codika 3.0.0

package/dist/validation/use-case-scripts/webhook-path-consistency.js

@@ -0,0 +1,288 @@
+/**
+ * WEBHOOK-PATH-CONSISTENCY Validation Script
+ *
+ * Validates that HTTP trigger URLs in config.ts match the webhook node paths
+ * in the corresponding workflow JSON files.
+ *
+ * Also validates manualTriggerUrl for schedule triggers.
+ *
+ * Config URL pattern: {{ORGSECRET_N8N_BASE_URL_TERCESORG}}/webhook/<path>
+ * Workflow path:      <path> (same as above, without base URL and /webhook/ prefix)
+ *
+ * @see .guides/specific/http-triggers.md - "URL Path Pattern"
+ * @see .guides/specific/schedule-triggers.md - "Important: Path Must Match"
+ */
+import { readFileSync, readdirSync, existsSync } from 'fs';
+import { join, basename } from 'path';
+export const RULE_ID = 'WEBHOOK-PATH-CONSISTENCY';
+export const metadata = {
+    id: RULE_ID,
+    name: 'webhook_path_consistency',
+    severity: 'must', // Critical - mismatched paths/URLs cause workflow execution failures
+    description: 'HTTP trigger URLs must have correct structure and match webhook node paths',
+    details: 'Config URLs must start with {{ORGSECRET_N8N_BASE_URL_TERCESORG}}/webhook/ and the path portion must match the workflow webhook node path',
+    fixable: false, // Report only - user must manually fix
+    category: 'references',
+    guideRef: {
+        path: 'specific/http-triggers.md',
+        section: 'URL Path Pattern',
+    },
+};
+const HTTP_GUIDE_REF = {
+    path: 'specific/http-triggers.md',
+    section: 'URL Path Pattern',
+};
+const SCHEDULE_GUIDE_REF = {
+    path: 'specific/schedule-triggers.md',
+    section: 'Important: Path Must Match',
+};
+// Expected base URL pattern
+const BASE_URL_PATTERN = '{{ORGSECRET_N8N_BASE_URL_TERCESORG}}';
+const WEBHOOK_PREFIX = '/webhook/';
+/**
+ * Extracts the path portion from a webhook URL
+ * Returns null if the URL doesn't have the expected structure
+ */
+function extractPathFromUrl(url) {
+    const webhookIndex = url.indexOf(WEBHOOK_PREFIX);
+    if (webhookIndex === -1) {
+        return null;
+    }
+    return url.slice(webhookIndex + WEBHOOK_PREFIX.length);
+}
+/**
+ * Validates URL structure
+ * Returns an error message if invalid, null if valid
+ */
+function validateUrlStructure(url) {
+    // Check for base URL
+    if (!url.startsWith(BASE_URL_PATTERN)) {
+        return `URL must start with ${BASE_URL_PATTERN}`;
+    }
+    // Check for /webhook/ prefix after base URL
+    const afterBaseUrl = url.slice(BASE_URL_PATTERN.length);
+    if (!afterBaseUrl.startsWith(WEBHOOK_PREFIX)) {
+        return `URL must include ${WEBHOOK_PREFIX} after the base URL`;
+    }
+    return null;
+}
+/**
+ * Extracts trigger URLs from config.ts content
+ * Returns URLs from HTTP triggers (url field) and schedule triggers (manualTriggerUrl field)
+ */
+function extractConfigTriggerUrls(configContent) {
+    const triggerUrls = [];
+    // Find all workflow blocks with workflowTemplateId
+    const workflowBlockPattern = /workflowTemplateId:\s*['"]([^'"]+)['"]/g;
+    let templateMatch;
+    while ((templateMatch = workflowBlockPattern.exec(configContent)) !== null) {
+        const templateId = templateMatch[1];
+        const templateIdEndPos = templateMatch.index + templateMatch[0].length;
+        // Find the end of this workflow block (next workflowTemplateId or end)
+        const nextTemplatePattern = /workflowTemplateId:/g;
+        nextTemplatePattern.lastIndex = templateIdEndPos;
+        const nextMatch = nextTemplatePattern.exec(configContent);
+        const blockEnd = nextMatch ? nextMatch.index : configContent.length;
+        const workflowBlock = configContent.slice(templateMatch.index, blockEnd);
+        // Find triggers array in this block
+        const triggersMatch = workflowBlock.match(/triggers:\s*\[([\s\S]*?)\]/);
+        if (!triggersMatch)
+            continue;
+        const triggersContent = triggersMatch[1];
+        // Find HTTP triggers with url field
