@walkeros/cli 3.0.2 → 4.0.0-next-1773967844643

package/dist/index.js

@@ -193,50 +193,44 @@ var init_config_file = __esm({
   }
 });
 
-// src/core/auth.ts
-function getToken() {
-  const result = resolveToken();
-  return result?.token;
-}
-function getAuthHeaders() {
-  const token = getToken();
-  if (!token) return {};
-  return { Authorization: `Bearer ${token}` };
-}
-async function authenticatedFetch(url, init) {
-  const authHeaders = getAuthHeaders();
-  const existingHeaders = init?.headers instanceof Headers ? Object.fromEntries(init.headers.entries()) : Array.isArray(init?.headers) ? Object.fromEntries(init.headers) : init?.headers ?? {};
-  return fetch(url, {
+// src/core/http.ts
+function normalizeHeaders(headers) {
+  if (!headers) return {};
+  if (headers instanceof Headers) return Object.fromEntries(headers.entries());
+  if (Array.isArray(headers)) return Object.fromEntries(headers);
+  return headers;
+}
+function mergeAuthHeaders(token, headers) {
+  const normalized = normalizeHeaders(headers);
+  if (token) normalized.Authorization = `Bearer ${token}`;
+  return normalized;
+}
+async function apiFetch(path15, init) {
+  const baseUrl = resolveAppUrl();
+  const token = resolveToken()?.token;
+  return fetch(`${baseUrl}${path15}`, {
     ...init,
-    headers: { ...existingHeaders, ...authHeaders }
+    headers: mergeAuthHeaders(token, init?.headers)
   });
 }
-async function deployAuthenticatedFetch(url, init) {
-  const deployToken = resolveDeployToken();
-  const token = deployToken ?? getToken();
+async function publicFetch(path15, init) {
+  const baseUrl = resolveAppUrl();
+  return fetch(`${baseUrl}${path15}`, init);
+}
+async function deployFetch(path15, init) {
+  const baseUrl = resolveAppUrl();
+  const token = resolveDeployToken() ?? resolveToken()?.token;
   if (!token)
     throw new Error(
       "No authentication token available. Set WALKEROS_DEPLOY_TOKEN or run walkeros auth login."
     );
-  const existingHeaders = init?.headers instanceof Headers ? Object.fromEntries(init.headers.entries()) : Array.isArray(init?.headers) ? Object.fromEntries(init.headers) : init?.headers ?? {};
-  return fetch(url, {
+  return fetch(`${baseUrl}${path15}`, {
     ...init,
-    headers: { ...existingHeaders, Authorization: `Bearer ${token}` }
+    headers: mergeAuthHeaders(token, init?.headers)
   });
 }
-function resolveRunToken() {
-  return resolveDeployToken() ?? resolveToken()?.token ?? null;
-}
-function resolveBaseUrl() {
-  return resolveAppUrl();
-}
-function requireProjectId() {
-  const projectId = process.env.WALKEROS_PROJECT_ID;
-  if (!projectId) throw new Error("WALKEROS_PROJECT_ID not set.");
-  return projectId;
-}
-var init_auth = __esm({
-  "src/core/auth.ts"() {
+var init_http = __esm({
+  "src/core/http.ts"() {
     "use strict";
     init_config_file();
   }
@@ -259,7 +253,10 @@ async function downloadFromUrl(url) {
     throw new Error(`Invalid URL: ${url}`);
   }
   try {
-    const response = await authenticatedFetch(url);
+    const token = resolveToken()?.token;
+    const response = await fetch(url, {
+      headers: mergeAuthHeaders(token)
+    });
     if (!response.ok) {
       throw new Error(
         `Failed to download ${url}: ${response.status} ${response.statusText}`
@@ -280,32 +277,44 @@ async function downloadFromUrl(url) {
   }
 }
 async function loadJsonConfig(configPath) {
-  let absolutePath;
-  let isTemporary = false;
-  if (isUrl(configPath)) {
-    absolutePath = await downloadFromUrl(configPath);
-    isTemporary = true;
-  } else {
-    absolutePath = path3.resolve(configPath);
-    if (!await fs2.pathExists(absolutePath)) {
-      throw new Error(`Configuration file not found: ${absolutePath}`);
-    }
-  }
-  try {
-    const rawConfig = await fs2.readJson(absolutePath);
-    return rawConfig;
-  } catch (error) {
-    throw new Error(
-      `Invalid JSON in config file: ${configPath}. ${error instanceof Error ? error.message : error}`
-    );
-  } finally {
-    if (isTemporary) {
+  const trimmed = configPath.trim();
+  if (isUrl(trimmed)) {
+    const absolutePath2 = await downloadFromUrl(trimmed);
+    try {
+      const rawConfig = await fs2.readJson(absolutePath2);
+      return rawConfig;
+    } catch (error) {
+      throw new Error(
+        `Invalid JSON in config file: ${configPath}. ${error instanceof Error ? error.message : error}`
+      );
+    } finally {
       try {
-        await fs2.remove(absolutePath);
+        await fs2.remove(absolutePath2);
       } catch {
       }
     }
   }
+  const absolutePath = path3.resolve(trimmed);
+  if (await fs2.pathExists(absolutePath)) {
+    try {
+      const rawConfig = await fs2.readJson(absolutePath);
+      return rawConfig;
+    } catch (error) {
+      throw new Error(
+        `Invalid JSON in config file: ${configPath}. ${error instanceof Error ? error.message : error}`
+      );
+    }
+  }
+  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+    try {
+      return JSON.parse(trimmed);
+    } catch (jsonError) {
+      throw new Error(
+        `Input appears to be JSON but contains errors: ${jsonError instanceof Error ? jsonError.message : String(jsonError)}`
+      );
+    }
+  }
+  throw new Error(`Configuration file not found: ${absolutePath}`);
 }
 async function loadJsonFromSource(source, options) {
   const paramName = options?.name || "input";
@@ -365,7 +374,8 @@ var init_utils = __esm({
     "use strict";
     init_core();
     init_tmp();
-    init_auth();
+    init_http();
+    init_config_file();
   }
 });
 
