@walkeros/mcp 4.7.0-next-1790245733116 → 4.7.0

package/dist/index.js

@@ -20,7 +20,7 @@ var RuntimeRefusal = class extends Error {
 function refusalHint(error, fallback) {
   return error instanceof RuntimeRefusal ? error.hint : fallback;
 }
-var HINT_OUT_OF_PROCESS = "Build and deploy through the app with deploy_manage, or simulate the flow in the app. On your own machine, use the walkerOS CLI.";
+var HINT_OUT_OF_PROCESS = "Build and deploy through the app with deploy_manage. To simulate, validate or bundle, use the walkerOS CLI on your own machine.";
 function unavailableOperation(operation) {
   const verb = operation === "bundle" ? "Bundling" : operation === "simulate" ? "Simulating" : "Running";
   return new RuntimeRefusal(
@@ -94,13 +94,65 @@ function createHostedRuntime(client) {
 }
 
 // src/tools/auth.ts
+import { z as z2 } from "zod";
+import { mcpResult, mcpError as mcpError2 } from "@walkeros/core";
+
+// src/tools/narrow.ts
+import { schemas } from "@walkeros/core/dev";
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stringField(value, key) {
+  if (!isRecord(value)) return void 0;
+  const field = value[key];
+  return typeof field === "string" ? field : void 0;
+}
+function recordField(value, key) {
+  if (!isRecord(value)) return void 0;
+  const field = value[key];
+  return isRecord(field) ? field : void 0;
+}
+function fieldsOf(value) {
+  return isRecord(value) ? value : {};
+}
+function isFlowJson(value) {
+  return isRecord(value) && isRecord(value.flows);
+}
+function stepExamplesOf(value) {
+  if (!isRecord(value)) return void 0;
+  const examples = {};
+  const skipped = [];
+  for (const [name, example] of Object.entries(value)) {
+    const parsed = schemas.FlowSchemas.StepExampleSchema.safeParse(example);
+    if (parsed.success) examples[name] = parsed.data;
+    else skipped.push(name);
+  }
+  return { examples, skipped };
+}
+
+// src/tools/parse-input.ts
 import { z } from "zod";
-import { mcpResult, mcpError } from "@walkeros/core";
+import { mcpError } from "@walkeros/core";
+function inputIssuesMessage(error) {
+  return error.issues.map((issue) => `${issue.path.join(".") || "input"}: ${issue.message}`).join("; ");
+}
+function parseToolInput(shape, raw) {
+  const parsed = z.object(shape).safeParse(raw ?? {});
+  if (!parsed.success) {
+    return {
+      ok: false,
+      error: mcpError(new Error(inputIssuesMessage(parsed.error)))
+    };
+  }
+  return { ok: true, data: parsed.data };
+}
+
+// src/tools/auth.ts
 var TITLE = "Authentication";
 var DESCRIPTION = "Manage walkerOS authentication. Check login status, log in via the device authorization grant, or log out. No terminal or browser required, the MCP client handles the authorization URL.";
 var inputSchema = {
-  action: z.enum(["status", "login", "logout"]).describe("Authentication action to perform"),
-  deviceCode: z.string().optional().describe(
+  action: z2.enum(["status", "login", "logout"]).describe("Authentication action to perform"),
+  deviceCode: z2.string().optional().describe(
     "Device code from a previous pending login attempt. Provide to resume polling without requesting a new code."
   )
 };
@@ -121,7 +173,9 @@ function createAuthToolSpec(client) {
   };
 }
 async function authHandlerBody(client, input) {
-  const { action, deviceCode } = input ?? {};
+  const parsed = parseToolInput(inputSchema, input);
+  if (!parsed.ok) return parsed.error;
+  const { action, deviceCode } = parsed.data;
   try {
     switch (action) {
       case "status": {
@@ -134,7 +188,7 @@ async function authHandlerBody(client, input) {
         const user = await client.whoami();
         return mcpResult({
           authenticated: true,
-          ...user
+          ...fieldsOf(user)
         });
       }
       case "login": {
@@ -162,14 +216,14 @@ async function authHandlerBody(client, input) {
             });
           }
           if (poll.status === "denied")
-            return mcpError(new Error("Authorization was denied."));
+            return mcpError2(new Error("Authorization was denied."));
           if (poll.status === "expired")
-            return mcpError(
+            return mcpError2(
               new Error(
                 'The one-time code expired. Run auth with action "login" for a new one.'
               )
             );
-          return mcpError(new Error(poll.error));
+          return mcpError2(new Error(poll.error));
         }
         const code = await client.requestDeviceCode();
         const loginUrl = code.verificationUriComplete;
@@ -206,7 +260,7 @@ async function authHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError(error);
+    return mcpError2(error);
   }
 }
 function registerAuthTool(server, client) {
@@ -219,15 +273,13 @@ function registerAuthTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => authHandlerBody(client, args)
   );
 }
 
 // src/tools/project-manage.ts
-import { z as z2 } from "zod";
-import { mcpResult as mcpResult2, mcpError as mcpError2 } from "@walkeros/core";
+import { z as z3 } from "zod";
+import { mcpResult as mcpResult2, mcpError as mcpError3 } from "@walkeros/core";
 
 // src/types.ts
 function isAuthError(error) {
@@ -423,21 +475,22 @@ var FRAME_MANAGE_REQUIREMENTS = {
 };
 
 // src/tools/project-manage.ts
-function wrapProjectName(p) {
-  return p.name !== void 0 ? { ...p, name: wrapUserData(p.name) } : p;
+function wrapProjectName(project) {
+  const name = stringField(project, "name");
+  return isRecord(project) && name !== void 0 ? { ...project, name: wrapUserData(name) } : project;
 }
 var TITLE2 = "Project Management";
 var DESCRIPTION2 = "Manage walkerOS projects. List, create, update, delete projects, or set a default project for CLI operations.";
 var inputSchema2 = {
-  action: z2.enum(["list", "get", "create", "update", "delete", "set_default"]).describe("Project management action to perform"),
-  projectId: z2.string().optional().describe("Required for get, update, delete, set_default."),
-  name: z2.string().optional().describe(
+  action: z3.enum(["list", "get", "create", "update", "delete", "set_default"]).describe("Project management action to perform"),
+  projectId: z3.string().optional().describe("Required for get, update, delete, set_default."),
+  name: z3.string().optional().describe(
     "Required for create and update (update also requires projectId)."
   ),
-  cursor: z2.string().optional().describe(
+  cursor: z3.string().optional().describe(
     "Pagination cursor from a previous list response. Only used with the list action."
   ),
-  limit: z2.number().int().min(1).max(100).optional().describe("Max items per page (1-100). Only used with the list action.")
+  limit: z3.number().int().min(1).max(100).optional().describe("Max items per page (1-100). Only used with the list action.")
 };
 var annotations2 = {
   readOnlyHint: false,
@@ -456,19 +509,22 @@ function createProjectManageToolSpec(client) {
   };
 }
 async function projectManageHandlerBody(client, input) {
-  const { action, projectId, name, cursor, limit } = input ?? {};
+  const parsed = parseToolInput(inputSchema2, input);
+  if (!parsed.ok) return parsed.error;
+  const { action, projectId, name, cursor, limit } = parsed.data;
   const validationError = validateActionInput(
     "project_manage",
     action ?? "",
     { projectId, name },
     PROJECT_MANAGE_REQUIREMENTS
   );
-  if (validationError) return mcpError2(new Error(validationError));
+  if (validationError) return mcpError3(new Error(validationError));
   try {
     switch (action) {
       case "list": {
         const projects = await client.listProjects({ cursor, limit });
-        const items = Array.isArray(projects) ? projects : projects?.projects || [];
+        const listed = isRecord(projects) ? projects.projects : void 0;
+        const items = Array.isArray(projects) ? projects : Array.isArray(listed) ? listed : [];
         if (items.length === 0) {
           return mcpResult2(
             { projects: [] },
@@ -480,8 +536,7 @@ async function projectManageHandlerBody(client, input) {
             }
           );
         }
-        const typedItems = items;
-        const safe = Array.isArray(projects) ? typedItems.map(wrapProjectName) : { ...projects, projects: typedItems.map(wrapProjectName) };
+        const safe = Array.isArray(projects) ? items.map(wrapProjectName) : { ...fieldsOf(projects), projects: items.map(wrapProjectName) };
         return mcpResult2(safe);
       }
       case "get": {
@@ -524,7 +579,7 @@ async function projectManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError2(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError3(error, isAuthError(error) ? AUTH_HINT : void 0);
   }
 }
 function registerProjectManageTool(server, client) {
@@ -537,15 +592,13 @@ function registerProjectManageTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => projectManageHandlerBody(client, args)
   );
 }
 
 // src/tools/flow-manage.ts
-import { z as z3 } from "zod";
-import { mcpResult as mcpResult3, mcpError as mcpError3 } from "@walkeros/core";
+import { z as z4 } from "zod";
+import { mcpResult as mcpResult3, mcpError as mcpError4 } from "@walkeros/core";
 
 // src/ui-parts.ts
 function flowCanvasResult(payload) {
@@ -659,19 +712,10 @@ function resolveDefaultProject(client, projectId) {
 
 // src/tools/flow-manage.ts
 function pickPlatform(content) {
-  if (content && typeof content === "object") {
-    const flows = content.flows;
-    if (flows && typeof flows === "object") {
-      for (const flow of Object.values(flows)) {
-        if (flow && typeof flow === "object") {
-          const config = flow.config;
-          if (config && typeof config === "object") {
-            const platform = config.platform;
-            if (platform === "web" || platform === "server") return platform;
-          }
-        }
-      }
-    }
+  const flows = recordField(content, "flows");
+  for (const flow of Object.values(flows ?? {})) {
+    const platform = stringField(recordField(flow, "config"), "platform");
+    if (platform === "web" || platform === "server") return platform;
   }
   return "server";
 }
@@ -680,22 +724,29 @@ function flowPageUrl(client, projectId, flowId) {
   return links.flow({ baseUrl: client.appBaseUrl(), projectId, flowId });
 }
 function safeSummary(flow) {
-  return flow.name !== void 0 ? { ...flow, name: wrapUserData(flow.name) } : flow;
+  const name = stringField(flow, "name");
+  return isRecord(flow) && name !== void 0 ? { ...flow, name: wrapUserData(name) } : flow;
 }
 function safeDetail(flow) {
-  const withName = flow.name !== void 0 ? { ...flow, name: wrapUserData(flow.name) } : { ...flow };
-  if (flow.config !== void 0) {
-    withName.config = redactNestedStrings(
-      flow.config,
-      { skip: keepStructural }
-    );
+  const fields = { ...fieldsOf(flow) };
+  const name = stringField(fields, "name");
+  if (name !== void 0) fields.name = wrapUserData(name);
+  if (fields.config !== void 0) {
+    fields.config = redactNestedStrings(fields.config, {
+      skip: keepStructural
+    });
   }
-  return withName;
+  return {
+    fields,
+    id: stringField(fields, "id"),
+    name: stringField(fields, "name"),
+    config: recordField(fields, "config")
+  };
 }
 var TITLE3 = "Flow Management";
 var DESCRIPTION3 = "Manage walkerOS flows and their previews. List/get/create/update/delete/duplicate flows, or create/inspect/delete preview bundles and mint activation grants (preview_regrant) for testing flow changes on live sites.";
 var inputSchema3 = {
-  action: z3.enum([
+  action: z4.enum([
     "list",
     "get",
     "create",
@@ -708,52 +759,52 @@ var inputSchema3 = {
     "preview_delete",
     "preview_regrant"
   ]).describe("Flow management action to perform"),
-  flowId: z3.string().optional().describe(
+  flowId: z4.string().optional().describe(
     "Flow ID (flow_...) or config ID (cfg_...). Required for get, update, delete, duplicate, preview_list, preview_get, preview_create, preview_delete, preview_regrant."
   ),
-  projectId: z3.string().optional().describe(
+  projectId: z4.string().optional().describe(
     "Project ID. Optional filter for list (omit to list all projects). Required for create if no default project set."
   ),
-  name: z3.string().optional().describe(
+  name: z4.string().optional().describe(
     "Flow name. Required for create. Optional for update (to rename) and duplicate."
   ),
-  content: z3.record(z3.string(), z3.unknown()).optional().describe("Flow.Json content. Used for create and update."),
-  patch: z3.boolean().optional().describe(
+  content: z4.record(z4.string(), z4.unknown()).optional().describe("Flow.Json content. Used for create and update."),
+  patch: z4.boolean().optional().describe(
     "Merge-patch for update (default true). When true, only provided fields are updated."
   ),
-  fields: z3.array(z3.string()).optional().describe("Dot-path selectors for get to return only specific fields."),
-  sort: z3.enum(["name", "updated_at", "created_at"]).optional().describe("Sort field for list."),
-  order: z3.enum(["asc", "desc"]).optional().describe("Sort order for list."),
-  includeDeleted: z3.boolean().optional().describe("Include soft-deleted flows in list results."),
-  cursor: z3.string().optional().describe(
+  fields: z4.array(z4.string()).optional().describe("Dot-path selectors for get to return only specific fields."),
+  sort: z4.enum(["name", "updated_at", "created_at"]).optional().describe("Sort field for list."),
+  order: z4.enum(["asc", "desc"]).optional().describe("Sort order for list."),
+  includeDeleted: z4.boolean().optional().describe("Include soft-deleted flows in list results."),
+  cursor: z4.string().optional().describe(
     "Pagination cursor from a previous list response. Only used with the list action."
   ),
-  limit: z3.number().int().min(1).max(100).optional().describe("Max items per page (1-100). Only used with the list action."),
-  previewId: z3.string().optional().describe(
+  limit: z4.number().int().min(1).max(100).optional().describe("Max items per page (1-100). Only used with the list action."),
+  previewId: z4.string().optional().describe(
     "Preview ID (prv_...). Required for preview_get, preview_delete, and preview_regrant (all also require flowId)."
   ),
-  flowName: z3.string().optional().describe(
+  flowName: z4.string().optional().describe(
     "Used by preview_create \u2014 provide one of flowName or flowSettingsId (preview_create also requires flowId)."
   ),
-  flowSettingsId: z3.string().optional().describe(
+  flowSettingsId: z4.string().optional().describe(
     "Used by preview_create \u2014 provide one of flowName or flowSettingsId (preview_create also requires flowId)."
   ),
-  source: z3.discriminatedUnion("kind", [
-    z3.object({ kind: z3.literal("draft") }),
-    z3.object({
-      kind: z3.literal("deployment-version"),
-      deploymentVersionId: z3.string()
+  source: z4.discriminatedUnion("kind", [
+    z4.object({ kind: z4.literal("draft") }),
+    z4.object({
+      kind: z4.literal("deployment-version"),
+      deploymentVersionId: z4.string()
     })
   ]).optional().describe(
     "What the preview should run, for preview_create: the flow's draft (default) or a deployed version's stored config (kind 'deployment-version' with its deploymentVersionId)."
   ),
-  siteUrl: z3.string().optional().describe(
+  siteUrl: z4.string().optional().describe(
     "Optional site URL (e.g. https://shop.example.com) for preview_create. When provided, the activation grant is minted for that origin so the returned activationUrl works there."
   ),
-  origins: z3.array(z3.string()).optional().describe(
+  origins: z4.array(z4.string()).optional().describe(
     "Site origins (bare https://host[:port]) to mint a preview activation grant for. Used by preview_regrant; the returned activationUrl targets the first origin."
   ),
-  sessionId: z3.string().optional().describe(
+  sessionId: z4.string().optional().describe(
     "Observe session id \u2014 when set, preview_regrant mints an activation/forwarding grant PAIR: the returned activationUrl both activates the web preview and lets the page forward events to the session container (elbPreviewSession param). Pass it to observe server-side hops; omit for a plain web preview."
   )
 };
@@ -779,9 +830,6 @@ var PREVIEW_SUMMARY_FIELDS = [
   "createdBy",
   "createdAt"
 ];
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function redactPreview(data) {
   if (!isRecord(data)) return {};
   const out = {};
@@ -820,6 +868,8 @@ function createFlowManageToolSpec(client) {
   };
 }
 async function flowManageHandlerBody(client, input) {
+  const parsed = parseToolInput(inputSchema3, input);
+  if (!parsed.ok) return parsed.error;
   const {
     action,
     flowId,
@@ -840,14 +890,14 @@ async function flowManageHandlerBody(client, input) {
     siteUrl,
     origins,
     sessionId
-  } = input ?? {};
+  } = parsed.data;
   const validationError = validateActionInput(
     "flow_manage",
     action ?? "",
     { flowId, projectId, name, previewId, flowName, flowSettingsId },
     FLOW_MANAGE_REQUIREMENTS
   );
-  if (validationError) return mcpError3(new Error(validationError));
+  if (validationError) return mcpError4(new Error(validationError));
   try {
     switch (action) {
       case "list": {
@@ -860,9 +910,8 @@ async function flowManageHandlerBody(client, input) {
             cursor,
             limit
           });
-          const dataObj = data2;
-          const flows = dataObj.flows;
-          const safe2 = Array.isArray(flows) ? { ...dataObj, flows: flows.map(safeSummary) } : data2;
+          const flows = isRecord(data2) ? data2.flows : void 0;
+          const safe2 = isRecord(data2) && Array.isArray(flows) ? { ...data2, flows: flows.map(safeSummary) } : data2;
           return mcpResult3(safe2);
         }
         const data = await client.listAllFlows({
@@ -887,16 +936,14 @@ async function flowManageHandlerBody(client, input) {
         assertParam(flowId, "flowId", "get");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const flow = await client.getFlow({
           flowId,
           projectId: resolvedProjectId,
           fields
         });
-        const safe = safeDetail(
-          flow
-        );
+        const safe = safeDetail(flow);
         const appUrl = flowPageUrl(client, resolvedProjectId, safe.id);
         return flowCanvasResult({
           flowId: safe.id,
@@ -921,16 +968,14 @@ async function flowManageHandlerBody(client, input) {
         assertParam(name, "name", "create");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const created = await client.createFlow({
           name,
           content: content ?? {},
           projectId: resolvedProjectId
         });
-        const safeCreated = safeDetail(
-          created
-        );
+        const safeCreated = safeDetail(created);
         const createdAppUrl = flowPageUrl(
           client,
           resolvedProjectId,
@@ -959,7 +1004,7 @@ async function flowManageHandlerBody(client, input) {
         assertParam(flowId, "flowId", "update");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const updated = await client.updateFlow({
           flowId,
@@ -968,9 +1013,7 @@ async function flowManageHandlerBody(client, input) {
           content,
           mergePatch: patch ?? true
         });
-        const safeUpdated = safeDetail(
-          updated
-        );
+        const safeUpdated = safeDetail(updated);
         return flowCanvasResult({
           flowId: safeUpdated.id,
           configName: safeUpdated.name ?? "default",
@@ -993,7 +1036,7 @@ async function flowManageHandlerBody(client, input) {
         assertParam(flowId, "flowId", "delete");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const deleted = await client.deleteFlow({
           flowId,
@@ -1005,22 +1048,20 @@ async function flowManageHandlerBody(client, input) {
         assertParam(flowId, "flowId", "duplicate");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const duplicated = await client.duplicateFlow({
           flowId,
           name,
           projectId: resolvedProjectId
         });
-        return mcpResult3(
-          safeDetail(duplicated)
-        );
+        return mcpResult3(safeDetail(duplicated).fields);
       }
       case "preview_list": {
         assertParam(flowId, "flowId", "preview_list");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const data = await client.listPreviews({
           projectId: resolvedProjectId,
@@ -1033,7 +1074,7 @@ async function flowManageHandlerBody(client, input) {
         assertParam(previewId, "previewId", "preview_get");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const data = await client.getPreview({
           projectId: resolvedProjectId,
@@ -1046,7 +1087,7 @@ async function flowManageHandlerBody(client, input) {
         assertParam(flowId, "flowId", "preview_create");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const preview = await client.createPreview({
           projectId: resolvedProjectId,
@@ -1068,7 +1109,7 @@ async function flowManageHandlerBody(client, input) {
         assertParam(previewId, "previewId", "preview_delete");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         const data = await client.deletePreview({
           projectId: resolvedProjectId,
@@ -1084,10 +1125,10 @@ async function flowManageHandlerBody(client, input) {
         assertParam(previewId, "previewId", "preview_regrant");
         const resolvedProjectId = resolveDefaultProject(client, projectId);
         if (!resolvedProjectId) {
-          return mcpError3(new Error(NO_DEFAULT_PROJECT_ERROR));
+          return mcpError4(new Error(NO_DEFAULT_PROJECT_ERROR));
         }
         if (!client.regrantPreview) {
-          return mcpError3(
+          return mcpError4(
             new Error("preview_regrant is not supported by this client")
           );
         }
@@ -1111,7 +1152,7 @@ async function flowManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError3(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError4(error, isAuthError(error) ? AUTH_HINT : void 0);
   }
 }
 function registerFlowManageTool(server, client) {
@@ -1124,15 +1165,13 @@ function registerFlowManageTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => flowManageHandlerBody(client, args)
   );
 }
 
