@walkeros/mcp 4.7.1 → 4.7.2-next-1791213015481

package/dist/index.js

@@ -97,6 +97,81 @@ function createHostedRuntime(client) {
 import { z as z2 } from "zod";
 import { mcpResult, mcpError as mcpError2 } from "@walkeros/core";
 
+// src/user-data.ts
+function wrapUserData(s) {
+  const alreadyWrapped = s.startsWith("<user_data>") && s.endsWith("</user_data>") && s.slice(11, -12).indexOf("</user_data>") === -1;
+  if (alreadyWrapped) return s;
+  const neutralised = s.replace(/<\/user_data>/g, "</user_data_>");
+  return `<user_data>${neutralised}</user_data>`;
+}
+var DISPLAY_TEXT_KEYS = /* @__PURE__ */ new Set([
+  "name",
+  "flowName",
+  "summary"
+]);
+function wrapListedRecord(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value))
+    return value;
+  const fields = Object.entries(value);
+  const out = {};
+  for (const [key, field] of fields) {
+    out[key] = DISPLAY_TEXT_KEYS.has(key) && typeof field === "string" ? wrapUserData(field) : field;
+  }
+  return out;
+}
+var STRUCTURAL_KEYS = /* @__PURE__ */ new Set([
+  "id",
+  "flowId",
+  "projectId",
+  "previewId",
+  "version",
+  "slug",
+  "kind",
+  "createdAt",
+  "updatedAt",
+  "deletedAt",
+  "package",
+  "platform"
+]);
+var keepStructural = (key) => STRUCTURAL_KEYS.has(key);
+function redactNestedStrings(value, opts) {
+  return walk(value, opts);
+}
+function redactDisplayNames(value) {
+  return walkDisplay(value);
+}
+function walkDisplay(value) {
+  if (Array.isArray(value)) return value.map(walkDisplay);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      if (DISPLAY_TEXT_KEYS.has(k) && typeof v === "string") {
+        out[k] = wrapUserData(v);
+      } else {
+        out[k] = walkDisplay(v);
+      }
+    }
+    return out;
+  }
+  return value;
+}
+function walk(value, opts) {
+  if (typeof value === "string") return wrapUserData(value);
+  if (Array.isArray(value)) return value.map((v) => walk(v, opts));
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      if (opts?.skip?.(k) && typeof v === "string") {
+        out[k] = v;
+      } else {
+        out[k] = walk(v, opts);
+      }
+    }
+    return out;
+  }
+  return value;
+}
+
 // src/tools/narrow.ts
 import { schemas } from "@walkeros/core/dev";
 function isRecord(value) {
@@ -150,6 +225,13 @@ function parseToolInput(shape, raw) {
 // src/tools/auth.ts
 var TITLE = "Authentication";
 var DESCRIPTION = "Manage walkerOS authentication. Check login status, log in via the device authorization grant, or log out. No terminal or browser required, the MCP client handles the authorization URL.";
+var HOST_LOGIN_MESSAGE = "This connection is already authenticated by the host; no login needed.";
+var HOST_LOGOUT_MESSAGE = "This connection is authorized by the host, so there is no session here to log out of. To end it, disconnect walkerOS in your MCP client, or revoke it in the walkerOS app under Account, Connected apps.";
+var STILL_AUTHENTICATED = {
+  config: "A newer session was stored while logging out and was kept. Call auth logout again to remove it.",
+  env: "WALKEROS_TOKEN is still set for this server process, so calls stay authenticated. Remove it from the MCP server configuration.",
+  host: HOST_LOGOUT_MESSAGE
+};
 var inputSchema = {
   action: z2.enum(["status", "login", "logout"]).describe("Authentication action to perform"),
   deviceCode: z2.string().optional().describe(
@@ -188,10 +270,20 @@ async function authHandlerBody(client, input) {
         const user = await client.whoami();
         return mcpResult({
           authenticated: true,
-          ...fieldsOf(user)
+          ...redactDisplayNames(fieldsOf(user))
         });
       }
       case "login": {
+        if (client.credentialSource() === "host") {
+          return mcpResult(
+            { authenticated: true, message: HOST_LOGIN_MESSAGE },
+            {
+              next: [
+                'Use auth with action "status" to see which account you are on'
+              ]
+            }
+          );
+        }
         if (deviceCode) {
           const poll = await client.pollForToken(deviceCode, {
