@sfdxy/anypoint-connect 0.15.0 → 0.16.3

package/dist/safety/deployment.js

@@ -9,6 +9,7 @@
  *
  * These are pure functions (no I/O) so they unit-test cleanly.
  */
+import { MASKED, looksSecret, redactValue } from './secrets.js';
 export const DEFAULT_RUNTIME = '4.8.0';
 export const DEFAULT_REGION = 'cloudhub-us-east-2';
 export const DEFAULT_VCORES = '0.1';
@@ -52,14 +53,15 @@ export function parseVcores(vcores) {
 export function buildCreatePayload(input) {
     const region = input.region || DEFAULT_REGION;
     const vCores = parseVcores(input.vcores ?? DEFAULT_VCORES);
-    const configuration = {};
-    if (input.properties || input.secureProperties) {
-        configuration['mule.agent.application.properties.service'] = {
+    // Always sent, even when empty: a create without the properties service ends FAILED with
+    // "Cannot invoke ResourceRef.getId() because r is null".
+    const configuration = {
+        'mule.agent.application.properties.service': {
             applicationName: input.appName,
-            ...(input.properties ? { properties: input.properties } : {}),
-            ...(input.secureProperties ? { secureProperties: input.secureProperties } : {}),
-        };
-    }
+            properties: input.properties ?? {},
+            secureProperties: input.secureProperties ?? {},
+        },
+    };
     return {
         name: input.appName,
         application: {
@@ -71,13 +73,17 @@ export function buildCreatePayload(input) {
             },
             desiredState: 'STARTED',
             ...(vCores !== undefined ? { vCores } : {}),
-            ...(Object.keys(configuration).length > 0 ? { configuration } : {}),
+            configuration,
         },
         target: {
             provider: 'MC',
             targetId: region,
             deploymentSettings: {
-                runtime: { version: input.runtime || DEFAULT_RUNTIME },
+                runtime: {
+                    version: input.runtime || DEFAULT_RUNTIME,
+                    ...(input.releaseChannel ? { releaseChannel: input.releaseChannel } : {}),
+                    ...(input.javaVersion ? { java: input.javaVersion } : {}),
+                },
                 http: {
                     inbound: {
                         publicUrl: `${input.appName}.${regionToSubdomain(region)}.cloudhub.io`,
@@ -138,15 +144,143 @@ export function resolveRollbackTarget(existing, specs, toVersion) {
     const previousArtifact = priorSpecs.find((spec) => spec.application?.ref && !refsEqual(spec.application.ref, current));
     return previousArtifact ? { ref: previousArtifact.application.ref, sourceSpecId: previousArtifact.version } : null;
 }
-/** Merge settings while retaining masked secure entries required by the Application Manager API. */
-export function mergeApplicationProperties(existing, properties, secureProperties) {
+/** Read the properties service of a live deployment. */
+export function currentSettings(existing) {
     const configuration = existing.application.configuration ?? {};
     const service = (configuration['mule.agent.application.properties.service'] ??
         {});
+    return { properties: { ...(service.properties ?? {}) }, secureProperties: { ...(service.secureProperties ?? {}) } };
+}
+export function isEmptySettingsChange(change) {
+    if (!change)
+        return true;
+    return (Object.keys(change.properties ?? {}).length === 0 &&
+        Object.keys(change.secureProperties ?? {}).length === 0 &&
+        (change.removeProperties ?? []).length === 0 &&
+        (change.removeSecureProperties ?? []).length === 0 &&
+        (change.moveToSecure ?? []).length === 0);
+}
+/**
+ * Plan a settings change against the live deployment.
+ *
+ * The platform stores secure values encrypted and returns them as `******`. Sending `******` back
+ * for a key keeps its stored value, so every untouched secure key is resent masked; that is what
+ * lets one secret change without wiping the others. Removal works because the full maps are sent.
