codika 3.0.0

package/dist/validation/workflow-scripts/merge-before-terminal.js

@@ -0,0 +1,87 @@
+/**
+ * Script: MERGE-BEFORE-TERMINAL
+ *
+ * Validates that Merge nodes are never directly connected to terminal
+ * Codika nodes (Submit Result / Report Error / Ingestion Callback).
+ *
+ * A Merge node immediately before a terminal Codika node causes the
+ * workflow to hang indefinitely: the Merge waits for ALL inputs, but
+ * typically only one conditional branch executes.
+ *
+ * Merge → Code → Submit Result is fine (indirect).
+ * Merge → Submit Result is a MUST-fix violation (direct).
+ */
+export const metadata = {
+    id: 'MERGE-BEFORE-TERMINAL',
+    name: 'merge_before_terminal',
+    severity: 'must',
+    description: 'Merge nodes must not connect directly to terminal Codika nodes',
+    details: 'A Merge node immediately before Codika Submit Result or Report Error ' +
+        'causes the workflow to hang because the Merge waits for all inputs. ' +
+        'Insert a processing node (e.g., Code or Set) between the Merge and the terminal node, ' +
+        'or duplicate the terminal node on each branch.',
+    category: 'structure',
+};
+const CODIKA_NODE_TYPE = 'n8n-nodes-codika.codika';
+const MERGE_NODE_TYPE = 'n8n-nodes-base.merge';
+const TERMINAL_OPERATIONS = new Set(['submitResult', 'reportError', 'ingestionCallback']);
+/**
+ * Check for Merge nodes directly connected to terminal Codika nodes
+ */
+export function checkMergeBeforeTerminal(content, path) {
+    const findings = [];
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        return [];
+    }
+    const nodes = parsed.nodes || [];
+    const connections = parsed.connections || {};
+    if (nodes.length === 0)
+        return [];
+    // Build node lookup by name
+    const nodeByName = new Map();
+    for (const node of nodes) {
+        nodeByName.set(node.name, node);
+    }
+    // Find all Merge nodes
+    const mergeNodes = nodes.filter(n => n.type === MERGE_NODE_TYPE);
+    for (const mergeNode of mergeNodes) {
+        const mergeConnections = connections[mergeNode.name];
+        if (!mergeConnections?.main)
+            continue;
+        // Check all output indices
+        for (const outputGroup of mergeConnections.main) {
+            if (!Array.isArray(outputGroup))
+                continue;
+            for (const conn of outputGroup) {
+                const targetNode = nodeByName.get(conn.node);
+                if (!targetNode)
+                    continue;
+                // Check if target is a terminal Codika node
+                if (targetNode.type === CODIKA_NODE_TYPE &&
+                    TERMINAL_OPERATIONS.has(targetNode.parameters?.operation)) {
+                    findings.push({
+                        rule: metadata.id,
+                        severity: metadata.severity,
+                        path,
+                        message: `Merge node "${mergeNode.name}" connects directly to terminal node "${targetNode.name}" — this will cause the workflow to hang`,
+                        raw_details: 'The Merge node waits for ALL inputs before passing data downstream, but ' +
+                            'typically only one conditional branch runs. This causes an infinite wait. ' +
+                            'Insert a processing node between the Merge and the terminal Codika node, ' +
+                            'or duplicate the terminal node on each branch feeding into the Merge.',
+                        nodeId: mergeNode.id,
+                        guideRef: {
+                            path: 'specific/codika-nodes.md',
+                            section: 'Critical Workflow Rules',
+                        },
+                    });
+                }
+            }
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=merge-before-terminal.js.map