 // src/tools/deploy-manage.ts
-import { z as z4 } from "zod";
-import { mcpResult as mcpResult4, mcpError as mcpError4 } from "@walkeros/core";
+import { z as z5 } from "zod";
+import { mcpResult as mcpResult4, mcpError as mcpError5 } from "@walkeros/core";
 
 // src/tools/_resolvers.ts
 var DeploymentNotFoundError = class extends Error {
@@ -1188,24 +1227,24 @@ async function resolveDeploymentSlug(args) {
 var TITLE4 = "Deploy Management";
 var DESCRIPTION4 = "Deploy walkerOS flows and manage deployments. deploy waits for the deployment to reach a terminal status by default (wait=true), with a 12-minute budget; pass wait=false to return immediately with the deployment id. A finished deployment carries its status and, on failure, an errorMessage with the user-facing reason; use the get action to re-read it. list supports cursor and limit for pagination. delete removes an active deployment. For get and delete pass flowId (required) plus optional slug to disambiguate when a flow has multiple active deployments. If a flow has >=2 active deployments and no slug is supplied, the tool returns a MULTIPLE_DEPLOYMENTS error with a details[] list showing each deployment's slug, type, status, and updatedAt.";
 var inputSchema4 = {
-  action: z4.enum(["deploy", "list", "get", "delete"]).describe("Deployment action to perform"),
-  projectId: z4.string().optional().describe("Project ID. Optional; falls back to the default project."),
-  flowId: z4.string().optional().describe("Required for deploy, get, delete."),
-  slug: z4.string().optional().describe(
+  action: z5.enum(["deploy", "list", "get", "delete"]).describe("Deployment action to perform"),
+  projectId: z5.string().optional().describe("Project ID. Optional; falls back to the default project."),
+  flowId: z5.string().optional().describe("Required for deploy, get, delete."),
+  slug: z5.string().optional().describe(
     "Deployment slug. Optional disambiguator for get/delete when the flow has multiple active deployments."
   ),
-  type: z4.enum(["web", "server"]).optional().describe("Deployment type filter for list."),
-  status: z4.string().optional().describe("Status filter for list."),
-  wait: z4.boolean().optional().describe(
+  type: z5.enum(["web", "server"]).optional().describe("Deployment type filter for list."),
+  status: z5.string().optional().describe("Status filter for list."),
+  wait: z5.boolean().optional().describe(
     "Wait for the deployment to reach a terminal status (default true), with a 12-minute budget. Set false to return the deployment id immediately. Only used with deploy action."
   ),
-  flowName: z4.string().optional().describe(
+  flowName: z5.string().optional().describe(
     "Flow name for multi-settings flows. Only used with deploy action."
   ),
-  cursor: z4.string().optional().describe(
+  cursor: z5.string().optional().describe(
     "Pagination cursor from a previous list response. Only used with the list action."
   ),
-  limit: z4.number().int().min(1).max(100).optional().describe("Max items per page (1-100). Only used with the list action.")
+  limit: z5.number().int().min(1).max(100).optional().describe("Max items per page (1-100). Only used with the list action.")
 };
 var annotations4 = {
   readOnlyHint: false,
@@ -1240,13 +1279,22 @@ function withAppUrl(data, appUrl) {
   }
   return { ...data, appUrl };
 }
+function readDeploymentSummary(value) {
+  if (!isRecord(value)) return [];
+  const slug = stringField(value, "slug");
+  const type = stringField(value, "type");
+  const status = stringField(value, "status");
+  const updatedAt = stringField(value, "updatedAt");
+  return slug !== void 0 && type !== void 0 && status !== void 0 && updatedAt !== void 0 ? [{ ...value, slug, type, status, updatedAt }] : [];
+}
 function listForResolver(client, projectId) {
   return async (q) => {
     const resp = await client.listDeployments({
       projectId: projectId || q.projectId || void 0,
       flowId: q.flowId
     });
-    return resp.deployments ?? [];
+    const deployments = isRecord(resp) ? resp.deployments : void 0;
+    return Array.isArray(deployments) ? deployments.flatMap(readDeploymentSummary) : [];
   };
 }
 function createDeployManageToolSpec(client) {
@@ -1260,6 +1308,8 @@ function createDeployManageToolSpec(client) {
   };
 }
 async function deployManageHandlerBody(client, input) {
+  const parsed = parseToolInput(inputSchema4, input);
+  if (!parsed.ok) return parsed.error;
   const {
     action,
     projectId,
@@ -1271,14 +1321,14 @@ async function deployManageHandlerBody(client, input) {
     flowName,
     cursor,
     limit
-  } = input ?? {};
+  } = parsed.data;
   const validationError = validateActionInput(
     "deploy_manage",
     action ?? "",
     { flowId, projectId },
     DEPLOY_MANAGE_REQUIREMENTS
   );
-  if (validationError) return mcpError4(new Error(validationError));
+  if (validationError) return mcpError5(new Error(validationError));
   try {
     switch (action) {
       case "deploy": {
@@ -1337,7 +1387,7 @@ async function deployManageHandlerBody(client, input) {
         return mcpResult4(
           redactDisplayNames({
             deleted: true,
-            ...data
+            ...fieldsOf(data)
           })
         );
       }
@@ -1347,7 +1397,7 @@ async function deployManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError4(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError5(error, isAuthError(error) ? AUTH_HINT : void 0);
   }
 }
 function registerDeployTool(server, client) {
@@ -1360,35 +1410,33 @@ function registerDeployTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => deployManageHandlerBody(client, args)
   );
 }
 
 // src/tools/secret-manage.ts
-import { z as z5 } from "zod";
-import { mcpResult as mcpResult5, mcpError as mcpError5 } from "@walkeros/core";
+import { z as z6 } from "zod";
+import { mcpResult as mcpResult5, mcpError as mcpError6 } from "@walkeros/core";
 var TITLE5 = "Secret Management";
 var DESCRIPTION5 = "Manage a flow\u2019s managed secrets (the $secret.<NAME> values its steps reference at deploy/run time). Actions: list (metadata only), set (create), update (rotate value), delete. Secrets are write-mostly: values are encrypted at rest and are NEVER returned, listed, or echoed. Reference a secret from a flow step as $secret.<NAME>. Credentials, tokens, and private keys must use $secret, not $env: the deploy pipeline only injects values referenced as $secret.<NAME> into the server runner. Server flows only.";
 var inputSchema5 = {
-  action: z5.enum(["list", "set", "update", "delete"]).describe("Secret management action to perform"),
-  projectId: z5.string().optional().describe(
+  action: z6.enum(["list", "set", "update", "delete"]).describe("Secret management action to perform"),
+  projectId: z6.string().optional().describe(
     "Project ID. Optional: falls back to the default project when omitted."
   ),
-  flowId: z5.string().describe(
+  flowId: z6.string().describe(
     "Flow ID (flow_...) or config ID (cfg_...). Required for list, set, update, and delete: secrets are flow-scoped."
   ),
-  name: z5.string().regex(
+  name: z6.string().regex(
     /^[A-Z_][A-Z0-9_]*$/,
     "Secret name must be uppercase letters, digits, and underscores, starting with a letter or underscore."
   ).optional().describe(
     "Secret name (UPPER_SNAKE_CASE). Required for set. Referenced in flows as $secret.<NAME>."
   ),
-  value: z5.string().min(1).max(65536).optional().describe(
+  value: z6.string().min(1).max(65536).optional().describe(
     "Secret value (1-65536 chars). Required for set and update. Write-only: never returned or logged."
   ),
-  secretId: z5.string().optional().describe(
+  secretId: z6.string().optional().describe(
     'Secret ID (sec_...). Required for update and delete. Use action "list" to find it.'
   )
 };
@@ -1409,18 +1457,20 @@ function createSecretManageToolSpec(client) {
   };
 }
 async function secretManageHandlerBody(client, input) {
-  const { action, projectId, flowId, name, value, secretId } = input ?? {};
+  const parsed = parseToolInput(inputSchema5, input);
+  if (!parsed.ok) return parsed.error;
+  const { action, projectId, flowId, name, value, secretId } = parsed.data;
   const validationError = validateActionInput(
     "secret_manage",
     action ?? "",
     { flowId, name, value, secretId },
     SECRET_MANAGE_REQUIREMENTS
   );
-  if (validationError) return mcpError5(new Error(validationError));
+  if (validationError) return mcpError6(new Error(validationError));
   try {
     const resolvedProjectId = resolveDefaultProject(client, projectId);
     if (!resolvedProjectId)
-      return mcpError5(new Error(NO_DEFAULT_PROJECT_ERROR));
+      return mcpError6(new Error(NO_DEFAULT_PROJECT_ERROR));
     switch (action) {
       case "list": {
         assertParam(flowId, "flowId", "list");
@@ -1479,7 +1529,7 @@ async function secretManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError5(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError6(error, isAuthError(error) ? AUTH_HINT : void 0);
   }
 }
 function registerSecretManageTool(server, client) {
@@ -1492,22 +1542,20 @@ function registerSecretManageTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => secretManageHandlerBody(client, args)
   );
 }
 
 // src/tools/observe-journeys.ts
-import { z as z6 } from "zod";
-import { mcpResult as mcpResult6, mcpError as mcpError6 } from "@walkeros/core";
+import { z as z7 } from "zod";
+import { mcpResult as mcpResult6, mcpError as mcpError7 } from "@walkeros/core";
 var TITLE6 = "Observe Journeys";
 var DESCRIPTION6 = "Read the assembled, cross-runtime journeys for a flow that is currently being observed (an active Observe session). Pass flowId; the active session is resolved for you (a flow has at most one). Each journey is one traced event reconstructed end to end across web and server: its ordered hops (source, transformer, collector, destination), each hop status (pending/done/skipped/error), captured in/out payloads, consent, and vendor calls. Use this to see what actually happened to live events: which destinations fired, what mapping ran, where an event was skipped or errored, and whether records were lost (gaps + a journey `lossy` flag). When the flow has no active session the result is `{ sessionId: null, journeys: [], gaps: [] }` \u2014 start an Observe session in the app and drive traffic first, then read again. Narrow with traceId (one trace) and limit (page cap, most recent kept; default 50). Read-only.";
 var inputSchema6 = {
-  flowId: z6.string().describe("Flow to read journeys for (its active Observe session)."),
-  projectId: z6.string().optional().describe("Project ID. Optional; falls back to the default project."),
-  traceId: z6.string().optional().describe("Return only the journeys for this trace id."),
-  limit: z6.number().int().min(1).max(100).optional().describe(
+  flowId: z7.string().describe("Flow to read journeys for (its active Observe session)."),
+  projectId: z7.string().optional().describe("Project ID. Optional; falls back to the default project."),
+  traceId: z7.string().optional().describe("Return only the journeys for this trace id."),
+  limit: z7.number().int().min(1).max(100).optional().describe(
     "Max journeys to return (1-100, most recent kept). Defaults to 50."
   )
 };
@@ -1565,9 +1613,11 @@ function createObserveJourneysToolSpec(client) {
   };
 }
 async function observeJourneysHandlerBody(client, input) {
-  const { flowId, projectId, traceId, limit } = input ?? {};
+  const parsed = parseToolInput(inputSchema6, input);
+  if (!parsed.ok) return parsed.error;
+  const { flowId, projectId, traceId, limit } = parsed.data;
   if (!flowId) {
-    return mcpError6(new Error("flowId is required for observe_journeys."));
+    return mcpError7(new Error("flowId is required for observe_journeys."));
   }
   try {
     const result = await client.listJourneys({
@@ -1594,7 +1644,7 @@ async function observeJourneysHandlerBody(client, input) {
       ]
     });
   } catch (error) {
-    return mcpError6(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError7(error, isAuthError(error) ? AUTH_HINT : void 0);
   }
 }
 function registerObserveJourneysTool(server, client) {
@@ -1607,15 +1657,13 @@ function registerObserveJourneysTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => observeJourneysHandlerBody(client, args)
   );
 }
 
