@walkeros/cli 4.3.0 → 4.3.1-next-1784373088875

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Flow, PreviewKey, Elb, Ingest, WalkerOS, Simulation } from '@walkeros/core';
+import { Flow, PreviewKey, Elb, Ingest, WalkerOS, Simulation, ObserveWeb } from '@walkeros/core';
 export { Flow } from '@walkeros/core';
 import { BuildOptions as BuildOptions$1 } from 'esbuild';
 import { z } from '@walkeros/core/dev';
@@ -11518,9 +11518,19 @@ interface WrapSkeletonOptions {
      * using `createBatchedPoster`.
      *
      * Omit (or pass `level: 'off'`) to ship a bundle with zero telemetry
-     * plumbing.
+     * plumbing. Mutually exclusive with `observe`.
      */
     telemetry?: TelemetryBundleOptions;
+    /**
+     * Browser-only: STATIC observe connect config baked onto the startFlow
+     * config. PUBLIC values only (`url` + `binding`, plus optional
+     * `flowId`/`level`/`sample` scoping); the runtime connect module reads the
+     * per-session credential out-of-band at boot via the `elbObserve` slot.
+     * This is the preview-artifact observation wiring: unlike `telemetry`, it
+     * bakes no ingest token into the emitted bytes. Mutually exclusive with
+     * `telemetry`.
+     */
+    observe?: ObserveWeb;
     /**
      * esbuild target. @default 'es2018' for browser, 'node18' for node.
      */
@@ -11530,6 +11540,14 @@ interface WrapSkeletonOptions {
     /** Fine-grained minification options, forwarded to esbuild. */
     minifyOptions?: MinifyOptions;
 }
+/**
+ * @deprecated Bakes a plaintext ingest token into the emitted (world-readable)
+ * bundle bytes. Use `WrapSkeletonOptions.observe` instead: it bakes only
+ * public connect values and the per-session credential arrives out-of-band at
+ * boot via the `elbObserve` slot. Its only production caller is the app's
+ * preview wrap, which moves to `observe` in F3'; this bake path is then
+ * retired.
+ */
 interface TelemetryBundleOptions {
     /** Absolute ingest URL. POST receives JSON array of FlowState. */
     observerUrl: string;

package/dist/index.js

@@ -2506,7 +2506,8 @@ ${dataDeclaration}`;
       const stage2Entry = (buildOptions.platform || "node") === "browser" ? generateWebEntry(stage1Path, dataPayload, {
         windowCollector: buildOptions.windowCollector,
         windowElb: buildOptions.windowElb,
-        platform: buildOptions.platform
+        platform: buildOptions.platform,
+        observe: readObserveConnect(flowSettings, logger)
       }) : generateServerEntry(stage1Path, dataPayload);
       const stage2EntryPath = path12.join(TEMP_DIR, "stage2.mjs");
       await fs11.writeFile(stage2EntryPath, stage2Entry);
@@ -3265,7 +3266,42 @@ export default async function(context = {}) {
   return { ...result, httpHandler: httpSource ? httpSource.httpHandler : undefined };
 }`;
 }
+function readObserveConnect(flowSettings, logger) {
+  const observe = flowSettings.config?.observe;
+  if (!observe) return void 0;
+  const { url, binding } = observe;
+  if (url === void 0 && binding === void 0) return void 0;
+  const trimmedUrl = typeof url === "string" ? url.trim() : "";
+  const trimmedBinding = typeof binding === "string" ? binding.trim() : "";
+  if (trimmedUrl !== "" && trimmedBinding !== "") {
+    return { url: trimmedUrl, binding: trimmedBinding };
+  }
+  const missing = [
+    ...trimmedUrl === "" ? ["url"] : [],
+    ...trimmedBinding === "" ? ["binding"] : []
+  ].join(" and ");
+  logger?.warn(
+    `config.observe has no effect: missing or empty ${missing}. Observe connect wiring was skipped; set both config.observe.url and config.observe.binding to non-empty public values.`
+  );
+  return void 0;
+}
+function emitObserveAssignment(observe) {
+  const literal = {
+    url: observe.url,
+    binding: observe.binding,
+    ...observe.flowId !== void 0 ? { flowId: observe.flowId } : {},
+    ...observe.level !== void 0 ? { level: observe.level } : {},
+    ...observe.sample !== void 0 ? { sample: observe.sample } : {}
+  };
+  return `
+  config.observe = ${JSON.stringify(literal)};`;
+}
 function generateWebEntry(stage1Path, dataPayload, options = {}) {
+  if (options.observe !== void 0 && options.telemetry !== void 0) {
+    throw new Error(
+      "generateWebEntry: `observe` (bake-nothing connect module) and `telemetry` (baked ingest token) are mutually exclusive observer wirings. Pass `observe` alone; the per-session credential arrives out-of-band at boot instead of being baked."
+    );
+  }
   const assignments = [];
   if (options.windowCollector) {
     assignments.push(
@@ -3285,6 +3321,7 @@ function generateWebEntry(stage1Path, dataPayload, options = {}) {
     }
   }` : "";
   const stage1Specifier = toFileImportSpecifier(stage1Path);
+  const observeBlock = options.observe ? emitObserveAssignment(options.observe) : "";
   const telemetryImport = options.telemetry ? `
 import { createBatchedPoster as __cbp, createTelemetryObserver as __cto } from '@walkeros/core';` : "";
   const telemetryBlock = options.telemetry ? `
@@ -3307,7 +3344,7 @@ import { createBatchedPoster as __cbp, createTelemetryObserver as __cto } from '
 const __configData = ${dataPayload};
 
