@sfdxy/anypoint-connect 0.16.2 → 0.17.0

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="docs/assets/logo.svg" alt="Anypoint Connect — CLI and MCP toolkit for Anypoint Platform" width="640" />
+  <img src="docs/assets/logo.svg" alt="Anypoint Connect: CLI and MCP toolkit for Anypoint Platform, with production safeguards" width="640" />
 </p>
 
 <p align="center">
@@ -9,7 +9,7 @@
 </p>
 
 <p align="center">
-  <strong>Operate Anypoint Platform from a CLI, an MCP client, or JavaScript—with guarded mutations and one shared authentication layer.</strong>
+  <strong>Operate Anypoint Platform from a CLI, an MCP client, or JavaScript, with guarded mutations and one shared authentication layer.</strong>
 </p>
 
 <p align="center">
@@ -65,12 +65,21 @@ release does not support the `client_credentials` grant, and its encrypted token
 | --- | --- |
 | Applications | Status with a start-up-aware phase, deployment spec, resources, cross-environment comparison, publish and deploy a JAR, one-call `update_app` (version, runtime, settings and update strategy, in place or stop-then-start), runtime catalogs with retired-runtime refusal, asset naming conventions, rollback, restart, scale, stop, start, delete, and a check of what runs against a repo or JAR |
 | Settings | Add, change, remove and move properties; secret values read from project files or environment variables; secret-looking plain values masked and flagged |
-| Logs | Tail, search over message, logger and stack trace, download with filters, summaries and file output, error clustering with context, recurring patterns, log health statistics |
+| Logs | Tail, search over message, logger and stack trace, download with filters, summaries and file output, error clustering with context, recurring patterns, log health statistics, counts of lines that carry session or bearer credentials (never the values) |
 | Monitoring | Traffic, failures, and p50–p99 latency per app, worker, or route; heap, old-generation pressure, GC, CPU, and RAM per worker; time series from 1-minute to 1-day buckets; freeform AMQL |
+| Alerts | List, create, change, enable, disable and delete Anypoint Monitoring metric alerts on apps and API instances, recipients masked by default; read Runtime Manager event alerts (undocumented API, see [Alerts](https://avinava.github.io/anypoint-connect/alerts/)) |
 | Exchange | Search, asset details, spec download, application JAR publication |
 | API Manager and Governance | Instances, policies, SLA tiers, alerts, contracts, client applications with masked credentials, smoke tests with the client's credentials, governance rulesets and conformance |
 | Design Center | Projects, branches, file reads, preview-then-apply file sync, verified Exchange publication |
-| Platform services | Environments, entitlements, audit log, Anypoint MQ, Object Store v2 |
+| Platform services | Environments, entitlements, audit log with actor classes (platform patch, replica, infrastructure, or user and pipeline), Anypoint MQ, Object Store v2 |
+
+New in 0.17:
+
+- Production deploys through these tools take only jars whose mule-build marker (`META-INF/mule-build/build-info.json`) says production deployable, checked on the Exchange artifact: [build markers gate production](https://avinava.github.io/anypoint-connect/safety/#build-markers-gate-production)
+- `scan_logs_for_credentials`: [check logs for leaked credentials](https://avinava.github.io/anypoint-connect/recipes/#check-logs-for-leaked-credentials)
+- `get_audit_log` actor classes: [find who changed an app](https://avinava.github.io/anypoint-connect/recipes/#find-who-changed-an-app)
+- Alert management: `list_alerts`, `get_alert`, `create_alert`, `update_alert`, `set_alert_enabled`, `delete_alert` and `anc alerts`: [alerts](https://avinava.github.io/anypoint-connect/alerts/)
+- `set_production_preapproval`, stored per organization and environment outside the repository: [production pre-approval](https://avinava.github.io/anypoint-connect/safety/#production-pre-approval)
 
 New in 0.16, each with a recipe:
 
@@ -97,7 +106,7 @@ OAuth tokens; it sends tool calls to the local server that owns the session.
   "mcpServers": {
     "anypoint-connect": {
       "command": "npx",
-      "args": ["-y", "@sfdxy/anypoint-connect@0.16.2", "mcp"]
+      "args": ["-y", "@sfdxy/anypoint-connect@0.17.0", "mcp"]
     }
   }
 }
@@ -119,7 +128,9 @@ Preview a deployment of target/sample-orders-api-1.3.0-mule-application.jar to S
 ## Safety
 
