@datarails-ai/dr-cli 1.6.73 → 1.6.75

package/dist/cli.js

@@ -8,7 +8,7 @@ import { fileURLToPath as fileURLToPath3 } from "url";
 // package.json
 var package_default = {
   name: "@datarails-ai/dr-cli",
-  version: "1.6.73",
+  version: "1.6.75",
   description: "Datarails CLI",
   type: "module",
   engines: {
@@ -38,10 +38,11 @@ var package_default = {
     postinstall: "node scripts/postinstall.mjs"
   },
   dependencies: {
-    "@datarails-ai/dr-appspace-cli": "0.9.5",
+    "@datarails-ai/dr-appspace-cli": "0.9.7",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@napi-rs/keyring": "^1.3.0",
     commander: "^12.1.0",
+    "fast-xml-parser": "^5.11.2",
     jszip: "^3.10.1",
     "node-html-parser": "^6.1.13",
     open: "^10.1.0",
@@ -66,7 +67,7 @@ var package_default = {
 };
 
 // src/buildInfo.ts
-var BUILD_TIME = "2026-09-30T11:34:47.859Z";
+var BUILD_TIME = "2026-09-30T12:50:28.608Z";
 function formatBuildTime(iso) {
   if (iso === "") return "";
   const d = new Date(iso);
@@ -411,6 +412,7 @@ var ordered = [
   { key: "UK", host: "https://ukapp.datarails.com", subDomain: "uk" },
   { key: "CA", host: "https://caapp.datarails.com", subDomain: "canada" },
   { key: "EU", host: "https://euapp.datarails.com", subDomain: "eu" },
+  { key: "STUDIO", host: "https://studio.datarails.com", subDomain: "studio" },
   { key: "DEV", host: "https://dev.datarails.com", subDomain: "dev" },
   { key: "DEV-1", host: "https://dev-1.datarails.com", subDomain: "dev-1" },
   { key: "TEST", host: "https://testapp.datarails.com", subDomain: "test" },
@@ -436,7 +438,7 @@ function list() {
 function keys() {
   return ordered.map((s) => s.key);
 }
-var PROD_KEYS = /* @__PURE__ */ new Set(["US", "US2", "UK", "CA", "EU", "DEMO"]);
+var PROD_KEYS = /* @__PURE__ */ new Set(["US", "US2", "UK", "CA", "EU", "STUDIO", "DEMO"]);
 function isProdServer(input) {
   let server;
   try {
@@ -577,11 +579,11 @@ var ScopeDeniedError = class extends Error {
     return `${this.method} ${this.path}: this identity's credential scope does not allow it${needs}; run 'dr whoami' to see the scopes this identity carries`;
   }
 };
-function parseScopeDenial(status2, text) {
+function parseScopeDenial(status2, text2) {
   if (status2 !== 403) return void 0;
   let body;
   try {
-    body = JSON.parse(text);
+    body = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -698,10 +700,10 @@ function decodeJwtExpiration(token) {
   }
   return at;
 }
-function parseTokenBody(text, label) {
+function parseTokenBody(text2, label) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     throw new Error(`jwt ${label} parse: ${msgOf3(err)}`);
   }
@@ -727,11 +729,11 @@ async function mintJwt(host, sessionId, csrfToken, options) {
     body: "{}",
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
-    throw new Error(`jwt mint: HTTP ${res.status}: ${truncate(text, TRUNCATE)}`);
+    throw new Error(`jwt mint: HTTP ${res.status}: ${truncate(text2, TRUNCATE)}`);
   }
-  const out = parseTokenBody(text, "mint");
+  const out = parseTokenBody(text2, "mint");
   if (out.access === "") {
     throw new Error("jwt mint: empty access token");
   }
@@ -754,11 +756,11 @@ async function refreshJwt(host, refreshToken, options) {
     body: JSON.stringify({ refresh: refreshToken }),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
-    throw new Error(`jwt refresh: HTTP ${res.status}: ${truncate(text, TRUNCATE)}`);
+    throw new Error(`jwt refresh: HTTP ${res.status}: ${truncate(text2, TRUNCATE)}`);
   }
-  const out = parseTokenBody(text, "refresh");
+  const out = parseTokenBody(text2, "refresh");
   if (out.access === "") {
     throw new Error("jwt refresh: empty access token");
   }
@@ -778,11 +780,11 @@ async function refreshExternalJwt(host, refreshToken, options) {
     body: JSON.stringify({ refresh: refreshToken }),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
-    throw new Error(`jwt external refresh: HTTP ${res.status}: ${truncate(text, TRUNCATE)}`);
+    throw new Error(`jwt external refresh: HTTP ${res.status}: ${truncate(text2, TRUNCATE)}`);
   }
-  const out = parseTokenBody(text, "refresh");
+  const out = parseTokenBody(text2, "refresh");
   if (out.access === "") {
     throw new Error("jwt external refresh: empty access token");
   }
@@ -810,11 +812,11 @@ async function exchangeApiKey(host, apiKey, options) {
     headers: { Authorization: `Bearer ${key}`, Accept: "application/json" },
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
     let code;
     try {
-      const value = JSON.parse(text)["error"];
+      const value = JSON.parse(text2)["error"];
       if (value === "invalid_key" || value === "exchange_unavailable") code = value;
     } catch {
     }
@@ -822,7 +824,7 @@ async function exchangeApiKey(host, apiKey, options) {
   }
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     throw new Error("api-key exchange parse: the response is not JSON");
   }
@@ -871,21 +873,21 @@ async function loginAs(host, operatorAccessToken, userId, options) {
     body: JSON.stringify(body),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
     let code;
     let detail;
     try {
-      const parsed2 = JSON.parse(text);
+      const parsed2 = JSON.parse(text2);
       if (typeof parsed2["code"] === "string") code = parsed2["code"];
       if (typeof parsed2["detail"] === "string") detail = parsed2["detail"];
     } catch {
     }
-    throw new LoginAsError(res.status, { code, detail, body: truncate(text, TRUNCATE) });
+    throw new LoginAsError(res.status, { code, detail, body: truncate(text2, TRUNCATE) });
   }
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     throw new Error(`jwt loginas parse: ${msgOf3(err)}`);
   }
@@ -2245,17 +2247,17 @@ var AuthorizedClient = class _AuthorizedClient {
       body: fd,
       signal: options?.signal
     });
-    const text = await res.text();
-    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text);
+    const text2 = await res.text();
+    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text2);
     if (res.status === 401 || res.status === 403) {
       throw new SessionExpiredError(`POST ${path11} (HTTP ${res.status})`);
     }
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -2296,17 +2298,17 @@ var AuthorizedClient = class _AuthorizedClient {
       body: fd,
       signal: options?.signal
     });
-    const text = await res.text();
-    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text);
+    const text2 = await res.text();
+    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text2);
     if (res.status === 401 || res.status === 403) {
       throw new SessionExpiredError(`POST ${path11} (HTTP ${res.status})`);
     }
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -2355,17 +2357,17 @@ var AuthorizedClient = class _AuthorizedClient {
       body: fd,
       signal: options?.signal
     });
-    const text = await res.text();
-    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text);
+    const text2 = await res.text();
+    _AuthorizedClient.throwIfScopeDeniedBody("POST", path11, res.status, text2);
     if (res.status === 401 || res.status === 403) {
       throw new SessionExpiredError(`POST ${path11} (HTTP ${res.status})`);
     }
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -2426,12 +2428,12 @@ var AuthorizedClient = class _AuthorizedClient {
       }
     }
     if (this.isAuthRejected(res)) {
-      const text2 = await res.text();
-      _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text2);
+      const text3 = await res.text();
+      _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text3);
       if (refreshed || triedSessionOnly) {
         const attempted = refreshed ? "session-only retry and JWT refresh" : "session-only retry";
         throw new Error(
-          `${method} ${path11}: HTTP ${res.status} after ${attempted} (authenticated, but endpoint rejected \u2014 check permissions, tenant/org context, or body): ${truncate2(text2, 200)}`
+          `${method} ${path11}: HTTP ${res.status} after ${attempted} (authenticated, but endpoint rejected \u2014 check permissions, tenant/org context, or body): ${truncate2(text3, 200)}`
         );
       }
       if (refreshErr !== void 0) {
@@ -2440,17 +2442,17 @@ var AuthorizedClient = class _AuthorizedClient {
       }
       throw new SessionExpiredError(`${method} ${path11} (HTTP ${res.status})`);
     }
-    const text = await res.text();
+    const text2 = await res.text();
     if (res.status < 200 || res.status >= 300) {
-      throw new Error(`${method} ${path11}: HTTP ${res.status}: ${truncate2(text, 200)}`);
+      throw new Error(`${method} ${path11}: HTTP ${res.status}: ${truncate2(text2, 200)}`);
     }
     try {
       await this._store.touch(this._serverKey, this._email);
     } catch {
     }
-    if (text === "" || text === '""') return null;
+    if (text2 === "" || text2 === '""') return null;
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`${method} ${path11}: decode: ${msg}`);
@@ -2522,18 +2524,18 @@ var AuthorizedClient = class _AuthorizedClient {
    */
   static async throwIfScopeDenied(method, path11, res) {
     if (res.status !== 403) return;
-    let text;
+    let text2;
     try {
-      text = await res.clone().text();
+      text2 = await res.clone().text();
     } catch {
       return;
     }
-    _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text);
+    _AuthorizedClient.throwIfScopeDeniedBody(method, path11, res.status, text2);
   }
   /** {@link AuthorizedClient.throwIfScopeDenied} for a body already in hand — the multipart
    *  methods and `requestJson`'s final branch have read theirs and must not read it twice. */
-  static throwIfScopeDeniedBody(method, path11, status2, text) {
-    const denial = parseScopeDenial(status2, text);
+  static throwIfScopeDeniedBody(method, path11, status2, text2) {
+    const denial = parseScopeDenial(status2, text2);
     if (denial !== void 0) throw new ScopeDeniedError(method, path11, denial.code);
   }
   /** True iff `res` is the auth-rejection signal (401 or 403). */
@@ -3424,9 +3426,9 @@ async function commandExists(cmd) {
   const probe = process.platform === "win32" ? "where" : "which";
   return new Promise((resolve3) => {
     try {
-      const child = spawn(probe, [cmd], { stdio: "ignore" });
-      child.on("error", () => resolve3(false));
-      child.on("close", (code) => resolve3(code === 0));
+      const child2 = spawn(probe, [cmd], { stdio: "ignore" });
+      child2.on("error", () => resolve3(false));
+      child2.on("close", (code) => resolve3(code === 0));
     } catch {
       resolve3(false);
     }
@@ -3446,20 +3448,20 @@ async function realEnv() {
 }
 function spawnCapture(cmd, args) {
   return new Promise((resolve3, reject) => {
-    const child = spawn(cmd, args, {
+    const child2 = spawn(cmd, args, {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: false
     });
     let stdout = "";
     let stderr = "";
-    child.stdout.on("data", (c) => {
+    child2.stdout.on("data", (c) => {
       stdout += c.toString("utf8");
     });
-    child.stderr.on("data", (c) => {
+    child2.stderr.on("data", (c) => {
       stderr += c.toString("utf8");
     });
-    child.on("error", reject);
-    child.on("close", (code) => resolve3({ code: code ?? 0, stdout, stderr }));
+    child2.on("error", reject);
+    child2.on("close", (code) => resolve3({ code: code ?? 0, stdout, stderr }));
   });
 }
 function ttyPrompt(spec, io = { input: process.stdin, output: process.stderr }) {
@@ -4362,6 +4364,7 @@ async function setupCall(serverFlag, accountFlag, options = {}) {
   let deadline = Date.now() + timeoutMs;
   let timer = setTimeout(() => controller.abort(), timeoutMs);
   let cleared = false;
+  let paused = false;
   let client;
   try {
     client = await AuthorizedClient.create(store, key, email, {
@@ -4388,11 +4391,17 @@ async function setupCall(serverFlag, accountFlag, options = {}) {
       if (cleared || controller.signal.aborted) return;
       if (!Number.isFinite(ms) || ms <= 0) return;
