@blogic-cz/agent-tools 0.18.1 → 1.1.0

package/README.md

@@ -1,6 +1,6 @@
 # @blogic-cz/agent-tools
 
-Safe CLI wrappers for AI coding agents. 8 tools for GitHub, observability, databases, Kubernetes, Azure DevOps, logs, OpenCode sessions, and audit history — with JSON5 config and a credential guard that blocks agents from touching secrets.
+Safe CLI wrappers for AI coding agents. 9 tools for GitHub, observability, databases, Kubernetes, Azure platform, Azure DevOps, logs, OpenCode sessions, and audit history — with JSON5 config and a credential guard that blocks agents from touching secrets.
 
 ## Why
 
@@ -42,6 +42,7 @@ npx skills add blogic-cz/agent-tools --path skills/observability-tool
 npx skills add blogic-cz/agent-tools --path skills/db-tool
 npx skills add blogic-cz/agent-tools --path skills/k8s-tool
 npx skills add blogic-cz/agent-tools --path skills/az-tool
+npx skills add blogic-cz/agent-tools --path skills/azdo-tool
 npx skills add blogic-cz/agent-tools --path skills/logs-tool
 npx skills add blogic-cz/agent-tools --path skills/session-tool
 ```
@@ -109,6 +110,7 @@ npx skills add blogic-cz/agent-tools --path skills/observability-tool
 npx skills add blogic-cz/agent-tools --path skills/db-tool
 npx skills add blogic-cz/agent-tools --path skills/k8s-tool
 npx skills add blogic-cz/agent-tools --path skills/az-tool
+npx skills add blogic-cz/agent-tools --path skills/azdo-tool
 npx skills add blogic-cz/agent-tools --path skills/logs-tool
 npx skills add blogic-cz/agent-tools --path skills/session-tool
 
@@ -126,7 +128,8 @@ Available per-tool skills:
 | `observability-tool` | Tempo traces, Loki logs, Prometheus metrics |
 | `db-tool`            | SQL queries, schema introspection           |
 | `k8s-tool`           | Kubernetes pods, logs, deployments          |
-| `az-tool`            | Azure DevOps pipelines, builds              |
+| `az-tool`            | Azure VMs, web apps, storage, AKS, ACR      |
+| `azdo-tool`          | Azure DevOps pipelines, builds              |
 | `logs-tool`          | Application log reading (local and remote)  |
 | `session-tool`       | OpenCode session history browsing           |
 | `agent-tools`        | All of the above in a single skill          |
@@ -254,7 +257,8 @@ export default { handleToolExecuteBefore };
 | `audit-tool`         | Audit trail browser — inspect recent tool invocations and purge old entries                                      |
 | `db-tool`            | Database query tool — SQL execution, schema introspection                                                        |
 | `k8s-tool`           | Kubernetes tool — kubectl wrapper + structured commands (`pods`, `logs`, `describe`, `exec`, `top`)              |
-| `az-tool`            | Azure DevOps tool — pipelines, builds, repos                                                                     |
+| `az-tool`            | Azure platform tool — read-only inspection of VMs, web apps, storage, AKS, ACR                                   |
+| `azdo-tool`          | Azure DevOps tool — pipelines, builds, repos                                                                     |
 | `logs-tool`          | Application logs — read local and remote (k8s pod) logs                                                          |
 | `session-tool`       | OpenCode session browser — list, read, search sessions                                                           |
 
@@ -266,6 +270,30 @@ All tools support `--help` for full usage documentation. Legacy `agent-tools-*`
 
 Pod `exec` is limited to direct `redis-cli PING/INFO` and `ls` diagnostics. Generic exec cannot read file contents; use `logs-tool`, which confines files to the configured log directory, tails them through an internal structured operation, and applies the same case-insensitive literal substring filter locally and remotely. Configured log directories are a trusted boundary and must not permit adversarial symlink replacement during reads.
 
+### Azure command safety
+
+Azure is split across two binaries. `azdo-tool` covers Azure DevOps (`pipelines`, `repos`, `devops invoke`); `az-tool` covers the Azure platform (`vm`, `webapp`, `storage`, `aks`, `acr`, `monitor`, …). Sending a DevOps group to `az-tool` fails with a pointer to `azdo-tool` rather than running.
+
