@tarileo/avileo-catalog-cli 0.3.12 → 0.3.14

package/dist/index.js

@@ -9,7 +9,7 @@ var __export = (target, all) => {
 import { readFileSync as readFileSync2 } from "fs";
 import { Command } from "commander";
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/external.js
+// ../../../node_modules/zod/v4/classic/external.js
 var external_exports = {};
 __export(external_exports, {
   $brand: () => $brand,
@@ -272,7 +272,7 @@ __export(external_exports, {
   xor: () => xor
 });
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/index.js
+// ../../../node_modules/zod/v4/core/index.js
 var core_exports2 = {};
 __export(core_exports2, {
   $ZodAny: () => $ZodAny,
@@ -589,7 +589,7 @@ __export(core_exports2, {
   withParser: () => withParser
 });
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/util.js
+// ../../../node_modules/zod/v4/core/util.js
 var util_exports = {};
 __export(util_exports, {
   BIGINT_FORMAT_RANGES: () => BIGINT_FORMAT_RANGES,
@@ -1445,7 +1445,7 @@ function constantCatch(value) {
   return fn;
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/core.js
+// ../../../node_modules/zod/v4/core/core.js
 var _a;
 var NEVER = /* @__PURE__ */ Object.freeze({
   status: "aborted"
@@ -1567,7 +1567,7 @@ function config(newConfig) {
   return globalConfig;
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/errors.js
+// ../../../node_modules/zod/v4/core/errors.js
 function _getMessage() {
   const internals = this._zod;
   internals.message ?? (internals.message = JSON.stringify(internals.def, jsonStringifyReplacer, 2));
@@ -1759,7 +1759,7 @@ function prettifyError(error62) {
   return lines.join("\n");
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/parse.js
+// ../../../node_modules/zod/v4/core/parse.js
 function finalizeParams(callee, params) {
   return { callee: params?.callee ?? callee, Err: params?.Err };
 }
@@ -1867,18 +1867,18 @@ var validateAsync = async (schema, value, _ctx) => {
   return result.issues.length === 0;
 };
 var _encode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse4 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse3(schema, value, ctx, finalizeParams(fn, _params));
+    return parse4(schema, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
 var encode = /* @__PURE__ */ _encode($ZodRealError);
 var _decode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse4 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
-    return parse3(schema, value, _ctx, finalizeParams(fn, _params));
+    return parse4(schema, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
@@ -1919,7 +1919,7 @@ var _safeDecodeAsync = (_Err) => async (schema, value, _ctx) => {
 };
 var safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync($ZodRealError);
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/regexes.js
+// ../../../node_modules/zod/v4/core/regexes.js
 var regexes_exports = {};
 __export(regexes_exports, {
   anyString: () => anyString,
@@ -2091,7 +2091,7 @@ var sha512_hex = /^[0-9a-fA-F]{128}$/;
 var sha512_base64 = /* @__PURE__ */ fixedBase64(86, "==");
 var sha512_base64url = /* @__PURE__ */ fixedBase64url(86);
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/checks.js
+// ../../../node_modules/zod/v4/core/checks.js
 var $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
   var _a3;
   inst._zod ?? (inst._zod = {});
@@ -2567,7 +2567,7 @@ var $ZodCheckOverwrite = /* @__PURE__ */ $constructor("$ZodCheckOverwrite", (ins
   };
 });
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/doc.js
+// ../../../node_modules/zod/v4/core/doc.js
 var Doc = class {
   constructor(args = [], closed = {}) {
     this.content = [];
@@ -2608,14 +2608,14 @@ ${content.join("\n")}
   }
 };
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/versions.js
+// ../../../node_modules/zod/v4/core/versions.js
 var version = {
   major: 4,
   minor: 6,
   patch: 7
 };
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/schemas.js
+// ../../../node_modules/zod/v4/core/schemas.js
 var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
   var _a3;
   inst ?? (inst = {});
@@ -3373,7 +3373,7 @@ function capSize(inst, size) {
   if (!caps.length)
     return;
   const cap = Math.min(...caps.map((c) => c[0]));
-  const parse3 = inst._zod.parse;
+  const parse4 = inst._zod.parse;
   inst._zod.parse = (payload, ctx) => {
     const n = size(payload.value);
     if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
@@ -3387,7 +3387,7 @@ function capSize(inst, size) {
         }
       }
     }
-    return parse3(payload, ctx);
+    return parse4(payload, ctx);
   };
 }
 var arraySize = (input2) => Array.isArray(input2) ? input2.length : -1;
@@ -5057,7 +5057,7 @@ function handleRefineResult(result, payload, input2, inst) {
   }
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/memoizer.js
+// ../../../node_modules/zod/v4/core/memoizer.js
 var $ZodCyclicError = class extends Error {
   constructor() {
     super(`Cannot parse a reference cycle that closes through a transform`);
@@ -5076,7 +5076,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve2) {
+function isRecursive(inst, stack, resolve3) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -5086,7 +5086,7 @@ function isRecursive(inst, stack, resolve2) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve2);
+      const answer = isRecursive(child, stack, resolve3);
       if (answer > result)
         result = answer;
     }
@@ -5097,7 +5097,7 @@ function isRecursive(inst, stack, resolve2) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve2) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve3) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -5161,7 +5161,7 @@ function isRecursive(inst, stack, resolve2) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve2 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve3 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -5334,7 +5334,7 @@ function isBackEdge(ctx, value) {
   return backEdges !== void 0 && isRef(value) && backEdges.has(value);
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/index.js
+// ../../../node_modules/zod/v4/locales/index.js
 var locales_exports = {};
 __export(locales_exports, {
   ar: () => ar_default,
@@ -5402,7 +5402,7 @@ __export(locales_exports, {
   zhTW: () => zh_TW_default
 });
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ar.js
+// ../../../node_modules/zod/v4/locales/ar.js
 var error = () => {
   const Sizable = {
     string: { unit: "\u062D\u0631\u0641", verb: "\u0623\u0646 \u064A\u062D\u0648\u064A" },
@@ -5514,7 +5514,7 @@ function ar_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/az.js
+// ../../../node_modules/zod/v4/locales/az.js
 var error2 = () => {
   const Sizable = {
     string: { unit: "simvol", verb: "olmal\u0131d\u0131r" },
@@ -5625,7 +5625,7 @@ function az_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/be.js
+// ../../../node_modules/zod/v4/locales/be.js
 function getBelarusianPlural(count, one, few, many) {
   const absCount = Math.abs(count);
   const lastDigit = absCount % 10;
@@ -5794,7 +5794,7 @@ function be_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/bg.js
+// ../../../node_modules/zod/v4/locales/bg.js
 var error4 = () => {
   const Sizable = {
     string: { unit: "\u0441\u0438\u043C\u0432\u043E\u043B\u0430", verb: "\u0434\u0430 \u0441\u044A\u0434\u044A\u0440\u0436\u0430" },
@@ -5920,7 +5920,7 @@ function bg_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/bn.js
+// ../../../node_modules/zod/v4/locales/bn.js
 var error5 = () => {
   const Sizable = {
     string: { unit: "\u0985\u0995\u09CD\u09B7\u09B0", verb: "\u09A5\u09BE\u0995\u09A4\u09C7 \u09B9\u09AC\u09C7" },
@@ -6034,7 +6034,7 @@ function bn_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ca.js
+// ../../../node_modules/zod/v4/locales/ca.js
 var error6 = () => {
   const Sizable = {
     string: { unit: "car\xE0cters", verb: "contenir" },
@@ -6148,7 +6148,7 @@ function ca_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ckb.js
+// ../../../node_modules/zod/v4/locales/ckb.js
 var error7 = () => {
   const Sizable = {
     string: { unit: "\u067E\u06CC\u062A", verb: "\u0628\u06CE\u062A" },
@@ -6281,7 +6281,7 @@ function ckb_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/cs.js
+// ../../../node_modules/zod/v4/locales/cs.js