 Every MCP write tool returns a preview first and changes nothing until it is called again with
-`confirm: true`; in production it also needs `confirmProduction: true`. `anc deploy --dry-run` and
+`confirm: true`; in production it also needs `confirmProduction: true`, unless you pre-approved that tool
+for that organization and environment in your user-level settings. Production deploys made through these
+tools check the artifact's build marker and refuse a jar not marked production deployable. `anc deploy --dry-run` and
 `anc apps update --dry-run` print the same plan.
 Publishing binds the JAR's SHA-256. A change to an existing app is one update that carries only what you
 asked to change, with the runtime checked against the target first. Secret values come from project files

package/dist/analysis/audit-actors.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Audit log actor classification
+ * Tells platform-initiated audit entries (staff patches, replica moves, infrastructure patches)
+ * apart from changes made by a user or a pipeline, so "who changed this app?" is not answered with
+ * a platform maintenance event. Every rule lives in ACTOR_RULES; the first match wins.
+ *
+ * Every platform-* class requires a recognized platform identity: a staff or service user name, or
+ * the platform patcher's client name. An entry with no user and an unrecognized client (a connected
+ * app, a pipeline) stays user-or-pipeline. There is no caller-supplied override: a client ID alone
+ * never makes an entry "platform".
+ */
+import type { AuditLogEntry } from '../api/AuditLogApi.js';
+export declare const ACTOR_CLASSES: readonly ["platform-patch", "platform-replica", "platform-infrastructure", "user-or-pipeline"];
+export type ActorClass = (typeof ACTOR_CLASSES)[number];
+export interface ActorRule {
+    id: string;
+    actorClass: Exclude<ActorClass, 'user-or-pipeline'>;
+    description: string;
+    matches(entry: AuditLogEntry): boolean;
+}
+/** Whether the actor is a recognized platform staff or service identity. */
+export declare function isPlatformIdentity(entry: AuditLogEntry): boolean;
+/** The matching rules, in order. Keep every classification decision here. */
+export declare const ACTOR_RULES: readonly ActorRule[];
+export interface ActorClassification {
+    actorClass: ActorClass;
+    /** The rule that matched, or "default" for user-or-pipeline. */
+    actorRule: string;
+}
+export declare function classifyAuditActor(entry: AuditLogEntry): ActorClassification;
+/** Classify entries and count them by class (every class present, zeros included). */
+export declare function classifyAuditEntries(entries: AuditLogEntry[]): {
+    entries: Array<AuditLogEntry & ActorClassification>;
+    byClass: Record<ActorClass, number>;
+};
+//# sourceMappingURL=audit-actors.d.ts.map

package/dist/analysis/audit-actors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-actors.d.ts","sourceRoot":"","sources":["../../src/analysis/audit-actors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,eAAO,MAAM,aAAa,gGAKhB,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAExD,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;CAC1C;AAmBD,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAGhE;AAED,6EAA6E;AAC7E,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAwC3C,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,mBAAmB,CAK5E;AAED,sFAAsF;AACtF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG;IAC5D,OAAO,EAAE,KAAK,CAAC,aAAa,GAAG,mBAAmB,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;CACvC,CAQA"}

