API"
+                }
+            ]
+        }
+    },
+    "templateSelection": {
+        "title": "Select a Template",
+        "placeholder": "Choose a template for your agent"
+    },
+    "templates": [
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "invocations",
+            "displayName": "Basic",
+            "description": "Agent with in-memory session management for multi-turn conversations.",
+            "path": "samples/python/hosted-agents/agent-framework/invocations/01-basic",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Basic",
+            "description": "Agent that supports multi-turn conversations with response tracking.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/01-basic",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Tools",
+            "description": "Agent with custom tools like weather lookup callable during conversation.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/02-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "MCP",
+            "description": "Agent that dynamically discovers and invokes tools from a remote GitHub Copilot MCP server.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/03-mcp",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox",
+            "description": "Agent that discovers and invokes centrally managed tools from a Foundry Toolbox.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Workflows",
+            "description": "Processes requests through slogan writing, legal review, and formatting agents in sequence.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/05-workflows",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Files",
+            "description": "Agent that lists, reads, and interprets files using shell and code tools.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/06-files",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Skills",
+            "description": "Agent that discovers and runs local file-based skills like generating PDF travel guides.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/07-skills",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Observability",
+            "description": "Agent with built-in observability and telemetry for diagnostics and monitoring.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/08-observability",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Declarative Customer Support",
+            "description": "Customer support triage agent that routes requests to specialized agents based on conversation history.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/09-declarative-customer-support",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Downstream Azure",
+            "description": "Agent performs data operations on Blob Storage and Service Bus using its own identity.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/10-downstream-azure",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Azure Search RAG",
+            "description": "Answers questions using product documentation and cites sources from a search index.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/11-azure-search-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Skills",
+            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/12-foundry-skills",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Memory",
+            "description": "Agent that remembers user facts across sessions using persistent semantic memory.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/13-foundry-memory",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "AG UI",
+            "description": "Agent that streams AG-UI lifecycle events in response to user input.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/ag-ui",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Claude Agent SDK",
+            "description": "Agent that streams responses from a Claude model for plain text input.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Event Grid Trigger",
+            "description": "Agent triggered by Azure Storage events that summarizes uploaded blobs and saves results separately.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/event-grid-trigger",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "copilot-sdk",
+            "protocol": "invocations",
+            "displayName": "GitHub Copilot",
+            "description": "Agent streams Copilot session events with support for multi-turn conversations.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/github-copilot",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Hello World",
+            "description": "Hosted agent that streams a model's reply as a server-sent event.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/hello-world",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Human In The Loop",
+            "description": "Agent that generates proposals and waits for human approval before proceeding.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/human-in-the-loop",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Langgraph Chat",
+            "description": "Conversational agent with session history and built-in time and calculator tools.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/langgraph-chat",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Toolbox",
+            "description": "Agent connects to a toolbox server and enables tool discovery and invocation during chat.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/toolbox",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Background Agent",
+            "description": "Handles long-running research analysis requests with background processing and streaming updates.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/background-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Bring Your Own Toolbox",
+            "description": "Agent connects to a remote toolbox and enables tool invocation during conversations.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/bring-your-own-toolbox",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Env Vars Agent",
+            "description": "Agent that reveals environment variable values with safety policies based on their type.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/env-vars-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Hello World",
+            "description": "Hosted agent that returns a hello world message from a Foundry model using a custom backend.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/hello-world",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Langgraph Chat",
+            "description": "Conversational agent with built-in calculator and time tools, streaming responses.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/langgraph-chat",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Langgraph Toolbox",
+            "description": "Agent that dynamically loads tools from a remote toolbox and handles incoming requests.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/langgraph-toolbox",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Langgraph Toolbox User Identity",
+            "description": "Agent that accesses mail, calendar, and GitHub tools for user-identity scenarios.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/langgraph-toolbox-user-identity",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "OpenAI Agents SDK",
+            "description": "Minimal agent that streams text responses from a Foundry model.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Hello World Invocations Voicelive",
+            "description": "Minimal hosted agent for real-time voice interactions with audio transcription streaming.",
+            "path": "samples/python/hosted-agents/bring-your-own/voicelive/hello-world-invocations-voicelive",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Agent Skills",
+            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
+            "path": "samples/csharp/hosted-agents/agent-framework/agent-skills",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Azure Search RAG",
+            "description": "Support agent answers questions using a keyword-indexed knowledge base for grounding.",
+            "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "File Tools",
+            "description": "Agent answers questions using bundled and user-uploaded files as knowledge sources.",
+            "path": "samples/csharp/hosted-agents/agent-framework/file-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Memory RAG",
+            "description": "Personal coach agent that remembers user preferences and goals across sessions.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox Server Side",
+            "description": "Agent that uses tools from a Foundry Toolbox, invoked server-side by the platform.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server-side",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Hello World",
+            "description": "Minimal hosted agent that responds to user questions and supports multi-turn conversation.",
+            "path": "samples/csharp/hosted-agents/agent-framework/hello-world",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "invocations",
+            "displayName": "Invocations Echo Agent",
+            "description": "Echoes back input messages with a simple prefix for testing agent hosting.",
+            "path": "samples/csharp/hosted-agents/agent-framework/invocations-echo-agent",
+            "requiresModel": false
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Local Tools",
+            "description": "Hotel search assistant that uses local function tools for queries.",
+            "path": "samples/csharp/hosted-agents/agent-framework/local-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "MCP Tools",
+            "description": "Agent answers questions by searching documentation using integrated tool providers.",
+            "path": "samples/csharp/hosted-agents/agent-framework/mcp-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Simple Agent",
+            "description": "General-purpose AI assistant that replies to user input with model-generated responses.",
+            "path": "samples/csharp/hosted-agents/agent-framework/simple-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Text Search RAG",
+            "description": "Agent answers support questions using retrieved passages from external documents.",
+            "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Workflows",
+            "description": "Workflow chains three translation agents to show intermediate language outputs.",
+            "path": "samples/csharp/hosted-agents/agent-framework/workflows",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "HelloWorld",
+            "description": "Hosted agent that returns a streaming hello world response from a Foundry model.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/HelloWorld",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Human In The Loop",
+            "description": "Agent that generates proposals and waits for human approval before proceeding.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/human-in-the-loop",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves session-persistent notes with real-time streaming responses.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "HelloWorld",
+            "description": "Minimal hosted agent that returns a greeting from a Foundry model using the Responses API.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/HelloWorld",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Background Agent",
+            "description": "Handles research analysis requests asynchronously with background processing and streaming updates.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/background-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Env Vars Agent",
+            "description": "Agent retrieves environment variable values with safety policies based on their type.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/env-vars-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves session-persistent notes for each user.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/notetaking-agent",
+            "requiresModel": true
+        }
+    ]
+}

From 86e74b70da72852e52af2ba7d25ee0dc500ed44f Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 27 May 2026 14:41:55 +0800
Subject: [PATCH 07/34] Revert "ci(temp): push trigger + hardcoded SHA for
 bootstrap smoke test"

This reverts commit 6225353b53bdd41453298d86acac09e5360beb54.
---
 .github/workflows/sync-sample-catalog.yml | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
index a34d143..54b6dd2 100644
--- a/.github/workflows/sync-sample-catalog.yml
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -7,13 +7,6 @@ on:
         description: "Commit SHA from microsoft-foundry/foundry-samples to pin to"
         required: true
         type: string
-  # TEMP: bootstrap-only — lets us smoke-test the pipeline from the feature
-  # branch before it lands on the default branch (workflow_dispatch requires
-  # the file to exist on the default branch first). Revert this whole block
-  # together with the DEFAULT_COMMIT_SHA env below before merging.
-  push:
-    branches:
-      - yimin/sync-catalog-bootstrap
 
 permissions:
   contents: write
@@ -59,10 +52,7 @@ jobs:
           AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
           AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
           AZURE_OPENAI_DEPLOYMENT: ${{ secrets.AZURE_OPENAI_DEPLOYMENT }}
-          # TEMP: bootstrap-only fallback for push-triggered smoke test. Revert
-          # together with the `push` trigger block above before merging.
-          DEFAULT_COMMIT_SHA: '19b441d474ec963c61a509692fdd81d5fb707d71'
-        run: node .github/scripts/generate_sample_catalog.mjs "${{ inputs.commit_sha || env.DEFAULT_COMMIT_SHA }}"
+        run: node .github/scripts/generate_sample_catalog.mjs "${{ inputs.commit_sha }}"
 
       - name: Detect catalog changes
         id: diff

From 05fed8ba4e07e1ab434025f500cb1c0aa7c0efe9 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 27 May 2026 14:52:02 +0800
Subject: [PATCH 08/34] ci: tighten default GITHUB_TOKEN to contents:read

All write operations (branch push, PR create) go through the GitHub App token, so the default GITHUB_TOKEN only needs read access for actions/checkout. Addresses PR #398 review feedback.
---
 .github/workflows/sync-sample-catalog.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
index 54b6dd2..3fecaaf 100644
--- a/.github/workflows/sync-sample-catalog.yml
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -8,9 +8,11 @@ on:
         required: true
         type: string
 
+# Least-privilege for the default GITHUB_TOKEN: only what `actions/checkout`
+# needs. All writes (push branch + create PR) are performed via the GitHub
+# App token generated below, not GITHUB_TOKEN.
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 
 # A single in-flight sync at a time — a re-trigger cancels any earlier run
 # rather than racing it for the same PR branch.

From 0656356e9a670ca40eb7980699698f8c6ba89299 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Mon, 1 Jun 2026 17:50:34 +0800
Subject: [PATCH 09/34] ci(catalog): blacklist invocations_ws sample paths

Upstream microsoft-foundry/foundry-samples recently added samples/python/hosted-agents/bring-your-own/invocations_ws/{hello-world,livekit-server}. The catalog generator's loose path scan picked them up, but they shouldn't appear in the picker yet (LiveKit voice prototype, not the standard invocations protocol).

Introduce a small BLOCKED_PATH_SEGMENTS deny-list and drop any template whose path contains a blocked segment. Minimal-surface change vs. a whitelist rewrite: existing csharp flat layouts and the voicelive sample stay surfaced; only invocations_ws is filtered out.

Next `Sync Sample Catalog` run will produce a follow-up PR that removes the two invocations_ws entries from sample-catalog.json.
---
 .github/scripts/generate_sample_catalog.mjs | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index 2042068..282c86d 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -76,6 +76,11 @@ const TEMPLATE_SELECTION = {
 // Path segments must be alphanumeric, hyphens, underscores, or dots
 const SAFE_PATH_SEGMENT = /^[a-zA-Z0-9._-]+$/;
 
+// Path segments that should never surface as catalog templates, even when
+// they contain a valid `agent.yaml`. Use this to drop upstream folders we
+// don't want in the picker yet (e.g. `invocations_ws` LiveKit samples).
+const BLOCKED_PATH_SEGMENTS = new Set(['invocations_ws']);
+
 /**
  * Collected anomaly messages surfaced in CI step summary so reviewers do not
  * silently merge a catalog with missing/derived data. Always populated, even
@@ -199,7 +204,14 @@ function findTemplateDirsUnder(tree, prefix) {
             if (!rel) {
                 return false;
             }
-            return rel.split('/').every((seg) => isSafePathSegment(seg));
+            const segments = rel.split('/');
+            if (!segments.every((seg) => isSafePathSegment(seg))) {
+                return false;
+            }
+            // Drop templates that live under a blocked segment (e.g.
+            // `invocations_ws`) so upstream additions don't auto-leak into
+            // the catalog before we explicitly opt them in.
+            return !segments.some((seg) => BLOCKED_PATH_SEGMENTS.has(seg));
         })
         // Lexicographic sort serves two purposes: (1) a parent path always
         // sorts before its descendants, so the `startsWith` check below

From e3f3ff1fbd53d611f67815349670e7f8f5d3b9b6 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Mon, 1 Jun 2026 18:18:07 +0800
Subject: [PATCH 10/34] ci(catalog): add LangGraph framework

Upstream microsoft-foundry/foundry-samples added samples/python/hosted-agents/langgraph/{invocations,responses}/* (7 templates today). The catalog generator hard-codes the framework whitelist, so the langgraph subtree was being silently skipped.

- Append 'langgraph' to FRAMEWORKS so the scan picks up the new prefix.

- Append 'langgraph': 'LangGraph' (CamelCase per upstream branding) to DIMENSION_DEFAULTS.framework.options as the last option, keeping the existing copilot-sdk / agent-framework / bring-your-own order intact.

Next `Sync Sample Catalog` run will produce a follow-up PR that adds the langgraph templates and the new framework option to sample-catalog.json.
---
 .github/scripts/generate_sample_catalog.mjs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index 282c86d..ba6eb18 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -35,7 +35,7 @@ const OVERRIDES_PATH = join(REPO_ROOT, 'samples', 'hosted-agent', 'sample-overri
 const GITHUB_TOKEN = process.env.GITHUB_TOKEN || '';
 
 const LANGUAGES = ['python', 'csharp'];
-const FRAMEWORKS = ['agent-framework', 'bring-your-own'];
+const FRAMEWORKS = ['agent-framework', 'bring-your-own', 'langgraph'];
 
 /** @type {Record<string, {title: string, placeholder: string, options: Record<string, string>}>} */
 const DIMENSION_DEFAULTS = {
@@ -56,6 +56,7 @@ const DIMENSION_DEFAULTS = {
             'copilot-sdk': 'Copilot SDK',
             'agent-framework': 'Agent Framework',
             'bring-your-own': 'Bring Your Own',
+            'langgraph': 'LangGraph',
         },
     },
     protocol: {

From c70b416900b1b07910e971a998c18f008555623c Mon Sep 17 00:00:00 2001
From: huimiu <107838226+huimiu@users.noreply.github.com>
Date: Mon, 1 Jun 2026 10:21:04 +0000
Subject: [PATCH 11/34] ci: sync sample catalog from foundry-samples
 (template/dev)

---
 samples/hosted-agent/sample-catalog.json | 125 ++++++++++++++++++++++-
 1 file changed, 123 insertions(+), 2 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 58ba369..62af205 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "19b441d474ec963c61a509692fdd81d5fb707d71",
+    "commitSha": "ef510c47b3ec768596577ba65ca6b2c2ab015855",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-05-27T06:40:47Z",
+    "generatedAt": "2026-06-01T10:21:01Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -32,6 +32,10 @@
                 {
                     "id": "bring-your-own",
                     "displayName": "Bring Your Own"
+                },
+                {
+                    "id": "langgraph",
+                    "displayName": "LangGraph"
                 }
             ]
         },
@@ -127,6 +131,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/07-skills",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Teams Activity",
+            "description": "Agent that answers questions about Teams and calendar, including handling file attachments.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/07-teams-activity",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "agent-framework",
@@ -181,6 +194,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/13-foundry-memory",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Browser Automation Agent",
+            "description": "Automates web browsing tasks such as navigation, scraping, and form filling in a remote browser.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/14-browser-automation-agent",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -280,6 +302,15 @@
             "path": "samples/python/hosted-agents/bring-your-own/responses/bring-your-own-toolbox",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "Automates web browsers for tasks like form filling and web scraping with session control.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/browser-automation",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -343,6 +374,15 @@
             "path": "samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Handoff Langgraph Responses Voicelive",
+            "description": "Customer support agent with triage and handoff between refund and order specialists.",
+            "path": "samples/python/hosted-agents/bring-your-own/voicelive/handoff-langgraph-responses-voicelive",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -352,6 +392,69 @@
             "path": "samples/python/hosted-agents/bring-your-own/voicelive/hello-world-invocations-voicelive",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "invocations",
+            "displayName": "Langgraph Chat",
+            "description": "Multi-turn chat agent with tools for current time and math calculations.",
+            "path": "samples/python/hosted-agents/langgraph/invocations/01-langgraph-chat",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "Langgraph Chat",
+            "description": "Chat agent with tools for current time and math calculations.",
+            "path": "samples/python/hosted-agents/langgraph/responses/01-langgraph-chat",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "MCP",
+            "description": "Agent that discovers and invokes tools from a remote server for enhanced capabilities.",
+            "path": "samples/python/hosted-agents/langgraph/responses/04-mcp",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "Workflows",
+            "description": "Processes a request through slogan writing, legal review, and formatting steps.",
+            "path": "samples/python/hosted-agents/langgraph/responses/05-workflows",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "Files",
+            "description": "Agent that analyzes and manipulates files using local and sandboxed tools.",
+            "path": "samples/python/hosted-agents/langgraph/responses/06-files",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "Human In The Loop",
+            "description": "Agent drafts proposals and pauses for human review with approve, revise, or reject options.",
+            "path": "samples/python/hosted-agents/langgraph/responses/07-human-in-the-loop",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "Observability",
+            "description": "Agent with automatic tracing for observability of all actions and tool invocations.",
+            "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -433,6 +536,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/mcp-tools",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Observability",
+            "description": "Agent with built-in observability for traces, metrics, and logs via Azure Monitor.",
+            "path": "samples/csharp/hosted-agents/agent-framework/observability",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -442,6 +554,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/simple-agent",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Teams Activity",
+            "description": "Agent that answers questions about Teams and calendar, and handles file attachments.",
+            "path": "samples/csharp/hosted-agents/agent-framework/teams-activity",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",

From 9da958b5623ebcd511f1704ff12937f191c06e47 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 2 Jun 2026 10:52:22 +0800
Subject: [PATCH 12/34] ci(catalog): default commit_sha to latest
 foundry-samples@main

Make the workflow_dispatch `commit_sha` input optional. When the user leaves it blank, a new `Resolve commit SHA` step queries the GitHub API for the current tip of `microsoft-foundry/foundry-samples@main` and pins the catalog generation to that SHA.