+`az-tool` resolves the verb **positionally** — the last word before the first flag — so a flag value can never be read as a command. Only read-only verbs are allowed (`list`, `show`, `describe`, `exists`, `search`, `history`, `version`, `validate`, `wait`, plus the `list-`, `show-`, `check-`, and `get-` families); mutating verbs and unknown verbs are both rejected. Credential reads are blocked regardless of verb: the `get-access-token`/`get-credentials`/`list-keys`/`list-connection-strings`/`list-publishing-profiles` family, and any command whose group path contains `secret`, `secrets`, `key`, `keys`, `credential`, `credentials`, `appsettings`, `admin-key`, `query-key`, `sas`, `password`, or `connection-string` — for those the listing itself returns values (`storage account keys list`, `webapp config appsettings list`). Key Vault is narrower: `keyvault secret list`/`list-versions` return names and attributes and are allowed, `keyvault secret show` is not, and the `key`/`certificate` subgroups are allowed because they expose only public material. Shell syntax is rejected and commands are spawned as an argument vector, never through a shell.
+
+The subscription comes from the `azurePlatform` config profile and is appended to every command; a user-supplied `--subscription` is rejected, and with no `azurePlatform` section the tool refuses to run rather than falling back to whatever `az login` last selected. The set of configured profiles is therefore the allowlist of reachable subscriptions.
+
+Two optional scope guards sit on top. A profile keyed `prod`/`production`, or carrying `production: true`, cannot be reached through auto-selection or the `default` key — `--profile` must name it explicitly, mirroring `k8s-tool`'s refusal of implicit prod. And `allowedResourceGroups` rejects any command naming a group outside the list; an empty or absent list allows every group in the subscription. A group is recognised both from `-g`/`--resource-group` — every occurrence, since the Azure CLI is argparse-based and a repeated flag takes the last value — and from the `/resourceGroups/<name>` segment of a full ARM resource ID passed to a flag such as `--scope` or `--resource`. `--ids` is rejected outright because it carries its own subscription as well as its own resource group, side-stepping both guards. The resource-group check only fires when a command names a group, so subscription-wide reads such as `vm list` remain unrestricted — it guards against touching the wrong group, it does not partition the subscription.
+
+`azdo-tool` keeps its allowlist of read-only operations (`list`, `run`, `show`, `show-tags`) and rejects `create`/`delete`/`update`/`cancel`/`queue` anywhere in the command. `run` is accepted only in the `pipelines` group — `acr run` and `acr task run` execute arbitrary commands in Azure and are blocked. The `acr` and `account` groups remain reachable from `azdo-tool` for backwards compatibility; new work should use `az-tool` for them. Because those two groups address the Azure platform rather than Azure DevOps, the platform credential rules apply to them here as well — `acr credential show` is refused by both tools. The verb and segment lists behind that live in `src/shared/azure-credentials.ts` so the two tools cannot drift apart.
+
+### Gist commands
+
+```bash
+bun gh-tool gist list
+bun gh-tool gist view --id <gist-id>
+bun gh-tool gist create --body "snippet" --filename example.txt
+bun gh-tool gist edit --id <gist-id> --body "updated" --filename example.txt
+bun gh-tool gist delete --id <gist-id> --confirm
+```
+
+Gists are secret by default. `gist delete` prints a dry run unless `--confirm` is passed. `gist edit` requires a content or mutation flag and never opens an editor.
+
 ### gh-tool machine contracts
 
 `pr view` adds `headSha` and `baseSha`; failed-check evidence adds the same SHA pair. Review summaries, inline comments, and threads add `commitSha` plus `feedbackOrigin`: `current_head` only for an exact `commitSha === headSha`, `pre_existing` for a different known SHA (not an obsolescence verdict), and `unknown` when either SHA is absent. Issue comments always use `commitSha: null` and `feedbackOrigin: unknown`. `review-triage` preserves existing fields and adds `inlineComments` plus per-kind `feedbackOriginCounts`; batch triage returns the same object per PR. `pr request-review --reviewers alice,bob` emits sorted `submittedReviewers` (normalized input), `newlyRequested` and `alreadyPending` (the submitted logins split by whether a pending request already existed, so a fresh re-request is distinguishable from a no-op), and `requestedReviewers` (GitHub-confirmed result). `pr last-human-reviewer` derives `currentRequestedReviewers` from live `reviewRequests` only; timeline events are not replayed because GitHub clears a pending request on review submit without emitting `ReviewRequestRemovedEvent`.
@@ -403,8 +431,8 @@ Each tool section supports multiple named profiles. Select with `--profile <name
 ```
 
 ```bash
-bun az-tool cmd --cmd "pipelines list"                    # uses "default" profile
-bun az-tool cmd --cmd "pipelines list" --profile legacy   # uses "legacy" profile
+bun azdo-tool cmd --cmd "pipelines list"                    # uses "default" profile
+bun azdo-tool cmd --cmd "pipelines list" --profile legacy   # uses "legacy" profile
 ```
 
