@dereekb/dbx-cli 13.11.9 → 13.11.11

package/index.esm.js

@@ -1,7 +1,7 @@
 import { existsSync, mkdirSync, writeFileSync, appendFileSync } from 'node:fs';
 import { join } from 'node:path';
 export { CALL_MODEL_APP_FUNCTION_KEY } from '@dereekb/firebase';
-import { expirationDetails, generatePkceCodeVerifier, generatePkceCodeChallenge, noop, MS_IN_SECOND } from '@dereekb/util';
+import { performAsyncTasks, compareStrings, expirationDetails, generatePkceCodeVerifier, generatePkceCodeChallenge, noop, MS_IN_SECOND } from '@dereekb/util';
 import { durationDataToMilliseconds, parseDurationString } from '@dereekb/date';
 import { readJsonFile, writeJsonFile, createMemoizedJsonFileAsyncKeyedValueCache } from '@dereekb/nestjs';
 import { homedir } from 'node:os';
@@ -9,13 +9,13 @@ import { createInterface } from 'node:readline';
 import yargs from 'yargs';
 import { hideBin } from 'yargs/helpers';
 
-function _array_like_to_array$8(arr, len) {
+function _array_like_to_array$b(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_without_holes$5(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$8(arr);
+function _array_without_holes$8(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$b(arr);
 }
 function _assert_this_initialized(self) {
     if (self === void 0) {
@@ -49,7 +49,7 @@ function _construct(Parent, args, Class) {
     }
     return _construct.apply(null, arguments);
 }
-function _define_property$c(obj, key, value) {
+function _define_property$d(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -92,13 +92,13 @@ function _instanceof$6(left, right) {
 function _is_native_function(fn) {
     return Function.toString.call(fn).indexOf("[native code]") !== -1;
 }
-function _iterable_to_array$5(iter) {
+function _iterable_to_array$8(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
-function _non_iterable_spread$5() {
+function _non_iterable_spread$8() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$c(target) {
+function _object_spread$d(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -108,7 +108,7 @@ function _object_spread$c(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$c(target, key, source[key]);
+            _define_property$d(target, key, source[key]);
         });
     }
     return target;
@@ -126,20 +126,20 @@ function _set_prototype_of(o, p) {
     };
     return _set_prototype_of(o, p);
 }
-function _to_consumable_array$5(arr) {
-    return _array_without_holes$5(arr) || _iterable_to_array$5(arr) || _unsupported_iterable_to_array$8(arr) || _non_iterable_spread$5();
+function _to_consumable_array$8(arr) {
+    return _array_without_holes$8(arr) || _iterable_to_array$8(arr) || _unsupported_iterable_to_array$b(arr) || _non_iterable_spread$8();
 }
 function _type_of$3(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _unsupported_iterable_to_array$8(o, minLen) {
+function _unsupported_iterable_to_array$b(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$8(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$b(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$8(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$b(o, minLen);
 }
 function _wrap_native_super(Class) {
     var _cache = typeof Map === "function" ? new Map() : undefined;
@@ -188,7 +188,7 @@ function _is_native_reflect_construct() {
     /id_token[=:]\s*\S+/gi
 ];
 var _outputOptions = {};
-var _secretPatterns = _to_consumable_array$5(DEFAULT_CLI_SECRET_PATTERNS);
+var _secretPatterns = _to_consumable_array$8(DEFAULT_CLI_SECRET_PATTERNS);
 var _errorMapper;
 /**
  * Configures output options from parsed CLI arguments.
@@ -294,7 +294,7 @@ function dumpResponse(data, meta) {
     if (!filePath) {
         return;
     }
-    var content = _object_spread$c({
+    var content = _object_spread$d({
         ok: true,
         data: data
     }, meta ? {
@@ -362,7 +362,7 @@ function pickFromObject(obj, fields) {
  */ function outputResult(data, meta) {
     dumpResponse(data, meta);
     var outputData = _outputOptions.pick ? pickFields(data, _outputOptions.pick) : data;
-    var output = _object_spread$c({
+    var output = _object_spread$d({
         ok: true,
         data: outputData
     }, meta ? {
@@ -389,7 +389,7 @@ function pickFromObject(obj, fields) {
         var _this;
         _this = _call_super(this, CliError, [
             input.message
-        ]), _define_property$c(_this, "code", void 0), _define_property$c(_this, "suggestion", void 0);
+        ]), _define_property$d(_this, "code", void 0), _define_property$d(_this, "suggestion", void 0);
         _this.name = 'CliError';
         _this.code = input.code;
         _this.suggestion = input.suggestion;
@@ -419,7 +419,7 @@ function pickFromObject(obj, fields) {
         }
     }
     if (_instanceof$6(error, CliError)) {
-        return _object_spread$c({
+        return _object_spread$d({
             ok: false,
             error: sanitizeString(error.message),
             code: error.code
@@ -441,7 +441,7 @@ function pickFromObject(obj, fields) {
     };
 }
 
-function asyncGeneratorStep$h(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$j(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -455,16 +455,16 @@ function asyncGeneratorStep$h(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$h(fn) {
+function _async_to_generator$j(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$h(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$j(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$h(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$j(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -474,7 +474,7 @@ function _type_of$2(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _ts_generator$h(thisArg, body) {
+function _ts_generator$j(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -590,9 +590,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input.fetcher - Optional fetch implementation override (used by tests).
  * @returns The parsed JSON response body cast to `R`.
  */ function callModelOverHttp(input) {
-    return _async_to_generator$h(function() {
+    return _async_to_generator$j(function() {
         var _input_fetcher, fetcher, url, res, text, body, _input_params_call, bodyMessage, messageString, message;
-        return _ts_generator$h(this, function(_state) {
+        return _ts_generator$j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     fetcher = (_input_fetcher = input.fetcher) !== null && _input_fetcher !== void 0 ? _input_fetcher : fetch;
@@ -655,9 +655,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The request envelope describing the API target, access token, model + key, and optional fetch override.
  * @returns The parsed `{ key, data }` envelope.
  */ function getModelOverHttp(input) {
-    return _async_to_generator$h(function() {
+    return _async_to_generator$j(function() {
         var _input_fetcher, fetcher, url, res, _ref, ok, body, fallbackMessage;
-        return _ts_generator$h(this, function(_state) {
+        return _ts_generator$j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     fetcher = (_input_fetcher = input.fetcher) !== null && _input_fetcher !== void 0 ? _input_fetcher : fetch;
@@ -707,9 +707,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The request envelope describing the API target, access token, model, keys, and optional fetch override.
  * @returns The parsed `{ results, errors }` envelope.
  */ function getMultipleModelsOverHttp(input) {
-    return _async_to_generator$h(function() {
+    return _async_to_generator$j(function() {
         var _input_fetcher, fetcher, url, res, _ref, ok, body, fallbackMessage;
-        return _ts_generator$h(this, function(_state) {
+        return _ts_generator$j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     if (input.keys.length === 0) {
@@ -764,9 +764,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
     })();
 }
 function readJsonResponse(res) {
-    return _async_to_generator$h(function() {
+    return _async_to_generator$j(function() {
         var text, body;
-        return _ts_generator$h(this, function(_state) {
+        return _ts_generator$j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -846,70 +846,1010 @@ function trimSlash$1(url) {
             if (_value == null) {
                 throw new Error(notInitializedMessage);
             }
-            return _value;
-        }
+            return _value;
+        }
+    };
+}
+
+/**
+ * Module-level slot holding the {@link CliContext} for the current invocation.
+ *
+ * Stored here instead of on argv so that yargs strict-mode does not flag it as an unknown argument.
+ */ var _cliContextSlot = createContextSlot({
+    notInitializedMessage: 'CLI context not initialized — auth middleware must run before this command.'
