@sfdxy/anypoint-connect 0.16.3 → 0.18.0

package/dist/mcp/tools/shared.js

@@ -5,6 +5,7 @@
 import { z } from 'zod';
 import { errorMessage } from '../../utils/errors.js';
 import { isProductionEnv } from '../../safety/guards.js';
+import { checkPreapproval, ignoredProjectApprovalWarning } from '../../safety/preapproval.js';
 /** Resolve the default org and an environment name or ID in one step. */
 export async function resolveEnvironment(client, environment) {
     const orgId = await client.getDefaultOrgId();
@@ -32,6 +33,14 @@ export function mcpText(payload) {
     const text = typeof payload === 'string' ? payload : JSON.stringify(payload, null, 2);
     return { content: [{ type: 'text', text }] };
 }
+/**
+ * A result for a tool that declares an `outputSchema`: the JSON as text for people and hosts that
+ * read text, and the same data as `structuredContent` for programs. `text` defaults to the
+ * structured payload; pass it when the established text form differs (for example a bare array).
+ */
+export function mcpStructured(structured, text = structured) {
+    return { ...mcpText(text), structuredContent: structured };
+}
 /**
  * Build the dry-run preview response returned by a mutating deploy tool when the caller
  * has not passed `confirm: true`. Over stdio there is no interactive prompt, so the
@@ -55,19 +64,42 @@ export const writeInputs = {
         .optional()
         .describe('Required in addition to confirm when the target environment is production'),
 };
+/**
+ * Production fields for previews and results: `production`, whether a user-level pre-approval for
+ * this organization, environment and tool applies, and where it is stored. Empty outside production.
+ */
+export function productionFields(orgId, env, tool) {
+    if (!isProductionEnv(env.name, env.isProduction))
+        return {};
+    const decision = checkPreapproval({ orgId, env }, tool);
+    const warning = ignoredProjectApprovalWarning();
+    return {
+        production: true,
+        productionPreapproved: decision.productionPreapproved,
+        ...(decision.preapprovalSource ? { preapprovalSource: decision.preapprovalSource } : {}),
+        ...(decision.preapprovalExpires ? { preapprovalExpires: decision.preapprovalExpires } : {}),
+        ...(warning ? { preapprovalWarning: warning } : {}),
+    };
+}
 /**
  * Gate a write. Returns the response to send instead of writing (a preview, or a refusal for
- * production without `confirmProduction`), or `null` when the caller may proceed.
+ * production without `confirmProduction`), or `null` when the caller may proceed. A user-level
+ * pre-approval for the organization, environment and `tool` stands in for `confirmProduction`;
+ * `confirm` is always required.
  */
 export function guardWrite(input) {
-    const production = isProductionEnv(input.env.name, input.env.isProduction);
+    const production = productionFields(input.orgId, input.env, input.tool);
+    const preapproved = production.productionPreapproved === true;
     if (!input.confirm) {
         return dryRunPreview({
             ...input.preview,
-            ...(production ? { production: true, requires: 'confirm: true and confirmProduction: true' } : {}),
+            ...production,
+            ...(production.production
+                ? { requires: preapproved ? 'confirm: true' : 'confirm: true and confirmProduction: true' }
+                : {}),
         });
     }
-    if (production && !input.confirmProduction) {
+    if (production.production && !preapproved && !input.confirmProduction) {
         return {
             content: [
                 {
@@ -76,6 +108,7 @@ export function guardWrite(input) {
                         refused: true,
                         message: `${input.env.name} is a production environment. Nothing was changed. Re-call with confirm: true and confirmProduction: true to apply.`,
                         ...input.preview,
+                        ...production,
                     }, null, 2),
                 },
             ],