       const next = Date.now() + ms;
-      if (next <= deadline) return;
+      if (!paused && next <= deadline) return;
+      paused = false;
       clearTimeout(timer);
       deadline = next;
       timer = setTimeout(() => controller.abort(), ms);
     },
+    pauseTimeout: () => {
+      if (cleared || controller.signal.aborted) return;
+      paused = true;
+      clearTimeout(timer);
+    },
     cleanup: () => {
       if (cleared) return;
       cleared = true;
@@ -4589,10 +4598,10 @@ function parsePendingCommands(v, pending) {
   }
   return out;
 }
-function parseScopesMap(text) {
+function parseScopesMap(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -4626,13 +4635,13 @@ function parseScopesMap(text) {
   return map;
 }
 function loadScopesMap(here = path3.dirname(fileURLToPath(import.meta.url))) {
-  let text;
+  let text2;
   try {
-    text = readFileSync(path3.join(here, "scopes-map.json"), "utf8");
+    text2 = readFileSync(path3.join(here, "scopes-map.json"), "utf8");
   } catch {
     return void 0;
   }
-  return parseScopesMap(text);
+  return parseScopesMap(text2);
 }
 function scopesMapKey(cmd) {
   const names = [];
@@ -4652,10 +4661,10 @@ function commandPathOf(argv, root) {
       if (takesValue(token, cmd)) i += 1;
       continue;
     }
-    const child = childNamed(cmd, token);
-    if (child === void 0) break;
-    names.push(child.name());
-    cmd = child;
+    const child2 = childNamed(cmd, token);
+    if (child2 === void 0) break;
+    names.push(child2.name());
+    cmd = child2;
   }
   return names.join(" ");
 }
@@ -4672,11 +4681,11 @@ function takesValue(flag, cmd) {
   return declaredWithValueBelow(flag, cmd);
 }
 function declaredWithValueBelow(flag, cmd) {
-  for (const child of cmd.commands) {
-    for (const opt of child.options) {
+  for (const child2 of cmd.commands) {
+    for (const opt of child2.options) {
       if ((opt.short === flag || opt.long === flag) && (opt.required || opt.optional)) return true;
     }
-    if (declaredWithValueBelow(flag, child)) return true;
+    if (declaredWithValueBelow(flag, child2)) return true;
   }
   return false;
 }
@@ -5011,14 +5020,14 @@ async function requestDeviceCode(host, options) {
     body: body.toString(),
     signal: options?.signal
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
     const hint = flow === "v2" && res.status === 429 ? " (too many logins from this address: wait a minute and run `dr login` again)" : "";
-    throw new Error(`device/code failed: ${res.status} ${text.trim()}${hint}`);
+    throw new Error(`device/code failed: ${res.status} ${text2.trim()}${hint}`);
   }
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`device/code parse: ${msg}`);
@@ -5049,10 +5058,10 @@ var defaultSleep = (ms, signal) => new Promise((resolve3, reject) => {
     { once: true }
   );
 });
-function parseObject(text) {
+function parseObject(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`token parse: ${msg}`);
@@ -5062,8 +5071,8 @@ function parseObject(text) {
   }
   return raw;
 }
-function parseTokenResponse(text) {
-  const obj = parseObject(text);
+function parseTokenResponse(text2) {
+  const obj = parseObject(text2);
   const tok = {
     sessionId: typeof obj.session_id === "string" ? obj.session_id : "",
     csrfToken: typeof obj.csrf_token === "string" ? obj.csrf_token : ""
@@ -5073,10 +5082,10 @@ function parseTokenResponse(text) {
   }
   return tok;
 }
-function tryParseErrorCode(text) {
+function tryParseErrorCode(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     return "";
   }
@@ -5085,8 +5094,8 @@ function tryParseErrorCode(text) {
   return typeof errVal === "string" ? errVal : "";
 }
 async function pollForToken(host, deviceCode, options = {}) {
-  return poll(host, PATHS.legacy.token, deviceCode, options, (text) => {
-    const tok = parseTokenResponse(text);
+  return poll(host, PATHS.legacy.token, deviceCode, options, (text2) => {
+    const tok = parseTokenResponse(text2);
     if (!tok.sessionId || !tok.csrfToken) {
       throw new Error("token response missing session_id or csrf_token");
     }
@@ -5094,8 +5103,8 @@ async function pollForToken(host, deviceCode, options = {}) {
   });
 }
 async function pollForV2Token(host, deviceCode, options = {}) {
-  return poll(host, PATHS.v2.token, deviceCode, options, (text) => {
-    const obj = parseObject(text);
+  return poll(host, PATHS.v2.token, deviceCode, options, (text2) => {
+    const obj = parseObject(text2);
     const access = typeof obj.access === "string" ? obj.access : "";
     const refresh = typeof obj.refresh === "string" ? obj.refresh : "";
     if (access === "" || refresh === "") {
@@ -5108,7 +5117,7 @@ async function poll(host, path11, deviceCode, options, onSuccess) {
   const interval = options.interval ?? 2e3;
   const maxWait = options.maxWait ?? 6e5;
   const now = options.now ?? Date.now;
-  const sleep3 = options.sleep ?? defaultSleep;
+  const sleep4 = options.sleep ?? defaultSleep;
   const signal = options.signal;
   const base = host.replace(/\/+$/, "");
   const deadline = now() + maxWait;
@@ -5130,19 +5139,19 @@ async function poll(host, path11, deviceCode, options, onSuccess) {
       body: body.toString(),
       signal
     });
-    const text = await res.text();
+    const text2 = await res.text();
     if (res.ok) {
-      return onSuccess(text);
+      return onSuccess(text2);
     }
-    const errCode = tryParseErrorCode(text);
+    const errCode = tryParseErrorCode(text2);
     if (errCode === "authorization_pending" || errCode === "slow_down") {
-      await sleep3(interval, signal);
+      await sleep4(interval, signal);
       continue;
     }
     if (errCode) {
       throw new Error(`token error: ${errCode}`);
     }
-    throw new Error(`token HTTP ${res.status}: ${text.trim()}`);
+    throw new Error(`token HTTP ${res.status}: ${text2.trim()}`);
   }
 }
 
@@ -5642,11 +5651,11 @@ var UserExistsError = class extends Error {
 async function create(client, payload, options) {
   const path11 = "/api/it/users";
   const res = await client.do("POST", path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     let parsed2;
     try {
-      parsed2 = JSON.parse(text);
+      parsed2 = JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`POST ${path11}: decode: ${msg}`);
@@ -5664,7 +5673,7 @@ async function create(client, payload, options) {
   if (res.status === 400) {
     let details;
     try {
-      const body = JSON.parse(text);
+      const body = JSON.parse(text2);
       if (typeof body.details === "string") details = body.details;
     } catch {
     }
@@ -5672,23 +5681,23 @@ async function create(client, payload, options) {
       throw new UserExistsError(payload.email);
     }
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function registerIdentity(client, id, options) {
   const path11 = `/api/it/users/${id}/register_identity`;
   const res = await client.do("PUT", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     let body;
     try {
-      body = JSON.parse(text);
+      body = JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`PUT ${path11}: decode: ${msg}`);
     }
     if (typeof body.sent !== "boolean") {
       throw new Error(
-        `PUT ${path11}: expected a boolean "sent" in the 2xx body, got ${truncate4(text, 200)}`
+        `PUT ${path11}: expected a boolean "sent" in the 2xx body, got ${truncate4(text2, 200)}`
       );
     }
     return body.sent ? { status: "registered" } : { status: "already_exists" };
@@ -5696,42 +5705,42 @@ async function registerIdentity(client, id, options) {
   if (res.status === 502) {
     let reason;
     try {
-      const body = JSON.parse(text);
+      const body = JSON.parse(text2);
       if (typeof body.reason === "string") reason = body.reason;
     } catch {
     }
     return { status: "failed", ...reason !== void 0 ? { reason } : {} };
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function assignPermissionGroups(client, id, groupIds, options) {
   const path11 = `/api/it/users/${id}/permission_groups`;
   const body = JSON.stringify({ permission_groups: groupIds });
   const res = await client.do("POST", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function updateUserRole(client, id, role, options) {
   const path11 = `/api/it/users/${id}/permissions`;
   const body = JSON.stringify({ role });
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function removePermissionGroup(client, id, groupId, options) {
   const path11 = `/api/it/users/${id}/permission_groups/${groupId}`;
   const res = await client.do("DELETE", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 var PasswordValidationError = class extends Error {
   errors;
@@ -5751,11 +5760,11 @@ async function setPassword(client, id, password, options) {
     await res.text();
     return;
   }
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 400) {
     let parsed2;
     try {
-      parsed2 = JSON.parse(text);
+      parsed2 = JSON.parse(text2);
     } catch {
     }
     if (typeof parsed2 === "object" && parsed2 !== null && "password" in parsed2 && Array.isArray(parsed2.password)) {
@@ -5764,7 +5773,7 @@ async function setPassword(client, id, password, options) {
       throw new PasswordValidationError(messages);
     }
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 var EmailInUseError = class extends Error {
   email;
@@ -5782,14 +5791,14 @@ async function updateUserEmail(client, id, newEmail, options) {
     excel_online_email: current.profile?.excel_online_email ?? null
   });
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return { id, email: newEmail, previousEmail: current.email };
   }
-  if (res.status === 400 && /already in use/i.test(text)) {
+  if (res.status === 400 && /already in use/i.test(text2)) {
     throw new EmailInUseError(newEmail);
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 var StoredEmailInvalidError = class extends Error {
   id;
@@ -5813,7 +5822,7 @@ async function setEmailNotifications(client, id, enabled, options) {
     excel_online_email: current.profile?.excel_online_email ?? null
   });
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return {
       id,
@@ -5822,10 +5831,10 @@ async function setEmailNotifications(client, id, enabled, options) {
       blocked: current.profile?.is_blocked === true
     };
   }
-  if (res.status === 400 && /valid email address/i.test(text)) {
+  if (res.status === 400 && /valid email address/i.test(text2)) {
     throw new StoredEmailInvalidError(id, current.email);
   }
-  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function getCanLoginAs(client, params = {}, options) {
   const qs = new URLSearchParams();
@@ -7063,66 +7072,66 @@ async function listPermissionGroups(client, options) {
 async function createPermissionGroup(client, payload, options) {
   const path11 = "/api/it/permission_groups";
   const res = await client.do("POST", path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
-  return parsePermissionGroup("POST", path11, text);
+  return parsePermissionGroup("POST", path11, text2);
 }
-function parsePermissionGroup(method, path11, text) {
+function parsePermissionGroup(method, path11, text2) {
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text, 200)})`);
+    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text2, 200)})`);
   }
 }
 async function getPermissionGroup(client, id, options) {
   const path11 = `/api/it/permission_groups/${id}`;
   const res = await client.do("GET", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
-  return parsePermissionGroup("GET", path11, text);
+  return parsePermissionGroup("GET", path11, text2);
 }
 async function updatePermissionGroup(client, id, name, options) {
   const path11 = `/api/it/permission_groups/${id}`;
   const res = await client.do("PUT", path11, JSON.stringify({ name }), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
-  return parsePermissionGroup("PUT", path11, text);
+  return parsePermissionGroup("PUT", path11, text2);
 }
