@sfdxy/anypoint-connect 0.15.0 → 0.16.3

package/dist/mcp/tools/logs.js

@@ -1,44 +1,162 @@
 /**
- * MCP Tool Registrar — Log tools
- * get_logs, download_logs
+ * MCP Tool Registrar - Log tools
+ * get_logs, download_logs, and the log fetch shared with the analysis tools
  */
+import * as fs from 'node:fs';
 import { z } from 'zod';
-import { mcpError, mcpText, resolveEnvironment, timeWindow } from './shared.js';
+import { MAX_PREVIOUS_SPECS, parseLogFile } from '../../api/LogsApi.js';
+import { buildFilter, MAX_LOG_LINES, searchEntries } from '../../analysis/filter.js';
+import { formatEntries, summarizeEntries } from '../../analysis/summary.js';
+import { BUCKETS } from '../../analysis/stats.js';
+import { resolveWritablePath } from '../../safety/paths.js';
+import { mcpError, mcpText, resolveEnvironment } from './shared.js';
+/** Default and largest `maxLines` for download_logs. */
+export const DOWNLOAD_DEFAULT_LINES = 2000;
+export const DOWNLOAD_MAX_LINES = 20000;
+/**
+ * Resolve the environment and the app's log file in one place, for every log and analysis tool.
+ * Reads the desired spec's file, or the last successful spec's when the desired one is still empty.
+ */
+export async function fetchLogText(client, appName, environment, read = {}) {
+    const { orgId, env } = await resolveEnvironment(client, environment);
+    const { text, ...source } = await client.logs.getLogFile(orgId, env.id, appName, read);
+    return { orgId, env, text, source };
+}
+/** A note for responses read from the fallback spec, or undefined. */
+export function sourceNotice(source) {
+    if (!source.fallbackFromSpecId)
+        return undefined;
+    return `The current spec ${source.fallbackFromSpecId} has no log lines yet (the app was just changed or started), so these are the logs of the last successful spec ${source.specId}. Retry in a few minutes for the new replicas.`;
+}
+/** Turn hoursBack or startTime/endTime into an epoch window plus ISO strings for the response. */
+export function logWindow(input, defaultHours) {
+    if (input.hoursBack !== undefined && (input.startTime || input.endTime)) {
+        throw new Error('Pass hoursBack or startTime/endTime, not both');
+    }
+    const parse = (value, name) => {
+        const ms = Date.parse(value);
+        if (Number.isNaN(ms))
+            throw new Error(`${name} is not an ISO 8601 date: ${value}`);
+        return ms;
+    };
+    if (input.startTime || input.endTime) {
+        const startTime = input.startTime ? parse(input.startTime, 'startTime') : undefined;
+        const endTime = input.endTime ? parse(input.endTime, 'endTime') : undefined;
+        if (startTime !== undefined && endTime !== undefined && startTime > endTime) {
+            throw new Error('startTime is after endTime');
+        }
+        return {
+            startTime,
+            endTime,
+            period: {
+                from: startTime !== undefined ? new Date(startTime).toISOString() : 'start of log',
+                to: endTime !== undefined ? new Date(endTime).toISOString() : 'now',
+            },
+        };
+    }
+    const hours = input.hoursBack ?? defaultHours;
+    if (hours === undefined)
+        return {};
+    const now = Date.now();
+    const startTime = now - hours * 60 * 60 * 1000;
+    return { startTime, period: { from: new Date(startTime).toISOString(), to: new Date(now).toISOString() } };
+}
+/** Inputs shared by every tool that filters log entries. */
+export const logFilterInputs = {
+    level: z
+        .string()
+        .optional()
+        .describe('Minimum log level: TRACE, DEBUG, INFO, WARN, ERROR or FATAL. Entries at or above it are kept.'),
+    search: z
+        .string()
+        .optional()
+        .describe('Text to find, case-insensitive. Matches the message, logger, thread, event ID, stack trace and JSON Logger payload of each entry, including its continuation lines.'),
+    regex: z.boolean().optional().describe('Treat search as a case-insensitive JavaScript regular expression'),
+    logger: z.string().optional().describe('Only entries whose logger name contains this text (case-insensitive)'),
+};
+/** Inputs for a time window: a look-back in hours, or explicit ISO bounds. */
+export const logWindowInputs = {
+    hoursBack: z.number().positive().optional().describe('Only entries from the last N hours'),
+    startTime: z
+        .string()
+        .optional()
