swallowkit 2.0.0-alpha.1 → 2.0.0-alpha.10

package/src/mcp/version-selection.ts

@@ -0,0 +1,163 @@
+/**
+ * Runtime version selection for `swallowkit-mcp`.
+ *
+ * Policy: when launched as `latest` (or without an explicit version), use whichever is
+ * newer of this MCP package and the project-installed `swallowkit`. A newer project
+ * install takes over through its own `swallowkit-mcp`, so prerelease projects never get
+ * an older contract. An explicit SWALLOWKIT_MCP_VERSION is always honored.
+ */
+
+import * as fs from "fs";
+import * as path from "path";
+import type { MachineNextAction } from "../machine/contracts";
+import { MCP_LATEST, MCP_VERSION_ENV } from "../core/project/mcp-config";
+import { compareSemver } from "../utils/semver";
+
+export const MCP_DELEGATED_FROM_ENV = "SWALLOWKIT_MCP_DELEGATED_FROM";
+
+export interface ProjectSwallowKitInstall {
+  version: string;
+  packageRoot: string;
+  mcpEntrypoint: string | null;
+}
+
+export type McpVersionSelection =
+  | "running-version"
+  | "project-version"
+  | "pinned";
+
+export interface McpVersionContext {
+  /** Version of the MCP server answering the request. */
+  mcpVersion: string;
+  /** SWALLOWKIT_MCP_VERSION as requested by the launcher (`latest` when unset). */
+  requestedVersion: string;
+  projectVersion: string | null;
+  selection: McpVersionSelection;
+  delegated: boolean;
+  delegatedFrom?: string;
+  warnings: string[];
+  nextActions: MachineNextAction[];
+}
+
+export type McpLaunchDecision =
+  | { action: "delegate"; entrypoint: string; fromVersion: string; toVersion: string }
+  | { action: "serve"; context: McpVersionContext };
+
+export interface McpLaunchInput {
+  selfVersion: string;
+  selfPackageRoot: string;
+  env: NodeJS.ProcessEnv;
+  project: ProjectSwallowKitInstall | null;
+  execCommand?: string;
+}
+
+function normalizeRoot(value: string): string {
+  const resolved = path.resolve(value);
+  try {
+    return fs.realpathSync.native(resolved).toLowerCase();
+  } catch {
+    return resolved.toLowerCase();
+  }
+}
+
+export function resolveProjectSwallowKit(cwd: string): ProjectSwallowKitInstall | null {
+  // Same lookup order as Node's node_modules resolution from the project directory.
+  let packageJsonPath: string | null = null;
+  for (let directory = path.resolve(cwd); ; directory = path.dirname(directory)) {
+    const candidate = path.join(directory, "node_modules", "swallowkit", "package.json");
+    if (fs.existsSync(candidate)) {
+      packageJsonPath = fs.realpathSync(candidate);
+      break;
+    }
+    if (path.dirname(directory) === directory) return null;
+  }
+
+  try {
+    const manifest = JSON.parse(fs.readFileSync(packageJsonPath, "utf8")) as {
+      version?: string;
+      bin?: string | Record<string, string>;
+    };
+    if (!manifest.version) return null;
+    const packageRoot = path.dirname(packageJsonPath);
+    const bin = typeof manifest.bin === "object" ? manifest.bin["swallowkit-mcp"] : undefined;
+    const candidate = path.resolve(packageRoot, bin ?? path.join("dist", "mcp", "index.js"));
+    return {
+      version: manifest.version,
+      packageRoot,
+      mcpEntrypoint: fs.existsSync(candidate) ? candidate : null,
+    };
+  } catch {
+    return null;
+  }
+}
+
+export function decideMcpLaunch(input: McpLaunchInput): McpLaunchDecision {
+  const { selfVersion, env, project } = input;
+  const exec = input.execCommand ?? "npx";
+  const requested = (env[MCP_VERSION_ENV] ?? "").trim() || MCP_LATEST;
+  const pinned = requested !== MCP_LATEST;
+  const delegatedFrom = (env[MCP_DELEGATED_FROM_ENV] ?? "").trim() || undefined;
+  const projectVersion = project?.version ?? null;
+  const projectNewer = projectVersion ? (compareSemver(projectVersion, selfVersion) ?? 0) > 0 : false;
+  const sameInstall = project ? normalizeRoot(project.packageRoot) === normalizeRoot(input.selfPackageRoot) : false;
+
+  if (!pinned && !delegatedFrom && project && projectNewer && !sameInstall && project.mcpEntrypoint) {
+    return { action: "delegate", entrypoint: project.mcpEntrypoint, fromVersion: selfVersion, toVersion: project.version };
+  }
+
+  const warnings: string[] = [];
+  const nextActions: MachineNextAction[] = [];
+  if (projectVersion && projectNewer) {
+    warnings.push(
+      `mcp-older-than-project: swallowkit-mcp ${selfVersion} is older than the project's swallowkit ${projectVersion}. ` +
+        "Its capabilities, boundaries, and plan/apply contracts may be outdated for this project."
