@walkeros/mcp 4.7.1 → 4.7.2-next-1791147139360

package/README.md

@@ -129,7 +129,7 @@ The server registers 19 tools.
 | `walkeros://reference/flow-schema` | Flow configuration structure and connection rules               |
 | `walkeros://reference/event-model` | Event naming, properties, and auto-populated fields             |
 | `walkeros://reference/mapping`     | Mapping syntax: data, map, loop, set, condition, policy         |
-| `walkeros://reference/consent`     | The consent model at destination, rule, and field level         |
+| `walkeros://reference/consent`     | The consent model at destination and field level                |
 | `walkeros://reference/variables`   | Variable patterns: `$var`, `$env`, `$secret`, `$code`, `$store` |
 | `walkeros://reference/contract`    | Event schemas, wildcards, and inheritance                       |
 | `walkeros://reference/openapi`     | The live OpenAPI 3.1 document of the app this server talks to   |

package/dist/index.d.ts

@@ -828,8 +828,8 @@ declare class HttpToolClient implements ToolClient {
     /**
      * Observe session lifecycle over the CLI's authenticated boundary. The trio
      * routes through the same `apiFetch` as every other method here, so token
-     * resolution, base URL, and `ApiError` shaping (which `isAuthError` reads)
-     * stay identical to the rest of the client.
+     * resolution, base URL, and `ApiError` shaping (which
+     * `isAuthenticationError` reads) stay identical to the rest of the client.
      */
     startObserveSession(options: StartObserveSessionOptions): Promise<ObserveSessionResult>;
     getObserveSession(options: ObserveSessionRef): Promise<ObserveSessionResult>;

package/dist/index.js

@@ -282,16 +282,15 @@ import { z as z3 } from "zod";
 import { mcpResult as mcpResult2, mcpError as mcpError3 } from "@walkeros/core";
 
 // src/types.ts
-function isAuthError(error) {
+function isAuthenticationError(error) {
   if (!(error instanceof Error)) return false;
-  const msg = error.message.toLowerCase();
-  if (msg.includes("unauthorized") || msg.includes("forbidden") || msg.includes("invalid token") || msg.includes("token expired") || msg.includes("not authenticated")) {
-    return true;
-  }
-  const code = error.code;
-  if (!code) return false;
-  const upperCode = code.toUpperCase();
-  return upperCode === "UNAUTHORIZED" || upperCode === "FORBIDDEN" || upperCode === "401" || upperCode === "403" || upperCode.startsWith("AUTH_");
+  if ("status" in error && error.status === 401) return true;
+  return "code" in error && error.code === "UNAUTHORIZED";
+}
+function isAccessRefusal(error) {
+  if (!(error instanceof Error)) return false;
+  if ("status" in error && error.status === 403) return true;
+  return "code" in error && (error.code === "FORBIDDEN" || error.code === "INSUFFICIENT_SCOPE");
 }
 var AUTH_HINT = 'Are you logged in? Use auth(action: "status") to check.';
 
