swallowkit 2.0.0-alpha.3 → 2.0.0-alpha.4

package/dist/mcp/version-selection.js

@@ -0,0 +1,152 @@
+"use strict";
+/**
+ * Runtime version selection for `swallowkit-mcp`.
+ *
+ * Policy: when launched as `latest` (or without an explicit version), use whichever is
+ * newer of this MCP package and the project-installed `swallowkit`. A newer project
+ * install takes over through its own `swallowkit-mcp`, so prerelease projects never get
+ * an older contract. An explicit SWALLOWKIT_MCP_VERSION is always honored.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_DELEGATED_FROM_ENV = void 0;
+exports.resolveProjectSwallowKit = resolveProjectSwallowKit;
+exports.decideMcpLaunch = decideMcpLaunch;
+exports.buildPinnedUpdateNotice = buildPinnedUpdateNotice;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const mcp_config_1 = require("../core/project/mcp-config");
+const semver_1 = require("../utils/semver");
+exports.MCP_DELEGATED_FROM_ENV = "SWALLOWKIT_MCP_DELEGATED_FROM";
+function normalizeRoot(value) {
+    const resolved = path.resolve(value);
+    try {
+        return fs.realpathSync.native(resolved).toLowerCase();
+    }
+    catch {
+        return resolved.toLowerCase();
+    }
+}
+function resolveProjectSwallowKit(cwd) {
+    // Same lookup order as Node's node_modules resolution from the project directory.
+    let packageJsonPath = null;
+    for (let directory = path.resolve(cwd);; directory = path.dirname(directory)) {
+        const candidate = path.join(directory, "node_modules", "swallowkit", "package.json");
+        if (fs.existsSync(candidate)) {
+            packageJsonPath = fs.realpathSync(candidate);
+            break;
+        }
+        if (path.dirname(directory) === directory)
+            return null;
+    }
+    try {
+        const manifest = JSON.parse(fs.readFileSync(packageJsonPath, "utf8"));
+        if (!manifest.version)
+            return null;
+        const packageRoot = path.dirname(packageJsonPath);
+        const bin = typeof manifest.bin === "object" ? manifest.bin["swallowkit-mcp"] : undefined;
+        const candidate = path.resolve(packageRoot, bin ?? path.join("dist", "mcp", "index.js"));
+        return {
+            version: manifest.version,
+            packageRoot,
+            mcpEntrypoint: fs.existsSync(candidate) ? candidate : null,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function decideMcpLaunch(input) {
+    const { selfVersion, env, project } = input;
+    const exec = input.execCommand ?? "npx";
+    const requested = (env[mcp_config_1.MCP_VERSION_ENV] ?? "").trim() || mcp_config_1.MCP_LATEST;
+    const pinned = requested !== mcp_config_1.MCP_LATEST;
+    const delegatedFrom = (env[exports.MCP_DELEGATED_FROM_ENV] ?? "").trim() || undefined;
+    const projectVersion = project?.version ?? null;
+    const projectNewer = projectVersion ? ((0, semver_1.compareSemver)(projectVersion, selfVersion) ?? 0) > 0 : false;
+    const sameInstall = project ? normalizeRoot(project.packageRoot) === normalizeRoot(input.selfPackageRoot) : false;
+    if (!pinned && !delegatedFrom && project && projectNewer && !sameInstall && project.mcpEntrypoint) {
+        return { action: "delegate", entrypoint: project.mcpEntrypoint, fromVersion: selfVersion, toVersion: project.version };
+    }
+    const warnings = [];
+    const nextActions = [];
+    if (projectVersion && projectNewer) {
+        warnings.push(`mcp-older-than-project: swallowkit-mcp ${selfVersion} is older than the project's swallowkit ${projectVersion}. ` +
+            "Its capabilities, boundaries, and plan/apply contracts may be outdated for this project.");
+        nextActions.push({
+            command: `${exec} swallowkit machine inspect capabilities`,
+            description: "Use the project-local machine interface, which matches the installed SwallowKit version, until MCP is updated.",
+        });
+        nextActions.push({
+            command: `${exec} swallowkit configure-mcp`,
+            description: pinned
+                ? `Re-select the MCP version (${mcp_config_1.MCP_VERSION_ENV} is pinned to ${requested}), then restart the MCP server.`
+                : "Pin the MCP launcher to the project version, then restart the MCP server.",
+        });
+    }
+    return {
+        action: "serve",
+        context: {
+            mcpVersion: selfVersion,
+            requestedVersion: requested,
+            projectVersion,
+            selection: delegatedFrom ? "project-version" : pinned ? "pinned" : "running-version",
+            delegated: Boolean(delegatedFrom),
+            ...(delegatedFrom ? { delegatedFrom } : {}),
+            warnings,
+            nextActions,
+        },
+    };
+}
+/**
+ * For an explicitly pinned launcher, report when the published `latest` has caught up
+ * with or passed the pinned version so the pin can be removed.
+ */
+function buildPinnedUpdateNotice(context, publishedLatest, execCommand = "npx") {
+    if (context.selection !== "pinned" || !publishedLatest)
+        return null;
+    const comparison = (0, semver_1.compareSemver)(publishedLatest, context.requestedVersion);
+    if (comparison === null || comparison < 0)
+        return null;
+    return {
+        warning: `mcp-pin-outdated: ${mcp_config_1.MCP_VERSION_ENV} is pinned to ${context.requestedVersion}, but published latest is ${publishedLatest}. ` +
+            `Switch the launcher back to "${mcp_config_1.MCP_LATEST}".`,
+        nextAction: {
+            command: `${execCommand} swallowkit configure-mcp`,
+            description: `Re-select the MCP launcher version (returns to "${mcp_config_1.MCP_LATEST}" when it is at least the project version), then restart the MCP server.`,
+        },
+    };
+}
+//# sourceMappingURL=version-selection.js.map

