@sfdxy/anypoint-connect 0.14.0 → 0.16.2

package/dist/workflows/app-state.js

@@ -0,0 +1,95 @@
+/**
+ * Deployment state model
+ * One interpretation of CloudHub 2.0 deployment, application and replica status, shared by
+ * status reads and every wait loop. It hides the transient FAILED the platform reports while
+ * a stopped app starts, and never treats a status left over from the previous spec as settled.
+ */
+/**
+ * Poll until the deployment is terminal (settled, failed past the grace window, or degraded)
+ * or the timeout passes. Never throws for a failed deployment; the caller reads the snapshot.
+ */
+export async function waitForAppPhase(api, orgId, envId, deploymentId, options = {}) {
+    const startedAt = Date.now();
+    const timeoutMs = options.timeoutMs ?? 300_000;
+    const pollIntervalMs = options.pollIntervalMs ?? 5_000;
+    const phaseOptions = {
+        expectedSpecVersion: options.expectedSpecVersion,
+        previousModifiedDate: options.previousModifiedDate,
+        sinceChange: options.sinceChange ?? startedAt,
+        graceMs: options.graceMs,
+    };
+    while (true) {
+        const deployment = await api.getDeployment(orgId, envId, deploymentId);
+        const snapshot = deploymentPhase(deployment, phaseOptions);
+        options.onStatus?.(snapshot, deployment);
+        const waitedMs = Date.now() - startedAt;
+        if (snapshot.terminal)
+            return { deployment, snapshot, timedOut: false, waitedMs };
+        if (waitedMs >= timeoutMs)
+            return { deployment, snapshot, timedOut: true, waitedMs };
+        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+    }
+}
+export const DEFAULT_GRACE_MS = 90_000;
+const STOPPED_REPLICA_STATES = new Set(['STOPPED', 'TERMINATED', 'DELETED']);
+const FAILED_PLATFORM_STATUSES = new Set(['FAILED', 'DEPLOYMENT_FAILED']);
+/** Interpret a deployment detail as a single phase. Pure; safe to call on every poll. */
+export function deploymentPhase(deployment, options = {}) {
+    const now = options.now ?? Date.now();
+    const graceMs = options.graceMs ?? DEFAULT_GRACE_MS;
+    const since = options.sinceChange ?? deployment.lastModifiedDate ?? 0;
+    const withinGrace = now - since < graceMs;
+    const desiredState = deployment.application?.desiredState ?? 'STARTED';
+    const platformStatus = deployment.status;
+    const replicas = deployment.replicas ?? [];
+    const specVersion = options.expectedSpecVersion ?? deployment.desiredVersion;
+    const onSpec = (version) => !specVersion || version === specVersion;
+    const started = replicas.filter((r) => r.state === 'STARTED');
+    const startedOnSpec = started.filter((r) => onSpec(r.currentDeploymentVersion));
+    const failed = replicas.filter((r) => r.state === 'FAILED');
+    const counts = {
+        total: replicas.length,
+        started: started.length,
+        onSpec: startedOnSpec.length,
+        failed: failed.length,
+    };
+    const base = { desiredState, platformStatus, replicas: counts, specVersion };
+    const failureReason = failed.find((r) => r.reason)?.reason;
+    // A change sent after the deployment's last modification has not been picked up yet.
+    // Compared against the server's own earlier timestamp, so local clock skew cannot matter.
+    const stale = options.previousModifiedDate !== undefined &&
+        !options.expectedSpecVersion &&
+        (deployment.lastModifiedDate ?? 0) <= options.previousModifiedDate;
+    if (desiredState === 'STOPPED') {
+        const down = replicas.every((r) => STOPPED_REPLICA_STATES.has(r.state));
+        if (down && !stale && platformStatus !== 'APPLYING') {
+            return { ...base, phase: 'STOPPED', settled: true, terminal: true };
+        }
+        return { ...base, phase: 'STOPPING', settled: false, terminal: false };
+    }
+    const expected = deployment.target?.replicas ?? replicas.length;
+    // With autoscaling the replica count floats, so only an exact count is required without it.
