@broadcom/mat-analyze-for-zowe-cli 2.0.7 → 2.1.0

package/lib/api/response/ITranview.js

@@ -1,25 +1,23 @@
 "use strict";
 /*
- * Copyright (c) 2023 Broadcom.  All Rights Reserved.  The term
- * "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
+ * **************************************************************************************
+ * Copyright © 2025 BROADCOM Inc and/or its subsidiaries.
  *
- * This software and all information contained therein is
- * confidential and proprietary and shall not be duplicated,
- * used, disclosed, or disseminated in any way except as
- * authorized by the applicable license agreement, without the
- * express written permission of Broadcom.  All authorized
- * reproductions must be marked with this language.
+ * This software and all information contained therein is confidential and
+ * proprietary and shall not be duplicated, used, disclosed or disseminated in any
+ * way except as authorized by the applicable license agreement, without the
+ * express written permission of Broadcom. All authorized reproductions must be marked
+ * with this language.
+ *
+ * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO THE EXTENT PERMITTED
+ * BY APPLICABLE LAW, BROADCOM PROVIDES THIS SOFTWARE WITHOUT WARRANTY OF ANY KIND,
+ * INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
+ * FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT WILL BROADCOM BE LIABLE TO THE END USER
+ * OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF
+ * THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS INTERRUPTION,
+ * GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
+ * **************************************************************************************
  *
- * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO
- * THE EXTENT PERMITTED BY APPLICABLE LAW, BROADCOM PROVIDES THIS
- * SOFTWARE WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT
- * LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
- * FITNESS FOR A PARTICULAR PURPOSE.  IN NO EVENT WILL BROADCOM
- * BE LIABLE TO THE END USER OR ANY THIRD PARTY FOR ANY LOSS OR
- * DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS SOFTWARE,
- * INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS
- * INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS
- * EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 //# sourceMappingURL=ITranview.js.map

package/lib/api/response/ITranview.js.map

@@ -1 +1 @@
-{"version":3,"file":"ITranview.js","sourceRoot":"","sources":["../../../src/api/response/ITranview.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}
+{"version":3,"file":"ITranview.js","sourceRoot":"","sources":["../../../src/api/response/ITranview.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/lib/cli/monitor/Monitor.definition.js

@@ -1,25 +1,23 @@
 "use strict";
 /*
- * Copyright (c) 2023 Broadcom.  All Rights Reserved.  The term
- * "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
+ * **************************************************************************************
+ * Copyright © 2025 BROADCOM Inc and/or its subsidiaries.
  *
- * This software and all information contained therein is
- * confidential and proprietary and shall not be duplicated,
- * used, disclosed, or disseminated in any way except as
- * authorized by the applicable license agreement, without the
- * express written permission of Broadcom.  All authorized
- * reproductions must be marked with this language.
+ * This software and all information contained therein is confidential and
+ * proprietary and shall not be duplicated, used, disclosed or disseminated in any
+ * way except as authorized by the applicable license agreement, without the
+ * express written permission of Broadcom. All authorized reproductions must be marked
+ * with this language.
+ *
+ * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO THE EXTENT PERMITTED
+ * BY APPLICABLE LAW, BROADCOM PROVIDES THIS SOFTWARE WITHOUT WARRANTY OF ANY KIND,
+ * INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
+ * FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT WILL BROADCOM BE LIABLE TO THE END USER
+ * OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF
+ * THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS INTERRUPTION,
+ * GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
+ * **************************************************************************************
  *
- * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO
- * THE EXTENT PERMITTED BY APPLICABLE LAW, BROADCOM PROVIDES THIS
- * SOFTWARE WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT
- * LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
- * FITNESS FOR A PARTICULAR PURPOSE.  IN NO EVENT WILL BROADCOM
- * BE LIABLE TO THE END USER OR ANY THIRD PARTY FOR ANY LOSS OR
- * DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS SOFTWARE,
- * INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS
- * INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS
- * EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
  */
 /**
  * [action] command definition for the [action] two group. The [action] is of imperative command definition type

