@walkeros/cli 4.2.0 → 4.2.1-next-1781526381392

package/dist/index.d.ts

@@ -197,6 +197,21 @@ interface BundleStats {
     buildTime: number;
     treeshakingEffective: boolean;
 }
+/**
+ * Build the wireConfig data payload for a flow as a plain object.
+ *
+ * This is the same object the bundler bakes into a skeleton as
+ * `__configData` (section, step id, data-layer props), produced by the
+ * same classification pass the bundler uses. Callers that inject data at
+ * simulate time (the `data` option of the simulate functions) must build
+ * the FULL payload from the FULL config with this helper; injection
+ * replaces the baked payload, it does not merge.
+ *
+ * Mirrors the bundler's own call path (`detectNamedImports` feeding
+ * `buildSplitConfigObject`) so the result stays identical to the baked
+ * payload by construction.
+ */
+declare function buildDataPayload(flowSettings: Flow): Record<string, unknown>;
 
 /**
  * Named bundle targets with frozen presets.
@@ -408,7 +423,28 @@ declare function push(configOrPath: string | unknown, event: unknown, options?:
     mock?: string[];
     snapshot?: string;
 }): Promise<PushResult>;
-interface SimulateSourceOptions {
+/**
+ * Shared data-injection seam for all simulate functions.
+ */
+interface SimulateDataOptions {
+    /**
+     * Wire-config data payload to execute instead of the bundle's baked
+     * `__configData`. Shape: the split-config data payload the bundler
+     * emits (section, step id, data-layer props), as built by
+     * `buildDataPayload`.
+     *
+     * The payload REPLACES the baked data, there is no deep-merge: build
+     * the full payload from the full config. Injection granularity follows
+     * the skeleton's `__data` references, which are emitted per TOP-LEVEL
+     * step prop. Changed values for any nested key under an existing
+     * top-level data prop (e.g. a new entity-action rule inside an existing
+     * `mapping`) take effect without a rebundle. An entirely NEW top-level
+     * data prop on a step has no `__data` reference in the skeleton, so it
+     * is IGNORED by injection and requires a rebundle.
+     */
+    data?: Record<string, unknown>;
+}
+interface SimulateSourceOptions extends SimulateDataOptions {
     sourceId: string;
     bundlePath?: string;
     flow?: string;
@@ -427,7 +463,7 @@ interface SimulateSourceOptions {
  * content shapes. The source's createTrigger defines what it expects.
  */
 declare function simulateSource(configOrPath: string | Flow.Json, input: unknown, options: SimulateSourceOptions): Promise<Simulation.Result>;
-interface SimulateTransformerOptions {
+interface SimulateTransformerOptions extends SimulateDataOptions {
     transformerId: string;
     bundlePath?: string;
     flow?: string;
@@ -453,7 +489,7 @@ interface SimulateTransformerOptions {
  * If the transformer drops the event (returns false), output event is null.
  */
 declare function simulateTransformer(configOrPath: string | Flow.Json, event: WalkerOS.DeepPartialEvent, options: SimulateTransformerOptions): Promise<Simulation.Result>;
-interface SimulateCollectorOptions {
+interface SimulateCollectorOptions extends SimulateDataOptions {
     collectorName: string;
     bundlePath?: string;
     flow?: string;
@@ -476,7 +512,7 @@ interface SimulateCollectorOptions {
  * the runtime's own enrichment (`enrichEvent`); it does not reimplement it.
  */
 declare function simulateCollector(configOrPath: string | Flow.Json, event: WalkerOS.DeepPartialEvent, options: SimulateCollectorOptions): Promise<Simulation.Result>;
-interface SimulateDestinationOptions {
+interface SimulateDestinationOptions extends SimulateDataOptions {
     destinationId: string;
     bundlePath?: string;
     flow?: string;
@@ -964,6 +1000,122 @@ interface paths {
     patch?: never;
     trace?: never;
   };
+  '/api/account': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    post?: never;
+    /**
+     * Delete own account
+     * @description Soft-delete the authenticated account, starting the 30-day grace window. Requires a confirmation of the account email in the body. Revokes all sessions, API tokens, and MCP tokens. Blocked with 409 when the caller is the sole owner of a project that still has other members.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: {
+        content: {
+          'application/json': components['schemas']['DeleteAccountRequest'];
+        };
+      };
+      responses: {
+        /** @description Account scheduled for deletion */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /** @description Confirmation email does not match */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Sole owner of a shared project */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['DeleteAccountBlocked'];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/api/account/export': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Export own account data
+     * @description Download a portable JSON export of everything the platform holds about the authenticated account: profile, memberships, token and session metadata, MCP sessions with messages, feedback, and invitations. Metadata only; token hashes and secret values are never included. Served as a file attachment.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Account data export (file attachment) */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['AccountExportResponse'];
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/api/sessions': {
     parameters: {
       query?: never;
@@ -2836,7 +2988,7 @@ interface paths {
     put?: never;
     /**
      * Start deployment
-     * @description Start a new deployment for a flow. Returns 400 AMBIGUOUS_SETTINGS if the flow has multiple named settings — use the per-settings deploy endpoint instead.
