@dereekb/dbx-cli 14.4.0 → 14.5.0

package/index.esm.js

@@ -36,7 +36,7 @@ function _assert_this_initialized(self) {
     if (self === void 0) throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
     return self;
 }
-function asyncGeneratorStep$1u(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1v(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -47,16 +47,16 @@ function asyncGeneratorStep$1u(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1u(fn) {
+function _async_to_generator$1v(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1u(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1v(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1u(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1v(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -155,7 +155,7 @@ function _object_spread$10(target) {
     }
     return target;
 }
-function ownKeys$H(object, enumerableOnly) {
+function ownKeys$J(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -163,11 +163,11 @@ function ownKeys$H(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$H(target, source) {
+function _object_spread_props$J(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$H(Object(source)).forEach(function(key) {
+        ownKeys$J(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -187,7 +187,7 @@ function _set_prototype_of(o, p) {
 function _to_consumable_array$_(arr) {
     return _array_without_holes$_(arr) || _iterable_to_array$_(arr) || _unsupported_iterable_to_array$1c(arr) || _non_iterable_spread$_();
 }
-function _ts_generator$1u(thisArg, body) {
+function _ts_generator$1v(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -341,7 +341,11 @@ function _wrap_native_super(Class) {
     /access_token[=:]\s*\S+/gi,
     /refresh_token[=:]\s*\S+/gi,
     /client_secret[=:]\s*\S+/gi,
-    /id_token[=:]\s*\S+/gi
+    /id_token[=:]\s*\S+/gi,
+    // `auth handoff` posts `{"code": "<claim code>"}` and reads it from <PREFIX>_CLI_HANDOFF — a live
+    // pointer at a refresh token, so `--verbose` tracing must never echo either form.
+    /cli_handoff[=:]\s*\S+/gi,
+    /"code"\s*:\s*"[^"]+"/gi
 ];
 /**
  * Default per-request HTTP timeout in milliseconds, applied when no explicit `--timeout` is set.
@@ -407,10 +411,10 @@ var _timeoutMs = DEFAULT_CLI_HTTP_TIMEOUT_MS;
  * @param init - The RequestInit. Any existing `signal` is preserved; we only attach our own when no signal was supplied.
  * @returns The fetch Response.
  */ function tracedFetch(fetcher, input, init) {
-    return _async_to_generator$1u(function() {
+    return _async_to_generator$1v(function() {
         var _ref, fetchImpl, timeoutMs, method, url, controller, timeoutHandle, finalInit, // Don't let the abort timer itself keep the Node event loop (or a test worker) alive.
         _timeoutHandle_unref, localController, e;
-        return _ts_generator$1u(this, function(_state) {
+        return _ts_generator$1v(this, function(_state) {
             switch(_state.label){
                 case 0:
                     fetchImpl = fetcher !== null && fetcher !== void 0 ? fetcher : fetch;
@@ -432,7 +436,7 @@ var _timeoutMs = DEFAULT_CLI_HTTP_TIMEOUT_MS;
                             return localController.abort();
                         }, timeoutMs);
                         (_timeoutHandle_unref = timeoutHandle.unref) === null || _timeoutHandle_unref === void 0 ? void 0 : _timeoutHandle_unref.call(timeoutHandle);
-                        finalInit = _object_spread_props$H(_object_spread$10({}, init), {
+                        finalInit = _object_spread_props$J(_object_spread$10({}, init), {
                             signal: localController.signal
                         });
                     }
@@ -761,7 +765,7 @@ function _array_like_to_array$1b(arr, len) {
 function _array_without_holes$Z(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$1b(arr);
 }
-function asyncGeneratorStep$1t(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1u(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -772,16 +776,16 @@ function asyncGeneratorStep$1t(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1t(fn) {
+function _async_to_generator$1u(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1t(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1u(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1t(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1u(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -821,7 +825,7 @@ function _object_spread$$(target) {
     }
     return target;
 }
-function ownKeys$G(object, enumerableOnly) {
+function ownKeys$I(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -829,11 +833,11 @@ function ownKeys$G(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$G(target, source) {
+function _object_spread_props$I(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$G(Object(source)).forEach(function(key) {
+        ownKeys$I(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -842,7 +846,7 @@ function _object_spread_props$G(target, source) {
 function _to_consumable_array$Z(arr) {
     return _array_without_holes$Z(arr) || _iterable_to_array$Z(arr) || _unsupported_iterable_to_array$1b(arr) || _non_iterable_spread$Z();
 }
-function _ts_generator$1t(thisArg, body) {
+function _ts_generator$1u(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -966,9 +970,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The call envelope describing the API target, access token, model params, and optional fetch override.
  * @returns The parsed JSON response body cast to `R`.
  */ function callModelOverHttp(input) {
-    return _async_to_generator$1t(function() {
+    return _async_to_generator$1u(function() {
         var _input_params_call;
-        return _ts_generator$1t(this, function(_state) {
+        return _ts_generator$1u(this, function(_state) {
             return [
                 2,
                 requestJson({
@@ -996,8 +1000,8 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The request envelope describing the API target, access token, model + key, and optional fetch override.
  * @returns The parsed `{ key, data }` envelope.
  */ function getModelOverHttp(input) {
-    return _async_to_generator$1t(function() {
-        return _ts_generator$1t(this, function(_state) {
+    return _async_to_generator$1u(function() {
+        return _ts_generator$1u(this, function(_state) {
             return [
                 2,
                 requestJson({
@@ -1025,8 +1029,8 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - The request envelope describing the API target, access token, model, keys, and optional fetch override.
  * @returns The parsed `{ results, errors }` envelope.
  */ function getMultipleModelsOverHttp(input) {
-    return _async_to_generator$1t(function() {
-        return _ts_generator$1t(this, function(_state) {
+    return _async_to_generator$1u(function() {
+        return _ts_generator$1u(this, function(_state) {
             if (input.keys.length === 0) {
                 throw new CliError({
                     message: 'get-many requires at least one key.',
@@ -1064,9 +1068,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
  * @param input - Same shape as {@link GetMultipleModelsOverHttpInput} but without the 50-key cap.
  * @returns The merged `{ results, errors }` envelope across all chunks.
  */ function getMultipleModelsOverHttpChunked(input) {
-    return _async_to_generator$1t(function() {
+    return _async_to_generator$1u(function() {
         var chunks, i, mergedResults, mergedErrors, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, chunk, _mergedResults, _mergedErrors, batch, err;
-        return _ts_generator$1t(this, function(_state) {
+        return _ts_generator$1u(this, function(_state) {
             switch(_state.label){
                 case 0:
                     if (input.keys.length === 0) {
@@ -1100,7 +1104,7 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
                     chunk = _step.value;
                     return [
                         4,
-                        getMultipleModelsOverHttp(_object_spread_props$G(_object_spread$$({}, input), {
+                        getMultipleModelsOverHttp(_object_spread_props$I(_object_spread$$({}, input), {
                             keys: chunk
                         }))
                     ];
@@ -1154,9 +1158,9 @@ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
     })();
 }
 function requestJson(input) {
-    return _async_to_generator$1t(function() {
+    return _async_to_generator$1u(function() {
         var hasJsonBody, init, res, _ref, ok, body, fallbackMessage;
-        return _ts_generator$1t(this, function(_state) {
+        return _ts_generator$1u(this, function(_state) {
             switch(_state.label){
                 case 0:
                     hasJsonBody = input.jsonBody !== undefined;
@@ -1199,9 +1203,9 @@ function requestJson(input) {
     })();
 }
 function readJsonResponse(res) {
-    return _async_to_generator$1t(function() {
+    return _async_to_generator$1u(function() {
         var text, body;
-        return _ts_generator$1t(this, function(_state) {
+        return _ts_generator$1u(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -1378,7 +1382,7 @@ function _array_like_to_array$1a(arr, len) {
 function _array_without_holes$Y(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$1a(arr);
 }
-function asyncGeneratorStep$1s(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1t(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1389,16 +1393,16 @@ function asyncGeneratorStep$1s(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1s(fn) {
+function _async_to_generator$1t(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1s(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1t(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1s(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1t(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -1415,7 +1419,7 @@ function _non_iterable_spread$Y() {
 function _to_consumable_array$Y(arr) {
     return _array_without_holes$Y(arr) || _iterable_to_array$Y(arr) || _unsupported_iterable_to_array$1a(arr) || _non_iterable_spread$Y();
 }
-function _ts_generator$1s(thisArg, body) {
+function _ts_generator$1t(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -1564,9 +1568,9 @@ function _unsupported_iterable_to_array$1a(o, minLen) {
  * @returns The session-bound {@link CliFirestoreModels}.
  * @throws {CliError} When the CLI was not configured with a `firestore` binding, or the session cannot be opened.
  */ function requireCliFirestoreModels(context) {
-    return _async_to_generator$1s(function() {
+    return _async_to_generator$1t(function() {
         var getFirestoreModels;
-        return _ts_generator$1s(this, function(_state) {
+        return _ts_generator$1t(this, function(_state) {
             getFirestoreModels = context.getFirestoreModels;
             if (!getFirestoreModels) {
                 throw new CliError({
@@ -1727,7 +1731,7 @@ function tryReadCollectionIdentity(binding, collections, modelType) {
     return result;
 }
 
-function asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1s(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1738,16 +1742,16 @@ function asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1r(fn) {
+function _async_to_generator$1s(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1s(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1s(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -1779,7 +1783,7 @@ function _object_spread$_(target) {
     }
     return target;
 }
-function _ts_generator$1r(thisArg, body) {
+function _ts_generator$1s(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -1918,8 +1922,8 @@ function _ts_generator$1r(thisArg, body) {
  * @returns The parsed {@link CliFirestoreSession}.
  * @throws {CliError} When the endpoint answers non-2xx or returns an unusable body.
  */ function fetchFirestoreSession(input) {
-    return _async_to_generator$1r(function() {
-        return _ts_generator$1r(this, function(_state) {
+    return _async_to_generator$1s(function() {
+        return _ts_generator$1s(this, function(_state) {
             return [
                 2,
                 fetchFirestoreSession$1({
@@ -1969,7 +1973,7 @@ function _object_spread$Z(target) {
     }
     return target;
 }
-function ownKeys$F(object, enumerableOnly) {
+function ownKeys$H(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -1977,11 +1981,11 @@ function ownKeys$F(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$F(target, source) {
+function _object_spread_props$H(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$F(Object(source)).forEach(function(key) {
+        ownKeys$H(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -2277,7 +2281,7 @@ function parsePort(value) {
     if (refreshToken) {
         var accessToken = nonEmpty(process.env["".concat(prefix, "_ACCESS_TOKEN")]);
         var scope = nonEmpty(process.env["".concat(prefix, "_TOKEN_SCOPE")]);
-        result = _object_spread_props$F(_object_spread$Z({
+        result = _object_spread_props$H(_object_spread$Z({
             accessToken: accessToken !== null && accessToken !== void 0 ? accessToken : '',
             refreshToken: refreshToken,
             // No reliable expiry is supplied via env, so force a refresh on first use (expiresAt 0 = expired).
@@ -2291,7 +2295,7 @@ function parsePort(value) {
     return result;
 }
 
-function asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2302,16 +2306,16 @@ function asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1q(fn) {
+function _async_to_generator$1r(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1r(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -2343,7 +2347,7 @@ function _object_spread$Y(target) {
     }
     return target;
 }
-function ownKeys$E(object, enumerableOnly) {
+function ownKeys$G(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -2351,17 +2355,17 @@ function ownKeys$E(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$E(target, source) {
+function _object_spread_props$G(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$E(Object(source)).forEach(function(key) {
+        ownKeys$G(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$1q(thisArg, body) {
+function _ts_generator$1r(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -2477,9 +2481,9 @@ function _ts_generator$1q(thisArg, body) {
  * @returns The live {@link CliFirestoreSessionContext}.
  * @throws {CliError} When the env lacks Firebase client config, or any step of the handshake fails.
  */ function createCliFirestoreSessionContext(input) {
-    return _async_to_generator$1q(function() {
+    return _async_to_generator$1r(function() {
         var cliName, envName, env, accessToken, fetcher, sessionCache, _input_refreshSession, refreshSession, firebase, session;
-        return _ts_generator$1q(this, function(_state) {
+        return _ts_generator$1r(this, function(_state) {
             switch(_state.label){
                 case 0:
                     cliName = input.cliName, envName = input.envName, env = input.env, accessToken = input.accessToken, fetcher = input.fetcher, sessionCache = input.sessionCache, _input_refreshSession = input.refreshSession, refreshSession = _input_refreshSession === void 0 ? false : _input_refreshSession;
@@ -2512,7 +2516,7 @@ function _ts_generator$1q(thisArg, body) {
                     session = _state.sent();
                     return [
                         2,
-                        _object_spread_props$E(_object_spread$Y({}, session), {
+                        _object_spread_props$G(_object_spread$Y({}, session), {
                             session: session.credentials
                         })
                     ];
@@ -2529,8 +2533,8 @@ function _ts_generator$1q(thisArg, body) {
  *
  * @param session - The session context to close.
  */ function closeCliFirestoreSessionContext(session) {
-    return _async_to_generator$1q(function() {
-        return _ts_generator$1q(this, function(_state) {
+    return _async_to_generator$1r(function() {
+        return _ts_generator$1r(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -2563,8 +2567,8 @@ function _ts_generator$1q(thisArg, body) {
  *   consumers in the same process are left alone.
  * @returns Resolves once every matching app has been deleted.
  */ function closeAllCliFirebaseApps(input) {
-    return _async_to_generator$1q(function() {
-        return _ts_generator$1q(this, function(_state) {
+    return _async_to_generator$1r(function() {
+        return _ts_generator$1r(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -2622,7 +2626,7 @@ function _ts_generator$1q(thisArg, body) {
     };
 }
 
-function asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2633,22 +2637,22 @@ function asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1p(fn) {
+function _async_to_generator$1q(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1q(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1p(thisArg, body) {
+function _ts_generator$1q(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -2760,9 +2764,9 @@ function _ts_generator$1p(thisArg, body) {
  * @returns The opened (and memoized) direct-Firestore session.
  * @throws {CliError} When the context does not support direct-Firestore sessions.
  */ function requireCliFirestoreSession(context) {
-    return _async_to_generator$1p(function() {
+    return _async_to_generator$1q(function() {
         var getFirestoreSession;
-        return _ts_generator$1p(this, function(_state) {
+        return _ts_generator$1q(this, function(_state) {
             getFirestoreSession = context.getFirestoreSession;
             if (!getFirestoreSession) {
                 throw new CliError({
@@ -2789,8 +2793,8 @@ function _ts_generator$1p(thisArg, body) {
  * @returns The client `FirestoreContext` an app's collections factory consumes.
  * @throws {CliError} When the context does not support direct-Firestore sessions.
  */ function requireCliFirestoreContext(context) {
-    return _async_to_generator$1p(function() {
-        return _ts_generator$1p(this, function(_state) {
+    return _async_to_generator$1q(function() {
+        return _ts_generator$1q(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -2887,9 +2891,9 @@ var getCliContext = _cliContextSlot.get;
         return getFirestoreModelsForBinding(firestore);
     };
     function closeFirestoreSession() {
-        return _async_to_generator$1p(function() {
+        return _async_to_generator$1q(function() {
             var opened, session;
-            return _ts_generator$1p(this, function(_state) {
+            return _ts_generator$1q(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         opened = firestoreSession;
@@ -2968,7 +2972,7 @@ var getCliContext = _cliContextSlot.get;
     };
 }
 
-function asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2979,22 +2983,22 @@ function asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1o(fn) {
+function _async_to_generator$1p(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1p(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1o(thisArg, body) {
+function _ts_generator$1p(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -3107,9 +3111,9 @@ function _ts_generator$1o(thisArg, body) {
  */ function wrapCommandHandler(handler) {
     var exitCode = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : CLI_EXIT_CODE_HANDLER;
     return function(argv) {
-        return _async_to_generator$1o(function() {
+        return _async_to_generator$1p(function() {
             var e;
-            return _ts_generator$1o(this, function(_state) {
+            return _ts_generator$1p(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         _state.trys.push([
@@ -3170,7 +3174,7 @@ function _ts_generator$1o(thisArg, body) {
     };
 }
 
-function asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -3181,22 +3185,22 @@ function asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1n(fn) {
+function _async_to_generator$1o(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1o(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1n(thisArg, body) {
+function _ts_generator$1o(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -3316,9 +3320,9 @@ function _ts_generator$1n(thisArg, body) {
             return spec.helpEpilogue ? built.epilogue(spec.helpEpilogue) : built;
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$1n(function() {
+            return _async_to_generator$1o(function() {
                 var context, result;
-                return _ts_generator$1n(this, function(_state) {
+                return _ts_generator$1o(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             context = requireCliContext();
@@ -3542,7 +3546,7 @@ function _array_with_holes$o(arr) {
 function _array_without_holes$X(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$18(arr);
 }
-function asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -3553,16 +3557,16 @@ function asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1m(fn) {
+function _async_to_generator$1n(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1n(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -3629,7 +3633,7 @@ function _object_spread$X(target) {
     }
     return target;
 }
-function ownKeys$D(object, enumerableOnly) {
+function ownKeys$F(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -3637,11 +3641,11 @@ function ownKeys$D(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$D(target, source) {
+function _object_spread_props$F(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$D(Object(source)).forEach(function(key) {
+        ownKeys$F(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -3653,7 +3657,7 @@ function _sliced_to_array$o(arr, i) {
 function _to_consumable_array$X(arr) {
     return _array_without_holes$X(arr) || _iterable_to_array$X(arr) || _unsupported_iterable_to_array$18(arr) || _non_iterable_spread$X();
 }
-function _ts_generator$1m(thisArg, body) {
+function _ts_generator$1n(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -3785,9 +3789,9 @@ function _defaultBuildRequestData(params, state, limit) {
     return base;
 }
 function _runItemTasks(input) {
-    return _async_to_generator$1m(function() {
+    return _async_to_generator$1n(function() {
         var context, items, keys, pageIndex, iterateItem, itemPerformTasksConfig, maxParallelPerPage, indexed, taskConfig, performResult;
-        return _ts_generator$1m(this, function(_state) {
+        return _ts_generator$1n(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = input.context, items = input.items, keys = input.keys, pageIndex = input.pageIndex, iterateItem = input.iterateItem, itemPerformTasksConfig = input.itemPerformTasksConfig, maxParallelPerPage = input.maxParallelPerPage;
@@ -3799,7 +3803,7 @@ function _runItemTasks(input) {
                             itemIndex: itemIndex
                         };
                     });
-                    taskConfig = _object_spread_props$D(_object_spread$X({
+                    taskConfig = _object_spread_props$F(_object_spread$X({
                         sequential: true,
                         throwError: true
                     }, itemPerformTasksConfig), {
@@ -3832,9 +3836,9 @@ function _runItemTasks(input) {
     })();
 }
 function _processPage(input) {
-    return _async_to_generator$1m(function() {
+    return _async_to_generator$1n(function() {
         var context, raw, pageIndex, responseAdapter, iterateItem, iteratePage, itemPerformTasksConfig, maxParallelPerPage, items, keys, nextCursorDocumentKey, hasMore, itemResults, _tmp, pageResult, _tmp1, output;
-        return _ts_generator$1m(this, function(_state) {
+        return _ts_generator$1n(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = input.context, raw = input.raw, pageIndex = input.pageIndex, responseAdapter = input.responseAdapter, iterateItem = input.iterateItem, iteratePage = input.iteratePage, itemPerformTasksConfig = input.itemPerformTasksConfig, maxParallelPerPage = input.maxParallelPerPage;
@@ -3974,9 +3978,9 @@ function _evaluateLoopExit(input) {
  * });
  * ```
  */ function iterateDbxCliCallModel(config) {
-    return _async_to_generator$1m(function() {
+    return _async_to_generator$1n(function() {
         var context, modelType, call, specifier, params, _config_buildRequestData, buildRequestData, _config_responseAdapter, responseAdapter, limitPerPage, totalItemsLimit, maxPages, iterateItem, iteratePage, itemPerformTasksConfig, maxParallelPerPage, _config_collectItems, collectItems, _config_collectItemResults, collectItemResults, _config_collectPageResults, collectPageResults, allItems, allItemResults, allPageResults, pageIndex, totalItems, cursorDocumentKey, hitLimit, keepGoing, collectItemsForPage, collectItemResultsForPage, collectPageResultsForPage, effectiveLimit, data, raw, pageOutcome, _allItems, _allItemResults, exit, result;
-        return _ts_generator$1m(this, function(_state) {
+        return _ts_generator$1n(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = config.context, modelType = config.modelType, call = config.call, specifier = config.specifier, params = config.params, _config_buildRequestData = config.buildRequestData, buildRequestData = _config_buildRequestData === void 0 ? _defaultBuildRequestData : _config_buildRequestData, _config_responseAdapter = config.responseAdapter, responseAdapter = _config_responseAdapter === void 0 ? _defaultResponseAdapter : _config_responseAdapter, limitPerPage = config.limitPerPage, totalItemsLimit = config.totalItemsLimit, maxPages = config.maxPages, iterateItem = config.iterateItem, iteratePage = config.iteratePage, itemPerformTasksConfig = config.itemPerformTasksConfig, maxParallelPerPage = config.maxParallelPerPage, _config_collectItems = config.collectItems, collectItems = _config_collectItems === void 0 ? true : _config_collectItems, _config_collectItemResults = config.collectItemResults, collectItemResults = _config_collectItemResults === void 0 ? iterateItem != null : _config_collectItemResults, _config_collectPageResults = config.collectPageResults, collectPageResults = _config_collectPageResults === void 0 ? iteratePage != null : _config_collectPageResults;
@@ -4077,7 +4081,7 @@ function _evaluateLoopExit(input) {
     })();
 }
 
-function asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -4088,16 +4092,16 @@ function asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1l(fn) {
+function _async_to_generator$1m(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1m(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -4129,7 +4133,7 @@ function _object_spread$W(target) {
     }
     return target;
 }
-function ownKeys$C(object, enumerableOnly) {
+function ownKeys$E(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -4137,17 +4141,17 @@ function ownKeys$C(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$C(target, source) {
+function _object_spread_props$E(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$C(Object(source)).forEach(function(key) {
+        ownKeys$E(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$1l(thisArg, body) {
+function _ts_generator$1m(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -4263,14 +4267,14 @@ function _ts_generator$1l(thisArg, body) {
             return spec.builder ? spec.builder(yargs) : yargs;
         },
         handler: wrapCommandHandler(function(argv) {
-            return _async_to_generator$1l(function() {
+            return _async_to_generator$1m(function() {
                 var context, data, params, result;
-                return _ts_generator$1l(this, function(_state) {
+                return _ts_generator$1m(this, function(_state) {
                     switch(_state.label){
                         case 0:
                             context = requireCliContext();
                             data = spec.buildParams(argv);
-                            params = _object_spread_props$C(_object_spread$W({
+                            params = _object_spread_props$E(_object_spread$W({
                                 modelType: spec.model,
                                 call: spec.verb
                             }, spec.specifier == null ? {} : {
@@ -4450,7 +4454,7 @@ function AsyncFromSyncIterator$4(s) {
         }
     }, new AsyncFromSyncIterator$4(s);
 }
-function asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -4461,22 +4465,22 @@ function asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1k(fn) {
+function _async_to_generator$1l(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1l(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1k(thisArg, body) {
+function _ts_generator$1l(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -4639,9 +4643,9 @@ function _ts_generator$1k(thisArg, body) {
  * @returns The UTF-8 decoded stdin contents.