package/dist/mcp/version-selection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-selection.js","sourceRoot":"","sources":["../../src/mcp/version-selection.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDH,4DA6BC;AAED,0CA8CC;AAMD,0DAiBC;AAzJD,uCAAyB;AACzB,2CAA6B;AAE7B,2DAAyE;AACzE,4CAAgD;AAEnC,QAAA,sBAAsB,GAAG,+BAA+B,CAAC;AAsCtE,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAgB,wBAAwB,CAAC,GAAW;IAClD,kFAAkF;IAClF,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,KAAK,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACrF,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;IACzD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAGnE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QACzF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW;YACX,aAAa,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;SAC3D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,KAAqB;IACnD,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,4BAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,uBAAU,CAAC;IACpE,MAAM,MAAM,GAAG,SAAS,KAAK,uBAAU,CAAC;IACxC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,8BAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC9E,MAAM,cAAc,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;IAChD,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,IAAA,sBAAa,EAAC,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACpG,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAElH,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,IAAI,OAAO,IAAI,YAAY,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAClG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACzH,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CACX,0CAA0C,WAAW,2CAA2C,cAAc,IAAI;YAChH,0FAA0F,CAC7F,CAAC;QACF,WAAW,CAAC,IAAI,CAAC;YACf,OAAO,EAAE,GAAG,IAAI,0CAA0C;YAC1D,WAAW,EAAE,gHAAgH;SAC9H,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CAAC;YACf,OAAO,EAAE,GAAG,IAAI,2BAA2B;YAC3C,WAAW,EAAE,MAAM;gBACjB,CAAC,CAAC,8BAA8B,4BAAe,iBAAiB,SAAS,iCAAiC;gBAC1G,CAAC,CAAC,2EAA2E;SAChF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE;YACP,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,SAAS;YAC3B,cAAc;YACd,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB;YACpF,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC;YACjC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,QAAQ;YACR,WAAW;SACZ;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,OAA0B,EAC1B,eAA8B,EAC9B,WAAW,GAAG,KAAK;IAEnB,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,UAAU,GAAG,IAAA,sBAAa,EAAC,eAAe,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5E,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO;QACL,OAAO,EACL,qBAAqB,4BAAe,iBAAiB,OAAO,CAAC,gBAAgB,6BAA6B,eAAe,IAAI;YAC7H,gCAAgC,uBAAU,IAAI;QAChD,UAAU,EAAE;YACV,OAAO,EAAE,GAAG,WAAW,2BAA2B;YAClD,WAAW,EAAE,mDAAmD,uBAAU,0EAA0E;SACrJ;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/azure-cli.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Azure CLI invocation that works without a shell on every platform.
+ *
+ * On Windows `az` is a batch wrapper (az.cmd). Node cannot spawn it with `shell: false`
+ * (ENOENT for "az", EINVAL for "az.cmd"), so the wrapper is resolved explicitly:
+ * the MSI layout runs its bundled Python exactly like az.cmd does, and other wrappers
+ * run through cmd.exe with every argument quoted.
+ */
+export interface AzCliInvocation {
+    command: string;
+    prefixArgs: string[];
+    env?: NodeJS.ProcessEnv;
+    /** Batch wrapper that must be started through cmd.exe. */
+    batchScript?: string;
+    /** Resolved executable or wrapper, for diagnostics. */
+    source: string;
+}
+export interface AzCliResult {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+    error?: Error;
+}
+export type AzCliAvailability = {
+    available: true;
+    invocation: AzCliInvocation;
+} | {
+    available: false;
+    reason: "not-found" | "not-runnable";
+    detail: string;
+};
+export declare function resolveAzCliInvocation(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): AzCliInvocation | null;
+/** Builds the cmd.exe /s /c payload. Rejects characters cmd.exe would reinterpret even inside quotes. */
+export declare function buildBatchCommandLine(script: string, args: string[]): string;
+export declare function getAzCliInvocation(): AzCliInvocation | null;
+export declare function resetAzCliInvocationCache(): void;
+/** Test hook: pin the resolved invocation (null = not found). */
+export declare function setAzCliInvocationForTesting(invocation: AzCliInvocation | null | undefined): void;
+export declare function runAzCli(args: string[], options?: {
+    timeout?: number;
+    invocation?: AzCliInvocation | null;
+}): AzCliResult;
+export declare function checkAzCliAvailability(): AzCliAvailability;
+//# sourceMappingURL=azure-cli.d.ts.map

