@walkeros/cli 4.3.1-next-1784373088875 → 4.3.1

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # @walkeros/cli
 
-## 4.3.1-next-1784373088875
+## 4.3.1
 
 ### Patch Changes
 
@@ -15,13 +15,18 @@
   secrets land in code or artifacts. Ingest posts carry a versioned envelope
   with release provenance, and `walkeros observe start` opens sessions from the
   terminal.
+- 747e42f: The deprecated telemetry bundle options that baked a plaintext ingest
+  token into wrapped browser bundles are removed; observation wiring now always
+  uses the bake-nothing `observe` connect config. `walkeros observe start` sends
+  `level` and `replace`, renders the activation URL, web credential, server env
+  block, expiry, and record count, and keeps the session warm while waiting.
 - Updated dependencies [f2030ab]
 - Updated dependencies [2d6ab82]
-  - @walkeros/core@4.3.1-next-1784373088875
-  - @walkeros/collector@4.3.1-next-1784373088875
-  - @walkeros/server-core@4.3.1-next-1784373088875
-  - @walkeros/server-destination-api@4.3.1-next-1784373088875
-  - @walkeros/transformer-validate@4.3.1-next-1784373088875
+  - @walkeros/core@4.3.1
+  - @walkeros/collector@4.3.1
+  - @walkeros/server-core@4.3.1
+  - @walkeros/server-destination-api@4.3.1
+  - @walkeros/transformer-validate@4.3.1
 
 ## 4.3.0
 

package/dist/cli.js

@@ -549,7 +549,7 @@ function $e(e4, t4) {
   }
   return n5;
 }
-function Se(e4, t4 = {}, n5 = {}) {
+function je(e4, t4 = {}, n5 = {}) {
   const r6 = { ...t4, ...n5 }, o4 = {};
   let s4 = !e4 || 0 === Object.keys(e4).length;
   return Object.keys(r6).forEach((t5) => {
@@ -726,7 +726,7 @@ async function tt(e4, t4, n5) {
       if (e5 instanceof Xe) throw e5;
       return g3.logger.error("mapping condition failed", { event: g3.event, error: e5 }), false;
     })(e4, g3)) return;
-    if (a4 && !Se(a4, g3.consent)) return m3;
+    if (a4 && !je(a4, g3.consent)) return m3;
     let h2 = ue(m3) ? m3 : e4;
     if (c2 && (h2 = await Ye(c2, (e5) => {
       if (e5 instanceof Xe) throw e5;
@@ -873,20 +873,20 @@ function At(e4) {
     return null;
   }
 }
-function St(e4) {
+function jt(e4) {
   return "object" == typeof e4 && null !== e4 && !Array.isArray(e4);
 }
-function jt(e4) {
+function St(e4) {
   if (!e4) return null;
   const t4 = e4.split("."), [n5, r6, o4] = t4;
   if (3 !== t4.length || !n5 || !r6 || !o4) return null;
   const s4 = At(n5);
-  if (!St(s4)) return null;
+  if (!jt(s4)) return null;
   const i5 = s4.kid, a4 = s4.alg;
   if ("string" != typeof i5 || "ES256" !== a4) return null;
   const c2 = At(r6);
   if (!(function(e5) {
-    if (!St(e5)) return false;
+    if (!jt(e5)) return false;
     const t5 = e5;
     return "string" == typeof t5.iss && Array.isArray(t5.aud) && t5.aud.every((e6) => "string" == typeof e6) && "number" == typeof t5.iat && "number" == typeof t5.sxp && "string" == typeof t5.art && wt.test(t5.art) && "string" == typeof t5.sri && "string" == typeof t5.pb && "activate" === t5.cap && "string" == typeof t5.jti && "string" == typeof t5.pid && (void 0 === t5.ses || "string" == typeof t5.ses) && (void 0 === t5.sb || "string" == typeof t5.sb);
   })(c2)) return null;
@@ -894,7 +894,7 @@ function jt(e4) {
   return u2 && 64 === u2.byteLength ? { grant: c2, kid: i5, signed: $t(`${n5}.${r6}`), signature: u2 } : null;
 }
 async function It(e4, t4) {
-  const n5 = jt(e4);
+  const n5 = St(e4);
   if (!n5) return { ok: false, reason: "malformed" };
   const { grant: r6, kid: o4, signed: s4, signature: i5 } = n5;
   if (r6.iss !== t4.iss) return { ok: false, reason: "foreign-issuer" };
@@ -946,9 +946,13 @@ function on(e4, t4) {
 }
 function sn(e4) {
   const t4 = e4.batchMs, n5 = "number" == typeof t4 && Number.isFinite(t4) && t4 > 0 ? Math.floor(t4) : 50, r6 = e4.batchSize, o4 = "number" == typeof r6 && Number.isFinite(r6) && r6 >= 1 ? Math.floor(r6) : 50, s4 = e4.maxBodyBytes, i5 = "number" == typeof s4 && Number.isFinite(s4) && s4 >= 1 ? Math.floor(s4) : 6e4, a4 = e4.fetch ?? ((e5, t5) => globalThis.fetch(e5, t5)), c2 = e4.onError ?? (() => {
-  });
-  let u2 = [], f3 = null, l3 = 0;
-  function p3(e5) {
+  }), u2 = {};
+  for (const [t5, n6] of Object.entries(e4.headers ?? {})) {
+    const e5 = t5.toLowerCase();
+    "authorization" !== e5 && "content-type" !== e5 && (u2[t5] = n6);
+  }
+  let f3 = [], l3 = null, p3 = 0;
+  function d2(e5) {
     const t5 = { v: 1, records: e5 }, n6 = JSON.stringify(t5);
     if (e5.length <= 1) return [n6];
     if ((function(e6) {
@@ -965,26 +969,26 @@ function sn(e4) {
       return t6;
     })(n6) <= i5) return [n6];
     const r7 = Math.floor(e5.length / 2);
-    return [...p3(e5.slice(0, r7)), ...p3(e5.slice(r7))];
+    return [...d2(e5.slice(0, r7)), ...d2(e5.slice(r7))];
   }
-  function d2(t5) {
-    return Promise.resolve().then(() => a4(e4.url, { method: "POST", headers: { ...e4.headers, "Content-Type": "application/json", Authorization: `Bearer ${e4.token}` }, body: t5 })).then((t6) => {
+  function m3(t5) {
+    return Promise.resolve().then(() => a4(e4.url, { method: "POST", headers: { ...u2, "Content-Type": "application/json", Authorization: `Bearer ${e4.token}` }, body: t5 })).then((t6) => {
       t6 && "object" == typeof t6 && "number" == typeof t6.status && e4.onStatus?.(t6.status), t6 && "object" == typeof t6 && "ok" in t6 && !t6.ok && c2(new Error(`Observer responded ${t6.status}`));
     }).catch((e5) => {
       c2(e5);
     });
   }
-  function m3() {
-    if (0 === u2.length) return;
-    const e5 = u2;
-    u2 = [], f3 && (clearTimeout(f3), f3 = null);
-    const t5 = p3(e5);
+  function g3() {
+    if (0 === f3.length) return;
+    const e5 = f3;
+    f3 = [], l3 && (clearTimeout(l3), l3 = null);
+    const t5 = d2(e5);
     (async () => {
-      for (const e6 of t5) await d2(e6);
+      for (const e6 of t5) await m3(e6);