+        // Pattern: type: 'http' ... url: `...`
+        const httpTriggerPattern = /\{[^{}]*type:\s*['"]http['"][^{}]*triggerId:\s*['"]([^'"]+)['"][^{}]*url:\s*[`'"]([^`'"]+)[`'"][^{}]*\}|\{[^{}]*triggerId:\s*['"]([^'"]+)['"][^{}]*type:\s*['"]http['"][^{}]*url:\s*[`'"]([^`'"]+)[`'"][^{}]*\}|\{[^{}]*url:\s*[`'"]([^`'"]+)[`'"][^{}]*type:\s*['"]http['"][^{}]*triggerId:\s*['"]([^'"]+)['"][^{}]*\}/g;
+        let httpMatch;
+        while ((httpMatch = httpTriggerPattern.exec(triggersContent)) !== null) {
+            const triggerId = httpMatch[1] || httpMatch[3] || httpMatch[6];
+            const url = httpMatch[2] || httpMatch[4] || httpMatch[5];
+            if (triggerId && url) {
+                triggerUrls.push({
+                    workflowTemplateId: templateId,
+                    triggerId,
+                    url,
+                    isManualTrigger: false,
+                });
+            }
+        }
+        // Find schedule triggers with manualTriggerUrl field
+        const scheduleTriggerPattern = /\{[^{}]*type:\s*['"]schedule['"][^{}]*triggerId:\s*['"]([^'"]+)['"][^{}]*manualTriggerUrl:\s*[`'"]([^`'"]+)[`'"][^{}]*\}|\{[^{}]*triggerId:\s*['"]([^'"]+)['"][^{}]*type:\s*['"]schedule['"][^{}]*manualTriggerUrl:\s*[`'"]([^`'"]+)[`'"][^{}]*\}|\{[^{}]*manualTriggerUrl:\s*[`'"]([^`'"]+)[`'"][^{}]*type:\s*['"]schedule['"][^{}]*triggerId:\s*['"]([^'"]+)['"][^{}]*\}/g;
+        let scheduleMatch;
+        while ((scheduleMatch = scheduleTriggerPattern.exec(triggersContent)) !== null) {
+            const triggerId = scheduleMatch[1] || scheduleMatch[3] || scheduleMatch[6];
+            const url = scheduleMatch[2] || scheduleMatch[4] || scheduleMatch[5];
+            if (triggerId && url) {
+                triggerUrls.push({
+                    workflowTemplateId: templateId,
+                    triggerId,
+                    url,
+                    isManualTrigger: true,
+                });
+            }
+        }
+    }
+    return triggerUrls;
+}
+/**
+ * Extracts webhook node paths from a workflow JSON
+ */
+function extractWebhookPaths(workflowContent) {
+    const paths = [];
+    try {
+        const workflow = JSON.parse(workflowContent);
+        for (const node of workflow.nodes || []) {
+            if (node.type === 'n8n-nodes-base.webhook' && node.parameters?.path) {
+                paths.push(node.parameters.path);
+            }
+        }
+    }
+    catch {
+        // Invalid JSON - will be caught by other validators
+    }
+    return paths;
+}
+/**
+ * Validates webhook path consistency for a use case
+ */
+export async function checkWebhookPathConsistency(useCasePath) {
+    const findings = [];
+    // Check if config.ts exists
+    const configPath = join(useCasePath, 'config.ts');
+    if (!existsSync(configPath)) {
+        // Cannot validate without config.ts - this is handled by other rules
+        return findings;
+    }
+    // Read config.ts
+    let configContent;
+    try {
+        configContent = readFileSync(configPath, 'utf-8');
+    }
+    catch {
+        // Cannot read config.ts - this is handled by other rules
+        return findings;
+    }
+    // Extract trigger URLs from config
+    const triggerUrls = extractConfigTriggerUrls(configContent);
+    // No HTTP triggers or schedule triggers with manualTriggerUrl - nothing to validate
+    if (triggerUrls.length === 0) {
+        return findings;
+    }
+    // Check workflows folder
+    const workflowsPath = join(useCasePath, 'workflows');
+    if (!existsSync(workflowsPath)) {
+        // No workflows folder - HTTP triggers would be invalid
+        for (const trigger of triggerUrls) {
+            findings.push({
+                rule: RULE_ID,
+                severity: 'must',
+                path: configPath,
+                message: `Trigger "${trigger.triggerId}" in workflow "${trigger.workflowTemplateId}" has URL but no workflows folder exists`,
+                raw_details: 'Create a workflows folder with the corresponding workflow JSON file',