+ */
+export function planSettingsChange(existing, change) {
+    const current = currentSettings(existing);
+    const next = { properties: { ...current.properties }, secureProperties: { ...current.secureProperties } };
+    const warnings = [];
+    const errors = [];
+    const diff = {
+        added: [],
+        changed: [],
+        removed: [],
+        secureAdded: [],
+        secureChanged: [],
+        secureRemoved: [],
+        movedToSecure: [],
+    };
+    const setPlain = change.properties ?? {};
+    const setSecure = change.secureProperties ?? {};
+    const removePlain = new Set(change.removeProperties ?? []);
+    const removeSecure = new Set(change.removeSecureProperties ?? []);
+    const moves = new Set(change.moveToSecure ?? []);
+    for (const key of Object.keys(setPlain)) {
+        if (key in setSecure)
+            errors.push(`"${key}" is given as both a plain and a secure property`);
+        if (removePlain.has(key))
+            errors.push(`"${key}" is both set and removed`);
+        if (moves.has(key))
+            errors.push(`"${key}" is both set as plain and moved to secure`);
+        if (setPlain[key] === MASKED)
+            errors.push(`"${key}": "${MASKED}" is not a valid plain property value`);
+    }
+    for (const key of Object.keys(setSecure)) {
+        if (removeSecure.has(key))
+            errors.push(`"${key}" is both set and removed`);
+        if (setSecure[key] === MASKED && !(key in current.secureProperties)) {
+            errors.push(`"${key}": "${MASKED}" keeps a stored secret, but no secure property "${key}" exists`);
+        }
+        if (key in current.properties && !removePlain.has(key) && !moves.has(key)) {
+            errors.push(`"${key}" already exists as a plain property. Use moveToSecure to move its current value, or add it to removeProperties`);
+        }
+    }
+    for (const key of moves) {
+        if (!(key in current.properties)) {
+            if (key in current.secureProperties)
+                warnings.push(`"${key}" is already a secure property`);
+            else
+                errors.push(`"${key}" cannot move to secure: no plain property with that name`);
+        }
+        if (key in setSecure)
+            errors.push(`"${key}" is both moved and given a new secure value`);
+    }
+    if (errors.length)
+        throw new Error(`Invalid settings change:\n- ${errors.join('\n- ')}`);
+    const showValue = (key, value) => value === undefined ? undefined : looksSecret(key) ? redactValue(value) : value;
+    for (const key of removePlain) {
+        if (!(key in next.properties)) {
+            warnings.push(`"${key}" is not a plain property; nothing to remove`);
+            continue;
+        }
+        delete next.properties[key];
+        diff.removed.push(key);
+    }
+    for (const key of removeSecure) {
+        if (!(key in next.secureProperties)) {
+            warnings.push(`"${key}" is not a secure property; nothing to remove`);
+            continue;
+        }
+        delete next.secureProperties[key];
+        diff.secureRemoved.push(key);
+    }
+    for (const key of moves) {
+        if (!(key in current.properties))
+            continue;
+        next.secureProperties[key] = current.properties[key];
+        delete next.properties[key];
+        diff.movedToSecure.push(key);
+    }
+    for (const [key, value] of Object.entries(setPlain)) {
+        const before = current.properties[key];
+        if (before === value)
+            continue;
+        next.properties[key] = value;
+        if (before === undefined)
+            diff.added.push({ key, to: showValue(key, value) });
+        else
+            diff.changed.push({ key, from: showValue(key, before), to: showValue(key, value) });
+        if (looksSecret(key)) {
+            warnings.push(`"${key}" looks like a secret but is stored as plain text; consider secureProperties`);
+        }
+    }
+    for (const [key, value] of Object.entries(setSecure)) {
+        if (value === MASKED)
+            continue;
+        if (key in current.secureProperties)
+            diff.secureChanged.push(key);
+        else
+            diff.secureAdded.push(key);
+        next.secureProperties[key] = value;
+    }
+    const changed = diff.added.length +
+        diff.changed.length +
+        diff.removed.length +
+        diff.secureAdded.length +
+        diff.secureChanged.length +
+        diff.secureRemoved.length +
+        diff.movedToSecure.length >
+        0;
     return {
-        applicationName: existing.name,
-        properties: { ...(service.properties ?? {}), ...(properties ?? {}) },
-        secureProperties: { ...(service.secureProperties ?? {}), ...(secureProperties ?? {}) },
+        service: {
+            applicationName: existing.name,
+            properties: next.properties,
+            secureProperties: next.secureProperties,
+        },
+        diff,
+        warnings,
+        changed,
     };
 }
 /**

