@datarails-ai/dr-cli 1.6.72 → 1.6.74

package/dist/cli.js

@@ -8,7 +8,7 @@ import { fileURLToPath as fileURLToPath3 } from "url";
 // package.json
 var package_default = {
   name: "@datarails-ai/dr-cli",
-  version: "1.6.72",
+  version: "1.6.74",
   description: "Datarails CLI",
   type: "module",
   engines: {
@@ -38,10 +38,11 @@ var package_default = {
     postinstall: "node scripts/postinstall.mjs"
   },
   dependencies: {
-    "@datarails-ai/dr-appspace-cli": "0.9.4",
+    "@datarails-ai/dr-appspace-cli": "0.9.5",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@napi-rs/keyring": "^1.3.0",
     commander: "^12.1.0",
+    "fast-xml-parser": "^5.11.2",
     jszip: "^3.10.1",
     "node-html-parser": "^6.1.13",
     open: "^10.1.0",
@@ -66,7 +67,7 @@ var package_default = {
 };
 
 // src/buildInfo.ts
-var BUILD_TIME = "2026-09-30T11:21:03.379Z";
+var BUILD_TIME = "2026-09-30T12:03:03.518Z";
 function formatBuildTime(iso) {
   if (iso === "") return "";
   const d = new Date(iso);
@@ -577,11 +578,11 @@ var ScopeDeniedError = class extends Error {
     return `${this.method} ${this.path}: this identity's credential scope does not allow it${needs}; run 'dr whoami' to see the scopes this identity carries`;
   }
 };
-function parseScopeDenial(status2, text) {
+function parseScopeDenial(status2, text2) {
   if (status2 !== 403) return void 0;
   let body;
   try {
-    body = JSON.parse(text);
+    body = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -698,10 +699,10 @@ function decodeJwtExpiration(token) {
   }
   return at;
 }
-function parseTokenBody(text, label) {
+function parseTokenBody(text2, label) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     throw new Error(`jwt ${label} parse: ${msgOf3(err)}`);
   }
@@ -727,11 +728,11 @@ async function mintJwt(host, sessionId, csrfToken, options) {
     body: "{}",
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
-    throw new Error(`jwt mint: HTTP ${res.status}: ${truncate(text, TRUNCATE)}`);
+    throw new Error(`jwt mint: HTTP ${res.status}: ${truncate(text2, TRUNCATE)}`);
   }
-  const out = parseTokenBody(text, "mint");
+  const out = parseTokenBody(text2, "mint");
   if (out.access === "") {
     throw new Error("jwt mint: empty access token");
   }
@@ -754,11 +755,11 @@ async function refreshJwt(host, refreshToken, options) {
     body: JSON.stringify({ refresh: refreshToken }),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
-    throw new Error(`jwt refresh: HTTP ${res.status}: ${truncate(text, TRUNCATE)}`);
+    throw new Error(`jwt refresh: HTTP ${res.status}: ${truncate(text2, TRUNCATE)}`);
   }
-  const out = parseTokenBody(text, "refresh");
+  const out = parseTokenBody(text2, "refresh");
   if (out.access === "") {
     throw new Error("jwt refresh: empty access token");
   }
@@ -778,11 +779,11 @@ async function refreshExternalJwt(host, refreshToken, options) {
     body: JSON.stringify({ refresh: refreshToken }),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
-    throw new Error(`jwt external refresh: HTTP ${res.status}: ${truncate(text, TRUNCATE)}`);
+    throw new Error(`jwt external refresh: HTTP ${res.status}: ${truncate(text2, TRUNCATE)}`);
   }
-  const out = parseTokenBody(text, "refresh");
+  const out = parseTokenBody(text2, "refresh");
   if (out.access === "") {
     throw new Error("jwt external refresh: empty access token");
   }
@@ -810,11 +811,11 @@ async function exchangeApiKey(host, apiKey, options) {
     headers: { Authorization: `Bearer ${key}`, Accept: "application/json" },
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
     let code;
     try {
-      const value = JSON.parse(text)["error"];
+      const value = JSON.parse(text2)["error"];
       if (value === "invalid_key" || value === "exchange_unavailable") code = value;
     } catch {
     }
@@ -822,7 +823,7 @@ async function exchangeApiKey(host, apiKey, options) {
   }
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     throw new Error("api-key exchange parse: the response is not JSON");
   }
@@ -871,21 +872,21 @@ async function loginAs(host, operatorAccessToken, userId, options) {
     body: JSON.stringify(body),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
     let code;
     let detail;
     try {
-      const parsed2 = JSON.parse(text);
+      const parsed2 = JSON.parse(text2);
       if (typeof parsed2["code"] === "string") code = parsed2["code"];
       if (typeof parsed2["detail"] === "string") detail = parsed2["detail"];
     } catch {
     }
-    throw new LoginAsError(res.status, { code, detail, body: truncate(text, TRUNCATE) });
+    throw new LoginAsError(res.status, { code, detail, body: truncate(text2, TRUNCATE) });
   }
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     throw new Error(`jwt loginas parse: ${msgOf3(err)}`);
   }
@@ -2245,17 +2246,17 @@ var AuthorizedClient = class _AuthorizedClient {
       body: fd,
       signal: options?.signal
     });
-    const text = await res.text();
-    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text);
+    const text2 = await res.text();
+    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text2);
     if (res.status === 401 || res.status === 403) {
       throw new SessionExpiredError(`POST ${path11} (HTTP ${res.status})`);
     }
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -2296,17 +2297,17 @@ var AuthorizedClient = class _AuthorizedClient {
       body: fd,
       signal: options?.signal
     });
-    const text = await res.text();
-    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text);
+    const text2 = await res.text();
+    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text2);
     if (res.status === 401 || res.status === 403) {
       throw new SessionExpiredError(`POST ${path11} (HTTP ${res.status})`);
     }
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -2355,17 +2356,17 @@ var AuthorizedClient = class _AuthorizedClient {
       body: fd,
       signal: options?.signal
     });
-    const text = await res.text();
-    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text);
+    const text2 = await res.text();
+    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text2);
     if (res.status === 401 || res.status === 403) {
       throw new SessionExpiredError(`POST ${path11} (HTTP ${res.status})`);
     }
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -2426,12 +2427,12 @@ var AuthorizedClient = class _AuthorizedClient {
       }
     }
     if (this.isAuthRejected(res)) {
-      const text2 = await res.text();
-      _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text2);
+      const text3 = await res.text();
+      _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text3);
       if (refreshed || triedSessionOnly) {
         const attempted = refreshed ? "session-only retry and JWT refresh" : "session-only retry";
         throw new Error(
-          `${method} ${path11}: HTTP ${res.status} after ${attempted} (authenticated, but endpoint rejected \u2014 check permissions, tenant/org context, or body): ${truncate2(text2, 200)}`
+          `${method} ${path11}: HTTP ${res.status} after ${attempted} (authenticated, but endpoint rejected \u2014 check permissions, tenant/org context, or body): ${truncate2(text3, 200)}`
         );
       }
       if (refreshErr !== void 0) {
@@ -2440,17 +2441,17 @@ var AuthorizedClient = class _AuthorizedClient {
       }
       throw new SessionExpiredError(`${method} ${path11} (HTTP ${res.status})`);
     }
-    const text = await res.text();
+    const text2 = await res.text();
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`${method} ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`${method} ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
     try {
       await this._store.touch(this._serverKey, this._email);
     } catch {
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`${method} ${path11}: decode: ${msg}`);
@@ -2522,18 +2523,18 @@ var AuthorizedClient = class _AuthorizedClient {
    */
   static async throwIfScopeDenied(method, path11, res) {
     if (res.status !== 403) return;
-    let text;
+    let text2;
     try {
-      text = await res.clone().text();
+      text2 = await res.clone().text();
     } catch {
       return;
     }
-    _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text);
+    _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text2);
   }
   /** {@link AuthorizedClient.throwIfScopeDenied} for a body already in hand — the multipart
    *  methods and `requestJson`'s final branch have read theirs and must not read it twice. */
-  static throwIfScopeDeniedBody(method, path11, status2, text) {
-    const denial = parseScopeDenial(status2, text);
+  static throwIfScopeDeniedBody(method, path11, status2, text2) {
+    const denial = parseScopeDenial(status2, text2);
     if (denial !== void 0) throw new ScopeDeniedError(method, path11, denial.code);
   }
   /** True iff `res` is the auth-rejection signal (401 or 403). */
@@ -3424,9 +3425,9 @@ async function commandExists(cmd) {