+                guideRef: trigger.isManualTrigger ? SCHEDULE_GUIDE_REF : HTTP_GUIDE_REF,
+            });
+        }
+        return findings;
+    }
+    // Get all workflow JSON files
+    let workflowFiles;
+    try {
+        workflowFiles = readdirSync(workflowsPath)
+            .filter(f => f.endsWith('.json'))
+            .map(f => join(workflowsPath, f));
+    }
+    catch {
+        // Cannot read workflows folder - this is handled by other rules
+        return findings;
+    }
+    // Build a map of workflowTemplateId -> webhook paths
+    const workflowWebhookPaths = new Map();
+    for (const workflowFile of workflowFiles) {
+        const templateId = basename(workflowFile, '.json');
+        let content;
+        try {
+            content = readFileSync(workflowFile, 'utf-8');
+        }
+        catch {
+            continue; // Skip unreadable files
+        }
+        const paths = extractWebhookPaths(content);
+        workflowWebhookPaths.set(templateId, paths);
+    }
+    // Validate each trigger URL
+    for (const trigger of triggerUrls) {
+        const guideRef = trigger.isManualTrigger ? SCHEDULE_GUIDE_REF : HTTP_GUIDE_REF;
+        const triggerType = trigger.isManualTrigger ? 'manualTriggerUrl' : 'url';
+        // Check 1: URL structure validation
+        const structureError = validateUrlStructure(trigger.url);
+        if (structureError) {
+            findings.push({
+                rule: RULE_ID,
+                severity: 'must',
+                path: configPath,
+                message: `Invalid ${triggerType} structure in trigger "${trigger.triggerId}" of workflow "${trigger.workflowTemplateId}": ${structureError}`,
+                raw_details: `The ${triggerType} must follow the pattern: ${BASE_URL_PATTERN}${WEBHOOK_PREFIX}<path>\n\n` +
+                    `Current value: ${trigger.url}\n\n` +
+                    `See documentation for correct pattern:\n` +
+                    `- .guides/${guideRef.path} > "${guideRef.section}"`,
+                guideRef,
+            });
+            continue; // Skip path check if structure is invalid
+        }
+        // Check 2: Path consistency
+        const expectedPath = extractPathFromUrl(trigger.url);
+        if (!expectedPath) {
+            // This shouldn't happen if structure validation passed, but handle it
+            continue;
+        }
+        const workflowPaths = workflowWebhookPaths.get(trigger.workflowTemplateId);
+        if (!workflowPaths) {
+            // Workflow file doesn't exist
+            findings.push({
+                rule: RULE_ID,
+                severity: 'must',
+                path: configPath,
+                message: `Cannot find workflow file for "${trigger.workflowTemplateId}" to validate webhook path`,
+                raw_details: `The trigger "${trigger.triggerId}" references workflow "${trigger.workflowTemplateId}" ` +
+                    `but no workflow file "${trigger.workflowTemplateId}.json" was found in the workflows folder.`,
+                guideRef,
+            });
+            continue;
+        }
+        if (workflowPaths.length === 0) {
+            // Workflow exists but has no webhook nodes
+            findings.push({
+                rule: RULE_ID,
+                severity: 'must',
+                path: join(workflowsPath, `${trigger.workflowTemplateId}.json`),
+                message: `Workflow "${trigger.workflowTemplateId}" has no webhook node but trigger "${trigger.triggerId}" expects one`,
+                raw_details: `The trigger "${trigger.triggerId}" has ${triggerType} set but the workflow has no webhook node.\n\n` +
+                    `Expected webhook path: ${expectedPath}\n\n` +
+                    `Add a webhook node with the matching path to the workflow, or remove the trigger URL from config.ts.\n\n` +
+                    `See documentation:\n` +
+                    `- .guides/${guideRef.path} > "${guideRef.section}"`,