 **Profile resolution:** `--profile` flag > auto-select (single profile) > `"default"` key > error.
@@ -422,7 +450,8 @@ Each tool uses its own auth method — no unified token store:
 | `gh-tool`            | `gh` CLI session (`gh auth login`) or `GITHUB_TOKEN` env var                                 |
 | `observability-tool` | Grafana URL from config plus optional token from `tokenEnvVar`                               |
 | `k8s-tool`           | Existing kubectl context (kubeconfig). Cluster ID from config resolves context automatically |
-| `az-tool`            | `az` CLI session (`az login`)                                                                |
+| `az-tool`            | `az` CLI session (`az login`). Subscription pinned by the `azurePlatform` config profile     |
+| `azdo-tool`          | `az` CLI session (`az login`)                                                                |
 | `db-tool`            | Password from env var defined by `passwordEnvVar` in config (e.g. `AGENT_TOOLS_DB_PASSWORD`) |
 | `logs-tool`          | No auth — reads local files or uses k8s-tool for remote access                               |
 

package/dist/az-tool/config.d.ts

@@ -1,13 +1,61 @@
-export declare const ALLOWED_SUBCOMMANDS: readonly ["list", "run", "show", "show-tags"];
-export declare const BLOCKED_SUBCOMMANDS: readonly ["create", "delete", "update", "cancel", "queue"];
-export declare const DIRECT_AZ_COMMANDS: readonly ["pipelines", "repos"];
-export declare const STANDALONE_AZ_COMMANDS: readonly ["acr", "account"];
-export declare const ALLOWED_INVOKE_AREAS: readonly ["build"];
-export declare const ALLOWED_INVOKE_RESOURCES: Record<string, readonly string[]>;
-export declare const BLOCKED_INVOKE_AREAS: readonly ["git", "policy", "security", "wiki", "work", "graph", "audit", "permissions"];
-export declare const BLOCKED_INVOKE_RESOURCES: Record<string, readonly string[]>;
-export type AllowedSubcommand = (typeof ALLOWED_SUBCOMMANDS)[number];
-export type BlockedSubcommand = (typeof BLOCKED_SUBCOMMANDS)[number];
-export type AllowedInvokeArea = (typeof ALLOWED_INVOKE_AREAS)[number];
-export type BlockedInvokeArea = (typeof BLOCKED_INVOKE_AREAS)[number];
+/** Command groups owned by azdo-tool. Routed there with a hint instead of being run here. */
+export declare const AZURE_DEVOPS_GROUPS: readonly ["devops", "pipelines", "repos", "boards", "artifacts"];
+/** Verbs that only read state, matched exactly against the command verb. */
+export declare const READ_ONLY_VERBS: readonly ["list", "show", "describe", "exists", "search", "history", "version", "validate", "wait"];
+/** Verb families that only read state, matched as a prefix of the command verb. */
+export declare const READ_ONLY_VERB_PREFIXES: readonly ["list-", "show-", "check-", "get-"];
+/**
+ * Mutating verbs. Unknown verbs are rejected anyway; this list exists so the
+ * common cases get "'delete' is a mutating operation" instead of "unknown verb".
+ */
+export declare const BLOCKED_VERBS: readonly ["add", "apply", "approve", "assign", "attach", "browse", "cancel", "clear", "connect", "create", "delete", "deploy", "destroy", "detach", "disable", "down", "download", "enable", "execute", "failover", "generate", "grant", "import", "init", "install", "invoke", "login", "logout", "move", "patch", "publish", "prune", "purge", "regenerate", "reject", "remove", "renew", "repair", "replace", "reset", "restart", "restore", "revoke", "rotate", "run", "scale", "set", "ssh", "start", "stop", "swap", "sync", "tunnel", "unassign", "uninstall", "untag", "up", "update", "upgrade", "upload"];
+/**
+ * Credential-bearing verbs and group segments live in `#shared` because
+ * azdo-tool's `acr`/`account` passthrough must refuse exactly the same
+ * commands. Re-exported here so this file stays the single place az-tool's
+ * security config is read from.
+ *
+ * Segment matching keeps neighbouring groups reachable: `keyvault list` works
+ * because the blocked segment is `secret`, not `keyvault`. Key Vault gets a
+ * further carve-out below.
+ */
+export { CREDENTIAL_BLOCKED_SEGMENTS, CREDENTIAL_BLOCKED_VERBS } from "#shared/azure-credentials";
+/** The Key Vault command group, which needs finer treatment than segment matching. */
+export declare const KEYVAULT_GROUP = "keyvault";
+/**
+ * Key Vault subgroups that expose public material only — a key's public JWK, a
+ * certificate's public half. The private halves live under `secret`, which
+ * stays gated. Without this, segment matching on `key` would block the whole
+ * `az keyvault key` surface for no gain.
+ */
+export declare const KEYVAULT_PUBLIC_SUBGROUPS: readonly ["key", "certificate"];
+/**
+ * Key Vault subgroups where listing is metadata-only but `show` returns the
+ * value. `az keyvault secret list` yields ids, attributes, and tags — no
+ * secret material — so the list family is allowed and `show` is not.
+ */
+export declare const KEYVAULT_NAME_ONLY_SUBGROUPS: readonly ["secret", "secrets"];
+/**
+ * Flags controlled by the selected profile. A user override would defeat the
+ * configured subscription pin, so they are rejected rather than forwarded.
+ */
+export declare const CONTROLLED_FLAGS: readonly ["--subscription"];
+/**
+ * Alternate addressing modes rejected outright. `--ids` takes a full ARM
+ * resource ID that carries its own subscription and resource group, so it
+ * side-steps both the subscription pin and the resource group allowlist.
+ * `-g` plus `--name` expresses the same target inside the guarded scope.
+ */
+export declare const REJECTED_ADDRESSING_FLAGS: readonly ["--ids"];
+/** Flags naming the resource group a command addresses. */
+export declare const RESOURCE_GROUP_FLAGS: readonly ["-g", "--resource-group"];
+/**
+ * The resource group segment of an ARM resource ID. Flags such as `--scope`
+ * and `--resource` take a full ID, naming a resource group without ever using
+ * -g, so IDs are mined for group names too.
+ */
+export declare const RESOURCE_GROUP_IN_ID_PATTERN: RegExp;
+export type ReadOnlyVerb = (typeof READ_ONLY_VERBS)[number];
+export type BlockedVerb = (typeof BLOCKED_VERBS)[number];
+export type AzureDevOpsGroup = (typeof AZURE_DEVOPS_GROUPS)[number];
 //# sourceMappingURL=config.d.ts.map