- `commit_sha`: required=false, default empty.

- New step uses `gh api` (default GITHUB_TOKEN, contents:read is enough for a public repo) and validates the result looks like a SHA before using it.

- The pinned SHA + its source (user input vs. resolved-from-main) is echoed to the step summary so reviewers can see what the run targeted.

- `Generate sample catalog` now reads from `steps.resolve-sha.outputs.sha` instead of `inputs.commit_sha` directly.
---
 .github/workflows/sync-sample-catalog.yml | 32 ++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
index 3fecaaf..0055a41 100644
--- a/.github/workflows/sync-sample-catalog.yml
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -4,9 +4,10 @@ on:
   workflow_dispatch:
     inputs:
       commit_sha:
-        description: "Commit SHA from microsoft-foundry/foundry-samples to pin to"
-        required: true
+        description: "Commit SHA from microsoft-foundry/foundry-samples to pin to (leave blank to use the latest main commit)"
+        required: false
         type: string
+        default: ""
 
 # Least-privilege for the default GITHUB_TOKEN: only what `actions/checkout`
 # needs. All writes (push branch + create PR) are performed via the GitHub
@@ -47,6 +48,31 @@ jobs:
         with:
           node-version: '20'
 
+      - name: Resolve commit SHA
+        id: resolve-sha
+        shell: bash
+        env:
+          INPUT_SHA: ${{ inputs.commit_sha }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          if [[ -n "$INPUT_SHA" ]]; then
+            sha="$INPUT_SHA"
+            source="user-supplied input"
+          else
+            # No SHA provided: pin to the current tip of foundry-samples@main
+            # so the dispatcher doesn't have to look it up by hand.
+            sha=$(gh api repos/microsoft-foundry/foundry-samples/commits/main --jq .sha)
+            source="latest microsoft-foundry/foundry-samples@main"
+          fi
+          if [[ ! "$sha" =~ ^[0-9a-f]{7,40}$ ]]; then
+            echo "Resolved SHA is not a valid git object: $sha" >&2
+            exit 1
+          fi
+          echo "Using SHA $sha (source: $source)"
+          echo "sha=$sha" >> "$GITHUB_OUTPUT"
+          echo "- Pinned SHA: \`$sha\` ($source)" >> "$GITHUB_STEP_SUMMARY"
+
       - name: Generate sample catalog
         env:
           REPO_ROOT: ${{ github.workspace }}
@@ -54,7 +80,7 @@ jobs:
           AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
           AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
           AZURE_OPENAI_DEPLOYMENT: ${{ secrets.AZURE_OPENAI_DEPLOYMENT }}
-        run: node .github/scripts/generate_sample_catalog.mjs "${{ inputs.commit_sha }}"
+        run: node .github/scripts/generate_sample_catalog.mjs "${{ steps.resolve-sha.outputs.sha }}"
 
       - name: Detect catalog changes
         id: diff

From df8bbfc439a6dcc27f37de7ec16ddeeb4151e65f Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 2 Jun 2026 10:53:10 +0800
Subject: [PATCH 13/34] ci: require Yimin-Jin or huimiu approval on
 template/stable

Add CODEOWNERS so every PR targeting template/stable is gated on at least one approval from Yimin-Jin or huimiu (combined with the branch's require_code_owner_reviews protection rule, enabled separately).
---
 .github/CODEOWNERS | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 .github/CODEOWNERS

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..42a3ecb
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,7 @@
+# Code owners for template/stable.
+#
+# GitHub uses this file (combined with the branch's
+# `require_code_owner_reviews` protection rule) to enforce that every PR
+# targeting this branch is approved by at least one listed owner. The line
+# below applies repo-wide; either owner can satisfy the requirement.
+*       @Yimin-Jin @huimiu

From 58b6973e00b7259fa7143b14c20454702145eded Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 2 Jun 2026 10:52:22 +0800
Subject: [PATCH 14/34] ci(catalog): default commit_sha to latest
 foundry-samples@main

Make the workflow_dispatch `commit_sha` input optional. When the user leaves it blank, a new `Resolve commit SHA` step queries the GitHub API for the current tip of `microsoft-foundry/foundry-samples@main` and pins the catalog generation to that SHA.

- `commit_sha`: required=false, default empty.

- New step uses `gh api` (default GITHUB_TOKEN, contents:read is enough for a public repo) and validates the result looks like a SHA before using it.

- The pinned SHA + its source (user input vs. resolved-from-main) is echoed to the step summary so reviewers can see what the run targeted.

- `Generate sample catalog` now reads from `steps.resolve-sha.outputs.sha` instead of `inputs.commit_sha` directly.
---
 .github/workflows/sync-sample-catalog.yml | 32 ++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/sync-sample-catalog.yml b/.github/workflows/sync-sample-catalog.yml
index 3fecaaf..0055a41 100644
--- a/.github/workflows/sync-sample-catalog.yml
+++ b/.github/workflows/sync-sample-catalog.yml
@@ -4,9 +4,10 @@ on:
   workflow_dispatch:
     inputs:
       commit_sha:
-        description: "Commit SHA from microsoft-foundry/foundry-samples to pin to"
-        required: true
+        description: "Commit SHA from microsoft-foundry/foundry-samples to pin to (leave blank to use the latest main commit)"
+        required: false
         type: string
+        default: ""
 
 # Least-privilege for the default GITHUB_TOKEN: only what `actions/checkout`
 # needs. All writes (push branch + create PR) are performed via the GitHub
@@ -47,6 +48,31 @@ jobs:
         with:
           node-version: '20'
 
+      - name: Resolve commit SHA
+        id: resolve-sha
+        shell: bash
+        env:
+          INPUT_SHA: ${{ inputs.commit_sha }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          if [[ -n "$INPUT_SHA" ]]; then
+            sha="$INPUT_SHA"
+            source="user-supplied input"
+          else
+            # No SHA provided: pin to the current tip of foundry-samples@main
+            # so the dispatcher doesn't have to look it up by hand.
+            sha=$(gh api repos/microsoft-foundry/foundry-samples/commits/main --jq .sha)
+            source="latest microsoft-foundry/foundry-samples@main"
+          fi
+          if [[ ! "$sha" =~ ^[0-9a-f]{7,40}$ ]]; then
+            echo "Resolved SHA is not a valid git object: $sha" >&2
+            exit 1
+          fi
+          echo "Using SHA $sha (source: $source)"
+          echo "sha=$sha" >> "$GITHUB_OUTPUT"
+          echo "- Pinned SHA: \`$sha\` ($source)" >> "$GITHUB_STEP_SUMMARY"
+
       - name: Generate sample catalog
         env:
           REPO_ROOT: ${{ github.workspace }}
@@ -54,7 +80,7 @@ jobs:
           AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
           AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
           AZURE_OPENAI_DEPLOYMENT: ${{ secrets.AZURE_OPENAI_DEPLOYMENT }}
-        run: node .github/scripts/generate_sample_catalog.mjs "${{ inputs.commit_sha }}"
+        run: node .github/scripts/generate_sample_catalog.mjs "${{ steps.resolve-sha.outputs.sha }}"
 
       - name: Detect catalog changes
         id: diff

From 4bfafca39799a5df02094d996ece4606214b5aad Mon Sep 17 00:00:00 2001
From: Yimin-Jin <139844715+Yimin-Jin@users.noreply.github.com>
Date: Wed, 3 Jun 2026 08:49:33 +0000
Subject: [PATCH 15/34] ci: sync sample catalog from foundry-samples
 (template/stable)

---
 samples/hosted-agent/sample-catalog.json | 31 ++++++++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 62af205..b5eb95d 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "ef510c47b3ec768596577ba65ca6b2c2ab015855",
+    "commitSha": "ad7fe2846bb0065dadc45f60fb51df1ba655e05d",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-01T10:21:01Z",
+    "generatedAt": "2026-06-03T08:49:33Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -203,6 +203,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/14-browser-automation-agent",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Optimization Travel Approver",
+            "description": "Agent that reviews and approves travel requests for employees.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/15-optimization-travel-approver",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -374,6 +383,24 @@
             "path": "samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Optimization Customer Support",
+            "description": "Customer support agent for troubleshooting and product assistance.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-customer-support",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Optimization Hello World",
+            "description": "Minimal hosted agent that returns a static greeting message.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-hello-world",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",

From 36174fd77c5ce4333f56ab0f0676124e66f2b3d7 Mon Sep 17 00:00:00 2001
From: huimiu <107838226+huimiu@users.noreply.github.com>
Date: Tue, 9 Jun 2026 01:54:23 +0000
Subject: [PATCH 16/34] ci: sync sample catalog from foundry-samples
 (template/stable)

---
 samples/hosted-agent/sample-catalog.json | 76 +++++++++++++++++-------
 1 file changed, 56 insertions(+), 20 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index b5eb95d..6fb76a7 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "ad7fe2846bb0065dadc45f60fb51df1ba655e05d",
+    "commitSha": "d3bb92638f131ce0fff1fe67862130d5b190383f",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-03T08:49:33Z",
+    "generatedAt": "2026-06-09T01:54:22Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -158,15 +158,6 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/09-declarative-customer-support",
             "requiresModel": true
         },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Downstream Azure",
-            "description": "Agent performs data operations on Blob Storage and Service Bus using its own identity.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/10-downstream-azure",
-            "requiresModel": true
-        },
         {
             "language": "python",
             "framework": "agent-framework",
@@ -230,15 +221,6 @@
             "path": "samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk",
             "requiresModel": false
         },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Event Grid Trigger",
-            "description": "Agent triggered by Azure Storage events that summarizes uploaded blobs and saves results separately.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/event-grid-trigger",
-            "requiresModel": true
-        },
         {
             "language": "python",
             "framework": "copilot-sdk",
@@ -401,6 +383,15 @@
             "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-hello-world",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Foreground Background Agents Responses Voicelive",
+            "description": "Voice agent that routes quick replies to users and delegates long tasks to a background worker.",
+            "path": "samples/python/hosted-agents/bring-your-own/voicelive/foreground-background-agents-responses-voicelive",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -419,6 +410,15 @@
             "path": "samples/python/hosted-agents/bring-your-own/voicelive/hello-world-invocations-voicelive",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Hotel Booking Invocations Voicelive",
+            "description": "Hotel booking agent that handles speech and UI actions with session state and streaming.",
+            "path": "samples/python/hosted-agents/bring-your-own/voicelive/hotel-booking-invocations-voicelive",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "langgraph",
@@ -437,6 +437,15 @@
             "path": "samples/python/hosted-agents/langgraph/responses/01-langgraph-chat",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "Langgraph Toolbox",
+            "description": "Agent that uses a toolbox for web search and GitHub Copilot MCP tools with managed credentials.",
+            "path": "samples/python/hosted-agents/langgraph/responses/02-langgraph-toolbox",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "langgraph",
@@ -482,6 +491,24 @@
             "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Caller",
+            "description": "Concierge agent that delegates questions to a remote specialist and summarizes the answers.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/caller",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Executor",
+            "description": "Answers arithmetic and math questions as an expert agent.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/executor",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -518,6 +545,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox MCP Skills",
+            "description": "Agent that dynamically discovers and uses skills from a remote toolbox endpoint.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",

From 525e3dca2e893306c44ebb4fc9c3770afc2e7f71 Mon Sep 17 00:00:00 2001
From: Yimin-Jin <139844715+Yimin-Jin@users.noreply.github.com>
Date: Tue, 16 Jun 2026 07:29:53 +0000
Subject: [PATCH 17/34] ci: sync sample catalog from foundry-samples
 (template/dev)

---
 samples/hosted-agent/sample-catalog.json | 103 ++++++++++++++++++-----
 1 file changed, 83 insertions(+), 20 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 62af205..7908c20 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "ef510c47b3ec768596577ba65ca6b2c2ab015855",
+    "commitSha": "d3bb92638f131ce0fff1fe67862130d5b190383f",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-01T10:21:01Z",
+    "generatedAt": "2026-06-16T07:29:52Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -158,15 +158,6 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/09-declarative-customer-support",
             "requiresModel": true
         },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Downstream Azure",
-            "description": "Agent performs data operations on Blob Storage and Service Bus using its own identity.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/10-downstream-azure",
-            "requiresModel": true
-        },
         {
             "language": "python",
             "framework": "agent-framework",
@@ -203,6 +194,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/14-browser-automation-agent",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Optimization Travel Approver",
+            "description": "Approves or rejects travel requests based on provided details and approval criteria.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/15-optimization-travel-approver",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -221,15 +221,6 @@
             "path": "samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk",
             "requiresModel": false
         },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Event Grid Trigger",
-            "description": "Agent triggered by Azure Storage events that summarizes uploaded blobs and saves results separately.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/event-grid-trigger",
-            "requiresModel": true
-        },
         {
             "language": "python",
             "framework": "copilot-sdk",
@@ -374,6 +365,33 @@
             "path": "samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Optimization Customer Support",
+            "description": "Customer support agent for troubleshooting and product assistance.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-customer-support",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Optimization Hello World",
+            "description": "Minimal hosted agent that responds to greetings using a custom optimization service.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-hello-world",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Foreground Background Agents Responses Voicelive",
+            "description": "Agent architecture that delegates long-running tasks to a background worker for async results.",
+            "path": "samples/python/hosted-agents/bring-your-own/voicelive/foreground-background-agents-responses-voicelive",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -392,6 +410,15 @@
             "path": "samples/python/hosted-agents/bring-your-own/voicelive/hello-world-invocations-voicelive",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Hotel Booking Invocations Voicelive",
+            "description": "Hotel booking agent with voice and UI actions, streaming responses and session state.",
+            "path": "samples/python/hosted-agents/bring-your-own/voicelive/hotel-booking-invocations-voicelive",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "langgraph",
@@ -410,6 +437,15 @@
             "path": "samples/python/hosted-agents/langgraph/responses/01-langgraph-chat",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "Langgraph Toolbox",
+            "description": "Agent accesses web search and GitHub Copilot tools via a credential-managed toolbox.",
+            "path": "samples/python/hosted-agents/langgraph/responses/02-langgraph-toolbox",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "langgraph",
@@ -455,6 +491,24 @@
             "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Caller",
+            "description": "Concierge agent that delegates questions to a remote specialist and summarizes answers.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/caller",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Executor",
+            "description": "Answers arithmetic and math questions as an expert agent.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/executor",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -491,6 +545,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox MCP Skills",
+            "description": "Agent that dynamically discovers and uses skills from a remote toolbox endpoint.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",

From d5eb860ef373e3bce3507dc16daa8ea259c1923a Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 23 Jun 2026 16:54:58 +0800
Subject: [PATCH 18/34] ci(catalog): replace path blacklist with category
 allow-list

Switch sample discovery from a fail-open blacklist (BLOCKED_PATH_SEGMENTS) to a fail-closed category allow-list (ALLOWED_CATEGORY_SEGMENTS = responses, invocations, voicelive).

