@walkeros/cli 4.8.1 → 4.8.2

package/dist/validate.d.ts

@@ -26,7 +26,7 @@ type ValidateOptions = z.infer<typeof ValidateOptionsSchema>;
  * Every code an error, warning or skip of `validate` can carry. Agents and
  * tests branch on these, never on message text.
  */
-declare const VALIDATE_CODES: readonly ["INPUT_ERROR", "SERIALIZATION_ERROR", "OPTION_NOT_APPLICABLE", "FLOW_NOT_FOUND", "ENTRY_NOT_FOUND", "AMBIGUOUS_ENTRY", "UNSUPPORTED_SECTION", "INVALID_PATH", "SCHEMA_VALIDATION", "CONFIG_WARNING", "EMPTY_FLOWS", "UNKNOWN_KEY", "CONFLICT", "MISSING_PACKAGE", "OBSOLETE_CODE_STRING", "INVALID_IMPORT", "INVALID_CODE_SHAPE", "PACKAGE_VERSION_MISSING", "DEPRECATED_PACKAGE", "UNKNOWN_ROUTE_TARGET", "ROUTE_DEAD_CODE", "ROUTE_EMPTY_MANY", "ROUTE_SINGLE_MANY", "ROUTE_FIRST_MATCH", "INCOMPATIBLE_EXAMPLES", "EXAMPLES_INCOMPLETE", "CONTRACT_VIOLATION", "MAPPING_DOT_KEY", "FLOW_REF_WARNING", "FLOW_CYCLE", "VAR_CYCLE", "INVALID_COMPONENT_NAME", "INVALID_REFERENCE", "STORE_REFERENCE_NOT_FOUND", "STATE_STORE_UNKNOWN", "STATE_STORE_FILE", "TRANSFORMER_MAPPING_NO_OP", "UNRESOLVED_REFERENCE", "MISSING_ENV", "WEB_SECRET_REF", "UNRESOLVED_CONTRACT", "ENTRY_SCHEMA", "NO_CONTRACT_SECTION", "INVALID_CONTRACT", "FLAT_CONTRACT_SHAPE", "INVALID_CONTRACT_ENTRY", "UNKNOWN_CONTRACT_KEY", "INVALID_TAGGING", "INVALID_SCHEMA", "INVALID_EXTENDS", "INVALID_SECTION", "INVALID_EVENTS", "CIRCULAR_EXTENDS", "INVALID_ENTITY_KEY", "INVALID_ENTITY", "INVALID_ACTION_KEY", "INVALID_SCHEMA_ENTRY", "NOT_AN_OBJECT", "MISSING_EVENT_NAME", "EMPTY_EVENT_NAME", "INVALID_EVENT_NAME", "INVALID_MAPPING_TYPE", "INVALID_EVENT_PATTERN", "INVALID_RULE_TYPE", "CATCH_ALL_NOT_LAST", "GATED_BY_ERRORS", "CONTRACT_NOT_STATIC", "NO_PACKAGE", "NO_SETTINGS_SCHEMA", "SCHEMA_UNAVAILABLE"];
+declare const VALIDATE_CODES: readonly ["INPUT_ERROR", "SERIALIZATION_ERROR", "OPTION_NOT_APPLICABLE", "FLOW_NOT_FOUND", "ENTRY_NOT_FOUND", "AMBIGUOUS_ENTRY", "UNSUPPORTED_SECTION", "INVALID_PATH", "SCHEMA_VALIDATION", "CONFIG_WARNING", "EMPTY_FLOWS", "UNKNOWN_KEY", "CONFLICT", "MISSING_PACKAGE", "OBSOLETE_CODE_STRING", "INVALID_IMPORT", "INVALID_CODE_SHAPE", "PACKAGE_VERSION_MISSING", "DEPRECATED_PACKAGE", "UNKNOWN_ROUTE_TARGET", "ROUTE_DEAD_CODE", "ROUTE_EMPTY_MANY", "ROUTE_SINGLE_MANY", "ROUTE_FIRST_MATCH", "INCOMPATIBLE_EXAMPLES", "EXAMPLES_INCOMPLETE", "CONTRACT_VIOLATION", "MAPPING_DOT_KEY", "FLOW_REF_WARNING", "WEB_LOGGER_FORMAT", "FLOW_CYCLE", "VAR_CYCLE", "INVALID_COMPONENT_NAME", "INVALID_REFERENCE", "STORE_REFERENCE_NOT_FOUND", "STATE_STORE_UNKNOWN", "STATE_STORE_FILE", "MAPPING_NO_OP", "MAPPING_VALUE_NO_OPERATOR", "MAPPING_VALUE_PRODUCERS", "BATCH_WITHOUT_PUSH_BATCH", "MALFORMED_REFERENCE", "UNRESOLVED_REFERENCE", "MISSING_ENV", "WEB_SECRET_REF", "UNRESOLVED_CONTRACT", "ENTRY_SCHEMA", "NO_CONTRACT_SECTION", "INVALID_CONTRACT", "FLAT_CONTRACT_SHAPE", "INVALID_CONTRACT_ENTRY", "UNKNOWN_CONTRACT_KEY", "INVALID_TAGGING", "INVALID_SCHEMA", "INVALID_EXTENDS", "INVALID_EVENTS", "CIRCULAR_EXTENDS", "INVALID_ENTITY_KEY", "INVALID_ENTITY", "INVALID_ACTION_KEY", "INVALID_SCHEMA_ENTRY", "NOT_AN_OBJECT", "MISSING_EVENT_NAME", "EMPTY_EVENT_NAME", "INVALID_EVENT_NAME", "INVALID_MAPPING_TYPE", "INVALID_EVENT_PATTERN", "INVALID_RULE_TYPE", "CATCH_ALL_NOT_LAST", "GATED_BY_ERRORS", "CONTRACT_NOT_STATIC", "NO_PACKAGE", "NO_SETTINGS_SCHEMA", "SCHEMA_UNAVAILABLE"];
 type ValidateCode = (typeof VALIDATE_CODES)[number];
 /**
  * Named checks a run includes (`details.scope.checks`). `file:` checks run

package/dist/validate.js

@@ -133,34 +133,6 @@ import fs4 from "fs-extra";
 // src/core/stdin.ts
 import fs5 from "fs-extra";
 
-// src/core/oauth-client.ts
-import { z as z2 } from "zod";
-
-// src/core/app-fetch.ts
-import { z } from "zod";
-var AppErrorSchema = z.object({
-  error: z.object({ message: z.string().min(1) })
-});
-
-// src/core/oauth-client.ts
-var DeviceAuthorizationSchema = z2.object({
-  device_code: z2.string().min(1),
-  user_code: z2.string().min(1),
-  verification_uri: z2.string().min(1),
-  verification_uri_complete: z2.string().min(1).optional(),
-  expires_in: z2.number().int().nonnegative(),
-  interval: z2.number().int().nonnegative()
-});
-var TokenSchema = z2.object({
-  access_token: z2.string().min(1),
-  expires_in: z2.number().int().nonnegative(),
-  refresh_token: z2.string().min(1).optional()
-});
-var ErrorSchema = z2.object({
-  error: z2.string().min(1),
-  error_description: z2.string().optional()
-});
-
 // src/core/event-validation.ts
 import { schemas } from "@walkeros/core/dev";
 var { PartialEventSchema } = schemas;
@@ -256,6 +228,7 @@ var { safeParseConfig } = schemas2;
 // src/config/loader.ts
 import fs7 from "fs-extra";
 import { getFlowSettings, getPlatform } from "@walkeros/core";
+import { validateFlowStructure } from "@walkeros/core/dev";
 
 // src/core/content-digest.ts
 import { createHash } from "crypto";
@@ -265,16 +238,9 @@ import fs6 from "fs-extra";
 import { checkWindowCollector } from "@walkeros/core";
 
 // src/commands/validate/validators/contract.ts
-import { isObject as isObject2 } from "@walkeros/core";
+import { CONTRACT_RULE_KEYS, isObject as isObject2 } from "@walkeros/core";
+var KNOWN_KEYS = new Set(CONTRACT_RULE_KEYS);
 var SECTION_KEYS = ["globals", "context", "custom", "user", "consent"];
-var KNOWN_KEYS = /* @__PURE__ */ new Set([
-  "extend",
-  "tagging",
-  "description",
-  "events",
-  "schema",
-  ...SECTION_KEYS
-]);
 function validateContract(input) {
   const errors = [];
   const warnings = [];
@@ -315,7 +281,9 @@ function validateContract(input) {
     const keys = Object.keys(obj);
