codika 3.0.0

package/dist/validation/workflow-scripts/instparm-quoting.js

@@ -0,0 +1,59 @@
+/**
+ * Script: INSTPARM-QUOTE
+ *
+ * Checks that INSTPARM placeholders are not incorrectly quoted.
+ *
+ * CORRECT:   const x = {{INSTPARM_NAME_MRAPTSNI}};
+ * INCORRECT: const x = '{{INSTPARM_NAME_MRAPTSNI}}';
+ *
+ * When INSTPARM placeholders are quoted, they become string literals
+ * instead of being replaced with the actual value at runtime.
+ *
+ * This script provides auto-fix capability to remove the quotes.
+ */
+export const metadata = {
+    id: 'INSTPARM-QUOTE',
+    name: 'instparm_quoting',
+    severity: 'must',
+    description: 'INSTPARM placeholders should not be wrapped in quotes',
+    details: 'Remove quotes around INSTPARM placeholders so they are properly replaced at runtime',
+    fixable: true,
+    category: 'placeholder',
+};
+// Regex to find quoted INSTPARM placeholders
+// Matches: '{{INSTPARM_..._MRAPTSNI}}' or "{{INSTPARM_..._MRAPTSNI}}"
+const QUOTED_INSTPARM_REGEX = /(['"])(\{\{INSTPARM_[A-Z0-9_]+_MRAPTSNI\}\})\1/g;
+/**
+ * Check for incorrectly quoted INSTPARM placeholders
+ */
+export function checkInstparmQuoting(content, path) {
+    const findings = [];
+    // Reset regex state
+    QUOTED_INSTPARM_REGEX.lastIndex = 0;
+    let match;
+    while ((match = QUOTED_INSTPARM_REGEX.exec(content)) !== null) {
+        const quote = match[1];
+        const placeholder = match[2];
+        const fullMatch = match[0];
+        // Calculate line number
+        const lineNumber = content.substring(0, match.index).split('\n').length;
+        findings.push({
+            rule: metadata.id,
+            severity: metadata.severity,
+            path,
+            message: `INSTPARM placeholder should not be quoted: ${fullMatch}`,
+            raw_details: `Remove the ${quote} quotes around ${placeholder}. Quoted placeholders become string literals instead of being replaced with values.`,
+            line: lineNumber,
+            fixable: true,
+            fix: {
+                description: `Remove quotes around ${placeholder}`,
+                apply: (fileContent) => {
+                    // Replace this specific quoted placeholder with unquoted version
+                    return fileContent.replace(fullMatch, placeholder);
+                },
+            },
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=instparm-quoting.js.map

package/dist/validation/workflow-scripts/instparm-quoting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instparm-quoting.js","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/instparm-quoting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,uDAAuD;IACpE,OAAO,EAAE,qFAAqF;IAC9F,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,aAAa;CACxB,CAAC;AAEF,6CAA6C;AAC7C,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,iDAAiD,CAAC;AAEhF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,IAAY;IAChE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,oBAAoB;IACpB,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC;IAEpC,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAE3B,wBAAwB;QACxB,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAExE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;YACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI;YACJ,OAAO,EAAE,8CAA8C,SAAS,EAAE;YAClE,WAAW,EAAE,cAAc,KAAK,kBAAkB,WAAW,qFAAqF;YAClJ,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE;gBACH,WAAW,EAAE,wBAAwB,WAAW,EAAE;gBAClD,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;oBAC7B,iEAAiE;oBACjE,OAAO,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBACrD,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/llm-model-id.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Script: LLM-MODEL-ID
+ *
+ * Checks that LLM model nodes use current, valid model IDs.
+ * Uses an allowlist of known-good models per provider node type.
+ * Any model not in the allowlist is flagged as a MUST violation with auto-fix.
+ *
+ * ## Updating the Allowlist
+ *
+ * When a provider releases new models or retires old ones, update the
+ * ALLOWED_MODELS map below. Each entry maps an n8n node type to the list
+ * of currently valid model IDs and a default for auto-fix.