package/dist/analysis/audit-actors.js

@@ -0,0 +1,93 @@
+/**
+ * Audit log actor classification
+ * Tells platform-initiated audit entries (staff patches, replica moves, infrastructure patches)
+ * apart from changes made by a user or a pipeline, so "who changed this app?" is not answered with
+ * a platform maintenance event. Every rule lives in ACTOR_RULES; the first match wins.
+ *
+ * Every platform-* class requires a recognized platform identity: a staff or service user name, or
+ * the platform patcher's client name. An entry with no user and an unrecognized client (a connected
+ * app, a pipeline) stays user-or-pipeline. There is no caller-supplied override: a client ID alone
+ * never makes an entry "platform".
+ */
+export const ACTOR_CLASSES = [
+    'platform-patch',
+    'platform-replica',
+    'platform-infrastructure',
+    'user-or-pipeline',
+];
+/** User names the platform uses for its own staff and service identities. */
+const PLATFORM_USER = /\b(anypoint|mulesoft|cloudhub|platform)\s+(staff|support|operations|ops|system|automation)\b/i;
+/** Client names of the platform's automatic patcher. */
+const PATCHER_CLIENT = /\b(auto(matic)?[\s_-]?patch(er|ing)?|patch(ing)?[\s_-]?(service|automation|bot))\b/i;
+const MODIFY_ACTION = /^(modify|update|patch)$/i;
+const REPLICA = /\breplicas?\b/i;
+/** Whole words only, so "Remove" is not "move". */
+const REPLICA_MOVE = /\b(restart(ed)?|move[ds]?|relocated?|rescheduled?|migrated?|evicted?|recreated?|replaced?|recovered?)\b/i;
+const INFRA_PATCH_ACTION = /^patch\s*(fabric|network)\b/i;
+const PATCH_ACTION = /\bpatch(ed)?\b/i;
+const INFRA_OBJECT = /\b(fabric|network)\b/i;
+function objectTypes(entry) {
+    return (entry.objects ?? []).map((o) => o.objectType ?? '');
+}
+/** Whether the actor is a recognized platform staff or service identity. */
+export function isPlatformIdentity(entry) {
+    if (entry.userName && PLATFORM_USER.test(entry.userName))
+        return true;
+    return Boolean(entry.clientName && PATCHER_CLIENT.test(entry.clientName));
+}
+/** The matching rules, in order. Keep every classification decision here. */
+export const ACTOR_RULES = [
+    {
+        id: 'infrastructure-patch-action',
+        actorClass: 'platform-infrastructure',
+        description: 'Patch Fabric or Patch Network by a platform identity',
+        matches: (entry) => INFRA_PATCH_ACTION.test(entry.action) && isPlatformIdentity(entry),
+    },
+    {
+        id: 'infrastructure-patch-object',
+        actorClass: 'platform-infrastructure',
+        description: 'A patch action on a fabric or network object by a platform identity',
+        matches: (entry) => PATCH_ACTION.test(entry.action) &&
+            objectTypes(entry).some((t) => INFRA_OBJECT.test(t)) &&
+            isPlatformIdentity(entry),
+    },
+    {
+        id: 'replica-restarted-or-moved',
+        actorClass: 'platform-replica',
+        description: 'A replica restarted, moved or rescheduled by a platform identity',
+        matches: (entry) => (REPLICA.test(entry.action) || objectTypes(entry).some((t) => REPLICA.test(t))) &&
+            REPLICA_MOVE.test(entry.action) &&
+            isPlatformIdentity(entry),
+    },
+    {
+        id: 'platform-modify-application',
+        actorClass: 'platform-patch',
+        description: 'Modify on an Application by a platform staff or patcher identity',
+        matches: (entry) => MODIFY_ACTION.test(entry.action) &&
+            objectTypes(entry).some((t) => /^application$/i.test(t)) &&
+            isPlatformIdentity(entry),
+    },
+    {
+        id: 'platform-identity',
+        actorClass: 'platform-patch',
+        description: 'Any other action by a platform staff or patcher identity',
+        matches: (entry) => isPlatformIdentity(entry),
+    },
+];
+export function classifyAuditActor(entry) {
+    const rule = ACTOR_RULES.find((r) => r.matches(entry));
+    return rule
+        ? { actorClass: rule.actorClass, actorRule: rule.id }
+        : { actorClass: 'user-or-pipeline', actorRule: 'default' };
+}
+/** Classify entries and count them by class (every class present, zeros included). */
+export function classifyAuditEntries(entries) {
+    const byClass = Object.fromEntries(ACTOR_CLASSES.map((c) => [c, 0]));
+    const classified = entries.map((entry) => {
+        const result = classifyAuditActor(entry);
+        byClass[result.actorClass]++;
+        return { ...entry, ...result };
+    });
+    return { entries: classified, byClass };
+}
+//# sourceMappingURL=audit-actors.js.map

package/dist/analysis/audit-actors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-actors.js","sourceRoot":"","sources":["../../src/analysis/audit-actors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAG;IACzB,gBAAgB;IAChB,kBAAkB;IAClB,yBAAyB;IACzB,kBAAkB;CACZ,CAAC;AAUX,6EAA6E;AAC7E,MAAM,aAAa,GAAG,+FAA+F,CAAC;AACtH,wDAAwD;AACxD,MAAM,cAAc,GAAG,qFAAqF,CAAC;AAC7G,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,mDAAmD;AACnD,MAAM,YAAY,GACd,0GAA0G,CAAC;AAC/G,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAC1D,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C,SAAS,WAAW,CAAC,KAAoB;IACrC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACnD,IAAI,KAAK,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC7C;QACI,EAAE,EAAE,6BAA6B;QACjC,UAAU,EAAE,yBAAyB;QACrC,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC;KACzF;IACD;QACI,EAAE,EAAE,6BAA6B;QACjC,UAAU,EAAE,yBAAyB;QACrC,WAAW,EAAE,qEAAqE;QAClF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/B,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpD,kBAAkB,CAAC,KAAK,CAAC;KAChC;IACD;QACI,EAAE,EAAE,4BAA4B;QAChC,UAAU,EAAE,kBAAkB;QAC9B,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/E,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/B,kBAAkB,CAAC,KAAK,CAAC;KAChC;IACD;QACI,EAAE,EAAE,6BAA6B;QACjC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxD,kBAAkB,CAAC,KAAK,CAAC;KAChC;IACD;QACI,EAAE,EAAE,mBAAmB;QACvB,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,0DAA0D;QACvE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC;KAChD;CACJ,CAAC;AAQF,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACnD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI;QACP,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE;QACrD,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACnE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,OAAwB;IAIzD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAA+B,CAAC;IACnG,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC"}

