@dereekb/dbx-cli 13.42.0 → 13.43.0

package/index.esm.js

@@ -1,11 +1,12 @@
 import { existsSync, mkdirSync, writeFileSync, readFileSync, statSync, appendFileSync } from 'node:fs';
-import { join, resolve, sep, basename, relative, posix, dirname, isAbsolute } from 'node:path';
+import { join, dirname, resolve, sep, basename, relative, posix, isAbsolute } from 'node:path';
 import { clientFirebaseFirestoreContextFactory, makeFirestoreCollectionGroup, addOrReplaceLimitInConstraints, CALL_MODEL_OIDC_SCOPES, CALL_MODEL_OIDC_SCOPE_FOR_CALL_TYPE, CALL_MODEL_MISSING_OIDC_SCOPE_ERROR_CODE, CALL_MODEL_OIDC_SCOPE_PREFIX, STORAGE_FILE_UPLOAD_USER_ROLE } from '@dereekb/firebase';
 export { CALL_MODEL_APP_FUNCTION_KEY } from '@dereekb/firebase';
+import { createRequire } from 'node:module';
+import { Firestore, getFirestore, connectFirestoreEmulator } from 'firebase/firestore';
 import { getApps, initializeApp, deleteApp } from 'firebase/app';
 import { initializeAppCheck, CustomProvider } from 'firebase/app-check';
 import { signInWithCustomToken, getAuth, connectAuthEmulator } from 'firebase/auth';
-import { getFirestore, connectFirestoreEmulator } from 'firebase/firestore';
 import { expirationDetails, performAsyncTasks, compareStrings, OidcRelyingPartyError, buildAuthorizationUrl as buildAuthorizationUrl$1, parseAuthorizationRedirect, noop, generateOAuthState, generatePkceMaterial, MS_IN_SECOND, buildOidcDiscoveryCandidates, unique, AUTH_TOS_SIGNED_ROLE, AUTH_ONBOARDED_ROLE, AUTH_ADMIN_ROLE, AUTH_USER_ROLE } from '@dereekb/util';
 import { createMemoizedJsonFileAsyncKeyedValueCache, readJsonFile, writeJsonFile } from '@dereekb/nestjs';
 import { durationDataToMilliseconds, parseDurationString } from '@dereekb/date';
@@ -22,13 +23,13 @@ import { fileURLToPath } from 'node:url';
 import { format, resolveConfig } from 'prettier';
 import { normalize, join as join$1, dirname as dirname$1 } from 'node:path/posix';
 
-function _array_like_to_array$18(arr, len) {
+function _array_like_to_array$19(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
 function _array_without_holes$_(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$18(arr);
+    if (Array.isArray(arr)) return _array_like_to_array$19(arr);
 }
 function _assert_this_initialized(self) {
     if (self === void 0) {
@@ -36,7 +37,7 @@ function _assert_this_initialized(self) {
     }
     return self;
 }
-function asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -50,16 +51,16 @@ function asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1q(fn) {
+function _async_to_generator$1r(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -91,7 +92,7 @@ function _construct(Parent, args, Class) {
     }
     return _construct.apply(null, arguments);
 }
-function _define_property$X(obj, key, value) {
+function _define_property$_(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -123,7 +124,7 @@ function _inherits(subClass, superClass) {
     });
     if (superClass) _set_prototype_of(subClass, superClass);
 }
-function _instanceof$u(left, right) {
+function _instanceof$v(left, right) {
     "@swc/helpers - instanceof";
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
@@ -140,7 +141,7 @@ function _iterable_to_array$_(iter) {
 function _non_iterable_spread$_() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$X(target) {
+function _object_spread$_(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -150,12 +151,12 @@ function _object_spread$X(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$X(target, key, source[key]);
+            _define_property$_(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$F(object, enumerableOnly) {
+function ownKeys$H(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -163,19 +164,19 @@ function ownKeys$F(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$F(target, source) {
+function _object_spread_props$H(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$F(Object(source)).forEach(function(key) {
+        ownKeys$H(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
 function _possible_constructor_return(self, call) {
-    if (call && (_type_of$5(call) === "object" || typeof call === "function")) {
+    if (call && (_type_of$6(call) === "object" || typeof call === "function")) {
         return call;
     }
     return _assert_this_initialized(self);
@@ -188,19 +189,19 @@ function _set_prototype_of(o, p) {
     return _set_prototype_of(o, p);
 }
 function _to_consumable_array$_(arr) {
-    return _array_without_holes$_(arr) || _iterable_to_array$_(arr) || _unsupported_iterable_to_array$18(arr) || _non_iterable_spread$_();
+    return _array_without_holes$_(arr) || _iterable_to_array$_(arr) || _unsupported_iterable_to_array$19(arr) || _non_iterable_spread$_();
 }
-function _type_of$5(obj) {
+function _type_of$6(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _unsupported_iterable_to_array$18(o, minLen) {
+function _unsupported_iterable_to_array$19(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$18(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$19(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$18(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$19(o, minLen);
 }
 function _wrap_native_super(Class) {
     var _cache = typeof Map === "function" ? new Map() : undefined;
@@ -236,7 +237,7 @@ function _is_native_reflect_construct() {
         return !!result;
     })();
 }
-function _ts_generator$1q(thisArg, body) {
+function _ts_generator$1r(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -420,10 +421,10 @@ var _timeoutMs = DEFAULT_CLI_HTTP_TIMEOUT_MS;
  * @param init - The RequestInit. Any existing `signal` is preserved; we only attach our own when no signal was supplied.
  * @returns The fetch Response.
  */ function tracedFetch(fetcher, input, init) {
-    return _async_to_generator$1q(function() {
+    return _async_to_generator$1r(function() {
         var _ref, fetchImpl, timeoutMs, method, url, controller, timeoutHandle, finalInit, // Don't let the abort timer itself keep the Node event loop (or a test worker) alive.
         _timeoutHandle_unref, localController, e;
-        return _ts_generator$1q(this, function(_state) {
+        return _ts_generator$1r(this, function(_state) {
             switch(_state.label){
                 case 0:
                     fetchImpl = fetcher !== null && fetcher !== void 0 ? fetcher : fetch;
@@ -431,7 +432,7 @@ var _timeoutMs = DEFAULT_CLI_HTTP_TIMEOUT_MS;
                     method = (_ref = init === null || init === void 0 ? void 0 : init.method) !== null && _ref !== void 0 ? _ref : 'GET';
                     if (typeof input === 'string') {
                         url = input;
-                    } else if (_instanceof$u(input, URL)) {
+                    } else if (_instanceof$v(input, URL)) {
                         url = input.toString();
                     } else {
                         url = input.url;
@@ -445,7 +446,7 @@ var _timeoutMs = DEFAULT_CLI_HTTP_TIMEOUT_MS;
                             return localController.abort();
                         }, timeoutMs);
                         (_timeoutHandle_unref = timeoutHandle.unref) === null || _timeoutHandle_unref === void 0 ? void 0 : _timeoutHandle_unref.call(timeoutHandle);
-                        finalInit = _object_spread_props$F(_object_spread$X({}, init), {
+                        finalInit = _object_spread_props$H(_object_spread$_({}, init), {
                             signal: localController.signal
                         });
                     }
@@ -609,7 +610,7 @@ function dumpResponse(data, meta) {
     if (!filePath) {
         return;
     }
-    var content = _object_spread$X({
+    var content = _object_spread$_({
         ok: true,
         data: data
     }, meta ? {
@@ -632,7 +633,7 @@ function dumpResponse(data, meta) {
         result = data.map(function(item) {
             return pickFromObject(item, fields);
         });
-    } else if (data != null && (typeof data === "undefined" ? "undefined" : _type_of$5(data)) === 'object') {
+    } else if (data != null && (typeof data === "undefined" ? "undefined" : _type_of$6(data)) === 'object') {
         result = pickFromObject(data, fields);
     } else {
         result = data;
@@ -641,7 +642,7 @@ function dumpResponse(data, meta) {
 }
 function pickFromObject(obj, fields) {
     var result;
-    if (obj == null || (typeof obj === "undefined" ? "undefined" : _type_of$5(obj)) !== 'object') {
+    if (obj == null || (typeof obj === "undefined" ? "undefined" : _type_of$6(obj)) !== 'object') {
         result = obj;
     } else {
         var picked = {};
@@ -686,7 +687,7 @@ function stringifyEnvelope(value) {
  */ function outputResult(data, meta) {
     dumpResponse(data, meta);
     var outputData = _outputOptions.pick ? pickFields(data, _outputOptions.pick) : data;
-    var output = _object_spread$X({
+    var output = _object_spread$_({
         ok: true,
         data: outputData
     }, meta ? {
@@ -715,7 +716,7 @@ function stringifyEnvelope(value) {
         var _this;
         _this = _call_super(this, CliError, [
             input.message
-        ]), _define_property$X(_this, "code", void 0), _define_property$X(_this, "suggestion", void 0);
+        ]), _define_property$_(_this, "code", void 0), _define_property$_(_this, "suggestion", void 0);
         _this.name = 'CliError';
         _this.code = input.code;
         _this.suggestion = input.suggestion;
@@ -742,15 +743,15 @@ function stringifyEnvelope(value) {
     var result;
     if (mapped) {
         result = mapped;
-    } else if (_instanceof$u(error, CliError)) {
-        result = _object_spread$X({
+    } else if (_instanceof$v(error, CliError)) {
+        result = _object_spread$_({
             ok: false,
             error: sanitizeString(error.message),
             code: error.code
         }, error.suggestion ? {
             suggestion: error.suggestion
         } : {});
-    } else if (_instanceof$u(error, Error)) {
+    } else if (_instanceof$v(error, Error)) {
         result = {
             ok: false,
             error: sanitizeString(error.message),
@@ -766,15 +767,15 @@ function stringifyEnvelope(value) {
     return result;
 }
 
-function _array_like_to_array$17(arr, len) {
+function _array_like_to_array$18(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
 function _array_without_holes$Z(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$17(arr);
+    if (Array.isArray(arr)) return _array_like_to_array$18(arr);
 }
-function asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -788,22 +789,22 @@ function asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1p(fn) {
+function _async_to_generator$1q(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$W(obj, key, value) {
+function _define_property$Z(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -822,7 +823,7 @@ function _iterable_to_array$Z(iter) {
 function _non_iterable_spread$Z() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$W(target) {
+function _object_spread$Z(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -832,12 +833,12 @@ function _object_spread$W(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$W(target, key, source[key]);
+            _define_property$Z(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$E(object, enumerableOnly) {
+function ownKeys$G(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -845,33 +846,33 @@ function ownKeys$E(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$E(target, source) {
+function _object_spread_props$G(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$E(Object(source)).forEach(function(key) {
+        ownKeys$G(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
 function _to_consumable_array$Z(arr) {
-    return _array_without_holes$Z(arr) || _iterable_to_array$Z(arr) || _unsupported_iterable_to_array$17(arr) || _non_iterable_spread$Z();
+    return _array_without_holes$Z(arr) || _iterable_to_array$Z(arr) || _unsupported_iterable_to_array$18(arr) || _non_iterable_spread$Z();
 }
-function _type_of$4(obj) {
+function _type_of$5(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _unsupported_iterable_to_array$17(o, minLen) {
+function _unsupported_iterable_to_array$18(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$17(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$18(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$17(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$18(o, minLen);
 }
-function _ts_generator$1p(thisArg, body) {
+function _ts_generator$1q(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -983,9 +984,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The call envelope describing the API target, access token, model params, and optional fetch override.
  * @returns The parsed JSON response body cast to `R`.
  */ function callModelOverHttp(input) {
-    return _async_to_generator$1p(function() {
+    return _async_to_generator$1q(function() {
         var _input_params_call;
-        return _ts_generator$1p(this, function(_state) {
+        return _ts_generator$1q(this, function(_state) {
             return [
                 2,
                 requestJson({
@@ -1013,8 +1014,8 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The request envelope describing the API target, access token, model + key, and optional fetch override.
  * @returns The parsed `{ key, data }` envelope.
  */ function getModelOverHttp(input) {
-    return _async_to_generator$1p(function() {
-        return _ts_generator$1p(this, function(_state) {
+    return _async_to_generator$1q(function() {
+        return _ts_generator$1q(this, function(_state) {
             return [
                 2,
                 requestJson({
@@ -1042,8 +1043,8 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The request envelope describing the API target, access token, model, keys, and optional fetch override.
  * @returns The parsed `{ results, errors }` envelope.
  */ function getMultipleModelsOverHttp(input) {
-    return _async_to_generator$1p(function() {
-        return _ts_generator$1p(this, function(_state) {
+    return _async_to_generator$1q(function() {
+        return _ts_generator$1q(this, function(_state) {
             if (input.keys.length === 0) {
                 throw new CliError({
                     message: 'get-many requires at least one key.',
@@ -1081,9 +1082,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - Same shape as {@link GetMultipleModelsOverHttpInput} but without the 50-key cap.
  * @returns The merged `{ results, errors }` envelope across all chunks.
  */ function getMultipleModelsOverHttpChunked(input) {
-    return _async_to_generator$1p(function() {
+    return _async_to_generator$1q(function() {
         var chunks, i, mergedResults, mergedErrors, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, chunk, _mergedResults, _mergedErrors, batch, err;
-        return _ts_generator$1p(this, function(_state) {
+        return _ts_generator$1q(this, function(_state) {
             switch(_state.label){
                 case 0:
                     if (input.keys.length === 0) {
@@ -1117,7 +1118,7 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
                     chunk = _step.value;
                     return [
                         4,
-                        getMultipleModelsOverHttp(_object_spread_props$E(_object_spread$W({}, input), {
+                        getMultipleModelsOverHttp(_object_spread_props$G(_object_spread$Z({}, input), {
                             keys: chunk
                         }))
                     ];
@@ -1171,15 +1172,15 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
     })();
 }
 function requestJson(input) {
-    return _async_to_generator$1p(function() {
+    return _async_to_generator$1q(function() {
         var hasJsonBody, init, res, _ref, ok, body, fallbackMessage;
-        return _ts_generator$1p(this, function(_state) {
+        return _ts_generator$1q(this, function(_state) {
             switch(_state.label){
                 case 0:
                     hasJsonBody = input.jsonBody !== undefined;
-                    init = _object_spread$W({
+                    init = _object_spread$Z({
                         method: input.method,
-                        headers: _object_spread$W({
+                        headers: _object_spread$Z({
                             Accept: 'application/json',
                             Authorization: "Bearer ".concat(input.accessToken)
                         }, hasJsonBody ? {
@@ -1216,9 +1217,9 @@ function requestJson(input) {
     })();
 }
 function readJsonResponse(res) {
-    return _async_to_generator$1p(function() {
+    return _async_to_generator$1q(function() {
         var text, body;
-        return _ts_generator$1p(this, function(_state) {
+        return _ts_generator$1q(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -1247,7 +1248,7 @@ function readJsonResponse(res) {
     })();
 }
 function extractMessage$1(body, fallback, res) {
-    var bodyMessage = (typeof body === "undefined" ? "undefined" : _type_of$4(body)) === 'object' && body && 'message' in body ? body.message : undefined;
+    var bodyMessage = (typeof body === "undefined" ? "undefined" : _type_of$5(body)) === 'object' && body && 'message' in body ? body.message : undefined;
     var messageString = typeof bodyMessage === 'string' ? bodyMessage : undefined;
     return messageString !== null && messageString !== void 0 ? messageString : fallback || "".concat(res.status, " ").concat(res.statusText);
 }
@@ -1274,15 +1275,297 @@ function trimSlash$1(url) {
     return url.endsWith('/') ? url.slice(0, -1) : url;
 }
 
-function _array_like_to_array$16(arr, len) {
+function _define_property$Y(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _instanceof$u(left, right) {
+    "@swc/helpers - instanceof";
+    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+        return !!right[Symbol.hasInstance](left);
+    } else {
+        return left instanceof right;
+    }
+}
+function _object_spread$Y(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$Y(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$F(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$F(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$F(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+/**
+ * The `drivers.firestoreDriverIdentifier` a client-SDK `FirestoreContext` reports.
+ *
+ * `clientFirebaseFirestoreContextFactory` stamps this; the server's
+ * `googleCloudFirestoreContextFactory` stamps `@google-cloud/firestore` instead. Comparing against
+ * it is how {@link inspectCliFirestoreSdkIdentity} tells an admin-SDK context handed to the CLI apart
+ * from a genuinely broken client one.
+ */ var CLI_CLIENT_FIRESTORE_DRIVER_IDENTIFIER = '@firebase/firestore';
+/**
+ * The doctor `detail.stage` reported when the session's Firestore handle is not a usable client-SDK
+ * `Firestore`.
+ *
+ * A distinct stage from `rules-protected-read` on purpose: the read never ran, so reporting it under
+ * the read's stage is what made this failure look like a rules/App Check problem.
+ */ var FIRESTORE_SDK_IDENTITY_STAGE = 'firestore-sdk-identity';
+/**
+ * `CliError` code for a Firestore handle the client SDK does not recognize as its own.
+ */ var FIRESTORE_SDK_INSTANCE_MISMATCH_CODE = 'FIRESTORE_SDK_INSTANCE_MISMATCH';
+/**
+ * Checks that a session's Firestore handle is one THIS copy of the client SDK will accept, and
+ * reports where every consumer resolved the SDK from.
+ *
+ * Exists because `collection()` refuses any non-`Firestore` first argument with one message —
+ * `Expected first argument to collection() to be a CollectionReference, a DocumentReference or
+ * FirebaseFirestore` — that names neither the model, nor the collection, nor which of the three
+ * distinct causes ({@link CliFirestoreSdkIdentityProblem}) produced it. Every downstream CLI built on
+ * `@dereekb/dbx-cli` shares that hazard, so the diagnosis belongs here rather than in an app.
+ *
+ * The `instanceof` test is the load-bearing one and it is deliberately NOT structural: an identity
+ * check across the package boundary is the only thing that can detect a duplicated
+ * `@firebase/firestore`, which is exactly what a structural check would hide. (Contrast
+ * `firestore.error.ts`, which narrows a thrown `FirebaseError` structurally — there the goal is to
+ * classify an error even when copies differ, so the tradeoff runs the other way.)
+ *
+ * @param input - The session's `firestoreContext`, when one was built.
+ * @returns The provenance + brand-check report.
+ */ function inspectCliFirestoreSdkIdentity(input) {
+    var _input_firestoreContext, _input_firestoreContext_drivers, _input_firestoreContext1;
+    var firestore = (_input_firestoreContext = input.firestoreContext) === null || _input_firestoreContext === void 0 ? void 0 : _input_firestoreContext.firestore;
+    var driverIdentifier = (_input_firestoreContext1 = input.firestoreContext) === null || _input_firestoreContext1 === void 0 ? void 0 : (_input_firestoreContext_drivers = _input_firestoreContext1.drivers) === null || _input_firestoreContext_drivers === void 0 ? void 0 : _input_firestoreContext_drivers.firestoreDriverIdentifier;
+    var firestoreDriverIdentifier = typeof driverIdentifier === 'string' ? driverIdentifier : undefined;
+    var firestorePresent = firestore != null;
+    var firestoreIsSdkInstance = _instanceof$u(firestore, Firestore);
+    var firestoreConstructor = firestoreConstructorName(firestore);
+    var modules = resolveCliFirestoreSdkModules();
+    var sdkDuplicated = modules.sdkFromDbxCli.packageDir != null && modules.sdkFromDbxFirebase.packageDir != null && modules.sdkFromDbxCli.packageDir !== modules.sdkFromDbxFirebase.packageDir;
+    var problem;
+    if (!firestorePresent) {
+        problem = 'no-firestore-handle';
+    } else if (firestoreDriverIdentifier != null && firestoreDriverIdentifier !== CLI_CLIENT_FIRESTORE_DRIVER_IDENTIFIER) {
+        problem = 'unexpected-driver';
+    } else if (!firestoreIsSdkInstance) {
+        problem = sdkDuplicated ? 'duplicated-firestore-sdk' : 'foreign-firestore-instance';
+    }
+    return _object_spread_props$F(_object_spread$Y(_object_spread_props$F(_object_spread$Y({
+        ok: problem == null
+    }, problem == null ? {} : {
+        problem: problem
+    }), {
+        firestorePresent: firestorePresent,
+        firestoreIsSdkInstance: firestoreIsSdkInstance
+    }), firestoreConstructor == null ? {} : {
+        firestoreConstructor: firestoreConstructor
+    }, firestoreDriverIdentifier == null ? {} : {
+        firestoreDriverIdentifier: firestoreDriverIdentifier
+    }, modules), {
+        sdkDuplicated: sdkDuplicated
+    });
+}
+/**
+ * The actionable next step for a failed {@link inspectCliFirestoreSdkIdentity}, keyed on which
+ * problem was found.