+    );
+    nextActions.push({
+      command: `${exec} swallowkit machine inspect capabilities`,
+      description: "Use the project-local machine interface, which matches the installed SwallowKit version, until MCP is updated.",
+    });
+    nextActions.push({
+      command: `${exec} swallowkit configure-mcp`,
+      description: pinned
+        ? `Re-select the MCP version (${MCP_VERSION_ENV} is pinned to ${requested}), then restart the MCP server.`
+        : "Pin the MCP launcher to the project version, then restart the MCP server.",
+    });
+  }
+
+  return {
+    action: "serve",
+    context: {
+      mcpVersion: selfVersion,
+      requestedVersion: requested,
+      projectVersion,
+      selection: delegatedFrom ? "project-version" : pinned ? "pinned" : "running-version",
+      delegated: Boolean(delegatedFrom),
+      ...(delegatedFrom ? { delegatedFrom } : {}),
+      warnings,
+      nextActions,
+    },
+  };
+}
+
+/**
+ * For an explicitly pinned launcher, report when the published `latest` has caught up
+ * with or passed the pinned version so the pin can be removed.
+ */
+export function buildPinnedUpdateNotice(
+  context: McpVersionContext,
+  publishedLatest: string | null,
+  execCommand = "npx"
+): { warning: string; nextAction: MachineNextAction } | null {
+  if (context.selection !== "pinned" || !publishedLatest) return null;
+  const comparison = compareSemver(publishedLatest, context.requestedVersion);
+  if (comparison === null || comparison < 0) return null;
+  return {
+    warning:
+      `mcp-pin-outdated: ${MCP_VERSION_ENV} is pinned to ${context.requestedVersion}, but published latest is ${publishedLatest}. ` +
+      `Switch the launcher back to "${MCP_LATEST}".`,
+    nextAction: {
+      command: `${execCommand} swallowkit configure-mcp`,
+      description: `Re-select the MCP launcher version (returns to "${MCP_LATEST}" when it is at least the project version), then restart the MCP server.`,
+    },
+  };
+}

package/src/utils/azure-cli.ts

@@ -0,0 +1,315 @@
+/**
+ * Azure CLI invocation that works without a shell on every platform.
+ *
+ * On Windows `az` is a batch wrapper (az.cmd). Node cannot spawn it with `shell: false`
+ * (ENOENT for "az", EINVAL for "az.cmd"), so the wrapper is resolved explicitly:
+ * the MSI layout runs its bundled Python exactly like az.cmd does, and other wrappers
+ * run through cmd.exe with every argument quoted.
+ */
+
+import { spawn, spawnSync, SpawnSyncOptions } from "child_process";
+import * as fs from "fs";
+import * as path from "path";
+
+export interface AzCliInvocation {
+  command: string;
+  prefixArgs: string[];
+  env?: NodeJS.ProcessEnv;
+  /** Batch wrapper that must be started through cmd.exe. */
+  batchScript?: string;
+  /** Resolved executable or wrapper, for diagnostics. */
+  source: string;
+}
+
+export interface AzCliResult {
+  status: number | null;
+  stdout: string;
+  stderr: string;
+  error?: Error;
+  signal: NodeJS.Signals | null;
+  elapsedMs: number;
+  failureKind?: "timeout" | "buffer" | "cancelled" | "spawn" | "signal" | "communication" | "exit";
+  errorCode?: string;
+  stdoutTruncated: boolean;
+  stderrTruncated: boolean;
+}
+
+export interface AzCliRunOptions {
+  timeout?: number;
+  invocation?: AzCliInvocation | null;
+  signal?: AbortSignal;
+  /** Capture is bounded independently of the child's output volume. */
+  captureBytes?: number;
+}
+
+export type AzCliAvailability =
+  | { available: true; invocation: AzCliInvocation }
+  | { available: false; reason: "not-found" | "not-runnable"; detail: string };
+
+function findOnWindowsPath(name: string, env: NodeJS.ProcessEnv): string | null {
+  const pathValue = env.PATH ?? env.Path ?? "";
+  const extensions = (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean).map((ext) => ext.toLowerCase());
+  for (const directory of pathValue.split(";").filter(Boolean)) {
+    for (const extension of extensions) {
+      const candidate = path.join(directory.replace(/^"|"$/g, ""), `${name}${extension}`);
+      try {
+        if (fs.statSync(candidate).isFile()) return candidate;
+      } catch {
+        // Keep searching PATH.