 var error8 = () => {
   const Sizable = {
     string: { unit: "znak\u016F", verb: "m\xEDt" },
@@ -6398,7 +6398,7 @@ function cs_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/da.js
+// ../../../node_modules/zod/v4/locales/da.js
 var error9 = () => {
   const Sizable = {
     string: { unit: "tegn", verb: "havde" },
@@ -6519,7 +6519,7 @@ function da_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/de.js
+// ../../../node_modules/zod/v4/locales/de.js
 var error10 = () => {
   const Sizable = {
     string: { unit: "Zeichen", verb: "zu haben" },
@@ -6633,7 +6633,7 @@ function de_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/el.js
+// ../../../node_modules/zod/v4/locales/el.js
 var error11 = () => {
   const Sizable = {
     string: { unit: "\u03C7\u03B1\u03C1\u03B1\u03BA\u03C4\u03AE\u03C1\u03B5\u03C2", verb: "\u03BD\u03B1 \u03AD\u03C7\u03B5\u03B9" },
@@ -6746,7 +6746,7 @@ function el_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/en.js
+// ../../../node_modules/zod/v4/locales/en.js
 var error12 = () => {
   const Sizable = {
     string: { unit: "characters", verb: "to have" },
@@ -6871,7 +6871,7 @@ function en_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/eo.js
+// ../../../node_modules/zod/v4/locales/eo.js
 var error13 = () => {
   const Sizable = {
     string: { unit: "karaktrojn", verb: "havi" },
@@ -6986,7 +6986,7 @@ function eo_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/es.js
+// ../../../node_modules/zod/v4/locales/es.js
 var error14 = () => {
   const Sizable = {
     string: { unit: "caracteres", verb: "tener" },
@@ -7123,7 +7123,7 @@ function es_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/fa.js
+// ../../../node_modules/zod/v4/locales/fa.js
 var error15 = () => {
   const Sizable = {
     string: { unit: "\u06A9\u0627\u0631\u0627\u06A9\u062A\u0631", verb: "\u062F\u0627\u0634\u062A\u0647 \u0628\u0627\u0634\u062F" },
@@ -7243,7 +7243,7 @@ function fa_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/fi.js
+// ../../../node_modules/zod/v4/locales/fi.js
 var error16 = () => {
   const Sizable = {
     string: { unit: "merkki\xE4", subject: "merkkijonon" },
@@ -7361,7 +7361,7 @@ function fi_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/fr.js
+// ../../../node_modules/zod/v4/locales/fr.js
 var error17 = () => {
   const Sizable = {
     string: { unit: "caract\xE8res", verb: "avoir" },
@@ -7491,7 +7491,7 @@ function fr_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/fr-CA.js
+// ../../../node_modules/zod/v4/locales/fr-CA.js
 var error18 = () => {
   const Sizable = {
     string: { unit: "caract\xE8res", verb: "avoir" },
@@ -7604,7 +7604,7 @@ function fr_CA_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/gu.js
+// ../../../node_modules/zod/v4/locales/gu.js
 var error19 = () => {
   const Sizable = {
     string: { unit: "\u0A85\u0A95\u0ACD\u0AB7\u0AB0", verb: "\u0AB9\u0ACB\u0AB5\u0ABE \u0A9C\u0ACB\u0A88\u0A8F" },
@@ -7718,7 +7718,7 @@ function gu_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/he.js
+// ../../../node_modules/zod/v4/locales/he.js
 var error20 = () => {
   const TypeNames = {
     string: { label: "\u05DE\u05D7\u05E8\u05D5\u05D6\u05EA", gender: "f" },
@@ -7920,7 +7920,7 @@ function he_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/hi.js
+// ../../../node_modules/zod/v4/locales/hi.js
 var error21 = () => {
   const Sizable = {
     string: { unit: "\u0905\u0915\u094D\u0937\u0930", verb: "\u0930\u0916\u0928\u0947 \u0915\u0947 \u0932\u093F\u090F" },
@@ -8032,7 +8032,7 @@ function hi_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/hr.js
+// ../../../node_modules/zod/v4/locales/hr.js
 var error22 = () => {
   const Sizable = {
     string: { unit: "znakova", verb: "imati" },
@@ -8159,7 +8159,7 @@ function hr_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/hu.js
+// ../../../node_modules/zod/v4/locales/hu.js
 var error23 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "legyen" },
@@ -8273,7 +8273,7 @@ function hu_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/hy.js
+// ../../../node_modules/zod/v4/locales/hy.js
 function getArmenianPlural(count, one, many) {
   return Math.abs(count) === 1 ? one : many;
 }
@@ -8432,7 +8432,7 @@ function hy_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/id.js
+// ../../../node_modules/zod/v4/locales/id.js
 var error25 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "memiliki" },
@@ -8544,7 +8544,7 @@ function id_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/is.js
+// ../../../node_modules/zod/v4/locales/is.js
 var error26 = () => {
   const Sizable = {
     string: { unit: "stafi", verb: "a\xF0 hafa" },
@@ -8659,7 +8659,7 @@ function is_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/it.js
+// ../../../node_modules/zod/v4/locales/it.js
 var error27 = () => {
   const Sizable = {
     string: { unit: "caratteri", verb: "avere" },
@@ -8773,7 +8773,7 @@ function it_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ja.js
+// ../../../node_modules/zod/v4/locales/ja.js
 var error28 = () => {
   const Sizable = {
     string: { unit: "\u6587\u5B57", verb: "\u3067\u3042\u308B" },
@@ -8886,7 +8886,7 @@ function ja_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ka.js
+// ../../../node_modules/zod/v4/locales/ka.js
 var error29 = () => {
   const Sizable = {
     string: { unit: "\u10E1\u10D8\u10DB\u10D1\u10DD\u10DA\u10DD", verb: "\u10E3\u10DC\u10D3\u10D0 \u10E8\u10D4\u10D8\u10EA\u10D0\u10D5\u10D3\u10D4\u10E1" },
@@ -9004,7 +9004,7 @@ function ka_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/km.js
+// ../../../node_modules/zod/v4/locales/km.js
 var error30 = () => {
   const Sizable = {
     string: { unit: "\u178F\u17BD\u17A2\u1780\u17D2\u179F\u179A", verb: "\u1782\u17BD\u179A\u1798\u17B6\u1793" },
@@ -9120,12 +9120,12 @@ function km_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/kh.js
+// ../../../node_modules/zod/v4/locales/kh.js
 function kh_default() {
   return km_default();
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/kn.js
+// ../../../node_modules/zod/v4/locales/kn.js
 var error31 = () => {
   const Sizable = {
     string: { unit: "\u0C85\u0C95\u0CCD\u0CB7\u0CB0\u0C97\u0CB3\u0CC1", verb: "\u0CB9\u0CCA\u0C82\u0CA6\u0CB2\u0CC1" },
@@ -9241,7 +9241,7 @@ function kn_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ko.js
+// ../../../node_modules/zod/v4/locales/ko.js
 var error32 = () => {
   const Sizable = {
     string: { unit: "\uBB38\uC790", verb: "to have" },
@@ -9358,7 +9358,7 @@ function ko_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/lt.js
+// ../../../node_modules/zod/v4/locales/lt.js
 var capitalizeFirstCharacter = (text) => {
   return text.charAt(0).toUpperCase() + text.slice(1);
 };
@@ -9566,7 +9566,7 @@ function lt_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/mk.js
+// ../../../node_modules/zod/v4/locales/mk.js
 var error34 = () => {
   const Sizable = {
     string: { unit: "\u0437\u043D\u0430\u0446\u0438", verb: "\u0434\u0430 \u0438\u043C\u0430\u0430\u0442" },
@@ -9681,7 +9681,7 @@ function mk_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ms.js
+// ../../../node_modules/zod/v4/locales/ms.js
 var error35 = () => {
   const Sizable = {
     string: { unit: "aksara", verb: "mempunyai" },
@@ -9794,7 +9794,7 @@ function ms_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ne.js
+// ../../../node_modules/zod/v4/locales/ne.js
 var error36 = () => {
   const Sizable = {
     string: { unit: "\u0905\u0915\u094D\u0937\u0930", verb: "\u0939\u0941\u0928\u0941\u092A\u0930\u094D\u091B" },
@@ -9906,7 +9906,7 @@ function ne_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/nl.js
+// ../../../node_modules/zod/v4/locales/nl.js
 var error37 = () => {
   const Sizable = {
     string: { unit: "tekens", verb: "heeft" },
@@ -10022,7 +10022,7 @@ function nl_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/nn.js
+// ../../../node_modules/zod/v4/locales/nn.js
 var error38 = () => {
   const Sizable = {
     string: { unit: "teikn", verb: "\xE5 ha" },
@@ -10136,7 +10136,7 @@ function nn_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/no.js
+// ../../../node_modules/zod/v4/locales/no.js
 var error39 = () => {
   const Sizable = {
     string: { unit: "tegn", verb: "\xE5 ha" },
