@vizamodo/viza-cli 1.5.12 → 1.5.17

package/dist/src/commands/aws/rolesanywhere/bootstrap/bootstrap.js

@@ -32,9 +32,15 @@ export async function bootstrapAwsRolesAnywhereCommand(options) {
         infraKey: "aws",
         targetEnv: env,
         allowedTeams,
+        // Canonical CLI contract (explicit, non-magical)
+        selfHosted: options.selfHosted === true,
+        keepLog: options.removeLog !== true,
+        flowGates: {
+            secrets: true,
+        },
         payload: {}
     }, {
         status: options.status === true,
-        log: "hide",
+        log: "show",
     });
 }

package/dist/src/core/dispatch.js

@@ -19,6 +19,56 @@ function maybeRenderLog(result, policy) {
         renderLog(result.logBuffer, { status: result.status });
     }
 }
+function assertDispatchInputStrict(input) {
+    // Required top-level fields
+    if (!input.intent || typeof input.intent !== "string") {
+        throw new Error("dispatch_input_missing_intent");
+    }
+    if (!input.commandType || typeof input.commandType !== "string") {
+        throw new Error("dispatch_input_missing_commandType");
+    }
+    if (!input.infraKey || typeof input.infraKey !== "string") {
+        throw new Error("dispatch_input_missing_infraKey");
+    }
+    if (!("payload" in input)) {
+        throw new Error("dispatch_input_missing_payload");
+    }
+    if (typeof input.payload !== "object" ||
+        input.payload === null ||
+        Array.isArray(input.payload)) {
+        throw new Error("dispatch_input_invalid_payload");
+    }
+    // runnerLabel must be explicit
+    if (!input.runnerLabel || (input.runnerLabel !== "native" && input.runnerLabel !== "selfhosted")) {
+        throw new Error("dispatch_input_invalid_runnerLabel");
+    }
+    // keepLog must be boolean if present
+    if ("keepLog" in input && typeof input.keepLog !== "boolean") {
+        throw new Error("dispatch_input_invalid_keepLog");
+    }
+    // flowGates validation (no undefined allowed)
+    if ("flowGates" in input) {
+        if (input.flowGates === undefined || input.flowGates === null) {
+            throw new Error("dispatch_input_invalid_flowGates");
+        }
+        if (typeof input.flowGates !== "object") {
+            throw new Error("dispatch_input_invalid_flowGates");
+        }
+        if ("secrets" in input.flowGates && typeof input.flowGates.secrets !== "boolean") {
+            throw new Error("dispatch_input_invalid_flowGates_secrets");
+        }
+        if ("encVars" in input.flowGates && typeof input.flowGates.encVars !== "boolean") {
+            throw new Error("dispatch_input_invalid_flowGates_encVars");
+        }
+    }
+    // Final hard check: JSON round-trip must still work
+    try {
+        JSON.parse(JSON.stringify(input));
+    }
+    catch {
+        throw new Error("dispatch_input_not_json_roundtrip_safe");
+    }
+}
 async function dispatchIntent(input, mode = "dispatch") {
     const dispatchInput = {
         intent: input.intent,
@@ -29,6 +79,8 @@ async function dispatchIntent(input, mode = "dispatch") {
         keepLog: input.keepLog,
         flowGates: input.flowGates,
     };
+    // CLI fail-fast: never dispatch dirty envelope
+    assertDispatchInputStrict(dispatchInput);
     const handle = await dispatcherDispatch(dispatchInput, {
         auth: {
             targetEnv: input.targetEnv,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizamodo/viza-cli",
-  "version": "1.5.12",
+  "version": "1.5.17",
   "type": "module",
   "description": "Viza unified command line interface",
   "bin": {