package/dist/safety/deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../src/safety/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAoB7F,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC5C,MAAM,GAAG,GAA2B;QAChC,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,uBAAuB,EAAE,OAAO;QAChC,yBAAyB,EAAE,QAAQ;QACnC,yBAAyB,EAAE,QAAQ;QACnC,yBAAyB,EAAE,QAAQ;QACnC,oBAAoB,EAAE,OAAO;QAC7B,uBAAuB,EAAE,OAAO;KACnC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAe;IACvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAuC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC;IAE3D,MAAM,aAAa,GAA4D,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC7C,aAAa,CAAC,2CAA2C,CAAC,GAAG;YACzD,eAAe,EAAE,KAAK,CAAC,OAAO;YAC9B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC;IACN,CAAC;IAED,OAAO;QACH,IAAI,EAAE,KAAK,CAAC,OAAO;QACnB,WAAW,EAAE;YACT,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK;aACnB;YACD,YAAY,EAAE,SAAS;YACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE;QACD,MAAM,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,MAAM;YAChB,kBAAkB,EAAE;gBAChB,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE;gBACtD,IAAI,EAAE;oBACF,OAAO,EAAE;wBACL,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,cAAc;qBACzE;iBACJ;gBACD,SAAS,EAAE,KAAK;gBAChB,mCAAmC,EAAE,KAAK;gBAC1C,cAAc,EAAE,SAAS;gBACzB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;YACD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC;SAChC;KACJ,CAAC;AACN,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAuB,EAAE,GAAyB;IACrF,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC;IACzC,MAAM,MAAM,GAAgB;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;QACvC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;QAChD,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;QACvC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK;KACzD,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;AAC5C,CAAC;AAOD,SAAS,SAAS,CAAC,IAAiB,EAAE,KAAkB;IACpD,OAAO,CACH,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CACrC,CAAC;AACN,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,qBAAqB,CACjC,QAAuB,EACvB,KAA0B,EAC1B,SAAkB;IAElB,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,cAAc,CAAC,CAAC;IAEpF,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CACtG,CAAC;QACF,IAAI,UAAU;YAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;QAC7F,IAAI,SAAS,KAAK,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,CAAC,qBAAqB,IAAI,QAAQ,CAAC,qBAAqB,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/F,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QAC7F,IAAI,cAAc,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC1F,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;QACzF,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAC/E,CAAC;IACF,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,0BAA0B,CACtC,QAAuB,EACvB,UAAmC,EACnC,gBAAyC;IAEzC,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,2CAA2C,CAAC;QACvE,EAAE,CAA0C,CAAC;IACjD,OAAO;QACH,eAAe,EAAE,QAAQ,CAAC,IAAI;QAC9B,UAAU,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;QACpE,gBAAgB,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE;KACzF,CAAC;AACN,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,IAA6B;IACjF,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAa,EAAE,EAAW,EAAE,EAAE;QACvD,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACpF,IAAI,CACA,SAAS,EACT,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EACrD,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,CACpD,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEnE,OAAO,OAAO,CAAC;AACnB,CAAC"}
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../src/safety/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAsB7F,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC5C,MAAM,GAAG,GAA2B;QAChC,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,oBAAoB,EAAE,OAAO;QAC7B,uBAAuB,EAAE,OAAO;QAChC,yBAAyB,EAAE,QAAQ;QACnC,yBAAyB,EAAE,QAAQ;QACnC,yBAAyB,EAAE,QAAQ;QACnC,oBAAoB,EAAE,OAAO;QAC7B,uBAAuB,EAAE,OAAO;KACnC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAe;IACvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAuC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC;IAE3D,yFAAyF;IACzF,yDAAyD;IACzD,MAAM,aAAa,GAA4D;QAC3E,2CAA2C,EAAE;YACzC,eAAe,EAAE,KAAK,CAAC,OAAO;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;YAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,EAAE;SACjD;KACJ,CAAC;IAEF,OAAO;QACH,IAAI,EAAE,KAAK,CAAC,OAAO;QACnB,WAAW,EAAE;YACT,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK;aACnB;YACD,YAAY,EAAE,SAAS;YACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,aAAa;SAChB;QACD,MAAM,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,MAAM;YAChB,kBAAkB,EAAE;gBAChB,OAAO,EAAE;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,eAAe;oBACzC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D;gBACD,IAAI,EAAE;oBACF,OAAO,EAAE;wBACL,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,cAAc;qBACzE;iBACJ;gBACD,SAAS,EAAE,KAAK;gBAChB,mCAAmC,EAAE,KAAK;gBAC1C,cAAc,EAAE,SAAS;gBACzB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;YACD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC;SAChC;KACJ,CAAC;AACN,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAuB,EAAE,GAAyB;IACrF,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC;IACzC,MAAM,MAAM,GAAgB;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;QACvC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