@lotics/cli 0.34.0 → 0.36.0

package/dist/src/cli.js

@@ -120,7 +120,7 @@ var require_helpers = __commonJS({
        * @returns {*}
        */
       flattenDeep(arr1) {
-        return arr1.reduce((acc, val2) => Array.isArray(val2) ? acc.concat(this.flattenDeep(val2)) : acc.concat(val2), []);
+        return arr1.reduce((acc, val) => Array.isArray(val) ? acc.concat(this.flattenDeep(val)) : acc.concat(val), []);
       }
       /**
        *
@@ -768,11 +768,11 @@ var require_ssf = __commonJS({
     function fix_hijri() {
       return 0;
     }
-    function write_date(type, fmt, val2, ss0) {
-      let o = "", ss = 0, tt = 0, y = val2.y, out, outl = 0;
+    function write_date(type, fmt, val, ss0) {
+      let o = "", ss = 0, tt = 0, y = val.y, out, outl = 0;
       switch (type) {
         case 98:
-          y = val2.y + 543;
+          y = val.y + 543;
         /* falls through */
         case 121:
           switch (fmt.length) {
@@ -791,35 +791,35 @@ var require_ssf = __commonJS({
           switch (fmt.length) {
             case 1:
             case 2:
-              out = val2.m;
+              out = val.m;
               outl = fmt.length;
               break;
             case 3:
-              return months[val2.m - 1][1];
+              return months[val.m - 1][1];
             case 5:
-              return months[val2.m - 1][0];
+              return months[val.m - 1][0];
             default:
-              return months[val2.m - 1][2];
+              return months[val.m - 1][2];
           }
           break;
         case 100:
           switch (fmt.length) {
             case 1:
             case 2:
-              out = val2.d;
+              out = val.d;
               outl = fmt.length;
               break;
             case 3:
-              return days[val2.q][0];
+              return days[val.q][0];
             default:
-              return days[val2.q][1];
+              return days[val.q][1];
           }
           break;
         case 104:
           switch (fmt.length) {
             case 1:
             case 2:
-              out = 1 + (val2.H + 11) % 12;
+              out = 1 + (val.H + 11) % 12;
               outl = fmt.length;
               break;
             default:
@@ -830,7 +830,7 @@ var require_ssf = __commonJS({
           switch (fmt.length) {
             case 1:
             case 2:
-              out = val2.H;
+              out = val.H;
               outl = fmt.length;
               break;
             default:
@@ -841,7 +841,7 @@ var require_ssf = __commonJS({
           switch (fmt.length) {
             case 1:
             case 2:
-              out = val2.M;
+              out = val.M;
               outl = fmt.length;
               break;
             default:
@@ -850,10 +850,10 @@ var require_ssf = __commonJS({
           break;
         case 115:
           if (fmt !== "s" && fmt !== "ss" && fmt !== ".0" && fmt !== ".00" && fmt !== ".000") throw "bad second format: " + fmt;
-          if (val2.u === 0 && (fmt === "s" || fmt === "ss")) return pad0(val2.S, fmt.length);
+          if (val.u === 0 && (fmt === "s" || fmt === "ss")) return pad0(val.S, fmt.length);
           if (ss0 >= 2) tt = ss0 === 3 ? 1e3 : 100;
           else tt = ss0 === 1 ? 10 : 1;
-          ss = Math.round(tt * (val2.S + val2.u));
+          ss = Math.round(tt * (val.S + val.u));
           if (ss >= 60 * tt) ss = 0;
           if (fmt === "s") return ss === 0 ? "0" : "" + ss / tt;
           o = pad0(ss, 2 + ss0);
@@ -863,15 +863,15 @@ var require_ssf = __commonJS({
           switch (fmt) {
             case "[h]":
             case "[hh]":
-              out = val2.D * 24 + val2.H;
+              out = val.D * 24 + val.H;
               break;
             case "[m]":
             case "[mm]":
-              out = (val2.D * 24 + val2.H) * 60 + val2.M;
+              out = (val.D * 24 + val.H) * 60 + val.M;
               break;
             case "[s]":
             case "[ss]":
-              out = ((val2.D * 24 + val2.H) * 60 + val2.M) * 60 + Math.round(val2.S + val2.u);
+              out = ((val.D * 24 + val.H) * 60 + val.M) * 60 + Math.round(val.S + val.u);
               break;
             default:
               throw "bad abstime format: " + fmt;
@@ -894,28 +894,28 @@ var require_ssf = __commonJS({
     }
     var write_num = /* @__PURE__ */ (function make_write_num() {
       const pct1 = /%/g;
-      function write_num_pct(type, fmt, val2) {
+      function write_num_pct(type, fmt, val) {
         const sfmt = fmt.replace(pct1, ""), mul = fmt.length - sfmt.length;
-        return write_num(type, sfmt, val2 * Math.pow(10, 2 * mul)) + fill("%", mul);
+        return write_num(type, sfmt, val * Math.pow(10, 2 * mul)) + fill("%", mul);
       }
-      function write_num_cm(type, fmt, val2) {
+      function write_num_cm(type, fmt, val) {
         let idx = fmt.length - 1;
         while (fmt.charCodeAt(idx - 1) === 44) --idx;
-        return write_num(type, fmt.substr(0, idx), val2 / Math.pow(10, 3 * (fmt.length - idx)));
+        return write_num(type, fmt.substr(0, idx), val / Math.pow(10, 3 * (fmt.length - idx)));
       }
-      function write_num_exp(fmt, val2) {
+      function write_num_exp(fmt, val) {
         let o;
         let idx = fmt.indexOf("E") - fmt.indexOf(".") - 1;
         if (fmt.match(/^#+0.0E\+0$/)) {
-          if (val2 === 0) return "0.0E+0";
-          else if (val2 < 0) return "-" + write_num_exp(fmt, -val2);
+          if (val === 0) return "0.0E+0";
+          else if (val < 0) return "-" + write_num_exp(fmt, -val);
           let period = fmt.indexOf(".");
           if (period === -1) period = fmt.indexOf("E");
-          let ee = Math.floor(Math.log(val2) * Math.LOG10E) % period;
+          let ee = Math.floor(Math.log(val) * Math.LOG10E) % period;
           if (ee < 0) ee += period;
-          o = (val2 / Math.pow(10, ee)).toPrecision(idx + 1 + (period + ee) % period);
+          o = (val / Math.pow(10, ee)).toPrecision(idx + 1 + (period + ee) % period);
           if (o.indexOf("e") === -1) {
-            const fakee = Math.floor(Math.log(val2) * Math.LOG10E);
+            const fakee = Math.floor(Math.log(val) * Math.LOG10E);
             if (o.indexOf(".") === -1) o = o.charAt(0) + "." + o.substr(1) + "E+" + (fakee - o.length + ee);
             else o += "E+" + (fakee - ee);
             while (o.substr(0, 2) === "0.") {
@@ -927,7 +927,7 @@ var require_ssf = __commonJS({
           o = o.replace(/^([+-]?)(\d*)\.(\d*)[Ee]/, function($$, $1, $2, $3) {
             return $1 + $2 + $3.substr(0, (period + ee) % period) + "." + $3.substr(ee) + "E";
           });
-        } else o = val2.toExponential(idx);
+        } else o = val.toExponential(idx);
         if (fmt.match(/E\+00$/) && o.match(/e[+-]\d$/)) o = o.substr(0, o.length - 1) + "0" + o.charAt(o.length - 1);
         if (fmt.match(/E\-/) && o.match(/e\+/)) o = o.replace(/e\+/, "e");
         return o.replace("e", "E");
@@ -960,48 +960,48 @@ var require_ssf = __commonJS({
         }
         return o;
       }
-      function rnd(val2, d) {
+      function rnd(val, d) {
         const dd = Math.pow(10, d);
-        return "" + Math.round(val2 * dd) / dd;
+        return "" + Math.round(val * dd) / dd;
       }
-      function dec(val2, d) {
-        if (d < ("" + Math.round((val2 - Math.floor(val2)) * Math.pow(10, d))).length) {
+      function dec(val, d) {
+        if (d < ("" + Math.round((val - Math.floor(val)) * Math.pow(10, d))).length) {
           return 0;
         }
-        return Math.round((val2 - Math.floor(val2)) * Math.pow(10, d));
+        return Math.round((val - Math.floor(val)) * Math.pow(10, d));
       }
-      function carry(val2, d) {
-        if (d < ("" + Math.round((val2 - Math.floor(val2)) * Math.pow(10, d))).length) {
+      function carry(val, d) {
+        if (d < ("" + Math.round((val - Math.floor(val)) * Math.pow(10, d))).length) {
           return 1;
         }
         return 0;
       }
-      function flr(val2) {
-        if (val2 < 2147483647 && val2 > -2147483648) return "" + (val2 >= 0 ? val2 | 0 : val2 - 1 | 0);
-        return "" + Math.floor(val2);
+      function flr(val) {
+        if (val < 2147483647 && val > -2147483648) return "" + (val >= 0 ? val | 0 : val - 1 | 0);
+        return "" + Math.floor(val);
       }
-      function write_num_flt(type, fmt, val2) {
+      function write_num_flt(type, fmt, val) {
         if (type.charCodeAt(0) === 40 && !fmt.match(closeparen)) {
           const ffmt = fmt.replace(/\( */, "").replace(/ \)/, "").replace(/\)/, "");
-          if (val2 >= 0) return write_num_flt("n", ffmt, val2);
-          return "(" + write_num_flt("n", ffmt, -val2) + ")";
+          if (val >= 0) return write_num_flt("n", ffmt, val);
+          return "(" + write_num_flt("n", ffmt, -val) + ")";
         }
-        if (fmt.charCodeAt(fmt.length - 1) === 44) return write_num_cm(type, fmt, val2);
-        if (fmt.indexOf("%") !== -1) return write_num_pct(type, fmt, val2);
-        if (fmt.indexOf("E") !== -1) return write_num_exp(fmt, val2);
-        if (fmt.charCodeAt(0) === 36) return "$" + write_num_flt(type, fmt.substr(fmt.charAt(1) == " " ? 2 : 1), val2);
+        if (fmt.charCodeAt(fmt.length - 1) === 44) return write_num_cm(type, fmt, val);
+        if (fmt.indexOf("%") !== -1) return write_num_pct(type, fmt, val);
+        if (fmt.indexOf("E") !== -1) return write_num_exp(fmt, val);
+        if (fmt.charCodeAt(0) === 36) return "$" + write_num_flt(type, fmt.substr(fmt.charAt(1) == " " ? 2 : 1), val);
         let o;
-        let r, ri, ff, aval = Math.abs(val2), sign = val2 < 0 ? "-" : "";
+        let r, ri, ff, aval = Math.abs(val), sign = val < 0 ? "-" : "";
         if (fmt.match(/^00+$/)) return sign + pad0r(aval, fmt.length);
         if (fmt.match(/^[#?]+$/)) {
-          o = pad0r(val2, 0);
+          o = pad0r(val, 0);
           if (o === "0") o = "";
           return o.length > fmt.length ? o : hashq(fmt.substr(0, fmt.length - o.length)) + o;
         }
         if (r = fmt.match(frac1)) return write_num_f1(r, aval, sign);
         if (fmt.match(/^#+0+$/)) return sign + pad0r(aval, fmt.length - fmt.indexOf("0"));
         if (r = fmt.match(dec1)) {
-          o = rnd(val2, r[1].length).replace(/^([^\.]+)$/, "$1." + hashq(r[1])).replace(/\.$/, "." + hashq(r[1])).replace(/\.(\d*)$/, function($$, $1) {
+          o = rnd(val, r[1].length).replace(/^([^\.]+)$/, "$1." + hashq(r[1])).replace(/\.$/, "." + hashq(r[1])).replace(/\.(\d*)$/, function($$, $1) {
             return "." + $1 + fill("0", hashq(r[1]).length - $1.length);
           });
           return fmt.indexOf("0.") !== -1 ? o : o.replace(/^0\./, ".");
@@ -1012,18 +1012,18 @@ var require_ssf = __commonJS({
         }
         if (r = fmt.match(/^#{1,3},##0(\.?)$/)) return sign + commaify(pad0r(aval, 0));
         if (r = fmt.match(/^#,##0\.([#0]*0)$/)) {
-          return val2 < 0 ? "-" + write_num_flt(type, fmt, -val2) : commaify("" + (Math.floor(val2) + carry(val2, r[1].length))) + "." + pad0(dec(val2, r[1].length), r[1].length);
+          return val < 0 ? "-" + write_num_flt(type, fmt, -val) : commaify("" + (Math.floor(val) + carry(val, r[1].length))) + "." + pad0(dec(val, r[1].length), r[1].length);
         }
-        if (r = fmt.match(/^#,#*,#0/)) return write_num_flt(type, fmt.replace(/^#,#*,/, ""), val2);
+        if (r = fmt.match(/^#,#*,#0/)) return write_num_flt(type, fmt.replace(/^#,#*,/, ""), val);
         if (r = fmt.match(/^([0#]+)(\\?-([0#]+))+$/)) {
-          o = _strrev(write_num_flt(type, fmt.replace(/[\\-]/g, ""), val2));
+          o = _strrev(write_num_flt(type, fmt.replace(/[\\-]/g, ""), val));
           ri = 0;
           return _strrev(_strrev(fmt.replace(/\\/g, "")).replace(/[0#]/g, function(x) {
             return ri < o.length ? o.charAt(ri++) : x === "0" ? "0" : "";
           }));
         }
         if (fmt.match(phone)) {
-          o = write_num_flt(type, "##########", val2);
+          o = write_num_flt(type, "##########", val);
           return "(" + o.substr(0, 3) + ") " + o.substr(3, 3) + "-" + o.substr(6);
         }
         let oa = "";
@@ -1045,60 +1045,60 @@ var require_ssf = __commonJS({
           return sign + (ff[0] || (ff[1] ? "" : "0")) + " " + (ff[1] ? pad_(ff[1], ri) + r[2] + "/" + r[3] + rpad_(ff[2], ri) : fill(" ", 2 * ri + 1 + r[2].length + r[3].length));
         }
         if (r = fmt.match(/^[#0?]+$/)) {
-          o = pad0r(val2, 0);
+          o = pad0r(val, 0);
           if (fmt.length <= o.length) return o;
           return hashq(fmt.substr(0, fmt.length - o.length)) + o;
         }
         if (r = fmt.match(/^([#0?]+)\.([#0]+)$/)) {
-          o = "" + val2.toFixed(Math.min(r[2].length, 10)).replace(/([^0])0+$/, "$1");
+          o = "" + val.toFixed(Math.min(r[2].length, 10)).replace(/([^0])0+$/, "$1");
           ri = o.indexOf(".");
           const lres = fmt.indexOf(".") - ri, rres = fmt.length - o.length - lres;
           return hashq(fmt.substr(0, lres) + o + fmt.substr(fmt.length - rres));
         }
         if (r = fmt.match(/^00,000\.([#0]*0)$/)) {
-          ri = dec(val2, r[1].length);
-          return val2 < 0 ? "-" + write_num_flt(type, fmt, -val2) : commaify(flr(val2)).replace(/^\d,\d{3}$/, "0$&").replace(/^\d*$/, function($$) {
+          ri = dec(val, r[1].length);
+          return val < 0 ? "-" + write_num_flt(type, fmt, -val) : commaify(flr(val)).replace(/^\d,\d{3}$/, "0$&").replace(/^\d*$/, function($$) {
             return "00," + ($$.length < 3 ? pad0(0, 3 - $$.length) : "") + $$;
           }) + "." + pad0(ri, r[1].length);
         }
         switch (fmt) {
           case "###,##0.00":
-            return write_num_flt(type, "#,##0.00", val2);
+            return write_num_flt(type, "#,##0.00", val);
           case "###,###":
           case "##,###":
           case "#,###":
             const x = commaify(pad0r(aval, 0));
             return x !== "0" ? sign + x : "";
           case "###,###.00":
-            return write_num_flt(type, "###,##0.00", val2).replace(/^0\./, ".");
+            return write_num_flt(type, "###,##0.00", val).replace(/^0\./, ".");
           case "#,###.00":
-            return write_num_flt(type, "#,##0.00", val2).replace(/^0\./, ".");
+            return write_num_flt(type, "#,##0.00", val).replace(/^0\./, ".");
           default:
         }
         throw new Error("unsupported format |" + fmt + "|");
       }
-      function write_num_cm2(type, fmt, val2) {
+      function write_num_cm2(type, fmt, val) {
         let idx = fmt.length - 1;
         while (fmt.charCodeAt(idx - 1) === 44) --idx;
-        return write_num(type, fmt.substr(0, idx), val2 / Math.pow(10, 3 * (fmt.length - idx)));
+        return write_num(type, fmt.substr(0, idx), val / Math.pow(10, 3 * (fmt.length - idx)));
       }
-      function write_num_pct2(type, fmt, val2) {
+      function write_num_pct2(type, fmt, val) {
         const sfmt = fmt.replace(pct1, ""), mul = fmt.length - sfmt.length;
-        return write_num(type, sfmt, val2 * Math.pow(10, 2 * mul)) + fill("%", mul);
+        return write_num(type, sfmt, val * Math.pow(10, 2 * mul)) + fill("%", mul);
       }
-      function write_num_exp2(fmt, val2) {
+      function write_num_exp2(fmt, val) {
         let o;
         let idx = fmt.indexOf("E") - fmt.indexOf(".") - 1;
         if (fmt.match(/^#+0.0E\+0$/)) {
-          if (val2 === 0) return "0.0E+0";
-          else if (val2 < 0) return "-" + write_num_exp2(fmt, -val2);
+          if (val === 0) return "0.0E+0";
+          else if (val < 0) return "-" + write_num_exp2(fmt, -val);
           let period = fmt.indexOf(".");
           if (period === -1) period = fmt.indexOf("E");
-          let ee = Math.floor(Math.log(val2) * Math.LOG10E) % period;
+          let ee = Math.floor(Math.log(val) * Math.LOG10E) % period;
           if (ee < 0) ee += period;
-          o = (val2 / Math.pow(10, ee)).toPrecision(idx + 1 + (period + ee) % period);
+          o = (val / Math.pow(10, ee)).toPrecision(idx + 1 + (period + ee) % period);
           if (!o.match(/[Ee]/)) {
-            const fakee = Math.floor(Math.log(val2) * Math.LOG10E);
+            const fakee = Math.floor(Math.log(val) * Math.LOG10E);
             if (o.indexOf(".") === -1) o = o.charAt(0) + "." + o.substr(1) + "E+" + (fakee - o.length + ee);
             else o += "E+" + (fakee - ee);
             o = o.replace(/\+-/, "-");
@@ -1106,33 +1106,33 @@ var require_ssf = __commonJS({
           o = o.replace(/^([+-]?)(\d*)\.(\d*)[Ee]/, function($$, $1, $2, $3) {
             return $1 + $2 + $3.substr(0, (period + ee) % period) + "." + $3.substr(ee) + "E";
           });
-        } else o = val2.toExponential(idx);
+        } else o = val.toExponential(idx);
         if (fmt.match(/E\+00$/) && o.match(/e[+-]\d$/)) o = o.substr(0, o.length - 1) + "0" + o.charAt(o.length - 1);
         if (fmt.match(/E\-/) && o.match(/e\+/)) o = o.replace(/e\+/, "e");
         return o.replace("e", "E");
       }
-      function write_num_int(type, fmt, val2) {
+      function write_num_int(type, fmt, val) {
         if (type.charCodeAt(0) === 40 && !fmt.match(closeparen)) {
           const ffmt = fmt.replace(/\( */, "").replace(/ \)/, "").replace(/\)/, "");
-          if (val2 >= 0) return write_num_int("n", ffmt, val2);
-          return "(" + write_num_int("n", ffmt, -val2) + ")";
+          if (val >= 0) return write_num_int("n", ffmt, val);
+          return "(" + write_num_int("n", ffmt, -val) + ")";
         }
-        if (fmt.charCodeAt(fmt.length - 1) === 44) return write_num_cm2(type, fmt, val2);
-        if (fmt.indexOf("%") !== -1) return write_num_pct2(type, fmt, val2);
-        if (fmt.indexOf("E") !== -1) return write_num_exp2(fmt, val2);
-        if (fmt.charCodeAt(0) === 36) return "$" + write_num_int(type, fmt.substr(fmt.charAt(1) == " " ? 2 : 1), val2);
+        if (fmt.charCodeAt(fmt.length - 1) === 44) return write_num_cm2(type, fmt, val);
+        if (fmt.indexOf("%") !== -1) return write_num_pct2(type, fmt, val);
+        if (fmt.indexOf("E") !== -1) return write_num_exp2(fmt, val);
+        if (fmt.charCodeAt(0) === 36) return "$" + write_num_int(type, fmt.substr(fmt.charAt(1) == " " ? 2 : 1), val);
         let o;
-        let r, ri, ff, aval = Math.abs(val2), sign = val2 < 0 ? "-" : "";
+        let r, ri, ff, aval = Math.abs(val), sign = val < 0 ? "-" : "";
         if (fmt.match(/^00+$/)) return sign + pad0(aval, fmt.length);
         if (fmt.match(/^[#?]+$/)) {
-          o = "" + val2;
-          if (val2 === 0) o = "";
+          o = "" + val;
+          if (val === 0) o = "";
           return o.length > fmt.length ? o : hashq(fmt.substr(0, fmt.length - o.length)) + o;
         }
         if (r = fmt.match(frac1)) return write_num_f2(r, aval, sign);
         if (fmt.match(/^#+0+$/)) return sign + pad0(aval, fmt.length - fmt.indexOf("0"));
         if (r = fmt.match(dec1)) {
-          o = ("" + val2).replace(/^([^\.]+)$/, "$1." + hashq(r[1])).replace(/\.$/, "." + hashq(r[1]));
+          o = ("" + val).replace(/^([^\.]+)$/, "$1." + hashq(r[1])).replace(/\.$/, "." + hashq(r[1]));
           o = o.replace(/\.(\d*)$/, function($$, $1) {
             return "." + $1 + fill("0", hashq(r[1]).length - $1.length);
           });
@@ -1144,18 +1144,18 @@ var require_ssf = __commonJS({
         }
         if (r = fmt.match(/^#{1,3},##0(\.?)$/)) return sign + commaify("" + aval);
         if (r = fmt.match(/^#,##0\.([#0]*0)$/)) {
-          return val2 < 0 ? "-" + write_num_int(type, fmt, -val2) : commaify("" + val2) + "." + fill("0", r[1].length);
+          return val < 0 ? "-" + write_num_int(type, fmt, -val) : commaify("" + val) + "." + fill("0", r[1].length);
         }
-        if (r = fmt.match(/^#,#*,#0/)) return write_num_int(type, fmt.replace(/^#,#*,/, ""), val2);
+        if (r = fmt.match(/^#,#*,#0/)) return write_num_int(type, fmt.replace(/^#,#*,/, ""), val);
         if (r = fmt.match(/^([0#]+)(\\?-([0#]+))+$/)) {
-          o = _strrev(write_num_int(type, fmt.replace(/[\\-]/g, ""), val2));
+          o = _strrev(write_num_int(type, fmt.replace(/[\\-]/g, ""), val));
           ri = 0;
           return _strrev(_strrev(fmt.replace(/\\/g, "")).replace(/[0#]/g, function(x) {
             return ri < o.length ? o.charAt(ri++) : x === "0" ? "0" : "";
           }));
         }
         if (fmt.match(phone)) {
-          o = write_num_int(type, "##########", val2);
+          o = write_num_int(type, "##########", val);
           return "(" + o.substr(0, 3) + ") " + o.substr(3, 3) + "-" + o.substr(6);
         }
         let oa = "";
@@ -1177,18 +1177,18 @@ var require_ssf = __commonJS({
           return sign + (ff[0] || (ff[1] ? "" : "0")) + " " + (ff[1] ? pad_(ff[1], ri) + r[2] + "/" + r[3] + rpad_(ff[2], ri) : fill(" ", 2 * ri + 1 + r[2].length + r[3].length));
         }
         if (r = fmt.match(/^[#0?]+$/)) {
-          o = "" + val2;
+          o = "" + val;
           if (fmt.length <= o.length) return o;
           return hashq(fmt.substr(0, fmt.length - o.length)) + o;
         }
         if (r = fmt.match(/^([#0]+)\.([#0]+)$/)) {
-          o = "" + val2.toFixed(Math.min(r[2].length, 10)).replace(/([^0])0+$/, "$1");
+          o = "" + val.toFixed(Math.min(r[2].length, 10)).replace(/([^0])0+$/, "$1");
           ri = o.indexOf(".");
           let lres = fmt.indexOf(".") - ri, rres = fmt.length - o.length - lres;
           return hashq(fmt.substr(0, lres) + o + fmt.substr(fmt.length - rres));
         }
         if (r = fmt.match(/^00,000\.([#0]*0)$/)) {
-          return val2 < 0 ? "-" + write_num_int(type, fmt, -val2) : commaify("" + val2).replace(/^\d,\d{3}$/, "0$&").replace(/^\d*$/, function($$) {
+          return val < 0 ? "-" + write_num_int(type, fmt, -val) : commaify("" + val).replace(/^\d,\d{3}$/, "0$&").replace(/^\d*$/, function($$) {
             return "00," + ($$.length < 3 ? pad0(0, 3 - $$.length) : "") + $$;
           }) + "." + pad0(0, r[1].length);
         }
@@ -1199,12 +1199,12 @@ var require_ssf = __commonJS({
             const x = commaify("" + aval);
             return x !== "0" ? sign + x : "";
           default:
-            if (fmt.match(/\.[0#?]*$/)) return write_num_int(type, fmt.slice(0, fmt.lastIndexOf(".")), val2) + hashq(fmt.slice(fmt.lastIndexOf(".")));
+            if (fmt.match(/\.[0#?]*$/)) return write_num_int(type, fmt.slice(0, fmt.lastIndexOf(".")), val) + hashq(fmt.slice(fmt.lastIndexOf(".")));
         }
         throw new Error("unsupported format |" + fmt + "|");
       }
-      return function write_num2(type, fmt, val2) {
-        return (val2 | 0) === val2 ? write_num_int(type, fmt, val2) : write_num_flt(type, fmt, val2);
+      return function write_num2(type, fmt, val) {
+        return (val | 0) === val ? write_num_int(type, fmt, val) : write_num_flt(type, fmt, val);
       };
     })();
     function split_fmt(fmt) {
@@ -3061,17 +3061,17 @@ var require_logical = __commonJS({
     var H = FormulaHelpers;
     function getNumLogicalValue(params) {
       let numTrue = 0, numFalse = 0;
-      H.flattenParams(params, null, true, (val2) => {
-        const type = typeof val2;
+      H.flattenParams(params, null, true, (val) => {
+        const type = typeof val;
         if (type === "string") {
-          if (val2 === "TRUE")
-            val2 = true;
-          else if (val2 === "FALSE")
-            val2 = false;
+          if (val === "TRUE")
+            val = true;
+          else if (val === "FALSE")
+            val = false;
         } else if (type === "number")
-          val2 = Boolean(val2);
-        if (typeof val2 === "boolean") {
-          if (val2 === true)
+          val = Boolean(val);
+        if (typeof val === "boolean") {
+          if (val === true)
             numTrue++;
           else
             numFalse++;
@@ -3387,10 +3387,10 @@ var require_jstat = __commonJS({
         var slice = Array.prototype.slice;
         var toString = Object.prototype.toString;
         function calcRdx(n, m) {
-          var val2 = n > m ? n : m;
+          var val = n > m ? n : m;
           return Math2.pow(
             10,
-            17 - ~~(Math2.log(val2 > 0 ? val2 : -val2) * Math2.LOG10E)
+            17 - ~~(Math2.log(val > 0 ? val : -val) * Math2.LOG10E)
           );
         }
         var isArray2 = Array.isArray || function isArray3(arg) {
@@ -10243,10 +10243,10 @@ var require_utils = __commonJS({
     exports.peek = peek;
     function timer(func) {
       var start = (/* @__PURE__ */ new Date()).getTime();
-      var val2 = func();
+      var val = func();
       var end = (/* @__PURE__ */ new Date()).getTime();
       var total = end - start;
-      return { time: total, value: val2 };
+      return { time: total, value: val };
     }
     exports.timer = timer;
   }
@@ -12227,7 +12227,7 @@ var require_tokens = __commonJS({
     function assignCategoriesTokensProp(tokenTypes) {
       utils_1.forEach(tokenTypes, function(currTokType) {
         currTokType.categoryMatches = [];
-        utils_1.forEach(currTokType.categoryMatchesMap, function(val2, key) {
+        utils_1.forEach(currTokType.categoryMatchesMap, function(val, key) {
           currTokType.categoryMatches.push(exports2.tokenIdxToClass[key].tokenTypeIdx);
         });
       });
@@ -18825,14 +18825,14 @@ var require_utils2 = __commonJS({
           }
         };
       }
-      _applyPrefix(prefixes, val2, isArray2) {
-        if (this.isFormulaError(val2))
-          return val2;
-        return Prefix.unaryOp(prefixes, val2, isArray2);
+      _applyPrefix(prefixes, val, isArray2) {
+        if (this.isFormulaError(val))
+          return val;
+        return Prefix.unaryOp(prefixes, val, isArray2);
       }
       async applyPrefixAsync(prefixes, value) {
-        const { val: val2, isArray: isArray2 } = this.extractRefValue(await value);
-        return this._applyPrefix(prefixes, val2, isArray2);
+        const { val, isArray: isArray2 } = this.extractRefValue(await value);
+        return this._applyPrefix(prefixes, val, isArray2);
       }
       /**
        * Apply + or - unary prefix.
@@ -18844,25 +18844,25 @@ var require_utils2 = __commonJS({
         if (this.context.async) {
           return this.applyPrefixAsync(prefixes, value);
         } else {
-          const { val: val2, isArray: isArray2 } = this.extractRefValue(value);
-          return this._applyPrefix(prefixes, val2, isArray2);
+          const { val, isArray: isArray2 } = this.extractRefValue(value);
+          return this._applyPrefix(prefixes, val, isArray2);
         }
       }
-      _applyPostfix(val2, isArray2, postfix) {
-        if (this.isFormulaError(val2))
-          return val2;
-        return Postfix.percentOp(val2, postfix, isArray2);
+      _applyPostfix(val, isArray2, postfix) {
+        if (this.isFormulaError(val))
+          return val;
+        return Postfix.percentOp(val, postfix, isArray2);
       }
       async applyPostfixAsync(value, postfix) {
-        const { val: val2, isArray: isArray2 } = this.extractRefValue(await value);
-        return this._applyPostfix(val2, isArray2, postfix);
+        const { val, isArray: isArray2 } = this.extractRefValue(await value);
+        return this._applyPostfix(val, isArray2, postfix);
       }
       applyPostfix(value, postfix) {
         if (this.context.async) {
           return this.applyPostfixAsync(value, postfix);
         } else {
-          const { val: val2, isArray: isArray2 } = this.extractRefValue(value);
-          return this._applyPostfix(val2, isArray2, postfix);
+          const { val, isArray: isArray2 } = this.extractRefValue(value);
+          return this._applyPostfix(val, isArray2, postfix);
         }
       }
       _applyInfix(res1, infix, res2) {
@@ -25328,7 +25328,7 @@ var require_deflate = __commonJS({
     }
     function deflate(strm, flush) {
       var old_flush, s;
-      var beg, val2;
+      var beg, val;
       if (!strm || !strm.state || flush > Z_BLOCK || flush < 0) {
         return strm ? err2(strm, Z_STREAM_ERROR) : Z_STREAM_ERROR;
       }
@@ -25440,21 +25440,21 @@ var require_deflate = __commonJS({
               flush_pending(strm);
               beg = s.pending;
               if (s.pending === s.pending_buf_size) {
-                val2 = 1;
+                val = 1;
                 break;
               }
             }
             if (s.gzindex < s.gzhead.name.length) {
-              val2 = s.gzhead.name.charCodeAt(s.gzindex++) & 255;
+              val = s.gzhead.name.charCodeAt(s.gzindex++) & 255;
             } else {
-              val2 = 0;
+              val = 0;
             }
-            put_byte(s, val2);
-          } while (val2 !== 0);
+            put_byte(s, val);
+          } while (val !== 0);
           if (s.gzhead.hcrc && s.pending > beg) {
             strm.adler = crc32(strm.adler, s.pending_buf, s.pending - beg, beg);
           }
-          if (val2 === 0) {
+          if (val === 0) {
             s.gzindex = 0;
             s.status = COMMENT_STATE;
           }
@@ -25473,21 +25473,21 @@ var require_deflate = __commonJS({
               flush_pending(strm);
               beg = s.pending;
               if (s.pending === s.pending_buf_size) {
-                val2 = 1;
+                val = 1;
                 break;
               }
             }
             if (s.gzindex < s.gzhead.comment.length) {
-              val2 = s.gzhead.comment.charCodeAt(s.gzindex++) & 255;
+              val = s.gzhead.comment.charCodeAt(s.gzindex++) & 255;
             } else {
-              val2 = 0;
+              val = 0;
             }
-            put_byte(s, val2);
-          } while (val2 !== 0);
+            put_byte(s, val);
+          } while (val !== 0);
           if (s.gzhead.hcrc && s.pending > beg) {
             strm.adler = crc32(strm.adler, s.pending_buf, s.pending - beg, beg);
           }
-          if (val2 === 0) {
+          if (val === 0) {
             s.status = HCRC_STATE;
           }
         } else {
@@ -29627,9 +29627,24 @@ var require_util2 = __commonJS({
         return "";
       }
     };
+    var DANGEROUS_PROPERTY_NAMES2 = [
+      // '__proto__',
+      // 'constructor',
+      // 'prototype',
+      "hasOwnProperty",
+      "toString",
+      "valueOf",
+      "__defineGetter__",
+      "__defineSetter__",
+      "__lookupGetter__",
+      "__lookupSetter__"
+    ];
+    var criticalProperties2 = ["__proto__", "constructor", "prototype"];
     exports2.isName = isName2;
     exports2.getAllMatches = getAllMatches2;
     exports2.nameRegexp = nameRegexp2;
+    exports2.DANGEROUS_PROPERTY_NAMES = DANGEROUS_PROPERTY_NAMES2;
+    exports2.criticalProperties = criticalProperties2;
   }
 });
 