+ *
+ * Each branch names the fix rather than the symptom — a raw SDK sentence sends an operator looking at
+ * security rules and App Check, neither of which is ever the cause here.
+ *
+ * @param report - The report to describe.
+ * @returns The suggestion, or `undefined` when the report passed.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function cliFirestoreSdkIdentitySuggestion(report) {
+    var result;
+    switch(report.problem){
+        case 'no-firestore-handle':
+            result = 'The session produced no Firestore handle, so every collection reference built from it fails. This is a wiring fault, not a rules or App Check fault — re-run with `--verbose` to see the handshake, and verify the CLI resolves ONE `@dereekb/firebase`.';
+            break;
+        case 'unexpected-driver':
+            result = 'The `FirestoreContext` reports driver "'.concat(report.firestoreDriverIdentifier, '", not "').concat(CLI_CLIENT_FIRESTORE_DRIVER_IDENTIFIER, "\". An admin-SDK context reached the client-SDK read path — build the CLI's context with `clientFirebaseFirestoreContextFactory`, not `googleCloudFirestoreContextFactory`.");
+            break;
+        case 'duplicated-firestore-sdk':
+            result = "Two copies of `@firebase/firestore` are loaded — `@dereekb/dbx-cli` resolves ".concat(report.sdkFromDbxCli.packageDir, ", `@dereekb/firebase` resolves ").concat(report.sdkFromDbxFirebase.packageDir, " — so the handle one minted fails the other's brand check. Dedupe the install (`npm ls @firebase/firestore`) and rebuild the CLI.");
+            break;
+        case 'foreign-firestore-instance':
+            var _report_firestoreConstructor;
+            result = "The session's handle (`".concat((_report_firestoreConstructor = report.firestoreConstructor) !== null && _report_firestoreConstructor !== void 0 ? _report_firestoreConstructor : 'unknown', "`) is not an instance of the loaded SDK's `Firestore`, and only one copy of `@firebase/firestore` is installed. The likeliest cause is a STALE CLI artifact running against a newer `@dereekb/*` in `node_modules` — rebuild the CLI, then re-run `doctor`.");
+            break;
+        default:
+            result = undefined;
+            break;
+    }
+    return result;
+}
+/**
+ * `CliError` code for a collection/document reference the SDK refused to build for a reason the
+ * wiring identity check cannot explain — a bad `--parent`, or an app collection whose own
+ * construction is broken.
+ */ var FIRESTORE_COLLECTION_UNRESOLVABLE_CODE = 'FIRESTORE_COLLECTION_UNRESOLVABLE';
+/**
+ * Re-raises a reference-construction failure as a `CliError` that names WHAT was being built and, when
+ * the SDK handle is at fault, WHY.
+ *
+ * The failure this replaces is the least readable in the direct-Firestore path: `collection()` and
+ * `doc()` reject a bad first argument with a message that names neither the model, the collection, the
+ * `--parent`, nor the handle — and every one of those is known at the call site. A `CliError` already
+ * raised upstream (an unknown model type, a malformed `--parent`) is passed through untouched, so this
+ * can be applied unconditionally in a `catch`.
+ *
+ * @param input - The thrown value plus everything the call site knows about the reference it was building.
+ * @returns The `CliError` to throw, or the original `CliError` when the failure was already named.
+ */ function cliFirestoreWiringError(input) {
+    var error = input.error, operation = input.operation, modelType = input.modelType, collectionName = input.collectionName, parentKey = input.parentKey, firestoreContext = input.firestoreContext;
+    var result;
+    if (_instanceof$u(error, CliError)) {
+        result = error;
+    } else {
+        var _cliFirestoreSdkIdentitySuggestion, _report_firestoreDriverIdentifier, _report_sdkFromDbxCli_version, _report_sdkFromDbxCli_packageDir;
+        var facts = [
+            modelType == null ? undefined : 'model "'.concat(modelType, '"'),
+            collectionName == null ? undefined : 'collection "'.concat(collectionName, '"'),
+            parentKey == null ? 'no --parent' : '--parent "'.concat(parentKey, '"')
+        ].filter(function(x) {
+            return x != null;
+        });
+        var report = inspectCliFirestoreSdkIdentity({
+            firestoreContext: firestoreContext
+        });
+        var message = "Could not ".concat(operation, " (").concat(facts.join(', '), "): ").concat(_instanceof$u(error, Error) ? error.message : String(error));
+        result = new CliError({
+            message: message,
+            code: report.ok ? FIRESTORE_COLLECTION_UNRESOLVABLE_CODE : FIRESTORE_SDK_INSTANCE_MISMATCH_CODE,
+            suggestion: (_cliFirestoreSdkIdentitySuggestion = cliFirestoreSdkIdentitySuggestion(report)) !== null && _cliFirestoreSdkIdentitySuggestion !== void 0 ? _cliFirestoreSdkIdentitySuggestion : 'The Firestore handle itself checked out (driver "'.concat((_report_firestoreDriverIdentifier = report.firestoreDriverIdentifier) !== null && _report_firestoreDriverIdentifier !== void 0 ? _report_firestoreDriverIdentifier : 'unknown', '", @firebase/firestore ').concat((_report_sdkFromDbxCli_version = report.sdkFromDbxCli.version) !== null && _report_sdkFromDbxCli_version !== void 0 ? _report_sdkFromDbxCli_version : 'unknown', " at ").concat((_report_sdkFromDbxCli_packageDir = report.sdkFromDbxCli.packageDir) !== null && _report_sdkFromDbxCli_packageDir !== void 0 ? _report_sdkFromDbxCli_packageDir : 'unknown', "), so the rejected argument is the path, not the SDK. Check the --parent key and the app's collection factory for this model.")
+        });
+    }
+    return result;
+}
+/**
+ * The handle's constructor name, when it has one.
+ *
+ * @param firestore - The candidate handle.
+ * @returns The constructor name, or `undefined`.
+ */ function firestoreConstructorName(firestore) {
+    var _firestore_constructor;
+    var name = firestore == null ? undefined : (_firestore_constructor = firestore.constructor) === null || _firestore_constructor === void 0 ? void 0 : _firestore_constructor.name;
+    return typeof name === 'string' ? name : undefined;
+}
+/**
+ * Resolves `@firebase/firestore` from both this package and `@dereekb/firebase`, plus the `firebase`
+ * umbrella version.
+ *
+ * `createRequire` rather than `import.meta.resolve` because the resolution has to be performed
+ * relative to ANOTHER package's location (`@dereekb/firebase`'s entry file) to answer the question
+ * that matters — whether the two consumers see the same copy.
+ *
+ * @returns The two module identities and the umbrella version, each degrading to an `error` field
+ *   rather than throwing: this runs inside a diagnostic, and a failed resolution is itself a finding.
+ */ function resolveCliFirestoreSdkModules() {
+    var requireFromDbxCli = createRequire(import.meta.url);
+    var sdkFromDbxCli = resolveFirestoreSdkIdentity(requireFromDbxCli);
+    var sdkFromDbxFirebase;
+    try {
+        sdkFromDbxFirebase = resolveFirestoreSdkIdentity(createRequire(requireFromDbxCli.resolve('@dereekb/firebase')));
+    } catch (e) {
+        sdkFromDbxFirebase = {
+            error: _instanceof$u(e, Error) ? e.message : String(e)
+        };
+    }
+    var firebaseVersion;
+    try {
+        firebaseVersion = readPackageVersion(requireFromDbxCli, 'firebase/package.json');
+    } catch (unused) {
+        // the umbrella version is context for the report, not a finding on its own
+        firebaseVersion = undefined;
+    }
+    return _object_spread$Y({
+        sdkFromDbxCli: sdkFromDbxCli,
+        sdkFromDbxFirebase: sdkFromDbxFirebase
+    }, firebaseVersion == null ? {} : {
+        firebaseVersion: firebaseVersion
+    });
+}
+/**
+ * Resolves `@firebase/firestore`'s package directory + version through one `require`.
+ *
+ * Resolves `package.json` rather than the package entry because the entry differs per export
+ * condition (`index.node.cjs.js` vs `index.node.mjs`), which would report two copies where there is
+ * one. The `package.json` path is condition-independent, so its directory is a stable identity.
+ *
+ * @param resolver - The `require` to resolve through.
+ * @returns The module identity, with `error` set when resolution failed.
+ */ function resolveFirestoreSdkIdentity(resolver) {
+    var result;
+    try {
+        var packageJsonPath = resolver.resolve('@firebase/firestore/package.json');
+        var version = readPackageVersion(resolver, '@firebase/firestore/package.json');
+        result = _object_spread$Y({
+            packageDir: dirname(packageJsonPath)
+        }, version == null ? {} : {
+            version: version
+        });
+    } catch (e) {
+        result = {
+            error: _instanceof$u(e, Error) ? e.message : String(e)
+        };
+    }
+    return result;
+}
+/**
+ * Reads a resolvable `package.json`'s `version`.
+ *
+ * @param resolver - The `require` to load through.
+ * @param specifier - The `package.json` specifier.
+ * @returns The version string, or `undefined` when absent.
+ */ function readPackageVersion(resolver, specifier) {
+    var contents = resolver(specifier);
+    return typeof contents.version === 'string' ? contents.version : undefined;
+}
+
+function _array_like_to_array$17(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
 function _array_without_holes$Y(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$16(arr);
+    if (Array.isArray(arr)) return _array_like_to_array$17(arr);
 }
-function asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1296,16 +1579,16 @@ function asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1o(fn) {
+function _async_to_generator$1p(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -1318,17 +1601,17 @@ function _non_iterable_spread$Y() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
 function _to_consumable_array$Y(arr) {
-    return _array_without_holes$Y(arr) || _iterable_to_array$Y(arr) || _unsupported_iterable_to_array$16(arr) || _non_iterable_spread$Y();
+    return _array_without_holes$Y(arr) || _iterable_to_array$Y(arr) || _unsupported_iterable_to_array$17(arr) || _non_iterable_spread$Y();
 }
-function _unsupported_iterable_to_array$16(o, minLen) {
+function _unsupported_iterable_to_array$17(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$16(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$17(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$16(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$17(o, minLen);
 }
-function _ts_generator$1o(thisArg, body) {
+function _ts_generator$1p(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -1469,9 +1752,9 @@ function _ts_generator$1o(thisArg, body) {
  * @returns The session-bound {@link CliFirestoreModels}.
  * @throws {CliError} When the CLI was not configured with a `firestore` binding, or the session cannot be opened.
  */ function requireCliFirestoreModels(context) {
-    return _async_to_generator$1o(function() {
+    return _async_to_generator$1p(function() {
         var getFirestoreModels;
-        return _ts_generator$1o(this, function(_state) {
+        return _ts_generator$1p(this, function(_state) {
             getFirestoreModels = context.getFirestoreModels;
             if (!getFirestoreModels) {
                 throw new CliError({
@@ -1501,7 +1784,7 @@ function _ts_generator$1o(thisArg, body) {
  * @__NO_SIDE_EFFECTS__
  */ function createCliFirestoreModels(input) {
     var binding = input.binding, session = input.session;
-    var collections = binding.collections(session.firestoreContext);
+    var collections = buildCliFirestoreCollections(input);
     var collectionNameCache = new Map();
     // the one cast this generic buys: TypeScript cannot check an implementation against
     // `CliFirestoreModelServiceForType<Y, K>` — a conditional type it cannot resolve while `Y` is still
@@ -1539,6 +1822,33 @@ function _ts_generator$1o(thisArg, body) {
         }
     };
 }
+/**
+ * Builds the app's collections object against the session's `FirestoreContext`.
+ *
+ * The FIRST place a broken session handle is used, and — before this — the place it failed most
+ * opaquely: `make<App>FirestoreCollections` builds every collection eagerly, so a `firestoreContext`
+ * whose `firestore` is not a client-SDK `Firestore` fails here with the SDK's own
+ * `Expected first argument to collection() to be …` and no indication that a CLI wiring/version
+ * problem, rather than the app's collections, is at fault. Every direct-Firestore command routes
+ * through here, so naming it once covers `firestore-get`, `firestore-query`, and every action.
+ *
+ * @param input - The binding and the open session.
+ * @returns The app's collections object.
+ * @throws {CliError} When the collections cannot be built against the session's context.
+ */ function buildCliFirestoreCollections(input) {
+    var binding = input.binding, session = input.session;
+    var result;
+    try {
+        result = binding.collections(session.firestoreContext);
+    } catch (e) {
+        throw cliFirestoreWiringError({
+            error: e,
+            operation: "build the app's Firestore collections from the session context",
+            firestoreContext: session.firestoreContext
+        });
+    }
+    return result;
+}
 /**
  * Resolves a short collection name to its registered model type, memoizing every identity it sees on
  * the way so a second lookup is free.
@@ -1605,7 +1915,7 @@ function tryReadCollectionIdentity(binding, collections, modelType) {
     return result;
 }
 
-function asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1619,26 +1929,26 @@ function asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1n(fn) {
+function _async_to_generator$1o(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _type_of$3(obj) {
+function _type_of$4(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _ts_generator$1n(thisArg, body) {
+function _ts_generator$1o(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -1754,9 +2064,9 @@ function _ts_generator$1n(thisArg, body) {
  * @returns The parsed {@link CliFirestoreSession}.
  * @throws {CliError} When the endpoint answers non-2xx or returns an unusable body.
  */ function fetchFirestoreSession(input) {
-    return _async_to_generator$1n(function() {
+    return _async_to_generator$1o(function() {
         var url, res, text, body, session;
-        return _ts_generator$1n(this, function(_state) {
+        return _ts_generator$1o(this, function(_state) {
             switch(_state.label){
                 case 0:
                     url = "".concat(trimSlash(input.apiBaseUrl)).concat(FIRESTORE_SESSION_API_PATH);
@@ -1809,7 +2119,7 @@ function _ts_generator$1n(thisArg, body) {
     })();
 }
 function extractMessage(body, fallback, res) {
-    var bodyMessage = (typeof body === "undefined" ? "undefined" : _type_of$3(body)) === 'object' && body && 'message' in body ? body.message : undefined;
+    var bodyMessage = (typeof body === "undefined" ? "undefined" : _type_of$4(body)) === 'object' && body && 'message' in body ? body.message : undefined;
     var messageString = typeof bodyMessage === 'string' ? bodyMessage : undefined;
     return messageString !== null && messageString !== void 0 ? messageString : fallback || "".concat(res.status, " ").concat(res.statusText);
 }
@@ -1832,7 +2142,7 @@ function trimSlash(url) {
     return url.endsWith('/') ? url.slice(0, -1) : url;
 }
 
-function _define_property$V(obj, key, value) {
+function _define_property$X(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -1845,7 +2155,7 @@ function _define_property$V(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$V(target) {
+function _object_spread$X(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -1855,12 +2165,12 @@ function _object_spread$V(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$V(target, key, source[key]);
+            _define_property$X(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$D(object, enumerableOnly) {
+function ownKeys$E(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -1868,12 +2178,12 @@ function ownKeys$D(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$D(target, source) {
+function _object_spread_props$E(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$D(Object(source)).forEach(function(key) {
+        ownKeys$E(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -2010,7 +2320,7 @@ function _object_spread_props$D(target, source) {
     if (env || defaultEnv) {
         var _nonEmpty, _nonEmpty1, _nonEmpty2, _nonEmpty3;
         var emulators = mergeCliFirebaseEmulatorsConfig(env === null || env === void 0 ? void 0 : env.emulators, defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.emulators);
-        result = _object_spread$V({
+        result = _object_spread$X({
             apiKey: (_nonEmpty = nonEmpty(env === null || env === void 0 ? void 0 : env.apiKey)) !== null && _nonEmpty !== void 0 ? _nonEmpty : nonEmpty(defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.apiKey),
             authDomain: (_nonEmpty1 = nonEmpty(env === null || env === void 0 ? void 0 : env.authDomain)) !== null && _nonEmpty1 !== void 0 ? _nonEmpty1 : nonEmpty(defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.authDomain),
             projectId: (_nonEmpty2 = nonEmpty(env === null || env === void 0 ? void 0 : env.projectId)) !== null && _nonEmpty2 !== void 0 ? _nonEmpty2 : nonEmpty(defaultEnv === null || defaultEnv === void 0 ? void 0 : defaultEnv.projectId),
@@ -2105,7 +2415,7 @@ function nonEmpty(value) {
     } else {
         var _ref, _ref1;
         var _input_env, _input_env1, _input_env2, _input_env3, _input_env4, _input_env5, _input_env6, _input_env7, _input_env8;
-        var firebase = mergeCliFirebaseConfig(_object_spread$V({
+        var firebase = mergeCliFirebaseConfig(_object_spread$X({
             apiKey: firebaseApiKey,
             authDomain: firebaseAuthDomain,
             projectId: firebaseProjectId,
@@ -2117,7 +2427,7 @@ function nonEmpty(value) {
                 firestorePort: firebaseFirestoreEmulatorPort
             }
         } : undefined), (_input_env = input.env) === null || _input_env === void 0 ? void 0 : _input_env.firebase);
-        result = _object_spread$V({
+        result = _object_spread$X({
             apiBaseUrl: (_ref = apiBaseUrl !== null && apiBaseUrl !== void 0 ? apiBaseUrl : (_input_env1 = input.env) === null || _input_env1 === void 0 ? void 0 : _input_env1.apiBaseUrl) !== null && _ref !== void 0 ? _ref : '',
             oidcIssuer: (_ref1 = oidcIssuer !== null && oidcIssuer !== void 0 ? oidcIssuer : (_input_env2 = input.env) === null || _input_env2 === void 0 ? void 0 : _input_env2.oidcIssuer) !== null && _ref1 !== void 0 ? _ref1 : '',
             appClientUrl: appClientUrl !== null && appClientUrl !== void 0 ? appClientUrl : (_input_env3 = input.env) === null || _input_env3 === void 0 ? void 0 : _input_env3.appClientUrl,
@@ -2166,7 +2476,7 @@ function parsePort(value) {
     if (refreshToken) {
         var accessToken = nonEmpty(process.env["".concat(prefix, "_ACCESS_TOKEN")]);
         var scope = nonEmpty(process.env["".concat(prefix, "_TOKEN_SCOPE")]);
-        result = _object_spread_props$D(_object_spread$V({
+        result = _object_spread_props$E(_object_spread$X({
             accessToken: accessToken !== null && accessToken !== void 0 ? accessToken : '',
             refreshToken: refreshToken,
             // No reliable expiry is supplied via env, so force a refresh on first use (expiresAt 0 = expired).
@@ -2239,7 +2549,7 @@ function parsePort(value) {
     }).hasExpired();
 }
 
-function asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2253,22 +2563,22 @@ function asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1m(fn) {
+function _async_to_generator$1n(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$U(obj, key, value) {
+function _define_property$W(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2289,7 +2599,7 @@ function _instanceof$t(left, right) {
         return left instanceof right;
     }
 }
-function _object_spread$U(target) {
+function _object_spread$W(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2299,12 +2609,12 @@ function _object_spread$U(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$U(target, key, source[key]);
+            _define_property$W(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$C(object, enumerableOnly) {
+function ownKeys$D(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -2312,18 +2622,18 @@ function ownKeys$C(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$C(target, source) {
+function _object_spread_props$D(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$C(Object(source)).forEach(function(key) {
+        ownKeys$D(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$1m(thisArg, body) {
+function _ts_generator$1n(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -2464,9 +2774,9 @@ function _ts_generator$1m(thisArg, body) {
  * @returns The live {@link CliFirestoreSessionContext}.
  * @throws {CliError} When the env lacks Firebase client config, or any step of the handshake fails.