package/dist/mcp/tools/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/mcp/tools/shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAsB,EACtB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,SAAS,GAAG,EAAE;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;AACxG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAa;KACzB,CAAC;AACN,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,OAAO,CAAC,OAAgB;IACpC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgC;IAC1D,OAAO,OAAO,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,+FAA+F;QACxG,GAAG,OAAO;KACb,CAAC,CAAC;AACP,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,MAAM,WAAW,GAAG;IACvB,OAAO,EAAE,CAAC;SACL,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,6EAA6E,CAAC;IAC5F,iBAAiB,EAAE,CAAC;SACf,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;CAC7F,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAK1B;IACG,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,aAAa,CAAC;YACjB,GAAG,KAAK,CAAC,OAAO;YAChB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,2CAA2C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrG,CAAC,CAAC;IACP,CAAC;IACD,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACzC,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAChB;wBACI,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,qHAAqH;wBAC/I,GAAG,KAAK,CAAC,OAAO;qBACnB,EACD,IAAI,EACJ,CAAC,CACJ;iBACJ;aACJ;YACD,OAAO,EAAE,IAAa;SACzB,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/mcp/tools/shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAE9F,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAsB,EACtB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,SAAS,GAAG,EAAE;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;AACxG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAa;KACzB,CAAC;AACN,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,OAAO,CAAC,OAAgB;IACpC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAoC,UAAa,EAAE,OAAgB,UAAU;IACtG,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgC;IAC1D,OAAO,OAAO,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,+FAA+F;QACxG,GAAG,OAAO;KACb,CAAC,CAAC;AACP,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,MAAM,WAAW,GAAG;IACvB,OAAO,EAAE,CAAC;SACL,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,6EAA6E,CAAC;IAC5F,iBAAiB,EAAE,CAAC;SACf,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;CAC7F,CAAC;AAaF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,GAAa,EAAE,IAAY;IACvE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,6BAA6B,EAAE,CAAC;IAChD,OAAO;QACH,UAAU,EAAE,IAAa;QACzB,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;QACrD,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAQ1B;IACG,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,UAAU,CAAC,qBAAqB,KAAK,IAAI,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,aAAa,CAAC;YACjB,GAAG,KAAK,CAAC,OAAO;YAChB,GAAG,UAAU;YACb,GAAG,CAAC,UAAU,CAAC,UAAU;gBACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,2CAA2C,EAAE;gBAC3F,CAAC,CAAC,EAAE,CAAC;SACZ,CAAC,CAAC;IACP,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACpE,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAChB;wBACI,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,qHAAqH;wBAC/I,GAAG,KAAK,CAAC,OAAO;wBAChB,GAAG,UAAU;qBAChB,EACD,IAAI,EACJ,CAAC,CACJ;iBACJ;aACJ;YACD,OAAO,EAAE,IAAa;SACzB,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/safety/artifact.d.ts

@@ -8,6 +8,51 @@ export declare function inspectArtifact(bytes: Uint8Array, expectedArtifactId?:
     sha256: string;
     coordinates?: ArtifactCoordinates;
 };
+/** Where mule-build (3.2.0 and later) records how a jar was built. */
+export declare const BUILD_INFO_PATH = "META-INF/mule-build/build-info.json";
+/** What a jar says about its own build, read from {@link BUILD_INFO_PATH}. */
+export type BuildProvenance = {
+    status: 'unknown';
+} | {
+    status: 'invalid';
+    reason: string;
+} | {
+    status: 'recorded';
+    schemaVersion: number;
+    tool: string;
+    toolVersion: string;
+    stripped: boolean;
+    productionDeployable: boolean;
+};
+/** Read the build-info marker without extracting anything else. A jar without one has unknown provenance. */
+export declare function readBuildProvenance(bytes: Uint8Array): BuildProvenance;
+/** Whether unmarked jars may go to the target; see src/safety/preapproval.ts. */
+export interface UnmarkedPolicy {
+    unmarkedAllowed: boolean;
+    source?: string;
+    expires?: string;
+}
+/** The outcome of checking a jar's build provenance against where it is going. */
+export interface ProvenanceCheck {
+    /** Serializable summary for previews. */
+    buildProvenance: BuildProvenance & {
+        note?: string;
+    };
+    /** Present for a production target: whether unmarked jars are allowed there, and by what. */
+    provenancePolicy?: UnmarkedPolicy;
+    warnings: string[];
+    /** Set when the jar must not go to the target. */
+    blocker?: string;
+}
+/**
+ * Decide whether a jar may go to an environment. For production, only a marker with schemaVersion 1,
+ * tool "mule-build", stripped false and productionDeployable true passes. A jar marked not production
+ * deployable, or with an unreadable or inconsistent marker, is refused with no override. A jar
+ * without a marker is refused unless an unmarked-artifact allowance covers the org and environment.
+ * Outside production every case passes, with a warning or a note. `production` is undefined when the
+ * target is not known yet (publishing only).
+ */
+export declare function checkBuildProvenance(provenance: BuildProvenance, production: boolean | undefined, unmarked?: UnmarkedPolicy): ProvenanceCheck;
 /** Compare the exact bytes that will be uploaded with the reviewed build or preview digest. */
 export declare function verifyArtifactDigest(bytes: Uint8Array, expectedSha256?: string): string;
 //# sourceMappingURL=artifact.d.ts.map