package/dist/analysis/credentials.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Log Analysis - Credential markers
+ * Counts log lines that carry session or bearer credentials (Authorization headers, session IDs,
+ * OAuth token parameters, JWTs) per marker, per spec and per replica. Only counts leave this
+ * module: matching lines and values are never returned, so a scan is safe to show in a transcript.
+ */
+import type { LogPart } from '../api/LogsApi.js';
+export interface CredentialMarker {
+    id: string;
+    description: string;
+    pattern: RegExp;
+}
+/** Every marker the scan looks for. A line can count under more than one marker. */
+export declare const CREDENTIAL_MARKERS: readonly CredentialMarker[];
+export type MarkerCounts = Record<string, number>;
+export interface ReplicaScan {
+    replica: string;
+    linesWithMarkers: number;
+    byMarker: MarkerCounts;
+}
+export interface SpecScan {
+    specId: string;
+    scannedLines: number;
+    linesWithMarkers: number;
+    byMarker: MarkerCounts;
+    byReplica: ReplicaScan[];
+}
+export interface CredentialScan {
+    scannedLines: number;
+    linesWithMarkers: number;
+    clean: boolean;
+    /** Every marker, zeros included. */
+    byMarker: MarkerCounts;
+    bySpec: SpecScan[];
+}
+/** Lines before the first entry header of a file have no replica. */
+export declare const UNKNOWN_REPLICA = "(unknown)";
+/** The ids of the markers a line carries. */
+export declare function markersIn(line: string): string[];
+/**
+ * Scan each spec's log text line by line. Continuation lines (stack traces, JSON Logger bodies,
+ * HTTP dumps) belong to the entry above them and share its time and replica. With a window, lines
+ * outside it are skipped, and so are lines before a file's first entry, whose time is unknown.
+ */
+export declare function scanForCredentials(parts: LogPart[], window?: {
+    startTime?: number;
+    endTime?: number;
+}): CredentialScan;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/analysis/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/analysis/credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAGjD,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EAoCzD,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAElD,MAAM,WAAW,WAAW;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,WAAW,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,oCAAoC;IACpC,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,QAAQ,EAAE,CAAC;CACtB;AAED,qEAAqE;AACrE,eAAO,MAAM,eAAe,cAAc,CAAC;AAU3C,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAC9B,KAAK,EAAE,OAAO,EAAE,EAChB,MAAM,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,cAAc,CAsDhB"}

