@dereekb/dbx-cli 13.40.0 → 13.41.0

package/index.esm.js

@@ -91,7 +91,7 @@ function _construct(Parent, args, Class) {
     }
     return _construct.apply(null, arguments);
 }
-function _define_property$W(obj, key, value) {
+function _define_property$X(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -140,7 +140,7 @@ function _iterable_to_array$15(iter) {
 function _non_iterable_spread$15() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$W(target) {
+function _object_spread$X(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -150,12 +150,12 @@ function _object_spread$W(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$W(target, key, source[key]);
+            _define_property$X(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$E(object, enumerableOnly) {
+function ownKeys$F(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -163,12 +163,12 @@ function ownKeys$E(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$E(target, source) {
+function _object_spread_props$F(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$E(Object(source)).forEach(function(key) {
+        ownKeys$F(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -445,7 +445,7 @@ var _timeoutMs = DEFAULT_CLI_HTTP_TIMEOUT_MS;
                             return localController.abort();
                         }, timeoutMs);
                         (_timeoutHandle_unref = timeoutHandle.unref) === null || _timeoutHandle_unref === void 0 ? void 0 : _timeoutHandle_unref.call(timeoutHandle);
-                        finalInit = _object_spread_props$E(_object_spread$W({}, init), {
+                        finalInit = _object_spread_props$F(_object_spread$X({}, init), {
                             signal: localController.signal
                         });
                     }
@@ -609,7 +609,7 @@ function dumpResponse(data, meta) {
     if (!filePath) {
         return;
     }
-    var content = _object_spread$W({
+    var content = _object_spread$X({
         ok: true,
         data: data
     }, meta ? {
@@ -686,7 +686,7 @@ function stringifyEnvelope(value) {
  */ function outputResult(data, meta) {
     dumpResponse(data, meta);
     var outputData = _outputOptions.pick ? pickFields(data, _outputOptions.pick) : data;
-    var output = _object_spread$W({
+    var output = _object_spread$X({
         ok: true,
         data: outputData
     }, meta ? {
@@ -715,7 +715,7 @@ function stringifyEnvelope(value) {
         var _this;
         _this = _call_super(this, CliError, [
             input.message
-        ]), _define_property$W(_this, "code", void 0), _define_property$W(_this, "suggestion", void 0);
+        ]), _define_property$X(_this, "code", void 0), _define_property$X(_this, "suggestion", void 0);
         _this.name = 'CliError';
         _this.code = input.code;
         _this.suggestion = input.suggestion;
@@ -743,7 +743,7 @@ function stringifyEnvelope(value) {
     if (mapped) {
         result = mapped;
     } else if (_instanceof$u(error, CliError)) {
-        result = _object_spread$W({
+        result = _object_spread$X({
             ok: false,
             error: sanitizeString(error.message),
             code: error.code
@@ -803,7 +803,7 @@ function _async_to_generator$1p(fn) {
         });
     };
 }
-function _define_property$V(obj, key, value) {
+function _define_property$W(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -822,7 +822,7 @@ function _iterable_to_array$14(iter) {
 function _non_iterable_spread$14() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$V(target) {
+function _object_spread$W(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -832,12 +832,12 @@ function _object_spread$V(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$V(target, key, source[key]);
+            _define_property$W(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$D(object, enumerableOnly) {
+function ownKeys$E(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -845,12 +845,12 @@ function ownKeys$D(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$D(target, source) {
+function _object_spread_props$E(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$D(Object(source)).forEach(function(key) {
+        ownKeys$E(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -1117,7 +1117,7 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
                     chunk = _step.value;
                     return [
                         4,
-                        getMultipleModelsOverHttp(_object_spread_props$D(_object_spread$V({}, input), {
+                        getMultipleModelsOverHttp(_object_spread_props$E(_object_spread$W({}, input), {
                             keys: chunk
                         }))
                     ];
@@ -1177,9 +1177,9 @@ function requestJson(input) {
             switch(_state.label){
                 case 0:
                     hasJsonBody = input.jsonBody !== undefined;
-                    init = _object_spread$V({
+                    init = _object_spread$W({
                         method: input.method,
-                        headers: _object_spread$V({
+                        headers: _object_spread$W({
                             Accept: 'application/json',
                             Authorization: "Bearer ".concat(input.accessToken)
                         }, hasJsonBody ? {
@@ -1840,7 +1840,7 @@ function _array_like_to_array$19(arr, len) {
 function _array_without_holes$12(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$19(arr);
 }
-function _define_property$U(obj, key, value) {
+function _define_property$V(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -1859,7 +1859,7 @@ function _iterable_to_array$12(iter) {
 function _non_iterable_spread$12() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$U(target) {
+function _object_spread$V(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -1869,12 +1869,12 @@ function _object_spread$U(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$U(target, key, source[key]);
+            _define_property$V(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$C(object, enumerableOnly) {
+function ownKeys$D(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -1882,12 +1882,12 @@ function ownKeys$C(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$C(target, source) {
+function _object_spread_props$D(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$C(Object(source)).forEach(function(key) {
+        ownKeys$D(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -2035,7 +2035,7 @@ function _unsupported_iterable_to_array$19(o, minLen) {
     if (env || defaultEnv) {
         var _nonEmpty, _nonEmpty1, _nonEmpty2, _nonEmpty3;
         var emulators = mergeCliFirebaseEmulatorsConfig(env === null || env === void 0 ? void 0 : env.emulators, defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.emulators);
-        result = _object_spread$U({
+        result = _object_spread$V({
             apiKey: (_nonEmpty = nonEmpty(env === null || env === void 0 ? void 0 : env.apiKey)) !== null && _nonEmpty !== void 0 ? _nonEmpty : nonEmpty(defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.apiKey),
             authDomain: (_nonEmpty1 = nonEmpty(env === null || env === void 0 ? void 0 : env.authDomain)) !== null && _nonEmpty1 !== void 0 ? _nonEmpty1 : nonEmpty(defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.authDomain),
             projectId: (_nonEmpty2 = nonEmpty(env === null || env === void 0 ? void 0 : env.projectId)) !== null && _nonEmpty2 !== void 0 ? _nonEmpty2 : nonEmpty(defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.projectId),
@@ -2130,7 +2130,7 @@ function nonEmpty(value) {
     } else {
         var _ref, _ref1;
         var _input_env, _input_env1, _input_env2, _input_env3, _input_env4, _input_env5, _input_env6, _input_env7, _input_env8;
-        var firebase = mergeCliFirebaseConfig(_object_spread$U({
+        var firebase = mergeCliFirebaseConfig(_object_spread$V({
             apiKey: firebaseApiKey,
             authDomain: firebaseAuthDomain,
             projectId: firebaseProjectId,
@@ -2142,7 +2142,7 @@ function nonEmpty(value) {
                 firestorePort: firebaseFirestoreEmulatorPort
             }
         } : undefined), (_input_env = input.env) === null || _input_env === void 0 ? void 0 : _input_env.firebase);
-        result = _object_spread$U({
+        result = _object_spread$V({
             apiBaseUrl: (_ref = apiBaseUrl !== null && apiBaseUrl !== void 0 ? apiBaseUrl : (_input_env1 = input.env) === null || _input_env1 === void 0 ? void 0 : _input_env1.apiBaseUrl) !== null && _ref !== void 0 ? _ref : '',
             oidcIssuer: (_ref1 = oidcIssuer !== null && oidcIssuer !== void 0 ? oidcIssuer : (_input_env2 = input.env) === null || _input_env2 === void 0 ? void 0 : _input_env2.oidcIssuer) !== null && _ref1 !== void 0 ? _ref1 : '',
             appClientUrl: appClientUrl !== null && appClientUrl !== void 0 ? appClientUrl : (_input_env3 = input.env) === null || _input_env3 === void 0 ? void 0 : _input_env3.appClientUrl,
@@ -2191,7 +2191,7 @@ function parsePort(value) {
     if (refreshToken) {
         var accessToken = nonEmpty(process.env["".concat(prefix, "_ACCESS_TOKEN")]);
         var scope = nonEmpty(process.env["".concat(prefix, "_TOKEN_SCOPE")]);
-        result = _object_spread_props$C(_object_spread$U({
+        result = _object_spread_props$D(_object_spread$V({
             accessToken: accessToken !== null && accessToken !== void 0 ? accessToken : '',
             refreshToken: refreshToken,
             // No reliable expiry is supplied via env, so force a refresh on first use (expiresAt 0 = expired).