package/dist/safety/artifact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../src/safety/artifact.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mBAAmB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAC3B,KAAK,EAAE,UAAU,EACjB,kBAAkB,CAAC,EAAE,MAAM,EAC3B,cAAc,UAAQ,GACvB;IACC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACrC,CA4CA;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CASvF"}
+{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../src/safety/artifact.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mBAAmB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAC3B,KAAK,EAAE,UAAU,EACjB,kBAAkB,CAAC,EAAE,MAAM,EAC3B,cAAc,UAAQ,GACvB;IACC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACrC,CA4CA;AAED,sEAAsE;AACtE,eAAO,MAAM,eAAe,wCAAwC,CAAC;AAIrE,8EAA8E;AAC9E,MAAM,MAAM,eAAe,GACrB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrC;IACI,MAAM,EAAE,UAAU,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,oBAAoB,EAAE,OAAO,CAAC;CACjC,CAAC;AAER,6GAA6G;AAC7G,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAqDtE;AAKD,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC5B,yCAAyC;IACzC,eAAe,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAChC,UAAU,EAAE,eAAe,EAC3B,UAAU,EAAE,OAAO,GAAG,SAAS,EAC/B,QAAQ,GAAE,cAA2C,GACtD,eAAe,CAsCjB;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CASvF"}

package/dist/safety/artifact.js

@@ -46,6 +46,115 @@ export function inspectArtifact(bytes, expectedArtifactId, allowAmbiguous = fals
     }
     return { sha256, coordinates: candidates[0] };
 }
+/** Where mule-build (3.2.0 and later) records how a jar was built. */
+export const BUILD_INFO_PATH = 'META-INF/mule-build/build-info.json';
+const BUILD_INFO_MAX_BYTES = 65536;
+/** Read the build-info marker without extracting anything else. A jar without one has unknown provenance. */
+export function readBuildProvenance(bytes) {
+    let seen = 0;
+    let oversized = false;
+    const entries = unzipSync(bytes, {
+        filter(entry) {
+            if (entry.name !== BUILD_INFO_PATH)
+                return false;
+            seen++;
+            if (entry.originalSize > BUILD_INFO_MAX_BYTES) {
+                oversized = true;
+                return false;
+            }
+            return true;
+        },
+    });
+    if (seen === 0)
+        return { status: 'unknown' };
+    if (seen > 1)
+        return { status: 'invalid', reason: `the jar has ${seen} ${BUILD_INFO_PATH} entries` };
+    if (oversized)
+        return { status: 'invalid', reason: `${BUILD_INFO_PATH} exceeds ${BUILD_INFO_MAX_BYTES} bytes` };
+    let info;
+    try {
+        const parsed = JSON.parse(strFromU8(entries[BUILD_INFO_PATH]));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            throw new Error('not an object');
+        info = parsed;
+    }
+    catch {
+        return { status: 'invalid', reason: `${BUILD_INFO_PATH} is not a JSON object` };
+    }
+    const { schemaVersion, tool, toolVersion, stripped, productionDeployable } = info;
+    if (typeof schemaVersion !== 'number' ||
+        !Number.isInteger(schemaVersion) ||
+        schemaVersion < 1 ||
+        typeof tool !== 'string' ||
+        typeof toolVersion !== 'string' ||
+        typeof stripped !== 'boolean' ||
+        typeof productionDeployable !== 'boolean') {
+        return {
+            status: 'invalid',
+            reason: `${BUILD_INFO_PATH} lacks schemaVersion, tool, toolVersion, stripped or productionDeployable`,
+        };
+    }
+    // Only the contract this tool understands counts; anything else cannot vouch for the build.
+    if (schemaVersion !== BUILD_INFO_SCHEMA_VERSION) {
+        return { status: 'invalid', reason: `unsupported schemaVersion ${schemaVersion} (expected 1)` };
+    }
+    if (tool !== BUILD_INFO_TOOL)
+        return { status: 'invalid', reason: `unknown build tool "${tool}"` };
+    if (productionDeployable === stripped) {
+        return {
+            status: 'invalid',
+            reason: `inconsistent marker: stripped ${stripped} with productionDeployable ${productionDeployable}`,
+        };
+    }
+    return { status: 'recorded', schemaVersion, tool, toolVersion, stripped, productionDeployable };
+}
+const BUILD_INFO_SCHEMA_VERSION = 1;
+const BUILD_INFO_TOOL = 'mule-build';
+const UNKNOWN_NOTE = `build provenance unknown: the jar has no ${BUILD_INFO_PATH} (built before mule-build 3.2.0 or by another tool)`;
+/**
+ * Decide whether a jar may go to an environment. For production, only a marker with schemaVersion 1,
+ * tool "mule-build", stripped false and productionDeployable true passes. A jar marked not production
+ * deployable, or with an unreadable or inconsistent marker, is refused with no override. A jar
+ * without a marker is refused unless an unmarked-artifact allowance covers the org and environment.
+ * Outside production every case passes, with a warning or a note. `production` is undefined when the
+ * target is not known yet (publishing only).
+ */
+export function checkBuildProvenance(provenance, production, unmarked = { unmarkedAllowed: false }) {
+    const policy = production ? { provenancePolicy: unmarked } : {};
+    if (provenance.status === 'unknown') {
+        const buildProvenance = { ...provenance, note: UNKNOWN_NOTE };
+        if (production && !unmarked.unmarkedAllowed) {
+            return {
+                buildProvenance,
+                ...policy,
+                warnings: [],
+                blocker: 'Refused: build provenance unknown. Production takes only jars whose mule-build marker says productionDeployable. ' +
+                    'For artifacts built by another pipeline, add an unmarked-artifact allowance for this organization and environment (set_unmarked_artifact_allowance).',
+            };
+        }
+        return { buildProvenance, ...policy, warnings: [] };
+    }
+    if (provenance.status === 'recorded' && provenance.productionDeployable) {
+        return { buildProvenance: provenance, ...policy, warnings: [] };
+    }
+    const problem = provenance.status === 'invalid'
+        ? `its build marker is not valid (${provenance.reason})`
+        : `its build marks it not production deployable (${provenance.tool} ${provenance.toolVersion}, stripped: ${provenance.stripped})`;
+    if (production) {
+        return {
+            buildProvenance: provenance,
+            ...policy,
+            warnings: [],
+            blocker: `Refused: this jar cannot go to a production environment because ${problem}. Build a production-deployable jar (secure properties not stripped) and preview again.`,
+        };
+    }
+    return {
+        buildProvenance: provenance,
+        warnings: [
+            `This jar is not production deployable: ${problem}. Deploying it to a production environment is refused.`,
+        ],
+    };
+}
 /** Compare the exact bytes that will be uploaded with the reviewed build or preview digest. */
 export function verifyArtifactDigest(bytes, expectedSha256) {
     const sha256 = createHash('sha256').update(bytes).digest('hex');

