@sfdxy/anypoint-connect 0.16.3 → 0.18.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (197) hide show
  1. package/README.md +17 -6
  2. package/dist/analysis/audit-actors.d.ts +36 -0
  3. package/dist/analysis/audit-actors.d.ts.map +1 -0
  4. package/dist/analysis/audit-actors.js +93 -0
  5. package/dist/analysis/audit-actors.js.map +1 -0
  6. package/dist/analysis/credentials.d.ts +49 -0
  7. package/dist/analysis/credentials.d.ts.map +1 -0
  8. package/dist/analysis/credentials.js +118 -0
  9. package/dist/analysis/credentials.js.map +1 -0
  10. package/dist/analysis/parser.d.ts +5 -0
  11. package/dist/analysis/parser.d.ts.map +1 -1
  12. package/dist/analysis/parser.js +10 -1
  13. package/dist/analysis/parser.js.map +1 -1
  14. package/dist/api/AlertsApi.d.ts +138 -0
  15. package/dist/api/AlertsApi.d.ts.map +1 -0
  16. package/dist/api/AlertsApi.js +168 -0
  17. package/dist/api/AlertsApi.js.map +1 -0
  18. package/dist/api/LogsApi.d.ts +88 -12
  19. package/dist/api/LogsApi.d.ts.map +1 -1
  20. package/dist/api/LogsApi.js +335 -31
  21. package/dist/api/LogsApi.js.map +1 -1
  22. package/dist/auth/BearerProvider.d.ts +12 -0
  23. package/dist/auth/BearerProvider.d.ts.map +1 -0
  24. package/dist/auth/BearerProvider.js +18 -0
  25. package/dist/auth/BearerProvider.js.map +1 -0
  26. package/dist/auth/ClientCredentialsProvider.d.ts +23 -0
  27. package/dist/auth/ClientCredentialsProvider.d.ts.map +1 -0
  28. package/dist/auth/ClientCredentialsProvider.js +59 -0
  29. package/dist/auth/ClientCredentialsProvider.js.map +1 -0
  30. package/dist/auth/TokenProvider.d.ts +12 -0
  31. package/dist/auth/TokenProvider.d.ts.map +1 -0
  32. package/dist/auth/TokenProvider.js +2 -0
  33. package/dist/auth/TokenProvider.js.map +1 -0
  34. package/dist/auth/index.d.ts +1 -0
  35. package/dist/auth/index.d.ts.map +1 -1
  36. package/dist/cli.js +8 -0
  37. package/dist/cli.js.map +1 -1
  38. package/dist/client/AnypointClient.d.ts +22 -0
  39. package/dist/client/AnypointClient.d.ts.map +1 -1
  40. package/dist/client/AnypointClient.js +82 -12
  41. package/dist/client/AnypointClient.js.map +1 -1
  42. package/dist/client/HttpClient.d.ts +3 -3
  43. package/dist/client/HttpClient.d.ts.map +1 -1
  44. package/dist/client/HttpClient.js +13 -3
  45. package/dist/client/HttpClient.js.map +1 -1
  46. package/dist/commands/alerts.d.ts +16 -0
  47. package/dist/commands/alerts.d.ts.map +1 -0
  48. package/dist/commands/alerts.js +375 -0
  49. package/dist/commands/alerts.js.map +1 -0
  50. package/dist/commands/api.d.ts.map +1 -1
  51. package/dist/commands/api.js +8 -3
  52. package/dist/commands/api.js.map +1 -1
  53. package/dist/commands/app-change-cli.d.ts +5 -2
  54. package/dist/commands/app-change-cli.d.ts.map +1 -1
  55. package/dist/commands/app-change-cli.js +19 -5
  56. package/dist/commands/app-change-cli.js.map +1 -1
  57. package/dist/commands/apps.d.ts.map +1 -1
  58. package/dist/commands/apps.js +69 -22
  59. package/dist/commands/apps.js.map +1 -1
  60. package/dist/commands/auth.d.ts.map +1 -1
  61. package/dist/commands/auth.js +21 -0
  62. package/dist/commands/auth.js.map +1 -1
  63. package/dist/commands/config.d.ts.map +1 -1
  64. package/dist/commands/config.js +20 -1
  65. package/dist/commands/config.js.map +1 -1
  66. package/dist/commands/deploy.d.ts.map +1 -1
  67. package/dist/commands/deploy.js +17 -6
  68. package/dist/commands/deploy.js.map +1 -1
  69. package/dist/commands/index.d.ts +1 -0
  70. package/dist/commands/index.d.ts.map +1 -1
  71. package/dist/commands/index.js +1 -0
  72. package/dist/commands/index.js.map +1 -1
  73. package/dist/commands/logs.d.ts +2 -1
  74. package/dist/commands/logs.d.ts.map +1 -1
  75. package/dist/commands/logs.js +105 -10
  76. package/dist/commands/logs.js.map +1 -1
  77. package/dist/commands/monitor.d.ts.map +1 -1
  78. package/dist/commands/monitor.js +29 -1
  79. package/dist/commands/monitor.js.map +1 -1
  80. package/dist/commands/runtimes.d.ts.map +1 -1
  81. package/dist/commands/runtimes.js +38 -5
  82. package/dist/commands/runtimes.js.map +1 -1
  83. package/dist/commands/shared.d.ts.map +1 -1
  84. package/dist/commands/shared.js +1 -7
  85. package/dist/commands/shared.js.map +1 -1
  86. package/dist/config/auth-modes.d.ts +11 -0
  87. package/dist/config/auth-modes.d.ts.map +1 -0
  88. package/dist/config/auth-modes.js +18 -0
  89. package/dist/config/auth-modes.js.map +1 -0
  90. package/dist/config/profiles.d.ts +19 -2
  91. package/dist/config/profiles.d.ts.map +1 -1
  92. package/dist/config/profiles.js +68 -24
  93. package/dist/config/profiles.js.map +1 -1
  94. package/dist/index.d.ts +12 -1
  95. package/dist/index.d.ts.map +1 -1
  96. package/dist/index.js +10 -0
  97. package/dist/index.js.map +1 -1
  98. package/dist/mcp/server.d.ts.map +1 -1