 // src/tools/observe-session.ts
-import { z as z7 } from "zod";
-import { mcpResult as mcpResult7, mcpError as mcpError7 } from "@walkeros/core";
+import { z as z8 } from "zod";
+import { mcpResult as mcpResult7, mcpError as mcpError8 } from "@walkeros/core";
 var TITLE7 = "Observe Session";
 var DESCRIPTION7 = "Open, inspect, or end an Observe session: a time-boxed window on one flow that runtimes attach to as arms. A preview arm streams from a browser, a container arm runs server-side, and both feed ONE shared journeys feed. start opens the window (arms picks which runtimes attach), status reports per-arm state plus recordsReceived and expiresAt, stop ends the whole session including every arm. A flow has at most one session, so status/stop resolve it from flowId when sessionId is omitted. Read the events with observe_journeys; this tool never returns event data and never judges whether events are correct.";
 var HINT_SIMULATE_FIRST = "Simulate before preview: flow_simulate checks mapping with no browser.";
@@ -1626,29 +1674,29 @@ var HINT_EMPTY_FEED = "recordsReceived is 0: nothing has reached the feed yet. D
 var HINT_ENDED = "Session ended and both arms detached. Start a new one with observe_session start.";
 var HINT_NO_WINDOW = "No Observe session on this flow. Open one with observe_session start.";
 var inputSchema7 = {
-  action: z7.enum(["start", "status", "stop"]).describe(
+  action: z8.enum(["start", "status", "stop"]).describe(
     "start opens a session, status reports arm state, stop ends the whole session."
   ),
-  flowId: z7.string().describe("Flow the Observe session runs on."),
-  projectId: z7.string().optional().describe("Project ID. Optional; falls back to the default project."),
-  sessionId: z7.string().optional().describe(
+  flowId: z8.string().describe("Flow the Observe session runs on."),
+  projectId: z8.string().optional().describe("Project ID. Optional; falls back to the default project."),
+  sessionId: z8.string().optional().describe(
     "Session to act on for status/stop. Optional; the flow has at most one session and it is resolved for you."
   ),
-  arms: z7.object({
-    container: z7.literal(true).optional().describe(
+  arms: z8.object({
+    container: z8.literal(true).optional().describe(
       "Pass true to attach the server container arm, which selects the flow's server settings when no preview arm is named. Only true is accepted: a web settings that references a server flow always brings its container arm along, so a container cannot be suppressed here."
     ),
-    preview: z7.string().optional().describe(
+    preview: z8.string().optional().describe(
       "Name the flow settings this session observes. A web settings attaches the browser preview arm (plus the container arm of any server flow it references); a server settings attaches the container arm alone. Omit to use the flow's single web settings."
     )
   }).optional().describe(
     "Which runtimes attach. Omit to attach the default preview arm; a web settings that references a server flow brings its container arm with it."
   ),
-  origins: z7.array(z7.string()).optional().describe(
+  origins: z8.array(z8.string()).optional().describe(
     "Bare https origins (https://host[:port]) the session may ingest web events from."
   ),
-  level: z7.enum(["off", "standard", "trace"]).optional().describe("Container observation verbosity. Defaults to the app's own."),
-  replace: z7.boolean().optional().describe(
+  level: z8.enum(["off", "standard", "trace"]).optional().describe("Container observation verbosity. Defaults to the app's own."),
+  replace: z8.boolean().optional().describe(
     "Replace the flow's existing window instead of attaching to it. Re-provisions from the new config."
   )
 };
@@ -1659,14 +1707,14 @@ var annotations7 = {
   openWorldHint: true
 };
 function readSettings(flow) {
-  if (!flow || typeof flow !== "object") return [];
+  if (!isRecord(flow)) return [];
   const settings = flow.settings;
   if (!Array.isArray(settings)) return [];
   const entries = [];
   for (const entry of settings) {
-    if (!entry || typeof entry !== "object") continue;
-    const { name, platform } = entry;
-    if (typeof name !== "string") continue;
+    const name = stringField(entry, "name");
+    const platform = stringField(entry, "platform");
+    if (name === void 0) continue;
     if (platform !== "web" && platform !== "server") continue;
     entries.push({ name, platform });
   }
@@ -1796,6 +1844,8 @@ function createObserveSessionToolSpec(client) {
   };
 }
 async function observeSessionHandlerBody(client, input) {
+  const parsed = parseToolInput(inputSchema7, input);
+  if (!parsed.ok) return parsed.error;
   const {
     action,
     flowId,
@@ -1805,19 +1855,19 @@ async function observeSessionHandlerBody(client, input) {
     origins,
     level,
     replace
-  } = input ?? {};
+  } = parsed.data;
   if (!flowId) {
-    return mcpError7(new Error("flowId is required for observe_session."));
+    return mcpError8(new Error("flowId is required for observe_session."));
   }
   const resolvedProjectId = resolveProjectId(client, projectId);
   if (!resolvedProjectId) {
-    return mcpError7(new Error(NO_DEFAULT_PROJECT_ERROR2));
+    return mcpError8(new Error(NO_DEFAULT_PROJECT_ERROR2));
   }
   try {
     switch (action) {
       case "start": {
         if (!client.startObserveSession) {
-          return mcpError7(
+          return mcpError8(
             new Error("observe_session start is not supported by this client.")
           );
         }
@@ -1843,7 +1893,7 @@ async function observeSessionHandlerBody(client, input) {
       }
       case "status": {
         if (!client.getObserveSession) {
-          return mcpError7(
+          return mcpError8(
             new Error(
               "observe_session status is not supported by this client."
             )
@@ -1870,7 +1920,7 @@ async function observeSessionHandlerBody(client, input) {
       }
       case "stop": {
         if (!client.endObserveSession) {
-          return mcpError7(
+          return mcpError8(
             new Error("observe_session stop is not supported by this client.")
           );
         }
@@ -1900,7 +1950,7 @@ async function observeSessionHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError7(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError8(error, isAuthError(error) ? AUTH_HINT : void 0);
   }
 }
 function registerObserveSessionTool(server, client) {
@@ -1913,15 +1963,13 @@ function registerObserveSessionTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => observeSessionHandlerBody(client, args)
   );
 }
 
 // src/tools/hub-manage.ts
-import { z as z8 } from "zod";
-import { mcpResult as mcpResult8, mcpError as mcpError8 } from "@walkeros/core";
+import { z as z9 } from "zod";
+import { mcpResult as mcpResult8, mcpError as mcpError9 } from "@walkeros/core";
 
 // src/tools/feature-gate.ts
 var FEATURE_NOT_AVAILABLE = "FEATURE_NOT_AVAILABLE";
@@ -1974,56 +2022,56 @@ var TOOL_ANCHOR_TYPES = [
   "tag"
 ];
 var HUB_MANAGE_INPUT_SCHEMA = {
-  action: z8.enum(ACTIONS, {
+  action: z9.enum(ACTIONS, {
     error: () => `Unknown action. Use one of: ${ACTIONS.join(", ")}`
   }).describe("Which part of the release history to read or write"),
-  projectId: z8.string().optional().describe(
+  projectId: z9.string().optional().describe(
     "Project ID. Optional: falls back to the default project when omitted."
   ),
-  flowId: z8.string().optional().describe(
+  flowId: z9.string().optional().describe(
     'Flow ID (flow_...). Required for every action except "knowledge", which hangs on a page rather than a flow and refuses this field.'
   ),
-  versionId: z8.string().min(1).optional().describe(
+  versionId: z9.string().min(1).optional().describe(
     'Release version ID (ver_...) from action "releases". Addresses one release for release_get and rationale_set. Pass this or versionNumber.'
   ),
-  versionNumber: z8.number().int().positive().optional().describe(
+  versionNumber: z9.number().int().positive().optional().describe(
     'Spine release number for this flow, the `versionNumber` field of action "releases". Alternative to versionId. Not the same as a row\'s deploymentAttempt.'
   ),
-  step: z8.string().optional().describe(
+  step: z9.string().optional().describe(
     'Step key as "type.name", e.g. "destination.ga4" or "contract.checkout". Required for step_history.'
   ),
-  flow: z8.string().optional().describe(
+  flow: z9.string().optional().describe(
     'Named flow inside the config, e.g. "web" or "server". Optional for step_history: omit to scan every named flow. Ignored for contract steps, which are top-level.'
   ),
-  text: z8.string().trim().min(1).max(MAX_ANNOTATION_TEXT_LENGTH).optional().describe(
+  text: z9.string().trim().min(1).max(MAX_ANNOTATION_TEXT_LENGTH).optional().describe(
     `The text to write (1-${MAX_ANNOTATION_TEXT_LENGTH} chars). Required for rationale_set and note_add. As rationale it replaces the note already on the release and never touches the machine summary; as a note it is appended to a thread and nothing is ever replaced.`
   ),
-  limit: z8.number().int().positive().optional().describe(
+  limit: z9.number().int().positive().optional().describe(
     `Page size. Releases to list for action "releases" (max 100), or releases to SCAN for step_history (max ${MAX_STEP_HISTORY_LIMIT}). For step_history this bounds releases, not entries: a step present in several named flows yields one entry per flow per release, and the scan stops at ${MAX_STEP_HISTORY_ENTRIES} entries with entriesTruncated set. Narrow with "flow" to avoid that. For threads it bounds threads, and a read that carries messages is held to ${MAX_THREADS_WITH_MESSAGES} of them. Knowledge entries are bounded the same way.`
   ),
-  offset: z8.number().int().min(0).optional().describe('Releases to skip. Action "releases" only.'),
-  anchorType: z8.enum(TOOL_ANCHOR_TYPES).optional().describe(
+  offset: z9.number().int().min(0).optional().describe('Releases to skip. Action "releases" only.'),
+  anchorType: z9.enum(TOOL_ANCHOR_TYPES).optional().describe(
     'What a thread hangs on. Defaults to "release", the only anchor the app writes today. Pair it with anchorKey; a key means a different thing under each type.'
   ),
-  anchorKey: z8.string().min(1).max(MAX_ANCHOR_KEY_LENGTH).optional().describe(
+  anchorKey: z9.string().min(1).max(MAX_ANCHOR_KEY_LENGTH).optional().describe(
     'What the anchor addresses within its type: a release version ID (ver_...) for "release", a "type.name" step key for "step". For a release you can pass versionId or versionNumber instead. Omit entirely on action "threads" to read every thread on the flow.'
   ),
-  anchorLabel: z8.string().min(1).max(MAX_ANCHOR_LABEL_LENGTH).optional().describe(
+  anchorLabel: z9.string().min(1).max(MAX_ANCHOR_LABEL_LENGTH).optional().describe(
     'How the anchor reads on screen, stored once when a thread is opened so a later rename leaves it readable. Derived for a release ("v14"); pass it only when opening a thread on another anchor type.'
   ),
-  threadId: z8.string().min(1).optional().describe(
+  threadId: z9.string().min(1).optional().describe(
     'Thread ID (thr_...) from action "threads". Pass it to note_add to reply in that thread; omit it to open a new thread on the anchor.'
   ),
-  status: z8.enum(THREAD_STATUSES).optional().describe(
+  status: z9.enum(THREAD_STATUSES).optional().describe(
     'Read only threads in this state. Action "threads" only; omit for both.'
   ),
-  pageKey: z8.string().min(1).max(MAX_SOURCE_KEY_LENGTH).optional().describe(
+  pageKey: z9.string().min(1).max(MAX_SOURCE_KEY_LENGTH).optional().describe(
     'The page a note was left on, as Tag Mode addressed it, usually the page URL. Narrows action "knowledge" to every frame that page holds, at any depth; omit it to read the whole project.'
   ),
-  frameId: z8.string().regex(FRAME_ID_PATTERN).optional().describe(
+  frameId: z9.string().regex(FRAME_ID_PATTERN).optional().describe(
     'One frame (frm_...), the named rectangle a note hangs on. Action "knowledge" only. Narrower than pageKey, since a page holds several frames.'
   ),
-  markId: z8.string().min(1).max(MAX_MARK_ID_LENGTH).optional().describe(
+  markId: z9.string().min(1).max(MAX_MARK_ID_LENGTH).optional().describe(
     'One tag within "frameId", by its tag id (the id of an entry in frame_manage marks.tags). Action "knowledge" only, and refused without frameId, since a mark id alone addresses nothing. Naming a mark is also what attaches the message bodies.'
   )
 };
@@ -2069,7 +2117,7 @@ var HUB_HINT_ENTRY_NAMES_FLOW = "An entry names the flow it was written against
 var HUB_HINT_KNOWLEDGE_READ_ONLY = "This tool only reads knowledge. Answering a note, and settling it, are done by a person in the app.";
 var HUB_HINT_READ_FRAME = 'Use frame_manage action "get" with the frameId to read the frame and its marks.';
 var HUB_NOT_FOUND_HINT = 'Use action "releases" to find version ids and action "threads" to find thread ids.';
-var hubInputSchema = z8.object(HUB_MANAGE_INPUT_SCHEMA);
+var hubInputSchema = z9.object(HUB_MANAGE_INPUT_SCHEMA);
 var HubToolError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -2489,12 +2537,7 @@ async function hubManageHandler(client, rawInput) {
   try {
     const parsed = hubInputSchema.safeParse(rawInput ?? {});
     if (!parsed.success) {
-      throw new HubToolError(
-        "INVALID_INPUT",
-        parsed.error.issues.map(
-          (issue) => `${issue.path.join(".") || "input"}: ${issue.message}`
-        ).join("; ")
-      );
+      throw new HubToolError("INVALID_INPUT", inputIssuesMessage(parsed.error));
     }
     const input = parsed.data;
     const { action } = input;
@@ -2527,7 +2570,7 @@ async function hubManageHandler(client, rawInput) {
         return await handleNoteAdd(client, projectId, flowId, input);
     }
   } catch (error) {
-    return mcpError8(error, errorHint(error, "hub", HUB_NOT_FOUND_HINT));
+    return mcpError9(error, errorHint(error, "hub", HUB_NOT_FOUND_HINT));
   }
 }
 function createHubManageToolSpec(client) {
@@ -2555,23 +2598,23 @@ function registerHubManageTool(server, client) {
 }
 
 // src/tools/frame-manage.ts
-import { z as z9 } from "zod";
-import { mcpResult as mcpResult9, mcpError as mcpError9 } from "@walkeros/core";
+import { z as z10 } from "zod";
+import { mcpResult as mcpResult9, mcpError as mcpError10 } from "@walkeros/core";
 var FRAME_ID_PATTERN2 = /^frm_[A-Za-z0-9_-]{21}$/;
 var MAX_PAGE_KEY_CHARS = 1024;
 var TITLE9 = "Frames";
 var FRAME_MANAGE_DESCRIPTION = 'Read the frames of a measurement plan: named rectangles with marks inside them, drawn in Tag Mode or in the app. Actions: list (every frame of the project, without marks), page (the frames of one page at any depth, with marks), get (one frame with its marks). Read-only: frames are drawn and edited in Tag Mode or the app, never here. A frame name is documentation; the marks inside it carry the meaning. A frame that extends another stores only what it adds, so its tags may carry only the fields they change. Marks are { tags, note }: tags is one flat list of tags, each with an id, a kind such as entity, property or action, a name, and a parentId naming the tag it sits under; note is the frame\u2019s own description and thread. Use hub_manage action "knowledge" with a frameId or markId to read what people wrote on a frame. A markId is a tag id: a tag\u2019s id, parentId and threadRef come back literal when they have the shape the app mints, so they can be passed straight back; every other string value in the marks is wrapped as data, and so is an object key that is not a plain identifier.';
 var FRAME_MANAGE_INPUT_SCHEMA = {
-  action: z9.enum(["list", "page", "get"]).describe(
+  action: z10.enum(["list", "page", "get"]).describe(
     "list the project\u2019s frames, read one page with marks, or read one frame"
   ),
-  projectId: z9.string().optional().describe(
+  projectId: z10.string().optional().describe(
     "Project ID. Optional: falls back to the default project when omitted."
   ),
-  pageKey: z9.string().min(1).max(MAX_PAGE_KEY_CHARS).optional().describe(
+  pageKey: z10.string().min(1).max(MAX_PAGE_KEY_CHARS).optional().describe(
     "The page as its frames address it (the `source.key` of a page frame, usually the page URL without query). Required for page."
   ),
-  frameId: z9.string().regex(FRAME_ID_PATTERN2).optional().describe(
+  frameId: z10.string().regex(FRAME_ID_PATTERN2).optional().describe(
     'Frame ID (frm_...). Required for get. Use action "list" or "page" to find one.'
   )
 };
@@ -2681,17 +2724,11 @@ function serializeFrame(frame) {
     marks: walkMarks(frame.marks)
   };
 }
-var frameInputSchema = z9.object(FRAME_MANAGE_INPUT_SCHEMA);
+var frameInputSchema = z10.object(FRAME_MANAGE_INPUT_SCHEMA);
 async function frameManageHandler(client, rawInput) {
   const parsed = frameInputSchema.safeParse(rawInput ?? {});
   if (!parsed.success) {
-    return mcpError9(
-      new Error(
-        parsed.error.issues.map(
-          (issue) => `${issue.path.join(".") || "input"}: ${issue.message}`
-        ).join("; ")
-      )
-    );
+    return mcpError10(new Error(inputIssuesMessage(parsed.error)));
   }
   const { action, projectId, pageKey, frameId } = parsed.data;
   const validationError = validateActionInput(
@@ -2700,11 +2737,11 @@ async function frameManageHandler(client, rawInput) {
     { pageKey, frameId },
     FRAME_MANAGE_REQUIREMENTS
   );
-  if (validationError) return mcpError9(new Error(validationError));
+  if (validationError) return mcpError10(new Error(validationError));
   try {
     const resolvedProjectId = resolveDefaultProject(client, projectId);
     if (!resolvedProjectId) {
-      return mcpError9(new Error(NO_DEFAULT_PROJECT_ERROR));
+      return mcpError10(new Error(NO_DEFAULT_PROJECT_ERROR));
     }
     switch (action) {
       case "list": {
@@ -2749,7 +2786,7 @@ async function frameManageHandler(client, rawInput) {
       }
     }
   } catch (error) {
-    return mcpError9(error, errorHint(error, "frames", FRAME_NOT_FOUND_HINT));
+    return mcpError10(error, errorHint(error, "frames", FRAME_NOT_FOUND_HINT));
   }
 }
 function createFrameManageToolSpec(client) {
@@ -2777,13 +2814,13 @@ function registerFrameManageTool(server, client) {
 }
 
