@pax8-cta/core 0.1.0

package/dist/powerplatform/tenant-discovery.js

@@ -0,0 +1,205 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { TokenManager } from "../auth/token-manager.js";
+import { GdapClient } from "../auth/gdap-client.js";
+import { PowerPlatformAdminClient } from "./admin-client.js";
+import { DataverseClient } from "../dataverse/client.js";
+import { POWER_PLATFORM_ADMIN_ROLE_ID } from "../constants.js";
+/**
+ * Service for discovering customer tenants and their Power Platform environments
+ * via GDAP relationships
+ */
+export class TenantDiscoveryService {
+    gdapClient;
+    partnerConfig;
+    // In-memory cache with TTL
+    tenantCache = null;
+    solutionCache = new Map();
+    DEFAULT_CACHE_TTL_MS = 60 * 60 * 1000; // 1 hour
+    constructor(config) {
+        this.partnerConfig = config;
+        this.gdapClient = new GdapClient(config);
+    }
+    /**
+     * Discover all customer tenants via GDAP and their Power Platform environments
+     */
+    async discoverTenants(options) {
+        const { forceRefresh = false, cacheTtlMs = this.DEFAULT_CACHE_TTL_MS } = options || {};
+        // Check cache
+        if (!forceRefresh && this.tenantCache && Date.now() < this.tenantCache.expiresAt) {
+            return this.tenantCache.data;
+        }
+        // Get all active GDAP relationships
+        const relationships = await this.gdapClient.listDelegatedAdminRelationships();
+        // Discover environments for each tenant in parallel
+        const discoveries = await Promise.allSettled(relationships.map((rel) => this.discoverTenantEnvironments(rel)));
+        const tenants = discoveries.map((result, index) => {
+            if (result.status === "fulfilled") {
+                return result.value;
+            }
+            // Return partial info on failure
+            const rel = relationships[index];
+            return {
+                tenantId: rel.customer.tenantId,
+                displayName: rel.customer.displayName,
+                gdapRelationshipId: rel.id,
+                gdapStatus: rel.status,
+                gdapEndDateTime: rel.endDateTime,
+                hasPowerPlatformAdmin: false,
+                environments: [],
+                discoveredAt: new Date().toISOString(),
+                error: result.reason?.message || "Failed to discover environments",
+            };
+        });
+        // Update cache
+        this.tenantCache = {
+            data: tenants,
+            expiresAt: Date.now() + cacheTtlMs,
+        };
+        return tenants;
+    }
+    /**
+     * Discover environments for a single tenant
+     */
+    async discoverTenantEnvironments(relationship) {
+        const customerTenantId = relationship.customer.tenantId;
+        // Check for Power Platform Admin role
+        const powerPlatformAdminRoleId = POWER_PLATFORM_ADMIN_ROLE_ID;
+        const hasPowerPlatformAdmin = relationship.accessDetails.unifiedRoles.some((role) => role.roleDefinitionId === powerPlatformAdminRoleId);
+        // Create token manager for customer tenant
+        const customerTokenManager = new TokenManager({
+            ...this.partnerConfig,
+            tenantId: customerTenantId,
+        });
+        // Get environments from Power Platform Admin API
+        const adminClient = new PowerPlatformAdminClient({
+            tokenManager: customerTokenManager,
+        });
+        const environments = await adminClient.listEnvironmentSummaries();
+        // Find default/production environment
+        const defaultEnv = environments.find((e) => e.isDefault) ||
+            environments.find((e) => e.type === "Production") ||
+            environments[0];
+        return {
+            tenantId: customerTenantId,
+            displayName: relationship.customer.displayName,
+            gdapRelationshipId: relationship.id,
+            gdapStatus: relationship.status,
+            gdapEndDateTime: relationship.endDateTime,
+            hasPowerPlatformAdmin,
+            environments,
+            defaultEnvironment: defaultEnv,
+            discoveredAt: new Date().toISOString(),
+        };
+    }
+    /**
+     * Discover solutions installed in a tenant's environment
+     */
+    async discoverSolutions(tenantId, environmentUrl, options) {
+        const { forceRefresh = false, cacheTtlMs = this.DEFAULT_CACHE_TTL_MS } = options || {};
+        const cacheKey = `${tenantId}:${environmentUrl}`;
+        // Check cache
+        const cached = this.solutionCache.get(cacheKey);
+        if (!forceRefresh && cached && Date.now() < cached.expiresAt) {
+            return cached.data;
+        }
+        // Get tenant info for display name
+        const tenants = await this.discoverTenants();
+        const tenant = tenants.find((t) => t.tenantId === tenantId);
+        const environment = tenant?.environments.find((e) => e.instanceUrl === environmentUrl);
+        // Create Dataverse client for the environment
+        const customerTokenManager = new TokenManager({
+            ...this.partnerConfig,
+            tenantId,
+        });
+        const dataverseClient = new DataverseClient({
+            environmentUrl,
+            tokenManager: customerTokenManager,
+            clientId: this.partnerConfig.clientId,
+        });
+        // Query solutions
+        const solutions = await dataverseClient.querySolutions();
+        const discovered = solutions.map((sol) => ({
+            tenantId,
+            tenantName: tenant?.displayName || tenantId,
+            environmentId: environment?.id || "",
+            environmentName: environment?.displayName || environmentUrl,
+            environmentUrl,
+            solutionId: sol.solutionid,
+            uniqueName: sol.uniquename,
+            friendlyName: sol.friendlyname,
+            version: sol.version,
+            isManaged: sol.ismanaged,
+            publisherName: sol.publisherid?.friendlyname,
+        }));
+        // Update cache
+        this.solutionCache.set(cacheKey, {
+            data: discovered,
+            expiresAt: Date.now() + cacheTtlMs,
+        });
+        return discovered;
+    }
+    /**
+     * Discover a specific solution across all tenants
+     * Useful for finding where an agent is deployed
+     */
+    async findSolutionAcrossTenants(solutionUniqueName, options) {
+        const { forceRefresh = false } = options || {};
+        const tenants = await this.discoverTenants({ forceRefresh });
+        const results = [];
+        // Check each tenant's default environment
+        await Promise.allSettled(tenants
+            .filter((t) => t.defaultEnvironment && !t.error)
+            .map(async (tenant) => {
+            const solutions = await this.discoverSolutions(tenant.tenantId, tenant.defaultEnvironment.instanceUrl, { forceRefresh });
+            const match = solutions.find((s) => s.uniqueName === solutionUniqueName);
+            if (match) {
+                results.push(match);
+            }
+        }));
+        return results;
+    }
+    /**
+     * Get a token manager for a specific customer tenant
+     */
+    getCustomerTokenManager(customerTenantId) {
+        return new TokenManager({
+            ...this.partnerConfig,
+            tenantId: customerTenantId,
+        });
+    }
+    /**
+     * Clear all caches
+     */
+    clearCache() {
+        this.tenantCache = null;
+        this.solutionCache.clear();
+    }
+    /**
+     * Clear cache for a specific tenant
+     */
+    clearTenantCache(tenantId) {
+        // Clear solution caches for this tenant
+        for (const key of this.solutionCache.keys()) {
+            if (key.startsWith(`${tenantId}:`)) {
+                this.solutionCache.delete(key);
+            }
+        }
+        // Force refresh of tenant list on next call
+        this.tenantCache = null;
+    }
+}
+//# sourceMappingURL=tenant-discovery.js.map

