@walkeros/mcp 4.8.0 → 4.8.1-next-1792019907609

package/dist/index.d.ts

@@ -1,732 +1,11 @@
-import { ListFlowsOptions, ListPreviewsOptions, GetPreviewOptions, CreatePreviewOptions, DeletePreviewOptions, ListSecretsOptions, CreateSecretOptions, UpdateSecretOptions, DeleteSecretOptions, DeployOptions, ListDeploymentsOptions, DeviceAuthorization, DeviceLoginResult, ContractComparison, FeedbackOptions, BundleStats, PushResult } from '@walkeros/cli';
-import { Journey, JourneyGap, JourneyUnattributed, Flow, Ingest, WalkerOS, Simulation } from '@walkeros/core';
-import { ZodRawShape, z } from 'zod';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { WebStandardStreamableHTTPServerTransportOptions } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
-
-/**
- * Mint a fresh, origin-bound activation grant for an existing preview. All
- * fields are opaque identifiers/strings — no host-internal shape leaks into
- * this public interface. `origins` are bare `https://host[:port]` values the
- * grant may activate on; the returned `activationUrl` targets the first.
- */
-interface RegrantPreviewOptions {
-    projectId: string;
-    flowId: string;
-    previewId: string;
-    origins: string[];
-    /** Observe session id — binds the minted grant to that session so
-     *  forwarded events reach its container. Opaque identifier. */
-    sessionId?: string;
-}
-/**
- * The assembled cross-runtime journeys for a flow's active Observe session,
- * mirroring the app's flowId-keyed REST envelope. `sessionId` is null when the
- * flow has no active session (the empty result an agent gets when the flow is
- * not currently being observed). `journeys`/`gaps`/`unattributed` are the pure
- * `assembleJourneys` output; typed against core's `Journey`/`JourneyGap`/
- * `JourneyUnattributed` since `@walkeros/mcp` already depends on
- * `@walkeros/core`.
- */
-interface JourneysResult {
-    sessionId: string | null;
-    flowId: string;
-    assembledAt: string;
-    journeys: Journey[];
-    gaps: JourneyGap[];
-    /**
-     * Records that belonged to an event run but could not be attributed to any
-     * event, per platform. Absent when there are none, and session-level like
-     * `gaps`: `traceId`/`limit` narrow `journeys` only.
-     */
-    unattributed?: JourneyUnattributed[];
-}
-/** Observation verbosity a session's container is provisioned with. */
-type ObserveLevel = 'off' | 'standard' | 'trace';
-/**
- * The session's web part. Present once a preview arm is attached; null while
- * the window has no web half. `credential` and the server `env` trio are
- * connect secrets: the tool layer reads the part for arm presence and never
- * surfaces them.
- */
-interface ObserveSessionWebPart {
-    activationUrl: string | null;
-    credential: string;
-    previewEnabled: boolean;
-    bundleUrl: string;
-    /** Observer both arms post to, in the field name a `config.observe` declares. */
-    url?: string;
-    /** Project binding the collector cross-checks an arriving credential against. */
-    binding?: string;
-}
-/** The session's container part. Present once a container arm is provisioned. */
-interface ObserveSessionServerPart {
-    endpoint: string | null;
-    env: {
-        WALKEROS_OBSERVER_URL: string;
-        WALKEROS_DEPLOYMENT_ID: string;
-        WALKEROS_INGEST_TOKEN: string;
-    };
-}
-/**
- * One Observe session: a time-boxed window on a flow that runtimes attach to
- * as arms. `observedFlowName`/`serverFlowName` name the settings each arm runs;
- * `web`/`server` being non-null is what makes an arm attached. Mirrors the
- * app's session envelope.
- */
-interface ObserveSessionResult {
-    id: string;
-    projectId: string;
-    flowId: string;
-    status: string;
-    errorMessage: string | null;
-    /** The flow config the session was opened on, as the app snapshotted it. */
-    configSnapshot: Record<string, unknown>;
-    observedFlowName: string | null;
-    serverFlowName: string | null;
-    /** Legacy mirror of `server.endpoint`, kept for published readers; read `server.endpoint`. */
-    serverEndpoint: string | null;
-    web: ObserveSessionWebPart | null;
-    server: ObserveSessionServerPart | null;
-    expiresAt: string;
-    recordsReceived: number;
-    /** Id of the user who opened the session. */
-    createdBy: string;
-    createdAt: string;
-}
-/**
- * Start a session on one flow. `settingsName` is the single knob the window is
- * opened on: the flow's topology under that name decides which arms the app
- * provisions, so the tool layer translates its arms input into this one field.
- */
-interface StartObserveSessionOptions {
-    projectId: string;
-    flowId: string;
-    settingsName: string;
-    origins?: string[];
-    level?: ObserveLevel;
-    replace?: boolean;
-}
-interface ObserveSessionRef {
-    projectId: string;
-    flowId: string;
-    sessionId: string;
-}
-type ThreadAnchorType = 'step' | 'entity_action' | 'release' | 'contract' | 'tag';
-type StoredAnchorType = ThreadAnchorType | 'page';
-type ThreadStatus = 'open' | 'resolved';
-type ReleaseRef = {
-    versionId: string;
-} | {
-    versionNumber: number;
-};
-interface ReleaseRationaleSummaryWire {
-    hasHumanText: boolean;
-    hasGeneratedSummary: boolean;
-    firstLine: string | null;
-}
-interface FlowReleaseWire {
-    id: string;
-    deploymentId: string;
-    deploymentSlug: string | null;
-    deploymentType: string | null;
-    versionNumber: number;
-    flowVersionId: string | null;
-    flowVersionNumber: number | null;
-    status: string;
-    source: string;
-    errorCode: string | null;
-    createdAt: string;
-    createdBy: string | null;
-    createdByLabel: string | null;
-    /** Present only on a read that asked for rationale. */
-    rationale?: ReleaseRationaleSummaryWire | null;
-}
-interface ReleaseIndexWire {
-    releases: FlowReleaseWire[];
-    total: number;
-    limit: number;
-    offset: number;
-}
-interface VersionAnnotationWire {
-    versionId: string;
-    humanText: string | null;
-    generatedSummary: string | null;
-    author: string;
-    createdAt: string;
-    updatedAt: string;
-}
-interface ReleaseDiffWire {
-    prevVersionId: string;
-    prevVersionNumber: number;
-    text: string;
-    contentIdentical: boolean;
-}
-interface ReleaseDetailWire {
-    versionId: string;
-    versionNumber: number;
-    contentHash: string | null;
-    createdAt: string;
-    createdBy: string;
-    rationale: VersionAnnotationWire | null;
-    diff: ReleaseDiffWire | null;
-}
-interface StepHistoryEntryWire {
-    versionId: string;
-    versionNumber: number;
-    createdAt: string;
-    flow: string | null;
-    change: 'added' | 'removed' | 'changed';
-    humanText: string | null;
-    generatedSummary: string | null;
-}
-interface StepHistoryWire {
-    step: string;
-    flow: string | null;
-    entries: StepHistoryEntryWire[];
-    scanned: number;
-    truncated: boolean;
-    entriesTruncated: boolean;
-    knownSteps?: string[];
-}
-interface HubMessageWire {
-    id: string;
-    author: string;
-    text: string;
-    createdAt: string;
-}
-interface HubThreadWire {
-    id: string;
-    anchorType: ThreadAnchorType;
-    anchorKey: string;
-    anchorLabel: string;
-    status: ThreadStatus;
-    resolvedByVersionId: string | null;
-    resolvedByVersionNumber: number | null;
