@signstack/cli 0.1.1

package/dist/apps/signstack-cli/src/lib/resource-validator.d.ts

@@ -0,0 +1,44 @@
+import { DependencyGraph, type ParsedDocument, type ResourceId } from '@signstack/base';
+import { type ValidationSummary } from '../types/schema.types.js';
+/**
+ * Extended validation summary with graph stats
+ */
+export interface ExtendedValidationSummary extends ValidationSummary {
+    graphStats?: {
+        totalNodes: number;
+        totalEdges: number;
+        leafNodes: number;
+        rootNodes: number;
+    };
+    hasCycles: boolean;
+    cycles?: ResourceId[][];
+}
+/**
+ * ResourceValidator - Shared validation logic for YAML resources
+ *
+ * Used by both the validate and preview commands
+ */
+export declare class ResourceValidator {
+    private validator;
+    /**
+     * Validate all YAML files in a folder
+     * Returns parsed documents if valid, throws if validation fails
+     */
+    validateFolder(folderPath: string): Promise<{
+        documents: ParsedDocument[];
+        graph: DependencyGraph;
+        summary: ExtendedValidationSummary;
+    }>;
+    /**
+     * Validate that all dependencies exist in the graph
+     */
+    private validateDependencies;
+    /**
+     * Validate that spec.file references exist
+     */
+    private validateFileReferences;
+}
+/**
+ * Get the shared ResourceValidator instance
+ */
+export declare function getResourceValidator(): ResourceValidator;

package/dist/apps/signstack-cli/src/lib/resource-validator.js

@@ -0,0 +1,158 @@
+import { existsSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { DependencyGraph } from '@signstack/base';
+import { getSchemaValidator } from './schema-validator.js';
+import { discoverYamlFiles, parseAllYamlFiles, } from './yaml-document-parser.js';
+import { SchemaKind, ValidationErrorKeyword, } from '../types/schema.types.js';
+/**
+ * ResourceValidator - Shared validation logic for YAML resources
+ *
+ * Used by both the validate and preview commands
+ */
+export class ResourceValidator {
+    validator = getSchemaValidator();
+    /**
+     * Validate all YAML files in a folder
+     * Returns parsed documents if valid, throws if validation fails
+     */
+    async validateFolder(folderPath) {
+        // Discover all YAML files
+        const filePaths = await discoverYamlFiles(folderPath);
+        if (filePaths.length === 0) {
+            throw new Error(`No YAML files found in: ${folderPath}`);
+        }
+        // Parse all documents
+        const { documents, parseErrors } = parseAllYamlFiles(filePaths);
+        if (documents.length === 0 && parseErrors.length > 0) {
+            return {
+                documents: [],
+                graph: new DependencyGraph(),
+                summary: {
+                    total: parseErrors.length,
+                    passed: 0,
+                    failed: parseErrors.length,
+                    results: parseErrors,
+                    hasCycles: false,
+                },
+            };
+        }
+        // Build dependency graph
+        const graph = DependencyGraph.fromDocuments(documents);
+        // Determine validation order via topological sort
+        const sortResult = graph.topologicalSort();
+        const validationOrder = sortResult.order;
+        // Add any nodes not in sort result (cycle members)
+        const orderedSet = new Set(validationOrder);
+        for (const id of graph.nodes.keys()) {
+            if (!orderedSet.has(id)) {
+                validationOrder.push(id);
+            }
+        }
+        // Run validations
+        const results = [...parseErrors];
+        // Schema validation in topological order
+        for (const resourceId of validationOrder) {
+            const doc = graph.nodes.get(resourceId);
+            if (!doc)
+                continue;
+            const result = this.validator.validate(doc.content, doc.filePath, doc.kind, doc.documentIndex);
+            results.push(result);
+        }
+        // Dependency validation
+        const depErrors = this.validateDependencies(graph);
+        results.push(...depErrors);
+        // File reference validation
+        const fileRefErrors = this.validateFileReferences(graph);
+        results.push(...fileRefErrors);
+        // Build summary
+        const summary = {
+            total: results.length,
+            passed: results.filter((r) => r.valid).length,
+            failed: results.filter((r) => !r.valid).length,
+            results,
+            graphStats: graph.getStats(),
+            hasCycles: !sortResult.isAcyclic,
+            cycles: sortResult.cycles,
+        };
+        return { documents, graph, summary };
+    }
+    /**
+     * Validate that all dependencies exist in the graph
+     */
+    validateDependencies(graph) {
+        const errors = [];
+        const missing = graph.getMissingDependencies();
+        for (const [sourceId, missingDeps] of missing) {
+            const sourceDoc = graph.nodes.get(sourceId);
+            if (!sourceDoc)
+                continue;
+            for (const missingId of missingDeps) {
+                const { kind, key, version } = DependencyGraph.parseId(missingId);
+                const ref = sourceDoc.references.find((r) => r.key === key && r.version === version && r.targetKind === kind);
+                errors.push({
+                    valid: false,
+                    errors: [
+                        {
+                            path: ref?.sourcePath ?? '/',
+                            message: `Referenced ${kind} '${key}@${version}' not found in project`,
+                            keyword: ValidationErrorKeyword.DependencyMissing,
+                        },
+                    ],
+                    schemaKind: sourceDoc.kind,
+                    filePath: sourceDoc.filePath,
+                    documentIndex: sourceDoc.documentIndex,
+                    resourceKey: sourceDoc.key,
+                    resourceVersion: sourceDoc.version,
+                });
+            }
+        }
+        return errors;
+    }
+    /**
+     * Validate that spec.file references exist
+     */
+    validateFileReferences(graph) {
+        const errors = [];
+        for (const doc of graph.nodes.values()) {
+            if (doc.kind !== SchemaKind.Schema && doc.kind !== SchemaKind.Asset) {
+                continue;
+            }
+            const spec = doc.content['spec'];
+            const filePath = spec?.['file'];
+            if (!filePath)
+                continue;
+            const baseDir = dirname(doc.filePath);
+            const resolvedPath = resolve(baseDir, filePath);
+            if (!existsSync(resolvedPath)) {
+                errors.push({
+                    valid: false,
+                    errors: [
+                        {
+                            path: 'spec.file',
+                            message: `Referenced file '${filePath}' not found (resolved: ${resolvedPath})`,
+                            keyword: ValidationErrorKeyword.FileReferenceMissing,
+                        },
+                    ],
+                    schemaKind: doc.kind,
+                    filePath: doc.filePath,
+                    documentIndex: doc.documentIndex,
+                    resourceKey: doc.key,
+                    resourceVersion: doc.version,
+                });
+            }
+        }
+        return errors;
+    }
+}
+/** Singleton instance */
+let validatorInstance = null;
+/**
+ * Get the shared ResourceValidator instance
+ */
+export function getResourceValidator() {
+    if (!validatorInstance) {
+        validatorInstance = new ResourceValidator();
+    }
+    return validatorInstance;
+}
+//# sourceMappingURL=resource-validator.js.map