             timeoutMs: 6e4
@@ -236,15 +328,23 @@ async function authHandlerBody(client, input) {
         });
       }
       case "logout": {
-        const { deleted } = await client.logout();
-        const hadEnvToken = typeof process.env.WALKEROS_TOKEN === "string" && process.env.WALKEROS_TOKEN.length > 0;
-        delete process.env.WALKEROS_TOKEN;
+        if (client.credentialSource() === "host") {
+          return mcpError2(new Error(HOST_LOGOUT_MESSAGE));
+        }
+        const { deleted, envCleared } = await client.logout();
+        const remaining = client.credentialSource();
+        if (remaining !== null) {
+          return mcpResult({
+            loggedOut: false,
+            message: STILL_AUTHENTICATED[remaining]
+          });
+        }
         let message;
-        if (deleted && hadEnvToken) {
+        if (deleted && envCleared) {
           message = "Logged out. Config removed and WALKEROS_TOKEN cleared from process environment.";
         } else if (deleted) {
           message = "Logged out and config removed.";
-        } else if (hadEnvToken) {
+        } else if (envCleared) {
           message = "No config found. WALKEROS_TOKEN cleared from process environment.";
         } else {
           message = "No config found, already logged out.";
@@ -282,79 +382,17 @@ import { z as z3 } from "zod";
 import { mcpResult as mcpResult2, mcpError as mcpError3 } from "@walkeros/core";
 
 // src/types.ts
-function isAuthError(error) {
+function isAuthenticationError(error) {
   if (!(error instanceof Error)) return false;
-  const msg = error.message.toLowerCase();
-  if (msg.includes("unauthorized") || msg.includes("forbidden") || msg.includes("invalid token") || msg.includes("token expired") || msg.includes("not authenticated")) {
-    return true;
-  }
-  const code = error.code;
-  if (!code) return false;
-  const upperCode = code.toUpperCase();
-  return upperCode === "UNAUTHORIZED" || upperCode === "FORBIDDEN" || upperCode === "401" || upperCode === "403" || upperCode.startsWith("AUTH_");
+  if ("status" in error && error.status === 401) return true;
+  return "code" in error && error.code === "UNAUTHORIZED";
 }
-var AUTH_HINT = 'Are you logged in? Use auth(action: "status") to check.';
-
-// src/user-data.ts
-function wrapUserData(s) {
-  const alreadyWrapped = s.startsWith("<user_data>") && s.endsWith("</user_data>") && s.slice(11, -12).indexOf("</user_data>") === -1;
-  if (alreadyWrapped) return s;
-  const neutralised = s.replace(/<\/user_data>/g, "</user_data_>");
-  return `<user_data>${neutralised}</user_data>`;
-}
-var STRUCTURAL_KEYS = /* @__PURE__ */ new Set([
-  "id",
-  "flowId",
-  "projectId",
-  "previewId",
-  "version",
-  "slug",
-  "kind",
-  "createdAt",
-  "updatedAt",
-  "deletedAt",
-  "package",
-  "platform"
-]);
-var keepStructural = (key) => STRUCTURAL_KEYS.has(key);
-function redactNestedStrings(value, opts) {
-  return walk(value, opts);
-}
-var DISPLAY_NAME_KEYS = /* @__PURE__ */ new Set(["name", "flowName"]);
-function redactDisplayNames(value) {
-  return walkDisplay(value);
-}
-function walkDisplay(value) {
-  if (Array.isArray(value)) return value.map(walkDisplay);
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [k, v] of Object.entries(value)) {
-      if (DISPLAY_NAME_KEYS.has(k) && typeof v === "string") {
-        out[k] = wrapUserData(v);
-      } else {
-        out[k] = walkDisplay(v);
-      }
-    }
-    return out;
-  }
-  return value;
-}
-function walk(value, opts) {
-  if (typeof value === "string") return wrapUserData(value);
-  if (Array.isArray(value)) return value.map((v) => walk(v, opts));
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [k, v] of Object.entries(value)) {
-      if (opts?.skip?.(k) && typeof v === "string") {
-        out[k] = v;
-      } else {
-        out[k] = walk(v, opts);
-      }
-    }
-    return out;
-  }
-  return value;
+function isAccessRefusal(error) {
+  if (!(error instanceof Error)) return false;
+  if ("status" in error && error.status === 403) return true;
+  return "code" in error && (error.code === "FORBIDDEN" || error.code === "INSUFFICIENT_SCOPE");
