Function validateSafeOutputsSamples

pkg/workflow/samples_validation.go:105–125

validateSafeOutputsSamples validates every `samples` entry on every enabled safe-output handler against the corresponding MCP tool's inputSchema. Sample sidecar fields (e.g. `patch`) are stripped before validation. Returns the first error encountered; iteration order is deterministic (sorted by stru

(config *SafeOutputsConfig)

// the first error encountered; iteration order is deterministic (sorted by
// struct field name) so error messages are stable.
func validateSafeOutputsSamples(config *SafeOutputsConfig) error {
	if config == nil {
		return nil
	}

	fieldNames := sliceutil.SortedKeys(safeOutputFieldMapping)
	samplesValidationLog.Printf("Validating safe-outputs samples across %d candidate fields", len(fieldNames))

	for _, fieldName := range fieldNames {
		toolName := safeOutputFieldMapping[fieldName]
		base := extractBaseSafeOutputConfig(config, fieldName)
		if base == nil || len(base.Samples) == 0 {
			continue
		}
		samplesValidationLog.Printf("Validating %d sample(s) for field %q (tool %q)", len(base.Samples), fieldName, toolName)
		if err := validateSamplesForTool(toolName, base.Samples); err != nil {
			return err
		}
	}
	return nil
}

// extractBaseSafeOutputConfig returns the embedded BaseSafeOutputConfig of the
// non-nil safe-output config at SafeOutputsConfig.<fieldName>, or nil if the