+ */
+import type { Finding, RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+export declare function checkLlmModelId(content: string, path: string): Finding[];
+//# sourceMappingURL=llm-model-id.d.ts.map

package/dist/validation/workflow-scripts/llm-model-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-model-id.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/llm-model-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,eAAO,MAAM,QAAQ,EAAE,YAUtB,CAAC;AAgIF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAmExE"}

package/dist/validation/workflow-scripts/llm-model-id.js

@@ -0,0 +1,171 @@
+/**
+ * Script: LLM-MODEL-ID
+ *
+ * Checks that LLM model nodes use current, valid model IDs.
+ * Uses an allowlist of known-good models per provider node type.
+ * Any model not in the allowlist is flagged as a MUST violation with auto-fix.
+ *
+ * ## Updating the Allowlist
+ *
+ * When a provider releases new models or retires old ones, update the
+ * ALLOWED_MODELS map below. Each entry maps an n8n node type to the list
+ * of currently valid model IDs and a default for auto-fix.
+ */
+export const metadata = {
+    id: 'LLM-MODEL-ID',
+    name: 'llm_model_id',
+    severity: 'must',
+    description: 'LLM model nodes must use current, non-deprecated model IDs',
+    details: 'Retired or unknown model IDs will fail at runtime with "resource not found" errors. ' +
+        'Only use model IDs from the provider allowlist. Run with --fix to auto-replace.',
+    fixable: true,
+    category: 'ai-nodes',
+};
+const ALLOWED_MODELS = {
+    '@n8n/n8n-nodes-langchain.lmChatAnthropic': {
+        providerName: 'Anthropic',
+        allowed: [
+            'claude-sonnet-4-20250514',
+            'claude-opus-4-20250514',
+            'claude-haiku-4-5-20251001',
+            // Short aliases (resolve to the same models)
+            'claude-sonnet-4-6',
+            'claude-opus-4-6',
+            'claude-haiku-4-5',
+        ],
+        default: 'claude-sonnet-4-20250514',
+        tierMap: {
+            opus: 'claude-opus-4-20250514',
+            haiku: 'claude-haiku-4-5-20251001',
+            sonnet: 'claude-sonnet-4-20250514',
+        },
+    },
+    // Add more providers as needed:
+    // '@n8n/n8n-nodes-langchain.lmChatOpenAi': {
+    //   providerName: 'OpenAI',
+    //   allowed: ['gpt-4o', 'gpt-4o-mini', ...],
+    //   default: 'gpt-4o',
+    //   tierMap: { mini: 'gpt-4o-mini' },
+    // },
+};
+/**
+ * Extract the model ID string from a node's parameters.
+ * Handles both the __rl resource-list pattern and plain string values.
+ */
+function extractModelId(node) {
+    const model = node.parameters?.model;
+    if (!model)
+        return null;
+    if (typeof model === 'string')
+        return model;
+    if (typeof model === 'object') {
+        const m = model;
+        if (typeof m.value === 'string')
+            return m.value;
+    }
+    return null;
+}
+/**
+ * Pick the best replacement model based on the deprecated model's name.
+ * Falls back to the provider default if no tier keyword matches.
+ */
+function pickReplacement(deprecatedModelId, provider) {
+    const lower = deprecatedModelId.toLowerCase();
+    for (const [keyword, replacement] of Object.entries(provider.tierMap)) {
+        if (lower.includes(keyword)) {
+            return replacement;
+        }
+    }
+    return provider.default;
+}
+/**
+ * Get a human-readable name for a model ID (e.g. "Claude Sonnet 4").
+ */
+function getDisplayName(modelId, provider) {
+    for (const [keyword, id] of Object.entries(provider.tierMap)) {
+        if (id === modelId) {
+            return `${provider.providerName} ${keyword.charAt(0).toUpperCase() + keyword.slice(1)}`;
+        }
+    }
+    return modelId;
+}
+/**
+ * Get approximate line number for a node in the workflow JSON.