     const unknownKeys = keys.filter((k) => !KNOWN_KEYS.has(k));
     const hasKnownKey = keys.some((k) => KNOWN_KEYS.has(k));
-    const objectValuedUnknown = unknownKeys.filter((k) => isObject2(obj[k]));
+    const objectValuedUnknown = unknownKeys.filter(
+      (k) => isObject2(obj[k]) && !SECTION_KEYS.includes(k)
+    );
     if (!hasKnownKey && objectValuedUnknown.length > 0) {
       errors.push({
         path: name,
@@ -325,9 +293,9 @@ function validateContract(input) {
       continue;
     }
     for (const key of unknownKeys) {
-      warnings.push({
+      errors.push({
         path: `${name}.${key}`,
-        message: `Unknown contract key "${key}" is ignored`,
+        message: SECTION_KEYS.includes(key) ? `Contract section "${key}" is not enforced: the validate transformer reads only "events" and "schema". Put the rule into "schema" (a JSON Schema for the whole event), for example "schema": { "properties": { "${key}": { ... } } }.` : `Unknown contract key "${key}" is not supported. Known keys: ${[...KNOWN_KEYS].join(", ")}.`,
         code: "UNKNOWN_CONTRACT_KEY"
       });
     }
@@ -361,18 +329,6 @@ function validateContract(input) {
         });
       }
     }
-    for (const key of SECTION_KEYS) {
-      if (key in obj) {
-        if (typeof obj[key] !== "object" || obj[key] === null) {
-          errors.push({
-            path: `${name}.${key}`,
-            message: `Section "${key}" must be a JSON Schema object`,
-            value: obj[key],
-            code: "INVALID_SECTION"
-          });
-        }
-      }
-    }
     if (obj.events !== void 0) {
       if (typeof obj.events !== "object" || obj.events === null) {
         errors.push({
@@ -484,9 +440,14 @@ import {
   isObject as isObject5,
   REF_CONTRACT,
   resolveContracts,
+  SECRET_MARKER_PREFIX as SECRET_MARKER_PREFIX2,
   validateStepEntry
 } from "@walkeros/core";
-import { schemas as schemas3, validateFlowStructure } from "@walkeros/core/dev";
+import {
+  checkStepKeys,
+  schemas as schemas3,
+  validateFlowStructure as validateFlowStructure2
+} from "@walkeros/core/dev";
 import {
   validateEventAgainstContract
 } from "@walkeros/transformer-validate";
@@ -736,7 +697,7 @@ function parsePackageSpec(spec) {
 }
 
 // src/commands/validate/validators/settings.ts
-var CLIENT_HEADER = "walkeros-cli/4.8.1";
+var CLIENT_HEADER = "walkeros-cli/4.8.2";
 function createSettingsContext(configDir) {
   return { configDir, cache: /* @__PURE__ */ new Map(), compiled: /* @__PURE__ */ new Map() };
 }
@@ -1051,7 +1012,9 @@ var { validateFlowConfig: validateFlowConfig2 } = schemas3;
 var DEPRECATED_PACKAGES = {
   "@walkeros/store-memory": "has been removed. Use the built-in cache by omitting cache.store, or remove the store declaration if it was only used as a cache target."