+    const autoscaled = deployment.target?.deploymentSettings?.autoscaling?.enabled === true;
+    const countOk = autoscaled ? replicas.length > 0 : replicas.length === expected;
+    const allOnSpec = replicas.length > 0 && startedOnSpec.length === replicas.length && countOk;
+    if (!stale && platformStatus === 'APPLIED' && allOnSpec) {
+        return { ...base, phase: 'RUNNING', settled: true, terminal: true };
+    }
+    const platformFailed = FAILED_PLATFORM_STATUSES.has(platformStatus);
+    // Replica failure reasons also appear during normal start-up, so only time confirms a failure.
+    if ((platformFailed || failed.length > 0) && !withinGrace) {
+        const reason = failureReason ?? `Platform reports ${platformStatus}`;
+        if (startedOnSpec.length > 0)
+            return { ...base, phase: 'DEGRADED', settled: false, terminal: true, reason };
+        return { ...base, phase: 'FAILED', settled: false, terminal: true, reason };
+    }
+    const transitional = platformFailed || failed.length > 0 ? 'replicas still starting; failure not yet confirmed' : undefined;
+    if (started.length > 0 && startedOnSpec.length < started.length) {
+        return { ...base, phase: 'UPDATING', settled: false, terminal: false, reason: transitional ?? failureReason };
+    }
+    if (startedOnSpec.length > 0 && !allOnSpec) {
+        return { ...base, phase: 'UPDATING', settled: false, terminal: false, reason: transitional ?? failureReason };
+    }
+    return { ...base, phase: 'STARTING', settled: false, terminal: false, reason: transitional ?? failureReason };
+}
+//# sourceMappingURL=app-state.js.map

package/dist/workflows/app-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-state.js","sourceRoot":"","sources":["../../src/workflows/app-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsBH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,GAAqB,EACrB,KAAa,EACb,KAAa,EACb,YAAoB,EACpB,UAAuB,EAAE;IAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,MAAM,YAAY,GAAiB;QAC/B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;KAC3B,CAAC;IAEF,OAAO,IAAI,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,QAAQ,CAAC,QAAQ;YAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAClF,IAAI,QAAQ,IAAI,SAAS;YAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACrF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AA6BD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;AAC7E,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE1E,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,UAAyB,EAAE,UAAwB,EAAE;IACjF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC,gBAAgB,IAAI,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,GAAG,GAAG,KAAK,GAAG,OAAO,CAAC;IAC1C,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,EAAE,YAAY,IAAI,SAAS,CAAC;IACvE,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,IAAI,UAAU,CAAC,cAAc,CAAC;IAE7E,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC,WAAW,IAAI,OAAO,KAAK,WAAW,CAAC;IAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG;QACX,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;KACxB,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAE3D,qFAAqF;IACrF,0FAA0F;IAC1F,MAAM,KAAK,GACP,OAAO,CAAC,oBAAoB,KAAK,SAAS;QAC1C,CAAC,OAAO,CAAC,mBAAmB;QAC5B,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAEvE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;YAClD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC;IAChE,4FAA4F;IAC5F,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;IACxF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC;IAChF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC;IAC7F,IAAI,CAAC,KAAK,IAAI,cAAc,KAAK,SAAS,IAAI,SAAS,EAAE,CAAC;QACtD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,cAAc,GAAG,wBAAwB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACpE,+FAA+F;IAC/F,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,aAAa,IAAI,oBAAoB,cAAc,EAAE,CAAC;QACrE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC5G,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,YAAY,GACd,cAAc,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9D,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,aAAa,EAAE,CAAC;IAClH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,aAAa,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,aAAa,EAAE,CAAC;AAClH,CAAC"}

package/dist/workflows/artifact-compare.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Deployed artifact comparison
+ * Compares a Mule application jar with another jar or with a git checkout of its source.
+ * Only names, sizes, versions and hashes are reported, never file contents.