+        .describe('Only entries at or after this ISO 8601 time. Do not combine with hoursBack.'),
+    endTime: z
+        .string()
+        .optional()
+        .describe('Only entries at or before this ISO 8601 time. Do not combine with hoursBack.'),
+};
+/** Input to read the generations an update replaced, not just the current one. */
+export const previousSpecsInput = z
+    .number()
+    .int()
+    .min(0)
+    .max(MAX_PREVIOUS_SPECS)
+    .optional()
+    .describe(`Also read this many earlier deployment specs (max ${MAX_PREVIOUS_SPECS}), merged by time. Each update starts a new spec with its own log file, so the default (0) hides the generation that ran before the last update; use 1 to see a rollout window.`);
+/** The spec fields of a log response. */
+function specView(source) {
+    return source.specIds ? { specId: source.specId, specIds: source.specIds } : { specId: source.specId };
+}
+function entryView(e) {
+    return {
+        timestamp: new Date(e.timestamp).toISOString(),
+        level: e.priority,
+        ...(e.loggerName ? { logger: e.loggerName } : {}),
+        ...(e.instanceId ? { replica: e.instanceId } : {}),
+        ...(e.correlationId ? { correlationId: e.correlationId } : {}),
+        message: e.message,
+        ...(e.stackTrace ? { stackTrace: e.stackTrace } : {}),
+    };
+}
+/** Write text to a file inside the project root, refusing to replace a file unless asked. */
+function writeOutput(file, content, overwrite) {
+    const target = resolveWritablePath(file, { overwrite });
+    fs.writeFileSync(target, content, { encoding: 'utf-8', mode: 0o600, flag: overwrite ? 'w' : 'wx' });
+    return target;
+}
 export function registerLogTools(server, client) {
     server.registerTool('get_logs', {
         title: 'Get Application Logs',
-        description: "Fetches the most recent log entries from a running Mule application. Returns timestamps, log levels (ERROR, WARN, INFO, DEBUG), and messages. Useful for quickly checking an app's current state, spotting recent errors, or verifying a deployment succeeded. For large time-range downloads, use download_logs instead.",
+        description: `Fetches the most recent log entries of a Mule application, newest first. Multi-line entries (stack traces, error reports, JSON Logger bodies) are returned whole, with the timestamp and level of the line that starts them. Returns total (all matches), returned and truncated, so a cut result is visible. Filter by level, logger, text or regex, and time window. Right after a start or change, logs come from the last successful spec until the new one has lines, and the response says so. For summaries or large exports, use download_logs.`,
         inputSchema: {
             appName: z.string().describe('Application name exactly as deployed'),
             environment: z.string().describe('Environment name or ID'),
             lines: z
                 .number()
+                .int()
+                .min(1)
+                .max(MAX_LOG_LINES)
                 .optional()
-                .describe('Number of most recent log entries to return (default: 100, max: 1000)'),
-            level: z
-                .string()
-                .optional()
-                .describe('Minimum log level filter: ERROR, WARN, INFO, or DEBUG. Only entries at or above this level are returned.'),
-            search: z
-                .string()
-                .optional()
-                .describe('Text to search for in log messages (case-insensitive substring match). Use to find specific errors, correlation IDs, flow names, or keywords.'),
+                .describe(`Number of most recent matching entries to return (default: 100, max: ${MAX_LOG_LINES})`),
+            ...logFilterInputs,
+            ...logWindowInputs,
+            previousSpecs: previousSpecsInput,
         },
         annotations: { readOnlyHint: true },
-    }, async ({ appName, environment, lines, level, search }) => {
+    }, async ({ appName, environment, lines, level, search, regex, logger, hoursBack, startTime, endTime, previousSpecs, }) => {
         try {
-            const { orgId, env } = await resolveEnvironment(client, environment);
-            const entries = await client.logs.getLogs(orgId, env.id, appName, {
-                limit: lines || 100,
+            const window = logWindow({ hoursBack, startTime, endTime });
+            const { text, source } = await fetchLogText(client, appName, environment, { previousSpecs });