Flat templates directly under a framework (csharp agent-framework layout) are always kept; nested templates must live under an allow-listed category, so new upstream groupings like a2a and invocations_ws stay out of the picker until explicitly opted in.

Validated against foundry-samples@main: 76 templates kept; a2a and invocations_ws excluded; 4 voicelive and 17 flat csharp agent-framework templates retained.
---
 .github/scripts/generate_sample_catalog.mjs | 46 +++++++++++++++++----
 1 file changed, 38 insertions(+), 8 deletions(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index ba6eb18..8be4433 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -77,10 +77,20 @@ const TEMPLATE_SELECTION = {
 // Path segments must be alphanumeric, hyphens, underscores, or dots
 const SAFE_PATH_SEGMENT = /^[a-zA-Z0-9._-]+$/;
 
-// Path segments that should never surface as catalog templates, even when
-// they contain a valid `agent.yaml`. Use this to drop upstream folders we
-// don't want in the picker yet (e.g. `invocations_ws` LiveKit samples).
-const BLOCKED_PATH_SEGMENTS = new Set(['invocations_ws']);
+// Category segments allowed at the position immediately under a framework
+// (`<framework>/<category>/...`). Upstream groups nested templates under these
+// folders. This is an ALLOW-LIST: any other category (e.g. `a2a`,
+// `invocations_ws`) is treated as not-yet-supported and dropped, so new
+// upstream folders never auto-leak into the picker — opt them in here. Flat
+// templates that sit directly under a framework (e.g. csharp
+// `agent-framework/hello-world`) have no category segment and are always
+// surfaced (see findTemplateDirsUnder).
+const ALLOWED_CATEGORY_SEGMENTS = new Set(['responses', 'invocations', 'voicelive']);
+
+// De-dupes the per-category "skipped" log line so an excluded category that
+// spans many templates (e.g. `a2a`) is reported once, not once per template.
+/** @type {Set<string>} */
+const skippedCategoriesLogged = new Set();
 
 /**
  * Collected anomaly messages surfaced in CI step summary so reviewers do not
@@ -192,6 +202,12 @@ async function fetchRepoTree(ref) {
  * `.`, e.g. `.claude/skills`) are skipped, as are segments that fail the
  * `SAFE_PATH_SEGMENT` check.
  *
+ * Nested templates must live under an allow-listed category segment
+ * (`ALLOWED_CATEGORY_SEGMENTS`); flat templates directly under the framework
+ * (csharp's `agent-framework/<template>` layout) have no category and are
+ * always kept. This fail-closed rule keeps unsupported upstream groupings
+ * (e.g. `a2a`, `invocations_ws`) out of the catalog until they are opted in.
+ *
  * @param {Array<{path: string, type: string}>} tree
  * @param {string} prefix Path prefix ending in `/`, e.g. `samples/python/hosted-agents/agent-framework/`.
  * @returns {string[]} Repo-relative template directory paths, outermost only.
@@ -209,10 +225,24 @@ function findTemplateDirsUnder(tree, prefix) {
             if (!segments.every((seg) => isSafePathSegment(seg))) {
                 return false;
             }
-            // Drop templates that live under a blocked segment (e.g.
-            // `invocations_ws`) so upstream additions don't auto-leak into
-            // the catalog before we explicitly opt them in.
-            return !segments.some((seg) => BLOCKED_PATH_SEGMENTS.has(seg));
+            // Flat templates sit directly under the framework
+            // (`<framework>/<template>`, e.g. csharp `agent-framework/hello-world`)
+            // and have no category segment — always surface them.
+            if (segments.length === 1) {
+                return true;
+            }
+            // Nested templates (`<framework>/<category>/...`) must live under an
+            // allow-listed category. Anything else (e.g. `a2a`, `invocations_ws`)
+            // is dropped so new upstream groupings don't auto-leak into the picker.
+            const category = segments[0];
+            if (ALLOWED_CATEGORY_SEGMENTS.has(category)) {
+                return true;
+            }
+            if (!skippedCategoriesLogged.has(category)) {
+                skippedCategoriesLogged.add(category);
+                console.log(`Skipping category "${category}" (not in ALLOWED_CATEGORY_SEGMENTS); e.g. ${dir}`);
+            }
+            return false;
         })
         // Lexicographic sort serves two purposes: (1) a parent path always
         // sorts before its descendants, so the `startsWith` check below

From 44ae669a3260739daee36817ab53624d188ab859 Mon Sep 17 00:00:00 2001
From: Yimin-Jin <139844715+Yimin-Jin@users.noreply.github.com>
Date: Tue, 23 Jun 2026 09:05:35 +0000
Subject: [PATCH 19/34] ci: sync sample catalog from foundry-samples
 (template/dev)

---
 samples/hosted-agent/sample-catalog.json | 76 +++++++++++++++++-------
 1 file changed, 56 insertions(+), 20 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 7908c20..4f956dd 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "d3bb92638f131ce0fff1fe67862130d5b190383f",
+    "commitSha": "ae60814c3ef01078f43619c27249e914d5de5fb6",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-16T07:29:52Z",
+    "generatedAt": "2026-06-23T09:05:34Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -158,6 +158,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/09-declarative-customer-support",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Downstream Azure",
+            "description": "Agent performs operations on Blob Storage and Service Bus using its own cloud identity.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/10-downstream-azure",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "agent-framework",
@@ -203,6 +212,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/15-optimization-travel-approver",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Content Safety Guardrail",
+            "description": "Agent that filters prompts and responses for harmful content using a safety policy.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/16-content-safety-guardrail",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -221,6 +239,24 @@
             "path": "samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk",
             "requiresModel": false
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Diagnostic Agent",
+            "description": "Performs network probes and returns a JSON report on hostname reachability.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/diagnostic-agent",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Event Grid Trigger",
+            "description": "Processes new blobs in Azure Storage by summarizing their contents and saving results separately.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/event-grid-trigger",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "copilot-sdk",
@@ -491,24 +527,6 @@
             "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
             "requiresModel": true
         },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Caller",
-            "description": "Concierge agent that delegates questions to a remote specialist and summarizes answers.",
-            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/caller",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Executor",
-            "description": "Answers arithmetic and math questions as an expert agent.",
-            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/executor",
-            "requiresModel": true
-        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -527,6 +545,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "Automates browsing, web scraping, and form filling in a remote Chromium browser.",
+            "path": "samples/csharp/hosted-agents/agent-framework/browser-automation",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -635,6 +662,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Toolbox Auth Paths",
+            "description": "Agent toolbox demonstrates different authentication paths for accessing upstream tools.",
+            "path": "samples/csharp/hosted-agents/agent-framework/toolbox-auth-paths",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",

From 08041c3f11568fb60159846fa3c285d09e6887d3 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 23 Jun 2026 16:54:58 +0800
Subject: [PATCH 20/34] ci(catalog): replace path blacklist with category
 allow-list

Switch sample discovery from a fail-open blacklist (BLOCKED_PATH_SEGMENTS) to a fail-closed category allow-list (ALLOWED_CATEGORY_SEGMENTS = responses, invocations, voicelive).

Flat templates directly under a framework (csharp agent-framework layout) are always kept; nested templates must live under an allow-listed category, so new upstream groupings like a2a and invocations_ws stay out of the picker until explicitly opted in.

Validated against foundry-samples@main: 76 templates kept; a2a and invocations_ws excluded; 4 voicelive and 17 flat csharp agent-framework templates retained.
---
 .github/scripts/generate_sample_catalog.mjs | 46 +++++++++++++++++----
 1 file changed, 38 insertions(+), 8 deletions(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index ba6eb18..8be4433 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -77,10 +77,20 @@ const TEMPLATE_SELECTION = {
 // Path segments must be alphanumeric, hyphens, underscores, or dots
 const SAFE_PATH_SEGMENT = /^[a-zA-Z0-9._-]+$/;
 
-// Path segments that should never surface as catalog templates, even when
-// they contain a valid `agent.yaml`. Use this to drop upstream folders we
-// don't want in the picker yet (e.g. `invocations_ws` LiveKit samples).
-const BLOCKED_PATH_SEGMENTS = new Set(['invocations_ws']);
+// Category segments allowed at the position immediately under a framework
+// (`<framework>/<category>/...`). Upstream groups nested templates under these
+// folders. This is an ALLOW-LIST: any other category (e.g. `a2a`,
+// `invocations_ws`) is treated as not-yet-supported and dropped, so new
+// upstream folders never auto-leak into the picker — opt them in here. Flat
+// templates that sit directly under a framework (e.g. csharp
+// `agent-framework/hello-world`) have no category segment and are always
+// surfaced (see findTemplateDirsUnder).
+const ALLOWED_CATEGORY_SEGMENTS = new Set(['responses', 'invocations', 'voicelive']);
+
+// De-dupes the per-category "skipped" log line so an excluded category that
+// spans many templates (e.g. `a2a`) is reported once, not once per template.
+/** @type {Set<string>} */
+const skippedCategoriesLogged = new Set();
 
 /**
  * Collected anomaly messages surfaced in CI step summary so reviewers do not
@@ -192,6 +202,12 @@ async function fetchRepoTree(ref) {
  * `.`, e.g. `.claude/skills`) are skipped, as are segments that fail the
  * `SAFE_PATH_SEGMENT` check.
  *
+ * Nested templates must live under an allow-listed category segment
+ * (`ALLOWED_CATEGORY_SEGMENTS`); flat templates directly under the framework
+ * (csharp's `agent-framework/<template>` layout) have no category and are
+ * always kept. This fail-closed rule keeps unsupported upstream groupings
+ * (e.g. `a2a`, `invocations_ws`) out of the catalog until they are opted in.
+ *
  * @param {Array<{path: string, type: string}>} tree
  * @param {string} prefix Path prefix ending in `/`, e.g. `samples/python/hosted-agents/agent-framework/`.
  * @returns {string[]} Repo-relative template directory paths, outermost only.
@@ -209,10 +225,24 @@ function findTemplateDirsUnder(tree, prefix) {
             if (!segments.every((seg) => isSafePathSegment(seg))) {
                 return false;
             }
-            // Drop templates that live under a blocked segment (e.g.
-            // `invocations_ws`) so upstream additions don't auto-leak into
-            // the catalog before we explicitly opt them in.
-            return !segments.some((seg) => BLOCKED_PATH_SEGMENTS.has(seg));
+            // Flat templates sit directly under the framework
+            // (`<framework>/<template>`, e.g. csharp `agent-framework/hello-world`)
+            // and have no category segment — always surface them.
+            if (segments.length === 1) {
+                return true;
+            }
+            // Nested templates (`<framework>/<category>/...`) must live under an
+            // allow-listed category. Anything else (e.g. `a2a`, `invocations_ws`)
+            // is dropped so new upstream groupings don't auto-leak into the picker.
+            const category = segments[0];
+            if (ALLOWED_CATEGORY_SEGMENTS.has(category)) {
+                return true;
+            }
+            if (!skippedCategoriesLogged.has(category)) {
+                skippedCategoriesLogged.add(category);
+                console.log(`Skipping category "${category}" (not in ALLOWED_CATEGORY_SEGMENTS); e.g. ${dir}`);
+            }
+            return false;
         })
         // Lexicographic sort serves two purposes: (1) a parent path always
         // sorts before its descendants, so the `startsWith` check below

From 6bf5cf4dfe4b62868bdab5df0c8b482f2e84f969 Mon Sep 17 00:00:00 2001
From: huimiu <107838226+huimiu@users.noreply.github.com>
Date: Tue, 23 Jun 2026 09:25:43 +0000
Subject: [PATCH 21/34] ci: sync sample catalog from foundry-samples
 (template/stable)

---
 samples/hosted-agent/sample-catalog.json | 76 +++++++++++++++++-------
 1 file changed, 56 insertions(+), 20 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 6fb76a7..1789489 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "d3bb92638f131ce0fff1fe67862130d5b190383f",
+    "commitSha": "ae60814c3ef01078f43619c27249e914d5de5fb6",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-09T01:54:22Z",
+    "generatedAt": "2026-06-23T09:25:42Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -158,6 +158,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/09-declarative-customer-support",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Downstream Azure",
+            "description": "Agent performs data operations on Blob Storage and Service Bus using its own identity.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/10-downstream-azure",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "agent-framework",
@@ -203,6 +212,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/15-optimization-travel-approver",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Content Safety Guardrail",
+            "description": "Agent screens prompts and responses for harmful content based on a safety policy.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/16-content-safety-guardrail",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -221,6 +239,24 @@
             "path": "samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk",
             "requiresModel": false
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Diagnostic Agent",
+            "description": "Runs network probes on hostnames and returns a JSON report of connectivity results.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/diagnostic-agent",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Event Grid Trigger",
+            "description": "Processes new blobs in Azure Storage by summarizing content and saving results to a summary container.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/event-grid-trigger",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "copilot-sdk",
@@ -491,24 +527,6 @@
             "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
             "requiresModel": true
         },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Caller",
-            "description": "Concierge agent that delegates questions to a remote specialist and summarizes the answers.",
-            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/caller",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Executor",
-            "description": "Answers arithmetic and math questions as an expert agent.",
-            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/executor",
-            "requiresModel": true
-        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -527,6 +545,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "Automates web browsing, scraping, and form filling in a remote Chromium browser.",
+            "path": "samples/csharp/hosted-agents/agent-framework/browser-automation",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",
@@ -635,6 +662,15 @@
             "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Toolbox Auth Paths",
+            "description": "Agent toolbox demonstrates different authentication methods for accessing upstream tools.",
+            "path": "samples/csharp/hosted-agents/agent-framework/toolbox-auth-paths",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "agent-framework",

From 42ae07cbbdcfe9e4da7e61c9b806b7d196401610 Mon Sep 17 00:00:00 2001
From: huimiu <107838226+huimiu@users.noreply.github.com>
Date: Wed, 24 Jun 2026 07:30:29 +0000
Subject: [PATCH 22/34] ci: sync sample catalog from foundry-samples
 (template/stable)

---
 samples/hosted-agent/sample-catalog.json | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 1789489..0da832a 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "ae60814c3ef01078f43619c27249e914d5de5fb6",
+    "commitSha": "d268eada402bd5a16002a882e20bf4f969d78b9a",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-23T09:25:42Z",
+    "generatedAt": "2026-06-24T07:30:28Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -221,6 +221,15 @@
             "path": "samples/python/hosted-agents/agent-framework/responses/16-content-safety-guardrail",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Iq Toolbox",
+            "description": "Answers user questions using a knowledge base accessed through a remote toolbox connection.",
+            "path": "samples/python/hosted-agents/agent-framework/responses/17-foundry-iq-toolbox",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -725,6 +734,15 @@
             "path": "samples/csharp/hosted-agents/bring-your-own/responses/background-agent",
             "requiresModel": true
         },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/browser-automation",
+            "requiresModel": true
+        },
         {
             "language": "csharp",
             "framework": "bring-your-own",

From 9bfc62b0ad5b222a5f98b90cd12e8281c28f7087 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 1 Jul 2026 17:19:10 +0800
Subject: [PATCH 23/34] refactor(sample-catalog): discover languages/frameworks
 dynamically

Replace the hard-coded LANGUAGES/FRAMEWORKS allowlists and the responses/invocations protocol allowlist with dynamic discovery from the samples git tree, filtered through empty-by-default BLOCKED_LANGUAGES/BLOCKED_FRAMEWORKS/BLOCKED_PROTOCOLS blacklists.