+});
+var setCliContext = _cliContextSlot.set;
+var getCliContext = _cliContextSlot.get;
+/**
+ * Returns the current {@link CliContext} or throws — for use in command handlers that require auth.
+ */ var requireCliContext = _cliContextSlot.require;
+/**
+ * Builds a {@link CliContext} for the current invocation.
+ *
+ * Bundles the env config and access token alongside helpers that POST/GET against
+ * `<env.apiBaseUrl>/model/*` with the cached Bearer token.
+ *
+ * @param input - The context inputs.
+ * @param input.cliName - The CLI's binary name.
+ * @param input.envName - The active env name.
+ * @param input.env - The resolved {@link CliEnvConfig} for the active env.
+ * @param input.accessToken - The Bearer access token to include on outgoing API calls.
+ * @param input.modelManifest - Optional generated {@link CliModelManifest} for key→modelType resolution.
+ * @returns The constructed {@link CliContext}.
+ * @__NO_SIDE_EFFECTS__
+ */ function createCliContext(input) {
+    var apiBaseUrl = input.env.apiBaseUrl;
+    var accessToken = input.accessToken;
+    return {
+        cliName: input.cliName,
+        envName: input.envName,
+        env: input.env,
+        accessToken: accessToken,
+        modelManifest: input.modelManifest,
+        callModel: function callModel(params) {
+            return callModelOverHttp({
+                apiBaseUrl: apiBaseUrl,
+                accessToken: accessToken,
+                params: params
+            });
+        },
+        getModel: function getModel(modelType, key) {
+            return getModelOverHttp({
+                apiBaseUrl: apiBaseUrl,
+                accessToken: accessToken,
+                modelType: modelType,
+                key: key
+            });
+        },
+        getMultipleModels: function getMultipleModels(modelType, keys) {
+            return getMultipleModelsOverHttp({
+                apiBaseUrl: apiBaseUrl,
+                accessToken: accessToken,
+                modelType: modelType,
+                keys: keys
+            });
+        }
+    };
+}
+
+function asyncGeneratorStep$i(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$i(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$i(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$i(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$i(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+/**
+ * Wraps an {@link ActionCommandSpec} as a yargs `CommandModule`.
+ *
+ * The returned command:
+ *  - Calls {@link requireCliContext} so it fails loudly when auth middleware did not run.
+ *  - Invokes `spec.handler({ context, argv })`.
+ *  - Pipes the result through `spec.mapResult` when provided.
+ *  - Emits the value via {@link outputResult}; emits {@link outputError} + `process.exit(1)` on failure.
+ *
+ * @param spec - The action specification.
+ * @returns The yargs command module ready to be registered under the `action` parent.
+ * @__NO_SIDE_EFFECTS__
+ */ function createActionCommand(spec) {
+    return {
+        command: spec.command,
+        describe: spec.describe,
+        builder: function builder(yargs) {
+            var built = spec.builder ? spec.builder(yargs) : yargs;
+            return spec.helpEpilogue ? built.epilogue(spec.helpEpilogue) : built;
+        },
+        handler: function handler(argv) {
+            return _async_to_generator$i(function() {
+                var context, result, e;
+                return _ts_generator$i(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            _state.trys.push([
+                                0,
+                                2,
+                                ,
+                                3
+                            ]);
+                            context = requireCliContext();
+                            return [
+                                4,
+                                spec.handler({
+                                    context: context,
+                                    argv: argv
+                                })
+                            ];
+                        case 1:
+                            result = _state.sent();
+                            outputResult(spec.mapResult ? spec.mapResult(result) : result);
+                            return [
+                                3,
+                                3
+                            ];
+                        case 2:
+                            e = _state.sent();
+                            outputError(e);
+                            process.exit(1);
+                            return [
+                                3,
+                                3
+                            ];
+                        case 3:
+                            return [
+                                2
+                            ];
+                    }
+                });
+            })();
+        }
+    };
+}
+
+function _array_like_to_array$a(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes$6(arr) {
+    if (Array.isArray(arr)) return arr;
+}
+function _array_without_holes$7(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$a(arr);
+}
+function _iterable_to_array$7(iter) {
+    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
+}
+function _iterable_to_array_limit$6(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
+        }
+    }
+    return _arr;
+}
+function _non_iterable_rest$6() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _non_iterable_spread$7() {
+    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _sliced_to_array$6(arr, i) {
+    return _array_with_holes$6(arr) || _iterable_to_array_limit$6(arr, i) || _unsupported_iterable_to_array$a(arr, i) || _non_iterable_rest$6();
+}
+function _to_consumable_array$7(arr) {
+    return _array_without_holes$7(arr) || _iterable_to_array$7(arr) || _unsupported_iterable_to_array$a(arr) || _non_iterable_spread$7();
+}
+function _unsupported_iterable_to_array$a(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array$a(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$a(o, minLen);
+}
+/**
+ * Default name of the parent command that groups all registered action specs.
+ * Surfaces as `<cli> action <action>` (root) and `<cli> action <model> <action>` (model-scoped).
+ */ var DEFAULT_ACTION_COMMAND_NAME = 'action';
+/**
+ * Assembles the parent `action` command tree from a list of {@link ActionCommandSpec}s.
+ *
+ * Specs without a `model` are appended as direct subcommands of `action`. Specs with a
+ * `model` are grouped under `action <model> <action>` (mirroring `buildManifestCommands`'
+ * `model <model> <action>` shape) so the model-scoped surface stays browseable.
+ *
+ * @param specs - The action specs registered by the app.
+ * @param options - Optional overrides (e.g. parent command name).
+ * @returns An array containing a single parent `action` command, or empty when no specs were provided.