+            const result = searchEntries(parseLogFile({ ...source, text }), {
+                limit: lines ?? 100,
                 level,
                 search,
+                regex,
+                logger,
+                startTime: window.startTime,
+                endTime: window.endTime,
+            });
+            const notice = sourceNotice(source);
+            return mcpText({
+                total: result.total,
+                returned: result.returned,
+                truncated: result.truncated,
+                ...(window.period ? { period: window.period } : {}),
+                ...specView(source),
+                ...(notice ? { notice } : {}),
+                entries: result.entries.map(entryView),
             });
-            const formatted = entries.map((e) => ({
-                timestamp: new Date(e.timestamp).toISOString(),
-                level: e.priority,
-                message: e.message,
-            }));
-            return mcpText({ total: entries.length, entries: formatted });
         }
         catch (error) {
             return mcpError(error);
@@ -46,28 +164,93 @@ export function registerLogTools(server, client) {
     });
     server.registerTool('download_logs', {
         title: 'Download Logs for Time Range',
-        description: 'Downloads the full application log file and filters it to a specific time window. Returns all matching log entries as formatted text lines (timestamp [LEVEL] message). Use this for historical analysis, incident investigation, or exporting logs. For quick recent checks, use get_logs instead.',
+        description: `Reads the full application log file for a time window and filters it by level, logger, text or regex. mode "lines" (default) returns matching entries oldest first as text (timestamp [LEVEL] logger - message, plus stack traces), keeping the newest maxLines entries with a truncation notice that gives the total. mode "summary" returns counts by level, by logger and by time bucket, and the top message templates, instead of lines. outputFile writes the full filtered result (every line, or the summary JSON) to a file inside the project root and returns only the path and counts. For a quick look at recent lines, use get_logs.`,
         inputSchema: {
             appName: z.string().describe('Application name exactly as deployed'),
             environment: z.string().describe('Environment name or ID'),
             hoursBack: z
                 .number()
-                .describe('How many hours of logs to retrieve (e.g. 1 for last hour, 24 for last day, 168 for last week)'),
-            level: z.string().optional().describe('Minimum log level filter: ERROR, WARN, INFO, or DEBUG'),
+                .positive()
+                .optional()
+                .describe('How many hours of logs to read (default 24; e.g. 1 for the last hour, 168 for the last week)'),
+            startTime: logWindowInputs.startTime,
+            endTime: logWindowInputs.endTime,
+            ...logFilterInputs,
+            previousSpecs: previousSpecsInput,
+            mode: z
+                .enum(['lines', 'summary'])
+                .optional()
+                .describe('lines (default): the log text. summary: counts and top message templates only.'),
+            bucket: z
+                .enum(Object.keys(BUCKETS))
+                .optional()
+                .describe('Time bucket for the summary histogram: 5m, 15m or 1h (default 1h)'),
+            maxLines: z
+                .number()
+                .int()
+                .min(1)
+                .max(DOWNLOAD_MAX_LINES)
+                .optional()
+                .describe(`Most entries returned in lines mode (default ${DOWNLOAD_DEFAULT_LINES}, max ${DOWNLOAD_MAX_LINES}). The newest are kept. Ignored with outputFile, which writes every entry.`),
+            outputFile: z
+                .string()
+                .optional()
+                .describe('Write the full filtered result to this file, relative to the project root (must stay inside it). The response then holds only the path and counts.'),
+            overwrite: z.boolean().optional().describe('Replace outputFile if it already exists'),
         },
-        annotations: { readOnlyHint: true },
-    }, async ({ appName, environment, hoursBack, level }) => {
+        // Not read-only: outputFile writes a local file. It never changes the platform.
