Azure services
Services map
Profiles enable only the components a project needs. Do not infer that every service below exists in every environment.
| Service | Repository use |
|---|---|
| App Service | Hosts containerized Mastra runtime, ingestion web API, Admin UI, Widget, Handbook App, Grafana, documentation, and diagnostics HTTP components selected by a profile. |
| Azure Functions | Hosts the main Function App, ingestion processor blueprints, and health aggregator timers. |
| Azure Container Registry | Stores immutable and environment-tagged images produced by promotion/build workflows. |
| API Management | Routes external traffic, applies caller auth/policy, publishes backend prefixes, and supports deployment smoke/slot validation. |
| Azure SQL | Durable operational, agent-profile/model, domain, ingestion, memory, and observability data defined by db/sqlproj/**. |
| Storage Account | Blob/File/Queue/Table backing used by application and Functions workloads; exact role grants differ by component. |
| Key Vault | Environment secrets and deployment/runtime references. Managed identity is preferred over copying secret values. |
| Azure AI services | Model deployments used by runtime agents and workbenches; deployment metadata is reconciled with Core model tables. |
| Azure AI Content Safety | Tenant-hosted moderation used by TAP and other selected flows. |
| Document Intelligence | Document extraction used by ingestion/Handbook flows. |
| Azure AI Search | Optional retrieval index, notably used by Handbook profiles. |
| Application Insights + Log Analytics | Service telemetry, diagnostics, and operational queries. |
| Static Web Apps | Optional hosting surface selected by documentation/static-site parameters. |
Component selection begins in azure_template/profiles/*.json; runtime and
gateway details come from environments/**/*.yml and
.github/config/projects/*.yml.