package/dist/utils/azure-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-cli.d.ts","sourceRoot":"","sources":["../../src/utils/azure-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,eAAe,CAAA;CAAE,GAChD;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAkB/E,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,eAAe,GAAG,IAAI,CAsBxB;AAED,yGAAyG;AACzG,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAO5E;AAID,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,IAAI,CAG3D;AAED,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,iEAAiE;AACjE,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAEjG;AAED,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAO,GACtE,WAAW,CA4Bb;AAED,wBAAgB,sBAAsB,IAAI,iBAAiB,CAiB1D"}

package/dist/utils/azure-cli.js

@@ -0,0 +1,164 @@
+"use strict";
+/**
+ * Azure CLI invocation that works without a shell on every platform.
+ *
+ * On Windows `az` is a batch wrapper (az.cmd). Node cannot spawn it with `shell: false`
+ * (ENOENT for "az", EINVAL for "az.cmd"), so the wrapper is resolved explicitly:
+ * the MSI layout runs its bundled Python exactly like az.cmd does, and other wrappers
+ * run through cmd.exe with every argument quoted.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveAzCliInvocation = resolveAzCliInvocation;
+exports.buildBatchCommandLine = buildBatchCommandLine;
+exports.getAzCliInvocation = getAzCliInvocation;
+exports.resetAzCliInvocationCache = resetAzCliInvocationCache;
+exports.setAzCliInvocationForTesting = setAzCliInvocationForTesting;
+exports.runAzCli = runAzCli;
+exports.checkAzCliAvailability = checkAzCliAvailability;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+function findOnWindowsPath(name, env) {
+    const pathValue = env.PATH ?? env.Path ?? "";
+    const extensions = (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean).map((ext) => ext.toLowerCase());
+    for (const directory of pathValue.split(";").filter(Boolean)) {
+        for (const extension of extensions) {
+            const candidate = path.join(directory.replace(/^"|"$/g, ""), `${name}${extension}`);
+            try {
+                if (fs.statSync(candidate).isFile())
+                    return candidate;
+            }
+            catch {
+                // Keep searching PATH.
+            }
+        }
+    }
+    return null;
+}
+function resolveAzCliInvocation(env = process.env, platform = process.platform) {
+    if (platform !== "win32")
+        return { command: "az", prefixArgs: [], source: "az" };
+    const resolved = findOnWindowsPath("az", env);
+    if (!resolved)
+        return null;
+    const extension = path.extname(resolved).toLowerCase();
+    if (extension === ".exe" || extension === ".com") {
+        return { command: resolved, prefixArgs: [], source: resolved };
+    }
+    // MSI install: wbin\az.cmd runs "..\python.exe -IBm azure.cli %*" with AZ_INSTALLER=MSI.
+    const bundledPython = path.join(path.dirname(resolved), "..", "python.exe");
+    if (path.basename(path.dirname(resolved)).toLowerCase() === "wbin" && fs.existsSync(bundledPython)) {
+        return {
+            command: path.resolve(bundledPython),
+            prefixArgs: ["-IBm", "azure.cli"],
+            env: { AZ_INSTALLER: "MSI" },
+            source: resolved,
