@mapbox/mcp-server 0.13.0 → 0.15.0

package/dist/commonjs/utils/jwtUtils.d.ts

@@ -4,6 +4,54 @@
  * Mapbox tokens are JWTs whose payload contains the username under the `u` key.
  * Returns undefined if the token is malformed or missing the `u` field — callers
  * can decide whether to surface an error or fall back to another auth path.
+ *
+ * SECURITY: the returned name is an UNVERIFIED claim. This decodes the payload
+ * without checking the signature (Mapbox signs with a secret only Mapbox holds,
+ * so it cannot be checked here), which means any caller can fabricate a token
+ * asserting any username. Use this only where the value is non-authoritative —
+ * e.g. building a `/tokens/v2/{username}` request URL, where a forged name
+ * simply makes the Mapbox API reject the call. Never use it to decide whether
+ * one caller may read another caller's data; use {@link getOwnerKeyFromToken}
+ * and {@link ownerKeyMatches} for that.
  */
 export declare function getUserNameFromToken(token: string): string | undefined;
+/**
+ * Derive the ownership key used to scope temporary resources to the caller.
+ *
+ * This is a SHA-256 fingerprint of the raw token string — NOT the `u` claim.
+ * The distinction is the whole point: `getUserNameFromToken` reads an
+ * *unverified* claim out of a token payload that anyone can fabricate, because
+ * Mapbox signs its tokens with a secret only Mapbox holds and this server
+ * therefore cannot check the signature locally. Scoping a resource by username
+ * means anyone who learns a resource URI and a Mapbox username can mint a
+ * garbage token asserting `{"u":"<victim>"}` and read that resource.
+ *
+ * Fingerprinting the token instead makes the check depend on bytes the attacker
+ * would have to already possess. An attacker holding the victim's real token
+ * does not need this path at all — they can call the Mapbox API directly — so
+ * the bypass stops being worth anything. No signature verification and no
+ * network round-trip to an introspection endpoint are required, which keeps
+ * resource reads at the O(1) cost the temporary-resource cache exists to
+ * preserve.
+ *
+ * Tradeoff: ownership is now per-token rather than per-account. A caller that
+ * rotates to a different token mid-session can no longer read resources it
+ * created under the previous one; those reads fail closed and surface as the
+ * normal "not found or expired" response. With a 30-minute TTL this is a narrow
+ * window, and failing closed is the correct direction for an authorization
+ * check.
+ *
+ * Returns undefined for an empty/absent token so callers keep failing closed.
+ */
+export declare function getOwnerKeyFromToken(token: string | undefined): string | undefined;
+/**
+ * Compare two ownership keys from {@link getOwnerKeyFromToken}.
+ *
+ * Fails closed when either side is undefined — an unowned resource is never
+ * readable. The comparison is constant-time so the check cannot be probed
+ * byte-by-byte; SHA-256 preimage resistance already makes a leaked digest
+ * useless, but an authorization comparison on a credential-derived value has no
+ * reason not to be constant-time.
+ */
+export declare function ownerKeyMatches(expected: string | undefined, actual: string | undefined): boolean;
 //# sourceMappingURL=jwtUtils.d.ts.map

package/dist/commonjs/utils/jwtUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwtUtils.d.ts","sourceRoot":"","sources":["../../../src/utils/jwtUtils.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWtE"}
+{"version":3,"file":"jwtUtils.d.ts","sourceRoot":"","sources":["../../../src/utils/jwtUtils.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWtE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAMT"}