New upstream languages, frameworks, and protocols are now picked up automatically; the blacklists remain an explicit opt-out. Security validation (isSafePathSegment, commit-SHA regex, hidden-dir blocking) is unchanged.
---
 .github/scripts/generate_sample_catalog.mjs | 84 +++++++++++++++++----
 1 file changed, 70 insertions(+), 14 deletions(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index 8be4433..f1a8c9f 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -34,8 +34,17 @@ const OVERRIDES_PATH = join(REPO_ROOT, 'samples', 'hosted-agent', 'sample-overri
 
 const GITHUB_TOKEN = process.env.GITHUB_TOKEN || '';
 
-const LANGUAGES = ['python', 'csharp'];
-const FRAMEWORKS = ['agent-framework', 'bring-your-own', 'langgraph'];
+// Languages, frameworks, and protocols are discovered dynamically from the
+// samples repo tree (see discoverLanguagesAndFrameworks / parseAgentYaml)
+// instead of being restricted by an allowlist. These blacklists are the
+// explicit escape hatch to exclude a specific discovered value; empty by
+// default means "no restriction" — everything discovered is kept.
+/** @type {string[]} */
+const BLOCKED_LANGUAGES = [];
+/** @type {string[]} */
+const BLOCKED_FRAMEWORKS = [];
+/** @type {string[]} */
+const BLOCKED_PROTOCOLS = [];
 
 /** @type {Record<string, {title: string, placeholder: string, options: Record<string, string>}>} */
 const DIMENSION_DEFAULTS = {
@@ -193,6 +202,47 @@ async function fetchRepoTree(ref) {
     return { tree, truncated: Boolean(data?.truncated) };
 }
 
+/**
+ * Discover the languages and frameworks present in the samples repo tree,
+ * then drop any listed in the (empty by default) BLOCKED_LANGUAGES /
+ * BLOCKED_FRAMEWORKS blacklists. A "language" is the path segment directly
+ * under `samples/` that owns a `hosted-agents/` folder; a "framework" is the
+ * segment directly under `hosted-agents/`. Discovering these dynamically —
+ * instead of hard-coding an allowlist — means new upstream languages or
+ * frameworks are picked up automatically, while the blacklists remain an
+ * explicit way to exclude a specific value. Hidden or unsafe segments (those
+ * failing isSafePathSegment, e.g. `.github`) are ignored.
+ *
+ * @param {Array<{path: string, type: string}>} tree
+ * @returns {{ languages: string[], frameworks: string[] }}
+ */
+function discoverLanguagesAndFrameworks(tree) {
+    /** @type {Set<string>} */
+    const languages = new Set();
+    /** @type {Set<string>} */
+    const frameworks = new Set();
+    const pattern = /^samples\/([^/]+)\/hosted-agents\/([^/]+)(?:\/|$)/;
+
+    for (const entry of tree) {
+        const match = entry.path.match(pattern);
+        if (!match) {
+            continue;
+        }
+        const [, language, framework] = match;
+        if (isSafePathSegment(language) && !BLOCKED_LANGUAGES.includes(language)) {
+            languages.add(language);
+        }
+        if (isSafePathSegment(framework) && !BLOCKED_FRAMEWORKS.includes(framework)) {
+            frameworks.add(framework);
+        }
+    }
+
+    return {
+        languages: [...languages].sort(),
+        frameworks: [...frameworks].sort(),
+    };
+}
+
 /**
  * Find sample template directories under a `hosted-agents/<framework>/` prefix.
  * A template is identified by the presence of an `agent.yaml`. When nested
@@ -293,19 +343,21 @@ function inferProtocolFromPath(templatePath) {
  * Minimal parser for agent.yaml. Extracts the declared protocol(s) and
  * whether the sample exposes the AZURE_AI_MODEL_DEPLOYMENT_NAME env var
  * (used as a heuristic for `requiresModel`). Does NOT use eval or a real
- * YAML library — a regex-y scan is sufficient for our two fields.
+ * YAML library — a regex-y scan is sufficient for our two fields. Any
+ * declared protocol is accepted except those listed in BLOCKED_PROTOCOLS
+ * (empty by default).
  * @param {string} content
- * @returns {{ protocols: Array<'responses' | 'invocations'>, hasModelEnv: boolean }}
+ * @returns {{ protocols: string[], hasModelEnv: boolean }}
  */
 function parseAgentYaml(content) {
-    /** @type {{ protocols: Array<'responses' | 'invocations'>, hasModelEnv: boolean }} */
+    /** @type {{ protocols: string[], hasModelEnv: boolean }} */
     const result = { protocols: [], hasModelEnv: false };
 
     for (const line of content.split('\n')) {
         const stripped = line.trim();
         if (stripped.startsWith('- protocol:')) {
             const value = stripped.split(':')[1]?.trim();
-            if (value === 'responses' || value === 'invocations') {
+            if (value && !BLOCKED_PROTOCOLS.includes(value)) {
                 result.protocols.push(value);
             }
         }
@@ -321,7 +373,7 @@ function parseAgentYaml(content) {
  * Fetch and parse agent.yaml for a sample directory.
  * @param {string} samplePath
  * @param {string} ref
- * @returns {Promise<{ protocols: Array<'responses' | 'invocations'>, hasModelEnv: boolean } | null>}
+ * @returns {Promise<{ protocols: string[], hasModelEnv: boolean } | null>}
  */
 async function fetchAgentYaml(samplePath, ref) {
     const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/agent.yaml`;
@@ -537,10 +589,12 @@ function displayNameFromPath(samplePath) {
  * Scan the foundry-samples repo and build the flat template list. Uses one
  * recursive git-tree call to enumerate every `agent.yaml` under each
  * `<language>/hosted-agents/<framework>/` prefix, regardless of intermediate
- * directories. This supports both the canonical layout
- * (`<framework>/<protocol>/<template>`), the flat layout
- * (`<framework>/<template>`), and category-grouped layouts such as
- * `bring-your-own/voicelive/hello-world-invocations-voicelive`.
+ * directories. Languages and frameworks are discovered dynamically from the
+ * tree (see discoverLanguagesAndFrameworks) rather than hard-coded, then
+ * filtered through the BLOCKED_LANGUAGES/BLOCKED_FRAMEWORKS blacklists. This
+ * supports both the canonical layout (`<framework>/<protocol>/<template>`),
+ * the flat layout (`<framework>/<template>`), and category-grouped layouts
+ * such as `bring-your-own/voicelive/hello-world-invocations-voicelive`.
  *
  * @param {string} commitSha
  * @returns {Promise<Array<{language: string, framework: string, protocol: string, displayName: string, description: string, path: string, requiresModel: boolean}>>}
@@ -554,8 +608,10 @@ async function scanTemplates(commitSha) {
         warn(`GitHub git-tree API returned truncated=true for ${commitSha}; some samples may be missing from the catalog. Consider pinning to a smaller subtree or re-running.`);
     }
 
-    for (const language of LANGUAGES) {
-        for (const framework of FRAMEWORKS) {
+    const { languages, frameworks } = discoverLanguagesAndFrameworks(tree);
+
+    for (const language of languages) {
+        for (const framework of frameworks) {
             const prefix = `samples/${language}/hosted-agents/${framework}/`;
             const templateDirs = findTemplateDirsUnder(tree, prefix);
 
@@ -566,7 +622,7 @@ async function scanTemplates(commitSha) {
                     continue;
                 }
 
-                /** @type {'responses' | 'invocations'} */
+                /** @type {string} */
                 const protocol = agentInfo.protocols.length > 0
                     ? agentInfo.protocols[0]
                     : inferProtocolFromPath(templatePath);

From d38231fbb44c2bdb0e4501c21e7f1dacabbc0d60 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Wed, 1 Jul 2026 17:26:48 +0800
Subject: [PATCH 24/34] refactor(sample-catalog): convert category allow-list
 to empty blacklist

Replace ALLOWED_CATEGORY_SEGMENTS (fail-closed allow-list) with an empty BLOCKED_CATEGORY_SEGMENTS (fail-open blacklist) so category filtering matches the language/framework/protocol blacklist model. Every discovered category now surfaces by default; add a segment to the blacklist to drop it.
---
 .github/scripts/generate_sample_catalog.mjs | 39 ++++++++++-----------
 1 file changed, 19 insertions(+), 20 deletions(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index f1a8c9f..28c9f40 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -86,18 +86,17 @@ const TEMPLATE_SELECTION = {
 // Path segments must be alphanumeric, hyphens, underscores, or dots
 const SAFE_PATH_SEGMENT = /^[a-zA-Z0-9._-]+$/;
 
-// Category segments allowed at the position immediately under a framework
-// (`<framework>/<category>/...`). Upstream groups nested templates under these
-// folders. This is an ALLOW-LIST: any other category (e.g. `a2a`,
-// `invocations_ws`) is treated as not-yet-supported and dropped, so new
-// upstream folders never auto-leak into the picker — opt them in here. Flat
-// templates that sit directly under a framework (e.g. csharp
-// `agent-framework/hello-world`) have no category segment and are always
-// surfaced (see findTemplateDirsUnder).
-const ALLOWED_CATEGORY_SEGMENTS = new Set(['responses', 'invocations', 'voicelive']);
+// Category segments to EXCLUDE at the position immediately under a framework
+// (`<framework>/<category>/...`). This is a BLACK-LIST: empty by default means
+// every discovered category is surfaced; add a segment here to drop an upstream
+// grouping you don't want in the picker yet. Flat templates that sit directly
+// under a framework (e.g. csharp `agent-framework/hello-world`) have no category
+// segment and are always surfaced (see findTemplateDirsUnder).
+/** @type {Set<string>} */
+const BLOCKED_CATEGORY_SEGMENTS = new Set();
 
 // De-dupes the per-category "skipped" log line so an excluded category that
-// spans many templates (e.g. `a2a`) is reported once, not once per template.
+// spans many templates is reported once, not once per template.
 /** @type {Set<string>} */
 const skippedCategoriesLogged = new Set();
 
@@ -252,11 +251,11 @@ function discoverLanguagesAndFrameworks(tree) {
  * `.`, e.g. `.claude/skills`) are skipped, as are segments that fail the
  * `SAFE_PATH_SEGMENT` check.
  *
- * Nested templates must live under an allow-listed category segment
- * (`ALLOWED_CATEGORY_SEGMENTS`); flat templates directly under the framework
- * (csharp's `agent-framework/<template>` layout) have no category and are
- * always kept. This fail-closed rule keeps unsupported upstream groupings
- * (e.g. `a2a`, `invocations_ws`) out of the catalog until they are opted in.
+ * Nested templates are kept unless their category segment is listed in
+ * `BLOCKED_CATEGORY_SEGMENTS` (empty by default, so everything is surfaced);
+ * flat templates directly under the framework (csharp's
+ * `agent-framework/<template>` layout) have no category and are always kept.
+ * Add a segment to the blacklist to drop an unwanted upstream grouping.
  *
  * @param {Array<{path: string, type: string}>} tree
  * @param {string} prefix Path prefix ending in `/`, e.g. `samples/python/hosted-agents/agent-framework/`.
@@ -281,16 +280,16 @@ function findTemplateDirsUnder(tree, prefix) {
             if (segments.length === 1) {
                 return true;
             }
-            // Nested templates (`<framework>/<category>/...`) must live under an
-            // allow-listed category. Anything else (e.g. `a2a`, `invocations_ws`)
-            // is dropped so new upstream groupings don't auto-leak into the picker.
+            // Nested templates (`<framework>/<category>/...`) are kept unless the
+            // category is explicitly blacklisted. Empty blacklist => everything is
+            // surfaced (fail-open), matching the language/framework/protocol lists.
             const category = segments[0];
-            if (ALLOWED_CATEGORY_SEGMENTS.has(category)) {
+            if (!BLOCKED_CATEGORY_SEGMENTS.has(category)) {
                 return true;
             }
             if (!skippedCategoriesLogged.has(category)) {
                 skippedCategoriesLogged.add(category);
-                console.log(`Skipping category "${category}" (not in ALLOWED_CATEGORY_SEGMENTS); e.g. ${dir}`);
+                console.log(`Skipping category "${category}" (in BLOCKED_CATEGORY_SEGMENTS); e.g. ${dir}`);
             }
             return false;
         })

From 4ba15656a63f007a183b84be8430d6827151cf09 Mon Sep 17 00:00:00 2001
From: Yimin-Jin <139844715+Yimin-Jin@users.noreply.github.com>
Date: Wed, 1 Jul 2026 09:43:00 +0000
Subject: [PATCH 25/34] ci: sync sample catalog from foundry-samples
 (template/dev)

