@walkeros/cli 4.2.2-next-1782236179392 → 4.2.2-next-1782892388850

package/CHANGELOG.md

@@ -1,14 +1,17 @@
 # @walkeros/cli
 
-## 4.2.2-next-1782236179392
+## 4.2.2-next-1782892388850
 
 ### Patch Changes
 
-- @walkeros/collector@4.2.2-next-1782236179392
-- @walkeros/core@4.2.2-next-1782236179392
-- @walkeros/server-core@4.2.2-next-1782236179392
-- @walkeros/server-destination-api@4.2.2-next-1782236179392
-- @walkeros/transformer-validate@4.2.2-next-1782236179392
+- 06c93b4: Update the runtime Docker base image to Node.js 22.23.0, which
+  patches the Node.js June 2026 security release. The `walkeros/flow` and
+  `walkeros/cli` images now pin a fixed, digest-locked Node version.
+  - @walkeros/collector@4.2.2-next-1782892388850
+  - @walkeros/core@4.2.2-next-1782892388850
+  - @walkeros/server-core@4.2.2-next-1782892388850
+  - @walkeros/server-destination-api@4.2.2-next-1782892388850
+  - @walkeros/transformer-validate@4.2.2-next-1782892388850
 
 ## 4.2.1
 

package/dist/cli.js

@@ -1931,11 +1931,11 @@ function F2(e4) {
 function ji(e4, t4) {
   void 0 !== e4.import && (void 0 !== e4.code && t4.addIssue({ code: "custom", message: "`import` cannot be combined with inline `code`", path: ["import"] }), void 0 === e4.package && t4.addIssue({ code: "custom", message: "`import` requires `package`", path: ["import"] }));
 }
-function Ai(e4) {
-  return zi.parse(e4);
+function zi(e4) {
+  return Ai.parse(e4);
 }
 function Li(e4) {
-  return zi.safeParse(e4);
+  return Ai.safeParse(e4);
 }
 function qi(e4) {
   return $i.parse(e4);
@@ -2040,7 +2040,7 @@ function mn2(e4, t4) {
     })(t5, e4);
     return { valid: false, errors: [{ message: t5 instanceof Error ? t5.message : "Invalid JSON", severity: "error", line: i5, column: n6 }], warnings: [] };
   }
-  const n5 = [], o4 = [], r5 = zi.safeParse(i4);
+  const n5 = [], o4 = [], r5 = Ai.safeParse(i4);
   if (!r5.success) for (const t5 of r5.error.issues) {
     const i5 = t5.path.join("."), o5 = En(e4, t5.path);
     n5.push({ message: t5.message, severity: "error", path: i5 || "root", ...o5 });
@@ -2248,21 +2248,21 @@ function Fn(e4, t4 = "string", i4) {
 function $n(e4, t4, i4) {
   return Tn({ type: "object" }, { minItems: 2, maxItems: 2, description: i4 || "Tuple with exactly 2 elements [source, transform]" });
 }
-function zn(e4) {
+function An(e4) {
   const t4 = n3.toJSONSchema(e4, { target: "draft-7" });
-  return An(t4), t4;
+  return zn(t4), t4;
 }
-function An(e4) {
+function zn(e4) {
   const t4 = e4.properties;
   if (t4 && "object" == typeof t4) {
     Array.isArray(e4.required) && (e4.required = e4.required.filter((e5) => {
       const i4 = t4[e5];
       return !(i4 && "object" == typeof i4 && "default" in i4);
     }));
-    for (const [e5, i4] of Object.entries(t4)) i4 && "object" == typeof i4 && ("object" === i4.type && i4.properties && "string" != typeof i4.title && (i4.title = e5), An(i4));
+    for (const [e5, i4] of Object.entries(t4)) i4 && "object" == typeof i4 && ("object" === i4.type && i4.properties && "string" != typeof i4.title && (i4.title = e5), zn(i4));
   }
 }
-var e3, t3, i2, r3, a3, s4, c, l2, d, p, u, m2, f2, g2, h2, b2, v2, S, y, w2, k2, C2, x, j2, P3, D2, E2, O, I2, J2, $, z3, A, L3, q2, N2, W2, B3, U3, _2, H2, V2, Z2, G3, K, Q2, X2, Y2, ee2, te2, ie, ne2, oe2, re2, ae2, se2, ce, le2, de2, pe2, ue2, me2, fe, ge2, he2, be2, ve2, Se3, ye2, we2, ke2, Ce, xe2, je3, Pe2, De3, Ee3, Oe3, Ie3, Je3, Re3, Me3, Te2, Fe3, $e2, ze2, Ae2, Le3, qe3, Ne3, We3, Be3, Ue2, _e3, He2, Ve3, Ze3, Ge3, Ke3, Qe3, Xe3, Ye3, et2, tt2, it2, nt2, ot2, rt2, at2, st2, ct3, lt2, dt3, pt3, ut3, mt3, ft2, gt2, ht3, bt3, vt3, St, yt3, wt3, kt2, Ct2, xt, jt2, Pt3, Dt3, Et2, Ot2, It2, Jt2, Rt, Mt2, Tt2, Ft2, $t2, zt2, At2, Lt2, qt2, Nt, Wt2, Bt2, Ut, _t, Ht2, Vt2, Zt2, Gt3, Kt2, Qt2, Xt, Yt2, ei, ti, ii, ni, oi, ri, ai, si, ci, li, di, pi, ui, mi, fi, gi, hi, bi, vi, Si, yi, wi, ki, Ci, xi, Pi, Di, Ei, Oi, Ii, Ji, Ri, Mi, Ti, Fi, $i, zi, Wi, Bi, Ui, _i, Hi, Vi, Zi, Gi, Ki, Qi, Yi, en2, tn2, nn2, on2, rn3, an2, cn2, fn2, gn2, hn2, bn2, vn2, Sn, yn2, wn, qn;
+var e3, t3, i2, r3, a3, s4, c, l2, d, p, u, m2, f2, g2, h2, b2, v2, S, y, w2, k2, C2, x, j2, P3, D2, E2, O, I2, J2, $, A, z3, L3, q2, N2, W2, B3, U3, _2, H2, V2, Z2, G3, K, Q2, X2, Y2, ee2, te2, ie, ne2, oe2, re2, ae2, se2, ce, le2, de2, pe2, ue2, me2, fe, ge2, he2, be2, ve2, Se3, ye2, we2, ke2, Ce, xe2, je3, Pe2, De3, Ee3, Oe3, Ie3, Je3, Re3, Me3, Te2, Fe3, $e2, Ae2, ze2, Le3, qe3, Ne3, We3, Be3, Ue2, _e3, He2, Ve3, Ze3, Ge3, Ke3, Qe3, Xe3, Ye3, et2, tt2, it2, nt2, ot2, rt2, at2, st2, ct3, lt2, dt3, pt3, ut3, mt3, ft2, gt2, ht3, bt3, vt3, St, yt3, wt3, kt2, Ct2, xt, jt2, Pt3, Dt3, Et2, Ot2, It2, Jt2, Rt, Mt2, Tt2, Ft2, $t2, At2, zt2, Lt2, qt2, Nt, Wt2, Bt2, Ut, _t, Ht2, Vt2, Zt2, Gt3, Kt2, Qt2, Xt, Yt2, ei, ti, ii, ni, oi, ri, ai, si, ci, li, di, pi, ui, mi, fi, gi, hi, bi, vi, Si, yi, wi, ki, Ci, xi, Pi, Di, Ei, Oi, Ii, Ji, Ri, Mi, Ti, Fi, $i, Ai, Wi, Bi, Ui, _i, Hi, Vi, Zi, Gi, Ki, Qi, Yi, en2, tn2, nn2, on2, rn3, an2, cn2, fn2, gn2, hn2, bn2, vn2, Sn, yn2, wn, qn;
 var init_dev = __esm({
   "../core/dist/dev.mjs"() {
     "use strict";
@@ -2271,7 +2271,7 @@ var init_dev = __esm({
       for (var n5 in i4) e3(t4, n5, { get: i4[n5], enumerable: true });
     };
     i2 = {};
-    t3(i2, { BaseContextConfig: () => z3, CacheRuleSchema: () => Xe3, CacheSchema: () => Ye3, CacheSchemas: () => Ve3, ClickIdEntrySchema: () => nn2, CodeSchema: () => Yi, CollectorSchemas: () => Et2, ConsentSchema: () => Z2, ContractActionsSchema: () => Ji, ContractRuleSchema: () => Mi, ContractSchema: () => Ti, ContractSchemaEntry: () => Ii, Counter: () => d, CredentialsSchema: () => rn3, DeepPartialEventSchema: () => te2, DestinationSchemas: () => Re3, DestinationsMapConfig: () => q2, EntitiesSchema: () => X2, EntitySchema: () => Q2, EventCacheRuleSchema: () => Ze3, EventCacheSchema: () => Ge3, EventSchema: () => Y2, FlowBundlePackageSchema: () => bi, FlowBundleSchema: () => vi, FlowCodeSchema: () => Si, FlowConfigSchema: () => Fi, FlowDestinationSchema: () => Ei, FlowJsonSchema: () => zi, FlowSchema: () => $i, FlowSchemas: () => mi, FlowSourceSchema: () => Pi, FlowStoreSchema: () => Oi, FlowTransformerSchema: () => Di, GenericEnvConfig: () => J2, GenericSettingsConfig: () => I2, HandlersConfig: () => x, HintSchema: () => en2, HintsSchema: () => tn2, IdConfig: () => D2, Identifier: () => c, InitConfig: () => E2, LoggerConfigSchema: () => it2, LoggerHandlerSchema: () => tt2, LoopSchema: () => me2, MapSchema: () => ge2, MappingResultSchema: () => ke2, MappingSchemas: () => de2, MatchExpressionSchema: () => $e2, MatcherSchemas: () => Me3, OptionalPrimitiveValue: () => u, OrderedPropertiesSchema: () => H2, PartialEventSchema: () => ee2, PolicySchema: () => be2, PrimaryConfig: () => O, PrimitiveValue: () => p, ProcessingControlConfig: () => A, PropertiesSchema: () => _2, PropertySchema: () => U3, PropertyTypeSchema: () => B3, QueueConfig: () => P3, RequiredBoolean: () => s4, RequiredNumber: () => a3, RequiredString: () => r3, RouteSchema: () => We3, RouteWithoutManySchema: () => He2, RuleSchema: () => Se3, RulesSchema: () => ye2, RuntimeInstanceConfig: () => $, ServiceAccountSchema: () => on2, SetSchema: () => fe, SourceSchema: () => K, SourceSchemas: () => Bt2, SourceTypeSchema: () => V2, SourcesMapConfig: () => L3, StateSchema: () => et2, StoreCacheRuleSchema: () => Ke3, StoreCacheSchema: () => Qe3, StoreSchemas: () => ci, Timestamp: () => l2, TransformerSchemas: () => ni, UserSchema: () => G3, UtilitySchemas: () => m2, ValidateEventsSchema: () => xi, ValueConfigSchema: () => he2, ValueSchema: () => pe2, ValuesSchema: () => ue2, VerboseConfig: () => j2, WalkerOSSchemas: () => N2, configJsonSchema: () => Wi, consentJsonSchema: () => le2, contractJsonSchema: () => Ki, contractRuleJsonSchema: () => Gi, createArraySchema: () => Tn, createConsentConfig: () => F2, createDataTransformationConfig: () => R3, createEnumSchema: () => Fn, createMappingRulesConfig: () => M2, createObjectSchema: () => Rn, createPolicyConfig: () => T, createTupleSchema: () => $n, credentialsJsonSchema: () => an2, destinationJsonSchema: () => Hi, entityJsonSchema: () => se2, eventJsonSchema: () => ie, flowConfigJsonSchema: () => Ui, flowJsonSchema: () => Bi, loopJsonSchema: () => je3, mapJsonSchema: () => De3, orderedPropertiesJsonSchema: () => ae2, parseConfig: () => Ai, parseFlow: () => qi, partialEventJsonSchema: () => ne2, policyJsonSchema: () => Ee3, propertiesJsonSchema: () => re2, ruleJsonSchema: () => Oe3, rulesJsonSchema: () => Ie3, safeParseConfig: () => Li, safeParseFlow: () => Ni, setJsonSchema: () => Pe2, sourceJsonSchema: () => _i, sourceTypeJsonSchema: () => ce, storeJsonSchema: () => Zi, transformerJsonSchema: () => Vi, userJsonSchema: () => oe2, validateEventsJsonSchema: () => Qi, validateFlowConfig: () => mn2, valueConfigJsonSchema: () => xe2, valueJsonSchema: () => Ce, z: () => n3, zodToSchema: () => zn });
+    t3(i2, { BaseContextConfig: () => A, CacheRuleSchema: () => Xe3, CacheSchema: () => Ye3, CacheSchemas: () => Ve3, ClickIdEntrySchema: () => nn2, CodeSchema: () => Yi, CollectorSchemas: () => Et2, ConsentSchema: () => Z2, ContractActionsSchema: () => Ji, ContractRuleSchema: () => Mi, ContractSchema: () => Ti, ContractSchemaEntry: () => Ii, Counter: () => d, CredentialsSchema: () => rn3, DeepPartialEventSchema: () => te2, DestinationSchemas: () => Re3, DestinationsMapConfig: () => q2, EntitiesSchema: () => X2, EntitySchema: () => Q2, EventCacheRuleSchema: () => Ze3, EventCacheSchema: () => Ge3, EventSchema: () => Y2, FlowBundlePackageSchema: () => bi, FlowBundleSchema: () => vi, FlowCodeSchema: () => Si, FlowConfigSchema: () => Fi, FlowDestinationSchema: () => Ei, FlowJsonSchema: () => Ai, FlowSchema: () => $i, FlowSchemas: () => mi, FlowSourceSchema: () => Pi, FlowStoreSchema: () => Oi, FlowTransformerSchema: () => Di, GenericEnvConfig: () => J2, GenericSettingsConfig: () => I2, HandlersConfig: () => x, HintSchema: () => en2, HintsSchema: () => tn2, IdConfig: () => D2, Identifier: () => c, InitConfig: () => E2, LoggerConfigSchema: () => it2, LoggerHandlerSchema: () => tt2, LoopSchema: () => me2, MapSchema: () => ge2, MappingResultSchema: () => ke2, MappingSchemas: () => de2, MatchExpressionSchema: () => $e2, MatcherSchemas: () => Me3, OptionalPrimitiveValue: () => u, OrderedPropertiesSchema: () => H2, PartialEventSchema: () => ee2, PolicySchema: () => be2, PrimaryConfig: () => O, PrimitiveValue: () => p, ProcessingControlConfig: () => z3, PropertiesSchema: () => _2, PropertySchema: () => U3, PropertyTypeSchema: () => B3, QueueConfig: () => P3, RequiredBoolean: () => s4, RequiredNumber: () => a3, RequiredString: () => r3, RouteSchema: () => We3, RouteWithoutManySchema: () => He2, RuleSchema: () => Se3, RulesSchema: () => ye2, RuntimeInstanceConfig: () => $, ServiceAccountSchema: () => on2, SetSchema: () => fe, SourceSchema: () => K, SourceSchemas: () => Bt2, SourceTypeSchema: () => V2, SourcesMapConfig: () => L3, StateSchema: () => et2, StoreCacheRuleSchema: () => Ke3, StoreCacheSchema: () => Qe3, StoreSchemas: () => ci, Timestamp: () => l2, TransformerSchemas: () => ni, UserSchema: () => G3, UtilitySchemas: () => m2, ValidateEventsSchema: () => xi, ValueConfigSchema: () => he2, ValueSchema: () => pe2, ValuesSchema: () => ue2, VerboseConfig: () => j2, WalkerOSSchemas: () => N2, configJsonSchema: () => Wi, consentJsonSchema: () => le2, contractJsonSchema: () => Ki, contractRuleJsonSchema: () => Gi, createArraySchema: () => Tn, createConsentConfig: () => F2, createDataTransformationConfig: () => R3, createEnumSchema: () => Fn, createMappingRulesConfig: () => M2, createObjectSchema: () => Rn, createPolicyConfig: () => T, createTupleSchema: () => $n, credentialsJsonSchema: () => an2, destinationJsonSchema: () => Hi, entityJsonSchema: () => se2, eventJsonSchema: () => ie, flowConfigJsonSchema: () => Ui, flowJsonSchema: () => Bi, loopJsonSchema: () => je3, mapJsonSchema: () => De3, orderedPropertiesJsonSchema: () => ae2, parseConfig: () => zi, parseFlow: () => qi, partialEventJsonSchema: () => ne2, policyJsonSchema: () => Ee3, propertiesJsonSchema: () => re2, ruleJsonSchema: () => Oe3, rulesJsonSchema: () => Ie3, safeParseConfig: () => Li, safeParseFlow: () => Ni, setJsonSchema: () => Pe2, sourceJsonSchema: () => _i, sourceTypeJsonSchema: () => ce, storeJsonSchema: () => Zi, transformerJsonSchema: () => Vi, userJsonSchema: () => oe2, validateEventsJsonSchema: () => Qi, validateFlowConfig: () => mn2, valueConfigJsonSchema: () => xe2, valueJsonSchema: () => Ce, z: () => n3, zodToSchema: () => An });
     r3 = n3.string();
     a3 = n3.number();
     s4 = n3.boolean();
@@ -2301,8 +2301,8 @@ var init_dev = __esm({
     I2 = n3.object({ settings: n3.any().optional().describe("Implementation-specific configuration") }).partial();
     J2 = n3.object({ env: n3.any().optional().describe("Environment dependencies (platform-specific)") }).partial();
     $ = n3.object({ type: n3.string().optional().describe("Instance type identifier"), config: n3.unknown().describe("Instance configuration") }).partial();
-    z3 = n3.object({ collector: n3.unknown().describe("Collector instance (runtime object)"), config: n3.unknown().describe("Configuration"), env: n3.unknown().describe("Environment dependencies") }).partial();
-    A = n3.object({ ignore: n3.boolean().describe("Set to true to skip processing").optional(), condition: n3.string().optional().describe("Condition function: return true to process") }).partial();
+    A = n3.object({ collector: n3.unknown().describe("Collector instance (runtime object)"), config: n3.unknown().describe("Configuration"), env: n3.unknown().describe("Environment dependencies") }).partial();
+    z3 = n3.object({ ignore: n3.boolean().describe("Set to true to skip processing").optional(), condition: n3.string().optional().describe("Condition function: return true to process") }).partial();