+     * @description Start a new deployment for a flow. The bundle runs asynchronously on the worker. Returns 400 AMBIGUOUS_CONFIG when the flow has multiple named settings (use the per-settings deploy endpoint instead). When an Idempotency-Key replays a prior request, returns 200 with status `already_created`.
      */
     post: {
       parameters: {
@@ -2850,6 +3002,15 @@ interface paths {
       };
       requestBody?: never;
       responses: {
+        /** @description Deployment started, or idempotent replay of a prior request */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['StartDeploymentResponse'];
+          };
+        };
         /** @description Deployment started */
         201: {
           headers: {
@@ -2877,6 +3038,15 @@ interface paths {
             'application/json': components['schemas']['ErrorResponse'];
           };
         };
+        /** @description Forbidden */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
         /** @description Not found */
         404: {
           headers: {
@@ -2895,6 +3065,15 @@ interface paths {
             'application/json': components['schemas']['ErrorResponse'];
           };
         };
+        /** @description Rate limited or concurrent deploy limit (Retry-After header) */
+        429: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
         /** @description Service unavailable */
         503: {
           headers: {
@@ -3674,25 +3853,375 @@ interface paths {
       };
     };
     put?: never;
-    post?: never;
+    post?: never;
+    /**
+     * Delete preview
+     * @description Delete a preview and its S3 bundle. Requires member role.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          projectId: string;
+          flowId: string;
+          previewId: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Preview deleted */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Forbidden */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Not found */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/api/projects/{projectId}/flows/{flowId}/observe-sessions': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Start observe session
+     * @description Start an Observe session for a flow. Validates the flow topology, inserts the row, and kicks off detached provisioning. Returns the row immediately as arming.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          projectId: string;
+          flowId: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: {
+        content: {
+          'application/json': components['schemas']['CreateObserveSessionRequest'];
+        };
+      };
+      responses: {
+        /** @description Observe session started */
+        201: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ObserveSessionResponse'];
+          };
+        };
+        /** @description Validation error */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Forbidden */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Not found */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Flow topology not supported */
+        409: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Rate limit exceeded */
+        429: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/api/projects/{projectId}/flows/{flowId}/observe-sessions/{sessionId}': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Get observe session
+     * @description Get an observe session: status, error message, config snapshot, web activation info, and the live server endpoint when live.
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          projectId: string;
+          flowId: string;
+          sessionId: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Observe session details */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ObserveSessionResponse'];
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Forbidden */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Not found */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    /**
+     * End observe session
+     * @description End an observe session: tear down the container, revoke credentials, delete the web preview, delete the row. Idempotent.
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          projectId: string;
+          flowId: string;
+          sessionId: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Observe session ended */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Forbidden */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Not found */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/api/projects/{projectId}/flows/{flowId}/observe-sessions/{sessionId}/heartbeat': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Heartbeat observe session
+     * @description Keep an observe session warm. The window posts this every 30s while open; a stale session is reaped by the janitor.
+     */
+    post: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          projectId: string;
+          flowId: string;
+          sessionId: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Heartbeat recorded */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ObserveSessionHeartbeatResponse'];
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+        /** @description Not found */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
+      };
+    };
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/api/projects/{projectId}/flows/{flowId}/observe-sessions/{sessionId}/end': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
     /**
-     * Delete preview
-     * @description Delete a preview and its S3 bundle. Requires member role.
+     * End observe session (beacon)
+     * @description The navigator.sendBeacon end target for page unload. Mirrors the DELETE end route because sendBeacon cannot send a DELETE. Idempotent.
      */
-    delete: {
+    post: {
       parameters: {
         query?: never;
         header?: never;
         path: {
           projectId: string;
           flowId: string;
-          previewId: string;
+          sessionId: string;
         };
         cookie?: never;
       };
       requestBody?: never;
       responses: {
-        /** @description Preview deleted */
+        /** @description Observe session ended */
         204: {
           headers: {
             [name: string]: unknown;
@@ -3708,15 +4237,6 @@ interface paths {
             'application/json': components['schemas']['ErrorResponse'];
           };
         };
-        /** @description Forbidden */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            'application/json': components['schemas']['ErrorResponse'];
-          };
-        };
         /** @description Not found */
         404: {
           headers: {
@@ -3728,6 +4248,7 @@ interface paths {
         };
       };
     };
+    delete?: never;
     options?: never;
     head?: never;
     patch?: never;
@@ -6303,7 +6824,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  '/api/projects/{projectId}/deployments/{deploymentId}/versions': {
+  '/api/projects/{projectId}/deployments/{deploymentId}/stream': {
     parameters: {
       query?: never;
       header?: never;
@@ -6311,15 +6832,12 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List deployment versions
-     * @description List the version history for a deployment, paginated. Requires member role.
+     * Stream deployment status (SSE)
+     * @description Server-Sent Events (`text/event-stream`) stream of a deployment's live status. Emits named events: `status` (a snapshot payload, schema below), `done` (terminal, no body), and `timeout`. The CLI consumes this with a raw fetch while waiting for a deploy to finish. Requires member role. The schema documents the JSON `data:` of a `status` event; `errorCode`/`errorMessage` carry the persisted, redacted classification of a failed deploy.
      */
     get: {
       parameters: {
-        query?: {
-          limit?: number;
-          offset?: number | null;
-        };
+        query?: never;
         header?: never;
         path: {
           projectId: string;
@@ -6329,13 +6847,14 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description Version history */
+        /** @description SSE stream; `status` event payload shape documented here. */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            'application/json': components['schemas']['ListDeploymentVersionsResponse'];
+            'text/event-stream': components['schemas']['DeploymentStreamStatusEvent'];
+            'application/json': components['schemas']['DeploymentStreamStatusEvent'];
           };
         };
         /** @description Unauthorized */
@@ -6347,15 +6866,6 @@ interface paths {
             'application/json': components['schemas']['ErrorResponse'];
           };
         };
-        /** @description Forbidden */
-        403: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            'application/json': components['schemas']['ErrorResponse'];
-          };
-        };
         /** @description Not found */
         404: {
           headers: {
@@ -6365,15 +6875,6 @@ interface paths {
             'application/json': components['schemas']['ErrorResponse'];
           };
         };
-        /** @description Rate limited */
-        429: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            'application/json': components['schemas']['ErrorResponse'];
-          };
-        };
       };
     };
     put?: never;
@@ -6384,7 +6885,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  '/api/projects/{projectId}/deployments/{deploymentId}/versions/current/content': {
+  '/api/projects/{projectId}/deployments/{deploymentId}/versions': {
     parameters: {
       query?: never;
       header?: never;
@@ -6392,12 +6893,15 @@ interface paths {
       cookie?: never;
     };
     /**
-     * Get current deployed content
-     * @description Get the active deployed per-setting content for a deployment, used to diff changes since deploy. Content is masked and display-only; every field is null when there is no deployed baseline. Requires member role.
+     * List deployment versions
+     * @description List the version history for a deployment, paginated. Requires member role.
      */
     get: {
       parameters: {
-        query?: never;
+        query?: {
+          limit?: number;
+          offset?: number | null;
+        };
         header?: never;
         path: {
           projectId: string;
@@ -6407,13 +6911,13 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description Deployed content (or a null baseline) */
+        /** @description Version history */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            'application/json': components['schemas']['DeployedContentResponse'];
+            'application/json': components['schemas']['ListDeploymentVersionsResponse'];
           };
         };
         /** @description Unauthorized */
@@ -6462,7 +6966,7 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  '/api/projects/{projectId}/deployments/{deploymentId}/heartbeats': {
+  '/api/projects/{projectId}/deployments/{deploymentId}/versions/current/content': {
     parameters: {
       query?: never;
       header?: never;
@@ -6470,19 +6974,12 @@ interface paths {
       cookie?: never;
     };
     /**
-     * List deployment heartbeats
-     * @description List heartbeat records for a deployment with optional from/to time-range filtering and pagination. Requires member role.
+     * Get current deployed content
+     * @description Get the active deployed per-setting content for a deployment, used to diff changes since deploy. Content is masked and display-only; every field is null when there is no deployed baseline. Requires member role.