+ */
+import type { AnypointClient } from '../client/AnypointClient.js';
+export interface JarEntryInfo {
+    size: number;
+    sha256: string;
+    /** Git blob ID of the entry bytes, for comparing with a git tree without reading files. */
+    gitSha1: string;
+}
+export interface PomInfo {
+    groupId?: string;
+    artifactId?: string;
+    version?: string;
+    /** Declared, non-test dependencies as `group:artifact:version`. */
+    dependencies: string[];
+}
+export interface JarIndex {
+    sha256: string;
+    size: number;
+    /** Every file entry except `repository/**`. */
+    entries: Map<string, JarEntryInfo>;
+    pom?: PomInfo;
+    pomVersion?: string;
+    /** Resolved dependencies from `classloader-model.json`, as `group:artifact:version`. */
+    resolvedDependencies?: string[];
+    skipped: {
+        repository: number;
+        directories: number;
+    };
+}
+export interface PathDifference {
+    path: string;
+    jarPath?: string;
+    deployedSize?: number;
+    repoSize?: number;
+}
+export interface DependencyDifferences {
+    changed: Array<{
+        dependency: string;
+        deployed: string;
+        repo: string;
+    }>;
+    missingInRepo: string[];
+    extraInRepo: string[];
+}
+export interface ArtifactComparison {
+    verdict: 'identical' | 'differs';
+    against: Record<string, unknown>;
+    sha256: {
+        deployed: string;
+        repo?: string;
+        match?: boolean;
+    };
+    pomVersion: {
+        deployed?: string;
+        repo?: string;
+    };
+    summary: {
+        compared: number;
+        changed: number;
+        missingInRepo: number;
+        extraInRepo: number;
+        unmapped: number;
+        skippedRepositoryEntries: number;
+    };
+    changed: PathDifference[];
+    missingInRepo: PathDifference[];
+    extraInRepo: PathDifference[];
+    dependencies: DependencyDifferences;
+    workingTreeChanges?: Array<{
+        path: string;
+        status: string;
+    }>;
+    notes: string[];
+}
+/** Git blob object ID: SHA-1 over `blob <len>\0` followed by the bytes. */
+export declare function gitBlobSha1(bytes: Uint8Array): string;
+/** Refuse refs that git could read as an option, or that hold unexpected characters. */
+export declare function validateGitRef(ref: string): string;
+/**
+ * Where a jar entry comes from in a Mule 4 project, most likely first:
+ * - `META-INF/maven/<g>/<a>/pom.xml` comes from `pom.xml`;
+ * - other `META-INF/**` entries and compiled `*.class` files are generated, so they map nowhere;
+ * - an `*.xml` entry comes from `src/main/mule/`, or else `src/main/resources/` (e.g. log4j2.xml);
+ * - anything else (`api/**`, `*.properties`, `*.yaml`, `*.json`, `*.dwl`, ...) comes from `src/main/resources/`.
+ */
+export declare function jarEntryToRepoCandidates(entry: string): string[];
+/**
+ * Read a pom's own coordinates and its declared dependencies. `${...}` placeholders are
+ * resolved from `<properties>` and the project coordinates; anything else is left as is.
+ */
+export declare function parsePom(xml: string): PomInfo;
+/** Index a Mule application jar: hashes per entry, the pom and the resolved dependencies. */
+export declare function indexJar(bytes: Uint8Array, options?: {
+    maxUncompressedBytes?: number;
+}): JarIndex;
+/** Compare two dependency lists by `group:artifact`, reporting version changes and one-sided entries. */
+export declare function diffDependencies(deployed?: string[], repo?: string[]): DependencyDifferences;
+/**
+ * Compare the deployed jar with a local jar. "Repo" in the output means the local jar.
+ * Equal SHA-256 short-circuits; otherwise every entry outside `repository/` is compared,
+ * so a rebuild that only changed timestamps still counts as identical.
+ */
+export declare function compareJarToJar(deployedBytes: Uint8Array, localBytes: Uint8Array, localLabel?: string): ArtifactComparison;
+/**
+ * Compare the deployed jar with a git checkout of its source, by git blob ID. `repoPath` is the
+ * Mule project directory (it may be a subdirectory of a larger repository).