 // src/tools/feedback.ts
-import { z as z10 } from "zod";
-import { mcpResult as mcpResult10, mcpError as mcpError10 } from "@walkeros/core";
+import { z as z11 } from "zod";
+import { mcpResult as mcpResult10, mcpError as mcpError11 } from "@walkeros/core";
 var TITLE10 = "Send Feedback";
 var DESCRIPTION8 = "Send feedback about walkerOS";
 var inputSchema8 = {
-  text: z10.string().describe("Your feedback text"),
-  anonymous: z10.boolean().optional().describe(
+  text: z11.string().describe("Your feedback text"),
+  anonymous: z11.boolean().optional().describe(
     "Include user/project info? false = include, true = anonymous. Only needed on first call if not yet configured."
   )
 };
@@ -2804,7 +2841,9 @@ function createFeedbackToolSpec(client) {
   };
 }
 async function feedbackHandlerBody(client, input) {
-  const { text, anonymous: explicitAnonymous } = input ?? {};
+  const parsed = parseToolInput(inputSchema8, input);
+  if (!parsed.ok) return parsed.error;
+  const { text, anonymous: explicitAnonymous } = parsed.data;
   try {
     let anonymous = client.getFeedbackPreference();
     if (anonymous === void 0 && explicitAnonymous === void 0) {
@@ -2825,11 +2864,11 @@ async function feedbackHandlerBody(client, input) {
     const isAnonymous = explicitAnonymous ?? anonymous ?? true;
     await client.submitFeedback(text, {
       anonymous: isAnonymous,
-      version: "4.7.0-next-1790245733116"
+      version: "4.7.0"
     });
     return mcpResult10({ ok: true });
   } catch (error) {
-    return mcpError10(error);
+    return mcpError11(error);
   }
 }
 function registerFeedbackTool(server, client) {
@@ -2842,102 +2881,135 @@ function registerFeedbackTool(server, client) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => feedbackHandlerBody(client, args)
   );
 }
 
 // src/tools/validate.ts
 import { validate } from "@walkeros/cli";
-import { schemas } from "@walkeros/cli/dev";
-import { mcpResult as mcpResult11, mcpError as mcpError11 } from "@walkeros/core";
+import { schemas as schemas2 } from "@walkeros/cli/dev";
+import { mcpResult as mcpResult11, mcpError as mcpError12 } from "@walkeros/core";
 
 // src/schemas/output.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
+var ValidateIssueFields = {
+  path: z12.string(),
+  message: z12.string(),
+  value: z12.unknown().optional(),
+  code: z12.string().optional().describe("Stable code (the documented validate code list)"),
+  keyword: z12.string().optional().describe("JSON Schema keyword of an ENTRY_SCHEMA finding")
+};
 var ValidateOutputShape = {
-  valid: z11.boolean().describe("Whether validation passed"),
-  type: z11.union([
-    z11.enum(["contract", "entry", "event", "flow", "mapping"]),
-    z11.string().regex(/^(destinations|sources|transformers)\.\w+$/)
+  valid: z12.boolean().describe("Whether validation passed"),
+  type: z12.union([
+    z12.enum(["contract", "entry", "event", "flow", "mapping"]),
+    z12.string().regex(/^(destinations|sources|transformers)\.\w+$/)
   ]).describe("What was validated"),
-  errors: z11.array(
-    z11.object({
-      path: z11.string(),
-      message: z11.string(),
-      value: z11.unknown().optional(),
-      code: z11.string().optional()
-    })
-  ).describe("Validation errors"),
-  warnings: z11.array(
-    z11.object({
-      path: z11.string(),
-      message: z11.string(),
-      suggestion: z11.string().optional()
+  errors: z12.array(z12.object(ValidateIssueFields)).describe("Validation errors"),
+  warnings: z12.array(
+    z12.object({
+      ...ValidateIssueFields,
+      suggestion: z12.string().optional()
     })
   ).describe("Validation warnings"),
-  details: z11.record(z11.string(), z11.unknown()).describe("Additional validation details")
+  details: z12.object({
+    scope: z12.object({
+      flows: z12.array(z12.string()),
+      entry: z12.object({
+        section: z12.string().optional(),
+        key: z12.string(),
+        flows: z12.array(z12.string()),
+        searchedFlows: z12.array(z12.string())
+      }).optional(),
+      checks: z12.array(z12.string()),
+      offline: z12.literal(true).optional()
+    }).optional().describe("What the run covered"),
+    skipped: z12.array(
+      z12.object({
+        path: z12.string(),
+        check: z12.string(),
+        reason: z12.string(),
+        code: z12.string()
+      })
+    ).optional().describe("Checks in scope that did not run, with the reason"),
+    deferred: z12.array(z12.object({ path: z12.string(), reference: z12.string() })).optional().describe("Values known only at runtime, not schema-checked")
+  }).catchall(z12.unknown()).describe("Additional validation details"),
+  _hints: z12.object({
+    next: z12.array(z12.string()).optional(),
+    warnings: z12.array(z12.string()).optional()
+  }).optional().describe("Suggested next steps")
 };
 var BundleOutputShape = {
-  success: z11.boolean().describe("Whether bundling succeeded"),
-  totalSize: z11.number().optional().describe("Total bundle size in bytes"),
-  buildTime: z11.number().optional().describe("Build time in milliseconds"),
-  packages: z11.array(
-    z11.object({
-      name: z11.string()
+  success: z12.boolean().describe("Whether bundling succeeded"),
+  totalSize: z12.number().optional().describe("Total bundle size in bytes"),
+  buildTime: z12.number().optional().describe("Build time in milliseconds"),
+  packages: z12.array(
+    z12.object({
+      name: z12.string()
     })
   ).optional().describe("Names of packages included in the bundle"),
-  treeshakingEffective: z11.boolean().optional().describe("Whether tree-shaking was effective"),
-  message: z11.string().optional().describe("Status message")
+  treeshakingEffective: z12.boolean().optional().describe("Whether tree-shaking was effective"),
+  message: z12.string().optional().describe("Status message")
 };
 var SimulateOutputShape = {
-  success: z11.boolean().describe("Whether simulation succeeded"),
-  error: z11.string().optional().describe("Error message if failed"),
-  summary: z11.string().describe("One-line result summary"),
-  destinations: z11.record(
-    z11.string(),
-    z11.object({
-      received: z11.boolean().describe("Whether destination received the event"),
-      calls: z11.number().describe("Number of API calls made"),
-      payload: z11.unknown().optional().describe("All intercepted API calls (only when verbose: true)")
+  success: z12.boolean().describe("Whether simulation succeeded"),
+  error: z12.string().optional().describe("Error message if failed"),
+  summary: z12.string().describe("One-line result summary"),
+  destinations: z12.record(
+    z12.string(),
+    z12.object({
+      received: z12.boolean().describe("Whether destination received the event"),
+      calls: z12.number().describe("Number of API calls made"),
+      payload: z12.unknown().optional().describe("All intercepted API calls (only when verbose: true)")
     })
   ).optional().describe("Per-destination results"),
-  capturedEvents: z11.array(z11.record(z11.string(), z11.unknown())).optional().describe("Events captured by source simulation"),
-  duration: z11.number().optional().describe("Simulation duration in ms")
+  capturedEvents: z12.array(z12.record(z12.string(), z12.unknown())).optional().describe("Events captured by source simulation"),
+  calls: z12.array(z12.unknown()).optional().describe(
+    "Calls a simulated source made on its mock env (only when verbose: true)"
+  ),
+  skipped: z12.object({
+    reason: z12.enum(["consent", "pending"]),
+    required: z12.record(z12.string(), z12.boolean()).optional(),
+    granted: z12.record(z12.string(), z12.boolean()).optional(),
+    require: z12.array(z12.string()).optional()
+  }).optional().describe(
+    "Why the destination sent nothing: a consent skip, or waiting for its require"
+  ),
+  duration: z12.number().optional().describe("Simulation duration in ms")
 };
 var PushOutputShape = {
-  success: z11.boolean().describe("Whether push succeeded"),
-  elbResult: z11.unknown().optional().describe("Push result from the collector"),
-  duration: z11.number().describe("Push duration in milliseconds"),
-  error: z11.string().optional().describe("Error message if push failed")
+  success: z12.boolean().describe("Whether push succeeded"),
+  elbResult: z12.unknown().optional().describe("Push result from the collector"),
+  duration: z12.number().describe("Push duration in milliseconds"),
+  error: z12.string().optional().describe("Error message if push failed")
 };
 var ExamplesListOutputShape = {
-  flow: z11.string().describe("Flow name"),
-  count: z11.number().describe("Number of examples found"),
-  examples: z11.array(
-    z11.object({
-      step: z11.string().describe('Step location (e.g., "destination.gtag")'),
-      stepType: z11.enum(["source", "transformer", "destination"]).describe("Step type"),
-      stepName: z11.string().describe("Step name"),
-      exampleName: z11.string().describe("Example name"),
-      source: z11.enum(["inline", "package"]).describe(
+  flow: z12.string().describe("Flow name"),
+  count: z12.number().describe("Number of examples found"),
+  examples: z12.array(
+    z12.object({
+      step: z12.string().describe('Step location (e.g., "destination.gtag")'),
+      stepType: z12.enum(["source", "transformer", "destination"]).describe("Step type"),
+      stepName: z12.string().describe("Step name"),
+      exampleName: z12.string().describe("Example name"),
+      source: z12.enum(["inline", "package"]).describe(
         'Where the example came from: "inline" (defined in the flow step) or "package" (shipped by the referenced package)'
       ),
-      title: z11.string().optional().describe("Human-readable title if set"),
-      description: z11.string().optional().describe("Short human-readable description"),
-      public: z11.boolean().optional().describe(
+      title: z12.string().optional().describe("Human-readable title if set"),
+      description: z12.string().optional().describe("Short human-readable description"),
+      public: z12.boolean().optional().describe(
         "Whether the example is public (defaults to true if omitted)"
       ),
-      hasIn: z11.boolean().describe("Whether the example has an input value"),
-      hasOut: z11.boolean().describe("Whether the example has an output value"),
-      hasMapping: z11.boolean().describe("Whether the example has a mapping configuration"),
-      hasTrigger: z11.boolean().describe("Whether the example has trigger metadata"),
-      in: z11.unknown().optional().describe("Input event data"),
-      out: z11.unknown().optional().describe("Expected output data"),
-      mapping: z11.unknown().optional().describe("Mapping configuration for destinations"),
-      trigger: z11.object({
-        type: z11.string().optional(),
-        options: z11.unknown().optional()
+      hasIn: z12.boolean().describe("Whether the example has an input value"),
+      hasOut: z12.boolean().describe("Whether the example has an output value"),
+      hasMapping: z12.boolean().describe("Whether the example has a mapping configuration"),
+      hasTrigger: z12.boolean().describe("Whether the example has trigger metadata"),
+      in: z12.unknown().optional().describe("Input event data"),
+      out: z12.unknown().optional().describe("Expected output data"),
+      mapping: z12.unknown().optional().describe("Mapping configuration for destinations"),
+      trigger: z12.object({
+        type: z12.string().optional(),
+        options: z12.unknown().optional()
       }).optional().describe("Trigger metadata for source simulation")
     })
   ).describe("Step examples")
@@ -2960,42 +3032,14 @@ async function loadValidateInput(runtime, input, type) {
     throw error;
   }
 }
-var DEPRECATED_STORE_PACKAGE = "@walkeros/store-memory";
-function detectDeprecatedStorePackages(config) {
-  const errors = [];
-  if (!config || typeof config !== "object") return errors;
-  const flows = config.flows;
-  if (!flows || typeof flows !== "object") return errors;
-  for (const [flowName, flowEntry] of Object.entries(
-    flows
-  )) {
-    if (!flowEntry || typeof flowEntry !== "object") continue;
-    const stores = flowEntry.stores;
-    if (!stores || typeof stores !== "object") continue;
-    for (const [storeId, storeEntry] of Object.entries(
-      stores
-    )) {
-      if (!storeEntry || typeof storeEntry !== "object") continue;
-      const pkg = storeEntry.package;
-      if (pkg === DEPRECATED_STORE_PACKAGE) {
-        errors.push({
-          path: `flows.${flowName}.stores.${storeId}`,
-          message: `Store "${storeId}" uses ${DEPRECATED_STORE_PACKAGE}, which has been removed. Use the built-in cache by omitting cache.store, or remove the store declaration if it was only used as a cache target.`,
-          code: "DEPRECATED_PACKAGE"
-        });
-      }
-    }
-  }
-  return errors;
-}
 var TITLE11 = "Validate Flow";
-var DESCRIPTION9 = "Validate walkerOS events, flow configurations, mapping rules, or data contracts. Accepts JSON strings, file paths, or URLs as input; on the hosted server only inline JSON or a saved flow id (flow_ or cfg_), no file paths or URLs. Returns validation results with errors, warnings, and details.";
-var inputSchema9 = schemas.ValidateInputShape;
+var DESCRIPTION9 = "Validate walkerOS events, flow configurations, mapping rules, or data contracts. Accepts JSON strings, file paths, or URLs as input; on the hosted server only inline JSON or a saved flow id (flow_ or cfg_), no file paths or URLs. With only type and input, a flow runs every check on every flow and step, including each package's settings schema (fetched from the package CDN; offline: true skips that and says so). flow and path narrow the run; strict turns warnings and skips into failures: valid is false. Returns valid, errors and warnings with stable codes, and details.scope (what was checked), details.skipped (checks that could not run) and details.deferred (values known only at runtime).";
+var inputSchema9 = schemas2.ValidateInputShape;
 var annotations11 = {
   readOnlyHint: true,
   destructiveHint: false,
   idempotentHint: true,
-  openWorldHint: false
+  openWorldHint: true
 };
 function createFlowValidateToolSpec(runtime) {
   return {
@@ -3008,43 +3052,48 @@ function createFlowValidateToolSpec(runtime) {
   };
 }
 async function flowValidateHandlerBody(runtime, input) {
+  const parsed = schemas2.ValidateInputSchema.safeParse(input ?? {});
+  if (!parsed.success) {
+    return mcpError12(parsed.error, "Check the flow_validate input fields");
+  }
   const {
     type,
     input: validateInput,
     flow,
-    path: path2
-  } = input ?? {};
+    path: path3,
+    strict,
+    offline
+  } = parsed.data;
   try {
     const resolved = await loadValidateInput(runtime, validateInput, type);
+    const configDir = runtime.baseDir?.(validateInput);
     const result = await validate(type, resolved, {
       flow,
-      path: path2
+      path: path3,
+      strict,
+      offline,
+      ...configDir ? { configDir } : {}
     });
-    let augmented = result;
-    if (type === "flow") {
-      const deprecatedErrors = detectDeprecatedStorePackages(resolved);
-      if (deprecatedErrors.length > 0) {
-        augmented = {
-          ...result,
-          valid: false,
-          errors: [...result.errors, ...deprecatedErrors]
-        };
-      }
-    }
-    const hints = augmented.valid ? {
-      next: runtime.simulate ? [
-        "Use flow_simulate to test event flow",
-        "Use flow_bundle to build"
-      ] : [HINT_OUT_OF_PROCESS]
-    } : {
+    const skipped = result.details.skipped ?? [];
+    const next = runtime.simulate ? ["Use flow_simulate to test event flow", "Use flow_bundle to build"] : [HINT_OUT_OF_PROCESS];
+    const hints = !result.valid && result.errors.length === 0 ? {
+      next: [
+        `strict: ${result.warnings.length} warning(s) and ${skipped.length} skipped check(s) count as failures; resolve them, or run without strict`
+      ]
+    } : !result.valid ? {
       next: [
         "Fix errors above, then run flow_validate again",
         "Read walkeros://reference/flow-schema for correct structure"
       ]
-    };
-    return mcpResult11(augmented, hints);
+    } : skipped.length > 0 ? {
+      next: [
+        `Valid in checked scope; ${skipped.length} check(s) skipped, see details.skipped`,
+        ...next
+      ]
+    } : { next };
+    return mcpResult11(result, hints);
   } catch (error) {
-    return mcpError11(
+    return mcpError12(
       error,
       refusalHint(
         error,
@@ -3065,15 +3114,13 @@ function registerFlowValidateTool(server, runtime) {
       outputSchema: ValidateOutputShape,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => flowValidateHandlerBody(runtime, args)
   );
 }
 