  * @throws {CliError} When stdin is a TTY, with `code: 'STDIN_NOT_PIPED'`.
  */ function readAllStdin() {
-    return _async_to_generator$1k(function() {
+    return _async_to_generator$1l(function() {
         var chunks, _iteratorAbruptCompletion, _didIteratorError, _iteratorError, _iterator, _step, _value, chunk, err;
-        return _ts_generator$1k(this, function(_state) {
+        return _ts_generator$1l(this, function(_state) {
             switch(_state.label){
                 case 0:
                     if (process.stdin.isTTY) {
@@ -4745,9 +4749,9 @@ function _ts_generator$1k(thisArg, body) {
  *
  * @returns The tokens parsed from stdin.
  */ function readStdinTokens() {
-    return _async_to_generator$1k(function() {
+    return _async_to_generator$1l(function() {
         var raw;
-        return _ts_generator$1k(this, function(_state) {
+        return _ts_generator$1l(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -4767,7 +4771,7 @@ function _ts_generator$1k(thisArg, body) {
     })();
 }
 
-function asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -4778,16 +4782,16 @@ function asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1j(fn) {
+function _async_to_generator$1k(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1k(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -4825,7 +4829,7 @@ function _object_spread$V(target) {
     }
     return target;
 }
-function ownKeys$B(object, enumerableOnly) {
+function ownKeys$D(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -4833,17 +4837,17 @@ function ownKeys$B(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$B(target, source) {
+function _object_spread_props$D(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$B(Object(source)).forEach(function(key) {
+        ownKeys$D(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$1j(thisArg, body) {
+function _ts_generator$1k(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -4954,9 +4958,9 @@ function _ts_generator$1j(thisArg, body) {
         return withCallModelArgs(yargs);
     },
     handler: wrapCommandHandler(function(argv) {
-        return _async_to_generator$1j(function() {
+        return _async_to_generator$1k(function() {
             var context, data, rawData, _tmp, params, result;
-            return _ts_generator$1j(this, function(_state) {
+            return _ts_generator$1k(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         context = requireCliContext();
@@ -4996,7 +5000,7 @@ function _ts_generator$1j(thisArg, body) {
                                 });
                             }
                         }
-                        params = _object_spread_props$B(_object_spread$V({
+                        params = _object_spread_props$D(_object_spread$V({
                             modelType: argv.model,
                             call: argv.verb
                         }, argv.specifier == null ? {} : {
@@ -5674,7 +5678,7 @@ function _array_with_holes$l(arr) {
 function _array_without_holes$U(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$14(arr);
 }
-function asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -5685,16 +5689,16 @@ function asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1i(fn) {
+function _async_to_generator$1j(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1j(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -5773,7 +5777,7 @@ function _sliced_to_array$l(arr, i) {
 function _to_consumable_array$U(arr) {
     return _array_without_holes$U(arr) || _iterable_to_array$U(arr) || _unsupported_iterable_to_array$14(arr) || _non_iterable_spread$U();
 }
-function _ts_generator$1i(thisArg, body) {
+function _ts_generator$1j(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -5975,9 +5979,9 @@ function _unsupported_iterable_to_array$14(o, minLen) {
  * @returns The resolved source, carrying the opened models view when it is `firestore`.
  * @throws {CliError} `MODEL_IS_SERVER_ONLY` for a server-only model, or the session's own error when `--via firestore` was demanded and the session could not open.
  */ function resolveCliReadSource(input) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var context, via, modelType, result, _tmp;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     context = input.context, via = input.via, modelType = input.modelType;
@@ -6074,9 +6078,9 @@ function _unsupported_iterable_to_array$14(o, minLen) {
  * @param via - The requested via, carried onto the result.
  * @returns The resolved source.
  */ function resolveAutoReadSource(context, via) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var result, _tmp, e, code, message;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -6129,9 +6133,9 @@ function _unsupported_iterable_to_array$14(o, minLen) {
     })();
 }
 function requireModels(context) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var getFirestoreModels;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             getFirestoreModels = context.getFirestoreModels;
             if (getFirestoreModels == null) {
                 throw new CliError({
@@ -6179,9 +6183,9 @@ function requireModels(context) {
  * @returns `{ key, data }`, with `data: null` when the document does not exist.
  * @throws {CliError} When the key does not match the model's path shape.
  */ function getModelOverFirestore(input) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var models, modelType, key, service, data, _ref, e;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     models = input.models, modelType = input.modelType, key = input.key;
@@ -6240,9 +6244,9 @@ function requireModels(context) {
  * @returns `{ results, errors }`, key order preserved within each partition.
  * @throws {CliError} `INVALID_ARGUMENT` when `modelType` is not a registered model.
  */ function getMultipleModelsOverFirestore(input) {
-    return _async_to_generator$1i(function() {
+    return _async_to_generator$1j(function() {
         var models, modelType, keys, service, taskResult;
-        return _ts_generator$1i(this, function(_state) {
+        return _ts_generator$1j(this, function(_state) {
             switch(_state.label){
                 case 0:
                     models = input.models, modelType = input.modelType, keys = input.keys;
@@ -6254,8 +6258,8 @@ function requireModels(context) {
                         4,
                         performAsyncTasks(_to_consumable_array$U(keys), function(key) {
                             var _ref;
-                            return _async_to_generator$1i(function() {
-                                return _ts_generator$1i(this, function(_state) {
+                            return _async_to_generator$1j(function() {
+                                return _ts_generator$1j(this, function(_state) {
                                     switch(_state.label){
                                         case 0:
                                             return [
@@ -6346,7 +6350,7 @@ function requireModels(context) {
     return result;
 }
 
-function asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -6357,22 +6361,22 @@ function asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1h(fn) {
+function _async_to_generator$1i(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1i(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1h(thisArg, body) {
+function _ts_generator$1i(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -6525,9 +6529,9 @@ function _ts_generator$1h(thisArg, body) {
         }));
     },
     handler: wrapCommandHandler(function(argv) {
-        return _async_to_generator$1h(function() {
+        return _async_to_generator$1i(function() {
             var context, _parseGetArgs, modelType, key, resolved, result, _tmp;
-            return _ts_generator$1h(this, function(_state) {
+            return _ts_generator$1i(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         context = requireCliContext();
@@ -6584,7 +6588,7 @@ function _ts_generator$1h(thisArg, body) {
     })
 };
 
-function asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -6595,22 +6599,22 @@ function asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1g(fn) {
+function _async_to_generator$1h(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1h(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1g(thisArg, body) {
+function _ts_generator$1h(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -6746,9 +6750,9 @@ function _ts_generator$1g(thisArg, body) {
         }).epilogue(CLI_READ_VIA_EPILOGUE);
     },
     handler: wrapCommandHandler(function(argv) {
-        return _async_to_generator$1g(function() {
+        return _async_to_generator$1h(function() {
             var context, firstArg, rest, resolvedFirst, resolvedRest, stdinKeys, _parseGetManyArgs, modelType, keys, resolved, result, _tmp;
-            return _ts_generator$1g(this, function(_state) {
+            return _ts_generator$1h(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         context = requireCliContext();
@@ -6823,7 +6827,7 @@ function _ts_generator$1g(thisArg, body) {
     })
 };
 
-function asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -6834,16 +6838,16 @@ function asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1f(fn) {
+function _async_to_generator$1g(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1g(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -6875,7 +6879,7 @@ function _object_spread$T(target) {
     }
     return target;
 }
-function _ts_generator$1f(thisArg, body) {
+function _ts_generator$1g(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -7007,6 +7011,13 @@ function _ts_generator$1f(thisArg, body) {
  */ function loadCliConfig(input) {
     return readJsonFile(input.configFilePath);
 }
+/**
+ * File mode `config.json` is written with.
+ *
+ * Owner-only, matching `.tokens.json`: the config holds `clientSecret` for a confidential client,
+ * which is every bit as sensitive as a cached token. It previously inherited the umask (0644 in the
+ * usual case), leaving a real credential world-readable on a shared machine.
+ */ var CLI_CONFIG_FILE_MODE = 384;
 /**
  * Writes the full {@link CliConfig} to disk, creating the parent directory if needed.
  *
@@ -7019,7 +7030,8 @@ function _ts_generator$1f(thisArg, body) {
     return writeJsonFile({
         filePath: input.configFilePath,
         dirPath: input.configDir,
-        data: input.config
+        data: input.config,
+        mode: CLI_CONFIG_FILE_MODE
     });
 }
 /**
@@ -7034,9 +7046,9 @@ function _ts_generator$1f(thisArg, body) {
  * @param input.updates - The partial {@link CliConfig} to merge on top of the existing on-disk config.
  * @returns The merged {@link CliConfig} that was just written.
  */ function mergeCliConfig(input) {
-    return _async_to_generator$1f(function() {
+    return _async_to_generator$1g(function() {
         var _ref, _input_updates_activeEnv, existing, merged;
-        return _ts_generator$1f(this, function(_state) {
+        return _ts_generator$1g(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -7161,7 +7173,7 @@ function mergeOutputCommandsConfig(existing, updates) {
     return result;
 }
 
-function asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -7172,22 +7184,22 @@ function asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1e(fn) {
+function _async_to_generator$1f(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1f(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1e(thisArg, body) {
+function _ts_generator$1f(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -7314,9 +7326,9 @@ function _ts_generator$1e(thisArg, body) {
  * @param input - Resolution inputs.
  * @returns The resolved env triple.
  */ function resolveCliEnv(input) {
-    return _async_to_generator$1e(function() {
+    return _async_to_generator$1f(function() {
         var _ref, _input_envVarName, _ref1, _input_flagEnv, _config_envs, _findCliEnvDefault, config, envVarName, envName, stored, defaultEnv, merged, env;
-        return _ts_generator$1e(this, function(_state) {
+        return _ts_generator$1f(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -7355,9 +7367,9 @@ function _ts_generator$1e(thisArg, body) {
     })();
 }
 function resolveCliEnvOrThrow(input) {
-    return _async_to_generator$1e(function() {
+    return _async_to_generator$1f(function() {
         var _ref, config, envName, env;
-        return _ts_generator$1e(this, function(_state) {
+        return _ts_generator$1f(this, function(_state) {
             switch(_state.label){
                 case 0:
                     return [
@@ -7493,7 +7505,7 @@ function resolveCliEnvOrThrow(input) {
     }).hasExpired();
 }
 
-function asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -7504,16 +7516,16 @@ function asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$1d(fn) {
+function _async_to_generator$1e(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$1e(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -7551,7 +7563,7 @@ function _object_spread$S(target) {
     }
     return target;
 }
-function ownKeys$A(object, enumerableOnly) {
+function ownKeys$C(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -7559,17 +7571,17 @@ function ownKeys$A(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$A(target, source) {
+function _object_spread_props$C(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$A(Object(source)).forEach(function(key) {
+        ownKeys$C(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _ts_generator$1d(thisArg, body) {
+function _ts_generator$1e(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -7736,9 +7748,9 @@ var cliOidcFetch = function cliOidcFetch(input, init) {
     return result;
 }
 function withCliErrors(fn) {
-    return _async_to_generator$1d(function() {
+    return _async_to_generator$1e(function() {
         var e;
-        return _ts_generator$1d(this, function(_state) {
+        return _ts_generator$1e(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -7774,7 +7786,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcDiscoveryMetadata}. Throws a {@link CliError} (`OIDC_DISCOVERY_FAILED`) when every candidate fails.
  */ function discoverOidcMetadata(input) {
     return withCliErrors(function() {
-        return discoverOidcMetadata$1(_object_spread_props$A(_object_spread$S({}, input), {
+        return discoverOidcMetadata$1(_object_spread_props$C(_object_spread$S({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -7786,7 +7798,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcTokenResponse} with access/refresh tokens.
  */ function exchangeAuthorizationCode(input) {
     return withCliErrors(function() {
-        return exchangeAuthorizationCode$1(_object_spread_props$A(_object_spread$S({}, input), {
+        return exchangeAuthorizationCode$1(_object_spread_props$C(_object_spread$S({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -7798,7 +7810,7 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcTokenResponse} with the refreshed access token.
  */ function refreshAccessToken(input) {
     return withCliErrors(function() {
-        return refreshAccessToken$1(_object_spread_props$A(_object_spread$S({}, input), {
+        return refreshAccessToken$1(_object_spread_props$C(_object_spread$S({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -7810,7 +7822,7 @@ function withCliErrors(fn) {
  * @returns Resolves when the server returns a non-error status. Throws a {@link CliError} (`TOKEN_REVOCATION_FAILED`) on error.
  */ function revokeToken(input) {
     return withCliErrors(function() {
-        return revokeToken$1(_object_spread_props$A(_object_spread$S({}, input), {
+        return revokeToken$1(_object_spread_props$C(_object_spread$S({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -7822,7 +7834,7 @@ function withCliErrors(fn) {
  * @returns The parsed userinfo claims. Throws a {@link CliError} (`USERINFO_FAILED`) on a non-OK response.
  */ function fetchUserInfo(input) {
     return withCliErrors(function() {
-        return fetchUserInfo$1(_object_spread_props$A(_object_spread$S({}, input), {
+        return fetchUserInfo$1(_object_spread_props$C(_object_spread$S({}, input), {
             fetch: cliOidcFetch
         }));
     });
@@ -7834,12 +7846,270 @@ function withCliErrors(fn) {
  * @returns The parsed {@link OidcSessionInfo}. Throws a {@link CliError} (`SESSION_INFO_FAILED`) on a non-OK response.
  */ function fetchSessionInfo(input) {
     return withCliErrors(function() {
-        return fetchSessionInfo$1(_object_spread_props$A(_object_spread$S({}, input), {
+        return fetchSessionInfo$1(_object_spread_props$C(_object_spread$S({}, input), {
             fetch: cliOidcFetch
         }));
     });
 }
 
+function asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) resolve(value);
+    else Promise.resolve(value).then(_next, _throw);
+}
+function _async_to_generator$1d(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$1d(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$1d(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+/**
+ * Path, relative to the OIDC issuer, of the one-time claim redemption endpoint.
+ *
+ * Mirrors `FIREBASE_SERVER_CLI_TOKEN_CLAIM_PATH` on the server. Duplicated rather than imported so
+ * `@dereekb/dbx-cli` keeps taking no dependency on `@dereekb/firebase-server`.
+ */ var CLI_TOKEN_CLAIM_ENDPOINT_PATH_PART = '/cli-token/claim';
+/**
+ * Builds the claim endpoint URL from an OIDC issuer.
+ *
+ * @param oidcIssuer - The env's OIDC issuer URL.
+ * @returns The claim endpoint URL.
+ * @__NO_SIDE_EFFECTS__
+ */ function buildCliHandoffClaimEndpoint(oidcIssuer) {
+    return "".concat(oidcIssuer.replace(/\/+$/, '')).concat(CLI_TOKEN_CLAIM_ENDPOINT_PATH_PART);
+}
+/**
+ * Redeems a one-time claim code for the credential bundle it wraps.
+ *
+ * The request carries no credential of its own — the code IS the credential, which is the entire
+ * point: the machine running this has nothing yet. The server answers every failure (unknown code,
+ * expired code, already-redeemed code) with the same generic error, so this reports one message too
+ * rather than inventing a distinction the server deliberately withholds.
+ *
+ * @param input - The issuer and the claim code.
+ * @returns The parsed {@link CliHandoffBundle}.
+ * @throws {CliError} `AUTH_HANDOFF_FAILED` when the code is rejected or the response is unusable.