+      }
+    }
+  }
+  return null;
+}
+
+export function resolveAzCliInvocation(
+  env: NodeJS.ProcessEnv = process.env,
+  platform: NodeJS.Platform = process.platform
+): AzCliInvocation | null {
+  if (platform !== "win32") return { command: "az", prefixArgs: [], source: "az" };
+
+  const resolved = findOnWindowsPath("az", env);
+  if (!resolved) return null;
+  const extension = path.extname(resolved).toLowerCase();
+  if (extension === ".exe" || extension === ".com") {
+    return { command: resolved, prefixArgs: [], source: resolved };
+  }
+
+  // MSI install: wbin\az.cmd runs "..\python.exe -IBm azure.cli %*" with AZ_INSTALLER=MSI.
+  const bundledPython = path.join(path.dirname(resolved), "..", "python.exe");
+  if (path.basename(path.dirname(resolved)).toLowerCase() === "wbin" && fs.existsSync(bundledPython)) {
+    return {
+      command: path.resolve(bundledPython),
+      prefixArgs: ["-IBm", "azure.cli"],
+      env: { AZ_INSTALLER: "MSI" },
+      source: resolved,
+    };
+  }
+
+  return { command: env.ComSpec ?? "cmd.exe", prefixArgs: [], batchScript: resolved, source: resolved };
+}
+
+/** Builds the cmd.exe /s /c payload. Rejects characters cmd.exe would reinterpret even inside quotes. */
+export function buildBatchCommandLine(script: string, args: string[]): string {
+  for (const value of [script, ...args]) {
+    if (/["%\r\n]/.test(value)) {
+      throw new Error(`Azure CLI argument cannot be passed safely through ${path.basename(script)} (quotes, percent signs, or newlines).`);
+    }
+  }
+  return `"${[script, ...args].map((value) => `"${value.replace(/(\\+)$/, "$1$1")}"`).join(" ")}"`;
+}
+
+let cachedInvocation: AzCliInvocation | null | undefined;
+
+export function getAzCliInvocation(): AzCliInvocation | null {
+  if (cachedInvocation === undefined) cachedInvocation = resolveAzCliInvocation();
+  return cachedInvocation;
+}
+
+export function resetAzCliInvocationCache(): void {
+  cachedInvocation = undefined;
+}
+
+/** Test hook: pin the resolved invocation (null = not found). */
+export function setAzCliInvocationForTesting(invocation: AzCliInvocation | null | undefined): void {
+  cachedInvocation = invocation;
+}
+
+export function runAzCli(
+  args: string[],
+  options: AzCliRunOptions = {}
+): AzCliResult {
+  const startedAt = Date.now();
+  const invocation = options.invocation === undefined ? getAzCliInvocation() : options.invocation;
+  if (!invocation) {
+    return missingCliResult();
+  }
+  const spawnOptions: SpawnSyncOptions = {
+    shell: false,
+    encoding: "utf-8",
+    timeout: options.timeout ?? 300_000,
+    maxBuffer: options.captureBytes ?? 1_048_576,
+    env: invocation.env ? { ...process.env, ...invocation.env } : process.env,
+  };
+  let result;
+  try {
+    result = invocation.batchScript
+      ? spawnSync(invocation.command, ["/d", "/s", "/v:off", "/c", buildBatchCommandLine(invocation.batchScript, args)], {
+        ...spawnOptions,
+        windowsVerbatimArguments: true,
+      })
+      : spawnSync(invocation.command, [...invocation.prefixArgs, ...args], spawnOptions);
+  } catch (error) {
+    return {
+      ...missingCliResult(),
+      error: error instanceof Error ? error : new Error(String(error)),
+      errorCode: (error as NodeJS.ErrnoException)?.code,
+      elapsedMs: Date.now() - startedAt,
+    };
+  }
+  const errorCode = (result.error as NodeJS.ErrnoException | undefined)?.code;
+  return {
+    status: result.status,
+    stdout: String(result.stdout ?? ""),
+    stderr: String(result.stderr ?? ""),