+                guideRef,
+            });
+            continue;
+        }
+        // Check if any webhook path matches
+        if (!workflowPaths.includes(expectedPath)) {
+            const actualPathsStr = workflowPaths.map(p => `"${p}"`).join(', ');
+            findings.push({
+                rule: RULE_ID,
+                severity: 'must',
+                path: join(workflowsPath, `${trigger.workflowTemplateId}.json`),
+                message: `Webhook path mismatch in "${trigger.workflowTemplateId}": config expects "${expectedPath}" but workflow has ${actualPathsStr}`,
+                raw_details: `The path in the config.ts trigger ${triggerType} must match the webhook node path in the workflow JSON.\n\n` +
+                    `Config ${triggerType} path: ${expectedPath}\n` +
+                    `Workflow webhook path(s): ${actualPathsStr}\n\n` +
+                    `Either update the ${triggerType} in config.ts or the webhook node path in the workflow.\n\n` +
+                    `See documentation for correct pattern:\n` +
+                    `- .guides/${guideRef.path} > "${guideRef.section}"`,
+                guideRef,
+            });
+        }
+    }
+    return findings;
+}
+export default checkWebhookPathConsistency;
+//# sourceMappingURL=webhook-path-consistency.js.map

package/dist/validation/use-case-scripts/webhook-path-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-path-consistency.js","sourceRoot":"","sources":["../../../src/validation/use-case-scripts/webhook-path-consistency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAGtC,MAAM,CAAC,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAElD,MAAM,CAAC,MAAM,QAAQ,GAAmE;IACtF,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,MAAM,EAAE,qEAAqE;IACvF,WAAW,EAAE,4EAA4E;IACzF,OAAO,EACL,0IAA0I;IAC5I,OAAO,EAAE,KAAK,EAAE,uCAAuC;IACvD,QAAQ,EAAE,YAAY;IACtB,QAAQ,EAAE;QACR,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,kBAAkB;KAC5B;CACF,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,2BAA2B;IACjC,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,+BAA+B;IACrC,OAAO,EAAE,4BAA4B;CACtC,CAAC;AAEF,4BAA4B;AAC5B,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAChE,MAAM,cAAc,GAAG,WAAW,CAAC;AAYnC;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,qBAAqB;IACrB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtC,OAAO,uBAAuB,gBAAgB,EAAE,CAAC;IACnD,CAAC;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7C,OAAO,oBAAoB,cAAc,qBAAqB,CAAC;IACjE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,aAAqB;IACrD,MAAM,WAAW,GAAqB,EAAE,CAAC;IAEzC,mDAAmD;IACnD,MAAM,oBAAoB,GAAG,yCAAyC,CAAC;IACvE,IAAI,aAAa,CAAC;IAElB,OAAO,CAAC,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3E,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAEvE,uEAAuE;QACvE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;QACnD,mBAAmB,CAAC,SAAS,GAAG,gBAAgB,CAAC;QACjD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;QAEpE,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEzE,oCAAoC;QACpC,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACxE,IAAI,CAAC,aAAa;YAAE,SAAS;QAE7B,MAAM,eAAe,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAEzC,oCAAoC;QACpC,uCAAuC;QACvC,MAAM,kBAAkB,GACtB,0TAA0T,CAAC;QAC7T,IAAI,SAAS,CAAC;QAEd,OAAO,CAAC,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvE,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;gBACrB,WAAW,CAAC,IAAI,CAAC;oBACf,kBAAkB,EAAE,UAAU;oBAC9B,SAAS;oBACT,GAAG;oBACH,eAAe,EAAE,KAAK;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,MAAM,sBAAsB,GAC1B,6WAA6W,CAAC;QAChX,IAAI,aAAa,CAAC;QAElB,OAAO,CAAC,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/E,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;YAC3E,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;gBACrB,WAAW,CAAC,IAAI,CAAC;oBACf,kBAAkB,EAAE,UAAU;oBAC9B,SAAS;oBACT,GAAG;oBACH,eAAe,EAAE,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,eAAuB;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;gBACpE