@@ -29948,6 +29963,13 @@ var require_validator = __commonJS({
 // ../../node_modules/fast-xml-parser/src/xmlparser/OptionsBuilder.js
 var require_OptionsBuilder = __commonJS({
   "../../node_modules/fast-xml-parser/src/xmlparser/OptionsBuilder.js"(exports2) {
+    var { DANGEROUS_PROPERTY_NAMES: DANGEROUS_PROPERTY_NAMES2, criticalProperties: criticalProperties2 } = require_util2();
+    var defaultOnDangerousProperty2 = (name) => {
+      if (DANGEROUS_PROPERTY_NAMES2.includes(name)) {
+        return "__" + name;
+      }
+      return name;
+    };
     var defaultOptions3 = {
       preserveOrder: false,
       attributeNamePrefix: "@_",
@@ -29969,11 +29991,11 @@ var require_OptionsBuilder = __commonJS({
         leadingZeros: true,
         eNotation: true
       },
-      tagValueProcessor: function(tagName, val2) {
-        return val2;
+      tagValueProcessor: function(tagName, val) {
+        return val;
       },
-      attributeValueProcessor: function(attrName, val2) {
-        return val2;
+      attributeValueProcessor: function(attrName, val) {
+        return val;
       },
       stopNodes: [],
       //nested tags will not be parsed even for errors
@@ -29989,11 +30011,75 @@ var require_OptionsBuilder = __commonJS({
       transformAttributeName: false,
       updateTag: function(tagName, jPath, attrs) {
         return tagName;
-      }
+      },
       // skipEmptyListItem: false
+      captureMetaData: false,
+      maxNestedTags: 100,
+      strictReservedNames: true,
+      onDangerousProperty: defaultOnDangerousProperty2
     };
+    function validatePropertyName2(propertyName, optionName) {
+      if (typeof propertyName !== "string") {
+        return;
+      }
+      const normalized = propertyName.toLowerCase();
+      if (DANGEROUS_PROPERTY_NAMES2.some((dangerous) => normalized === dangerous.toLowerCase())) {
+        throw new Error(
+          `[SECURITY] Invalid ${optionName}: "${propertyName}" is a reserved JavaScript keyword that could cause prototype pollution`
+        );
+      }
+      if (criticalProperties2.some((dangerous) => normalized === dangerous.toLowerCase())) {
+        throw new Error(
+          `[SECURITY] Invalid ${optionName}: "${propertyName}" is a reserved JavaScript keyword that could cause prototype pollution`
+        );
+      }
+    }
+    function normalizeProcessEntities2(value) {
+      if (typeof value === "boolean") {
+        return {
+          enabled: value,
+          // true or false
+          maxEntitySize: 1e4,
+          maxExpansionDepth: 10,
+          maxTotalExpansions: 1e3,
+          maxExpandedLength: 1e5,
+          allowedTags: null,
+          tagFilter: null
+        };
+      }
+      if (typeof value === "object" && value !== null) {
+        return {
+          enabled: value.enabled !== false,
+          maxEntitySize: Math.max(1, value.maxEntitySize ?? 1e4),
+          maxExpansionDepth: Math.max(1, value.maxExpansionDepth ?? 1e4),
+          maxTotalExpansions: Math.max(1, value.maxTotalExpansions ?? Infinity),
+          maxExpandedLength: Math.max(1, value.maxExpandedLength ?? 1e5),
+          maxEntityCount: Math.max(1, value.maxEntityCount ?? 1e3),
+          allowedTags: value.allowedTags ?? null,
+          tagFilter: value.tagFilter ?? null
+        };
+      }
+      return normalizeProcessEntities2(true);
+    }
     var buildOptions2 = function(options) {
-      return Object.assign({}, defaultOptions3, options);
+      const built = Object.assign({}, defaultOptions3, options);
+      const propertyNameOptions = [
+        { value: built.attributeNamePrefix, name: "attributeNamePrefix" },
+        { value: built.attributesGroupName, name: "attributesGroupName" },
+        { value: built.textNodeName, name: "textNodeName" },
+        { value: built.cdataPropName, name: "cdataPropName" },
+        { value: built.commentPropName, name: "commentPropName" }
+      ];
+      for (const { value, name } of propertyNameOptions) {
+        if (value) {
+          validatePropertyName2(value, name);
+        }
+      }
+      if (built.onDangerousProperty === null) {
+        built.onDangerousProperty = defaultOnDangerousProperty2;
+      }
+      built.processEntities = normalizeProcessEntities2(built.processEntities);
+      return built;
     };
     exports2.buildOptions = buildOptions2;
     exports2.defaultOptions = defaultOptions3;
@@ -30010,9 +30096,9 @@ var require_xmlNode = __commonJS({
         this.child = [];
         this[":@"] = {};
       }
-      add(key, val2) {
+      add(key, val) {
         if (key === "__proto__") key = "#__proto__";
-        this.child.push({ [key]: val2 });
+        this.child.push({ [key]: val });
       }
       addChild(node) {
         if (node.tagname === "__proto__") node.tagname = "#__proto__";
@@ -30031,89 +30117,279 @@ var require_xmlNode = __commonJS({
 var require_DocTypeReader = __commonJS({
   "../../node_modules/fast-xml-parser/src/xmlparser/DocTypeReader.js"(exports2, module2) {
     var util = require_util2();
-    function readDocType(xmlData, i) {
-      const entities = {};
-      if (xmlData[i + 3] === "O" && xmlData[i + 4] === "C" && xmlData[i + 5] === "T" && xmlData[i + 6] === "Y" && xmlData[i + 7] === "P" && xmlData[i + 8] === "E") {
-        i = i + 9;
-        let angleBracketsCount = 1;
-        let hasBody = false, comment = false;
-        let exp = "";
-        for (; i < xmlData.length; i++) {
-          if (xmlData[i] === "<" && !comment) {
-            if (hasBody && isEntity(xmlData, i)) {
-              i += 7;
-              [entityName, val, i] = readEntityExp(xmlData, i + 1);
-              if (val.indexOf("&") === -1)
-                entities[validateEntityName3(entityName)] = {
-                  regx: RegExp(`&${entityName};`, "g"),
-                  val
-                };
-            } else if (hasBody && isElement(xmlData, i)) i += 8;
-            else if (hasBody && isAttlist(xmlData, i)) i += 8;
-            else if (hasBody && isNotation(xmlData, i)) i += 9;
-            else if (isComment) comment = true;
-            else throw new Error("Invalid DOCTYPE");
-            angleBracketsCount++;
-            exp = "";
-          } else if (xmlData[i] === ">") {
-            if (comment) {
-              if (xmlData[i - 1] === "-" && xmlData[i - 2] === "-") {
-                comment = false;
+    var DocTypeReader2 = class {
+      constructor(options) {
+        this.suppressValidationErr = !options;
+        this.options = options || {};
+      }
+      readDocType(xmlData, i) {
+        const entities = /* @__PURE__ */ Object.create(null);
+        let entityCount = 0;
+        if (xmlData[i + 3] === "O" && xmlData[i + 4] === "C" && xmlData[i + 5] === "T" && xmlData[i + 6] === "Y" && xmlData[i + 7] === "P" && xmlData[i + 8] === "E") {
+          i = i + 9;
+          let angleBracketsCount = 1;
+          let hasBody = false, comment = false;
+          let exp = "";
+          for (; i < xmlData.length; i++) {
+            if (xmlData[i] === "<" && !comment) {
+              if (hasBody && hasSeq2(xmlData, "!ENTITY", i)) {
+                i += 7;
+                let entityName, val;
+                [entityName, val, i] = this.readEntityExp(xmlData, i + 1, this.suppressValidationErr);
+                if (val.indexOf("&") === -1) {
+                  if (this.options.enabled !== false && this.options.maxEntityCount != null && entityCount >= this.options.maxEntityCount) {
+                    throw new Error(
+                      `Entity count (${entityCount + 1}) exceeds maximum allowed (${this.options.maxEntityCount})`
+                    );
+                  }
+                  const escaped = entityName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+                  entities[entityName] = {
+                    regx: RegExp(`&${escaped};`, "g"),
+                    val
+                  };
+                  entityCount++;
+                }
+              } else if (hasBody && hasSeq2(xmlData, "!ELEMENT", i)) {
+                i += 8;
+                const { index } = this.readElementExp(xmlData, i + 1);
+                i = index;
+              } else if (hasBody && hasSeq2(xmlData, "!ATTLIST", i)) {
+                i += 8;
+              } else if (hasBody && hasSeq2(xmlData, "!NOTATION", i)) {
+                i += 9;
+                const { index } = this.readNotationExp(xmlData, i + 1, this.suppressValidationErr);
+                i = index;
+              } else if (hasSeq2(xmlData, "!--", i)) {
+                comment = true;
+              } else {
+                throw new Error(`Invalid DOCTYPE`);
+              }
+              angleBracketsCount++;
+              exp = "";
+            } else if (xmlData[i] === ">") {
+              if (comment) {
+                if (xmlData[i - 1] === "-" && xmlData[i - 2] === "-") {
+                  comment = false;
+                  angleBracketsCount--;
+                }
+              } else {
                 angleBracketsCount--;
               }
+              if (angleBracketsCount === 0) {
+                break;
+              }
+            } else if (xmlData[i] === "[") {
+              hasBody = true;
             } else {
-              angleBracketsCount--;
+              exp += xmlData[i];
             }
-            if (angleBracketsCount === 0) {
-              break;
+          }
+          if (angleBracketsCount !== 0) {
+            throw new Error(`Unclosed DOCTYPE`);
+          }
+        } else {
+          throw new Error(`Invalid Tag instead of DOCTYPE`);
+        }
+        return { entities, i };
+      }
+      readEntityExp(xmlData, i) {
+        i = skipWhitespace2(xmlData, i);
+        let entityName = "";
+        while (i < xmlData.length && !/\s/.test(xmlData[i]) && xmlData[i] !== '"' && xmlData[i] !== "'") {
+          entityName += xmlData[i];
+          i++;
+        }
+        validateEntityName3(entityName);
+        i = skipWhitespace2(xmlData, i);
+        if (!this.suppressValidationErr) {
+          if (xmlData.substring(i, i + 6).toUpperCase() === "SYSTEM") {
+            throw new Error("External entities are not supported");
+          } else if (xmlData[i] === "%") {
+            throw new Error("Parameter entities are not supported");
+          }
+        }
+        let entityValue = "";
+        [i, entityValue] = this.readIdentifierVal(xmlData, i, "entity");
+        if (this.options.enabled !== false && this.options.maxEntitySize != null && entityValue.length > this.options.maxEntitySize) {
+          throw new Error(
+            `Entity "${entityName}" size (${entityValue.length}) exceeds maximum allowed size (${this.options.maxEntitySize})`
+          );
+        }
+        i--;
+        return [entityName, entityValue, i];
+      }
+      readNotationExp(xmlData, i) {
+        i = skipWhitespace2(xmlData, i);
+        let notationName = "";
+        while (i < xmlData.length && !/\s/.test(xmlData[i])) {
+          notationName += xmlData[i];
+          i++;
+        }
+        !this.suppressValidationErr && validateEntityName3(notationName);
+        i = skipWhitespace2(xmlData, i);
+        const identifierType = xmlData.substring(i, i + 6).toUpperCase();
+        if (!this.suppressValidationErr && identifierType !== "SYSTEM" && identifierType !== "PUBLIC") {
+          throw new Error(`Expected SYSTEM or PUBLIC, found "${identifierType}"`);
+        }
+        i += identifierType.length;
+        i = skipWhitespace2(xmlData, i);
+        let publicIdentifier = null;
+        let systemIdentifier = null;
+        if (identifierType === "PUBLIC") {
+          [i, publicIdentifier] = this.readIdentifierVal(xmlData, i, "publicIdentifier");
+          i = skipWhitespace2(xmlData, i);
+          if (xmlData[i] === '"' || xmlData[i] === "'") {
+            [i, systemIdentifier] = this.readIdentifierVal(xmlData, i, "systemIdentifier");
+          }
+        } else if (identifierType === "SYSTEM") {
+          [i, systemIdentifier] = this.readIdentifierVal(xmlData, i, "systemIdentifier");
+          if (!this.suppressValidationErr && !systemIdentifier) {
+            throw new Error("Missing mandatory system identifier for SYSTEM notation");
+          }
+        }
+        return { notationName, publicIdentifier, systemIdentifier, index: --i };
+      }
+      readIdentifierVal(xmlData, i, type) {
+        let identifierVal = "";
+        const startChar = xmlData[i];
+        if (startChar !== '"' && startChar !== "'") {
+          throw new Error(`Expected quoted string, found "${startChar}"`);
+        }
+        i++;
+        while (i < xmlData.length && xmlData[i] !== startChar) {
+          identifierVal += xmlData[i];
+          i++;
+        }
+        if (xmlData[i] !== startChar) {
+          throw new Error(`Unterminated ${type} value`);
+        }
+        i++;
+        return [i, identifierVal];
+      }
+      readElementExp(xmlData, i) {
+        i = skipWhitespace2(xmlData, i);
+        let elementName = "";
+        while (i < xmlData.length && !/\s/.test(xmlData[i])) {
+          elementName += xmlData[i];
+          i++;
+        }
+        if (!this.suppressValidationErr && !util.isName(elementName)) {
+          throw new Error(`Invalid element name: "${elementName}"`);
+        }
+        i = skipWhitespace2(xmlData, i);
+        let contentModel = "";
+        if (xmlData[i] === "E" && hasSeq2(xmlData, "MPTY", i)) {
+          i += 4;
+        } else if (xmlData[i] === "A" && hasSeq2(xmlData, "NY", i)) {
+          i += 2;
+        } else if (xmlData[i] === "(") {
+          i++;
+          while (i < xmlData.length && xmlData[i] !== ")") {
+            contentModel += xmlData[i];
+            i++;
+          }
+          if (xmlData[i] !== ")") {
+            throw new Error("Unterminated content model");
+          }
+        } else if (!this.suppressValidationErr) {
+          throw new Error(`Invalid Element Expression, found "${xmlData[i]}"`);
+        }
+        return {
+          elementName,
+          contentModel: contentModel.trim(),
+          index: i
+        };
+      }
+      readAttlistExp(xmlData, i) {
+        i = skipWhitespace2(xmlData, i);
+        let elementName = "";
+        while (i < xmlData.length && !/\s/.test(xmlData[i])) {
+          elementName += xmlData[i];
+          i++;
+        }
+        validateEntityName3(elementName);
+        i = skipWhitespace2(xmlData, i);
+        let attributeName = "";
+        while (i < xmlData.length && !/\s/.test(xmlData[i])) {
+          attributeName += xmlData[i];
+          i++;
+        }
+        if (!validateEntityName3(attributeName)) {
+          throw new Error(`Invalid attribute name: "${attributeName}"`);
+        }
+        i = skipWhitespace2(xmlData, i);
+        let attributeType = "";
+        if (xmlData.substring(i, i + 8).toUpperCase() === "NOTATION") {
+          attributeType = "NOTATION";
+          i += 8;
+          i = skipWhitespace2(xmlData, i);
+          if (xmlData[i] !== "(") {
+            throw new Error(`Expected '(', found "${xmlData[i]}"`);
+          }
+          i++;
+          let allowedNotations = [];
+          while (i < xmlData.length && xmlData[i] !== ")") {
+            let notation = "";
+            while (i < xmlData.length && xmlData[i] !== "|" && xmlData[i] !== ")") {
+              notation += xmlData[i];
+              i++;
             }
-          } else if (xmlData[i] === "[") {
-            hasBody = true;
-          } else {
-            exp += xmlData[i];
+            notation = notation.trim();
+            if (!validateEntityName3(notation)) {
+              throw new Error(`Invalid notation name: "${notation}"`);
+            }
+            allowedNotations.push(notation);
+            if (xmlData[i] === "|") {
+              i++;
+              i = skipWhitespace2(xmlData, i);
+            }
+          }
+          if (xmlData[i] !== ")") {
+            throw new Error("Unterminated list of notations");
+          }
+          i++;
+          attributeType += " (" + allowedNotations.join("|") + ")";
+        } else {
+          while (i < xmlData.length && !/\s/.test(xmlData[i])) {
+            attributeType += xmlData[i];
+            i++;
+          }
+          const validTypes = ["CDATA", "ID", "IDREF", "IDREFS", "ENTITY", "ENTITIES", "NMTOKEN", "NMTOKENS"];
+          if (!this.suppressValidationErr && !validTypes.includes(attributeType.toUpperCase())) {
+            throw new Error(`Invalid attribute type: "${attributeType}"`);
           }
         }
-        if (angleBracketsCount !== 0) {
-          throw new Error(`Unclosed DOCTYPE`);
+        i = skipWhitespace2(xmlData, i);
+        let defaultValue = "";
+        if (xmlData.substring(i, i + 8).toUpperCase() === "#REQUIRED") {
+          defaultValue = "#REQUIRED";
+          i += 8;
+        } else if (xmlData.substring(i, i + 7).toUpperCase() === "#IMPLIED") {
+          defaultValue = "#IMPLIED";
+          i += 7;
+        } else {
+          [i, defaultValue] = this.readIdentifierVal(xmlData, i, "ATTLIST");
         }
-      } else {
-        throw new Error(`Invalid Tag instead of DOCTYPE`);
+        return {
+          elementName,
+          attributeName,
+          attributeType,
+          defaultValue,
+          index: i
+        };
       }
-      return { entities, i };
-    }
-    function readEntityExp(xmlData, i) {
-      let entityName2 = "";
-      for (; i < xmlData.length && (xmlData[i] !== "'" && xmlData[i] !== '"'); i++) {
-        entityName2 += xmlData[i];
+    };
+    var skipWhitespace2 = (data, index) => {
+      while (index < data.length && /\s/.test(data[index])) {
+        index++;
       }
-      entityName2 = entityName2.trim();
-      if (entityName2.indexOf(" ") !== -1) throw new Error("External entites are not supported");
-      const startChar = xmlData[i++];
-      let val2 = "";
-      for (; i < xmlData.length && xmlData[i] !== startChar; i++) {
-        val2 += xmlData[i];
+      return index;
+    };
+    function hasSeq2(data, seq, i) {
+      for (let j = 0; j < seq.length; j++) {
+        if (seq[j] !== data[i + j + 1]) return false;
       }
-      return [entityName2, val2, i];
-    }
-    function isComment(xmlData, i) {
-      if (xmlData[i + 1] === "!" && xmlData[i + 2] === "-" && xmlData[i + 3] === "-") return true;
-      return false;
-    }
-    function isEntity(xmlData, i) {
-      if (xmlData[i + 1] === "!" && xmlData[i + 2] === "E" && xmlData[i + 3] === "N" && xmlData[i + 4] === "T" && xmlData[i + 5] === "I" && xmlData[i + 6] === "T" && xmlData[i + 7] === "Y") return true;
-      return false;
-    }
-    function isElement(xmlData, i) {
-      if (xmlData[i + 1] === "!" && xmlData[i + 2] === "E" && xmlData[i + 3] === "L" && xmlData[i + 4] === "E" && xmlData[i + 5] === "M" && xmlData[i + 6] === "E" && xmlData[i + 7] === "N" && xmlData[i + 8] === "T") return true;
-      return false;
-    }
-    function isAttlist(xmlData, i) {
-      if (xmlData[i + 1] === "!" && xmlData[i + 2] === "A" && xmlData[i + 3] === "T" && xmlData[i + 4] === "T" && xmlData[i + 5] === "L" && xmlData[i + 6] === "I" && xmlData[i + 7] === "S" && xmlData[i + 8] === "T") return true;
-      return false;
-    }
-    function isNotation(xmlData, i) {
-      if (xmlData[i + 1] === "!" && xmlData[i + 2] === "N" && xmlData[i + 3] === "O" && xmlData[i + 4] === "T" && xmlData[i + 5] === "A" && xmlData[i + 6] === "T" && xmlData[i + 7] === "I" && xmlData[i + 8] === "O" && xmlData[i + 9] === "N") return true;
-      return false;
+      return true;
     }
     function validateEntityName3(name) {
       if (util.isName(name))
@@ -30121,7 +30397,7 @@ var require_DocTypeReader = __commonJS({
       else
         throw new Error(`Invalid entity name ${name}`);
     }
-    module2.exports = readDocType;
+    module2.exports = DocTypeReader2;
   }
 });
 