package/dist/validation/workflow-scripts/merge-before-terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-before-terminal.js","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/merge-before-terminal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,gEAAgE;IAC7E,OAAO,EACL,uEAAuE;QACvE,sEAAsE;QACtE,wFAAwF;QACxF,gDAAgD;IAClD,QAAQ,EAAE,WAAW;CACtB,CAAC;AAEF,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE1F;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,IAAY;IACpE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACxC,MAAM,WAAW,GAAwB,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAElE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,4BAA4B;IAC5B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAe,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,uBAAuB;IACvB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IAEjE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,gBAAgB,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,EAAE,IAAI;YAAE,SAAS;QAEtC,2BAA2B;QAC3B,KAAK,MAAM,WAAW,IAAI,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;gBAAE,SAAS;YAE1C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAE1B,4CAA4C;gBAC5C,IACE,UAAU,CAAC,IAAI,KAAK,gBAAgB;oBACpC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EACzD,CAAC;oBACD,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;wBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,IAAI;wBACJ,OAAO,EAAE,eAAe,SAAS,CAAC,IAAI,yCAAyC,UAAU,CAAC,IAAI,0CAA0C;wBACxI,WAAW,EACT,0EAA0E;4BAC1E,4EAA4E;4BAC5E,2EAA2E;4BAC3E,uEAAuE;wBACzE,MAAM,EAAE,SAAS,CAAC,EAAE;wBACpB,QAAQ,EAAE;4BACR,IAAI,EAAE,0BAA0B;4BAChC,OAAO,EAAE,yBAAyB;yBACnC;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/placeholder-syntax.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Script: PLACEHOLDER-SYNTAX
+ *
+ * Validates Codika placeholder patterns in workflow files.
+ *
+ * This validator has TWO responsibilities:
+ * 1. Validate known placeholders have correct suffixes (MUST severity - errors)
+ * 2. Detect unknown/unrecognized placeholders (SHOULD severity - warnings)
+ *
+ * Known placeholder patterns and their required suffixes:
+ * - ORGSECRET_*_TERCESORG  (organization secrets)
+ * - PROCDATA_*_ATADCORP    (process data)
+ * - USERDATA_*_ATADRESU    (user data)
+ * - MEMSECRT_*_TRCESMEM    (member secrets)
+ * - FLEXCRED_*_DERCXELF    (flexible credentials)
+ * - USERCRED_*_DERCRESU    (user credentials)
+ * - ORGCRED_*_DERCGRO      (organization credentials)
+ * - INSTCRED_*_DERCTSNI    (instance credentials)
+ * - SUBWKFL_*_LFKWBUS      (subworkflow references)
+ * - INSTPARM_*_MRAPTSNI    (instance parameters)
+ */
+import type { Finding } from '../types.js';
+import type { RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+/**
+ * Check for placeholders with incorrect suffixes and unknown placeholders
+ */
+export declare function checkPlaceholderSyntax(content: string, path: string): Finding[];
+//# sourceMappingURL=placeholder-syntax.d.ts.map

package/dist/validation/workflow-scripts/placeholder-syntax.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"placeholder-syntax.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/placeholder-syntax.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,QAAQ,EAAE,YAQtB,CAAC;AAgEF;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAgF/E"}