package/dist/apps/signstack-cli/src/lib/resource-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-validator.js","sourceRoot":"","sources":["../../../../../src/lib/resource-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAwC,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,UAAU,EACV,sBAAsB,GAGvB,MAAM,0BAA0B,CAAC;AAgBlC;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAG,kBAAkB,EAAE,CAAC;IAEzC;;;OAGG;IACH,KAAK,CAAC,cAAc,CAClB,UAAkB;QAMlB,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,sBAAsB;QACtB,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAEhE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,IAAI,eAAe,EAAE;gBAC5B,OAAO,EAAE;oBACP,KAAK,EAAE,WAAW,CAAC,MAAM;oBACzB,MAAM,EAAE,CAAC;oBACT,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,OAAO,EAAE,WAAW;oBACpB,SAAS,EAAE,KAAK;iBACjB;aACF,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEvD,kDAAkD;QAClD,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC;QAEzC,mDAAmD;QACnD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC5C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxB,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,OAAO,GAAuB,CAAC,GAAG,WAAW,CAAC,CAAC;QAErD,yCAAyC;QACzC,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG;gBAAE,SAAS;YAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CACpC,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,aAAa,CAClB,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,wBAAwB;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAE3B,4BAA4B;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAE/B,gBAAgB;QAChB,MAAM,OAAO,GAA8B;YACzC,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;YAC7C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;YAC9C,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE;YAC5B,SAAS,EAAE,CAAC,UAAU,CAAC,SAAS;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,KAAsB;QACjD,MAAM,MAAM,GAAuB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAE/C,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,OAAO,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;gBACpC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClE,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CACvE,CAAC;gBAEF,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,GAAG,EAAE,UAAU,IAAI,GAAG;4BAC5B,OAAO,EAAE,cAAc,IAAI,KAAK,GAAG,IAAI,OAAO,wBAAwB;4BACtE,OAAO,EAAE,sBAAsB,CAAC,iBAAiB;yBAClD;qBACF;oBACD,UAAU,EAAE,SAAS,CAAC,IAAI;oBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,aAAa,EAAE,SAAS,CAAC,aAAa;oBACtC,WAAW,EAAE,SAAS,CAAC,GAAG;oBAC1B,eAAe,EAAE,SAAS,CAAC,OAAO;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,KAAsB;QACnD,MAAM,MAAM,GAAuB,EAAE,CAAC;QAEtC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;gBACpE,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAwC,CAAC;YACxE,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,MAAM,CAAuB,CAAC;YAEtD,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEhD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,oBAAoB,QAAQ,0BAA0B,YAAY,GAAG;4BAC9E,OAAO,EAAE,sBAAsB,CAAC,oBAAoB;yBACrD;qBACF;oBACD,UAAU,EAAE,GAAG,CAAC,IAAI;oBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,aAAa,EAAE,GAAG,CAAC,aAAa;oBAChC,WAAW,EAAE,GAAG,CAAC,GAAG;oBACpB,eAAe,EAAE,GAAG,CAAC,OAAO;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,yBAAyB;AACzB,IAAI,iBAAiB,GAA6B,IAAI,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/apps/signstack-cli/src/lib/run-handler.d.ts