@@ -30213,14 +30489,40 @@ var require_strnum = __commonJS({
   }
 });
 
+// ../../node_modules/fast-xml-parser/src/ignoreAttributes.js
+var require_ignoreAttributes = __commonJS({
+  "../../node_modules/fast-xml-parser/src/ignoreAttributes.js"(exports2, module2) {
+    function getIgnoreAttributesFn2(ignoreAttributes) {
+      if (typeof ignoreAttributes === "function") {
+        return ignoreAttributes;
+      }
+      if (Array.isArray(ignoreAttributes)) {
+        return (attrName) => {
+          for (const pattern of ignoreAttributes) {
+            if (typeof pattern === "string" && attrName === pattern) {
+              return true;
+            }
+            if (pattern instanceof RegExp && pattern.test(attrName)) {
+              return true;
+            }
+          }
+        };
+      }
+      return () => false;
+    }
+    module2.exports = getIgnoreAttributesFn2;
+  }
+});
+
 // ../../node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
 var require_OrderedObjParser = __commonJS({
   "../../node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js"(exports2, module2) {
     "use strict";
     var util = require_util2();
     var xmlNode = require_xmlNode();
-    var readDocType = require_DocTypeReader();
+    var DocTypeReader2 = require_DocTypeReader();
     var toNumber2 = require_strnum();
+    var getIgnoreAttributesFn2 = require_ignoreAttributes();
     var OrderedObjParser2 = class {
       constructor(options) {
         this.options = options;
@@ -30248,8 +30550,8 @@ var require_OrderedObjParser = __commonJS({
           "copyright": { regex: /&(copy|#169);/g, val: "\xA9" },
           "reg": { regex: /&(reg|#174);/g, val: "\xAE" },
           "inr": { regex: /&(inr|#8377);/g, val: "\u20B9" },
-          "num_dec": { regex: /&#([0-9]{1,7});/g, val: (_, str) => String.fromCharCode(Number.parseInt(str, 10)) },
-          "num_hex": { regex: /&#x([0-9a-fA-F]{1,6});/g, val: (_, str) => String.fromCharCode(Number.parseInt(str, 16)) }
+          "num_dec": { regex: /&#([0-9]{1,7});/g, val: (_, str) => fromCodePoint(str, 10, "&#") },
+          "num_hex": { regex: /&#x([0-9a-fA-F]{1,6});/g, val: (_, str) => fromCodePoint(str, 16, "&#x") }
         };
         this.addExternalEntities = addExternalEntities;
         this.parseXml = parseXml3;
@@ -30261,38 +30563,55 @@ var require_OrderedObjParser = __commonJS({
         this.readStopNodeData = readStopNodeData2;
         this.saveTextToParentTag = saveTextToParentTag2;
         this.addChild = addChild2;
+        this.ignoreAttributesFn = getIgnoreAttributesFn2(this.options.ignoreAttributes);
+        this.entityExpansionCount = 0;
+        this.currentExpandedLength = 0;
+        if (this.options.stopNodes && this.options.stopNodes.length > 0) {
+          this.stopNodesExact = /* @__PURE__ */ new Set();
+          this.stopNodesWildcard = /* @__PURE__ */ new Set();
+          for (let i = 0; i < this.options.stopNodes.length; i++) {
+            const stopNodeExp = this.options.stopNodes[i];
+            if (typeof stopNodeExp !== "string") continue;
+            if (stopNodeExp.startsWith("*.")) {
+              this.stopNodesWildcard.add(stopNodeExp.substring(2));
+            } else {
+              this.stopNodesExact.add(stopNodeExp);
+            }
+          }
+        }
       }
     };
     function addExternalEntities(externalEntities) {
       const entKeys = Object.keys(externalEntities);
       for (let i = 0; i < entKeys.length; i++) {
         const ent = entKeys[i];
+        const escaped = ent.replace(/[.\-+*:]/g, "\\.");
         this.lastEntities[ent] = {
-          regex: new RegExp("&" + ent + ";", "g"),
+          regex: new RegExp("&" + escaped + ";", "g"),
           val: externalEntities[ent]
         };
       }
     }
-    function parseTextData2(val2, tagName, jPath, dontTrim, hasAttributes, isLeafNode, escapeEntities) {
-      if (val2 !== void 0) {
+    function parseTextData2(val, tagName, jPath, dontTrim, hasAttributes, isLeafNode, escapeEntities) {
+      if (val !== void 0) {
         if (this.options.trimValues && !dontTrim) {
-          val2 = val2.trim();
+          val = val.trim();
         }
-        if (val2.length > 0) {
-          if (!escapeEntities) val2 = this.replaceEntitiesValue(val2);
-          const newval = this.options.tagValueProcessor(tagName, val2, jPath, hasAttributes, isLeafNode);
+        if (val.length > 0) {
+          if (!escapeEntities) val = this.replaceEntitiesValue(val, tagName, jPath);
+          const newval = this.options.tagValueProcessor(tagName, val, jPath, hasAttributes, isLeafNode);
           if (newval === null || newval === void 0) {
-            return val2;
-          } else if (typeof newval !== typeof val2 || newval !== val2) {
+            return val;
+          } else if (typeof newval !== typeof val || newval !== val) {
             return newval;
           } else if (this.options.trimValues) {
-            return parseValue2(val2, this.options.parseTagValue, this.options.numberParseOptions);
+            return parseValue2(val, this.options.parseTagValue, this.options.numberParseOptions);
           } else {
-            const trimmedVal = val2.trim();
-            if (trimmedVal === val2) {
-              return parseValue2(val2, this.options.parseTagValue, this.options.numberParseOptions);
+            const trimmedVal = val.trim();
+            if (trimmedVal === val) {
+              return parseValue2(val, this.options.parseTagValue, this.options.numberParseOptions);
             } else {
-              return val2;
+              return val;
             }
           }
         }
@@ -30313,24 +30632,27 @@ var require_OrderedObjParser = __commonJS({
     }
     var attrsRegx2 = new RegExp(`([^\\s=]+)\\s*(=\\s*(['"])([\\s\\S]*?)\\3)?`, "gm");
     function buildAttributesMap2(attrStr, jPath, tagName) {
-      if (!this.options.ignoreAttributes && typeof attrStr === "string") {
+      if (this.options.ignoreAttributes !== true && typeof attrStr === "string") {
         const matches = util.getAllMatches(attrStr, attrsRegx2);
         const len = matches.length;
         const attrs = {};
         for (let i = 0; i < len; i++) {
           const attrName = this.resolveNameSpace(matches[i][1]);
+          if (this.ignoreAttributesFn(attrName, jPath)) {
+            continue;
+          }
           let oldVal = matches[i][4];
           let aName = this.options.attributeNamePrefix + attrName;
           if (attrName.length) {
             if (this.options.transformAttributeName) {
               aName = this.options.transformAttributeName(aName);
             }
-            if (aName === "__proto__") aName = "#__proto__";
+            aName = sanitizeName2(aName, this.options);
             if (oldVal !== void 0) {
               if (this.options.trimValues) {
                 oldVal = oldVal.trim();
               }
-              oldVal = this.replaceEntitiesValue(oldVal);
+              oldVal = this.replaceEntitiesValue(oldVal, tagName, jPath);
               const newVal = this.options.attributeValueProcessor(attrName, oldVal, jPath);
               if (newVal === null || newVal === void 0) {
                 attrs[aName] = oldVal;
@@ -30365,6 +30687,9 @@ var require_OrderedObjParser = __commonJS({
       let currentNode = xmlObj;
       let textData = "";
       let jPath = "";
+      this.entityExpansionCount = 0;
+      this.currentExpandedLength = 0;
+      const docTypeReader = new DocTypeReader2(this.options.processEntities);
       for (let i = 0; i < xmlData.length; i++) {
         const ch = xmlData[i];
         if (ch === "<") {
@@ -30409,7 +30734,7 @@ var require_OrderedObjParser = __commonJS({
               if (tagData.tagName !== tagData.tagExp && tagData.attrExpPresent) {
                 childNode[":@"] = this.buildAttributesMap(tagData.tagExp, jPath, tagData.tagName);
               }
-              this.addChild(currentNode, childNode, jPath);
+              this.addChild(currentNode, childNode, jPath, i);
             }
             i = tagData.closeIndex + 1;
           } else if (xmlData.substr(i + 1, 3) === "!--") {
@@ -30421,19 +30746,19 @@ var require_OrderedObjParser = __commonJS({
             }
             i = endIndex;
           } else if (xmlData.substr(i + 1, 2) === "!D") {
-            const result = readDocType(xmlData, i);
+            const result = docTypeReader.readDocType(xmlData, i);
             this.docTypeEntities = result.entities;
             i = result.i;
           } else if (xmlData.substr(i + 1, 2) === "![") {
             const closeIndex = findClosingIndex2(xmlData, "]]>", i, "CDATA is not closed.") - 2;
             const tagExp = xmlData.substring(i + 9, closeIndex);
             textData = this.saveTextToParentTag(textData, currentNode, jPath);
-            let val2 = this.parseTextData(tagExp, currentNode.tagname, jPath, true, false, true, true);
-            if (val2 == void 0) val2 = "";
+            let val = this.parseTextData(tagExp, currentNode.tagname, jPath, true, false, true, true);
+            if (val == void 0) val = "";
             if (this.options.cdataPropName) {
               currentNode.add(this.options.cdataPropName, [{ [this.options.textNodeName]: tagExp }]);
             } else {
-              currentNode.add(this.options.textNodeName, val2);
+              currentNode.add(this.options.textNodeName, val);
             }
             i = closeIndex + 2;
           } else {
@@ -30444,7 +30769,14 @@ var require_OrderedObjParser = __commonJS({
             let attrExpPresent = result.attrExpPresent;
             let closeIndex = result.closeIndex;
             if (this.options.transformTagName) {
-              tagName = this.options.transformTagName(tagName);
+              const newTagName = this.options.transformTagName(tagName);
+              if (tagExp === tagName) {
+                tagExp = newTagName;
+              }
+              tagName = newTagName;
+            }
+            if (this.options.strictReservedNames && (tagName === this.options.commentPropName || tagName === this.options.cdataPropName || tagName === this.options.textNodeName || tagName === this.options.attributesGroupName)) {
+              throw new Error(`Invalid tag name: ${tagName}`);
             }
             if (currentNode && textData) {
               if (currentNode.tagname !== "!xml") {
@@ -30459,7 +30791,8 @@ var require_OrderedObjParser = __commonJS({
             if (tagName !== xmlObj.tagname) {
               jPath += jPath ? "." + tagName : tagName;
             }
-            if (this.isItStopNode(this.options.stopNodes, jPath, tagName)) {
+            const startIndex = i;
+            if (this.isItStopNode(this.stopNodesExact, this.stopNodesWildcard, jPath, tagName)) {
               let tagContent = "";
               if (tagExp.length > 0 && tagExp.lastIndexOf("/") === tagExp.length - 1) {
                 if (tagName[tagName.length - 1] === "/") {
@@ -30487,7 +30820,7 @@ var require_OrderedObjParser = __commonJS({
               }
               jPath = jPath.substr(0, jPath.lastIndexOf("."));
               childNode.add(this.options.textNodeName, tagContent);
-              this.addChild(currentNode, childNode, jPath);
+              this.addChild(currentNode, childNode, jPath, startIndex);
             } else {
               if (tagExp.length > 0 && tagExp.lastIndexOf("/") === tagExp.length - 1) {
                 if (tagName[tagName.length - 1] === "/") {
@@ -30498,16 +30831,32 @@ var require_OrderedObjParser = __commonJS({
                   tagExp = tagExp.substr(0, tagExp.length - 1);
                 }
                 if (this.options.transformTagName) {
-                  tagName = this.options.transformTagName(tagName);
+                  const newTagName = this.options.transformTagName(tagName);
+                  if (tagExp === tagName) {
+                    tagExp = newTagName;
+                  }
+                  tagName = newTagName;
                 }
                 const childNode = new xmlNode(tagName);
                 if (tagName !== tagExp && attrExpPresent) {
                   childNode[":@"] = this.buildAttributesMap(tagExp, jPath, tagName);
                 }
-                this.addChild(currentNode, childNode, jPath);
+                this.addChild(currentNode, childNode, jPath, startIndex);
+                jPath = jPath.substr(0, jPath.lastIndexOf("."));
+              } else if (this.options.unpairedTags.indexOf(tagName) !== -1) {
+                const childNode = new xmlNode(tagName);
+                if (tagName !== tagExp && attrExpPresent) {
+                  childNode[":@"] = this.buildAttributesMap(tagExp, jPath);
+                }
+                this.addChild(currentNode, childNode, jPath, startIndex);
                 jPath = jPath.substr(0, jPath.lastIndexOf("."));
+                i = result.closeIndex;
+                continue;
               } else {
                 const childNode = new xmlNode(tagName);
+                if (this.tagsNodeStack.length > this.options.maxNestedTags) {
+                  throw new Error("Maximum nested tags exceeded");
+                }
                 this.tagsNodeStack.push(currentNode);
                 if (tagName !== tagExp && attrExpPresent) {
                   childNode[":@"] = this.buildAttributesMap(tagExp, jPath, tagName);
@@ -30525,59 +30874,110 @@ var require_OrderedObjParser = __commonJS({
       }
       return xmlObj.child;
     };
-    function addChild2(currentNode, childNode, jPath) {
+    function addChild2(currentNode, childNode, jPath, startIndex) {
+      if (!this.options.captureMetaData) startIndex = void 0;
       const result = this.options.updateTag(childNode.tagname, jPath, childNode[":@"]);
       if (result === false) {
       } else if (typeof result === "string") {
         childNode.tagname = result;
-        currentNode.addChild(childNode);
+        currentNode.addChild(childNode, startIndex);
       } else {
-        currentNode.addChild(childNode);
+        currentNode.addChild(childNode, startIndex);
       }
     }
-    var replaceEntitiesValue2 = function(val2) {
-      if (this.options.processEntities) {
-        for (let entityName2 in this.docTypeEntities) {
-          const entity = this.docTypeEntities[entityName2];
-          val2 = val2.replace(entity.regx, entity.val);
+    var replaceEntitiesValue2 = function(val, tagName, jPath) {
+      if (val.indexOf("&") === -1) {
+        return val;
+      }
+      const entityConfig = this.options.processEntities;
+      if (!entityConfig.enabled) {
+        return val;
+      }
+      if (entityConfig.allowedTags) {
+        if (!entityConfig.allowedTags.includes(tagName)) {
+          return val;
         }
-        for (let entityName2 in this.lastEntities) {
-          const entity = this.lastEntities[entityName2];
-          val2 = val2.replace(entity.regex, entity.val);
+      }
+      if (entityConfig.tagFilter) {
+        if (!entityConfig.tagFilter(tagName, jPath)) {
+          return val;
         }
-        if (this.options.htmlEntities) {
-          for (let entityName2 in this.htmlEntities) {
-            const entity = this.htmlEntities[entityName2];
-            val2 = val2.replace(entity.regex, entity.val);
+      }
+      for (let entityName in this.docTypeEntities) {
+        const entity = this.docTypeEntities[entityName];
+        const matches = val.match(entity.regx);
+        if (matches) {
+          this.entityExpansionCount += matches.length;
+          if (entityConfig.maxTotalExpansions && this.entityExpansionCount > entityConfig.maxTotalExpansions) {
+            throw new Error(
+              `Entity expansion limit exceeded: ${this.entityExpansionCount} > ${entityConfig.maxTotalExpansions}`
+            );
+          }
+          const lengthBefore = val.length;
+          val = val.replace(entity.regx, entity.val);
+          if (entityConfig.maxExpandedLength) {
+            this.currentExpandedLength += val.length - lengthBefore;
+            if (this.currentExpandedLength > entityConfig.maxExpandedLength) {
+              throw new Error(
+                `Total expanded content size exceeded: ${this.currentExpandedLength} > ${entityConfig.maxExpandedLength}`
+              );
+            }
           }
         }
-        val2 = val2.replace(this.ampEntity.regex, this.ampEntity.val);
       }
-      return val2;
+      if (val.indexOf("&") === -1) return val;
+      for (const entityName of Object.keys(this.lastEntities)) {
+        const entity = this.lastEntities[entityName];
+        const matches = val.match(entity.regex);
+        if (matches) {
+          this.entityExpansionCount += matches.length;
+          if (entityConfig.maxTotalExpansions && this.entityExpansionCount > entityConfig.maxTotalExpansions) {
+            throw new Error(
+              `Entity expansion limit exceeded: ${this.entityExpansionCount} > ${entityConfig.maxTotalExpansions}`
+            );
+          }
+        }
+        val = val.replace(entity.regex, entity.val);
+      }
+      if (val.indexOf("&") === -1) return val;
+      if (this.options.htmlEntities) {
+        for (const entityName of Object.keys(this.htmlEntities)) {
+          const entity = this.htmlEntities[entityName];
+          const matches = val.match(entity.regex);
+          if (matches) {
+            this.entityExpansionCount += matches.length;
+            if (entityConfig.maxTotalExpansions && this.entityExpansionCount > entityConfig.maxTotalExpansions) {
+              throw new Error(
+                `Entity expansion limit exceeded: ${this.entityExpansionCount} > ${entityConfig.maxTotalExpansions}`
+              );
+            }
+          }
+          val = val.replace(entity.regex, entity.val);
+        }
+      }
+      val = val.replace(this.ampEntity.regex, this.ampEntity.val);
+      return val;
     };
-    function saveTextToParentTag2(textData, currentNode, jPath, isLeafNode) {
+    function saveTextToParentTag2(textData, parentNode, jPath, isLeafNode) {
       if (textData) {
-        if (isLeafNode === void 0) isLeafNode = Object.keys(currentNode.child).length === 0;
+        if (isLeafNode === void 0) isLeafNode = parentNode.child.length === 0;
         textData = this.parseTextData(
           textData,
-          currentNode.tagname,
+          parentNode.tagname,
           jPath,
           false,
-          currentNode[":@"] ? Object.keys(currentNode[":@"]).length !== 0 : false,
+          parentNode[":@"] ? Object.keys(parentNode[":@"]).length !== 0 : false,
           isLeafNode
         );
         if (textData !== void 0 && textData !== "")
-          currentNode.add(this.options.textNodeName, textData);
+          parentNode.add(this.options.textNodeName, textData);
         textData = "";
       }
       return textData;
     }
-    function isItStopNode2(stopNodes, jPath, currentTagName) {
-      const allNodesExp = "*." + currentTagName;
-      for (const stopNodePath in stopNodes) {
-        const stopNodeExp = stopNodes[stopNodePath];
-        if (allNodesExp === stopNodeExp || jPath === stopNodeExp) return true;
-      }
+    function isItStopNode2(stopNodesExact, stopNodesWildcard, jPath, currentTagName) {
+      if (stopNodesWildcard && stopNodesWildcard.has(currentTagName)) return true;
+      if (stopNodesExact && stopNodesExact.has(jPath)) return true;
       return false;
     }
     function tagExpWithClosingIndex2(xmlData, i, closingChar = ">") {
@@ -30685,20 +31085,36 @@ var require_OrderedObjParser = __commonJS({
         }
       }
     }
-    function parseValue2(val2, shouldParse, options) {
-      if (shouldParse && typeof val2 === "string") {
-        const newval = val2.trim();
+    function parseValue2(val, shouldParse, options) {
+      if (shouldParse && typeof val === "string") {
+        const newval = val.trim();
         if (newval === "true") return true;
         else if (newval === "false") return false;
-        else return toNumber2(val2, options);
+        else return toNumber2(val, options);
       } else {
-        if (util.isExist(val2)) {
-          return val2;
+        if (util.isExist(val)) {
+          return val;
         } else {
           return "";
         }
       }
     }
+    function fromCodePoint(str, base, prefix) {
+      const codePoint = Number.parseInt(str, base);
+      if (codePoint >= 0 && codePoint <= 1114111) {
+        return String.fromCodePoint(codePoint);
+      } else {
+        return prefix + str + ";";
+      }
+    }
+    function sanitizeName2(name, options) {
+      if (util.criticalProperties.includes(name)) {
+        throw new Error(`[SECURITY] Invalid name: "${name}" is a reserved JavaScript keyword that could cause prototype pollution`);
+      } else if (util.DANGEROUS_PROPERTY_NAMES.includes(name)) {
+        return options.onDangerousProperty(name);
+      }
+      return name;
+    }
     module2.exports = OrderedObjParser2;
   }
 });
@@ -30725,26 +31141,26 @@ var require_node2json = __commonJS({
         } else if (property === void 0) {
           continue;
         } else if (tagObj[property]) {