;QAChD,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;QACvC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK;KACzD,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;AAC5C,CAAC;AAOD,SAAS,SAAS,CAAC,IAAiB,EAAE,KAAkB;IACpD,OAAO,CACH,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CACrC,CAAC;AACN,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,qBAAqB,CACjC,QAAuB,EACvB,KAA0B,EAC1B,SAAkB;IAElB,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,cAAc,CAAC,CAAC;IAEpF,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CACtG,CAAC;QACF,IAAI,UAAU;YAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;QAC7F,IAAI,SAAS,KAAK,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,CAAC,qBAAqB,IAAI,QAAQ,CAAC,qBAAqB,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/F,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QAC7F,IAAI,cAAc,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC1F,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;QACzF,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAC/E,CAAC;IACF,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvH,CAAC;AAqCD,wDAAwD;AACxD,MAAM,UAAU,eAAe,CAAC,QAAuB;IAInD,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,2CAA2C,CAAC;QACvE,EAAE,CAA0C,CAAC;IACjD,OAAO,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;AACxH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QACvD,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QAC5C,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QAClD,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAC3C,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuB,EAAE,MAAsB;IAC9E,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAC1G,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAiB;QACvB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,EAAE;QACf,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;KACpB,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,kDAAkD,CAAC,CAAC;QAC7F,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,4CAA4C,CAAC,CAAC;QACrF,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,MAAM,uCAAuC,CAAC,CAAC;IAC3G,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC,CAAC;QAC3E,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,MAAM,oDAAoD,GAAG,UAAU,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,GAAG,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CACP,IAAI,GAAG,iHAAiH,CAC3H,CAAC;QACN,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,OAAO,CAAC,gBAAgB;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC,CAAC;;gBACvF,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,2DAA2D,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,GAAG,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,8CAA8C,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAEzF,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,KAAyB,EAAE,EAAE,CACzD,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEpF,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,8CAA8C,CAAC,CAAC;YACrE,SAAS;QACb,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,+CAA+C,CAAC,CAAC;YACtE,SAAS;QACb,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;YAAE,SAAS;QAC3C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,KAAK;YAAE,SAAS;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;;YACzE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,8EAA8E,CAAC,CAAC;QACzG,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS;QAC/B,IAAI,GAAG,IAAI,OAAO,CAAC,gBAAgB;YAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAC7D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GACT,IAAI,CAAC,KAAK,CAAC,MAAM;QACb,IAAI,CAAC,OAAO,CAAC,MAAM;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM;QACnB,IAAI,CAAC,WAAW,CAAC,MAAM;QACvB,IAAI,CAAC,aAAa,CAAC,MAAM;QACzB,IAAI,CAAC,aAAa,CAAC,MAAM;QACzB,IAAI,CAAC,aAAa,CAAC,MAAM;QAC7B,CAAC,CAAC;IAEN,OAAO;QACH,OAAO,EAAE;YACL,eAAe,EAAE,QAAQ,CAAC,IAAI;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SAC1C;QACD,IAAI;QACJ,QAAQ;QACR,OAAO;KACV,CAAC;AACN,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,IAA6B;IACjF,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAa,EAAE,EAAW,EAAE,EAAE;QACvD,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACpF,IAAI,CACA,SAAS,EACT,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EACrD,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,CACpD,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEnE,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/safety/paths.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Project-scoped file access
+ * Every file a tool reads secrets from or writes output to must sit inside the project root,
+ * so a tool call cannot reach arbitrary files on the machine.
+ */
+/** Environment variable that pins the project root, for MCP servers started outside the project. */
+export declare const PROJECT_ROOT_ENV = "ANYPOINT_CONNECT_PROJECT_ROOT";
+/** The git toplevel of the working directory, or the working directory itself. */
+export declare function resolveProjectRoot(cwd?: string): string;
+/**
+ * Resolve a path for reading. The real path (symlinks followed) must stay inside the root,
+ * and the file must be a regular file no larger than `maxBytes`.