 };
-var OPEN_STEP_KINDS = [
+var STEP_KINDS = [
+  ["sources", "Source"],
+  ["transformers", "Transformer"],
   ["destinations", "Destination"],
   ["stores", "Store"]
 ];
@@ -1100,7 +1063,11 @@ async function validateFlowWithPackages(input, options = {}) {
     }
   }
   for (const outcome of await Promise.all(pending)) {
-    result.warnings.push(...outcome.findings);
+    for (const finding of outcome.findings) {
+      if (finding.keyword === "additionalProperties")
+        result.errors.push(finding);
+      else result.warnings.push(finding);
+    }
     run.skipped.push(...outcome.skipped);
     deferred.push(...outcome.deferred);
     if (outcome.checked) packages.push(outcome.checked);
@@ -1108,6 +1075,7 @@ async function validateFlowWithPackages(input, options = {}) {
   result.details.scope = describeScope(scope, run.checks);
   result.details.deferred = [...result.details.deferred ?? [], ...deferred];
   if (packages.length > 0) result.details.packages = packages;
+  result.valid = result.errors.length === 0;
   return result;
 }
 function runFlowChecks(input, options) {
@@ -1166,8 +1134,13 @@ function runFlowChecks(input, options) {
   for (const issue of coreResult.errors) {
     const path4 = issue.path || "root";
     if (!inScope(path4)) continue;
-    if (path4 === "contract" && contractErrors > 0) continue;
-    errors.push({ path: path4, message: issue.message, code: "SCHEMA_VALIDATION" });
+    if ((path4 === "contract" || path4.startsWith("contract.")) && contractErrors > 0)
+      continue;
+    errors.push({
+      path: path4,
+      message: issue.message,
+      code: issue.code ?? "SCHEMA_VALIDATION"
+    });
   }
   for (const issue of coreResult.warnings) {
     const path4 = issue.path || "root";
@@ -1201,20 +1174,13 @@ function runFlowChecks(input, options) {
         }
       }
     }
-    for (const [section, kind] of OPEN_STEP_KINDS) {
+    for (const [section, kind] of STEP_KINDS) {
       const steps = flowValue[section];
       if (!isObject5(steps)) continue;
       for (const [name, step] of Object.entries(steps)) {
         if (!isObject5(step)) continue;
         const at = `flows.${flowName}.${section}.${name}`;
-        for (const key of unknownStepKeys(step, kind)) {
-          warnings.push({
-            path: `${at}.${key}`,
-            message: `Unknown key "${key}" on ${kind} is ignored by the runtime`,
-            suggestion: "Remove the key, or move it to where it belongs.",
-            code: "UNKNOWN_KEY"
-          });
-        }
+        errors.push(...checkStepKeys(step, kind, at));
         const pkg = step.package;
         if (typeof pkg === "string" && pkg in DEPRECATED_PACKAGES) {
           warnings.push({
@@ -1225,6 +1191,7 @@ function runFlowChecks(input, options) {
         }
       }
     }
+    checkWebLoggerFormat(flowName, flowValue, errors);
   }
   if (flows) {
     details.flowNames = allFlows;
@@ -1288,7 +1255,7 @@ function runFlowChecks(input, options) {
     }
   };
   perFlow(["flow:structure"], (name, flow, file) => {
-    const structure = validateFlowStructure({
+    const structure = validateFlowStructure2({
       ...file,
       flows: { [name]: flow }
     });
@@ -1396,16 +1363,31 @@ function checkResolvedWindowCollector(name, raw, flow, errors, deferred) {
     code: "SCHEMA_VALIDATION"
   });
 }
-function unknownStepKeys(step, kind) {
-  const unknown = [];
-  const rest = { ...step };