+ */
+function getLineNumberForNode(content, nodeId) {
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        if (lines[i].includes(`"id": "${nodeId}"`)) {
+            return i + 1;
+        }
+    }
+    return 1;
+}
+// ---------------------------------------------------------------------------
+// Main validation function
+// ---------------------------------------------------------------------------
+export function checkLlmModelId(content, path) {
+    const findings = [];
+    let workflow;
+    try {
+        workflow = JSON.parse(content);
+    }
+    catch {
+        return findings;
+    }
+    if (!workflow.nodes || !Array.isArray(workflow.nodes)) {
+        return findings;
+    }
+    for (const node of workflow.nodes) {
+        const provider = ALLOWED_MODELS[node.type];
+        if (!provider)
+            continue;
+        const modelId = extractModelId(node);
+        if (!modelId)
+            continue;
+        if (provider.allowed.includes(modelId))
+            continue;
+        // Model is not in the allowlist — flag it
+        const replacement = pickReplacement(modelId, provider);
+        const displayName = getDisplayName(replacement, provider);
+        const lineNumber = getLineNumberForNode(content, node.id);
+        findings.push({
+            rule: metadata.id,
+            severity: metadata.severity,
+            path,
+            message: `Node "${node.name}" uses unknown or deprecated ${provider.providerName} model "${modelId}". Use "${replacement}" (${displayName}).`,
+            raw_details: `The model "${modelId}" is not in the current ${provider.providerName} allowlist and may be ` +
+                `retired. Replace with "${replacement}".\n\n` +
+                `Current allowed models: ${provider.allowed.join(', ')}`,
+            nodeId: node.id,
+            line: lineNumber,
+            guideRef: {
+                path: 'integrations/anthropic.md',
+                section: 'Available Models',
+            },
+            fixable: true,
+            fix: {
+                description: `Replace "${modelId}" with "${replacement}"`,
+                apply: (fileContent) => {
+                    const parsed = JSON.parse(fileContent);
+                    const targetNode = parsed.nodes.find((n) => n.id === node.id);
+                    if (targetNode?.parameters?.model) {
+                        const m = targetNode.parameters.model;
+                        if (typeof m === 'string') {
+                            targetNode.parameters.model = replacement;
+                        }
+                        else if (typeof m === 'object' && m.value) {
+                            m.value = replacement;
+                            if (m.cachedResultName) {
+                                m.cachedResultName = displayName;
+                            }
+                        }
+                    }
+                    return JSON.stringify(parsed, null, 2);
+                },
+            },
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=llm-model-id.js.map

package/dist/validation/workflow-scripts/llm-model-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-model-id.js","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/llm-model-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,4DAA4D;IACzE,OAAO,EACL,sFAAsF;QACtF,iFAAiF;IACnF,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,UAAU;CACrB,CAAC;AAqBF,MAAM,cAAc,GAAmC;IACrD,0CAA0C,EAAE;QAC1C,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE;YACP,0BAA0B;YAC1B,wBAAwB;YACxB,2BAA2B;YAC3B,6CAA6C;YAC7C,mBAAmB;YACnB,iBAAiB;YACjB,kBAAkB;SACnB;QACD,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE;YACP,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,2BAA2B;YAClC,MAAM,EAAE,0BAA0B;SACnC;KACF;IACD,gCAAgC;IAChC,6CAA6C;IAC7C,4BAA4B;IAC5B,6CAA