 (async () => {
-  const config = wireConfig(__configData);${envBlock}
+  const config = wireConfig(__configData);${envBlock}${observeBlock}
   const { collector, elb } = await startFlow(config);${telemetryBlock}${assignmentCode}
 })();`;
 }
@@ -3324,6 +3361,11 @@ function generateWrapEntry(stage1Path, options = {}) {
       "generateWrapEntry: `preview` (host activator) and `previewGrantTargets` (preview-artifact injection) are mutually exclusive. A host bundle activates a preview; an artifact injects its grant. Pass at most one."
     );
   }
+  if (options.observe !== void 0 && options.telemetry !== void 0) {
+    throw new Error(
+      "generateWrapEntry: `observe` (bake-nothing connect module) and `telemetry` (baked ingest token) are mutually exclusive observer wirings. Pass `observe` alone; the per-session credential arrives out-of-band at boot instead of being baked."
+    );
+  }
   const preview = options.preview;
   const previewEnabled = !!preview?.enabled;
   const previewImport = previewEnabled ? `import { browserSwapActivator } from '@walkeros/core';
@@ -3457,10 +3499,11 @@ function __pollTrace() {
     collector.observers.add(__observer);
     collector.observeLevel = function () { return ${JSON.stringify(options.telemetry.level ?? "standard")}; };
   }` : "";
+  const observeBlock = options.observe ? emitObserveAssignment(options.observe) : "";
   return `${previewImport}import { startFlow, wireConfig, __configData } from '${stage1Specifier}';${telemetryImport}
 ${telemetryPoller}
 (async () => {${previewBlock}
-  const config = wireConfig(__configData);${envBlock}${previewGrantBlock}
+  const config = wireConfig(__configData);${envBlock}${previewGrantBlock}${observeBlock}
   const { collector, elb } = await startFlow(config);${telemetryBlock}${assignmentCode}
 })();`;
 }
@@ -8305,7 +8348,7 @@ function validateMapping(input) {
 // src/commands/validate/validators/entry.ts
 import Ajv from "ajv";
 import { fetchPackageSchema } from "@walkeros/core";
-var CLIENT_HEADER = "walkeros-cli/4.3.0";
+var CLIENT_HEADER = "walkeros-cli/4.3.1-next-1784373088875";
 var SECTIONS = ["destinations", "sources", "transformers"];
 function resolveEntry(path20, flowConfig) {
   const flows = flowConfig.flows;
@@ -10184,6 +10227,11 @@ async function wrapSkeleton(options) {
       "wrapSkeleton: `preview` (host activator) and `previewGrantTargets` (preview-artifact injection) are mutually exclusive. Pass at most one."
     );
   }
+  if (options.observe && options.telemetry) {
+    throw new Error(
+      "wrapSkeleton: `observe` (bake-nothing connect module) and `telemetry` (baked ingest token) are mutually exclusive. Pass `observe` alone; the per-session credential arrives out-of-band at boot instead of being baked."
+    );
+  }
   if (options.preview && (typeof options.preview.previewOrigin !== "string" || !/^[a-z0-9.-]+$/.test(options.preview.previewOrigin))) {
     throw new Error(
       `Invalid previewOrigin "${options.preview.previewOrigin}". Must be a bare hostname matching /^[a-z0-9.-]+$/.`
@@ -10211,7 +10259,8 @@ async function wrapSkeleton(options) {
     ...options.preview ? { preview: options.preview } : {},
     ...options.previewGrantTargets ? { previewGrantTargets: options.previewGrantTargets } : {},
     platform,
-    ...telemetry ? { telemetry } : {}
+    ...telemetry ? { telemetry } : {},
+    ...options.observe ? { observe: options.observe } : {}
   }) : generateWrapEntryServer(absoluteSkeletonPath);
   const entryDir = await fs18.mkdtemp(path19.join(os3.tmpdir(), "walkeros-wrap-"));
   const entryPath = path19.join(entryDir, "flow.mjs");