@@ -495,7 +505,10 @@ function detectPlatformFromPath(inputPath) {
 }
 async function loadContent(inputPath) {
   if (isUrl(inputPath)) {
-    const response = await authenticatedFetch(inputPath);
+    const token = resolveToken()?.token;
+    const response = await fetch(inputPath, {
+      headers: mergeAuthHeaders(token)
+    });
     if (!response.ok) {
       throw new Error(`Failed to fetch ${inputPath}: ${response.status}`);
     }
@@ -507,7 +520,8 @@ var init_input_detector = __esm({
   "src/core/input-detector.ts"() {
     "use strict";
     init_utils();
-    init_auth();
+    init_http();
+    init_config_file();
   }
 });
 
@@ -532,6 +546,31 @@ var init_stdin = __esm({
   }
 });
 
+// src/core/auth.ts
+function getToken() {
+  const result = resolveToken();
+  return result?.token;
+}
+function getAuthHeaders() {
+  const token = getToken();
+  if (!token) return {};
+  return { Authorization: `Bearer ${token}` };
+}
+function resolveRunToken() {
+  return resolveDeployToken() ?? resolveToken()?.token ?? null;
+}
+function requireProjectId() {
+  const projectId = process.env.WALKEROS_PROJECT_ID;
+  if (!projectId) throw new Error("WALKEROS_PROJECT_ID not set.");
+  return projectId;
+}
+var init_auth = __esm({
+  "src/core/auth.ts"() {
+    "use strict";
+    init_config_file();
+  }
+});
+
 // src/core/sse.ts
 function parseSSEEvents(buffer) {
   const events = [];
@@ -574,6 +613,7 @@ var init_core = __esm({
     init_input_detector();
     init_stdin();
     init_auth();
+    init_http();
     init_sse();
   }
 });
@@ -1116,6 +1156,7 @@ var init_build_cache = __esm({
 // src/commands/bundle/bundler.ts
 import crypto2 from "crypto";
 import esbuild from "esbuild";
+import { builtinModules } from "module";
 import path9 from "path";
 import fs8 from "fs-extra";
 import { packageNameToVariable, ENV_MARKER_PREFIX } from "@walkeros/core";
@@ -1287,6 +1328,12 @@ async function bundleCore(flowSettings, buildOptions, logger, showStats = false)
     if (hasSourcesOrDests && !buildOptions.packages["@walkeros/collector"]) {
       buildOptions.packages["@walkeros/collector"] = {};
     }
+    const stepPackages = collectStepPackages(flowSettings);
+    for (const pkg of stepPackages) {
+      if (!buildOptions.packages[pkg]) {
+        buildOptions.packages[pkg] = {};
+      }
+    }
     logger.debug("Downloading packages");
     const packagesArray = Object.entries(buildOptions.packages).map(
       ([name, packageConfig]) => ({
@@ -1457,23 +1504,8 @@ function createEsbuildOptions(buildOptions, entryPath, outputPath, tempDir, pack
     };
     baseOptions.external = buildOptions.external || [];
   } else if (buildOptions.platform === "node") {
-    const nodeBuiltins = [
-      "crypto",
-      "fs",
-      "path",
-      "os",
-      "util",
-      "stream",
-      "buffer",
-      "events",
-      "http",
-      "https",
-      "url",
-      "querystring",
-      "zlib"
-    ];
-    const npmPackages = ["express", "express/*", "cors", "cors/*"];
-    baseOptions.external = buildOptions.external ? [...nodeBuiltins, ...npmPackages, ...buildOptions.external] : [...nodeBuiltins, ...npmPackages];
+    const nodeExternals = getNodeExternals();
+    baseOptions.external = buildOptions.external ? [...nodeExternals, ...buildOptions.external] : nodeExternals;
     if (buildOptions.format === "esm") {
       baseOptions.banner = {
         js: `import { createRequire } from 'module';const require = createRequire(import.meta.url);`
@@ -1548,6 +1580,36 @@ function detectStorePackages(flowSettings) {
   }
   return storePackages;
 }
+function getNodeExternals() {
+  const externals = [];
+  for (const mod of builtinModules) {
+    if (mod.startsWith("_")) continue;
+    externals.push(mod, `node:${mod}`, `${mod}/*`, `node:${mod}/*`);
+  }
+  return externals;
+}
+function collectStepPackages(flowSettings) {
+  const allPackages = /* @__PURE__ */ new Set();
+  for (const pkg of detectSourcePackages(flowSettings)) {
+    allPackages.add(pkg);
+  }
+  for (const pkg of detectDestinationPackages(flowSettings)) {
+    allPackages.add(pkg);
+  }
+  for (const pkg of detectTransformerPackages(flowSettings)) {
+    allPackages.add(pkg);
+  }
+  for (const pkg of detectStorePackages(flowSettings)) {
+    allPackages.add(pkg);
+  }
+  const npmPackages = /* @__PURE__ */ new Set();
+  for (const pkg of allPackages) {
+    if (!pkg.startsWith(".") && !pkg.startsWith("/")) {
+      npmPackages.add(pkg);
+    }
+  }
+  return npmPackages;
+}
 function detectExplicitCodeImports(flowSettings) {
   const explicitCodeImports = /* @__PURE__ */ new Map();
   const destinations = flowSettings.destinations;
@@ -2133,7 +2195,7 @@ function createApiClient() {
   const token = getToken();
   if (!token) throw new Error("WALKEROS_TOKEN not set.");
   return createClient({
-    baseUrl: resolveBaseUrl(),
+    baseUrl: resolveAppUrl(),
     headers: {
       Authorization: `Bearer ${token}`,
       "Content-Type": "application/json"
@@ -2144,6 +2206,7 @@ var init_api_client = __esm({
   "src/core/api-client.ts"() {
     "use strict";
     init_auth();
+    init_config_file();
   }
 });
 