package/dist/az-tool/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/az-tool/config.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,+CAAgD,CAAC;AAEjF,eAAO,MAAM,mBAAmB,4DAA6D,CAAC;AAE9F,eAAO,MAAM,kBAAkB,iCAAkC,CAAC;AAElE,eAAO,MAAM,sBAAsB,6BAA8B,CAAC;AAElE,eAAO,MAAM,oBAAoB,oBAAqB,CAAC;AAEvD,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAE7D,CAAC;AAEX,eAAO,MAAM,oBAAoB,yFASvB,CAAC;AAEX,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAE7D,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/az-tool/config.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,eAAO,MAAM,mBAAmB,kEAAmE,CAAC;AAEpG,4EAA4E;AAC5E,eAAO,MAAM,eAAe,qGAUlB,CAAC;AAEX,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,+CAAgD,CAAC;AAErF;;;GAGG;AACH,eAAO,MAAM,aAAa,qlBA6DhB,CAAC;AAEX;;;;;;;;;GASG;AACH,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAElG,sFAAsF;AACtF,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,iCAAkC,CAAC;AAEzE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,gCAAiC,CAAC;AAE3E;;;GAGG;AACH,eAAO,MAAM,gBAAgB,6BAA8B,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,oBAAqB,CAAC;AAE5D,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,qCAAsC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,QAAkC,CAAC;AAE5E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5D,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/az-tool/errors.d.ts

@@ -29,6 +29,15 @@ declare const AzTimeoutError_base: Schema.Class<AzTimeoutError, Schema.TaggedStr
 }>, import("effect/Cause").YieldableError>;
 export declare class AzTimeoutError extends AzTimeoutError_base {
 }
+declare const AzProfileError_base: Schema.Class<AzProfileError, Schema.TaggedStruct<"AzProfileError", {
+    readonly message: Schema.String;
+    readonly profile: Schema.String;
+    readonly hint: Schema.optionalKey<Schema.String>;
+    readonly nextCommand: Schema.optionalKey<Schema.String>;
+    readonly retryable: Schema.optionalKey<Schema.Boolean>;
+}>, import("effect/Cause").YieldableError>;
+export declare class AzProfileError extends AzProfileError_base {
+}
 declare const AzParseError_base: Schema.Class<AzParseError, Schema.TaggedStruct<"AzParseError", {
     readonly message: Schema.String;
     readonly rawOutput: Schema.String;
@@ -38,6 +47,6 @@ declare const AzParseError_base: Schema.Class<AzParseError, Schema.TaggedStruct<
 }>, import("effect/Cause").YieldableError>;
 export declare class AzParseError extends AzParseError_base {
 }
-export type AzError = AzSecurityError | AzCommandError | AzTimeoutError | AzParseError;
+export type AzError = AzSecurityError | AzCommandError | AzTimeoutError | AzParseError | AzProfileError;
 export {};
 //# sourceMappingURL=errors.d.ts.map

package/dist/az-tool/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/az-tool/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;;;;;AAEhC,qBAAa,eAAgB,SAAQ,oBAMnC;CAAG;;;;;;;;;;AAEL,qBAAa,cAAe,SAAQ,mBAQlC;CAAG;;;;;;;;;AAEL,qBAAa,cAAe,SAAQ,mBAOlC;CAAG;;;;;;;;AAEL,qBAAa,YAAa,SAAQ,iBAMhC;CAAG;AAEL,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,YAAY,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/az-tool/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;;;;;AAEhC,qBAAa,eAAgB,SAAQ,oBAMnC;CAAG;;;;;;;;;;AAEL,qBAAa,cAAe,SAAQ,mBAQlC;CAAG;;;;;;;;;AAEL,qBAAa,cAAe,SAAQ,mBAOlC;CAAG;;;;;;;;AAEL,qBAAa,cAAe,SAAQ,mBAMlC;CAAG;;;;;;;;AAEL,qBAAa,YAAa,SAAQ,iBAMhC;CAAG;AAEL,MAAM,MAAM,OAAO,GACf,eAAe,GACf,cAAc,GACd,cAAc,GACd,YAAY,GACZ,cAAc,CAAC"}