     L3 = n3.object({ sources: n3.record(n3.string(), n3.unknown()).describe("Map of source instances") }).partial();
     q2 = n3.object({ destinations: n3.record(n3.string(), n3.unknown()).describe("Map of destination instances") }).partial();
     N2 = {};
@@ -2358,11 +2358,11 @@ var init_dev = __esm({
     Te2 = n3.enum(["eq", "contains", "prefix", "suffix", "regex", "gt", "lt", "exists"]).meta({ id: "MatcherOperator", title: "Matcher.Operator", description: "Supported operators for a match condition." });
     Fe3 = n3.object({ key: n3.string(), operator: Te2, value: n3.string(), not: n3.boolean().optional() }).meta({ id: "MatcherCondition", title: "Matcher.Condition", description: "Single match condition (key, operator, value, optional not)." });
     $e2 = n3.union([Fe3, n3.object({ and: n3.array(n3.lazy(() => $e2)) }), n3.object({ or: n3.array(n3.lazy(() => $e2)) })]).meta({ id: "MatcherExpression", title: "Matcher.Expression", description: "Boolean expression tree of match conditions (leaf, and, or)." });
-    ze2 = n3.strictObject({ match: $e2.optional(), next: n3.lazy(() => We3) });
-    Ae2 = n3.strictObject({ match: $e2.optional(), one: n3.array(n3.lazy(() => We3)) });
+    Ae2 = n3.strictObject({ match: $e2.optional(), next: n3.lazy(() => We3) });
+    ze2 = n3.strictObject({ match: $e2.optional(), one: n3.array(n3.lazy(() => We3)) });
     Le3 = n3.strictObject({ match: $e2.optional(), many: n3.array(n3.lazy(() => We3)) });
     qe3 = n3.strictObject({ match: $e2 });
-    Ne3 = n3.union([ze2, Ae2, Le3, qe3]);
+    Ne3 = n3.union([Ae2, ze2, Le3, qe3]);
     We3 = n3.union([n3.string(), n3.array(n3.lazy(() => We3)), Ne3]).meta({ id: "Route", title: "Route", description: "Recursive route: string ID, sequence of routes, or a RouteConfig (next/one/many/gate)." });
     Be3 = n3.strictObject({ match: $e2.optional(), next: n3.lazy(() => He2) });
     Ue2 = n3.strictObject({ match: $e2.optional(), one: n3.array(n3.lazy(() => He2)) });
@@ -2393,7 +2393,7 @@ var init_dev = __esm({
     }).meta({ id: "StateConfig", title: "State.Config", description: "Declarative store operation: stash (set) or fetch (get) a value against a store. key = store side, value = event side, mode = direction." });
     tt2 = n3.any().meta({ id: "LoggerHandler", title: "Logger.Handler", description: "Custom log handler function (level, ...args) => void" });
     it2 = n3.object({ level: n3.union([n3.number(), n3.enum(["ERROR", "WARN", "INFO", "DEBUG"])]).optional().describe("Minimum log level (default: ERROR)"), handler: tt2.optional().describe("Custom log handler function") }).meta({ id: "LoggerConfig", title: "Logger.Config", description: "Logger configuration (level, handler) to override the collector defaults" });
-    nt2 = n3.object({ consent: Z2.optional().describe("Required consent states to send events to this destination"), settings: n3.any().meta({ id: "DestinationSettings", title: "Destination.Settings", description: "Implementation-specific configuration (destination-defined shape)." }).describe("Implementation-specific configuration").optional(), credentials: n3.any().meta({ id: "DestinationCredentials", title: "Destination.Credentials", description: "Optional credentials slot (destination-defined shape); supports $env. The per-package shape is supplied via mergeConfigSchema." }).describe("Optional credentials (destination-defined shape)").optional(), data: n3.union([pe2, ue2]).optional().describe("Global data transformation applied to all events for this destination"), include: n3.array(n3.string()).optional().describe("Event sections to flatten into context.data"), env: n3.any().meta({ id: "DestinationEnv", title: "Destination.Env", description: "Environment dependencies (destination-defined shape) \u2014 platform, SDK, or mock hook." }).describe("Environment dependencies (platform-specific)").optional(), id: c.describe("Destination instance identifier (defaults to destination key)").optional(), init: n3.boolean().describe("Whether to initialize immediately").optional(), loadScript: n3.boolean().describe("Whether to load external script (for web destinations)").optional(), mapping: ye2.optional().describe("Entity-action specific mapping rules for this destination"), policy: be2.optional().describe("Pre-processing policy rules applied before event mapping"), queue: n3.boolean().describe("Whether to queue events when consent is not granted").optional(), require: n3.array(n3.string()).optional().describe('Defer destination initialization until these collector events fire (e.g., ["consent"])'), logger: it2.optional().describe("Logger configuration (level, handler) to override the collector defaults"), setup: n3.union([n3.boolean(), n3.record(n3.string(), n3.unknown())]).optional().describe("One-time setup options applied during destination registration (boolean enables defaults, object configures specifics)"), before: He2.optional().describe("Post-collector transformer chain applied before this destination receives the event. `many` is not valid here \u2014 use multiple destinations for post-collector fan-out."), next: He2.optional().describe("Post-push transformer chain. Runs after destination push completes; push response is available at ingest._response. `many` is not valid here \u2014 use multiple destinations for post-collector fan-out."), cache: Ge3.optional().describe("Cache configuration for deduplication; skip push on cache HIT"), state: n3.union([et2, n3.array(et2)]).optional().describe("Declarative store get/set operations applied around this destination"), disabled: n3.boolean().describe("Completely skip this destination (no init, no push, no queue)").optional(), mock: n3.unknown().meta({ id: "DestinationMock", title: "Destination.Mock", description: "Return this value instead of calling push(). Dev/testing only." }).optional().describe("Return this value instead of calling push(). Dev/testing only."), queueMax: n3.number().optional().describe("Maximum consent-denied events retained in queuePush for this destination. FIFO drop on overflow. Default 1000."), dlqMax: n3.number().optional().describe("Maximum failed-push entries retained in dlq for this destination. FIFO drop on overflow. Default 100."), timeout: n3.number().optional().describe("Per-destination delivery timeout in ms (default 10000); a delivery that does not settle in this window is routed to the DLQ like a thrown push."), batch: n3.union([n3.number(), n3.object({ wait: n3.number().optional(), size: n3.number().optional(), age: n3.number().optional() })]).optional().describe("Enables batching for all of this destination's events into one shared default buffer; a mapping rule's own batch splits that entity-action into its own buffer and overrides per field. Bare number is the debounce wait window; object form supports wait (debounce ms), size (count cap, default 1000), age (max ms since first entry, default 30000)."), breaker: n3.union([n3.number(), n3.object({ threshold: n3.number().optional(), cooldown: n3.number().optional() })]).optional().describe("Per-destination circuit breaker (presence-gated). After threshold consecutive transport failures the breaker opens and events are skipped until cooldown ms elapse, then one probe is admitted; success closes it, failure re-opens it. Partial-batch row failures are breaker-neutral. Bare number is the threshold; object form supports threshold (default 5) and cooldown (default 30000ms).") }).meta({ id: "DestinationConfig", title: "Destination.Config", description: "Destination configuration: consent, settings, data, env, mapping rules, policy, queue, logger, before/next chains, cache." }).describe("Destination configuration");