@@ -579,7 +578,10 @@ async function projectManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError3(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError3(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerProjectManageTool(server, client) {
@@ -1152,7 +1154,10 @@ async function flowManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError4(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError4(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerFlowManageTool(server, client) {
@@ -1414,7 +1419,10 @@ async function deployManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError5(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError5(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerDeployTool(server, client) {
@@ -1546,7 +1554,10 @@ async function secretManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError6(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError6(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerSecretManageTool(server, client) {
@@ -1661,7 +1672,10 @@ async function observeJourneysHandlerBody(client, input) {
       ]
     });
   } catch (error) {
-    return mcpError7(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError7(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerObserveJourneysTool(server, client) {
@@ -1681,6 +1695,28 @@ function registerObserveJourneysTool(server, client) {
 // src/tools/observe-session.ts
 import { z as z8 } from "zod";
 import { mcpResult as mcpResult7, mcpError as mcpError8 } from "@walkeros/core";
+
+// src/tools/feature-gate.ts
+var FEATURE_NOT_AVAILABLE = "FEATURE_NOT_AVAILABLE";
+function codeOf(error) {
+  if (!(error instanceof Error) || !("code" in error)) return void 0;
+  const code = error.code;
+  return typeof code === "string" ? code : void 0;
+}
+function isFeatureDenial(error) {
+  return codeOf(error) === FEATURE_NOT_AVAILABLE;
+}
+function featureDenialHint(feature) {
+  return `The "${feature}" feature is not enabled for this project. Tell the person that "${feature}" needs a plan or project entitlement that unlocks it, which is changed in the app, not through this tool.`;
+}
+function errorHint(error, feature, notFoundHint) {
+  if (isFeatureDenial(error)) return featureDenialHint(feature);
+  if (isAuthenticationError(error)) return AUTH_HINT;
+  if (codeOf(error) === "NOT_FOUND") return notFoundHint;
+  return void 0;
+}
+
+// src/tools/observe-session.ts
 var TITLE7 = "Observe Session";
 var DESCRIPTION7 = "Open, inspect, or end an Observe session: a time-boxed window on one flow that runtimes attach to as arms. A preview arm streams from a browser, a container arm runs server-side, and both feed ONE shared journeys feed. start opens the window (arms picks which runtimes attach), status reports per-arm state plus recordsReceived and expiresAt, stop ends the whole session including every arm. A flow has at most one session, so status/stop resolve it from flowId when sessionId is omitted. Read the events with observe_journeys; this tool never returns event data and never judges whether events are correct.";
 var HINT_SIMULATE_FIRST = "Simulate before preview: flow_simulate checks mapping with no browser.";
@@ -1838,7 +1874,8 @@ async function resolveSessionId(client, options) {
     });
     return result.sessionId;
   } catch (error) {
-    if (isAuthError(error)) throw error;
+    if (isAuthenticationError(error) || isAccessRefusal(error) || isFeatureDenial(error))
+      throw error;
     const detail = error instanceof Error ? error.message : String(error);
     throw new SessionResolutionError(
       `${SESSION_RESOLUTION_FAILED} (${detail})`,
@@ -1967,7 +2004,10 @@ async function observeSessionHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError8(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError8(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerObserveSessionTool(server, client) {
@@ -1987,28 +2027,6 @@ function registerObserveSessionTool(server, client) {
 // src/tools/hub-manage.ts
 import { z as z9 } from "zod";
 import { mcpResult as mcpResult8, mcpError as mcpError9 } from "@walkeros/core";
-
-// src/tools/feature-gate.ts
-var FEATURE_NOT_AVAILABLE = "FEATURE_NOT_AVAILABLE";
-function codeOf(error) {
-  if (!(error instanceof Error) || !("code" in error)) return void 0;
-  const code = error.code;
-  return typeof code === "string" ? code : void 0;
-}
-function isFeatureDenial(error) {
-  return codeOf(error) === FEATURE_NOT_AVAILABLE;
-}
-function featureDenialHint(feature) {
-  return `The "${feature}" feature is not enabled for this project. Tell the person that "${feature}" needs a plan or project entitlement that unlocks it, which is changed in the app, not through this tool.`;
-}
-function errorHint(error, feature, notFoundHint) {
-  if (isFeatureDenial(error)) return featureDenialHint(feature);
-  if (isAuthError(error)) return AUTH_HINT;
-  if (codeOf(error) === "NOT_FOUND") return notFoundHint;
-  return void 0;
-}
-
-// src/tools/hub-manage.ts
 var MAX_ANNOTATION_TEXT_LENGTH = 4e3;
 var MAX_ANCHOR_KEY_LENGTH = 255;
 var MAX_ANCHOR_LABEL_LENGTH = 255;
@@ -2881,7 +2899,7 @@ async function feedbackHandlerBody(client, input) {
     const isAnonymous = explicitAnonymous ?? anonymous ?? true;
     await client.submitFeedback(text, {
       anonymous: isAnonymous,
-      version: "4.7.1"
+      version: "4.7.2-next-1791147139360"
     });
     return mcpResult10({ ok: true });
   } catch (error) {
@@ -3673,7 +3691,7 @@ var NPM_SEARCH_URL = "https://registry.npmjs.org/-/v1/search";
 var JSDELIVR_BASE = "https://cdn.jsdelivr.net/npm";
 var WALKEROS_JSON_PATH = "dist/walkerOS.json";
 var CACHE_TTL = 5 * 60 * 1e3;
-var CLIENT_HEADER = "walkeros-mcp/4.7.1";
+var CLIENT_HEADER = "walkeros-mcp/4.7.2-next-1791147139360";
 function getPackageBaseUrl() {
   return process.env.WALKEROS_APP_URL || void 0;
 }
@@ -4091,7 +4109,10 @@ async function flowLoadHandlerBody(client, runtime, input) {
         }
       );
     } catch (error) {
-      return mcpError18(error, isAuthError(error) ? AUTH_HINT : void 0);
+      return mcpError18(
+        error,
+        isAuthenticationError(error) ? AUTH_HINT : void 0
+      );
     }
   }
   try {
@@ -4602,7 +4623,7 @@ function registerReferenceResources(server, client) {
     "consent",
     "walkeros://reference/consent",
     {