  99. package/dist/mcp/server.js +4 -9
  100. package/dist/mcp/server.js.map +1 -1
  101. package/dist/mcp/tools/alerts.d.ts +82 -0
  102. package/dist/mcp/tools/alerts.d.ts.map +1 -0
  103. package/dist/mcp/tools/alerts.js +423 -0
  104. package/dist/mcp/tools/alerts.js.map +1 -0
  105. package/dist/mcp/tools/api-manager.d.ts.map +1 -1
  106. package/dist/mcp/tools/api-manager.js +6 -1
  107. package/dist/mcp/tools/api-manager.js.map +1 -1
  108. package/dist/mcp/tools/app-inputs.d.ts +20 -2
  109. package/dist/mcp/tools/app-inputs.d.ts.map +1 -1
  110. package/dist/mcp/tools/app-inputs.js +40 -2
  111. package/dist/mcp/tools/app-inputs.js.map +1 -1
  112. package/dist/mcp/tools/apps-deploy.d.ts.map +1 -1
  113. package/dist/mcp/tools/apps-deploy.js +65 -13
  114. package/dist/mcp/tools/apps-deploy.js.map +1 -1
  115. package/dist/mcp/tools/apps-lifecycle.d.ts.map +1 -1
  116. package/dist/mcp/tools/apps-lifecycle.js +37 -15
  117. package/dist/mcp/tools/apps-lifecycle.js.map +1 -1
  118. package/dist/mcp/tools/apps-read.d.ts.map +1 -1
  119. package/dist/mcp/tools/apps-read.js +11 -5
  120. package/dist/mcp/tools/apps-read.js.map +1 -1
  121. package/dist/mcp/tools/audit.d.ts.map +1 -1
  122. package/dist/mcp/tools/audit.js +17 -4
  123. package/dist/mcp/tools/audit.js.map +1 -1
  124. package/dist/mcp/tools/exchange.d.ts.map +1 -1
  125. package/dist/mcp/tools/exchange.js +38 -18
  126. package/dist/mcp/tools/exchange.js.map +1 -1
  127. package/dist/mcp/tools/identity.d.ts.map +1 -1
  128. package/dist/mcp/tools/identity.js +29 -2
  129. package/dist/mcp/tools/identity.js.map +1 -1
  130. package/dist/mcp/tools/index.d.ts +1 -0
  131. package/dist/mcp/tools/index.d.ts.map +1 -1
  132. package/dist/mcp/tools/index.js +1 -0
  133. package/dist/mcp/tools/index.js.map +1 -1
  134. package/dist/mcp/tools/logs.d.ts +1 -1
  135. package/dist/mcp/tools/logs.d.ts.map +1 -1
  136. package/dist/mcp/tools/logs.js +34 -1
  137. package/dist/mcp/tools/logs.js.map +1 -1
  138. package/dist/mcp/tools/monitoring.d.ts.map +1 -1
  139. package/dist/mcp/tools/monitoring.js +5 -3
  140. package/dist/mcp/tools/monitoring.js.map +1 -1
  141. package/dist/mcp/tools/output-schemas.d.ts +83 -0
  142. package/dist/mcp/tools/output-schemas.d.ts.map +1 -0
  143. package/dist/mcp/tools/output-schemas.js +81 -0
  144. package/dist/mcp/tools/output-schemas.js.map +1 -0
  145. package/dist/mcp/tools/profile.d.ts +17 -3
  146. package/dist/mcp/tools/profile.d.ts.map +1 -1
  147. package/dist/mcp/tools/profile.js +122 -10
  148. package/dist/mcp/tools/profile.js.map +1 -1
  149. package/dist/mcp/tools/shared.d.ts +34 -2
  150. package/dist/mcp/tools/shared.d.ts.map +1 -1
  151. package/dist/mcp/tools/shared.js +37 -4
  152. package/dist/mcp/tools/shared.js.map +1 -1
  153. package/dist/safety/artifact.d.ts +45 -0
  154. package/dist/safety/artifact.d.ts.map +1 -1
  155. package/dist/safety/artifact.js +109 -0
  156. package/dist/safety/artifact.js.map +1 -1
  157. package/dist/safety/guards.d.ts +10 -0
  158. package/dist/safety/guards.d.ts.map +1 -1
  159. package/dist/safety/guards.js +16 -0
  160. package/dist/safety/guards.js.map +1 -1
  161. package/dist/safety/plan-binding.d.ts +21 -0
  162. package/dist/safety/plan-binding.d.ts.map +1 -0
  163. package/dist/safety/plan-binding.js +61 -0
  164. package/dist/safety/plan-binding.js.map +1 -0
  165. package/dist/safety/preapproval.d.ts +102 -0
  166. package/dist/safety/preapproval.d.ts.map +1 -0
  167. package/dist/safety/preapproval.js +251 -0
  168. package/dist/safety/preapproval.js.map +1 -0
  169. package/dist/safety/secrets.d.ts +7 -0
  170. package/dist/safety/secrets.d.ts.map +1 -1
  171. package/dist/safety/secrets.js +16 -0
  172. package/dist/safety/secrets.js.map +1 -1
  173. package/dist/utils/formatter.d.ts +2 -0
  174. package/dist/utils/formatter.d.ts.map +1 -1
  175. package/dist/utils/formatter.js +4 -0
  176. package/dist/utils/formatter.js.map +1 -1
  177. package/dist/utils/logger.d.ts +2 -0
  178. package/dist/utils/logger.d.ts.map +1 -1
  179. package/dist/utils/logger.js +23 -13
  180. package/dist/utils/logger.js.map +1 -1
  181. package/dist/workflows/alerts.d.ts +309 -0
  182. package/dist/workflows/alerts.d.ts.map +1 -0
  183. package/dist/workflows/alerts.js +631 -0
  184. package/dist/workflows/alerts.js.map +1 -0
  185. package/dist/workflows/app-change.d.ts +32 -1
  186. package/dist/workflows/app-change.d.ts.map +1 -1
  187. package/dist/workflows/app-change.js +57 -2
  188. package/dist/workflows/app-change.js.map +1 -1
  189. package/dist/workflows/artifact-verification.d.ts +52 -0
  190. package/dist/workflows/artifact-verification.d.ts.map +1 -0
  191. package/dist/workflows/artifact-verification.js +85 -0