@@ -10250,7 +10250,7 @@ function no_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ota.js
+// ../../../node_modules/zod/v4/locales/ota.js
 var error40 = () => {
   const Sizable = {
     string: { unit: "harf", verb: "olmal\u0131d\u0131r" },
@@ -10365,7 +10365,7 @@ function ota_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ps.js
+// ../../../node_modules/zod/v4/locales/ps.js
 var error41 = () => {
   const Sizable = {
     string: { unit: "\u062A\u0648\u06A9\u064A", verb: "\u0648\u0644\u0631\u064A" },
@@ -10485,7 +10485,7 @@ function ps_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/pl.js
+// ../../../node_modules/zod/v4/locales/pl.js
 var error42 = () => {
   const Sizable = {
     string: { unit: "znak\xF3w", verb: "mie\u0107" },
@@ -10600,7 +10600,7 @@ function pl_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/pt.js
+// ../../../node_modules/zod/v4/locales/pt.js
 var error43 = () => {
   const Sizable = {
     string: { unit: "caracteres" },
@@ -10744,7 +10744,7 @@ function pt_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/pt-BR.js
+// ../../../node_modules/zod/v4/locales/pt-BR.js
 var error44 = () => {
   const Sizable = {
     string: { unit: "caracteres" },
@@ -10889,7 +10889,7 @@ function pt_BR_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ro.js
+// ../../../node_modules/zod/v4/locales/ro.js
 var error45 = () => {
   const Sizable = {
     string: { unit: "caractere", verb: "s\u0103 aib\u0103" },
@@ -11012,7 +11012,7 @@ function ro_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ru.js
+// ../../../node_modules/zod/v4/locales/ru.js
 function getRussianPlural(count, one, few, many) {
   const absCount = Math.abs(count);
   const lastDigit = absCount % 10;
@@ -11181,7 +11181,7 @@ function ru_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/sk.js
+// ../../../node_modules/zod/v4/locales/sk.js
 var error47 = () => {
   const Sizable = {
     string: { unit: "znakov", verb: "ma\u0165" },
@@ -11298,7 +11298,7 @@ function sk_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/sl.js
+// ../../../node_modules/zod/v4/locales/sl.js
 var error48 = () => {
   const Sizable = {
     string: { unit: "znakov", verb: "imeti" },
@@ -11413,7 +11413,7 @@ function sl_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/sv.js
+// ../../../node_modules/zod/v4/locales/sv.js
 var error49 = () => {
   const Sizable = {
     string: { unit: "tecken", verb: "att ha" },
@@ -11529,7 +11529,7 @@ function sv_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ta.js
+// ../../../node_modules/zod/v4/locales/ta.js
 var error50 = () => {
   const Sizable = {
     string: { unit: "\u0B8E\u0BB4\u0BC1\u0BA4\u0BCD\u0BA4\u0BC1\u0B95\u0BCD\u0B95\u0BB3\u0BCD", verb: "\u0B95\u0BCA\u0BA3\u0BCD\u0B9F\u0BBF\u0BB0\u0BC1\u0B95\u0BCD\u0B95 \u0BB5\u0BC7\u0BA3\u0BCD\u0B9F\u0BC1\u0BAE\u0BCD" },
@@ -11645,7 +11645,7 @@ function ta_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/tg.js
+// ../../../node_modules/zod/v4/locales/tg.js
 var error51 = () => {
   const Sizable = {
     string: { unit: "\u0430\u043B\u043E\u043C\u0430\u0442", verb: "\u0434\u043E\u0448\u0442\u0430 \u0431\u043E\u0448\u0430\u0434" },
@@ -11762,7 +11762,7 @@ function tg_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/th.js
+// ../../../node_modules/zod/v4/locales/th.js
 var error52 = () => {
   const Sizable = {
     string: { unit: "\u0E15\u0E31\u0E27\u0E2D\u0E31\u0E01\u0E29\u0E23", verb: "\u0E04\u0E27\u0E23\u0E21\u0E35" },
@@ -11878,7 +11878,7 @@ function th_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/tk.js
+// ../../../node_modules/zod/v4/locales/tk.js
 var error53 = () => {
   const Sizable = {
     string: { unit: "simwol", verb: "bolmaly" },
@@ -11986,7 +11986,7 @@ function tk_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/tr.js
+// ../../../node_modules/zod/v4/locales/tr.js
 var error54 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "olmal\u0131" },
@@ -12097,7 +12097,7 @@ function tr_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/uk.js
+// ../../../node_modules/zod/v4/locales/uk.js
 var error55 = () => {
   const Sizable = {
     string: { unit: "\u0441\u0438\u043C\u0432\u043E\u043B\u0456\u0432", verb: "\u043C\u0430\u0442\u0438\u043C\u0435" },
@@ -12211,12 +12211,12 @@ function uk_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ua.js
+// ../../../node_modules/zod/v4/locales/ua.js
 function ua_default() {
   return uk_default();
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/ur.js
+// ../../../node_modules/zod/v4/locales/ur.js
 var error56 = () => {
   const Sizable = {
     string: { unit: "\u062D\u0631\u0648\u0641", verb: "\u06C1\u0648\u0646\u0627" },
@@ -12332,7 +12332,7 @@ function ur_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/uz.js
+// ../../../node_modules/zod/v4/locales/uz.js
 var error57 = () => {
   const Sizable = {
     string: { unit: "belgi", verb: "bo\u2018lishi kerak" },
@@ -12446,7 +12446,7 @@ function uz_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/vi.js
+// ../../../node_modules/zod/v4/locales/vi.js
 var error58 = () => {
   const Sizable = {
     string: { unit: "k\xFD t\u1EF1", verb: "c\xF3" },
@@ -12560,7 +12560,7 @@ function vi_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/zh-CN.js
+// ../../../node_modules/zod/v4/locales/zh-CN.js
 var error59 = () => {
   const Sizable = {
     string: { unit: "\u5B57\u7B26", verb: "\u5305\u542B" },
@@ -12675,7 +12675,7 @@ function zh_CN_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/zh-TW.js
+// ../../../node_modules/zod/v4/locales/zh-TW.js
 var error60 = () => {
   const Sizable = {
     string: { unit: "\u5B57\u5143", verb: "\u64C1\u6709" },
@@ -12788,7 +12788,7 @@ function zh_TW_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/yo.js
+// ../../../node_modules/zod/v4/locales/yo.js
 var error61 = () => {
   const Sizable = {
     string: { unit: "\xE0mi", verb: "n\xED" },
@@ -12901,7 +12901,7 @@ function yo_default() {
   };
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/registries.js
+// ../../../node_modules/zod/v4/core/registries.js
 var _a2;
 var $output = /* @__PURE__ */ Symbol("ZodOutput");
 var $input = /* @__PURE__ */ Symbol("ZodInput");
@@ -12951,7 +12951,7 @@ function registry() {
 (_a2 = globalThis).__zod_globalRegistry ?? (_a2.__zod_globalRegistry = registry());
 var globalRegistry = globalThis.__zod_globalRegistry;
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/compile.js
+// ../../../node_modules/zod/v4/core/compile.js
 var INVALID = /* @__PURE__ */ Symbol.for("zod.compile.invalid");
 var FALLBACK_FLAG = /* @__PURE__ */ Symbol.for("zod.compile.fallback");
 var ZodCompileAsyncError = class extends Error {
@@ -14561,7 +14561,7 @@ function generateTransformCheck(doc, ctx, schema, accessor) {
   return accessor;
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/api.js
+// ../../../node_modules/zod/v4/core/api.js
 function snapshotChecks(def) {
   if (def.checks)
     def.checks = [...def.checks];
@@ -15620,7 +15620,7 @@ function _stringFormat(Class2, format, fnOrRegex, _params = {}) {
   return inst;
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/to-json-schema.js
+// ../../../node_modules/zod/v4/core/to-json-schema.js
 function assignProps(target, ...sources) {
   for (const source of sources) {
     for (const key of Reflect.ownKeys(source)) {
@@ -16150,7 +16150,7 @@ var createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params) =
   return finalize(ctx, schema);
 };
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/json-schema-processors.js
+// ../../../node_modules/zod/v4/core/json-schema-processors.js
 var narrowMin = (agg, key, value) => {
   if (agg[key] === void 0 || value > agg[key])
     agg[key] = value;
@@ -16898,7 +16898,7 @@ function toJSONSchema(input2, params) {
   return finalize(ctx, input2);
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/json-schema-generator.js
+// ../../../node_modules/zod/v4/core/json-schema-generator.js
 var JSONSchemaGenerator = class {
   /** @deprecated Access via ctx instead */
   get metadataRegistry() {
@@ -16976,10 +16976,10 @@ var JSONSchemaGenerator = class {
   }
 };
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/json-schema.js
+// ../../../node_modules/zod/v4/core/json-schema.js
 var json_schema_exports = {};