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,WAAmB;IACnE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,4BAA4B;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,qEAAqE;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAmC;IACnC,MAAM,WAAW,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAE5D,oFAAoF;IACpF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;IACzB,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,uDAAuD;QACvD,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,YAAY,OAAO,CAAC,SAAS,kBAAkB,OAAO,CAAC,kBAAkB,0CAA0C;gBAC5H,WAAW,EAAE,qEAAqE;gBAClF,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc;aACxE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,IAAI,aAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;aACvC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,qDAAqD;IACrD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACzD,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,wBAAwB;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC3C,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,4BAA4B;IAC5B,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC;QAEzE,oCAAoC;QACpC,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,WAAW,WAAW,0BAA0B,OAAO,CAAC,SAAS,kBAAkB,OAAO,CAAC,kBAAkB,MAAM,cAAc,EAAE;gBAC5I,WAAW,EACT,OAAO,WAAW,6BAA6B,gBAAgB,GAAG,cAAc,YAAY;oBAC5F,kBAAkB,OAAO,CAAC,GAAG,MAAM;oBACnC,0CAA0C;oBAC1C,aAAa,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,OAAO,GAAG;gBACtD,QAAQ;aACT,CAAC,CAAC;YACH,SAAS,CAAC,0CAA0C;QACtD,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,sEAAsE;YACtE,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAE3E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,8BAA8B;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,kCAAkC,OAAO,CAAC,kBAAkB,4BAA4B;gBACjG,WAAW,EACT,gBAAgB,OAAO,CAAC,SAAS,0BAA0B,OAAO,CAAC,kBAAkB,IAAI;oBACzF,yBAAyB,OAAO,CAAC,kBAAkB,2CAA2C;gBAChG,QAAQ;aACT,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,2CAA2C;YAC3C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,kBAAkB,OAAO,CAAC;gBAC/D,OAAO,EAAE,aAAa,OAAO,CAAC,kBAAkB,sCAAsC,OAAO,CAAC,SAAS,eAAe;gBACtH,WAAW,EACT,gBAAgB,OAAO,CAAC,SAAS,SAAS,WAAW,gDAAgD;oBACrG,0BAA0B,YAAY,MAAM;oBAC5C,0GAA0G;oBAC1G,sBAAsB;oBACtB,aAAa,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,OAAO,GAAG;gBACtD,QAAQ;aACT,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,oCAAoC;QACpC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,kBAAkB,OAAO,CAAC;gBAC/D,OAAO,EAAE,6BAA6B,OAAO,CAAC,kBAAkB,sBAAsB,YAAY,sBAAsB,cAAc,EAAE;gBACxI,WAAW,EACT,qCAAqC,WAAW,6DAA6D;oBAC7G,UAAU,WAAW,UAAU,YAAY,IAAI;oBAC/C,6BAA6B,cAAc,MAAM;oBACjD,qBAAqB,WAAW,6DAA6D;oBAC7F,0CAA0C;oBAC1C,aAAa,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,OAAO,GAAG;gBACtD,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,eAAe,2BAA2B,CAAC"}

package/dist/validation/use-case-scripts/workflow-imports.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Script: CONFIG-WORKFLOWS
+ *
+ * Validates that:
+ * - All files listed in WORKFLOW_FILES exist
+ * - All JSON files in workflows/ are listed in WORKFLOW_FILES
+ * - Workflow JSON files are valid JSON
+ */
+import type { Finding } from '../types.js';
+import type { RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+/**
+ * Check workflow imports consistency
+ */
+export declare function checkWorkflowImports(useCasePath: string): Promise<Finding[]>;
+//# sourceMappingURL=workflow-imports.d.ts.map

package/dist/validation/use-case-scripts/workflow-imports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-imports.d.ts","sourceRoot":"","sources":["../../../src/validation/use-case-scripts/workflow-imports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,QAAQ,EAAE,YAOtB,CAAC;AAoFF;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAqHlF"}

package/dist/validation/use-case-scripts/workflow-imports.js

@@ -0,0 +1,206 @@
+/**
+ * Script: CONFIG-WORKFLOWS
+ *
+ * Validates that:
+ * - All files listed in WORKFLOW_FILES exist
+ * - All JSON files in workflows/ are listed in WORKFLOW_FILES