-  for (; ; ) {
-    const verdict = validateStepEntry(rest, kind);
-    if (verdict.code !== "UNKNOWN_KEY" || verdict.key === void 0) break;
-    unknown.push(verdict.key);
-    Reflect.deleteProperty(rest, verdict.key);
+function checkWebLoggerFormat(flowName, flow, errors) {
+  if (!isObject5(flow.config) || flow.config.platform !== "web") return;
+  const at = `flows.${flowName}`;
+  const loggers = [];
+  if (isObject5(flow.collector))
+    loggers.push([`${at}.collector.logger`, flow.collector.logger]);
+  for (const [section] of STEP_KINDS) {
+    const steps = flow[section];
+    if (!isObject5(steps)) continue;
+    for (const [name, step] of Object.entries(steps)) {
+      if (isObject5(step) && isObject5(step.config))
+        loggers.push([
+          `${at}.${section}.${name}.config.logger`,
+          step.config.logger
+        ]);
+    }
+  }
+  for (const [path4, logger] of loggers) {
+    if (!isObject5(logger) || logger.format === void 0) continue;
+    errors.push({
+      path: `${path4}.format`,
+      message: "logger.format applies to server flows only: a web flow logs to the browser console, which has no output format. Remove it.",
+      code: "WEB_LOGGER_FORMAT"
+    });
   }
-  return unknown;
 }
 function routeTargets(spec) {
   if (spec === void 0) return [];
@@ -1633,6 +1615,12 @@ function lintRoute(spec, position, known, errors, warnings) {
     }
   }
 }
+function hasRuntimeValue(value) {
+  if (typeof value === "string")
+    return value.includes(ENV_MARKER_PREFIX2) || value.startsWith(SECRET_MARKER_PREFIX2) || /\$(?:env|secret)\./.test(value);
+  if (Array.isArray(value)) return value.some(hasRuntimeValue);
+  return isObject5(value) && Object.values(value).some(hasRuntimeValue);
+}
 var VALIDATE_PACKAGE = "@walkeros/transformer-validate";
 function isValidateStep(step) {
   return step.package === VALIDATE_PACKAGE;
@@ -1703,6 +1691,15 @@ function checkValidateStepExamples(stepPath, step, contract, errors, warnings, s
   }
   if (!step.examples) return;
   const contracts = resolution.sources;
+  if (contracts.some(hasRuntimeValue)) {
+    skipped?.push({
+      path: stepPath,
+      check: "flow:contract-examples",
+      reason: "the contract uses a $env or $secret value, known only when the bundle builds or runs, so the examples cannot be judged statically",
+      code: "CONTRACT_NOT_STATIC"
+    });
+    return;
+  }
   const mode = settings.mode === "strict" ? "strict" : "pass";
   const format = settings.format === true;
   const output = isObject5(settings.output) ? settings.output : {};
@@ -1909,6 +1906,7 @@ var VALIDATE_CODES = [
   "CONTRACT_VIOLATION",
   "MAPPING_DOT_KEY",
   "FLOW_REF_WARNING",
+  "WEB_LOGGER_FORMAT",
   "FLOW_CYCLE",
   "VAR_CYCLE",
   // Structure (the bundler's own preflight, validateFlowStructure)
@@ -1917,7 +1915,11 @@ var VALIDATE_CODES = [
   "STORE_REFERENCE_NOT_FOUND",
   "STATE_STORE_UNKNOWN",
   "STATE_STORE_FILE",
-  "TRANSFORMER_MAPPING_NO_OP",
+  "MAPPING_NO_OP",
+  "MAPPING_VALUE_NO_OPERATOR",
+  "MAPPING_VALUE_PRODUCERS",
+  "BATCH_WITHOUT_PUSH_BATCH",
+  "MALFORMED_REFERENCE",
   // Resolution (getFlowSettings, as the bundler resolves the flow)
   "UNRESOLVED_REFERENCE",
   "MISSING_ENV",
@@ -1934,7 +1936,6 @@ var VALIDATE_CODES = [
   "INVALID_TAGGING",
   "INVALID_SCHEMA",
   "INVALID_EXTENDS",
-  "INVALID_SECTION",
   "INVALID_EVENTS",
   "CIRCULAR_EXTENDS",
   "INVALID_ENTITY_KEY",