fix: E2E bug fixes — PS 7.3+ jq quoting, deploy parity, recipe fixes

sreagent-templates/.gitignore

@@ -18,3 +18,4 @@ connectors.secrets.env
 # Assembled output (temp files)
 .parameters.json
 .extras.json
+azmon-may15-clone-export.WSlXik/

sreagent-templates/CONTRIBUTING.md

@@ -1,4 +1,4 @@
-# Contributing to Azure SRE Agent Recipes
+# Contributing to Awesome Azure SRE Agent Recipes
 
 Thank you for your interest in contributing! We welcome new recipes, improvements to existing ones, and bug fixes.
 

sreagent-templates/README.md

@@ -1,27 +1,51 @@
-# Azure SRE Agent Recipes
+# Awesome Azure SRE Agent Recipes
 
 Production-ready recipes to deploy SRE Agents as code. Pick a recipe, run two commands, deploy.
 
 ## Prerequisites
 
 [Azure Cloud Shell](https://shell.azure.com) has everything pre-installed — no setup needed.
 
-For local use:
+For local use, run the install script to check and install all required tools:
+
+```bash
+# macOS / Linux
+./bin/install-prerequisites.sh
+
+# Windows (PowerShell 7+)
+.\bin\ps\Install-Prerequisites.ps1
+```
+
+To include optional tools (Terraform, azd):
+```bash
+./bin/install-prerequisites.sh --all          # everything
+./bin/install-prerequisites.sh --terraform    # just Terraform
+./bin/install-prerequisites.sh --check        # check only, no install
+```
+
+<details>
+<summary>Manual install (if you prefer)</summary>
 
 | Tool | Install |
 |---|---|
 | Azure CLI (`az`) | `brew install azure-cli` or [install guide](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli) |
-| `jq` | `brew install jq` / `apt install jq` / `choco install jq` |
+| `jq` | `brew install jq` / `apt install jq` / `winget install jqlang.jq` |
 | Python 3 + PyYAML | `brew install python3 && pip3 install pyyaml` |
 | `curl` | Pre-installed on macOS/Linux |
-| `bash` 3.2+ | Pre-installed on macOS/Linux. Windows: use WSL or Git Bash |
+| Terraform (optional) | `brew install hashicorp/tap/terraform` or [install guide](https://developer.hashicorp.com/terraform/install) |
+| azd (optional) | `brew install azd` or [install guide](https://learn.microsoft.com/en-us/azure/developer/azure-developer-cli/install-azd) |
+
+</details>
 
 ## Quick Start
 
 ```bash
 git clone https://github.com/microsoft/sre-agent.git
 cd sre-agent/sreagent-templates
 
+# Step 0: Install prerequisites (skips already-installed tools)
+./bin/install-prerequisites.sh
+
 # Create agent config from a recipe
 ./bin/new-agent.sh --recipe azmon-lawappinsights --non-interactive \
   --set agentName=my-agent \
@@ -43,6 +67,7 @@ cd sre-agent/sreagent-templates
 | [azmon-lawappinsights](recipes/azmon-lawappinsights/) | Azure Monitor | Alert response with AppInsights + Log Analytics, skills, subagents, scheduled tasks |
 | [pagerduty-law-vmcosmos](recipes/pagerduty-law-vmcosmos/) | PagerDuty | VM + CosmosDB + HTTP error investigation with knowledge files and skills |
 | [dynatrace-mcp](recipes/dynatrace-mcp/) | Dynatrace | Dynatrace MCP connector for investigating application errors |
+| [minimal](recipes/minimal/) | (none) | Minimal agent — just infra + RBAC, add your own connectors and skills |
 
 Each recipe README has the full parameter list, example values, and post-deploy steps.
 
@@ -63,6 +88,21 @@ Each recipe README has the full parameter list, example values, and post-deploy
 | `diff-agent.sh $SUB $RG $AGENT dir/` | Compare config vs live agent |
 | `verify-agent.sh $SUB $RG $AGENT --expected dir/` | 22-point verification |
 
+## What Gets Deployed
+
+Every recipe deploys these resources (regardless of backend):
+
+| Resource | Description |
+|---|---|
+| Resource Group | Container for all agent resources |
+| User-Assigned Managed Identity (UAMI) | Agent's identity for RBAC |
+| Log Analytics Workspace | Agent telemetry (created unless you supply one) |
+| Application Insights | Agent monitoring (created unless you supply one) |
+| SRE Agent | The agent itself |
+| Connectors | Data sources (App Insights, LAW, PagerDuty, Dynatrace, etc.) |
+| Skills, Subagents, Tools, Common Prompts | Agent capabilities from the recipe |
+| RBAC role assignments | Reader, Log Analytics Reader, Monitoring Reader on target RGs |
+
 ## Deploy Backends
 
 The same config directory works with any backend:
@@ -128,17 +168,6 @@ Each agent gets its own Terraform workspace — deploy multiple agents from the
 | azapi provider | Auto-installed on `terraform init` |
 | azurerm provider | Auto-installed on `terraform init` |
 
-### What It Creates
-
-| Resource | Provider |
-|---|---|
-| Resource Group, UAMI, LAW, App Insights | azurerm |
-| SRE Agent | azapi |
-| Connectors, Skills, Subagents, Tools, Common Prompts | azapi |
-| RBAC (Reader, Log Analytics Reader, Monitoring Reader, SRE Agent Admin) | azurerm |
-
-> **Region note**: Use `swedencentral` for fastest provisioning.
-
 ## Azure Developer CLI (azd)
 
 Wraps the Bicep flow in `azd up`. Set environment variables, run one command.

sreagent-templates/azure.yaml

@@ -3,6 +3,10 @@ name: sreagent-recipes
 metadata:
   template: sreagent-recipes@0.0.1
 
+infra:
+  provider: bicep
+  path: ./infra
+
 # azd hooks handle the full lifecycle. No built-in infra provider needed.
 # `azd up` = new-agent + assemble + Bicep deploy + apply-extras
 # `azd down` = delete resource group