@walkeros/mcp 4.7.2-next-1791147139360 → 4.7.2

package/README.md

@@ -148,11 +148,11 @@ Read these before writing a configuration by hand.
 
 ## Environment variables
 
-| Variable              | Required | Default                   | Purpose                                                                   |
-| --------------------- | -------- | ------------------------- | ------------------------------------------------------------------------- |
-| `WALKEROS_TOKEN`      | No       | none                      | Automation token (`wos_pat_...`), an alternative to the `auth` tool login |
-| `WALKEROS_PROJECT_ID` | No       | none                      | Active project ID (`proj_...`)                                            |
-| `WALKEROS_APP_URL`    | No       | `https://app.walkeros.io` | Base URL override                                                         |
+| Variable              | Required | Default                   | Purpose                                                                    |
+| --------------------- | -------- | ------------------------- | -------------------------------------------------------------------------- |
+| `WALKEROS_TOKEN`      | No       | none                      | Automation token (`wos_pat_...`), an alternative to the `auth` tool login  |
+| `WALKEROS_PROJECT_ID` | No       | none                      | Project (`proj_...`) for calls without `projectId`, ahead of `set_default` |
+| `WALKEROS_APP_URL`    | No       | `https://app.walkeros.io` | Base URL override                                                          |
 
 ## Programmatic usage
 
@@ -193,6 +193,11 @@ AI SDK, call `createToolHandlers(client, version, runtime)` or import
 `TOOL_DEFINITIONS` and supply your own `ToolClient`. The stdio binary stays
 available as `@walkeros/mcp/stdio` and the `walkeros-mcp` bin entry.
 
+A `ToolClient` served inside a host that authenticates every request itself
+returns `'host'` from `credentialSource()`. The `auth` tool then reports the
+connection as logged in, answers `login` with "no login needed" and refuses
+`logout`, which never reaches the client: the connection ends in the host.
+
 A `ToolClient` may implement `checkContract()` and `openapiDocument()`. The
 `diagnostics` tool reports the first as its contract verdict, `unknown` when it
 is absent; the `walkeros://reference/openapi` resource serves the second.

package/dist/index.d.ts

@@ -370,6 +370,8 @@ interface ToolClient {
     }): Promise<unknown>;
     setDefaultProject(projectId: string): void;
     getDefaultProject(): string | null;
+    /** Every project's flows, as an array of `{ project: { id, name }, flows }`
+     *  groups whose `flows` are the rows `listFlows` answers for that project. */
     listAllFlows(options?: {
         sort?: string;
         order?: 'asc' | 'desc';
@@ -524,15 +526,24 @@ interface ToolClient {
         timeoutMs?: number;
     }): Promise<DeviceLoginResult>;
     whoami(): Promise<unknown>;
-    /** Where a credential would come from, without resolving or refreshing it. */
-    credentialSource(): 'env' | 'config' | null;
+    /**
+     * Where a credential would come from, without resolving or refreshing it:
+     * `'env'` (`WALKEROS_TOKEN`), `'config'` (a stored login), `'host'` (the
+     * door is served inside a host that authenticates every request itself, so
+     * this process holds no login to start or end), or null (none).
+     */
+    credentialSource(): 'env' | 'config' | 'host' | null;
     /**
      * Retire the session. Where the credential was issued to this process, that
      * means revoking it with the server before dropping it locally; a plane
-     * holding a bearer it did not issue reports nothing deleted.
+     * holding a bearer it did not issue reports nothing deleted. `envCleared`
+     * reports that the door also dropped a `WALKEROS_TOKEN` from its own process
+     * environment, which only a door that owns its process does. The `auth`
+     * tool never calls this on a `'host'` door.
      */
     logout(): Promise<{
         deleted: boolean;
+        envCleared?: boolean;
     }>;
     /**
      * The base URL of the walkerOS app this door talks to, without a trailing
@@ -762,7 +773,14 @@ declare class HttpToolClient implements ToolClient {
     deleteProject(options: {
         projectId?: string;
     }): Promise<unknown>;
+    /** Refuses while `WALKEROS_PROJECT_ID` names another project (see the CLI). */
     setDefaultProject(projectId: string): void;
+    /**
+     * `WALKEROS_PROJECT_ID`, then the CLI config's default, through the same
+     * resolution the CLI's own commands use. Read here, at the door that owns
+     * this process's environment, never in the shared tool layer: a hosted door
+     * runs in a server process whose variables are no person's selection.
+     */
     getDefaultProject(): string | null;
     listAllFlows(options?: {
         sort?: string;
@@ -906,8 +924,15 @@ declare class HttpToolClient implements ToolClient {
     }): Promise<DeviceLoginResult>;
     whoami(): Promise<unknown>;
     credentialSource(): 'env' | 'config' | null;
+    /**
+     * Revoke and drop the stored session, then clear a `WALKEROS_TOKEN` from
+     * this process: the local door owns its environment, so a later call in the
+     * same session no longer authenticates with it.
+     */
     logout(): Promise<{
         deleted: boolean;
+        superseded: boolean;
+        envCleared: boolean;
     }>;
     /**
      * The app this local door talks to: `WALKEROS_APP_URL`, then the CLI config

