Normalize connection auth AgenticIdentity to ARM-required AgenticIdentityToken

[Copilot]

agent.yaml allowed AgenticIdentity, but ARM connection provisioning only accepts AgenticIdentityToken, creating a validation/provisioning dead end. This change makes both values accepted in config while ensuring generated provisioning config uses the ARM-compatible value.

• Schema compatibility

  • Added AgenticIdentityToken to schemas/azure.ai.agent.json authType enum.
  • Updated the audience field description to include AgenticIdentityToken.

• Provisioning normalization

  • Added NormalizeConnectionAuthType in agent_yaml to canonicalize legacy AgenticIdentity to AgenticIdentityToken.
  • Applied normalization when extracting:
    • connection resources from manifest
    • toolbox-derived external tool connections
    • credentials.type fallback when authType is omitted

• Backward compatibility intent

  • Kept AgenticIdentity accepted as input for existing manifests.
  • Emitted AgenticIdentityToken for management-plane connection creation paths.

func NormalizeConnectionAuthType(authType AuthType) AuthType {
	if authType == AuthTypeAgenticIdentity {
		return AuthTypeAgenticIdentityToken
	}
	return authType
}

[github-actions]

📋 Prioritization Note

Thanks for the contribution! The linked issue isn't in the current milestone yet.
Review may take a bit longer — reach out to @rajeshkamal5050 or @kristenwomack if you'd like to discuss prioritization.

[Copilot]

Pull request overview

This PR addresses a compatibility gap where agent.yaml allowed AgenticIdentity, but ARM connection provisioning requires AgenticIdentityToken, by accepting both inputs while normalizing emitted/provisioned connection auth types to the ARM-compatible value.

Changes:

• Extended the JSON schema authType enum and audience description to include AgenticIdentityToken.
• Added NormalizeConnectionAuthType to canonicalize legacy AgenticIdentity → AgenticIdentityToken.
• Applied auth-type normalization when extracting toolbox-derived tool connections and manifest connection resources, with accompanying unit tests.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
cli/azd/extensions/azure.ai.agents/schemas/azure.ai.agent.json	Adds AgenticIdentityToken to the Connection.authType enum and updates audience description.
cli/azd/extensions/azure.ai.agents/internal/pkg/agents/agent_yaml/yaml.go	Introduces AuthTypeAgenticIdentityToken and normalization helper for provisioning compatibility.
cli/azd/extensions/azure.ai.agents/internal/pkg/agents/agent_yaml/yaml_test.go	Adds unit test coverage for NormalizeConnectionAuthType.
cli/azd/extensions/azure.ai.agents/internal/pkg/agents/agent_yaml/parse_test.go	Extends auth-type coverage test cases to include AgenticIdentityToken.
cli/azd/extensions/azure.ai.agents/internal/cmd/init.go	Normalizes auth types when extracting toolbox tool connections and connection resources.
cli/azd/extensions/azure.ai.agents/internal/cmd/init_test.go	Adds tests asserting auth-type normalization during extraction.

[trangevi]

/check-enforcer override