@@ -2423,14 +2486,14 @@ __export(cache_exports, {
 });
 import {
   existsSync as existsSync4,
-  mkdirSync as mkdirSync2,
+  mkdirSync as mkdirSync3,
   copyFileSync,
   writeFileSync as writeFileSync3,
   readFileSync as readFileSync2
 } from "fs";
 import { join as join2 } from "path";
 function writeCache(cacheDir, bundlePath, configContent, version) {
-  mkdirSync2(cacheDir, { recursive: true });
+  mkdirSync3(cacheDir, { recursive: true });
   copyFileSync(bundlePath, join2(cacheDir, "bundle.mjs"));
   writeFileSync3(join2(cacheDir, "config.json"), configContent, "utf-8");
   const meta = { version, timestamp: Date.now() };
@@ -2937,7 +3000,7 @@ function rn(n, e2) {
   }, () => J({ ok: false }))(), "Push", n.hooks);
 }
 async function un(n) {
-  const e2 = r({ globalsStatic: {}, sessionStatic: {}, tagging: 0, run: true }, n, { merge: false, extend: false }), t2 = { level: n.logger?.level, handler: n.logger?.handler }, o2 = i(t2), s2 = { ...e2.globalsStatic, ...n.globals }, a2 = { allowed: false, config: e2, consent: n.consent || {}, count: 0, custom: n.custom || {}, destinations: {}, transformers: {}, stores: {}, globals: s2, group: "", hooks: {}, logger: o2, on: {}, queue: [], round: 0, session: void 0, status: { startedAt: Date.now(), in: 0, out: 0, failed: 0, sources: {}, destinations: {} }, timing: Date.now(), user: n.user || {}, version: "3.0.1", sources: {}, pending: { sources: {}, destinations: {} }, push: void 0, command: void 0 };
+  const e2 = r({ globalsStatic: {}, sessionStatic: {}, tagging: 0, run: true }, n, { merge: false, extend: false }), t2 = { level: n.logger?.level, handler: n.logger?.handler }, o2 = i(t2), s2 = { ...e2.globalsStatic, ...n.globals }, a2 = { allowed: false, config: e2, consent: n.consent || {}, count: 0, custom: n.custom || {}, destinations: {}, transformers: {}, stores: {}, globals: s2, group: "", hooks: {}, logger: o2, on: {}, queue: [], round: 0, session: void 0, status: { startedAt: Date.now(), in: 0, out: 0, failed: 0, sources: {}, destinations: {} }, timing: Date.now(), user: n.user || {}, version: "3.0.2", sources: {}, pending: { sources: {}, destinations: {} }, push: void 0, command: void 0 };
   a2.push = rn(a2, (n2) => ({ timing: Math.round((Date.now() - a2.timing) / 10) / 100, source: { type: "collector", id: "", previous_id: "" }, ...n2 })), a2.command = (function(n2, e3) {
     return an(async (t3, o3, s3) => await cn(async () => await e3(n2, t3, o3, s3), () => J({ ok: false }))(), "Command", n2.hooks);
   })(a2, Y);
@@ -3034,14 +3097,8 @@ async function dn(n) {
         })(n, e2);
       case "source":
         return await (async function(n2, e3) {
-          const { code: t2, config: o2 = {}, setup: s2, input: r2, env: i2, consent: a2 } = n2, c2 = { functional: true, marketing: true, analytics: true };
-          let u2;
-          if (s2) {
-            const n3 = s2(r2, i2);
-            "function" == typeof n3 && (u2 = n3);
-          }
-          const f2 = [], { collector: l2 } = await fn({ consent: a2 || c2, sources: { sim: { code: t2, config: o2, env: i2, next: "spy" } }, transformers: { spy: { code: () => ({ type: "spy", config: {}, push: (n3) => (f2.push(JSON.parse(JSON.stringify(n3))), { event: n3 }) }) } } });
-          u2 && u2();
+          const { code: t2, config: o2 = {}, createTrigger: s2, input: r2, consent: i2 } = n2, { content: a2, trigger: c2 } = r2, u2 = { functional: true, marketing: true, analytics: true }, f2 = [], l2 = { consent: i2 || u2, sources: { sim: { code: t2, config: o2, next: "spy" } }, transformers: { spy: { code: () => ({ type: "spy", config: {}, push: (n3) => (f2.push(JSON.parse(JSON.stringify(n3))), { event: n3 }) }) } } }, { trigger: g2 } = await s2(l2);
+          void 0 !== a2 && await g2(c2?.type, c2?.options)(a2);
           return { step: "source", name: n2.name, events: f2, calls: [], duration: Date.now() - e3 };
         })(n, e2);
       case "destination":
@@ -3141,9 +3198,6 @@ function formatSimulationResult(result, options = {}) {
     if (result.capturedEvents) {
       output.capturedEvents = result.capturedEvents;
     }
-    if (result.exampleMatch) {
-      output.exampleMatch = result.exampleMatch;
-    }
     return JSON.stringify(output, null, 2);
   }
   const lines = [];
@@ -3158,17 +3212,6 @@ function formatSimulationResult(result, options = {}) {
       lines.push(`  - ${evt.name || "unknown"}`);
     }
   }
-  if (result.exampleMatch) {
-    const em = result.exampleMatch;
-    if (em.match) {
-      lines.push(`Example "${em.name}" (${em.step}): PASS`);
-    } else {
-      lines.push(`Example "${em.name}" (${em.step}): FAIL`);
-      if (em.diff) {
-        lines.push(em.diff);
-      }
-    }
-  }
   return lines.join("\n");
 }
 async function executeSimulation(event, inputPath, platformOverride, options = {}) {
@@ -3299,7 +3342,6 @@ async function executeConfigSimulation(_content, configPath, typedEvent, tempDir
 }
 