package/dist/safety/artifact.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/safety/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAQ9C,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAC3B,KAAiB,EACjB,kBAA2B,EAC3B,cAAc,GAAG,KAAK;IAKtB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE;QAC7B,MAAM,CAAC,KAAK;YACR,IAAI,CAAC,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvF,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC5F,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9B,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;YACnC,IAAI,KAAK,CAAC,YAAY,GAAG,KAAK,IAAI,YAAY,GAAG,OAAO;gBACpD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACjC,SAAS,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,OAAO,CAAC;aACd,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,KAAK,GAAG,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC,CAAC,CACT,CAAC;QACF,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;QACpD,IACI,CAAC,OAAO;YACR,CAAC,UAAU;YACX,CAAC,OAAO;YACR,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC9F,CAAC;YACC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB,OAAO,IAAI,UAAU,iBAAiB,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,kBAAkB,IAAI,UAAU,KAAK,kBAAkB;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,KAAiB,EAAE,cAAuB;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,IACI,cAAc,KAAK,SAAS;QAC5B,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,MAAM,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC,EACxF,CAAC;QACC,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/safety/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAQ9C,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAC3B,KAAiB,EACjB,kBAA2B,EAC3B,cAAc,GAAG,KAAK;IAKtB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE;QAC7B,MAAM,CAAC,KAAK;YACR,IAAI,CAAC,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvF,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC5F,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9B,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;YACnC,IAAI,KAAK,CAAC,YAAY,GAAG,KAAK,IAAI,YAAY,GAAG,OAAO;gBACpD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACjC,SAAS,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,OAAO,CAAC;aACd,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,KAAK,GAAG,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC,CAAC,CACT,CAAC;QACF,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;QACpD,IACI,CAAC,OAAO;YACR,CAAC,UAAU;YACX,CAAC,OAAO;YACR,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC9F,CAAC;YACC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB,OAAO,IAAI,UAAU,iBAAiB,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,kBAAkB,IAAI,UAAU,KAAK,kBAAkB;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAErE,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAenC,6GAA6G;AAC7G,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE;QAC7B,MAAM,CAAC,KAAK;YACR,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;gBAAE,OAAO,KAAK,CAAC;YACjD,IAAI,EAAE,CAAC;YACP,IAAI,KAAK,CAAC,YAAY,GAAG,oBAAoB,EAAE,CAAC;gBAC5C,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC,CAAC;IACH,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7C,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI,eAAe,UAAU,EAAE,CAAC;IACrG,IAAI,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,YAAY,oBAAoB,QAAQ,EAAE,CAAC;IAEhH,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACrG,IAAI,GAAG,MAAiC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,uBAAuB,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;IAClF,IACI,OAAO,aAAa,KAAK,QAAQ;QACjC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAChC,aAAa,GAAG,CAAC;QACjB,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,WAAW,KAAK,QAAQ;QAC/B,OAAO,QAAQ,KAAK,SAAS;QAC7B,OAAO,oBAAoB,KAAK,SAAS,EAC3C,CAAC;QACC,OAAO;YACH,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,GAAG,eAAe,2EAA2E;SACxG,CAAC;IACN,CAAC;IACD,4FAA4F;IAC5F,IAAI,aAAa,KAAK,yBAAyB,EAAE,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,aAAa,eAAe,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,IAAI,GAAG,EAAE,CAAC;IACnG,IAAI,oBAAoB,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO;YACH,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iCAAiC,QAAQ,8BAA8B,oBAAoB,EAAE;SACxG,CAAC;IACN,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,eAAe,GAAG,YAAY,CAAC;AAoBrC,MAAM,YAAY,GAAG,4CAA4C,eAAe,qDAAqD,CAAC;AAEtI;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAChC,UAA2B,EAC3B,UAA+B,EAC/B,WAA2B,EAAE,eAAe,EAAE,KAAK,EAAE;IAErD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,eAAe,GAAG,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC9D,IAAI,UAAU,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC1C,OAAO;gBACH,eAAe;gBACf,GAAG,MAAM;gBACT,QAAQ,EAAE,EAAE;gBACZ,OAAO,EACH,mHAAmH;oBACnH,sJAAsJ;aAC7J,CAAC;QACN,CAAC;QACD,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,IAAI,UAAU,CAAC,oBAAoB,EAAE,CAAC;QACtE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GACT,UAAU,CAAC,MAAM,KAAK,SAAS;QAC3B,CAAC,CAAC,kCAAkC,UAAU,CAAC,MAAM,GAAG;QACxD,CAAC,CAAC,iDAAiD,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,WAAW,eAAe,UAAU,CAAC,QAAQ,GAAG,CAAC;IAC1I,IAAI,UAAU,EAAE,CAAC;QACb,OAAO;YACH,eAAe,EAAE,UAAU;YAC3B,GAAG,MAAM;YACT,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,mEAAmE,OAAO,yFAAyF;SAC/K,CAAC;IACN,CAAC;IACD,OAAO;QACH,eAAe,EAAE,UAAU;QAC3B,QAAQ,EAAE;YACN,0CAA0C,OAAO,wDAAwD;SAC5G;KACJ,CAAC;AACN,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,KAAiB,EAAE,cAAuB;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,IACI,cAAc,KAAK,SAAS;QAC5B,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,MAAM,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC,EACxF,CAAC;QACC,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/safety/guards.d.ts