  192. package/dist/workflows/artifact-verification.js.map +1 -0
  193. package/dist/workflows/jar-deployment.d.ts +37 -10
  194. package/dist/workflows/jar-deployment.d.ts.map +1 -1
  195. package/dist/workflows/jar-deployment.js +44 -13
  196. package/dist/workflows/jar-deployment.js.map +1 -1
  197. package/package.json +1 -1
@@ -0,0 +1,251 @@
1
+ /**
2
+ * Production policy: pre-approvals and unmarked-artifact allowances
3
+ *
4
+ * Both live only in the user-level store, ~/.anypoint-connect/production-approvals.json, outside any
5
+ * repository, so a branch cannot plant or widen one. Every entry is bound to a resolved organization
6
+ * ID and environment ID; names are kept for display only and never matched. A `productionPreapproval`
7
+ * found in a project's .anypoint-connect.json is ignored and reported.
8
+ *
9
+ * {
10
+ * "productionPreapprovals": [
11
+ * { "orgId": "...", "environmentId": "...", "environmentName": "Production",
12
+ * "tools": ["update_app"] | "all-mutating", "expires": "2026-12-31T00:00:00Z", "projectPath": "/abs/repo" }
13
+ * ],
14
+ * "unmarkedArtifactAllowances": [
15
+ * { "orgId": "...", "environmentId": "...", "environmentName": "Production", "expires": "...", "projectPath": "..." }
16
+ * ]
17
+ * }
18
+ *
19
+ * A pre-approval stands in for confirmProduction (MCP) and the typed phrase (CLI). An allowance lets
20
+ * jars without a build marker go to that environment. Neither waives confirm: true, bound IDs,
21
+ * digests, or the refusal of a jar marked not production deployable.
22
+ */
23
+ import * as fs from 'node:fs';
24
+ import * as path from 'node:path';
25
+ import { discoverProjectConfig, findProjectConfigFile, getConfigDir } from '../config/profiles.js';
26
+ import { resolveProjectRoot } from './paths.js';
27
+ /** Tools whose production confirmation can be pre-approved. The CLI uses the same names. */
28
+ export const PREAPPROVABLE_TOOLS = [
29
+ 'deploy_jar',
30
+ 'deploy_app',
31
+ 'update_app',
32
+ 'update_app_artifact',
33
+ 'rollback_app',
34
+ 'update_app_settings',
35
+ 'restart_app',
36
+ 'scale_app',
37
+ 'stop_app',
38
+ 'start_app',
39
+ 'smoke_test_api',
40
+ 'delete_app',
41
+ 'create_alert',
42
+ 'update_alert',
43
+ 'set_alert_enabled',
44
+ 'delete_alert',
45
+ ];
46
+ export const ALL_MUTATING = 'all-mutating';
47
+ /** Tools that "all-mutating" does not cover; they are pre-approved only when named. */
48
+ export const NAMED_ONLY_TOOLS = ['delete_app', 'delete_alert'];
49
+ export const APPROVALS_FILE_NAME = 'production-approvals.json';
50
+ /** The user-level store path. */
51
+ export function approvalsFile() {
52
+ return path.join(getConfigDir(), APPROVALS_FILE_NAME);
53
+ }
54
+ function validateScope(input, errors) {
55
+ const { orgId, environmentId, environmentName, expires, projectPath } = input;
56
+ for (const [name, value] of [
57
+ ['orgId', orgId],
58
+ ['environmentId', environmentId],
59
+ ]) {
60
+ if (typeof value !== 'string' || !value.trim())
61
+ errors.push(`${name} must be a non-empty ID`);
62
+ else if (/[*?]/.test(value))
63
+ errors.push(`${name}: wildcards are not allowed`);
64
+ }
65
+ if (environmentName !== undefined && typeof environmentName !== 'string')
66
+ errors.push('environmentName must be a string');
67
+ if (expires !== undefined && (typeof expires !== 'string' || Number.isNaN(Date.parse(expires)))) {
68
+ errors.push('expires must be an ISO 8601 date-time');
69
+ }
70
+ if (projectPath !== undefined && (typeof projectPath !== 'string' || !path.isAbsolute(projectPath))) {
71
+ errors.push('projectPath must be an absolute path');
72
+ }
73
+ return {
74
+ orgId: orgId,
75
+ environmentId: environmentId,
76
+ ...(environmentName !== undefined ? { environmentName: environmentName } : {}),
77
+ ...(expires !== undefined ? { expires: expires } : {}),
78
+ ...(projectPath !== undefined ? { projectPath: projectPath } : {}),
79
+ };
80
+ }
81
+ function asObject(input, what) {
82
+ if (!input || typeof input !== 'object' || Array.isArray(input))
83
+ throw new Error(`${what} must be an object`);
84
+ return input;
85
+ }
86
+ function rejectUnknown(input, allowed, errors) {
87
+ const unknown = Object.keys(input).filter((key) => !allowed.includes(key));
88
+ if (unknown.length)
89
+ errors.push(`unknown fields: ${unknown.join(', ')}`);
90
+ }
91
+ const SCOPE_FIELDS = ['orgId', 'environmentId', 'environmentName', 'expires', 'projectPath'];
92
+ /** Validate one pre-approval entry. Throws with every problem found. */
93
+ export function validatePreapproval(input) {
94
+ const object = asObject(input, 'A production pre-approval');
95
+ const errors = [];
96
+ rejectUnknown(object, [...SCOPE_FIELDS, 'tools'], errors);
97
+ const scope = validateScope(object, errors);
98
+ const { tools } = object;
99
+ if (tools !== ALL_MUTATING) {
100