  */ function createCliFirestoreSessionContext(input) {
-    return _async_to_generator$1m(function() {
+    return _async_to_generator$1n(function() {
         var _ref, _getApps_find, _firebase_emulators, _firebase_emulators1, _firebase_emulators2, cliName, envName, env, accessToken, fetcher, sessionCache, _input_refreshSession, refreshSession, firebase, cached, _tmp, liveCached, fromCache, session, _tmp1, appName, app, useEmulators, appCheckToken, expireTimeMillis, emulatorHost, auth, firestore, e;
-        return _ts_generator$1m(this, function(_state) {
+        return _ts_generator$1n(this, function(_state) {
             switch(_state.label){
                 case 0:
                     cliName = input.cliName, envName = input.envName, env = input.env, accessToken = input.accessToken, fetcher = input.fetcher, sessionCache = input.sessionCache, _input_refreshSession = input.refreshSession, refreshSession = _input_refreshSession === void 0 ? false : _input_refreshSession;
@@ -2559,8 +2869,8 @@ function _ts_generator$1m(thisArg, body) {
                         initializeAppCheck(app, {
                             provider: new CustomProvider({
                                 getToken: function getToken() {
-                                    return _async_to_generator$1m(function() {
-                                        return _ts_generator$1m(this, function(_state) {
+                                    return _async_to_generator$1n(function() {
+                                        return _ts_generator$1n(this, function(_state) {
                                             return [
                                                 2,
                                                 {
@@ -2619,7 +2929,7 @@ function _ts_generator$1m(thisArg, body) {
                     _state.sent();
                     return [
                         2,
-                        createCliFirestoreSessionContext(_object_spread_props$C(_object_spread$U({}, input), {
+                        createCliFirestoreSessionContext(_object_spread_props$D(_object_spread$W({}, input), {
                             refreshSession: true
                         }))
                     ];
@@ -2662,8 +2972,8 @@ function _ts_generator$1m(thisArg, body) {
  *
  * @param session - The session context to close.
  */ function closeCliFirestoreSessionContext(session) {
-    return _async_to_generator$1m(function() {
-        return _ts_generator$1m(this, function(_state) {
+    return _async_to_generator$1n(function() {
+        return _ts_generator$1n(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -2684,8 +2994,8 @@ function _ts_generator$1m(thisArg, body) {
  *
  * @param app - The app to delete.
  */ function closeCliFirebaseApp(app) {
-    return _async_to_generator$1m(function() {
-        return _ts_generator$1m(this, function(_state) {
+    return _async_to_generator$1n(function() {
+        return _ts_generator$1n(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -2743,9 +3053,9 @@ function _ts_generator$1m(thisArg, body) {
  *   consumers in the same process are left alone.
  * @returns Resolves once every matching app has been deleted.
  */ function closeAllCliFirebaseApps(input) {
-    return _async_to_generator$1m(function() {
+    return _async_to_generator$1n(function() {
         var prefix, apps;
-        return _ts_generator$1m(this, function(_state) {
+        return _ts_generator$1n(this, function(_state) {
             switch(_state.label){
                 case 0:
                     // every env this process opened a session for, which is normally exactly one
@@ -2818,7 +3128,7 @@ function _ts_generator$1m(thisArg, body) {
     };
 }
 
-function asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2832,22 +3142,22 @@ function asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1l(fn) {
+function _async_to_generator$1m(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1l(thisArg, body) {
+function _ts_generator$1m(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -2959,9 +3269,9 @@ function _ts_generator$1l(thisArg, body) {
  * @returns The opened (and memoized) direct-Firestore session.
  * @throws {CliError} When the context does not support direct-Firestore sessions.
  */ function requireCliFirestoreSession(context) {
-    return _async_to_generator$1l(function() {
+    return _async_to_generator$1m(function() {
         var getFirestoreSession;
-        return _ts_generator$1l(this, function(_state) {
+        return _ts_generator$1m(this, function(_state) {
             getFirestoreSession = context.getFirestoreSession;
             if (!getFirestoreSession) {
                 throw new CliError({
@@ -2988,8 +3298,8 @@ function _ts_generator$1l(thisArg, body) {
  * @returns The client `FirestoreContext` an app's collections factory consumes.
  * @throws {CliError} When the context does not support direct-Firestore sessions.
  */ function requireCliFirestoreContext(context) {
-    return _async_to_generator$1l(function() {
-        return _ts_generator$1l(this, function(_state) {
+    return _async_to_generator$1m(function() {
+        return _ts_generator$1m(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -3086,9 +3396,9 @@ var getCliContext = _cliContextSlot.get;
         return getFirestoreModelsForBinding(firestore);
     };
     function closeFirestoreSession() {
-        return _async_to_generator$1l(function() {
+        return _async_to_generator$1m(function() {
             var opened, session;
-            return _ts_generator$1l(this, function(_state) {
+            return _ts_generator$1m(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         opened = firestoreSession;
@@ -3167,7 +3477,7 @@ var getCliContext = _cliContextSlot.get;
     };
 }
 
-function asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -3181,22 +3491,22 @@ function asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1k(fn) {
+function _async_to_generator$1l(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1k(thisArg, body) {
+function _ts_generator$1l(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -3309,9 +3619,9 @@ function _ts_generator$1k(thisArg, body) {
  */ function wrapCommandHandler(handler) {
     var exitCode = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : CLI_EXIT_CODE_HANDLER;
     return function(argv) {
-        return _async_to_generator$1k(function() {
+        return _async_to_generator$1l(function() {
             var e;
-            return _ts_generator$1k(this, function(_state) {
+            return _ts_generator$1l(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         _state.trys.push([
@@ -3372,7 +3682,7 @@ function _ts_generator$1k(thisArg, body) {
     };
 }
 
-function asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -3386,22 +3696,22 @@ function asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1j(fn) {
+function _async_to_generator$1k(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1j(thisArg, body) {
+function _ts_generator$1k(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -3521,9 +3831,9 @@ function _ts_generator$1j(thisArg, body) {
             return spec.helpEpilogue ? built.epilogue(spec.helpEpilogue) : built;
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$1j(function() {
+            return _async_to_generator$1k(function() {
                 var context, result;
-                return _ts_generator$1j(this, function(_state) {
+                return _ts_generator$1k(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             context = requireCliContext();
@@ -3547,15 +3857,15 @@ function _ts_generator$1j(thisArg, body) {
     };
 }
 
-function _array_like_to_array$15(arr, len) {
+function _array_like_to_array$16(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_with_holes$l(arr) {
+function _array_with_holes$m(arr) {
     if (Array.isArray(arr)) return arr;
 }
-function _iterable_to_array_limit$l(arr, i) {
+function _iterable_to_array_limit$m(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
     var _arr = [];
@@ -3579,19 +3889,19 @@ function _iterable_to_array_limit$l(arr, i) {
     }
     return _arr;
 }
-function _non_iterable_rest$l() {
+function _non_iterable_rest$m() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _sliced_to_array$l(arr, i) {
-    return _array_with_holes$l(arr) || _iterable_to_array_limit$l(arr, i) || _unsupported_iterable_to_array$15(arr, i) || _non_iterable_rest$l();
+function _sliced_to_array$m(arr, i) {
+    return _array_with_holes$m(arr) || _iterable_to_array_limit$m(arr, i) || _unsupported_iterable_to_array$16(arr, i) || _non_iterable_rest$m();
 }
-function _unsupported_iterable_to_array$15(o, minLen) {
+function _unsupported_iterable_to_array$16(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$15(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$16(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$15(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$16(o, minLen);
 }
 /**
  * Default name of the parent command that groups all registered action specs.
@@ -3647,7 +3957,7 @@ function _unsupported_iterable_to_array$15(o, minLen) {
             }
         }
         var sortedModels = Array.from(byModel.entries()).sort(function(param, param1) {
-            var _param = _sliced_to_array$l(param, 1), a = _param[0], _param1 = _sliced_to_array$l(param1, 1), b = _param1[0];
+            var _param = _sliced_to_array$m(param, 1), a = _param[0], _param1 = _sliced_to_array$m(param1, 1), b = _param1[0];
             return a.localeCompare(b);
         });
         result = [
@@ -3678,7 +3988,7 @@ function _unsupported_iterable_to_array$15(o, minLen) {
                     var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
                     try {
                         var _loop = function() {
-                            var _step_value = _sliced_to_array$l(_step1.value, 2), model = _step_value[0], modelSpecs = _step_value[1];
+                            var _step_value = _sliced_to_array$m(_step1.value, 2), model = _step_value[0], modelSpecs = _step_value[1];
                             yargs.command({
                                 command: "".concat(model, " <action>"),
                                 describe: "Composite actions scoped to model '".concat(model, "' (").concat(modelSpecs.length, ")."),
@@ -3736,18 +4046,18 @@ function _unsupported_iterable_to_array$15(o, minLen) {
     return result;
 }
 
-function _array_like_to_array$14(arr, len) {
+function _array_like_to_array$15(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_with_holes$k(arr) {
+function _array_with_holes$l(arr) {
     if (Array.isArray(arr)) return arr;
 }
 function _array_without_holes$X(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$14(arr);
+    if (Array.isArray(arr)) return _array_like_to_array$15(arr);
 }
-function asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -3761,22 +4071,22 @@ function asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1i(fn) {
+function _async_to_generator$1j(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$T(obj, key, value) {
+function _define_property$V(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -3792,7 +4102,7 @@ function _define_property$T(obj, key, value) {
 function _iterable_to_array$X(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
-function _iterable_to_array_limit$k(arr, i) {
+function _iterable_to_array_limit$l(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
     var _arr = [];
@@ -3816,13 +4126,13 @@ function _iterable_to_array_limit$k(arr, i) {
     }
     return _arr;
 }
-function _non_iterable_rest$k() {
+function _non_iterable_rest$l() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
 function _non_iterable_spread$X() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$T(target) {
+function _object_spread$V(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -3832,12 +4142,12 @@ function _object_spread$T(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$T(target, key, source[key]);
+            _define_property$V(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$B(object, enumerableOnly) {
+function ownKeys$C(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -3845,32 +4155,32 @@ function ownKeys$B(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$B(target, source) {
+function _object_spread_props$C(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$B(Object(source)).forEach(function(key) {
+        ownKeys$C(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _sliced_to_array$k(arr, i) {
-    return _array_with_holes$k(arr) || _iterable_to_array_limit$k(arr, i) || _unsupported_iterable_to_array$14(arr, i) || _non_iterable_rest$k();
+function _sliced_to_array$l(arr, i) {
+    return _array_with_holes$l(arr) || _iterable_to_array_limit$l(arr, i) || _unsupported_iterable_to_array$15(arr, i) || _non_iterable_rest$l();
 }
 function _to_consumable_array$X(arr) {
-    return _array_without_holes$X(arr) || _iterable_to_array$X(arr) || _unsupported_iterable_to_array$14(arr) || _non_iterable_spread$X();
+    return _array_without_holes$X(arr) || _iterable_to_array$X(arr) || _unsupported_iterable_to_array$15(arr) || _non_iterable_spread$X();
 }
-function _unsupported_iterable_to_array$14(o, minLen) {
+function _unsupported_iterable_to_array$15(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$14(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$15(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$14(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$15(o, minLen);
 }
-function _ts_generator$1i(thisArg, body) {
+function _ts_generator$1j(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -3984,7 +4294,7 @@ var _defaultResponseAdapter = {
     }
 };
 function _defaultBuildRequestData(params, state, limit) {
-    var base = _object_spread$T({}, params);
+    var base = _object_spread$V({}, params);
     if (state.cursorDocumentKey != null) {
         base['cursorDocumentKey'] = state.cursorDocumentKey;
     }
@@ -3994,9 +4304,9 @@ function _defaultBuildRequestData(params, state, limit) {
     return base;
 }
 function _runItemTasks(input) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var context, items, keys, pageIndex, iterateItem, itemPerformTasksConfig, maxParallelPerPage, indexed, taskConfig, performResult;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = input.context, items = input.items, keys = input.keys, pageIndex = input.pageIndex, iterateItem = input.iterateItem, itemPerformTasksConfig = input.itemPerformTasksConfig, maxParallelPerPage = input.maxParallelPerPage;
@@ -4008,7 +4318,7 @@ function _runItemTasks(input) {
                             itemIndex: itemIndex
                         };
                     });
-                    taskConfig = _object_spread_props$B(_object_spread$T({
+                    taskConfig = _object_spread_props$C(_object_spread$V({
                         sequential: true,
                         throwError: true
                     }, itemPerformTasksConfig), {
@@ -4032,7 +4342,7 @@ function _runItemTasks(input) {
                     return [
                         2,
                         performResult.results.map(function(param) {
-                            var _param = _sliced_to_array$k(param, 2), output = _param[1];
+                            var _param = _sliced_to_array$l(param, 2), output = _param[1];
                             return output;
                         })
                     ];
@@ -4041,9 +4351,9 @@ function _runItemTasks(input) {
     })();
 }
 function _processPage(input) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var context, raw, pageIndex, responseAdapter, iterateItem, iteratePage, itemPerformTasksConfig, maxParallelPerPage, items, keys, nextCursorDocumentKey, hasMore, itemResults, _tmp, pageResult, _tmp1, output;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = input.context, raw = input.raw, pageIndex = input.pageIndex, responseAdapter = input.responseAdapter, iterateItem = input.iterateItem, iteratePage = input.iteratePage, itemPerformTasksConfig = input.itemPerformTasksConfig, maxParallelPerPage = input.maxParallelPerPage;
@@ -4183,9 +4493,9 @@ function _evaluateLoopExit(input) {
  * });
  * ```
  */ function iterateDbxCliCallModel(config) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var context, modelType, call, specifier, params, _config_buildRequestData, buildRequestData, _config_responseAdapter, responseAdapter, limitPerPage, totalItemsLimit, maxPages, iterateItem, iteratePage, itemPerformTasksConfig, maxParallelPerPage, _config_collectItems, collectItems, _config_collectItemResults, collectItemResults, _config_collectPageResults, collectPageResults, allItems, allItemResults, allPageResults, pageIndex, totalItems, cursorDocumentKey, hitLimit, keepGoing, collectItemsForPage, collectItemResultsForPage, collectPageResultsForPage, effectiveLimit, data, raw, pageOutcome, _allItems, _allItemResults, exit, result;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = config.context, modelType = config.modelType, call = config.call, specifier = config.specifier, params = config.params, _config_buildRequestData = config.buildRequestData, buildRequestData = _config_buildRequestData === void 0 ? _defaultBuildRequestData : _config_buildRequestData, _config_responseAdapter = config.responseAdapter, responseAdapter = _config_responseAdapter === void 0 ? _defaultResponseAdapter : _config_responseAdapter, limitPerPage = config.limitPerPage, totalItemsLimit = config.totalItemsLimit, maxPages = config.maxPages, iterateItem = config.iterateItem, iteratePage = config.iteratePage, itemPerformTasksConfig = config.itemPerformTasksConfig, maxParallelPerPage = config.maxParallelPerPage, _config_collectItems = config.collectItems, collectItems = _config_collectItems === void 0 ? true : _config_collectItems, _config_collectItemResults = config.collectItemResults, collectItemResults = _config_collectItemResults === void 0 ? iterateItem != null : _config_collectItemResults, _config_collectPageResults = config.collectPageResults, collectPageResults = _config_collectPageResults === void 0 ? iteratePage != null : _config_collectPageResults;
@@ -4265,7 +4575,7 @@ function _evaluateLoopExit(input) {
                         1
                     ];
                 case 4:
-                    result = _object_spread$T({
+                    result = _object_spread$V({
                         totalPages: pageIndex,
                         totalItems: totalItems,
                         hitLimit: hitLimit,
@@ -4286,7 +4596,7 @@ function _evaluateLoopExit(input) {
     })();
 }
 
-function asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -4300,22 +4610,22 @@ function asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1h(fn) {
+function _async_to_generator$1i(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$S(obj, key, value) {
+function _define_property$U(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -4328,7 +4638,7 @@ function _define_property$S(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$S(target) {
+function _object_spread$U(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -4338,12 +4648,12 @@ function _object_spread$S(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$S(target, key, source[key]);
+            _define_property$U(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$A(object, enumerableOnly) {
+function ownKeys$B(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -4351,18 +4661,18 @@ function ownKeys$A(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$A(target, source) {
+function _object_spread_props$B(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$A(Object(source)).forEach(function(key) {
+        ownKeys$B(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$1h(thisArg, body) {
+function _ts_generator$1i(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -4478,14 +4788,14 @@ function _ts_generator$1h(thisArg, body) {
             return spec.builder ? spec.builder(yargs) : yargs;
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$1h(function() {
+            return _async_to_generator$1i(function() {
                 var context, data, params, result;
-                return _ts_generator$1h(this, function(_state) {
+                return _ts_generator$1i(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             context = requireCliContext();
                             data = spec.buildParams(argv);
-                            params = _object_spread_props$A(_object_spread$S({
+                            params = _object_spread_props$B(_object_spread$U({
                                 modelType: spec.model,
                                 call: spec.verb
                             }, spec.specifier == null ? {} : {
@@ -4665,7 +4975,7 @@ function AsyncFromSyncIterator$4(s) {
         }
     }, new AsyncFromSyncIterator$4(s);
 }
-function asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -4679,22 +4989,22 @@ function asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1g(fn) {
+function _async_to_generator$1h(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1g(thisArg, body) {
+function _ts_generator$1h(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -4857,9 +5167,9 @@ function _ts_generator$1g(thisArg, body) {
  * @returns The UTF-8 decoded stdin contents.
  * @throws {CliError} When stdin is a TTY, with `code: 'STDIN_NOT_PIPED'`.
  */ function readAllStdin() {
-    return _async_to_generator$1g(function() {
+    return _async_to_generator$1h(function() {
         var chunks, _iteratorAbruptCompletion, _didIteratorError, _iteratorError, _iterator, _step, _value, chunk, err;
-        return _ts_generator$1g(this, function(_state) {
+        return _ts_generator$1h(this, function(_state) {
             switch(_state.label){
                 case 0:
                     if (process.stdin.isTTY) {
@@ -4963,9 +5273,9 @@ function _ts_generator$1g(thisArg, body) {
  *
  * @returns The tokens parsed from stdin.