+        };
+    }
+    return { command: env.ComSpec ?? "cmd.exe", prefixArgs: [], batchScript: resolved, source: resolved };
+}
+/** Builds the cmd.exe /s /c payload. Rejects characters cmd.exe would reinterpret even inside quotes. */
+function buildBatchCommandLine(script, args) {
+    for (const value of [script, ...args]) {
+        if (/["%\r\n]/.test(value)) {
+            throw new Error(`Azure CLI argument cannot be passed safely through ${path.basename(script)}: ${JSON.stringify(value)}`);
+        }
+    }
+    return `"${[script, ...args].map((value) => `"${value}"`).join(" ")}"`;
+}
+let cachedInvocation;
+function getAzCliInvocation() {
+    if (cachedInvocation === undefined)
+        cachedInvocation = resolveAzCliInvocation();
+    return cachedInvocation;
+}
+function resetAzCliInvocationCache() {
+    cachedInvocation = undefined;
+}
+/** Test hook: pin the resolved invocation (null = not found). */
+function setAzCliInvocationForTesting(invocation) {
+    cachedInvocation = invocation;
+}
+function runAzCli(args, options = {}) {
+    const invocation = options.invocation === undefined ? getAzCliInvocation() : options.invocation;
+    if (!invocation) {
+        return { status: null, stdout: "", stderr: "", error: Object.assign(new Error("az was not found on PATH"), { code: "ENOENT" }) };
+    }
+    const spawnOptions = {
+        shell: false,
+        encoding: "utf-8",
+        timeout: options.timeout ?? 300000,
+        env: invocation.env ? { ...process.env, ...invocation.env } : process.env,
+    };
+    let result;
+    try {
+        result = invocation.batchScript
+            ? (0, child_process_1.spawnSync)(invocation.command, ["/d", "/s", "/v:off", "/c", buildBatchCommandLine(invocation.batchScript, args)], {
+                ...spawnOptions,
+                windowsVerbatimArguments: true,
+            })
+            : (0, child_process_1.spawnSync)(invocation.command, [...invocation.prefixArgs, ...args], spawnOptions);
+    }
+    catch (error) {
+        return { status: null, stdout: "", stderr: "", error: error instanceof Error ? error : new Error(String(error)) };
+    }
+    return {
+        status: result.status,
+        stdout: String(result.stdout ?? ""),
+        stderr: String(result.stderr ?? ""),
+        ...(result.error ? { error: result.error } : {}),
+    };
+}
+function checkAzCliAvailability() {
+    const invocation = getAzCliInvocation();
+    if (!invocation) {
+        return { available: false, reason: "not-found", detail: "az was not found on PATH." };
+    }
+    const result = runAzCli(["--version"], { timeout: 60000, invocation });
+    if (result.status === 0)
+        return { available: true, invocation };
+    const errorCode = result.error?.code;
+    if (errorCode === "ENOENT") {
+        return { available: false, reason: "not-found", detail: "az was not found on PATH." };
+    }
+    const output = `${result.stderr || result.stdout}`.trim().split(/\r?\n/).slice(-3).join(" ");
+    return {
+        available: false,
+        reason: "not-runnable",
+        detail: `${invocation.source} could not run "az --version" (${result.error?.message ?? `exit ${result.status}`})${output ? `: ${output}` : ""}`,
+    };
+}
+//# sourceMappingURL=azure-cli.js.map