      */
     get: {
       parameters: {
-        query?: {
-          /** @description ISO start of the time range. */
-          from?: string;
-          /** @description ISO end of the time range. */
-          to?: string;
-          limit?: number;
-          offset?: number | null;
-        };
+        query?: never;
         header?: never;
         path: {
           projectId: string;
@@ -6492,13 +6989,13 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description Heartbeat history */
+        /** @description Deployed content (or a null baseline) */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            'application/json': components['schemas']['ListHeartbeatsResponse'];
+            'application/json': components['schemas']['DeployedContentResponse'];
           };
         };
         /** @description Unauthorized */
@@ -6528,6 +7025,15 @@ interface paths {
             'application/json': components['schemas']['ErrorResponse'];
           };
         };
+        /** @description Rate limited */
+        429: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['ErrorResponse'];
+          };
+        };
       };
     };
     put?: never;
@@ -6538,22 +7044,27 @@ interface paths {
     patch?: never;
     trace?: never;
   };
-  '/api/projects/{projectId}/deployments/{deploymentId}/rotate-ingest-token': {
+  '/api/projects/{projectId}/deployments/{deploymentId}/heartbeats': {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    get?: never;
-    put?: never;
     /**
-     * Rotate ingest token
-     * @description Rotate the ingest token for a deployment. Owner-only. No grace window: the previous token is immediately invalidated and the new token is returned once.
+     * List deployment heartbeats
+     * @description List heartbeat records for a deployment with optional from/to time-range filtering and pagination. Requires member role.
      */
-    post: {
+    get: {
       parameters: {
-        query?: never;
+        query?: {
+          /** @description ISO start of the time range. */
+          from?: string;
+          /** @description ISO end of the time range. */
+          to?: string;
+          limit?: number;
+          offset?: number | null;
+        };
         header?: never;
         path: {
           projectId: string;
@@ -6563,13 +7074,13 @@ interface paths {
       };
       requestBody?: never;
       responses: {
-        /** @description New ingest token */
+        /** @description Heartbeat history */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            'application/json': components['schemas']['RotateIngestTokenResponse'];
+            'application/json': components['schemas']['ListHeartbeatsResponse'];
           };
         };
         /** @description Unauthorized */
@@ -6601,13 +7112,15 @@ interface paths {
         };
       };
     };
+    put?: never;
+    post?: never;
     delete?: never;
     options?: never;
     head?: never;
     patch?: never;
     trace?: never;
   };
-  '/api/projects/{projectId}/deployments/{deploymentId}/trace': {
+  '/api/projects/{projectId}/deployments/{deploymentId}/rotate-ingest-token': {
     parameters: {
       query?: never;
       header?: never;
@@ -6617,8 +7130,8 @@ interface paths {
     get?: never;
     put?: never;
     /**
-     * Toggle debug tracing
-     * @description Enable or disable debug tracing for a deployment. Owner-only, gated by the debugTrace feature. `minutes` of 0 disables; allowed values are 0, 15, 30, 60. An absent body defaults to 15 minutes.
+     * Rotate ingest token
+     * @description Rotate the ingest token for a deployment. Owner-only. No grace window: the previous token is immediately invalidated and the new token is returned once.
      */
     post: {
       parameters: {
@@ -6630,28 +7143,15 @@ interface paths {
         };
         cookie?: never;
       };
-      requestBody?: {
-        content: {
-          'application/json': components['schemas']['TraceDeploymentRequest'];
-        };
-      };
+      requestBody?: never;
       responses: {
-        /** @description Updated trace window */
+        /** @description New ingest token */
         200: {
           headers: {
             [name: string]: unknown;
           };
           content: {
-            'application/json': components['schemas']['TraceDeploymentResponse'];
-          };
-        };
-        /** @description Validation error */
-        400: {
-          headers: {
-            [name: string]: unknown;
-          };
-          content: {
-            'application/json': components['schemas']['ErrorResponse'];
+            'application/json': components['schemas']['RotateIngestTokenResponse'];
           };
         };
         /** @description Unauthorized */
@@ -8069,10 +8569,22 @@ interface components {
        * @enum {string}
        */
       platform: 'web' | 'server';
-      deploymentStatus: string | null;
+      serving: components['schemas']['ServingStatus'];
+      latestAttempt: components['schemas']['LatestAttemptStatus'];
       deploymentUrl: string | null;