package/dist/validation/workflow-scripts/placeholder-syntax.js

@@ -0,0 +1,154 @@
+/**
+ * Script: PLACEHOLDER-SYNTAX
+ *
+ * Validates Codika placeholder patterns in workflow files.
+ *
+ * This validator has TWO responsibilities:
+ * 1. Validate known placeholders have correct suffixes (MUST severity - errors)
+ * 2. Detect unknown/unrecognized placeholders (SHOULD severity - warnings)
+ *
+ * Known placeholder patterns and their required suffixes:
+ * - ORGSECRET_*_TERCESORG  (organization secrets)
+ * - PROCDATA_*_ATADCORP    (process data)
+ * - USERDATA_*_ATADRESU    (user data)
+ * - MEMSECRT_*_TRCESMEM    (member secrets)
+ * - FLEXCRED_*_DERCXELF    (flexible credentials)
+ * - USERCRED_*_DERCRESU    (user credentials)
+ * - ORGCRED_*_DERCGRO      (organization credentials)
+ * - INSTCRED_*_DERCTSNI    (instance credentials)
+ * - SUBWKFL_*_LFKWBUS      (subworkflow references)
+ * - INSTPARM_*_MRAPTSNI    (instance parameters)
+ */
+export const metadata = {
+    id: 'PLACEHOLDER-SYNTAX',
+    name: 'placeholder_syntax',
+    severity: 'must',
+    description: 'Placeholders must use correct suffix format',
+    details: 'Each placeholder type has a specific required suffix. Check the placeholder documentation for correct formats.',
+    fixable: true,
+    category: 'placeholder',
+};
+// Placeholder prefix to expected suffix mapping
+const PLACEHOLDER_SUFFIXES = {
+    'ORGSECRET': 'TERCESORG',
+    'PROCDATA': 'ATADCORP',
+    'USERDATA': 'ATADRESU',
+    'MEMSECRT': 'TRCESMEM',
+    'FLEXCRED': 'DERCXELF',
+    'USERCRED': 'DERCRESU',
+    'ORGCRED': 'DERCGRO',
+    'INSTCRED': 'DERCTSNI',
+    'SUBWKFL': 'LFKWBUS',
+    'INSTPARM': 'MRAPTSNI',
+};
+// All valid prefixes
+const VALID_PREFIXES = Object.keys(PLACEHOLDER_SUFFIXES);
+// Regex to find ALL potential Codika-style placeholders
+// Matches: {{UPPERCASE_WITH_UNDERSCORES}} (no spaces, no special chars, no lowercase)
+// This catches EVERYTHING that looks like a Codika placeholder
+const ALL_UPPERCASE_PLACEHOLDERS = /\{\{([A-Z][A-Z0-9_]*)\}\}/g;
+// Regex to find known placeholders with their structure
+// Matches: {{PREFIX_NAME_SUFFIX}} where PREFIX is one of our known prefixes
+const KNOWN_PLACEHOLDER_REGEX = /\{\{(ORGSECRET|PROCDATA|USERDATA|MEMSECRT|FLEXCRED|USERCRED|ORGCRED|INSTCRED|SUBWKFL|INSTPARM)_([A-Z0-9_]+)_([A-Z]+)\}\}/g;
+/**
+ * Check if a placeholder matches a known valid pattern
+ */
+function matchesKnownPattern(placeholder) {
+    for (const [prefix, expectedSuffix] of Object.entries(PLACEHOLDER_SUFFIXES)) {
+        // Check if it starts with this prefix followed by underscore
+        if (placeholder.startsWith(prefix + '_')) {
+            // Try to extract the structure: PREFIX_NAME_SUFFIX
+            const afterPrefix = placeholder.slice(prefix.length + 1);
+            const lastUnderscoreIndex = afterPrefix.lastIndexOf('_');
+            if (lastUnderscoreIndex > 0) {
+                const name = afterPrefix.slice(0, lastUnderscoreIndex);
+                const suffix = afterPrefix.slice(lastUnderscoreIndex + 1);
+                return {
+                    isKnown: true,
+                    prefix,
+                    name,
+                    suffix,
+                    expectedSuffix,
+                };
+            }
+        }
+    }
+    return { isKnown: false };
+}
+/**
+ * Calculate line number from content and match index
+ */
+function getLineNumber(content, index) {