-          let val2 = compress2(tagObj[property], options, newJpath);
-          const isLeaf = isLeafTag2(val2, options);
+          let val = compress2(tagObj[property], options, newJpath);
+          const isLeaf = isLeafTag2(val, options);
           if (tagObj[":@"]) {
-            assignAttributes2(val2, tagObj[":@"], newJpath, options);
-          } else if (Object.keys(val2).length === 1 && val2[options.textNodeName] !== void 0 && !options.alwaysCreateTextNode) {
-            val2 = val2[options.textNodeName];
-          } else if (Object.keys(val2).length === 0) {
-            if (options.alwaysCreateTextNode) val2[options.textNodeName] = "";
-            else val2 = "";
+            assignAttributes2(val, tagObj[":@"], newJpath, options);
+          } else if (Object.keys(val).length === 1 && val[options.textNodeName] !== void 0 && !options.alwaysCreateTextNode) {
+            val = val[options.textNodeName];
+          } else if (Object.keys(val).length === 0) {
+            if (options.alwaysCreateTextNode) val[options.textNodeName] = "";
+            else val = "";
           }
           if (compressedObj[property] !== void 0 && compressedObj.hasOwnProperty(property)) {
             if (!Array.isArray(compressedObj[property])) {
               compressedObj[property] = [compressedObj[property]];
             }
-            compressedObj[property].push(val2);
+            compressedObj[property].push(val);
           } else {
             if (options.isArray(property, newJpath, isLeaf)) {
-              compressedObj[property] = [val2];
+              compressedObj[property] = [val];
             } else {
-              compressedObj[property] = val2;
+              compressedObj[property] = val;
             }
           }
         }
@@ -30862,6 +31278,14 @@ var require_orderedJs2Xml = __commonJS({
     function arrToStr(arr, options, jPath, indentation) {
       let xmlStr = "";
       let isPreviousElementTag = false;
+      if (!Array.isArray(arr)) {
+        if (arr !== void 0 && arr !== null) {
+          let text = arr.toString();
+          text = replaceEntitiesValue2(text, options);
+          return text;
+        }
+        return "";
+      }
       for (let i = 0; i < arr.length; i++) {
         const tagObj = arr[i];
         const tagName = propName2(tagObj);
@@ -30932,7 +31356,7 @@ var require_orderedJs2Xml = __commonJS({
       const keys2 = Object.keys(obj);
       for (let i = 0; i < keys2.length; i++) {
         const key = keys2[i];
-        if (!obj.hasOwnProperty(key)) continue;
+        if (!Object.prototype.hasOwnProperty.call(obj, key)) continue;
         if (key !== ":@") return key;
       }
     }
@@ -30940,7 +31364,7 @@ var require_orderedJs2Xml = __commonJS({
       let attrStr = "";
       if (attrMap && !options.ignoreAttributes) {
         for (let attr in attrMap) {
-          if (!attrMap.hasOwnProperty(attr)) continue;
+          if (!Object.prototype.hasOwnProperty.call(attrMap, attr)) continue;
           let attrVal = options.attributeValueProcessor(attr, attrMap[attr]);
           attrVal = replaceEntitiesValue2(attrVal, options);
           if (attrVal === true && options.suppressBooleanAttributes) {
@@ -30978,6 +31402,7 @@ var require_json2xml = __commonJS({
   "../../node_modules/fast-xml-parser/src/xmlbuilder/json2xml.js"(exports2, module2) {
     "use strict";
     var buildFromOrderedJs = require_orderedJs2Xml();
+    var getIgnoreAttributesFn2 = require_ignoreAttributes();
     var defaultOptions3 = {
       attributeNamePrefix: "@_",
       attributesGroupName: false,
@@ -31014,11 +31439,12 @@ var require_json2xml = __commonJS({
     };
     function Builder(options) {
       this.options = Object.assign({}, defaultOptions3, options);
-      if (this.options.ignoreAttributes || this.options.attributesGroupName) {
+      if (this.options.ignoreAttributes === true || this.options.attributesGroupName) {
         this.isAttribute = function() {
           return false;
         };
       } else {
+        this.ignoreAttributesFn = getIgnoreAttributesFn2(this.options.ignoreAttributes);
         this.attrPrefixLen = this.options.attributeNamePrefix.length;
         this.isAttribute = isAttribute;
       }
@@ -31044,38 +31470,41 @@ var require_json2xml = __commonJS({
             [this.options.arrayNodeName]: jObj
           };
         }
-        return this.j2x(jObj, 0).val;
+        return this.j2x(jObj, 0, []).val;
       }
     };
-    Builder.prototype.j2x = function(jObj, level) {
+    Builder.prototype.j2x = function(jObj, level, ajPath) {
       let attrStr = "";
-      let val2 = "";
+      let val = "";
+      const jPath = ajPath.join(".");
       for (let key in jObj) {
         if (!Object.prototype.hasOwnProperty.call(jObj, key)) continue;
         if (typeof jObj[key] === "undefined") {
           if (this.isAttribute(key)) {
-            val2 += "";
+            val += "";
           }
         } else if (jObj[key] === null) {
           if (this.isAttribute(key)) {
-            val2 += "";
+            val += "";
+          } else if (key === this.options.cdataPropName) {
+            val += "";
           } else if (key[0] === "?") {
-            val2 += this.indentate(level) + "<" + key + "?" + this.tagEndChar;
+            val += this.indentate(level) + "<" + key + "?" + this.tagEndChar;
           } else {
-            val2 += this.indentate(level) + "<" + key + "/" + this.tagEndChar;
+            val += this.indentate(level) + "<" + key + "/" + this.tagEndChar;
           }
         } else if (jObj[key] instanceof Date) {
-          val2 += this.buildTextValNode(jObj[key], key, "", level);
+          val += this.buildTextValNode(jObj[key], key, "", level);
         } else if (typeof jObj[key] !== "object") {
           const attr = this.isAttribute(key);
-          if (attr) {
+          if (attr && !this.ignoreAttributesFn(attr, jPath)) {
             attrStr += this.buildAttrPairStr(attr, "" + jObj[key]);
-          } else {
+          } else if (!attr) {
             if (key === this.options.textNodeName) {
               let newval = this.options.tagValueProcessor(key, "" + jObj[key]);
-              val2 += this.replaceEntitiesValue(newval);
+              val += this.replaceEntitiesValue(newval);
             } else {
-              val2 += this.buildTextValNode(jObj[key], key, "", level);
+              val += this.buildTextValNode(jObj[key], key, "", level);
             }
           }
         } else if (Array.isArray(jObj[key])) {
@@ -31086,17 +31515,17 @@ var require_json2xml = __commonJS({
             const item = jObj[key][j];
             if (typeof item === "undefined") {
             } else if (item === null) {
-              if (key[0] === "?") val2 += this.indentate(level) + "<" + key + "?" + this.tagEndChar;
-              else val2 += this.indentate(level) + "<" + key + "/" + this.tagEndChar;
+              if (key[0] === "?") val += this.indentate(level) + "<" + key + "?" + this.tagEndChar;
+              else val += this.indentate(level) + "<" + key + "/" + this.tagEndChar;
             } else if (typeof item === "object") {
               if (this.options.oneListGroup) {
-                const result = this.j2x(item, level + 1);
+                const result = this.j2x(item, level + 1, ajPath.concat(key));
                 listTagVal += result.val;
                 if (this.options.attributesGroupName && item.hasOwnProperty(this.options.attributesGroupName)) {
                   listTagAttr += result.attrStr;
                 }
               } else {
-                listTagVal += this.processTextOrObjNode(item, key, level);
+                listTagVal += this.processTextOrObjNode(item, key, level, ajPath);
               }
             } else {
               if (this.options.oneListGroup) {
@@ -31111,7 +31540,7 @@ var require_json2xml = __commonJS({
           if (this.options.oneListGroup) {
             listTagVal = this.buildObjectNode(listTagVal, key, listTagAttr, level);
           }
-          val2 += listTagVal;
+          val += listTagVal;
         } else {
           if (this.options.attributesGroupName && key === this.options.attributesGroupName) {
             const Ks = Object.keys(jObj[key]);
@@ -31120,29 +31549,29 @@ var require_json2xml = __commonJS({
               attrStr += this.buildAttrPairStr(Ks[j], "" + jObj[key][Ks[j]]);
             }
           } else {
-            val2 += this.processTextOrObjNode(jObj[key], key, level);
+            val += this.processTextOrObjNode(jObj[key], key, level, ajPath);
           }
         }
       }
-      return { attrStr, val: val2 };
+      return { attrStr, val };
     };
-    Builder.prototype.buildAttrPairStr = function(attrName, val2) {
-      val2 = this.options.attributeValueProcessor(attrName, "" + val2);
-      val2 = this.replaceEntitiesValue(val2);
-      if (this.options.suppressBooleanAttributes && val2 === "true") {
+    Builder.prototype.buildAttrPairStr = function(attrName, val) {
+      val = this.options.attributeValueProcessor(attrName, "" + val);
+      val = this.replaceEntitiesValue(val);
+      if (this.options.suppressBooleanAttributes && val === "true") {
         return " " + attrName;
-      } else return " " + attrName + '="' + val2 + '"';
+      } else return " " + attrName + '="' + val + '"';
     };
-    function processTextOrObjNode(object, key, level) {
-      const result = this.j2x(object, level + 1);
+    function processTextOrObjNode(object, key, level, ajPath) {
+      const result = this.j2x(object, level + 1, ajPath.concat(key));
       if (object[this.options.textNodeName] !== void 0 && Object.keys(object).length === 1) {
         return this.buildTextValNode(object[this.options.textNodeName], key, result.attrStr, level);
       } else {
         return this.buildObjectNode(result.val, key, result.attrStr, level);
       }
     }
-    Builder.prototype.buildObjectNode = function(val2, key, attrStr, level) {
-      if (val2 === "") {
+    Builder.prototype.buildObjectNode = function(val, key, attrStr, level) {
+      if (val === "") {
         if (key[0] === "?") return this.indentate(level) + "<" + key + attrStr + "?" + this.tagEndChar;
         else {
           return this.indentate(level) + "<" + key + attrStr + this.closeTag(key) + this.tagEndChar;
@@ -31154,12 +31583,12 @@ var require_json2xml = __commonJS({
           piClosingChar = "?";
           tagEndExp = "";
         }
-        if ((attrStr || attrStr === "") && val2.indexOf("<") === -1) {
-          return this.indentate(level) + "<" + key + attrStr + piClosingChar + ">" + val2 + tagEndExp;
+        if ((attrStr || attrStr === "") && val.indexOf("<") === -1) {
+          return this.indentate(level) + "<" + key + attrStr + piClosingChar + ">" + val + tagEndExp;
         } else if (this.options.commentPropName !== false && key === this.options.commentPropName && piClosingChar.length === 0) {
-          return this.indentate(level) + `<!--${val2}-->` + this.newLine;
+          return this.indentate(level) + `<!--${val}-->` + this.newLine;
         } else {
-          return this.indentate(level) + "<" + key + attrStr + piClosingChar + this.tagEndChar + val2 + this.indentate(level) + tagEndExp;
+          return this.indentate(level) + "<" + key + attrStr + piClosingChar + this.tagEndChar + val + this.indentate(level) + tagEndExp;
         }
       }
     };
@@ -31174,15 +31603,15 @@ var require_json2xml = __commonJS({
       }
       return closeTag;
     };
-    Builder.prototype.buildTextValNode = function(val2, key, attrStr, level) {
+    Builder.prototype.buildTextValNode = function(val, key, attrStr, level) {
       if (this.options.cdataPropName !== false && key === this.options.cdataPropName) {
-        return this.indentate(level) + `<![CDATA[${val2}]]>` + this.newLine;
+        return this.indentate(level) + `<![CDATA[${val}]]>` + this.newLine;
       } else if (this.options.commentPropName !== false && key === this.options.commentPropName) {
-        return this.indentate(level) + `<!--${val2}-->` + this.newLine;
+        return this.indentate(level) + `<!--${val}-->` + this.newLine;
       } else if (key[0] === "?") {
         return this.indentate(level) + "<" + key + attrStr + "?" + this.tagEndChar;
       } else {
-        let textValue = this.options.tagValueProcessor(key, val2);
+        let textValue = this.options.tagValueProcessor(key, val);
         textValue = this.replaceEntitiesValue(textValue);
         if (textValue === "") {
           return this.indentate(level) + "<" + key + attrStr + this.closeTag(key) + this.tagEndChar;
@@ -31504,10 +31933,13 @@ var LoticsClient = class {
     return absolutePath;
   }
   async downloadFileById(fileId, outputDir, options) {
-    const url = `${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/download`;
-    const response = await fetch(url, {
-      headers: this.buildHeaders()
-    });
+    const signedUrlRes = await fetch(
+      `${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/signed_url`,
+      { headers: this.buildHeaders() }
+    );
+    if (!signedUrlRes.ok) await this.throwResponseError(signedUrlRes);
+    const { url } = await signedUrlRes.json();
+    const response = await fetch(url);
     if (!response.ok) await this.throwResponseError(response);
     const disposition = response.headers.get("content-disposition") ?? "";
     const match = disposition.match(/filename="?([^";\n]+)"?/);
@@ -31566,6 +31998,9 @@ var LoticsClient = class {
 import fs2 from "node:fs";
 import path2 from "node:path";
 import os from "node:os";
+function globalConfigFile() {
+  return path2.join(os.homedir(), ".lotics", "config.json");
+}
 function configFileForScope(scope) {
   if (scope === "local") {
     return path2.join(process.cwd(), ".lotics", "config.json");
@@ -31582,21 +32017,25 @@ function configFileForScope(scope) {
     }
     dir = parent;
   }
-  return path2.join(os.homedir(), ".lotics", "config.json");
+  return globalConfigFile();
 }
-function loadConfig(scope = "auto") {
+function readConfigFile(file) {
   try {
-    const raw = fs2.readFileSync(configFileForScope(scope), "utf-8");
+    const raw = fs2.readFileSync(file, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
   }
 }
-function saveConfig(config, scope = "auto") {
-  const file = configFileForScope(scope);
+function writeConfigFile(file, config) {
   fs2.mkdirSync(path2.dirname(file), { recursive: true, mode: 448 });
-  fs2.writeFileSync(file, JSON.stringify(config, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
-  fs2.chmodSync(file, 384);
+  const tmp = `${file}.${process.pid}.tmp`;
+  fs2.writeFileSync(tmp, JSON.stringify(config, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+  fs2.chmodSync(tmp, 384);
+  fs2.renameSync(tmp, file);
+}
+function saveConfig(config, scope = "auto") {
+  writeConfigFile(configFileForScope(scope), config);
 }
 function deleteConfig(scope = "auto") {
   try {
@@ -31607,9 +32046,154 @@ function deleteConfig(scope = "auto") {
 function getConfigPath(scope = "auto") {
   return configFileForScope(scope);
 }
+function loadGlobalConfig() {
+  return readConfigFile(globalConfigFile());
+}
+function saveGlobalConfig(config) {
+  writeConfigFile(globalConfigFile(), config);
+}
+function loadLocalConfig() {
+  const file = configFileForScope("auto");
+  if (file === globalConfigFile()) return null;
+  return readConfigFile(file);
+}
+function resolveProfileByNameOrId(profiles, nameOrId) {
+  const byId = profiles[nameOrId];
+  if (byId) return [nameOrId, byId];
+  const matches = Object.entries(profiles).filter(
+    ([, p]) => p.org_name.toLowerCase() === nameOrId.toLowerCase()
+  );
+  if (matches.length === 1) return matches[0];
+  if (matches.length > 1) {
+    throw new Error(
+      `"${nameOrId}" matches multiple saved orgs: ${matches.map(([id]) => id).join(", ")}. Use the org id.`
+    );
+  }
+  return null;
+}
+function resolveContext(flags) {
+  const envKey = process.env.LOTICS_API_KEY;
+  const envOrg = process.env.LOTICS_ORG;
+  const envWorkspace = process.env.LOTICS_WORKSPACE;
+  const wsOverride = flags.workspace ?? envWorkspace;
+  if (flags.apiKey) {
+    return { apiKey: flags.apiKey, workspaceId: wsOverride, source: "flag" };
+  }
+  if (envKey) {
+    return { apiKey: envKey, workspaceId: wsOverride, source: "env_key" };
+  }
+  const global2 = loadGlobalConfig();
+  const profiles = global2?.profiles ?? {};
+  if (envOrg) {
+    const resolved = resolveProfileByNameOrId(profiles, envOrg);
+    if (!resolved) {
+      throw new Error(
+        `LOTICS_ORG="${envOrg}" matches no saved credential. Run "lotics org" to list, or "lotics auth api-key <key>" to add one.`
+      );
+    }
+    const [orgId, profile] = resolved;
+    return {
+      apiKey: profile.api_key,
+      orgId,
+      orgName: profile.org_name,
+      workspaceId: wsOverride ?? profile.workspace_id,
+      source: "env_org"
+    };
+  }
+  const local = loadLocalConfig();
+  if (local?.active_org) {
+    const profile = profiles[local.active_org];
+    if (!profile) {
+      throw new Error(
+        `This directory is pinned to org "${local.active_org}" (.lotics/config.json) but no saved credential exists for it. Run "lotics auth api-key <key>" while authenticated to that org.`
+      );
+    }
+    return {
+      apiKey: profile.api_key,
+      orgId: local.active_org,
+      orgName: profile.org_name,
+      workspaceId: wsOverride ?? local.workspace_id ?? profile.workspace_id,
+      source: "local_pointer"
+    };
+  }
+  if (local && "api_key" in local) {
+    throw new Error(
+      `This directory's .lotics/config.json uses the old self-contained format (inline key), which is no longer supported. Re-pin with "lotics auth api-key <key> --local" (or "lotics org use <name|id> --local").`
+    );
+  }
+  if (global2?.active_org) {
+    const profile = profiles[global2.active_org];
+    if (!profile) {
+      throw new Error(
+        `Active org "${global2.active_org}" has no saved credential. Run "lotics org use <name|id>" to pick one, or "lotics auth api-key <key>".`
+      );
+    }
+    return {
+      apiKey: profile.api_key,
+      orgId: global2.active_org,
+      orgName: profile.org_name,
+      workspaceId: wsOverride ?? profile.workspace_id,
+      source: "global_profile"
+    };
+  }
+  return null;
+}
+function upsertProfile(orgId, fields) {
+  const config = loadGlobalConfig() ?? {};
+  const existing = config.profiles?.[orgId];
+  const profile = {
+    api_key: fields.api_key,
+    org_name: fields.org_name,
+    workspace_id: fields.workspace_id ?? existing?.workspace_id
+  };
+  saveGlobalConfig({
+    profiles: { ...config.profiles, [orgId]: profile },
+    active_org: config.active_org,
+    email: config.email,
+    last_update_check: config.last_update_check,
+    latest_version: config.latest_version
+  });
+}
+function removeProfile(orgId) {
+  const config = loadGlobalConfig();
+  if (!config?.profiles?.[orgId]) return;
+  const { [orgId]: _removed, ...rest } = config.profiles;
+  const remaining = Object.keys(rest);
+  saveGlobalConfig({
+    ...config,
+    profiles: rest,
+    active_org: config.active_org === orgId ? remaining[0] : config.active_org
+  });
+}
+function setActiveOrg(orgId, scope) {
+  if (scope === "local") {
+    saveConfig({ active_org: orgId }, "local");
+    return;
+  }
+  const config = loadGlobalConfig() ?? {};
+  saveGlobalConfig({ ...config, active_org: orgId });
+}
+function setSelectedWorkspace(workspaceId) {
+  const local = loadLocalConfig();
+  if (local?.active_org) {
+    saveConfig({ ...local, workspace_id: workspaceId }, "auto");
+    return { scope: "local", orgId: local.active_org };
+  }
+  const config = loadGlobalConfig() ?? {};
+  const orgId = config.active_org;
+  const profile = orgId ? config.profiles?.[orgId] : void 0;
+  if (!orgId || !profile) {
+    return null;
+  }
+  saveGlobalConfig({
+    ...config,
+    profiles: { ...config.profiles, [orgId]: { ...profile, workspace_id: workspaceId } }
+  });
+  return { scope: "global", orgId };
+}
 var UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 function checkForUpdate(currentVersion) {
-  const config = loadConfig();
+  const config = loadGlobalConfig();
   const lastCheck = config?.last_update_check ?? 0;
   if (Date.now() - lastCheck < UPDATE_CHECK_INTERVAL_MS) {
     if (config?.latest_version && config.latest_version !== currentVersion) {
@@ -31619,8 +32203,8 @@ function checkForUpdate(currentVersion) {
   }
   fetchLatestVersion().then((latest) => {
     if (!latest) return;
-    const existing = loadConfig() ?? {};
-    saveConfig({ ...existing, last_update_check: Date.now(), latest_version: latest });
+    const existing = loadGlobalConfig() ?? {};
+    saveGlobalConfig({ ...existing, last_update_check: Date.now(), latest_version: latest });
   }).catch(() => {
   });
 }
@@ -31655,12 +32239,6 @@ Update available: ${current} \u2192 ${latest}`);
   console.error(`Run: npm i -g @lotics/cli
 `);
 }
-function resolveAuth(flags) {
-  const config = loadConfig();
-  const apiKey = flags.apiKey ?? process.env.LOTICS_API_KEY ?? config?.api_key;
-  if (!apiKey) return null;
-  return { apiKey };
-}
 
