@walkeros/core 4.3.0-next-1783710078012 → 4.3.0-next-1784055686454

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # @walkeros/core
 
-## 4.3.0-next-1783710078012
+## 4.3.0-next-1784055686454
 
 ### Minor Changes
 
@@ -19,6 +19,12 @@
   to agents. Batching destinations now emit per-event records, and live-web
   vendor calls are captured when a destination reaches its callable through
   `getEnv`, though batched sends stay uncaptured.
+- f8408fd: Preview links are now app-signed and bound to your site's origin,
+  verified locally in the bundle with no server round trip. Bundles that support
+  preview activation import a new `browserSwapActivator` from `@walkeros/core`.
+  The CLI wrap step's `preview` option replaces `previewOrigin`/`previewScope`,
+  and a new `previewGrantTargets` option lets a preview forward its grant to
+  server-bound destinations too.
 - 9506e3e: Events now carry per-flow config provenance on
   `event.source.release`, a flow-name to release map that accumulates as an
   event crosses flows (web capture to server processing), so a delivered event

package/dist/index.d.mts

@@ -4323,6 +4323,171 @@ interface ResolveTelemetryInput {
  */
 declare function resolveTelemetryOptions(input: ResolveTelemetryInput): TelemetryOptions | null;
 
+/** Claims carried by an activation grant. See the preview-sessions design spec. */
+interface ActivationGrant {
+    /** Issuing environment, e.g. 'app:stage'. Verifier rejects a foreign issuer. */
+    iss: string;
+    /** Exact origins this grant may activate on. Exact-membership match only. */
+    aud: string[];
+    /** Issue time, epoch seconds. The URL window is enforced against this. */
+    iat: number;
+    /** Session expiry, epoch seconds. Storage-sourced grants are rejected after it. */
+    sxp: number;
+    /** Opaque artifact id: the preview bundle is `preview/<art>.js`. */
+    art: string;
+    /** Subresource integrity of the artifact bytes, e.g. 'sha384-…'. */
+    sri: string;
+    /** Opaque per-project binding. Must equal the value baked into the host bundle. */
+    pb: string;
+    /** Capability. Only 'activate' exists today. */
+    cap: 'activate';
+    /** Per-grant unique id, for audit and revocation. */
+    jti: string;
+    /** Preview id, for correlation. Never a project id. */
+    pid: string;
+    /** Session id, present only on cross-part (web+server) grants. */
+    ses?: string;
+    /** Opaque per-session binding. Present iff `ses` is. */
+    sb?: string;
+}
+type PreviewFailure = 'no-grant' | 'malformed' | 'kid-mismatch' | 'bad-signature' | 'foreign-issuer' | 'expired' | 'aud-mismatch' | 'pb-mismatch' | 'sb-mismatch' | 'cap-mismatch' | 'no-subtle' | 'swap-failed';
+interface ParsedGrant {
+    grant: ActivationGrant;
+    kid: string;
+    /** The exact bytes covered by the signature: `${header}.${payload}` as UTF-8. */
+    signed: Uint8Array;
+    /** Raw r‖s signature, 64 bytes. */
+    signature: Uint8Array;
+}
+type VerifyResult = {
+    ok: true;
+    grant: ActivationGrant;
+} | {
+    ok: false;
+    reason: PreviewFailure;
+};
+/**
+ * Parse a compact JWS activation grant. Pure and synchronous: this is the cheap
+ * gate that runs before any crypto is touched. Returns null on anything
+ * malformed: callers treat null as "ignore, do not clear existing state".
+ */
+declare function parseGrant(raw: string): ParsedGrant | null;
+/** A public key a bundle or container will accept grants from. */
+interface PreviewKey {
+    kid: string;
+    /** base64url-encoded P-256 SPKI. */
+    spki: string;
+}
+type PreviewBinary = ArrayBuffer | ArrayBufferView;
+/**
+ * Structural slice of WebCrypto used by the verifier. Core compiles without
+ * the DOM lib, so the ambient `Crypto` type is unavailable here: a structural
+ * type also lets tests inject `node:crypto`'s webcrypto without casts and lets
+ * `{}` model a subtle-less environment (same pattern as batchedPoster's
+ * PosterFetch).