package/dist/commonjs/utils/jwtUtils.js

@@ -3,12 +3,24 @@
 // Licensed under the MIT License.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getUserNameFromToken = getUserNameFromToken;
+exports.getOwnerKeyFromToken = getOwnerKeyFromToken;
+exports.ownerKeyMatches = ownerKeyMatches;
+const node_crypto_1 = require("node:crypto");
 /**
  * Extract the Mapbox username from a JWT access token.
  *
  * Mapbox tokens are JWTs whose payload contains the username under the `u` key.
  * Returns undefined if the token is malformed or missing the `u` field — callers
  * can decide whether to surface an error or fall back to another auth path.
+ *
+ * SECURITY: the returned name is an UNVERIFIED claim. This decodes the payload
+ * without checking the signature (Mapbox signs with a secret only Mapbox holds,
+ * so it cannot be checked here), which means any caller can fabricate a token
+ * asserting any username. Use this only where the value is non-authoritative —
+ * e.g. building a `/tokens/v2/{username}` request URL, where a forged name
+ * simply makes the Mapbox API reject the call. Never use it to decide whether
+ * one caller may read another caller's data; use {@link getOwnerKeyFromToken}
+ * and {@link ownerKeyMatches} for that.
  */
 function getUserNameFromToken(token) {
     const parts = token.split('.');
@@ -22,4 +34,55 @@ function getUserNameFromToken(token) {
         return undefined;
     }
 }
+/**
+ * Derive the ownership key used to scope temporary resources to the caller.
+ *
+ * This is a SHA-256 fingerprint of the raw token string — NOT the `u` claim.
+ * The distinction is the whole point: `getUserNameFromToken` reads an
+ * *unverified* claim out of a token payload that anyone can fabricate, because
+ * Mapbox signs its tokens with a secret only Mapbox holds and this server
+ * therefore cannot check the signature locally. Scoping a resource by username
+ * means anyone who learns a resource URI and a Mapbox username can mint a
+ * garbage token asserting `{"u":"<victim>"}` and read that resource.
+ *
+ * Fingerprinting the token instead makes the check depend on bytes the attacker
+ * would have to already possess. An attacker holding the victim's real token
+ * does not need this path at all — they can call the Mapbox API directly — so
+ * the bypass stops being worth anything. No signature verification and no
+ * network round-trip to an introspection endpoint are required, which keeps
+ * resource reads at the O(1) cost the temporary-resource cache exists to
+ * preserve.
+ *
+ * Tradeoff: ownership is now per-token rather than per-account. A caller that
+ * rotates to a different token mid-session can no longer read resources it
+ * created under the previous one; those reads fail closed and surface as the
+ * normal "not found or expired" response. With a 30-minute TTL this is a narrow
+ * window, and failing closed is the correct direction for an authorization
+ * check.
+ *
+ * Returns undefined for an empty/absent token so callers keep failing closed.
+ */
+function getOwnerKeyFromToken(token) {
+    if (!token)
+        return undefined;
+    return (0, node_crypto_1.createHash)('sha256').update(token, 'utf-8').digest('hex');
+}
+/**
+ * Compare two ownership keys from {@link getOwnerKeyFromToken}.
+ *
+ * Fails closed when either side is undefined — an unowned resource is never
+ * readable. The comparison is constant-time so the check cannot be probed
+ * byte-by-byte; SHA-256 preimage resistance already makes a leaked digest
+ * useless, but an authorization comparison on a credential-derived value has no
+ * reason not to be constant-time.
+ */
+function ownerKeyMatches(expected, actual) {
+    if (!expected || !actual)
+        return false;
+    const a = Buffer.from(expected, 'utf-8');
+    const b = Buffer.from(actual, 'utf-8');
+    if (a.length !== b.length)
+        return false;
+    return (0, node_crypto_1.timingSafeEqual)(a, b);
+}
 //# sourceMappingURL=jwtUtils.js.map

package/dist/commonjs/utils/jwtUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwtUtils.js","sourceRoot":"","sources":["../../../src/utils/jwtUtils.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;AASlC,oDAWC;AAlBD;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,KAAa;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC/B,CAAC;QACrB,OAAO,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"jwtUtils.js","sourceRoot":"","sources":["../../../src/utils/jwtUtils.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;AAoBlC,oDAWC;AA8BD,oDAKC;AAWD,0CASC;AApFD,6CAA0D;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,oBAAoB,CAAC,KAAa;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC/B,CAAC;QACrB,OAAO,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,oBAAoB,CAClC,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAC7B,QAA4B,EAC5B,MAA0B;IAE1B,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,IAAA,6BAAe,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/commonjs/utils/mapAppPayload.d.ts