package/dist/utils/azure-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-cli.js","sourceRoot":"","sources":["../../src/utils/azure-cli.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CH,wDAyBC;AAGD,sDAOC;AAID,gDAGC;AAED,8DAEC;AAGD,oEAEC;AAED,4BA+BC;AAED,wDAiBC;AAhJD,iDAA4D;AAC5D,uCAAyB;AACzB,2CAA6B;AAuB7B,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAsB;IAC7D,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACrH,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,SAAS,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAEjF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,yFAAyF;IACzF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACnG,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YACpC,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;YACjC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;YAC5B,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACxG,CAAC;AAED,yGAAyG;AACzG,SAAgB,qBAAqB,CAAC,MAAc,EAAE,IAAc;IAClE,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3H,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACzE,CAAC;AAED,IAAI,gBAAoD,CAAC;AAEzD,SAAgB,kBAAkB;IAChC,IAAI,gBAAgB,KAAK,SAAS;QAAE,gBAAgB,GAAG,sBAAsB,EAAE,CAAC;IAChF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAgB,yBAAyB;IACvC,gBAAgB,GAAG,SAAS,CAAC;AAC/B,CAAC;AAED,iEAAiE;AACjE,SAAgB,4BAA4B,CAAC,UAA8C;IACzF,gBAAgB,GAAG,UAAU,CAAC;AAChC,CAAC;AAED,SAAgB,QAAQ,CACtB,IAAc,EACd,UAAqE,EAAE;IAEvE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAChG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACnI,CAAC;IACD,MAAM,YAAY,GAAqB;QACrC,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAO;QACnC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;KAC1E,CAAC;IACF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,WAAW;YAC7B,CAAC,CAAC,IAAA,yBAAS,EAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE;gBACjH,GAAG,YAAY;gBACf,wBAAwB,EAAE,IAAI;aAC/B,CAAC;YACF,CAAC,CAAC,IAAA,yBAAS,EAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACpH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB;IACpC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,KAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAChE,MAAM,SAAS,GAAI,MAAM,CAAC,KAA2C,EAAE,IAAI,CAAC;IAC5E,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,kCAAkC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;KAChJ,CAAC;AACJ,CAAC"}

package/dist/utils/semver.d.ts

@@ -0,0 +1,14 @@
+export interface ParsedSemver {
+    major: number;
+    minor: number;
+    patch: number;
+    prerelease: Array<string | number>;
+}
+export declare function parseSemver(value: string | null | undefined): ParsedSemver | null;
+export declare function isPrerelease(value: string): boolean;
+/**
+ * Compares versions by SemVer 2.0 precedence. Build metadata is ignored.
+ * Returns null when either value is not a valid version.
+ */
+export declare function compareSemver(left: string, right: string): number | null;
+//# sourceMappingURL=semver.d.ts.map

package/dist/utils/semver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../src/utils/semver.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;CACpC;AAKD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAWjF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2BxE"}

package/dist/utils/semver.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSemver = parseSemver;
+exports.isPrerelease = isPrerelease;
+exports.compareSemver = compareSemver;
+const SEMVER_PATTERN = /^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+function parseSemver(value) {
+    const match = typeof value === "string" ? SEMVER_PATTERN.exec(value.trim()) : null;
+    if (!match)
+        return null;
+    return {
+        major: Number(match[1]),
+        minor: Number(match[2]),
+        patch: Number(match[3]),
+        prerelease: match[4]
+            ? match[4].split(".").map((identifier) => (/^\d+$/.test(identifier) ? Number(identifier) : identifier))
+            : [],
+    };
+}
+function isPrerelease(value) {
+    return (parseSemver(value)?.prerelease.length ?? 0) > 0;
+}
+/**
+ * Compares versions by SemVer 2.0 precedence. Build metadata is ignored.
+ * Returns null when either value is not a valid version.
+ */
+function compareSemver(left, right) {
+    const a = parseSemver(left);
+    const b = parseSemver(right);
+    if (!a || !b)
+        return null;
+    for (const key of ["major", "minor", "patch"]) {
+        if (a[key] !== b[key])
+            return a[key] < b[key] ? -1 : 1;
+    }
+    if (a.prerelease.length === 0 || b.prerelease.length === 0) {
+        if (a.prerelease.length === b.prerelease.length)
+            return 0;
+        return a.prerelease.length === 0 ? 1 : -1;
+    }
+    const length = Math.max(a.prerelease.length, b.prerelease.length);
+    for (let index = 0; index < length; index++) {
+        const leftId = a.prerelease[index];
+        const rightId = b.prerelease[index];
+        if (leftId === undefined)
+            return -1;
+        if (rightId === undefined)
+            return 1;
+        if (leftId === rightId)
+            continue;
+        if (typeof leftId === "number" && typeof rightId === "number")
+            return leftId < rightId ? -1 : 1;
+        if (typeof leftId === "number")
+            return -1;
+        if (typeof rightId === "number")
+            return 1;
+        return leftId < rightId ? -1 : 1;
+    }
+    return 0;
+}
+//# sourceMappingURL=semver.js.map