 }
+var AUTH_HINT = 'Are you logged in? Use auth(action: "status") to check.';
 
 // src/action-requirements.ts
 function validateActionInput(toolName, action, input, map) {
@@ -475,10 +513,6 @@ var FRAME_MANAGE_REQUIREMENTS = {
 };
 
 // src/tools/project-manage.ts
-function wrapProjectName(project) {
-  const name = stringField(project, "name");
-  return isRecord(project) && name !== void 0 ? { ...project, name: wrapUserData(name) } : project;
-}
 var TITLE2 = "Project Management";
 var DESCRIPTION2 = "Manage walkerOS projects. List, create, update, delete projects, or set a default project for CLI operations.";
 var inputSchema2 = {
@@ -536,17 +570,19 @@ async function projectManageHandlerBody(client, input) {
             }
           );
         }
-        const safe = Array.isArray(projects) ? items.map(wrapProjectName) : { ...fieldsOf(projects), projects: items.map(wrapProjectName) };
-        return mcpResult2(safe);
+        return mcpResult2({
+          ...fieldsOf(projects),
+          projects: items.map(wrapListedRecord)
+        });
       }
       case "get": {
         const project = await client.getProject({ projectId });
-        return mcpResult2(wrapProjectName(project));
+        return mcpResult2(wrapListedRecord(project));
       }
       case "create": {
         assertParam(name, "name", "create");
         const created = await client.createProject({ name });
-        return mcpResult2(wrapProjectName(created), {
+        return mcpResult2(wrapListedRecord(created), {
           next: [
             'Use project_manage with action "set_default" to make this your active project'
           ]
@@ -555,7 +591,7 @@ async function projectManageHandlerBody(client, input) {
       case "update": {
         assertParam(name, "name", "update");
         const updated = await client.updateProject({ projectId, name });
-        return mcpResult2(wrapProjectName(updated));
+        return mcpResult2(wrapListedRecord(updated));
       }
       case "delete": {
         const deleted = await client.deleteProject({ projectId });
@@ -579,7 +615,10 @@ async function projectManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError3(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError3(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerProjectManageTool(server, client) {
@@ -723,9 +762,20 @@ function flowPageUrl(client, projectId, flowId) {
   if (flowId === void 0) return void 0;
   return links.flow({ baseUrl: client.appBaseUrl(), projectId, flowId });
 }
-function safeSummary(flow) {
-  const name = stringField(flow, "name");
-  return isRecord(flow) && name !== void 0 ? { ...flow, name: wrapUserData(name) } : flow;
+function safeFlowPage(data) {
+  if (Array.isArray(data)) return { flows: data.map(wrapListedRecord) };
+  const flows = isRecord(data) ? data.flows : void 0;
+  return isRecord(data) && Array.isArray(flows) ? { ...data, flows: flows.map(wrapListedRecord) } : redactDisplayNames(data);
+}
+function safeFlowGroup(group) {
+  const safe = wrapListedRecord(group);
+  if (!isRecord(safe)) return safe;
+  const { project, flows } = safe;
+  return {
+    ...safe,
+    ...project !== void 0 && { project: wrapListedRecord(project) },
+    ...Array.isArray(flows) && { flows: flows.map(wrapListedRecord) }
+  };
 }
 function safeDetail(flow) {
   const fields = { ...fieldsOf(flow) };
@@ -910,9 +960,7 @@ async function flowManageHandlerBody(client, input) {
             cursor,
             limit
           });
-          const flows = isRecord(data2) ? data2.flows : void 0;
-          const safe2 = isRecord(data2) && Array.isArray(flows) ? { ...data2, flows: flows.map(safeSummary) } : data2;
-          return mcpResult3(safe2);
+          return mcpResult3(safeFlowPage(data2));
         }
         const data = await client.listAllFlows({
           sort,
@@ -921,7 +969,7 @@ async function flowManageHandlerBody(client, input) {
           cursor,
           limit
         });
-        const safe = Array.isArray(data) ? data.map(safeSummary) : data;