@@ -2293,7 +2293,7 @@ function _async_to_generator$1m(fn) {
         });
     };
 }
-function _define_property$T(obj, key, value) {
+function _define_property$U(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2314,7 +2314,7 @@ function _instanceof$t(left, right) {
         return left instanceof right;
     }
 }
-function _object_spread$T(target) {
+function _object_spread$U(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2324,12 +2324,12 @@ function _object_spread$T(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$T(target, key, source[key]);
+            _define_property$U(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$B(object, enumerableOnly) {
+function ownKeys$C(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -2337,12 +2337,12 @@ function ownKeys$B(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$B(target, source) {
+function _object_spread_props$C(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$B(Object(source)).forEach(function(key) {
+        ownKeys$C(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -2644,7 +2644,7 @@ function _ts_generator$1m(thisArg, body) {
                     _state.sent();
                     return [
                         2,
-                        createCliFirestoreSessionContext(_object_spread_props$B(_object_spread$T({}, input), {
+                        createCliFirestoreSessionContext(_object_spread_props$C(_object_spread$U({}, input), {
                             refreshSession: true
                         }))
                     ];
@@ -3813,7 +3813,7 @@ function _async_to_generator$1i(fn) {
         });
     };
 }
-function _define_property$S(obj, key, value) {
+function _define_property$T(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -3859,7 +3859,7 @@ function _non_iterable_rest$k() {
 function _non_iterable_spread$10() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$S(target) {
+function _object_spread$T(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -3869,12 +3869,12 @@ function _object_spread$S(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$S(target, key, source[key]);
+            _define_property$T(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$A(object, enumerableOnly) {
+function ownKeys$B(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -3882,12 +3882,12 @@ function ownKeys$A(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$A(target, source) {
+function _object_spread_props$B(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$A(Object(source)).forEach(function(key) {
+        ownKeys$B(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -4021,7 +4021,7 @@ var _defaultResponseAdapter = {
     }
 };
 function _defaultBuildRequestData(params, state, limit) {
-    var base = _object_spread$S({}, params);
+    var base = _object_spread$T({}, params);
     if (state.cursorDocumentKey != null) {
         base['cursorDocumentKey'] = state.cursorDocumentKey;
     }
@@ -4045,7 +4045,7 @@ function _runItemTasks(input) {
                             itemIndex: itemIndex
                         };
                     });
-                    taskConfig = _object_spread_props$A(_object_spread$S({
+                    taskConfig = _object_spread_props$B(_object_spread$T({
                         sequential: true,
                         throwError: true
                     }, itemPerformTasksConfig), {
@@ -4302,7 +4302,7 @@ function _evaluateLoopExit(input) {
                         1
                     ];
                 case 4:
-                    result = _object_spread$S({
+                    result = _object_spread$T({
                         totalPages: pageIndex,
                         totalItems: totalItems,
                         hitLimit: hitLimit,
@@ -4352,7 +4352,7 @@ function _async_to_generator$1h(fn) {
         });
     };
 }
-function _define_property$R(obj, key, value) {
+function _define_property$S(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -4365,7 +4365,7 @@ function _define_property$R(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$R(target) {
+function _object_spread$S(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -4375,12 +4375,12 @@ function _object_spread$R(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$R(target, key, source[key]);
+            _define_property$S(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$z(object, enumerableOnly) {
+function ownKeys$A(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -4388,12 +4388,12 @@ function ownKeys$z(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$z(target, source) {
+function _object_spread_props$A(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$z(Object(source)).forEach(function(key) {
+        ownKeys$A(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -4522,7 +4522,7 @@ function _ts_generator$1h(thisArg, body) {
                         case 0:
                             context = requireCliContext();
                             data = spec.buildParams(argv);
-                            params = _object_spread_props$z(_object_spread$R({
+                            params = _object_spread_props$A(_object_spread$S({
                                 modelType: spec.model,
                                 call: spec.verb
                             }, spec.specifier == null ? {} : {
@@ -5051,7 +5051,7 @@ function _async_to_generator$1f(fn) {
         });
     };
 }
-function _define_property$Q(obj, key, value) {
+function _define_property$R(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -5072,7 +5072,7 @@ function _instanceof$s(left, right) {
         return left instanceof right;
     }
 }
-function _object_spread$Q(target) {
+function _object_spread$R(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -5082,12 +5082,12 @@ function _object_spread$Q(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$Q(target, key, source[key]);
+            _define_property$R(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$y(object, enumerableOnly) {
+function ownKeys$z(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -5095,12 +5095,12 @@ function ownKeys$y(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$y(target, source) {
+function _object_spread_props$z(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$y(Object(source)).forEach(function(key) {
+        ownKeys$z(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -5259,7 +5259,7 @@ function _ts_generator$1f(thisArg, body) {
                                 });
                             }
                         }
-                        params = _object_spread_props$y(_object_spread$Q({
+                        params = _object_spread_props$z(_object_spread$R({
                             modelType: argv.model,
                             call: argv.verb
                         }, argv.specifier == null ? {} : {
@@ -5964,7 +5964,7 @@ function _async_to_generator$1e(fn) {
         });
     };
 }
-function _define_property$P(obj, key, value) {
+function _define_property$Q(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -6018,7 +6018,7 @@ function _non_iterable_rest$h() {
 function _non_iterable_spread$Z() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$P(target) {
+function _object_spread$Q(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -6028,7 +6028,7 @@ function _object_spread$P(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$P(target, key, source[key]);
+            _define_property$Q(target, key, source[key]);
         });
     }
     return target;
@@ -6421,7 +6421,7 @@ function requireModels(context) {
  *
  * @__NO_SIDE_EFFECTS__
  */ function cliReadResultMeta(source) {
-    return _object_spread$P({
+    return _object_spread$Q({
         source: source.source,
         via: source.via,
         reason: source.reason
@@ -6580,7 +6580,7 @@ function requireModels(context) {
  * @returns The error entry for the `errors` partition.
  */ function asCliReadErrorEntry(error, modelType, key) {
     var mapped = asKeyShapeError(error, modelType, key);
-    return _object_spread$P({
+    return _object_spread$Q({
         key: key,
         error: mapped.message
     }, _instanceof$q(mapped, CliError) ? {
@@ -7124,7 +7124,7 @@ function _async_to_generator$1b(fn) {
         });
     };
 }
-function _define_property$O(obj, key, value) {
+function _define_property$P(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -7137,7 +7137,7 @@ function _define_property$O(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$O(target) {
+function _object_spread$P(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -7147,7 +7147,7 @@ function _object_spread$O(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$O(target, key, source[key]);
+            _define_property$P(target, key, source[key]);
         });
     }
     return target;
@@ -7326,7 +7326,7 @@ function _ts_generator$1b(thisArg, body) {
                     existing = (_ref = _state.sent()) !== null && _ref !== void 0 ? _ref : {};
                     merged = {
                         activeEnv: (_input_updates_activeEnv = input.updates.activeEnv) !== null && _input_updates_activeEnv !== void 0 ? _input_updates_activeEnv : existing.activeEnv,
-                        envs: input.updates.envs ? _object_spread$O({}, existing.envs, input.updates.envs) : existing.envs,
+                        envs: input.updates.envs ? _object_spread$P({}, existing.envs, input.updates.envs) : existing.envs,
                         output: input.updates.output === undefined ? existing.output : mergeOutputConfig(existing.output, input.updates.output)
                     };
                     return [
@@ -7368,12 +7368,12 @@ function mergeOutputCommandsConfig(existing, updates) {
     var result;
     if ('commands' in updates) {
         if (updates.commands) {
-            var merged = _object_spread$O({}, existing);
+            var merged = _object_spread$P({}, existing);
             var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
             try {
                 for(var _iterator = Object.keys(updates.commands)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
                     var key = _step.value;
-                    merged[key] = _object_spread$O({}, existing === null || existing === void 0 ? void 0 : existing[key], updates.commands[key]);
+                    merged[key] = _object_spread$P({}, existing === null || existing === void 0 ? void 0 : existing[key], updates.commands[key]);
                 }
             } catch (err) {
                 _didIteratorError = true;
@@ -7763,7 +7763,7 @@ function _async_to_generator$19(fn) {
         });
     };
 }
-function _define_property$N(obj, key, value) {
+function _define_property$O(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -7784,7 +7784,7 @@ function _instanceof$p(left, right) {
         return left instanceof right;
     }
 }
-function _object_spread$N(target) {
+function _object_spread$O(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -7794,12 +7794,12 @@ function _object_spread$N(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$N(target, key, source[key]);
+            _define_property$O(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$x(object, enumerableOnly) {
+function ownKeys$y(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -7807,12 +7807,12 @@ function ownKeys$x(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$x(target, source) {
+function _object_spread_props$y(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$x(Object(source)).forEach(function(key) {
+        ownKeys$y(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -7975,7 +7975,7 @@ var cliOidcFetch = function cliOidcFetch(input, init) {
     var result = error;
     if (_instanceof$p(error, OidcRelyingPartyError)) {
         var mapped = OIDC_ERROR_CODE_MAP[error.code];
-        result = new CliError(_object_spread$N({
+        result = new CliError(_object_spread$O({
             message: error.message,
             code: mapped.code
         }, mapped.suggestion ? {
@@ -8023,7 +8023,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcDiscoveryMetadata}. Throws a {@link CliError} (`OIDC_DISCOVERY_FAILED`) when every candidate fails.
  */ function discoverOidcMetadata(input) {
     return withCliErrors(function() {
-        return discoverOidcMetadata$1(_object_spread_props$x(_object_spread$N({}, input), {
+        return discoverOidcMetadata$1(_object_spread_props$y(_object_spread$O({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8035,7 +8035,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcTokenResponse} with access/refresh tokens.
  */ function exchangeAuthorizationCode(input) {
     return withCliErrors(function() {
-        return exchangeAuthorizationCode$1(_object_spread_props$x(_object_spread$N({}, input), {
+        return exchangeAuthorizationCode$1(_object_spread_props$y(_object_spread$O({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8047,7 +8047,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcTokenResponse} with the refreshed access token.
  */ function refreshAccessToken(input) {
     return withCliErrors(function() {
-        return refreshAccessToken$1(_object_spread_props$x(_object_spread$N({}, input), {
+        return refreshAccessToken$1(_object_spread_props$y(_object_spread$O({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8059,7 +8059,7 @@ function withCliErrors(fn) {
  * @returns Resolves when the server returns a non-error status. Throws a {@link CliError} (`TOKEN_REVOCATION_FAILED`) on error.
  */ function revokeToken(input) {
     return withCliErrors(function() {
-        return revokeToken$1(_object_spread_props$x(_object_spread$N({}, input), {
+        return revokeToken$1(_object_spread_props$y(_object_spread$O({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8071,7 +8071,7 @@ function withCliErrors(fn) {
  * @returns The parsed userinfo claims. Throws a {@link CliError} (`USERINFO_FAILED`) on a non-OK response.
  */ function fetchUserInfo(input) {
     return withCliErrors(function() {
-        return fetchUserInfo$1(_object_spread_props$x(_object_spread$N({}, input), {
+        return fetchUserInfo$1(_object_spread_props$y(_object_spread$O({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8083,13 +8083,13 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcSessionInfo}. Throws a {@link CliError} (`SESSION_INFO_FAILED`) on a non-OK response.