package/dist/index.js

@@ -97,6 +97,81 @@ function createHostedRuntime(client) {
 import { z as z2 } from "zod";
 import { mcpResult, mcpError as mcpError2 } from "@walkeros/core";
 
+// src/user-data.ts
+function wrapUserData(s) {
+  const alreadyWrapped = s.startsWith("<user_data>") && s.endsWith("</user_data>") && s.slice(11, -12).indexOf("</user_data>") === -1;
+  if (alreadyWrapped) return s;
+  const neutralised = s.replace(/<\/user_data>/g, "</user_data_>");
+  return `<user_data>${neutralised}</user_data>`;
+}
+var DISPLAY_TEXT_KEYS = /* @__PURE__ */ new Set([
+  "name",
+  "flowName",
+  "summary"
+]);
+function wrapListedRecord(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value))
+    return value;
+  const fields = Object.entries(value);
+  const out = {};
+  for (const [key, field] of fields) {
+    out[key] = DISPLAY_TEXT_KEYS.has(key) && typeof field === "string" ? wrapUserData(field) : field;
+  }
+  return out;
+}
+var STRUCTURAL_KEYS = /* @__PURE__ */ new Set([
+  "id",
+  "flowId",
+  "projectId",
+  "previewId",
+  "version",
+  "slug",
+  "kind",
+  "createdAt",
+  "updatedAt",
+  "deletedAt",
+  "package",
+  "platform"
+]);
+var keepStructural = (key) => STRUCTURAL_KEYS.has(key);
+function redactNestedStrings(value, opts) {
+  return walk(value, opts);
+}
+function redactDisplayNames(value) {
+  return walkDisplay(value);
+}
+function walkDisplay(value) {
+  if (Array.isArray(value)) return value.map(walkDisplay);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      if (DISPLAY_TEXT_KEYS.has(k) && typeof v === "string") {
+        out[k] = wrapUserData(v);
+      } else {
+        out[k] = walkDisplay(v);
+      }
+    }
+    return out;
+  }
+  return value;
+}
+function walk(value, opts) {
+  if (typeof value === "string") return wrapUserData(value);
+  if (Array.isArray(value)) return value.map((v) => walk(v, opts));
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      if (opts?.skip?.(k) && typeof v === "string") {
+        out[k] = v;
+      } else {
+        out[k] = walk(v, opts);
+      }
+    }
+    return out;
+  }
+  return value;
+}
+
 // src/tools/narrow.ts
 import { schemas } from "@walkeros/core/dev";
 function isRecord(value) {
@@ -150,6 +225,13 @@ function parseToolInput(shape, raw) {
 // src/tools/auth.ts
 var TITLE = "Authentication";
 var DESCRIPTION = "Manage walkerOS authentication. Check login status, log in via the device authorization grant, or log out. No terminal or browser required, the MCP client handles the authorization URL.";
+var HOST_LOGIN_MESSAGE = "This connection is already authenticated by the host; no login needed.";
+var HOST_LOGOUT_MESSAGE = "This connection is authorized by the host, so there is no session here to log out of. To end it, disconnect walkerOS in your MCP client, or revoke it in the walkerOS app under Account, Connected apps.";
+var STILL_AUTHENTICATED = {
+  config: "A newer session was stored while logging out and was kept. Call auth logout again to remove it.",
+  env: "WALKEROS_TOKEN is still set for this server process, so calls stay authenticated. Remove it from the MCP server configuration.",
+  host: HOST_LOGOUT_MESSAGE
+};
 var inputSchema = {
   action: z2.enum(["status", "login", "logout"]).describe("Authentication action to perform"),
   deviceCode: z2.string().optional().describe(
@@ -188,10 +270,20 @@ async function authHandlerBody(client, input) {
         const user = await client.whoami();
         return mcpResult({
           authenticated: true,
-          ...fieldsOf(user)
+          ...redactDisplayNames(fieldsOf(user))
         });
       }
       case "login": {