+        const safe = Array.isArray(data) ? data.map(safeFlowGroup) : redactDisplayNames(data);
         return mcpResult3(
           { projects: safe },
           {
@@ -1152,7 +1200,10 @@ async function flowManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError4(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError4(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerFlowManageTool(server, client) {
@@ -1414,7 +1465,10 @@ async function deployManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError5(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError5(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerDeployTool(server, client) {
@@ -1546,7 +1600,10 @@ async function secretManageHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError6(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError6(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerSecretManageTool(server, client) {
@@ -1661,7 +1718,10 @@ async function observeJourneysHandlerBody(client, input) {
       ]
     });
   } catch (error) {
-    return mcpError7(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError7(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerObserveJourneysTool(server, client) {
@@ -1681,6 +1741,28 @@ function registerObserveJourneysTool(server, client) {
 // src/tools/observe-session.ts
 import { z as z8 } from "zod";
 import { mcpResult as mcpResult7, mcpError as mcpError8 } from "@walkeros/core";
+
+// src/tools/feature-gate.ts
+var FEATURE_NOT_AVAILABLE = "FEATURE_NOT_AVAILABLE";
+function codeOf(error) {
+  if (!(error instanceof Error) || !("code" in error)) return void 0;
+  const code = error.code;
+  return typeof code === "string" ? code : void 0;
+}
+function isFeatureDenial(error) {
+  return codeOf(error) === FEATURE_NOT_AVAILABLE;
+}
+function featureDenialHint(feature) {
+  return `The "${feature}" feature is not enabled for this project. Tell the person that "${feature}" needs a plan or project entitlement that unlocks it, which is changed in the app, not through this tool.`;
+}
+function errorHint(error, feature, notFoundHint) {
+  if (isFeatureDenial(error)) return featureDenialHint(feature);
+  if (isAuthenticationError(error)) return AUTH_HINT;
+  if (codeOf(error) === "NOT_FOUND") return notFoundHint;
+  return void 0;
+}
+
+// src/tools/observe-session.ts
 var TITLE7 = "Observe Session";
 var DESCRIPTION7 = "Open, inspect, or end an Observe session: a time-boxed window on one flow that runtimes attach to as arms. A preview arm streams from a browser, a container arm runs server-side, and both feed ONE shared journeys feed. start opens the window (arms picks which runtimes attach), status reports per-arm state plus recordsReceived and expiresAt, stop ends the whole session including every arm. A flow has at most one session, so status/stop resolve it from flowId when sessionId is omitted. Read the events with observe_journeys; this tool never returns event data and never judges whether events are correct.";
 var HINT_SIMULATE_FIRST = "Simulate before preview: flow_simulate checks mapping with no browser.";
@@ -1838,7 +1920,8 @@ async function resolveSessionId(client, options) {
     });
     return result.sessionId;
   } catch (error) {
-    if (isAuthError(error)) throw error;
+    if (isAuthenticationError(error) || isAccessRefusal(error) || isFeatureDenial(error))
+      throw error;
     const detail = error instanceof Error ? error.message : String(error);
     throw new SessionResolutionError(
       `${SESSION_RESOLUTION_FAILED} (${detail})`,
@@ -1846,10 +1929,6 @@ async function resolveSessionId(client, options) {
     );
   }
 }
-function resolveProjectId(client, projectId) {
-  return projectId ?? client.getDefaultProject();
-}
-var NO_DEFAULT_PROJECT_ERROR2 = "No project ID given and no default project set. Pass projectId or set one with project_manage set_default.";
 function createObserveSessionToolSpec(client) {
   return {
     name: "observe_session",
@@ -1876,9 +1955,9 @@ async function observeSessionHandlerBody(client, input) {
   if (!flowId) {
     return mcpError8(new Error("flowId is required for observe_session."));