-    resolvedAt: string | null;
-    resolvedBy: string | null;
-    createdBy: string;
-    createdAt: string;
-    updatedAt: string;
-    messageCount: number;
-    messages?: HubMessageWire[];
-    hasMoreMessages?: boolean;
-}
-interface ListThreadsWire {
-    threads: HubThreadWire[];
-    hasMoreThreads: boolean;
-}
-type KnowledgeValidityWire = {
-    tier: 'release';
-    versionId: string;
-    versionNumber: number;
-    promoted: boolean;
-} | {
-    tier: 'draft';
-    versionId?: string;
-} | {
-    tier: 'none';
-};
-interface KnowledgeAuthorWire {
-    kind: 'user' | 'preview' | 'agent';
-    id: string | null;
-    label: string;
-}
-interface KnowledgeMessageWire {
-    id: string;
-    author: string;
-    authorLabel: string;
-    text: string;
-    createdAt: string;
-    clientMessageId: string | null;
-}
-interface KnowledgeEntryBaseWire {
-    id: string;
-    anchorKey: string;
-    anchorLabel: string;
-    frameId: string | null;
-    frameName: string | null;
-    flowId: string | null;
-    subjectKey: string | null;
-    /** Opaque DOM anchor plus a fractional point. Never surfaced by a tool. */
-    spatial: {
-        at: {
-            x: number;
-            y: number;
-        };
-        element?: Record<string, unknown>;
-    } | null;
-    validity: KnowledgeValidityWire;
-    freshness: 'current' | 'subject_changed' | 'unknown';
-    author: KnowledgeAuthorWire;
-    source: 'tag_mode' | 'hub' | 'mcp';
-    updatedAt: string;
-}
-interface KnowledgeThreadWire extends KnowledgeEntryBaseWire {
-    kind: 'thread';
-    anchorType: StoredAnchorType;
-    status: ThreadStatus;
-    createdAt: string;
-    messageCount: number;
-    messages?: KnowledgeMessageWire[];
-    hasMoreMessages?: boolean;
-}
-interface KnowledgeDescriptionWire extends KnowledgeEntryBaseWire {
-    kind: 'description';
-    anchorType: 'tag' | 'page';
-    body: string;
-}
-type KnowledgeEntryWire = KnowledgeThreadWire | KnowledgeDescriptionWire;
-interface ListKnowledgeWire {
-    entries: KnowledgeEntryWire[];
-    hasMoreEntries: boolean;
-}
-interface PlanSizeWire {
-    width: number;
-    height: number;
-}
-interface PlanRectWire {
-    x: number;
-    y: number;
-    w: number;
-    h: number;
-}
-interface FramePlacementWire {
-    id: string;
-    rect: PlanRectWire;
-    selector?: string;
-    anchor?: Record<string, unknown>;
-}
-type FrameSourceWire = {
-    kind: 'page';
-    key: string;
-    url: string;
-} | {
-    kind: 'figma';
-    fileKey: string;
-    nodeId: string;
-} | {
-    kind: 'image';
-};
-interface FrameScreenshotWire {
-    assetId: string;
-    capturedAt: string;
-    size: PlanSizeWire;
-    dpr: number;
-    capturedRect: PlanRectWire;
-}
-interface FrameLeanWire {
-    id: string;
-    projectId: string;
-    name: string;
-    parentId: string | null;
-    placements: FramePlacementWire[];
-    size: PlanSizeWire;
-    extends: string | null;
-    source: FrameSourceWire | null;
-    origin: 'drawn' | 'imported' | 'observed';
-    flowId: string;
-    screenshot: FrameScreenshotWire | null;
-    version: number;
-    createdAt: string;
-    updatedAt: string;
-    createdBy: string;
-    updatedBy: string;
-    deletedAt: string | null;
-}
-interface FrameWire extends FrameLeanWire {
-    marks: Record<string, unknown>;
-}
-interface FrameListWire {
-    frames: FrameWire[];
-}
-interface FrameLeanListWire {
-    frames: FrameLeanWire[];
-}
-/**
- * Transport-agnostic client for network-reach MCP tools. The stdio build
- * plugs in HttpToolClient (talks to the walkerOS app over HTTPS via the
- * CLI's programmatic API). In-process hosts (e.g. the app itself) can plug
- * in a direct client that calls database helpers without HTTP overhead.
- */
-interface ToolClient {
-    listProjects(options?: {
-        cursor?: string;
-        limit?: number;
-    }): Promise<unknown>;
-    getProject(options: {
-        projectId?: string;
-    }): Promise<unknown>;
-    createProject(options: {
-        name: string;
-    }): Promise<unknown>;
-    updateProject(options: {
-        projectId?: string;
-        name: string;
-    }): Promise<unknown>;
-    deleteProject(options: {
-        projectId?: string;
-    }): Promise<unknown>;
-    setDefaultProject(projectId: string): void;
-    getDefaultProject(): string | null;
-    /** Every project's flows, as an array of `{ project: { id, name }, flows }`
-     *  groups whose `flows` are the rows `listFlows` answers for that project. */
-    listAllFlows(options?: {
-        sort?: string;
-        order?: 'asc' | 'desc';
-        includeDeleted?: boolean;
-        cursor?: string;
-        limit?: number;
-    }): Promise<unknown>;
-    listFlows(options: ListFlowsOptions): Promise<unknown>;
-    getFlow(options: {
-        flowId: string;
-        projectId?: string;
-        fields?: string[];
-    }): Promise<unknown>;
-    createFlow(options: {
-        name: string;
-        content: Record<string, unknown>;
-        projectId?: string;
-    }): Promise<unknown>;
-    updateFlow(options: {
-        flowId: string;
-        projectId?: string;
-        name?: string;
-        content?: Record<string, unknown>;
-        mergePatch?: boolean;
-    }): Promise<unknown>;
-    deleteFlow(options: {
-        flowId: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    duplicateFlow(options: {
-        flowId: string;
-        name?: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    listPreviews(options: ListPreviewsOptions): Promise<unknown>;
-    getPreview(options: GetPreviewOptions): Promise<unknown>;
-    createPreview(options: CreatePreviewOptions & {
-        siteUrl?: string;
-    }): Promise<unknown>;
-    deletePreview(options: DeletePreviewOptions): Promise<unknown>;
-    /**
-     * Mint a fresh, origin-bound activation grant for an existing preview.
-     * OPTIONAL: clients that cannot mint grants may omit it, and the
-     * flow_manage handler guards on its presence before calling. Clients may
-     * return their raw API response; the flow_manage handler whitelists the
-     * fields it surfaces (never the ingest token or project id).
-     */
-    regrantPreview?(options: RegrantPreviewOptions): Promise<unknown>;
-    listSecrets(options: ListSecretsOptions): Promise<unknown>;
-    createSecret(options: CreateSecretOptions): Promise<unknown>;
-    updateSecret(options: UpdateSecretOptions): Promise<unknown>;
-    deleteSecret(options: DeleteSecretOptions): Promise<unknown>;
-    deploy(options: DeployOptions): Promise<unknown>;
-    listDeployments(options: ListDeploymentsOptions): Promise<unknown>;
-    getDeploymentBySlug(options: {
-        slug: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    deleteDeployment(options: {
-        slug: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    listJourneys(options: {
-        flowId: string;
-        projectId?: string;
-        traceId?: string;
-        limit?: number;
-    }): Promise<JourneysResult>;
-    /**
-     * Observe session lifecycle. OPTIONAL as a trio: a client that cannot reach
-     * the session endpoints omits all three, and the `observe_session` handler
-     * guards on presence before calling. Reads stay with `listJourneys`, which
-     * doubles as the flow-to-live-window resolver (`observe_sessions.flow_id` is
-     * UNIQUE, so its `sessionId` IS the flow's live window).