+ * @__NO_SIDE_EFFECTS__
+ */ function buildActionCommands(specs, options) {
+    var result = [];
+    if (specs.length > 0) {
+        var _ref;
+        var actionCommandName = (_ref = options === null || options === void 0 ? void 0 : options.actionCommandName) !== null && _ref !== void 0 ? _ref : DEFAULT_ACTION_COMMAND_NAME;
+        var rootSpecs = specs.filter(function(s) {
+            return !s.model;
+        });
+        var byModel = new Map();
+        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+        try {
+            for(var _iterator = specs[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                var spec = _step.value;
+                if (spec.model) {
+                    var list = byModel.get(spec.model);
+                    if (list) {
+                        list.push(spec);
+                    } else {
+                        byModel.set(spec.model, [
+                            spec
+                        ]);
+                    }
+                }
+            }
+        } catch (err) {
+            _didIteratorError = true;
+            _iteratorError = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                    _iterator.return();
+                }
+            } finally{
+                if (_didIteratorError) {
+                    throw _iteratorError;
+                }
+            }
+        }
+        var sortedModels = _to_consumable_array$7(byModel.entries()).sort(function(param, param1) {
+            var _param = _sliced_to_array$6(param, 1), a = _param[0], _param1 = _sliced_to_array$6(param1, 1), b = _param1[0];
+            return a.localeCompare(b);
+        });
+        result = [
+            {
+                command: "".concat(actionCommandName, " <action>"),
+                describe: "Run a composite action (".concat(specs.length, "). Use `").concat(actionCommandName, " --help` to list them."),
+                builder: function builder(yargs) {
+                    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+                    try {
+                        for(var _iterator = rootSpecs[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                            var spec = _step.value;
+                            yargs.command(createActionCommand(spec));
+                        }
+                    } catch (err) {
+                        _didIteratorError = true;
+                        _iteratorError = err;
+                    } finally{
+                        try {
+                            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                                _iterator.return();
+                            }
+                        } finally{
+                            if (_didIteratorError) {
+                                throw _iteratorError;
+                            }
+                        }
+                    }
+                    var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
+                    try {
+                        var _loop = function() {
+                            var _step_value = _sliced_to_array$6(_step1.value, 2), model = _step_value[0], modelSpecs = _step_value[1];
+                            yargs.command({
+                                command: "".concat(model, " <action>"),
+                                describe: "Composite actions scoped to model '".concat(model, "' (").concat(modelSpecs.length, ")."),
+                                builder: function builder(yy) {
+                                    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+                                    try {
+                                        for(var _iterator = modelSpecs[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                                            var spec = _step.value;
+                                            yy.command(createActionCommand(spec));
+                                        }
+                                    } catch (err) {
+                                        _didIteratorError = true;
+                                        _iteratorError = err;
+                                    } finally{
+                                        try {
+                                            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                                                _iterator.return();
+                                            }
+                                        } finally{
+                                            if (_didIteratorError) {
+                                                throw _iteratorError;
+                                            }
+                                        }
+                                    }
+                                    return yy.demandCommand(1, 'Please specify an action.');
+                                },
+                                handler: function handler() {
+                                    return undefined;
+                                }
+                            });
+                        };
+                        for(var _iterator1 = sortedModels[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true)_loop();
+                    } catch (err) {
+                        _didIteratorError1 = true;
+                        _iteratorError1 = err;
+                    } finally{
+                        try {
+                            if (!_iteratorNormalCompletion1 && _iterator1.return != null) {
+                                _iterator1.return();
+                            }
+                        } finally{
+                            if (_didIteratorError1) {
+                                throw _iteratorError1;
+                            }
+                        }
+                    }
+                    return yargs.demandCommand(1, 'Please specify an action.');
+                },
+                handler: function handler() {
+                    return undefined;
+                }
+            }
+        ];
+    }
+    return result;
+}
+
+function _array_like_to_array$9(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes$5(arr) {
+    if (Array.isArray(arr)) return arr;
+}
+function _array_without_holes$6(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$9(arr);
+}
+function asyncGeneratorStep$h(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$h(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$h(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$h(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$c(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _iterable_to_array$6(iter) {
+    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
+}
+function _iterable_to_array_limit$5(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
+        }
+    }
+    return _arr;
+}
+function _non_iterable_rest$5() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _non_iterable_spread$6() {
+    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _object_spread$c(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$c(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$8(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$8(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$8(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _sliced_to_array$5(arr, i) {
+    return _array_with_holes$5(arr) || _iterable_to_array_limit$5(arr, i) || _unsupported_iterable_to_array$9(arr, i) || _non_iterable_rest$5();
+}
+function _to_consumable_array$6(arr) {
+    return _array_without_holes$6(arr) || _iterable_to_array$6(arr) || _unsupported_iterable_to_array$9(arr) || _non_iterable_spread$6();
+}
+function _unsupported_iterable_to_array$9(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array$9(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$9(o, minLen);
+}
+function _ts_generator$h(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var _defaultResponseAdapter = {
+    items: function items(raw) {
+        return raw.results;
+    },
+    keys: function keys(raw) {
+        return raw.keys;
+    },
+    cursorDocumentKey: function cursorDocumentKey(raw) {
+        return raw.cursorDocumentKey;
+    },
+    hasMore: function hasMore(raw) {
+        return raw.hasMore;
+    }
+};
+function _defaultBuildRequestData(params, state, limit) {
+    var base = _object_spread$c({}, params);
+    if (state.cursorDocumentKey != null) {
+        base.cursorDocumentKey = state.cursorDocumentKey;
+    }
+    if (limit != null) {
+        base.limit = limit;
+    }
+    return base;
+}
+function _runItemTasks(input) {
+    return _async_to_generator$h(function() {
+        var context, items, keys, pageIndex, iterateItem, itemPerformTasksConfig, maxParallelPerPage, indexed, taskConfig, performResult;
+        return _ts_generator$h(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    context = input.context, items = input.items, keys = input.keys, pageIndex = input.pageIndex, iterateItem = input.iterateItem, itemPerformTasksConfig = input.itemPerformTasksConfig, maxParallelPerPage = input.maxParallelPerPage;
+                    indexed = items.map(function(item, itemIndex) {
+                        var _keys_itemIndex;
+                        return {
+                            item: item,
+                            key: (_keys_itemIndex = keys[itemIndex]) !== null && _keys_itemIndex !== void 0 ? _keys_itemIndex : '',
+                            itemIndex: itemIndex
+                        };
+                    });
+                    taskConfig = _object_spread_props$8(_object_spread$c({
+                        sequential: true,
+                        throwError: true
+                    }, itemPerformTasksConfig), {
+                        maxParallelTasks: maxParallelPerPage !== null && maxParallelPerPage !== void 0 ? maxParallelPerPage : itemPerformTasksConfig === null || itemPerformTasksConfig === void 0 ? void 0 : itemPerformTasksConfig.maxParallelTasks
+                    });
+                    return [
+                        4,
+                        performAsyncTasks(indexed, function(param) {
+                            var item = param.item, key = param.key, itemIndex = param.itemIndex;
+                            return iterateItem({
+                                context: context,
+                                item: item,
+                                key: key,
+                                pageIndex: pageIndex,
+                                itemIndex: itemIndex
+                            });
+                        }, taskConfig)
+                    ];
+                case 1:
+                    performResult = _state.sent();
+                    return [
+                        2,
+                        performResult.results.map(function(param) {
+                            var _param = _sliced_to_array$5(param, 2), output = _param[1];
+                            return output;
+                        })
+                    ];
+            }
+        });
+    })();
+}
+function _processPage(input) {
+    return _async_to_generator$h(function() {
+        var context, raw, pageIndex, responseAdapter, iterateItem, iteratePage, itemPerformTasksConfig, maxParallelPerPage, items, keys, nextCursorDocumentKey, hasMore, itemResults, _tmp, pageResult, _tmp1, output;
+        return _ts_generator$h(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    context = input.context, raw = input.raw, pageIndex = input.pageIndex, responseAdapter = input.responseAdapter, iterateItem = input.iterateItem, iteratePage = input.iteratePage, itemPerformTasksConfig = input.itemPerformTasksConfig, maxParallelPerPage = input.maxParallelPerPage;
+                    items = responseAdapter.items(raw);
+                    keys = responseAdapter.keys ? responseAdapter.keys(raw) : [];
+                    nextCursorDocumentKey = responseAdapter.cursorDocumentKey ? responseAdapter.cursorDocumentKey(raw) : undefined;
+                    hasMore = responseAdapter.hasMore ? responseAdapter.hasMore(raw) : nextCursorDocumentKey != null;
+                    if (!iterateItem) return [
+                        3,
+                        2
+                    ];
+                    return [
+                        4,
+                        _runItemTasks({
+                            context: context,
+                            items: items,
+                            keys: keys,
+                            pageIndex: pageIndex,
+                            iterateItem: iterateItem,
+                            itemPerformTasksConfig: itemPerformTasksConfig,
+                            maxParallelPerPage: maxParallelPerPage
+                        })
+                    ];
+                case 1:
+                    _tmp = _state.sent();
+                    return [
+                        3,
+                        3
+                    ];
+                case 2:
+                    _tmp = undefined;
+                    _state.label = 3;
+                case 3:
+                    itemResults = _tmp;
+                    if (!iteratePage) return [
+                        3,
+                        5
+                    ];
+                    return [
+                        4,
+                        iteratePage({
+                            context: context,
+                            page: raw,
+                            items: items,
+                            keys: keys,
+                            pageIndex: pageIndex,
+                            pageItemResults: itemResults
+                        })
+                    ];
+                case 4:
+                    _tmp1 = _state.sent();
+                    return [
+                        3,
+                        6
+                    ];
+                case 5:
+                    _tmp1 = undefined;
+                    _state.label = 6;
+                case 6:
+                    pageResult = _tmp1;
+                    output = {
+                        items: items,
+                        itemResults: itemResults,
+                        pageResult: pageResult,
+                        nextCursorDocumentKey: nextCursorDocumentKey,
+                        hasMore: hasMore
+                    };
+                    return [
+                        2,
+                        output
+                    ];
+            }
+        });
+    })();
+}
+function _computeEffectiveLimit(totalItemsLimit, limitPerPage, totalItems) {
+    var remainingBudget = totalItemsLimit == null ? undefined : totalItemsLimit - totalItems;
+    if (limitPerPage != null && remainingBudget != null) {
+        return Math.min(limitPerPage, remainingBudget);
+    }
+    return limitPerPage !== null && limitPerPage !== void 0 ? limitPerPage : remainingBudget;
+}
+function _evaluateLoopExit(input) {
+    var totalItemsLimit = input.totalItemsLimit, maxPages = input.maxPages, totalItems = input.totalItems, pageIndex = input.pageIndex, hasMore = input.hasMore, cursorDocumentKey = input.cursorDocumentKey;
+    var reachedItemsLimit = totalItemsLimit != null && totalItems >= totalItemsLimit;
+    var reachedPagesLimit = maxPages != null && pageIndex >= maxPages;
+    if (reachedItemsLimit || reachedPagesLimit) {
+        return {
+            stop: true,
+            hitLimit: true
+        };
+    }
+    var exhausted = hasMore === false || cursorDocumentKey == null;
+    return {
+        stop: exhausted,
+        hitLimit: false
     };
 }
-
 /**
- * Module-level slot holding the {@link CliContext} for the current invocation.