 async function deletePermissionGroup(client, id, options) {
   const path11 = `/api/it/permission_groups/${id}`;
   const res = await client.do("DELETE", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+    const text2 = await res.text();
+    throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
   }
 }
-function decodeJsonBody(method, path11, text) {
+function decodeJsonBody(method, path11, text2) {
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text, 200)})`);
+    throw new Error(`${method} ${path11}: decode: ${msg} (body: ${truncate4(text2, 200)})`);
   }
 }
-function redactPasswordsInBodyText(text) {
-  return text.replace(/"password"\s*:\s*"(?:[^"\\]|\\.)*"/g, '"password":"[redacted]"');
+function redactPasswordsInBodyText(text2) {
+  return text2.replace(/"password"\s*:\s*"(?:[^"\\]|\\.)*"/g, '"password":"[redacted]"');
 }
 async function orgMigrationRequest(client, method, path11, payload, options) {
   const res = await client.do(method, path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
     throw new Error(
-      `${method} ${path11}: HTTP ${res.status}: ${truncate4(redactPasswordsInBodyText(text), 600)}`
+      `${method} ${path11}: HTTP ${res.status}: ${truncate4(redactPasswordsInBodyText(text2), 600)}`
     );
   }
-  return decodeJsonBody(method, path11, text);
+  return decodeJsonBody(method, path11, text2);
 }
 async function exportCreate(client, payload, options) {
   return orgMigrationRequest(
@@ -7165,8 +7174,8 @@ async function importDeleteOrgs(client, payload, options) {
 import { promises as fs4 } from "fs";
 
 // src/commands/_csv.ts
-function parseCsvRows(text) {
-  const normalized = text.replace(/\r\n/g, "\n").replace(/\n$/, "");
+function parseCsvRows(text2) {
+  const normalized = text2.replace(/\r\n/g, "\n").replace(/\n$/, "");
   if (normalized === "") return [];
   const rows = [];
   let row = [];
@@ -7216,6 +7225,9 @@ function parseCsvRows(text) {
   rows.push(row);
   return rows;
 }
+function formatCsvRow(cells) {
+  return cells.map((c) => /[",\r\n]/.test(c) ? `"${c.replace(/"/g, '""')}"` : c).join(",");
+}
 
 // src/commands/_userCsv.ts
 var EXPECTED_HEADER = [
@@ -7245,8 +7257,8 @@ async function readUsersCsv(path11) {
   }
   return parseUsersCsvText(raw);
 }
-function parseUsersCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseUsersCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -7420,11 +7432,11 @@ async function getRoles(client, segment, options) {
 async function grantRoleToUsers(client, appSegment, payload, options) {
   const path11 = `/api/${appSegment}/users/grant_permissions_bulk`;
   const res = await client.do("POST", path11, JSON.stringify(payload), options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function getUserTableRoles(client, userId, options) {
   const out = await client.getJSON(
@@ -7444,11 +7456,11 @@ async function setUserPermissionFilters(client, userId, newFilters, options) {
   const path11 = `/api/it/users/${userId}/permission_filters`;
   const body = JSON.stringify({ new_filters: newFilters });
   const res = await client.do("POST", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status >= 200 && res.status < 300) {
     return;
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text, 200)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncate4(text2, 200)}`);
 }
 async function getTableRoles(client, options) {
   return getRoles(client, "table", options);
@@ -8155,8 +8167,8 @@ async function readPermissionsCsv(path11) {
   }
   return parsePermissionsCsvText(raw);
 }
-function parsePermissionsCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parsePermissionsCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -8589,8 +8601,8 @@ async function readEmailRenameCsv(path11) {
   }
   return parseEmailRenameCsvText(raw);
 }
-function parseEmailRenameCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseEmailRenameCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -10223,8 +10235,8 @@ async function readGroupsCsv(path11) {
   }
   return parseGroupsCsvText(raw);
 }
-function parseGroupsCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseGroupsCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -11889,8 +11901,8 @@ function envelopeErr(success, error) {
   }
   throw new Error("finance-os returned success=false with no error message");
 }
-function describeFinanceOsFailure(text) {
-  const trimmed = text.trim();
+function describeFinanceOsFailure(text2) {
+  const trimmed = text2.trim();
   let parsed2;
   try {
     parsed2 = JSON.parse(trimmed);
@@ -11954,9 +11966,9 @@ var AGGREGATE_POLL_TIMEOUT_MS = 6e4;
 async function startTask(client, label, path11, body, options) {
   const res = await client.do("POST", path11, JSON.stringify(body), options);
   if (res.status !== 202) {
-    const text = await res.text();
+    const text2 = await res.text();
     throw new Error(
-      `${label} POST: expected 202, got ${res.status}: ${describeFinanceOsFailure(text)}`
+      `${label} POST: expected 202, got ${res.status}: ${describeFinanceOsFailure(text2)}`
     );
   }
   const location = res.headers.get("Location") ?? "";
@@ -12000,10 +12012,10 @@ async function getTaskOnce(client, label, pollPath, options) {
     throw new Error(`poll ${label}: ${msg}`);
   }
   if (res.status === 200) {
-    const text2 = await res.text();
+    const text3 = await res.text();
     let parsed2;
     try {
-      parsed2 = text2 === "" ? null : JSON.parse(text2);
+      parsed2 = text3 === "" ? null : JSON.parse(text3);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`poll ${label}: ${msg}`);
@@ -12014,9 +12026,9 @@ async function getTaskOnce(client, label, pollPath, options) {
     await res.text();
     return { env: null, status: res.status };
   }
-  const text = await res.text();
+  const text2 = await res.text();
   throw new Error(
-    `poll ${label}: unexpected status ${res.status}: ${describeFinanceOsFailure(text)}`
+    `poll ${label}: unexpected status ${res.status}: ${describeFinanceOsFailure(text2)}`
   );
 }
 var defaultSleep2 = (ms, signal) => new Promise((resolve3, reject) => {
@@ -12037,7 +12049,7 @@ var defaultSleep2 = (ms, signal) => new Promise((resolve3, reject) => {
 async function pollTask(client, label, path11, options = {}) {
   const interval = options.pollIntervalMs ?? AGGREGATE_POLL_INTERVAL_MS;
   const timeout = options.timeoutMs ?? AGGREGATE_POLL_TIMEOUT_MS;
-  const sleep3 = options.sleep ?? defaultSleep2;
+  const sleep4 = options.sleep ?? defaultSleep2;
   const now = options.now ?? Date.now;
   const inner = new AbortController();
   const onOuterAbort = () => inner.abort(options.signal?.reason);
@@ -12079,7 +12091,7 @@ async function pollTask(client, label, path11, options = {}) {
         return result.env;
       }
       try {
-        await sleep3(interval, inner.signal);
+        await sleep4(interval, inner.signal);
       } catch {
         const reason = inner.signal.reason instanceof Error ? inner.signal.reason.message : String(inner.signal.reason ?? "aborted");
         throw new Error(`${label} polling timed out: ${reason}`);
@@ -14280,7 +14292,7 @@ function renderFolderTree(out, tree) {
         node.parent_id !== null ? String(node.parent_id) : "(root)"
       ]
     });
-    for (const child of node.children ?? []) walk(child, depth + 1);
+    for (const child2 of node.children ?? []) walk(child2, depth + 1);
   };
   for (const root of tree) walk(root, 0);
   writeTable9(out, rows);
@@ -15775,6 +15787,503 @@ function collectArray3(value, previous) {
   return previous.concat([value]);
 }
 
+// src/commands/odata.ts
+import { once } from "events";
+
+// src/api/odata.ts
+import { XMLParser } from "fast-xml-parser";
+var ODATA_VARIANTS = ["latest", "cleared", "full", "full-cleared"];
+var VARIANT_BY_SUFFIX = /* @__PURE__ */ new Map([
+  ["", "latest"],
+  [" (Cleared)", "cleared"],
+  [" (Full)", "full"],
+  [" (Full)(Cleared)", "full-cleared"]
+]);
+var TAG = "%";
+var TEXT = "#text";
+var ATTR = "@_";
+var parser = new XMLParser({
+  ignoreAttributes: false,
+  attributeNamePrefix: ATTR,
+  textNodeName: TEXT,
+  removeNSPrefix: true,
+  parseTagValue: false,
+  parseAttributeValue: false,
+  trimValues: false,
+  htmlEntities: true,
+  transformTagName: (name) => name.startsWith(TAG) ? name : `${TAG}${name}`,
+  isArray: (_name, _jpath, _isLeaf, isAttribute) => isAttribute !== true
+});
+function isNode(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function children(node, tag) {
+  if (!isNode(node)) return [];
+  const v = node[`${TAG}${tag}`];
+  return Array.isArray(v) ? v : [];
+}
+function child(node, tag) {
+  return children(node, tag)[0];
+}
+function attr(node, name) {
+  if (!isNode(node)) return void 0;
+  const v = node[`${ATTR}${name}`];
+  return typeof v === "string" ? v : void 0;
+}
+function text(node) {
+  if (typeof node === "string") return node;
+  if (isNode(node) && typeof node[TEXT] === "string") return node[TEXT];
+  return "";
+}
+function parseXml(xml, what) {
+  let doc;
+  try {
+    doc = parser.parse(xml);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    throw new Error(`not ${what}: ${msg}`);
+  }
+  if (!isNode(doc)) throw new Error(`not ${what}`);
+  return doc;
+}
+function parseServiceDocument(xml) {
+  const doc = parseXml(xml, "an OData service document");
+  const service = child(doc, "service");
+  if (service === void 0) {
+    throw new Error("not an OData service document (no <service> root)");
+  }
+  const out = [];
+  for (const ws of children(service, "workspace")) {
+    for (const c of children(ws, "collection")) {
+      const key = attr(c, "href");
+      if (key === void 0) continue;
+      out.push({ key, title: text(child(c, "title")), updated: text(child(c, "updated")) });
+    }
+  }
+  return out;
+}
+function parseMetadata(xml) {
+  const doc = parseXml(xml, "an OData $metadata document");
+  const edmx = child(doc, "Edmx");
+  if (edmx === void 0) {
+    throw new Error("not an OData $metadata document (no <edmx:Edmx> root)");
+  }
+  const out = [];
+  for (const ds of children(edmx, "DataServices")) {
+    for (const schema of children(ds, "Schema")) {
+      for (const et of children(schema, "EntityType")) {
+        const name = attr(et, "Name");
+        if (name === void 0) continue;
+        const columns = [];
+        for (const p of children(et, "Property")) {
+          const pname = attr(p, "Name");
+          if (pname === void 0) continue;
+          columns.push({ name: pname, type: attr(p, "Type") ?? "" });
+        }
+        out.push({ name, columns });
+      }
+    }
+  }
+  return out;
+}
+function parseFeed(xml) {
+  const tooLarge = /^\s*\[\{'error': 'too_large_data'(?:, 'rows_count': (\d+))?(?:, 'cols_count': (\d+))?/.exec(
+    xml
+  );
+  if (tooLarge !== null) {
+    const dims = tooLarge[1] !== void 0 && tooLarge[2] !== void 0 ? ` (${tooLarge[1]} rows \xD7 ${tooLarge[2]} columns)` : "";
+    throw new Error(
+      `the server refused the page as too large${dims}: lower --page-size or narrow --select`
+    );
+  }
+  if (!/<\/(?:[\w.-]+:)?feed>\s*$/.test(xml)) {
+    throw new Error("not an OData Atom feed: the body ends before </feed> (truncated response)");
+  }
+  const doc = parseXml(xml, "an OData Atom feed");
+  const feed = child(doc, "feed");
+  if (feed === void 0) {
+    throw new Error("not an OData Atom feed (no <feed> root)");
+  }
+  const out = [];
+  for (const e of children(feed, "entry")) {
+    const row = /* @__PURE__ */ new Map();
+    const props = child(child(e, "content"), "properties");
+    if (isNode(props)) {
+      for (const [k, v] of Object.entries(props)) {
+        if (!k.startsWith(TAG) || !Array.isArray(v)) continue;
+        const value = v[0];
+        row.set(k.slice(TAG.length), attr(value, "null") === "true" ? null : text(value));
+      }
+    }
+    out.push(row);
+  }
+  return out;
+}
+function parseODataTitle(title) {
+  const m = /^(.*)_(\d+)( \(Full\)\(Cleared\)| \(Cleared\)| \(Full\))?$/s.exec(title);
+  if (m === null) return null;