6C;IAC7C,uBAAuB;IACvB,sCAAsC;IACtC,KAAK;CACN,CAAC;AAoBF;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAkB;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,KAAmB,CAAC;QAC9B,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,iBAAyB,EAAE,QAAwB;IAC1E,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,QAAwB;IAC/D,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,OAAO,GAAG,QAAQ,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,IAAY;IAC3D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,QAAoC,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAEjD,0CAA0C;QAC1C,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;YACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI;YACJ,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,gCAAgC,QAAQ,CAAC,YAAY,WAAW,OAAO,WAAW,WAAW,MAAM,WAAW,IAAI;YAC7I,WAAW,EACT,cAAc,OAAO,2BAA2B,QAAQ,CAAC,YAAY,wBAAwB;gBAC7F,0BAA0B,WAAW,QAAQ;gBAC7C,2BAA2B,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC1D,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACR,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,kBAAkB;aAC5B;YACD,OAAO,EAAE,IAAI;YACb,GAAG,EAAE;gBACH,WAAW,EAAE,YAAY,OAAO,WAAW,WAAW,GAAG;gBACzD,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBACvC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC5E,IAAI,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;wBAClC,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;wBACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;4BAC1B,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,WAAW,CAAC;wBAC5C,CAAC;6BAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;4BAC5C,CAAC,CAAC,KAAK,GAAG,WAAW,CAAC;4BACtB,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;gCACvB,CAAC,CAAC,gBAAgB,GAAG,WAAW,CAAC;4BACnC,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzC,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/llm-output-access.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Script: LLM-OUTPUT-ACCESS
+ *
+ * Checks that LLM chain outputs are correctly accessed via the .output property
+ * when using a Structured Output Parser.
+ *
+ * CORRECT:   $json.output.fieldName
+ * CORRECT:   $('LLM Node').first().json.output.fieldName
+ * INCORRECT: $json.fieldName (missing .output)
+ * INCORRECT: $('LLM Node').first().json.fieldName (missing .output)
+ *
+ * When chainLlm is used with outputParserStructured, the result is wrapped in
+ * an `output` property. Accessing fields directly without .output will fail.
+ *
+ * This script provides auto-fix capability to add the .output prefix.
+ */
+import type { Finding, RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+/**
+ * Main validation function
+ */
+export declare function checkLlmOutputAccess(content: string, path: string): Finding[];
+//# sourceMappingURL=llm-output-access.d.ts.map

package/dist/validation/workflow-scripts/llm-output-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-output-access.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/llm-output-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,eAAO,MAAM,QAAQ,EAAE,YAUtB,CAAC;AAmRF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAuD7E"}

package/dist/validation/workflow-scripts/llm-output-access.js

@@ -0,0 +1,274 @@
+/**
+ * Script: LLM-OUTPUT-ACCESS
+ *
+ * Checks that LLM chain outputs are correctly accessed via the .output property
+ * when using a Structured Output Parser.
+ *
+ * CORRECT:   $json.output.fieldName
+ * CORRECT:   $('LLM Node').first().json.output.fieldName
+ * INCORRECT: $json.fieldName (missing .output)
+ * INCORRECT: $('LLM Node').first().json.fieldName (missing .output)
+ *
+ * When chainLlm is used with outputParserStructured, the result is wrapped in
+ * an `output` property. Accessing fields directly without .output will fail.
+ *
+ * This script provides auto-fix capability to add the .output prefix.
