@walkeros/cli 4.2.0-next-1780610489068 → 4.2.0-next-1780690800063

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # @walkeros/cli
 
-## 4.2.0-next-1780610489068
+## 4.2.0-next-1780690800063
 
 ### Minor Changes
 
@@ -29,6 +29,10 @@
   without a redeploy. A future trace window upgrades a flow to full inbound and
   outbound recording, and a null or past window reverts to the flow's `observe`
   baseline and self-expires.
+- e8f6909: Add a `secret_manage` MCP tool (and matching CLI functions) to manage
+  a flow's secrets. List secret metadata, create, rotate, and delete secrets
+  that flow steps reference as `$env.<NAME>`. Values are write-only: encrypted
+  at rest and never returned or logged.
 - 6a72a32: Source simulation gains a `collector` step that runs the real
   collector enrichment and returns the fully enriched event. Transformer
   simulation now accepts an optional raw `ingest` so request decoders like GA4
@@ -37,6 +41,12 @@
 
 ### Patch Changes
 
+- e8f6909: The bundled API contract (`spec.json` and the generated
+  `api.gen.d.ts`) now covers the full served surface, adding typed paths for
+  service accounts, invitations, billing, deployments and their sub-resources,
+  custom domains, entitlements, LLM settings, chat sessions, MCP tokens,
+  runners, and the package catalog. No runtime behavior change; clients gain
+  accurate types for these endpoints.
 - b98474f: Source-level mapping examples for the dataLayer source now key on the
   prefix as entity and the gtag action as action: `mapping.<prefix>.<action>`.
   The shipped `examples/mapping.ts`, the comprehensive `flow-complete.json`
@@ -47,6 +57,11 @@
   Commander 15, better-sqlite3 12, @libsql/client 0.17, Google Cloud
   functions-framework 5, mixpanel 0.22, and jsdom 29. No public API changes;
   installs now pull the current versions of these SDKs.
+- e8f6909: Documentation fix: server source `config.ingest` examples now use the
+  `map` operator with direct request field paths instead of a bare object. A
+  bare object like `{ url: 'req.url' }` is silently inert, so the ingest stayed
+  empty and downstream `ingest.*` fields never resolved. Affects package hints,
+  READMEs, the core source type docs, and the bundled CLI example.
 - d39a6a1: Bundle skeletons now expose each package's dev exports through a lazy
   loader. Production deploy bundles drop it entirely, so a shipped `walker.js`
   never carries the dev schema graph, while in-process simulate and push inline
@@ -70,19 +85,21 @@
 - Updated dependencies [908d6f0]
 - Updated dependencies [654ba38]
 - Updated dependencies [c27d3c1]
+- Updated dependencies [e8f6909]
 - Updated dependencies [f4a9013]
 - Updated dependencies [d65bbde]
 - Updated dependencies [2d64ed2]
+- Updated dependencies [e8f6909]
 - Updated dependencies [776e5f9]
 - Updated dependencies [c27d3c1]
 - Updated dependencies [126c0f1]
 - Updated dependencies [654ba38]
 - Updated dependencies [6a72a32]
 - Updated dependencies [3eb2467]
-  - @walkeros/core@4.2.0-next-1780610489068
-  - @walkeros/collector@4.2.0-next-1780610489068
-  - @walkeros/server-core@4.2.0-next-1780610489068
-  - @walkeros/server-destination-api@4.2.0-next-1780610489068
+  - @walkeros/core@4.2.0-next-1780690800063
+  - @walkeros/collector@4.2.0-next-1780690800063
+  - @walkeros/server-core@4.2.0-next-1780690800063
+  - @walkeros/server-destination-api@4.2.0-next-1780690800063
 
 ## 4.1.2