-     */
-    startObserveSession?(options: StartObserveSessionOptions): Promise<ObserveSessionResult>;
-    getObserveSession?(options: ObserveSessionRef): Promise<ObserveSessionResult>;
-    endObserveSession?(options: ObserveSessionRef): Promise<void>;
-    listReleases(options: {
-        projectId: string;
-        flowId: string;
-        limit?: number;
-        offset?: number;
-    }): Promise<ReleaseIndexWire>;
-    getRelease(options: {
-        projectId: string;
-        flowId: string;
-        ref: ReleaseRef;
-    }): Promise<ReleaseDetailWire>;
-    listStepHistory(options: {
-        projectId: string;
-        flowId: string;
-        step: string;
-        flow?: string;
-        limit?: number;
-    }): Promise<StepHistoryWire>;
-    setReleaseRationale(options: {
-        projectId: string;
-        flowId: string;
-        versionId: string;
-        text: string;
-    }): Promise<VersionAnnotationWire>;
-    listThreads(options: {
-        projectId: string;
-        flowId: string;
-        anchorType?: ThreadAnchorType;
-        anchorKey?: string;
-        status?: ThreadStatus;
-        includeMessages: boolean;
-        limit?: number;
-    }): Promise<ListThreadsWire>;
-    createThread(options: {
-        projectId: string;
-        flowId: string;
-        anchorType: ThreadAnchorType;
-        anchorKey: string;
-        anchorLabel?: string;
-        text: string;
-    }): Promise<HubThreadWire>;
-    addThreadMessage(options: {
-        projectId: string;
-        flowId: string;
-        threadId: string;
-        text: string;
-    }): Promise<HubThreadWire>;
-    listKnowledge(options: {
-        projectId: string;
-        pageKey?: string;
-        frameId?: string;
-        markId?: string;
-        includeMessages: boolean;
-        limit?: number;
-    }): Promise<ListKnowledgeWire>;
-    listFrames(options: {
-        projectId: string;
-        flowId: string;
-    }): Promise<FrameLeanListWire>;
-    listPageFrames(options: {
-        projectId: string;
-        flowId: string;
-        pageKey: string;
-    }): Promise<FrameListWire>;
-    getFrame(options: {
-        projectId: string;
-        flowId: string;
-        frameId: string;
-    }): Promise<FrameWire>;
-    requestDeviceCode(): Promise<DeviceAuthorization>;
-    /**
-     * Finish an authorization already under way. Returns a status only: the
-     * session it establishes is stored by the implementation, so a tool never
-     * holds token material.
-     */
-    pollForToken(deviceCode: string, options?: {
-        timeoutMs?: number;
-    }): Promise<DeviceLoginResult>;
-    whoami(): Promise<unknown>;
-    /**
-     * Where a credential would come from, without resolving or refreshing it:
-     * `'env'` (`WALKEROS_TOKEN`), `'config'` (a stored login), `'host'` (the
-     * door is served inside a host that authenticates every request itself, so
-     * this process holds no login to start or end), or null (none).
-     */
-    credentialSource(): 'env' | 'config' | 'host' | null;
-    /**
-     * Retire the session. Where the credential was issued to this process, that
-     * means revoking it with the server before dropping it locally; a plane
-     * holding a bearer it did not issue reports nothing deleted. `envCleared`
-     * reports that the door also dropped a `WALKEROS_TOKEN` from its own process
-     * environment, which only a door that owns its process does. The `auth`
-     * tool never calls this on a `'host'` door.
-     */
-    logout(): Promise<{
-        deleted: boolean;
-        envCleared?: boolean;
-    }>;
-    /**
-     * The base URL of the walkerOS app this door talks to, without a trailing
-     * slash. REQUIRED: a tool that puts a link in front of a person has to name
-     * the backend it actually reached, and a door that cannot name itself would
-     * emit links into a chat transcript that point somewhere else. Making it
-     * required means the compiler, not a runtime surprise, catches that.
-     *
-     * Each door answers from its own world: the CLI-backed client resolves the
-     * user's machine (`WALKEROS_APP_URL`, then the CLI config file, then the
-     * built-in default), while an in-process host returns the URL it is served
-     * on. Never derive this from the local CLI inside a tool.
-     */
-    appBaseUrl(): string;
-    checkHealth?(): Promise<{
-        reachable: boolean;
-        status?: string;
-        version?: string;
-        error?: string;
-    }>;
-    /**
-     * The API contract verdict for this door against the app it talks to
-     * (`appBaseUrl()`). A door that calls the app over HTTP compares per
-     * operation; a door served inside the app answers `in-process`. Optional:
-     * without it, diagnostics reports `unknown`.
-     */
-    checkContract?(): Promise<ContractComparison>;
-    /**
-     * The live OpenAPI document of the app this door talks to, served as the
-     * `walkeros://reference/openapi` resource. Rejects when it cannot be read.
-     * Optional: without it, the resource states that it is unavailable.
-     */
-    openapiDocument?(): Promise<unknown>;
-    submitFeedback(text: string, options?: FeedbackOptions): Promise<void>;
-    getFeedbackPreference(): boolean | undefined;
-    setFeedbackPreference(anonymous: boolean): void;
-}
-
-interface ToolAnnotations {
-    readOnlyHint: boolean;
-    destructiveHint: boolean;
-    idempotentHint: boolean;
-    openWorldHint: boolean;
-}
-interface ToolDefinition {
-    name: string;
-    title: string;
-    description: string;
-    inputSchema: ZodRawShape;
-    annotations: ToolAnnotations;
-}
-/**
- * Declarative registry mirroring the inputSchema + annotations of every tool
- * registered in `createWalkerOSMcpServer`. Use this to bridge tools into
- * non-MCP runtimes (e.g., Vercel AI SDK adapters) without booting an
- * `McpServer`. Tool handlers are not included here, they require a
- * `ToolClient`, which the caller provides.
- */
-declare const TOOL_DEFINITIONS: readonly ToolDefinition[];
-
-/**
- * A full tool specification: metadata + executable handler.
- *
- * Produced by each `create<Name>ToolSpec(...)` factory and by the aggregate
- * `createToolHandlers(client)`. Consumers without an `McpServer` (e.g., the
- * walkerOS app's chat route wrapping tools as Vercel AI SDK tools) use this
- * directly; the server factory uses it to call `McpServer.registerTool`.
- */
-interface ToolSpec {
-    name: string;
-    title: string;
-    description: string;
-    inputSchema: ZodRawShape;
-    annotations: ToolAnnotations;
-    handler: (input: unknown) => Promise<unknown>;
-}
-
-/**
- * The capability seam between the flow tools and the machine they run on.
- *
- * Every file read, URL fetch, bundle, simulation and push a tool performs goes
- * through a `FlowRuntime` and nothing else, so the runtime alone decides what
- * the process it lives in may do:
- *
- * - `createLocalRuntime()` keeps every capability. It is for the user's own
- *   machine (stdio, the developer CLI), where the user is responsible for what
- *   runs there.
- * - `createHostedRuntime(client)` is least privilege for a shared, network
- *   reached process: it loads inline JSON and saved flow ids only, refuses
- *   local paths and URLs, and has no `bundle`, `simulate` or `push` at all.
- *
- * A tool whose operation the runtime does not provide refuses with a hint that
- * names only out-of-process routes.
- */
-interface FlowRuntime {
-    /**
-     * Resolve a config input to parsed JSON. Local: a file path, an http(s) URL
-     * or inline JSON. Hosted: inline JSON or a saved `flow_`/`cfg_` id; a local
-     * path or URL is refused with a `RuntimeRefusal`.
-     */
-    load(input: string): Promise<unknown>;
-    /**
-     * The directory local `path` packages of a loaded input resolve against:
-     * the input file's directory. Absent on a runtime without a filesystem,
-     * where such packages stay a reported skip.
-     */
-    baseDir?(input: string): string | undefined;
-    /** Compile a flow. Absent on a runtime that must not build in its process. */
-    bundle?(input: string, opts: BundleOptions): Promise<BundleStats | void>;
-    /** Build and run one step of a flow. Absent where that must not happen. */
-    simulate?(input: string, opts: SimulateOptions): Promise<Simulation.Result>;
-    /**
-     * The values of the secrets a flow config references (`$secret.NAME`),
-     * masked wherever a simulation or push result egresses. Read by the tools
-     * only on a runtime without `loadRun`; a read that fails stops the run.