 // src/commands/simulate/source-simulator.ts
-import { JSDOM, VirtualConsole } from "jsdom";
 init_core();
 async function loadSourcePackage(packageName) {
   const mainModule = await import(packageName);
@@ -3307,18 +3349,18 @@ async function loadSourcePackage(packageName) {
   if (!code || typeof code !== "function") {
     throw new Error(`Package ${packageName} missing source init function`);
   }
-  let setup;
+  let createTrigger;
   try {
     const devModule = await import(`${packageName}/dev`);
     const examples = devModule.examples || devModule.default?.examples;
-    if (examples?.setup && typeof examples.setup === "function") {
-      setup = examples.setup;
+    if (examples?.createTrigger && typeof examples.createTrigger === "function") {
+      createTrigger = examples.createTrigger;
     }
   } catch {
   }
-  return { code, setup };
+  return { code, createTrigger };
 }
-async function simulateSourceCLI(flowConfig, setupInput, options) {
+async function simulateSourceCLI(flowConfig, sourceInput, options) {
   const startTime = Date.now();
   try {
     const sources = flowConfig.sources;
@@ -3335,32 +3377,22 @@ async function simulateSourceCLI(flowConfig, setupInput, options) {
     if (!sourceConfig.package) {
       throw new Error(`Source "${options.sourceStep}" has no package field`);
     }
-    const { code, setup } = await loadSourcePackage(sourceConfig.package);
-    const virtualConsole = new VirtualConsole();
-    const dom = new JSDOM(
-      "<!DOCTYPE html><html><head></head><body></body></html>",
-      {
-        url: "http://localhost",
-        runScripts: "dangerously",
-        pretendToBeVisual: true,
-        virtualConsole
-      }
+    const { code, createTrigger } = await loadSourcePackage(
+      sourceConfig.package
     );
-    const env = {
-      window: dom.window,
-      document: dom.window.document,
-      localStorage: dom.window.localStorage
-    };
+    if (!createTrigger) {
+      throw new Error(
+        `Source package ${sourceConfig.package} has no createTrigger export. Ensure the package exports createTrigger from its /dev subpath.`
+      );
+    }
     const result = await dn({
       step: "source",
       name: options.sourceStep,
       code,
       config: sourceConfig.config || {},
-      setup,
-      input: setupInput,
-      env
+      createTrigger,
+      input: sourceInput || { content: void 0 }
     });
-    dom.window.close();
     return {
       success: !result.error,
       error: result.error?.message,
@@ -3507,7 +3539,6 @@ async function simulateCommand(options) {
       verbose: options.verbose,
       silent: options.silent,
       platform: options.platform,
-      example: options.example,
       step: options.step
     });
     const resultWithDuration = {
@@ -3518,8 +3549,7 @@ async function simulateCommand(options) {
       json: options.json
     });
     await writeResult(formatted + "\n", { output: options.output });
-    const exitCode = !result.success || result.exampleMatch && !result.exampleMatch.match ? 1 : 0;
-    process.exit(exitCode);
+    process.exit(result.success ? 0 : 1);
   } catch (error) {
     const errorMessage = getErrorMessage(error);
     if (options.json) {
@@ -3542,49 +3572,14 @@ async function simulateCommand(options) {
 async function simulate(configOrPath, event, options = {}) {
   if (typeof configOrPath !== "string") {
     throw new Error(
-      "simulate() currently only supports config file paths. Config object support will be added in a future version. Please provide a path to a configuration file."
+      "simulate() currently only supports config file paths. Please provide a path to a configuration file."
     );
   }
   let resolvedEvent = event;
   if (typeof event === "string") {
     resolvedEvent = await loadJsonFromSource(event, { name: "event" });
   }
-  let exampleContext;
-  if (options.example) {
-    const rawConfig = await loadJsonConfig(configOrPath);
-    const setup = validateFlowConfig(rawConfig);
-    const flowNames = Object.keys(setup.flows);
-    let flowName = options.flow;
-    if (!flowName) {
-      if (flowNames.length === 1) {
-        flowName = flowNames[0];
-      } else {
-        throw new Error(
-          `Multiple flows found. Use --flow to specify which flow contains the example.
-Available flows: ${flowNames.join(", ")}`
-        );
-      }
-    }
-    const flowSettings = setup.flows[flowName];
-    if (!flowSettings) {
-      throw new Error(
-        `Flow "${flowName}" not found. Available: ${flowNames.join(", ")}`
-      );
-    }
-    const found = findExample(flowSettings, options.example, options.step);
-    if (found.example.in === void 0) {
-      throw new Error(
-        `Example "${options.example}" in ${found.stepType}.${found.stepName} has no "in" value`
-      );
-    }
-    resolvedEvent = found.example.in;
-    exampleContext = {
-      stepType: found.stepType,
-      stepName: found.stepName,
-      expected: found.example.out
-    };
-  }
-  const isSourceSimulation = exampleContext?.stepType === "source" || options.step?.startsWith("source.");
+  const isSourceSimulation = options.step?.startsWith("source.");
   let result;
   if (isSourceSimulation) {
     const rawConfig = await loadJsonConfig(configOrPath);
@@ -3603,7 +3598,7 @@ Available: ${flowNames.join(", ")}`
         `Flow "${flowName}" not found. Available: ${flowNames.join(", ")}`
       );
     }
-    const sourceStep = exampleContext?.stepName || options.step.substring("source.".length);
+    const sourceStep = options.step.substring("source.".length);
     result = await simulateSourceCLI(
       flowSettings,
       resolvedEvent,
@@ -3616,38 +3611,15 @@ Available: ${flowNames.join(", ")}`
       }
     );
   } else {
-    const stepTarget = exampleContext ? `${exampleContext.stepType}.${exampleContext.stepName}` : options.step;
     result = await simulateCore(configOrPath, resolvedEvent, {
       json: options.json ?? false,
       verbose: options.verbose ?? false,
       silent: options.silent ?? false,
       flow: options.flow,
       platform: options.platform,
-      step: stepTarget
+      step: options.step
     });
   }
-  if (exampleContext && result.success) {
-    const stepKey = `${exampleContext.stepType}.${exampleContext.stepName}`;
-    if (exampleContext.expected === false) {
-      const calls = result.usage?.[exampleContext.stepName];
-      const wasFiltered = !calls || calls.length === 0;
-      result.exampleMatch = {
-        name: options.example,
-        step: stepKey,
-        expected: false,
-        actual: wasFiltered ? false : calls,
-        match: wasFiltered,
-        diff: wasFiltered ? void 0 : `Expected event to be filtered, but ${calls.length} API call(s) were made`
-      };
-    } else if (exampleContext.expected !== void 0) {
-      const actual = result.usage?.[exampleContext.stepName] ?? [];
-      result.exampleMatch = {
-        name: options.example,
-        step: stepKey,
-        ...compareOutput(exampleContext.expected, actual)
-      };
-    }
-  }
   return result;
 }
 