---
 samples/hosted-agent/sample-catalog.json | 595 ++++++++++++++---------
 1 file changed, 358 insertions(+), 237 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 0da832a..a5cd6e0 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "d268eada402bd5a16002a882e20bf4f969d78b9a",
+    "commitSha": "c14a01b61eb6a59aeae140f7db07b420f85fcfb4",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-24T07:30:28Z",
+    "generatedAt": "2026-07-01T09:42:59Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -50,6 +50,10 @@
                 {
                     "id": "invocations",
                     "displayName": "Invocations API"
+                },
+                {
+                    "id": "invocations_ws",
+                    "displayName": "invocations_ws"
                 }
             ]
         }
@@ -59,6 +63,276 @@
         "placeholder": "Choose a template for your agent"
     },
     "templates": [
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Caller",
+            "description": "Concierge agent that delegates questions to a remote specialist and summarizes answers.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/caller",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Executor",
+            "description": "Answers arithmetic and math questions as an expert agent.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/executor",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Agent Skills",
+            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
+            "path": "samples/csharp/hosted-agents/agent-framework/agent-skills",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Azure Search RAG",
+            "description": "Support agent answers questions using a keyword-indexed knowledge base for grounding.",
+            "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "Automates web browsing, scraping, and form filling in a remote Chromium browser.",
+            "path": "samples/csharp/hosted-agents/agent-framework/browser-automation",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "File Tools",
+            "description": "Agent answers questions using bundled and user-uploaded files as knowledge sources.",
+            "path": "samples/csharp/hosted-agents/agent-framework/file-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Memory RAG",
+            "description": "Personal coach agent that remembers user preferences and goals across sessions.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox MCP Skills",
+            "description": "Agent that dynamically discovers and uses skills from a remote toolbox endpoint.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox Server Side",
+            "description": "Agent that uses tools from a Foundry Toolbox, invoked server-side by the platform.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server-side",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Hello World",
+            "description": "Minimal hosted agent that responds to user questions and supports multi-turn conversation.",
+            "path": "samples/csharp/hosted-agents/agent-framework/hello-world",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "invocations",
+            "displayName": "Invocations Echo Agent",
+            "description": "Echoes back input messages with a simple prefix for testing agent hosting.",
+            "path": "samples/csharp/hosted-agents/agent-framework/invocations-echo-agent",
+            "requiresModel": false
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Local Tools",
+            "description": "Hotel search assistant that uses local function tools for queries.",
+            "path": "samples/csharp/hosted-agents/agent-framework/local-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "MCP Tools",
+            "description": "Agent answers questions by searching documentation using integrated tool providers.",
+            "path": "samples/csharp/hosted-agents/agent-framework/mcp-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Observability",
+            "description": "Agent with built-in observability for traces, metrics, and logs via Azure Monitor.",
+            "path": "samples/csharp/hosted-agents/agent-framework/observability",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Simple Agent",
+            "description": "General-purpose AI assistant that replies to user input with model-generated responses.",
+            "path": "samples/csharp/hosted-agents/agent-framework/simple-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Teams Activity",
+            "description": "Agent that answers questions about Teams and calendar, and handles file attachments.",
+            "path": "samples/csharp/hosted-agents/agent-framework/teams-activity",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Text Search RAG",
+            "description": "Agent answers support questions using retrieved passages from external documents.",
+            "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Toolbox Auth Paths",
+            "description": "Agent toolbox demonstrates different authentication methods for accessing upstream tools.",
+            "path": "samples/csharp/hosted-agents/agent-framework/toolbox-auth-paths",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Workflows",
+            "description": "Workflow chains three translation agents to show intermediate language outputs.",
+            "path": "samples/csharp/hosted-agents/agent-framework/workflows",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "HelloWorld",
+            "description": "Hosted agent that returns a streaming hello world response from a Foundry model.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/HelloWorld",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Human In The Loop",
+            "description": "Agent that generates proposals and waits for human approval before proceeding.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/human-in-the-loop",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves session-persistent notes with real-time streaming responses.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "HelloWorld",
+            "description": "Routes real-time audio between a browser and a managed voice service session.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations_ws/HelloWorld",
+            "requiresModel": false
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "HelloWorld",
+            "description": "Minimal hosted agent that returns a greeting from a Foundry model using the Responses API.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/HelloWorld",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Background Agent",
+            "description": "Handles research analysis requests asynchronously with background processing and streaming updates.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/background-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/browser-automation",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Env Vars Agent",
+            "description": "Agent retrieves environment variable values with safety policies based on their type.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/env-vars-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves session-persistent notes for each user.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Caller",
+            "description": "Concierge agent that delegates questions to a remote specialist and summarizes the answers.",
+            "path": "samples/python/hosted-agents/agent-framework/a2a/01-delegation/caller",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Executor",
+            "description": "Answers arithmetic and math questions as an expert agent.",
+            "path": "samples/python/hosted-agents/agent-framework/a2a/01-delegation/executor",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "agent-framework",
@@ -305,20 +579,65 @@
         {
             "language": "python",
             "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/notetaking-agent",
-            "requiresModel": true
+            "protocol": "invocations",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Toolbox",
+            "description": "Agent connects to a toolbox server and enables tool discovery and invocation during chat.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/toolbox",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Duplex Live Agent",
+            "description": "Real-time voice agent that handles conversation and background tasks in parallel.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/duplex-live-agent",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Hello World",
+            "description": "Real-time voice agent that relays audio and events between browser and a managed service.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/hello-world",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Livekit Server",
+            "description": "Voice agent connects to a LiveKit server for real-time audio conversations.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/livekit-server",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Pipecat Webrtc",
+            "description": "Real-time voice agent with multi-agent pipeline and WebRTC audio media support.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/pipecat-webrtc",
+            "requiresModel": false
         },
         {
             "language": "python",
             "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Toolbox",
-            "description": "Agent connects to a toolbox server and enables tool discovery and invocation during chat.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/toolbox",
-            "requiresModel": true
+            "protocol": "invocations_ws",
+            "displayName": "Pipecat Ws Server",
+            "description": "Real-time voice agent with greeting and order-checking capabilities.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/pipecat-ws-server",
+            "requiresModel": false
         },
         {
             "language": "python",
@@ -428,6 +747,15 @@
             "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-hello-world",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Session Multiplexing",
+            "description": "Supports multiple users sharing a session while keeping response chains user-specific.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/session-multiplexing",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -464,6 +792,24 @@
             "path": "samples/python/hosted-agents/bring-your-own/voicelive/hotel-booking-invocations-voicelive",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "A2a Caller",
+            "description": "Concierge agent that delegates specialist questions to a remote expert agent.",
+            "path": "samples/python/hosted-agents/langgraph/a2a/a2a-caller",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "A2a Executor",
+            "description": "Math expert agent that answers questions and explains steps, callable by other agents.",
+            "path": "samples/python/hosted-agents/langgraph/a2a/a2a-executor",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "langgraph",
@@ -535,231 +881,6 @@
             "description": "Agent with automatic tracing for observability of all actions and tool invocations.",
             "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
             "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Agent Skills",
-            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
-            "path": "samples/csharp/hosted-agents/agent-framework/agent-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Azure Search RAG",
-            "description": "Support agent answers questions using a keyword-indexed knowledge base for grounding.",
-            "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Browser Automation",
-            "description": "Automates web browsing, scraping, and form filling in a remote Chromium browser.",
-            "path": "samples/csharp/hosted-agents/agent-framework/browser-automation",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "File Tools",
-            "description": "Agent answers questions using bundled and user-uploaded files as knowledge sources.",
-            "path": "samples/csharp/hosted-agents/agent-framework/file-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Memory RAG",
-            "description": "Personal coach agent that remembers user preferences and goals across sessions.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Toolbox MCP Skills",
-            "description": "Agent that dynamically discovers and uses skills from a remote toolbox endpoint.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Toolbox Server Side",
-            "description": "Agent that uses tools from a Foundry Toolbox, invoked server-side by the platform.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server-side",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Hello World",
-            "description": "Minimal hosted agent that responds to user questions and supports multi-turn conversation.",
-            "path": "samples/csharp/hosted-agents/agent-framework/hello-world",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "invocations",
-            "displayName": "Invocations Echo Agent",
-            "description": "Echoes back input messages with a simple prefix for testing agent hosting.",
-            "path": "samples/csharp/hosted-agents/agent-framework/invocations-echo-agent",
-            "requiresModel": false
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Local Tools",
-            "description": "Hotel search assistant that uses local function tools for queries.",
-            "path": "samples/csharp/hosted-agents/agent-framework/local-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "MCP Tools",
-            "description": "Agent answers questions by searching documentation using integrated tool providers.",
-            "path": "samples/csharp/hosted-agents/agent-framework/mcp-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Observability",
-            "description": "Agent with built-in observability for traces, metrics, and logs via Azure Monitor.",
-            "path": "samples/csharp/hosted-agents/agent-framework/observability",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Simple Agent",
-            "description": "General-purpose AI assistant that replies to user input with model-generated responses.",
-            "path": "samples/csharp/hosted-agents/agent-framework/simple-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Teams Activity",
-            "description": "Agent that answers questions about Teams and calendar, and handles file attachments.",
-            "path": "samples/csharp/hosted-agents/agent-framework/teams-activity",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Text Search RAG",
-            "description": "Agent answers support questions using retrieved passages from external documents.",
-            "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Toolbox Auth Paths",
-            "description": "Agent toolbox demonstrates different authentication methods for accessing upstream tools.",
-            "path": "samples/csharp/hosted-agents/agent-framework/toolbox-auth-paths",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Workflows",
-            "description": "Workflow chains three translation agents to show intermediate language outputs.",
-            "path": "samples/csharp/hosted-agents/agent-framework/workflows",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "HelloWorld",
-            "description": "Hosted agent that returns a streaming hello world response from a Foundry model.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/HelloWorld",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Human In The Loop",
-            "description": "Agent that generates proposals and waits for human approval before proceeding.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/human-in-the-loop",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves session-persistent notes with real-time streaming responses.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/notetaking-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "HelloWorld",
-            "description": "Minimal hosted agent that returns a greeting from a Foundry model using the Responses API.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/HelloWorld",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Background Agent",
-            "description": "Handles research analysis requests asynchronously with background processing and streaming updates.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/background-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Browser Automation",
-            "description": "",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/browser-automation",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Env Vars Agent",
-            "description": "Agent retrieves environment variable values with safety policies based on their type.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/env-vars-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves session-persistent notes for each user.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/notetaking-agent",
-            "requiresModel": true
         }
     ]
 }

From 1031a646e49b6e9c2d70a8022dfec0c720af2410 Mon Sep 17 00:00:00 2001
From: huimiu <107838226+huimiu@users.noreply.github.com>
Date: Wed, 1 Jul 2026 09:47:24 +0000
Subject: [PATCH 26/34] ci: sync sample catalog from foundry-samples
 (template/stable)

---
 samples/hosted-agent/sample-catalog.json | 595 ++++++++++++++---------
 1 file changed, 358 insertions(+), 237 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 0da832a..50b8681 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "d268eada402bd5a16002a882e20bf4f969d78b9a",
+    "commitSha": "c14a01b61eb6a59aeae140f7db07b420f85fcfb4",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-06-24T07:30:28Z",
+    "generatedAt": "2026-07-01T09:47:23Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -50,6 +50,10 @@
                 {
                     "id": "invocations",
                     "displayName": "Invocations API"
+                },
+                {
+                    "id": "invocations_ws",
+                    "displayName": "invocations_ws"
                 }
             ]
         }
@@ -59,6 +63,276 @@
         "placeholder": "Choose a template for your agent"
     },
     "templates": [
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Caller",
+            "description": "Concierge agent that delegates questions to a remote specialist and summarizes answers.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/caller",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Executor",
+            "description": "Answers arithmetic and math questions as an expert agent.",
+            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/executor",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Agent Skills",
+            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
+            "path": "samples/csharp/hosted-agents/agent-framework/agent-skills",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Azure Search RAG",
+            "description": "Support agent answers questions using a keyword-indexed knowledge base for grounding.",
+            "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "Automates web browsing, scraping, and form filling in a remote Chromium browser.",
+            "path": "samples/csharp/hosted-agents/agent-framework/browser-automation",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "File Tools",
+            "description": "Agent answers questions using bundled and user-uploaded files as knowledge sources.",
+            "path": "samples/csharp/hosted-agents/agent-framework/file-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Memory RAG",
+            "description": "Personal coach agent that remembers user preferences and goals across sessions.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox MCP Skills",
+            "description": "Agent that dynamically discovers and uses skills from a remote toolbox endpoint.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Foundry Toolbox Server Side",
+            "description": "Agent that uses tools from a Foundry Toolbox, invoked server-side by the platform.",
+            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server-side",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Hello World",
+            "description": "Minimal hosted agent that responds to user questions and supports multi-turn conversation.",
+            "path": "samples/csharp/hosted-agents/agent-framework/hello-world",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "invocations",
+            "displayName": "Invocations Echo Agent",
+            "description": "Echoes back input messages with a simple prefix for testing agent hosting.",
+            "path": "samples/csharp/hosted-agents/agent-framework/invocations-echo-agent",
+            "requiresModel": false
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Local Tools",
+            "description": "Hotel search assistant that uses local function tools for queries.",
+            "path": "samples/csharp/hosted-agents/agent-framework/local-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "MCP Tools",
+            "description": "Agent answers questions by searching documentation using integrated tool providers.",
+            "path": "samples/csharp/hosted-agents/agent-framework/mcp-tools",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Observability",
+            "description": "Agent with built-in observability for traces, metrics, and logs via Azure Monitor.",
+            "path": "samples/csharp/hosted-agents/agent-framework/observability",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Simple Agent",
+            "description": "General-purpose AI assistant that replies to user input with model-generated responses.",
+            "path": "samples/csharp/hosted-agents/agent-framework/simple-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Teams Activity",
+            "description": "Agent that answers questions about Teams and calendar, and handles file attachments.",
+            "path": "samples/csharp/hosted-agents/agent-framework/teams-activity",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Text Search RAG",
+            "description": "Agent answers support questions using retrieved passages from external documents.",
+            "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Toolbox Auth Paths",
+            "description": "Agent toolbox demonstrates different authentication methods for accessing upstream tools.",
+            "path": "samples/csharp/hosted-agents/agent-framework/toolbox-auth-paths",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Workflows",
+            "description": "Workflow chains three translation agents to show intermediate language outputs.",
+            "path": "samples/csharp/hosted-agents/agent-framework/workflows",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "HelloWorld",
+            "description": "Hosted agent that returns a streaming hello world response from a Foundry model.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/HelloWorld",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Human In The Loop",
+            "description": "Agent that generates proposals and waits for human approval before proceeding.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/human-in-the-loop",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves session-persistent notes with real-time streaming responses.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "HelloWorld",
+            "description": "Routes real-time audio between a browser and a managed voice service for live conversations.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/invocations_ws/HelloWorld",
+            "requiresModel": false
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "HelloWorld",
+            "description": "Minimal hosted agent that returns a greeting from a Foundry model using the Responses API.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/HelloWorld",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Background Agent",
+            "description": "Handles research analysis requests asynchronously with background processing and streaming updates.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/background-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Browser Automation",
+            "description": "",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/browser-automation",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Env Vars Agent",
+            "description": "Agent retrieves environment variable values with safety policies based on their type.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/env-vars-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "csharp",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves session-persistent notes for each user.",
+            "path": "samples/csharp/hosted-agents/bring-your-own/responses/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Caller",
+            "description": "Concierge agent that delegates questions to a remote specialist and summarizes the answers.",
+            "path": "samples/python/hosted-agents/agent-framework/a2a/01-delegation/caller",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "agent-framework",
+            "protocol": "responses",
+            "displayName": "Executor",
+            "description": "Answers arithmetic and math questions as an expert agent.",
+            "path": "samples/python/hosted-agents/agent-framework/a2a/01-delegation/executor",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "agent-framework",
@@ -305,20 +579,65 @@
         {
             "language": "python",
             "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/notetaking-agent",
-            "requiresModel": true
+            "protocol": "invocations",
+            "displayName": "Notetaking Agent",
+            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/notetaking-agent",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations",
+            "displayName": "Toolbox",
+            "description": "Agent connects to a toolbox server and enables tool discovery and invocation during chat.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations/toolbox",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Duplex Live Agent",
+            "description": "Real-time voice agent that handles conversation and background tasks in parallel.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/duplex-live-agent",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Hello World",
+            "description": "Real-time voice agent that relays audio and events between browser and a managed service.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/hello-world",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Livekit Server",
+            "description": "Voice agent connects to a LiveKit server for real-time audio conversations.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/livekit-server",
+            "requiresModel": false
+        },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "invocations_ws",
+            "displayName": "Pipecat Webrtc",
+            "description": "Real-time voice agent with multi-agent pipeline and WebRTC audio media support.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/pipecat-webrtc",
+            "requiresModel": false
         },
         {
             "language": "python",
             "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Toolbox",
-            "description": "Agent connects to a toolbox server and enables tool discovery and invocation during chat.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/toolbox",
-            "requiresModel": true
+            "protocol": "invocations_ws",
+            "displayName": "Pipecat Ws Server",
+            "description": "Real-time voice agent with greeting and order-checking capabilities.",
+            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/pipecat-ws-server",
+            "requiresModel": false
         },
         {
             "language": "python",
@@ -428,6 +747,15 @@
             "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-hello-world",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "bring-your-own",
+            "protocol": "responses",
+            "displayName": "Session Multiplexing",
+            "description": "Supports multiple users sharing a session while keeping response chains user-specific.",
+            "path": "samples/python/hosted-agents/bring-your-own/responses/session-multiplexing",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -464,6 +792,24 @@
             "path": "samples/python/hosted-agents/bring-your-own/voicelive/hotel-booking-invocations-voicelive",
             "requiresModel": true
         },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "A2a Caller",
+            "description": "Concierge agent that delegates specialist questions to a remote expert agent.",
+            "path": "samples/python/hosted-agents/langgraph/a2a/a2a-caller",
+            "requiresModel": true
+        },
+        {
+            "language": "python",
+            "framework": "langgraph",
+            "protocol": "responses",
+            "displayName": "A2a Executor",
+            "description": "Math expert agent that answers questions and explains steps, callable by other agents.",
+            "path": "samples/python/hosted-agents/langgraph/a2a/a2a-executor",
+            "requiresModel": true
+        },
         {
             "language": "python",
             "framework": "langgraph",
@@ -535,231 +881,6 @@
             "description": "Agent with automatic tracing for observability of all actions and tool invocations.",
             "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
             "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Agent Skills",
-            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
-            "path": "samples/csharp/hosted-agents/agent-framework/agent-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Azure Search RAG",
-            "description": "Support agent answers questions using a keyword-indexed knowledge base for grounding.",
-            "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Browser Automation",
-            "description": "Automates web browsing, scraping, and form filling in a remote Chromium browser.",
-            "path": "samples/csharp/hosted-agents/agent-framework/browser-automation",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "File Tools",
-            "description": "Agent answers questions using bundled and user-uploaded files as knowledge sources.",
-            "path": "samples/csharp/hosted-agents/agent-framework/file-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Memory RAG",
-            "description": "Personal coach agent that remembers user preferences and goals across sessions.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Toolbox MCP Skills",
-            "description": "Agent that dynamically discovers and uses skills from a remote toolbox endpoint.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Toolbox Server Side",
-            "description": "Agent that uses tools from a Foundry Toolbox, invoked server-side by the platform.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server-side",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Hello World",
-            "description": "Minimal hosted agent that responds to user questions and supports multi-turn conversation.",
-            "path": "samples/csharp/hosted-agents/agent-framework/hello-world",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "invocations",
-            "displayName": "Invocations Echo Agent",
-            "description": "Echoes back input messages with a simple prefix for testing agent hosting.",
-            "path": "samples/csharp/hosted-agents/agent-framework/invocations-echo-agent",
-            "requiresModel": false
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Local Tools",
-            "description": "Hotel search assistant that uses local function tools for queries.",
-            "path": "samples/csharp/hosted-agents/agent-framework/local-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "MCP Tools",
-            "description": "Agent answers questions by searching documentation using integrated tool providers.",
-            "path": "samples/csharp/hosted-agents/agent-framework/mcp-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Observability",
-            "description": "Agent with built-in observability for traces, metrics, and logs via Azure Monitor.",
-            "path": "samples/csharp/hosted-agents/agent-framework/observability",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Simple Agent",
-            "description": "General-purpose AI assistant that replies to user input with model-generated responses.",
-            "path": "samples/csharp/hosted-agents/agent-framework/simple-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Teams Activity",
-            "description": "Agent that answers questions about Teams and calendar, and handles file attachments.",
-            "path": "samples/csharp/hosted-agents/agent-framework/teams-activity",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Text Search RAG",
-            "description": "Agent answers support questions using retrieved passages from external documents.",
-            "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Toolbox Auth Paths",
-            "description": "Agent toolbox demonstrates different authentication methods for accessing upstream tools.",
-            "path": "samples/csharp/hosted-agents/agent-framework/toolbox-auth-paths",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Workflows",
-            "description": "Workflow chains three translation agents to show intermediate language outputs.",
-            "path": "samples/csharp/hosted-agents/agent-framework/workflows",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "HelloWorld",
-            "description": "Hosted agent that returns a streaming hello world response from a Foundry model.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/HelloWorld",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Human In The Loop",
-            "description": "Agent that generates proposals and waits for human approval before proceeding.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/human-in-the-loop",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves session-persistent notes with real-time streaming responses.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/notetaking-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "HelloWorld",
-            "description": "Minimal hosted agent that returns a greeting from a Foundry model using the Responses API.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/HelloWorld",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Background Agent",
-            "description": "Handles research analysis requests asynchronously with background processing and streaming updates.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/background-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Browser Automation",
-            "description": "",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/browser-automation",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Env Vars Agent",
-            "description": "Agent retrieves environment variable values with safety policies based on their type.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/env-vars-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves session-persistent notes for each user.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/notetaking-agent",
-            "requiresModel": true
         }
     ]
 }

