refactor: use Zod for state/config schemas; log auto-update errors

Co-authored-by: fuxingloh <4266087+fuxingloh@users.noreply.github.com>

Author: Copilot

packages/use-agently/package.json

@@ -29,7 +29,8 @@
     "@x402/fetch": "^2.4.0",
     "commander": "^14.0.3",
     "viem": "^2.46.3",
-    "yaml": "^2.8.2"
+    "yaml": "^2.8.2",
+    "zod": "^4"
   },
   "devDependencies": {
     "@types/bun": "^1.3.9",

packages/use-agently/src/commands/update.test.ts

@@ -186,10 +186,13 @@ describe("checkAutoUpdate", () => {
     expect(mockSaveState).toHaveBeenCalledTimes(1);
   });
 
-  test("silently swallows errors", async () => {
+  test("logs warning but does not throw on errors", async () => {
     fetchSpy.mockResolvedValue({ ok: false, status: 500 } as Response);
     mockLoadState.mockImplementation(async () => ({}));
+    const warnSpy = spyOn(console, "warn").mockImplementation(() => {});
 
     await expect(checkAutoUpdate()).resolves.toBeUndefined();
+    expect(warnSpy).toHaveBeenCalledWith("Auto-update failed:", expect.any(String));
+    warnSpy.mockRestore();
   });
 });

packages/use-agently/src/commands/update.ts

@@ -61,8 +61,8 @@ export async function checkAutoUpdate(): Promise<void> {
     if (hoursSinceLastCheck < 24) return;
 
     await checkAndUpdate();
-  } catch {
-    // Auto-update errors are silently swallowed
+  } catch (err) {
+    console.warn("Auto-update failed:", err instanceof Error ? err.message : String(err));
   }
 }
 

packages/use-agently/src/config.ts

@@ -1,18 +1,19 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { mkdir, rename, readFile, writeFile } from "node:fs/promises";
+import { z } from "zod";
 
 export type ConfigScope = "global" | "local";
 
-export interface WalletConfig {
-  type: string;
-  [key: string]: unknown;
-}
+export const WalletConfigSchema = z.object({ type: z.string() }).passthrough();
 
-export interface Config {
-  wallet: WalletConfig;
-  env?: Record<string, number | string>;
-}
+export const ConfigSchema = z.object({
+  wallet: WalletConfigSchema,
+  env: z.record(z.string(), z.union([z.number(), z.string()])).optional(),
+});
+
+export type WalletConfig = z.infer<typeof WalletConfigSchema>;
+export type Config = z.infer<typeof ConfigSchema>;
 
 function getConfigDir(scope: ConfigScope): string {
   return scope === "local" ? join(process.cwd(), ".use-agently") : join(homedir(), ".use-agently");
@@ -29,13 +30,21 @@ async function loadConfigFromPath(configPath: string): Promise<Config | undefine
   } catch {
     return undefined;
   }
+  let raw: unknown;
   try {
-    return JSON.parse(contents) as Config;
+    raw = JSON.parse(contents);
   } catch {
     throw new Error(
       `Config file at ${configPath} contains invalid JSON. Please fix or delete it and run \`use-agently init\`.`,
     );
   }
+  const result = ConfigSchema.safeParse(raw);
+  if (!result.success) {
+    throw new Error(
+      `Config file at ${configPath} has an invalid format. Please fix or delete it and run \`use-agently init\`.`,
+    );
+  }
+  return result.data;
 }
 
 export async function loadConfig(scope?: ConfigScope): Promise<Config | undefined> {

packages/use-agently/src/state.ts

@@ -1,10 +1,13 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { z } from "zod";
 
-export interface State {
-  lastUpdateCheck?: string;
-}
+export const StateSchema = z.object({
+  lastUpdateCheck: z.string().optional(),
+});
+
+export type State = z.infer<typeof StateSchema>;
 
 function getStateDir(): string {
   return join(homedir(), ".use-agently");
@@ -17,7 +20,8 @@ function getStatePath(): string {
 export async function loadState(): Promise<State> {
   try {
     const contents = await readFile(getStatePath(), "utf8");
-    return JSON.parse(contents) as State;
+    const result = StateSchema.safeParse(JSON.parse(contents));
+    return result.success ? result.data : {};
   } catch {
     return {};
   }