package/dist/az-tool/profile.d.ts

@@ -0,0 +1,16 @@
+import type { AzurePlatformConfig } from "#config/types";
+/** Profile keys treated as production unless the profile says otherwise. */
+export declare const PRODUCTION_PROFILE_NAMES: readonly ["prod", "production"];
+/**
+ * The profile key getToolConfig will resolve to, so callers can reason about
+ * which subscription they are about to touch. Mirrors getToolConfig's rules:
+ * explicit name wins, then a lone profile, then the "default" key.
+ */
+export declare function selectAzProfileName(section: Record<string, unknown> | undefined, explicitProfile: string | undefined): string | undefined;
+/**
+ * Production profiles require --profile to be named explicitly. An explicit
+ * `production` flag wins; otherwise the profile key carries the convention, so
+ * a profile keyed "prod" is guarded without extra configuration.
+ */
+export declare function isProductionProfile(profileName: string | undefined, config: AzurePlatformConfig): boolean;
+//# sourceMappingURL=profile.d.ts.map

package/dist/az-tool/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/az-tool/profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEzD,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,iCAAkC,CAAC;AAExE;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC5C,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,MAAM,GAAG,SAAS,CAepB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAST"}

package/dist/az-tool/security.d.ts

@@ -1,4 +1,21 @@
-import type { InvokeParams, SecurityCheckResult } from "./types";
-export declare function isCommandAllowed(cmd: string): SecurityCheckResult;
-export declare function isInvokeAllowed(params: InvokeParams): SecurityCheckResult;
+import type { AzSecurityCheckOptions, AzSecurityCheckResult } from "./types";
+/**
+ * Tokenize an az command line into argv. Returns undefined for anything
+ * carrying shell syntax, so a command can never expand, chain, or redirect.
+ * Quoted regions keep their contents verbatim, which leaves `--query
+ * "[?name=='web']"` usable.
+ */
+export declare function parseAzCommand(cmd: string): string[] | undefined;
+export declare function isReadOnlyVerb(verb: string): boolean;
+/**
+ * Every resource group a command names via -g / --resource-group, in either the
+ * spaced or the `=` form. Empty when the command names none, which for
+ * subscription-wide reads like `vm list` is the normal case.
+ *
+ * All occurrences are collected, not just the first: the Azure CLI is argparse
+ * based, so a repeated flag silently takes the LAST value. Validating only the
+ * first would let `-g allowed -g denied` through while az ran against `denied`.
+ */
+export declare function extractResourceGroups(argv: readonly string[]): string[];
+export declare function isAzCommandAllowed(cmd: string, options?: AzSecurityCheckOptions): AzSecurityCheckResult;
 //# sourceMappingURL=security.d.ts.map

package/dist/az-tool/security.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/az-tool/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAYjE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAiFjE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAkCzE"}
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/az-tool/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAkB7E;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAqChE;AAgBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGpD;AAOD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAgCvE;AAqCD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,sBAAsB,GAC/B,qBAAqB,CAwHvB"}

package/dist/az-tool/service.d.ts

@@ -1,11 +1,16 @@
 import { ChildProcessSpawner } from "effect/unstable/process";
 import { Context, Effect, Layer } from "effect";
-import type { InvokeParams } from "./types";
-import { AzSecurityError, AzCommandError, AzTimeoutError, AzParseError } from "./errors";
+import type { AzParseError } from "./errors";
+import { AzCommandError, AzProfileError, AzSecurityError, AzTimeoutError } from "./errors";
 import { ConfigService } from "#config";
+export type AzCommandResult = {
+    readonly command: string;
+    readonly subscription: string | undefined;
+    readonly data: unknown;
+};
 declare const AzService_base: Context.ServiceClass<AzService, "@agent-tools/AzService", {
-    readonly runCommand: (cmd: string, project?: string) => Effect.Effect<string, AzSecurityError | AzCommandError | AzTimeoutError | AzParseError>;
-    readonly runInvoke: (params: InvokeParams) => Effect.Effect<unknown, AzSecurityError | AzCommandError | AzTimeoutError | AzParseError>;
+    readonly runCommand: (cmd: string, profile?: string) => Effect.Effect<AzCommandResult, AzSecurityError | AzCommandError | AzTimeoutError | AzParseError | AzProfileError>;
+    readonly renderCommand: (cmd: string, profile?: string) => Effect.Effect<string, AzSecurityError | AzCommandError | AzProfileError>;
 }>;
 export declare class AzService extends AzService_base {
     static readonly layer: Layer.Layer<AzService, never, ConfigService | ChildProcessSpawner.ChildProcessSpawner>;

package/dist/az-tool/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/az-tool/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAkB,MAAM,QAAQ,CAAC;AAEhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI5C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGzF,OAAO,EAAE,aAAa,EAAiB,MAAM,SAAS,CAAC;;yBAM9B,CACnB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,YAAY,CAAC;wBACxE,CAClB,MAAM,EAAE,YAAY,KACjB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,YAAY,CAAC;;AATjG,qBAAa,SAAU,SAAQ,cAWF;IAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,yFAmNnB;CACH;AAED,eAAO,MAAM,cAAc,wFAAkB,CAAC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/az-tool/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAkB,MAAM,QAAQ,CAAC;AAIhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG3F,OAAO,EAAE,aAAa,EAAiB,MAAM,SAAS,CAAC;AASvD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,CAAC;;yBAKuB,CACnB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAChB,eAAe,EACf,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,YAAY,GAAG,cAAc,CAClF;4BACuB,CACtB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc,GAAG,cAAc,CAAC;;AAbjF,qBAAa,SAAU,SAAQ,cAeF;IAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,yFAsKnB;CACH;AAED,eAAO,MAAM,cAAc,wFAAkB,CAAC"}