+  const variant = VARIANT_BY_SUFFIX.get(m[3] ?? "");
+  if (variant === void 0) return null;
+  return { baseTitle: m[1] ?? "", tableId: Number(m[2]), variant };
+}
+function findByTableId(items, titleOf, tableId, variant) {
+  const hits = items.filter((it) => {
+    const p = parseODataTitle(titleOf(it));
+    return p !== null && p.tableId === tableId && p.variant === variant;
+  });
+  if (hits.length > 1) {
+    const titles = hits.map((h) => `"${titleOf(h)}"`).join(", ");
+    throw new Error(`table ${tableId} (${variant}) is ambiguous over OData: ${titles}`);
+  }
+  return hits[0];
+}
+function tablePagePath(key, q) {
+  let path11 = `/OData.svc/${key}?$top=${q.top}&$skip=${q.skip}`;
+  if (q.select !== void 0 && q.select.length > 0) {
+    path11 += `&$select=${encodeURIComponent(q.select.join(","))}`;
+  }
+  if (q.filter !== void 0 && q.filter !== "") {
+    path11 += `&$filter=${encodeURIComponent(q.filter)}`;
+  }
+  return path11;
+}
+async function getXml(client, path11, accept, options) {
+  const res = await client.do("GET", path11, void 0, {
+    ...options,
+    headers: { ...options?.headers, Accept: accept }
+  });
+  const body = await res.text();
+  if (res.status < 200 || res.status >= 300) {
+    throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncate4(body, 200)}`);
+  }
+  return body;
+}
+async function getServiceDocument(client, options) {
+  return parseServiceDocument(await getXml(client, "/OData.svc", "application/xml", options));
+}
+async function getMetadata(client, options) {
+  return parseMetadata(await getXml(client, "/OData.svc/$metadata", "application/xml", options));
+}
+async function getTablePage(client, key, q, options) {
+  return parseFeed(await getXml(client, tablePagePath(key, q), "application/atom+xml", options));
+}
+
+// src/commands/odata.ts
+var ODATA_DEFAULT_PAGE_SIZE = 3e4;
+var ODATA_REQUEST_TIMEOUT_MS = 12e4;
+function notVisible(tableId, variant, where) {
+  return new Error(
+    `table ${tableId} (${variant}) is not visible to this user over OData (not in ${where})`
+  );
+}
+async function runODataTables(cfg) {
+  const collections = await getServiceDocument(cfg.client, { signal: cfg.signal });
+  const byId = /* @__PURE__ */ new Map();
+  for (const c of collections) {
+    const parts = parseODataTitle(c.title);
+    if (parts === null) continue;
+    let info = byId.get(parts.tableId);
+    if (info === void 0) {
+      info = { id: parts.tableId, title: parts.baseTitle, variants: [] };
+      byId.set(parts.tableId, info);
+    }
+    info.variants.push({ variant: parts.variant, title: c.title, key: c.key, updated: c.updated });
+  }
+  const order = ODATA_VARIANTS;
+  const tables = [...byId.values()].sort((a, b) => a.id - b.id);
+  for (const t of tables) {
+    t.variants.sort((a, b) => order.indexOf(a.variant) - order.indexOf(b.variant));
+  }
+  if (cfg.asJson) {
+    writeJSONIndented(cfg.out, tables);
+    return;
+  }
+  if (tables.length === 0) {
+    cfg.out.write("(no tables visible over OData)\n");
+    return;
+  }
+  const rows = [["ID", "TITLE", "VARIANTS", "UPDATED"]];
+  for (const t of tables) {
+    const updated = (t.variants.find((v) => v.variant === "latest") ?? t.variants[0])?.updated;
+    rows.push([String(t.id), t.title, t.variants.map((v) => v.variant).join(","), updated ?? ""]);
+  }
+  for (const line of formatTable(rows, columnWidths(rows))) cfg.out.write(`${line}
+`);
+}
+async function runODataMetadata(cfg) {
+  const types = await getMetadata(cfg.client, { signal: cfg.signal });
+  const entity = findByTableId(types, (t) => t.name, cfg.tableId, cfg.variant);
+  if (entity === void 0) throw notVisible(cfg.tableId, cfg.variant, "$metadata");
+  if (cfg.asJson) {
+    writeJSONIndented(cfg.out, entity);
+    return;
+  }
+  cfg.out.write(`${entity.name}
+`);
+  if (entity.columns.length === 0) {
+    cfg.out.write("(no columns)\n");
+    return;
+  }
+  cfg.out.write("\n");
+  const rows = [["COLUMN", "TYPE"], ...entity.columns.map((c) => [c.name, c.type])];
+  for (const line of formatTable(rows, columnWidths(rows))) cfg.out.write(`${line}
+`);
+}
+async function runODataData(cfg) {
+  const req = { signal: cfg.signal };
+  const budget = () => cfg.extendTimeout?.(cfg.requestTimeoutMs ?? ODATA_REQUEST_TIMEOUT_MS);
+  let key = cfg.key;
+  if (key === void 0) {
+    budget();
+    const collections = await getServiceDocument(cfg.client, req);
+    const hit = findByTableId(collections, (c) => c.title, cfg.tableId, cfg.variant);
+    if (hit === void 0) throw notVisible(cfg.tableId, cfg.variant, "the service document");
+    key = hit.key;
+  }
+  budget();
+  const types = await getMetadata(cfg.client, req);
+  const entity = findByTableId(types, (t) => t.name, cfg.tableId, cfg.variant);
+  if (entity === void 0) throw notVisible(cfg.tableId, cfg.variant, "$metadata");
+  const columns = selectColumns(entity.columns, cfg.select, cfg.tableId, cfg.variant);
+  const names = columns.map((c) => c.name);
+  const pause = () => cfg.pauseTimeout?.();
+  const sink = createSink(cfg.format, names, cfg.out, cfg.signal, pause, budget);
+  await sink.start();
+  let skip = 0;
+  let remaining = cfg.limit;
+  for (; ; ) {
+    const top = remaining === null ? cfg.pageSize : Math.min(cfg.pageSize, remaining);
+    budget();
+    const entries = await getTablePage(
+      cfg.client,
+      key,
+      { top, skip, select: cfg.select === void 0 ? void 0 : names, filter: cfg.filter },
+      req
+    );
+    const page = entries.slice(0, top);
+    await sink.page(page.map((e) => names.map((n) => e.get(n) ?? null)));
+    skip += page.length;
+    if (remaining !== null) remaining -= page.length;
+    if (page.length < top || remaining === 0) break;
+  }
+  await sink.end();
+}
+function selectColumns(all, select, tableId, variant) {
+  if (select === void 0) return [...all];
+  const known = new Set(all.map((c) => c.name));
+  for (const s of select) {
+    if (!known.has(s)) {
+      throw new Error(
+        `--select: unknown column "${s}" for table ${tableId} (${variant}); names are the OData-sanitized ones from \`dr odata metadata ${tableId}\``
+      );
+    }
+  }
+  const wanted = new Set(select);
+  return all.filter((c) => wanted.has(c.name));
+}
+async function emitTo(out, s, signal, pause, rearm) {
+  if (!out.write(s)) {
+    pause();
+    await once(out, "drain", { signal });
+    rearm();
+  }
+}
+function createSink(format, names, out, signal, pause = () => {
+}, rearm = () => {
+}) {
+  const emit = (s) => emitTo(out, s, signal, pause, rearm);
+  if (format === "csv") {
+    return {
+      start: () => emit(`${formatCsvRow(names)}
+`),
+      page: async (rows) => {
+        for (const r of rows) await emit(`${formatCsvRow(r.map((c) => c ?? ""))}
+`);
+      },
+      end: async () => {
+      }
+    };
+  }
+  if (format === "json") {
+    let count = 0;
+    return {
+      start: () => emit("["),
+      page: async (rows) => {
+        for (const r of rows) {
+          const obj = Object.fromEntries(names.map((n, i) => [n, r[i] ?? null]));
+          await emit(`${count === 0 ? "\n" : ",\n"}${JSON.stringify(obj)}`);
+          count++;
+        }
+      },
+      end: () => emit(count === 0 ? "]\n" : "\n]\n")
+    };
+  }
+  let widths = null;
+  return {
+    start: async () => {
+    },
+    page: async (rows) => {
+      const cells = rows.map((r) => r.map((c) => c ?? ""));
+      if (widths === null) {
+        if (cells.length === 0) return;
+        widths = columnWidths([names, ...cells]);
+        await emit(`${formatTable([names], widths)[0]}
+`);
+      }
+      for (const line of formatTable(cells, widths)) await emit(`${line}
+`);
+    },
+    end: async () => {
+      if (widths === null) await emit("(no rows)\n");
+    }
+  };
+}
+function columnWidths(rows) {
+  const widths = [];
+  for (const r of rows) {
+    r.forEach((cell, i) => {
+      if ((widths[i] ?? 0) < cell.length) widths[i] = cell.length;
+    });
+  }
+  return widths;
+}
+function formatTable(rows, widths) {
+  return rows.map(
+    (r) => r.map((cell, i) => i === r.length - 1 ? cell : cell.padEnd((widths[i] ?? 0) + 2)).join("")
+  );
+}
+function parseVariant(raw) {
+  if (raw === void 0) return "latest";
+  const hit = ODATA_VARIANTS.find((v) => v === raw);
+  if (hit === void 0) {
+    throw new Error(
+      `invalid --variant "${raw}" (expected one of: ${ODATA_VARIANTS.join(", ")})`
+    );
+  }
+  return hit;
+}
+var KEY_PATTERN = /^[A-Za-z0-9+/_-]+={0,2}$/;
+function resolveDataOptions(tableIdStr, f) {
+  const tableId = parsePositiveIntArg(tableIdStr, "<table-id>");
+  const variant = parseVariant(f.variant);
+  if (f.top !== void 0 && f.all === true) {
+    throw new Error("--top and --all cannot be combined");
+  }
+  if (f.csv === true && f.json === true) {
+    throw new Error("--csv and --json cannot be combined");
+  }
+  const pageSize = f.pageSize === void 0 ? ODATA_DEFAULT_PAGE_SIZE : parsePositiveIntArg(f.pageSize, "--page-size");
+  let limit = pageSize;
+  if (f.all === true) limit = null;
+  else if (f.top !== void 0) limit = parsePositiveIntArg(f.top, "--top");
+  if (f.key !== void 0 && !KEY_PATTERN.test(f.key)) {
+    throw new Error(
+      `invalid --key "${f.key}" (expected a base64 key, see \`dr odata tables --json\`)`
+    );
+  }
+  let select;
+  if (f.select !== void 0) {
+    select = f.select.split(",").map((s) => s.trim()).filter((s) => s !== "");
+    if (select.length === 0) throw new Error("--select must name at least one column");
+  }
+  if (f.filter !== void 0 && f.filter === "") {
+    throw new Error("--filter must not be empty");
+  }
+  const requestTimeoutMs = parsePositiveSecondsFlag(
+    f.timeout,
+    "--timeout",
+    ODATA_REQUEST_TIMEOUT_MS
+  );
+  if (requestTimeoutMs > BATCH_TIMEOUT_MAX_SECONDS * 1e3) {
+    throw new Error(`--timeout must be at most ${BATCH_TIMEOUT_MAX_SECONDS} seconds`);
+  }
+  return {
+    tableId,
+    variant,
+    key: f.key,
+    limit,
+    pageSize,
+    select,
+    filter: f.filter,
+    format: f.csv === true ? "csv" : f.json === true ? "json" : "table",
+    requestTimeoutMs
+  };
+}
+var VARIANT_HELP = "latest (default), cleared, full (all versions) or full-cleared \u2014 the four collections OData clients see";
+function registerODataCommand(root) {
+  const od = root.command("odata").description(
+    "Read tables over OData V1 exactly as Excel / Power BI / SQLConnector receive them (read-only)"
+  );
+  const tablesCmd = od.command("tables").description("List the tables this user can read over OData, with their variants").option("--json", "Output JSON, including each variant key", false).action(async (opts) => {
+    const setup = await setupCall(opts.server, opts.account);
+    try {
+      await runODataTables({
+        client: setup.client,
+        asJson: opts.json === true,
+        signal: setup.signal,
+        out: process.stdout
+      });
+    } finally {
+      setup.cleanup();
+    }
+  });
+  addServerFlag(tablesCmd);
+  addAccountFlag(tablesCmd);
+  const metadataCmd = od.command("metadata").description("Columns and EDM types of a table, in $metadata order").argument("<table-id>", "table (template) id").option("--variant <variant>", VARIANT_HELP).option("--json", "Output JSON", false).action(async (idStr, opts) => {
+    const tableId = parsePositiveIntArg(idStr, "<table-id>");
+    const variant = parseVariant(opts.variant);
+    const setup = await setupCall(opts.server, opts.account);
+    try {
+      await runODataMetadata({
+        client: setup.client,
+        tableId,
+        variant,
+        asJson: opts.json === true,
+        signal: setup.signal,
+        out: process.stdout
+      });
+    } finally {
+      setup.cleanup();
+    }
+  });
+  addServerFlag(metadataCmd);
+  addAccountFlag(metadataCmd);
+  const dataCmd = od.command("data").description(
+    "Read table rows over OData. Without --top/--all: one page of --page-size rows. --top N: at most N rows. --all: page until the table is exhausted. Rows stream as each page arrives."