+    return content.substring(0, index).split('\n').length;
+}
+/**
+ * Check for placeholders with incorrect suffixes and unknown placeholders
+ */
+export function checkPlaceholderSyntax(content, path) {
+    const findings = [];
+    // Track which positions we've already processed (to avoid duplicates)
+    const processedPositions = new Set();
+    // First pass: Check known placeholders with wrong suffixes (MUST severity)
+    KNOWN_PLACEHOLDER_REGEX.lastIndex = 0;
+    let match;
+    while ((match = KNOWN_PLACEHOLDER_REGEX.exec(content)) !== null) {
+        const fullMatch = match[0];
+        const prefix = match[1];
+        const name = match[2];
+        const actualSuffix = match[3];
+        const expectedSuffix = PLACEHOLDER_SUFFIXES[prefix];
+        // Mark this position as processed
+        processedPositions.add(match.index);
+        if (actualSuffix !== expectedSuffix) {
+            const lineNumber = getLineNumber(content, match.index);
+            const correctPlaceholder = `{{${prefix}_${name}_${expectedSuffix}}}`;
+            findings.push({
+                rule: metadata.id,
+                severity: 'must',
+                path,
+                message: `Invalid placeholder suffix: ${fullMatch} should end with _${expectedSuffix}`,
+                raw_details: `Replace ${fullMatch} with ${correctPlaceholder}`,
+                line: lineNumber,
+                fixable: true,
+                fix: {
+                    description: `Fix suffix: ${fullMatch} -> ${correctPlaceholder}`,
+                    apply: (fileContent) => {
+                        return fileContent.replace(fullMatch, correctPlaceholder);
+                    },
+                },
+            });
+        }
+    }
+    // Second pass: Find ALL uppercase placeholders and check for unknown ones
+    ALL_UPPERCASE_PLACEHOLDERS.lastIndex = 0;
+    while ((match = ALL_UPPERCASE_PLACEHOLDERS.exec(content)) !== null) {
+        // Skip if we already processed this position (known placeholder with valid/invalid suffix)
+        if (processedPositions.has(match.index)) {
+            continue;
+        }
+        const fullMatch = match[0];
+        const placeholder = match[1]; // The content inside {{ }}
+        // Check if this matches a known pattern
+        const result = matchesKnownPattern(placeholder);
+        if (result.isKnown) {
+            // It's a known prefix - we already handled it in first pass if suffix was wrong
+            // But if it got here, the suffix is correct, so skip
+            continue;
+        }
+        // This is an UNKNOWN placeholder - report as warning (not error)
+        // It might be intentional or a typo in the prefix — flag it but don't block
+        const lineNumber = getLineNumber(content, match.index);
+        findings.push({
+            rule: metadata.id,
+            severity: 'should',
+            path,
+            message: `Unknown placeholder pattern: ${fullMatch}`,
+            raw_details: `This doesn't match any known Codika placeholder pattern. Valid prefixes are: ${VALID_PREFIXES.join(', ')}. Each placeholder must follow the pattern: {{PREFIX_NAME_SUFFIX}} with the correct suffix for each prefix.`,
+            line: lineNumber,
+            fixable: false,
+            // No fix for unknown placeholders - we don't know what they should be
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=placeholder-syntax.js.map