+ */
+export declare function resolveReadablePath(file: string, options?: {
+    projectRoot?: string;
+    maxBytes?: number;
+}): {
+    path: string;
+    size: number;
+};
+/**
+ * Resolve a path for writing. The parent directory must exist inside the root, and an
+ * existing file is only replaced when `overwrite` is set.
+ */
+export declare function resolveWritablePath(file: string, options?: {
+    projectRoot?: string;
+    overwrite?: boolean;
+}): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/safety/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/safety/paths.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,kCAAkC,CAAC;AAEhE,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CActE;AAOD;;;GAGG;AACH,wBAAgB,mBAAmB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAWhC;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAarH"}

package/dist/safety/paths.js

@@ -0,0 +1,76 @@
+/**
+ * Project-scoped file access
+ * Every file a tool reads secrets from or writes output to must sit inside the project root,
+ * so a tool call cannot reach arbitrary files on the machine.
+ */
+import { execFileSync } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+/** Environment variable that pins the project root, for MCP servers started outside the project. */
+export const PROJECT_ROOT_ENV = 'ANYPOINT_CONNECT_PROJECT_ROOT';
+/** The git toplevel of the working directory, or the working directory itself. */
+export function resolveProjectRoot(cwd = process.cwd()) {
+    const pinned = process.env[PROJECT_ROOT_ENV];
+    if (pinned)
+        return fs.realpathSync(path.resolve(pinned));
+    try {
+        const top = execFileSync('git', ['rev-parse', '--show-toplevel'], {
+            cwd,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        if (top)
+            return fs.realpathSync(top);
+    }
+    catch {
+        // Not a git checkout; fall back to the working directory.
+    }
+    return fs.realpathSync(path.resolve(cwd));
+}
+function isInside(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
+/**
+ * Resolve a path for reading. The real path (symlinks followed) must stay inside the root,
+ * and the file must be a regular file no larger than `maxBytes`.
+ */
+export function resolveReadablePath(file, options = {}) {
+    const root = fs.realpathSync(options.projectRoot ?? resolveProjectRoot());
+    const absolute = path.resolve(root, file);
+    if (!fs.existsSync(absolute))
+        throw new Error(`File not found: ${file}`);
+    const real = fs.realpathSync(absolute);
+    if (!isInside(root, real))
+        throw new Error(`File must be inside the project root (${root}): ${file}`);
+    const stat = fs.statSync(real);
+    if (!stat.isFile())
+        throw new Error(`Not a regular file: ${file}`);
+    const maxBytes = options.maxBytes ?? 1024 * 1024;
+    if (stat.size > maxBytes)
+        throw new Error(`File exceeds ${maxBytes} bytes: ${file}`);
+    return { path: real, size: stat.size };
+}
+/**
+ * Resolve a path for writing. The parent directory must exist inside the root, and an
+ * existing file is only replaced when `overwrite` is set.
+ */
+export function resolveWritablePath(file, options = {}) {
+    const root = fs.realpathSync(options.projectRoot ?? resolveProjectRoot());
+    const absolute = path.resolve(root, file);
+    const parent = path.dirname(absolute);
+    if (!fs.existsSync(parent))
+        throw new Error(`Directory not found: ${path.dirname(file)}`);
+    const realParent = fs.realpathSync(parent);
+    const target = path.join(realParent, path.basename(absolute));
+    if (!isInside(root, target))
+        throw new Error(`File must be inside the project root (${root}): ${file}`);
+    if (fs.existsSync(target)) {
+        if (fs.lstatSync(target).isSymbolicLink())
+            throw new Error(`Refusing to write through a symlink: ${file}`);
+        if (!options.overwrite)
+            throw new Error(`File exists: ${file}. Pass overwrite to replace it.`);
+    }
+    return target;
+}
+//# sourceMappingURL=paths.js.map

package/dist/safety/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/safety/paths.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEhE,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,MAAM;QAAE,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE;YAC9D,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG;YAAE,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACL,0DAA0D;IAC9D,CAAC;IACD,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAC/B,IAAY,EACZ,UAAuD,EAAE;IAEzD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,GAAG,IAAI,CAAC;IACjD,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,WAAW,IAAI,EAAE,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,UAAyD,EAAE;IACzG,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC;IACxG,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,iCAAiC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/safety/runtime.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Runtime version checks
+ * Validate a requested Mule runtime against what the deployment target accepts, and suggest the
+ * nearest supported version when the current one has been retired. Pure functions.