+  ).argument("<table-id>", "table (template) id").option("--variant <variant>", VARIANT_HELP).option(
+    "--key <base64>",
+    "Use this OData key verbatim instead of the one the service document lists"
+  ).option("--top <n>", "Return at most N rows").option("--all", "Page until the table is exhausted", false).option("--page-size <n>", `Rows per request ($top) (default ${ODATA_DEFAULT_PAGE_SIZE})`).option("--select <columns>", "Comma-separated OData column names (see `dr odata metadata`)").option("--filter <expr>", "OData $filter expression, passed through to the server").option("--csv", "Output CSV", false).option("--json", "Output a JSON array, streamed", false).option(
+    "--timeout <seconds>",
+    `Budget for each request in seconds (default ${ODATA_REQUEST_TIMEOUT_MS / 1e3})`
+  ).action(async (idStr, opts) => {
+    const r = resolveDataOptions(idStr, opts);
+    const setup = await setupCall(opts.server, opts.account, { timeoutMs: r.requestTimeoutMs });
+    try {
+      await runODataData({
+        client: setup.client,
+        tableId: r.tableId,
+        variant: r.variant,
+        key: r.key,
+        limit: r.limit,
+        pageSize: r.pageSize,
+        select: r.select,
+        filter: r.filter,
+        format: r.format,
+        signal: setup.signal,
+        out: process.stdout,
+        extendTimeout: setup.extendTimeout,
+        pauseTimeout: setup.pauseTimeout,
+        requestTimeoutMs: r.requestTimeoutMs
+      });
+    } finally {
+      setup.cleanup();
+    }
+  });
+  addServerFlag(dataCmd);
+  addAccountFlag(dataCmd);
+}
+
 // src/api/storyboards.ts
 async function list13(client, options) {
   const out = await client.getJSON("/api/storytelling/", options);
@@ -16373,7 +16882,7 @@ var LUT_SAVE_POLL_TIMEOUT_MS = 3e5;
 async function saveMappings(client, documentId, body, options = {}) {
   const interval = options.pollIntervalMs ?? LUT_SAVE_POLL_INTERVAL_MS;
   const timeout = options.timeoutMs ?? LUT_SAVE_POLL_TIMEOUT_MS;
-  const sleep3 = options.sleep ?? defaultPollSleep;
+  const sleep4 = options.sleep ?? defaultPollSleep;
   const now = options.now ?? Date.now;
   const deadline = now() + timeout;
   const path11 = `/api/documents/${documentId}/web_update_lut`;
@@ -16395,7 +16904,7 @@ async function saveMappings(client, documentId, body, options = {}) {
         `lut save-mappings: the server is still writing after ${Math.round(timeout / 1e3)}s (task ${cacheKey}). The write is still running server-side \u2014 re-run the same command to rejoin it, or raise --timeout.`
       );
     }
-    await sleep3(interval, options.signal);
+    await sleep4(interval, options.signal);
     const tick = await postOnce(client, pollPath, payload, options.signal);
     if (tick.status === 200) {
       return toResult(tick.text);
@@ -16404,22 +16913,22 @@ async function saveMappings(client, documentId, body, options = {}) {
 }
 async function postOnce(client, path11, payload, signal) {
   const res = await client.do("POST", path11, payload, { signal });
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 200 || res.status === 409) {
-    return { status: res.status, text };
+    return { status: res.status, text: text2 };
   }
-  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncateBody(text)}`);
+  throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncateBody(text2)}`);
 }
-function extractCacheKey(text) {
+function extractCacheKey(text2) {
   try {
-    const parsed2 = JSON.parse(text);
+    const parsed2 = JSON.parse(text2);
     return typeof parsed2.cache_key === "string" ? parsed2.cache_key : "";
   } catch {
     return "";
   }
 }
-function toResult(text) {
-  let message = text.trim();
+function toResult(text2) {
+  let message = text2.trim();
   try {
     const parsed2 = JSON.parse(message);
     if (typeof parsed2 === "string") message = parsed2;
@@ -16454,8 +16963,8 @@ async function getLutFile(client, documentId, options) {
   const path11 = `/api/documents/${documentId}/lut-file`;
   const res = await client.do("GET", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const ab = await res.arrayBuffer();
@@ -16493,8 +17002,8 @@ async function downloadDebugZip(client, docVersionId, type, reqOptions) {
   const path11 = `/api/documents/download_debug_zip_file/${docVersionId}?type=${type}`;
   const res = await client.do("GET", path11, void 0, reqOptions);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const ab = await res.arrayBuffer();
@@ -16620,19 +17129,19 @@ async function getDocumentJobStatusOnce(client, basePath, requestId, reqOptions)
     await res.text();
     return { kind: "notFound" };
   }
-  const text = await res.text();
-  throw new Error(`document-job status: unexpected HTTP ${res.status}: ${text.trim()}`);
+  const text2 = await res.text();
+  throw new Error(`document-job status: unexpected HTTP ${res.status}: ${text2.trim()}`);
 }
 async function readAutoCalcError(res) {
-  const text = await res.text();
+  const text2 = await res.text();
   try {
-    const parsed2 = JSON.parse(text);
+    const parsed2 = JSON.parse(text2);
     if (typeof parsed2.error === "string" && parsed2.error !== "") {
       return parsed2.error;
     }
   } catch {
   }
-  return text.trim();
+  return text2.trim();
 }
 var defaultSleep3 = (ms, signal) => new Promise((resolve3, reject) => {
   if (signal?.aborted) {
@@ -16693,7 +17202,7 @@ async function exportDocument(client, id, destinationOrgIds, override, reqOption
 async function pollDocumentJob(client, basePath, label, requestId, options = {}) {
   const interval = options.pollIntervalMs ?? AUTO_CALC_POLL_INTERVAL_MS;
   const timeout = options.timeoutMs ?? AUTO_CALC_POLL_TIMEOUT_MS;
-  const sleep3 = options.sleep ?? defaultSleep3;
+  const sleep4 = options.sleep ?? defaultSleep3;
   const now = options.now ?? Date.now;
   const deadline = now() + timeout;
   for (; ; ) {
@@ -16721,7 +17230,7 @@ async function pollDocumentJob(client, basePath, label, requestId, options = {})
         `${label} polling timed out after ${timeout}ms (request ${requestId} still processing)`
       );
     }
-    await sleep3(interval, options.signal);
+    await sleep4(interval, options.signal);
   }
 }
 
@@ -16873,13 +17382,13 @@ async function getAutoCalculateSettings(client, docId, reqOptions) {
     await res.text().catch(() => "");
     return null;
   }
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`GET ${path11}: HTTP ${res.status}: ${text.slice(0, 200)}`);
+    throw new Error(`GET ${path11}: HTTP ${res.status}: ${text2.slice(0, 200)}`);
   }
-  if (text === "" || text === '""') return null;
+  if (text2 === "" || text2 === '""') return null;
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`GET ${path11}: decode: ${msg}`);
@@ -19946,7 +20455,7 @@ async function waitForReAggregation(cfg) {
   let interval = cfg.pollIntervalMs ?? REAGG_POLL_INTERVAL_MS;
   const maxInterval = cfg.maxPollIntervalMs ?? REAGG_POLL_MAX_INTERVAL_MS;
   const timeout = cfg.timeoutMs ?? REAGG_POLL_TIMEOUT_MS;
-  const sleep3 = cfg.sleep ?? defaultSleep4;
+  const sleep4 = cfg.sleep ?? defaultSleep4;
   const now = cfg.now ?? Date.now;
   const accepted = [...cfg.accepted];
   const observedProcessing = /* @__PURE__ */ new Set();
@@ -19981,7 +20490,7 @@ async function waitForReAggregation(cfg) {
       break;
     }
     try {
-      await sleep3(interval, cfg.signal);
+      await sleep4(interval, cfg.signal);
     } catch {
       aborted = true;
       break;
@@ -20970,15 +21479,15 @@ function parseSuppressionDimension(d, source, i) {
   return { name, mappings };
 }
 async function loadSuppression(path11) {
-  let text;
+  let text2;
   try {
-    text = await readFile2(path11, "utf8");
+    text2 = await readFile2(path11, "utf8");
   } catch (err) {
     throw new Error(`--suppression: cannot read ${path11} (${errText(err)})`);
   }
   let parsed2;
   try {
-    parsed2 = JSON.parse(text);
+    parsed2 = JSON.parse(text2);
   } catch (err) {
     throw new Error(`--suppression: ${path11} is not valid JSON (${errText(err)})`);
   }
@@ -22588,7 +23097,7 @@ async function waitForSuggestionRun(r, cfg, runId) {
   let interval = cfg.pollIntervalMs ?? SUGGESTIONS_POLL_INTERVAL_MS;
   const maxInterval = cfg.maxPollIntervalMs ?? SUGGESTIONS_POLL_MAX_INTERVAL_MS;
   const timeout = cfg.timeoutMs ?? SUGGESTIONS_POLL_TIMEOUT_MS;
-  const sleep3 = cfg.sleep ?? defaultSleep5;
+  const sleep4 = cfg.sleep ?? defaultSleep5;
   const now = cfg.now ?? Date.now;
   const errOut = cfg.errOut ?? process.stderr;
   const start = now();
@@ -22618,7 +23127,7 @@ async function waitForSuggestionRun(r, cfg, runId) {
       break;
     }
     try {
-      await sleep3(interval, cfg.signal);
+      await sleep4(interval, cfg.signal);
     } catch {
       aborted = true;
       break;
@@ -24778,18 +25287,18 @@ async function getTemplateFields(client, templateId, options) {
 }
 async function putDataOnce(client, path11, body, options) {
   const res = await client.do("PUT", path11, body, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 401 || res.status === 403) {
-    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text, 200)}`);
+    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text2, 200)}`);
   }
   if (res.status !== 200 && res.status !== 409 && (res.status < 200 || res.status >= 300)) {
-    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text, 200)}`);
+    throw new Error(`PUT ${path11}: HTTP ${res.status}: ${truncate5(text2, 200)}`);
   }
-  if (text === "" || text === '""') {
+  if (text2 === "" || text2 === '""') {
     return { status: res.status, parsed: null };
   }
   try {
-    return { status: res.status, parsed: JSON.parse(text) };
+    return { status: res.status, parsed: JSON.parse(text2) };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`PUT ${path11}: decode: ${msg}`);
@@ -24813,7 +25322,7 @@ var defaultSleep6 = (ms, signal) => new Promise((resolve3, reject) => {
 });
 async function putDataWithPolling(client, dashboardId, id, payload, options = {}) {
   const interval = options.pollIntervalMs ?? WIDGET_DATA_POLL_INTERVAL_MS;
-  const sleep3 = options.sleep ?? defaultSleep6;
+  const sleep4 = options.sleep ?? defaultSleep6;
   const path11 = `/api/dashboards/${dashboardId}/widgets/${id}/data`;
   const body = JSON.stringify(payload);
   const first = await putDataOnce(client, path11, body, options);
@@ -24830,7 +25339,7 @@ async function putDataWithPolling(client, dashboardId, id, payload, options = {}
   const pollPath = `${path11}?cache_key=${encodeURIComponent(cacheKey)}`;
   for (; ; ) {
     try {
-      await sleep3(interval, options.signal);
+      await sleep4(interval, options.signal);
     } catch (err) {
       const reason = err instanceof Error ? err.message : String(err);
       throw new Error(`widget data polling timed out: ${reason}`);
@@ -26696,8 +27205,8 @@ async function exportCsv(client, options) {