+    signal: result.signal ?? null,
+    elapsedMs: Date.now() - startedAt,
+    stdoutTruncated: errorCode === "ENOBUFS",
+    stderrTruncated: errorCode === "ENOBUFS",
+    ...(errorCode ? { errorCode } : {}),
+    ...(errorCode === "ETIMEDOUT" ? { failureKind: "timeout" as const }
+      : errorCode === "ENOBUFS" ? { failureKind: "buffer" as const }
+        : result.error ? { failureKind: "spawn" as const }
+          : result.signal ? { failureKind: "signal" as const }
+            : result.status !== 0 ? { failureKind: "exit" as const } : {}),
+    ...(result.error ? { error: result.error } : {}),
+  };
+}
+
+function missingCliResult(): AzCliResult {
+  return {
+    status: null, stdout: "", stderr: "", signal: null, elapsedMs: 0,
+    stdoutTruncated: false, stderrTruncated: false,
+    error: Object.assign(new Error("az was not found on PATH"), { code: "ENOENT" }),
+    errorCode: "ENOENT", failureKind: "spawn",
+  };
+}
+
+/** Unlike spawnSync/maxBuffer, discarding excess output never kills the Azure CLI. */
+export async function runAzCliAsync(args: string[], options: AzCliRunOptions = {}): Promise<AzCliResult> {
+  const invocation = options.invocation === undefined ? getAzCliInvocation() : options.invocation;
+  if (!invocation) return missingCliResult();
+  const timeout = options.timeout ?? 60_000;
+  const captureBytes = options.captureBytes ?? 65_536;
+  if (!Number.isFinite(timeout) || timeout <= 0 || !Number.isInteger(captureBytes) || captureBytes < 1) {
+    throw new Error("Azure CLI timeout and captureBytes must be finite positive values.");
+  }
+  const startedAt = Date.now();
+  const result: AzCliResult = {
+    status: null, stdout: "", stderr: "", signal: null, elapsedMs: 0,
+    stdoutTruncated: false, stderrTruncated: false,
+  };
+  if (options.signal?.aborted) return { ...result, failureKind: "cancelled" };
+  let commandArgs: string[];
+  try {
+    commandArgs = invocation.batchScript
+      ? ["/d", "/s", "/v:off", "/c", buildBatchCommandLine(invocation.batchScript, args)]
+      : [...invocation.prefixArgs, ...args];
+  } catch (error) {
+    return { ...result, error: error instanceof Error ? error : new Error(String(error)), failureKind: "spawn" };
+  }
+  return new Promise<AzCliResult>((resolve) => {
+    let stdout = Buffer.alloc(0);
+    let stderr = Buffer.alloc(0);
+    let finished = false;
+    let drainTimer: NodeJS.Timeout | undefined;
+    let child: ReturnType<typeof spawn>;
+    const finish = () => {
+      if (finished) return;
+      finished = true;
+      clearTimeout(timer);
+      if (drainTimer) clearTimeout(drainTimer);
+      options.signal?.removeEventListener("abort", abort);
+      result.stdout = stdout.toString("utf-8");
+      result.stderr = stderr.toString("utf-8");
+      result.elapsedMs = Date.now() - startedAt;
+      if (!result.failureKind && result.status !== 0) {
+        result.failureKind = result.signal ? "signal"
+          : /ConnectionReset|ConnectionError|connection.*(?:closed|reset|aborted)|ReadTimeout|RemoteDisconnected|ETIMEDOUT|ECONNRESET/i.test(result.stderr)
+            ? "communication" : "exit";
+      }
+      resolve(result);
+    };
+    const stop = (kind: "timeout" | "cancelled") => {
+      if (finished || result.failureKind === "timeout" || result.failureKind === "cancelled") return;
+      result.failureKind = kind;
+      if (kind === "timeout") result.errorCode = "ETIMEDOUT";
+      child?.kill("SIGTERM");
+      // Descendants can inherit pipes; do not wait indefinitely for their close events.