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
+    }, async (input) => {
         try {
-            const { orgId, env } = await resolveEnvironment(client, environment);
-            const { from, to } = timeWindow(hoursBack);
-            const entries = await client.logs.getLogsForPeriod(orgId, env.id, appName, from, to, level);
-            const text = entries
-                .map((e) => {
-                const ts = new Date(e.timestamp).toISOString();
-                return `${ts} [${e.priority}] ${e.message}`;
-            })
-                .join('\n');
-            return mcpText(text || 'No log entries found for the specified period.');
+            const window = logWindow(input, 24);
+            // Validate the filter before the download, so a bad regex fails fast.
+            const keep = buildFilter({ ...input, startTime: window.startTime, endTime: window.endTime });
+            if (input.outputFile)
+                resolveWritablePath(input.outputFile, { overwrite: input.overwrite });
+            const { env, text, source } = await fetchLogText(client, input.appName, input.environment, {
+                previousSpecs: input.previousSpecs,
+            });
+            const entries = parseLogFile({ ...source, text }).filter(keep);
+            const notice = sourceNotice(source);
+            const context = {
+                app: input.appName,
+                environment: env.name,
+                period: window.period,
+                ...specView(source),
+                ...(notice ? { notice } : {}),
+            };
+            if (input.mode === 'summary') {
+                const summary = { ...context, ...summarizeEntries(entries, { bucket: input.bucket }) };
+                if (input.outputFile) {
+                    const content = JSON.stringify(summary, null, 2);
+                    const path = writeOutput(input.outputFile, content, input.overwrite);
+                    return mcpText({ ...context, mode: 'summary', outputFile: path, matched: entries.length });
+                }
+                return mcpText(summary);
+            }
+            if (input.outputFile) {
+                const content = formatEntries(entries);
+                const path = writeOutput(input.outputFile, content ? content + '\n' : '', input.overwrite);
+                return mcpText({
+                    ...context,
+                    mode: 'lines',
+                    outputFile: path,
+                    matched: entries.length,
+                    bytes: Buffer.byteLength(content),
+                });
+            }
+            if (entries.length === 0) {
+                return mcpText([notice, 'No log entries found for the specified period.'].filter(Boolean).join('\n'));
+            }
+            const maxLines = input.maxLines ?? DOWNLOAD_DEFAULT_LINES;
+            const shown = entries.slice(-maxLines);
+            const header = [];
+            if (notice)
+                header.push(`[${notice}]`);
+            if (shown.length < entries.length) {
+                header.push(`[Truncated: showing the newest ${shown.length} of ${entries.length} matching entries. Narrow with search, level, logger or a shorter window, use mode "summary", or pass outputFile to write all of them.]`);
+            }
+            return mcpText([...header, formatEntries(shown)].join('\n'));
         }
         catch (error) {
             return mcpError(error);

package/dist/mcp/tools/logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../../src/mcp/tools/logs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEhF,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,MAAsB;IACtE,MAAM,CAAC,YAAY,CACf,UAAU,EACV;QACI,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACP,2TAA2T;QAC/T,WAAW,EAAE;YACT,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACpE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC1D,KAAK,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,uEAAuE,CAAC;YACtF,KAAK,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACL,0GAA0G,CAC7G;YACL,MAAM,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACL,+IAA+I,CAClJ;SACR;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACtC,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACrD,IAAI,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAErE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE;gBAC9D,KAAK,EAAE,KAAK,IAAI,GAAG;gBACnB,KAAK;gBACL,MAAM;aACT,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC;gBAC5C,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC9C,KAAK,EAAE,CAAC,CAAC,QAAQ;gBACjB,OAAO,EAAE,CAAC,CAAC,OAAO;aACrB,CAAC,CAAC,CAAC;YAEJ,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,eAAe,EACf;QACI,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACP,qSAAqS;QACzS,WAAW,EAAE;YACT,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACpE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC1D,SAAS,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CACL,+FAA+F,CAClG;YACL,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;SACjG;