package/dist/validation/workflow-scripts/placeholder-syntax.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"placeholder-syntax.js","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/placeholder-syntax.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,6CAA6C;IAC1D,OAAO,EAAE,gHAAgH;IACzH,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,aAAa;CACxB,CAAC;AAEF,gDAAgD;AAChD,MAAM,oBAAoB,GAA2B;IACnD,WAAW,EAAE,WAAW;IACxB,UAAU,EAAE,UAAU;IACtB,UAAU,EAAE,UAAU;IACtB,UAAU,EAAE,UAAU;IACtB,UAAU,EAAE,UAAU;IACtB,UAAU,EAAE,UAAU;IACtB,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,UAAU;IACtB,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,UAAU;CACvB,CAAC;AAEF,qBAAqB;AACrB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAEzD,wDAAwD;AACxD,sFAAsF;AACtF,+DAA+D;AAC/D,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEhE,wDAAwD;AACxD,4EAA4E;AAC5E,MAAM,uBAAuB,GAAG,2HAA2H,CAAC;AAE5J;;GAEG;AACH,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5E,6DAA6D;QAC7D,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACzC,mDAAmD;YACnD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,mBAAmB,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEzD,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;gBAE1D,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM;oBACN,IAAI;oBACJ,MAAM;oBACN,cAAc;iBACf,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACnD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,IAAY;IAClE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,2EAA2E;IAC3E,uBAAuB,CAAC,SAAS,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC;IAEV,OAAO,CAAC,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAEpD,kCAAkC;QAClC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpC,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,kBAAkB,GAAG,KAAK,MAAM,IAAI,IAAI,IAAI,cAAc,IAAI,CAAC;YAErE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;gBACjB,QAAQ,EAAE,MAAM;gBAChB,IAAI;gBACJ,OAAO,EAAE,+BAA+B,SAAS,qBAAqB,cAAc,EAAE;gBACtF,WAAW,EAAE,WAAW,SAAS,SAAS,kBAAkB,EAAE;gBAC9D,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE;oBACH,WAAW,EAAE,eAAe,SAAS,OAAO,kBAAkB,EAAE;oBAChE,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;wBAC7B,OAAO,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;oBAC5D,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,0BAA0B,CAAC,SAAS,GAAG,CAAC,CAAC;IAEzC,OAAO,CAAC,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnE,2FAA2F;QAC3F,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B;QAEzD,wCAAwC;QACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEhD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,gFAAgF;YAChF,qDAAqD;YACrD,SAAS;QACX,CAAC;QAED,iEAAiE;QACjE,4EAA4E;QAC5E,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAEvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;YACjB,QAAQ,EAAE,QAAQ;YAClB,IAAI;YACJ,OAAO,EAAE,gCAAgC,SAAS,EAAE;YACpD,WAAW,EAAE,gFAAgF,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,6GAA6G;YACnO,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,KAAK;YACd,sEAAsE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/retry-backoff.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Script: RETRY-BACKOFF
+ *
+ * Validates that API/HTTP nodes have retry configuration enabled.
+ * Replaces flowlint-core R1 with better node type detection and auto-fix.
+ *
+ * Flagged node types: HTTP Request, Google, Facebook, Slack, Twilio,
+ * and other external API integrations.
+ *
+ * Excluded: Internal nodes (Code, IF, Set, Merge, triggers, Codika nodes,
+ * sub-workflow calls, etc.)
+ */
+import type { Finding, RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+export declare function checkRetryBackoff(content: string, path: string): Finding[];
+//# sourceMappingURL=retry-backoff.d.ts.map

