@@ -24,5 +26,75 @@ /providers/Microsoft.CognitiveServices/accounts/`.
+- Added endpoint-based resource-name inference for common custom-domain Speech endpoints.
+- Persisted the helper fields in admin settings and the seeded sample admin settings artifact.
+
+## Validation
+
+### Before
+
+- Admins had to find or type the full Speech Resource ID manually.
+- The portal location for the Resource ID was easy to miss.
+
+### After
+
+- Admins can provide the subscription ID, resource group, and Speech resource name and let the UI build the full Resource ID.
+- The built value is still editable, so manual overrides remain possible.
\ No newline at end of file
diff --git a/docs/explanation/release_notes.md b/docs/explanation/release_notes.md
index 1092c4c8..da34cbad 100644
--- a/docs/explanation/release_notes.md
+++ b/docs/explanation/release_notes.md
@@ -4,6 +4,44 @@ This page tracks notable Simple Chat releases and organizes the detailed change
For feature-focused and fix-focused drill-downs by version, see [Features by Version](/explanation/features/) and [Fixes by Version](/explanation/fixes/).
+### **(v0.241.006)**
+
+#### Bug Fixes
+
+* **Speech and Video Indexer Setup Guidance Alignment**
+ * Fixed stale admin guidance around Azure AI Video Indexer and shared Azure Speech configuration so managed-identity setup no longer points admins toward legacy Video Indexer API keys or incomplete Speech instructions.
+ * The admin experience now reflects the shared Speech resource model, adds Speech Resource ID helper fields, and keeps managed-identity voice-response requirements aligned with runtime behavior.
+ * (Ref: `admin_settings.html`, `admin_settings.js`, `route_backend_tts.py`, `functions_documents.py`, shared Speech and Video Indexer guidance)
+
+* **Agent Output Token Defaults and Foundry Limit Enforcement**
+ * Fixed stale agent output-token defaults so new and normalized agents now use `-1` to defer to the provider or model default instead of silently reintroducing older fixed caps.
+ * Azure AI Foundry agent execution now also honors saved output-token settings in both classic Foundry agent runs and new Foundry Responses-based runs, so configured limits are enforced consistently instead of only being stored in agent configuration.
+ * (Ref: `functions_global_agents.py`, `agent.schema.json`, `foundry_agent_runtime.py`, `test_foundry_token_limit_defaults.py`)
+
+* **Tabular Exhaustive Result Synthesis Retry**
+ * Fixed exhaustive tabular questions such as "list all" requests so the workflow no longer stops at an answer that claims only sample rows or workbook metadata are available after analytical tool calls already returned the full matching result set.
+ * General tabular analysis now detects full versus partial result coverage from tool metadata, retries incomplete synthesis when necessary, and adds stronger prompt guidance so the final answer uses the returned analytical results directly.
+ * (Ref: `route_backend_chats.py`, `test_tabular_exhaustive_result_synthesis_fix.py`, `TABULAR_EXHAUSTIVE_RESULT_SYNTHESIS_FIX.md`)
+
+* **Group Workspace Documents and Prompts Load Recovery**
+ * Fixed a Group Workspace page-load regression where active-group initialization could fail on a missing prompt-role UI container and stop the rest of the page from rendering correctly.
+ * Group document and prompt content now continue loading even if the prompt permission banner or create-button container is unavailable during startup, preventing blank content areas caused by a JavaScript null-reference error.
+ * Added functional and UI regression coverage for the guarded prompt-role path so future changes do not reintroduce the same startup failure.
+ * (Ref: `group_workspaces.html`, `test_group_workspace_prompt_role_ui_guard.py`, `test_group_workspace_prompt_role_containers_ui.py`)
+
+* **Audio and Video Enhanced Citation Badge Consistency**
+ * Fixed blob-backed audio and video documents showing Standard citations in workspace details even when Enhanced Citations was enabled and the same files already opened through the enhanced citation experience on the chat page.
+ * Document metadata now persists and normalizes the `enhanced_citations` flag from blob-backed storage state so existing media uploads and new uploads both render the correct Enhanced badge across workspace and chat flows.
+ * Added regression coverage and fix documentation for the metadata normalization path.
+ * (Ref: `functions_documents.py`, `route_enhanced_citations.py`, `test_media_enhanced_citations_metadata_flag.py`, `MEDIA_ENHANCED_CITATION_BADGE_FIX.md`)
+
+#### User Interface Enhancements
+
+* **AI Voice Conversations Setup Guide**
+ * Added an in-app Setup Guide modal to the AI Voice Conversations admin card so admins can configure Azure Speech without leaving Admin Settings.
+ * The guide includes a live snapshot of the current Speech configuration, explains key versus managed-identity authentication, and now walks admins through enabling the required custom domain in Azure portal before verifying the endpoint on Keys and Endpoint.
+ * (Ref: `admin_settings.html`, `_speech_service_info.html`, `azure_speech_managed_identity_manul_setup.md`, `test_admin_multimedia_guidance.py`)
+
### **(v0.241.002)**
#### Bug Fixes
diff --git a/docs/how-to/azure_speech_managed_identity_manul_setup.md b/docs/how-to/azure_speech_managed_identity_manul_setup.md
index bf1b6e74..f991e02a 100644
--- a/docs/how-to/azure_speech_managed_identity_manul_setup.md
+++ b/docs/how-to/azure_speech_managed_identity_manul_setup.md
@@ -2,7 +2,7 @@
## Overview
-This guide explains the critical difference between key-based and managed identity authentication when configuring Azure Speech Service, and the required steps to enable managed identity properly.
+This guide explains the critical difference between key-based and managed identity authentication when configuring Azure Speech Service, and the required steps to enable managed identity properly. In Simple Chat, the same Speech configuration is shared across audio uploads, speech-to-text chat input, and text-to-speech voice responses.
## Authentication Methods: Regional vs. Resource-Specific Endpoints
@@ -74,6 +74,8 @@ Headers:
3. If your App Service MI has `Cognitive Services Speech User` role β authorized
4. The request proceeds to your dedicated Speech resource instance
+For some transcription operations, you may also need `Cognitive Services Speech Contributor`. Start with `Speech User`, then add `Speech Contributor` if transcription still fails after endpoint and identity configuration are correct.
+
---
## Required Setup for Managed Identity
@@ -84,13 +86,32 @@ Headers:
2. **System-assigned or user-assigned managed identity** on your App Service
3. **RBAC role assignments** on the Speech resource
-### Step 1: Enable Custom Subdomain on Speech Resource
+### Step 1: Turn On the Custom Domain on the Speech Resource
**Why needed**: By default, Speech resources use the regional endpoint and do NOT have custom subdomains. Managed identity requires the resource-specific endpoint.
-**How to enable**:
+#### Azure portal walkthrough
+
+1. Go to the Azure portal and open your **Azure AI Speech** resource.
+2. In the left pane under **Resource Management**, select **Networking**.
+3. Open the **Firewalls and virtual networks** tab.
+4. Select **Generate Custom Domain Name**.
+5. Enter a globally unique custom domain name. The final endpoint will look like `https://.cognitiveservices.azure.com`.
+6. Select **Save**.
+7. After the update finishes, open **Keys and Endpoint** and confirm the resource endpoint now starts with `https://.cognitiveservices.azure.com`.
+
+**Important notes**:
+- Custom subdomain name must be **globally unique** across Azure
+- Usually use the same name as your resource: ``
+- **One-way operation**: Cannot be disabled once enabled
+- Microsoft Learn recommends trying the change on a test resource first if the production Speech resource already has many Speech Studio models or projects
+
+#### Azure CLI alternative
+
+If you prefer CLI instead of the portal:
```bash
+az account set --subscription
az cognitiveservices account update \
--name \
--resource-group \
@@ -100,19 +121,22 @@ az cognitiveservices account update \
**Example**:
```bash
+az account set --subscription
az cognitiveservices account update \
--name simplechat6-dev-speech \
--resource-group sc-simplechat6-dev-rg \
--custom-domain simplechat6-dev-speech
```
-**Important notes**:
-- Custom subdomain name must be **globally unique** across Azure
-- Usually use the same name as your resource: ``
-- **One-way operation**: Cannot be disabled once enabled
-- After enabling, the resource's endpoint property changes from regional to resource-specific
+#### Verify the custom domain is enabled
+
+Portal verification:
+
+1. Open the Speech resource.
+2. Go to **Keys and Endpoint**.
+3. Confirm the endpoint now starts with `https://.cognitiveservices.azure.com` instead of `https://.api.cognitive.microsoft.com`.
-**Verify custom subdomain is enabled**:
+CLI verification:
```bash
az cognitiveservices account show \
@@ -146,13 +170,13 @@ MI_PRINCIPAL_ID=$(az webapp identity show \
--resource-group \
--query principalId -o tsv)
-# Assign Cognitive Services Speech User role (data-plane read access)
+# Assign Cognitive Services Speech User role (baseline data-plane access)
az role assignment create \
--assignee $MI_PRINCIPAL_ID \
--role "Cognitive Services Speech User" \
--scope $SPEECH_RESOURCE_ID
-# Assign Cognitive Services Speech Contributor role (if needed for write operations)
+# Assign Cognitive Services Speech Contributor role (if transcription operations still require it)
az role assignment create \
--assignee $MI_PRINCIPAL_ID \
--role "Cognitive Services Speech Contributor" \
@@ -172,19 +196,30 @@ az role assignment list \
In the Admin Settings β Search & Extract β Multimedia Support section:
+- Use the **Setup Guide** button on the **AI Voice Conversations** card if you want an in-app walkthrough while filling the Speech fields.
+
| Setting | Value | Example |
|---------|-------|---------|
| **Enable Audio File Support** | β
Checked | |
+| **Enable Speech-to-Text Input** | Optional | |
+| **Enable Text-to-Speech** | Optional | |
| **Speech Service Endpoint** | Resource-specific endpoint (with custom subdomain) | `https://simplechat6-dev-speech.cognitiveservices.azure.com` |
| **Speech Service Location** | Azure region | `eastus2` |
| **Speech Service Locale** | Language locale for transcription | `en-US` |
| **Authentication Type** | Managed Identity | |
+| **Speech Subscription ID** | Optional helper for building the ARM resource ID in the Admin UI | `12345678-1234-1234-1234-123456789abc` |
+| **Speech Resource Group** | Optional helper for building the ARM resource ID in the Admin UI | `rg-speech-prod` |
+| **Speech Resource Name** | Optional helper for building the ARM resource ID in the Admin UI | `my-speech-resource` |
| **Speech Service Key** | (Leave empty when using MI) | |
+| **Speech Resource ID** | Required when using managed identity for text-to-speech | `/subscriptions/.../providers/Microsoft.CognitiveServices/accounts/` |
**Critical**:
- Endpoint must be the resource-specific URL (custom subdomain)
- Do NOT use the regional endpoint for managed identity
+- If you have not created the custom domain yet, use the Azure portal walkthrough in Step 1 before saving the Speech endpoint in Admin Settings
- Remove trailing slash from endpoint: β
`https://..azure.com` β `https://..azure.com/`
+- If text-to-speech is enabled with managed identity, set the full Speech Resource ID in Admin Settings
+- If you do not know the full resource ID, the Admin Settings page can build it from Subscription ID, Resource Group, and Speech Resource Name
### Step 4: Test Audio Upload
@@ -228,6 +263,14 @@ In the Admin Settings β Search & Extract β Multimedia Support section:
**Solution**: Assign required roles using Step 2 above
+### Error: Text-to-speech fails with MI but transcription works
+
+**Symptom**: Audio uploads or speech-to-text input succeed, but `/api/chat/tts` fails when authentication type is Managed Identity.
+
+**Cause**: Text-to-speech managed identity also requires the Speech Resource ID in addition to the custom-domain endpoint and region.
+
+**Solution**: Populate **Speech Resource ID** in Admin Settings and verify the App Service managed identity has the required RBAC role(s).
+
### Key auth works but MI fails
**Diagnosis checklist**:
diff --git a/docs/latest-release/index.md b/docs/latest-release/index.md
index a6b1f253..0f55a08a 100644
--- a/docs/latest-release/index.md
+++ b/docs/latest-release/index.md
@@ -5,74 +5,4 @@ description: "Current feature guides with previous release highlights kept for r
section: "Latest Release"
---
-{% assign feature_data = site.data.latest_release_features %}
-
-
-
-
-{% for group in feature_data.previous_release_groups %}
-
', content.find('id="other" role="tabpanel"'))
-
- if multimedia_support_section > search_extract_end:
- print("β Multimedia Support section appears to be outside Search and Extract tab")
- return False
-
- print("β
Multimedia Support section successfully moved to Search and Extract tab")
+
+ print("β
Multimedia Support section is in Search and Extract")
return True
-
- except Exception as e:
- print(f"β Test failed: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed: {exc}")
import traceback
traceback.print_exc()
return False
+
def test_video_indexer_modal():
"""Test that Video Indexer configuration modal is properly integrated."""
print("π Testing Video Indexer configuration modal...")
-
+
try:
- # Check that the modal template file exists
modal_path = os.path.join(
- os.path.dirname(os.path.abspath(__file__)),
+ os.path.dirname(os.path.abspath(__file__)),
'..', 'application', 'single_app', 'templates', '_video_indexer_info.html'
)
-
+
if not os.path.exists(modal_path):
print("β Video Indexer modal template file not found")
return False
-
- # Read the modal template
- with open(modal_path, 'r', encoding='utf-8') as f:
- modal_content = f.read()
-
- # Check for essential modal components
+
+ with open(modal_path, 'r', encoding='utf-8') as file_handle:
+ modal_content = file_handle.read()
+
required_elements = [
'id="videoIndexerInfoModal"',
'Azure AI Video Indexer Configuration Guide',
- 'Create Azure AI Video Indexer Account',
- 'Get API Keys and Configuration',
- 'Configuration Values Reference',
+ 'Cloud / Endpoint Mode',
+ 'App Service system-assigned managed identity',
+ 'Contributor role',
'updateVideoIndexerModalInfo()'
]
-
+
for element in required_elements:
if element not in modal_content:
print(f"β Missing modal element: {element}")
return False
-
- # Check that admin_settings.html includes the modal
+
admin_settings_path = os.path.join(
- os.path.dirname(os.path.abspath(__file__)),
+ os.path.dirname(os.path.abspath(__file__)),
'..', 'application', 'single_app', 'templates', 'admin_settings.html'
)
-
- with open(admin_settings_path, 'r', encoding='utf-8') as f:
- admin_content = f.read()
-
- if "_video_indexer_info.html" not in admin_content:
+
+ with open(admin_settings_path, 'r', encoding='utf-8') as file_handle:
+ admin_content = file_handle.read()
+
+ if '_video_indexer_info.html' not in admin_content:
print("β Video Indexer modal not included in admin_settings.html")
return False
-
- # Check for the modal trigger button
+
if 'data-bs-target="#videoIndexerInfoModal"' not in admin_content:
print("β Video Indexer modal trigger button not found")
return False
-
+
print("β
Video Indexer configuration modal properly integrated")
return True
-
- except Exception as e:
- print(f"β Test failed: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed: {exc}")
import traceback
traceback.print_exc()
return False
+
+def test_speech_service_modal():
+ """Test that the AI Voice configuration modal is properly integrated."""
