@uipath/maestro-builder-sdk 6.47.2 → 6.47.3

package/dist/bpmn/serialize.js

@@ -20,6 +20,8 @@ import { createConnectorEvent, createExternalTask, intsvcOutputVar } from './int
 import { createExtensionPayload, createTypedNode, rowDeclaration, typedNodeOutputVar, verbatimOutputRows } from './typed-node.js';
 import { connectorOutputVars, typedNodeDeclaredVars } from './declared-vars.js';
 import { defaultEntryPointId } from './entry-point-id.js';
+import { parseXmlRanges } from './xml-ranges.js';
+import { ownEntry } from '../core/own-entry.js';
 const require = createRequire(import.meta.url);
 const uipathDescriptor = require('./uipath-moddle.v1.json');
 const NS = {
@@ -181,6 +183,22 @@ export async function serialize(built, opts = {}) {
  * of the trade. Revisit if the graders learn to treat absence as interrupting.
  */
 export function finalizeBpmnXml(xml) {
+    return jsonInputBodiesAsCdata(outsideCdata(xml, normalizeMarkup));
+}
+/**
+ * Apply `edit` to the markup only — never inside a CDATA section or a comment.
+ *
+ * The passes below are patterns over the text, and a CDATA payload is author data: a
+ * JSON value holding the literal `&#60;` or `<bpmn:boundaryEvent>` must come out of a
+ * second `finalizeBpmnXml` (or `tidy`) byte for byte, not rewritten as markup.
+ */
+function outsideCdata(xml, edit) {
+    return xml
+        .split(/(<!\[CDATA\[[\s\S]*?\]\]>|<!--[\s\S]*?-->)/)
+        .map((part, i) => (i % 2 === 1 ? part : edit(part)))
+        .join('');
+}
+function normalizeMarkup(xml) {
     return (xml
         .replace(/<bpmn:boundaryEvent\b(?![^>]*\bcancelActivity=)([^>]*?)(\/?)>/g, '<bpmn:boundaryEvent cancelActivity="true"$1$2>')
         // Same reason, other schema default: a PARALLEL multi-instance marker is
@@ -206,6 +224,81 @@ export function finalizeBpmnXml(xml) {
         .replace(/&#(?:34|x22);/g, '&quot;')
         .replace(/&#(?:39|x27);/g, '&apos;'));
 }
+/**
+ * Rewrite every json `uipath:input` text body as CDATA — the one body shape the cloud
+ * engine reads.
+ *
+ * `PO.BpmnEngine`'s `UiPathExtensionsProvider` (`ExtractContextInputs`,
+ * `ExtractActivityInputs`) takes an input's value from an `XCData` child or a `value`
+ * attribute and filters out any row with neither. moddle writes a body as entity-escaped
+ * TEXT, which is neither, so the engine silently dropped every json input the SDK
+ * authored: a script task ran with no `args` (`vars is not defined`), a connector task
+ * sent no body. `check`, `compile` and `uip maestro bpmn validate` all read text and
+ * CDATA alike, so nothing caught it before the run (#1390). Studio Web writes CDATA.
+ *
+ * moddle has no CDATA option for a body property, so this rewrites its output — by
+ * element range (`xml-ranges.ts`), not a pattern over the document. It runs LAST in
+ * `finalizeBpmnXml`, after the markup passes, which skip CDATA (`outsideCdata`), so no
+ * pass reaches into a payload this writes. An input whose content is not plain text (already CDATA,
+ * as `tidy` may hand it, or empty) is left alone, so this is idempotent.
+ */
+function jsonInputBodiesAsCdata(xml) {
+    const bodies = [];
+    const collect = (nodes) => {
+        for (const node of nodes) {
+            if (node.name === 'uipath:input' && node.attributes.type === 'json')
+                bodies.push(node);
+            else
+                collect(node.children);
+        }
+    };
+    collect(parseXmlRanges(xml));
+    let out = xml;
+    // Splice from the end so the earlier offsets stay valid.
+    for (const input of bodies.sort((a, b) => b.innerStart - a.innerStart)) {
+        const text = xml.slice(input.innerStart, input.innerEnd);
+        if (text === '' || text.includes('<'))
+            continue;
+        out = out.slice(0, input.innerStart) + cdata(input.attributes.name ?? '', decodeXmlText(text)) + out.slice(input.innerEnd);
+    }
+    return out;
+}
+const NAMED_ENTITY = { lt: '<', gt: '>', amp: '&', quot: '"', apos: "'" };
+/** Decode XML character data in one pass, so `&amp;lt;` stays the text `&lt;`. */
+function decodeXmlText(text) {
+    return text.replace(/&(?:#(\d+)|#x([0-9a-fA-F]+)|(lt|gt|amp|quot|apos));/g, (_, dec, hex, named) => dec !== undefined
+        ? String.fromCodePoint(Number(dec))
+        : hex !== undefined
+            ? String.fromCodePoint(parseInt(hex, 16))
+            : ownEntry(NAMED_ENTITY, named));
+}
+/**
+ * ONE CDATA section holding `text`'s value.
+ *
+ * A `]]>` cannot sit in a CDATA section, and splitting it across two is no answer: the
+ * engine reads the FIRST `XCData` child only (`OfType<XCData>().FirstOrDefault()`), so it
+ * would get the JSON cut off at the split. In valid JSON a `]]>` can only sit inside a
+ * string (`>` is not JSON outside one), so its `>` is written as the escape `\u003e` —
+ * different bytes, the same value. A body that is not JSON has no such escape and could
+ * only reach the engine truncated, so it is refused.
+ */
+function cdata(name, text) {
+    if (!text.includes(']]>'))
+        return `<![CDATA[${text}]]>`;
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`json input "${name}" contains "]]>" and is not valid JSON, so it cannot be written as the single CDATA section the engine reads.`);
+    }
+    const escaped = text.replaceAll(']]>', ']]\\u003e');
+    // Holds by the argument above; checked because a wrong payload here would be silent.
+    if (JSON.stringify(JSON.parse(escaped)) !== JSON.stringify(value)) {
+        throw new Error(`json input "${name}": escaping "]]>" changed its value.`);
+    }
+    return `<![CDATA[${escaped}]]>`;
+}
 export function processId(id) {
     return /^[A-Za-z_][\w.-]*$/.test(id) ? id : 'Process_1';
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uipath/maestro-builder-sdk",
-  "version": "6.47.2",
+  "version": "6.47.3",
   "description": "Build UiPath Flow, Case, and BPMN artifacts by writing TypeScript.",
   "license": "MIT",
   "homepage": "https://docs.uipath.com/maestro",
@@ -93,5 +93,5 @@
     "@types/node": "^22.7.0",
     "esbuild": "^0.28.1"
   },
-  "gitref": "16b96902c3da22af8e0fc3cfc8a53edcc832f04c"
+  "gitref": "fc36fa72238f803ed2de5a02dc8a42f6c5d3305d"
 }