 // src/version.ts
 import { readFileSync } from "node:fs";
@@ -32773,6 +33351,12 @@ async function appSetSubdomain(client, args) {
   const result = await client.setAppSubdomain(meta.app_id, args.subdomain);
   console.error(`Public address set: https://${result.public_subdomain}.lotics.app`);
 }
+async function appRename(client, args) {
+  const meta = readAppMeta(process.cwd());
+  const res = await client.execute("update_app", { app_id: meta.app_id, name: args.name });
+  if (res.error) throw new Error(res.error);
+  console.error(`App renamed: "${args.name}" (${meta.app_id})`);
+}
 async function appPull(client, args) {
   const app = await client.getApp(args.app_id);
   if (!app.current_version_id) {
@@ -32933,11 +33517,13 @@ function parseArgs(argv) {
     output: void 0,
     as: void 0,
     apiKey: void 0,
+    workspace: void 0,
     name: void 0,
     timezone: void 0,
     message: void 0,
     forceWorkflowSync: false,
     local: false,
+    all: false,
     version: false,
     help: false
   };
@@ -32965,6 +33551,10 @@ function parseArgs(argv) {
       case "--api-key":
         flags.apiKey = argv[++i];
         break;
+      case "--workspace":
+      case "-w":
+        flags.workspace = argv[++i];
+        break;
       case "--name":
         flags.name = argv[++i];
         break;
@@ -32981,6 +33571,9 @@ function parseArgs(argv) {
       case "--local":
         flags.local = true;
         break;
+      case "--all":
+        flags.all = true;
+        break;
       case "--version":
       case "-v":
         flags.version = true;
@@ -34506,9 +35099,9 @@ function mergeEntityMaps(...maps) {
       if (typeof raw === "string") {
         out[key] = raw;
       } else if (raw && typeof raw === "object" && raw.val !== void 0) {
-        const val2 = raw.val;
-        if (typeof val2 === "string") {
-          out[key] = val2;
+        const val = raw.val;
+        if (typeof val === "string") {
+          out[key] = val;
         }
       }
     }
@@ -34881,11 +35474,11 @@ var defaultOptions2 = {
     leadingZeros: true,
     eNotation: true
   },
-  tagValueProcessor: function(tagName, val2) {
-    return val2;
+  tagValueProcessor: function(tagName, val) {
+    return val;
   },
-  attributeValueProcessor: function(attrName, val2) {
-    return val2;
+  attributeValueProcessor: function(attrName, val) {
+    return val;
   },
   stopNodes: [],
   //nested tags will not be parsed even for errors
@@ -35000,9 +35593,9 @@ var XmlNode = class {
     this.child = [];
     this[":@"] = /* @__PURE__ */ Object.create(null);
   }
-  add(key, val2) {
+  add(key, val) {
     if (key === "__proto__") key = "#__proto__";
-    this.child.push({ [key]: val2 });
+    this.child.push({ [key]: val });
   }
   addChild(node, startIndex) {
     if (node.tagname === "__proto__") node.tagname = "#__proto__";
@@ -35065,15 +35658,15 @@ var DocTypeReader = class {
         if (xmlData[i] === "<" && !comment) {
           if (hasBody && hasSeq(xmlData, "!ENTITY", i)) {
             i += 7;
-            let entityName2, val2;
-            [entityName2, val2, i] = this.readEntityExp(xmlData, i + 1, this.suppressValidationErr);
-            if (val2.indexOf("&") === -1) {
+            let entityName, val;
+            [entityName, val, i] = this.readEntityExp(xmlData, i + 1, this.suppressValidationErr);
+            if (val.indexOf("&") === -1) {
               if (this.options.enabled !== false && this.options.maxEntityCount != null && entityCount >= this.options.maxEntityCount) {
                 throw new Error(
                   `Entity count (${entityCount + 1}) exceeds maximum allowed (${this.options.maxEntityCount})`
                 );
               }
-              entities[entityName2] = val2;
+              entities[entityName] = val;
               entityCount++;
             }
           } else if (hasBody && hasSeq(xmlData, "!ELEMENT", i)) {
@@ -35122,8 +35715,8 @@ var DocTypeReader = class {
     while (i < xmlData.length && !/\s/.test(xmlData[i]) && xmlData[i] !== '"' && xmlData[i] !== "'") {
       i++;
     }
-    let entityName2 = xmlData.substring(startIndex, i);
-    validateEntityName2(entityName2, { xmlVersion: this.xmlVersion });
+    let entityName = xmlData.substring(startIndex, i);
+    validateEntityName2(entityName, { xmlVersion: this.xmlVersion });
     i = skipWhitespace(xmlData, i);
     if (!this.suppressValidationErr) {
       if (xmlData.substring(i, i + 6).toUpperCase() === "SYSTEM") {
@@ -35136,11 +35729,11 @@ var DocTypeReader = class {
     [i, entityValue] = this.readIdentifierVal(xmlData, i, "entity");
     if (this.options.enabled !== false && this.options.maxEntitySize != null && entityValue.length > this.options.maxEntitySize) {
       throw new Error(
-        `Entity "${entityName2}" size (${entityValue.length}) exceeds maximum allowed size (${this.options.maxEntitySize})`
+        `Entity "${entityName}" size (${entityValue.length}) exceeds maximum allowed size (${this.options.maxEntitySize})`
       );
     }
     i--;
-    return [entityName2, entityValue, i];
+    return [entityName, entityValue, i];
   }
   readNotationExp(xmlData, i) {
     i = skipWhitespace(xmlData, i);
@@ -36321,28 +36914,28 @@ var OrderedObjParser = class {
     }
   }
 };
-function parseTextData(val2, tagName, jPath, dontTrim, hasAttributes, isLeafNode, escapeEntities) {
+function parseTextData(val, tagName, jPath, dontTrim, hasAttributes, isLeafNode, escapeEntities) {
   const options = this.options;
-  if (val2 !== void 0) {
+  if (val !== void 0) {
     if (options.trimValues && !dontTrim) {
-      val2 = val2.trim();
+      val = val.trim();
     }
-    if (val2.length > 0) {
-      if (!escapeEntities) val2 = this.replaceEntitiesValue(val2, tagName, jPath);
+    if (val.length > 0) {
+      if (!escapeEntities) val = this.replaceEntitiesValue(val, tagName, jPath);
       const jPathOrMatcher = options.jPath ? jPath.toString() : jPath;
-      const newval = options.tagValueProcessor(tagName, val2, jPathOrMatcher, hasAttributes, isLeafNode);
+      const newval = options.tagValueProcessor(tagName, val, jPathOrMatcher, hasAttributes, isLeafNode);
       if (newval === null || newval === void 0) {
-        return val2;
-      } else if (typeof newval !== typeof val2 || newval !== val2) {
+        return val;
+      } else if (typeof newval !== typeof val || newval !== val) {
         return newval;
       } else if (options.trimValues) {
-        return parseValue(val2, options.parseTagValue, options.numberParseOptions);
+        return parseValue(val, options.parseTagValue, options.numberParseOptions);
       } else {
-        const trimmedVal = val2.trim();
-        if (trimmedVal === val2) {
-          return parseValue(val2, options.parseTagValue, options.numberParseOptions);
+        const trimmedVal = val.trim();
+        if (trimmedVal === val) {
+          return parseValue(val, options.parseTagValue, options.numberParseOptions);
         } else {
-          return val2;
+          return val;
         }
       }
     }
@@ -36375,11 +36968,11 @@ function buildAttributesMap(attrStr, jPath, tagName, force = false) {
       const attrName = this.resolveNameSpace(matches[i][1]);
       const oldVal = matches[i][4];
       if (attrName.length && oldVal !== void 0) {
-        let val2 = oldVal;
-        if (options.trimValues) val2 = val2.trim();
-        val2 = this.replaceEntitiesValue(val2, tagName, this.readonlyMatcher);
-        processedVals[i] = val2;
-        rawAttrsForMatcher[attrName] = val2;
+        let val = oldVal;
+        if (options.trimValues) val = val.trim();
+        val = this.replaceEntitiesValue(val, tagName, this.readonlyMatcher);
+        processedVals[i] = val;
+        rawAttrsForMatcher[attrName] = val;
         hasRawAttrs = true;
       }
     }
@@ -36501,12 +37094,12 @@ var parseXml = function(xmlData) {
         const closeIndex = findClosingIndex(xmlData, "]]>", i, "CDATA is not closed.") - 2;
         const tagExp = xmlData.substring(i + 9, closeIndex);
         textData = this.saveTextToParentTag(textData, currentNode, this.readonlyMatcher);
-        let val2 = this.parseTextData(tagExp, currentNode.tagname, this.readonlyMatcher, true, false, true, true);
-        if (val2 == void 0) val2 = "";
+        let val = this.parseTextData(tagExp, currentNode.tagname, this.readonlyMatcher, true, false, true, true);
+        if (val == void 0) val = "";
         if (options.cdataPropName) {
           currentNode.add(options.cdataPropName, [{ [options.textNodeName]: tagExp }]);
         } else {
-          currentNode.add(options.textNodeName, val2);
+          currentNode.add(options.textNodeName, val);
         }
         i = closeIndex + 2;
       } else {
@@ -36636,25 +37229,25 @@ function addChild(currentNode, childNode, matcher, startIndex) {
     currentNode.addChild(childNode, startIndex);
   }
 }
-function replaceEntitiesValue(val2, tagName, jPath) {
+function replaceEntitiesValue(val, tagName, jPath) {
   const entityConfig = this.options.processEntities;
   if (!entityConfig || !entityConfig.enabled) {
-    return val2;
+    return val;
   }
   if (entityConfig.allowedTags) {
     const jPathOrMatcher = this.options.jPath ? jPath.toString() : jPath;
     const allowed = Array.isArray(entityConfig.allowedTags) ? entityConfig.allowedTags.includes(tagName) : entityConfig.allowedTags(tagName, jPathOrMatcher);
     if (!allowed) {
-      return val2;
+      return val;
     }
   }
   if (entityConfig.tagFilter) {
     const jPathOrMatcher = this.options.jPath ? jPath.toString() : jPath;
     if (!entityConfig.tagFilter(tagName, jPathOrMatcher)) {
-      return val2;
+      return val;
     }
   }
-  return this.entityDecoder.decode(val2);
+  return this.entityDecoder.decode(val);
 }
 function saveTextToParentTag(textData, parentNode, matcher, isLeafNode) {
   if (textData) {
@@ -36789,15 +37382,15 @@ function readStopNodeData(xmlData, tagName, i) {
     }
   }
 }
-function parseValue(val2, shouldParse, options) {
-  if (shouldParse && typeof val2 === "string") {
-    const newval = val2.trim();
+function parseValue(val, shouldParse, options) {
+  if (shouldParse && typeof val === "string") {
+    const newval = val.trim();
     if (newval === "true") return true;
     else if (newval === "false") return false;
-    else return toNumber(val2, options);
+    else return toNumber(val, options);
   } else {
-    if (isExist(val2)) {
-      return val2;
+    if (isExist(val)) {
+      return val;
     } else {
       return "";
     }
@@ -36861,33 +37454,33 @@ function compress(arr, options, matcher, readonlyMatcher) {
     } else if (property === void 0) {
       continue;
     } else if (tagObj[property]) {
-      let val2 = compress(tagObj[property], options, matcher, readonlyMatcher);
-      const isLeaf = isLeafTag(val2, options);
-      if (Object.keys(val2).length === 0 && options.alwaysCreateTextNode) {
-        val2[options.textNodeName] = "";
+      let val = compress(tagObj[property], options, matcher, readonlyMatcher);
+      const isLeaf = isLeafTag(val, options);
+      if (Object.keys(val).length === 0 && options.alwaysCreateTextNode) {
+        val[options.textNodeName] = "";
       }
       if (tagObj[":@"]) {
-        assignAttributes(val2, tagObj[":@"], readonlyMatcher, options);
-      } else if (Object.keys(val2).length === 1 && val2[options.textNodeName] !== void 0 && !options.alwaysCreateTextNode) {
-        val2 = val2[options.textNodeName];
-      } else if (Object.keys(val2).length === 0) {
-        if (options.alwaysCreateTextNode) val2[options.textNodeName] = "";
-        else val2 = "";
+        assignAttributes(val, tagObj[":@"], readonlyMatcher, options);
+      } else if (Object.keys(val).length === 1 && val[options.textNodeName] !== void 0 && !options.alwaysCreateTextNode) {
+        val = val[options.textNodeName];
+      } else if (Object.keys(val).length === 0) {
+        if (options.alwaysCreateTextNode) val[options.textNodeName] = "";
+        else val = "";
       }
-      if (tagObj[METADATA_SYMBOL2] !== void 0 && typeof val2 === "object" && val2 !== null) {
-        val2[METADATA_SYMBOL2] = tagObj[METADATA_SYMBOL2];
+      if (tagObj[METADATA_SYMBOL2] !== void 0 && typeof val === "object" && val !== null) {
+        val[METADATA_SYMBOL2] = tagObj[METADATA_SYMBOL2];
       }
       if (compressedObj[property] !== void 0 && Object.prototype.hasOwnProperty.call(compressedObj, property)) {
         if (!Array.isArray(compressedObj[property])) {
           compressedObj[property] = [compressedObj[property]];
         }
-        compressedObj[property].push(val2);
+        compressedObj[property].push(val);
       } else {
         const jPathOrMatcher = options.jPath ? readonlyMatcher.toString() : readonlyMatcher;
         if (options.isArray(property, jPathOrMatcher, isLeaf)) {
-          compressedObj[property] = [val2];
+          compressedObj[property] = [val];
         } else {
-          compressedObj[property] = val2;
+          compressedObj[property] = val;
         }
       }
       if (property !== void 0 && property !== options.textNodeName) {
@@ -37725,14 +38318,14 @@ function inflateSync(data, opts) {
 }
 var fltn = function(d, p, t, o) {
   for (var k in d) {
-    var val2 = d[k], n = p + k, op = o;
-    if (Array.isArray(val2))
-      op = mrg(o, val2[1]), val2 = val2[0];
-    if (val2 instanceof u8)
-      t[n] = [val2, op];
+    var val = d[k], n = p + k, op = o;
+    if (Array.isArray(val))
+      op = mrg(o, val[1]), val = val[0];
+    if (val instanceof u8)
+      t[n] = [val, op];
     else {
       t[n += "/"] = [new u8(0), op];
-      fltn(val2, n, t, o);
+      fltn(val, n, t, o);
     }
   }
 };
@@ -38119,14 +38712,14 @@ function extractSchemeColor(el) {
   if (!el) return "000000";
   const srgb = el["a:srgbClr"];
   if (srgb) {
-    const val2 = Array.isArray(srgb) ? srgb[0] : srgb;
-    const hex = typeof val2 === "object" && val2 !== null ? val2["@_val"] : void 0;
+    const val = Array.isArray(srgb) ? srgb[0] : srgb;
+    const hex = typeof val === "object" && val !== null ? val["@_val"] : void 0;
     if (hex) return hex;
   }
   const sys = el["a:sysClr"];
   if (sys) {
-    const val2 = Array.isArray(sys) ? sys[0] : sys;
-    const lastClr = typeof val2 === "object" && val2 !== null ? val2["@_lastClr"] : void 0;
+    const val = Array.isArray(sys) ? sys[0] : sys;
+    const lastClr = typeof val === "object" && val !== null ? val["@_lastClr"] : void 0;
     if (lastClr) return lastClr;
   }
   return "000000";
@@ -39906,9 +40499,9 @@ function parsePageSetupElement(worksheet) {
     for (const [key, def] of fields) {
       const raw = pm[`@_${key}`];
       if (raw === void 0) continue;
-      const val2 = parseFloat(raw);
-      if (!Number.isNaN(val2) && Math.abs(val2 - def) > 1e-6) {
-        margins[key] = val2;
+      const val = parseFloat(raw);
+      if (!Number.isNaN(val) && Math.abs(val - def) > 1e-6) {
+        margins[key] = val;
         anyNonDefault = true;
       }
     }
@@ -39921,11 +40514,11 @@ function parseHeaderFooterElement(worksheet) {
   if (!hf) return void 0;
   const out = {};
   const readText = (key) => {
-    const val2 = hf[key];
+    const val = hf[key];
     let raw;
-    if (typeof val2 === "string") raw = val2;
-    else if (val2 && typeof val2 === "object" && "#text" in val2 && typeof val2["#text"] === "string") {
-      raw = val2["#text"];
+    if (typeof val === "string") raw = val;
+    else if (val && typeof val === "object" && "#text" in val && typeof val["#text"] === "string") {
+      raw = val["#text"];
     }
     return raw !== void 0 ? decodeXmlEntities(raw) : void 0;
   };
@@ -40496,9 +41089,9 @@ function extractSparklineColor(group) {
   if (!rgb) return void 0;
   return `#${rgb.length === 8 ? rgb.slice(2) : rgb}`;
 }
-function ensureSparkArray(val2) {
-  if (val2 === void 0 || val2 === null) return [];
-  return Array.isArray(val2) ? val2 : [val2];
+function ensureSparkArray(val) {
+  if (val === void 0 || val === null) return [];
+  return Array.isArray(val) ? val : [val];
 }
 function parsePageBreaks(worksheet) {
   const rowPageBreaks = [];
@@ -40523,9 +41116,9 @@ function parsePageBreaks(worksheet) {
   }
   return { rowPageBreaks: rowPageBreaks.sort((a, b) => a - b), colPageBreaks: colPageBreaks.sort((a, b) => a - b) };
 }
-function ensureBreakArray(val2) {
-  if (val2 === void 0 || val2 === null) return [];
-  return Array.isArray(val2) ? val2 : [val2];
+function ensureBreakArray(val) {
+  if (val === void 0 || val === null) return [];
+  return Array.isArray(val) ? val : [val];
 }
 function parseAutoFilter(worksheet) {
   const afEl = worksheet["autoFilter"];
@@ -40543,8 +41136,8 @@ function parseAutoFilter(worksheet) {
         const filterArr = filtersEl["filter"];
         if (filterArr) {
           for (const f of filterArr) {
-            const val2 = f["@_val"];
-            if (val2 !== void 0) filterValues.push(decodeXmlEntities(val2));
+            const val = f["@_val"];
+            if (val !== void 0) filterValues.push(decodeXmlEntities(val));
           }
         }
       }
@@ -40737,9 +41330,9 @@ function extractSeriesName(txNode) {
 }
 function extractNumericValues(valNode) {
   if (!valNode || typeof valNode !== "object") return [];
-  const val2 = valNode;
-  const numRef = getObj(val2, "c:numRef") ?? getObj(val2, "numRef");
-  const cache = numRef ? getObj(numRef, "c:numCache") ?? getObj(numRef, "numCache") : getObj(val2, "c:numLit") ?? getObj(val2, "numLit");
+  const val = valNode;
+  const numRef = getObj(val, "c:numRef") ?? getObj(val, "numRef");
+  const cache = numRef ? getObj(numRef, "c:numCache") ?? getObj(numRef, "numCache") : getObj(val, "c:numLit") ?? getObj(val, "numLit");
   if (!cache || typeof cache !== "object") return [];
   const pts = ensureArray(cache["c:pt"] ?? cache["pt"]);
   const values2 = [];
@@ -40783,8 +41376,8 @@ function extractColor2(spPr) {
   if (!solidFill || typeof solidFill !== "object") return void 0;
   const srgb = getObj(solidFill, "a:srgbClr") ?? getObj(solidFill, "srgbClr");
   if (srgb && typeof srgb === "object") {
-    const val2 = srgb["@_val"];
-    if (typeof val2 === "string") return `#${val2}`;
+    const val = srgb["@_val"];
+    if (typeof val === "string") return `#${val}`;
   }
   return void 0;
 }
@@ -40811,9 +41404,9 @@ function extractLegendPosition(legendNode) {
   if (!legendNode || typeof legendNode !== "object") return void 0;
   const pos = getObj(legendNode, "c:legendPos") ?? getObj(legendNode, "legendPos");
   if (!pos || typeof pos !== "object") return void 0;
-  const val2 = pos["@_val"];
+  const val = pos["@_val"];
   const map2 = { t: "top", b: "bottom", l: "left", r: "right" };
-  return typeof val2 === "string" ? map2[val2] ?? "right" : "right";
+  return typeof val === "string" ? map2[val] ?? "right" : "right";
 }
 function parseAxes(plotArea) {
   const axes = [];
@@ -40862,12 +41455,12 @@ function getObj(parent, key) {
 function getAttr(obj, childKey, attr) {
   const child = childKey ? obj[childKey] : obj;
   if (!child || typeof child !== "object") return void 0;
-  const val2 = child[`@_${attr}`];
-  return typeof val2 === "string" ? val2 : void 0;
+  const val = child[`@_${attr}`];
+  return typeof val === "string" ? val : void 0;
 }
-function ensureArray(val2) {
-  if (val2 === void 0 || val2 === null) return [];
-  return Array.isArray(val2) ? val2 : [val2];
+function ensureArray(val) {
+  if (val === void 0 || val === null) return [];
+  return Array.isArray(val) ? val : [val];
 }
 