   const probe = process.platform === "win32" ? "where" : "which";
   return new Promise((resolve3) => {
     try {
-      const child = spawn(probe, [cmd], { stdio: "ignore" });
-      child.on("error", () => resolve3(false));
-      child.on("close", (code) => resolve3(code === 0));
+      const child2 = spawn(probe, [cmd], { stdio: "ignore" });
+      child2.on("error", () => resolve3(false));
+      child2.on("close", (code) => resolve3(code === 0));
     } catch {
       resolve3(false);
     }
@@ -3446,20 +3447,20 @@ async function realEnv() {
 }
 function spawnCapture(cmd, args) {
   return new Promise((resolve3, reject) => {
-    const child = spawn(cmd, args, {
+    const child2 = spawn(cmd, args, {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: false
     });
     let stdout = "";
     let stderr = "";
-    child.stdout.on("data", (c) => {
+    child2.stdout.on("data", (c) => {
       stdout += c.toString("utf8");
     });
-    child.stderr.on("data", (c) => {
+    child2.stderr.on("data", (c) => {
       stderr += c.toString("utf8");
     });
-    child.on("error", reject);
-    child.on("close", (code) => resolve3({ code: code ?? 0, stdout, stderr }));
+    child2.on("error", reject);
+    child2.on("close", (code) => resolve3({ code: code ?? 0, stdout, stderr }));
   });
 }
 function ttyPrompt(spec, io = { input: process.stdin, output: process.stderr }) {
@@ -4362,6 +4363,7 @@ async function setupCall(serverFlag, accountFlag, options = {}) {
   let deadline = Date.now() + timeoutMs;
   let timer = setTimeout(() => controller.abort(), timeoutMs);
   let cleared = false;
+  let paused = false;
   let client;
   try {
     client = await AuthorizedClient.create(store, key, email, {
@@ -4388,11 +4390,17 @@ async function setupCall(serverFlag, accountFlag, options = {}) {
       if (cleared || controller.signal.aborted) return;
       if (!Number.isFinite(ms) || ms <= 0) return;
       const next = Date.now() + ms;
-      if (next <= deadline) return;
+      if (!paused && next <= deadline) return;
+      paused = false;
       clearTimeout(timer);
       deadline = next;
       timer = setTimeout(() => controller.abort(), ms);
     },
+    pauseTimeout: () => {
+      if (cleared || controller.signal.aborted) return;
+      paused = true;
+      clearTimeout(timer);
+    },
     cleanup: () => {
       if (cleared) return;
       cleared = true;
@@ -4589,10 +4597,10 @@ function parsePendingCommands(v, pending) {
   }
   return out;
 }
-function parseScopesMap(text) {
+function parseScopesMap(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -4626,13 +4634,13 @@ function parseScopesMap(text) {
   return map;
 }
 function loadScopesMap(here = path3.dirname(fileURLToPath(import.meta.url))) {
-  let text;
+  let text2;
   try {
-    text = readFileSync(path3.join(here, "scopes-map.json"), "utf8");
+    text2 = readFileSync(path3.join(here, "scopes-map.json"), "utf8");
   } catch {
     return void 0;
   }
-  return parseScopesMap(text);
+  return parseScopesMap(text2);
 }
 function scopesMapKey(cmd) {
   const names = [];
@@ -4652,10 +4660,10 @@ function commandPathOf(argv, root) {
       if (takesValue(token, cmd)) i += 1;
       continue;
     }
-    const child = childNamed(cmd, token);
-    if (child === void 0) break;
-    names.push(child.name());
-    cmd = child;
+    const child2 = childNamed(cmd, token);
+    if (child2 === void 0) break;
+    names.push(child2.name());
+    cmd = child2;
   }
   return names.join(" ");
 }
@@ -4672,11 +4680,11 @@ function takesValue(flag, cmd) {
   return declaredWithValueBelow(flag, cmd);
 }
 function declaredWithValueBelow(flag, cmd) {
-  for (const child of cmd.commands) {
-    for (const opt of child.options) {
+  for (const child2 of cmd.commands) {
+    for (const opt of child2.options) {
       if ((opt.short === flag || opt.long === flag) && (opt.required || opt.optional)) return true;
     }
-    if (declaredWithValueBelow(flag, child)) return true;
+    if (declaredWithValueBelow(flag, child2)) return true;
   }
   return false;
 }
@@ -5011,14 +5019,14 @@ async function requestDeviceCode(host, options) {
     body: body.toString(),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
     const hint = flow === "v2" && res.status === 429 ? " (too many logins from this address: wait a minute and run `dr login` again)" : "";
-    throw new Error(`device/code failed: ${res.status} ${text.trim()}${hint}`);
+    throw new Error(`device/code failed: ${res.status} ${text2.trim()}${hint}`);
   }
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`device/code parse: ${msg}`);
@@ -5049,10 +5057,10 @@ var defaultSleep = (ms, signal) => new Promise((resolve3, reject) => {
     { once: true }
   );
 });
-function parseObject(text) {
+function parseObject(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`token parse: ${msg}`);
@@ -5062,8 +5070,8 @@ function parseObject(text) {
   }
   return raw;
 }
-function parseTokenResponse(text) {
-  const obj = parseObject(text);
+function parseTokenResponse(text2) {
+  const obj = parseObject(text2);
   const tok = {
     sessionId: typeof obj.session_id === "string" ? obj.session_id : "",
     csrfToken: typeof obj.csrf_token === "string" ? obj.csrf_token : ""
@@ -5073,10 +5081,10 @@ function parseTokenResponse(text) {
   }
   return tok;
 }
-function tryParseErrorCode(text) {
+function tryParseErrorCode(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     return "";
   }
@@ -5085,8 +5093,8 @@ function tryParseErrorCode(text) {
   return typeof errVal === "string" ? errVal : "";
 }
 async function pollForToken(host, deviceCode, options = {}) {
-  return poll(host, PATHS.legacy.token, deviceCode, options, (text) => {
-    const tok = parseTokenResponse(text);
+  return poll(host, PATHS.legacy.token, deviceCode, options, (text2) => {
+    const tok = parseTokenResponse(text2);
     if (!tok.sessionId || !tok.csrfToken) {
       throw new Error("token response missing session_id or csrf_token");
     }
@@ -5094,8 +5102,8 @@ async function pollForToken(host, deviceCode, options = {}) {
   });
 }
 async function pollForV2Token(host, deviceCode, options = {}) {
-  return poll(host, PATHS.v2.token, deviceCode, options, (text) => {
-    const obj = parseObject(text);
+  return poll(host, PATHS.v2.token, deviceCode, options, (text2) => {
+    const obj = parseObject(text2);
     const access = typeof obj.access === "string" ? obj.access : "";
     const refresh = typeof obj.refresh === "string" ? obj.refresh : "";
     if (access === "" || refresh === "") {
@@ -5130,11 +5138,11 @@ async function poll(host, path11, deviceCode, options, onSuccess) {
       body: body.toString(),
       signal
     });
-    const text = await res.text();
+    const text2 = await res.text();
     if (res.ok) {
-      return onSuccess(text);
+      return onSuccess(text2);
     }
-    const errCode = tryParseErrorCode(text);
+    const errCode = tryParseErrorCode(text2);
     if (errCode === "authorization_pending" || errCode === "slow_down") {
       await sleep3(interval, signal);
       continue;
@@ -5142,7 +5150,7 @@ async function poll(host, path11, deviceCode, options, onSuccess) {
     if (errCode) {
       throw new Error(`token error: ${errCode}`);
     }
-    throw new Error(`token HTTP ${res.status}: ${text.trim()}`);
+    throw new Error(`token HTTP ${res.status}: ${text2.trim()}`);
   }
 }
 
@@ -5642,11 +5650,11 @@ var UserExistsError = class extends Error {
 async function create(client, payload, options) {
   const path11 = "/api/it/users";
   const res = await client.do("POST", path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     let parsed2;
     try {
-      parsed2 = JSON.parse(text);
+      parsed2 = JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -5664,7 +5672,7 @@ async function create(client, payload, options) {
   if (res.status === 400) {
     let details;
     try {
-      const body = JSON.parse(text);
+      const body = JSON.parse(text2);
       if (typeof body.details === "string") details = body.details;
     } catch {
     }
@@ -5672,23 +5680,23 @@ async function create(client, payload, options) {
       throw new UserExistsError(payload.email);
     }
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function registerIdentity(client, id, options) {
   const path11 = `/api/it/users/${id}/register_identity`;
   const res = await client.do("PUT", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     let body;
     try {
-      body = JSON.parse(text);
+      body = JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`PUT ${path11}: decode: ${msg}`);
     }
     if (typeof body.sent !== "boolean") {
       throw new Error(
-        `PUT ${path11}: expected a boolean "sent" in the 2xx body, got ${truncate4(text, 200)}`
+        `PUT ${path11}: expected a boolean "sent" in the 2xx body, got ${truncate4(text2, 200)}`
       );
     }
     return body.sent ? { status: "registered" } : { status: "already_exists" };
@@ -5696,42 +5704,42 @@ async function registerIdentity(client, id, options) {
   if (res.status === 502) {