   }
-  const resolvedProjectId = resolveProjectId(client, projectId);
+  const resolvedProjectId = resolveDefaultProject(client, projectId);
   if (!resolvedProjectId) {
-    return mcpError8(new Error(NO_DEFAULT_PROJECT_ERROR2));
+    return mcpError8(new Error(NO_DEFAULT_PROJECT_ERROR));
   }
   try {
     switch (action) {
@@ -1967,7 +2046,10 @@ async function observeSessionHandlerBody(client, input) {
         );
     }
   } catch (error) {
-    return mcpError8(error, isAuthError(error) ? AUTH_HINT : void 0);
+    return mcpError8(
+      error,
+      isAuthenticationError(error) ? AUTH_HINT : void 0
+    );
   }
 }
 function registerObserveSessionTool(server, client) {
@@ -1987,28 +2069,6 @@ function registerObserveSessionTool(server, client) {
 // src/tools/hub-manage.ts
 import { z as z9 } from "zod";
 import { mcpResult as mcpResult8, mcpError as mcpError9 } from "@walkeros/core";
-
-// src/tools/feature-gate.ts
-var FEATURE_NOT_AVAILABLE = "FEATURE_NOT_AVAILABLE";
-function codeOf(error) {
-  if (!(error instanceof Error) || !("code" in error)) return void 0;
-  const code = error.code;
-  return typeof code === "string" ? code : void 0;
-}
-function isFeatureDenial(error) {
-  return codeOf(error) === FEATURE_NOT_AVAILABLE;
-}
-function featureDenialHint(feature) {
-  return `The "${feature}" feature is not enabled for this project. Tell the person that "${feature}" needs a plan or project entitlement that unlocks it, which is changed in the app, not through this tool.`;
-}
-function errorHint(error, feature, notFoundHint) {
-  if (isFeatureDenial(error)) return featureDenialHint(feature);
-  if (isAuthError(error)) return AUTH_HINT;
-  if (codeOf(error) === "NOT_FOUND") return notFoundHint;
-  return void 0;
-}
-
-// src/tools/hub-manage.ts
 var MAX_ANNOTATION_TEXT_LENGTH = 4e3;
 var MAX_ANCHOR_KEY_LENGTH = 255;
 var MAX_ANCHOR_LABEL_LENGTH = 255;
@@ -2881,7 +2941,7 @@ async function feedbackHandlerBody(client, input) {
     const isAnonymous = explicitAnonymous ?? anonymous ?? true;
     await client.submitFeedback(text, {
       anonymous: isAnonymous,
-      version: "4.7.1"
+      version: "4.7.2-next-1791213015481"
     });
     return mcpResult10({ ok: true });
   } catch (error) {
@@ -3673,7 +3733,7 @@ var NPM_SEARCH_URL = "https://registry.npmjs.org/-/v1/search";
 var JSDELIVR_BASE = "https://cdn.jsdelivr.net/npm";
 var WALKEROS_JSON_PATH = "dist/walkerOS.json";
 var CACHE_TTL = 5 * 60 * 1e3;
-var CLIENT_HEADER = "walkeros-mcp/4.7.1";
+var CLIENT_HEADER = "walkeros-mcp/4.7.2-next-1791213015481";
 function getPackageBaseUrl() {
   return process.env.WALKEROS_APP_URL || void 0;
 }
@@ -4091,7 +4151,10 @@ async function flowLoadHandlerBody(client, runtime, input) {
         }
       );
     } catch (error) {
-      return mcpError18(error, isAuthError(error) ? AUTH_HINT : void 0);
+      return mcpError18(
+        error,
+        isAuthenticationError(error) ? AUTH_HINT : void 0
+      );
     }
   }
   try {
@@ -4602,7 +4665,7 @@ function registerReferenceResources(server, client) {
     "consent",
     "walkeros://reference/consent",
     {
-      description: "JSON Schema for walkerOS consent: destination-level, rule-level, and field-level consent gating",
+      description: "JSON Schema for walkerOS consent: destination-level and field-level consent gating",
       mimeType: "application/json"
     },
     async () => ({
@@ -4844,7 +4907,7 @@ function registerSetupMappingPrompt(server) {
               "Policy and consent in mapping:",
               "- config.policy runs BEFORE mapping rules \u2014 use it to inject or redact fields on the event.",
               "- rule.policy runs after config.policy but before data transformation \u2014 use for event-specific pre-processing.",
-              "- config.consent gates ALL events to this destination. rule.consent gates specific event types.",
+              "- config.consent gates ALL events to this destination. rule.consent is not enforced yet.",
               "- Individual value configs support consent: { marketing: true } for field-level gating."