+      drainTimer = setTimeout(() => {
+        child?.kill("SIGKILL");
+        child?.stdout?.destroy();
+        child?.stderr?.destroy();
+        result.stdoutTruncated = true;
+        result.stderrTruncated = true;
+        finish();
+      }, 1_000);
+    };
+    const abort = () => stop("cancelled");
+    const timer = setTimeout(() => stop("timeout"), timeout);
+    try {
+      child = spawn(invocation.command, commandArgs, {
+        shell: false,
+        windowsHide: true,
+        ...(invocation.batchScript ? { windowsVerbatimArguments: true } : {}),
+        env: invocation.env ? { ...process.env, ...invocation.env } : process.env,
+        stdio: ["ignore", "pipe", "pipe"],
+      });
+    } catch (error) {
+      result.error = error instanceof Error ? error : new Error(String(error));
+      result.errorCode = (error as NodeJS.ErrnoException)?.code;
+      result.failureKind = "spawn";
+      finish();
+      return;
+    }
+    const capture = (stream: "stdout" | "stderr", chunk: Buffer) => {
+      const buffer = stream === "stdout" ? stdout : stderr;
+      const remaining = captureBytes - buffer.length;
+      if (chunk.length > remaining) result[`${stream}Truncated`] = true;
+      if (remaining <= 0) return;
+      const combined = Buffer.concat([buffer, chunk.subarray(0, Math.max(remaining, 0))]);
+      if (stream === "stdout") stdout = combined;
+      else stderr = combined;
+    };
+    child.stdout?.on("data", (chunk: Buffer) => capture("stdout", chunk));
+    child.stderr?.on("data", (chunk: Buffer) => capture("stderr", chunk));
+    child.on("error", (error: NodeJS.ErrnoException) => {
+      if (finished) return;
+      result.error = error;
+      result.errorCode = error.code;
+      result.failureKind ??= "spawn";
+      finish();
+    });
+    child.on("exit", (code, signal) => {
+      if (finished) return;
+      result.status = code;
+      result.signal = signal;
+      if (!drainTimer) {
+        drainTimer = setTimeout(() => {
+          child.stdout?.destroy();
+          child.stderr?.destroy();
+          result.stdoutTruncated = true;
+          result.stderrTruncated = true;
+          finish();
+        }, 1_000);
+      }
+    });
+    child.on("close", (code, signal) => {
+      if (finished) return;
+      result.status = code;
+      result.signal = signal;
+      finish();
+    });
+    options.signal?.addEventListener("abort", abort, { once: true });
+    if (options.signal?.aborted) abort();
+  });
+}
+
+export function checkAzCliAvailability(): AzCliAvailability {
+  const invocation = getAzCliInvocation();
+  if (!invocation) {
+    return { available: false, reason: "not-found", detail: "az was not found on PATH." };
+  }
+  const result = runAzCli(["--version"], { timeout: 60_000, invocation });
+  if (result.status === 0) return { available: true, invocation };
+  const errorCode = (result.error as NodeJS.ErrnoException | undefined)?.code;
+  if (errorCode === "ENOENT") {
+    return { available: false, reason: "not-found", detail: "az was not found on PATH." };
+  }
+  const output = `${result.stderr || result.stdout}`.trim().split(/\r?\n/).slice(-3).join(" ");
+  return {
+    available: false,
+    reason: "not-runnable",
+    detail: `${invocation.source} could not run "az --version" (${result.error?.message ?? `exit ${result.status}`})${output ? `: ${output}` : ""}`,
+  };
+}

package/src/utils/azure-diagnostics.ts

@@ -0,0 +1,75 @@
+import type { AzCliResult } from "./azure-cli";
+
+const SENSITIVE_KEY = /outputs|parameters|password|secret|token|authorization|connection.?string|accountkey|api.?key|functions?.?key|client.?secret|access.?key|primary.?key|secondary.?key/i;
+
+export function redactAzureText(text: string, secretValues: readonly string[] = []): string {
+  const redactValues = (value: string) => {
+    for (const secret of secretValues) {
+      if (secret) value = value.split(secret).join("[REDACTED]").split(JSON.stringify(secret).slice(1, -1)).join("[REDACTED]");
+    }
+    return value;
+  };
+  text = redactValues(text);
+  let value = text;
+  try {
+    const redact = (entry: unknown): unknown => {
+      if (typeof entry === "string") return redactPlainText(redactValues(entry));
+      if (Array.isArray(entry)) return entry.map(redact);
+      if (entry && typeof entry === "object") {
+        return Object.fromEntries(Object.entries(entry).map(([key, item]) => [key, SENSITIVE_KEY.test(key) ? "[REDACTED]" : redact(item)]));
+      }
+      return entry;
+    };
+    value = JSON.stringify(redact(JSON.parse(text)));
+  } catch {
+    // An incomplete deployment payload cannot be safely projected/redacted.