     })();
   }
   return (e5) => {
-    u2.push({ ...e5, seq: ++l3 }), u2.length >= o4 ? m3() : null === f3 && (f3 = setTimeout(m3, n5));
+    f3.push({ ...e5, seq: ++p3 }), f3.length >= o4 ? g3() : null === l3 && (l3 = setTimeout(g3, n5));
   };
 }
 function vn(e4) {
@@ -1024,12 +1028,12 @@ async function wn(e4, t4) {
   const n5 = await yn(e4, t4);
   return { packageName: n5.packageName, version: n5.version, type: n5.type, platform: n5.platform, schemas: n5.schemas, examples: n5.examples, ...n5.hints ? { hints: n5.hints } : {} };
 }
-function Sn(e4) {
+function jn(e4) {
   const t4 = (e4.startsWith(An) ? e4.slice(5) : e4).split(".");
   return t4.some((e5) => "" === e5) ? [] : t4;
 }
 function xn(e4) {
-  if (!e4.startsWith(jn)) return null;
+  if (!e4.startsWith(Sn)) return null;
   const t4 = e4.slice(5).split("."), [n5, r6, o4] = t4;
   return 3 === t4.length && n5 && r6 && o4 ? { pb: n5, ses: r6, secret: o4 } : null;
 }
@@ -1250,7 +1254,7 @@ function ur(e4, t4) {
 function fr(e4, t4) {
   return "Transformer" === t4 && (void 0 === e4.code && void 0 === e4.package && void 0 === e4.import && (void 0 !== e4.before || void 0 !== e4.next || void 0 !== e4.cache || void 0 !== e4.state || void 0 !== e4.mapping));
 }
-var e, t, r, i, f, l, m, v, b, T, D, F, U, L, K, q, J, G, re, we, Ie, Pe, qe, Xe, wt, xt, Ot, Nt, tn, kn, An, jn, Rn, Fn, Un, sr, ir, ar, cr;
+var e, t, r, i, f, l, m, v, b, T, D, F, U, L, K, q, J, G, re, we, Ie, Pe, qe, Xe, wt, xt, Ot, Nt, tn, kn, An, Sn, Rn, Fn, Un, sr, ir, ar, cr;
 var init_dist = __esm({
   "../core/dist/index.mjs"() {
     "use strict";
@@ -1300,7 +1304,7 @@ var init_dist = __esm({
     tn = null;
     kn = "observe";
     An = "call:";
-    jn = "obsw_";
+    Sn = "obsw_";
     Rn = /* @__PURE__ */ new WeakMap();
     Fn = "__walkeros_cache_v__";
     Un = "__walkeros_cache_exp__";
@@ -2408,7 +2412,7 @@ function qn(e4) {
     for (const [e5, i5] of Object.entries(t4)) i5 && "object" == typeof i5 && ("object" === i5.type && i5.properties && "string" != typeof i5.title && (i5.title = e5), qn(i5));
   }
 }
-var e3, t3, i3, r4, a3, s2, c, l2, d, p, u, m2, f2, g2, b2, h, v2, S, y2, w2, k2, C2, x, j, P2, D2, E, O, I2, R3, $, A, z3, L2, q2, N2, W, B2, U3, _2, H2, V, Z2, G2, K3, Q2, X3, Y3, ee3, te3, ie3, ne3, oe2, re3, ae3, se2, ce, le2, de2, pe2, ue2, me2, fe, ge2, be2, he2, ve2, Se2, ye2, we2, ke2, Ce2, xe, je, Pe2, De, Ee2, Oe2, Ie2, Re3, Je3, Me, Te, Fe3, $e2, Ae, ze2, Le2, qe2, Ne3, We3, Be3, Ue3, _e2, He2, Ve3, Ze3, Ge3, Ke3, Qe3, Xe3, Ye3, et3, tt3, it2, nt3, ot2, rt2, at2, st2, ct2, lt3, dt2, pt3, ut2, mt2, ft2, gt3, bt3, ht3, vt3, St3, yt2, wt3, kt3, Ct2, xt3, jt3, Pt, Dt2, Et2, Ot3, It3, Rt2, Jt2, Mt2, Tt2, Ft, $t3, At3, zt, Lt2, qt2, Nt3, Wt2, Bt, Ut, _t2, Ht2, Vt2, Zt, Gt2, Kt, Qt, Xt, Yt2, ei, ti, ii, ni, oi, ri, ai, si, ci, li, di, pi, ui, mi, fi, gi, bi, hi, vi, Si, yi, wi, ki, Ci, xi, ji, Di, Ei, Oi, Ii, Ri, Ji, Mi, Ti, Fi, $i, Ai, zi, Li, Ui, _i, Hi, Vi, Zi, Gi, Ki, Qi, Xi, Yi, tn2, nn2, on2, rn3, an, sn2, cn, dn, bn3, hn2, vn3, Sn2, yn3, wn3, kn3, Cn3, Wn;
+var e3, t3, i3, r4, a3, s2, c, l2, d, p, u, m2, f2, g2, b2, h, v2, S, y2, w2, k2, C2, x, j, P2, D2, E, O, I2, R3, $, A, z3, L2, q2, N2, W, B2, U3, _2, H2, V, Z2, G2, K3, Q2, X3, Y3, ee3, te3, ie3, ne3, oe2, re3, ae3, se2, ce, le2, de2, pe2, ue2, me2, fe, ge2, be2, he2, ve2, Se, ye2, we2, ke2, Ce2, xe, je2, Pe2, De, Ee2, Oe2, Ie2, Re3, Je3, Me, Te, Fe3, $e2, Ae, ze2, Le2, qe2, Ne3, We3, Be3, Ue3, _e2, He2, Ve3, Ze3, Ge3, Ke3, Qe3, Xe3, Ye3, et3, tt3, it2, nt3, ot2, rt2, at2, st2, ct2, lt3, dt2, pt3, ut2, mt2, ft2, gt3, bt3, ht3, vt3, St3, yt2, wt3, kt3, Ct2, xt3, jt3, Pt, Dt2, Et2, Ot3, It3, Rt2, Jt2, Mt2, Tt2, Ft, $t3, At3, zt, Lt2, qt2, Nt3, Wt2, Bt, Ut, _t2, Ht2, Vt2, Zt, Gt2, Kt, Qt, Xt, Yt2, ei, ti, ii, ni, oi, ri, ai, si, ci, li, di, pi, ui, mi, fi, gi, bi, hi, vi, Si, yi, wi, ki, Ci, xi, ji, Di, Ei, Oi, Ii, Ri, Ji, Mi, Ti, Fi, $i, Ai, zi, Li, Ui, _i, Hi, Vi, Zi, Gi, Ki, Qi, Xi, Yi, tn2, nn2, on2, rn3, an, sn2, cn, dn, bn3, hn2, vn3, Sn2, yn3, wn3, kn3, Cn3, Wn;
 var init_dev = __esm({
   "../core/dist/dev.mjs"() {
     "use strict";
@@ -2417,7 +2421,7 @@ var init_dev = __esm({
       for (var n5 in i5) e3(t4, n5, { get: i5[n5], enumerable: true });
     };
     i3 = {};
-    t3(i3, { BaseContextConfig: () => A, CacheRuleSchema: () => Ye3, CacheSchema: () => et3, CacheSchemas: () => Ze3, ClickIdEntrySchema: () => rn3, CodeSchema: () => tn2, CollectorSchemas: () => Ot3, ConsentSchema: () => Z2, ContractActionsSchema: () => Ji, ContractRuleSchema: () => Ti, ContractSchema: () => Fi, ContractSchemaEntry: () => Ri, Counter: () => d, CredentialsSchema: () => sn2, DeepPartialEventSchema: () => ie3, DestinationSchemas: () => Me, DestinationsMapConfig: () => q2, EntitiesSchema: () => Y3, EntitySchema: () => X3, EventCacheRuleSchema: () => Ge3, EventCacheSchema: () => Ke3, EventSchema: () => ee3, FlowBundlePackageSchema: () => vi, FlowBundleSchema: () => Si, FlowCodeSchema: () => yi, FlowConfigSchema: () => Ai, FlowDestinationSchema: () => Oi, FlowJsonSchema: () => Li, FlowSchema: () => zi, FlowSchemas: () => fi, FlowSourceSchema: () => Di, FlowStoreSchema: () => Ii, FlowTransformerSchema: () => Ei, GenericEnvConfig: () => R3, GenericSettingsConfig: () => I2, HandlersConfig: () => x, HintSchema: () => nn2, HintsSchema: () => on2, IdConfig: () => D2, Identifier: () => c, InitConfig: () => E, LoggerConfigSchema: () => nt3, LoggerHandlerSchema: () => it2, LoopSchema: () => fe, MapSchema: () => be2, MappingResultSchema: () => Ce2, MappingSchemas: () => pe2, MatchExpressionSchema: () => Ae, MatcherSchemas: () => Te, OptionalPrimitiveValue: () => u, OrderedPropertiesSchema: () => H2, PartialEventSchema: () => te3, PolicySchema: () => ve2, PrimaryConfig: () => O, PrimitiveValue: () => p, ProcessingControlConfig: () => z3, PropertiesSchema: () => _2, PropertySchema: () => U3, PropertyTypeSchema: () => B2, QueueConfig: () => P2, RequiredBoolean: () => s2, RequiredNumber: () => a3, RequiredString: () => r4, RouteSchema: () => Be3, RouteWithoutManySchema: () => Ve3, RuleSchema: () => ye2, RulesSchema: () => we2, RuntimeInstanceConfig: () => $, ServiceAccountSchema: () => an, SetSchema: () => ge2, SourceSchema: () => Q2, SourceSchemas: () => Ut, SourceTypeSchema: () => V, SourcesMapConfig: () => L2, StateSchema: () => tt3, StoreCacheRuleSchema: () => Qe3, StoreCacheSchema: () => Xe3, StoreSchemas: () => li, Timestamp: () => l2, TransformerSchemas: () => oi, UserSchema: () => G2, UtilitySchemas: () => m2, ValidateEventsSchema: () => ji, ValueConfigSchema: () => he2, ValueSchema: () => ue2, ValuesSchema: () => me2, VerboseConfig: () => j, WalkerOSSchemas: () => N2, configJsonSchema: () => Ui, consentJsonSchema: () => de2, contractJsonSchema: () => Xi, contractRuleJsonSchema: () => Qi, createArraySchema: () => $n, createConsentConfig: () => F3, createDataTransformationConfig: () => J3, createEnumSchema: () => An2, createMappingRulesConfig: () => M2, createObjectSchema: () => Tn2, createPolicyConfig: () => T3, createTupleSchema: () => zn2, credentialsJsonSchema: () => cn, destinationJsonSchema: () => Zi, entityJsonSchema: () => ce, eventJsonSchema: () => ne3, flowConfigJsonSchema: () => Hi, flowJsonSchema: () => _i, loopJsonSchema: () => Pe2, mapJsonSchema: () => Ee2, orderedPropertiesJsonSchema: () => se2, parseConfig: () => qi, parseFlow: () => Wi, partialEventJsonSchema: () => oe2, policyJsonSchema: () => Oe2, propertiesJsonSchema: () => ae3, ruleJsonSchema: () => Ie2, rulesJsonSchema: () => Re3, safeParseConfig: () => Ni, safeParseFlow: () => Bi, setJsonSchema: () => De, sourceJsonSchema: () => Vi, sourceTypeJsonSchema: () => le2, storeJsonSchema: () => Ki, transformerJsonSchema: () => Gi, userJsonSchema: () => re3, validateEventsJsonSchema: () => Yi, validateFlowConfig: () => gn, valueConfigJsonSchema: () => je, valueJsonSchema: () => xe, z: () => n3, zodToSchema: () => Ln2 });
+    t3(i3, { BaseContextConfig: () => A, CacheRuleSchema: () => Ye3, CacheSchema: () => et3, CacheSchemas: () => Ze3, ClickIdEntrySchema: () => rn3, CodeSchema: () => tn2, CollectorSchemas: () => Ot3, ConsentSchema: () => Z2, ContractActionsSchema: () => Ji, ContractRuleSchema: () => Ti, ContractSchema: () => Fi, ContractSchemaEntry: () => Ri, Counter: () => d, CredentialsSchema: () => sn2, DeepPartialEventSchema: () => ie3, DestinationSchemas: () => Me, DestinationsMapConfig: () => q2, EntitiesSchema: () => Y3, EntitySchema: () => X3, EventCacheRuleSchema: () => Ge3, EventCacheSchema: () => Ke3, EventSchema: () => ee3, FlowBundlePackageSchema: () => vi, FlowBundleSchema: () => Si, FlowCodeSchema: () => yi, FlowConfigSchema: () => Ai, FlowDestinationSchema: () => Oi, FlowJsonSchema: () => Li, FlowSchema: () => zi, FlowSchemas: () => fi, FlowSourceSchema: () => Di, FlowStoreSchema: () => Ii, FlowTransformerSchema: () => Ei, GenericEnvConfig: () => R3, GenericSettingsConfig: () => I2, HandlersConfig: () => x, HintSchema: () => nn2, HintsSchema: () => on2, IdConfig: () => D2, Identifier: () => c, InitConfig: () => E, LoggerConfigSchema: () => nt3, LoggerHandlerSchema: () => it2, LoopSchema: () => fe, MapSchema: () => be2, MappingResultSchema: () => Ce2, MappingSchemas: () => pe2, MatchExpressionSchema: () => Ae, MatcherSchemas: () => Te, OptionalPrimitiveValue: () => u, OrderedPropertiesSchema: () => H2, PartialEventSchema: () => te3, PolicySchema: () => ve2, PrimaryConfig: () => O, PrimitiveValue: () => p, ProcessingControlConfig: () => z3, PropertiesSchema: () => _2, PropertySchema: () => U3, PropertyTypeSchema: () => B2, QueueConfig: () => P2, RequiredBoolean: () => s2, RequiredNumber: () => a3, RequiredString: () => r4, RouteSchema: () => Be3, RouteWithoutManySchema: () => Ve3, RuleSchema: () => ye2, RulesSchema: () => we2, RuntimeInstanceConfig: () => $, ServiceAccountSchema: () => an, SetSchema: () => ge2, SourceSchema: () => Q2, SourceSchemas: () => Ut, SourceTypeSchema: () => V, SourcesMapConfig: () => L2, StateSchema: () => tt3, StoreCacheRuleSchema: () => Qe3, StoreCacheSchema: () => Xe3, StoreSchemas: () => li, Timestamp: () => l2, TransformerSchemas: () => oi, UserSchema: () => G2, UtilitySchemas: () => m2, ValidateEventsSchema: () => ji, ValueConfigSchema: () => he2, ValueSchema: () => ue2, ValuesSchema: () => me2, VerboseConfig: () => j, WalkerOSSchemas: () => N2, configJsonSchema: () => Ui, consentJsonSchema: () => de2, contractJsonSchema: () => Xi, contractRuleJsonSchema: () => Qi, createArraySchema: () => $n, createConsentConfig: () => F3, createDataTransformationConfig: () => J3, createEnumSchema: () => An2, createMappingRulesConfig: () => M2, createObjectSchema: () => Tn2, createPolicyConfig: () => T3, createTupleSchema: () => zn2, credentialsJsonSchema: () => cn, destinationJsonSchema: () => Zi, entityJsonSchema: () => ce, eventJsonSchema: () => ne3, flowConfigJsonSchema: () => Hi, flowJsonSchema: () => _i, loopJsonSchema: () => Pe2, mapJsonSchema: () => Ee2, orderedPropertiesJsonSchema: () => se2, parseConfig: () => qi, parseFlow: () => Wi, partialEventJsonSchema: () => oe2, policyJsonSchema: () => Oe2, propertiesJsonSchema: () => ae3, ruleJsonSchema: () => Ie2, rulesJsonSchema: () => Re3, safeParseConfig: () => Ni, safeParseFlow: () => Bi, setJsonSchema: () => De, sourceJsonSchema: () => Vi, sourceTypeJsonSchema: () => le2, storeJsonSchema: () => Ki, transformerJsonSchema: () => Gi, userJsonSchema: () => re3, validateEventsJsonSchema: () => Yi, validateFlowConfig: () => gn, valueConfigJsonSchema: () => je2, valueJsonSchema: () => xe, z: () => n3, zodToSchema: () => Ln2 });
     r4 = n3.string();
     a3 = n3.number();