+ * Iterates a paginated `callModel` endpoint, exhausting (or stopping at the configured limit) all pages.
  *
- * Stored here instead of on argv so that yargs strict-mode does not flag it as an unknown argument.
- */ var _cliContextSlot = createContextSlot({
-    notInitializedMessage: 'CLI context not initialized — auth middleware must run before this command.'
-});
-var setCliContext = _cliContextSlot.set;
-var getCliContext = _cliContextSlot.get;
-/**
- * Returns the current {@link CliContext} or throws — for use in command handlers that require auth.
- */ var requireCliContext = _cliContextSlot.require;
-/**
- * Builds a {@link CliContext} for the current invocation.
+ * Cursor-paginated analog of {@link iterateFirestoreDocumentSnapshots}, but speaking HTTP/`callModel`
+ * rather than direct Firestore. The default response adapter reads the canonical
+ * {@link OnCallQueryModelResult} shape — supply a custom adapter to iterate other array-returning
+ * call types (e.g. a `getMultiple`-style standalone call).
  *
- * Bundles the env config and access token alongside helpers that POST/GET against
- * `<env.apiBaseUrl>/model/*` with the cached Bearer token.
+ * Concurrency: pages are fetched serially (cursor dependency); items within a page can run
+ * in parallel via `maxParallelPerPage` (forwarded to `performAsyncTasks`).
  *
- * @param input - The context inputs.
- * @param input.cliName - The CLI's binary name.
- * @param input.envName - The active env name.
- * @param input.env - The resolved {@link CliEnvConfig} for the active env.
- * @param input.accessToken - The Bearer access token to include on outgoing API calls.
- * @param input.modelManifest - Optional generated {@link CliModelManifest} for key→modelType resolution.
- * @returns The constructed {@link CliContext}.
- * @__NO_SIDE_EFFECTS__
- */ function createCliContext(input) {
-    var apiBaseUrl = input.env.apiBaseUrl;
-    var accessToken = input.accessToken;
-    return {
-        cliName: input.cliName,
-        envName: input.envName,
-        env: input.env,
-        accessToken: accessToken,
-        modelManifest: input.modelManifest,
-        callModel: function callModel(params) {
-            return callModelOverHttp({
-                apiBaseUrl: apiBaseUrl,
-                accessToken: accessToken,
-                params: params
-            });
-        },
-        getModel: function getModel(modelType, key) {
-            return getModelOverHttp({
-                apiBaseUrl: apiBaseUrl,
-                accessToken: accessToken,
-                modelType: modelType,
-                key: key
-            });
-        },
-        getMultipleModels: function getMultipleModels(modelType, keys) {
-            return getMultipleModelsOverHttp({
-                apiBaseUrl: apiBaseUrl,
-                accessToken: accessToken,
-                modelType: modelType,
-                keys: keys
-            });
-        }
-    };
+ * @example
+ * ```ts
+ * // Exhaust every published Guestbook entry for a single Guestbook.
+ * const { totalItems, items } = await iterateDbxCliCallModel<QueryGuestbookEntriesParams, GuestbookEntry>({
+ *   context,
+ *   modelType: 'guestbookEntry',
+ *   params: { guestbook: 'gb/abc', published: true }
+ * });
+ * ```
+ *
+ * @example
+ * ```ts
+ * // Fan out to a child action per Guestbook, with 4-way parallelism per page.
+ * const { itemResults } = await iterateDbxCliCallModel<QueryGuestbooksParams, Guestbook, OnCallQueryModelResult<Guestbook>, EntriesForGuestbook>({
+ *   context,
+ *   modelType: 'guestbook',
+ *   params: { published: true },
+ *   maxParallelPerPage: 4,
+ *   iterateItem: ({ context, key }) => queryGuestbookEntriesForGuestbook({ context, guestbook: key, published: true })
+ * });
+ * ```
+ *
+ * @param config - Iterator configuration.
+ * @returns The aggregate result.
+ */ function iterateDbxCliCallModel(config) {
+    return _async_to_generator$h(function() {
+        var context, modelType, call, specifier, params, _config_buildRequestData, buildRequestData, _config_responseAdapter, responseAdapter, limitPerPage, totalItemsLimit, maxPages, iterateItem, iteratePage, itemPerformTasksConfig, maxParallelPerPage, _config_collectItems, collectItems, _config_collectItemResults, collectItemResults, _config_collectPageResults, collectPageResults, allItems, allItemResults, allPageResults, pageIndex, totalItems, cursorDocumentKey, hitLimit, keepGoing, collectItemsForPage, collectItemResultsForPage, collectPageResultsForPage, effectiveLimit, data, raw, pageOutcome, _allItems, _allItemResults, exit, result;
+        return _ts_generator$h(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    context = config.context, modelType = config.modelType, call = config.call, specifier = config.specifier, params = config.params, _config_buildRequestData = config.buildRequestData, buildRequestData = _config_buildRequestData === void 0 ? _defaultBuildRequestData : _config_buildRequestData, _config_responseAdapter = config.responseAdapter, responseAdapter = _config_responseAdapter === void 0 ? _defaultResponseAdapter : _config_responseAdapter, limitPerPage = config.limitPerPage, totalItemsLimit = config.totalItemsLimit, maxPages = config.maxPages, iterateItem = config.iterateItem, iteratePage = config.iteratePage, itemPerformTasksConfig = config.itemPerformTasksConfig, maxParallelPerPage = config.maxParallelPerPage, _config_collectItems = config.collectItems, collectItems = _config_collectItems === void 0 ? true : _config_collectItems, _config_collectItemResults = config.collectItemResults, collectItemResults = _config_collectItemResults === void 0 ? iterateItem != null : _config_collectItemResults, _config_collectPageResults = config.collectPageResults, collectPageResults = _config_collectPageResults === void 0 ? iteratePage != null : _config_collectPageResults;
+                    allItems = [];
+                    allItemResults = [];
+                    allPageResults = [];
+                    pageIndex = 0;
+                    totalItems = 0;
+                    cursorDocumentKey = undefined;
+                    hitLimit = false;
+                    keepGoing = true;
+                    collectItemsForPage = collectItems;
+                    collectItemResultsForPage = iterateItem != null && collectItemResults;
+                    collectPageResultsForPage = iteratePage != null && collectPageResults;
+                    _state.label = 1;
+                case 1:
+                    if (!keepGoing) return [
+                        3,
+                        4
+                    ];
+                    effectiveLimit = _computeEffectiveLimit(totalItemsLimit, limitPerPage, totalItems);
+                    data = buildRequestData(params, {
+                        pageIndex: pageIndex,
+                        cursorDocumentKey: cursorDocumentKey,
+                        visitedItems: totalItems
+                    }, effectiveLimit);
+                    return [
+                        4,
+                        context.callModel({
+                            modelType: modelType,
+                            call: call,
+                            specifier: specifier,
+                            data: data
+                        })
+                    ];
+                case 2:
+                    raw = _state.sent();
+                    return [
+                        4,
+                        _processPage({
+                            context: context,
+                            raw: raw,
+                            pageIndex: pageIndex,
+                            responseAdapter: responseAdapter,
+                            iterateItem: iterateItem,
+                            iteratePage: iteratePage,