+        if (client.credentialSource() === "host") {
+          return mcpResult(
+            { authenticated: true, message: HOST_LOGIN_MESSAGE },
+            {
+              next: [
+                'Use auth with action "status" to see which account you are on'
+              ]
+            }
+          );
+        }
         if (deviceCode) {
           const poll = await client.pollForToken(deviceCode, {
             timeoutMs: 6e4
@@ -236,15 +328,23 @@ async function authHandlerBody(client, input) {
         });
       }
       case "logout": {
-        const { deleted } = await client.logout();
-        const hadEnvToken = typeof process.env.WALKEROS_TOKEN === "string" && process.env.WALKEROS_TOKEN.length > 0;
-        delete process.env.WALKEROS_TOKEN;
+        if (client.credentialSource() === "host") {
+          return mcpError2(new Error(HOST_LOGOUT_MESSAGE));
+        }
+        const { deleted, envCleared } = await client.logout();
+        const remaining = client.credentialSource();
+        if (remaining !== null) {
+          return mcpResult({
+            loggedOut: false,
+            message: STILL_AUTHENTICATED[remaining]
+          });
+        }
         let message;
-        if (deleted && hadEnvToken) {
+        if (deleted && envCleared) {
           message = "Logged out. Config removed and WALKEROS_TOKEN cleared from process environment.";
         } else if (deleted) {
           message = "Logged out and config removed.";
-        } else if (hadEnvToken) {
+        } else if (envCleared) {
           message = "No config found. WALKEROS_TOKEN cleared from process environment.";
         } else {
           message = "No config found, already logged out.";
@@ -294,67 +394,6 @@ function isAccessRefusal(error) {
 }
 var AUTH_HINT = 'Are you logged in? Use auth(action: "status") to check.';
 
-// src/user-data.ts
-function wrapUserData(s) {
-  const alreadyWrapped = s.startsWith("<user_data>") && s.endsWith("</user_data>") && s.slice(11, -12).indexOf("</user_data>") === -1;
-  if (alreadyWrapped) return s;
-  const neutralised = s.replace(/<\/user_data>/g, "</user_data_>");
-  return `<user_data>${neutralised}</user_data>`;
-}
-var STRUCTURAL_KEYS = /* @__PURE__ */ new Set([
-  "id",
-  "flowId",
-  "projectId",
-  "previewId",
-  "version",
-  "slug",
-  "kind",
-  "createdAt",
-  "updatedAt",
-  "deletedAt",
-  "package",
-  "platform"
-]);
-var keepStructural = (key) => STRUCTURAL_KEYS.has(key);
-function redactNestedStrings(value, opts) {
-  return walk(value, opts);
-}
-var DISPLAY_NAME_KEYS = /* @__PURE__ */ new Set(["name", "flowName"]);
-function redactDisplayNames(value) {
-  return walkDisplay(value);
-}
-function walkDisplay(value) {
-  if (Array.isArray(value)) return value.map(walkDisplay);
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [k, v] of Object.entries(value)) {
-      if (DISPLAY_NAME_KEYS.has(k) && typeof v === "string") {
-        out[k] = wrapUserData(v);
-      } else {
-        out[k] = walkDisplay(v);
-      }
-    }
-    return out;
-  }
-  return value;
-}
-function walk(value, opts) {
-  if (typeof value === "string") return wrapUserData(value);
-  if (Array.isArray(value)) return value.map((v) => walk(v, opts));
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [k, v] of Object.entries(value)) {
-      if (opts?.skip?.(k) && typeof v === "string") {
-        out[k] = v;
-      } else {
-        out[k] = walk(v, opts);
-      }
-    }
-    return out;
-  }
-  return value;
-}
-
 // src/action-requirements.ts
 function validateActionInput(toolName, action, input, map) {
   const rule = map[action];
@@ -474,10 +513,6 @@ var FRAME_MANAGE_REQUIREMENTS = {
 };
 