-     */
-    knownSecrets?(input: string): Promise<string[]>;
-    /**
-     * Read a push or simulate input once: the config and the values of the
-     * secrets it references. A prebuilt bundle yields no config. A read that
-     * fails rejects. Absent with `simulate` and `push`.
-     */
-    loadRun?(input: string): Promise<LoadedRun>;
-    /** Build and run a flow against real destinations. Absent where forbidden. */
-    push?(input: string, event: Record<string, unknown>, opts: PushOptions): Promise<PushResult>;
-}
-interface BundleOptions {
-    flowName?: string;
-    stats?: boolean;
-    output?: string;
-}
-type SimulateStepType = 'source' | 'transformer' | 'collector' | 'destination';
-interface SimulateOptions {
-    stepType: SimulateStepType;
-    stepId: string;
-    event: unknown;
-    flow?: string;
-    /** The config from `loadRun`: the runtime does not read the input again. */
-    config?: Flow.Json;
-    /**
-     * Transformer, collector and destination steps: pipeline context the step
-     * reads via `ctx.ingest`. Source steps ignore it.
-     */
-    ingest?: Omit<Ingest, '_meta'>;
-    /**
-     * Collector state the step starts from. `consent` applies to every step
-     * (the collector's starting consent); `user`, `globals` and `timing` to
-     * collector steps only.
-     */
-    state?: {
-        consent?: WalkerOS.Consent;
-        user?: WalkerOS.User;
-        globals?: WalkerOS.Properties;
-        timing?: number;
-    };
-    /**
-     * Destination steps only: run this collector command with `event` as its
-     * data instead of pushing it (a step example with `command`).
-     */
-    command?: Flow.StepCommand;
-}
-/** A push or simulate input as read once by `loadRun`. */
-interface LoadedRun {
-    config?: Flow.Json;
-    knownSecrets: string[];
-}
-interface PushOptions {
-    flow?: string;
-    platform?: 'web' | 'server';
-    /** The config from `loadRun`: the runtime does not read the input again. */
-    config?: Flow.Json;
-}
-/**
- * Thrown by a runtime when it refuses an input on principle rather than on a
- * fault. Carries the hint a tool should surface next to the message.
- */
-declare class RuntimeRefusal extends Error {
-    readonly hint: string;
-    constructor(message: string, hint: string);
-}
+import { FlowRuntime, LocalToolSpecs, ToolSpec } from './specs.js';
+export { BundleOptions, KNOWLEDGE_RESOURCES, LoadedRun, PROMPTS, PromptMessage, PromptSpec, PushOptions, RedactOptions, ResourceContent, ResourceListEntry, ResourceSpec, RuntimeRefusal, STRUCTURAL_KEYS, SimulateOptions, SimulateStepType, StaticResourceSpec, TemplateResourceSpec, ToolAnnotations, createLocalToolSpecs, keepStructural, redactDisplayNames, redactNestedStrings, wrapListedRecord, wrapUserData } from './specs.js';
+import '@walkeros/core';
+import '@walkeros/cli';
+import 'zod';
+import '@modelcontextprotocol/sdk/types.js';
 
 interface Logger {
     debug?(message: string, meta?: Record<string, unknown>): void;
@@ -735,261 +14,24 @@ interface Logger {
     error?(message: string, meta?: Record<string, unknown>): void;
 }
 interface CreateServerOptions {
-    client: ToolClient;
-    logger?: Logger;
+    /** Required: the runtime decides what the process may read and run. */
+    runtime: FlowRuntime;
     version?: string;
-    catalogBaseUrl?: string;
-    /**
-     * The capability runtime the flow tools read, build and run flows through.
-     * Omitted, the HOSTED runtime is used, the safe default for any shared or
-     * network-reached process: inline JSON and saved flow ids only, no local
-     * files, no URLs, no in-process bundle, simulate or push. Pass
-     * `createLocalRuntime()` only on the user's own machine (stdio, the CLI) to
-     * keep local file, URL and execution behaviour. See `FlowRuntime`.
-     */
-    runtime?: FlowRuntime;
+    logger?: Logger;
 }
 declare function createWalkerOSMcpServer(opts: CreateServerOptions): McpServer;
 
 /**
- * Default ToolClient implementation backed by @walkeros/cli. Every method
- * delegates to the CLI's programmatic API, which in turn talks to the
- * walkerOS app over HTTPS via openapi-fetch. Token resolution and the
- * base URL come from the CLI's config file and environment
- * (WALKEROS_TOKEN, WALKEROS_APP_URL), so no constructor args are required.
+ * The eight tools of the local server, keyed by name, over one runtime: the
+ * five shared specs plus the three that run caller code. A type alias, not an
+ * interface, so it is assignable to Record<string, ToolSpec>.
  */
-declare class HttpToolClient implements ToolClient {
-    listProjects(options?: {
-        cursor?: string;
-        limit?: number;
-    }): Promise<unknown>;
-    getProject(options: {
-        projectId?: string;
-    }): Promise<unknown>;
-    createProject(options: {
-        name: string;
-    }): Promise<unknown>;
-    updateProject(options: {
-        projectId?: string;
-        name: string;
-    }): Promise<unknown>;
-    deleteProject(options: {
-        projectId?: string;
-    }): Promise<unknown>;
-    /** Refuses while `WALKEROS_PROJECT_ID` names another project (see the CLI). */
-    setDefaultProject(projectId: string): void;
-    /**
-     * `WALKEROS_PROJECT_ID`, then the CLI config's default, through the same
-     * resolution the CLI's own commands use. Read here, at the door that owns
-     * this process's environment, never in the shared tool layer: a hosted door
-     * runs in a server process whose variables are no person's selection.
-     */
-    getDefaultProject(): string | null;
-    listAllFlows(options?: {
-        sort?: string;
-        order?: 'asc' | 'desc';
-        includeDeleted?: boolean;
-        cursor?: string;
-        limit?: number;
-    }): Promise<unknown>;
-    listFlows(options: ListFlowsOptions): Promise<unknown>;
-    getFlow(options: {
-        flowId: string;
-        projectId?: string;
-        fields?: string[];
-    }): Promise<unknown>;
-    createFlow(options: {
-        name: string;
-        content: Record<string, unknown>;
-        projectId?: string;
-    }): Promise<unknown>;
-    updateFlow(options: {
-        flowId: string;
-        projectId?: string;
-        name?: string;
-        content?: Record<string, unknown>;
-        mergePatch?: boolean;
-    }): Promise<unknown>;
-    deleteFlow(options: {
-        flowId: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    duplicateFlow(options: {
-        flowId: string;
-        name?: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    listPreviews(options: ListPreviewsOptions): Promise<unknown>;
-    getPreview(options: GetPreviewOptions): Promise<unknown>;
-    createPreview(options: CreatePreviewOptions & {
-        siteUrl?: string;
-    }): Promise<unknown>;
-    deletePreview(options: DeletePreviewOptions): Promise<unknown>;
-    regrantPreview(options: RegrantPreviewOptions): Promise<unknown>;
-    listSecrets(options: ListSecretsOptions): Promise<unknown>;
-    createSecret(options: CreateSecretOptions): Promise<unknown>;
-    updateSecret(options: UpdateSecretOptions): Promise<unknown>;
-    deleteSecret(options: DeleteSecretOptions): Promise<unknown>;
-    deploy(options: DeployOptions): Promise<unknown>;
-    listDeployments(options: ListDeploymentsOptions): Promise<unknown>;
-    getDeploymentBySlug(options: {
-        slug: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    deleteDeployment(options: {
-        slug: string;
-        projectId?: string;
-    }): Promise<unknown>;
-    listJourneys(options: {
-        flowId: string;
-        projectId?: string;
-        traceId?: string;
-        limit?: number;
-    }): Promise<JourneysResult>;
-    /**
-     * Observe session lifecycle over the CLI's authenticated boundary. The trio
-     * routes through the same `apiFetch` as every other method here, so token
-     * resolution, base URL, and `ApiError` shaping (which
-     * `isAuthenticationError` reads) stay identical to the rest of the client.