@@ -0,0 +1,47 @@
+import type { CreateWorkflowMode } from '@signstack/base';
+import { ApiClient } from './api-client.js';
+export interface RunConfig {
+    orgId: string;
+    namespaceKey: string;
+}
+/**
+ * Handler for the `run` command — kicks off a workflow from a blueprint.
+ *
+ * Supports three modes:
+ * - Remote: Blueprint is resolved entirely from the SignStack API (key + optional version)
+ * - Local (--path --local): All resources from local YAML files
+ * - Hybrid (--path): Local files + fetch missing deps from API
+ */
+export declare class RunHandler {
+    private readonly apiClient;
+    private readonly config;
+    private readonly log;
+    private readonly error;
+    private readonly payloadBuilder;
+    private readonly localLoader;
+    constructor(apiClient: ApiClient, config: RunConfig, log: (message: string) => void, error: (message: string, options?: {
+        exit?: number;
+    }) => never);
+    /**
+     * Run a workflow from a deployed blueprint.
+     * The API resolves all dependencies from blueprintKey/version.
+     */
+    runRemote(blueprintKey: string, version: string | undefined, scenarioKey: string | undefined, mode: CreateWorkflowMode | undefined, jsonOutput: boolean): Promise<void>;
+    /**
+     * Run a workflow from local YAML files.
+     * @param inlineOnly - When true (--local), fail on missing deps. When false (hybrid), API resolves missing.
+     */
+    runLocal(pathArg: string, blueprintRef: string, scenarioKey: string | undefined, mode: CreateWorkflowMode | undefined, jsonOutput: boolean, inlineOnly?: boolean): Promise<void>;
+    /**
+     * Load blueprint metadata from SignStack API.
+     */
+    private loadBlueprintFromApi;
+    /**
+     * Call POST /v1/orgs/:orgId/workflows to create and start a workflow.
+     */
+    private createWorkflow;
+    /**
+     * Print the run results to the console.
+     */
+    private printRunResults;
+}

