@uipath/maestro-builder-sdk 6.18.2 → 6.18.3

package/dist/api-index.md

@@ -204,7 +204,7 @@ could hand you spans for a version you do not have.
 | `ran` | function | `dist/core/expr.d.ts:95-141` | Expressions and types | Did this step run? |
 | `rawNode` | function | `dist/core/node-classes.d.ts:180-242` | Supporting types | Place a node this SDK has no factory for, carrying its definition verbatim (`uipath.exotic.thing@2.1` and the manifest… |
 | `RawReference` | type | `dist/core/lookups.d.ts:190-198` | Supporting types |  |
-| `refuseLookupToken` | function | `dist/core/lookups.d.ts:207-226` | Generated descriptors | Refuse a lookup token where the family cannot resolve one. |
+| `refuseLookupToken` | function | `dist/core/lookups.d.ts:207-223` | Generated descriptors | Refuse a lookup token where the family cannot resolve one. |
 | `RemoteA2aToolRef` | interface | `dist/core/actions.d.ts:1745-1765` | Supporting types | A remote A2A (agent-to-agent) endpoint the agent may delegate to. |
 | `resolvedValue` | function | `dist/core/lookups.d.ts:172-179` | Generated descriptors | The recorded id for a token, or `undefined`. |
 | `ReturnFieldType` | type | `dist/core/actions.d.ts:1317-1334` | Supporting types | A JSON-schema-ish type for one field of a step's declared `returns`. |

package/dist/case/check.d.ts

@@ -21,17 +21,17 @@ export interface Diagnostic {
  * The connector-library facts Case `check` reads, from the same `Library`
  * instance `compile` serializes against (`caseCheckOpts` in `./cli-library.ts`).
  *
- * Deliberately NARROWER than Flow's and BPMN's bag. An error here must be a
- * refusal Case `compile` actually makes, and Case `serialize` resolves the
- * connector operation and the event (`library.resolve` / `resolveEvent`) but does
- * not validate connector inputs, binding labels or BYOA. Those rules stay off
- * until Case compile enforces them; passing them here would refuse sources that
- * compile accepts.
+ * Deliberately NARROWER than Flow's bag. An error here must be a refusal Case
+ * `compile` actually makes. Case `serialize` resolves the connector operation and
+ * the event, and validates a connector task's inputs and resolves its lookups
+ * through the shared `buildConnectorInputs` (`connectorInputs`, `lookups`,
+ * `resolutions`). It does not check binding labels or BYOA, so those hooks stay
+ * off until Case compile enforces them.
  *
  * Every hook fails open: without a library, `check` stays a pure function of the
  * built model.
  */
-export type CaseCheckOpts = Pick<ConnectorCheckOpts, 'connectorResolveError' | 'schemaReadiness'> & {
+export type CaseCheckOpts = Pick<ConnectorCheckOpts, 'connectorResolveError' | 'connectorInputs' | 'lookups' | 'resolutions' | 'schemaReadiness'> & {
     /**
      * What Case `compile` would refuse an event subscription with, or `undefined`
      * when it resolves: `EVENT_UNKNOWN` (the event is not in the library, or

package/dist/case/check.js

@@ -2,7 +2,7 @@ import { types } from '../core/expr.js';
 import { authoredCaseVersion, CASE_FORMAT_PROFILE, CASE_SCHEMA_VERSIONS } from './format-profile.js';
 import { schemaVersionRefusal } from '../schema-version.js';
 import { caseJsonPreservation, caseJsonPreservationErrors } from './preserve.js';
-import { EQUALS_EXPR_DIALECT, checkConnectorContract, checkConnectorSchema, } from '../core/connector-checks.js';
+import { EQUALS_EXPR_DIALECT, checkConnectorContract, checkConnectorLookups, checkConnectorSchema, } from '../core/connector-checks.js';
 const TYPE_NAMES = new Set(Object.values(types));
 // audit-case-coverage: rule-slot table start
 // This runtime table must equal the committed matrix's rejected cells. The audit
@@ -310,6 +310,7 @@ function checkLibraryConnectors(built, opts, diags) {
             if (t.kind === 'connector' && t.connector) {
                 const where = `Connector task "${t.name}"`;
                 const spec = t.connector;
+                checkConnectorLookups(where, spec, opts, EQUALS_EXPR_DIALECT, reporter(where, t.name));
                 checkConnectorSchema(where, spec, opts, EQUALS_EXPR_DIALECT, reporter(where, t.name));
                 checkConnectorContract(where, spec, opts, reporter(where, t.name));
             }

package/dist/case/cli-library.d.ts

@@ -5,9 +5,10 @@ import type { CaseCheckOpts } from './check.js';
  *
  * Only the hooks for refusals Case `compile` makes (see {@link CaseCheckOpts}):
  * the operation and event resolution (the event through `resolveCaseSubscription`,
- * compile's own call), and the schema-readiness warnings. The
- * field-contract, binding-label and BYOA hooks of the shared bag are left out,
- * because Case `serialize` does not enforce them.
+ * compile's own call), a connector task's field contract and lookups (the
+ * `=`-expression validator Case compile runs), and the schema-readiness warnings.
+ * The binding-label and BYOA hooks of the shared bag are left out, because Case
+ * `serialize` does not enforce them.
  *
  * @param library - The library `openCliLibrary` returned, or `undefined`.
  * @returns The options for Case `check`.