             ].join("\n")
           }
@@ -4959,10 +5022,10 @@ Every component in a flow is a **step**: sources capture events, transformers pr
 - **Mapping** transforms events using data/map/loop/set/condition rules. Same syntax on sources and destinations. Mapping rules use NESTED entity \u2192 action keying: event name "product add" maps to \`{ "product": { "add": Rule } }\`. Wildcards: \`{ "*": { "view": Rule } }\`.
 - **Contracts** define event schemas using entity-action keying. Can generate FROM mappings or scaffold mappings FROM contracts.
 - **Variables** ($var, $env, $secret, $code, $store) enable DRY, environment-aware config. \`$var.name\` is a reusable flow variable from the top-level \`variables\` block; whole-string refs preserve native type (object/array/scalar), inline interpolation requires a scalar, deep paths via \`$var.name.deep.path\`. \`$env.NAME[:default]\` is an environment variable resolved at bundle/deploy time (non-secret config only). \`$secret.NAME\` is a managed secret the deploy pipeline injects into the server runner at runtime; credentials, tokens, and private keys must use \`$secret\`, not \`$env\`.
-- **Consent** gates destinations, mapping rules, and individual fields. Privacy-first by design.
+- **Consent** gates destinations (\`config.consent\`) and individual fields (a value's \`consent\`). A mapping rule's \`consent\` is not enforced yet. Privacy-first by design.
 - **Routing** uses one grammar in every chain field (\`source.before\`, \`source.next\`, \`transformer.before\`, \`transformer.next\`, \`collector.next\`, \`destination.before\`, \`destination.next\`). A route is a string ID, a sequence (\`["a", "b"]\`), or a RouteConfig: \`{ match?, next }\`, \`{ match?, one: [...] }\` (first match wins), \`{ match?, many: [...] }\` (every match becomes its own copy of the event with its own id and finishes the rest of the path on its own, never merged), or \`{ match?, stop: true }\` (ends that copy). In a sequence, a member's own \`next\` runs right after it, then the sequence continues. \`match\` reads \`{ ingest, event }\` and each route is evaluated when the event reaches it. A \`stop\` in \`collector.next\` drops the event for every destination; per-destination filtering belongs in \`destination.before\`. An array of only route configs is an implicit \`one\`. The optional \`match\` field is omitted to mean always-match (no wildcard literal).
 - **Pass-through steps** are transformer entries with no \`code\` and no \`package\`. The runtime synthesizes the push for them automatically. Three flavors share this shape: a \`before\` / \`next\`-only step (named hop reusable across destinations), a \`cache\`-only step (dedup, rate-limit), and a \`mapping\`-only step (declarative event-to-event transform). A pass-through must declare at least one of \`before\`, \`next\`, \`cache\`, or \`mapping\`.
-- **Mapping at the transformer position** uses the same \`Mapping.Config\` shape as destinations, but the semantic is event-to-event: \`policy\` and per-rule \`policy\`, \`mapping[].name\` (rename), \`mapping[].ignore\` (drop from chain), \`consent\`, and \`include\` apply. Vendor-payload fields (\`data\`, \`silent\`, \`mapping[].data\`) are no-ops at this position.