package/dist/powerplatform/tenant-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-discovery.js","sourceRoot":"","sources":["../../src/powerplatform/tenant-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAsB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,UAAU,EAA8B,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAsB,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AA+C/D;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACzB,UAAU,CAAa;IACvB,aAAa,CAAwB;IAE7C,2BAA2B;IACnB,WAAW,GAA0C,IAAI,CAAC;IAC1D,aAAa,GAAkD,IAAI,GAAG,EAAE,CAAC;IAEhE,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;IAEjE,YAAY,MAA6B;QACvC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAGrB;QACC,MAAM,EAAE,YAAY,GAAG,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC,oBAAoB,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAEvF,cAAc;QACd,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAC/B,CAAC;QAED,oCAAoC;QACpC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,+BAA+B,EAAE,CAAC;QAE9E,oDAAoD;QACpD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAC1C,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CACjE,CAAC;QAEF,MAAM,OAAO,GAAuB,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACpE,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,OAAO,MAAM,CAAC,KAAK,CAAC;YACtB,CAAC;YAED,iCAAiC;YACjC,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ;gBAC/B,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW;gBACrC,kBAAkB,EAAE,GAAG,CAAC,EAAE;gBAC1B,UAAU,EAAE,GAAG,CAAC,MAAM;gBACtB,eAAe,EAAE,GAAG,CAAC,WAAW;gBAChC,qBAAqB,EAAE,KAAK;gBAC5B,YAAY,EAAE,EAAE;gBAChB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,iCAAiC;aACnE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,eAAe;QACf,IAAI,CAAC,WAAW,GAAG;YACjB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;SACnC,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,0BAA0B,CACtC,YAAwC;QAExC,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAExD,sCAAsC;QACtC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;QAC9D,MAAM,qBAAqB,GAAG,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CACxE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,KAAK,wBAAwB,CAC7D,CAAC;QAEF,2CAA2C;QAC3C,MAAM,oBAAoB,GAAG,IAAI,YAAY,CAAC;YAC5C,GAAG,IAAI,CAAC,aAAa;YACrB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;QAEH,iDAAiD;QACjD,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC;YAC/C,YAAY,EAAE,oBAAoB;SACnC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,wBAAwB,EAAE,CAAC;QAElE,sCAAsC;QACtC,MAAM,UAAU,GACd,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;YACjD,YAAY,CAAC,CAAC,CAAC,CAAC;QAElB,OAAO;YACL,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW;YAC9C,kBAAkB,EAAE,YAAY,CAAC,EAAE;YACnC,UAAU,EAAE,YAAY,CAAC,MAAM;YAC/B,eAAe,EAAE,YAAY,CAAC,WAAW;YACzC,qBAAqB;YACrB,YAAY;YACZ,kBAAkB,EAAE,UAAU;YAC9B,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,QAAgB,EAChB,cAAsB,EACtB,OAGC;QAED,MAAM,EAAE,YAAY,GAAG,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC,oBAAoB,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QACvF,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,cAAc,EAAE,CAAC;QAEjD,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7D,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC;QAEvF,8CAA8C;QAC9C,MAAM,oBAAoB,GAAG,IAAI,YAAY,CAAC;YAC5C,GAAG,IAAI,CAAC,aAAa;YACrB,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC;YAC1C,cAAc;YACd,YAAY,EAAE,oBAAoB;YAClC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ;SACtC,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,cAAc,EAAE,CAAC;QAEzD,MAAM,UAAU,GAAyB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/D,QAAQ;YACR,UAAU,EAAE,MAAM,EAAE,WAAW,IAAI,QAAQ;YAC3C,aAAa,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE;YACpC,eAAe,EAAE,WAAW,EAAE,WAAW,IAAI,cAAc;YAC3D,cAAc;YACd,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY;SAC7C,CAAC,CAAC,CAAC;QAEJ,eAAe;QACf,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC/B,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;SACnC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,yBAAyB,CAC7B,kBAA0B,EAC1B,OAEC;QAED,MAAM,EAAE,YAAY,GAAG,KAAK,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAE/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAyB,EAAE,CAAC;QAEzC,0CAA0C;QAC1C,MAAM,OAAO,CAAC,UAAU,CACtB,OAAO;aACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;aAC/C,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACpB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC5C,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,kBAAmB,CAAC,WAAW,EACtC,EAAE,YAAY,EAAE,CACjB,CAAC;YAEF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,kBAAkB,CAAC,CAAC;YACzE,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CACL,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,gBAAwB;QAC9C,OAAO,IAAI,YAAY,CAAC;YACtB,GAAG,IAAI,CAAC,aAAa;YACrB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,wCAAwC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,4CAA4C;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;CACF"}