+ print("π Testing AI Voice configuration modal...")
+
+ try:
+ modal_path = os.path.join(
+ os.path.dirname(os.path.abspath(__file__)),
+ '..', 'application', 'single_app', 'templates', '_speech_service_info.html'
+ )
+
+ if not os.path.exists(modal_path):
+ print("β Speech Service modal template file not found")
+ return False
+
+ with open(modal_path, 'r', encoding='utf-8') as file_handle:
+ modal_content = file_handle.read()
+
+ required_elements = [
+ 'id="speechServiceInfoModal"',
+ 'Azure AI Voice Conversations Configuration Guide',
+ 'Cognitive Services Speech User',
+ 'custom-domain Speech endpoint',
+ 'Generate Custom Domain Name',
+ 'Keys and Endpoint',
+ 'updateSpeechServiceModalInfo()'
+ ]
+
+ for element in required_elements:
+ if element not in modal_content:
+ print(f"β Missing Speech modal element: {element}")
+ return False
+
+ admin_settings_path = os.path.join(
+ os.path.dirname(os.path.abspath(__file__)),
+ '..', 'application', 'single_app', 'templates', 'admin_settings.html'
+ )
+
+ with open(admin_settings_path, 'r', encoding='utf-8') as file_handle:
+ admin_content = file_handle.read()
+
+ if '_speech_service_info.html' not in admin_content:
+ print("β Speech Service modal not included in admin_settings.html")
+ return False
+
+ if 'data-bs-target="#speechServiceInfoModal"' not in admin_content:
+ print("β Speech Service modal trigger button not found")
+ return False
+
+ print("β
AI Voice configuration modal properly integrated")
+ return True
+
+ except Exception as exc:
+ print(f"β Test failed: {exc}")
+ import traceback
+ traceback.print_exc()
+ return False
+
+
def test_multimedia_settings_preserved():
"""Test that all multimedia settings are preserved in the new location."""
print("π Testing multimedia settings preservation...")
-
+
try:
- # Read the admin_settings.html file
admin_settings_path = os.path.join(
- os.path.dirname(os.path.abspath(__file__)),
+ os.path.dirname(os.path.abspath(__file__)),
'..', 'application', 'single_app', 'templates', 'admin_settings.html'
)
-
- with open(admin_settings_path, 'r', encoding='utf-8') as f:
- content = f.read()
-
- # Check for video file support settings
+
+ with open(admin_settings_path, 'r', encoding='utf-8') as file_handle:
+ content = file_handle.read()
+
video_settings = [
'id="enable_video_file_support"',
+ 'id="video_indexer_cloud"',
'id="video_indexer_endpoint"',
+ 'id="video_indexer_endpoint_display"',
+ 'id="video_indexer_custom_endpoint"',
'id="video_indexer_account_id"',
- 'id="video_indexer_api_key"',
'id="video_indexer_location"',
'id="video_indexer_resource_group"',
'id="video_indexer_subscription_id"',
'id="video_indexer_account_name"',
'id="video_index_timeout"'
]
-
+
for setting in video_settings:
if setting not in content:
print(f"β Missing video setting: {setting}")
return False
-
- # Check for audio file support settings
+
audio_settings = [
'id="enable_audio_file_support"',
+ 'id="enable_speech_to_text_input"',
+ 'id="enable_text_to_speech"',
'id="speech_service_endpoint"',
'id="speech_service_location"',
+ 'id="speech_service_subscription_id"',
+ 'id="speech_service_resource_group"',
+ 'id="speech_service_resource_name"',
'id="speech_service_locale"',
+ 'id="speech_service_authentication_type"',
+ 'id="speech_service_resource_id"',
'id="speech_service_key"'
]
-
+
for setting in audio_settings:
if setting not in content:
print(f"β Missing audio setting: {setting}")
return False
-
- # Check for Enhanced Citations reference
- if 'Enhanced Citations' not in content:
- print("β Enhanced Citations reference not found")
+
+ if 'video_indexer_api_key' in content:
+ print("β Legacy Video Indexer API key field should not be present")
return False
-
- print("β
All multimedia settings preserved in new location")
+
+ print("β
All multimedia settings preserved in current location")
return True
-
- except Exception as e:
- print(f"β Test failed: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed: {exc}")
import traceback
traceback.print_exc()
return False
+
def test_version_update():
"""Test that the version has been updated in config.py."""
print("π Testing version update...")
-
+
try:
- # Read the config.py file
config_path = os.path.join(
- os.path.dirname(os.path.abspath(__file__)),
+ os.path.dirname(os.path.abspath(__file__)),
'..', 'application', 'single_app', 'config.py'
)
-
- with open(config_path, 'r', encoding='utf-8') as f:
- content = f.read()
-
- # Check for version update
- if 'VERSION = "0.229.017"' not in content:
- print("β Version not updated to 0.229.017")
+
+ with open(config_path, 'r', encoding='utf-8') as file_handle:
+ content = file_handle.read()
+
+ if 'VERSION = "0.241.010"' not in content:
+ print("β Version not updated to 0.241.010")
return False
-
- print("β
Version successfully updated to 0.229.017")
+
+ print("β
Version successfully updated to 0.241.010")
return True
-
- except Exception as e:
- print(f"β Test failed: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed: {exc}")
import traceback
traceback.print_exc()
return False
+
if __name__ == "__main__":
tests = [
test_multimedia_support_move,
test_video_indexer_modal,
+ test_speech_service_modal,
test_multimedia_settings_preserved,
- test_version_update
+ test_version_update,
]
-
+
results = []
-
+
for test in tests:
print(f"\nπ§ͺ Running {test.__name__}...")
results.append(test())
-
+
success = all(results)
print(f"\nπ Results: {sum(results)}/{len(results)} tests passed")
-
+
if success:
- print("β
All tests passed! Multimedia support successfully moved to Search and Extract tab with Video Indexer configuration modal.")
+ print("β
All tests passed! Multimedia support guidance matches the current shared Speech and Video Indexer configuration.")
else:
print("β Some tests failed. Please review the changes.")
-
+
sys.exit(0 if success else 1)
diff --git a/functional_tests/test_tabular_entity_lookup_mode.py b/functional_tests/test_tabular_entity_lookup_mode.py
index 990513fb..d453dabe 100644
--- a/functional_tests/test_tabular_entity_lookup_mode.py
+++ b/functional_tests/test_tabular_entity_lookup_mode.py
@@ -205,7 +205,7 @@ def test_entity_lookup_primary_sheet_hint_prefers_anchor_entity_sheet():
assert likely_sheet == 'Taxpayers', likely_sheet
assert relevant_sheets[0] == 'Taxpayers', relevant_sheets
assert relevant_sheets.index('Taxpayers') < relevant_sheets.index('Notices'), relevant_sheets
- assert 'begin with filter_rows or query_tabular_data without sheet_name so the plugin can perform a cross-sheet discovery search' in route_content, route_content
+ assert 'begin with search_rows, filter_rows, or query_tabular_data without sheet_name so the plugin can perform a cross-sheet discovery search' in route_content, route_content
assert 'Do not start with aggregate_column, group_by_aggregate, or group_by_datetime_component until you have located the relevant entity rows.' in route_content, route_content
print('β
Entity-lookup primary worksheet hinting passed')
diff --git a/functional_tests/test_tabular_exhaustive_result_synthesis_fix.py b/functional_tests/test_tabular_exhaustive_result_synthesis_fix.py
new file mode 100644
index 00000000..e976f120
--- /dev/null
+++ b/functional_tests/test_tabular_exhaustive_result_synthesis_fix.py
@@ -0,0 +1,238 @@
+#!/usr/bin/env python3
+# test_tabular_exhaustive_result_synthesis_fix.py
+"""
+Functional test for tabular exhaustive-result synthesis retry.
+Version: 0.241.007
+Implemented in: 0.241.006
+
+This test ensures exhaustive tabular requests retry when successful analytical
+tool calls already returned the full matching result set or only a partial row
+or distinct-value slice, but the synthesis response still behaves as though
+only schema samples are available.
+"""
+
+import ast
+import json
+import os
+import sys
+from types import SimpleNamespace
+
+
+ROOT_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+sys.path.append(ROOT_DIR)
+sys.path.append(os.path.join(ROOT_DIR, 'application', 'single_app'))
+
+ROUTE_FILE = os.path.join(ROOT_DIR, 'application', 'single_app', 'route_backend_chats.py')
+TARGET_FUNCTIONS = {
+ 'question_requests_tabular_exhaustive_results',
+ 'parse_tabular_result_count',
+ 'get_tabular_invocation_result_payload',
+ 'is_tabular_access_limited_analysis',
+ 'get_tabular_result_coverage_summary',
+ 'build_tabular_success_execution_gap_messages',
+}
+
+
+def load_helpers():
+ """Load the targeted tabular retry helpers from the route source."""
+ with open(ROUTE_FILE, 'r', encoding='utf-8') as file_handle:
+ route_content = file_handle.read()
+
+ parsed = ast.parse(route_content, filename=ROUTE_FILE)
+ selected_nodes = []
+ for node in parsed.body:
+ if isinstance(node, ast.FunctionDef) and node.name in TARGET_FUNCTIONS:
+ selected_nodes.append(node)
+
+ module = ast.Module(body=selected_nodes, type_ignores=[])
+ namespace = {
+ 'json': json,
+ 're': __import__('re'),
+ }
+ exec(compile(module, ROUTE_FILE, 'exec'), namespace)
+ return namespace, route_content
+
+
+def test_exhaustive_tabular_retry_detects_full_result_access_gap():
+ """Verify full-result tool coverage forces a retry when synthesis claims sample-only access."""
+ print('π Testing exhaustive tabular retry for full-result access gaps...')
+
+ try:
+ helpers, route_content = load_helpers()
+ wants_exhaustive_results = helpers['question_requests_tabular_exhaustive_results']
+ is_access_limited_analysis = helpers['is_tabular_access_limited_analysis']
+ get_tabular_result_coverage_summary = helpers['get_tabular_result_coverage_summary']
+ build_execution_gap_messages = helpers['build_tabular_success_execution_gap_messages']
+
+ user_question = 'list out all of the security controls'
+ access_limited_analysis = (
+ 'The workbook contains 1,189 controls and control enhancements in NIST SP 800-53 Rev. 5, '
+ 'but the data provided here does not include the full 1,189-item list, only sample rows '
+ 'and workbook metadata. So I cannot accurately list all of them from the current evidence.'
+ )
+ invocations = [
+ SimpleNamespace(
+ function_name='query_tabular_data',
+ parameters={
+ 'filename': 'sp800-53r5-control-catalog.xlsx',
+ 'max_rows': '1189',
+ 'query_expression': '`Control Identifier` == `Control Identifier`',
+ },
+ result=json.dumps({
+ 'filename': 'sp800-53r5-control-catalog.xlsx',
+ 'selected_sheet': 'SP 800-53 Revision 5',
+ 'total_matches': 1189,
+ 'returned_rows': 1189,
+ 'data': [
+ {
+ 'Control Identifier': 'AC-1',
+ 'Control (or Control Enhancement) Name': 'Policy and Procedures',
+ },
+ {
+ 'Control Identifier': 'AC-2',
+ 'Control (or Control Enhancement) Name': 'Account Management',
+ },
+ ],
+ }),
+ error_message=None,
+ )
+ ]
+
+ coverage_summary = get_tabular_result_coverage_summary(invocations)
+ execution_gap_messages = build_execution_gap_messages(
+ user_question,
+ access_limited_analysis,
+ invocations,
+ )
+
+ assert wants_exhaustive_results(user_question), user_question
+ assert is_access_limited_analysis(access_limited_analysis), access_limited_analysis
+ assert coverage_summary['has_full_result_coverage'] is True, coverage_summary
+ assert coverage_summary['has_partial_result_coverage'] is False, coverage_summary
+ assert any('full matching result set' in message for message in execution_gap_messages), execution_gap_messages
+ assert any('list the full results the user asked for' in message for message in execution_gap_messages), execution_gap_messages
+ assert 'Do not claim that only sample rows or workbook metadata are available in that case.' in route_content, route_content
+
+ print('β
Exhaustive tabular retry for full-result access gaps passed')
+ return True
+
+ except Exception as exc:
+ print(f'β Test failed: {exc}')
+ import traceback
+ traceback.print_exc()
+ return False
+
+
+def test_exhaustive_tabular_retry_detects_partial_result_slice():
+ """Verify exhaustive requests trigger a rerun when analytical tools only returned a partial slice."""
+ print('π Testing exhaustive tabular retry for partial result slices...')
+
+ try:
+ helpers, _ = load_helpers()
+ get_tabular_result_coverage_summary = helpers['get_tabular_result_coverage_summary']
+ build_execution_gap_messages = helpers['build_tabular_success_execution_gap_messages']
+
+ user_question = 'show me all of the matching security controls'
+ invocations = [
+ SimpleNamespace(
+ function_name='query_tabular_data',
+ parameters={
+ 'filename': 'sp800-53r5-control-catalog.xlsx',
+ 'max_rows': '100',
+ 'query_expression': '`Control Identifier` == `Control Identifier`',
+ },
+ result=json.dumps({
+ 'filename': 'sp800-53r5-control-catalog.xlsx',
+ 'selected_sheet': 'SP 800-53 Revision 5',
+ 'total_matches': 1189,
+ 'returned_rows': 100,
+ 'data': [
+ {
+ 'Control Identifier': 'AC-1',
+ 'Control (or Control Enhancement) Name': 'Policy and Procedures',
+ }
+ ],
+ }),
+ error_message=None,
+ )
+ ]
+
+ coverage_summary = get_tabular_result_coverage_summary(invocations)
+ execution_gap_messages = build_execution_gap_messages(
+ user_question,
+ 'Here is a representative sample of the matching controls.',
+ invocations,
+ )
+
+ assert coverage_summary['has_full_result_coverage'] is False, coverage_summary
+ assert coverage_summary['has_partial_result_coverage'] is True, coverage_summary
+ assert any('higher max_rows or max_values' in message for message in execution_gap_messages), execution_gap_messages
+
+ print('β
Exhaustive tabular retry for partial result slices passed')
+ return True
+
+ except Exception as exc:
+ print(f'β Test failed: {exc}')
+ import traceback
+ traceback.print_exc()
+ return False
+
+
+def test_result_coverage_summary_marks_partial_distinct_value_slices():
+ """Verify distinct-value counts below the available total mark partial coverage."""
+ print('π Testing tabular result coverage summary for partial distinct-value slices...')