-     */
-    startObserveSession(options: StartObserveSessionOptions): Promise<ObserveSessionResult>;
-    getObserveSession(options: ObserveSessionRef): Promise<ObserveSessionResult>;
-    endObserveSession(options: ObserveSessionRef): Promise<void>;
-    listReleases(options: {
-        projectId: string;
-        flowId: string;
-        limit?: number;
-        offset?: number;
-    }): Promise<ReleaseIndexWire>;
-    getRelease(options: {
-        projectId: string;
-        flowId: string;
-        ref: ReleaseRef;
-    }): Promise<ReleaseDetailWire>;
-    listStepHistory(options: {
-        projectId: string;
-        flowId: string;
-        step: string;
-        flow?: string;
-        limit?: number;
-    }): Promise<StepHistoryWire>;
-    setReleaseRationale(options: {
-        projectId: string;
-        flowId: string;
-        versionId: string;
-        text: string;
-    }): Promise<VersionAnnotationWire>;
-    listThreads(options: {
-        projectId: string;
-        flowId: string;
-        anchorType?: ThreadAnchorType;
-        anchorKey?: string;
-        status?: ThreadStatus;
-        includeMessages: boolean;
-        limit?: number;
-    }): Promise<ListThreadsWire>;
-    createThread(options: {
-        projectId: string;
-        flowId: string;
-        anchorType: ThreadAnchorType;
-        anchorKey: string;
-        anchorLabel?: string;
-        text: string;
-    }): Promise<HubThreadWire>;
-    addThreadMessage(options: {
-        projectId: string;
-        flowId: string;
-        threadId: string;
-        text: string;
-    }): Promise<HubThreadWire>;
-    listKnowledge(options: {
-        projectId: string;
-        pageKey?: string;
-        frameId?: string;
-        markId?: string;
-        includeMessages: boolean;
-        limit?: number;
-    }): Promise<ListKnowledgeWire>;
-    listFrames(options: {
-        projectId: string;
-        flowId: string;
-    }): Promise<FrameLeanListWire>;
-    listPageFrames(options: {
-        projectId: string;
-        flowId: string;
-        pageKey: string;
-    }): Promise<FrameListWire>;
-    getFrame(options: {
-        projectId: string;
-        flowId: string;
-        frameId: string;
-    }): Promise<FrameWire>;
-    requestDeviceCode(): Promise<DeviceAuthorization>;
-    pollForToken(deviceCode: string, options?: {
-        timeoutMs?: number;
-    }): Promise<DeviceLoginResult>;
-    whoami(): Promise<unknown>;
-    credentialSource(): 'env' | 'config' | null;
-    /**
-     * Revoke and drop the stored session, then clear a `WALKEROS_TOKEN` from
-     * this process: the local door owns its environment, so a later call in the
-     * same session no longer authenticates with it.
-     */
-    logout(): Promise<{
-        deleted: boolean;
-        superseded: boolean;
-        envCleared: boolean;
-    }>;
-    /**
-     * The app this local door talks to: `WALKEROS_APP_URL`, then the CLI config
-     * file, then the built-in default, which is exactly the chain every other
-     * method here already resolves its base URL through. Normalized, because
-     * neither the env var nor the config file is obliged to omit a trailing
-     * slash and the interface promises a base without one.
-     */
-    appBaseUrl(): string;
-    /**
-     * Unauthenticated reachability probe of the app's PUBLIC health route
-     * (`GET /api/health`) at `appBaseUrl()`, through the CLI's `fetchHealth`.
-     * Sends no credential, so diagnostics works logged-out. Resolves
-     * `{ reachable: false, error }` only on a real network/timeout failure.
-     */
-    checkHealth(): Promise<{
-        reachable: boolean;
-        status?: string;
-        version?: string;
-        error?: string;
-    }>;
-    /**
-     * The contract verdict for this MCP against `appBaseUrl()`, per operation,
-     * naming `@walkeros/mcp` as the client.
-     */
-    checkContract(): Promise<ContractComparison>;
-    /** The live public OpenAPI document of `appBaseUrl()`, without a credential. */
-    openapiDocument(): Promise<unknown>;
-    submitFeedback(text: string, options?: FeedbackOptions): Promise<void>;
-    getFeedbackPreference(): boolean | undefined;
-    setFeedbackPreference(anonymous: boolean): void;
-}
-
-interface CreateStreamableHttpHandlerOptions extends WebStandardStreamableHTTPServerTransportOptions {
-    /**
-     * Called after a session is initialized. Wraps onsessioninitialized.
-     */
-    onSessionInitialized?: (sessionId: string) => void | Promise<void>;
-}
-/**
- * Returns a Fetch-style handler: `(Request) => Promise<Response>`.
- *
- * Single call creates a dedicated transport instance and connects it to the
- * given `McpServer`. The handler holds that transport for its entire
- * lifetime, call `createStreamableHttpHandler` once per app lifecycle, not
- * per request. For multi-session hosting (different users, persistent
- * sessions), instantiate one handler per session keyed by `Mcp-Session-Id`
- * at the Route Handler layer; this factory is the session-agnostic
- * building block.
- */
-declare function createStreamableHttpHandler(server: McpServer, opts?: CreateStreamableHttpHandlerOptions): (request: Request) => Promise<Response>;
+type LocalServerToolSpecs = LocalToolSpecs & {
+    flow_bundle: ToolSpec;
+    flow_simulate: ToolSpec;
+    flow_push: ToolSpec;
+};
+declare function createToolHandlers(runtime: FlowRuntime): LocalServerToolSpecs;
 
 /**
  * The full-capability runtime for the user's own machine (stdio, the developer
@@ -1003,377 +45,6 @@ declare function createStreamableHttpHandler(server: McpServer, opts?: CreateStr
  */
 declare function createLocalRuntime(): FlowRuntime;
 
-/**
- * The least-privilege runtime for a shared, network-reached process: the app's
- * OAuth door, in-app chat, and any third-party HTTP host.
- *
- * It never touches the filesystem or the network on the caller's behalf. A
- * saved `flow_`/`cfg_` id is resolved through the access-scoped tool client, a
- * document is parsed inline, and everything else is refused. `bundle`,
- * `simulate` and `push` are deliberately absent: compiling or importing a
- * caller's flow pulls that caller's code (inline or by package name) into this
- * process, and no input shape makes that safe here.
- */
-declare function createHostedRuntime(client: Pick<ToolClient, 'getFlow'>): FlowRuntime;
-
-/**
- * Exported so the hosted plane can assert parity against this exact string
- * instead of retyping it.
- */
-declare const DESCRIPTION: string;
-/**
- * Hints carry the verb ladder rather than the description. Module constants so
- * the wording is one string per idea, quotable verbatim, and identical across
- * planes. Exported so the hosted plane imports them instead of retyping them,
- * which makes cross-plane parity a compiler concern.
- */
-declare const HINT_SIMULATE_FIRST = "Simulate before preview: flow_simulate checks mapping with no browser.";
-declare const HINT_PREVIEW_STREAMS = "Preview streams into this session: mint a link with flow_manage preview_regrant, then open it on your site.";
-declare const HINT_READ = "Read with observe_journeys (flowId); it is the only read.";
-declare const HINT_STOP = "End both arms with observe_session stop.";
-declare const HINT_EMPTY_FEED = "recordsReceived is 0: nothing has reached the feed yet. Drive traffic on an attached arm.";
-declare const HINT_ENDED = "Session ended and both arms detached. Start a new one with observe_session start.";
-declare const HINT_NO_WINDOW = "No Observe session on this flow. Open one with observe_session start.";
-
-/**
- * Exported so a host asserts parity against this exact string instead of
- * retyping it.