+                            itemPerformTasksConfig: itemPerformTasksConfig,
+                            maxParallelPerPage: maxParallelPerPage
+                        })
+                    ];
+                case 3:
+                    pageOutcome = _state.sent();
+                    if (collectItemsForPage) {
+                        (_allItems = allItems).push.apply(_allItems, _to_consumable_array$6(pageOutcome.items));
+                    }
+                    if (collectItemResultsForPage && pageOutcome.itemResults) {
+                        (_allItemResults = allItemResults).push.apply(_allItemResults, _to_consumable_array$6(pageOutcome.itemResults));
+                    }
+                    if (collectPageResultsForPage && pageOutcome.pageResult !== undefined) {
+                        allPageResults.push(pageOutcome.pageResult);
+                    }
+                    totalItems += pageOutcome.items.length;
+                    cursorDocumentKey = pageOutcome.nextCursorDocumentKey;
+                    pageIndex += 1;
+                    exit = _evaluateLoopExit({
+                        totalItemsLimit: totalItemsLimit,
+                        maxPages: maxPages,
+                        totalItems: totalItems,
+                        pageIndex: pageIndex,
+                        hasMore: pageOutcome.hasMore,
+                        cursorDocumentKey: cursorDocumentKey
+                    });
+                    hitLimit = exit.hitLimit;
+                    keepGoing = !exit.stop;
+                    return [
+                        3,
+                        1
+                    ];
+                case 4:
+                    result = _object_spread$c({
+                        totalPages: pageIndex,
+                        totalItems: totalItems,
+                        hitLimit: hitLimit,
+                        lastCursorDocumentKey: cursorDocumentKey
+                    }, collectItemsForPage ? {
+                        items: allItems
+                    } : {}, collectItemResultsForPage ? {
+                        itemResults: allItemResults
+                    } : {}, collectPageResultsForPage ? {
+                        pageResults: allPageResults
+                    } : {});
+                    return [
+                        2,
+                        result
+                    ];
+            }
+        });
+    })();
 }
 
 function asyncGeneratorStep$g(gen, resolve, reject, _next, _throw, key, arg) {
@@ -1522,7 +2462,7 @@ function _ts_generator$f(thisArg, body) {
     }
 };
 
-function _array_like_to_array$7(arr, len) {
+function _array_like_to_array$8(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
@@ -1566,19 +2506,19 @@ function _non_iterable_rest$4() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
 function _sliced_to_array$4(arr, i) {
-    return _array_with_holes$4(arr) || _iterable_to_array_limit$4(arr, i) || _unsupported_iterable_to_array$7(arr, i) || _non_iterable_rest$4();
+    return _array_with_holes$4(arr) || _iterable_to_array_limit$4(arr, i) || _unsupported_iterable_to_array$8(arr, i) || _non_iterable_rest$4();
 }
 function _type_of$1(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _unsupported_iterable_to_array$7(o, minLen) {
+function _unsupported_iterable_to_array$8(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$7(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$8(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$7(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$8(o, minLen);
 }
 /**
  * Resolves the manifest entry for `modelType`. Lookup tries
@@ -1717,6 +2657,31 @@ function isPlainObject(value) {
     return proto === Object.prototype || proto === null;
 }
 
+function _array_like_to_array$7(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_without_holes$5(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$7(arr);
+}
+function _iterable_to_array$5(iter) {
+    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
+}
+function _non_iterable_spread$5() {
+    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _to_consumable_array$5(arr) {
+    return _array_without_holes$5(arr) || _iterable_to_array$5(arr) || _unsupported_iterable_to_array$7(arr) || _non_iterable_spread$5();
+}
+function _unsupported_iterable_to_array$7(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array$7(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$7(o, minLen);
+}
 /**
  * Default command name for the model-decode command. Top-level so it stays
  * out of the API-call namespace owned by `model <model> <action>`.
@@ -1809,7 +2774,7 @@ function runHandler$1(manifest, argv) {
         }
         decoded.push(toSegment(prefix, id, entry));
     }
-    var leaf = decoded[decoded.length - 1];
+    var leaf = decoded.at(-1);
     var ancestors = decoded.slice(0, -1);
     return {
         key: trimmed,
@@ -1846,59 +2811,48 @@ function toSegment(prefix, id, entry) {
  * @returns the formatted block with a trailing newline.
  * @__NO_SIDE_EFFECTS__
  */ function renderDecodedKey(decoded) {
-    var lines = [];
-    var leaf = decoded.leaf;
-    if (leaf.modelName) {
-        lines.push("Model: ".concat(leaf.modelName));
-        if (leaf.identityConst) lines.push("identityConst: ".concat(leaf.identityConst));
-        if (leaf.modelType) lines.push("modelType: ".concat(leaf.modelType));
-        lines.push("prefix: ".concat(leaf.prefix));
-        lines.push("id: ".concat(leaf.id));
-        if (leaf.modelGroup) lines.push("modelGroup: ".concat(leaf.modelGroup));
-        if (leaf.parentIdentityConst) lines.push("parentIdentityConst: ".concat(leaf.parentIdentityConst));
-        if (leaf.sourcePackage) {
-            var sourceSuffix = leaf.sourceFile ? " (".concat(leaf.sourceFile, ")") : '';
-            lines.push("source: ".concat(leaf.sourcePackage).concat(sourceSuffix));
-        }
-    } else {
-        lines.push("Model: <unknown — prefix '".concat(leaf.prefix, "' not in manifest>"));
-        lines.push("prefix: ".concat(leaf.prefix));
-        lines.push("id: ".concat(leaf.id));
-    }
+    var lines = _to_consumable_array$5(renderLeafLines(decoded.leaf));
     if (decoded.ancestors.length > 0) {
-        lines.push('');
-        lines.push('Parent chain:');
-        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-        try {
-            for(var _iterator = decoded.ancestors[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-                var ancestor = _step.value;
-                if (ancestor.modelName) {
-                    lines.push("- ".concat(ancestor.modelName, " — prefix ").concat(ancestor.prefix, ", id ").concat(ancestor.id));
-                } else {
-                    lines.push("- <unknown> — prefix ".concat(ancestor.prefix, ", id ").concat(ancestor.id));
-                }
-            }
-        } catch (err) {
-            _didIteratorError = true;
-            _iteratorError = err;
-        } finally{
-            try {
-                if (!_iteratorNormalCompletion && _iterator.return != null) {
-                    _iterator.return();
-                }
-            } finally{
-                if (_didIteratorError) {
-                    throw _iteratorError;
-                }
-            }
-        }
+        var _lines;
+        (_lines = lines).push.apply(_lines, [
+            '',
+            'Parent chain:'
+        ].concat(_to_consumable_array$5(decoded.ancestors.map(renderAncestorLine))));
     }
     if (decoded.unresolvedPrefixes.length > 0) {
-        lines.push('');
-        lines.push("Unresolved prefix".concat(decoded.unresolvedPrefixes.length === 1 ? '' : 'es', ": ").concat(decoded.unresolvedPrefixes.join(', '), ". Run `model-info` to list known models."));
+        var suffix = decoded.unresolvedPrefixes.length === 1 ? '' : 'es';
