──────

### Summary of Changes 1. Documentation Consolidation: • Relocated the docs/ folder and all repository .md files (README.md, DEPLOYMENT.md, DOCKER_README.md, DOMAINS_README.md, GETTING_STARTED.md, CI_CD_PORTAINER_GUIDE.md, ADMIN_DEPLOYMENT_SUMMARY.md, SECURITY_PRIVATE_FILES.md, handoff.md, azure-project-plan.md, plus service-specific READMEs) into . • Updated document links in README.md. 2. AI Agent Project Map: • Created PROJECT_MAP.md in the project root containing complete architecture diagrams, service specs, ports, DB schemas, environment variables, and developer workflows. • Added PROJECT_MAP.md to .gitignore. 3. Monitoring UI & Infrastructure Integration: • Added monitoring_ui service to docker-compose.yml (port 5175). • Configured Gitea workflow docker-build.yml for monitoring_ui builds. • Added CORS middleware headers in index.js. • Added nginx.conf copy step in Dockerfile. ────── ### Recommended Commit Message docs: consolidate project documentation into monitoring_ui and add agent project map - Move all markdown documentation files and docs/ folder into monitoring_ui/docs/ - Update documentation hub index (monitoring_ui/docs/README.md) with relative paths - Generate comprehensive AI agent reference map (PROJECT_MAP.md) in repository root - Add PROJECT_MAP.md and monitoring_ui build output/env overrides to .gitignore - Integrate monitoring_ui service into docker-compose.yml and Gitea CI workflow - Configure CORS handling in employee_api for monitoring dashboard access ────── ### Alternative Short Commit Message refactor(docs): move docs to monitoring_ui and create AI agent PROJECT_MAP.md
2026-09-20 23:33:55 +02:00
parent f935bbeb8c
commit 635a130f0b
195 changed files with 28309 additions and 957 deletions
@@ -0,0 +1,59 @@
+<!-- azure-cor-disclaimer -->
+> **Important:** This skill provides guidance and recommended instructions to assist the AI system. Outputs are not guaranteed to be complete, correct, secure, or applicable to every scenario. Results should be reviewed and validated by a human before being applied. The AI model may choose not to follow all instructions exactly, and additional verification may be required.
+
+# Approval Gate Template
+
+Display template for the deploy approval gate. Present after preflight validation, before execution.
+
+## Display Format
+
+```
+## Deploy Approval
+
+🏢 **Subscription:** {context.json.azure.subscriptionName} (`{context.json.azure.subscriptionId}`)
+📁 **Resource Group:** {context.json.azure.resourceGroup}
+🌍 **Region:** {context.json.azure.region}
+
+**Services:**
+| Service | SKU | Region | Resource Name |
+|---------|-----|--------|---------------|
+{for each service in prepare-plan.json.services[]}
+
+**💰 Estimated Monthly Cost:** ${costEstimate.monthlyUsd}/month
+| Service | SKU | Monthly |
+|---------|-----|---------|
+{for each item in costEstimate.breakdown[]}
+{costEstimate.disclaimer}
+
+**🔒 Validation:** {scaffold-manifest.json.validationResult.status}
+{if FLAGGED findings from scaffold self-review → ⚠️ list each}
+
+**📋 What-if preview:** {N} resources to create, {N} to modify, {N} unchanged
+{if any Delete operations → ⚠️ list each deleted resource with name + type}
+
+**Generated Files:**
+{for each file in scaffold-manifest.json.files[]}
+
+**📦 Deployment Summary:**
+{Display the "What's Being Deployed" table here, built from prepare-plan.json.services[] — showing which components map to which Azure services, SKUs, and estimated costs. (deployment-summary.md is not written until the deploy/handoff phase)}
+
+---
+**🚀 Ready to deploy? (Yes / Run manually / Edit plan / Cancel)**
+```
+
+## Response Handlers
+
+| Response | Action |
+|----------|--------|
+| **Yes** | Execute deployment (Step 6 of deploy workflow). Do NOT re-confirm. |
+| **Run manually** | Show exact CLI commands based on `iacFormat`:<br>**Bicep (subscription-scope, default):** `az deployment sub create --subscription {subscriptionId} --location {location} --template-file infra/main.bicep --parameters @infra/main.parameters.json --query properties.provisioningState -o tsv`<br>**Bicep (resource-group scope, after 403 fallback):** `az deployment group create --resource-group {rg} --template-file infra/main.bicep --parameters @infra/main.parameters.json --query properties.provisioningState -o tsv`<br>**Terraform (alternative):** `cd infra && terraform init && terraform plan -out=tfplan && terraform apply tfplan`. Stop. |
+| **Edit plan** | Ask what to change → write to `context.json.overrides[]` → re-run prepare (Step 4) → re-scaffold → return to approval gate |
+| **Cancel** | Preserve all session artifacts. Say "💾 Session preserved — resume anytime." Stop. |
+
+## Rules
+
+- ⛔ Gate is the LAST content in the response — no continued execution until user replies
+- ⛔ SKU column must show exact Azure SKU code + tier name (e.g., "B1 Linux (Basic)", "P1v3 (Premium)") — not generic labels like "cheapest tier". F1/D1/Free are never selected.
+- Always show the monthly cost estimate — there is no $0 tier (B1 floor ~$13/mo)
+- Surface ALL `FLAGGED` self-review findings — user must see risks before approving
+- If validation failed, show failures and block Yes option until resolved