+ */
+export const metadata = {
+    id: 'LLM-OUTPUT-ACCESS',
+    name: 'llm_output_access',
+    severity: 'must',
+    description: 'LLM chain outputs must be accessed via .output property when using structured output parser',
+    details: 'When chainLlm is used with outputParserStructured, the result is wrapped in an output property. ' +
+        'Use $json.output.fieldName instead of $json.fieldName',
+    fixable: true,
+    category: 'ai-nodes',
+};
+/**
+ * Find all chainLlm nodes that have hasOutputParser: true
+ */
+function findChainLlmNodesWithParser(workflow) {
+    return workflow.nodes.filter(node => node.type === '@n8n/n8n-nodes-langchain.chainLlm' &&
+        node.parameters?.hasOutputParser === true);
+}
+/**
+ * Find nodes directly connected downstream from a given node (via main connection)
+ */
+function findDirectDownstreamNodes(workflow, nodeName) {
+    const connections = workflow.connections[nodeName];
+    if (!connections?.main)
+        return [];
+    const downstreamNodes = [];
+    for (const branch of connections.main) {
+        for (const conn of branch) {
+            if (conn.type === 'main') {
+                downstreamNodes.push(conn.node);
+            }
+        }
+    }
+    return downstreamNodes;
+}
+/**
+ * Get all node names that have chainLlm with output parser
+ */
+function getChainLlmNodeNames(workflow) {
+    const names = new Set();
+    for (const node of workflow.nodes) {
+        if (node.type === '@n8n/n8n-nodes-langchain.chainLlm' &&
+            node.parameters?.hasOutputParser === true) {
+            names.add(node.name);
+        }
+    }
+    return names;
+}
+/**
+ * Check if a node is directly downstream from any chainLlm node with output parser
+ */
+function isDirectlyConnectedToChainLlm(workflow, nodeId, chainLlmNames) {
+    const node = workflow.nodes.find(n => n.id === nodeId);
+    if (!node)
+        return false;
+    // Check if any chainLlm node connects to this node
+    for (const chainName of chainLlmNames) {
+        const downstreamNodes = findDirectDownstreamNodes(workflow, chainName);
+        if (downstreamNodes.includes(node.name)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Escape special regex characters in a string
+ */
+function escapeRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Check for direct $json.fieldName access (should be $json.output.fieldName)
+ * This only applies to nodes directly connected to chainLlm
+ */
+function checkDirectJsonAccess(content, node, path) {
+    const findings = [];
+    const nodeJson = JSON.stringify(node);
+    // Pattern to find $json.fieldName (but not $json.output.fieldName)
+    // Negative lookahead to skip $json.output
+    const directAccessRegex = /\$json\.(?!output[\.\?\s])([a-zA-Z_][a-zA-Z0-9_]*)/g;
+    // Also check for defensive patterns that should be skipped
+    const defensivePattern = /\$json\.output\?\.[a-zA-Z_]+\s*\|\|\s*\$json\.[a-zA-Z_]+/;
+    // If the node has a defensive pattern, skip it entirely
+    if (defensivePattern.test(nodeJson)) {
+        return findings;
+    }
+    let match;
+    directAccessRegex.lastIndex = 0;
+    while ((match = directAccessRegex.exec(nodeJson)) !== null) {
+        const fieldName = match[1];
+        const fullMatch = match[0];
+        // Skip if this is part of a defensive pattern (check surrounding context)
+        const contextStart = Math.max(0, match.index - 50);
+        const contextEnd = Math.min(nodeJson.length, match.index + fullMatch.length + 50);
+        const context = nodeJson.substring(contextStart, contextEnd);
+        // Skip if this looks like a fallback pattern: $json.output?.field || $json.field
+        if (/\$json\.output\?\.\w+\s*\|\|/.test(context)) {
+            continue;
+        }
+        // Calculate approximate line number in the original content
+        const lineNumber = getLineNumberForNode(content, node.id);
+        findings.push({
+            rule: metadata.id,
+            severity: metadata.severity,
+            path,
+            message: `LLM chain output accessed without .output prefix: ${fullMatch} should be $json.output.${fieldName}`,
+            raw_details: `When chainLlm is used with outputParserStructured, the output is wrapped in an 'output' property. Change ${fullMatch} to $json.output.${fieldName}`,
+            nodeId: node.id,
+            line: lineNumber,
+            fixable: true,
+            fix: {
+                description: `Change ${fullMatch} to $json.output.${fieldName}`,