- */
-declare const HUB_MANAGE_DESCRIPTION: string;
-/**
- * One flat schema with an `action` enum and per-action optional fields, the
- * shape `flow_manage`, `project_manage`, and `secret_manage` already use.
- * Per-action requirements are enforced in the handler, so later actions add a
- * field and an enum member without reshaping what callers already send.
- *
- * Exported so the declarative registry holds the same object rather than a
- * second copy of it.
- */
-declare const HUB_MANAGE_INPUT_SCHEMA: {
-    action: z.ZodEnum<{
-        releases: "releases";
-        release_get: "release_get";
-        step_history: "step_history";
-        rationale_set: "rationale_set";
-        threads: "threads";
-        note_add: "note_add";
-        knowledge: "knowledge";
-    }>;
-    projectId: z.ZodOptional<z.ZodString>;
-    flowId: z.ZodOptional<z.ZodString>;
-    versionId: z.ZodOptional<z.ZodString>;
-    versionNumber: z.ZodOptional<z.ZodNumber>;
-    step: z.ZodOptional<z.ZodString>;
-    flow: z.ZodOptional<z.ZodString>;
-    text: z.ZodOptional<z.ZodString>;
-    limit: z.ZodOptional<z.ZodNumber>;
-    offset: z.ZodOptional<z.ZodNumber>;
-    anchorType: z.ZodOptional<z.ZodEnum<{
-        step: "step";
-        entity_action: "entity_action";
-        release: "release";
-        contract: "contract";
-        tag: "tag";
-    }>>;
-    anchorKey: z.ZodOptional<z.ZodString>;
-    anchorLabel: z.ZodOptional<z.ZodString>;
-    threadId: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<{
-        open: "open";
-        resolved: "resolved";
-    }>>;
-    pageKey: z.ZodOptional<z.ZodString>;
-    frameId: z.ZodOptional<z.ZodString>;
-    markId: z.ZodOptional<z.ZodString>;
-};
-/**
- * Hints carry the verb ladder rather than the description. One constant per
- * sentence the tool can emit, so the surface fixture pins wording and ordering
- * by name and a reword fails a test instead of drifting.
- */
-declare const HUB_HINT_RELEASE_GET = "Use action \"release_get\" with a versionId or versionNumber to read one release in full, with its diff.";
-declare const HUB_HINT_ROWS_ARE_DEPLOYMENTS = "Rows are deployments, not releases: the same versionId on several rows is a redeploy of identical content, so count distinct versionId values, and note that total counts deployments.";
-declare const HUB_HINT_STEP_HISTORY = "Use action \"step_history\" to see which releases touched one step.";
-declare const HUB_HINT_MASKED_ONLY = "The diff is empty because the only changes are inside masked values. Say that the change is not visible here rather than that nothing changed.";
-declare const HUB_HINT_TRACE_STEP = "Use action \"step_history\" to trace one step across releases.";
-declare const HUB_HINT_WRITE_RATIONALE = "This release has no human rationale. Read the diff, then use action \"rationale_set\" to record why it changed.";
-declare const HUB_HINT_SCAN_CAPPED = "The scan stopped at the entry cap, so older releases were not compared. Narrow with \"flow\" to see the whole history of one occurrence.";
-declare const HUB_HINT_NO_MATCH = "No scanned release touched this step. Check the step key against knownSteps, or raise limit to scan further back.";
-declare const HUB_HINT_OPEN_RELEASE = "Use action \"release_get\" on one of these versionIds to read the full diff and rationale.";
-declare const HUB_HINT_RATIONALE_VISIBLE = "The rationale is now visible on this release in the app.";
-declare const HUB_HINT_CONFIRM_INDEX = "Use action \"releases\" to confirm it appears in the index.";
-declare const HUB_HINT_THREADS_PAGE_CAPPED = "More threads match than were returned (the page is capped at 20 when messages are attached). Narrow with anchorType and anchorKey, or with status, rather than treating this as the complete list.";
-declare const HUB_HINT_NOTHING_DISCUSSED = "Nothing is being discussed on this flow. Use action \"note_add\" with a versionId to start a thread on a release.";
-declare const HUB_HINT_NO_THREAD_ON_ANCHOR = "No thread hangs on this anchor yet. Use action \"note_add\" to open one.";
-declare const HUB_HINT_THREADS_INDEX = "This is an index: message bodies are omitted. Pass a versionId, or anchorType with anchorKey, to read one discussion in full.";
-declare const HUB_HINT_MESSAGES_TRUNCATED = "A thread here is marked hasMoreMessages: only its newest messages were returned. Say the discussion is longer than what you read rather than summarizing it as complete.";
-declare const HUB_HINT_REPLY_OR_OPEN = "Use action \"note_add\" with a threadId to reply in one of these threads, or without one to open another.";
-declare const HUB_HINT_RESOLVE_IN_APP = "Resolving a thread into a release is done by a person in the app, not through this tool.";
-declare const HUB_HINT_MESSAGE_VISIBLE = "The message is now visible in this thread in the app.";
-declare const HUB_HINT_STAYS_RESOLVED = "This thread is resolved and stayed resolved: a reply never retracts the release link.";
-declare const HUB_HINT_READ_BACK = "Use action \"threads\" to read the discussion back.";
-declare const HUB_HINT_THREAD_OPEN = "The thread is now open on this anchor in the app.";
-declare const HUB_HINT_KEEP_ONE_THREAD = "Pass its threadId back to action \"note_add\" to keep the conversation in one place instead of opening another thread.";
-declare const HUB_HINT_KNOWLEDGE_PAGE_CAPPED = "More knowledge matches than was returned. Narrow with pageKey, then frameId, then markId, rather than treating this as everything that was written.";
-declare const HUB_HINT_NOTHING_WRITTEN = "Nothing has been written here. Notes are left on the page in Tag Mode, not through this tool.";
-declare const HUB_HINT_KNOWLEDGE_INDEX = "This is an index: message bodies are omitted. Pass markId with frameId to read one mark in full.";
-declare const HUB_HINT_ENTRY_NAMES_FLOW = "An entry names the flow it was written against in flowId, and validity says which release was live at the time.";
-declare const HUB_HINT_KNOWLEDGE_READ_ONLY = "This tool only reads knowledge. Answering a note, and settling it, are done by a person in the app.";
-declare const HUB_HINT_READ_FRAME = "Use frame_manage action \"get\" with the frameId to read the frame and its marks.";
-declare const HUB_NOT_FOUND_HINT = "Use action \"releases\" to find version ids and action \"threads\" to find thread ids.";
-
-/**
- * Exported so a host asserts parity against this exact string instead of
- * retyping it.
- */
-declare const FRAME_MANAGE_DESCRIPTION: string;
-/**
- * Exported so the declarative registry holds the same object rather than a
- * second copy of it.
- */
-declare const FRAME_MANAGE_INPUT_SCHEMA: {
-    action: z.ZodEnum<{
-        page: "page";
-        get: "get";
-        list: "list";
-    }>;
-    projectId: z.ZodOptional<z.ZodString>;
-    flowId: z.ZodOptional<z.ZodString>;
-    pageKey: z.ZodOptional<z.ZodString>;
-    frameId: z.ZodOptional<z.ZodString>;
-};
-/**
- * Hints carry the verb ladder rather than the description. One constant per
- * sentence the tool can emit, so the surface fixture pins wording and ordering
- * by name and a reword fails a test instead of drifting.