+ * - Workflow JSON files are valid JSON
+ */
+import { existsSync, readFileSync, readdirSync, statSync } from 'fs';
+import { join, basename } from 'path';
+export const metadata = {
+    id: 'CONFIG-WORKFLOWS',
+    name: 'workflow_imports',
+    severity: 'must',
+    description: 'All workflows must be listed in WORKFLOW_FILES and exist on disk',
+    details: 'Ensure WORKFLOW_FILES array matches the actual workflow files in the workflows/ folder',
+    category: 'config',
+};
+/**
+ * Quote bare INSTPARM placeholders (outside JSON strings) so the file parses as valid JSON.
+ * INSTPARM values like {{INSTPARM_PHONE_MRAPTSNI}} are intentionally unquoted in workflow
+ * templates — the deployer replaces them with typed values. But the validator needs valid JSON.
+ *
+ * Placeholders inside JSON string values (e.g., jsCode) are left untouched.
+ */
+function quoteBarePlaceholders(content) {
+    const placeholder = /\{\{INSTPARM_[A-Z0-9_]+_MRAPTSNI\}\}/g;
+    let result = '';
+    let inString = false;
+    let i = 0;
+    while (i < content.length) {
+        const ch = content[i];
+        if (inString) {
+            result += ch;
+            if (ch === '\\') {
+                // Skip escaped character
+                i++;
+                if (i < content.length)
+                    result += content[i];
+            }
+            else if (ch === '"') {
+                inString = false;
+            }
+            i++;
+            continue;
+        }
+        if (ch === '"') {
+            inString = true;
+            result += ch;
+            i++;
+            continue;
+        }
+        // Outside a string — check for bare placeholder
+        placeholder.lastIndex = i;
+        const match = placeholder.exec(content);
+        if (match && match.index === i) {
+            result += `"${match[0]}"`;
+            i += match[0].length;
+            continue;
+        }
+        result += ch;
+        i++;
+    }
+    return result;
+}
+/**
+ * Extract WORKFLOW_FILES array from config content (simplified parser)
+ */
+function extractWorkflowFiles(content) {
+    // Look for WORKFLOW_FILES = [...] pattern
+    const match = content.match(/WORKFLOW_FILES\s*=\s*\[([\s\S]*?)\]/);
+    if (!match) {
+        return null;
+    }
+    const arrayContent = match[1];
+    // Extract string literals (simplified - works for common patterns)
+    const files = [];
+    // Match join(..., 'path') patterns
+    const joinMatches = arrayContent.matchAll(/join\s*\([^,]+,\s*['"]([^'"]+)['"]\)/g);
+    for (const m of joinMatches) {
+        files.push(m[1]);
+    }
+    // Match direct string patterns
+    const stringMatches = arrayContent.matchAll(/['"]([^'"]+\.json)['"]/g);
+    for (const m of stringMatches) {
+        files.push(m[1]);
+    }
+    return files;
+}
+/**
+ * Check workflow imports consistency
+ */
+export async function checkWorkflowImports(useCasePath) {
+    const findings = [];
+    const workflowsPath = join(useCasePath, 'workflows');
+    // Check workflows folder exists
+    if (!existsSync(workflowsPath)) {
+        findings.push({
+            rule: metadata.id,
+            severity: 'must',
+            path: useCasePath,
+            message: 'Missing workflows/ folder',
+            raw_details: 'Create a workflows/ folder and add your workflow JSON files',
+        });
+        return findings;
+    }
+    // Get actual workflow files
+    const actualFiles = new Set();
+    try {
+        const entries = readdirSync(workflowsPath);
+        for (const entry of entries) {
+            if (entry.endsWith('.json')) {
+                const fullPath = join(workflowsPath, entry);
+                if (statSync(fullPath).isFile()) {
+                    actualFiles.add(entry);
+                    // Validate JSON (temporarily quote bare INSTPARM placeholders which are
+                    // intentionally unquoted in templates — they get replaced at deploy time).