package/lib/cli/monitor/Monitor.definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"Monitor.definition.js","sourceRoot":"","sources":["../../../src/cli/monitor/Monitor.definition.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH;;;;;;;;;;;;GAYG;AACH,wEAAoE;AACpE,qEAAsE;AACtE,wEAAyE;AACzE,qEAAsE;AACtE,yDAA0D;AAC1D,sDAAuD;AACvD,sDAAuD;AAEvD,qEAAiE;AACjE,sDAAmD;AACnD,MAAM,iBAAiB,GAAuB;IAC1C,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,kBAAkB;IAC3B,WAAW,EAAE,6DAA6D;IAC1E,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,CAAC,wCAAkB,EAAE,kBAAkB,EAAE,mBAAmB;QAClE,sCAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc;QACpE,aAAa,CAAC;IAClB,MAAM,EAAE;QACJ;YACI,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,uBAAU,CAAC,sBAAsB;YACxC,KAAK,EAAE,IAAI;YACX,WAAW,EAAE;gBACT,EAAC,IAAI,EAAE,OAAO,EAAC;aAClB;SACJ;KACJ;CACJ,CAAC;AAEF,iBAAS,iBAAiB,CAAC"}
+{"version":3,"file":"Monitor.definition.js","sourceRoot":"","sources":["../../../src/cli/monitor/Monitor.definition.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH;;;;;;;;;;;;GAYG;AACH,wEAAoE;AACpE,qEAAsE;AACtE,wEAAyE;AACzE,qEAAsE;AACtE,yDAA0D;AAC1D,sDAAuD;AACvD,sDAAuD;AAEvD,qEAAiE;AACjE,sDAAmD;AACnD,MAAM,iBAAiB,GAAuB;IAC1C,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,kBAAkB;IAC3B,WAAW,EAAE,6DAA6D;IAC1E,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,CAAC,wCAAkB,EAAE,kBAAkB,EAAE,mBAAmB;QAClE,sCAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc;QACpE,aAAa,CAAC;IAClB,MAAM,EAAE;QACJ;YACI,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,uBAAU,CAAC,sBAAsB;YACxC,KAAK,EAAE,IAAI;YACX,WAAW,EAAE;gBACT,EAAC,IAAI,EAAE,OAAO,EAAC;aAClB;SACJ;KACJ;CACJ,CAAC;AAEF,iBAAS,iBAAiB,CAAC"}

package/lib/cli/monitor/codeview/Codeview.definition.js

@@ -1,25 +1,23 @@
 "use strict";
 /*
- * Copyright (c) 2023 Broadcom.  All Rights Reserved.  The term
- * "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
+ * **************************************************************************************
+ * Copyright © 2025 BROADCOM Inc and/or its subsidiaries.
  *
- * This software and all information contained therein is
- * confidential and proprietary and shall not be duplicated,
- * used, disclosed, or disseminated in any way except as
- * authorized by the applicable license agreement, without the
- * express written permission of Broadcom.  All authorized
- * reproductions must be marked with this language.
+ * This software and all information contained therein is confidential and
+ * proprietary and shall not be duplicated, used, disclosed or disseminated in any
+ * way except as authorized by the applicable license agreement, without the
+ * express written permission of Broadcom. All authorized reproductions must be marked
+ * with this language.
+ *
+ * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO THE EXTENT PERMITTED
+ * BY APPLICABLE LAW, BROADCOM PROVIDES THIS SOFTWARE WITHOUT WARRANTY OF ANY KIND,
+ * INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
+ * FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT WILL BROADCOM BE LIABLE TO THE END USER
+ * OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF
+ * THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS INTERRUPTION,
+ * GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
+ * **************************************************************************************
  *
- * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO
- * THE EXTENT PERMITTED BY APPLICABLE LAW, BROADCOM PROVIDES THIS
- * SOFTWARE WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT
- * LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
- * FITNESS FOR A PARTICULAR PURPOSE.  IN NO EVENT WILL BROADCOM
- * BE LIABLE TO THE END USER OR ANY THIRD PARTY FOR ANY LOSS OR
- * DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS SOFTWARE,
- * INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS
- * INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS
- * EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
  */
 const Csect_definition_1 = require("./csect/Csect.definition");
 const Module_definition_1 = require("./module/Module.definition");

package/lib/cli/monitor/codeview/Codeview.definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"Codeview.definition.js","sourceRoot":"","sources":["../../../../src/cli/monitor/codeview/Codeview.definition.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,+DAA2D;AAC3D,kEAA8D;AAC9D,wEAAoE;AACpE,2EAAuE;AACvE;;;;;;;;;;;;GAYG;AAEH,MAAM,kBAAkB,GAAuB;IAC3C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,mBAAmB;IAC5B,WAAW,EAAE,uCAAuC;IACpD,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,CAAC,kCAAe,EAAE,oCAAgB,EAAE,wCAAkB,EAAE,0CAAmB,CAAC;CACzF,CAAC;AAEF,iBAAS,kBAAkB,CAAC"}
+{"version":3,"file":"Codeview.definition.js","sourceRoot":"","sources":["../../../../src/cli/monitor/codeview/Codeview.definition.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,+DAA2D;AAC3D,kEAA8D;AAC9D,wEAAoE;AACpE,2EAAuE;AACvE;;;;;;;;;;;;GAYG;AAEH,MAAM,kBAAkB,GAAuB;IAC3C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,mBAAmB;IAC5B,WAAW,EAAE,uCAAuC;IACpD,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,CAAC,kCAAe,EAAE,oCAAgB,EAAE,wCAAkB,EAAE,0CAAmB,CAAC;CACzF,CAAC;AAEF,iBAAS,kBAAkB,CAAC"}

package/lib/cli/monitor/codeview/Histogram/Histogram.definition.js

@@ -1,28 +1,27 @@
 "use strict";
 /*
- * Copyright (c) 2023 Broadcom.  All Rights Reserved.  The term
- * "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
+ * **************************************************************************************
+ * Copyright © 2025 BROADCOM Inc and/or its subsidiaries.