@@ -20,6 +20,16 @@ export declare function validateJarFile(jarPath: string): {
     artifactId?: string;
     version?: string;
 };
+/**
+ * Confirm a production write from the CLI. Outside production, with --force, or when a user-level
+ * pre-approval covers the organization, the environment and `tool` (the matching MCP tool name), no
+ * prompt is shown; otherwise the typed phrase is required.
+ */
+export declare function confirmProductionWrite(env: {
+    name: string;
+    id: string;
+    isProduction?: boolean;
+}, orgId: string, tool: string, force?: boolean): Promise<boolean>;
 /**
  * Ask for production deployment confirmation
  */

package/dist/safety/guards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/safety/guards.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAG5D;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAIhF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,aAAa,GAAG,IAAI,EAC9B,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,OAAO,GACvB,MAAM,CA4BR;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG;IAC9C,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAuBA;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAcvG"}
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/safety/guards.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAI5D;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAIhF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,aAAa,GAAG,IAAI,EAC9B,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,OAAO,GACvB,MAAM,CA4BR;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG;IAC9C,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAuBA;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CACxC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,EACzD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,UAAQ,GACd,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAcvG"}

package/dist/safety/guards.js

@@ -5,6 +5,7 @@
 import * as fs from 'fs';
 import * as readline from 'readline';
 import chalk from 'chalk';
+import { checkPreapproval } from './preapproval.js';
 /**
  * Check if an environment is a production environment
  */
@@ -63,6 +64,21 @@ export function validateJarFile(jarPath) {
         version: match?.[2],
     };
 }
+/**
+ * Confirm a production write from the CLI. Outside production, with --force, or when a user-level
+ * pre-approval covers the organization, the environment and `tool` (the matching MCP tool name), no
+ * prompt is shown; otherwise the typed phrase is required.
+ */
+export async function confirmProductionWrite(env, orgId, tool, force = false) {
+    if (!isProductionEnv(env.name, env.isProduction) || force)
+        return true;
+    const decision = checkPreapproval({ orgId, env }, tool);
+    if (decision.productionPreapproved) {
+        console.log(chalk.yellow(`  Production pre-approved for ${tool} in ${env.name} (${decision.preapprovalSource}${decision.preapprovalExpires ? `, until ${decision.preapprovalExpires}` : ''})`));
+        return true;
+    }
+    return confirmProductionDeploy(env.name, env.isProduction);
+}
 /**
  * Ask for production deployment confirmation
  */