     s2 = n3.boolean();
@@ -2476,7 +2480,7 @@ var init_dev = __esm({
     le2 = o2(V);
     de2 = o2(Z2);
     pe2 = {};
-    t3(pe2, { ConfigSchema: () => ke2, LoopSchema: () => fe, MapSchema: () => be2, PolicySchema: () => ve2, ResultSchema: () => Ce2, RulePatchSchema: () => Se2, RuleSchema: () => ye2, RulesSchema: () => we2, SetSchema: () => ge2, ValueConfigSchema: () => he2, ValueSchema: () => ue2, ValuesSchema: () => me2, configJsonSchema: () => Je3, loopJsonSchema: () => Pe2, mapJsonSchema: () => Ee2, policyJsonSchema: () => Oe2, ruleJsonSchema: () => Ie2, rulesJsonSchema: () => Re3, setJsonSchema: () => De, valueConfigJsonSchema: () => je, valueJsonSchema: () => xe });
+    t3(pe2, { ConfigSchema: () => ke2, LoopSchema: () => fe, MapSchema: () => be2, PolicySchema: () => ve2, ResultSchema: () => Ce2, RulePatchSchema: () => Se, RuleSchema: () => ye2, RulesSchema: () => we2, SetSchema: () => ge2, ValueConfigSchema: () => he2, ValueSchema: () => ue2, ValuesSchema: () => me2, configJsonSchema: () => Je3, loopJsonSchema: () => Pe2, mapJsonSchema: () => Ee2, policyJsonSchema: () => Oe2, ruleJsonSchema: () => Ie2, rulesJsonSchema: () => Re3, setJsonSchema: () => De, valueConfigJsonSchema: () => je2, valueJsonSchema: () => xe });
     ue2 = n3.lazy(() => n3.union([n3.string().describe('String value or property path (e.g., "data.id")'), n3.number().describe("Numeric value"), n3.boolean().describe("Boolean value"), n3.lazy(() => W), n3.array(ue2).describe("Array of values")])).meta({ id: "MappingValue", title: "Mapping.Value", description: "Polymorphic transform primitive used in every mapping field. A string path, constant, operator object (map/loop/set/condition/consent), or array of values." });
     me2 = n3.array(ue2).meta({ id: "MappingValues", title: "Mapping.Values", description: "Array of transformation values." }).describe("Array of transformation values");
     fe = n3.lazy(() => n3.tuple([ue2, ue2]).describe("Loop transformation: [source, transform] tuple for array processing")).meta({ id: "MappingLoop", title: "Mapping.Loop", description: "Loop tuple [source, transform] for iterating and transforming arrays." });
@@ -2484,13 +2488,13 @@ var init_dev = __esm({
     be2 = n3.lazy(() => n3.record(n3.string(), ue2).describe("Map: Object mapping keys to transformation values")).meta({ id: "MappingMap", title: "Mapping.Map", description: "Map: object mapping keys to transformation values." });
     he2 = W = n3.object({ key: n3.string().optional().describe('Property path to extract from event (e.g., "data.id", "user.email")'), value: n3.union([n3.string(), n3.number(), n3.boolean()]).optional().describe("Static primitive value"), fn: n3.string().optional().describe("Custom transformation function as string (serialized)"), map: be2.optional().describe("Object mapping: transform event data to structured output"), loop: fe.optional().describe("Loop transformation: [source, transform] for array processing"), set: ge2.optional().describe("Set of values: combine or select from multiple values"), consent: Z2.optional().describe("Required consent states to include this value"), condition: n3.string().optional().describe("Condition function as string: return true to include value"), validate: n3.string().optional().describe("Validation function as string: return true if value is valid") }).refine((e4) => Object.keys(e4).length > 0, { message: "ValueConfig must have at least one property" }).meta({ id: "MappingValueConfig", title: "Mapping.ValueConfig", description: "Object-form value transformation with map/loop/set/condition/consent etc." }).describe("Value transformation configuration with multiple strategies");
     ve2 = n3.record(n3.string(), ue2).meta({ id: "MappingPolicy", title: "Mapping.Policy", description: "Policy rules for event pre-processing (key \u2192 value transformation)." }).describe("Policy rules for event pre-processing (key \u2192 value mapping)");
-    Se2 = n3.object({ name: n3.string().nullable().optional(), data: n3.union([ue2, me2]).nullable().optional(), settings: n3.unknown().nullable().optional(), condition: n3.string().nullable().optional(), consent: Z2.nullable().optional(), policy: ve2.nullable().optional(), batch: n3.union([n3.number(), n3.object({ wait: n3.number().optional(), size: n3.number().optional(), age: n3.number().optional() })]).nullable().optional(), include: n3.array(n3.string()).nullable().optional(), ignore: n3.boolean().nullable().optional(), silent: n3.boolean().nullable().optional() }).meta({ id: "MappingRulePatch", title: "Mapping.RulePatch", description: "Partial rule deep-merged onto a package-shipped default; a null value clears the inherited field." }).describe("Partial rule for `extend`; null clears an inherited field");
-    ye2 = n3.object({ name: n3.string().optional().describe('Custom event name override (e.g., "view_item" for "product view")'), data: n3.union([ue2, me2]).optional().describe("Data transformation rules for event"), settings: n3.unknown().optional().describe("Destination-specific settings for this event mapping"), condition: n3.string().optional().describe("Condition function as string: return true to process event"), consent: Z2.optional().describe("Required consent states to process this event"), policy: ve2.optional().describe("Event-level policy overrides (applied after config-level policy)"), batch: n3.union([n3.number(), n3.object({ wait: n3.number().optional(), size: n3.number().optional(), age: n3.number().optional() })]).optional().describe("Batch scheduling: bare number is the debounce wait window (legacy); object form supports wait/size/age."), include: n3.array(n3.string()).optional().describe('Event sections (e.g. ["context", "globals"]) flattened into context.data'), ignore: n3.boolean().optional().describe("Skip the event entirely. No push, no side effects. Use for suppression."), silent: n3.boolean().optional().describe("Run side effects (settings.identify, ...) but suppress the destination default push call."), extend: Se2.optional().describe("Merge mode: a partial rule deep-merged onto the package-shipped default at this key (instead of replacing it). A null value clears an inherited field."), remove: n3.array(n3.string()).optional().describe("Dotted paths stripped from the produced data payload after evaluation (applied last).") }).meta({ id: "MappingRule", title: "Mapping.Rule", description: "Configuration for transforming a single event at one stage of the flow (source or destination)." }).describe("Mapping rule for specific entity-action combination");