  *
- * This software and all information contained therein is
- * confidential and proprietary and shall not be duplicated,
- * used, disclosed, or disseminated in any way except as
- * authorized by the applicable license agreement, without the
- * express written permission of Broadcom.  All authorized
- * reproductions must be marked with this language.
+ * This software and all information contained therein is confidential and
+ * proprietary and shall not be duplicated, used, disclosed or disseminated in any
+ * way except as authorized by the applicable license agreement, without the
+ * express written permission of Broadcom. All authorized reproductions must be marked
+ * with this language.
+ *
+ * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO THE EXTENT PERMITTED
+ * BY APPLICABLE LAW, BROADCOM PROVIDES THIS SOFTWARE WITHOUT WARRANTY OF ANY KIND,
+ * INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
+ * FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT WILL BROADCOM BE LIABLE TO THE END USER
+ * OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF
+ * THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS INTERRUPTION,
+ * GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
+ * **************************************************************************************
  *
- * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO
- * THE EXTENT PERMITTED BY APPLICABLE LAW, BROADCOM PROVIDES THIS
- * SOFTWARE WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT
- * LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
- * FITNESS FOR A PARTICULAR PURPOSE.  IN NO EVENT WILL BROADCOM
- * BE LIABLE TO THE END USER OR ANY THIRD PARTY FOR ANY LOSS OR
- * DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS SOFTWARE,
- * INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS
- * INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS
- * EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HistogramDefinition = void 0;
+const EndevorSession_1 = require("../../../session/EndevorSession");
 exports.HistogramDefinition = {
     name: "histogram",
     aliases: ["hsg"],
@@ -81,9 +80,10 @@ exports.HistogramDefinition = {
         {
             name: "listing",
             description: "Enables you to retrieve program listing details that pertain to the specific CSECT and statement. " +
-                "To use the listing retrieval option, you must install and configure the Endevor® Web Services and have the " +
-                "program listing for the specific measurement registered with MAT. The source code listing is retrieved " +
-                "through Endevor® footprints for Cobol, C/C++, and Assembler programs. The program listing file is downloaded " +
+                "To use the listing retrieval option, ensure that the program listing for the specific measurement is registered with MAT, " +
+                "and that you have the Endevor® Web Services connection configured locally via the --endevor-* " +
+                "options below (or the ZOWE_OPT_ENDEVOR_* environment variable). The source code listing is retrieved through Endevor® " +
+                "footprints for Cobol, C/C++, and Assembler programs. The program listing file is downloaded " +
                 "to your local directory that you specified with the \'listingDir\' parameter in your MAT configuration profile. " +
                 "When you request the histogram details with the \'--listing\' option, the \'histogram\' command returns the " +
                 "additional \'listing\' column that contains a reference to the program listing with the specific CSECT name, " +
@@ -92,7 +92,8 @@ exports.HistogramDefinition = {
                 "command responce in your VS Code terminal to navigate directly to the indicated source program location." +
                 "The --listing parameter is optional.",
             type: "boolean"
-        }
+        },
+        ...EndevorSession_1.EndevorSession.ENDEVOR_CONNECTION_OPTIONS
     ],
     examples: [
         {
@@ -114,6 +115,16 @@ exports.HistogramDefinition = {
                 "with the specific MAT profile details defined",
             options: "--mon_num 5 --csect \"TUNCOB01\" --module \"RUNCOB\" --host \"example.com\" --port 12345 --user johndoe --password qwerty",
         },
+        {
+            description: "Get the Histogram details about listing retrieval with the re-used MAT profile credentials for a locally-configured Endevor host options",
+            options: "--csect \"TUNCOB01\" --listing --endevor-host \"endevor.example.com\" --endevor-port 8080 " +