     let reason;
     try {
-      const body = JSON.parse(text);
+      const body = JSON.parse(text2);
       if (typeof body.reason === "string") reason = body.reason;
     } catch {
     }
     return { status: "failed", ...reason !== void 0 ? { reason } : {} };
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function assignPermissionGroups(client, id, groupIds, options) {
   const path11 = `/api/it/users/${id}/permission_groups`;
   const body = JSON.stringify({ permission_groups: groupIds });
   const res = await client.do("POST", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function updateUserRole(client, id, role, options) {
   const path11 = `/api/it/users/${id}/permissions`;
   const body = JSON.stringify({ role });
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function removePermissionGroup(client, id, groupId, options) {
   const path11 = `/api/it/users/${id}/permission_groups/${groupId}`;
   const res = await client.do("DELETE", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 var PasswordValidationError = class extends Error {
   errors;
@@ -5751,11 +5759,11 @@ async function setPassword(client, id, password, options) {
     await res.text();
     return;
   }
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 400) {
     let parsed2;
     try {
-      parsed2 = JSON.parse(text);
+      parsed2 = JSON.parse(text2);
     } catch {
     }
     if (typeof parsed2 === "object" && parsed2 !== null && "password" in parsed2 && Array.isArray(parsed2.password)) {
@@ -5764,7 +5772,7 @@ async function setPassword(client, id, password, options) {
       throw new PasswordValidationError(messages);
     }
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 var EmailInUseError = class extends Error {
   email;
@@ -5782,14 +5790,14 @@ async function updateUserEmail(client, id, newEmail, options) {
     excel_online_email: current.profile?.excel_online_email ?? null
   });
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return { id, email: newEmail, previousEmail: current.email };
   }
-  if (res.status === 400 && /already in use/i.test(text)) {
+  if (res.status === 400 && /already in use/i.test(text2)) {
     throw new EmailInUseError(newEmail);
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 var StoredEmailInvalidError = class extends Error {
   id;
@@ -5813,7 +5821,7 @@ async function setEmailNotifications(client, id, enabled, options) {
     excel_online_email: current.profile?.excel_online_email ?? null
   });
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return {
       id,
@@ -5822,10 +5830,10 @@ async function setEmailNotifications(client, id, enabled, options) {
       blocked: current.profile?.is_blocked === true
     };
   }
-  if (res.status === 400 && /valid email address/i.test(text)) {
+  if (res.status === 400 && /valid email address/i.test(text2)) {
     throw new StoredEmailInvalidError(id, current.email);
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function getCanLoginAs(client, params = {}, options) {
   const qs = new URLSearchParams();
@@ -7063,66 +7071,66 @@ async function listPermissionGroups(client, options) {
 async function createPermissionGroup(client, payload, options) {
   const path11 = "/api/it/permission_groups";
   const res = await client.do("POST", path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
-  return parsePermissionGroup("POST", path11, text);
+  return parsePermissionGroup("POST", path11, text2);
 }
-function parsePermissionGroup(method, path11, text) {
+function parsePermissionGroup(method, path11, text2) {
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text, 200)})`);
+    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text2, 200)})`);
   }
 }
 async function getPermissionGroup(client, id, options) {
   const path11 = `/api/it/permission_groups/${id}`;
   const res = await client.do("GET", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
-  return parsePermissionGroup("GET", path11, text);
+  return parsePermissionGroup("GET", path11, text2);
 }
 async function updatePermissionGroup(client, id, name, options) {
   const path11 = `/api/it/permission_groups/${id}`;
   const res = await client.do("PUT", path11, JSON.stringify({ name }), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
-  return parsePermissionGroup("PUT", path11, text);
+  return parsePermissionGroup("PUT", path11, text2);
 }
 async function deletePermissionGroup(client, id, options) {
   const path11 = `/api/it/permission_groups/${id}`;
   const res = await client.do("DELETE", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    const text2 = await res.text();
+    throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
 }
-function decodeJsonBody(method, path11, text) {
+function decodeJsonBody(method, path11, text2) {
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text, 200)})`);
+    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text2, 200)})`);
   }
 }
-function redactPasswordsInBodyText(text) {
-  return text.replace(/"password"\s*:\s*"(?:[^"\\]|\\.)*"/g, '"password":"[redacted]"');
+function redactPasswordsInBodyText(text2) {
+  return text2.replace(/"password"\s*:\s*"(?:[^"\\]|\\.)*"/g, '"password":"[redacted]"');
 }
 async function orgMigrationRequest(client, method, path11, payload, options) {
   const res = await client.do(method, path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
     throw new Error(
-      `${method} ${path11}: HTTP ${res.status}: ${truncate4(redactPasswordsInBodyText(text), 600)}`
+      `${method} ${path11}: HTTP ${res.status}: ${truncate4(redactPasswordsInBodyText(text2), 600)}`
     );
   }
-  return decodeJsonBody(method, path11, text);
+  return decodeJsonBody(method, path11, text2);
 }
 async function exportCreate(client, payload, options) {
   return orgMigrationRequest(
@@ -7165,8 +7173,8 @@ async function importDeleteOrgs(client, payload, options) {
 import { promises as fs4 } from "fs";
 
 // src/commands/_csv.ts
-function parseCsvRows(text) {
-  const normalized = text.replace(/\r\n/g, "\n").replace(/\n$/, "");
+function parseCsvRows(text2) {
+  const normalized = text2.replace(/\r\n/g, "\n").replace(/\n$/, "");
   if (normalized === "") return [];
   const rows = [];
   let row = [];
@@ -7216,6 +7224,9 @@ function parseCsvRows(text) {
   rows.push(row);
   return rows;
 }
+function formatCsvRow(cells) {
+  return cells.map((c) => /[",\r\n]/.test(c) ? `"${c.replace(/"/g, '""')}"` : c).join(",");
+}
 
 // src/commands/_userCsv.ts
 var EXPECTED_HEADER = [
@@ -7245,8 +7256,8 @@ async function readUsersCsv(path11) {
   }
   return parseUsersCsvText(raw);
 }
-function parseUsersCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseUsersCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -7420,11 +7431,11 @@ async function getRoles(client, segment, options) {
 async function grantRoleToUsers(client, appSegment, payload, options) {
   const path11 = `/api/${appSegment}/users/grant_permissions_bulk`;
   const res = await client.do("POST", path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function getUserTableRoles(client, userId, options) {
   const out = await client.getJSON(
@@ -7444,11 +7455,11 @@ async function setUserPermissionFilters(client, userId, newFilters, options) {
   const path11 = `/api/it/users/${userId}/permission_filters`;
   const body = JSON.stringify({ new_filters: newFilters });
   const res = await client.do("POST", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function getTableRoles(client, options) {
   return getRoles(client, "table", options);
@@ -8155,8 +8166,8 @@ async function readPermissionsCsv(path11) {
   }
   return parsePermissionsCsvText(raw);
 }
-function parsePermissionsCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parsePermissionsCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -8589,8 +8600,8 @@ async function readEmailRenameCsv(path11) {
   }
   return parseEmailRenameCsvText(raw);
 }
-function parseEmailRenameCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseEmailRenameCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -10223,8 +10234,8 @@ async function readGroupsCsv(path11) {
   }
   return parseGroupsCsvText(raw);
 }
-function parseGroupsCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseGroupsCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -11889,8 +11900,8 @@ function envelopeErr(success, error) {
   }
   throw new Error("finance-os returned success=false with no error message");
 }
-function describeFinanceOsFailure(text) {
-  const trimmed = text.trim();
+function describeFinanceOsFailure(text2) {
+  const trimmed = text2.trim();
   let parsed2;
   try {
     parsed2 = JSON.parse(trimmed);
@@ -11954,9 +11965,9 @@ var AGGREGATE_POLL_TIMEOUT_MS = 6e4;
 async function startTask(client, label, path11, body, options) {
   const res = await client.do("POST", path11, JSON.stringify(body), options);
   if (res.status !== 202) {
-    const text = await res.text();
+    const text2 = await res.text();
     throw new Error(
-      `${label} POST: expected 202, got ${res.status}: ${describeFinanceOsFailure(text)}`