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/schemas.js
+// ../../../node_modules/zod/v4/classic/schemas.js
 var schemas_exports2 = {};
 __export(schemas_exports2, {
   ZodAny: () => ZodAny,
@@ -17160,7 +17160,7 @@ __export(schemas_exports2, {
   xor: () => xor
 });
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/checks.js
+// ../../../node_modules/zod/v4/classic/checks.js
 var checks_exports2 = {};
 __export(checks_exports2, {
   endsWith: () => _endsWith,
@@ -17195,7 +17195,7 @@ __export(checks_exports2, {
   uppercase: () => _uppercase
 });
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/errors.js
+// ../../../node_modules/zod/v4/classic/errors.js
 var _installedErrorProtos = /* @__PURE__ */ new WeakSet([Object.prototype, Error.prototype]);
 function _lazyMethod(proto, key, make) {
   Object.defineProperty(proto, key, {
@@ -17241,7 +17241,7 @@ var ZodRealError = /* @__PURE__ */ $constructor("ZodError", initializer2, void 0
   Parent: Error
 });
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/parse.js
+// ../../../node_modules/zod/v4/classic/parse.js
 var parse2 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -17255,7 +17255,7 @@ var safeDecode2 = /* @__PURE__ */ _safeDecode(ZodRealError);
 var safeEncodeAsync2 = /* @__PURE__ */ _safeEncodeAsync(ZodRealError);
 var safeDecodeAsync2 = /* @__PURE__ */ _safeDecodeAsync(ZodRealError);
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/schemas.js
+// ../../../node_modules/zod/v4/classic/schemas.js
 function _ensureDefaultLocale() {
   if (!globalConfig.localeError)
     config(en_default());
@@ -18720,7 +18720,7 @@ function preprocess(fn, schema) {
   });
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/compat.js
+// ../../../node_modules/zod/v4/classic/compat.js
 var ZodIssueCode = {
   invalid_type: "invalid_type",
   too_big: "too_big",
@@ -18746,7 +18746,7 @@ var ZodFirstPartyTypeKind;
 /* @__PURE__ */ (function(ZodFirstPartyTypeKind2) {
 })(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/iso.js
+// ../../../node_modules/zod/v4/classic/iso.js
 var iso_exports = {};
 __export(iso_exports, {
   ZodISODate: () => ZodISODate,
@@ -18771,7 +18771,7 @@ function duration2(params) {
   return _isoDuration(ZodISODuration, params);
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/from-json-schema.js
+// ../../../node_modules/zod/v4/classic/from-json-schema.js
 var z = {
   ...schemas_exports2,
   ...checks_exports2,
@@ -19504,7 +19504,7 @@ function fromJSONSchema(schema, params) {
   return convertSchema(normalized, ctx);
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/visit.js
+// ../../../node_modules/zod/v4/core/visit.js
 var RESOLVING = /* @__PURE__ */ Symbol("z.visit/resolving");
 function visit(schema, fnOrHandlers) {
   const fn = typeof fnOrHandlers === "function" ? fnOrHandlers : (node2, rewritten) => {
@@ -19659,7 +19659,7 @@ function visit(schema, fnOrHandlers) {
   return run(schema);
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/deep-partial.js
+// ../../../node_modules/zod/v4/classic/deep-partial.js
 function deepPartial(schema) {
   return visit(schema, {
     object: (s) => s.partial(),
@@ -19671,7 +19671,7 @@ function deepPartial(schema) {
   });
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/in-out.js
+// ../../../node_modules/zod/v4/classic/in-out.js
 function withChecks(side, checks) {
   if (!checks?.length)
     return side;
@@ -19701,7 +19701,7 @@ function output(schema) {
   });
 }
 
-// ../../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/coerce.js
+// ../../../node_modules/zod/v4/classic/coerce.js
 var coerce_exports = {};
 __export(coerce_exports, {
   bigint: () => bigint3,
@@ -19915,7 +19915,7 @@ var AgentHttpClient = class {
       } catch {
         abort.cancel();
         if (retry && attempt < 2) {
-          await new Promise((resolve2) => setTimeout(resolve2, retryDelayMs(attempt)));
+          await new Promise((resolve3) => setTimeout(resolve3, retryDelayMs(attempt)));
           continue;
         }
         throw new AgentNetworkError("No se pudo conectar con la API de Avileo", {
@@ -19926,7 +19926,7 @@ var AgentHttpClient = class {
       }
       abort.cancel();
       if (retry && isRetryableStatus(response.status) && attempt < 2) {
-        await new Promise((resolve2) => setTimeout(resolve2, retryDelayMs(attempt, response)));
+        await new Promise((resolve3) => setTimeout(resolve3, retryDelayMs(attempt, response)));
         continue;
       }
       let payload;
@@ -19962,7 +19962,8 @@ var AGENT_CAPABILITY_ACTIONS = [
   "inventory:read",
   "inventory:write",
   "payments:read",
-  "payments:write"
+  "payments:write",
+  "sales:read"
 ];
 var AgentCapabilityActionSchema = external_exports.enum(AGENT_CAPABILITY_ACTIONS);
 var AGENT_KEY_MODES = ["read", "mutate"];
@@ -19972,7 +19973,8 @@ var AGENT_KEY_READ_ACTIONS = [
   "catalog:read",
   "assets:read",
   "inventory:read",
-  "payments:read"
+  "payments:read",
+  "sales:read"
 ];
 var AgentGrantedActionsSchema = external_exports.array(AgentCapabilityActionSchema).min(1).max(AGENT_CAPABILITY_ACTIONS.length).refine((actions) => new Set(actions).size === actions.length, {
   message: "Las capacidades no pueden repetirse"
@@ -20772,6 +20774,75 @@ var AgentPaymentMethodDtoSchema = external_exports.object({
   qrRenderUrl: external_exports.string().nullable(),
   habilitado: external_exports.boolean()
 }).strict();
+var uuidSchema2 = external_exports.string().uuid();
+var timestampSchema2 = external_exports.string().datetime({ offset: true });
+var nonEmptyTextSchema2 = external_exports.string().trim().min(1);
+var nonNegativeDecimalStringSchema2 = external_exports.string().regex(/^(?:0|[1-9]\d*)(?:\.\d+)?$/, "Debe ser un decimal no negativo");
+var AgentSalesChannelSchema = external_exports.enum(["web", "tienda"]);
+var agentSaleTypeSchema = external_exports.enum(["instant_sale", "pre_order"]);
+var AgentSalesListQuerySchema = external_exports.object({
+  // Acepta tanto el estado legado como el nombre canónico en v1.
+  status: nonEmptyTextSchema2.max(40).optional(),
+  channel: AgentSalesChannelSchema.optional(),
+  type: agentSaleTypeSchema.optional(),
+  // Rango inclusivo por `since` y exclusivo por `until`.
+  since: timestampSchema2.optional(),
+  until: timestampSchema2.optional(),
+  limit: external_exports.number().int().min(1).max(100).default(20),
+  // Cursor opaco emitido por el backend; no interpretable por el agente.
+  cursor: external_exports.string().min(1).max(512).optional()
+}).strict();
+var AgentCustomerMaskedSchema = external_exports.object({
+  name: external_exports.string().nullable(),
+  phone: external_exports.string().nullable(),
+  address: external_exports.string().nullable()
+}).strict();
+var AgentSaleItemSchema = external_exports.object({
+  productId: uuidSchema2.nullable(),
+  variantId: uuidSchema2.nullable(),
+  name: nonEmptyTextSchema2,
+  variantName: external_exports.string().nullable(),
+  quantity: nonNegativeDecimalStringSchema2,
+  unitPrice: nonNegativeDecimalStringSchema2,
+  lineTotal: nonNegativeDecimalStringSchema2
+}).strict();
+var AgentSaleSummarySchema = external_exports.object({
+  id: uuidSchema2,
+  code: external_exports.string().nullable(),
+  channel: AgentSalesChannelSchema.nullable(),
+  type: agentSaleTypeSchema,
+  // Estado legado de la venta; `commercialStatus` es el canónico actual.
+  legacyStatus: nonEmptyTextSchema2,
+  commercialStatus: external_exports.string().nullable(),
+  paymentStatus: external_exports.string().nullable(),
+  fulfillmentStatus: external_exports.string().nullable(),
+  createdAt: timestampSchema2,
+  currency: external_exports.string().length(3),
+  total: nonNegativeDecimalStringSchema2,
+  itemCount: external_exports.number().int().nonnegative()
+}).strict();
+var AgentSaleTimelineEntrySchema = external_exports.object({
+  at: timestampSchema2,
+  kind: nonEmptyTextSchema2,
+  actorKind: external_exports.string().nullable(),
+  // Nota ya enmascarada por el servidor; nunca PII libre.
+  note: external_exports.string().nullable()
+}).strict();
+var AgentSaleDetailSchema = AgentSaleSummarySchema.extend({
+  subtotal: nonNegativeDecimalStringSchema2,
+  confirmedAt: timestampSchema2.nullable(),
+  // Método de entrega, NO el `fulfillmentSnapshot` crudo.