       deployedAt: string | null;
     };
+    /** @enum {string} */
+    ServingStatus: 'live' | 'none';
+    /** @enum {string|null} */
+    LatestAttemptStatus:
+      | 'idle'
+      | 'deploying'
+      | 'published'
+      | 'active'
+      | 'stopped'
+      | 'failed'
+      | null;
     Version: {
       /** @example 1 */
       version: number;
@@ -8130,6 +8642,106 @@ interface components {
        */
       createdAt: string;
     };
+    DeleteAccountRequest: {
+      /** @example me@example.com */
+      confirm: string;
+    };
+    DeleteAccountBlocked: {
+      error: {
+        /**
+         * @example SOLE_OWNER
+         * @enum {string}
+         */
+        code: 'SOLE_OWNER';
+        message: string;
+        details: {
+          /**
+           * @example [
+           *       "proj_abc123"
+           *     ]
+           */
+          projects: string[];
+        };
+      };
+    };
+    AccountExportResponse: {
+      /** @example 2026-06-10T12:00:00.000Z */
+      exportedAt: string;
+      profile: {
+        /** @example user_a1b2c3d4 */
+        id: string;
+        /** @example me@example.com */
+        email: string;
+        displayName: string | null;
+        createdAt: string;
+        lastLoginAt: string | null;
+        /** @example user */
+        globalRole: string;
+        traits: string[];
+      };
+      memberships: {
+        projectId: string;
+        projectName: string;
+        role: string;
+        joinedAt: string;
+      }[];
+      apiTokens: {
+        id: string;
+        name: string;
+        projectId: string | null;
+        origin: string;
+        createdAt: string;
+        lastUsedAt: string | null;
+        expiresAt: string | null;
+        revokedAt: string | null;
+      }[];
+      sessions: {
+        id: string;
+        createdAt: string;
+        expiresAt: string;
+        lastTouchedAt: string;
+      }[];
+      mcpTokens: {
+        id: string;
+        name: string;
+        createdAt: string;
+        lastUsedAt: string | null;
+        expiresAt: string;
+        revokedAt: string | null;
+      }[];
+      mcpSessions: {
+        id: string;
+        projectId: string | null;
+        createdAt: string;
+        lastActiveAt: string;
+        expiresAt: string;
+        messages: {
+          seq: number;
+          role: string;
+          content?: unknown;
+          createdAt: string;
+        }[];
+      }[];
+      feedback: {
+        id: string;
+        projectId: string | null;
+        text: string;
+        source: string;
+        createdAt: string;
+      }[];
+      invitations: {
+        id: string;
+        projectId: string;
+        invitedEmail: string;
+        role: string;
+        status: string;
+        createdAt: string;
+        expiresAt: string;
+        acceptedAt: string | null;
+        declinedAt: string | null;
+        cancelledAt: string | null;
+      }[];
+    };
     ApiTokenSummary: {
       /** @example tok_a1b2c3d4 */
       id: string;
@@ -8251,6 +8863,9 @@ interface components {
         createdAt: string;
         updatedAt: string | null;
       } | null;
+      serving: components['schemas']['ServingStatus'];
+      latestAttempt: components['schemas']['LatestAttemptStatus'];
+      deployedAt: string | null;
       /**
        * Format: date-time
        * @example 2026-01-26T14:30:00.000Z
@@ -8327,6 +8942,7 @@ interface components {
         | 'active'
         | 'stopped'
         | 'failed';
+      serving: components['schemas']['ServingStatus'];
       currentVersionNumber: number | null;
       url: string | null;
       /** @example flow_a1b2c3d4 */
@@ -8336,8 +8952,6 @@ interface components {
       createdAt: string;
       /** Format: date-time */
       updatedAt: string;
-      /** Format: date-time */
-      traceUntil: string | null;
       usageSummary?: {
         eventsIn24h: number;
         healthy: boolean;
@@ -8383,8 +8997,6 @@ interface components {
         healthy: boolean;
       } | null;
       /** Format: date-time */
-      traceUntil: string | null;
-      /** Format: date-time */
       createdAt: string;
       /** Format: date-time */
       updatedAt: string;
@@ -8453,6 +9065,7 @@ interface components {
         | 'active'
         | 'stopped'
         | 'failed';
+      serving: components['schemas']['ServingStatus'];
       currentVersionNumber: number | null;
       url: string | null;
       /** @example flow_a1b2c3d4 */
@@ -8462,13 +9075,51 @@ interface components {
       createdAt: string;
       /** Format: date-time */
       updatedAt: string;
-      /** Format: date-time */
-      traceUntil: string | null;
       usageSummary?: {
         eventsIn24h: number;
         healthy: boolean;
       };
     };
+    StartDeploymentResponse:
+      | {
+          /** @example dep_a1b2c3d4 */
+          deploymentId: string;
+          /** @example k7m2x9p4q1w8 */
+          slug: string;
+          target: string | null;
+          /**
+           * @example web
+           * @enum {string}
+           */