package/dist/safety/guards.js.map

@@ -1 +1 @@
-{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../src/safety/guards.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AAErC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,YAAsB;IACnE,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAC9B,OAAe,EACf,OAAe,EACf,QAA8B,EAC9B,UAAmB,EACnB,YAAsB;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEpE,IAAI,QAAQ,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,IAAI,SAAS,CAAC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC;QAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CACN,KAAK,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,OAAO,KAAK,MAAM,KAAK,QAAQ,WAAW,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAC5G,CAAC;IACN,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAM3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,OAAO,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACxE,CAAC;IAED,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAEvF,OAAO;QACH,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;KACtB,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,EAAE,YAAsB;IACjF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACzB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,4CAA4C,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;YACjF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,sBAAsB,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../src/safety/guards.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AAErC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,YAAsB;IACnE,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAC9B,OAAe,EACf,OAAe,EACf,QAA8B,EAC9B,UAAmB,EACnB,YAAsB;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEpE,IAAI,QAAQ,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,IAAI,SAAS,CAAC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC;QAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CACN,KAAK,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,OAAO,KAAK,MAAM,KAAK,QAAQ,WAAW,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAC5G,CAAC;IACN,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAM3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,OAAO,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACxE,CAAC;IAED,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAEvF,OAAO;QACH,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;KACtB,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,GAAyD,EACzD,KAAa,EACb,IAAY,EACZ,KAAK,GAAG,KAAK;IAEb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,CACR,iCAAiC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACvK,CACJ,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,EAAE,YAAsB;IACjF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACzB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,4CAA4C,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;YACjF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,sBAAsB,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/safety/plan-binding.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Binding an apply to the change that was reviewed. A preview carries a digest of what it showed; the
+ * apply must present that digest, and the deployment must still be the one that was reviewed. Pure
+ * functions (no I/O). Secret values never enter a digest: it is built from the already-redacted preview.
+ */
+import type { CH2Deployment } from '../api/CloudHub2Api.js';
+/** JSON with object keys sorted at every level, so equal data always serializes the same way. */
+export declare function canonicalJson(value: unknown): string;
+export declare function digestOf(value: unknown): string;
+/**
+ * The refusal text for an apply that does not carry the digest of its preview, or carries one for a
+ * different change; `null` when it matches.
+ */
+export declare function checkReviewedPlan(presented: string | undefined, current: string): string | null;
+/**
+ * Refuse to write when the deployment is no longer the one that was reviewed: recreated (new id) or
+ * changed. Compares the revision fields the platform sets; when neither is present on the reviewed
+ * deployment it compares the state itself, because silence is not proof that nothing changed.
+ */
+export declare function assertDeploymentUnchanged(reviewed: CH2Deployment, current: CH2Deployment): void;
+//# sourceMappingURL=plan-binding.d.ts.map

package/dist/safety/plan-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-binding.d.ts","sourceRoot":"","sources":["../../src/safety/plan-binding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAapD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ/F;AAOD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAW/F"}

package/dist/safety/plan-binding.js

@@ -0,0 +1,61 @@
+/**
+ * Binding an apply to the change that was reviewed. A preview carries a digest of what it showed; the
+ * apply must present that digest, and the deployment must still be the one that was reviewed. Pure
+ * functions (no I/O). Secret values never enter a digest: it is built from the already-redacted preview.
+ */
+import { createHash } from 'node:crypto';
+/** JSON with object keys sorted at every level, so equal data always serializes the same way. */
+export function canonicalJson(value) {
+    const sorted = (v) => {
+        if (Array.isArray(v))
+            return v.map(sorted);
+        if (v && typeof v === 'object') {
+            return Object.fromEntries(Object.entries(v)
+                .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+                .map(([k, x]) => [k, sorted(x)]));
+        }
+        return v;
+    };
+    return JSON.stringify(sorted(value));
+}
+export function digestOf(value) {
+    return createHash('sha256').update(canonicalJson(value)).digest('hex');
+}
+/**
+ * The refusal text for an apply that does not carry the digest of its preview, or carries one for a
+ * different change; `null` when it matches.
+ */
+export function checkReviewedPlan(presented, current) {
+    if (!presented) {
+        return 'planDigest is required with confirm: true. Call without confirm, review the preview, then pass its planDigest. Nothing was changed.';
+    }
+    if (presented !== current) {
+        return 'The change now differs from the one you reviewed (the application or the request changed). Nothing was changed. Preview again and pass the new planDigest.';
+    }
+    return null;
+}
+/** The parts of a deployment that decide what a change would do, for when revision fields are absent. */
+function stateOf(d) {
+    return { application: d.application, target: d.target };
+}
+/**
+ * Refuse to write when the deployment is no longer the one that was reviewed: recreated (new id) or
+ * changed. Compares the revision fields the platform sets; when neither is present on the reviewed
+ * deployment it compares the state itself, because silence is not proof that nothing changed.
+ */
+export function assertDeploymentUnchanged(reviewed, current) {
+    const changed = (what) => new Error(`The deployment changed after review (${what}). Nothing was changed; prepare the change again.`);
+    if (reviewed.id !== current.id)
+        throw changed('it was recreated');
+    const hasRevision = reviewed.desiredVersion !== undefined || reviewed.lastModifiedDate !== undefined;
+    if (hasRevision) {
+        if (reviewed.desiredVersion !== current.desiredVersion)
+            throw changed('a new revision was applied');
+        if (reviewed.lastModifiedDate !== current.lastModifiedDate)
+            throw changed('it was modified');
+        return;
+    }
+    if (canonicalJson(stateOf(reviewed)) !== canonicalJson(stateOf(current)))
+        throw changed('its state differs');
+}
+//# sourceMappingURL=plan-binding.js.map