package/dist/apps/signstack-cli/src/lib/run-handler.js

@@ -0,0 +1,266 @@
+import ora from 'ora';
+import pc from 'picocolors';
+import { resolveEntityData, } from './entity-data-resolver.js';
+import { LocalResourceLoader } from './local-resource-loader.js';
+import { PayloadBuilder } from './payload-builder.js';
+import { isScenarioFilePath, loadDefaultScenario, loadScenario, loadScenarioFromPath, } from './scenario-file.js';
+import { SchemaKind } from '../types/schema.types.js';
+const DEFAULT_WEB_APP_URL = 'https://signstack-test.web.app';
+/**
+ * Handler for the `run` command — kicks off a workflow from a blueprint.
+ *
+ * Supports three modes:
+ * - Remote: Blueprint is resolved entirely from the SignStack API (key + optional version)
+ * - Local (--path --local): All resources from local YAML files
+ * - Hybrid (--path): Local files + fetch missing deps from API
+ */
+export class RunHandler {
+    apiClient;
+    config;
+    log;
+    error;
+    payloadBuilder;
+    localLoader;
+    constructor(apiClient, config, log, error) {
+        this.apiClient = apiClient;
+        this.config = config;
+        this.log = log;
+        this.error = error;
+        this.payloadBuilder = new PayloadBuilder();
+        this.localLoader = new LocalResourceLoader(apiClient, config.orgId, this.payloadBuilder, log, error);
+    }
+    // ── Remote mode ──────────────────────────────────────────────────
+    /**
+     * Run a workflow from a deployed blueprint.
+     * The API resolves all dependencies from blueprintKey/version.
+     */
+    async runRemote(blueprintKey, version, scenarioKey, mode, jsonOutput) {
+        // Step 1: Load blueprint from API (need inputs for entity data generation)
+        const blueprintData = await this.loadBlueprintFromApi(blueprintKey, version, jsonOutput);
+        // Step 2: Resolve entity data (from scenario or generate via API)
+        const entityData = await resolveEntityData({
+            entitySlots: blueprintData.inputs,
+            scenarioKey,
+            jsonOutput,
+            fetchScenario: (key) => this.apiClient.get(`/v1/orgs/${this.config.orgId}/namespaces/${this.config.namespaceKey}/scenarios/${encodeURIComponent(key)}`),
+            generateFromApi: (schemaKeys) => this.apiClient.post(`/v1/orgs/${this.config.orgId}/namespaces/${this.config.namespaceKey}/schemas/examples`, { schemaKeys }),
+            log: this.log,
+        });
+        // Step 3: Create workflow via API
+        const data = entityData.entities.length > 0
+            ? Object.fromEntries(entityData.entities.map((e) => [e.key, e.data]))
+            : undefined;
+        const result = await this.createWorkflow({
+            blueprintKey: blueprintData.key,
+            blueprintVersion: blueprintData.version,
+            ...(data ? { data } : {}),
+            options: mode ? { mode } : undefined,
+        }, jsonOutput);
+        // Step 4: Output results
+        this.printRunResults(result, jsonOutput, entityData, {
+            key: blueprintData.key,
+            version: blueprintData.version,
+            name: blueprintData.name,
+        });
+    }
+    // ── Local / Hybrid mode ──────────────────────────────────────────
+    /**
+     * Run a workflow from local YAML files.
+     * @param inlineOnly - When true (--local), fail on missing deps. When false (hybrid), API resolves missing.
+     */
+    async runLocal(pathArg, blueprintRef, scenarioKey, mode, jsonOutput, inlineOnly = false) {
+        // Step 1-4: Validate, find blueprint, collect deps, upload assets
+        const { missingDeps, targetDoc: blueprintDoc, relevantDocs, fileIdMap, } = await this.localLoader.prepareLocalResources({
+            pathArg,
+            resourceRef: blueprintRef,
+            resourceKind: SchemaKind.Blueprint,
+            resourceType: 'blueprint',
+            jsonOutput,
+            inlineOnly,
+        });
+        // Step 5: Build blueprint resource (for entity slots)
+        const blueprint = this.payloadBuilder.buildBlueprintPayload(blueprintDoc);
+        // Step 6: Collect local resource docs by type
+        const templateDocs = relevantDocs.filter((d) => d.kind === SchemaKind.Template);
+        const assetDocs = relevantDocs.filter((d) => d.kind === SchemaKind.Asset);
+        const functionDocs = relevantDocs.filter((d) => d.kind === SchemaKind.JsonataFunction);
+        // Step 7: Log missing deps info (backend resolves them in hybrid mode)
+        if (missingDeps.size > 0 && !jsonOutput) {
+            const allMissing = new Set();
+            for (const deps of missingDeps.values()) {
+                for (const dep of deps)
+                    allMissing.add(dep);
+            }
+            this.log(`\n${pc.dim(`${allMissing.size} missing local dependency(ies) will be resolved from deployed resources.`)}`);
+        }
+        // Step 8: Resolve entity data — load local scenario files or generate
+        const schemaDocs = relevantDocs
+            .filter((d) => d.kind === SchemaKind.Schema)
+            .map((d) => this.payloadBuilder.buildSchemaPayload(d));
+        const { resolve: resolvePath } = await import('node:path');
+        const contractDir = resolvePath(pathArg);
+        // Try loading scenario from local files first
+        let entityData;
+        if (scenarioKey && isScenarioFilePath(scenarioKey)) {
+            const scenarioEntities = loadScenarioFromPath(resolvePath(scenarioKey));
+            if (!jsonOutput)
+                this.log(`Loaded scenario from file: ${scenarioKey}`);
+            entityData = { entities: scenarioEntities, isAutoGenerated: false };
+        }
+        else if (scenarioKey) {
+            const scenarioEntities = loadScenario(contractDir, scenarioKey);
+            if (scenarioEntities) {
+                if (!jsonOutput)
+                    this.log(`Using scenario: ${scenarioKey}`);
+                entityData = { entities: scenarioEntities, isAutoGenerated: false };
+            }