+ */
+export declare function compareJarToGit(deployedBytes: Uint8Array, options: {
+    repoPath: string;
+    gitRef?: string;
+    includeWorkingTree?: boolean;
+}): Promise<ArtifactComparison>;
+/** Fetch the jar an application currently runs, from Exchange, bounded by `maxBytes`. */
+export declare function fetchDeployedJar(client: AnypointClient, orgId: string, env: {
+    id: string;
+    name: string;
+}, appName: string, options?: {
+    maxBytes?: number;
+}): Promise<{
+    buffer: Buffer;
+    sha256: string;
+    md5Matches: boolean;
+    fileName: string;
+    ref: {
+        groupId: string;
+        artifactId: string;
+        version: string;
+    };
+}>;
+//# sourceMappingURL=artifact-compare.d.ts.map

package/dist/workflows/artifact-compare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-compare.d.ts","sourceRoot":"","sources":["../../src/workflows/artifact-compare.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAclE,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,OAAO;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,YAAY,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7D,UAAU,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,OAAO,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,wBAAwB,EAAE,MAAM,CAAC;KACpC,CAAC;IACF,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,aAAa,EAAE,cAAc,EAAE,CAAC;IAChC,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,YAAY,EAAE,qBAAqB,CAAC;IACpC,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAMhE;AAiBD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA0C7C;AAkBD,6FAA6F;AAC7F,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,GAAE;IAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,QAAQ,CAgDrG;AAOD,yGAAyG;AACzG,wBAAgB,gBAAgB,CAAC,QAAQ,GAAE,MAAM,EAAO,EAAE,IAAI,GAAE,MAAM,EAAO,GAAG,qBAAqB,CAWpG;AAsCD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,SAAc,sBA2C1G;AAgGD;;;GAGG;AACH,wBAAsB,eAAe,CACjC,aAAa,EAAE,UAAU,EACzB,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7E,OAAO,CAAC,kBAAkB,CAAC,CA8D7B;AAED,yFAAyF;AACzF,wBAAsB,gBAAgB,CAClC,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACjC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;;;;;;GAOtC"}

package/dist/workflows/artifact-compare.js

@@ -0,0 +1,419 @@
+/**
+ * Deployed artifact comparison
+ * Compares a Mule application jar with another jar or with a git checkout of its source.
+ * Only names, sizes, versions and hashes are reported, never file contents.
+ */
+import { execFile } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { promisify } from 'node:util';
+import { strFromU8, unzipSync } from 'fflate';
+const execFileAsync = promisify(execFile);
+/** Ceiling on the uncompressed size of the indexed entries, against zip bombs. */
+const MAX_UNCOMPRESSED_BYTES = 512 * 1024 * 1024;
+/** Longest list of paths returned per category; the summary keeps the full counts. */
+const MAX_LISTED = 200;
+/** Repo directories that end up in the jar. */
+const MULE_DIR = 'src/main/mule/';
+const RESOURCES_DIR = 'src/main/resources/';
+/** Git blob object ID: SHA-1 over `blob <len>\0` followed by the bytes. */
+export function gitBlobSha1(bytes) {
+    return createHash('sha1').update(`blob ${bytes.length}\0`).update(bytes).digest('hex');
+}
+/** Refuse refs that git could read as an option, or that hold unexpected characters. */
+export function validateGitRef(ref) {
+    if (!ref || ref.startsWith('-') || ref.length > 200 || !/^[A-Za-z0-9._/@{}~^+-]+$/.test(ref)) {
+        throw new Error(`Invalid git ref: ${JSON.stringify(ref)}`);
+    }
+    return ref;
+}
+/**
+ * Where a jar entry comes from in a Mule 4 project, most likely first:
+ * - `META-INF/maven/<g>/<a>/pom.xml` comes from `pom.xml`;
+ * - other `META-INF/**` entries and compiled `*.class` files are generated, so they map nowhere;
+ * - an `*.xml` entry comes from `src/main/mule/`, or else `src/main/resources/` (e.g. log4j2.xml);
+ * - anything else (`api/**`, `*.properties`, `*.yaml`, `*.json`, `*.dwl`, ...) comes from `src/main/resources/`.
+ */
+export function jarEntryToRepoCandidates(entry) {
+    if (!entry || entry.endsWith('/') || entry.startsWith('repository/'))
+        return [];
+    if (/^META-INF\/maven\/[^/]+\/[^/]+\/pom\.xml$/.test(entry))
+        return ['pom.xml'];
+    if (entry.startsWith('META-INF/') || entry.endsWith('.class'))
+        return [];
+    if (entry.toLowerCase().endsWith('.xml'))
+        return [`${MULE_DIR}${entry}`, `${RESOURCES_DIR}${entry}`];
+    return [`${RESOURCES_DIR}${entry}`];
+}
+/** True for a repo path that the build copies into the jar. */
+function isPackagedRepoPath(file) {
+    return file === 'pom.xml' || file.startsWith(MULE_DIR) || file.startsWith(RESOURCES_DIR);
+}
+function stripBlocks(xml, tags) {
+    let result = xml;
+    for (const tag of tags)
+        result = result.replace(new RegExp(`<${tag}>[\\s\\S]*?</${tag}>`, 'g'), '');
+    return result;
+}
+function firstTag(xml, tag) {
+    return new RegExp(`<${tag}>\\s*([^<]*?)\\s*</${tag}>`).exec(xml)?.[1];
+}
+/**
+ * Read a pom's own coordinates and its declared dependencies. `${...}` placeholders are
+ * resolved from `<properties>` and the project coordinates; anything else is left as is.