  */ function readStdinTokens() {
-    return _async_to_generator$1g(function() {
+    return _async_to_generator$1h(function() {
         var raw;
-        return _ts_generator$1g(this, function(_state) {
+        return _ts_generator$1h(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -4985,7 +5295,7 @@ function _ts_generator$1g(thisArg, body) {
     })();
 }
 
-function asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -4999,22 +5309,22 @@ function asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1f(fn) {
+function _async_to_generator$1g(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$R(obj, key, value) {
+function _define_property$T(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -5035,7 +5345,7 @@ function _instanceof$s(left, right) {
         return left instanceof right;
     }
 }
-function _object_spread$R(target) {
+function _object_spread$T(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -5045,12 +5355,12 @@ function _object_spread$R(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$R(target, key, source[key]);
+            _define_property$T(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$z(object, enumerableOnly) {
+function ownKeys$A(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -5058,18 +5368,18 @@ function ownKeys$z(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$z(target, source) {
+function _object_spread_props$A(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$z(Object(source)).forEach(function(key) {
+        ownKeys$A(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$1f(thisArg, body) {
+function _ts_generator$1g(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -5180,9 +5490,9 @@ function _ts_generator$1f(thisArg, body) {
         return withCallModelArgs(yargs);
     },
     handler: wrapCommandHandler(function(argv) {
-        return _async_to_generator$1f(function() {
+        return _async_to_generator$1g(function() {
             var context, data, rawData, _tmp, params, result;
-            return _ts_generator$1f(this, function(_state) {
+            return _ts_generator$1g(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         context = requireCliContext();
@@ -5222,7 +5532,7 @@ function _ts_generator$1f(thisArg, body) {
                                 });
                             }
                         }
-                        params = _object_spread_props$z(_object_spread$R({
+                        params = _object_spread_props$A(_object_spread$T({
                             modelType: argv.model,
                             call: argv.verb
                         }, argv.specifier == null ? {} : {
@@ -5246,12 +5556,12 @@ function _ts_generator$1f(thisArg, body) {
     })
 };
 
-function _array_like_to_array$13(arr, len) {
+function _array_like_to_array$14(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_with_holes$j(arr) {
+function _array_with_holes$k(arr) {
     if (Array.isArray(arr)) return arr;
 }
 function _instanceof$r(left, right) {
@@ -5262,7 +5572,7 @@ function _instanceof$r(left, right) {
         return left instanceof right;
     }
 }
-function _iterable_to_array_limit$j(arr, i) {
+function _iterable_to_array_limit$k(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
     var _arr = [];
@@ -5286,23 +5596,23 @@ function _iterable_to_array_limit$j(arr, i) {
     }
     return _arr;
 }
-function _non_iterable_rest$j() {
+function _non_iterable_rest$k() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _sliced_to_array$j(arr, i) {
-    return _array_with_holes$j(arr) || _iterable_to_array_limit$j(arr, i) || _unsupported_iterable_to_array$13(arr, i) || _non_iterable_rest$j();
+function _sliced_to_array$k(arr, i) {
+    return _array_with_holes$k(arr) || _iterable_to_array_limit$k(arr, i) || _unsupported_iterable_to_array$14(arr, i) || _non_iterable_rest$k();
 }
-function _type_of$2(obj) {
+function _type_of$3(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _unsupported_iterable_to_array$13(o, minLen) {
+function _unsupported_iterable_to_array$14(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$13(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$14(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$13(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$14(o, minLen);
 }
 /**
  * Resolves the manifest entry for `modelType`. Lookup tries
@@ -5395,7 +5705,7 @@ function rewriteWithFields(value, fields) {
         var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
         try {
             for(var _iterator1 = Object.entries(value)[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
-                var _step_value = _sliced_to_array$j(_step1.value, 2), key = _step_value[0], raw = _step_value[1];
+                var _step_value = _sliced_to_array$k(_step1.value, 2), key = _step_value[0], raw = _step_value[1];
                 var field1 = fieldByName.get(key);
                 if (field1) {
                     var longKey = field1.longName.length > 0 ? field1.longName : key;
@@ -5442,7 +5752,7 @@ function rewriteFieldValue(value, field) {
 }
 function isPlainObject(value) {
     var result;
-    if (value === null || (typeof value === "undefined" ? "undefined" : _type_of$2(value)) !== 'object') {
+    if (value === null || (typeof value === "undefined" ? "undefined" : _type_of$3(value)) !== 'object') {
         result = false;
     } else if (Array.isArray(value) || _instanceof$r(value, Date)) {
         result = false;
@@ -5455,13 +5765,13 @@ function isPlainObject(value) {
     return result;
 }
 
-function _array_like_to_array$12(arr, len) {
+function _array_like_to_array$13(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
 function _array_without_holes$W(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$12(arr);
+    if (Array.isArray(arr)) return _array_like_to_array$13(arr);
 }
 function _iterable_to_array$W(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
@@ -5470,15 +5780,15 @@ function _non_iterable_spread$W() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
 function _to_consumable_array$W(arr) {
-    return _array_without_holes$W(arr) || _iterable_to_array$W(arr) || _unsupported_iterable_to_array$12(arr) || _non_iterable_spread$W();
+    return _array_without_holes$W(arr) || _iterable_to_array$W(arr) || _unsupported_iterable_to_array$13(arr) || _non_iterable_spread$W();
 }
-function _unsupported_iterable_to_array$12(o, minLen) {
+function _unsupported_iterable_to_array$13(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$12(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$13(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$12(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$13(o, minLen);
 }
 /**
  * Default command name for the model-decode command. Top-level so it stays
@@ -5647,21 +5957,21 @@ function renderAncestorLine(ancestor) {
     return ancestor.modelName ? "- ".concat(ancestor.modelName, " — prefix ").concat(ancestor.prefix, ", id ").concat(ancestor.id) : "- <unknown> — prefix ".concat(ancestor.prefix, ", id ").concat(ancestor.id);
 }
 
-function _array_like_to_array$11(arr, len) {
+function _array_like_to_array$12(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_with_holes$i(arr) {
+function _array_with_holes$j(arr) {
     if (Array.isArray(arr)) return arr;
 }
 function _array_without_holes$V(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$11(arr);
+    if (Array.isArray(arr)) return _array_like_to_array$12(arr);
 }
 function _iterable_to_array$V(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
-function _iterable_to_array_limit$i(arr, i) {
+function _iterable_to_array_limit$j(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
     var _arr = [];
@@ -5685,25 +5995,25 @@ function _iterable_to_array_limit$i(arr, i) {
     }
     return _arr;
 }
-function _non_iterable_rest$i() {
+function _non_iterable_rest$j() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
 function _non_iterable_spread$V() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _sliced_to_array$i(arr, i) {
-    return _array_with_holes$i(arr) || _iterable_to_array_limit$i(arr, i) || _unsupported_iterable_to_array$11(arr, i) || _non_iterable_rest$i();
+function _sliced_to_array$j(arr, i) {
+    return _array_with_holes$j(arr) || _iterable_to_array_limit$j(arr, i) || _unsupported_iterable_to_array$12(arr, i) || _non_iterable_rest$j();
 }
 function _to_consumable_array$V(arr) {
-    return _array_without_holes$V(arr) || _iterable_to_array$V(arr) || _unsupported_iterable_to_array$11(arr) || _non_iterable_spread$V();
+    return _array_without_holes$V(arr) || _iterable_to_array$V(arr) || _unsupported_iterable_to_array$12(arr) || _non_iterable_spread$V();
 }
-function _unsupported_iterable_to_array$11(o, minLen) {
+function _unsupported_iterable_to_array$12(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$11(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$12(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$11(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$12(o, minLen);
 }
 /**
  * Parses the positionals for the top-level `get <modelOrKey> [key]` command into a
@@ -5874,7 +6184,7 @@ function inferModelTypeFromKeys(keys, manifest) {
             code: 'INVALID_ARGUMENT'
         });
     }
-    var _decodedTypes = _sliced_to_array$i(decodedTypes, 1), modelType = _decodedTypes[0];
+    var _decodedTypes = _sliced_to_array$j(decodedTypes, 1), modelType = _decodedTypes[0];
     return {
         modelType: modelType,
         keys: keys
@@ -5887,18 +6197,18 @@ function manifestPrefixList(manifest) {
     return prefixes.join(', ');
 }
 
-function _array_like_to_array$10(arr, len) {
+function _array_like_to_array$11(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_with_holes$h(arr) {
+function _array_with_holes$i(arr) {
     if (Array.isArray(arr)) return arr;
 }
 function _array_without_holes$U(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$10(arr);
+    if (Array.isArray(arr)) return _array_like_to_array$11(arr);
 }
-function asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -5912,22 +6222,22 @@ function asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1e(fn) {
+function _async_to_generator$1f(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$Q(obj, key, value) {
+function _define_property$S(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -5951,7 +6261,7 @@ function _instanceof$q(left, right) {
 function _iterable_to_array$U(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
-function _iterable_to_array_limit$h(arr, i) {
+function _iterable_to_array_limit$i(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
     var _arr = [];
@@ -5975,13 +6285,13 @@ function _iterable_to_array_limit$h(arr, i) {
     }
     return _arr;
 }
-function _non_iterable_rest$h() {
+function _non_iterable_rest$i() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
 function _non_iterable_spread$U() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$Q(target) {
+function _object_spread$S(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -5991,26 +6301,26 @@ function _object_spread$Q(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$Q(target, key, source[key]);
+            _define_property$S(target, key, source[key]);
         });
     }
     return target;
 }
-function _sliced_to_array$h(arr, i) {
-    return _array_with_holes$h(arr) || _iterable_to_array_limit$h(arr, i) || _unsupported_iterable_to_array$10(arr, i) || _non_iterable_rest$h();
+function _sliced_to_array$i(arr, i) {
+    return _array_with_holes$i(arr) || _iterable_to_array_limit$i(arr, i) || _unsupported_iterable_to_array$11(arr, i) || _non_iterable_rest$i();
 }
 function _to_consumable_array$U(arr) {
-    return _array_without_holes$U(arr) || _iterable_to_array$U(arr) || _unsupported_iterable_to_array$10(arr) || _non_iterable_spread$U();
+    return _array_without_holes$U(arr) || _iterable_to_array$U(arr) || _unsupported_iterable_to_array$11(arr) || _non_iterable_spread$U();
 }
-function _unsupported_iterable_to_array$10(o, minLen) {
+function _unsupported_iterable_to_array$11(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$10(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$11(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$10(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$11(o, minLen);
 }
-function _ts_generator$1e(thisArg, body) {
+function _ts_generator$1f(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -6204,9 +6514,9 @@ function _ts_generator$1e(thisArg, body) {
  * @returns The resolved source, carrying the opened models view when it is `firestore`.
  * @throws {CliError} `MODEL_IS_SERVER_ONLY` for a server-only model, or the session's own error when `--via firestore` was demanded and the session could not open.
  */ function resolveCliReadSource(input) {
-    return _async_to_generator$1e(function() {
+    return _async_to_generator$1f(function() {
         var context, via, modelType, result, _tmp;
-        return _ts_generator$1e(this, function(_state) {
+        return _ts_generator$1f(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = input.context, via = input.via, modelType = input.modelType;
@@ -6303,9 +6613,9 @@ function _ts_generator$1e(thisArg, body) {
  * @param via - The requested via, carried onto the result.
  * @returns The resolved source.
  */ function resolveAutoReadSource(context, via) {
-    return _async_to_generator$1e(function() {
+    return _async_to_generator$1f(function() {
         var result, _tmp, e, code, message;
-        return _ts_generator$1e(this, function(_state) {
+        return _ts_generator$1f(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -6358,9 +6668,9 @@ function _ts_generator$1e(thisArg, body) {
     })();
 }
 function requireModels(context) {
-    return _async_to_generator$1e(function() {
+    return _async_to_generator$1f(function() {
         var getFirestoreModels;
-        return _ts_generator$1e(this, function(_state) {
+        return _ts_generator$1f(this, function(_state) {
             getFirestoreModels = context.getFirestoreModels;
             if (getFirestoreModels == null) {
                 throw new CliError({
@@ -6384,7 +6694,7 @@ function requireModels(context) {
  *
  * @__NO_SIDE_EFFECTS__
  */ function cliReadResultMeta(source) {
-    return _object_spread$Q({
+    return _object_spread$S({
         source: source.source,
         via: source.via,
         reason: source.reason
@@ -6408,9 +6718,9 @@ function requireModels(context) {
  * @returns `{ key, data }`, with `data: null` when the document does not exist.
  * @throws {CliError} When the key does not match the model's path shape.
  */ function getModelOverFirestore(input) {
-    return _async_to_generator$1e(function() {
+    return _async_to_generator$1f(function() {
         var models, modelType, key, service, data, _ref, e;
-        return _ts_generator$1e(this, function(_state) {
+        return _ts_generator$1f(this, function(_state) {
             switch(_state.label){
                 case 0:
                     models = input.models, modelType = input.modelType, key = input.key;
@@ -6469,9 +6779,9 @@ function requireModels(context) {
  * @returns `{ results, errors }`, key order preserved within each partition.
  * @throws {CliError} `INVALID_ARGUMENT` when `modelType` is not a registered model.
  */ function getMultipleModelsOverFirestore(input) {
-    return _async_to_generator$1e(function() {
+    return _async_to_generator$1f(function() {
         var models, modelType, keys, service, taskResult;
-        return _ts_generator$1e(this, function(_state) {
+        return _ts_generator$1f(this, function(_state) {
             switch(_state.label){
                 case 0:
                     models = input.models, modelType = input.modelType, keys = input.keys;
@@ -6482,9 +6792,9 @@ function requireModels(context) {
                     return [
                         4,
                         performAsyncTasks(_to_consumable_array$U(keys), function(key) {
-                            return _async_to_generator$1e(function() {
+                            return _async_to_generator$1f(function() {
                                 var _ref;
-                                return _ts_generator$1e(this, function(_state) {
+                                return _ts_generator$1f(this, function(_state) {
                                     switch(_state.label){
                                         case 0:
                                             return [
@@ -6518,14 +6828,14 @@ function requireModels(context) {
                         2,
                         {
                             results: taskResult.results.map(function(param) {
-                                var _param = _sliced_to_array$h(param, 2), key = _param[0], data = _param[1];
+                                var _param = _sliced_to_array$i(param, 2), key = _param[0], data = _param[1];
                                 return {
                                     key: key,
                                     data: data
                                 };
                             }),
                             errors: taskResult.errors.map(function(param) {
-                                var _param = _sliced_to_array$h(param, 2), key = _param[0], error = _param[1];
+                                var _param = _sliced_to_array$i(param, 2), key = _param[0], error = _param[1];
                                 return asCliReadErrorEntry(error, modelType, key);
                             })
                         }
@@ -6543,7 +6853,7 @@ function requireModels(context) {
  * @returns The error entry for the `errors` partition.
  */ function asCliReadErrorEntry(error, modelType, key) {
     var mapped = asKeyShapeError(error, modelType, key);
-    return _object_spread$Q({
+    return _object_spread$S({
         key: key,
         error: mapped.message
     }, _instanceof$q(mapped, CliError) ? {
@@ -6575,7 +6885,7 @@ function requireModels(context) {
     return result;
 }
 
-function asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -6589,22 +6899,22 @@ function asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1d(fn) {
+function _async_to_generator$1e(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1d(thisArg, body) {
+function _ts_generator$1e(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -6757,9 +7067,9 @@ function _ts_generator$1d(thisArg, body) {
         }));
     },
     handler: wrapCommandHandler(function(argv) {
-        return _async_to_generator$1d(function() {
+        return _async_to_generator$1e(function() {
             var context, _parseGetArgs, modelType, key, resolved, result, _tmp;
-            return _ts_generator$1d(this, function(_state) {
+            return _ts_generator$1e(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         context = requireCliContext();
@@ -6816,7 +7126,7 @@ function _ts_generator$1d(thisArg, body) {
     })
 };
 
-function asyncGeneratorStep$1c(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -6830,22 +7140,22 @@ function asyncGeneratorStep$1c(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1c(fn) {
+function _async_to_generator$1d(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1c(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1c(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1c(thisArg, body) {
+function _ts_generator$1d(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -6981,9 +7291,9 @@ function _ts_generator$1c(thisArg, body) {
         }).epilogue(CLI_READ_VIA_EPILOGUE);
     },
     handler: wrapCommandHandler(function(argv) {
-        return _async_to_generator$1c(function() {
+        return _async_to_generator$1d(function() {
             var context, firstArg, rest, resolvedFirst, resolvedRest, stdinKeys, _parseGetManyArgs, modelType, keys, resolved, result, _tmp;
-            return _ts_generator$1c(this, function(_state) {
+            return _ts_generator$1d(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         context = requireCliContext();
@@ -7058,7 +7368,7 @@ function _ts_generator$1c(thisArg, body) {
     })
 };
 
-function asyncGeneratorStep$1b(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1c(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -7072,22 +7382,22 @@ function asyncGeneratorStep$1b(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1b(fn) {
+function _async_to_generator$1c(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1b(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1c(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1b(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1c(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$P(obj, key, value) {
+function _define_property$R(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -7100,7 +7410,7 @@ function _define_property$P(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$P(target) {
+function _object_spread$R(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -7110,12 +7420,12 @@ function _object_spread$P(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$P(target, key, source[key]);
+            _define_property$R(target, key, source[key]);
         });
     }
     return target;
 }
-function _ts_generator$1b(thisArg, body) {
+function _ts_generator$1c(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -7274,9 +7584,9 @@ function _ts_generator$1b(thisArg, body) {
  * @param input.updates - The partial {@link CliConfig} to merge on top of the existing on-disk config.
  * @returns The merged {@link CliConfig} that was just written.
  */ function mergeCliConfig(input) {
-    return _async_to_generator$1b(function() {
+    return _async_to_generator$1c(function() {
         var _ref, _input_updates_activeEnv, existing, merged;
-        return _ts_generator$1b(this, function(_state) {
+        return _ts_generator$1c(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -7289,7 +7599,7 @@ function _ts_generator$1b(thisArg, body) {
                     existing = (_ref = _state.sent()) !== null && _ref !== void 0 ? _ref : {};
                     merged = {
                         activeEnv: (_input_updates_activeEnv = input.updates.activeEnv) !== null && _input_updates_activeEnv !== void 0 ? _input_updates_activeEnv : existing.activeEnv,
-                        envs: input.updates.envs ? _object_spread$P({}, existing.envs, input.updates.envs) : existing.envs,
+                        envs: input.updates.envs ? _object_spread$R({}, existing.envs, input.updates.envs) : existing.envs,
                         output: input.updates.output === undefined ? existing.output : mergeOutputConfig(existing.output, input.updates.output)
                     };
                     return [
@@ -7331,12 +7641,12 @@ function mergeOutputCommandsConfig(existing, updates) {
     var result;
     if ('commands' in updates) {
         if (updates.commands) {
-            var merged = _object_spread$P({}, existing);
+            var merged = _object_spread$R({}, existing);
             var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
             try {
                 for(var _iterator = Object.keys(updates.commands)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
                     var key = _step.value;
-                    merged[key] = _object_spread$P({}, existing === null || existing === void 0 ? void 0 : existing[key], updates.commands[key]);
+                    merged[key] = _object_spread$R({}, existing === null || existing === void 0 ? void 0 : existing[key], updates.commands[key]);
                 }
             } catch (err) {
                 _didIteratorError = true;
@@ -7401,7 +7711,7 @@ function mergeOutputCommandsConfig(existing, updates) {
     return result;
 }
 
-function asyncGeneratorStep$1a(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1b(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -7415,22 +7725,22 @@ function asyncGeneratorStep$1a(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1a(fn) {
+function _async_to_generator$1b(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1a(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1b(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1a(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1b(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1a(thisArg, body) {
+function _ts_generator$1b(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -7557,9 +7867,9 @@ function _ts_generator$1a(thisArg, body) {
  * @param input - Resolution inputs.
  * @returns The resolved env triple.
  */ function resolveCliEnv(input) {
-    return _async_to_generator$1a(function() {
+    return _async_to_generator$1b(function() {
         var _ref, _input_envVarName, _ref1, _input_flagEnv, _config_envs, _findCliEnvDefault, config, envVarName, envName, stored, defaultEnv, merged, env;
-        return _ts_generator$1a(this, function(_state) {
+        return _ts_generator$1b(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -7598,9 +7908,9 @@ function _ts_generator$1a(thisArg, body) {
     })();
 }
 function resolveCliEnvOrThrow(input) {
-    return _async_to_generator$1a(function() {
+    return _async_to_generator$1b(function() {
         var _ref, config, envName, env;
-        return _ts_generator$1a(this, function(_state) {
+        return _ts_generator$1b(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -7697,7 +8007,7 @@ function resolveCliEnvOrThrow(input) {
     }).hasExpired();
 }
 
-function asyncGeneratorStep$19(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1a(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -7711,22 +8021,22 @@ function asyncGeneratorStep$19(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$19(fn) {
+function _async_to_generator$1a(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$19(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1a(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$19(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1a(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$O(obj, key, value) {
+function _define_property$Q(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -7747,7 +8057,7 @@ function _instanceof$p(left, right) {
         return left instanceof right;
     }
 }
-function _object_spread$O(target) {
+function _object_spread$Q(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -7757,12 +8067,12 @@ function _object_spread$O(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$O(target, key, source[key]);
+            _define_property$Q(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$y(object, enumerableOnly) {
+function ownKeys$z(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -7770,18 +8080,18 @@ function ownKeys$y(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$y(target, source) {
+function _object_spread_props$z(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$y(Object(source)).forEach(function(key) {
+        ownKeys$z(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$19(thisArg, body) {
+function _ts_generator$1a(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -7938,7 +8248,7 @@ var cliOidcFetch = function cliOidcFetch(input, init) {
     var result = error;
     if (_instanceof$p(error, OidcRelyingPartyError)) {
         var mapped = OIDC_ERROR_CODE_MAP[error.code];
-        result = new CliError(_object_spread$O({
+        result = new CliError(_object_spread$Q({
             message: error.message,
             code: mapped.code
         }, mapped.suggestion ? {
@@ -7948,9 +8258,9 @@ var cliOidcFetch = function cliOidcFetch(input, init) {
     return result;
 }
 function withCliErrors(fn) {
-    return _async_to_generator$19(function() {
+    return _async_to_generator$1a(function() {
         var e;
-        return _ts_generator$19(this, function(_state) {
+        return _ts_generator$1a(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -7986,7 +8296,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcDiscoveryMetadata}. Throws a {@link CliError} (`OIDC_DISCOVERY_FAILED`) when every candidate fails.
  */ function discoverOidcMetadata(input) {
     return withCliErrors(function() {
-        return discoverOidcMetadata$1(_object_spread_props$y(_object_spread$O({}, input), {
+        return discoverOidcMetadata$1(_object_spread_props$z(_object_spread$Q({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -7998,7 +8308,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcTokenResponse} with access/refresh tokens.