-      description: "JSON Schema for walkerOS consent: destination-level, rule-level, and field-level consent gating",
+      description: "JSON Schema for walkerOS consent: destination-level and field-level consent gating",
       mimeType: "application/json"
     },
     async () => ({
@@ -4844,7 +4865,7 @@ function registerSetupMappingPrompt(server) {
               "Policy and consent in mapping:",
               "- config.policy runs BEFORE mapping rules \u2014 use it to inject or redact fields on the event.",
               "- rule.policy runs after config.policy but before data transformation \u2014 use for event-specific pre-processing.",
-              "- config.consent gates ALL events to this destination. rule.consent gates specific event types.",
+              "- config.consent gates ALL events to this destination. rule.consent is not enforced yet.",
               "- Individual value configs support consent: { marketing: true } for field-level gating."
             ].join("\n")
           }
@@ -4959,10 +4980,10 @@ Every component in a flow is a **step**: sources capture events, transformers pr
 - **Mapping** transforms events using data/map/loop/set/condition rules. Same syntax on sources and destinations. Mapping rules use NESTED entity \u2192 action keying: event name "product add" maps to \`{ "product": { "add": Rule } }\`. Wildcards: \`{ "*": { "view": Rule } }\`.
 - **Contracts** define event schemas using entity-action keying. Can generate FROM mappings or scaffold mappings FROM contracts.
 - **Variables** ($var, $env, $secret, $code, $store) enable DRY, environment-aware config. \`$var.name\` is a reusable flow variable from the top-level \`variables\` block; whole-string refs preserve native type (object/array/scalar), inline interpolation requires a scalar, deep paths via \`$var.name.deep.path\`. \`$env.NAME[:default]\` is an environment variable resolved at bundle/deploy time (non-secret config only). \`$secret.NAME\` is a managed secret the deploy pipeline injects into the server runner at runtime; credentials, tokens, and private keys must use \`$secret\`, not \`$env\`.
-- **Consent** gates destinations, mapping rules, and individual fields. Privacy-first by design.
+- **Consent** gates destinations (\`config.consent\`) and individual fields (a value's \`consent\`). A mapping rule's \`consent\` is not enforced yet. Privacy-first by design.
 - **Routing** uses one grammar in every chain field (\`source.before\`, \`source.next\`, \`transformer.before\`, \`transformer.next\`, \`collector.next\`, \`destination.before\`, \`destination.next\`). A route is a string ID, a sequence (\`["a", "b"]\`), or a RouteConfig: \`{ match?, next }\`, \`{ match?, one: [...] }\` (first match wins), \`{ match?, many: [...] }\` (every match becomes its own copy of the event with its own id and finishes the rest of the path on its own, never merged), or \`{ match?, stop: true }\` (ends that copy). In a sequence, a member's own \`next\` runs right after it, then the sequence continues. \`match\` reads \`{ ingest, event }\` and each route is evaluated when the event reaches it. A \`stop\` in \`collector.next\` drops the event for every destination; per-destination filtering belongs in \`destination.before\`. An array of only route configs is an implicit \`one\`. The optional \`match\` field is omitted to mean always-match (no wildcard literal).
 - **Pass-through steps** are transformer entries with no \`code\` and no \`package\`. The runtime synthesizes the push for them automatically. Three flavors share this shape: a \`before\` / \`next\`-only step (named hop reusable across destinations), a \`cache\`-only step (dedup, rate-limit), and a \`mapping\`-only step (declarative event-to-event transform). A pass-through must declare at least one of \`before\`, \`next\`, \`cache\`, or \`mapping\`.
-- **Mapping at the transformer position** uses the same \`Mapping.Config\` shape as destinations, but the semantic is event-to-event: \`policy\` and per-rule \`policy\`, \`mapping[].name\` (rename), \`mapping[].ignore\` (drop from chain), \`consent\`, and \`include\` apply. Vendor-payload fields (\`data\`, \`silent\`, \`mapping[].data\`) are no-ops at this position.
+- **Mapping at the transformer position** uses the same \`Mapping.Config\` shape as destinations, but the semantic is event-to-event: \`policy\` and per-rule \`policy\`, \`mapping[].name\` (rename), \`mapping[].ignore\` (drop from chain), and \`include\` apply. \`consent\` is not enforced at this position. Vendor-payload fields (\`data\`, \`silent\`, \`mapping[].data\`) are no-ops at this position.
 - **Closed-schema rule on transformer entries:** known keys only. Operative keys are \`code\`, \`package\`, \`before\`, \`next\`, \`cache\`, \`mapping\`. Combined with structural keys (\`config\`, \`env\`, \`validate\`, \`disabled\`, \`id\`, etc.). Unknown top-level keys on a transformer step are errors (catches typos like \`dedup: {}\` instead of nested under \`cache\`). \`code\` + \`package\` together is a conflict.
 - **Cache** memoizes step output on a configured store. Set \`cache.stop: true\` to short-circuit the chain on HIT (sources default to stop-on-HIT); in a source chain or \`collector.next\` that halts the event for all destinations. Set \`cache.namespace\` to prefix keys; omit it to write keys directly. \`CacheRule.match\` is optional, omit for always-match.
 
@@ -5241,8 +5262,8 @@ var HttpToolClient = class {
   /**
    * Observe session lifecycle over the CLI's authenticated boundary. The trio
    * routes through the same `apiFetch` as every other method here, so token
-   * resolution, base URL, and `ApiError` shaping (which `isAuthError` reads)
-   * stay identical to the rest of the client.
+   * resolution, base URL, and `ApiError` shaping (which
+   * `isAuthenticationError` reads) stay identical to the rest of the client.
    */
   async startObserveSession(options) {
     return startObserveSession(options);
@@ -5333,7 +5354,7 @@ var HttpToolClient = class {
   async checkContract() {
     return compareContract({
       baseUrl: this.appBaseUrl(),
-      client: { type: "mcp", version: "4.7.1" }
+      client: { type: "mcp", version: "4.7.2-next-1791147139360" }
     });
   }
   /** The live public OpenAPI document of `appBaseUrl()`, without a credential. */