+ */
+export function parsePom(xml) {
+    const clean = xml.replace(/<!--[\s\S]*?-->/g, '');
+    const properties = {};
+    const propertiesBlock = /<properties>([\s\S]*?)<\/properties>/.exec(clean)?.[1] ?? '';
+    for (const match of propertiesBlock.matchAll(/<([\w.-]+)>\s*([^<]*?)\s*<\/\1>/g))
+        properties[match[1]] = match[2];
+    const parent = /<parent>([\s\S]*?)<\/parent>/.exec(clean)?.[1] ?? '';
+    const top = stripBlocks(clean, [
+        'parent',
+        'dependencyManagement',
+        'build',
+        'profiles',
+        'reporting',
+        'pluginRepositories',
+        'repositories',
+        'distributionManagement',
+    ]);
+    const own = stripBlocks(top, ['dependencies', 'properties']);
+    const groupId = firstTag(own, 'groupId') ?? firstTag(parent, 'groupId');
+    const artifactId = firstTag(own, 'artifactId');
+    const rawVersion = firstTag(own, 'version') ?? firstTag(parent, 'version');
+    const resolve = (value) => value?.replace(/\$\{([^}]+)\}/g, (placeholder, name) => {
+        if (name === 'project.version' || name === 'version')
+            return rawVersion ?? placeholder;
+        if (name === 'project.groupId' || name === 'groupId')
+            return groupId ?? placeholder;
+        if (name === 'project.artifactId' || name === 'artifactId')
+            return artifactId ?? placeholder;
+        return properties[name] ?? placeholder;
+    });
+    const dependencies = [];
+    const dependenciesBlock = /<dependencies>([\s\S]*?)<\/dependencies>/.exec(top)?.[1] ?? '';
+    for (const match of dependenciesBlock.matchAll(/<dependency>([\s\S]*?)<\/dependency>/g)) {
+        const body = stripBlocks(match[1], ['exclusions']);
+        if (firstTag(body, 'scope') === 'test')
+            continue;
+        const g = resolve(firstTag(body, 'groupId'));
+        const a = resolve(firstTag(body, 'artifactId'));
+        if (!g || !a)
+            continue;
+        dependencies.push(`${g}:${a}:${resolve(firstTag(body, 'version')) ?? 'managed'}`);
+    }
+    return { groupId: resolve(groupId), artifactId: resolve(artifactId), version: resolve(rawVersion), dependencies };
+}
+function parseClassloaderModel(text) {
+    try {
+        const model = JSON.parse(text);
+        return (model.dependencies ?? [])
+            .map((d) => d.artifactCoordinates)
+            .filter((c) => Boolean(c?.groupId && c.artifactId))
+            .map((c) => `${c.groupId}:${c.artifactId}:${c.version ?? '?'}`);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Index a Mule application jar: hashes per entry, the pom and the resolved dependencies. */
+export function indexJar(bytes, options = {}) {
+    const limit = options.maxUncompressedBytes ?? MAX_UNCOMPRESSED_BYTES;
+    const skipped = { repository: 0, directories: 0 };
+    let total = 0;
+    const files = unzipSync(bytes, {
+        filter(entry) {
+            if (entry.name.startsWith('repository/')) {
+                skipped.repository++;
+                return false;
+            }
+            if (entry.name.endsWith('/')) {
+                skipped.directories++;
+                return false;
+            }
+            total += entry.originalSize;
+            if (total > limit)
+                throw new Error(`Jar content exceeds ${limit} bytes uncompressed`);
+            return true;
+        },
+    });
+    const entries = new Map();
+    for (const [name, content] of Object.entries(files)) {
+        entries.set(name, {
+            size: content.length,
+            sha256: createHash('sha256').update(content).digest('hex'),