@@ -3658,7 +3630,7 @@ init_tmp();
 init_config();
 init_bundler();
 import path12 from "path";
-import { JSDOM as JSDOM2, VirtualConsole as VirtualConsole2 } from "jsdom";
+import { JSDOM, VirtualConsole } from "jsdom";
 import fs13 from "fs-extra";
 import { getPlatform as getPlatform3 } from "@walkeros/core";
 import { schemas as schemas2 } from "@walkeros/core/dev";
@@ -3889,8 +3861,8 @@ async function executeBundlePush(bundleContent, platform, validatedEvent, logger
 async function executeWebPush(bundlePath, event, logger) {
   const startTime = Date.now();
   try {
-    const virtualConsole = new VirtualConsole2();
-    const dom = new JSDOM2("<!DOCTYPE html><html><body></body></html>", {
+    const virtualConsole = new VirtualConsole();
+    const dom = new JSDOM("<!DOCTYPE html><html><body></body></html>", {
       url: "http://localhost",
       runScripts: "dangerously",
       resources: "usable",
@@ -3998,19 +3970,29 @@ init_core();
 init_config_file();
 init_auth();
 import path14 from "path";
-import { createRequire } from "module";
 import { writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join4 } from "path";
 
 // src/runtime/resolve-bundle.ts
 init_stdin();
-import { existsSync as existsSync3, writeFileSync as writeFileSync2 } from "fs";
-var TEMP_BUNDLE_PATH = "/tmp/walkeros-bundle.mjs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
+import { dirname } from "path";
+function getDefaultWritePath() {
+  if (existsSync3("/app/flow")) return "/app/flow/bundle.mjs";
+  return "/tmp/walkeros-bundle.mjs";
+}
 function isUrl2(value) {
   return value.startsWith("http://") || value.startsWith("https://");
 }
-async function fetchBundle(url) {
+function writeBundleToDisk(writePath, content) {
+  const dir = dirname(writePath);
+  if (!existsSync3(dir)) {
+    mkdirSync2(dir, { recursive: true });
+  }
+  writeFileSync2(writePath, content, "utf-8");
+}
+async function fetchBundle(url, writePath) {
   const response = await fetch(url, { signal: AbortSignal.timeout(3e4) });
   if (!response.ok) {
     throw new Error(
@@ -4021,38 +4003,38 @@ async function fetchBundle(url) {
   if (!content.trim()) {
     throw new Error(`Bundle fetched from ${url} is empty`);
   }
-  writeFileSync2(TEMP_BUNDLE_PATH, content, "utf-8");
-  return TEMP_BUNDLE_PATH;
+  writeBundleToDisk(writePath, content);
+  return writePath;
 }
-async function readBundleFromStdin() {
+async function readBundleFromStdin(writePath) {
   const content = await readStdin();
-  writeFileSync2(TEMP_BUNDLE_PATH, content, "utf-8");
-  return TEMP_BUNDLE_PATH;
+  writeBundleToDisk(writePath, content);
+  return writePath;
 }
 async function resolveBundle(bundleEnv) {
+  const writePath = getDefaultWritePath();
   if (!isUrl2(bundleEnv) && existsSync3(bundleEnv)) {
     return { path: bundleEnv, source: "file" };
   }
-  if (isStdinPiped()) {
-    const path15 = await readBundleFromStdin();
-    return { path: path15, source: "stdin" };
-  }
   if (isUrl2(bundleEnv)) {
-    const path15 = await fetchBundle(bundleEnv);
+    const path15 = await fetchBundle(bundleEnv, writePath);
     return { path: path15, source: "url" };
   }
+  if (isStdinPiped()) {
+    const path15 = await readBundleFromStdin(writePath);
+    return { path: path15, source: "stdin" };
+  }
   return { path: bundleEnv, source: "file" };
 }
 
 // src/runtime/config-fetcher.ts
+init_http();
 async function fetchConfig(options) {
   const url = `${options.appUrl}/api/projects/${options.projectId}/flows/${options.flowId}`;
-  const headers = {
-    Authorization: `Bearer ${options.token}`
-  };
-  if (options.lastEtag) {
-    headers["If-None-Match"] = options.lastEtag;
-  }
+  const headers = mergeAuthHeaders(
+    options.token,
+    options.lastEtag ? { "If-None-Match": options.lastEtag } : void 0
+  );
   const response = await fetch(url, {
     headers,
     signal: AbortSignal.timeout(3e4)
@@ -4131,7 +4113,7 @@ var BundleOptionsSchema = z5.object({
 });
 var BundleInputShape = {
   configPath: FilePathSchema.describe(
-    "Path to flow configuration file (JSON or JavaScript)"
+    "Path to flow configuration file (JSON or JavaScript), URL, or inline JSON string"
   ),
   flow: z5.string().optional().describe("Flow name for multi-flow configs"),
   stats: z5.boolean().optional().default(true).describe("Return bundle statistics"),
@@ -4148,17 +4130,16 @@ var SimulateOptionsSchema = z6.object({
   json: z6.boolean().optional().describe("Format output as JSON")
 });
 var SimulateInputShape = {
-  configPath: FilePathSchema.describe("Path to flow configuration file"),
+  configPath: FilePathSchema.describe(
+    "Path to flow configuration file, URL, or inline JSON string"
+  ),
   event: z6.string().min(1).optional().describe(
-    "Event as JSON string, file path, or URL. Optional when example is provided."
+    "Event as JSON string, file path, or URL. For sources: { content, trigger?, env? }."
   ),
   flow: z6.string().optional().describe("Flow name for multi-flow configs"),
   platform: PlatformSchema.optional().describe("Override platform detection"),
-  example: z6.string().optional().describe(
-    'Name of a step example to use as event input (uses its "in" value)'
-  ),
   step: z6.string().optional().describe(
-    'Step target in type.name format (e.g. "destination.gtag") to narrow example lookup'
+    'Step target in type.name format (e.g. "source.browser", "destination.gtag")'
   )
 };
 var SimulateInputSchema = z6.object(SimulateInputShape);
@@ -4253,10 +4234,10 @@ function createHealthServer(port, logger) {
 