+                apply: (fileContent) => {
+                    // Find the specific node in the content and fix it
+                    const parsed = JSON.parse(fileContent);
+                    const targetNode = parsed.nodes.find((n) => n.id === node.id);
+                    if (targetNode) {
+                        const nodeStr = JSON.stringify(targetNode);
+                        // Replace $json.fieldName with $json.output.fieldName (but not $json.output.*)
+                        const fixedNodeStr = nodeStr.replace(new RegExp(`\\$json\\.(?!output[.?\\s])${escapeRegex(fieldName)}`, 'g'), `$json.output.${fieldName}`);
+                        const fixedNode = JSON.parse(fixedNodeStr);
+                        const nodeIndex = parsed.nodes.findIndex((n) => n.id === node.id);
+                        parsed.nodes[nodeIndex] = fixedNode;
+                    }
+                    return JSON.stringify(parsed, null, 2);
+                },
+            },
+        });
+    }
+    return findings;
+}
+/**
+ * Check for named reference access like $('NodeName').first().json.fieldName
+ * This applies to any node referencing a chainLlm node by name
+ */
+function checkNamedReferenceAccess(content, node, chainLlmNames, path) {
+    const findings = [];
+    const nodeJson = JSON.stringify(node);
+    for (const chainName of chainLlmNames) {
+        // Escape the node name for use in regex
+        const escapedName = escapeRegex(chainName);
+        // Pattern to find $('NodeName').first().json.fieldName or $('NodeName').item.json.fieldName
+        // or $("NodeName") with double quotes
+        // But NOT .json.output.fieldName (which is correct)
+        // Using word boundary \b to properly detect "output" as a complete word
+        const namedRefRegex = new RegExp(`\\$\\(['"]${escapedName}['"]\\)\\.(first\\(\\)|item|all\\(\\)\\[\\d+\\])\\.json\\.(?!output\\b)([a-zA-Z_][a-zA-Z0-9_]*)`, 'g');
+        // Also check for defensive patterns
+        const defensivePattern = new RegExp(`\\$\\(['"]${escapedName}['"]\\).*\\.json\\.output\\?\\.[a-zA-Z_]+\\s*\\|\\|`);
+        if (defensivePattern.test(nodeJson)) {
+            continue;
+        }
+        let match;
+        namedRefRegex.lastIndex = 0;
+        while ((match = namedRefRegex.exec(nodeJson)) !== null) {
+            const accessor = match[1]; // first(), item, or all()[0]
+            const fieldName = match[2];
+            const fullMatch = match[0];
+            // Skip if this is part of a defensive pattern
+            const contextStart = Math.max(0, match.index - 50);
+            const contextEnd = Math.min(nodeJson.length, match.index + fullMatch.length + 50);
+            const context = nodeJson.substring(contextStart, contextEnd);
+            if (/\.json\.output\?\.\w+\s*\|\|/.test(context)) {
+                continue;
+            }
+            const lineNumber = getLineNumberForNode(content, node.id);
+            findings.push({
+                rule: metadata.id,
+                severity: metadata.severity,
+                path,
+                message: `LLM chain '${chainName}' output accessed without .output prefix: should be $('${chainName}').${accessor}.json.output.${fieldName}`,
+                raw_details: `When chainLlm is used with outputParserStructured, the output is wrapped in an 'output' property. Add .output before .${fieldName}`,
+                nodeId: node.id,
+                line: lineNumber,
+                fixable: true,
+                fix: {
+                    description: `Add .output prefix when accessing ${chainName} output`,
+                    apply: (fileContent) => {
+                        const parsed = JSON.parse(fileContent);
+                        const targetNode = parsed.nodes.find((n) => n.id === node.id);
+                        if (targetNode) {
+                            const nodeStr = JSON.stringify(targetNode);
+                            // Replace .json.fieldName with .json.output.fieldName for this specific node reference
+                            const fixRegex = new RegExp(`(\\$\\(['"]${escapedName}['"]\\)\\.(first\\(\\)|item|all\\(\\)\\[\\d+\\])\\.json)\\.(?!output)${escapeRegex(fieldName)}`, 'g');
+                            const fixedNodeStr = nodeStr.replace(fixRegex, `$1.output.${fieldName}`);
+                            const fixedNode = JSON.parse(fixedNodeStr);
+                            const nodeIndex = parsed.nodes.findIndex((n) => n.id === node.id);
+                            parsed.nodes[nodeIndex] = fixedNode;