+            else {
+                // Fall back to remote scenario resolution
+                entityData = await resolveEntityData({
+                    entitySlots: blueprint.spec.inputs ?? [],
+                    scenarioKey,
+                    jsonOutput,
+                    fetchScenario: (key) => this.apiClient.get(`/v1/orgs/${this.config.orgId}/namespaces/${this.config.namespaceKey}/scenarios/${encodeURIComponent(key)}`),
+                    log: this.log,
+                });
+            }
+        }
+        else {
+            // Try loading default scenario from scenarios/ folder first
+            const defaultScenario = loadDefaultScenario(contractDir);
+            if (defaultScenario) {
+                if (!jsonOutput)
+                    this.log(`Using scenario: ${defaultScenario.key}`);
+                entityData = {
+                    entities: defaultScenario.entities,
+                    isAutoGenerated: false,
+                };
+            }
+            else {
+                entityData = await resolveEntityData({
+                    entitySlots: blueprint.spec.inputs ?? [],
+                    scenarioKey: undefined,
+                    jsonOutput,
+                    generateFromApi: (schemaKeys) => this.apiClient.post(`/v1/orgs/${this.config.orgId}/namespaces/${this.config.namespaceKey}/schemas/examples`, { schemaKeys }),
+                    log: this.log,
+                });
+            }
+        }
+        // Step 9: Build CreateWorkflowReq with inline resources
+        const entities = entityData.entities.length > 0
+            ? entityData.entities.map((e) => ({
+                key: e.key,
+                data: e.data,
+            }))
+            : undefined;
+        const req = this.payloadBuilder.buildCreateWorkflowReq({
+            blueprintDoc,
+            templateDocs,
+            assetDocs,
+            functionDocs,
+            schemaDocs,
+            fileIdMap,
+            entities,
+            inlineOnly,
+            mode,
+        });
+        // Step 10: Create workflow via API
+        const result = await this.createWorkflow(req, jsonOutput);
+        // Step 11: Print results
+        const meta = blueprintDoc.content['metadata'];
+        this.printRunResults(result, jsonOutput, entityData, {
+            key: blueprintDoc.key,
+            version: blueprintDoc.version,
+            name: meta?.name ?? blueprintDoc.key,
+        });
+    }
+    // ── Private methods ───────────────────────────────────────────────
+    /**
+     * Load blueprint metadata from SignStack API.
+     */
+    async loadBlueprintFromApi(blueprintKey, version, jsonOutput) {
+        const spinner = jsonOutput
+            ? null
+            : ora({
+                text: 'Fetching blueprint from SignStack...',
+                color: 'cyan',
+            }).start();
+        try {
+            const baseUrl = `/v1/orgs/${this.config.orgId}/namespaces/${this.config.namespaceKey}/blueprints/${encodeURIComponent(blueprintKey)}`;
+            const url = version
+                ? `${baseUrl}?version=${encodeURIComponent(version)}`
+                : baseUrl;
+            const blueprint = await this.apiClient.get(url);
+            spinner?.succeed(`Found blueprint: ${pc.cyan(blueprint.metadata.name)} (v${blueprint.metadata.version})`);
+            return {
+                key: blueprintKey,
+                version: blueprint.metadata.version,
+                name: blueprint.metadata.name || blueprintKey,
+                inputs: blueprint.spec.inputs || [],
+            };
+        }
+        catch (error) {
+            spinner?.fail('Failed to fetch blueprint from SignStack');
+            throw error;
+        }
+    }
+    /**
+     * Call POST /v1/orgs/:orgId/workflows to create and start a workflow.
+     */
+    async createWorkflow(req, jsonOutput) {
+        const spinner = jsonOutput
+            ? null
+            : ora({
+                text: 'Creating workflow...',
+                color: 'cyan',
+            }).start();
+        try {
+            const result = await this.apiClient.post(`/v1/orgs/${this.config.orgId}/namespaces/${this.config.namespaceKey}/workflows`, req);
+            spinner?.succeed('Workflow created successfully');
+            return result;
+        }
+        catch (error) {
+            spinner?.fail('Failed to create workflow');
+            throw error;
+        }
+    }
+    /**
+     * Print the run results to the console.
+     */
+    printRunResults(result, jsonOutput, entityData, blueprint) {
+        const workflowUrl = `${DEFAULT_WEB_APP_URL}/workflows/${result.id}`;
+        if (jsonOutput) {
+            this.log(JSON.stringify({
+                blueprint: {
+                    key: blueprint.key,
+                    version: blueprint.version,
+                    name: blueprint.name,
+                },
+                entityData: {
+                    source: entityData.isAutoGenerated
+                        ? 'generated'
+                        : entityData.entities.length > 0
+                            ? 'scenario'
+                            : 'none',
+                },
+                workflowId: result.id,
+                status: result.status,
+                workflowUrl,
+            }, null, 2));
+            return;
+        }
+        this.log('');
+        this.log(pc.bold(pc.green('Workflow Created Successfully')));
+        this.log('');
+        this.log(`  ${pc.dim('Blueprint:')}   ${blueprint.name} (v${blueprint.version})`);
+        this.log(`  ${pc.dim('Workflow ID:')} ${pc.cyan(result.id)}`);
+        this.log(`  ${pc.dim('Status:')}      ${result.status}`);
+        if (entityData.isAutoGenerated) {
+            this.log(pc.dim('  (with generated sample data)'));
+        }
+        this.log('');
+        this.log(`  ${pc.dim('View status:')} ${pc.underline(workflowUrl)}`);
+        this.log('');
+    }
+}
+//# sourceMappingURL=run-handler.js.map