 // src/runtime/runner.ts
 import { pathToFileURL } from "url";
-import { resolve, dirname } from "path";
+import { resolve, dirname as dirname2 } from "path";
 async function loadFlow(file, config, logger, loggerConfig, healthServer) {
   const absolutePath = resolve(file);
-  const flowDir = dirname(absolutePath);
+  const flowDir = dirname2(absolutePath);
   process.chdir(flowDir);
   const fileUrl = pathToFileURL(absolutePath).href;
   const module = await import(`${fileUrl}?t=${Date.now()}`);
@@ -4315,9 +4296,9 @@ import { randomBytes } from "crypto";
 // src/version.ts
 import { readFileSync as readFileSync3 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { dirname as dirname2, join as join3 } from "path";
+import { dirname as dirname3, join as join3 } from "path";
 var versionFilename = fileURLToPath2(import.meta.url);
-var versionDirname = dirname2(versionFilename);
+var versionDirname = dirname3(versionFilename);
 function findPackageJson() {
   const paths = [
     join3(versionDirname, "../package.json"),
@@ -4336,6 +4317,7 @@ function findPackageJson() {
 var VERSION = JSON.parse(findPackageJson()).version;
 
 // src/runtime/heartbeat.ts
+init_http();
 function computeCounterDelta(current, last) {
   const destinations = {};
   for (const [name, dest] of Object.entries(current.destinations)) {
@@ -4357,6 +4339,17 @@ function computeCounterDelta(current, last) {
     destinations
   };
 }
+function snapshotDestinations(destinations) {
+  const result = {};
+  for (const [name, dest] of Object.entries(destinations)) {
+    result[name] = {
+      count: dest.count,
+      failed: dest.failed,
+      duration: dest.duration
+    };
+  }
+  return result;
+}
 var instanceId = randomBytes(8).toString("hex");
 function getInstanceId() {
   return instanceId;
@@ -4374,13 +4367,14 @@ function createHeartbeat(config, logger) {
   async function sendOnce() {
     try {
       let counters;
+      let current;
       const status = config.getCounters?.();
       if (status) {
-        const current = {
+        current = {
           in: status.in,
           out: status.out,
           failed: status.failed,
-          destinations: { ...status.destinations }
+          destinations: snapshotDestinations(status.destinations)
         };
         counters = computeCounterDelta(current, lastReported);
       }
@@ -4388,10 +4382,9 @@ function createHeartbeat(config, logger) {
         `${config.appUrl}/api/projects/${config.projectId}/runners/heartbeat`,
         {
           method: "POST",
-          headers: {
-            Authorization: `Bearer ${config.token}`,
+          headers: mergeAuthHeaders(config.token, {
             "Content-Type": "application/json"
-          },
+          }),
           body: JSON.stringify({
             instanceId,
             flowId: config.flowId,
@@ -4406,13 +4399,8 @@ function createHeartbeat(config, logger) {
           signal: AbortSignal.timeout(1e4)
         }
       );
-      if (response.ok && status) {
-        lastReported = {
-          in: status.in,
-          out: status.out,
-          failed: status.failed,
-          destinations: { ...status.destinations }
-        };
+      if (response.ok && counters && current) {
+        lastReported = current;
       }
       if (response.status === 401 || response.status === 403) {
         logger.error(
@@ -4482,6 +4470,7 @@ function createPoller(config, logger) {
 }
 
 // src/runtime/secrets-fetcher.ts
+init_http();
 var SecretsHttpError = class extends Error {
   constructor(status, statusText) {
     super(`Failed to fetch secrets: ${status} ${statusText}`);
@@ -4493,10 +4482,7 @@ async function fetchSecrets(options) {
   const { appUrl, token, projectId, flowId } = options;
   const url = `${appUrl}/api/projects/${encodeURIComponent(projectId)}/flows/${encodeURIComponent(flowId)}/secrets/values`;
   const res = await fetch(url, {
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json"
-    }
+    headers: mergeAuthHeaders(token, { "Content-Type": "application/json" })
   });
   if (!res.ok) {
     throw new SecretsHttpError(res.status, res.statusText);
@@ -4541,6 +4527,7 @@ async function runPipeline(options) {
         token: api.token,
         projectId: api.projectId,
         flowId: api.flowId,
+        deploymentId: api.deploymentId,
         configVersion,
         intervalMs: api.heartbeatIntervalMs,
         getCounters: () => handle.collector.status
@@ -4653,7 +4640,6 @@ async function injectSecrets(api, logger) {
 }
 
 // src/commands/run/index.ts
-var esmRequire = createRequire(import.meta.url);
 function defaultCacheDir() {
   const xdgCache = process.env.XDG_CACHE_HOME;
   const base = xdgCache || join4(homedir2(), ".cache");
@@ -4672,19 +4658,6 @@ async function runCommand(options) {
     if (options.port !== void 0) {
       validatePort(options.port);
     }
-    const runtimeDeps = ["express", "cors"];
-    for (const dep of runtimeDeps) {
-      try {
-        esmRequire.resolve(dep);
-      } catch {
-        logger.error(
-          `Missing runtime dependency "${dep}"
-Server flows require express and cors when running outside Docker.
-Run: npm install express cors`
-        );
-        process.exit(1);
-      }
-    }
     const flowId = options.flowId;
     const projectId = options.project;
     const token = resolveRunToken();
@@ -4719,6 +4692,7 @@ Run: npm install express cors`
         token,
         projectId,
         flowId,
+        deploymentId: options.deploymentId,
         heartbeatIntervalMs: parseInt(
           process.env.WALKEROS_HEARTBEAT_INTERVAL ?? process.env.HEARTBEAT_INTERVAL ?? "60",
           10
@@ -5868,6 +5842,30 @@ async function deleteProjectCommand(projectId, options) {
 