+ */ function claimCliHandoff(input) {
+    return _async_to_generator$1d(function() {
+        var endpoint, response, e, bundle;
+        return _ts_generator$1d(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    endpoint = buildCliHandoffClaimEndpoint(input.oidcIssuer);
+                    _state.label = 1;
+                case 1:
+                    _state.trys.push([
+                        1,
+                        3,
+                        ,
+                        4
+                    ]);
+                    return [
+                        4,
+                        tracedFetch(undefined, endpoint, {
+                            method: 'POST',
+                            headers: {
+                                'Content-Type': 'application/json'
+                            },
+                            body: JSON.stringify({
+                                code: input.code
+                            })
+                        })
+                    ];
+                case 2:
+                    response = _state.sent();
+                    return [
+                        3,
+                        4
+                    ];
+                case 3:
+                    e = _state.sent();
+                    throw new CliError({
+                        message: "Could not reach the CLI handoff endpoint at ".concat(endpoint, ": ").concat(e.message),
+                        code: 'AUTH_HANDOFF_FAILED',
+                        suggestion: 'Verify the env oidcIssuer URL is reachable.'
+                    });
+                case 4:
+                    if (!response.ok) {
+                        throw new CliError({
+                            message: 'The claim code was rejected. Claim codes are single-use and expire within minutes.',
+                            code: 'AUTH_HANDOFF_FAILED',
+                            suggestion: 'Mint a fresh one with the `cli-token` MCP tool and redeem it right away.'
+                        });
+                    }
+                    return [
+                        4,
+                        readJsonSafely(response)
+                    ];
+                case 5:
+                    bundle = _state.sent();
+                    if (!(bundle === null || bundle === void 0 ? void 0 : bundle.refreshToken) || !bundle.clientId || !bundle.issuer) {
+                        throw new CliError({
+                            message: 'The CLI handoff response did not carry a usable credential.',
+                            code: 'AUTH_HANDOFF_FAILED'
+                        });
+                    }
+                    return [
+                        2,
+                        bundle
+                    ];
+            }
+        });
+    })();
+}
+function readJsonSafely(response) {
+    return _async_to_generator$1d(function() {
+        var result;
+        return _ts_generator$1d(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        2,
+                        ,
+                        3
+                    ]);
+                    return [
+                        4,
+                        response.json()
+                    ];
+                case 1:
+                    result = _state.sent();
+                    return [
+                        3,
+                        3
+                    ];
+                case 2:
+                    _state.sent();
+                    result = undefined;
+                    return [
+                        3,
+                        3
+                    ];
+                case 3:
+                    return [
+                        2,
+                        result
+                    ];
+            }
+        });
+    })();
+}
+
 function _define_property$S(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -7866,7 +8136,7 @@ function _object_spread$R(target) {
     }
     return target;
 }
-function ownKeys$z(object, enumerableOnly) {
+function ownKeys$B(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -7874,11 +8144,11 @@ function ownKeys$z(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$z(target, source) {
+function _object_spread_props$B(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$z(Object(source)).forEach(function(key) {
+        ownKeys$B(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -7899,7 +8169,7 @@ function _object_spread_props$z(target, source) {
  */ function buildAuthorizationUrl(input) {
     try {
         var _input_scopes;
-        return buildAuthorizationUrl$1(_object_spread_props$z(_object_spread$R({}, input), {
+        return buildAuthorizationUrl$1(_object_spread_props$B(_object_spread$R({}, input), {
             scopes: (_input_scopes = input.scopes) !== null && _input_scopes !== void 0 ? _input_scopes : DEFAULT_CLI_OIDC_SCOPES
         }));
     } catch (e) {
@@ -8562,7 +8832,7 @@ function _object_spread$Q(target) {
     }
     return target;
 }
-function ownKeys$y(object, enumerableOnly) {
+function ownKeys$A(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -8570,11 +8840,11 @@ function ownKeys$y(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$y(target, source) {
+function _object_spread_props$A(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$y(Object(source)).forEach(function(key) {
+        ownKeys$A(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -8857,7 +9127,11 @@ function resolveAuthSetupPrompt(input) {
     })();
 }
 /**
- * Renders a human-readable session-lifetime summary, e.g. `valid until 2027-06-01T00:00:00.000Z (~365 days), rotation: disabled`.
+ * Renders a human-readable session-lifetime summary, e.g. `valid until 2027-06-01T00:00:00.000Z (~365 days), rotation: enabled`.
+ *
+ * The unit scales with what is left. A `--service-token` session is measured in months and a handoff
+ * credential (`auth handoff`) in minutes — reporting the latter as "~0 days" hid exactly the fact
+ * the caller most needs to see.
  *
  * @param input - The session lifetime fields.
  * @param input.sessionExpiresAt - Grant expiry as unix epoch seconds.
@@ -8869,19 +9143,129 @@ function resolveAuthSetupPrompt(input) {
     if (input.sessionExpiresAt != null) {
         var _input_nowMs;
         var expiresMs = input.sessionExpiresAt * MS_IN_SECOND;
-        var days = Math.max(0, Math.round((expiresMs - ((_input_nowMs = input.nowMs) !== null && _input_nowMs !== void 0 ? _input_nowMs : Date.now())) / MS_IN_SECOND / 86400));
+        var remaining = describeRemainingDuration(expiresMs - ((_input_nowMs = input.nowMs) !== null && _input_nowMs !== void 0 ? _input_nowMs : Date.now()));
         var rotation = input.rotationDisabled ? 'disabled' : 'enabled';
-        result = "valid until ".concat(new Date(expiresMs).toISOString(), " (~").concat(days, " days), rotation: ").concat(rotation);
+        result = "valid until ".concat(new Date(expiresMs).toISOString(), " (").concat(remaining, "), rotation: ").concat(rotation);
+    }
+    return result;
+}
+/**
+ * Renders a remaining-duration phrase at the coarsest unit that still reads as a number: days, then
+ * hours, then minutes, with `expired` for anything already past.
+ *
+ * @param remainingMs - Milliseconds remaining (may be negative).
+ * @returns The phrase, e.g. `~365 days`, `~2 hours`, `~48 min`, or `expired`.
+ * @__NO_SIDE_EFFECTS__
+ */ function describeRemainingDuration(remainingMs) {
+    var seconds = Math.floor(remainingMs / MS_IN_SECOND);
+    var result;
+    if (seconds <= 0) {
+        result = 'expired';
+    } else if (seconds >= 86400) {
+        result = "~".concat(Math.round(seconds / 86400), " days");
+    } else if (seconds >= 3600) {
+        result = "~".concat(Math.round(seconds / 3600), " hours");
+    } else {
+        result = "~".concat(Math.max(1, Math.round(seconds / 60)), " min");
+    }
+    return result;
+}
+/**
+ * Env name a handoff falls back to when nothing else names one — no `--env`, no `envName` from the
+ * minting deployment, no active env, and no single built-in default to borrow a name from.
+ *
+ * Only reachable on an unconfigured machine redeeming against a server that declares no
+ * `CliTokenApiModuleConfig.envName`. A neutral name is better than refusing: the credential is
+ * already spent by this point, so failing here would burn a one-time code.
+ */ var DEFAULT_HANDOFF_ENV_NAME = 'default';
+/**
+ * Whether two OIDC issuer URLs name the same provider, ignoring the differences that carry no
+ * meaning — a trailing slash, case in the scheme/host, and a default port for the scheme.
+ *
+ * Used to decide whether redeeming a claim would REPOINT an existing env at a different deployment.
+ * Anything unparseable falls back to a trimmed string compare rather than reporting a match, so a
+ * malformed value fails closed into the guard.
+ *
+ * @param a - The env's currently configured issuer.
+ * @param b - The issuer the claimed bundle came from.
+ * @returns True when both resolve to the same origin and path.
+ */ function cliIssuersMatch(a, b) {
+    var result;
+    try {
+        var urlA = new URL(a);
+        var urlB = new URL(b);
+        var normalize = function normalize(url) {
+            return "".concat(url.protocol, "//").concat(url.host).concat(url.pathname.replace(/\/+$/, '')).toLowerCase();
+        };
+        result = normalize(urlA) === normalize(urlB);
+    } catch (unused) {
+        result = a.trim().replace(/\/+$/, '') === b.trim().replace(/\/+$/, '');
     }
     return result;
 }
+/**
+ * Resolves the handoff claim code from the positional, stdin (`-`), or the env var — in that order.
+ *
+ * The env-var and stdin paths exist so a live credential pointer never has to appear in argv, which
+ * is world-readable in the process list on a shared machine.
+ *
+ * @param input - The parsed positional and the env var name to fall back to.
+ * @returns The trimmed claim code.
+ * @throws {CliError} `AUTH_HANDOFF_NO_CODE` when no code was supplied by any route.
+ */ function resolveHandoffCode(input) {
+    return _async_to_generator$1b(function() {
+        var argvCode, result, _process_env_input_envVarName;
+        return _ts_generator$1b(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    argvCode = input.argvCode;
+                    if (!isStdinPositionalSentinel(argvCode)) return [
+                        3,
+                        2
+                    ];
+                    return [
+                        4,
+                        readAllStdin()
+                    ];
+                case 1:
+                    result = _state.sent().trim();
+                    return [
+                        3,
+                        3
+                    ];
+                case 2:
+                    if (typeof argvCode === 'string' && argvCode.length > 0) {
+                        result = argvCode.trim();
+                    } else {
+                        result = ((_process_env_input_envVarName = process.env[input.envVarName]) !== null && _process_env_input_envVarName !== void 0 ? _process_env_input_envVarName : '').trim();
+                    }
+                    _state.label = 3;
+                case 3:
+                    if (result.length === 0) {
+                        throw new CliError({
+                            message: "No claim code supplied. Pass it as an argument, pipe it in with '-', or set ".concat(input.envVarName, "."),
+                            code: 'AUTH_HANDOFF_NO_CODE'
+                        });
+                    }
+                    return [
+                        2,
+                        result
+                    ];
+            }
+        });
+    })();
+}
 /**
  * Factory for the built-in `auth` command tree.
  *
- * Wires `setup`, `login`, `logout`, `status`, `show`, and `check` subcommands that drive the OIDC
- * PKCE flow against the active env, persist tokens via the per-CLI token cache, and print a
+ * Wires `setup`, `login`, `handoff`, `logout`, `status`, `show`, and `check` subcommands that drive
+ * the OIDC PKCE flow against the active env, persist tokens via the per-CLI token cache, and print a
  * structured envelope.
  *
+ * `handoff` is the non-interactive counterpart to `login`: it redeems a one-time claim code minted by
+ * an already-authenticated MCP session, so an agent can bring a CLI up on a bare machine with no
+ * browser and no prior `auth setup`.
+ *
  * @param input - Factory configuration.
  * @param input.cliName - The CLI's binary name. Used for the per-user config dir, env-var prefix, and error messages.
  * @param input.envVarName - Override for the env-name env var. Defaults to `<CLINAME>_ENV` (e.g. `DEMO_CLI_ENV`).
@@ -8891,6 +9275,12 @@ function resolveAuthSetupPrompt(input) {
  */ function createAuthCommand(input) {
     var cliName = input.cliName;
     var envVarName = input.envVarName;
+    var envVarPrefix = cliName.replaceAll('-', '_').toUpperCase();
+    var defaultEnvVarName = "".concat(envVarPrefix, "_ENV");
+    /**
+     * Env var a handoff claim code may be passed through, so a code never has to appear in argv (and
+     * therefore in the process list) on a shared machine.
+     */ var handoffEnvVarName = "".concat(envVarPrefix, "_CLI_HANDOFF");
     var paths = buildCliPaths({
         cliName: cliName
     });
@@ -8955,7 +9345,7 @@ function resolveAuthSetupPrompt(input) {
                             ];
                         case 1:
                             config = (_ref = _state.sent()) !== null && _ref !== void 0 ? _ref : {};
-                            envName = (_ref1 = (_argv_env = argv.env) !== null && _argv_env !== void 0 ? _argv_env : process.env[envVarName !== null && envVarName !== void 0 ? envVarName : "".concat(cliName.replaceAll('-', '_').toUpperCase(), "_ENV")]) !== null && _ref1 !== void 0 ? _ref1 : config.activeEnv;
+                            envName = (_ref1 = (_argv_env = argv.env) !== null && _argv_env !== void 0 ? _argv_env : process.env[envVarName !== null && envVarName !== void 0 ? envVarName : defaultEnvVarName]) !== null && _ref1 !== void 0 ? _ref1 : config.activeEnv;
                             if (!envName) {
                                 throw new CliError({
                                     message: 'Provide --env <name> on first setup.',
@@ -9577,6 +9967,181 @@ function resolveAuthSetupPrompt(input) {
             })();
         })
     };
+    // MARK: handoff
+    var handoffCommand = {
+        command: 'handoff [code]',
+        describe: 'Redeem a one-time CLI handoff claim code (from an MCP session) and log in without a browser',
+        builder: function builder(yargs) {
+            return withEnv(yargs).positional('code', {
+                type: 'string',
+                describe: "The claim code. Pass '-' to read it from stdin, or set ".concat(handoffEnvVarName, ".")
+            }).option('oidc-issuer', {
+                type: 'string',
+                describe: "OIDC issuer to redeem against. Defaults to the env's configured (or built-in default) issuer — required only when neither exists."
+            }).option('set-active', {
+                type: 'boolean',
+                default: true,
+                describe: 'Set the env as the active env after redeeming. Pass --no-set-active to provision it without switching.'
+            }).option('force', {
+                type: 'boolean',
+                default: false,
+                describe: 'Allow the redeem to repoint an existing env at a different OIDC issuer'
+            });
+        },
+        handler: wrapCommandHandler(function(argv) {
+            return _async_to_generator$1b(function() {
+                var _ref, _argv_env, _ref1, _argv_oidcIssuer, _ref2, _ref3, _ref4, _ref5, _bundle_apiBaseUrl, _ref6, _config_envs, _findCliEnvDefault, _soleDefaultEnv_env, _config_envs1, _findCliEnvDefault1, config, requestedEnvName, issuerLookupEnvName, issuerLookupEnv, soleDefaultEnv, oidcIssuer, code, bundle, envName, existing, nextEnv, merged, sessionExpiresAt, entry, remainingMinutes;
+                return _ts_generator$1b(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            return [
+                                4,
+                                loadCliConfig({
+                                    configFilePath: paths.configFilePath
+                                })
+                            ];
+                        case 1:
+                            config = (_ref = _state.sent()) !== null && _ref !== void 0 ? _ref : {};
+                            // The env NAME is resolved in TWO phases, because the authoritative name arrives WITH the
+                            // credential. Only an explicit `--env` (or the env var) can be known before the claim; the
+                            // minting deployment's own `envName` comes back in the bundle. A bare machine — the case this
+                            // command exists for — has no active env to fall back on, so demanding the name up front is
+                            // what used to make the rendered one-line handoff command fail with NO_ACTIVE_ENV.
+                            requestedEnvName = (_argv_env = argv.env) !== null && _argv_env !== void 0 ? _argv_env : process.env[envVarName !== null && envVarName !== void 0 ? envVarName : defaultEnvVarName];
+                            // The ISSUER, by contrast, is needed before the claim — it is where the code is redeemed. Look
+                            // it up under whichever name we already have, falling back to the sole built-in default when
+                            // the CLI ships exactly one (an unambiguous target on an unconfigured machine).
+                            issuerLookupEnvName = requestedEnvName !== null && requestedEnvName !== void 0 ? requestedEnvName : config.activeEnv;
+                            issuerLookupEnv = issuerLookupEnvName ? mergeCliEnvWithDefault({
+                                env: (_config_envs = config.envs) === null || _config_envs === void 0 ? void 0 : _config_envs[issuerLookupEnvName],
+                                defaultEnv: (_findCliEnvDefault = findCliEnvDefault({
+                                    name: issuerLookupEnvName,
+                                    defaults: defaultEnvs
+                                })) === null || _findCliEnvDefault === void 0 ? void 0 : _findCliEnvDefault.env
+                            }) : undefined;
+                            soleDefaultEnv = (defaultEnvs === null || defaultEnvs === void 0 ? void 0 : defaultEnvs.length) === 1 ? defaultEnvs[0] : undefined;
+                            oidcIssuer = (_ref1 = (_argv_oidcIssuer = argv.oidcIssuer) !== null && _argv_oidcIssuer !== void 0 ? _argv_oidcIssuer : issuerLookupEnv === null || issuerLookupEnv === void 0 ? void 0 : issuerLookupEnv.oidcIssuer) !== null && _ref1 !== void 0 ? _ref1 : soleDefaultEnv === null || soleDefaultEnv === void 0 ? void 0 : (_soleDefaultEnv_env = soleDefaultEnv.env) === null || _soleDefaultEnv_env === void 0 ? void 0 : _soleDefaultEnv_env.oidcIssuer;
+                            if (!oidcIssuer) {
+                                throw new CliError({
+                                    message: "No OIDC issuer known".concat(issuerLookupEnvName ? ' for env "'.concat(issuerLookupEnvName, '"') : '', ". Pass --oidc-issuer <url> (or --env <name> for a configured env)."),
+                                    code: 'AUTH_HANDOFF_NO_ISSUER'
+                                });
+                            }
+                            return [
+                                4,
+                                resolveHandoffCode({
+                                    argvCode: argv.code,
+                                    envVarName: handoffEnvVarName
+                                })
+                            ];
+                        case 2:
+                            code = _state.sent();
+                            return [
+                                4,
+                                claimCliHandoff({
+                                    oidcIssuer: oidcIssuer,
+                                    code: code
+                                })
+                            ];
+                        case 3:
+                            bundle = _state.sent();
+                            // Phase two. An explicit name always wins; otherwise the minting deployment names itself, and
+                            // only then do we fall back to local state.
+                            envName = (_ref2 = (_ref3 = (_ref4 = requestedEnvName !== null && requestedEnvName !== void 0 ? requestedEnvName : bundle.envName) !== null && _ref4 !== void 0 ? _ref4 : config.activeEnv) !== null && _ref3 !== void 0 ? _ref3 : soleDefaultEnv === null || soleDefaultEnv === void 0 ? void 0 : soleDefaultEnv.names[0]) !== null && _ref2 !== void 0 ? _ref2 : DEFAULT_HANDOFF_ENV_NAME;
+                            existing = mergeCliEnvWithDefault({
+                                env: (_config_envs1 = config.envs) === null || _config_envs1 === void 0 ? void 0 : _config_envs1[envName],
+                                defaultEnv: (_findCliEnvDefault1 = findCliEnvDefault({
+                                    name: envName,
+                                    defaults: defaultEnvs
+                                })) === null || _findCliEnvDefault1 === void 0 ? void 0 : _findCliEnvDefault1.env
+                            });
+                            // A bundle rewrites the env's issuer/apiBaseUrl/clientId wholesale, so redeeming a code from
+                            // deployment B into an env named for deployment A would leave the NAME pointing somewhere else
+                            // entirely — a far quieter failure than a bad credential. Refuse unless asked explicitly.
+                            if ((existing === null || existing === void 0 ? void 0 : existing.oidcIssuer) && bundle.issuer && !cliIssuersMatch(existing.oidcIssuer, bundle.issuer) && !argv.force) {
+                                throw new CliError({
+                                    message: 'Env "'.concat(envName, '" points at ').concat(existing.oidcIssuer, ", but this claim was minted by ").concat(bundle.issuer, "."),
+                                    code: 'AUTH_HANDOFF_ISSUER_MISMATCH',
+                                    suggestion: 'Redeem into its own env with --env <name>, or pass --force to repoint "'.concat(envName, '".')
+                                });
+                            }
+                            // The bundle carries everything a machine with no prior `auth setup` needs, so the env is
+                            // created/updated from it rather than requiring a separate setup pass.