+                "--endevor-base-path \"EndevorService/rest\" --endevor-reuse-mat-credentials",
+        },
+        {
+            description: "Get the Histogram details about listing retrieval with Endevor-specific credential options",
+            options: "--csect \"TUNCOB01\" --listing --endevor-host \"endevor.example.com\" --endevor-port 8080 " +
+                "--endevor-base-path \"EndevorService/rest\" --endevor-user janedoe --endevor-password qwerty",
+        },
     ]
 };
 //# sourceMappingURL=Histogram.definition.js.map

package/lib/cli/monitor/codeview/Histogram/Histogram.definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"Histogram.definition.js","sourceRoot":"","sources":["../../../../../src/cli/monitor/codeview/Histogram/Histogram.definition.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAGU,QAAA,mBAAmB,GAAuB;IACnD,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,OAAO,EAAE,oBAAoB;IAC7B,WAAW,EAAE,gDAAgD;IAC7D,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS,GAAG,oBAAoB;IACzC,OAAO,EAAE;QACL,QAAQ,EAAE,CAAC,KAAK,CAAC;KACpB;IACD,OAAO,EAAE;QACL;YACI,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,8DAA8D;gBAC3E,iFAAiF;gBACjF,+BAA+B;YAC/B,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,yDAAyD;YACtE,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qEAAqE;gBAClF,yEAAyE;gBACzE,iFAAiF;YACjF,IAAI,EAAE,eAAe;SACxB;QACD;YACI,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,oEAAoE;gBACjF,oGAAoG;gBACpG,oDAAoD;YACpD,IAAI,EAAE,eAAe;SACxB;QACD;YACI,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,4FAA4F;gBACzG,2GAA2G;gBAC3G,6FAA6F;gBAC7F,qCAAqC;gBACrC,sGAAsG;gBACtG,uCAAuC;YACvC,IAAI,EAAE,eAAe;SACxB;QACD;YACI,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,6EAA6E;gBAC1F,mFAAmF;gBACnF,gGAAgG;gBAChG,qEAAqE;YACrE,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,oGAAoG;gBACjH,6GAA6G;gBAC7G,yGAAyG;gBACzG,+GAA+G;gBAC/G,kHAAkH;gBAClH,8GAA8G;gBAC9G,+GAA+G;gBAC/G,uGAAuG;gBACvG,qHAAqH;gBACrH,0GAA0G;gBAC1G,sCAAsC;YACtC,IAAI,EAAE,SAAS;SAClB;KACJ;IACD,QAAQ,EAAE;QACN;YACI,WAAW,EAAE,6FAA6F;YAC1G,OAAO,EAAE,sDAAsD;SAClE;QACD;YACI,WAAW,EAAE,oGAAoG;gBACjH,8GAA8G;YAC9G,OAAO,EAAE,8EAA8E;SAC1F;QACF;YACK,WAAW,EAAE,+FAA+F;gBAC5G,0FAA0F;YAC1F,OAAO,EAAE,wEAAwE;SACpF;QACD;YACI,WAAW,EAAE,+FAA+F;gBAC5G,+CAA+C;YAC/C,OAAO,EAAE,2HAA2H;SACvI;KACJ;CACJ,CAAC"}
+{"version":3,"file":"Histogram.definition.js","sourceRoot":"","sources":["../../../../../src/cli/monitor/codeview/Histogram/Histogram.definition.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAGH,oEAAiE;AACpD,QAAA,mBAAmB,GAAuB;IACnD,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,OAAO,EAAE,oBAAoB;IAC7B,WAAW,EAAE,gDAAgD;IAC7D,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS,GAAG,oBAAoB;IACzC,OAAO,EAAE;QACL,QAAQ,EAAE,CAAC,KAAK,CAAC;KACpB;IACD,OAAO,EAAE;QACL;YACI,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,8DAA8D;gBAC3E,iFAAiF;gBACjF,+BAA+B;YAC/B,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,yDAAyD;YACtE,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qEAAqE;gBAClF,yEAAyE;gBACzE,iFAAiF;YACjF,IAAI,EAAE,eAAe;SACxB;QACD;YACI,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,oEAAoE;gBACjF,oGAAoG;gBACpG,oDAAoD;YACpD,IAAI,EAAE,eAAe;SACxB;QACD;YACI,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,4FAA4F;gBACzG,2GAA2G;gBAC3G,6FAA6F;gBAC7F,qCAAqC;gBACrC,sGAAsG;gBACtG,uCAAuC;YACvC,IAAI,EAAE,eAAe;SACxB;QACD;YACI,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,6EAA6E;gBAC1F,mFAAmF;gBACnF,gGAAgG;gBAChG,qEAAqE;YACrE,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,oGAAoG;gBAC7G,4HAA4H;gBAC5H,gGAAgG;gBAChG,wHAAwH;gBACxH,8FAA8F;gBAC9F,kHAAkH;gBAClH,8GAA8G;gBAC9G,+GAA+G;gBAC/G,uGAAuG;gBACvG,qHAAqH;gBACrH,0GAA0G;gBAC1G,sCAAsC;YAC1C,IAAI,EAAE,SAAS;SAClB;QACD,GAAG,+BAAc,CAAC,0BAA0B;KAC/C;IACD,QAAQ,EAAE;QACN;YACI,WAAW,EAAE,6FAA6F;YAC1G,OAAO,EAAE,sDAAsD;SAClE;QACD;YACI,WAAW,EAAE,oGAAoG;gBACjH,8GAA8G;YAC9G,OAAO,EAAE,8EAA8E;SAC1F;QACF;YACK,WAAW,EAAE,+FAA+F;gBAC5G,0FAA0F;YAC1F,OAAO,EAAE,wEAAwE;SACpF;QACD;YACI,WAAW,EAAE,+FAA+F;gBAC5G,+CAA+C;YAC/C,OAAO,EAAE,2HAA2H;SACvI;QACD;YACI,WAAW,EAAE,0IAA0I;YACvJ,OAAO,EAAE,4FAA4F;gBACrG,6EAA6E;SAChF;QACD;YACI,WAAW,EAAE,4FAA4F;YACzG,OAAO,EAAE,4FAA4F;gBACrG,8FAA8F;SACjG;KACJ;CACJ,CAAC"}

package/lib/cli/monitor/codeview/Histogram/Histogram.handler.js

@@ -1,25 +1,23 @@
 "use strict";
 /*
- * Copyright (c) 2023 Broadcom.  All Rights Reserved.  The term
- * "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
+ * **************************************************************************************
+ * Copyright © 2025 BROADCOM Inc and/or its subsidiaries.