+            gitSha1: gitBlobSha1(content),
+        });
+    }
+    const pomXmlName = Object.keys(files).find((name) => /^META-INF\/maven\/[^/]+\/[^/]+\/pom\.xml$/.test(name));
+    const pomPropsName = Object.keys(files).find((name) => /^META-INF\/maven\/[^/]+\/[^/]+\/pom\.properties$/.test(name));
+    const pom = pomXmlName ? parsePom(strFromU8(files[pomXmlName])) : undefined;
+    const propsVersion = pomPropsName
+        ? /^\s*version\s*[=:]\s*(\S+)\s*$/m.exec(strFromU8(files[pomPropsName]))?.[1]
+        : undefined;
+    const model = files['META-INF/mule-artifact/classloader-model.json'];
+    return {
+        sha256: createHash('sha256').update(bytes).digest('hex'),
+        size: bytes.length,
+        entries,
+        pom,
+        pomVersion: propsVersion ?? pom?.version,
+        resolvedDependencies: model ? parseClassloaderModel(strFromU8(model)) : undefined,
+        skipped,
+    };
+}
+function splitCoordinate(coordinate) {
+    const parts = coordinate.split(':');
+    return { key: parts.slice(0, 2).join(':'), version: parts.slice(2).join(':') };
+}
+/** Compare two dependency lists by `group:artifact`, reporting version changes and one-sided entries. */
+export function diffDependencies(deployed = [], repo = []) {
+    const left = new Map(deployed.map((d) => [splitCoordinate(d).key, splitCoordinate(d).version]));
+    const right = new Map(repo.map((d) => [splitCoordinate(d).key, splitCoordinate(d).version]));
+    const result = { changed: [], missingInRepo: [], extraInRepo: [] };
+    for (const [key, version] of left) {
+        if (!right.has(key))
+            result.missingInRepo.push(`${key}:${version}`);
+        else if (right.get(key) !== version)
+            result.changed.push({ dependency: key, deployed: version, repo: right.get(key) });
+    }
+    for (const [key, version] of right)
+        if (!left.has(key))
+            result.extraInRepo.push(`${key}:${version}`);
+    return result;
+}
+function hasDependencyDifferences(diff) {
+    return diff.changed.length + diff.missingInRepo.length + diff.extraInRepo.length > 0;
+}
+function finish(base, lists, counts) {
+    const byPath = (a, b) => a.path.localeCompare(b.path);
+    const differs = lists.changed.length + lists.missingInRepo.length + lists.extraInRepo.length > 0 ||
+        hasDependencyDifferences(base.dependencies) ||
+        Boolean(base.pomVersion.deployed && base.pomVersion.repo && base.pomVersion.deployed !== base.pomVersion.repo);
+    const notes = [...base.notes];
+    for (const [name, list] of Object.entries(lists)) {
+        if (list.length > MAX_LISTED)
+            notes.push(`${name} lists the first ${MAX_LISTED} of ${list.length} paths`);
+    }
+    return {
+        verdict: differs ? 'differs' : 'identical',
+        ...base,
+        summary: {
+            compared: counts.compared,
+            changed: lists.changed.length,
+            missingInRepo: lists.missingInRepo.length,
+            extraInRepo: lists.extraInRepo.length,
+            unmapped: counts.unmapped,
+            skippedRepositoryEntries: counts.skippedRepositoryEntries,
+        },
+        changed: lists.changed.sort(byPath).slice(0, MAX_LISTED),
+        missingInRepo: lists.missingInRepo.sort(byPath).slice(0, MAX_LISTED),
+        extraInRepo: lists.extraInRepo.sort(byPath).slice(0, MAX_LISTED),
+        notes,
+    };
+}
+/**
+ * Compare the deployed jar with a local jar. "Repo" in the output means the local jar.
+ * Equal SHA-256 short-circuits; otherwise every entry outside `repository/` is compared,
+ * so a rebuild that only changed timestamps still counts as identical.