+        lines.push('', "Unresolved prefix".concat(suffix, ": ").concat(decoded.unresolvedPrefixes.join(', '), ". Run `model-info` to list known models."));
     }
     return lines.join('\n') + '\n';
 }
+function renderLeafLines(leaf) {
+    if (!leaf.modelName) {
+        return [
+            "Model: <unknown — prefix '".concat(leaf.prefix, "' not in manifest>"),
+            "prefix: ".concat(leaf.prefix),
+            "id: ".concat(leaf.id)
+        ];
+    }
+    var lines = [
+        "Model: ".concat(leaf.modelName)
+    ];
+    if (leaf.identityConst) lines.push("identityConst: ".concat(leaf.identityConst));
+    if (leaf.modelType) lines.push("modelType: ".concat(leaf.modelType));
+    lines.push("prefix: ".concat(leaf.prefix), "id: ".concat(leaf.id));
+    if (leaf.modelGroup) lines.push("modelGroup: ".concat(leaf.modelGroup));
+    if (leaf.parentIdentityConst) lines.push("parentIdentityConst: ".concat(leaf.parentIdentityConst));
+    if (leaf.sourcePackage) {
+        var sourceSuffix = leaf.sourceFile ? " (".concat(leaf.sourceFile, ")") : '';
+        lines.push("source: ".concat(leaf.sourcePackage).concat(sourceSuffix));
+    }
+    return lines;
+}
+function renderAncestorLine(ancestor) {
+    if (ancestor.modelName) {
+        return "- ".concat(ancestor.modelName, " — prefix ").concat(ancestor.prefix, ", id ").concat(ancestor.id);
+    }
+    return "- <unknown> — prefix ".concat(ancestor.prefix, ", id ").concat(ancestor.id);
+}
 
 function _array_like_to_array$6(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
@@ -2121,7 +3075,7 @@ function inferModelTypeFromKeys(keys, manifest) {
 function manifestPrefixList(manifest) {
     var prefixes = manifest.map(function(e) {
         return e.collectionPrefix;
-    }).sort();
+    }).sort(compareStrings);
     return prefixes.join(', ');
 }
 
@@ -6638,20 +7592,18 @@ function _unsupported_iterable_to_array$2(o, minLen) {
  * @returns the formatted summary as a single string with a trailing newline.
  * @__NO_SIDE_EFFECTS__
  */ function renderModelManifestEntry(entry) {
-    var lines = [];
-    lines.push("# ".concat(entry.modelType) + (entry.modelGroup ? " \xb7 group ".concat(entry.modelGroup) : ''));
-    lines.push("Identity: ".concat(entry.identityConst));
-    lines.push("Collection prefix: ".concat(entry.collectionPrefix));
+    var groupSuffix = entry.modelGroup ? " \xb7 group ".concat(entry.modelGroup) : '';
+    var lines = [
+        "# ".concat(entry.modelType).concat(groupSuffix),
+        "Identity: ".concat(entry.identityConst),
+        "Collection prefix: ".concat(entry.collectionPrefix)
+    ];
     if (entry.parentIdentityConst) lines.push("Parent identity: ".concat(entry.parentIdentityConst));
-    lines.push("Source package: ".concat(entry.sourcePackage));
-    lines.push("Source file: ".concat(entry.sourceFile));
+    lines.push("Source package: ".concat(entry.sourcePackage), "Source file: ".concat(entry.sourceFile));
     if (entry.description) {
-        lines.push('');
-        lines.push(entry.description);
+        lines.push('', entry.description);
     }
-    lines.push('');
-    lines.push("Fields (".concat(entry.fields.length, "):"));
-    lines.push(renderFieldsTree(entry.fields, 0));
+    lines.push('', "Fields (".concat(entry.fields.length, "):"), renderFieldsTree(entry.fields, 0));
     return lines.join('\n') + '\n';
 }
 /**
@@ -6665,10 +7617,18 @@ function _unsupported_iterable_to_array$2(o, minLen) {
     return renderFieldsTree(entry.fields, 0) + '\n';
 }
 function renderFieldsTree(fields, indent) {
-    var out = [];
     var includeConverter = fields.some(function(f) {
         return f.converter !== undefined;
     });
+    var tableBlock = indentLines$1(renderTable(buildFieldsTableRows(fields, includeConverter)), indent);
+    var nestedBlocks = fields.flatMap(function(field) {
+        return renderNestedFieldBlock(field, indent);
+    });
+    return [
+        tableBlock
+    ].concat(_to_consumable_array$2(nestedBlocks)).join('\n');
+}
+function buildFieldsTableRows(fields, includeConverter) {
     var header = includeConverter ? [
         'NAME',
         'LONG NAME',
@@ -6681,63 +7641,34 @@ function renderFieldsTree(fields, indent) {
         'TYPE',
         'OPTIONAL'
     ];
-    var rows = [
+    return [
         header
+    ].concat(_to_consumable_array$2(fields.map(function(field) {
+        return buildFieldRow(field, includeConverter);
+    })));
+}
+function buildFieldRow(field, includeConverter) {
+    var _field_tsType;
+    var row = [
+        field.name,
+        field.longName,
+        (_field_tsType = field.tsType) !== null && _field_tsType !== void 0 ? _field_tsType : '',
+        field.optional ? 'yes' : 'no'
     ];
-    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-    try {
-        for(var _iterator = fields[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-            var field = _step.value;
-            var _field_tsType;
-            var row = [
-                field.name,
-                field.longName,
-                (_field_tsType = field.tsType) !== null && _field_tsType !== void 0 ? _field_tsType : '',
-                field.optional ? 'yes' : 'no'
-            ];
-            if (includeConverter) row.push(field.converter ? truncate(field.converter, 60) : '');
-            rows.push(row);
-        }
-    } catch (err) {
-        _didIteratorError = true;
-        _iteratorError = err;
-    } finally{
-        try {
-            if (!_iteratorNormalCompletion && _iterator.return != null) {
-                _iterator.return();
-            }
-        } finally{
-            if (_didIteratorError) {
-                throw _iteratorError;
-            }
-        }
-    }
-    out.push(indentLines$1(renderTable(rows), indent));
-    var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
-    try {
-        for(var _iterator1 = fields[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
-            var field1 = _step1.value;
-            if (field1.nestedFields && field1.nestedFields.length > 0) {
-                var label = field1.nestedIsArray ? 'array element' : 'sub-object';
-                out.push(indentLines$1("↳ ".concat(field1.name, " (").concat(label, ", ").concat(field1.nestedFields.length, " field").concat(field1.nestedFields.length === 1 ? '' : 's', ")"), indent + 2));
-                out.push(renderFieldsTree(field1.nestedFields, indent + 4));
-            }
-        }
-    } catch (err) {
-        _didIteratorError1 = true;
-        _iteratorError1 = err;
-    } finally{
-        try {
-            if (!_iteratorNormalCompletion1 && _iterator1.return != null) {
-                _iterator1.return();
-            }
-        } finally{
-            if (_didIteratorError1) {
-                throw _iteratorError1;
-            }
-        }
+    if (includeConverter) {
+        row.push(field.converter ? truncate(field.converter, 60) : '');
     }
-    return out.join('\n');
+    return row;
+}
+function renderNestedFieldBlock(field, indent) {
+    var nested = field.nestedFields;
+    if (!nested || nested.length === 0) return [];
+    var label = field.nestedIsArray ? 'array element' : 'sub-object';
+    var plural = nested.length === 1 ? '' : 's';
+    return [
+        indentLines$1("↳ ".concat(field.name, " (").concat(label, ", ").concat(nested.length, " field").concat(plural, ")"), indent + 2),
+        renderFieldsTree(nested, indent + 4)
+    ];
 }
 function renderTable(rows) {
     if (rows.length === 0) return '';
@@ -7200,6 +8131,21 @@ function _ts_generator$6(thisArg, body) {
         })();
     };
 }
+/**
+ * Test-only middleware that skips OIDC discovery, disk token loading, and token refresh, attaching
+ * a pre-built {@link CliContext} directly via {@link setCliContext}.