+
+ try:
+ helpers, _ = load_helpers()
+ get_tabular_result_coverage_summary = helpers['get_tabular_result_coverage_summary']
+
+ invocations = [
+ SimpleNamespace(
+ function_name='get_distinct_tabular_values',
+ parameters={
+ 'filename': 'sp800-53r5-control-catalog.xlsx',
+ 'column': 'Control Identifier',
+ 'max_values': '25',
+ },
+ result=json.dumps({
+ 'filename': 'sp800-53r5-control-catalog.xlsx',
+ 'selected_sheet': 'SP 800-53 Revision 5',
+ 'column': 'Control Identifier',
+ 'distinct_count': 1189,
+ 'returned_values': 25,
+ 'values': ['AC-1', 'AC-2'],
+ }),
+ error_message=None,
+ )
+ ]
+
+ coverage_summary = get_tabular_result_coverage_summary(invocations)
+
+ assert coverage_summary['has_full_result_coverage'] is False, coverage_summary
+ assert coverage_summary['has_partial_result_coverage'] is True, coverage_summary
+
+ print('β
Tabular result coverage summary marks partial distinct-value slices')
+ return True
+
+ except Exception as exc:
+ print(f'β Test failed: {exc}')
+ import traceback
+ traceback.print_exc()
+ return False
+
+
+if __name__ == '__main__':
+ tests = [
+ test_exhaustive_tabular_retry_detects_full_result_access_gap,
+ test_exhaustive_tabular_retry_detects_partial_result_slice,
+ test_result_coverage_summary_marks_partial_distinct_value_slices,
+ ]
+ results = []
+
+ for test in tests:
+ print(f'\nπ§ͺ Running {test.__name__}...')
+ results.append(test())
+
+ success = all(results)
+ print(f'\nπ Results: {sum(results)}/{len(results)} tests passed')
+ sys.exit(0 if success else 1)
\ No newline at end of file
diff --git a/functional_tests/test_video_indexer_dual_authentication_support.py b/functional_tests/test_video_indexer_dual_authentication_support.py
index ad75ab5b..a7d2264d 100644
--- a/functional_tests/test_video_indexer_dual_authentication_support.py
+++ b/functional_tests/test_video_indexer_dual_authentication_support.py
@@ -1,249 +1,237 @@
#!/usr/bin/env python3
+# test_video_indexer_dual_authentication_support.py
"""
-Functional test for Video Indexer dual authentication support.
-Version: 0.229.064
-Implemented in: 0.229.064
+Functional test for current Video Indexer managed-identity guidance.
+Version: 0.241.007
+Implemented in: 0.241.007
-This test ensures that the video indexer supports both API key and managed identity
-authentication methods, with proper UI controls and backend logic.
+This legacy-named test now ensures the admin and backend flows reflect the
+current managed-identity-only Video Indexer configuration.
"""
-import sys
import os
+import sys
+
sys.path.append(os.path.join(os.path.dirname(os.path.abspath(__file__)), '..'))
sys.path.append(os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'application', 'single_app'))
-def test_video_indexer_authentication_settings():
- """Test that video indexer authentication type setting is properly configured in default settings."""
- print("π Testing video indexer authentication settings...")
-
+
+def test_video_indexer_settings_shape():
+ """Test that current Video Indexer settings keep ARM fields and omit legacy auth toggles."""
+ print("π Testing current Video Indexer settings shape...")
+
try:
- # Check the functions_settings.py file directly for default value
- settings_file_path = os.path.join(
- 'application', 'single_app', 'functions_settings.py'
- )
-
+ settings_file_path = os.path.join('application', 'single_app', 'functions_settings.py')
+
if not os.path.exists(settings_file_path):
print("β functions_settings.py not found")
return False
-
- with open(settings_file_path, 'r', encoding='utf-8') as f:
- settings_content = f.read()
-
- # Check if video_indexer_authentication_type is defined
- if 'video_indexer_authentication_type' not in settings_content:
- print("β video_indexer_authentication_type not found in default settings file")
- return False
-
- # Check that default value is managed_identity
- if "'video_indexer_authentication_type': 'managed_identity'" not in settings_content:
- print("β Expected default authentication type to be 'managed_identity' in functions_settings.py")
+
+ with open(settings_file_path, 'r', encoding='utf-8') as file_handle:
+ settings_content = file_handle.read()
+
+ required_settings = [
+ "'video_indexer_endpoint':",
+ "'video_indexer_resource_group':",
+ "'video_indexer_subscription_id':",
+ "'video_indexer_account_name':",
+ "'video_indexer_account_id':",
+ "'video_indexer_location':",
+ ]
+
+ for setting_name in required_settings:
+ if setting_name not in settings_content:
+ print(f"β Missing Video Indexer setting: {setting_name}")
+ return False
+
+ if 'video_indexer_authentication_type' in settings_content:
+ print("β Legacy video_indexer_authentication_type should not be present")
return False
-
- print("β
Video indexer authentication type setting verified in default settings")
+
+ print("β
Current Video Indexer settings verified")
return True
-
- except Exception as e:
- print(f"β Test failed with error: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed with error: {exc}")
import traceback
traceback.print_exc()
return False
+
def test_authentication_functions():
- """Test that both authentication functions are available and work correctly."""
- print("π Testing authentication functions...")
-
+ """Test that the runtime uses the ARM managed-identity token flow."""
+ print("π Testing Video Indexer authentication functions...")
+
try:
- # Check if the authentication functions exist
- auth_file_path = os.path.join(
- 'application', 'single_app', 'functions_authentication.py'
- )
-
+ auth_file_path = os.path.join('application', 'single_app', 'functions_authentication.py')
+
if not os.path.exists(auth_file_path):
print(f"β functions_authentication.py not found at {os.path.abspath(auth_file_path)}")
return False
-
- with open(auth_file_path, 'r', encoding='utf-8') as f:
- auth_content = f.read()
-
- # Check for required functions
+
+ with open(auth_file_path, 'r', encoding='utf-8') as file_handle:
+ auth_content = file_handle.read()
+
required_functions = [
'def get_video_indexer_account_token(',
- 'def get_video_indexer_api_key_token(',
- 'def get_video_indexer_managed_identity_token('
+ 'def get_video_indexer_managed_identity_token(',
+ 'DEFAULT_VIDEO_INDEXER_ARM_API_VERSION',
]
-
- for func in required_functions:
- if func not in auth_content:
- print(f"β Missing function: {func}")
+
+ for func_name in required_functions:
+ if func_name not in auth_content:
+ print(f"β Missing function or constant: {func_name}")
return False
-
- # Check for proper conditional logic
- if 'auth_type = settings.get("video_indexer_authentication_type"' not in auth_content:
- print("β Missing authentication type conditional logic")
- return False
-
- # Check for API key authentication pattern - should generate access token
- if 'if auth_type == "key":' not in auth_content:
- print("β Missing API key authentication conditional logic")
+
+ if 'get_video_indexer_api_key_token' in auth_content:
+ print("β Legacy Video Indexer API key helper should not be present")
return False
-
- # Verify API key method generates an access token via API
- required_api_key_patterns = [
- '/auth/',
- '/AccessToken',
- 'Ocp-Apim-Subscription-Key',
- 'requests.get',
- 'allowEdit'
- ]
-
- for pattern in required_api_key_patterns:
- if pattern not in auth_content:
- print(f"β Missing API key token generation pattern: {pattern}")
- return False
-
+
print("β
Authentication functions verified")
return True
-
- except Exception as e:
- print(f"β Test failed with error: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed with error: {exc}")
import traceback
traceback.print_exc()
return False
+
def test_video_processing_authentication_support():
- """Test that video processing functions support both authentication methods."""
+ """Test that video processing relies on the ARM token flow."""
print("π Testing video processing authentication support...")
-
+
try:
- docs_file_path = os.path.join(
- 'application', 'single_app', 'functions_documents.py'
- )
-
+ docs_file_path = os.path.join('application', 'single_app', 'functions_documents.py')
+
if not os.path.exists(docs_file_path):
print("β functions_documents.py not found")
return False
-
- with open(docs_file_path, 'r', encoding='utf-8') as f:
- docs_content = f.read()
-
- # Check for authentication type handling in upload
- # Both methods now use accessToken parameter
+
+ with open(docs_file_path, 'r', encoding='utf-8') as file_handle:
+ docs_content = file_handle.read()
+
required_patterns = [
- 'auth_type = settings.get("video_indexer_authentication_type"',
'"accessToken": token',
- 'get_video_indexer_account_token'
+ 'get_video_indexer_account_token',
]
-
+
for pattern in required_patterns:
if pattern not in docs_content:
print(f"β Missing pattern in video processing: {pattern}")
return False
-
+
print("β
Video processing authentication support verified")
return True
-
- except Exception as e:
- print(f"β Test failed with error: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed with error: {exc}")
import traceback
traceback.print_exc()
return False
+
def test_admin_ui_authentication_controls():
- """Test that admin UI includes authentication type controls."""
+ """Test that the admin UI reflects the managed-identity-only guidance."""
print("π Testing admin UI authentication controls...")
-
+
try:
- template_file_path = os.path.join(
- 'application', 'single_app', 'templates', 'admin_settings.html'
- )
-
+ template_file_path = os.path.join('application', 'single_app', 'templates', 'admin_settings.html')
+
if not os.path.exists(template_file_path):
print("β admin_settings.html template not found")
return False
-
- with open(template_file_path, 'r', encoding='utf-8') as f:
- template_content = f.read()
-
- # Check for authentication type selector
+
+ with open(template_file_path, 'r', encoding='utf-8') as file_handle:
+ template_content = file_handle.read()
+
required_ui_elements = [
- 'id="video_indexer_authentication_type"',
- 'name="video_indexer_authentication_type"',
- 'value="managed_identity"',
- 'value="key"',
- 'Managed Identity (Azure ARM)',
- 'API Key',
- 'id="video_indexer_api_key_section"',
- 'id="video_indexer_arm_section"',
- 'id="video_indexer_arm_fields"',
- 'toggleVideoIndexerAuthFields'
+ 'id="video_indexer_cloud"',
+ 'id="video_indexer_endpoint_display"',
+ 'id="video_indexer_custom_endpoint_group"',
+ 'App Service system-assigned managed identity',
+ 'Video Indexer API keys are not used by the current setup',
]
-
+
for element in required_ui_elements:
if element not in template_content:
print(f"β Missing UI element: {element}")
return False
-
- # Check for conditional display logic
- if 'style="display: none;"' not in template_content:
- print("β Missing conditional display logic")
- return False
-
+
+ removed_ui_elements = [
+ 'id="video_indexer_api_key"',
+ 'id="video_indexer_authentication_type"',
+ 'toggleVideoIndexerAuthFields',
+ ]
+
+ for removed in removed_ui_elements:
+ if removed in template_content:
+ print(f"β Legacy UI element still present: {removed}")
+ return False
+
print("β
Admin UI authentication controls verified")
return True
-
- except Exception as e:
- print(f"β Test failed with error: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed with error: {exc}")
import traceback
traceback.print_exc()
return False
+
def test_backend_form_handling():
- """Test that backend properly handles the authentication type form field."""
+ """Test that backend persists the current ARM-based Video Indexer fields."""
print("π Testing backend form handling...")
-
+
try:
- route_file_path = os.path.join(
- 'application', 'single_app', 'route_frontend_admin_settings.py'
- )
-
+ route_file_path = os.path.join('application', 'single_app', 'route_frontend_admin_settings.py')
+
if not os.path.exists(route_file_path):
print("β route_frontend_admin_settings.py not found")
return False
-
- with open(route_file_path, 'r', encoding='utf-8') as f:
- route_content = f.read()
-
- # Check for authentication type form handling
- if "'video_indexer_authentication_type':" not in route_content:
- print("β Missing authentication type form field handling")
- return False
-
- if "form_data.get('video_indexer_authentication_type'" not in route_content:
- print("β Missing authentication type form data extraction")
+
+ with open(route_file_path, 'r', encoding='utf-8') as file_handle:
+ route_content = file_handle.read()
+
+ required_fields = [
+ "'video_indexer_endpoint':",
+ "'video_indexer_resource_group':",
+ "'video_indexer_subscription_id':",
+ "'video_indexer_account_name':",
+ "'video_indexer_account_id':",
+ "'video_indexer_location':",
+ ]
+
+ for field_name in required_fields:
+ if field_name not in route_content:
+ print(f"β Missing backend form field handling: {field_name}")
+ return False
+
+ if 'video_indexer_authentication_type' in route_content:
+ print("β Legacy authentication type form field should not be present")
return False
-
+
print("β
Backend form handling verified")
return True
-
- except Exception as e:
- print(f"β Test failed with error: {e}")
+
+ except Exception as exc:
+ print(f"β Test failed with error: {exc}")
import traceback
traceback.print_exc()
return False
+
if __name__ == "__main__":
success = True
-
- # Run the tests
+
tests = [
- test_video_indexer_authentication_settings,
+ test_video_indexer_settings_shape,
test_authentication_functions,
test_video_processing_authentication_support,
test_admin_ui_authentication_controls,
- test_backend_form_handling
+ test_backend_form_handling,
]
-
+
results = []
for test in tests:
print(f"\nπ§ͺ Running {test.__name__}...")
@@ -251,11 +239,11 @@ def test_backend_form_handling():
results.append(result)
if not result:
success = False
-
+
print(f"\nπ Results: {sum(results)}/{len(results)} tests passed")
-
+
if success:
- print("β
All Video Indexer dual authentication support tests passed!")
+ print("β
All Video Indexer managed-identity guidance tests passed!")
else:
print("β Some tests failed")
diff --git a/ui_tests/test_admin_multimedia_guidance.py b/ui_tests/test_admin_multimedia_guidance.py
new file mode 100644
index 00000000..73e90bb2
--- /dev/null
+++ b/ui_tests/test_admin_multimedia_guidance.py
@@ -0,0 +1,105 @@
+# test_admin_multimedia_guidance.py
+"""
+UI test for admin multimedia guidance and shared Speech controls.
+
+Version: 0.241.010
+Implemented in: 0.241.010
+
+This test ensures the Search & Extract admin tab exposes the Video Indexer
+cloud selector, the AI Voice setup guide, and the shared Speech managed-identity fields.
+"""
+
+import os
+from pathlib import Path
+
+import pytest
+from playwright.sync_api import expect
+
+
+BASE_URL = os.getenv("SIMPLECHAT_UI_BASE_URL", "").rstrip("/")
+ADMIN_STORAGE_STATE = os.getenv("SIMPLECHAT_UI_ADMIN_STORAGE_STATE", "")
+
+
+def _require_base_url():
+ if not BASE_URL:
+ pytest.skip("Set SIMPLECHAT_UI_BASE_URL to run this UI test.")
+
+
+def _require_storage_state():
+ if not ADMIN_STORAGE_STATE or not Path(ADMIN_STORAGE_STATE).exists():
+ pytest.skip("Set SIMPLECHAT_UI_ADMIN_STORAGE_STATE to a valid authenticated Playwright storage state file.")
+
+
+@pytest.mark.ui
+def test_admin_multimedia_guidance(playwright):
+ """Validate the admin multimedia panel guidance and dynamic shared Speech fields."""
+ _require_base_url()
+ _require_storage_state()
+
+ browser = playwright.chromium.launch()
+ context = browser.new_context(
+ storage_state=ADMIN_STORAGE_STATE,
+ viewport={"width": 1440, "height": 900},
+ )
+
+ try:
+ page = context.new_page()
+ response = page.goto(f"{BASE_URL}/admin/settings#search-extract", wait_until="domcontentloaded")
+ assert response is not None, "Expected a navigation response when loading /admin/settings."
+ if response.status in {401, 403, 404}:
+ pytest.skip("Admin settings page was not available for the configured admin session.")
+
+ assert response.ok, f"Expected /admin/settings to load successfully, got HTTP {response.status}."