+- **Mapping at the transformer position** uses the same \`Mapping.Config\` shape as destinations, but the semantic is event-to-event: only config-level \`policy\` and a rule's \`condition\`, \`policy\`, \`name\` (rename) and \`ignore\` (drop from chain) apply. Everything that shapes a vendor payload or gates a destination is a no-op there: config-level \`consent\`, \`include\`, \`data\`, and a rule's \`consent\`, \`include\`, \`remove\`, \`batch\`, \`settings\`, \`extend\`, \`data\`, \`silent\`; validation warns about them (\`TRANSFORMER_MAPPING_NO_OP\`). A \`config.mapping\` wins over a step-level \`mapping\`.
 - **Closed-schema rule on transformer entries:** known keys only. Operative keys are \`code\`, \`package\`, \`before\`, \`next\`, \`cache\`, \`mapping\`. Combined with structural keys (\`config\`, \`env\`, \`validate\`, \`disabled\`, \`id\`, etc.). Unknown top-level keys on a transformer step are errors (catches typos like \`dedup: {}\` instead of nested under \`cache\`). \`code\` + \`package\` together is a conflict.
 - **Cache** memoizes step output on a configured store. Set \`cache.stop: true\` to short-circuit the chain on HIT (sources default to stop-on-HIT); in a source chain or \`collector.next\` that halts the event for all destinations. Set \`cache.namespace\` to prefix keys; omit it to write keys directly. \`CacheRule.match\` is optional, omit for always-match.
 
@@ -5104,7 +5167,7 @@ import {
   updateProject,
   deleteProject,
   setDefaultProject,
-  getDefaultProject,
+  resolveProjectId,
   listAllFlows,
   listFlows,
   getFlow,
@@ -5169,11 +5232,18 @@ var HttpToolClient = class {
   async deleteProject(options) {
     return deleteProject(options);
   }
+  /** Refuses while `WALKEROS_PROJECT_ID` names another project (see the CLI). */
   setDefaultProject(projectId) {
     setDefaultProject(projectId);
   }
+  /**
+   * `WALKEROS_PROJECT_ID`, then the CLI config's default, through the same
+   * resolution the CLI's own commands use. Read here, at the door that owns
+   * this process's environment, never in the shared tool layer: a hosted door
+   * runs in a server process whose variables are no person's selection.
+   */
   getDefaultProject() {
-    return getDefaultProject();
+    return resolveProjectId();
   }
   async listAllFlows(options) {
     return listAllFlows(options);
@@ -5241,8 +5311,8 @@ var HttpToolClient = class {
   /**
    * Observe session lifecycle over the CLI's authenticated boundary. The trio
    * routes through the same `apiFetch` as every other method here, so token
-   * resolution, base URL, and `ApiError` shaping (which `isAuthError` reads)
-   * stay identical to the rest of the client.
+   * resolution, base URL, and `ApiError` shaping (which
+   * `isAuthenticationError` reads) stay identical to the rest of the client.
    */
   async startObserveSession(options) {
     return startObserveSession(options);
@@ -5298,8 +5368,16 @@ var HttpToolClient = class {
   credentialSource() {
     return credentialSource();
   }
+  /**
+   * Revoke and drop the stored session, then clear a `WALKEROS_TOKEN` from
+   * this process: the local door owns its environment, so a later call in the
+   * same session no longer authenticates with it.
+   */
   async logout() {
-    return logout();
+    const result = await logout();
+    const envCleared = Boolean(process.env.WALKEROS_TOKEN);
+    delete process.env.WALKEROS_TOKEN;
+    return { ...result, envCleared };
   }
   /**
    * The app this local door talks to: `WALKEROS_APP_URL`, then the CLI config
@@ -5333,7 +5411,7 @@ var HttpToolClient = class {
   async checkContract() {
     return compareContract({
       baseUrl: this.appBaseUrl(),
-      client: { type: "mcp", version: "4.7.1" }
+      client: { type: "mcp", version: "4.7.2-next-1791213015481" }
     });
   }
   /** The live public OpenAPI document of `appBaseUrl()`, without a credential. */