+    if (/"(?:outputs|parameters)"\s*:/i.test(text)) return "[Azure payload omitted: may contain secrets]";
+    value = redactPlainText(text);
+  }
+  return value;
+}
+
+function redactPlainText(text: string): string {
+  return text
+    .replace(/\bBearer\s+[^\s"',;]+/gi, "Bearer [REDACTED]")
+    .replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[REDACTED]")
+    .replace(/(?:AccountEndpoint|DefaultEndpointsProtocol)=[^\r\n"']+/gi, "[connection string REDACTED]")
+    .replace(/((?:api[-_ ]?key|functions?[-_ ]?key|accountkey|password|client[-_ ]?secret|secret|token|access[-_ ]?key|primary[-_ ]?key|secondary[-_ ]?key|authorization)\s*["']?\s*[:=]\s*)(?:"[^"]*"|'[^']*'|[^\s,;}\]]+)/gi, "$1[REDACTED]")
+    .replace(/([?&](?:code|sig|token|key|secret|password)=)[^&\s"'<>]+/gi, "$1[REDACTED]");
+}
+
+export interface AzureCliDiagnostic {
+  phase: string;
+  exitCode: number | null;
+  signal: NodeJS.Signals | null;
+  elapsedMs: number;
+  failureKind?: AzCliResult["failureKind"];
+  errorCode?: string;
+  stdout: string;
+  stderr: string;
+  outputTruncated: boolean;
+}
+
+export function azureCliDiagnostic(result: AzCliResult, phase: string, secretValues: readonly string[] = []): AzureCliDiagnostic {
+  const stdout = result.stdoutTruncated ? "[stdout omitted: capture limit reached]" : redactAzureText(result.stdout, secretValues);
+  const stderr = result.stderrTruncated ? "[stderr omitted: capture limit reached]" : redactAzureText(result.stderr, secretValues);
+  return {
+    phase,
+    exitCode: result.status,
+    signal: result.signal ?? null,
+    elapsedMs: result.elapsedMs,
+    ...(result.failureKind ? { failureKind: result.failureKind } : {}),
+    ...(result.errorCode ? { errorCode: result.errorCode } : {}),
+    stdout: stdout.slice(0, 4_000),
+    stderr: stderr.slice(0, 4_000),
+    outputTruncated: result.stdoutTruncated || result.stderrTruncated || stdout.length > 4_000 || stderr.length > 4_000,
+  };
+}
+
+export function formatAzureDiagnostic(diagnostic: AzureCliDiagnostic): string {
+  return [
+    `az ${diagnostic.phase}: exit=${diagnostic.exitCode ?? "unknown"}, signal=${diagnostic.signal ?? "none"}, kind=${diagnostic.failureKind ?? "none"}, elapsed=${diagnostic.elapsedMs}ms${diagnostic.errorCode ? `, error=${diagnostic.errorCode}` : ""}${diagnostic.outputTruncated ? ", output omitted/truncated" : ""}`,
+    ...(diagnostic.stdout ? [`stdout: ${diagnostic.stdout}`] : []),
+    ...(diagnostic.stderr ? [`stderr: ${diagnostic.stderr}`] : []),
+  ].join("\n");
+}

package/src/utils/package-manager.ts

@@ -156,7 +156,7 @@ export function getWorkspaceConfig(pm: PackageManager, workspaces: string[]) {
       /** pnpm uses pnpm-workspace.yaml */
       type: "file" as const,
       filename: "pnpm-workspace.yaml",
-      content: `packages:\n${workspaces.map((w) => `  - ${w}`).join("\n")}\nallowBuilds:\n  protobufjs: false\n  unrs-resolver: false\n`,
+      content: `packages:\n${workspaces.map((w) => `  - ${w}`).join("\n")}\nallowBuilds:\n  keytar: false\n  protobufjs: false\n  unrs-resolver: false\n`,
     };
   }
 
@@ -250,5 +250,5 @@ export function getFunctionsStartScript(
     return "cd functions && npm start";
   }
 
-  return "cd functions && func start";
+  return backendLanguage === "csharp" ? "cd functions && dotnet run" : "cd functions && func start";
 }