+ *
+ * @internal Intended for use by `@dereekb/dbx-cli/test`. Not for production wiring.
+ *
+ * @param input - The pre-built context to attach on every invocation.
+ * @param input.cliContext - The {@link CliContext} that will be attached via {@link setCliContext}.
+ * @returns A yargs middleware function that always sets the provided context.
+ * @__NO_SIDE_EFFECTS__
+ */ function createPassthroughAuthMiddleware(input) {
+    return function() {
+        setCliContext(input.cliContext);
+    };
+}
 
 function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -8300,7 +9246,7 @@ function _ts_generator$2(thisArg, body) {
  * @returns The configured yargs `Argv` ready to be `.parse()`-d.
  * @__NO_SIDE_EFFECTS__
  */ function createCli(input) {
-    var _input_configCommands, _input_apiCommands, _input_argv;
+    var _input_configCommands, _input_actionCommands, _input_apiCommands, _input_argv;
     var cliName = input.cliName;
     var defaultEnvs = input.defaultEnvs;
     var builtInConfigCommands = [
@@ -8334,10 +9280,19 @@ function _ts_generator$2(thisArg, body) {
     if (input.disableModelGet !== true) {
         builtInApiCommands.push(getCommand, getManyCommand);
     }
-    var allApiCommands = _to_consumable_array$1(builtInApiCommands).concat(_to_consumable_array$1((_input_apiCommands = input.apiCommands) !== null && _input_apiCommands !== void 0 ? _input_apiCommands : []));
+    var actionCommands = buildActionCommands((_input_actionCommands = input.actionCommands) !== null && _input_actionCommands !== void 0 ? _input_actionCommands : []);
+    var allApiCommands = _to_consumable_array$1(builtInApiCommands).concat(_to_consumable_array$1((_input_apiCommands = input.apiCommands) !== null && _input_apiCommands !== void 0 ? _input_apiCommands : []), _to_consumable_array$1(actionCommands));
     var skipCommandNames = new Set(allConfigCommands.map(function(c) {
         return commandName(c);
     }));
+    var authMiddleware = input.testCliContext ? createPassthroughAuthMiddleware({
+        cliContext: input.testCliContext
+    }) : createAuthMiddleware({
+        cliName: cliName,
+        skipCommands: skipCommandNames,
+        defaultEnvs: defaultEnvs,
+        modelManifest: input.modelManifest
+    });
     return yargs((_input_argv = input.argv) !== null && _input_argv !== void 0 ? _input_argv : hideBin(process.argv)).scriptName(cliName).usage('$0 <command> [options]').option('verbose', {
         alias: 'v',
         type: 'boolean',
@@ -8382,12 +9337,7 @@ function _ts_generator$2(thisArg, body) {
         global: true,
         describe: 'Show the full options table in --help even when --data-help is in focus mode'
     }).middleware([
-        createAuthMiddleware({
-            cliName: cliName,
-            skipCommands: skipCommandNames,
-            defaultEnvs: defaultEnvs,
-            modelManifest: input.modelManifest
-        }),
+        authMiddleware,
         createOutputMiddleware({
             cliName: cliName,
             skipCommands: skipCommandNames
@@ -8938,7 +9888,7 @@ function buildModelCommand(model, entries, context) {
                     }
                 }
             }
-            yargs.command(buildPerModelGetCommand(model));
+            yargs.command(buildPerModelGetCommand(model, context.modelManifest));
             hideGlobalOptions(yargs, context.hideOnFocus);
             return yargs.demandCommand(1, 'Please specify an action.');
         },
@@ -8948,24 +9898,86 @@ function buildModelCommand(model, entries, context) {
     };
 }
 /**
- * Synthetic per-model `get <key>` sub-command appended to every model's command tree.
+ * Resolves a per-model `get` positional into the full Firestore key the backend expects.
+ *
+ * The backend's `ModelApiController.getOne` only accepts full `prefix/id` keys, so a bare doc id
+ * has to be expanded before the HTTP call. The expansion is only safe for top-level (root) models
+ * whose `collectionPrefix` is enough to address the document — subcollection models also need the
+ * parent prefix/id and cannot be reconstructed from a bare id alone.
  *
- * The parent `model <name>` already fixes the `modelType`, so this command just passes the bare
- * `key` positional through to `context.getModel(modelType, key)`. Supports both the full
- * `<prefix>/<id>` form and a bare doc id (when the user knows the modelType from the parent).
- */ function buildPerModelGetCommand(model) {
+ * Rules:
+ * 1. Keys containing `/` are treated as full keys and passed through verbatim.
+ * 2. Bare ids on a top-level model resolve to `<collectionPrefix>/<id>` via the manifest.
+ * 3. Bare ids on a subcollection model throw — the parent path is required.
+ * 4. When the manifest is not wired, bare ids pass through unchanged (preserves the old behavior
+ *    so the CLI still works without `modelManifest` even though the backend will reject the call).
+ *
+ * @param model - The persisted model type (e.g. `profile`).
+ * @param key - The trimmed `<key>` positional from yargs — full `prefix/id` or bare doc id.
+ * @param manifest - The generated model manifest used to look up the model's `collectionPrefix`
+ *   and `parentIdentityConst`. When omitted, the key passes through unchanged.
+ * @returns The resolved Firestore model key ready for `context.getModel(model, key)`.
+ * @__NO_SIDE_EFFECTS__
+ */ function resolvePerModelGetKey(model, key, manifest) {
+    var result = key;
+    if (!key.includes('/')) {
+        var entry = manifest === null || manifest === void 0 ? void 0 : manifest.find(function(e) {
+            return e.modelType === model;
+        });
+        if (entry) {
+            if (entry.parentIdentityConst) {
+                throw new CliError({
+                    message: "get: model '".concat(model, "' is a subcollection — bare doc id '").concat(key, "' is ambiguous without the parent path. Provide a full key (e.g. '<parentPrefix>/<parentId>/").concat(entry.collectionPrefix, "/").concat(key, "')."),
+                    code: 'INVALID_ARGUMENT'
+                });
+            }
+            result = "".concat(entry.collectionPrefix, "/").concat(key);
+        }
+    }
+    return result;
+}
+/**
+ * Synthetic per-model `get` sub-command appended to every model's command tree.
+ *
+ * The parent `model <name>` already fixes the `modelType`. The command shape varies by whether
+ * the model is root-level (no parent) or a subcollection — only root models can address documents
+ * by bare doc id, so subcollection models keep the `<key>` positional (full `prefix/id` required):
+ *
+ * - **Root model with a wired manifest entry** — `get <id-or-key>` accepts either a bare doc id
+ *   (expanded to `<collectionPrefix>/<id>` via {@link resolvePerModelGetKey}) or a full
+ *   `<prefix>/<id>` key.
+ * - **Subcollection model with a wired manifest entry** — `get <key>` requires the full
+ *   `<parentPrefix>/<parentId>/<childPrefix>/<childId>` path. Bare doc ids are rejected with a
+ *   clear error because the parent path cannot be reconstructed from the id alone.
+ * - **No wired model manifest** — falls back to `get <key>`; the key is forwarded verbatim and
+ *   the backend will reject anything that is not a full `prefix/id` key.
+ *
+ * @param model - The persisted model type owning this `get` subcommand.
+ * @param manifest - The generated model manifest used by {@link resolvePerModelGetKey} to expand
+ *   bare doc ids into full keys for top-level models and to pick the command shape.