+
+ search_extract_nav = page.locator('[data-bs-target="#search-extract"], [data-tab="search-extract"]').first
+ if search_extract_nav.count() > 0:
+ search_extract_nav.click()
+
+ expect(page.locator("#video_indexer_cloud")).to_have_count(1)
+ expect(page.locator("#video_indexer_endpoint_display")).to_have_count(1)
+
+ video_toggle = page.locator("#enable_video_file_support")
+ if not video_toggle.is_checked():
+ video_toggle.check(force=True)
+
+ expect(page.locator("#video_indexer_settings")).to_be_visible()
+
+ page.locator("#video_indexer_cloud").select_option("custom")
+ expect(page.locator("#video_indexer_custom_endpoint_group")).to_be_visible()
+
+ custom_endpoint = "https://video-indexer.contoso.example"
+ page.locator("#video_indexer_custom_endpoint").fill(custom_endpoint)
+ expect(page.locator("#video_indexer_endpoint_display")).to_have_value(custom_endpoint)
+
+ modal_trigger = page.locator('[data-bs-target="#videoIndexerInfoModal"]').first
+ expect(modal_trigger).to_have_count(1)
+ modal_trigger.click()
+ expect(page.locator("#videoIndexerInfoModal")).to_be_visible()
+ expect(page.locator("#videoIndexerInfoModal")).to_contain_text("App Service system-assigned managed identity")
+ page.locator('#videoIndexerInfoModal button[data-bs-dismiss="modal"]').click()
+
+ tts_toggle = page.locator("#enable_text_to_speech")
+ if not tts_toggle.is_checked():
+ tts_toggle.check(force=True)
+
+ expect(page.locator("#audio_service_settings")).to_be_visible()
+ page.locator("#speech_service_authentication_type").select_option("managed_identity")
+ expect(page.locator("#speech_service_resource_id_container")).to_be_visible()
+ expect(page.locator("#speech_service_key_container")).not_to_be_visible()
+
+ page.locator("#speech_service_subscription_id").fill("12345678-1234-1234-1234-123456789abc")
+ page.locator("#speech_service_resource_group").fill("rg-speech-prod")
+ page.locator("#speech_service_resource_name").fill("my-speech-resource")
+ expect(page.locator("#speech_service_resource_id")).to_have_value(
+ "/subscriptions/12345678-1234-1234-1234-123456789abc/resourceGroups/rg-speech-prod/providers/Microsoft.CognitiveServices/accounts/my-speech-resource"
+ )
+
+ page.locator('[data-bs-target="#speechServiceInfoModal"]').click()
+ expect(page.locator("#speechServiceInfoModal")).to_be_visible()
+ expect(page.locator("#speechServiceInfoModal")).to_contain_text("Cognitive Services Speech User")
+ expect(page.locator("#speechServiceInfoModal")).to_contain_text("Generate Custom Domain Name")
+ expect(page.locator("#speechServiceInfoModal")).to_contain_text("Keys and Endpoint")
+ expect(page.locator("#speechServiceInfoModal")).to_contain_text("my-speech-resource")
+ finally:
+ context.close()
+ browser.close()
diff --git a/ui_tests/test_group_workspace_prompt_role_containers_ui.py b/ui_tests/test_group_workspace_prompt_role_containers_ui.py
new file mode 100644
index 00000000..42412f61
--- /dev/null
+++ b/ui_tests/test_group_workspace_prompt_role_containers_ui.py
@@ -0,0 +1,126 @@
+# test_group_workspace_prompt_role_containers_ui.py
+"""
+UI test for group workspace prompt role UI guard.
+Version: 0.241.007
+Implemented in: 0.241.007
+
+This test ensures that missing prompt role containers do not break the group
+workspace documents tab on first load.
+"""
+
+import json
+import os
+from pathlib import Path
+
+import pytest
+from playwright.sync_api import expect
+
+
+BASE_URL = os.getenv("SIMPLECHAT_UI_BASE_URL", "").rstrip("/")
+STORAGE_STATE = os.getenv("SIMPLECHAT_UI_STORAGE_STATE", "")
+
+
+def _require_ui_env():
+ if not BASE_URL:
+ pytest.skip("Set SIMPLECHAT_UI_BASE_URL to run this UI test.")
+ if not STORAGE_STATE or not Path(STORAGE_STATE).exists():
+ pytest.skip(
+ "Set SIMPLECHAT_UI_STORAGE_STATE to a valid authenticated Playwright storage state file."
+ )
+
+
+def _fulfill_json(route, payload, status=200):
+ route.fulfill(
+ status=status,
+ content_type="application/json",
+ body=json.dumps(payload),
+ )
+
+
+@pytest.mark.ui
+def test_group_workspace_load_tolerates_missing_prompt_role_containers(playwright):
+ """Validate documents still render when prompt role containers are absent."""
+ _require_ui_env()
+
+ browser = playwright.chromium.launch()
+ context = browser.new_context(
+ storage_state=STORAGE_STATE,
+ viewport={"width": 1440, "height": 900},
+ )
+ page = context.new_page()
+
+ page_errors = []
+ page.on("pageerror", lambda error: page_errors.append(str(error)))
+ page.add_init_script(
+ """
+ window.addEventListener('DOMContentLoaded', () => {
+ document.getElementById('group-prompts-role-warning')?.remove();
+ document.getElementById('create-group-prompt-section')?.remove();
+ });
+ """
+ )
+
+ page.route(
+ "**/api/groups?page_size=1000",
+ lambda route: _fulfill_json(
+ route,
+ {
+ "groups": [
+ {
+ "id": "group-alpha",
+ "name": "Alpha Team",
+ "isActive": True,
+ "userRole": "Owner",
+ "status": "active",
+ }
+ ]
+ },
+ ),
+ )
+ page.route(
+ "**/api/group_documents?*",
+ lambda route: _fulfill_json(
+ route,
+ {
+ "documents": [],
+ "page": 1,
+ "page_size": 10,
+ "total_count": 0,
+ },
+ ),
+ )
+ page.route(
+ "**/api/group_documents/tags?*",
+ lambda route: _fulfill_json(route, {"tags": []}),
+ )
+
+ try:
+ response = page.goto(f"{BASE_URL}/group_workspaces", wait_until="networkidle")
+
+ assert response is not None, "Expected a navigation response when loading /group_workspaces."
+ assert response.ok, f"Expected /group_workspaces to load successfully, got HTTP {response.status}."
+
+ page.wait_for_function(
+ """
+ () => {
+ const tbody = document.querySelector('#group-documents-table tbody');
+ return tbody && tbody.textContent.includes('No documents found in this group.');
+ }
+ """
+ )
+
+ expect(page.locator("#group-documents-table tbody")).to_contain_text(
+ "No documents found in this group."
+ )
+
+ prompt_role_errors = [
+ error
+ for error in page_errors
+ if "Cannot read properties of null" in error
+ or "create-group-prompt-section" in error
+ or "group-prompts-role-warning" in error
+ ]
+ assert not prompt_role_errors, f"Unexpected prompt role UI page errors: {prompt_role_errors}"
+ finally:
+ context.close()
+ browser.close()
\ No newline at end of file
diff --git a/ui_tests/test_group_workspace_prompt_role_ui_resilience.py b/ui_tests/test_group_workspace_prompt_role_ui_resilience.py
new file mode 100644
index 00000000..a7c0151f
--- /dev/null
+++ b/ui_tests/test_group_workspace_prompt_role_ui_resilience.py
@@ -0,0 +1,175 @@
+# test_group_workspace_prompt_role_ui_resilience.py
+"""
+UI test for group workspace prompt role UI resilience.
+Version: 0.241.003
+Implemented in: 0.241.003
+
+This test ensures the group workspace can refresh active group context without
+raising client-side errors when the prompt role warning and create button
+containers are absent from the DOM.
+"""
+
+import json
+import os
+from pathlib import Path
+
+import pytest
+
+
+BASE_URL = os.getenv("SIMPLECHAT_UI_BASE_URL", "").rstrip("/")
+STORAGE_STATE = os.getenv("SIMPLECHAT_UI_STORAGE_STATE", "")
+
+
+def _require_ui_env():
+ if not BASE_URL:
+ pytest.skip("Set SIMPLECHAT_UI_BASE_URL to run this UI test.")
+ if not STORAGE_STATE or not Path(STORAGE_STATE).exists():
+ pytest.skip(
+ "Set SIMPLECHAT_UI_STORAGE_STATE to a valid authenticated Playwright storage state file."
+ )
+
+
+def _fulfill_json(route, payload, status=200):
+ route.fulfill(
+ status=status,
+ content_type="application/json",
+ body=json.dumps(payload),
+ )
+
+
+@pytest.mark.ui
+def test_group_workspace_group_change_tolerates_missing_prompt_role_elements(playwright):
+ """Validate that a group change does not raise prompt role UI null errors."""
+ _require_ui_env()
+
+ browser = playwright.chromium.launch()
+ context = browser.new_context(
+ storage_state=STORAGE_STATE,
+ viewport={"width": 1440, "height": 900},
+ )
+ page = context.new_page()
+
+ page_errors = []
+ page.on("pageerror", lambda error: page_errors.append(str(error)))
+
+ group_payloads = [
+ {
+ "groups": [
+ {
+ "id": "group-alpha",
+ "name": "Alpha Team",
+ "isActive": True,
+ "userRole": "Owner",
+ "status": "active",
+ },
+ {
+ "id": "group-beta",
+ "name": "Beta Team",
+ "isActive": False,
+ "userRole": "Admin",
+ "status": "active",
+ },
+ ]
+ },
+ {
+ "groups": [
+ {
+ "id": "group-alpha",
+ "name": "Alpha Team",
+ "isActive": False,
+ "userRole": "Owner",
+ "status": "active",
+ },
+ {
+ "id": "group-beta",
+ "name": "Beta Team",
+ "isActive": True,
+ "userRole": "Admin",
+ "status": "active",
+ },
+ ]
+ },
+ ]
+
+ def handle_groups(route):
+ payload = group_payloads[0]
+ if len(group_payloads) > 1:
+ payload = group_payloads.pop(0)
+ _fulfill_json(route, payload)
+
+ page.route("**/api/groups?page_size=1000", handle_groups)
+ page.route(
+ "**/api/groups/setActive",
+ lambda route: _fulfill_json(route, {"success": True}),
+ )
+ page.route(
+ "**/api/group_documents?*",
+ lambda route: _fulfill_json(
+ route,
+ {
+ "documents": [],
+ "page": 1,
+ "page_size": 10,
+ "total_count": 0,
+ },
+ ),
+ )
+ page.route(
+ "**/api/group_documents/tags?*",
+ lambda route: _fulfill_json(route, {"tags": []}),
+ )
+
+ try:
+ response = page.goto(f"{BASE_URL}/group_workspaces", wait_until="networkidle")
+
+ assert response is not None, "Expected a navigation response when loading /group_workspaces."
+ assert response.ok, f"Expected /group_workspaces to load successfully, got HTTP {response.status}."
+
+ page.wait_for_function(
+ """
+ () => {
+ const tbody = document.querySelector('#group-documents-table tbody');
+ return tbody && tbody.textContent.includes('No documents found in this group.');
+ }
+ """
+ )
+
+ page.evaluate(
+ """
+ () => {
+ document.getElementById('create-group-prompt-section')?.remove();
+ document.getElementById('group-prompts-role-warning')?.remove();
+
+ const select = document.getElementById('group-select');
+ if (select) {
+ select.value = 'group-beta';
+ }
+
+ const selectedText = document.querySelector('#group-dropdown-button .selected-group-text');
+ if (selectedText) {
+ selectedText.textContent = 'Beta Team';
+ }
+ }
+ """
+ )
+
+ page.locator("#btn-change-group").click()
+ page.wait_for_function(
+ """
+ () => {
+ const role = document.getElementById('user-role');
+ return role && role.textContent.trim() === 'Admin';
+ }
+ """
+ )
+
+ null_style_errors = [
+ error
+ for error in page_errors
+ if "Cannot read properties of null (reading 'style')" in error
+ ]
+
+ assert not null_style_errors, f"Unexpected prompt role UI errors: {null_style_errors}"
+ finally:
+ context.close()
+ browser.close()
\ No newline at end of file
{{ page.title }}
{{ content }}
+
+
+
+
+ {% for group in feature_data.previous_release_groups %}
+
\ No newline at end of file
diff --git a/docs/admin_configuration.md b/docs/admin_configuration.md
index af8a9df1..40a56572 100644
--- a/docs/admin_configuration.md
+++ b/docs/admin_configuration.md
@@ -36,7 +36,7 @@ The walkthrough covers these key configuration areas in order:
6. **Azure AI Search** (Required if workspaces enabled) - Configure search indexing
7. **Document Intelligence** (Required if workspaces enabled) - Configure document processing
8. **Video Support** (Optional, workspace-dependent) - Configure video file processing
-9. **Audio Support** (Optional, workspace-dependent) - Configure audio file processing
+9. **Shared Speech Service** (Optional) - Configure the shared Speech resource used for audio uploads, voice input, and voice responses
10. **Content Safety** (Optional) - Configure content filtering
11. **User Feedback & Archiving** (Optional) - Enable feedback and conversation archiving
12. **Enhanced Features** (Optional) - Enhanced citations and image generation
@@ -131,12 +131,14 @@ Key configuration sections include:
- Support for Direct or APIM routing
- Test connection
- **Multimedia Support** (Video/Audio uploads):
- - **Video Files**: Configure Azure Video Indexer using Managed Identity authentication
- - Resource Group, Subscription ID, Account Name, Location, Account ID
- - API Endpoint, ARM API Version, Timeout
- - **Audio Files**: Configure Speech Service
- - Endpoint, Location/Region, Locale
- - Key/Managed Identity authentication
+ - **Video Files**: Configure Azure Video Indexer with the App Service system-assigned managed identity
+ - Cloud / Endpoint Mode, Resource Group, Subscription ID, Account Name, Location, Account ID
+ - Effective API Endpoint, ARM API Version, Timeout
+ - Video Indexer API keys are not used by the current setup flow
+ - **Shared Speech Service**: One Speech resource powers audio uploads, speech-to-text input, and text-to-speech
+ - Endpoint, Location/Region, Locale, Authentication Type
+ - Key authentication uses the Speech key
+ - Managed identity uses the custom-domain Speech endpoint; voice responses also require the Speech Resource ID
### 7. Agents
- **Agents Configuration**:
@@ -189,7 +191,7 @@ The Admin Settings page supports two navigation layouts:
- **APIM vs Direct**: When using Azure API Management (APIM), you'll need to manually specify model names as automatic model fetching is not available
- **Managed Identity**: When using Managed Identity authentication, ensure your Service Principal has the appropriate roles assigned:
- **Azure OpenAI**: Cognitive Services OpenAI User role
- - **Speech Service**: Cognitive Services Speech Contributor role (requires custom domain name on endpoint)
- - **Video Indexer**: Appropriate Video Indexer roles for your account
+ - **Speech Service**: Start with `Cognitive Services Speech User`; add `Cognitive Services Speech Contributor` if transcription operations still require it. Managed identity also requires the custom-domain Speech endpoint, and text-to-speech needs the Speech Resource ID.
+ - **Video Indexer**: Grant the App Service system-assigned managed identity `Contributor` on the Video Indexer resource. If Azure asks for a user-assigned managed identity during Video Indexer resource creation, that identity is for the Video Indexer resource itself, not for Simple Chat runtime calls.