@@ -43,7 +43,62 @@ export interface MapAppLayer {
     paint?: Record<string, unknown>;
     /** Mapbox Style spec layout object, passed through to addLayer. */
     layout?: Record<string, unknown>;
+    /**
+     * Where to place this layer relative to the Standard base style's own
+     * layers ('bottom' | 'middle' | 'top'). Omit to keep the current
+     * behavior: the layer renders above everything, including labels.
+     */
+    slot?: 'bottom' | 'middle' | 'top';
+}
+/**
+ * Standard base-style config properties (`map.setConfigProperty('basemap',
+ * key, value)`), for restyling the base map itself rather than adding new
+ * layers on top of it. Only the currently-documented properties are typed;
+ * `.passthrough()` on the Zod schema below lets a Standard property Mapbox
+ * ships later flow through without a schema change here. Has no effect if
+ * the underlying base style isn't Standard.
+ */
+export interface MapAppBaseMapConfig {
+    theme?: 'default' | 'faded' | 'monochrome' | 'custom';
+    lightPreset?: 'day' | 'dawn' | 'dusk' | 'night';
+    colorWater?: string;
+    colorLand?: string;
+    colorGreenspace?: string;
+    colorMotorways?: string;
+    colorTrunks?: string;
+    colorRoads?: string;
+    colorBuildings?: string;
+    colorAdminBoundaries?: string;
+    colorCommercial?: string;
+    colorEducation?: string;
+    colorMedical?: string;
+    colorIndustrial?: string;
+    colorPlaceLabels?: string;
+    colorRoadLabels?: string;
+    colorPointOfInterestLabels?: string;
+    showPointOfInterestLabels?: boolean;
+    showTransitLabels?: boolean;
+    showPlaceLabels?: boolean;
+    showRoadLabels?: boolean;
+    showAdminBoundaries?: boolean;
+    showIndoor?: boolean;
+    showIndoorLabels?: boolean;
+    showLandmarkIconLabels?: boolean;
+    show3dObjects?: boolean;
+    show3dTrees?: boolean;
+    show3dFacades?: boolean;
+    densityPointOfInterestLabels?: number;
 }
+/**
+ * Which Mapbox-owned base style to load. Both are part of the Standard
+ * family (same config-property system and `bottom`/`middle`/`top` slots,
+ * per https://docs.mapbox.com/map-styles/reference/), so `baseMapConfig`
+ * and `slot` work under either — `standard-satellite` just doesn't support
+ * every Standard property (no `theme`, no flat-color overrides like
+ * `colorWater`/`colorBuildings`, since imagery replaces those surfaces).
+ * Defaults to `standard` when omitted.
+ */
+export type MapAppBaseStyle = 'standard' | 'standard-satellite';
 export interface MapAppMarker {
     coordinates: [number, number];
     /**
@@ -109,6 +164,10 @@ export interface MapAppPayload {
     defer?: MapAppDeferredLayer;
     /** Layers the iframe fetches and builds itself, post-initial-render. */
     selfFetch?: MapAppSelfFetch[];
+    /** Restyles the Standard base map itself (colors, theme, lightPreset, label visibility). */
+    baseMapConfig?: MapAppBaseMapConfig;
+    /** Which Mapbox-owned base style to load; defaults to `standard`. */
+    baseStyle?: MapAppBaseStyle;
 }
 export declare const MapAppPayloadSchema: z.ZodObject<{
     summary: z.ZodOptional<z.ZodString>;
@@ -150,6 +209,11 @@ export declare const MapAppPayloadSchema: z.ZodObject<{
         }, z.core.$strip>]>;
         paint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         layout: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        slot: z.ZodOptional<z.ZodEnum<{
+            bottom: "bottom";
+            middle: "middle";
+            top: "top";
+        }>>;
     }, z.core.$strip>>;
     markers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         coordinates: z.ZodTuple<[z.ZodNumber, z.ZodNumber], null>;
@@ -185,6 +249,51 @@ export declare const MapAppPayloadSchema: z.ZodObject<{
         }>;
         params: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strip>>>;
+    baseMapConfig: z.ZodOptional<z.ZodObject<{
+        theme: z.ZodOptional<z.ZodEnum<{
+            default: "default";
+            custom: "custom";
+            faded: "faded";
+            monochrome: "monochrome";
+        }>>;
+        lightPreset: z.ZodOptional<z.ZodEnum<{
+            day: "day";
+            dawn: "dawn";
+            dusk: "dusk";
+            night: "night";
+        }>>;
+        colorWater: z.ZodOptional<z.ZodString>;
+        colorLand: z.ZodOptional<z.ZodString>;
+        colorGreenspace: z.ZodOptional<z.ZodString>;
+        colorMotorways: z.ZodOptional<z.ZodString>;
+        colorTrunks: z.ZodOptional<z.ZodString>;
+        colorRoads: z.ZodOptional<z.ZodString>;
+        colorBuildings: z.ZodOptional<z.ZodString>;
+        colorAdminBoundaries: z.ZodOptional<z.ZodString>;
+        colorCommercial: z.ZodOptional<z.ZodString>;
+        colorEducation: z.ZodOptional<z.ZodString>;
+        colorMedical: z.ZodOptional<z.ZodString>;
+        colorIndustrial: z.ZodOptional<z.ZodString>;
+        colorPlaceLabels: z.ZodOptional<z.ZodString>;
+        colorRoadLabels: z.ZodOptional<z.ZodString>;
+        colorPointOfInterestLabels: z.ZodOptional<z.ZodString>;
+        showPointOfInterestLabels: z.ZodOptional<z.ZodBoolean>;
+        showTransitLabels: z.ZodOptional<z.ZodBoolean>;
+        showPlaceLabels: z.ZodOptional<z.ZodBoolean>;
+        showRoadLabels: z.ZodOptional<z.ZodBoolean>;
+        showAdminBoundaries: z.ZodOptional<z.ZodBoolean>;
+        showIndoor: z.ZodOptional<z.ZodBoolean>;
+        showIndoorLabels: z.ZodOptional<z.ZodBoolean>;
+        showLandmarkIconLabels: z.ZodOptional<z.ZodBoolean>;
+        show3dObjects: z.ZodOptional<z.ZodBoolean>;
+        show3dTrees: z.ZodOptional<z.ZodBoolean>;
+        show3dFacades: z.ZodOptional<z.ZodBoolean>;
+        densityPointOfInterestLabels: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$loose>>;
+    baseStyle: z.ZodOptional<z.ZodEnum<{
+        standard: "standard";
+        "standard-satellite": "standard-satellite";
+    }>>;
 }, z.core.$strip>;
 /**
  * Decode a Mapbox polyline string (precision 5 by default) to a GeoJSON