package/dist/apps/signstack-cli/src/lib/run-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-handler.js","sourceRoot":"","sources":["../../../../../src/lib/run-handler.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,YAAY,CAAC;AAW5B,OAAO,EACL,iBAAiB,GAElB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAGtD,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAmB7D;;;;;;;GAOG;AACH,MAAM,OAAO,UAAU;IAKF;IACA;IACA;IACA;IAPF,cAAc,CAAiB;IAC/B,WAAW,CAAsB;IAElD,YACmB,SAAoB,EACpB,MAAiB,EACjB,GAA8B,EAC9B,KAGP;QANO,cAAS,GAAT,SAAS,CAAW;QACpB,WAAM,GAAN,MAAM,CAAW;QACjB,QAAG,GAAH,GAAG,CAA2B;QAC9B,UAAK,GAAL,KAAK,CAGZ;QAEV,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,CACxC,SAAS,EACT,MAAM,CAAC,KAAK,EACZ,IAAI,CAAC,cAAc,EACnB,GAAG,EACH,KAAK,CACN,CAAC;IACJ,CAAC;IAED,oEAAoE;IAEpE;;;OAGG;IACH,KAAK,CAAC,SAAS,CACb,YAAoB,EACpB,OAA2B,EAC3B,WAA+B,EAC/B,IAAoC,EACpC,UAAmB;QAEnB,2EAA2E;QAC3E,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACnD,YAAY,EACZ,OAAO,EACP,UAAU,CACX,CAAC;QAEF,kEAAkE;QAClE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;YACzC,WAAW,EAAE,aAAa,CAAC,MAAM;YACjC,WAAW;YACX,UAAU;YACV,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAChB,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,eAC3B,IAAI,CAAC,MAAM,CAAC,YACd,cAAc,kBAAkB,CAAC,GAAG,CAAC,EAAE,CACxC;YACH,eAAe,EAAE,CAAC,UAAU,EAAE,EAAE,CAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,mBAAmB,EACvF,EAAE,UAAU,EAAE,CACf;YACH,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,IAAI,GACR,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC5B,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAChD;YACH,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CACtC;YACE,YAAY,EAAE,aAAa,CAAC,GAAG;YAC/B,gBAAgB,EAAE,aAAa,CAAC,OAAO;YACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;SACrC,EACD,UAAU,CACX,CAAC;QAEF,yBAAyB;QACzB,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE;YACnD,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;SACzB,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IAEpE;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,OAAe,EACf,YAAoB,EACpB,WAA+B,EAC/B,IAAoC,EACpC,UAAmB,EACnB,aAAsB,KAAK;QAE3B,kEAAkE;QAClE,MAAM,EACJ,WAAW,EACX,SAAS,EAAE,YAAY,EACvB,YAAY,EACZ,SAAS,GACV,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC;YAC/C,OAAO;YACP,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,UAAU,CAAC,SAAS;YAClC,YAAY,EAAE,WAAW;YACzB,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QAEH,sDAAsD;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAE1E,8CAA8C;QAC9C,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CACtC,CAAC;QACF,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,eAAe,CAC7C,CAAC;QAEF,uEAAuE;QACvE,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,KAAK,MAAM,GAAG,IAAI,IAAI;oBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,GAAG,CACN,KAAK,EAAE,CAAC,GAAG,CACT,GAAG,UAAU,CAAC,IAAI,0EAA0E,CAC7F,EAAE,CACJ,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,MAAM,UAAU,GAAG,YAAY;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,CAAC;aAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAEzC,8CAA8C;QAC9C,IAAI,UAA4B,CAAC;QACjC,IAAI,WAAW,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,GAAG,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;YACvE,UAAU,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACtE,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,MAAM,gBAAgB,GAAG,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAChE,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,UAAU;oBAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;gBAC5D,UAAU,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,0CAA0C;gBAC1C,UAAU,GAAG,MAAM,iBAAiB,CAAC;oBACnC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;oBACxC,WAAW;oBACX,UAAU;oBACV,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAChB,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,eAC3B,IAAI,CAAC,MAAM,CAAC,YACd,cAAc,kBAAkB,CAAC,GAAG,CAAC,EAAE,CACxC;oBACH,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,eAAe,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU;oBAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC;gBACpE,UAAU,GAAG;oBACX,QAAQ,EAAE,eAAe,CAAC,QAAQ;oBAClC,eAAe,EAAE,KAAK;iBACvB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,MAAM,iBAAiB,CAAC;oBACnC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;oBACxC,WAAW,EAAE,SAAS;oBACtB,UAAU;oBACV,eAAe,EAAE,CAAC,UAAU,EAAE,EAAE,CAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,mBAAmB,EACvF,EAAE,UAAU,EAAE,CACf;oBACH,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,MAAM,QAAQ,GACZ,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC5B,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;YACL,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC;YACrD,YAAY;YACZ,YAAY;YACZ,SAAS;YACT,YAAY;YACZ,UAAU;YACV,SAAS;YACT,QAAQ;YACR,UAAU;YACV,IAAI;SACL,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAE1D,yBAAyB;QACzB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAA6B,CAAC;QAC1E,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE;YACnD,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,YAAY,CAAC,GAAG;SACrC,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IAErE;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAChC,YAAoB,EACpB,OAA2B,EAC3B,UAAmB;QAEnB,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,GAAG,CAAC;gBACF,IAAI,EAAE,sCAAsC;gBAC5C,KAAK,EAAE,MAAM;aACd,CAAC,CAAC,KAAK,EAAE,CAAC;QAEf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,eAC3C,IAAI,CAAC,MAAM,CAAC,YACd,eAAe,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,OAAO;gBACjB,CAAC,CAAC,GAAG,OAAO,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE;gBACrD,CAAC,CAAC,OAAO,CAAC;YAEZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAgB,GAAG,CAAC,CAAC;YAC/D,OAAO,EAAE,OAAO,CACd,oBAAoB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAClD,SAAS,CAAC,QAAQ,CAAC,OACrB,GAAG,CACJ,CAAC;YAEF,OAAO;gBACL,GAAG,EAAE,YAAY;gBACjB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;gBACnC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,YAAY;gBAC7C,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;aACpC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAC1B,GAAsB,EACtB,UAAmB;QAEnB,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,GAAG,CAAC;gBACF,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,MAAM;aACd,CAAC,CAAC,KAAK,EAAE,CAAC;QAEf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACtC,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,YAAY,EAChF,GAAG,CACJ,CAAC;YACF,OAAO,EAAE,OAAO,CAAC,+BAA+B,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,MAA0B,EAC1B,UAAmB,EACnB,UAA4B,EAC5B,SAAyD;QAEzD,MAAM,WAAW,GAAG,GAAG,mBAAmB,cAAc,MAAM,CAAC,EAAE,EAAE,CAAC;QAEpE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CACZ;gBACE,SAAS,EAAE;oBACT,GAAG,EAAE,SAAS,CAAC,GAAG;oBAClB,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;iBACrB;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,UAAU,CAAC,eAAe;wBAChC,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;4BAChC,CAAC,CAAC,UAAU;4BACZ,CAAC,CAAC,MAAM;iBACX;gBACD,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW;aACZ,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CACN,KAAK,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,OAAO,GAAG,CACxE,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEzD,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;CACF"}