From 3697e8550fdcc629b62b67bcbcae4663677ac6f0 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 7 Jul 2026 10:56:01 +0800
Subject: [PATCH 27/34] feat(sample-catalog): map invocations_ws protocol to
 'Invocations (WebSocket)' displayName

---
 .github/scripts/generate_sample_catalog.mjs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index 28c9f40..f2fb2be 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -74,6 +74,7 @@ const DIMENSION_DEFAULTS = {
         options: {
             responses: 'Responses API',
             invocations: 'Invocations API',
+            invocations_ws: 'Invocations (WebSocket)',
         },
     },
 };

From b5c7535730632dcb926e7a5e12ee172a4757705e Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 7 Jul 2026 11:13:37 +0800
Subject: [PATCH 28/34] fix(sample-catalog): discover templates via azure.yaml
 after upstream restructure

Upstream foundry-samples moved hosted-agent templates from an agent.yaml + agent.manifest.yaml layout to an azd azure.yaml service manifest (old getting-started samples relocated to samples-classic/). The generator still looked for agent.yaml, so scanTemplates found 0 templates and the sync PR wiped the entire catalog.

- Discover templates by azure.yaml instead of agent.yaml

- Parse protocol from the service protocols[] list (unchanged - protocol: field)

- Detect requiresModel via AZURE_AI_MODEL_DEPLOYMENT_NAME env var OR an ai-project deployments: block (the azure.yaml successor to the manifest kind: model resource)

- Remove now-dead agent.manifest.yaml fetch/parse

Verified locally against foundry-samples@9c4e42a: 91 templates found, catalog identical to the previous sync (paths/protocols/requiresModel stable).
---
 .github/scripts/generate_sample_catalog.mjs | 146 +++++++-------------
 1 file changed, 50 insertions(+), 96 deletions(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index f2fb2be..75e63c4 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -3,11 +3,11 @@
  * Generate samples/hosted-agent/sample-catalog.json from the foundry-samples repository.
  *
  * Walks the hosted-agents tree in microsoft-foundry/foundry-samples once via
- * the git-tree API, parses each sample's agent.yaml (+ optional
- * agent.manifest.yaml) for protocol and model requirements, derives
- * displayName from the directory name, and — when AZURE_OPENAI_* secrets are
- * set — fills the description with a short LLM-generated sentence sourced
- * from the sample's README.md.
+ * the git-tree API, parses each sample's azure.yaml (the azd service
+ * manifest) for protocol and model requirements, derives displayName from the
+ * directory name, and — when AZURE_OPENAI_* secrets are set — fills the
+ * description with a short LLM-generated sentence sourced from the sample's
+ * README.md.
  *
  * Usage:
  *   node generate_sample_catalog.mjs <commitSha>
@@ -35,7 +35,7 @@ const OVERRIDES_PATH = join(REPO_ROOT, 'samples', 'hosted-agent', 'sample-overri
 const GITHUB_TOKEN = process.env.GITHUB_TOKEN || '';
 
 // Languages, frameworks, and protocols are discovered dynamically from the
-// samples repo tree (see discoverLanguagesAndFrameworks / parseAgentYaml)
+// samples repo tree (see discoverLanguagesAndFrameworks / parseAzureYaml)
 // instead of being restricted by an allowlist. These blacklists are the
 // explicit escape hatch to exclude a specific discovered value; empty by
 // default means "no restriction" — everything discovered is kept.
@@ -245,12 +245,12 @@ function discoverLanguagesAndFrameworks(tree) {
 
 /**
  * Find sample template directories under a `hosted-agents/<framework>/` prefix.
- * A template is identified by the presence of an `agent.yaml`. When nested
- * agent.yaml files exist (e.g. a sub-agent declared inside a parent sample),
- * only the OUTERMOST one is treated as a catalog template — the inner files
- * are part of the parent sample. Hidden directories (segments beginning with
- * `.`, e.g. `.claude/skills`) are skipped, as are segments that fail the
- * `SAFE_PATH_SEGMENT` check.
+ * A template is identified by the presence of an `azure.yaml` (the azd service
+ * manifest). When nested azure.yaml files exist (e.g. a sub-agent declared
+ * inside a parent sample), only the OUTERMOST one is treated as a catalog
+ * template — the inner files are part of the parent sample. Hidden directories
+ * (segments beginning with `.`, e.g. `.claude/skills`) are skipped, as are
+ * segments that fail the `SAFE_PATH_SEGMENT` check.
  *
  * Nested templates are kept unless their category segment is listed in
  * `BLOCKED_CATEGORY_SEGMENTS` (empty by default, so everything is surfaced);
@@ -264,8 +264,8 @@ function discoverLanguagesAndFrameworks(tree) {
  */
 function findTemplateDirsUnder(tree, prefix) {
     const candidates = tree
-        .filter((entry) => entry.type === 'blob' && entry.path.startsWith(prefix) && entry.path.endsWith('/agent.yaml'))
-        .map((entry) => entry.path.slice(0, -'/agent.yaml'.length))
+        .filter((entry) => entry.type === 'blob' && entry.path.startsWith(prefix) && entry.path.endsWith('/azure.yaml'))
+        .map((entry) => entry.path.slice(0, -'/azure.yaml'.length))
         .filter((dir) => {
             const rel = dir.slice(prefix.length);
             if (!rel) {
@@ -296,7 +296,7 @@ function findTemplateDirsUnder(tree, prefix) {
         })
         // Lexicographic sort serves two purposes: (1) a parent path always
         // sorts before its descendants, so the `startsWith` check below
-        // correctly keeps only the outermost agent.yaml; (2) it preserves
+        // correctly keeps only the outermost azure.yaml; (2) it preserves
         // upstream's `NN-` numeric prefix ordering in the picker.
         .sort();
 
@@ -311,7 +311,7 @@ function findTemplateDirsUnder(tree, prefix) {
 }
 
 /**
- * Infer protocol when `agent.yaml` does not declare one explicitly. Looks for
+ * Infer protocol when `azure.yaml` does not declare one explicitly. Looks for
  * a `responses` or `invocations` segment in the path, then for the substring
  * in the leaf directory name (common for samples like
  * `hello-world-invocations-voicelive`). Falls back to `responses` and emits a
@@ -335,23 +335,26 @@ function inferProtocolFromPath(templatePath) {
     if (leaf.includes('responses')) {
         return 'responses';
     }
-    warn(`Could not infer protocol for "${templatePath}"; defaulting to "responses". Add a "- protocol:" entry to agent.yaml or a sample-overrides.json entry to silence this.`);
+    warn(`Could not infer protocol for "${templatePath}"; defaulting to "responses". Add a "- protocol:" entry to azure.yaml or a sample-overrides.json entry to silence this.`);
     return 'responses';
 }
 
 /**
- * Minimal parser for agent.yaml. Extracts the declared protocol(s) and
- * whether the sample exposes the AZURE_AI_MODEL_DEPLOYMENT_NAME env var
- * (used as a heuristic for `requiresModel`). Does NOT use eval or a real
- * YAML library — a regex-y scan is sufficient for our two fields. Any
- * declared protocol is accepted except those listed in BLOCKED_PROTOCOLS
- * (empty by default).
+ * Minimal parser for a sample's azure.yaml (the azd service manifest).
+ * Extracts the declared protocol(s) from the hosted-agent service's
+ * `protocols:` list and whether the sample requires a Foundry model. A sample
+ * requires a model when it either consumes one (an
+ * AZURE_AI_MODEL_DEPLOYMENT_NAME env var) or provisions one (an `ai-project`
+ * `deployments:` block — which replaced the model resource that used to live
+ * in agent.manifest.yaml). Does NOT use eval or a real YAML library — a line
+ * scan is sufficient for these fields. Any declared protocol is accepted
+ * except those listed in BLOCKED_PROTOCOLS (empty by default).
  * @param {string} content
- * @returns {{ protocols: string[], hasModelEnv: boolean }}
+ * @returns {{ protocols: string[], requiresModel: boolean }}
  */
-function parseAgentYaml(content) {
-    /** @type {{ protocols: string[], hasModelEnv: boolean }} */
-    const result = { protocols: [], hasModelEnv: false };
+function parseAzureYaml(content) {
+    /** @type {{ protocols: string[], requiresModel: boolean }} */
+    const result = { protocols: [], requiresModel: false };
 
     for (const line of content.split('\n')) {
         const stripped = line.trim();
@@ -361,8 +364,15 @@ function parseAgentYaml(content) {
                 result.protocols.push(value);
             }
         }
+        // Model consumer: the agent reads a Foundry model deployment name.
         if (stripped.startsWith('- name:') && stripped.includes('AZURE_AI_MODEL_DEPLOYMENT_NAME')) {
-            result.hasModelEnv = true;
+            result.requiresModel = true;
+        }
+        // Model provider: the ai-project service declares one or more model
+        // deployments to provision (the azure.yaml successor to a manifest
+        // `kind: model` resource).
+        if (stripped === 'deployments:') {
+            result.requiresModel = true;
         }
     }
 
@@ -370,64 +380,16 @@ function parseAgentYaml(content) {
 }
 
 /**
- * Fetch and parse agent.yaml for a sample directory.
+ * Fetch and parse a sample directory's azure.yaml.
  * @param {string} samplePath
  * @param {string} ref
- * @returns {Promise<{ protocols: string[], hasModelEnv: boolean } | null>}
+ * @returns {Promise<{ protocols: string[], requiresModel: boolean } | null>}
  */
-async function fetchAgentYaml(samplePath, ref) {
-    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/agent.yaml`;
+async function fetchAzureYaml(samplePath, ref) {
+    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/azure.yaml`;
     try {
         const content = await fetchText(rawUrl);
-        return parseAgentYaml(content);
-    } catch {
-        return null;
-    }
-}
-
-/**
- * Minimal parser for agent.manifest.yaml — detects whether the manifest
- * declares a top-level `resources:` list containing `kind: model`. Matches
- * both `- kind: model` and the multi-line continuation form, and limits
- * scanning to the `resources:` block to avoid false positives.
- * @param {string} content
- * @returns {{ hasModelResource: boolean }}
- */
-function parseAgentManifestYaml(content) {
-    let inResources = false;
-    for (const rawLine of content.split('\n')) {
-        const stripped = rawLine.trim();
-        // Detect top-level key (column 0, e.g. `resources:`, `metadata:`).
-        if (/^[A-Za-z_][\w-]*:/.test(rawLine)) {
-            inResources = stripped.startsWith('resources:');
-            continue;
-        }
-        if (!inResources) {
-            continue;
-        }
-        // Strip optional `- ` so the inline and continuation forms both match.
-        const withoutDash = stripped.replace(/^-\s+/, '');
-        if (withoutDash.startsWith('kind:')) {
-            const value = withoutDash.substring('kind:'.length).trim().replace(/^["']|["']$/g, '');
-            if (value === 'model') {
-                return { hasModelResource: true };
-            }
-        }
-    }
-    return { hasModelResource: false };
-}
-
-/**
- * Fetch and parse agent.manifest.yaml for a sample directory.
- * @param {string} samplePath
- * @param {string} ref
- * @returns {Promise<{ hasModelResource: boolean } | null>}
- */
-async function fetchAgentManifestYaml(samplePath, ref) {
-    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/agent.manifest.yaml`;
-    try {
-        const content = await fetchText(rawUrl);
-        return parseAgentManifestYaml(content);
+        return parseAzureYaml(content);
     } catch {
         return null;
     }
@@ -587,7 +549,7 @@ function displayNameFromPath(samplePath) {
 
 /**
  * Scan the foundry-samples repo and build the flat template list. Uses one
- * recursive git-tree call to enumerate every `agent.yaml` under each
+ * recursive git-tree call to enumerate every `azure.yaml` under each
  * `<language>/hosted-agents/<framework>/` prefix, regardless of intermediate
  * directories. Languages and frameworks are discovered dynamically from the
  * tree (see discoverLanguagesAndFrameworks) rather than hard-coded, then
@@ -616,26 +578,18 @@ async function scanTemplates(commitSha) {
             const templateDirs = findTemplateDirsUnder(tree, prefix);
 
             for (const templatePath of templateDirs) {
-                const agentInfo = await fetchAgentYaml(templatePath, commitSha);
-                if (!agentInfo) {
-                    warn(`Could not fetch or parse agent.yaml for "${templatePath}"; skipping this template.`);
+                const azureInfo = await fetchAzureYaml(templatePath, commitSha);
+                if (!azureInfo) {
+                    warn(`Could not fetch or parse azure.yaml for "${templatePath}"; skipping this template.`);
                     continue;
                 }
 
                 /** @type {string} */
-                const protocol = agentInfo.protocols.length > 0
-                    ? agentInfo.protocols[0]
+                const protocol = azureInfo.protocols.length > 0
+                    ? azureInfo.protocols[0]
                     : inferProtocolFromPath(templatePath);
 
-                let requiresModel = agentInfo.hasModelEnv;
-                // Only consult agent.manifest.yaml when agent.yaml reported no
-                // model env; otherwise we already default to `true`.
-                if (!requiresModel) {
-                    const manifestInfo = await fetchAgentManifestYaml(templatePath, commitSha);
-                    if (manifestInfo?.hasModelResource) {
-                        requiresModel = true;
-                    }
-                }
+                const requiresModel = azureInfo.requiresModel;
 
                 templates.push({
                     language,

From 5a61853030f95b4e8c6416c79ee658445a943cbf Mon Sep 17 00:00:00 2001
From: Yimin-Jin <139844715+Yimin-Jin@users.noreply.github.com>
Date: Tue, 7 Jul 2026 03:18:39 +0000
Subject: [PATCH 29/34] ci: sync sample catalog from foundry-samples
 (template/dev)

---
 samples/hosted-agent/sample-catalog.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index a5cd6e0..78e3662 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "c14a01b61eb6a59aeae140f7db07b420f85fcfb4",
+    "commitSha": "9c4e42a1eedcec32c1582bebeb83a381a23efbe1",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-07-01T09:42:59Z",
+    "generatedAt": "2026-07-07T03:18:38Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -53,7 +53,7 @@
                 },
                 {
                     "id": "invocations_ws",
-                    "displayName": "invocations_ws"
+                    "displayName": "Invocations (WebSocket)"
                 }
             ]
         }

From 17caddb54750b8175fd602d91c29cfeb4917ce05 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 7 Jul 2026 11:21:47 +0800
Subject: [PATCH 30/34] fix(sample-catalog): discover templates via azure.yaml
 after upstream restructure

Port the generator fix to template/stable (parity with template/dev).