  */ function exchangeAuthorizationCode(input) {
     return withCliErrors(function() {
-        return exchangeAuthorizationCode$1(_object_spread_props$y(_object_spread$O({}, input), {
+        return exchangeAuthorizationCode$1(_object_spread_props$z(_object_spread$Q({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8010,7 +8320,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcTokenResponse} with the refreshed access token.
  */ function refreshAccessToken(input) {
     return withCliErrors(function() {
-        return refreshAccessToken$1(_object_spread_props$y(_object_spread$O({}, input), {
+        return refreshAccessToken$1(_object_spread_props$z(_object_spread$Q({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8022,7 +8332,7 @@ function withCliErrors(fn) {
  * @returns Resolves when the server returns a non-error status. Throws a {@link CliError} (`TOKEN_REVOCATION_FAILED`) on error.
  */ function revokeToken(input) {
     return withCliErrors(function() {
-        return revokeToken$1(_object_spread_props$y(_object_spread$O({}, input), {
+        return revokeToken$1(_object_spread_props$z(_object_spread$Q({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8034,7 +8344,7 @@ function withCliErrors(fn) {
  * @returns The parsed userinfo claims. Throws a {@link CliError} (`USERINFO_FAILED`) on a non-OK response.
  */ function fetchUserInfo(input) {
     return withCliErrors(function() {
-        return fetchUserInfo$1(_object_spread_props$y(_object_spread$O({}, input), {
+        return fetchUserInfo$1(_object_spread_props$z(_object_spread$Q({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -8046,13 +8356,13 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcSessionInfo}. Throws a {@link CliError} (`SESSION_INFO_FAILED`) on a non-OK response.
  */ function fetchSessionInfo(input) {
     return withCliErrors(function() {
-        return fetchSessionInfo$1(_object_spread_props$y(_object_spread$O({}, input), {
+        return fetchSessionInfo$1(_object_spread_props$z(_object_spread$Q({}, input), {
             fetch: cliOidcFetch
         }));
     });
 }
 
-function _define_property$N(obj, key, value) {
+function _define_property$P(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -8065,7 +8375,7 @@ function _define_property$N(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$N(target) {
+function _object_spread$P(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -8075,12 +8385,12 @@ function _object_spread$N(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$N(target, key, source[key]);
+            _define_property$P(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$x(object, enumerableOnly) {
+function ownKeys$y(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -8088,12 +8398,12 @@ function ownKeys$x(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$x(target, source) {
+function _object_spread_props$y(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$x(Object(source)).forEach(function(key) {
+        ownKeys$y(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -8114,7 +8424,7 @@ function _object_spread_props$x(target, source) {
  */ function buildAuthorizationUrl(input) {
     try {
         var _input_scopes;
-        return buildAuthorizationUrl$1(_object_spread_props$x(_object_spread$N({}, input), {
+        return buildAuthorizationUrl$1(_object_spread_props$y(_object_spread$P({}, input), {
             scopes: (_input_scopes = input.scopes) !== null && _input_scopes !== void 0 ? _input_scopes : DEFAULT_CLI_OIDC_SCOPES
         }));
     } catch (e) {
@@ -8247,7 +8557,7 @@ var KEY_DEL = ''; // DEL
     return result;
 }
 
-function asyncGeneratorStep$18(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$19(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -8261,22 +8571,22 @@ function asyncGeneratorStep$18(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$18(fn) {
+function _async_to_generator$19(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$18(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$19(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$18(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$19(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$M(obj, key, value) {
+function _define_property$O(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -8289,7 +8599,7 @@ function _define_property$M(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$M(target) {
+function _object_spread$O(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -8299,12 +8609,12 @@ function _object_spread$M(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$M(target, key, source[key]);
+            _define_property$O(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys$w(object, enumerableOnly) {
+function ownKeys$x(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -8312,18 +8622,18 @@ function ownKeys$w(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$w(target, source) {
+function _object_spread_props$x(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys$w(Object(source)).forEach(function(key) {
+        ownKeys$x(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$18(thisArg, body) {
+function _ts_generator$19(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -8423,9 +8733,9 @@ function _ts_generator$18(thisArg, body) {
     }
 }
 function resolveAuthSetupPrompt(input) {
-    return _async_to_generator$18(function() {
+    return _async_to_generator$19(function() {
         var argvValue, existingValue, prompt, mask, result, answer;
-        return _ts_generator$18(this, function(_state) {
+        return _ts_generator$19(this, function(_state) {
             switch(_state.label){
                 case 0:
                     argvValue = input.argvValue, existingValue = input.existingValue, prompt = input.prompt, mask = input.mask;
@@ -8486,9 +8796,9 @@ function resolveAuthSetupPrompt(input) {
  * @param input.accessToken - The Bearer access token.
  * @returns The {@link OidcSessionInfo}, or `undefined` on any failure.
  */ function loadSessionInfoSafely(input) {
-    return _async_to_generator$18(function() {
+    return _async_to_generator$19(function() {
         var result;
-        return _ts_generator$18(this, function(_state) {
+        return _ts_generator$19(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -8537,9 +8847,9 @@ function resolveAuthSetupPrompt(input) {
  * @param input.accessToken - The Bearer access token.
  * @returns The parsed claims, or `undefined` on any failure.
  */ function loadUserInfoSafely(input) {
-    return _async_to_generator$18(function() {
+    return _async_to_generator$19(function() {
         var result;
-        return _ts_generator$18(this, function(_state) {
+        return _ts_generator$19(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -8656,9 +8966,9 @@ function resolveAuthSetupPrompt(input) {
             });
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$18(function() {
+            return _async_to_generator$19(function() {
                 var _ref, _ref1, _argv_env, _ref2, _ref3, _argv_appClientUrl, _ref4, _ref5, _argv_scopes, _config_envs, _findCliEnvDefault, config, envName, stored, defaultEnv, existing, apiBaseUrl, oidcIssuer, appClientUrl, clientId, clientSecret, redirectUri, scopes, nextEnv, merged;
-                return _ts_generator$18(this, function(_state) {
+                return _ts_generator$19(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             return [
@@ -8744,7 +9054,7 @@ function resolveAuthSetupPrompt(input) {
                                     code: 'AUTH_SETUP_INCOMPLETE'
                                 });
                             }
-                            nextEnv = _object_spread$M({
+                            nextEnv = _object_spread$O({
                                 apiBaseUrl: apiBaseUrl,
                                 oidcIssuer: oidcIssuer,
                                 clientId: clientId,
@@ -8760,8 +9070,8 @@ function resolveAuthSetupPrompt(input) {
                                 mergeCliConfig({
                                     configFilePath: paths.configFilePath,
                                     configDir: paths.configDir,
-                                    updates: _object_spread$M({
-                                        envs: _define_property$M({}, envName, nextEnv)
+                                    updates: _object_spread$O({
+                                        envs: _define_property$O({}, envName, nextEnv)
                                     }, argv.setActive ? {
                                         activeEnv: envName
                                     } : {})
@@ -8810,9 +9120,9 @@ function resolveAuthSetupPrompt(input) {
             });
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$18(function() {
+            return _async_to_generator$19(function() {
                 var _argv_code, _tokenResponse_expires_in, _ref, _ref1, envName, env, meta, _ref2, codeVerifier, codeChallenge, state, requestedScopes, requestedSessionTtlSeconds, ms, url, pasted, _tmp, code, tokenResponse, expiresAt, sessionInfo, sessionExpiresAt, rotationDisabled, entry, sessionSummary;
-                return _ts_generator$18(this, function(_state) {
+                return _ts_generator$19(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             return [
@@ -8926,7 +9236,7 @@ function resolveAuthSetupPrompt(input) {
                             sessionInfo = _state.sent();
                             sessionExpiresAt = (_ref = sessionInfo === null || sessionInfo === void 0 ? void 0 : sessionInfo.expiresAt) !== null && _ref !== void 0 ? _ref : undefined;
                             rotationDisabled = sessionInfo === null || sessionInfo === void 0 ? void 0 : sessionInfo.rotationDisabled;
-                            entry = _object_spread$M({
+                            entry = _object_spread$O({
                                 accessToken: tokenResponse.access_token,
                                 refreshToken: tokenResponse.refresh_token,
                                 idToken: tokenResponse.id_token,
@@ -8983,9 +9293,9 @@ function resolveAuthSetupPrompt(input) {
             });
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$18(function() {
+            return _async_to_generator$19(function() {
                 var _ref, envName, env, entry, meta;
-                return _ts_generator$18(this, function(_state) {
+                return _ts_generator$19(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             return [
@@ -9090,9 +9400,9 @@ function resolveAuthSetupPrompt(input) {
             return withEnv(yargs);
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$18(function() {
+            return _async_to_generator$19(function() {
                 var _ref, envName, env, entry, _ref1, _ref2, expired, sessionInfo, sessionExpiresAt, rotationDisabled, session, meta, userinfoEndpoint, claims, _tmp;
-                return _ts_generator$18(this, function(_state) {
+                return _ts_generator$19(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             return [
@@ -9206,9 +9516,9 @@ function resolveAuthSetupPrompt(input) {
             return withEnv(yargs);
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$18(function() {
+            return _async_to_generator$19(function() {
                 var _ref, envName, env, entry;
-                return _ts_generator$18(this, function(_state) {
+                return _ts_generator$19(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             return [
@@ -9263,9 +9573,9 @@ function resolveAuthSetupPrompt(input) {
             return withEnv(yargs);
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$18(function() {
+            return _async_to_generator$19(function() {
                 var _refreshed_expires_in, _refreshed_refresh_token, _refreshed_token_type, _refreshed_scope, _ref, envName, env, entry, meta, refreshed, expiresAt;
-                return _ts_generator$18(this, function(_state) {
+                return _ts_generator$19(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             return [
@@ -9316,7 +9626,7 @@ function resolveAuthSetupPrompt(input) {
                             expiresAt = Date.now() + ((_refreshed_expires_in = refreshed.expires_in) !== null && _refreshed_expires_in !== void 0 ? _refreshed_expires_in : 0) * 1000;
                             return [
                                 4,
-                                tokens.set(envName, _object_spread_props$w(_object_spread$M({}, entry), {
+                                tokens.set(envName, _object_spread_props$x(_object_spread$O({}, entry), {
                                     accessToken: refreshed.access_token,
                                     refreshToken: (_refreshed_refresh_token = refreshed.refresh_token) !== null && _refreshed_refresh_token !== void 0 ? _refreshed_refresh_token : entry.refreshToken,
                                     tokenType: (_refreshed_token_type = refreshed.token_type) !== null && _refreshed_token_type !== void 0 ? _refreshed_token_type : entry.tokenType,
@@ -9349,6 +9659,525 @@ function resolveAuthSetupPrompt(input) {
     };
 }
 
+function _array_like_to_array$10(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes$h(arr) {
+    if (Array.isArray(arr)) return arr;
+}
+function _define_property$N(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _iterable_to_array_limit$h(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
+        }
+    }
+    return _arr;
+}
+function _non_iterable_rest$h() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _object_spread$N(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$N(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$w(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$w(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$w(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _sliced_to_array$h(arr, i) {
+    return _array_with_holes$h(arr) || _iterable_to_array_limit$h(arr, i) || _unsupported_iterable_to_array$10(arr, i) || _non_iterable_rest$h();
+}
+function _type_of$2(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _unsupported_iterable_to_array$10(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array$10(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$10(o, minLen);
+}
+/**
+ * The `@dereekb/*` package prefix the drift check compares. Only framework packages are checked —
+ * a third-party range like `firebase: ^12.12.1` is deliberately out of scope.
+ */ var CLI_FRAMEWORK_PACKAGE_PREFIX = '@dereekb/';
+/**
+ * Matches a declared dependency range that pins ONE exact version (`13.42.0`), which is the only
+ * shape a build stamp can be read off. A range (`^13.42.0`, `~13.42`, `*`, a workspace or file
+ * specifier) is skipped rather than guessed at.
+ */ var EXACT_VERSION_RANGE = /^\d+\.\d+\.\d+(?:-[\w.]+)?$/;
+/**
+ * Compares the `@dereekb/*` versions the running artifact was BUILT against with the versions
+ * resolved from `node_modules` now.
+ *
+ * This is the check whose absence turns a routine `@dereekb/*` bump into an unreadable runtime
+ * failure. A CLI built with `thirdParty: false` inlines its app code and resolves the framework at
+ * RUN time, so the artifact is only valid against the tree it was compiled against — and nothing
+ * else in the toolchain notices when that stops being true. The symptom is arbitrary: an SDK
+ * assertion, a missing manifest field, a silently-empty result.
+ *
+ * Deliberately conservative. Only exact-pinned `@dereekb/*` versions are compared, and every way the
+ * comparison can fail to apply produces `ok: true` with a {@link CliBuildDriftUndeterminedReason} —
+ * a check that cried wolf on every source-run CLI would be turned off, and then it would be useless
+ * on the day it mattered.
+ *
+ * @param input - The entry path, the manifest generator stamp, and the test seams.
+ * @returns The drift verdict.
+ */ function inspectCliBuildDrift() {
+    var input = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    var _input_entryPath, _input_resolveVersion, _input_artifactPackage, _ref;
+    var manifestGeneratorVersion = input.manifestGeneratorVersion;
+    var entryPath = (_input_entryPath = input.entryPath) !== null && _input_entryPath !== void 0 ? _input_entryPath : process.argv[1];
+    var resolveVersion = (_input_resolveVersion = input.resolveVersion) !== null && _input_resolveVersion !== void 0 ? _input_resolveVersion : resolveInstalledPackageVersion;
+    var artifactPackage = (_input_artifactPackage = input.artifactPackage) !== null && _input_artifactPackage !== void 0 ? _input_artifactPackage : entryPath == null ? undefined : readCliArtifactPackage(entryPath);
+    var resolvedDbxCliVersion = resolveVersion('@dereekb/dbx-cli');
+    var manifestGeneratorDrift = manifestGeneratorVersion != null && resolvedDbxCliVersion != null && manifestGeneratorVersion !== resolvedDbxCliVersion;
+    var declared = (_ref = artifactPackage === null || artifactPackage === void 0 ? void 0 : artifactPackage.frameworkVersions) !== null && _ref !== void 0 ? _ref : {};
+    var drift = [];
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = Object.entries(declared)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var _step_value = _sliced_to_array$h(_step.value, 2), packageName = _step_value[0], builtAgainst = _step_value[1];
+            var resolved = resolveVersion(packageName);
+            if (resolved !== builtAgainst) {
+                drift.push(_object_spread$N({
+                    packageName: packageName,
+                    builtAgainst: builtAgainst
+                }, resolved == null ? {} : {
+                    resolved: resolved
+                }));
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    var checked = Object.keys(declared).length;
+    var noneResolvable = checked > 0 && drift.length === checked && drift.every(function(x) {
+        return x.resolved == null;
+    });
+    var reason;
+    if (entryPath == null) {
+        reason = 'no-entry-path';
+    } else if (artifactPackage == null) {
+        reason = 'no-artifact-package';
+    } else if (checked === 0) {
+        reason = 'no-framework-versions-declared';
+    } else if (noneResolvable) {
+        reason = 'framework-not-resolvable';
+    }
+    return _object_spread_props$w(_object_spread$N(_object_spread_props$w(_object_spread$N({
+        ok: (drift.length === 0 || noneResolvable) && !manifestGeneratorDrift
+    }, reason == null ? {} : {
+        reason: reason
+    }, artifactPackage == null ? {} : _object_spread$N({
+        artifactPackagePath: artifactPackage.path
+    }, artifactPackage.version == null ? {} : {
+        artifactVersion: artifactPackage.version
+    })), {
+        checked: checked,
+        drift: drift
+    }), manifestGeneratorVersion == null ? {} : {
+        manifestGeneratorVersion: manifestGeneratorVersion
+    }, resolvedDbxCliVersion == null ? {} : {
+        resolvedDbxCliVersion: resolvedDbxCliVersion
+    }), {
+        manifestGeneratorDrift: manifestGeneratorDrift
+    });
+}
+/**
+ * Renders a {@link CliBuildDriftReport} as one operator-facing line, for `--version` and for a
+ * doctor suggestion.
+ *
+ * @param report - The report to describe.
+ * @returns The description, or `undefined` when there is nothing to say.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function cliBuildDriftDescription(report) {
+    var parts = [];
+    if (report.drift.length > 0 && report.reason !== 'framework-not-resolvable') {
+        var builtAgainst = report.drift.map(function(x) {
+            return "".concat(x.packageName, "@").concat(x.builtAgainst);
+        }).join(', ');
+        var installed = report.drift.map(function(x) {
+            var _x_resolved;
+            return "".concat(x.packageName, "@").concat((_x_resolved = x.resolved) !== null && _x_resolved !== void 0 ? _x_resolved : 'not installed');
+        }).join(', ');
+        var verb = report.drift.length === 1 ? 'is' : 'are';
+        parts.push("built against ".concat(builtAgainst, " but ").concat(installed, " ").concat(verb, " installed"));
+    }
+    if (report.manifestGeneratorDrift) {
+        parts.push("generated manifests were emitted by @dereekb/dbx-cli@".concat(report.manifestGeneratorVersion, " but @dereekb/dbx-cli@").concat(report.resolvedDbxCliVersion, " is running them"));
+    }
+    return parts.length === 0 ? undefined : "STALE BUILD: this CLI was ".concat(parts.join('; '), ". Rebuild it — a `thirdParty: false` artifact resolves @dereekb/* at run time, so a version bump alone does not update it.");
+}
+/**
+ * Finds and parses the artifact `package.json` nearest the executed entry file.
+ *
+ * @param entryPath - The executed entry file (`process.argv[1]`).
+ * @returns The parsed stamp, or `undefined` when none could be read.
+ */ function readCliArtifactPackage(entryPath) {
+    var packageJsonPath = findNearestPackageJson(entryPath);
+    var result;
+    if (packageJsonPath != null) {
+        try {
+            var contents = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
+            result = _object_spread_props$w(_object_spread$N({
+                path: packageJsonPath
+            }, typeof contents.name === 'string' ? {
+                name: contents.name
+            } : {}, typeof contents.version === 'string' ? {
+                version: contents.version
+            } : {}), {
+                // peers first so a `dependencies` entry wins on a conflict: an app that pins a framework
+                // package as a real dependency is the more specific declaration
+                frameworkVersions: _object_spread$N({}, exactFrameworkVersions(contents.peerDependencies), exactFrameworkVersions(contents.dependencies))
+            });
+        } catch (unused) {
+            // an unparsable or unreadable artifact package.json is indistinguishable from an absent one
+            result = undefined;
+        }
+    }
+    return result;
+}
+/**
+ * The exact-pinned `@dereekb/*` entries of one dependency map.
+ *
+ * @param dependencies - A `package.json` dependency map, or any non-object value.
+ * @returns Package name → exact version, for framework packages pinned to one version.
+ */ function exactFrameworkVersions(dependencies) {
+    var result = {};
+    if (dependencies != null && (typeof dependencies === "undefined" ? "undefined" : _type_of$2(dependencies)) === 'object') {
+        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+        try {
+            for(var _iterator = Object.entries(dependencies)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                var _step_value = _sliced_to_array$h(_step.value, 2), packageName = _step_value[0], range = _step_value[1];
+                if (packageName.startsWith(CLI_FRAMEWORK_PACKAGE_PREFIX) && typeof range === 'string' && EXACT_VERSION_RANGE.test(range)) {
+                    result[packageName] = range;
+                }
+            }
+        } catch (err) {
+            _didIteratorError = true;
+            _iteratorError = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                    _iterator.return();
+                }
+            } finally{
+                if (_didIteratorError) {
+                    throw _iteratorError;
+                }
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Walks up from a file to the nearest directory holding a `package.json`.
+ *
+ * @param startPath - The file to start from.
+ * @returns The `package.json` path, or `undefined` when the filesystem root is reached first.
+ */ function findNearestPackageJson(startPath) {
+    var dir = dirname(resolve(startPath));
+    var result;
+    var searching = true;
+    while(searching){
+        var candidate = resolve(dir, 'package.json');
+        if (existsSync(candidate)) {
+            result = candidate;
+            searching = false;
+        } else {
+            var parent = dirname(dir);
+            searching = parent !== dir;
+            dir = parent;
+        }
+    }
+    return result;
+}
+/**
+ * Reads a package's installed version by resolving its `package.json` from THIS module's location —
+ * the same resolution the CLI's own imports go through, so the answer is the version actually loaded.