+  fulfillmentMethod: external_exports.string().nullable(),
+  deliveryDistrict: external_exports.string().nullable(),
+  customer: AgentCustomerMaskedSchema,
+  items: external_exports.array(AgentSaleItemSchema).max(200),
+  timeline: external_exports.array(AgentSaleTimelineEntrySchema).max(200)
+}).strict();
+var AgentSalesPageSchema = external_exports.object({
+  items: external_exports.array(AgentSaleSummarySchema).max(100),
+  total: external_exports.number().int().nonnegative(),
+  nextCursor: external_exports.string().nullable()
+}).strict();
 var AGENT_DEVICE_AUTH_STATUSES = ["pending", "approved", "denied", "expired"];
 var AGENT_DEVICE_AUTH_DEFAULT_PERMISSIONS = [
   ...AGENT_KEY_READ_ACTIONS
@@ -20834,6 +20905,32 @@ var AgentBusinessResource = class {
   profile() {
     return this.http.request("/api/v1/agent/business/profile");
   }
+  /** Diagnostic state of this credential; never returns key material. */
+  credential() {
+    return this.http.request("/api/v1/agent/credential");
+  }
+};
+var AgentSalesResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  list(query = {}) {
+    return this.http.request(
+      `/api/v1/agent/sales${queryString({
+        status: query.status,
+        channel: query.channel,
+        type: query.type,
+        since: query.since,
+        until: query.until,
+        limit: query.limit,
+        cursor: query.cursor
+      })}`
+    );
+  }
+  get(id) {
+    return this.http.request(`/api/v1/agent/sales/${encodeURIComponent(id)}`);
+  }
 };
 async function uploadTemporaryImage(http, file2, options = {}) {
   const body = new FormData();
@@ -21221,6 +21318,7 @@ function createAvileoAgent(config2) {
   const http = new AgentHttpClient(config2);
   return {
     business: new AgentBusinessResource(http),
+    sales: new AgentSalesResource(http),
     operations: new AgentOperationsResource(http),
     products: new AgentProductsResource(http),
     variants: new AgentVariantsResource(http),
@@ -21235,10 +21333,21 @@ function createAvileoAgent(config2) {
 }
 
 // src/config.ts
-import { chmodSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
+import {
+  chmodSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readFileSync,
+  realpathSync,
+  renameSync,
+  statSync,
+  unlinkSync,
+  writeFileSync
+} from "fs";
 import { randomUUID } from "crypto";
-import { homedir } from "os";
-import { dirname, join } from "path";
+import { homedir, tmpdir } from "os";
+import { basename, dirname, join, parse as parse3, resolve } from "path";
 import { isIP } from "net";
 var LOCAL_IPV4_HOST_PATTERN = /^(?:127\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.|100\.(?:6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.)/;
 function isLocalHostname(hostname3) {
@@ -21301,13 +21410,12 @@ function localCredentialPath(env = process.env) {
     "credentials.json"
   );
 }
-function readLocalCredential(env = process.env) {
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync(localCredentialPath(env), "utf8"));
-  } catch {
-    return null;
-  }
+function localCredentialPathSource(env) {
+  if (env.AVILEO_AGENT_CONFIG_PATH?.trim()) return "AVILEO_AGENT_CONFIG_PATH";
+  if (env.XDG_CONFIG_HOME?.trim()) return "XDG_CONFIG_HOME";
+  return "default";
+}
+function parseLocalCredential(parsed) {
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new CliConfigurationError("La credencial local no tiene un formato v\xE1lido");
   }
@@ -21323,6 +21431,60 @@ function readLocalCredential(env = process.env) {
   }
   return { apiKey, baseUrl: normalizeApiBaseUrl(record2.baseUrl) };
 }
+function readCredentialFile(env) {
+  const path = localCredentialPath(env);
+  const pathSource = localCredentialPathSource(env);
+  let raw;
+  try {
+    raw = readFileSync(path, "utf8");
+  } catch (error62) {
+    const errorCode2 = error62?.code;
+    if (errorCode2 === "ENOENT") return { status: "missing", path, pathSource };
+    return {
+      status: "unreadable",
+      path,
+      pathSource,
+      ...typeof errorCode2 === "string" ? { errorCode: errorCode2 } : {}
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return { status: "invalid_json", path, pathSource };
+  }
+  try {
+    return { status: "ok", credential: parseLocalCredential(parsed), path, pathSource };
+  } catch (error62) {
+    const failure2 = error62 instanceof CliConfigurationError ? error62 : new CliConfigurationError("La credencial local no tiene un formato v\xE1lido");
+    return { status: "invalid_shape", path, pathSource, errorCode: failure2.code, error: failure2 };
+  }
+}
+function inspectLocalCredential(env = process.env) {
+  const result = readCredentialFile(env);
+  if (result.status === "ok") {
+    return {
+      status: "ok",
+      credential: result.credential,
+      path: result.path,
+      pathSource: result.pathSource,
+      ...observedCredentialModes(result.path)
+    };
+  }
+  return {
+    status: result.status,
+    path: result.path,
+    pathSource: result.pathSource,
+    ...result.errorCode === void 0 ? {} : { errorCode: result.errorCode },
+    ...result.status === "missing" ? {} : observedCredentialModes(result.path)
+  };
+}
+function readLocalCredential(env = process.env) {
+  const result = readCredentialFile(env);
+  if (result.status === "ok") return result.credential;
+  if (result.error) throw result.error;
+  return null;
+}
 function resolveCredential(env = process.env) {
   const override = overrideBaseUrl(env);
   if (env.AVILEO_AGENT_REQUIRE_EXPLICIT_ORIGIN === "1" && override === void 0) {
@@ -21350,6 +21512,152 @@ function resolveCredential(env = process.env) {
   }
   return { ...local, source: "local" };
 }
+var DEFAULT_CREDENTIAL_PATH_HINT = "~/.config/avileo/credentials.json";
+function formatMode(mode) {
+  const masked = mode & 4095;
+  return masked > 511 ? masked.toString(8) : `0${masked.toString(8).padStart(3, "0")}`;
+}
+function observedCredentialModes(path) {
+  const modes = {};
+  const file2 = statSync(path, { throwIfNoEntry: false });
+  if (file2) modes.fileMode = formatMode(file2.mode);
+  const directory = statSync(dirname(path), { throwIfNoEntry: false });
+  if (directory) modes.directoryMode = formatMode(directory.mode);
+  return modes;
+}
+function sharedTempRoots() {
+  const roots = [];
+  for (const candidate of ["/tmp", "/var/tmp", tmpdir()]) {
+    try {
+      roots.push(realpathSync(candidate));
+    } catch {
+    }
+  }
+  return roots;
+}
+function resolveThroughExistingAncestors(targetPath) {
+  const absolute = resolve(targetPath);
+  const missingSegments = [];
+  let existingAncestor = absolute;
+  while (!existsSync(existingAncestor)) {
+    const parent = dirname(existingAncestor);
+    if (parent === existingAncestor) break;
+    missingSegments.unshift(basename(existingAncestor));
+    existingAncestor = parent;
+  }
+  const realAncestor = realpathSync(existingAncestor);
+  return missingSegments.length === 0 ? realAncestor : resolve(realAncestor, ...missingSegments);
+}
+function findRepositoryAncestor(startPath) {
+  let current = startPath;
+  while (true) {
+    if (statSync(join(current, ".git"), { throwIfNoEntry: false })) return current;
+    const parent = dirname(current);
+    if (parent === current) return null;
+    current = parent;
+  }
+}
+function assertOutsideRepository(resolvedPath) {
+  const repositoryRoot = findRepositoryAncestor(resolvedPath);
+  if (repositoryRoot === null) return;
+  throw new CliConfigurationError(
+    `No se puede guardar la credencial dentro de un repositorio: ${repositoryRoot} contiene .git. Usa la ruta por defecto ${DEFAULT_CREDENTIAL_PATH_HINT} o define AVILEO_AGENT_CONFIG_PATH fuera del \xE1rbol del repositorio.`
+  );
+}
+var UNRESOLVABLE_PARENT_CODES = {