   const path11 = `${BASE}export-csv/`;
   const res = await client.do("GET", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   return res.text();
@@ -28485,13 +28994,13 @@ ${MARKER_END}`;
 }
 function renderInlineBlock(skills, managedBy, installRoot) {
   const sections = skills.map((s) => {
-    const text = Buffer.from(routerBytes(s)).toString("utf8");
-    const trailingNl = text.endsWith("\n") ? "" : "\n";
+    const text2 = Buffer.from(routerBytes(s)).toString("utf8");
+    const trailingNl = text2.endsWith("\n") ? "" : "\n";
     const refs = s.files.filter((f) => f.relPath !== ROUTER_FILE).map((f) => f.relPath);
     const pointer = refs.length === 0 ? "" : `<!-- dr-cli skill ${s.name}: ${refs.length} reference file(s) installed under ${installRoot}/${s.name}/ (${refs.join(", ")}) \u2014 read on demand -->
 `;
     return `<!-- dr-cli skill: ${s.name} -->
-${text}${trailingNl}${pointer}`;
+${text2}${trailingNl}${pointer}`;
   });
   return `${MARKER_BEGIN}
 <!-- dr-cli \u2014 Datarails CLI skills (auto-managed by ${managedBy}) -->
@@ -28591,6 +29100,9 @@ function registerSkillCommand(root) {
   });
 }
 
+// src/commands/datamappers.ts
+import { setTimeout as sleep3 } from "timers/promises";
+
 // src/api/datamappers.ts
 async function list20(client, tableId, options) {
   const out = await client.getJSON(`/api/templates/${tableId}/mappers`, options);
@@ -28608,6 +29120,14 @@ async function get14(client, tableId, id, options) {
   }
   return out;
 }
+async function getDetails2(client, id, options) {
+  const path11 = `/api/templates/mappers/${id}`;
+  const out = await client.getJSON(path11, options);
+  if (out === null) {
+    throw new Error(`GET ${path11}: empty response from datamapper details`);
+  }
+  return out;
+}
 async function create12(client, tableId, body, options) {
   const path11 = `/api/templates/${tableId}/mappers`;
   const out = await client.postJSON(path11, body, options);
@@ -29356,13 +29876,15 @@ async function runDatamappersUpdate(cfg) {
     body = decodedBody;
   }
   validateCalcFields(extractCalcFields(body));
+  const err = cfg.err ?? process.stderr;
+  const scanBaseline = rescanValue === "latest" && cfg.verifyScanDispatch !== void 0 ? await captureScanBaseline(cfg.client, cfg.id, cfg.signal, err) : void 0;
   let updated;
   try {
     updated = await update8(cfg.client, cfg.id, body, {
       signal: cfg.signal
     });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
+  } catch (err2) {
+    const msg = err2 instanceof Error ? err2.message : String(err2);
     if (/HTTP 500/.test(msg)) {
       const hint = "hint: the server logs an `ETLError: Custom Columns: The creation of '<field>' field has failed due to incorrect formula syntax.` line for this case but the response body is a bare 500 HTML page. Common causes the client-side guard cannot detect: (1) a [field] reference in a calc formula that does not resolve to any header `map_to`, calc-field `name`, or system field (`[FileBox_ID]`, `[System_Year]`, `[Posting Date]`, \u2026), (2) an unsupported function name (try copying the function spelling from another working calc field via `dr datamappers get`), (3) a string literal that's a plain-English placeholder (e.g. `\"Customer or Client name\"`) which parses but the ETL refuses. Iterate on calc-field formulas one at a time. If every formula looks correct and PUT still 500s, fall back to the workaround: `dr datamappers create from-file <table> --file <new.json>` then `dr datamappers delete <old_id> --table <table>` (note: this orphans references \u2014 LUTs/dashboards/functions pointing at the old mapper id break).";
       const responseBody = extractResponseBodyFromError(msg);
@@ -29388,13 +29910,106 @@ Full request + response captured to: ${logPath}
 
 ${hint}${logSuffix}`);
     }
-    throw err;
+    throw err2;
   }
   if (cfg.asJson) {
     writeJSONIndented(cfg.out, updated);
-    return;
+  } else {
+    renderMappersTable(cfg.out, [updated]);
   }
-  renderMappersTable(cfg.out, [updated]);
+  if (scanBaseline !== void 0) {
+    const opts = cfg.verifyScanDispatch ?? {};
+    const started2 = await waitForNewScan(cfg.client, scanBaseline, cfg.signal, opts);
+    if (!started2) {
+      const docIds = await mappedDocumentIds(
+        cfg.client,
+        scanBaseline.templateId,
+        cfg.id,
+        cfg.signal
+      );
+      err.write(
+        formatNoScanWarning({
+          mapperId: cfg.id,
+          templateId: scanBaseline.templateId,
+          timeoutMs: opts.timeoutMs ?? DEFAULT_SCAN_DISPATCH_TIMEOUT_MS,
+          docIds
+        })
+      );
+    }
+  }
+}
+var DEFAULT_SCAN_DISPATCH_TIMEOUT_MS = 3e4;
+var DEFAULT_SCAN_DISPATCH_POLL_MS = 2e3;
+function scanFingerprint(report) {
+  let maxScanId = 0;
+  for (const doc of report.documents ?? []) {
+    for (const v of doc.versions ?? []) {
+      if (typeof v.scan_id === "number" && v.scan_id > maxScanId) maxScanId = v.scan_id;
+    }
+  }
+  return `${report.scans_status?.last_updated ?? ""}|${maxScanId}`;
+}
+async function captureScanBaseline(client, mapperId, signal, err) {
+  try {
+    const details = await getDetails2(client, mapperId, { signal });
+    const templateId = details.template.id;
+    const report = await getStatus(client, templateId, { signal });
+    return { templateId, fingerprint: scanFingerprint(report) };
+  } catch (e) {
+    if (signal.aborted) throw e;
+    err.write(
+      "note: could not read the scan status before the update, so dr cannot confirm a rescan starts. Check with `dr scans status <template_id>` afterwards.\n"
+    );
+    return void 0;
+  }
+}
+async function waitForNewScan(client, baseline, signal, opts) {
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_SCAN_DISPATCH_TIMEOUT_MS;
+  const pollIntervalMs = opts.pollIntervalMs ?? DEFAULT_SCAN_DISPATCH_POLL_MS;
+  const deadline = Date.now() + timeoutMs;
+  for (; ; ) {
+    try {
+      const report = await getStatus(client, baseline.templateId, { signal });
+      if (scanFingerprint(report) !== baseline.fingerprint) return true;
+    } catch (e) {
+      if (signal.aborted) throw e;
+    }
+    const remaining = deadline - Date.now();
+    if (remaining <= 0) return false;
+    await sleep3(Math.min(pollIntervalMs, remaining), void 0, { signal });
+  }
+}
+async function mappedDocumentIds(client, templateId, mapperId, signal) {
+  try {
+    const mapper = await get14(client, templateId, mapperId, { signal });
+    return Array.isArray(mapper.mapped_documents_ids) ? mapper.mapped_documents_ids : void 0;
+  } catch (e) {
+    if (signal.aborted) throw e;
+    return void 0;
+  }
+}
+function formatNoScanWarning(p) {
+  const secs = Math.round(p.timeoutMs / 1e3);
+  const lines = [
+    `warning: mapper ${p.mapperId} was saved, but no new scan showed up on template ${p.templateId} within ${secs}s.`,
+    '  Either the scan is still queued, or this server predates the DR-54200 fix and ignored rescan="latest", so existing data still has the old config.',
+    `  Check first: dr scans status ${p.templateId}`
+  ];
+  if (p.docIds !== void 0 && p.docIds.length === 0) {
+    lines.push("  The mapper has no bound documents, so there is nothing to scan.");
+  } else {
+    const docFlags = p.docIds !== void 0 ? p.docIds.map((d) => `--doc ${d}`).join(" ") : "--doc <doc_id> [--doc <doc_id> ...]";
+    lines.push(
+      "  If no new scan appears there, re-bind the mapper to its current documents with a rescan:"
+    );
+    if (p.docIds === void 0) {
+      lines.push(
+        `    dr datamappers get ${p.mapperId} --table ${p.templateId} --json   # read mapped_documents_ids`
+      );
+    }
+    lines.push(`    dr datamappers bind ${p.mapperId} ${docFlags} --rescan latest`);
+  }
+  return lines.join("\n") + "\n";
 }
 async function buildConveniencePayload(client, tableId, name, versionId, sheet, flags, signal) {
   const fieldTypes = parseFieldOverrides(flags.fieldOverrides);
@@ -29709,7 +30324,7 @@ function renderMappersTable(out, mappers) {
     }
   ];
   for (const m of mappers) {
-    const ordinal = m.ordinal === null ? "-" : String(m.ordinal);
+    const ordinal = m.ordinal == null ? "-" : String(m.ordinal);
     rows.push({
       cells: [
         String(m.id),
@@ -30007,7 +30622,7 @@ function registerDatamappersCommand(root) {
   addServerFlag(fromFileCmd);
   addAccountFlag(fromFileCmd);
   const updateCmd = dm.command("update").description(
-    'Update a datamapper (payload-file only \u2014 server accepts config+sheet_name+rescan). `--rescan latest` (the default) mirrors the UI "Publish and scan": it re-extracts only the LATEST document version onto the live template. For a full historical rescan (every calculated field re-executed against every document version ever uploaded), use `dr rescan table <template_id>` instead \u2014 that is far more expensive and higher-blast.'
+    "Update a datamapper in place (payload-file only \u2014 server accepts config+sheet_name+rescan). `--rescan latest` (the default) re-extracts the LATEST version of each document bound to the mapper. Servers without the DR-54200 fix save the config and start no scan, so after the update dr watches the template for a new scan and, when none shows up, prints how to check `dr scans status` and the `dr datamappers bind` fallback. For a full historical rescan (every calculated field re-executed against every document version ever uploaded), use `dr rescan table <template_id>` instead \u2014 that is far more expensive and higher-blast."
   ).argument("<mapper_id>", "mapper id (positive integer)").option("--payload-file <path>", "Path to a JSON file with the PUT body (required)", "").option(
     "--field <NAME:TYPE>",
     'Set a column type via fields_to_change (Text|Float|Date|Integer). Repeatable. Mirrors the UI "Publish and scan" so a calc column referencing a LUT-injected column materialises instead of 500ing on inferred types. Note: the server blocks a type change (HTTP 400) when the template has more than one mapper.',
@@ -30030,7 +30645,8 @@ function registerDatamappersCommand(root) {
           serverFlag: opts.server ?? "",
           asJson: opts.json === true,
           signal: setup.signal,
-          out: process.stdout
+          out: process.stdout,
+          verifyScanDispatch: {}
         });
       } finally {
         setup.cleanup();
@@ -30554,14 +31170,14 @@ async function runSplitCreate(cfg) {
         writeJSONIndented(cfg.out, result);
         return;
       }
-      const children = Array.isArray(result.split_documents) ? result.split_documents : [];
+      const children2 = Array.isArray(result.split_documents) ? result.split_documents : [];
       const parentName = result.document !== null && typeof result.document?.name === "string" ? result.document.name : "-";
       cfg.out.write(
-        `Split created (id=${result.id}): ${children.length} child file(s) under parent ${JSON.stringify(parentName)}.