+                            nextEnv = _object_spread$Q({
+                                apiBaseUrl: (_ref5 = (_bundle_apiBaseUrl = bundle.apiBaseUrl) !== null && _bundle_apiBaseUrl !== void 0 ? _bundle_apiBaseUrl : existing === null || existing === void 0 ? void 0 : existing.apiBaseUrl) !== null && _ref5 !== void 0 ? _ref5 : '',
+                                oidcIssuer: bundle.issuer || oidcIssuer,
+                                clientId: bundle.clientId,
+                                redirectUri: (_ref6 = existing === null || existing === void 0 ? void 0 : existing.redirectUri) !== null && _ref6 !== void 0 ? _ref6 : DEFAULT_CLI_REDIRECT_URI,
+                                scopes: bundle.scope
+                            }, (existing === null || existing === void 0 ? void 0 : existing.appClientUrl) ? {
+                                appClientUrl: existing.appClientUrl
+                            } : {}, (existing === null || existing === void 0 ? void 0 : existing.tokenEndpointAuthMethod) ? {
+                                tokenEndpointAuthMethod: existing.tokenEndpointAuthMethod
+                            } : {}, (existing === null || existing === void 0 ? void 0 : existing.firebase) ? {
+                                firebase: existing.firebase
+                            } : {});
+                            if (!nextEnv.apiBaseUrl) {
+                                throw new CliError({
+                                    message: 'The handoff bundle carried no apiBaseUrl and env "'.concat(envName, '" has none configured.'),
+                                    code: 'AUTH_HANDOFF_NO_API_BASE_URL',
+                                    suggestion: "Run: ".concat(cliName, " auth setup --env ").concat(envName, " --api-base-url <url>")
+                                });
+                            }
+                            return [
+                                4,
+                                mergeCliConfig({
+                                    configFilePath: paths.configFilePath,
+                                    configDir: paths.configDir,
+                                    updates: _object_spread$Q({
+                                        envs: _define_property$R({}, envName, nextEnv)
+                                    }, argv.setActive ? {
+                                        activeEnv: envName
+                                    } : {})
+                                })
+                            ];
+                        case 4:
+                            merged = _state.sent();
+                            sessionExpiresAt = Math.floor(new Date(bundle.expiresAt).getTime() / MS_IN_SECOND);
+                            entry = {
+                                // No access token is handed over — only the refresh token. `expiresAt: 0` marks it expired so
+                                // the FIRST non-auth command refreshes, which is also the `readEnvTokenEntry` convention.
+                                accessToken: '',
+                                refreshToken: bundle.refreshToken,
+                                scope: bundle.scope,
+                                expiresAt: 0,
+                                sessionExpiresAt: sessionExpiresAt
+                            };
+                            // PERSISTED, deliberately not `fromEnv`: the CLI client is a public PKCE client, so the server
+                            // rotates the refresh token on every exchange and a rotation that is not written back would
+                            // trip oidc-provider's reuse detection and kill the whole grant.
+                            return [
+                                4,
+                                tokens.set(envName, entry)
+                            ];
+                        case 5:
+                            _state.sent();
+                            remainingMinutes = Math.max(0, Math.round((sessionExpiresAt * MS_IN_SECOND - Date.now()) / MS_IN_SECOND / 60));
+                            process.stderr.write("Handoff credential accepted for ".concat(bundle.uid, ". SHORT-LIVED: expires ").concat(bundle.expiresAt, " (~").concat(remainingMinutes, " min). Run `").concat(cliName, " auth login` for a durable session.\n"));
+                            outputResult({
+                                handoff: true,
+                                env: envName,
+                                activeEnv: merged.activeEnv,
+                                uid: bundle.uid,
+                                clientId: bundle.clientId,
+                                scope: bundle.scope,
+                                refreshToken: maskSecret(bundle.refreshToken),
+                                expiresAt: bundle.expiresAt,
+                                sessionExpiresAt: sessionExpiresAt,
+                                config: maskEnv(nextEnv)
+                            });
+                            return [
+                                2
+                            ];
+                    }
+                });
+            })();
+        })
+    };
     // MARK: status
     var statusCommand = {
         command: 'status',
@@ -9811,7 +10376,7 @@ function resolveAuthSetupPrompt(input) {
                             expiresAt = Date.now() + ((_refreshed_expires_in = refreshed.expires_in) !== null && _refreshed_expires_in !== void 0 ? _refreshed_expires_in : 0) * 1000;
                             return [
                                 4,
-                                tokens.set(envName, _object_spread_props$y(_object_spread$Q({}, entry), {
+                                tokens.set(envName, _object_spread_props$A(_object_spread$Q({}, entry), {
                                     accessToken: refreshed.access_token,
                                     refreshToken: (_refreshed_refresh_token = refreshed.refresh_token) !== null && _refreshed_refresh_token !== void 0 ? _refreshed_refresh_token : entry.refreshToken,
                                     tokenType: (_refreshed_token_type = refreshed.token_type) !== null && _refreshed_token_type !== void 0 ? _refreshed_token_type : entry.tokenType,
@@ -9838,7 +10403,7 @@ function resolveAuthSetupPrompt(input) {
         command: 'auth',
         describe: 'Manage OIDC authentication for the active env',
         builder: function builder(yargs) {
-            return yargs.command(setupCommand).command(loginCommand).command(logoutCommand).command(statusCommand).command(showCommand).command(checkCommand).demandCommand(1, 'Specify an auth subcommand.');
+            return yargs.command(setupCommand).command(loginCommand).command(handoffCommand).command(logoutCommand).command(statusCommand).command(showCommand).command(checkCommand).demandCommand(1, 'Specify an auth subcommand.');
         },
         handler: noop
     };
@@ -10690,7 +11255,7 @@ function _object_spread$P(target) {
     }
     return target;
 }
-function ownKeys$x(object, enumerableOnly) {
+function ownKeys$z(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -10698,11 +11263,11 @@ function ownKeys$x(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$x(target, source) {
+function _object_spread_props$z(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$x(Object(source)).forEach(function(key) {
+        ownKeys$z(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -11041,7 +11606,7 @@ function _unsupported_iterable_to_array$11(o, minLen) {
                             ];
                         case 1:
                             bytes = _state.sent();
-                            entry = _object_spread$P(_object_spread_props$x(_object_spread$P({
+                            entry = _object_spread$P(_object_spread_props$z(_object_spread$P({
                                 dataset: dataset,
                                 datasetVersion: datasetVersion,
                                 env: env,
@@ -11433,7 +11998,7 @@ function _object_spread$O(target) {
     }
     return target;
 }
-function ownKeys$w(object, enumerableOnly) {
+function ownKeys$y(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -11441,11 +12006,11 @@ function ownKeys$w(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$w(target, source) {
+function _object_spread_props$y(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$w(Object(source)).forEach(function(key) {
+        ownKeys$y(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -11728,7 +12293,7 @@ function _ts_generator$19(thisArg, body) {
                             entries = _state.sent();
                             if (argv.json) {
                                 outputResult(entries.map(function(entry) {
-                                    return _object_spread_props$w(_object_spread$O({}, entry), {
+                                    return _object_spread_props$y(_object_spread$O({}, entry), {
                                         ageMs: entryAgeMs(entry)
                                     });
                                 }));
@@ -11786,7 +12351,7 @@ function _ts_generator$19(thisArg, body) {
                                     suggestion: "Run `".concat(input.cliName, " ").concat(commandName, " list` to see what has been recorded.")
                                 });
                             }
-                            meta = _object_spread_props$w(_object_spread$O({}, entry), {
+                            meta = _object_spread_props$y(_object_spread$O({}, entry), {
                                 ageMs: entryAgeMs(entry),
                                 otherMatches: entries.length - 1
                             });
@@ -11805,7 +12370,7 @@ function _ts_generator$19(thisArg, body) {
                             ];
                         case 2:
                             hit = _state.sent();
-                            outputResult(_object_spread_props$w(_object_spread$O({}, meta), {
+                            outputResult(_object_spread_props$y(_object_spread$O({}, meta), {
                                 data: hit === null || hit === void 0 ? void 0 : hit.data
                             }));
                             return [
@@ -12004,7 +12569,7 @@ function _object_spread$N(target) {
     }
     return target;
 }
-function ownKeys$v(object, enumerableOnly) {
+function ownKeys$x(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -12012,11 +12577,11 @@ function ownKeys$v(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$v(target, source) {
+function _object_spread_props$x(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$v(Object(source)).forEach(function(key) {
+        ownKeys$x(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -12116,7 +12681,7 @@ function _unsupported_iterable_to_array$10(o, minLen) {
     } else if (noneResolvable) {
         reason = 'framework-not-resolvable';
     }
-    return _object_spread_props$v(_object_spread$N(_object_spread_props$v(_object_spread$N({
+    return _object_spread_props$x(_object_spread$N(_object_spread_props$x(_object_spread$N({
         ok: (drift.length === 0 || noneResolvable) && !manifestGeneratorDrift
     }, reason == null ? {} : {
         reason: reason
@@ -12172,7 +12737,7 @@ function _unsupported_iterable_to_array$10(o, minLen) {
     if (packageJsonPath != null) {
         try {
             var contents = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
-            result = _object_spread_props$v(_object_spread$N({
+            result = _object_spread_props$x(_object_spread$N({
                 path: packageJsonPath
             }, typeof contents.name === 'string' ? {
                 name: contents.name
@@ -13198,7 +13763,7 @@ function _object_spread$K(target) {
     }
     return target;
 }
-function ownKeys$u(object, enumerableOnly) {
+function ownKeys$w(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -13206,11 +13771,11 @@ function ownKeys$u(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$u(target, source) {
+function _object_spread_props$w(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$u(Object(source)).forEach(function(key) {
+        ownKeys$w(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -13255,21 +13820,21 @@ function _object_spread_props$u(target, source) {
         var reason = list === 'denied' ? 'list-denied' : 'list-unmatched';
         result = {
             mode: 'unavailable',
-            rules: _object_spread_props$u(_object_spread$K({}, base), {
+            rules: _object_spread_props$w(_object_spread$K({}, base), {
                 reason: reason
             })
         };
     } else if (scope === 'COLLECTION_GROUP' && !collectionGroup) {
         result = {
             mode: isNested ? 'parent-child' : 'unavailable',
-            rules: _object_spread_props$u(_object_spread$K({}, base), {
+            rules: _object_spread_props$w(_object_spread$K({}, base), {
                 reason: 'no-collection-group-rule'
             })
         };
     } else if (scope === 'COLLECTION' && isNested) {
         result = {
             mode: 'parent-child',
-            rules: _object_spread_props$u(_object_spread$K({}, base), {
+            rules: _object_spread_props$w(_object_spread$K({}, base), {
                 reason: 'nested-collection-scope'
             })
         };
@@ -13493,7 +14058,7 @@ function _object_spread$J(target) {
     }
     return target;
 }
-function ownKeys$t(object, enumerableOnly) {
+function ownKeys$v(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -13501,11 +14066,11 @@ function ownKeys$t(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$t(target, source) {
+function _object_spread_props$v(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$t(Object(source)).forEach(function(key) {
+        ownKeys$v(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -13704,7 +14269,7 @@ function _type_of$2(obj) {
      * @param firebaseConfigComplete - Whether the env carries a complete Firebase client config.
      * @returns The result with `detail.readRouting` attached.
      */ function withReadRouting(result, firebaseConfigComplete) {
-        var readRouting = buildFirestoreSessionDoctorReadRouting(_object_spread_props$t(_object_spread$J({}, input.firestore === undefined ? {} : {
+        var readRouting = buildFirestoreSessionDoctorReadRouting(_object_spread_props$v(_object_spread$J({}, input.firestore === undefined ? {} : {
             firestore: input.firestore
         }, input.modelManifest === undefined ? {} : {
             modelManifest: input.modelManifest
@@ -13714,8 +14279,8 @@ function _type_of$2(obj) {
             firebaseConfigComplete: firebaseConfigComplete,
             sessionOpened: result.ok
         }));
-        return _object_spread_props$t(_object_spread$J({}, result), {
-            detail: _object_spread_props$t(_object_spread$J({}, _type_of$2(result.detail) === 'object' && result.detail != null ? result.detail : {}), {
+        return _object_spread_props$v(_object_spread$J({}, result), {
+            detail: _object_spread_props$v(_object_spread$J({}, _type_of$2(result.detail) === 'object' && result.detail != null ? result.detail : {}), {
                 readRouting: readRouting
             })
         });
@@ -13890,7 +14455,7 @@ function runFirestoreSessionProbe(input) {
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
                         ok: false,
-                        detail: _object_spread_props$t(_object_spread$J({}, baseDetail), {
+                        detail: _object_spread_props$v(_object_spread$J({}, baseDetail), {
                             stage: FIRESTORE_SDK_IDENTITY_STAGE,
                             code: FIRESTORE_SDK_INSTANCE_MISMATCH_CODE,
                             probe: 'not-attempted'
@@ -13925,7 +14490,7 @@ function runFirestoreSessionProbe(input) {
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
                         ok: true,
-                        detail: _object_spread_props$t(_object_spread$J({}, baseDetail), {
+                        detail: _object_spread_props$v(_object_spread$J({}, baseDetail), {
                             probe: probeName !== null && probeName !== void 0 ? probeName : 'ok',
                             probeResult: probeResult
                         })
@@ -13939,7 +14504,7 @@ function runFirestoreSessionProbe(input) {
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
                         ok: false,
-                        detail: _object_spread_props$t(_object_spread$J({}, baseDetail), {
+                        detail: _object_spread_props$v(_object_spread$J({}, baseDetail), {
                             stage: 'rules-protected-read',
                             probe: probeName,
                             error: _instanceof$n(e1, Error) ? e1.message : String(e1)
@@ -13959,7 +14524,7 @@ function runFirestoreSessionProbe(input) {
                     result = {
                         name: FIRESTORE_SESSION_DOCTOR_CHECK_NAME,
                         ok: true,
-                        detail: _object_spread_props$t(_object_spread$J({}, baseDetail), {
+                        detail: _object_spread_props$v(_object_spread$J({}, baseDetail), {
                             probe: 'not-configured'
                         }),
                         suggestion: 'Signed in, but no rules-protected read was attempted. Pass a `probe` to `createFirestoreSessionDoctorCheck` so the check can prove App Check is accepted and rules pass.'
@@ -14189,7 +14754,7 @@ function _object_spread$I(target) {
     }
     return target;
 }
-function ownKeys$s(object, enumerableOnly) {
+function ownKeys$u(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -14197,11 +14762,11 @@ function ownKeys$s(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$s(target, source) {
+function _object_spread_props$u(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$s(Object(source)).forEach(function(key) {
+        ownKeys$u(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -14552,7 +15117,7 @@ function resolveEnvWithDefault(input) {
                                 storedEnv: stored,
                                 defaultEnvs: defaultEnvs
                             });
-                            outputResult(_object_spread_props$s(_object_spread$I({
+                            outputResult(_object_spread_props$u(_object_spread$I({
                                 added: argv.name,
                                 activeEnv: merged.activeEnv
                             }, (resolved === null || resolved === void 0 ? void 0 : resolved.defaultName) ? {
@@ -14655,7 +15220,7 @@ function resolveEnvWithDefault(input) {
                             nextEnvs = _object_spread$I({}, config.envs);
                             delete nextEnvs[argv.name];
                             nextActive = config.activeEnv === argv.name ? undefined : config.activeEnv;
-                            next = _object_spread_props$s(_object_spread$I({}, config), {
+                            next = _object_spread_props$u(_object_spread$I({}, config), {
                                 envs: nextEnvs,
                                 activeEnv: nextActive
                             });
@@ -15245,7 +15810,7 @@ function _object_spread$H(target) {
     }
     return target;
 }
-function ownKeys$r(object, enumerableOnly) {
+function ownKeys$t(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -15253,11 +15818,11 @@ function ownKeys$r(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$r(target, source) {
+function _object_spread_props$t(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$r(Object(source)).forEach(function(key) {
+        ownKeys$t(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -15379,7 +15944,7 @@ function _object_without_properties_loose(source, excluded) {
     var factory = entry.factory, rest = _object_without_properties(entry, [
         "factory"
     ]);
-    return _object_spread_props$r(_object_spread$H({}, rest), {
+    return _object_spread_props$t(_object_spread$H({}, rest), {
         invocable: factory != null
     });
 }
@@ -15410,7 +15975,7 @@ function _object_spread$G(target) {
     }
     return target;
 }
-function ownKeys$q(object, enumerableOnly) {
+function ownKeys$s(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -15418,11 +15983,11 @@ function ownKeys$q(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$q(target, source) {
+function _object_spread_props$s(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$q(Object(source)).forEach(function(key) {
+        ownKeys$s(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -15493,7 +16058,7 @@ function _object_spread_props$q(target, source) {
             result = override;
         }
     } catch (e) {
-        throw cliFirestoreWiringError(_object_spread_props$q(_object_spread$G({
+        throw cliFirestoreWiringError(_object_spread_props$s(_object_spread$G({
             error: e,
             operation: 'resolve the Firestore collection for this query',
             modelType: modelType
@@ -15602,7 +16167,7 @@ function _object_spread_props$q(target, source) {
         var parentRef = firestoreContext.drivers.firestoreAccessorDriver.docAtPath(firestoreContext.firestore, parentKey);
         // The spread is REQUIRED, not stylistic: `makeFirestoreCollectionGroup` mutates `config.cache`, so
         // reusing the object would rewrite the registered group's cache in place.