package/dist/utils/semver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../src/utils/semver.ts"],"names":[],"mappings":";;AAUA,kCAWC;AAED,oCAEC;AAMD,sCA2BC;AAnDD,MAAM,cAAc,GAClB,qLAAqL,CAAC;AAExL,SAAgB,WAAW,CAAC,KAAgC;IAC1D,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvG,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1B,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,OAAO;YAAE,SAAS;QACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAC;QAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "swallowkit",
-  "version": "2.0.0-alpha.3",
+  "version": "2.0.0-alpha.4",
   "description": "Type-safe schema-driven development toolkit for Next.js and React applications on Azure",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/__tests__/__snapshots__/boundaries.test.ts.snap

@@ -0,0 +1,154 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`inspect boundaries convention rules matches the csharp backend 1`] = `
+[
+  {
+    "description": "SwallowKit metadata (manifest, artifact ledger, plan state). Managed by tooling only.",
+    "editPolicy": "never-hand-edit",
+    "pattern": ".swallowkit/",
+    "zone": "deterministic",
+  },
+  {
+    "description": "Zod model schemas — the single source of truth. AI/developers author these freely; deterministic generation derives everything else from them.",
+    "editPolicy": "free-edit",
+    "pattern": "shared/models/",
+    "zone": "ai-authored",
+  },
+  {
+    "description": "Infrastructure migration ledger with baseline checksums. Updated by scaffold, \`swallowkit migrations add-model\`, and \`swallowkit create-migration\`.",
+    "editPolicy": "never-hand-edit",
+    "pattern": "infra/migrations/manifest.json",
+    "zone": "deterministic",
+  },
+  {
+    "description": "Versioned Bicep migrations. Edit a migration only before it is provisioned; never change an applied migration — add a new one with \`swallowkit create-migration <slug>\`.",
+    "editPolicy": "free-edit",
+    "pattern": "infra/migrations/",
+    "zone": "ai-authored",
+  },
+  {
+    "description": "Baseline infrastructure (main.bicep and modules) whose checksums are recorded in infra/migrations/manifest.json. Hand edits block scaffold with baseline-drift; add resources through a new migration instead.",
+    "editPolicy": "never-hand-edit",
+    "pattern": "infra/",
+    "zone": "deterministic",
+  },
+  {
+    "description": "SwallowKit appends model exports; other exports may be added freely.",
+    "editPolicy": "edit-outside-markers",
+    "pattern": "shared/index.ts",
+    "zone": "shared",
+  },
+  {
+    "description": "Any path not recorded in the artifact ledger is AI/developer-authored. Business logic, custom pages, custom Functions, and tests belong here.",
+    "editPolicy": "free-edit",
+    "pattern": "*",
+    "zone": "ai-authored",
+  },
+]
+`;
+
+exports[`inspect boundaries convention rules matches the python backend 1`] = `
+[
+  {
+    "description": "SwallowKit metadata (manifest, artifact ledger, plan state). Managed by tooling only.",
+    "editPolicy": "never-hand-edit",
+    "pattern": ".swallowkit/",
+    "zone": "deterministic",
+  },
+  {
+    "description": "Zod model schemas — the single source of truth. AI/developers author these freely; deterministic generation derives everything else from them.",
+    "editPolicy": "free-edit",
+    "pattern": "shared/models/",
+    "zone": "ai-authored",
+  },
+  {
+    "description": "Infrastructure migration ledger with baseline checksums. Updated by scaffold, \`swallowkit migrations add-model\`, and \`swallowkit create-migration\`.",
+    "editPolicy": "never-hand-edit",