 // ../xlsx/src/ooxml_drawing.ts
@@ -40996,8 +41589,8 @@ function extractOutlineColor(spPr) {
 function extractSrgb(fill) {
   const srgb = fill["a:srgbClr"] ?? fill["srgbClr"];
   if (srgb && typeof srgb === "object") {
-    const val2 = srgb["@_val"];
-    if (typeof val2 === "string") return `#${val2}`;
+    const val = srgb["@_val"];
+    if (typeof val === "string") return `#${val}`;
   }
   return void 0;
 }
@@ -41034,14 +41627,14 @@ function extractPicRId(pic) {
   const rId = blip["@_r:embed"] ?? blip["@_embed"];
   return typeof rId === "string" ? rId : void 0;
 }
-function ensureArray2(val2) {
-  if (val2 === void 0 || val2 === null) return [];
-  return Array.isArray(val2) ? val2 : [val2];
+function ensureArray2(val) {
+  if (val === void 0 || val === null) return [];
+  return Array.isArray(val) ? val : [val];
 }
-function parseIntVal(val2) {
-  if (typeof val2 === "number") return val2;
-  if (typeof val2 === "string") {
-    const n = parseInt(val2, 10);
+function parseIntVal(val) {
+  if (typeof val === "number") return val;
+  if (typeof val === "string") {
+    const n = parseInt(val, 10);
     return isNaN(n) ? void 0 : n;
   }
   return void 0;
@@ -41113,12 +41706,12 @@ function extractTableRIds(rels) {
   return result;
 }
 function strAttr(obj, attr) {
-  const val2 = obj[`@_${attr}`];
-  return typeof val2 === "string" ? val2 : void 0;
+  const val = obj[`@_${attr}`];
+  return typeof val === "string" ? val : void 0;
 }
-function ensureArray3(val2) {
-  if (val2 === void 0 || val2 === null) return [];
-  return Array.isArray(val2) ? val2 : [val2];
+function ensureArray3(val) {
+  if (val === void 0 || val === null) return [];
+  return Array.isArray(val) ? val : [val];
 }
 
