@walkeros/mcp 4.3.0-next-1784055686454 → 4.3.0

package/dist/stdio.js

@@ -722,7 +722,7 @@ var NPM_SEARCH_URL = "https://registry.npmjs.org/-/v1/search";
 var JSDELIVR_BASE = "https://cdn.jsdelivr.net/npm";
 var WALKEROS_JSON_PATH = "dist/walkerOS.json";
 var CACHE_TTL = 5 * 60 * 1e3;
-var CLIENT_HEADER = "walkeros-mcp/4.3.0-next-1784055686454";
+var CLIENT_HEADER = "walkeros-mcp/4.3.0";
 function getPackageBaseUrl() {
   return process.env.WALKEROS_APP_URL || void 0;
 }
@@ -1466,7 +1466,7 @@ async function feedbackHandlerBody(client, input) {
     const isAnonymous = explicitAnonymous ?? anonymous ?? true;
     await client.submitFeedback(text, {
       anonymous: isAnonymous,
-      version: "4.3.0-next-1784055686454"
+      version: "4.3.0"
     });
     return mcpResult8({ ok: true });
   } catch (error) {
@@ -1502,7 +1502,7 @@ var spec_default = {
   openapi: "3.1.0",
   info: {
     title: "walkerOS Tag Manager API",
-    version: "2.4.0",
+    version: "3.1.0",
     description: "API for managing walkerOS flows, projects, and real-time event observation.",
     contact: {
       name: "elbwalker",
@@ -3826,6 +3826,9 @@ var spec_default = {
           sessionExpiresAt: {
             type: "string",
             format: "date-time"
+          },
+          sessionGrant: {
+            type: "string"
           }
         },
         required: ["grant", "activationUrl", "sessionExpiresAt"]
@@ -3900,15 +3903,15 @@ var spec_default = {
           token: {
             type: "string"
           },
-          activationUrl: {
-            type: ["string", "null"]
+          previewEnabled: {
+            type: "boolean"
           },
           bundleUrl: {
             type: "string",
             format: "uri"
           }
         },
-        required: ["previewId", "token", "activationUrl", "bundleUrl"]
+        required: ["previewId", "token", "previewEnabled", "bundleUrl"]
       },
       ObserveSessionJourneysResponse: {
         type: "object",
@@ -5989,6 +5992,65 @@ var spec_default = {
         },
         required: ["email"]
       },
+      VerifyResponse: {
+        oneOf: [
+          {
+            type: "object",
+            properties: {
+              status: {
+                type: "string",
+                enum: ["ok"]
+              },
+              redirectTo: {
+                type: "string",
+                example: "/"
+              }
+            },
+            required: ["status", "redirectTo"]
+          },
+          {
+            type: "object",
+            properties: {
+              status: {
+                type: "string",
+                enum: ["confirm_required"]
+              },
+              email: {
+                type: "string",
+                example: "user@example.com"
+              }
+            },
+            required: ["status", "email"]
+          },
+          {
+            type: "object",
+            properties: {
+              status: {
+                type: "string",
+                enum: ["expired", "used", "invalid", "malformed"]
+              }
+            },
+            required: ["status"]
+          }
+        ]
+      },
+      VerifyRequest: {
+        type: "object",
+        properties: {
+          token: {
+            type: "string",
+            minLength: 1
+          },
+          redirect_to: {
+            type: "string",
+            example: "/dashboard"
+          },
+          confirm: {
+            type: "boolean"
+          }
+        },
+        required: ["token"]
+      },
       WhoamiResponse: {
         type: "object",
         properties: {
@@ -6967,10 +7029,46 @@ var spec_default = {
       }
     },
     "/api/auth/verify": {
+      post: {
+        tags: ["Auth"],
+        summary: "Redeem magic link token",
+        description: "Redeem a magic link token and create an authenticated session. Redeems immediately when the browser-nonce cookie from the magic-link request matches; otherwise answers confirm_required and expects a follow-up call with confirm: true.",
+        requestBody: {
+          content: {
+            "application/json": {
+              schema: {
+                $ref: "#/components/schemas/VerifyRequest"
+              }
+            }
+          }
+        },
+        responses: {
+          "200": {
+            description: "Redemption result. status=ok sets the session cookie and carries the redirect target.",
+            content: {
+              "application/json": {
+                schema: {
+                  $ref: "#/components/schemas/VerifyResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            description: "Validation error",
+            content: {
+              "application/json": {
+                schema: {
+                  $ref: "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          }
+        }
+      },
       get: {
         tags: ["Auth"],
-        summary: "Verify magic link token",
-        description: "Verify a magic link token and create an authenticated session. Redirects to the specified URL or home page.",
+        summary: "Legacy magic link entry point",
+        description: "Side-effect-free redirector to the /auth/verify page for links minted before the page-URL change. Never consumes the token; redemption happens via POST.",
         parameters: [
           {
             schema: {
@@ -6997,8 +7095,8 @@ var spec_default = {
           }
         ],
         responses: {
-          "302": {
-            description: "Redirect to target URL with session cookie set"
+          "307": {