+                        }
+                        return JSON.stringify(parsed, null, 2);
+                    },
+                },
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Get approximate line number for a node in the workflow JSON
+ */
+function getLineNumberForNode(content, nodeId) {
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        if (lines[i].includes(`"id": "${nodeId}"`)) {
+            return i + 1;
+        }
+    }
+    return 1;
+}
+/**
+ * Main validation function
+ */
+export function checkLlmOutputAccess(content, path) {
+    const findings = [];
+    // Try to parse the workflow JSON
+    let workflow;
+    try {
+        workflow = JSON.parse(content);
+    }
+    catch {
+        // Not valid JSON, skip
+        return findings;
+    }
+    // Make sure it's a workflow with nodes
+    if (!workflow.nodes || !Array.isArray(workflow.nodes)) {
+        return findings;
+    }
+    // Find all chainLlm nodes with output parsers
+    const chainLlmNodes = findChainLlmNodesWithParser(workflow);
+    if (chainLlmNodes.length === 0) {
+        return findings;
+    }
+    // Get the names of all chainLlm nodes with output parsers
+    const chainLlmNames = getChainLlmNodeNames(workflow);
+    // Check each node in the workflow
+    for (const node of workflow.nodes) {
+        // Skip the chainLlm nodes themselves
+        if (node.type === '@n8n/n8n-nodes-langchain.chainLlm') {
+            continue;
+        }
+        // Skip output parser nodes
+        if (node.type === '@n8n/n8n-nodes-langchain.outputParserStructured') {
+            continue;
+        }
+        // Skip model nodes
+        if (node.type.includes('lmChat')) {
+            continue;
+        }
+        // Check for direct $json access if this node is directly connected to a chainLlm
+        if (isDirectlyConnectedToChainLlm(workflow, node.id, chainLlmNames)) {
+            const directFindings = checkDirectJsonAccess(content, node, path);
+            findings.push(...directFindings);
+        }
+        // Check for named reference access in all nodes
+        const namedFindings = checkNamedReferenceAccess(content, node, chainLlmNames, path);
+        findings.push(...namedFindings);
+    }
+    return findings;
+}
+//# sourceMappingURL=llm-output-access.js.map

package/dist/validation/workflow-scripts/llm-output-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-output-access.js","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/llm-output-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,6FAA6F;IAC1G,OAAO,EACL,kGAAkG;QAClG,uDAAuD;IACzD,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,UAAU;CACrB,CAAC;AAoBF;;GAEG;AACH,SAAS,2BAA2B,CAAC,QAAwB;IAC3D,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,IAAI,CAAC,EAAE,CACL,IAAI,CAAC,IAAI,KAAK,mCAAmC;QACjD,IAAI,CAAC,UAAU,EAAE,eAAe,KAAK,IAAI,CAC5C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,QAAwB,EAAE,QAAgB;IAC3E,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW,EAAE,IAAI;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAAwB;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IACE,IAAI,CAAC,IAAI,KAAK,mCAAmC;YACjD,IAAI,CAAC,UAAU,EAAE,eAAe,KAAK,IAAI,EACzC,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CACpC,QAAwB,EACxB,MAAc,EACd,aAA0B;IAE1B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAExB,mDAAmD;IACnD,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,yBAAyB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,OAAe,EACf,IAAkB,EAClB,IAAY;IAEZ,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAEtC,mEAAmE;IACnE,0CAA0C;IAC1C,MAAM,iBAAiB,GAAG,qDAAqD,CAAC;IAEhF,2DAA2D;IAC3D,MAAM,gBAAgB,GAAG,0DAA0D,CAAC;IAEpF,wDAAwD;IACxD,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,CAAC;IACV,iBAAiB,CAAC,SAAS,GAAG,CAAC,CAAC;IAEhC,OAAO,CAAC,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAE3B,0EAA0E;QAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAE7D,iFAAiF;QACjF,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,SAAS;QACX,CAAC;QAED,4DAA4D;QAC5D,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;YACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI;YACJ,OAAO,EAAE,qDAAqD,SAAS,2BAA2B,SAAS,EAAE;YAC7G,WAAW,EAAE,4GAA4G,SAAS,oBAAoB,SAAS,EAAE;YACjK,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE;gBACH,WAAW,EAAE,UAAU,SAAS,oBAAoB,SAAS,EAAE;gBAC/D,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;oBAC7B,mDAAmD;oBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBACvC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC5E,