+      `${label} POST: expected 202, got ${res.status}: ${describeFinanceOsFailure(text2)}`
     );
   }
   const location = res.headers.get("Location") ?? "";
@@ -12000,10 +12011,10 @@ async function getTaskOnce(client, label, pollPath, options) {
     throw new Error(`poll ${label}: ${msg}`);
   }
   if (res.status === 200) {
-    const text2 = await res.text();
+    const text3 = await res.text();
     let parsed2;
     try {
-      parsed2 = text2 === "" ? null : JSON.parse(text2);
+      parsed2 = text3 === "" ? null : JSON.parse(text3);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`poll ${label}: ${msg}`);
@@ -12014,9 +12025,9 @@ async function getTaskOnce(client, label, pollPath, options) {
     await res.text();
     return { env: null, status: res.status };
   }
-  const text = await res.text();
+  const text2 = await res.text();
   throw new Error(
-    `poll ${label}: unexpected status ${res.status}: ${describeFinanceOsFailure(text)}`
+    `poll ${label}: unexpected status ${res.status}: ${describeFinanceOsFailure(text2)}`
   );
 }
 var defaultSleep2 = (ms, signal) => new Promise((resolve3, reject) => {
@@ -14280,7 +14291,7 @@ function renderFolderTree(out, tree) {
         node.parent_id !== null ? String(node.parent_id) : "(root)"
       ]
     });
-    for (const child of node.children ?? []) walk(child, depth + 1);
+    for (const child2 of node.children ?? []) walk(child2, depth + 1);
   };
   for (const root of tree) walk(root, 0);
   writeTable9(out, rows);
@@ -15775,6 +15786,503 @@ function collectArray3(value, previous) {
   return previous.concat([value]);
 }
 
+// src/commands/odata.ts
+import { once } from "events";
+
+// src/api/odata.ts
+import { XMLParser } from "fast-xml-parser";
+var ODATA_VARIANTS = ["latest", "cleared", "full", "full-cleared"];
+var VARIANT_BY_SUFFIX = /* @__PURE__ */ new Map([
+  ["", "latest"],
+  [" (Cleared)", "cleared"],
+  [" (Full)", "full"],
+  [" (Full)(Cleared)", "full-cleared"]
+]);
+var TAG = "%";
+var TEXT = "#text";
+var ATTR = "@_";
+var parser = new XMLParser({
+  ignoreAttributes: false,
+  attributeNamePrefix: ATTR,
+  textNodeName: TEXT,
+  removeNSPrefix: true,
+  parseTagValue: false,
+  parseAttributeValue: false,
+  trimValues: false,
+  htmlEntities: true,
+  transformTagName: (name) => name.startsWith(TAG) ? name : `${TAG}${name}`,
+  isArray: (_name, _jpath, _isLeaf, isAttribute) => isAttribute !== true
+});
+function isNode(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function children(node, tag) {
+  if (!isNode(node)) return [];
+  const v = node[`${TAG}${tag}`];
+  return Array.isArray(v) ? v : [];
+}
+function child(node, tag) {
+  return children(node, tag)[0];
+}
+function attr(node, name) {
+  if (!isNode(node)) return void 0;
+  const v = node[`${ATTR}${name}`];
+  return typeof v === "string" ? v : void 0;
+}
+function text(node) {
+  if (typeof node === "string") return node;
+  if (isNode(node) && typeof node[TEXT] === "string") return node[TEXT];
+  return "";
+}
+function parseXml(xml, what) {
+  let doc;
+  try {
+    doc = parser.parse(xml);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    throw new Error(`not ${what}: ${msg}`);
+  }
+  if (!isNode(doc)) throw new Error(`not ${what}`);
+  return doc;
+}
+function parseServiceDocument(xml) {
+  const doc = parseXml(xml, "an OData service document");
+  const service = child(doc, "service");
+  if (service === void 0) {
+    throw new Error("not an OData service document (no <service> root)");
+  }
+  const out = [];
+  for (const ws of children(service, "workspace")) {
+    for (const c of children(ws, "collection")) {
+      const key = attr(c, "href");
+      if (key === void 0) continue;
+      out.push({ key, title: text(child(c, "title")), updated: text(child(c, "updated")) });
+    }
+  }
+  return out;
+}
+function parseMetadata(xml) {
+  const doc = parseXml(xml, "an OData $metadata document");
+  const edmx = child(doc, "Edmx");
+  if (edmx === void 0) {
+    throw new Error("not an OData $metadata document (no <edmx:Edmx> root)");
+  }
+  const out = [];
+  for (const ds of children(edmx, "DataServices")) {
+    for (const schema of children(ds, "Schema")) {
+      for (const et of children(schema, "EntityType")) {
+        const name = attr(et, "Name");
+        if (name === void 0) continue;
+        const columns = [];
+        for (const p of children(et, "Property")) {
+          const pname = attr(p, "Name");
+          if (pname === void 0) continue;
+          columns.push({ name: pname, type: attr(p, "Type") ?? "" });
+        }
+        out.push({ name, columns });
+      }
+    }
+  }
+  return out;
+}
+function parseFeed(xml) {
+  const tooLarge = /^\s*\[\{'error': 'too_large_data'(?:, 'rows_count': (\d+))?(?:, 'cols_count': (\d+))?/.exec(
+    xml
+  );
+  if (tooLarge !== null) {
+    const dims = tooLarge[1] !== void 0 && tooLarge[2] !== void 0 ? ` (${tooLarge[1]} rows \xD7 ${tooLarge[2]} columns)` : "";
+    throw new Error(
+      `the server refused the page as too large${dims}: lower --page-size or narrow --select`
+    );
+  }
+  if (!/<\/(?:[\w.-]+:)?feed>\s*$/.test(xml)) {
+    throw new Error("not an OData Atom feed: the body ends before </feed> (truncated response)");
+  }
+  const doc = parseXml(xml, "an OData Atom feed");
+  const feed = child(doc, "feed");
+  if (feed === void 0) {
+    throw new Error("not an OData Atom feed (no <feed> root)");
+  }
+  const out = [];
+  for (const e of children(feed, "entry")) {
+    const row = /* @__PURE__ */ new Map();
+    const props = child(child(e, "content"), "properties");
+    if (isNode(props)) {
+      for (const [k, v] of Object.entries(props)) {
+        if (!k.startsWith(TAG) || !Array.isArray(v)) continue;
+        const value = v[0];
+        row.set(k.slice(TAG.length), attr(value, "null") === "true" ? null : text(value));
+      }
+    }
+    out.push(row);
+  }
+  return out;
+}
+function parseODataTitle(title) {
+  const m = /^(.*)_(\d+)( \(Full\)\(Cleared\)| \(Cleared\)| \(Full\))?$/s.exec(title);
+  if (m === null) return null;
+  const variant = VARIANT_BY_SUFFIX.get(m[3] ?? "");
+  if (variant === void 0) return null;
+  return { baseTitle: m[1] ?? "", tableId: Number(m[2]), variant };
+}
+function findByTableId(items, titleOf, tableId, variant) {
+  const hits = items.filter((it) => {
+    const p = parseODataTitle(titleOf(it));
+    return p !== null && p.tableId === tableId && p.variant === variant;
+  });
+  if (hits.length > 1) {
+    const titles = hits.map((h) => `"${titleOf(h)}"`).join(", ");
+    throw new Error(`table ${tableId} (${variant}) is ambiguous over OData: ${titles}`);
+  }
+  return hits[0];
+}
+function tablePagePath(key, q) {
+  let path11 = `/OData.svc/${key}?$top=${q.top}&$skip=${q.skip}`;
+  if (q.select !== void 0 && q.select.length > 0) {
+    path11 += `&$select=${encodeURIComponent(q.select.join(","))}`;
+  }
+  if (q.filter !== void 0 && q.filter !== "") {
+    path11 += `&$filter=${encodeURIComponent(q.filter)}`;
+  }
+  return path11;
+}
+async function getXml(client, path11, accept, options) {
+  const res = await client.do("GET", path11, void 0, {
+    ...options,
+    headers: { ...options?.headers, Accept: accept }
+  });
+  const body = await res.text();
+  if (res.status < 200 || res.status >= 300) {
+    throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncate4(body, 200)}`);
+  }
+  return body;
+}
+async function getServiceDocument(client, options) {
+  return parseServiceDocument(await getXml(client, "/OData.svc", "application/xml", options));
+}
+async function getMetadata(client, options) {
+  return parseMetadata(await getXml(client, "/OData.svc/$metadata", "application/xml", options));
+}
+async function getTablePage(client, key, q, options) {
+  return parseFeed(await getXml(client, tablePagePath(key, q), "application/atom+xml", options));
+}
+
+// src/commands/odata.ts
+var ODATA_DEFAULT_PAGE_SIZE = 3e4;
+var ODATA_REQUEST_TIMEOUT_MS = 12e4;
+function notVisible(tableId, variant, where) {
+  return new Error(
+    `table ${tableId} (${variant}) is not visible to this user over OData (not in ${where})`
+  );
+}
+async function runODataTables(cfg) {
+  const collections = await getServiceDocument(cfg.client, { signal: cfg.signal });
+  const byId = /* @__PURE__ */ new Map();
+  for (const c of collections) {
+    const parts = parseODataTitle(c.title);
+    if (parts === null) continue;
+    let info = byId.get(parts.tableId);
+    if (info === void 0) {
+      info = { id: parts.tableId, title: parts.baseTitle, variants: [] };
+      byId.set(parts.tableId, info);
+    }
+    info.variants.push({ variant: parts.variant, title: c.title, key: c.key, updated: c.updated });
+  }
+  const order = ODATA_VARIANTS;
+  const tables = [...byId.values()].sort((a, b) => a.id - b.id);
+  for (const t of tables) {
+    t.variants.sort((a, b) => order.indexOf(a.variant) - order.indexOf(b.variant));
+  }
+  if (cfg.asJson) {
+    writeJSONIndented(cfg.out, tables);
+    return;
+  }
+  if (tables.length === 0) {