+    Se = n3.object({ name: n3.string().nullable().optional(), data: n3.union([ue2, me2]).nullable().optional(), settings: n3.unknown().nullable().optional(), condition: n3.string().nullable().optional(), consent: Z2.nullable().optional(), policy: ve2.nullable().optional(), batch: n3.union([n3.number(), n3.object({ wait: n3.number().optional(), size: n3.number().optional(), age: n3.number().optional() })]).nullable().optional(), include: n3.array(n3.string()).nullable().optional(), ignore: n3.boolean().nullable().optional(), silent: n3.boolean().nullable().optional() }).meta({ id: "MappingRulePatch", title: "Mapping.RulePatch", description: "Partial rule deep-merged onto a package-shipped default; a null value clears the inherited field." }).describe("Partial rule for `extend`; null clears an inherited field");
+    ye2 = n3.object({ name: n3.string().optional().describe('Custom event name override (e.g., "view_item" for "product view")'), data: n3.union([ue2, me2]).optional().describe("Data transformation rules for event"), settings: n3.unknown().optional().describe("Destination-specific settings for this event mapping"), condition: n3.string().optional().describe("Condition function as string: return true to process event"), consent: Z2.optional().describe("Required consent states to process this event"), policy: ve2.optional().describe("Event-level policy overrides (applied after config-level policy)"), batch: n3.union([n3.number(), n3.object({ wait: n3.number().optional(), size: n3.number().optional(), age: n3.number().optional() })]).optional().describe("Batch scheduling: bare number is the debounce wait window (legacy); object form supports wait/size/age."), include: n3.array(n3.string()).optional().describe('Event sections (e.g. ["context", "globals"]) flattened into context.data'), ignore: n3.boolean().optional().describe("Skip the event entirely. No push, no side effects. Use for suppression."), silent: n3.boolean().optional().describe("Run side effects (settings.identify, ...) but suppress the destination default push call."), extend: Se.optional().describe("Merge mode: a partial rule deep-merged onto the package-shipped default at this key (instead of replacing it). A null value clears an inherited field."), remove: n3.array(n3.string()).optional().describe("Dotted paths stripped from the produced data payload after evaluation (applied last).") }).meta({ id: "MappingRule", title: "Mapping.Rule", description: "Configuration for transforming a single event at one stage of the flow (source or destination)." }).describe("Mapping rule for specific entity-action combination");
     we2 = n3.record(n3.string(), n3.record(n3.string(), n3.union([ye2, n3.array(ye2)])).optional()).meta({ id: "MappingRules", title: "Mapping.Rules", description: 'Event mapping rules tree: entity \u2192 action \u2192 Rule (or Rule[]). Use "*" as wildcard for entity or action.' }).describe('Event mapping rules: entity \u2192 action \u2192 Rule. Keys match event name split by space. Use "*" as wildcard for entity or action. Priority: exact > entity wildcard > action wildcard > global wildcard (*\u2192*).');
     ke2 = n3.object({ consent: Z2.optional().describe("Required consent states to process any events"), data: n3.union([ue2, me2]).optional().describe("Global data transformation applied to all events"), include: n3.array(n3.string()).optional().describe("Event sections to flatten into context.data"), mapping: we2.optional().describe("Entity-action specific mapping rules"), policy: ve2.optional().describe("Pre-processing policy rules applied before mapping") }).meta({ id: "MappingConfig", title: "Mapping.Config", description: "Shared mapping configuration (consent, data, include, mapping, policy)." }).describe("Shared mapping configuration for sources and destinations");
     Ce2 = n3.object({ eventMapping: ye2.optional().describe("Resolved mapping rule for event"), mappingKey: n3.string().optional().describe('Mapping key used (e.g., "product.view")') }).meta({ id: "MappingResult", title: "Mapping.Result", description: "Mapping resolution result (matched rule + key)." }).describe("Mapping resolution result");
     xe = o2(ue2);
-    je = o2(he2);
+    je2 = o2(he2);
     Pe2 = o2(fe);
     De = o2(ge2);
     Ee2 = o2(be2);
@@ -5146,12 +5150,21 @@ export default async function(context = {}) {
 function readObserveConnect(flowSettings, logger) {
   const observe = flowSettings.config?.observe;
   if (!observe) return void 0;
-  const { url, binding } = observe;
+  const { url, binding, level, sample } = observe;
   if (url === void 0 && binding === void 0) return void 0;
   const trimmedUrl = typeof url === "string" ? url.trim() : "";
   const trimmedBinding = typeof binding === "string" ? binding.trim() : "";
   if (trimmedUrl !== "" && trimmedBinding !== "") {
-    return { url: trimmedUrl, binding: trimmedBinding };
+    return {
+      url: trimmedUrl,
+      binding: trimmedBinding,
+      // Same JSON-borne prudence as the pair: only known-shaped public
+      // values reach the emitted literal.