package/dist/preconditions/check.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { TenantConfig } from "../config/schema.js";
+import type { DemoPreconditionState } from "../mock/demo-data.js";
+import type { ComparisonOp, Precondition, PreconditionFailure, PreconditionManifest } from "./types.js";
+/**
+ * Resolver contract: given a tenant + precondition, return the synthetic
+ * (Phase 1) or live (Phase 2) state of the matched resource — or the literal
+ * `"missing-resource"` when nothing in the tenant matches the precondition's
+ * `matcher`. Absence is itself a finding, not an error.
+ */
+export type PreconditionStateResolver = (tenant: TenantConfig, precondition: Precondition) => DemoPreconditionState | "missing-resource";
+/**
+ * Apply a `ComparisonOp` between the actual property value and the
+ * requirement's required value. Returns true when the requirement is
+ * satisfied.
+ */
+export declare function evaluateOp(op: ComparisonOp, current: unknown, required: unknown): boolean;
+/**
+ * Check every (tenant × precondition) pair against the supplied state
+ * resolver and emit one `PreconditionFailure` per failed requirement.
+ *
+ * Phase 1 callers wire `resolveState` to a synthetic lookup against
+ * `DEMO_TENANTS[].metadata.preconditionState`. Phase 2 will swap that for
+ * a live Microsoft Graph TCM client; the rest of this function stays put.
+ */
+export declare function checkPreconditions(manifest: PreconditionManifest, tenants: TenantConfig[], resolveState: PreconditionStateResolver): PreconditionFailure[];
+//# sourceMappingURL=check.d.ts.map