+ */
+import type { RuntimeVersion } from '../api/RuntimesApi.js';
+export interface RuntimeSpec {
+    /** Base version ("4.9.0") or a version prefix ("4.9"). */
+    version: string;
+    java?: string;
+    releaseChannel?: string;
+}
+/** Split a deployment's runtime string ("4.8.5:4e-java8") into its base version and Java version. */
+export declare function parseRuntimeString(value: string, java?: string): RuntimeSpec;
+export declare function compareVersions(a: string, b: string): number;
+/** The newest catalog entry matching the spec, or undefined when the target does not offer it. */
+export declare function resolveRuntime(catalog: RuntimeVersion[], spec: RuntimeSpec): RuntimeVersion | undefined;
+/**
+ * Nearest supported versions for an unsupported runtime, best first: the newest patch of the same
+ * minor, then the oldest newer LTS, then the newest version overall. Java 17 is preferred when the
+ * original Java version is no longer offered.
+ */
+export declare function suggestRuntimes(catalog: RuntimeVersion[], current: RuntimeSpec, limit?: number): string[];
+//# sourceMappingURL=runtime.d.ts.map

package/dist/safety/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/safety/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,WAAW;IACxB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qGAAqG;AACrG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAI5E;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAMD,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,CAMvG;AAOD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,SAAI,GAAG,MAAM,EAAE,CAmBpG"}

package/dist/safety/runtime.js

@@ -0,0 +1,59 @@
+/**
+ * Runtime version checks
+ * Validate a requested Mule runtime against what the deployment target accepts, and suggest the
+ * nearest supported version when the current one has been retired. Pure functions.
+ */
+/** Split a deployment's runtime string ("4.8.5:4e-java8") into its base version and Java version. */
+export function parseRuntimeString(value, java) {
+    const [base, tag = ''] = value.split(':');
+    const fromTag = /java(\d+)/i.exec(tag)?.[1];
+    return { version: base, ...((java ?? fromTag) ? { java: java ?? fromTag } : {}) };
+}
+export function compareVersions(a, b) {
+    const pa = a.split('.').map((part) => parseInt(part, 10) || 0);
+    const pb = b.split('.').map((part) => parseInt(part, 10) || 0);
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+        const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return 0;
+}
+const minorOf = (version) => version.split('.').slice(0, 2).join('.');
+const supportsJava = (candidate, java) => !java || candidate.java.length === 0 || candidate.java.includes(java);
+/** The newest catalog entry matching the spec, or undefined when the target does not offer it. */
+export function resolveRuntime(catalog, spec) {
+    return catalog
+        .filter((v) => v.version === spec.version || v.version.startsWith(`${spec.version}.`))
+        .filter((v) => !spec.releaseChannel || v.releaseChannel?.toUpperCase() === spec.releaseChannel.toUpperCase())
+        .filter((v) => supportsJava(v, spec.java))
+        .sort((a, b) => compareVersions(b.version, a.version))[0];
+}
+function label(v, java) {
+    const javaPart = java && v.java.includes(java) ? java : v.java.includes('17') ? '17' : v.java[v.java.length - 1];
+    return [v.version, v.releaseChannel, javaPart ? `java${javaPart}` : undefined].filter(Boolean).join(' ');
+}
+/**
+ * Nearest supported versions for an unsupported runtime, best first: the newest patch of the same
+ * minor, then the oldest newer LTS, then the newest version overall. Java 17 is preferred when the
+ * original Java version is no longer offered.