+      ...level === "off" || level === "standard" || level === "trace" ? { level } : {},
+      // Sample is a fraction in [0, 1] per the Flow.Observe contract; the
+      // range test also drops NaN and the infinities.
+      ...typeof sample === "number" && sample >= 0 && sample <= 1 ? { sample } : {}
+    };
   }
   const missing = [
     ...trimmedUrl === "" ? ["url"] : [],
@@ -5174,11 +5187,6 @@ function emitObserveAssignment(observe) {
   config.observe = ${JSON.stringify(literal)};`;
 }
 function generateWebEntry(stage1Path, dataPayload, options = {}) {
-  if (options.observe !== void 0 && options.telemetry !== void 0) {
-    throw new Error(
-      "generateWebEntry: `observe` (bake-nothing connect module) and `telemetry` (baked ingest token) are mutually exclusive observer wirings. Pass `observe` alone; the per-session credential arrives out-of-band at boot instead of being baked."
-    );
-  }
   const assignments = [];
   if (options.windowCollector) {
     assignments.push(
@@ -5199,30 +5207,13 @@ function generateWebEntry(stage1Path, dataPayload, options = {}) {
   }` : "";
   const stage1Specifier = toFileImportSpecifier(stage1Path);
   const observeBlock = options.observe ? emitObserveAssignment(options.observe) : "";
-  const telemetryImport = options.telemetry ? `
-import { createBatchedPoster as __cbp, createTelemetryObserver as __cto } from '@walkeros/core';` : "";
-  const telemetryBlock = options.telemetry ? `
-  // --- Telemetry wiring ---
-  {
-    const __emit = __cbp({
-      url: ${JSON.stringify(options.telemetry.observerUrl)},
-      token: ${JSON.stringify(options.telemetry.ingestToken)},
-    });
-    const __observer = __cto(__emit, {
-      flowId: ${JSON.stringify(options.telemetry.flowId)},
-      level: ${JSON.stringify(options.telemetry.level ?? "standard")},
-      sample: ${JSON.stringify(options.telemetry.sample ?? 1)},
-    });
-    collector.observers.add(__observer);
-    collector.observeLevel = function () { return ${JSON.stringify(options.telemetry.level ?? "standard")}; };
-  }` : "";
-  return `import { startFlow, wireConfig } from '${stage1Specifier}';${telemetryImport}
+  return `import { startFlow, wireConfig } from '${stage1Specifier}';
 
 const __configData = ${dataPayload};
 
 (async () => {
   const config = wireConfig(__configData);${envBlock}${observeBlock}
-  const { collector, elb } = await startFlow(config);${telemetryBlock}${assignmentCode}
+  const { collector, elb } = await startFlow(config);${assignmentCode}
 })();`;
 }
 function processConfigValue(value) {
@@ -5867,7 +5858,7 @@ var init_contract = __esm({
   "src/core/contract.ts"() {
     "use strict";
     init_config_file();
-    bakedContractVersion = true ? "3.1.0" : PLACEHOLDER;
+    bakedContractVersion = true ? "4.0.0" : PLACEHOLDER;
   }
 });
 
@@ -6339,7 +6330,6 @@ function formatPreviewCreated(preview, options) {
   }
   const lines = [
     `Preview created (${preview.id})`,
-    `  Token:      ${preview.token}`,
     `  Created by: ${preview.createdBy}`,
     `  Bundle URL: ${preview.bundleUrl}`,
     "",
@@ -6365,15 +6355,20 @@ var observe_exports = {};
 __export(observe_exports, {
   formatObserveSession: () => formatObserveSession,
   getObserveSession: () => getObserveSession,
+  heartbeatObserveSession: () => heartbeatObserveSession,
   observeStartCommand: () => observeStartCommand,
   startObserveSession: () => startObserveSession,
   waitForObserveSessionSettled: () => waitForObserveSessionSettled
 });
+function isObserveLevel(value) {
+  return OBSERVE_LEVELS2.includes(value);
+}
 async function startObserveSession(options) {
   const pid = options.projectId ?? requireProjectId();
   const body = {
     settingsName: options.settingsName,
-    ...options.force ? { force: true } : {}
+    ...options.replace ? { replace: true } : {},
+    ...options.level !== void 0 ? { level: options.level } : {}
   };
   const response = await apiFetch(
     `/api/projects/${pid}/flows/${options.flowId}/observe-sessions`,
@@ -6404,12 +6399,26 @@ async function getObserveSession(options) {
   }
   return response.json();
 }
+async function heartbeatObserveSession(options) {
+  const pid = options.projectId ?? requireProjectId();
+  try {
+    await apiFetch(
+      `/api/projects/${pid}/flows/${options.flowId}/observe-sessions/${options.sessionId}/heartbeat`,
+      { method: "POST" }
+    );
+  } catch {
+  }
+}
 async function waitForObserveSessionSettled(options) {
   const deadline = Date.now() + options.timeoutMs;
   for (; ; ) {
+    await heartbeatObserveSession(options);
     const session = await getObserveSession(options);
-    if (session.status !== "arming" || Date.now() >= deadline) return session;
-    await new Promise((resolve4) => setTimeout(resolve4, options.pollIntervalMs));
+    const remainingMs = deadline - Date.now();
+    if (session.status !== "arming" || remainingMs <= 0) return session;
+    await new Promise(
+      (resolve4) => setTimeout(resolve4, Math.min(options.pollIntervalMs, remainingMs))
+    );
   }
 }
 function formatObserveSession(session) {
@@ -6419,33 +6428,58 @@ function formatObserveSession(session) {
   lines.push("");
   if (session.web) {
     lines.push("  Web");
-    lines.push(`    Preview:    ${session.web.previewId}`);
-    lines.push(`    Token:      ${session.web.token}`);
     lines.push(`    Bundle URL: ${session.web.bundleUrl}`);
-    lines.push(
-      session.web.previewEnabled ? "    Activate:   open the Observe window in the app to mint the activation link (app-signed; the CLI cannot build it from the token)" : "    Activate:   not available: the deployed web bundle cannot verify activation grants (redeploy the web flow first)"