package/dist/analysis/credentials.js

@@ -0,0 +1,118 @@
+/**
+ * Log Analysis - Credential markers
+ * Counts log lines that carry session or bearer credentials (Authorization headers, session IDs,
+ * OAuth token parameters, JWTs) per marker, per spec and per replica. Only counts leave this
+ * module: matching lines and values are never returned, so a scan is safe to show in a transcript.
+ */
+import { lineHeader } from './parser.js';
+/** Every marker the scan looks for. A line can count under more than one marker. */
+export const CREDENTIAL_MARKERS = [
+    {
+        id: 'authorization-bearer',
+        description: 'Authorization header (or field) with a Bearer value',
+        pattern: /authorization["']?\s*[:=]\s*["']?bearer\s+\S/i,
+    },
+    {
+        id: 'bearer-token',
+        description: 'Bearer followed by a token-shaped value',
+        pattern: /\bbearer\s+[A-Za-z0-9._~+/-]{16,}/i,
+    },
+    {
+        id: 'session-id',
+        description: 'sessionId or session_id with a value (field, parameter or XML element)',
+        pattern: /\bsession_?id["']?\s*[:=]\s*["']?[A-Za-z0-9!._-]{8,}|<(?:\w+:)?sessionId>\s*[^<\s]{8,}/i,
+    },
+    {
+        id: 'sforce-session',
+        description: 'Sforce-Session header with a value',
+        pattern: /\bsforce-session["']?\s*[:=]\s*["']?[A-Za-z0-9!._-]{8,}/i,
+    },
+    {
+        id: 'salesforce-session-id',
+        description: 'Salesforce session ID shape (org ID, "!", token)',
+        pattern: /\b00D[A-Za-z0-9]{12,15}![A-Za-z0-9._]{20,}/,
+    },
+    {
+        id: 'oauth-token-param',
+        description: 'access_token, refresh_token or id_token with a value',
+        pattern: /\b(?:access|refresh|id)_token["']?\s*[:=]\s*["']?[^\s"'&,;]{8,}/i,
+    },
+    {
+        id: 'jwt',
+        description: 'JWT-shaped value (base64url header.payload.signature)',
+        pattern: /\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/,
+    },
+];
+/** Lines before the first entry header of a file have no replica. */
+export const UNKNOWN_REPLICA = '(unknown)';
+function zeroCounts() {
+    return Object.fromEntries(CREDENTIAL_MARKERS.map((m) => [m.id, 0]));
+}
+function nonZero(counts) {
+    return Object.fromEntries(Object.entries(counts).filter(([, n]) => n > 0));
+}
+/** The ids of the markers a line carries. */
+export function markersIn(line) {
+    return CREDENTIAL_MARKERS.filter((m) => m.pattern.test(line)).map((m) => m.id);
+}
+/**
+ * Scan each spec's log text line by line. Continuation lines (stack traces, JSON Logger bodies,
+ * HTTP dumps) belong to the entry above them and share its time and replica. With a window, lines
+ * outside it are skipped, and so are lines before a file's first entry, whose time is unknown.
+ */
+export function scanForCredentials(parts, window = {}) {
+    const total = zeroCounts();
+    const bounded = window.startTime !== undefined || window.endTime !== undefined;
+    let scannedLines = 0;
+    let linesWithMarkers = 0;
+    const bySpec = [];
+    for (const part of parts) {
+        const spec = { scannedLines: 0, linesWithMarkers: 0, byMarker: zeroCounts() };
+        const replicas = new Map();
+        let current = null;
+        for (const line of part.text.split(/\r?\n/)) {
+            if (!line.trim())
+                continue;
+            current = lineHeader(line) ?? current;
+            if (bounded) {
+                if (!current)
+                    continue;
+                if (window.startTime !== undefined && current.timestamp < window.startTime)
+                    continue;
+                if (window.endTime !== undefined && current.timestamp > window.endTime)
+                    continue;
+            }
+            spec.scannedLines++;
+            const found = markersIn(line);
+            if (found.length === 0)
+                continue;
+            const replicaId = current?.instanceId || UNKNOWN_REPLICA;
+            const replica = replicas.get(replicaId) ?? { linesWithMarkers: 0, byMarker: zeroCounts() };
+            replicas.set(replicaId, replica);
+            spec.linesWithMarkers++;
+            replica.linesWithMarkers++;
+            for (const id of found) {
+                spec.byMarker[id]++;
+                replica.byMarker[id]++;
+                total[id]++;
+            }
+        }
+        scannedLines += spec.scannedLines;
+        linesWithMarkers += spec.linesWithMarkers;
+        bySpec.push({
+            specId: part.specId,
+            scannedLines: spec.scannedLines,
+            linesWithMarkers: spec.linesWithMarkers,
+            byMarker: nonZero(spec.byMarker),
+            byReplica: [...replicas.entries()]
+                .map(([replica, r]) => ({
+                replica,
+                linesWithMarkers: r.linesWithMarkers,
+                byMarker: nonZero(r.byMarker),
+            }))
+                .sort((a, b) => b.linesWithMarkers - a.linesWithMarkers || a.replica.localeCompare(b.replica)),
+        });
+    }
+    return { scannedLines, linesWithMarkers, clean: linesWithMarkers === 0, byMarker: total, bySpec };
+}
+//# sourceMappingURL=credentials.js.map

package/dist/analysis/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/analysis/credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC3D;QACI,EAAE,EAAE,sBAAsB;QAC1B,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,+CAA+C;KAC3D;IACD;QACI,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,oCAAoC;KAChD;IACD;QACI,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,wEAAwE;QACrF,OAAO,EAAE,yFAAyF;KACrG;IACD;QACI,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,0DAA0D;KACtE;IACD;QACI,EAAE,EAAE,uBAAuB;QAC3B,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,4CAA4C;KACxD;IACD;QACI,EAAE,EAAE,mBAAmB;QACvB,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,kEAAkE;KAC9E;IACD;QACI,EAAE,EAAE,KAAK;QACT,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,8DAA8D;KAC1E;CACJ,CAAC;AA2BF,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;AAE3C,SAAS,UAAU;IACf,OAAO,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,OAAO,CAAC,MAAoB;IACjC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,IAAY;IAClC,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAC9B,KAAgB,EAChB,SAAmD,EAAE;IAErD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;IAC/E,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgE,CAAC;QACzF,IAAI,OAAO,GAAqD,IAAI,CAAC;QAErE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;YACtC,IAAI,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS;oBAAE,SAAS;gBACrF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO;oBAAE,SAAS;YACrF,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAEjC,MAAM,SAAS,GAAG,OAAO,EAAE,UAAU,IAAI,eAAe,CAAC;YACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;YAC3F,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC3B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,CAAC;QACL,CAAC;QAED,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC;QAClC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC;YACR,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAChC,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;iBAC7B,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpB,OAAO;gBACP,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;gBACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;aAChC,CAAC,CAAC;iBACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACrG,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACtG,CAAC"}

package/dist/analysis/parser.d.ts

@@ -4,6 +4,11 @@
  * Handles: JSON Logger blocks, stack traces, HTTP dumps, continuation lines.
  */
 import type { EnrichedLogEntry } from './types.js';
+/** The time and replica of a line that starts an entry, or null for a continuation line. */
+export declare function lineHeader(line: string): {
+    timestamp: number;
+    instanceId: string;
+} | null;
 /**
  * Parse raw log text into enriched entries, joining multi-line blocks.
  */