+ */
+interface PreviewSubtle {
+    importKey(format: 'spki', keyData: PreviewBinary, algorithm: {
+        name: string;
+        namedCurve: string;
+    }, extractable: boolean, keyUsages: string[]): Promise<unknown>;
+    verify(algorithm: {
+        name: string;
+        hash: string;
+    }, key: unknown, signature: PreviewBinary, data: PreviewBinary): Promise<boolean>;
+}
+interface PreviewCrypto {
+    subtle?: PreviewSubtle;
+}
+/**
+ * The two real callers of `verifyActivation` bind audience differently: the
+ * web loader always has a page origin and checks `aud` against it, while a
+ * container has no origin at all and is bound to one session instead. A
+ * discriminated union (rather than an optional `origin`) turns "the caller
+ * forgot `origin`" from a silent aud-check skip into a compile error on the
+ * web arm; `expectSession` is forced on the container arm for the same
+ * reason, since that arm's whole job is proving it checked *something*.
+ */
+type VerifyAudience = {
+    origin: string;
+    expectSession?: undefined;
+} | {
+    origin?: undefined;
+    expectSession: {
+        ses: string;
+        sb: string;
+    };
+};
+type VerifyParams = VerifyAudience & {
+    /** Keys this host accepts. Current + previous, so rotation is non-disruptive. */
+    keyring: PreviewKey[];
+    /** Expected issuer, e.g. 'app:stage'. */
+    iss: string;
+    /** This host's baked project binding. Required unless `acceptForeign`. */
+    pb?: string;
+    /** Demo hosts only: skip the pb match, require aud to be a single allowlisted origin. */
+    acceptForeign?: boolean;
+    demoAllowlist?: string[];
+    /** Which clock applies: the URL handover window, or the session expiry. */
+    source: 'url' | 'storage';
+    /** Epoch milliseconds. Injected so tests and the server control the clock. */
+    now: number;
+    /** Defaults to globalThis.crypto. Injectable for jsdom/node tests. */
+    crypto?: PreviewCrypto;
+};
+/** A grant handed over in a URL is only accepted this long after `iat`. */
+declare const URL_WINDOW_MS: number;
+/**
+ * How far a grant's `iat` may sit in the future and still count as ordinary
+ * clock skew rather than a broken or hostile mint clock (RFC 7519 §4.1.5
+ * iat/nbf practice: reject a token issued in the future, with tolerance).
+ */
+declare const CLOCK_SKEW_MS: number;
+/**
+ * Verifier-side ceiling on `sxp - iat`, independent of whatever the mint's
+ * clock claims. The design spec's session TTL is a 60-minute ceiling
+ * (`sxp = min(iat + 60 min, session remaining)`); this adds a modest margin
+ * above that so a legitimate boundary-exact grant is never rejected by
+ * rounding, while still bounding how long a leaked grant stays usable if a
+ * mint clock is skewed or wrong.
+ */
+declare const MAX_SESSION_MS: number;
+/**
+ * Verify an activation grant locally: no network, no DB, the signature plus
+ * the baked bindings carry the whole decision.
+ *
+ * Claim checks run before the signature check so a hostile or malformed
+ * value costs almost nothing, but `ok: true` is only ever reached after the
+ * ES256 verify succeeds: no unsigned claim value is trusted on its own, it
+ * only ever decides which rejection reason comes back.
+ */
+declare function verifyActivation(raw: string, params: VerifyParams): Promise<VerifyResult>;
+interface SwapActivatorConfig {
+    keyring: PreviewKey[];
+    iss: string;
+    /** This bundle's project binding. Absent on demo hosts (see acceptForeign). */
+    pb?: string;
+    acceptForeign?: boolean;
+    demoAllowlist?: string[];
+    /** Bare CDN hostname, e.g. 'cdn.walkeros.io'. */
+    previewOrigin: string;
+    /** Injectable for tests. */
+    now?: () => number;
+    crypto?: PreviewCrypto;
+}
+/**
+ * Decide whether a preview bundle should boot in place of this bundle's own flow.
+ *
+ * Returns true iff a preview took over, in which case the caller must not boot
+ * the production flow. Every failure path deterministically returns false: the
+ * loader never throws, never retries, and never leaves a page without a walker.