-    );
+    lines.push(`    Credential: ${session.web.credential}`);
+    if (session.web.activationUrl) {
+      lines.push(`    Activate:   ${session.web.activationUrl}`);
+    } else if (session.web.previewEnabled) {
+      lines.push(
+        `    Activate:   no activation link minted yet${arming ? " (still arming)" : ""}; open the Observe window in the app to mint one`
+      );
+    } else {
+      lines.push(
+        "    Activate:   not available: the deployed web bundle cannot verify activation grants (redeploy the web flow first)"
+      );
+    }
   } else {
     lines.push(`  Web: no web part${arming ? " yet (still arming)" : ""}`);
   }
   lines.push("");
-  if (session.serverEndpoint) {
+  if (session.server) {
     lines.push("  Server");
     if (session.serverFlowName) {
       lines.push(`    Flow:       ${session.serverFlowName}`);
     }
-    lines.push(`    Endpoint:   ${session.serverEndpoint}`);
+    lines.push(
+      session.server.endpoint ? `    Endpoint:   ${session.server.endpoint}` : `    Endpoint:   not live${arming ? " yet (still arming)" : ""}`
+    );
+    lines.push("    Env:");
+    lines.push(
+      `      WALKEROS_OBSERVER_URL=${session.server.env.WALKEROS_OBSERVER_URL}`
+    );
+    lines.push(
+      `      WALKEROS_DEPLOYMENT_ID=${session.server.env.WALKEROS_DEPLOYMENT_ID}`
+    );
+    lines.push(
+      `      WALKEROS_INGEST_TOKEN=${session.server.env.WALKEROS_INGEST_TOKEN}`
+    );
   } else {
     lines.push(
-      `  Server: no live endpoint${arming ? " yet (still arming)" : ""}`
+      `  Server: no server part${arming ? " yet (still arming)" : ""}`
     );
   }
   lines.push("");
+  lines.push(`  Expires:  ${session.expiresAt}`);
+  lines.push(`  Records:  ${session.recordsReceived}`);
+  lines.push("");
   lines.push(
     "  The session lives server-side; closing this terminal does not end it."
   );
+  lines.push(
+    "  Sessions idle out server-side when no tab or traffic keeps them alive."
+  );
   return {
-    stdoutLast: session.serverEndpoint ?? null,
+    stdoutLast: session.server?.endpoint ?? null,
     stderr: lines.join("\n")
   };
 }
@@ -6480,15 +6514,20 @@ async function observeStartCommand(flowId, options) {
       printLoginCta();
       return;
     }
+    let level;
     if (options.level !== void 0) {
-      process.stderr.write(
-        "Note: --level is not supported by the current API contract; starting without it.\n"
-      );
+      if (!isObserveLevel(options.level)) {
+        throw new Error(
+          `Invalid --level value: ${options.level} (expected ${OBSERVE_LEVELS2.join(", ")})`
+        );
+      }
+      level = options.level;
     }
     let timeoutSeconds = DEFAULT_WAIT_SECONDS;
     if (options.timeout !== void 0) {
-      timeoutSeconds = parseInt(options.timeout, 10);
-      if (Number.isNaN(timeoutSeconds) || timeoutSeconds < 0) {
+      const rawTimeout = options.timeout.trim();
+      timeoutSeconds = rawTimeout === "" ? Number.NaN : Number(rawTimeout);
+      if (!Number.isFinite(timeoutSeconds) || timeoutSeconds < 0) {
         throw new Error(
           `Invalid --timeout value: ${options.timeout} (expected a non-negative number of seconds)`
         );
@@ -6500,7 +6539,8 @@ async function observeStartCommand(flowId, options) {
       projectId,
       flowId,
       settingsName,
-      force: options.replace === true
+      ...options.replace === true ? { replace: true } : {},
+      ...level !== void 0 ? { level } : {}
     });
     let timedOut = false;
     if (options.wait !== false) {
@@ -6532,7 +6572,7 @@ async function observeStartCommand(flowId, options) {
     handleCliError(error);
   }
 }
-var DEFAULT_WAIT_SECONDS, DEFAULT_POLL_INTERVAL_MS2;
+var OBSERVE_LEVELS2, DEFAULT_WAIT_SECONDS, DEFAULT_POLL_INTERVAL_MS2;
 var init_observe = __esm({
   "src/commands/observe/index.ts"() {
     "use strict";
@@ -6542,6 +6582,7 @@ var init_observe = __esm({
     init_output();
     init_config_file();
     init_flows();
+    OBSERVE_LEVELS2 = ["off", "standard", "trace"];
     DEFAULT_WAIT_SECONDS = 300;
     DEFAULT_POLL_INTERVAL_MS2 = 3e3;
   }
@@ -6643,7 +6684,7 @@ function U2(e4, t4, n5) {
 function K2(e4) {
   const t4 = [], n5 = [], { simulation: o4, ...r6 } = e4, s4 = U2(r6, /* @__PURE__ */ new WeakMap(), 0);
   for (const e5 of o4) {
-    const o5 = Sn(e5);
+    const o5 = jn(e5);
     if (0 === o5.length) continue;
     const r7 = o5.join(".");
     if (o5.length - 1 >= 8) {
@@ -7356,7 +7397,7 @@ async function jt2(e4, t4, n5 = {}, o4) {
     const E2 = n5.ingest ? { ...n5.ingest, _meta: { ...n5.ingest._meta, path: [...n5.ingest._meta.path] } } : I("unknown");
     if (!C3.length && !r7.queueOn?.length) return I3(), { id: o5, destination: r7, skipped: true };
     if (!C3.length && r7.queueOn?.length) {
-      if (!Se(r7.config.consent, s4)) return I3(), { id: o5, destination: r7, skipped: true };
+      if (!je(r7.config.consent, s4)) return I3(), { id: o5, destination: r7, skipped: true };
       let t5 = false;
       try {
         t5 = await $t2(e4, r7, o5, true);
@@ -7368,7 +7409,7 @@ async function jt2(e4, t4, n5 = {}, o4) {
       return I3(), { id: o5, destination: r7, skipped: !t5 };
     }
     const S2 = [], q3 = C3.filter((t5) => {
-      const n6 = Se(r7.config.consent, s4, t5.consent);
+      const n6 = je(r7.config.consent, s4, t5.consent);
       if (n6) return t5.consent = n6, S2.push(t5), false;