+                    // Only replace placeholders that appear as bare JSON values, not those
+                    // inside JSON strings (e.g., inside jsCode). We track string context
+                    // character by character to avoid breaking valid strings.
+                    try {
+                        const content = readFileSync(fullPath, 'utf-8');
+                        const normalized = quoteBarePlaceholders(content);
+                        JSON.parse(normalized);
+                    }
+                    catch (error) {
+                        findings.push({
+                            rule: 'JSON-VALID',
+                            severity: 'must',
+                            path: fullPath,
+                            message: `Invalid JSON in ${entry}: ${error.message}`,
+                            raw_details: 'Fix the JSON syntax errors in this file',
+                        });
+                    }
+                }
+            }
+        }
+    }
+    catch (error) {
+        findings.push({
+            rule: metadata.id,
+            severity: 'must',
+            path: workflowsPath,
+            message: `Cannot read workflows folder: ${error.message}`,
+        });
+        return findings;
+    }
+    // Try to read config.ts to check WORKFLOW_FILES
+    const configPath = join(useCasePath, 'config.ts');
+    if (existsSync(configPath)) {
+        try {
+            const configContent = readFileSync(configPath, 'utf-8');
+            const declaredFiles = extractWorkflowFiles(configContent);
+            if (declaredFiles !== null) {
+                const declaredNames = new Set(declaredFiles.map(f => basename(f)));
+                // Check for files in WORKFLOW_FILES that don't exist
+                for (const declaredFile of declaredFiles) {
+                    const fileName = basename(declaredFile);
+                    const fullPath = join(workflowsPath, fileName);
+                    if (!existsSync(fullPath)) {
+                        findings.push({
+                            rule: metadata.id,
+                            severity: 'must',
+                            path: configPath,
+                            message: `WORKFLOW_FILES references non-existent file: ${declaredFile}`,
+                            raw_details: `Either create ${fileName} in workflows/ or remove it from WORKFLOW_FILES`,
+                        });
+                    }
+                }
+                // Check for files in workflows/ not listed in WORKFLOW_FILES
+                for (const actualFile of actualFiles) {
+                    if (!declaredNames.has(actualFile)) {
+                        findings.push({
+                            rule: metadata.id,
+                            severity: 'must',
+                            path: join(workflowsPath, actualFile),
+                            message: `Workflow file not listed in WORKFLOW_FILES: ${actualFile}`,
+                            raw_details: `Add this file to WORKFLOW_FILES array or remove it from workflows/`,
+                        });
+                    }
+                }
+            }
+            else {
+                // Could not parse WORKFLOW_FILES from config.ts
+                findings.push({
+                    rule: metadata.id,
+                    severity: 'must',
+                    path: configPath,
+                    message: 'Cannot parse WORKFLOW_FILES array from config.ts',
+                    raw_details: 'Ensure config.ts exports a valid WORKFLOW_FILES array with proper syntax',
+                });
+            }
+        }
+        catch (error) {
+            findings.push({
+                rule: metadata.id,
+                severity: 'must',
+                path: configPath,
+                message: `Cannot parse WORKFLOW_FILES in config.ts: ${error.message}`,
+                raw_details: 'Fix syntax errors in config.ts or ensure WORKFLOW_FILES is properly formatted',
+            });
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=workflow-imports.js.map