+    "pattern": "infra/migrations/manifest.json",
+    "zone": "deterministic",
+  },
+  {
+    "description": "Versioned Bicep migrations. Edit a migration only before it is provisioned; never change an applied migration — add a new one with \`swallowkit create-migration <slug>\`.",
+    "editPolicy": "free-edit",
+    "pattern": "infra/migrations/",
+    "zone": "ai-authored",
+  },
+  {
+    "description": "Baseline infrastructure (main.bicep and modules) whose checksums are recorded in infra/migrations/manifest.json. Hand edits block scaffold with baseline-drift; add resources through a new migration instead.",
+    "editPolicy": "never-hand-edit",
+    "pattern": "infra/",
+    "zone": "deterministic",
+  },
+  {
+    "description": "SwallowKit appends model exports; other exports may be added freely.",
+    "editPolicy": "edit-outside-markers",
+    "pattern": "shared/index.ts",
+    "zone": "shared",
+  },
+  {
+    "description": "SwallowKit appends blueprint registrations under its marker; other edits are free.",
+    "editPolicy": "edit-outside-markers",
+    "pattern": "functions/function_app.py",
+    "zone": "shared",
+  },
+  {
+    "description": "SwallowKit appends connector driver requirements when connector models are scaffolded; keep those lines and edit other requirements freely.",
+    "editPolicy": "free-edit",
+    "pattern": "functions/requirements.txt",
+    "zone": "shared",
+  },
+  {
+    "description": "Any path not recorded in the artifact ledger is AI/developer-authored. Business logic, custom pages, custom Functions, and tests belong here.",
+    "editPolicy": "free-edit",
+    "pattern": "*",
+    "zone": "ai-authored",
+  },
+]
+`;
+
+exports[`inspect boundaries convention rules matches the typescript backend 1`] = `
+[
+  {
+    "description": "SwallowKit metadata (manifest, artifact ledger, plan state). Managed by tooling only.",
+    "editPolicy": "never-hand-edit",
+    "pattern": ".swallowkit/",
+    "zone": "deterministic",
+  },
+  {
+    "description": "Zod model schemas — the single source of truth. AI/developers author these freely; deterministic generation derives everything else from them.",
+    "editPolicy": "free-edit",
+    "pattern": "shared/models/",
+    "zone": "ai-authored",
+  },
+  {
+    "description": "Infrastructure migration ledger with baseline checksums. Updated by scaffold, \`swallowkit migrations add-model\`, and \`swallowkit create-migration\`.",
+    "editPolicy": "never-hand-edit",
+    "pattern": "infra/migrations/manifest.json",
+    "zone": "deterministic",
+  },
+  {
+    "description": "Versioned Bicep migrations. Edit a migration only before it is provisioned; never change an applied migration — add a new one with \`swallowkit create-migration <slug>\`.",
+    "editPolicy": "free-edit",
+    "pattern": "infra/migrations/",
+    "zone": "ai-authored",
+  },
+  {
+    "description": "Baseline infrastructure (main.bicep and modules) whose checksums are recorded in infra/migrations/manifest.json. Hand edits block scaffold with baseline-drift; add resources through a new migration instead.",
+    "editPolicy": "never-hand-edit",
+    "pattern": "infra/",
+    "zone": "deterministic",
+  },
+  {
+    "description": "SwallowKit appends model exports; other exports may be added freely.",
+    "editPolicy": "edit-outside-markers",
+    "pattern": "shared/index.ts",
+    "zone": "shared",
+  },
+  {
+    "description": "Any path not recorded in the artifact ledger is AI/developer-authored. Business logic, custom pages, custom Functions, and tests belong here.",
+    "editPolicy": "free-edit",
+    "pattern": "*",
+    "zone": "ai-authored",
+  },
+]
+`;