+    nt2 = n3.object({ consent: Z2.optional().describe("Required consent states to send events to this destination"), settings: n3.any().meta({ id: "DestinationSettings", title: "Destination.Settings", description: "Implementation-specific configuration (destination-defined shape)." }).describe("Implementation-specific configuration").optional(), credentials: n3.any().meta({ id: "DestinationCredentials", title: "Destination.Credentials", description: "Optional credentials slot (destination-defined shape); back it with a managed secret via $secret.NAME (credentials use $secret, not $env). The per-package shape is supplied via mergeConfigSchema." }).describe("Optional credentials (destination-defined shape)").optional(), data: n3.union([pe2, ue2]).optional().describe("Global data transformation applied to all events for this destination"), include: n3.array(n3.string()).optional().describe("Event sections to flatten into context.data"), env: n3.any().meta({ id: "DestinationEnv", title: "Destination.Env", description: "Environment dependencies (destination-defined shape) \u2014 platform, SDK, or mock hook." }).describe("Environment dependencies (platform-specific)").optional(), id: c.describe("Destination instance identifier (defaults to destination key)").optional(), init: n3.boolean().describe("Whether to initialize immediately").optional(), loadScript: n3.boolean().describe("Whether to load external script (for web destinations)").optional(), mapping: ye2.optional().describe("Entity-action specific mapping rules for this destination"), policy: be2.optional().describe("Pre-processing policy rules applied before event mapping"), queue: n3.boolean().describe("Whether to queue events when consent is not granted").optional(), require: n3.array(n3.string()).optional().describe('Defer destination initialization until these collector events fire (e.g., ["consent"])'), logger: it2.optional().describe("Logger configuration (level, handler) to override the collector defaults"), setup: n3.union([n3.boolean(), n3.record(n3.string(), n3.unknown())]).optional().describe("One-time setup options applied during destination registration (boolean enables defaults, object configures specifics)"), before: He2.optional().describe("Post-collector transformer chain applied before this destination receives the event. `many` is not valid here \u2014 use multiple destinations for post-collector fan-out."), next: He2.optional().describe("Post-push transformer chain. Runs after destination push completes; push response is available at ingest._response. `many` is not valid here \u2014 use multiple destinations for post-collector fan-out."), cache: Ge3.optional().describe("Cache configuration for deduplication; skip push on cache HIT"), state: n3.union([et2, n3.array(et2)]).optional().describe("Declarative store get/set operations applied around this destination"), disabled: n3.boolean().describe("Completely skip this destination (no init, no push, no queue)").optional(), mock: n3.unknown().meta({ id: "DestinationMock", title: "Destination.Mock", description: "Return this value instead of calling push(). Dev/testing only." }).optional().describe("Return this value instead of calling push(). Dev/testing only."), queueMax: n3.number().optional().describe("Maximum consent-denied events retained in queuePush for this destination. FIFO drop on overflow. Default 1000."), dlqMax: n3.number().optional().describe("Maximum failed-push entries retained in dlq for this destination. FIFO drop on overflow. Default 100."), timeout: n3.number().optional().describe("Per-destination delivery timeout in ms (default 10000); a delivery that does not settle in this window is routed to the DLQ like a thrown push."), batch: n3.union([n3.number(), n3.object({ wait: n3.number().optional(), size: n3.number().optional(), age: n3.number().optional() })]).optional().describe("Enables batching for all of this destination's events into one shared default buffer; a mapping rule's own batch splits that entity-action into its own buffer and overrides per field. Bare number is the debounce wait window; object form supports wait (debounce ms), size (count cap, default 1000), age (max ms since first entry, default 30000)."), breaker: n3.union([n3.number(), n3.object({ threshold: n3.number().optional(), cooldown: n3.number().optional() })]).optional().describe("Per-destination circuit breaker (presence-gated). After threshold consecutive transport failures the breaker opens and events are skipped until cooldown ms elapse, then one probe is admitted; success closes it, failure re-opens it. Partial-batch row failures are breaker-neutral. Bare number is the threshold; object form supports threshold (default 5) and cooldown (default 30000ms).") }).meta({ id: "DestinationConfig", title: "Destination.Config", description: "Destination configuration: consent, settings, data, env, mapping rules, policy, queue, logger, before/next chains, cache." }).describe("Destination configuration");
     ot2 = nt2.partial().meta({ id: "DestinationPartialConfig", title: "Destination.PartialConfig", description: "Partial destination configuration with all fields optional." }).describe("Partial destination configuration with all fields optional");
     rt2 = be2.describe("Destination policy rules for event pre-processing");
     at2 = n3.object({ collector: n3.unknown().meta({ id: "DestinationContextCollector", title: "Collector.Instance", description: "Collector instance handed to the destination (runtime object)." }).describe("Collector instance (runtime object)"), config: nt2.describe("Destination configuration"), data: n3.union([n3.unknown(), n3.array(n3.unknown())]).optional().describe("Transformed event data"), env: n3.unknown().meta({ id: "DestinationContextEnv", title: "Destination.Env", description: "Environment dependencies (destination-defined shape)." }).describe("Environment dependencies") }).meta({ id: "DestinationContext", title: "Destination.Context", description: "Destination context passed to init and push functions." }).describe("Destination context for init and push functions");
@@ -2419,7 +2419,7 @@ var init_dev = __esm({