package/dist/preconditions/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/preconditions/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,YAAY,KACvB,qBAAqB,GAAG,kBAAkB,CAAC;AAkDhD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CA+BzF;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,EAAE,YAAY,EAAE,EACvB,YAAY,EAAE,yBAAyB,GACtC,mBAAmB,EAAE,CA2DvB"}

package/dist/preconditions/check.js

@@ -0,0 +1,173 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Walk a dot-path within an object. Returns `undefined` for any segment
+ * that's not a plain object on the path. Used to resolve a requirement's
+ * `property` against the resource's `currentProperties`.
+ */
+function getByDotPath(obj, path) {
+    const parts = path.split(".");
+    let current = obj;
+    for (const part of parts) {
+        if (current === null || current === undefined)
+            return undefined;
+        if (typeof current !== "object")
+            return undefined;
+        current = current[part];
+    }
+    return current;
+}
+/**
+ * Strict deep equality. Mirrors Node's util.isDeepStrictEqual semantics for
+ * the JSON-shaped values we expect from YAML manifests + synthetic state.
+ */
+function deepEqual(a, b) {
+    if (Object.is(a, b))
+        return true;
+    if (typeof a !== typeof b)
+        return false;
+    if (a === null || b === null)
+        return false;
+    if (typeof a !== "object")
+        return false;
+    if (Array.isArray(a)) {
+        if (!Array.isArray(b))
+            return false;
+        if (a.length !== b.length)
+            return false;
+        for (let i = 0; i < a.length; i++) {
+            if (!deepEqual(a[i], b[i]))
+                return false;
+        }
+        return true;
+    }
+    if (Array.isArray(b))
+        return false;
+    const aObj = a;
+    const bObj = b;
+    const aKeys = Object.keys(aObj);
+    const bKeys = Object.keys(bObj);
+    if (aKeys.length !== bKeys.length)
+        return false;
+    for (const key of aKeys) {
+        if (!Object.prototype.hasOwnProperty.call(bObj, key))
+            return false;
+        if (!deepEqual(aObj[key], bObj[key]))
+            return false;
+    }
+    return true;
+}
+/**
+ * Apply a `ComparisonOp` between the actual property value and the
+ * requirement's required value. Returns true when the requirement is
+ * satisfied.
+ */
+export function evaluateOp(op, current, required) {
+    switch (op) {
+        case "equals":
+            return deepEqual(current, required);
+        case "not-equals":
+            return !deepEqual(current, required);
+        case "at-least": {
+            // booleans: true >= true|false, false satisfies only false.
+            if (typeof current === "boolean" && typeof required === "boolean") {
+                return Number(current) >= Number(required);
+            }
+            // numbers: standard >=.
+            if (typeof current === "number" && typeof required === "number") {
+                return current >= required;
+            }
+            // arrays: current ⊇ required (every required element appears in current).
+            if (Array.isArray(current) && Array.isArray(required)) {
+                return required.every((v) => current.some((c) => deepEqual(c, v)));
+            }
+            // mismatched / unsupported types → not satisfied.
+            return false;
+        }
+        case "includes": {
+            if (!Array.isArray(current))
+                return false;
+            return current.some((c) => deepEqual(c, required));
+        }
+        case "subset-of": {
+            if (!Array.isArray(current) || !Array.isArray(required))
+                return false;
+            return current.every((c) => required.some((r) => deepEqual(r, c)));
+        }
+    }
+}
+/**
+ * Check every (tenant × precondition) pair against the supplied state
+ * resolver and emit one `PreconditionFailure` per failed requirement.
+ *
+ * Phase 1 callers wire `resolveState` to a synthetic lookup against
+ * `DEMO_TENANTS[].metadata.preconditionState`. Phase 2 will swap that for
+ * a live Microsoft Graph TCM client; the rest of this function stays put.
+ */
+export function checkPreconditions(manifest, tenants, resolveState) {
+    const failures = [];
+    for (const tenant of tenants) {
+        for (const precondition of manifest.preconditions) {
+            const state = resolveState(tenant, precondition);
+            if (state === "missing-resource") {
+                // Render the matcher as a human-readable required-value so the user
+                // sees what we were looking for (e.g. {displayName: "Require MFA..."}).
+                failures.push({
+                    tenantId: tenant.tenantId,
+                    tenantName: tenant.name,
+                    preconditionId: precondition.id,
+                    description: precondition.description,
+                    resourceType: precondition.resourceType,
+                    resourceDisplayName: precondition.matcher.displayName ?? Object.values(precondition.matcher)[0] ?? "(none)",
+                    resourceId: "",
+                    failedProperty: "<resource not present>",
+                    currentValue: undefined,
+                    requiredValue: precondition.matcher,
+                    comparisonOp: "equals",
+                    severity: precondition.severity,
+                    remediation: precondition.remediation,
+                });
+                continue;
+            }
+            // Pull the resource id once for substitution into remediation templates.
+            const resourceId = typeof state.currentProperties.id === "string" ? state.currentProperties.id : "";
+            // Walk every requirement and emit one failure per mismatch — operators
+            // explicitly want each line surfaced rather than collapsed.
+            for (const requirement of precondition.requirements) {
+                const current = getByDotPath(state.currentProperties, requirement.property);
+                if (evaluateOp(requirement.op, current, requirement.value))
+                    continue;
+                failures.push({
+                    tenantId: tenant.tenantId,
+                    tenantName: tenant.name,
+                    preconditionId: precondition.id,
+                    description: precondition.description,
+                    resourceType: precondition.resourceType,
+                    resourceDisplayName: state.resourceDisplayName,
+                    resourceId,
+                    failedProperty: requirement.property,
+                    currentValue: current,
+                    requiredValue: requirement.value,
+                    comparisonOp: requirement.op,
+                    severity: precondition.severity,
+                    remediation: precondition.remediation,
+                });
+            }
+        }
+    }
+    return failures;
+}
+//# sourceMappingURL=check.js.map