+          type: 'web' | 'server';
+          /** @enum {string} */
+          status: 'deploying';
+          settingsId?: string;
+          versionId: string;
+          versionNumber: number;
+        }
+      | {
+          deploymentId: string;
+          /** @enum {string} */
+          status: 'already_created';
+        };
+    DeploymentStreamStatusEvent: {
+      status: string;
+      substatus: string | null;
+      /**
+       * @example web
+       * @enum {string}
+       */
+      type: 'web' | 'server';
+      target: string | null;
+      containerUrl: string | null;
+      errorCode: string | null;
+      errorMessage: string | null;
+      /** Format: date-time */
+      createdAt: string;
+      /** Format: date-time */
+      updatedAt: string;
+    };
     ListDeploymentsResponse: {
       deployments: components['schemas']['DeploymentSummary'][];
       total: number;
@@ -8611,6 +9262,37 @@ interface components {
             deploymentVersionId: string;
           };
     };
+    ObserveSessionResponse: {
+      /** @example ses_abc123xyz456 */
+      id: string;
+      projectId: string;
+      /** @example flow_a1b2c3d4 */
+      flowId: string;
+      status: string;
+      errorMessage: string | null;
+      configSnapshot: {
+        [key: string]: unknown;
+      };
+      serverFlowName: string | null;
+      serverEndpoint: string | null;
+      web: components['schemas']['ObserveSessionWeb'];
+      createdBy: string;
+      /** Format: date-time */
+      createdAt: string;
+    };
+    ObserveSessionWeb: {
+      token: string;
+      activationUrl: string;
+      /** Format: uri */
+      bundleUrl: string;
+    } | null;
+    CreateObserveSessionRequest: {
+      settingsName: string;
+    };
+    ObserveSessionHeartbeatResponse: {
+      /** @enum {boolean} */
+      ok: true;
+    };
     SecretName: string;
     CreateSecretRequest: {
       name: string;
@@ -9049,14 +9731,6 @@ interface components {
     RotateIngestTokenResponse: {
       ingestToken: string;
     };
-    TraceDeploymentRequest: {
-      minutes?: number;
-    };
-    TraceDeploymentResponse: {
-      /** Format: date-time */
-      traceUntil: string | null;
-      minutes: number;
-    };
     DeploymentUsageResponse: {
       totalEventsIn: number;
       totalEventsOut: number;
@@ -9441,12 +10115,6 @@ interface components {
       /** Format: date-time */
       updatedAt: string;
     } | null;
-    StartDeploymentResponse: {
-      deploymentId: string;
-      /** @enum {string} */
-      type: 'web' | 'server';
-      status: string;
-    };
     ListSettingsResponse: {
       settings: components['schemas']['FlowSettingsSummary'][];
     };
@@ -9663,7 +10331,8 @@ declare function listFlows(options?: ListFlowsOptions): Promise<{
             id: string;
             name: string;
             platform: "web" | "server";
-            deploymentStatus: string | null;
+            serving: components["schemas"]["ServingStatus"];
+            latestAttempt: components["schemas"]["LatestAttemptStatus"];
             deploymentUrl: string | null;
             deployedAt: string | null;
         }[] | undefined;
@@ -9714,6 +10383,9 @@ declare function getFlow(options: {
             createdAt: string;
             updatedAt: string | null;
         } | null;
+        serving: components["schemas"]["ServingStatus"];
+        latestAttempt: components["schemas"]["LatestAttemptStatus"];
+        deployedAt: string | null;
         createdAt: string;
         updatedAt: string;
     }[] | undefined;
@@ -9864,7 +10536,44 @@ interface DeployOptions {
     signal?: AbortSignal;
     onStatus?: (status: string, substatus: string | null) => void;
 }
-declare function deploy(options: DeployOptions): Promise<any>;
+declare function deploy(options: DeployOptions): Promise<{
+    deploymentId: string;
+    settingsId: string;
+    status: string;
+} | {
+    deploymentId: string;
+    slug: string;
+    target: string | null;
+    type: "web" | "server";
+    status: "deploying";
+    settingsId?: string | undefined;
+    versionId: string;
+    versionNumber: number;
+} | {
+    deploymentId: string;
+    status: "already_created";
+} | {
+    status: string;
+    substatus?: string | null;
+    type: string;
+    containerUrl?: string | null;
+    publicUrl?: string | null;
+    errorMessage?: string | null;
+    deploymentId: string;
+    slug: string;
+    target: string | null;
+    settingsId?: string | undefined;
+    versionId: string;
+    versionNumber: number;
+} | {
+    status: string;
+    substatus?: string | null;
+    type?: string;
+    containerUrl?: string | null;
+    publicUrl?: string | null;
+    errorMessage?: string | null;
+    deploymentId: string;
+}>;
 declare function getDeployment(options: {
     flowId: string;
     projectId?: string;
@@ -9985,6 +10694,28 @@ declare function telemetryEnableCommand(): void;
  */
 declare function telemetryDisableCommand(): void;
 
+/**
+ * Check if a config value contains code markers that require esbuild compilation.