  *
- * This software and all information contained therein is
- * confidential and proprietary and shall not be duplicated,
- * used, disclosed, or disseminated in any way except as
- * authorized by the applicable license agreement, without the
- * express written permission of Broadcom.  All authorized
- * reproductions must be marked with this language.
+ * This software and all information contained therein is confidential and
+ * proprietary and shall not be duplicated, used, disclosed or disseminated in any
+ * way except as authorized by the applicable license agreement, without the
+ * express written permission of Broadcom. All authorized reproductions must be marked
+ * with this language.
+ *
+ * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO THE EXTENT PERMITTED
+ * BY APPLICABLE LAW, BROADCOM PROVIDES THIS SOFTWARE WITHOUT WARRANTY OF ANY KIND,
+ * INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
+ * FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT WILL BROADCOM BE LIABLE TO THE END USER
+ * OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF
+ * THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS INTERRUPTION,
+ * GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
+ * **************************************************************************************
  *
- * EXCEPT AS SET FORTH IN THE APPLICABLE LICENSE AGREEMENT, TO
- * THE EXTENT PERMITTED BY APPLICABLE LAW, BROADCOM PROVIDES THIS
- * SOFTWARE WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT
- * LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
- * FITNESS FOR A PARTICULAR PURPOSE.  IN NO EVENT WILL BROADCOM
- * BE LIABLE TO THE END USER OR ANY THIRD PARTY FOR ANY LOSS OR
- * DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS SOFTWARE,
- * INCLUDING WITHOUT LIMITATION, LOST PROFITS, BUSINESS
- * INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF BROADCOM IS
- * EXPRESSLY ADVISED OF SUCH LOSS OR DAMAGE.
  */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
@@ -34,6 +32,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const AbstractAnalyzeHandler_1 = require("../../../../handlers/AbstractAnalyzeHandler");
 const MATRest_1 = require("../../../../api/MATRest");
 const imperative_1 = require("@zowe/imperative");
+const EndevorSession_1 = require("../../../session/EndevorSession");
 const fs = require("fs");
 const path = require("path");
 class HistogramHandler extends AbstractAnalyzeHandler_1.default {
@@ -47,25 +46,37 @@ class HistogramHandler extends AbstractAnalyzeHandler_1.default {
                 footprint = footprint.substring(footprint.indexOf("[") + 1, footprint.indexOf("]"));
                 return JSON.parse(footprint); // Return the parsed footprint object
             },
-            // Construct the REST API request URL using the footprint data
-            constructRequestUrl(jsonFootprint) {
-                return "/" + jsonFootprint.endevorBasePath + "/" + jsonFootprint.endevorContext + "/env/" + jsonFootprint.environment + "/stgnum/"
-                    + jsonFootprint.stage + "/sys/" + jsonFootprint.system + "/subsys/" + jsonFootprint.subsystem + "/type/" + jsonFootprint.type + "/ele/"
-                    + jsonFootprint.element + "?print=listing";
+            // Construct the REST API request URL using the footprint data. endevorBasePath is a
+            // locally-configured value (TUNER-034) -- never taken from the footprint. The remaining
+            // segments only select which resource to fetch on the already-locally-pinned host, but
+            // are still server-supplied strings, so each is percent-encoded before landing in the URL.
+            constructRequestUrl(jsonFootprint, endevorBasePath) {
+                const seg = (value) => encodeURIComponent(String(value));
+                // encodeURI, not seg() -- endevorBasePath can be multi-segment (e.g. "EndevorService/rest").
+                return "/" + encodeURI(endevorBasePath) + "/" + seg(jsonFootprint.endevorContext) + "/env/" + seg(jsonFootprint.environment) + "/stgnum/"
+                    + seg(jsonFootprint.stage) + "/sys/" + seg(jsonFootprint.system) + "/subsys/" + seg(jsonFootprint.subsystem) + "/type/"
+                    + seg(jsonFootprint.type) + "/ele/" + seg(jsonFootprint.element) + "?print=listing";
+            },
+            // Create a session with the required authentication details. Every argument here comes
+            // from the CLI's own locally-configured options (TUNER-034) -- there is no parameter
+            // through which a MAT server response could influence host/port/protocol/creds.