  */ function fetchSessionInfo(input) {
     return withCliErrors(function() {
-        return fetchSessionInfo$1(_object_spread_props$x(_object_spread$N({}, input), {
+        return fetchSessionInfo$1(_object_spread_props$y(_object_spread$O({}, input), {
             fetch: cliOidcFetch
         }));
     });
 }
 
-function _define_property$M(obj, key, value) {
+function _define_property$N(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -8102,7 +8102,7 @@ function _define_property$M(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$M(target) {
+function _object_spread$N(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -8112,12 +8112,12 @@ function _object_spread$M(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$M(target, key, source[key]);
+            _define_property$N(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$w(object, enumerableOnly) {
+function ownKeys$x(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -8125,12 +8125,12 @@ function ownKeys$w(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$w(target, source) {
+function _object_spread_props$x(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$w(Object(source)).forEach(function(key) {
+        ownKeys$x(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -8151,7 +8151,7 @@ function _object_spread_props$w(target, source) {
  */ function buildAuthorizationUrl(input) {
     try {
         var _input_scopes;
-        return buildAuthorizationUrl$1(_object_spread_props$w(_object_spread$M({}, input), {
+        return buildAuthorizationUrl$1(_object_spread_props$x(_object_spread$N({}, input), {
             scopes: (_input_scopes = input.scopes) !== null && _input_scopes !== void 0 ? _input_scopes : DEFAULT_CLI_OIDC_SCOPES
         }));
     } catch (e) {
@@ -8313,7 +8313,7 @@ function _async_to_generator$18(fn) {
         });
     };
 }
-function _define_property$L(obj, key, value) {
+function _define_property$M(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -8326,7 +8326,7 @@ function _define_property$L(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$L(target) {
+function _object_spread$M(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -8336,12 +8336,12 @@ function _object_spread$L(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$L(target, key, source[key]);
+            _define_property$M(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$v(object, enumerableOnly) {
+function ownKeys$w(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -8349,12 +8349,12 @@ function ownKeys$v(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$v(target, source) {
+function _object_spread_props$w(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$v(Object(source)).forEach(function(key) {
+        ownKeys$w(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -8781,7 +8781,7 @@ function resolveAuthSetupPrompt(input) {
                                     code: 'AUTH_SETUP_INCOMPLETE'
                                 });
                             }
-                            nextEnv = _object_spread$L({
+                            nextEnv = _object_spread$M({
                                 apiBaseUrl: apiBaseUrl,
                                 oidcIssuer: oidcIssuer,
                                 clientId: clientId,
@@ -8797,8 +8797,8 @@ function resolveAuthSetupPrompt(input) {
                                 mergeCliConfig({
                                     configFilePath: paths.configFilePath,
                                     configDir: paths.configDir,
-                                    updates: _object_spread$L({
-                                        envs: _define_property$L({}, envName, nextEnv)
+                                    updates: _object_spread$M({
+                                        envs: _define_property$M({}, envName, nextEnv)
                                     }, argv.setActive ? {
                                         activeEnv: envName
                                     } : {})
@@ -8963,7 +8963,7 @@ function resolveAuthSetupPrompt(input) {
                             sessionInfo = _state.sent();
                             sessionExpiresAt = (_ref = sessionInfo === null || sessionInfo === void 0 ? void 0 : sessionInfo.expiresAt) !== null && _ref !== void 0 ? _ref : undefined;
                             rotationDisabled = sessionInfo === null || sessionInfo === void 0 ? void 0 : sessionInfo.rotationDisabled;
-                            entry = _object_spread$L({
+                            entry = _object_spread$M({
                                 accessToken: tokenResponse.access_token,
                                 refreshToken: tokenResponse.refresh_token,
                                 idToken: tokenResponse.id_token,
@@ -9353,7 +9353,7 @@ function resolveAuthSetupPrompt(input) {
                             expiresAt = Date.now() + ((_refreshed_expires_in = refreshed.expires_in) !== null && _refreshed_expires_in !== void 0 ? _refreshed_expires_in : 0) * 1000;
                             return [
                                 4,
-                                tokens.set(envName, _object_spread_props$v(_object_spread$L({}, entry), {
+                                tokens.set(envName, _object_spread_props$w(_object_spread$M({}, entry), {
                                     accessToken: refreshed.access_token,
                                     refreshToken: (_refreshed_refresh_token = refreshed.refresh_token) !== null && _refreshed_refresh_token !== void 0 ? _refreshed_refresh_token : entry.refreshToken,
                                     tokenType: (_refreshed_token_type = refreshed.token_type) !== null && _refreshed_token_type !== void 0 ? _refreshed_token_type : entry.tokenType,
@@ -9423,7 +9423,7 @@ function _async_to_generator$17(fn) {
         });
     };
 }
-function _define_property$K(obj, key, value) {
+function _define_property$L(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -9450,7 +9450,7 @@ function _iterable_to_array$Y(iter) {
 function _non_iterable_spread$Y() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$K(target) {
+function _object_spread$L(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -9460,7 +9460,7 @@ function _object_spread$K(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$K(target, key, source[key]);
+            _define_property$L(target, key, source[key]);
         });
     }
     return target;
@@ -9587,7 +9587,7 @@ function _ts_generator$17(thisArg, body) {
                 return _ts_generator$17(this, function(_state) {
                     return [
                         2,
-                        _object_spread$K({
+                        _object_spread$L({
                             name: 'config-file-present',
                             ok: !!config
                         }, config ? {} : {
@@ -9603,7 +9603,7 @@ function _ts_generator$17(thisArg, body) {
                 return _ts_generator$17(this, function(_state) {
                     return [
                         2,
-                        _object_spread$K({
+                        _object_spread$L({
                             name: 'active-env-resolved',
                             ok: !!envName && !!env,
                             detail: {
@@ -9722,7 +9722,7 @@ function _ts_generator$17(thisArg, body) {
                             entry = _state.sent();
                             if (entry) {
                                 expired = isTokenExpired(entry);
-                                result = _object_spread$K({
+                                result = _object_spread$L({
                                     name: 'token-cache-fresh',
                                     ok: !expired,
                                     detail: {
@@ -10100,6 +10100,272 @@ function _ts_generator$17(thisArg, body) {
     };
 }
 
+function _define_property$K(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$K(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$K(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$v(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$v(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$v(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+/**
+ * Resolves how a catalog entry must be invoked, from the rules facts about its collection.
+ *
+ * The rule, in the order it is applied:
+ *
+ * 1. `list` is not `allowed` — no block anywhere grants a list, so the entry is dead at EVERY
+ *    scope. Checked first because no amount of `--parent` scoping rescues it.
+ * 2. `scope: 'COLLECTION_GROUP'` with no `/{path=**}/<collection>/{id}` block — the group shape is
+ *    dead. A NESTED model degrades to `parent-child` (the path-scoped grant that satisfied step 1
+ *    is what `--parent` runs against); a root collection has no parent to scope to, so
+ *    `cliFirestoreCollectionForQuery` rejects `--parent` outright and the mode is `unavailable`.
+ * 3. `scope: 'COLLECTION'` over a subcollection — `--parent` is required by construction, whatever
+ *    the rules say, so the mode is `parent-child` rather than `model`. This step is why the mode is
+ *    NOT a pure permission verdict: the rules permit the read, and it still cannot be run
+ *    unscoped.
+ * 4. Otherwise `model`.
+ *
+ * `unavailable` is a deliberate UNDER-approximation. `list` is merged across every match block that
+ * reaches the collection, so a recursive block that denies `list` while a nested block allows it
+ * reads as `allowed` and the entry is not marked dead. That direction is the safe one — the scanner
+ * can never make this CLI refuse a query that actually works, only miss one that does not.
+ *
+ * @param input - The entry's scope/nesting and the rules facts for its collection.
+ * @returns The mode plus the evidence, with a reason attached whenever the mode is not `model`.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function cliFirestoreQueryModeForRules(input) {
+    var scope = input.scope, isNested = input.isNested, collectionGroup = input.collectionGroup, list = input.list, parentPaths = input.parentPaths;
+    var base = _object_spread$K({
+        list: list,
+        collectionGroup: collectionGroup
+    }, parentPaths && parentPaths.length > 0 ? {
+        parentPaths: parentPaths
+    } : {});
+    var result;
+    if (list !== 'allowed') {
+        var reason = list === 'denied' ? 'list-denied' : 'list-unmatched';
+        result = {
+            mode: 'unavailable',
+            rules: _object_spread_props$v(_object_spread$K({}, base), {
+                reason: reason
+            })
+        };
+    } else if (scope === 'COLLECTION_GROUP' && !collectionGroup) {
+        result = {
+            mode: isNested ? 'parent-child' : 'unavailable',
+            rules: _object_spread_props$v(_object_spread$K({}, base), {
+                reason: 'no-collection-group-rule'
+            })
+        };
+    } else if (scope === 'COLLECTION' && isNested) {
+        result = {
+            mode: 'parent-child',
+            rules: _object_spread_props$v(_object_spread$K({}, base), {
+                reason: 'nested-collection-scope'
+            })
+        };
+    } else {
+        result = {
+            mode: 'model',
+            rules: base
+        };
+    }
+    return result;
+}
+// MARK: Read
+/**
+ * The mode an entry carries, normalized so an absent field reads as `unknown` rather than
+ * `undefined` — a consumer switching over {@link CliFirestoreQueryMode} stays total.
+ *
+ * @param entry - The catalog entry.
+ * @returns The entry's mode, or `unknown` when the manifest was generated without `--rules`.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function cliFirestoreQueryMode(entry) {
+    var _entry_queryMode;
+    return (_entry_queryMode = entry.queryMode) !== null && _entry_queryMode !== void 0 ? _entry_queryMode : 'unknown';
+}
+/**
+ * True when this CLI could actually run the entry — the factory bound AND the rules do not refuse
+ * it outright. Backs `firestore-queries --invocable-only`.
+ *
+ * A `parent-child` entry counts as invocable: `--parent` runs it. An `unknown` one counts too;
+ * nothing is known against it.
+ *
+ * @param entry - The catalog entry.
+ * @returns Whether the entry is worth offering.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function isCliFirestoreQueryInvocable(entry) {
+    return entry.factory != null && cliFirestoreQueryMode(entry) !== 'unavailable';
+}
+// MARK: Runtime gate
+/**
+ * Error code used when a query is refused because `firestore.rules` can never authorize it.
+ */ var FIRESTORE_QUERY_UNAVAILABLE_CODE = 'FIRESTORE_QUERY_UNAVAILABLE';
+/**
+ * Error code used when a `parent-child` query was run without a `--parent`.
+ */ var FIRESTORE_QUERY_PARENT_REQUIRED_CODE = 'FIRESTORE_QUERY_PARENT_REQUIRED';
+/**
+ * Refuses a catalog entry that cannot run as invoked, BEFORE a transport is chosen.
+ *
+ * Mirrors `assertCliModelIsNotServerOnly`, one level finer: that flag is per-MODEL and cannot say
+ * "readable under its parent, dead as a collection group", which is exactly the shape this catches.
+ * Answering locally makes the reason legible and free instead of surfacing as a bare
+ * `Missing or insufficient permissions.` from the rules engine.
+ *
+ * An `unknown` entry passes: the manifest was generated without a `--rules` file, so nothing is
+ * known and a guess would be worse than a round trip.
+ *
+ * @param input - The catalog entry and the `--parent` key, when one was supplied.
+ * @param input.entry - The catalog entry about to run.
+ * @param input.parent - The `--parent` key, when supplied.
+ * @throws {CliError} `FIRESTORE_QUERY_UNAVAILABLE` when no client can run it, or `FIRESTORE_QUERY_PARENT_REQUIRED` when it needs a `--parent` that was not given.