+ if (!Array.isArray(tools) || tools.length === 0) {
101
+ errors.push(`tools must be "${ALL_MUTATING}" or a non-empty list of tool names`);
102
+ }
103
+ else {
104
+ for (const tool of tools) {
105
+ if (!PREAPPROVABLE_TOOLS.includes(tool)) {
106
+ errors.push(`"${String(tool)}" is not a pre-approvable tool (${PREAPPROVABLE_TOOLS.join(', ')})`);
107
+ }
108
+ }
109
+ }
110
+ }
111
+ if (errors.length)
112
+ throw new Error(`Invalid production pre-approval:\n- ${errors.join('\n- ')}`);
113
+ return { ...scope, tools: tools === ALL_MUTATING ? ALL_MUTATING : [...new Set(tools)] };
114
+ }
115
+ /** Validate one unmarked-artifact allowance. Throws with every problem found. */
116
+ export function validateUnmarkedAllowance(input) {
117
+ const object = asObject(input, 'An unmarked-artifact allowance');
118
+ const errors = [];
119
+ rejectUnknown(object, SCOPE_FIELDS, errors);
120
+ const scope = validateScope(object, errors);
121
+ if (errors.length)
122
+ throw new Error(`Invalid unmarked-artifact allowance:\n- ${errors.join('\n- ')}`);
123
+ return scope;
124
+ }
125
+ function readRawStore(file) {
126
+ if (!fs.existsSync(file))
127
+ return { store: {}, invalid: [] };
128
+ try {
129
+ const parsed = JSON.parse(fs.readFileSync(file, 'utf8'));
130
+ return { store: asObject(parsed, file), invalid: [] };
131
+ }
132
+ catch (error) {
133
+ return { store: {}, invalid: [`${file} is unreadable: ${error.message}`] };
134
+ }
135
+ }
136
+ /** Read and validate the user-level store. */
137
+ export function readApprovalState(options = {}) {
138
+ const source = approvalsFile();
139
+ const { store, invalid } = readRawStore(source);
140
+ const now = options.now ?? Date.now();
141
+ const expired = (expires) => expires !== undefined && Date.parse(expires) <= now;
142
+ const state = { source, productionPreapprovals: [], unmarkedArtifactAllowances: [], invalid };
143
+ for (const item of Array.isArray(store.productionPreapprovals) ? store.productionPreapprovals : []) {
144
+ try {
145
+ const entry = validatePreapproval(item);
146
+ state.productionPreapprovals.push({ ...entry, expired: expired(entry.expires) });
147
+ }
148
+ catch (error) {
149
+ state.invalid.push(error.message);
150
+ }
151
+ }
152
+ for (const item of Array.isArray(store.unmarkedArtifactAllowances) ? store.unmarkedArtifactAllowances : []) {
153
+ try {
154
+ const entry = validateUnmarkedAllowance(item);
155
+ state.unmarkedArtifactAllowances.push({ ...entry, expired: expired(entry.expires) });
156
+ }
157
+ catch (error) {
158
+ state.invalid.push(error.message);
159
+ }
160
+ }
161
+ return state;
162
+ }
163
+ function sameScope(a, b) {
164
+ return a.orgId === b.orgId && a.environmentId === b.environmentId && a.projectPath === b.projectPath;
165
+ }
166
+ /** Replace (or, with `entry` null, remove) the entry with the same org, environment and project. */
167
+ function upsert(list, scope, entry) {
168
+ const rest = (list ?? []).filter((item) => !sameScope(item, scope));
169
+ return entry ? [...rest, entry] : rest;
170
+ }
171
+ function writeStore(update) {
172
+ const file = approvalsFile();
173
+ const { store, invalid } = readRawStore(file);
174
+ if (invalid.length)
175
+ throw new Error(`${invalid[0]}; fix or remove it first`);
176
+ fs.writeFileSync(file, JSON.stringify(update(store), null, 2) + '\n', { mode: 0o600 });
177
+ fs.chmodSync(file, 0o600);
178
+ return file;
179
+ }
180
+ /** Store a pre-approval (replacing one with the same scope), or remove it when `entry` is null. */
181
+ export function savePreapproval(scope, entry) {
182
+ const valid = entry ? validatePreapproval(entry) : null;
183
+ return writeStore((store) => ({
184
+ ...store,
185
+ productionPreapprovals: upsert(store.productionPreapprovals, scope, valid),
186
+ }));
187
+ }
188
+ /** Store an unmarked-artifact allowance (replacing one with the same scope), or remove it. */
189
+ export function saveUnmarkedAllowance(scope, entry) {
190
+ const valid = entry ? validateUnmarkedAllowance(entry) : null;
191
+ return writeStore((store) => ({
192
+ ...store,
193
+ unmarkedArtifactAllowances: upsert(store.unmarkedArtifactAllowances, scope, valid),
194
+ }));
195
+ }
196
+ function coversTool(entry, tool) {
197
+ if (entry.tools === ALL_MUTATING) {
198
+ return (PREAPPROVABLE_TOOLS.includes(tool) &&
199
+ !NAMED_ONLY_TOOLS.includes(tool));
200
+ }
201
+ return entry.tools.includes(tool);
202
+ }
203
+ function matcher(target, options) {
204
+ let root = options.projectRoot;
205
+ const projectMatches = (projectPath) => {
206
+ if (!projectPath)
207
+ return true;
208
+ root ??= resolveProjectRoot();
209
+ return path.resolve(projectPath) === path.resolve(root);
210
+ };
211
+ return (entry) => !entry.expired &&
212
+ entry.orgId === target.orgId &&
213