+            createSession(endevorHost, endevorPort, user, password, rejectUnauthorized) {
+                return EndevorSession_1.EndevorSession.createSessionForListing({ endevorHost, endevorPort, user, password, rejectUnauthorized });
             },
-            // Create a session with the required authentication details
-            createSession(jsonFootprint, user, password) {
-                const endevorProtocolFoot = jsonFootprint.endevorHost.substring(0, jsonFootprint.endevorHost.indexOf(":"));
-                const endevorHostFoot = jsonFootprint.endevorHost.substring(jsonFootprint.endevorHost.indexOf("//") + 2);
-                const auth = "Basic " + Buffer.from(user + ":" + password).toString("base64");
-                // Return a new session object with the configured parameters
-                return new imperative_1.Session({
-                    hostname: endevorHostFoot,
-                    port: jsonFootprint.endevorPort,
-                    protocol: endevorProtocolFoot,
-                    type: "basic",
-                    base64EncodedAuth: auth
-                });
+            // Built from mDetails' safe fields only -- never .headers/.additionalDetails, which
+            // embed the raw Authorization header.
+            describeConnectionFailure(error) {
+                var _a;
+                const d = error.mDetails;
+                const target = `${d.protocol}://${d.host}:${d.port}${(_a = d.resource) !== null && _a !== void 0 ? _a : ""}`;
+                if (d.source === "timeout") {
+                    return `Connection to ${target} timed out.`;
+                }
+                if (d.source === "client") {
+                    return `Failed to connect to ${target}. Verify that the Endevor host and port are correct and reachable` +
+                        (d.errno ? ` (${d.errno})` : "") + ".";
+                }
+                return `Endevor returned HTTP ${d.httpStatus} for ${target}.`;
             },
             // Write the API response to a file and return the file location
             writeResponseToFile(response, listingDir, elementName, extension) {
@@ -74,8 +85,22 @@ class HistogramHandler extends AbstractAnalyzeHandler_1.default {
                 if (!fs.existsSync(dir)) {
                     fs.mkdirSync(dir, { recursive: true });
                 }
+                // SECURITY: elementName is server-supplied (footprint.element from the MAT/Endevor
+                // response, TUNER-036) -- confine it to a bare filename before it can traverse out
+                // of listingDir. path.basename() strips any directory components; reject outright
+                // if that changed the value, since a legitimate element name never contains one.
+                const safeName = path.basename(elementName);
+                if (safeName !== elementName || safeName === "" || safeName === "." || safeName === "..") {
+                    throw new Error(`Invalid element name in server response: ${elementName}`);
+                }
                 // Construct the full file path and write the response to the file
-                const location = path.join(listingDir, elementName + "." + extension);
+                const location = path.join(listingDir, safeName + "." + extension);
+                // Second, independent check at the point the file is actually written: verify the
+                // resolved path still lands inside listingDir.
+                const resolvedListingDir = path.resolve(listingDir) + path.sep;
+                if (!path.resolve(location).startsWith(resolvedListingDir)) {
+                    throw new Error(`Refusing to write listing outside of listingDir: ${location}`);
+                }
                 fs.writeFileSync(location, response); // Write the response content to the file
                 return location; // Return the location of the file
             },
@@ -114,160 +139,10 @@ class HistogramHandler extends AbstractAnalyzeHandler_1.default {
         }
         return fields;
     }
-    /*protected async getOutput(json: any, params: IHandlerParameters) {
-        if (params.arguments.listing === true) {
-            if ("footprint" in json) {
-                const endconerror = "Endevor Connection Error";
-                // const matProfile = params.profiles.get("mat", true);
-                const endevorFootprint = json.footprint[0]; // 1. CLARIFY WITH GAS WHY THE JSON FOOTPRINT IS AN ARRAY, CAN WE HAVE MORE THAN 1 FOOTPRINT PER MODULE AND CSECT?
-
-                const requestBody: PrintElmCompDictionary = {
-                    print: "listing",
-                };
-                type CombinedElmArg = ElmSpecDictionary & PrintElmCompDictionary;
-
-                const elemDef: CombinedElmArg = {
-                    "environment": endevorFootprint.environment.trim(),
-                    "stage-number": endevorFootprint.stage.trim(),
-                    "system": endevorFootprint.system.trim(),
-                    "subsystem": endevorFootprint.subsystem.trim(), // SUBSYSTEM IS COMING WITH WHITE SPACES IN THE END.