+  EEXIST: true,
+  ELOOP: true,
+  ENOENT: true,
+  ENOTDIR: true
+};
+function findBrokenSymlinkAncestor(targetPath) {
+  const absolute = resolve(targetPath);
+  const segments = [];
+  let current = absolute;
+  while (true) {
+    const parent = dirname(current);
+    if (parent === current) break;
+    segments.unshift(basename(current));
+    current = parent;
+  }
+  let walked = parse3(absolute).root;
+  for (const segment of segments) {
+    walked = join(walked, segment);
+    const stats = lstatSync(walked, { throwIfNoEntry: false });
+    if (!stats) return null;
+    if (!stats.isSymbolicLink()) continue;
+    try {
+      realpathSync(walked);
+    } catch {
+      return walked;
+    }
+  }
+  return null;
+}
+function describeUnresolvableParent(parentPath, error62) {
+  const code = error62?.code;
+  if (typeof code !== "string" || UNRESOLVABLE_PARENT_CODES[code] !== true) return null;
+  const brokenLink = findBrokenSymlinkAncestor(parentPath);
+  const subject = brokenLink === null ? `${parentPath} contiene un enlace simb\xF3lico` : `${brokenLink} es un enlace simb\xF3lico`;
+  return new CliConfigurationError(
+    `No se pudo preparar el directorio de la credencial ${parentPath}: ${subject} roto o circular. Corrige o elimina ese enlace, o usa la ruta por defecto ${DEFAULT_CREDENTIAL_PATH_HINT} o un directorio privado 0700 fuera del repositorio.`
+  );
+}
+function decideParentDirectoryAction(input2) {
+  const fullMode = input2.mode & 4095;
+  if ((fullMode & 63) === 0) return "ok";
+  if (input2.isSharedTempRoot || (fullMode & 512) !== 0) return "refuse-shared";
+  if (input2.ownerUid === input2.processUid) return "repair";
+  return "refuse-foreign";
+}
+function assertPrivateParentDirectory(parentPath) {
+  const stats = statSync(parentPath);
+  const fullMode = stats.mode & 4095;
+  const processUid = typeof process.getuid === "function" ? process.getuid() : -1;
+  const action = decideParentDirectoryAction({
+    mode: fullMode,
+    ownerUid: stats.uid,
+    processUid,
+    isSharedTempRoot: sharedTempRoots().includes(parentPath)
+  });
+  if (action === "ok") return;
+  if (action === "refuse-shared") {
+    throw new CliConfigurationError(
+      `El directorio padre de la credencial es un directorio temporal compartido (modo ${formatMode(fullMode)}) pensado para archivos temporales: no guardes credenciales ah\xED ni cambies sus permisos. Usa un subdirectorio privado 0700, por ejemplo mkdtempSync(join(tmpdir(), 'avileo-')), o la ruta por defecto ${DEFAULT_CREDENTIAL_PATH_HINT}.`
+    );
+  }
+  if (action === "refuse-foreign") {
+    throw new CliConfigurationError(
+      `El directorio de credenciales ${parentPath} tiene permisos ${formatMode(fullMode)} y pertenece a otro usuario (uid ${stats.uid}; este proceso usa uid ${processUid}), as\xED que permite acceso de grupo o de otros usuarios y no se puede reparar autom\xE1ticamente. Usa la ruta por defecto ${DEFAULT_CREDENTIAL_PATH_HINT} o un directorio privado propio 0700.`
+    );
+  }
+  chmodSync(parentPath, 448);
+  const repairedMode = statSync(parentPath).mode & 511;
+  if (repairedMode !== 448) {
+    throw new CliConfigurationError(
+      `El directorio de credenciales ${parentPath} qued\xF3 con permisos ${formatMode(repairedMode)} tras repararlo; se requiere 0700.`
+    );
+  }
+}
+function assertSafeCredentialPath(targetPath) {
+  const resolvedTarget = resolve(targetPath);
+  const parentPath = dirname(resolvedTarget);
+  try {
+    const resolvedParent = resolveThroughExistingAncestors(parentPath);
+    assertOutsideRepository(resolvedParent);
+    mkdirSync(resolvedParent, { recursive: true, mode: 448 });
+    const realParent = realpathSync(resolvedParent);
+    assertOutsideRepository(realParent);
+    assertPrivateParentDirectory(realParent);
+  } catch (error62) {
+    if (error62 instanceof CliConfigurationError) throw error62;
+    throw describeUnresolvableParent(parentPath, error62) ?? error62;
+  }
+}
+function errorCodeOf(error62) {
+  const code = error62?.code;
+  return typeof code === "string" && code.length > 0 ? code : "UNKNOWN";
+}
 function saveLocalCredential(credential, env = process.env) {
   const apiKey = normalizeAgentKey(
     credential.apiKey,
@@ -21357,13 +21665,46 @@ function saveLocalCredential(credential, env = process.env) {
   );
   const baseUrl = normalizeApiBaseUrl(credential.baseUrl);
   const path = localCredentialPath(env);
-  mkdirSync(dirname(path), { recursive: true, mode: 448 });
+  assertSafeCredentialPath(path);
   const temporaryPath = `${path}.${randomUUID()}.tmp`;
-  writeFileSync(temporaryPath, `${JSON.stringify({ apiKey, baseUrl })}
+  try {
+    writeFileSync(temporaryPath, `${JSON.stringify({ apiKey, baseUrl })}
 `, { mode: 384 });
-  chmodSync(temporaryPath, 384);
-  renameSync(temporaryPath, path);
-  chmodSync(path, 384);
+    chmodSync(temporaryPath, 384);
+    renameSync(temporaryPath, path);
+  } catch (error62) {
+    throw new CliConfigurationError(
+      `No se pudo guardar la credencial local en ${path} (${errorCodeOf(error62)}).`
+    );
+  } finally {
+    try {
+      unlinkSync(temporaryPath);
+    } catch {
+    }
+  }
+  try {
+    chmodSync(path, 384);
+  } catch (error62) {
+    throw new CliConfigurationError(
+      `La credencial local en ${path} se guard\xF3 pero no se pudo ajustar a 0600 (${errorCodeOf(error62)}). Ejecuta chmod 600 ${path}.`
+    );
+  }
+  const finalMode = statSync(path).mode & 511;
+  if (finalMode !== 384) {
+    throw new CliConfigurationError(
+      `La credencial local en ${path} qued\xF3 con permisos ${formatMode(finalMode)}; se requiere 0600. Ejecuta chmod 600 ${path}.`
+    );
+  }
+}
+function inspectLocalCredentialPermissions(env = process.env) {
+  const path = localCredentialPath(env);
+  const { fileMode, directoryMode } = observedCredentialModes(path);
+  if (!fileMode || !directoryMode) {
+    throw new CliConfigurationError(
+      `No se pudieron leer los permisos de la credencial local en ${path}`
+    );
+  }
+  return { path, fileMode, directoryMode };
 }
 function removeLocalCredential(env = process.env) {
   try {
@@ -21548,13 +21889,41 @@ function registerBusinessCommands(root, getClient) {
 // src/commands/catalog.ts
 import { createHash } from "crypto";
 import { readFile as readFile2, stat } from "fs/promises";
-import { basename as basename2, extname } from "path";
+import { basename as basename3, extname } from "path";
+
+// src/commands/import-example.ts
+var CATALOG_IMPORT_EXAMPLE = {
+  source: "supplier-file",
+  products: [
+    {
+      externalRef: { source: "supplier-file", externalId: "SKU-001" },
+      name: "Arroz extra 1 kg",
+      description: "Arroz extra de grano largo, bolsa de 1 kg.",
+      category: { name: "Abarrotes" },
+      unit: "unidad",
+      basePrice: "6.50",
+      costPrice: "5.20",
+      isActive: true,
+      images: [{ kind: "file", path: "./arroz-extra-1kg.jpg" }],
+      variants: [
+        {
+          name: "Bolsa 1 kg",
+          sku: "SKU-001-1KG",
+          unitQuantity: "1",
+          price: "6.50",
+          initialStock: "20",
+          isActive: true
+        }
+      ]
+    }
+  ]
+};
 
 // src/commands/import-images.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { constants } from "fs";
 import { open as open2 } from "fs/promises";
-import { basename, dirname as dirname2, resolve } from "path";
+import { basename as basename2, dirname as dirname2, resolve as resolve2 } from "path";
 var MAX_IMAGE_BYTES = 5 * 1024 * 1024;
 var MAX_TEMPORARY_IMAGES = 100;
 var MAX_TEMPORARY_BYTES = 100 * 1024 * 1024;
@@ -21603,7 +21972,7 @@ async function readImage(path, remainingBytes) {
     const bytes = buffer.subarray(0, length);