+    cfg.out.write("(no tables visible over OData)\n");
+    return;
+  }
+  const rows = [["ID", "TITLE", "VARIANTS", "UPDATED"]];
+  for (const t of tables) {
+    const updated = (t.variants.find((v) => v.variant === "latest") ?? t.variants[0])?.updated;
+    rows.push([String(t.id), t.title, t.variants.map((v) => v.variant).join(","), updated ?? ""]);
+  }
+  for (const line of formatTable(rows, columnWidths(rows))) cfg.out.write(`${line}
+`);
+}
+async function runODataMetadata(cfg) {
+  const types = await getMetadata(cfg.client, { signal: cfg.signal });
+  const entity = findByTableId(types, (t) => t.name, cfg.tableId, cfg.variant);
+  if (entity === void 0) throw notVisible(cfg.tableId, cfg.variant, "$metadata");
+  if (cfg.asJson) {
+    writeJSONIndented(cfg.out, entity);
+    return;
+  }
+  cfg.out.write(`${entity.name}
+`);
+  if (entity.columns.length === 0) {
+    cfg.out.write("(no columns)\n");
+    return;
+  }
+  cfg.out.write("\n");
+  const rows = [["COLUMN", "TYPE"], ...entity.columns.map((c) => [c.name, c.type])];
+  for (const line of formatTable(rows, columnWidths(rows))) cfg.out.write(`${line}
+`);
+}
+async function runODataData(cfg) {
+  const req = { signal: cfg.signal };
+  const budget = () => cfg.extendTimeout?.(cfg.requestTimeoutMs ?? ODATA_REQUEST_TIMEOUT_MS);
+  let key = cfg.key;
+  if (key === void 0) {
+    budget();
+    const collections = await getServiceDocument(cfg.client, req);
+    const hit = findByTableId(collections, (c) => c.title, cfg.tableId, cfg.variant);
+    if (hit === void 0) throw notVisible(cfg.tableId, cfg.variant, "the service document");
+    key = hit.key;
+  }
+  budget();
+  const types = await getMetadata(cfg.client, req);
+  const entity = findByTableId(types, (t) => t.name, cfg.tableId, cfg.variant);
+  if (entity === void 0) throw notVisible(cfg.tableId, cfg.variant, "$metadata");
+  const columns = selectColumns(entity.columns, cfg.select, cfg.tableId, cfg.variant);
+  const names = columns.map((c) => c.name);
+  const pause = () => cfg.pauseTimeout?.();
+  const sink = createSink(cfg.format, names, cfg.out, cfg.signal, pause, budget);
+  await sink.start();
+  let skip = 0;
+  let remaining = cfg.limit;
+  for (; ; ) {
+    const top = remaining === null ? cfg.pageSize : Math.min(cfg.pageSize, remaining);
+    budget();
+    const entries = await getTablePage(
+      cfg.client,
+      key,
+      { top, skip, select: cfg.select === void 0 ? void 0 : names, filter: cfg.filter },
+      req
+    );
+    const page = entries.slice(0, top);
+    await sink.page(page.map((e) => names.map((n) => e.get(n) ?? null)));
+    skip += page.length;
+    if (remaining !== null) remaining -= page.length;
+    if (page.length < top || remaining === 0) break;
+  }
+  await sink.end();
+}
+function selectColumns(all, select, tableId, variant) {
+  if (select === void 0) return [...all];
+  const known = new Set(all.map((c) => c.name));
+  for (const s of select) {
+    if (!known.has(s)) {
+      throw new Error(
+        `--select: unknown column "${s}" for table ${tableId} (${variant}); names are the OData-sanitized ones from \`dr odata metadata ${tableId}\``
+      );
+    }
+  }
+  const wanted = new Set(select);
+  return all.filter((c) => wanted.has(c.name));
+}
+async function emitTo(out, s, signal, pause, rearm) {
+  if (!out.write(s)) {
+    pause();
+    await once(out, "drain", { signal });
+    rearm();
+  }
+}
+function createSink(format, names, out, signal, pause = () => {
+}, rearm = () => {
+}) {
+  const emit = (s) => emitTo(out, s, signal, pause, rearm);
+  if (format === "csv") {
+    return {
+      start: () => emit(`${formatCsvRow(names)}
+`),
+      page: async (rows) => {
+        for (const r of rows) await emit(`${formatCsvRow(r.map((c) => c ?? ""))}
+`);
+      },
+      end: async () => {
+      }
+    };
+  }
+  if (format === "json") {
+    let count = 0;
+    return {
+      start: () => emit("["),
+      page: async (rows) => {
+        for (const r of rows) {
+          const obj = Object.fromEntries(names.map((n, i) => [n, r[i] ?? null]));
+          await emit(`${count === 0 ? "\n" : ",\n"}${JSON.stringify(obj)}`);
+          count++;
+        }
+      },
+      end: () => emit(count === 0 ? "]\n" : "\n]\n")
+    };
+  }
+  let widths = null;
+  return {
+    start: async () => {
+    },
+    page: async (rows) => {
+      const cells = rows.map((r) => r.map((c) => c ?? ""));
+      if (widths === null) {
+        if (cells.length === 0) return;
+        widths = columnWidths([names, ...cells]);
+        await emit(`${formatTable([names], widths)[0]}
+`);
+      }
+      for (const line of formatTable(cells, widths)) await emit(`${line}
+`);
+    },
+    end: async () => {
+      if (widths === null) await emit("(no rows)\n");
+    }
+  };
+}
+function columnWidths(rows) {
+  const widths = [];
+  for (const r of rows) {
+    r.forEach((cell, i) => {
+      if ((widths[i] ?? 0) < cell.length) widths[i] = cell.length;
+    });
+  }
+  return widths;
+}
+function formatTable(rows, widths) {
+  return rows.map(
+    (r) => r.map((cell, i) => i === r.length - 1 ? cell : cell.padEnd((widths[i] ?? 0) + 2)).join("")
+  );
+}
+function parseVariant(raw) {
+  if (raw === void 0) return "latest";
+  const hit = ODATA_VARIANTS.find((v) => v === raw);
+  if (hit === void 0) {
+    throw new Error(
+      `invalid --variant "${raw}" (expected one of: ${ODATA_VARIANTS.join(", ")})`
+    );
+  }
+  return hit;
+}
+var KEY_PATTERN = /^[A-Za-z0-9+/_-]+={0,2}$/;
+function resolveDataOptions(tableIdStr, f) {
+  const tableId = parsePositiveIntArg(tableIdStr, "<table-id>");
+  const variant = parseVariant(f.variant);
+  if (f.top !== void 0 && f.all === true) {
+    throw new Error("--top and --all cannot be combined");
+  }
+  if (f.csv === true && f.json === true) {
+    throw new Error("--csv and --json cannot be combined");
+  }
+  const pageSize = f.pageSize === void 0 ? ODATA_DEFAULT_PAGE_SIZE : parsePositiveIntArg(f.pageSize, "--page-size");
+  let limit = pageSize;
+  if (f.all === true) limit = null;
+  else if (f.top !== void 0) limit = parsePositiveIntArg(f.top, "--top");
+  if (f.key !== void 0 && !KEY_PATTERN.test(f.key)) {
+    throw new Error(
+      `invalid --key "${f.key}" (expected a base64 key, see \`dr odata tables --json\`)`
+    );
+  }
+  let select;
+  if (f.select !== void 0) {
+    select = f.select.split(",").map((s) => s.trim()).filter((s) => s !== "");
+    if (select.length === 0) throw new Error("--select must name at least one column");
+  }
+  if (f.filter !== void 0 && f.filter === "") {
+    throw new Error("--filter must not be empty");
+  }
+  const requestTimeoutMs = parsePositiveSecondsFlag(
+    f.timeout,
+    "--timeout",
+    ODATA_REQUEST_TIMEOUT_MS
+  );
+  if (requestTimeoutMs > BATCH_TIMEOUT_MAX_SECONDS * 1e3) {
+    throw new Error(`--timeout must be at most ${BATCH_TIMEOUT_MAX_SECONDS} seconds`);
+  }
+  return {
+    tableId,
+    variant,
+    key: f.key,
+    limit,
+    pageSize,
+    select,
+    filter: f.filter,
+    format: f.csv === true ? "csv" : f.json === true ? "json" : "table",
+    requestTimeoutMs
+  };
+}
+var VARIANT_HELP = "latest (default), cleared, full (all versions) or full-cleared \u2014 the four collections OData clients see";
+function registerODataCommand(root) {
+  const od = root.command("odata").description(
+    "Read tables over OData V1 exactly as Excel / Power BI / SQLConnector receive them (read-only)"
+  );
+  const tablesCmd = od.command("tables").description("List the tables this user can read over OData, with their variants").option("--json", "Output JSON, including each variant key", false).action(async (opts) => {
+    const setup = await setupCall(opts.server, opts.account);
+    try {
+      await runODataTables({
+        client: setup.client,
+        asJson: opts.json === true,
+        signal: setup.signal,
+        out: process.stdout
+      });
+    } finally {
+      setup.cleanup();
+    }
+  });
+  addServerFlag(tablesCmd);
+  addAccountFlag(tablesCmd);
+  const metadataCmd = od.command("metadata").description("Columns and EDM types of a table, in $metadata order").argument("<table-id>", "table (template) id").option("--variant <variant>", VARIANT_HELP).option("--json", "Output JSON", false).action(async (idStr, opts) => {
+    const tableId = parsePositiveIntArg(idStr, "<table-id>");
+    const variant = parseVariant(opts.variant);
+    const setup = await setupCall(opts.server, opts.account);
+    try {
+      await runODataMetadata({
+        client: setup.client,
+        tableId,
+        variant,
+        asJson: opts.json === true,
+        signal: setup.signal,
+        out: process.stdout
+      });
+    } finally {
+      setup.cleanup();
+    }
+  });
+  addServerFlag(metadataCmd);
+  addAccountFlag(metadataCmd);
+  const dataCmd = od.command("data").description(
+    "Read table rows over OData. Without --top/--all: one page of --page-size rows. --top N: at most N rows. --all: page until the table is exhausted. Rows stream as each page arrives."