+        `Split created (id=${result.id}): ${children2.length} child file(s) under parent ${JSON.stringify(parentName)}.
 `
       );
-      for (const child of children) {
-        const name = typeof child.name === "string" ? child.name : "(unnamed)";
+      for (const child2 of children2) {
+        const name = typeof child2.name === "string" ? child2.name : "(unnamed)";
         cfg.out.write(`  - ${name}
 `);
       }
@@ -30642,11 +31258,11 @@ function renderSplitsTable(out, splits) {
   const rows = [["ID", "PARENT", "CHILDREN", "INPUT_METHOD", "DATA_MODE"]];
   for (const s of splits) {
     const parent = s.document !== null && typeof s.document?.name === "string" ? s.document.name : "-";
-    const children = Array.isArray(s.split_documents) ? String(s.split_documents.length) : "0";
+    const children2 = Array.isArray(s.split_documents) ? String(s.split_documents.length) : "0";
     rows.push([
       String(s.id),
       parent,
-      children,
+      children2,
       s.input_method ?? "-",
       s.export_as_values === true ? "fixed" : "live"
     ]);
@@ -31719,21 +32335,21 @@ async function queryCheckStatus(client, queryIds, reqOptions) {
 }
 async function getErrorExplanation(client, path11, reqOptions) {
   const res = await client.do("GET", path11, void 0, reqOptions);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 200) {
     let parsed2;
     try {
-      parsed2 = JSON.parse(text);
+      parsed2 = JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`decode error-explanation: ${msg}`);
     }
-    return { status: 200, body: parsed2, rawText: text };
+    return { status: 200, body: parsed2, rawText: text2 };
   }
   if (res.status === 404) {
-    return { status: 404, body: null, rawText: text };
+    return { status: 404, body: null, rawText: text2 };
   }
-  throw new Error(`error explanation: unexpected status ${res.status}: ${text.trim()}`);
+  throw new Error(`error explanation: unexpected status ${res.status}: ${text2.trim()}`);
 }
 async function resync(client, id, reqOptions) {
   const out = await client.postJSON(
@@ -31751,8 +32367,8 @@ async function testConnection(client, rawBody, reqOptions) {
     rawBody,
     reqOptions
   );
-  const text = await res.text();
-  return { status: res.status, rawText: text };
+  const text2 = await res.text();
+  return { status: res.status, rawText: text2 };
 }
 async function create15(client, body, reqOptions) {
   const path11 = "/api/v3/data_integrations/";
@@ -31772,8 +32388,8 @@ async function update9(client, id, body, reqOptions) {
 }
 async function deleteById13(client, id, reqOptions) {
   const res = await client.do("DELETE", `/api/v3/data_integrations/${id}/`, void 0, reqOptions);
-  const text = await res.text();
-  return { status: res.status, rawText: text };
+  const text2 = await res.text();
+  return { status: res.status, rawText: text2 };
 }
 async function revoke(client, id, reqOptions) {
   const res = await client.do(
@@ -31852,14 +32468,14 @@ async function itUpdate(client, id, body, reqOptions) {
 }
 async function itDelete(client, id, reqOptions) {
   const res = await client.do("DELETE", `/api/it/integrations/${id}`, void 0, reqOptions);
-  const text = await res.text();
-  return { status: res.status, rawText: text };
+  const text2 = await res.text();
+  return { status: res.status, rawText: text2 };
 }
 async function itResync(client, id, reqOptions) {
   const res = await client.do("GET", `/api/it/integrations/${id}/resync`, void 0, reqOptions);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status < 200 || res.status >= 300) {
-    throw new Error(`resync: HTTP ${res.status}: ${text.trim()}`);
+    throw new Error(`resync: HTTP ${res.status}: ${text2.trim()}`);
   }
 }
 
@@ -32196,7 +32812,7 @@ async function runIntegrationsSync(cfg) {
     throw new Error("integration id must be positive");
   }
   const interval = cfg.pollIntervalMs ?? INTEGRATIONS_SYNC_POLL_INTERVAL_MS;
-  const sleep3 = cfg.sleep ?? defaultSleep7;
+  const sleep4 = cfg.sleep ?? defaultSleep7;
   const resp = await resync(cfg.client, cfg.id, {
     signal: cfg.signal
   });
@@ -32245,7 +32861,7 @@ async function runIntegrationsSync(cfg) {
         return;
       }
       try {
-        await sleep3(interval, inner.signal);
+        await sleep4(interval, inner.signal);
       } catch {
         cfg.out.write(
           `Timed out waiting for sync to finish \u2014 last status was ${orDash(lastStatus)}
@@ -37019,7 +37635,7 @@ async function runFileboxSetVersionFileStatus(cfg) {
     throw new Error("version id must be positive");
   }
   const err = cfg.err ?? process.stderr;
-  const sleep3 = cfg.sleep ?? defaultCycleTagSleep;
+  const sleep4 = cfg.sleep ?? defaultCycleTagSleep;
   const settleMs = cfg.tagSettleDelayMs ?? CYCLE_TAG_SETTLE_DELAY_MS;
   const details = await getDetails(cfg.client, cfg.docId, { signal: cfg.signal });
   const tag = (details.tags_config ?? []).find(isFileStatusTag);
@@ -37112,7 +37728,7 @@ async function runFileboxSetVersionFileStatus(cfg) {
     }
   };
   const readBack = async () => {
-    await sleep3(settleMs, cfg.signal);
+    await sleep4(settleMs, cfg.signal);
     return readVersionForConfirm(cfg.client, cfg.versionId, cfg.docId, cfg.signal);
   };
   await write();
@@ -40846,8 +41462,8 @@ async function getEvidenceFile(client, params, options) {
   const path11 = params.accountId !== void 0 && params.accountId !== "" ? `/api/reconciliation/processes/${params.processId}/account/${params.accountId}/evidences/${params.evidenceId}/file` : `/api/reconciliation/processes/${params.processId}/evidences/${params.evidenceId}/file`;
   const res = await client.do("GET", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const ab = await res.arrayBuffer();
@@ -40905,19 +41521,19 @@ async function deleteFileboxConnection(client, connectionId, options) {
 async function getFileboxSyncProgress(client, params, options) {
   const path11 = `/api/reconciliation/filebox/connections/${params.connectionId}/sync/progress`;
   const res = await client.do("GET", path11, void 0, options);
-  const text = await res.text();
+  const text2 = await res.text();
   if (res.status === 200 || res.status === 409) {
-    if (text === "" || text === '""') {
+    if (text2 === "" || text2 === '""') {
       return { status: "", remaining_files: 0, message: "" };
     }
     try {
-      return JSON.parse(text);
+      return JSON.parse(text2);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`GET ${path11}: decode: ${msg}`);
     }
   }
-  const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+  const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
   throw new Error(`GET ${path11}: HTTP ${res.status}: ${truncated}`);
 }
 async function getFileboxUnlinkedCount(client, params, options) {
@@ -41074,8 +41690,8 @@ async function readAssigneeCsv(path11) {
   }
   return parseAssigneeCsvText(raw);
 }
-function parseAssigneeCsvText(text) {
-  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+function parseAssigneeCsvText(text2) {
+  const withoutBom = text2.charCodeAt(0) === 65279 ? text2.slice(1) : text2;
   const rows = parseCsvRows(withoutBom);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
@@ -44451,8 +45067,8 @@ async function deleteWithBody(client, path11, body, options) {
   const encoded = JSON.stringify(body);
   const res = await client.do("DELETE", path11, encoded, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   await res.text();
@@ -44900,16 +45516,16 @@ async function runProbe(client, options) {
     return;
   }
   if (res.status === 403 || res.status === 404) {
-    const text2 = await res.text();
-    const lower = text2.toLowerCase();
+    const text3 = await res.text();
+    const lower = text3.toLowerCase();
     if (V2_NOT_ENABLED_MARKERS.some((marker) => lower.includes(marker))) {
       throw new WorkflowV2NotEnabledError();
     }
-    const truncated2 = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
+    const truncated2 = text3.length > 200 ? `${text3.slice(0, 200)}\u2026` : text3;
     throw new Error(`GET ${WORKFLOW_V2_PROBE_PATH}: HTTP ${res.status}: ${truncated2}`);
   }
-  const text = await res.text();
-  const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+  const text2 = await res.text();
+  const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
   throw new Error(`GET ${WORKFLOW_V2_PROBE_PATH}: HTTP ${res.status}: ${truncated}`);
 }
 var MEC_NOT_ENABLED_MARKERS = [
@@ -44982,16 +45598,16 @@ async function runMecProbe(client, options) {
     return;
   }
   if (res.status === 403 || res.status === 404) {
-    const text2 = await res.text();
-    const lower = text2.toLowerCase();
+    const text3 = await res.text();
+    const lower = text3.toLowerCase();
     if (MEC_NOT_ENABLED_MARKERS.some((marker) => lower.includes(marker))) {
       throw new MecNotEnabledError();
     }
-    const truncated2 = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
+    const truncated2 = text3.length > 200 ? `${text3.slice(0, 200)}\u2026` : text3;
     throw new Error(`GET ${MEC_PROBE_PATH}: HTTP ${res.status}: ${truncated2}`);
   }
-  const text = await res.text();
-  const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+  const text2 = await res.text();
+  const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
   throw new Error(`GET ${MEC_PROBE_PATH}: HTTP ${res.status}: ${truncated}`);
 }
 var SHARE_DATA_FLAG = "--yes-share-data";
@@ -51539,8 +52155,8 @@ async function putTransactions(client, params, payload, options) {
 async function rescanTemplateRules(client, params, options) {
   const path11 = `/api/templates/${params.templateId}/rules/rescan`;
   const res = await client.do("POST", path11, void 0, options);
-  const text = await res.text();
-  let body = text;
+  const text2 = await res.text();
+  let body = text2;
   if (body.startsWith('"') && body.endsWith('"') && body.length >= 2) {
     try {
       body = JSON.parse(body);
@@ -51616,8 +52232,8 @@ async function exportRulesCsv(client, params, options) {
   const path11 = `/api/templates/${params.templateId}/rules/export_to_csv${qs}`;
   const res = await client.do("POST", path11, void 0, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`POST ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   const csv = await res.text();
@@ -51643,8 +52259,8 @@ async function deleteHiddenRules(client, params, customerTransactionIds, options
   const body = JSON.stringify(customerTransactionIds);
   const res = await client.do("DELETE", path11, body, options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncated}`);
   }
   await res.text();
@@ -51652,8 +52268,8 @@ async function deleteHiddenRules(client, params, customerTransactionIds, options
 async function triggerAiRules(client, options) {
   const path11 = `/api/templates/ai-rules`;
   const res = await client.do("POST", path11, void 0, options);
-  const text = await res.text();
-  let body = text;
+  const text2 = await res.text();
+  let body = text2;
   if (body.startsWith('"') && body.endsWith('"') && body.length >= 2) {
     try {
       body = JSON.parse(body);
@@ -51963,8 +52579,8 @@ async function readCsvImportPayload(path11) {
   }
   return parseCsvImportText(raw);
 }
-function parseCsvImportText(text) {
-  const rows = parseCsvRows(text);
+function parseCsvImportText(text2) {
+  const rows = parseCsvRows(text2);
   if (rows.length === 0) {
     throw new Error("--file: CSV is empty");
   }
@@ -52069,24 +52685,24 @@ function parseClause(clause, lineNo, clauseIdx) {
     args: values[0]
   };
 }
-function parseQuotedValueList(text, lineNo, clauseIdx) {
+function parseQuotedValueList(text2, lineNo, clauseIdx) {
   const out = [];
   let i = 0;
-  while (i < text.length) {
-    while (i < text.length && (text[i] === " " || text[i] === ",")) i++;
-    if (i >= text.length) break;
-    if (text[i] !== "'") {
+  while (i < text2.length) {
+    while (i < text2.length && (text2[i] === " " || text2[i] === ",")) i++;
+    if (i >= text2.length) break;
+    if (text2[i] !== "'") {
       throw new Error(
-        `--file: line ${lineNo} clause ${clauseIdx + 1}: expected single-quoted value at offset ${i} in "${truncate7(text, 80)}"`
+        `--file: line ${lineNo} clause ${clauseIdx + 1}: expected single-quoted value at offset ${i} in "${truncate7(text2, 80)}"`
       );
     }
     i++;
     let v = "";
     let closed = false;
-    while (i < text.length) {
-      const ch = text[i];
+    while (i < text2.length) {
+      const ch = text2[i];
       if (ch === "'") {
-        if (i + 1 < text.length && text[i + 1] === "'") {
+        if (i + 1 < text2.length && text2[i + 1] === "'") {
           v += "'";
           i += 2;
           continue;
@@ -52100,27 +52716,27 @@ function parseQuotedValueList(text, lineNo, clauseIdx) {
     }
     if (!closed) {
       throw new Error(
-        `--file: line ${lineNo} clause ${clauseIdx + 1}: unterminated single-quoted value in "${truncate7(text, 80)}"`
+        `--file: line ${lineNo} clause ${clauseIdx + 1}: unterminated single-quoted value in "${truncate7(text2, 80)}"`
       );
     }
     out.push(v);
   }
   if (out.length === 0) {
     throw new Error(
-      `--file: line ${lineNo} clause ${clauseIdx + 1}: no quoted values found in "${truncate7(text, 80)}"`
+      `--file: line ${lineNo} clause ${clauseIdx + 1}: no quoted values found in "${truncate7(text2, 80)}"`
     );
   }
   return out;
 }
-function splitOutsideQuotes(text, sep) {
+function splitOutsideQuotes(text2, sep) {
   const out = [];
   let buf = "";
   let i = 0;
   let inQuote = false;
-  while (i < text.length) {
-    const ch = text[i];
+  while (i < text2.length) {
+    const ch = text2[i];
     if (ch === "'") {
-      if (inQuote && i + 1 < text.length && text[i + 1] === "'") {
+      if (inQuote && i + 1 < text2.length && text2[i + 1] === "'") {
         buf += "''";
         i += 2;
         continue;
@@ -52130,7 +52746,7 @@ function splitOutsideQuotes(text, sep) {
       i++;
       continue;
     }
-    if (!inQuote && text.startsWith(sep, i)) {
+    if (!inQuote && text2.startsWith(sep, i)) {
       out.push(buf);
       buf = "";
       i += sep.length;
@@ -53633,35 +54249,35 @@ var REGISTRY = "https://datarails.jfrog.io/artifactory/api/npm/dr-cli-virtual";
 var PACKAGE = "@datarails-ai/dr-cli";
 function spawnInherit(command, args) {
   return new Promise((resolve3) => {
-    const child = spawn2(command, args, {
+    const child2 = spawn2(command, args, {
       stdio: "inherit",
       // Windows resolves `npm` as `npm.cmd`; `shell: true` lets cmd.exe do
       // the resolution without us having to special-case the suffix.