package/dist/apps/signstack-cli/src/lib/safe-path.d.ts

@@ -0,0 +1,28 @@
+/** Reason why a path resolution was rejected */
+export type SafePathFailureReason = 'traversal' | 'not_found' | 'symlink_escape' | 'resolve_error';
+export interface SafePathSuccess {
+    valid: true;
+    realPath: string;
+}
+export interface SafePathFailure {
+    valid: false;
+    reason: SafePathFailureReason;
+    /** Underlying error message when reason is 'resolve_error'. */
+    error?: string;
+}
+export type SafePathResult = SafePathSuccess | SafePathFailure;
+/**
+ * Resolve a relative file path and verify it stays within the base directory.
+ *
+ * Performs three security checks:
+ * 1. String-based containment — catches `../..` traversal before touching the filesystem.
+ * 2. File existence — the file must actually exist.
+ * 3. Symlink resolution — `realpathSync` resolves symlinks, then the real path is
+ *    re-checked against the real base directory to prevent symlink-based traversal.
+ *
+ * @param baseDir      Absolute path to the allowed base directory (should end with `sep`).
+ * @param relativePath The (potentially untrusted) relative path to resolve.
+ * @returns            A discriminated union indicating success (with the real path) or
+ *                     failure (with a reason code).
+ */
+export declare function safeResolvePath(baseDir: string, relativePath: string): SafePathResult;