+  ).argument("<table-id>", "table (template) id").option("--variant <variant>", VARIANT_HELP).option(
+    "--key <base64>",
+    "Use this OData key verbatim instead of the one the service document lists"
+  ).option("--top <n>", "Return at most N rows").option("--all", "Page until the table is exhausted", false).option("--page-size <n>", `Rows per request ($top) (default ${ODATA_DEFAULT_PAGE_SIZE})`).option("--select <columns>", "Comma-separated OData column names (see `dr odata metadata`)").option("--filter <expr>", "OData $filter expression, passed through to the server").option("--csv", "Output CSV", false).option("--json", "Output a JSON array, streamed", false).option(
+    "--timeout <seconds>",
+    `Budget for each request in seconds (default ${ODATA_REQUEST_TIMEOUT_MS / 1e3})`
+  ).action(async (idStr, opts) => {
+    const r = resolveDataOptions(idStr, opts);
+    const setup = await setupCall(opts.server, opts.account, { timeoutMs: r.requestTimeoutMs });
+    try {
+      await runODataData({
+        client: setup.client,
+        tableId: r.tableId,
+        variant: r.variant,
+        key: r.key,
+        limit: r.limit,
+        pageSize: r.pageSize,
+        select: r.select,
+        filter: r.filter,
+        format: r.format,
+        signal: setup.signal,
+        out: process.stdout,
+        extendTimeout: setup.extendTimeout,
+        pauseTimeout: setup.pauseTimeout,
+        requestTimeoutMs: r.requestTimeoutMs
+      });
+    } finally {
+      setup.cleanup();
+    }
+  });
+  addServerFlag(dataCmd);
+  addAccountFlag(dataCmd);
+}
+
 // src/api/storyboards.ts
 async function list13(client, options) {
   const out = await client.getJSON("/api/storytelling/", options);
@@ -16404,22 +16912,22 @@ async function saveMappings(client, documentId, body, options = {}) {
 }
 async function postOnce(client, path11, payload, signal) {
   const res = await client.do("POST", path11, payload, { signal });
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 200 || res.status === 409) {
-    return { status: res.status, text };
+    return { status: res.status, text: text2 };
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncateBody(text)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncateBody(text2)}`);
 }
-function extractCacheKey(text) {
+function extractCacheKey(text2) {
   try {
-    const parsed2 = JSON.parse(text);
+    const parsed2 = JSON.parse(text2);
     return typeof parsed2.cache_key === "string" ? parsed2.cache_key : "";
   } catch {
     return "";
   }
 }
-function toResult(text) {
-  let message = text.trim();
+function toResult(text2) {
+  let message = text2.trim();
   try {
     const parsed2 = JSON.parse(message);
     if (typeof parsed2 === "string") message = parsed2;
@@ -16454,8 +16962,8 @@ async function getLutFile(client, documentId, options) {
   const path11 = `/api/documents/${documentId}/lut-file`;
   const res = await client.do("GET", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const ab = await res.arrayBuffer();
@@ -16493,8 +17001,8 @@ async function downloadDebugZip(client, docVersionId, type, reqOptions) {
   const path11 = `/api/documents/download_debug_zip_file/${docVersionId}?type=${type}`;
   const res = await client.do("GET", path11, void 0, reqOptions);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const ab = await res.arrayBuffer();
@@ -16620,19 +17128,19 @@ async function getDocumentJobStatusOnce(client, basePath, requestId, reqOptions)
     await res.text();
     return { kind: "notFound" };
   }
-  const text = await res.text();
-  throw new Error(`document-job status: unexpected HTTP ${res.status}: ${text.trim()}`);
+  const text2 = await res.text();
+  throw new Error(`document-job status: unexpected HTTP ${res.status}: ${text2.trim()}`);
 }
 async function readAutoCalcError(res) {
-  const text = await res.text();
+  const text2 = await res.text();
   try {
-    const parsed2 = JSON.parse(text);
+    const parsed2 = JSON.parse(text2);
     if (typeof parsed2.error === "string" && parsed2.error !== "") {
       return parsed2.error;
     }
   } catch {
   }
-  return text.trim();
+  return text2.trim();
 }
 var defaultSleep3 = (ms, signal) => new Promise((resolve3, reject) => {
   if (signal?.aborted) {
@@ -16873,13 +17381,13 @@ async function getAutoCalculateSettings(client, docId, reqOptions) {
     await res.text().catch(() => "");
     return null;
   }
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`GET ${path11}: HTTP ${res.status}: ${text.slice(0, 200)}`);
+    throw new Error(`GET ${path11}: HTTP ${res.status}: ${text2.slice(0, 200)}`);
   }
-  if (text === "" || text === '""') return null;
+  if (text2 === "" || text2 === '""') return null;
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`GET ${path11}: decode: ${msg}`);
@@ -20970,15 +21478,15 @@ function parseSuppressionDimension(d, source, i) {
   return { name, mappings };
 }
 async function loadSuppression(path11) {
-  let text;
+  let text2;
   try {
-    text = await readFile2(path11, "utf8");
+    text2 = await readFile2(path11, "utf8");
   } catch (err) {
     throw new Error(`--suppression: cannot read ${path11} (${errText(err)})`);
   }
   let parsed2;
   try {
-    parsed2 = JSON.parse(text);
+    parsed2 = JSON.parse(text2);
   } catch (err) {
     throw new Error(`--suppression: ${path11} is not valid JSON (${errText(err)})`);
   }
@@ -24778,18 +25286,18 @@ async function getTemplateFields(client, templateId, options) {
 }
 async function putDataOnce(client, path11, body, options) {
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 401 || res.status === 403) {
-    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text, 200)}`);
+    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text2, 200)}`);
   }
   if (res.status !== 200 && res.status !== 409 && (res.status < 200 || res.status >= 300)) {
-    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text, 200)}`);
+    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text2, 200)}`);
   }
-  if (text === "" || text === '""') {
+  if (text2 === "" || text2 === '""') {
     return { status: res.status, parsed: null };
   }
   try {
-    return { status: res.status, parsed: JSON.parse(text) };
+    return { status: res.status, parsed: JSON.parse(text2) };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`PUT ${path11}: decode: ${msg}`);
@@ -26696,8 +27204,8 @@ async function exportCsv(client, options) {
   const path11 = `${BASE}export-csv/`;
   const res = await client.do("GET", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   return res.text();
@@ -28485,13 +28993,13 @@ ${MARKER_END}`;
 }
 function renderInlineBlock(skills, managedBy, installRoot) {
   const sections = skills.map((s) => {
-    const text = Buffer.from(routerBytes(s)).toString("utf8");
-    const trailingNl = text.endsWith("\n") ? "" : "\n";
+    const text2 = Buffer.from(routerBytes(s)).toString("utf8");
+    const trailingNl = text2.endsWith("\n") ? "" : "\n";
     const refs = s.files.filter((f) => f.relPath !== ROUTER_FILE).map((f) => f.relPath);
     const pointer = refs.length === 0 ? "" : `<!-- dr-cli skill ${s.name}: ${refs.length} reference file(s) installed under ${installRoot}/${s.name}/ (${refs.join(", ")}) \u2014 read on demand -->
 `;
     return `<!-- dr-cli skill: ${s.name} -->
-${text}${trailingNl}${pointer}`;
+${text2}${trailingNl}${pointer}`;
   });
   return `${MARKER_BEGIN}
 <!-- dr-cli \u2014 Datarails CLI skills (auto-managed by ${managedBy}) -->
@@ -30554,14 +31062,14 @@ async function runSplitCreate(cfg) {
         writeJSONIndented(cfg.out, result);
         return;
       }
-      const children = Array.isArray(result.split_documents) ? result.split_documents : [];
+      const children2 = Array.isArray(result.split_documents) ? result.split_documents : [];
       const parentName = result.document !== null && typeof result.document?.name === "string" ? result.document.name : "-";
       cfg.out.write(
-        `Split created (id=${result.id}): ${children.length} child file(s) under parent ${JSON.stringify(parentName)}.
+        `Split created (id=${result.id}): ${children2.length} child file(s) under parent ${JSON.stringify(parentName)}.