 // src/tools/project-manage.ts
-function wrapProjectName(project) {
-  const name = stringField(project, "name");
-  return isRecord(project) && name !== void 0 ? { ...project, name: wrapUserData(name) } : project;
-}
 var TITLE2 = "Project Management";
 var DESCRIPTION2 = "Manage walkerOS projects. List, create, update, delete projects, or set a default project for CLI operations.";
 var inputSchema2 = {
@@ -535,17 +570,19 @@ async function projectManageHandlerBody(client, input) {
             }
           );
         }
-        const safe = Array.isArray(projects) ? items.map(wrapProjectName) : { ...fieldsOf(projects), projects: items.map(wrapProjectName) };
-        return mcpResult2(safe);
+        return mcpResult2({
+          ...fieldsOf(projects),
+          projects: items.map(wrapListedRecord)
+        });
       }
       case "get": {
         const project = await client.getProject({ projectId });
-        return mcpResult2(wrapProjectName(project));
+        return mcpResult2(wrapListedRecord(project));
       }
       case "create": {
         assertParam(name, "name", "create");
         const created = await client.createProject({ name });
-        return mcpResult2(wrapProjectName(created), {
+        return mcpResult2(wrapListedRecord(created), {
           next: [
             'Use project_manage with action "set_default" to make this your active project'
           ]
@@ -554,7 +591,7 @@ async function projectManageHandlerBody(client, input) {
       case "update": {
         assertParam(name, "name", "update");
         const updated = await client.updateProject({ projectId, name });
-        return mcpResult2(wrapProjectName(updated));
+        return mcpResult2(wrapListedRecord(updated));
       }
       case "delete": {
         const deleted = await client.deleteProject({ projectId });
@@ -725,9 +762,20 @@ function flowPageUrl(client, projectId, flowId) {
   if (flowId === void 0) return void 0;
   return links.flow({ baseUrl: client.appBaseUrl(), projectId, flowId });
 }
-function safeSummary(flow) {
-  const name = stringField(flow, "name");
-  return isRecord(flow) && name !== void 0 ? { ...flow, name: wrapUserData(name) } : flow;
+function safeFlowPage(data) {
+  if (Array.isArray(data)) return { flows: data.map(wrapListedRecord) };
+  const flows = isRecord(data) ? data.flows : void 0;
+  return isRecord(data) && Array.isArray(flows) ? { ...data, flows: flows.map(wrapListedRecord) } : redactDisplayNames(data);
+}
+function safeFlowGroup(group) {
+  const safe = wrapListedRecord(group);
+  if (!isRecord(safe)) return safe;
+  const { project, flows } = safe;
+  return {
+    ...safe,
+    ...project !== void 0 && { project: wrapListedRecord(project) },
+    ...Array.isArray(flows) && { flows: flows.map(wrapListedRecord) }
+  };
 }
 function safeDetail(flow) {
   const fields = { ...fieldsOf(flow) };
@@ -912,9 +960,7 @@ async function flowManageHandlerBody(client, input) {
             cursor,
             limit
           });
-          const flows = isRecord(data2) ? data2.flows : void 0;
-          const safe2 = isRecord(data2) && Array.isArray(flows) ? { ...data2, flows: flows.map(safeSummary) } : data2;
-          return mcpResult3(safe2);
+          return mcpResult3(safeFlowPage(data2));
         }
         const data = await client.listAllFlows({
           sort,
@@ -923,7 +969,7 @@ async function flowManageHandlerBody(client, input) {
           cursor,
           limit
         });
-        const safe = Array.isArray(data) ? data.map(safeSummary) : data;
+        const safe = Array.isArray(data) ? data.map(safeFlowGroup) : redactDisplayNames(data);
         return mcpResult3(
           { projects: safe },
           {
@@ -1883,10 +1929,6 @@ async function resolveSessionId(client, options) {
     );
   }
 }
-function resolveProjectId(client, projectId) {
-  return projectId ?? client.getDefaultProject();
-}
-var NO_DEFAULT_PROJECT_ERROR2 = "No project ID given and no default project set. Pass projectId or set one with project_manage set_default.";
 function createObserveSessionToolSpec(client) {
   return {
     name: "observe_session",
@@ -1913,9 +1955,9 @@ async function observeSessionHandlerBody(client, input) {
   if (!flowId) {
     return mcpError8(new Error("flowId is required for observe_session."));
   }
-  const resolvedProjectId = resolveProjectId(client, projectId);
+  const resolvedProjectId = resolveDefaultProject(client, projectId);