+ */
+export function suggestRuntimes(catalog, current, limit = 3) {
+    const javaOffered = !current.java || catalog.some((v) => v.java.includes(current.java));
+    const java = javaOffered ? current.java : '17';
+    const usable = catalog.filter((v) => supportsJava(v, java));
+    const pool = usable.length > 0 ? usable : catalog;
+    const byNewest = [...pool].sort((a, b) => compareVersions(b.version, a.version));
+    const picks = [];
+    const add = (v) => {
+        if (v && !picks.some((p) => p.version === v.version && p.releaseChannel === v.releaseChannel))
+            picks.push(v);
+    };
+    add(byNewest.find((v) => minorOf(v.version) === minorOf(current.version)));
+    add([...pool]
+        .filter((v) => v.releaseChannel?.toUpperCase() === 'LTS' && compareVersions(v.version, current.version) > 0)
+        .sort((a, b) => compareVersions(a.version, b.version))[0]);
+    add(byNewest[0]);
+    return picks.slice(0, limit).map((v) => label(v, java));
+}
+//# sourceMappingURL=runtime.js.map

package/dist/safety/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/safety/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,qGAAqG;AACrG,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAa;IAC3D,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9E,MAAM,YAAY,GAAG,CAAC,SAAyB,EAAE,IAAa,EAAE,EAAE,CAC9D,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAE1E,kGAAkG;AAClG,MAAM,UAAU,cAAc,CAAC,OAAyB,EAAE,IAAiB;IACvE,OAAO,OAAO;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;SACrF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;SAC5G,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,KAAK,CAAC,CAAiB,EAAE,IAAa;IAC3C,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE,OAAoB,EAAE,KAAK,GAAG,CAAC;IACtF,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAc,CAAC,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,CAA6B,EAAE,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjH,CAAC,CAAC;IACF,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,GAAG,CACC,CAAC,GAAG,IAAI,CAAC;SACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;SAC3G,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;IACF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/safety/secret-sources.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Secret sources
+ * Property values resolved on the server from a project file or environment variables,
+ * so the values never travel in a tool call or appear in a transcript.
+ */
+import { z } from 'zod';
+export declare const fileSecretSourceSchema: z.ZodObject<{
+    file: z.ZodString;
+    format: z.ZodOptional<z.ZodEnum<{
+        env: "env";
+        json: "json";
+        properties: "properties";
+    }>>;
+    keys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    rename: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    prefix: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const envSecretSourceSchema: z.ZodObject<{
+    env: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strip>;
+export declare const secretSourceSchema: z.ZodUnion<readonly [z.ZodObject<{
+    file: z.ZodString;
+    format: z.ZodOptional<z.ZodEnum<{
+        env: "env";
+        json: "json";
+        properties: "properties";
+    }>>;
+    keys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    rename: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    prefix: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    env: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strip>]>;
+export type FileSecretSource = z.infer<typeof fileSecretSourceSchema>;
+export type EnvSecretSource = z.infer<typeof envSecretSourceSchema>;
+export type SecretSource = z.infer<typeof secretSourceSchema>;
+/** Parse a Java `.properties` file: `=`/`:`/space separators, comments, continuations, escapes. */
+export declare function parseProperties(text: string): Record<string, string>;
+/**
+ * Resolve one source into property values. Errors name keys and files, never values.
+ */
+export declare function resolveSecretSource(source: SecretSource, options?: {
+    projectRoot?: string;
+    env?: NodeJS.ProcessEnv;
+}): Record<string, string>;
+/** Resolve several sources in order; later sources win on duplicate keys. */
+export declare function resolveSecretSources(sources: SecretSource[] | undefined, options?: {
+    projectRoot?: string;
+    env?: NodeJS.ProcessEnv;
+}): Record<string, string>;
+//# sourceMappingURL=secret-sources.d.ts.map

package/dist/safety/secret-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-sources.d.ts","sourceRoot":"","sources":["../../src/safety/secret-sources.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,sBAAsB;;;;;;;;;;iBAYjC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;iBAIhC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;mBAA2D,CAAC;AAE3F,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BpE;AAkCD;;GAEG;AACH,wBAAgB,mBAAmB,CAC/B,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BxB;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,YAAY,EAAE,GAAG,SAAS,EACnC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAExB"}

package/dist/safety/secret-sources.js

@@ -0,0 +1,124 @@
+/**
+ * Secret sources
+ * Property values resolved on the server from a project file or environment variables,
+ * so the values never travel in a tool call or appear in a transcript.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { parse as parseDotenv } from 'dotenv';
+import { z } from 'zod';
+import { resolveReadablePath } from './paths.js';
+export const fileSecretSourceSchema = z.object({
+    file: z.string().describe('Path inside the project root to a .env, .properties or flat JSON file'),
+    format: z
+        .enum(['env', 'properties', 'json'])
+        .optional()
+        .describe('File format. Default: from the extension (.json, .properties, otherwise env)'),
+    keys: z.array(z.string()).optional().describe('Only take these keys from the file (default: all)'),
+    rename: z
+        .record(z.string(), z.string())
+        .optional()
+        .describe('Map a file key to a different property name, e.g. {"DB_PASSWORD": "db.password"}'),
+    prefix: z.string().optional().describe('Prefix added to every property name taken from the file'),
+});
+export const envSecretSourceSchema = z.object({
+    env: z
+        .record(z.string(), z.string())
+        .describe('Map of property name to the environment variable that holds its value in the server process'),
+});
+export const secretSourceSchema = z.union([fileSecretSourceSchema, envSecretSourceSchema]);
+/** Parse a Java `.properties` file: `=`/`:`/space separators, comments, continuations, escapes. */
+export function parseProperties(text) {
+    const result = {};
+    const lines = text.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i++) {
+        let line = lines[i].replace(/^\s+/, '');
+        if (!line || line.startsWith('#') || line.startsWith('!'))