-        result = makeFirestoreCollectionGroup(_object_spread_props$q(_object_spread$G({}, group.config), {
+        result = makeFirestoreCollectionGroup(_object_spread_props$s(_object_spread$G({}, group.config), {
             queryLike: firestoreContext.subcollection(parentRef, collectionName)
         }));
     } catch (e) {
@@ -15984,7 +16549,7 @@ function _object_spread$F(target) {
     }
     return target;
 }
-function ownKeys$p(object, enumerableOnly) {
+function ownKeys$r(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -15992,11 +16557,11 @@ function ownKeys$p(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$p(target, source) {
+function _object_spread_props$r(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$p(Object(source)).forEach(function(key) {
+        ownKeys$r(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -16190,7 +16755,7 @@ function _unsupported_iterable_to_array$X(o, minLen) {
                         parentPaths: entry.rules.parentPaths
                     }));
                     executable = (_collection = collection).queryDocument.apply(_collection, _to_consumable_array$Q(constraints));
-                    base = _object_spread_props$p(_object_spread$F({
+                    base = _object_spread_props$r(_object_spread$F({
                         slug: entry.slug,
                         model: entry.model,
                         collection: entry.collection,
@@ -16213,7 +16778,7 @@ function _unsupported_iterable_to_array$X(o, minLen) {
                         executable.countDocs()
                     ];
                 case 1:
-                    result = _object_spread_props$p.apply(void 0, _tmp.concat([
+                    result = _object_spread_props$r.apply(void 0, _tmp.concat([
                         (_tmp1.count = _state.sent(), _tmp1)
                     ]));
                     return [
@@ -16236,7 +16801,7 @@ function _unsupported_iterable_to_array$X(o, minLen) {
                             data: pair.document.converter.fromFirestore(pair.snapshot)
                         };
                     });
-                    result = _object_spread_props$p(_object_spread$F({}, base), {
+                    result = _object_spread_props$r(_object_spread$F({}, base), {
                         rows: rows,
                         count: rows.length
                     });
@@ -16630,7 +17195,7 @@ function _object_spread$D(target) {
     }
     return target;
 }
-function ownKeys$o(object, enumerableOnly) {
+function ownKeys$q(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -16638,11 +17203,11 @@ function ownKeys$o(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$o(target, source) {
+function _object_spread_props$q(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$o(Object(source)).forEach(function(key) {
+        ownKeys$q(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -16829,7 +17394,7 @@ function _ts_generator$11(thisArg, body) {
                         // so these stay drop-in and there remains exactly ONE implementation of it
                         return [
                             2,
-                            _object_spread_props$o(_object_spread$D({}, models), {
+                            _object_spread_props$q(_object_spread$D({}, models), {
                                 readModel: function readModel(modelType, key) {
                                     return getModelOverFirestore({
                                         models: models,
@@ -17234,7 +17799,7 @@ function _object_spread$C(target) {
     }
     return target;
 }
-function ownKeys$n(object, enumerableOnly) {
+function ownKeys$p(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -17242,11 +17807,11 @@ function ownKeys$n(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$n(target, source) {
+function _object_spread_props$p(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$n(Object(source)).forEach(function(key) {
+        ownKeys$p(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -17568,7 +18133,7 @@ function _ts_generator$10(thisArg, body) {
                     ];
                 case 2:
                     refreshed = _state.sent();
-                    updated = _object_spread_props$n(_object_spread$C({}, entry), {
+                    updated = _object_spread_props$p(_object_spread$C({}, entry), {
                         accessToken: refreshed.access_token,
                         refreshToken: (_refreshed_refresh_token = refreshed.refresh_token) !== null && _refreshed_refresh_token !== void 0 ? _refreshed_refresh_token : entry.refreshToken,
                         tokenType: (_refreshed_token_type = refreshed.token_type) !== null && _refreshed_token_type !== void 0 ? _refreshed_token_type : entry.tokenType,
@@ -18210,7 +18775,7 @@ function _object_spread$A(target) {
     }
     return target;
 }
-function ownKeys$m(object, enumerableOnly) {
+function ownKeys$o(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -18218,11 +18783,11 @@ function ownKeys$m(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$m(target, source) {
+function _object_spread_props$o(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$m(Object(source)).forEach(function(key) {
+        ownKeys$o(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -18538,7 +19103,7 @@ function resolveCallbacks(input) {
                             delete nextCommands[commandKey];
                             return [
                                 4,
-                                callbacks.mergeOutputConfig(_object_spread_props$m(_object_spread$A({}, existing), {
+                                callbacks.mergeOutputConfig(_object_spread_props$o(_object_spread$A({}, existing), {
                                     commands: nextCommands
                                 }))
                             ];
@@ -18650,7 +19215,7 @@ function _object_spread$z(target) {
     }
     return target;
 }
-function ownKeys$l(object, enumerableOnly) {
+function ownKeys$n(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -18658,11 +19223,11 @@ function ownKeys$l(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$l(target, source) {
+function _object_spread_props$n(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$l(Object(source)).forEach(function(key) {
+        ownKeys$n(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -19077,7 +19642,7 @@ function _unsupported_iterable_to_array$V(o, minLen) {
                     ]);
                     return [
                         4,
-                        createCli(_object_spread_props$l(_object_spread$z({}, input), {
+                        createCli(_object_spread_props$n(_object_spread$z({}, input), {
                             lifecycle: lifecycle
                         })).parse()
                     ];
@@ -19354,7 +19919,7 @@ function _object_spread$y(target) {
     }
     return target;
 }
-function ownKeys$k(object, enumerableOnly) {
+function ownKeys$m(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -19362,11 +19927,11 @@ function ownKeys$k(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$k(target, source) {
+function _object_spread_props$m(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$k(Object(source)).forEach(function(key) {
+        ownKeys$m(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -20236,7 +20801,7 @@ function callEntry(entry, rawData, options) {
                 case 0:
                     ctx = requireCliContext();
                     data = parseAndValidate(entry, rawData);
-                    params = _object_spread_props$k(_object_spread$y({
+                    params = _object_spread_props$m(_object_spread$y({
                         modelType: entry.model,
                         call: entry.verb
                     }, entry.specifier ? {
@@ -23492,7 +24057,7 @@ function _object_spread$w(target) {
     }
     return target;
 }
-function ownKeys$j(object, enumerableOnly) {
+function ownKeys$l(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -23500,11 +24065,11 @@ function ownKeys$j(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$j(target, source) {
+function _object_spread_props$l(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$j(Object(source)).forEach(function(key) {
+        ownKeys$l(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -23662,7 +24227,7 @@ function _unsupported_iterable_to_array$P(o, minLen) {
         case 'field-factory':
             {
                 var _entry_wrapperPattern, _entry_ngFormType, _entry_configInterface;
-                var factory = _object_spread_props$j(_object_spread$w({
+                var factory = _object_spread_props$l(_object_spread$w({
                     slug: entry.slug,
                     factoryName: entry.factoryName,
                     tier: 'field-factory',
@@ -23686,7 +24251,7 @@ function _unsupported_iterable_to_array$P(o, minLen) {
             {
                 var _entry_configInterface1, _ref;
                 var _entry_composesFromSlugs;
-                var derivative = _object_spread_props$j(_object_spread$w({
+                var derivative = _object_spread_props$l(_object_spread$w({
                     slug: entry.slug,
                     factoryName: entry.factoryName,
                     tier: 'field-derivative',
@@ -23747,7 +24312,7 @@ function _unsupported_iterable_to_array$P(o, minLen) {
         case 'primitive':
             {
                 var _entry_returns;
-                var primitive = _object_spread_props$j(_object_spread$w({
+                var primitive = _object_spread_props$l(_object_spread$w({
                     slug: entry.slug,
                     factoryName: entry.factoryName,
                     tier: 'primitive',
@@ -28859,7 +29424,7 @@ function _object_spread$v(target) {
     }
     return target;
 }
-function ownKeys$i(object, enumerableOnly) {
+function ownKeys$k(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -28867,11 +29432,11 @@ function ownKeys$i(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$i(target, source) {
+function _object_spread_props$k(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$i(Object(source)).forEach(function(key) {
+        ownKeys$k(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -28991,7 +29556,7 @@ var LONG_NAME_RE = /^[a-z][a-zA-Z0-9]*$/;
         }
     }
     var modelGroups = input.modelGroups.map(function(g) {
-        return _object_spread_props$i(_object_spread$v({
+        return _object_spread_props$k(_object_spread$v({
             name: g.name,
             containerName: g.containerName,
             sourcePackage: input.sourcePackage,
@@ -29131,7 +29696,7 @@ function buildModelEntry(args) {
         collectionKind: collectionKind
     });
     var compositeKey = resolveCompositeKey(iface.tags.dbxModelCompositeKey);
-    return _object_spread$v(_object_spread_props$i(_object_spread$v(_object_spread_props$i(_object_spread$v({
+    return _object_spread$v(_object_spread_props$k(_object_spread$v(_object_spread_props$k(_object_spread$v({
         name: modelName
     }, iface.description ? {
         description: iface.description
@@ -29433,7 +29998,7 @@ function buildFields(input) {
                 subObjectInterfaceIndex: input.subObjectInterfaceIndex,
                 enumNames: input.enumNames
             });
-            var field = _object_spread$v(_object_spread_props$i(_object_spread$v({
+            var field = _object_spread$v(_object_spread_props$k(_object_spread$v({
                 name: f.key,
                 longName: longName,
                 converter: f.converter
@@ -29634,7 +30199,7 @@ function buildSubObjectField(input) {
         enumNames: enumNames,
         visited: visited
     });
-    var field = _object_spread$v(_object_spread_props$i(_object_spread$v({
+    var field = _object_spread$v(_object_spread_props$k(_object_spread$v({
         name: prop.name,
         longName: longName,
         converter: ''
@@ -31808,7 +32373,7 @@ function _object_spread$s(target) {
     }
     return target;
 }
-function ownKeys$h(object, enumerableOnly) {
+function ownKeys$j(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -31816,11 +32381,11 @@ function ownKeys$h(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$h(target, source) {
+function _object_spread_props$j(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$h(Object(source)).forEach(function(key) {
+        ownKeys$j(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -32340,7 +32905,7 @@ function sortModels(models) {
             if (entry === undefined) {
                 out.push(model);
             } else {
-                out.push(_object_spread_props$h(_object_spread$s({}, model), {
+                out.push(_object_spread_props$j(_object_spread$s({}, model), {
                     serviceFactory: {
                         exportName: entry.exportName,
                         sourceFile: entry.sourceFile
@@ -32486,10 +33051,10 @@ function refineTreeNodeAxes(input) {
         referencedAsParent: referencedAsParent
     });
     var existing = (_ref1 = (_model_archetypeAxesBySlug = model.archetypeAxesBySlug) === null || _model_archetypeAxesBySlug === void 0 ? void 0 : _model_archetypeAxesBySlug['model-tree-node']) !== null && _ref1 !== void 0 ? _ref1 : {};
-    var nextSlugAxes = _object_spread_props$h(_object_spread$s({}, existing), {
+    var nextSlugAxes = _object_spread_props$j(_object_spread$s({}, existing), {
         treeRole: role
     });
-    return _object_spread_props$h(_object_spread$s({}, model.archetypeAxesBySlug), {
+    return _object_spread_props$j(_object_spread$s({}, model.archetypeAxesBySlug), {
         'model-tree-node': nextSlugAxes
     });
 }
@@ -35118,6 +35683,34 @@ function assembleEntry$b(input) {
     return "".concat(JSON.stringify(manifest, null, 2), "\n");
 }
 
+/**
+ * Matches the `import("<path>")` form TypeScript emits for a non-nameable type.
+ * Captures the quoted path so only that segment is rewritten.
+ */ var INLINE_TYPE_IMPORT_PATTERN = /import\("([^"]*)"\)/g;
+/**
+ * Rewrites every absolute `import("…")` path in `typeText` to a workspace-relative,
+ * forward-slashed path.
+ *
+ * Paths that are already relative, or that resolve outside `workspaceRoot`, are left
+ * untouched — there is no stable shorter form for them, and rewriting to a `../`
+ * chain would reintroduce the machine dependence this exists to remove.
+ *
+ * @param input - The type text and the workspace root to relativize against.
+ * @returns The type text with workspace-internal absolute paths relativized.
+ */ function sanitizeTypeText(input) {
+    var typeText = input.typeText, workspaceRoot = input.workspaceRoot;
+    return typeText.replaceAll(INLINE_TYPE_IMPORT_PATTERN, function(match, importPath) {
+        var replacement;
+        if (isAbsolute(importPath)) {
+            var relativePath = relative(workspaceRoot, importPath).replaceAll('\\', '/');
+            replacement = relativePath.length > 0 && !relativePath.startsWith('..') ? 'import("'.concat(relativePath, '")') : match;
+        } else {
+            replacement = match;
+        }
+        return replacement;
+    });
+}
+
 function asyncGeneratorStep$Q(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -35170,7 +35763,7 @@ function _object_spread$q(target) {
     }
     return target;
 }
-function ownKeys$g(object, enumerableOnly) {
+function ownKeys$i(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -35178,11 +35771,11 @@ function ownKeys$g(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$g(target, source) {
+function _object_spread_props$i(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$g(Object(source)).forEach(function(key) {
+        ownKeys$i(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -35609,7 +36202,7 @@ function handleOutcome$1(input) {
                     ];
                     return [
                         4,
-                        handleSuccessOutcome(_object_spread_props$g(_object_spread$q({}, input), {
+                        handleSuccessOutcome(_object_spread_props$i(_object_spread$q({}, input), {
                             outcome: outcome
                         }))
                     ];
@@ -36310,7 +36903,7 @@ function _object_spread$o(target) {
     }
     return target;
 }
-function ownKeys$f(object, enumerableOnly) {
+function ownKeys$h(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -36318,11 +36911,11 @@ function ownKeys$f(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$f(target, source) {
+function _object_spread_props$h(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$f(Object(source)).forEach(function(key) {
+        ownKeys$h(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -36648,7 +37241,7 @@ function buildDirectiveEntry$1(input) {
         };
     }
     var example = tags.examples.length > 0 ? tags.examples[0] : '';
-    var entry = _object_spread_props$f(_object_spread$o(_object_spread_props$f(_object_spread$o({
+    var entry = _object_spread_props$h(_object_spread$o(_object_spread_props$h(_object_spread$o({
         kind: 'directive',
         slug: tags.slug,
         selector: directiveInfo.selector,
@@ -36695,7 +37288,7 @@ function buildPatternEntry(input) {
         };
     }
     var example = tags.examples.length > 0 ? tags.examples[0] : '';
-    var entry = _object_spread_props$f(_object_spread$o(_object_spread_props$f(_object_spread$o({
+    var entry = _object_spread_props$h(_object_spread$o(_object_spread_props$h(_object_spread$o({
         kind: 'pattern',
         slug: tags.slug,
         className: className,
@@ -37211,7 +37804,7 @@ function _object_spread$m(target) {
     }
     return target;
 }
-function ownKeys$e(object, enumerableOnly) {
+function ownKeys$g(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -37219,11 +37812,11 @@ function ownKeys$e(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$e(target, source) {
+function _object_spread_props$g(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$e(Object(source)).forEach(function(key) {
+        ownKeys$g(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -37520,7 +38113,7 @@ function handleOutcome(input) {
                     ];
                     return [
                         4,
-                        handleSuccess(_object_spread_props$e(_object_spread$m({}, input), {
+                        handleSuccess(_object_spread_props$g(_object_spread$m({}, input), {
                             outcome: outcome
                         }))
                     ];
@@ -39359,7 +39952,7 @@ function _object_spread$j(target) {
     }
     return target;
 }
-function ownKeys$d(object, enumerableOnly) {
+function ownKeys$f(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -39367,11 +39960,11 @@ function ownKeys$d(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$d(target, source) {
+function _object_spread_props$f(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$d(Object(source)).forEach(function(key) {
+        ownKeys$f(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -39849,7 +40442,7 @@ function parseRoleMappingObject(obj) {
             }
         }
     }
-    var mapping = _object_spread_props$d(_object_spread$j({
+    var mapping = _object_spread_props$f(_object_spread$j({
         roles: roleTexts,
         inverse: inverse
     }, inverseMode === undefined ? {} : {
@@ -39979,7 +40572,7 @@ function collectClaimsFromDecl(input) {
     try {
         for(var _iterator1 = properties[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
             var property = _step1.value;
-            var claim = buildClaimFromProperty(_object_spread_props$d(_object_spread$j({}, input), {
+            var claim = buildClaimFromProperty(_object_spread_props$f(_object_spread$j({}, input), {
                 property: property
             }));
             if (claim !== undefined) out.push(claim);
@@ -40165,7 +40758,7 @@ function resolveMappingRoles(input) {
             }
         }
     }
-    return _object_spread_props$d(_object_spread$j({}, mapping), {
+    return _object_spread_props$f(_object_spread$j({}, mapping), {
         roles: resolved
     });
 }
@@ -40336,7 +40929,7 @@ var EMPTY_ROLE_CONST_RESOLUTION = {
         } else {
             var nextSeen = new Set(ctx.seen);
             nextSeen.add(name);
-            result = resolveRoleArrayLiteral(arrayExpr, _object_spread_props$d(_object_spread$j({}, ctx), {
+            result = resolveRoleArrayLiteral(arrayExpr, _object_spread_props$f(_object_spread$j({}, ctx), {
                 seen: nextSeen
             }));
         }
@@ -42360,7 +42953,7 @@ function _object_spread$h(target) {
     }
     return target;
 }
-function ownKeys$c(object, enumerableOnly) {
+function ownKeys$e(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -42368,11 +42961,11 @@ function ownKeys$c(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$c(target, source) {
+function _object_spread_props$e(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$c(Object(source)).forEach(function(key) {
+        ownKeys$e(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -43140,7 +43733,7 @@ function assembleEntry$7(input) {
     // `validateRequiredTags` guarantees slug/category/summary are non-empty before this is called.
     var slug = (_tags_slug = tags.slug) !== null && _tags_slug !== void 0 ? _tags_slug : '';
     var summary = (_tags_summary = tags.summary) !== null && _tags_summary !== void 0 ? _tags_summary : '';
-    return _object_spread_props$c(_object_spread$h(_object_spread_props$c(_object_spread$h(_object_spread_props$c(_object_spread$h({
+    return _object_spread_props$e(_object_spread$h(_object_spread_props$e(_object_spread$h(_object_spread_props$e(_object_spread$h({
         slug: slug,
         category: category,
         summary: summary,
@@ -43545,7 +44138,7 @@ function resolveUseEntry(input) {
                         ];
                     }
                     _captured_angular = captured.angular, kind = _captured_angular.kind, selector = _captured_angular.selector, pipeName = _captured_angular.pipeName;
-                    result = _object_spread_props$c(_object_spread$h({
+                    result = _object_spread_props$e(_object_spread$h({
                         kind: kind,
                         className: tag.identifier
                     }, tag.role === undefined ? {} : {
@@ -43978,7 +44571,7 @@ function _object_spread$g(target) {
     }
     return target;
 }
-function ownKeys$b(object, enumerableOnly) {
+function ownKeys$d(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -43986,11 +44579,11 @@ function ownKeys$b(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$b(target, source) {
+function _object_spread_props$d(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$b(Object(source)).forEach(function(key) {
+        ownKeys$d(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -44241,7 +44834,7 @@ function assembleEntry$6(input) {
     var entry = input.entry, moduleName = input.moduleName;
     var appRef = (_entry_appRef = entry.appRef) !== null && _entry_appRef !== void 0 ? _entry_appRef : moduleName;
     var uses = entry.uses.map(function(use) {
-        return _object_spread_props$b(_object_spread$g({
+        return _object_spread_props$d(_object_spread$g({
             kind: use.kind,
             className: use.className
         }, use.role === undefined ? {} : {
@@ -44254,7 +44847,7 @@ function assembleEntry$6(input) {
             classSource: use.classSource
         });
     });
-    return _object_spread_props$b(_object_spread$g(_object_spread_props$b(_object_spread$g({
+    return _object_spread_props$d(_object_spread$g(_object_spread_props$d(_object_spread$g({
         slug: entry.slug,
         category: entry.category,
         summary: entry.summary,
@@ -45715,7 +46308,7 @@ function _object_spread$f(target) {
     }
     return target;
 }
-function ownKeys$a(object, enumerableOnly) {
+function ownKeys$c(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -45723,11 +46316,11 @@ function ownKeys$a(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$a(target, source) {
+function _object_spread_props$c(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$a(Object(source)).forEach(function(key) {
+        ownKeys$c(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -46261,7 +46854,7 @@ function buildEntryFromCandidate(input) {
         warnings: warnings
     });
     var example = tags.examples.length > 0 ? tags.examples[0] : '';
-    var entry = _object_spread_props$a(_object_spread$f({
+    var entry = _object_spread_props$c(_object_spread$f({
         slug: slug,
         factoryName: factoryName,
         tier: tier,
@@ -46409,7 +47002,7 @@ function readTierSpecificTags(input) {
             warnings: evaluation.warnings
         };
     } else {
-        result = _object_spread_props$a(_object_spread$f({
+        result = _object_spread_props$c(_object_spread$f({
             kind: 'ok'
         }, evaluation.wrapperPattern === undefined ? {} : {
             wrapperPattern: evaluation.wrapperPattern
@@ -46669,7 +47262,7 @@ function readConfigProperties(input) {
             };
             var collected = collectFromInterfaceName(propsBase, propsContext);
             propsProperties = collected.map(function(p) {
-                return _object_spread_props$a(_object_spread$f({}, p), {
+                return _object_spread_props$c(_object_spread$f({}, p), {
                     name: "".concat(p.name, " (props)")
                 });
             });
@@ -46697,7 +47290,7 @@ function collectFromInterfaceName(baseName, context) {
     if (decl === undefined) {
         return [];
     }
-    var nextContext = _object_spread_props$a(_object_spread$f({}, context), {
+    var nextContext = _object_spread_props$c(_object_spread$f({}, context), {
         visited: addToSet(context.visited, baseName)
     });
     return Node.isInterfaceDeclaration(decl) ? collectFromInterface(decl, nextContext) : collectFromTypeAlias(decl, nextContext);
@@ -46830,7 +47423,7 @@ function collectFromTypeNode(typeNode, context) {
  * @param context - The active walker context (warning sink + visited / omit / pick / forceOptional state)
  * @returns Merged properties from all object/reference members, with primitives skipped.