     Pt3 = o2(mt3);
     Dt3 = o2(St);
     Et2 = {};
-    t3(Et2, { CommandTypeSchema: () => Ot2, ConfigSchema: () => It2, DestinationsSchema: () => Ft2, InitConfigSchema: () => Rt, InstanceSchema: () => $t2, PushContextSchema: () => Mt2, SessionDataSchema: () => Jt2, SourcesSchema: () => Tt2, commandTypeJsonSchema: () => zt2, configJsonSchema: () => At2, initConfigJsonSchema: () => qt2, instanceJsonSchema: () => Wt2, pushContextJsonSchema: () => Nt, sessionDataJsonSchema: () => Lt2 });
+    t3(Et2, { CommandTypeSchema: () => Ot2, ConfigSchema: () => It2, DestinationsSchema: () => Ft2, InitConfigSchema: () => Rt, InstanceSchema: () => $t2, PushContextSchema: () => Mt2, SessionDataSchema: () => Jt2, SourcesSchema: () => Tt2, commandTypeJsonSchema: () => At2, configJsonSchema: () => zt2, initConfigJsonSchema: () => qt2, instanceJsonSchema: () => Wt2, pushContextJsonSchema: () => Nt, sessionDataJsonSchema: () => Lt2 });
     Ot2 = n3.union([n3.enum(["action", "config", "consent", "context", "destination", "elb", "globals", "hook", "init", "link", "run", "user", "walker"]), n3.string()]).meta({ id: "CollectorCommandType", title: "Collector.CommandType", description: "Collector command type identifier (standard or extension string)." }).describe("Collector command type: standard commands or custom string for extensions");
     It2 = n3.object({ run: n3.boolean().describe("Whether to run collector automatically on initialization").optional(), globalsStatic: _2.describe("Static global properties that persist across collector runs"), sessionStatic: n3.record(n3.string(), n3.unknown()).meta({ id: "CollectorSessionStatic", title: "Collector.SessionStatic", description: "Static session data that persists across collector runs." }).describe("Static session data that persists across collector runs"), logger: it2.optional().describe("Logger configuration (level, handler)"), queueMax: n3.number().optional().describe("Maximum events retained in collector.queue (late-registration replay). FIFO drop on overflow. Default 1000.") }).meta({ id: "CollectorConfig", title: "Collector.Config", description: "Core collector configuration (globals/session statics, logger, buffer bounds)." }).describe("Core collector configuration");
     Jt2 = _2.and(n3.object({ isStart: n3.boolean().describe("Whether this is a new session start"), storage: n3.boolean().describe("Whether storage is available"), id: c.describe("Session identifier").optional(), start: l2.describe("Session start timestamp").optional(), marketing: n3.literal(true).optional().describe("Marketing attribution flag"), updated: l2.describe("Last update timestamp").optional(), isNew: n3.boolean().describe("Whether this is a new session").optional(), device: c.describe("Device identifier").optional(), count: d.describe("Event count in session").optional(), runs: d.describe("Number of runs").optional() })).meta({ id: "CollectorSessionData", title: "Collector.SessionData", description: "Session state and tracking data." }).describe("Session state and tracking data");
@@ -2428,8 +2428,8 @@ var init_dev = __esm({
     Tt2 = n3.record(n3.string(), n3.unknown()).meta({ id: "CollectorSources", title: "Collector.Sources", description: "Map of source IDs to runtime source instances." }).describe("Map of source IDs to source instances");
     Ft2 = n3.record(n3.string(), n3.unknown()).meta({ id: "CollectorDestinations", title: "Collector.Destinations", description: "Map of destination IDs to runtime destination instances." }).describe("Map of destination IDs to destination instances");
     $t2 = n3.object({ push: n3.unknown().describe("Push function for processing events"), command: n3.unknown().describe("Command function for walker commands"), allowed: n3.boolean().describe("Whether event processing is allowed"), config: It2.describe("Current collector configuration"), consent: Z2.describe("Current consent state"), custom: _2.describe("Custom implementation-specific properties"), sources: Tt2.describe("Registered source instances"), destinations: Ft2.describe("Registered destination instances"), globals: _2.describe("Current global properties"), hooks: n3.unknown().describe("Lifecycle hook functions"), on: n3.unknown().describe("Event lifecycle configuration"), queue: n3.array(Y2).describe("Queued events awaiting processing"), round: n3.number().describe("Collector run count (increments with each run)"), session: n3.union([Jt2]).describe("Current session state"), timing: n3.number().describe("Event processing timing information"), user: G3.describe("Current user data") }).meta({ id: "CollectorInstance", title: "Collector.Instance", description: "Collector instance (runtime object with push/command + full state and component maps)." }).describe("Collector instance with state and methods");
-    zt2 = o2(Ot2);
-    At2 = o2(It2);
+    At2 = o2(Ot2);
+    zt2 = o2(It2);
     Lt2 = o2(Jt2);
     qt2 = o2(Rt);
     Nt = o2(Mt2);
@@ -2437,7 +2437,7 @@ var init_dev = __esm({
     Bt2 = {};
     t3(Bt2, { BaseEnvSchema: () => Ut, ConfigSchema: () => _t, InitSchema: () => Zt2, InitSourceSchema: () => Gt3, InitSourcesSchema: () => Kt2, InstanceSchema: () => Vt2, PartialConfigSchema: () => Ht2, baseEnvJsonSchema: () => Qt2, configJsonSchema: () => Xt, initSourceJsonSchema: () => ti, initSourcesJsonSchema: () => ii, instanceJsonSchema: () => ei, partialConfigJsonSchema: () => Yt2 });
     Ut = n3.object({ push: n3.unknown().meta({ id: "SourcePushFn", title: "Source.PushFn", description: "Collector push function passed to the source via dependency injection." }).describe("Collector push function"), command: n3.unknown().meta({ id: "SourceCommandFn", title: "Source.CommandFn", description: "Collector command function passed to the source." }).describe("Collector command function"), sources: n3.unknown().optional().describe("Map of registered source instances"), elb: n3.unknown().meta({ id: "ElbFn", title: "Elb.Fn", description: "Public `elb(...)` API function alias for collector.push." }).describe("Public API function (alias for collector.push)") }).catchall(n3.unknown()).meta({ id: "SourceBaseEnv", title: "Source.BaseEnv", description: "Base environment for source dependency injection; platform-specific sources extend this." }).describe("Base environment for dependency injection - platform-specific sources extend this");