     const mimeType = imageMimeType(bytes);
     if (!mimeType) invalidInput("Solo se permiten im\xE1genes JPEG, PNG, WebP o GIF");
-    return new File([bytes], basename(path), { type: mimeType });
+    return new File([bytes], basename2(path), { type: mimeType });
   } catch (error62) {
     if (error62 instanceof CliProtocolError) throw error62;
     invalidInput("No se pudo leer una imagen local del cat\xE1logo");
@@ -21614,7 +21983,7 @@ async function readImage(path, remainingBytes) {
 function localImageSources(inputPath) {
   const paths = /* @__PURE__ */ new Map();
   const placeholders = /* @__PURE__ */ new Map();
-  const baseDirectory = dirname2(resolve(inputPath));
+  const baseDirectory = dirname2(resolve2(inputPath));
   const normalizeImages = (value) => {
     if (!Array.isArray(value)) return value;
     return value.map((source) => {
@@ -21622,7 +21991,7 @@ function localImageSources(inputPath) {
       if (Object.keys(source).some((key) => key !== "kind" && key !== "path") || typeof source.path !== "string" || source.path.trim().length === 0 || source.path.includes("\0")) {
         invalidInput("Cada imagen local requiere \xFAnicamente kind: file y un path v\xE1lido");
       }
-      const path = resolve(baseDirectory, source.path);
+      const path = resolve2(baseDirectory, source.path);
       let placeholder = paths.get(path);
       if (!placeholder) {
         placeholder = randomUUID2();
@@ -22081,7 +22450,7 @@ function registerAssetCommands(catalog, getClient) {
     if (!wantsApply(command)) {
       emitSuccess({
         validated: "local",
-        file: basename2(filePath),
+        file: basename3(filePath),
         sizeBytes: fileStat.size
       });
       return;
@@ -22095,7 +22464,7 @@ function registerAssetCommands(catalog, getClient) {
       );
     }
     const contents = await readFile2(filePath);
-    const file2 = new File([contents], basename2(filePath), { type: mimeType });
+    const file2 = new File([contents], basename3(filePath), { type: mimeType });
     const rawApprovalId = command.optsWithGlobals().approvalId;
     if (typeof rawApprovalId === "string") {
       emitSuccess(await getClient().assets.upload(file2, requireId(rawApprovalId, "approvalId")));
@@ -22187,6 +22556,7 @@ function registerImportCommands(catalog, getClient) {
       );
     }
   );
+  imports.command("example").description("Imprime el payload can\xF3nico de una importaci\xF3n").action(() => emitSuccess(CATALOG_IMPORT_EXAMPLE));
   imports.command("status <importId>").action(async (importId) => {
     emitSuccess(await getClient().imports.get(requireId(importId, "importId")));
   });
@@ -22222,8 +22592,59 @@ function registerOperationBatchCommands(operation, getClient) {
   });
 }
 
+// src/commands/sales.ts
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function parseLimit(value) {
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed < 1 || parsed > 100) {
+    throw new CliProtocolError("CLI_VALIDATION_ERROR", "--limit debe ser un entero entre 1 y 100", {
+      limit: value
+    });
+  }
+  return parsed;
+}
+function parseChannel(value) {
+  if (value === "web" || value === "tienda") return value;
+  throw new CliProtocolError("CLI_VALIDATION_ERROR", "--channel debe ser web o tienda", {
+    channel: value
+  });
+}
+function parseType(value) {
+  if (value === "instant_sale" || value === "pre_order") return value;
+  throw new CliProtocolError("CLI_VALIDATION_ERROR", "--type debe ser instant_sale o pre_order", {
+    type: value
+  });
+}
+function requireUuid(value, name) {
+  const trimmed = value.trim();
+  if (!UUID_PATTERN.test(trimmed)) {
+    throw new CliProtocolError("CLI_VALIDATION_ERROR", `${name} debe ser un UUID v\xE1lido`);
+  }
+  return trimmed;
+}
+function registerSalesCommands(root, getClient) {
+  const sales = root.command("sales").description("Consulta ventas del negocio (solo lectura, tel\xE9fono parcialmente enmascarado)");
+  sales.command("list").description("Lista ventas con filtros opcionales").option("--status <status>", "Estado de la venta").option("--channel <channel>", "Canal de la venta (web|tienda)", parseChannel).option("--type <type>", "Tipo de venta (instant_sale|pre_order)", parseType).option("--since <iso>", "Fecha m\xEDnima (ISO 8601)").option("--until <iso>", "Fecha m\xE1xima (ISO 8601)").option("--limit <number>", "M\xE1ximo de resultados (1-100)", parseLimit).option("--cursor <cursor>", "Cursor de paginaci\xF3n").action(async (options) => {
+    emitSuccess(
+      await getClient().sales.list({
+        ...options.status === void 0 ? {} : { status: options.status },
+        ...options.channel === void 0 ? {} : { channel: options.channel },
+        ...options.type === void 0 ? {} : { type: options.type },
+        ...options.since === void 0 ? {} : { since: options.since },
+        ...options.until === void 0 ? {} : { until: options.until },
+        ...options.limit === void 0 ? {} : { limit: options.limit },
+        ...options.cursor === void 0 ? {} : { cursor: options.cursor }
+      })
+    );
+  });
+  sales.command("get <id>").description("Consulta el detalle de una venta").action(async (id) => {
+    emitSuccess(await getClient().sales.get(requireUuid(id, "id")));
+  });
+}
+
 // src/commands/auth.ts
 import { spawn } from "child_process";
+import { dirname as dirname3 } from "path";
 function safeStartResult(start, browserOpened) {
   return {
     status: "pending",
@@ -22249,7 +22670,7 @@ function safeFinalResult(start, browserOpened, result) {
   };
 }
 function sleep(milliseconds) {
-  return new Promise((resolve2) => setTimeout(resolve2, milliseconds));
+  return new Promise((resolve3) => setTimeout(resolve3, milliseconds));
 }
 function readAgentKeyFromTty(prompt = "Agent Key de Avileo: ") {
   if (!process.stdin.isTTY || !process.stderr.isTTY) {
@@ -22258,7 +22679,7 @@ function readAgentKeyFromTty(prompt = "Agent Key de Avileo: ") {
       "auth configure requiere una terminal interactiva; usa AVILEO_AGENT_API_KEY en CI/CD"
     );
   }
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     let value = "";
     const input2 = process.stdin;
     const output2 = process.stderr;
@@ -22272,7 +22693,7 @@ function readAgentKeyFromTty(prompt = "Agent Key de Avileo: ") {
       cleanup();
       output2.write("\n");
       if (result instanceof Error) reject(result);
-      else resolve2(result);
+      else resolve3(result);
     };
     const onData = (chunk) => {
       for (const character of String(chunk)) {
@@ -22303,12 +22724,12 @@ function readAgentKeyFromTty(prompt = "Agent Key de Avileo: ") {
   });
 }
 async function openWithExecutable(command, args) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const child = spawn(command, args, { stdio: "ignore", shell: false, detached: true });
-    child.once("error", () => resolve2(false));
+    child.once("error", () => resolve3(false));
     child.once("spawn", () => {
       child.unref();
-      resolve2(true);
+      resolve3(true);
     });
   });
 }
@@ -22400,7 +22821,15 @@ async function login(options) {
       );
     }
     saveLocalCredential({ apiKey: result.agentKey, baseUrl }, options.env);
-    emitSuccess({ ...safeFinalResult(start, browserOpened, result), baseUrl });
+    const permissions = inspectLocalCredentialPermissions(options.env);
+    emitSuccess({
+      ...safeFinalResult(start, browserOpened, result),
+      baseUrl,
+      credentialPath: permissions.path,
+      credentialMode: permissions.fileMode,
+      credentialDirMode: permissions.directoryMode,
+      durability: "La credencial qued\xF3 guardada solo en este equipo: si se pierde el archivo tendr\xE1s que emparejar de nuevo con \xABavileo auth login\xBB."