 // src/tools/bundle.ts
-import { schemas as schemas2 } from "@walkeros/cli/dev";
-import { mcpResult as mcpResult12, mcpError as mcpError12 } from "@walkeros/core";
+import { schemas as schemas3 } from "@walkeros/cli/dev";
+import { mcpResult as mcpResult12, mcpError as mcpError13 } from "@walkeros/core";
 
 // src/tools/resolve-config-path.ts
 async function resolveConfigPath(client, configPath) {
@@ -3086,7 +3133,7 @@ async function resolveConfigPath(client, configPath) {
 var TITLE12 = "Bundle Flow";
 var DESCRIPTION10 = "Bundle a walkerOS flow configuration into deployable JavaScript. Resolves all destinations, sources, and transformers, then outputs a tree-shaken production bundle. Returns bundle statistics.";
 var inputSchema10 = {
-  ...schemas2.BundleInputShape
+  ...schemas3.BundleInputShape
 };
 var annotations12 = {
   readOnlyHint: false,
@@ -3105,10 +3152,12 @@ function createFlowBundleToolSpec(client, runtime) {
   };
 }
 async function flowBundleHandlerBody(client, runtime, input) {
-  const { configPath, flow, stats, output } = input ?? {};
+  const parsed = parseToolInput(inputSchema10, input);
+  if (!parsed.ok) return parsed.error;
+  const { configPath, flow, stats, output } = parsed.data;
   if (!runtime.bundle) {
     const refusal = unavailableOperation("bundle");
-    return mcpError12(refusal, refusal.hint);
+    return mcpError13(refusal, refusal.hint);
   }
   try {
     const resolvedConfigPath = await resolveConfigPath(client, configPath);
@@ -3128,9 +3177,8 @@ async function flowBundleHandlerBody(client, runtime, input) {
         }
       );
     }
-    const output_ = result;
     return mcpResult12(
-      { success: true, ...output_ },
+      { success: true, ...result },
       {
         next: [
           "Use flow_simulate to test",
@@ -3139,7 +3187,7 @@ async function flowBundleHandlerBody(client, runtime, input) {
       }
     );
   } catch (error) {
-    return mcpError12(
+    return mcpError13(
       error,
       refusalHint(error, "Run flow_validate for detailed error messages")
     );
@@ -3157,16 +3205,80 @@ function registerFlowBundleTool(server, client, runtime) {
       outputSchema: BundleOutputShape,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => flowBundleHandlerBody(client, runtime, args)
   );
 }
 
 // src/tools/simulate.ts
-import { z as z12 } from "zod";
-import { schemas as schemas3 } from "@walkeros/cli/dev";
-import { mcpResult as mcpResult13, mcpError as mcpError13 } from "@walkeros/core";
+import { z as z13 } from "zod";
+import { schemas as schemas4 } from "@walkeros/cli/dev";
+import { filterValues, mcpResult as mcpResult14, mcpError as mcpError15 } from "@walkeros/core";
+
+// src/tools/simulate-description.ts
+var FLOW_SIMULATE_DESCRIPTION = `Simulate events through a walkerOS flow without making real API calls. For destinations: event is a walkerOS event { name: "entity action", data: {...} }. For sources: event is { content, trigger?: { type?, options? } }, where content is the walkerOS event { name: "entity action", data: {...} }. Only the simulated source starts. step (required) targets the step to simulate, e.g. "destination.gtag". Use flow_examples to discover available test data. A destination simulation starts only its target destination. A source's own walker commands (e.g. a CMP's walker consent) are returned as elb calls. Consent: state.consent is the collector consent the step starts from (any step; a consent-gated source such as the session source waits for it). A destination with require: ["consent"] waits until consent is present, so pass state.consent to start it; a destination with consent: { marketing: true } receives an event only when that consent is granted in state.consent or in the event's own consent. When a destination sends nothing, the result says why (waiting for its require, or a consent skip). command runs a step example with command (e.g. "consent") on a destination: event is the command's data, state.consent still applies first. Mapping transforms event names and data at the destination level. Policy redacts or injects fields before mapping runs.`;
+
+// src/tools/egress.ts
+import { isObject as isObject2, mcpResult as mcpResult13 } from "@walkeros/core";
+import { scrubJson, scrubSecrets } from "@walkeros/core/node";
+function scrubbed(result, known) {
+  const parsed = parseObject(scrubJson(result, { known }));
+  if (!parsed) throw new Error("Result could not be redacted as JSON.");
+  return parsed;
+}
+function scrubbedError(response, known) {
+  let structuredContent;
+  try {
+    if (response.structuredContent)
+      structuredContent = scrubbed(response.structuredContent, known);
+  } catch {
+    structuredContent = void 0;
+  }
+  if (structuredContent) {
+    return {
+      ...response,
+      content: [{ type: "text", text: JSON.stringify(structuredContent) }],
+      structuredContent
+    };
+  }
+  return {
+    ...response,
+    content: response.content.map((part) => ({
+      ...part,
+      text: scrubSecrets(part.text, { known })
+    })),
+    structuredContent: { error: "The error could not be redacted." }
+  };
+}
+function scrubbedPushResult(result, known) {
+  const text = scrubJson(result, { known, space: 2 });
+  const parsed = parseObject(text);
+  if (parsed)
+    return mcpResult13({
+      ...parsed,
+      success: result.success,
+      duration: result.duration
+    });
+  return {
+    content: [{ type: "text", text }],
+    structuredContent: { success: result.success, duration: result.duration }
+  };
+}
+function parseObject(text) {
+  try {
+    const parsed = JSON.parse(text);
+    return isObject2(parsed) ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function readRun(runtime, input) {
+  if (runtime.loadRun) return runtime.loadRun(input);
+  return {
+    knownSecrets: runtime.knownSecrets ? await runtime.knownSecrets(input) : []
+  };
+}
+
+// src/tools/simulate.ts
 var STEP_TYPES = [
   "source",
   "transformer",
@@ -3177,30 +3289,38 @@ function isStepType(value) {
   return STEP_TYPES.some((t) => t === value);
 }
 var TITLE13 = "Simulate Flow";
-var DESCRIPTION11 = 'Simulate events through a walkerOS flow without making real API calls. For destinations: event is a walkerOS event { name: "entity action", data: {...} }. For sources: event is { content, trigger?: { type?, options? } }, where content is the walkerOS event { name: "entity action", data: {...} }. step (required) targets the step to simulate, e.g. "destination.gtag". Use flow_examples to discover available test data. IMPORTANT: Destinations with require (e.g. require: ["consent"]) stay pending until that collector event fires \u2014 simulation will error "not found" if require is not satisfied. Remove require from config or provide consent/user events before simulating. Separately, destinations with consent (e.g. consent: { marketing: true }) only receive events where the event includes matching consent. Mapping transforms event names and data at the destination level. Policy redacts or injects fields before mapping runs.';
+var COMMANDS = [
+  "config",
+  "consent",
+  "user",
+  "run"
+];
 var inputSchema11 = {
-  configPath: schemas3.SimulateInputShape.configPath,
-  event: z12.union([z12.record(z12.string(), z12.unknown()), z12.string()]).optional().describe(
-    "For destinations: { name, data, consent? }. Include consent (e.g. { marketing: true }) to satisfy destination consent requirements. For sources: { content, trigger? } where content is the walkerOS event { name, data }. Can also be a JSON string or file path."
+  configPath: schemas4.SimulateInputShape.configPath,
+  event: z13.union([z13.record(z13.string(), z13.unknown()), z13.string()]).optional().describe(
+    "For destinations: { name, data, consent? }; the event's consent counts toward the destination's consent requirement, on top of state.consent. With command: the command's data, e.g. { marketing: true } for consent. For sources: { content, trigger? } where content is the walkerOS event { name, data }. A web source's page URL goes in trigger.options.url (default http://localhost). Can also be a JSON string or file path."
   ),
-  flow: schemas3.SimulateInputShape.flow,
-  platform: schemas3.SimulateInputShape.platform,
+  flow: schemas4.SimulateInputShape.flow,
+  platform: schemas4.SimulateInputShape.platform,
   // Override the (optional) CLI `step` shape: the simulate handler hard-requires
   // a target step (no all-steps mode), so the registered schema must be honest.
-  step: z12.string().describe(
+  step: z13.string().describe(
     'Required. Target step as "type.name", e.g. "source.demo", "collector.default", "destination.gtag", "transformer.router". A collector step runs enrichment and then collector.next, returning every event the destinations would receive (none after a stop).'
   ),
-  verbose: z12.boolean().optional().describe("Include full payload per destination (default: false)"),
-  ingest: z12.record(z12.string(), z12.unknown()).optional().describe(
-    "Pipeline context a transformer reads via ctx.ingest, e.g. { url } for a request decoder. Only used for transformer steps."
+  verbose: z13.boolean().optional().describe("Include full payload per destination (default: false)"),
+  ingest: z13.record(z13.string(), z13.unknown()).optional().describe(
+    "Pipeline context a step reads via ctx.ingest, e.g. { url } for a request decoder or { ip, userAgent } for a conversion API. Used for transformer, collector and destination steps (their before chains included); _meta is always set by the runtime."
   ),
-  state: z12.object({
-    consent: z12.record(z12.string(), z12.unknown()).optional(),
-    user: z12.record(z12.string(), z12.unknown()).optional(),
-    globals: z12.record(z12.string(), z12.unknown()).optional(),
-    timing: z12.number().optional()
+  state: z13.object({
+    consent: z13.record(z13.string(), z13.boolean()).optional(),
+    user: z13.record(z13.string(), z13.unknown()).optional(),
+    globals: z13.record(z13.string(), z13.unknown()).optional(),
+    timing: z13.number().optional()
   }).optional().describe(
-    "Collector-state snapshot for collector steps: consent/user/globals/timing. Seeds the collector before enrichment runs."
+    "Collector state the step starts from. consent: every step (starts a destination that requires consent and feeds its consent check; for a source, the consent a consent-gated source waits for). user/globals/timing: collector steps, seeded before enrichment runs."
+  ),
+  command: z13.enum(COMMANDS).optional().describe(
+    "Destination steps only: run this collector command with event as its data instead of pushing it, as a step example with command does."
   )
 };
 var annotations13 = {
@@ -3217,18 +3337,40 @@ function createFlowSimulateToolSpec(client, runtime) {
   return {
     name: "flow_simulate",
     title: TITLE13,
-    description: DESCRIPTION11,
+    description: FLOW_SIMULATE_DESCRIPTION,
     inputSchema: inputSchema11,
     annotations: annotations13,
     handler: (input) => flowSimulateHandlerBody(client, runtime, input)
   };
 }
+function toProperties(value) {
+  if (!value) return void 0;
+  const properties = {};
+  for (const [key, entry] of Object.entries(value)) {
+    const property = filterValues(entry);
+    if (property !== void 0) properties[key] = property;
+  }
+  return properties;
+}
 async function flowSimulateHandlerBody(client, runtime, input) {
-  const { configPath, event, flow, platform, step, verbose, ingest, state } = input ?? {};
+  const parsed = parseToolInput(inputSchema11, input);
+  if (!parsed.ok) return parsed.error;
+  const {
+    configPath,
+    event,
+    flow,
+    platform,
+    step,
+    verbose,
+    ingest,
+    state,
+    command
+  } = parsed.data;
   if (!runtime.simulate) {
     const refusal = unavailableOperation("simulate");
-    return mcpError13(refusal, refusal.hint);
+    return mcpError15(refusal, refusal.hint);
   }
+  let known = [];
   try {
     if (!event) {
       throw new Error(
@@ -3263,26 +3405,53 @@ async function flowSimulateHandlerBody(client, runtime, input) {
         `Unknown step type "${stepType}". Use "source", "collector", "transformer", or "destination".`
       );
     }
+    if (command !== void 0 && stepType !== "destination") {
+      throw new Error("command applies to destination steps only.");
+    }
     const resolvedConfigPath = await resolveConfigPath(client, configPath);
+    const run = await readRun(runtime, resolvedConfigPath);
+    known = run.knownSecrets;
     const result = await runtime.simulate(
       resolvedConfigPath,
-      { stepType, stepId, event: resolvedEvent, flow, ingest, state }
+      {
+        stepType,
+        stepId,
+        event: resolvedEvent,
+        flow,
+        ingest,
+        state: state && {
+          consent: state.consent,
+          user: toProperties(state.user),
+          globals: toProperties(state.globals),
+          timing: state.timing
+        },
+        command,
+        config: run.config
+      }
     );
     const success = !result.error;
     const errorMessage = result.error?.message;
     if (result.step === "source") {
       const eventCount = result.events.length;
-      const summary = `Source captured ${eventCount} event${eventCount !== 1 ? "s" : ""}`;
-      return mcpResult13(
-        {
-          success,
-          error: errorMessage,
-          summary,
-          capturedEvents: result.events,
-          duration: result.duration
-        },
+      const commandCount = result.calls.filter(
+        (call) => call.fn === "elb"
+      ).length;
+      const summary = `Source captured ${eventCount} event${eventCount !== 1 ? "s" : ""} and ${commandCount} command${commandCount !== 1 ? "s" : ""}`;
+      const shownCalls = verbose ? result.calls : result.calls.filter((call) => call.fn === "elb");
+      return mcpResult14(
+        scrubbed(
+          {
+            success,
+            error: errorMessage,
+            summary,
+            capturedEvents: result.events,
+            ...shownCalls.length > 0 ? { calls: shownCalls } : {},
+            duration: result.duration
+          },
+          known
+        ),
         {
-          next: eventCount > 0 ? [
+          next: eventCount + commandCount > 0 ? [
             "Use flow_simulate with a destination step to test downstream processing"
           ] : [
             "Check source package examples with package_get, verify trigger type matches"
@@ -3291,28 +3460,34 @@ async function flowSimulateHandlerBody(client, runtime, input) {
       );
     }
     if (result.step === "transformer") {
-      return mcpResult13(
-        {
-          success,
-          error: errorMessage,
-          summary: `Transformer processed event`,
-          capturedEvents: result.events,
-          duration: result.duration
-        },
+      return mcpResult14(
+        scrubbed(
+          {
+            success,
+            error: errorMessage,
+            summary: `Transformer processed event`,
+            capturedEvents: result.events,
+            duration: result.duration
+          },
+          known
+        ),
         {
           next: ["Use flow_bundle to build for production"]
         }
       );
     }
     if (result.step === "collector") {
-      return mcpResult13(
-        {
-          success,
-          error: errorMessage,
-          summary: `Collector enriched event`,
-          capturedEvents: result.events,
-          duration: result.duration
-        },
+      return mcpResult14(
+        scrubbed(
+          {
+            success,
+            error: errorMessage,
+            summary: `Collector enriched event`,
+            capturedEvents: result.events,
+            duration: result.duration
+          },
+          known
+        ),
         {
           next: ["Use flow_simulate with a destination step to test delivery"]
         }
@@ -3333,31 +3508,41 @@ async function flowSimulateHandlerBody(client, runtime, input) {
       (d) => d.received
     ).length;
     const warnings = [];
-    if (receivedCount === 0) {
-      warnings.push(
-        'Destination did not receive the event. Common causes: (1) destination config has consent: { marketing: true } but event lacks matching consent, (2) mapping rules do not match the event name, (3) policy redacted required fields. Add consent to the event: { name: "...", data: {...}, consent: { marketing: true } }.'
-      );
-    }
+    if (receivedCount === 0 && success) warnings.push(notReceived(result));
     const resultObj = {
       success,
       error: errorMessage,
       summary: `${receivedCount}/${destCount} destinations received the event`,
       destinations,
+      ...result.skipped ? { skipped: result.skipped } : {},
       duration: result.duration
     };
-    return mcpResult13(resultObj, {
+    return mcpResult14(scrubbed(resultObj, known), {
       next: ["Use flow_bundle to build for production"],
       ...warnings.length > 0 ? { warnings } : {}
     });
   } catch (error) {
-    const msg = error instanceof Error ? error.message : "";
-    let hint = "Run flow_validate for detailed error messages";
-    if (msg.includes("not found in collector")) {
-      hint = 'If this destination has require: ["consent"] or require: ["user"], it stays pending until that event fires. For simulation, either remove require from the config or simulate with a flow that omits require on the target destination.';
-    }
-    return mcpError13(error, refusalHint(error, hint));
+    const hint = "Run flow_validate for detailed error messages";
+    return scrubbedError(mcpError15(error, refusalHint(error, hint)), known);
   }
 }
+function keysOf(consent) {
+  const keys = Object.entries(consent ?? {}).filter(([, granted]) => granted).map(([key]) => key);
+  return keys.length > 0 ? keys.join(", ") : "none";
+}
+function notReceived(result) {
+  const { skipped } = result;
+  if (skipped?.reason === "pending") {
+    const require2 = skipped.require ?? [];
+    const waits = require2.length ? require2.join(", ") : "its require";
+    const advice = require2.includes("consent") ? "pass state.consent (e.g. { functional: true }) to start it." : `it starts once the flow provides ${waits}; a simulation cannot seed that.`;
+    return `Destination waits for ${waits} (require) and never started: ${advice}`;
+  }
+  if (skipped?.reason === "consent") {
+    return `Consent skip: requires ${keysOf(skipped.required)}; granted ${keysOf(skipped.granted)}. Grant it in state.consent or in the event's consent.`;
+  }
+  return "Destination made no calls. Common causes: (1) mapping rules do not match the event name or ignore it, (2) policy redacted required fields, (3) a before chain stopped the event.";
+}
 function registerFlowSimulateTool(server, client, runtime) {
   const spec = createFlowSimulateToolSpec(client, runtime);
   server.registerTool(
@@ -3370,25 +3555,23 @@ function registerFlowSimulateTool(server, client, runtime) {
       outputSchema: SimulateOutputShape,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => flowSimulateHandlerBody(client, runtime, args)
   );
 }
 