  */ function collectFromUnionTypeNode(typeNode, context) {
-    var memberContext = _object_spread_props$a(_object_spread$f({}, context), {
+    var memberContext = _object_spread_props$c(_object_spread$f({}, context), {
         forceOptional: true
     });
     var accumulator = new PropertyAccumulator(memberContext);
@@ -46877,27 +47470,27 @@ function collectFromTypeReference(ref, context) {
     var args = ref.getTypeArguments();
     var result;
     if ((refName === 'Partial' || refName === 'Readonly') && args.length === 1) {
-        var innerContext = refName === 'Partial' ? _object_spread_props$a(_object_spread$f({}, context), {
+        var innerContext = refName === 'Partial' ? _object_spread_props$c(_object_spread$f({}, context), {
             forceOptional: true
         }) : context;
         result = collectFromTypeNode(args[0], innerContext);
     } else if (refName === 'Required' && args.length === 1) {
-        result = collectFromTypeNode(args[0], _object_spread_props$a(_object_spread$f({}, context), {
+        result = collectFromTypeNode(args[0], _object_spread_props$c(_object_spread$f({}, context), {
             forceOptional: false
         })).map(function(p) {
-            return _object_spread_props$a(_object_spread$f({}, p), {
+            return _object_spread_props$c(_object_spread$f({}, p), {
                 required: true
             });
         });
     } else if (refName === 'Omit' && args.length === 2) {
         var keys = parseKeyUnion(args[1]);
         var merged = new Set(_to_consumable_array$r(Array.from(context.omit)).concat(_to_consumable_array$r(Array.from(keys))));
-        result = collectFromTypeNode(args[0], _object_spread_props$a(_object_spread$f({}, context), {
+        result = collectFromTypeNode(args[0], _object_spread_props$c(_object_spread$f({}, context), {
             omit: merged
         }));
     } else if (refName === 'Pick' && args.length === 2) {
         var keys1 = parseKeyUnion(args[1]);
-        result = collectFromTypeNode(args[0], _object_spread_props$a(_object_spread$f({}, context), {
+        result = collectFromTypeNode(args[0], _object_spread_props$c(_object_spread$f({}, context), {
             pick: keys1
         }));
     } else {
@@ -46982,7 +47575,7 @@ function addToSet(set, value) {
                 if (this.context.pick != null && !this.context.pick.has(entry.name)) {
                     return;
                 }
-                var finalEntry = this.context.forceOptional ? _object_spread_props$a(_object_spread$f({}, entry), {
+                var finalEntry = this.context.forceOptional ? _object_spread_props$c(_object_spread$f({}, entry), {
                     required: false
                 }) : entry;
                 var existingIdx = this.index.get(finalEntry.name);
@@ -47112,7 +47705,7 @@ function readPropertyTags(property) {
             }
         }
     }
-    return _object_spread_props$a(_object_spread$f({
+    return _object_spread_props$c(_object_spread$f({
         description: summaries.join('\n\n')
     }, defaultText === undefined ? {} : {
         defaultText: defaultText
@@ -48896,7 +49489,7 @@ function _object_spread$d(target) {
     }
     return target;
 }
-function ownKeys$9(object, enumerableOnly) {
+function ownKeys$b(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -48904,11 +49497,11 @@ function ownKeys$9(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$9(target, source) {
+function _object_spread_props$b(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$9(Object(source)).forEach(function(key) {
+        ownKeys$b(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -49559,7 +50152,7 @@ function composeEntry(input) {
             line: line
         });
     }
-    return _object_spread_props$9(_object_spread$d(_object_spread_props$9(_object_spread$d({
+    return _object_spread_props$b(_object_spread$d(_object_spread_props$b(_object_spread$d({
         slug: slug,
         name: name,
         model: modelTag,
@@ -50025,7 +50618,7 @@ function walkBodyInto(input) {
                 continue;
             }
             var callConditional = forcedConditional !== null && forcedConditional !== void 0 ? forcedConditional : isWithinConditionalBranch(call, body);
-            processCallExpression(_object_spread_props$9(_object_spread$d({}, input), {
+            processCallExpression(_object_spread_props$b(_object_spread$d({}, input), {
                 body: body,
                 call: call,
                 callee: callee,
@@ -50076,7 +50669,7 @@ function processCallExpression(input) {
     }
     var descriptor = getFirestoreQueryHelperDescriptor(callee.name);
     if (descriptor !== undefined) {
-        handleHelperCall(_object_spread_props$9(_object_spread$d({}, input), {
+        handleHelperCall(_object_spread_props$b(_object_spread$d({}, input), {
             descriptor: descriptor
         }));
         return;
@@ -51019,7 +51612,7 @@ function _object_spread$c(target) {
     }
     return target;
 }
-function ownKeys$8(object, enumerableOnly) {
+function ownKeys$a(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -51027,11 +51620,11 @@ function ownKeys$8(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$8(target, source) {
+function _object_spread_props$a(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$8(Object(source)).forEach(function(key) {
+        ownKeys$a(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -51418,7 +52011,7 @@ function assembleEntry$4(input) {
     var analyzedEntry = input.analyzedEntry, moduleName = input.moduleName, projectRoot = input.projectRoot;
     var entry = analyzedEntry.extractedEntry;
     var subpath = deriveSubpath$2(entry.filePath, projectRoot);
-    var out = _object_spread$c(_object_spread_props$8(_object_spread$c({
+    var out = _object_spread$c(_object_spread_props$a(_object_spread$c({
         slug: entry.slug,
         name: entry.name,
         module: moduleName,
@@ -51443,7 +52036,7 @@ function assembleEntry$4(input) {
         returns: entry.returns,
         tags: _to_consumable_array$o(entry.tags),
         constraintSequences: entry.constraintSequences.map(function(s) {
-            return _object_spread_props$8(_object_spread$c({}, s.pathLabel === undefined ? {} : {
+            return _object_spread_props$a(_object_spread$c({}, s.pathLabel === undefined ? {} : {
                 pathLabel: s.pathLabel
             }), {
                 entries: s.entries.map(function(e) {
@@ -51452,14 +52045,14 @@ function assembleEntry$4(input) {
             });
         }),
         derivedComposites: analyzedEntry.derivedComposites.map(function(c) {
-            return _object_spread_props$8(_object_spread$c({}, c), {
+            return _object_spread_props$a(_object_spread$c({}, c), {
                 fields: c.fields.map(function(f) {
                     return _object_spread$c({}, f);
                 })
             });
         }),
         derivedFieldOverrides: analyzedEntry.derivedFieldOverrides.map(function(f) {
-            return _object_spread_props$8(_object_spread$c({}, f), {
+            return _object_spread_props$a(_object_spread$c({}, f), {
                 variants: f.variants.map(function(v) {
                     return _object_spread$c({}, v);
                 })
@@ -52610,7 +53203,7 @@ function _object_spread$b(target) {
     }
     return target;
 }
-function ownKeys$7(object, enumerableOnly) {
+function ownKeys$9(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -52618,11 +53211,11 @@ function ownKeys$7(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$7(target, source) {
+function _object_spread_props$9(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$7(Object(source)).forEach(function(key) {
+        ownKeys$9(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -52986,7 +53579,7 @@ function buildEntry$1(input) {
         category: category
     });
     var optional = (_tags_optionalOverride = tags.optionalOverride) !== null && _tags_optionalOverride !== void 0 ? _tags_optionalOverride : deriveOptionalFromName(meta.name);
-    var entry = _object_spread_props$7(_object_spread$b(_object_spread_props$7(_object_spread$b({
+    var entry = _object_spread_props$9(_object_spread$b(_object_spread_props$9(_object_spread$b({
         slug: slug,
         name: meta.name,
         kind: kind,
@@ -53183,6 +53776,24 @@ function _object_spread$a(target) {
     }
     return target;
 }
+function ownKeys$8(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$8(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    else {
+        ownKeys$8(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
 function _to_consumable_array$m(arr) {
     return _array_without_holes$m(arr) || _iterable_to_array$m(arr) || _unsupported_iterable_to_array$q(arr) || _non_iterable_spread$m();
 }
@@ -53305,11 +53916,11 @@ var DEFAULT_GLOBBER$3 = defaultGlobber;
  * @returns A discriminated outcome describing the result.
  */ function buildModelSnapshotFieldsManifest(input) {
     return _async_to_generator$z(function() {
-        var _scanSection_exclude, _scanSection_module, _scanSection_source, projectRoot, generator, _input_readFile, readFile, _input_globber, globber, _input_now, now, configPath, packagePath, configOutcome, scanSection, packageOutcome, packageName, filePaths, project, extractResult, moduleName, sourceLabel, entries, manifest, validated, outcome, _scanSection_out, outPath;
+        var _scanSection_exclude, _scanSection_module, _scanSection_source, projectRoot, generator, _input_workspaceRoot, workspaceRoot, _input_readFile, readFile, _input_globber, globber, _input_now, now, configPath, packagePath, configOutcome, scanSection, packageOutcome, packageName, filePaths, project, extractResult, moduleName, sourceLabel, entries, manifest, validated, outcome, _scanSection_out, outPath;
         return _ts_generator$z(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    projectRoot = input.projectRoot, generator = input.generator, _input_readFile = input.readFile, readFile = _input_readFile === void 0 ? DEFAULT_READ_FILE$5 : _input_readFile, _input_globber = input.globber, globber = _input_globber === void 0 ? DEFAULT_GLOBBER$3 : _input_globber, _input_now = input.now, now = _input_now === void 0 ? function() {
+                    projectRoot = input.projectRoot, generator = input.generator, _input_workspaceRoot = input.workspaceRoot, workspaceRoot = _input_workspaceRoot === void 0 ? process.cwd() : _input_workspaceRoot, _input_readFile = input.readFile, readFile = _input_readFile === void 0 ? DEFAULT_READ_FILE$5 : _input_readFile, _input_globber = input.globber, globber = _input_globber === void 0 ? DEFAULT_GLOBBER$3 : _input_globber, _input_now = input.now, now = _input_now === void 0 ? function() {
                         return new Date();
                     } : _input_now;
                     configPath = resolve(projectRoot, MODEL_SNAPSHOT_FIELDS_SCAN_CONFIG_FILENAME);
@@ -53384,7 +53995,8 @@ var DEFAULT_GLOBBER$3 = defaultGlobber;
                         return assembleEntry$3({
                             entry: entry,
                             moduleName: moduleName,
-                            projectRoot: projectRoot
+                            projectRoot: projectRoot,
+                            workspaceRoot: workspaceRoot
                         });
                     });
                     manifest = {
@@ -53460,7 +54072,7 @@ function deriveSubpath$1(filePath, projectRoot) {
     return relativePath.replace(/\.ts$/, '');
 }
 function assembleEntry$3(input) {
-    var entry = input.entry, moduleName = input.moduleName, projectRoot = input.projectRoot;
+    var entry = input.entry, moduleName = input.moduleName, projectRoot = input.projectRoot, workspaceRoot = input.workspaceRoot;
     var subpath = deriveSubpath$1(entry.filePath, projectRoot);
     var out = _object_spread$a({
         slug: entry.slug,
@@ -53469,13 +54081,24 @@ function assembleEntry$3(input) {
         category: entry.category,
         module: moduleName,
         subpath: subpath,
-        signature: entry.signature,
+        signature: sanitizeTypeText({
+            typeText: entry.signature,
+            workspaceRoot: workspaceRoot
+        }),
         description: entry.description,
         optional: entry.optional,
         params: entry.params.map(function(p) {
-            return _object_spread$a({}, p);
+            return _object_spread_props$8(_object_spread$a({}, p), {
+                type: sanitizeTypeText({
+                    typeText: p.type,
+                    workspaceRoot: workspaceRoot
+                })
+            });
+        }),
+        returns: sanitizeTypeText({
+            typeText: entry.returns,
+            workspaceRoot: workspaceRoot
         }),
-        returns: entry.returns,
         tags: _to_consumable_array$m(entry.tags)
     }, entry.example.length > 0 ? {
         example: entry.example
@@ -53777,7 +54400,7 @@ function _object_spread$9(target) {
     }
     return target;
 }
-function ownKeys$6(object, enumerableOnly) {
+function ownKeys$7(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -53785,11 +54408,11 @@ function ownKeys$6(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$6(target, source) {
+function _object_spread_props$7(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$6(Object(source)).forEach(function(key) {
+        ownKeys$7(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -54126,7 +54749,7 @@ function buildEntryFromClass$1(input) {
     var inputType = (_tags_inputTypeOverride = tags.inputTypeOverride) !== null && _tags_inputTypeOverride !== void 0 ? _tags_inputTypeOverride : transformSignature.inputType;
     var outputType = (_tags_outputTypeOverride = tags.outputTypeOverride) !== null && _tags_outputTypeOverride !== void 0 ? _tags_outputTypeOverride : transformSignature.outputType;
     var example = tags.examples.length > 0 ? tags.examples[0] : '';
-    var entry = _object_spread_props$6(_object_spread$9(_object_spread_props$6(_object_spread$9({
+    var entry = _object_spread_props$7(_object_spread$9(_object_spread_props$7(_object_spread$9({
         slug: tags.slug,
         category: category,
         pipeName: decoratorInfo.name,
@@ -55040,7 +55663,7 @@ function _object_spread$7(target) {
     }
     return target;
 }
-function ownKeys$5(object, enumerableOnly) {
+function ownKeys$6(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -55048,11 +55671,11 @@ function ownKeys$5(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$5(target, source) {
+function _object_spread_props$6(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$5(Object(source)).forEach(function(key) {
+        ownKeys$6(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -55416,7 +56039,7 @@ function buildEntryFromClass(input) {
     var outputs = extractOutputs(decl);
     var contentProjection = (_tags_contentProjection = tags.contentProjection) !== null && _tags_contentProjection !== void 0 ? _tags_contentProjection : decoratorInfo.contentProjectionFromTemplate;
     var example = tags.examples.length > 0 ? tags.examples[0] : undefined;
-    var entry = _object_spread_props$5(_object_spread$7({
+    var entry = _object_spread_props$6(_object_spread$7({
         slug: slug,
         category: category,
         kind: kind,
@@ -56434,7 +57057,7 @@ function _object_spread$5(target) {
     }
     return target;
 }
-function ownKeys$4(object, enumerableOnly) {
+function ownKeys$5(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -56442,11 +57065,11 @@ function ownKeys$4(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props$4(target, source) {
+function _object_spread_props$5(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     else {
-        ownKeys$4(Object(source)).forEach(function(key) {
+        ownKeys$5(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
@@ -56784,7 +57407,7 @@ function buildEntry(input) {
         explicit: tags.explicitTags,
         category: category
     });
-    var entry = _object_spread_props$4(_object_spread$5(_object_spread_props$4(_object_spread$5({
+    var entry = _object_spread_props$5(_object_spread$5(_object_spread_props$5(_object_spread$5({
         slug: slug,
         name: meta.name,
         kind: kind,
@@ -56983,6 +57606,24 @@ function _object_spread$4(target) {
     }
     return target;
 }
+function ownKeys$4(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$4(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    else {
+        ownKeys$4(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
 function _to_consumable_array$i(arr) {
     return _array_without_holes$i(arr) || _iterable_to_array$i(arr) || _unsupported_iterable_to_array$m(arr) || _non_iterable_spread$i();
 }
@@ -57105,11 +57746,11 @@ var DEFAULT_GLOBBER = defaultGlobber;
  * @returns A discriminated outcome describing the result.