   if (!resolvedProjectId) {
-    return mcpError8(new Error(NO_DEFAULT_PROJECT_ERROR2));
+    return mcpError8(new Error(NO_DEFAULT_PROJECT_ERROR));
   }
   try {
     switch (action) {
@@ -2899,7 +2941,7 @@ async function feedbackHandlerBody(client, input) {
     const isAnonymous = explicitAnonymous ?? anonymous ?? true;
     await client.submitFeedback(text, {
       anonymous: isAnonymous,
-      version: "4.7.2-next-1791147139360"
+      version: "4.7.2"
     });
     return mcpResult10({ ok: true });
   } catch (error) {
@@ -3691,7 +3733,7 @@ var NPM_SEARCH_URL = "https://registry.npmjs.org/-/v1/search";
 var JSDELIVR_BASE = "https://cdn.jsdelivr.net/npm";
 var WALKEROS_JSON_PATH = "dist/walkerOS.json";
 var CACHE_TTL = 5 * 60 * 1e3;
-var CLIENT_HEADER = "walkeros-mcp/4.7.2-next-1791147139360";
+var CLIENT_HEADER = "walkeros-mcp/4.7.2";
 function getPackageBaseUrl() {
   return process.env.WALKEROS_APP_URL || void 0;
 }
@@ -4983,7 +5025,7 @@ Every component in a flow is a **step**: sources capture events, transformers pr
 - **Consent** gates destinations (\`config.consent\`) and individual fields (a value's \`consent\`). A mapping rule's \`consent\` is not enforced yet. Privacy-first by design.
 - **Routing** uses one grammar in every chain field (\`source.before\`, \`source.next\`, \`transformer.before\`, \`transformer.next\`, \`collector.next\`, \`destination.before\`, \`destination.next\`). A route is a string ID, a sequence (\`["a", "b"]\`), or a RouteConfig: \`{ match?, next }\`, \`{ match?, one: [...] }\` (first match wins), \`{ match?, many: [...] }\` (every match becomes its own copy of the event with its own id and finishes the rest of the path on its own, never merged), or \`{ match?, stop: true }\` (ends that copy). In a sequence, a member's own \`next\` runs right after it, then the sequence continues. \`match\` reads \`{ ingest, event }\` and each route is evaluated when the event reaches it. A \`stop\` in \`collector.next\` drops the event for every destination; per-destination filtering belongs in \`destination.before\`. An array of only route configs is an implicit \`one\`. The optional \`match\` field is omitted to mean always-match (no wildcard literal).
 - **Pass-through steps** are transformer entries with no \`code\` and no \`package\`. The runtime synthesizes the push for them automatically. Three flavors share this shape: a \`before\` / \`next\`-only step (named hop reusable across destinations), a \`cache\`-only step (dedup, rate-limit), and a \`mapping\`-only step (declarative event-to-event transform). A pass-through must declare at least one of \`before\`, \`next\`, \`cache\`, or \`mapping\`.
-- **Mapping at the transformer position** uses the same \`Mapping.Config\` shape as destinations, but the semantic is event-to-event: \`policy\` and per-rule \`policy\`, \`mapping[].name\` (rename), \`mapping[].ignore\` (drop from chain), and \`include\` apply. \`consent\` is not enforced at this position. Vendor-payload fields (\`data\`, \`silent\`, \`mapping[].data\`) are no-ops at this position.
+- **Mapping at the transformer position** uses the same \`Mapping.Config\` shape as destinations, but the semantic is event-to-event: only config-level \`policy\` and a rule's \`condition\`, \`policy\`, \`name\` (rename) and \`ignore\` (drop from chain) apply. Everything that shapes a vendor payload or gates a destination is a no-op there: config-level \`consent\`, \`include\`, \`data\`, and a rule's \`consent\`, \`include\`, \`remove\`, \`batch\`, \`settings\`, \`extend\`, \`data\`, \`silent\`; validation warns about them (\`TRANSFORMER_MAPPING_NO_OP\`). A \`config.mapping\` wins over a step-level \`mapping\`.
 - **Closed-schema rule on transformer entries:** known keys only. Operative keys are \`code\`, \`package\`, \`before\`, \`next\`, \`cache\`, \`mapping\`. Combined with structural keys (\`config\`, \`env\`, \`validate\`, \`disabled\`, \`id\`, etc.). Unknown top-level keys on a transformer step are errors (catches typos like \`dedup: {}\` instead of nested under \`cache\`). \`code\` + \`package\` together is a conflict.
 - **Cache** memoizes step output on a configured store. Set \`cache.stop: true\` to short-circuit the chain on HIT (sources default to stop-on-HIT); in a source chain or \`collector.next\` that halts the event for all destinations. Set \`cache.namespace\` to prefix keys; omit it to write keys directly. \`CacheRule.match\` is optional, omit for always-match.
 