package/dist/commonjs/utils/mapAppPayload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mapAppPayload.d.ts","sourceRoot":"","sources":["../../../src/utils/mapAppPayload.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAA;CAAE,CAAC;AAElE,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAAC;IAClC,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,KAAK,CAAC;IAC7C,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EACA,YAAY,GACZ,WAAW,GACX,cAAc,GACd,QAAQ,GACR,iBAAiB,GACjB,cAAc,GACd,iBAAiB,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,sDAAsD;IACtD,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,wEAAwE;IACxE,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC;CAC/B;AAqED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAO9B,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,SAAS,SAAI,GACZ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,CAiC3B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,GACV,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,CAE3B"}
+{"version":3,"file":"mapAppPayload.d.ts","sourceRoot":"","sources":["../../../src/utils/mapAppPayload.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAA;CAAE,CAAC;AAElE,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAAC;IAClC,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;OAIG;IACH,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC;IACtD,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACvC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,oBAAoB,CAAC;AAEhE,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,KAAK,CAAC;IAC7C,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EACA,YAAY,GACZ,WAAW,GACX,cAAc,GACd,QAAQ,GACR,iBAAiB,GACjB,cAAc,GACd,iBAAiB,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,sDAAsD;IACtD,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,wEAAwE;IACxE,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC;IAC9B,4FAA4F;IAC5F,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,qEAAqE;IACrE,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAwGD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS9B,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,SAAS,SAAI,GACZ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,CAiC3B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,GACV,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,CAE3B"}