+ */ function assertCliFirestoreQueryCanRun(input) {
+    var entry = input.entry, parent = input.parent;
+    var mode = cliFirestoreQueryMode(entry);
+    if (mode === 'unavailable') {
+        throw new CliError({
+            message: 'Query "'.concat(entry.slug, '" is catalogued but unavailable to a client: ').concat(modeCause(entry)),
+            code: FIRESTORE_QUERY_UNAVAILABLE_CODE,
+            suggestion: unavailableSuggestion(entry)
+        });
+    } else if (mode === 'parent-child' && parent == null) {
+        throw new CliError({
+            message: 'Query "'.concat(entry.slug, "\" is a parent-child query — it addresses one parent document's `").concat(entry.collection, "` subcollection: ").concat(modeCause(entry)),
+            code: FIRESTORE_QUERY_PARENT_REQUIRED_CODE,
+            suggestion: parentRequiredSuggestion(entry)
+        });
+    }
+}
+// MARK: Rendering
+/**
+ * Renders the `Mode:` line of the `firestore-queries <query>` detail view.
+ *
+ * @param entry - The catalog entry.
+ * @returns The rendered line body, without a trailing newline.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function describeCliFirestoreQueryMode(entry) {
+    var mode = cliFirestoreQueryMode(entry);
+    var result;
+    switch(mode){
+        case 'model':
+            result = 'model — run it directly against the collection.';
+            break;
+        case 'parent-child':
+            result = "parent-child — ".concat(modeCause(entry), " ").concat(parentRequiredSuggestion(entry));
+            break;
+        case 'unavailable':
+            result = "unavailable — ".concat(modeCause(entry), " ").concat(unavailableSuggestion(entry));
+            break;
+        default:
+            result = 'unknown — the query manifest was generated without a `--rules` file, so no mode was resolved.';
+            break;
+    }
+    return result;
+}
+// MARK: Internals
+/**
+ * The rules fact behind a non-`model` mode, phrased as a sentence.
+ *
+ * @param entry - The catalog entry.
+ * @returns The cause sentence.
+ */ function modeCause(entry) {
+    var _entry_rules;
+    var collection = entry.collection;
+    var result;
+    switch((_entry_rules = entry.rules) === null || _entry_rules === void 0 ? void 0 : _entry_rules.reason){
+        case 'no-collection-group-rule':
+            result = "`firestore.rules` declares no `match /{path=**}/".concat(collection, "/{id}` block, and a collection-group query is authorized by that block alone — a path-scoped block does not cover it.");
+            break;
+        case 'nested-collection-scope':
+            result = "it is declared at COLLECTION scope over the `".concat(collection, "` subcollection, so it addresses one parent by construction.");
+            break;
+        case 'list-denied':
+            result = "`firestore.rules` denies `list` on `".concat(collection, "` (every grant is `if false`).");
+            break;
+        case 'list-unmatched':
+            result = "`firestore.rules` grants no `list` on `".concat(collection, "` at all, so the implicit default-deny applies.");
+            break;
+        default:
+            result = "`firestore.rules` does not authorize a client read of `".concat(collection, "` at ").concat(entry.scope, " scope.");
+            break;
+    }
+    return result;
+}
+/**
+ * What to do about an entry no client can run at any scope.
+ *
+ * @param entry - The catalog entry.
+ * @returns The suggestion sentence.
+ */ function unavailableSuggestion(entry) {
+    var _entry_rules;
+    var collection = entry.collection;
+    var rule = ((_entry_rules = entry.rules) === null || _entry_rules === void 0 ? void 0 : _entry_rules.reason) === 'no-collection-group-rule' ? "Add a `match /{path=**}/".concat(collection, "/{id}` block with a `list` grant to make the collection group queryable") : "Grant `list` on `".concat(collection, "` in `firestore.rules`");
+    return "".concat(rule, ", or run this from server code (a Cloud Function or a server action) where the Admin SDK bypasses rules. No `--via` or `--parent` changes this.");
+}
+/**
+ * What to do about an entry that only runs when scoped to one parent.
+ *
+ * The COLLECTION-scope index caveat is called out only for the collection-group case, because it is
+ * the very next wall an operator hits there: the catalog emits a COLLECTION_GROUP-scope composite
+ * index for that factory, and Firestore does not serve a path-scoped query from it. An entry that
+ * is already COLLECTION-scope emits the right index by definition.
+ *
+ * @param entry - The catalog entry.
+ * @returns The suggestion sentence.
+ */ function parentRequiredSuggestion(entry) {
+    var _ref;
+    var _entry_rules, _entry_rules1;
+    var parentPaths = (_ref = (_entry_rules = entry.rules) === null || _entry_rules === void 0 ? void 0 : _entry_rules.parentPaths) !== null && _ref !== void 0 ? _ref : [];
+    var shape = parentPaths.length > 0 ? parentPaths.map(function(x) {
+        return "`".concat(x, "`");
+    }).join(' or ') : 'the parent document key';
+    var indexNote = ((_entry_rules1 = entry.rules) === null || _entry_rules1 === void 0 ? void 0 : _entry_rules1.reason) === 'no-collection-group-rule' ? ' If the factory uses more than one field, a COLLECTION-scope composite index may also be needed — the group-scope index this factory emits does not serve a path-scoped query.' : '';
+    return "Pass `--parent` to run it against one parent's subcollection: ".concat(shape, ".").concat(indexNote);
+}
+
 function asyncGeneratorStep$16(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -10321,9 +10587,18 @@ function _ts_generator$16(thisArg, body) {
         readPreference: reason === 'session-available' ? 'firestore' : 'api',
         reason: reason,
         invocableQueryEntries: entries.filter(function(e) {
-            return e.factory != null;
+            return isCliFirestoreQueryInvocable(e);
         }).length,
         totalQueryEntries: entries.length,
+        unavailableQueryEntries: entries.filter(function(e) {
+            return e.queryMode === 'unavailable';
+        }).length,
+        parentChildQueryEntries: entries.filter(function(e) {
+            return e.queryMode === 'parent-child';
+        }).length,
+        queryModesScanned: entries.some(function(e) {
+            return e.queryMode != null;
+        }),
         serverOnlyModels: ((_input_modelManifest = input.modelManifest) !== null && _input_modelManifest !== void 0 ? _input_modelManifest : []).filter(function(m) {
             return m.serverOnly === true;
         }).length
@@ -11674,7 +11949,7 @@ function _ts_generator$14(thisArg, body) {
     return entry;
 }
 /**
- * Applies the `--model` / `--category` / `--tag` filters to the catalog.
+ * Applies the `--model` / `--category` / `--tag` / `--invocable-only` filters to the catalog.
  *
  * @param registry - The query catalog.
  * @param filter - The active filters.
@@ -11698,6 +11973,9 @@ function _ts_generator$14(thisArg, body) {
             });
         });
     }
+    if (filter.invocableOnly) result = result.filter(function(x) {
+        return isCliFirestoreQueryInvocable(x);
+    });
     return result;
 }
 /**
@@ -11712,6 +11990,9 @@ function _ts_generator$14(thisArg, body) {
     if (entries.length === 0) {
         result = 'No Firestore queries found.\n';
     } else {
+        // MODE is a SEPARATE column from INVOCABLE rather than folded into it: they fail for unrelated
+        // reasons (a missing barrel export vs. a missing rules grant) and have different fixes, and
+        // collapsing them would hide which one is wrong.
         var rows = [
             [
                 'SLUG',
@@ -11719,7 +12000,8 @@ function _ts_generator$14(thisArg, body) {
                 'SCOPE',
                 'CATEGORY',
                 'PARAMS',
-                'INVOCABLE'
+                'INVOCABLE',
+                'MODE'
             ]
         ];
         var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
@@ -11733,7 +12015,8 @@ function _ts_generator$14(thisArg, body) {
                     entry.scope,
                     (_entry_category = entry.category) !== null && _entry_category !== void 0 ? _entry_category : '',
                     renderParamsSummary(entry),
-                    entry.factory ? 'yes' : 'no'
+                    entry.factory ? 'yes' : 'no',
+                    cliFirestoreQueryMode(entry)
                 ]);
             }
         } catch (err) {
@@ -11772,7 +12055,7 @@ function _ts_generator$14(thisArg, body) {
     if (entry.category) lines.push("Category: ".concat(entry.category));
     if (entry.tags && entry.tags.length > 0) lines.push("Tags: ".concat(entry.tags.join(', ')));
     var invocable = entry.factory ? 'yes' : "no — ".concat(entry.name, " is not exported from ").concat(entry.module);
-    lines.push("Invocable: ".concat(invocable));
+    lines.push("Invocable: ".concat(invocable), "Mode: ".concat(describeCliFirestoreQueryMode(entry)));
     var flags = governanceFlags(entry);
     if (flags.length > 0) lines.push("Index flags: ".concat(flags.join(', ')));
     if (entry.dispatcher) {
@@ -12054,6 +12337,10 @@ function _object_without_properties_loose(source, excluded) {
             }).option('tag', {
                 type: 'string',
                 describe: 'Filter to entries carrying this tag.'
+            }).option('invocable-only', {
+                type: 'boolean',
+                default: false,
+                describe: 'Hide entries this CLI cannot run — an unbound factory, or one `firestore.rules` refuses at every scope.'
             }).option('json', {
                 type: 'boolean',
                 default: false,
@@ -12073,7 +12360,8 @@ function _object_without_properties_loose(source, excluded) {
                 var entries = filterCliFirestoreQueries(registry, {
                     model: argv.model,
                     category: argv.category,
-                    tag: argv.tag
+                    tag: argv.tag,
+                    invocableOnly: Boolean(argv.invocableOnly)
                 });
                 if (argv.json) {
                     outputResult(entries.map(toJsonEntry));
@@ -12167,7 +12455,7 @@ function _object_spread_props$r(target, source) {
  * @throws {CliError} When `--parent` is missing where required, supplied where rejected, or the registered collection cannot be scoped.
  */ function cliFirestoreCollectionForQuery(input) {
     var _models_binding_collectionForModel, _models_binding;
-    var models = input.models, modelType = input.modelType, scope = input.scope, isNested = input.isNested, parentKey = input.parentKey;
+    var models = input.models, modelType = input.modelType, scope = input.scope, isNested = input.isNested, parentKey = input.parentKey, parentPaths = input.parentPaths;
     if (parentKey != null && !isNested) {
         throw new CliError({
             message: 'Model "'.concat(modelType, '" is not a subcollection, so --parent does not apply.'),
@@ -12182,6 +12470,14 @@ function _object_spread_props$r(target, source) {
             suggestion: 'Pass --parent <parentKey>. Running a COLLECTION-scope query across the collection group is not equivalent — the composite index it needs is only built at COLLECTION scope.'