       const a5 = _(e4, { stepId: o("destination", o5), stepType: "destination", phase: "skip", eventId: "string" == typeof t5.id ? t5.id : "", now: Date.now(), ...T2(t5, E2, e4) });
       return a5.skipReason = "consent", s4 && (a5.consent = { ...s4 }), r7.config.consent && (a5.meta = { required: { ...r7.config.consent } }), on(e4, a5), true;
@@ -7697,7 +7738,7 @@ function Nt2(e4, t4, n5) {
   if (!o4 || !r6) throw new Error("Event name is invalid");
   const { timestamp: s4 = Date.now(), name: a4 = `${o4} ${r6}`, data: i5 = {}, context: c2 = {}, globals: u2 = e4.globals, custom: d2 = {}, user: l3 = e4.user, nested: f3 = [], consent: p3 = e4.consent, id: g3 = Ne(), trigger: m3 = "", entity: h2 = o4, action: v3 = r6, timing: y3 = 0, source: w3 = { type: "collector", schema: "4" } } = t4, b3 = w3.count ?? (e4.count += 1), k3 = w3.trace ?? n5?._meta.trace ?? e4.trace, I3 = { ...w3, count: b3 };
   void 0 !== k3 && (I3.trace = k3);
-  const C3 = e4.name ?? w3.platform ?? "default", E2 = e4.release ?? "4.3.1-next-1784373088875";
+  const C3 = e4.name ?? w3.platform ?? "default", E2 = e4.release ?? "4.3.1";
   return I3.release = { ...w3.release, [C3]: E2 }, { name: a4, data: i5, context: c2, globals: u2, custom: d2, user: l3, nested: f3, consent: p3, id: g3, trigger: m3, entity: h2, action: v3, timestamp: s4, timing: y3, source: I3 };
 }
 function Yt(e4, t4, n5) {
@@ -7721,7 +7762,7 @@ function rn2(e4, t4) {
       const t5 = await nt(p3, c2, e4);
       if (t5.ignore) return Dt({ ok: true });
       if (c2.consent) {
-        if (!Se(c2.consent, e4.consent, t5.event.consent)) return Dt({ ok: true });
+        if (!je(c2.consent, e4.consent, t5.event.consent)) return Dt({ ok: true });
       }
       p3 = t5.event;
     }
@@ -8034,16 +8075,16 @@ function Cn2(e4, t4) {
       } catch {
         return null;
       }
-    })(), r6 = t5 ?? (function() {
+    })(), r7 = t5 ?? (function() {
       try {
         return bn2.window?.localStorage.getItem(Nt) ?? null;
       } catch {
         return null;
       }
     })();
-    if (!r6) return;
-    const u2 = xn(r6);
-    if (!u2) return void (null === t5 ? (e4.logger.warn("observe: malformed stored credential cleared"), kn2(r6)) : e4.logger.warn("observe: malformed credential ignored"));
+    if (!r7) return;
+    const u2 = xn(r7);
+    if (!u2) return void (null === t5 ? (e4.logger.warn("observe: malformed stored credential cleared"), kn2(r7)) : e4.logger.warn("observe: malformed credential ignored"));
     if (u2.pb !== n5.binding) return void e4.logger.warn("observe: credential binding mismatch, credential ignored");
     let d2;
     !(function(e5) {
@@ -8051,18 +8092,18 @@ function Cn2(e4, t4) {
         bn2.window?.localStorage.setItem(Nt, e5);
       } catch {
       }
-    })(r6), null !== t5 && (function() {
+    })(r7), null !== t5 && (function() {
       const e5 = bn2.window, t6 = bn2.URLSearchParams;
       if (e5 && t6) try {
-        const n6 = e5.location.href, o5 = n6.indexOf("#"), r7 = o5 >= 0 ? n6.slice(o5) : "", a4 = o5 >= 0 ? n6.slice(0, o5) : n6, i5 = a4.indexOf("?"), c2 = i5 >= 0 ? a4.slice(0, i5) : a4, u3 = new t6(i5 >= 0 ? a4.slice(i5 + 1) : "");
+        const n6 = e5.location.href, o5 = n6.indexOf("#"), r8 = o5 >= 0 ? n6.slice(o5) : "", a4 = o5 >= 0 ? n6.slice(0, o5) : n6, i5 = a4.indexOf("?"), c2 = i5 >= 0 ? a4.slice(0, i5) : a4, u3 = new t6(i5 >= 0 ? a4.slice(i5 + 1) : "");
         u3.delete(Nt);
         const d3 = u3.toString();
-        e5.history.replaceState({}, "", `${c2}${d3 ? `?${d3}` : ""}${r7}`);
+        e5.history.replaceState({}, "", `${c2}${d3 ? `?${d3}` : ""}${r8}`);
       } catch {
       }
     })();
     const l3 = sn({ url: `${n5.url}/ingest/${u2.ses}`, token: u2.secret, headers: { "X-Walkeros-Binding": n5.binding }, onStatus: (t6) => {
-      401 === t6 && (kn2(r6), d2 && e4.observers.delete(d2));
+      401 === t6 && (kn2(r7), d2 && e4.observers.delete(d2));
     } });
     d2 = vt(/* @__PURE__ */ (function(e5, t6) {
       return void 0 === t6 ? e5 : (n6) => e5({ ...n6, flowId: t6 });
@@ -8070,7 +8111,9 @@ function Cn2(e4, t4) {
     const f3 = n5.level;
     return void (void 0 !== f3 && (e4.observeLevel = () => f3));
   }
-  "off" !== n5.level && e4.observers.add(vt(In(sn({ url: `${n5.url}/ingest/${n5.sessionId}`, token: n5.token }), e4.release), { flowId: o4, level: n5.level, sample: n5.sample }));
+  if ("off" === n5.level) return;
+  const r6 = n5.level;
+  void 0 !== r6 && (e4.observeLevel = () => r6), e4.observers.add(vt(In(sn({ url: `${n5.url}/ingest/${n5.sessionId}`, token: n5.token }), e4.release), { flowId: o4, level: n5.level, sample: n5.sample }));
 }
 async function En(e4) {
   e4 = e4 || {};
@@ -13750,7 +13793,7 @@ function validateMapping(input) {
 // src/commands/validate/validators/entry.ts
 init_dist();
 import Ajv from "ajv";
-var CLIENT_HEADER = "walkeros-cli/4.3.1-next-1784373088875";
+var CLIENT_HEADER = "walkeros-cli/4.3.1";
 var SECTIONS = ["destinations", "sources", "transformers"];
 function resolveEntry(path19, flowConfig) {
   const flows = flowConfig.flows;
@@ -15161,7 +15204,7 @@ observeCmd.command("start <flowId>").description(
   "Flow settings name (auto-resolved when the flow has exactly one)"
 ).option("--project <projectId>", "Project ID (overrides default)").option(
   "--level <level>",
-  "Observation detail level (reserved; not yet supported by the API)"
+  "Observation detail level: off, standard, or trace"
 ).option("--replace", "Replace an existing active session for this flow").option("--no-wait", "Do not wait for the session to settle").option(
   "--timeout <seconds>",
   "Seconds to wait for the session to settle (default: 300)"