 // ../xlsx/src/ooxml_pivot.ts
@@ -41414,9 +42007,9 @@ function extractWorkbookPivotCaches(workbook) {
   return out;
 }
 function strAttr2(obj, attr) {
-  const val2 = obj[`@_${attr}`];
-  if (typeof val2 === "string") return val2;
-  if (typeof val2 === "number") return String(val2);
+  const val = obj[`@_${attr}`];
+  if (typeof val === "string") return val;
+  if (typeof val === "number") return String(val);
   return void 0;
 }
 function intAttr(obj, attr) {
@@ -41432,12 +42025,12 @@ function boolAttr(obj, attr, fallback) {
   if (v === "0" || v === "false") return false;
   return fallback;
 }
-function ensureArray4(val2) {
-  if (val2 === void 0 || val2 === null) return [];
-  return Array.isArray(val2) ? val2 : [val2];
+function ensureArray4(val) {
+  if (val === void 0 || val === null) return [];
+  return Array.isArray(val) ? val : [val];
 }
-function asObj(val2) {
-  return val2 && typeof val2 === "object" ? val2 : {};
+function asObj(val) {
+  return val && typeof val === "object" ? val : {};
 }
 
 // ../xlsx/src/ooxml_shape.ts
@@ -41700,9 +42293,9 @@ function extractVmlText(textbox) {
   }
   return void 0;
 }
-function ensureVmlArray(val2) {
-  if (val2 === void 0 || val2 === null) return [];
-  return Array.isArray(val2) ? val2 : [val2];
+function ensureVmlArray(val) {
+  if (val === void 0 || val === null) return [];
+  return Array.isArray(val) ? val : [val];
 }
 
 // ../xlsx/src/excel_parser.ts
@@ -46304,20 +46897,31 @@ Lotics is an AI-powered operations platform. Through this CLI you can:
 AUTHENTICATION
   lotics auth                          Show auth help
   lotics auth signup <email>           Create account (run "lotics auth" for details)
+  lotics auth api-key <key>            Save a key \u2014 registers its org as a profile
+
+ORGANIZATIONS
+  Each saved API key belongs to one org. Register a key per org once, then
+  switch between them with no re-pasting. Workspaces live inside an org.
+  lotics org                           List saved orgs (marks active)
+  lotics org use <name|id>             Switch the active org
+  lotics org use <name|id> --local     Pin THIS directory to an org (worktrees)
 
 USAGE
   1. lotics auth signup <email>        Create account or authenticate
-  2. lotics workspace                  Check current workspace (auto-selects if only one)
-  3. lotics tools                      List available tools by category
-  4. lotics tools <name>               Show tool description and full input schema
-  5. lotics run <tool> '<json>'        Execute a tool with JSON arguments
+  2. lotics org                        See saved orgs / which one is active
+  3. lotics workspace                  Check current workspace (auto-selects if only one)
+  4. lotics tools                      List available tools by category
+  5. lotics tools <name>               Show tool description and full input schema
+  6. lotics run <tool> '<json>'        Execute a tool with JSON arguments
 
   Always inspect the schema (step 4) before calling a tool.
   Tools are grouped by category (tables, records, views, etc.).
   Query tools return IDs used as arguments to other tools.
 
 COMMANDS
-  lotics workspace                     List workspaces (marks current)
+  lotics org                           List saved orgs (marks active)
+  lotics org use <name|id> [--local]   Switch active org (--local pins this dir)
+  lotics workspace                     List workspaces in the active org (marks current)
   lotics workspace select <id>         Switch to a different workspace
   lotics workspace create <name>       Create a new workspace (admin only)
   lotics tools                         List all available tools
@@ -46334,6 +46938,7 @@ COMMANDS
                                        (--force-workflow-sync wipes server-only
                                        workflow aliases; default refuses)
   lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address
+  lotics app rename "<new name>"       Rename the app's display name (launcher title)
   lotics app dev [path]                Run the app locally with HMR (RPC forwarded to prod)
   lotics xlsx <subcommand> ...         Read/write/edit .xlsx files on your local filesystem
                                        (uses the bundled Lotics xlsx engine; prefer over
@@ -46347,15 +46952,23 @@ FLAGS
   --timeout <ms>     Timeout for tool execution (default: 60000)
   -o <path>          Output dir for downloads
   --as <name>        Override upload filename
-  --api-key <key>    API key (overrides saved config and LOTICS_API_KEY)
-  --local            (lotics auth) Save credentials to ./.lotics/config.json
+  --api-key <key>    One-off API key (overrides saved config + env)
+  --workspace <id>   One-off workspace override (alias: -w)
+  --local            Pin the current directory (lotics org use / auth api-key)
+  --all              (lotics auth logout) Remove every saved credential
   --version          Show version
 
 CONFIG
-  Credentials resolve from a .lotics/config.json found by walking up from the
-  current directory, else the global ~/.lotics/config.json. Run "lotics auth
-  api-key <key> --local" inside a directory (e.g. a worktree) to pin it to its
-  own account and workspace.
+  API keys are stored once per org in the global ~/.lotics/config.json as named
+  profiles. Switch with "lotics org use <name|id>" \u2014 no re-pasting. A directory
+  (e.g. a git worktree) can pin its own org/workspace with "lotics org use
+  <name|id> --local", which writes a .lotics/config.json pointer (the key is
+  resolved from the global store) \u2014 so a global switch never disturbs it.
+
+  Resolution precedence (highest first):
+    --api-key flag  >  LOTICS_API_KEY env  >  LOTICS_ORG env  >
+    local .lotics/config.json  >  global active profile
+  LOTICS_WORKSPACE (or --workspace) overrides the workspace at any level.
 