+ *
+ * @param packageName - The package to resolve.
+ * @returns The installed version, or `undefined` when it cannot be resolved.
+ */ function resolveInstalledPackageVersion(packageName) {
+    var result;
+    try {
+        var contents = createRequire(import.meta.url)("".concat(packageName, "/package.json"));
+        result = typeof contents.version === 'string' ? contents.version : undefined;
+    } catch (unused) {
+        // a framework package the artifact declares but that is not installed shows up as drift with
+        // `resolved: undefined`, which is the honest answer
+        result = undefined;
+    }
+    return result;
+}
+
+function asyncGeneratorStep$18(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$18(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$18(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$18(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$M(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$M(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$M(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function _ts_generator$18(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+/**
+ * Name reported by the check {@link createCliBuildDriftDoctorCheck} builds.
+ */ var BUILD_DRIFT_DOCTOR_CHECK_NAME = 'cli-build-not-stale';
+/**
+ * Builds the doctor check that compares the running artifact against the `@dereekb/*` tree resolved
+ * at run time.
+ *
+ * Runs FIRST in the default check list, ahead of every network hop, because a stale artifact
+ * invalidates the answers those hops give: they exercise the framework that is loaded now, not the
+ * one the bundle was compiled against, so a green `token-refresh-round-trip` next to a red read is
+ * exactly the misleading report this check exists to pre-empt.
+ *
+ * @param input - Optional overrides forwarded to {@link inspectCliBuildDrift}; apps normally pass only
+ *   `manifestGeneratorVersion`.
+ * @returns The {@link DoctorCheck}.
+ * @__NO_SIDE_EFFECTS__
+ */ function createCliBuildDriftDoctorCheck() {
+    var input = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    return function() {
+        return _async_to_generator$18(function() {
+            var report, description;
+            return _ts_generator$18(this, function(_state) {
+                report = inspectCliBuildDrift(input);
+                description = cliBuildDriftDescription(report);
+                return [
+                    2,
+                    _object_spread$M({
+                        name: BUILD_DRIFT_DOCTOR_CHECK_NAME,
+                        ok: report.ok,
+                        detail: report
+                    }, description == null ? {} : {
+                        suggestion: description
+                    })
+                ];
+            });
+        })();
+    };
+}
+
 function _array_like_to_array$$(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
@@ -9539,11 +10368,17 @@ function _ts_generator$17(thisArg, body) {
     }
 }
 /**
- * Built-in checks: config file present, active env resolved, OIDC discovery, token refresh, API reachability.
+ * Built-in checks: build not stale, config file present, active env resolved, OIDC discovery, token
+ * refresh, API reachability.
  *
+ * @param input - Optional configuration for the built-in checks.
  * @returns The default {@link DoctorCheck} list, in execution order.
  */ function defaultDoctorChecks() {
+    var input = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
     return [
+        createCliBuildDriftDoctorCheck(_object_spread$L({}, input.manifestGeneratorVersion == null ? {} : {
+            manifestGeneratorVersion: input.manifestGeneratorVersion
+        })),
         function(param) {
             var config = param.config;
             return _async_to_generator$17(function() {
@@ -9921,12 +10756,15 @@ function _ts_generator$17(thisArg, body) {
  * @param input.cliName - The CLI's binary name.
  * @param input.checks - Additional checks to append after the default check list.
  * @param input.defaultEnvs - Built-in env presets merged underneath the user's stored env when names match.
+ * @param input.manifestGeneratorVersion - The generator version stamped into the app's generated manifests.
  * @returns A yargs `CommandModule` exposing the `doctor` command.
  * @__NO_SIDE_EFFECTS__
  */ function createDoctorCommand(input) {
     var _input_checks;
     var cliName = input.cliName;
-    var checks = _to_consumable_array$T(defaultDoctorChecks()).concat(_to_consumable_array$T((_input_checks = input.checks) !== null && _input_checks !== void 0 ? _input_checks : []));
+    var checks = _to_consumable_array$T(defaultDoctorChecks(_object_spread$L({}, input.manifestGeneratorVersion == null ? {} : {
+        manifestGeneratorVersion: input.manifestGeneratorVersion
+    }))).concat(_to_consumable_array$T((_input_checks = input.checks) !== null && _input_checks !== void 0 ? _input_checks : []));
     var defaultEnvs = input.defaultEnvs;
     var paths = buildCliPaths({
         cliName: cliName
@@ -10579,7 +11417,13 @@ function _ts_generator$16(thisArg, body) {
  * 3. `GET /session/firestore` is reachable and mints a custom token (+ an App Check token when the
  *    API is configured with a web `appId`);
  * 4. `signInWithCustomToken` succeeds against the configured project;
- * 5. the app-supplied {@link FirestoreSessionDoctorProbe} performs one rules-protected read.
+ * 5. the session's Firestore handle is one the loaded client SDK accepts (`inspectCliFirestoreSdkIdentity`),
+ *    reported as `stage: 'firestore-sdk-identity'`. Sits between the sign-in and the read because it
+ *    is the hop whose failure otherwise MASQUERADES as the read's: the handshake returns a uid, and
+ *    the read then dies on the SDK's `Expected first argument to collection() to be …` — a message
+ *    that names neither the model nor the handle, and sends the operator to rules and App Check
+ *    instead of to a duplicated SDK or a stale artifact;
+ * 6. the app-supplied {@link FirestoreSessionDoctorProbe} performs one rules-protected read.
  *
  * Doctor checks run PRE-AUTH — `DoctorCheckInput` is only `{ cliName, envName, env, config }`, with no
  * token and no `CliContext` — so this loads credentials itself via `buildCliPaths` +
@@ -10718,7 +11562,7 @@ function _ts_generator$16(thisArg, body) {
 }
 function runFirestoreSessionProbe(input) {
     return _async_to_generator$16(function() {
-        var cliName, envName, env, accessToken, probe, probeName, usingEmulators, context, handshakeError, e, result, appCheckUsed, baseDetail, probeResult, e1;
+        var cliName, envName, env, accessToken, probe, probeName, usingEmulators, context, handshakeError, e, result, appCheckUsed, sdkIdentity, baseDetail, probeResult, e1;
         return _ts_generator$16(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -10757,9 +11601,17 @@ function runFirestoreSessionProbe(input) {
                 case 4:
                     if (!context) return [
                         3,
-                        11
+                        12
                     ];
                     appCheckUsed = Boolean(context.session.appCheckToken) && !usingEmulators;
+                    // Runs BEFORE the probe on purpose. The handshake can succeed — a uid and an expiry come back —
+                    // and the read still fail at the point the session's Firestore handle becomes a collection
+                    // reference, which is a wiring/version fault the read's own error cannot describe. Reported even
+                    // when it passes, because the module provenance is what rules the duplicated-SDK hypothesis in or
+                    // out without an investigation.
+                    sdkIdentity = inspectCliFirestoreSdkIdentity({
+                        firestoreContext: context.firestoreContext
+                    });
                     baseDetail = {
                         uid: context.session.uid,
                         expiresAt: context.session.expiresAt,
@@ -10768,25 +11620,47 @@ function runFirestoreSessionProbe(input) {
                         usingEmulators: usingEmulators,
                         // the on-disk session cache is invisible from the outside — a cache hit means this run paid no
                         // `GET /session/firestore`, which is the difference between a fast read and a slow one
-                        sessionFromCache: context.fromCache
+                        sessionFromCache: context.fromCache,
+                        sdkIdentity: sdkIdentity
                     };
-                    if (!probe) return [
+                    if (!!sdkIdentity.ok) return [
                         3,
-                        9
+                        5
+                    ];
+                    result = {
+                        name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
+                        ok: false,
+                        detail: _object_spread_props$u(_object_spread$J({}, baseDetail), {
+                            stage: FIRESTORE_SDK_IDENTITY_STAGE,
+                            code: FIRESTORE_SDK_INSTANCE_MISMATCH_CODE,
+                            probe: 'not-attempted'
+                        }),
+                        // non-null: `cliFirestoreSdkIdentitySuggestion` returns a string for every `problem`, and
+                        // `ok: false` guarantees one is set
+                        suggestion: cliFirestoreSdkIdentitySuggestion(sdkIdentity)
+                    };
+                    return [
+                        3,
+                        11
                     ];
-                    _state.label = 5;
                 case 5:
+                    if (!probe) return [
+                        3,
+                        10
+                    ];
+                    _state.label = 6;
+                case 6:
                     _state.trys.push([
-                        5,
-                        7,
+                        6,
+                        8,
                         ,
-                        8
+                        9
                     ]);
                     return [
                         4,
                         probe(context)
                     ];
-                case 6:
+                case 7:
                     probeResult = _state.sent();
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
@@ -10798,9 +11672,9 @@ function runFirestoreSessionProbe(input) {
                     };
                     return [
                         3,
-                        8
+                        9
                     ];
-                case 7:
+                case 8:
                     e1 = _state.sent();
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
@@ -10814,14 +11688,14 @@ function runFirestoreSessionProbe(input) {
                     };
                     return [
                         3,
-                        8
+                        9
                     ];
-                case 8:
+                case 9:
                     return [
                         3,
-                        10
+                        11
                     ];
-                case 9:
+                case 10:
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
                         ok: true,
@@ -10830,13 +11704,13 @@ function runFirestoreSessionProbe(input) {
                         }),
                         suggestion: 'Signed in, but no rules-protected read was attempted. Pass a `probe` to `createFirestoreSessionDoctorCheck` so the check can prove App Check is accepted and rules pass.'
                     };
-                    _state.label = 10;
-                case 10:
+                    _state.label = 11;
+                case 11:
                     return [
                         3,
-                        12
+                        13
                     ];
-                case 11:
+                case 12:
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
                         ok: false,
@@ -10846,20 +11720,20 @@ function runFirestoreSessionProbe(input) {
                         },
                         suggestion: "The API must register the firebase-server session module and list '/api/session' in the OIDC `protectedPaths`, and the logged-in user must be an admin holding the `session.firestore` scope. Re-run `".concat(cliName, " auth login --env ").concat(envName, "` if the scope is newly added.")
                     };
-                    _state.label = 12;
-                case 12:
+                    _state.label = 13;
+                case 13:
                     if (!context) return [
                         3,
-                        14
+                        15
                     ];
                     return [
                         4,
                         closeCliFirestoreSessionContext(context)
                     ];
-                case 13:
-                    _state.sent();
-                    _state.label = 14;
                 case 14:
+                    _state.sent();
+                    _state.label = 15;
+                case 15:
                     return [
                         2,
                         result
@@ -12417,7 +13291,6 @@ function _object_spread_props$r(target, source) {
  * @returns The collection to query.
  * @throws {CliError} When `--parent` is missing where required, supplied where rejected, or the registered collection cannot be scoped.
  */ function cliFirestoreCollectionForQuery(input) {
-    var _models_binding_collectionForModel, _models_binding;
     var models = input.models, modelType = input.modelType, scope = input.scope, isNested = input.isNested, parentKey = input.parentKey, parentPaths = input.parentPaths;
     if (parentKey != null && !isNested) {
         throw new CliError({
@@ -12441,21 +13314,37 @@ function _object_spread_props$r(target, source) {
             parentPaths: parentPaths
         }));
     }
-    var override = (_models_binding_collectionForModel = (_models_binding = models.binding).collectionForModel) === null || _models_binding_collectionForModel === void 0 ? void 0 : _models_binding_collectionForModel.call(_models_binding, {
-        collections: models.collections,
-        modelType: modelType,
-        parentKey: parentKey
-    });
     var result;
-    if (override == null) {
-        var registered = models.serviceFor(modelType).getFirestoreCollection();
-        result = parentKey == null ? registered : scopeCollectionToParent({
-            registered: registered,
+    // the SDK rejects a bad handle or path with a message naming none of `modelType` / `parentKey` /
+    // the collection — all of which are known right here. `cliFirestoreWiringError` passes an
+    // already-named `CliError` (unknown model type, malformed `--parent`) through untouched.
+    try {
+        var _models_binding_collectionForModel, _models_binding;
+        var override = (_models_binding_collectionForModel = (_models_binding = models.binding).collectionForModel) === null || _models_binding_collectionForModel === void 0 ? void 0 : _models_binding_collectionForModel.call(_models_binding, {
+            collections: models.collections,
             modelType: modelType,
             parentKey: parentKey
         });
-    } else {
-        result = override;
+        if (override == null) {
+            var registered = models.serviceFor(modelType).getFirestoreCollection();
+            result = parentKey == null ? registered : scopeCollectionToParent({
+                registered: registered,
+                modelType: modelType,
+                parentKey: parentKey
+            });
+        } else {
+            result = override;
+        }
+    } catch (e) {
+        throw cliFirestoreWiringError(_object_spread_props$r(_object_spread$G({
+            error: e,
+            operation: 'resolve the Firestore collection for this query',
+            modelType: modelType
+        }, parentKey === undefined ? {} : {
+            parentKey: parentKey
+        }), {
+            firestoreContext: models.session.firestoreContext
+        }));
     }
     return result;
 }
@@ -12543,16 +13432,33 @@ function _object_spread_props$r(target, source) {
  * @param group - The registered collection group.
  * @param parentKey - The parent document key.
  * @returns A group scoped to that parent.
+ * @throws {CliError} When the SDK refuses the parent reference or the scoped subcollection.
  */ function scopeCollectionGroupToParent(group, parentKey) {
     var registered = group;
     var collectionName = registered.modelIdentity.collectionName;
     var firestoreContext = registered.firestoreContext;
-    var parentRef = firestoreContext.drivers.firestoreAccessorDriver.docAtPath(firestoreContext.firestore, parentKey);
-    // The spread is REQUIRED, not stylistic: `makeFirestoreCollectionGroup` mutates `config.cache`, so
-    // reusing the object would rewrite the registered group's cache in place.
-    return makeFirestoreCollectionGroup(_object_spread_props$r(_object_spread$G({}, group.config), {
-        queryLike: firestoreContext.subcollection(parentRef, collectionName)
-    }));
+    var result;
+    // `docAtPath` and `subcollection` are the two calls in the direct-Firestore path that hand a raw
+    // Firestore handle / parent ref to the SDK, so they are where a bad handle first surfaces — and
+    // this is the only frame that knows the collection name it was building.
+    try {
+        var parentRef = firestoreContext.drivers.firestoreAccessorDriver.docAtPath(firestoreContext.firestore, parentKey);
+        // The spread is REQUIRED, not stylistic: `makeFirestoreCollectionGroup` mutates `config.cache`, so
+        // reusing the object would rewrite the registered group's cache in place.
+        result = makeFirestoreCollectionGroup(_object_spread_props$r(_object_spread$G({}, group.config), {
+            queryLike: firestoreContext.subcollection(parentRef, collectionName)
+        }));
+    } catch (e) {
+        throw cliFirestoreWiringError({
+            error: e,
+            operation: 'scope the collection group to one parent document',
+            modelType: registered.modelIdentity.modelType,
+            collectionName: collectionName,
+            parentKey: parentKey,
+            firestoreContext: firestoreContext
+        });
+    }
+    return result;
 }
 
 function _array_like_to_array$Y(arr, len) {
@@ -15697,6 +16603,8 @@ function _ts_generator$Y(thisArg, body) {
  *   if {@link CreateCliInput.modelManifest} is provided.
  * @param input.firestore - The app-supplied direct-Firestore binding; enables `firestore-get` / `firestore-query`.
  * @param input.firestoreQueryManifest - The generated Firestore query catalog; enables `firestore-queries`.
+ * @param input.manifestGeneratorVersion - The `@dereekb/dbx-cli` version that emitted the app's generated
+ *   manifests, for the built-in `cli-build-not-stale` doctor check.
  * @param input.setup - App hook run once before the command's handler; a throw aborts the command.
  * @param input.teardown - App hook run once after the parser settles, before the Firestore session closes.
  *   Only {@link runCli} runs it — a caller that drives `createCli().parse()` itself owns its own teardown.
@@ -15715,11 +16623,13 @@ function _ts_generator$Y(thisArg, body) {
             cliName: cliName,
             defaultEnvs: defaultEnvs
         }),
-        createDoctorCommand({
+        createDoctorCommand(_object_spread$A({
             cliName: cliName,
             checks: input.doctorChecks,
             defaultEnvs: defaultEnvs
-        }),
+        }, input.manifestGeneratorVersion == null ? {} : {
+            manifestGeneratorVersion: input.manifestGeneratorVersion
+        })),
         createOutputCommand({
             cliName: cliName
         })
@@ -15846,7 +16756,17 @@ function _ts_generator$Y(thisArg, body) {
     if (input.version == null) {
         parser = parser.version(false);
     } else {
-        parser = parser.version(input.version);
+        // Computed only when `--version` was actually asked for. `.version()` takes a plain string, so the
+        // drift line has to be baked in at parser-construction time — and paying a handful of `package.json`
+        // reads on EVERY invocation to render a line almost nobody asks for is not worth it. `doctor`'s
+        // `cli-build-not-stale` check is the always-on surface; this is the one an operator sees first when
+        // a command misbehaves, without having to know `doctor` exists.
+        parser = parser.version(cliVersionOutput(_object_spread$A({
+            version: input.version,
+            rawArgv: rawArgv
+        }, input.manifestGeneratorVersion == null ? {} : {
+            manifestGeneratorVersion: input.manifestGeneratorVersion
+        })));
     }
     if (input.completionCommandName !== false) {
         var _input_completionCommandName;
@@ -15854,6 +16774,24 @@ function _ts_generator$Y(thisArg, body) {
     }
     return parser;
 }
+/**
+ * The string `--version` prints: the app's version, plus a `STALE BUILD:` line when the running
+ * artifact does not match the `@dereekb/*` tree resolved at run time.
+ *
+ * @param input - The app version, the raw argv, and the optional manifest generator stamp.
+ * @returns The version output.
+ */ function cliVersionOutput(input) {
+    var version = input.version, rawArgv = input.rawArgv, manifestGeneratorVersion = input.manifestGeneratorVersion;
+    var wantsVersion = rawArgv.includes('--version') || rawArgv.includes('-V');
+    var result = version;
+    if (wantsVersion) {
+        var drift = cliBuildDriftDescription(inspectCliBuildDrift(_object_spread$A({}, manifestGeneratorVersion == null ? {} : {
+            manifestGeneratorVersion: manifestGeneratorVersion
+        })));
+        result = drift == null ? version : "".concat(version, "\n").concat(drift);
+    }
+    return result;
+}
 /**
  * Convenience helper for app `index.ts` entrypoints — wraps `createCli().parse()` in a try/catch
  * that emits a structured error envelope and exits 1 on uncaught failures.
@@ -22696,6 +23634,237 @@ var FIREBASE_MODELS = [
             'root-entity'
         ]
     },
+    {
+        name: 'FormSpace',
+        identityConst: 'formSpaceIdentity',
+        modelType: 'formSpace',
+        collectionPrefix: 'fsp',
+        sourcePackage: '@dereekb/firebase',
+        sourceFile: 'packages/firebase/src/lib/model/formspace/formspace.ts',
+        fields: [
+            {
+                name: 't',
+                longName: 'formSpaceType',
+                converter: 'firestoreString<FormSpaceType>()',
+                tsType: 'FormSpaceType',
+                optional: false,
+                description: 'The kind of form this space holds, resolving its upload restrictions, expiration policy, and the server-side handler its submission is dispatched to.'
+            },
+            {
+                name: 'n',
+                longName: 'displayName',
+                converter: 'optionalFirestoreString()',
+                tsType: 'Maybe<string>',
+                optional: true,
+                description: "Display name of the space, for the owner's own list of in-progress forms."
+            },
+            {
+                name: 's',
+                longName: 'state',
+                converter: 'firestoreEnum<FormSpaceState>({ default: FormSpaceState.DRAFT })',
+                tsType: 'FormSpaceState',
+                optional: false,
+                description: 'Lifecycle state. Only DRAFT is editable.',
+                enumRef: 'FormSpaceState'
+            },
+            {
+                name: 'ps',
+                longName: 'processingState',
+                converter: 'firestoreEnum<FormSpaceProcessingState>({ default: FormSpaceProcessingState.INIT_OR_NONE })',
+                tsType: 'FormSpaceProcessingState',
+                optional: false,
+                description: 'Processing state of the submission.',
+                enumRef: 'FormSpaceProcessingState'
+            },
+            {
+                name: 'd',
+                longName: 'data',
+                converter: 'optionalFirestorePassthroughJsonField<FormSpaceData>({ dontStoreIfEmpty: true })',
+                tsType: 'Maybe<T>',
+                optional: true,
+                description: "The form's own values, stored as pass-through JSON."