package/dist/safety/plan-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-binding.js","sourceRoot":"","sources":["../../src/safety/plan-binding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE;QACnC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC;iBACvC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CACvC,CAAC;QACN,CAAC;QACD,OAAO,CAAC,CAAC;IACb,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA6B,EAAE,OAAe;IAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,qIAAqI,CAAC;IACjJ,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,4JAA4J,CAAC;IACxK,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,yGAAyG;AACzG,SAAS,OAAO,CAAC,CAAgB;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAuB,EAAE,OAAsB;IACrF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAC7B,IAAI,KAAK,CAAC,wCAAwC,IAAI,mDAAmD,CAAC,CAAC;IAC/G,IAAI,QAAQ,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACrG,IAAI,WAAW,EAAE,CAAC;QACd,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB;YAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7F,OAAO;IACX,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACjH,CAAC"}

package/dist/safety/preapproval.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Production policy: pre-approvals and unmarked-artifact allowances
+ *
+ * Both live only in the user-level store, ~/.anypoint-connect/production-approvals.json, outside any
+ * repository, so a branch cannot plant or widen one. Every entry is bound to a resolved organization
+ * ID and environment ID; names are kept for display only and never matched. A `productionPreapproval`
+ * found in a project's .anypoint-connect.json is ignored and reported.
+ *
+ *   {
+ *     "productionPreapprovals": [
+ *       { "orgId": "...", "environmentId": "...", "environmentName": "Production",
+ *         "tools": ["update_app"] | "all-mutating", "expires": "2026-12-31T00:00:00Z", "projectPath": "/abs/repo" }
+ *     ],
+ *     "unmarkedArtifactAllowances": [
+ *       { "orgId": "...", "environmentId": "...", "environmentName": "Production", "expires": "...", "projectPath": "..." }
+ *     ]
+ *   }
+ *
+ * A pre-approval stands in for confirmProduction (MCP) and the typed phrase (CLI). An allowance lets
+ * jars without a build marker go to that environment. Neither waives confirm: true, bound IDs,
+ * digests, or the refusal of a jar marked not production deployable.
+ */
+/** Tools whose production confirmation can be pre-approved. The CLI uses the same names. */
+export declare const PREAPPROVABLE_TOOLS: readonly ["deploy_jar", "deploy_app", "update_app", "update_app_artifact", "rollback_app", "update_app_settings", "restart_app", "scale_app", "stop_app", "start_app", "smoke_test_api", "delete_app", "create_alert", "update_alert", "set_alert_enabled", "delete_alert"];
+export type PreapprovableTool = (typeof PREAPPROVABLE_TOOLS)[number];
+export declare const ALL_MUTATING = "all-mutating";
+/** Tools that "all-mutating" does not cover; they are pre-approved only when named. */
+export declare const NAMED_ONLY_TOOLS: readonly PreapprovableTool[];
+export declare const APPROVALS_FILE_NAME = "production-approvals.json";
+export interface ScopedEntry {
+    orgId: string;
+    environmentId: string;
+    /** Display only; never matched. */
+    environmentName?: string;
+    /** ISO 8601 date-time; the entry is ignored from then on. */
+    expires?: string;
+    /** Absolute project root; when set, the entry applies only to tools run in that project. */
+    projectPath?: string;
+}
+export interface ProductionPreapproval extends ScopedEntry {
+    tools: PreapprovableTool[] | typeof ALL_MUTATING;
+}
+export type UnmarkedArtifactAllowance = ScopedEntry;
+export interface ApprovalStore {
+    productionPreapprovals?: ProductionPreapproval[];
+    unmarkedArtifactAllowances?: UnmarkedArtifactAllowance[];
+}
+/** The user-level store path. */
+export declare function approvalsFile(): string;
+/** Validate one pre-approval entry. Throws with every problem found. */
+export declare function validatePreapproval(input: unknown): ProductionPreapproval;
+/** Validate one unmarked-artifact allowance. Throws with every problem found. */
