Implement V2 (HAL-based) SSPR flow for native auth

.clinerules/04-Code-style-guidelines.md

@@ -555,3 +555,84 @@ All new files **MUST** include the Microsoft copyright header when added to this
 ## Notes
 
 This style guide is adapted specifically for AI agents working on the Microsoft Authentication Library (MSAL) for iOS and macOS. When in doubt, prioritize consistency with existing codebase patterns over strict adherence to external style guides.
+
+---
+
+## Swift Style (native_auth)
+
+The Swift code under `MSAL/src/native_auth`) **MUST** follow the SwiftLint rules from `MSAL/.swiftlint.yml`.
+
+### SwiftLint configuration (source of truth: `MSAL/.swiftlint.yml`)
+
+- `line_length`: warning at **150** columns.
+- `type_name`: max length **60**.
+- `function_parameter_count`: warning at **7**.
+- Disabled rules: `todo`, `empty_enum_arguments`.
+- Default limits apply for `function_body_length` (**50**), `cyclomatic_complexity` (**10**), `file_length`, and `type_body_length`.
+
+Changed native_auth Swift files **MUST** lint clean (zero warnings) before completion:
+
+```bash
+swiftlint lint --quiet MSAL/src/native_auth/<changed-file>.swift
+```
+
+### Line length — WRAP, don't suppress
+
+When a call or declaration exceeds 150 columns, **wrap it** — put each argument on its own line, indented 4 spaces beyond the call, with the closing paren on its own line.
+
+```swift
+return await mapInteraction(
+    startResult,
+    flowType: .signIn,
+    username: parameters.username,
+    scopes: scopes,
+    event: event,
+    context: context
+)
+```
+
+Wrap long ternaries, `makeState(...)`, `response(.actionRequired(...))`, and `try self.requestProvider.foo(...)` calls the same way. For a long nested constructor, break the inner initializer onto its own lines too:
+
+```swift
+return failure(
+    .error(MSALNativeAuthFlowError(
+        kind: .generalError,
+        errorDescription: "No usable sign-in method returned"
+    )),
+    event: event,
+    context: context
+)
+```
+
+**Only** suppress `line_length` inline — `// swiftlint:disable:this line_length` — for an un-wrappable single string literal (log/error message). Never use it to avoid wrapping ordinary code.
+
+### Method / call declaration formatting
+
+- One parameter per line when a declaration exceeds the line limit; closing paren and `-> ReturnType` on their own line.
+- 4-space indentation, never tabs.
+
+### function_body_length & cyclomatic_complexity — prefer suppression over refactor
+
+Long orchestration methods that legitimately exceed the 50-line body limit should suppress the warning rather than fragmenting the logic across helpers. Do **not** refactor control flow purely to satisfy the linter.
+
+- Add the suppression on the line immediately above the `func`:
+
+  ```swift
+  // swiftlint:disable:next function_body_length
+  private func handleResponse(...) { ... }
+  ```
+
+- When a function trips **both** rules, combine them on one line (see `MSALNativeAuthTokenResponseValidator.swift`):
+
+  ```swift
+  // swiftlint:disable:next cyclomatic_complexity function_body_length
+  func validate(...) { ... }
+  ```
+
+- For file- or type-level limits, use the block form at the top of the file / above the type:
+
+  ```swift
+  // swiftlint:disable file_length
+  // swiftlint:disable:next type_body_length
+  final class MSALNativeAuth...Controller { ... }
+  ```

.clinerules/AGENTS.md

@@ -26,6 +26,14 @@ When creating a new application with MSAL authentication, users need to select a
 | **Authority Endpoint** | Uses tenant ID or common | Uses tenant subdomain |
 | **Use Cases** | Enterprise apps, B2E scenarios | Consumer apps, B2C scenarios |
 
+## Build and test guidelines
+
+AI agents MUST build and run tests using the build/test configuration already set up in Xcode — i.e. the schemes defined in `MSAL.xcworkspace`, driven through `build.py` (e.g. `./build.py --targets iosFramework macFramework`). Always use `MSAL.xcworkspace`, never open or build `MSAL.xcodeproj` directly, and do not invent ad-hoc `xcodebuild` invocations, schemes, or configurations that diverge from the ones configured in the workspace. If a build/test run needs a specific simulator, select an available one via the `IOS_SIM_DEVICE` / `IOS_SIM_OS` environment variables (consumed by `build.py`) rather than changing the scheme or configuration.
+
+## Version control guidelines
+
+AI agents MUST NOT run `git commit`, `git push`, or any other history- or remote-mutating git command unless the user has explicitly asked for it in the current request. Make and stage changes, then stop and let the user review; wait for an explicit instruction before committing or pushing. Never commit or push proactively "to be helpful" — the user always reviews changes first.
+
 ## MSAL API usage
 
 Sample code snippets for both Swift & Objective-C can be found in the file `.clinerules/03-MSAL-API-usage.md`

CLAUDE.md

@@ -79,6 +79,7 @@ Public headers MUST be in:
 5. **Prefixes:** `MSAL` for public classes, `MSID` for IdentityCore internal
 6. **Properties over ivars:** Use `@property` declarations
 7. **Swift lint:** Native auth code must pass SwiftLint (line length: 150)
+8. **Comments:** Only comment non-obvious rationale. Don't add comments that explain what the code already explains.
 
 **Example:**