+ *
+ * Anti-griefing invariant: a rejected URL grant never touches stored state,
+ * the activator falls back to the stored grant instead. Only a failing stored
+ * grant clears storage (self-heal), plus `off` and `swap-failed`.
+ */
+declare function browserSwapActivator(cfg: SwapActivatorConfig): Promise<boolean>;
+
 /**
  * Pure assembly of raw `FlowState` records into cross-runtime journeys. The
  * function is idempotent (duplicate records are deduped first) and
@@ -4861,4 +5026,4 @@ declare const REF_CODE_PREFIX = "$code:";
  */
 declare function scanFlowRefs(value: unknown, into?: Set<string>): Set<string>;
 
-export { type AssembleJourneysOptions, type BatchedPosterOptions, type BreakerState, cache as Cache, type CacheEnvelope, type CacheResult, type ClickIdEntry, collector as Collector, type CompiledCache, Const, context as Context, type Credential, type Debounced, destination as Destination, type DestroyContext, type DestroyFn, type DroppedCounters, ENV_MARKER_PREFIX, elb as Elb, type EmitFn, type ExampleSummary, FatalError, Flow, type FlowConfigResolver, type FlowState, type FlowStateBatch, type FlowStatePhase, type FlowStepType, type GetStore, hint as Hint, hooks as Hooks, type Ingest, type IngestMeta, type Journey, type JourneyAssembly, type JourneyBranch, type JourneyCorrelation, type JourneyEntry, type JourneyGap, type JourneyHop, type JourneyHopStatus, type JourneyPlatform, type JourneyStatus, type JourneyTopology, type JourneyTopologyNode, type JsonSchema, Level, lifecycle as Lifecycle, type LifecycleContext, logger as Logger, mapping as Mapping, type MarketingParameters, matcher as Matcher, type MockLogger, OBSERVE_ENV_KEY, type ObserverFn, on as On, type ParsedTraceparent, type PosterFetch, type PosterResponse, REF_CODE_PREFIX, REF_CONTRACT, REF_ENV, REF_FLOW, REF_SECRET, REF_STORE, REF_VAR_FULL, REF_VAR_INLINE, request as Request, type ResolveContractsOptions, type ResolveOptions, type RespondFn, type RespondOptions, SECRET_MARKER_PREFIX, STEP_OPERATIVE_FIELDS, type ScheduleOptions, type SendDataValue, type SendHeaders, type SendResponse, type ServiceAccount, type SetupFn, simulation as Simulation, source as Source, type State, type StepEntryErrorCode, type StepEntryValidation, type StepKind, type StorageType, store as Store, StoreCodecError, type TelemetryLevel, type TelemetryOptions, type TelemetryOptionsSupplier, transformer as Transformer, trigger as Trigger, type ValidateEvents, walkeros as WalkerOS, type WalkerOSPackage, type WalkerOSPackageInfo, type WalkerOSPackageMeta, anonymizeIP, applyState, applyUpdate, assembleJourneys, assign, branch, buildCacheContext, castToProperty, castValue, checkCache, clone, compileCache, compileMatcher, compileState, createBatchedPoster, createDestination, createEvent, createIngest, createLogger, createMockContext, createMockLogger, createRespond, createTelemetryObserver, debounce, deepMerge, defaultClickIds, deleteByPath, deserializeStoreValue, emitStep, fetchPackage, fetchPackageSchema, filterValues, flattenIncludeSections, formatOut, getBrowser, getBrowserVersion, getByPath, getDeviceType, getEvent, getFlowSettings, getGrantedConsent, getHeaders, getId, getMappingEvent, getMappingValue, getMarketingParameters, getNextSteps, getOS, getOSVersion, getPlatform, getSpanId, getTraceId, getTraceUntil, isArguments, isArray, isBoolean, isCommand, isDefined, isElementOrDocument, isEnvObserve, isFunction, isNumber, isObject, isPathStepEntry, isPropertyType, isRouteArray, isRouteConfigEntry, isSameType, isSampled, isStoreValue, isString, mcpError, mcpResult, mergeContractSchemas, mergeMappingRule, mockEnv, packageNameToVariable, parseCallPath, parseTraceparent, parseUserAgent, processEventMapping, readCacheEnvelope, requestToData, requestToParameter, resolveContracts, resolveSetup, resolveTelemetryOptions, scanFlowRefs, serializeStoreValue, setByPath, setTraceUntil, stepId, storeCache, throttle, throwError, transformData, traverseEnv, trim, tryCatch, tryCatchAsync, useHooks, validateStepEntry, walkPath, wrapCacheEnvelope, wrapCondition, wrapFn, wrapValidate };
