@wix/evalforge-types 0.72.0 → 0.74.0

package/build/types/assertion/assertion.d.ts

@@ -91,8 +91,13 @@ export declare const ToolCalledWithParamConfigSchema: z.ZodObject<{
  * Uses strictObject to reject objects with unknown keys (prevents matching LlmJudge configs).
  */
 export declare const BuildPassedConfigSchema: z.ZodObject<{
-    /** Command to run (default: "yarn build") */
-    command: z.ZodOptional<z.ZodString>;
+    /** Allowlisted command only (default at runtime: "yarn build") */
+    command: z.ZodOptional<z.ZodEnum<{
+        "npm run build": "npm run build";
+        "yarn build": "yarn build";
+        "pnpm run build": "pnpm run build";
+        "pnpm build": "pnpm build";
+    }>>;
     /** Expected exit code (default: 0) */
     expectedExitCode: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
@@ -168,7 +173,12 @@ export declare const ToolCalledWithParamAssertionSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type ToolCalledWithParamAssertion = z.infer<typeof ToolCalledWithParamAssertionSchema>;
 export declare const BuildPassedAssertionSchema: z.ZodObject<{
-    command: z.ZodOptional<z.ZodString>;
+    command: z.ZodOptional<z.ZodEnum<{
+        "npm run build": "npm run build";
+        "yarn build": "yarn build";
+        "pnpm run build": "pnpm run build";
+        "pnpm build": "pnpm build";
+    }>>;
     expectedExitCode: z.ZodOptional<z.ZodNumber>;
     negate: z.ZodOptional<z.ZodBoolean>;
     type: z.ZodLiteral<"build_passed">;
@@ -237,7 +247,12 @@ export declare const AssertionSchema: z.ZodUnion<readonly [z.ZodObject<{
     negate: z.ZodOptional<z.ZodBoolean>;
     type: z.ZodLiteral<"tool_called_with_param">;
 }, z.core.$strict>, z.ZodObject<{
-    command: z.ZodOptional<z.ZodString>;
+    command: z.ZodOptional<z.ZodEnum<{
+        "npm run build": "npm run build";
+        "yarn build": "yarn build";
+        "pnpm run build": "pnpm run build";
+        "pnpm build": "pnpm build";
+    }>>;
     expectedExitCode: z.ZodOptional<z.ZodNumber>;
     negate: z.ZodOptional<z.ZodBoolean>;
     type: z.ZodLiteral<"build_passed">;
@@ -339,8 +354,13 @@ export declare const AssertionConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     /** Maximum allowed cost in USD */
     maxCostUsd: z.ZodNumber;
 }, z.core.$strict>, z.ZodObject<{
-    /** Command to run (default: "yarn build") */
-    command: z.ZodOptional<z.ZodString>;
+    /** Allowlisted command only (default at runtime: "yarn build") */
+    command: z.ZodOptional<z.ZodEnum<{
+        "npm run build": "npm run build";
+        "yarn build": "yarn build";
+        "pnpm run build": "pnpm run build";
+        "pnpm build": "pnpm build";
+    }>>;
     /** Expected exit code (default: 0) */
     expectedExitCode: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>, z.ZodObject<{}, z.core.$strip>]>;

package/build/types/assertion/build-passed-command.d.ts

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+/**
+ * Allowlisted shell-free build commands for `build_passed` assertions (VELO-9590).
+ * Each entry maps to a fixed argv array for execFile — no user-controlled shell.
+ */
+export declare const ALLOWED_BUILD_COMMANDS: readonly ["yarn build", "npm run build", "pnpm run build", "pnpm build"];
+export type AllowedBuildCommandString = (typeof ALLOWED_BUILD_COMMANDS)[number];
+/** Default when `command` is omitted (matches historical behavior). */
+export declare const DEFAULT_BUILD_PASSED_COMMAND: AllowedBuildCommandString;
+/**
+ * True if the string (after trim) is an allowlisted build command.
+ */
+export declare function isAllowedBuildCommandString(command: string): boolean;
+/**
+ * Resolve an allowlisted command string to argv for `execFile` / `execFileSync`.
+ * Returns null if the command is not allowlisted.
+ */
+export declare function parseBuildCommandToArgv(command: string): readonly [string, ...string[]] | null;
+/** Zod schema for an optional/required allowlisted build command string. */
+export declare const BuildPassedCommandStringSchema: z.ZodEnum<{
+    "npm run build": "npm run build";
+    "yarn build": "yarn build";
+    "pnpm run build": "pnpm run build";
+    "pnpm build": "pnpm build";
+}>;