@@ -5125,7 +5167,7 @@ import {
   updateProject,
   deleteProject,
   setDefaultProject,
-  getDefaultProject,
+  resolveProjectId,
   listAllFlows,
   listFlows,
   getFlow,
@@ -5190,11 +5232,18 @@ var HttpToolClient = class {
   async deleteProject(options) {
     return deleteProject(options);
   }
+  /** Refuses while `WALKEROS_PROJECT_ID` names another project (see the CLI). */
   setDefaultProject(projectId) {
     setDefaultProject(projectId);
   }
+  /**
+   * `WALKEROS_PROJECT_ID`, then the CLI config's default, through the same
+   * resolution the CLI's own commands use. Read here, at the door that owns
+   * this process's environment, never in the shared tool layer: a hosted door
+   * runs in a server process whose variables are no person's selection.
+   */
   getDefaultProject() {
-    return getDefaultProject();
+    return resolveProjectId();
   }
   async listAllFlows(options) {
     return listAllFlows(options);
@@ -5319,8 +5368,16 @@ var HttpToolClient = class {
   credentialSource() {
     return credentialSource();
   }
+  /**
+   * Revoke and drop the stored session, then clear a `WALKEROS_TOKEN` from
+   * this process: the local door owns its environment, so a later call in the
+   * same session no longer authenticates with it.
+   */
   async logout() {
-    return logout();
+    const result = await logout();
+    const envCleared = Boolean(process.env.WALKEROS_TOKEN);
+    delete process.env.WALKEROS_TOKEN;
+    return { ...result, envCleared };
   }
   /**
    * The app this local door talks to: `WALKEROS_APP_URL`, then the CLI config
@@ -5354,7 +5411,7 @@ var HttpToolClient = class {
   async checkContract() {
     return compareContract({
       baseUrl: this.appBaseUrl(),
-      client: { type: "mcp", version: "4.7.2-next-1791147139360" }
+      client: { type: "mcp", version: "4.7.2" }
     });
   }
   /** The live public OpenAPI document of `appBaseUrl()`, without a credential. */