package/dist/preconditions/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/preconditions/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAsBH;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAA4B,EAAE,IAAY;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,EAAgB,EAAE,OAAgB,EAAE,QAAiB;IAC9E,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtC,KAAK,YAAY;YACf,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvC,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,4DAA4D;YAC5D,IAAI,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAClE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,CAAC;YACD,wBAAwB;YACxB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChE,OAAO,OAAO,IAAI,QAAQ,CAAC;YAC7B,CAAC;YACD,0EAA0E;YAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;YACD,kDAAkD;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA8B,EAC9B,OAAuB,EACvB,YAAuC;IAEvC,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAE3C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAEjD,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBACjC,oEAAoE;gBACpE,wEAAwE;gBACxE,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,cAAc,EAAE,YAAY,CAAC,EAAE;oBAC/B,WAAW,EAAE,YAAY,CAAC,WAAW;oBACrC,YAAY,EAAE,YAAY,CAAC,YAAY;oBACvC,mBAAmB,EACjB,YAAY,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ;oBACxF,UAAU,EAAE,EAAE;oBACd,cAAc,EAAE,wBAAwB;oBACxC,YAAY,EAAE,SAAS;oBACvB,aAAa,EAAE,YAAY,CAAC,OAAO;oBACnC,YAAY,EAAE,QAAQ;oBACtB,QAAQ,EAAE,YAAY,CAAC,QAAQ;oBAC/B,WAAW,EAAE,YAAY,CAAC,WAAW;iBACtC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,yEAAyE;YACzE,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,iBAAiB,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEnF,uEAAuE;YACvE,4DAA4D;YAC5D,KAAK,MAAM,WAAW,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;gBACpD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAC5E,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAErE,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,cAAc,EAAE,YAAY,CAAC,EAAE;oBAC/B,WAAW,EAAE,YAAY,CAAC,WAAW;oBACrC,YAAY,EAAE,YAAY,CAAC,YAAY;oBACvC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;oBAC9C,UAAU;oBACV,cAAc,EAAE,WAAW,CAAC,QAAQ;oBACpC,YAAY,EAAE,OAAO;oBACrB,aAAa,EAAE,WAAW,CAAC,KAAK;oBAChC,YAAY,EAAE,WAAW,CAAC,EAAE;oBAC5B,QAAQ,EAAE,YAAY,CAAC,QAAQ;oBAC/B,WAAW,EAAE,YAAY,CAAC,WAAW;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/preconditions/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export * from "./types.js";
+export * from "./schema.js";
+export * from "./loader.js";
+export * from "./check.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/preconditions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/preconditions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/preconditions/index.js