 // src/tools/push.ts
-import { z as z13 } from "zod";
-import { schemas as schemas4 } from "@walkeros/cli/dev";
-import { mcpResult as mcpResult14, mcpError as mcpError14 } from "@walkeros/core";
+import { z as z14 } from "zod";
+import { schemas as schemas5 } from "@walkeros/cli/dev";
+import { mcpError as mcpError16 } from "@walkeros/core";
 var TITLE14 = "Push Events";
-var DESCRIPTION12 = "Push a real event through a walkerOS flow to actual destinations. Makes real API calls to real endpoints. Best suited for server-side flows \u2014 web flows should use flow_simulate for testing.";
+var DESCRIPTION11 = "Push a real event through a walkerOS flow to actual destinations. Makes real API calls to real endpoints. Best suited for server-side flows \u2014 web flows should use flow_simulate for testing.";
 var inputSchema12 = {
-  configPath: schemas4.PushInputShape.configPath,
-  event: z13.record(z13.string(), z13.unknown()).describe(
+  configPath: schemas5.PushInputShape.configPath,
+  event: z14.record(z14.string(), z14.unknown()).describe(
     'Event object, e.g. { name: "page view", data: { title: "Home" } }'
   ),
-  flow: schemas4.PushInputShape.flow,
-  platform: schemas4.PushInputShape.platform
+  flow: schemas5.PushInputShape.flow,
+  platform: schemas5.PushInputShape.platform
 };
 var annotations14 = {
   readOnlyHint: false,
@@ -3400,37 +3583,49 @@ function createFlowPushToolSpec(runtime) {
   return {
     name: "flow_push",
     title: TITLE14,
-    description: DESCRIPTION12,
+    description: DESCRIPTION11,
     inputSchema: inputSchema12,
     annotations: annotations14,
     handler: (input) => flowPushHandlerBody(runtime, input)
   };
 }
 async function flowPushHandlerBody(runtime, input) {
-  const { configPath, event, flow, platform } = input ?? {};
+  const parsed = parseToolInput(inputSchema12, input);
+  if (!parsed.ok) return parsed.error;
+  const { configPath, event, flow, platform } = parsed.data;
   if (!runtime.push) {
     const refusal = unavailableOperation("push");
-    return mcpError14(refusal, refusal.hint);
+    return mcpError16(refusal, refusal.hint);
   }
+  let known = [];
   try {
+    const run = await readRun(runtime, configPath);
+    known = run.knownSecrets;
     const result = await runtime.push(configPath, event, {
       flow,
-      platform
+      platform,
+      config: run.config
     });
     if (!result.success) {
-      return mcpError14(
-        new Error(result.error || "Push failed"),
-        "Check destination configuration and connectivity."
+      return scrubbedError(
+        mcpError16(
+          new Error(result.error || "Push failed"),
+          "Check destination configuration and connectivity."
+        ),
+        known
       );
     }
-    return mcpResult14(result);
+    return scrubbedPushResult(result, known);
   } catch (error) {
-    return mcpError14(
-      error,
-      refusalHint(
+    return scrubbedError(
+      mcpError16(
         error,
-        "Check configPath and event format. For web flows, use flow_simulate."
-      )
+        refusalHint(
+          error,
+          "Check configPath and event format. For web flows, use flow_simulate."
+        )
+      ),
+      known
     );
   }
 }
@@ -3446,22 +3641,21 @@ function registerFlowPushTool(server, runtime) {
       outputSchema: PushOutputShape,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => flowPushHandlerBody(runtime, args)
   );
 }
 
 // src/tools/examples.ts
-import { z as z14 } from "zod";
-import { fetchPackage, mcpResult as mcpResult15, mcpError as mcpError15 } from "@walkeros/core";
+import { z as z15 } from "zod";
+import { fetchPackage, mcpResult as mcpResult15, mcpError as mcpError17 } from "@walkeros/core";
+import { resolveExportName, selectDevExamples } from "@walkeros/cli";
 
 // src/catalog.ts
 var NPM_SEARCH_URL = "https://registry.npmjs.org/-/v1/search";
 var JSDELIVR_BASE = "https://cdn.jsdelivr.net/npm";
 var WALKEROS_JSON_PATH = "dist/walkerOS.json";
 var CACHE_TTL = 5 * 60 * 1e3;
-var CLIENT_HEADER = "walkeros-mcp/4.7.0-next-1790245733116";
+var CLIENT_HEADER = "walkeros-mcp/4.7.0";
 function getPackageBaseUrl() {
   return process.env.WALKEROS_APP_URL || void 0;
 }
@@ -3616,17 +3810,17 @@ function applyFilters(entries, filters) {
 // src/tools/examples.ts
 var MAX_PACKAGE_LOOKUPS = 25;
 var TITLE15 = "Flow Examples";
-var DESCRIPTION13 = 'List all step examples in a walkerOS flow configuration. Shows example names, step locations, and in/out shapes. Inline examples on a step take precedence; steps without inline examples fall back to the examples shipped by their referenced package. Each result is tagged with its source ("inline" or "package"). On the hosted server configPath accepts only inline JSON or a saved flow id (flow_ or cfg_), no file paths or URLs. Use this to discover available test fixtures and simulation data.';
+var DESCRIPTION12 = 'List all step examples in a walkerOS flow configuration. Shows example names, step locations, and in/out shapes. Inline examples on a step take precedence; steps without inline examples fall back to the examples shipped by their referenced package. Each result is tagged with its source ("inline" or "package"). On the hosted server configPath accepts only inline JSON or a saved flow id (flow_ or cfg_), no file paths or URLs. Use this to discover available test fixtures and simulation data.';
 var inputSchema13 = {
-  configPath: z14.string().min(1).describe(
+  configPath: z15.string().min(1).describe(
     "Inline JSON string, file path, or URL of a flow configuration (hosted server: inline JSON or a saved flow id only)"
   ),
-  flow: z14.string().optional().describe("Flow name for multi-flow configs"),
-  step: z14.string().optional().describe('Filter to a specific step (e.g., "destination.gtag")'),
-  full: z14.boolean().optional().describe(
+  flow: z15.string().optional().describe("Flow name for multi-flow configs"),
+  step: z15.string().optional().describe('Filter to a specific step (e.g., "destination.gtag")'),
+  full: z15.boolean().optional().describe(
     "Return full in/out/mapping data for each example (default: false, returns metadata only)"
   ),
-  includeHidden: z14.boolean().optional().describe(
+  includeHidden: z15.boolean().optional().describe(
     "Include examples marked public: false (default: false). Set true for test/debug discovery."
   )
 };
@@ -3640,16 +3834,21 @@ function createFlowExamplesToolSpec(runtime) {
   return {
     name: "flow_examples",
     title: TITLE15,
-    description: DESCRIPTION13,
+    description: DESCRIPTION12,
     inputSchema: inputSchema13,
     annotations: annotations15,
     handler: (input) => flowExamplesHandlerBody(runtime, input)
   };
 }
 async function flowExamplesHandlerBody(runtime, input) {
-  const { configPath, flow, step, full, includeHidden } = input ?? {};
+  const parsed = parseToolInput(inputSchema13, input);
+  if (!parsed.ok) return parsed.error;
+  const { configPath, flow, step, full, includeHidden } = parsed.data;
   try {
     const rawConfig = await runtime.load(configPath);
+    if (!isFlowJson(rawConfig)) {
+      throw new Error("Config is not a flow config: it has no flows object.");
+    }
     const flowNames = Object.keys(rawConfig.flows || {});
     const flowName = flow || (flowNames.length === 1 ? flowNames[0] : void 0);
     if (!flowName) {
@@ -3690,32 +3889,37 @@ async function flowExamplesHandlerBody(runtime, input) {
       return items;
     };
     const baseUrl = getPackageBaseUrl();
-    const loadPackageExamples = async (packageName) => {
+    const loadPackage = async (packageName) => {
       try {
-        const info = await fetchPackage(packageName, {
+        return await fetchPackage(packageName, {
           baseUrl,
           client: CLIENT_HEADER
         });
-        const stepExamples = info.examples?.step;
-        if (stepExamples && typeof stepExamples === "object")
-          return stepExamples;
       } catch {
       }
       return void 0;
     };
     const packageLookups = /* @__PURE__ */ new Map();
     let skippedPackages = false;
-    const examplesForPackage = (packageName) => {
+    const skippedExamples = [];
+    const packageFor = (packageName) => {
       const existing = packageLookups.get(packageName);
       if (existing) return existing;
       if (packageLookups.size >= MAX_PACKAGE_LOOKUPS) {
         skippedPackages = true;
         return Promise.resolve(void 0);
       }
-      const lookup = loadPackageExamples(packageName);
+      const lookup = loadPackage(packageName);
       packageLookups.set(packageName, lookup);
       return lookup;
     };
+    const stepExamplesFor = (info, exportName) => {
+      const selected = selectDevExamples(
+        { examples: info.examples, exportExamples: info.exportExamples },
+        exportName
+      );
+      return stepExamplesOf(selected?.step);
+    };
     const stepTypes = [
       { key: "sources", type: "source" },
       { key: "transformers", type: "transformer" },
@@ -3726,15 +3930,20 @@ async function flowExamplesHandlerBody(runtime, input) {
       for (const [name, ref] of Object.entries(refs)) {
         if (step && `${type}.${name}` !== step) continue;
         if (ref.examples) {
-          examples.push(
-            ...toItems(ref.examples, type, name, "inline")
-          );
+          examples.push(...toItems(ref.examples, type, name, "inline"));
           continue;
         }
         if (!ref.package) continue;
-        const packageExamples = await examplesForPackage(ref.package);
-        if (packageExamples)
-          examples.push(...toItems(packageExamples, type, name, "package"));
+        const info = await packageFor(ref.package);
+        if (!info) continue;
+        const { exportName } = resolveExportName(flowSettings, type, name);
+        const packageExamples = stepExamplesFor(info, exportName);
+        if (!packageExamples) continue;
+        examples.push(
+          ...toItems(packageExamples.examples, type, name, "package")
+        );
+        for (const exampleName of packageExamples.skipped)
+          skippedExamples.push(`${type}.${name}.${exampleName}`);
       }
     }
     const result = {
@@ -3748,6 +3957,11 @@ async function flowExamplesHandlerBody(runtime, input) {
         "No examples found. Add examples to step entries, or reference a package that ships examples (see package_get)."
       );
     }
+    if (skippedExamples.length > 0) {
+      warnings.push(
+        `Skipped ${skippedExamples.length} package example(s) that do not match the step example schema: ${skippedExamples.join(", ")}.`
+      );
+    }
     if (skippedPackages) {
       warnings.push(
         `Package examples were looked up for the first ${MAX_PACKAGE_LOOKUPS} packages only. Use step to narrow the result.`
@@ -3761,7 +3975,7 @@ async function flowExamplesHandlerBody(runtime, input) {
     };
     return mcpResult15(result, hints);
   } catch (error) {
-    return mcpError15(
+    return mcpError17(
       error,
       refusalHint(error, "Check configPath \u2014 expected a flow.json file")
     );
@@ -3779,15 +3993,13 @@ function registerFlowExamplesTool(server, runtime) {
       outputSchema: ExamplesListOutputShape,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => flowExamplesHandlerBody(runtime, args)
   );
 }
 
 // src/tools/flow-load.ts
-import { z as z15 } from "zod";
-import { mcpResult as mcpResult16, mcpError as mcpError16 } from "@walkeros/core";
+import { z as z16 } from "zod";
+import { mcpResult as mcpResult16, mcpError as mcpError18 } from "@walkeros/core";
 var WEB_SKELETON = {
   version: 4,
   flows: {
@@ -3809,18 +4021,18 @@ var SERVER_SKELETON = {
   }
 };
 var TITLE16 = "Load or Create Flow";
-var DESCRIPTION14 = "Load an existing flow configuration from a local file path, URL, or walkerOS API (by flow ID). On the hosted server only inline JSON or a saved flow id is accepted, no file paths or URLs. Or create a new empty flow by specifying a platform (web or server). Use the add-step prompt to add sources, destinations, transformers, or stores to the flow.";
+var DESCRIPTION13 = "Load an existing flow configuration from a local file path, URL, or walkerOS API (by flow ID). On the hosted server only inline JSON or a saved flow id is accepted, no file paths or URLs. Or create a new empty flow by specifying a platform (web or server). Use the add-step prompt to add sources, destinations, transformers, or stores to the flow.";
 var inputSchema14 = {
-  source: z15.string().optional().describe(
+  source: z16.string().optional().describe(
     "Flow source: local file path (./flow.json), URL (https://...), inline JSON string, or API flow ID (cfg_...). Omit to create a new flow."
   ),
-  platform: z15.enum(["web", "server"]).optional().describe(
+  platform: z16.enum(["web", "server"]).optional().describe(
     "Platform for new flows. Required when source is omitted. web = browser tracking, server = Node.js HTTP."
   )
 };
 var outputSchema = {
-  version: z15.number().describe("Flow config version"),
-  flows: z15.record(z15.string(), z15.unknown()).describe("Flow entries")
+  version: z16.number().describe("Flow config version"),
+  flows: z16.record(z16.string(), z16.unknown()).describe("Flow entries")
 };
 var annotations16 = {
   readOnlyHint: true,
@@ -3832,18 +4044,20 @@ function createFlowLoadToolSpec(client, runtime) {
   return {
     name: "flow_load",
     title: TITLE16,
-    description: DESCRIPTION14,
+    description: DESCRIPTION13,
     inputSchema: inputSchema14,
     annotations: annotations16,
     handler: (input) => flowLoadHandlerBody(client, runtime, input)
   };
 }
 async function flowLoadHandlerBody(client, runtime, input) {
-  const { source, platform } = input ?? {};
+  const parsed = parseToolInput(inputSchema14, input);
+  if (!parsed.ok) return parsed.error;
+  const { source, platform } = parsed.data;
   if (source && isCloudId(source)) {
     const resolvedProjectId = resolveDefaultProject(client, void 0);
     if (!resolvedProjectId) {
-      return mcpError16(new Error(NO_DEFAULT_PROJECT_ERROR));
+      return mcpError18(new Error(NO_DEFAULT_PROJECT_ERROR));
     }
     try {
       const flow = await client.getFlow({
@@ -3857,7 +4071,7 @@ async function flowLoadHandlerBody(client, runtime, input) {
         }
       );
     } catch (error) {
-      return mcpError16(error, isAuthError(error) ? AUTH_HINT : void 0);
+      return mcpError18(error, isAuthError(error) ? AUTH_HINT : void 0);
     }
   }
   try {
@@ -3868,7 +4082,7 @@ async function flowLoadHandlerBody(client, runtime, input) {
       });
     }
     if (!platform) {
-      return mcpError16(
+      return mcpError18(
         new Error(
           "Provide source (file path, URL, or flow ID) to load existing flow, or platform (web/server) to create a new one."
         )
@@ -3882,11 +4096,11 @@ async function flowLoadHandlerBody(client, runtime, input) {
       ]
     });
   } catch (error) {
-    if (error instanceof RuntimeRefusal) return mcpError16(error, error.hint);
+    if (error instanceof RuntimeRefusal) return mcpError18(error, error.hint);
     const msg = error instanceof Error ? error.message : "";
     if (msg.includes("not found") || msg.includes("ENOENT"))
-      return mcpError16(error, "Check configPath \u2014 expected a flow.json file");
-    return mcpError16(error);
+      return mcpError18(error, "Check configPath \u2014 expected a flow.json file");
+    return mcpError18(error);
   }
 }
 function registerFlowLoadTool(server, client, runtime) {
@@ -3901,25 +4115,23 @@ function registerFlowLoadTool(server, client, runtime) {
       outputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => flowLoadHandlerBody(client, runtime, args)
   );
 }
 