- */
-declare const FRAME_HINT_OPEN_PAGE_OR_GET = "Use action \"page\" with a pageKey (a frame\u2019s source.key) to read a page with marks, or action \"get\" with a frameId.";
-declare const FRAME_HINT_NAMES_ARE_DOCUMENTATION = "Frame names are documentation; the marks inside a frame carry the meaning.";
-declare const FRAME_HINT_NONE_YET = "This flow has no frames yet. Frames are drawn in Tag Mode or the app, not through this tool.";
-declare const FRAME_HINT_MARK_SPACE = "Tag geometry is fractional: a rect is 0..1 of its frame, and an at is 0..1 of its parent tag\u2019s box, or of the frame for a root tag; a child frame sits inside its parent through placements[].rect.";
-declare const FRAME_HINT_READ_KNOWLEDGE = "Use hub_manage action \"knowledge\" with frameId (and markId) to read what people wrote here. A markId is a tag id from these marks, and a tag\u2019s threadRef is the id of its thread entry there.";
-declare const FRAME_HINT_NONE_ON_PAGE = "No frames on this page. Check the pageKey against the source.key values from action \"list\".";
-declare const FRAME_HINT_EXTENDS_BASE = "This frame extends another and stores only what it adds; read the base frame (extends) for the rest.";
-declare const FRAME_NOT_FOUND_HINT = "Use action \"list\" or \"page\" to find frame ids.";
-
-/** The code every door answers a plan or project gate with. */
-declare const FEATURE_NOT_AVAILABLE = "FEATURE_NOT_AVAILABLE";
-/** The features a door can refuse a whole tool for. */
-type GatedFeature = 'hub' | 'frames';
-/**
- * A denial is recognised by its code, never by its wording: the two doors phrase
- * the refusal differently and only the code is contractual.
- */
-declare function isFeatureDenial(error: unknown): boolean;
-/**
- * Names the feature so an agent can tell the person what is missing. Enabling
- * it is a plan or project entitlement change made in the app, never something
- * a tool can do, and the hint says so instead of inviting a retry.
- */
-declare function featureDenialHint(feature: GatedFeature): string;
-
-/**
- * Wraps a user-writable string in `<user_data>…</user_data>` so the chat
- * assistant treats it as data, never as instructions. Inner `</user_data>`
- * sequences are mangled (`</user_data_>`) so a malicious string can't close
- * the envelope early.
- *
- * Idempotent: a string that is already a well-formed envelope with no inner
- * `</user_data>` is returned unchanged.
- */
-declare function wrapUserData(s: string): string;
-interface RedactOptions {
-    /** Return `true` to skip wrapping for a given object key. Only invoked for
-     *  string values on object entries — not for array elements or scalar
-     *  roots. Use to keep ids / slugs / dates literal. */
-    skip?: (key: string) => boolean;
-}
-/**
- * Recursively walks `value` and returns a deep-copied structure where every
- * string leaf has been passed through `wrapUserData`. Pass `skip` to exclude
- * specific keys (e.g. `id`) from wrapping.
- */
-declare function redactNestedStrings<T>(value: T, opts?: RedactOptions): T;
-
-type SuggestionTile = {
-    label: string;
-    description?: string;
-    prompt: string;
-    autoSend?: boolean;
-};
-interface FlowCanvasPayload {
-    flowId?: string;
-    configName: string;
-    platform: 'web' | 'server';
-    flowConfig: Record<string, unknown>;
-    highlight?: {
-        stepAddress: string;
-        reason: string;
-    };
-    suggestions?: SuggestionTile[];
-    /**
-     * Absolute link to this flow's page in the app, from `links.flow`.
-     *
-     * Named for the `appBaseUrl()` seam it is built from, and never `url`: that
-     * is a field several app responses already use for something of their own
-     * (a deployment's `url` is where it SERVES), and one key meaning one thing
-     * across every tool is what keeps a link from ever landing on top of it.
-     *
-     * Optional because a tool that cannot name the project or the flow emits no
-     * link rather than a guess, and because the in-app chat renders the canvas
-     * itself and has no use for a link to the page it is already on.
-     */
-    appUrl?: string;
-}
-interface FlowCanvasToolResult extends FlowCanvasPayload {
-    kind: 'flow-canvas';
-}
-/**
- * Tool-result helper that marks a response as renderable as a FlowCanvas.
- * The chat UI inspects `structuredContent.kind === 'flow-canvas'` and mounts
- * a `FlowCanvasBubble` instead of the generic JSON fallback. The `content[0]`
- * text is the same JSON stringified — the LLM sees a self-describing object.
- */
-declare function flowCanvasResult(payload: FlowCanvasPayload): {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    structuredContent: Record<string, unknown> & {
-        kind: "flow-canvas";
-    };
-};
-declare function isFlowCanvasResult(v: unknown): v is FlowCanvasToolResult;
-
-/**
- * Addresses of walkerOS app screens, built in one place so every tool hands a
- * person the same link for the same screen.
- *
- * WHY THIS EXISTS. A tool that names a release, a step, or a deployment in
- * prose leaves the person to go find it. A link ends that: the answer and the
- * screen it is about arrive together. Building the address in each tool would
- * instead give as many spellings of `/projects/.../flows/...` as there are
- * emission points, and the first one to drift would send someone to a 404 that
- * no test here could see.
- *
- * THE BASE URL IS CONSUMED RAW. `client.appBaseUrl()` is already normalized by
- * the door that answers it (the CLI-backed door wraps `resolveAppUrl()` in
- * `normalizeBaseUrl`; the hosted door returns the same expression it publishes
- * as its OAuth issuer, which cannot carry a trailing slash). Normalizing again
- * here would put a second opinion about the shape in the system, which is
- * exactly what one normalization point per door exists to prevent.
- *
- * ONE DEFINITION, BOTH DOORS. Nothing here branches on which door is calling.
- * The base URL is the only thing that differs between them, and it arrives as
- * an argument.
- *
- * EVERY LINK IS ABSOLUTE. These land in a chat transcript, where a path
- * relative to nothing is useless.
- *
- * AN UNBUILDABLE LINK IS `undefined`, NEVER A GUESS. Every builder returns
- * `undefined` when it cannot name a screen that exists, and callers spread the
- * field conditionally so the result simply carries no link. A link that lands
- * on a 404, or on the app's "can't open that" notice, is worse than no link:
- * it costs the person a click and teaches them the tool's links are unreliable.
- *
- * THE URL SHAPES ARE THE APP'S, NOT OURS. They mirror what the app routes
- * today: `/projects/{projectId}/flows/{flowId}` and
- * `/projects/{projectId}/deployments/{deploymentId}`, with a view on the flow
- * page addressed by the `view` query param whose value names a SUBJECT
- * (`variables`, `secrets`, `contract`, `history`, `releases`, `knowledge`,
- * `step`). A step is `?view=step&flow=<named flow>&step=<type.name>`, the same
- * vocabulary `hub_manage` already takes as its `flow` and `step` params.
- */
-/** A flow page: the address every flow-scoped view hangs off. */
-interface FlowLinkTarget {
-    /** From `client.appBaseUrl()`. Consumed as given. */
-    baseUrl: string;
-    projectId: string;
-    flowId: string;
-}
-/**
- * One step inside a flow. `flow` is the named flow within the config ("web",
- * "server"); `step` is `"type.name"`, e.g. `"destination.ga4"`.
- */
-interface StepLinkTarget extends FlowLinkTarget {
-    step: string;
-    /**
-     * Null and undefined both mean "the caller did not name one", which is the
-     * shape `hub_manage`'s step history answers with when it was not filtered by
-     * flow.
-     */
-    flow?: string | null;
-}
-/** One discussion thread, addressed by what it hangs on. */
-interface ThreadLinkTarget extends FlowLinkTarget {
-    anchorType: string;
-}
-/**
- * One deployment.