package/dist/az-tool/types.d.ts

@@ -1,64 +1,14 @@
-export type SecurityCheckResult = {
+export type AzSecurityCheckOptions = {
+    /** Empty or absent allows every resource group in the subscription. */
+    allowedResourceGroups?: readonly string[];
+};
+export type AzSecurityCheckResult = {
     allowed: boolean;
-    command?: string;
+    command: string;
+    argv?: string[];
+    verb?: string;
+    resourceGroup?: string;
     reason?: string;
-};
-export type InvokeParams = {
-    area: string;
-    resource: string;
-    project?: string;
-    routeParameters?: Record<string, string | number>;
-    queryParameters?: Record<string, string | number>;
-};
-export type BuildJob = {
-    id: string;
-    parentId?: string | null;
-    type: "Job" | "Stage" | "Task" | "Phase" | "Checkpoint";
-    name: string;
-    state: "pending" | "inProgress" | "completed";
-    result?: "succeeded" | "failed" | "canceled" | "skipped" | null;
-    startTime?: string | null;
-    finishTime?: string | null;
-    errorCount?: number | null;
-    warningCount?: number | null;
-    log?: {
-        id: number;
-        url: string;
-    } | null;
-};
-export type BuildTimeline = {
-    records: BuildJob[];
-    id: string;
-    changeId: number;
-    lastChangedBy: string;
-    lastChangedOn: string;
-    url: string;
-};
-export type BuildLog = {
-    id: number;
-    type: string;
-    url: string;
-    lineCount?: number;
-};
-export type BuildLogs = {
-    count: number;
-    value: BuildLog[];
-};
-export type JobSummary = {
-    name: string;
-    state: string;
-    result?: string;
-    stage?: string;
-    duration?: string;
-    logId?: number;
-};
-export type PipelineRun = {
-    id: number;
-    buildNumber: string;
-    status: string;
-    result?: string;
-    sourceBranch: string;
-    startTime?: string;
-    finishTime?: string;
+    hint?: string;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/az-tool/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/az-tool/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,WAAW,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/az-tool/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,sBAAsB,GAAG;IACnC,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/{az-tool → azdo-tool}/build.d.ts

@@ -1,30 +1,30 @@
 import { Effect } from "effect";
 import type { BuildJob, BuildLogs, BuildTimeline, JobSummary, PipelineRun } from "./types";
-import { AzParseError } from "./errors";
-import { AzService } from "./service";
+import { AzdoParseError } from "./errors";
+import { AzdoService } from "./service";
 /**
  * Get build timeline with all records (jobs, stages, tasks, etc.)
  */
-export declare const getBuildTimeline: (buildId: number) => Effect.Effect<BuildTimeline, import("./errors").AzSecurityError | import("./errors").AzCommandError | import("./errors").AzTimeoutError | AzParseError, AzService>;
+export declare const getBuildTimeline: (buildId: number) => Effect.Effect<BuildTimeline, import("./errors").AzdoSecurityError | import("./errors").AzdoCommandError | import("./errors").AzdoTimeoutError | AzdoParseError, AzdoService>;
 /**
  * Get jobs and stages from build timeline
  */
 export declare const getBuildJobs: (buildId: number) => Effect.Effect<{
     jobs: BuildJob[];
     stages: BuildJob[];
-}, import("./errors").AzSecurityError | import("./errors").AzCommandError | import("./errors").AzTimeoutError | AzParseError, AzService>;
+}, import("./errors").AzdoSecurityError | import("./errors").AzdoCommandError | import("./errors").AzdoTimeoutError | AzdoParseError, AzdoService>;
 /**
  * Get list of build logs
  */
-export declare const getBuildLogs: (buildId: number) => Effect.Effect<BuildLogs, import("./errors").AzSecurityError | import("./errors").AzCommandError | import("./errors").AzTimeoutError | AzParseError, AzService>;
+export declare const getBuildLogs: (buildId: number) => Effect.Effect<BuildLogs, import("./errors").AzdoSecurityError | import("./errors").AzdoCommandError | import("./errors").AzdoTimeoutError | AzdoParseError, AzdoService>;
 /**
  * Get specific log content by log ID
  */
-export declare const getBuildLogContent: (buildId: number, logId: number) => Effect.Effect<string, import("./errors").AzSecurityError | import("./errors").AzCommandError | import("./errors").AzTimeoutError | AzParseError, AzService>;
+export declare const getBuildLogContent: (buildId: number, logId: number) => Effect.Effect<string, import("./errors").AzdoSecurityError | import("./errors").AzdoCommandError | import("./errors").AzdoTimeoutError | AzdoParseError, AzdoService>;
 /**
  * Get job summaries with duration and status information
  */
-export declare const getBuildJobSummary: (buildId: number) => Effect.Effect<JobSummary[], import("./errors").AzSecurityError | import("./errors").AzCommandError | import("./errors").AzTimeoutError | AzParseError, AzService>;
+export declare const getBuildJobSummary: (buildId: number) => Effect.Effect<JobSummary[], import("./errors").AzdoSecurityError | import("./errors").AzdoCommandError | import("./errors").AzdoTimeoutError | AzdoParseError, AzdoService>;
 /**
  * Find failed or canceled jobs in a build
  */
@@ -35,7 +35,7 @@ export declare const findFailedJobs: (buildId: number) => Effect.Effect<{
     errorCount: number;
     warningCount: number;
     logId: number | undefined;
-}[], import("./errors").AzSecurityError | import("./errors").AzCommandError | import("./errors").AzTimeoutError | AzParseError, AzService>;
+}[], import("./errors").AzdoSecurityError | import("./errors").AzdoCommandError | import("./errors").AzdoTimeoutError | AzdoParseError, AzdoService>;
 /**
  * List pipeline runs with optional filters
  */
@@ -43,5 +43,5 @@ export declare const listPipelineRuns: (options?: {
     branch?: string;
     pipelineId?: number;
     top?: number;
-} | undefined) => Effect.Effect<PipelineRun[], import("./errors").AzSecurityError | import("./errors").AzCommandError | import("./errors").AzTimeoutError | AzParseError, AzService>;
+} | undefined) => Effect.Effect<PipelineRun[], import("./errors").AzdoSecurityError | import("./errors").AzdoCommandError | import("./errors").AzdoTimeoutError | AzdoParseError, AzdoService>;
 //# sourceMappingURL=build.d.ts.map