package/dist/commonjs/utils/mapAppPayload.js

@@ -29,8 +29,42 @@ const MapAppLayerSchema = zod_1.z.object({
     type: zod_1.z.enum(['fill', 'line', 'circle', 'symbol']),
     data: zod_1.z.union([FeatureSchema, FeatureCollectionSchema]),
     paint: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-    layout: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional()
+    layout: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+    slot: zod_1.z.enum(['bottom', 'middle', 'top']).optional()
 });
+const MapAppBaseMapConfigSchema = zod_1.z
+    .object({
+    theme: zod_1.z.enum(['default', 'faded', 'monochrome', 'custom']).optional(),
+    lightPreset: zod_1.z.enum(['day', 'dawn', 'dusk', 'night']).optional(),
+    colorWater: zod_1.z.string().optional(),
+    colorLand: zod_1.z.string().optional(),
+    colorGreenspace: zod_1.z.string().optional(),
+    colorMotorways: zod_1.z.string().optional(),
+    colorTrunks: zod_1.z.string().optional(),
+    colorRoads: zod_1.z.string().optional(),
+    colorBuildings: zod_1.z.string().optional(),
+    colorAdminBoundaries: zod_1.z.string().optional(),
+    colorCommercial: zod_1.z.string().optional(),
+    colorEducation: zod_1.z.string().optional(),
+    colorMedical: zod_1.z.string().optional(),
+    colorIndustrial: zod_1.z.string().optional(),
+    colorPlaceLabels: zod_1.z.string().optional(),
+    colorRoadLabels: zod_1.z.string().optional(),
+    colorPointOfInterestLabels: zod_1.z.string().optional(),
+    showPointOfInterestLabels: zod_1.z.boolean().optional(),
+    showTransitLabels: zod_1.z.boolean().optional(),
+    showPlaceLabels: zod_1.z.boolean().optional(),
+    showRoadLabels: zod_1.z.boolean().optional(),
+    showAdminBoundaries: zod_1.z.boolean().optional(),
+    showIndoor: zod_1.z.boolean().optional(),
+    showIndoorLabels: zod_1.z.boolean().optional(),
+    showLandmarkIconLabels: zod_1.z.boolean().optional(),
+    show3dObjects: zod_1.z.boolean().optional(),
+    show3dTrees: zod_1.z.boolean().optional(),
+    show3dFacades: zod_1.z.boolean().optional(),
+    densityPointOfInterestLabels: zod_1.z.number().optional()
+})
+    .passthrough();
 const MapAppMarkerSchema = zod_1.z.object({
     coordinates: zod_1.z.tuple([zod_1.z.number(), zod_1.z.number()]),
     style: zod_1.z.enum(['pin', 'numbered', 'start', 'end']).optional(),
@@ -71,7 +105,9 @@ exports.MapAppPayloadSchema = zod_1.z.object({
     markers: zod_1.z.array(MapAppMarkerSchema).optional(),
     legend: zod_1.z.array(MapAppLegendEntrySchema).optional(),
     camera: MapAppCameraSchema.optional(),
-    selfFetch: zod_1.z.array(MapAppSelfFetchSchema).optional()
+    selfFetch: zod_1.z.array(MapAppSelfFetchSchema).optional(),
+    baseMapConfig: MapAppBaseMapConfigSchema.optional(),
+    baseStyle: zod_1.z.enum(['standard', 'standard-satellite']).optional()
 });
 /**
  * Decode a Mapbox polyline string (precision 5 by default) to a GeoJSON

package/dist/commonjs/utils/mapAppPayload.js.map

@@ -1 +1 @@
-{"version":3,"file":"mapAppPayload.js","sourceRoot":"","sources":["../../../src/utils/mapAppPayload.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAmNlC,wCAoCC;AAOD,gEAIC;AAhQD,6BAAwB;AA2HxB,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,iEAAiE;AACjE,kEAAkE;AAClE,MAAM,cAAc,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAChE,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;CACzB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACvD,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,OAAC;SACN,KAAK,CAAC;QACL,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACjC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KAClC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC;QACX,YAAY;QACZ,WAAW;QACX,cAAc;QACd,QAAQ;QACR,iBAAiB;QACjB,cAAc;QACd,iBAAiB;KAClB,CAAC;IACF,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAClC,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,GAAW,EACX,SAAS,GAAG,CAAC;IAEb,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAS,CAAC;QACd,GAAG,CAAC;YACF,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;YAC9B,KAAK,IAAI,CAAC,CAAC;QACb,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE;QACtC,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACjD,KAAK,GAAG,CAAC,CAAC;QACV,MAAM,GAAG,CAAC,CAAC;QACX,GAAG,CAAC;YACF,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;YAC9B,KAAK,IAAI,CAAC,CAAC;QACb,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE;QACtC,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,GAAW;IAEX,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"mapAppPayload.js","sourceRoot":"","sources":["../../../src/utils/mapAppPayload.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAqTlC,wCAoCC;AAOD,gEAIC;AAlWD,6BAAwB;AAwLxB,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,iEAAiE;AACjE,kEAAkE;AAClE,MAAM,cAAc,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAChE,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;CACzB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACvD,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtE,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,0BAA0B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,yBAAyB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjD,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,sBAAsB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9C,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,4BAA4B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,OAAC;SACN,KAAK,CAAC;QACL,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACjC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KAClC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC;QACX,YAAY;QACZ,WAAW;QACX,cAAc;QACd,QAAQ;QACR,iBAAiB;QACjB,cAAc;QACd,iBAAiB;KAClB,CAAC;IACF,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAClC,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACpD,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,GAAW,EACX,SAAS,GAAG,CAAC;IAEb,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAS,CAAC;QACd,GAAG,CAAC;YACF,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;YAC9B,KAAK,IAAI,CAAC,CAAC;QACb,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE;QACtC,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACjD,KAAK,GAAG,CAAC,CAAC;QACV,MAAM,GAAG,CAAC,CAAC;QACX,GAAG,CAAC;YACF,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;YAC9B,KAAK,IAAI,CAAC,CAAC;QACb,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE;QACtC,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,GAAW;IAEX,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/commonjs/utils/redactToken.d.ts