+ */
+export function compareJarToJar(deployedBytes, localBytes, localLabel = 'local jar') {
+    const deployed = indexJar(deployedBytes);
+    const local = deployedBytes === localBytes ? deployed : indexJar(localBytes);
+    const changed = [];
+    const missingInRepo = [];
+    const extraInRepo = [];
+    if (deployed.sha256 !== local.sha256) {
+        for (const [name, entry] of deployed.entries) {
+            const other = local.entries.get(name);
+            if (!other)
+                missingInRepo.push({ path: name, deployedSize: entry.size });
+            else if (other.sha256 !== entry.sha256)
+                changed.push({ path: name, deployedSize: entry.size, repoSize: other.size });
+        }
+        for (const [name, entry] of local.entries) {
+            if (!deployed.entries.has(name))
+                extraInRepo.push({ path: name, repoSize: entry.size });
+        }
+    }
+    const notes = [];
+    if (!deployed.resolvedDependencies || !local.resolvedDependencies) {
+        notes.push('A jar has no classloader-model.json; dependencies compared from the declared pom dependencies');
+    }
+    const dependencies = deployed.resolvedDependencies && local.resolvedDependencies
+        ? diffDependencies(deployed.resolvedDependencies, local.resolvedDependencies)
+        : diffDependencies(deployed.pom?.dependencies, local.pom?.dependencies);
+    return finish({
+        against: { type: 'jar', path: localLabel, size: local.size },
+        sha256: { deployed: deployed.sha256, repo: local.sha256, match: deployed.sha256 === local.sha256 },
+        pomVersion: { deployed: deployed.pomVersion, repo: local.pomVersion },
+        dependencies,
+        notes,
+    }, { changed, missingInRepo, extraInRepo }, {
+        compared: deployed.entries.size,
+        unmapped: 0,
+        skippedRepositoryEntries: deployed.skipped.repository,
+    });
+}
+async function git(repoPath, args) {
+    try {
+        const { stdout } = await execFileAsync('git', ['-C', repoPath, ...args], {
+            encoding: 'utf8',
+            maxBuffer: 64 * 1024 * 1024,
+            env: { ...process.env, GIT_OPTIONAL_LOCKS: '0', GIT_TERMINAL_PROMPT: '0' },
+        });
+        return stdout;
+    }
+    catch (error) {
+        const stderr = error.stderr?.trim();
+        throw new Error(`git ${args[0]} failed${stderr ? `: ${stderr.split('\n')[0]}` : ''}`);
+    }
+}
+/** List packaged files at a ref, relative to the project directory, without reading their contents. */
+async function listTree(repoPath, ref) {
+    const out = await git(repoPath, ['ls-tree', '-r', '-l', '-z', ref, '--', 'pom.xml', MULE_DIR, RESOURCES_DIR]);
+    const entries = new Map();
+    for (const record of out.split('\0')) {
+        const tab = record.indexOf('\t');
+        if (tab < 0)
+            continue;
+        const [, type, oid, size] = record.slice(0, tab).split(/\s+/);
+        if (type !== 'blob')
+            continue;
+        entries.set(record.slice(tab + 1), { oid, size: Number(size) });
+    }
+    return entries;
+}
+/**
+ * Overlay uncommitted and untracked changes in the packaged paths onto a tree listing. Changed
+ * files are hashed as git blobs in place; their contents are never returned.
+ */
+async function overlayWorkingTree(repoPath, entries) {
+    const prefix = (await git(repoPath, ['rev-parse', '--show-prefix'])).trim();
+    const out = await git(repoPath, [
+        'status',
+        '--porcelain=v1',
+        '-z',
+        '--untracked-files=all',
+        '--',
+        'pom.xml',
+        MULE_DIR,
+        RESOURCES_DIR,
+    ]);
+    const records = out.split('\0').filter(Boolean);
+    const changes = [];
+    const touched = [];
+    for (let i = 0; i < records.length; i++) {
+        const status = records[i].slice(0, 2);
+        const file = records[i].slice(3);
+        if (status[0] === 'R' || status[0] === 'C')
+            touched.push(records[++i]);
+        touched.push(file);
+        const relative = file.startsWith(prefix) ? file.slice(prefix.length) : file;
+        changes.push({ path: relative, status: status.trim() });
+    }
+    for (const file of touched) {
+        if (!file.startsWith(prefix))
+            continue;
+        const relative = file.slice(prefix.length);
+        const absolute = path.join(repoPath, relative);
+        let stat;
+        try {
+            stat = fs.lstatSync(absolute);
+        }
+        catch {
+            entries.delete(relative);
+            continue;
+        }
+        const bytes = stat.isSymbolicLink()
+            ? Buffer.from(fs.readlinkSync(absolute))
+            : stat.isFile()
+                ? fs.readFileSync(absolute)
+                : undefined;
+        if (!bytes)
+            continue;
+        entries.set(relative, { oid: gitBlobSha1(bytes), size: bytes.length });
+    }
+    return changes;
+}
+function readRepoPom(repoPath, ref, workingTree) {
+    if (workingTree) {
+        const file = path.join(repoPath, 'pom.xml');
+        return Promise.resolve(fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : undefined);
+    }
+    return git(repoPath, ['show', `${ref}:./pom.xml`]).catch(() => undefined);
+}
+/**
+ * Compare the deployed jar with a git checkout of its source, by git blob ID. `repoPath` is the
+ * Mule project directory (it may be a subdirectory of a larger repository).