package/dist/validation/workflow-scripts/retry-backoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-backoff.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/retry-backoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,eAAO,MAAM,QAAQ,EAAE,YAQtB,CAAC;AA8JF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAkD1E"}

package/dist/validation/workflow-scripts/retry-backoff.js

@@ -0,0 +1,197 @@
+/**
+ * Script: RETRY-BACKOFF
+ *
+ * Validates that API/HTTP nodes have retry configuration enabled.
+ * Replaces flowlint-core R1 with better node type detection and auto-fix.
+ *
+ * Flagged node types: HTTP Request, Google, Facebook, Slack, Twilio,
+ * and other external API integrations.
+ *
+ * Excluded: Internal nodes (Code, IF, Set, Merge, triggers, Codika nodes,
+ * sub-workflow calls, etc.)
+ */
+export const metadata = {
+    id: 'RETRY-BACKOFF',
+    name: 'retry_backoff',
+    severity: 'should',
+    description: 'API/HTTP nodes should have retry configuration enabled',
+    details: 'Enable "Retry on Fail" in node settings to handle transient API failures gracefully',
+    fixable: true,
+    category: 'resilience',
+};
+// Default retry configuration for auto-fix
+const DEFAULT_MAX_TRIES = 3;
+const DEFAULT_WAIT_BETWEEN_TRIES = 1000;
+// ---------------------------------------------------------------------------
+// Node type classification
+// ---------------------------------------------------------------------------
+/**
+ * Node types that are internal / control-flow and should NOT be flagged.
+ * Checked by exact match on the last segment of the type.
+ */
+const INTERNAL_NODE_NAMES = new Set([
+    'code',
+    'function',
+    'functionItem',
+    'if',
+    'switch',
+    'set',
+    'merge',
+    'noOp',
+    'stickyNote',
+    'splitInBatches',
+    'itemLists',
+    'dateTime',
+    'crypto',
+    'xml',
+    'html',
+    'markdown',
+    'compression',
+    'renameKeys',
+    'splitOut',
+    'aggregate',
+    'removeDuplicates',
+    'limit',
+    'sort',
+    'filter',
+    'respondToWebhook',
+    'wait',
+    'executeWorkflow',
+    'executeWorkflowTrigger',
+    'webhook',
+    'scheduleTrigger',
+    'manualTrigger',
+    'errorTrigger',
+    'workflowTrigger',
+    'emailReadImap',
+    'codika',
+    'localFileTrigger',
+    'readBinaryFiles',
+    'writeBinaryFile',
+    'readPdf',
+    'convertToFile',
+    'extractFromFile',
+    // Database / data-store nodes (reliable internal connections)
+    'supabase',
+    'postgres',
+    'mySql',
+    'mongoDb',
+    'redis',
+    'elasticsearch',
+]);
+/**
+ * Determine if a node type represents an external API call that should have retry.
+ */
+function isApiNode(type) {
+    // Extract the node name (last segment after the last dot)
+    const segments = type.split('.');
+    const nodeName = segments[segments.length - 1];
+    // Skip internal/control-flow nodes
+    if (INTERNAL_NODE_NAMES.has(nodeName)) {
+        return false;
+    }
+    // Skip Codika custom nodes
+    if (type.includes('codika')) {
+        return false;
+    }
+    // Skip LangChain nodes (AI chain internals, not direct API calls)
+    if (type.includes('langchain')) {
+        return false;
+    }
+    // Skip trigger nodes (they receive, not send)
+    if (nodeName.toLowerCase().endsWith('trigger')) {
+        return false;
+    }
+    // Flag known external API / SaaS integration patterns
+    // Excludes databases (supabase, postgres, mysql, mongodb, redis, elasticsearch)
+    // which are typically on internal networks with reliable connections
+    const apiPatterns = /http|request|google|gmail|facebook|slack|telegram|twilio|notion|airtable|hubspot|stripe|microsoft|outlook|teams|discord|github|gitlab|jira|asana|trello|shopify|mailchimp|sendgrid|aws|azure|s3/i;
+    if (apiPatterns.test(type)) {
+        return true;
+    }
+    // Flag httpRequest explicitly
+    if (nodeName === 'httpRequest') {
+        return true;
+    }
+    // For other node types, check if they're likely API integrations
+    // (nodes from n8n-nodes-base that aren't in the internal list are usually integrations)
+    if (type.startsWith('n8n-nodes-base.') && !INTERNAL_NODE_NAMES.has(nodeName)) {
+        // Only flag if the name suggests an external service
+        // (conservative: don't flag unknown nodes)
+        return false;
+    }
+    return false;
+}
+/**
+ * Check if a node has retry configuration enabled.
+ * Checks three locations (same as flowlint R1):
+ * 1. node.parameters.options.retryOnFail
+ * 2. node.parameters.retryOnFail
+ * 3. node.retryOnFail (top-level)
+ */
+function hasRetryEnabled(node) {
+    // Check top-level
+    if (node.retryOnFail === true)
+        return true;
+    // Check parameters
+    const params = node.parameters || {};
+    if (params.retryOnFail === true)
+        return true;
+    // Check parameters.options
+    const options = params.options;
+    if (options?.retryOnFail === true)
+        return true;
+    return false;
+}
+// ---------------------------------------------------------------------------
+// Main validation function
+// ---------------------------------------------------------------------------
+export function checkRetryBackoff(content, path) {
+    const findings = [];
+    let workflow;
+    try {
+        workflow = JSON.parse(content);
+    }
+    catch {
+        return findings;
+    }
+    if (!workflow.nodes || !Array.isArray(workflow.nodes)) {
+        return findings;
+    }
+    for (const node of workflow.nodes) {
+        if (!isApiNode(node.type))
+            continue;
+        if (hasRetryEnabled(node))
+            continue;
+        findings.push({
+            rule: metadata.id,
+            severity: metadata.severity,
+            path,
+            message: `Node "${node.name}" is missing retry/backoff configuration`,
+            raw_details: 'Enable "Retry on Fail" in the node settings. This helps handle transient API ' +
+                'failures (timeouts, rate limits, 5xx errors) gracefully.',
+            nodeId: node.id,
+            fixable: true,
+            fix: {
+                description: `Enable retry on "${node.name}" (3 retries, 1s wait)`,
+                apply: (fileContent) => {
+                    const parsed = JSON.parse(fileContent);
+                    const target = parsed.nodes.find((n) => n.id === node.id);
+                    if (target) {
+                        target.retryOnFail = true;
+                        // Only set defaults if not already configured
+                        if (target.maxTries === undefined) {
+                            target.maxTries = DEFAULT_MAX_TRIES;
+                        }
+                        if (target.waitBetweenTries === undefined) {
+                            target.waitBetweenTries = DEFAULT_WAIT_BETWEEN_TRIES;
+                        }
+                    }
+                    return JSON.stringify(parsed, null, 2);
+                },
+            },
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=retry-backoff.js.map