+            },
+            {
+                name: 'u',
+                longName: 'userId',
+                converter: 'firestoreUID()',
+                tsType: 'FirebaseAuthUserId',
+                optional: false,
+                description: 'The user the space belongs to. Set at creation and never changed.'
+            },
+            {
+                name: 'o',
+                longName: 'ownerKey',
+                converter: 'optionalFirestoreString()',
+                tsType: 'Maybe<FirebaseAuthOwnershipKey>',
+                optional: true,
+                description: 'Ownership key, if applicable. Drives read access in the security rules.'
+            },
+            {
+                name: 'm',
+                longName: 'targetModelKey',
+                converter: 'optionalFirestoreString()',
+                tsType: 'Maybe<FirestoreModelKey>',
+                optional: true,
+                description: 'Key of the model this space was opened against, when it was opened against one.'
+            },
+            {
+                name: 'uc',
+                longName: 'uploadCount',
+                converter: 'firestoreNumber({ default: 0 })',
+                tsType: 'number',
+                optional: false,
+                description: 'Monotonic count of uploads this space has ACCEPTED over its whole lifetime.'
+            },
+            {
+                name: 'fi',
+                longName: 'nextFileIndex',
+                converter: 'firestoreNumber({ default: 0 })',
+                tsType: 'number',
+                optional: false,
+                description: "The next index a file's permanent storage path is keyed by."
+            },
+            {
+                name: 'f',
+                longName: 'files',
+                converter: 'firestoreObjectArray({ objectField: formSpaceFileSubObject })',
+                tsType: 'FormSpaceFile[]',
+                optional: false,
+                description: 'Every file the space currently holds, across every slot.'
+            },
+            {
+                name: 'pn',
+                longName: 'processingNotificationKey',
+                converter: 'optionalFirestoreString()',
+                tsType: 'Maybe<NotificationKey>',
+                optional: true,
+                description: "The NotificationTask key processing this space's submission."
+            },
+            {
+                name: 'pat',
+                longName: 'processingAt',
+                converter: 'optionalFirestoreDate()',
+                tsType: 'Maybe<Date>',
+                optional: true,
+                description: 'The date `ps` was last moved to PROCESSING. Used to detect a stuck task.'
+            },
+            {
+                name: 'cat',
+                longName: 'createdAt',
+                converter: 'firestoreDate({ saveDefaultAsNow: true })',
+                tsType: 'Date',
+                optional: false,
+                description: 'Created at date.'
+            },
+            {
+                name: 'uat',
+                longName: 'updatedAt',
+                converter: 'firestoreDate({ saveDefaultAsNow: true })',
+                tsType: 'Date',
+                optional: false,
+                description: 'Updated at date. Moves on every content change.'
+            },
+            {
+                name: 'sat',
+                longName: 'submittedAt',
+                converter: 'optionalFirestoreDate()',
+                tsType: 'Maybe<Date>',
+                optional: true,
+                description: 'The date the space was submitted, if it was. Its presence IS the lock.'
+            },
+            {
+                name: 'cpat',
+                longName: 'completedAt',
+                converter: 'optionalFirestoreDate()',
+                tsType: 'Maybe<Date>',
+                optional: true,
+                description: 'The date processing of the submission concluded, if it has.'
+            },
+            {
+                name: 'eat',
+                longName: 'expiresAt',
+                converter: 'optionalFirestoreDate()',
+                tsType: 'Maybe<Date>',
+                optional: true,
+                description: 'The date this space becomes eligible for the expiration sweep, if it expires at all.'
+            }
+        ],
+        enums: [
+            {
+                name: 'FormSpaceState',
+                values: [
+                    {
+                        name: 'DRAFT',
+                        value: 0
+                    },
+                    {
+                        name: 'SUBMITTED',
+                        value: 1
+                    },
+                    {
+                        name: 'EXPIRED',
+                        value: 2
+                    },
+                    {
+                        name: 'ARCHIVED',
+                        value: 3
+                    }
+                ],
+                description: 'Lifecycle state of a {@link FormSpace}.'
+            },
+            {
+                name: 'FormSpaceProcessingState',
+                values: [
+                    {
+                        name: 'INIT_OR_NONE',
+                        value: 0
+                    },
+                    {
+                        name: 'QUEUED_FOR_PROCESSING',
+                        value: 1
+                    },
+                    {
+                        name: 'PROCESSING',
+                        value: 2
+                    },
+                    {
+                        name: 'FAILED',
+                        value: 3
+                    },
+                    {
+                        name: 'SUCCESS',
+                        value: 4
+                    },
+                    {
+                        name: 'DO_NOT_PROCESS',
+                        value: 5
+                    }
+                ],
+                description: 'Processing state of a submitted {@link FormSpace}.'
+            }
+        ],
+        detectionHints: [
+            't',
+            'n',
+            'ps',
+            'm',
+            'uc',
+            'f',
+            'pn',
+            'pat',
+            'uat',
+            'sat',
+            'cpat',
+            'eat'
+        ],
+        description: 'A type-registered container for a client-side form: its in-progress JSON, its uploads, and its submission state.',
+        modelGroup: 'FormSpace',
+        collectionKind: 'root',
+        archetypes: [
+            'root-entity',
+            'state-machine-item'
+        ]
+    },
     {
         name: 'NotificationBox',
         identityConst: 'notificationBoxIdentity',
@@ -23918,6 +25087,16 @@ var FIREBASE_MODEL_GROUPS = [
             'Calendar'
         ]
     },
+    {
+        name: 'FormSpace',
+        containerName: 'FormSpaceFirestoreCollections',
+        sourcePackage: '@dereekb/firebase',
+        sourceFile: 'packages/firebase/src/lib/model/formspace/formspace.ts',
+        description: 'Abstract base providing access to the FormSpace Firestore collection.',
+        modelNames: [
+            'FormSpace'
+        ]
+    },
     {
         name: 'Notification',
         containerName: 'NotificationFirestoreCollections',
@@ -24007,6 +25186,11 @@ var FIREBASE_MODEL_GROUPS = [
         reason: 'StorageFile is a canonical group from `@dereekb/firebase` with a richer layout than the base 5 files (group, upload, file, etc.); downstream projects extend rather than redeclare it.',
         recommendedTool: 'dbx_storagefile_m_validate_folder'
     },
+    {
+        name: 'formspace',
+        reason: 'FormSpace is a canonical group from `@dereekb/firebase` with a richer layout than the base 5 files (type, upload, task, util, etc.); a downstream project only registers its own types and does not redeclare the model.',
+        recommendedTool: 'dbx_model_validate_folder'
+    },
     {
         name: 'calendar',
         reason: 'Calendar is a canonical group from `@dereekb/firebase` with a richer layout than the base 5 files (type, expand, ics, processing, etc.); downstream projects extend rather than redeclare it.',
@@ -66054,4 +67238,4 @@ function printPaginatedOutput(input) {
     })();
 }
 
-export { ACTIONS_SCAN_CONFIG_FILENAME, ACTION_ENTRY_ROLES, ACTION_ROLE_ORDER, ActionDirectiveEntry, ActionEntry, ActionInputEntry, ActionManifest, ActionOutputEntry, ActionStateEntry, ActionStoreEntry, ActionStoreMethodEntry, ActionStoreObservableEntry, ActionsScanConfig, ActionsScanSection, BUILTIN_AUTH_CLAIMS, BUILTIN_AUTH_ROLES, BUILTIN_AUTH_SCOPES, CALL_MODEL_API_PATH, CALL_PASSTHROUGH_COMMAND, CLI_EXIT_CODE_AUTH, CLI_EXIT_CODE_HANDLER, CLI_FIRESTORE_SESSION_EXPIRY_BUFFER_MS, CLI_FIRESTORE_SESSION_MAX_CACHE_MS, CLI_READ_VIA_EPILOGUE, CLI_READ_VIA_VALUES, CORE_TOPICS, CORE_TOPICS_SET, CSS_UTILITIES_SCAN_CONFIG_FILENAME, CSS_UTILITY_ROLES, CSS_UTILITY_SCOPES, CliError, CssUtilitiesScanConfig, CssUtilitiesScanSection, CssUtilityDeclaration, CssUtilityEntry, CssUtilityManifest, DBX_ACTION_STATE_VALUES, DBX_DOCS_UI_EXAMPLES_SCAN_CONFIG_FILENAME, DBX_DOCS_UI_EXAMPLE_USE_KINDS, DEFAULT_ACTIONS_SCAN_OUT_PATH, DEFAULT_ACTION_COMMAND_NAME, DEFAULT_CLI_FIREBASE_EMULATOR_HOST, DEFAULT_CLI_HTTP_TIMEOUT_MS, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_READ_VIA, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_CSS_UTILITIES_SCAN_OUT_PATH, DEFAULT_DBX_DOCS_UI_EXAMPLES_SCAN_OUT_PATH, DEFAULT_FILTERS_SCAN_OUT_PATH, DEFAULT_FIRESTORE_GET_COMMAND_NAME, DEFAULT_FIRESTORE_QUERIES_COMMAND_NAME, DEFAULT_FIRESTORE_QUERY_COMMAND_NAME, DEFAULT_FORGE_FIELDS_SCAN_OUT_PATH, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DEFAULT_MODEL_SNAPSHOT_FIELDS_SCAN_OUT_PATH, DEFAULT_PIPES_SCAN_OUT_PATH, DEFAULT_SCAN_OUT_PATH, DEFAULT_SPECIFIER_KEY, DEFAULT_UI_COMPONENTS_SCAN_OUT_PATH, DEFAULT_UTILS_SCAN_OUT_PATH, DOWNSTREAM_CLUSTERS, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, DbxDocsUiExampleEntry, DbxDocsUiExampleManifest, DbxDocsUiExampleUseEntry, DbxDocsUiExamplesScanConfig, DbxDocsUiExamplesScanSection, DbxMcpConfig, EMPTY_ACTION_REGISTRY, EMPTY_AUTH_REGISTRY, EMPTY_CSS_UTILITY_REGISTRY, EMPTY_DBX_DOCS_UI_EXAMPLES_REGISTRY, EMPTY_FILTER_REGISTRY, EMPTY_FORGE_FIELD_REGISTRY, EMPTY_MODEL_SNAPSHOT_FIELD_REGISTRY, EMPTY_PIPE_REGISTRY, EMPTY_SEMANTIC_TYPE_REGISTRY, EMPTY_TOKEN_REGISTRY, EMPTY_UI_COMPONENT_REGISTRY, EMPTY_UTIL_REGISTRY, ExtractedDbxDocsUiExampleEntrySchema, ExtractedEntrySchema, ExtractedForgeFieldEntrySchema, ExtractedUiEntrySchema, FILTERS_SCAN_CONFIG_FILENAME, FILTER_KINDS, FILTER_KIND_ORDER, FIREBASE_MODELS, FIREBASE_MODEL_GROUPS, FIRESTORE_QUERY_PARENT_REQUIRED_CODE, FIRESTORE_QUERY_UNAVAILABLE_CODE, FIRESTORE_SESSION_API_PATH, FIRESTORE_SESSION_DOCTOR_CHECK_NAME, FORGE_FIELDS_SCAN_CONFIG_FILENAME, FORGE_FIELD_ARRAY_OUTPUTS, FORGE_FIELD_COMPOSITE_SUFFIXES, FORGE_FIELD_TIERS, FORGE_FIELD_WRAPPER_PATTERNS, FORM_FIELDS, FORM_TIER_ORDER, FilterDirectiveEntry, FilterEntry, FilterInputEntry, FilterManifest, FilterPatternEntry, FiltersScanConfig, FiltersScanSection, ForgeFieldEntry, ForgeFieldManifest, ForgeFieldPropertyEntry, ForgeFieldsScanConfig, ForgeFieldsScanSection, GET_COMMAND, GET_MANY_COMMAND, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MCP_CALL_TYPE_ABBREVIATIONS, MCP_MANIFEST_VERSION, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MODEL_ARCHETYPES, MODEL_ARCHETYPE_ADDON_SLUGS, MODEL_ARCHETYPE_SYNC_MODES, MODEL_IS_SERVER_ONLY_CODE, MODEL_SNAPSHOT_FIELDS_SCAN_CONFIG_FILENAME, MODEL_SNAPSHOT_FIELD_KINDS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, ModelSnapshotFieldEntry, ModelSnapshotFieldManifest, ModelSnapshotFieldParamEntry, ModelSnapshotFieldsScanConfig, ModelSnapshotFieldsScanSection, PIPES_SCAN_CONFIG_FILENAME, PIPE_CATEGORIES, PIPE_CATEGORY_ORDER, PIPE_PURITIES, PROMPT_CANCELLED_ERROR_CODE, PipeArgEntry, PipeEntry, PipeManifest, PipesScanConfig, PipesScanSection, RESERVED_MODEL_FOLDERS, ROUTE_MANIFEST_VERSION, ROUTE_MODEL_LIST_TAG, ROUTE_MODEL_TAG, SCAN_CONFIG_FILENAME$1 as SCAN_CONFIG_FILENAME, SERVICE_TOKEN_REQUIRED_OIDC_SCOPES, STANDARD_GLOBAL_OPTION_NAMES, STDIN_NOT_PIPED_ERROR_CODE, SemanticTypeEntry, SemanticTypeManifest, SemanticTypeScanConfig, TOKEN_ROLES, TOKEN_SOURCES, TokenDefaults, TokenEntry, TokenManifest, UI_COMPONENTS_SCAN_CONFIG_FILENAME, UI_COMPONENT_CATEGORIES, UI_COMPONENT_KINDS, UTILS_SCAN_CONFIG_FILENAME, UTIL_KINDS, UiComponentEntry, UiComponentInputEntry, UiComponentManifest, UiComponentOutputEntry, UiComponentsScanConfig, UiComponentsScanSection, UtilEntry, UtilManifest, UtilParamEntry, UtilsScanConfig, UtilsScanSection, WORKSPACE_AUTH_APPS, WORKSPACE_AUTH_CLAIMS, WORKSPACE_FACTORY_SCAN_EXCLUDE, WORKSPACE_FACTORY_SCAN_INCLUDE, abbreviateMcpCallType, appendCliErrorMapper, applyEnvVarOverrides, assertCliFirestoreQueryCanRun, assertCliFirestoreQueryParentKey, assertCliModelIsNotServerOnly, buildActionCommands, buildActionsManifest, buildAuthorizationUrl, buildCliPaths, buildCssUtilitiesManifest, buildDbxDocsUiExamplesManifest, buildDisambiguatedMcpToolName, buildDispatcherCreditByName, buildDumpFilePath, buildErrorOutput, buildFiltersManifest, buildFirestoreGetCommand, buildFirestoreQueriesCommand, buildFirestoreQueryCommand, buildFirestoreSessionDoctorReadRouting, buildForgeFieldsManifest, buildManifest, buildManifestCommands, buildMcpToolName, buildModelDecodeCommand, buildModelInfoCommand, buildModelSnapshotFieldsManifest, buildPipesManifest, buildRouteManifest, buildRouteTree, buildScanProject, buildUiComponentsManifest, buildUtilsManifest, callModelOverHttp, clearDownstreamCatalogCache, cliFirebaseAppName, cliFirebaseEmulatorsInUse, cliFirestoreAccessorFactory, cliFirestoreBinding, cliFirestoreCollectionForQuery, cliFirestoreErrorMapper, cliFirestoreQueryConstraints, cliFirestoreQueryMode, cliFirestoreQueryModeForRules, cliFirestoreSessionEntryExpiresAt, cliLifecycleRunner, cliReadResultMeta, closeAllCliFirebaseApps, closeCliFirestoreSessionContext, coerceCliReadVia, collectClassPropertiesWithInheritance, computeRelativeSpecifiers, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createActionCommand, createActionRegistry, createActionRegistryFromEntries, createAuthCommand, createAuthMiddleware, createAuthRegistryFromEntries, createCallModelCommand, createCli, createCliContext, createCliFirestoreModels, createCliFirestoreQueryRegistry, createCliFirestoreSessionCacheStore, createCliFirestoreSessionContext, createCliTokenCacheStore, createContextSlot, createCssUtilityRegistry, createCssUtilityRegistryFromEntries, createDbxDocsUiExamplesRegistry, createDbxDocsUiExamplesRegistryFromEntries, createDoctorCommand, createEnvCommand, createFilterRegistry, createFilterRegistryFromEntries, createFirestoreSessionDoctorCheck, createForgeFieldRegistry, createForgeFieldRegistryFromEntries, createModelSnapshotFieldRegistry, createModelSnapshotFieldRegistryFromEntries, createOutputCommand, createOutputMiddleware, createPassthroughAuthMiddleware, createPipeRegistry, createPipeRegistryFromEntries, createSemanticTypeRegistry, createSemanticTypeRegistryFromEntries, createTokenRegistry, createTokenRegistryFromEntries, createUiComponentRegistry, createUiComponentRegistryFromEntries, createUtilRegistry, createUtilRegistryFromEntries, decodeFirestoreModelKey, defaultDoctorChecks, defaultGlobber, defaultReadFile, deriveOptionalFromName, describeCliFirestoreQueryMode, detectDataHelpFormat, detectHelpMode, discoverDownstreamFirebasePackages, discoverDownstreamPackages, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, extractActionEntries, extractAngularInputs, extractAngularOutputs, extractAuthEntries, extractComponentRouteModelTags, extractCssUtilityEntries, extractDbxDocsUiExampleEntries, extractEntries, extractFile, extractFilterEntries, extractForgeFieldEntries, extractModelSnapshotFieldEntries, extractModels, extractPipeEntries, extractUiEntries, extractUrlParamKeys, extractUtilEntries, fetchFirestoreSession, fetchSessionInfo, fetchUserInfo, filterCliFirestoreQueries, filterReadOnlyModelScopes, findAndLoadConfig, findCliEnvDefault, findCliModelManifestEntry, flattenList, formatGeneratedTs, getBundledManifestsDirectory, getCliContext, getCliEnvVarName, getCliTimeoutMs, getDefaultBundledActionManifestPaths, getDefaultBundledCssUtilityManifestPaths, getDefaultBundledDbxDocsUiExamplesManifestPaths, getDefaultBundledFilterManifestPaths, getDefaultBundledForgeFieldManifestPaths, getDefaultBundledManifestPaths, getDefaultBundledModelFirebaseIndexManifestPaths, getDefaultBundledModelSnapshotFieldManifestPaths, getDefaultBundledPipeManifestPaths, getDefaultBundledTokenManifestPaths, getDefaultBundledUiManifestPaths, getDefaultBundledUtilManifestPaths, getDownstreamCatalog, getFirebaseBucketKeyedByIdModels, getFirebaseDistrictKeyedByIdModels, getFirebaseExternalIdKeyedByIdModels, getFirebaseModel, getFirebaseModelByPrefix, getFirebaseModelGroup, getFirebaseModelGroups, getFirebaseModels, getFirebaseModelsByArchetype, getFirebasePrefixCatalog, getFirebaseRegionKeyedByIdModels, getFirebaseSubcollectionsOf, getFirebaseUserKeyedByIdModels, getFirebaseUserRelatedModels, getModelArchetypeBySlug, getModelArchetypesByAxisValue, getModelArchetypesByCollectionKind, getModelArchetypesBySyncMode, getModelOverFirestore, getModelOverHttp, getMultipleModelsOverFirestore, getMultipleModelsOverHttp, getMultipleModelsOverHttpChunked, getOutputOptions, globToRegex, hasParamSegment, indentLines$1 