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACtC,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;QACjD,IAAI,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAErE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAE3C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAE5F,MAAM,IAAI,GAAG,OAAO;iBACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACP,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC/C,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhB,OAAO,OAAO,CAAC,IAAI,IAAI,gDAAgD,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC,CACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../../src/mcp/tools/logs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAuC,MAAM,sBAAsB,CAAC;AAE7G,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAe,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEpE,wDAAwD;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AASxC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,MAAsB,EACtB,OAAe,EACf,WAAmB,EACnB,OAAuB,EAAE;IAEzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACvF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC1C,IAAI,CAAC,MAAM,CAAC,kBAAkB;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,oBAAoB,MAAM,CAAC,kBAAkB,kHAAkH,MAAM,CAAC,MAAM,gDAAgD,CAAC;AACxO,CAAC;AAQD,kGAAkG;AAClG,MAAM,UAAU,SAAS,CACrB,KAAqB,EACrB,YAAqB;IAErB,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,KAAK,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,CAAC;IACd,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,GAAG,OAAO,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO;YACH,SAAS;YACT,OAAO;YACP,MAAM,EAAE;gBACJ,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,cAAc;gBAClF,EAAE,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK;aACtE;SACJ,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,IAAI,YAAY,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;AAC/G,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,KAAK,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+FAA+F,CAAC;IAC9G,MAAM,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACL,qKAAqK,CACxK;IACL,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;IAC1G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sEAAsE,CAAC;CACjH,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC1F,SAAS,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,6EAA6E,CAAC;IAC5F,OAAO,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,8EAA8E,CAAC;CAChG,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,GAAG,EAAE;KACL,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,kBAAkB,CAAC;KACvB,QAAQ,EAAE;KACV,QAAQ,CACL,qDAAqD,kBAAkB,iLAAiL,CAC3P,CAAC;AAEN,yCAAyC;AACzC,SAAS,QAAQ,CAAC,MAAiB;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC3G,CAAC;AAED,SAAS,SAAS,CAAC,CAAmB;IAClC,OAAO;QACH,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAC9C,KAAK,EAAE,CAAC,CAAC,QAAQ;QACjB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACN,CAAC;AAED,6FAA6F;AAC7F,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,SAAmB;IACnE,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,MAAsB;IACtE,MAAM,CAAC,YAAY,CACf,UAAU,EACV;QACI,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,yhBAAyhB;QACtiB,WAAW,EAAE;YACT,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACpE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC1D,KAAK,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,aAAa,CAAC;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CAAC,wEAAwE,aAAa,GAAG,CAAC;YACvG,GAAG,eAAe;YAClB,GAAG,eAAe;YAClB,aAAa,EAAE,kBAAkB;SACpC;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACtC,EACD,KAAK,EAAE,EACH,OAAO,EACP,WAAW,EACX,KAAK,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,OAAO,EACP,aAAa,GAChB,EAAE,EAAE;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE;gBAC5D,KAAK,EAAE,KAAK,IAAI,GAAG;gBACnB,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,MAAM;gBACN,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;aAC1B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAEpC,OAAO,OAAO,CAAC;gBACX,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;aACzC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,eAAe,EACf;QACI,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,onBAAonB;QACjoB,WAAW,EAAE;YACT,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACpE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC1D,SAAS,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CACL,8FAA8F,CACjG;YACL,SAAS,EAAE,eAAe,CAAC,SAAS;YACpC,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,GAAG,eAAe;YAClB,aAAa,EAAE,kBAAkB;YACjC,IAAI,EAAE,CAAC;iBACF,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CAAC,gFAAgF,CAAC;YAC/F,MAAM,EAAE,CAAC;iBACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAA0B,CAAC;iBACnD,QAAQ,EAAE;iBACV,QAAQ,CAAC,mEAAmE,CAAC;YAClF,QAAQ,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,kBAAkB,CAAC;iBACvB,QAAQ,EAAE;iBACV,QAAQ,CACL,gDAAgD,sBAAsB,SAAS,kBAAkB,4EAA4E,CAChL;YACL,UAAU,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACL,oJAAoJ,CACvJ;YACL,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACxF;QACD,gFAAgF;QAChF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