+ * Returns true if the value (or any nested value) contains:
+ * - $code: prefix (raw JS expression)
+ * - $store. prefix (JS variable reference)
+ * - __WALKEROS_ENV: prefix (process.env expression)
+ * - __WALKEROS_SECRET: prefix (guarded process.env read for a deferred secret)
+ */
+declare function containsCodeMarkers(value: unknown): boolean;
+/**
+ * Split a step's properties into code-layer (for esbuild) and data-layer (post-build).
+ *
+ * Code layer: 'code' key always, plus any property containing code markers
+ * Data layer: plain JSON values (settings, mappings, chains, etc.)
+ *
+ * Not applicable to InlineCode steps — those go entirely to the code layer.
+ */
+declare function classifyStepProperties(step: Record<string, unknown>): {
+    codeProps: Record<string, unknown>;
+    dataProps: Record<string, unknown>;
+};
+
 /**
  * Pure structural validation of a flow config — the exact checks the bundler
  * runs at codegen time, BEFORE any esbuild compile or package/archive fetch.
@@ -10167,6 +10898,9 @@ interface ApiErrorDetail {
 interface ApiErrorOptions {
     code?: string;
     details?: ApiErrorDetail[];
+    status?: number;
+    retryable?: boolean;
+    retryAfterSeconds?: number;
     minVersion?: string;
     clientVersion?: string;
     client?: string;
@@ -10176,6 +10910,9 @@ interface ApiErrorOptions {
 declare class ApiError extends Error {
     code?: string;
     details?: ApiErrorDetail[];
+    status?: number;
+    retryable?: boolean;
+    retryAfterSeconds?: number;
     minVersion?: string;
     clientVersion?: string;
     client?: string;
@@ -10185,7 +10922,6 @@ declare class ApiError extends Error {
 }
 /**
  * Extract structured error from an openapi-fetch error response and throw.
- * The error shape is: { error: { code, message, details: { errors: [] } } }
  *
  * For `code === 'CLIENT_OUTDATED'` (HTTP 426), also extracts the upgrade
  * metadata: `minVersion`, `clientVersion`, `client`, `upgrade`, `docs`.
@@ -10590,4 +11326,4 @@ declare module '@walkeros/core' {
     }
 }
 
-export { ApiError, type ApiErrorDetail, type BuildOptions, type BundleStats, type CLIBuildOptions, type ClientContext, type ClientType, type CompareContractInput, type ContractComparison, type ContractVerdict, type CreatePreviewOptions, type CreateSecretOptions, type DeletePreviewOptions, type DeleteSecretOptions, type DeployOptions, DeploymentAmbiguityError, type DeploymentSummaryForFlow, type DeviceCodeOptions, type DeviceCodeResult, type ExampleLookupResult, type FeedbackOptions, type GetPreviewOptions, type GlobalOptions, type HealthResult, type ListDeploymentsOptions, type ListFlowsOptions, type ListPreviewsOptions, type ListProjectsOptions, type ListSecretsOptions, type MinifyOptions, type PollOptions, type PollResult, type PrepareInput, type PreparedFlow, type ProjectFlows, type PushResult, type RunCommandOptions, type RunOptions, type RunResult, type SSEEvent, type SSEParseResult, type SimulateCollectorOptions, type SimulateDestinationOptions, type SimulateSourceOptions, type SimulateTransformerOptions, type UpdateSecretOptions, VERSION, type ValidateResult, type ValidationError, type ValidationType, type ValidationWarning, type WalkerOSConfig, type WrapSkeletonOptions, annotateErrorWithDrift, apiFetch, bakedContractHash, bakedContractVersion, bundle, bundleCommand, canonicalContractHash, clientContextHeaders, compareContract, compareOutput, createApiClient, createDeployCommand, createDeployment, createDeploymentCommand, createFlow, createFlowCommand, createPreview, createProject, createProjectCommand, createSecret, deleteConfig, deleteDeployment, deleteDeploymentByFlowId, deleteDeploymentCommand, deleteFlow, deleteFlowCommand, deletePreview, deleteProject, deleteProjectCommand, deleteSecret, deploy, deployCommand, deployFetch, duplicateFlow, duplicateFlowCommand, feedback, feedbackCommand, fetchHealth, findExample, getAuthHeaders, getClientContext, getDefaultProject, getDeployment, getDeploymentBySlug