package/dist/azdo-tool/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3F,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC;;GAEG;AACH,eAAO,MAAM,gBAAgB,mMAuD3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY;UAOP,QAAQ,EAAE;YACN,QAAQ,EAAE;kJAE9B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY,+LAkCvB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB,2MAwC7B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB,kMAgC7B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;oJAazB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;aAClB,MAAM;iBACF,MAAM;UACb,MAAM;8LAwDZ,CAAC"}

package/dist/azdo-tool/config.d.ts

@@ -0,0 +1,13 @@
+export declare const ALLOWED_SUBCOMMANDS: readonly ["list", "run", "show", "show-tags"];
+export declare const BLOCKED_SUBCOMMANDS: readonly ["create", "delete", "update", "cancel", "queue"];
+export declare const DIRECT_AZ_COMMANDS: readonly ["pipelines", "repos"];
+export declare const STANDALONE_AZ_COMMANDS: readonly ["acr", "account"];
+export declare const ALLOWED_INVOKE_AREAS: readonly ["build"];
+export declare const ALLOWED_INVOKE_RESOURCES: Record<string, readonly string[]>;
+export declare const BLOCKED_INVOKE_AREAS: readonly ["git", "policy", "security", "wiki", "work", "graph", "audit", "permissions"];
+export declare const BLOCKED_INVOKE_RESOURCES: Record<string, readonly string[]>;
+export type AllowedSubcommand = (typeof ALLOWED_SUBCOMMANDS)[number];
+export type BlockedSubcommand = (typeof BLOCKED_SUBCOMMANDS)[number];
+export type AllowedInvokeArea = (typeof ALLOWED_INVOKE_AREAS)[number];
+export type BlockedInvokeArea = (typeof BLOCKED_INVOKE_AREAS)[number];
+//# sourceMappingURL=config.d.ts.map

package/dist/azdo-tool/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/config.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,+CAAgD,CAAC;AAEjF,eAAO,MAAM,mBAAmB,4DAA6D,CAAC;AAE9F,eAAO,MAAM,kBAAkB,iCAAkC,CAAC;AAElE,eAAO,MAAM,sBAAsB,6BAA8B,CAAC;AAElE,eAAO,MAAM,oBAAoB,oBAAqB,CAAC;AAEvD,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAE7D,CAAC;AAEX,eAAO,MAAM,oBAAoB,yFASvB,CAAC;AAEX,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAE7D,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/azdo-tool/errors.d.ts