as indentLines, isCliEnvConfigComplete, isCliFirebaseConfigComplete, isCliFirestoreQueryInvocable, isCliFirestoreSessionExpired, isCliVerbose, isCoreTopic, isExportedFromPackage, isStdinPositionalSentinel, isStdinSentinel, isTokenExpired, isVisibleProperty, iterateDbxCliCallModel, loadActionManifests, loadActionRegistry, loadAuthRegistry, loadCliConfig, loadCssUtilityRegistry, loadDbxDocsUiExamplesManifests, loadDbxDocsUiExamplesRegistry, loadFilterManifests, loadFilterRegistry, loadForgeFieldManifests, loadForgeFieldRegistry, loadModelFirebaseIndexManifests, loadModelFirebaseIndexRegistry, loadModelSnapshotFieldManifests, loadModelSnapshotFieldRegistry, loadPackageName, loadPipeManifests, loadPipeRegistry, loadRouteTree, loadScanSection, loadSemanticTypeManifests, loadSemanticTypeRegistry, loadTokenManifests, loadTokenRegistry, loadUiComponentManifests, loadUiComponentRegistry, loadUtilManifests, loadUtilRegistry, maskEnv, maskSecret, matchUrlAgainstEntries, mcpManifestKey, mergeCliConfig, mergeCliEnvWithDefault, mergeCliFirebaseConfig, mergeOutputConfig, normalizePathname, oidcRelyingPartyErrorToCliError, openStreamingDump, outputError, outputResult, packageNameToSlug, parseAnnotation, parseDeclarations$1 as parseDeclarations, parseFirestoreModelIdentityArgs, parseGetArgs, parseGetManyArgs, parsePastedRedirect, parseRouteModelTag, parseScanArgs, pickFields, promptLine, readAllStdin, readDirectiveDecorator, readEnvTokenEntry, readPropertyDescription, readSelector, readStdinTokens, readStringProperty, refreshAccessToken, renderCliFirestoreQueryEntry, renderCliFirestoreQueryList, renderDecodedKey, renderGroupedImportLines, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, renderTable, requireCliContext, requireCliFirestoreContext, requireCliFirestoreModels, requireCliFirestoreSession, resolveActiveEnvName, resolveCliEnv, resolveCliEnvOrThrow, resolveCliFirestoreQueryArgs, resolveCliFirestoreQueryEntry, resolveCliModel, resolveCliReadSource, resolveComponentSourceFromSources, resolveDemoClaimsPath, resolveExplicitFirebasePackages, resolveExtendsName, resolveModelArchetype, resolveOutputConfig, resolvePerModelGetKey, resolveRouteSources, revokeToken, runActionsScanCli, runCli, runCliFirestoreQuery, runCssUtilitiesScanCli, runDbxDocsUiExamplesScanCli, runFiltersScanCli, runForgeFieldsScanCli, runModelFirebaseIndexScanCli, runModelSnapshotFieldsScanCli, runPaginatedList, runPipesScanCli, runScanCli, runScanCliBase, runUiComponentsScanCli, runUtilsScanCli, sanitizeString, saveCliConfig, scanFactoryReferences, scoreCandidates, serializeActionManifest, serializeCssUtilityManifest, serializeDbxDocsUiExamplesManifest, serializeFilterManifest, serializeForgeFieldManifest, serializeManifest, serializeModelSnapshotFieldsManifest, serializePipeManifest, serializeUiComponentManifest, serializeUtilManifest, setCliContext, setCliRawArgv, setCliTimeoutMs, setCliVerbose, splitListTagText$1 as splitListTagText, splitSegments, stripUrlQueryAndHash, toActionEntryInfo, toFilterEntryInfo, toFormFieldInfo, tracedFetch, truncate, tryMatchSegments, unwrapFenced, validateMcpToolName, verboseLog, withCallModelArgs, withEnv, withMultiplePages, withOutput, withServiceTokenScopes, wrapCommandHandler, wrapSyncCommandHandler, writeGeneratedTsFile };
+export { ACTIONS_SCAN_CONFIG_FILENAME, ACTION_ENTRY_ROLES, ACTION_ROLE_ORDER, ActionDirectiveEntry, ActionEntry, ActionInputEntry, ActionManifest, ActionOutputEntry, ActionStateEntry, ActionStoreEntry, ActionStoreMethodEntry, ActionStoreObservableEntry, ActionsScanConfig, ActionsScanSection, BUILD_DRIFT_DOCTOR_CHECK_NAME, BUILTIN_AUTH_CLAIMS, BUILTIN_AUTH_ROLES, BUILTIN_AUTH_SCOPES, CALL_MODEL_API_PATH, CALL_PASSTHROUGH_COMMAND, CLI_CLIENT_FIRESTORE_DRIVER_IDENTIFIER, CLI_EXIT_CODE_AUTH, CLI_EXIT_CODE_HANDLER, CLI_FIRESTORE_SESSION_EXPIRY_BUFFER_MS, CLI_FIRESTORE_SESSION_MAX_CACHE_MS, CLI_FRAMEWORK_PACKAGE_PREFIX, CLI_READ_VIA_EPILOGUE, CLI_READ_VIA_VALUES, CORE_TOPICS, CORE_TOPICS_SET, CSS_UTILITIES_SCAN_CONFIG_FILENAME, CSS_UTILITY_ROLES, CSS_UTILITY_SCOPES, CliError, CssUtilitiesScanConfig, CssUtilitiesScanSection, CssUtilityDeclaration, CssUtilityEntry, CssUtilityManifest, DBX_ACTION_STATE_VALUES, DBX_DOCS_UI_EXAMPLES_SCAN_CONFIG_FILENAME, DBX_DOCS_UI_EXAMPLE_USE_KINDS, DEFAULT_ACTIONS_SCAN_OUT_PATH, DEFAULT_ACTION_COMMAND_NAME, DEFAULT_CLI_FIREBASE_EMULATOR_HOST, DEFAULT_CLI_HTTP_TIMEOUT_MS, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_READ_VIA, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_CSS_UTILITIES_SCAN_OUT_PATH, DEFAULT_DBX_DOCS_UI_EXAMPLES_SCAN_OUT_PATH, DEFAULT_FILTERS_SCAN_OUT_PATH, DEFAULT_FIRESTORE_GET_COMMAND_NAME, DEFAULT_FIRESTORE_QUERIES_COMMAND_NAME, DEFAULT_FIRESTORE_QUERY_COMMAND_NAME, DEFAULT_FORGE_FIELDS_SCAN_OUT_PATH, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DEFAULT_MODEL_SNAPSHOT_FIELDS_SCAN_OUT_PATH, DEFAULT_PIPES_SCAN_OUT_PATH, DEFAULT_SCAN_OUT_PATH, DEFAULT_SPECIFIER_KEY, DEFAULT_UI_COMPONENTS_SCAN_OUT_PATH, DEFAULT_UTILS_SCAN_OUT_PATH, DOWNSTREAM_CLUSTERS, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, DbxDocsUiExampleEntry, DbxDocsUiExampleManifest, DbxDocsUiExampleUseEntry, DbxDocsUiExamplesScanConfig, DbxDocsUiExamplesScanSection, DbxMcpConfig, EMPTY_ACTION_REGISTRY, EMPTY_AUTH_REGISTRY, EMPTY_CSS_UTILITY_REGISTRY, EMPTY_DBX_DOCS_UI_EXAMPLES_REGISTRY, EMPTY_FILTER_REGISTRY, EMPTY_FORGE_FIELD_REGISTRY, EMPTY_MODEL_SNAPSHOT_FIELD_REGISTRY, EMPTY_PIPE_REGISTRY, EMPTY_SEMANTIC_TYPE_REGISTRY, EMPTY_TOKEN_REGISTRY, EMPTY_UI_COMPONENT_REGISTRY, EMPTY_UTIL_REGISTRY, ExtractedDbxDocsUiExampleEntrySchema, ExtractedEntrySchema, ExtractedForgeFieldEntrySchema, ExtractedUiEntrySchema, FILTERS_SCAN_CONFIG_FILENAME, FILTER_KINDS, FILTER_KIND_ORDER, FIREBASE_MODELS, FIREBASE_MODEL_GROUPS, FIRESTORE_COLLECTION_UNRESOLVABLE_CODE, FIRESTORE_QUERY_PARENT_REQUIRED_CODE, FIRESTORE_QUERY_UNAVAILABLE_CODE, FIRESTORE_SDK_IDENTITY_STAGE, FIRESTORE_SDK_INSTANCE_MISMATCH_CODE, FIRESTORE_SESSION_API_PATH, FIRESTORE_SESSION_DOCTOR_CHECK_NAME, FORGE_FIELDS_SCAN_CONFIG_FILENAME, FORGE_FIELD_ARRAY_OUTPUTS, FORGE_FIELD_COMPOSITE_SUFFIXES, FORGE_FIELD_TIERS, FORGE_FIELD_WRAPPER_PATTERNS, FORM_FIELDS, FORM_TIER_ORDER, FilterDirectiveEntry, FilterEntry, FilterInputEntry, FilterManifest, FilterPatternEntry, FiltersScanConfig, FiltersScanSection, ForgeFieldEntry, ForgeFieldManifest, ForgeFieldPropertyEntry, ForgeFieldsScanConfig, ForgeFieldsScanSection, GET_COMMAND, GET_MANY_COMMAND, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MCP_CALL_TYPE_ABBREVIATIONS, MCP_MANIFEST_VERSION, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MODEL_ARCHETYPES, MODEL_ARCHETYPE_ADDON_SLUGS, MODEL_ARCHETYPE_SYNC_MODES, MODEL_IS_SERVER_ONLY_CODE, MODEL_SNAPSHOT_FIELDS_SCAN_CONFIG_FILENAME, MODEL_SNAPSHOT_FIELD_KINDS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, ModelSnapshotFieldEntry, ModelSnapshotFieldManifest, ModelSnapshotFieldParamEntry, ModelSnapshotFieldsScanConfig, ModelSnapshotFieldsScanSection, PIPES_SCAN_CONFIG_FILENAME, PIPE_CATEGORIES, PIPE_CATEGORY_ORDER, PIPE_PURITIES, PROMPT_CANCELLED_ERROR_CODE, PipeArgEntry, PipeEntry, PipeManifest, PipesScanConfig, PipesScanSection, RESERVED_MODEL_FOLDERS, ROUTE_MANIFEST_VERSION, ROUTE_MODEL_LIST_TAG, ROUTE_MODEL_TAG, SCAN_CONFIG_FILENAME$1 as SCAN_CONFIG_FILENAME, SERVICE_TOKEN_REQUIRED_OIDC_SCOPES, STANDARD_GLOBAL_OPTION_NAMES, STDIN_NOT_PIPED_ERROR_CODE, SemanticTypeEntry, SemanticTypeManifest, SemanticTypeScanConfig, TOKEN_ROLES, TOKEN_SOURCES, TokenDefaults, TokenEntry, TokenManifest, UI_COMPONENTS_SCAN_CONFIG_FILENAME, UI_COMPONENT_CATEGORIES, UI_COMPONENT_KINDS, UTILS_SCAN_CONFIG_FILENAME, UTIL_KINDS, UiComponentEntry, UiComponentInputEntry, UiComponentManifest, UiComponentOutputEntry, UiComponentsScanConfig, UiComponentsScanSection, UtilEntry, UtilManifest, UtilParamEntry, UtilsScanConfig, UtilsScanSection, WORKSPACE_AUTH_APPS, WORKSPACE_AUTH_CLAIMS, WORKSPACE_FACTORY_SCAN_EXCLUDE, WORKSPACE_FACTORY_SCAN_INCLUDE, abbreviateMcpCallType, appendCliErrorMapper, applyEnvVarOverrides, assertCliFirestoreQueryCanRun, assertCliFirestoreQueryParentKey, assertCliModelIsNotServerOnly, buildActionCommands, buildActionsManifest, buildAuthorizationUrl, buildCliPaths, buildCssUtilitiesManifest, buildDbxDocsUiExamplesManifest, buildDisambiguatedMcpToolName, buildDispatcherCreditByName, buildDumpFilePath, buildErrorOutput, buildFiltersManifest, buildFirestoreGetCommand, buildFirestoreQueriesCommand, buildFirestoreQueryCommand, buildFirestoreSessionDoctorReadRouting, buildForgeFieldsManifest, buildManifest, buildManifestCommands, buildMcpToolName, buildModelDecodeCommand, buildModelInfoCommand, buildModelSnapshotFieldsManifest, buildPipesManifest, buildRouteManifest, buildRouteTree, buildScanProject, buildUiComponentsManifest, buildUtilsManifest, callModelOverHttp, clearDownstreamCatalogCache, cliBuildDriftDescription, cliFirebaseAppName, cliFirebaseEmulatorsInUse, cliFirestoreAccessorFactory, cliFirestoreBinding, cliFirestoreCollectionForQuery, cliFirestoreErrorMapper, cliFirestoreQueryConstraints, cliFirestoreQueryMode, cliFirestoreQueryModeForRules, cliFirestoreSdkIdentitySuggestion, cliFirestoreSessionEntryExpiresAt, cliFirestoreWiringError, cliLifecycleRunner, cliReadResultMeta, closeAllCliFirebaseApps, closeCliFirestoreSessionContext, coerceCliReadVia, collectClassPropertiesWithInheritance, computeRelativeSpecifiers, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createActionCommand, createActionRegistry, createActionRegistryFromEntries, createAuthCommand, createAuthMiddleware, createAuthRegistryFromEntries, createCallModelCommand, createCli, createCliBuildDriftDoctorCheck, createCliContext, createCliFirestoreModels, createCliFirestoreQueryRegistry, createCliFirestoreSessionCacheStore, createCliFirestoreSessionContext, createCliTokenCacheStore, createContextSlot, createCssUtilityRegistry, createCssUtilityRegistryFromEntries, createDbxDocsUiExamplesRegistry, createDbxDocsUiExamplesRegistryFromEntries, createDoctorCommand, createEnvCommand, createFilterRegistry, createFilterRegistryFromEntries, createFirestoreSessionDoctorCheck, createForgeFieldRegistry, createForgeFieldRegistryFromEntries, createModelSnapshotFieldRegistry, createModelSnapshotFieldRegistryFromEntries, createOutputCommand, createOutputMiddleware, createPassthroughAuthMiddleware, createPipeRegistry, createPipeRegistryFromEntries, createSemanticTypeRegistry, createSemanticTypeRegistryFromEntries, createTokenRegistry, createTokenRegistryFromEntries, createUiComponentRegistry, createUiComponentRegistryFromEntries, createUtilRegistry, createUtilRegistryFromEntries, decodeFirestoreModelKey, defaultDoctorChecks, defaultGlobber, defaultReadFile, deriveOptionalFromName, describeCliFirestoreQueryMode, detectDataHelpFormat, detectHelpMode, discoverDownstreamFirebasePackages, discoverDownstreamPackages, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, extractActionEntries, extractAngularInputs, extractAngularOutputs, extractAuthEntries, extractComponentRouteModelTags, extractCssUtilityEntries, extractDbxDocsUiExampleEntries, extractEntries, extractFile, extractFilterEntries, extractForgeFieldEntries, extractModelSnapshotFieldEntries, extractModels, extractPipeEntries, extractUiEntries, extractUrlParamKeys, extractUtilEntries, fetchFirestoreSession, fetchSessionInfo, fetchUserInfo, filterCliFirestoreQueries, filterReadOnlyModelScopes, findAndLoadConfig, findCliEnvDefault, findCliModelManifestEntry, flattenList, formatGeneratedTs, getBundledManifestsDirectory, getCliContext, getCliEnvVarName, getCliTimeoutMs, getDefaultBundledActionManifestPaths, getDefaultBundledCssUtilityManifestPaths, getDefaultBundledDbxDocsUiExamplesManifestPaths, getDefaultBundledFilterManifestPaths, getDefaultBundledForgeFieldManifestPaths, getDefaultBundledManifestPaths, getDefaultBundledModelFirebaseIndexManifestPaths, getDefaultBundledModelSnapshotFieldManifestPaths, getDefaultBundledPipeManifestPaths, getDefaultBundledTokenManifestPaths, getDefaultBundledUiManifestPaths, getDefaultBundledUtilManifestPaths, getDownstreamCatalog, getFirebaseBucketKeyedByIdModels, getFirebaseDistrictKeyedByIdModels, getFirebaseExternalIdKeyedByIdModels, getFirebaseModel, getFirebaseModelByPrefix, getFirebaseModelGroup, getFirebaseModelGroups, getFirebaseModels, getFirebaseModelsByArchetype, getFirebasePrefixCatalog, getFirebaseRegionKeyedByIdModels, getFirebaseSubcollectionsOf, getFirebaseUserKeyedByIdModels, getFirebaseUserRelatedModels, getModelArchetypeBySlug, getModelArchetypesByAxisValue, getModelArchetypesByCollectionKind, getModelArchetypesBySyncMode, getModelOverFirestore, getModelOverHttp, getMultipleModelsOverFirestore, getMultipleModelsOverHttp, getMultipleModelsOverHttpChunked, getOutputOptions, globToRegex, hasParamSegment, indentLines$1 as indentLines, inspectCliBuildDrift, inspectCliFirestoreSdkIdentity, isCliEnvConfigComplete, isCliFirebaseConfigComplete, isCliFirestoreQueryInvocable, isCliFirestoreSessionExpired, isCliVerbose, isCoreTopic, isExportedFromPackage, isStdinPositionalSentinel, isStdinSentinel, isTokenExpired, isVisibleProperty, iterateDbxCliCallModel, loadActionManifests, loadActionRegistry, loadAuthRegistry, loadCliConfig, loadCssUtilityRegistry, loadDbxDocsUiExamplesManifests, loadDbxDocsUiExamplesRegistry, loadFilterManifests, loadFilterRegistry, loadForgeFieldManifests, loadForgeFieldRegistry, loadModelFirebaseIndexManifests, loadModelFirebaseIndexRegistry, loadModelSnapshotFieldManifests, loadModelSnapshotFieldRegistry, loadPackageName, loadPipeManifests, loadPipeRegistry, loadRouteTree, loadScanSection, loadSemanticTypeManifests, loadSemanticTypeRegistry, loadTokenManifests, loadTokenRegistry, loadUiComponentManifests, loadUiComponentRegistry, loadUtilManifests, loadUtilRegistry, maskEnv, maskSecret, matchUrlAgainstEntries, mcpManifestKey, mergeCliConfig, mergeCliEnvWithDefault, mergeCliFirebaseConfig, mergeOutputConfig, normalizePathname, oidcRelyingPartyErrorToCliError, openStreamingDump, outputError, outputResult, packageNameToSlug, parseAnnotation, parseDeclarations$1 as parseDeclarations, parseFirestoreModelIdentityArgs, parseGetArgs, parseGetManyArgs, parsePastedRedirect, parseRouteModelTag, parseScanArgs, pickFields, promptLine, readAllStdin, readCliArtifactPackage, readDirectiveDecorator, readEnvTokenEntry, readPropertyDescription, readSelector, readStdinTokens, readStringProperty, refreshAccessToken, renderCliFirestoreQueryEntry, renderCliFirestoreQueryList, renderDecodedKey, renderGroupedImportLines, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, renderTable, requireCliContext, requireCliFirestoreContext, requireCliFirestoreModels, requireCliFirestoreSession, resolveActiveEnvName, resolveCliEnv, resolveCliEnvOrThrow, resolveCliFirestoreQueryArgs, resolveCliFirestoreQueryEntry, resolveCliModel, resolveCliReadSource, resolveComponentSourceFromSources, resolveDemoClaimsPath, resolveExplicitFirebasePackages, resolveExtendsName, resolveModelArchetype, resolveOutputConfig, resolvePerModelGetKey, resolveRouteSources, revokeToken, runActionsScanCli, runCli, runCliFirestoreQuery, runCssUtilitiesScanCli, runDbxDocsUiExamplesScanCli, runFiltersScanCli, runForgeFieldsScanCli, runModelFirebaseIndexScanCli, runModelSnapshotFieldsScanCli, runPaginatedList, runPipesScanCli, runScanCli, runScanCliBase, runUiComponentsScanCli, runUtilsScanCli, sanitizeString, saveCliConfig, scanFactoryReferences, scoreCandidates, serializeActionManifest, serializeCssUtilityManifest, serializeDbxDocsUiExamplesManifest, serializeFilterManifest, serializeForgeFieldManifest, serializeManifest, serializeModelSnapshotFieldsManifest, serializePipeManifest, serializeUiComponentManifest, serializeUtilManifest, setCliContext, setCliRawArgv, setCliTimeoutMs, setCliVerbose, splitListTagText$1 as splitListTagText, splitSegments, stripUrlQueryAndHash, toActionEntryInfo, toFilterEntryInfo, toFormFieldInfo, tracedFetch, truncate, tryMatchSegments, unwrapFenced, validateMcpToolName, verboseLog, withCallModelArgs, withEnv, withMultiplePages, withOutput, withServiceTokenScopes, wrapCommandHandler, wrapSyncCommandHandler, writeGeneratedTsFile };