@@ -0,0 +1,3 @@
+/** Remove access_token query parameter values from strings before logging or returning to callers. */
+export declare function redactToken(s: string): string;
+//# sourceMappingURL=redactToken.d.ts.map

package/dist/commonjs/utils/redactToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactToken.d.ts","sourceRoot":"","sources":["../../../src/utils/redactToken.ts"],"names":[],"mappings":"AA0DA,sGAAsG;AACtG,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK7C"}

package/dist/commonjs/utils/redactToken.js

@@ -0,0 +1,55 @@
+"use strict";
+// Copyright (c) Mapbox, Inc.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactToken = redactToken;
+/** Token prefixes Mapbox uses: public, secret, and temporary. */
+const TOKEN_PREFIXES = new Set(['pk', 'sk', 'tk']);
+/**
+ * Character allowlist for an account name lifted out of a token payload. This
+ * bounds what a token payload can put into a span attribute or log line — the
+ * value comes from decoding untrusted JWT payload data, so the allowlist is a
+ * safety gate against log/span injection and oversized values, not a
+ * statement of Mapbox's actual account naming rules. A name outside it is not
+ * partially disclosed — it falls back to `***`.
+ */
+const ACCOUNT_NAME_PATTERN = /^[A-Za-z0-9_-]{1,64}$/;
+/**
+ * Replace a token value with a placeholder that keeps the parts safe to publish.
+ *
+ * Mapbox tokens are JWTs (`<prefix>.<payload>.<signature>`) whose payload carries
+ * the account name under `u`, so `pk.eyJ1IjoiZXhhbXBsZSJ9.signature` becomes
+ * `pk.example.redacted`. Keeping the prefix and account name makes traces and logs
+ * readable — you can still tell a secret token from a public one, and whose account
+ * a request billed to — while the signature, which is the part that authenticates,
+ * never leaves the process.
+ *
+ * Anything that does not parse cleanly as such a token falls back to `***`, so an
+ * unrecognized shape is never partially disclosed on the assumption it was harmless.
+ */
+function maskTokenValue(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        return '***';
+    }
+    const [prefix, payload] = parts;
+    if (!TOKEN_PREFIXES.has(prefix)) {
+        return '***';
+    }
+    try {
+        const decoded = JSON.parse(Buffer.from(payload, 'base64').toString('utf-8'));
+        if (typeof decoded.u !== 'string' ||
+            !ACCOUNT_NAME_PATTERN.test(decoded.u)) {
+            return '***';
+        }
+        return `${prefix}.${decoded.u}.redacted`;
+    }
+    catch {
+        return '***';
+    }
+}
+/** Remove access_token query parameter values from strings before logging or returning to callers. */
+function redactToken(s) {
+    return s.replace(/access_token=([^&\s#"']+)/g, (_match, token) => `access_token=${maskTokenValue(token)}`);
+}
+//# sourceMappingURL=redactToken.js.map

package/dist/commonjs/utils/redactToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactToken.js","sourceRoot":"","sources":["../../../src/utils/redactToken.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;AA0DlC,kCAKC;AA7DD,iEAAiE;AACjE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC9B,CAAC;QAErB,IACE,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ;YAC7B,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EACrC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAgB,WAAW,CAAC,CAAS;IACnC,OAAO,CAAC,CAAC,OAAO,CACd,4BAA4B,EAC5B,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE,CAAC,gBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,CACnE,CAAC;AACJ,CAAC"}