+export { type ActivationGrant, type AssembleJourneysOptions, type BatchedPosterOptions, type BreakerState, CLOCK_SKEW_MS, cache as Cache, type CacheEnvelope, type CacheResult, type ClickIdEntry, collector as Collector, type CompiledCache, Const, context as Context, type Credential, type Debounced, destination as Destination, type DestroyContext, type DestroyFn, type DroppedCounters, ENV_MARKER_PREFIX, elb as Elb, type EmitFn, type ExampleSummary, FatalError, Flow, type FlowConfigResolver, type FlowState, type FlowStateBatch, type FlowStatePhase, type FlowStepType, type GetStore, hint as Hint, hooks as Hooks, type Ingest, type IngestMeta, type Journey, type JourneyAssembly, type JourneyBranch, type JourneyCorrelation, type JourneyEntry, type JourneyGap, type JourneyHop, type JourneyHopStatus, type JourneyPlatform, type JourneyStatus, type JourneyTopology, type JourneyTopologyNode, type JsonSchema, Level, lifecycle as Lifecycle, type LifecycleContext, logger as Logger, MAX_SESSION_MS, mapping as Mapping, type MarketingParameters, matcher as Matcher, type MockLogger, OBSERVE_ENV_KEY, type ObserverFn, on as On, type ParsedGrant, type ParsedTraceparent, type PosterFetch, type PosterResponse, type PreviewCrypto, type PreviewFailure, type PreviewKey, type PreviewSubtle, REF_CODE_PREFIX, REF_CONTRACT, REF_ENV, REF_FLOW, REF_SECRET, REF_STORE, REF_VAR_FULL, REF_VAR_INLINE, request as Request, type ResolveContractsOptions, type ResolveOptions, type RespondFn, type RespondOptions, SECRET_MARKER_PREFIX, STEP_OPERATIVE_FIELDS, type ScheduleOptions, type SendDataValue, type SendHeaders, type SendResponse, type ServiceAccount, type SetupFn, simulation as Simulation, source as Source, type State, type StepEntryErrorCode, type StepEntryValidation, type StepKind, type StorageType, store as Store, StoreCodecError, type SwapActivatorConfig, type TelemetryLevel, type TelemetryOptions, type TelemetryOptionsSupplier, transformer as Transformer, trigger as Trigger, URL_WINDOW_MS, type ValidateEvents, type VerifyParams, type VerifyResult, walkeros as WalkerOS, type WalkerOSPackage, type WalkerOSPackageInfo, type WalkerOSPackageMeta, anonymizeIP, applyState, applyUpdate, assembleJourneys, assign, branch, browserSwapActivator, buildCacheContext, castToProperty, castValue, checkCache, clone, compileCache, compileMatcher, compileState, createBatchedPoster, createDestination, createEvent, createIngest, createLogger, createMockContext, createMockLogger, createRespond, createTelemetryObserver, debounce, deepMerge, defaultClickIds, deleteByPath, deserializeStoreValue, emitStep, fetchPackage, fetchPackageSchema, filterValues, flattenIncludeSections, formatOut, getBrowser, getBrowserVersion, getByPath, getDeviceType, getEvent, getFlowSettings, getGrantedConsent, getHeaders, getId, getMappingEvent, getMappingValue, getMarketingParameters, getNextSteps, getOS, getOSVersion, getPlatform, getSpanId, getTraceId, getTraceUntil, isArguments, isArray, isBoolean, isCommand, isDefined, isElementOrDocument, isEnvObserve, isFunction, isNumber, isObject, isPathStepEntry, isPropertyType, isRouteArray, isRouteConfigEntry, isSameType, isSampled, isStoreValue, isString, mcpError, mcpResult, mergeContractSchemas, mergeMappingRule, mockEnv, packageNameToVariable, parseCallPath, parseGrant, parseTraceparent, parseUserAgent, processEventMapping, readCacheEnvelope, requestToData, requestToParameter, resolveContracts, resolveSetup, resolveTelemetryOptions, scanFlowRefs, serializeStoreValue, setByPath, setTraceUntil, stepId, storeCache, throttle, throwError, transformData, traverseEnv, trim, tryCatch, tryCatchAsync, useHooks, validateStepEntry, verifyActivation, walkPath, wrapCacheEnvelope, wrapCondition, wrapFn, wrapValidate };