;KACrF,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACZ,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,sEAAsE;YACtE,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,IAAI,KAAK,CAAC,UAAU;gBAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAE5F,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE;gBACvF,aAAa,EAAE,KAAK,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG;gBACZ,GAAG,EAAE,KAAK,CAAC,OAAO;gBAClB,WAAW,EAAE,GAAG,CAAC,IAAI;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChC,CAAC;YAEF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBACvF,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;oBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACjD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;oBACrE,OAAO,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/F,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC3F,OAAO,OAAO,CAAC;oBACX,GAAG,OAAO;oBACV,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;iBACpC,CAAC,CAAC;YACP,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,OAAO,CACV,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxF,CAAC;YACN,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,sBAAsB,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CACP,kCAAkC,KAAK,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,yIAAyI,CAC/M,CAAC;YACN,CAAC;YACD,OAAO,OAAO,CAAC,CAAC,GAAG,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC,CACJ,CAAC;AACN,CAAC"}

package/dist/mcp/tools/shared.d.ts

@@ -4,6 +4,7 @@
  */
 import type { AnypointClient } from '../../client/AnypointClient.js';
 import type { Environment } from '../../api/AccessManagementApi.js';
+import { z } from 'zod';
 /** Resolve the default org and an environment name or ID in one step. */
 export declare function resolveEnvironment(client: AnypointClient, environment: string): Promise<{
     orgId: string;
@@ -47,4 +48,30 @@ export declare function dryRunPreview(preview: Record<string, unknown>): {
         text: string;
     }[];
 };
+/** Inputs every mutating tool accepts: preview by default, apply on confirm, and a second flag for production. */
+export declare const writeInputs: {
+    confirm: z.ZodOptional<z.ZodBoolean>;
+    confirmProduction: z.ZodOptional<z.ZodBoolean>;
+};
+/**
+ * Gate a write. Returns the response to send instead of writing (a preview, or a refusal for
+ * production without `confirmProduction`), or `null` when the caller may proceed.
+ */
+export declare function guardWrite(input: {
+    env: Pick<Environment, 'name' | 'isProduction'>;
+    confirm?: boolean;
+    confirmProduction?: boolean;
+    preview: Record<string, unknown>;
+}): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: true;
+} | null;
 //# sourceMappingURL=shared.d.ts.map

package/dist/mcp/tools/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAGpE,yEAAyE;AACzE,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC,CAI9C;AAED,2FAA2F;AAC3F,wBAAgB,UAAU,CAAC,SAAS,SAAK,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAI7G;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO;;;;;;EAKtC;AAED,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO;;;;;EAGvC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;EAM7D"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,yEAAyE;AACzE,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC,CAI9C;AAED,2FAA2F;AAC3F,wBAAgB,UAAU,CAAC,SAAS,SAAK,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAI7G;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO;;;;;;EAKtC;AAED,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO;;;;;EAGvC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;EAM7D;AAED,kHAAkH;AAClH,eAAO,MAAM,WAAW;;;CASvB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAC9B,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;IAChD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;;;;;;;;;;;SA4BA"}

package/dist/mcp/tools/shared.js

@@ -2,7 +2,9 @@
  * Shared MCP tool utilities
  * Common helpers used across all MCP tool registrars
  */
+import { z } from 'zod';
 import { errorMessage } from '../../utils/errors.js';
+import { isProductionEnv } from '../../safety/guards.js';
 /** Resolve the default org and an environment name or ID in one step. */
 export async function resolveEnvironment(client, environment) {
     const orgId = await client.getDefaultOrgId();
@@ -42,4 +44,44 @@ export function dryRunPreview(preview) {
         ...preview,
     });
 }
+/** Inputs every mutating tool accepts: preview by default, apply on confirm, and a second flag for production. */
+export const writeInputs = {
+    confirm: z
+        .boolean()
+        .optional()
+        .describe('Apply the change. Without it the tool returns a preview and changes nothing'),
+    confirmProduction: z
+        .boolean()
+        .optional()
+        .describe('Required in addition to confirm when the target environment is production'),
+};
+/**
+ * Gate a write. Returns the response to send instead of writing (a preview, or a refusal for
+ * production without `confirmProduction`), or `null` when the caller may proceed.