package/dist/commonjs/utils/redactingSpanExporter.d.ts

@@ -0,0 +1,24 @@
+import type { ReadableSpan, SpanExporter } from '@opentelemetry/sdk-trace-base';
+import type { ExportResult } from '@opentelemetry/core';
+/**
+ * Wraps a SpanExporter and strips access token signatures from span attributes
+ * before they leave the process, leaving behind the prefix and account name
+ * (`access_token=pk.some-account.redacted`).
+ *
+ * Auto-instrumentation of `fetch`/`undici` records the full request URL on client
+ * spans (`url.full`, `url.query`), and Mapbox APIs take the access token as a
+ * query parameter. Without this wrapper, an operator who configures an OTLP
+ * endpoint gets those tokens copied verbatim into their telemetry backend.
+ *
+ * Redaction happens at the exporter rather than in an instrumentation
+ * `requestHook` so it covers every attribute on every span, including attribute
+ * names introduced by future semantic-convention or instrumentation changes.
+ */
+export declare class RedactingSpanExporter implements SpanExporter {
+    private readonly delegate;
+    constructor(delegate: SpanExporter);
+    export(spans: ReadableSpan[], resultCallback: (result: ExportResult) => void): void;
+    shutdown(): Promise<void>;
+    forceFlush(): Promise<void>;
+}
+//# sourceMappingURL=redactingSpanExporter.d.ts.map

package/dist/commonjs/utils/redactingSpanExporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactingSpanExporter.d.ts","sourceRoot":"","sources":["../../../src/utils/redactingSpanExporter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAmFxD;;;;;;;;;;;;;GAaG;AACH,qBAAa,qBAAsB,YAAW,YAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,YAAY;IAEnD,MAAM,CACJ,KAAK,EAAE,YAAY,EAAE,EACrB,cAAc,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAC7C,IAAI;IAIP,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAG5B"}

package/dist/commonjs/utils/redactingSpanExporter.js

@@ -0,0 +1,97 @@
+"use strict";
+// Copyright (c) Mapbox, Inc.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedactingSpanExporter = void 0;
+const redactToken_js_1 = require("./redactToken.js");
+/**
+ * Rewrites every string attribute value through `redactToken`, returning the
+ * original object when nothing changed so unaffected spans pass through as-is.
+ */
+function redactAttributes(attributes) {
+    let redacted;
+    for (const [key, value] of Object.entries(attributes)) {
+        if (typeof value !== 'string') {
+            continue;
+        }
+        const clean = (0, redactToken_js_1.redactToken)(value);
+        if (clean !== value) {
+            redacted ??= { ...attributes };
+            redacted[key] = clean;
+        }
+    }
+    return redacted ?? attributes;
+}
+/**
+ * Collect every property name reachable on a span, including accessors defined
+ * on its prototype chain. Copying by key list rather than a hardcoded field list
+ * keeps this working across OpenTelemetry SDK versions, which have moved fields
+ * (e.g. `parentSpanId` to `parentSpanContext`) between releases.
+ */
+function collectKeys(span) {
+    const keys = new Set();
+    for (let current = span; current && current !== Object.prototype; current = Object.getPrototypeOf(current)) {
+        for (const key of Object.getOwnPropertyNames(current)) {
+            if (key !== 'constructor') {
+                keys.add(key);
+            }
+        }
+    }
+    return keys;
+}
+/**
+ * Return a copy of `span` with redacted attributes, or the span itself when no
+ * attribute needed redaction. The copy is a plain object rather than a mutation
+ * of the original, so the SDK's own span state is left untouched.
+ */
+function redactSpan(span) {
+    const attributes = redactAttributes(span.attributes);
+    const events = span.events.map((event) => event.attributes
+        ? { ...event, attributes: redactAttributes(event.attributes) }
+        : event);
+    const attributesChanged = attributes !== span.attributes;
+    const eventsChanged = events.some((event, index) => event !== span.events[index]);
+    if (!attributesChanged && !eventsChanged) {
+        return span;
+    }
+    const copy = {};
+    for (const key of collectKeys(span)) {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- generic property copy across unknown SDK span shapes
+        const value = span[key];
+        copy[key] = typeof value === 'function' ? value.bind(span) : value;
+    }
+    copy.attributes = attributes;
+    copy.events = events;
+    return copy;
+}
+/**
+ * Wraps a SpanExporter and strips access token signatures from span attributes
+ * before they leave the process, leaving behind the prefix and account name
+ * (`access_token=pk.some-account.redacted`).
+ *
+ * Auto-instrumentation of `fetch`/`undici` records the full request URL on client
+ * spans (`url.full`, `url.query`), and Mapbox APIs take the access token as a
+ * query parameter. Without this wrapper, an operator who configures an OTLP
+ * endpoint gets those tokens copied verbatim into their telemetry backend.
+ *
+ * Redaction happens at the exporter rather than in an instrumentation
+ * `requestHook` so it covers every attribute on every span, including attribute
+ * names introduced by future semantic-convention or instrumentation changes.
+ */
+class RedactingSpanExporter {
+    delegate;
+    constructor(delegate) {
+        this.delegate = delegate;
+    }
+    export(spans, resultCallback) {
+        this.delegate.export(spans.map(redactSpan), resultCallback);
+    }
+    shutdown() {
+        return this.delegate.shutdown();
+    }
+    forceFlush() {
+        return this.delegate.forceFlush?.() ?? Promise.resolve();
+    }
+}
+exports.RedactingSpanExporter = RedactingSpanExporter;
+//# sourceMappingURL=redactingSpanExporter.js.map