       shell: true
     });
-    child.on("close", (code) => {
+    child2.on("close", (code) => {
       resolve3(code ?? 1);
     });
-    child.on("error", () => {
+    child2.on("error", () => {
       resolve3(1);
     });
   });
 }
 function captureVersion() {
   return new Promise((resolve3) => {
-    const child = spawn2("dr", ["--version"], { shell: true });
+    const child2 = spawn2("dr", ["--version"], { shell: true });
     let out = "";
-    child.stdout.on("data", (chunk) => {
+    child2.stdout.on("data", (chunk) => {
       out += chunk.toString();
     });
-    child.on("close", (code) => {
+    child2.on("close", (code) => {
       if (code !== 0) {
         resolve3(null);
         return;
       }
       resolve3(out.trim());
     });
-    child.on("error", () => resolve3(null));
+    child2.on("error", () => resolve3(null));
   });
 }
 async function runUpdate() {
@@ -53733,8 +54349,8 @@ async function deleteEntity(client, body, options) {
   const path11 = "/bo/pre_kickoff/qbo_manage_companies/v2";
   const res = await client.do("DELETE", path11, JSON.stringify(body), options);
   if (res.status < 200 || res.status >= 300) {
-    const text = await res.text();
-    const truncated = text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
+    const text2 = await res.text();
+    const truncated = text2.length > 200 ? `${text2.slice(0, 200)}\u2026` : text2;
     throw new Error(`DELETE ${path11}: HTTP ${res.status}: ${truncated}`);
   }
 }
@@ -57864,7 +58480,7 @@ async function defaultSleep8(ms, signal) {
 async function pollExtractionStatus(client, contractFileIds, options = {}) {
   const interval = options.pollIntervalMs ?? EXTRACT_POLL_INTERVAL_MS;
   const timeout = options.timeoutMs ?? EXTRACT_POLL_TIMEOUT_MS;
-  const sleep3 = options.sleep ?? defaultSleep8;
+  const sleep4 = options.sleep ?? defaultSleep8;
   const now = options.now ?? Date.now;
   const resolved = /* @__PURE__ */ new Map();
   if (contractFileIds.length === 0) return { resolved, pending: [] };
@@ -57914,7 +58530,7 @@ async function pollExtractionStatus(client, contractFileIds, options = {}) {
       options.onTick?.(resolved.size, contractFileIds.length);
       if (resolved.size >= contractFileIds.length) break;
       if (now() > deadline || inner.signal.aborted) break;
-      await sleep3(interval, inner.signal);
+      await sleep4(interval, inner.signal);
     }
   } finally {
     clearTimeout(deadlineTimer);
@@ -59712,11 +60328,11 @@ async function extractSync(cfg, parts) {
 async function emitExtractionDraft(cfg, allResults, sourceFiles, outcomes, abortedMidRun) {
   const failed = outcomes.filter((o) => !o.ok);
   if (cfg.asRawJson) {
-    const text2 = JSON.stringify(allResults, null, 2);
+    const text3 = JSON.stringify(allResults, null, 2);
     if (cfg.outputPath !== void 0) {
-      await fsPromises3.writeFile(cfg.outputPath, text2 + "\n", "utf8");
+      await fsPromises3.writeFile(cfg.outputPath, text3 + "\n", "utf8");
     } else {
-      cfg.out.write(text2 + "\n");
+      cfg.out.write(text3 + "\n");
     }
     reportFileOutcomes(cfg.err, outcomes, abortedMidRun);
     throwIfAnyFileFailed(failed, outcomes.length);
@@ -59728,13 +60344,13 @@ async function emitExtractionDraft(cfg, allResults, sourceFiles, outcomes, abort
     tenantServer: cfg.serverKey,
     defaults: cfg.defaults
   });
-  const text = JSON.stringify(draft, null, 2);
+  const text2 = JSON.stringify(draft, null, 2);
   if (cfg.outputPath !== void 0) {
-    await fsPromises3.writeFile(cfg.outputPath, text + "\n", "utf8");
+    await fsPromises3.writeFile(cfg.outputPath, text2 + "\n", "utf8");
     cfg.err.write(`wrote ${cfg.outputPath}
 `);
   } else {
-    cfg.out.write(text + "\n");
+    cfg.out.write(text2 + "\n");
   }
   const review = draft._meta?.review_required ?? [];
   const failures = draft._meta?.ai_failures ?? [];
@@ -60223,14 +60839,14 @@ async function collectResourceIds(args, fromPath, labels = {}) {
     raw.push(...a.split(",").map((s) => s.trim()));
   }
   if (fromPath !== void 0 && fromPath !== "") {
-    let text;
+    let text2;
     try {
-      text = await fsPromises3.readFile(fromPath, "utf8");
+      text2 = await fsPromises3.readFile(fromPath, "utf8");
     } catch (err) {
       const m = err instanceof Error ? err.message : String(err);
       throw new Error(`read --from: ${m}`);
     }
-    for (const line of text.split(/\r?\n/)) {
+    for (const line of text2.split(/\r?\n/)) {
       const stripped = line.split("#")[0] ?? "";
       raw.push(...stripped.split(",").map((s) => s.trim()));
     }
@@ -63816,27 +64432,27 @@ function groupAnswer(group, below) {
 function filterBelow(node, scopes, map, armed) {
   const here = { count: 0, answer: void 0, required: [], denials: [] };
   let allAnswered = node.commands.length > 0;
-  for (const child of node.commands) {
-    if (child.commands.length > 0) {
-      const below = filterBelow(child, scopes, map, armed);
+  for (const child2 of node.commands) {
+    if (child2.commands.length > 0) {
+      const below = filterBelow(child2, scopes, map, armed);
       here.count += below.count;
       if (below.answer === void 0) {
         allAnswered = false;
         continue;
       }
-      interceptGroup(child, below.answer);
-      hide(child);
+      interceptGroup(child2, below.answer);
+      hide(child2);
       addRequired(here, below.required);
       addDenials(here, below.denials);
       continue;
     }
-    const answer = leafAnswer(child, scopes, map);
+    const answer = leafAnswer(child2, scopes, map);
     if (answer === void 0) {
       allAnswered = false;
       continue;
     }
-    intercept(child, answer.err, armed);
-    hide(child);
+    intercept(child2, answer.err, armed);
+    hide(child2);
     here.count += 1;
     addRequired(here, answer.required);
     if (answer.denial !== void 0) addDenials(here, [answer.denial]);
@@ -63959,7 +64575,7 @@ function registersServerFlag(cmd) {
 }
 function isServerBound(cmd) {
   if (cmd.commands.length === 0) return registersServerFlag(cmd);
-  return cmd.commands.every((child) => isServerBound(child));
+  return cmd.commands.every((child2) => isServerBound(child2));
 }
 function isOpenWithoutServer(cmd) {
   return SERVER_OPTIONAL_COMMANDS.has(cmd.name()) || !isServerBound(cmd);
@@ -64264,6 +64880,7 @@ function buildRootCommand() {
   registerDynamicRangesCommand(root);
   registerFunctionsCommand(root);
   registerSemanticTablesCommand(root);
+  registerODataCommand(root);
   registerStoryboardsCommand(root);
   registerExTablesCommand(root);
   registerLutCommand(root);
@@ -64416,8 +65033,8 @@ function redactUnknownOption(match, prefix, token) {
   if (!looksLikeFlag(name)) return `${prefix}<redacted>'`;
   return eq === -1 ? match : `${prefix}${name}=<redacted>'`;
 }
-function redactCommanderValues(text) {
-  return text.replace(UNKNOWN_OPTION_PATTERN, redactUnknownOption).replace(UNKNOWN_COMMAND_PATTERN, "$1<redacted>'").replace(INVALID_OPTION_ARGUMENT_PATTERN, "$1<redacted>$2").replace(INVALID_ENV_VALUE_PATTERN, "$1<redacted>$2").replace(INVALID_COMMAND_ARGUMENT_PATTERN, "$1<redacted>$2");
+function redactCommanderValues(text2) {
+  return text2.replace(UNKNOWN_OPTION_PATTERN, redactUnknownOption).replace(UNKNOWN_COMMAND_PATTERN, "$1<redacted>'").replace(INVALID_OPTION_ARGUMENT_PATTERN, "$1<redacted>$2").replace(INVALID_ENV_VALUE_PATTERN, "$1<redacted>$2").replace(INVALID_COMMAND_ARGUMENT_PATTERN, "$1<redacted>$2");
 }
 async function main() {
   let root;