, getDeploymentBySlugCommand, getDeploymentCommand, getFeedbackPreference, getFlow, getFlowCommand, getPreview, getProject, getProjectCommand, getToken, listAllFlows, listDeployments, listDeploymentsCommand, listFlows, listFlowsCommand, listPreviews, listProjects, listProjectsCommand, listSecrets, loadConfig, loadJsonConfig, loginCommand, logoutCommand, mergeAuthHeaders, parseSSEEvents, pollForToken, publicFetch, push, pushCommand, readConfig, requestDeviceCode, requireProjectId, resetClientContext, resolveAppUrl, resolveToken, run, runCommand, setClientContext, setDefaultProject, setFeedbackPreference, simulateCollector, simulateDestination, simulateSource, simulateTransformer, index as telemetry, telemetryDisableCommand, telemetryEnableCommand, telemetryStatusCommand, throwApiError, updateFlow, updateFlowCommand, updateProject, updateProjectCommand, updateSecret, validate, validateCommand, validateFlowStructure, whoami, whoamiCommand, wrapSkeleton, writeConfig };
+export { ApiError, type ApiErrorDetail, type BuildOptions, type BundleStats, type CLIBuildOptions, type ClientContext, type ClientType, type CompareContractInput, type ContractComparison, type ContractVerdict, type CreatePreviewOptions, type CreateSecretOptions, type DeletePreviewOptions, type DeleteSecretOptions, type DeployOptions, DeploymentAmbiguityError, type DeploymentSummaryForFlow, type DeviceCodeOptions, type DeviceCodeResult, type ExampleLookupResult, type FeedbackOptions, type GetPreviewOptions, type GlobalOptions, type HealthResult, type ListDeploymentsOptions, type ListFlowsOptions, type ListPreviewsOptions, type ListProjectsOptions, type ListSecretsOptions, type MinifyOptions, type PollOptions, type PollResult, type PrepareInput, type PreparedFlow, type ProjectFlows, type PushResult, type RunCommandOptions, type RunOptions, type RunResult, type SSEEvent, type SSEParseResult, type SimulateCollectorOptions, type SimulateDataOptions, type SimulateDestinationOptions, type SimulateSourceOptions, type SimulateTransformerOptions, type UpdateSecretOptions, VERSION, type ValidateResult, type ValidationError, type ValidationType, type ValidationWarning, type WalkerOSConfig, type WrapSkeletonOptions, annotateErrorWithDrift, apiFetch, bakedContractHash, bakedContractVersion, buildDataPayload, bundle, bundleCommand, canonicalContractHash, classifyStepProperties, clientContextHeaders, compareContract, compareOutput, containsCodeMarkers, createApiClient, createDeployCommand, createDeployment, createDeploymentCommand, createFlow, createFlowCommand, createPreview, createProject, createProjectCommand, createSecret, deleteConfig, deleteDeployment, deleteDeploymentByFlowId, deleteDeploymentCommand, deleteFlow, deleteFlowCommand, deletePreview, deleteProject, deleteProjectCommand, deleteSecret, deploy, deployCommand, deployFetch, duplicateFlow, duplicateFlowCommand, feedback, feedbackCommand, fetchHealth, findExample, getAuthHeaders, getClientContext, getDefaultProject, getDeployment, getDeploymentBySlug, getDeploymentBySlugCommand, getDeploymentCommand, getFeedbackPreference, getFlow, getFlowCommand, getPreview, getProject, getProjectCommand, getToken, listAllFlows, listDeployments, listDeploymentsCommand, listFlows, listFlowsCommand, listPreviews, listProjects, listProjectsCommand, listSecrets, loadConfig, loadJsonConfig, loginCommand, logoutCommand, mergeAuthHeaders, parseSSEEvents, pollForToken, publicFetch, push, pushCommand, readConfig, requestDeviceCode, requireProjectId, resetClientContext, resolveAppUrl, resolveToken, run, runCommand, setClientContext, setDefaultProject, setFeedbackPreference, simulateCollector, simulateDestination, simulateSource, simulateTransformer, index as telemetry, telemetryDisableCommand, telemetryEnableCommand, telemetryStatusCommand, throwApiError, updateFlow, updateFlowCommand, updateProject, updateProjectCommand, updateSecret, validate, validateCommand, validateFlowStructure, whoami, whoamiCommand, wrapSkeleton, writeConfig };