IAAI,UAAU,EAAE,CAAC;wBACf,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBAC3C,+EAA+E;wBAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAClC,IAAI,MAAM,CAAC,8BAA8B,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,EACvE,gBAAgB,SAAS,EAAE,CAC5B,CAAC;wBACF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;wBAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;wBAChF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;oBACtC,CAAC;oBACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzC,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAChC,OAAe,EACf,IAAkB,EAClB,aAA0B,EAC1B,IAAY;IAEZ,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAEtC,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,wCAAwC;QACxC,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAE3C,4FAA4F;QAC5F,sCAAsC;QACtC,oDAAoD;QACpD,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,aAAa,WAAW,iGAAiG,EACzH,GAAG,CACJ,CAAC;QAEF,oCAAoC;QACpC,MAAM,gBAAgB,GAAG,IAAI,MAAM,CACjC,aAAa,WAAW,qDAAqD,CAC9E,CAAC;QAEF,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC;QACV,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;QAE5B,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B;YACxD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE3B,8CAA8C;YAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAE7D,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAE1D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;gBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI;gBACJ,OAAO,EAAE,cAAc,SAAS,0DAA0D,SAAS,MAAM,QAAQ,gBAAgB,SAAS,EAAE;gBAC5I,WAAW,EAAE,yHAAyH,SAAS,EAAE;gBACjJ,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE;oBACH,WAAW,EAAE,qCAAqC,SAAS,SAAS;oBACpE,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;wBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBACvC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;wBAC5E,IAAI,UAAU,EAAE,CAAC;4BACf,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;4BAC3C,uFAAuF;4BACvF,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB,cAAc,WAAW,wEAAwE,WAAW,CAAC,SAAS,CAAC,EAAE,EACzH,GAAG,CACJ,CAAC;4BACF,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,SAAS,EAAE,CAAC,CAAC;4BACzE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;4BAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;4BAChF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;wBACtC,CAAC;wBACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACzC,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,IAAY;IAChE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,iCAAiC;IACjC,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8CAA8C;IAC9C,MAAM,aAAa,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0DAA0D;IAC1D,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAErD,kCAAkC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,qCAAqC;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,mCAAmC,EAAE,CAAC;YACtD,SAAS;QACX,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,iDAAiD,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QAED,iFAAiF;QACjF,IAAI,6BAA6B,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;YACpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QACnC,CAAC;QAED,gDAAgD;QAChD,MAAM,aAAa,GAAG,yBAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QACpF,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/merge-before-terminal.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Script: MERGE-BEFORE-TERMINAL
+ *
+ * Validates that Merge nodes are never directly connected to terminal
+ * Codika nodes (Submit Result / Report Error / Ingestion Callback).
+ *
+ * A Merge node immediately before a terminal Codika node causes the
+ * workflow to hang indefinitely: the Merge waits for ALL inputs, but
+ * typically only one conditional branch executes.
+ *
+ * Merge → Code → Submit Result is fine (indirect).
+ * Merge → Submit Result is a MUST-fix violation (direct).
+ */
+import type { Finding, RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+/**
+ * Check for Merge nodes directly connected to terminal Codika nodes
+ */
+export declare function checkMergeBeforeTerminal(content: string, path: string): Finding[];
+//# sourceMappingURL=merge-before-terminal.d.ts.map

package/dist/validation/workflow-scripts/merge-before-terminal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-before-terminal.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/merge-before-terminal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,eAAO,MAAM,QAAQ,EAAE,YAWtB,CAAC;AAMF;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CA+DjF"}