package/dist/validation/use-case-scripts/workflow-imports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-imports.js","sourceRoot":"","sources":["../../../src/validation/use-case-scripts/workflow-imports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAItC,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,kEAAkE;IAC/E,OAAO,EAAE,wFAAwF;IACjG,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,WAAW,GAAG,uCAAuC,CAAC;IAC5D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,yBAAyB;gBACzB,CAAC,EAAE,CAAC;gBACJ,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM;oBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACtB,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,IAAI,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1B,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;QACb,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,0CAA0C;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE9B,mEAAmE;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,mCAAmC;IACnC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;IACnF,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,+BAA+B;IAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAErD,gCAAgC;IAChC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;YACjB,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,2BAA2B;YACpC,WAAW,EAAE,6DAA6D;SAC3E,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4BAA4B;IAC5B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBAChC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAEvB,wEAAwE;oBACxE,2EAA2E;oBAC3E,uEAAuE;oBACvE,qEAAqE;oBACrE,0DAA0D;oBAC1D,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAChD,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;wBAClD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACzB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,YAAY;4BAClB,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,mBAAmB,KAAK,KAAM,KAAe,CAAC,OAAO,EAAE;4BAChE,WAAW,EAAE,yCAAyC;yBACvD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;YACjB,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,iCAAkC,KAAe,CAAC,OAAO,EAAE;SACrE,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,aAAa,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;YAE1D,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAEnE,qDAAqD;gBACrD,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;oBACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;oBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;oBAE/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC1B,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;4BACjB,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,UAAU;4BAChB,OAAO,EAAE,gDAAgD,YAAY,EAAE;4BACvE,WAAW,EAAE,iBAAiB,QAAQ,iDAAiD;yBACxF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,6DAA6D;gBAC7D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;oBACrC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBACnC,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;4BACjB,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC;4BACrC,OAAO,EAAE,+CAA+C,UAAU,EAAE;4BACpE,WAAW,EAAE,oEAAoE;yBAClF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;oBACjB,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,kDAAkD;oBAC3D,WAAW,EAAE,0EAA0E;iBACxF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;gBACjB,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,6CAA8C,KAAe,CAAC,OAAO,EAAE;gBAChF,WAAW,EAAE,+EAA+E;aAC7F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/credential-placeholders.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Script: CRED-PLACEHOLDER
+ *
+ * Validates that credential references in workflows use proper placeholders.
+ *
+ * Valid credential placeholder patterns:
+ * - {{FLEXCRED_CREDNAME_ID_DERCXELF}}   / {{FLEXCRED_CREDNAME_NAME_DERCXELF}}   (flexible - tries org first, falls back to user)
+ * - {{USERCRED_CREDNAME_ID_DERCRESU}}   / {{USERCRED_CREDNAME_NAME_DERCRESU}}   (user credentials)
+ * - {{ORGCRED_CREDNAME_ID_DERCGRO}}     / {{ORGCRED_CREDNAME_NAME_DERCGRO}}     (organization credentials)
+ * - {{INSTCRED_CREDNAME_ID_DERCTSNI}}   / {{INSTCRED_CREDNAME_NAME_DERCTSNI}}   (instance credentials)
+ *
+ * Both `id` and `name` fields must use proper placeholders with _ID_ and _NAME_ markers respectively.
+ */
+import type { Finding } from '../types.js';
+import type { RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+/**
+ * Check for credential placeholder issues
+ */
+export declare function checkCredentialPlaceholders(content: string, path: string): Finding[];
+//# sourceMappingURL=credential-placeholders.d.ts.map

package/dist/validation/workflow-scripts/credential-placeholders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-placeholders.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/credential-placeholders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,QAAQ,EAAE,YAStB,CAAC;AA2JF;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CA6HpF"}