package/dist/analysis/parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/analysis/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuCnD;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAkFhE"}
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/analysis/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA4CnD,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGzF;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAkFhE"}

package/dist/analysis/parser.js

@@ -26,6 +26,15 @@ function parseHeader(line) {
     }
     return null;
 }
+/** Epoch milliseconds of a header timestamp (accepts +hhmm offsets). */
+function headerTime(timestamp) {
+    return new Date(timestamp.replace(/([+-]\d{2})(\d{2})$/, '$1:$2')).getTime();
+}
+/** The time and replica of a line that starts an entry, or null for a continuation line. */
+export function lineHeader(line) {
+    const loose = line.match(LOOSE_LINE_REGEX);
+    return loose ? { timestamp: headerTime(loose[1]), instanceId: loose[3] } : null;
+}
 /**
  * Parse raw log text into enriched entries, joining multi-line blocks.
  */
@@ -50,7 +59,7 @@ export function parseRawLogs(rawText) {
                 entries.push(current);
             }
             current = {
-                timestamp: new Date(header.timestamp.replace(/([+-]\d{2})(\d{2})$/, '$1:$2')).getTime(),
+                timestamp: headerTime(header.timestamp),
                 priority: header.level,
                 instanceId: header.instanceId,
                 loggerName: header.loggerName,

package/dist/analysis/parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/analysis/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,gFAAgF;AAChF,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,yGAAyG,CAAC;AAE1I;;;GAGG;AACH,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,qDAAqD,CAAC,CAAC;AAEnH,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,UAAU,CAAC,CAAC;AAY1E,gFAAgF;AAChF,SAAS,WAAW,CAAC,IAAY;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACR,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,OAAO,GAA4B,IAAI,CAAC;IAC5C,IAAI,UAAU,GAAoB,IAAI,CAAC;IACvC,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAE3B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,MAAM,EAAE,CAAC;YACT,0BAA0B;YAC1B,IAAI,OAAO,EAAE,CAAC;gBACV,IAAI,UAAU,EAAE,CAAC;oBACb,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBACvC,UAAU,GAAG,IAAI,CAAC;oBAClB,cAAc,GAAG,CAAC,CAAC;gBACvB,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;YAED,OAAO,GAAG;gBACN,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE;gBACvF,QAAQ,EAAE,MAAM,CAAC,KAAK;gBACtB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;aAC1B,CAAC;YAEF,yDAAyD;YACzD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnD,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnB,cAAc,GAAG,CAAC,CAAC;oBACnB,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7B,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACrD,CAAC;yBAAM,CAAC;wBACJ,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC;oBACzB,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,0CAA0C;YAC1C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;oBACpB,IAAI,EAAE,KAAK,GAAG;wBAAE,cAAc,EAAE,CAAC;yBAC5B,IAAI,EAAE,KAAK,GAAG;wBAAE,cAAc,EAAE,CAAC;gBAC1C,CAAC;gBACD,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;oBACtB,IAAI,OAAO,EAAE,CAAC;wBACV,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBAC3C,CAAC;oBACD,UAAU,GAAG,IAAI,CAAC;oBAClB,cAAc,GAAG,CAAC,CAAC;gBACvB,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,EAAE,CAAC;gBACjB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACrB,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,IAAI,CAAC;gBACtC,CAAC;qBAAM,IAAI,IAAI,CAAC,KAAK,CAAC,gEAAgE,CAAC,EAAE,CAAC;oBACtF,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;gBAC5D,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,EAAE,CAAC;QACV,IAAI,UAAU,EAAE,CAAC;YACb,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,uGAAuG;AACvG,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC,SAAS,cAAc,CAAC,OAAgB;IACpC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;IAC7F,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAuB,EAAE,SAAmB;IACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;QAC3B,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;QAClE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC;QAChF,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;QAC7F,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACpE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACnC,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,UAAU;YAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACL,KAAK,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC;IAC5D,CAAC;AACL,CAAC"}
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/analysis/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,gFAAgF;AAChF,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,yGAAyG,CAAC;AAE1I;;;GAGG;AACH,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,qDAAqD,CAAC,CAAC;AAEnH,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,UAAU,CAAC,CAAC;AAY1E,gFAAgF;AAChF,SAAS,WAAW,CAAC,IAAY;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACR,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,SAAiB;IACjC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,OAAO,GAA4B,IAAI,CAAC;IAC5C,IAAI,UAAU,GAAoB,IAAI,CAAC;IACvC,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAE3B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,MAAM,EAAE,CAAC;YACT,0BAA0B;YAC1B,IAAI,OAAO,EAAE,CAAC;gBACV,IAAI,UAAU,EAAE,CAAC;oBACb,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBACvC,UAAU,GAAG,IAAI,CAAC;oBAClB,cAAc,GAAG,CAAC,CAAC;gBACvB,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;YAED,OAAO,GAAG;gBACN,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;gBACvC,QAAQ,EAAE,MAAM,CAAC,KAAK;gBACtB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;aAC1B,CAAC;YAEF,yDAAyD;YACzD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnD,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnB,cAAc,GAAG,CAAC,CAAC;oBACnB,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7B,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACrD,CAAC;yBAAM,CAAC;wBACJ,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC;oBACzB,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,0CAA0C;YAC1C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;oBACpB,IAAI,EAAE,KAAK,GAAG;wBAAE,cAAc,EAAE,CAAC;yBAC5B,IAAI,EAAE,KAAK,GAAG;wBAAE,cAAc,EAAE,CAAC;gBAC1C,CAAC;gBACD,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;oBACtB,IAAI,OAAO,EAAE,CAAC;wBACV,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBAC3C,CAAC;oBACD,UAAU,GAAG,IAAI,CAAC;oBAClB,cAAc,GAAG,CAAC,CAAC;gBACvB,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,EAAE,CAAC;gBACjB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACrB,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,IAAI,CAAC;gBACtC,CAAC;qBAAM,IAAI,IAAI,CAAC,KAAK,CAAC,gEAAgE,CAAC,EAAE,CAAC;oBACtF,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;gBAC5D,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,EAAE,CAAC;QACV,IAAI,UAAU,EAAE,CAAC;YACb,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,uGAAuG;AACvG,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC,SAAS,cAAc,CAAC,OAAgB;IACpC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;IAC7F,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAuB,EAAE,SAAmB;IACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;QAC3B,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;QAClE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC;QAChF,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;QAC7F,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACpE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACnC,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,UAAU;YAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACL,KAAK,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC;IAC5D,CAAC;AACL,CAAC"}