  */ function buildUtilsManifest(input) {
     return _async_to_generator$t(function() {
-        var _scanSection_exclude, _scanSection_module, _scanSection_source, projectRoot, generator, _input_readFile, readFile, _input_globber, globber, _input_now, now, configPath, packagePath, configOutcome, scanSection, packageOutcome, packageName, filePaths, project, extractResult, moduleName, sourceLabel, entries, manifest, validated, outcome, _scanSection_out, outPath;
+        var _scanSection_exclude, _scanSection_module, _scanSection_source, projectRoot, generator, _input_workspaceRoot, workspaceRoot, _input_readFile, readFile, _input_globber, globber, _input_now, now, configPath, packagePath, configOutcome, scanSection, packageOutcome, packageName, filePaths, project, extractResult, moduleName, sourceLabel, entries, manifest, validated, outcome, _scanSection_out, outPath;
         return _ts_generator$t(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    projectRoot = input.projectRoot, generator = input.generator, _input_readFile = input.readFile, readFile = _input_readFile === void 0 ? DEFAULT_READ_FILE$2 : _input_readFile, _input_globber = input.globber, globber = _input_globber === void 0 ? DEFAULT_GLOBBER : _input_globber, _input_now = input.now, now = _input_now === void 0 ? function() {
+                    projectRoot = input.projectRoot, generator = input.generator, _input_workspaceRoot = input.workspaceRoot, workspaceRoot = _input_workspaceRoot === void 0 ? process.cwd() : _input_workspaceRoot, _input_readFile = input.readFile, readFile = _input_readFile === void 0 ? DEFAULT_READ_FILE$2 : _input_readFile, _input_globber = input.globber, globber = _input_globber === void 0 ? DEFAULT_GLOBBER : _input_globber, _input_now = input.now, now = _input_now === void 0 ? function() {
                         return new Date();
                     } : _input_now;
                     configPath = resolve(projectRoot, UTILS_SCAN_CONFIG_FILENAME);
@@ -57184,7 +57825,8 @@ var DEFAULT_GLOBBER = defaultGlobber;
                         return assembleEntry({
                             entry: entry,
                             moduleName: moduleName,
-                            projectRoot: projectRoot
+                            projectRoot: projectRoot,
+                            workspaceRoot: workspaceRoot
                         });
                     });
                     manifest = {
@@ -57260,7 +57902,7 @@ function deriveSubpath(filePath, projectRoot) {
     return relativePath.replace(/\.ts$/, '');
 }
 function assembleEntry(input) {
-    var entry = input.entry, moduleName = input.moduleName, projectRoot = input.projectRoot;
+    var entry = input.entry, moduleName = input.moduleName, projectRoot = input.projectRoot, workspaceRoot = input.workspaceRoot;
     var subpath = deriveSubpath(entry.filePath, projectRoot);
     var out = _object_spread$4({
         slug: entry.slug,
@@ -57269,12 +57911,23 @@ function assembleEntry(input) {
         category: entry.category,
         module: moduleName,
         subpath: subpath,
-        signature: entry.signature,
+        signature: sanitizeTypeText({
+            typeText: entry.signature,
+            workspaceRoot: workspaceRoot
+        }),
         description: entry.description,
         params: entry.params.map(function(p) {
-            return _object_spread$4({}, p);
+            return _object_spread_props$4(_object_spread$4({}, p), {
+                type: sanitizeTypeText({
+                    typeText: p.type,
+                    workspaceRoot: workspaceRoot
+                })
+            });
+        }),
+        returns: sanitizeTypeText({
+            typeText: entry.returns,
+            workspaceRoot: workspaceRoot
         }),
-        returns: entry.returns,
         tags: _to_consumable_array$i(entry.tags)
     }, entry.example.length > 0 ? {
         example: entry.example
@@ -69363,4 +70016,4 @@ function printPaginatedOutput(input) {
     })();
 }
 
-export { ACTIONS_SCAN_CONFIG_FILENAME, ACTION_ENTRY_ROLES, ACTION_ROLE_ORDER, ActionDirectiveEntry, ActionEntry, ActionInputEntry, ActionManifest, ActionOutputEntry, ActionStateEntry, ActionStoreEntry, ActionStoreMethodEntry, ActionStoreObservableEntry, ActionsScanConfig, ActionsScanSection, BUILD_DRIFT_DOCTOR_CHECK_NAME, BUILTIN_AUTH_CLAIMS, BUILTIN_AUTH_ROLES, BUILTIN_AUTH_SCOPES, CALL_MODEL_API_PATH, CALL_PASSTHROUGH_COMMAND, CLI_CLIENT_FIRESTORE_DRIVER_IDENTIFIER, CLI_DATA_CACHE_CYCLE_ERROR_CODE, CLI_DATA_CACHE_FINGERPRINT_LENGTH, CLI_DATA_CACHE_GLOBAL_OPTION_NAMES, CLI_DATA_CACHE_INDEX_FILE_NAME, CLI_DATA_CACHE_SCHEMA_VERSION, CLI_DATA_CACHE_UNSUPPORTED_VALUE_ERROR_CODE, CLI_EXIT_CODE_AUTH, CLI_EXIT_CODE_HANDLER, CLI_FIRESTORE_QUERY_DATASET_PREFIX, CLI_FIRESTORE_QUERY_DATASET_VERSION, CLI_FIRESTORE_SESSION_EXPIRY_BUFFER_MS, CLI_FIRESTORE_SESSION_MAX_CACHE_MS, CLI_FRAMEWORK_PACKAGE_PREFIX, CLI_READ_VIA_EPILOGUE, CLI_READ_VIA_VALUES, CORE_TOPICS, CORE_TOPICS_SET, CSS_UTILITIES_SCAN_CONFIG_FILENAME, CSS_UTILITY_ROLES, CSS_UTILITY_SCOPES, CliError, CssUtilitiesScanConfig, CssUtilitiesScanSection, CssUtilityDeclaration, CssUtilityEntry, CssUtilityManifest, DBX_ACTION_STATE_VALUES, DBX_DOCS_UI_EXAMPLES_SCAN_CONFIG_FILENAME, DBX_DOCS_UI_EXAMPLE_USE_KINDS, DEFAULT_ACTIONS_SCAN_OUT_PATH, DEFAULT_ACTION_COMMAND_NAME, DEFAULT_CLI_DATA_CACHE_CODEC, DEFAULT_CLI_DATA_CACHE_COMMAND_NAME, DEFAULT_CLI_DATA_CACHE_MAX_AGE_HOURS, DEFAULT_CLI_DATA_CACHE_OPTIONS, DEFAULT_CLI_FIREBASE_EMULATOR_HOST, DEFAULT_CLI_HTTP_TIMEOUT_MS, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_READ_VIA, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_CSS_UTILITIES_SCAN_OUT_PATH, DEFAULT_DBX_DOCS_UI_EXAMPLES_SCAN_OUT_PATH, DEFAULT_FILTERS_SCAN_OUT_PATH, DEFAULT_FIRESTORE_GET_COMMAND_NAME, DEFAULT_FIRESTORE_QUERIES_COMMAND_NAME, DEFAULT_FIRESTORE_QUERY_COMMAND_NAME, DEFAULT_FORGE_FIELDS_SCAN_OUT_PATH, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DEFAULT_MODEL_SNAPSHOT_FIELDS_SCAN_OUT_PATH, DEFAULT_PIPES_SCAN_OUT_PATH, DEFAULT_SCAN_OUT_PATH, DEFAULT_SPECIFIER_KEY, DEFAULT_UI_COMPONENTS_SCAN_OUT_PATH, DEFAULT_UTILS_SCAN_OUT_PATH, DISABLED_CLI_DATA_CACHE_OPTIONS, DOWNSTREAM_CLUSTERS, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, DbxDocsUiExampleEntry, DbxDocsUiExampleManifest, DbxDocsUiExampleUseEntry, DbxDocsUiExamplesScanConfig, DbxDocsUiExamplesScanSection, DbxMcpConfig, EMPTY_ACTION_REGISTRY, EMPTY_AUTH_REGISTRY, EMPTY_CSS_UTILITY_REGISTRY, EMPTY_DBX_DOCS_UI_EXAMPLES_REGISTRY, EMPTY_FILTER_REGISTRY, EMPTY_FORGE_FIELD_REGISTRY, EMPTY_MODEL_SNAPSHOT_FIELD_REGISTRY, EMPTY_PIPE_REGISTRY, EMPTY_SEMANTIC_TYPE_REGISTRY, EMPTY_TOKEN_REGISTRY, EMPTY_UI_COMPONENT_REGISTRY, EMPTY_UTIL_REGISTRY, ExtractedDbxDocsUiExampleEntrySchema, ExtractedEntrySchema, ExtractedForgeFieldEntrySchema, ExtractedUiEntrySchema, FILTERS_SCAN_CONFIG_FILENAME, FILTER_KINDS, FILTER_KIND_ORDER, FIREBASE_MODELS, FIREBASE_MODEL_GROUPS, FIRESTORE_COLLECTION_UNRESOLVABLE_CODE, FIRESTORE_QUERY_PARENT_REQUIRED_CODE, FIRESTORE_QUERY_UNAVAILABLE_CODE, FIRESTORE_SDK_IDENTITY_STAGE, FIRESTORE_SDK_INSTANCE_MISMATCH_CODE, FIRESTORE_SESSION_DOCTOR_CHECK_NAME, FORGE_FIELDS_SCAN_CONFIG_FILENAME, FORGE_FIELD_ARRAY_OUTPUTS, FORGE_FIELD_COMPOSITE_SUFFIXES, FORGE_FIELD_TIERS, FORGE_FIELD_WRAPPER_PATTERNS, FORM_FIELDS, FORM_TIER_ORDER, FilterDirectiveEntry, FilterEntry, FilterInputEntry, FilterManifest, FilterPatternEntry, FiltersScanConfig, FiltersScanSection, ForgeFieldEntry, ForgeFieldManifest, ForgeFieldPropertyEntry, ForgeFieldsScanConfig, ForgeFieldsScanSection, GET_COMMAND, GET_MANY_COMMAND, LOOPBACK_REDIRECT_HOSTNAMES, LOOPBACK_REDIRECT_LISTEN_FAILED_ERROR_CODE, LOOPBACK_REDIRECT_TIMEOUT_ERROR_CODE, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MCP_CALL_TYPE_ABBREVIATIONS, MCP_MANIFEST_VERSION, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MODEL_ARCHETYPES, MODEL_ARCHETYPE_ADDON_SLUGS, MODEL_ARCHETYPE_SYNC_MODES, MODEL_IS_SERVER_ONLY_CODE, MODEL_SNAPSHOT_FIELDS_SCAN_CONFIG_FILENAME, MODEL_SNAPSHOT_FIELD_KINDS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, ModelSnapshotFieldEntry, ModelSnapshotFieldManifest, ModelSnapshotFieldParamEntry, ModelSnapshotFieldsScanConfig, ModelSnapshotFieldsScanSection, PIPES_SCAN_CONFIG_FILENAME, PIPE_CATEGORIES, PIPE_CATEGORY_ORDER, PIPE_PURITIES, PROMPT_CANCELLED_ERROR_CODE, PipeArgEntry, PipeEntry, PipeManifest, PipesScanConfig, PipesScanSection, RESERVED_MODEL_FOLDERS, ROUTE_MANIFEST_VERSION, ROUTE_MODEL_LIST_TAG, ROUTE_MODEL_TAG, SCAN_CONFIG_FILENAME$1 as SCAN_CONFIG_FILENAME, SERVICE_TOKEN_REQUIRED_OIDC_SCOPES, STANDARD_GLOBAL_OPTION_NAMES, STDIN_NOT_PIPED_ERROR_CODE, SUGGESTED_CLI_LOOPBACK_REDIRECT_PORT, SemanticTypeEntry, SemanticTypeManifest, SemanticTypeScanConfig, TOKEN_ROLES, TOKEN_SOURCES, TokenDefaults, TokenEntry, TokenManifest, UI_COMPONENTS_SCAN_CONFIG_FILENAME, UI_COMPONENT_CATEGORIES, UI_COMPONENT_KINDS, UTILS_SCAN_CONFIG_FILENAME, UTIL_KINDS, UiComponentEntry, UiComponentInputEntry, UiComponentManifest, UiComponentOutputEntry, UiComponentsScanConfig, UiComponentsScanSection, UtilEntry, UtilManifest, UtilParamEntry, UtilsScanConfig, UtilsScanSection, WORKSPACE_AUTH_APPS, WORKSPACE_AUTH_CLAIMS, WORKSPACE_FACTORY_SCAN_EXCLUDE, WORKSPACE_FACTORY_SCAN_INCLUDE, abbreviateMcpCallType, appendCliErrorMapper, applyEnvVarOverrides, assertCliFirestoreQueryCanRun, assertCliFirestoreQueryParentKey, assertCliModelIsNotServerOnly, buildActionCommands, buildActionsManifest, buildAuthorizationUrl, buildCliPaths, buildCssUtilitiesManifest, buildDbxDocsUiExamplesManifest, buildDisambiguatedMcpToolName, buildDispatcherCreditByName, buildDumpFilePath, buildErrorOutput, buildFiltersManifest, buildFirestoreGetCommand, buildFirestoreQueriesCommand, buildFirestoreQueryCommand, buildFirestoreSessionDoctorReadRouting, buildForgeFieldsManifest, buildManifest, buildManifestCommands, buildMcpToolName, buildModelDecodeCommand, buildModelInfoCommand, buildModelSnapshotFieldsManifest, buildPipesManifest, buildRouteManifest, buildRouteTree, buildScanProject, buildUiComponentsManifest, buildUtilsManifest, callModelOverHttp, canonicalCliCacheJson, checkCliDataCacheArgv, clearDownstreamCatalogCache, cliBuildDriftDescription, cliCacheFingerprint, cliDataCacheKey, cliDataCacheMeta, cliDataCacheOptions, cliDataCachePathSegment, cliFirebaseEmulatorsInUse, cliFirestoreAccessorFactory, cliFirestoreBinding, cliFirestoreCollectionForQuery, cliFirestoreErrorMapper, cliFirestoreQueryConstraints, cliFirestoreQueryMode, cliFirestoreQueryModeForRules, cliFirestoreSdkIdentitySuggestion, cliFirestoreSessionEntryExpiresAt, cliFirestoreSessionErrorFactory, cliFirestoreSessionFetcher, cliFirestoreWiringError, cliLifecycleRunner, cliReadResultMeta, closeAllCliFirebaseApps, closeCliFirestoreSessionContext, coerceCliReadVia, collectClassPropertiesWithInheritance, computeRelativeSpecifiers, configureCliDataCacheOptions, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createActionCommand, createActionRegistry, createActionRegistryFromEntries, createAuthCommand, createAuthMiddleware, createAuthRegistryFromEntries, createCacheCommand, createCallModelCommand, createCli, createCliBuildDriftDoctorCheck, createCliContext, createCliDataCache, createCliFirestoreModels, createCliFirestoreQueryRegistry, createCliFirestoreSessionCacheStore, createCliFirestoreSessionContext, createCliTokenCacheStore, createContextSlot, createCssUtilityRegistry, createCssUtilityRegistryFromEntries, createDbxDocsUiExamplesRegistry, createDbxDocsUiExamplesRegistryFromEntries, createDoctorCommand, createEnvCommand, createFilterRegistry, createFilterRegistryFromEntries, createFirestoreSessionDoctorCheck, createForgeFieldRegistry, createForgeFieldRegistryFromEntries, createModelSnapshotFieldRegistry, createModelSnapshotFieldRegistryFromEntries, createOutputCommand, createOutputMiddleware, createPassthroughAuthMiddleware, createPipeRegistry, createPipeRegistryFromEntries, createSemanticTypeRegistry, createSemanticTypeRegistryFromEntries, createTokenRegistry, createTokenRegistryFromEntries, createUiComponentRegistry, createUiComponentRegistryFromEntries, createUtilRegistry, createUtilRegistryFromEntries, decodeFirestoreModelKey, defaultDoctorChecks, defaultGlobber, defaultReadFile, deriveOptionalFromName, describeCliFirestoreQueryMode, detectDataHelpFormat, detectHelpMode, discoverDownstreamFirebasePackages, discoverDownstreamPackages, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, extractActionEntries, extractAngularInputs, extractAngularOutputs, extractAuthEntries, extractComponentRouteModelTags, extractCssUtilityEntries, extractDbxDocsUiExampleEntries, extractEntries, extractFile, extractFilterEntries, extractForgeFieldEntries, extractModelSnapshotFieldEntries, extractModels, extractPipeEntries, extractUiEntries, extractUrlParamKeys, extractUtilEntries, fetchFirestoreSession, fetchSessionInfo, fetchUserInfo, filterCliFirestoreQueries, filterReadOnlyModelScopes, findAndLoadConfig, findCliEnvDefault, findCliModelManifestEntry, flattenList, formatGeneratedTs, fromCliCacheJson, getBundledManifestsDirectory, getCliContext, getCliEnvVarName, getCliTimeoutMs, getDefaultBundledActionManifestPaths, getDefaultBundledCssUtilityManifestPaths, getDefaultBundledDbxDocsUiExamplesManifestPaths, getDefaultBundledFilterManifestPaths, getDefaultBundledForgeFieldManifestPaths, getDefaultBundledManifestPaths, getDefaultBundledModelFirebaseIndexManifestPaths, getDefaultBundledModelSnapshotFieldManifestPaths, getDefaultBundledPipeManifestPaths, getDefaultBundledTokenManifestPaths, getDefaultBundledUiManifestPaths, getDefaultBundledUtilManifestPaths, getDownstreamCatalog, getFirebaseBucketKeyedByIdModels, getFirebaseDistrictKeyedByIdModels, getFirebaseExternalIdKeyedByIdModels, getFirebaseModel, getFirebaseModelByPrefix, getFirebaseModelGroup, getFirebaseModelGroups, getFirebaseModels, getFirebaseModelsByArchetype, getFirebasePrefixCatalog, getFirebaseRegionKeyedByIdModels, getFirebaseSubcollectionsOf, getFirebaseUserKeyedByIdModels, getFirebaseUserRelatedModels, getModelArchetypeBySlug, getModelArchetypesByAxisValue, getModelArchetypesByCollectionKind, getModelArchetypesBySyncMode, getModelOverFirestore, getModelOverHttp, getMultipleModelsOverFirestore, getMultipleModelsOverHttp, getMultipleModelsOverHttpChunked, getOutputOptions, globToRegex, hasParamSegment, indentLines$1 as indentLines, inspectCliBuildDrift, inspectCliFirestoreSdkIdentity, isCliEnvConfigComplete, isCliFirebaseConfigComplete, isCliFirestoreQueryInvocable, isCliFirestoreSessionExpired, isCliVerbose, isCoreTopic, isEntryExpired, isExportedFromPackage, isStdinPositionalSentinel, isStdinSentinel, isTokenExpired, isVisibleProperty, iterateDbxCliCallModel, loadActionManifests, loadActionRegistry, loadAuthRegistry, loadCliConfig, loadCssUtilityRegistry, loadDbxDocsUiExamplesManifests, loadDbxDocsUiExamplesRegistry, loadFilterManifests, loadFilterRegistry, loadForgeFieldManifests, loadForgeFieldRegistry, loadModelFirebaseIndexManifests, loadModelFirebaseIndexRegistry, loadModelSnapshotFieldManifests, loadModelSnapshotFieldRegistry, loadOrBuildCliCachedData, loadPackageName, loadPipeManifests, loadPipeRegistry, loadRouteTree, loadScanSection, loadSemanticTypeManifests, loadSemanticTypeRegistry, loadTokenManifests, loadTokenRegistry, loadUiComponentManifests, loadUiComponentRegistry, loadUtilManifests, loadUtilRegistry, maskEnv, maskSecret, matchUrlAgainstEntries, mcpManifestKey, mergeCliConfig, mergeCliEnvWithDefault, mergeCliFirebaseConfig, mergeOutputConfig, normalizeCliCacheFilter, normalizePathname, oidcRelyingPartyErrorToCliError, openStreamingDump, openUrlInBrowser, outputError, outputResult, packageNameToSlug, parseAnnotation, parseDeclarations$1 as parseDeclarations, parseFirestoreModelIdentityArgs, parseGetArgs, parseGetManyArgs, parseLoopbackRedirectUri, parsePastedRedirect, parseRouteModelTag, parseScanArgs, pickFields, promptLine, readAllStdin, readCliArtifactPackage, readDirectiveDecorator, readEnvTokenEntry, readPropertyDescription, readSelector, readStdinTokens, readStringProperty, refreshAccessToken, renderCliFirestoreQueryEntry, renderCliFirestoreQueryList, renderDecodedKey, renderGroupedImportLines, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, renderTable, requireCliContext, requireCliFirestoreContext, requireCliFirestoreModels, requireCliFirestoreSession, resolveActiveEnvName, resolveCliDataCacheOptions, resolveCliEnv, resolveCliEnvOrThrow, resolveCliFirestoreQueryArgs, resolveCliFirestoreQueryEntry, resolveCliModel, resolveCliReadSource, resolveComponentSourceFromSources, resolveDemoClaimsPath, resolveExplicitFirebasePackages, resolveExtendsName, resolveModelArchetype, resolveOutputConfig, resolveOxfmtConfig, resolvePerModelGetKey, resolveRouteSources, revokeToken, runActionsScanCli, runCli, runCliFirestoreQuery, runCssUtilitiesScanCli, runDbxDocsUiExamplesScanCli, runFiltersScanCli, runForgeFieldsScanCli, runModelFirebaseIndexScanCli, runModelSnapshotFieldsScanCli, runPaginatedList, runPipesScanCli, runScanCli, runScanCliBase, runUiComponentsScanCli, runUtilsScanCli, sanitizeString, saveCliConfig, scanFactoryReferences, scoreCandidates, serializeActionManifest, serializeCssUtilityManifest, serializeDbxDocsUiExamplesManifest, serializeFilterManifest, serializeForgeFieldManifest, serializeManifest, serializeModelSnapshotFieldsManifest, serializePipeManifest, serializeUiComponentManifest, serializeUtilManifest, setCliContext, setCliRawArgv, setCliTimeoutMs, setCliVerbose, splitListTagText$1 as splitListTagText, splitSegments, startLoopbackRedirectCapture, stripUrlQueryAndHash, toActionEntryInfo, toCliCacheJson, toFilterEntryInfo, toFormFieldInfo, tracedFetch, truncate, tryMatchSegments, unwrapFenced, validateMcpToolName, verboseLog, withCallModelArgs, withEnv, withMultiplePages, withOutput, withServiceTokenScopes, wrapCommandHandler, wrapSyncCommandHandler, writeGeneratedTsFile };
