@walkeros/cli 4.8.1 → 4.8.3-next-1793115089237

package/CHANGELOG.md

@@ -1,5 +1,120 @@
 # @walkeros/cli
 
+## 4.8.3-next-1793115089237
+
+### Patch Changes
+
+- 34fd225: The package no longer ships `examples/web-serve.js`, a stale prebuilt
+  bundle that still sent the old `order complete` shape, nor
+  `examples/test.html`, the page that loaded it. Build the browser example
+  yourself with `walkeros bundle examples/web-serve.json`, as the examples
+  README shows.
+- 5313635: `walkeros validate` checks each step's settings against the package
+  version `walkeros bundle` installs, inline `@version` specs on other steps
+  included. Steps that name one package at two inline versions are reported as
+  skipped, since the bundle refuses them.
+- 5313635: The sample events from `getEvent` now use the standard event names:
+  `checkout start` replaces `checkout view`, an order carries `tax` and `total`,
+  a promotion names its placement `slot`, and product events carry `currency`.
+  Order `value` is now the merchandise value: the `order complete` sample goes
+  from 555 to 462, and the gross amount charged is `total` (467.22). The
+  destination examples read `data.tax`, `data.slot` and the search keys
+  `data.term` and `data.results`, and gross fields such as Matomo `grandTotal`
+  read `data.total` first, then `data.value`. The CLI ships default event
+  contracts for common site types in `examples/contracts/`.
+- ebe013e: An `ip` input that is not one address, such as a forwarded chain, is
+  now reported as an error and left out of the hash, instead of a warning that
+  said it was empty. The event is still delivered. The complete example flow
+  reads the visitor IP from a header the proxy sets.
+- 125bbea: The `walkeros/flow` and `walkeros/cli` images now run Node.js
+  24.22.1, which fixes the vulnerabilities of the Node.js security release of 21
+  October 2026; one of them can be triggered by a request to a flow's HTTP
+  source. Rebuild images based on `walkeros/flow` with this version and
+  redeploy. Flows that run on their own Node.js need 22.23.4, 24.22.1, 26.12.1
+  or later in the same line.
+- 5313635: `@walkeros/core` exports the `StepType` type, the kind of a step
+  package (`source`, `transformer`, `destination` or `store`), read from
+  `STEP_TYPES` on `@walkeros/core/dev`. `StepKind`, `FlowStepType` and `stepId`
+  use it, as do the step kinds `resolveExportName` in `@walkeros/cli` and the
+  simulate tool of `@walkeros/mcp` take, so the kinds are listed in one place.
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+- Updated dependencies [34fd225]
+- Updated dependencies [29d2218]
+- Updated dependencies [34fd225]
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+- Updated dependencies [34fd225]
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+- Updated dependencies [5313635]
+  - @walkeros/collector@4.8.3-next-1793115089237
+  - @walkeros/web-core@4.8.3-next-1793115089237
+  - @walkeros/core@4.8.3-next-1793115089237
+  - @walkeros/server-destination-api@4.8.3-next-1793115089237
+  - @walkeros/transformer-validate@4.8.3-next-1793115089237
+  - @walkeros/server-core@4.8.3-next-1793115089237
+
+## 4.8.2
+
+### Patch Changes
+
+- 2374f54: Server flows skip consent-denied events by default
+  (`collector.consentDenied: 'skip'`; an authored value wins). A flow's own
+  `logger` level, format and handler apply under `runneros`. `walkeros setup`
+  fails with the reason when a step's `init` throws or returns `false`. Inline
+  `on`, `pushBatch` and `destroy` reach the bundle. A flow's custom log handler
+  gets a no-op `originalHandler`.
+- 2374f54: `walkeros validate` reports unknown keys, mapping keys with no
+  effect, values without an operator, malformed references and `batch` without
+  `pushBatch` as errors (`MAPPING_NO_OP` replaces the warning
+  `TRANSFORMER_MAPPING_NO_OP`), and `bundle`, `push`, `simulate`, `setup` stop
+  on them before building. An unknown settings key is an error where the package
+  closes its schema.
+- dbb558d: The CLI authenticates with a token only: create one under Account >
+  Automation tokens and set `WALKEROS_TOKEN`. `walkeros auth login`, `logout`
+  and `token` are removed, with the stored session and their exports. An old
+  sign-in in the config file is no longer read, and `walkeros api` refuses an
+  `Authorization` header.
+- 964590a: Browser and wrap bundles import from `@walkeros/web-core`, which
+  ships with the CLI, so no extra package is downloaded.
+- Updated dependencies [2374f54]
+- Updated dependencies [2374f54]
+- Updated dependencies [7e5fc27]
+- Updated dependencies [2374f54]
+- Updated dependencies [2374f54]
+- Updated dependencies [2374f54]
+- Updated dependencies [2374f54]
+- Updated dependencies [7e5fc27]
+- Updated dependencies [2374f54]
+- Updated dependencies [964590a]
+- Updated dependencies [2374f54]
+- Updated dependencies [7e5fc27]
+- Updated dependencies [2374f54]
+- Updated dependencies [964590a]
+- Updated dependencies [4100ede]
+- Updated dependencies [2374f54]
+- Updated dependencies [2374f54]
+- Updated dependencies [15eb7b2]
+- Updated dependencies [33a2779]
+- Updated dependencies [33a2779]
+- Updated dependencies [2374f54]
+- Updated dependencies [2374f54]
+- Updated dependencies [2374f54]
+- Updated dependencies [b1d65e2]
+- Updated dependencies [964590a]
+- Updated dependencies [2374f54]
+  - @walkeros/collector@4.8.2
+  - @walkeros/core@4.8.2
+  - @walkeros/server-core@4.8.2
+  - @walkeros/server-destination-api@4.8.2
+  - @walkeros/web-core@4.8.2
+  - @walkeros/transformer-validate@4.8.2
+
 ## 4.8.1
 
 ### Patch Changes
@@ -973,9 +1088,6 @@
     and `event.context` remain required.
   - Each source self-registers via TypeScript module augmentation of `SourceMap`
     in `@walkeros/core`.
-  - App-side coordination (`/workspaces/developer/app`) is a follow-up plan, not
-    part of this release. Telemetry from v4 CLI/MCP will not validate against
-    the existing app schema until that follow-up ships.
   - `Mapping.Rule.skip` is renamed to `Mapping.Rule.silent`. Customer flow.json
     configs using `skip: true` in mapping rules must rename to `silent: true`.
     Hard cut: no legacy alias, the field is gone.

package/README.md

@@ -6,8 +6,8 @@
 
 # @walkeros/cli
 
-Command-line tool for building, testing, and running walkerOS event collection
-flows, from configuration to deployment.
+Command-line tool for building, testing and validating walkerOS event collection
+flows. Requires Node.js 22.12 or later.
 
 [Documentation](https://www.walkeros.io/docs/apps/cli) •
 [NPM Package](https://www.npmjs.com/package/@walkeros/cli) •