package/dist/index.d.ts

@@ -4323,6 +4323,171 @@ interface ResolveTelemetryInput {
  */
 declare function resolveTelemetryOptions(input: ResolveTelemetryInput): TelemetryOptions | null;
 
+/** Claims carried by an activation grant. See the preview-sessions design spec. */
+interface ActivationGrant {
+    /** Issuing environment, e.g. 'app:stage'. Verifier rejects a foreign issuer. */
+    iss: string;
+    /** Exact origins this grant may activate on. Exact-membership match only. */
+    aud: string[];
+    /** Issue time, epoch seconds. The URL window is enforced against this. */
+    iat: number;
+    /** Session expiry, epoch seconds. Storage-sourced grants are rejected after it. */
+    sxp: number;
+    /** Opaque artifact id: the preview bundle is `preview/<art>.js`. */
+    art: string;
+    /** Subresource integrity of the artifact bytes, e.g. 'sha384-…'. */
+    sri: string;
+    /** Opaque per-project binding. Must equal the value baked into the host bundle. */
+    pb: string;
+    /** Capability. Only 'activate' exists today. */
+    cap: 'activate';
+    /** Per-grant unique id, for audit and revocation. */
+    jti: string;
+    /** Preview id, for correlation. Never a project id. */
+    pid: string;
+    /** Session id, present only on cross-part (web+server) grants. */
+    ses?: string;
+    /** Opaque per-session binding. Present iff `ses` is. */
+    sb?: string;
+}
+type PreviewFailure = 'no-grant' | 'malformed' | 'kid-mismatch' | 'bad-signature' | 'foreign-issuer' | 'expired' | 'aud-mismatch' | 'pb-mismatch' | 'sb-mismatch' | 'cap-mismatch' | 'no-subtle' | 'swap-failed';
+interface ParsedGrant {
+    grant: ActivationGrant;
+    kid: string;
+    /** The exact bytes covered by the signature: `${header}.${payload}` as UTF-8. */
+    signed: Uint8Array;
+    /** Raw r‖s signature, 64 bytes. */
+    signature: Uint8Array;
+}
+type VerifyResult = {
+    ok: true;
+    grant: ActivationGrant;
+} | {
+    ok: false;
+    reason: PreviewFailure;
+};
+/**
+ * Parse a compact JWS activation grant. Pure and synchronous: this is the cheap
+ * gate that runs before any crypto is touched. Returns null on anything
+ * malformed: callers treat null as "ignore, do not clear existing state".
+ */
+declare function parseGrant(raw: string): ParsedGrant | null;
+/** A public key a bundle or container will accept grants from. */
+interface PreviewKey {
+    kid: string;
+    /** base64url-encoded P-256 SPKI. */
+    spki: string;
+}
+type PreviewBinary = ArrayBuffer | ArrayBufferView;
+/**
+ * Structural slice of WebCrypto used by the verifier. Core compiles without
+ * the DOM lib, so the ambient `Crypto` type is unavailable here: a structural
+ * type also lets tests inject `node:crypto`'s webcrypto without casts and lets
+ * `{}` model a subtle-less environment (same pattern as batchedPoster's
+ * PosterFetch).
+ */
+interface PreviewSubtle {
+    importKey(format: 'spki', keyData: PreviewBinary, algorithm: {
+        name: string;
+        namedCurve: string;
+    }, extractable: boolean, keyUsages: string[]): Promise<unknown>;
+    verify(algorithm: {
+        name: string;
+        hash: string;
+    }, key: unknown, signature: PreviewBinary, data: PreviewBinary): Promise<boolean>;
+}
+interface PreviewCrypto {
+    subtle?: PreviewSubtle;
+}
+/**
+ * The two real callers of `verifyActivation` bind audience differently: the
+ * web loader always has a page origin and checks `aud` against it, while a
+ * container has no origin at all and is bound to one session instead. A
+ * discriminated union (rather than an optional `origin`) turns "the caller
+ * forgot `origin`" from a silent aud-check skip into a compile error on the
+ * web arm; `expectSession` is forced on the container arm for the same
+ * reason, since that arm's whole job is proving it checked *something*.