+export { ACTIONS_SCAN_CONFIG_FILENAME, ACTION_ENTRY_ROLES, ACTION_ROLE_ORDER, ActionDirectiveEntry, ActionEntry, ActionInputEntry, ActionManifest, ActionOutputEntry, ActionStateEntry, ActionStoreEntry, ActionStoreMethodEntry, ActionStoreObservableEntry, ActionsScanConfig, ActionsScanSection, BUILD_DRIFT_DOCTOR_CHECK_NAME, BUILTIN_AUTH_CLAIMS, BUILTIN_AUTH_ROLES, BUILTIN_AUTH_SCOPES, CALL_MODEL_API_PATH, CALL_PASSTHROUGH_COMMAND, CLI_CLIENT_FIRESTORE_DRIVER_IDENTIFIER, CLI_CONFIG_FILE_MODE, CLI_DATA_CACHE_CYCLE_ERROR_CODE, CLI_DATA_CACHE_FINGERPRINT_LENGTH, CLI_DATA_CACHE_GLOBAL_OPTION_NAMES, CLI_DATA_CACHE_INDEX_FILE_NAME, CLI_DATA_CACHE_SCHEMA_VERSION, CLI_DATA_CACHE_UNSUPPORTED_VALUE_ERROR_CODE, CLI_EXIT_CODE_AUTH, CLI_EXIT_CODE_HANDLER, CLI_FIRESTORE_QUERY_DATASET_PREFIX, CLI_FIRESTORE_QUERY_DATASET_VERSION, CLI_FIRESTORE_SESSION_EXPIRY_BUFFER_MS, CLI_FIRESTORE_SESSION_MAX_CACHE_MS, CLI_FRAMEWORK_PACKAGE_PREFIX, CLI_READ_VIA_EPILOGUE, CLI_READ_VIA_VALUES, CLI_TOKEN_CLAIM_ENDPOINT_PATH_PART, CORE_TOPICS, CORE_TOPICS_SET, CSS_UTILITIES_SCAN_CONFIG_FILENAME, CSS_UTILITY_ROLES, CSS_UTILITY_SCOPES, CliError, CssUtilitiesScanConfig, CssUtilitiesScanSection, CssUtilityDeclaration, CssUtilityEntry, CssUtilityManifest, DBX_ACTION_STATE_VALUES, DBX_DOCS_UI_EXAMPLES_SCAN_CONFIG_FILENAME, DBX_DOCS_UI_EXAMPLE_USE_KINDS, DEFAULT_ACTIONS_SCAN_OUT_PATH, DEFAULT_ACTION_COMMAND_NAME, DEFAULT_CLI_DATA_CACHE_CODEC, DEFAULT_CLI_DATA_CACHE_COMMAND_NAME, DEFAULT_CLI_DATA_CACHE_MAX_AGE_HOURS, DEFAULT_CLI_DATA_CACHE_OPTIONS, DEFAULT_CLI_FIREBASE_EMULATOR_HOST, DEFAULT_CLI_HTTP_TIMEOUT_MS, DEFAULT_CLI_OIDC_SCOPES, DEFAULT_CLI_READ_VIA, DEFAULT_CLI_REDIRECT_URI, DEFAULT_CLI_SECRET_PATTERNS, DEFAULT_CSS_UTILITIES_SCAN_OUT_PATH, DEFAULT_DBX_DOCS_UI_EXAMPLES_SCAN_OUT_PATH, DEFAULT_FILTERS_SCAN_OUT_PATH, DEFAULT_FIRESTORE_GET_COMMAND_NAME, DEFAULT_FIRESTORE_QUERIES_COMMAND_NAME, DEFAULT_FIRESTORE_QUERY_COMMAND_NAME, DEFAULT_FORGE_FIELDS_SCAN_OUT_PATH, DEFAULT_HANDOFF_ENV_NAME, DEFAULT_MANIFEST_HELP_DATA_FORMAT, DEFAULT_MANIFEST_HELP_MODE, DEFAULT_MANIFEST_MODEL_COMMAND_NAME, DEFAULT_MODEL_DECODE_COMMAND_NAME, DEFAULT_MODEL_INFO_COMMAND_NAME, DEFAULT_MODEL_SNAPSHOT_FIELDS_SCAN_OUT_PATH, DEFAULT_PIPES_SCAN_OUT_PATH, DEFAULT_SCAN_OUT_PATH, DEFAULT_SPECIFIER_KEY, DEFAULT_UI_COMPONENTS_SCAN_OUT_PATH, DEFAULT_UTILS_SCAN_OUT_PATH, DISABLED_CLI_DATA_CACHE_OPTIONS, DOWNSTREAM_CLUSTERS, DUMP_MERGE_MODES, DUMP_OUTPUT_MODES, DbxDocsUiExampleEntry, DbxDocsUiExampleManifest, DbxDocsUiExampleUseEntry, DbxDocsUiExamplesScanConfig, DbxDocsUiExamplesScanSection, DbxMcpConfig, EMPTY_ACTION_REGISTRY, EMPTY_AUTH_REGISTRY, EMPTY_CSS_UTILITY_REGISTRY, EMPTY_DBX_DOCS_UI_EXAMPLES_REGISTRY, EMPTY_FILTER_REGISTRY, EMPTY_FORGE_FIELD_REGISTRY, EMPTY_MODEL_SNAPSHOT_FIELD_REGISTRY, EMPTY_PIPE_REGISTRY, EMPTY_SEMANTIC_TYPE_REGISTRY, EMPTY_TOKEN_REGISTRY, EMPTY_UI_COMPONENT_REGISTRY, EMPTY_UTIL_REGISTRY, ExtractedDbxDocsUiExampleEntrySchema, ExtractedEntrySchema, ExtractedForgeFieldEntrySchema, ExtractedUiEntrySchema, FILTERS_SCAN_CONFIG_FILENAME, FILTER_KINDS, FILTER_KIND_ORDER, FIREBASE_MODELS, FIREBASE_MODEL_GROUPS, FIRESTORE_COLLECTION_UNRESOLVABLE_CODE, FIRESTORE_QUERY_PARENT_REQUIRED_CODE, FIRESTORE_QUERY_UNAVAILABLE_CODE, FIRESTORE_SDK_IDENTITY_STAGE, FIRESTORE_SDK_INSTANCE_MISMATCH_CODE, FIRESTORE_SESSION_DOCTOR_CHECK_NAME, FORGE_FIELDS_SCAN_CONFIG_FILENAME, FORGE_FIELD_ARRAY_OUTPUTS, FORGE_FIELD_COMPOSITE_SUFFIXES, FORGE_FIELD_TIERS, FORGE_FIELD_WRAPPER_PATTERNS, FORM_FIELDS, FORM_TIER_ORDER, FilterDirectiveEntry, FilterEntry, FilterInputEntry, FilterManifest, FilterPatternEntry, FiltersScanConfig, FiltersScanSection, ForgeFieldEntry, ForgeFieldManifest, ForgeFieldPropertyEntry, ForgeFieldsScanConfig, ForgeFieldsScanSection, GET_COMMAND, GET_MANY_COMMAND, LOOPBACK_REDIRECT_HOSTNAMES, LOOPBACK_REDIRECT_LISTEN_FAILED_ERROR_CODE, LOOPBACK_REDIRECT_TIMEOUT_ERROR_CODE, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MCP_CALL_TYPE_ABBREVIATIONS, MCP_MANIFEST_VERSION, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MODEL_ARCHETYPES, MODEL_ARCHETYPE_ADDON_SLUGS, MODEL_ARCHETYPE_SYNC_MODES, MODEL_IS_SERVER_ONLY_CODE, MODEL_SNAPSHOT_FIELDS_SCAN_CONFIG_FILENAME, MODEL_SNAPSHOT_FIELD_KINDS, MODEL_WRITE_OIDC_SCOPES, MULTIPLE_PAGES_OUTPUT_MODES, ModelSnapshotFieldEntry, ModelSnapshotFieldManifest, ModelSnapshotFieldParamEntry, ModelSnapshotFieldsScanConfig, ModelSnapshotFieldsScanSection, PIPES_SCAN_CONFIG_FILENAME, PIPE_CATEGORIES, PIPE_CATEGORY_ORDER, PIPE_PURITIES, PROMPT_CANCELLED_ERROR_CODE, PipeArgEntry, PipeEntry, PipeManifest, PipesScanConfig, PipesScanSection, RESERVED_MODEL_FOLDERS, ROUTE_MANIFEST_VERSION, ROUTE_MODEL_LIST_TAG, ROUTE_MODEL_TAG, SCAN_CONFIG_FILENAME$1 as SCAN_CONFIG_FILENAME, SERVICE_TOKEN_REQUIRED_OIDC_SCOPES, STANDARD_GLOBAL_OPTION_NAMES, STDIN_NOT_PIPED_ERROR_CODE, SUGGESTED_CLI_LOOPBACK_REDIRECT_PORT, SemanticTypeEntry, SemanticTypeManifest, SemanticTypeScanConfig, TOKEN_ROLES, TOKEN_SOURCES, TokenDefaults, TokenEntry, TokenManifest, UI_COMPONENTS_SCAN_CONFIG_FILENAME, UI_COMPONENT_CATEGORIES, UI_COMPONENT_KINDS, UTILS_SCAN_CONFIG_FILENAME, UTIL_KINDS, UiComponentEntry, UiComponentInputEntry, UiComponentManifest, UiComponentOutputEntry, UiComponentsScanConfig, UiComponentsScanSection, UtilEntry, UtilManifest, UtilParamEntry, UtilsScanConfig, UtilsScanSection, WORKSPACE_AUTH_APPS, WORKSPACE_AUTH_CLAIMS, WORKSPACE_FACTORY_SCAN_EXCLUDE, WORKSPACE_FACTORY_SCAN_INCLUDE, abbreviateMcpCallType, appendCliErrorMapper, applyEnvVarOverrides, assertCliFirestoreQueryCanRun, assertCliFirestoreQueryParentKey, assertCliModelIsNotServerOnly, buildActionCommands, buildActionsManifest, buildAuthorizationUrl, buildCliHandoffClaimEndpoint, buildCliPaths, buildCssUtilitiesManifest, buildDbxDocsUiExamplesManifest, buildDisambiguatedMcpToolName, buildDispatcherCreditByName, buildDumpFilePath, buildErrorOutput, buildFiltersManifest, buildFirestoreGetCommand, buildFirestoreQueriesCommand, buildFirestoreQueryCommand, buildFirestoreSessionDoctorReadRouting, buildForgeFieldsManifest, buildManifest, buildManifestCommands, buildMcpToolName, buildModelDecodeCommand, buildModelInfoCommand, buildModelSnapshotFieldsManifest, buildPipesManifest, buildRouteManifest, buildRouteTree, buildScanProject, buildUiComponentsManifest, buildUtilsManifest, callModelOverHttp, canonicalCliCacheJson, checkCliDataCacheArgv, claimCliHandoff, clearDownstreamCatalogCache, cliBuildDriftDescription, cliCacheFingerprint, cliDataCacheKey, cliDataCacheMeta, cliDataCacheOptions, cliDataCachePathSegment, cliFirebaseEmulatorsInUse, cliFirestoreAccessorFactory, cliFirestoreBinding, cliFirestoreCollectionForQuery, cliFirestoreErrorMapper, cliFirestoreQueryConstraints, cliFirestoreQueryMode, cliFirestoreQueryModeForRules, cliFirestoreSdkIdentitySuggestion, cliFirestoreSessionEntryExpiresAt, cliFirestoreSessionErrorFactory, cliFirestoreSessionFetcher, cliFirestoreWiringError, cliIssuersMatch, cliLifecycleRunner, cliReadResultMeta, closeAllCliFirebaseApps, closeCliFirestoreSessionContext, coerceCliReadVia, collectClassPropertiesWithInheritance, computeRelativeSpecifiers, configureCliDataCacheOptions, configureCliErrorMapper, configureCliSecretPatterns, configureOutputOptions, createActionCommand, createActionRegistry, createActionRegistryFromEntries, createAuthCommand, createAuthMiddleware, createAuthRegistryFromEntries, createCacheCommand, createCallModelCommand, createCli, createCliBuildDriftDoctorCheck, createCliContext, createCliDataCache, createCliFirestoreModels, createCliFirestoreQueryRegistry, createCliFirestoreSessionCacheStore, createCliFirestoreSessionContext, createCliTokenCacheStore, createContextSlot, createCssUtilityRegistry, createCssUtilityRegistryFromEntries, createDbxDocsUiExamplesRegistry, createDbxDocsUiExamplesRegistryFromEntries, createDoctorCommand, createEnvCommand, createFilterRegistry, createFilterRegistryFromEntries, createFirestoreSessionDoctorCheck, createForgeFieldRegistry, createForgeFieldRegistryFromEntries, createModelSnapshotFieldRegistry, createModelSnapshotFieldRegistryFromEntries, createOutputCommand, createOutputMiddleware, createPassthroughAuthMiddleware, createPipeRegistry, createPipeRegistryFromEntries, createSemanticTypeRegistry, createSemanticTypeRegistryFromEntries, createTokenRegistry, createTokenRegistryFromEntries, createUiComponentRegistry, createUiComponentRegistryFromEntries, createUtilRegistry, createUtilRegistryFromEntries, decodeFirestoreModelKey, defaultDoctorChecks, defaultGlobber, defaultReadFile, deriveOptionalFromName, describeCliFirestoreQueryMode, detectDataHelpFormat, detectHelpMode, discoverDownstreamFirebasePackages, discoverDownstreamPackages, discoverOidcMetadata, dumpTimestamp, exchangeAuthorizationCode, expandModelKeys, extractActionEntries, extractAngularInputs, extractAngularOutputs, extractAuthEntries, extractComponentRouteModelTags, extractCssUtilityEntries, extractDbxDocsUiExampleEntries, extractEntries, extractFile, extractFilterEntries, extractForgeFieldEntries, extractModelSnapshotFieldEntries, extractModels, extractPipeEntries, extractUiEntries, extractUrlParamKeys, extractUtilEntries, fetchFirestoreSession, fetchSessionInfo, fetchUserInfo, filterCliFirestoreQueries, filterReadOnlyModelScopes, findAndLoadConfig, findCliEnvDefault, findCliModelManifestEntry, flattenList, formatGeneratedTs, fromCliCacheJson, getBundledManifestsDirectory, getCliContext, getCliEnvVarName, getCliTimeoutMs, getDefaultBundledActionManifestPaths, getDefaultBundledCssUtilityManifestPaths, getDefaultBundledDbxDocsUiExamplesManifestPaths, getDefaultBundledFilterManifestPaths, getDefaultBundledForgeFieldManifestPaths, getDefaultBundledManifestPaths, getDefaultBundledModelFirebaseIndexManifestPaths, getDefaultBundledModelSnapshotFieldManifestPaths, getDefaultBundledPipeManifestPaths, getDefaultBundledTokenManifestPaths, getDefaultBundledUiManifestPaths, getDefaultBundledUtilManifestPaths, getDownstreamCatalog, getFirebaseBucketKeyedByIdModels, getFirebaseDistrictKeyedByIdModels, getFirebaseExternalIdKeyedByIdModels, getFirebaseModel, getFirebaseModelByPrefix, getFirebaseModelGroup, getFirebaseModelGroups, getFirebaseModels, getFirebaseModelsByArchetype, getFirebasePrefixCatalog, getFirebaseRegionKeyedByIdModels, getFirebaseSubcollectionsOf, getFirebaseUserKeyedByIdModels, getFirebaseUserRelatedModels, getModelArchetypeBySlug, getModelArchetypesByAxisValue, getModelArchetypesByCollectionKind, getModelArchetypesBySyncMode, getModelOverFirestore, getModelOverHttp, getMultipleModelsOverFirestore, getMultipleModelsOverHttp, getMultipleModelsOverHttpChunked, getOutputOptions, globToRegex, hasParamSegment, indentLines$1 as indentLines, inspectCliBuildDrift, inspectCliFirestoreSdkIdentity, isCliEnvConfigComplete, isCliFirebaseConfigComplete, isCliFirestoreQueryInvocable, isCliFirestoreSessionExpired, isCliVerbose, isCoreTopic, isEntryExpired, isExportedFromPackage, isStdinPositionalSentinel, isStdinSentinel, isTokenExpired, isVisibleProperty, iterateDbxCliCallModel, loadActionManifests, loadActionRegistry, loadAuthRegistry, loadCliConfig, loadCssUtilityRegistry, loadDbxDocsUiExamplesManifests, loadDbxDocsUiExamplesRegistry, loadFilterManifests, loadFilterRegistry, loadForgeFieldManifests, loadForgeFieldRegistry, loadModelFirebaseIndexManifests, loadModelFirebaseIndexRegistry, loadModelSnapshotFieldManifests, loadModelSnapshotFieldRegistry, loadOrBuildCliCachedData, loadPackageName, loadPipeManifests, loadPipeRegistry, loadRouteTree, loadScanSection, loadSemanticTypeManifests, loadSemanticTypeRegistry, loadTokenManifests, loadTokenRegistry, loadUiComponentManifests, loadUiComponentRegistry, loadUtilManifests, loadUtilRegistry, maskEnv, maskSecret, matchUrlAgainstEntries, mcpManifestKey, mergeCliConfig, mergeCliEnvWithDefault, mergeCliFirebaseConfig, mergeOutputConfig, normalizeCliCacheFilter, normalizePathname, oidcRelyingPartyErrorToCliError, openStreamingDump, openUrlInBrowser, outputError, outputResult, packageNameToSlug, parseAnnotation, parseDeclarations$1 as parseDeclarations, parseFirestoreModelIdentityArgs, parseGetArgs, parseGetManyArgs, parseLoopbackRedirectUri, parsePastedRedirect, parseRouteModelTag, parseScanArgs, pickFields, promptLine, readAllStdin, readCliArtifactPackage, readDirectiveDecorator, readEnvTokenEntry, readPropertyDescription, readSelector, readStdinTokens, readStringProperty, refreshAccessToken, renderCliFirestoreQueryEntry, renderCliFirestoreQueryList, renderDecodedKey, renderGroupedImportLines, renderModelManifestEntry, renderModelManifestFields, renderModelManifestList, renderTable, requireCliContext, requireCliFirestoreContext, requireCliFirestoreModels, requireCliFirestoreSession, resolveActiveEnvName, resolveCliDataCacheOptions, resolveCliEnv, resolveCliEnvOrThrow, resolveCliFirestoreQueryArgs, resolveCliFirestoreQueryEntry, resolveCliModel, resolveCliReadSource, resolveComponentSourceFromSources, resolveDemoClaimsPath, resolveExplicitFirebasePackages, resolveExtendsName, resolveModelArchetype, resolveOutputConfig, resolveOxfmtConfig, resolvePerModelGetKey, resolveRouteSources, revokeToken, runActionsScanCli, runCli, runCliFirestoreQuery, runCssUtilitiesScanCli, runDbxDocsUiExamplesScanCli, runFiltersScanCli, runForgeFieldsScanCli, runModelFirebaseIndexScanCli, runModelSnapshotFieldsScanCli, runPaginatedList, runPipesScanCli, runScanCli, runScanCliBase, runUiComponentsScanCli, runUtilsScanCli, sanitizeString, sanitizeTypeText, saveCliConfig, scanFactoryReferences, scoreCandidates, serializeActionManifest, serializeCssUtilityManifest, serializeDbxDocsUiExamplesManifest, serializeFilterManifest, serializeForgeFieldManifest, serializeManifest, serializeModelSnapshotFieldsManifest, serializePipeManifest, serializeUiComponentManifest, serializeUtilManifest, setCliContext, setCliRawArgv, setCliTimeoutMs, setCliVerbose, splitListTagText$1 as splitListTagText, splitSegments, startLoopbackRedirectCapture, stripUrlQueryAndHash, toActionEntryInfo, toCliCacheJson, toFilterEntryInfo, toFormFieldInfo, tracedFetch, truncate, tryMatchSegments, unwrapFenced, validateMcpToolName, verboseLog, withCallModelArgs, withEnv, withMultiplePages, withOutput, withServiceTokenScopes, wrapCommandHandler, wrapSyncCommandHandler, writeGeneratedTsFile };