 // src/tools/package.ts
-import { z as z16 } from "zod";
-import { fetchPackage as fetchPackage2, mcpResult as mcpResult17, mcpError as mcpError17 } from "@walkeros/core";
+import { z as z17 } from "zod";
+import { fetchPackage as fetchPackage2, mcpResult as mcpResult17, mcpError as mcpError19 } from "@walkeros/core";
 import { mergeConfigSchema } from "@walkeros/core/dev";
 var SEARCH_TITLE = "Search Package";
 var SEARCH_DESCRIPTION = "Start here for package discovery. Never guess package names: use this tool first to find exact names. Without package name: returns catalog filtered by type/platform. With package name: returns metadata, hint keys, and example summaries.";
 var searchInputSchema = {
-  package: z16.string().min(1).optional().describe(
+  package: z17.string().min(1).optional().describe(
     "Exact npm package name for detailed lookup (e.g., @walkeros/web-destination-snowplow)"
   ),
-  type: z16.enum(["source", "destination", "transformer", "store"]).optional().describe("Filter by package type (browse mode)"),
-  platform: z16.enum(["web", "server"]).optional().describe("Filter by platform (browse mode, includes universal packages)"),
-  version: z16.string().optional().describe("Package version for detailed lookup (default: latest)")
+  type: z17.enum(["source", "destination", "transformer", "store"]).optional().describe("Filter by package type (browse mode)"),
+  platform: z17.enum(["web", "server"]).optional().describe("Filter by platform (browse mode, includes universal packages)"),
+  version: z17.string().optional().describe("Package version for detailed lookup (default: latest)")
 };
 var searchAnnotations = {
   readOnlyHint: true,
@@ -3938,12 +4150,9 @@ function createPackageSearchToolSpec() {
   };
 }
 async function packageSearchHandlerBody(input) {
-  const {
-    package: packageName,
-    type,
-    platform,
-    version
-  } = input ?? {};
+  const parsed = parseToolInput(searchInputSchema, input);
+  if (!parsed.ok) return parsed.error;
+  const { package: packageName, type, platform, version } = parsed.data;
   const baseUrl = getPackageBaseUrl();
   if (!packageName) {
     const { entries, warnings } = await fetchCatalog({
@@ -3976,7 +4185,7 @@ async function packageSearchHandlerBody(input) {
       next: ["Use package_get for schemas and examples"]
     });
   } catch (error) {
-    return mcpError17(
+    return mcpError19(
       error,
       "Package not found. Use package_search without parameters to browse available packages."
     );
@@ -3993,19 +4202,17 @@ function registerPackageSearchTool(server) {
       // No outputSchema: browse mode returns {catalog, count}, lookup returns metadata — incompatible shapes
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => packageSearchHandlerBody(args)
   );
 }
 var GET_TITLE = "Get Package";
 var GET_DESCRIPTION = 'Requires exact package name: do not guess names, use package_search first to find them. Returns schemas + hint texts + example summaries by default (lightweight). Use section parameter for full content: "hints" (with code blocks), "examples" (full in/out data), or "all".';
 var getInputSchema = {
-  package: z16.string().min(1).describe(
+  package: z17.string().min(1).describe(
     "Exact npm package name (e.g., @walkeros/web-destination-snowplow)"
   ),
-  version: z16.string().optional().describe("Package version (default: latest)"),
-  section: z16.enum(["hints", "examples", "all"]).optional().describe(
+  version: z17.string().optional().describe("Package version (default: latest)"),
+  section: z17.enum(["hints", "examples", "all"]).optional().describe(
     "Section to expand with full content. Default: summary view with schemas + hint texts + example descriptions"
   )
 };
@@ -4025,12 +4232,35 @@ function createPackageGetToolSpec() {
     handler: (input) => packageGetHandlerBody(input)
   };
 }
+var STEP_PACKAGE_TYPES = [
+  "source",
+  "destination",
+  "transformer",
+  "store"
+];
+function isStepPackageType(type) {
+  return STEP_PACKAGE_TYPES.some((stepType) => stepType === type);
+}
+function shapeSchemas(type, schemas9) {
+  const shaped = {};
+  if (isStepPackageType(type)) {
+    const settings = recordField(schemas9, "settings");
+    const credentials = recordField(schemas9, "credentials");
+    shaped.config = mergeConfigSchema(type, {
+      ...schemas9,
+      settings,
+      credentials
+    });
+  }
+  for (const [key, value] of Object.entries(schemas9)) {
+    if (key !== "settings") shaped[key] = value;
+  }
+  return shaped;
+}
 async function packageGetHandlerBody(input) {
-  const {
-    package: packageName,
-    version,
-    section
-  } = input ?? {};
+  const parsed = parseToolInput(getInputSchema, input);
+  if (!parsed.ok) return parsed.error;
+  const { package: packageName, version, section } = parsed.data;
   const baseUrl = getPackageBaseUrl();
   try {
     const info = await fetchPackage2(packageName, {
@@ -4038,45 +4268,42 @@ async function packageGetHandlerBody(input) {
       baseUrl,
       client: CLIENT_HEADER
     });
-    const mergedSchemas = {};
-    if (info.type) {
-      mergedSchemas.config = mergeConfigSchema(
-        info.type,
-        info.schemas
-      );
-    }
-    for (const [key, value] of Object.entries(info.schemas)) {
-      if (key !== "settings") {
-        mergedSchemas[key] = value;
-      }
-    }
     const result = {
       package: info.packageName,
       version: info.version,
       type: info.type,
       platform: normalizePlatform(info.platform),
-      schemas: mergedSchemas
+      schemas: shapeSchemas(info.type, info.schemas)
     };
+    if (info.exportSchemas) {
+      result.exportSchemas = Object.fromEntries(
+        Object.entries(info.exportSchemas).map(([name, schemas9]) => [
+          name,
+          shapeSchemas(info.type, schemas9)
+        ])
+      );
+    }
     if (info.hints) {
       if (section === "hints" || section === "all") {
         result.hints = info.hints;
       } else {
         const hintSummary = {};
         for (const [key, hint] of Object.entries(info.hints)) {
-          const h = hint;
-          hintSummary[key] = { text: h.text };
+          const text = stringField(hint, "text");
+          if (text !== void 0) hintSummary[key] = { text };
         }
         result.hints = hintSummary;
       }
     }
     if (section === "examples" || section === "all") {
       result.examples = info.examples;
+      if (info.exportExamples) result.exportExamples = info.exportExamples;
     } else {
       result.exampleSummaries = info.exampleSummaries;
     }
     return mcpResult17(result);
   } catch (error) {
-    return mcpError17(
+    return mcpError19(
       error,
       "Use package_search to browse available package names."
     );
@@ -4093,9 +4320,7 @@ function registerGetPackageSchemaTool(server) {
       // No outputSchema: removed to avoid SDK -32602 crashes on unexpected field values
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    (args) => packageGetHandlerBody(args)
   );
 }
 
@@ -23722,7 +23947,7 @@ function stripTrailingSlashes(value) {
 // src/tools/diagnostics.ts
 var CONTRACT_OPENAPI_VERSION = spec_default.info.version;
 var TITLE17 = "Diagnostics";
-var DESCRIPTION15 = "Report the MCP runtime surface: MCP and CLI versions, the resolved app URL and its source, app /api/health reachability, the bundled OpenAPI contract version, and which source served the last package catalog fetch. Read-only and callable when logged out; use it when a request fails to see which versions and backend you are on.";
+var DESCRIPTION14 = "Report the MCP runtime surface: MCP and CLI versions, the resolved app URL and its source, app /api/health reachability, the bundled OpenAPI contract version, and which source served the last package catalog fetch. Read-only and callable when logged out; use it when a request fails to see which versions and backend you are on.";
 var inputSchema15 = {};
 var annotations17 = {
   readOnlyHint: true,
@@ -23734,7 +23959,7 @@ function createDiagnosticsToolSpec(client, packageVersion) {
   return {
     name: "diagnostics",
     title: TITLE17,
-    description: DESCRIPTION15,
+    description: DESCRIPTION14,
     inputSchema: inputSchema15,
     annotations: annotations17,
     handler: () => diagnosticsHandlerBody(client, packageVersion)
@@ -23808,9 +24033,7 @@ function registerDiagnosticsTool(server, client, packageVersion) {
       inputSchema: spec.inputSchema,
       annotations: spec.annotations
     },
-    // SDK infers handler type from inputSchema shape; ToolSpec.handler is the
-    // type-erased (input: unknown) => Promise<unknown> form by design.
-    spec.handler
+    () => diagnosticsHandlerBody(client, packageVersion)
   );
 }
 
@@ -23860,7 +24083,7 @@ function registerPackageSchemaResources(server) {
 }
 
 // src/resources/references.ts
-import { schemas as schemas5 } from "@walkeros/core/dev";
+import { schemas as schemas6 } from "@walkeros/core/dev";
 function registerReferenceResources(server) {
   server.resource(
     "flow-schema",
@@ -23873,7 +24096,7 @@ function registerReferenceResources(server) {
       contents: [
         {
           uri: "walkeros://reference/flow-schema",
-          text: JSON.stringify(schemas5.configJsonSchema, null, 2),
+          text: JSON.stringify(schemas6.configJsonSchema, null, 2),
           mimeType: "application/json"
         }
       ]
@@ -23890,7 +24113,7 @@ function registerReferenceResources(server) {
       contents: [
         {
           uri: "walkeros://reference/event-model",
-          text: JSON.stringify(schemas5.eventJsonSchema, null, 2),
+          text: JSON.stringify(schemas6.eventJsonSchema, null, 2),
           mimeType: "application/json"
         }
       ]
@@ -23909,10 +24132,10 @@ function registerReferenceResources(server) {
           uri: "walkeros://reference/mapping",
           text: JSON.stringify(
             {
-              rules: schemas5.rulesJsonSchema,
-              valueConfig: schemas5.valueConfigJsonSchema,
-              rule: schemas5.ruleJsonSchema,
-              policy: schemas5.policyJsonSchema
+              rules: schemas6.rulesJsonSchema,
+              valueConfig: schemas6.valueConfigJsonSchema,
+              rule: schemas6.ruleJsonSchema,
+              policy: schemas6.policyJsonSchema
             },
             null,
             2
@@ -23933,7 +24156,7 @@ function registerReferenceResources(server) {
       contents: [
         {
           uri: "walkeros://reference/consent",
-          text: JSON.stringify(schemas5.consentJsonSchema, null, 2),
+          text: JSON.stringify(schemas6.consentJsonSchema, null, 2),
           mimeType: "application/json"
         }
       ]
@@ -24009,7 +24232,7 @@ function registerReferenceResources(server) {
       contents: [
         {
           uri: "walkeros://reference/contract",
-          text: JSON.stringify(schemas5.contractJsonSchema, null, 2),
+          text: JSON.stringify(schemas6.contractJsonSchema, null, 2),
           mimeType: "application/json"
         }
       ]
@@ -24019,7 +24242,7 @@ function registerReferenceResources(server) {
     "examples",
     "walkeros://reference/examples",
     {
-      description: "Complete flow config example: web + server flows, mapping, contracts, step examples",
+      description: "Complete, tested flow config (flow-complete.json): web, server and warehouse flows with mapping, consent, contracts, routes, state, stores and step examples. Its guide is examples/flow-complete.md in @walkeros/cli.",
       mimeType: "application/json"
     },
     async () => {
@@ -24087,17 +24310,17 @@ function registerReferenceResources(server) {
 }
 
 // src/prompts/add-step.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 function registerAddStepPrompt(server) {
   server.registerPrompt(
     "add-step",
     {
       description: "Add a source, destination, transformer, or store step to a flow configuration. Guides through package selection, config scaffolding, and wiring.",
       argsSchema: {
-        stepType: z17.string().optional().describe(
+        stepType: z18.string().optional().describe(
           "Type of step to add: source, destination, transformer, or store"
         ),
-        flowPath: z17.string().optional().describe("Path to the flow.json file to modify")
+        flowPath: z18.string().optional().describe("Path to the flow.json file to modify")
       }
     },
     async ({ stepType, flowPath }) => ({
@@ -24143,14 +24366,14 @@ function registerAddStepPrompt(server) {
 }
 
 // src/prompts/setup-mapping.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 function registerSetupMappingPrompt(server) {
   server.registerPrompt(
     "setup-mapping",
     {
       description: "Set up event mapping for any step in a flow. Teaches mapping syntax and uses package examples as templates.",
       argsSchema: {
-        stepName: z18.string().optional().describe('Step name in the flow (e.g., "gtag", "meta", "express")')
+        stepName: z19.string().optional().describe('Step name in the flow (e.g., "gtag", "meta", "express")')
       }
     },
     async ({ stepName }) => ({
@@ -24188,14 +24411,14 @@ function registerSetupMappingPrompt(server) {
 }
 
 // src/prompts/manage-contract.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 function registerManageContractPrompt(server) {
   server.registerPrompt(
     "manage-contract",
     {
       description: "Create or update event contracts for a flow. Can generate contracts from existing mappings or scaffold mappings from contracts.",
       argsSchema: {
-        direction: z19.string().optional().describe(
+        direction: z20.string().optional().describe(
           'Direction: "from-mappings" (extract contract from existing mappings), "from-scratch" (create new contract), or "to-mappings" (scaffold mappings from contract)'
         )
       }
@@ -24239,7 +24462,7 @@ var SERVER_INSTRUCTIONS = `walkerOS is an open-source, privacy-first event data
 
 - **Never guess package names.** Always use \`package_search\` first to find exact names, then \`package_get\` for details.
 - **Never construct flow configs from memory.** Read \`walkeros://reference/flow-schema\` and use \`package_get\` for package-specific schemas.
-- **Always validate.** Run \`flow_validate\` after every config change. If validation fails, fix and re-validate.
+- **Always validate.** Run \`flow_validate\` after every config change. If validation fails, fix and re-validate. By default it checks every flow and step, package settings included; a valid result can still list \`details.skipped\` checks, so read them before trusting it (\`strict: true\` turns warnings and skips into failures: \`valid\` is false).
 - **Simulate before deploying.** Use \`flow_simulate\` to test with mocked API calls before \`flow_bundle\` or \`flow_push\`.
 - **When a request fails,** call \`diagnostics\` to see which MCP/CLI versions, app URL, and backend you are on, plus whether the app is reachable.
 
@@ -24697,7 +24920,11 @@ function createStreamableHttpHandler(server, opts = {}) {
 }
 
 // src/runtime/local.ts
+import * as fs from "fs";
+import * as path2 from "path";
 import {
+  collectKnownSecrets,
+  loadConfig,
   loadJsonConfig,
   bundle as bundle2,
   push,
@@ -24706,6 +24933,8 @@ import {
   simulateCollector,
   simulateDestination
 } from "@walkeros/cli";
+import { isObject as isObject3 } from "@walkeros/core";
+import { schemas as schemas7 } from "@walkeros/core/dev";
 
 // src/runtime/bundle-cache.ts
 import { createHash } from "crypto";
@@ -24796,6 +25025,10 @@ async function getOrBuildBundle(resolvedConfig) {
 function createLocalRuntime() {
   return {
     load: (input) => loadJsonConfig(input),
+    baseDir(input) {
+      const file = path2.resolve(input);
+      return fs.existsSync(file) && fs.statSync(file).isFile() ? path2.dirname(file) : void 0;
+    },
     bundle: (input, opts) => bundle2(input, {
       flowName: opts.flowName,
       stats: opts.stats,
@@ -24809,51 +25042,84 @@ function createLocalRuntime() {
         bundlePath = void 0;
       }
       const common = { bundlePath, flow: opts.flow, silent: true };
+      const config = opts.config ?? input;
       switch (opts.stepType) {
         case "source":
-          return simulateSource(input, opts.event, {
+          return simulateSource(config, opts.event, {
             sourceId: opts.stepId,
-            ...common
+            ...common,
+            consent: opts.state?.consent
           });
         case "transformer":
-          return simulateTransformer(
-            input,
-            opts.event,
-            { transformerId: opts.stepId, ...common, ingest: opts.ingest }
-          );
+          return simulateTransformer(config, partialEvent(opts.event), {
+            transformerId: opts.stepId,
+            ...common,
+            ingest: opts.ingest,
+            consent: opts.state?.consent
+          });
         case "collector":
-          return simulateCollector(
-            input,
-            opts.event,
-            { collectorName: opts.stepId, ...common, state: opts.state }
-          );
+          return simulateCollector(config, partialEvent(opts.event), {
+            collectorName: opts.stepId,
+            ...common,
+            state: opts.state,
+            ingest: opts.ingest
+          });
         case "destination":
-          return simulateDestination(
-            input,
-            opts.event,
-            { destinationId: opts.stepId, ...common }
-          );
+          return simulateDestination(config, eventObject(opts.event), {
+            destinationId: opts.stepId,
+            ...common,
+            ingest: opts.ingest,
+            consent: opts.state?.consent,
+            command: opts.command
+          });
       }
     },
+    knownSecrets: async (input) => collectKnownSecrets(await loadJsonConfig(input)),
+    async loadRun(input) {
+      const content = await loadConfig(input, { json: false });
+      const config = typeof content === "string" ? parseJson(content) : void 0;
+      if (!isFlowJson(config)) return { knownSecrets: [] };
+      return { config, knownSecrets: collectKnownSecrets(config) };
+    },
     push: (input, event, opts) => push(input, event, {
       json: true,
       flow: opts.flow,
-      platform: opts.platform
+      platform: opts.platform,
+      ...opts.config !== void 0 && { raw: opts.config }
     })
   };
 }
+function partialEvent(value) {
+  if (isPartialEvent(value)) return value;
+  const parsed = schemas7.PartialEventSchema.safeParse(value);
+  throw new Error(parsed.error?.message ?? "Invalid event");
+}
+function isPartialEvent(value) {
+  return schemas7.PartialEventSchema.safeParse(value).success;
+}
+function eventObject(value) {
+  if (isObject3(value)) return value;
+  throw new Error("event must be an object.");
+}
+function parseJson(content) {
+  try {
+    return JSON.parse(content);
+  } catch {
+    return void 0;
+  }
+}
 