+ */
+type VerifyAudience = {
+    origin: string;
+    expectSession?: undefined;
+} | {
+    origin?: undefined;
+    expectSession: {
+        ses: string;
+        sb: string;
+    };
+};
+type VerifyParams = VerifyAudience & {
+    /** Keys this host accepts. Current + previous, so rotation is non-disruptive. */
+    keyring: PreviewKey[];
+    /** Expected issuer, e.g. 'app:stage'. */
+    iss: string;
+    /** This host's baked project binding. Required unless `acceptForeign`. */
+    pb?: string;
+    /** Demo hosts only: skip the pb match, require aud to be a single allowlisted origin. */
+    acceptForeign?: boolean;
+    demoAllowlist?: string[];
+    /** Which clock applies: the URL handover window, or the session expiry. */
+    source: 'url' | 'storage';
+    /** Epoch milliseconds. Injected so tests and the server control the clock. */
+    now: number;
+    /** Defaults to globalThis.crypto. Injectable for jsdom/node tests. */
+    crypto?: PreviewCrypto;
+};
+/** A grant handed over in a URL is only accepted this long after `iat`. */
+declare const URL_WINDOW_MS: number;
+/**
+ * How far a grant's `iat` may sit in the future and still count as ordinary
+ * clock skew rather than a broken or hostile mint clock (RFC 7519 §4.1.5
+ * iat/nbf practice: reject a token issued in the future, with tolerance).
+ */
+declare const CLOCK_SKEW_MS: number;
+/**
+ * Verifier-side ceiling on `sxp - iat`, independent of whatever the mint's
+ * clock claims. The design spec's session TTL is a 60-minute ceiling
+ * (`sxp = min(iat + 60 min, session remaining)`); this adds a modest margin
+ * above that so a legitimate boundary-exact grant is never rejected by
+ * rounding, while still bounding how long a leaked grant stays usable if a
+ * mint clock is skewed or wrong.
+ */
+declare const MAX_SESSION_MS: number;
+/**
+ * Verify an activation grant locally: no network, no DB, the signature plus
+ * the baked bindings carry the whole decision.
+ *
+ * Claim checks run before the signature check so a hostile or malformed
+ * value costs almost nothing, but `ok: true` is only ever reached after the
+ * ES256 verify succeeds: no unsigned claim value is trusted on its own, it
+ * only ever decides which rejection reason comes back.
+ */
+declare function verifyActivation(raw: string, params: VerifyParams): Promise<VerifyResult>;
+interface SwapActivatorConfig {
+    keyring: PreviewKey[];
+    iss: string;
+    /** This bundle's project binding. Absent on demo hosts (see acceptForeign). */
+    pb?: string;
+    acceptForeign?: boolean;
+    demoAllowlist?: string[];
+    /** Bare CDN hostname, e.g. 'cdn.walkeros.io'. */
+    previewOrigin: string;
+    /** Injectable for tests. */
+    now?: () => number;
+    crypto?: PreviewCrypto;
+}
+/**
+ * Decide whether a preview bundle should boot in place of this bundle's own flow.
+ *
+ * Returns true iff a preview took over, in which case the caller must not boot
+ * the production flow. Every failure path deterministically returns false: the
+ * loader never throws, never retries, and never leaves a page without a walker.
+ *
+ * Anti-griefing invariant: a rejected URL grant never touches stored state,
+ * the activator falls back to the stored grant instead. Only a failing stored
+ * grant clears storage (self-heal), plus `off` and `swap-failed`.