 `
       );
-      for (const child of children) {
-        const name = typeof child.name === "string" ? child.name : "(unnamed)";
+      for (const child2 of children2) {
+        const name = typeof child2.name === "string" ? child2.name : "(unnamed)";
         cfg.out.write(`  - ${name}
 `);
       }
@@ -30642,11 +31150,11 @@ function renderSplitsTable(out, splits) {
   const rows = [["ID", "PARENT", "CHILDREN", "INPUT_METHOD", "DATA_MODE"]];
   for (const s of splits) {
     const parent = s.document !== null && typeof s.document?.name === "string" ? s.document.name : "-";
-    const children = Array.isArray(s.split_documents) ? String(s.split_documents.length) : "0";
+    const children2 = Array.isArray(s.split_documents) ? String(s.split_documents.length) : "0";
     rows.push([
       String(s.id),
       parent,
-      children,
+      children2,
       s.input_method ?? "-",
       s.export_as_values === true ? "fixed" : "live"
     ]);
@@ -31719,21 +32227,21 @@ async function queryCheckStatus(client, queryIds, reqOptions) {
 }
 async function getErrorExplanation(client, path11, reqOptions) {
   const res = await client.do("GET", path11, void 0, reqOptions);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 200) {
     let parsed2;
     try {
-      parsed2 = JSON.parse(text);
+      parsed2 = JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`decode error-explanation: ${msg}`);
     }
-    return { status: 200, body: parsed2, rawText: text };
+    return { status: 200, body: parsed2, rawText: text2 };
   }
   if (res.status === 404) {
-    return { status: 404, body: null, rawText: text };
+    return { status: 404, body: null, rawText: text2 };
   }
-  throw new Error(`error explanation: unexpected status ${res.status}: ${text.trim()}`);
+  throw new Error(`error explanation: unexpected status ${res.status}: ${text2.trim()}`);
 }
 async function resync(client, id, reqOptions) {
   const out = await client.postJSON(
@@ -31751,8 +32259,8 @@ async function testConnection(client, rawBody, reqOptions) {
     rawBody,
     reqOptions
   );
-  const text = await res.text();
-  return { status: res.status, rawText: text };
+  const text2 = await res.text();
+  return { status: res.status, rawText: text2 };
 }
 async function create15(client, body, reqOptions) {
   const path11 = "/api/v3/data_integrations/";
@@ -31772,8 +32280,8 @@ async function update9(client, id, body, reqOptions) {
 }
 async function deleteById13(client, id, reqOptions) {
   const res = await client.do("DELETE", `/api/v3/data_integrations/${id}/`, void 0, reqOptions);
-  const text = await res.text();
-  return { status: res.status, rawText: text };
+  const text2 = await res.text();
+  return { status: res.status, rawText: text2 };
 }
 async function revoke(client, id, reqOptions) {
   const res = await client.do(
@@ -31852,14 +32360,14 @@ async function itUpdate(client, id, body, reqOptions) {
 }
 async function itDelete(client, id, reqOptions) {
   const res = await client.do("DELETE", `/api/it/integrations/${id}`, void 0, reqOptions);
-  const text = await res.text();
-  return { status: res.status, rawText: text };
+  const text2 = await res.text();
+  return { status: res.status, rawText: text2 };
 }
 async function itResync(client, id, reqOptions) {
   const res = await client.do("GET", `/api/it/integrations/${id}/resync`, void 0, reqOptions);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`resync: HTTP ${res.status}: ${text.trim()}`);
+    throw new Error(`resync: HTTP ${res.status}: ${text2.trim()}`);
   }
 }
 
@@ -40846,8 +41354,8 @@ async function getEvidenceFile(client, params, options) {
   const path11 = params.accountId !== void 0 && params.accountId !== "" ? `/api/reconciliation/processes/${params.processId}/account/${params.accountId}/evidences/${params.evidenceId}/file` : `/api/reconciliation/processes/${params.processId}/evidences/${params.evidenceId}/file`;
   const res = await client.do("GET", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const ab = await res.arrayBuffer();
@@ -40905,19 +41413,19 @@ async function deleteFileboxConnection(client, connectionId, options) {
 async function getFileboxSyncProgress(client, params, options) {
   const path11 = `/api/reconciliation/filebox/connections/${params.connectionId}/sync/progress`;
   const res = await client.do("GET", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 200 || res.status === 409) {
-    if (text === "" || text === '""') {
+    if (text2 === "" || text2 === '""') {
       return { status: "", remaining_files: 0, message: "" };
     }
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`GET ${path11}: decode: ${msg}`);
     }
   }
-  const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+  const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
   throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
 }
 async function getFileboxUnlinkedCount(client, params, options) {
@@ -41074,8 +41582,8 @@ async function readAssigneeCsv(path11) {
   }
   return parseAssigneeCsvText(raw);
 }
-function parseAssigneeCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseAssigneeCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -44451,8 +44959,8 @@ async function deleteWithBody(client, path11, body, options) {
   const encoded = JSON.stringify(body);
   const res = await client.do("DELETE", path11, encoded, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   await res.text();
@@ -44900,16 +45408,16 @@ async function runProbe(client, options) {
     return;
   }
   if (res.status === 403 || res.status === 404) {
-    const text2 = await res.text();
-    const lower = text2.toLowerCase();
+    const text3 = await res.text();
+    const lower = text3.toLowerCase();
     if (V2_NOT_ENABLED_MARKERS.some((marker) => lower.includes(marker))) {
       throw new WorkflowV2NotEnabledError();
     }
-    const truncated2 = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
+    const truncated2 = text3.length > 200 ? `${text3.slice(0, 200)}\u2026` : text3;
     throw new Error(`GET ${WORKFLOW_V2_PROBE_PATH}: HTTP ${res.status}: ${truncated2}`);
   }
-  const text = await res.text();
-  const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+  const text2 = await res.text();
+  const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
   throw new Error(`GET ${WORKFLOW_V2_PROBE_PATH}: HTTP ${res.status}: ${truncated}`);
 }
 var MEC_NOT_ENABLED_MARKERS = [
@@ -44982,16 +45490,16 @@ async function runMecProbe(client, options) {
     return;
   }
   if (res.status === 403 || res.status === 404) {
-    const text2 = await res.text();
-    const lower = text2.toLowerCase();
+    const text3 = await res.text();
+    const lower = text3.toLowerCase();
     if (MEC_NOT_ENABLED_MARKERS.some((marker) => lower.includes(marker))) {
       throw new MecNotEnabledError();
     }
-    const truncated2 = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
+    const truncated2 = text3.length > 200 ? `${text3.slice(0, 200)}\u2026` : text3;
     throw new Error(`GET ${MEC_PROBE_PATH}: HTTP ${res.status}: ${truncated2}`);
   }
-  const text = await res.text();
-  const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+  const text2 = await res.text();
+  const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
   throw new Error(`GET ${MEC_PROBE_PATH}: HTTP ${res.status}: ${truncated}`);
 }
 var SHARE_DATA_FLAG = "--yes-share-data";
@@ -51539,8 +52047,8 @@ async function putTransactions(client, params, payload, options) {
 async function rescanTemplateRules(client, params, options) {
   const path11 = `/api/templates/${params.templateId}/rules/rescan`;
   const res = await client.do("POST", path11, void 0, options);
-  const text = await res.text();
-  let body = text;
+  const text2 = await res.text();
+  let body = text2;
   if (body.startsWith('"') && body.endsWith('"') && body.length >= 2) {
     try {
       body = JSON.parse(body);
@@ -51616,8 +52124,8 @@ async function exportRulesCsv(client, params, options) {
   const path11 = `/api/templates/${params.templateId}/rules/export_to_csv${qs}`;
   const res = await client.do("POST", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const csv = await res.text();
@@ -51643,8 +52151,8 @@ async function deleteHiddenRules(client, params, customerTransactionIds, options
   const body = JSON.stringify(customerTransactionIds);
   const res = await client.do("DELETE", path11, body, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   await res.text();
@@ -51652,8 +52160,8 @@ async function deleteHiddenRules(client, params, customerTransactionIds, options
 async function triggerAiRules(client, options) {
   const path11 = `/api/templates/ai-rules`;
   const res = await client.do("POST", path11, void 0, options);
-  const text = await res.text();
-  let body = text;
+  const text2 = await res.text();
+  let body = text2;
   if (body.startsWith('"') && body.endsWith('"') && body.length >= 2) {
     try {
       body = JSON.parse(body);
@@ -51963,8 +52471,8 @@ async function readCsvImportPayload(path11) {
   }
   return parseCsvImportText(raw);
 }
-function parseCsvImportText(text) {
-  const rows = parseCsvRows(text);
+function parseCsvImportText(text2) {
+  const rows = parseCsvRows(text2);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
   }
@@ -52069,24 +52577,24 @@ function parseClause(clause, lineNo, clauseIdx) {
     args: values[0]
   };
 }
-function parseQuotedValueList(text, lineNo, clauseIdx) {
+function parseQuotedValueList(text2, lineNo, clauseIdx) {
   const out = [];
   let i = 0;
-  while (i < text.length) {
-    while (i < text.length && (text[i] === " " || text[i] === ",")) i++;
-    if (i >= text.length) break;
-    if (text[i] !== "'") {
+  while (i < text2.length) {
+    while (i < text2.length && (text2[i] === " " || text2[i] === ",")) i++;
+    if (i >= text2.length) break;
+    if (text2[i] !== "'") {
       throw new Error(
-        `--file: line ${lineNo} clause ${clauseIdx + 1}: expected single-quoted value at offset ${i} in "${truncate7(text, 80)}"`
+        `--file: line ${lineNo} clause ${clauseIdx + 1}: expected single-quoted value at offset ${i} in "${truncate7(text2, 80)}"`
       );
     }
     i++;
     let v = "";
     let closed = false;
-    while (i < text.length) {
-      const ch = text[i];
+    while (i < text2.length) {
+      const ch = text2[i];
       if (ch === "'") {
-        if (i + 1 < text.length && text[i + 1] === "'") {
+        if (i + 1 < text2.length && text2[i + 1] === "'") {
           v += "'";
           i += 2;
           continue;
@@ -52100,27 +52608,27 @@ function parseQuotedValueList(text, lineNo, clauseIdx) {
     }
     if (!closed) {
       throw new Error(
-        `--file: line ${lineNo} clause ${clauseIdx + 1}: unterminated single-quoted value in "${truncate7(text, 80)}"`
+        `--file: line ${lineNo} clause ${clauseIdx + 1}: unterminated single-quoted value in "${truncate7(text2, 80)}"`
       );
     }
     out.push(v);
   }
   if (out.length === 0) {
     throw new Error(
-      `--file: line ${lineNo} clause ${clauseIdx + 1}: no quoted values found in "${truncate7(text, 80)}"`
+      `--file: line ${lineNo} clause ${clauseIdx + 1}: no quoted values found in "${truncate7(text2, 80)}"`
     );
   }
   return out;
 }
-function splitOutsideQuotes(text, sep) {
+function splitOutsideQuotes(text2, sep) {
   const out = [];
   let buf = "";
   let i = 0;
   let inQuote = false;
-  while (i < text.length) {
-    const ch = text[i];
+  while (i < text2.length) {
+    const ch = text2[i];
     if (ch === "'") {
-      if (inQuote && i + 1 < text.length && text[i + 1] === "'") {
+      if (inQuote && i + 1 < text2.length && text2[i + 1] === "'") {
         buf += "''";
         i += 2;
         continue;
@@ -52130,7 +52638,7 @@ function splitOutsideQuotes(text, sep) {
       i++;
       continue;
     }
-    if (!inQuote && text.startsWith(sep, i)) {
+    if (!inQuote && text2.startsWith(sep, i)) {
       out.push(buf);
       buf = "";
       i += sep.length;
@@ -53633,35 +54141,35 @@ var REGISTRY = "https://datarails.jfrog.io/artifactory/api/npm/dr-cli-virtual";
 var PACKAGE = "@datarails-ai/dr-cli";
 function spawnInherit(command, args) {
   return new Promise((resolve3) => {
-    const child = spawn2(command, args, {
+    const child2 = spawn2(command, args, {
       stdio: "inherit",
       // Windows resolves `npm` as `npm.cmd`; `shell: true` lets cmd.exe do
       // the resolution without us having to special-case the suffix.