-                    "type": endevorFootprint.type.trim(),
-                    "element": endevorFootprint.element.trim(),
-                    "print": "listing",
-                };
-
-                let endevorSession;
-                if (!endevorFootprint.endevorHost.includes("http")) {
-                    const exception: HistogramError = {
-                        name: "HistogramException",
-                        header: "Footprint Data Error",
-                        message: "Histogram footprint contains the wrong protocol type. The allowed protocol types are: http and https. \n REST client reports: " + endevorFootprint.endevorHost
-                    };
-                    throw exception;
-                }
-                if (!endevorFootprint.endevorHost.includes("//") || !endevorFootprint.endevorHost.includes(":")) {
-                    const exception: HistogramError = {
-                        name: "HistogramException",
-                        header: "Footprint Data Error",
-                        message: "Histogram footprint contains the wrong Endevor Host. \n REST client reports: " + endevorFootprint.endevorHost
-                    };
-                    throw exception;
-                }
-                try {
-                    endevorSession = new Session({
-                        hostname: endevorFootprint.endevorHost.substring(endevorFootprint.endevorHost.indexOf("//") + 2), // THE FOOTPRINT HOSTNAME MUST BE SPLIT IN PROTOCOL AND HOSTNAME.
-                        port: endevorFootprint.endevorPort,
-                        protocol: endevorFootprint.endevorHost.substring(0, endevorFootprint.endevorHost.indexOf(":")),
-                        user: params.arguments.user,
-                        password: params.arguments.password,
-                        basePath: endevorFootprint.endevorBasePath,
-                        rejectUnauthorized: false,
-                        type: "basic"
-                    });
-                } catch (error) {
-                    const exception: HistogramError = {
-                        name: "HistogramException",
-                        header: endconerror,
-                        message: "An error occurred while connecting to the endevor web services: \n" + error.message
-                    };
-                    throw exception;
-                }
-                let responseEndevor;
-                try {
-                    responseEndevor = await EndevorClient.printElement(endevorSession)(endevorFootprint.endevorContext.trim())(elemDef);
-                    // responseEndevor = await EndevorClient.printElement(endevorSession, elemDef, requestBody, false);
-                } catch (error) {
-                    if (error instanceof RestClientError) {
-                        const exception: HistogramError = {
-                        name: "HistogramException",
-                        header: endconerror,
-                        message: "Cannot download the listing file from Endevor: \n" + error.mDetails.additionalDetails
-                        };
-                        throw exception;
-                    } else {
-                        const exception: HistogramError = {
-                            name: "HistogramException",
-                            header: endconerror,
-                            message: "An error occurred while connecting to the Endevor web services: \n" + error.message
-                        };
-                        throw exception;
-                    }
-                }
-                if (responseEndevor.body.data !== null && responseEndevor.body.data !== undefined) {
-                    let tofileName = params.arguments.listingDir === undefined ? "." : params.arguments.listingDir;
-                    try {
-                        const fs = require("fs");
-                        if (!fs.existsSync(tofileName)) {
-                            await fs.mkdirSync(tofileName, { recursive: true }, (err: any) => {
-                                if (err) {
-                                    throw err;
-                                }
-                            });
-                        }
-                        tofileName += "\\" + endevorFootprint.element + "." + this.getExtension(endevorFootprint.type);
-                        fs.writeFileSync(tofileName, responseEndevor.body.data[0], { encoding: "latin1" });
-                        // THIS IS HOW YOU WRITE A FILE USING ENDEVOR
-                        // EndevorUtils.generalWriteFile(tofileName, responseEndevor.data[0]);
-                    } catch (error) {
-                        const exception: HistogramError = {
-                            name: "HistogramException",
-                            header: "File or Folder Access Error",
-                            errno: error.errno ? error.errno : null,
-                            message: error.message
-                        };
-                        throw exception;
-                    }
-                    if (responseEndevor.body.data[0].length === 0) {
-                        const exception: HistogramError = {
-                            name: "HistogramException",
-                            header: "Endevor Data Error",
-                            message: "No data in response from Endevor."