package/build/types/assertion/index.d.ts

@@ -2,4 +2,5 @@
  * Assertion types and system assertion definitions.
  */
 export * from './assertion.js';
+export * from './build-passed-command.js';
 export * from './system-assertions.js';

package/build/types/project/project.d.ts

@@ -26,25 +26,28 @@ export type Project = z.infer<typeof ProjectSchema>;
 /**
  * Input schema for creating a new Project.
  * Omits read-only / runtime-resolved fields.
+ * Requires appId for proper app-credential scoping and tenancy isolation.
  */
 export declare const CreateProjectInputSchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodString;
-    appId: z.ZodOptional<z.ZodString>;
     scenarioTags: z.ZodOptional<z.ZodArray<z.ZodString>>;
     wixAuthToken: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     base44AuthFile: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    appId: z.ZodString;
 }, z.core.$strip>;
 export type CreateProjectInput = z.infer<typeof CreateProjectInputSchema>;
 /**
  * Input schema for updating a Project.
+ * AppId is mutable — allows project reassignment to different apps if needed.
+ * Requires current app credentials to change (enforced by appAuthProjectGuard).
  */
 export declare const UpdateProjectInputSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
-    appId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     scenarioTags: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
     wixAuthToken: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
     base44AuthFile: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    appId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type UpdateProjectInput = z.infer<typeof UpdateProjectInputSchema>;

package/build/types/scenario/test-scenario.d.ts

@@ -48,7 +48,12 @@ export declare const TestScenarioSchema: z.ZodObject<{
         negate: z.ZodOptional<z.ZodBoolean>;
         type: z.ZodLiteral<"tool_called_with_param">;
     }, z.core.$strict>, z.ZodObject<{
-        command: z.ZodOptional<z.ZodString>;
+        command: z.ZodOptional<z.ZodEnum<{
+            "npm run build": "npm run build";
+            "yarn build": "yarn build";
+            "pnpm run build": "pnpm run build";
+            "pnpm build": "pnpm build";
+        }>>;
         expectedExitCode: z.ZodOptional<z.ZodNumber>;
         negate: z.ZodOptional<z.ZodBoolean>;
         type: z.ZodLiteral<"build_passed">;
@@ -111,6 +116,10 @@ export declare const TestScenarioSchema: z.ZodObject<{
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type TestScenario = z.infer<typeof TestScenarioSchema>;
+export declare function validateBuildPassedParamsInAssertionLinks(links: {
+    assertionId: string;
+    params?: Record<string, unknown>;
+}[] | undefined, ctx: z.RefinementCtx): void;
 /**
  * Input schema for creating a new TestScenario.
  */
@@ -131,7 +140,12 @@ export declare const CreateTestScenarioInputSchema: z.ZodObject<{
         negate: z.ZodOptional<z.ZodBoolean>;
         type: z.ZodLiteral<"tool_called_with_param">;
     }, z.core.$strict>, z.ZodObject<{
-        command: z.ZodOptional<z.ZodString>;
+        command: z.ZodOptional<z.ZodEnum<{
+            "npm run build": "npm run build";
+            "yarn build": "yarn build";
+            "pnpm run build": "pnpm run build";
+            "pnpm build": "pnpm build";
+        }>>;
         expectedExitCode: z.ZodOptional<z.ZodNumber>;
         negate: z.ZodOptional<z.ZodBoolean>;
         type: z.ZodLiteral<"build_passed">;
@@ -214,7 +228,12 @@ export declare const UpdateTestScenarioInputSchema: z.ZodObject<{
         negate: z.ZodOptional<z.ZodBoolean>;
         type: z.ZodLiteral<"tool_called_with_param">;
     }, z.core.$strict>, z.ZodObject<{
-        command: z.ZodOptional<z.ZodString>;
+        command: z.ZodOptional<z.ZodEnum<{
+            "npm run build": "npm run build";
+            "yarn build": "yarn build";
+            "pnpm run build": "pnpm run build";
+            "pnpm build": "pnpm build";
+        }>>;
         expectedExitCode: z.ZodOptional<z.ZodNumber>;
         negate: z.ZodOptional<z.ZodBoolean>;
         type: z.ZodLiteral<"build_passed">;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/evalforge-types",
-  "version": "0.72.0",
+  "version": "0.74.0",
   "description": "Unified types for EvalForge agent evaluation system",
   "files": [
     "build"
@@ -46,5 +46,5 @@
       "artifactId": "evalforge-types"
     }
   },
-  "falconPackageHash": "b6e85b3584dc3e5bb7ba967eb144e0054537240f1b95a0a468f3e662"
+  "falconPackageHash": "2d95416da22b2c81af5afb54bb6d3b5cbc1fac31d48f866a49a53523"
 }