+export declare function validateUnmarkedAllowance(input: unknown): UnmarkedArtifactAllowance;
+export type EntryView<T> = T & {
+    expired: boolean;
+};
+export interface ApprovalState {
+    source: string;
+    productionPreapprovals: EntryView<ProductionPreapproval>[];
+    unmarkedArtifactAllowances: EntryView<UnmarkedArtifactAllowance>[];
+    /** Entries or files that failed validation; they are ignored. */
+    invalid: string[];
+}
+/** Read and validate the user-level store. */
+export declare function readApprovalState(options?: {
+    now?: number;
+}): ApprovalState;
+/** Store a pre-approval (replacing one with the same scope), or remove it when `entry` is null. */
+export declare function savePreapproval(scope: ScopedEntry, entry: ProductionPreapproval | null): string;
+/** Store an unmarked-artifact allowance (replacing one with the same scope), or remove it. */
+export declare function saveUnmarkedAllowance(scope: ScopedEntry, entry: UnmarkedArtifactAllowance | null): string;
+export interface PolicyTarget {
+    orgId: string;
+    env: {
+        id: string;
+    };
+}
+interface MatchOptions {
+    now?: number;
+    state?: ApprovalState;
+    /** The current project root; resolved only when an entry is project-scoped. */
+    projectRoot?: string;
+}
+export interface PreapprovalDecision {
+    productionPreapproved: boolean;
+    /** Where the matching entry lives, when one matched. */
+    preapprovalSource?: string;
+    preapprovalExpires?: string;
+}
+/** Whether a production write by `tool` to the target org and environment is pre-approved. */
+export declare function checkPreapproval(target: PolicyTarget, tool: string, options?: MatchOptions): PreapprovalDecision;
+export interface UnmarkedDecision {
+    unmarkedAllowed: boolean;
+    source?: string;
+    expires?: string;
+}
+/** Whether jars without a build marker may go to the target org and environment. */
+export declare function checkUnmarkedAllowance(target: PolicyTarget, options?: MatchOptions): UnmarkedDecision;
+/** A warning when the project's .anypoint-connect.json carries an approval, which is never honored. */
+export declare function ignoredProjectApprovalWarning(startDir?: string): string | undefined;
+export {};
+//# sourceMappingURL=preapproval.d.ts.map

package/dist/safety/preapproval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preapproval.d.ts","sourceRoot":"","sources":["../../src/safety/preapproval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,4FAA4F;AAC5F,eAAO,MAAM,mBAAmB,6QAiBtB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAE3C,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,EAAE,SAAS,iBAAiB,EAAmC,CAAC;AAE7F,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAE/D,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACtD,KAAK,EAAE,iBAAiB,EAAE,GAAG,OAAO,YAAY,CAAC;CACpD;AAED,MAAM,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAEpD,MAAM,WAAW,aAAa;IAC1B,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACjD,0BAA0B,CAAC,EAAE,yBAAyB,EAAE,CAAC;CAC5D;AAED,iCAAiC;AACjC,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAwCD,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAmBzE;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAOnF;AAED,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAEpD,MAAM,WAAW,aAAa;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,SAAS,CAAC,qBAAqB,CAAC,EAAE,CAAC;IAC3D,0BAA0B,EAAE,SAAS,CAAC,yBAAyB,CAAC,EAAE,CAAC;IACnE,iEAAiE;IACjE,OAAO,EAAE,MAAM,EAAE,CAAC;CACrB;AAYD,8CAA8C;AAC9C,wBAAgB,iBAAiB,CAAC,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,aAAa,CAuB/E;AAqBD,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI,GAAG,MAAM,CAM/F;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,yBAAyB,GAAG,IAAI,GAAG,MAAM,CAMzG;AAYD,MAAM,WAAW,YAAY;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACvB;AAED,UAAU,YAAY;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAgBD,MAAM,WAAW,mBAAmB;IAChC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,8FAA8F;AAC9F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,mBAAmB,CAUpH;AAED,MAAM,WAAW,gBAAgB;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,GAAE,YAAiB,GAAG,gBAAgB,CASzG;AAED,uGAAuG;AACvG,wBAAgB,6BAA6B,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQnF"}