package/dist/api/AlertsApi.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Alerts API
+ * Anypoint Monitoring alerts (the observability family behind the Monitoring UI) and a read of
+ * Runtime Manager event alerts.
+ *
+ * These endpoints are not publicly documented. Shapes follow observed responses and may change; a
+ * family that answers 404 or 403 on list is reported as unsupported (AlertsUnsupportedError) rather
+ * than as "no alerts".
+ */
+import type { HttpClient } from '../client/HttpClient.js';
+export declare const ALERT_METRIC_IDS: readonly ["cpu_utilization", "memory_utilization", "thread_count", "message_count", "message_error_count", "message_response_time", "api_request_count", "api_response_time", "api_response_code_count", "api_policy_violation_count"];
+export type AlertMetricId = (typeof ALERT_METRIC_IDS)[number];
+export declare const ALERT_OPERATORS: readonly ["GREATER_THAN", "LESS_THAN", "GREATER_THAN_EQUAL_TO", "LESS_THAN_EQUAL_TO", "EQUALS"];
+export type AlertOperator = (typeof ALERT_OPERATORS)[number];
+export type AlertStatus = 'PENDING' | 'ACTIVE' | 'DELETED';
+export type AlertDeploymentType = 'CLOUDHUB' | 'CLOUDHUB2' | 'RTF' | 'HYBRID';
+export type AlertEntityType = 'application' | 'api' | 'server';
+export interface AlertSettings {
+    metricId: string;
+    aggregationFunction: 'AVG' | 'SUM';
+    evaluationOperator: AlertOperator;
+    aggregationInterval: string;
+    /** A fraction (0..1) for percent metrics. */
+    threshold: number;
+    evaluationInterval: string;
+    numWindows?: number;
+}
+export interface AlertApiFilter {
+    property: 'POLICY' | 'RESPONSE_CODE';
+    operator: 'IN';
+    values: string[];
+}
+export interface AlertEntity {
+    entityType: AlertEntityType;
+    subOrgId?: string;
+    masterOrgId?: string;
+    environmentId: string;
+    environmentName?: string;
+    appId?: string;
+    clusterId?: string;
+    deploymentType?: AlertDeploymentType;
+    deploymentId?: string;
+    flowId?: string;
+    endpoint?: string;
+    apiName?: string;
+    apiInstanceId?: string;
+    filters?: AlertApiFilter[];
+    entityName?: string;
+}
+export interface AlertNotification {
+    [field: string]: unknown;
+    type: 'EMAIL' | 'SLACK';
+    recipients?: string[];
+    subject?: string;
+    messageTemplate?: string;
+    channelId?: string;
+    carrierId?: string;
+}
+export interface MonitoringAlert {
+    id: string;
+    name: string;
+    alertStatus?: AlertStatus;
+    severity: number;
+    enabled: boolean;
+    alertOn?: string;
+    settings: AlertSettings;
+    entity: AlertEntity;
+    tags?: Record<string, unknown>;
+    state?: {
+        currentState?: 'OK' | 'ALERTING' | string;
+    };
+    /** The read side of `notifications`. */
+    notificationTemplates?: AlertNotification[];
+    notifications?: AlertNotification[];
+    createdAt?: string;
+    updatedAt?: string;
+}
+/** The body for create (no id) and update (full body with id); notifications are written as `notifications`. */
+export interface AlertWriteBody {
+    /** Writable fields of the existing alert this tool does not model (tags, alertOn, ...) are resent as is. */
+    [field: string]: unknown;
+    id?: string;
+    name: string;
+    severity: number;
+    enabled: boolean;
+    settings: AlertSettings;
+    entity: AlertEntity;
+    notifications: AlertNotification[];
+}
+/** A Runtime Manager event alert, as returned (best effort; the shape is not documented). */
+export type RuntimeManagerAlert = Record<string, unknown> & {
+    id?: string;
+    name?: string;
+};
+export declare class AlertsUnsupportedError extends Error {
+    readonly family: string;
+    readonly status: number;
+    constructor(family: string, status: number);
+}
+export declare class AlertPendingError extends Error {
+    constructor(id: string);
+}
+/**
+ * Map platform errors to messages that say what happened. Platform text is sanitized first: an alert
+ * error can echo recipients or tokens, and it ends up in MCP responses and CLI output.
+ */
+export declare function alertError(error: unknown, id?: string): Error;
+export declare class AlertsApi {
+    private readonly http;
+    constructor(http: HttpClient);
+    private url;
+    /** Every Monitoring alert of the organization, optionally narrowed by environment ID and exact name. */
+    list(orgId: string, filter?: {
+        environmentId?: string;
+        name?: string;
+    }): Promise<MonitoringAlert[]>;
+    /**
+     * Like {@link list}, and says whether the listing is complete. It is not when the page cap was
+     * reached with more pages left; callers must not infer that an alert is absent from such a listing.
+     */
+    listAll(orgId: string, filter?: {
+        environmentId?: string;
+        name?: string;
+    }): Promise<{
+        alerts: MonitoringAlert[];
+        complete: boolean;
+    }>;
+    /** One alert, or null when it does not exist (any more). */
+    get(orgId: string, id: string): Promise<MonitoringAlert | null>;
+    create(orgId: string, body: AlertWriteBody): Promise<MonitoringAlert | undefined>;
+    /** Replace an alert. The platform needs the full body; a partial one is rejected. */
+    update(orgId: string, id: string, body: AlertWriteBody): Promise<void>;
+    /** Request deletion. It is asynchronous: the alert can stay PENDING for a while before it is gone. */
+    delete(orgId: string, id: string): Promise<'accepted' | 'not-found'>;
+    /** Runtime Manager event alerts (deployment failed and similar) for one environment. Read only. */
+    listRuntimeManager(orgId: string, envId: string): Promise<RuntimeManagerAlert[]>;
+}
+//# sourceMappingURL=AlertsApi.d.ts.map

