@oxygen-agent/cli 1.46.0 → 1.50.37

package/node_modules/@oxygen/workflows/dist/index.d.ts

@@ -223,8 +223,10 @@ export declare function buildRecipeManifest(input: {
     sourceHash?: string;
     createdAt?: Date;
 }): RecipeManifest;
-export declare function lintWorkflowManifest(value: unknown, options?: WorkflowManifestValidationOptions): WorkflowLintResult;
-export declare function lintRecipeManifest(value: unknown, options?: WorkflowManifestValidationOptions): WorkflowLintResult;
+export declare function lintWorkflowManifest(// skipcq: JS-R1005
+value: unknown, options?: WorkflowManifestValidationOptions): WorkflowLintResult;
+export declare function lintRecipeManifest(// skipcq: JS-R1005
+value: unknown, options?: WorkflowManifestValidationOptions): WorkflowLintResult;
 export declare function assertRecipeManifest(value: unknown, options?: WorkflowManifestValidationOptions): asserts value is RecipeManifest;
 export declare function assertWorkflowManifest(value: unknown, options?: WorkflowManifestValidationOptions): asserts value is WorkflowManifest;
 export declare function validateJsonSchemaValue(value: unknown, schema: JsonSchema | undefined, path?: string): JsonSchemaValidationIssue[];
@@ -236,6 +238,147 @@ export declare function runPureWorkflowFunction(input: {
     timeoutMs?: number;
     maxOutputBytes?: number;
 }): Promise<unknown>;
+export declare const workflowApplySchema: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly title: "OXYGEN Workflow Apply Input";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly manifest: {
+            readonly $ref: "#/$defs/manifest";
+        };
+    };
+    readonly required: readonly ["manifest"];
+    readonly $defs: {
+        readonly manifest: {
+            readonly type: "object";
+            readonly additionalProperties: true;
+        };
+    };
+};
+export declare const workflowCallSchema: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly title: "OXYGEN Workflow Call Input";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly workflow_id: {
+            readonly type: "string";
+        };
+        readonly workflow_name: {
+            readonly type: "string";
+        };
+        readonly input: {
+            readonly type: "object";
+            readonly additionalProperties: true;
+        };
+        readonly mode: {
+            readonly enum: readonly ["dry_run", "live", "smoke_test"];
+        };
+        readonly idempotency_key: {
+            readonly type: "string";
+        };
+    };
+};
+export declare const workflowEventEmitSchema: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly title: "OXYGEN Workflow Event Emit Input";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly source: {
+            readonly type: "string";
+        };
+        readonly event: {
+            readonly type: "string";
+        };
+        readonly payload: {
+            readonly type: "object";
+            readonly additionalProperties: true;
+        };
+        readonly raw_payload: {
+            readonly type: "object";
+            readonly additionalProperties: true;
+        };
+        readonly headers: {
+            readonly type: "object";
+            readonly additionalProperties: true;
+        };
+        readonly external_event_id: {
+            readonly type: "string";
+        };
+        readonly idempotency_key: {
+            readonly type: "string";
+        };
+        readonly mode: {
+            readonly enum: readonly ["dry_run", "live", "smoke_test"];
+        };
+    };
+    readonly required: readonly ["source", "event", "payload"];
+};
+export declare const workflowTriggerSchema: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly title: "OXYGEN Workflow Trigger";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly type: {
+            readonly enum: readonly ["api", "webhook", "cron"];
+        };
+        readonly trigger_id: {
+            readonly type: "string";
+        };
+        readonly trigger_name: {
+            readonly type: readonly ["string", "null"];
+        };
+        readonly secret_required: {
+            readonly type: "boolean";
+        };
+        readonly idempotency_key_path: {
+            readonly type: readonly ["string", "null"];
+        };
+        readonly cron: {
+            readonly type: "string";
+        };
+        readonly timezone: {
+            readonly type: readonly ["string", "null"];
+        };
+        readonly source: {
+            readonly type: "string";
+        };
+        readonly event: {
+            readonly type: "string";
+        };
+        readonly filters: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly properties: {
+                    readonly path: {
+                        readonly type: "string";
+                    };
+                    readonly op: {
+                        readonly enum: readonly ["eq", "neq", "exists", "not_exists"];
+                    };
+                    readonly value: {};
+                };
+                readonly required: readonly ["path", "op"];
+            };
+        };
+        readonly status: {
+            readonly enum: readonly ["active", "disabled"];
+        };
+    };
+    readonly required: readonly ["type"];
+};
+export declare const workflowManifestSchema: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly title: "OXYGEN Workflow Manifest";
+    readonly type: "object";