-    _t = we2.extend({ settings: n3.any().meta({ id: "SourceSettings", title: "Source.Settings", description: "Implementation-specific configuration (source-defined shape)." }).describe("Implementation-specific configuration").optional(), credentials: n3.any().meta({ id: "SourceCredentials", title: "Source.Credentials", description: "Optional credentials slot (source-defined shape); supports $env. The per-package shape is supplied via mergeConfigSchema." }).describe("Optional credentials (source-defined shape)").optional(), env: Ut.optional().describe("Environment dependencies (platform-specific)"), id: c.describe("Source identifier (defaults to source key)").optional(), primary: n3.boolean().describe("Mark as primary (only one can be primary)").optional(), require: n3.array(n3.string()).optional().describe('Defer source initialization until these collector events fire (e.g., ["consent"])'), logger: it2.optional().describe("Logger configuration (level, handler) to override the collector defaults"), async: n3.boolean().optional().describe('Respond-first acknowledgement for response-producing server sources (express today; future fetch/lambda). When true (the default for such sources) the source responds 2xx ("accepted") before the event is delivered; when false it waits for delivery to settle. Browser/dataLayer sources have no HTTP response to defer and ignore it. A 2xx means accepted, not delivered. Default is per source type.'), setup: n3.union([n3.boolean(), n3.record(n3.string(), n3.unknown())]).optional().describe("One-time setup options applied during source registration (boolean enables defaults, object configures specifics)"), ingest: n3.union([pe2, ue2]).optional().describe("Ingest metadata extraction mapping. Extracts values from raw request objects (Express req, Lambda event) using mapping syntax."), disabled: n3.boolean().describe("Completely skip this source (no init, no event capture)").optional(), state: n3.union([et2, n3.array(et2)]).optional().describe("Declarative store get/set operations applied around this source"), init: n3.boolean().optional().describe("Init lifecycle flag set by collector to true after Instance.init() runs") }).meta({ id: "SourceConfig", title: "Source.Config", description: "Source configuration with mapping, environment, and lifecycle hooks." }).describe("Source configuration with mapping and environment");
+    _t = we2.extend({ settings: n3.any().meta({ id: "SourceSettings", title: "Source.Settings", description: "Implementation-specific configuration (source-defined shape)." }).describe("Implementation-specific configuration").optional(), credentials: n3.any().meta({ id: "SourceCredentials", title: "Source.Credentials", description: "Optional credentials slot (source-defined shape); back it with a managed secret via $secret.NAME (credentials use $secret, not $env). The per-package shape is supplied via mergeConfigSchema." }).describe("Optional credentials (source-defined shape)").optional(), env: Ut.optional().describe("Environment dependencies (platform-specific)"), id: c.describe("Source identifier (defaults to source key)").optional(), primary: n3.boolean().describe("Mark as primary (only one can be primary)").optional(), require: n3.array(n3.string()).optional().describe('Defer source initialization until these collector events fire (e.g., ["consent"])'), logger: it2.optional().describe("Logger configuration (level, handler) to override the collector defaults"), async: n3.boolean().optional().describe('Respond-first acknowledgement for response-producing server sources (express today; future fetch/lambda). When true (the default for such sources) the source responds 2xx ("accepted") before the event is delivered; when false it waits for delivery to settle. Browser/dataLayer sources have no HTTP response to defer and ignore it. A 2xx means accepted, not delivered. Default is per source type.'), setup: n3.union([n3.boolean(), n3.record(n3.string(), n3.unknown())]).optional().describe("One-time setup options applied during source registration (boolean enables defaults, object configures specifics)"), ingest: n3.union([pe2, ue2]).optional().describe("Ingest metadata extraction mapping. Extracts values from raw request objects (Express req, Lambda event) using mapping syntax."), disabled: n3.boolean().describe("Completely skip this source (no init, no event capture)").optional(), state: n3.union([et2, n3.array(et2)]).optional().describe("Declarative store get/set operations applied around this source"), init: n3.boolean().optional().describe("Init lifecycle flag set by collector to true after Instance.init() runs") }).meta({ id: "SourceConfig", title: "Source.Config", description: "Source configuration with mapping, environment, and lifecycle hooks." }).describe("Source configuration with mapping and environment");
     Ht2 = _t.partial().meta({ id: "SourcePartialConfig", title: "Source.PartialConfig", description: "Partial source configuration with all fields optional." }).describe("Partial source configuration with all fields optional");
     Vt2 = n3.object({ type: n3.string().describe('Source type identifier (e.g., "browser", "dataLayer")'), config: _t.describe("Current source configuration"), push: n3.any().meta({ id: "SourceInstancePushFn", title: "Source.PushFn", description: "Push function \u2014 THE HANDLER (flexible signature for platform compatibility)." }).describe("Push function - THE HANDLER (flexible signature for platform compatibility)"), destroy: n3.any().meta({ id: "SourceDestroyFn", title: "Source.DestroyFn", description: "Cleanup function called when the source is removed." }).optional().describe("Cleanup function called when source is removed"), on: n3.unknown().optional().describe("Lifecycle hook function for event types") }).meta({ id: "SourceInstance", title: "Source.Instance", description: "Source instance (runtime object with push handler and lifecycle methods)." }).describe("Source instance with push handler and lifecycle methods");
     Zt2 = n3.any().meta({ id: "SourceInit", title: "Source.Init", description: "Source initialization function: (config, env) => Instance | Promise<Instance>." }).describe("Source initialization function: (config, env) => Instance | Promise<Instance>");
@@ -2457,12 +2457,12 @@ var init_dev = __esm({
     si = o2(ri);
     ci = {};
     t3(ci, { ConfigSchema: () => li, PartialConfigSchema: () => di, configJsonSchema: () => pi, partialConfigJsonSchema: () => ui });
-    li = n3.object({ settings: n3.unknown().meta({ id: "StoreSettings", title: "Store.Settings", description: "Implementation-specific configuration (store-defined shape)." }).describe("Implementation-specific configuration").optional(), credentials: n3.unknown().meta({ id: "StoreCredentials", title: "Store.Credentials", description: "Optional credentials slot (store-defined shape); supports $env. The per-package shape is supplied via mergeConfigSchema." }).describe("Optional credentials (store-defined shape)").optional(), env: n3.unknown().meta({ id: "StoreEnv", title: "Store.Env", description: "Environment dependencies (store-defined shape)." }).describe("Environment dependencies (platform-specific)").optional(), id: c.describe("Store instance identifier (defaults to store key)").optional(), logger: it2.optional().describe("Logger configuration (level, handler) to override the collector defaults"), setup: n3.union([n3.boolean(), n3.record(n3.string(), n3.unknown())]).optional().describe("One-time setup options applied during store registration (boolean enables defaults, object configures specifics)"), file: n3.boolean().optional().describe("Persist values as raw bytes (byte-exact), bypassing the structured codec. Default false (structured). Set true only on byte-native stores for asset serving; sheets rejects it.") }).meta({ id: "StoreConfig", title: "Store.Config", description: "Store configuration (settings, env, logger): key-value infrastructure component." }).describe("Store configuration");