+ */
+export async function compareJarToGit(deployedBytes, options) {
+    const ref = validateGitRef(options.gitRef ?? 'HEAD');
+    if (options.includeWorkingTree && ref !== 'HEAD') {
+        throw new Error('includeWorkingTree compares the working tree, which is based on HEAD; omit gitRef');
+    }
+    const repoPath = path.resolve(options.repoPath);
+    const deployed = indexJar(deployedBytes);
+    const repo = await listTree(repoPath, ref);
+    const workingTreeChanges = options.includeWorkingTree ? await overlayWorkingTree(repoPath, repo) : undefined;
+    const changed = [];
+    const missingInRepo = [];
+    const claimed = new Set();
+    let compared = 0;
+    let unmapped = 0;
+    for (const [name, entry] of deployed.entries) {
+        const candidates = jarEntryToRepoCandidates(name);
+        if (candidates.length === 0) {
+            unmapped++;
+            continue;
+        }
+        compared++;
+        const match = candidates.find((candidate) => repo.has(candidate));
+        if (!match) {
+            missingInRepo.push({ path: candidates[0], jarPath: name, deployedSize: entry.size });
+            continue;
+        }
+        claimed.add(match);
+        const repoEntry = repo.get(match);
+        if (repoEntry.oid !== entry.gitSha1) {
+            changed.push({ path: match, jarPath: name, deployedSize: entry.size, repoSize: repoEntry.size });
+        }
+    }
+    const extraInRepo = [...repo.entries()]
+        .filter(([file]) => isPackagedRepoPath(file) && !claimed.has(file))
+        .map(([file, entry]) => ({ path: file, repoSize: entry.size }));
+    const pomText = await readRepoPom(repoPath, ref, Boolean(options.includeWorkingTree));
+    const repoPom = pomText ? parsePom(pomText) : undefined;
+    const notes = [
+        'Compiled classes and generated META-INF files are not compared',
+        'Resources changed by Maven filtering at build time show as changed',
+    ];
+    if (!repoPom)
+        notes.push('No pom.xml found in the repo');
+    return finish({
+        against: {
+            type: 'git',
+            repoPath,
+            gitRef: ref,
+            includeWorkingTree: Boolean(options.includeWorkingTree),
+        },
+        sha256: { deployed: deployed.sha256 },
+        pomVersion: { deployed: deployed.pomVersion, repo: repoPom?.version },
+        dependencies: diffDependencies(deployed.pom?.dependencies, repoPom?.dependencies),
+        notes,
+        ...(workingTreeChanges ? { workingTreeChanges } : {}),
+    }, { changed, missingInRepo, extraInRepo }, { compared, unmapped, skippedRepositoryEntries: deployed.skipped.repository });
+}
+/** Fetch the jar an application currently runs, from Exchange, bounded by `maxBytes`. */
+export async function fetchDeployedJar(client, orgId, env, appName, options = {}) {
+    const deployment = await client.cloudHub2.findDetailByName(orgId, env.id, appName);
+    if (!deployment)
+        throw new Error(`Application "${appName}" not found in ${env.name}`);
+    const { groupId, artifactId, version } = deployment.application.ref;
+    const jar = await client.exchange.downloadAppJar(orgId, groupId, artifactId, version, options);
+    return { ref: { groupId, artifactId, version }, ...jar };
+}
+//# sourceMappingURL=artifact-compare.js.map