+ * @returns The yargs `CommandModule` registered under the model's command tree.
+ */ function buildPerModelGetCommand(model, manifest) {
+    var entry = manifest === null || manifest === void 0 ? void 0 : manifest.find(function(e) {
+        return e.modelType === model;
+    });
+    var isRootModel = entry != null && !entry.parentIdentityConst;
+    var positionalName = isRootModel ? 'idOrKey' : 'key';
+    var placeholder = isRootModel ? '<id-or-key>' : '<key>';
+    var subcollectionNote = entry ? ' for this subcollection model' : '';
+    var positionalDescribe = isRootModel ? "Firestore key for the ".concat(model, " document — bare doc id (resolved to `").concat(entry.collectionPrefix, "/<id>`) or full `prefix/id`.") : "Firestore key for the ".concat(model, " document (full `prefix/id` — bare doc id is not supported").concat(subcollectionNote, ").");
+    var commandDescribe = isRootModel ? "Read a single ".concat(model, " document by id or key.") : "Read a single ".concat(model, " document by key.");
     return {
-        command: 'get <key>',
-        describe: "Read a single ".concat(model, " document by key."),
+        command: "get ".concat(placeholder),
+        describe: commandDescribe,
         builder: function builder(yargs) {
-            return yargs.positional('key', {
+            return yargs.positional(positionalName, {
                 type: 'string',
-                describe: "Firestore key for the ".concat(model, " document (full `prefix/id` or bare id).")
+                describe: positionalDescribe
             });
         },
         handler: function handler(argv) {
             return _async_to_generator$1(function() {
-                var ctx, key, result, e;
+                var ctx, raw, key, resolvedKey, result, e;
                 return _ts_generator$1(this, function(_state) {
                     switch(_state.label){
                         case 0:
@@ -8976,16 +9988,18 @@ function buildModelCommand(model, entries, context) {
                                 3
                             ]);
                             ctx = requireCliContext();
-                            key = typeof argv.key === 'string' ? argv.key.trim() : '';
+                            raw = argv[positionalName];
+                            key = typeof raw === 'string' ? raw.trim() : '';
                             if (key.length === 0) {
                                 throw new CliError({
-                                    message: "get: missing required <key> positional for model '".concat(model, "'."),
+                                    message: "get: missing required ".concat(placeholder, " positional for model '").concat(model, "'."),
                                     code: 'INVALID_ARGUMENT'
                                 });
                             }
+                            resolvedKey = resolvePerModelGetKey(model, key, manifest);
                             return [
                                 4,
-                                ctx.getModel(model, key)
+                                ctx.getModel(model, resolvedKey)
                             ];
                         case 1:
                             result = _state.sent();
@@ -9174,8 +10188,7 @@ function buildParamsSection(entry) {
         lines.push(indentLines(entry.paramsTypeDescription, '  '));
     }
     if (entry.paramsFields && entry.paramsFields.length > 0) {
-        lines.push('');
-        lines.push('Fields:');
+        lines.push('', 'Fields:');
         var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
         try {
             for(var _iterator = entry.paramsFields[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
@@ -9215,8 +10228,7 @@ function buildResultSection(entry) {
         lines.push(indentLines(entry.resultTypeDescription, '  '));
     }
     if (entry.resultFields && entry.resultFields.length > 0) {
-        lines.push('');
-        lines.push('Fields:');
+        lines.push('', 'Fields:');
         var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
         try {
             for(var _iterator = entry.resultFields[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
@@ -9312,6 +10324,7 @@ function renderJsonSchemaSection(entry) {
         // method that emits the bare JSON Schema value, e.g. `false`). Round-trip
         // through JSON to invoke those `toJSON()` callbacks before pruning;
         // `structuredClone` would not call them.
+        // NOSONAR (typescript:S7784): structuredClone bypasses toJSON()
         var normalized = JSON.parse(JSON.stringify(raw));
         var pruned = pruneFalseUnionBranches(normalized);
         result = "Params Schema (JSON Schema):\n".concat(JSON.stringify(pruned, null, 2));
@@ -9953,4 +10966,4 @@ function printPaginatedOutput(input) {
     })();
 }
 
-export { CALL_MODEL_API_PATH, CliError, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, PROMPT_CANCELLED_ERROR_CODE, STANDARD_GLOBAL_OPTION_NAMES, applyEnvVarOverrides, buildAuthorizationUrl, buildCliPaths, buildDumpFilePath, buildErrorOutput, buildManifestCommands, buildModelDecodeCommand, buildModelInfoCommand, buildOidcDiscoveryCandidates, callModelOverHttp, callPassthroughCommand, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createAuthCommand, createAuthMiddleware, createCallModelCommand, createCli, createCliContext, createCliTokenCacheStore, createContextSlot, createDoctorCommand, createEnvCommand, createOutputCommand, createOutputMiddleware, decodeFirestoreModelKey, defaultDoctorChecks, detectDataHelpFormat, detectHelpMode, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, fetchUserInfo, filterReadOnlyModelScopes, findCliEnvDefault, findCliModelManifestEntry, generateOAuthState, generatePkceMaterial, getCliContext, getCommand, getManyCommand, getModelOverHttp, getMultipleModelsOverHttp, getOutputOptions, isCliEnvConfigComplete, isTokenExpired, loadCliConfig, maskSecret, mergeCliConfig, mergeCliEnvWithDefault, mergeOutputConfig, openStreamingDump, outputError, outputResult, parseGetArgs, parseGetManyArgs, parsePastedRedirect, pickFields, promptLine, refreshAccessToken, renderDecodedKey, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, requireCliContext, resolveActiveEnvName, resolveCliModel, resolveOutputConfig, revokeToken, runCli, runPaginatedList, sanitizeString, saveCliConfig, setCliContext, withCallModelArgs, withEnv, withMultiplePages, withOutput, wrapCommandHandler };
+export { CALL_MODEL_API_PATH, CliError, DEFAULT_ACTION_COMMAND_NAME, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, PROMPT_CANCELLED_ERROR_CODE, STANDARD_GLOBAL_OPTION_NAMES, applyEnvVarOverrides, buildActionCommands, buildAuthorizationUrl, buildCliPaths, buildDumpFilePath, buildErrorOutput, buildManifestCommands, buildModelDecodeCommand, buildModelInfoCommand, buildOidcDiscoveryCandidates, callModelOverHttp, callPassthroughCommand, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createActionCommand, createAuthCommand, createAuthMiddleware, createCallModelCommand, createCli, createCliContext, createCliTokenCacheStore, createContextSlot, createDoctorCommand, createEnvCommand, createOutputCommand, createOutputMiddleware, createPassthroughAuthMiddleware, decodeFirestoreModelKey, defaultDoctorChecks, detectDataHelpFormat, detectHelpMode, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, fetchUserInfo, filterReadOnlyModelScopes, findCliEnvDefault, findCliModelManifestEntry, generateOAuthState, generatePkceMaterial, getCliContext, getCommand, getManyCommand, getModelOverHttp, getMultipleModelsOverHttp, getOutputOptions, isCliEnvConfigComplete, isTokenExpired, iterateDbxCliCallModel, loadCliConfig, maskSecret, mergeCliConfig, mergeCliEnvWithDefault, mergeOutputConfig, openStreamingDump, outputError, outputResult, parseGetArgs, parseGetManyArgs, parsePastedRedirect, pickFields, promptLine, refreshAccessToken, renderDecodedKey, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, requireCliContext, resolveActiveEnvName, resolveCliModel, resolveOutputConfig, resolvePerModelGetKey, revokeToken, runCli, runPaginatedList, sanitizeString, saveCliConfig, setCliContext, withCallModelArgs, withEnv, withMultiplePages, withOutput, wrapCommandHandler };