-                        };
-                        throw exception;
-                    }
-                    responseEndevor.body.data[0] = responseEndevor.body.data[0] + "";
-                    const lines = responseEndevor.body.data[0].split("\n");
-                    for (const histogram of json.histogram) {
-                        histogram.listing = "not found";
-                        for (let index = 0; index < lines.length; index++) {
-                            const stmtLine = lines[index].indexOf(histogram.stmt);
-                            if (stmtLine >= 0) {
-                                const columnNum = lines[index].indexOf(histogram.verb, stmtLine) + 1;
-                                if (columnNum >= 1) {
-                                    const lineNum = index + 1;
-                                    histogram.listing = tofileName + ":" + lineNum + ":" + columnNum;
-                                    break;
-                                }
-                            }
-                        }
-                    }
-                } else {
-                    const exception: HistogramError = {
-                        name: "HistogramException",
-                        header: "Resource Access Error",
-                        message: "Listing not found. Caused by: \n" + responseEndevor.body.messages
-                    };
-                    throw exception;
-                }
-            // } else if (("message" in json) && ((json.message === "No footprint data in the database for requested measurement") || (json.message === "No listing data in the database for requested measurement"))) {
-            } else if (("message" in json) && (json.message !== "OK")) {
-                for (const histogram of json.histogram) {
-                    histogram.listing = json.message;
-                }
-            } else {
-                const exception: HistogramError = {
-                    name: "HistogramException",
-                    header: "Resource Access Error",
-                    message: "The listing data set for the measurement is not registered with MAT"
-                };
-                throw exception;
-            }
-        }
-        return json.histogram;
-    }*/
     // Main method to handle the histogram request
     getOutput(json, params) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             // Check if the listing argument is not true
             // If listing is not true, return the histogram from json
             if (params.arguments.listing === true) {
@@ -275,13 +150,44 @@ class HistogramHandler extends AbstractAnalyzeHandler_1.default {
                     const endconerror = "Endevor Connection Error";
                     const listingDir = params.arguments.listingDir; // Directory where the listing will be stored
                     const jsonFootprint = this.Helper.extractFootprint(json); // Extract and parse the footprint from JSON
-                    const request = this.Helper.constructRequestUrl(jsonFootprint); // Construct the REST API request URL
+                    // SECURITY (TUNER-034): the Endevor host/port/credentials must come from local
+                    // configuration only -- never from jsonFootprint.endevorHost/endevorPort, which is
+                    // dictated by the MAT server response and previously received the user's mainframe
+                    // Basic-auth credentials as-is.
+                    const endevorHost = params.arguments.endevorHost;
+                    const endevorPort = params.arguments.endevorPort;
+                    if (!endevorHost || !endevorPort) {
+                        const exception = {
+                            name: "HistogramException",
+                            header: "Endevor Configuration Missing",
+                            message: "The --listing option requires a locally configured Endevor Web Services host " +
+                                "and port. The MAT server's reported Endevor connection details cannot be used for " +
+                                "security reasons. Specify --endevor-host and --endevor-port in this command, " +
+                                "or set the ZOWE_OPT_ENDEVOR_HOST/ZOWE_OPT_ENDEVOR_PORT environment variables."
+                        };
+                        throw exception;
+                    }
+                    const reuseMatCredentials = params.arguments.endevorReuseMatCredentials === true;
+                    const endevorUser = reuseMatCredentials ? params.arguments.user : params.arguments.endevorUser;
+                    const endevorPassword = reuseMatCredentials ? params.arguments.password : params.arguments.endevorPassword;
+                    if (!endevorUser || !endevorPassword) {
+                        const exception = {
+                            name: "HistogramException",
+                            header: "Endevor Credentials Missing",
+                            message: "The --listing option requires Endevor Web Services credentials. Provide " +
+                                "--endevor-user and --endevor-password (or the ZOWE_OPT_ENDEVOR_USER/" +
+                                "ZOWE_OPT_ENDEVOR_PASSWORD environment variables), or specify " +
+                                "--endevor-reuse-mat-credentials to explicitly reuse your MAT profile credentials."
+                        };
+                        throw exception;
+                    }
+                    const request = this.Helper.constructRequestUrl(jsonFootprint, (_a = params.arguments.endevorBasePath) !== null && _a !== void 0 ? _a : ""); // Construct the REST API request URL
                     let response;
                     let session;
                     let headers;
                     // Create a session for making the API call with authentication
                     try {
-                        session = this.Helper.createSession(jsonFootprint, params.arguments.user, params.arguments.password);
+                        session = this.Helper.createSession(endevorHost, endevorPort, endevorUser, endevorPassword, params.arguments.endevorRejectUnauthorized);
                     }
                     catch (error) {
                         const exception = {
@@ -295,6 +201,8 @@ class HistogramHandler extends AbstractAnalyzeHandler_1.default {
                     try {
                         // Prepare headers with the authorization information
                         headers = [{ Authorization: session.ISession.base64EncodedAuth }];
+                        // Enable with ZOWE_APP_LOG_LEVEL=DEBUG; deliberately excludes headers.
+                        imperative_1.Logger.getAppLogger().debug(`[Endevor listing] GET ${session.ISession.protocol}://${session.ISession.hostname}:${session.ISession.port}${request}`);
                         response = yield imperative_1.RestClient.getExpectString(session, request, headers);
                     }
                     catch (error) {
@@ -302,7 +210,8 @@ class HistogramHandler extends AbstractAnalyzeHandler_1.default {
                             const exception = {
                                 name: "HistogramException",
                                 header: endconerror,
-                                message: "Cannot download the listing file from Endevor: \n" + error.mDetails.additionalDetails
+                                message: "Cannot download the listing file from Endevor: \n" +
+                                    this.Helper.describeConnectionFailure(error)
                             };
                             throw exception;
                         }