For whole-file actions, the default method is file, which transforms all property values in the file. Set muleSecureProperties.fileMethod to file-level only when you want the tool to transform the entire file content as one encrypted payload.
Behavior
The JAR path is saved automatically to VS Code workspace settings.
Secure key profile names are saved in settings, but key values are stored in VS Code SecretStorage, not plaintext settings.json.
You can add/delete secure key profiles such as dev, qa, prod, uat, or stage.
Encrypt actions wrap returned values as ![...].
Decrypt actions unwrap ![...] before sending values to the CLI.
Apply changes only after preview. The source editor is updated but not automatically saved.