🚀 Release Highlights — v5.0.0

⚠ BREAKING CHANGES

Infrastructure restructured into three flavors — avm, avm-waf, bicep.
ACR provisioned per deployment — images built/pushed to the freshly deployed ACR, then Container Apps + App Service revisions updated.
Model upgrade to the GPT-5.4 family — gpt-4.1 / gpt-4.1-mini / o4-mini → gpt-5.4, gpt-5.4-mini, plus new gpt-image-1.5.
Backend de-versioned — the transitional v4/ package removed and the Agentic-Framework code promoted to the canonical top-level src/backend layout.
Foundry IQ Knowledge Bases — grounded RAG wired end-to-end and surfaced to agents as MCP search tools.
Content Pack system + new Content Generation scenario (content_gen).
Per-domain MCP filtering — agents connect to domain-scoped MCP endpoints and only see their own tools.

Reorganized into three deployment flavors: avm (Azure Verified Modules baseline, default via azd), avm-waf (WAF-aligned hardened variant — private networking / restricted public access, main.waf.parameters.json), and bicep (plain-Bicep flavor in infra/bicep).
Old flat infra/modules/* (ai-project, ai-services-deployments, aifp-connections, web-sites*) removed, replaced by the per-flavor module trees.
Scripts split into infra/scripts/pre-provision/ (quota/param validation) and infra/scripts/post-provision/ (config, indexing, KB/vector-store seeding, image build/push). Bicep refactor: Key Vault removed, circular deps fixed, linter clean-up, KB/search RBAC added, Search on AAD auth.

ACR is now provisioned as part of every deployment (no shared/external registry dependency).
build_and_push_images.sh / Build-And-Push-Images.ps1 build the backend (macaebackend), frontend (macaefrontend) and MCP (macaemcp) images (az acr build remote, or local Docker) and push them into the newly deployed ACR.
The script then rolls out new revisions: az containerapp update for the backend and MCP Container Apps, and az webapp config container set for the frontend App Service.
WAF-aware: temporarily relaxes ACR network restrictions during build (RG Type=WAF tag) and restores Deny / private / no-exports on exit. Image tags bumped v4 → v5; workflows use vars for ACR name. See docs/ACRBuildAndPushGuide.md.

New two-step interactive azd post-deploy hook (azure.yaml):
1. build_and_push_images.sh / .ps1 — build & push images to ACR and update app revisions.
2. post_deploy.sh / .ps1 — upload team configurations, index sample data, and create Knowledge Bases from content packs.
Fails fast on step errors; handles public-access-disabled Storage/Search/Foundry; runtime patch for stale KB toolbox connections. See docs/AVMPostDeploymentGuide.md.

Main: gpt-4.1-mini → gpt-5.4-mini (API 2026-03-17). Larger: gpt-4.1 → gpt-5.4 (API 2026-03-05).
New gpt-image-1.5 image model. Region allow-list re-validated for GPT-5.4; quota presets (gpt-5.4, 150 / gpt-5.4-mini, 100 / gpt-image-1.5, ~5) and capacity (main → 50k) tuned; deployment_name updated to gpt-5.4-mini across team configs.

Implemented Azure AI Foundry Knowledge Base support by provisioning idempotent AI Search knowledge bases, creating MCP connections with Project Managed Identity, enabling agent-level KB integration, and configuring the required RBAC permissions.

Introduced a modular content_packs framework with configurable datasets, agent teams, scripts, sample packs, comprehensive authoring guidance, and support for knowledge bases, file search, toolboxes, coding tools, and user responses.

content_gen pack: Triage → Planning → Research → TextContent → ImageContent → Compliance.
Grounded via macae-content-gen-products-index + content-gen-dataset blob container. Generated images routed through the backend proxy for browser rendering; final-message image rendering added to the UI.

Enhanced MCP integration by exposing domain-specific FastMCP endpoints with centralized routing and user-response support, while enforcing domain-aware tool filtering and client-side safety controls to prevent cross-pack tool access.

New ProcessingStatusIndicator and TimeoutDialog components, jsonFormatter util, final-message image rendering, and package_frontend scripts / .acrignore.