- **Dependencies**: The walkthrough will alert you if required services aren't configured when you enable dependent features (e.g., workspaces require embeddings, AI Search, and Document Intelligence)
- **Required vs Optional**: The walkthrough clearly indicates which settings are required vs optional based on your configuration choices
\ No newline at end of file
diff --git a/docs/assets/css/main.scss b/docs/assets/css/main.scss
index e77bd72c..740f311c 100644
--- a/docs/assets/css/main.scss
+++ b/docs/assets/css/main.scss
@@ -506,13 +506,11 @@ pre[class*="language-"] {
width: min(36vw, 180px);
}
-.latest-release-hero-image,
.latest-release-card-image {
display: block;
text-decoration: none;
}
-.latest-release-hero-image img,
.latest-release-card-image img,
.latest-release-rich-content img {
border: 1px solid rgba(15, 23, 42, 0.1);
@@ -522,11 +520,6 @@ pre[class*="language-"] {
max-width: 100%;
}
-.latest-release-hero-image img {
- max-height: 360px;
- object-fit: cover;
-}
-
.latest-release-index-content,
.latest-release-feature-content {
margin-top: 1.75rem;
@@ -536,6 +529,69 @@ pre[class*="language-"] {
margin-top: 1.75rem;
}
+.latest-release-thumbnail-trigger {
+ appearance: none;
+ background: transparent;
+ border: 0;
+ cursor: pointer;
+ display: block;
+ max-width: 100%;
+ padding: 0;
+ text-align: left;
+}
+
+.latest-release-thumbnail-trigger:focus-visible {
+ outline: 2px solid #0d6efd;
+ outline-offset: 0.35rem;
+ border-radius: 1rem;
+}
+
+.latest-release-thumbnail-card {
+ display: block;
+}
+
+.latest-release-thumbnail-gallery {
+ display: flex;
+ flex-wrap: wrap;
+ gap: 1rem;
+ max-width: 100%;
+}
+
+.latest-release-thumbnail-gallery .latest-release-thumbnail-trigger {
+ flex: 0 1 240px;
+}
+
+.latest-release-thumbnail-media {
+ background: linear-gradient(135deg, #f8f9fa, #eef2f7);
+ border: 1px solid rgba(0, 0, 0, 0.06);
+ border-radius: 0.85rem;
+ box-shadow: 0 0.7rem 1.6rem rgba(15, 23, 42, 0.08);
+ display: block;
+ max-width: 100%;
+ object-fit: cover;
+ transition: transform 0.2s ease, box-shadow 0.2s ease;
+ width: 240px;
+}
+
+.latest-release-thumbnail-trigger:hover .latest-release-thumbnail-media,
+.latest-release-thumbnail-trigger:focus-visible .latest-release-thumbnail-media {
+ transform: translateY(-2px);
+ box-shadow: 0 0.9rem 1.8rem rgba(15, 23, 42, 0.14);
+}
+
+.latest-release-thumbnail-meta {
+ color: #6c757d;
+ display: block;
+ font-size: 0.9rem;
+ margin-top: 0.55rem;
+}
+
+.latest-release-thumbnail-title {
+ display: block;
+ font-weight: 600;
+ margin-top: 0.55rem;
+}
+
.latest-release-section {
margin-top: 1.5rem;
}
@@ -813,52 +869,54 @@ pre[class*="language-"] {
text-underline-offset: 0.15rem;
}
-.latest-release-gallery-grid {
- display: grid;
- gap: 1rem;
- grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
+.latest-feature-image-modal .modal-dialog {
+ max-width: min(1100px, calc(100vw - 2rem));
}
-.latest-release-gallery-grid--single {
- grid-template-columns: minmax(0, 1fr);
-}
-
-.latest-release-gallery-card {
- background: rgba(255, 255, 255, 0.98);
- border: 1px solid var(--bs-border-color);
+.latest-feature-image-modal .modal-content {
+ background: linear-gradient(180deg, rgba(25, 33, 52, 0.98), rgba(14, 20, 34, 0.98));
+ border: 1px solid rgba(255, 255, 255, 0.12);
border-radius: 1rem;
- box-shadow: 0 0.8rem 1.8rem rgba(15, 23, 42, 0.05);
+ box-shadow: 0 1.4rem 3rem rgba(0, 0, 0, 0.38);
+ color: #f8f9fa;
overflow: hidden;
}
-.latest-release-gallery-link {
- display: block;
+.latest-feature-image-modal .modal-header {
+ background: rgba(255, 255, 255, 0.03);
+ border-color: rgba(248, 249, 250, 0.12);
}
-.latest-release-gallery-link img {
- aspect-ratio: 16 / 10;
- border: 0;
- border-bottom: 1px solid var(--bs-border-color);
- border-radius: 0;
- box-shadow: none;
- object-fit: cover;
- width: 100%;
+.latest-feature-image-modal .modal-body {
+ background: radial-gradient(circle at top, rgba(96, 165, 250, 0.08), transparent 45%), rgba(12, 18, 30, 0.92);
+ padding: 1rem 1.2rem 1.2rem;
}
-.latest-release-gallery-caption {
- display: flex;
- flex-direction: column;
- gap: 0.35rem;
- padding: 1rem 1.05rem 1.05rem;
+.latest-feature-image-modal-caption {
+ color: rgba(248, 250, 252, 0.9);
+ font-size: 0.98rem;
}
-.latest-release-gallery-caption strong {
- font-size: 1rem;
+.latest-feature-image-modal .btn-close {
+ filter: invert(1) grayscale(100%) brightness(200%);
}
-.latest-release-gallery-caption span {
- color: var(--simplechat-secondary);
- line-height: 1.6;
+.latest-feature-image-frame {
+ background: linear-gradient(180deg, rgba(30, 41, 59, 0.9), rgba(15, 23, 42, 0.88));
+ border: 1px solid rgba(148, 163, 184, 0.24);
+ border-radius: 1rem;
+ box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.05);
+ padding: 0.9rem;
+}
+
+.latest-feature-image-modal img {
+ background: rgba(248, 250, 252, 0.98);
+ border-radius: 0.9rem;
+ box-shadow: 0 0.8rem 2rem rgba(0, 0, 0, 0.24);
+ display: block;
+ max-height: 75vh;
+ object-fit: contain;
+ width: 100%;
}
[data-bs-theme="dark"] .latest-release-hero {
@@ -875,7 +933,6 @@ pre[class*="language-"] {
[data-bs-theme="dark"] .latest-release-card-shell,
[data-bs-theme="dark"] .latest-release-card-icon,
[data-bs-theme="dark"] .latest-release-archive-panel,
-[data-bs-theme="dark"] .latest-release-gallery-card,
[data-bs-theme="dark"] .latest-release-rich-content > h2 + p,
[data-bs-theme="dark"] .latest-release-rich-content > h2 + ul,
[data-bs-theme="dark"] .latest-release-rich-content > h2 + ol {
@@ -900,6 +957,7 @@ pre[class*="language-"] {
[data-bs-theme="dark"] .latest-release-footer-note,
[data-bs-theme="dark"] .latest-release-note-panel ul,
[data-bs-theme="dark"] .latest-release-note-panel p,
+[data-bs-theme="dark"] .latest-release-thumbnail-meta,
[data-bs-theme="dark"] .latest-release-breadcrumb a {
color: rgba(226, 232, 240, 0.82);
}
@@ -911,15 +969,30 @@ pre[class*="language-"] {
border-color: rgba(var(--latest-release-accent-rgb), 0.28);
}
-[data-bs-theme="dark"] .latest-release-hero-image img,
[data-bs-theme="dark"] .latest-release-card-image img,
-[data-bs-theme="dark"] .latest-release-gallery-link img,
[data-bs-theme="dark"] .latest-release-rich-content img {
border-color: rgba(148, 163, 184, 0.2);
}
-[data-bs-theme="dark"] .latest-release-gallery-caption span {
- color: rgba(226, 232, 240, 0.8);
+[data-bs-theme="dark"] .latest-release-thumbnail-media {
+ background: linear-gradient(135deg, rgba(15, 23, 42, 0.92), rgba(30, 41, 59, 0.9));
+ border-color: rgba(96, 165, 250, 0.2);
+}
+
+[data-bs-theme="dark"] .latest-feature-image-modal .modal-content {
+ background: linear-gradient(180deg, rgba(26, 32, 44, 0.99), rgba(10, 14, 24, 0.99));
+ border-color: rgba(148, 163, 184, 0.22);
+ box-shadow: 0 1.5rem 3.2rem rgba(0, 0, 0, 0.55);
+}
+
+[data-bs-theme="dark"] .latest-feature-image-modal .modal-body {
+ background: radial-gradient(circle at top, rgba(59, 130, 246, 0.12), transparent 42%), rgba(8, 12, 20, 0.96);
+}
+
+[data-bs-theme="dark"] .latest-feature-image-frame {
+ background: linear-gradient(180deg, rgba(17, 24, 39, 0.96), rgba(30, 41, 59, 0.92));
+ border-color: rgba(96, 165, 250, 0.18);
+ box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.04), 0 0.75rem 1.8rem rgba(0, 0, 0, 0.28);
}
@media (max-width: 991.98px) {
diff --git a/docs/assets/js/latest-release.js b/docs/assets/js/latest-release.js
new file mode 100644
index 00000000..7923c4f2
--- /dev/null
+++ b/docs/assets/js/latest-release.js
@@ -0,0 +1,43 @@
+// latest-release.js
+
+function setupLatestFeatureImageModal() {
+ const modalElement = document.getElementById('latestFeatureImageModal');
+ const modalImage = document.getElementById('latestFeatureImageModalImage');
+ const modalTitle = document.getElementById('latestFeatureImageModalLabel');
+ const modalCaption = document.getElementById('latestFeatureImageModalCaption');
+ const imageTriggers = document.querySelectorAll('[data-latest-feature-image-src]');
+
+ if (!modalElement || !modalImage || !modalTitle || !modalCaption || imageTriggers.length === 0) {
+ return;
+ }
+
+ const imageModal = bootstrap.Modal.getOrCreateInstance(modalElement);
+
+ imageTriggers.forEach((trigger) => {
+ trigger.addEventListener('click', () => {
+ const imageSrc = trigger.dataset.latestFeatureImageSrc;
+ const imageTitle = trigger.dataset.latestFeatureImageTitle || 'Latest Feature Preview';
+ const imageCaption = trigger.dataset.latestFeatureImageCaption || 'Click outside the popup to close it.';
+ const imageAlt = trigger.querySelector('img')?.getAttribute('alt') || imageTitle;
+
+ if (!imageSrc) {
+ return;
+ }
+
+ modalImage.src = imageSrc;
+ modalImage.alt = imageAlt;
+ modalTitle.textContent = imageTitle;
+ modalCaption.textContent = imageCaption;
+ imageModal.show();
+ });
+ });
+
+ modalElement.addEventListener('hidden.bs.modal', () => {
+ modalImage.src = '';
+ modalImage.alt = 'Latest feature preview';
+ });
+}
+
+document.addEventListener('DOMContentLoaded', () => {
+ setupLatestFeatureImageModal();
+});
\ No newline at end of file
diff --git a/docs/explanation/features/AI_VOICE_CONVERSATIONS_SETUP_GUIDE.md b/docs/explanation/features/AI_VOICE_CONVERSATIONS_SETUP_GUIDE.md
new file mode 100644
index 00000000..155dddaf
--- /dev/null
+++ b/docs/explanation/features/AI_VOICE_CONVERSATIONS_SETUP_GUIDE.md
@@ -0,0 +1,85 @@
+# AI Voice Conversations Setup Guide
+
+Version implemented: **0.241.009**
+Enhanced in version: **0.241.010**
+
+## Overview and Purpose
+
+This feature adds a dedicated Setup Guide modal to the Admin Settings AI Voice Conversations card. The guide gives admins an in-app reference for configuring Azure AI Speech for audio uploads, voice input, and voice responses without leaving the settings page.
+
+Dependencies:
+
+- Azure AI Speech
+- Admin Settings Search & Extract tab
+- Shared Speech configuration fields in the AI Voice Conversations card
+
+## Technical Specifications
+
+### Architecture Overview
+
+The feature follows the same UI pattern already used by the Azure AI Video Indexer setup guide:
+
+- A Setup Guide button is rendered in the AI Voice Conversations card header.
+- A dedicated modal partial contains setup guidance, required field descriptions, and a snapshot of the current form state.
+- Client-side modal update logic reads the current Speech settings just before the modal opens.
+
+### Configuration Options
+
+The guide explains the settings used by the shared Speech configuration section:
+
+- Speech Service Endpoint
+- Speech Service Location
+- Speech Service Locale
+- Authentication Type
+- Speech Service Key
+- Speech Resource ID
+- Speech Subscription ID
+- Speech Resource Group
+- Speech Resource Name
+
+### File Structure
+
+- `application/single_app/templates/admin_settings.html`
+- `application/single_app/templates/_speech_service_info.html`
+- `ui_tests/test_admin_multimedia_guidance.py`
+- `functional_tests/test_multimedia_support_reorganization.py`
+
+## Usage Instructions
+
+### How to Open the Guide
+
+1. Go to Admin Settings.
+2. Open the Search & Extract tab.
+3. Find the AI Voice Conversations card.
+4. Click **Setup Guide**.
+
+### What the Guide Covers
+
+1. The shared-resource model for audio uploads, voice input, and voice responses.
+2. The difference between API key and managed-identity authentication.
+3. A step-by-step custom-domain walkthrough for managed identity: **Networking** β **Firewalls and virtual networks** β **Generate Custom Domain Name** β verify on **Keys and Endpoint**.
+4. Speech-specific RBAC role guidance.
+5. When the Speech Resource ID is required and how the built-in helper fields can construct it.
+
+### Custom-Domain Walkthrough
+
+The guide now walks admins through the exact managed-identity endpoint setup flow in Azure:
+
+1. Open the Speech resource in Azure portal.
+2. Go to **Resource Management** β **Networking**.
+3. Open **Firewalls and virtual networks**.
+4. Choose **Generate Custom Domain Name**.
+5. Save a globally unique custom name.
+6. Verify the resulting endpoint in **Keys and Endpoint** before copying it into Simple Chat.
+
+## Testing and Validation
+
+### Test Coverage
+
+- Functional test coverage verifies that the AI Voice setup guide modal is included in the admin settings template and that the Setup Guide trigger is present.
+- UI test coverage verifies that the modal opens from the Admin Settings page and reflects the current shared Speech configuration values.
+
+### Known Limitations
+
+- The guide is informational. It does not provision Azure resources or assign roles automatically.
+- The UI test requires an authenticated admin Playwright session to run end to end.