Upstream foundry-samples moved hosted-agent templates from an agent.yaml + agent.manifest.yaml layout to an azd azure.yaml service manifest (old getting-started samples relocated to samples-classic/). The stable generator still looked for agent.yaml, so the next sync would find 0 templates and wipe the catalog.

- Discover templates by azure.yaml instead of agent.yaml

- Parse protocol from the service protocols[] list (unchanged - protocol: field)

- Detect requiresModel via AZURE_AI_MODEL_DEPLOYMENT_NAME env var OR an ai-project deployments: block

- Remove now-dead agent.manifest.yaml fetch/parse

- Also brings the invocations_ws -> 'Invocations (WebSocket)' displayName mapping so the generator matches template/dev exactly

Verified against foundry-samples@9c4e42a: 91 templates found; catalog stable (paths/protocols/requiresModel unchanged).
---
 .github/scripts/generate_sample_catalog.mjs | 147 +++++++-------------
 1 file changed, 51 insertions(+), 96 deletions(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index 28c9f40..75e63c4 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -3,11 +3,11 @@
  * Generate samples/hosted-agent/sample-catalog.json from the foundry-samples repository.
  *
  * Walks the hosted-agents tree in microsoft-foundry/foundry-samples once via
- * the git-tree API, parses each sample's agent.yaml (+ optional
- * agent.manifest.yaml) for protocol and model requirements, derives
- * displayName from the directory name, and — when AZURE_OPENAI_* secrets are
- * set — fills the description with a short LLM-generated sentence sourced
- * from the sample's README.md.
+ * the git-tree API, parses each sample's azure.yaml (the azd service
+ * manifest) for protocol and model requirements, derives displayName from the
+ * directory name, and — when AZURE_OPENAI_* secrets are set — fills the
+ * description with a short LLM-generated sentence sourced from the sample's
+ * README.md.
  *
  * Usage:
  *   node generate_sample_catalog.mjs <commitSha>
@@ -35,7 +35,7 @@ const OVERRIDES_PATH = join(REPO_ROOT, 'samples', 'hosted-agent', 'sample-overri
 const GITHUB_TOKEN = process.env.GITHUB_TOKEN || '';
 
 // Languages, frameworks, and protocols are discovered dynamically from the
-// samples repo tree (see discoverLanguagesAndFrameworks / parseAgentYaml)
+// samples repo tree (see discoverLanguagesAndFrameworks / parseAzureYaml)
 // instead of being restricted by an allowlist. These blacklists are the
 // explicit escape hatch to exclude a specific discovered value; empty by
 // default means "no restriction" — everything discovered is kept.
@@ -74,6 +74,7 @@ const DIMENSION_DEFAULTS = {
         options: {
             responses: 'Responses API',
             invocations: 'Invocations API',
+            invocations_ws: 'Invocations (WebSocket)',
         },
     },
 };
@@ -244,12 +245,12 @@ function discoverLanguagesAndFrameworks(tree) {
 
 /**
  * Find sample template directories under a `hosted-agents/<framework>/` prefix.
- * A template is identified by the presence of an `agent.yaml`. When nested
- * agent.yaml files exist (e.g. a sub-agent declared inside a parent sample),
- * only the OUTERMOST one is treated as a catalog template — the inner files
- * are part of the parent sample. Hidden directories (segments beginning with
- * `.`, e.g. `.claude/skills`) are skipped, as are segments that fail the
- * `SAFE_PATH_SEGMENT` check.
+ * A template is identified by the presence of an `azure.yaml` (the azd service
+ * manifest). When nested azure.yaml files exist (e.g. a sub-agent declared
+ * inside a parent sample), only the OUTERMOST one is treated as a catalog
+ * template — the inner files are part of the parent sample. Hidden directories
+ * (segments beginning with `.`, e.g. `.claude/skills`) are skipped, as are
+ * segments that fail the `SAFE_PATH_SEGMENT` check.
  *
  * Nested templates are kept unless their category segment is listed in
  * `BLOCKED_CATEGORY_SEGMENTS` (empty by default, so everything is surfaced);
@@ -263,8 +264,8 @@ function discoverLanguagesAndFrameworks(tree) {
  */
 function findTemplateDirsUnder(tree, prefix) {
     const candidates = tree
-        .filter((entry) => entry.type === 'blob' && entry.path.startsWith(prefix) && entry.path.endsWith('/agent.yaml'))
-        .map((entry) => entry.path.slice(0, -'/agent.yaml'.length))
+        .filter((entry) => entry.type === 'blob' && entry.path.startsWith(prefix) && entry.path.endsWith('/azure.yaml'))
+        .map((entry) => entry.path.slice(0, -'/azure.yaml'.length))
         .filter((dir) => {
             const rel = dir.slice(prefix.length);
             if (!rel) {
@@ -295,7 +296,7 @@ function findTemplateDirsUnder(tree, prefix) {
         })
         // Lexicographic sort serves two purposes: (1) a parent path always
         // sorts before its descendants, so the `startsWith` check below
-        // correctly keeps only the outermost agent.yaml; (2) it preserves
+        // correctly keeps only the outermost azure.yaml; (2) it preserves
         // upstream's `NN-` numeric prefix ordering in the picker.
         .sort();
 
@@ -310,7 +311,7 @@ function findTemplateDirsUnder(tree, prefix) {
 }
 
 /**
- * Infer protocol when `agent.yaml` does not declare one explicitly. Looks for
+ * Infer protocol when `azure.yaml` does not declare one explicitly. Looks for
  * a `responses` or `invocations` segment in the path, then for the substring
  * in the leaf directory name (common for samples like
  * `hello-world-invocations-voicelive`). Falls back to `responses` and emits a
@@ -334,23 +335,26 @@ function inferProtocolFromPath(templatePath) {
     if (leaf.includes('responses')) {
         return 'responses';
     }
-    warn(`Could not infer protocol for "${templatePath}"; defaulting to "responses". Add a "- protocol:" entry to agent.yaml or a sample-overrides.json entry to silence this.`);
+    warn(`Could not infer protocol for "${templatePath}"; defaulting to "responses". Add a "- protocol:" entry to azure.yaml or a sample-overrides.json entry to silence this.`);
     return 'responses';
 }
 
 /**
- * Minimal parser for agent.yaml. Extracts the declared protocol(s) and
- * whether the sample exposes the AZURE_AI_MODEL_DEPLOYMENT_NAME env var
- * (used as a heuristic for `requiresModel`). Does NOT use eval or a real
- * YAML library — a regex-y scan is sufficient for our two fields. Any
- * declared protocol is accepted except those listed in BLOCKED_PROTOCOLS
- * (empty by default).
+ * Minimal parser for a sample's azure.yaml (the azd service manifest).
+ * Extracts the declared protocol(s) from the hosted-agent service's
+ * `protocols:` list and whether the sample requires a Foundry model. A sample
+ * requires a model when it either consumes one (an
+ * AZURE_AI_MODEL_DEPLOYMENT_NAME env var) or provisions one (an `ai-project`
+ * `deployments:` block — which replaced the model resource that used to live
+ * in agent.manifest.yaml). Does NOT use eval or a real YAML library — a line
+ * scan is sufficient for these fields. Any declared protocol is accepted
+ * except those listed in BLOCKED_PROTOCOLS (empty by default).
  * @param {string} content
- * @returns {{ protocols: string[], hasModelEnv: boolean }}
+ * @returns {{ protocols: string[], requiresModel: boolean }}
  */
-function parseAgentYaml(content) {
-    /** @type {{ protocols: string[], hasModelEnv: boolean }} */
-    const result = { protocols: [], hasModelEnv: false };
+function parseAzureYaml(content) {
+    /** @type {{ protocols: string[], requiresModel: boolean }} */
+    const result = { protocols: [], requiresModel: false };
 
     for (const line of content.split('\n')) {
         const stripped = line.trim();
@@ -360,8 +364,15 @@ function parseAgentYaml(content) {
                 result.protocols.push(value);
             }
         }
+        // Model consumer: the agent reads a Foundry model deployment name.
         if (stripped.startsWith('- name:') && stripped.includes('AZURE_AI_MODEL_DEPLOYMENT_NAME')) {
-            result.hasModelEnv = true;
+            result.requiresModel = true;
+        }
+        // Model provider: the ai-project service declares one or more model
+        // deployments to provision (the azure.yaml successor to a manifest
+        // `kind: model` resource).
+        if (stripped === 'deployments:') {
+            result.requiresModel = true;
         }
     }
 
@@ -369,64 +380,16 @@ function parseAgentYaml(content) {
 }
 
 /**
- * Fetch and parse agent.yaml for a sample directory.
+ * Fetch and parse a sample directory's azure.yaml.
  * @param {string} samplePath
  * @param {string} ref
- * @returns {Promise<{ protocols: string[], hasModelEnv: boolean } | null>}
+ * @returns {Promise<{ protocols: string[], requiresModel: boolean } | null>}
  */
-async function fetchAgentYaml(samplePath, ref) {
-    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/agent.yaml`;
+async function fetchAzureYaml(samplePath, ref) {
+    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/azure.yaml`;
     try {
         const content = await fetchText(rawUrl);
-        return parseAgentYaml(content);
-    } catch {
-        return null;
-    }
-}
-
-/**
- * Minimal parser for agent.manifest.yaml — detects whether the manifest
- * declares a top-level `resources:` list containing `kind: model`. Matches
- * both `- kind: model` and the multi-line continuation form, and limits
- * scanning to the `resources:` block to avoid false positives.
- * @param {string} content
- * @returns {{ hasModelResource: boolean }}
- */
-function parseAgentManifestYaml(content) {
-    let inResources = false;
-    for (const rawLine of content.split('\n')) {
-        const stripped = rawLine.trim();
-        // Detect top-level key (column 0, e.g. `resources:`, `metadata:`).
-        if (/^[A-Za-z_][\w-]*:/.test(rawLine)) {
-            inResources = stripped.startsWith('resources:');
-            continue;
-        }
-        if (!inResources) {
-            continue;
-        }
-        // Strip optional `- ` so the inline and continuation forms both match.
-        const withoutDash = stripped.replace(/^-\s+/, '');
-        if (withoutDash.startsWith('kind:')) {
-            const value = withoutDash.substring('kind:'.length).trim().replace(/^["']|["']$/g, '');
-            if (value === 'model') {
-                return { hasModelResource: true };
-            }
-        }
-    }
-    return { hasModelResource: false };
-}
-
-/**
- * Fetch and parse agent.manifest.yaml for a sample directory.
- * @param {string} samplePath
- * @param {string} ref
- * @returns {Promise<{ hasModelResource: boolean } | null>}
- */
-async function fetchAgentManifestYaml(samplePath, ref) {
-    const rawUrl = `https://raw.githubusercontent.com/microsoft-foundry/foundry-samples/${ref}/${samplePath}/agent.manifest.yaml`;
-    try {
-        const content = await fetchText(rawUrl);
-        return parseAgentManifestYaml(content);
+        return parseAzureYaml(content);
     } catch {
         return null;
     }
@@ -586,7 +549,7 @@ function displayNameFromPath(samplePath) {
 
 /**
  * Scan the foundry-samples repo and build the flat template list. Uses one
- * recursive git-tree call to enumerate every `agent.yaml` under each
+ * recursive git-tree call to enumerate every `azure.yaml` under each
  * `<language>/hosted-agents/<framework>/` prefix, regardless of intermediate
  * directories. Languages and frameworks are discovered dynamically from the
  * tree (see discoverLanguagesAndFrameworks) rather than hard-coded, then
@@ -615,26 +578,18 @@ async function scanTemplates(commitSha) {
             const templateDirs = findTemplateDirsUnder(tree, prefix);
 
             for (const templatePath of templateDirs) {
-                const agentInfo = await fetchAgentYaml(templatePath, commitSha);
-                if (!agentInfo) {
-                    warn(`Could not fetch or parse agent.yaml for "${templatePath}"; skipping this template.`);
+                const azureInfo = await fetchAzureYaml(templatePath, commitSha);
+                if (!azureInfo) {
+                    warn(`Could not fetch or parse azure.yaml for "${templatePath}"; skipping this template.`);
                     continue;
                 }
 
                 /** @type {string} */
-                const protocol = agentInfo.protocols.length > 0
-                    ? agentInfo.protocols[0]
+                const protocol = azureInfo.protocols.length > 0
+                    ? azureInfo.protocols[0]
                     : inferProtocolFromPath(templatePath);
 
-                let requiresModel = agentInfo.hasModelEnv;
-                // Only consult agent.manifest.yaml when agent.yaml reported no
-                // model env; otherwise we already default to `true`.
-                if (!requiresModel) {
-                    const manifestInfo = await fetchAgentManifestYaml(templatePath, commitSha);
-                    if (manifestInfo?.hasModelResource) {
-                        requiresModel = true;
-                    }
-                }
+                const requiresModel = azureInfo.requiresModel;
 
                 templates.push({
                     language,

From 95624116110108a890f89d2e62ccb12ce158dbc9 Mon Sep 17 00:00:00 2001
From: Yimin Jin <yiminjin@microsoft.com>
Date: Tue, 7 Jul 2026 14:09:46 +0800
Subject: [PATCH 31/34] update protocol displayname

---
 .github/scripts/generate_sample_catalog.mjs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/scripts/generate_sample_catalog.mjs b/.github/scripts/generate_sample_catalog.mjs
index 75e63c4..98970b1 100644
--- a/.github/scripts/generate_sample_catalog.mjs
+++ b/.github/scripts/generate_sample_catalog.mjs
@@ -72,8 +72,8 @@ const DIMENSION_DEFAULTS = {
         title: 'Select a Protocol',
         placeholder: 'Choose the protocol for your agent',
         options: {
-            responses: 'Responses API',
-            invocations: 'Invocations API',
+            responses: 'Responses',
+            invocations: 'Invocations',
             invocations_ws: 'Invocations (WebSocket)',
         },
     },

From a4a37717646deb7b0d6ed5f27f39b9c34d4ac6d1 Mon Sep 17 00:00:00 2001
From: Yimin-Jin <139844715+Yimin-Jin@users.noreply.github.com>
Date: Tue, 7 Jul 2026 06:19:13 +0000
Subject: [PATCH 32/34] ci: sync sample catalog from foundry-samples
 (template/stable)

---
 samples/hosted-agent/sample-catalog.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index 50b8681..2d69657 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "c14a01b61eb6a59aeae140f7db07b420f85fcfb4",
+    "commitSha": "9c4e42a1eedcec32c1582bebeb83a381a23efbe1",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-07-01T09:47:23Z",
+    "generatedAt": "2026-07-07T06:19:12Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -45,15 +45,15 @@
             "options": [
                 {
                     "id": "responses",
-                    "displayName": "Responses API"
+                    "displayName": "Responses"
                 },
                 {
                     "id": "invocations",
-                    "displayName": "Invocations API"
+                    "displayName": "Invocations"
                 },
                 {
                     "id": "invocations_ws",
-                    "displayName": "invocations_ws"
+                    "displayName": "Invocations (WebSocket)"
                 }
             ]
         }

From 2eed89a172e757147f7a7e6daec658ec959740ab Mon Sep 17 00:00:00 2001
From: huimiu <107838226+huimiu@users.noreply.github.com>
Date: Tue, 7 Jul 2026 09:51:26 +0000
Subject: [PATCH 33/34] ci: sync sample catalog from foundry-samples
 (template/stable)