package/dist/validation/workflow-scripts/retry-backoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-backoff.js","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/retry-backoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,wDAAwD;IACrE,OAAO,EAAE,qFAAqF;IAC9F,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,YAAY;CACvB,CAAC;AAEF,2CAA2C;AAC3C,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAExC,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,UAAU;IACV,cAAc;IACd,IAAI;IACJ,QAAQ;IACR,KAAK;IACL,OAAO;IACP,MAAM;IACN,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,QAAQ;IACR,KAAK;IACL,MAAM;IACN,UAAU;IACV,aAAa;IACb,YAAY;IACZ,UAAU;IACV,WAAW;IACX,kBAAkB;IAClB,OAAO;IACP,MAAM;IACN,QAAQ;IACR,kBAAkB;IAClB,MAAM;IACN,iBAAiB;IACjB,wBAAwB;IACxB,SAAS;IACT,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,QAAQ;IACR,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,SAAS;IACT,eAAe;IACf,iBAAiB;IACjB,8DAA8D;IAC9D,UAAU;IACV,UAAU;IACV,OAAO;IACP,SAAS;IACT,OAAO;IACP,eAAe;CAChB,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE/C,mCAAmC;IACnC,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2BAA2B;IAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8CAA8C;IAC9C,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sDAAsD;IACtD,gFAAgF;IAChF,qEAAqE;IACrE,MAAM,WAAW,GAAG,kMAAkM,CAAC;IAEvN,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iEAAiE;IACjE,wFAAwF;IACxF,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,qDAAqD;QACrD,2CAA2C;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAgBD;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,IAAkB;IACzC,kBAAkB;IAClB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE3C,mBAAmB;IACnB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7C,2BAA2B;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;IACtE,IAAI,OAAO,EAAE,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAY;IAC7D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,QAAoC,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,SAAS;QAEpC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;YACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI;YACJ,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,0CAA0C;YACrE,WAAW,EACT,+EAA+E;gBAC/E,0DAA0D;YAC5D,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,IAAI;YACb,GAAG,EAAE;gBACH,WAAW,EAAE,oBAAoB,IAAI,CAAC,IAAI,wBAAwB;gBAClE,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxE,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;wBAC1B,8CAA8C;wBAC9C,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;4BAClC,MAAM,CAAC,QAAQ,GAAG,iBAAiB,CAAC;wBACtC,CAAC;wBACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;4BAC1C,MAAM,CAAC,gBAAgB,GAAG,0BAA0B,CAAC;wBACvD,CAAC;oBACH,CAAC;oBACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzC,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/webhook-id.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Script: WEBHOOK-ID
+ *
+ * Validates that every n8n-nodes-base.webhook node has a `webhookId`
+ * property at the node level (sibling to name, type, parameters).
+ *
+ * Without webhookId, the webhook path is never registered in production
+ * even when the workflow is active, causing 404 errors at runtime.
+ */
+import type { Finding } from '../types.js';
+import type { RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+/**
+ * Check that all webhook nodes have a webhookId property.
+ */
+export declare function checkWebhookId(content: string, path: string): Finding[];
+//# sourceMappingURL=webhook-id.d.ts.map

package/dist/validation/workflow-scripts/webhook-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-id.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/webhook-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,QAAQ,EAAE,YAQtB,CAAC;AAeF;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAmDvE"}