\ No newline at end of file
diff --git a/docs/explanation/features/index.md b/docs/explanation/features/index.md
index 0b922a77..800ebdae 100644
--- a/docs/explanation/features/index.md
+++ b/docs/explanation/features/index.md
@@ -9,4 +9,8 @@ category: Version History
## Tutorial Features
- [Guided Tutorials](GUIDED_TUTORIALS.md)
-- [User Tutorial Visibility Preference](USER_TUTORIAL_VISIBILITY_PREFERENCE.md)
\ No newline at end of file
+- [User Tutorial Visibility Preference](USER_TUTORIAL_VISIBILITY_PREFERENCE.md)
+
+## Admin Experience Features
+
+- [AI Voice Conversations Setup Guide](AI_VOICE_CONVERSATIONS_SETUP_GUIDE.md)
\ No newline at end of file
diff --git a/docs/explanation/fixes/GROUP_PROMPTS_ROLE_UI_NULL_GUARD_FIX.md b/docs/explanation/fixes/GROUP_PROMPTS_ROLE_UI_NULL_GUARD_FIX.md
new file mode 100644
index 00000000..f0a8019e
--- /dev/null
+++ b/docs/explanation/fixes/GROUP_PROMPTS_ROLE_UI_NULL_GUARD_FIX.md
@@ -0,0 +1,46 @@
+# Group Prompts Role UI Null Guard Fix
+
+Fixed/Implemented in version: **0.241.003**
+
+## Header Information
+
+Issue description:
+The group workspace page could throw a client-side exception while refreshing active group state: `Cannot read properties of null (reading 'style')` from `updateGroupPromptsRoleUI()`.
+
+Root cause analysis:
+The prompt role-toggle logic assumed `create-group-prompt-section` and `group-prompts-role-warning` always existed in the DOM and wrote directly to `.style.display` without checking for missing nodes.
+
+Version implemented:
+`config.py` was updated to `VERSION = "0.241.003"` for this fix.
+
+## Technical Details
+
+Files modified:
+- `application/single_app/templates/group_workspaces.html`
+- `application/single_app/config.py`
+- `ui_tests/test_group_workspace_prompt_role_ui_resilience.py`
+
+Code changes summary:
+- Switched the prompt role warning and create button containers to Bootstrap `d-none` state classes instead of inline `display: none` styles.
+- Updated `updateGroupPromptsRoleUI()` to tolerate missing prompt DOM nodes and toggle visibility via `classList` instead of unsafe `.style` access.
+- Added an early return in `fetchGroupPrompts()` when the prompt table container is unavailable.
+- Added a UI regression test that removes the prompt role UI containers before changing the active group and asserts that no page error is raised.
+
+Testing approach:
+- Added a Playwright UI regression test covering group changes with missing prompt role containers.
+- Targeted validation should include the new UI test file plus a syntax/error pass on the updated template and config version bump.
+
+Impact analysis:
+The group workspace now keeps loading and switching groups even when prompt role UI fragments are omitted, customized, or temporarily unavailable.
+
+## Validation
+
+Test results:
+The regression test is designed to fail on the old `.style` access and pass once the null-safe toggle logic is present.
+
+Before/after comparison:
+- Before: group changes could throw an uncaught promise error from `updateGroupPromptsRoleUI()`.
+- After: group changes skip missing prompt role nodes safely and continue updating the rest of the workspace.
+
+User experience improvements:
+Users no longer see the prompt role UI exception interrupt the group workspace load flow when those prompt elements are missing.
\ No newline at end of file
diff --git a/docs/explanation/fixes/MEDIA_ENHANCED_CITATION_BADGE_FIX.md b/docs/explanation/fixes/MEDIA_ENHANCED_CITATION_BADGE_FIX.md
new file mode 100644
index 00000000..01879805
--- /dev/null
+++ b/docs/explanation/fixes/MEDIA_ENHANCED_CITATION_BADGE_FIX.md
@@ -0,0 +1,48 @@
+# Media Enhanced Citation Badge Fix
+
+Fixed/Implemented in version: **0.241.007**
+
+## Issue Description
+
+Audio and video files uploaded while Enhanced Citations was enabled were stored in Azure Blob Storage and could open through the enhanced citation experience on the chat page, but the workspace document details panel still showed the citation mode as Standard.
+
+## Root Cause Analysis
+
+The workspace document list renders the citation badge from the persisted `enhanced_citations` field on the document metadata record.
+
+Audio and video processing uploaded originals to blob storage, but the metadata record was not updated to set `enhanced_citations` to `true`.
+
+At the same time, the chat-side enhanced citation metadata endpoint could still infer enhanced support from blob-backed document state, so chat behavior and workspace metadata drifted apart.
+
+## Technical Details
+
+Files modified: `application/single_app/functions_documents.py`, `application/single_app/route_enhanced_citations.py`, `application/single_app/config.py`, `functional_tests/test_media_enhanced_citations_metadata_flag.py`
+
+Code changes summary:
+
+- Added normalization helpers so blob-backed documents read back with `enhanced_citations=True` even when older records are missing that field.
+- Updated `upload_to_blob()` to stamp `enhanced_citations=True` on the stored document metadata for new blob-backed uploads.
+- Initialized new document metadata records with `enhanced_citations=False` so the field is always explicit.
+- Updated the enhanced citation document metadata route to use the normalized per-document flag instead of inferring state from a derived blob path.
+
+Impact analysis:
+
+- Existing audio and video documents that already have persisted blob references now render the Enhanced badge in workspace details without requiring re-upload.
+- New blob-backed uploads keep workspace metadata aligned with the chat enhanced citation experience.
+
+## Validation
+
+Test coverage: `functional_tests/test_media_enhanced_citations_metadata_flag.py`
+
+Test results:
+
+- Validates normalization of current and archived blob-backed documents to `enhanced_citations=True`.
+- Validates that blob uploads stamp the document metadata with the enhanced citation flag.
+- Validates that document list/detail reads and the enhanced citation metadata route use the normalized value.
+
+Before/after comparison:
+
+- Before: Blob-backed media could behave as enhanced in chat while still displaying Standard in workspace details.
+- After: Workspace details and chat enhanced citation behavior use the same normalized document metadata state.
+
+Related config.py version update: `VERSION = "0.241.007"`
\ No newline at end of file
diff --git a/docs/explanation/fixes/TABULAR_EXHAUSTIVE_RESULT_SYNTHESIS_FIX.md b/docs/explanation/fixes/TABULAR_EXHAUSTIVE_RESULT_SYNTHESIS_FIX.md
new file mode 100644
index 00000000..347a8cf6
--- /dev/null
+++ b/docs/explanation/fixes/TABULAR_EXHAUSTIVE_RESULT_SYNTHESIS_FIX.md
@@ -0,0 +1,42 @@
+# Tabular Exhaustive Result Synthesis Fix
+
+Fixed/Implemented in version: **0.241.006**
+
+## Issue Description
+
+For exhaustive tabular questions such as "list out all of the security controls," the tabular analysis workflow could successfully execute an analytical tool call that returned the full matching result set, but the inner synthesis step could still answer as though it only had workbook schema samples.
+
+## Root Cause Analysis
+
+The main tabular retry guardrails in [route_backend_chats.py](application/single_app/route_backend_chats.py) only treated this kind of bad synthesis as retry-worthy in entity-lookup mode. General analytical requests could therefore accept a response that claimed only sample rows or workbook metadata were available even after a successful `query_tabular_data` call had returned the full result set.
+
+## Technical Details
+
+### Files Modified
+
+- `application/single_app/route_backend_chats.py`
+- `functional_tests/test_tabular_exhaustive_result_synthesis_fix.py`
+- `application/single_app/config.py`
+
+### Code Changes Summary
+
+- Expanded the access-limited synthesis detector to catch responses that say the data only includes sample rows, workbook metadata, or not the full list.
+- Added result-coverage helpers that distinguish between full and partial analytical result slices.
+- Reused those coverage signals in the primary tabular analysis loop so successful analytical calls can trigger a retry for general analysis mode, not just entity lookup.
+- Added prompt guidance telling the tabular synthesis model to treat `returned_rows == total_matches` and `returned_values == distinct_count` as full result availability.
+
+### Testing Approach
+
+- Added a regression test covering full-result exhaustive list retries.
+- Added a regression test covering partial-result exhaustive list reruns.
+
+## Validation
+
+### Expected Improvement
+
+- Exhaustive list questions no longer stop at a synthesis response that wrongly claims only schema samples are available after successful analytical tool calls.
+- When only a partial slice is returned, the workflow now has explicit retry guidance to rerun the relevant analytical call with a higher limit before answering.
+
+### Related Version Update
+
+- `application/single_app/config.py` updated to `0.241.006`.
\ No newline at end of file
diff --git a/docs/explanation/fixes/TABULAR_RESULT_COVERAGE_REDUNDANT_COMPARISON_FIX.md b/docs/explanation/fixes/TABULAR_RESULT_COVERAGE_REDUNDANT_COMPARISON_FIX.md
new file mode 100644
index 00000000..4cdf10bc
--- /dev/null
+++ b/docs/explanation/fixes/TABULAR_RESULT_COVERAGE_REDUNDANT_COMPARISON_FIX.md
@@ -0,0 +1,40 @@
+# Tabular Result Coverage Redundant Comparison Fix
+
+Fixed/Implemented in version: **0.241.007**
+
+## Issue Description
+
+The tabular result coverage helper in `application/single_app/route_backend_chats.py` used complementary `elif` comparisons immediately after `>=` checks when determining whether returned rows or distinct values covered the full result set.
+
+## Root Cause Analysis
+
+`parse_tabular_result_count()` normalizes these metadata fields to non-negative integers or `None`, and the helper already guards against `None` before comparing. Under those preconditions, `returned_rows >= total_matches` and `returned_values >= distinct_count` fully partition the remaining numeric cases, so the follow-up `<` tests were redundant and triggered static-analysis noise.
+
+## Technical Details
+
+### Files Modified
+
+- `application/single_app/route_backend_chats.py`
+- `functional_tests/test_tabular_exhaustive_result_synthesis_fix.py`
+- `application/single_app/config.py`
+
+### Code Changes Summary
+
+- Replaced the redundant complementary `elif` comparisons with `else` branches in `get_tabular_result_coverage_summary()`.
+- Added regression coverage for partial distinct-value result slices so the touched branch remains explicitly exercised.
+- Updated the application version to `0.241.007`.
+
+### Testing Approach
+
+- Extended the existing tabular exhaustive-result synthesis functional test to verify partial distinct-value coverage is still detected.
+
+## Validation
+
+### Expected Improvement
+
+- CodeQL no longer reports the redundant comparison finding for the tabular result coverage helper.
+- Runtime behavior remains unchanged for valid parsed numeric counts.
+
+### Related Version Update
+
+- `application/single_app/config.py` updated to `0.241.007`.
\ No newline at end of file
diff --git a/docs/explanation/fixes/v0.241.007/SPEECH_VIDEO_INDEXER_GUIDANCE_FIX.md b/docs/explanation/fixes/v0.241.007/SPEECH_VIDEO_INDEXER_GUIDANCE_FIX.md
new file mode 100644
index 00000000..16ad4f07
--- /dev/null
+++ b/docs/explanation/fixes/v0.241.007/SPEECH_VIDEO_INDEXER_GUIDANCE_FIX.md
@@ -0,0 +1,75 @@
+# Speech And Video Indexer Guidance Fix
+
+Fixed in version: **0.241.007**
+
+## Overview
+
+This fix aligns the admin multimedia setup experience with the way Simple Chat actually authenticates to Azure Speech Service and Azure AI Video Indexer.
+
+The update removes stale Video Indexer API-key guidance, adds cloud-aware Video Indexer endpoint selection, and documents the additional Speech Resource ID required for managed-identity text-to-speech.
+
+## Issue Description
+
+Users were encountering conflicting instructions across the admin UI and documentation:
+
+- Video Indexer walkthrough steps still implied an API-key-style setup even though the runtime uses ARM plus managed identity.
+- Video Indexer guidance mixed the managed identity used by the Video Indexer resource itself with the App Service managed identity used by Simple Chat.
+- The shared Speech section implied that all Speech features used the same minimal managed-identity inputs, but text-to-speech also needs the Speech Resource ID.
+
+## Root Cause
+
+The UI, backend, and written guidance drifted over time.
+
+- The admin walkthrough still referenced legacy Video Indexer fields.
+- The admin JavaScript only revealed the Speech configuration when audio uploads were enabled, not when speech-to-text input or text-to-speech were enabled.
+- Text-to-speech still used a key-centric backend path while other Speech flows already supported managed identity.
+
+## Technical Details
+
+### Files Modified
+
+- `application/single_app/config.py`
+- `application/single_app/functions_authentication.py`
+- `application/single_app/functions_documents.py`
+- `application/single_app/functions_settings.py`
+- `application/single_app/route_backend_tts.py`
+- `application/single_app/route_frontend_admin_settings.py`
+- `application/single_app/static/js/admin/admin_settings.js`
+- `application/single_app/templates/_video_indexer_info.html`
+- `application/single_app/templates/admin_settings.html`
+- `docs/admin_configuration.md`
+- `docs/reference/admin_configuration.md`
+- `docs/how-to/azure_speech_managed_identity_manul_setup.md`
+- `docs/setup_instructions_special.md`
+- `functional_tests/test_multimedia_support_reorganization.py`
+- `functional_tests/test_video_indexer_dual_authentication_support.py`
+- `ui_tests/test_admin_multimedia_guidance.py`
+
+### Code Changes Summary
+
+- Added `speech_service_resource_id` to admin settings and persistence.
+- Added a shared Speech synthesis configuration helper so text-to-speech can use managed identity correctly.
+- Updated the admin multimedia walkthrough to use Video Indexer cloud selection and ARM resource fields instead of a legacy API-key path.
+- Updated admin JavaScript so the shared Speech section appears when any Speech feature is enabled.
+- Added Video Indexer cloud selection, effective endpoint display, and clearer identity guidance in the admin UI and help modal.
+
+### Testing Approach
+
+- Updated source-inspection functional tests for the current multimedia UI.
+- Updated the legacy Video Indexer functional test to validate the managed-identity-only flow.
+- Added a Playwright admin UI regression test for the Video Indexer cloud selector and shared Speech managed-identity fields.
+
+## Validation
+
+### Before
+
+- Users could still find walkthrough and documentation references to Video Indexer API keys.
+- The Speech settings panel could stay hidden when only speech-to-text input or text-to-speech was enabled.
+- Managed-identity text-to-speech lacked the required Speech Resource ID guidance and backend support.
+
+### After
+
+- The admin UI consistently points users to managed identity for Video Indexer.
+- Video Indexer cloud selection and endpoint behavior are explicit.
+- Shared Speech guidance now explains the extra managed-identity requirement for voice responses.
+- Functional and UI regression coverage now checks the updated configuration path.
\ No newline at end of file
diff --git a/docs/explanation/fixes/v0.241.008/SPEECH_RESOURCE_ID_BUILDER_FIX.md b/docs/explanation/fixes/v0.241.008/SPEECH_RESOURCE_ID_BUILDER_FIX.md
new file mode 100644
index 00000000..f7e8bef5
--- /dev/null
+++ b/docs/explanation/fixes/v0.241.008/SPEECH_RESOURCE_ID_BUILDER_FIX.md
@@ -0,0 +1,48 @@
+# Speech Resource ID Builder Fix
+
+Fixed in version: **0.241.008**
+
+## Overview
+
+This fix makes the managed-identity Speech configuration easier to complete by helping admins build the Azure Resource Manager Speech resource ID directly in the Admin Settings page.
+
+## Issue Description
+
+The Speech Resource ID is required for managed-identity text-to-speech, but it is not easy to locate in the Azure portal. Users had to either find the value manually in the resource properties page or use Azure CLI commands outside the app.