+ */
+export function guardWrite(input) {
+    const production = isProductionEnv(input.env.name, input.env.isProduction);
+    if (!input.confirm) {
+        return dryRunPreview({
+            ...input.preview,
+            ...(production ? { production: true, requires: 'confirm: true and confirmProduction: true' } : {}),
+        });
+    }
+    if (production && !input.confirmProduction) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        refused: true,
+                        message: `${input.env.name} is a production environment. Nothing was changed. Re-call with confirm: true and confirmProduction: true to apply.`,
+                        ...input.preview,
+                    }, null, 2),
+                },
+            ],
+            isError: true,
+        };
+    }
+    return null;
+}
 //# sourceMappingURL=shared.js.map

package/dist/mcp/tools/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/mcp/tools/shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAsB,EACtB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,SAAS,GAAG,EAAE;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;AACxG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAa;KACzB,CAAC;AACN,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,OAAO,CAAC,OAAgB;IACpC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgC;IAC1D,OAAO,OAAO,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,+FAA+F;QACxG,GAAG,OAAO;KACb,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/mcp/tools/shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAsB,EACtB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,SAAS,GAAG,EAAE;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;AACxG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAa;KACzB,CAAC;AACN,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,OAAO,CAAC,OAAgB;IACpC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgC;IAC1D,OAAO,OAAO,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,+FAA+F;QACxG,GAAG,OAAO;KACb,CAAC,CAAC;AACP,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,MAAM,WAAW,GAAG;IACvB,OAAO,EAAE,CAAC;SACL,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,6EAA6E,CAAC;IAC5F,iBAAiB,EAAE,CAAC;SACf,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;CAC7F,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAK1B;IACG,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,aAAa,CAAC;YACjB,GAAG,KAAK,CAAC,OAAO;YAChB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,2CAA2C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrG,CAAC,CAAC;IACP,CAAC;IACD,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACzC,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAChB;wBACI,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,qHAAqH;wBAC/I,GAAG,KAAK,CAAC,OAAO;qBACnB,EACD,IAAI,EACJ,CAAC,CACJ;iBACJ;aACJ;YACD,OAAO,EAAE,IAAa;SACzB,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/safety/deployment.d.ts

@@ -25,6 +25,8 @@ export interface DeploymentInput {
     artifactId: string;
     version: string;
     runtime?: string;
+    javaVersion?: string;
+    releaseChannel?: string;
     replicas?: number;
     region?: string;
     vcores?: string;
@@ -68,8 +70,51 @@ export interface RollbackTarget {
 }
 /** Resolve a rollback to a complete historical artifact ref without confusing spec IDs with artifact versions. */
 export declare function resolveRollbackTarget(existing: CH2Deployment, specs: CH2DeploymentSpec[], toVersion?: string): RollbackTarget | null;
-/** Merge settings while retaining masked secure entries required by the Application Manager API. */
-export declare function mergeApplicationProperties(existing: CH2Deployment, properties?: Record<string, string>, secureProperties?: Record<string, string>): ApplicationPropertiesService;
+/** A requested change to an application's properties. Values are already resolved (no file references). */
+export interface SettingsChange {
+    properties?: Record<string, string>;
+    secureProperties?: Record<string, string>;
+    removeProperties?: string[];
+    removeSecureProperties?: string[];
+    /** Plaintext keys whose current value moves into secure properties without leaving the server. */