+            continue;
+        while (/(^|[^\\])(\\\\)*\\$/.test(line) && i + 1 < lines.length) {
+            line = line.slice(0, -1) + lines[++i].replace(/^\s+/, '');
+        }
+        let separator = -1;
+        for (let j = 0; j < line.length; j++) {
+            if (line[j] === '\\') {
+                j++;
+                continue;
+            }
+            if (line[j] === '=' || line[j] === ':' || /\s/.test(line[j])) {
+                separator = j;
+                break;
+            }
+        }
+        const rawKey = separator === -1 ? line : line.slice(0, separator);
+        let rest = separator === -1 ? '' : line.slice(separator);
+        rest = rest.replace(/^\s*[=:]?\s*/, '');
+        result[unescapeProperties(rawKey)] = unescapeProperties(rest);
+    }
+    return result;
+}
+function unescapeProperties(value) {
+    return value.replace(/\\(u[0-9a-fA-F]{4}|.)/g, (_, escape) => {
+        if (escape.startsWith('u') && escape.length === 5)
+            return String.fromCharCode(parseInt(escape.slice(1), 16));
+        return { t: '\t', n: '\n', r: '\r', f: '\f' }[escape] ?? escape;
+    });
+}
+function detectFormat(file) {
+    const ext = path.extname(file).toLowerCase();
+    if (ext === '.json')
+        return 'json';
+    if (ext === '.properties')
+        return 'properties';
+    return 'env';
+}
+function parseFile(text, format, file) {
+    if (format === 'env')
+        return parseDotenv(text);
+    if (format === 'properties')
+        return parseProperties(text);
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`Secret source ${file} is not valid JSON`);
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error(`Secret source ${file} must be a flat JSON object`);
+    }
+    const entries = Object.entries(parsed);
+    const invalid = entries.filter(([, value]) => typeof value !== 'string').map(([key]) => key);
+    if (invalid.length)
+        throw new Error(`Secret source ${file} has non-string values for: ${invalid.join(', ')}`);
+    return Object.fromEntries(entries);
+}
+/**
+ * Resolve one source into property values. Errors name keys and files, never values.
+ */
+export function resolveSecretSource(source, options = {}) {
+    if ('env' in source) {
+        const env = options.env ?? process.env;
+        const missing = Object.entries(source.env)
+            .filter(([, variable]) => env[variable] === undefined || env[variable] === '')
+            .map(([, variable]) => variable);
+        if (missing.length)
+            throw new Error(`Environment variables not set in the server process: ${missing.join(', ')}`);
+        return Object.fromEntries(Object.entries(source.env).map(([key, variable]) => [key, env[variable]]));
+    }
+    const resolved = resolveReadablePath(source.file, { projectRoot: options.projectRoot });
+    const values = parseFile(fs.readFileSync(resolved.path, 'utf8'), source.format ?? detectFormat(source.file), source.file);
+    const selected = source.keys ?? Object.keys(values);
+    const missing = selected.filter((key) => !(key in values));
+    if (missing.length)
+        throw new Error(`Keys not found in ${source.file}: ${missing.join(', ')}`);
+    const result = {};
+    for (const key of selected) {
+        result[`${source.prefix ?? ''}${source.rename?.[key] ?? key}`] = values[key];
+    }
+    return result;
+}
+/** Resolve several sources in order; later sources win on duplicate keys. */
+export function resolveSecretSources(sources, options = {}) {
+    return Object.assign({}, ...(sources ?? []).map((source) => resolveSecretSource(source, options)));
+}
+//# sourceMappingURL=secret-sources.js.map