- *
- * Pass the `dep_...` id, not the slug. The detail route resolves either, but
- * the page's live-status stream matches on the id alone, so a slug link opens a
- * page whose status stream fails while the deployment is still deploying. This
- * builder does not inspect the value: naming the id is the caller's job.
- */
-interface DeploymentLinkTarget {
-    baseUrl: string;
-    projectId: string;
-    deploymentId: string;
-}
-declare const links: {
-    /** The flow page itself. `undefined` when any part of the address is empty. */
-    flow(target: FlowLinkTarget): string | undefined;
-    /**
-     * The screen showing one step.
-     *
-     * A `contract` step, in any of its spellings, is answered with the CONTRACT
-     * view rather than a step address. `?view=step&step=contract.checkout` is a
-     * legitimate address in the vocabulary this tool speaks, but the app has
-     * deliberately deferred opening ONE contract entry and refuses that link with
-     * a notice. `?view=contract` opens the contract editor the entry lives in,
-     * which is the nearest screen that actually exists. A `flow` alongside a
-     * contract step is a caller mistake (contract entries are top-level) and is
-     * ignored rather than turned into a refused link.
-     *
-     * Otherwise a step needs its named flow: `type.name` alone is not unique in a
-     * config holding both a web and a server flow, and the app resolves an
-     * address without one to nothing and says so on screen. So an unnamed flow
-     * yields `undefined` here. Callers that want the link can re-ask with `flow`.
-     *
-     * What this cannot check is whether the step is still IN that flow. The
-     * address is resolved against the live config when the page opens, and a step
-     * since renamed or removed gets a notice there rather than a broken screen.
-     */
-    step(target: StepLinkTarget): string | undefined;
-    /**
-     * The release history of a flow.
-     *
-     * The app has no address for ONE release: `?view=releases` declares no params
-     * and opens the list the release is a row of. That is the screen a person
-     * asking about a release wants to be on, so this takes the flow and nothing
-     * else rather than pretending to a precision the app does not have.
-     */
-    release(target: FlowLinkTarget): string | undefined;
-    /**
-     * The screen a thread is read on.
-     *
-     * Only a release anchor can be addressed from the wire shape this tool
-     * holds. The app renders release-anchored discussions inside the release
-     * history, beside the release they hang on. Step and entity-action anchors
-     * have no surface at all yet. A TAG anchor does have one, the knowledge list
-     * on `?view=knowledge`, but only when the thread was captured in Tag Mode
-     * and carries a frame: `HubThreadWire` has no `frameId`, so nothing here can
-     * tell such a thread from one written over MCP against a null frame, and a
-     * knowledge link would open a list the thread may be absent from. So
-     * everything but a release anchor gets no link rather than a possibly empty
-     * one.
-     */
-    thread(target: ThreadLinkTarget): string | undefined;
-    /** One deployment's detail page. */
-    deployment(target: DeploymentLinkTarget): string | undefined;
-};
-
 declare module '@walkeros/core' {
     interface SourceMap {
         mcp: {
@@ -1384,19 +55,4 @@ declare module '@walkeros/core' {
     }
 }
 
-/**
- * Handler-bearing spec for every tool `createWalkerOSMcpServer` registers.
- *
- * Consumers that need to drive the tools WITHOUT an `McpServer` (e.g., the
- * walkerOS app's chat route wrapping them as Vercel AI SDK tools) should call
- * `createToolHandlers(client, packageVersion)` and iterate the returned record.
- * Handlers are closed over `client`, so the caller can bind a single
- * `ToolClient` (such as the zero-hop `ServiceToolClient`) once per session.
- * `packageVersion` is reported by the `diagnostics` tool and defaults to
- * `'0.0.0'` when omitted. `runtime` defaults to the hosted runtime, the safe
- * choice for any shared process; pass `createLocalRuntime()` only on the
- * user's own machine.
- */
-declare function createToolHandlers(client: ToolClient, packageVersion?: string, runtime?: FlowRuntime): Record<string, ToolSpec>;
-
-export { type BundleOptions, type CreateServerOptions, type CreateStreamableHttpHandlerOptions, type DeploymentLinkTarget, FEATURE_NOT_AVAILABLE, FRAME_HINT_EXTENDS_BASE, FRAME_HINT_MARK_SPACE, FRAME_HINT_NAMES_ARE_DOCUMENTATION, FRAME_HINT_NONE_ON_PAGE, FRAME_HINT_NONE_YET, FRAME_HINT_OPEN_PAGE_OR_GET, FRAME_HINT_READ_KNOWLEDGE, FRAME_MANAGE_DESCRIPTION, FRAME_MANAGE_INPUT_SCHEMA, FRAME_NOT_FOUND_HINT, type FlowCanvasPayload, type FlowCanvasToolResult, type FlowLinkTarget, type FlowRuntime, type FrameLeanListWire, type FrameLeanWire, type FrameListWire, type FrameWire, type GatedFeature, HINT_EMPTY_FEED, HINT_ENDED, HINT_NO_WINDOW, HINT_PREVIEW_STREAMS, HINT_READ, HINT_SIMULATE_FIRST, HINT_STOP, HUB_HINT_CONFIRM_INDEX, HUB_HINT_ENTRY_NAMES_FLOW, HUB_HINT_KEEP_ONE_THREAD, HUB_HINT_KNOWLEDGE_INDEX, HUB_HINT_KNOWLEDGE_PAGE_CAPPED, HUB_HINT_KNOWLEDGE_READ_ONLY, HUB_HINT_MASKED_ONLY, HUB_HINT_MESSAGES_TRUNCATED, HUB_HINT_MESSAGE_VISIBLE, HUB_HINT_NOTHING_DISCUSSED, HUB_HINT_NOTHING_WRITTEN, HUB_HINT_NO_MATCH, HUB_HINT_NO_THREAD_ON_ANCHOR, HUB_HINT_OPEN_RELEASE, HUB_HINT_RATIONALE_VISIBLE, HUB_HINT_READ_BACK, HUB_HINT_READ_FRAME, HUB_HINT_RELEASE_GET, HUB_HINT_REPLY_OR_OPEN, HUB_HINT_RESOLVE_IN_APP, HUB_HINT_ROWS_ARE_DEPLOYMENTS, HUB_HINT_SCAN_CAPPED, HUB_HINT_STAYS_RESOLVED, HUB_HINT_STEP_HISTORY, HUB_HINT_THREADS_INDEX, HUB_HINT_THREADS_PAGE_CAPPED, HUB_HINT_THREAD_OPEN, HUB_HINT_TRACE_STEP, HUB_HINT_WRITE_RATIONALE, HUB_MANAGE_DESCRIPTION, HUB_MANAGE_INPUT_SCHEMA, HUB_NOT_FOUND_HINT, HttpToolClient, type HubThreadWire, type JourneysResult, type KnowledgeEntryWire, type ListKnowledgeWire, type ListThreadsWire, type Logger, DESCRIPTION as OBSERVE_SESSION_DESCRIPTION, type PushOptions, type RedactOptions, type ReleaseDetailWire, type ReleaseIndexWire, type ReleaseRef, RuntimeRefusal, type SimulateOptions, type SimulateStepType, type StepHistoryWire, type StepLinkTarget, type SuggestionTile, TOOL_DEFINITIONS, type ThreadLinkTarget, type ToolAnnotations, type ToolClient, type ToolDefinition, type ToolSpec, type VersionAnnotationWire, createHostedRuntime, createLocalRuntime, createStreamableHttpHandler, createToolHandlers, createWalkerOSMcpServer, featureDenialHint, flowCanvasResult, isFeatureDenial, isFlowCanvasResult, links, redactNestedStrings, wrapUserData };
+export { type CreateServerOptions, FlowRuntime, type LocalServerToolSpecs, LocalToolSpecs, type Logger, ToolSpec, createLocalRuntime, createToolHandlers, createWalkerOSMcpServer };