+    li = n3.object({ settings: n3.unknown().meta({ id: "StoreSettings", title: "Store.Settings", description: "Implementation-specific configuration (store-defined shape)." }).describe("Implementation-specific configuration").optional(), credentials: n3.unknown().meta({ id: "StoreCredentials", title: "Store.Credentials", description: "Optional credentials slot (store-defined shape); back it with a managed secret via $secret.NAME (credentials use $secret, not $env). The per-package shape is supplied via mergeConfigSchema." }).describe("Optional credentials (store-defined shape)").optional(), env: n3.unknown().meta({ id: "StoreEnv", title: "Store.Env", description: "Environment dependencies (store-defined shape)." }).describe("Environment dependencies (platform-specific)").optional(), id: c.describe("Store instance identifier (defaults to store key)").optional(), logger: it2.optional().describe("Logger configuration (level, handler) to override the collector defaults"), setup: n3.union([n3.boolean(), n3.record(n3.string(), n3.unknown())]).optional().describe("One-time setup options applied during store registration (boolean enables defaults, object configures specifics)"), file: n3.boolean().optional().describe("Persist values as raw bytes (byte-exact), bypassing the structured codec. Default false (structured). Set true only on byte-native stores for asset serving; sheets rejects it.") }).meta({ id: "StoreConfig", title: "Store.Config", description: "Store configuration (settings, env, logger): key-value infrastructure component." }).describe("Store configuration");
     di = li.partial().meta({ id: "StorePartialConfig", title: "Store.PartialConfig", description: "Partial store configuration with all fields optional." }).describe("Partial store configuration with all fields optional");
     pi = o2(li);
     ui = o2(di);
     mi = {};
-    t3(mi, { BundlePackageSchema: () => bi, BundleSchema: () => vi, CodeSchema: () => Si, ConfigSchema: () => Fi, ContractActionsSchema: () => Ji, ContractEventsSchema: () => Ri, ContractRuleSchema: () => Mi, ContractSchema: () => Ti, ContractSchemaEntry: () => Ii, DestinationSchema: () => Ei, FlowSchema: () => $i, JsonSchema: () => zi, JsonSchemaSchema: () => Ci, SettingsSchema: () => gi, SourceSchema: () => Pi, StepExampleSchema: () => wi, StepExamplesSchema: () => ki, StoreSchema: () => Oi, TransformerSchema: () => Di, TriggerDescriptorSchema: () => yi, ValidateEventsSchema: () => xi, VariablesSchema: () => fi, configJsonSchema: () => Wi, contractJsonSchema: () => Ki, contractRuleJsonSchema: () => Gi, destinationJsonSchema: () => Hi, flowConfigJsonSchema: () => Ui, flowJsonSchema: () => Bi, parseConfig: () => Ai, parseFlow: () => qi, safeParseConfig: () => Li, safeParseFlow: () => Ni, sourceJsonSchema: () => _i, storeJsonSchema: () => Zi, transformerJsonSchema: () => Vi, validateEventsJsonSchema: () => Qi });
+    t3(mi, { BundlePackageSchema: () => bi, BundleSchema: () => vi, CodeSchema: () => Si, ConfigSchema: () => Fi, ContractActionsSchema: () => Ji, ContractEventsSchema: () => Ri, ContractRuleSchema: () => Mi, ContractSchema: () => Ti, ContractSchemaEntry: () => Ii, DestinationSchema: () => Ei, FlowSchema: () => $i, JsonSchema: () => Ai, JsonSchemaSchema: () => Ci, SettingsSchema: () => gi, SourceSchema: () => Pi, StepExampleSchema: () => wi, StepExamplesSchema: () => ki, StoreSchema: () => Oi, TransformerSchema: () => Di, TriggerDescriptorSchema: () => yi, ValidateEventsSchema: () => xi, VariablesSchema: () => fi, configJsonSchema: () => Wi, contractJsonSchema: () => Ki, contractRuleJsonSchema: () => Gi, destinationJsonSchema: () => Hi, flowConfigJsonSchema: () => Ui, flowJsonSchema: () => Bi, parseConfig: () => zi, parseFlow: () => qi, safeParseConfig: () => Li, safeParseFlow: () => Ni, sourceJsonSchema: () => _i, storeJsonSchema: () => Zi, transformerJsonSchema: () => Vi, validateEventsJsonSchema: () => Qi });
     fi = n3.record(n3.string(), n3.unknown()).meta({ id: "FlowVariables", title: "Flow.Variables", description: "Reusable values referenced via $var.name (with optional deep paths). Whole-string refs preserve native type; inline interpolation requires scalars." });
     gi = n3.record(n3.string(), n3.unknown()).meta({ id: "FlowSettings", title: "Flow.Settings", description: "Free-form key-value settings consumed by the platform runtime." }).describe("Free-form platform settings bag");
     hi = /^(@[a-z0-9\-~][a-z0-9\-._~]*\/)?[a-z0-9\-~][a-z0-9\-._~]*$/;
@@ -2485,8 +2485,8 @@ var init_dev = __esm({
     Ti = n3.record(n3.string(), Mi).meta({ id: "FlowContract", title: "Flow.Contract", description: "Named contracts map with optional extend inheritance." }).describe("Named contracts with optional extend inheritance");
     Fi = n3.object({ platform: n3.enum(["web", "server"]).describe("Platform identity for this flow. Drives bundle target/format."), url: n3.string().min(1).optional().describe("Public URL where this flow is reachable (for cross-flow $flow.X.url references)."), settings: gi.optional().describe("Free-form key-value settings consumed by the platform runtime."), bundle: vi.optional().describe("Bundle configuration: NPM packages, transitive dependency overrides.") }).meta({ id: "FlowConfig", title: "Flow.Config", description: "Per-flow configuration block: platform identity, optional public URL, settings, bundle." }).describe("Per-flow configuration block");
     $i = n3.object({ config: Fi.optional().describe("Per-flow configuration: platform, url, settings, bundle."), sources: n3.record(n3.string(), Pi).optional().describe("Source configurations (data capture) keyed by unique identifier"), destinations: n3.record(n3.string(), Ei).optional().describe("Destination configurations (data output) keyed by unique identifier"), transformers: n3.record(n3.string(), Di).optional().describe("Transformer configurations (event transformation) keyed by unique identifier"), stores: n3.record(n3.string(), Oi).optional().describe("Store configurations (key-value storage) keyed by unique identifier"), collector: n3.unknown().meta({ id: "FlowCollector", title: "Collector.InitConfig", description: "Collector configuration for event processing (Collector.InitConfig)." }).optional().describe("Collector configuration for event processing (uses Collector.InitConfig)"), variables: fi.optional().describe("Flow-level variables (override root variables, overridden by source/destination variables)") }).meta({ id: "Flow", title: "Flow", description: "Single flow definition (one deployment target): config, sources, destinations, transformers, stores, collector." }).describe("Single flow definition for one deployment target");
