Add lang property to ManualNode and generalize input validation for each language; add BalanceNode

[chrisli30]

• Remove fallback values for public RPC endpoints and make program fail early when config is missing
• fix: modernize contractWrite processing and remove workflowContext backward compatibility (fix: modernize contractWrite processing and remove workflowContext backward compatibility #405)
• Migrate from workflowContext to settings for simulations (Migrate from workflowContext to settings for simulations #406)
• Remove unused method in core/taskengine/run_node_immediately.go
• Update core/testutil/utils.go
• Update core/taskengine/run_node_immediately.go
• fix: address Copilot PR fix: modernize contractWrite processing and remove workflowContext backward compatibility #407 review comments
• Added BALANCE_NODE_PRD.md
• feat: Add comprehensive input validation with size limits and JSON validation (feat: Add comprehensive input validation with size limits and JSON validation #408)
• feat: add BalanceNode (feat: add BalanceNode #410)
• fix: update the token balance response in vm_runner_balance.go

[Copilot]

Pull Request Overview

Adds a new BalanceNode for retrieving wallet token balances, introduces a new (and renumbered) Lang enum plus centralized input validation with size / format enforcement, and refactors contract write execution to require authenticated user/settings instead of legacy workflowContext. Also adds extensive tests and documentation for validation and new node behavior.

• Introduces BalanceNode protobuf messages, execution logic, and extraction support
• Renumbers / renames Lang enum values and enforces explicit language for manual trigger & code validation
• Centralizes input size & format validation; adds structured errors and many new test cases

Reviewed Changes

Copilot reviewed 47 out of 49 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
protobuf/avs.proto	Adds BalanceNode; rewrites Lang enum (breaking), adds balance outputs and configs
core/taskengine/vm_runner_balance.go	Implements BalanceNode execution (Moralis integration)
core/taskengine/validation_constants.go	Centralized size & language validation helpers
core/taskengine/run_node_immediately.go	Adds user auth & settings handling; structured manual trigger validation; size checks
core/taskengine/node_types.go	Registers BalanceNode and propagates manual trigger lang
core/taskengine/vm.go	Integrates BalanceNode in execution paths; removes chain name helper
core/taskengine/vm_runner_* (multiple)	Adds language validation calls for JS / GraphQL / Filter / Branch / CustomCode
core/testutil/utils.go	Changes test helpers to panic instead of fallback defaults
core/taskengine/vm_runner_contract_write.go	Tightens aa_sender / settings validation and error semantics
core/taskengine/*_test.go (many)	Updates tests for new lang enum, settings, size limits, structured errors
docs/VALIDATION_IMPLEMENTATION.md	New validation implementation guide
docs/INPUT_VALIDATION_AUDIT.md	New audit report documenting validation coverage
BALANCE_NODE_PRD.md	Product requirements for new BalanceNode
docs/Operator.md	Updates example RPC endpoints

Comments suppressed due to low confidence (1)

core/testutil/utils.go:1

• [nitpick] Replacing the previous graceful fallback with panics makes tests brittle and harder to run in varied CI environments (e.g., when config is intentionally absent). Consider returning a default stub URL, skipping tests, or returning an error so callers can decide, instead of panicking inside utility getters.

package testutil

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}