Merge remote-tracking branch 'origin/main' into 662-piano-destination

Author: alexanderkirtzel

.changeset/api-typed-surface.md

@@ -0,0 +1,10 @@
+---
+'@walkeros/cli': patch
+---
+
+The bundled API contract (`spec.json` and the generated `api.gen.d.ts`) now
+covers the full served surface, adding typed paths for service accounts,
+invitations, billing, deployments and their sub-resources, custom domains,
+entitlements, LLM settings, chat sessions, MCP tokens, runners, and the package
+catalog. No runtime behavior change; clients gain accurate types for these
+endpoints.

.changeset/batch-outcome-shutdown-fixes.md

@@ -0,0 +1,12 @@
+---
+'@walkeros/core': patch
+'@walkeros/collector': patch
+'@walkeros/server-destination-gcp': patch
+---
+
+Batched destination delivery now reports failures. A batch push that fails
+(including BigQuery row errors) is routed to the dead-letter buffer and counted
+as failed instead of being silently dropped, and graceful shutdown waits for
+in-flight batches to finish. Also fixes a shutdown timer that could delay
+process exit, and makes a zero millisecond batch wait (`batch: 0`) correctly
+enable batching.

.changeset/bigquery-timing-float.md

@@ -0,0 +1,8 @@
+---
+'@walkeros/server-destination-gcp': patch
+---
+
+The BigQuery destination now creates the `timing` column as `FLOAT64` instead of
+`INT64`. Event timing carries sub-second decimal precision, which was previously
+truncated to whole numbers on write. Existing tables keep their column type;
+alter it to `FLOAT64` to preserve precision going forward.

.changeset/browser-window-single-instance.md

@@ -0,0 +1,8 @@
+---
+'@walkeros/web-source-browser': patch
+---
+
+The single-instance guard is now scoped to the window instead of the module, so
+loading the tag more than once on the same page is inert rather than
+re-initializing. A second load no longer re-binds DOM triggers, re-adopts the
+event layer, or surfaces an error to the host page.

.changeset/cli-archive-bundles.md

@@ -0,0 +1,9 @@
+---
+'@walkeros/cli': minor
+---
+
+`walkeros run` now accepts a `.tar.gz`/`.tgz` flow archive (URL or local file):
+it extracts the bundle and its `node_modules/` and runs it, so server flows with
+external step packages resolve them at runtime. `walkeros bundle -o flow.tar.gz`
+packs a server bundle directory into that archive. Web single-file bundles do
+not support archive output.

.changeset/cli-iife-browser-bundle.md

@@ -0,0 +1,9 @@
+---
+'@walkeros/cli': patch
+---
+
+Browser flow bundles are now emitted as an IIFE so all internal code stays
+inside a private scope. Previously the bundled helper functions could leak onto
+the global `window` object and collide with other scripts on the page, such as
+Google Analytics or a consent manager. Server bundles are unchanged and still
+emit ESM.

.changeset/collector-foreign-dispatch-guard.md

@@ -0,0 +1,8 @@
+---
+'@walkeros/collector': patch
+---
+
+Lifecycle dispatch now fails closed when called with a non-collector argument.
+If an internal function is ever reached by foreign code (for example a global
+name collision), it returns quietly instead of throwing, so it can no longer
+break the surrounding page.

.changeset/collector-state-delivery.md

@@ -0,0 +1,9 @@
+---
+'@walkeros/collector': minor
+---
+
+Consent and state-gated source reactions, such as the session source's session
+start, now fire reliably regardless of source init order or whether state
+arrives before or after `run`. The collector delivers each state change exactly
+once per subscriber, so sources no longer need to re-fire on repeat collector
+notifications of the same state.

.changeset/config-batch-enabler.md

@@ -0,0 +1,13 @@
+---
+'@walkeros/collector': minor
+---
+
+Destinations now batch every event when you set `config.batch`, with no `'* *'`
+wildcard mapping rule needed. A bare number sets the debounce wait;
+`{ wait, size, age }` tunes the window. Rule-level `batch` still overrides per
+event type, and pending batches now flush on shutdown.
+
+Migration: if you previously set `config.batch` alongside a single non-wildcard
+rule `batch`, `config.batch` only capped that rule before; it now batches all of
+the destination's events. To batch only specific events, drop `config.batch` and
+set `batch` on those rules.

.changeset/config-credentials-field.md

@@ -0,0 +1,15 @@
+---
+'@walkeros/core': minor
+'@walkeros/server-destination-gcp': minor
+'@walkeros/server-store-sheets': minor
+'@walkeros/server-store-gcs': minor
+'@walkeros/server-source-gcp': minor
+'@walkeros/server-destination-datamanager': minor
+---
+
+Add an optional, strictly-typed `config.credentials` field to destinations,
+stores, and sources. Service-account credentials now configure under
+`config.credentials`, validated per package and resolved from `$env`. The
+package-specific `settings.credentials` still works but is deprecated, so move
+credentials to `config.credentials`. The raw `settings.<sdk>` passthrough (e.g.
+`settings.bigquery`) is unchanged.