---
 samples/hosted-agent/sample-catalog.json | 831 +----------------------
 1 file changed, 3 insertions(+), 828 deletions(-)

diff --git a/samples/hosted-agent/sample-catalog.json b/samples/hosted-agent/sample-catalog.json
index aa31af1..4dd5dac 100644
--- a/samples/hosted-agent/sample-catalog.json
+++ b/samples/hosted-agent/sample-catalog.json
@@ -1,7 +1,7 @@
 {
-    "commitSha": "9c4e42a1eedcec32c1582bebeb83a381a23efbe1",
+    "commitSha": "a1d8b8f19e5e552283b3e91208d44f4b72553d44",
     "repo": "https://github.com/microsoft-foundry/foundry-samples/",
-    "generatedAt": "2026-07-07T06:19:12Z",
+    "generatedAt": "2026-07-07T09:51:25Z",
     "dimensions": {
         "language": {
             "title": "Select a Language",
@@ -10,10 +10,6 @@
                 {
                     "id": "python",
                     "displayName": "Python"
-                },
-                {
-                    "id": "csharp",
-                    "displayName": "C# (.NET)"
                 }
             ]
         },
@@ -21,21 +17,9 @@
             "title": "Select a Framework",
             "placeholder": "Choose the framework for your agent",
             "options": [
-                {
-                    "id": "copilot-sdk",
-                    "displayName": "Copilot SDK"
-                },
-                {
-                    "id": "agent-framework",
-                    "displayName": "Agent Framework"
-                },
                 {
                     "id": "bring-your-own",
                     "displayName": "Bring Your Own"
-                },
-                {
-                    "id": "langgraph",
-                    "displayName": "LangGraph"
                 }
             ]
         },
@@ -43,17 +27,9 @@
             "title": "Select a Protocol",
             "placeholder": "Choose the protocol for your agent",
             "options": [
-                {
-                    "id": "responses",
-                    "displayName": "Responses"
-                },
                 {
                     "id": "invocations",
-                    "displayName": "Invocations"
-                },
-                {
-                    "id": "invocations_ws",
-                    "displayName": "Invocations (WebSocket)"
+                    "displayName": "Invocations API"
                 }
             ]
         }
@@ -63,465 +39,6 @@
         "placeholder": "Choose a template for your agent"
     },
     "templates": [
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Caller",
-            "description": "Concierge agent that delegates questions to a remote specialist and summarizes answers.",
-            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/caller",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Executor",
-            "description": "Answers arithmetic and math questions as an expert agent.",
-            "path": "samples/csharp/hosted-agents/agent-framework/a2a/01-delegation/executor",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Agent Skills",
-            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
-            "path": "samples/csharp/hosted-agents/agent-framework/agent-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Azure Search RAG",
-            "description": "Support agent answers questions using a keyword-indexed knowledge base for grounding.",
-            "path": "samples/csharp/hosted-agents/agent-framework/azure-search-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Browser Automation",
-            "description": "Automates web browsing, scraping, and form filling in a remote Chromium browser.",
-            "path": "samples/csharp/hosted-agents/agent-framework/browser-automation",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "File Tools",
-            "description": "Agent answers questions using bundled and user-uploaded files as knowledge sources.",
-            "path": "samples/csharp/hosted-agents/agent-framework/file-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Memory RAG",
-            "description": "Personal coach agent that remembers user preferences and goals across sessions.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-memory-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Toolbox MCP Skills",
-            "description": "Agent that dynamically discovers and uses skills from a remote toolbox endpoint.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Toolbox Server Side",
-            "description": "Agent that uses tools from a Foundry Toolbox, invoked server-side by the platform.",
-            "path": "samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server-side",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Hello World",
-            "description": "Minimal hosted agent that responds to user questions and supports multi-turn conversation.",
-            "path": "samples/csharp/hosted-agents/agent-framework/hello-world",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "invocations",
-            "displayName": "Invocations Echo Agent",
-            "description": "Echoes back input messages with a simple prefix for testing agent hosting.",
-            "path": "samples/csharp/hosted-agents/agent-framework/invocations-echo-agent",
-            "requiresModel": false
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Local Tools",
-            "description": "Hotel search assistant that uses local function tools for queries.",
-            "path": "samples/csharp/hosted-agents/agent-framework/local-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "MCP Tools",
-            "description": "Agent answers questions by searching documentation using integrated tool providers.",
-            "path": "samples/csharp/hosted-agents/agent-framework/mcp-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Observability",
-            "description": "Agent with built-in observability for traces, metrics, and logs via Azure Monitor.",
-            "path": "samples/csharp/hosted-agents/agent-framework/observability",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Simple Agent",
-            "description": "General-purpose AI assistant that replies to user input with model-generated responses.",
-            "path": "samples/csharp/hosted-agents/agent-framework/simple-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Teams Activity",
-            "description": "Agent that answers questions about Teams and calendar, and handles file attachments.",
-            "path": "samples/csharp/hosted-agents/agent-framework/teams-activity",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Text Search RAG",
-            "description": "Agent answers support questions using retrieved passages from external documents.",
-            "path": "samples/csharp/hosted-agents/agent-framework/text-search-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Toolbox Auth Paths",
-            "description": "Agent toolbox demonstrates different authentication methods for accessing upstream tools.",
-            "path": "samples/csharp/hosted-agents/agent-framework/toolbox-auth-paths",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Workflows",
-            "description": "Workflow chains three translation agents to show intermediate language outputs.",
-            "path": "samples/csharp/hosted-agents/agent-framework/workflows",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "HelloWorld",
-            "description": "Hosted agent that returns a streaming hello world response from a Foundry model.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/HelloWorld",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Human In The Loop",
-            "description": "Agent that generates proposals and waits for human approval before proceeding.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/human-in-the-loop",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves session-persistent notes with real-time streaming responses.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations/notetaking-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "invocations_ws",
-            "displayName": "HelloWorld",
-            "description": "Routes real-time audio between a browser and a managed voice service session.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/invocations_ws/HelloWorld",
-            "requiresModel": false
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "HelloWorld",
-            "description": "Minimal hosted agent that returns a greeting from a Foundry model using the Responses API.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/HelloWorld",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Background Agent",
-            "description": "Handles research analysis requests asynchronously with background processing and streaming updates.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/background-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Browser Automation",
-            "description": "",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/browser-automation",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Env Vars Agent",
-            "description": "Agent retrieves environment variable values with safety policies based on their type.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/env-vars-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "csharp",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves session-persistent notes for each user.",
-            "path": "samples/csharp/hosted-agents/bring-your-own/responses/notetaking-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Caller",
-            "description": "Concierge agent that delegates questions to a remote specialist and summarizes the answers.",
-            "path": "samples/python/hosted-agents/agent-framework/a2a/01-delegation/caller",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Executor",
-            "description": "Answers arithmetic and math questions as an expert agent.",
-            "path": "samples/python/hosted-agents/agent-framework/a2a/01-delegation/executor",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "invocations",
-            "displayName": "Basic",
-            "description": "Agent with in-memory session management for multi-turn conversations.",
-            "path": "samples/python/hosted-agents/agent-framework/invocations/01-basic",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Basic",
-            "description": "Agent that supports multi-turn conversations with response tracking.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/01-basic",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Tools",
-            "description": "Agent with custom tools like weather lookup callable during conversation.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/02-tools",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "MCP",
-            "description": "Agent that dynamically discovers and invokes tools from a remote GitHub Copilot MCP server.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/03-mcp",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Toolbox",
-            "description": "Agent that discovers and invokes centrally managed tools from a Foundry Toolbox.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Workflows",
-            "description": "Processes requests through slogan writing, legal review, and formatting agents in sequence.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/05-workflows",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Files",
-            "description": "Agent that lists, reads, and interprets files using shell and code tools.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/06-files",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Skills",
-            "description": "Agent that discovers and runs local file-based skills like generating PDF travel guides.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/07-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Teams Activity",
-            "description": "Agent that answers questions about Teams and calendar, including handling file attachments.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/07-teams-activity",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Observability",
-            "description": "Agent with built-in observability and telemetry for diagnostics and monitoring.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/08-observability",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Declarative Customer Support",
-            "description": "Customer support triage agent that routes requests to specialized agents based on conversation history.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/09-declarative-customer-support",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Downstream Azure",
-            "description": "Agent performs data operations on Blob Storage and Service Bus using its own identity.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/10-downstream-azure",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Azure Search RAG",
-            "description": "Answers questions using product documentation and cites sources from a search index.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/11-azure-search-rag",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Skills",
-            "description": "Agent that loads behavioral guidelines from Foundry Skills at startup for dynamic updates.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/12-foundry-skills",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Memory",
-            "description": "Agent that remembers user facts across sessions using persistent semantic memory.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/13-foundry-memory",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Browser Automation Agent",
-            "description": "Automates web browsing tasks such as navigation, scraping, and form filling in a remote browser.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/14-browser-automation-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Optimization Travel Approver",
-            "description": "Agent that reviews and approves travel requests for employees.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/15-optimization-travel-approver",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Content Safety Guardrail",
-            "description": "Agent screens prompts and responses for harmful content based on a safety policy.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/16-content-safety-guardrail",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "agent-framework",
-            "protocol": "responses",
-            "displayName": "Foundry Iq Toolbox",
-            "description": "Answers user questions using a knowledge base accessed through a remote toolbox connection.",
-            "path": "samples/python/hosted-agents/agent-framework/responses/17-foundry-iq-toolbox",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "AG UI",
-            "description": "Agent that streams AG-UI lifecycle events in response to user input.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/ag-ui",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Claude Agent SDK",
-            "description": "Agent that streams responses from a Claude model for plain text input.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk",
-            "requiresModel": false
-        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -531,42 +48,6 @@
             "path": "samples/python/hosted-agents/bring-your-own/invocations/diagnostic-agent",
             "requiresModel": false
         },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Event Grid Trigger",
-            "description": "Processes new blobs in Azure Storage by summarizing content and saving results to a summary container.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/event-grid-trigger",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "copilot-sdk",
-            "protocol": "invocations",
-            "displayName": "GitHub Copilot",
-            "description": "Agent streams Copilot session events with support for multi-turn conversations.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/github-copilot",
-            "requiresModel": false
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Hello World",
-            "description": "Hosted agent that streams a model's reply as a server-sent event.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/hello-world",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Human In The Loop",
-            "description": "Agent that generates proposals and waits for human approval before proceeding.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/human-in-the-loop",
-            "requiresModel": true
-        },
         {
             "language": "python",
             "framework": "bring-your-own",
@@ -575,312 +56,6 @@
             "description": "Conversational agent with session history and built-in time and calculator tools.",
             "path": "samples/python/hosted-agents/bring-your-own/invocations/langgraph-chat",
             "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/notetaking-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Toolbox",
-            "description": "Agent connects to a toolbox server and enables tool discovery and invocation during chat.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations/toolbox",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations_ws",
-            "displayName": "Duplex Live Agent",
-            "description": "Real-time voice agent that handles conversation and background tasks in parallel.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/duplex-live-agent",
-            "requiresModel": false
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations_ws",
-            "displayName": "Hello World",
-            "description": "Real-time voice agent that relays audio and events between browser and a managed service.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/hello-world",
-            "requiresModel": false
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations_ws",
-            "displayName": "Livekit Server",
-            "description": "Voice agent connects to a LiveKit server for real-time audio conversations.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/livekit-server",
-            "requiresModel": false
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations_ws",
-            "displayName": "Pipecat Webrtc",
-            "description": "Real-time voice agent with multi-agent pipeline and WebRTC audio media support.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/pipecat-webrtc",
-            "requiresModel": false
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations_ws",
-            "displayName": "Pipecat Ws Server",
-            "description": "Real-time voice agent with greeting and order-checking capabilities.",
-            "path": "samples/python/hosted-agents/bring-your-own/invocations_ws/pipecat-ws-server",
-            "requiresModel": false
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Background Agent",
-            "description": "Handles long-running research analysis requests with background processing and streaming updates.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/background-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Bring Your Own Toolbox",
-            "description": "Agent connects to a remote toolbox and enables tool invocation during conversations.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/bring-your-own-toolbox",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Browser Automation",
-            "description": "Automates web browsers for tasks like form filling and web scraping with session control.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/browser-automation",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Env Vars Agent",
-            "description": "Agent that reveals environment variable values with safety policies based on their type.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/env-vars-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Hello World",
-            "description": "Hosted agent that returns a hello world message from a Foundry model using a custom backend.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/hello-world",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Langgraph Chat",
-            "description": "Conversational agent with built-in calculator and time tools, streaming responses.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/langgraph-chat",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Langgraph Toolbox",
-            "description": "Agent that dynamically loads tools from a remote toolbox and handles incoming requests.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/langgraph-toolbox",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Langgraph Toolbox User Identity",
-            "description": "Agent that accesses mail, calendar, and GitHub tools for user-identity scenarios.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/langgraph-toolbox-user-identity",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Notetaking Agent",
-            "description": "Agent that saves and retrieves notes with per-session isolation and streaming responses.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/notetaking-agent",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "OpenAI Agents SDK",
-            "description": "Minimal agent that streams text responses from a Foundry model.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Optimization Customer Support",
-            "description": "Customer support agent for troubleshooting and product assistance.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-customer-support",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Optimization Hello World",
-            "description": "Minimal hosted agent that returns a static greeting message.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/optimization-hello-world",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Session Multiplexing",
-            "description": "Supports multiple users sharing a session while keeping response chains user-specific.",
-            "path": "samples/python/hosted-agents/bring-your-own/responses/session-multiplexing",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Foreground Background Agents Responses Voicelive",
-            "description": "Voice agent that routes quick replies to users and delegates long tasks to a background worker.",
-            "path": "samples/python/hosted-agents/bring-your-own/voicelive/foreground-background-agents-responses-voicelive",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "responses",
-            "displayName": "Handoff Langgraph Responses Voicelive",
-            "description": "Customer support agent with triage and handoff between refund and order specialists.",
-            "path": "samples/python/hosted-agents/bring-your-own/voicelive/handoff-langgraph-responses-voicelive",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Hello World Invocations Voicelive",
-            "description": "Minimal hosted agent for real-time voice interactions with audio transcription streaming.",
-            "path": "samples/python/hosted-agents/bring-your-own/voicelive/hello-world-invocations-voicelive",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "bring-your-own",
-            "protocol": "invocations",
-            "displayName": "Hotel Booking Invocations Voicelive",
-            "description": "Hotel booking agent that handles speech and UI actions with session state and streaming.",
-            "path": "samples/python/hosted-agents/bring-your-own/voicelive/hotel-booking-invocations-voicelive",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "A2a Caller",
-            "description": "Concierge agent that delegates specialist questions to a remote expert agent.",
-            "path": "samples/python/hosted-agents/langgraph/a2a/a2a-caller",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "A2a Executor",
-            "description": "Math expert agent that answers questions and explains steps, callable by other agents.",
-            "path": "samples/python/hosted-agents/langgraph/a2a/a2a-executor",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "invocations",
-            "displayName": "Langgraph Chat",
-            "description": "Multi-turn chat agent with tools for current time and math calculations.",
-            "path": "samples/python/hosted-agents/langgraph/invocations/01-langgraph-chat",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "Langgraph Chat",
-            "description": "Chat agent with tools for current time and math calculations.",
-            "path": "samples/python/hosted-agents/langgraph/responses/01-langgraph-chat",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "Langgraph Toolbox",
-            "description": "Agent that uses a toolbox for web search and GitHub Copilot MCP tools with managed credentials.",
-            "path": "samples/python/hosted-agents/langgraph/responses/02-langgraph-toolbox",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "MCP",
-            "description": "Agent that discovers and invokes tools from a remote server for enhanced capabilities.",
-            "path": "samples/python/hosted-agents/langgraph/responses/04-mcp",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "Workflows",
-            "description": "Processes a request through slogan writing, legal review, and formatting steps.",
-            "path": "samples/python/hosted-agents/langgraph/responses/05-workflows",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "Files",
-            "description": "Agent that analyzes and manipulates files using local and sandboxed tools.",
-            "path": "samples/python/hosted-agents/langgraph/responses/06-files",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "Human In The Loop",
-            "description": "Agent drafts proposals and pauses for human review with approve, revise, or reject options.",
-            "path": "samples/python/hosted-agents/langgraph/responses/07-human-in-the-loop",
-            "requiresModel": true
-        },
-        {
-            "language": "python",
-            "framework": "langgraph",
-            "protocol": "responses",
-            "displayName": "Observability",
-            "description": "Agent with automatic tracing for observability of all actions and tool invocations.",
-            "path": "samples/python/hosted-agents/langgraph/responses/08-observability",
-            "requiresModel": true
         }
     ]
 }

From 9c71ee33a08fe49e18fd93de38cc201aea2dfb7e Mon Sep 17 00:00:00 2001
From: PARVEZ MOSHARAF
 <299873123+developerparvezmosharaf@users.noreply.github.com>
Date: Wed, 15 Jul 2026 19:03:02 +0000
Subject: [PATCH 34/34] Initial commit