 // src/commands/flows/index.ts
 init_api_client();
+
+// src/core/api-error.ts
+var ApiError = class extends Error {
+  code;
+  details;
+  constructor(message, options) {
+    super(message);
+    this.name = "ApiError";
+    this.code = options?.code;
+    this.details = options?.details;
+  }
+};
+function throwApiError(error, fallbackMessage) {
+  if (error && typeof error === "object" && "error" in error && typeof error.error === "object") {
+    const inner = error.error;
+    const message = inner.message || fallbackMessage;
+    const code = inner.code;
+    const details = inner.details?.errors;
+    throw new ApiError(message, { code, details });
+  }
+  throw new ApiError(fallbackMessage);
+}
+
+// src/commands/flows/index.ts
 init_auth();
 init_cli_logger();
 init_output();
@@ -5885,7 +5883,7 @@ async function listFlows(options = {}) {
       }
     }
   });
-  if (error) throw new Error(error.error?.message || "Failed to list flows");
+  if (error) throwApiError(error, "Failed to list flows");
   return data;
 }
 async function getFlow(options) {
@@ -5900,7 +5898,7 @@ async function getFlow(options) {
       }
     }
   );
-  if (error) throw new Error(error.error?.message || "Failed to get flow");
+  if (error) throwApiError(error, "Failed to get flow");
   return data;
 }
 async function createFlow(options) {
@@ -5911,7 +5909,7 @@ async function createFlow(options) {
     // Config is user-provided JSON; server validates the full schema
     body: { name: options.name, config: options.content }
   });
-  if (error) throw new Error(error.error?.message || "Failed to create flow");
+  if (error) throwApiError(error, "Failed to create flow");
   return data;
 }
 async function updateFlow(options) {
@@ -5931,7 +5929,7 @@ async function updateFlow(options) {
       }
     }
   );
-  if (error) throw new Error(error.error?.message || "Failed to update flow");
+  if (error) throwApiError(error, "Failed to update flow");
   return data;
 }
 async function deleteFlow(options) {
@@ -5943,7 +5941,7 @@ async function deleteFlow(options) {
       params: { path: { projectId: id, flowId: options.flowId } }
     }
   );
-  if (error) throw new Error(error.error?.message || "Failed to delete flow");
+  if (error) throwApiError(error, "Failed to delete flow");
   return data ?? { success: true };
 }
 async function duplicateFlow(options) {
@@ -5956,8 +5954,7 @@ async function duplicateFlow(options) {
       body: { name: options.name }
     }
   );
-  if (error)
-    throw new Error(error.error?.message || "Failed to duplicate flow");
+  if (error) throwApiError(error, "Failed to duplicate flow");
   return data;
 }
 async function handleResult2(fn2, options) {
@@ -6028,6 +6025,7 @@ async function readFlowStdin() {
 // src/commands/deploy/index.ts
 init_api_client();
 init_auth();
+init_http();
 init_sse();
 init_cli_logger();
 init_output();
@@ -6057,10 +6055,9 @@ async function getAvailableFlowNames(options) {
   return settings?.map((c2) => c2.name) ?? [];
 }
 async function streamDeploymentStatus(projectId, deploymentId, options) {
-  const base = resolveBaseUrl();
   const timeoutMs = options.timeout ?? 12e4;
-  const response = await authenticatedFetch(
-    `${base}/api/projects/${projectId}/deployments/${deploymentId}/stream`,
+  const response = await apiFetch(
+    `/api/projects/${projectId}/deployments/${deploymentId}/stream`,
     {
       headers: { Accept: "text/event-stream" },
       signal: options.signal ?? AbortSignal.timeout(timeoutMs)
@@ -6120,19 +6117,22 @@ async function deploy(options) {
     { params: { path: { projectId, flowId: options.flowId } } }
   );
   if (error) {
-    const msg = error.error?.message || "Failed to start deployment";
-    const code = error.error?.code;
-    if (code === "AMBIGUOUS_CONFIG") {
-      const names = await getAvailableFlowNames({
-        flowId: options.flowId,
-        projectId
-      });
-      throw new Error(
-        `This flow has multiple settings. Use --flow <name> to specify one.
-Available: ${names.join(", ")}`
-      );
+    try {
+      throwApiError(error, "Failed to start deployment");
+    } catch (e2) {
+      if (e2 instanceof ApiError && e2.code === "AMBIGUOUS_CONFIG") {
+        const names = await getAvailableFlowNames({
+          flowId: options.flowId,
+          projectId
+        });
+        throw new ApiError(
+          `This flow has multiple settings. Use --flow <name> to specify one.
+Available: ${names.join(", ")}`,
+          { code: "AMBIGUOUS_CONFIG" }
+        );
+      }
+      throw e2;
     }
-    throw new Error(msg);
   }
   if (!options.wait) return data;
   const result = await streamDeploymentStatus(projectId, data.deploymentId, {
@@ -6144,16 +6144,13 @@ Available: ${names.join(", ")}`
 }
 async function deploySettings(options) {
   const { flowId, projectId, settingsId } = options;
-  const base = resolveBaseUrl();
-  const response = await authenticatedFetch(
-    `${base}/api/projects/${projectId}/flows/${flowId}/settings/${settingsId}/deploy`,
+  const response = await apiFetch(
+    `/api/projects/${projectId}/flows/${flowId}/settings/${settingsId}/deploy`,
     { method: "POST" }
   );
   if (!response.ok) {
     const body = await response.json().catch(() => ({}));
-    throw new Error(
-      body.error?.message || `Deploy failed (${response.status})`
-    );
+    throwApiError(body, `Deploy failed (${response.status})`);
   }
   const data = await response.json();
   if (!options.wait) return data;
@@ -6172,13 +6169,12 @@ async function getDeployment(options) {
       projectId,
       flowName: options.flowName
     });
-    const base = resolveBaseUrl();
-    const response = await authenticatedFetch(
-      `${base}/api/projects/${projectId}/flows/${options.flowId}/settings/${settingsId}/deploy`
+    const response = await apiFetch(
+      `/api/projects/${projectId}/flows/${options.flowId}/settings/${settingsId}/deploy`
     );
     if (!response.ok) {
       const body = await response.json().catch(() => ({}));
-      throw new Error(body.error?.message || "Failed to get deployment");
+      throwApiError(body, "Failed to get deployment");
     }
     return response.json();
   }
@@ -6187,8 +6183,7 @@ async function getDeployment(options) {
     "/api/projects/{projectId}/flows/{flowId}/deploy",
     { params: { path: { projectId, flowId: options.flowId } } }
   );
-  if (error)
-    throw new Error(error.error?.message || "Failed to get deployment");
+  if (error) throwApiError(error, "Failed to get deployment");
   return data;
 }
 var statusLabels = {
@@ -6272,73 +6267,59 @@ async function getDeploymentCommand(flowId, options) {
 
