@appstrate/validation 1.1.0 → 1.2.0

package/package.json

@@ -1,8 +1,10 @@
 {
   "name": "@appstrate/validation",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "type": "module",
-  "files": ["src"],
+  "files": [
+    "src"
+  ],
   "exports": {
     ".": "./src/index.ts",
     "./zip": "./src/zip.ts",

package/src/index.ts

@@ -26,13 +26,14 @@ export const jsonSchemaObjectSchema = z.object({
   propertyOrder: z.array(z.string()).optional(),
 });
 
-export const serviceRequirementSchema = z.object({
+export const serviceRequirementSchema = z.looseObject({
   id: z.string().min(1).regex(SLUG_REGEX, {
     error: "Must be a valid slug (a-z, 0-9, hyphens, no leading/trailing hyphen)",
   }),
   provider: z.string(),
-  scopes: z.array(z.string()).optional().default([]),
-  connectionMode: z.enum(["user", "admin"]).optional().default("user"),
+  description: z.string().optional(),
+  scopes: z.array(z.string()).optional(),
+  connectionMode: z.enum(["user", "admin"]).optional(),
 });
 
 const slugString = z.string().min(1).regex(SLUG_REGEX, {
@@ -44,9 +45,9 @@ const semverRangeString = z.string().refine((val) => semver.validRange(val) !==
 });
 
 const registryDependenciesSchema = z
-  .object({
-    skills: z.record(z.string(), semverRangeString).optional().default({}),
-    extensions: z.record(z.string(), semverRangeString).optional().default({}),
+  .looseObject({
+    skills: z.record(z.string(), semverRangeString).optional(),
+    extensions: z.record(z.string(), semverRangeString).optional(),
   })
   .optional();
 
@@ -58,7 +59,7 @@ export const scopedNameRegex = /^@[a-z0-9]([a-z0-9-]*[a-z0-9])?\/[a-z0-9]([a-z0-
 export const packageTypeEnum = z.enum(["flow", "skill", "extension"]);
 export type PackageType = z.infer<typeof packageTypeEnum>;
 
-export const baseManifestSchema = z.object({
+export const baseManifestSchema = z.looseObject({
   name: z.string().regex(scopedNameRegex, { error: "Must follow the format @scope/package-name" }),
   version: z.string().refine((v) => semver.valid(v) !== null, {
     error: "Must be a valid semver version",
@@ -81,14 +82,14 @@ export type FlowJsonSchemaProperty = z.infer<typeof jsonSchemaPropertySchema>;
 export type FlowJsonSchemaObject = z.infer<typeof jsonSchemaObjectSchema>;
 
 // ─────────────────────────────────────────────
-// Shared flow fields — used by both flowManifestSchema and localFlowManifestSchema
+// Shared flow fields
 // ─────────────────────────────────────────────
 
 const flowSharedFields = {
-  requires: z.object({
+  requires: z.looseObject({
     services: z.array(serviceRequirementSchema),
-    skills: z.array(slugString).optional().default([]),
-    extensions: z.array(slugString).optional().default([]),
+    skills: z.array(slugString).optional(),
+    extensions: z.array(slugString).optional(),
   }),
   input: z
     .object({
@@ -106,7 +107,7 @@ const flowSharedFields = {
     })
     .optional(),
   execution: z
-    .object({
+    .looseObject({
       timeout: z.number().optional(),
       outputRetries: z.number().min(0).max(5).optional(),
     })
@@ -154,9 +155,8 @@ export function validateManifest(raw: unknown): ValidateManifestResult {
     return { valid: false, errors };
   }
 
-  // No type field — try flow manifest validation (backward compat for flow-only manifests
-  // that don't have name/version/type because they rely on the old format)
-  return validateFlowManifest(raw);
+  // No type field — require it explicitly
+  return { valid: false, errors: ["type: Required field is missing"] };
 }
 
 function validateFlowManifest(raw: unknown): ValidateManifestResult {
@@ -232,39 +232,6 @@ function countParams(paramStr: string): number {
   return count;
 }
 
-// ─────────────────────────────────────────────
-// Local flow manifest schema — relaxed for strate (no scoped name, optional version)
-// ─────────────────────────────────────────────
-
-export const localFlowManifestSchema = z.looseObject({
-  $schema: z.string().optional(),
-  schemaVersion: z.string(),
-  name: slugString,
-  displayName: z.string().min(1),
-  description: z.string(),
-  author: z.string(),
-  license: z.string().optional(),
-  tags: z.array(z.string()).optional(),
-  type: z.string().optional(),
-  version: z.string().optional(),
-  ...flowSharedFields,
-});
-
-export type LocalFlowManifest = z.infer<typeof localFlowManifestSchema>;
-
-export function validateLocalFlowManifest(raw: unknown): {
-  valid: boolean;
-  errors: string[];
-  manifest?: unknown;
-} {
-  const result = localFlowManifestSchema.safeParse(raw);
-  if (result.success) {
-    return { valid: true, errors: [], manifest: result.data };
-  }
-  const errors = result.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`);
-  return { valid: false, errors };
-}
-
 export function validateExtensionSource(source: string): ExtensionValidationResult {
   const errors: string[] = [];
   const warnings: string[] = [];

package/src/naming.ts

@@ -16,6 +16,13 @@ export function scopedNameToPackageId(scopedName: string): string {
   return `${match[1]}--${match[2]}`;
 }
 
+/** Parse "@scope/name" into { scope, name } or null if invalid */
+export function parseScopedName(scopedName: string): { scope: string; name: string } | null {
+  const match = scopedName.match(/^@([^/]+)\/(.+)$/);
+  if (!match) return null;
+  return { scope: match[1]!, name: match[2]! };
+}
+
 /** Convert strate packageId "scope--name" to "@scope/name", or null for local slugs */
 export function packageIdToScopedName(packageId: string): string | null {
   const idx = packageId.indexOf("--");

package/src/zip.ts

@@ -133,10 +133,9 @@ export function parsePackageZip(zipBuffer: Uint8Array, maxSize?: number): Parsed
     );
   }
 
-  const manifest = validation.manifest as Record<string, unknown>;
+  const manifest = manifestRaw as Record<string, unknown>;
 
-  // Determine type (fallback "flow" for legacy manifests without type)
-  const type = (manifest.type as "flow" | "skill" | "extension") ?? "flow";
+  const type = manifest.type as "flow" | "skill" | "extension";
 
   // Extract primary content based on type
   let content: string;