package/dist/api/AlertsApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AlertsApi.d.ts","sourceRoot":"","sources":["../../src/api/AlertsApi.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI1D,eAAO,MAAM,gBAAgB,wOAWnB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe,iGAMlB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC3D,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,WAAW,GAAG,KAAK,GAAG,QAAQ,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,KAAK,GAAG,KAAK,CAAC;IACnC,kBAAkB,EAAE,aAAa,CAAC;IAClC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,EAAE,QAAQ,GAAG,eAAe,CAAC;IACrC,QAAQ,EAAE,IAAI,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IACxB,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAC9B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,IAAI,GAAG,UAAU,GAAG,MAAM,CAAA;KAAE,CAAC;IACtD,wCAAwC;IACxC,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5C,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gHAAgH;AAChH,MAAM,WAAW,cAAc;IAC3B,4GAA4G;IAC5G,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,iBAAiB,EAAE,CAAC;CACtC;AAED,6FAA6F;AAC7F,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F,qBAAa,sBAAuB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM;CAK9B;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC5B,EAAE,EAAE,MAAM;CAMzB;AAWD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,KAAK,CAO7D;AAED,qBAAa,SAAS;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,OAAO,CAAC,GAAG;IAIX,wGAAwG;IAClG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAI7G;;;OAGG;IACG,OAAO,CACT,KAAK,EAAE,MAAM,EACb,MAAM,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GACvD,OAAO,CAAC;QAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAqB5D,4DAA4D;IACtD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAU/D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IASvF,qFAAqF;IAC/E,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ5E,sGAAsG;IAChG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,WAAW,CAAC;IAW1E,mGAAmG;IAC7F,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;CAazF"}