 // src/tool-definitions.ts
-import { z as z20 } from "zod";
-import { schemas as schemas6 } from "@walkeros/cli/dev";
+import { z as z21 } from "zod";
+import { schemas as schemas8 } from "@walkeros/cli/dev";
 var TOOL_DEFINITIONS = [
   {
     name: "auth",
     title: "Authentication",
     description: "Manage walkerOS authentication. Check login status, log in via device code flow, or log out. No terminal or browser required, the MCP client handles the authorization URL.",
     inputSchema: {
-      action: z20.enum(["status", "login", "logout"]),
-      deviceCode: z20.string().optional()
+      action: z21.enum(["status", "login", "logout"]),
+      deviceCode: z21.string().optional()
     },
     annotations: {
       readOnlyHint: false,
@@ -24867,7 +25133,7 @@ var TOOL_DEFINITIONS = [
     title: "Project Management",
     description: "Manage walkerOS projects. List, create, update, delete projects, or set a default project for CLI operations.",
     inputSchema: {
-      action: z20.enum([
+      action: z21.enum([
         "list",
         "get",
         "create",
@@ -24875,8 +25141,8 @@ var TOOL_DEFINITIONS = [
         "delete",
         "set_default"
       ]),
-      projectId: z20.string().optional(),
-      name: z20.string().optional()
+      projectId: z21.string().optional(),
+      name: z21.string().optional()
     },
     annotations: {
       readOnlyHint: false,
@@ -24890,7 +25156,7 @@ var TOOL_DEFINITIONS = [
     title: "Flow Management",
     description: "Manage walkerOS flows and their previews. List/get/create/update/delete/duplicate flows, or create/inspect/delete preview bundles for testing flow changes on live sites.",
     inputSchema: {
-      action: z20.enum([
+      action: z21.enum([
         "list",
         "get",
         "create",
@@ -24902,19 +25168,19 @@ var TOOL_DEFINITIONS = [
         "preview_create",
         "preview_delete"
       ]),
-      flowId: z20.string().optional(),
-      projectId: z20.string().optional(),
-      name: z20.string().optional(),
-      content: z20.record(z20.string(), z20.unknown()).optional(),
-      patch: z20.boolean().optional(),
-      fields: z20.array(z20.string()).optional(),
-      sort: z20.enum(["name", "updated_at", "created_at"]).optional(),
-      order: z20.enum(["asc", "desc"]).optional(),
-      includeDeleted: z20.boolean().optional(),
-      previewId: z20.string().optional(),
-      flowName: z20.string().optional(),
-      flowSettingsId: z20.string().optional(),
-      siteUrl: z20.string().optional()
+      flowId: z21.string().optional(),
+      projectId: z21.string().optional(),
+      name: z21.string().optional(),
+      content: z21.record(z21.string(), z21.unknown()).optional(),
+      patch: z21.boolean().optional(),
+      fields: z21.array(z21.string()).optional(),
+      sort: z21.enum(["name", "updated_at", "created_at"]).optional(),
+      order: z21.enum(["asc", "desc"]).optional(),
+      includeDeleted: z21.boolean().optional(),
+      previewId: z21.string().optional(),
+      flowName: z21.string().optional(),
+      flowSettingsId: z21.string().optional(),
+      siteUrl: z21.string().optional()
     },
     annotations: {
       readOnlyHint: false,
@@ -24928,14 +25194,14 @@ var TOOL_DEFINITIONS = [
     title: "Deploy Management",
     description: "Deploy walkerOS flows and manage deployments. For get/delete actions pass flowId (required) plus optional slug to disambiguate when a flow has multiple active deployments. If a flow has >=2 active deployments and no slug is supplied, the tool returns a MULTIPLE_DEPLOYMENTS error with a details[] list showing each deployment's slug, type, status, and updatedAt.",
     inputSchema: {
-      action: z20.enum(["deploy", "list", "get", "delete"]),
-      projectId: z20.string().optional(),
-      flowId: z20.string().optional(),
-      slug: z20.string().optional(),
-      type: z20.enum(["web", "server"]).optional(),
-      status: z20.string().optional(),
-      wait: z20.boolean().optional(),
-      flowName: z20.string().optional()
+      action: z21.enum(["deploy", "list", "get", "delete"]),
+      projectId: z21.string().optional(),
+      flowId: z21.string().optional(),
+      slug: z21.string().optional(),
+      type: z21.enum(["web", "server"]).optional(),
+      status: z21.string().optional(),
+      wait: z21.boolean().optional(),
+      flowName: z21.string().optional()
     },
     annotations: {
       readOnlyHint: false,
@@ -24949,12 +25215,12 @@ var TOOL_DEFINITIONS = [
     title: "Secret Management",
     description: "Manage a flow\u2019s managed secrets (the $secret.<NAME> values its steps reference at deploy/run time). Actions: list (metadata only), set (create), update (rotate value), delete. Secrets are write-mostly: values are encrypted at rest and are NEVER returned, listed, or echoed. Reference a secret from a flow step as $secret.<NAME> (credentials, tokens, and private keys use $secret, not $env).",
     inputSchema: {
-      action: z20.enum(["list", "set", "update", "delete"]),
-      projectId: z20.string().optional(),
-      flowId: z20.string(),
-      name: z20.string().optional(),
-      value: z20.string().optional(),
-      secretId: z20.string().optional()
+      action: z21.enum(["list", "set", "update", "delete"]),
+      projectId: z21.string().optional(),
+      flowId: z21.string(),
+      name: z21.string().optional(),
+      value: z21.string().optional(),
+      secretId: z21.string().optional()
     },
     annotations: {
       readOnlyHint: false,
@@ -24968,17 +25234,17 @@ var TOOL_DEFINITIONS = [
     title: "Observe Session",
     description: "Open, inspect, or end an Observe session: a time-boxed window on one flow that runtimes attach to as arms. A preview arm streams from a browser, a container arm runs server-side, and both feed ONE shared journeys feed. start opens the window (arms picks which runtimes attach), status reports per-arm state plus recordsReceived and expiresAt, stop ends the whole session including every arm. A flow has at most one session, so status/stop resolve it from flowId when sessionId is omitted. Read the events with observe_journeys; this tool never returns event data and never judges whether events are correct.",
     inputSchema: {
-      action: z20.enum(["start", "status", "stop"]),
-      flowId: z20.string(),
-      projectId: z20.string().optional(),
-      sessionId: z20.string().optional(),
-      arms: z20.object({
-        container: z20.literal(true).optional(),
-        preview: z20.string().optional()
+      action: z21.enum(["start", "status", "stop"]),
+      flowId: z21.string(),
+      projectId: z21.string().optional(),
+      sessionId: z21.string().optional(),
+      arms: z21.object({
+        container: z21.literal(true).optional(),
+        preview: z21.string().optional()
       }).optional(),
-      origins: z20.array(z20.string()).optional(),
-      level: z20.enum(["off", "standard", "trace"]).optional(),
-      replace: z20.boolean().optional()
+      origins: z21.array(z21.string()).optional(),
+      level: z21.enum(["off", "standard", "trace"]).optional(),
+      replace: z21.boolean().optional()
     },
     annotations: {
       readOnlyHint: false,
@@ -24992,10 +25258,10 @@ var TOOL_DEFINITIONS = [
     title: "Observe Journeys",
     description: "Read the assembled, cross-runtime journeys for a flow that is currently being observed (an active Observe session). Pass flowId; the active session is resolved for you (a flow has at most one). Each journey is one traced event reconstructed end to end across web and server: its ordered hops, per-hop status, captured in/out payloads, consent, and vendor calls. When the flow has no active session the result is { sessionId: null, journeys: [], gaps: [] }. Narrow with traceId (one trace) and limit (1-100, most recent kept; default 50). Read-only.",
     inputSchema: {
-      flowId: z20.string(),
-      projectId: z20.string().optional(),
-      traceId: z20.string().optional(),
-      limit: z20.number().int().min(1).max(100).optional()
+      flowId: z21.string(),
+      projectId: z21.string().optional(),
+      traceId: z21.string().optional(),
+      limit: z21.number().int().min(1).max(100).optional()
     },
     annotations: {
       readOnlyHint: true,
@@ -25007,13 +25273,13 @@ var TOOL_DEFINITIONS = [
   {
     name: "flow_validate",
     title: "Validate Flow",
-    description: "Validate walkerOS events, flow configurations, mapping rules, or data contracts. Accepts JSON strings, file paths, or URLs as input; on the hosted server only inline JSON or a saved flow id (flow_ or cfg_), no file paths or URLs. Returns validation results with errors, warnings, and details.",
-    inputSchema: schemas6.ValidateInputShape,
+    description: "Validate walkerOS events, flow configurations, mapping rules, or data contracts. Accepts JSON strings, file paths, or URLs as input; on the hosted server only inline JSON or a saved flow id (flow_ or cfg_), no file paths or URLs. With only type and input, a flow runs every check on every flow and step, including each package's settings schema (fetched from the package CDN; offline: true skips that and says so). flow and path narrow the run; strict turns warnings and skips into failures: valid is false. Returns valid, errors and warnings with stable codes, and details.scope (what was checked), details.skipped (checks that could not run) and details.deferred (values known only at runtime).",
+    inputSchema: schemas8.ValidateInputShape,
     annotations: {
       readOnlyHint: true,
       destructiveHint: false,
       idempotentHint: true,
-      openWorldHint: false
+      openWorldHint: true
     }
   },
   {
@@ -25021,9 +25287,9 @@ var TOOL_DEFINITIONS = [
     title: "Bundle Flow",
     description: "Bundle a walkerOS flow configuration into deployable JavaScript. Resolves all destinations, sources, and transformers, then outputs a tree-shaken production bundle. Returns bundle statistics. Set remote: true to use the walkerOS cloud service instead of local build tools.",
     inputSchema: {
-      ...schemas6.BundleInputShape,
-      remote: z20.boolean().optional(),
-      content: z20.record(z20.string(), z20.unknown()).optional()
+      ...schemas8.BundleInputShape,
+      remote: z21.boolean().optional(),
+      content: z21.record(z21.string(), z21.unknown()).optional()
     },
     annotations: {
       readOnlyHint: false,
@@ -25035,14 +25301,14 @@ var TOOL_DEFINITIONS = [
   {
     name: "flow_simulate",
     title: "Simulate Flow",
-    description: 'Simulate events through a walkerOS flow without making real API calls. For destinations: event is a walkerOS event { name: "entity action", data: {...} }. For sources: event is { content: ..., trigger?: { type?, options? }, env?: {...} }. Use step to target a specific step. Use flow_examples to discover available test data. IMPORTANT: Destinations with require (e.g. require: ["consent"]) stay pending until that collector event fires, simulation will error "not found" if require is not satisfied. Remove require from config or provide consent/user events before simulating. Separately, destinations with consent (e.g. consent: { marketing: true }) only receive events where the event includes matching consent. Mapping transforms event names and data at the destination level. Policy redacts or injects fields before mapping runs.',
+    description: FLOW_SIMULATE_DESCRIPTION,
     inputSchema: {
-      configPath: schemas6.SimulateInputShape.configPath,
-      event: z20.union([z20.record(z20.string(), z20.unknown()), z20.string()]).optional(),
-      flow: schemas6.SimulateInputShape.flow,
-      platform: schemas6.SimulateInputShape.platform,
-      step: schemas6.SimulateInputShape.step,
-      verbose: z20.boolean().optional()
+      configPath: schemas8.SimulateInputShape.configPath,
+      event: z21.union([z21.record(z21.string(), z21.unknown()), z21.string()]).optional(),
+      flow: schemas8.SimulateInputShape.flow,
+      platform: schemas8.SimulateInputShape.platform,
+      step: schemas8.SimulateInputShape.step,
+      verbose: z21.boolean().optional()
     },
     annotations: {
       // Not read-only: simulation compiles and runs the flow in process.
@@ -25057,10 +25323,10 @@ var TOOL_DEFINITIONS = [
     title: "Push Events",
     description: "Push a real event through a walkerOS flow to actual destinations. Makes real API calls to real endpoints. Best suited for server-side flows, web flows should use flow_simulate for testing.",
     inputSchema: {
-      configPath: schemas6.PushInputShape.configPath,
-      event: z20.record(z20.string(), z20.unknown()),
-      flow: schemas6.PushInputShape.flow,
-      platform: schemas6.PushInputShape.platform
+      configPath: schemas8.PushInputShape.configPath,
+      event: z21.record(z21.string(), z21.unknown()),
+      flow: schemas8.PushInputShape.flow,
+      platform: schemas8.PushInputShape.platform
     },
     annotations: {
       readOnlyHint: false,
@@ -25074,11 +25340,11 @@ var TOOL_DEFINITIONS = [
     title: "Flow Examples",
     description: "List all step examples in a walkerOS flow configuration. Shows example names, step locations, and in/out shapes. On the hosted server configPath accepts only inline JSON or a saved flow id (flow_ or cfg_), no file paths or URLs. Use this to discover available test fixtures and simulation data.",
     inputSchema: {
-      configPath: z20.string().min(1),
-      flow: z20.string().optional(),
-      step: z20.string().optional(),
-      full: z20.boolean().optional(),
-      includeHidden: z20.boolean().optional()
+      configPath: z21.string().min(1),
+      flow: z21.string().optional(),
+      step: z21.string().optional(),
+      full: z21.boolean().optional(),
+      includeHidden: z21.boolean().optional()
     },
     annotations: {
       readOnlyHint: true,
@@ -25092,8 +25358,8 @@ var TOOL_DEFINITIONS = [
     title: "Load or Create Flow",
     description: "Load an existing flow configuration from a local file path, URL, or walkerOS API (by flow ID). On the hosted server only inline JSON or a saved flow id is accepted, no file paths or URLs. Or create a new empty flow by specifying a platform (web or server). Use the add-step prompt to add sources, destinations, transformers, or stores to the flow.",
     inputSchema: {
-      source: z20.string().optional(),
-      platform: z20.enum(["web", "server"]).optional()
+      source: z21.string().optional(),
+      platform: z21.enum(["web", "server"]).optional()
     },
     annotations: {
       readOnlyHint: true,
@@ -25107,10 +25373,10 @@ var TOOL_DEFINITIONS = [
     title: "Search Package",
     description: "Start here for package discovery. Never guess package names, use this tool first to find exact names. Without package name: returns catalog filtered by type/platform. With package name: returns metadata, hint keys, and example summaries.",
     inputSchema: {
-      package: z20.string().min(1).optional(),
-      type: z20.enum(["source", "destination", "transformer", "store"]).optional(),
-      platform: z20.enum(["web", "server"]).optional(),
-      version: z20.string().optional()
+      package: z21.string().min(1).optional(),
+      type: z21.enum(["source", "destination", "transformer", "store"]).optional(),
+      platform: z21.enum(["web", "server"]).optional(),
+      version: z21.string().optional()
     },
     annotations: {
       readOnlyHint: true,
@@ -25124,9 +25390,9 @@ var TOOL_DEFINITIONS = [
     title: "Get Package",
     description: 'Requires exact package name, do not guess names, use package_search first to find them. Returns schemas + hint texts + example summaries by default (lightweight). Use section parameter for full content: "hints" (with code blocks), "examples" (full in/out data), or "all".',
     inputSchema: {
-      package: z20.string().min(1),
-      version: z20.string().optional(),
-      section: z20.enum(["hints", "examples", "all"]).optional()
+      package: z21.string().min(1),
+      version: z21.string().optional(),
+      section: z21.enum(["hints", "examples", "all"]).optional()
     },
     annotations: {
       readOnlyHint: true,
@@ -25140,8 +25406,8 @@ var TOOL_DEFINITIONS = [
     title: "Send Feedback",
     description: "Send feedback about walkerOS",
     inputSchema: {
-      text: z20.string(),
-      anonymous: z20.boolean().optional()
+      text: z21.string(),
+      anonymous: z21.boolean().optional()
     },
     annotations: {
       readOnlyHint: false,