@onlineapps/conn-orch-orchestrator 1.0.59 → 1.0.61

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onlineapps/conn-orch-orchestrator",
-  "version": "1.0.59",
+  "version": "1.0.61",
   "description": "Workflow orchestration connector for OA Drive - handles message routing and workflow execution",
   "main": "src/index.js",
   "scripts": {

package/src/WorkflowOrchestrator.js

@@ -479,7 +479,7 @@ class WorkflowOrchestrator {
     // Resolve variable references in step.input (e.g. ${steps[0].output.message})
     console.log(`[WorkflowOrchestrator] [RESOLVE] Step ${stepId} input BEFORE:`, JSON.stringify(step.input));
     console.log(`[WorkflowOrchestrator] [RESOLVE] Context keys:`, Object.keys(context || {}));
-    console.log(`[WorkflowOrchestrator] [RESOLVE] Context.input_file:`, context?.input_file);
+    console.log(`[WorkflowOrchestrator] [RESOLVE] Context.api_input:`, JSON.stringify(context?.api_input));
     console.log(`[WorkflowOrchestrator] [RESOLVE] Context.steps:`, JSON.stringify(context.steps?.map(s => ({ id: this._getStepId(s), output: s.output }))));
     
     const resolvedInput = this._resolveInputReferences(step.input, context);
@@ -575,6 +575,10 @@ class WorkflowOrchestrator {
       
       // Special handling for 'steps' - support array (legacy) and map (steps_by_id)
       if (parts[i - 1] === 'steps') {
+        // Disallow numeric/index access (must reference by step_id)
+        if (/^\\d+$/.test(part)) {
+          return undefined;
+        }
         if (context.steps_by_id && context.steps_by_id[part]) {
           current = context.steps_by_id[part];
         } else if (Array.isArray(context.steps)) {