+    readonly additionalProperties: true;
+    readonly required: readonly ["manifest_version", "workflow", "steps", "source_hash", "compiler_version"];
+};
 export declare function getWorkflowApplySchema(): {
     readonly $schema: "https://json-schema.org/draft/2020-12/schema";
     readonly title: "OXYGEN Workflow Apply Input";
@@ -535,145 +678,4 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
         };
     };
 };
-export declare const workflowApplySchema: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly title: "OXYGEN Workflow Apply Input";
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly properties: {
-        readonly manifest: {
-            readonly $ref: "#/$defs/manifest";
-        };
-    };
-    readonly required: readonly ["manifest"];
-    readonly $defs: {
-        readonly manifest: {
-            readonly type: "object";
-            readonly additionalProperties: true;
-        };
-    };
-};
-export declare const workflowCallSchema: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly title: "OXYGEN Workflow Call Input";
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly properties: {
-        readonly workflow_id: {
-            readonly type: "string";
-        };
-        readonly workflow_name: {
-            readonly type: "string";
-        };
-        readonly input: {
-            readonly type: "object";
-            readonly additionalProperties: true;
-        };
-        readonly mode: {
-            readonly enum: readonly ["dry_run", "live", "smoke_test"];
-        };
-        readonly idempotency_key: {
-            readonly type: "string";
-        };
-    };
-};
-export declare const workflowEventEmitSchema: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly title: "OXYGEN Workflow Event Emit Input";
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly properties: {
-        readonly source: {
-            readonly type: "string";
-        };
-        readonly event: {
-            readonly type: "string";
-        };
-        readonly payload: {
-            readonly type: "object";
-            readonly additionalProperties: true;
-        };
-        readonly raw_payload: {
-            readonly type: "object";
-            readonly additionalProperties: true;
-        };
-        readonly headers: {
-            readonly type: "object";
-            readonly additionalProperties: true;
-        };
-        readonly external_event_id: {
-            readonly type: "string";
-        };
-        readonly idempotency_key: {
-            readonly type: "string";
-        };
-        readonly mode: {
-            readonly enum: readonly ["dry_run", "live", "smoke_test"];
-        };
-    };
-    readonly required: readonly ["source", "event", "payload"];
-};
-export declare const workflowTriggerSchema: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly title: "OXYGEN Workflow Trigger";
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly properties: {
-        readonly type: {
-            readonly enum: readonly ["api", "webhook", "cron"];
-        };
-        readonly trigger_id: {
-            readonly type: "string";
-        };
-        readonly trigger_name: {
-            readonly type: readonly ["string", "null"];
-        };
-        readonly secret_required: {
-            readonly type: "boolean";
-        };
-        readonly idempotency_key_path: {
-            readonly type: readonly ["string", "null"];
-        };
-        readonly cron: {
-            readonly type: "string";
-        };
-        readonly timezone: {
-            readonly type: readonly ["string", "null"];
-        };
-        readonly source: {
-            readonly type: "string";
-        };
-        readonly event: {
-            readonly type: "string";
-        };
-        readonly filters: {
-            readonly type: "array";
-            readonly items: {
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly properties: {
-                    readonly path: {
-                        readonly type: "string";
-                    };
-                    readonly op: {
-                        readonly enum: readonly ["eq", "neq", "exists", "not_exists"];
-                    };
-                    readonly value: {};
-                };
-                readonly required: readonly ["path", "op"];
-            };
-        };
-        readonly status: {
-            readonly enum: readonly ["active", "disabled"];
-        };
-    };
-    readonly required: readonly ["type"];
-};
-export declare const workflowManifestSchema: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly title: "OXYGEN Workflow Manifest";
-    readonly type: "object";
-    readonly additionalProperties: true;
-    readonly required: readonly ["manifest_version", "workflow", "steps", "source_hash", "compiler_version"];
-};
 export {};

package/node_modules/@oxygen/workflows/dist/index.js

@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import * as vm from "node:vm";
+import * as vm from "node:vm"; // skipcq: JS-C1003
 export const WORKFLOW_MANIFEST_VERSION = 1;
 export const WORKFLOW_COMPILER_VERSION = "oxygen-workflows-v1";
 export const DURABLE_RECIPE_COMPILER_VERSION = "oxygen-recipes-v2";
@@ -8,16 +8,16 @@ export const DEFAULT_WORKFLOW_CRON_TIMEZONE = "UTC";
 // Compatibility and determinism lint only. The Vercel sandbox process,
 // denied network policy, and runtime global guards are the security boundary.