package/dist/commonjs/utils/redactingSpanExporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactingSpanExporter.js","sourceRoot":"","sources":["../../../src/utils/redactingSpanExporter.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAKlC,qDAA+C;AAE/C;;;GAGG;AACH,SAAS,gBAAgB,CAAC,UAAsB;IAC9C,IAAI,QAAgC,CAAC;IAErC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,4BAAW,EAAC,KAAK,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,QAAQ,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,IAAI,UAAU,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAkB;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KACE,IAAI,OAAO,GAAkB,IAAI,EACjC,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,SAAS,EACvC,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,EACxC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAkB;IACpC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,KAAK,CAAC,UAAU;QACd,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;QAC9D,CAAC,CAAC,KAAK,CACV,CAAC;IAEF,MAAM,iBAAiB,GAAG,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC;IACzD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAC/C,CAAC;IAEF,IAAI,CAAC,iBAAiB,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,sHAAsH;QACtH,MAAM,KAAK,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAErB,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAa,qBAAqB;IACH;IAA7B,YAA6B,QAAsB;QAAtB,aAAQ,GAAR,QAAQ,CAAc;IAAG,CAAC;IAEvD,MAAM,CACJ,KAAqB,EACrB,cAA8C;QAE9C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9D,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3D,CAAC;CACF;AAjBD,sDAiBC"}

package/dist/commonjs/utils/selfFetchRef.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"selfFetchRef.d.ts","sourceRoot":"","sources":["../../../src/utils/selfFetchRef.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAIzE,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;AAYpD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAKR;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CA2BrE"}
+{"version":3,"file":"selfFetchRef.d.ts","sourceRoot":"","sources":["../../../src/utils/selfFetchRef.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAIzE,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;AAYpD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAKR;AA4CD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CA4BrE"}

package/dist/commonjs/utils/selfFetchRef.js

@@ -30,6 +30,35 @@ function buildSelfFetchRef(tool, params) {
     const data = Buffer.from(JSON.stringify(params), 'utf8').toString('base64url');
     return `${SELF_FETCH_URI_PREFIX}${tool}?data=${data}`;
 }
+function isNonEmptyNumberArray(value) {
+    return (Array.isArray(value) &&
+        value.length > 0 &&
+        value.every((v) => typeof v === 'number' && Number.isFinite(v)));
+}
+/**
+ * Reject refs whose params can't produce a valid API request in the iframe.
+ * A ref minted by the tool itself always passes, but the ref format is easy
+ * for an LLM to hand-write, and a malformed one would otherwise resolve
+ * here, report success to the LLM, and only fail later inside the iframe
+ * (e.g. `contours_minutes: 15` instead of `[15]` is silently dropped from
+ * the Isochrone request, which then 422s with "You must supply one of
+ * contours_meters or contours_minutes"). Failing here routes the ref into
+ * render_map_tool's unresolved-refs path, which tells the LLM to re-run
+ * the source tool.
+ */
+function hasValidSelfFetchParams(tool, params) {
+    if (tool === 'isochrone') {
+        const coords = params.coordinates;
+        if (!coords ||
+            typeof coords.longitude !== 'number' ||
+            typeof coords.latitude !== 'number') {
+            return false;
+        }
+        return (isNonEmptyNumberArray(params.contours_minutes) ||
+            isNonEmptyNumberArray(params.contours_meters));
+    }
+    return true;
+}
 function isSelfFetchRef(uri) {
     return uri.startsWith(SELF_FETCH_URI_PREFIX);
 }
@@ -67,6 +96,8 @@ function resolveSelfFetchRef(uri) {
     }
     if (!params || typeof params !== 'object')
         return null;
+    if (!hasValidSelfFetchParams(tool, params))
+        return null;
     return {
         layers: [],
         selfFetch: [{ tool: tool, params }]