+
+## Root Cause
+
+The admin UI only exposed a single raw Speech Resource ID field. It did not provide any assistance for constructing the ARM path even though the required parts are predictable.
+
+## Technical Details
+
+### Files Modified
+
+- `application/single_app/config.py`
+- `application/single_app/functions_settings.py`
+- `application/single_app/route_frontend_admin_settings.py`
+- `application/single_app/static/js/admin/admin_settings.js`
+- `application/single_app/templates/admin_settings.html`
+- `application/external_apps/databaseseeder/artifacts/admin_settings.json`
+- `docs/how-to/azure_speech_managed_identity_manul_setup.md`
+- `functional_tests/test_multimedia_support_reorganization.py`
+- `ui_tests/test_admin_multimedia_guidance.py`
+
+### Code Changes Summary
+
+- Added optional helper fields for Speech Subscription ID, Speech Resource Group, and Speech Resource Name.
+- Added client-side builder logic that assembles the Speech ARM resource ID in the format `/subscriptions//resourceGroups/
+
+
+
+
+ {{ feature_data.current_release.badge }}
+ Current release
+ {{ feature_data.current_release.label }}
+{{ feature_data.current_release.description }}
+
+ {% for slug in feature_data.current_release.slugs %}
+ {% assign feature = feature_data.lookup[slug] %}
+ {% include latest_release_card.html feature=feature badge=feature_data.current_release.badge %}
+ {% endfor %}
+
+
+
+ {% endfor %}
+
+
+ + Archive + {{ group.label }} + {{ group.description }} + + + + v{{ group.release_version }} + Show highlights + +
+ +
+
+
+ {% for slug in group.slugs %}
+ {% assign feature = feature_data.lookup[slug] %}
+ {% include latest_release_card.html feature=feature badge=group.badge %}
+ {% endfor %}
+
+
+ {% if group.highlights %}
+
+
+ {% endif %}
+
+ {% if group.bug_fixes %}
+ Additional highlights from v{{ group.release_version }}
+-
+ {% for item in group.highlights %}
+
- {{ item }} + {% endfor %} +
+
+ {% endif %}
+ Bug fixes kept for reference
+-
+ {% for item in group.bug_fixes %}
+
- {{ item }} + {% endfor %} +
-
-
-
-
- {{ feature_data.current_release.badge }}
- Current release
- {{ feature_data.current_release.label }}
-{{ feature_data.current_release.description }}
-
- {% for slug in feature_data.current_release.slugs %}
- {% assign feature = feature_data.lookup[slug] %}
- {% include latest_release_card.html feature=feature badge=feature_data.current_release.badge %}
- {% endfor %}
-
-
-
-{% endfor %}
-
-
+This page mirrors the curated in-app Latest Features experience and keeps earlier release highlights available in an archive section below the current release.
diff --git a/docs/reference/admin_configuration.md b/docs/reference/admin_configuration.md
index 61916c82..0a622b6a 100644
--- a/docs/reference/admin_configuration.md
+++ b/docs/reference/admin_configuration.md
@@ -112,17 +112,23 @@ Control document workspace features and capabilities.
#### Multimedia Support
**Video Processing (Azure Video Indexer)**
- **Enable/Disable**: Toggle video file support
+- **Cloud / Endpoint Mode**: Choose Azure Public, Azure Government, or Custom Endpoint
+- **Resource Group**: Azure resource group containing the Video Indexer resource
+- **Subscription ID**: Azure subscription GUID for the Video Indexer resource
+- **Account Name**: Video Indexer resource name
- **Account ID**: Video Indexer account identifier
- **Location**: Geographic location of Video Indexer account
-- **API Key**: Authentication key for Video Indexer
-- **API Endpoint**: Video Indexer service endpoint
+- **API Endpoint**: Derived from the selected cloud mode unless Custom Endpoint is selected
+- **Authentication Model**: App Service system-assigned managed identity with `Contributor` on the Video Indexer resource
- **Timeout Settings**: Processing timeout limits
**Audio Processing (Azure Speech Service)**
-- **Enable/Disable**: Toggle audio file support
+- **Shared Service**: The same Speech configuration is used for audio uploads, speech-to-text input, and text-to-speech
- **Endpoint**: Speech service endpoint URL
- **Region**: Azure region for Speech service
-- **API Key**: Authentication key for Speech service
+- **Locale**: Default transcription locale
+- **Authentication Type**: Key or Managed Identity
+- **Speech Resource ID**: Required for managed-identity text-to-speech
#### Metadata Extraction
- **Enable/Disable**: Toggle AI-powered metadata extraction
@@ -312,6 +318,8 @@ Guidelines:
- β
Enable Content Safety for production deployments
- β
Implement proper RBAC role assignments
- β
Monitor access to admin settings
+- β
Use managed identity, not API keys, for Azure Video Indexer in the current Simple Chat setup
+- β
Use the Speech custom-domain endpoint for managed identity and add the Speech Resource ID when enabling managed-identity voice responses
### Performance
- β
Test all service connections after configuration
diff --git a/docs/setup_instructions_special.md b/docs/setup_instructions_special.md
index 9c3f7ca0..08332aed 100644
--- a/docs/setup_instructions_special.md
+++ b/docs/setup_instructions_special.md
@@ -80,14 +80,15 @@ Using Managed Identity allows the App Service to authenticate to other Azure res
| Document Intelligence | Cognitive Services User | Allows using the DI service for analysis. |
| Content Safety | Azure AI Developer | Allows using the CS service for analysis. (Role name might vary slightly, check portal) |
| Azure Storage Account | Storage Blob Data Contributor | Required for Enhanced Citations if using Managed Identity. Allows reading/writing blobs. |
- | Azure Speech Service | Cognitive Services Speech Contributor | Allows using the Speech service for transcription. |
- | Video Indexer | (Handled via VI resource settings) | VI typically uses its own Managed Identity to access associated Storage/Media Services. Check VI docs. |
+ | Azure Speech Service | Cognitive Services Speech User (plus Speech Contributor if needed) | Use the custom-domain endpoint for managed identity. Add `Cognitive Services Speech Contributor` if transcription operations still require it. Managed-identity text-to-speech also needs the Speech Resource ID in Admin Settings. |
+ | Video Indexer | Contributor on the Video Indexer resource | Grant the App Service system-assigned managed identity `Contributor` on the Video Indexer resource. Video Indexer resource creation may also ask for a separate user-assigned managed identity for its own storage/media integration. |
3. **Configure Application to Use Managed Identity**:
- Update the **Application settings** in the App Service (or .env before upload) **OR** use the toggles in the **Admin Settings UI** where available.
- **Cosmos DB**: Set AZURE_COSMOS_AUTHENTICATION_TYPE="managed_identity" in Application Settings. Remove AZURE_COSMOS_KEY and AZURE_COSMOS_CONNECTION_STRING.
- **Other Services (OpenAI, Search, DI, CS, Storage)**: Check the **Admin Settings UI** first. Most sections (GPT, Embeddings, Image Gen, Citations, Safety, Search & Extract) have toggles or dropdowns to select "Managed Identity" as the authentication method. Using the UI toggle is preferred as it handles the backend configuration. If UI options aren't present or for overrides, you might need specific environment variables like AZURE_OPENAI_USE_MANAGED_IDENTITY="True", but rely on the UI where possible.
+ - **Speech and Video Indexer**: In Search & Extract β Multimedia Support, the Speech section is shared by audio uploads, speech-to-text input, and text-to-speech. Video Indexer uses the App Service managed identity and the cloud/end-point selector rather than a Video Indexer API key.
## Enterprise Networking
> Return to top
diff --git a/functional_tests/test_foundry_token_limit_defaults.py b/functional_tests/test_foundry_token_limit_defaults.py
new file mode 100644
index 00000000..f96aff50
--- /dev/null
+++ b/functional_tests/test_foundry_token_limit_defaults.py
@@ -0,0 +1,286 @@
+# test_foundry_token_limit_defaults.py
+#!/usr/bin/env python3
+"""
+Functional test for Foundry token limit defaults and runtime forwarding.
+Version: 0.241.005
+Implemented in: 0.241.005
+
+This test ensures seeded agent defaults use model-native output limits and
+that classic and new Foundry runtimes forward configured token caps.
+"""
+
+import asyncio
+import importlib
+import sys
+import types
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[1]
+SINGLE_APP_ROOT = ROOT / "application" / "single_app"
+
+sys.path.insert(0, str(SINGLE_APP_ROOT))
+sys.path.insert(0, str(ROOT))
+
+
+def assert_contains(file_path: Path, expected: str) -> None:
+ content = file_path.read_text(encoding="utf-8")
+ if expected not in content:
+ raise AssertionError(f"Expected to find {expected!r} in {file_path}")
+
+
+def restore_modules(original_modules):
+ for module_name, original_module in original_modules.items():
+ if original_module is None:
+ sys.modules.pop(module_name, None)
+ else:
+ sys.modules[module_name] = original_module
+
+
+def load_foundry_agent_runtime_module():
+ functions_appinsights_stub = types.ModuleType("functions_appinsights")
+ functions_appinsights_stub.log_event = lambda *args, **kwargs: None
+
+ functions_debug_stub = types.ModuleType("functions_debug")
+ functions_debug_stub.debug_print = lambda *args, **kwargs: None
+
+ functions_keyvault_stub = types.ModuleType("functions_keyvault")
+ functions_keyvault_stub.retrieve_secret_from_key_vault_by_full_name = lambda value: value
+ functions_keyvault_stub.validate_secret_name_dynamic = lambda value: False
+
+ requests_stub = types.ModuleType("requests")
+ requests_stub.last_post_args = None
+ requests_stub.last_post_kwargs = None
+
+ class StubResponse:
+ def __init__(self, payload, status_code=200, headers=None, text=""):
+ self._payload = payload
+ self.status_code = status_code
+ self.headers = headers or {"Content-Type": "application/json"}
+ self.text = text
+
+ def json(self):
+ return self._payload
+
+ def close(self):
+ return None
+
+ def post(*args, **kwargs):
+ requests_stub.last_post_args = args
+ requests_stub.last_post_kwargs = kwargs
+ return StubResponse(
+ {
+ "id": "resp-123",
+ "model": "gpt-5.4",
+ "output": [
+ {
+ "type": "message",
+ "content": [
+ {
+ "type": "output_text",
+ "text": "new foundry result",
+ }
+ ],
+ }
+ ],
+ }
+ )
+
+ requests_stub.Response = StubResponse
+ requests_stub.get = lambda *args, **kwargs: None
+ requests_stub.post = post
+
+ azure_stub = types.ModuleType("azure")
+ azure_identity_stub = types.ModuleType("azure.identity")
+ azure_identity_aio_stub = types.ModuleType("azure.identity.aio")
+
+ class Token:
+ def __init__(self, value):
+ self.token = value
+
+ class SyncDefaultAzureCredential:
+ def __init__(self, *args, **kwargs):
+ self.args = args
+ self.kwargs = kwargs
+
+ def get_token(self, scope):
+ return Token(f"sync:{scope}")
+
+ def close(self):
+ return None
+
+ class SyncClientSecretCredential(SyncDefaultAzureCredential):
+ pass
+
+ class AsyncDefaultAzureCredential:
+ def __init__(self, *args, **kwargs):
+ self.args = args
+ self.kwargs = kwargs
+
+ async def get_token(self, scope):
+ return Token(f"async:{scope}")
+
+ async def close(self):
+ return None
+
+ class AsyncClientSecretCredential(AsyncDefaultAzureCredential):
+ pass
+
+ class AzureAuthorityHosts:
+ AZURE_PUBLIC_CLOUD = "public"
+ AZURE_GOVERNMENT = "government"
+
+ azure_identity_stub.AzureAuthorityHosts = AzureAuthorityHosts
+ azure_identity_stub.ClientSecretCredential = SyncClientSecretCredential
+ azure_identity_stub.DefaultAzureCredential = SyncDefaultAzureCredential
+ azure_identity_aio_stub.ClientSecretCredential = AsyncClientSecretCredential
+ azure_identity_aio_stub.DefaultAzureCredential = AsyncDefaultAzureCredential
+
+ semantic_kernel_stub = types.ModuleType("semantic_kernel")
+ semantic_kernel_agents_stub = types.ModuleType("semantic_kernel.agents")
+ semantic_kernel_contents_stub = types.ModuleType("semantic_kernel.contents")
+ semantic_kernel_chat_stub = types.ModuleType("semantic_kernel.contents.chat_message_content")
+
+ class StubAgentsOperations:
+ async def get_agent(self, agent_id):
+ return types.SimpleNamespace(model={"id": "gpt-5.4"}, agent_id=agent_id)
+
+ async def delete_thread(self, thread_id):
+ return None
+
+ class StubClient:
+ def __init__(self):
+ self.agents = StubAgentsOperations()
+
+ async def close(self):
+ return None
+
+ async def _delete_thread():
+ return None
+
+ class ChatMessageContent:
+ def __init__(self, content="", role="user", metadata=None):
+ self.content = content
+ self.role = role
+ self.metadata = metadata or {}
+ self.items = []
+
+ class AzureAIAgent:
+ last_invoke_kwargs = None
+
+ def __init__(self, client=None, definition=None):
+ self.client = client
+ self.definition = definition
+
+ @staticmethod
+ def create_client(*args, **kwargs):
+ return StubClient()
+
+ async def invoke(self, **kwargs):
+ AzureAIAgent.last_invoke_kwargs = kwargs
+ message = ChatMessageContent(content="classic foundry result", metadata={})
+ thread = types.SimpleNamespace(id="thread-123", delete=_delete_thread)
+ yield types.SimpleNamespace(thread=thread, message=message)
+
+ semantic_kernel_agents_stub.AzureAIAgent = AzureAIAgent
+ semantic_kernel_chat_stub.ChatMessageContent = ChatMessageContent
+
+ original_modules = {}
+ module_stubs = {
+ "functions_appinsights": functions_appinsights_stub,
+ "functions_debug": functions_debug_stub,
+ "functions_keyvault": functions_keyvault_stub,
+ "requests": requests_stub,
+ "azure": azure_stub,
+ "azure.identity": azure_identity_stub,
+ "azure.identity.aio": azure_identity_aio_stub,
+ "semantic_kernel": semantic_kernel_stub,
+ "semantic_kernel.agents": semantic_kernel_agents_stub,
+ "semantic_kernel.contents": semantic_kernel_contents_stub,
+ "semantic_kernel.contents.chat_message_content": semantic_kernel_chat_stub,
+ }
+
+ for module_name, module_stub in module_stubs.items():
+ original_modules[module_name] = sys.modules.get(module_name)
+ sys.modules[module_name] = module_stub
+
+ original_modules["foundry_agent_runtime"] = sys.modules.get("foundry_agent_runtime")
+ sys.modules.pop("foundry_agent_runtime", None)
+ module = importlib.import_module("foundry_agent_runtime")
+ return module, original_modules, requests_stub, AzureAIAgent
+
+
+def test_foundry_defaults_and_runtime_forwarding():
+ """Seeded defaults should use -1 and Foundry runtimes should forward token caps."""
+ print("π Testing Foundry defaults and runtime token forwarding...")