+ entry.environmentId === target.env.id &&
214
+ projectMatches(entry.projectPath);
215
+ }
216
+ /** Whether a production write by `tool` to the target org and environment is pre-approved. */
217
+ export function checkPreapproval(target, tool, options = {}) {
218
+ const state = options.state ?? readApprovalState(options);
219
+ const inScope = matcher(target, options);
220
+ const match = state.productionPreapprovals.find((e) => inScope(e) && coversTool(e, tool));
221
+ if (!match)
222
+ return { productionPreapproved: false };
223
+ return {
224
+ productionPreapproved: true,
225
+ preapprovalSource: `${state.source} productionPreapprovals`,
226
+ ...(match.expires ? { preapprovalExpires: match.expires } : {}),
227
+ };
228
+ }
229
+ /** Whether jars without a build marker may go to the target org and environment. */
230
+ export function checkUnmarkedAllowance(target, options = {}) {
231
+ const state = options.state ?? readApprovalState(options);
232
+ const match = state.unmarkedArtifactAllowances.find(matcher(target, options));
233
+ if (!match)
234
+ return { unmarkedAllowed: false };
235
+ return {
236
+ unmarkedAllowed: true,
237
+ source: `${state.source} unmarkedArtifactAllowances`,
238
+ ...(match.expires ? { expires: match.expires } : {}),
239
+ };
240
+ }
241
+ /** A warning when the project's .anypoint-connect.json carries an approval, which is never honored. */
242
+ export function ignoredProjectApprovalWarning(startDir) {
243
+ const config = discoverProjectConfig(startDir);
244
+ if (!config)
245
+ return undefined;
246
+ const keys = ['productionPreapproval', 'productionPreapprovals', 'unmarkedArtifactAllowances'].filter((key) => config[key] !== undefined);
247
+ if (!keys.length)
248
+ return undefined;
249
+ return `${findProjectConfigFile(startDir)} contains ${keys.join(', ')}, which is ignored: production approvals are read only from ${approvalsFile()}`;
250
+ }
251
+ //# sourceMappingURL=preapproval.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"preapproval.js","sourceRoot":"","sources":["../../src/safety/preapproval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAC/B,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,qBAAqB;IACrB,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,WAAW;IACX,UAAU;IACV,WAAW;IACX,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,cAAc;CACR,CAAC;AAGX,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAE3C,uFAAuF;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAiC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAE7F,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAwB/D,iCAAiC;AACjC,MAAM,UAAU,aAAa;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,mBAAmB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B,EAAE,MAAgB;IACnE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QACxB,CAAC,OAAO,EAAE,KAAK,CAAC;QAChB,CAAC,eAAe,EAAE,aAAa,CAAC;KAC1B,EAAE,CAAC;QACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;aACzF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,IAAI,OAAO,eAAe,KAAK,QAAQ;QACpE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO;QACH,KAAK,EAAE,KAAe;QACtB,aAAa,EAAE,aAAuB;QACtC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,eAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACN,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAC9G,OAAO,KAAgC,CAAC;AAC5C,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B,EAAE,OAAiB,EAAE,MAAgB;IACtF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAE7F,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,aAAa,CAAC,MAAM,EAAE,CAAC,GAAG,YAAY,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,kBAAkB,YAAY,qCAAqC,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAyB,CAAC,EAAE,CAAC;oBAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,mCAAmC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtG,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjG,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAA4B,CAAC,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC;AACjB,CAAC;AAYD,SAAS,YAAY,CAAC,IAAY;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5D,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,mBAAoB,KAAe,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IAC1F,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,iBAAiB,CAAC,UAA4B,EAAE;IAC5D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;IAC1F,MAAM,KAAK,GAAkB,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,EAAE,0BAA0B,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IAC7G,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjG,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACxC,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzG,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAC9C,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,CAAc,EAAE,CAAc;IAC7C,