package/dist/case/cli-library.js

@@ -14,9 +14,10 @@ import { EVENT_GENERIC_NO_OBJECT, GenericEventNoObjectError, resolveCaseSubscrip
  *
  * Only the hooks for refusals Case `compile` makes (see {@link CaseCheckOpts}):
  * the operation and event resolution (the event through `resolveCaseSubscription`,
- * compile's own call), and the schema-readiness warnings. The
- * field-contract, binding-label and BYOA hooks of the shared bag are left out,
- * because Case `serialize` does not enforce them.
+ * compile's own call), a connector task's field contract and lookups (the
+ * `=`-expression validator Case compile runs), and the schema-readiness warnings.
+ * The binding-label and BYOA hooks of the shared bag are left out, because Case
+ * `serialize` does not enforce them.
  *
  * @param library - The library `openCliLibrary` returned, or `undefined`.
  * @returns The options for Case `check`.
@@ -27,6 +28,9 @@ export function caseCheckOpts(library) {
     const shared = connectorCheckOpts(library);
     return {
         connectorResolveError: shared.connectorResolveError,
+        connectorInputs: shared.connectorInputs,
+        lookups: shared.lookups,
+        resolutions: shared.resolutions,
         schemaReadiness: shared.schemaReadiness,
         subscriptionError: (kind, sub) => {
             try {

package/dist/case/serialize.js

@@ -9,7 +9,8 @@
  * name) are resolved here to the generated ids.
  */
 import { IdGen } from './ids.js';
-import { transportHttpMethod } from '../core/connector-inputs.js';
+import { buildConnectorInputs, nestConnectorBody, transportHttpMethod } from '../core/connector-inputs.js';
+import { EQUALS_EXPR_DIALECT } from '../core/connector-checks.js';
 import { refuseLookupToken } from '../core/lookups.js';
 import { resolveCaseSubscription } from './subscription.js';
 import { CASE_FORMAT_PROFILE, CASE_SCHEMA_VERSIONS } from './format-profile.js';
@@ -1083,7 +1084,6 @@ function connectorTaskData(spec, resolver, elementId) {
         throw new Error(`connector task needs the connector library — pass { library } to serialize or use uip maestro case compile --library.`);
     const rc = resolver.library.resolve(spec.key, spec.action, spec.version, spec.object);
     const op = rc.entry.operation ?? {};
-    const params = Array.isArray(op.parameters) ? op.parameters : [];
     const context = [
         io('connectorKey', 'string', { value: rc.connectorKey }),
     ];
@@ -1097,31 +1097,31 @@ function connectorTaskData(spec, resolver, elementId) {
     if (folderRef)
         context.push(io('folderKey', 'string', { value: `=bindings.${folderRef.id}` }));
     context.push(io('objectName', 'string', { value: op.objectName ?? spec.action }), io('method', 'string', { value: transportHttpMethod(rc.httpMethod) }), io('path', 'string', { value: rc.endpoint }), io('metadata', 'json', { body: connectorMetadata(rc, op) }));
-    // inputs: split declared parameters into path/query slots; the rest is the body.
+    // inputs: the shared validator (`core/connector-inputs.ts`), the one Flow's and
+    // BPMN's serializers and every family's `check` run. It refuses a missing
+    // required field, an unknown or mistyped input, and swaps a `lookup()` token for
+    // the id `registry prepare --resolve` recorded (refusing one nobody recorded).
+    // Case used to split the inputs itself: an unknown name went to the body
+    // unchecked, and every token was refused, because nothing here read
+    // `resolutions.json` (#1034, #1036).
     //
-    // Guard BEFORE the split. These values are emitted verbatim, so an unresolved
-    // lookup ships as `{"__lookup": …}` where the connector wants an id — verified
-    // by probe before this existed. Only Flow reads resolutions.json.
-    for (const [name, value] of Object.entries(spec.inputs ?? {})) {
-        refuseLookupToken(value, 'case', name);
-    }
-    const pathParameters = {};
-    const queryParameters = {};
-    const body = { ...spec.inputs };
-    for (const p of params) {
-        const name = String(p.name ?? '');
-        if (!(name in body))
-            continue;
-        const camel = toCamel(name);
-        if (p.type === 'path') {
-            pathParameters[camel] = body[name];
-            delete body[name];
-        }
-        else if (p.type === 'query') {
-            queryParameters[camel] = body[name];
-            delete body[name];
-        }
-    }
+    // The ROUTING is the library's (a field's location is a property of the
+    // operation); the SPELLING of the path/query keys is Case's own: the Case
+    // designer camelCases them (`send_as` → `sendAs`, see
+    // `fixtures/execute-connector-activity.sample.json`), and the body is nested.
+    const slots = buildConnectorInputs(rc, spec.inputs ?? {}, {
+        dialect: EQUALS_EXPR_DIALECT,
+        resolutions: resolver.library.lookupResolutions,
+        lookups: resolver.library.lookupSpecs(spec.key, spec.action, spec.version, spec.object),
+    });
+    const camelKeys = (slot) => Object.fromEntries(Object.entries(slot ?? {}).map(([name, value]) => [toCamel(name), value]));
+    const pathParameters = camelKeys(slots.pathParameters);
+    const queryParameters = camelKeys(slots.queryParameters);
+    // Case has no multipart wire: a filled file part stays in the body, where it
+    // has always gone.
+    const parts = Object.fromEntries((slots.multipartParameters ?? [])
+        .filter((part) => part.value !== undefined).map((part) => [part.name, part.value]));
+    const body = nestConnectorBody({ ...(slots.bodyParameters ?? {}), ...parts });
     const inputs = [
         ioSlot('pathParameters', pathParameters, `${elementId}`),
         ioSlot('queryParameters', queryParameters, `${elementId}`),