+    moveToSecure?: string[];
+}
+export interface PropertyChange {
+    key: string;
+    /** Present only for plaintext keys that do not look secret. */
+    from?: string;
+    to?: string;
+}
+export interface SettingsDiff {
+    added: PropertyChange[];
+    changed: PropertyChange[];
+    removed: string[];
+    secureAdded: string[];
+    secureChanged: string[];
+    secureRemoved: string[];
+    movedToSecure: string[];
+}
+export interface SettingsPlan {
+    /** The complete properties service to send. The platform replaces the maps wholesale. */
+    service: ApplicationPropertiesService;
+    diff: SettingsDiff;
+    warnings: string[];
+    changed: boolean;
+}
+/** Read the properties service of a live deployment. */
+export declare function currentSettings(existing: CH2Deployment): {
+    properties: Record<string, string>;
+    secureProperties: Record<string, string>;
+};
+export declare function isEmptySettingsChange(change: SettingsChange | undefined): boolean;
+/**
+ * Plan a settings change against the live deployment.
+ *
+ * The platform stores secure values encrypted and returns them as `******`. Sending `******` back
+ * for a key keeps its stored value, so every untouched secure key is resent masked; that is what
+ * lets one secret change without wiping the others. Removal works because the full maps are sent.
+ */
+export declare function planSettingsChange(existing: CH2Deployment, change: SettingsChange): SettingsPlan;
 /** A single field that would change between the live deployment and a proposed payload. */
 export interface DeploymentChange {
     field: string;

package/dist/safety/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/safety/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACR,4BAA4B,EAC5B,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,uBAAuB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC,kDAAkD;AAClD,eAAO,MAAM,YAAY,kEAAmE,CAAC;AAE7F;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAexD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,uBAAuB,CA4ClF;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAC9B,WAAW,EAAE;QAAE,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAS5G;AAED,MAAM,WAAW,cAAc;IAC3B,GAAG,EAAE,WAAW,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAWD,kHAAkH;AAClH,wBAAgB,qBAAqB,CACjC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,iBAAiB,EAAE,EAC1B,SAAS,CAAC,EAAE,MAAM,GACnB,cAAc,GAAG,IAAI,CAwBvB;AAED,oGAAoG;AACpG,wBAAgB,0BAA0B,CACtC,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1C,4BAA4B,CAS9B;AAED,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,GAAG,gBAAgB,EAAE,CAiBzG"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/safety/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACR,4BAA4B,EAC5B,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,uBAAuB,EAC1B,MAAM,wBAAwB,CAAC;AAGhC,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC,kDAAkD;AAClD,eAAO,MAAM,YAAY,kEAAmE,CAAC;AAE7F;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAexD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,uBAAuB,CAiDlF;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAC9B,WAAW,EAAE;QAAE,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAS5G;AAED,MAAM,WAAW,cAAc;IAC3B,GAAG,EAAE,WAAW,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAWD,kHAAkH;AAClH,wBAAgB,qBAAqB,CACjC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,iBAAiB,EAAE,EAC1B,SAAS,CAAC,EAAE,MAAM,GACnB,cAAc,GAAG,IAAI,CAwBvB;AAED,2GAA2G;AAC3G,MAAM,WAAW,cAAc;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,kGAAkG;IAClG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IACzB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IACzB,yFAAyF;IACzF,OAAO,EAAE,4BAA4B,CAAC;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,wDAAwD;AACxD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG;IACtD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C,CAKA;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,OAAO,CASjF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,GAAG,YAAY,CA6GhG;AAED,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,GAAG,gBAAgB,EAAE,CAiBzG"}