Fixed
- Hosted/panel deployment mode gating for the admin surface (Azure/GPT-RAG#592). The admin SPA and every admin API route were mounted unconditionally at import time regardless of deployment mode, and the
DEPLOY_ADMINISTRATIVE_PANELsetting was never read. Mounting is now resolved once from App Configuration inside the ASGIlifespanand gated on the resolved deployment mode. - Hosted/panel startup validation now fails closed on missing Entra ID configuration, not only on missing Cosmos configuration.
GET /api/panel/feedbackno longer returns 500 permanently because of a single malformed Cosmos document, and no longer silently drops documents that are missingrating.POST /api/panel/feedbackno longer returns 500 when the Cosmos write raises.
Added
- New
/api/panel/*administrative panel API for hosted/panel deployments:GET /api/panel/status,GET /api/panel/feedback,POST /api/panel/feedback, andGET /api/panel/overview. Every route requires the Entra Admin application role.
Validation
228 passed, 0 failedagainst the pinnedrequirements.txt(fastapi==0.115.12,azure-monitor-opentelemetry-exporter==1.0.0b56).- The
Testsworkflow passed on both the source branch and the release branch.
Upgrade note: classic deployments are unaffected — admin_surface_enabled() returns true for CLASSIC and HOSTED_PANEL, so the admin surface keeps mounting exactly as before. Only HOSTED_NO_PANEL changes behaviour, and it now correctly returns 404 for admin routes instead of exposing them.
This release reaches deployments only after the umbrella Azure/GPT-RAG manifest.json is repinned from v2.7.2 to v2.7.3.