         });
     }
+    if (parentKey != null) {
+        assertCliFirestoreQueryParentKey(_object_spread$G({
+            modelType: modelType,
+            parentKey: parentKey
+        }, parentPaths === undefined ? {} : {
+            parentPaths: parentPaths
+        }));
+    }
     var override = (_models_binding_collectionForModel = (_models_binding = models.binding).collectionForModel) === null || _models_binding_collectionForModel === void 0 ? void 0 : _models_binding_collectionForModel.call(_models_binding, {
         collections: models.collections,
         modelType: modelType,
@@ -12200,6 +12496,65 @@ function _object_spread_props$r(target, source) {
     }
     return result;
 }
+/**
+ * Validates a `--parent` value before it is turned into a document reference.
+ *
+ * Both checks exist because the failure they prevent is otherwise unreadable. An odd-segment
+ * `--parent` (a COLLECTION path, e.g. `jl/abc/jlj`) reaches `docAtPath` and comes back as a raw
+ * Firestore path assertion; a well-formed key for the WRONG ancestor chain (e.g. `gb/abc` for a
+ * collection that lives under `jl/{loc}/jlj/{job}`) silently produces an empty result set, which is
+ * indistinguishable from "no matching documents".
+ *
+ * The chain comparison is on COLLECTION NAMES only — document ids are the caller's data, and the
+ * rules templates carry `{wildcard}` placeholders there.
+ *
+ * @param input - The model type, the supplied parent key, and the rules-declared parent templates.
+ * @param input.modelType - The model being queried, for the message.
+ * @param input.parentKey - The raw `--parent` value.
+ * @param input.parentPaths - The rules-declared parent path templates, when known.
+ * @throws {CliError} `INVALID_ARGUMENT` when the key is not a document path, or names a chain the rules do not declare.
+ */ function assertCliFirestoreQueryParentKey(input) {
+    var modelType = input.modelType, parentKey = input.parentKey, _input_parentPaths = input.parentPaths, parentPaths = _input_parentPaths === void 0 ? [] : _input_parentPaths;
+    var segments = parentKey.split('/').filter(function(x) {
+        return x.length > 0;
+    });
+    var quotedPaths = parentPaths.map(function(x) {
+        return "`".concat(x, "`");
+    }).join(' or ');
+    if (segments.length === 0 || segments.length % 2 !== 0) {
+        var shape = quotedPaths.length > 0 ? ", matching ".concat(quotedPaths) : ' (e.g. `gb/abc123`)';
+        throw new CliError({
+            message: '--parent "'.concat(parentKey, '" is not a document key.'),
+            code: 'INVALID_ARGUMENT',
+            suggestion: "A parent key is an EVEN number of path segments — collection/id pairs down to the parent document".concat(shape, ".")
+        });
+    }
+    var chain = collectionChain(segments);
+    var expected = parentPaths.map(function(path) {
+        return collectionChain(path.split('/').filter(function(x) {
+            return x.length > 0;
+        }));
+    });
+    if (expected.length > 0 && !expected.some(function(x) {
+        return x.join('/') === chain.join('/');
+    })) {
+        throw new CliError({
+            message: '--parent "'.concat(parentKey, '" does not name a parent of "').concat(modelType, '": it walks ').concat(chain.join(' → '), "."),
+            code: 'INVALID_ARGUMENT',
+            suggestion: "`firestore.rules` places this collection under ".concat(quotedPaths, ". Pass a document key with that collection chain.")
+        });
+    }
+}
+/**
+ * The collection names of a document path, i.e. every even-indexed segment.
+ *
+ * @param segments - The path segments.
+ * @returns The collection names, in order.
+ */ function collectionChain(segments) {
+    return segments.filter(function(_, index) {
+        return index % 2 === 0;
+    });
+}
 /**
  * Re-points a registered collection group at a single parent document's subcollection.
  *
@@ -12779,21 +13134,28 @@ function _ts_generator$13(thisArg, body) {
  *
  * @param input - The models view, the entry, and the run options.
  * @returns The query result envelope.
- * @throws {CliError} On an argument, scoping, or invocability failure. Firestore's own errors (rules, missing index) surface via `cliFirestoreErrorMapper`.
+ * @throws {CliError} On an argument, scoping, mode, or invocability failure. Firestore's own errors (rules, missing index) surface via `cliFirestoreErrorMapper`.
  */ function runCliFirestoreQuery(input) {
     return _async_to_generator$13(function() {
-        var _collection, models, entry, params, rawParams, parent, limit, _input_count, count, constraints, collection, executable, base, result, _tmp, _tmp1, pairs, rows;
+        var _collection, _entry_rules, models, entry, params, rawParams, parent, limit, _input_count, count, constraints, collection, executable, base, result, _tmp, _tmp1, pairs, rows;
         return _ts_generator$13(this, function(_state) {
             switch(_state.label){
                 case 0:
                     models = input.models, entry = input.entry, params = input.params, rawParams = input.rawParams, parent = input.parent, limit = input.limit, _input_count = input.count, count = _input_count === void 0 ? false : _input_count;
+                    // refused BEFORE the constraints are built and before Firestore is touched: the mode is a
+                    // property of the entry, so paying a round trip to be told `permission-denied` teaches nothing.
+                    // `parent` matters here — a parent-child entry is fine once scoped to one parent document.
+                    assertCliFirestoreQueryCanRun({
+                        entry: entry,
+                        parent: parent
+                    });
                     constraints = cliFirestoreQueryConstraints({
                         entry: entry,
                         params: params,
                         rawParams: rawParams,
                         limit: limit
                     });
-                    collection = cliFirestoreCollectionForQuery({
+                    collection = cliFirestoreCollectionForQuery(_object_spread$F({
                         models: models,
                         // the catalog records the COLLECTION NAME (`gb`) because that is what `firestore.indexes.json`
                         // keys on, while the app's model services are keyed by MODEL TYPE (`guestbook`) — the join goes
@@ -12802,7 +13164,9 @@ function _ts_generator$13(thisArg, body) {
                         scope: entry.scope,
                         isNested: entry.isNested,
                         parentKey: parent
-                    });
+                    }, ((_entry_rules = entry.rules) === null || _entry_rules === void 0 ? void 0 : _entry_rules.parentPaths) === undefined ? {} : {
+                        parentPaths: entry.rules.parentPaths
+                    }));
                     executable = (_collection = collection).queryDocument.apply(_collection, _to_consumable_array$V(constraints));
                     base = _object_spread_props$q(_object_spread$F({
                         slug: entry.slug,
@@ -13006,7 +13370,11 @@ var EPILOGUE = [
     'Dates are coerced from strings: at the top level whenever the parameter type mentions `Date`,',
     'and inside an object parameter only for strict ISO-8601 datetimes carrying a time AND a zone —',
     'a bare YYYY-MM-DD is left alone, because `firestoreDate` persists an ISO string and coercing one',
-    'would silently break an equality match. `--raw-params` disables all coercion.'
+    'would silently break an equality match. `--raw-params` disables all coercion.',
+    '',
+    "A query `firestore-queries` reports as MODE = parent-child addresses ONE parent document's",
+    'subcollection: pass --parent with the full ancestor chain the rules declare (any depth).',
+    'MODE = unavailable means no client can run it on any transport.'
 ].join('\n');
 /**
  * Builds the top-level `firestore-query <query>` command.
@@ -13039,7 +13407,7 @@ var EPILOGUE = [
                 describe: 'Disable date coercion on --params.'
             }).option('parent', {
                 type: 'string',
-                describe: 'Parent document key to scope a nested model to (e.g. "gb/abc").'
+                describe: 'Parent DOCUMENT key to scope a nested model to — any depth (e.g. "gb/abc", "jl/abc/jlj/def").'
             }).option('limit', {
                 type: 'number',
                 describe: "Replace the query's limit with this value."
@@ -13051,11 +13419,19 @@ var EPILOGUE = [
         },
         handler: wrapCommandHandler(function(argv) {
             return _async_to_generator$12(function() {
-                var entry, models, result;
+                var entry, parent, models, result;
                 return _ts_generator$12(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             entry = resolveCliFirestoreQueryEntry(registry, String(argv.query));
+                            parent = typeof argv.parent === 'string' ? argv.parent : undefined;
+                            // refused before the session is opened, mirroring `firestore-get`'s server-only check: the
+                            // mode is a property of the entry, so paying for a handshake to be told `permission-denied`
+                            // teaches nothing. `runCliFirestoreQuery` re-checks for programmatic callers.