+            description: "Redirect to the /auth/verify page with the token forwarded"
           }
         }
       }
@@ -16269,6 +16367,9 @@ var inputSchema11 = {
   ),
   origins: z10.array(z10.string()).optional().describe(
     "Site origins (bare https://host[:port]) to mint a preview activation grant for. Used by preview_regrant; the returned activationUrl targets the first origin."
+  ),
+  sessionId: z10.string().optional().describe(
+    "Observe session id \u2014 when set, preview_regrant mints an activation/forwarding grant PAIR: the returned activationUrl both activates the web preview and lets the page forward events to the session container (elbPreviewSession param). Pass it to observe server-side hops; omit for a plain web preview."
   )
 };
 var annotations11 = {
@@ -16277,6 +16378,39 @@ var annotations11 = {
   idempotentHint: false,
   openWorldHint: true
 };
+var PREVIEW_SUMMARY_FIELDS = [
+  "id",
+  "previewId",
+  "flowId",
+  "flowSettingsId",
+  "bundleUrl",
+  "activationUrl",
+  "grant",
+  "sessionGrant",
+  "sessionExpiresAt",
+  "status",
+  "observeFeed",
+  "createdBy",
+  "createdAt"
+];
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function redactPreview(data) {
+  if (!isRecord(data)) return {};
+  const out = {};
+  for (const field of PREVIEW_SUMMARY_FIELDS) {
+    if (data[field] !== void 0) out[field] = data[field];
+  }
+  return out;
+}
+function redactPreviewList(data) {
+  if (!isRecord(data)) return { previews: [] };
+  return {
+    previews: Array.isArray(data.previews) ? data.previews.map(redactPreview) : [],
+    ...data.total !== void 0 ? { total: data.total } : {}
+  };
+}
 function createFlowManageToolSpec(client) {
   return {
     name: "flow_manage",
@@ -16306,7 +16440,8 @@ async function flowManageHandlerBody(client, input) {
     flowSettingsId,
     source,
     siteUrl,
-    origins
+    origins,
+    sessionId
   } = input ?? {};
   const validationError = validateActionInput(
     "flow_manage",
@@ -16470,7 +16605,7 @@ async function flowManageHandlerBody(client, input) {
           projectId: resolvedProjectId,
           flowId
         });
-        return mcpResult12(data);
+        return mcpResult12(redactPreviewList(data));
       }
       case "preview_get": {
         assertParam(flowId, "flowId", "preview_get");
@@ -16480,7 +16615,7 @@ async function flowManageHandlerBody(client, input) {
           flowId,
           previewId
         });
-        return mcpResult12(data);
+        return mcpResult12(redactPreview(data));
       }
       case "preview_create": {
         assertParam(flowId, "flowId", "preview_create");
@@ -16496,7 +16631,7 @@ async function flowManageHandlerBody(client, input) {
           ...source ? { source } : {},
           ...siteUrl ? { siteUrl } : {}
         });
-        return mcpResult12(preview, {
+        return mcpResult12(redactPreview(preview), {
           next: [
             'Open activationUrl on your site to activate preview mode. When activationUrl is null, no grant has been minted for a site yet \u2014 use action "preview_regrant" with your site origins to mint one.',
             "Poll observeFeed (observe_journeys with this flowId) to watch preview events arrive."
@@ -16531,11 +16666,12 @@ async function flowManageHandlerBody(client, input) {
           projectId: resolvedProjectId,
           flowId,
           previewId,
-          origins: origins ?? []
+          origins: origins ?? [],
+          ...sessionId ? { sessionId } : {}
         });
-        return mcpResult12(data, {
+        return mcpResult12(redactPreview(data), {
           next: [
-            "Open activationUrl on the target origin to activate preview mode."
+            sessionId ? "Open activationUrl on the target origin: it activates the web preview AND forwards its events to the observe session. Use sessionGrant as the X-Walkeros-Preview header for direct server-hop test events." : "Open activationUrl on the target origin to activate preview mode."
           ]
         });
       }
@@ -17639,6 +17775,7 @@ import {
   getPreview,
   createPreview,
   deletePreview,
+  regrantPreview,
   listSecrets,
   createSecret,
   updateSecret,
@@ -17708,11 +17845,14 @@ var HttpToolClient = class {
     return getPreview(options);
   }
   async createPreview(options) {
-    return createPreview(options);
+    return createPreview({ ...options, url: options.url ?? options.siteUrl });
   }
   async deletePreview(options) {
     return deletePreview(options);
   }
+  async regrantPreview(options) {
+    return regrantPreview(options);
+  }
   async listSecrets(options) {
     return listSecrets(options);
   }
@@ -17790,7 +17930,7 @@ var HttpToolClient = class {
 };
 
 // src/stdio.ts
-setClientContext({ type: "mcp", version: "4.3.0-next-1784055686454" });
+setClientContext({ type: "mcp", version: "4.3.0" });
 process.on("uncaughtException", (err) => {
   const emitter = getMcpEmitterSingleton();
   if (emitter) {
@@ -17810,7 +17950,7 @@ process.on("unhandledRejection", (reason) => {
 async function main() {
   const server = createWalkerOSMcpServer({
     client: new HttpToolClient(),
-    version: "4.3.0-next-1784055686454"
+    version: "4.3.0"
   });
   const transport = new StdioServerTransport();
   await server.connect(transport);
@@ -17820,7 +17960,7 @@ main().catch(async (error) => {
   try {
     const emitter = await createMcpEmitter({
       clientInfo: void 0,
-      packageVersion: "4.3.0-next-1784055686454"
+      packageVersion: "4.3.0"
     });
     await emitter.emitError("startup");
   } catch {