       shell: true
     });
-    child.on("close", (code) => {
+    child2.on("close", (code) => {
       resolve3(code ?? 1);
     });
-    child.on("error", () => {
+    child2.on("error", () => {
       resolve3(1);
     });
   });
 }
 function captureVersion() {
   return new Promise((resolve3) => {
-    const child = spawn2("dr", ["--version"], { shell: true });
+    const child2 = spawn2("dr", ["--version"], { shell: true });
     let out = "";
-    child.stdout.on("data", (chunk) => {
+    child2.stdout.on("data", (chunk) => {
       out += chunk.toString();
     });
-    child.on("close", (code) => {
+    child2.on("close", (code) => {
       if (code !== 0) {
         resolve3(null);
         return;
       }
       resolve3(out.trim());
     });
-    child.on("error", () => resolve3(null));
+    child2.on("error", () => resolve3(null));
   });
 }
 async function runUpdate() {
@@ -53733,8 +54241,8 @@ async function deleteEntity(client, body, options) {
   const path11 = "/bo/pre_kickoff/qbo_manage_companies/v2";
   const res = await client.do("DELETE", path11, JSON.stringify(body), options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncated}`);
   }
 }
@@ -59712,11 +60220,11 @@ async function extractSync(cfg, parts) {
 async function emitExtractionDraft(cfg, allResults, sourceFiles, outcomes, abortedMidRun) {
   const failed = outcomes.filter((o) => !o.ok);
   if (cfg.asRawJson) {
-    const text2 = JSON.stringify(allResults, null, 2);
+    const text3 = JSON.stringify(allResults, null, 2);
     if (cfg.outputPath !== void 0) {
-      await fsPromises3.writeFile(cfg.outputPath, text2 + "\n", "utf8");
+      await fsPromises3.writeFile(cfg.outputPath, text3 + "\n", "utf8");
     } else {
-      cfg.out.write(text2 + "\n");
+      cfg.out.write(text3 + "\n");
     }
     reportFileOutcomes(cfg.err, outcomes, abortedMidRun);
     throwIfAnyFileFailed(failed, outcomes.length);
@@ -59728,13 +60236,13 @@ async function emitExtractionDraft(cfg, allResults, sourceFiles, outcomes, abort
     tenantServer: cfg.serverKey,
     defaults: cfg.defaults
   });
-  const text = JSON.stringify(draft, null, 2);
+  const text2 = JSON.stringify(draft, null, 2);
   if (cfg.outputPath !== void 0) {
-    await fsPromises3.writeFile(cfg.outputPath, text + "\n", "utf8");
+    await fsPromises3.writeFile(cfg.outputPath, text2 + "\n", "utf8");
     cfg.err.write(`wrote ${cfg.outputPath}
 `);
   } else {
-    cfg.out.write(text + "\n");
+    cfg.out.write(text2 + "\n");
   }
   const review = draft._meta?.review_required ?? [];
   const failures = draft._meta?.ai_failures ?? [];
@@ -60223,14 +60731,14 @@ async function collectResourceIds(args, fromPath, labels = {}) {
     raw.push(...a.split(",").map((s) => s.trim()));
   }
   if (fromPath !== void 0 && fromPath !== "") {
-    let text;
+    let text2;
     try {
-      text = await fsPromises3.readFile(fromPath, "utf8");
+      text2 = await fsPromises3.readFile(fromPath, "utf8");
     } catch (err) {
       const m = err instanceof Error ? err.message : String(err);
       throw new Error(`read --from: ${m}`);
     }
-    for (const line of text.split(/\r?\n/)) {
+    for (const line of text2.split(/\r?\n/)) {
       const stripped = line.split("#")[0] ?? "";
       raw.push(...stripped.split(",").map((s) => s.trim()));
     }
@@ -63816,27 +64324,27 @@ function groupAnswer(group, below) {
 function filterBelow(node, scopes, map, armed) {
   const here = { count: 0, answer: void 0, required: [], denials: [] };
   let allAnswered = node.commands.length > 0;
-  for (const child of node.commands) {
-    if (child.commands.length > 0) {
-      const below = filterBelow(child, scopes, map, armed);
+  for (const child2 of node.commands) {
+    if (child2.commands.length > 0) {
+      const below = filterBelow(child2, scopes, map, armed);
       here.count += below.count;
       if (below.answer === void 0) {
         allAnswered = false;
         continue;
       }
-      interceptGroup(child, below.answer);
-      hide(child);
+      interceptGroup(child2, below.answer);
+      hide(child2);
       addRequired(here, below.required);
       addDenials(here, below.denials);
       continue;
     }
-    const answer = leafAnswer(child, scopes, map);
+    const answer = leafAnswer(child2, scopes, map);
     if (answer === void 0) {
       allAnswered = false;
       continue;
     }
-    intercept(child, answer.err, armed);
-    hide(child);
+    intercept(child2, answer.err, armed);
+    hide(child2);
     here.count += 1;
     addRequired(here, answer.required);
     if (answer.denial !== void 0) addDenials(here, [answer.denial]);
@@ -63959,7 +64467,7 @@ function registersServerFlag(cmd) {
 }
 function isServerBound(cmd) {
   if (cmd.commands.length === 0) return registersServerFlag(cmd);
-  return cmd.commands.every((child) => isServerBound(child));
+  return cmd.commands.every((child2) => isServerBound(child2));
 }
 function isOpenWithoutServer(cmd) {
   return SERVER_OPTIONAL_COMMANDS.has(cmd.name()) || !isServerBound(cmd);
@@ -64264,6 +64772,7 @@ function buildRootCommand() {
   registerDynamicRangesCommand(root);
   registerFunctionsCommand(root);
   registerSemanticTablesCommand(root);
+  registerODataCommand(root);
   registerStoryboardsCommand(root);
   registerExTablesCommand(root);
   registerLutCommand(root);
@@ -64416,8 +64925,8 @@ function redactUnknownOption(match, prefix, token) {
   if (!looksLikeFlag(name)) return `${prefix}<redacted>'`;
   return eq === -1 ? match : `${prefix}${name}=<redacted>'`;
 }
-function redactCommanderValues(text) {
-  return text.replace(UNKNOWN_OPTION_PATTERN, redactUnknownOption).replace(UNKNOWN_COMMAND_PATTERN, "$1<redacted>'").replace(INVALID_OPTION_ARGUMENT_PATTERN, "$1<redacted>$2").replace(INVALID_ENV_VALUE_PATTERN, "$1<redacted>$2").replace(INVALID_COMMAND_ARGUMENT_PATTERN, "$1<redacted>$2");
+function redactCommanderValues(text2) {
+  return text2.replace(UNKNOWN_OPTION_PATTERN, redactUnknownOption).replace(UNKNOWN_COMMAND_PATTERN, "$1<redacted>'").replace(INVALID_OPTION_ARGUMENT_PATTERN, "$1<redacted>$2").replace(INVALID_ENV_VALUE_PATTERN, "$1<redacted>$2").replace(INVALID_COMMAND_ARGUMENT_PATTERN, "$1<redacted>$2");
 }
 async function main() {
   let root;