@@ -0,0 +1,43 @@
+import { Schema } from "effect";
+declare const AzdoSecurityError_base: Schema.Class<AzdoSecurityError, Schema.TaggedStruct<"AzdoSecurityError", {
+    readonly message: Schema.String;
+    readonly command: Schema.String;
+    readonly hint: Schema.optionalKey<Schema.String>;
+    readonly nextCommand: Schema.optionalKey<Schema.String>;
+    readonly retryable: Schema.optionalKey<Schema.Boolean>;
+}>, import("effect/Cause").YieldableError>;
+export declare class AzdoSecurityError extends AzdoSecurityError_base {
+}
+declare const AzdoCommandError_base: Schema.Class<AzdoCommandError, Schema.TaggedStruct<"AzdoCommandError", {
+    readonly message: Schema.String;
+    readonly command: Schema.String;
+    readonly exitCode: Schema.optionalKey<Schema.Number>;
+    readonly stderr: Schema.optionalKey<Schema.String>;
+    readonly hint: Schema.optionalKey<Schema.String>;
+    readonly nextCommand: Schema.optionalKey<Schema.String>;
+    readonly retryable: Schema.optionalKey<Schema.Boolean>;
+}>, import("effect/Cause").YieldableError>;
+export declare class AzdoCommandError extends AzdoCommandError_base {
+}
+declare const AzdoTimeoutError_base: Schema.Class<AzdoTimeoutError, Schema.TaggedStruct<"AzdoTimeoutError", {
+    readonly message: Schema.String;
+    readonly command: Schema.String;
+    readonly timeoutMs: Schema.Number;
+    readonly hint: Schema.optionalKey<Schema.String>;
+    readonly nextCommand: Schema.optionalKey<Schema.String>;
+    readonly retryable: Schema.optionalKey<Schema.Boolean>;
+}>, import("effect/Cause").YieldableError>;
+export declare class AzdoTimeoutError extends AzdoTimeoutError_base {
+}
+declare const AzdoParseError_base: Schema.Class<AzdoParseError, Schema.TaggedStruct<"AzdoParseError", {
+    readonly message: Schema.String;
+    readonly rawOutput: Schema.String;
+    readonly hint: Schema.optionalKey<Schema.String>;
+    readonly nextCommand: Schema.optionalKey<Schema.String>;
+    readonly retryable: Schema.optionalKey<Schema.Boolean>;
+}>, import("effect/Cause").YieldableError>;
+export declare class AzdoParseError extends AzdoParseError_base {
+}
+export type AzdoError = AzdoSecurityError | AzdoCommandError | AzdoTimeoutError | AzdoParseError;
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/azdo-tool/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;;;;;AAEhC,qBAAa,iBAAkB,SAAQ,sBAStC;CAAG;;;;;;;;;;AAEJ,qBAAa,gBAAiB,SAAQ,qBAQpC;CAAG;;;;;;;;;AAEL,qBAAa,gBAAiB,SAAQ,qBAOpC;CAAG;;;;;;;;AAEL,qBAAa,cAAe,SAAQ,mBAMlC;CAAG;AAEL,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,cAAc,CAAC"}

package/dist/azdo-tool/extract-option-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-option-value.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/extract-option-value.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAQpB"}

package/dist/azdo-tool/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/azdo-tool/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/index.ts"],"names":[],"mappings":""}

package/dist/azdo-tool/security.d.ts

@@ -0,0 +1,4 @@
+import type { InvokeParams, SecurityCheckResult } from "./types";
+export declare function isCommandAllowed(cmd: string): SecurityCheckResult;
+export declare function isInvokeAllowed(params: InvokeParams): SecurityCheckResult;
+//# sourceMappingURL=security.d.ts.map

package/dist/azdo-tool/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAcjE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CA0GjE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAkCzE"}

package/dist/azdo-tool/service.d.ts

@@ -0,0 +1,15 @@
+import { ChildProcessSpawner } from "effect/unstable/process";
+import { Context, Effect, Layer } from "effect";
+import type { InvokeParams } from "./types";
+import { AzdoSecurityError, AzdoCommandError, AzdoTimeoutError, AzdoParseError } from "./errors";
+import { ConfigService } from "#config";
+declare const AzdoService_base: Context.ServiceClass<AzdoService, "@agent-tools/AzdoService", {
+    readonly runCommand: (cmd: string, project?: string) => Effect.Effect<string, AzdoSecurityError | AzdoCommandError | AzdoTimeoutError | AzdoParseError>;
+    readonly runInvoke: (params: InvokeParams) => Effect.Effect<unknown, AzdoSecurityError | AzdoCommandError | AzdoTimeoutError | AzdoParseError>;
+}>;
+export declare class AzdoService extends AzdoService_base {
+    static readonly layer: Layer.Layer<AzdoService, never, ConfigService | ChildProcessSpawner.ChildProcessSpawner>;
+}
+export declare const AzdoServiceLayer: Layer.Layer<AzdoService, never, ConfigService | ChildProcessSpawner.ChildProcessSpawner>;
+export {};
+//# sourceMappingURL=service.d.ts.map

package/dist/azdo-tool/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAkB,MAAM,QAAQ,CAAC;AAEhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI5C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAGjG,OAAO,EAAE,aAAa,EAAiB,MAAM,SAAS,CAAC;;yBAM9B,CACnB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAChB,MAAM,EACN,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,cAAc,CACzE;wBACmB,CAClB,MAAM,EAAE,YAAY,KACjB,MAAM,CAAC,MAAM,CAChB,OAAO,EACP,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,cAAc,CACzE;;AAfL,qBAAa,WAAY,SAAQ,gBAiBF;IAC7B,MAAM,CAAC,QAAQ,CAAC,KAAK,2FAmNnB;CACH;AAED,eAAO,MAAM,gBAAgB,0FAAoB,CAAC"}

package/dist/azdo-tool/transformers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformers.d.ts","sourceRoot":"","sources":["../../src/azdo-tool/transformers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,KAAK,WAAW,GAAG;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;CAChC,CAAC;AAwCF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAoC/D;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CA6B5D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAQjE"}