package/dist/validation/workflow-scripts/webhook-id.js

@@ -0,0 +1,79 @@
+/**
+ * Script: WEBHOOK-ID
+ *
+ * Validates that every n8n-nodes-base.webhook node has a `webhookId`
+ * property at the node level (sibling to name, type, parameters).
+ *
+ * Without webhookId, the webhook path is never registered in production
+ * even when the workflow is active, causing 404 errors at runtime.
+ */
+export const metadata = {
+    id: 'WEBHOOK-ID',
+    name: 'webhook_id',
+    severity: 'must',
+    description: 'Webhook nodes must have a webhookId property for production registration',
+    details: 'Add a "webhookId" string property to each webhook node (sibling to name/type/parameters)',
+    fixable: true,
+    category: 'webhook',
+};
+/**
+ * Generate a webhookId by slugifying the node name.
+ * Lowercases, replaces spaces and non-alphanumeric chars with hyphens,
+ * collapses consecutive hyphens, and trims leading/trailing hyphens.
+ */
+function slugify(name) {
+    return name
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '');
+}
+/**
+ * Check that all webhook nodes have a webhookId property.
+ */
+export function checkWebhookId(content, path) {
+    const findings = [];
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        return [];
+    }
+    const nodes = parsed.nodes;
+    if (!Array.isArray(nodes)) {
+        return [];
+    }
+    for (const node of nodes) {
+        if (node.type !== 'n8n-nodes-base.webhook') {
+            continue;
+        }
+        if (!node.webhookId || typeof node.webhookId !== 'string') {
+            const generatedId = slugify(node.name || 'webhook');
+            findings.push({
+                rule: metadata.id,
+                severity: metadata.severity,
+                path,
+                message: `Webhook node "${node.name}" is missing webhookId property`,
+                raw_details: `Add "webhookId": "${generatedId}" to the node object (sibling to name/type/parameters)`,
+                fixable: true,
+                fix: {
+                    description: `Add webhookId "${generatedId}" to webhook node "${node.name}"`,
+                    apply: (fileContent) => {
+                        const data = JSON.parse(fileContent);
+                        for (const n of data.nodes) {
+                            if (n.type === 'n8n-nodes-base.webhook' &&
+                                n.name === node.name &&
+                                (!n.webhookId || typeof n.webhookId !== 'string')) {
+                                n.webhookId = slugify(n.name || 'webhook');
+                            }
+                        }
+                        return JSON.stringify(data, null, 2);
+                    },
+                },
+            });
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=webhook-id.js.map

package/dist/validation/workflow-scripts/webhook-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-id.js","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/webhook-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,CAAC,MAAM,QAAQ,GAAiB;IACpC,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,0EAA0E;IACvF,OAAO,EAAE,0FAA0F;IACnG,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,SAAS;CACpB,CAAC;AAEF;;;;GAIG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,IAAY;IAC1D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC3C,SAAS;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;YAEpD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ,CAAC,EAAE;gBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI;gBACJ,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,iCAAiC;gBACpE,WAAW,EAAE,qBAAqB,WAAW,wDAAwD;gBACrG,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE;oBACH,WAAW,EAAE,kBAAkB,WAAW,sBAAsB,IAAI,CAAC,IAAI,GAAG;oBAC5E,KAAK,EAAE,CAAC,WAAmB,EAAE,EAAE;wBAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;4BAC3B,IACE,CAAC,CAAC,IAAI,KAAK,wBAAwB;gCACnC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;gCACpB,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,EACjD,CAAC;gCACD,CAAC,CAAC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;4BAC7C,CAAC;wBACH,CAAC;wBACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACvC,CAAC;iBACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validation/workflow-scripts/workflow-format.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Script: WORKFLOW-FORMAT
+ *
+ * Validates that workflow JSON files use canonical formatting:
+ * JSON.stringify(parsed, null, 2) + '\n'
+ *
+ * This must be the LAST script in the workflowScripts array so that
+ * its fix normalizes formatting after all other fixes have run.
+ */
+import type { Finding, RuleMetadata } from '../types.js';
+export declare const metadata: RuleMetadata;
+/**
+ * Check that workflow JSON uses canonical formatting
+ */
+export declare function checkWorkflowFormat(content: string, path: string): Finding[];
+//# sourceMappingURL=workflow-format.d.ts.map

package/dist/validation/workflow-scripts/workflow-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-format.d.ts","sourceRoot":"","sources":["../../../src/validation/workflow-scripts/workflow-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,eAAO,MAAM,QAAQ,EAAE,YAUtB,CAAC;AAEF;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CA8B5E"}