+                            assertCliFirestoreQueryCanRun({
+                                entry: entry,
+                                parent: parent
+                            });
                             return [
                                 4,
                                 requireCliFirestoreModels(requireCliContext())
@@ -13069,7 +13445,7 @@ var EPILOGUE = [
                                     entry: entry,
                                     params: typeof argv.params === 'string' ? argv.params : undefined,
                                     rawParams: Boolean(argv.rawParams),
-                                    parent: typeof argv.parent === 'string' ? argv.parent : undefined,
+                                    parent: parent,
                                     limit: typeof argv.limit === 'number' ? argv.limit : undefined,
                                     count: Boolean(argv.count)
                                 })
@@ -65598,4 +65974,4 @@ function printPaginatedOutput(input) {
     })();
 }
 
-export { ACTIONS_SCAN_CONFIG_FILENAME, ACTION_ENTRY_ROLES, ACTION_ROLE_ORDER, ActionDirectiveEntry, ActionEntry, ActionInputEntry, ActionManifest, ActionOutputEntry, ActionStateEntry, ActionStoreEntry, ActionStoreMethodEntry, ActionStoreObservableEntry, ActionsScanConfig, ActionsScanSection, BUILTIN_AUTH_CLAIMS, BUILTIN_AUTH_ROLES, BUILTIN_AUTH_SCOPES, CALL_MODEL_API_PATH, CALL_PASSTHROUGH_COMMAND, CLI_EXIT_CODE_AUTH, CLI_EXIT_CODE_HANDLER, CLI_FIRESTORE_SESSION_EXPIRY_BUFFER_MS, CLI_FIRESTORE_SESSION_MAX_CACHE_MS, CLI_READ_VIA_EPILOGUE, CLI_READ_VIA_VALUES, CORE_TOPICS, CORE_TOPICS_SET, CSS_UTILITIES_SCAN_CONFIG_FILENAME, CSS_UTILITY_ROLES, CSS_UTILITY_SCOPES, CliError, CssUtilitiesScanConfig, CssUtilitiesScanSection, CssUtilityDeclaration, CssUtilityEntry, CssUtilityManifest, DBX_ACTION_STATE_VALUES, DBX_DOCS_UI_EXAMPLES_SCAN_CONFIG_FILENAME, DBX_DOCS_UI_EXAMPLE_USE_KINDS, DEFAULT_ACTIONS_SCAN_OUT_PATH, DEFAULT_ACTION_COMMAND_NAME, DEFAULT_CLI_FIREBASE_EMULATOR_HOST, DEFAULT_CLI_HTTP_TIMEOUT_MS, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_READ_VIA, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_CSS_UTILITIES_SCAN_OUT_PATH, DEFAULT_DBX_DOCS_UI_EXAMPLES_SCAN_OUT_PATH, DEFAULT_FILTERS_SCAN_OUT_PATH, DEFAULT_FIRESTORE_GET_COMMAND_NAME, DEFAULT_FIRESTORE_QUERIES_COMMAND_NAME, DEFAULT_FIRESTORE_QUERY_COMMAND_NAME, DEFAULT_FORGE_FIELDS_SCAN_OUT_PATH, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DEFAULT_MODEL_SNAPSHOT_FIELDS_SCAN_OUT_PATH, DEFAULT_PIPES_SCAN_OUT_PATH, DEFAULT_SCAN_OUT_PATH, DEFAULT_SPECIFIER_KEY, DEFAULT_UI_COMPONENTS_SCAN_OUT_PATH, DEFAULT_UTILS_SCAN_OUT_PATH, DOWNSTREAM_CLUSTERS, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, DbxDocsUiExampleEntry, DbxDocsUiExampleManifest, DbxDocsUiExampleUseEntry, DbxDocsUiExamplesScanConfig, DbxDocsUiExamplesScanSection, DbxMcpConfig, EMPTY_ACTION_REGISTRY, EMPTY_AUTH_REGISTRY, EMPTY_CSS_UTILITY_REGISTRY, EMPTY_DBX_DOCS_UI_EXAMPLES_REGISTRY, EMPTY_FILTER_REGISTRY, EMPTY_FORGE_FIELD_REGISTRY, EMPTY_MODEL_SNAPSHOT_FIELD_REGISTRY, EMPTY_PIPE_REGISTRY, EMPTY_SEMANTIC_TYPE_REGISTRY, EMPTY_TOKEN_REGISTRY, EMPTY_UI_COMPONENT_REGISTRY, EMPTY_UTIL_REGISTRY, ExtractedDbxDocsUiExampleEntrySchema, ExtractedEntrySchema, ExtractedForgeFieldEntrySchema, ExtractedUiEntrySchema, FILTERS_SCAN_CONFIG_FILENAME, FILTER_KINDS, FILTER_KIND_ORDER, FIREBASE_MODELS, FIREBASE_MODEL_GROUPS, FIRESTORE_SESSION_API_PATH, FIRESTORE_SESSION_DOCTOR_CHECK_NAME, FORGE_FIELDS_SCAN_CONFIG_FILENAME, FORGE_FIELD_ARRAY_OUTPUTS, FORGE_FIELD_COMPOSITE_SUFFIXES, FORGE_FIELD_TIERS, FORGE_FIELD_WRAPPER_PATTERNS, FORM_FIELDS, FORM_TIER_ORDER, FilterDirectiveEntry, FilterEntry, FilterInputEntry, FilterManifest, FilterPatternEntry, FiltersScanConfig, FiltersScanSection, ForgeFieldEntry, ForgeFieldManifest, ForgeFieldPropertyEntry, ForgeFieldsScanConfig, ForgeFieldsScanSection, GET_COMMAND, GET_MANY_COMMAND, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MCP_CALL_TYPE_ABBREVIATIONS, MCP_MANIFEST_VERSION, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MODEL_ARCHETYPES, MODEL_ARCHETYPE_ADDON_SLUGS, MODEL_ARCHETYPE_SYNC_MODES, MODEL_IS_SERVER_ONLY_CODE, MODEL_SNAPSHOT_FIELDS_SCAN_CONFIG_FILENAME, MODEL_SNAPSHOT_FIELD_KINDS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, ModelSnapshotFieldEntry, ModelSnapshotFieldManifest, ModelSnapshotFieldParamEntry, ModelSnapshotFieldsScanConfig, ModelSnapshotFieldsScanSection, PIPES_SCAN_CONFIG_FILENAME, PIPE_CATEGORIES, PIPE_CATEGORY_ORDER, PIPE_PURITIES, PROMPT_CANCELLED_ERROR_CODE, PipeArgEntry, PipeEntry, PipeManifest, PipesScanConfig, PipesScanSection, RESERVED_MODEL_FOLDERS, ROUTE_MANIFEST_VERSION, ROUTE_MODEL_LIST_TAG, ROUTE_MODEL_TAG, SCAN_CONFIG_FILENAME$1 as SCAN_CONFIG_FILENAME, SERVICE_TOKEN_REQUIRED_OIDC_SCOPES, STANDARD_GLOBAL_OPTION_NAMES, STDIN_NOT_PIPED_ERROR_CODE, SemanticTypeEntry, SemanticTypeManifest, SemanticTypeScanConfig, TOKEN_ROLES, TOKEN_SOURCES, TokenDefaults, TokenEntry, TokenManifest, UI_COMPONENTS_SCAN_CONFIG_FILENAME, UI_COMPONENT_CATEGORIES, UI_COMPONENT_KINDS, UTILS_SCAN_CONFIG_FILENAME, UTIL_KINDS, UiComponentEntry, UiComponentInputEntry, UiComponentManifest, UiComponentOutputEntry, UiComponentsScanConfig, UiComponentsScanSection, UtilEntry, UtilManifest, UtilParamEntry, UtilsScanConfig, UtilsScanSection, WORKSPACE_AUTH_APPS, WORKSPACE_AUTH_CLAIMS, WORKSPACE_FACTORY_SCAN_EXCLUDE, WORKSPACE_FACTORY_SCAN_INCLUDE, abbreviateMcpCallType, appendCliErrorMapper, applyEnvVarOverrides, assertCliModelIsNotServerOnly, buildActionCommands, buildActionsManifest, buildAuthorizationUrl, buildCliPaths, buildCssUtilitiesManifest, buildDbxDocsUiExamplesManifest, buildDisambiguatedMcpToolName, buildDispatcherCreditByName, buildDumpFilePath, buildErrorOutput, buildFiltersManifest, buildFirestoreGetCommand, buildFirestoreQueriesCommand, buildFirestoreQueryCommand, buildFirestoreSessionDoctorReadRouting, buildForgeFieldsManifest, buildManifest, buildManifestCommands, buildMcpToolName, buildModelDecodeCommand, buildModelInfoCommand, buildModelSnapshotFieldsManifest, buildPipesManifest, buildRouteManifest, buildRouteTree, buildScanProject, buildUiComponentsManifest, buildUtilsManifest, callModelOverHttp, clearDownstreamCatalogCache, cliFirebaseAppName, cliFirebaseEmulatorsInUse, cliFirestoreAccessorFactory, cliFirestoreBinding, cliFirestoreCollectionForQuery, cliFirestoreErrorMapper, cliFirestoreQueryConstraints, cliFirestoreSessionEntryExpiresAt, cliLifecycleRunner, cliReadResultMeta, closeAllCliFirebaseApps, closeCliFirestoreSessionContext, coerceCliReadVia, collectClassPropertiesWithInheritance, computeRelativeSpecifiers, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createActionCommand, createActionRegistry, createActionRegistryFromEntries, createAuthCommand, createAuthMiddleware, createAuthRegistryFromEntries, createCallModelCommand, createCli, createCliContext, createCliFirestoreModels, createCliFirestoreQueryRegistry, createCliFirestoreSessionCacheStore, createCliFirestoreSessionContext, createCliTokenCacheStore, createContextSlot, createCssUtilityRegistry, createCssUtilityRegistryFromEntries, createDbxDocsUiExamplesRegistry, createDbxDocsUiExamplesRegistryFromEntries, createDoctorCommand, createEnvCommand, createFilterRegistry, createFilterRegistryFromEntries, createFirestoreSessionDoctorCheck, createForgeFieldRegistry, createForgeFieldRegistryFromEntries, createModelSnapshotFieldRegistry, createModelSnapshotFieldRegistryFromEntries, createOutputCommand, createOutputMiddleware, createPassthroughAuthMiddleware, createPipeRegistry, createPipeRegistryFromEntries, createSemanticTypeRegistry, createSemanticTypeRegistryFromEntries, createTokenRegistry, createTokenRegistryFromEntries, createUiComponentRegistry, createUiComponentRegistryFromEntries, createUtilRegistry, createUtilRegistryFromEntries, decodeFirestoreModelKey, defaultDoctorChecks, defaultGlobber, defaultReadFile, deriveOptionalFromName, detectDataHelpFormat, detectHelpMode, discoverDownstreamFirebasePackages, discoverDownstreamPackages, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, extractActionEntries, extractAngularInputs, extractAngularOutputs, extractAuthEntries, extractComponentRouteModelTags, extractCssUtilityEntries, extractDbxDocsUiExampleEntries, extractEntries, extractFile, extractFilterEntries, extractForgeFieldEntries, extractModelSnapshotFieldEntries, extractModels, extractPipeEntries, extractUiEntries, extractUrlParamKeys, extractUtilEntries, fetchFirestoreSession, fetchSessionInfo, fetchUserInfo, filterCliFirestoreQueries, filterReadOnlyModelScopes, findAndLoadConfig, findCliEnvDefault, findCliModelManifestEntry, flattenList, formatGeneratedTs, getBundledManifestsDirectory, getCliContext, getCliEnvVarName, getCliTimeoutMs, getDefaultBundledActionManifestPaths, getDefaultBundledCssUtilityManifestPaths, getDefaultBundledDbxDocsUiExamplesManifestPaths, getDefaultBundledFilterManifestPaths, getDefaultBundledForgeFieldManifestPaths, getDefaultBundledManifestPaths, getDefaultBundledModelFirebaseIndexManifestPaths, getDefaultBundledModelSnapshotFieldManifestPaths, getDefaultBundledPipeManifestPaths, getDefaultBundledTokenManifestPaths, getDefaultBundledUiManifestPaths, getDefaultBundledUtilManifestPaths, getDownstreamCatalog, getFirebaseBucketKeyedByIdModels, getFirebaseDistrictKeyedByIdModels, getFirebaseExternalIdKeyedByIdModels, getFirebaseModel, getFirebaseModelByPrefix, getFirebaseModelGroup, getFirebaseModelGroups, getFirebaseModels, getFirebaseModelsByArchetype, getFirebasePrefixCatalog, getFirebaseRegionKeyedByIdModels, getFirebaseSubcollectionsOf, getFirebaseUserKeyedByIdModels, getFirebaseUserRelatedModels, getModelArchetypeBySlug, getModelArchetypesByAxisValue, getModelArchetypesByCollectionKind, getModelArchetypesBySyncMode, getModelOverFirestore, getModelOverHttp, getMultipleModelsOverFirestore, getMultipleModelsOverHttp, getMultipleModelsOverHttpChunked, getOutputOptions, globToRegex, hasParamSegment, indentLines$1 as indentLines, isCliEnvConfigComplete, isCliFirebaseConfigComplete, isCliFirestoreSessionExpired, isCliVerbose, isCoreTopic, isExportedFromPackage, isStdinPositionalSentinel, isStdinSentinel, isTokenExpired, isVisibleProperty, iterateDbxCliCallModel, loadActionManifests, loadActionRegistry, loadAuthRegistry, loadCliConfig, loadCssUtilityRegistry, loadDbxDocsUiExamplesManifests, loadDbxDocsUiExamplesRegistry, loadFilterManifests, loadFilterRegistry, loadForgeFieldManifests, loadForgeFieldRegistry, loadModelFirebaseIndexManifests, loadModelFirebaseIndexRegistry, loadModelSnapshotFieldManifests, loadModelSnapshotFieldRegistry, loadPackageName, loadPipeManifests, loadPipeRegistry, loadRouteTree, loadScanSection, loadSemanticTypeManifests, loadSemanticTypeRegistry, loadTokenManifests, loadTokenRegistry, loadUiComponentManifests, loadUiComponentRegistry, loadUtilManifests, loadUtilRegistry, maskEnv, maskSecret, matchUrlAgainstEntries, mcpManifestKey, mergeCliConfig, mergeCliEnvWithDefault, mergeCliFirebaseConfig, mergeOutputConfig, normalizePathname, oidcRelyingPartyErrorToCliError, openStreamingDump, outputError, outputResult, packageNameToSlug, parseAnnotation, parseDeclarations$1 as parseDeclarations, parseFirestoreModelIdentityArgs, parseGetArgs, parseGetManyArgs, parsePastedRedirect, parseRouteModelTag, parseScanArgs, pickFields, promptLine, readAllStdin, readDirectiveDecorator, readEnvTokenEntry, readPropertyDescription, readSelector, readStdinTokens, readStringProperty, refreshAccessToken, renderCliFirestoreQueryEntry, renderCliFirestoreQueryList, renderDecodedKey, renderGroupedImportLines, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, renderTable, requireCliContext, requireCliFirestoreContext, requireCliFirestoreModels, requireCliFirestoreSession, resolveActiveEnvName, resolveCliEnv, resolveCliEnvOrThrow, resolveCliFirestoreQueryArgs, resolveCliFirestoreQueryEntry, resolveCliModel, resolveCliReadSource, resolveComponentSourceFromSources, resolveDemoClaimsPath, resolveExplicitFirebasePackages, resolveExtendsName, resolveModelArchetype, resolveOutputConfig, resolvePerModelGetKey, resolveRouteSources, revokeToken, runActionsScanCli, runCli, runCliFirestoreQuery, runCssUtilitiesScanCli, runDbxDocsUiExamplesScanCli, runFiltersScanCli, runForgeFieldsScanCli, runModelFirebaseIndexScanCli, runModelSnapshotFieldsScanCli, runPaginatedList, runPipesScanCli, runScanCli, runScanCliBase, runUiComponentsScanCli, runUtilsScanCli, sanitizeString, saveCliConfig, scanFactoryReferences, scoreCandidates, serializeActionManifest, serializeCssUtilityManifest, serializeDbxDocsUiExamplesManifest, serializeFilterManifest, serializeForgeFieldManifest, serializeManifest, serializeModelSnapshotFieldsManifest, serializePipeManifest, serializeUiComponentManifest, serializeUtilManifest, setCliContext, setCliRawArgv, setCliTimeoutMs, setCliVerbose, splitListTagText$1 as splitListTagText, splitSegments, stripUrlQueryAndHash, toActionEntryInfo, toFilterEntryInfo, toFormFieldInfo, tracedFetch, truncate, tryMatchSegments, unwrapFenced, validateMcpToolName, verboseLog, withCallModelArgs, withEnv, withMultiplePages, withOutput, withServiceTokenScopes, wrapCommandHandler, wrapSyncCommandHandler, writeGeneratedTsFile };
+export { ACTIONS_SCAN_CONFIG_FILENAME, ACTION_ENTRY_ROLES, ACTION_ROLE_ORDER, ActionDirectiveEntry, ActionEntry, ActionInputEntry, ActionManifest, ActionOutputEntry, ActionStateEntry, ActionStoreEntry, ActionStoreMethodEntry, ActionStoreObservableEntry, ActionsScanConfig, ActionsScanSection, BUILTIN_AUTH_CLAIMS, BUILTIN_AUTH_ROLES, BUILTIN_AUTH_SCOPES, CALL_MODEL_API_PATH, CALL_PASSTHROUGH_COMMAND, CLI_EXIT_CODE_AUTH, CLI_EXIT_CODE_HANDLER, CLI_FIRESTORE_SESSION_EXPIRY_BUFFER_MS, CLI_FIRESTORE_SESSION_MAX_CACHE_MS, CLI_READ_VIA_EPILOGUE, CLI_READ_VIA_VALUES, CORE_TOPICS, CORE_TOPICS_SET, CSS_UTILITIES_SCAN_CONFIG_FILENAME, CSS_UTILITY_ROLES, CSS_UTILITY_SCOPES, CliError, CssUtilitiesScanConfig, CssUtilitiesScanSection, CssUtilityDeclaration, CssUtilityEntry, CssUtilityManifest, DBX_ACTION_STATE_VALUES, DBX_DOCS_UI_EXAMPLES_SCAN_CONFIG_FILENAME, DBX_DOCS_UI_EXAMPLE_USE_KINDS, DEFAULT_ACTIONS_SCAN_OUT_PATH, DEFAULT_ACTION_COMMAND_NAME, DEFAULT_CLI_FIREBASE_EMULATOR_HOST, DEFAULT_CLI_HTTP_TIMEOUT_MS, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_READ_VIA, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_CSS_UTILITIES_SCAN_OUT_PATH, DEFAULT_DBX_DOCS_UI_EXAMPLES_SCAN_OUT_PATH, DEFAULT_FILTERS_SCAN_OUT_PATH, DEFAULT_FIRESTORE_GET_COMMAND_NAME, DEFAULT_FIRESTORE_QUERIES_COMMAND_NAME, DEFAULT_FIRESTORE_QUERY_COMMAND_NAME, DEFAULT_FORGE_FIELDS_SCAN_OUT_PATH, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DEFAULT_MODEL_SNAPSHOT_FIELDS_SCAN_OUT_PATH, DEFAULT_PIPES_SCAN_OUT_PATH, DEFAULT_SCAN_OUT_PATH, DEFAULT_SPECIFIER_KEY, DEFAULT_UI_COMPONENTS_SCAN_OUT_PATH, DEFAULT_UTILS_SCAN_OUT_PATH, DOWNSTREAM_CLUSTERS, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, DbxDocsUiExampleEntry, DbxDocsUiExampleManifest, DbxDocsUiExampleUseEntry, DbxDocsUiExamplesScanConfig, DbxDocsUiExamplesScanSection, DbxMcpConfig, EMPTY_ACTION_REGISTRY, EMPTY_AUTH_REGISTRY, EMPTY_CSS_UTILITY_REGISTRY, EMPTY_DBX_DOCS_UI_EXAMPLES_REGISTRY, EMPTY_FILTER_REGISTRY, EMPTY_FORGE_FIELD_REGISTRY, EMPTY_MODEL_SNAPSHOT_FIELD_REGISTRY, EMPTY_PIPE_REGISTRY, EMPTY_SEMANTIC_TYPE_REGISTRY, EMPTY_TOKEN_REGISTRY, EMPTY_UI_COMPONENT_REGISTRY, EMPTY_UTIL_REGISTRY, ExtractedDbxDocsUiExampleEntrySchema, ExtractedEntrySchema, ExtractedForgeFieldEntrySchema, ExtractedUiEntrySchema, FILTERS_SCAN_CONFIG_FILENAME, FILTER_KINDS, FILTER_KIND_ORDER, FIREBASE_MODELS, FIREBASE_MODEL_GROUPS, FIRESTORE_QUERY_PARENT_REQUIRED_CODE, FIRESTORE_QUERY_UNAVAILABLE_CODE, FIRESTORE_SESSION_API_PATH, FIRESTORE_SESSION_DOCTOR_CHECK_NAME, FORGE_FIELDS_SCAN_CONFIG_FILENAME, FORGE_FIELD_ARRAY_OUTPUTS, FORGE_FIELD_COMPOSITE_SUFFIXES, FORGE_FIELD_TIERS, FORGE_FIELD_WRAPPER_PATTERNS, FORM_FIELDS, FORM_TIER_ORDER, FilterDirectiveEntry, FilterEntry, FilterInputEntry, FilterManifest, FilterPatternEntry, FiltersScanConfig, FiltersScanSection, ForgeFieldEntry, ForgeFieldManifest, ForgeFieldPropertyEntry, ForgeFieldsScanConfig, ForgeFieldsScanSection, GET_COMMAND, GET_MANY_COMMAND, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MCP_CALL_TYPE_ABBREVIATIONS, MCP_MANIFEST_VERSION, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MODEL_ARCHETYPES, MODEL_ARCHETYPE_ADDON_SLUGS, MODEL_ARCHETYPE_SYNC_MODES, MODEL_IS_SERVER_ONLY_CODE, MODEL_SNAPSHOT_FIELDS_SCAN_CONFIG_FILENAME, MODEL_SNAPSHOT_FIELD_KINDS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, ModelSnapshotFieldEntry, ModelSnapshotFieldManifest, ModelSnapshotFieldParamEntry, ModelSnapshotFieldsScanConfig, ModelSnapshotFieldsScanSection, PIPES_SCAN_CONFIG_FILENAME, PIPE_CATEGORIES, PIPE_CATEGORY_ORDER, PIPE_PURITIES, PROMPT_CANCELLED_ERROR_CODE, PipeArgEntry, PipeEntry, PipeManifest, PipesScanConfig, PipesScanSection, RESERVED_MODEL_FOLDERS, ROUTE_MANIFEST_VERSION, ROUTE_MODEL_LIST_TAG, ROUTE_MODEL_TAG, SCAN_CONFIG_FILENAME$1 as