package/dist/apps/signstack-cli/src/lib/safe-path.js

@@ -0,0 +1,44 @@
+import { existsSync, realpathSync } from 'node:fs';
+import { resolve, sep } from 'node:path';
+/**
+ * Resolve a relative file path and verify it stays within the base directory.
+ *
+ * Performs three security checks:
+ * 1. String-based containment — catches `../..` traversal before touching the filesystem.
+ * 2. File existence — the file must actually exist.
+ * 3. Symlink resolution — `realpathSync` resolves symlinks, then the real path is
+ *    re-checked against the real base directory to prevent symlink-based traversal.
+ *
+ * @param baseDir      Absolute path to the allowed base directory (should end with `sep`).
+ * @param relativePath The (potentially untrusted) relative path to resolve.
+ * @returns            A discriminated union indicating success (with the real path) or
+ *                     failure (with a reason code).
+ */
+export function safeResolvePath(baseDir, relativePath) {
+    const resolvedPath = resolve(baseDir, relativePath);
+    // Check 1: string-based containment (catches ../.. traversal)
+    if (!resolvedPath.startsWith(baseDir)) {
+        return { valid: false, reason: 'traversal' };
+    }
+    // Check 2: file must exist to resolve symlinks
+    if (!existsSync(resolvedPath)) {
+        return { valid: false, reason: 'not_found' };
+    }
+    // Check 3: resolve symlinks and verify the real path is still contained
+    try {
+        const realPath = realpathSync(resolvedPath);
+        const normalizedBase = baseDir.endsWith(sep)
+            ? baseDir.slice(0, -1)
+            : baseDir;
+        const realBaseDir = realpathSync(normalizedBase) + sep;
+        if (!realPath.startsWith(realBaseDir)) {
+            return { valid: false, reason: 'symlink_escape' };
+        }
+        return { valid: true, realPath };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { valid: false, reason: 'resolve_error', error: message };
+    }
+}
+//# sourceMappingURL=safe-path.js.map

package/dist/apps/signstack-cli/src/lib/safe-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-path.js","sourceRoot":"","sources":["../../../../../src/lib/safe-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAuBzC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,YAAoB;IAEpB,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAEpD,8DAA8D;IAC9D,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC,CAAC,OAAO,CAAC;QACZ,MAAM,WAAW,GAAG,YAAY,CAAC,cAAc,CAAC,GAAG,GAAG,CAAC;QAEvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACpD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACnE,CAAC;AACH,CAAC"}

package/dist/apps/signstack-cli/src/lib/scenario-file.d.ts

@@ -0,0 +1,35 @@
+import type { ScenarioEntity } from '@signstack/base';
+/**
+ * Load a specific scenario by key from the contract's scenarios/ folder.
+ * Returns null if the file doesn't exist.
+ */
+export declare function loadScenario(contractDir: string, scenarioKey: string): ScenarioEntity[] | null;
+/**
+ * Load the default scenario (first alphabetically) from the contract's scenarios/ folder.
+ * Returns null if no scenarios/ folder or no .json files exist.
+ */
+export declare function loadDefaultScenario(contractDir: string): {
+    key: string;
+    entities: ScenarioEntity[];
+} | null;
+/**
+ * Save multiple scenarios to the contract's scenarios/ folder.
+ * Each scenario is written as <snake_case_name>.json.
+ */
+export declare function saveScenarios(contractDir: string, scenarios: Array<{
+    name: string;
+    entities: ScenarioEntity[];
+}>): void;
+/**
+ * List available scenario keys (filenames without .json) in the contract's scenarios/ folder.
+ */
+export declare function listScenarioKeys(contractDir: string): string[];
+/**
+ * Check if a scenario value looks like a file path (vs a key).
+ */
+export declare function isScenarioFilePath(value: string): boolean;
+/**
+ * Load scenario entities from a direct file path.
+ */
+export declare function loadScenarioFromPath(filePath: string): ScenarioEntity[];
+export declare function toSnakeCase(str: string): string;