+    });
     return;
   }
   throw new CliProtocolError("CLI_AUTH_TIMEOUT", "La autorizaci\xF3n expir\xF3 antes de ser aprobada");
@@ -22410,33 +22839,205 @@ async function configure(options) {
   assertIsolatedDevelopmentPairing(options);
   const apiKey = await options.readSecret("Agent Key de Avileo (no se mostrar\xE1): ");
   saveLocalCredential({ apiKey, baseUrl }, options.env);
+  const permissions = inspectLocalCredentialPermissions(options.env);
   emitSuccess({
     configured: true,
     source: "local",
     baseUrl,
-    credentialPath: localCredentialPath(options.env)
+    credentialPath: localCredentialPath(options.env),
+    credentialMode: permissions.fileMode,
+    credentialDirMode: permissions.directoryMode
   });
 }
+var PORTAL_URL_PLACEHOLDER = "<URL_DEL_PORTAL>";
+function inspectedState(inspection) {
+  switch (inspection.status) {
+    case "ok":
+      return "absent";
+    case "missing":
+      return "absent";
+    default:
+      return inspection.status;
+  }
+}
+function defaultCredentialPath(env) {
+  return localCredentialPath({ XDG_CONFIG_HOME: env.XDG_CONFIG_HOME });
+}
+function permissionWarning(inspection) {
+  const directoryPath = dirname3(inspection.path);
+  const { fileMode, directoryMode } = inspection;
+  const warnings = [];
+  if (fileMode !== void 0 && (Number.parseInt(fileMode, 8) & 63) !== 0) {
+    warnings.push(
+      `El archivo ${inspection.path} tiene permisos ${fileMode}; ejecuta chmod 600 ${inspection.path}.`
+    );
+  }
+  if (directoryMode !== void 0 && (Number.parseInt(directoryMode, 8) & 63) !== 0) {
+    warnings.push(
+      `El directorio ${directoryPath} tiene permisos ${directoryMode}; ejecuta chmod 700 ${directoryPath}.`
+    );
+  }
+  return warnings.length > 0 ? ` ${warnings.join(" ")}` : "";
+}
+function defaultCredentialRecovery(env) {
+  const defaultInspection = inspectLocalCredential({ XDG_CONFIG_HOME: env.XDG_CONFIG_HOME });
+  if (defaultInspection.status !== "ok") return "";
+  return ` Hay una credencial legible en la ruta por defecto (${defaultInspection.path}); para usarla ejecuta \`env -u AVILEO_AGENT_CONFIG_PATH avileo auth status\`.`;
+}
+function nextStepForInspection(inspection, env) {
+  switch (inspection.status) {
+    case "missing":
+      if (inspection.pathSource === "AVILEO_AGENT_CONFIG_PATH") {
+        return `AVILEO_AGENT_CONFIG_PATH apunta a ${inspection.path}, pero ese archivo no existe. Ejecuta \`avileo auth login --base-url ${PORTAL_URL_PLACEHOLDER}\` para crearlo en esa ruta, o quita la variable AVILEO_AGENT_CONFIG_PATH para volver a la ruta por defecto (${defaultCredentialPath(env)}).` + defaultCredentialRecovery(env);
+      }
+      return `No hay una credencial guardada en ${inspection.path}. Ejecuta \`avileo auth login --base-url ${PORTAL_URL_PLACEHOLDER}\` para vincular esta m\xE1quina.`;
+    case "unreadable":
+      return `No se pudo leer ${inspection.path}${inspection.errorCode ? ` (${inspection.errorCode})` : ""}. Revisa los permisos del archivo y vuelve a ejecutar \`avileo auth login\`.`;
+    case "invalid_json":
+      return `El archivo ${inspection.path} no contiene JSON v\xE1lido. Vuelve a ejecutar \`avileo auth login\` para regenerarlo.`;
+    case "invalid_shape":
+      return `La credencial en ${inspection.path} no es una Agent Key v\xE1lida o le falta el origen vinculado. Vuelve a ejecutar \`avileo auth login --base-url ${PORTAL_URL_PLACEHOLDER}\`.`;
+    case "ok":
+      return "La credencial local est\xE1 disponible.";
+  }
+}
+function describeResolutionFailure(error62, inspection, env) {
+  const originIssue = error62 instanceof CliOriginConflictError || error62 instanceof CliOriginUnsupportedError;
+  if (originIssue || env.AVILEO_AGENT_API_KEY?.trim()) {
+    return { state: "invalid", nextStep: error62.message };
+  }
+  if (inspection.status !== "ok") {
+    return {
+      state: inspectedState(inspection),
+      nextStep: nextStepForInspection(inspection, env)
+    };
+  }
+  return { state: "invalid", nextStep: error62.message };
+}
+function lookupFailureState(error62) {
+  if (error62 instanceof AgentNetworkError) return "unreachable";
+  if (error62 instanceof AgentAuthenticationError || error62 instanceof AgentPermissionError) {
+    return "invalid";
+  }
+  const status2 = error62?.status;
+  if (status2 === 401 || status2 === 403) return "invalid";
+  return "unreachable";
+}
+function errorCode(error62) {
+  const code = error62 && typeof error62 === "object" && "code" in error62 ? error62.code : void 0;
+  return typeof code === "string" ? code : "LOOKUP_FAILED";
+}
+function credentialDiagnostic(value) {
+  if (!value || typeof value !== "object") return null;
+  const record2 = value;
+  const state = record2.state;
+  if (state !== "active" && state !== "expired" && state !== "revoked") return null;
+  return {
+    state,
+    expiresAt: typeof record2.expiresAt === "string" ? record2.expiresAt : null
+  };
+}
+function isRejectedCredential(error62) {
+  if (error62 instanceof AgentAuthenticationError || error62 instanceof AgentPermissionError) {
+    return true;
+  }
+  const status2 = error62?.status;
+  return status2 === 401 || status2 === 403;
+}
+function nextStepForStatus(state, baseUrl) {
+  if (state === "expired") {
+    return `La Agent Key expir\xF3. Renu\xE9vala volviendo a vincular esta m\xE1quina con \`avileo auth login --base-url ${PORTAL_URL_PLACEHOLDER}\`.`;
+  }
+  if (state === "revoked") {
+    return `La Agent Key fue revocada. Vuelve a vincular esta m\xE1quina con \`avileo auth login --base-url ${PORTAL_URL_PLACEHOLDER}\`.`;
+  }
+  if (state === "invalid") return lookupNextStep("invalid", baseUrl);
+  if (state === "unreachable") return lookupNextStep("unreachable", baseUrl);
+  return lookupNextStep("active", baseUrl);
+}
+function lookupNextStep(state, baseUrl) {
+  if (state === "active") {
+    return `La credencial responde contra ${baseUrl}; no hay nada que hacer.`;
+  }
+  if (state === "invalid") {
+    return `El origen ${baseUrl} rechaz\xF3 la credencial. Vuelve a vincular esta m\xE1quina con \`avileo auth login --base-url ${PORTAL_URL_PLACEHOLDER}\`; la clave puede haber sido revocada.`;
+  }
+  return `No se pudo contactar ${baseUrl}. Verifica la conectividad o AVILEO_AGENT_BASE_URL y reintenta con \`avileo auth status\`.`;
+}
 async function status(options) {
-  const credential = resolveCredential(options.env);
+  const inspection = inspectLocalCredential(options.env);
+  const permissionWarningSuffix = permissionWarning(inspection);
+  let credential = null;
+  let resolution;
+  try {
+    credential = resolveCredential(options.env);
+  } catch (error62) {
+    if (!(error62 instanceof CliConfigurationError)) throw error62;
+    resolution = describeResolutionFailure(error62, inspection, options.env);
+  }
   if (!credential) {
-    emitSuccess({ configured: false, source: null, business: null });
+    const nextStep = resolution?.nextStep ?? nextStepForInspection(inspection, options.env);
+    emitSuccess({
+      configured: false,
+      state: resolution?.state ?? inspectedState(inspection),
+      source: null,
+      credentialPath: inspection.path,
+      pathSource: inspection.pathSource,
+      credentialMode: inspection.fileMode,
+      credentialDirMode: inspection.directoryMode,
+      baseUrl: null,
+      business: null,
+      nextStep: `${nextStep}${permissionWarningSuffix}`
+    });
     return;
   }
+  const baseUrl = credential.baseUrl ?? AVILEO_AGENT_API_URL;
+  const client = options.getClient();
   let business = null;
   let businessLookupError;
+  let state = "active";
+  let diagnostic = null;
   try {
-    business = await options.getClient().business.get();
+    diagnostic = credentialDiagnostic(await client.business.credential());
   } catch (error62) {
-    const code = error62 && typeof error62 === "object" && "code" in error62 ? error62.code : void 0;
-    businessLookupError = typeof code === "string" ? code : "LOOKUP_FAILED";
+    if (isRejectedCredential(error62)) {
+      state = "invalid";
+      businessLookupError = errorCode(error62);
+    }
   }
+  if (state !== "invalid") {
+    if (diagnostic) {
+      state = diagnostic.state;
+    } else {
+      try {
+        business = await client.business.get();
+      } catch (error62) {
+        businessLookupError = errorCode(error62);
+        state = lookupFailureState(error62);
+      }
+    }
+  }
+  if (diagnostic?.state === "active") {
+    try {
+      business = await client.business.get();
+    } catch (error62) {
+      businessLookupError = errorCode(error62);
+    }
+  }
+  const resolvedNextStep = nextStepForStatus(state, baseUrl);
   emitSuccess({
     configured: true,
-    source: credential.source,
-    baseUrl: credential.baseUrl ?? AVILEO_AGENT_API_URL,
+    state,
+    source: credential.source === "environment" ? "env" : "local",
+    credentialPath: inspection.path,
+    pathSource: inspection.pathSource,
+    credentialMode: inspection.fileMode,
+    credentialDirMode: inspection.directoryMode,
+    baseUrl,
     business,
-    ...businessLookupError ? { businessLookupError } : {}
+    ...businessLookupError ? { businessLookupError } : {},
+    ...diagnostic ? { expiresAt: diagnostic.expiresAt } : {},
+    nextStep: `${resolvedNextStep}${permissionWarningSuffix}`
   });
 }
 async function logout(options) {
@@ -22500,6 +23101,7 @@ function createProgram(options = {}) {
     json: () => Boolean(program.opts().json)
   });
   registerBusinessCommands(program, getClient);
+  registerSalesCommands(program, getClient);
   registerCatalogCommands(program, getClient);
   const operation = program.command("operation").description("Consulta y aplica operaciones aprobadas en Avileo");
   registerOperationBatchCommands(operation, getClient);
@@ -22528,8 +23130,8 @@ function createProgram(options = {}) {
       return await parseAsync3(...args);
     } catch (error62) {
       if (error62 instanceof CliVersionRequested) return program;
-      const errorCode = typeof error62 === "object" && error62 !== null && "code" in error62 ? String(error62.code) : "";
-      if (errorCode === "commander.helpDisplayed" || errorCode === "commander.version")
+      const errorCode2 = typeof error62 === "object" && error62 !== null && "code" in error62 ? String(error62.code) : "";
+      if (errorCode2 === "commander.helpDisplayed" || errorCode2 === "commander.version")
         return program;
       emitFailure(toFailure(error62));
       process.exitCode = exitCodeFor(error62);