+ */
+declare function browserSwapActivator(cfg: SwapActivatorConfig): Promise<boolean>;
+
 /**
  * Pure assembly of raw `FlowState` records into cross-runtime journeys. The
  * function is idempotent (duplicate records are deduped first) and
@@ -4861,4 +5026,4 @@ declare const REF_CODE_PREFIX = "$code:";
  */
 declare function scanFlowRefs(value: unknown, into?: Set<string>): Set<string>;
 
-export { type AssembleJourneysOptions, type BatchedPosterOptions, type BreakerState, cache as Cache, type CacheEnvelope, type CacheResult, type ClickIdEntry, collector as Collector, type CompiledCache, Const, context as Context, type Credential, type Debounced, destination as Destination, type DestroyContext, type DestroyFn, type DroppedCounters, ENV_MARKER_PREFIX, elb as Elb, type EmitFn, type ExampleSummary, FatalError, Flow, type FlowConfigResolver, type FlowState, type FlowStateBatch, type FlowStatePhase, type FlowStepType, type GetStore, hint as Hint, hooks as Hooks, type Ingest, type IngestMeta, type Journey, type JourneyAssembly, type JourneyBranch, type JourneyCorrelation, type JourneyEntry, type JourneyGap, type JourneyHop, type JourneyHopStatus, type JourneyPlatform, type JourneyStatus, type JourneyTopology, type JourneyTopologyNode, type JsonSchema, Level, lifecycle as Lifecycle, type LifecycleContext, logger as Logger, mapping as Mapping, type MarketingParameters, matcher as Matcher, type MockLogger, OBSERVE_ENV_KEY, type ObserverFn, on as On, type ParsedTraceparent, type PosterFetch, type PosterResponse, REF_CODE_PREFIX, REF_CONTRACT, REF_ENV, REF_FLOW, REF_SECRET, REF_STORE, REF_VAR_FULL, REF_VAR_INLINE, request as Request, type ResolveContractsOptions, type ResolveOptions, type RespondFn, type RespondOptions, SECRET_MARKER_PREFIX, STEP_OPERATIVE_FIELDS, type ScheduleOptions, type SendDataValue, type SendHeaders, type SendResponse, type ServiceAccount, type SetupFn, simulation as Simulation, source as Source, type State, type StepEntryErrorCode, type StepEntryValidation, type StepKind, type StorageType, store as Store, StoreCodecError, type TelemetryLevel, type TelemetryOptions, type TelemetryOptionsSupplier, transformer as Transformer, trigger as Trigger, type ValidateEvents, walkeros as WalkerOS, type WalkerOSPackage, type WalkerOSPackageInfo, type WalkerOSPackageMeta, anonymizeIP, applyState, applyUpdate, assembleJourneys, assign, branch, buildCacheContext, castToProperty, castValue, checkCache, clone, compileCache, compileMatcher, compileState, createBatchedPoster, createDestination, createEvent, createIngest, createLogger, createMockContext, createMockLogger, createRespond, createTelemetryObserver, debounce, deepMerge, defaultClickIds, deleteByPath, deserializeStoreValue, emitStep, fetchPackage, fetchPackageSchema, filterValues, flattenIncludeSections, formatOut, getBrowser, getBrowserVersion, getByPath, getDeviceType, getEvent, getFlowSettings, getGrantedConsent, getHeaders, getId, getMappingEvent, getMappingValue, getMarketingParameters, getNextSteps, getOS, getOSVersion, getPlatform, getSpanId, getTraceId, getTraceUntil, isArguments, isArray, isBoolean, isCommand, isDefined, isElementOrDocument, isEnvObserve, isFunction, isNumber, isObject, isPathStepEntry, isPropertyType, isRouteArray, isRouteConfigEntry, isSameType, isSampled, isStoreValue, isString, mcpError, mcpResult, mergeContractSchemas, mergeMappingRule, mockEnv, packageNameToVariable, parseCallPath, parseTraceparent, parseUserAgent, processEventMapping, readCacheEnvelope, requestToData, requestToParameter, resolveContracts, resolveSetup, resolveTelemetryOptions, scanFlowRefs, serializeStoreValue, setByPath, setTraceUntil, stepId, storeCache, throttle, throwError, transformData, traverseEnv, trim, tryCatch, tryCatchAsync, useHooks, validateStepEntry, walkPath, wrapCacheEnvelope, wrapCondition, wrapFn, wrapValidate };