package/dist/core/lookups.d.ts

@@ -207,16 +207,13 @@ export declare function lookupSpecOf(reference: RawReference, invariant?: Readon
 /**
  * Refuse a lookup token where the family cannot resolve one.
  *
- * `lookup()` is a FLOW surface today: only `serialize.ts` substitutes a
- * recorded resolution, and only `check.ts` reports an unresolved one. Case and
- * BPMN pass connector input values straight into their emitted payload, so a
- * token reaching either one is embedded verbatim — a `.case` carrying
- * `{"__lookup": {…}}` where the connector expects an id.
- *
- * That is silent wrongness, which is the failure this whole surface exists to
- * remove; emitting it from the tool that removes it would be the worst possible
- * outcome. Until Case and BPMN read `resolutions.json` too, they refuse the
- * token and say so.
+ * Connector-activity inputs resolve their lookups in every family through
+ * `buildConnectorInputs` (`core/connector-inputs.ts`), which reads
+ * `connectors-local/resolutions.json`. This guard is for the sites that do not
+ * go through it yet: a Case event subscription's `where`, whose values Case
+ * copies into its emitted payload verbatim. A token reaching one would be
+ * embedded as `{"__lookup": {…}}` where the connector expects an id, which is
+ * silent wrongness, so it is refused instead.
  *
  * @param value - A connector input value.
  * @param family - The authoring family, for the message.

package/dist/core/lookups.js

@@ -261,16 +261,13 @@ function byAlias(lookupName) {
 /**
  * Refuse a lookup token where the family cannot resolve one.
  *
- * `lookup()` is a FLOW surface today: only `serialize.ts` substitutes a
- * recorded resolution, and only `check.ts` reports an unresolved one. Case and
- * BPMN pass connector input values straight into their emitted payload, so a
- * token reaching either one is embedded verbatim — a `.case` carrying
- * `{"__lookup": {…}}` where the connector expects an id.
- *
- * That is silent wrongness, which is the failure this whole surface exists to
- * remove; emitting it from the tool that removes it would be the worst possible
- * outcome. Until Case and BPMN read `resolutions.json` too, they refuse the
- * token and say so.
+ * Connector-activity inputs resolve their lookups in every family through
+ * `buildConnectorInputs` (`core/connector-inputs.ts`), which reads
+ * `connectors-local/resolutions.json`. This guard is for the sites that do not
+ * go through it yet: a Case event subscription's `where`, whose values Case
+ * copies into its emitted payload verbatim. A token reaching one would be
+ * embedded as `{"__lookup": {…}}` where the connector expects an id, which is
+ * silent wrongness, so it is refused instead.
  *
  * @param value - A connector input value.
  * @param family - The authoring family, for the message.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uipath/maestro-builder-sdk",
-  "version": "6.18.2",
+  "version": "6.18.3",
   "description": "Build UiPath Flow, Case, and BPMN artifacts by writing TypeScript.",
   "license": "MIT",
   "homepage": "https://docs.uipath.com/maestro",
@@ -92,5 +92,5 @@
     "@types/node": "^22.7.0",
     "esbuild": "^0.28.1"
   },
-  "gitref": "a1a9df938c60a4e31cc9025ec9664d34f41aa799"
+  "gitref": "e2e0a41da39b08bb97a105483f436232f0e36c2e"
 }