 const UNSAFE_RECIPE_BUNDLE_PATTERNS = [
-    { token: "globalThis", pattern: /\bglobalThis\b/ },
+    { token: "globalThis", pattern: /\bglobalThis\b/ }, // skipcq: SCT-A000
     { token: "global", pattern: /\bglobal\b/ },
     { token: "process", pattern: /\bprocess\b/ },
     { token: "fetch", pattern: /\bfetch\b/ },
-    { token: "XMLHttpRequest", pattern: /\bXMLHttpRequest\b/ },
+    { token: "XMLHttpRequest", pattern: /\bXMLHttpRequest\b/ }, // skipcq: SCT-A000
     { token: "WebSocket", pattern: /\bWebSocket\b/ },
-    { token: "EventSource", pattern: /\bEventSource\b/ },
+    { token: "EventSource", pattern: /\bEventSource\b/ }, // skipcq: SCT-A000
     { token: "require", pattern: /\brequire\b/ },
-    { token: "dynamic import", pattern: /\bimport(?:\s|\/\*[\s\S]*?\*\/)*\(/ },
-    { token: "node module import", pattern: /\b(?:node:)?(?:fs|child_process|net|tls|http|https|dns|dgram|worker_threads)\b/ },
+    { token: "dynamic import", pattern: /\bimport(?:\s|\/\*[\s\S]*?\*\/)*\(/ }, // skipcq: SCT-A000
+    { token: "node module import", pattern: /\b(?:node:)?(?:fs|child_process|net|tls|http|https|dns|dgram|worker_threads)\b/ }, // skipcq: SCT-A000
     { token: "eval", pattern: /\beval\b/ },
     { token: "Function", pattern: /\bFunction\b/ },
     { token: "constructor", pattern: /\bconstructor\b/ },
@@ -26,7 +26,7 @@ const UNSAFE_RECIPE_BUNDLE_PATTERNS = [
     { token: "Math.random", pattern: /\bMath\s*\.\s*random\b/ },
     { token: "crypto.randomUUID", pattern: /\bcrypto\s*\.\s*randomUUID\b/ },
     { token: "setTimeout", pattern: /\bsetTimeout\b/ },
-    { token: "setInterval", pattern: /\bsetInterval\b/ },
+    { token: "setInterval", pattern: /\bsetInterval\b/ }, // skipcq: SCT-A000
 ];
 export function defineWorkflow(input) {
     return {
@@ -195,7 +195,8 @@ export function buildRecipeManifest(input) {
     };
     return manifest;
 }
-export function lintWorkflowManifest(value, options = {}) {
+export function lintWorkflowManifest(// skipcq: JS-R1005
+value, options = {}) {
     if (isRecord(value)
         && typeof value.compiler_version === "string"
         && value.compiler_version.startsWith("oxygen-recipes-")) {
@@ -294,7 +295,8 @@ export function lintWorkflowManifest(value, options = {}) {
     }
     return { ok: issues.length === 0, issues };
 }
-export function lintRecipeManifest(value, options = {}) {
+export function lintRecipeManifest(// skipcq: JS-R1005
+value, options = {}) {
     const issues = [];
     const add = (path, code, message) => issues.push({ path, code, message });
     if (!isRecord(value)) {
@@ -419,21 +421,6 @@ export async function runPureWorkflowFunction(input) {
         : result;
     return enforceJsonOutput(resolved, maxOutputBytes);
 }
-export function getWorkflowApplySchema() {
-    return workflowApplySchema;
-}
-export function getWorkflowSchema(subject = "apply") {
-    const schemas = {
-        apply: workflowApplySchema,
-        call: workflowCallSchema,
-        event: workflowEventEmitSchema,
-        trigger: workflowTriggerSchema,
-        manifest: workflowManifestSchema,
-    };
-    if (subject === "all")
-        return { schemas };
-    return schemas[subject];
-}
 export const workflowApplySchema = {
     $schema: "https://json-schema.org/draft/2020-12/schema",
     title: "OXYGEN Workflow Apply Input",
@@ -516,7 +503,23 @@ export const workflowManifestSchema = {
     additionalProperties: true,
     required: ["manifest_version", "workflow", "steps", "source_hash", "compiler_version"],
 };
-function validateJsonSchemaValueInto(value, schema, path, issues) {
+export function getWorkflowApplySchema() {
+    return workflowApplySchema;
+}
+export function getWorkflowSchema(subject = "apply") {
+    const schemas = {
+        apply: workflowApplySchema,
+        call: workflowCallSchema,
+        event: workflowEventEmitSchema,
+        trigger: workflowTriggerSchema,
+        manifest: workflowManifestSchema,
+    };
+    if (subject === "all")
+        return { schemas };
+    return schemas[subject];
+}
+function validateJsonSchemaValueInto(// skipcq: JS-R1005
+value, schema, path, issues) {
     const startCount = issues.length;
     if (schema.const !== undefined && !jsonEqual(value, schema.const)) {
         issues.push({
@@ -638,7 +641,8 @@ function formatSchemaTypes(types) {
 function jsonEqual(left, right) {
     return JSON.stringify(left) === JSON.stringify(right);
 }
-function validateTrigger(value, path, add) {
+function validateTrigger(// skipcq: JS-R1005
+value, path, add) {
     if (!isRecord(value)) {
         add(path, "invalid_trigger", "Workflow trigger must be an object.");
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.46.0",
+  "version": "1.50.37",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",