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC;AACzG,CAAC;AAED,oGAAoG;AACpG,SAAS,MAAM,CAAwB,IAAqB,EAAE,KAAkB,EAAE,KAAe;IAC7F,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,MAA+C;IAC/D,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAC7E,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAAC,KAAkB,EAAE,KAAmC;IACnF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,OAAO,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,KAAK;QACR,sBAAsB,EAAE,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,EAAE,KAAK,CAAC;KAC7E,CAAC,CAAC,CAAC;AACR,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,KAAuC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,OAAO,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,KAAK;QACR,0BAA0B,EAAE,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,EAAE,KAAK,CAAC;KACrF,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,UAAU,CAAC,KAA4B,EAAE,IAAY;IAC1D,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,CACH,mBAAmB,CAAC,QAAQ,CAAC,IAAyB,CAAC;YACvD,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAyB,CAAC,CACxD,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAyB,CAAC,CAAC;AAC3D,CAAC;AAcD,SAAS,OAAO,CAAC,MAAoB,EAAE,OAAqB;IACxD,IAAI,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAC/B,MAAM,cAAc,GAAG,CAAC,WAAoB,EAAE,EAAE;QAC5C,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,OAAO,CAAC,KAA6B,EAAE,EAAE,CACrC,CAAC,KAAK,CAAC,OAAO;QACd,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;QAC5B,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE;QACrC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AASD,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,IAAY,EAAE,UAAwB,EAAE;IAC3F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO;QACH,qBAAqB,EAAE,IAAI;QAC3B,iBAAiB,EAAE,GAAG,KAAK,CAAC,MAAM,yBAAyB;QAC3D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACN,CAAC;AAQD,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,MAAoB,EAAE,UAAwB,EAAE;IACnF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC9C,OAAO;QACH,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,6BAA6B;QACpD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;AACN,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,6BAA6B,CAAC,QAAiB;IAC3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAmC,CAAC;IACjF,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,4BAA4B,CAAC,CAAC,MAAM,CACjG,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CACrC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D,aAAa,EAAE,EAAE,CAAC;AAC1J,CAAC"}
@@ -29,4 +29,11 @@ export declare function redactDeep(value: unknown, depth?: number): unknown;
29
29
  * characters are skipped because they would match ordinary text.
30
30
  */
31
31
  export declare function redactText(text: string, knownSecrets: Iterable<string>): string;
32
+ /**
33
+ * Sanitize free text a platform echoed back (an error message), when its secrets are not known in
34
+ * advance: email addresses keep only their domain, and credential-looking values are masked (JWTs,
35
+ * bearer tokens, Salesforce session IDs, `secret=value` pairs, and long opaque strings). UUIDs, which
36
+ * identify resources, are kept.
37
+ */
38
+ export declare function sanitizePlatformText(text: string): string;
32
39
  //# sourceMappingURL=secrets.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/safety/secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,MAAM,WAAW,CAAC;AAuB/B;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAWhD;AAED,sGAAsG;AACtG,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAO,GAO7F,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAC9B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAY7D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAM/E"}
1
+ {"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/safety/secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,MAAM,WAAW,CAAC;AAuB/B;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAWhD;AAED,sGAAsG;AACtG,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAO,GAO7F,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAC9B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAY7D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAM/E;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWzD"}
@@ -88,4 +88,20 @@ export function redactText(text, knownSecrets) {
88
88
  result = result.split(value).join(MASKED);
89
89
  return result;
90
90
  }
91
+ const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
92
+ /**
93
+ * Sanitize free text a platform echoed back (an error message), when its secrets are not known in
94
+ * advance: email addresses keep only their domain, and credential-looking values are masked (JWTs,
95
+ * bearer tokens, Salesforce session IDs, `secret=value` pairs, and long opaque strings). UUIDs, which
96
+ * identify resources, are kept.