 // src/commands/deployments/index.ts
 init_auth();
+init_http();
+import { getPlatform as getPlatform4 } from "@walkeros/core";
 init_cli_logger();
 init_output();
 init_loader();
-import { getPlatform as getPlatform4 } from "@walkeros/core";
 async function listDeployments(options = {}) {
   const id = options.projectId ?? requireProjectId();
-  const base = resolveBaseUrl();
   const params = new URLSearchParams();
   if (options.type) params.set("type", options.type);
   if (options.status) params.set("status", options.status);
   const qs = params.toString();
-  const response = await authenticatedFetch(
-    `${base}/api/projects/${id}/deployments${qs ? `?${qs}` : ""}`
+  const response = await apiFetch(
+    `/api/projects/${id}/deployments${qs ? `?${qs}` : ""}`
   );
   if (!response.ok) {
     const body = await response.json().catch(() => ({}));
-    throw new Error(
-      body.error?.message || "Failed to list deployments"
-    );
+    throwApiError(body, "Failed to list deployments");
   }
   return response.json();
 }
 async function getDeploymentBySlug(options) {
   const id = options.projectId ?? requireProjectId();
-  const base = resolveBaseUrl();
-  const response = await authenticatedFetch(
-    `${base}/api/projects/${id}/deployments/${options.slug}`
+  const response = await apiFetch(
+    `/api/projects/${id}/deployments/${options.slug}`
   );
   if (!response.ok) {
     const body = await response.json().catch(() => ({}));
-    throw new Error(
-      body.error?.message || "Failed to get deployment"
-    );
+    throwApiError(body, "Failed to get deployment");
   }
   return response.json();
 }
 async function createDeployment(options) {
   const id = options.projectId ?? requireProjectId();
-  const base = resolveBaseUrl();
-  const response = await authenticatedFetch(
-    `${base}/api/projects/${id}/deployments`,
-    {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ type: options.type, label: options.label })
-    }
-  );
+  const response = await apiFetch(`/api/projects/${id}/deployments`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ type: options.type, label: options.label })
+  });
   if (!response.ok) {
     const body = await response.json().catch(() => ({}));
-    throw new Error(
-      body.error?.message || "Failed to create deployment"
-    );
+    throwApiError(body, "Failed to create deployment");
   }
   return response.json();
 }
 async function deleteDeployment(options) {
   const id = options.projectId ?? requireProjectId();
-  const base = resolveBaseUrl();
-  const response = await authenticatedFetch(
-    `${base}/api/projects/${id}/deployments/${options.slug}`,
+  const response = await apiFetch(
+    `/api/projects/${id}/deployments/${options.slug}`,
     { method: "DELETE" }
   );
   if (!response.ok) {
     const body = await response.json().catch(() => ({}));
-    throw new Error(
-      body.error?.message || "Failed to delete deployment"
-    );
+    throwApiError(body, "Failed to delete deployment");
   }
   const data = await response.json().catch(() => null);
   return data ?? { success: true };
@@ -6398,15 +6379,10 @@ async function createDeployCommand(config, options) {
     const isRemoteFlow = config.startsWith("cfg_");
     if (isRemoteFlow) {
       const id = options.project ?? requireProjectId();
-      const base = resolveBaseUrl();
-      const resp = await authenticatedFetch(
-        `${base}/api/projects/${id}/flows/${config}`
-      );
+      const resp = await apiFetch(`/api/projects/${id}/flows/${config}`);
       if (!resp.ok) {
         const body = await resp.json().catch(() => ({}));
-        throw new Error(
-          body.error?.message || `Failed to fetch flow ${config}`
-        );
+        throwApiError(body, `Failed to fetch flow ${config}`);
       }
       const flow = await resp.json();
       if (!flow.config) throw new Error("Flow has no config");
@@ -6466,12 +6442,16 @@ async function createDeployCommand(config, options) {
 
 // src/commands/feedback/index.ts
 init_config_file();
+init_http();
 init_cli_logger();
 import { createInterface } from "readline";
 async function feedback(text, options) {
   const config = readConfig();
   const anonymous = options?.anonymous ?? config?.anonymousFeedback ?? true;
   const payload = { text };
+  if (options?.version) {
+    payload.version = options.version;
+  }
   if (!anonymous && config?.email) {
     payload.userId = config.email;
     const projectId = process.env.WALKEROS_PROJECT_ID;
@@ -6479,8 +6459,7 @@ async function feedback(text, options) {
       payload.projectId = projectId;
     }
   }
-  const appUrl = resolveAppUrl();
-  const response = await fetch(`${appUrl}/api/feedback`, {
+  const response = await publicFetch("/api/feedback", {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(payload)
@@ -6538,11 +6517,14 @@ function promptUser(question) {
 // src/index.ts
 init_bundle();
 init_auth();
+init_http();
 init_api_client();
 init_config_file();
 init_sse();
 init_utils();
 export {
+  ApiError,
+  apiFetch,
   bundle,
   bundleCommand,
   bundleRemote,
@@ -6562,8 +6544,8 @@ export {
   deleteProject,
   deleteProjectCommand,
   deploy,
-  deployAuthenticatedFetch,
   deployCommand,
+  deployFetch,
   duplicateFlow,
   duplicateFlowCommand,
   feedback,
@@ -6588,16 +6570,18 @@ export {
   loadJsonConfig,
   loginCommand,
   logoutCommand,
+  mergeAuthHeaders,
   parseSSEEvents,
+  publicFetch,
   push,
   pushCommand,
   readConfig,
   requireProjectId,
-  resolveBaseUrl,
   run,
   runCommand,
   simulate,
   simulateCommand,
+  throwApiError,
   updateFlow,
   updateFlowCommand,
   updateProject,