+
+ globals_path = ROOT / "application" / "single_app" / "functions_global_agents.py"
+ schema_path = ROOT / "application" / "single_app" / "static" / "json" / "schemas" / "agent.schema.json"
+
+ assert_contains(globals_path, '"max_completion_tokens": -1')
+ assert_contains(schema_path, '"default": -1')
+
+ module, original_modules, requests_stub, azure_ai_agent_cls = load_foundry_agent_runtime_module()
+
+ try:
+ message_history = [module.ChatMessageContent(content="Hello Foundry")]
+
+ classic_result = asyncio.run(
+ module.execute_foundry_agent(
+ foundry_settings={
+ "agent_id": "agent-123",
+ "endpoint": "https://example.services.ai.azure.com",
+ },
+ global_settings={},
+ message_history=message_history,
+ metadata={"conversation_id": "conv-1"},
+ max_completion_tokens=4096,
+ )
+ )
+
+ assert azure_ai_agent_cls.last_invoke_kwargs is not None
+ assert azure_ai_agent_cls.last_invoke_kwargs.get("max_completion_tokens") == 4096
+ assert classic_result.message == "classic foundry result"
+
+ payload_without_limit = module._build_new_foundry_request_payload(
+ message_history,
+ {"conversation_id": "conv-1"},
+ stream=False,
+ )
+ assert "max_output_tokens" not in payload_without_limit
+
+ new_result = asyncio.run(
+ module.execute_new_foundry_agent(
+ foundry_settings={
+ "application_name": "test-app",
+ "endpoint": "https://example.services.ai.azure.com",
+ "responses_api_version": "2025-11-15-preview",
+ },
+ global_settings={},
+ message_history=message_history,
+ metadata={"conversation_id": "conv-2"},
+ max_completion_tokens=8192,
+ )
+ )
+
+ assert requests_stub.last_post_kwargs is not None
+ assert requests_stub.last_post_kwargs["json"].get("max_output_tokens") == 8192
+ assert new_result.message == "new foundry result"
+ finally:
+ restore_modules(original_modules)
+
+ print("β
Foundry defaults and runtime token forwarding verified.")
+
+
+if __name__ == "__main__":
+ success = True
+ try:
+ test_foundry_defaults_and_runtime_forwarding()
+ except Exception as exc:
+ print(f"β Test failed: {exc}")
+ import traceback
+
+ traceback.print_exc()
+ success = False
+
+ raise SystemExit(0 if success else 1)
\ No newline at end of file
diff --git a/functional_tests/test_group_workspace_prompt_role_ui_guard.py b/functional_tests/test_group_workspace_prompt_role_ui_guard.py
new file mode 100644
index 00000000..6741319c
--- /dev/null
+++ b/functional_tests/test_group_workspace_prompt_role_ui_guard.py
@@ -0,0 +1,87 @@
+# test_group_workspace_prompt_role_ui_guard.py
+"""
+Functional test for group workspace prompt role UI guard.
+Version: 0.241.007
+Implemented in: 0.241.007
+
+This test ensures that the group workspace prompt role UI safely handles
+missing prompt containers so active-group loading can continue.
+"""
+
+import os
+import sys
+
+
+ROOT_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+GROUP_WORKSPACE_TEMPLATE = os.path.join(
+ ROOT_DIR,
+ "application",
+ "single_app",
+ "templates",
+ "group_workspaces.html",
+)
+CONFIG_FILE = os.path.join(
+ ROOT_DIR,
+ "application",
+ "single_app",
+ "config.py",
+)
+
+
+def read_file(path):
+ with open(path, "r", encoding="utf-8") as file_handle:
+ return file_handle.read()
+
+
+def test_group_workspace_prompt_role_ui_uses_guarded_dom_access():
+ """Verify prompt role UI updates tolerate missing containers."""
+ print("Testing group workspace prompt role UI guard...")
+
+ content = read_file(GROUP_WORKSPACE_TEMPLATE)
+
+ required_snippets = [
+ 'const createGroupPromptSection = document.getElementById(',
+ '"create-group-prompt-section"',
+ 'const groupPromptsRoleWarning = document.getElementById(',
+ '"group-prompts-role-warning"',
+ 'if (!createGroupPromptSection || !groupPromptsRoleWarning) {',
+ 'createGroupPromptSection.classList.toggle("d-none", !canManage);',
+ 'groupPromptsRoleWarning.classList.toggle("d-none", canManage);',
+ ]
+ missing = [snippet for snippet in required_snippets if snippet not in content]
+ assert not missing, f"Missing guarded prompt role UI snippets: {missing}"
+
+ forbidden_snippets = [
+ 'document.getElementById("create-group-prompt-section").style.display',
+ 'document.getElementById("group-prompts-role-warning").style.display',
+ ]
+ present = [snippet for snippet in forbidden_snippets if snippet in content]
+ assert not present, f"Unexpected direct prompt role UI DOM access found: {present}"
+
+ print("Prompt role UI guard is present")
+
+
+def test_config_version_is_bumped_for_prompt_role_ui_guard_fix():
+ """Verify config version was bumped for the prompt role UI guard fix."""
+ print("Testing config version bump...")
+
+ config_content = read_file(CONFIG_FILE)
+ assert 'VERSION = "0.241.007"' in config_content, "Expected config.py version 0.241.007"
+
+ print("Config version bump passed")
+
+
+if __name__ == "__main__":
+ tests = [
+ test_group_workspace_prompt_role_ui_uses_guarded_dom_access,
+ test_config_version_is_bumped_for_prompt_role_ui_guard_fix,
+ ]
+
+ results = []
+ for test in tests:
+ print(f"\nRunning {test.__name__}...")
+ results.append(test())
+
+ success = all(results)
+ print(f"\nResults: {sum(results)}/{len(results)} tests passed")
+ sys.exit(0 if success else 1)
\ No newline at end of file
diff --git a/functional_tests/test_media_enhanced_citations_metadata_flag.py b/functional_tests/test_media_enhanced_citations_metadata_flag.py
new file mode 100644
index 00000000..bf57a829
--- /dev/null
+++ b/functional_tests/test_media_enhanced_citations_metadata_flag.py
@@ -0,0 +1,153 @@
+#!/usr/bin/env python3
+# test_media_enhanced_citations_metadata_flag.py
+"""
+Functional test for media enhanced citation metadata normalization.
+Version: 0.241.007
+Implemented in: 0.241.007
+
+This test ensures blob-backed audio and video documents are marked as
+enhanced citations in stored metadata so workspace badges match chat behavior.
+"""
+
+import ast
+import os
+import re
+import sys
+
+
+ROOT_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+SINGLE_APP_ROOT = os.path.join(ROOT_DIR, 'application', 'single_app')
+FUNCTIONS_DOCUMENTS_FILE = os.path.join(SINGLE_APP_ROOT, 'functions_documents.py')
+ROUTE_FILE = os.path.join(SINGLE_APP_ROOT, 'route_enhanced_citations.py')
+CONFIG_FILE = os.path.join(SINGLE_APP_ROOT, 'config.py')
+
+
+def read_file(path):
+ with open(path, 'r', encoding='utf-8') as file_handle:
+ return file_handle.read()
+
+
+def load_normalization_helpers():
+ """Compile the normalization helpers directly from source for focused validation."""
+ source = read_file(FUNCTIONS_DOCUMENTS_FILE)
+ module_ast = ast.parse(source, filename=FUNCTIONS_DOCUMENTS_FILE)
+
+ helper_names = {
+ '_has_persisted_blob_reference',
+ '_normalize_document_enhanced_citations',
+ }
+ helper_nodes = [
+ node for node in module_ast.body
+ if isinstance(node, ast.FunctionDef) and node.name in helper_names
+ ]
+
+ missing_helpers = helper_names.difference({node.name for node in helper_nodes})
+ assert not missing_helpers, f'Missing normalization helpers: {sorted(missing_helpers)}'
+
+ isolated_module = ast.Module(body=helper_nodes, type_ignores=[])
+ namespace = {'ARCHIVED_REVISION_BLOB_PATH_MODE': 'archived_revision'}
+ exec(compile(isolated_module, FUNCTIONS_DOCUMENTS_FILE, 'exec'), namespace)
+ return namespace['_normalize_document_enhanced_citations']
+
+
+def test_blob_backed_documents_normalize_to_enhanced():
+ """Verify legacy and current blob-backed documents normalize to enhanced citations."""
+ print('π Testing blob-backed document normalization...')
+
+ normalize_document = load_normalization_helpers()
+
+ current_blob_doc = {'id': 'audio-doc', 'blob_path': 'user/audio.mp3'}
+ normalized_current = normalize_document(dict(current_blob_doc))
+ assert normalized_current['enhanced_citations'] is True, 'Current blob path should normalize to enhanced citations'
+
+ archived_blob_doc = {
+ 'id': 'video-doc',
+ 'blob_path': None,
+ 'blob_path_mode': 'archived_revision',
+ 'archived_blob_path': 'user/family/video.mp4',
+ }
+ normalized_archived = normalize_document(dict(archived_blob_doc))
+ assert normalized_archived['enhanced_citations'] is True, 'Archived blob path should normalize to enhanced citations'
+
+ text_only_doc = {'id': 'text-doc', 'blob_path': None, 'archived_blob_path': None}
+ normalized_text = normalize_document(dict(text_only_doc))
+ assert normalized_text['enhanced_citations'] is False, 'Documents without persisted blob references should stay standard'
+
+ print('β
Blob-backed document normalization passed')
+ return True
+
+
+def test_blob_upload_persists_enhanced_flag():
+ """Verify uploads stamp the document metadata with enhanced_citations=True."""
+ print('π Testing blob upload metadata stamping...')
+
+ source = read_file(FUNCTIONS_DOCUMENTS_FILE)
+ required_snippets = [
+ 'current_document["enhanced_citations"] = True',
+ '"enhanced_citations": False,',
+ ]
+
+ missing = [snippet for snippet in required_snippets if snippet not in source]
+ assert not missing, f'Missing upload/create metadata snippets: {missing}'
+
+ print('β
Blob upload metadata stamping passed')
+ return True
+
+
+def test_document_reads_use_normalized_enhanced_flag():
+ """Verify document list/detail reads expose normalized enhanced citation state."""
+ print('π Testing document read normalization and enhanced citation metadata route...')
+
+ documents_source = read_file(FUNCTIONS_DOCUMENTS_FILE)
+ route_source = read_file(ROUTE_FILE)
+
+ required_document_snippets = [
+ '_normalize_document_enhanced_citations(_choose_current_document(family_documents))',
+ 'return jsonify(_normalize_document_enhanced_citations(document_results[0])), 200',
+ 'return _normalize_document_enhanced_citations(document_items[0]) if document_items else None',
+ ]
+ missing_document_snippets = [
+ snippet for snippet in required_document_snippets if snippet not in documents_source
+ ]
+ assert not missing_document_snippets, (
+ 'Missing document normalization snippets: '
+ f'{missing_document_snippets}'
+ )
+
+ route_snippet = '"enhanced_citations": bool(raw_doc.get("enhanced_citations", False))'
+ assert route_snippet in route_source, 'Enhanced citation metadata route should use normalized per-document flag'
+ assert 'bool(blob_path)' not in route_source, 'Metadata route should no longer infer enhanced citations from a derived blob path'
+
+ print('β
Document read normalization passed')
+ return True
+
+
+def test_config_version_bumped_for_media_citation_fix():
+ """Verify config.py version was bumped for this fix."""
+ print('π Testing config version bump...')
+
+ config_source = read_file(CONFIG_FILE)
+ version_match = re.search(r'VERSION = "([0-9.]+)"', config_source)
+ assert version_match, 'Could not find VERSION in config.py'
+ assert version_match.group(1) == '0.241.007', 'Expected config.py version 0.241.007'
+
+ print('β
Config version bump passed')
+ return True
+
+
+if __name__ == '__main__':
+ tests = [
+ test_blob_backed_documents_normalize_to_enhanced,
+ test_blob_upload_persists_enhanced_flag,
+ test_document_reads_use_normalized_enhanced_flag,
+ test_config_version_bumped_for_media_citation_fix,
+ ]
+
+ results = []
+ for test in tests:
+ print(f'\nπ§ͺ Running {test.__name__}...')
+ results.append(test())
+
+ success = all(results)
+ print(f'\nπ Results: {sum(results)}/{len(results)} tests passed')
+ sys.exit(0 if success else 1)
\ No newline at end of file
diff --git a/functional_tests/test_multimedia_support_reorganization.py b/functional_tests/test_multimedia_support_reorganization.py
index 5afbfc72..23abfef5 100644
--- a/functional_tests/test_multimedia_support_reorganization.py
+++ b/functional_tests/test_multimedia_support_reorganization.py
@@ -1,235 +1,290 @@
#!/usr/bin/env python3
+# test_multimedia_support_reorganization.py
"""
-Functional test for multimedia support reorganization and Video Indexer configuration modal.
-Version: 0.229.017
-Implemented in: 0.229.017
+Functional test for multimedia support reorganization and shared speech guidance.
+Version: 0.241.010
+Implemented in: 0.241.010
This test ensures that:
-1. Multimedia Support section has been moved from Other tab to Search and Extract tab
-2. Video Indexer configuration modal is properly integrated
-3. All multimedia settings are accessible in the new location
+1. Multimedia Support remains in the Search and Extract tab
+2. The Video Indexer modal reflects the managed-identity-only ARM setup
+3. The AI Voice setup guide is integrated with the shared Speech settings
+4. Shared Speech and Video Indexer settings are accessible in the current admin UI
"""
-import sys
import os
+import sys
+
sys.path.append(os.path.dirname(os.path.abspath(__file__)))
+
def test_multimedia_support_move():
- """Test that multimedia support has been moved to Search and Extract tab."""
- print("π Testing Multimedia Support section move...")
-
+ """Test that multimedia support remains in the Search and Extract tab."""
+ print("π Testing Multimedia Support section location...")
+
try:
- # Read the admin_settings.html file
admin_settings_path = os.path.join(
- os.path.dirname(os.path.abspath(__file__)),
+ os.path.dirname(os.path.abspath(__file__)),
'..', 'application', 'single_app', 'templates', 'admin_settings.html'
)
-
- with open(admin_settings_path, 'r', encoding='utf-8') as f:
- content = f.read()
-
- # Check that multimedia support is in search-extract tab
+
+ with open(admin_settings_path, 'r', encoding='utf-8') as file_handle:
+ content = file_handle.read()
+
search_extract_section = content.find('id="search-extract" role="tabpanel"')
- multimedia_support_section = content.find('- - Archive - {{ group.label }} - {{ group.description }} - - - - v{{ group.release_version }} - Show highlights - -
- -
-
-
- {% for slug in group.slugs %}
- {% assign feature = feature_data.lookup[slug] %}
- {% include latest_release_card.html feature=feature badge=group.badge %}
- {% endfor %}
-
-
- {% if group.highlights %}
-
-
- {% endif %}
-
- {% if group.bug_fixes %}
- Additional highlights from v{{ group.release_version }}
--
- {% for item in group.highlights %}
-
- {{ item }} - {% endfor %} -
-
- {% endif %}
- Bug fixes kept for reference
--
- {% for item in group.bug_fixes %}
-
- {{ item }} - {% endfor %} -