97
+ */
98
+ export function sanitizePlatformText(text) {
99
+ return text
100
+ .replace(/[A-Za-z0-9._%+-]+@([A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+)/g, '***@$1')
101
+ .replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]*/g, MASKED)
102
+ .replace(/\b(bearer)\s+[A-Za-z0-9._~+/=-]+/gi, `$1 ${MASKED}`)
103
+ .replace(/\b00D[A-Za-z0-9]{12,15}![A-Za-z0-9._]+/g, MASKED)
104
+ .replace(/\b((?:password|passwd|secret|token|api[_-]?key|access[_-]?key|client[_-]?secret|credential)s?["']?\s*[:=]\s*["']?)[^\s"',;&]+/gi, `$1${MASKED}`)
105
+ .replace(/[A-Za-z0-9+/_=-]{32,}/g, (match) => (UUID.test(match) ? match : MASKED));
106
+ }
91
107
  //# sourceMappingURL=secrets.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/safety/secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AAE/B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC5B,UAAU;IACV,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,cAAc;CACjB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG;IACjB,CAAC,SAAS,EAAE,KAAK,CAAC;IAClB,CAAC,KAAK,EAAE,KAAK,CAAC;IACd,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,QAAQ,EAAE,KAAK,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACnC,MAAM,QAAQ,GAAG,GAAG;SACf,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,WAAW,EAAE;SACb,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/F,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,WAAW,CAAC,KAAa;IACrC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAA8B,EAAE,UAAuC,EAAE;IAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACzC,GAAG;QACH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;KAC3E,CAAC,CACqB,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAChD,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YAClE,GAAG;YACH,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;SACjG,CAAC,CACL,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,YAA8B;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC5F,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAClB,CAAC"}
1
+ {"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/safety/secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AAE/B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC5B,UAAU;IACV,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,cAAc;CACjB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG;IACjB,CAAC,SAAS,EAAE,KAAK,CAAC;IAClB,CAAC,KAAK,EAAE,KAAK,CAAC;IACd,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,QAAQ,EAAE,KAAK,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACnC,MAAM,QAAQ,GAAG,GAAG;SACf,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,WAAW,EAAE;SACb,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/F,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,WAAW,CAAC,KAAa;IACrC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAA8B,EAAE,UAAuC,EAAE;IAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACzC,GAAG;QACH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;KAC3E,CAAC,CACqB,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAChD,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YAClE,GAAG;YACH,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;SACjG,CAAC,CACL,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,YAA8B;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC5F,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC7C,OAAO,IAAI;SACN,OAAO,CAAC,wDAAwD,EAAE,QAAQ,CAAC;SAC3E,OAAO,CAAC,sDAAsD,EAAE,MAAM,CAAC;SACvE,OAAO,CAAC,oCAAoC,EAAE,MAAM,MAAM,EAAE,CAAC;SAC7D,OAAO,CAAC,yCAAyC,EAAE,MAAM,CAAC;SAC1D,OAAO,CACJ,iIAAiI,EACjI,KAAK,MAAM,EAAE,CAChB;SACA,OAAO,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3F,CAAC"}
@@ -2,6 +2,8 @@
2
2
  * Formatter utility
3
3
  * Table and JSON output for CLI
4
4
  */
5
+ /** Print a machine-readable result: one JSON value on stdout. */
6
+ export declare function printJson(value: unknown): void;
5
7
  /**
6
8
  * Print data as an aligned table
7
9
  */
@@ -1 +1 @@
1
- {"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../../src/utils/formatter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAgBpE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAQ/D;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAI3C;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD"}
1
+ {"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../../src/utils/formatter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,iEAAiE;AACjE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE9C;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAgBpE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAQ/D;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAI3C;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD"}
@@ -3,6 +3,10 @@
3
3
  * Table and JSON output for CLI
4
4
  */
5
5
  import chalk from 'chalk';
6
+ /** Print a machine-readable result: one JSON value on stdout. */
7
+ export function printJson(value) {
8
+ console.log(JSON.stringify(value, null, 2));
9
+ }
6
10
  /**
7
11
  * Print data as an aligned table
8
12
  */
@@ -1 +1 @@
1
- {"version":3,"file":"formatter.js","sourceRoot":"","sources":["../../src/utils/formatter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAiB,EAAE,IAAgB;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,SAAS;IACT,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO;IACP,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAA4B;IACnD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE;QAC7B,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;KACpB,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAU;IAC/B,IAAI,EAAE,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACrC,IAAI,KAAK,IAAI,UAAU;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACxE,IAAI,KAAK,IAAI,OAAO;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,OAAO,GAAG,KAAK,IAAI,CAAC;AACxB,CAAC"}
1
+ {"version":3,"file":"formatter.js","sourceRoot":"","sources":["../../src/utils/formatter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,KAAc;IACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAiB,EAAE,IAAgB;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,SAAS;IACT,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO;IACP,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAA4B;IACnD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE;QAC7B,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;KACpB,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAU;IAC/B,IAAI,EAAE,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACrC,IAAI,KAAK,IAAI,UAAU;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACxE,IAAI,KAAK,IAAI,OAAO;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,OAAO,GAAG,KAAK,IAAI,CAAC;AACxB,CAAC"}
@@ -3,6 +3,8 @@
3
3
  * Chalk-based colored console output
4
4
  */
5
5
  export declare const log: {
6
+ /** Send informational output to stderr, leaving stdout for machine-readable results. */
7
+ toStderr: () => void;
6
8
  info: (msg: string) => void;
7
9
  success: (msg: string) => void;
8
10
  warn: (msg: string) => void;
@@ -1 +1 @@
1
- {"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,eAAO,MAAM,GAAG;gBACA,MAAM;mBACH,MAAM;gBACT,MAAM;iBACL,MAAM;eACR,MAAM;gBACL,MAAM;qBAGD,MAAM,WAAW,MAAM,cAAc,MAAM;oBAoB5C,MAAM;cAOZ,MAAM,SAAS,MAAM,GAAG,MAAM,GAAG,OAAO;CAGrD,CAAC"}
1
+ {"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,eAAO,MAAM,GAAG;IACZ,wFAAwF;;gBAK5E,MAAM;mBACH,MAAM;gBACT,MAAM;iBACL,MAAM;eACR,MAAM;gBACL,MAAM;qBAGD,MAAM,WAAW,MAAM,cAAc,MAAM;oBAoB5C,MAAM;cAOZ,MAAM,SAAS,MAAM,GAAG,MAAM,GAAG,OAAO;CAGrD,CAAC"}
@@ -3,41 +3,51 @@
3
3
  * Chalk-based colored console output
4
4
  */
5
5
  import chalk from 'chalk';
6
+ /**
7
+ * Where informational output goes. Standard output normally; standard error under `--json`, so a
8
+ * command's stdout carries only its result and parses as one JSON value.