-    zi = n3.object({ version: n3.literal(4).describe("Configuration schema version (v4, current)."), $schema: n3.string().url("Schema URL must be a valid URL").optional().describe('JSON Schema reference for IDE validation (e.g., "https://walkeros.io/schema/flow/v4.json")'), include: n3.array(n3.string()).optional().describe("Folders to include in the bundle output"), variables: fi.optional().describe("Shared variables for interpolation across all flows (use $var.name syntax, deep paths supported)"), contract: Ti.optional().describe("Named contracts with extend inheritance and dot-path references"), flows: n3.record(n3.string(), $i).refine((e4) => Object.keys(e4).length > 0, { message: "At least one flow is required" }).describe("Named flow configurations (e.g., production, staging, development)") }).meta({ id: "FlowJson", title: "Flow.Json", description: "walkerOS root configuration (walkeros.config.json) v4: version, variables, contract, named flows." }).describe("walkerOS root configuration (walkeros.config.json)");
-    Wi = n3.toJSONSchema(zi, { target: "draft-7" });
+    Ai = n3.object({ version: n3.literal(4).describe("Configuration schema version (v4, current)."), $schema: n3.string().url("Schema URL must be a valid URL").optional().describe('JSON Schema reference for IDE validation (e.g., "https://walkeros.io/schema/flow/v4.json")'), include: n3.array(n3.string()).optional().describe("Folders to include in the bundle output"), variables: fi.optional().describe("Shared variables for interpolation across all flows (use $var.name syntax, deep paths supported)"), contract: Ti.optional().describe("Named contracts with extend inheritance and dot-path references"), flows: n3.record(n3.string(), $i).refine((e4) => Object.keys(e4).length > 0, { message: "At least one flow is required" }).describe("Named flow configurations (e.g., production, staging, development)") }).meta({ id: "FlowJson", title: "Flow.Json", description: "walkerOS root configuration (walkeros.config.json) v4: version, variables, contract, named flows." }).describe("walkerOS root configuration (walkeros.config.json)");
+    Wi = n3.toJSONSchema(Ai, { target: "draft-7" });
     Bi = o2($i);
     Ui = o2(Fi);
     _i = o2(Pi);
@@ -2501,7 +2501,7 @@ var init_dev = __esm({
     tn2 = Xi.record(Xi.string(), en2).describe("Keyed hints for AI consumption \u2014 lightweight context beyond schemas and examples");
     nn2 = n3.object({ param: n3.string().describe("Lowercase URL parameter name. Match is case-insensitive on lookup."), platform: n3.string().describe("Canonical platform identifier (lowercase, kebab-case).") });
     on2 = n3.object({ client_email: n3.string().describe("Service account client email"), private_key: n3.string().describe("Service account private key (PEM)"), project_id: n3.string().optional().describe("GCP project id (derived from environment when omitted)") }).meta({ id: "ServiceAccount", title: "ServiceAccount", description: "Google-style service account credentials (client_email, private_key, optional project_id)." }).describe("Google-style service account credentials");
-    rn3 = n3.union([n3.string(), on2]).meta({ id: "Credentials", title: "Credentials", description: "Service account credentials: a JSON string (often $env) or a parsed service account object." }).describe("Service account credentials: a JSON string (often $env) or a parsed object");
+    rn3 = n3.union([n3.string(), on2]).meta({ id: "Credentials", title: "Credentials", description: "Service account credentials: a JSON string (back it with a managed secret via $secret.NAME) or a parsed service account object." }).describe("Service account credentials: a JSON string (back it with a managed secret via $secret.NAME) or a parsed object");
     an2 = o2(rn3);
     cn2 = /* @__PURE__ */ new Set(["description", "examples", "title", "$comment"]);
     fn2 = /\$store\.([a-zA-Z_][a-zA-Z0-9_]*)/g;
@@ -7047,7 +7047,7 @@ async function $t(e4, t4, o4) {
   }
 }
 function At(e4, t4) {
-  return { timing: Math.round((Date.now() - e4.timing) / 10) / 100, source: { type: "collector", schema: "4", version: "4.2.2-next-1782236179392" }, ...t4 };
+  return { timing: Math.round((Date.now() - e4.timing) / 10) / 100, source: { type: "collector", schema: "4", version: "4.2.2-next-1782892388850" }, ...t4 };
 }
 function Mt(e4, t4) {
   if (!t4.name) throw new Error("Event name is required");
@@ -12845,7 +12845,7 @@ function validateMapping(input) {
 // src/commands/validate/validators/entry.ts
 init_dist();
 import Ajv from "ajv";
-var CLIENT_HEADER = "walkeros-cli/4.2.2-next-1782236179392";
+var CLIENT_HEADER = "walkeros-cli/4.2.2-next-1782892388850";
 var SECTIONS = ["destinations", "sources", "transformers"];
 function resolveEntry(path19, flowConfig) {
   const flows = flowConfig.flows;

package/dist/index.js

@@ -7996,7 +7996,7 @@ function validateMapping(input) {
 // src/commands/validate/validators/entry.ts
 import Ajv from "ajv";
 import { fetchPackageSchema } from "@walkeros/core";
-var CLIENT_HEADER = "walkeros-cli/4.2.2-next-1782236179392";
+var CLIENT_HEADER = "walkeros-cli/4.2.2-next-1782892388850";
 var SECTIONS = ["destinations", "sources", "transformers"];
 function resolveEntry(path20, flowConfig) {
   const flows = flowConfig.flows;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@walkeros/cli",
-  "version": "4.2.2-next-1782236179392",
+  "version": "4.2.2-next-1782892388850",
   "description": "walkerOS CLI - Bundle and deploy walkerOS components",
   "license": "MIT",
   "type": "module",
@@ -52,11 +52,11 @@
   },
   "dependencies": {
     "@vercel/nft": "^1.10.2",
-    "@walkeros/collector": "4.2.2-next-1782236179392",
-    "@walkeros/core": "4.2.2-next-1782236179392",
-    "@walkeros/server-core": "4.2.2-next-1782236179392",
-    "@walkeros/server-destination-api": "4.2.2-next-1782236179392",
-    "@walkeros/transformer-validate": "4.2.2-next-1782236179392",
+    "@walkeros/collector": "4.2.2-next-1782892388850",
+    "@walkeros/core": "4.2.2-next-1782892388850",
+    "@walkeros/server-core": "4.2.2-next-1782892388850",
+    "@walkeros/server-destination-api": "4.2.2-next-1782892388850",
+    "@walkeros/transformer-validate": "4.2.2-next-1782892388850",
     "ajv": "^8.17.1",
     "chalk": "^5.6.2",
     "ci-info": "^4.4.0",
@@ -83,8 +83,8 @@
     "@types/pacote": "^11.1.8",
     "@types/picomatch": "4.0.3",
     "@types/semver": "^7.7.1",
-    "@walkeros/config": "4.2.2-next-1782236179392",
-    "@walkeros/core": "4.2.2-next-1782236179392",
+    "@walkeros/config": "4.2.2-next-1782892388850",
+    "@walkeros/core": "4.2.2-next-1782892388850",
     "msw": "^2.12.10",
     "openapi-typescript": "^7.13.0",
     "tsx": "^4.21.0"