+export { type ActivationGrant, type AssembleJourneysOptions, type BatchedPosterOptions, type BreakerState, CLOCK_SKEW_MS, cache as Cache, type CacheEnvelope, type CacheResult, type ClickIdEntry, collector as Collector, type CompiledCache, Const, context as Context, type Credential, type Debounced, destination as Destination, type DestroyContext, type DestroyFn, type DroppedCounters, ENV_MARKER_PREFIX, elb as Elb, type EmitFn, type ExampleSummary, FatalError, Flow, type FlowConfigResolver, type FlowState, type FlowStateBatch, type FlowStatePhase, type FlowStepType, type GetStore, hint as Hint, hooks as Hooks, type Ingest, type IngestMeta, type Journey, type JourneyAssembly, type JourneyBranch, type JourneyCorrelation, type JourneyEntry, type JourneyGap, type JourneyHop, type JourneyHopStatus, type JourneyPlatform, type JourneyStatus, type JourneyTopology, type JourneyTopologyNode, type JsonSchema, Level, lifecycle as Lifecycle, type LifecycleContext, logger as Logger, MAX_SESSION_MS, mapping as Mapping, type MarketingParameters, matcher as Matcher, type MockLogger, OBSERVE_ENV_KEY, type ObserverFn, on as On, type ParsedGrant, type ParsedTraceparent, type PosterFetch, type PosterResponse, type PreviewCrypto, type PreviewFailure, type PreviewKey, type PreviewSubtle, REF_CODE_PREFIX, REF_CONTRACT, REF_ENV, REF_FLOW, REF_SECRET, REF_STORE, REF_VAR_FULL, REF_VAR_INLINE, request as Request, type ResolveContractsOptions, type ResolveOptions, type RespondFn, type RespondOptions, SECRET_MARKER_PREFIX, STEP_OPERATIVE_FIELDS, type ScheduleOptions, type SendDataValue, type SendHeaders, type SendResponse, type ServiceAccount, type SetupFn, simulation as Simulation, source as Source, type State, type StepEntryErrorCode, type StepEntryValidation, type StepKind, type StorageType, store as Store, StoreCodecError, type SwapActivatorConfig, type TelemetryLevel, type TelemetryOptions, type TelemetryOptionsSupplier, transformer as Transformer, trigger as Trigger, URL_WINDOW_MS, type ValidateEvents, type VerifyParams, type VerifyResult, walkeros as WalkerOS, type WalkerOSPackage, type WalkerOSPackageInfo, type WalkerOSPackageMeta, anonymizeIP, applyState, applyUpdate, assembleJourneys, assign, branch, browserSwapActivator, buildCacheContext, castToProperty, castValue, checkCache, clone, compileCache, compileMatcher, compileState, createBatchedPoster, createDestination, createEvent, createIngest, createLogger, createMockContext, createMockLogger, createRespond, createTelemetryObserver, debounce, deepMerge, defaultClickIds, deleteByPath, deserializeStoreValue, emitStep, fetchPackage, fetchPackageSchema, filterValues, flattenIncludeSections, formatOut, getBrowser, getBrowserVersion, getByPath, getDeviceType, getEvent, getFlowSettings, getGrantedConsent, getHeaders, getId, getMappingEvent, getMappingValue, getMarketingParameters, getNextSteps, getOS, getOSVersion, getPlatform, getSpanId, getTraceId, getTraceUntil, isArguments, isArray, isBoolean, isCommand, isDefined, isElementOrDocument, isEnvObserve, isFunction, isNumber, isObject, isPathStepEntry, isPropertyType, isRouteArray, isRouteConfigEntry, isSameType, isSampled, isStoreValue, isString, mcpError, mcpResult, mergeContractSchemas, mergeMappingRule, mockEnv, packageNameToVariable, parseCallPath, parseGrant, parseTraceparent, parseUserAgent, processEventMapping, readCacheEnvelope, requestToData, requestToParameter, resolveContracts, resolveSetup, resolveTelemetryOptions, scanFlowRefs, serializeStoreValue, setByPath, setTraceUntil, stepId, storeCache, throttle, throwError, transformData, traverseEnv, trim, tryCatch, tryCatchAsync, useHooks, validateStepEntry, verifyActivation, walkPath, wrapCacheEnvelope, wrapCondition, wrapFn, wrapValidate };