9
+ */
10
+ let infoToStderr = false;
11
+ const info = (...args) => (infoToStderr ? console.error : console.log)(...args);
6
12
  export const log = {
7
- info: (msg) => console.log(chalk.blue('ℹ'), msg),
8
- success: (msg) => console.log(chalk.green('✔'), msg),
9
- warn: (msg) => console.log(chalk.yellow('⚠'), msg),
13
+ /** Send informational output to stderr, leaving stdout for machine-readable results. */
14
+ toStderr: () => {
15
+ infoToStderr = true;
16
+ },
17
+ info: (msg) => info(chalk.blue('ℹ'), msg),
18
+ success: (msg) => info(chalk.green('✔'), msg),
19
+ warn: (msg) => info(chalk.yellow('⚠'), msg),
10
20
  error: (msg) => console.error(chalk.red('✖'), msg),
11
- dim: (msg) => console.log(chalk.dim(msg)),
12
- bold: (msg) => console.log(chalk.bold(msg)),
21
+ dim: (msg) => info(chalk.dim(msg)),
22
+ bold: (msg) => info(chalk.bold(msg)),
13
23
  // Log levels for log tailing
14
24
  logLine: (level, message, timestamp) => {
15
25
  const ts = timestamp ? chalk.dim(`[${timestamp}] `) : '';
16
26
  switch (level.toUpperCase()) {
17
27
  case 'ERROR':
18
- console.log(`${ts}${chalk.red.bold('ERROR')} ${message}`);
28
+ info(`${ts}${chalk.red.bold('ERROR')} ${message}`);
19
29
  break;
20
30
  case 'WARN':
21
31
  case 'WARNING':
22
- console.log(`${ts}${chalk.yellow('WARN ')} ${message}`);
32
+ info(`${ts}${chalk.yellow('WARN ')} ${message}`);
23
33
  break;
24
34
  case 'DEBUG':
25
- console.log(`${ts}${chalk.dim('DEBUG')} ${chalk.dim(message)}`);
35
+ info(`${ts}${chalk.dim('DEBUG')} ${chalk.dim(message)}`);
26
36
  break;
27
37
  default:
28
- console.log(`${ts}${chalk.cyan('INFO ')} ${message}`);
38
+ info(`${ts}${chalk.cyan('INFO ')} ${message}`);
29
39
  break;
30
40
  }
31
41
  },
32
42
  // Section header
33
43
  header: (title) => {
34
- console.log();
35
- console.log(chalk.bold.underline(title));
36
- console.log();
44
+ info();
45
+ info(chalk.bold.underline(title));
46
+ info();
37
47
  },
38
48
  // Key-value pair
39
49
  kv: (key, value) => {
40
- console.log(` ${chalk.dim(key + ':')} ${value}`);
50
+ info(` ${chalk.dim(key + ':')} ${value}`);
41
51
  },
42
52
  };
43
53
  //# sourceMappingURL=logger.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,CAAC,MAAM,GAAG,GAAG;IACf,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACxD,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAC5D,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAC1D,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAC1D,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEnD,6BAA6B;IAC7B,OAAO,EAAE,CAAC,KAAa,EAAE,OAAe,EAAE,SAAkB,EAAE,EAAE;QAC5D,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,KAAK,OAAO;gBACR,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC1D,MAAM;YACV,KAAK,MAAM,CAAC;YACZ,KAAK,SAAS;gBACV,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;gBACxD,MAAM;YACV,KAAK,OAAO;gBACR,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChE,MAAM;YACV;gBACI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;gBACtD,MAAM;QACd,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACtB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,EAAE,EAAE,CAAC,GAAW,EAAE,KAAgC,EAAE,EAAE;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;CACJ,CAAC"}
1
+ {"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;;GAGG;AACH,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAE3F,MAAM,CAAC,MAAM,GAAG,GAAG;IACf,wFAAwF;IACxF,QAAQ,EAAE,GAAG,EAAE;QACX,YAAY,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACjD,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACrD,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACnD,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAC1D,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,6BAA6B;IAC7B,OAAO,EAAE,CAAC,KAAa,EAAE,OAAe,EAAE,SAAkB,EAAE,EAAE;QAC5D,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,KAAK,OAAO;gBACR,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;gBACnD,MAAM;YACV,KAAK,MAAM,CAAC;YACZ,KAAK,SAAS;gBACV,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;gBACjD,MAAM;YACV,KAAK,OAAO;gBACR,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACzD,MAAM;YACV;gBACI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC/C,MAAM;QACd,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACtB,IAAI,EAAE,CAAC;QACP,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC;IACX,CAAC;IAED,iBAAiB;IACjB,EAAE,EAAE,CAAC,GAAW,EAAE,KAAgC,EAAE,EAAE;QAClD,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;CACJ,CAAC"}