SCAN_CONFIG_FILENAME, SERVICE_TOKEN_REQUIRED_OIDC_SCOPES, STANDARD_GLOBAL_OPTION_NAMES, STDIN_NOT_PIPED_ERROR_CODE, SemanticTypeEntry, SemanticTypeManifest, SemanticTypeScanConfig, TOKEN_ROLES, TOKEN_SOURCES, TokenDefaults, TokenEntry, TokenManifest, UI_COMPONENTS_SCAN_CONFIG_FILENAME, UI_COMPONENT_CATEGORIES, UI_COMPONENT_KINDS, UTILS_SCAN_CONFIG_FILENAME, UTIL_KINDS, UiComponentEntry, UiComponentInputEntry, UiComponentManifest, UiComponentOutputEntry, UiComponentsScanConfig, UiComponentsScanSection, UtilEntry, UtilManifest, UtilParamEntry, UtilsScanConfig, UtilsScanSection, WORKSPACE_AUTH_APPS, WORKSPACE_AUTH_CLAIMS, WORKSPACE_FACTORY_SCAN_EXCLUDE, WORKSPACE_FACTORY_SCAN_INCLUDE, abbreviateMcpCallType, appendCliErrorMapper, applyEnvVarOverrides, assertCliFirestoreQueryCanRun, assertCliFirestoreQueryParentKey, assertCliModelIsNotServerOnly, buildActionCommands, buildActionsManifest, buildAuthorizationUrl, buildCliPaths, buildCssUtilitiesManifest, buildDbxDocsUiExamplesManifest, buildDisambiguatedMcpToolName, buildDispatcherCreditByName, buildDumpFilePath, buildErrorOutput, buildFiltersManifest, buildFirestoreGetCommand, buildFirestoreQueriesCommand, buildFirestoreQueryCommand, buildFirestoreSessionDoctorReadRouting, buildForgeFieldsManifest, buildManifest, buildManifestCommands, buildMcpToolName, buildModelDecodeCommand, buildModelInfoCommand, buildModelSnapshotFieldsManifest, buildPipesManifest, buildRouteManifest, buildRouteTree, buildScanProject, buildUiComponentsManifest, buildUtilsManifest, callModelOverHttp, clearDownstreamCatalogCache, cliFirebaseAppName, cliFirebaseEmulatorsInUse, cliFirestoreAccessorFactory, cliFirestoreBinding, cliFirestoreCollectionForQuery, cliFirestoreErrorMapper, cliFirestoreQueryConstraints, cliFirestoreQueryMode, cliFirestoreQueryModeForRules, cliFirestoreSessionEntryExpiresAt, cliLifecycleRunner, cliReadResultMeta, closeAllCliFirebaseApps, closeCliFirestoreSessionContext, coerceCliReadVia, collectClassPropertiesWithInheritance, computeRelativeSpecifiers, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createActionCommand, createActionRegistry, createActionRegistryFromEntries, createAuthCommand, createAuthMiddleware, createAuthRegistryFromEntries, createCallModelCommand, createCli, createCliContext, createCliFirestoreModels, createCliFirestoreQueryRegistry, createCliFirestoreSessionCacheStore, createCliFirestoreSessionContext, createCliTokenCacheStore, createContextSlot, createCssUtilityRegistry, createCssUtilityRegistryFromEntries, createDbxDocsUiExamplesRegistry, createDbxDocsUiExamplesRegistryFromEntries, createDoctorCommand, createEnvCommand, createFilterRegistry, createFilterRegistryFromEntries, createFirestoreSessionDoctorCheck, createForgeFieldRegistry, createForgeFieldRegistryFromEntries, createModelSnapshotFieldRegistry, createModelSnapshotFieldRegistryFromEntries, createOutputCommand, createOutputMiddleware, createPassthroughAuthMiddleware, createPipeRegistry, createPipeRegistryFromEntries, createSemanticTypeRegistry, createSemanticTypeRegistryFromEntries, createTokenRegistry, createTokenRegistryFromEntries, createUiComponentRegistry, createUiComponentRegistryFromEntries, createUtilRegistry, createUtilRegistryFromEntries, decodeFirestoreModelKey, defaultDoctorChecks, defaultGlobber, defaultReadFile, deriveOptionalFromName, describeCliFirestoreQueryMode, detectDataHelpFormat, detectHelpMode, discoverDownstreamFirebasePackages, discoverDownstreamPackages, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, extractActionEntries, extractAngularInputs, extractAngularOutputs, extractAuthEntries, extractComponentRouteModelTags, extractCssUtilityEntries, extractDbxDocsUiExampleEntries, extractEntries, extractFile, extractFilterEntries, extractForgeFieldEntries, extractModelSnapshotFieldEntries, extractModels, extractPipeEntries, extractUiEntries, extractUrlParamKeys, extractUtilEntries, fetchFirestoreSession, fetchSessionInfo, fetchUserInfo, filterCliFirestoreQueries, filterReadOnlyModelScopes, findAndLoadConfig, findCliEnvDefault, findCliModelManifestEntry, flattenList, formatGeneratedTs, getBundledManifestsDirectory, getCliContext, getCliEnvVarName, getCliTimeoutMs, getDefaultBundledActionManifestPaths, getDefaultBundledCssUtilityManifestPaths, getDefaultBundledDbxDocsUiExamplesManifestPaths, getDefaultBundledFilterManifestPaths, getDefaultBundledForgeFieldManifestPaths, getDefaultBundledManifestPaths, getDefaultBundledModelFirebaseIndexManifestPaths, getDefaultBundledModelSnapshotFieldManifestPaths, getDefaultBundledPipeManifestPaths, getDefaultBundledTokenManifestPaths, getDefaultBundledUiManifestPaths, getDefaultBundledUtilManifestPaths, getDownstreamCatalog, getFirebaseBucketKeyedByIdModels, getFirebaseDistrictKeyedByIdModels, getFirebaseExternalIdKeyedByIdModels, getFirebaseModel, getFirebaseModelByPrefix, getFirebaseModelGroup, getFirebaseModelGroups, getFirebaseModels, getFirebaseModelsByArchetype, getFirebasePrefixCatalog, getFirebaseRegionKeyedByIdModels, getFirebaseSubcollectionsOf, getFirebaseUserKeyedByIdModels, getFirebaseUserRelatedModels, getModelArchetypeBySlug, getModelArchetypesByAxisValue, getModelArchetypesByCollectionKind, getModelArchetypesBySyncMode, getModelOverFirestore, getModelOverHttp, getMultipleModelsOverFirestore, getMultipleModelsOverHttp, getMultipleModelsOverHttpChunked, getOutputOptions, globToRegex, hasParamSegment, indentLines$1 as indentLines, isCliEnvConfigComplete, isCliFirebaseConfigComplete, isCliFirestoreQueryInvocable, isCliFirestoreSessionExpired, isCliVerbose, isCoreTopic, isExportedFromPackage, isStdinPositionalSentinel, isStdinSentinel, isTokenExpired, isVisibleProperty, iterateDbxCliCallModel, loadActionManifests, loadActionRegistry, loadAuthRegistry, loadCliConfig, loadCssUtilityRegistry, loadDbxDocsUiExamplesManifests, loadDbxDocsUiExamplesRegistry, loadFilterManifests, loadFilterRegistry, loadForgeFieldManifests, loadForgeFieldRegistry, loadModelFirebaseIndexManifests, loadModelFirebaseIndexRegistry, loadModelSnapshotFieldManifests, loadModelSnapshotFieldRegistry, loadPackageName, loadPipeManifests, loadPipeRegistry, loadRouteTree, loadScanSection, loadSemanticTypeManifests, loadSemanticTypeRegistry, loadTokenManifests, loadTokenRegistry, loadUiComponentManifests, loadUiComponentRegistry, loadUtilManifests, loadUtilRegistry, maskEnv, maskSecret, matchUrlAgainstEntries, mcpManifestKey, mergeCliConfig, mergeCliEnvWithDefault, mergeCliFirebaseConfig, mergeOutputConfig, normalizePathname, oidcRelyingPartyErrorToCliError, openStreamingDump, outputError, outputResult, packageNameToSlug, parseAnnotation, parseDeclarations$1 as parseDeclarations, parseFirestoreModelIdentityArgs, parseGetArgs, parseGetManyArgs, parsePastedRedirect, parseRouteModelTag, parseScanArgs, pickFields, promptLine, readAllStdin, readDirectiveDecorator, readEnvTokenEntry, readPropertyDescription, readSelector, readStdinTokens, readStringProperty, refreshAccessToken, renderCliFirestoreQueryEntry, renderCliFirestoreQueryList, renderDecodedKey, renderGroupedImportLines, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, renderTable, requireCliContext, requireCliFirestoreContext, requireCliFirestoreModels, requireCliFirestoreSession, resolveActiveEnvName, resolveCliEnv, resolveCliEnvOrThrow, resolveCliFirestoreQueryArgs, resolveCliFirestoreQueryEntry, resolveCliModel, resolveCliReadSource, resolveComponentSourceFromSources, resolveDemoClaimsPath, resolveExplicitFirebasePackages, resolveExtendsName, resolveModelArchetype, resolveOutputConfig, resolvePerModelGetKey, resolveRouteSources, revokeToken, runActionsScanCli, runCli, runCliFirestoreQuery, runCssUtilitiesScanCli, runDbxDocsUiExamplesScanCli, runFiltersScanCli, runForgeFieldsScanCli, runModelFirebaseIndexScanCli, runModelSnapshotFieldsScanCli, runPaginatedList, runPipesScanCli, runScanCli, runScanCliBase, runUiComponentsScanCli, runUtilsScanCli, sanitizeString, saveCliConfig, scanFactoryReferences, scoreCandidates, serializeActionManifest, serializeCssUtilityManifest, serializeDbxDocsUiExamplesManifest, serializeFilterManifest, serializeForgeFieldManifest, serializeManifest, serializeModelSnapshotFieldsManifest, serializePipeManifest, serializeUiComponentManifest, serializeUtilManifest, setCliContext, setCliRawArgv, setCliTimeoutMs, setCliVerbose, splitListTagText$1 as splitListTagText, splitSegments, stripUrlQueryAndHash, toActionEntryInfo, toFilterEntryInfo, toFormFieldInfo, tracedFetch, truncate, tryMatchSegments, unwrapFenced, validateMcpToolName, verboseLog, withCallModelArgs, withEnv, withMultiplePages, withOutput, withServiceTokenScopes, wrapCommandHandler, wrapSyncCommandHandler, writeGeneratedTsFile };