@@ -0,0 +1,20 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export * from "./types.js";
+export * from "./schema.js";
+export * from "./loader.js";
+export * from "./check.js";
+//# sourceMappingURL=index.js.map

package/dist/preconditions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/preconditions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/preconditions/loader.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PreconditionManifest } from "./types.js";
+/**
+ * Strip a `.zip` extension and any leading directory from the user's
+ * `--solution` arg so we can match the manifest by the solution's logical
+ * name. e.g. `./agent packages/CustomerServiceAgent.zip` → `CustomerServiceAgent`.
+ */
+export declare function normalizeSolutionName(input: string): string;
+/**
+ * Look for `<solutionName>.preconditions.yaml` (or `.yml`) in each search dir
+ * and return the first parsed + validated manifest.
+ *
+ *  - Returns `null` when no manifest exists in any search dir. Callers should
+ *    treat this as "preflight skipped, deploy proceeds, log a visible note."
+ *  - Throws `PreconditionManifestValidationError` when a manifest IS present
+ *    but fails schema validation. Better to fail loudly than silently skip.
+ */
+export declare function loadPreconditionManifest(solutionName: string, searchDirs: string[]): Promise<PreconditionManifest | null>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/preconditions/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/preconditions/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAyBtC"}

package/dist/preconditions/loader.js

@@ -0,0 +1,65 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { readFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { join, basename, extname } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { PreconditionManifestSchema, PreconditionManifestValidationError } from "./schema.js";
+/**
+ * Strip a `.zip` extension and any leading directory from the user's
+ * `--solution` arg so we can match the manifest by the solution's logical
+ * name. e.g. `./agent packages/CustomerServiceAgent.zip` → `CustomerServiceAgent`.
+ */
+export function normalizeSolutionName(input) {
+    const base = basename(input);
+    const ext = extname(base);
+    return ext.toLowerCase() === ".zip" ? base.slice(0, -ext.length) : base;
+}
+/**
+ * Look for `<solutionName>.preconditions.yaml` (or `.yml`) in each search dir
+ * and return the first parsed + validated manifest.
+ *
+ *  - Returns `null` when no manifest exists in any search dir. Callers should
+ *    treat this as "preflight skipped, deploy proceeds, log a visible note."
+ *  - Throws `PreconditionManifestValidationError` when a manifest IS present
+ *    but fails schema validation. Better to fail loudly than silently skip.
+ */
+export async function loadPreconditionManifest(solutionName, searchDirs) {
+    const normalized = normalizeSolutionName(solutionName);
+    const candidates = [];
+    for (const dir of searchDirs) {
+        candidates.push(join(dir, `${normalized}.preconditions.yaml`));
+        candidates.push(join(dir, `${normalized}.preconditions.yml`));
+    }
+    const found = candidates.find((path) => existsSync(path));
+    if (!found)
+        return null;
+    let raw;
+    try {
+        const content = await readFile(found, "utf-8");
+        raw = parseYaml(content);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to read precondition manifest at ${found}: ${message}`);
+    }
+    const result = PreconditionManifestSchema.safeParse(raw);
+    if (!result.success) {
+        throw new PreconditionManifestValidationError(found, result.error.issues);
+    }
+    return result.data;
+}
+//# sourceMappingURL=loader.js.map

package/dist/preconditions/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/preconditions/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,0BAA0B,EAAE,mCAAmC,EAAE,MAAM,aAAa,CAAC;AAG9F;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAoB,EACpB,UAAoB;IAEpB,MAAM,UAAU,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,qBAAqB,CAAC,CAAC,CAAC;QAC/D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,oBAAoB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,mCAAmC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}