 OUTPUT
   Default output is a compact text summary optimized for AI agents \u2014
@@ -46384,25 +46997,27 @@ function printAuthHelp() {
   console.log(`Authentication commands:
 
   lotics auth signup <email>           Create account, org, workspace, and API key
-  lotics auth api-key [key]            Save an existing API key (e.g. from the web app)
+  lotics auth api-key [key]            Save an API key \u2014 registers its org as a profile
   lotics auth web                      Send a magic link email to access the web app
-  lotics auth whoami                   Show the current account's name, email, and organization
-  lotics auth logout                   Remove saved credentials
+  lotics auth whoami                   Show the active account, org, workspace, and source
+  lotics auth logout [<name|id>]       Remove a saved credential (default: the active org,
+                                       or unpin the current directory)
+  lotics auth logout --all             Remove every saved credential
 
 Auth flags:
-  --local                Save credentials to ./.lotics/config.json (this directory)
-                         instead of the global ~/.lotics \u2014 applies to signup + api-key
+  --local                Pin the current directory instead of the global store.
+                         signup/api-key write a self-contained ./.lotics/config.json
+                         (inline key) \u2014 for a hermetic worktree or CI.
   --name <name>          (signup) Display name (defaults to email prefix)
   --timezone <timezone>  (signup) Workspace timezone (defaults to UTC, e.g. Asia/Ho_Chi_Minh)
 
-Signup sends a magic link email so you can access the Lotics web app.
-Use lotics auth web to request a new magic link at any time.
+API keys are stored once per org as named profiles in ~/.lotics/config.json.
+Registering a second key adds a profile \u2014 it does not overwrite the first.
+Switch active org with "lotics org use <name|id>".
 
-Auth priority: --api-key flag > LOTICS_API_KEY env > config file.
-Config file: .lotics/config.json found by walking up from the current directory,
-else ~/.lotics/config.json. A per-directory config pins a project or worktree to
-its own account and workspace; --local creates one. Note: an exported
-LOTICS_API_KEY env var overrides the config file's key.`);
+Resolution precedence (highest first):
+  --api-key flag > LOTICS_API_KEY env > LOTICS_ORG env > local .lotics/config.json
+  > global active profile. LOTICS_WORKSPACE / --workspace override the workspace.`);
 }
 function readStdin() {
   return new Promise((resolve, reject2) => {
@@ -46454,17 +47069,18 @@ async function handleSignup(positionalEmail, flags) {
     }
     process.exit(1);
   }
-  const scope = flags.local ? "local" : "auto";
-  const existing = loadConfig(scope) ?? {};
-  saveConfig({
-    ...existing,
-    api_key: data.api_key,
-    email: data.email,
-    workspace_id: data.workspace_id
-  }, scope);
+  const apiKey = data.api_key;
+  const orgId = data.organization_id;
+  const workspaceId = data.workspace_id;
+  const orgName = name || email.split("@")[0];
+  upsertProfile(orgId, { api_key: apiKey, org_name: orgName, workspace_id: workspaceId });
+  const existing = loadGlobalConfig() ?? {};
+  saveGlobalConfig({ ...existing, email });
+  setActiveOrg(orgId, flags.local ? "local" : "global");
   console.error(`Account created. You can now use the CLI.`);
-  console.error(`  Email:  ${data.email}`);
-  console.error(`  Config: ${getConfigPath(scope)}`);
+  console.error(`  Email:  ${email}`);
+  console.error(`  Org:    ${orgName} (${orgId})`);
+  console.error(flags.local ? `  Pinned this directory: ${getConfigPath("local")}` : `  Saved to the "${orgName}" profile in ~/.lotics (now active)`);
   console.error(`
 Check your email for a magic link to access the Lotics web app.`);
   console.error(`Run "lotics auth web" to request a new link at any time.`);
@@ -46476,53 +47092,70 @@ async function handleSetup(providedKey, local) {
     process.exit(1);
   }
   const client = new LoticsClient({ apiKey });
-  let email;
+  let info;
   try {
-    const info = await client.whoami();
-    email = info.email;
+    info = await client.whoami();
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     console.error(`Authentication failed: ${message}`);
     process.exit(1);
   }
-  const scope = local ? "local" : "auto";
-  const existing = loadConfig(scope) ?? {};
-  const newConfig = { ...existing, api_key: apiKey, email };
+  let workspaceId;
   try {
     const workspaces = await client.listWorkspaces();
     if (workspaces.length === 1) {
-      newConfig.workspace_id = workspaces[0].id;
+      workspaceId = workspaces[0].id;
     } else if (workspaces.length > 1) {
       console.error(`
-Multiple workspaces found. Run "lotics workspace select <id>" to choose one:`);
+Multiple workspaces in ${info.organization_name}. Run "lotics workspace select <id>" to choose one:`);
       printWorkspaceList(workspaces);
     }
   } catch (error) {
     const msg = error instanceof Error ? error.message : String(error);
     console.error(`Warning: could not resolve workspace: ${msg}`);
   }
-  saveConfig(newConfig, scope);
-  console.error("Authenticated.");
-  console.error(`  Config: ${getConfigPath(scope)}`);
+  upsertProfile(info.organization_id, {
+    api_key: apiKey,
+    org_name: info.organization_name,
+    workspace_id: workspaceId
+  });
+  const existing = loadGlobalConfig() ?? {};
+  saveGlobalConfig({ ...existing, email: info.email });
+  setActiveOrg(info.organization_id, local ? "local" : "global");
+  if (local) {
+    console.error(`Authenticated as ${info.email} in ${info.organization_name}.`);
+    console.error(`  Pinned this directory: ${getConfigPath("local")}`);
+  } else {
+    console.error(`Authenticated as ${info.email} in ${info.organization_name} (now active).`);
+    console.error(`  Saved to the "${info.organization_name}" profile in ~/.lotics`);
+  }
 }
 function requireClient(flags) {
-  const auth = resolveAuth(flags);
-  if (!auth) {
-    console.error('Not authenticated. Run "lotics auth signup" or set LOTICS_API_KEY.');
+  const ctx = resolveContext(flags);
+  if (!ctx) {
+    console.error('Not authenticated. Run "lotics auth signup", "lotics auth api-key <key>", or set LOTICS_API_KEY.');
     process.exit(1);
   }
-  const config = loadConfig();
-  return new LoticsClient({ apiKey: auth.apiKey, workspaceId: config?.workspace_id });
+  return { client: new LoticsClient({ apiKey: ctx.apiKey, workspaceId: ctx.workspaceId }), ctx };
 }
+var SOURCE_LABELS = {
+  flag: "--api-key flag",
+  env_key: "LOTICS_API_KEY env",
+  env_org: "LOTICS_ORG env",
+  local_pointer: "local .lotics/config.json (pin)",
+  global_profile: "global active profile"
+};
 function printWorkspaceList(workspaces, currentId) {
   for (const ws of workspaces) {
     const marker = ws.id === currentId ? " (current)" : "";
     console.error(`  ${ws.id}  ${ws.name}  ${ws.timezone}  ${ws.default_currency}${marker}`);
   }
 }
-async function resolveWorkspace(client) {
-  const config = loadConfig();
-  if (config?.workspace_id) return;
+async function resolveWorkspace(client, ctx) {
+  if (ctx.workspaceId) {
+    client.setWorkspaceId(ctx.workspaceId);
+    return;
+  }
   let workspaces;
   try {
     workspaces = await client.listWorkspaces();
@@ -46536,8 +47169,7 @@ async function resolveWorkspace(client) {
     process.exit(1);
   }
   if (workspaces.length === 1) {
-    const existing = config ?? {};
-    saveConfig({ ...existing, workspace_id: workspaces[0].id });
+    setSelectedWorkspace(workspaces[0].id);
     client.setWorkspaceId(workspaces[0].id);
     return;
   }
@@ -46585,32 +47217,60 @@ async function main() {
       return;
     }
     if (subcommand === "whoami") {
-      const auth = resolveAuth(flags);
-      if (!auth) {
-        console.error('Not authenticated. Run "lotics auth signup" or set LOTICS_API_KEY.');
+      const ctx2 = resolveContext(flags);
+      if (!ctx2) {
+        console.error('Not authenticated. Run "lotics auth signup", "lotics auth api-key <key>", or set LOTICS_API_KEY.');
         process.exit(1);
       }
-      const client2 = new LoticsClient({ apiKey: auth.apiKey });
+      const client2 = new LoticsClient({ apiKey: ctx2.apiKey });
       const info = await client2.whoami();
-      const existing = loadConfig() ?? {};
-      saveConfig({ ...existing, email: info.email });
+      const existing = loadGlobalConfig() ?? {};
+      saveGlobalConfig({ ...existing, email: info.email });
       if (flags.json) {
-        console.log(JSON.stringify(info, null, 2));
+        console.log(JSON.stringify({ ...info, workspace_id: ctx2.workspaceId ?? null, source: ctx2.source }, null, 2));
       } else {
-        console.log(`Name:    ${info.name}`);
-        console.log(`Email:   ${info.email}`);
-        console.log(`Org:     ${info.organization_name} (${info.organization_id})`);
+        console.log(`Name:       ${info.name}`);
+        console.log(`Email:      ${info.email}`);
+        console.log(`Org:        ${info.organization_name} (${info.organization_id})`);
+        console.log(`Workspace:  ${ctx2.workspaceId ?? "(none selected)"}`);
+        console.log(`Source:     ${SOURCE_LABELS[ctx2.source]}`);
       }
-      console.error(`Config:  ${getConfigPath()}`);
       return;
     }
     if (subcommand === "logout") {
-      deleteConfig();
-      console.error("Logged out. Credentials removed.");
+      const local = loadLocalConfig();
+      if (local && !flags.all && !toolArgs) {
+        deleteConfig();
+        console.error("Removed the local pin for this directory.");
+        return;
+      }
+      if (flags.all) {
+        const g2 = loadGlobalConfig();
+        saveGlobalConfig({ last_update_check: g2?.last_update_check, latest_version: g2?.latest_version });
+        console.error("Removed all saved credentials.");
+        return;
+      }
+      const g = loadGlobalConfig() ?? {};
+      const profiles = g.profiles ?? {};
+      let resolved;
+      if (toolArgs) {
+        resolved = resolveProfileByNameOrId(profiles, toolArgs);
+      } else if (g.active_org && profiles[g.active_org]) {
+        resolved = [g.active_org, profiles[g.active_org]];
+      } else {
+        resolved = null;
+      }
+      if (!resolved) {
+        console.error(toolArgs ? `No saved credential matches "${toolArgs}".` : "No active credential to remove. Pass an org name/id, or use --all.");
+        process.exit(1);
+      }
+      const [orgId, profile] = resolved;
+      removeProfile(orgId);
+      console.error(`Removed the "${profile.org_name}" credential (${orgId}).`);
       return;
     }
     if (subcommand === "web") {
-      const client2 = requireClient(flags);
+      const { client: client2 } = requireClient(flags);
       const { email } = await client2.login();
       console.error(`Magic link sent to ${email}. Check your email to access the Lotics web app.`);
       return;
@@ -46630,6 +47290,63 @@ async function main() {
     await runDocxCommand(subcommand, toolArgs, restArgs);
     return;
   }
+  if (command === "org") {
+    const global2 = loadGlobalConfig() ?? {};
+    const profiles = global2.profiles ?? {};
+    const local = loadLocalConfig();
+    if (subcommand === "use") {
+      if (!toolArgs) {
+        console.error("Usage: lotics org use <name|id> [--local]");
+        process.exit(1);
+      }
+      const resolved = resolveProfileByNameOrId(profiles, toolArgs);
+      if (!resolved) {
+        console.error(`No saved credential for "${toolArgs}". Run "lotics auth api-key <key>" while authenticated to that org, or "lotics org" to list.`);
+        process.exit(1);
+      }
+      const [orgId, profile] = resolved;
+      if (flags.local) {
+        setActiveOrg(orgId, "local");
+        console.error(`Pinned this directory to ${profile.org_name} (${orgId}).`);
+      } else {
+        setActiveOrg(orgId, "global");
+        console.error(`Switched active org to ${profile.org_name} (${orgId}).`);
+        if (local?.active_org) {
+          console.error("Note: a local pin (.lotics/config.json) overrides the global default in this directory. Use --local to change the pin here.");
+        }
+      }
+      return;
+    }
+    if (subcommand && subcommand !== "list") {
+      console.error(`Unknown org subcommand: ${subcommand}`);
+      console.error("Usage: lotics org [list | use <name|id> [--local]]");
+      process.exit(1);
+    }
+    const orgIds = Object.keys(profiles);
+    if (orgIds.length === 0) {
+      console.error('No saved orgs. Run "lotics auth api-key <key>" to add one.');
+      return;
+    }
+    const effectiveActive = local?.active_org ?? global2.active_org;
+    if (flags.json) {
+      console.log(JSON.stringify(
+        orgIds.map((id) => ({
+          org_id: id,
+          org_name: profiles[id].org_name,
+          workspace_id: profiles[id].workspace_id ?? null,
+          active: id === effectiveActive
+        })),
+        null,
+        2
+      ));
+    } else {
+      for (const id of orgIds) {
+        const marker = id === effectiveActive ? " (active)" : "";
+        console.log(`${id}  ${profiles[id].org_name}${marker}`);
+      }
+    }
+    return;
+  }
   if (command !== "tools" && command !== "upload" && command !== "run" && command !== "download" && command !== "workspace" && command !== "app") {
     console.error(`Unknown command: ${command}`);
     console.error('Run "lotics --help" for usage.');
@@ -46642,6 +47359,7 @@ async function main() {
     console.error("  lotics app deploy [-m <message>] [--force-workflow-sync]");
     console.error("                                       Build + upload the current directory");
     console.error("  lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address");
+    console.error(`  lotics app rename "<new name>"        Rename the app's display name (launcher title)`);
     console.error("  lotics app dev [path]                Run the app locally with HMR + RPC forwarding");
     process.exit(1);
   }
@@ -46667,10 +47385,10 @@ async function main() {
     console.error("Downloads every file on the given file field into the output dir.");
     process.exit(1);
   }
-  const client = requireClient(flags);
+  const { client, ctx } = requireClient(flags);
   if (command === "workspace") {
     const workspaces = await client.listWorkspaces();
-    const config = loadConfig();
+    const currentWorkspaceId = ctx.workspaceId;
     if (subcommand === "select") {
       const targetId = toolArgs;
       if (!targetId) {
@@ -46682,12 +47400,16 @@ async function main() {
         console.error(`Workspace not found: ${targetId}
 
 Available workspaces:`);
-        printWorkspaceList(workspaces, config?.workspace_id);
+        printWorkspaceList(workspaces, currentWorkspaceId);
         process.exit(1);
       }
-      const existing = config ?? {};
-      saveConfig({ ...existing, workspace_id: target.id });
-      console.error(`Switched to workspace: ${target.name} (${target.id})`);
+      const written = setSelectedWorkspace(target.id);
+      if (!written) {
+        console.error(`Switched to ${target.name} (${target.id}) for this command, but it could not be saved \u2014 credentials came from --api-key/LOTICS_API_KEY with no saved profile. Run "lotics auth api-key <key>" to persist a default.`);
+        return;
+      }
+      const where = written.scope === "local" ? " (pinned to this directory)" : "";
+      console.error(`Switched to workspace: ${target.name} (${target.id})${where}`);
       return;
     }
     if (subcommand === "create") {
@@ -46698,8 +47420,7 @@ Available workspaces:`);
       }
       const timezone = flags.timezone;
       const created = await client.createWorkspace({ name, timezone });
-      const existing = config ?? {};
-      saveConfig({ ...existing, workspace_id: created.id });
+      setSelectedWorkspace(created.id);
       client.setWorkspaceId(created.id);
       if (flags.json) {
         console.log(JSON.stringify(created, null, 2));
@@ -46721,15 +47442,15 @@ Available workspaces:`);
         console.error("No workspaces found.");
       } else {
         for (const ws of workspaces) {
-          const marker = ws.id === config?.workspace_id ? " (current)" : "";
+          const marker = ws.id === currentWorkspaceId ? " (current)" : "";
           console.log(`${ws.id}  ${ws.name}  ${ws.timezone}  ${ws.default_currency}${marker}`);
         }
       }
     }
-    console.error(`Config: ${getConfigPath()}`);
+    if (ctx.orgName) console.error(`Org: ${ctx.orgName}`);
     return;
   }
-  await resolveWorkspace(client);
+  await resolveWorkspace(client, ctx);
   if (command === "app") {
     if (subcommand === "create") {
       const name = toolArgs;
@@ -46766,6 +47487,16 @@ Available workspaces:`);
       await appSetSubdomain(client, { subdomain: newSubdomain });
       return;
     }
+    if (subcommand === "rename") {
+      const newName = toolArgs;
+      if (!newName) {
+        console.error('Usage: lotics app rename "<new name>"');
+        console.error("Changes the app's display name (run inside the app directory).");
+        process.exit(1);
+      }
+      await appRename(client, { name: newName });
+      return;
+    }
     if (subcommand === "dev") {
       const projectDir = toolArgs;
       let port;